keri-ts 2.2.4 → 2.2.6

package/types/app/bootstrap/authenticating.d.ts

@@ -3,7 +3,7 @@ import type { Baser } from "../../db/basing.js";
 import type { Habery } from "../identity/habbing.js";
 import { type DoerPacing } from "../runtime/doing.js";
 import { type RuntimeClock } from "../runtime/runtime-clock.js";
-import type { HttpClient } from "../transport/http-client.js";
+import { type HttpClient } from "../transport/http-client.js";
 /**
  * Return true when a well-known URL has been authorized into `wkas.`.
  *
@@ -46,11 +46,21 @@ export declare class Authenticator {
     /** Return the next pending `mfa.` auth record, if any. */
     private nextPendingAuth;
     /**
-     * Fetch one `mfa.` record and persist the terminal auth result.
+     * Fetch one `mfa.` record and persist the terminal auth result. A URL the HTTP client refuses, a refused or failed
+     * request, or a non-OK status each end this authentication as failed in `rmfa.` and remove its `mfa.` row, so the
+     * next pass takes the next one; any other error is a fault and propagates.
      *
      * @param url Exact pending well-known authentication URL.
      * @param record Durable mfa record retained until response handling and cleanup establish terminal state.
      */
     private processPendingAuth;
+    /**
+     * Request one well-known URL and read only its status; the response owner still joins body cleanup.
+     *
+     * @param url Pending well-known authentication URL.
+     * @returns The terminal state: `resolved` for an OK status, `http-<status>` otherwise, or the
+     *   {@link OobiJobFailure} of a URL the client refuses or a refused or failed request.
+     */
+    private authenticate;
 }
 //# sourceMappingURL=authenticating.d.ts.map

package/types/app/bootstrap/authenticating.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authenticating.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/authenticating.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,SAAS,EAAU,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,KAAK,UAAU,EAAmC,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,GACV,OAAO,CAMT;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;;;;OAKG;gBACS,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU;IAKzC,sEAAsE;IACrE,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAe/B,yDAAyD;IACxD,MAAM,CAAC,KAAK,GAAE,YAA0B,EAAE,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAmB,GAAG,SAAS,CAAC,KAAK,CAAC;IAI5G,4EAA4E;IAC5E,OAAO,CAAC,sBAAsB;IAsC9B,0DAA0D;IAC1D,OAAO,CAAC,eAAe;IAYvB;;;;;OAKG;IACH,OAAO,CAAE,kBAAkB;CAgC5B"}
+{"version":3,"file":"authenticating.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/authenticating.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,SAAS,EAAU,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,KAAK,UAAU,EAAmC,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,KAAK,UAAU,EAAwB,MAAM,6BAA6B,CAAC;AAMpF;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,GACV,OAAO,CAMT;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;;;;OAKG;gBACS,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU;IAKzC,sEAAsE;IACrE,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAe/B,yDAAyD;IACxD,MAAM,CAAC,KAAK,GAAE,YAA0B,EAAE,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAmB,GAAG,SAAS,CAAC,KAAK,CAAC;IAI5G,4EAA4E;IAC5E,OAAO,CAAC,sBAAsB;IAsC9B,0DAA0D;IAC1D,OAAO,CAAC,eAAe;IAYvB;;;;;;;OAOG;IACH,OAAO,CAAE,kBAAkB;IA4B3B;;;;;;OAMG;IACH,OAAO,CAAE,YAAY;CActB"}

package/types/app/bootstrap/oobiery.d.ts

@@ -10,14 +10,38 @@ import { type Role } from "../../core/roles.js";
 import type { Revery } from "../../core/routing.js";
 import { type ReplyProcessDecision } from "../../core/routing.js";
 import type { Baser } from "../../db/basing.js";
+import type { Poster } from "../delivery/forwarding.js";
+import { type Relay } from "../delivery/relaying.js";
 import type { Exchanger, ExchangeRouteHandler } from "../exchanges/exchanging.js";
 import type { Hab, Habery } from "../identity/habbing.js";
 import type { Notifier } from "../notifications/notifying.js";
 import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
 import { type DoerPacing } from "../runtime/doing.js";
 import { type RuntimeClock } from "../runtime/runtime-clock.js";
-import type { HttpClient } from "../transport/http-client.js";
+import { type HttpClient } from "../transport/http-client.js";
 export declare const OOBI_REQUEST_ROUTE = "/oobis";
+/**
+ * How long an edge's OOBI job waits for its relay to hold the answer before it fails: 30 seconds, measured from the
+ * job's first relay attempt on the composed clock. It matches KERIpy's `Oobiery.RetryDelay` and the default
+ * `bootstrapOobis` timeout; the keri-ts Oobiery has no other retry, and a direct fetch fails on its first non-OK
+ * answer.
+ */
+export declare const RELAY_OOBI_TIMEOUT_MS = 30000;
+/**
+ * What an edge's Oobiery uses to resolve OOBIs through its relay agent instead of fetching third-party origins.
+ *
+ * For a job whose origin is not the relay's, the Oobiery asks the relay to resolve the URL (an `/oobis` exchange
+ * sent through `postman`) and then fetches the result from the relay's own OOBI endpoint, verifying what it
+ * ingests exactly as for a direct fetch. The relay's own OOBI is fetched directly.
+ */
+export interface OobiRelaying {
+    /** The relay agent; the only origin this Oobiery fetches. */
+    readonly relay: Relay;
+    /** Borrowed delivery owner that hands the `/oobis` request to the relay. */
+    readonly postman: Poster;
+    /** Borrowed clock that dates a job's relay wait and decides {@link RELAY_OOBI_TIMEOUT_MS}. */
+    readonly clock: RuntimeClock;
+}
 /**
  * Runtime-tracked OOBI resolution job.
  *
@@ -62,6 +86,30 @@ export interface OobiTerminalState {
  */
 export declare function oobiTerminalState(db: Baser, url: string, kind?: OobiQueueKind): OobiTerminalState;
 type OobiQueueKind = "oobis" | "woobi";
+/**
+ * Why one OOBI or well-known authentication job failed because of its URL or what its remote party answered. It is
+ * the failed row's `state` (`eoobi.` or `rmfa.`) and the `oobiFailed` cue's `reason`.
+ * - `url-refused`: the URL is one the HTTP client refuses by construction ({@link isRequestableHttpUrl}), so it is
+ *   failed before any request;
+ * - `egress-refused`: an edge's relay-only guard refused the origin (`RelayOnlyError`);
+ * - `transport-failed`: connecting, requesting or reading the body failed (`TransportError`);
+ * - `unparseable-response`: the body is not CESR (`WireParseError`);
+ * - `invalid-response-frame`: a frame parsed but a field in it did not decode while it was dispatched (any other
+ *   cesr `ParserError`, or the `SyntaxError`/`RangeError` that `BigInt` and number decoding throw on a remote value).
+ */
+export type OobiJobFailure = "url-refused" | "egress-refused" | "transport-failed" | "unparseable-response" | "invalid-response-frame";
+/**
+ * Classify an error that ended one OOBI or authentication job: the {@link OobiJobFailure} a remote party can cause,
+ * or null for a fault that must propagate and end the runtime (a store error such as `DatabaseError`, corrupt
+ * durable state, a programmer error such as `TypeError`, a plain `Error`).
+ *
+ * Limits: a cesr `ParserError`, `SyntaxError` or `RangeError` raised while decoding local stored state during the
+ * same dispatch is indistinguishable by class from one raised by a remote field, so it also ends only that job.
+ *
+ * @param error What escaped the job's request or response ingestion.
+ * @returns The failure to record, or null to rethrow.
+ */
+export declare function oobiJobFailure(error: unknown): OobiJobFailure | null;
 /**
  * Durable OOBI processing component for one `Habery`.
  *
@@ -87,8 +135,15 @@ export declare class Oobiery {
     readonly cues: Deck<AgentCue>;
     /** Borrowed HTTP client; no network service is discovered through ingress. */
     readonly http: HttpClient;
+    /** Relay collaborators of an edge; null resolves every OOBI directly. */
+    readonly relaying: OobiRelaying | null;
     /** Prevent overlapping passes over this owner's durable job queue. */
     private active;
+    /**
+     * URL of the last job handled with a relay, so a job left waiting does not starve the jobs after it: the next
+     * pass takes the first queued URL after this one. Always null without a relay.
+     */
+    private relayCursor;
     /**
      * Bind byte intake and the actual reply verifier used by OOBI proof persistence.
      *
@@ -97,10 +152,11 @@ export declare class Oobiery {
      * @param rvy Actual shared reply verifier used for OOBI reply proof persistence.
      * @param http Borrowed HTTP implementation selected by composition.
      * @param cues Required application result Deck supplied by composition.
+     * @param relaying Relay collaborators of an edge runtime; null (a forwarder) resolves every OOBI directly.
      */
     constructor(hby: Habery, protocol: ProtocolProcessor, 
     /** Borrowed reply verifier; route installation and proof writes share this owner. */
-    rvy: Revery, http: HttpClient, cues: Deck<AgentCue>);
+    rvy: Revery, http: HttpClient, cues: Deck<AgentCue>, relaying?: OobiRelaying | null);
     /**
      * Register `/introduce` on the shared reply router.
      *
@@ -134,7 +190,10 @@ export declare class Oobiery {
      * doer rather than root-owned queue plumbing.
      */
     oobiDo(clock?: RuntimeClock, pacing?: Readonly<DoerPacing>): Operation<never>;
-    /** Select queued work, including a surviving in-flight row whose former process is gone. */
+    /**
+     * Select queued work, including a surviving in-flight row whose former process is gone. After a relay job, the
+     * first queued URL after it is taken, wrapping around, so jobs waiting on the relay take turns.
+     */
     private nextQueued;
     /** Select a parent only after its current child attempts, including authentication, settle. */
     private nextReadyMoobi;
@@ -144,7 +203,7 @@ export declare class Oobiery {
      * Stores touched:
      * - `oobis.` / `woobi.` as the durable queued worklists
      * - `coobi.` while a fetched response is being processed
-     * - `eoobi.` on HTTP failure
+     * - `eoobi.` on HTTP failure or an {@link OobiJobFailure}; the queued row is removed so it is not re-read
      * - `roobi.` after parser/routing success
      *
      * @param kind Durable OOBI queue family identifying the job path.
@@ -172,6 +231,53 @@ export declare class Oobiery {
      * @param response Borrowed scoped HTTP response; complete processing precedes terminal state.
      */
     private resolveCesrOobiResponse;
+    /**
+     * Dispatch one complete CESR OOBI response through this owner's Kevery and the shared semantic handlers, keeping
+     * the queued row and an in-flight `coobi.` row until the stream is consumed. Writes no terminal state.
+     *
+     * @param kind Durable OOBI queue family identifying the job path.
+     * @param url Exact OOBI URL used as the durable job key.
+     * @param queuedRecord Original durable job metadata retained until terminal publication.
+     * @param response Borrowed scoped HTTP response.
+     */
+    private ingestCesrOobiResponse;
+    /**
+     * Resolve one job through the relay: ask it once, then fetch the result from the relay's own OOBI endpoint.
+     *
+     * The job stays in `oobis.` while it waits, dated from its first relay attempt; a pass that changes nothing
+     * writes nothing. It waits while the relay answers 404, is unreachable, or answers a controller OOBI without the
+     * controller's KEL. It fails at {@link RELAY_OOBI_TIMEOUT_MS}: `relay-unresolved` when the relay was asked,
+     * `relay-unserved` when it never could be (no accepted relay location, or no local identifier authorized the
+     * relay as its mailbox). Another non-OK answer fails at once as `http-<status>`, as a direct fetch does, an answer
+     * that is not CESR or whose frames do not decode fails at once with its {@link OobiJobFailure}, and a URL that names
+     * neither an identifier nor a SAID fails at once as `relay-unmappable-oobi`.
+     *
+     * @param relaying Relay collaborators of this edge.
+     * @param kind Durable OOBI queue family identifying the job path.
+     * @param url Exact third-party OOBI URL used as the durable job key; it is never fetched.
+     * @param record Pending durable job.
+     */
+    private processRelayJob;
+    /**
+     * Fetch what the relay holds for one job and ingest it under the ordinary verification.
+     *
+     * @param kind Durable OOBI queue family identifying the job path.
+     * @param url Exact third-party OOBI URL used as the durable job key.
+     * @param record Waiting durable job metadata.
+     * @param meta Parsed OOBI URL metadata selecting the response interpretation.
+     * @param relayUrl URL on the relay's origin that serves the job's answer.
+     * @returns `resolved` after a terminal write, `waiting` when the relay does not hold the answer yet or cannot be
+     * reached, the refusing HTTP status, or the {@link OobiJobFailure} of an answer that cannot be ingested.
+     */
+    private fetchFromRelay;
+    /**
+     * The local identifier that asks the relay to resolve an OOBI: one the relay serves, which has authorized the
+     * relay as its mailbox ({@link relayAuthorized}). A group cannot sign the request alone, so groups never ask.
+     *
+     * @param relay The configured relay agent.
+     * @returns The asking habitat, or null while the relay has no accepted location or no local identifier it serves.
+     */
+    private relayAsker;
     /** Handle schema data-OOBIs before generic JSON reply handling. */
     private processSchemaOobiResponse;
     /** Handle JSON OOBI responses that carry reply bodies instead of CESR streams. */
@@ -202,7 +308,16 @@ export declare class Oobiery {
         tsgs?: TransIdxSigGroup[];
     }): ReplyProcessDecision;
 }
-export declare function loadOobiHandlers(hby: Habery, exchanger: Exchanger, notifier?: Notifier | null): void;
+/**
+ * Register the `/oobis` exchange handler.
+ *
+ * @param hby Borrowed local identities and the durable OOBI queue.
+ * @param exchanger Exchanger receiving the route.
+ * @param notifier Optional operator notice producer.
+ * @param relaying Whether this host relays (the agent side of relay mode): requests are then accepted only from a
+ * served sender.
+ */
+export declare function loadOobiHandlers(hby: Habery, exchanger: Exchanger, notifier?: Notifier | null, relaying?: boolean): void;
 /**
  * Peer-to-peer OOBI request handler for `/oobis` exchange messages.
  *
@@ -216,21 +331,43 @@ export declare function loadOobiHandlers(hby: Habery, exchanger: Exchanger, noti
  *
  * Local `keri-ts` adaptation:
  * - verification stays lightweight and route-local: we only require a string
- *   `oobi` payload with an `http:` or `https:` scheme
+ *   `oobi` payload that is an `http:` or `https:` URL without embedded
+ *   credentials, which is what the HTTP client can request
  * - durable follow-on work still belongs to `Oobiery` itself; this handler is
  *   just the exchange ingress seam that translates an EXN into queued resolver
  *   state
  * - unlike KERIpy's DoDoer-centric runtime, the queued record is later
  *   advanced by the shared `AgentRuntime` turn that owns OOBI processing
+ * - on a relaying host (the agent side of relay mode) a request is accepted
+ *   only from a served sender, by the same rule `/fwd` intake relays for
+ *   ({@link servingHost}): the sender authorized a local habitat as its
+ *   `mailbox` or `agent`. An edge resolves third-party OOBIs this way; nobody
+ *   else can make the agent fetch a URL. Without relaying, any authenticated
+ *   sender is accepted, as in KERIpy.
  */
 export declare class OobiRequestHandler implements ExchangeRouteHandler {
     static readonly resource = "/oobis";
     readonly resource = "/oobis";
     readonly hby: Habery;
     readonly notifier: Notifier | null;
-    constructor(hby: Habery, notifier?: Notifier | null);
+    /** Whether requests are restricted to served senders. */
+    readonly relaying: boolean;
+    /**
+     * @param hby Borrowed local identities and the durable OOBI queue.
+     * @param notifier Optional operator notice producer.
+     * @param relaying Restrict requests to served senders (a relaying host); false accepts any sender.
+     */
+    constructor(hby: Habery, notifier?: Notifier | null, relaying?: boolean);
+    /**
+     * Accept a request carrying an `oobi` the HTTP client can request ({@link isRequestableHttpUrl}: HTTP(S), no
+     * embedded credentials); on a relaying host, only from a served sender. Anything else could never resolve.
+     *
+     * @param args Authenticated exchange and the receiving hosted endpoint, if the request named one.
+     * @returns False to reject the exchange.
+     */
     verify(args: {
         serder: SerderKERI;
+        mailboxAid?: string | null;
     }): boolean;
     handle(args: {
         serder: SerderKERI;

package/types/app/bootstrap/oobiery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oobiery.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/oobiery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,EAAkB,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAQ,KAAK,SAAS,EAAoB,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAmB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,KAAK,IAAI,EAAS,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAuB,KAAK,oBAAoB,EAA2B,MAAM,uBAAuB,CAAC;AAEhH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,KAAK,UAAU,EAAmC,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAG7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC1C;;OAEG;IACH,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACzC;;OAEG;IACH,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,aAAiC,GACtC,iBAAiB,CA4BnB;AAED,KAAK,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,qBAAa,OAAO;IAuBhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAxBtB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,sEAAsE;IACtE,OAAO,CAAC,MAAM,CAAS;IAEvB;;;;;;;;OAQG;gBAED,GAAG,EAAE,MAAM,EACM,QAAQ,EAAE,iBAAiB;IAC5C,qFAAqF;IACpE,GAAG,EAAE,MAAM,EAC5B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;IAWtB;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,yCAAe,GAAG,IAAI;IAIhD;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAS1C;;;;;;;;OAQG;IACF,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAgB/B,qGAAqG;IACrG,OAAO,CAAC,aAAa;IAsBrB;;;;;OAKG;IACF,MAAM,CAAC,KAAK,GAAE,YAA0B,EAAE,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAmB,GAAG,SAAS,CAAC,KAAK,CAAC;IAI5G,4FAA4F;IAC5F,OAAO,CAAC,UAAU;IAUlB,+FAA+F;IAC/F,OAAO,CAAC,cAAc;IAWtB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAE,UAAU;IAiDnB;;;;;;;;OAQG;IACH,OAAO,CAAE,eAAe;IAwCxB;;;;;;;;OAQG;IACH,OAAO,CAAE,uBAAuB;IAwBhC,mEAAmE;IACnE,OAAO,CAAC,yBAAyB;IA8BjC,kFAAkF;IAClF,OAAO,CAAC,uBAAuB;IA0B/B,0FAA0F;IAC1F,OAAO,CAAC,qBAAqB;IAqC7B,oFAAoF;IACpF,OAAO,CAAC,iBAAiB;IA+BzB,+EAA+E;IAC/E,OAAO,CAAC,eAAe;IAavB,iEAAiE;IACjE,OAAO,CAAC,aAAa;IASrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAKrB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAYpB;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAC3B,GAAG,oBAAoB;CAwDzB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,QAAQ,GAAE,QAAQ,GAAG,IAAW,GAC/B,IAAI,CAEN;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,kBAAmB,YAAW,oBAAoB;IAC7D,MAAM,CAAC,QAAQ,CAAC,QAAQ,YAAsB;IAC9C,QAAQ,CAAC,QAAQ,YAA+B;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;gBAGjC,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,QAAQ,GAAG,IAAW;IAMlC,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO;IAaX,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,IAAI;CA6BT;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,UAAU,CAQZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAIvD;AAgCD,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"oobiery.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/oobiery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,EAA+B,UAAU,EAAkB,MAAM,SAAS,CAAC;AACrG,OAAO,EAAQ,KAAK,SAAS,EAAoB,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAmB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,KAAK,IAAI,EAAS,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAuB,KAAK,oBAAoB,EAA2B,MAAM,uBAAuB,CAAC;AAEhH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAEL,KAAK,KAAK,EAKX,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,KAAK,UAAU,EAAmC,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAE7E,OAAO,EAAE,KAAK,UAAU,EAAiD,MAAM,6BAA6B,CAAC;AAI7G,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAU5C;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC1C;;OAEG;IACH,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACzC;;OAEG;IACH,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,aAAiC,GACtC,iBAAiB,CA4BnB;AAED,KAAK,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,sBAAsB,GACtB,wBAAwB,CAAC;AAE7B;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAQpE;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,OAAO;IA+BhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAhCtB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IACvC,sEAAsE;IACtE,OAAO,CAAC,MAAM,CAAS;IACvB;;;OAGG;IACH,OAAO,CAAC,WAAW,CAAuB;IAE1C;;;;;;;;;OASG;gBAED,GAAG,EAAE,MAAM,EACM,QAAQ,EAAE,iBAAiB;IAC5C,qFAAqF;IACpE,GAAG,EAAE,MAAM,EAC5B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EACpB,QAAQ,GAAE,YAAY,GAAG,IAAW;IAYtC;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,yCAAe,GAAG,IAAI;IAIhD;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAS1C;;;;;;;;OAQG;IACF,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAgB/B,qGAAqG;IACrG,OAAO,CAAC,aAAa;IAsBrB;;;;;OAKG;IACF,MAAM,CAAC,KAAK,GAAE,YAA0B,EAAE,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAmB,GAAG,SAAS,CAAC,KAAK,CAAC;IAI5G;;;OAGG;IACH,OAAO,CAAC,UAAU;IAclB,+FAA+F;IAC/F,OAAO,CAAC,cAAc;IAWtB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAE,UAAU;IAkEnB;;;;;;;;OAQG;IACH,OAAO,CAAE,eAAe;IAwCxB;;;;;;;;OAQG;IACH,OAAO,CAAE,uBAAuB;IAoBhC;;;;;;;;OAQG;IACH,OAAO,CAAE,sBAAsB;IAY/B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAE,eAAe;IAsExB;;;;;;;;;;OAUG;IACH,OAAO,CAAE,cAAc;IAkDvB;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAWlB,mEAAmE;IACnE,OAAO,CAAC,yBAAyB;IA8BjC,kFAAkF;IAClF,OAAO,CAAC,uBAAuB;IA0B/B,0FAA0F;IAC1F,OAAO,CAAC,qBAAqB;IAsC7B,oFAAoF;IACpF,OAAO,CAAC,iBAAiB;IA+BzB,+EAA+E;IAC/E,OAAO,CAAC,eAAe;IAavB,iEAAiE;IACjE,OAAO,CAAC,aAAa;IASrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAKrB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAYpB;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAC3B,GAAG,oBAAoB;CAqDzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,QAAQ,GAAE,QAAQ,GAAG,IAAW,EAChC,QAAQ,UAAQ,GACf,IAAI,CAEN;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,kBAAmB,YAAW,oBAAoB;IAC7D,MAAM,CAAC,QAAQ,CAAC,QAAQ,YAAsB;IAC9C,QAAQ,CAAC,QAAQ,YAA+B;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IACnC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAE3B;;;;OAIG;gBAED,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,QAAQ,GAAG,IAAW,EAChC,QAAQ,UAAQ;IAOlB;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,GAAG,OAAO;IAQX,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,IAAI;CA6BT;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,UAAU,CAQZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAIvD;AA4ED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/types/app/credentials/credential-importing.d.ts

@@ -17,6 +17,14 @@ export interface CredentialImportResult {
  * Later input failures preserve earlier accepted state. Receipts, replies and other messages still
  * use normal dispatch; absence of an importer acceptance lookup is not an additional refusal policy.
  *
+ * The input is retained history the caller already holds (for example an exported disclosure stream: KELs, the v2
+ * registry TEL, a Grant and its Admit), so every frame is dispatched with `DispatchOptions.retained`. Its v2
+ * exchanges skip KRAM, whose window their original stamps passed long ago; signatures, route verification and
+ * escrows are unchanged, and the accepted exchanges raise no notice and get no exchange lifetime. Targets: raw
+ * credentials, KEL and v1 TEL events, v2 `rip`/`bup` (accepted at their exact ordinal in the v2 registry store),
+ * and exchanges (accepted by the Exchanger; a v2 Admit also needs its Grant's reply row to name it). Importing the
+ * same input again changes nothing and reports the same acceptance.
+ *
  * @param protocol Borrowed protocol dispatcher, sharing reger with its TEL/credential handlers.
  * @param reger Borrowed credential/TEL store whose accepted records establish the result.
  * @param bytes Borrowed finite CESR bundle; parser chunks are copied during intake.

package/types/app/credentials/credential-importing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-importing.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-importing.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,KAAK,SAAS,EAAQ,MAAM,WAAW,CAAC;AAGvE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,2FAA2F;AAC3F,MAAM,WAAW,sBAAsB;IACrC,uHAAuH;IACvH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0HAA0H;IAC1H,QAAQ,EAAE,OAAO,CAAC;IAClB,2FAA2F;IAC3F,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AA6BD;;;;;;;;;;;;;GAaG;AACH,wBAAiB,sBAAsB,CACrC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,YAAY,EACnB,SAAS,SAAQ,GAChB,SAAS,CAAC,sBAAsB,CAAC,CA+CnC"}
+{"version":3,"file":"credential-importing.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-importing.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,KAAK,SAAS,EAAQ,MAAM,WAAW,CAAC;AAIvE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,2FAA2F;AAC3F,MAAM,WAAW,sBAAsB;IACrC,uHAAuH;IACvH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0HAA0H;IAC1H,QAAQ,EAAE,OAAO,CAAC;IAClB,2FAA2F;IAC3F,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAyCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAiB,sBAAsB,CACrC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,YAAY,EACnB,SAAS,SAAQ,GAChB,SAAS,CAAC,sBAAsB,CAAC,CA+CnC"}

package/types/app/credentials/root-replicator.d.ts

@@ -14,9 +14,13 @@
  * receiving is idempotent.
  *
  * A pass runs for a group on the replicator's first pass, after its latest establishment
- * changes (an accepted rotation), and when the Dhke completion cue prompts it, so a cue
- * lost in a crash is recovered by the next start. Sending a root a member already holds to
- * the group's current members is not a new consent, so nothing here asks anyone.
+ * changes (an accepted rotation) or its stored members change (they follow accepted state once
+ * every member's KEL is known), and when the Dhke completion cue prompts it, so a cue lost in a
+ * crash is recovered by the next start. The Counselor puts a group on the `changed` deck when it
+ * completes the group's establishment event or aligns its stored members, so the next pass
+ * re-derives it; the sweep finds the same changes later for a group nobody put there. Sending a
+ * root a member already holds to the group's current members is not a new consent, so nothing
+ * here asks anyone.
  *
  * A copy that cannot be prepared or delivered stays owed and is retried with a
  * process-local backoff; `status` reports it until it goes.
@@ -24,6 +28,7 @@
 import type { Operation } from "effection";
 import type { DhkeReplicate } from "../../acdc/dhking.js";
 import type { RegistryRoot } from "../../acdc/salting.js";
+import type { Deck } from "../../core/deck.js";
 import type { Poster } from "../delivery/forwarding.js";
 import type { Hab } from "../identity/habbing.js";
 import type { RuntimeClock } from "../runtime/runtime-clock.js";
@@ -51,6 +56,11 @@ export interface RootReplicatorDeps {
     postman: Poster;
     clock: RuntimeClock;
     changes?: ChangeSink;
+    /**
+     * Prefixes of groups whose establishment event or stored members changed, which the Counselor pushes. Each pass
+     * drains it as if each group were prompted.
+     */
+    changed?: Deck<string>;
 }
 /**
  * Derives, sends and records registry root copies for a wallet's local groups.
@@ -58,7 +68,8 @@ export interface RootReplicatorDeps {
  * Holds no durable state of its own beyond `Baser.rrsn`; what is pending and the
  * backoff are process-local and rebuilt from state. A host calls `prompt` (or
  * `replicate`) for each Dhke cue and `processOnce` on its loop; both are safe to repeat,
- * and overlapping `processOnce` calls never send one copy twice.
+ * and overlapping `processOnce` calls never send one copy twice. Groups on the `changed`
+ * deck are prompted by the next pass.
  */
 export declare class RootReplicator {
     #private;
@@ -76,8 +87,8 @@ export declare class RootReplicator {
         timeoutMs?: number;
     }): Operation<RootCopyResult[]>;
     /**
-     * The fixed-tock pass: re-derive only the groups that were prompted, then send up to {@link RootSendsPerPass}
-     * due copies. A rotation nobody prompted for waits for {@link RootReplicator.sweep}.
+     * The fixed-tock pass: re-derive only the groups that were prompted or are on the `changed` deck, then send up
+     * to {@link RootSendsPerPass} due copies. A rotation nobody prompted for waits for {@link RootReplicator.sweep}.
      */
     processDue({ timeoutMs }?: {
         timeoutMs?: number;
@@ -97,8 +108,8 @@ export declare class RootReplicator {
     status(): RootReplicatorStatus;
     /**
      * The full check: drop markers of groups that are gone (once) and re-derive each local group that is new or
-     * whose establishment event changed. One keyed read per local identifier, so a host runs it every
-     * many tocks, not every tock.
+     * whose establishment event or stored members changed. One keyed read per local identifier, so a host runs it
+     * every many tocks, not every tock.
      */
     sweep(): void;
 }

package/types/app/credentials/root-replicator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root-replicator.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/root-replicator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAqB,KAAK,cAAc,EAAsB,MAAM,uBAAuB,CAAC;AAEnG,2GAA2G;AAC3G,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,uHAAuH;AACvH,eAAO,MAAM,eAAe,OAAQ,CAAC;AACrC,eAAO,MAAM,cAAc,SAAU,CAAC;AAEtC,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,cAAc,EAAE,CAAC;CACxB;AAED,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAQD;;;;;;;GAOG;AACH,qBAAa,cAAc;;gBAQb,IAAI,EAAE,kBAAkB;IAIpC,4FAA4F;IAC5F,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK3B,sFAAsF;IACtF,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,YAAY,CAAC,GAAG,IAAI;IAI/D;;;;OAIG;IACF,WAAW,CAAC,EAAE,SAA8B,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;IAK1G;;;OAGG;IACF,UAAU,CAAC,EAAE,SAA8B,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;IAqBzG;;;;OAIG;IACF,IAAI,CACH,IAAI,EAAE,GAAG,EACT,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE;QAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC/E,SAAS,CAAC,cAAc,EAAE,CAAC;IAc9B,gGAAgG;IAChG,OAAO,IAAI,OAAO;IAIlB,2DAA2D;IAC3D,MAAM,IAAI,oBAAoB;IAqC9B;;;;OAIG;IACH,KAAK,IAAI,IAAI;CA0Cd"}
+{"version":3,"file":"root-replicator.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/root-replicator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAU,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAqB,KAAK,cAAc,EAAsB,MAAM,uBAAuB,CAAC;AAEnG,2GAA2G;AAC3G,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,uHAAuH;AACvH,eAAO,MAAM,eAAe,OAAQ,CAAC;AACrC,eAAO,MAAM,cAAc,SAAU,CAAC;AAEtC,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,cAAc,EAAE,CAAC;CACxB;AAED,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;CACxB;AAiBD;;;;;;;;GAQG;AACH,qBAAa,cAAc;;gBAQb,IAAI,EAAE,kBAAkB;IAIpC,4FAA4F;IAC5F,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAK3B,sFAAsF;IACtF,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,YAAY,CAAC,GAAG,IAAI;IAI/D;;;;OAIG;IACF,WAAW,CAAC,EAAE,SAA8B,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;IAK1G;;;OAGG;IACF,UAAU,CAAC,EAAE,SAA8B,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;IAsBzG;;;;OAIG;IACF,IAAI,CACH,IAAI,EAAE,GAAG,EACT,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE;QAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC/E,SAAS,CAAC,cAAc,EAAE,CAAC;IAc9B,gGAAgG;IAChG,OAAO,IAAI,OAAO;IAIlB,2DAA2D;IAC3D,MAAM,IAAI,oBAAoB;IAsC9B;;;;OAIG;IACH,KAAK,IAAI,IAAI;CA0Cd"}

package/types/app/credentials/schema-resolving.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-resolving.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/schema-resolving.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAevE;AAED,mEAAmE;AACnE,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAChB,OAAO,GAAG,IAAI,CAShB"}
+{"version":3,"file":"schema-resolving.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/schema-resolving.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAiBvE;AAED,mEAAmE;AACnE,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAChB,OAAO,GAAG,IAAI,CAShB"}

package/types/app/credentials/tel-publishing.d.ts

@@ -9,8 +9,10 @@ import { type Receiptor } from "../witness/receipting.js";
  * Advance one captured set of protocol escrows. Receipt collection includes
  * fanout; a crash before its commit repeats that ordinary finite operation.
  * Dissemination replays accepted TEL evidence to the anchor's historical witness
- * cohort and commits ctel only after every local transmission finished. Failure
- * retains the corresponding escrow for explicit resume, without an outbox.
+ * cohort and commits ctel only after every local transmission finished. A witness
+ * that is unreachable, refuses or does not receipt ends only that target: its
+ * escrow is retained and the next pass retries it, without an outbox. Local faults
+ * (missing issuer Hab, storage) still throw.
  */
 export declare function publishPendingTel(hby: Habery, publication: TelPublication, receiptor: Receiptor, http: HttpClient, clock: RuntimeClock): Operation<void>;
 //# sourceMappingURL=tel-publishing.d.ts.map

package/types/app/credentials/tel-publishing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tel-publishing.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/tel-publishing.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAiB,iBAAiB,CAChC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,cAAc,EAC3B,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,GAClB,SAAS,CAAC,IAAI,CAAC,CAgBjB"}
+{"version":3,"file":"tel-publishing.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/tel-publishing.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D;;;;;;;;GAQG;AACH,wBAAiB,iBAAiB,CAChC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,cAAc,EAC3B,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,GAClB,SAAS,CAAC,IAAI,CAAC,CAqBjB"}

package/types/app/delivery/forwarding.d.ts

@@ -6,6 +6,7 @@ import type { Habery } from "../identity/habbing.js";
 import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
 import type { RuntimeClock } from "../runtime/runtime-clock.js";
 import type { HttpClient } from "../transport/http-client.js";
+import { type Relay } from "./relaying.js";
 /** Prepared signed source; Poster copies its bytes before publishing an ordinary admission. */
 export interface PosterMsg {
     /**
@@ -66,6 +67,14 @@ export type PosterOutcome = {
 export declare class PeerVersionError extends ValidationError {
     readonly name: string;
 }
+/**
+ * A queued message whose own bytes cannot be prepared for sending: they are not complete CESR, or a forwarded
+ * delivery's source is not exactly one complete message. It describes the event, never this node, so it fails that
+ * delivery and the Poster continues with the next.
+ */
+export declare class UnsendableMessageError extends ValidationError {
+    readonly name: string;
+}
 /**
  * Deliver queued signed messages using KERIpy's ordinary Poster role traversal.
  *
@@ -73,6 +82,13 @@ export declare class PeerVersionError extends ValidationError {
  * storage). Only recipients without those roles use one witness. Transport
  * completion and opt-in outcomes do not prove remote protocol acceptance. Finite
  * stream admissions use the first present role through the same execution owner.
+ *
+ * With a relay (an edge runtime) there is no role traversal: every recipient other
+ * than the relay gets one `/fwd` delivery to the relay, which does the forwarding,
+ * and the relay itself gets the message directly. `sent` then means the relay
+ * accepted the wrapper, not that the final recipient received it. A forwarded
+ * delivery fails with `RelayUnauthorizedError`, sending nothing, until its wrapper
+ * signer (a group's local member) has authorized the relay as its mailbox.
  */
 export declare class Poster {
     /** Borrowed habitat collection and backing accepted protocol state. */
@@ -101,6 +117,8 @@ export declare class Poster {
     private joined?;
     /** Borrowed same-socket protocol receiver; null explicitly selects send-only capability. */
     private readonly protocol;
+    /** The agent every message goes through (an edge); null delivers directly (a forwarder). */
+    readonly relay: Relay | null;
     /**
      * Bind actual collaborators; Poster owns queue/I/O lifetimes and borrows their stores.
      *
@@ -109,9 +127,10 @@ export declare class Poster {
      * @param protocol Borrowed same-database processor for TCP replies; null permits send-only work.
      * @param http Borrowed HTTP implementation selected by composition.
      * @param clock Borrowed clock for transport deadlines; times are milliseconds.
+     * @param relay The agent every message goes through; null selects ordinary direct role traversal.
      * @throws RangeError if protocol state belongs to a different database.
      */
-    constructor(hby: Habery, mbx: Mailboxer | null, protocol: ProtocolProcessor | null, http: HttpClient, clock: RuntimeClock);
+    constructor(hby: Habery, mbx: Mailboxer | null, protocol: ProtocolProcessor | null, http: HttpClient, clock: RuntimeClock, relay: Relay | null);
     /**
      * Admit signed source bytes; callers must observe an outcome before reporting transmission.
      *
@@ -191,7 +210,11 @@ export declare class Poster {
     /**
      * Resolve and execute one event using sequential current endpoints.
      * Observed HTTP refusal and TransportError permit remaining targets to run.
-     * Unexpected construction/parser/storage/cleanup errors propagate so process can
+     * The event's bytes are decoded once; bytes that are not complete CESR fail the
+     * event. `PeerVersionError` and `UnsendableMessageError` from preparation fail
+     * only that target: both are decided from the event's own bytes and the peer's
+     * accepted version before any store write or I/O for the target. Other
+     * construction/storage/cleanup errors are faults and propagate so process can
      * publish or report the failed outcome before exposing the error.
      *
      * @param evt Concrete source-message record; completion/failure lookup uses object identity, not message SAID.
@@ -207,7 +230,10 @@ export declare class Poster {
      *
      * Controller and agent roles each retain all endpoints. An indirect role picks
      * one random provider, unless an explicitly composed store owns an eligible local
-     * AID. Empty location maps retain role selection and become execution failures.
+     * AID. An agent role whose endpoint is a local AID with a composed store is that
+     * same local store target (given a topic), as the hosted agent keeps the recipient's
+     * mail for pickup. Empty location maps retain role selection and become execution failures.
+     * With a relay, the relay alone is the route (see {@link relayRoutes}).
      *
      * @param hab Local signing habitat borrowing accepted role/location state.
      * @param recipient Resolved final recipient AID.
@@ -216,10 +242,43 @@ export declare class Poster {
      * @returns Ordered role groups; no eligible role returns an empty array.
      */
     private findBytesRoutes;
+    /**
+     * Route through the relay: one `forward` route to the relay for every other recipient, never a direct fallback,
+     * and one `direct` route when the recipient is the relay. Recipient end roles are not read.
+     *
+     * @param hab Local sending habitat; its wrapper signer must have authorized the relay as mailbox.
+     * @param relay The configured relay agent.
+     * @param recipient Resolved final recipient AID.
+     * @param topic Recipient mailbox topic; the forwarded route requires a nonempty topic.
+     * @returns One route to the relay, or none while {@link relayRefusal} refuses the relay for this sender.
+     */
+    private relayRoutes;
+    /**
+     * The identifier whose mailbox authorization of the relay a delivery needs: the `/fwd` wrapper's signer (see
+     * {@link Poster.wrapperSigner}), the same `i` the agent reads to decide it serves the sender. For a group source
+     * that is the local member, not the group. A message addressed to the relay is not wrapped and needs none (null).
+     *
+     * @param hab Local sending habitat.
+     * @param relay The configured relay agent.
+     * @param recipient Resolved final recipient AID.
+     * @returns The wrapper signer's AID, or null when the recipient is the relay.
+     */
+    private relaySigner;
+    /**
+     * The habitat that signs a `/fwd` wrapper for `hab`. A group cannot sign the wrapper alone: one member's signature
+     * does not meet a threshold above one, and the host would escrow the wrapper. The local member wraps; the payload
+     * keeps whatever signatures it carries.
+     *
+     * @param hab Local sending habitat, possibly a group.
+     * @returns `hab` itself, or the group's local member.
+     * @throws ValidationError when a group has no local member metadata.
+     */
+    private wrapperSigner;
     /**
      * Whether `src` has any eligible role (controller, agent, mailbox or witness) from which to reach `dest`, as
      * delivery would find it now. A pure read of accepted endpoint state: it says nothing about whether the
-     * endpoint answers. A proposer uses it to refuse before it creates anything it could not publish.
+     * endpoint answers. A proposer uses it to refuse before it creates anything it could not publish. With a relay,
+     * it is whether {@link relayRefusal} accepts the relay for this sender.
      */
     canReach(src: string, dest: string, topic?: string): boolean;
     /**
@@ -229,10 +288,33 @@ export declare class Poster {
      * @param route Selected direct or forwarded endpoint group.
      * @param endpoint One selected endpoint AID and URL from the route.
      * @param evt Original signed source and concrete ordinary/stream operation.
+     * @param frames The event's bytes, decoded once by {@link messageFrames}.
      * @returns A prepared remote target, or stored after authorized local mailbox publication.
      * @throws PeerVersionError when the wire needs a v2 reader that this peer is known not to be.
+     * @throws UnsendableMessageError when a forwarded ordinary message is not exactly one message.
      */
     private prepareBytesTarget;
+    /**
+     * Whether the configured relay is already known to hold what it needs to verify `signer`'s `/fwd` wrappers, so
+     * the whole-KEL introduction can be left out.
+     *
+     * The relay verifies a wrapper against the signer's current key state, which the signer's latest establishment
+     * event fixes; interaction events do not change it. The evidence is `Baser.kpub`, the record the KEL publisher
+     * keeps per (identifier, mailbox) of the establishment event whose KEL (delegation chain included, and only once a
+     * delegated establishment is anchored) the mailbox was last given. The relay is the signer's mailbox, so the
+     * publisher and the mailbox admin request keep that record. Any other endpoint, and any mismatch or missing
+     * record, keeps today's full introduction.
+     *
+     * Known limit: a 2xx is not acceptance, and a relay that lost its store answers a `/fwd` from a sender it no
+     * longer knows with the same 204 acknowledgement and drops it. Nothing in the `/fwd` path signals that today; the
+     * sender's next mailbox poll gets the relay's 403, which makes `KelPublisher` clear the record and repost the KEL.
+     * Wrappers sent in between are lost until then.
+     *
+     * @param signer Local habitat that signs the wrapper (a group's local member).
+     * @param eid Endpoint AID the prepared wire goes to.
+     * @returns True only when `eid` is the relay and the record holds `signer`'s current establishment heads.
+     */
+    private relayHoldsKel;
     /**
      * Prepare complete signed wire and its introduction before opening transport.
      *
@@ -240,8 +322,11 @@ export declare class Poster {
      * @param recipient Final recipient AID, distinct from the intermediary endpoint.
      * @param topic Recipient mailbox topic used by the forwarding envelope.
      * @param evt Original signed source and operation; outer envelopes may be rebuilt.
+     * @param frames The event's decoded messages: exactly one for an ordinary event, each forwarded alone in a stream.
      * @param endpoint Mailbox/witness endpoint selected for this attempt.
-     * @returns Stored for a local endpoint, or signed forwarding wire with its introduction.
+     * @returns Stored for a local endpoint, unsignable when the wrapper signer cannot sign now, or signed forwarding
+     * wire with its introduction.
+     * @throws UnsendableMessageError when an ordinary event is not exactly one message.
      */
     private prepareForwardedTarget;
 }

package/types/app/delivery/forwarding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"forwarding.d.ts","sourceRoot":"","sources":["../../../src/app/delivery/forwarding.ts"],"names":[],"mappings":"AAWA,OAAO,EAAQ,KAAK,SAAS,EAAY,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,KAAK,EAAO,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAI1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAG5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAIhE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAM9D,+FAA+F;AAC/F,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAa,SAAQ,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;IAC1D,yFAAyF;IACzF,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAC;CACtC;AAED,kGAAkG;AAClG,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,oGAAoG;IACpG,QAAQ,CAAC,GAAG,EAAE,KAAK,GAAG,QAAQ,CAAC;CAChC;AAED,6FAA6F;AAC7F,MAAM,MAAM,aAAa,GACrB;IACA,wFAAwF;IACxF,GAAG,EAAE,MAAM,CAAC;IACZ,8FAA8F;IAC9F,GAAG,EAAE,WAAW,CAAC;IACjB,8FAA8F;IAC9F,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,GACC;IACA,wFAAwF;IACxF,GAAG,EAAE,QAAQ,CAAC;IACd,8FAA8F;IAC9F,GAAG,EAAE,WAAW,CAAC;IACjB,8FAA8F;IAC9F,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,6FAA6F;IAC7F,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AA6CJ;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,eAAe;IACnD,SAAkB,IAAI,EAAE,MAAM,CAAsB;CACrD;AAiCD;;;;;;;GAOG;AACH,qBAAa,MAAM;IACjB,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,6FAA6F;IAC7F,QAAQ,CAAC,IAAI,oBAA2B;IACxC,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,sBAA6B;IAC1C,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,wDAAwD;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,wDAAwD;IACxD,OAAO,CAAC,UAAU,CAAS;IAC3B,qEAAqE;IACrE,OAAO,CAAC,MAAM,CAAS;IACvB,+DAA+D;IAC/D,OAAO,CAAC,MAAM,CAAC,CAAkB;IACjC,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAC,CAAgB;IAC/B,4FAA4F;IAC5F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IAEpD;;;;;;;;;OASG;gBAED,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,SAAS,GAAG,IAAI,EACrB,QAAQ,EAAE,iBAAiB,GAAG,IAAI,EAClC,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY;IAUrB;;;;;;;OAOG;IACH,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,MAAc,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,WAAW;IAIhF;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,MAAc,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,WAAW;IAItG;;;;;;OAMG;IACH,OAAO,CAAC,KAAK;IASb;;;;;OAKG;IACH,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI;IAWxC;;;;;;;;OAQG;IACF,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,SAAS,CAAC,aAAa,CAAC;IAqBjD;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAWnB;;;;OAIG;IACF,SAAS,CAAC,MAAM,GAAE,MAAyB,GAAG,SAAS,CAAC,IAAI,CAAC;IAO9D,sFAAsF;IACtF,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,iFAAiF;IACjF,UAAU,IAAI,IAAI;IAIlB,0FAA0F;IACzF,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC;IAUzB,mGAAmG;IACnG,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC;IAyC1B;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAUtB;;;;;;;;;;OAUG;IACH,OAAO,CAAE,YAAY;IAgErB,mGAAmG;IACnG,OAAO,CAAE,kBAAkB;IAwC3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,eAAe;IA2BvB;;;;OAIG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,SAAa,GAAG,OAAO;IAKhE;;;;;;;;;OASG;IACH,OAAO,CAAE,kBAAkB;IAoB3B;;;;;;;;;OASG;IACH,OAAO,CAAE,sBAAsB;CAoDhC"}
+{"version":3,"file":"forwarding.d.ts","sourceRoot":"","sources":["../../../src/app/delivery/forwarding.ts"],"names":[],"mappings":"AAaA,OAAO,EAAQ,KAAK,SAAS,EAAY,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,KAAK,EAAO,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAK1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAG5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAIhE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAK9D,OAAO,EAAE,KAAK,KAAK,EAA+B,MAAM,eAAe,CAAC;AAExE,+FAA+F;AAC/F,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAa,SAAQ,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;IAC1D,yFAAyF;IACzF,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAC;CACtC;AAED,kGAAkG;AAClG,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,oGAAoG;IACpG,QAAQ,CAAC,GAAG,EAAE,KAAK,GAAG,QAAQ,CAAC;CAChC;AAED,6FAA6F;AAC7F,MAAM,MAAM,aAAa,GACrB;IACA,wFAAwF;IACxF,GAAG,EAAE,MAAM,CAAC;IACZ,8FAA8F;IAC9F,GAAG,EAAE,WAAW,CAAC;IACjB,8FAA8F;IAC9F,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,GACC;IACA,wFAAwF;IACxF,GAAG,EAAE,QAAQ,CAAC;IACd,8FAA8F;IAC9F,GAAG,EAAE,WAAW,CAAC;IACjB,8FAA8F;IAC9F,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,6FAA6F;IAC7F,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAoDJ;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,eAAe;IACnD,SAAkB,IAAI,EAAE,MAAM,CAAsB;CACrD;AAaD;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,eAAe;IACzD,SAAkB,IAAI,EAAE,MAAM,CAA4B;CAC3D;AA2CD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,MAAM;IACjB,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,6FAA6F;IAC7F,QAAQ,CAAC,IAAI,oBAA2B;IACxC,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,sBAA6B;IAC1C,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,wDAAwD;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,wDAAwD;IACxD,OAAO,CAAC,UAAU,CAAS;IAC3B,qEAAqE;IACrE,OAAO,CAAC,MAAM,CAAS;IACvB,+DAA+D;IAC/D,OAAO,CAAC,MAAM,CAAC,CAAkB;IACjC,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAC,CAAgB;IAC/B,4FAA4F;IAC5F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IACpD,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAE7B;;;;;;;;;;OAUG;gBAED,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,SAAS,GAAG,IAAI,EACrB,QAAQ,EAAE,iBAAiB,GAAG,IAAI,EAClC,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,KAAK,GAAG,IAAI;IAWrB;;;;;;;OAOG;IACH,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,MAAc,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,WAAW;IAIhF;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,MAAc,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,WAAW;IAItG;;;;;;OAMG;IACH,OAAO,CAAC,KAAK;IASb;;;;;OAKG;IACH,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI;IAWxC;;;;;;;;OAQG;IACF,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,SAAS,CAAC,aAAa,CAAC;IAqBjD;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAWnB;;;;OAIG;IACF,SAAS,CAAC,MAAM,GAAE,MAAyB,GAAG,SAAS,CAAC,IAAI,CAAC;IAO9D,sFAAsF;IACtF,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,iFAAiF;IACjF,UAAU,IAAI,IAAI;IAIlB,0FAA0F;IACzF,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC;IAUzB,mGAAmG;IACnG,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC;IAyC1B;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAUtB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAE,YAAY;IAsFrB,mGAAmG;IACnG,OAAO,CAAE,kBAAkB;IAwC3B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,eAAe;IAkCvB;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IAQnB;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IAInB;;;;;;;;OAQG;IACH,OAAO,CAAC,aAAa;IAIrB;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,SAAa,GAAG,OAAO;IAKhE;;;;;;;;;;;OAWG;IACH,OAAO,CAAE,kBAAkB;IAqB3B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,aAAa;IAMrB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAE,sBAAsB;CAkDhC"}