@fireproof/core 0.20.0-dev-preview-24 → 0.20.0-dev-preview-26

package/index.d.ts

@@ -1,4 +1,4 @@
-import { Logger, Future, ResolveOnce, URI, Result, ResolveSeq, CoerceURI, CryptoRuntime, CTCryptoKey, EnvFactoryOpts, Env, runtimeFn } from '@adviser/cement';
+import { Logger, Future, Result, ResolveOnce, URI, ResolveSeq, CoerceURI, CryptoRuntime, CTCryptoKey, EnvFactoryOpts, Env, runtimeFn } from '@adviser/cement';
 import { EventLink } from '@fireproof/vendor/@web3-storage/pail/clock/api';
 import { Operation } from '@fireproof/vendor/@web3-storage/pail/crdt/api';
 import { ByteView, ArrayBufferView, Version, Block as Block$1, UnknownLink, CID, Link, BlockView, MultihashHasher } from 'multiformats';
@@ -98,25 +98,57 @@ declare class CommitQueue<T = void> {
     processNext(): void;
 }
 
+declare class keyWithFingerPrint implements KeyWithFingerPrint {
+    #private;
+    readonly default: boolean;
+    readonly fingerPrint: string;
+    readonly key: CTCryptoKey;
+    private kfp;
+    constructor(kfp: KeyWithFingerPrint, material: string | Uint8Array, def: boolean);
+    extract(): Promise<KeyMaterial>;
+    asV2StorageKeyItem(): Promise<V2StorageKeyItem>;
+}
+declare function toKeyWithFingerPrint(keybag: KeyBag, materialStrOrUint8: string | Uint8Array): Promise<Result<KeyWithFingerPrint>>;
+declare class keysByFingerprint implements KeysByFingerprint {
+    readonly keys: Record<string, keyWithFingerPrint>;
+    readonly keybag: KeyBag;
+    readonly name: string;
+    readonly id: string;
+    static from(keyBag: KeyBag, named: KeysItem): Promise<KeysByFingerprint>;
+    constructor(keyBag: KeyBag, name: string);
+    get(fingerPrint?: Uint8Array | string): Promise<KeyWithFingerPrint | undefined>;
+    upsert(materialStrOrUint8: string | Uint8Array, def?: boolean, keyBagAction?: boolean): Promise<Result<KeyUpsertResult>>;
+    asKeysItem(): Promise<KeysItem>;
+}
 declare class KeyBag {
-    readonly rt: KeyBagRuntime;
     readonly logger: Logger;
+    readonly rt: KeyBagRuntime;
     constructor(rt: KeyBagRuntime);
     readonly _warnOnce: ResolveOnce<void>;
-    subtleKey(key: string): Promise<CryptoKey>;
+    subtleKey(materialStrOrUint8: string | Uint8Array): Promise<CryptoKey>;
     ensureKeyFromUrl(url: URI, keyFactory: () => string): Promise<Result<URI>>;
-    toKeyWithFingerPrint(keyStr: string): Promise<Result<KeyWithFingerPrint>>;
-    readonly _seq: ResolveSeq<Result<KeyWithFingerPrint>>;
-    setNamedKey(name: string, key: string): Promise<Result<KeyWithFingerPrint>>;
-    _setNamedKey(name: string, key: string): Promise<Result<KeyWithFingerPrint>>;
-    getNamedExtractableKey(name: string, failIfNotFound?: boolean): Promise<Result<KeyWithFingerExtract>>;
-    getNamedKey(name: string, failIfNotFound?: boolean): Promise<Result<KeyWithFingerPrint>>;
-}
-interface KeyItem {
+    private toKeysItem;
+    flush(): Promise<void>;
+    readonly _seq: ResolveSeq<Result<KeysByFingerprint>>;
+    _upsertNamedKey(ksi: KeysByFingerprint): Promise<Result<KeysByFingerprint>>;
+    private _namedKeyCache;
+    private _getNamedKey;
+    getNamedKey(name: string, failIfNotFound?: boolean, material?: string | Uint8Array): Promise<Result<KeysByFingerprint>>;
+}
+interface V1StorageKeyItem {
     readonly name: string;
     readonly key: string;
 }
-type KeyBagFile = Record<string, KeyItem>;
+interface V2StorageKeyItem {
+    readonly key: string;
+    readonly fingerPrint: string;
+    readonly default: boolean;
+}
+interface KeysItem {
+    readonly name: string;
+    readonly keys: Record<string, V2StorageKeyItem>;
+}
+type KeyBagFile = Record<string, KeysItem>;
 interface KeyBagOpts {
     readonly url: CoerceURI;
     readonly crypto: CryptoRuntime;
@@ -124,8 +156,8 @@ interface KeyBagOpts {
     readonly keyRuntime: KeyBagRuntime;
 }
 interface KeyBagProvider {
-    get(id: string): Promise<KeyItem | undefined>;
-    set(id: string, item: KeyItem): Promise<void>;
+    get(id: string): Promise<V1StorageKeyItem | KeysItem | undefined>;
+    set(item: KeysItem): Promise<void>;
 }
 interface KeyBagRuntime {
     readonly url: URI;
@@ -155,13 +187,18 @@ type keyBag_KeyBagOpts = KeyBagOpts;
 type keyBag_KeyBagProvider = KeyBagProvider;
 type keyBag_KeyBagProviderFactoryItem = KeyBagProviderFactoryItem;
 type keyBag_KeyBagRuntime = KeyBagRuntime;
-type keyBag_KeyItem = KeyItem;
+type keyBag_KeysItem = KeysItem;
+type keyBag_V1StorageKeyItem = V1StorageKeyItem;
+type keyBag_V2StorageKeyItem = V2StorageKeyItem;
 declare const keyBag_defaultKeyBagOpts: typeof defaultKeyBagOpts;
 declare const keyBag_defaultKeyBagUrl: typeof defaultKeyBagUrl;
 declare const keyBag_getKeyBag: typeof getKeyBag;
+type keyBag_keysByFingerprint = keysByFingerprint;
+declare const keyBag_keysByFingerprint: typeof keysByFingerprint;
 declare const keyBag_registerKeyBagProviderFactory: typeof registerKeyBagProviderFactory;
+declare const keyBag_toKeyWithFingerPrint: typeof toKeyWithFingerPrint;
 declare namespace keyBag {
-  export { type keyBag_KeyBackProviderFactory as KeyBackProviderFactory, keyBag_KeyBag as KeyBag, type keyBag_KeyBagFile as KeyBagFile, type keyBag_KeyBagOpts as KeyBagOpts, type keyBag_KeyBagProvider as KeyBagProvider, type keyBag_KeyBagProviderFactoryItem as KeyBagProviderFactoryItem, type keyBag_KeyBagRuntime as KeyBagRuntime, type keyBag_KeyItem as KeyItem, keyBag_defaultKeyBagOpts as defaultKeyBagOpts, keyBag_defaultKeyBagUrl as defaultKeyBagUrl, keyBag_getKeyBag as getKeyBag, keyBag_registerKeyBagProviderFactory as registerKeyBagProviderFactory };
+  export { type keyBag_KeyBackProviderFactory as KeyBackProviderFactory, keyBag_KeyBag as KeyBag, type keyBag_KeyBagFile as KeyBagFile, type keyBag_KeyBagOpts as KeyBagOpts, type keyBag_KeyBagProvider as KeyBagProvider, type keyBag_KeyBagProviderFactoryItem as KeyBagProviderFactoryItem, type keyBag_KeyBagRuntime as KeyBagRuntime, type keyBag_KeysItem as KeysItem, type keyBag_V1StorageKeyItem as V1StorageKeyItem, type keyBag_V2StorageKeyItem as V2StorageKeyItem, keyBag_defaultKeyBagOpts as defaultKeyBagOpts, keyBag_defaultKeyBagUrl as defaultKeyBagUrl, keyBag_getKeyBag as getKeyBag, keyBag_keysByFingerprint as keysByFingerprint, keyBag_registerKeyBagProviderFactory as registerKeyBagProviderFactory, keyBag_toKeyWithFingerPrint as toKeyWithFingerPrint };
 }
 
 declare class TaskManager {
@@ -199,30 +236,31 @@ declare function coerceIntoUint8(raw: ToUInt8): Result<Uint8Array>;
 declare function coercePromiseIntoUint8(raw: PromiseToUInt8): Promise<Result<Uint8Array>>;
 declare function makeName(fnString: string): string;
 
-declare enum FPEnvelopeType {
-    CAR = "car",
-    FILE = "file",
-    META = "meta",
-    WAL = "wal"
-}
+declare const FPEnvelopeTypes: {
+    readonly CAR: "car";
+    readonly FILE: "file";
+    readonly META: "meta";
+    readonly WAL: "wal";
+};
+type FPEnvelopeType = (typeof FPEnvelopeTypes)[keyof typeof FPEnvelopeTypes];
 interface FPEnvelope<T> {
     readonly type: FPEnvelopeType;
     readonly payload: T;
 }
 interface FPEnvelopeCar extends FPEnvelope<Uint8Array> {
-    readonly type: FPEnvelopeType.CAR;
+    readonly type: typeof FPEnvelopeTypes.CAR;
 }
 interface FPEnvelopeFile extends FPEnvelope<Uint8Array> {
-    readonly type: FPEnvelopeType.FILE;
+    readonly type: typeof FPEnvelopeTypes.FILE;
 }
 interface FPEnvelopeMeta extends FPEnvelope<DbMetaEvent[]> {
-    readonly type: FPEnvelopeType.META;
+    readonly type: typeof FPEnvelopeTypes.META;
 }
 interface FPWALCarsOps {
     readonly cars: CID[];
 }
 interface FPEnvelopeWAL extends FPEnvelope<WALState> {
-    readonly type: FPEnvelopeType.WAL;
+    readonly type: typeof FPEnvelopeTypes.WAL;
 }
 declare function Car2FPMsg(fpcar: Uint8Array): Result<FPEnvelopeCar>;
 declare function File2FPMsg(fpfile: Uint8Array): Result<FPEnvelopeFile>;
@@ -375,12 +413,14 @@ interface IvKeyIdData {
     readonly keyId: Uint8Array;
     readonly data: Uint8Array;
 }
-interface IvAndBytes {
+interface IvAndKeyAndBytes {
     readonly bytes: Uint8Array;
+    readonly key: CTCryptoKey;
     readonly iv: Uint8Array;
 }
-interface BytesWithIv {
+interface BytesAndKeyWithIv {
     readonly bytes: Uint8Array;
+    readonly key: CTCryptoKey;
     readonly iv?: Uint8Array;
 }
 interface AnyDecodedBlock {
@@ -404,7 +444,7 @@ interface TransactionWrapper<M extends TransactionMeta> {
 }
 type TransactionMeta = unknown;
 interface EncryptedBlock {
-    readonly value: IvAndBytes;
+    readonly value: IvAndKeyAndBytes;
 }
 interface KeyMaterial {
     readonly key: Uint8Array;
@@ -413,28 +453,37 @@ interface KeyMaterial {
 interface KeyWithFingerPrint {
     readonly fingerPrint: string;
     readonly key: CTCryptoKey;
-}
-interface KeyWithFingerExtract extends KeyWithFingerPrint {
     extract(): Promise<KeyMaterial>;
 }
 interface CodecOpts {
     readonly ivCalc: "random" | "hash";
     readonly noIVVerify: boolean;
 }
-interface KeyedCrypto {
+interface KeyUpsertResult {
+    readonly modified: boolean;
+    readonly kfp: KeyWithFingerPrint;
+}
+interface KeysByFingerprint {
+    readonly id: string;
+    readonly name: string;
+    get(fingerPrint?: Uint8Array | string): Promise<KeyWithFingerPrint | undefined>;
+    upsert(key: string | Uint8Array, def?: boolean): Promise<Result<KeyUpsertResult>>;
+    asKeysItem(): Promise<KeysItem>;
+}
+interface CryptoAction {
     readonly ivLength: number;
     readonly logger: Logger;
     readonly crypto: CryptoRuntime;
     readonly url: URI;
-    fingerPrint(): Promise<string>;
+    readonly key: KeysByFingerprint;
     algo(iv?: Uint8Array): {
         name: string;
         iv: Uint8Array;
         tagLength: number;
     };
     codec(iv?: Uint8Array, codecOpts?: Partial<CodecOpts>): BlockCodec<number, Uint8Array>;
-    _decrypt(data: IvAndBytes): Promise<Uint8Array>;
-    _encrypt(data: BytesWithIv): Promise<Uint8Array>;
+    _decrypt(data: IvAndKeyAndBytes): Promise<Uint8Array>;
+    _encrypt(data: BytesAndKeyWithIv): Promise<Uint8Array>;
 }
 interface BlobLike {
     stream: () => ReadableStream;
@@ -516,7 +565,7 @@ interface BaseStore {
     url(): URI;
     onStarted(fn: () => void): void;
     onClosed(fn: () => void): void;
-    keyedCrypto(): Promise<KeyedCrypto>;
+    keyedCrypto(): Promise<CryptoAction>;
     close(): Promise<Result<void>>;
     destroy(): Promise<Result<void>>;
     readonly ready?: () => Promise<void>;
@@ -788,7 +837,7 @@ type index$5_BlockFetcher = BlockFetcher;
 type index$5_BlockstoreOpts = BlockstoreOpts;
 type index$5_BlockstoreParams = BlockstoreParams;
 type index$5_BlockstoreRuntime = BlockstoreRuntime;
-type index$5_BytesWithIv = BytesWithIv;
+type index$5_BytesAndKeyWithIv = BytesAndKeyWithIv;
 type index$5_CIDBlock = CIDBlock;
 declare const index$5_Car2FPMsg: typeof Car2FPMsg;
 type index$5_CarClockHead = CarClockHead;
@@ -809,6 +858,7 @@ declare const index$5_CompactionFetcher: typeof CompactionFetcher;
 type index$5_Connection = Connection;
 type index$5_ConnectionBase = ConnectionBase;
 declare const index$5_ConnectionBase: typeof ConnectionBase;
+type index$5_CryptoAction = CryptoAction;
 type index$5_DataSaveOpts = DataSaveOpts;
 type index$5_DataStore = DataStore;
 type index$5_DbMeta = DbMeta;
@@ -825,7 +875,7 @@ type index$5_FPEnvelopeCar = FPEnvelopeCar;
 type index$5_FPEnvelopeFile = FPEnvelopeFile;
 type index$5_FPEnvelopeMeta = FPEnvelopeMeta;
 type index$5_FPEnvelopeType = FPEnvelopeType;
-declare const index$5_FPEnvelopeType: typeof FPEnvelopeType;
+declare const index$5_FPEnvelopeTypes: typeof FPEnvelopeTypes;
 type index$5_FPEnvelopeWAL = FPEnvelopeWAL;
 type index$5_FPWALCarsOps = FPWALCarsOps;
 declare const index$5_File2FPMsg: typeof File2FPMsg;
@@ -834,12 +884,12 @@ type index$5_GatewayOpts = GatewayOpts;
 type index$5_GetResult = GetResult;
 type index$5_InterceptorGateway = InterceptorGateway;
 declare const index$5_InterceptorGateway: typeof InterceptorGateway;
-type index$5_IvAndBytes = IvAndBytes;
+type index$5_IvAndKeyAndBytes = IvAndKeyAndBytes;
 type index$5_IvKeyIdData = IvKeyIdData;
 type index$5_KeyMaterial = KeyMaterial;
-type index$5_KeyWithFingerExtract = KeyWithFingerExtract;
+type index$5_KeyUpsertResult = KeyUpsertResult;
 type index$5_KeyWithFingerPrint = KeyWithFingerPrint;
-type index$5_KeyedCrypto = KeyedCrypto;
+type index$5_KeysByFingerprint = KeysByFingerprint;
 type index$5_LoadHandler = LoadHandler;
 type index$5_Loadable = Loadable;
 type index$5_Loader = Loader;
@@ -899,7 +949,7 @@ declare const index$5_registerStoreProtocol: typeof registerStoreProtocol;
 declare const index$5_toCIDBlock: typeof toCIDBlock;
 declare const index$5_toStoreRuntime: typeof toStoreRuntime;
 declare namespace index$5 {
-  export { type index$5_AnyAnyBlock as AnyAnyBlock, type index$5_AnyAnyLink as AnyAnyLink, type index$5_AnyBlock as AnyBlock, type index$5_AnyDecodedBlock as AnyDecodedBlock, type index$5_AnyLink as AnyLink, type index$5_AnyLinkFn as AnyLinkFn, index$5_BaseBlockstoreImpl as BaseBlockstoreImpl, type index$5_BaseStore as BaseStore, type index$5_BlobLike as BlobLike, type index$5_BlockFetcher as BlockFetcher, type index$5_BlockstoreOpts as BlockstoreOpts, type index$5_BlockstoreParams as BlockstoreParams, type index$5_BlockstoreRuntime as BlockstoreRuntime, type index$5_BytesWithIv as BytesWithIv, type index$5_CIDBlock as CIDBlock, index$5_Car2FPMsg as Car2FPMsg, type index$5_CarClockHead as CarClockHead, type index$5_CarClockLink as CarClockLink, type index$5_CarGroup as CarGroup, type index$5_CarHeader as CarHeader, type index$5_CarLog as CarLog, type index$5_CarMakeable as CarMakeable, index$5_CarTransactionImpl as CarTransactionImpl, type index$5_CarTransactionOpts as CarTransactionOpts, type index$5_CodecOpts as CodecOpts, type index$5_CommitOpts as CommitOpts, type index$5_CompactFetcher as CompactFetcher, type index$5_CompactFn as CompactFn, index$5_CompactionFetcher as CompactionFetcher, type index$5_Connection as Connection, index$5_ConnectionBase as ConnectionBase, type index$5_DataSaveOpts as DataSaveOpts, type index$5_DataStore as DataStore, type index$5_DbMeta as DbMeta, type index$5_DbMetaBinary as DbMetaBinary, type index$5_DbMetaEvent as DbMetaEvent, type index$5_DbMetaEventBlock as DbMetaEventBlock, index$5_DbMetaEventEqual as DbMetaEventEqual, index$5_DbMetaEventsEqual as DbMetaEventsEqual, type index$5_EncryptedBlock as EncryptedBlock, index$5_EncryptedBlockstore as EncryptedBlockstore, type index$5_FPEnvelope as FPEnvelope, type index$5_FPEnvelopeCar as FPEnvelopeCar, type index$5_FPEnvelopeFile as FPEnvelopeFile, type index$5_FPEnvelopeMeta as FPEnvelopeMeta, index$5_FPEnvelopeType as FPEnvelopeType, type index$5_FPEnvelopeWAL as FPEnvelopeWAL, type index$5_FPWALCarsOps as FPWALCarsOps, index$5_File2FPMsg as File2FPMsg, type index$5_Gateway as Gateway, type index$5_GatewayOpts as GatewayOpts, type index$5_GetResult as GetResult, index$5_InterceptorGateway as InterceptorGateway, type index$5_IvAndBytes as IvAndBytes, type index$5_IvKeyIdData as IvKeyIdData, type index$5_KeyMaterial as KeyMaterial, type index$5_KeyWithFingerExtract as KeyWithFingerExtract, type index$5_KeyWithFingerPrint as KeyWithFingerPrint, type index$5_KeyedCrypto as KeyedCrypto, type index$5_LoadHandler as LoadHandler, type index$5_Loadable as Loadable, index$5_Loader as Loader, type index$5_MetaStore as MetaStore, index$5_PassThroughGateway as PassThroughGateway, type index$5_RefBlockstore as RefBlockstore, type index$5_RefLoadable as RefLoadable, type index$5_SerdeGateway as SerdeGateway, type index$5_SerdeGatewayBuildUrlOp as SerdeGatewayBuildUrlOp, type index$5_SerdeGatewayBuildUrlReturn as SerdeGatewayBuildUrlReturn, type index$5_SerdeGatewayCloseOp as SerdeGatewayCloseOp, type index$5_SerdeGatewayCloseReturn as SerdeGatewayCloseReturn, type index$5_SerdeGatewayCtx as SerdeGatewayCtx, type index$5_SerdeGatewayDeleteOp as SerdeGatewayDeleteOp, type index$5_SerdeGatewayDeleteReturn as SerdeGatewayDeleteReturn, type index$5_SerdeGatewayDestroyOp as SerdeGatewayDestroyOp, type index$5_SerdeGatewayDestroyReturn as SerdeGatewayDestroyReturn, type index$5_SerdeGatewayFactoryItem as SerdeGatewayFactoryItem, type index$5_SerdeGatewayGetOp as SerdeGatewayGetOp, type index$5_SerdeGatewayGetReturn as SerdeGatewayGetReturn, type index$5_SerdeGatewayInterceptor as SerdeGatewayInterceptor, type index$5_SerdeGatewayOpts as SerdeGatewayOpts, type index$5_SerdeGatewayPutOp as SerdeGatewayPutOp, type index$5_SerdeGatewayPutReturn as SerdeGatewayPutReturn, type index$5_SerdeGatewayReturn as SerdeGatewayReturn, type index$5_SerdeGatewayStartOp as SerdeGatewayStartOp, type index$5_SerdeGatewayStartReturn as SerdeGatewayStartReturn, type index$5_SerdeGatewaySubscribeOp as SerdeGatewaySubscribeOp, type index$5_SerdeGatewaySubscribeReturn as SerdeGatewaySubscribeReturn, type index$5_SerdeGetResult as SerdeGetResult, type index$5_SerdeOrGatewayFactoryItem as SerdeOrGatewayFactoryItem, type index$5_StoreEnDeFile as StoreEnDeFile, type index$5_StoreFactory as StoreFactory, type index$5_StoreFactoryItem as StoreFactoryItem, type index$5_StoreRuntime as StoreRuntime, type index$5_StoreRuntimeUrls as StoreRuntimeUrls, type index$5_StoreURIRuntime as StoreURIRuntime, type index$5_StoreURIs as StoreURIs, type index$5_StoreUrls as StoreUrls, type index$5_StoreUrlsOpts as StoreUrlsOpts, type index$5_TransactionMeta as TransactionMeta, type index$5_TransactionWrapper as TransactionWrapper, type index$5_UnsubscribeResult as UnsubscribeResult, type index$5_VoidResult as VoidResult, type index$5_WALState as WALState, type index$5_WALStore as WALStore, index$5_createDbMetaEvent as createDbMetaEvent, index$5_defaultGatewayFactoryItem as defaultGatewayFactoryItem, index$5_ensureStoreEnDeFile as ensureStoreEnDeFile, index$5_getDefaultURI as getDefaultURI, index$5_getGatewayFactoryItem as getGatewayFactoryItem, index$5_getStartedGateway as getStartedGateway, index$5_parseCarFile as parseCarFile, index$5_registerStoreProtocol as registerStoreProtocol, index$5_toCIDBlock as toCIDBlock, index$5_toStoreRuntime as toStoreRuntime };
+  export { type index$5_AnyAnyBlock as AnyAnyBlock, type index$5_AnyAnyLink as AnyAnyLink, type index$5_AnyBlock as AnyBlock, type index$5_AnyDecodedBlock as AnyDecodedBlock, type index$5_AnyLink as AnyLink, type index$5_AnyLinkFn as AnyLinkFn, index$5_BaseBlockstoreImpl as BaseBlockstoreImpl, type index$5_BaseStore as BaseStore, type index$5_BlobLike as BlobLike, type index$5_BlockFetcher as BlockFetcher, type index$5_BlockstoreOpts as BlockstoreOpts, type index$5_BlockstoreParams as BlockstoreParams, type index$5_BlockstoreRuntime as BlockstoreRuntime, type index$5_BytesAndKeyWithIv as BytesAndKeyWithIv, type index$5_CIDBlock as CIDBlock, index$5_Car2FPMsg as Car2FPMsg, type index$5_CarClockHead as CarClockHead, type index$5_CarClockLink as CarClockLink, type index$5_CarGroup as CarGroup, type index$5_CarHeader as CarHeader, type index$5_CarLog as CarLog, type index$5_CarMakeable as CarMakeable, index$5_CarTransactionImpl as CarTransactionImpl, type index$5_CarTransactionOpts as CarTransactionOpts, type index$5_CodecOpts as CodecOpts, type index$5_CommitOpts as CommitOpts, type index$5_CompactFetcher as CompactFetcher, type index$5_CompactFn as CompactFn, index$5_CompactionFetcher as CompactionFetcher, type index$5_Connection as Connection, index$5_ConnectionBase as ConnectionBase, type index$5_CryptoAction as CryptoAction, type index$5_DataSaveOpts as DataSaveOpts, type index$5_DataStore as DataStore, type index$5_DbMeta as DbMeta, type index$5_DbMetaBinary as DbMetaBinary, type index$5_DbMetaEvent as DbMetaEvent, type index$5_DbMetaEventBlock as DbMetaEventBlock, index$5_DbMetaEventEqual as DbMetaEventEqual, index$5_DbMetaEventsEqual as DbMetaEventsEqual, type index$5_EncryptedBlock as EncryptedBlock, index$5_EncryptedBlockstore as EncryptedBlockstore, type index$5_FPEnvelope as FPEnvelope, type index$5_FPEnvelopeCar as FPEnvelopeCar, type index$5_FPEnvelopeFile as FPEnvelopeFile, type index$5_FPEnvelopeMeta as FPEnvelopeMeta, type index$5_FPEnvelopeType as FPEnvelopeType, index$5_FPEnvelopeTypes as FPEnvelopeTypes, type index$5_FPEnvelopeWAL as FPEnvelopeWAL, type index$5_FPWALCarsOps as FPWALCarsOps, index$5_File2FPMsg as File2FPMsg, type index$5_Gateway as Gateway, type index$5_GatewayOpts as GatewayOpts, type index$5_GetResult as GetResult, index$5_InterceptorGateway as InterceptorGateway, type index$5_IvAndKeyAndBytes as IvAndKeyAndBytes, type index$5_IvKeyIdData as IvKeyIdData, type index$5_KeyMaterial as KeyMaterial, type index$5_KeyUpsertResult as KeyUpsertResult, type index$5_KeyWithFingerPrint as KeyWithFingerPrint, type index$5_KeysByFingerprint as KeysByFingerprint, type index$5_LoadHandler as LoadHandler, type index$5_Loadable as Loadable, index$5_Loader as Loader, type index$5_MetaStore as MetaStore, index$5_PassThroughGateway as PassThroughGateway, type index$5_RefBlockstore as RefBlockstore, type index$5_RefLoadable as RefLoadable, type index$5_SerdeGateway as SerdeGateway, type index$5_SerdeGatewayBuildUrlOp as SerdeGatewayBuildUrlOp, type index$5_SerdeGatewayBuildUrlReturn as SerdeGatewayBuildUrlReturn, type index$5_SerdeGatewayCloseOp as SerdeGatewayCloseOp, type index$5_SerdeGatewayCloseReturn as SerdeGatewayCloseReturn, type index$5_SerdeGatewayCtx as SerdeGatewayCtx, type index$5_SerdeGatewayDeleteOp as SerdeGatewayDeleteOp, type index$5_SerdeGatewayDeleteReturn as SerdeGatewayDeleteReturn, type index$5_SerdeGatewayDestroyOp as SerdeGatewayDestroyOp, type index$5_SerdeGatewayDestroyReturn as SerdeGatewayDestroyReturn, type index$5_SerdeGatewayFactoryItem as SerdeGatewayFactoryItem, type index$5_SerdeGatewayGetOp as SerdeGatewayGetOp, type index$5_SerdeGatewayGetReturn as SerdeGatewayGetReturn, type index$5_SerdeGatewayInterceptor as SerdeGatewayInterceptor, type index$5_SerdeGatewayOpts as SerdeGatewayOpts, type index$5_SerdeGatewayPutOp as SerdeGatewayPutOp, type index$5_SerdeGatewayPutReturn as SerdeGatewayPutReturn, type index$5_SerdeGatewayReturn as SerdeGatewayReturn, type index$5_SerdeGatewayStartOp as SerdeGatewayStartOp, type index$5_SerdeGatewayStartReturn as SerdeGatewayStartReturn, type index$5_SerdeGatewaySubscribeOp as SerdeGatewaySubscribeOp, type index$5_SerdeGatewaySubscribeReturn as SerdeGatewaySubscribeReturn, type index$5_SerdeGetResult as SerdeGetResult, type index$5_SerdeOrGatewayFactoryItem as SerdeOrGatewayFactoryItem, type index$5_StoreEnDeFile as StoreEnDeFile, type index$5_StoreFactory as StoreFactory, type index$5_StoreFactoryItem as StoreFactoryItem, type index$5_StoreRuntime as StoreRuntime, type index$5_StoreRuntimeUrls as StoreRuntimeUrls, type index$5_StoreURIRuntime as StoreURIRuntime, type index$5_StoreURIs as StoreURIs, type index$5_StoreUrls as StoreUrls, type index$5_StoreUrlsOpts as StoreUrlsOpts, type index$5_TransactionMeta as TransactionMeta, type index$5_TransactionWrapper as TransactionWrapper, type index$5_UnsubscribeResult as UnsubscribeResult, type index$5_VoidResult as VoidResult, type index$5_WALState as WALState, type index$5_WALStore as WALStore, index$5_createDbMetaEvent as createDbMetaEvent, index$5_defaultGatewayFactoryItem as defaultGatewayFactoryItem, index$5_ensureStoreEnDeFile as ensureStoreEnDeFile, index$5_getDefaultURI as getDefaultURI, index$5_getGatewayFactoryItem as getGatewayFactoryItem, index$5_getStartedGateway as getStartedGateway, index$5_parseCarFile as parseCarFile, index$5_registerStoreProtocol as registerStoreProtocol, index$5_toCIDBlock as toCIDBlock, index$5_toStoreRuntime as toStoreRuntime };
 }
 
 interface WriteQueueParams {
@@ -965,25 +1015,27 @@ declare class Index<K extends IndexKeyType, T extends DocTypes, R extends DocFra
 
 type Falsy = false | null | undefined;
 declare function isFalsy(value: unknown): value is Falsy;
-declare enum PARAM {
-    SUFFIX = "suffix",
-    URL_GEN = "urlGen",
-    STORE_KEY = "storekey",
-    STORE = "store",
-    KEY = "key",
-    INDEX = "index",
-    NAME = "name",
-    VERSION = "version",
-    RUNTIME = "runtime",
-    FRAG_SIZE = "fragSize",
-    IV_VERIFY = "ivVerify",
-    IV_HASH = "ivHash",
-    FRAG_FID = "fid",
-    FRAG_OFS = "ofs",
-    FRAG_LEN = "len",
-    FRAG_HEAD = "headerSize",
-    EXTRACTKEY = "extractKey"
-}
+declare const PARAM: {
+    SUFFIX: string;
+    URL_GEN: string;
+    STORE_KEY: string;
+    STORE: string;
+    KEY: string;
+    INDEX: string;
+    NAME: string;
+    VERSION: string;
+    RUNTIME: string;
+    FRAG_SIZE: string;
+    IV_VERIFY: string;
+    IV_HASH: string;
+    FRAG_FID: string;
+    FRAG_OFS: string;
+    FRAG_LEN: string;
+    FRAG_HEAD: string;
+    EXTRACTKEY: string;
+    SELF_REFLECT: string;
+};
+type PARAMS = (typeof PARAM)[keyof typeof PARAM];
 declare function throwFalsy<T>(value: T | Falsy): T;
 declare function falsyToUndef<T>(value: T | Falsy): T | undefined;
 type StoreType = "data" | "wal" | "meta";
@@ -1458,14 +1510,14 @@ declare namespace files {
 declare class BlockIvKeyIdCodec implements BlockCodec<0x300539, Uint8Array> {
     readonly code = 3147065;
     readonly name = "Fireproof@encrypted-block:aes-gcm";
-    readonly ko: KeyedCrypto;
+    readonly ko: CryptoAction;
     readonly iv?: Uint8Array;
     readonly opts: Partial<CodecOpts>;
-    constructor(ko: KeyedCrypto, iv?: Uint8Array, opts?: CodecOpts);
+    constructor(ko: CryptoAction, iv?: Uint8Array, opts?: CodecOpts);
     encode(data: Uint8Array): Promise<Uint8Array>;
     decode(abytes: Uint8Array | ArrayBuffer): Promise<Uint8Array>;
 }
-declare function keyedCryptoFactory(url: URI, kb: KeyBag, sthis: SuperThis): Promise<KeyedCrypto>;
+declare function keyedCryptoFactory(url: URI, kb: KeyBag, sthis: SuperThis): Promise<CryptoAction>;
 
 type keyedCrypto_BlockIvKeyIdCodec = BlockIvKeyIdCodec;
 declare const keyedCrypto_BlockIvKeyIdCodec: typeof BlockIvKeyIdCodec;
@@ -1532,8 +1584,8 @@ declare class KeyBagProviderFile implements KeyBagProvider {
     readonly logger: Logger;
     readonly sthis: SuperThis;
     constructor(url: URI, sthis: SuperThis);
-    get(id: string): Promise<KeyItem | undefined>;
-    set(id: string, item: KeyItem): Promise<void>;
+    get(id: string): Promise<V1StorageKeyItem | KeysItem | undefined>;
+    set(item: KeysItem): Promise<void>;
 }
 
 declare function sysFileSystemFactory(uri: URI): Promise<SysFileSystem>;
@@ -1616,20 +1668,25 @@ type index_KeyBagOpts = KeyBagOpts;
 type index_KeyBagProvider = KeyBagProvider;
 type index_KeyBagProviderFactoryItem = KeyBagProviderFactoryItem;
 type index_KeyBagRuntime = KeyBagRuntime;
-type index_KeyItem = KeyItem;
+type index_KeysItem = KeysItem;
+type index_V1StorageKeyItem = V1StorageKeyItem;
+type index_V2StorageKeyItem = V2StorageKeyItem;
 declare const index_defaultKeyBagOpts: typeof defaultKeyBagOpts;
 declare const index_defaultKeyBagUrl: typeof defaultKeyBagUrl;
 declare const index_files: typeof files;
 declare const index_getFileName: typeof getFileName;
 declare const index_getKeyBag: typeof getKeyBag;
 declare const index_getPath: typeof getPath;
+type index_keysByFingerprint = keysByFingerprint;
+declare const index_keysByFingerprint: typeof keysByFingerprint;
 declare const index_registerKeyBagProviderFactory: typeof registerKeyBagProviderFactory;
 declare const index_runtimeFn: typeof runtimeFn;
+declare const index_toKeyWithFingerPrint: typeof toKeyWithFingerPrint;
 declare namespace index {
-  export { index_FILESTORE_VERSION as FILESTORE_VERSION, index_INDEXEDDB_VERSION as INDEXEDDB_VERSION, type index_KeyBackProviderFactory as KeyBackProviderFactory, index_KeyBag as KeyBag, type index_KeyBagFile as KeyBagFile, type index_KeyBagOpts as KeyBagOpts, type index_KeyBagProvider as KeyBagProvider, type index_KeyBagProviderFactoryItem as KeyBagProviderFactoryItem, type index_KeyBagRuntime as KeyBagRuntime, type index_KeyItem as KeyItem, index_defaultKeyBagOpts as defaultKeyBagOpts, index_defaultKeyBagUrl as defaultKeyBagUrl, index_files as files, index_getFileName as getFileName, index_getKeyBag as getKeyBag, index_getPath as getPath, index$1 as gw, keyBag as kb, keyedCrypto as kc, index$3 as mf, index_registerKeyBagProviderFactory as registerKeyBagProviderFactory, index_runtimeFn as runtimeFn };
+  export { index_FILESTORE_VERSION as FILESTORE_VERSION, index_INDEXEDDB_VERSION as INDEXEDDB_VERSION, type index_KeyBackProviderFactory as KeyBackProviderFactory, index_KeyBag as KeyBag, type index_KeyBagFile as KeyBagFile, type index_KeyBagOpts as KeyBagOpts, type index_KeyBagProvider as KeyBagProvider, type index_KeyBagProviderFactoryItem as KeyBagProviderFactoryItem, type index_KeyBagRuntime as KeyBagRuntime, type index_KeysItem as KeysItem, type index_V1StorageKeyItem as V1StorageKeyItem, type index_V2StorageKeyItem as V2StorageKeyItem, index_defaultKeyBagOpts as defaultKeyBagOpts, index_defaultKeyBagUrl as defaultKeyBagUrl, index_files as files, index_getFileName as getFileName, index_getKeyBag as getKeyBag, index_getPath as getPath, index$1 as gw, keyBag as kb, keyedCrypto as kc, index_keysByFingerprint as keysByFingerprint, index$3 as mf, index_registerKeyBagProviderFactory as registerKeyBagProviderFactory, index_runtimeFn as runtimeFn, index_toKeyWithFingerPrint as toKeyWithFingerPrint };
 }
 
 declare const PACKAGE_VERSION: string;
 
-export { type AllDocsQueryOpts, type AllDocsResponse, type BaseBlockstore, type BulkResponse, type CRDT, type CRDTClock, type CRDTEntry, CRDTImpl, type CRDTMeta, type CarTransaction, type ChangesOptions, type ChangesResponse, type ChangesResponseRow, type ClockHead, type ClockLink, type ConfigOpts, type Database, DatabaseImpl, type DbMeta, type DocBase, type DocFileMeta, type DocFiles, type DocFragment, type DocLiteral, type DocObject, type DocRecord, type DocResponse, type DocSet, type DocTypes, type DocUpdate, type DocValue, type DocWithId, type FPStats, type Falsy, type FileTransactionMeta, type HasCRDT, type HasLogger, type HasSuperThis, type IdxMeta, type IdxMetaMap, Index, type IndexKey, type IndexKeyType, type IndexRow, type IndexRows, type IndexTransactionMeta, type IndexUpdate, type IndexUpdateString, type Joiner, type KeyLiteral, type Ledger, LedgerFactory, type LedgerOpts, LedgerShell, type ListenerFn, type MapFn, type MetaType, type NoUpdateListenerFn, NotFoundError, PACKAGE_VERSION, PARAM, type PathOps, type PromiseToUInt8, type QueryOpts, type ReadyCloseDestroy, type RefLedger, type Store, type StoreType, type SuperThis, type SuperThisOpts, type SysFileSystem, type TextEndeCoder, type ToUInt8, UInt8ArrayEqual, type UnReg, type UnknownDoc, type UpdateListenerFn, type VoidFn, type WriteQueue, index$5 as blockstore, index$5 as bs, coerceIntoUint8, coercePromiseIntoUint8, defaultWriteQueueOpts, ensureLogger, ensureSuperLog, ensureSuperThis, exceptionWrapper, falsyToUndef, fireproof, getKey, getName, getStore, index$4 as index, inplaceFilter, isDatabase, isFalsy, isLedger, isNotFoundError, keyConfigOpts, makeName, onSuperThis, index as rt, index as runtime, throwFalsy, toSortedArray, toStoreURIRuntime };
+export { type AllDocsQueryOpts, type AllDocsResponse, type BaseBlockstore, type BulkResponse, type CRDT, type CRDTClock, type CRDTEntry, CRDTImpl, type CRDTMeta, type CarTransaction, type ChangesOptions, type ChangesResponse, type ChangesResponseRow, type ClockHead, type ClockLink, type ConfigOpts, type Database, DatabaseImpl, type DbMeta, type DocBase, type DocFileMeta, type DocFiles, type DocFragment, type DocLiteral, type DocObject, type DocRecord, type DocResponse, type DocSet, type DocTypes, type DocUpdate, type DocValue, type DocWithId, type FPStats, type Falsy, type FileTransactionMeta, type HasCRDT, type HasLogger, type HasSuperThis, type IdxMeta, type IdxMetaMap, Index, type IndexKey, type IndexKeyType, type IndexRow, type IndexRows, type IndexTransactionMeta, type IndexUpdate, type IndexUpdateString, type Joiner, type KeyLiteral, type Ledger, LedgerFactory, type LedgerOpts, LedgerShell, type ListenerFn, type MapFn, type MetaType, type NoUpdateListenerFn, NotFoundError, PACKAGE_VERSION, PARAM, type PARAMS, type PathOps, type PromiseToUInt8, type QueryOpts, type ReadyCloseDestroy, type RefLedger, type Store, type StoreType, type SuperThis, type SuperThisOpts, type SysFileSystem, type TextEndeCoder, type ToUInt8, UInt8ArrayEqual, type UnReg, type UnknownDoc, type UpdateListenerFn, type VoidFn, type WriteQueue, index$5 as blockstore, index$5 as bs, coerceIntoUint8, coercePromiseIntoUint8, defaultWriteQueueOpts, ensureLogger, ensureSuperLog, ensureSuperThis, exceptionWrapper, falsyToUndef, fireproof, getKey, getName, getStore, index$4 as index, inplaceFilter, isDatabase, isFalsy, isLedger, isNotFoundError, keyConfigOpts, makeName, onSuperThis, index as rt, index as runtime, throwFalsy, toSortedArray, toStoreURIRuntime };
 declare module '@fireproof/core'