keri-ts 2.2.4 → 2.2.5

package/esm/keri/npm/src/vdr/registry-tsn-record.js

@@ -1,14 +1,9 @@
-import { Diger, Prefixer } from "cesr-ts";
 import { RegStateRecord } from "../core/records.js";
+import { readDiger, readPrefixer } from "../core/wire-fields.js";
 import { timestampMicros } from "../time/mod.js";
 /** Require the entire qualified prefix, not a valid prefix followed by untrusted suffix bytes. */
 export function qualifiedPrefix(value) {
-    try {
-        return typeof value === "string" && new Prefixer({ qb64: value }).qb64 === value;
-    }
-    catch {
-        return false;
-    }
+    return readPrefixer(value)?.qb64 === value;
 }
 /** Validate unknown notice fields and return the existing record with every field required. */
 export function registryRecord(data) {
@@ -32,13 +27,8 @@ export function registryRecord(data) {
         || typeof minor !== "number" || !Number.isSafeInteger(minor) || minor < 0
         || !backers.every(qualifiedPrefix) || !config.every((item) => typeof item === "string"))
         return null;
-    try {
-        if (new Diger({ qb64: data.d }).qb64 !== data.d)
-            return null;
-    }
-    catch {
+    if (readDiger(data.d)?.qb64 !== data.d)
         return null;
-    }
     // Keep required-field types while constructing the existing record; these arrays are fresh owned copies.
     return Object.assign(new RegStateRecord(), {
         vn: [major, minor],

package/esm/keri/npm/src/version.js

@@ -6,9 +6,9 @@
  * `src/version.ts` files by hand; edit this template instead.
  */
 /** Package semantic version copied from the owning package manifest. */
-export const PACKAGE_VERSION = "2.2.4";
+export const PACKAGE_VERSION = "2.2.5";
 /** Optional build metadata stamp injected by release/CI workflows. */
-export const BUILD_METADATA = "build.41.494decc08a02e94e55c83a49945ecaa6df7ad701";
+export const BUILD_METADATA = "build.43.de9e1669aad10d5356dc97c7998d0bcf6cdd6d5a";
 /** User-facing version string with build metadata appended when present. */
 export const DISPLAY_VERSION = BUILD_METADATA
     ? `${PACKAGE_VERSION}+${BUILD_METADATA}`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "keri-ts",
-  "version": "2.2.4",
+  "version": "2.2.5",
   "description": "KERI TypeScript protocol and runtime library",
   "homepage": "https://github.com/kentbull/keri-ts",
   "repository": {

package/types/_dnt.polyfills.d.ts

@@ -1,6 +1,11 @@
 declare global {
-    interface Error {
-        cause?: unknown;
+    interface Object {
+        /**
+         * Determines whether an object has a property with the specified name.
+         * @param o An object.
+         * @param v A property name.
+         */
+        hasOwn(o: object, v: PropertyKey): boolean;
     }
 }
 export {};
@@ -54,13 +59,8 @@ declare global {
 }
 export {};
 declare global {
-    interface Object {
-        /**
-         * Determines whether an object has a property with the specified name.
-         * @param o An object.
-         * @param v A property name.
-         */
-        hasOwn(o: object, v: PropertyKey): boolean;
+    interface Error {
+        cause?: unknown;
     }
 }
 export {};

package/types/_dnt.polyfills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_dnt.polyfills.d.ts","sourceRoot":"","sources":["../src/_dnt.polyfills.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,KAAK;QACb,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB;CACF;AAED,OAAO,EAAE,CAAC;AAEV,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,KAAK,CAAC,CAAC;QACf;;;;;;;;WAQG;QACH,QAAQ,CAAC,CAAC,SAAS,CAAC,EAClB,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,EACxE,OAAO,CAAC,EAAE,GAAG,GACZ,CAAC,GAAG,SAAS,CAAC;QACjB,QAAQ,CACN,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,OAAO,EACzD,OAAO,CAAC,EAAE,GAAG,GACZ,CAAC,GAAG,SAAS,CAAC;QAEjB;;;;;;;;WAQG;QACH,aAAa,CACX,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,OAAO,EACzD,OAAO,CAAC,EAAE,GAAG,GACZ,MAAM,CAAC;KACX;IACD,UAAU,UAAU;QAClB;;;;;;;;WAQG;QACH,QAAQ,CAAC,CAAC,SAAS,MAAM,EACvB,SAAS,EAAE,CACP,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,UAAU,KAChB,KAAK,IAAI,CAAC,EACf,OAAO,CAAC,EAAE,GAAG,GACZ,CAAC,GAAG,SAAS,CAAC;QACjB,QAAQ,CACJ,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,KAAK,OAAO,EACvE,OAAO,CAAC,EAAE,GAAG,GACd,MAAM,GAAG,SAAS,CAAC;QAEtB;;;;;;;;WAQG;QACH,aAAa,CACT,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,KAAK,OAAO,EACvE,OAAO,CAAC,EAAE,GAAG,GACd,MAAM,CAAC;KACX;CACF;AA4CD,OAAO,EAAE,CAAC;AAgBV,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd;;;;WAIG;QACH,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;KAC5C;CACF;AAED,OAAO,EAAE,CAAC"}
+{"version":3,"file":"_dnt.polyfills.d.ts","sourceRoot":"","sources":["../src/_dnt.polyfills.ts"],"names":[],"mappings":"AAeA,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd;;;;WAIG;QACH,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;KAC5C;CACF;AAED,OAAO,EAAE,CAAC;AAEV,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,KAAK,CAAC,CAAC;QACf;;;;;;;;WAQG;QACH,QAAQ,CAAC,CAAC,SAAS,CAAC,EAClB,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,EACxE,OAAO,CAAC,EAAE,GAAG,GACZ,CAAC,GAAG,SAAS,CAAC;QACjB,QAAQ,CACN,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,OAAO,EACzD,OAAO,CAAC,EAAE,GAAG,GACZ,CAAC,GAAG,SAAS,CAAC;QAEjB;;;;;;;;WAQG;QACH,aAAa,CACX,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,OAAO,EACzD,OAAO,CAAC,EAAE,GAAG,GACZ,MAAM,CAAC;KACX;IACD,UAAU,UAAU;QAClB;;;;;;;;WAQG;QACH,QAAQ,CAAC,CAAC,SAAS,MAAM,EACvB,SAAS,EAAE,CACP,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,UAAU,KAChB,KAAK,IAAI,CAAC,EACf,OAAO,CAAC,EAAE,GAAG,GACZ,CAAC,GAAG,SAAS,CAAC;QACjB,QAAQ,CACJ,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,KAAK,OAAO,EACvE,OAAO,CAAC,EAAE,GAAG,GACd,MAAM,GAAG,SAAS,CAAC;QAEtB;;;;;;;;WAQG;QACH,aAAa,CACT,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,KAAK,OAAO,EACvE,OAAO,CAAC,EAAE,GAAG,GACd,MAAM,CAAC;KACX;CACF;AA4CD,OAAO,EAAE,CAAC;AACV,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,KAAK;QACb,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB;CACF;AAED,OAAO,EAAE,CAAC"}

package/types/acdc/registering.d.ts

@@ -70,6 +70,12 @@ export declare class RegistryStore {
     seqSaider(regk: string, sn: number): Saider | null;
     /** Resolve an accepted ordinal's body, or null when absent. */
     seqEvent(regk: string, sn: number): SerderACDC | null;
+    /**
+     * Registry identifiers with an accepted head, in key order: a scan of `heds.`. With `issuer`, only those whose
+     * accepted inception (`rip` at ordinal 0) names that issuer. Local aliases (`regs.`) play no part, so this also
+     * lists registries a store learned from others, such as a group registry a co-member incepted.
+     */
+    registries(issuer?: string): string[];
     /** Publish caller-approved storage markers; validation and duplicate/head policy belong to the engine. */
     accept(regk: string, sn: number, serder: SerderACDC): void;
     /** Yield accepted public TEL frames, with a retained opening or an explicit empty attachment foot. */

package/types/acdc/registering.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registering.d.ts","sourceRoot":"","sources":["../../src/acdc/registering.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAKL,KAAK,KAAK,EAGV,KAAK,eAAe,EAEpB,MAAM,EACN,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,KAAK,kBAAkB,EAAY,MAAM,kBAAkB,CAAC;AAErE,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,kBAAkB,GAAG,UAAU,CAM/E;AAuBD,iGAAiG;AACjG,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;CACrB;AACD,kFAAkF;AAClF,qBAAa,cAAe,SAAQ,SAAS,CAAC,mBAAmB,CAAE,YAAW,mBAAmB;IACvF,WAAW,EAAE,MAAM,CAAC;CAC7B;AACD,oEAAoE;AACpE,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kCAAkC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,gGAAgG;AAChG,wBAAiB,YAAY,CAC3B,EAAE,MAAa,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,GAAE,mBAAwB,GAC9D,SAAS,CAAC,QAAQ,CAAC,CAGrB;AAED,0FAA0F;AAC1F,wBAAiB,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CASlF;AAUD;;;;;;GAMG;AACH,qBAAa,aAAa;IAIZ,QAAQ,CAAC,KAAK,EAAE,QAAQ;IAHpC,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,UAAU,CAAsB;gBAEnB,KAAK,EAAE,QAAQ;IAEpC,2EAA2E;IAC3E,IAAI,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,IAAI,CAS1C;IAED,0FAA0F;IAC1F,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO;IAI7D,6FAA6F;IAC7F,iBAAiB,IAAI,KAAK,CAAC,cAAc,CAAC;IAS1C,2DAA2D;IAC3D,IAAI,MAAM,IAAI,OAAO,CAEpB;IACD,qFAAqF;IACpF,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC;IAGzB,oFAAoF;IACpF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAGtC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IAGrC,iGAAiG;IACjG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAGxC,gGAAgG;IAChG,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAYtD,0FAA0F;IAC1F,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,GAAG,kBAAkB;IAsBjF,mCAAmC;IACnC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,GAAG,IAAI;IAIrD,2FAA2F;IAC3F,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO;IAGvE,gEAAgE;IAChE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAGjC,2DAA2D;IAC3D,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAI1C,2FAA2F;IAC3F,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAGlD,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAIrD,0GAA0G;IAC1G,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI;IAO1D,sGAAsG;IACrG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAI,GAAG,SAAS,CAAC,UAAU,CAAC;IAS1D,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAI,GAAG,UAAU;IAU1C,mFAAmF;IACnF,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAIpE,iFAAiF;IACjF,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAIjE;;;;;;OAMG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;CAM9D"}
+{"version":3,"file":"registering.d.ts","sourceRoot":"","sources":["../../src/acdc/registering.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAKL,KAAK,KAAK,EAGV,KAAK,eAAe,EAEpB,MAAM,EACN,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,KAAK,kBAAkB,EAAY,MAAM,kBAAkB,CAAC;AAErE,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,kBAAkB,GAAG,UAAU,CAM/E;AAuBD,iGAAiG;AACjG,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;CACrB;AACD,kFAAkF;AAClF,qBAAa,cAAe,SAAQ,SAAS,CAAC,mBAAmB,CAAE,YAAW,mBAAmB;IACvF,WAAW,EAAE,MAAM,CAAC;CAC7B;AACD,oEAAoE;AACpE,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kCAAkC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,gGAAgG;AAChG,wBAAiB,YAAY,CAC3B,EAAE,MAAa,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,GAAE,mBAAwB,GAC9D,SAAS,CAAC,QAAQ,CAAC,CAGrB;AAED,0FAA0F;AAC1F,wBAAiB,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CASlF;AAUD;;;;;;GAMG;AACH,qBAAa,aAAa;IAIZ,QAAQ,CAAC,KAAK,EAAE,QAAQ;IAHpC,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,UAAU,CAAsB;gBAEnB,KAAK,EAAE,QAAQ;IAEpC,2EAA2E;IAC3E,IAAI,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,IAAI,CAS1C;IAED,0FAA0F;IAC1F,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO;IAI7D,6FAA6F;IAC7F,iBAAiB,IAAI,KAAK,CAAC,cAAc,CAAC;IAS1C,2DAA2D;IAC3D,IAAI,MAAM,IAAI,OAAO,CAEpB;IACD,qFAAqF;IACpF,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC;IAGzB,oFAAoF;IACpF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAGtC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO;IAGrC,iGAAiG;IACjG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAGxC,gGAAgG;IAChG,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAYtD,0FAA0F;IAC1F,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,GAAG,kBAAkB;IAsBjF,mCAAmC;IACnC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,GAAG,IAAI;IAIrD,2FAA2F;IAC3F,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO;IAGvE,gEAAgE;IAChE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAGjC,2DAA2D;IAC3D,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAI1C,2FAA2F;IAC3F,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAGlD,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAIrD;;;;OAIG;IACH,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE;IAarC,0GAA0G;IAC1G,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI;IAO1D,sGAAsG;IACrG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAI,GAAG,SAAS,CAAC,UAAU,CAAC;IAS1D,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAI,GAAG,UAAU;IAU1C,mFAAmF;IACnF,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAIpE,iFAAiF;IACjF,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAIjE;;;;;;OAMG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;CAM9D"}

package/types/acdc/salting.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"salting.d.ts","sourceRoot":"","sources":["../../src/acdc/salting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAgBL,MAAM,EACN,KAAK,UAAU,EACf,KAAK,UAAU,EACf,MAAM,EAKP,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAOpD,OAAO,EAAE,KAAK,kBAAkB,EAA+D,MAAM,kBAAkB,CAAC;AACxH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,0EAA0E;AAC1E,qBAAa,WAAY,SAAQ,eAAe;IAC9C,SAAkB,IAAI,EAAE,MAAM,CAAiB;CAChD;AAED,6EAA6E;AAC7E,qBAAa,cAAe,SAAQ,eAAe;IACjD,SAAkB,IAAI,EAAE,MAAM,CAAoB;CACnD;AAED,4FAA4F;AAC5F,qBAAa,YAAa,SAAQ,cAAc;CAAG;AAEnD,iGAAiG;AACjG,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AA8DD;;;;;;;;;;GAUG;AACH,wBAAgB,OAAO,CACrB,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,UAAU,CA4BZ;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,qBAAa,YAAa,YAAW,oBAAoB;IACvD,MAAM,CAAC,QAAQ,CAAC,KAAK,oBAAoB;IACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,wBAAwB;IAC5C,MAAM,CAAC,QAAQ,CAAC,MAAM,iCAAkC;IACxD,QAAQ,CAAC,QAAQ,oBAAsB;IACvC,QAAQ,CAAC,aAAa,KAAK;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IACnC,qHAAqH;IACrH,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,CAAC;gBAE7B,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,QAAQ,GAAG,IAAW,EAAE,OAAO,CAAC,EAAE,UAAU;IAW5F,+EAA+E;IAC/E,OAAO,CAAC,UAAU;IAWlB,iFAAiF;IACjF,OAAO,CAAC,OAAO;IAKf,6GAA6G;IAC7G,OAAO,CAAC,WAAW;IAKnB,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU;IAoBtC,6EAA6E;IAC7E,OAAO,CAAC,MAAM,CAAC,UAAU;IAMzB;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU;IAsBvF,sGAAsG;IACtG,OAAO,CAAC,QAAQ;IAiBhB;;;;;;;;OAQG;IACH,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAe,EAAE,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,MAAM,EAAE;IAcjG;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE;IAe/C,4EAA4E;IAC5E,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAW9B,qHAAqH;IACrH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKvD,wEAAwE;IACxE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAQ3B,4EAA4E;IAC5E,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAW/C;;;;;;;;;;;OAWG;IACH,OAAO,CACL,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAc,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GACpF,UAAU;IA6Bb;;;;;;;OAOG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI;IAUjF;;;;;;;;OAQG;IACH,OAAO,CAAE,KAAK;IAgBd,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAE,MAAM;IAStB,kGAAkG;IAClG,OAAO,CAAC,KAAK;IAyBb;;;;OAIG;IACH,OAAO,CAAC,KAAK;IAiCb,mFAAmF;IACnF,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO;IAWjE;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO;IAaxE,2FAA2F;IAC3F,OAAO,CAAC,OAAO;IAOf,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI;IAMrE,OAAO,CAAC,MAAM;IAMd,8EAA8E;IAC9E,OAAO,CAAC,IAAI;IAqCZ;;;;;;OAMG;IACH,OAAO,CAAC,MAAM;IA8Cd,+EAA+E;IAC/E,OAAO,CAAC,OAAO;IAcf;;;;OAIG;IACH,cAAc,IAAI,IAAI;IAItB;;;;;;;;;;;OAWG;IACH,SAAS,IAAI,MAAM,EAAE;IAgBrB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;KAAO,GAAG,OAAO;IAUzG,OAAO,CAAC,UAAU;IAWlB,6EAA6E;IAC7E,OAAO,IAAI,eAAe,EAAE;CAkB7B"}
+{"version":3,"file":"salting.d.ts","sourceRoot":"","sources":["../../src/acdc/salting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAgBL,MAAM,EACN,KAAK,UAAU,EACf,KAAK,UAAU,EACf,MAAM,EAKP,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAOpD,OAAO,EAAE,KAAK,kBAAkB,EAA+D,MAAM,kBAAkB,CAAC;AACxH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,0EAA0E;AAC1E,qBAAa,WAAY,SAAQ,eAAe;IAC9C,SAAkB,IAAI,EAAE,MAAM,CAAiB;CAChD;AAED,6EAA6E;AAC7E,qBAAa,cAAe,SAAQ,eAAe;IACjD,SAAkB,IAAI,EAAE,MAAM,CAAoB;CACnD;AAED,4FAA4F;AAC5F,qBAAa,YAAa,SAAQ,cAAc;CAAG;AAEnD,iGAAiG;AACjG,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AA8DD;;;;;;;;;;GAUG;AACH,wBAAgB,OAAO,CACrB,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,UAAU,CA4BZ;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,qBAAa,YAAa,YAAW,oBAAoB;IACvD,MAAM,CAAC,QAAQ,CAAC,KAAK,oBAAoB;IACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,wBAAwB;IAC5C,MAAM,CAAC,QAAQ,CAAC,MAAM,iCAAkC;IACxD,QAAQ,CAAC,QAAQ,oBAAsB;IACvC,QAAQ,CAAC,aAAa,KAAK;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IACnC,qHAAqH;IACrH,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,CAAC;gBAE7B,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,QAAQ,GAAG,IAAW,EAAE,OAAO,CAAC,EAAE,UAAU;IAW5F,+EAA+E;IAC/E,OAAO,CAAC,UAAU;IAWlB,iFAAiF;IACjF,OAAO,CAAC,OAAO;IAKf,6GAA6G;IAC7G,OAAO,CAAC,WAAW;IAKnB,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU;IAoBtC,6EAA6E;IAC7E,OAAO,CAAC,MAAM,CAAC,UAAU;IAMzB;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU;IAsBvF,sGAAsG;IACtG,OAAO,CAAC,QAAQ;IAiBhB;;;;;;;;OAQG;IACH,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAe,EAAE,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,MAAM,EAAE;IAcjG;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE;IAe/C,4EAA4E;IAC5E,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAW9B,qHAAqH;IACrH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKvD,wEAAwE;IACxE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAQ3B,4EAA4E;IAC5E,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAW/C;;;;;;;;;;;OAWG;IACH,OAAO,CACL,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAc,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GACpF,UAAU;IA6Bb;;;;;;;OAOG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI;IAUjF;;;;;;;;OAQG;IACH,OAAO,CAAE,KAAK;IAgBd,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAE,MAAM;IAStB,kGAAkG;IAClG,OAAO,CAAC,KAAK;IAyBb;;;;OAIG;IACH,OAAO,CAAC,KAAK;IAiCb,mFAAmF;IACnF,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO;IAWjE;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO;IAaxE,2FAA2F;IAC3F,OAAO,CAAC,OAAO;IAOf,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI;IAMrE,OAAO,CAAC,MAAM;IAMd,8EAA8E;IAC9E,OAAO,CAAC,IAAI;IAyCZ;;;;;;OAMG;IACH,OAAO,CAAC,MAAM;IA8Cd,+EAA+E;IAC/E,OAAO,CAAC,OAAO;IAcf;;;;OAIG;IACH,cAAc,IAAI,IAAI;IAItB;;;;;;;;;;;OAWG;IACH,SAAS,IAAI,MAAM,EAAE;IAgBrB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;KAAO,GAAG,OAAO;IAUzG,OAAO,CAAC,UAAU;IAWlB,6EAA6E;IAC7E,OAAO,IAAI,eAAe,EAAE;CAkB7B"}

package/types/app/bootstrap/authenticating.d.ts

@@ -3,7 +3,7 @@ import type { Baser } from "../../db/basing.js";
 import type { Habery } from "../identity/habbing.js";
 import { type DoerPacing } from "../runtime/doing.js";
 import { type RuntimeClock } from "../runtime/runtime-clock.js";
-import type { HttpClient } from "../transport/http-client.js";
+import { type HttpClient } from "../transport/http-client.js";
 /**
  * Return true when a well-known URL has been authorized into `wkas.`.
  *
@@ -46,11 +46,21 @@ export declare class Authenticator {
     /** Return the next pending `mfa.` auth record, if any. */
     private nextPendingAuth;
     /**
-     * Fetch one `mfa.` record and persist the terminal auth result.
+     * Fetch one `mfa.` record and persist the terminal auth result. A URL the HTTP client refuses, a refused or failed
+     * request, or a non-OK status each end this authentication as failed in `rmfa.` and remove its `mfa.` row, so the
+     * next pass takes the next one; any other error is a fault and propagates.
      *
      * @param url Exact pending well-known authentication URL.
      * @param record Durable mfa record retained until response handling and cleanup establish terminal state.
      */
     private processPendingAuth;
+    /**
+     * Request one well-known URL and read only its status; the response owner still joins body cleanup.
+     *
+     * @param url Pending well-known authentication URL.
+     * @returns The terminal state: `resolved` for an OK status, `http-<status>` otherwise, or the
+     *   {@link OobiJobFailure} of a URL the client refuses or a refused or failed request.
+     */
+    private authenticate;
 }
 //# sourceMappingURL=authenticating.d.ts.map

package/types/app/bootstrap/authenticating.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authenticating.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/authenticating.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,SAAS,EAAU,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,KAAK,UAAU,EAAmC,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,GACV,OAAO,CAMT;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;;;;OAKG;gBACS,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU;IAKzC,sEAAsE;IACrE,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAe/B,yDAAyD;IACxD,MAAM,CAAC,KAAK,GAAE,YAA0B,EAAE,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAmB,GAAG,SAAS,CAAC,KAAK,CAAC;IAI5G,4EAA4E;IAC5E,OAAO,CAAC,sBAAsB;IAsC9B,0DAA0D;IAC1D,OAAO,CAAC,eAAe;IAYvB;;;;;OAKG;IACH,OAAO,CAAE,kBAAkB;CAgC5B"}
+{"version":3,"file":"authenticating.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/authenticating.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,SAAS,EAAU,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,KAAK,UAAU,EAAmC,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,KAAK,UAAU,EAAwB,MAAM,6BAA6B,CAAC;AAMpF;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,GACV,OAAO,CAMT;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;;;;OAKG;gBACS,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU;IAKzC,sEAAsE;IACrE,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAe/B,yDAAyD;IACxD,MAAM,CAAC,KAAK,GAAE,YAA0B,EAAE,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAmB,GAAG,SAAS,CAAC,KAAK,CAAC;IAI5G,4EAA4E;IAC5E,OAAO,CAAC,sBAAsB;IAsC9B,0DAA0D;IAC1D,OAAO,CAAC,eAAe;IAYvB;;;;;;;OAOG;IACH,OAAO,CAAE,kBAAkB;IA4B3B;;;;;;OAMG;IACH,OAAO,CAAE,YAAY;CActB"}

package/types/app/bootstrap/oobiery.d.ts

@@ -10,14 +10,38 @@ import { type Role } from "../../core/roles.js";
 import type { Revery } from "../../core/routing.js";
 import { type ReplyProcessDecision } from "../../core/routing.js";
 import type { Baser } from "../../db/basing.js";
+import type { Poster } from "../delivery/forwarding.js";
+import { type Relay } from "../delivery/relaying.js";
 import type { Exchanger, ExchangeRouteHandler } from "../exchanges/exchanging.js";
 import type { Hab, Habery } from "../identity/habbing.js";
 import type { Notifier } from "../notifications/notifying.js";
 import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
 import { type DoerPacing } from "../runtime/doing.js";
 import { type RuntimeClock } from "../runtime/runtime-clock.js";
-import type { HttpClient } from "../transport/http-client.js";
+import { type HttpClient } from "../transport/http-client.js";
 export declare const OOBI_REQUEST_ROUTE = "/oobis";
+/**
+ * How long an edge's OOBI job waits for its relay to hold the answer before it fails: 30 seconds, measured from the
+ * job's first relay attempt on the composed clock. It matches KERIpy's `Oobiery.RetryDelay` and the default
+ * `bootstrapOobis` timeout; the keri-ts Oobiery has no other retry, and a direct fetch fails on its first non-OK
+ * answer.
+ */
+export declare const RELAY_OOBI_TIMEOUT_MS = 30000;
+/**
+ * What an edge's Oobiery uses to resolve OOBIs through its relay agent instead of fetching third-party origins.
+ *
+ * For a job whose origin is not the relay's, the Oobiery asks the relay to resolve the URL (an `/oobis` exchange
+ * sent through `postman`) and then fetches the result from the relay's own OOBI endpoint, verifying what it
+ * ingests exactly as for a direct fetch. The relay's own OOBI is fetched directly.
+ */
+export interface OobiRelaying {
+    /** The relay agent; the only origin this Oobiery fetches. */
+    readonly relay: Relay;
+    /** Borrowed delivery owner that hands the `/oobis` request to the relay. */
+    readonly postman: Poster;
+    /** Borrowed clock that dates a job's relay wait and decides {@link RELAY_OOBI_TIMEOUT_MS}. */
+    readonly clock: RuntimeClock;
+}
 /**
  * Runtime-tracked OOBI resolution job.
  *
@@ -62,6 +86,30 @@ export interface OobiTerminalState {
  */
 export declare function oobiTerminalState(db: Baser, url: string, kind?: OobiQueueKind): OobiTerminalState;
 type OobiQueueKind = "oobis" | "woobi";
+/**
+ * Why one OOBI or well-known authentication job failed because of its URL or what its remote party answered. It is
+ * the failed row's `state` (`eoobi.` or `rmfa.`) and the `oobiFailed` cue's `reason`.
+ * - `url-refused`: the URL is one the HTTP client refuses by construction ({@link isRequestableHttpUrl}), so it is
+ *   failed before any request;
+ * - `egress-refused`: an edge's relay-only guard refused the origin (`RelayOnlyError`);
+ * - `transport-failed`: connecting, requesting or reading the body failed (`TransportError`);
+ * - `unparseable-response`: the body is not CESR (`WireParseError`);
+ * - `invalid-response-frame`: a frame parsed but a field in it did not decode while it was dispatched (any other
+ *   cesr `ParserError`, or the `SyntaxError`/`RangeError` that `BigInt` and number decoding throw on a remote value).
+ */
+export type OobiJobFailure = "url-refused" | "egress-refused" | "transport-failed" | "unparseable-response" | "invalid-response-frame";
+/**
+ * Classify an error that ended one OOBI or authentication job: the {@link OobiJobFailure} a remote party can cause,
+ * or null for a fault that must propagate and end the runtime (a store error such as `DatabaseError`, corrupt
+ * durable state, a programmer error such as `TypeError`, a plain `Error`).
+ *
+ * Limits: a cesr `ParserError`, `SyntaxError` or `RangeError` raised while decoding local stored state during the
+ * same dispatch is indistinguishable by class from one raised by a remote field, so it also ends only that job.
+ *
+ * @param error What escaped the job's request or response ingestion.
+ * @returns The failure to record, or null to rethrow.
+ */
+export declare function oobiJobFailure(error: unknown): OobiJobFailure | null;
 /**
  * Durable OOBI processing component for one `Habery`.
  *
@@ -87,8 +135,15 @@ export declare class Oobiery {
     readonly cues: Deck<AgentCue>;
     /** Borrowed HTTP client; no network service is discovered through ingress. */
     readonly http: HttpClient;
+    /** Relay collaborators of an edge; null resolves every OOBI directly. */
+    readonly relaying: OobiRelaying | null;
     /** Prevent overlapping passes over this owner's durable job queue. */
     private active;
+    /**
+     * URL of the last job handled with a relay, so a job left waiting does not starve the jobs after it: the next
+     * pass takes the first queued URL after this one. Always null without a relay.
+     */
+    private relayCursor;
     /**
      * Bind byte intake and the actual reply verifier used by OOBI proof persistence.
      *
@@ -97,10 +152,11 @@ export declare class Oobiery {
      * @param rvy Actual shared reply verifier used for OOBI reply proof persistence.
      * @param http Borrowed HTTP implementation selected by composition.
      * @param cues Required application result Deck supplied by composition.
+     * @param relaying Relay collaborators of an edge runtime; null (a forwarder) resolves every OOBI directly.
      */
     constructor(hby: Habery, protocol: ProtocolProcessor, 
     /** Borrowed reply verifier; route installation and proof writes share this owner. */
-    rvy: Revery, http: HttpClient, cues: Deck<AgentCue>);
+    rvy: Revery, http: HttpClient, cues: Deck<AgentCue>, relaying?: OobiRelaying | null);
     /**
      * Register `/introduce` on the shared reply router.
      *
@@ -134,7 +190,10 @@ export declare class Oobiery {
      * doer rather than root-owned queue plumbing.
      */
     oobiDo(clock?: RuntimeClock, pacing?: Readonly<DoerPacing>): Operation<never>;
-    /** Select queued work, including a surviving in-flight row whose former process is gone. */
+    /**
+     * Select queued work, including a surviving in-flight row whose former process is gone. After a relay job, the
+     * first queued URL after it is taken, wrapping around, so jobs waiting on the relay take turns.
+     */
     private nextQueued;
     /** Select a parent only after its current child attempts, including authentication, settle. */
     private nextReadyMoobi;
@@ -144,7 +203,7 @@ export declare class Oobiery {
      * Stores touched:
      * - `oobis.` / `woobi.` as the durable queued worklists
      * - `coobi.` while a fetched response is being processed
-     * - `eoobi.` on HTTP failure
+     * - `eoobi.` on HTTP failure or an {@link OobiJobFailure}; the queued row is removed so it is not re-read
      * - `roobi.` after parser/routing success
      *
      * @param kind Durable OOBI queue family identifying the job path.
@@ -172,6 +231,53 @@ export declare class Oobiery {
      * @param response Borrowed scoped HTTP response; complete processing precedes terminal state.
      */
     private resolveCesrOobiResponse;
+    /**
+     * Dispatch one complete CESR OOBI response through this owner's Kevery and the shared semantic handlers, keeping
+     * the queued row and an in-flight `coobi.` row until the stream is consumed. Writes no terminal state.
+     *
+     * @param kind Durable OOBI queue family identifying the job path.
+     * @param url Exact OOBI URL used as the durable job key.
+     * @param queuedRecord Original durable job metadata retained until terminal publication.
+     * @param response Borrowed scoped HTTP response.
+     */
+    private ingestCesrOobiResponse;
+    /**
+     * Resolve one job through the relay: ask it once, then fetch the result from the relay's own OOBI endpoint.
+     *
+     * The job stays in `oobis.` while it waits, dated from its first relay attempt; a pass that changes nothing
+     * writes nothing. It waits while the relay answers 404, is unreachable, or answers a controller OOBI without the
+     * controller's KEL. It fails at {@link RELAY_OOBI_TIMEOUT_MS}: `relay-unresolved` when the relay was asked,
+     * `relay-unserved` when it never could be (no accepted relay location, or no local identifier authorized the
+     * relay as its mailbox). Another non-OK answer fails at once as `http-<status>`, as a direct fetch does, an answer
+     * that is not CESR or whose frames do not decode fails at once with its {@link OobiJobFailure}, and a URL that names
+     * neither an identifier nor a SAID fails at once as `relay-unmappable-oobi`.
+     *
+     * @param relaying Relay collaborators of this edge.
+     * @param kind Durable OOBI queue family identifying the job path.
+     * @param url Exact third-party OOBI URL used as the durable job key; it is never fetched.
+     * @param record Pending durable job.
+     */
+    private processRelayJob;
+    /**
+     * Fetch what the relay holds for one job and ingest it under the ordinary verification.
+     *
+     * @param kind Durable OOBI queue family identifying the job path.
+     * @param url Exact third-party OOBI URL used as the durable job key.
+     * @param record Waiting durable job metadata.
+     * @param meta Parsed OOBI URL metadata selecting the response interpretation.
+     * @param relayUrl URL on the relay's origin that serves the job's answer.
+     * @returns `resolved` after a terminal write, `waiting` when the relay does not hold the answer yet or cannot be
+     * reached, the refusing HTTP status, or the {@link OobiJobFailure} of an answer that cannot be ingested.
+     */
+    private fetchFromRelay;
+    /**
+     * The local identifier that asks the relay to resolve an OOBI: one the relay serves, which has authorized the
+     * relay as its mailbox ({@link relayAuthorized}). A group cannot sign the request alone, so groups never ask.
+     *
+     * @param relay The configured relay agent.
+     * @returns The asking habitat, or null while the relay has no accepted location or no local identifier it serves.
+     */
+    private relayAsker;
     /** Handle schema data-OOBIs before generic JSON reply handling. */
     private processSchemaOobiResponse;
     /** Handle JSON OOBI responses that carry reply bodies instead of CESR streams. */
@@ -202,7 +308,16 @@ export declare class Oobiery {
         tsgs?: TransIdxSigGroup[];
     }): ReplyProcessDecision;
 }
-export declare function loadOobiHandlers(hby: Habery, exchanger: Exchanger, notifier?: Notifier | null): void;
+/**
+ * Register the `/oobis` exchange handler.
+ *
+ * @param hby Borrowed local identities and the durable OOBI queue.
+ * @param exchanger Exchanger receiving the route.
+ * @param notifier Optional operator notice producer.
+ * @param relaying Whether this host relays (the agent side of relay mode): requests are then accepted only from a
+ * served sender.
+ */
+export declare function loadOobiHandlers(hby: Habery, exchanger: Exchanger, notifier?: Notifier | null, relaying?: boolean): void;
 /**
  * Peer-to-peer OOBI request handler for `/oobis` exchange messages.
  *
@@ -216,21 +331,43 @@ export declare function loadOobiHandlers(hby: Habery, exchanger: Exchanger, noti
  *
  * Local `keri-ts` adaptation:
  * - verification stays lightweight and route-local: we only require a string
- *   `oobi` payload with an `http:` or `https:` scheme
+ *   `oobi` payload that is an `http:` or `https:` URL without embedded
+ *   credentials, which is what the HTTP client can request
  * - durable follow-on work still belongs to `Oobiery` itself; this handler is
  *   just the exchange ingress seam that translates an EXN into queued resolver
  *   state
  * - unlike KERIpy's DoDoer-centric runtime, the queued record is later
  *   advanced by the shared `AgentRuntime` turn that owns OOBI processing
+ * - on a relaying host (the agent side of relay mode) a request is accepted
+ *   only from a served sender, by the same rule `/fwd` intake relays for
+ *   ({@link servingHost}): the sender authorized a local habitat as its
+ *   `mailbox` or `agent`. An edge resolves third-party OOBIs this way; nobody
+ *   else can make the agent fetch a URL. Without relaying, any authenticated
+ *   sender is accepted, as in KERIpy.
  */
 export declare class OobiRequestHandler implements ExchangeRouteHandler {
     static readonly resource = "/oobis";
     readonly resource = "/oobis";
     readonly hby: Habery;
     readonly notifier: Notifier | null;
-    constructor(hby: Habery, notifier?: Notifier | null);
+    /** Whether requests are restricted to served senders. */
+    readonly relaying: boolean;
+    /**
+     * @param hby Borrowed local identities and the durable OOBI queue.
+     * @param notifier Optional operator notice producer.
+     * @param relaying Restrict requests to served senders (a relaying host); false accepts any sender.
+     */
+    constructor(hby: Habery, notifier?: Notifier | null, relaying?: boolean);
+    /**
+     * Accept a request carrying an `oobi` the HTTP client can request ({@link isRequestableHttpUrl}: HTTP(S), no
+     * embedded credentials); on a relaying host, only from a served sender. Anything else could never resolve.
+     *
+     * @param args Authenticated exchange and the receiving hosted endpoint, if the request named one.
+     * @returns False to reject the exchange.
+     */
     verify(args: {
         serder: SerderKERI;
+        mailboxAid?: string | null;
     }): boolean;
     handle(args: {
         serder: SerderKERI;

package/types/app/bootstrap/oobiery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oobiery.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/oobiery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,EAAkB,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAQ,KAAK,SAAS,EAAoB,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAmB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,KAAK,IAAI,EAAS,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAuB,KAAK,oBAAoB,EAA2B,MAAM,uBAAuB,CAAC;AAEhH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,KAAK,UAAU,EAAmC,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAG7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC1C;;OAEG;IACH,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACzC;;OAEG;IACH,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,aAAiC,GACtC,iBAAiB,CA4BnB;AAED,KAAK,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,qBAAa,OAAO;IAuBhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAxBtB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,sEAAsE;IACtE,OAAO,CAAC,MAAM,CAAS;IAEvB;;;;;;;;OAQG;gBAED,GAAG,EAAE,MAAM,EACM,QAAQ,EAAE,iBAAiB;IAC5C,qFAAqF;IACpE,GAAG,EAAE,MAAM,EAC5B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;IAWtB;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,yCAAe,GAAG,IAAI;IAIhD;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAS1C;;;;;;;;OAQG;IACF,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAgB/B,qGAAqG;IACrG,OAAO,CAAC,aAAa;IAsBrB;;;;;OAKG;IACF,MAAM,CAAC,KAAK,GAAE,YAA0B,EAAE,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAmB,GAAG,SAAS,CAAC,KAAK,CAAC;IAI5G,4FAA4F;IAC5F,OAAO,CAAC,UAAU;IAUlB,+FAA+F;IAC/F,OAAO,CAAC,cAAc;IAWtB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAE,UAAU;IAiDnB;;;;;;;;OAQG;IACH,OAAO,CAAE,eAAe;IAwCxB;;;;;;;;OAQG;IACH,OAAO,CAAE,uBAAuB;IAwBhC,mEAAmE;IACnE,OAAO,CAAC,yBAAyB;IA8BjC,kFAAkF;IAClF,OAAO,CAAC,uBAAuB;IA0B/B,0FAA0F;IAC1F,OAAO,CAAC,qBAAqB;IAqC7B,oFAAoF;IACpF,OAAO,CAAC,iBAAiB;IA+BzB,+EAA+E;IAC/E,OAAO,CAAC,eAAe;IAavB,iEAAiE;IACjE,OAAO,CAAC,aAAa;IASrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAKrB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAYpB;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAC3B,GAAG,oBAAoB;CAwDzB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,QAAQ,GAAE,QAAQ,GAAG,IAAW,GAC/B,IAAI,CAEN;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,kBAAmB,YAAW,oBAAoB;IAC7D,MAAM,CAAC,QAAQ,CAAC,QAAQ,YAAsB;IAC9C,QAAQ,CAAC,QAAQ,YAA+B;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;gBAGjC,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,QAAQ,GAAG,IAAW;IAMlC,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO;IAaX,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,IAAI;CA6BT;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,UAAU,CAQZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAIvD;AAgCD,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"oobiery.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/oobiery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,EAA+B,UAAU,EAAkB,MAAM,SAAS,CAAC;AACrG,OAAO,EAAQ,KAAK,SAAS,EAAoB,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAmB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,KAAK,IAAI,EAAS,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAuB,KAAK,oBAAoB,EAA2B,MAAM,uBAAuB,CAAC;AAEhH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAEL,KAAK,KAAK,EAKX,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,KAAK,UAAU,EAAmC,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAE7E,OAAO,EAAE,KAAK,UAAU,EAAiD,MAAM,6BAA6B,CAAC;AAI7G,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAU5C;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC1C;;OAEG;IACH,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACzC;;OAEG;IACH,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,aAAiC,GACtC,iBAAiB,CA4BnB;AAED,KAAK,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,sBAAsB,GACtB,wBAAwB,CAAC;AAE7B;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAQpE;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,OAAO;IA+BhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAhCtB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IACvC,sEAAsE;IACtE,OAAO,CAAC,MAAM,CAAS;IACvB;;;OAGG;IACH,OAAO,CAAC,WAAW,CAAuB;IAE1C;;;;;;;;;OASG;gBAED,GAAG,EAAE,MAAM,EACM,QAAQ,EAAE,iBAAiB;IAC5C,qFAAqF;IACpE,GAAG,EAAE,MAAM,EAC5B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EACpB,QAAQ,GAAE,YAAY,GAAG,IAAW;IAYtC;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,yCAAe,GAAG,IAAI;IAIhD;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAS1C;;;;;;;;OAQG;IACF,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAgB/B,qGAAqG;IACrG,OAAO,CAAC,aAAa;IAsBrB;;;;;OAKG;IACF,MAAM,CAAC,KAAK,GAAE,YAA0B,EAAE,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAmB,GAAG,SAAS,CAAC,KAAK,CAAC;IAI5G;;;OAGG;IACH,OAAO,CAAC,UAAU;IAclB,+FAA+F;IAC/F,OAAO,CAAC,cAAc;IAWtB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAE,UAAU;IAkEnB;;;;;;;;OAQG;IACH,OAAO,CAAE,eAAe;IAwCxB;;;;;;;;OAQG;IACH,OAAO,CAAE,uBAAuB;IAoBhC;;;;;;;;OAQG;IACH,OAAO,CAAE,sBAAsB;IAY/B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAE,eAAe;IAsExB;;;;;;;;;;OAUG;IACH,OAAO,CAAE,cAAc;IAkDvB;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAWlB,mEAAmE;IACnE,OAAO,CAAC,yBAAyB;IA8BjC,kFAAkF;IAClF,OAAO,CAAC,uBAAuB;IA0B/B,0FAA0F;IAC1F,OAAO,CAAC,qBAAqB;IAsC7B,oFAAoF;IACpF,OAAO,CAAC,iBAAiB;IA+BzB,+EAA+E;IAC/E,OAAO,CAAC,eAAe;IAavB,iEAAiE;IACjE,OAAO,CAAC,aAAa;IASrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAKrB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAYpB;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAC3B,GAAG,oBAAoB;CAqDzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,QAAQ,GAAE,QAAQ,GAAG,IAAW,EAChC,QAAQ,UAAQ,GACf,IAAI,CAEN;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,kBAAmB,YAAW,oBAAoB;IAC7D,MAAM,CAAC,QAAQ,CAAC,QAAQ,YAAsB;IAC9C,QAAQ,CAAC,QAAQ,YAA+B;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IACnC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAE3B;;;;OAIG;gBAED,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,QAAQ,GAAG,IAAW,EAChC,QAAQ,UAAQ;IAOlB;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,OAAO;IAQX,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,IAAI;CA6BT;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,UAAU,CAQZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAIvD;AA4ED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/types/app/credentials/credential-importing.d.ts

@@ -17,6 +17,14 @@ export interface CredentialImportResult {
  * Later input failures preserve earlier accepted state. Receipts, replies and other messages still
  * use normal dispatch; absence of an importer acceptance lookup is not an additional refusal policy.
  *
+ * The input is retained history the caller already holds (for example an exported disclosure stream: KELs, the v2
+ * registry TEL, a Grant and its Admit), so every frame is dispatched with `DispatchOptions.retained`. Its v2
+ * exchanges skip KRAM, whose window their original stamps passed long ago; signatures, route verification and
+ * escrows are unchanged, and the accepted exchanges raise no notice and get no exchange lifetime. Targets: raw
+ * credentials, KEL and v1 TEL events, v2 `rip`/`bup` (accepted at their exact ordinal in the v2 registry store),
+ * and exchanges (accepted by the Exchanger; a v2 Admit also needs its Grant's reply row to name it). Importing the
+ * same input again changes nothing and reports the same acceptance.
+ *
  * @param protocol Borrowed protocol dispatcher, sharing reger with its TEL/credential handlers.
  * @param reger Borrowed credential/TEL store whose accepted records establish the result.
  * @param bytes Borrowed finite CESR bundle; parser chunks are copied during intake.

package/types/app/credentials/credential-importing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-importing.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-importing.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,KAAK,SAAS,EAAQ,MAAM,WAAW,CAAC;AAGvE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,2FAA2F;AAC3F,MAAM,WAAW,sBAAsB;IACrC,uHAAuH;IACvH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0HAA0H;IAC1H,QAAQ,EAAE,OAAO,CAAC;IAClB,2FAA2F;IAC3F,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AA6BD;;;;;;;;;;;;;GAaG;AACH,wBAAiB,sBAAsB,CACrC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,YAAY,EACnB,SAAS,SAAQ,GAChB,SAAS,CAAC,sBAAsB,CAAC,CA+CnC"}
+{"version":3,"file":"credential-importing.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-importing.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,KAAK,SAAS,EAAQ,MAAM,WAAW,CAAC;AAIvE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,2FAA2F;AAC3F,MAAM,WAAW,sBAAsB;IACrC,uHAAuH;IACvH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0HAA0H;IAC1H,QAAQ,EAAE,OAAO,CAAC;IAClB,2FAA2F;IAC3F,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAyCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAiB,sBAAsB,CACrC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,YAAY,EACnB,SAAS,SAAQ,GAChB,SAAS,CAAC,sBAAsB,CAAC,CA+CnC"}

package/types/app/credentials/root-replicator.d.ts

@@ -14,9 +14,13 @@
  * receiving is idempotent.
  *
  * A pass runs for a group on the replicator's first pass, after its latest establishment
- * changes (an accepted rotation), and when the Dhke completion cue prompts it, so a cue
- * lost in a crash is recovered by the next start. Sending a root a member already holds to
- * the group's current members is not a new consent, so nothing here asks anyone.
+ * changes (an accepted rotation) or its stored members change (they follow accepted state once
+ * every member's KEL is known), and when the Dhke completion cue prompts it, so a cue lost in a
+ * crash is recovered by the next start. The Counselor puts a group on the `changed` deck when it
+ * completes the group's establishment event or aligns its stored members, so the next pass
+ * re-derives it; the sweep finds the same changes later for a group nobody put there. Sending a
+ * root a member already holds to the group's current members is not a new consent, so nothing
+ * here asks anyone.
  *
  * A copy that cannot be prepared or delivered stays owed and is retried with a
  * process-local backoff; `status` reports it until it goes.
@@ -24,6 +28,7 @@
 import type { Operation } from "effection";
 import type { DhkeReplicate } from "../../acdc/dhking.js";
 import type { RegistryRoot } from "../../acdc/salting.js";
+import type { Deck } from "../../core/deck.js";
 import type { Poster } from "../delivery/forwarding.js";
 import type { Hab } from "../identity/habbing.js";
 import type { RuntimeClock } from "../runtime/runtime-clock.js";
@@ -51,6 +56,11 @@ export interface RootReplicatorDeps {
     postman: Poster;
     clock: RuntimeClock;
     changes?: ChangeSink;
+    /**
+     * Prefixes of groups whose establishment event or stored members changed, which the Counselor pushes. Each pass
+     * drains it as if each group were prompted.
+     */
+    changed?: Deck<string>;
 }
 /**
  * Derives, sends and records registry root copies for a wallet's local groups.
@@ -58,7 +68,8 @@ export interface RootReplicatorDeps {
  * Holds no durable state of its own beyond `Baser.rrsn`; what is pending and the
  * backoff are process-local and rebuilt from state. A host calls `prompt` (or
  * `replicate`) for each Dhke cue and `processOnce` on its loop; both are safe to repeat,
- * and overlapping `processOnce` calls never send one copy twice.
+ * and overlapping `processOnce` calls never send one copy twice. Groups on the `changed`
+ * deck are prompted by the next pass.
  */
 export declare class RootReplicator {
     #private;
@@ -76,8 +87,8 @@ export declare class RootReplicator {
         timeoutMs?: number;
     }): Operation<RootCopyResult[]>;
     /**
-     * The fixed-tock pass: re-derive only the groups that were prompted, then send up to {@link RootSendsPerPass}
-     * due copies. A rotation nobody prompted for waits for {@link RootReplicator.sweep}.
+     * The fixed-tock pass: re-derive only the groups that were prompted or are on the `changed` deck, then send up
+     * to {@link RootSendsPerPass} due copies. A rotation nobody prompted for waits for {@link RootReplicator.sweep}.
      */
     processDue({ timeoutMs }?: {
         timeoutMs?: number;
@@ -97,8 +108,8 @@ export declare class RootReplicator {
     status(): RootReplicatorStatus;
     /**
      * The full check: drop markers of groups that are gone (once) and re-derive each local group that is new or
-     * whose establishment event changed. One keyed read per local identifier, so a host runs it every
-     * many tocks, not every tock.
+     * whose establishment event or stored members changed. One keyed read per local identifier, so a host runs it
+     * every many tocks, not every tock.
      */
     sweep(): void;
 }

package/types/app/credentials/root-replicator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root-replicator.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/root-replicator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAqB,KAAK,cAAc,EAAsB,MAAM,uBAAuB,CAAC;AAEnG,2GAA2G;AAC3G,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,uHAAuH;AACvH,eAAO,MAAM,eAAe,OAAQ,CAAC;AACrC,eAAO,MAAM,cAAc,SAAU,CAAC;AAEtC,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,cAAc,EAAE,CAAC;CACxB;AAED,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAQD;;;;;;;GAOG;AACH,qBAAa,cAAc;;gBAQb,IAAI,EAAE,kBAAkB;IAIpC,4FAA4F;IAC5F,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK3B,sFAAsF;IACtF,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,YAAY,CAAC,GAAG,IAAI;IAI/D;;;;OAIG;IACF,WAAW,CAAC,EAAE,SAA8B,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;IAK1G;;;OAGG;IACF,UAAU,CAAC,EAAE,SAA8B,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;IAqBzG;;;;OAIG;IACF,IAAI,CACH,IAAI,EAAE,GAAG,EACT,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE;QAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC/E,SAAS,CAAC,cAAc,EAAE,CAAC;IAc9B,gGAAgG;IAChG,OAAO,IAAI,OAAO;IAIlB,2DAA2D;IAC3D,MAAM,IAAI,oBAAoB;IAqC9B;;;;OAIG;IACH,KAAK,IAAI,IAAI;CA0Cd"}
+{"version":3,"file":"root-replicator.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/root-replicator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAU,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAqB,KAAK,cAAc,EAAsB,MAAM,uBAAuB,CAAC;AAEnG,2GAA2G;AAC3G,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,uHAAuH;AACvH,eAAO,MAAM,eAAe,OAAQ,CAAC;AACrC,eAAO,MAAM,cAAc,SAAU,CAAC;AAEtC,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,cAAc,EAAE,CAAC;CACxB;AAED,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;CACxB;AAiBD;;;;;;;;GAQG;AACH,qBAAa,cAAc;;gBAQb,IAAI,EAAE,kBAAkB;IAIpC,4FAA4F;IAC5F,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK3B,sFAAsF;IACtF,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,YAAY,CAAC,GAAG,IAAI;IAI/D;;;;OAIG;IACF,WAAW,CAAC,EAAE,SAA8B,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;IAK1G;;;OAGG;IACF,UAAU,CAAC,EAAE,SAA8B,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;IAsBzG;;;;OAIG;IACF,IAAI,CACH,IAAI,EAAE,GAAG,EACT,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE;QAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC/E,SAAS,CAAC,cAAc,EAAE,CAAC;IAc9B,gGAAgG;IAChG,OAAO,IAAI,OAAO;IAIlB,2DAA2D;IAC3D,MAAM,IAAI,oBAAoB;IAsC9B;;;;OAIG;IACH,KAAK,IAAI,IAAI;CA0Cd"}

package/types/app/credentials/schema-resolving.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-resolving.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/schema-resolving.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAevE;AAED,mEAAmE;AACnE,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAChB,OAAO,GAAG,IAAI,CAShB"}
+{"version":3,"file":"schema-resolving.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/schema-resolving.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAiBvE;AAED,mEAAmE;AACnE,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAChB,OAAO,GAAG,IAAI,CAShB"}

package/types/app/credentials/tel-publishing.d.ts

@@ -9,8 +9,10 @@ import { type Receiptor } from "../witness/receipting.js";
  * Advance one captured set of protocol escrows. Receipt collection includes
  * fanout; a crash before its commit repeats that ordinary finite operation.
  * Dissemination replays accepted TEL evidence to the anchor's historical witness
- * cohort and commits ctel only after every local transmission finished. Failure
- * retains the corresponding escrow for explicit resume, without an outbox.
+ * cohort and commits ctel only after every local transmission finished. A witness
+ * that is unreachable, refuses or does not receipt ends only that target: its
+ * escrow is retained and the next pass retries it, without an outbox. Local faults
+ * (missing issuer Hab, storage) still throw.
  */
 export declare function publishPendingTel(hby: Habery, publication: TelPublication, receiptor: Receiptor, http: HttpClient, clock: RuntimeClock): Operation<void>;
 //# sourceMappingURL=tel-publishing.d.ts.map

package/types/app/credentials/tel-publishing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tel-publishing.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/tel-publishing.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAiB,iBAAiB,CAChC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,cAAc,EAC3B,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,GAClB,SAAS,CAAC,IAAI,CAAC,CAgBjB"}
+{"version":3,"file":"tel-publishing.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/tel-publishing.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D;;;;;;;;GAQG;AACH,wBAAiB,iBAAiB,CAChC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,cAAc,EAC3B,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,GAClB,SAAS,CAAC,IAAI,CAAC,CAqBjB"}