@korajs/test 1.0.0-beta.12 → 1.0.0-beta.14

package/dist/index.d.cts

@@ -1,84 +1,27 @@
-import * as _korajs_server from '@korajs/server';
-import { ServerTransport, MemoryServerStore, OperationValidator } from '@korajs/server';
-import { SchemaDefinition, OperationTransform, Operation, BlobRef, KoraEventEmitter, VersionVector } from '@korajs/core';
 import * as _korajs_sync from '@korajs/sync';
-import { SyncTransport, SyncEngine, ChaosConfig } from '@korajs/sync';
+import { SyncTransport, SyncEncryptionConfig, SyncEngine, ChaosConfig } from '@korajs/sync';
 export { ChaosConfig, ChaosTransport } from '@korajs/sync';
-import { ContentAddressedBlobStore, Store, MemoryBlobStore, CollectionAccessor, BlobManifest, ReceiveBlobResult } from '@korajs/store';
+import * as _korajs_server from '@korajs/server';
+import { ServerTransport, ServerStore, MemoryServerStore, KoraSyncServerConfig, OperationValidator, KoraSyncServer } from '@korajs/server';
+import { KoraEventEmitter, SchemaDefinition, OperationTransform, BlobRef, VersionVector, Operation } from '@korajs/core';
+import { Store, MemoryBlobStore, CollectionAccessor, BlobManifest, ReceiveBlobResult, ContentAddressedBlobStore } from '@korajs/store';
 import { AuthSyncBinding, AuthSyncState } from '@korajs/core/bindings';
 
-/**
- * A linked client/server transport pair, as consumed by {@link TestDevice}.
- */
-interface TransportPair {
-    client: SyncTransport;
-    serverTransport: ServerTransport;
+/** What a device needs from its server: a way to open a session on it. */
+interface TestDeviceServer {
+    handleConnection(transport: _korajs_server.ServerTransport): string;
 }
 /**
- * Wraps a transport pair so that every sync message exchanged between the two
- * ends is encoded to protobuf bytes and decoded back — a faithful stand-in for
- * a real network hop that uses the protobuf wire format.
- *
- * Both directions are wrapped, so operations, handshakes, batches, and acks all
- * travel as bytes rather than shared object references.
- *
- * @param pair - The underlying (in-memory) transport pair to wrap
- * @returns A transport pair that routes messages through the protobuf codec
+ * End-to-end encryption of a test device's sync traffic. Devices that must read each
+ * other's operations share the passphrase AND the key-derivation salt (shared key
+ * distribution, ENC-1, is not built yet).
  */
-declare function wrapTransportPairWithProtobufWire(pair: TransportPair): TransportPair;
-
-/**
- * In-memory test server wrapping KoraSyncServer with MemoryServerStore.
- * Handles client connections via memory transports.
- */
-interface TestServerOptions {
-    /** Handshake schema version advertised by the server. Defaults to `schema.version`. */
-    schemaVersion?: number;
-    /** Inclusive client schema versions accepted at handshake. */
-    supportedSchemaVersions?: {
-        min: number;
-        max: number;
-    };
-    /** Transform accepted legacy operations into the server schema before validation. */
-    operationTransforms?: OperationTransform[];
-    /** Enable central blob storage: the server persists and serves uploaded blob bytes. */
-    blobStorage?: boolean;
-    /** Adjudicate untrusted client operations before materialization. */
-    validateOperation?: OperationValidator;
+interface TestDeviceEncryption {
+    config: SyncEncryptionConfig;
+    salt: Uint8Array;
+    /** PBKDF2 iterations (lower in tests for speed). */
+    iterations?: number;
 }
-declare class TestServer {
-    readonly store: MemoryServerStore;
-    /** The server's central blob store, present when `blobStorage` was enabled. */
-    readonly blobStore: ContentAddressedBlobStore | null;
-    private readonly syncServer;
-    constructor(schema: SchemaDefinition, options?: TestServerOptions);
-    /**
-     * Register a client connection transport with the server.
-     * Returns the session ID assigned by the server.
-     */
-    handleConnection(transport: ServerTransport): string;
-    /**
-     * Get all operations stored on the server.
-     */
-    getAllOperations(): Operation[];
-    /**
-     * Get the number of connected clients.
-     */
-    getConnectionCount(): number;
-    /**
-     * Retransmit relay batches connected clients have not acknowledged. Lets a test
-     * deterministically trigger the redelivery that the server also runs on a timer,
-     * without depending on wall-clock time. `staleMs` of 0 resends every pending relay.
-     */
-    retransmitPendingRelays(staleMs?: number): void;
-    /** Every blob reference still reachable from live records on the server. */
-    getLiveBlobRefs(): Promise<BlobRef[]>;
-    /**
-     * Shut down the server and close all sessions.
-     */
-    close(): Promise<void>;
-}
-
 /**
  * Options for creating a TestDevice.
  */
@@ -88,7 +31,7 @@ interface TestDeviceOptions {
     /** Schema definition */
     schema: SchemaDefinition;
     /** Test server to connect to */
-    server: TestServer;
+    server: TestDeviceServer;
     /** Transport factory — creates a linked client/server transport pair */
     createTransportPair: () => {
         client: SyncTransport;
@@ -98,8 +41,35 @@ interface TestDeviceOptions {
     tmpDir: string;
     /** Client handshake schema version. Defaults to `schema.version`. */
     syncSchemaVersion?: number;
-    /** Transforms applied to inbound operations before local apply. */
+    /** Schema transforms: the store folds every operation's view (transforms at fold time). */
     operationTransforms?: OperationTransform[];
+    /** The store's local `maxOperationBytes` (RT-86). Default: the store default (256 KiB). */
+    maxOperationBytes?: number;
+    /** A pinned store node id (`StoreConfig.nodeId`), as `createKoraAuthSync` sets the device id. */
+    nodeId?: string;
+    /** What the device does with records that leave its scope. Defaults to the engine default ('retain'). */
+    scopeExit?: 'retain' | 'retract';
+    /**
+     * The signed-in user, as an auth-aware app knows it (RT-42). When set, the store binds
+     * its node to that user at open and on {@link TestDevice.authChanged}, and the sync
+     * engine never uploads another user's node on this user's session.
+     */
+    principal?: () => string | null;
+    /**
+     * Let the sync engine reconnect on its own, as over a real WebSocket: a `connect()`
+     * after the session closed opens a new transport pair to the server. Off by default
+     * (a closed pair stays closed until the next {@link TestDevice.sync}).
+     */
+    reconnectable?: boolean;
+    /**
+     * Run the device on the beta.12 pairwise pipeline (`experimental.legacyMerge`)
+     * instead of the W7 fold. Used by the comparison harness.
+     */
+    legacyMerge?: boolean;
+    /** Encrypt sync traffic end to end (protocol v2 envelope). */
+    encryption?: TestDeviceEncryption;
+    /** Upload batch size of the sync engine (default: the engine's). */
+    batchSize?: number;
 }
 /**
  * A virtual device in a test network.
@@ -116,12 +86,18 @@ declare class TestDevice {
     readonly blobStore: MemoryBlobStore;
     private readonly schema;
     private readonly server;
+    private readonly encryption;
+    private readonly batchSize;
+    private encryptor;
     private readonly mergeEngine;
     private readonly createTransportPair;
     private readonly adapter;
     private readonly dbPath;
     private readonly syncSchemaVersion;
     private readonly operationTransforms;
+    private readonly scopeExit;
+    private readonly principal;
+    private readonly reconnectable;
     private applyPipeline;
     private syncEngine;
     private blobChunkProvider;
@@ -134,6 +110,11 @@ declare class TestDevice {
      * Open the store (must be called before sync or collection operations).
      */
     open(): Promise<void>;
+    /**
+     * The signed-in user changed (RT-42), as an auth binding reports it: like createApp,
+     * end the live session and bind the store to the new user before the next write.
+     */
+    authChanged(): Promise<void>;
     /**
      * Connect to the test server and perform initial sync.
      * If already connected, flushes any pending operations.
@@ -225,6 +206,92 @@ declare class TestDevice {
     private waitForPendingOps;
 }
 
+/**
+ * A linked client/server transport pair, as consumed by {@link TestDevice}.
+ */
+interface TransportPair {
+    client: SyncTransport;
+    serverTransport: ServerTransport;
+}
+/**
+ * Wraps a transport pair so that every sync message exchanged between the two
+ * ends is encoded to protobuf bytes and decoded back — a faithful stand-in for
+ * a real network hop that uses the protobuf wire format.
+ *
+ * Both directions are wrapped, so operations, handshakes, batches, and acks all
+ * travel as bytes rather than shared object references.
+ *
+ * @param pair - The underlying (in-memory) transport pair to wrap
+ * @returns A transport pair that routes messages through the protobuf codec
+ */
+declare function wrapTransportPairWithProtobufWire(pair: TransportPair): TransportPair;
+
+/**
+ * In-memory test server wrapping KoraSyncServer with MemoryServerStore.
+ * Handles client connections via memory transports.
+ */
+interface TestServerOptions<S extends ServerStore = MemoryServerStore> {
+    /**
+     * The server store (SQLite, Postgres, a memory store with options). Defaults to a
+     * fresh {@link MemoryServerStore}. Await {@link TestServer.ready} before use: the
+     * schema is set asynchronously.
+     */
+    store?: S;
+    /** End-to-end encryption policy of the sync server (protocol v2). */
+    encryption?: KoraSyncServerConfig['encryption'];
+    /** Handshake schema version advertised by the server. Defaults to `schema.version`. */
+    schemaVersion?: number;
+    /** Inclusive client schema versions accepted at handshake. */
+    supportedSchemaVersions?: {
+        min: number;
+        max: number;
+    };
+    /** Transform accepted legacy operations into the server schema before validation. */
+    operationTransforms?: OperationTransform[];
+    /** Enable central blob storage: the server persists and serves uploaded blob bytes. */
+    blobStorage?: boolean;
+    /** Adjudicate untrusted client operations before materialization. */
+    validateOperation?: OperationValidator;
+}
+declare class TestServer<S extends ServerStore = MemoryServerStore> {
+    readonly store: S;
+    /** Resolves once the store has the schema (needed before a SQL store is used). */
+    readonly ready: Promise<void>;
+    /** The server's central blob store, present when `blobStorage` was enabled. */
+    readonly blobStore: ContentAddressedBlobStore | null;
+    private readonly syncServer;
+    constructor(schema: SchemaDefinition, options?: TestServerOptions<S>);
+    /**
+     * Register a client connection transport with the server.
+     * Returns the session ID assigned by the server.
+     */
+    handleConnection(transport: ServerTransport): string;
+    /**
+     * Get all operations stored on the server.
+     */
+    getAllOperations(): Operation[];
+    /** The trusted server-side write API (route context): writes authored by the server node. */
+    getKoraContext(): ReturnType<KoraSyncServer['getKoraContext']>;
+    /** The node ids the server's stores fold with and advertise in the handshake. */
+    get authoritativeNodeIds(): string[];
+    /**
+     * Get the number of connected clients.
+     */
+    getConnectionCount(): number;
+    /**
+     * Retransmit relay batches connected clients have not acknowledged. Lets a test
+     * deterministically trigger the redelivery that the server also runs on a timer,
+     * without depending on wall-clock time. `staleMs` of 0 resends every pending relay.
+     */
+    retransmitPendingRelays(staleMs?: number): void;
+    /** Every blob reference still reachable from live records on the server. */
+    getLiveBlobRefs(): Promise<BlobRef[]>;
+    /**
+     * Shut down the server and close all sessions.
+     */
+    close(): Promise<void>;
+}
+
 /**
  * Options for creating a test network.
  */
@@ -247,13 +314,26 @@ interface TestNetworkOptions {
     blobStorage?: boolean;
     /** Adjudicate untrusted client operations on the server before materialization. */
     validateOperation?: _korajs_server.OperationValidator;
+    /** Devices use the beta.12 pairwise pipeline (`experimental.legacyMerge`). */
+    legacyMerge?: boolean;
+    /**
+     * The server's store (SQLite, Postgres). Defaults to a fresh memory store. The
+     * network closes it.
+     */
+    serverStore?: _korajs_server.ServerStore;
+    /** Every device encrypts its sync traffic with this shared key material. */
+    encryption?: TestDeviceEncryption;
+    /** The sync server's encryption policy. */
+    serverEncryption?: _korajs_server.KoraSyncServerConfig['encryption'];
+    /** Every device store's local `maxOperationBytes` (RT-86). */
+    deviceMaxOperationBytes?: number;
 }
 /**
  * A test network with a server and multiple devices.
  */
 interface TestNetwork {
     /** The test server */
-    server: TestServer;
+    server: TestServer<_korajs_server.ServerStore>;
     /** All devices in the network */
     devices: TestDevice[];
     /** Temporary directory for DB files */
@@ -410,4 +490,4 @@ declare function createTransportMetrics(): {
     wrapTransport(pair: TransportPair): TransportPair;
 };
 
-export { type CollectionDifference, type ConvergenceResult, type FieldDifference, type MixedTestDeviceConfig, type TestAuthBinding, TestDevice, type TestDeviceOptions, type TestNetwork, type TestNetworkOptions, TestServer, type TestServerOptions, type TestTransferMetrics, type TransportPair, checkConvergence, createMixedTestNetwork, createTestAuthBinding, createTestNetwork, createTransportMetrics, expectConverged, expectConvergedEventually, wrapTransportPairWithProtobufWire, wrapTransportPairWithServerClock };
+export { type CollectionDifference, type ConvergenceResult, type FieldDifference, type MixedTestDeviceConfig, type TestAuthBinding, TestDevice, type TestDeviceEncryption, type TestDeviceOptions, type TestDeviceServer, type TestNetwork, type TestNetworkOptions, TestServer, type TestServerOptions, type TestTransferMetrics, type TransportPair, checkConvergence, createMixedTestNetwork, createTestAuthBinding, createTestNetwork, createTransportMetrics, expectConverged, expectConvergedEventually, wrapTransportPairWithProtobufWire, wrapTransportPairWithServerClock };

package/dist/index.d.ts

@@ -1,84 +1,27 @@
-import * as _korajs_server from '@korajs/server';
-import { ServerTransport, MemoryServerStore, OperationValidator } from '@korajs/server';
-import { SchemaDefinition, OperationTransform, Operation, BlobRef, KoraEventEmitter, VersionVector } from '@korajs/core';
 import * as _korajs_sync from '@korajs/sync';
-import { SyncTransport, SyncEngine, ChaosConfig } from '@korajs/sync';
+import { SyncTransport, SyncEncryptionConfig, SyncEngine, ChaosConfig } from '@korajs/sync';
 export { ChaosConfig, ChaosTransport } from '@korajs/sync';
-import { ContentAddressedBlobStore, Store, MemoryBlobStore, CollectionAccessor, BlobManifest, ReceiveBlobResult } from '@korajs/store';
+import * as _korajs_server from '@korajs/server';
+import { ServerTransport, ServerStore, MemoryServerStore, KoraSyncServerConfig, OperationValidator, KoraSyncServer } from '@korajs/server';
+import { KoraEventEmitter, SchemaDefinition, OperationTransform, BlobRef, VersionVector, Operation } from '@korajs/core';
+import { Store, MemoryBlobStore, CollectionAccessor, BlobManifest, ReceiveBlobResult, ContentAddressedBlobStore } from '@korajs/store';
 import { AuthSyncBinding, AuthSyncState } from '@korajs/core/bindings';
 
-/**
- * A linked client/server transport pair, as consumed by {@link TestDevice}.
- */
-interface TransportPair {
-    client: SyncTransport;
-    serverTransport: ServerTransport;
+/** What a device needs from its server: a way to open a session on it. */
+interface TestDeviceServer {
+    handleConnection(transport: _korajs_server.ServerTransport): string;
 }
 /**
- * Wraps a transport pair so that every sync message exchanged between the two
- * ends is encoded to protobuf bytes and decoded back — a faithful stand-in for
- * a real network hop that uses the protobuf wire format.
- *
- * Both directions are wrapped, so operations, handshakes, batches, and acks all
- * travel as bytes rather than shared object references.
- *
- * @param pair - The underlying (in-memory) transport pair to wrap
- * @returns A transport pair that routes messages through the protobuf codec
+ * End-to-end encryption of a test device's sync traffic. Devices that must read each
+ * other's operations share the passphrase AND the key-derivation salt (shared key
+ * distribution, ENC-1, is not built yet).
  */
-declare function wrapTransportPairWithProtobufWire(pair: TransportPair): TransportPair;
-
-/**
- * In-memory test server wrapping KoraSyncServer with MemoryServerStore.
- * Handles client connections via memory transports.
- */
-interface TestServerOptions {
-    /** Handshake schema version advertised by the server. Defaults to `schema.version`. */
-    schemaVersion?: number;
-    /** Inclusive client schema versions accepted at handshake. */
-    supportedSchemaVersions?: {
-        min: number;
-        max: number;
-    };
-    /** Transform accepted legacy operations into the server schema before validation. */
-    operationTransforms?: OperationTransform[];
-    /** Enable central blob storage: the server persists and serves uploaded blob bytes. */
-    blobStorage?: boolean;
-    /** Adjudicate untrusted client operations before materialization. */
-    validateOperation?: OperationValidator;
+interface TestDeviceEncryption {
+    config: SyncEncryptionConfig;
+    salt: Uint8Array;
+    /** PBKDF2 iterations (lower in tests for speed). */
+    iterations?: number;
 }
-declare class TestServer {
-    readonly store: MemoryServerStore;
-    /** The server's central blob store, present when `blobStorage` was enabled. */
-    readonly blobStore: ContentAddressedBlobStore | null;
-    private readonly syncServer;
-    constructor(schema: SchemaDefinition, options?: TestServerOptions);
-    /**
-     * Register a client connection transport with the server.
-     * Returns the session ID assigned by the server.
-     */
-    handleConnection(transport: ServerTransport): string;
-    /**
-     * Get all operations stored on the server.
-     */
-    getAllOperations(): Operation[];
-    /**
-     * Get the number of connected clients.
-     */
-    getConnectionCount(): number;
-    /**
-     * Retransmit relay batches connected clients have not acknowledged. Lets a test
-     * deterministically trigger the redelivery that the server also runs on a timer,
-     * without depending on wall-clock time. `staleMs` of 0 resends every pending relay.
-     */
-    retransmitPendingRelays(staleMs?: number): void;
-    /** Every blob reference still reachable from live records on the server. */
-    getLiveBlobRefs(): Promise<BlobRef[]>;
-    /**
-     * Shut down the server and close all sessions.
-     */
-    close(): Promise<void>;
-}
-
 /**
  * Options for creating a TestDevice.
  */
@@ -88,7 +31,7 @@ interface TestDeviceOptions {
     /** Schema definition */
     schema: SchemaDefinition;
     /** Test server to connect to */
-    server: TestServer;
+    server: TestDeviceServer;
     /** Transport factory — creates a linked client/server transport pair */
     createTransportPair: () => {
         client: SyncTransport;
@@ -98,8 +41,35 @@ interface TestDeviceOptions {
     tmpDir: string;
     /** Client handshake schema version. Defaults to `schema.version`. */
     syncSchemaVersion?: number;
-    /** Transforms applied to inbound operations before local apply. */
+    /** Schema transforms: the store folds every operation's view (transforms at fold time). */
     operationTransforms?: OperationTransform[];
+    /** The store's local `maxOperationBytes` (RT-86). Default: the store default (256 KiB). */
+    maxOperationBytes?: number;
+    /** A pinned store node id (`StoreConfig.nodeId`), as `createKoraAuthSync` sets the device id. */
+    nodeId?: string;
+    /** What the device does with records that leave its scope. Defaults to the engine default ('retain'). */
+    scopeExit?: 'retain' | 'retract';
+    /**
+     * The signed-in user, as an auth-aware app knows it (RT-42). When set, the store binds
+     * its node to that user at open and on {@link TestDevice.authChanged}, and the sync
+     * engine never uploads another user's node on this user's session.
+     */
+    principal?: () => string | null;
+    /**
+     * Let the sync engine reconnect on its own, as over a real WebSocket: a `connect()`
+     * after the session closed opens a new transport pair to the server. Off by default
+     * (a closed pair stays closed until the next {@link TestDevice.sync}).
+     */
+    reconnectable?: boolean;
+    /**
+     * Run the device on the beta.12 pairwise pipeline (`experimental.legacyMerge`)
+     * instead of the W7 fold. Used by the comparison harness.
+     */
+    legacyMerge?: boolean;
+    /** Encrypt sync traffic end to end (protocol v2 envelope). */
+    encryption?: TestDeviceEncryption;
+    /** Upload batch size of the sync engine (default: the engine's). */
+    batchSize?: number;
 }
 /**
  * A virtual device in a test network.
@@ -116,12 +86,18 @@ declare class TestDevice {
     readonly blobStore: MemoryBlobStore;
     private readonly schema;
     private readonly server;
+    private readonly encryption;
+    private readonly batchSize;
+    private encryptor;
     private readonly mergeEngine;
     private readonly createTransportPair;
     private readonly adapter;
     private readonly dbPath;
     private readonly syncSchemaVersion;
     private readonly operationTransforms;
+    private readonly scopeExit;
+    private readonly principal;
+    private readonly reconnectable;
     private applyPipeline;
     private syncEngine;
     private blobChunkProvider;
@@ -134,6 +110,11 @@ declare class TestDevice {
      * Open the store (must be called before sync or collection operations).
      */
     open(): Promise<void>;
+    /**
+     * The signed-in user changed (RT-42), as an auth binding reports it: like createApp,
+     * end the live session and bind the store to the new user before the next write.
+     */
+    authChanged(): Promise<void>;
     /**
      * Connect to the test server and perform initial sync.
      * If already connected, flushes any pending operations.
@@ -225,6 +206,92 @@ declare class TestDevice {
     private waitForPendingOps;
 }
 
+/**
+ * A linked client/server transport pair, as consumed by {@link TestDevice}.
+ */
+interface TransportPair {
+    client: SyncTransport;
+    serverTransport: ServerTransport;
+}
+/**
+ * Wraps a transport pair so that every sync message exchanged between the two
+ * ends is encoded to protobuf bytes and decoded back — a faithful stand-in for
+ * a real network hop that uses the protobuf wire format.
+ *
+ * Both directions are wrapped, so operations, handshakes, batches, and acks all
+ * travel as bytes rather than shared object references.
+ *
+ * @param pair - The underlying (in-memory) transport pair to wrap
+ * @returns A transport pair that routes messages through the protobuf codec
+ */
+declare function wrapTransportPairWithProtobufWire(pair: TransportPair): TransportPair;
+
+/**
+ * In-memory test server wrapping KoraSyncServer with MemoryServerStore.
+ * Handles client connections via memory transports.
+ */
+interface TestServerOptions<S extends ServerStore = MemoryServerStore> {
+    /**
+     * The server store (SQLite, Postgres, a memory store with options). Defaults to a
+     * fresh {@link MemoryServerStore}. Await {@link TestServer.ready} before use: the
+     * schema is set asynchronously.
+     */
+    store?: S;
+    /** End-to-end encryption policy of the sync server (protocol v2). */
+    encryption?: KoraSyncServerConfig['encryption'];
+    /** Handshake schema version advertised by the server. Defaults to `schema.version`. */
+    schemaVersion?: number;
+    /** Inclusive client schema versions accepted at handshake. */
+    supportedSchemaVersions?: {
+        min: number;
+        max: number;
+    };
+    /** Transform accepted legacy operations into the server schema before validation. */
+    operationTransforms?: OperationTransform[];
+    /** Enable central blob storage: the server persists and serves uploaded blob bytes. */
+    blobStorage?: boolean;
+    /** Adjudicate untrusted client operations before materialization. */
+    validateOperation?: OperationValidator;
+}
+declare class TestServer<S extends ServerStore = MemoryServerStore> {
+    readonly store: S;
+    /** Resolves once the store has the schema (needed before a SQL store is used). */
+    readonly ready: Promise<void>;
+    /** The server's central blob store, present when `blobStorage` was enabled. */
+    readonly blobStore: ContentAddressedBlobStore | null;
+    private readonly syncServer;
+    constructor(schema: SchemaDefinition, options?: TestServerOptions<S>);
+    /**
+     * Register a client connection transport with the server.
+     * Returns the session ID assigned by the server.
+     */
+    handleConnection(transport: ServerTransport): string;
+    /**
+     * Get all operations stored on the server.
+     */
+    getAllOperations(): Operation[];
+    /** The trusted server-side write API (route context): writes authored by the server node. */
+    getKoraContext(): ReturnType<KoraSyncServer['getKoraContext']>;
+    /** The node ids the server's stores fold with and advertise in the handshake. */
+    get authoritativeNodeIds(): string[];
+    /**
+     * Get the number of connected clients.
+     */
+    getConnectionCount(): number;
+    /**
+     * Retransmit relay batches connected clients have not acknowledged. Lets a test
+     * deterministically trigger the redelivery that the server also runs on a timer,
+     * without depending on wall-clock time. `staleMs` of 0 resends every pending relay.
+     */
+    retransmitPendingRelays(staleMs?: number): void;
+    /** Every blob reference still reachable from live records on the server. */
+    getLiveBlobRefs(): Promise<BlobRef[]>;
+    /**
+     * Shut down the server and close all sessions.
+     */
+    close(): Promise<void>;
+}
+
 /**
  * Options for creating a test network.
  */
@@ -247,13 +314,26 @@ interface TestNetworkOptions {
     blobStorage?: boolean;
     /** Adjudicate untrusted client operations on the server before materialization. */
     validateOperation?: _korajs_server.OperationValidator;
+    /** Devices use the beta.12 pairwise pipeline (`experimental.legacyMerge`). */
+    legacyMerge?: boolean;
+    /**
+     * The server's store (SQLite, Postgres). Defaults to a fresh memory store. The
+     * network closes it.
+     */
+    serverStore?: _korajs_server.ServerStore;
+    /** Every device encrypts its sync traffic with this shared key material. */
+    encryption?: TestDeviceEncryption;
+    /** The sync server's encryption policy. */
+    serverEncryption?: _korajs_server.KoraSyncServerConfig['encryption'];
+    /** Every device store's local `maxOperationBytes` (RT-86). */
+    deviceMaxOperationBytes?: number;
 }
 /**
  * A test network with a server and multiple devices.
  */
 interface TestNetwork {
     /** The test server */
-    server: TestServer;
+    server: TestServer<_korajs_server.ServerStore>;
     /** All devices in the network */
     devices: TestDevice[];
     /** Temporary directory for DB files */
@@ -410,4 +490,4 @@ declare function createTransportMetrics(): {
     wrapTransport(pair: TransportPair): TransportPair;
 };
 
-export { type CollectionDifference, type ConvergenceResult, type FieldDifference, type MixedTestDeviceConfig, type TestAuthBinding, TestDevice, type TestDeviceOptions, type TestNetwork, type TestNetworkOptions, TestServer, type TestServerOptions, type TestTransferMetrics, type TransportPair, checkConvergence, createMixedTestNetwork, createTestAuthBinding, createTestNetwork, createTransportMetrics, expectConverged, expectConvergedEventually, wrapTransportPairWithProtobufWire, wrapTransportPairWithServerClock };
+export { type CollectionDifference, type ConvergenceResult, type FieldDifference, type MixedTestDeviceConfig, type TestAuthBinding, TestDevice, type TestDeviceEncryption, type TestDeviceOptions, type TestDeviceServer, type TestNetwork, type TestNetworkOptions, TestServer, type TestServerOptions, type TestTransferMetrics, type TransportPair, checkConvergence, createMixedTestNetwork, createTestAuthBinding, createTestNetwork, createTransportMetrics, expectConverged, expectConvergedEventually, wrapTransportPairWithProtobufWire, wrapTransportPairWithServerClock };