keri-ts 2.1.0 → 2.2.1

package/types/app/mailbox/mailbox-admin.d.ts

@@ -0,0 +1,113 @@
+import { type Operation } from "effection";
+import type { Poster } from "../delivery/forwarding.js";
+import { type GroupRoleResult } from "../identity/endpoint-roleing.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import type { Reactor } from "../protocol/reactor.js";
+import { type RuntimeClock } from "../runtime/runtime-clock.js";
+import type { WaitResult } from "../runtime/workflow-contract.js";
+import type { HttpClient } from "../transport/http-client.js";
+import type { KelPublisher } from "./kel-publisher.js";
+import { type KelSubmission } from "./kel-submission.js";
+/** Collaborators mailbox administration needs; nothing else is reachable from here. */
+export interface MailboxAdminDeps {
+    /** Borrowed identities and accepted-state stores. */
+    readonly hby: Habery;
+    /** Borrowed HTTP implementation used for the provider admin request. */
+    readonly http: HttpClient;
+    /** Parser/dispatcher that accepts the signed reply into local state. */
+    readonly reactor: Reactor;
+    /** Escrow processing over the same database as `hby`. */
+    readonly protocol: ProtocolProcessor;
+    /**
+     * The runtime's KEL publisher, told once a mailbox role is accepted locally so the next tock derives what the
+     * mailbox is owed instead of waiting for the publisher's minute sweep.
+     */
+    readonly publisher?: Pick<KelPublisher, "prompt">;
+}
+/** Accepted end-role state for one controller and mailbox. */
+export interface MailboxStatus {
+    /** Mailbox AID the status describes. */
+    readonly mailbox: string;
+    /** `authorized` when the role is allowed, `revoked` when a cut is accepted, else `absent`. */
+    readonly state: "authorized" | "revoked" | "absent";
+}
+/** Finite provider response; non-success statuses are data for the caller. */
+export interface MailboxAdminResponse {
+    readonly ok: boolean;
+    readonly status: number;
+    readonly body: string;
+}
+/** Derive the mailbox-admin URL relative to one hosted endpoint path. */
+export declare function mailboxAdminUrl(url: string): string;
+/**
+ * Preferred accepted URL of a mailbox endpoint.
+ *
+ * @throws ValidationError when no location reply has been accepted for it.
+ */
+export declare function requireMailboxEndpointUrl(hby: Habery, mailbox: string): string;
+/** Read the accepted mailbox end-role state for `pre`; mutates nothing. */
+export declare function mailboxStatus(hby: Habery, pre: string, mailbox: string): MailboxStatus;
+/**
+ * Authorize `mailbox` for `hab`: sign (or reload) the mailbox end-role reply,
+ * post it to the provider and accept it locally.
+ *
+ * @throws ValidationError for a missing endpoint URL, a provider HTTP failure or a reply that local state does not accept.
+ */
+export declare function addMailbox(deps: MailboxAdminDeps, hab: Hab, mailbox: string): Operation<MailboxStatus>;
+/**
+ * Revoke `mailbox` for `hab`: sign a mailbox end-role cut, post it to the
+ * provider and accept it locally. Single-signature controllers only.
+ *
+ * @throws ValidationError as for `addMailbox`.
+ */
+export declare function removeMailbox(deps: MailboxAdminDeps, hab: Hab, mailbox: string): Operation<MailboxStatus>;
+/**
+ * Post one signed mailbox end-role reply to the provider, accept it locally and
+ * confirm the resulting state. Also the completion step of a group add whose
+ * role was already approved.
+ *
+ * @param allow True when the reply grants the role; false when it cuts it.
+ * @throws ValidationError when the reply is empty, the provider refuses it, or local state does not reflect it.
+ */
+export declare function completeMailboxAdmin(deps: MailboxAdminDeps, hab: Hab, mailbox: string, endpointUrl: string, rpy: Uint8Array, allow: boolean): Operation<MailboxStatus>;
+/**
+ * Propose a group's mailbox authorization (`/end/role/add`) to the other members, who
+ * approve it with `approveGroupProposal`. Returns without waiting and sends nothing
+ * to the provider; {@link completeGroupMailbox} does that once the role is accepted.
+ * The caller runs the Poster's delivery for the duration.
+ */
+export declare function proposeGroupMailbox(hby: Habery, protocol: ProtocolProcessor, postman: Poster, group: Hab, mailbox: string): Operation<GroupRoleResult>;
+/**
+ * Finish a group mailbox add whose end-role reply the members approved: post the
+ * accepted reply to the provider and confirm local state.
+ *
+ * @throws ValidationError while the group has not accepted the mailbox role, or as for `completeMailboxAdmin`.
+ */
+export declare function completeGroupMailbox(deps: MailboxAdminDeps, group: Hab, mailbox: string): Operation<MailboxStatus>;
+/** Choices for `waitForMailboxState`. */
+export interface MailboxWaitOptions {
+    /** State to wait for. */
+    want: "authorized" | "revoked";
+    /** Epoch milliseconds after which the wait returns `timed-out`. */
+    deadline: number;
+    /** Clock the deadline is read against; defaults to the system clock. */
+    clock?: RuntimeClock;
+    /** Elapsed milliseconds between reads. */
+    pollMs?: number;
+}
+/** Outcome of `waitForMailboxState`; a deadline is a value, not a throw. */
+export type MailboxWaitResult = WaitResult<MailboxStatus, Record<never, never>>;
+/**
+ * Observe `read` until it reports the wanted state or the deadline passes. It
+ * starts no workers: whoever owns the runtime makes the state change.
+ */
+export declare function waitForMailboxState(read: () => MailboxStatus, { want, deadline, clock, pollMs }: MailboxWaitOptions): Operation<MailboxWaitResult>;
+/** Send finite administrative CESR bytes with `CESR-DESTINATION` selecting the hosted mailbox. */
+export declare function postMailboxAdminCesr(http: HttpClient, url: string, mailbox: string, bytes: Uint8Array): Operation<MailboxAdminResponse>;
+/**
+ * Send the legacy multipart form (`kel`, optional `delkel`, `rpy`). The platform
+ * encoder runs once so the generated boundary stays consistent with the body.
+ */
+export declare function postMailboxAdminMultipart(http: HttpClient, url: string, mailbox: string, submission: Pick<KelSubmission, "kel" | "delkel">, rpy: Uint8Array): Operation<MailboxAdminResponse>;
+//# sourceMappingURL=mailbox-admin.d.ts.map

package/types/app/mailbox/mailbox-admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailbox-admin.d.ts","sourceRoot":"","sources":["../../../src/app/mailbox/mailbox-admin.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAQ,KAAK,SAAS,EAAS,MAAM,WAAW,CAAC;AAGxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAEL,KAAK,eAAe,EAGrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAG/E,uFAAuF;AACvF,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;CACnD;AAED,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,QAAQ,CAAC;CACrD;AAED,8EAA8E;AAC9E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAYnD;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAM9E;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,aAAa,CAItF;AAED;;;;;GAKG;AACH,wBAAiB,UAAU,CACzB,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,GACd,SAAS,CAAC,aAAa,CAAC,CAO1B;AAED;;;;;GAKG;AACH,wBAAiB,aAAa,CAC5B,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,GACd,SAAS,CAAC,aAAa,CAAC,CAI1B;AAED;;;;;;;GAOG;AACH,wBAAiB,oBAAoB,CACnC,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,OAAO,GACb,SAAS,CAAC,aAAa,CAAC,CA+B1B;AAED;;;;;GAKG;AACH,wBAAiB,mBAAmB,CAClC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,GAAG,EACV,OAAO,EAAE,MAAM,GACd,SAAS,CAAC,eAAe,CAAC,CAM5B;AAED;;;;;GAKG;AACH,wBAAiB,oBAAoB,CACnC,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,GAAG,EACV,OAAO,EAAE,MAAM,GACd,SAAS,CAAC,aAAa,CAAC,CAO1B;AAED,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,yBAAyB;IACzB,IAAI,EAAE,YAAY,GAAG,SAAS,CAAC;IAC/B,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEhF;;;GAGG;AACH,wBAAiB,mBAAmB,CAClC,IAAI,EAAE,MAAM,aAAa,EACzB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAmB,EAAE,MAAY,EAAE,EAAE,kBAAkB,GACxE,SAAS,CAAC,iBAAiB,CAAC,CAQ9B;AAkBD,kGAAkG;AAClG,wBAAiB,oBAAoB,CACnC,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,GAChB,SAAS,CAAC,oBAAoB,CAAC,CASjC;AAED;;;GAGG;AACH,wBAAiB,yBAAyB,CACxC,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,QAAQ,CAAC,EACjD,GAAG,EAAE,UAAU,GACd,SAAS,CAAC,oBAAoB,CAAC,CAkBjC"}

package/types/app/mailbox/mailbox-poller.d.ts

@@ -1,6 +1,7 @@
 /** Recipient mailbox polling: signed queries, awaited SSE intake and persisted cursor progression. */
 import { type Operation } from "effection";
 import type { Habery } from "../identity/habbing.js";
+import { type DoerPacing } from "../runtime/doing.js";
 import type { RuntimeClock } from "../runtime/runtime-clock.js";
 import type { HttpClient } from "../transport/http-client.js";
 import type { MailboxDirector } from "./mailbox-director.js";
@@ -12,7 +13,24 @@ interface MailboxPollerOptions {
      * Optional millisecond header and poll-window overrides.
      */
     timeouts?: Partial<MailboxPollingTimeoutPolicy>;
+    /** Told after each poll a mailbox served; the runtime re-arms a timed-out KEL publication with it. */
+    onPolled?: (pre: string, mailbox: string) => void;
+    /**
+     * Told when a mailbox answers 403 (it cannot authenticate the requester against the KEL it holds); the runtime
+     * has its KEL publisher post the KEL again. The worker then backs off.
+     */
+    onUnauthorized?: (pre: string, mailbox: string) => void;
 }
+/** Tocks between the poller's full re-selection of workers: 160 tocks of 31.25 ms is five seconds. */
+export declare const MAILBOX_POLLER_SWEEP_TOCKS = 160;
+/**
+ * The production pacing of the mailbox poller. Between sweeps it re-selects workers only when the registered
+ * topics or the number of identifiers change, or for an identifier passed to {@link MailboxPoller.prompt} (the
+ * runtime prompts one when a mailbox end role is accepted). Endpoint changes other than an accepted mailbox end
+ * role (a rotated-in witness, a location accepted after its role, another process writing the same store) are
+ * therefore picked up within five seconds.
+ */
+export declare const MAILBOX_POLLER_PACING: Readonly<DoerPacing>;
 /**
  * Retrieve recipient messages from remote mailbox or witness endpoints over HTTP/SSE.
  *
@@ -21,14 +39,22 @@ interface MailboxPollerOptions {
  * A provider store in the same runtime is never scanned for local recipient input.
  */
 export declare class MailboxPoller {
+    #private;
     /**
      * Default header acquisition (5 seconds) and absolute poll window (30 seconds).
      */
     static readonly DefaultTimeoutPolicy: Readonly<MailboxPollingTimeoutPolicy>;
     /**
-     * Idle read window after the first complete event, in milliseconds.
+     * Default idle read window after the first complete event, in milliseconds.
      */
     static readonly ReadIdleTimeoutMs = 500;
+    /**
+     * Wait after a poll that was not served (a refused status, a 403, no response headers, or an unreachable
+     * host), in milliseconds: it starts at `initialMs`, doubles with each consecutive failure up to `maxMs` and
+     * starts over after a served poll. Without a wait the worker would repeat the same signed request as fast as
+     * the loop turns.
+     */
+    static readonly RefusalBackoff: Readonly<RefusalBackoffPolicy>;
     /** Borrowed habitat collection used to select mailbox signers. */
     readonly hby: Habery;
     /** Shared provider topics and persisted remote cursors. */
@@ -39,6 +65,10 @@ export declare class MailboxPoller {
     readonly http: HttpClient;
     /** Borrowed clock for this owner's actual network deadlines. */
     readonly clock: RuntimeClock;
+    /** Told after each poll a mailbox served. */
+    readonly onPolled: ((pre: string, mailbox: string) => void) | undefined;
+    /** Told when a mailbox answers 403. */
+    readonly onUnauthorized: ((pre: string, mailbox: string) => void) | undefined;
     /**
      * Bind polling inputs and dependencies without starting workers or acquiring stores.
      *
@@ -64,13 +94,19 @@ export declare class MailboxPoller {
      * @param onBatch Awaited endpoint-batch consumer; the durable event cursor advances only after it succeeds. Failure or cancellation leaves that event available for later retrieval.
      * @throws Consumer/transport failures propagate; endpoint workers are joined on scope exit.
      */
-    pollDo(onBatch: (batch: MailboxPollBatch) => void | Operation<void>): Operation<never>;
+    pollDo(onBatch: (batch: MailboxPollBatch) => void | Operation<void>, pacing?: Readonly<DoerPacing>): Operation<never>;
+    /**
+     * Tell the poller `pre`'s mailbox roles or endpoints changed, so its workers are re-selected on the next tock
+     * instead of at the next sweep.
+     */
+    prompt(pre: string): void;
     /**
      * Stream one remote response through its consumer before recording cursor progress.
      *
      * @param target Mailbox subject habitat plus the actual local signer (a member for groups).
      * @param endpoint Selected remote endpoint AID and HTTP(S) URL.
      * @param onBatch Awaited consumer; successful completion precedes durable cursor advancement.
+     * @returns How the poll ended; see {@link PollOutcome}.
      */
     private pollRemoteEndpointOnce;
     /**
@@ -85,7 +121,10 @@ export declare class MailboxPoller {
      * Poll one remote endpoint continuously in the long-lived runtime shape.
      *
      * This keeps KERIpy's "one poller per endpoint" behavior while preserving
-     * `keri-ts`'s split between mailbox transport and runtime parser ownership.
+     * `keri-ts`'s split between mailbox transport and runtime parser ownership. Each poll ends in a
+     * {@link PollOutcome}; {@link nextPoll} maps it and the backoff state to the next action. A mailbox that is
+     * unreachable or refuses is retried on {@link MailboxPoller.RefusalBackoff}, never in a tight loop and never
+     * by failing the runtime. A 403 also prompts the KEL publisher, which owns posting the KEL.
      *
      * @param target Mailbox subject habitat plus the actual local signer (a member for groups).
      * @param endpoint Selected remote endpoint AID and HTTP(S) URL.
@@ -95,6 +134,7 @@ export declare class MailboxPoller {
     /**
      * Select locally pollable subjects without substituting the group for its member signer.
      *
+     * @param only When given, only these identifiers are considered.
      * @returns Local subject/signing pairs; groups without an available local member are omitted.
      */
     private remotePollTargets;
@@ -112,6 +152,17 @@ export interface MailboxPollingTimeoutPolicy {
     requestOpenTimeoutMs: number;
     /** Stop reading one mailbox SSE response after this long-poll window. */
     maxPollDurationMs: number;
+    /** Stop reading one response this long after its last complete event. */
+    readIdleTimeoutMs: number;
+    /** First wait after a poll that was not served; it doubles per consecutive failure. */
+    refusalInitialMs: number;
+    /** Longest wait after a poll that was not served. */
+    refusalMaxMs: number;
+}
+/** Waits after polls that were not served, in milliseconds. */
+export interface RefusalBackoffPolicy {
+    initialMs: number;
+    maxMs: number;
 }
 /** One remote mailbox batch, consumed before its provider cursor advances. */
 export interface MailboxPollBatch {
@@ -145,5 +196,43 @@ export interface MailboxFetchTimeoutPolicy {
      */
     readIdleTimeoutMs: number;
 }
+/**
+ * How one poll ended. `served` is the only outcome that resets the backoff; every other one is a reason to wait.
+ * - `served`: the mailbox answered 2xx and its events were consumed (possibly none).
+ * - `no-response`: no response headers within the open window.
+ * - `unreachable`: the connection failed before or while the response was read (refused, DNS, reset).
+ * - `unauthorized`: 403, the mailbox cannot authenticate the requester against the KEL it holds.
+ * - `refused`: any other non-success status.
+ */
+export type PollOutcome = "served" | "no-response" | "unreachable" | "unauthorized" | "refused";
+/** What the worker carries between polls: the current backoff, zero after a served poll. */
+export interface PollState {
+    readonly backoffMs: number;
+}
+/**
+ * What the worker does next: poll again after a scheduler turn, wait, or (for a 403) prompt the publisher and
+ * then wait.
+ */
+export type PollAction = {
+    kind: "poll";
+} | {
+    kind: "wait";
+    ms: number;
+} | {
+    kind: "prompt-publisher";
+    ms: number;
+};
+/** Classify a non-success status: 403 is the mailbox not recognising the requester; anything else is a refusal. */
+export declare function classifyPollRefusal(status: number): "unauthorized" | "refused";
+/** Double the backoff (or start it) and wait that long. */
+export declare function backOff(state: PollState, backoff?: Readonly<RefusalBackoffPolicy>): {
+    state: PollState;
+    action: PollAction;
+};
+/** The transition: where a poll's outcome leaves the worker, and what it does about it. */
+export declare function nextPoll(state: PollState, outcome: PollOutcome, backoff?: Readonly<RefusalBackoffPolicy>): {
+    state: PollState;
+    action: PollAction;
+};
 export {};
 //# sourceMappingURL=mailbox-poller.d.ts.map

package/types/app/mailbox/mailbox-poller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mailbox-poller.d.ts","sourceRoot":"","sources":["../../../src/app/mailbox/mailbox-poller.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,OAAO,EAAQ,KAAK,SAAS,EAA4B,MAAM,WAAW,CAAC;AAC3E,OAAO,KAAK,EAAO,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAIhE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAI7D;;GAEG;AACH,UAAU,oBAAoB;IAC5B;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;CACjD;AAED;;;;;;GAMG;AACH,qBAAa,aAAa;IACxB;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAGxE;IACH;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,iBAAiB,OAAO;IAExC,kEAAkE;IAClE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,sEAAsE;IACtE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IAC9D,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAE7B;;;;;;;;OAQG;gBAED,GAAG,EAAE,MAAM,EACX,eAAe,EAAE,eAAe,EAChC,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE,oBAAyB;IAUpC;;;;OAIG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIlC;;;;;;;;OAQG;IACF,MAAM,CACL,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAC3D,SAAS,CAAC,KAAK,CAAC;IAiBnB;;;;;;OAMG;IACH,OAAO,CAAE,sBAAsB;IA2B/B;;;;;;OAMG;IACH,OAAO,CAAE,iBAAiB;IA8B1B;;;;;;;;;OASG;IACH,OAAO,CAAE,oBAAoB;IAW7B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAYzB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;CAUtB;AAoBD,yGAAyG;AACzG,MAAM,WAAW,2BAA2B;IAC1C,mFAAmF;IACnF,oBAAoB,EAAE,MAAM,CAAC;IAC7B,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;CAC3B"}
+{"version":3,"file":"mailbox-poller.d.ts","sourceRoot":"","sources":["../../../src/app/mailbox/mailbox-poller.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,OAAO,EAAQ,KAAK,SAAS,EAA4B,MAAM,WAAW,CAAC;AAC3E,OAAO,KAAK,EAAO,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,KAAK,UAAU,EAA6B,MAAM,qBAAqB,CAAC;AACjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAShE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAI7D;;GAEG;AACH,UAAU,oBAAoB;IAC5B;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAChD,sGAAsG;IACtG,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAClD;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACzD;AAED,sGAAsG;AACtG,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAC9C;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,UAAU,CAGrD,CAAC;AAEH;;;;;;GAMG;AACH,qBAAa,aAAa;;IACxB;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAMxE;IACH;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,iBAAiB,OAAO;IACxC;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAG3D;IAEH,kEAAkE;IAClE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,sEAAsE;IACtE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IAC9D,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACxE,uCAAuC;IACvC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAE9E;;;;;;;;OAQG;gBAED,GAAG,EAAE,MAAM,EACX,eAAe,EAAE,eAAe,EAChC,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE,oBAAyB;IAYpC;;;;OAIG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIlC;;;;;;;;OAQG;IACF,MAAM,CACL,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,EAC5D,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAyB,GACnD,SAAS,CAAC,KAAK,CAAC;IAgCnB;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB;;;;;;;OAOG;IACH,OAAO,CAAE,sBAAsB;IA2B/B;;;;;;OAMG;IACH,OAAO,CAAE,iBAAiB;IA+B1B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAE,oBAAoB;IA6B7B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;CAUtB;AAoBD,yGAAyG;AACzG,MAAM,WAAW,2BAA2B;IAC1C,mFAAmF;IACnF,oBAAoB,EAAE,MAAM,CAAC;IAC7B,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,gBAAgB,EAAE,MAAM,CAAC;IACzB,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,aAAa,GAAG,aAAa,GAAG,cAAc,GAAG,SAAS,CAAC;AAKhG,4FAA4F;AAC5F,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,mHAAmH;AACnH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAO9E;AAED,2DAA2D;AAC3D,wBAAgB,OAAO,CACrB,KAAK,EAAE,SAAS,EAChB,OAAO,GAAE,QAAQ,CAAC,oBAAoB,CAAgC,GACrE;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAG1C;AAED,2FAA2F;AAC3F,wBAAgB,QAAQ,CACtB,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,QAAQ,CAAC,oBAAoB,CAAgC,GACrE;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAa1C"}

package/types/app/mailbox/mailboxing.d.ts

@@ -16,6 +16,7 @@
  *   layer serves both root and non-root mailbox/OOBI paths
  */
 import type { Operation } from "effection";
+import type { Baser } from "../../db/basing.js";
 import { Mailboxer, type MailboxerOptions } from "../../db/mailbox/mailboxing.js";
 import type { Hab, Habery } from "../identity/habbing.js";
 /**
@@ -78,6 +79,8 @@ export declare function mailboxQueryTopics(hby: Habery, pre: string, witness: st
  * @param idx Last successfully consumed provider ordinal.
  */
 export declare function updateMailboxRemoteCursor(hby: Habery, pre: string, witness: string, topic: string, idx: number): void;
+/** AIDs `pre` currently has an authorized mailbox role with, in stored order. */
+export declare function authorizedMailboxes(db: Baser, pre: string): string[];
 /**
  * Enumerate authorized mailbox providers and the subject's current KEL witnesses.
  *

package/types/app/mailbox/mailboxing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mailboxing.d.ts","sourceRoot":"","sources":["../../../src/app/mailbox/mailboxing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAI3C,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACtC,gBAAgB,CAKlB;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACtC,SAAS,CAAC,SAAS,CAAC,CAGtB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GACvB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,IAAI,CAIN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAc/F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,MAAM,SAAK,GACV,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAexB;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;IACnC;;OAEG;IACH,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACzC;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAqBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,cAAc,SAAK,EACnB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,cAAc,EAAE,CAqBlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,cAAc,SAAK,EACnB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,cAAc,GAAG,IAAI,CAGvB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,uBAAuB,EAAE,CAsB3B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,cAAc,SAAK,EACnB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,qBAAqB,CAuBvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAChD,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAarC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAExE;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMpD"}
+{"version":3,"file":"mailboxing.d.ts","sourceRoot":"","sources":["../../../src/app/mailbox/mailboxing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACtC,gBAAgB,CAKlB;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACtC,SAAS,CAAC,SAAS,CAAC,CAGtB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GACvB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,IAAI,CAIN;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAMpE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAW/F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,MAAM,SAAK,GACV,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAexB;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;IACnC;;OAEG;IACH,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACzC;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAqBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,cAAc,SAAK,EACnB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,cAAc,EAAE,CAqBlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,cAAc,SAAK,EACnB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,cAAc,GAAG,IAAI,CAGvB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,uBAAuB,EAAE,CAsB3B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,cAAc,SAAK,EACnB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,qBAAqB,CAuBvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAChD,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAarC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAExE;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMpD"}

package/types/app/multisig/counseling.d.ts

@@ -0,0 +1,196 @@
+import { type Operation } from "effection";
+import type { RotatedCue } from "../../core/cues.js";
+import { type Anchorer, type AnchorQueryDeps } from "../identity/delegating.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { RetryPolicy } from "../runtime/retry-backoff.js";
+import type { RuntimeClock } from "../runtime/runtime-clock.js";
+import { type ChangeSink, type WaitResult } from "../runtime/workflow-contract.js";
+import type { WitnessAuthMap } from "../witness/receipting.js";
+/** Exact group event a Counselor tracks. */
+export interface GroupEventRef {
+    pre: string;
+    sn: number;
+    said: string;
+}
+/** Counseling stage, in processing order. */
+export type CounselStage = "signatures" | "delegation" | "witnesses";
+/** Why a pending event cannot progress without outside help. */
+export type CounselBlock = {
+    kind: "witnessAuth";
+    witnesses: string[];
+} | {
+    kind: "witness";
+    reason: string;
+} | {
+    kind: "delegatorUnknown";
+    delpre: string;
+}
+/** No Anchorer was supplied, so delegated events cannot progress. */
+ | {
+    kind: "notSupported";
+    feature: "delegation";
+};
+/** Status of one group event; a pure read of durable rows plus retry state. */
+export type GroupEventStatus = {
+    state: "pending";
+    stage: CounselStage;
+    /** Whether this member is the event's witnesser; null before the event is accepted locally. */
+    elected: boolean | null;
+    /** Verified witness receipts held versus the event's own witness threshold. */
+    receipts: {
+        have: number;
+        need: number;
+    };
+    blocked?: CounselBlock;
+} | {
+    state: "complete";
+} | {
+    state: "superseded";
+    accepted: string;
+} | {
+    state: "unknown";
+};
+/** Per-event inputs; kept in memory only. */
+export interface CounselInputs {
+    /** Witness Authorization values for this event; a map replaces any earlier one. */
+    auths?: WitnessAuthMap;
+    /**
+     * How long a non-elected member only fetches receipts before it submits too.
+     * Zero makes every member submit. Default {@link DEFAULT_FALLBACK_AFTER_MS}.
+     */
+    fallbackAfterMs?: number;
+    /**
+     * Local hab that sends the delegation request and queries the delegator's
+     * witness. Optional: the local group member sends when none is supplied, as
+     * in KERIpy. An explicit proxy wins. Memory only.
+     */
+    proxy?: Hab;
+}
+/** Delegation collaborators; both are borrowed and run by the host. */
+export interface GroupDelegation {
+    /** Existing delegation workflow owner; the Counselor only begins and observes it. */
+    anchorer: Pick<Anchorer, "begin" | "complete">;
+    /** Query producer for delegator-anchor discovery by members that do not publish. */
+    querying: AnchorQueryDeps["querying"];
+}
+/** Receipting collaborator; `Receiptor` fits. */
+export interface GroupReceipting {
+    receipt(pre: string, options: {
+        sn: number;
+        auths: WitnessAuthMap;
+    }): Operation<unknown>;
+    get(pre: string, options: {
+        sn: number;
+        said: string;
+    }): Operation<boolean>;
+}
+/** Told when a group rotation completes, so its mailboxes are told; the runtime's `kelPublisher.rotated` fits. */
+export interface GroupMailboxes {
+    rotated(cue: RotatedCue): void;
+}
+/** Grace before a non-elected member submits receipts itself. */
+export declare const DEFAULT_FALLBACK_AFTER_MS = 60000;
+/** First and longest wait between receipt attempts for one event. */
+export declare const RECEIPT_BACKOFF_MS: {
+    readonly first: 1000;
+    readonly max: 30000;
+};
+/** The production receipt retry delays as a policy; only `baseMs` and `maxMs` apply, the Counselor never gives up. */
+export declare const DEFAULT_RECEIPT_RETRY: Readonly<RetryPolicy>;
+/** Counsels group events through signature and witness stages. */
+export declare class Counselor {
+    private readonly hby;
+    private readonly receipting;
+    private readonly clock;
+    private readonly changes?;
+    private readonly delegation?;
+    private readonly mailboxes?;
+    private readonly receiptRetry;
+    private readonly runs;
+    /**
+     * @param hby Borrowed identities and stores; the Counselor opens nothing.
+     * @param receipting Submits or fetches witness receipts for accepted events.
+     * @param clock Time source for fallback and retry; only `now` is used.
+     * @param changes Optional sink told `{kind:"group", id:"<pre>:<sn>"}` after commits.
+     * @param delegation Anchorer and query port for delegated events; omit for non-delegated hosts.
+     * @param mailboxes Told when one of the group's rotations completes; the member runtime's publisher then tells
+     *   the group's mailboxes the new key state, and several members doing so is harmless.
+     */
+    constructor(hby: Habery, receipting: GroupReceipting, clock: Pick<RuntimeClock, "now">, changes?: ChangeSink | undefined, delegation?: GroupDelegation | undefined, mailboxes?: GroupMailboxes | undefined, receiptRetry?: Readonly<RetryPolicy>);
+    private readonly anchorQuery;
+    /**
+     * Begin counseling an event. Idempotent and safe before local acceptance.
+     *
+     * @returns True when a new `gpse` row was added; false when the event is
+     *   already counseled or complete, or another SAID holds that sn.
+     * @throws ValidationError when `pre` is not a local group or the ref is malformed.
+     */
+    start(event: GroupEventRef, inputs?: CounselInputs): boolean;
+    /**
+     * Replace in-memory inputs of a counseled event, for example witness auths or
+     * a proxy after a restart, and re-arm any attempt waiting out its backoff.
+     * Ignored for an event that is already complete or superseded.
+     */
+    supply(event: GroupEventRef, inputs: CounselInputs): void;
+    /** Pure read of one event's state. */
+    status(event: GroupEventRef): GroupEventStatus;
+    /** Why a receipt attempt failed: missing auths for unreceipted witnesses, else the witness's own reason. */
+    private receiptBlock;
+    /** What keeps a delegated event in `gdee`, if anything the caller can fix. */
+    private delegationBlock;
+    private fallbackElapsed;
+    /** True when the event is complete, or another SAID holds its sn. */
+    private settled;
+    /** Events still counseled for `pre`, or for every prefix, in stage order. */
+    pending(pre?: string): Array<GroupEventRef & {
+        stage: CounselStage;
+    }>;
+    /** True once the exact event completed; drops its in-memory inputs. */
+    complete(event: GroupEventRef): boolean;
+    /**
+     * Stop counseling `pre`: remove its escrow rows, completion markers and
+     * in-memory inputs. Accepted KEL state is untouched.
+     */
+    abandon(pre: string): void;
+    /** One pass over all stages, as KERIpy `processEscrows`. */
+    processOnce(): Operation<void>;
+    /** Move events accepted with their escrowed SAID on to delegation or witnesses. */
+    private processSignatures;
+    /**
+     * Delegated events: the publishing member drives the Anchorer, any other member
+     * watches for the delegator's anchor. Both wait for the delegator's KEL.
+     */
+    private processDelegation;
+    /** Publishing duty: begin the Anchorer, keep receipts coming, and record completion. */
+    private publishDelegation;
+    /** Non-publishing duty: find the delegator's sealing event, pin it, and move on to receipts. */
+    private watchAnchor;
+    /** Record completion of a counseled event and drop its row from `table`. */
+    private finish;
+    /** Complete events whose own witness threshold is met; otherwise submit or fetch receipts. */
+    private processWitnesses;
+    /** One backed-off receipt attempt: submit when forced, elected or past the grace, else fetch. */
+    private pursueReceipts;
+    /** Remove a stale tuple when another SAID holds its sn; true when removed. */
+    private dropIfSuperseded;
+    /** Digest of the completed event at `(pre, sn)`, under either number width KERIpy writes. */
+    private completed;
+    /** Stage whose escrow holds exactly this event, if any. */
+    private stageOf;
+    private refOf;
+    private runKey;
+    /** Get or create the in-memory run for an event, applying supplied inputs. */
+    private retain;
+}
+/** Outcome of {@link waitForGroupEvent}; the status is the one read at return. */
+export type GroupEventWait = WaitResult<GroupEventStatus>;
+/**
+ * Observe `event` until it is no longer pending or the deadline passes. Starts
+ * no worker and makes no receipt call; progress comes from `processOnce`
+ * running elsewhere.
+ */
+export declare function waitForGroupEvent(counselor: Pick<Counselor, "status">, event: GroupEventRef, { timeoutMs, clock }: {
+    timeoutMs: number;
+    clock?: Pick<RuntimeClock, "now">;
+}): Operation<GroupEventWait>;
+//# sourceMappingURL=counseling.d.ts.map

package/types/app/multisig/counseling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"counseling.d.ts","sourceRoot":"","sources":["../../../src/app/multisig/counseling.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAKrD,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,eAAe,EAGrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,KAAK,UAAU,EAAgB,KAAK,UAAU,EAAE,MAAM,iCAAiC,CAAC;AACjG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,6CAA6C;AAC7C,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,YAAY,GAAG,WAAW,CAAC;AAErE,gEAAgE;AAChE,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC9C,qEAAqE;GACnE;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC;AAEpD,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GACxB;IACA,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,YAAY,CAAC;IACpB,+FAA+F;IAC/F,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,+EAA+E;IAC/E,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB,GACC;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,GACrB;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAEzB,6CAA6C;AAC7C,MAAM,WAAW,aAAa;IAC5B,mFAAmF;IACnF,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,KAAK,CAAC,EAAE,GAAG,CAAC;CACb;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,qFAAqF;IACrF,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,GAAG,UAAU,CAAC,CAAC;IAC/C,oFAAoF;IACpF,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;CACvC;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,cAAc,CAAA;KAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACzF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;CAC7E;AAED,kHAAkH;AAClH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC;CAChC;AAED,iEAAiE;AACjE,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,qEAAqE;AACrE,eAAO,MAAM,kBAAkB;;;CAAyC,CAAC;AACzE,sHAAsH;AACtH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,WAAW,CAItD,CAAC;AAqCH,kEAAkE;AAClE,qBAAa,SAAS;IAalB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAlB/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAE/C;;;;;;;;OAQG;gBAEgB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,EAChC,OAAO,CAAC,EAAE,UAAU,YAAA,EACpB,UAAU,CAAC,EAAE,eAAe,YAAA,EAC5B,SAAS,CAAC,EAAE,cAAc,YAAA,EAC1B,YAAY,GAAE,QAAQ,CAAC,WAAW,CAAyB;IAK9E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAE1D;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,GAAE,aAAkB,GAAG,OAAO;IAYhE;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI;IAIzD,sCAAsC;IACtC,MAAM,CAAC,KAAK,EAAE,aAAa,GAAG,gBAAgB;IAsB9C,4GAA4G;IAC5G,OAAO,CAAC,YAAY;IAOpB,8EAA8E;IAC9E,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,eAAe;IAIvB,qEAAqE;IACrE,OAAO,CAAC,OAAO;IAKf,6EAA6E;IAC7E,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,aAAa,GAAG;QAAE,KAAK,EAAE,YAAY,CAAA;KAAE,CAAC;IAUrE,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO;IAMvC;;;OAGG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAc1B,4DAA4D;IAC3D,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAS/B,mFAAmF;IACnF,OAAO,CAAC,iBAAiB;IAezB;;;OAGG;IACH,OAAO,CAAE,iBAAiB;IAmB1B,wFAAwF;IACxF,OAAO,CAAE,iBAAiB;IAqB1B,gGAAgG;IAChG,OAAO,CAAC,WAAW;IAoBnB,4EAA4E;IAC5E,OAAO,CAAC,MAAM;IAcd,8FAA8F;IAC9F,OAAO,CAAE,gBAAgB;IAezB,iGAAiG;IACjG,OAAO,CAAE,cAAc;IA0BvB,8EAA8E;IAC9E,OAAO,CAAC,gBAAgB;IAcxB,6FAA6F;IAC7F,OAAO,CAAC,SAAS;IAOjB,2DAA2D;IAC3D,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,MAAM;IAId,8EAA8E;IAC9E,OAAO,CAAC,MAAM;CA4Bf;AASD,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;AAE1D;;;;GAIG;AACH,wBAAiB,iBAAiB,CAChC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EACpC,KAAK,EAAE,aAAa,EACpB,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;CAAE,GAC7E,SAAS,CAAC,cAAc,CAAC,CAI3B"}

package/types/app/multisig/group-members.d.ts

@@ -36,6 +36,17 @@ export declare function groupWitnesserSelection(db: Baser, group: string, { sn,
  * idempotent duties only; frozen operations recheck their earlier choice instead.
  */
 export declare function groupElectedMember(hby: Habery, group: string, coordinator: GroupCoordinator): string | null;
+/**
+ * True when the local member is the witnesser for the exact accepted group event
+ * `coordinator`, as KERIpy `_groupWitnesser`: the member's latest contribution to
+ * the governing establishment's keys holds the lowest verified signing index.
+ *
+ * Unlike `groupElectedMember` this does not require that member to be a current
+ * signing member, so a historical event keeps its witnesser after a later
+ * rotation. Like it, the answer depends on locally stored signatures and suits
+ * idempotent duties only.
+ */
+export declare function groupWitnesser(hby: Habery, group: string, coordinator: GroupCoordinator): boolean;
 /** Return current group signing member AIDs in signing-index order. */
 export declare function groupSigningMembers(hby: Habery, groupPre: string): string[];
 /** Return the first locally available habitat from `members`, if any. */

package/types/app/multisig/group-members.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"group-members.d.ts","sourceRoot":"","sources":["../../../src/app/multisig/group-members.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAE9D;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAOnE;AAED,4FAA4F;AAC5F,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAe7D;AAED,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,KAAK,EACT,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,gBAAgB,GAC7B;IAAE,aAAa,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAkBxE;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAM3G;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAO3E;AAED,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAQxF;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAElE;AAED,wGAAwG;AACxG,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAMjF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,UAAU,EACpB,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAClC,gBAAgB,GAAG,IAAI,CAczB;AAED,sFAAsF;AACtF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,KAAK,EACT,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,GAC3B,oBAAoB,GAAG,IAAI,CAqC7B"}
+{"version":3,"file":"group-members.d.ts","sourceRoot":"","sources":["../../../src/app/multisig/group-members.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAE9D;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAOnE;AAED,4FAA4F;AAC5F,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAe7D;AAED,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,KAAK,EACT,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,gBAAgB,GAC7B;IAAE,aAAa,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAkBxE;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAM3G;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAMjG;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAO3E;AAED,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAQxF;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAElE;AAED,wGAAwG;AACxG,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAMjF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,UAAU,EACpB,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAClC,gBAAgB,GAAG,IAAI,CAczB;AAED,sFAAsF;AACtF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,KAAK,EACT,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,GAC3B,oBAAoB,GAAG,IAAI,CAqC7B"}