keri-ts 2.0.1 → 2.2.0

package/esm/keri/npm/src/db/reger.js

@@ -11,10 +11,10 @@
  */
 import { b, Cigar, concatBytes, Counter, Dater, Diger, NumberPrimitive, Prefixer, Saider, SerderACDC, SerderKERI, Siger, t, Verfer, Vrsn_1_0, } from "cesr-ts";
 import { attachmentCounterPayloadQb64b, attachmentCounterQb64b, attachmentOrdinal, resolveAttachmentGvrsn, } from "../core/attachment-countering.js";
-import { DatabaseNotOpenError, DatabaseOperationError, ValidationError } from "../core/errors.js";
+import { DatabaseOperationError, ValidationError } from "../core/errors.js";
 import { RegistryRecord, RegStateRecord } from "../core/records.js";
 import { dgKey, splitOnKey } from "./core/keys.js";
-import { LMDBer } from "./core/lmdber.js";
+import { StoreOwner } from "./core/store-owner.js";
 import { Broker } from "./escrowing.js";
 import { Komer } from "./koming.js";
 import { CapturedTelReplay, UnsupportedTelReplayError, } from "./replay/tel-replay.js";
@@ -40,17 +40,9 @@ function isRecord(value) {
  * Protocol evidence uses literal KERIpy `Reger` subkeys; observer receipt
  * evidence remains separate from local issuer publication state.
  */
-export class Reger extends LMDBer {
-    constructor(options = {}) {
-        const compat = options.compat ?? false;
-        super(options, {
-            tailDirPath: Reger.TailDirPath,
-            cleanTailDirPath: "keri/clean/reg",
-            altTailDirPath: compat ? Reger.CompatAltTailDirPath : Reger.AltTailDirPath,
-            altCleanTailDirPath: compat ? ".keri/clean/reg" : ".tufa/clean/reg",
-            tempPrefix: Reger.TempPrefix,
-            maxNamedDBs: Reger.MaxNamedDBs,
-        });
+export class Reger extends StoreOwner {
+    constructor() {
+        super(...arguments);
         Object.defineProperty(this, "registries", {
             enumerable: true,
             configurable: true,
@@ -241,97 +233,97 @@ export class Reger extends LMDBer {
     }
     /** Open the root LMDB environment and bind the KERIpy `Reger` subdb surface. */
     *reopen(options = {}) {
-        const opened = yield* super.reopen(options);
+        const opened = yield* this.store.reopen(options);
         if (!opened) {
             return false;
         }
         try {
-            this.tvts = new BytesSuber(this, { subkey: "tvts." });
-            this.tels = new CesrOnSuber(this, {
+            this.tvts = new BytesSuber(this.store, { subkey: "tvts." });
+            this.tels = new CesrOnSuber(this.store, {
                 subkey: "tels.",
                 ctor: Diger,
             });
-            this.ancs = new CatCesrSuber(this, {
+            this.ancs = new CatCesrSuber(this.store, {
                 subkey: "ancs.",
                 ctor: [NumberPrimitive, Diger],
             });
-            this.baks = new IoDupSuber(this, { subkey: "baks." });
-            this.tibs = new CesrDupSuber(this, {
+            this.baks = new IoDupSuber(this.store, { subkey: "baks." });
+            this.tibs = new CesrDupSuber(this.store, {
                 subkey: "tibs.",
                 ctor: Siger,
             });
-            this.oots = new OnIoDupSuber(this, { subkey: "oots" });
-            this.twes = new OnIoDupSuber(this, { subkey: "twes" });
-            this.taes = new OnIoDupSuber(this, { subkey: "taes" });
-            this.tets = new CesrSuber(this, {
+            this.oots = new OnIoDupSuber(this.store, { subkey: "oots" });
+            this.twes = new OnIoDupSuber(this.store, { subkey: "twes" });
+            this.taes = new OnIoDupSuber(this.store, { subkey: "taes" });
+            this.tets = new CesrSuber(this.store, {
                 subkey: "tets.",
                 ctor: Dater,
             });
-            this.states = new Komer(this, {
+            this.states = new Komer(this.store, {
                 subkey: "stts.",
                 recordClass: RegStateRecord,
             });
-            this.creds = new SerderSuber(this, {
+            this.creds = new SerderSuber(this.store, {
                 subkey: "creds.",
                 ctor: SerderACDC,
             });
-            this.cancs = new CatCesrSuber(this, {
+            this.cancs = new CatCesrSuber(this.store, {
                 subkey: "cancs.",
                 ctor: [Prefixer, NumberPrimitive, Diger],
             });
-            this.spsgs = new CesrIoSetSuber(this, {
+            this.spsgs = new CesrIoSetSuber(this.store, {
                 subkey: "ssgs.",
                 ctor: Siger,
             });
-            this.spcgs = new CatCesrIoSetSuber(this, {
+            this.spcgs = new CatCesrIoSetSuber(this.store, {
                 subkey: "scgs.",
                 ctor: [Verfer, Cigar],
             });
-            this.saved = new CesrSuber(this, {
+            this.saved = new CesrSuber(this.store, {
                 subkey: "saved.",
                 ctor: Saider,
             });
-            this.issus = new CesrDupSuber(this, {
+            this.issus = new CesrDupSuber(this.store, {
                 subkey: "issus.",
                 ctor: Saider,
             });
-            this.subjs = new CesrDupSuber(this, {
+            this.subjs = new CesrDupSuber(this.store, {
                 subkey: "subjs.",
                 ctor: Saider,
             });
-            this.schms = new CesrDupSuber(this, {
+            this.schms = new CesrDupSuber(this.store, {
                 subkey: "schms.",
                 ctor: Saider,
             });
-            this.mre = new CesrSuber(this, { subkey: "mre.", ctor: Dater });
-            this.mce = new CesrSuber(this, { subkey: "mce.", ctor: Dater });
-            this.mse = new CesrSuber(this, { subkey: "mse.", ctor: Dater });
-            this.txnsb = new Broker(this, "txn.");
-            this.regs = new Komer(this, {
+            this.mre = new CesrSuber(this.store, { subkey: "mre.", ctor: Dater });
+            this.mce = new CesrSuber(this.store, { subkey: "mce.", ctor: Dater });
+            this.mse = new CesrSuber(this.store, { subkey: "mse.", ctor: Dater });
+            this.txnsb = new Broker(this.store, "txn.");
+            this.regs = new Komer(this.store, {
                 subkey: "regs.",
                 recordClass: RegistryRecord,
             });
-            this.tpwe = new CatCesrIoSetSuber(this, {
+            this.tpwe = new CatCesrIoSetSuber(this.store, {
                 subkey: "tpwe.",
                 ctor: [Prefixer, NumberPrimitive, Diger],
             });
-            this.tmse = new CatCesrIoSetSuber(this, {
+            this.tmse = new CatCesrIoSetSuber(this.store, {
                 subkey: "tmse.",
                 ctor: [Prefixer, NumberPrimitive, Diger],
             });
-            this.tede = new CatCesrIoSetSuber(this, {
+            this.tede = new CatCesrIoSetSuber(this.store, {
                 subkey: "tede.",
                 ctor: [Prefixer, NumberPrimitive, Saider],
             });
-            this.ctel = new CesrSuber(this, {
+            this.ctel = new CesrSuber(this.store, {
                 subkey: "ctel.",
                 ctor: Saider,
             });
-            this.cmse = new SerderSuber(this, {
+            this.cmse = new SerderSuber(this.store, {
                 subkey: "cmse.",
                 ctor: SerderACDC,
             });
-            this.ccrd = new SerderSuber(this, {
+            this.ccrd = new SerderSuber(this.store, {
                 subkey: "ccrd.",
                 ctor: SerderACDC,
             });
@@ -372,7 +364,11 @@ export class Reger extends LMDBer {
     /** Capture one TEL extent without body reads; each reader releases its cursor before yielding. */
     replay(pre, { gvrsn = Vrsn_1_0, genusify = false } = {}) {
         let end = null;
-        for (const entry of this.tels.sdb.getRange({ start: b(`${pre}.${"f".repeat(32)}`), reverse: true, limit: 1 })) {
+        for (const entry of this.store.scan(this.tels.sdb, {
+            start: b(`${pre}.${"f".repeat(32)}`),
+            reverse: true,
+            limit: 1,
+        })) {
             const [prefix, ordinal] = splitOnKey(entry.key);
             if (t(prefix) === pre)
                 end = ordinal;
@@ -497,68 +493,10 @@ export class Reger extends LMDBer {
         return sources;
     }
 }
-Object.defineProperty(Reger, "TailDirPath", {
-    enumerable: true,
-    configurable: true,
-    writable: true,
-    value: "keri/reg"
-});
-Object.defineProperty(Reger, "AltTailDirPath", {
-    enumerable: true,
-    configurable: true,
-    writable: true,
-    value: ".tufa/reg"
-});
-Object.defineProperty(Reger, "CompatAltTailDirPath", {
+/** Placement of this store kind. */
+Object.defineProperty(Reger, "Family", {
     enumerable: true,
     configurable: true,
     writable: true,
-    value: ".keri/reg"
+    value: { tail: "reg", maxTables: 96 }
 });
-Object.defineProperty(Reger, "TempPrefix", {
-    enumerable: true,
-    configurable: true,
-    writable: true,
-    value: "keri_reg_"
-});
-Object.defineProperty(Reger, "MaxNamedDBs", {
-    enumerable: true,
-    configurable: true,
-    writable: true,
-    value: 96
-});
-/** Transfer a ready `Reger` to its caller, closing unreturned acquisitions on failure or cancellation. */
-export function* createReger(options = {}) {
-    const reger = new Reger(options);
-    let delivered = false;
-    let failure;
-    try {
-        const opened = yield* reger.reopen(options);
-        if (!opened) {
-            throw new DatabaseNotOpenError("Failed to open Reger");
-        }
-        delivered = true;
-        return reger;
-    }
-    catch (error) {
-        failure = { error };
-        throw error;
-    }
-    finally {
-        if (!delivered) {
-            try {
-                yield* reger.close();
-            }
-            catch (error) {
-                if (failure) {
-                    // deno-lint-ignore no-unsafe-finally -- Preserve the operation failure alongside shutdown failure.
-                    throw new AggregateError([failure.error, error], "Database acquisition and close failed", {
-                        cause: failure.error,
-                    });
-                }
-                // deno-lint-ignore no-unsafe-finally -- A shutdown failure must propagate.
-                throw error;
-            }
-        }
-    }
-}

package/esm/keri/npm/src/db/replay/witness-replay.js

@@ -53,33 +53,15 @@ export class CapturedWitnessReplay {
         __classPrivateFieldSet(this, _CapturedWitnessReplay_db, db, "f");
         Object.freeze(this);
     }
-    /** Copy one duplicate through the pinned binary seek branch; the facade never leaves this synchronous read. */
-    readDuplicate(key, start) {
-        const db = __classPrivateFieldGet(this, _CapturedWitnessReplay_db, "f").kels.sdb;
-        if (db.encoding !== "binary")
-            throw new DatabaseOperationError("Witness replay requires binary KEL rows");
-        // Pinned lmdb-js 3.5.3 dereferences encoder.writeKey before its binary-value seek branch.
-        // This private read facade supplies that missing object without mutating the borrowed DB.
-        const seek = Object.create(db);
-        seek.encoder = db.encoder ?? {};
-        const rows = seek.getValues(key, { start, limit: 1 })[Symbol.iterator]();
-        try {
-            const row = rows.next();
-            return row.done ? undefined : new Uint8Array(row.value);
-        }
-        finally {
-            rows.return?.();
-        }
-    }
     /** Seek after one physical insertion proem, closing every cursor before hydration or yield. */
     *[(_CapturedWitnessReplay_db = new WeakMap(), Symbol.iterator)]() {
         const prefix = b(this.pre);
         let next = this.from, start, bucketDone = false;
         while (next <= this.end) {
             const key = onKey(prefix, next);
-            const value = bucketDone ? undefined : this.readDuplicate(key, start);
+            const value = bucketDone ? undefined : __classPrivateFieldGet(this, _CapturedWitnessReplay_db, "f").seekVal(__classPrivateFieldGet(this, _CapturedWitnessReplay_db, "f").kels.sdb, key, start);
             if (!value) {
-                const keys = __classPrivateFieldGet(this, _CapturedWitnessReplay_db, "f").kels.sdb.getKeys({ start: key, exclusiveStart: true, limit: 1 })[Symbol.iterator]();
+                const keys = __classPrivateFieldGet(this, _CapturedWitnessReplay_db, "f").scanKeys(__classPrivateFieldGet(this, _CapturedWitnessReplay_db, "f").kels.sdb, { start: key, exclusiveStart: true, limit: 1 })[Symbol.iterator]();
                 let following;
                 try {
                     const row = keys.next();

package/esm/keri/npm/src/db/store-lock.js

@@ -0,0 +1,150 @@
+/**
+ * Single-writer lock for a browser store identity.
+ *
+ * `WebDBer` holds a snapshot of its persisted rows taken at open, so two tabs
+ * writing the same identity would each overwrite the other's commits. `indexedDbOpener`
+ * takes this lock in its first store's `reopen`, before anything loads, and holds it
+ * until its last store of the identity closes; `acquireStoreLock` is public for hosts
+ * that compose stores their own way.
+ */
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _StoreLockGroup_entries;
+import { AppError } from "../core/errors.js";
+/** Another tab, worker or window holds the store; `key`, `storeName` and `storeBase` support a UI message. */
+export class StoreLockHeldError extends AppError {
+    constructor(key, storeName, storeBase) {
+        super(`Store ${JSON.stringify(storeName ?? "")} is already open in another tab or window`);
+        Object.defineProperty(this, "key", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: key
+        });
+        Object.defineProperty(this, "storeName", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: storeName
+        });
+        Object.defineProperty(this, "storeBase", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: storeBase
+        });
+    }
+}
+/** `navigator.locks` is absent (insecure context or old engine), so single-writer cannot be enforced. */
+export class StoreLockUnsupportedError extends AppError {
+    constructor() {
+        super("Web Locks API unavailable; refusing to open the store without a single-writer lock");
+    }
+}
+/**
+ * The lock name for a store identity. It matches `IndexedDbPersistence`'s database
+ * naming minus the family, so one lock covers every store family of the identity.
+ */
+export function storeLockKey(identity) {
+    return `keri-ts:store:${JSON.stringify([identity.base ?? "", identity.name ?? "", identity.temp ? "temp" : "durable"])}`;
+}
+/**
+ * Take the exclusive lock for `identity` without waiting.
+ *
+ * @throws StoreLockHeldError when another holder has it.
+ * @throws StoreLockUnsupportedError when no lock manager exists; never proceeds unlocked.
+ */
+export async function acquireStoreLock(identity, options = {}) {
+    const locks = options.locks === undefined
+        ? globalThis.navigator?.locks
+        : options.locks;
+    if (!locks)
+        throw new StoreLockUnsupportedError();
+    const key = storeLockKey(identity);
+    let letGo;
+    const held = new Promise((resolve) => letGo = resolve);
+    let done;
+    const acquired = await new Promise((resolve, reject) => {
+        done = locks.request(key, { mode: "exclusive", ifAvailable: true }, (lock) => {
+            resolve(lock !== null);
+            return lock === null ? undefined : held;
+        });
+        done.catch(reject);
+    });
+    if (!acquired)
+        throw new StoreLockHeldError(key, identity.name, identity.base);
+    return {
+        key,
+        release: () => {
+            letGo();
+            return done.then(() => { });
+        },
+    };
+}
+/**
+ * Reference-counted store locks for one opener: every store of an identity shares
+ * one lock, taken by the first reference and released by the last.
+ */
+export class StoreLockGroup {
+    constructor(options = {}) {
+        Object.defineProperty(this, "options", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: options
+        });
+        _StoreLockGroup_entries.set(this, new Map());
+    }
+    /**
+     * Take a reference, acquiring the lock if no other store of the identity holds it.
+     *
+     * @throws StoreLockHeldError when another holder has the identity.
+     * @throws StoreLockUnsupportedError when no lock manager exists.
+     */
+    async acquire(identity) {
+        const key = storeLockKey(identity);
+        let entry = __classPrivateFieldGet(this, _StoreLockGroup_entries, "f").get(key);
+        while (entry?.releasing) {
+            await entry.releasing;
+            entry = __classPrivateFieldGet(this, _StoreLockGroup_entries, "f").get(key);
+        }
+        if (!entry) {
+            entry = { refs: 0, lock: acquireStoreLock(identity, this.options) };
+            __classPrivateFieldGet(this, _StoreLockGroup_entries, "f").set(key, entry);
+        }
+        const mine = entry;
+        mine.refs++;
+        try {
+            await mine.lock;
+        }
+        catch (error) {
+            mine.refs--;
+            if (__classPrivateFieldGet(this, _StoreLockGroup_entries, "f").get(key) === mine)
+                __classPrivateFieldGet(this, _StoreLockGroup_entries, "f").delete(key);
+            throw error;
+        }
+        let released = false;
+        return {
+            release: async () => {
+                if (released)
+                    return;
+                released = true;
+                if (--mine.refs > 0)
+                    return;
+                const lock = await mine.lock;
+                mine.releasing = lock.release();
+                try {
+                    await mine.releasing;
+                }
+                finally {
+                    if (__classPrivateFieldGet(this, _StoreLockGroup_entries, "f").get(key) === mine)
+                        __classPrivateFieldGet(this, _StoreLockGroup_entries, "f").delete(key);
+                }
+            },
+        };
+    }
+}
+_StoreLockGroup_entries = new WeakMap();

package/esm/keri/npm/src/db/subing.js

@@ -90,7 +90,7 @@ export class SuberBase {
             value: void 0
         });
         this.db = db;
-        this.sdb = this.db.openDB(subkey, dupsort);
+        this.sdb = this.db.openTable(subkey, { dupsort });
         this.sep = sep;
         this.verify = verify;
     }

package/esm/keri/npm/src/npm/db-indexeddb.browser.js

@@ -0,0 +1,2 @@
+/** npm subpath entrypoint for `keri-ts/db/indexeddb`. */
+export * from "../db/indexeddb.js";

package/esm/keri/npm/src/npm/db-indexeddb.js

@@ -0,0 +1,3 @@
+/** npm subpath entrypoint for `keri-ts/db/indexeddb`. */
+import "../_dnt.polyfills.js";
+export * from "../db/indexeddb.js";

package/esm/keri/npm/src/npm/db-lmdb.js

@@ -0,0 +1,3 @@
+/** npm subpath entrypoint for `keri-ts/db/lmdb`. */
+import "../_dnt.polyfills.js";
+export * from "../db/lmdb.js";

package/esm/keri/npm/src/npm/db.browser.js

@@ -0,0 +1,2 @@
+/** npm subpath entrypoint for `keri-ts/db`. */
+export * from "../db/index.js";

package/esm/keri/npm/src/npm/index.browser.js

@@ -0,0 +1,9 @@
+/**
+ * npm package root entrypoint.
+ *
+ * Boundary rule:
+ * - root/default imports remain browser-safe
+ * - runtime and LMDB-backed storage move to explicit subpaths
+ */
+export * from "../library/index.js";
+export { BUILD_METADATA, DISPLAY_VERSION, PACKAGE_VERSION, } from "../version.js";

package/esm/keri/npm/src/npm/runtime-node.js

@@ -0,0 +1,3 @@
+/** npm subpath entrypoint for `keri-ts/runtime/node`. */
+import "../_dnt.polyfills.js";
+export * from "../runtime/node.js";

package/esm/keri/npm/src/npm/runtime-web.browser.js

@@ -0,0 +1,2 @@
+/** npm subpath entrypoint for `keri-ts/runtime/web`. */
+export * from "../runtime/web.js";

package/esm/keri/npm/src/npm/runtime-web.js

@@ -0,0 +1,3 @@
+/** npm subpath entrypoint for `keri-ts/runtime/web`. */
+import "../_dnt.polyfills.js";
+export * from "../runtime/web.js";

package/esm/keri/npm/src/npm/runtime.browser.js

@@ -0,0 +1,2 @@
+/** npm subpath entrypoint for `keri-ts/runtime`. */
+export * from "../runtime/index.js";

package/esm/keri/npm/src/runtime/index.js

@@ -1,5 +1,6 @@
 /**
- * Supported non-browser-safe KERI operations and data contracts.
+ * Supported KERI operations and data contracts that need no host sockets or
+ * files. TCP transport and the local-file reader live in `keri-ts/runtime/node`.
  *
  * This curated surface serves library users and Tufa composition. Private
  * continuation state, handler installation, reply-slot bookkeeping and internal
@@ -14,17 +15,17 @@ export { Reactor, } from "../app/protocol/reactor.js";
 export { abortable, rethrowCleanupFailure, } from "../app/runtime/abortable.js";
 export { createAgentRuntime, runAgentRuntime, runAgentRuntimeUntil, runtimeOobiConverged, settleMailboxPollBatch, settleRuntimeIngress, } from "../app/runtime/agent-runtime.js";
 export { cueDo, processCuesOnce, } from "../app/runtime/cue-runtime.js";
-export { chunkBytes, collectBytes, fileBytes, } from "../app/transport/byte-source.js";
+export { chunkBytes, collectBytes, } from "../app/transport/byte-source.js";
 export { CesrHttpRefusal, postCesr, requestFrame, } from "../app/transport/cesr-egress.js";
 export { buildCesrRequest, buildCesrStreamRequest, CESR_ATTACHMENT_HEADER, CESR_CONTENT_TYPE, CESR_DESTINATION_HEADER, isCesrContentType, isMultipartFormContentType, KERIPY_CESR_JSON_CONTENT_TYPE, MULTIPART_CONTENT_TYPE, readCesrRequestBytes, readMailboxAdminRequest, readRequiredCesrRequestBytes, requestBytes, } from "../app/transport/cesr-http.js";
 export { FetchHttpClient, } from "../app/transport/http-client.js";
-export { socketBytes, } from "../app/transport/socket-source.js";
-export { TCPMessenger, } from "../app/transport/tcp-messenger.js";
-export { openTcpConnection, sendCesrTcp, sendCesrTcpFrame, sendCesrTcpSocket, streamCesrTcp, writeCesrTcpSocket, } from "../app/transport/tcp-egress.js";
+export { requireTcpDialer } from "../app/transport/tcp-dialer.js";
 export { TransportError } from "../app/transport/transport-error.js";
 // Controller state, credentials and protocol operations.
-export { evaluateChain } from "../acdc/chaining.js";
-export { decodePublicKey, deriveRoot, Dhke, generateKeyPair, } from "../acdc/dhking.js";
+export { RegistryAuthor } from "../acdc/authoring.js";
+export { DEFAULT_GRANT_WALK, evaluateChain, } from "../acdc/chaining.js";
+export { BaserDerivedUpdateStore, MemoryDerivedUpdateStore, RegistryCustody, } from "../acdc/custody.js";
+export { decodePublicKey, deriveRoot, Dhke, generateKeyPair, grantTransactionId, } from "../acdc/dhking.js";
 export { RegistryRoot, RootDeferred, rootExn, RootRefused, RootUnverified, } from "../acdc/salting.js";
 export { Unblind } from "../acdc/unblinding.js";
 export { Oobiery, oobiRequestExn, } from "../app/bootstrap/oobiery.js";
@@ -36,26 +37,34 @@ export { EssrRecipient, } from "../app/exchanges/essr.js";
 export { createExchangeMessage, sendExchangeMessage, } from "../app/exchanges/exchange-messaging.js";
 export { Exchanger, RouteRefuser, } from "../app/exchanges/exchanging.js";
 export { findVerifiedChallengeResponse, generateChallengeWords, markChallengeVerified, parseChallengeWords, } from "../app/identity/challenging.js";
-export { Configer, createConfiger, } from "../app/identity/configing.js";
 export { Anchorer, } from "../app/identity/delegating.js";
 export { endpointRoleAccepted, loadAcceptedEndpointRole, proposeGroupEndpointRole, } from "../app/identity/endpoint-roleing.js";
-export { acceptedEventReplayMessage, createHabery, Hab, Habery, } from "../app/identity/habbing.js";
+export { beginDelegation, completeEvent, DELEGATION_WAIT_TIMEOUT_MS, delegationStatus, eventStatus, receiptEvent, waitForDelegation, } from "../app/identity/event-completion.js";
+export { acceptedEventReplayMessage, Hab, Habery, openHabery, } from "../app/identity/habbing.js";
 export { Algos, Manager, } from "../app/identity/keeping.js";
 export { Organizer, } from "../app/identity/organizing.js";
+export { IpexAdmitter } from "../app/ipex/ipex-admitting.js";
 export { ipexExnBody, prepareIpexExn } from "../app/ipex/ipex-building.js";
 export { credentialPresentationArtifacts, credentialSaidFromGrant, ipexCredentialAdmit, ipexCredentialGrant, processCredentialPresentationArtifacts, storedGrantArtifacts, } from "../app/ipex/ipex-credentialing.js";
+export { anchorExchange as anchorIpexExchange, exchangeWire, IpexDiscloser, } from "../app/ipex/ipex-discloser.js";
 export { walkIpexGraph } from "../app/ipex/ipex-graph.js";
 export { approveStoredMultisigIpexWrappers, prepareAcdcV2GroupIpex, publishInitialGroupIpex, requireAcdcV2GroupUse, sendCompletedGroupIpex, } from "../app/ipex/ipex-grouping.js";
 export { acceptedRegistryEvidence, authenticateIpexNode, issuedNodeVerdict, } from "../app/ipex/ipex-node-authentication.js";
+export { ipexGrantWalk } from "../app/ipex/ipex-v2.js";
 export { IPEX_GRANT_ROUTE, IPEX_ROUTES, ipexAdmitExn, ipexAgreeExn, ipexApplyExn, ipexGrantExn, ipexOfferExn, ipexSpurnExn, } from "../app/ipex/ipexing.js";
+export { KEL_PUBLISHER_PACING, KEL_PUBLISHER_SWEEP_TOCKS, KEL_PUBLISHER_TOCK_MS, KelPublisher, kelPublisherDo, } from "../app/mailbox/kel-publisher.js";
+export { addMailbox, completeGroupMailbox, completeMailboxAdmin, mailboxAdminUrl, mailboxStatus, proposeGroupMailbox, removeMailbox, requireMailboxEndpointUrl, waitForMailboxState, } from "../app/mailbox/mailbox-admin.js";
 export { MailboxDirector, } from "../app/mailbox/mailbox-director.js";
 export { MailboxPoller, } from "../app/mailbox/mailbox-poller.js";
 export { consumeMailboxSse, parseMailboxSse, readMailboxSseBody, } from "../app/mailbox/mailbox-sse.js";
 export { endpointBasePath, fetchEndpointUrls, mailboxPollEndpoints, mailboxQueryTopics, mailboxTopicKey, preferredUrl, resolveHostedEndpointPath, } from "../app/mailbox/mailboxing.js";
-export { groupSigningMembers, groupWitnesserSelection, isLocalGroupHab, latestGroupContribution, localGroupMember, } from "../app/multisig/group-members.js";
+export { Counselor, DEFAULT_FALLBACK_AFTER_MS, RECEIPT_BACKOFF_MS, waitForGroupEvent, } from "../app/multisig/counseling.js";
+export { groupElectedMember, groupSigningMembers, groupWitnesser, groupWitnesserSelection, isLocalGroupHab, latestGroupContribution, localGroupMember, } from "../app/multisig/group-members.js";
 export { Multiplexor, MULTISIG_ROUTES, multisigExn, multisigExnBody, multisigInceptExn, multisigInteractExn, multisigIpexProofExn, multisigIssueExn, multisigQueryExn, multisigRegistryInceptExn, multisigRevokeExn, multisigRotateExn, multisigRpyExn, } from "../app/multisig/grouping.js";
 export { signGroupMessage } from "../app/multisig/multisig-messaging.js";
 export { approveAcdcV2Registry, publishAcdcV2Registry } from "../app/multisig/multisig-workflows.js";
+export { approveGroupProposal, dismissGroupProposal, findGroupProposal, listGroupProposals, } from "../app/multisig/proposals.js";
+export { proposeCredentialIssue, proposeCredentialRegistry, proposeCredentialRevocation, proposeGroupInception, proposeGroupInteraction, proposeGroupRotation, proposeRegistryEvent, settleProposedRotation, } from "../app/multisig/proposing.js";
 export { Notifier, } from "../app/notifications/notifying.js";
 export { Signal, Signaler, } from "../app/notifications/signaling.js";
 export { RawRecord } from "../core/records.js";
@@ -72,6 +81,8 @@ export { matchesRegistrySeal, vet, vetBinds, vetBlind, vetBound, } from "../acdc
 /** ACDC v2 services are distinct from the legacy VDR Regery/Registry exports. */
 export { createRegery as createAcdcV2Regery, Regery as AcdcV2Regery, Registry as AcdcV2Registry, } from "../acdc/registraring.js";
 export { validateSchema as validateAcdcSchema } from "../acdc/scheming.js";
+export { deliverRegistryRoots, replicateRootCopies, replicateRootCopy, resealRootCopies, RootResealBudgetMs, } from "../app/credentials/root-replicating.js";
+export { RootReplicator, } from "../app/credentials/root-replicator.js";
 export { publishPendingTel } from "../app/credentials/tel-publishing.js";
 export { Deck } from "../core/deck.js";
 export { AppError, DatabaseError, DatabaseKeyError, DatabaseNotOpenError, DatabaseOperationError, InvalidPathNameError, PathError, ValidationError, } from "../core/errors.js";
@@ -80,7 +91,7 @@ export { exchange } from "../core/exchange/protocol-exchanging.js";
 export { Kevery, } from "../core/kel/eventing.js";
 export { Kever, } from "../core/kel/kever.js";
 export { consoleLogger, getLogLevel, LOG_LEVELS, noopLogger, setLogLevel, } from "../core/logger.js";
-export { Kramer } from "../core/mailbox/kraming.js";
+export { DEFAULT_KRAM_CACHES, Kramer } from "../core/mailbox/kraming.js";
 export { CREDENTIAL_MAILBOX_TOPIC, DELEGATE_MAILBOX_TOPIC, normalizeMbxTopicCursor, OOBI_MAILBOX_TOPIC, RECEIPT_MAILBOX_TOPIC, REPLAY_MAILBOX_TOPIC, REPLY_MAILBOX_TOPIC, } from "../core/mailbox/mailbox-topics.js";
 export { incept, interact, query, reply, rotate } from "../core/protocol-eventing.js";
 export { messageAttachmentGroups, messagize } from "../core/protocol-serialization.js";
@@ -104,7 +115,42 @@ export { makeNowIso8601, timestampMicros, } from "../time/mod.js";
 export { HTTPMessenger } from "../app/transport/http-messenger.js";
 export { HTTPStreamMessenger } from "../app/transport/http-stream-messenger.js";
 export { messengerFrom, streamMessengerFrom } from "../app/transport/messengering.js";
-export { TCPStreamMessenger } from "../app/transport/tcp-stream-messenger.js";
 export { systemClock } from "../app/runtime/runtime-clock.js";
 export { AnchorQuerier, KeyStateNoticer, LogQuerier, SeqNoQuerier } from "../app/queries/querying.js";
 export { WitnessInquisitor } from "../app/queries/witness-inquisitor.js";
+// Library OOBI resolution and key-state/anchor queries (begin, status, wait).
+export { beginOobi, OOBI_RESOLVE_TIMEOUT_MS, oobiStatus, resolveOobi, waitForOobi, } from "../app/bootstrap/oobi-resolving.js";
+export { anchorQueryStatus, beginAnchorQuery, beginKeyStateQuery, QUERY_TIMEOUT_MS, queryAnchor, queryKeyState, requireQueryRequester, } from "../app/queries/query-workflows.js";
+export { MemoryChangeSink, observeUntil, signalerChangeSink, } from "../app/runtime/workflow-contract.js";
+// Library poll-and-settle for credential IPEX arrivals (settle, status, wait).
+export { ipexArrivalStatus, ipexBaseline, MailboxIntakeTally, settleStoredGrants, waitForIpexArrival, } from "../app/mailbox/ipex-arrival.js";
+// Runtime-owned group IPEX messages (a group holder's Admit): propose, approve, status, wait.
+export { abandonGroupIpex, approveGroupIpex, GROUP_IPEX_COLLECT_MS, GROUP_IPEX_RETRY_BOUND_MS, GroupIpexOperations, groupIpexProposals, groupIpexStatus, proposeGroupAdmit, proposeGroupIpex, proposeGroupIpexAfter, waitForGroupIpex, } from "../app/ipex/group-ipex.js";
+export { RETRY_BASE_MS, RETRY_MAX_MS, RetryBackoff } from "../app/runtime/retry-backoff.js";
+// Runtime-owned group DH issuance: consent calls for the custodian and the members, election read, proof export.
+export { approveGroupIssuance, approveGroupIssuanceExchange, followGroupIssuanceProof, groupIssuanceElection, groupIssuanceProof, groupIssuanceProposals, prepareGroupIssuance, proposeGroupIssuance, } from "../app/ipex/group-issuance.js";
+// Runtime-owned DH issuance operations, single-signature and group (begin, process, status, wait, abandon).
+export { abandonIssuance, admitIssuance, approveIssuanceExchange, beginIssuance, deliverIssuanceAdmit, ISSUANCE_RETRY_BOUND_MS, ISSUANCE_SWEEP_MS, IssuanceOperations, issuanceStatus, pendingGroupGrants, pendingIssuanceGrants, posterDelivery, prepareIssuanceGrant, proposeIssuance, rebuildIssuanceAdmit, waitForIssuance, } from "../app/ipex/issuance.js";
+export { ADMIT_DELIVERY_TIMEOUT_MS, admitAndDeliver, receiveIssuance, } from "../app/ipex/receive-issuance.js";
+// Runtime-owned single-signature IPEX presentation operations (present, process, status, wait, abandon).
+export { abandonPresentation, deliverPreparedGrant, preparePresentation, present, PRESENTATION_RETRY_BOUND_MS, PresentationOperations, presentationStatus, proposeGroupPresentation, resendPresentation, waitForPresentation, } from "../app/ipex/presenting.js";
+export { pendingPresentations } from "../app/ipex/pending-presentations.js";
+// Exact public Grant files for a group presentation (prepare, resume), and the delivery outbox with retry.
+export { preparePresentationFile, resumePresentationFile, } from "../app/ipex/presentation-files.js";
+export { DeliveryOutbox, } from "../app/runtime/delivery-outbox.js";
+// Runtime-owned single-signature IPEX Unblind operations (request, approve, process, status, wait, abandon).
+export { abandonUnblinding, answerUnblind, requestUnblind, UnblindingOperations, unblindingStatus, waitForUnblinding, } from "../app/ipex/unblinding-workflow.js";
+// Fixed-tock doers.
+export { doEvery } from "../app/runtime/doing.js";
+// Operations owners composed by the runtime.
+export { OWNER_PACING, OWNER_SWEEP_TOCKS, OWNER_TOCK_MS, OwnerHealth, } from "../app/runtime/operation-owners.js";
+// Library delegator approval (list, approve, status, wait, dismiss).
+export { approveDelegation, DELEGATION_APPROVAL_TIMEOUT_MS, delegationApprovalStatus, dismissDelegation, listPendingDelegations, proposeGroupDelegationApproval, requestDelegatedEvent, settleDelegationApproval, waitForDelegationAnchor, waitForDelegationApproval, waitForPendingDelegation, } from "../app/identity/delegation-approval.js";
+// Library TEL completion status/waits and challenge respond/status/wait.
+export { REGISTRY_WAIT_POLL_MS, registryEventRef, registryEventStatus, settleRegistryEvent, waitForRegistryEvent, } from "../app/credentials/registry-settling.js";
+export { issuedCredentialStatus, telEventStatus, waitForIssuedCredential, waitForTelEvent, } from "../app/credentials/tel-completion.js";
+export { challengeStatus, respondToChallenge, waitForChallengeResponse, } from "../app/identity/challenging.js";
+// Library legacy IPEX conversation (apply, offer, agree, spurn; status and wait).
+export { ipexExchangeStatus, requireIpexPrior, requireIpexSender, sendIpexAgree, sendIpexApply, sendIpexOffer, sendIpexSpurn, waitForIpexExchange, } from "../app/ipex/ipex-conversation.js";
+// Library legacy IPEX grant, admit and credential settle.
+export { requireAdmittableGrant, sendIpexAdmit, sendIpexGrant, settleGrantCredential, } from "../app/ipex/ipex-granting.js";

package/esm/keri/npm/src/runtime/node.js

@@ -0,0 +1,14 @@
+/**
+ * Host surface for Node and Deno: TCP sockets, local files and config files.
+ *
+ * `keri-ts/runtime` stays free of `node:` modules and the `Deno` global so it
+ * can be bundled for a browser. Hosts with sockets import the TCP messengers,
+ * the dialer-equipped HTTP client and the file reader from here.
+ */
+export { Configer, createConfiger } from "../app/identity/configing.js";
+export { fileBytes } from "../app/transport/file-bytes.js";
+export { NodeHttpClient, nodeTcpDialer } from "../app/transport/node-http-client.js";
+export { socketBytes, } from "../app/transport/socket-source.js";
+export { openTcpConnection, sendCesrTcp, sendCesrTcpFrame, sendCesrTcpSocket, streamCesrTcp, writeCesrTcpSocket, } from "../app/transport/tcp-egress.js";
+export { TCPMessenger, } from "../app/transport/tcp-messenger.js";
+export { TCPStreamMessenger } from "../app/transport/tcp-stream-messenger.js";