keri-ts 1.0.0 → 2.0.1

package/esm/keri/npm/src/app/ipex-grouping.js

@@ -1,276 +0,0 @@
-/**
- * Group IPEX workflow orchestration.
- *
- * This module owns multisig coordination around embedded `/ipex/*` messages.
- * CLI adapters supply parsed options and output/file handling; this service
- * signs, publishes and sends completed group IPEX messages. CLI orchestration
- * owns timed waits and worker lifetimes.
- */
-import { concatBytes, Counter, Diger, makePather, Prefixer, Seqner, SerderKERI, smell, Vrsn_1_0, } from "cesr-ts";
-import { TransIdxSigGroup } from "../core/dispatch.js";
-import { ValidationError } from "../core/errors.js";
-import { CREDENTIAL_MAILBOX_TOPIC } from "../core/mailbox-topics.js";
-import { serializeMessage } from "../core/protocol-exchanging.js";
-import { groupSigningMembers, localGroupMember } from "./group-members.js";
-import { embeddedBusinessExnSAD, MULTISIG_EXN_ROUTE, multisigChild, multisigChildGenusAttrs } from "./grouping.js";
-import { credentialPresentationArtifacts, credentialPresentationSupportMessages, credentialSaidFromGrant, } from "./ipex-credentialing.js";
-import { IPEX_GRANT_ROUTE } from "./ipexing.js";
-/** Approve one pending multisig wrapper around an embedded IPEX message. */
-export function* approveMultisigIpex(hby, runtime, wrapper, options = {}) {
-    const child = multisigChild(hby, wrapper, "exn");
-    if (!child)
-        throw new ValidationError("Multisig IPEX approval requires an embedded child.");
-    const { event: embedded, attachment: peerAttachment, genus } = child;
-    const group = embedded.pre;
-    const embeddedSaid = embedded.said;
-    const wrapperSaid = wrapper.said;
-    if (!group || !embeddedSaid || !wrapperSaid) {
-        throw new ValidationError("Multisig IPEX approval requires wrapper, group, and embedded SAIDs.");
-    }
-    const groupHab = hby.habs.get(group);
-    if (!groupHab) {
-        throw new ValidationError(`Local group ${group} is missing member signing state.`);
-    }
-    if (peerAttachment.length > 0) {
-        yield* runtime.reactor.processBytes(concatBytes(Counter.makeGVC(genus), embedded.raw, peerAttachment), { local: true });
-        yield* runtime.reactor.processEscrowsOnce();
-    }
-    const approved = groupIpexPartial(hby, groupHab, embedded, peerAttachment, genus);
-    yield* runtime.reactor.processBytes(concatBytes(Counter.makeGVC(genus), approved), { local: true });
-    yield* runtime.reactor.processEscrowsOnce();
-    const deliveries = options.publish
-        ? yield* publishGroupIpexProposal(runtime, groupHab, approved, undefined, genus)
-        : [];
-    if ((options.sendLead ?? true)
-        && hby.db.exns.get([embeddedSaid])?.said === embeddedSaid
-        && runtime.reactor.exchanger.lead(groupHab, embeddedSaid)) {
-        deliveries.push(...(yield* sendCompletedGroupIpex(runtime, groupHab, embedded, options.delivery, options.gvrsn)));
-    }
-    return {
-        accepted: hby.db.exns.get([embeddedSaid])?.said === embeddedSaid,
-        deliveries,
-        approved,
-    };
-}
-/** Sign a group IPEX body and append the supplied proof bytes in the selected attachment genus. */
-export function groupIpexPartial(hby, groupHab, embedded, attachments = new Uint8Array(), gvrsn = Vrsn_1_0) {
-    const group = groupHab.pre;
-    const groupRecord = hby.db.getHab(group);
-    const memberPre = groupRecord?.mid;
-    const memberHab = memberPre ? hby.habs.get(memberPre) : null;
-    const groupKever = groupHab.kever;
-    const memberKey = memberHab?.kever?.verfers[0]?.qb64;
-    if (!group || !groupKever || !memberHab || !memberKey) {
-        throw new ValidationError(`Local group ${group || "<missing>"} is missing member signing state.`);
-    }
-    const groupIndex = groupKever.verfers.findIndex((verfer) => verfer.qb64 === memberKey);
-    if (groupIndex < 0) {
-        throw new ValidationError(`Local member ${memberHab.pre} is not a current signer for group ${group}.`);
-    }
-    const sigers = memberHab.mgr.sign(embedded.raw, {
-        pubs: [memberKey],
-        indexed: true,
-        indices: [groupIndex],
-    });
-    const estSaid = groupKever.lastEst.d || groupKever.said;
-    const estEvent = estSaid ? hby.db.getEvtSerder(group, estSaid) : null;
-    const seqner = estEvent?.sner;
-    if (!estSaid || !seqner) {
-        throw new ValidationError(`Missing establishment event material for group ${group}.`);
-    }
-    const tsg = new TransIdxSigGroup(new Prefixer({ qb64: group }), seqner, new Diger({ qb64: estSaid }), sigers);
-    return concatBytes(serializeMessage(embedded, { tsgs: [tsg], pipelined: false, gvrsn }), attachments);
-}
-/** Publish one group IPEX proposal to remote signing members. */
-export function* publishGroupIpexProposal(runtime, groupHab, embedded, delivery, childGvrsn) {
-    const member = localGroupMember(runtime.hby, groupHab.pre);
-    const child = new SerderKERI({ raw: embedded });
-    const genus = child.gvrsn ?? childGvrsn ?? child.pvrsn;
-    const payload = { gid: groupHab.pre, ...multisigChildGenusAttrs(child, genus) };
-    const deliveries = [];
-    for (const recipient of groupSigningMembers(runtime.hby, groupHab.pre)) {
-        if (recipient === member.pre || runtime.hby.habs.has(recipient)) {
-            continue;
-        }
-        const result = yield* runtime.poster.sendExchange(member, {
-            recipient,
-            route: MULTISIG_EXN_ROUTE,
-            payload,
-            embeds: { exn: embedded },
-            topic: "multisig",
-            delivery,
-        });
-        deliveries.push(...result.deliveries);
-    }
-    return deliveries;
-}
-/** Approve all stored multisig wrappers for one embedded IPEX SAID. */
-export function* approveStoredMultisigIpexWrappers(hby, runtime, embeddedSaid) {
-    for (const [, wrapper] of hby.db.exns.getTopItemIter()) {
-        if (wrapper.route !== MULTISIG_EXN_ROUTE) {
-            continue;
-        }
-        const embeddedSad = embeddedBusinessExnSAD(wrapper);
-        if (!embeddedSad || embeddedSad.d !== embeddedSaid) {
-            continue;
-        }
-        yield* approveMultisigIpex(hby, runtime, wrapper, {
-            publish: false,
-            sendLead: false,
-        });
-    }
-}
-/** Return the first incomplete stored `/multisig/exn` wrapping `/ipex/*`. */
-export function findPendingMultisigIpex(hby, runtime) {
-    for (const [, wrapper] of hby.db.exns.getTopItemIter()) {
-        if (wrapper.route !== MULTISIG_EXN_ROUTE) {
-            continue;
-        }
-        const embeddedSad = embeddedBusinessExnSAD(wrapper);
-        if (!embeddedSad || typeof embeddedSad.r !== "string" || !embeddedSad.r.startsWith("/ipex/")) {
-            continue;
-        }
-        const embeddedSaid = embeddedSad.d;
-        if (typeof embeddedSaid !== "string" || runtime.reactor.exchanger.complete(embeddedSaid)) {
-            continue;
-        }
-        return wrapper;
-    }
-    return null;
-}
-/** Send a completed group IPEX message from the elected local lead. */
-export function* sendCompletedGroupIpex(runtime, groupHab, embedded, delivery, gvrsn = Vrsn_1_0) {
-    if (!embedded.said) {
-        throw new ValidationError("Completed group IPEX message is missing a SAID.");
-    }
-    const recipient = ipexRecipient(embedded);
-    if (!recipient) {
-        throw new ValidationError(`Unable to find recipient for ${embedded.route ?? "<unknown>"} ${embedded.said}.`);
-    }
-    const messages = [];
-    let grantPathed;
-    const reger = runtime.vdr?.reger;
-    if (embedded.route === IPEX_GRANT_ROUTE) {
-        if (!reger) {
-            throw new ValidationError("VDR runtime did not open Reger.");
-        }
-        const credentialSaid = credentialSaidFromGrant(embedded);
-        if (credentialSaid) {
-            const [creder] = reger.cloneCred(credentialSaid);
-            const artifacts = credentialPresentationArtifacts(runtime.hby, reger, credentialSaid, gvrsn);
-            grantPathed = grantPathedMaterials(artifacts);
-            messages.push(...credentialPresentationSupportMessages(runtime.hby, reger, creder, recipient, gvrsn));
-        }
-    }
-    messages.push(storedExchangeMessage(runtime.hby, requireStoredExchange(runtime.hby, embedded.said), gvrsn, grantPathed));
-    return yield* sendCredentialBytes(runtime, localGroupMember(runtime.hby, groupHab.pre), recipient, messages, delivery);
-}
-/** Load one accepted stored EXN by SAID. */
-export function requireStoredExchange(hby, said) {
-    const stored = hby.db.exns.get([said]);
-    if (!stored) {
-        throw new ValidationError(`Exchange ${said} is not stored as accepted.`);
-    }
-    return stored;
-}
-/** Rebuild a stored EXN wire message with signatures and pathed material. */
-export function storedExchangeMessage(hby, serder, gvrsn = Vrsn_1_0, pathedOverride) {
-    if (!serder.said) {
-        throw new ValidationError("Exchange message is missing a SAID.");
-    }
-    const cigars = hby.db.ecigs.get([serder.said]).map(([, cigar]) => cigar);
-    return serializeMessage(serder, {
-        tsgs: rebuildStoredExchangeGroups(hby, serder.said),
-        cigars,
-        pathed: pathedOverride ?? hby.db.epath.get([serder.said]),
-        pipelined: false,
-        gvrsn,
-    });
-}
-/** Send raw credential/IPEX bytes over the credential mailbox topic. */
-export function* sendCredentialBytes(runtime, hab, recipient, messages, delivery) {
-    const sent = [];
-    for (const message of messages) {
-        const result = yield* runtime.poster.sendBytes(hab, {
-            recipient,
-            message,
-            topic: CREDENTIAL_MAILBOX_TOPIC,
-            delivery,
-        });
-        sent.push(...result.deliveries);
-    }
-    return sent;
-}
-function ipexRecipient(exn) {
-    const rp = exn.ked?.rp;
-    if (typeof rp === "string" && rp.length > 0) {
-        return rp;
-    }
-    const attrs = exn.ked?.a;
-    if (isRecord(attrs) && typeof attrs.i === "string" && attrs.i.length > 0) {
-        return attrs.i;
-    }
-    return null;
-}
-function grantPathedMaterials(artifacts) {
-    return [
-        pathedMaterial("anc", artifacts.anc.wire),
-        pathedMaterial("iss", artifacts.iss.wire),
-        pathedMaterial("acdc", artifacts.acdc.wire),
-    ];
-}
-function pathedMaterial(label, message) {
-    const { smellage } = smell(message);
-    const atc = message.slice(smellage.size);
-    if (atc.length === 0) {
-        return makePather(["e", label]).qb64b;
-    }
-    return concatBytes(makePather(["e", label]).qb64b, atc);
-}
-function rebuildStoredExchangeGroups(hby, said) {
-    const groups = [];
-    let currentKey = null;
-    let currentSigers = [];
-    const flush = () => {
-        if (!currentKey || currentSigers.length === 0) {
-            return;
-        }
-        groups.push(new TransIdxSigGroup(new Prefixer({ qb64: currentKey[0] }), seqnerFromSnh(currentKey[1]), new Diger({ qb64: currentKey[2] }), currentSigers));
-        currentSigers = [];
-    };
-    for (const [keys, siger] of hby.db.esigs.getTopItemIter([said, ""])) {
-        const groupKey = keys.slice(1);
-        if (!groupKey[0] || !groupKey[1] || !groupKey[2]) {
-            continue;
-        }
-        if (currentKey
-            && (currentKey[0] !== groupKey[0] || currentKey[1] !== groupKey[1] || currentKey[2] !== groupKey[2])) {
-            flush();
-        }
-        currentKey = [groupKey[0], groupKey[1], groupKey[2]];
-        currentSigers.push(siger);
-    }
-    flush();
-    return groups;
-}
-function seqnerFromSnh(snh) {
-    return new Seqner({ code: "0A", raw: hexToFixedBytes(snh, 16) });
-}
-function hexToFixedBytes(hex, size) {
-    const normalized = hex.length % 2 === 0 ? hex : `0${hex}`;
-    if (!/^[0-9a-f]+$/i.test(normalized)) {
-        throw new ValidationError(`Invalid hex ordinal ${hex}`);
-    }
-    if (normalized.length > size * 2) {
-        throw new ValidationError(`Hex ordinal ${hex} exceeds ${size} bytes.`);
-    }
-    const raw = new Uint8Array(size);
-    const padded = normalized.padStart(size * 2, "0");
-    for (let index = 0; index < size; index += 1) {
-        raw[index] = Number.parseInt(padded.slice(index * 2, (index * 2) + 2), 16);
-    }
-    return raw;
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}