keri-ts 1.0.0 → 2.0.1

package/types/app/multisig/multisig-messaging.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Common signing, exact local admission and sending for multisig coordination.
+ * KERI workflows own proposal/approval policy; Tufa projects returned facts into
+ * CLI output. This module neither formats output nor starts a delivery worker.
+ *
+ * The outer EXN is recipient-specific. Its exnSaid is the join --said selector;
+ * payloadSaid identifies the Multiplexor aggregation shared by contributions.
+ * Neither completed transport nor collection of these identities proves group
+ * acceptance. Callers must check their own accepted KEL/RPY/TEL/credential state.
+ */
+import { type SerderKERI } from "cesr-ts";
+import type { Operation } from "effection";
+import type { Baser } from "../../db/basing.js";
+import type { Poster } from "../delivery/forwarding.js";
+import type { Exchanger } from "../exchanges/exchanging.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { Reactor } from "../protocol/reactor.js";
+import type { MultisigMessage } from "./grouping.js";
+/** Recipient-specific wrapper identity and its shared Multiplexor proposal index key. */
+export interface GroupMessageRef {
+    /** Intended participant AID; this is not a resolved transport URL. */
+    recipient: string;
+    /** Outer multisig coordination EXN SAID; also selected by join --said. */
+    exnSaid: string;
+    /** Multiplexor key: v1 embedded-bundle SAID or supported v2 signed-child SAID. */
+    payloadSaid: string;
+}
+/** Complete signed proposal ready for local admission or concrete transmission. */
+export interface SignedGroupMessage extends GroupMessageRef {
+    src: string;
+    message: Uint8Array;
+}
+/** Completed transport destinations, not participant approval or group acceptance. */
+export interface GroupDelivery extends GroupMessageRef {
+    /** Successful transport destinations reported by this one concrete Poster admission. */
+    deliveries: string[];
+}
+/** Public publication facts for exact selection, without treating transport as approval. */
+export interface GroupSendResult {
+    /** Recipient-specific outer/aggregate identities, in completed send order. */
+    messages: GroupMessageRef[];
+    /** Flattened completed destinations, preserving order and any repeats across messages. */
+    deliveries: string[];
+}
+/** Select unique remote member AIDs, preserving the supplied member order. */
+export declare function remoteGroupMembers(hby: Habery, member: Hab, recipients: readonly string[]): string[];
+/**
+ * Read the proposal index identity without authenticating its evidence.
+ * V1 commits the embedded bundle; v2 signs one child SAID. Multiplexor verifies
+ * those commitments and owns accepted proposal/submitter indexes separately.
+ */
+export declare function multisigPayloadSaid(serder: SerderKERI): string | null;
+/** Read the legacy embedded bundle using the same shape as Multiplexor verification. */
+export declare function multisigEmbeddedSection(ked: Record<string, unknown>): Record<string, unknown> | null;
+/**
+ * Find an accepted local contribution in the ordinary Multiplexor index.
+ * An optional destination selects its original recipient-specific wrapper.
+ * The index locates evidence; accepted sender, route and payload must all agree.
+ */
+export declare function storedGroupMessage(db: Baser, member: string, proposal: SerderKERI, recipient?: string): SerderKERI | null;
+/**
+ * Reconstruct an existing recipient wrapper, or sign its first publication.
+ * Replay validates retained authentication and preserves the original EXN SAID;
+ * a retry never replaces an already recorded wrapper with a new timestamp/nonce.
+ * Missing fanout destinations can still receive the same approved child in a
+ * newly signed outer wrapper. No group-event signature is made here.
+ */
+export declare function prepareGroupMessage(exchanger: Exchanger, member: Hab, recipient: string, prepared: MultisigMessage): Operation<SignedGroupMessage>;
+/**
+ * Endorse one prepared outer EXN once, retaining its accompanying child evidence.
+ * Extracting payloadSaid here checks shape, not authentication or approval;
+ * Multiplexor validates the commitment during normal protocol intake.
+ * The prepared tuple supplies the EXN Serder and accompanying child attachments.
+ *
+ * @param member Local participant signing Hab, distinct from the group AID.
+ * @param recipient Intended remote participant, already resolved by the workflow.
+ * @returns One signed packet reused for local admission and remote publication.
+ */
+export declare function signGroupMessage(member: Hab, recipient: string, [serder, attachments]: MultisigMessage): SignedGroupMessage;
+/**
+ * Publish prepared bytes on the multisig topic and await this admission's outcome.
+ * The caller must run Poster.deliverDo concurrently and keep its stores alive.
+ * A failed outcome throws its original error; earlier successful fanout is not
+ * rolled back. Cancellation stops observation, not already admitted delivery.
+ * Returning reports completed destinations, never participant approval.
+ */
+export declare function sendGroupMessage(postman: Poster, prepared: SignedGroupMessage): Operation<GroupDelivery>;
+/** Collect successful recipient outcomes into message identities and completed target URLs. */
+export declare function groupSendResult(outcomes: readonly GroupDelivery[]): GroupSendResult;
+/**
+ * Process the exact signed local contribution before admitting remote delivery,
+ * so an immediate peer reply cannot outrun local Multiplexor evidence. Await
+ * normal intake, then send the same bytes without signing again. Intake or send
+ * failures propagate; no cross-store/network transaction is implied.
+ */
+export declare function admitAndSendGroupMessage(input: Reactor, postman: Poster, prepared: SignedGroupMessage): Operation<GroupDelivery>;
+//# sourceMappingURL=multisig-messaging.d.ts.map

package/types/app/multisig/multisig-messaging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multisig-messaging.d.ts","sourceRoot":"","sources":["../../../src/app/multisig/multisig-messaging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAwB,KAAK,UAAU,EAAY,MAAM,SAAS,CAAC;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAItD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,sFAAsF;AACtF,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,wFAAwF;IACxF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,4FAA4F;AAC5F,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,0FAA0F;IAC1F,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAEpG;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAUrE;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAMpG;AAYD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,UAAU,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,UAAU,GAAG,IAAI,CAcnB;AAED;;;;;;GAMG;AACH,wBAAiB,mBAAmB,CAClC,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,GAAG,EACX,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,eAAe,GACxB,SAAS,CAAC,kBAAkB,CAAC,CAW/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,GAAG,EACX,SAAS,EAAE,MAAM,EACjB,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,eAAe,GACrC,kBAAkB,CAqBpB;AAED;;;;;;GAMG;AACH,wBAAiB,gBAAgB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,kBAAkB,GAC3B,SAAS,CAAC,aAAa,CAAC,CAe1B;AAED,+FAA+F;AAC/F,wBAAgB,eAAe,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,CAKnF;AAED;;;;;GAKG;AACH,wBAAiB,wBAAwB,CACvC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,kBAAkB,GAC3B,SAAS,CAAC,aAAa,CAAC,CAG1B"}

package/types/app/multisig/multisig-workflows.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Multisig proposal and approval workflows.
+ *
+ * CLI orchestration owns timed waits, worker lifetimes, prompts and output.
+ * This module publishes proposals and approves stored KEL/RPY/VDR proposals
+ * without starting or driving background workers.
+ */
+import { SerderACDC, SerderKERI, type Versionage } from "cesr-ts";
+import { type Operation } from "effection";
+import { type RegistryDisclosure } from "../../acdc/regeventing.js";
+import { type AgentRuntime } from "../runtime/agent-runtime.js";
+import type { Poster } from "../delivery/forwarding.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import { MULTISIG_BUP_ROUTE, MULTISIG_ICP_ROUTE, MULTISIG_ISS_ROUTE, MULTISIG_IXN_ROUTE, MULTISIG_REV_ROUTE, MULTISIG_RIP_ROUTE, MULTISIG_ROT_ROUTE, MULTISIG_RPY_ROUTE, MULTISIG_VCP_ROUTE, type MultisigEventProposal, type MultisigMessage } from "./grouping.js";
+import { type GroupSendResult } from "./multisig-messaging.js";
+/** Approve one exact ACDC v2 TEL/anchor through existing member signing and ordinary processors.
+ * A returned wrapper records consent, not quorum/witness/TEL completion; retry the accepted-state owners.
+ */
+export declare function approveAcdcV2Registry(hby: Habery, protocol: ProtocolProcessor, group: Hab, event: SerderACDC, { anchor, opening }?: {
+    anchor?: SerderKERI;
+    opening?: RegistryDisclosure;
+}): Operation<MultisigMessage>;
+/** Publish this member's exact approved TEL/anchor wrapper; the caller runs and joins delivery. */
+export declare function publishAcdcV2Registry(hby: Habery, postman: Poster, group: Hab, approval: MultisigMessage): Operation<GroupSendResult>;
+export type MultisigKelRoute = typeof MULTISIG_ICP_ROUTE | typeof MULTISIG_ROT_ROUTE | typeof MULTISIG_IXN_ROUTE;
+export type MultisigVdrRoute = typeof MULTISIG_VCP_ROUTE | typeof MULTISIG_ISS_ROUTE | typeof MULTISIG_REV_ROUTE;
+export type MultisigRpyRoute = typeof MULTISIG_RPY_ROUTE;
+export type MultisigProposalRoute = MultisigKelRoute | MultisigVdrRoute | MultisigRpyRoute | typeof MULTISIG_RIP_ROUTE | typeof MULTISIG_BUP_ROUTE;
+export interface ApprovalResult extends GroupSendResult {
+    /** Present for VCP/ISS/REV: exact TEL coordinates and local publication, separate from business acceptance and member delivery. */
+    tel?: {
+        pre: string;
+        sn: number;
+        publicationComplete: boolean;
+    };
+    route: MultisigProposalRoute;
+    said: string;
+    embedded: string;
+    group: string;
+    accepted: boolean;
+}
+export interface ApprovalPromptContext {
+    route: string;
+    group: string;
+    embedded: string;
+}
+export interface MultisigApprovalCallbacks {
+    approveProposal(context: ApprovalPromptContext): boolean;
+    chooseGroupAlias(groupPre: string): string;
+    chooseRegistryName(regk: string): string;
+}
+export interface MultisigApprovalOptions {
+    group?: string;
+    said?: string;
+    callbacks: MultisigApprovalCallbacks;
+}
+/**
+ * Publish a route-correlated event proposal; grouping owns child identity and label derivation.
+ *
+ * @param hby Borrowed group identities and accepted state.
+ * @param protocol Shared semantic owner; this publication owns its byte-input context.
+ * @param postman Borrowed delivery owner; the caller runs and joins its worker.
+ * @param member Local member signing habitat, distinct from the group AID.
+ * @param recipients Member AIDs; local recipients are skipped.
+ * @param proposal Route-correlated group proposal with its named business fields.
+ * @param embeddedMessage Signed child wire to include under the route-derived label.
+ * @param childGvrsn Optional explicit attachment genus for the child.
+ * @returns Stable proposal/wrapper identities and completed deliveries, independent of group acceptance.
+ */
+export declare function publishProposal(hby: Habery, protocol: ProtocolProcessor, postman: Poster, member: Hab, recipients: readonly string[], proposal: MultisigEventProposal, embeddedMessage: Uint8Array, childGvrsn?: Versionage): Operation<GroupSendResult>;
+/** True when a KEL event is accepted locally. */
+/**
+ * Commit the members of a locally accepted group establishment event.
+ *
+ * Only the current latest establishment event commits; replaying an older
+ * approval must not restore historical group membership. Returns whether the
+ * members were committed.
+ */
+export declare function commitAcceptedGroupMembers(hby: Habery, serder: SerderKERI, smids: readonly string[], rmids: readonly string[]): boolean;
+export declare function eventAccepted(hby: Habery, serder: SerderKERI): boolean;
+export declare function routeForKelEvent(serder: SerderKERI): MultisigKelRoute | null;
+/** Approve matching stored evidence; host progress and deadlines belong to the caller. */
+export declare function approvePendingMultisigProposal(hby: Habery, runtime: AgentRuntime, options: MultisigApprovalOptions): Operation<ApprovalResult | null>;
+//# sourceMappingURL=multisig-workflows.d.ts.map

package/types/app/multisig/multisig-workflows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multisig-workflows.d.ts","sourceRoot":"","sources":["../../../src/app/multisig/multisig-workflows.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AACH,OAAO,EAWL,UAAU,EACV,UAAU,EAEV,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,2BAA2B,CAAC;AAUnC,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAWhE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AASxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAK5E,OAAO,EAEL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAKlB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EAMrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAGL,KAAK,eAAe,EAOrB,MAAM,yBAAyB,CAAC;AAEjC;;GAEG;AACH,wBAAiB,qBAAqB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,GAAG,EACV,KAAK,EAAE,UAAU,EACjB,EAAE,MAAM,EAAE,OAAO,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;CAAO,GAC9E,SAAS,CAAC,eAAe,CAAC,CA4G5B;AAED,mGAAmG;AACnG,wBAAiB,qBAAqB,CACpC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,GAAG,EACV,QAAQ,EAAE,eAAe,GACxB,SAAS,CAAC,eAAe,CAAC,CAiB5B;AAED,MAAM,MAAM,gBAAgB,GACxB,OAAO,kBAAkB,GACzB,OAAO,kBAAkB,GACzB,OAAO,kBAAkB,CAAC;AAC9B,MAAM,MAAM,gBAAgB,GAAG,OAAO,kBAAkB,GAAG,OAAO,kBAAkB,GAAG,OAAO,kBAAkB,CAAC;AACjH,MAAM,MAAM,gBAAgB,GAAG,OAAO,kBAAkB,CAAC;AACzD,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,OAAO,kBAAkB,GACzB,OAAO,kBAAkB,CAAC;AAQ9B,MAAM,WAAW,cAAe,SAAQ,eAAe;IACrD,mIAAmI;IACnI,GAAG,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,OAAO,CAAA;KAAE,CAAC;IAChE,KAAK,EAAE,qBAAqB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,eAAe,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC;IACzD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3C,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,yBAAyB,CAAC;CACtC;AAOD;;;;;;;;;;;;GAYG;AACH,wBAAiB,eAAe,CAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,GAAG,EACX,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,QAAQ,EAAE,qBAAqB,EAC/B,eAAe,EAAE,UAAU,EAC3B,UAAU,CAAC,EAAE,UAAU,GACtB,SAAS,CAAC,eAAe,CAAC,CAa5B;AAsBD,iDAAiD;AACjD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAOT;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAQtE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAa5E;AA4CD,0FAA0F;AAC1F,wBAAiB,8BAA8B,CAC7C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,uBAAuB,GAC/B,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,CAsDlC"}

package/types/app/{notifying.d.ts → notifications/notifying.d.ts}

@@ -1,6 +1,6 @@
 import { type Operation } from "effection";
-import { type Noter, type NoterOptions, Notice, type NoticeAttrs } from "../db/noting.js";
-import type { Habery } from "./habbing.js";
+import { type Noter, type NoterOptions, Notice, type NoticeAttrs } from "../../db/noting.js";
+import type { Habery, Signator } from "../identity/habbing.js";
 import { Signaler } from "./signaling.js";
 export declare function notice<T extends NoticeAttrs = NoticeAttrs>(attrs: T, options?: {
     dt?: string | Date;
@@ -18,11 +18,11 @@ export declare function openNoterForHabery(hby: Habery, options?: Partial<NoterO
  * application-specific maps.
  */
 export declare class Notifier {
-    readonly hby: Habery;
+    readonly signator: Signator;
     readonly noter: Noter;
     readonly signaler: Signaler;
     private readonly ownsSignaler;
-    constructor(hby: Habery, { noter, signaler, }: {
+    constructor(signator: Signator, { noter, signaler, }: {
         noter: Noter;
         signaler?: Signaler;
     });
@@ -41,6 +41,5 @@ export declare class Notifier {
     private publishSignal;
     private requireNoticePair;
     private requireVerifiedNotice;
-    private requireSignator;
 }
 //# sourceMappingURL=notifying.d.ts.map

package/types/app/notifications/notifying.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifying.d.ts","sourceRoot":"","sources":["../../../src/app/notifications/notifying.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAe,KAAK,KAAK,EAAE,KAAK,YAAY,EAAE,MAAM,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC1G,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,wBAAgB,MAAM,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,EACxD,KAAK,EAAE,CAAC,EACR,OAAO,GAAE;IACP,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CACX,GACL,MAAM,CAAC,CAAC,CAAC,CAYX;AAED,iFAAiF;AACjF,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,CAAC,YAAY,CAAM,GAClC,YAAY,CAWd;AAED,kEAAkE;AAClE,wBAAiB,kBAAkB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,CAAC,YAAY,CAAM,GAClC,SAAS,CAAC,KAAK,CAAC,CAElB;AAED;;;;;;GAMG;AACH,qBAAa,QAAQ;IACnB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAU;gBAGrC,QAAQ,EAAE,QAAQ,EAClB,EACE,KAAK,EACL,QAAQ,GACT,EAAE;QACD,KAAK,EAAE,KAAK,CAAC;QACb,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACrB;IAQH,oEAAoE;IACpE,GAAG,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO;IAS3D,mGAAmG;IACnG,KAAK,IAAI,IAAI;IAIb,uDAAuD;IACvD,IAAI,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,EACtC,KAAK,SAAI,EACT,KAAK,SAAK,GACT,MAAM,CAAC,CAAC,CAAC,EAAE;IAMd,4DAA4D;IAC5D,KAAK,IAAI,MAAM;IAIf,wDAAwD;IACxD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAc9B,qEAAqE;IACrE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAO5B,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,qBAAqB;CAY9B"}

package/types/app/notifications/signaling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signaling.d.ts","sourceRoot":"","sources":["../../../src/app/notifications/signaling.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAM3C,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,WAAW,SAAS,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW;IAC5D,CAAC,EAAE,MAAM,CAAC;IACV,EAAE,EAAE,MAAM,CAAC;IACX,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,CAAC,CAAC;CACN;AAeD;;;;GAIG;AACH,qBAAa,MAAM,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW;;gBAMnD,IAAI,EACA;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAClC;QACA,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC,GAAG;YAAE,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAClE,IAAI,CAAC,EAAE,MAAM,CAAC;KACf;IAWL,IAAI,GAAG,IAAI,UAAU,CAEpB;IAED,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,EAEtB;IAED,IAAI,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,CAKtB;IAED,IAAI,GAAG,CACL,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC,GAAG;QAAE,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,EAYlE;IAED,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,IAAI,KAAK,IAAI,CAAC,CAEb;IAED,IAAI,IAAI,IAAI,MAAM,GAAG,SAAS,CAE7B;IAED,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC;CAGvB;AAED,wBAAgB,MAAM,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,EACxD,KAAK,EAAE,CAAC,EACR,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACf,GACL,MAAM,CAAC,CAAC,CAAC,CAaX;AAED,yEAAyE;AACzE,qBAAa,QAAQ;IACnB,MAAM,CAAC,QAAQ,CAAC,eAAe,SAAkB;IACjD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAS;gBAEX,EAAE,OAAY,EAAE,eAA0C,EAAE,GAAE;QACxE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;KACrB;IAMN,0EAA0E;IAC1E,IAAI,CAAC,CAAC,SAAS,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAO,GAAG,MAAM,CAAC,CAAC,CAAC;IASpH,IAAI,IAAI,MAAM,EAAE;IAGhB,KAAK,IAAI,MAAM;IAIf,WAAW,CAAC,GAAG,SAAa,GAAG,MAAM;IASrC,+DAA+D;IAC/D,KAAK,IAAI,IAAI;IAGb,yDAAyD;IACzD,KAAK,IAAI,IAAI;IAKZ,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC;CAM9B"}

package/types/app/{parsering.d.ts → protocol/parsering.d.ts}

@@ -1,14 +1,15 @@
 import { type AttachmentGroup, BlindState, BoundState, type CesrFrame, Cigar, FirstSeen, Prefixer, SealEvent, SealKind, SealSource, SerderACDC, SerderKERI, Siger, Texter, TypeMedia, type Versionage } from "cesr-ts";
 import type { Operation } from "effection";
-import { KeriDispatchEnvelope, PathedMaterialGroup, TransIdxSigGroup, TransLastIdxSigGroup, TransReceiptQuadruple } from "../core/dispatch.js";
-import { Kevery, type QueryEnvelope } from "../core/eventing.js";
-import type { KeverDecision, QueryProcessDecision } from "../core/kever-decisions.js";
-import { type KramRefusal } from "../core/kraming.js";
-import { type ReplyProcessDecision, Revery } from "../core/routing.js";
-import type { Tevery } from "../vdr/eventing.js";
-import type { ExchangeDecision } from "./exchanging.js";
-import type { Verifier } from "./verifying.js";
-/** Exchange admission may await durable payload storage before dispatch advances. */
+import type { RegistryObserver, RegistryObserverDecision } from "../../acdc/observing.js";
+import { KeriDispatchEnvelope, PathedMaterialGroup, TransIdxSigGroup, TransLastIdxSigGroup, TransReceiptQuadruple } from "../../core/dispatch.js";
+import { Kevery, type QueryEnvelope } from "../../core/kel/eventing.js";
+import type { KeverDecision, QueryProcessDecision } from "../../core/kel/kever-decisions.js";
+import { type KramRefusal } from "../../core/mailbox/kraming.js";
+import { type ReplyProcessDecision, Revery } from "../../core/routing.js";
+import type { TelProcessDecision, Tevery } from "../../vdr/eventing.js";
+import type { Verifier, VerifierDecision } from "../credentials/verifying.js";
+import type { ExchangeDecision } from "../exchanges/exchanging.js";
+/** Parsed input awaits exchange handlers; semantic owners commit evidence before publishing acceptance. */
 export interface ExchangerLike {
     /** Resolve after signature admission and its required storage/handler effects finish. */
     processEvent(args: {
@@ -70,7 +71,18 @@ export interface MessageDropDecision {
     reason: "deniedSender" | "senderNotAllowed" | "missingAuthentication" | "unsupportedRoute" | "invalidQuery" | "missingProcessor" | "referenceStub";
 }
 /** Route-specific results remain distinct from pre-dispatch refusal and unreported outcomes. */
-export type DispatchDecision = KeverDecision | QueryProcessDecision | ReplyProcessDecision | ExchangeDecision | MessageDropDecision | KramRefusal | void;
+export type DispatchDecision = KeverDecision | TelProcessDecision | VerifierDecision | RegistryObserverDecision | QueryProcessDecision | ReplyProcessDecision | ExchangeDecision | MessageDropDecision | KramRefusal | void;
+/**
+ * Caller-owned auxiliary query receiver, analogous to KERIpy's Kevery.qvy.
+ * Sender policy and optional KRAM run first. The receiver independently checks
+ * complete signature evidence and its approved operation scope; dispatch alone
+ * grants no authority. It borrows the full envelope during this synchronous call.
+ */
+export interface AuxiliaryQueryProcessor {
+    /** Concrete custom query route selected by composition before any replay-cache admission. */
+    readonly resource: string;
+    processQuery(envelope: KeriDispatchEnvelope): DispatchDecision;
+}
 /**
  * Convert one or more already-parsed CESR frames into KERI dispatch envelopes.
  *
@@ -90,10 +102,27 @@ export interface DispatchResult {
  * Route one already-parsed KERI dispatch envelope into the established
  * `Revery` / `Kevery` / `Exchanger` architecture.
  * Return ordinary buffered evidence and its decision to the application owner.
+ *
+ * @param envelope Parsed body and its exact attachment evidence.
+ * @param revery Borrowed reply-route verifier.
+ * @param kevery Input KEL processor for this dispatch.
+ * @param exchanger Optional exchange processor; absent exchange support remains explicit.
+ * @param tevery Optional legacy TEL processor.
+ * @param verifier Optional credential processor.
+ * @param mailboxAid Receiving hosted endpoint provenance, distinct from claimed sender.
+ * @param messageKevery Authoritative shared message-policy/KRAM processor when distinct from input Kevery.
+ * @param registry V2 registry intake over accepted public KEL state, without requiring a local alias.
+ * @param qvy Optional auxiliary query owner; receives full evidence after v2 message admission.
+ * @returns The processed envelope and protocol-specific decision data.
+ * @throws Unsupported input and infrastructure/handler failures follow their owning processor contracts.
  */
-export declare function dispatchEnvelope(envelope: KeriDispatchEnvelope, revery: Revery, kevery: Kevery, exchanger?: ExchangerLike, tevery?: Tevery, verifier?: Verifier, mailboxAid?: string | null): Operation<DispatchResult>;
+export declare function dispatchEnvelope(envelope: KeriDispatchEnvelope, revery: Revery, kevery: Kevery, exchanger?: ExchangerLike, tevery?: Tevery, verifier?: Verifier, mailboxAid?: string | null, 
+/** Long-lived v2 message policy/KRAM owner; input-specific Kevery handles KEL and legacy traffic. */
+messageKevery?: Kevery, registry?: RegistryObserver, qvy?: AuxiliaryQueryProcessor): Operation<DispatchResult>;
 /** Project one complete frame for message routing without an intermediate event array. */
 export declare function envelopeFromFrame(message: CesrFrame, local?: boolean): KeriDispatchEnvelope;
+/** Own an auxiliary query's normalized full proof and public nested evidence beyond synchronous intake. */
+export declare function copyAuxiliaryQuery(envelope: KeriDispatchEnvelope): KeriDispatchEnvelope;
 /** Normalize the actual query endorsements for ingress and per-request authorization. */
 export declare function queryEnvelopeFromDispatch(envelope: KeriDispatchEnvelope): QueryEnvelope;
 //# sourceMappingURL=parsering.d.ts.map

package/types/app/protocol/parsering.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parsering.d.ts","sourceRoot":"","sources":["../../../src/app/protocol/parsering.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,eAAe,EACpB,UAAU,EACV,UAAU,EACV,KAAK,SAAS,EACd,KAAK,EAKL,SAAS,EAUT,QAAQ,EAER,SAAS,EACT,QAAQ,EACR,UAAU,EACV,UAAU,EACV,UAAU,EACV,KAAK,EAEL,MAAM,EACN,SAAS,EAGT,KAAK,UAAU,EAChB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC7F,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,2GAA2G;AAC3G,MAAM,WAAW,aAAa;IAC5B,yFAAyF;IACzF,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACzB,MAAM,EAAE,KAAK,EAAE,CAAC;QAChB,IAAI,EAAE,mBAAmB,EAAE,CAAC;QAC5B,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,6EAA6E;QAC7E,cAAc,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;QACrC,8EAA8E;QAC9E,IAAI,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;QAC7B,WAAW,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;QACvC,uCAAuC;QACvC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B,+DAA+D;QAC/D,KAAK,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;QAC7B,qFAAqF;QACrF,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,mFAAmF;QACnF,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,SAAS,CAAC,IAAI,GAAG,gBAAgB,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,IAAI,EAAE,qBAAqB,EAAE,CAAC;IAC9B,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzB,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC7B,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,IAAI,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,mBAAmB,EAAE,CAAC;IAC5B,gFAAgF;IAChF,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,IAAI,EAAE,SAAS,EAAE,CAAC;CACnB;AAED,kFAAkF;AAClF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EACF,cAAc,GACd,kBAAkB,GAClB,uBAAuB,GACvB,kBAAkB,GAClB,cAAc,GACd,kBAAkB,GAClB,eAAe,CAAC;CACrB;AAED,gGAAgG;AAChG,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,kBAAkB,GAClB,gBAAgB,GAChB,wBAAwB,GACxB,oBAAoB,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,mBAAmB,GACnB,WAAW,GACX,IAAI,CAAC;AAET;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,QAAQ,EAAE,oBAAoB,GAAG,gBAAgB,CAAC;CAChE;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,SAAS,EAAE,EAC5B,KAAK,UAAQ,GACZ,oBAAoB,EAAE,CAExB;AAED,6FAA6F;AAC7F,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAiB,gBAAgB,CAC/B,QAAQ,EAAE,oBAAoB,EAC9B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,aAAa,EACzB,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,QAAQ,EACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;AAC1B,qGAAqG;AACrG,aAAa,GAAE,MAAe,EAC9B,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,GAAG,CAAC,EAAE,uBAAuB,GAC5B,SAAS,CAAC,cAAc,CAAC,CA+F3B;AAoVD,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,EAClB,KAAK,UAAQ,GACZ,oBAAoB,CA2BtB;AAED,2GAA2G;AAC3G,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,oBAAoB,CA0CvF;AAED,yFAAyF;AACzF,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,oBAAoB,GAC7B,aAAa,CAaf"}

package/types/app/{protocol-host-policy.d.ts → protocol/protocol-host-policy.d.ts}

@@ -1,4 +1,4 @@
-import type { Hab } from "./habbing.js";
+import type { Hab } from "../identity/habbing.js";
 /**
  * Route-facing policy for one hosted protocol surface.
  *
@@ -22,14 +22,5 @@ export interface ProtocolHostPolicy {
     dwsDynamic?: boolean;
     /** Use http:// when this host resolves did:webs artifacts, for local workflows. */
     dwsInsecureHttp?: boolean;
-    /**
-     * Whether non-`mbx` query POSTs may return immediate CESR reply/replay bodies.
-     *
-     * KERIpy's generic HttpEnd returns 204 for `logs`/`ksn` and relies on mailbox
-     * delivery. Tufa's controller-facing agent surface may opt in for clients
-     * that can consume synchronous query results, while mailbox hosts keep the
-     * KERIpy-compatible default.
-     */
-    directQueryResponses?: boolean;
 }
 //# sourceMappingURL=protocol-host-policy.d.ts.map

package/types/app/protocol/protocol-host-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-host-policy.d.ts","sourceRoot":"","sources":["../../../src/app/protocol/protocol-host-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,6EAA6E;IAC7E,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B"}

package/types/app/protocol/protocol-processing.d.ts

@@ -0,0 +1,140 @@
+/** Shared protocol mutations and publication, independent of byte-input and network lifetimes. */
+import type { CesrFrame } from "cesr-ts";
+import { type Operation } from "effection";
+import type { RegistryObserver } from "../../acdc/observing.js";
+import type { AgentCue } from "../../core/cues.js";
+import { Deck } from "../../core/deck.js";
+import { Kevery } from "../../core/kel/eventing.js";
+import { Revery } from "../../core/routing.js";
+import type { Tevery } from "../../vdr/eventing.js";
+import type { Verifier } from "../credentials/verifying.js";
+import { Exchanger } from "../exchanges/exchanging.js";
+import type { Habery } from "../identity/habbing.js";
+import { QueryReplies } from "../queries/query-replies.js";
+import { type AuxiliaryQueryProcessor, type DispatchResult } from "./parsering.js";
+/** Protocol choices for a frame; input owners separately own cancellation and parsing. */
+export interface DispatchOptions {
+    /** Whether the frame arrived through local witness/controller intake. */
+    local?: boolean;
+    /** Hosted mailbox endpoint provenance, independent of the signed sender. */
+    mailboxAid?: string | null;
+    /** Advance durable escrows after capturing this frame's decision and direct replies. */
+    escrows?: boolean;
+}
+/** Exact processed evidence and mailbox authorization captured at the query decision. */
+export interface ProtocolDispatchResult extends DispatchResult {
+    /** Current request authorization, never inferred solely from a matching reply SAID. */
+    mailboxQueryAuthorized: boolean;
+}
+/**
+ * Dispatch to synchronous semantic owners and publish their committed output.
+ *
+ * KERIpy supplies parsers with concrete Kevery/Revery/Exchanger owners. Domain
+ * writers decide and commit without suspension; exchange durability and application
+ * handlers run in their input's operation. Independent inputs and escrow scans may
+ * progress during that I/O. This owner captures query replies before application delivery
+ * and registers shared semantic routes once; it owns no lock, input queue or transport.
+ */
+export declare class ProtocolProcessor {
+    /** Long-lived KEL processor (kvy), used for semantic reply routes and escrow recovery. */
+    readonly kvy: Kevery;
+    /** Shared reply verifier (rvy), including BADA and registered semantic routes. */
+    readonly rvy: Revery;
+    /** Shared exchange processor (exc), with the host's configured application handlers. */
+    readonly exc: Exchanger;
+    /** Legacy transaction-event processor (tvy), explicitly absent without VDR support. */
+    readonly tvy: Tevery | null;
+    /** Credential verifier (vry), sharing the composed registry store. */
+    readonly vry: Verifier | null;
+    /** Public v2 registry intake; local alias management remains with Regery. */
+    readonly registry: RegistryObserver | null;
+    /** Private output from semantic handlers, captured before application publication. */
+    private readonly protocolCues;
+    /** Ordinary application cues; the composed cue router is the consumer. */
+    readonly cues: Deck<AgentCue>;
+    /** Shared live request correlations; each requesting connection owns its slots. */
+    readonly replies: QueryReplies;
+    readonly qvy?: AuxiliaryQueryProcessor | undefined;
+    /**
+     * Bind long-lived semantic owners and register their reply routes exactly once.
+     *
+     * @param kvy Shared KEL owner for semantic reply routes, KRAM policy and escrow recovery.
+     * @param rvy Shared reply verifier bound to the same database and private cue flow.
+     * @param exc Shared exchange owner with application handlers already configured.
+     * @param tvy Borrowed legacy TEL owner, or null without VDR support.
+     * @param vry Borrowed credential verifier, or null without that capability.
+     * @param registry Borrowed public v2 registry intake and escrow owner, or null.
+     * @param protocolCues Private semantic-output Deck; distinct from application cues.
+     * @param cues Application output Deck consumed by the composed cue router.
+     * @param replies Shared live request correlations captured before application publication.
+     * @param qvy Optional caller-owned auxiliary query receiver; owns its authorization and lifecycle.
+     * @throws TypeError for inconsistent stores or cue bindings.
+     */
+    constructor(
+    /** Long-lived KEL processor (kvy), used for semantic reply routes and escrow recovery. */
+    kvy: Kevery, 
+    /** Shared reply verifier (rvy), including BADA and registered semantic routes. */
+    rvy: Revery, 
+    /** Shared exchange processor (exc), with the host's configured application handlers. */
+    exc: Exchanger, 
+    /** Legacy transaction-event processor (tvy), explicitly absent without VDR support. */
+    tvy: Tevery | null, 
+    /** Credential verifier (vry), sharing the composed registry store. */
+    vry: Verifier | null, 
+    /** Public v2 registry intake; local alias management remains with Regery. */
+    registry: RegistryObserver | null, 
+    /** Private output from semantic handlers, captured before application publication. */
+    protocolCues: Deck<AgentCue>, 
+    /** Ordinary application cues; the composed cue router is the consumer. */
+    cues: Deck<AgentCue>, 
+    /** Shared live request correlations; each requesting connection owns its slots. */
+    replies: QueryReplies, qvy?: AuxiliaryQueryProcessor | undefined);
+    /**
+     * Construct an input-owned Kevery with identical store, policy and cue bindings; register no routes.
+     *
+     * @returns A new input-specific Kevery sharing accepted state, policy, Revery and the private cue Deck.
+     */
+    makeKevery(): Kevery;
+    /**
+     * Process one frame and publish its committed protocol cues before returning decision data.
+     *
+     * @param frame Complete hydrated frame whose evidence remains valid for this operation.
+     * @param options Local intake policy, hosted mailbox provenance and whether to advance escrows.
+     * @param kvy Input-specific Kevery in this domain; defaults to the shared owner.
+     * @returns Exact dispatch result and current mailbox authorization at its synchronous query decision.
+     * @throws Domain mismatch, infrastructure/handler or cleanup errors propagate; publication still runs in the dispatch finalizer.
+     */
+    dispatch(frame: CesrFrame, { local, mailboxAid, escrows }?: DispatchOptions, kvy?: Kevery): Operation<ProtocolDispatchResult>;
+    /** Capture direct replies before handing ordinary protocol records to the application consumer. */
+    private publishCues;
+    /** Advance configured escrow owners; each scan joins its own I/O and handler cleanup. */
+    processEscrowsOnce(): Operation<void>;
+    /**
+     * Retry only KEL/reply dependencies and publish their committed cues.
+     *
+     * Finite introduction bootstrap needs these synchronous owners, without
+     * advancing unrelated exchange, credential or registry application work.
+     * Full host escrow processing retains its existing family/publication order.
+     */
+    processKelReplyEscrowsOnce(): void;
+    /** Shared synchronous KEL/reply retry unit; the invoking composition owns publication. */
+    private advanceKelReplyEscrows;
+    /** Publish synchronous escrow facts before progressing asynchronous EXN recovery. */
+    private advanceEscrows;
+    /**
+     * Continuous escrow doer for the long-lived runtime host.
+     *
+     * KERIpy correspondence:
+     * - mirrors the dedicated `escrowDo` loop rather than folding escrow
+     *   processing into parser ingress
+     */
+    escrowDo(): Operation<never>;
+}
+/**
+ * Compose minimal KEL/reply/exchange intake over an existing Habery; acquire no stores or workers.
+ *
+ * @param hby Borrowed local habitat collection and accepted-state database.
+ * @returns A minimal KEL/reply/exchange processor with no registry owners or running workers.
+ */
+export declare function createProtocolProcessor(hby: Habery): ProtocolProcessor;
+//# sourceMappingURL=protocol-processing.d.ts.map

package/types/app/protocol/protocol-processing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-processing.d.ts","sourceRoot":"","sources":["../../../src/app/protocol/protocol-processing.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAA0B,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D,OAAO,EACL,KAAK,uBAAuB,EAE5B,KAAK,cAAc,EAGpB,MAAM,gBAAgB,CAAC;AAExB,0FAA0F;AAC1F,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,wFAAwF;IACxF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,yFAAyF;AACzF,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,uFAAuF;IACvF,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAiB;IAiB1B,0FAA0F;IAC1F,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,kFAAkF;IAClF,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,wFAAwF;IACxF,QAAQ,CAAC,GAAG,EAAE,SAAS;IACvB,uFAAuF;IACvF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI;IAC7B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAC1C,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;IAC7B,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,YAAY;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB;IAlCxC;;;;;;;;;;;;;;OAcG;;IAED,0FAA0F;IACjF,GAAG,EAAE,MAAM;IACpB,kFAAkF;IACzE,GAAG,EAAE,MAAM;IACpB,wFAAwF;IAC/E,GAAG,EAAE,SAAS;IACvB,uFAAuF;IAC9E,GAAG,EAAE,MAAM,GAAG,IAAI;IAC3B,sEAAsE;IAC7D,GAAG,EAAE,QAAQ,GAAG,IAAI;IAC7B,6EAA6E;IACpE,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAC1C,sFAAsF;IACrE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC;IAC7C,0EAA0E;IACjE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;IAC7B,mFAAmF;IAC1E,OAAO,EAAE,YAAY,EACrB,GAAG,CAAC,EAAE,uBAAuB,YAAA;IAaxC;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAWpB;;;;;;;;OAQG;IACH,QAAQ,CACN,KAAK,EAAE,SAAS,EAChB,EAAE,KAAsB,EAAE,UAAU,EAAE,OAAe,EAAE,GAAE,eAAoB,EAC7E,GAAG,GAAE,MAAiB,GACrB,SAAS,CAAC,sBAAsB,CAAC;IAiCpC,mGAAmG;IACnG,OAAO,CAAC,WAAW;IASnB,yFAAyF;IACxF,kBAAkB,IAAI,SAAS,CAAC,IAAI,CAAC;IAQtC;;;;;;OAMG;IACH,0BAA0B,IAAI,IAAI;IAQlC,0FAA0F;IAC1F,OAAO,CAAC,sBAAsB;IAK9B,qFAAqF;IACrF,OAAO,CAAE,cAAc;IAUvB;;;;;;OAMG;IACF,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC;CAM9B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAMtE"}

package/types/app/protocol/reactor.d.ts

@@ -0,0 +1,43 @@
+/** Input-owned buffered parsing; shared protocol work belongs to ProtocolProcessor. */
+import { type Operation } from "effection";
+import type { Kevery } from "../../core/kel/eventing.js";
+import { type IngressOptions } from "../transport/message-source.js";
+import type { ProtocolProcessor } from "./protocol-processing.js";
+/**
+ * Own direct input and its buffered parser for one composed protocol domain.
+ *
+ * Like KERIpy's direct-mode input owners, this component consumes bytes and drives
+ * protocol handlers. It borrows the shared processor and owns an independent Kevery;
+ * accepted Kever state remains in the common Baser cache. Escrow scheduling, route
+ * registration and application handler installation belong to composition.
+ */
+export declare class Reactor {
+    /** Borrowed protocol mutations/publication owner, never a transport or callback scheduler. */
+    readonly protocol: ProtocolProcessor;
+    /** Input-specific Kevery (kvy); its accepted-state cache is shared through Baser. */
+    readonly kvy: Kevery;
+    /**
+     * Bind the actual shared protocol owner; create no runtime, transport or persistent stores.
+     *
+     * @param protocol Borrowed shared protocol domain; this input creates its own Kevery over that domain.
+     */
+    constructor(
+    /** Borrowed protocol mutations/publication owner, never a transport or callback scheduler. */
+    protocol: ProtocolProcessor);
+    /**
+     * Own this input and finish dispatch before reading its next complete frame.
+     *
+     * @param source Creates cancellation-aware input bytes; this operation owns parsing and source cleanup.
+     * @param options Dispatch policy and optional upstream cancellation.
+     * @throws Source/parser, dispatch and cleanup failures propagate.
+     */
+    process(source: (signal: AbortSignal) => AsyncIterable<Uint8Array>, options?: IngressOptions): Operation<void>;
+    /**
+     * Consume one complete record through the same buffered parser source and dispatch path as network input.
+     *
+     * @param bytes Resident complete record; each parser chunk is copied during consumption.
+     * @param options Dispatch policy and optional upstream cancellation.
+     */
+    processBytes(bytes: Uint8Array, options?: IngressOptions): Operation<void>;
+}
+//# sourceMappingURL=reactor.d.ts.map

package/types/app/protocol/reactor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reactor.d.ts","sourceRoot":"","sources":["../../../src/app/protocol/reactor.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,KAAK,cAAc,EAAmB,MAAM,gCAAgC,CAAC;AACtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE;;;;;;;GAOG;AACH,qBAAa,OAAO;IAUhB,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,EAAE,iBAAiB;IAVtC,qFAAqF;IACrF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB;;;;OAIG;;IAED,8FAA8F;IACrF,QAAQ,EAAE,iBAAiB;IAKtC;;;;;;OAMG;IACH,OAAO,CACL,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,aAAa,CAAC,UAAU,CAAC,EAC1D,OAAO,GAAE,cAAmB,GAC3B,SAAS,CAAC,IAAI,CAAC;IAGlB;;;;;OAKG;IACF,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,GAAE,cAAmB,GAAG,SAAS,CAAC,IAAI,CAAC;CAIhF"}

package/types/app/queries/query-replies.d.ts

@@ -0,0 +1,78 @@
+import type { AgentCue } from "../../core/cues.js";
+import type { ReceiptCue, ReplayCue, ReplyCue, WitnessCue } from "../../core/cues.js";
+import type { Deck } from "../../core/deck.js";
+/** One request's direct proof/reply. Duplicate requests may share immutable evidence. */
+type DirectReply = ReplayCue | ReplyCue | ReceiptCue | WitnessCue;
+/** One correlated response or ordered protocol pair. */
+interface QueryReplyBatch {
+    /**
+     * Borrowed immutable evidence in response order: one reply, or registry before credential TSN.
+     */
+    readonly cues: readonly DirectReply[];
+}
+/** A request correlation slot; close it when its HTTP/TCP request completes or is cancelled. */
+export interface QueryReply {
+    /**
+     * Observe this existing slot without queues or retained Promise waiters; one observer at a time.
+     *
+     * @param notify Synchronous wake-up callback, including already-ready/closed state.
+     * @returns Unsubscribe function; cancellation must call it.
+     */
+    observeReady(notify: () => void): () => void;
+    /** Whether a captured batch is available for request-owned consumption. */
+    readonly ready: boolean;
+    /** Take the receipt/witness or ordered TSN pair. */
+    takeAll(): QueryReplyBatch | undefined;
+    /** Inspect the current ordered batch without removing its correlation records. */
+    peekAll(): QueryReplyBatch | undefined;
+    /** Remove this request from correlation and discard untaken records. Safe to repeat. */
+    close(): void;
+}
+/**
+ * Capture connection-owned proof/reply cues before background output consumes them.
+ * Direct TCP queries and request-owned event receipts need this correlation;
+ * ordinary HTTP queries use independent output/receive paths instead. Reserving
+ * a SAID creates a lifetime slot, never authorization to read a mailbox or proof
+ * that protocol processing accepted the request. Each borrower must close its slot.
+ */
+export declare class QueryReplies {
+    private readonly published;
+    /** One replay or a registry/credential pair per request, grouped by query SAID for fanout. */
+    private readonly active;
+    /**
+     * Borrow the application output flow so a late request claims matching queued replies synchronously.
+     *
+     * @param published Borrowed application cue Deck, synchronously scanned when a late request reserves a slot.
+     */
+    constructor(published: Deck<AgentCue>);
+    /**
+     * Reserve one response; duplicate arrivals never add another retained batch.
+     *
+     * @param said Query SAID used for correlation, never sufficient proof of request authorization.
+     * @returns A new request-owned slot; close it on request completion/cancellation.
+     */
+    reserve(said: string): QueryReply;
+    /**
+     * A connection owns only receipts for its exact event; unrelated runtime cues stay routed normally.
+     *
+     * @param pre Subject event AID.
+     * @param said Exact event SAID whose receipt/witness output belongs to the connection.
+     * @returns A request-owned event-proof slot.
+     */
+    reserveEvent(pre: string, said: string): QueryReply;
+    /**
+     * Reuse the request slot for queries and accepted-event proofs.
+     *
+     * @param said Internal query:/event: correlation key.
+     * @returns An independent slot, immediately capturing any already-published matching output.
+     */
+    private reserveKey;
+    /**
+     * Capture correlated reply pairs and share their ordinary records among matching requests.
+     *
+     * @param source Cue Deck to scan through its initial extent; unmatched cues retain their order.
+     */
+    capture(source: Deck<AgentCue>): void;
+}
+export {};
+//# sourceMappingURL=query-replies.d.ts.map