keri-ts 2.1.0 → 2.2.0

package/types/app/bootstrap/oobi-resolving.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Library entry points for resolving one OOBI URL.
+ *
+ * `tufa oobi resolve` and a browser wallet share this: queue the URL with the
+ * durable Oobiery, then observe the Oobiery's own records until the URL reaches
+ * a terminal row. Everything observable lives in `oobis.`, `coobi.`, `moobi.`,
+ * `eoobi.` and `roobi.`, so a caller can begin, return to its UI and read the
+ * status later without a handle.
+ *
+ * These functions never start runtime workers. Something must already be running
+ * the Oobiery (a wallet's own runtime, or the CLI's `withRuntimeWorkers`) for a
+ * queued job to progress; see `app/runtime/workflow-contract.ts`.
+ */
+import type { Operation } from "effection";
+import type { OobiRecord } from "../../core/records.js";
+import type { Baser } from "../../db/basing.js";
+import { type ChangeSink, type WaitResult } from "../runtime/workflow-contract.js";
+import { type Oobiery } from "./oobiery.js";
+/** Default wall-clock budget for one blocking resolution. */
+export declare const OOBI_RESOLVE_TIMEOUT_MS = 30000;
+/** Collaborator for the pure status read: the OOBI record stores. A `Habery` fits. */
+export interface OobiStatusDeps {
+    readonly db: Baser;
+}
+/** Collaborators for queueing a URL. */
+export interface OobiBeginDeps {
+    /** Durable job owner; only its queueing entry is used. */
+    readonly oobiery: Pick<Oobiery, "resolve">;
+    /** Optional sink told `{kind:"oobi", id:url}` after the job is queued. */
+    readonly changes?: ChangeSink;
+}
+/** Collaborators for the observe-only wait. */
+export interface OobiWaitDeps extends OobiStatusDeps {
+    /**
+     * Extra host predicate that OOBI-dependent ingress has settled, evaluated
+     * after the terminal row exists. Omitted: the terminal row alone ends the wait.
+     */
+    readonly settled?: () => boolean;
+    /** Optional sink told `{kind:"oobi", id:url}` when the wait ends in a terminal state. */
+    readonly changes?: ChangeSink;
+}
+/** Everything `resolveOobi` needs. */
+export interface OobiResolveDeps extends OobiBeginDeps, OobiWaitDeps {
+}
+/** Optional controls for beginning a resolution. */
+export interface BeginOobiOptions {
+    /** Contact alias recorded when the OOBI resolves. */
+    alias?: string;
+}
+/** Optional controls for a wait. */
+export interface WaitForOobiOptions {
+    /** Wall-clock budget; defaults to {@link OOBI_RESOLVE_TIMEOUT_MS}. */
+    timeoutMs?: number;
+}
+/** Optional controls for a blocking resolution. */
+export interface ResolveOobiOptions extends BeginOobiOptions, WaitForOobiOptions {
+}
+/** Durable state of one requested URL. `pending` covers queued, in flight and unknown URLs. */
+export type OobiStatus = {
+    state: "pending";
+} | {
+    state: "resolved";
+    record: OobiRecord;
+} | {
+    state: "failed";
+    /** The state the Oobiery recorded, or `"failed"` when it recorded none. */
+    reason: string;
+    record: OobiRecord;
+};
+/**
+ * Outcome of a wait. It settles when the status is terminal; `status.state` then
+ * says `resolved` or `failed`. On `timed-out`, `status` is the last read (pending).
+ */
+export type OobiResolveResult = WaitResult<OobiStatus>;
+/**
+ * Queue one URL with the durable Oobiery. Returns after the job is queued.
+ *
+ * @param url Exact OOBI or well-known URL; it is also the key of the status record.
+ */
+export declare function beginOobi(deps: OobiBeginDeps, url: string, options?: BeginOobiOptions): void;
+/** Read the durable status of one requested URL. Pure: no worker, no I/O beyond the Baser. */
+export declare function oobiStatus(deps: OobiStatusDeps, url: string): OobiStatus;
+/**
+ * Observe a queued URL until it is terminal (and `deps.settled`, when given) or
+ * the budget expires. Starts no worker.
+ *
+ * @returns `settled` with a `resolved` or `failed` status (reason recorded), or `timed-out`.
+ */
+export declare function waitForOobi(deps: OobiWaitDeps, url: string, { timeoutMs }?: WaitForOobiOptions): Operation<OobiResolveResult>;
+/** `beginOobi` then `waitForOobi`. The host must be running the Oobiery for the wait to end in a terminal state. */
+export declare function resolveOobi(deps: OobiResolveDeps, url: string, options?: ResolveOobiOptions): Operation<OobiResolveResult>;
+//# sourceMappingURL=oobi-resolving.d.ts.map

package/types/app/bootstrap/oobi-resolving.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oobi-resolving.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/oobi-resolving.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,KAAK,UAAU,EAAgB,KAAK,UAAU,EAAE,MAAM,iCAAiC,CAAC;AACjG,OAAO,EAAE,KAAK,OAAO,EAAqB,MAAM,cAAc,CAAC;AAE/D,6DAA6D;AAC7D,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,sFAAsF;AACtF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;CACpB;AAED,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3C,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;CAC/B;AAED,+CAA+C;AAC/C,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;IACjC,yFAAyF;IACzF,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;CAC/B;AAED,sCAAsC;AACtC,MAAM,WAAW,eAAgB,SAAQ,aAAa,EAAE,YAAY;CAAG;AAEvE,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,oCAAoC;AACpC,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mDAAmD;AACnD,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB,EAAE,kBAAkB;CAAG;AAEnF,+FAA+F;AAC/F,MAAM,MAAM,UAAU,GAClB;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GACzC;IACA,KAAK,EAAE,QAAQ,CAAC;IAChB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEJ;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;AAEvD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAGhG;AAED,8FAA8F;AAC9F,wBAAgB,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAKxE;AAED;;;;;GAKG;AACH,wBAAiB,WAAW,CAC1B,IAAI,EAAE,YAAY,EAClB,GAAG,EAAE,MAAM,EACX,EAAE,SAAmC,EAAE,GAAE,kBAAuB,GAC/D,SAAS,CAAC,iBAAiB,CAAC,CAS9B;AAED,oHAAoH;AACpH,wBAAiB,WAAW,CAC1B,IAAI,EAAE,eAAe,EACrB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,kBAAuB,GAC/B,SAAS,CAAC,iBAAiB,CAAC,CAG9B"}

package/types/app/bootstrap/oobiery.d.ts

@@ -14,6 +14,8 @@ import type { Exchanger, ExchangeRouteHandler } from "../exchanges/exchanging.js
 import type { Hab, Habery } from "../identity/habbing.js";
 import type { Notifier } from "../notifications/notifying.js";
 import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import { type DoerPacing } from "../runtime/doing.js";
+import { type RuntimeClock } from "../runtime/runtime-clock.js";
 import type { HttpClient } from "../transport/http-client.js";
 export declare const OOBI_REQUEST_ROUTE = "/oobis";
 /**
@@ -131,7 +133,7 @@ export declare class Oobiery {
      * This mirrors the KERIpy model where OOBI resolution is its own long-running
      * doer rather than root-owned queue plumbing.
      */
-    oobiDo(): Operation<never>;
+    oobiDo(clock?: RuntimeClock, pacing?: Readonly<DoerPacing>): Operation<never>;
     /** Select queued work, including a surviving in-flight row whose former process is gone. */
     private nextQueued;
     /** Select a parent only after its current child attempts, including authentication, settle. */

package/types/app/bootstrap/oobiery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oobiery.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/oobiery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,EAAkB,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAQ,KAAK,SAAS,EAAoB,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAmB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,KAAK,IAAI,EAAS,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAuB,KAAK,oBAAoB,EAA2B,MAAM,uBAAuB,CAAC;AAEhH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAK5E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC1C;;OAEG;IACH,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACzC;;OAEG;IACH,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,aAAiC,GACtC,iBAAiB,CA4BnB;AAED,KAAK,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,qBAAa,OAAO;IAuBhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAxBtB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,sEAAsE;IACtE,OAAO,CAAC,MAAM,CAAS;IAEvB;;;;;;;;OAQG;gBAED,GAAG,EAAE,MAAM,EACM,QAAQ,EAAE,iBAAiB;IAC5C,qFAAqF;IACpE,GAAG,EAAE,MAAM,EAC5B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;IAWtB;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,yCAAe,GAAG,IAAI;IAIhD;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAS1C;;;;;;;;OAQG;IACF,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAgB/B,qGAAqG;IACrG,OAAO,CAAC,aAAa;IAsBrB;;;;;OAKG;IACF,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC;IAO3B,4FAA4F;IAC5F,OAAO,CAAC,UAAU;IAUlB,+FAA+F;IAC/F,OAAO,CAAC,cAAc;IAWtB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAE,UAAU;IAiDnB;;;;;;;;OAQG;IACH,OAAO,CAAE,eAAe;IAwCxB;;;;;;;;OAQG;IACH,OAAO,CAAE,uBAAuB;IAwBhC,mEAAmE;IACnE,OAAO,CAAC,yBAAyB;IA8BjC,kFAAkF;IAClF,OAAO,CAAC,uBAAuB;IA0B/B,0FAA0F;IAC1F,OAAO,CAAC,qBAAqB;IAqC7B,oFAAoF;IACpF,OAAO,CAAC,iBAAiB;IA+BzB,+EAA+E;IAC/E,OAAO,CAAC,eAAe;IAavB,iEAAiE;IACjE,OAAO,CAAC,aAAa;IASrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAKrB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAYpB;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAC3B,GAAG,oBAAoB;CAwDzB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,QAAQ,GAAE,QAAQ,GAAG,IAAW,GAC/B,IAAI,CAEN;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,kBAAmB,YAAW,oBAAoB;IAC7D,MAAM,CAAC,QAAQ,CAAC,QAAQ,YAAsB;IAC9C,QAAQ,CAAC,QAAQ,YAA+B;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;gBAGjC,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,QAAQ,GAAG,IAAW;IAMlC,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO;IAaX,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,IAAI;CA6BT;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,UAAU,CAQZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAIvD;AAgCD,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"oobiery.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/oobiery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,EAAkB,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAQ,KAAK,SAAS,EAAoB,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAmB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,KAAK,IAAI,EAAS,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAuB,KAAK,oBAAoB,EAA2B,MAAM,uBAAuB,CAAC;AAEhH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,KAAK,UAAU,EAA4B,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAG7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC1C;;OAEG;IACH,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACzC;;OAEG;IACH,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,aAAiC,GACtC,iBAAiB,CA4BnB;AAED,KAAK,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,qBAAa,OAAO;IAuBhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAxBtB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,sEAAsE;IACtE,OAAO,CAAC,MAAM,CAAS;IAEvB;;;;;;;;OAQG;gBAED,GAAG,EAAE,MAAM,EACM,QAAQ,EAAE,iBAAiB;IAC5C,qFAAqF;IACpE,GAAG,EAAE,MAAM,EAC5B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;IAWtB;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,yCAAe,GAAG,IAAI;IAIhD;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAS1C;;;;;;;;OAQG;IACF,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAgB/B,qGAAqG;IACrG,OAAO,CAAC,aAAa;IAsBrB;;;;;OAKG;IACF,MAAM,CAAC,KAAK,GAAE,YAA0B,EAAE,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAmB,GAAG,SAAS,CAAC,KAAK,CAAC;IAI5G,4FAA4F;IAC5F,OAAO,CAAC,UAAU;IAUlB,+FAA+F;IAC/F,OAAO,CAAC,cAAc;IAWtB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAE,UAAU;IAiDnB;;;;;;;;OAQG;IACH,OAAO,CAAE,eAAe;IAwCxB;;;;;;;;OAQG;IACH,OAAO,CAAE,uBAAuB;IAwBhC,mEAAmE;IACnE,OAAO,CAAC,yBAAyB;IA8BjC,kFAAkF;IAClF,OAAO,CAAC,uBAAuB;IA0B/B,0FAA0F;IAC1F,OAAO,CAAC,qBAAqB;IAqC7B,oFAAoF;IACpF,OAAO,CAAC,iBAAiB;IA+BzB,+EAA+E;IAC/E,OAAO,CAAC,eAAe;IAavB,iEAAiE;IACjE,OAAO,CAAC,aAAa;IASrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAKrB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAYpB;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAC3B,GAAG,oBAAoB;CAwDzB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,QAAQ,GAAE,QAAQ,GAAG,IAAW,GAC/B,IAAI,CAEN;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,kBAAmB,YAAW,oBAAoB;IAC7D,MAAM,CAAC,QAAQ,CAAC,QAAQ,YAAsB;IAC9C,QAAQ,CAAC,QAAQ,YAA+B;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;gBAGjC,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,QAAQ,GAAG,IAAW;IAMlC,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO;IAaX,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,IAAI;CA6BT;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,UAAU,CAQZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAIvD;AAgCD,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/types/app/credentials/credential-revoking.d.ts

@@ -4,6 +4,7 @@ import type { Operation } from "effection";
 import type { Regery } from "../../vdr/credentialing.js";
 import type { TelProcessDecision } from "../../vdr/eventing.js";
 import type { Poster } from "../delivery/forwarding.js";
+import type { GroupEventRef } from "../multisig/counseling.js";
 import { MULTISIG_REV_ROUTE } from "../multisig/grouping.js";
 import type { GroupSendResult } from "../multisig/multisig-messaging.js";
 import type { Reactor } from "../protocol/reactor.js";
@@ -21,8 +22,10 @@ export interface CredentialRevokeResult {
     publicationComplete: boolean;
     /** Actual external transport destinations, populated by a completed delivery operation. */
     deliveries: string[];
+    /** Group coordination; `event` is the group anchor that seals the revocation. */
     group?: GroupSendResult & {
         route: typeof MULTISIG_REV_ROUTE;
+        event: GroupEventRef;
     };
 }
 /**

package/types/app/credentials/credential-revoking.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-revoking.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-revoking.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAe,KAAK,UAAU,EAAqC,MAAM,SAAS,CAAC;AAC1F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAK3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAIxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAGtD,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,sFAAsF;AACtF,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,2FAA2F;IAC3F,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,eAAe,GAAG;QAAE,KAAK,EAAE,OAAO,kBAAkB,CAAA;KAAE,CAAC;CAChE;AAED;;;;;GAKG;AACH,wBAAiB,gBAAgB,CAC/B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,uBAAuB,GAC/B,SAAS,CAAC,sBAAsB,CAAC,CAoDnC;AAED;;;;;GAKG;AACH,wBAAiB,2BAA2B,CAC1C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,SAAS,CAAC,MAAM,EAAE,CAAC,CAsCrB;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,aAAa,EAAE,OAAO,GACrB,MAAM,EAAE,CAGV"}
+{"version":3,"file":"credential-revoking.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-revoking.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAe,KAAK,UAAU,EAAqC,MAAM,SAAS,CAAC;AAC1F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAK3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAGxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAGtD,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,sFAAsF;AACtF,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,2FAA2F;IAC3F,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,iFAAiF;IACjF,KAAK,CAAC,EAAE,eAAe,GAAG;QAAE,KAAK,EAAE,OAAO,kBAAkB,CAAC;QAAC,KAAK,EAAE,aAAa,CAAA;KAAE,CAAC;CACtF;AAED;;;;;GAKG;AACH,wBAAiB,gBAAgB,CAC/B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,uBAAuB,GAC/B,SAAS,CAAC,sBAAsB,CAAC,CAqDnC;AAED;;;;;GAKG;AACH,wBAAiB,2BAA2B,CAC1C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,SAAS,CAAC,MAAM,EAAE,CAAC,CAsCrB;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,aAAa,EAAE,OAAO,GACrB,MAAM,EAAE,CAGV"}

package/types/app/credentials/credential-workflows.d.ts

@@ -12,6 +12,7 @@ import { Regery } from "../../vdr/credentialing.js";
 import { type TelProcessDecision } from "../../vdr/eventing.js";
 import type { Poster } from "../delivery/forwarding.js";
 import type { Hab, Habery } from "../identity/habbing.js";
+import type { GroupEventRef } from "../multisig/counseling.js";
 import { MULTISIG_ISS_ROUTE, MULTISIG_VCP_ROUTE, type MultisigVdrProposal } from "../multisig/grouping.js";
 import type { Reactor } from "../protocol/reactor.js";
 import type { VerifierDecision } from "./verifying.js";
@@ -58,6 +59,8 @@ export interface RegistryResult {
     /** Present for group coordination, with acceptance assessed separately from sending. */
     group?: GroupSendResult & {
         route: typeof MULTISIG_VCP_ROUTE;
+        /** The group anchor that seals the registry inception. */
+        event: GroupEventRef;
         status: TelProcessDecision["kind"];
         accepted: boolean;
     };
@@ -80,6 +83,8 @@ export interface IssueResult {
     status: VerifierDecision["kind"];
     group?: GroupSendResult & {
         route: typeof MULTISIG_ISS_ROUTE;
+        /** The group anchor that seals the issuance. */
+        event: GroupEventRef;
         /** Registry event processor decision, independent of the credential verifier decision. */
         telStatus: TelProcessDecision["kind"];
         /** Whether the credential is actually saved; sending a proposal does not make it so. */

package/types/app/credentials/credential-workflows.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-workflows.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-workflows.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAML,UAAU,EACV,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAK3C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAkC,MAAM,EAAiC,MAAM,4BAA4B,CAAC;AACnH,OAAO,EAAE,KAAK,kBAAkB,EAA6B,MAAM,uBAAuB,CAAC;AAC3F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,mBAAmB,EAEzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAKtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAGL,KAAK,eAAe,EAIrB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,+BAA+B;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CAC7D;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,4FAA4F;IAC5F,mBAAmB,EAAE,OAAO,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,KAAK,CAAC,EAAE,eAAe,GAAG;QACxB,KAAK,EAAE,OAAO,kBAAkB,CAAC;QACjC,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACnC,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,yFAAyF;IACzF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,uFAAuF;IACvF,MAAM,EAAE,UAAU,CAAC;IACnB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,8DAA8D;IAC9D,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,eAAe,GAAG;QACxB,KAAK,EAAE,OAAO,kBAAkB,CAAC;QACjC,0FAA0F;QAC1F,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACtC,wFAAwF;QACxF,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,CAInE;AAED;;;;;;;;;GASG;AACH,wBAAiB,wBAAwB,CACvC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,+BAA+B,GACvC,SAAS,CAAC,cAAc,CAAC,CAe3B;AAED,wDAAwD;AACxD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,KAAK,GACX,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAUvE;AAED,6DAA6D;AAC7D,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;;;;;EAYzE;AAED;;;;;;;;GAQG;AACH,wBAAiB,gBAAgB,CAC/B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,uBAAuB,GAC/B,SAAS,CAAC,WAAW,CAAC,CA6BxB;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,qBAAqB,GAC7B,kBAAkB,EAAE,CAetB;AAED,0DAA0D;AAC1D,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,cAAc,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,GACjB,sBAAsB,CAQxB;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,GAChB,UAAU,CAEZ;AAED,iGAAiG;AACjG,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,qDAIpG;AA4ID;;;;;;;;;GASG;AACH,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,mBAAmB,GAC5B,SAAS,CAAC,eAAe,CAAC,CAS5B"}
+{"version":3,"file":"credential-workflows.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-workflows.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAML,UAAU,EACV,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAK3C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAkC,MAAM,EAAiC,MAAM,4BAA4B,CAAC;AACnH,OAAO,EAAE,KAAK,kBAAkB,EAA6B,MAAM,uBAAuB,CAAC;AAC3F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,mBAAmB,EAEzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAKtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAGL,KAAK,eAAe,EAIrB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,+BAA+B;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CAC7D;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,4FAA4F;IAC5F,mBAAmB,EAAE,OAAO,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,KAAK,CAAC,EAAE,eAAe,GAAG;QACxB,KAAK,EAAE,OAAO,kBAAkB,CAAC;QACjC,0DAA0D;QAC1D,KAAK,EAAE,aAAa,CAAC;QACrB,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACnC,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,yFAAyF;IACzF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,uFAAuF;IACvF,MAAM,EAAE,UAAU,CAAC;IACnB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,8DAA8D;IAC9D,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,eAAe,GAAG;QACxB,KAAK,EAAE,OAAO,kBAAkB,CAAC;QACjC,gDAAgD;QAChD,KAAK,EAAE,aAAa,CAAC;QACrB,0FAA0F;QAC1F,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACtC,wFAAwF;QACxF,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,CAInE;AAED;;;;;;;;;GASG;AACH,wBAAiB,wBAAwB,CACvC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,+BAA+B,GACvC,SAAS,CAAC,cAAc,CAAC,CAe3B;AAED,wDAAwD;AACxD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,KAAK,GACX,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAUvE;AAED,6DAA6D;AAC7D,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;;;;;EAYzE;AAED;;;;;;;;GAQG;AACH,wBAAiB,gBAAgB,CAC/B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,uBAAuB,GAC/B,SAAS,CAAC,WAAW,CAAC,CA6BxB;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,qBAAqB,GAC7B,kBAAkB,EAAE,CAetB;AAED,0DAA0D;AAC1D,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,cAAc,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,GACjB,sBAAsB,CAQxB;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,GAChB,UAAU,CAEZ;AAED,iGAAiG;AACjG,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,qDAIpG;AA8ID;;;;;;;;;GASG;AACH,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,mBAAmB,GAC5B,SAAS,CAAC,eAAe,CAAC,CAS5B"}

package/types/app/credentials/registry-settling.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Library home for settling one ACDC v2 registry event (`rip` or `bup`) that a
+ * group sealed in a KEL anchor. Written once so every host (CLI, tufa, wallet,
+ * service) shares one definition of "the registry event is done".
+ *
+ * The TEL event is accepted only after the group's anchor is accepted in the
+ * group KEL and fully witnessed, then the registry escrows are reprocessed:
+ * - `registryEventStatus` is a pure read of durable state.
+ * - `settleRegistryEvent` is the local step: it reprocesses the escrows once.
+ *   Idempotent; it signs, sends and receipts nothing, because
+ *   witness receipting needs host choices (authorization codes, endpoint mode).
+ * - `waitForRegistryEvent` only observes and starts no worker.
+ *
+ * The anchor facts come from the KEL itself, the same facts the Counselor derives
+ * for a group event, because a one-shot host such as the CLI does not run the
+ * Counselor loop. Dependencies are declared collaborators, not an AgentRuntime.
+ */
+import type { SerderACDC } from "cesr-ts";
+import type { Operation } from "effection";
+import type { RegistryStore } from "../../acdc/registering.js";
+import type { Baser } from "../../db/basing.js";
+import type { GroupEventRef } from "../multisig/counseling.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import { type RuntimeClock } from "../runtime/runtime-clock.js";
+import { type WaitResult } from "../runtime/workflow-contract.js";
+/** Elapsed milliseconds between reads of a registry wait. */
+export declare const REGISTRY_WAIT_POLL_MS = 50;
+/** Exact registry event and the group anchor that seals it. */
+export interface RegistryEventRef {
+    /** Registry identifier. */
+    readonly regid: string;
+    /** Sequence number of the TEL event. */
+    readonly sn: number;
+    /** SAID of the TEL event. */
+    readonly said: string;
+    /** Group KEL event that carries the seal. */
+    readonly anchor: GroupEventRef;
+}
+/** Collaborators for the pure read. */
+export interface RegistryEventReadDeps {
+    readonly db: Baser;
+    readonly store: Pick<RegistryStore, "seqEvent">;
+}
+/** Collaborators for {@link settleRegistryEvent}. */
+export interface RegistrySettleDeps extends RegistryEventReadDeps {
+    readonly protocol: Pick<ProtocolProcessor, "processEscrowsOnce">;
+}
+/**
+ * Durable state of one registry event:
+ * - `awaiting-anchor`: the group KEL has not accepted the anchor.
+ * - `awaiting-receipts`: the anchor is accepted but lacks its witness receipts.
+ * - `awaiting-tel`: the anchor is complete; the registry escrows have not accepted the event.
+ * - `accepted`: the TEL event is accepted at its sequence number.
+ */
+export type RegistryEventStatus = {
+    state: "awaiting-anchor";
+} | {
+    state: "awaiting-receipts";
+} | {
+    state: "awaiting-tel";
+} | {
+    state: "accepted";
+};
+/** Outcome of a wait; `timed-out` carries the status read at the deadline. */
+export type RegistryWaitResult = WaitResult<RegistryEventStatus, {
+    deadline: number;
+}>;
+/** Wait choices; the deadline is an epoch-millisecond instant. */
+export interface RegistryWaitOptions {
+    deadline: number;
+    clock?: Pick<RuntimeClock, "now">;
+}
+/** Reference for a TEL event sealed by a known anchor. */
+export declare function registryEventRef(tel: SerderACDC, anchor: GroupEventRef): RegistryEventRef;
+/** Read the status of one registry event; mutates nothing. */
+export declare function registryEventStatus(deps: RegistryEventReadDeps, ref: RegistryEventRef): RegistryEventStatus;
+/**
+ * Local settle step: reprocess the escrows once. That accepts the anchor when
+ * the last member signature has arrived and, once the anchor is complete, the
+ * sealed TEL event. Does nothing for an event already accepted.
+ */
+export declare function settleRegistryEvent(deps: RegistrySettleDeps, ref: RegistryEventRef): Operation<RegistryEventStatus>;
+/** Observe the event until `accepted` or the deadline passes. Starts no worker; the host settles. */
+export declare function waitForRegistryEvent(deps: RegistryEventReadDeps, ref: RegistryEventRef, { deadline, clock }: RegistryWaitOptions): Operation<RegistryWaitResult>;
+//# sourceMappingURL=registry-settling.d.ts.map

package/types/app/credentials/registry-settling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-settling.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/registry-settling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAEhF,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,+DAA+D;AAC/D,MAAM,WAAW,gBAAgB;IAC/B,2BAA2B;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,uCAAuC;AACvC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;CACjD;AAED,qDAAqD;AACrD,MAAM,WAAW,kBAAmB,SAAQ,qBAAqB;IAC/D,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;CAClE;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,KAAK,EAAE,iBAAiB,CAAA;CAAE,GAC5B;IAAE,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC9B;IAAE,KAAK,EAAE,cAAc,CAAA;CAAE,GACzB;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAE1B,8EAA8E;AAC9E,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,mBAAmB,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEvF,kEAAkE;AAClE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;CACnC;AAED,0DAA0D;AAC1D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,GAAG,gBAAgB,CAOzF;AAED,8DAA8D;AAC9D,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,CAM3G;AAED;;;;GAIG;AACH,wBAAiB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAIpH;AAED,qGAAqG;AACrG,wBAAiB,oBAAoB,CACnC,IAAI,EAAE,qBAAqB,EAC3B,GAAG,EAAE,gBAAgB,EACrB,EAAE,QAAQ,EAAE,KAAmB,EAAE,EAAE,mBAAmB,GACrD,SAAS,CAAC,kBAAkB,CAAC,CAQ/B"}

package/types/app/credentials/root-replicating.d.ts

@@ -1,5 +1,6 @@
 import { type Operation } from "effection";
-import type { RegistryRoot } from "../../acdc/salting.js";
+import { type RegistryRoot } from "../../acdc/salting.js";
+import { AppError } from "../../core/errors.js";
 import type { Poster } from "../delivery/forwarding.js";
 import type { Hab } from "../identity/habbing.js";
 import type { RuntimeClock } from "../runtime/runtime-clock.js";
@@ -18,68 +19,79 @@ export type RootDelivery<C extends RootCopy = RootCopy> = {
     copy: C;
     error: unknown;
 };
-/** The operator command that resends a copy automatic replication did not send. */
-export declare const RootCopyRecovery = "tufa vc registry root send";
 /**
- * One automatic copy's outcome, displayed as a `root_copy` JSON line. `exchange`
- * is the prepared copy's SAID; `transmitted` means handed to the mailbox, not
- * received. A copy not sent carries the error and the recovery command.
+ * Send each copy from `sender` to its recipient's `credential` mailbox, in
+ * order, and return one outcome per copy. A failed copy does not stop later
+ * copies. The caller runs `postman.deliverDo` for the duration; Poster wait
+ * misuse or closure still throws.
  */
-export interface RootCopyReport {
-    phase: "root_copy";
-    gid: string;
+export declare function deliverRegistryRoots<C extends RootCopy>(postman: Poster, sender: string, copies: readonly C[]): Operation<RootDelivery<C>[]>;
+/** How one copy attempt ended: `deferred` and `failed` may succeed later; `refused` never will. */
+export type RootCopyKin = "sent" | "deferred" | "refused" | "failed";
+/**
+ * The typed outcome of one copy attempt, whatever drove it (`RootReplicator`, the
+ * `replicateRootCopies` and `resealRootCopies` loops).
+ *
+ * `kin` says whether to try again: `sent` means handed to the mailbox, not received
+ * (`deliveries` names where, as `RootDelivery`); `deferred` means local evidence
+ * (the BUP, key state, a hint) is not yet present; `refused` means the copy is not
+ * authorized; `failed` means the budget ended or the Poster could not send it.
+ * Unless `sent`, `error` is the error itself. `exchange` is the prepared copy's SAID
+ * once one was prepared.
+ */
+export interface RootCopyResult {
+    kin: RootCopyKin;
+    group: string;
     registry: string;
     sender: string;
     recipient: string;
     exchange?: string;
-    transmitted: boolean;
-    error?: string;
-    recovery?: string;
+    deliveries?: string[];
+    error?: unknown;
+}
+/** An accepted rotation whose re-seal recipients could not be selected at all. */
+export interface RootExamination {
+    group: string;
+    rotation: string;
+    error: AppError;
 }
 /**
- * Send each copy from `sender` to its recipient's `credential` mailbox, in
- * order, and return one outcome per copy. A failed copy does not stop later
- * copies. The caller runs `postman.deliverDo` for the duration; Poster wait
- * misuse or closure still throws.
+ * Prepare and deliver one `/registry/root` copy for `gid` from its local member to
+ * `recipient`, before `deadline` (epoch ms of `clock`).
+ *
+ * The copy is sealed with `RegistryRoot.prepare` and a per-registry derived hint
+ * (`hinted`, so a copy that could never verify is reported, not sent). Any
+ * `AppError` ends in the result; any other exception is an invariant failure and
+ * escapes. The caller runs `postman.deliverDo` for the duration.
  */
-export declare function deliverRegistryRoots<C extends RootCopy>(postman: Poster, sender: string, copies: readonly C[]): Operation<RootDelivery<C>[]>;
+export declare function replicateRootCopy(root: RegistryRoot, postman: Poster, clock: RuntimeClock, gid: string, registry: string, recipient: string, deadline: number): Operation<RootCopyResult>;
 /**
- * Fire and forget one copy of each of `registries`' held roots for group
- * `ghab` to each recipient, signed by `ghab`'s local member.
+ * Send one copy of each of `registries`' held roots for group `ghab` to each
+ * recipient, signed by `ghab`'s local member, and return one result per copy.
  *
- * `recipients` defaults to every other current signing member. Each copy is
- * prepared with `RegistryRoot.prepare` and a per-registry derived hint
- * (`hinted`, so a copy that could never verify is reported, not sent) and
- * delivered through `deliverRegistryRoots`, as `tufa vc registry root send`
- * does. `timeoutMs` is this replication's own budget: a copy reached after it
- * ends, or still sending when it ends, is reported unsent. Nothing is retried
- * or recorded and an `AppError` never escapes: every outcome is returned for
- * display. The caller runs `postman.deliverDo` for the duration.
+ * `recipients` defaults to every other current signing member. `timeoutMs` is this
+ * replication's own budget: a copy reached after it ends, or still sending when it
+ * ends, is `failed`. Nothing is retried or recorded and an `AppError` never
+ * escapes. The caller runs `postman.deliverDo` for the duration.
  */
-export declare function replicateRegistryRoots(root: RegistryRoot, postman: Poster, clock: RuntimeClock, ghab: Hab, registries: readonly string[], { recipients, timeoutMs }: {
+export declare function replicateRootCopies(root: RegistryRoot, postman: Poster, clock: RuntimeClock, ghab: Hab, registries: readonly string[], { recipients, timeoutMs }: {
     recipients?: readonly string[];
     timeoutMs: number;
-}): Operation<RootCopyReport[]>;
+}): Operation<RootCopyResult[]>;
 /** Budget for re-seal copies from a command without its own `--timeout`, as KERIpy `rootreplicating.Budget`. */
 export declare const RootResealBudgetMs = 30000;
-/** A re-seal that could not even select its recipients, displayed as a `root_copy` line. */
-export interface RootResealFailure {
-    phase: "root_copy";
-    gid: string;
-    rotation: string;
-    transmitted: false;
-    error: string;
-}
 /**
  * After an accepted group rotation, send held roots to new or rekeyed members.
  *
- * Fire and forget like `replicateRegistryRoots`: only a signer of the rotation
- * that held a prior key sends (`RegistryRoot.resealed`), every such signer
- * sends with no election, a member holding no root for the group sends
- * nothing, and no failure ever fails the rotation. The caller runs
- * `postman.deliverDo` for the duration.
+ * Only a signer of the rotation that held a prior key sends (`RegistryRoot.resealed`),
+ * every such signer sends with no election, and a member holding no root for the
+ * group sends nothing. `examination` is set when the recipients could not be
+ * selected, and then nothing is sent. Fire and forget like `replicateRootCopies`.
  */
-export declare function resealRegistryRoots(root: RegistryRoot, postman: Poster, clock: RuntimeClock, ghab: Hab, rotation: string, { timeoutMs }?: {
+export declare function resealRootCopies(root: RegistryRoot, postman: Poster, clock: RuntimeClock, ghab: Hab, rotation: string, { timeoutMs }?: {
     timeoutMs?: number;
-}): Operation<(RootCopyReport | RootResealFailure)[]>;
+}): Operation<{
+    examination: RootExamination | null;
+    copies: RootCopyResult[];
+}>;
 //# sourceMappingURL=root-replicating.d.ts.map

package/types/app/credentials/root-replicating.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root-replicating.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/root-replicating.ts"],"names":[],"mappings":"AAUA,OAAO,EAAU,KAAK,SAAS,EAAQ,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,sFAAsF;AACtF,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,oGAAoG;AACpG,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,QAAQ,GAAG,QAAQ,IAClD;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9C;IAAE,GAAG,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/C,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,+BAA+B,CAAC;AAE7D;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAiB,oBAAoB,CAAC,CAAC,SAAS,QAAQ,EACtD,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,SAAS,CAAC,EAAE,GACnB,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAe9B;AAaD;;;;;;;;;;;;GAYG;AACH,wBAAiB,sBAAsB,CACrC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,GAAG,EACT,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE;IAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/E,SAAS,CAAC,cAAc,EAAE,CAAC,CA0C7B;AAED,gHAAgH;AAChH,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,4FAA4F;AAC5F,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,KAAK,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,wBAAiB,mBAAmB,CAClC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,GAAG,EACT,QAAQ,EAAE,MAAM,EAChB,EAAE,SAA8B,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9D,SAAS,CAAC,CAAC,cAAc,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAWnD"}
+{"version":3,"file":"root-replicating.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/root-replicating.ts"],"names":[],"mappings":"AAUA,OAAO,EAAU,KAAK,SAAS,EAAQ,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,KAAK,YAAY,EAAkB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAmB,MAAM,sBAAsB,CAAC;AAEjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,sFAAsF;AACtF,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,oGAAoG;AACpG,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,QAAQ,GAAG,QAAQ,IAClD;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9C;IAAE,GAAG,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/C;;;;;GAKG;AACH,wBAAiB,oBAAoB,CAAC,CAAC,SAAS,QAAQ,EACtD,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,SAAS,CAAC,EAAE,GACnB,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAe9B;AAaD,mGAAmG;AACnG,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAErE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,WAAW,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,QAAQ,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAiB,iBAAiB,CAChC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,SAAS,CAAC,cAAc,CAAC,CAgC3B;AAED;;;;;;;;GAQG;AACH,wBAAiB,mBAAmB,CAClC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,GAAG,EACT,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE;IAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/E,SAAS,CAAC,cAAc,EAAE,CAAC,CAU7B;AAED,gHAAgH;AAChH,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC;;;;;;;GAOG;AACH,wBAAiB,gBAAgB,CAC/B,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,GAAG,EACT,QAAQ,EAAE,MAAM,EAChB,EAAE,SAA8B,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9D,SAAS,CAAC;IAAE,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,cAAc,EAAE,CAAA;CAAE,CAAC,CAY9E"}

package/types/app/credentials/root-replicator.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Root replication as a runtime reaction: `/registry/root` copies a group member owes
+ * are worked out from state and sent without any command asking.
+ *
+ * A group's registry root is retained by one custodian, so every other current
+ * member must be sent a sealed copy (KERIpy `replicate` cue, Locksmith
+ * `root_replicating`). Nothing is queued durably. A pass derives what is owed: for each
+ * local group, each registry whose root this member holds, and each other current signing
+ * member, a copy is owed unless `Baser.rrsn` shows one sent to the key the member
+ * currently contributes to the group. A new member has no row and a rekeyed member's row
+ * holds its old key, so both are owed a (re-sealed) copy after an accepted rotation. The
+ * marker is written when the Poster reports a copy sent, and holds the recipient's public
+ * key, never a root. A crash between send and marker costs one harmless resend, since
+ * receiving is idempotent.
+ *
+ * A pass runs for a group on the replicator's first pass, after its latest establishment
+ * changes (an accepted rotation), and when the Dhke completion cue prompts it, so a cue
+ * lost in a crash is recovered by the next start. Sending a root a member already holds to
+ * the group's current members is not a new consent, so nothing here asks anyone.
+ *
+ * A copy that cannot be prepared or delivered stays owed and is retried with a
+ * process-local backoff; `status` reports it until it goes.
+ */
+import type { Operation } from "effection";
+import type { DhkeReplicate } from "../../acdc/dhking.js";
+import type { RegistryRoot } from "../../acdc/salting.js";
+import type { Poster } from "../delivery/forwarding.js";
+import type { Hab } from "../identity/habbing.js";
+import type { RuntimeClock } from "../runtime/runtime-clock.js";
+import type { ChangeSink } from "../runtime/workflow-contract.js";
+import { type RootCopyResult } from "./root-replicating.js";
+/** Most copies one `processOnce` attempts, so a first pass over a large store cannot stall the runtime. */
+export declare const RootSendsPerPass = 4;
+/** Process-local retry delay after a copy's first failed attempt; doubles per attempt up to {@link RootRetryMaxMs}. */
+export declare const RootRetryBaseMs = 1000;
+export declare const RootRetryMaxMs = 300000;
+/** A copy still owed and the error of its last attempt (null before the first attempt). */
+export interface OwedCopyStatus {
+    group: string;
+    registry: string;
+    recipient: string;
+    attempts: number;
+    lastFailure: unknown;
+}
+export interface RootReplicatorStatus {
+    owed: OwedCopyStatus[];
+}
+/** The declared collaborators; no runtime bundle. `postman.deliverDo` is run by the host. */
+export interface RootReplicatorDeps {
+    root: RegistryRoot;
+    postman: Poster;
+    clock: RuntimeClock;
+    changes?: ChangeSink;
+}
+/**
+ * Derives, sends and records registry root copies for a wallet's local groups.
+ *
+ * Holds no durable state of its own beyond `Baser.rrsn`; what is pending and the
+ * backoff are process-local and rebuilt from state. A host calls `prompt` (or
+ * `replicate`) for each Dhke cue and `processOnce` on its loop; both are safe to repeat,
+ * and overlapping `processOnce` calls never send one copy twice.
+ */
+export declare class RootReplicator {
+    #private;
+    constructor(deps: RootReplicatorDeps);
+    /** Re-derive `group`'s owed copies on the next pass and retry its failed copies at once. */
+    prompt(group: string): void;
+    /** The Dhke completion cue: a prompt to run the pass now, not the source of truth. */
+    replicate(cue: Pick<DhkeReplicate, "gid" | "registries">): void;
+    /**
+     * Derive what is owed, then send up to {@link RootSendsPerPass} due copies within
+     * `timeoutMs`. A copy is recorded when sent and kept for retry otherwise. Never throws
+     * on a remote failure; every attempt is returned. The host runs `postman.deliverDo`.
+     */
+    processOnce({ timeoutMs }?: {
+        timeoutMs?: number;
+    }): Operation<RootCopyResult[]>;
+    /**
+     * The fixed-tock pass: re-derive only the groups that were prompted, then send up to {@link RootSendsPerPass}
+     * due copies. A rotation nobody prompted for waits for {@link RootReplicator.sweep}.
+     */
+    processDue({ timeoutMs }?: {
+        timeoutMs?: number;
+    }): Operation<RootCopyResult[]>;
+    /**
+     * Send each registry's root to each recipient now, whatever was sent before, as an
+     * explicit command does; a sent copy is recorded like any other. `recipients` defaults
+     * to every other current signing member.
+     */
+    send(ghab: Hab, registries: readonly string[], { recipients, timeoutMs }: {
+        recipients?: readonly string[];
+        timeoutMs: number;
+    }): Operation<RootCopyResult[]>;
+    /** Whether a copy is owed or a group is waiting to be re-derived; in memory, reads no store. */
+    pending(): boolean;
+    /** Pure read: what is owed and why it has not gone yet. */
+    status(): RootReplicatorStatus;
+    /**
+     * The full check: drop markers of groups that are gone (once) and re-derive each local group that is new or
+     * whose establishment event changed. One keyed read per local identifier, so a host runs it every
+     * many tocks, not every tock.
+     */
+    sweep(): void;
+}
+//# sourceMappingURL=root-replicator.d.ts.map

package/types/app/credentials/root-replicator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-replicator.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/root-replicator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAqB,KAAK,cAAc,EAAsB,MAAM,uBAAuB,CAAC;AAEnG,2GAA2G;AAC3G,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,uHAAuH;AACvH,eAAO,MAAM,eAAe,OAAQ,CAAC;AACrC,eAAO,MAAM,cAAc,SAAU,CAAC;AAEtC,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,cAAc,EAAE,CAAC;CACxB;AAED,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAQD;;;;;;;GAOG;AACH,qBAAa,cAAc;;gBAQb,IAAI,EAAE,kBAAkB;IAIpC,4FAA4F;IAC5F,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK3B,sFAAsF;IACtF,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,YAAY,CAAC,GAAG,IAAI;IAI/D;;;;OAIG;IACF,WAAW,CAAC,EAAE,SAA8B,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;IAK1G;;;OAGG;IACF,UAAU,CAAC,EAAE,SAA8B,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;IAqBzG;;;;OAIG;IACF,IAAI,CACH,IAAI,EAAE,GAAG,EACT,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE;QAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC/E,SAAS,CAAC,cAAc,EAAE,CAAC;IAc9B,gGAAgG;IAChG,OAAO,IAAI,OAAO;IAIlB,2DAA2D;IAC3D,MAAM,IAAI,oBAAoB;IAqC9B;;;;OAIG;IACH,KAAK,IAAI,IAAI;CA0Cd"}

package/types/app/credentials/tel-completion.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Library status and wait for v1 TEL publication, owned here so that every host
+ * (CLI, wallet, service) observes one definition of "the TEL event is done".
+ *
+ * A TEL event is complete when the issuer's KEL holds the anchoring event, that
+ * event has its witness receipts, and the local publication owner finished
+ * disseminating it (`TelPublication`'s `ctel.`). Issuing a credential also needs
+ * the saved credential evidence: publication alone is not verifier acceptance.
+ *
+ * `telEventStatus` is a pure read of durable state. `waitForTelEvent` only
+ * observes: it starts no runtime workers, so the host must already run the
+ * publication owner (a wallet's runtime, or the CLI's `withRuntimeWorkers`), and
+ * an expired deadline is a returned `timed-out` value. See
+ * `app/runtime/workflow-contract.ts`.
+ */
+import type { Operation } from "effection";
+import type { TelPublication } from "../../vdr/tel-publication.js";
+import { type RuntimeClock } from "../runtime/runtime-clock.js";
+import { type WaitResult } from "../runtime/workflow-contract.js";
+/** Elapsed milliseconds between reads of a TEL wait. */
+export declare const TEL_WAIT_POLL_MS = 50;
+/** Collaborator for status and waits: the publication owner's durable facts. */
+export interface TelCompletionDeps {
+    readonly publication: Pick<TelPublication, "progress" | "reger">;
+}
+/** Steps a tracked TEL event can be waiting on. */
+export type TelPhase = "awaitingAnchor" | "awaitingReceipts" | "awaitingPublication" | "awaitingCredentialSave";
+/** Durable status of one TEL event; `unknown` means publication does not track it. */
+export type TelEventStatus = {
+    state: "active";
+    phase: TelPhase;
+} | {
+    state: "complete";
+} | {
+    state: "unknown";
+    reason: "not-tracked";
+};
+/** Outcome of a wait; `timed-out` carries the status read at the deadline. */
+export type TelWaitResult = WaitResult<TelEventStatus, {
+    deadline: number;
+}>;
+/** Wait choices; the deadline is an epoch-millisecond instant so callers can start it before authoring. */
+export interface TelWaitOptions {
+    deadline: number;
+    clock?: Pick<RuntimeClock, "now">;
+}
+/** Read the status of the TEL event `pre` at `sn`; mutates nothing. */
+export declare function telEventStatus(deps: TelCompletionDeps, pre: string, sn?: number): TelEventStatus;
+/** Status of an issued credential: its TEL issuance event plus saved credential evidence. */
+export declare function issuedCredentialStatus(deps: TelCompletionDeps, said: string): TelEventStatus;
+/** Observe one exact TEL coordinate until complete or the deadline passes. Starts no worker. */
+export declare function waitForTelEvent(deps: TelCompletionDeps, pre: string, sn: number, options: TelWaitOptions): Operation<TelWaitResult>;
+/** Observe an issuance until its TEL event is complete and the credential is saved. Starts no worker. */
+export declare function waitForIssuedCredential(deps: TelCompletionDeps, said: string, options: TelWaitOptions): Operation<TelWaitResult>;
+//# sourceMappingURL=tel-completion.d.ts.map