keri-ts 2.1.0 → 2.2.1

package/esm/keri/npm/src/db/keeping.js

@@ -343,8 +343,11 @@ export class Keeper extends StoreOwner {
                 throw new DatabaseOperationError("Keeper AEID write failed");
         });
     }
-    /** Retain an immutable root under the authenticated policy, owning its commit. */
-    retainRegistryRoot(keys, root, currentAeid, encrypter, decrypter) {
+    /**
+     * Retain a root under the authenticated policy, owning its commit. Immutable unless `overwrite`, which the
+     * caller sets only for a root it has established was never used; the old root then stays until this write.
+     */
+    retainRegistryRoot(keys, root, currentAeid, encrypter, decrypter, overwrite = false) {
         if (this.readonly)
             throw new DatabaseOperationError("Cannot retain registry roots in a read-only keeper");
         if (!this.store.opened)
@@ -357,6 +360,12 @@ export class Keeper extends StoreOwner {
                 throw new DatabaseOperationError("Keeper AEID changed before registry root retention; reopen the manager");
             }
             const old = this.rroots.get(keys);
+            if (old && overwrite) {
+                if (!this.rroots.pin(keys, encrypter.encrypt({ prim: root }))) {
+                    throw new DatabaseOperationError("Keeper registry root write failed");
+                }
+                return true;
+            }
             if (old) {
                 const retained = decrypter.decrypt({ cipher: old, ctor: Salter });
                 if (retained.qb64 !== root.qb64) {

package/esm/keri/npm/src/db/store-lock.js

@@ -0,0 +1,150 @@
+/**
+ * Single-writer lock for a browser store identity.
+ *
+ * `WebDBer` holds a snapshot of its persisted rows taken at open, so two tabs
+ * writing the same identity would each overwrite the other's commits. `indexedDbOpener`
+ * takes this lock in its first store's `reopen`, before anything loads, and holds it
+ * until its last store of the identity closes; `acquireStoreLock` is public for hosts
+ * that compose stores their own way.
+ */
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _StoreLockGroup_entries;
+import { AppError } from "../core/errors.js";
+/** Another tab, worker or window holds the store; `key`, `storeName` and `storeBase` support a UI message. */
+export class StoreLockHeldError extends AppError {
+    constructor(key, storeName, storeBase) {
+        super(`Store ${JSON.stringify(storeName ?? "")} is already open in another tab or window`);
+        Object.defineProperty(this, "key", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: key
+        });
+        Object.defineProperty(this, "storeName", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: storeName
+        });
+        Object.defineProperty(this, "storeBase", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: storeBase
+        });
+    }
+}
+/** `navigator.locks` is absent (insecure context or old engine), so single-writer cannot be enforced. */
+export class StoreLockUnsupportedError extends AppError {
+    constructor() {
+        super("Web Locks API unavailable; refusing to open the store without a single-writer lock");
+    }
+}
+/**
+ * The lock name for a store identity. It matches `IndexedDbPersistence`'s database
+ * naming minus the family, so one lock covers every store family of the identity.
+ */
+export function storeLockKey(identity) {
+    return `keri-ts:store:${JSON.stringify([identity.base ?? "", identity.name ?? "", identity.temp ? "temp" : "durable"])}`;
+}
+/**
+ * Take the exclusive lock for `identity` without waiting.
+ *
+ * @throws StoreLockHeldError when another holder has it.
+ * @throws StoreLockUnsupportedError when no lock manager exists; never proceeds unlocked.
+ */
+export async function acquireStoreLock(identity, options = {}) {
+    const locks = options.locks === undefined
+        ? globalThis.navigator?.locks
+        : options.locks;
+    if (!locks)
+        throw new StoreLockUnsupportedError();
+    const key = storeLockKey(identity);
+    let letGo;
+    const held = new Promise((resolve) => letGo = resolve);
+    let done;
+    const acquired = await new Promise((resolve, reject) => {
+        done = locks.request(key, { mode: "exclusive", ifAvailable: true }, (lock) => {
+            resolve(lock !== null);
+            return lock === null ? undefined : held;
+        });
+        done.catch(reject);
+    });
+    if (!acquired)
+        throw new StoreLockHeldError(key, identity.name, identity.base);
+    return {
+        key,
+        release: () => {
+            letGo();
+            return done.then(() => { });
+        },
+    };
+}
+/**
+ * Reference-counted store locks for one opener: every store of an identity shares
+ * one lock, taken by the first reference and released by the last.
+ */
+export class StoreLockGroup {
+    constructor(options = {}) {
+        Object.defineProperty(this, "options", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: options
+        });
+        _StoreLockGroup_entries.set(this, new Map());
+    }
+    /**
+     * Take a reference, acquiring the lock if no other store of the identity holds it.
+     *
+     * @throws StoreLockHeldError when another holder has the identity.
+     * @throws StoreLockUnsupportedError when no lock manager exists.
+     */
+    async acquire(identity) {
+        const key = storeLockKey(identity);
+        let entry = __classPrivateFieldGet(this, _StoreLockGroup_entries, "f").get(key);
+        while (entry?.releasing) {
+            await entry.releasing;
+            entry = __classPrivateFieldGet(this, _StoreLockGroup_entries, "f").get(key);
+        }
+        if (!entry) {
+            entry = { refs: 0, lock: acquireStoreLock(identity, this.options) };
+            __classPrivateFieldGet(this, _StoreLockGroup_entries, "f").set(key, entry);
+        }
+        const mine = entry;
+        mine.refs++;
+        try {
+            await mine.lock;
+        }
+        catch (error) {
+            mine.refs--;
+            if (__classPrivateFieldGet(this, _StoreLockGroup_entries, "f").get(key) === mine)
+                __classPrivateFieldGet(this, _StoreLockGroup_entries, "f").delete(key);
+            throw error;
+        }
+        let released = false;
+        return {
+            release: async () => {
+                if (released)
+                    return;
+                released = true;
+                if (--mine.refs > 0)
+                    return;
+                const lock = await mine.lock;
+                mine.releasing = lock.release();
+                try {
+                    await mine.releasing;
+                }
+                finally {
+                    if (__classPrivateFieldGet(this, _StoreLockGroup_entries, "f").get(key) === mine)
+                        __classPrivateFieldGet(this, _StoreLockGroup_entries, "f").delete(key);
+                }
+            },
+        };
+    }
+}
+_StoreLockGroup_entries = new WeakMap();

package/esm/keri/npm/src/npm/db-indexeddb.browser.js

@@ -0,0 +1,2 @@
+/** npm subpath entrypoint for `keri-ts/db/indexeddb`. */
+export * from "../db/indexeddb.js";

package/esm/keri/npm/src/npm/db-indexeddb.js

@@ -0,0 +1,3 @@
+/** npm subpath entrypoint for `keri-ts/db/indexeddb`. */
+import "../_dnt.polyfills.js";
+export * from "../db/indexeddb.js";

package/esm/keri/npm/src/npm/db.browser.js

@@ -0,0 +1,2 @@
+/** npm subpath entrypoint for `keri-ts/db`. */
+export * from "../db/index.js";

package/esm/keri/npm/src/npm/index.browser.js

@@ -0,0 +1,9 @@
+/**
+ * npm package root entrypoint.
+ *
+ * Boundary rule:
+ * - root/default imports remain browser-safe
+ * - runtime and LMDB-backed storage move to explicit subpaths
+ */
+export * from "../library/index.js";
+export { BUILD_METADATA, DISPLAY_VERSION, PACKAGE_VERSION, } from "../version.js";

package/esm/keri/npm/src/npm/runtime-web.browser.js

@@ -0,0 +1,2 @@
+/** npm subpath entrypoint for `keri-ts/runtime/web`. */
+export * from "../runtime/web.js";

package/esm/keri/npm/src/npm/runtime-web.js

@@ -0,0 +1,3 @@
+/** npm subpath entrypoint for `keri-ts/runtime/web`. */
+import "../_dnt.polyfills.js";
+export * from "../runtime/web.js";

package/esm/keri/npm/src/npm/runtime.browser.js

@@ -0,0 +1,2 @@
+/** npm subpath entrypoint for `keri-ts/runtime`. */
+export * from "../runtime/index.js";

package/esm/keri/npm/src/runtime/index.js

@@ -22,8 +22,10 @@ export { FetchHttpClient, } from "../app/transport/http-client.js";
 export { requireTcpDialer } from "../app/transport/tcp-dialer.js";
 export { TransportError } from "../app/transport/transport-error.js";
 // Controller state, credentials and protocol operations.
+export { RegistryAuthor } from "../acdc/authoring.js";
 export { DEFAULT_GRANT_WALK, evaluateChain, } from "../acdc/chaining.js";
-export { decodePublicKey, deriveRoot, Dhke, generateKeyPair, } from "../acdc/dhking.js";
+export { BaserDerivedUpdateStore, MemoryDerivedUpdateStore, RegistryCustody, } from "../acdc/custody.js";
+export { decodePublicKey, deriveRoot, Dhke, generateKeyPair, grantTransactionId, } from "../acdc/dhking.js";
 export { RegistryRoot, RootDeferred, rootExn, RootRefused, RootUnverified, } from "../acdc/salting.js";
 export { Unblind } from "../acdc/unblinding.js";
 export { Oobiery, oobiRequestExn, } from "../app/bootstrap/oobiery.js";
@@ -37,24 +39,32 @@ export { Exchanger, RouteRefuser, } from "../app/exchanges/exchanging.js";
 export { findVerifiedChallengeResponse, generateChallengeWords, markChallengeVerified, parseChallengeWords, } from "../app/identity/challenging.js";
 export { Anchorer, } from "../app/identity/delegating.js";
 export { endpointRoleAccepted, loadAcceptedEndpointRole, proposeGroupEndpointRole, } from "../app/identity/endpoint-roleing.js";
+export { beginDelegation, completeEvent, DELEGATION_WAIT_TIMEOUT_MS, delegationStatus, eventStatus, receiptEvent, waitForDelegation, } from "../app/identity/event-completion.js";
 export { acceptedEventReplayMessage, Hab, Habery, openHabery, } from "../app/identity/habbing.js";
 export { Algos, Manager, } from "../app/identity/keeping.js";
 export { Organizer, } from "../app/identity/organizing.js";
+export { IpexAdmitter } from "../app/ipex/ipex-admitting.js";
 export { ipexExnBody, prepareIpexExn } from "../app/ipex/ipex-building.js";
 export { credentialPresentationArtifacts, credentialSaidFromGrant, ipexCredentialAdmit, ipexCredentialGrant, processCredentialPresentationArtifacts, storedGrantArtifacts, } from "../app/ipex/ipex-credentialing.js";
+export { anchorExchange as anchorIpexExchange, exchangeWire, IpexDiscloser, } from "../app/ipex/ipex-discloser.js";
 export { walkIpexGraph } from "../app/ipex/ipex-graph.js";
 export { approveStoredMultisigIpexWrappers, prepareAcdcV2GroupIpex, publishInitialGroupIpex, requireAcdcV2GroupUse, sendCompletedGroupIpex, } from "../app/ipex/ipex-grouping.js";
 export { acceptedRegistryEvidence, authenticateIpexNode, issuedNodeVerdict, } from "../app/ipex/ipex-node-authentication.js";
 export { ipexGrantWalk } from "../app/ipex/ipex-v2.js";
 export { IPEX_GRANT_ROUTE, IPEX_ROUTES, ipexAdmitExn, ipexAgreeExn, ipexApplyExn, ipexGrantExn, ipexOfferExn, ipexSpurnExn, } from "../app/ipex/ipexing.js";
+export { KEL_PUBLISHER_PACING, KEL_PUBLISHER_SWEEP_TOCKS, KEL_PUBLISHER_TOCK_MS, KelPublisher, kelPublisherDo, } from "../app/mailbox/kel-publisher.js";
+export { addMailbox, completeGroupMailbox, completeMailboxAdmin, mailboxAdminUrl, mailboxStatus, proposeGroupMailbox, removeMailbox, requireMailboxEndpointUrl, waitForMailboxState, } from "../app/mailbox/mailbox-admin.js";
 export { MailboxDirector, } from "../app/mailbox/mailbox-director.js";
 export { MailboxPoller, } from "../app/mailbox/mailbox-poller.js";
 export { consumeMailboxSse, parseMailboxSse, readMailboxSseBody, } from "../app/mailbox/mailbox-sse.js";
 export { endpointBasePath, fetchEndpointUrls, mailboxPollEndpoints, mailboxQueryTopics, mailboxTopicKey, preferredUrl, resolveHostedEndpointPath, } from "../app/mailbox/mailboxing.js";
-export { groupElectedMember, groupSigningMembers, groupWitnesserSelection, isLocalGroupHab, latestGroupContribution, localGroupMember, } from "../app/multisig/group-members.js";
+export { Counselor, DEFAULT_FALLBACK_AFTER_MS, RECEIPT_BACKOFF_MS, waitForGroupEvent, } from "../app/multisig/counseling.js";
+export { groupElectedMember, groupSigningMembers, groupWitnesser, groupWitnesserSelection, isLocalGroupHab, latestGroupContribution, localGroupMember, } from "../app/multisig/group-members.js";
 export { Multiplexor, MULTISIG_ROUTES, multisigExn, multisigExnBody, multisigInceptExn, multisigInteractExn, multisigIpexProofExn, multisigIssueExn, multisigQueryExn, multisigRegistryInceptExn, multisigRevokeExn, multisigRotateExn, multisigRpyExn, } from "../app/multisig/grouping.js";
 export { signGroupMessage } from "../app/multisig/multisig-messaging.js";
 export { approveAcdcV2Registry, publishAcdcV2Registry } from "../app/multisig/multisig-workflows.js";
+export { approveGroupProposal, dismissGroupProposal, findGroupProposal, listGroupProposals, } from "../app/multisig/proposals.js";
+export { proposeCredentialIssue, proposeCredentialRegistry, proposeCredentialRevocation, proposeGroupInception, proposeGroupInteraction, proposeGroupRotation, proposeRegistryEvent, settleProposedRotation, } from "../app/multisig/proposing.js";
 export { Notifier, } from "../app/notifications/notifying.js";
 export { Signal, Signaler, } from "../app/notifications/signaling.js";
 export { RawRecord } from "../core/records.js";
@@ -71,7 +81,8 @@ export { matchesRegistrySeal, vet, vetBinds, vetBlind, vetBound, } from "../acdc
 /** ACDC v2 services are distinct from the legacy VDR Regery/Registry exports. */
 export { createRegery as createAcdcV2Regery, Regery as AcdcV2Regery, Registry as AcdcV2Registry, } from "../acdc/registraring.js";
 export { validateSchema as validateAcdcSchema } from "../acdc/scheming.js";
-export { deliverRegistryRoots, replicateRegistryRoots, resealRegistryRoots, RootCopyRecovery, RootResealBudgetMs, } from "../app/credentials/root-replicating.js";
+export { deliverRegistryRoots, replicateRootCopies, replicateRootCopy, resealRootCopies, RootResealBudgetMs, } from "../app/credentials/root-replicating.js";
+export { RootReplicator, } from "../app/credentials/root-replicator.js";
 export { publishPendingTel } from "../app/credentials/tel-publishing.js";
 export { Deck } from "../core/deck.js";
 export { AppError, DatabaseError, DatabaseKeyError, DatabaseNotOpenError, DatabaseOperationError, InvalidPathNameError, PathError, ValidationError, } from "../core/errors.js";
@@ -80,7 +91,7 @@ export { exchange } from "../core/exchange/protocol-exchanging.js";
 export { Kevery, } from "../core/kel/eventing.js";
 export { Kever, } from "../core/kel/kever.js";
 export { consoleLogger, getLogLevel, LOG_LEVELS, noopLogger, setLogLevel, } from "../core/logger.js";
-export { Kramer } from "../core/mailbox/kraming.js";
+export { DEFAULT_KRAM_CACHES, Kramer } from "../core/mailbox/kraming.js";
 export { CREDENTIAL_MAILBOX_TOPIC, DELEGATE_MAILBOX_TOPIC, normalizeMbxTopicCursor, OOBI_MAILBOX_TOPIC, RECEIPT_MAILBOX_TOPIC, REPLAY_MAILBOX_TOPIC, REPLY_MAILBOX_TOPIC, } from "../core/mailbox/mailbox-topics.js";
 export { incept, interact, query, reply, rotate } from "../core/protocol-eventing.js";
 export { messageAttachmentGroups, messagize } from "../core/protocol-serialization.js";
@@ -107,3 +118,39 @@ export { messengerFrom, streamMessengerFrom } from "../app/transport/messengerin
 export { systemClock } from "../app/runtime/runtime-clock.js";
 export { AnchorQuerier, KeyStateNoticer, LogQuerier, SeqNoQuerier } from "../app/queries/querying.js";
 export { WitnessInquisitor } from "../app/queries/witness-inquisitor.js";
+// Library OOBI resolution and key-state/anchor queries (begin, status, wait).
+export { beginOobi, OOBI_RESOLVE_TIMEOUT_MS, oobiStatus, resolveOobi, waitForOobi, } from "../app/bootstrap/oobi-resolving.js";
+export { anchorQueryStatus, beginAnchorQuery, beginKeyStateQuery, QUERY_TIMEOUT_MS, queryAnchor, queryKeyState, requireQueryRequester, } from "../app/queries/query-workflows.js";
+export { MemoryChangeSink, observeUntil, signalerChangeSink, } from "../app/runtime/workflow-contract.js";
+// Library poll-and-settle for credential IPEX arrivals (settle, status, wait).
+export { ipexArrivalStatus, ipexBaseline, MailboxIntakeTally, settleStoredGrants, waitForIpexArrival, } from "../app/mailbox/ipex-arrival.js";
+// Runtime-owned group IPEX messages (a group holder's Admit): propose, approve, status, wait.
+export { abandonGroupIpex, approveGroupIpex, GROUP_IPEX_COLLECT_MS, GROUP_IPEX_RETRY_BOUND_MS, groupIpexMessages, GroupIpexOperations, groupIpexProposals, groupIpexStatus, proposeGroupAdmit, proposeGroupIpex, proposeGroupIpexAfter, waitForGroupIpex, } from "../app/ipex/group-ipex.js";
+export { RETRY_BASE_MS, RETRY_MAX_MS, RetryBackoff } from "../app/runtime/retry-backoff.js";
+// Runtime-owned group DH issuance: consent calls for the custodian and the members, election read, proof export.
+export { approveGroupIssuance, approveGroupIssuanceExchange, followGroupIssuanceProof, groupIssuanceElection, groupIssuanceProof, groupIssuanceProposals, prepareGroupIssuance, proposeGroupIssuance, } from "../app/ipex/group-issuance.js";
+// Runtime-owned DH issuance operations, single-signature and group (begin, process, status, wait, abandon).
+export { abandonIssuance, admitIssuance, approveIssuanceExchange, beginIssuance, deliverIssuanceAdmit, ISSUANCE_RETRY_BOUND_MS, ISSUANCE_SWEEP_MS, IssuanceOperations, issuanceStatus, pendingGroupGrants, pendingIssuanceGrants, posterDelivery, prepareIssuanceGrant, proposeIssuance, rebuildIssuanceAdmit, waitForIssuance, } from "../app/ipex/issuance.js";
+export { ADMIT_DELIVERY_TIMEOUT_MS, admitAndDeliver, receiveIssuance, } from "../app/ipex/receive-issuance.js";
+// Runtime-owned single-signature IPEX presentation operations (present, process, status, wait, abandon).
+export { abandonPresentation, deliverPreparedGrant, preparePresentation, present, PRESENTATION_RETRY_BOUND_MS, PresentationOperations, presentationStatus, proposeGroupPresentation, resendPresentation, waitForPresentation, } from "../app/ipex/presenting.js";
+export { pendingPresentations } from "../app/ipex/pending-presentations.js";
+// Exact public Grant files for a group presentation (prepare, resume), and the delivery outbox with retry.
+export { preparePresentationFile, resumePresentationFile, } from "../app/ipex/presentation-files.js";
+export { DeliveryOutbox, } from "../app/runtime/delivery-outbox.js";
+// Runtime-owned single-signature IPEX Unblind operations (request, approve, process, status, wait, abandon).
+export { abandonUnblinding, answerUnblind, requestUnblind, UnblindingOperations, unblindingStatus, waitForUnblinding, } from "../app/ipex/unblinding-workflow.js";
+// Fixed-tock doers.
+export { doEvery } from "../app/runtime/doing.js";
+// Operations owners composed by the runtime.
+export { OWNER_PACING, OWNER_SWEEP_TOCKS, OWNER_TOCK_MS, OwnerHealth, } from "../app/runtime/operation-owners.js";
+// Library delegator approval (list, approve, status, wait, dismiss).
+export { approveDelegation, DELEGATION_APPROVAL_TIMEOUT_MS, delegationApprovalStatus, dismissDelegation, listPendingDelegations, proposeGroupDelegationApproval, requestDelegatedEvent, settleDelegationApproval, waitForDelegationAnchor, waitForDelegationApproval, waitForPendingDelegation, } from "../app/identity/delegation-approval.js";
+// Library TEL completion status/waits and challenge respond/status/wait.
+export { REGISTRY_WAIT_POLL_MS, registryEventRef, registryEventStatus, settleRegistryEvent, waitForRegistryEvent, } from "../app/credentials/registry-settling.js";
+export { issuedCredentialStatus, telEventStatus, waitForIssuedCredential, waitForTelEvent, } from "../app/credentials/tel-completion.js";
+export { challengeStatus, respondToChallenge, waitForChallengeResponse, } from "../app/identity/challenging.js";
+// Library legacy IPEX conversation (apply, offer, agree, spurn; status and wait).
+export { ipexExchangeStatus, requireIpexPrior, requireIpexSender, sendIpexAgree, sendIpexApply, sendIpexOffer, sendIpexSpurn, waitForIpexExchange, } from "../app/ipex/ipex-conversation.js";
+// Library legacy IPEX grant, admit and credential settle.
+export { requireAdmittableGrant, sendIpexAdmit, sendIpexGrant, settleGrantCredential, } from "../app/ipex/ipex-granting.js";

package/esm/keri/npm/src/runtime/web/output-barrier.js

@@ -0,0 +1,47 @@
+/**
+ * Output barrier for browser compositions (ADR-0015 durability rule 6).
+ *
+ * A browser store acknowledges a commit before it is durable, so a response,
+ * receipt or query that depends on that commit must not leave the page until
+ * the composition's persistence queue has flushed. Otherwise a crash or tab
+ * close could leave a peer holding evidence of state this wallet then forgot.
+ */
+import { call } from "effection";
+import { AppError } from "../../core/errors.js";
+/** The persistence queue failed, so the request was not sent. The queue's failure is the cause. */
+export class OutputBarrierError extends AppError {
+}
+/**
+ * Wrap `inner` so no request, finite or streaming, reaches it before `flushed` resolves.
+ *
+ * `flushed` is evaluated per request, so each request waits for everything
+ * committed before it was made. Pass `() => opener.queue.flushed()` from the
+ * composition's `WebStoreOpener`: the queue is shared by every store family, so
+ * it covers all commits, which one store's `flushed()` would not.
+ *
+ * A rejected flush fails the call with `OutputBarrierError` and sends nothing.
+ * Cancelling the caller cancels only the wait.
+ *
+ * The wrapper has no `tcp` dialer: a dialer would be a network path around the
+ * barrier, and browsers have none.
+ */
+export function barrierHttpClient(inner, flushed) {
+    function* barrier() {
+        try {
+            yield* call(() => flushed());
+        }
+        catch (error) {
+            throw new OutputBarrierError("Persistence did not flush; the request was not sent", { cause: error });
+        }
+    }
+    return {
+        *request(url, init) {
+            yield* barrier();
+            return yield* inner.request(url, init);
+        },
+        *open(url, init) {
+            yield* barrier();
+            return yield* inner.open(url, init);
+        },
+    };
+}

package/esm/keri/npm/src/runtime/web/persistent-storage.js

@@ -0,0 +1,37 @@
+/**
+ * Persistent-storage request for browser wallets.
+ *
+ * Keys live only in IndexedDB, and Safari may evict script-writable storage
+ * that was not granted persistence, so a wallet should ask and surface a refusal.
+ */
+/**
+ * Ask the engine to make this origin's storage persistent, then report the outcome.
+ * Never throws: an absent API reports `supported: false`, and a failing or
+ * refusing one reports `persisted: false`. Call it from a user gesture where the
+ * engine requires one.
+ *
+ * @param storage Defaults to `navigator.storage`.
+ */
+export async function requestPersistentStorage(storage = globalThis.navigator?.storage) {
+    if (typeof storage?.persist !== "function")
+        return { persisted: false, supported: false };
+    let persisted = await attempt(() => storage.persisted?.(), false);
+    if (!persisted)
+        persisted = await attempt(() => storage.persist(), false);
+    const estimate = await attempt(() => storage.estimate?.(), undefined);
+    return {
+        persisted,
+        supported: true,
+        ...(typeof estimate?.quota === "number" ? { quota: estimate.quota } : {}),
+        ...(typeof estimate?.usage === "number" ? { usage: estimate.usage } : {}),
+    };
+}
+/** Run one engine call, treating a throw or an absent method as the fallback. */
+async function attempt(fn, fallback) {
+    try {
+        return (await fn()) ?? fallback;
+    }
+    catch {
+        return fallback;
+    }
+}

package/esm/keri/npm/src/runtime/web.js

@@ -0,0 +1,10 @@
+/**
+ * Browser host surface: the output barrier, single-writer store lock and
+ * persistence request that any browser composition needs.
+ *
+ * Mirrors `keri-ts/runtime/node` for the browser. Nothing here may reach
+ * `node:` modules, sockets or the `Deno` global.
+ */
+export { acquireStoreLock, StoreLockHeldError, storeLockKey, StoreLockUnsupportedError, } from "../db/store-lock.js";
+export { barrierHttpClient, OutputBarrierError } from "./web/output-barrier.js";
+export { requestPersistentStorage, } from "./web/persistent-storage.js";

package/esm/keri/npm/src/vdr/tel-publication.js

@@ -117,6 +117,22 @@ export class TelPublication {
     complete(pre, sn = 0) {
         return this.reger.ctel.get([pre, ordinal(sn).qb64]) !== null;
     }
+    /**
+     * Durable progress of one TEL event, read without side effects: waiting for the
+     * issuer's accepted anchor (`tmse.`), for the anchoring event's witness receipts
+     * (`tpwe.`), for local publication (`tede.`), complete (`ctel.`), or untracked.
+     */
+    progress(pre, sn = 0) {
+        if (this.complete(pre, sn))
+            return "complete";
+        const coordinates = [pre, ordinal(sn).qb64];
+        if (this.reger.tede.get(coordinates).length > 0)
+            return "awaitingPublication";
+        if (this.reger.tpwe.get(coordinates).length > 0)
+            return "awaitingReceipts";
+        const waiting = [...this.reger.tmse.getTopItemIter()].some(([keys]) => keys[0] === pre && keys[1] === coordinates[1]);
+        return waiting ? "awaitingAnchor" : null;
+    }
     /** Reverify by unique roster index; multiple signatures from one witness never fill another's slot. */
     allReceipts(target) {
         const current = this.target(this.keys(target), this.seal(target));

package/esm/keri/npm/src/version.js

@@ -6,9 +6,9 @@
  * `src/version.ts` files by hand; edit this template instead.
  */
 /** Package semantic version copied from the owning package manifest. */
-export const PACKAGE_VERSION = "2.1.0";
+export const PACKAGE_VERSION = "2.2.1";
 /** Optional build metadata stamp injected by release/CI workflows. */
-export const BUILD_METADATA = "build.29.7481d26902aff264fe7d4b3723b55ce00f496a97";
+export const BUILD_METADATA = "build.31.49e175e15c5b49580bbdc22ea7baa4c2f9295c3d";
 /** User-facing version string with build metadata appended when present. */
 export const DISPLAY_VERSION = BUILD_METADATA
     ? `${PACKAGE_VERSION}+${BUILD_METADATA}`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "keri-ts",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "description": "KERI TypeScript protocol and runtime library",
   "homepage": "https://github.com/kentbull/keri-ts",
   "repository": {
@@ -17,6 +17,7 @@
   "types": "./types/npm/index.d.ts",
   "exports": {
     ".": {
+      "browser": "./esm/keri/npm/src/npm/index.browser.js",
       "import": "./esm/keri/npm/src/npm/index.js",
       "types": "./types/npm/index.d.ts"
     },
@@ -25,6 +26,7 @@
       "types": "./types/npm/cli.d.ts"
     },
     "./runtime": {
+      "browser": "./esm/keri/npm/src/npm/runtime.browser.js",
       "import": "./esm/keri/npm/src/npm/runtime.js",
       "types": "./types/npm/runtime.d.ts"
     },
@@ -32,13 +34,24 @@
       "import": "./esm/keri/npm/src/npm/runtime-node.js",
       "types": "./types/npm/runtime-node.d.ts"
     },
+    "./runtime/web": {
+      "browser": "./esm/keri/npm/src/npm/runtime-web.browser.js",
+      "import": "./esm/keri/npm/src/npm/runtime-web.js",
+      "types": "./types/npm/runtime-web.d.ts"
+    },
     "./db": {
+      "browser": "./esm/keri/npm/src/npm/db.browser.js",
       "import": "./esm/keri/npm/src/npm/db.js",
       "types": "./types/npm/db.d.ts"
     },
     "./db/lmdb": {
       "import": "./esm/keri/npm/src/npm/db-lmdb.js",
       "types": "./types/npm/db-lmdb.d.ts"
+    },
+    "./db/indexeddb": {
+      "browser": "./esm/keri/npm/src/npm/db-indexeddb.browser.js",
+      "import": "./esm/keri/npm/src/npm/db-indexeddb.js",
+      "types": "./types/npm/db-indexeddb.d.ts"
     }
   },
   "scripts": {
@@ -63,7 +76,7 @@
     "@inquirer/password": "3.0.1",
     "@noble/hashes": "1.8.0",
     "ajv": "8.18.0",
-    "cesr-ts": ">=2.1.0 <2.2.0",
+    "cesr-ts": ">=2.2.0 <2.3.0",
     "effection": "^3.6.0",
     "lmdb": "3.5.3",
     "@msgpack/msgpack": "3.1.3",

package/types/acdc/authoring.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Finite ACDC v2 registry authoring: stage, anchor and update protocol cores.
+ *
+ * Existing engines own acceptance and receipt authentication; this class only
+ * sequences them for one local individual issuer. It reads and writes no
+ * credential inventory: embedders that keep issued or held records wrap it
+ * (the wallet's `WalletAuthor` adds `issue` and `revoke`). Private derivation
+ * requires a `RegistryCustody`, whose coordinate store the embedder supplies.
+ */
+import { type SerderACDC } from "cesr-ts";
+import type { Operation } from "effection";
+import type { Receiptor, WitnessAuthMap } from "../app/witness/receipting.js";
+import type { RegistryCustody } from "./custody.js";
+import { type AcdcMapOptions } from "./messaging.js";
+import { type RegistryDisclosure } from "./regeventing.js";
+import type { Regery, Registry } from "./registraring.js";
+/** Public means deliberate opening publication; private derivation requires supplied custody. */
+export interface AcdcV2UpdateOptions {
+    public?: boolean;
+    stamp?: string;
+    boundEvent?: string;
+    /** Transient witness codes for this operation; never retained with registry evidence. */
+    auths?: WitnessAuthMap;
+}
+/** Borrow the actual registry environment and receipt collector; acquire no handles or workers. */
+export declare class RegistryAuthor {
+    readonly rgy: Regery;
+    readonly receiptor: Receiptor;
+    readonly custody?: RegistryCustody | undefined;
+    constructor(rgy: Regery, receiptor: Receiptor, custody?: RegistryCustody | undefined);
+    /** Resolve the actual local registry; staging supports groups while signing methods enforce their owner. */
+    registry(name: string, controller: string): Registry;
+    /** Signing belongs either to this individual owner or to explicit group approval, never a staging flag. */
+    protected individual(reg: Registry): void;
+    /** Idempotently stage an alias, then return only its exact accepted inception. */
+    incept(name: string, controller: string, auths?: WitnessAuthMap): Operation<SerderACDC>;
+    /** Construct the issuer's credential using the existing ACDC v2 finite builder. */
+    create(reg: Registry, options: Omit<AcdcMapOptions, "regid">): SerderACDC;
+    /** Stage one BUP state advance, preserving an exact pending retry and its opening. Never author historical upd. */
+    stage(reg: Registry, acdc: SerderACDC, state: string, options?: AcdcV2UpdateOptions): {
+        event: SerderACDC;
+        opening: RegistryDisclosure;
+    };
+    /** Share validation and exact pending-next reuse; only the concrete revocation ensure operation can reuse an accepted head. */
+    protected stageState(reg: Registry, acdc: SerderACDC, state: string, options: AcdcV2UpdateOptions, ensureRevoked?: boolean): {
+        event: SerderACDC;
+        opening: RegistryDisclosure;
+    };
+    /** Advance one explicit state through real anchoring; staging is never reported as accepted. */
+    update(reg: Registry, acdc: SerderACDC, state: string, options?: AcdcV2UpdateOptions): Operation<SerderACDC>;
+    /** Reuse the current branch's already signed seal even before receipts; no extra anchor merely to poll. */
+    anchor(reg: Registry, event: SerderACDC, auths?: WitnessAuthMap): Operation<void>;
+}
+//# sourceMappingURL=authoring.d.ts.map

package/types/acdc/authoring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authoring.d.ts","sourceRoot":"","sources":["../../src/acdc/authoring.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAA8B,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAW,KAAK,cAAc,EAAY,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAuB,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG1D,iGAAiG;AACjG,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAED,mGAAmG;AACnG,qBAAa,cAAc;IAEvB,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,QAAQ,CAAC,SAAS,EAAE,SAAS;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe;gBAFzB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,OAAO,CAAC,EAAE,eAAe,YAAA;IAUpC,4GAA4G;IAC5G,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,QAAQ;IAQpD,2GAA2G;IAC3G,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI;IAMzC,kFAAkF;IACjF,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC,UAAU,CAAC;IAYxF,mFAAmF;IACnF,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,UAAU;IAKzE,mHAAmH;IACnH,KAAK,CACH,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,mBAAwB,GAChC;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,OAAO,EAAE,kBAAkB,CAAA;KAAE;IAIrD,+HAA+H;IAC/H,SAAS,CAAC,UAAU,CAClB,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,mBAAmB,EAC5B,aAAa,UAAQ,GACpB;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,OAAO,EAAE,kBAAkB,CAAA;KAAE;IA2ErD,gGAAgG;IAC/F,MAAM,CACL,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,mBAAwB,GAChC,SAAS,CAAC,UAAU,CAAC;IAOxB,2GAA2G;IAC1G,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC;CA4BnF"}