Creates a manager for either a new group event or an existing group AID.
states and rstates are app-level key state records used when creating
a new group event. keys and ndigs are persisted group manager params
used when loading an existing group. For an existing group, ndigs is
expected to be the current establishment event's next digest list.
During group inception there is no separate prior establishment event, so
gpndigs starts as the same digest list as gdigs. During rotation,
gdigs changes to the proposed next digests, while gpndigs stays
fixed for ondex derivation.
Optionalba?: unknown[]Optionalbr?: unknown[]Optionalvn?: number[]Optionalba?: unknown[]Optionalbr?: unknown[]Optionalvn?: number[]Retained for the IdentifierManager interface. Group signing delegates
to the local member AID keeper instead of storing signers here.
Returns the inception key material for the group event.
Inception has no prior group establishment event. The current keys and
proposed next digests are therefore returned directly from the manager's
configured states and rstates.
Performs a multisig rotation.
states supplies the current group signing keys for the event being
signed. rstates supplies the proposed next key digests to put in the
new event. The prior next digests used for rotation ondex lookup stay
unchanged until KERIA accepts the new establishment event and returns an
updated group state.
Optionalba?: unknown[]Optionalbr?: unknown[]Optionalvn?: number[]Optionalba?: unknown[]Optionalbr?: unknown[]Optionalvn?: number[]Signs for the group by delegating to the local member keeper.
Identifier manager for group identifiers.
A group identifier does not have its own private signing keys. Instead, this manager maps group event signing indexes onto the local member AID (
mhab) and delegates actual signing to that member's key manager.The central invariant is that indexed rotation signatures carry two positions:
indexpoints to the signer's current key in the event's current key list (k), which SignifyTS derives fromstates.ondexpoints to the prior establishment event's next digest list (n), proving that the current key was a precommitted key.rstatesare the proposed next digest source for the new event. They are not the signer authorization set for the event being signed.