@serfab/cadre-core 1.18.0 → 1.19.1

package/dist/strand-database.js

@@ -5,6 +5,7 @@ import { bootstrapFounderMembership } from './strand-membership-writer.js';
 import { strandMemberKeyPair } from './strand-member-key.js';
 import { StrandCommitRecord } from './strand-commit-durability.js';
 import { TableWatchRegistry } from './table-change-watch.js';
+import { discardQueued, StrandOfflineReport } from './strand-offline.js';
 const log = debug('sereus:cadre:strand-db');
 const timing = debug('sereus:cadre:timing');
 /**
@@ -31,6 +32,8 @@ export class StrandDatabase {
         this.createEmptyCollections = null;
         this.initialized = false;
         this.unsubscribeCommits = null;
+        this.offlineQueue = null;
+        this.offlineReport = null;
         /** Subscriptions handed out by {@link watchTables}. */
         this.tableWatches = new TableWatchRegistry();
         this.config = config;
@@ -54,6 +57,7 @@ export class StrandDatabase {
             this.founderSApp();
         }
         log('Initializing StrandDatabase for strand: %s (%s)', sid, sAppConfig ? `sApp: ${sAppConfig.id} v${sAppConfig.version}` : 'storage replica');
+        const offline = this.config.offline && { journal: await this.config.offline.journal() };
         this.db = new Database();
         // Delegate to the shared composition. The node is injected, so:
         //  - `connectToStrand` never creates or stops a node; `StrandInstanceManager`
@@ -74,20 +78,32 @@ export class StrandDatabase {
             libp2pNode: this.config.libp2pNode,
             coordinatedRepo: this.config.coordinatedRepo,
             enableCache: true,
+            offline,
         });
         this.shutdownStrand = result.shutdown;
         this.resolvedTransactor = result.transactor;
         this.createEmptyCollections = result.createEmptyCollections;
         // Before the founder bootstrap, so its commits are reported like any other.
         this.subscribeToCommits(result);
+        this.followOffline(result);
         timing('[strandDb:%s] connectToStrand: %dms (hydrated tables=%d, indexes=%d)', sid, Math.round(performance.now() - t0), result.hydrated?.tables ?? 0, result.hydrated?.indexes ?? 0);
         // Founder-only: write the one-time membership bootstrap now that the schema is
         // applied (connectToStrand has returned). A throw here propagates out of
         // initialize(), and the caller closes this half-built database (close() runs the
         // composition's shutdown). Joiners skip this — their rows arrive via sync.
+        // NOTE: a bootstrap with rows to write while `hydrate` restored queued transactions is refused
+        // (`StrandOfflineQueueBusyError`), failing every build, so that queue could never drain. Not
+        // reachable today: rows are written only while the founding is incomplete (Member empty, or no
+        // Manager and none retired), and an incomplete founding fails the build before the database is
+        // ever published for the app to queue in. If a founder is ever published with its founding
+        // incomplete, skip the bootstrap here while the queue is non-empty and run it once the queue drains.
         if (this.config.founder === true) {
             await this.bootstrapFounder();
         }
+        // After `hydrate` restored the queue and after the founder bootstrap (its `Strand` writes are
+        // network-acknowledged in either mode); before the first-sync probe, so in offline mode a read
+        // the cohort cannot answer is served from this machine's copy there as it is to the app.
+        this.applyOfflineMode();
         this.initialized = true;
         log('StrandDatabase for strand %s initialized successfully', sid);
     }
@@ -99,6 +115,39 @@ export class StrandDatabase {
             unsubscribeHeld();
         };
     }
+    followOffline(result) {
+        const { offline } = this.config;
+        if (!offline) {
+            return;
+        }
+        this.offlineQueue = result.offline ?? null;
+        this.offlineReport = new StrandOfflineReport(this.config.strandId, offline, result);
+    }
+    /**
+     * Put the queue in the strand's current mode ({@link StrandDatabaseOffline.mode}). It sets the
+     * acknowledgement of transactions begun from now on; an open one keeps the one it began with.
+     * No-op without a queue, and before {@link initialize} has composed one (it applies the mode itself).
+     */
+    applyOfflineMode() {
+        const queue = this.offlineQueue;
+        if (!queue || !this.config.offline) {
+            return;
+        }
+        if (this.config.offline.mode() === 'offline') {
+            queue.enter();
+        }
+        else {
+            queue.exit();
+        }
+    }
+    /**
+     * The database was handed to the app (`StrandInstanceManager.publishDatabase`): report the
+     * queue's state, since restored transactions' `queued` statuses were delivered before anything
+     * subscribed, and an `App` schema apply still waiting for the queue.
+     */
+    reportPublished() {
+        this.offlineReport?.published();
+    }
     /**
      * Run the founder membership bootstrap against the freshly-composed strand DB.
      *
@@ -188,6 +237,10 @@ export class StrandDatabase {
      */
     async attachAppSchema(sAppConfig) {
         this.ensureInitialized();
+        // NOTE: unlike the connect-time apply (`applyAppSchemaAfterQueue`), this is not deferred behind
+        // the offline queue: a replica writes no app transactions, so no queued transaction wrote an
+        // `App` table and `QueuedEntriesBlockSchemaChangeError` cannot refuse it. If a replica ever
+        // writes app rows offline, route this through the deferral instead of throwing.
         await applyAppSchema(this.db, sAppConfig.schema);
         this.config.sAppConfig = sAppConfig;
         log('StrandDatabase for strand %s attached sApp %s v%s', this.config.strandId, sAppConfig.id, sAppConfig.version);
@@ -222,6 +275,37 @@ export class StrandDatabase {
         this.ensureInitialized();
         return this.commits.get(transactionId);
     }
+    /**
+     * The strand connection's offline queue (docs/strands.md → "Offline mode"), or `undefined` on a
+     * node without `strandOffline`. The mode is set through `CadreNode.setStrandOfflineMode`, which
+     * outlives this database; listeners taken here die with it, as {@link watchTables} subscriptions do.
+     */
+    get offline() {
+        this.ensureInitialized();
+        return this.offlineQueue ?? undefined;
+    }
+    /**
+     * Whether this database runs the `App` schema its launch was given. `'waiting-for-queue'` while
+     * queued transactions hold the apply back, so `StrandInstance.sAppInfo` names a version whose new
+     * tables or columns are not here yet; check this before relying on them.
+     */
+    appSchemaState() {
+        this.ensureInitialized();
+        return this.offlineReport?.appSchemaState() ?? 'applied';
+    }
+    /**
+     * The transaction ids the offline queue lists (`entries()`, the ones a restore has not put back
+     * yet included), or `undefined` with no queue: none configured, not composed yet, or closed.
+     * Unlike {@link offline} it does not require {@link initialize} to have finished, so the manager
+     * can read a database still being built or about to close.
+     */
+    queuedTransactionIds() {
+        return this.offlineQueue?.entries().map((entry) => entry.transactionId);
+    }
+    /** {@link discardQueued} on this database's queue; `undefined` with no queue, as {@link queuedTransactionIds}. */
+    discardQueuedTransactions() {
+        return this.offlineQueue ? discardQueued(this.offlineQueue) : undefined;
+    }
     /**
      * The Optimystic transactor this strand's connection resolved to — always
      * `'network'` here, since cadre-core passes no `transactor` option and takes
@@ -243,6 +327,9 @@ export class StrandDatabase {
         // First, so an event from the closing connection reaches no app handler or table watch.
         this.unsubscribeCommits?.();
         this.unsubscribeCommits = null;
+        this.offlineReport?.release();
+        this.offlineReport = null;
+        this.offlineQueue = null;
         this.tableWatches.disposeAll();
         if (this.shutdownStrand) {
             await this.shutdownStrand();

package/dist/strand-database.js.map

@@ -1 +1 @@
-{"version":3,"file":"strand-database.js","sourceRoot":"","sources":["../src/strand-database.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAKhF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,MAAM,GAAG,GAAG,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAqD5C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,cAAc;IAYzB,YAAY,MAA4B;QAXhC,OAAE,GAAoB,IAAI,CAAC;QAC3B,mBAAc,GAA0C,IAAI,CAAC;QAC7D,uBAAkB,GAA4C,IAAI,CAAC;QACnE,2BAAsB,GAAwD,IAAI,CAAC;QAEnF,gBAAW,GAAG,KAAK,CAAC;QAEpB,uBAAkB,GAAwB,IAAI,CAAC;QACvD,uDAAuD;QACtC,iBAAY,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAGvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,kDAAkD,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACjC,6EAA6E;YAC7E,wCAAwC;YACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,GAAG,CAAC,iDAAiD,EAAE,GAAG,EACxD,UAAU,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,EAAE,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEpF,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QAEzB,gEAAgE;QAChE,8EAA8E;QAC9E,8BAA8B;QAC9B,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,EAAE;QACF,wFAAwF;QACxF,wFAAwF;QACxF,yFAAyF;QACzF,kEAAkE;QAClE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE;YAC5C,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,UAAU,EAAE,MAAM;YAC1B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;QACtC,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC;QAC5C,IAAI,CAAC,sBAAsB,GAAG,MAAM,CAAC,sBAAsB,CAAC;QAC5D,4EAA4E;QAC5E,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,sEAAsE,EAC3E,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EACvC,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;QAE/D,+EAA+E;QAC/E,yEAAyE;QACzE,iFAAiF;QACjF,2EAA2E;QAC3E,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,GAAG,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAEO,kBAAkB,CAAC,MAA0B;QACnD,MAAM,qBAAqB,GAAG,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QACrG,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,kBAAkB,GAAG,GAAG,EAAE;YAC7B,qBAAqB,EAAE,CAAC;YACxB,eAAe,EAAE,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,KAAK,CAAC,gBAAgB;QAC5B,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACnH,MAAM,MAAM,GAAG,UAAU,KAAK,GAAG,CAAC;QAClC,MAAM,0BAA0B,CAAC,IAAI,CAAC,EAAG,EAAE;YACzC,QAAQ;YACR,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;YACxB,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/F,qBAAqB,EAAE,MAAM,IAAI,gBAAgB;gBAC/C,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,YAAY;gBACpD,CAAC,CAAC,SAAS;YACb,aAAa,EAAE,MAAM,IAAI,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;YAC5F,sBAAsB,EAAE,IAAI,CAAC,sBAAuB;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,WAAW;QACjB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,uBAAuB,QAAQ,sDAAsD;gBACrF,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACK,oBAAoB,CAAC,QAAgB,EAAE,qBAAyC;QACtF,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,6CAA6C;gBACnF,gFAAgF;gBAChF,oFAAoF;gBACpF,8EAA8E;gBAC9E,uCAAuC,CACxC,CAAC;QACJ,CAAC;QACD,OAAO,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,sBAAsB,CAAC,qBAA8B;;QACzD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAA,IAAI,CAAC,MAAM,EAAC,qBAAqB,QAArB,qBAAqB,GAAK,qBAAqB,EAAC;QAC5D,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,UAAsB;QAC1C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,cAAc,CAAC,IAAI,CAAC,EAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;QACpC,GAAG,CAAC,mDAAmD,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACpH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,EAAG,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,MAAyB,EAAE,QAA6B,EAAE,OAAgC;QACpG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;OAOG;IACH,gBAAgB,CAAC,aAAqB;QACpC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,aAAa;QACX,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,kBAAmB,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,wFAAwF;QACxF,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,uFAAuF;QACvF,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,GAAG,CAAC,qCAAqC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,MAAM,CAAC,QAAQ,4CAA4C,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"strand-database.js","sourceRoot":"","sources":["../src/strand-database.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAMhF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGzE,MAAM,GAAG,GAAG,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAwE5C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,cAAc;IAczB,YAAY,MAA4B;QAbhC,OAAE,GAAoB,IAAI,CAAC;QAC3B,mBAAc,GAA0C,IAAI,CAAC;QAC7D,uBAAkB,GAA4C,IAAI,CAAC;QACnE,2BAAsB,GAAwD,IAAI,CAAC;QAEnF,gBAAW,GAAG,KAAK,CAAC;QAEpB,uBAAkB,GAAwB,IAAI,CAAC;QAC/C,iBAAY,GAAmC,IAAI,CAAC;QACpD,kBAAa,GAA+B,IAAI,CAAC;QACzD,uDAAuD;QACtC,iBAAY,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAGvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,kDAAkD,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACjC,6EAA6E;YAC7E,wCAAwC;YACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,GAAG,CAAC,iDAAiD,EAAE,GAAG,EACxD,UAAU,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,EAAE,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEpF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACxF,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QAEzB,gEAAgE;QAChE,8EAA8E;QAC9E,8BAA8B;QAC9B,0EAA0E;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,EAAE;QACF,wFAAwF;QACxF,wFAAwF;QACxF,yFAAyF;QACzF,kEAAkE;QAClE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE;YAC5C,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,UAAU,EAAE,MAAM;YAC1B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,WAAW,EAAE,IAAI;YACjB,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;QACtC,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC;QAC5C,IAAI,CAAC,sBAAsB,GAAG,MAAM,CAAC,sBAAsB,CAAC;QAC5D,4EAA4E;QAC5E,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,sEAAsE,EAC3E,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EACvC,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;QAE/D,+EAA+E;QAC/E,yEAAyE;QACzE,iFAAiF;QACjF,2EAA2E;QAC3E,+FAA+F;QAC/F,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,2FAA2F;QAC3F,qGAAqG;QACrG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;QAED,8FAA8F;QAC9F,+FAA+F;QAC/F,yFAAyF;QACzF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,GAAG,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAEO,kBAAkB,CAAC,MAA0B;QACnD,MAAM,qBAAqB,GAAG,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QACrG,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,kBAAkB,GAAG,GAAG,EAAE;YAC7B,qBAAqB,EAAE,CAAC;YACxB,eAAe,EAAE,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,MAA0B;QAC9C,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;QAC3C,IAAI,CAAC,aAAa,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACtF,CAAC;IAED;;;;OAIG;IACH,gBAAgB;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YAC7C,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,eAAe;QACb,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,KAAK,CAAC,gBAAgB;QAC5B,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACnH,MAAM,MAAM,GAAG,UAAU,KAAK,GAAG,CAAC;QAClC,MAAM,0BAA0B,CAAC,IAAI,CAAC,EAAG,EAAE;YACzC,QAAQ;YACR,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;YACxB,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/F,qBAAqB,EAAE,MAAM,IAAI,gBAAgB;gBAC/C,CAAC,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,YAAY;gBACpD,CAAC,CAAC,SAAS;YACb,aAAa,EAAE,MAAM,IAAI,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;YAC5F,sBAAsB,EAAE,IAAI,CAAC,sBAAuB;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,WAAW;QACjB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,uBAAuB,QAAQ,sDAAsD;gBACrF,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACK,oBAAoB,CAAC,QAAgB,EAAE,qBAAyC;QACtF,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,6CAA6C;gBACnF,gFAAgF;gBAChF,oFAAoF;gBACpF,8EAA8E;gBAC9E,uCAAuC,CACxC,CAAC;QACJ,CAAC;QACD,OAAO,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,sBAAsB,CAAC,qBAA8B;;QACzD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAA,IAAI,CAAC,MAAM,EAAC,qBAAqB,QAArB,qBAAqB,GAAK,qBAAqB,EAAC;QAC5D,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,UAAsB;QAC1C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,gGAAgG;QAChG,6FAA6F;QAC7F,4FAA4F;QAC5F,gFAAgF;QAChF,MAAM,cAAc,CAAC,IAAI,CAAC,EAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;QACpC,GAAG,CAAC,mDAAmD,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACpH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,EAAG,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,MAAyB,EAAE,QAA6B,EAAE,OAAgC;QACpG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;OAOG;IACH,gBAAgB,CAAC,aAAqB;QACpC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,IAAI,OAAO;QACT,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,YAAY,IAAI,SAAS,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,cAAc;QACZ,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,IAAI,SAAS,CAAC;IAC3D,CAAC;IAED;;;;;OAKG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1E,CAAC;IAED,kHAAkH;IAClH,yBAAyB;QACvB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IACH,aAAa;QACX,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,kBAAmB,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,wFAAwF;QACxF,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,uFAAuF;QACvF,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,GAAG,CAAC,qCAAqC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,MAAM,CAAC,QAAQ,4CAA4C,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;CACF"}

package/dist/strand-instance-manager.d.ts

@@ -1,5 +1,6 @@
 import type { PrivateKey } from '@libp2p/interface';
 import type { StrandCommitDurability, StrandCommitHeld } from './strand-commit-durability.js';
+import type { StrandOfflineConfig, StrandOfflineListeners, StrandOfflineMode } from './strand-offline.js';
 import { type PeerJoinBackfillConfig } from './peer-join-backfill.js';
 import { type StrandNetworkStateStore } from './strand-network-state.js';
 import { type StrandRevocationEnforcementConfig } from './strand-revocation-enforcer.js';
@@ -228,6 +229,13 @@ export interface StartStrandConfig {
      * `strand:commit-held` event. Retained and isolated like {@link onCommitDurability}.
      */
     onCommitHeld?: (event: StrandCommitHeld) => void;
+    /**
+     * Offline mode for this strand (docs/strands.md → "Offline mode"), forwarded from
+     * `CadreNodeConfig.strandOffline`, with where each database built for the launch reports its
+     * queue and its app-schema apply (`CadreNode` emits them as events). Absent: no database gets an
+     * offline queue. The mode itself is the manager's, per strand ({@link StrandInstanceManager.setOfflineMode}).
+     */
+    offline?: StrandOfflineConfig & StrandOfflineListeners;
     /**
      * Re-announce this strand's delegate peer id (`delegatePeerId` — the strand
      * node's own transport peer id) to ONE relay (`relayAddr`, a direct dial addr
@@ -409,6 +417,20 @@ export declare class StrandInstanceManager {
      * {@link releaseRuntime}, so a stop or a quiesce cancels it.
      */
     private unreachableJoinRetries;
+    /**
+     * The offline mode set per strand id ({@link setOfflineMode}); a strand absent here runs in its
+     * launch's `initialMode`. Never cleared: the mode belongs to the strand, not to one database, so
+     * it outlives hibernation, every rebuild and a stop, for as long as the process runs.
+     */
+    private offlineModes;
+    /**
+     * The transaction ids each strand's offline queue listed when its database last closed
+     * ({@link releaseRuntime}), for a leave from a hibernating strand, whose queue is then only in
+     * its journal ({@link queuedTransactionIds}). Exact while the strand hibernates: nothing drains
+     * a journal without a database. Deleted with the instance: on {@link stopStrand}, and when a
+     * {@link startStrand} fails.
+     */
+    private closedQueues;
     private stopping;
     constructor();
     /**
@@ -479,6 +501,12 @@ export declare class StrandInstanceManager {
      * {@link releaseRuntime} to close.
      */
     private buildStrandDatabase;
+    /**
+     * One build's {@link StrandDatabaseOffline}: the strand's journal, which the database resolves as
+     * it initializes (a throw or rejection fails the build), and the strand's mode, which it reads each
+     * time it applies it.
+     */
+    private offlineDatabaseConfig;
     /**
      * Whether this strand's raw store holds no block. False for a store that cannot list its
      * blocks, or whose listing fails, so such a launch probes at once.
@@ -601,8 +629,9 @@ export declare class StrandInstanceManager {
      * this removal again — the in-memory retained key is the last chance.
      *
      * Never throws. Quiet no-op for a strand that is untracked, open, or launched
-     * without a party key; a quiesced (hibernating) strand, or a strand whose write
-     * quorum is already unreachable, leaves the stale binding behind with a log —
+     * without a party key; a quiesced (hibernating) strand, a strand whose offline queue
+     * still holds transactions (the writer refuses with `StrandOfflineQueueBusyError`), or a
+     * strand whose write quorum is already unreachable, leaves the stale binding behind with a log —
      * it grants nothing today (admission is not allowlist-gated) and only
      * mis-credits diversity. The strand's own membership reconciler is stopped —
      * and its in-flight pass awaited — FIRST, so a pass that was already past its
@@ -786,6 +815,42 @@ export declare class StrandInstanceManager {
      * test of its own.
      */
     private publishDatabase;
+    /**
+     * A tracked strand's offline mode: the one last set ({@link setOfflineMode}), else its launch's
+     * `initialMode`, else `'online'`.
+     *
+     * @throws when the strand is not tracked.
+     */
+    offlineMode(strandId: string): StrandOfflineMode;
+    private currentOfflineMode;
+    /**
+     * Set a tracked strand's offline mode, for the rest of the process (see {@link offlineModes}).
+     * A live database takes it now, published or still behind the first-sync gate, for transactions
+     * begun from then on; a build in progress reads it when it applies the mode, and a hibernating
+     * strand gets it at its next build.
+     *
+     * @throws when the strand is not tracked.
+     */
+    setOfflineMode(strandId: string, mode: StrandOfflineMode): void;
+    /**
+     * The transaction ids a strand's offline queue holds: its live database's, else what its
+     * database listed when it last closed (a hibernating strand, see {@link closedQueues}), else none.
+     *
+     * NOTE: a strand this process has built no database for reads as empty, though its journal may
+     * hold transactions from an earlier run, which come back if the strand is ever attached again.
+     * If apps are found leaving strands with transactions journaled that way, read the journal here.
+     */
+    queuedTransactionIds(strandId: string): readonly string[];
+    /**
+     * Withdraw what the live database's offline queue never sent (`StrandDatabase.discardQueuedTransactions`),
+     * returning the ids it kept; `undefined` when no live database has a queue (a hibernating
+     * strand, whose queue is back once a build restores it from the journal).
+     */
+    discardQueuedTransactions(strandId: string): readonly string[] | undefined;
+    /** A strand's database: the published one, else the one still behind the first-sync gate. */
+    private liveDatabase;
+    /** Keep what a closing database's queue lists, for {@link queuedTransactionIds}; one with no queue changes nothing. */
+    private rememberQueue;
     /** Reject every {@link whenWritable} waiter for a strand that is going away. */
     private rejectWritableWaiters;
     /**

package/dist/strand-instance-manager.js

@@ -254,6 +254,20 @@ export class StrandInstanceManager {
          * {@link releaseRuntime}, so a stop or a quiesce cancels it.
          */
         this.unreachableJoinRetries = new Map();
+        /**
+         * The offline mode set per strand id ({@link setOfflineMode}); a strand absent here runs in its
+         * launch's `initialMode`. Never cleared: the mode belongs to the strand, not to one database, so
+         * it outlives hibernation, every rebuild and a stop, for as long as the process runs.
+         */
+        this.offlineModes = new Map();
+        /**
+         * The transaction ids each strand's offline queue listed when its database last closed
+         * ({@link releaseRuntime}), for a leave from a hibernating strand, whose queue is then only in
+         * its journal ({@link queuedTransactionIds}). Exact while the strand hibernates: nothing drains
+         * a journal without a database. Deleted with the instance: on {@link stopStrand}, and when a
+         * {@link startStrand} fails.
+         */
+        this.closedQueues = new Map();
         this.stopping = false;
         log('StrandInstanceManager created');
     }
@@ -360,6 +374,8 @@ export class StrandInstanceManager {
             // reads both, and a config without an instance would strand the config.
             this.instances.delete(strandId);
             this.launchConfigs.delete(strandId);
+            // The cleanup above remembered the half-built database's queue; an untracked strand keeps none.
+            this.closedQueues.delete(strandId);
             // The store this launch resolved goes with it: nothing owns it any more, and a
             // retained cache wrapper would be handed back (already retired) on a retry.
             await this.disposeStrandStorage(strandId);
@@ -783,7 +799,8 @@ export class StrandInstanceManager {
             // reconciler that would otherwise write it is disarmed (see buildStrandRuntime).
             bindFounderPeer: config.membershipReconciliation?.enabled !== false,
             onCommitDurability: config.onCommitDurability,
-            onCommitHeld: config.onCommitHeld
+            onCommitHeld: config.onCommitHeld,
+            offline: this.offlineDatabaseConfig(strandId, config.offline)
         });
         const storageRepo = node.storageRepo;
         const gate = new StrandFirstSyncGate({
@@ -856,6 +873,22 @@ export class StrandInstanceManager {
         }
         return 'built';
     }
+    /**
+     * One build's {@link StrandDatabaseOffline}: the strand's journal, which the database resolves as
+     * it initializes (a throw or rejection fails the build), and the strand's mode, which it reads each
+     * time it applies it.
+     */
+    offlineDatabaseConfig(strandId, offline) {
+        if (!offline) {
+            return undefined;
+        }
+        const { journal, initialMode: _initialMode, ...listeners } = offline;
+        return {
+            ...listeners,
+            journal: () => journal(strandId),
+            mode: () => this.currentOfflineMode(strandId, offline)
+        };
+    }
     /**
      * Whether this strand's raw store holds no block. False for a store that cannot list its
      * blocks, or whose listing fails, so such a launch probes at once.
@@ -1014,9 +1047,11 @@ export class StrandInstanceManager {
         if (gate) {
             gate.stop();
             this.firstSyncGates.delete(instance.strandId);
+            this.rememberQueue(instance.strandId, gate.database);
             await gate.database.close();
         }
         if (instance.database) {
+            this.rememberQueue(instance.strandId, instance.database);
             await instance.database.close();
             instance.database = undefined;
         }
@@ -1146,8 +1181,9 @@ export class StrandInstanceManager {
      * this removal again — the in-memory retained key is the last chance.
      *
      * Never throws. Quiet no-op for a strand that is untracked, open, or launched
-     * without a party key; a quiesced (hibernating) strand, or a strand whose write
-     * quorum is already unreachable, leaves the stale binding behind with a log —
+     * without a party key; a quiesced (hibernating) strand, a strand whose offline queue
+     * still holds transactions (the writer refuses with `StrandOfflineQueueBusyError`), or a
+     * strand whose write quorum is already unreachable, leaves the stale binding behind with a log —
      * it grants nothing today (admission is not allowlist-gated) and only
      * mis-credits diversity. The strand's own membership reconciler is stopped —
      * and its in-flight pass awaited — FIRST, so a pass that was already past its
@@ -1179,7 +1215,8 @@ export class StrandInstanceManager {
             return;
         }
         try {
-            // Background write on the app's database: never join a transaction the app has open.
+            // Background write on the app's database: never join a transaction the app has open, and
+            // never wait behind its offline queue (the writer refuses both; the catch below logs it).
             await removeMemberPeer(db, {
                 memberKeyPair: strandMemberKeyPair(config.partyMemberPrivateKey),
                 peerId
@@ -1581,12 +1618,75 @@ export class StrandInstanceManager {
         if (wasGated) {
             this.launchConfigs.get(strandId)?.onWritable?.(strandId);
         }
+        database.reportPublished();
         // Neither throws nor awaits: publishing must stay synchronous. `start()` is a no-op on an
         // enforcer already started or stopped, and the reconciler pass chains on the loop's own
         // tail, so it cannot overlap a pass already in flight.
         this.revocationEnforcers.get(strandId)?.start();
         void this.membershipReconcilers.get(strandId)?.reconcile();
     }
+    /**
+     * A tracked strand's offline mode: the one last set ({@link setOfflineMode}), else its launch's
+     * `initialMode`, else `'online'`.
+     *
+     * @throws when the strand is not tracked.
+     */
+    offlineMode(strandId) {
+        const config = this.launchConfigs.get(strandId);
+        if (!config) {
+            throw new Error(`Cannot read the offline mode of strand ${strandId}: not tracked`);
+        }
+        return this.currentOfflineMode(strandId, config.offline);
+    }
+    currentOfflineMode(strandId, offline) {
+        return this.offlineModes.get(strandId) ?? offline?.initialMode ?? 'online';
+    }
+    /**
+     * Set a tracked strand's offline mode, for the rest of the process (see {@link offlineModes}).
+     * A live database takes it now, published or still behind the first-sync gate, for transactions
+     * begun from then on; a build in progress reads it when it applies the mode, and a hibernating
+     * strand gets it at its next build.
+     *
+     * @throws when the strand is not tracked.
+     */
+    setOfflineMode(strandId, mode) {
+        const instance = this.instances.get(strandId);
+        if (!instance) {
+            throw new Error(`Cannot set the offline mode of strand ${strandId}: not tracked`);
+        }
+        this.offlineModes.set(strandId, mode);
+        this.liveDatabase(strandId)?.applyOfflineMode();
+    }
+    /**
+     * The transaction ids a strand's offline queue holds: its live database's, else what its
+     * database listed when it last closed (a hibernating strand, see {@link closedQueues}), else none.
+     *
+     * NOTE: a strand this process has built no database for reads as empty, though its journal may
+     * hold transactions from an earlier run, which come back if the strand is ever attached again.
+     * If apps are found leaving strands with transactions journaled that way, read the journal here.
+     */
+    queuedTransactionIds(strandId) {
+        return this.liveDatabase(strandId)?.queuedTransactionIds() ?? this.closedQueues.get(strandId) ?? [];
+    }
+    /**
+     * Withdraw what the live database's offline queue never sent (`StrandDatabase.discardQueuedTransactions`),
+     * returning the ids it kept; `undefined` when no live database has a queue (a hibernating
+     * strand, whose queue is back once a build restores it from the journal).
+     */
+    discardQueuedTransactions(strandId) {
+        return this.liveDatabase(strandId)?.discardQueuedTransactions();
+    }
+    /** A strand's database: the published one, else the one still behind the first-sync gate. */
+    liveDatabase(strandId) {
+        return this.instances.get(strandId)?.database ?? this.firstSyncGates.get(strandId)?.database;
+    }
+    /** Keep what a closing database's queue lists, for {@link queuedTransactionIds}; one with no queue changes nothing. */
+    rememberQueue(strandId, database) {
+        const queued = database.queuedTransactionIds();
+        if (queued !== undefined) {
+            this.closedQueues.set(strandId, queued);
+        }
+    }
     /** Reject every {@link whenWritable} waiter for a strand that is going away. */
     rejectWritableWaiters(strandId, reason) {
         const waiters = this.writableWaiters.get(strandId);
@@ -1667,6 +1767,7 @@ export class StrandInstanceManager {
             instance.status = 'stopped';
             this.instances.delete(strandId);
             this.launchConfigs.delete(strandId);
+            this.closedQueues.delete(strandId);
             // Storage is released only here — NOT in releaseRuntime, which a quiesce shares.
             await this.disposeStrandStorage(strandId);
             log('Strand %s stopped successfully', strandId);