keri-ts 1.0.0 → 2.0.1

package/types/app/{ipex-credentialing.d.ts → ipex/ipex-credentialing.d.ts}

@@ -9,10 +9,10 @@ import type { Operation } from "effection";
  * - keeps registry, wallet, and verifier persistence in VDR modules
  */
 import { SerderACDC, SerderKERI, type Versionage } from "cesr-ts";
-import type { Reger } from "../db/reger.js";
-import { type Hab, type Habery } from "./habbing.js";
+import type { Reger } from "../../db/reger.js";
+import { type Hab, type Habery } from "../identity/habbing.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
 import { type IpexBuilderOptions } from "./ipexing.js";
-import type { Reactor } from "./reactor.js";
 /** Body-first embedded bytes plus the context needed to parse their attachments. */
 export interface CredentialArtifact {
     wire: Uint8Array;
@@ -39,6 +39,7 @@ export interface CredentialGrantMessage {
 export interface CredentialAdmitMessage {
     admit: SerderKERI;
     attachments: Uint8Array;
+    /** Empty when group orchestration defers signing. */
     wire: Uint8Array;
 }
 /** Builder options for credential-bearing grants. */
@@ -64,6 +65,13 @@ export declare function credentialStreamMessages(hby: Habery, reger: Reger, cred
 export declare function credentialPresentationSupportMessages(hby: Habery, reger: Reger, creder: SerderACDC, recipient: string, gvrsn?: Versionage): Uint8Array[];
 /** Build grant-embedded `acdc`, `iss`, and `anc` artifacts for one credential. */
 export declare function credentialPresentationArtifacts(hby: Habery, reger: Reger, credentialSaidValue: string, gvrsn?: Versionage): CredentialPresentationArtifacts;
+/**
+ * Check a grant against this member's verified credential and accepted issuer/TEL
+ * evidence before signing. A group holder may present another issuer's credential.
+ * Optional legacy embeds/proofs may be omitted when that authority is already
+ * local; supplied bodies and source seals must agree with it. Nothing is written.
+ */
+export declare function credentialGrantReady(hby: Habery, reger: Reger, grant: SerderKERI, attachments: Uint8Array, genus: Versionage): boolean;
 /** Build a signed `/ipex/grant` message with embedded credential artifacts. */
 export declare function ipexCredentialGrant(args: {
     hby: Habery;
@@ -75,18 +83,37 @@ export declare function ipexCredentialGrant(args: {
     options?: IpexCredentialGrantOptions;
     sign?: boolean;
 }): CredentialGrantMessage;
-/** Build a signed `/ipex/admit` response for an accepted grant. */
+/**
+ * Validate a supplied accepted grant's recipient and wallet obligation before signing.
+ * Explicit no-wait authoring may skip the saved marker; it does not establish
+ * wallet acceptance. Peer approval always checks its own wallet independently.
+ */
+export declare function validateAdmitGrant(grant: SerderKERI, recipient: string, reger: Reger, requireSaved?: boolean): string;
+/** Build an admit after validating its grant; group callers defer the endorsement. */
 export declare function ipexCredentialAdmit(args: {
     hab: Hab;
     reger: Reger;
     grant: SerderKERI;
     message?: string;
     options?: IpexCredentialAdmitOptions;
+    /** Leave wire empty so group orchestration can select/reuse the member contribution. */
+    sign?: boolean;
 }): CredentialAdmitMessage;
-/** Parse grant-embedded artifacts in KERIpy admit order: `anc`, `iss`, `acdc`. */
-export declare function processCredentialPresentationArtifacts(reactor: Reactor, artifacts: CredentialPresentationArtifacts): Operation<void>;
+/**
+ * Parse grant-embedded artifacts in KERIpy admit order: `anc`, `iss`, `acdc`.
+ *
+ * @param protocol Borrowed shared protocol processor; this operation owns its parser and input-specific Kevery.
+ * @param artifacts Grant-embedded anchor, issuance and credential streams in their named fields.
+ */
+export declare function processCredentialPresentationArtifacts(protocol: ProtocolProcessor, artifacts: CredentialPresentationArtifacts): Operation<void>;
 /** Rebuild grant-embedded `anc`, `iss`, and `acdc` streams from exchange storage. */
 export declare function storedGrantArtifacts(hby: Habery, grant: SerderKERI, gvrsn?: Versionage): CredentialPresentationArtifacts;
+/**
+ * Decode the supplied grant's bodies and counted path groups without storage or
+ * admission. Approval passes the selected proposal's own evidence; stored replay
+ * passes its retained LMDB groups. Neither source can substitute for the other.
+ */
+export declare function grantPresentationArtifacts(grant: SerderKERI, pathed: readonly Uint8Array[], gvrsn?: Versionage): CredentialPresentationArtifacts;
 /** Extract the embedded credential SAID from an accepted `/ipex/grant`. */
 export declare function credentialSaidFromGrant(grant: SerderKERI): string | null;
 /** Return a raw exported credential message by SAID. */

package/types/app/ipex/ipex-credentialing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-credentialing.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-credentialing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C;;;;;;;;GAQG;AACH,OAAO,EAOL,UAAU,EACV,UAAU,EACV,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AAIjB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAI/C,OAAO,EAA8B,KAAK,GAAG,EAAE,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE3F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAG5E,OAAO,EAAkC,KAAK,kBAAkB,EAA+B,MAAM,cAAc,CAAC;AAIpH,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,+BAA+B;IAC9C,6DAA6D;IAC7D,IAAI,EAAE,kBAAkB,CAAC;IACzB,yEAAyE;IACzE,GAAG,EAAE,kBAAkB,CAAC;IACxB,2CAA2C;IAC3C,GAAG,EAAE,kBAAkB,CAAC;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,UAAU,CAAC;IACxB,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,+BAA+B,CAAC;IAC3C,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,UAAU,CAAC;IACxB,qDAAqD;IACrD,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,qDAAqD;AACrD,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IACpE,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B;AAED,sEAAsE;AACtE,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IACpE,gFAAgF;IAChF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,6EAA6E;AAC7E,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,GAChB,UAAU,EAAE,CAgCd;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,UAAqB,GAC3B,UAAU,EAAE,CAWd;AAED,2EAA2E;AAC3E,wBAAgB,qCAAqC,CACnD,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,UAAqB,GAC3B,UAAU,EAAE,CAYd;AAED,kFAAkF;AAClF,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,mBAAmB,EAAE,MAAM,EAC3B,KAAK,GAAE,UAAqB,GAC3B,+BAA+B,CAsCjC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,UAAU,EACvB,KAAK,EAAE,UAAU,GAChB,OAAO,CA+CT;AAeD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,GAAG,CAAC;IACT,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,sBAAsB,CAyCzB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,UAAO,GAAG,MAAM,CAWlH;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,GAAG,EAAE,GAAG,CAAC;IACT,KAAK,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,wFAAwF;IACxF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,sBAAsB,CAYzB;AAED;;;;;GAKG;AACH,wBAAiB,sCAAsC,CACrD,QAAQ,EAAE,iBAAiB,EAC3B,SAAS,EAAE,+BAA+B,GACzC,SAAS,CAAC,IAAI,CAAC,CASjB;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,UAAU,EACjB,KAAK,GAAE,UAAqB,GAC3B,+BAA+B,CAGjC;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,KAAK,GAAE,UAAqB,GAC3B,+BAA+B,CAajC;AAED,2EAA2E;AAC3E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAMxE;AAED,wDAAwD;AACxD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,GAAG,UAAU,CAE7F"}

package/types/app/ipex/ipex-graph.d.ts

@@ -0,0 +1,28 @@
+/** Borrowed IPEX frame DAGs, negotiated disclosure paths and traversal policy. */
+import { type CesrFrame, SerderACDC } from "cesr-ts";
+import { type AcdcGraph } from "../../acdc/chaining.js";
+/** One node selection: schema query, graph path and relative disclosure paths. */
+export type DisclosurePlan = readonly (readonly [schema: string, path: string, fields: readonly string[]])[];
+/** Graph indexes borrow the original frames and never transfer or dispose payload owners. */
+export interface IpexGraph extends AcdcGraph {
+    nodes: ReadonlyMap<string, CesrFrame & {
+        body: SerderACDC;
+    }>;
+}
+/** Empty UUID marks field-map metadata; fixed-field public credentials keep that slot empty too. */
+export declare function isIpexMetadata(node: SerderACDC): boolean;
+/** Offers carry bodies only; empty counted feet convey no child evidence. */
+export declare function hasIpexNodeAttachments(frame: CesrFrame): boolean;
+/** Validate disclosure-query shape; actual schema commitments are checked against disclosed nodes. */
+export declare function validDisclosurePlan(value: unknown): value is DisclosurePlan;
+/** Decode exactly one wire DAG without accepting the retired flat q.dp shape. */
+export declare function singleDagDisclosurePlan(value: unknown): DisclosurePlan | null;
+/**
+ * Index unique disclosed credential nodes and walk their reachable graph in BFS order.
+ * Offers may omit far nodes; grants require every referenced node. Nested ownership
+ * does not make these nodes independently accepted runtime messages.
+ */
+export declare function walkIpexGraph(origin: string, nests: readonly CesrFrame[], closed: boolean): IpexGraph | null;
+/** Select every disclosed node in exact BFS order using literal SAD paths and virtual far-node hops. */
+export declare function verifyIpexDisclosure(plan: DisclosurePlan, origin: string, graph: IpexGraph): boolean;
+//# sourceMappingURL=ipex-graph.d.ts.map

package/types/app/ipex/ipex-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-graph.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-graph.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,KAAK,SAAS,EAAyC,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAA4C,KAAK,SAAS,EAAmB,MAAM,wBAAwB,CAAC;AAEnH,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7G,6FAA6F;AAC7F,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CAC9D;AAGD,oGAAoG;AACpG,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAExD;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAGhE;AAUD,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAyB3E;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAE7E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,SAAS,EAAE,EAC3B,MAAM,EAAE,OAAO,GACd,SAAS,GAAG,IAAI,CAgElB;AAaD,wGAAwG;AACxG,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,GACf,OAAO,CAqET"}

package/types/app/ipex/ipex-grouping.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Group IPEX workflow orchestration.
+ *
+ * This module owns multisig coordination around embedded `/ipex/*` messages.
+ * CLI adapters supply parsed options and output/file handling; this service
+ * signs, publishes and sends completed group IPEX messages. CLI orchestration
+ * owns timed waits and worker lifetimes. Approval borrows explicit semantic,
+ * delivery and credential owners; its byte-input context belongs to the operation.
+ */
+import { SerderKERI, type Versionage } from "cesr-ts";
+import { type Operation } from "effection";
+import type { RegistryStore } from "../../acdc/registering.js";
+import type { Baser } from "../../db/basing.js";
+import type { Reger } from "../../db/reger.js";
+import type { Poster } from "../delivery/forwarding.js";
+import type { Exchanger } from "../exchanges/exchanging.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import { type GroupSendResult } from "../multisig/multisig-messaging.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+/** Recheck current graph authorization at an accepted group's new delivery, output or consent action. */
+export declare function requireAcdcV2GroupUse(hby: Habery, protocol: ProtocolProcessor, embedded: SerderKERI): void;
+/** Approve exactly one ACDC v2 IPEX stream before adding this member's signature; no new acceptance rows are manufactured. */
+export declare function prepareAcdcV2GroupIpex(hby: Habery, protocol: ProtocolProcessor, group: Hab, raw: Uint8Array): Operation<Uint8Array | null>;
+export interface MultisigIpexApprovalOptions {
+    publish?: boolean;
+    sendLead?: boolean;
+    gvrsn?: Versionage;
+}
+export interface MultisigIpexApprovalResult extends GroupSendResult {
+    accepted: boolean;
+    /** Null while this member lacks required evidence, even if other members completed the child. */
+    approved: Uint8Array | null;
+}
+/**
+ * Approve one pending multisig wrapper around an embedded IPEX message.
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param protocol Borrowed semantic owner; this approval creates its own byte-input context.
+ * @param postman Borrowed delivery owner; the caller runs and joins its worker.
+ * @param reger Explicit legacy store, required for grant approval/delivery and fresh admit approval.
+ * @param wrapper Accepted multisig exchange carrying the proposed IPEX child.
+ * @param options Approval/genus policy used for the existing group workflow.
+ * @returns Approval and current group/protocol completion information.
+ */
+export declare function approveMultisigIpex(hby: Habery, protocol: ProtocolProcessor, postman: Poster, reger: Reger | null, wrapper: SerderKERI, options?: MultisigIpexApprovalOptions): Operation<MultisigIpexApprovalResult>;
+/** Read the exact stored v2 child, or decode the separately framed legacy embed. */
+export declare function storedMultisigIpexBody(db: Baser, wrapper: SerderKERI): SerderKERI | null;
+/**
+ * Reuse this member's verified stored contribution, or sign its first partial.
+ * Group and member rotation cannot replace a recorded signature. Peer proof
+ * bytes remain distinct input; only a genuine local signature permits reuse.
+ */
+export declare function groupIpexPartial(hby: Habery, groupHab: Hab, embedded: SerderKERI, attachments?: Uint8Array, gvrsn?: Versionage): Uint8Array;
+/** Publish approval wrappers through ordinary Poster sends; never acquire workers or stores here. */
+export declare function publishGroupIpexProposal(hby: Habery, protocol: ProtocolProcessor, postman: Poster, groupHab: Hab, embedded: Uint8Array, childGvrsn?: Versionage): Operation<GroupSendResult>;
+/**
+ * Publish an initial command's member wrappers with StreamPoster's original
+ * first-present-role routing. Shared preparation signs/replays and admits locally;
+ * this concrete operation retains its existing finite-stream transport contract.
+ */
+export declare function publishInitialGroupIpex(hby: Habery, protocol: ProtocolProcessor, postman: Poster, groupHab: Hab, embedded: Uint8Array, childGvrsn?: Versionage): Operation<GroupSendResult>;
+/** Approve stored wrappers for one IPEX child without external lead sending or acquiring stores/workers. */
+export declare function approveStoredMultisigIpexWrappers(hby: Habery, protocol: ProtocolProcessor, embeddedSaid: string, reger: Reger | null): Operation<void>;
+/**
+ * Return the first incomplete stored `/multisig/exn` wrapping `/ipex/*`.
+ *
+ * @param db Borrowed accepted exchanges; discovery does not mutate notices or approval state.
+ * @returns First incomplete stored IPEX proposal, or no result when none exists.
+ */
+export declare function findPendingMultisigIpex(db: Baser): SerderKERI | null;
+/**
+ * Send a completed group IPEX message from the elected local lead.
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param postman Borrowed Poster; its delivery worker must run while this operation awaits outcomes.
+ * @param reger Borrowed credential evidence store for grant artifacts.
+ * @param groupHab Group sender whose elected local lead publishes completed output.
+ * @param embedded Completed embedded IPEX message.
+ * @param gvrsn Attachment genus for the outgoing child/artifact stream.
+ * @returns Completed delivery results when this member is the elected sender.
+ */
+export declare function sendCompletedGroupIpex(hby: Habery, postman: Poster, reger: Reger | null, groupHab: Hab, embedded: SerderKERI, gvrsn?: Versionage, registry?: RegistryStore | null, exchanger?: Exchanger): Operation<string[]>;
+/** Load one accepted stored EXN by SAID. */
+export declare function requireStoredExchange(hby: Habery, said: string): SerderKERI;
+/**
+ * Rebuild an accepted EXN with its signatures and path/proof payloads.
+ * epath stores complete counted groups; remove each source counter before the
+ * serializer supplies the selected output genus's counter. Retain the selected
+ * grant's actual child proofs; support reconstruction must not replace them.
+ */
+export declare function storedExchangeMessage(hby: Habery, serder: SerderKERI, gvrsn?: Versionage): Uint8Array;
+/**
+ * Send raw credential/IPEX bytes over the credential mailbox topic.
+ *
+ * @param postman Borrowed Poster; its delivery worker must run while this operation awaits outcomes.
+ * @param hab Local signing habitat; its state/store lifetime remains with the caller.
+ * @param dest Final recipient AID.
+ * @param msgs Complete signed credential/IPEX messages in required order.
+ * @returns Successful destination URLs; failed concrete outcomes throw.
+ */
+export declare function sendCredentialBytes(postman: Poster, hab: Hab, dest: string, msgs: Uint8Array[]): Operation<string[]>;
+/**
+ * Send an initial IPEX command's prepared batch through one stream admission.
+ *
+ * @param postman Borrowed Poster; an independently running worker owns delivery.
+ * @param hab Local source signer; bytes are already signed before admission.
+ * @param dest Resolved final recipient AID.
+ * @param msgs Finite ordered support and business messages sharing endpoint selection.
+ * @returns Actual delivered URLs; a failed concrete outcome throws its original error.
+ */
+export declare function sendCredentialStream(postman: Poster, hab: Hab, dest: string, msgs: Uint8Array[]): Operation<string[]>;
+//# sourceMappingURL=ipex-grouping.d.ts.map

package/types/app/ipex/ipex-grouping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-grouping.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-grouping.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAaL,UAAU,EAEV,KAAK,UAAU,EAGhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAS/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAS1D,OAAO,EAEL,KAAK,eAAe,EAQrB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAgD5E,yGAAyG;AACzG,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,GAAG,IAAI,CAW1G;AACD,8HAA8H;AAC9H,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,GAAG,EACV,GAAG,EAAE,UAAU,GACd,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,CAuE9B;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,0BAA2B,SAAQ,eAAe;IACjE,QAAQ,EAAE,OAAO,CAAC;IAClB,iGAAiG;IACjG,QAAQ,EAAE,UAAU,GAAG,IAAI,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,mBAAmB,CAClC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,OAAO,EAAE,UAAU,EACnB,OAAO,GAAE,2BAAgC,GACxC,SAAS,CAAC,0BAA0B,CAAC,CAgDvC;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAWxF;AA2GD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,WAAW,GAAE,UAA6B,EAC1C,KAAK,GAAE,UAAqB,GAC3B,UAAU,CAwCZ;AAwED,qGAAqG;AACrG,wBAAiB,wBAAwB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,UAAU,CAAC,EAAE,UAAU,GACtB,SAAS,CAAC,eAAe,CAAC,CAM5B;AAED;;;;GAIG;AACH,wBAAiB,uBAAuB,CACtC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,UAAU,CAAC,EAAE,UAAU,GACtB,SAAS,CAAC,eAAe,CAAC,CAmB5B;AAED,4GAA4G;AAC5G,wBAAiB,iCAAiC,CAChD,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,KAAK,GAAG,IAAI,GAClB,SAAS,CAAC,IAAI,CAAC,CAYjB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,KAAK,GAAG,UAAU,GAAG,IAAI,CAgBpE;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,KAAK,GAAE,UAAqB,EAC5B,QAAQ,GAAE,aAAa,GAAG,IAAW,EACrC,SAAS,CAAC,EAAE,SAAS,GACpB,SAAS,CAAC,MAAM,EAAE,CAAC,CAiErB;AAgBD,4CAA4C;AAC5C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CAM3E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,EAClB,KAAK,GAAE,UAAqB,GAC3B,UAAU,CAiBZ;AAED;;;;;;;;GAQG;AACH,wBAAiB,mBAAmB,CAClC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAAE,GACjB,SAAS,CAAC,MAAM,EAAE,CAAC,CAcrB;AAED;;;;;;;;GAQG;AACH,wBAAiB,oBAAoB,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAAE,GACjB,SAAS,CAAC,MAAM,EAAE,CAAC,CAKrB"}

package/types/app/{ipex-node-authentication.d.ts → ipex/ipex-node-authentication.d.ts}

@@ -1,9 +1,10 @@
 /** Node issuer authentication over public KEL/TEL evidence; no conversation or validity policy. */
 import { type SerderACDC } from "cesr-ts";
-import { type RegistryState } from "../acdc/regeventing.js";
-import type { RegistryStore } from "../acdc/registering.js";
-import { type KeriDispatchEnvelope } from "../core/dispatch.js";
-import type { Baser } from "../db/basing.js";
+import type { ChainVerdict } from "../../acdc/chaining.js";
+import { type RegistryState } from "../../acdc/regeventing.js";
+import type { RegistryStore } from "../../acdc/registering.js";
+import { type KeriDispatchEnvelope } from "../../core/dispatch.js";
+import type { Baser } from "../../db/basing.js";
 /** Borrow only normalized issuer proof families; routing and frame projection belong to intake. */
 type IpexNodeProofs = Pick<KeriDispatchEnvelope, "bsqs" | "bsss" | "sscs" | "ssts" | "sigers" | "tsgs" | "ssgs" | "cigars">;
 /** Authenticated registry state is evidence, never an implicit credential-validity verdict. */
@@ -16,12 +17,16 @@ export type IpexNodeAuthentication = {
 } | {
     kind: "reject";
 };
+/** Protocol admission authenticates registry observations without imposing an application state vocabulary. */
+export declare function authenticatedNodeVerdict(authentication: IpexNodeAuthentication): ChainVerdict;
+/** Classify every authenticated registered node for new-use policy, including the origin. */
+export declare function issuedNodeVerdict(authentication: IpexNodeAuthentication): ChainVerdict;
 /** Assemble accepted ordinals only; a missing head is retryable, contradictory durable rows are corrupt. */
 export declare function acceptedRegistryEvidence(store: RegistryStore, regid: string): {
     rip: SerderACDC;
     updates: SerderACDC[];
 } | null;
 /** A declared registry, then supplied anchors, take precedence over current signatures. */
-export declare function authenticateIpexNode(serder: SerderACDC, envelope: IpexNodeProofs, db: Baser, registry: RegistryStore | null): IpexNodeAuthentication;
+export declare function authenticateIpexNode(serder: SerderACDC, envelope: IpexNodeProofs, db: Baser, registry: RegistryStore | null, historical?: boolean): IpexNodeAuthentication;
 export {};
 //# sourceMappingURL=ipex-node-authentication.d.ts.map

package/types/app/ipex/ipex-node-authentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-node-authentication.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-node-authentication.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAoD,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,KAAK,aAAa,EAMnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,KAAK,oBAAoB,EAAoB,MAAM,wBAAwB,CAAC;AAGrF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,mGAAmG;AACnG,KAAK,cAAc,GAAG,IAAI,CACxB,oBAAoB,EACpB,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAC1E,CAAC;AAEF,+FAA+F;AAC/F,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,YAAY,EAAE,aAAa,GAAG,IAAI,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEvB,+GAA+G;AAC/G,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,sBAAsB,GAAG,YAAY,CAS7F;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,sBAAsB,GAAG,YAAY,CAYtF;AAED,4GAA4G;AAC5G,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,MAAM,GACZ;IAAE,GAAG,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,UAAU,EAAE,CAAA;CAAE,GAAG,IAAI,CAoCnD;AAED,2FAA2F;AAC3F,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,cAAc,EACxB,EAAE,EAAE,KAAK,EACT,QAAQ,EAAE,aAAa,GAAG,IAAI,EAC9B,UAAU,UAAQ,GACjB,sBAAsB,CAwGxB"}

package/types/app/ipex/ipex-v2.d.ts

@@ -0,0 +1,71 @@
+import type { RegistryStore } from "../../acdc/registering.js";
+import { type ExchangeFactors } from "../../core/exchange/exchange-proofing.js";
+import type { ExchangeRouteHandler, ExchangeRouteVerification, PresentationScope } from "../exchanges/exchanging.js";
+import type { Habery } from "../identity/habbing.js";
+import type { Notifier } from "../notifications/notifying.js";
+type VerifyArgs = Parameters<NonNullable<ExchangeRouteHandler["verify"]>>[0];
+type EvidenceArgs = Parameters<NonNullable<ExchangeRouteHandler["verifyEvidence"]>>[0];
+/**
+ * Authenticate each disclosed node independently before Exchanger persists an EXN.
+ * Registry evidence is caller-owned; notifier delivery follows durable acceptance.
+ * Presentation registries require the retained receiver receipt and node-local proofs.
+ */
+export declare class IpexV2Handler implements ExchangeRouteHandler {
+    readonly resource: string;
+    readonly hby: Habery;
+    private readonly notifier;
+    readonly registry: RegistryStore | null;
+    readonly protocolMajor = 2;
+    readonly acceptsSscs = true;
+    readonly acceptsEvidence = true;
+    readonly acceptsMissingEvidence: boolean;
+    readonly acceptsNests: boolean;
+    constructor(resource: string, hby: Habery, notifier?: Notifier | null, registry?: RegistryStore | null);
+    /**
+     * Keep verified historical grant seals and current-key signatures, preferring a seal
+     * for the same AID. Exchanger has already checked every supplied factor against
+     * this exact body and accepted KEL; rotation cannot undo a recorded commitment.
+     */
+    verifyEvidence({ serder, factors, invalid, missing: unresolved }: EvidenceArgs): ExchangeFactors | null;
+    /** Apply final issuer-state reduction only after the shared context is valid. */
+    verify(args: VerifyArgs): ExchangeRouteVerification;
+    /** Return deduplicated fresh registry IDs; stored sender authentication belongs to Exchanger. */
+    pendingGrant(args: VerifyArgs): readonly string[] | null;
+    /**
+     * Return auxiliary registry scope without issuing an admission verdict.
+     * Every supplied opening and non-registry issuer factor must authenticate,
+     * including optional graph branches. A separate discloser needs each node's
+     * issuer to endorse this exact Grant; origin authority cannot extend to others.
+     */
+    presentationContext(args: VerifyArgs): PresentationScope | null;
+    /** Validate shared conversation, disclosure, schema and authentication obligations in reference order. */
+    private verifyContext;
+    /** Substitute node-own unknowns only; the shared evaluator still traverses every edge. */
+    private pendingVerdicts;
+    /** Fresh issuance is authorized by an accepted issuer RIP and exact Grant parties, before final reduction. */
+    private pendingIssuance;
+    /** Validate all supplied claims, then classify absent issuer openings and exact per-registry node scope. */
+    private presentationState;
+    /** Notify only after Exchanger has durably accepted the parent and its evidence. */
+    handle({ serder }: Parameters<ExchangeRouteHandler["handle"]>[0]): void;
+    /** Every disclosed own schema vets before presentation and issuer graph reduction. */
+    private nodeSchemas;
+    /** Compare the exact accepted Offer before authenticating the Grant's independent issuer proofs. */
+    private offerFulfilled;
+    /** Read only walk-verified nodes: Serder authenticates exposed d/$id/AGID claims; strings stay opaque. */
+    private sectionCommitment;
+    /** Origin commitments are SAIDs, never implicit signatures over the node. */
+    private validOrigin;
+    /** Enforce reciprocal parties, exchange id and the prior's single accepted response. */
+    private prior;
+    /** Resolve empty-plan dittos only through accepted prior exchanges. */
+    private plan;
+    /** Match the exact historical KEL commitment; missing evidence remains retryable. */
+    private sourceAnchor;
+    /** Authenticate a grant target against this node's Issuee TEL and explicit fully witnessed KEL sources. */
+    private presentation;
+    /** Read the disclosed top-level attribute's Issuee presentation-registry declaration. */
+    private presentationRegistries;
+}
+export {};
+//# sourceMappingURL=ipex-v2.d.ts.map

package/types/app/ipex/ipex-v2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-v2.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-v2.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAG/D,OAAO,EAAE,KAAK,eAAe,EAAwB,MAAM,0CAA0C,CAAC;AAEtG,OAAO,KAAK,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACrH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAkB9D,KAAK,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7E,KAAK,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAyBvF;;;;GAIG;AACH,qBAAa,aAAc,YAAW,oBAAoB;IAQtD,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,QAAQ,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAVzC,QAAQ,CAAC,aAAa,KAAK;IAC3B,QAAQ,CAAC,WAAW,QAAQ;IAC5B,QAAQ,CAAC,eAAe,QAAQ;IAChC,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;gBAGpB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACH,QAAQ,GAAE,QAAQ,GAAG,IAAW,EACxC,QAAQ,GAAE,aAAa,GAAG,IAAW;IAMhD;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAe,EAAE,EAAE,YAAY,GAAG,eAAe,GAAG,IAAI;IAe5G,iFAAiF;IACjF,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,yBAAyB;IA0CnD,iGAAiG;IACjG,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,MAAM,EAAE,GAAG,IAAI;IAexD;;;;;OAKG;IACH,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,iBAAiB,GAAG,IAAI;IA4B/D,0GAA0G;IAC1G,OAAO,CAAC,aAAa;IAuHrB,0FAA0F;IAC1F,OAAO,CAAC,eAAe;IAYvB,8GAA8G;IAC9G,OAAO,CAAC,eAAe;IAkCvB,4GAA4G;IAC5G,OAAO,CAAC,iBAAiB;IAmEzB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAIvE,sFAAsF;IACtF,OAAO,CAAC,WAAW;IASnB,oGAAoG;IACpG,OAAO,CAAC,cAAc;IAiCtB,0GAA0G;IAC1G,OAAO,CAAC,iBAAiB;IAWzB,6EAA6E;IAC7E,OAAO,CAAC,WAAW;IASnB,wFAAwF;IACxF,OAAO,CAAC,KAAK;IAsBb,uEAAuE;IACvE,OAAO,CAAC,IAAI;IAoBZ,qFAAqF;IACrF,OAAO,CAAC,YAAY;IAQpB,2GAA2G;IAC3G,OAAO,CAAC,YAAY;IA0EpB,yFAAyF;IACzF,OAAO,CAAC,sBAAsB;CAgB/B"}

package/types/app/{ipexing.d.ts → ipex/ipexing.d.ts}

@@ -10,11 +10,12 @@
  * - credential/TEL artifact ingestion remains VDR/runtime work
  */
 import type { Kind, SerderKERI, Versionage } from "cesr-ts";
-import type { RegistryStore } from "../acdc/registering.js";
-import { type IpexVerb } from "../core/protocol-exchanging.js";
-import type { Exchanger, ExchangeRouteHandler } from "./exchanging.js";
-import type { Hab, Habery } from "./habbing.js";
-import type { Notifier } from "./notifying.js";
+import type { RegistryStore } from "../../acdc/registering.js";
+import { type IpexVerb } from "../../core/exchange/protocol-exchanging.js";
+import type { Baser } from "../../db/basing.js";
+import type { Exchanger, ExchangeRouteHandler } from "../exchanges/exchanging.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { Notifier } from "../notifications/notifying.js";
 /** KERIpy IPEX route constants. */
 export declare const IPEX_APPLY_ROUTE = "/ipex/apply";
 export declare const IPEX_OFFER_ROUTE = "/ipex/offer";
@@ -25,7 +26,7 @@ export declare const IPEX_SPURN_ROUTE = "/ipex/spurn";
 /** Ordered route list used for registration and tests. */
 export declare const IPEX_ROUTES: readonly ["/ipex/apply", "/ipex/offer", "/ipex/agree", "/ipex/grant", "/ipex/admit", "/ipex/spurn"];
 export type IpexRoute = typeof IPEX_ROUTES[number];
-export type { IpexVerb } from "../core/protocol-exchanging.js";
+export type { IpexVerb } from "../../core/exchange/protocol-exchanging.js";
 /** Previous-route policy from KERIpy `PreviousRoutes`. */
 export declare const PREVIOUS_IPEX_ROUTES: ReadonlyMap<IpexVerb, readonly IpexVerb[]>;
 interface RawMessage {
@@ -84,4 +85,18 @@ export declare function ipexGrantExn(hab: Hab, recp: string, message: string, ac
 export declare function ipexAdmitExn(hab: Hab, message: string, grant: SerderKERI, options?: IpexBuilderOptions): IpexMessage;
 /** Reject an application, offer, agreement, or grant. */
 export declare function ipexSpurnExn(hab: Hab, message: string, spurned: SerderKERI, options?: IpexBuilderOptions): IpexMessage;
+/** Validate known signed response parties and the existing legacy predecessor graph. */
+export declare function validateIpexReply(prior: SerderKERI, verb: IpexVerb, sender: string, recipient: string): void;
+/**
+ * Preflight a proposed legacy conversation before a member adds a signature.
+ * Missing accepted predecessors stay pending; malformed routes, changed parties
+ * and replacement responses fail. This does not admit an EXN or change its indexes.
+ */
+export declare function ipexConversationReady(db: Baser, exn: SerderKERI): boolean;
+/**
+ * Resolve signed recipient data, or the sender of an accepted linked predecessor.
+ * Legacy admit/agree/spurn builders omit an explicit recipient. Callers loading
+ * a predecessor must supply it from accepted storage; this helper does not admit it.
+ */
+export declare function ipexRecipient(exn: SerderKERI, prior?: SerderKERI): string | null;
 //# sourceMappingURL=ipexing.d.ts.map

package/types/app/ipex/ipexing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipexing.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipexing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAY,KAAK,QAAQ,EAAc,MAAM,4CAA4C,CAAC;AACjG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAG9D,mCAAmC;AACnC,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAC9C,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAC9C,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAC9C,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAC9C,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAC9C,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAE9C,0DAA0D;AAC1D,eAAO,MAAM,WAAW,qGAOd,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AACnD,YAAY,EAAE,QAAQ,EAAE,MAAM,4CAA4C,CAAC;AAE3E,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAM1E,CAAC;AAIH,UAAU,UAAU;IAClB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,MAAM,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAEjF,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,GAAG,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAAC;IACrC,GAAG,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAAC;IACrC,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,WAAY,YAAW,oBAAoB;IACtD,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;gBAE/B,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI;IAMxE,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO;IAiC7C,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI;IAoB1C,OAAO,CAAC,gBAAgB;CAGzB;AAED,0DAA0D;AAC1D,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,OAAO,GAAE,kBAAuB,GAC/B,IAAI,CAON;AAED,yBAAyB;AACzB,wBAAgB,YAAY,CAC1B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CAWb;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAC1B,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,GAAG,UAAU,EAC7B,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,EACzB,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CAUb;AAED,yBAAyB;AACzB,wBAAgB,YAAY,CAC1B,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CASb;AAED,8DAA8D;AAC9D,wBAAgB,YAAY,CAC1B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,GAAG,UAAU,EAC7B,OAAO,GAAE,gBAAqB,GAC7B,WAAW,CAuBb;AAED,0BAA0B;AAC1B,wBAAgB,YAAY,CAC1B,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CASb;AAED,yDAAyD;AACzD,wBAAgB,YAAY,CAC1B,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CASb;AAyBD,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAQ5G;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAmBzE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAOhF"}

package/types/app/mailbox/forward-handler.d.ts

@@ -0,0 +1,68 @@
+/** Authenticated /fwd intake: validate provider authority before storing reconstructed child bytes. */
+import { type CesrFrame, SerderKERI } from "cesr-ts";
+import { type Operation } from "effection";
+import type { ExchangeAttachment, ExchangeRouteHandler } from "../exchanges/exchanging.js";
+import type { MailboxDirector } from "./mailbox-director.js";
+/**
+ * Accepted `/fwd` route handler that stores embedded payloads in mailbox topics.
+ *
+ * This is the `keri-ts` mailbox-storage analogue to KERIpy's `ForwardHandler`.
+ *
+ * Authorization rule:
+ * - the request-scoped mailbox AID passed with this message must currently be
+ *   authorized for the addressed recipient
+ */
+export declare class ForwardHandler implements ExchangeRouteHandler {
+    /** Registered exchange route for store-forward messages. */
+    static readonly resource = "/fwd";
+    /** Instance route identity used by exchange dispatch. */
+    readonly resource = "/fwd";
+    /** This route binds a single v2 child body; recipient processors authenticate its evidence. */
+    readonly acceptsNests = true;
+    /** Borrowed provider publication/correlation owner. */
+    readonly mailboxDirector: MailboxDirector;
+    /**
+     * Bind mailbox publication without acquiring a store.
+     *
+     * @param mailboxDirector Borrowed provider owner that publishes accepted forwarded payloads.
+     */
+    constructor(mailboxDirector: MailboxDirector);
+    /**
+     * Verify that the embedded exchange has the mailbox modifiers and one
+     * extractable forwarded payload.
+     *
+     * @param args Signed forwarding exchange, attachment evidence and optional nested frames; children retain their own authentication requirements.
+     * @returns Whether required modifiers and one bound forwarded payload are structurally valid.
+     */
+    verify(args: {
+        serder: SerderKERI;
+        attachments: ExchangeAttachment[];
+        nests?: readonly CesrFrame[];
+    }): boolean;
+    /**
+     * Store one forwarded payload when the receiving host is allowed to act as
+     * the recipient's async correspondence store.
+     *
+     * Accepted host shapes:
+     * - explicit mailbox provider authorized in `ends.`
+     * - recipient witness host from the accepted KEL witness set
+     * - recipient agent host authorized in `ends.`
+     *
+     * Controller endpoints stay excluded here because they are direct
+     * correspondence destinations, not store-and-forward hosts.
+     *
+     * @param args Accepted exchange with borrowed attachments/children and receiving mailboxAid provenance.
+     * @returns An operation for v2 child serialization, or synchronous completion/no-op for legacy or unauthorized input.
+     */
+    handle(args: {
+        serder: SerderKERI;
+        attachments: ExchangeAttachment[];
+        /** Borrowed child wire remains live for this awaited handler operation. */
+        nests?: readonly CesrFrame[];
+        /** Receiving hosted endpoint whose authority must cover the addressed recipient. */
+        mailboxAid?: string | null;
+    }): void | Operation<void>;
+    /** Re-read accepted authority in the same synchronous turn as provider publication. */
+    private canStoreRecipient;
+}
+//# sourceMappingURL=forward-handler.d.ts.map

package/types/app/mailbox/forward-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forward-handler.d.ts","sourceRoot":"","sources":["../../../src/app/mailbox/forward-handler.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,OAAO,EACL,KAAK,SAAS,EAQd,UAAU,EAEX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAG3F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D;;;;;;;;GAQG;AACH,qBAAa,cAAe,YAAW,oBAAoB;IACzD,4DAA4D;IAC5D,MAAM,CAAC,QAAQ,CAAC,QAAQ,UAAU;IAClC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,UAA2B;IAC5C,+FAA+F;IAC/F,QAAQ,CAAC,YAAY,QAAQ;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAE1C;;;;OAIG;gBACS,eAAe,EAAE,eAAe;IAI5C;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;QACnB,WAAW,EAAE,kBAAkB,EAAE,CAAC;QAClC,KAAK,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;KAC9B,GAAG,OAAO;IAiBX;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;QACnB,WAAW,EAAE,kBAAkB,EAAE,CAAC;QAClC,2EAA2E;QAC3E,KAAK,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;QAC7B,oFAAoF;QACpF,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAuB1B,uFAAuF;IACvF,OAAO,CAAC,iBAAiB;CAO1B"}