keri-ts 2.0.1 → 2.2.0

package/types/runtime/web/output-barrier.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Output barrier for browser compositions (ADR-0015 durability rule 6).
+ *
+ * A browser store acknowledges a commit before it is durable, so a response,
+ * receipt or query that depends on that commit must not leave the page until
+ * the composition's persistence queue has flushed. Otherwise a crash or tab
+ * close could leave a peer holding evidence of state this wallet then forgot.
+ */
+import { type Operation } from "effection";
+import type { HttpClient } from "../../app/transport/http-client.js";
+import { AppError } from "../../core/errors.js";
+/** The persistence queue failed, so the request was not sent. The queue's failure is the cause. */
+export declare class OutputBarrierError extends AppError {
+}
+/**
+ * Wrap `inner` so no request, finite or streaming, reaches it before `flushed` resolves.
+ *
+ * `flushed` is evaluated per request, so each request waits for everything
+ * committed before it was made. Pass `() => opener.queue.flushed()` from the
+ * composition's `WebStoreOpener`: the queue is shared by every store family, so
+ * it covers all commits, which one store's `flushed()` would not.
+ *
+ * A rejected flush fails the call with `OutputBarrierError` and sends nothing.
+ * Cancelling the caller cancels only the wait.
+ *
+ * The wrapper has no `tcp` dialer: a dialer would be a network path around the
+ * barrier, and browsers have none.
+ */
+export declare function barrierHttpClient(inner: HttpClient, flushed: () => Operation<void> | Promise<void>): HttpClient;
+//# sourceMappingURL=output-barrier.d.ts.map

package/types/runtime/web/output-barrier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-barrier.d.ts","sourceRoot":"","sources":["../../../src/runtime/web/output-barrier.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAqD,MAAM,oCAAoC,CAAC;AACxH,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,mGAAmG;AACnG,qBAAa,kBAAmB,SAAQ,QAAQ;CAAG;AAEnD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAC7C,UAAU,CAkBZ"}

package/types/runtime/web/persistent-storage.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Persistent-storage request for browser wallets.
+ *
+ * Keys live only in IndexedDB, and Safari may evict script-writable storage
+ * that was not granted persistence, so a wallet should ask and surface a refusal.
+ */
+/** Outcome of a persistence request. */
+export interface PersistentStorageResult {
+    /** The origin's storage is persistent now. */
+    persisted: boolean;
+    /** The engine exposes `navigator.storage.persist`. False means nothing was asked. */
+    supported: boolean;
+    /** Bytes the origin may use, when the engine reports it. */
+    quota?: number;
+    /** Bytes the origin uses, when the engine reports it. */
+    usage?: number;
+}
+/** The part of `StorageManager` this module uses, so tests can inject a fake. */
+export interface PersistentStorageManager {
+    persist?(): Promise<boolean>;
+    persisted?(): Promise<boolean>;
+    estimate?(): Promise<{
+        quota?: number;
+        usage?: number;
+    }>;
+}
+/**
+ * Ask the engine to make this origin's storage persistent, then report the outcome.
+ * Never throws: an absent API reports `supported: false`, and a failing or
+ * refusing one reports `persisted: false`. Call it from a user gesture where the
+ * engine requires one.
+ *
+ * @param storage Defaults to `navigator.storage`.
+ */
+export declare function requestPersistentStorage(storage?: PersistentStorageManager | undefined): Promise<PersistentStorageResult>;
+//# sourceMappingURL=persistent-storage.d.ts.map

package/types/runtime/web/persistent-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistent-storage.d.ts","sourceRoot":"","sources":["../../../src/runtime/web/persistent-storage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wCAAwC;AACxC,MAAM,WAAW,uBAAuB;IACtC,8CAA8C;IAC9C,SAAS,EAAE,OAAO,CAAC;IACnB,qFAAqF;IACrF,SAAS,EAAE,OAAO,CAAC;IACnB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,iFAAiF;AACjF,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,QAAQ,CAAC,IAAI,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1D;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,GAAE,wBAAwB,GAAG,SAAyC,GAC5E,OAAO,CAAC,uBAAuB,CAAC,CAWlC"}

package/types/runtime/web.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Browser host surface: the output barrier, single-writer store lock and
+ * persistence request that any browser composition needs.
+ *
+ * Mirrors `keri-ts/runtime/node` for the browser. Nothing here may reach
+ * `node:` modules, sockets or the `Deno` global.
+ */
+export { acquireStoreLock, type AcquireStoreLockOptions, type StoreLock, StoreLockHeldError, storeLockKey, type StoreLockManager, StoreLockUnsupportedError, } from "../db/store-lock.js";
+export { barrierHttpClient, OutputBarrierError } from "./web/output-barrier.js";
+export { type PersistentStorageManager, type PersistentStorageResult, requestPersistentStorage, } from "./web/persistent-storage.js";
+//# sourceMappingURL=web.d.ts.map

package/types/runtime/web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/runtime/web.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,SAAS,EACd,kBAAkB,EAClB,YAAY,EACZ,KAAK,gBAAgB,EACrB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,wBAAwB,GACzB,MAAM,6BAA6B,CAAC"}

package/types/vdr/tel-publication.d.ts

@@ -37,6 +37,12 @@ export declare class TelPublication {
     published(target: TelPublicationTarget): void;
     /** Completion is durable local dissemination, not merely accepted TEL storage or peer acknowledgement. */
     complete(pre: string, sn?: number): boolean;
+    /**
+     * Durable progress of one TEL event, read without side effects: waiting for the
+     * issuer's accepted anchor (`tmse.`), for the anchoring event's witness receipts
+     * (`tpwe.`), for local publication (`tede.`), complete (`ctel.`), or untracked.
+     */
+    progress(pre: string, sn?: number): "awaitingAnchor" | "awaitingReceipts" | "awaitingPublication" | "complete" | null;
     /** Reverify by unique roster index; multiple signatures from one witness never fill another's slot. */
     private allReceipts;
     /** Resolve the signed TEL seal from the exact accepted historical issuer event. */

package/types/vdr/tel-publication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tel-publication.d.ts","sourceRoot":"","sources":["../../src/vdr/tel-publication.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAA4D,KAAK,UAAU,EAAU,MAAM,SAAS,CAAC;AAE5G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAG5C,8FAA8F;AAC9F,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAgBD;;;;;GAKG;AACH,qBAAa,cAAc;IAEb,QAAQ,CAAC,EAAE,EAAE,KAAK;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK;IADrD,+EAA+E;gBAC1D,EAAE,EAAE,KAAK,EAAW,KAAK,EAAE,KAAK;IAErD,8FAA8F;IAC9F,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI;IA0BlD,oFAAoF;IACpF,OAAO,IAAI,IAAI;IAiBf,oFAAoF;IACpF,eAAe,IAAI,oBAAoB,EAAE;IAOzC,sGAAsG;IACtG,SAAS,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI;IAS7C,gGAAgG;IAChG,mBAAmB,IAAI,oBAAoB,EAAE;IAO7C,0GAA0G;IAC1G,SAAS,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI;IAW7C,0GAA0G;IAC1G,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,SAAI,GAAG,OAAO;IAItC,uGAAuG;IACvG,OAAO,CAAC,WAAW;IAkBnB,mFAAmF;IACnF,OAAO,CAAC,MAAM;IAuBd,wFAAwF;IACxF,OAAO,CAAC,IAAI;IAIZ,yEAAyE;IACzE,OAAO,CAAC,IAAI;CAOb"}
+{"version":3,"file":"tel-publication.d.ts","sourceRoot":"","sources":["../../src/vdr/tel-publication.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAA4D,KAAK,UAAU,EAAU,MAAM,SAAS,CAAC;AAE5G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAG5C,8FAA8F;AAC9F,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAgBD;;;;;GAKG;AACH,qBAAa,cAAc;IAEb,QAAQ,CAAC,EAAE,EAAE,KAAK;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK;IADrD,+EAA+E;gBAC1D,EAAE,EAAE,KAAK,EAAW,KAAK,EAAE,KAAK;IAErD,8FAA8F;IAC9F,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI;IA0BlD,oFAAoF;IACpF,OAAO,IAAI,IAAI;IAiBf,oFAAoF;IACpF,eAAe,IAAI,oBAAoB,EAAE;IAOzC,sGAAsG;IACtG,SAAS,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI;IAS7C,gGAAgG;IAChG,mBAAmB,IAAI,oBAAoB,EAAE;IAO7C,0GAA0G;IAC1G,SAAS,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI;IAW7C,0GAA0G;IAC1G,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,SAAI,GAAG,OAAO;IAItC;;;;OAIG;IACH,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,EAAE,SAAI,GACL,gBAAgB,GAAG,kBAAkB,GAAG,qBAAqB,GAAG,UAAU,GAAG,IAAI;IAWpF,uGAAuG;IACvG,OAAO,CAAC,WAAW;IAkBnB,mFAAmF;IACnF,OAAO,CAAC,MAAM;IAuBd,wFAAwF;IACxF,OAAO,CAAC,IAAI;IAIZ,yEAAyE;IACzE,OAAO,CAAC,IAAI;CAOb"}

package/types/version.d.ts

@@ -6,9 +6,9 @@
  * `src/version.ts` files by hand; edit this template instead.
  */
 /** Package semantic version copied from the owning package manifest. */
-export declare const PACKAGE_VERSION = "2.0.1";
+export declare const PACKAGE_VERSION = "2.2.0";
 /** Optional build metadata stamp injected by release/CI workflows. */
-export declare const BUILD_METADATA = "build.28.a12ad3cd8a7ed98328dc17124bfc8146c4a97b7e";
+export declare const BUILD_METADATA = "build.30.f1b0e618d5d1dd02f57fc0b4b3447acfe0535799";
 /** User-facing version string with build metadata appended when present. */
 export declare const DISPLAY_VERSION: string;
 //# sourceMappingURL=version.d.ts.map

package/esm/keri/npm/src/acdc/relating.js

@@ -1,59 +0,0 @@
-/** KEL-backed ACDC relations; follows KERIpy 84301a9f's acdc.relating without verifier-owned writes. */
-import { ValidationError } from "../core/errors.js";
-import { dgKey } from "../db/core/keys.js";
-/**
- * Resolve whether `pre` delegates upward to `delpre`, at any depth.
- * Each hop requires its fixed dip, the delegator's inception permission and an
- * accepted approval. Identity equality belongs to the caller's DI2I widening.
- * Cached first-seen approvals survive superseding; uncached lookup searches the
- * last accepted KEL events, matching Python's deliberate history asymmetry.
- * Unlike Python, lookup never repairs aess: accepted KEL intake owns those writes.
- */
-export function delegationRelation(db, pre, delpre) {
-    const seen = new Set();
-    while (!seen.has(pre)) {
-        seen.add(pre);
-        const kever = db.getKever(pre);
-        if (!kever)
-            return { kind: "pending", reason: `Missing delegate KEL ${pre}.` };
-        const parent = kever.delpre;
-        if (!parent)
-            return { kind: "refused", reason: `Delegation chain ends at ${pre}.` };
-        if (!db.getKever(parent))
-            return { kind: "pending", reason: `Missing delegator KEL ${parent}.` };
-        // Configuration is fixed at inception, including after delegator rotations.
-        const inceptionSaid = db.kels.getLast(parent, 0);
-        const inception = inceptionSaid ? db.getEvtSerder(parent, inceptionSaid) : null;
-        if (!inception)
-            return { kind: "pending", reason: `Missing delegator inception ${parent}.` };
-        if (inception.traits.includes("DND"))
-            return { kind: "refused", reason: `Delegator ${parent} carries DND.` };
-        const dip = db.getEvtSerder(pre, pre);
-        if (!dip)
-            return { kind: "pending", reason: `Missing delegated inception ${pre}.` };
-        // A cached approval names accepted history, not the current event at its ordinal.
-        const source = db.aess.get(dgKey(pre, pre));
-        if (source) {
-            const digest = source[1].qb64;
-            if (!db.fons.get(dgKey(parent, digest))) {
-                return { kind: "pending", reason: `Missing accepted delegation approval ${parent}:${digest}.` };
-            }
-            const approval = db.getEvtSerder(parent, digest);
-            if (!approval)
-                throw new ValidationError(`Missing first-seen delegation event ${parent}:${digest}.`);
-            // Protected intake can retain a raw hint. It neither grants authority nor vetoes a later genuine approval.
-            if (!approval.eventSeals.some(seal => seal.i.qb64 === pre && seal.s.numh === dip.snh && seal.d.qb64 === dip.said)
-                && !db.fetchLastSealingEventByEventSeal(parent, { i: pre, s: dip.snh, d: dip.said })) {
-                return { kind: "pending", reason: `Stored source does not approve delegated inception ${pre}.` };
-            }
-        }
-        else if (!db.fetchLastSealingEventByEventSeal(parent, { i: pre, s: dip.snh, d: dip.said })) {
-            return { kind: "pending", reason: `Missing delegation approval for ${pre} from ${parent}.` };
-        }
-        if (parent === delpre)
-            return { kind: "valid" };
-        pre = parent;
-    }
-    // Hash-linked inception ancestry cannot cycle; terminate corrupt local state without a protocol depth cap.
-    return { kind: "refused", reason: `Delegation chain cycles at ${pre}.` };
-}

package/esm/keri/npm/src/cli/common/tel-completion.js

@@ -1,24 +0,0 @@
-/** Finite CLI observations over the publication owner's durable facts; host workers make progress. */
-import { sleep } from "effection";
-/** Observe one exact TEL coordinate until completion or an epoch-millisecond deadline; never drive workers here. */
-export function* waitForTelPublication(publication, pre, sn, deadline) {
-    while (!publication.complete(pre, sn)) {
-        const remaining = deadline - Date.now();
-        if (remaining <= 0)
-            return false;
-        yield* sleep(Math.min(50, remaining));
-    }
-    return true;
-}
-/** Issuance additionally needs saved credential evidence; publication alone is not verifier acceptance. */
-export function* waitForIssuedCredential(publication, said, deadline) {
-    if (!(yield* waitForTelPublication(publication, said, 0, deadline)))
-        return false;
-    while (publication.reger.saved.get(said) === null) {
-        const remaining = deadline - Date.now();
-        if (remaining <= 0)
-            return false;
-        yield* sleep(Math.min(50, remaining));
-    }
-    return true;
-}

package/esm/keri/npm/src/db/baser-defaults.js

@@ -1,11 +0,0 @@
-/** Select Baser's persistent, alternate-home and temporary path conventions. */
-export function baserDefaults(compat = false) {
-    return {
-        tailDirPath: "keri/db",
-        cleanTailDirPath: "keri/clean/db",
-        altTailDirPath: compat ? ".keri/db" : ".tufa/db",
-        altCleanTailDirPath: compat ? ".keri/clean/db" : ".tufa/clean/db",
-        tempPrefix: "keri_db_",
-        maxNamedDBs: 128,
-    };
-}

package/types/acdc/relating.d.ts

@@ -1,21 +0,0 @@
-import type { Baser } from "../db/basing.js";
-/** Missing evidence can arrive; inception-fixed refusals cannot be repaired by retrying. */
-export type DelegationRelation = {
-    kind: "valid";
-} | {
-    kind: "pending";
-    reason: string;
-} | {
-    kind: "refused";
-    reason: string;
-};
-/**
- * Resolve whether `pre` delegates upward to `delpre`, at any depth.
- * Each hop requires its fixed dip, the delegator's inception permission and an
- * accepted approval. Identity equality belongs to the caller's DI2I widening.
- * Cached first-seen approvals survive superseding; uncached lookup searches the
- * last accepted KEL events, matching Python's deliberate history asymmetry.
- * Unlike Python, lookup never repairs aess: accepted KEL intake owns those writes.
- */
-export declare function delegationRelation(db: Baser, pre: string, delpre: string): DelegationRelation;
-//# sourceMappingURL=relating.d.ts.map

package/types/acdc/relating.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"relating.d.ts","sourceRoot":"","sources":["../../src/acdc/relating.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAG7C,4FAA4F;AAC5F,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,kBAAkB,CA0C7F"}

package/types/cli/common/tel-completion.d.ts

@@ -1,8 +0,0 @@
-/** Finite CLI observations over the publication owner's durable facts; host workers make progress. */
-import { type Operation } from "effection";
-import type { TelPublication } from "../../vdr/tel-publication.js";
-/** Observe one exact TEL coordinate until completion or an epoch-millisecond deadline; never drive workers here. */
-export declare function waitForTelPublication(publication: TelPublication, pre: string, sn: number, deadline: number): Operation<boolean>;
-/** Issuance additionally needs saved credential evidence; publication alone is not verifier acceptance. */
-export declare function waitForIssuedCredential(publication: TelPublication, said: string, deadline: number): Operation<boolean>;
-//# sourceMappingURL=tel-completion.d.ts.map

package/types/cli/common/tel-completion.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tel-completion.d.ts","sourceRoot":"","sources":["../../../src/cli/common/tel-completion.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,OAAO,EAAE,KAAK,SAAS,EAAS,MAAM,WAAW,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,oHAAoH;AACpH,wBAAiB,qBAAqB,CACpC,WAAW,EAAE,cAAc,EAC3B,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,GACf,SAAS,CAAC,OAAO,CAAC,CAOpB;AAED,2GAA2G;AAC3G,wBAAiB,uBAAuB,CACtC,WAAW,EAAE,cAAc,EAC3B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,SAAS,CAAC,OAAO,CAAC,CAQpB"}

package/types/db/baser-defaults.d.ts

@@ -1,5 +0,0 @@
-/** Canonical Baser layout shared by normal loading and command target checks. */
-import type { LMDBerDefaults } from "./core/lmdber.js";
-/** Select Baser's persistent, alternate-home and temporary path conventions. */
-export declare function baserDefaults(compat?: boolean): Partial<LMDBerDefaults>;
-//# sourceMappingURL=baser-defaults.d.ts.map

package/types/db/baser-defaults.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"baser-defaults.d.ts","sourceRoot":"","sources":["../../src/db/baser-defaults.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,MAAM,UAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,CASrE"}