keri-ts 2.1.0 → 2.2.0

package/types/app/ipex/ipex-discloser.d.ts

@@ -0,0 +1,156 @@
+/**
+ * IPEX discloser core: Grant preparation over borrowed protocol owners.
+ *
+ * Holds the parts of disclosure that read no credential inventory: exchange
+ * wires, source anchoring, fresh-issuance Grant bodies and public proof
+ * support, plus graph authorization, registry proofs, Apply and Reply bodies.
+ * Selecting issued or held credentials stays with the embedder
+ * (`WalletDiscloser` extends this class).
+ * No constructor opens a store, starts a worker or loads registry secrets.
+ */
+import { type CesrFrame, SealSource, SerderACDC, SerderKERI, type Versionage } from "cesr-ts";
+import { type Operation } from "effection";
+import type { RegistryCustody } from "../../acdc/custody.js";
+import { type RegistryDisclosure } from "../../acdc/regeventing.js";
+import { type RegistryStore } from "../../acdc/registering.js";
+import type { Registry } from "../../acdc/registraring.js";
+import type { ExchangeInput, Exchanger } from "../exchanges/exchanging.js";
+import { type Hab, type Habery } from "../identity/habbing.js";
+import type { Receiptor, WitnessAuthMap } from "../witness/receipting.js";
+import { type IpexV2BodyOptions } from "./ipex-building.js";
+/** A prepared signed exchange and its supporting public KEL/TEL bytes; delivery and intake stay explicit. */
+export interface PreparedDisclosure {
+    exn: SerderKERI;
+    wire: Uint8Array;
+    support: Uint8Array;
+}
+/** Frozen unsigned Grant and its exact selected nodes; group approval and presentation anchoring remain explicit. */
+export interface PreparedGrantBody {
+    exn: SerderKERI;
+    raw: Uint8Array;
+    nests: Uint8Array;
+}
+/** Fresh origin and explicit far-node proofs; preparation grants neither DH nor inventory consent. */
+export interface IssuanceGrantOptions extends Omit<IpexV2BodyOptions, "prior"> {
+    recipient: string;
+    priorSaid?: string;
+    artifacts?: readonly Uint8Array[];
+}
+/** Reuse a matching accepted KEL seal, or author once and gather real witness receipts. */
+export declare function anchorExchange(hby: Habery, receiptor: Receiptor, hab: Hab, body: SerderKERI | SerderACDC, auths?: WitnessAuthMap): Operation<SealSource>;
+/** Encode one frozen body and its existing prepared nests; source proofs do not alter its SAID. */
+export declare function exchangeWire(hab: Hab, exn: SerderKERI, nested?: Uint8Array, source?: SealSource, gvrsn?: Versionage): Uint8Array;
+/**
+ * Re-encode a signed exchange from its retained, authenticated factors: the wire its signer sent, rebuilt
+ * from the stored signatures or source seal and the stored nests. Signs nothing, so it needs no keys.
+ */
+export declare function storedExchangeWire(retained: ExchangeInput, gvrsn?: Versionage): Operation<Uint8Array>;
+/** Exact admitted node streams; no fuller cached section replaces retained disclosure. */
+export interface HeldCredential {
+    credential: SerderACDC;
+    proof: Uint8Array;
+    artifacts: Uint8Array[];
+    grant: SerderKERI;
+    admit: string;
+}
+/** Credential views presentation selects from; the embedder owns the inventory behind them. */
+export interface CredentialViews {
+    /** Reconstruct a locally issued credential; throws when it is not retained. */
+    issued(said: string): SerderACDC;
+    /** Registry of a retained issuance, when the embedder records one. */
+    issuedRegistry(said: string): string | undefined;
+    /** Read the original admitted proof, or a presenter-authorized transferred view. */
+    held(grant: string, options?: {
+        presenterAuthorized?: boolean;
+    }): Promise<HeldCredential>;
+}
+/** Select an exact issued credential or a retained Grant, never the fullest cached credential. */
+export interface DisclosureSelection {
+    said?: string;
+    fromGrant?: string;
+    /** Exact transferred credential/proof bytes; explicit presenter authorization creates no inventory consent. */
+    transferred?: Uint8Array;
+    presenterAuthorized?: boolean;
+    disclose?: readonly string[];
+    refresh?: boolean;
+    openings?: readonly RegistryDisclosure[];
+    derive?: boolean;
+    artifacts?: readonly Uint8Array[];
+}
+/** Exact parties reviewed by the operator before adding independent issuer authentication. */
+export interface GrantFileSelection {
+    said: string;
+    sender: string;
+    recipient: string;
+}
+/** Valid individual factors may remain below their ordinary signing threshold. */
+export interface InspectedGrantFile {
+    frame: CesrFrame;
+    completeSigners: string[];
+    partialSigners: string[];
+}
+/** Borrow concrete owners only. No constructor opens a store, starts a worker or loads registry secrets. */
+export declare class IpexDiscloser {
+    readonly hby: Habery;
+    readonly registry: RegistryStore;
+    readonly exc: Exchanger;
+    readonly receiptor: Receiptor;
+    readonly custody?: RegistryCustody | undefined;
+    readonly views?: CredentialViews | undefined;
+    constructor(hby: Habery, registry: RegistryStore, exc: Exchanger, receiptor: Receiptor, custody?: RegistryCustody | undefined, views?: CredentialViews | undefined);
+    /** Selection needs the embedder's credential views; fresh issuance and replies do not. */
+    protected credentials(): CredentialViews;
+    /** Resolve only a local individual signer; group approval composes this body in the group workflow. */
+    protected signer(sender: string, gvrsn?: Versionage): Hab;
+    /** Revalidate exact accepted prior bytes without treating notification or salt possession as acceptance. */
+    protected prior(said?: string): Operation<SerderKERI | undefined>;
+    /** Prepare one fresh issuer origin with explicit authenticated far nodes, without changing disclosure authority. */
+    prepareIssuanceGrantBody(sender: string, credential: SerderACDC, options: IssuanceGrantOptions): Operation<PreparedGrantBody>;
+    /** Carry selected public evidence and root-first delegation ancestry; receiver intake still verifies every approval. */
+    proofSupport(raw: Uint8Array, hab: Hab): Uint8Array;
+    /** Public replay includes actual stored witness receipts; it grants no new consent. */
+    kel(hab: Hab): Uint8Array;
+    /** Reduce only the selected attribute view using the existing commitment-preserving Compactor. */
+    protected partial(credential: SerderACDC, paths?: readonly string[]): SerderACDC;
+    /** Authenticate every selected node, then authorize only the shared complete-root expression. */
+    protected requireGraph(origin: string, raw: Uint8Array, pendingPresentation?: boolean): void;
+    /** Recover a candidate using an explicitly possessed UUID; this neither derives a salt nor grants authority. */
+    unblind(opening: RegistryDisclosure, credential: string, states: readonly string[], bounds?: readonly (readonly [number | bigint, string])[]): RegistryDisclosure | null;
+    /** Attach exact accepted issuer openings from head through vacuous suffix to this credential's binding. */
+    registryProof(credential: SerderACDC, registry: string, retained?: readonly RegistryDisclosure[], options?: {
+        derive?: boolean;
+    }): Uint8Array;
+    /** Create an application request; no credential-use approval is invented for negotiation. */
+    prepareApply(sender: string, options: IpexV2BodyOptions): Operation<PreparedDisclosure>;
+    /** Accept or decline the exact authenticated predecessor and its negotiated anchoring choice. */
+    prepareReply(sender: string, verb: "agree" | "spurn", priorSaid: string, message?: string, recipient?: string, auths?: WitnessAuthMap): Operation<PreparedDisclosure>;
+    /** Extend the frozen Grant's exact origin proof; ordinary intake still authenticates the supplied presentation evidence. */
+    attachPresentationProof(prepared: PreparedGrantBody, opening: RegistryDisclosure, source: SealSource): Operation<PreparedGrantBody>;
+    /** Select immutable admitted/transferred nests; proof refresh changes attachments only when explicitly requested. */
+    protected selected(selection: DisclosureSelection, offer?: boolean): Operation<Uint8Array>;
+    /** Offer only the selected commitment/view without issuer proof attachments. */
+    prepareOffer(sender: string, selection: DisclosureSelection, options: IpexV2BodyOptions & {
+        priorSaid?: string;
+    }): Operation<PreparedDisclosure>;
+    /** Select and authorize once before freezing a Grant body, without signing or committing group approval. */
+    prepareGrantBody(sender: string, selection: DisclosureSelection, options: IpexV2BodyOptions & {
+        priorSaid?: string;
+    }): Operation<PreparedGrantBody>;
+    /** Freeze an endorsement file from issued evidence, allowing only retryable current-opening absence. */
+    prepareGrantFileBody(sender: string, selection: DisclosureSelection, options: IpexV2BodyOptions & {
+        priorSaid?: string;
+    }): Operation<PreparedGrantBody>;
+    /** Both public preparation profiles preserve the same selected view and body construction. */
+    protected grantBody(sender: string, selection: DisclosureSelection, options: IpexV2BodyOptions & {
+        priorSaid?: string;
+    }, pendingPresentation: boolean): Operation<PreparedGrantBody>;
+    /** Authenticate and authorize the selected graph before the Grant builder and after receipt waits. */
+    prepareGrant(sender: string, selection: DisclosureSelection, options: IpexV2BodyOptions & {
+        priorSaid?: string;
+        presentation?: Registry;
+        auths?: WitnessAuthMap;
+    }): Operation<PreparedDisclosure>;
+    /** Inspect one exact unanchored Grant without dropping invalid signatures or publishing any evidence. */
+    inspectGrantFile(raw: Uint8Array, selection?: GrantFileSelection): InspectedGrantFile;
+}
+//# sourceMappingURL=ipex-discloser.d.ts.map

package/types/app/ipex/ipex-discloser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-discloser.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-discloser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,KAAK,SAAS,EAYd,UAAU,EACV,UAAU,EACV,UAAU,EAGV,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAEL,KAAK,kBAAkB,EAKxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAM3D,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAA8B,KAAK,GAAG,EAAE,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAG3F,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAe,KAAK,iBAAiB,EAAkB,MAAM,oBAAoB,CAAC;AAKzF,6GAA6G;AAC7G,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,UAAU,CAAC;CACrB;AACD,qHAAqH;AACrH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,UAAU,CAAC;IAChB,GAAG,EAAE,UAAU,CAAC;IAChB,KAAK,EAAE,UAAU,CAAC;CACnB;AACD,sGAAsG;AACtG,MAAM,WAAW,oBAAqB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;CACnC;AACD,2FAA2F;AAC3F,wBAAiB,cAAc,CAC7B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,UAAU,GAAG,UAAU,EAC7B,KAAK,CAAC,EAAE,cAAc,GACrB,SAAS,CAAC,UAAU,CAAC,CA0BvB;AAED,mGAAmG;AACnG,wBAAgB,YAAY,CAC1B,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,UAAU,EACf,MAAM,GAAE,UAA6B,EACrC,MAAM,CAAC,EAAE,UAAU,EACnB,KAAK,GAAE,UAAqB,GAC3B,UAAU,CAWZ;AAED;;;GAGG;AACH,wBAAiB,kBAAkB,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,GAAE,UAAqB,GAAG,SAAS,CAAC,UAAU,CAAC,CAqBhH;AAED,0FAA0F;AAC1F,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,+FAA+F;AAC/F,MAAM,WAAW,eAAe;IAC9B,+EAA+E;IAC/E,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,sEAAsE;IACtE,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACjD,oFAAoF;IACpF,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC3F;AACD,kGAAkG;AAClG,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+GAA+G;IAC/G,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACzC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;CACnC;AACD,8FAA8F;AAC9F,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,CAAC;IACjB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AACD,4GAA4G;AAC5G,qBAAa,aAAa;IAEtB,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,QAAQ,CAAC,QAAQ,EAAE,aAAa;IAChC,QAAQ,CAAC,GAAG,EAAE,SAAS;IACvB,QAAQ,CAAC,SAAS,EAAE,SAAS;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe;gBALvB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,aAAa,EACvB,GAAG,EAAE,SAAS,EACd,SAAS,EAAE,SAAS,EACpB,OAAO,CAAC,EAAE,eAAe,YAAA,EACzB,KAAK,CAAC,EAAE,eAAe,YAAA;IAOlC,0FAA0F;IAC1F,SAAS,CAAC,WAAW,IAAI,eAAe;IAIxC,uGAAuG;IACvG,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,UAAqB,GAAG,GAAG;IASnE,4GAA4G;IAC5G,SAAS,CAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC;IAYlE,oHAAoH;IACnH,wBAAwB,CACvB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,oBAAoB,GAC5B,SAAS,CAAC,iBAAiB,CAAC;IAwD/B,wHAAwH;IACxH,YAAY,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,GAAG,UAAU;IAwCnD,uFAAuF;IACvF,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU;IASzB,kGAAkG;IAClG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU;IAqBhF,iGAAiG;IACjG,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,mBAAmB,UAAQ,GAAG,IAAI;IAuD1F,gHAAgH;IAChH,OAAO,CACL,OAAO,EAAE,kBAAkB,EAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,MAAM,GAAE,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,EAAO,GAC3D,kBAAkB,GAAG,IAAI;IAO5B,2GAA2G;IAC3G,aAAa,CACX,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,SAAS,kBAAkB,EAAO,EAC5C,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GACjC,UAAU;IA+Cb,6FAA6F;IAC5F,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,SAAS,CAAC,kBAAkB,CAAC;IAQxF,iGAAiG;IAChG,YAAY,CACX,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,GAAG,OAAO,EACvB,SAAS,EAAE,MAAM,EACjB,OAAO,SAAK,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,cAAc,GACrB,SAAS,CAAC,kBAAkB,CAAC;IAQhC,4HAA4H;IAC3H,uBAAuB,CACtB,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,UAAU,GACjB,SAAS,CAAC,iBAAiB,CAAC;IA0B/B,qHAAqH;IACrH,SAAS,CAAE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,EAAE,KAAK,UAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;IA8EzF,gFAAgF;IAC/E,YAAY,CACX,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,mBAAmB,EAC9B,OAAO,EAAE,iBAAiB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAClD,SAAS,CAAC,kBAAkB,CAAC;IAUhC,4GAA4G;IAC3G,gBAAgB,CACf,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,mBAAmB,EAC9B,OAAO,EAAE,iBAAiB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAClD,SAAS,CAAC,iBAAiB,CAAC;IAG/B,wGAAwG;IACvG,oBAAoB,CACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,mBAAmB,EAC9B,OAAO,EAAE,iBAAiB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAClD,SAAS,CAAC,iBAAiB,CAAC;IAG/B,8FAA8F;IAC9F,SAAS,CAAE,SAAS,CAClB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,mBAAmB,EAC9B,OAAO,EAAE,iBAAiB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EACnD,mBAAmB,EAAE,OAAO,GAC3B,SAAS,CAAC,iBAAiB,CAAC;IAa/B,sGAAsG;IACrG,YAAY,CACX,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,mBAAmB,EAC9B,OAAO,EAAE,iBAAiB,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,cAAc,CAAA;KAAE,GACnG,SAAS,CAAC,kBAAkB,CAAC;IAmChC,yGAAyG;IACzG,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,kBAAkB,GAAG,kBAAkB;CAgEtF"}

package/types/app/ipex/ipex-granting.d.ts

@@ -0,0 +1,145 @@
+/**
+ * Legacy (v1) IPEX credential grant and admit for a single-signature
+ * controller, plus the step that saves a granted credential. Owned by the
+ * library so that every host (CLI, wallet, service) runs one implementation.
+ * Conversation verbs and the status/wait reads live in `ipex-conversation.ts`.
+ *
+ * Operations follow the workflow contract. `sendIpexGrant` and `sendIpexAdmit`
+ * are explicit: each validates, signs one exchange, accepts it locally, hands
+ * it to the Poster and returns once that delivery attempt has an outcome.
+ * `sendIpexAdmit` is the holder's consent to a grant. `settleGrantCredential`
+ * imports a stored grant's artifacts so the wallet can save the credential; it
+ * is idempotent and signs nothing. Waiting for the credential is
+ * `waitForIpexExchange(..., { until: "credential-saved" })`: the host's own
+ * workers make escrowed evidence resolve.
+ *
+ * Boundaries:
+ * - Collaborators are narrow (ADR-0013); the host owns their lifetimes and runs
+ *   the Poster worker while a send awaits its outcome.
+ * - `deliver: false` authors and accepts locally but leaves delivery to the
+ *   caller, who then holds the bytes (for export to a file).
+ * - Grant files, mailbox intake and group controllers are host concerns: the
+ *   library starts from a grant already stored as accepted.
+ */
+import type { SerderKERI, Versionage } from "cesr-ts";
+import type { Operation } from "effection";
+import type { Reger } from "../../db/reger.js";
+import type { Hab } from "../identity/habbing.js";
+import type { Habery } from "../identity/habbing.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import { type IpexExchangeStatus, type IpexSendDeps } from "./ipex-conversation.js";
+/** Collaborators grant and admit need: the send set plus the credential store. */
+export interface IpexGrantDeps extends IpexSendDeps {
+    /** Borrowed credential store holding the credential, its TEL and the saved index. */
+    readonly reger: Reger;
+}
+/** Choices for {@link sendIpexGrant}. */
+export interface IpexGrantSendOptions {
+    /** Resolved recipient AID. */
+    recipient: string;
+    /** SAID of the stored credential to grant. */
+    credential: string;
+    /** Free-text `m` field; defaults to empty. */
+    message?: string;
+    /** Said of the accepted agree this grant answers; omit for an unsolicited grant. */
+    agree?: string;
+    /** Attachment genus; defaults to the exchange's own. */
+    gvrsn?: Versionage;
+    /** False leaves delivery to the caller. Defaults to true. */
+    deliver?: boolean;
+}
+/** The grant a send signed and accepted. */
+export interface IpexGrantSent {
+    readonly grant: SerderKERI;
+    /** SAID of the granted credential. */
+    readonly credential: string;
+    /** Support messages (issuer KEL, TEL and the like) that precede the grant, in order. */
+    readonly support: Uint8Array[];
+    /** Signed grant followed by its attachments. */
+    readonly wire: Uint8Array;
+    /** Successful destination URLs; empty when delivery was left to the caller. */
+    readonly deliveries: string[];
+}
+/**
+ * Grant a stored single-signature credential: validate the optional agree,
+ * assemble the embedded artifacts and support messages, sign, accept locally
+ * and deliver support then grant as one stream. Granting a credential again
+ * without an agree authors another grant; an agree answers once.
+ *
+ * @throws ValidationError for a non-local sender, a refused prior, missing local
+ * credential evidence or a grant local state does not accept.
+ */
+export declare function sendIpexGrant(deps: IpexGrantDeps, sender: Hab, { recipient, credential, message, agree, gvrsn, deliver }: IpexGrantSendOptions): Operation<IpexGrantSent>;
+/** An accepted grant the holder may admit. */
+export interface AdmittableGrant {
+    readonly grant: SerderKERI;
+    /** The grant's sender, who receives the admit. */
+    readonly recipient: string;
+    /** SAID of the granted credential. */
+    readonly credential: string;
+}
+/**
+ * Validate a stored grant for admission by `holder` without signing: it is
+ * accepted, addressed to the holder, carries a credential and has no accepted
+ * response yet. Saving is not required here.
+ *
+ * @throws ValidationError when the grant is not stored, was already answered or is not addressed to `holder`.
+ */
+export declare function requireAdmittableGrant(deps: Pick<IpexGrantDeps, "hby" | "reger">, holder: Hab, grantSaid: string): AdmittableGrant;
+/** Choices for {@link sendIpexAdmit}. */
+export interface IpexAdmitOptions {
+    /** Free-text `m` field; defaults to empty. */
+    message?: string;
+    /** Attachment genus; defaults to the exchange's own. */
+    gvrsn?: Versionage;
+    /** Refuse unless the granted credential is saved. Defaults to true; false authors the admit without that wallet fact. */
+    requireSaved?: boolean;
+    /** False leaves delivery to the caller. Defaults to true. */
+    deliver?: boolean;
+}
+/** The admit a send signed and accepted. */
+export interface IpexAdmitSent {
+    readonly admit: SerderKERI;
+    readonly grant: SerderKERI;
+    /** SAID of the granted credential. */
+    readonly credential: string;
+    /** Whether the wallet had saved the credential when the admit was signed. */
+    readonly saved: boolean;
+    /** Signed admit followed by its attachments. */
+    readonly wire: Uint8Array;
+    /** Successful destination URLs; empty when delivery was left to the caller. */
+    readonly deliveries: string[];
+}
+/**
+ * The holder's consent to a grant: validate the stored grant, sign an admit,
+ * accept it locally and deliver it to the grant's sender. A grant that already
+ * has an accepted response is refused, so a second admit never re-signs.
+ *
+ * @throws ValidationError as for {@link requireAdmittableGrant}, for a credential
+ * that is not saved when `requireSaved` holds, or for an admit local state does not accept.
+ */
+export declare function sendIpexAdmit(deps: IpexGrantDeps, holder: Hab, grantSaid: string, { message, gvrsn, requireSaved, deliver }?: IpexAdmitOptions): Operation<IpexAdmitSent>;
+/** Collaborators for saving a granted credential. */
+export interface IpexSettleDeps {
+    /** Borrowed identities, accepted exchanges and the escrow paths stored artifacts are rebuilt from. */
+    readonly hby: Habery;
+    /** Credential store. */
+    readonly reger: Reger;
+    /** Receive processor that accepts the replayed grant artifacts. */
+    readonly protocol: ProtocolProcessor;
+}
+/**
+ * Import a stored grant's authenticated artifacts once, so the wallet can save
+ * its credential as evidence resolves. Idempotent: a credential that is already
+ * saved is not replayed. Signs nothing and does not wait; observe the outcome
+ * with `waitForIpexExchange(..., { until: "credential-saved" })` while the
+ * host's workers run.
+ *
+ * @param holder AID the grant must be addressed to.
+ * @returns The grant's status after the import.
+ * @throws ValidationError when the grant is not stored or not addressed to `holder`.
+ */
+export declare function settleGrantCredential(deps: IpexSettleDeps, holder: string, grantSaid: string, { gvrsn }?: {
+    gvrsn?: Versionage;
+}): Operation<IpexExchangeStatus>;
+//# sourceMappingURL=ipex-granting.d.ts.map

package/types/app/ipex/ipex-granting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-granting.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-granting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,YAAY,EAGlB,MAAM,wBAAwB,CAAC;AAUhC,kFAAkF;AAClF,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,sCAAsC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wFAAwF;IACxF,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;IAC/B,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAiB,aAAa,CAC5B,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,GAAG,EACX,EAAE,SAAS,EAAE,UAAU,EAAE,OAAY,EAAE,KAAK,EAAE,KAAK,EAAE,OAAc,EAAE,EAAE,oBAAoB,GAC1F,SAAS,CAAC,aAAa,CAAC,CAkB1B;AAED,8CAA8C;AAC9C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sCAAsC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,OAAO,CAAC,EAC1C,MAAM,EAAE,GAAG,EACX,SAAS,EAAE,MAAM,GAChB,eAAe,CASjB;AAED,yCAAyC;AACzC,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,yHAAyH;IACzH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,sCAAsC;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAiB,aAAa,CAC5B,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,GAAG,EACX,SAAS,EAAE,MAAM,EACjB,EAAE,OAAY,EAAE,KAAK,EAAE,YAAmB,EAAE,OAAc,EAAE,GAAE,gBAAqB,GAClF,SAAS,CAAC,aAAa,CAAC,CAsB1B;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,sGAAsG;IACtG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,qBAAqB,CACpC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,EAAE,KAAK,EAAE,GAAE;IAAE,KAAK,CAAC,EAAE,UAAU,CAAA;CAAO,GACrC,SAAS,CAAC,kBAAkB,CAAC,CAO/B"}

package/types/app/ipex/ipex-grouping.d.ts

@@ -31,6 +31,20 @@ export interface MultisigIpexApprovalResult extends GroupSendResult {
     /** Null while this member lacks required evidence, even if other members completed the child. */
     approved: Uint8Array | null;
 }
+/** What a member's local approval of one stored IPEX proposal produced, before anything is sent. */
+export interface LocalMultisigIpexApproval {
+    embedded: SerderKERI;
+    groupHab: Hab;
+    genus: Versionage;
+    /** This member's exact approved wire, accepted locally; null while it lacks required evidence. */
+    approved: Uint8Array | null;
+}
+/**
+ * Approve one stored multisig wrapper around an IPEX message locally: validate it, reuse or sign this member's
+ * contribution and accept it, without publishing or sending anything. The explicit consent of the library's group
+ * IPEX operations; {@link approveMultisigIpex} adds publication and the lead's delivery.
+ */
+export declare function approveMultisigIpexLocally(hby: Habery, protocol: ProtocolProcessor, reger: Reger | null, wrapper: SerderKERI): Operation<LocalMultisigIpexApproval>;
 /**
  * Approve one pending multisig wrapper around an embedded IPEX message.
  *
@@ -109,4 +123,8 @@ export declare function sendCredentialBytes(postman: Poster, hab: Hab, dest: str
  * @returns Actual delivered URLs; a failed concrete outcome throws its original error.
  */
 export declare function sendCredentialStream(postman: Poster, hab: Hab, dest: string, msgs: Uint8Array[]): Operation<string[]>;
+/** The stored `/multisig/exn` wrapper that carries the IPEX message `embeddedSaid`, if one is held. */
+export declare function findStoredMultisigIpex(db: Baser, embeddedSaid: string): SerderKERI | null;
+/** Whether the local member of `group` already holds a verified contribution to `embedded` (a recorded approval). */
+export declare function groupIpexApproved(hby: Habery, group: string, embedded: SerderKERI): boolean;
 //# sourceMappingURL=ipex-grouping.d.ts.map

package/types/app/ipex/ipex-grouping.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ipex-grouping.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-grouping.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAaL,UAAU,EAEV,KAAK,UAAU,EAGhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAS/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAS1D,OAAO,EAEL,KAAK,eAAe,EAQrB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAkD5E,yGAAyG;AACzG,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,GAAG,IAAI,CAW1G;AACD,8HAA8H;AAC9H,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,GAAG,EACV,GAAG,EAAE,UAAU,GACd,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,CA0E9B;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,0BAA2B,SAAQ,eAAe;IACjE,QAAQ,EAAE,OAAO,CAAC;IAClB,iGAAiG;IACjG,QAAQ,EAAE,UAAU,GAAG,IAAI,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,mBAAmB,CAClC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,OAAO,EAAE,UAAU,EACnB,OAAO,GAAE,2BAAgC,GACxC,SAAS,CAAC,0BAA0B,CAAC,CAgDvC;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAWxF;AA2GD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,WAAW,GAAE,UAA6B,EAC1C,KAAK,GAAE,UAAqB,GAC3B,UAAU,CAwCZ;AA8ED,qGAAqG;AACrG,wBAAiB,wBAAwB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,UAAU,CAAC,EAAE,UAAU,GACtB,SAAS,CAAC,eAAe,CAAC,CAM5B;AAED;;;;GAIG;AACH,wBAAiB,uBAAuB,CACtC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,UAAU,CAAC,EAAE,UAAU,GACtB,SAAS,CAAC,eAAe,CAAC,CAmB5B;AAED,4GAA4G;AAC5G,wBAAiB,iCAAiC,CAChD,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,KAAK,GAAG,IAAI,GAClB,SAAS,CAAC,IAAI,CAAC,CAYjB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,KAAK,GAAG,UAAU,GAAG,IAAI,CAgBpE;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,KAAK,GAAE,UAAqB,EAC5B,QAAQ,GAAE,aAAa,GAAG,IAAW,EACrC,SAAS,CAAC,EAAE,SAAS,GACpB,SAAS,CAAC,MAAM,EAAE,CAAC,CAiErB;AAgBD,4CAA4C;AAC5C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CAM3E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,EAClB,KAAK,GAAE,UAAqB,GAC3B,UAAU,CAiBZ;AAED;;;;;;;;GAQG;AACH,wBAAiB,mBAAmB,CAClC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAAE,GACjB,SAAS,CAAC,MAAM,EAAE,CAAC,CAcrB;AAED;;;;;;;;GAQG;AACH,wBAAiB,oBAAoB,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAAE,GACjB,SAAS,CAAC,MAAM,EAAE,CAAC,CAKrB"}
+{"version":3,"file":"ipex-grouping.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-grouping.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAaL,UAAU,EAEV,KAAK,UAAU,EAGhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAS/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAS1D,OAAO,EAEL,KAAK,eAAe,EAQrB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAkD5E,yGAAyG;AACzG,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,GAAG,IAAI,CAW1G;AACD,8HAA8H;AAC9H,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,GAAG,EACV,GAAG,EAAE,UAAU,GACd,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,CA0E9B;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,0BAA2B,SAAQ,eAAe;IACjE,QAAQ,EAAE,OAAO,CAAC;IAClB,iGAAiG;IACjG,QAAQ,EAAE,UAAU,GAAG,IAAI,CAAC;CAC7B;AAED,oGAAoG;AACpG,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,UAAU,CAAC;IACrB,QAAQ,EAAE,GAAG,CAAC;IACd,KAAK,EAAE,UAAU,CAAC;IAClB,kGAAkG;IAClG,QAAQ,EAAE,UAAU,GAAG,IAAI,CAAC;CAC7B;AAED;;;;GAIG;AACH,wBAAiB,0BAA0B,CACzC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,OAAO,EAAE,UAAU,GAClB,SAAS,CAAC,yBAAyB,CAAC,CAmBtC;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,mBAAmB,CAClC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,OAAO,EAAE,UAAU,EACnB,OAAO,GAAE,2BAAgC,GACxC,SAAS,CAAC,0BAA0B,CAAC,CAiCvC;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAWxF;AA2GD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,WAAW,GAAE,UAA6B,EAC1C,KAAK,GAAE,UAAqB,GAC3B,UAAU,CAwCZ;AA8ED,qGAAqG;AACrG,wBAAiB,wBAAwB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,UAAU,CAAC,EAAE,UAAU,GACtB,SAAS,CAAC,eAAe,CAAC,CAM5B;AAED;;;;GAIG;AACH,wBAAiB,uBAAuB,CACtC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,UAAU,CAAC,EAAE,UAAU,GACtB,SAAS,CAAC,eAAe,CAAC,CAmB5B;AAED,4GAA4G;AAC5G,wBAAiB,iCAAiC,CAChD,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,KAAK,GAAG,IAAI,GAClB,SAAS,CAAC,IAAI,CAAC,CAYjB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,KAAK,GAAG,UAAU,GAAG,IAAI,CAgBpE;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,UAAU,EACpB,KAAK,GAAE,UAAqB,EAC5B,QAAQ,GAAE,aAAa,GAAG,IAAW,EACrC,SAAS,CAAC,EAAE,SAAS,GACpB,SAAS,CAAC,MAAM,EAAE,CAAC,CAiErB;AAgBD,4CAA4C;AAC5C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CAM3E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,EAClB,KAAK,GAAE,UAAqB,GAC3B,UAAU,CAiBZ;AAED;;;;;;;;GAQG;AACH,wBAAiB,mBAAmB,CAClC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAAE,GACjB,SAAS,CAAC,MAAM,EAAE,CAAC,CAcrB;AAED;;;;;;;;GAQG;AACH,wBAAiB,oBAAoB,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAAE,GACjB,SAAS,CAAC,MAAM,EAAE,CAAC,CAKrB;AA8DD,uGAAuG;AACvG,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAOzF;AAED,qHAAqH;AACrH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,OAAO,CAO3F"}