keri-ts 2.1.0 → 2.2.0

package/types/app/runtime/operation-owners.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Composition and loop of the runtime's operations owners.
+ *
+ * The runtime owns one `IssuanceOperations`, one
+ * `PresentationOperations` and one `UnblindingOperations`, each an in-memory live table
+ * with status derived from the protocol stores, and,
+ * when it has a registry root owner, one `RootReplicator`. `runAgentRuntime` runs each
+ * owner's `processOnce` on one fiber with an adaptive cadence ({@link operationOwnersDo}). The owners
+ * act only for operations a user began or copies already owed.
+ *
+ * The root replicator is a runtime reaction. It derives what is owed from state and records
+ * sent copies in the Baser (`rrsn.`), so a CLI command that sends copies through its own
+ * replicator shares that record with the loop and a later pass does not repeat its sends.
+ */
+import { type Operation } from "effection";
+import { type DerivedUpdateStore } from "../../acdc/custody.js";
+import type { Regery } from "../../acdc/registraring.js";
+import type { RegistryRoot } from "../../acdc/salting.js";
+import { RootReplicator } from "../credentials/root-replicator.js";
+import type { Poster } from "../delivery/forwarding.js";
+import type { Exchanger } from "../exchanges/exchanging.js";
+import type { Habery } from "../identity/habbing.js";
+import { GroupIpexOperations } from "../ipex/group-ipex.js";
+import type { CredentialViews } from "../ipex/ipex-discloser.js";
+import { IssuanceOperations } from "../ipex/issuance.js";
+import { PresentationOperations } from "../ipex/presenting.js";
+import { UnblindingOperations } from "../ipex/unblinding-workflow.js";
+import type { Counselor } from "../multisig/counseling.js";
+import type { Multiplexor } from "../multisig/grouping.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import type { Reactor } from "../protocol/reactor.js";
+import type { Receiptor } from "../witness/receipting.js";
+import { type DoerPacing } from "./doing.js";
+import type { IpexAuxiliaries } from "./ipex-auxiliaries.js";
+import type { RetryPolicy } from "./retry-backoff.js";
+import type { RuntimeClock } from "./runtime-clock.js";
+import type { ChangeSink } from "./workflow-contract.js";
+/** Milliseconds between owner passes; the cadence of the CLI drivers the loop replaced. */
+export declare const OWNER_TOCK_MS = 50;
+/** Tocks between the replicator's full rotation checks: 1200 tocks of 50 ms is a minute. */
+export declare const OWNER_SWEEP_TOCKS = 1200;
+/** The production pacing of the owner loop. */
+export declare const OWNER_PACING: Readonly<DoerPacing>;
+/**
+ * What an embedder may supply; every field is optional. The operation tables are in memory and their status is
+ * derived from the protocol stores, so there is no store port for them.
+ */
+export interface OperationStores {
+    /**
+     * Non-secret blind-derivation coordinates for issuance and derived presentation. Defaults to
+     * {@link BaserDerivedUpdateStore} over the registry environment's database, which is durable wherever the
+     * registry store is; a wallet with its own table supplies that instead.
+     */
+    derived?: DerivedUpdateStore;
+    /** The embedder's credential inventory, from which presentation selects issued and held credentials. Without it only replies and `apply` can be presented. */
+    views?: CredentialViews;
+    /** Receives identity-only changes after commit; defaults to the runtime's Signaler when it has one. */
+    changes?: ChangeSink;
+}
+/** The operations owners of one runtime, additive on `AgentRuntime.operations`. */
+export interface RuntimeOperations {
+    readonly issuance: IssuanceOperations;
+    /** A local group's v2 IPEX messages (its Admit): propose, approve, status, wait. */
+    readonly groupIpex: GroupIpexOperations;
+    readonly presentation: PresentationOperations;
+    readonly unblinding: UnblindingOperations;
+    /** What the owner loop could not do; read by a host that reports runtime health. */
+    readonly health: OwnerHealth;
+}
+/** The last failure of an owner pass that no single operation owned, and how many there have been. */
+export interface OwnerFault {
+    owner: "issuance" | "groupIpex" | "presentation" | "unblinding" | "replicator";
+    error: string;
+    /** ISO 8601 time of the failure on the host clock. */
+    at: string;
+}
+/**
+ * Failures of the owner loop itself. A failure of one operation (a delivery that throws, an unreadable stored
+ * Grant) ends that operation as `failed` and is never recorded here; this records only what escaped an owner
+ * pass, which the loop survives so that the other owners keep running. `faults` counts them and `last` keeps
+ * the latest. Nothing clears it: a host reads it and decides.
+ */
+export declare class OwnerHealth {
+    faults: number;
+    last: OwnerFault | null;
+}
+/** What the runtime composes for its operations owners. */
+export interface ComposedOwners {
+    operations: RuntimeOperations;
+    rootReplicator: RootReplicator | null;
+}
+/** The runtime pieces the owners borrow; no AgentRuntime bundle. */
+export interface OwnerParts {
+    hby: Habery;
+    acdc: Regery;
+    exc: Exchanger;
+    protocol: ProtocolProcessor;
+    reactor: Reactor;
+    postman: Poster;
+    receiptor: Receiptor;
+    ipex: IpexAuxiliaries;
+    clock: RuntimeClock;
+    registryRoot: RegistryRoot | null;
+    /** Delegates the DH wrappers of group issuance; one owner per runtime registers. */
+    mux: Multiplexor;
+    /** Counsels the group anchor of a custodian's registry update. */
+    counselor: Counselor;
+    /** Delivery retry delays of the owners; the production policy when absent. */
+    retry?: Readonly<RetryPolicy>;
+    /** Milliseconds between issuer query resends; one second when absent. */
+    queryResendMs?: number;
+    changes?: ChangeSink;
+}
+/** Construct the owners over their in-memory tables; the derivation store defaults to the registry database. */
+export declare function composeOwners(parts: OwnerParts, stores?: OperationStores): ComposedOwners;
+/** What the owner loop runs: the owners, the replicator, the DH owners whose completion cues prompt it, the clock. */
+export interface OwnerLoopParts extends ComposedOwners {
+    ipex: IpexAuxiliaries;
+    clock: RuntimeClock;
+}
+/**
+ * Run every owner on one fiber until halted, as a fixed-tock doer (`./doing.ts`): each tock runs an owner that
+ * has live work, then the replicator (after prompting it with the live DH owners' `replicated` cues), and then
+ * the loop waits one tock. Work begun between tocks is seen on the next one; nothing wakes the loop early.
+ *
+ * Idle cost, per tock: four constant-time table checks, one in-memory walk of the Unblind owners for an owed
+ * reply, one drain of each DH owner's cue deck, and the replicator's emptiness checks. The replicator's
+ * rotation check (the establishment SAID of each local group, one keyed read per local identifier) runs on
+ * tock 0 and every `pacing.sweepTocks`. No owner reads a protocol store. Only the first pass, once, scans the
+ * pending exchange escrow for resumable Grants.
+ *
+ * A failure that escapes an owner pass is recorded in `operations.health` and the loop keeps running, so
+ * one owner's fault never stops the others. The owners run one after another, so a delivery that does not return holds the others up until it fails or
+ * its Grant deadline passes; operations already bound each delivery by that deadline.
+ */
+export declare function operationOwnersDo(owners: OwnerLoopParts, pacing?: Readonly<DoerPacing>): Operation<never>;
+//# sourceMappingURL=operation-owners.d.ts.map

package/types/app/runtime/operation-owners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-owners.d.ts","sourceRoot":"","sources":["../../../src/app/runtime/operation-owners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACzF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAqB,kBAAkB,EAAkB,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,KAAK,UAAU,EAAW,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,2FAA2F;AAC3F,eAAO,MAAM,aAAa,KAAK,CAAC;AAChC,4FAA4F;AAC5F,eAAO,MAAM,iBAAiB,OAAO,CAAC;AACtC,+CAA+C;AAC/C,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,UAAU,CAG5C,CAAC;AAEH;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,8JAA8J;IAC9J,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,oFAAoF;IACpF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,sGAAsG;AACtG,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,cAAc,GAAG,YAAY,GAAG,YAAY,CAAC;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;;GAKG;AACH,qBAAa,WAAW;IACtB,MAAM,SAAK;IACX,IAAI,EAAE,UAAU,GAAG,IAAI,CAAQ;CAChC;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;CACvC;AAED,oEAAoE;AACpE,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,SAAS,CAAC;IACrB,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,oFAAoF;IACpF,GAAG,EAAE,WAAW,CAAC;IACjB,kEAAkE;IAClE,SAAS,EAAE,SAAS,CAAC;IACrB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9B,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,gHAAgH;AAChH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,GAAE,eAAoB,GAAG,cAAc,CA2D7F;AAED,sHAAsH;AACtH,MAAM,WAAW,cAAe,SAAQ,cAAc;IACpD,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;CACrB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAiB,iBAAiB,CAChC,MAAM,EAAE,cAAc,EACtB,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAgB,GAC1C,SAAS,CAAC,KAAK,CAAC,CA6BlB"}

package/types/app/runtime/retry-backoff.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Retry state for a transient delivery failure inside a live operation.
+ *
+ * A member that is briefly offline is normal, so an owner keeps the unsent work, waits with a doubling delay and
+ * tries again on a later pass instead of ending the operation at the first error. The owner decides when retrying
+ * stops: an operation with a deadline ends at the deadline, and one without ends once failures have lasted the
+ * bound it states.
+ */
+/** Delay after the first failure; it doubles per consecutive failure up to {@link RETRY_MAX_MS}. */
+export declare const RETRY_BASE_MS = 1000;
+/** Longest delay between attempts. */
+export declare const RETRY_MAX_MS = 30000;
+/** How long failures may last before an owner with no deadline of its own gives up. */
+export declare const RETRY_BOUND_MS = 600000;
+/**
+ * How long a retried action waits: it starts at `baseMs`, doubles per consecutive failure up to `maxMs`, and an
+ * owner that gives up does so once failures have lasted `boundMs`. Owners that never give up ignore the bound.
+ * Milliseconds; a test passes small values.
+ */
+export interface RetryPolicy {
+    baseMs: number;
+    maxMs: number;
+    boundMs: number;
+}
+/** The production delays of delivery retries. */
+export declare const DEFAULT_RETRY_POLICY: Readonly<RetryPolicy>;
+/** Consecutive-failure counter with a next-attempt time; memory only. */
+export declare class RetryBackoff {
+    #private;
+    private readonly policy;
+    /** Consecutive failures since the last success. */
+    attempts: number;
+    /** Time of the first failure of the current run (host clock, ms); 0 when none. */
+    since: number;
+    /** Error of the latest failure. */
+    last: unknown;
+    constructor(policy?: Readonly<RetryPolicy>);
+    /** Host-clock time (ms) of the next attempt. */
+    get next(): number;
+    /** Whether an attempt may be made at `now`. */
+    due(now: number): boolean;
+    /** Record a failure at `now` and schedule the next attempt. */
+    failed(now: number, error: unknown): void;
+    /** Whether failures have lasted at least `boundMs` by `now`. */
+    exhausted(now: number, boundMs: number): boolean;
+    /** Forget failures after a success. */
+    succeeded(): void;
+}
+//# sourceMappingURL=retry-backoff.d.ts.map

package/types/app/runtime/retry-backoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-backoff.d.ts","sourceRoot":"","sources":["../../../src/app/runtime/retry-backoff.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,oGAAoG;AACpG,eAAO,MAAM,aAAa,OAAQ,CAAC;AACnC,sCAAsC;AACtC,eAAO,MAAM,YAAY,QAAS,CAAC;AACnC,uFAAuF;AACvF,eAAO,MAAM,cAAc,SAAU,CAAC;AAEtC;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,iDAAiD;AACjD,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,WAAW,CAIrD,CAAC;AAEH,yEAAyE;AACzE,qBAAa,YAAY;;IASX,OAAO,CAAC,QAAQ,CAAC,MAAM;IARnC,mDAAmD;IACnD,QAAQ,SAAK;IACb,kFAAkF;IAClF,KAAK,SAAK;IACV,mCAAmC;IACnC,IAAI,EAAE,OAAO,CAAQ;gBAGQ,MAAM,GAAE,QAAQ,CAAC,WAAW,CAAwB;IAEjF,gDAAgD;IAChD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,+CAA+C;IAC/C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,+DAA+D;IAC/D,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IAOzC,gEAAgE;IAChE,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAIhD,uCAAuC;IACvC,SAAS,IAAI,IAAI;CAMlB"}

package/types/app/runtime/workflow-contract.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Shared pieces of the library workflow contract.
+ *
+ * Library workflows follow one shape: `begin*` is an explicit operation that
+ * returns after local commit, `*Status` is a pure synchronous read, and
+ * `waitFor*` only observes. A wait never starts runtime workers: a host that
+ * already runs a runtime must not get a second poller and escrow loop. One-shot
+ * hosts such as the CLI run the runtime around the wait themselves
+ * (`cli/common/runtime-workers.ts`). Remote and time-driven outcomes, including
+ * an expired wait, are returned values; only caller-contract, invariant and
+ * infrastructure failures throw.
+ */
+import { type Operation } from "effection";
+import type { Signaler } from "../notifications/signaling.js";
+import { type RuntimeClock } from "./runtime-clock.js";
+/** Workflow families that publish changes. */
+export type WorkflowKind = "oobi" | "query" | "event" | "delegation" | "group" | "issuance" | "ipex" | "presentation" | "unblinding"
+/** A registry root copy was retained; `id` is the registry. */
+ | "root";
+/** Identity of a workflow whose status may have changed; consumers re-read status. */
+export interface WorkflowChange {
+    kind: WorkflowKind;
+    id: string;
+}
+/**
+ * Receiver of change identities. Owners publish after their commit and never
+ * depend on what the sink does with it; a sink must not throw into a workflow.
+ */
+export interface ChangeSink {
+    push(change: WorkflowChange): void;
+}
+/**
+ * Result of a library wait. `settled` means the status reached a terminal or
+ * wanted state; `timed-out` means the budget expired first. Either way `status`
+ * is the status read at return, so a caller never needs a second read to explain
+ * the outcome. `Timed` adds fields to the timed-out arm (default: the budget).
+ */
+export type WaitResult<S, Timed extends object = {
+    timeoutMs: number;
+}> = {
+    readonly outcome: "settled";
+    readonly status: S;
+} | ({
+    readonly outcome: "timed-out";
+    readonly status: S;
+} & Readonly<Timed>);
+/** In-memory sink that records changes in order. */
+export declare class MemoryChangeSink implements ChangeSink {
+    readonly changes: WorkflowChange[];
+    push(change: WorkflowChange): void;
+}
+/**
+ * Back a sink with the host's transient `Signaler`. Publishing needs no polling:
+ * `push` is a synchronous append that collapses repeats of one workflow into a
+ * single signal (collapse key `kind:id`). Delivery is pull-based, though: the
+ * Signaler has no subscriber hook, so the consumer must read `signaler.list()`.
+ * A closed or failing Signaler drops the change instead of throwing: a hint must
+ * never break the workflow that published it.
+ */
+export declare function signalerChangeSink(signaler: Pick<Signaler, "push">): ChangeSink;
+/**
+ * Observe-only wait: poll `done`, yielding to the scheduler between checks,
+ * until it holds or the deadline passes. Starts no worker and has no effects of
+ * its own.
+ *
+ * @param done Synchronous status read; checked before the first yield.
+ * @param pollMs Elapsed milliseconds between checks. Omitted: yield one scheduler turn.
+ * @returns True when `done` held, false when `timeoutMs` elapsed first.
+ */
+export declare function observeUntil(done: () => boolean, { timeoutMs, clock, pollMs }: {
+    timeoutMs: number;
+    clock?: Pick<RuntimeClock, "now">;
+    pollMs?: number;
+}): Operation<boolean>;
+/**
+ * Wait `milliseconds` on the host's clock, so a fake clock drives it and cancellation releases the timer.
+ */
+export declare function waitOnClock(clock: RuntimeClock, milliseconds: number): Operation<void>;
+//# sourceMappingURL=workflow-contract.d.ts.map

package/types/app/runtime/workflow-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-contract.d.ts","sourceRoot":"","sources":["../../../src/app/runtime/workflow-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAU,KAAK,SAAS,EAAS,MAAM,WAAW,CAAC;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,oBAAoB,CAAC;AAGpE,8CAA8C;AAC9C,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,OAAO,GACP,OAAO,GACP,YAAY,GACZ,OAAO,GACP,UAAU,GACV,MAAM,GACN,cAAc,GACd,YAAY;AACd,+DAA+D;GAC7D,MAAM,CAAC;AAEX,sFAAsF;AACtF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;CACpC;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,EAAE,KAAK,SAAS,MAAM,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,IAClE;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;CAAE,GACnD,CAAC;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;CAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAE9E,oDAAoD;AACpD,qBAAa,gBAAiB,YAAW,UAAU;IACjD,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,CAAM;IACxC,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;CAGnC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,UAAU,CAU/E;AAED;;;;;;;;GAQG;AACH,wBAAiB,YAAY,CAC3B,IAAI,EAAE,MAAM,OAAO,EACnB,EAAE,SAAS,EAAE,KAAmB,EAAE,MAAM,EAAE,EAAE;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACA,SAAS,CAAC,OAAO,CAAC,CASpB;AAED;;GAEG;AACH,wBAAiB,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAKvF"}

package/types/app/transport/http-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../../../src/app/transport/http-client.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAQ,KAAK,SAAS,EAAoB,MAAM,WAAW,CAAC;AAInE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,0FAA0F;AAC1F,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,IAAI,CAAC;IAChD,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CAC7B;AAED,uFAAuF;AACvF,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qFAAqF;IACrF,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,kCAAkC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED,gGAAgG;AAChG,MAAM,WAAW,kBAAkB;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qFAAqF;IACrF,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;;;;OAOG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;CACvD;AAED,uGAAuG;AACvG,MAAM,WAAW,UAAU;IACzB,qFAAqF;IACrF,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;IAEzB;;;;;;;OAOG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACtE;;;;;;;;;;OAUG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC;CAC1E;AAED;;;;;;GAMG;AACH,qBAAa,eAAgB,YAAW,UAAU;IAChD;;;;;;;OAOG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,SAAS,CAAC,YAAY,CAAC;IASzE;;;;;;;;;;OAUG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,SAAS,CAAC,kBAAkB,CAAC;CAsH7E"}
+{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../../../src/app/transport/http-client.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAQ,KAAK,SAAS,EAAoB,MAAM,WAAW,CAAC;AAInE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,0FAA0F;AAC1F,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,IAAI,CAAC;IAChD,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CAC7B;AAED,uFAAuF;AACvF,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qFAAqF;IACrF,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,kCAAkC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED,gGAAgG;AAChG,MAAM,WAAW,kBAAkB;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qFAAqF;IACrF,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;;;;OAOG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;CACvD;AAED,uGAAuG;AACvG,MAAM,WAAW,UAAU;IACzB,qFAAqF;IACrF,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;IAEzB;;;;;;;OAOG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACtE;;;;;;;;;;OAUG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC;CAC1E;AAmBD;;;;;;GAMG;AACH,qBAAa,eAAgB,YAAW,UAAU;IAChD;;;;;;;OAOG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,SAAS,CAAC,YAAY,CAAC;IASzE;;;;;;;;;;OAUG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,SAAS,CAAC,kBAAkB,CAAC;CAyH7E"}

package/types/cli/common/event-completion.d.ts

@@ -0,0 +1,26 @@
+import type { Operation } from "effection";
+import type { DelegationWorkflowStatus } from "../../app/identity/delegating.js";
+import { completeEvent, type EventCompletionDeps } from "../../app/identity/event-completion.js";
+import type { Habery } from "../../app/identity/habbing.js";
+import { KelPublisher } from "../../app/mailbox/kel-publisher.js";
+import type { HttpClient } from "../../app/transport/http-client.js";
+/** Event-completion dependencies of a command, with the publisher that tells mailboxes after a rotation. */
+export interface CliEventCompletionDeps extends EventCompletionDeps {
+    readonly publisher: KelPublisher;
+}
+/**
+ * Compose event-completion dependencies for one CLI command.
+ *
+ * A short-lived runtime is created only when a delegated event needs workers.
+ * It is lent to the library for that one scope with its workers running around
+ * the library's observe-only wait, and closed on every exit path.
+ */
+export declare function cliEventCompletionDeps(hby: Habery, http: HttpClient): CliEventCompletionDeps;
+/**
+ * `completeEvent` for commands: an expired delegation wait fails the command with
+ * the text the CLI has always printed, then the caller sees the usual result.
+ */
+export declare function completeEventOrThrow(deps: CliEventCompletionDeps, ...args: Parameters<typeof completeEvent> extends [unknown, ...infer Rest] ? Rest : never): Operation<{
+    delegationPhase: DelegationWorkflowStatus["phase"] | null;
+}>;
+//# sourceMappingURL=event-completion.d.ts.map

package/types/cli/common/event-completion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-completion.d.ts","sourceRoot":"","sources":["../../../src/cli/common/event-completion.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAIlE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAGrE,4GAA4G;AAC5G,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;CAClC;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,sBAAsB,CAuB5F;AAED;;;GAGG;AACH,wBAAiB,oBAAoB,CACnC,IAAI,EAAE,sBAAsB,EAC5B,GAAG,IAAI,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GACxF,SAAS,CAAC;IAAE,eAAe,EAAE,wBAAwB,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;CAAE,CAAC,CAS1E"}

package/types/cli/common/runtime-workers.d.ts

@@ -0,0 +1,23 @@
+import { type Operation } from "effection";
+import type { Hab } from "../../app/identity/habbing.js";
+import { type AgentRuntime } from "../../app/runtime/agent-runtime.js";
+import type { AgentCue } from "../../core/cues.js";
+import type { Deck } from "../../core/deck.js";
+/**
+ * Run the runtime workers around one observe-only library call.
+ *
+ * Library workflows only observe (see `app/runtime/workflow-contract.ts`); a
+ * one-shot CLI command has no running runtime, so it supplies the workers here.
+ * The worker is halted and joined on success, failure and cancellation before
+ * the caller can release stores.
+ *
+ * @param runtime Borrowed composed runtime; the command owns its lifetime.
+ * @param options Signer, mailbox polling and command-owned query cue Deck.
+ * @param use Observe-only operation that depends on the workers' progress.
+ */
+export declare function withRuntimeWorkers<T>(runtime: AgentRuntime, options: {
+    hab?: Hab;
+    pollMailbox?: boolean;
+    queryCues?: Deck<AgentCue>;
+}, use: () => Operation<T>): Operation<T>;
+//# sourceMappingURL=runtime-workers.d.ts.map

package/types/cli/common/runtime-workers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-workers.d.ts","sourceRoot":"","sources":["../../../src/cli/common/runtime-workers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAS,MAAM,WAAW,CAAC;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,KAAK,YAAY,EAAmB,MAAM,oCAAoC,CAAC;AACxF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE/C;;;;;;;;;;;GAWG;AACH,wBAAiB,kBAAkB,CAAC,CAAC,EACnC,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,GAAG,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;CAAE,EACzE,GAAG,EAAE,MAAM,SAAS,CAAC,CAAC,CAAC,GACtB,SAAS,CAAC,CAAC,CAAC,CAOd"}

package/types/cli/credentials/ipex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ipex.d.ts","sourceRoot":"","sources":["../../../src/cli/credentials/ipex.ts"],"names":[],"mappings":"AACA,OAAO,EAA+B,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAU,KAAK,SAAS,EAAS,MAAM,WAAW,CAAC;AAC1D,OAAO,KAAK,EAAO,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAiCjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAGhF,OAAO,EAAE,KAAK,YAAY,EAA2C,MAAM,oCAAoC,CAAC;AAOhH,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AA+B1C,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,sFAAsF;AACtF,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,UAAU,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,eAAe,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC;CACvE;AAED,wGAAwG;AACxG,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,eAAe,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC;CACvE;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,eAAe,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC;CACvE;AAED,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,6FAA6F;AAC7F,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,UAAU,CAAC;IAChB,KAAK,CAAC,EAAE,eAAe,GAAG;QACxB,QAAQ,EAAE,UAAU,CAAC;QACrB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;QACzB,kFAAkF;QAClF,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;QACzB,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;QACrB,8FAA8F;QAC9F,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;CACH;AAED;;;;GAIG;AACH,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAmB1F;AAED;;;;GAIG;AACH,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAoB1F;AAED,0EAA0E;AAC1E,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAE1F;AAED;;;GAGG;AACH,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAe1F;AACD;;;;GAIG;AACH,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC,CAyG3F;AAED;;;;GAIG;AACH,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC,CAiF3F;AAED,yEAAyE;AACzE,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAgB/E;AAED,yGAAyG;AACzG,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CA0DzF;AAED;;;;GAIG;AACH,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAQzF;AAED,qFAAqF;AACrF,wBAAiB,gBAAgB,CAC/B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,QAAQ,EAAE,eAAe,GACxB,SAAS,CAAC,cAAc,CAAC,CAwF3B"}
+{"version":3,"file":"ipex.d.ts","sourceRoot":"","sources":["../../../src/cli/credentials/ipex.ts"],"names":[],"mappings":"AACA,OAAO,EAA+B,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAU,KAAK,SAAS,EAAS,MAAM,WAAW,CAAC;AAC1D,OAAO,KAAK,EAAO,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAmDjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAGhF,OAAO,EAAE,KAAK,YAAY,EAA2C,MAAM,oCAAoC,CAAC;AAMhH,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAgC1C,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,sFAAsF;AACtF,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,UAAU,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,eAAe,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC;CACvE;AAED,wGAAwG;AACxG,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,eAAe,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC;CACvE;AAED,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,eAAe,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC;CACvE;AAED,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,6FAA6F;AAC7F,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,UAAU,CAAC;IAChB,KAAK,CAAC,EAAE,eAAe,GAAG;QACxB,QAAQ,EAAE,UAAU,CAAC;QACrB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;QACzB,kFAAkF;QAClF,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;QACzB,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;QACrB,8FAA8F;QAC9F,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;CACH;AAED;;;;GAIG;AACH,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CA6B1F;AAED;;;;GAIG;AACH,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CA8B1F;AAED,0EAA0E;AAC1E,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAE1F;AAED;;;GAGG;AACH,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAuB1F;AAED;;;;GAIG;AACH,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC,CAwG3F;AAED;;;;GAIG;AACH,wBAAiB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC,CA8E3F;AAED,yEAAyE;AACzE,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAgB/E;AAED,yGAAyG;AACzG,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAsCzF;AAED;;;;GAIG;AACH,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,cAAc,CAAC,CAQzF;AAED,qFAAqF;AACrF,wBAAiB,gBAAgB,CAC/B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,KAAK,GAAG,IAAI,EACnB,QAAQ,EAAE,eAAe,GACxB,SAAS,CAAC,cAAc,CAAC,CAiH3B"}

package/types/cli/credentials/vc.d.ts

@@ -1,4 +1,4 @@
-import { type Operation } from "effection";
+import type { Operation } from "effection";
 import { type CredentialRevokeResult } from "../../app/credentials/credential-revoking.js";
 import { type IssueResult, type RegistryResult } from "../../app/credentials/credential-workflows.js";
 /** Implement `tufa vc schema import` by pinning JSON schemas into `schema.`. */

package/types/cli/credentials/vc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vc.d.ts","sourceRoot":"","sources":["../../../src/cli/credentials/vc.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,KAAK,SAAS,EAAS,MAAM,WAAW,CAAC;AAExD,OAAO,EACL,KAAK,sBAAsB,EAI5B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAOL,KAAK,WAAW,EAGhB,KAAK,cAAc,EACpB,MAAM,+CAA+C,CAAC;AAiEvD,gFAAgF;AAChF,wBAAiB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAWrF;AAED;;;;GAIG;AACH,wBAAiB,uBAAuB,CACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,cAAc,CAAC,CA6B3B;AAED,uEAAuE;AACvE,wBAAiB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAOrF;AAED,2EAA2E;AAC3E,wBAAiB,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAKvF;AAED;;;;GAIG;AACH,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CA6DtF;AAED,oEAAoE;AACpE,wBAAiB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAgB7E;AAED,mFAAmF;AACnF,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAa/E;AAED;;;;;;;;GAQG;AACH,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAyB/E;AAED;;;;GAIG;AACH,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,sBAAsB,CAAC,CAmDjG"}
+{"version":3,"file":"vc.d.ts","sourceRoot":"","sources":["../../../src/cli/credentials/vc.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EACL,KAAK,sBAAsB,EAI5B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAOL,KAAK,WAAW,EAGhB,KAAK,cAAc,EACpB,MAAM,+CAA+C,CAAC;AAwEvD,gFAAgF;AAChF,wBAAiB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAWrF;AAED;;;;GAIG;AACH,wBAAiB,uBAAuB,CACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,cAAc,CAAC,CAuB3B;AAED,uEAAuE;AACvE,wBAAiB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAOrF;AAED,2EAA2E;AAC3E,wBAAiB,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAKvF;AAED;;;;GAIG;AACH,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAmDtF;AAED,oEAAoE;AACpE,wBAAiB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAgB7E;AAED,mFAAmF;AACnF,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAa/E;AAED;;;;;;;;GAQG;AACH,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAyB/E;AAED;;;;GAIG;AACH,wBAAiB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,sBAAsB,CAAC,CA8CjG"}

package/types/cli/endpoints/did.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"did.d.ts","sourceRoot":"","sources":["../../../src/cli/endpoints/did.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAqD3C,iCAAiC;AACjC,wBAAiB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAsC9E;AAED,qCAAqC;AACrC,wBAAiB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CA2ClF;AAED;;;;GAIG;AACH,wBAAiB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAwBjF;AAED,oCAAoC;AACpC,wBAAiB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CA4BjF"}
+{"version":3,"file":"did.d.ts","sourceRoot":"","sources":["../../../src/cli/endpoints/did.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAuD3C,iCAAiC;AACjC,wBAAiB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAsC9E;AAED,qCAAqC;AACrC,wBAAiB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CA2ClF;AAED;;;;GAIG;AACH,wBAAiB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAwBjF;AAED,oCAAoC;AACpC,wBAAiB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAgCjF"}

package/types/cli/endpoints/oobi.d.ts

@@ -16,7 +16,9 @@ export declare function oobiGenerateCommand(args: Record<string, unknown>): Oper
  *
  * The command queues one OOBI job, runs the shared workers, and succeeds only if
  * the URL lands in `roobi.`. Any reply/event material fetched from the OOBI is
- * forced through the same parser/routing path used by the long-lived host.
+ * forced through the same parser/routing path used by the long-lived host. It
+ * waits on that URL's own record, never on unrelated pending runtime work such
+ * as group proposals or delegation escrows.
  */
 export declare function oobiResolveCommand(args: Record<string, unknown>): Operation<void>;
 /**

package/types/cli/endpoints/oobi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oobi.d.ts","sourceRoot":"","sources":["../../../src/cli/endpoints/oobi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AA8D3C;;;;;;;;;;GAUG;AACH,wBAAiB,mBAAmB,CAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CAwFjB;AAED;;;;;;GAMG;AACH,wBAAiB,kBAAkB,CACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CAkDjB;AAED;;;;;;;GAOG;AACH,wBAAiB,kBAAkB,CACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CA8DjB"}
+{"version":3,"file":"oobi.d.ts","sourceRoot":"","sources":["../../../src/cli/endpoints/oobi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AA8D3C;;;;;;;;;;GAUG;AACH,wBAAiB,mBAAmB,CAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CAwFjB;AAED;;;;;;;;GAQG;AACH,wBAAiB,kBAAkB,CACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CA+CjB;AAED;;;;;;;GAOG;AACH,wBAAiB,kBAAkB,CACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CA8DjB"}

package/types/cli/identity/challenge.d.ts

@@ -1,4 +1,4 @@
-import { type Operation } from "effection";
+import type { Operation } from "effection";
 /** Implement `tufa challenge generate`. */
 export declare function challengeGenerateCommand(args: Record<string, unknown>): Operation<void>;
 /**

package/types/cli/identity/challenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"challenge.d.ts","sourceRoot":"","sources":["../../../src/cli/identity/challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,SAAS,EAAS,MAAM,WAAW,CAAC;AAsD1D,2CAA2C;AAC3C,wBAAiB,wBAAwB,CACvC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CASjB;AAED;;;;GAIG;AACH,wBAAiB,uBAAuB,CACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CA+DjB;AAED,0GAA0G;AAC1G,wBAAiB,sBAAsB,CACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CAwFjB"}
+{"version":3,"file":"challenge.d.ts","sourceRoot":"","sources":["../../../src/cli/identity/challenge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAoD3C,2CAA2C;AAC3C,wBAAiB,wBAAwB,CACvC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CASjB;AAED;;;;GAIG;AACH,wBAAiB,uBAAuB,CACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CAmDjB;AAED,0GAA0G;AAC1G,wBAAiB,sBAAsB,CACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CAqFjB"}

package/types/cli/identity/delegate.d.ts

@@ -1,4 +1,17 @@
-import { type Operation } from "effection";
+/**
+ * Delegator-side CLI approval for pending delegated events.
+ *
+ * KERIpy correspondence:
+ * - this is the bounded command analogue of KLI's delegation approval flow
+ * - pending work is discovered from durable `delegables.` escrow, not from
+ *   controller notifications
+ *
+ * Maintainer rule:
+ * - `/delegate/request` notifications are UI hints only
+ * - approval ordering and event selection come from the delegated-event escrows
+ *   and the delegator's own KEL state
+ */
+import type { Operation } from "effection";
 /** Approve pending delegated events for the selected local delegator habitat. */
 export declare function delegateConfirmCommand(args: Record<string, unknown>): Operation<void>;
 //# sourceMappingURL=delegate.d.ts.map

package/types/cli/identity/delegate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delegate.d.ts","sourceRoot":"","sources":["../../../src/cli/identity/delegate.ts"],"names":[],"mappings":"AAcA,OAAO,EAAQ,KAAK,SAAS,EAAsB,MAAM,WAAW,CAAC;AA0YrE,iFAAiF;AACjF,wBAAiB,sBAAsB,CACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CAuCjB"}
+{"version":3,"file":"delegate.d.ts","sourceRoot":"","sources":["../../../src/cli/identity/delegate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAmM3C,iFAAiF;AACjF,wBAAiB,sBAAsB,CACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CA0CjB"}

package/types/cli/identity/incept.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"incept.d.ts","sourceRoot":"","sources":["../../../src/cli/identity/incept.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AA6EjD;;;;;;GAMG;AACH,wBAAiB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CA6J7E"}
+{"version":3,"file":"incept.d.ts","sourceRoot":"","sources":["../../../src/cli/identity/incept.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAuEjD;;;;;;GAMG;AACH,wBAAiB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAmI7E"}

package/types/cli/identity/interact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interact.d.ts","sourceRoot":"","sources":["../../../src/cli/identity/interact.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AACH,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AA+B3C;;;;;;;;;GASG;AACH,wBAAiB,eAAe,CAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CA0FjB"}
+{"version":3,"file":"interact.d.ts","sourceRoot":"","sources":["../../../src/cli/identity/interact.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AA+B3C;;;;;;;;;GASG;AACH,wBAAiB,eAAe,CAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,SAAS,CAAC,IAAI,CAAC,CAuEjB"}

package/types/cli/identity/rotate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rotate.d.ts","sourceRoot":"","sources":["../../../src/cli/identity/rotate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAC;AAIzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEtE;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAgG3C;;;;;;;;;GASG;AACH,wBAAiB,aAAa,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,EAAE,YAAY,EAAE,GAAE;IAAE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,KAAK,cAAc,CAAA;CAAO,GACnG,SAAS,CAAC,IAAI,CAAC,CAqJjB"}
+{"version":3,"file":"rotate.d.ts","sourceRoot":"","sources":["../../../src/cli/identity/rotate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,+BAA+B,CAAC;AAEzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEtE;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AA4F3C;;;;;;;;;GASG;AACH,wBAAiB,aAAa,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,EAAE,YAAY,EAAE,GAAE;IAAE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,KAAK,cAAc,CAAA;CAAO,GACnG,SAAS,CAAC,IAAI,CAAC,CAgHjB"}

package/types/cli/index.d.ts

@@ -8,8 +8,9 @@
 export { parseGvrsn } from "../core/attachment-countering.js";
 export { type AgentRuntimeContext, type CommandContextDependencies, type CommandHaberyOptions, type CommandStoreArgs, type HabAgentRuntimeContext, type HabContext, type HaberyContext, withAgentRuntime, withExistingHab, withExistingHabery, withHabAndAgentRuntime, } from "./common/context.js";
 export { type EnsuredHabery, ensureHby, setupHby } from "./common/existing.js";
-export { parseBooleanOption, parseCountOption, parseIntegerOption, parseNumberOption, parseStringListOption, parseStringOption, } from "./common/parsing.js";
+export { parseBooleanOption, parseCountOption, parseIntegerOption, parseKeriVersionOption, parseNumberOption, parseStringListOption, parseStringOption, } from "./common/parsing.js";
 export { writeJsonLine, writeTextLines } from "./common/rendering.js";
+export { withRuntimeWorkers } from "./common/runtime-workers.js";
 export { resolveWitnessAuths, type WitnessAuthOptions } from "./common/witness-auth.js";
 export { ipexAdmitCommand, type IpexAdmitResult, ipexAgreeCommand, ipexApplyCommand, ipexGrantCommand, type IpexGrantResult, ipexJoinCommand, type IpexJoinOptions, type IpexJoinResult, ipexListCommand, ipexOfferCommand, ipexPollCommand, type IpexPollResult, type IpexSendResult, ipexSpurnCommand, joinIpexProposal, } from "./credentials/ipex.js";
 export { vcCreateCommand, vcExportCommand, vcImportCommand, vcListCommand, vcRegistryInceptCommand, vcRegistryListCommand, vcRegistryStatusCommand, vcRevokeCommand, vcSchemaImportCommand, } from "./credentials/vc.js";
@@ -30,6 +31,7 @@ export { rotateCommand } from "./identity/rotate.js";
 export { exchangeSendCommand } from "./messaging/exchange.js";
 export { type GroupEventResult, multisigInceptCommand, multisigInteractCommand, multisigJoinCommand, type MultisigJoinResult, multisigRotateCommand, multisigRpyCommand, type RootCopyOutcome, } from "./messaging/multisig.js";
 export { notificationsListCommand, notificationsMarkReadCommand, notificationsRemoveCommand, } from "./messaging/notifications.js";
+export { type RootCopyLine, rootCopyLine, RootCopyRecoveryCommand, type RootResealLine, rootResealLine, } from "./messaging/root-copy-lines.js";
 export { annotateCommand } from "./tools/annotate.js";
 export { benchmarkCommand } from "./tools/benchmark.js";
 export { dumpEvts } from "./tools/db-dump.js";

package/types/cli/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,oFAAoF;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,eAAe,EACpB,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,aAAa,EACb,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAE,KAAK,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACpH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,KAAK,gBAAgB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,eAAe,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,oFAAoF;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,eAAe,EACpB,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,aAAa,EACb,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAE,KAAK,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACpH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,KAAK,gBAAgB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,eAAe,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,YAAY,EACjB,YAAY,EACZ,uBAAuB,EACvB,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/types/cli/messaging/group-join.d.ts

@@ -0,0 +1,53 @@
+/**
+ * `tufa multisig join` proposal selection, as KERIpy `kli multisig join`.
+ *
+ * Join approves exactly one stored proposal, the first the user consents to:
+ * - an explicit `--said` names the proposal, otherwise the unapproved proposals
+ *   the notice store announces are offered in notice order;
+ * - without `--auto` every offered proposal is shown and approved only on a yes;
+ * - with `--auto` the first offered proposal is approved without a prompt. This is
+ *   the whole of auto consent: it exists only inside the `join` the user ran for
+ *   that purpose, and no other command signs a proposal it was not asked to sign.
+ *
+ * Signing, publication and the Counselor hand-off belong to `approveGroupProposal`.
+ */
+import { type Operation } from "effection";
+import { type GroupApprovalChoices, type GroupApprovalDeps, type GroupApprovalResult, type GroupProposal } from "../../app/multisig/proposals.js";
+import type { Notifier } from "../../app/notifications/notifying.js";
+/** Approval collaborators with a notice store that can also be cleared of the joined proposal. */
+export type JoinDeps = Omit<GroupApprovalDeps, "notifier"> & {
+    readonly notifier: Pick<Notifier, "list" | "remove"> | null;
+};
+/** What the user is asked, and what a host-chosen answer carries into the approval. */
+export interface JoinPrompts {
+    /** Whether the user consents to sign this proposal. */
+    confirm(proposal: GroupProposal): boolean;
+    /** Local alias for a group this member has not joined yet. */
+    groupAlias(proposal: GroupProposal): string;
+    /** Local name for a registry proposal. */
+    registryName(proposal: GroupProposal): string;
+    /** Extra approval inputs such as the Counselor's memory-only choices; may refuse by throwing. */
+    inputs(proposal: GroupProposal): GroupApprovalChoices;
+}
+/** One selection pass over stored proposals. */
+export interface JoinOptions extends JoinPrompts {
+    /** Group prefix or alias that proposals must belong to; a name not yet used (a group to be created) filters nothing. */
+    group?: string;
+    /** Wrapper SAID of the one proposal to approve. */
+    said?: string;
+    /** Epoch milliseconds after which an empty search gives up. */
+    deadline: number;
+}
+/** The proposal that was approved and what approval did. */
+export interface JoinedProposal {
+    proposal: GroupProposal;
+    result: GroupApprovalResult;
+}
+/**
+ * Approve the first proposal the user consents to, polling stored proposals until
+ * the deadline. A declined proposal is not offered again by this call. Returns
+ * null when nothing was approved; the host owns the runtime that delivers new
+ * proposals while this waits.
+ */
+export declare function joinProposal(deps: JoinDeps, options: JoinOptions): Operation<JoinedProposal | null>;
+//# sourceMappingURL=group-join.d.ts.map

package/types/cli/messaging/group-join.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-join.d.ts","sourceRoot":"","sources":["../../../src/cli/messaging/group-join.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,KAAK,SAAS,EAAS,MAAM,WAAW,CAAC;AAElD,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAEnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAGrE,kGAAkG;AAClG,MAAM,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,GAAG;IAC3D,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC;CAC7D,CAAC;AAEF,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC;IAC1C,8DAA8D;IAC9D,UAAU,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAAC;IAC5C,0CAA0C;IAC1C,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAAC;IAC9C,iGAAiG;IACjG,MAAM,CAAC,QAAQ,EAAE,aAAa,GAAG,oBAAoB,CAAC;CACvD;AAED,gDAAgD;AAChD,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C,wHAAwH;IACxH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAqBD;;;;;GAKG;AACH,wBAAiB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,CAkCpG"}

package/types/cli/messaging/group-wait.d.ts

@@ -0,0 +1,34 @@
+import type { Operation } from "effection";
+import type { Hab, Habery } from "../../app/identity/habbing.js";
+import { type CounselInputs, type GroupEventRef } from "../../app/multisig/counseling.js";
+import type { AgentRuntime } from "../../app/runtime/agent-runtime.js";
+/** Witness authorization choices of a group command. */
+export interface WitnessChoices {
+    code?: string[];
+    codeTime?: string;
+    authenticate?: boolean;
+}
+/** The local hab that sends a delegated group event's traffic; the user must name it. */
+export declare function delegationProxy(hby: Habery, alias: string | undefined, label: string): Hab;
+/**
+ * Counselor inputs for a proposed event. `fallbackAfterMs: 0` makes every member
+ * submit witness receipts and publish the delegation request, as this command
+ * always has; KERIpy's `kli` elects one member and the others only fetch.
+ */
+export declare function counselInputs(hby: Habery, proxy?: string, delegated?: boolean, label?: string): CounselInputs;
+/** Wait until the exact event is accepted here, replaced at its sn, or the deadline passes. */
+export declare function waitForAcceptance(hby: Habery, runtime: AgentRuntime, event: GroupEventRef, deadline: number): Operation<boolean>;
+/** Witness Authorization values for the group's current witnesses, as `--code`/`--authenticate` choose. */
+export declare function witnessAuths(hby: Habery, pre: string, args: WitnessChoices): import("../../runtime/index.js").WitnessAuthMap | undefined;
+/** Give a counseled event this command's witness authorizations; memory only. */
+export declare function supplyWitnessAuths(hby: Habery, runtime: AgentRuntime, event: GroupEventRef | undefined, args: WitnessChoices): void;
+/** Give a delegated event just approved here its proxy; other events need none. */
+export declare function supplyDelegationProxy(hby: Habery, runtime: AgentRuntime, event: GroupEventRef, alias?: string): void;
+/**
+ * Wait for the Counselor to complete an accepted event: witness receipts and,
+ * for a delegated event, the delegator's approval.
+ *
+ * @returns The delegation phase for a delegated inception or rotation, else null.
+ */
+export declare function finishAcceptedEvent(hby: Habery, runtime: AgentRuntime, event: GroupEventRef, args: WitnessChoices): Operation<string | null>;
+//# sourceMappingURL=group-wait.d.ts.map

package/types/cli/messaging/group-wait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-wait.d.ts","sourceRoot":"","sources":["../../../src/cli/messaging/group-wait.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAGnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAKvE,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,CAI1F;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,UAAQ,EAAE,KAAK,SAAK,GAAG,aAAa,CAEvG;AAED,+FAA+F;AAC/F,wBAAiB,iBAAiB,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,aAAa,EACpB,QAAQ,EAAE,MAAM,GACf,SAAS,CAAC,OAAO,CAAC,CAOpB;AAED,2GAA2G;AAC3G,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,+DAO1E;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,aAAa,GAAG,SAAS,EAChC,IAAI,EAAE,cAAc,QAIrB;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAIpH;AAED;;;;;GAKG;AACH,wBAAiB,mBAAmB,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,cAAc,GACnB,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAS1B"}