sealbridge 0.2.1 → 0.3.0

package/dist/packages/runtime/dist/delivery-status.d.ts

@@ -0,0 +1,43 @@
+import type { RecipientDeliveryState, SignedEnvelope, TaskManifest } from '../../core/dist/index.js';
+import { GatewayDeliveryService } from './outbox.js';
+import type { OutboxRecordV1 } from './delivery-records.js';
+import type { HeldRecord, HeldTransitionSink } from './held-request-store.js';
+import { WorkerTrustStore } from './worker-trust-store.js';
+type ConnectionState = 'none' | 'pending' | 'connected' | 'blocked';
+export interface DeliveryStatusOptions {
+    relayUrl?: string;
+    onPublish?: () => void;
+    connectionState?: (peer: string) => ConnectionState;
+    relayForPeer?: (peer: string) => string | undefined;
+}
+/** Content-free recipient lifecycle, separate from inspection and task execution. */
+declare class RecipientDeliveryCoordinatorImplementation {
+    readonly service: GatewayDeliveryService;
+    readonly options: DeliveryStatusOptions;
+    private readonly pendingAdmissions;
+    constructor(service: GatewayDeliveryService, options?: DeliveryStatusOptions);
+    private connections;
+    connection(peer: string): ConnectionState;
+    private relay;
+    begin(messageId: string): void;
+    end(messageId: string): void;
+    admit(envelope: SignedEnvelope, manifest: TaskManifest, connected: boolean, held: boolean, occurredAt?: number): void;
+    /** A validated legacy grant may record its real adapter boundary without asserting owner opening. */
+    handoff(envelope: SignedEnvelope, manifest: TaskManifest): void;
+    observe(id: string, state: RecipientDeliveryState): void;
+    private recordObservation;
+    /** Complete references for frames already committed before an interrupted observation write. */
+    private reconcileLocked;
+    readonly transition: HeldTransitionSink;
+    private recoverHeld;
+    reconcile(records?: HeldRecord[]): void;
+    dispatchAllowed(record: OutboxRecordV1): boolean;
+}
+/** Attach local terminal intents for owner CLI operations; lifecycle startup remains explicit. */
+export declare function attachHeldDeliveryStatus(owner: import('../../core/dist/index.js').KeyPair, review: import('./held-request-review.js').HeldRequestReview, identityOptions: import('./key-store.js').IdentityStoreOptions, store: WorkerTrustStore, now?: () => number): GatewayDeliveryService;
+export type RecipientDeliveryCoordinator = Pick<RecipientDeliveryCoordinatorImplementation, keyof RecipientDeliveryCoordinatorImplementation>;
+export declare const RecipientDeliveryCoordinator: {
+    new (service: GatewayDeliveryService, options?: DeliveryStatusOptions): RecipientDeliveryCoordinator;
+    readonly prototype: RecipientDeliveryCoordinator;
+};
+export {};

package/dist/packages/runtime/dist/delivery-status.js

@@ -0,0 +1,193 @@
+// SPDX-License-Identifier: Apache-2.0
+import { deliveryStatusRoutingId, digest, openEnvelope, projectDeliveryState, signDeliveryStatus, signEnvelope, validateManifest, verifySigned, verifyEnvelope, isEncryptedEnvelopePayload } from '../../core/dist/index.js';
+import { GatewayDeliveryService } from './outbox.js';
+import { DELIVERY_RETENTION_MS, UUID, deliveryError } from './delivery-records.js';
+import { WorkerTrustStore, workerIntakePath } from './worker-trust-store.js';
+/** Content-free recipient lifecycle, separate from inspection and task execution. */
+class RecipientDeliveryCoordinatorImplementation {
+    service;
+    options;
+    pendingAdmissions = new Set();
+    constructor(service, options = {}) {
+        this.service = service;
+        this.options = options;
+    }
+    connections() {
+        return new WorkerTrustStore(this.service.owner, { path: workerIntakePath(this.service.owner.did, this.service.options.identityOptions),
+            ...this.service.options.identityOptions, now: this.service.store.now });
+    }
+    connection(peer) { return this.options.connectionState?.(peer) ?? this.connections().connectionState(peer); }
+    relay(peer) {
+        const url = this.options.relayUrl ?? this.options.relayForPeer?.(peer);
+        if (url)
+            return url;
+        const connection = this.connections().listConnections().find(c => c.peerOwnerDid === peer);
+        return connection && 'relayUrl' in connection ? connection.relayUrl : undefined;
+    }
+    begin(messageId) { this.pendingAdmissions.add(messageId); }
+    end(messageId) { this.pendingAdmissions.delete(messageId); }
+    admit(envelope, manifest, connected, held, occurredAt = this.service.store.now()) {
+        if (manifest.protocolVersion !== '0.2.0' || !UUID.test(envelope.payload.envelopeId) || !isEncryptedEnvelopePayload(envelope.payload.payload))
+            return;
+        const id = envelope.payload.envelopeId;
+        const body = openEnvelope(envelope, this.service.owner);
+        validateManifest(body?.proposal?.payload);
+        if (!verifyEnvelope(envelope, this.service.owner.did) || envelope.payload.eventType !== 'PROPOSE' || envelope.payload.seq !== 0 ||
+            envelope.payload.taskId !== manifest.taskId || envelope.payload.senderDid !== manifest.requester.ownerDid ||
+            manifest.worker?.ownerDid !== this.service.owner.did || digest(body.proposal.payload) !== digest(manifest) ||
+            !verifySigned(body.proposal, manifest.requester.ownerDid))
+            throw deliveryError('INVALID_DELIVERY_STATUS');
+        this.service.store.preparedTransaction(() => {
+            const previous = this.service.store.read('observations', id);
+            if (previous) {
+                if (previous.originalEnvelopeDigest !== digest(envelope))
+                    throw deliveryError('DELIVERY_RECORD_CONFLICT');
+                return;
+            }
+            if (!held)
+                return; // Legacy grants have no synthetic held/opened facts.
+            if (this.service.store.ids('observations').length >= this.service.store.limits.messages)
+                throw deliveryError('OUTBOX_FULL');
+            this.service.store.write('observations', id, { version: 1, messageId: id, localOwnerDid: this.service.owner.did,
+                senderDid: manifest.requester.ownerDid, taskId: manifest.taskId, originalEnvelopeDigest: digest(envelope),
+                createdAt: Date.parse(manifest.createdAt), deliveryDeadline: Date.parse(manifest.deadline),
+                retainUntil: Math.max(Date.parse(manifest.createdAt), Date.parse(manifest.deadline)) + DELIVERY_RETENTION_MS,
+                protocolVersion: '0.2.0', disclosure: connected ? 'connected' : 'coarse', latestState: 'received_held', nextRevision: 1,
+                facts: [{ state: 'received_held', occurredAt }], published: [] });
+        });
+        if (held)
+            this.observe(id, 'received_held');
+    }
+    /** A validated legacy grant may record its real adapter boundary without asserting owner opening. */
+    handoff(envelope, manifest) {
+        const id = envelope.payload.envelopeId;
+        if (manifest.protocolVersion !== '0.2.0' || !UUID.test(id) || !isEncryptedEnvelopePayload(envelope.payload.payload))
+            return;
+        const firstHandoff = !this.service.store.read('observations', id);
+        if (firstHandoff) {
+            const now = this.service.store.now(), connected = this.connection(manifest.requester.ownerDid) === 'connected';
+            this.service.store.preparedTransaction(() => {
+                if (this.service.store.ids('observations').length >= this.service.store.limits.messages)
+                    throw deliveryError('OUTBOX_FULL');
+                this.service.store.write('observations', id, {
+                    version: 1, messageId: id, localOwnerDid: this.service.owner.did, senderDid: manifest.requester.ownerDid,
+                    taskId: manifest.taskId, originalEnvelopeDigest: digest(envelope), createdAt: Date.parse(manifest.createdAt),
+                    deliveryDeadline: Date.parse(manifest.deadline), retainUntil: Math.max(Date.parse(manifest.createdAt), Date.parse(manifest.deadline)) + DELIVERY_RETENTION_MS,
+                    protocolVersion: '0.2.0', disclosure: connected ? 'connected' : 'coarse',
+                    latestState: 'handed_to_agent', nextRevision: 1, facts: [{ state: 'handed_to_agent', occurredAt: now }], published: [],
+                });
+            });
+            if (!connected)
+                return; // Immutable coarse admission never publishes adapter detail.
+        }
+        this.recordObservation(id, 'handed_to_agent', firstHandoff);
+    }
+    observe(id, state) { this.recordObservation(id, state); }
+    recordObservation(id, state, firstHandoff = false) {
+        if (!UUID.test(id))
+            return;
+        this.service.store.preparedTransaction(() => {
+            let r = this.service.store.read('observations', id);
+            if (!r || this.service.store.now() >= r.retainUntil)
+                return;
+            this.reconcileLocked(r);
+            r = this.service.store.read('observations', id);
+            let fact = r.facts.find(f => f.state === state);
+            const existingDetail = !!fact && !['received_held', 'closed'].includes(state) && !firstHandoff;
+            if (!fact) {
+                if (r.latestState === 'closed' || state === 'received_held' || state === 'opened' && r.latestState === 'handed_to_agent')
+                    return;
+                fact = { state, occurredAt: this.service.store.now() };
+                r = { ...r, facts: [...r.facts, fact], latestState: state };
+                this.service.store.write('observations', id, r);
+            }
+            if (existingDetail || r.published.some(p => p.status.payload.state === state) || !projectDeliveryState(state, r.disclosure, this.connection(r.senderDid)))
+                return;
+            const relayUrl = this.relay(r.senderDid);
+            if (!relayUrl)
+                throw deliveryError('OUTBOX_STORE_INVALID');
+            const status = signDeliveryStatus({ type: 'DeliveryStatus', version: 1, messageId: id, taskId: r.taskId,
+                senderDid: r.senderDid, recipientDid: r.localOwnerDid, state, revision: r.nextRevision,
+                occurredAt: fact.occurredAt, retainUntil: r.retainUntil }, this.service.owner);
+            const envelope = signEnvelope({ taskId: deliveryStatusRoutingId(id), recipientDid: r.senderDid,
+                seq: r.nextRevision, eventType: 'DELIVERY_STATUS', payload: status }, this.service.owner, { encrypt: true, signedAt: new Date(this.service.store.now()).toISOString() });
+            this.service.enqueueLocked([envelope], { messageId: id, peerOwnerDid: r.senderDid, relayUrl,
+                deliveryDeadline: Math.min(fact.occurredAt + 86400_000, r.retainUntil), kind: 'delivery-status' });
+            this.service.store.write('observations', id, { ...r, nextRevision: r.nextRevision + 1,
+                published: [...r.published, { revision: r.nextRevision, status, envelopeId: envelope.payload.envelopeId }] });
+        });
+        this.options.onPublish?.();
+    }
+    /** Complete references for frames already committed before an interrupted observation write. */
+    reconcileLocked(initial) {
+        let r = initial;
+        for (const o of this.service.store.statusOutbox(r.messageId, r.published.map(p => p.envelopeId)).sort((a, b) => a.ordinal - b.ordinal)) {
+            if (r.published.some(p => p.envelopeId === o.envelopeId))
+                continue;
+            const fact = r.facts.at(-1);
+            if (o.ordinal !== r.nextRevision || o.peerOwnerDid !== r.senderDid || o.envelope.payload.taskId !== deliveryStatusRoutingId(r.messageId) ||
+                o.envelope.payload.eventType !== 'DELIVERY_STATUS')
+                throw deliveryError('DELIVERY_RECORD_CONFLICT');
+            // Ed25519 and the original fact timestamp reproduce the inner signed bytes. The
+            // encrypted outer frame remains exactly the prepared, locally signed outbox frame.
+            const status = signDeliveryStatus({ type: 'DeliveryStatus', version: 1, messageId: r.messageId, taskId: r.taskId,
+                senderDid: r.senderDid, recipientDid: r.localOwnerDid, state: fact.state, revision: o.ordinal,
+                occurredAt: fact.occurredAt, retainUntil: r.retainUntil }, this.service.owner);
+            if (!this.service.store.read('batches', o.batchId))
+                this.service.store.write('batches', o.batchId, { version: 1, batchId: o.batchId, messageId: o.messageId, localOwnerDid: r.localOwnerDid,
+                    envelopeIds: [o.envelopeId], createdAt: o.createdAt, committed: true });
+            r = { ...r, nextRevision: r.nextRevision + 1, published: [...r.published, { revision: o.ordinal, status, envelopeId: o.envelopeId }] };
+            this.service.store.write('observations', r.messageId, r);
+        }
+    }
+    transition = (record, transition) => {
+        if (record.kind !== 'task' || !UUID.test(record.envelope.payload.envelopeId) || this.pendingAdmissions.has(record.envelope.payload.envelopeId))
+            return;
+        this.recoverHeld(record);
+        const observation = this.service.store.read('observations', record.envelope.payload.envelopeId);
+        if (observation?.latestState === 'closed')
+            this.observe(observation.messageId, 'closed');
+        if (transition !== 'completed')
+            this.observe(record.envelope.payload.envelopeId, transition === 'held' ? 'received_held' : 'closed');
+    };
+    recoverHeld(record) {
+        if (record.kind !== 'task' || !UUID.test(record.envelope.payload.envelopeId))
+            return;
+        if (this.service.store.read('observations', record.envelope.payload.envelopeId))
+            return;
+        const body = openEnvelope(record.envelope, this.service.owner);
+        const m = body.proposal?.payload;
+        validateManifest(m);
+        if (!verifySigned(body.proposal, record.senderOwnerDid) || m.requester.ownerDid !== record.senderOwnerDid ||
+            m.worker?.ownerDid !== this.service.owner.did || m.taskId !== record.taskId)
+            throw deliveryError('INVALID_DELIVERY_STATUS');
+        this.admit(record.envelope, m, false, true, record.receivedAt);
+    }
+    reconcile(records = []) {
+        for (const record of records)
+            if (!this.pendingAdmissions.has(record.envelope.payload.envelopeId))
+                this.transition(record, 'held');
+        if (this.service.store.ids('observations').length)
+            this.service.store.preparedTransaction(() => {
+                for (const r of this.service.store.snapshot('observations'))
+                    this.reconcileLocked(r);
+            });
+    }
+    dispatchAllowed(record) {
+        if (record.kind !== 'delivery-status')
+            return true;
+        const r = this.service.store.read('observations', record.messageId);
+        const published = r?.published.find(p => p.envelopeId === record.envelopeId);
+        return !!r && !!published && !!projectDeliveryState(published.status.payload.state, r.disclosure, this.connection(r.senderDid));
+    }
+}
+/** Attach local terminal intents for owner CLI operations; lifecycle startup remains explicit. */
+export function attachHeldDeliveryStatus(owner, review, identityOptions, store, now) {
+    const service = new GatewayDeliveryService(owner, { identityOptions, now, resolveTransport: () => { throw deliveryError('RELAY_UNAVAILABLE'); } });
+    service.recipientStatus = new RecipientDeliveryCoordinator(service, { connectionState: peer => store.connectionState(peer),
+        relayForPeer: peer => { const c = store.listConnections().find(c => c.peerOwnerDid === peer); return c && 'relayUrl' in c ? c.relayUrl : undefined; } });
+    review.store.setTransitionSink(service.recipientStatus.transition);
+    return service;
+}
+export const RecipientDeliveryCoordinator = RecipientDeliveryCoordinatorImplementation;
+//# sourceMappingURL=delivery-status.js.map

package/dist/packages/runtime/dist/delivery-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-status.js","sourceRoot":"","sources":["../src/delivery-status.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,YAAY,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAE9M,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAGnF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAS7E,qFAAqF;AACrF,MAAM,0CAA0C;IAEzB;IAA0C;IAD9C,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IACvD,YAAqB,OAA+B,EAAW,UAAiC,EAAE;QAA7E,YAAO,GAAP,OAAO,CAAwB;QAAW,YAAO,GAAP,OAAO,CAA4B;IAAG,CAAC;IAC9F,WAAW;QACjB,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;YACpI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,UAAU,CAAC,IAAY,IAAqB,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9H,KAAK,CAAC,IAAY;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;QAC3F,OAAO,UAAU,IAAI,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;IACD,KAAK,CAAC,SAAiB,IAAU,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACzE,GAAG,CAAC,SAAiB,IAAU,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1E,KAAK,CAAC,QAAwB,EAAE,QAAsB,EAAE,SAAkB,EAAE,IAAa,EAAE,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;QAC9H,IAAI,QAAQ,CAAC,eAAe,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO;QACrJ,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;QACvC,MAAM,IAAI,GAAG,YAAY,CAA0C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;YAC7H,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC,QAAQ;YACzG,QAAQ,CAAC,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC;YAC1G,CAAC,YAAY,CAAC,IAAI,CAAC,QAAiB,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAE,MAAM,aAAa,CAAC,yBAAyB,CAAC,CAAC;QACrH,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,EAAE;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,sBAAsB,KAAK,MAAM,CAAC,QAAQ,CAAC;oBAAE,MAAM,aAAa,CAAC,0BAA0B,CAAC,CAAC;gBAC1G,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,qDAAqD;YACxE,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ;gBAAE,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;YAC5H,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG;gBAC7G,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,CAAC,QAAQ,CAAC;gBACzG,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1F,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,qBAAqB;gBAC5G,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;gBACvH,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,IAAI,IAAI;YAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IAC9C,CAAC;IACD,qGAAqG;IACrG,OAAO,CAAC,QAAwB,EAAE,QAAsB;QACtD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;QACvC,IAAI,QAAQ,CAAC,eAAe,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO;QAC5H,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAClE,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,WAAW,CAAC;YAC/G,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,EAAE;gBAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ;oBAAE,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;gBAC5H,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE;oBAC7C,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ;oBACxG,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAC5G,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,qBAAqB;oBAC7J,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;oBACxE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE;iBACvH,CAAC,CAAC;YAAC,CAAC,CAAC,CAAC;YACP,IAAI,CAAC,SAAS;gBAAE,OAAO,CAAC,6DAA6D;QACvF,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,EAAU,EAAE,KAA6B,IAAU,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACvF,iBAAiB,CAAC,EAAU,EAAE,KAA6B,EAAE,YAAY,GAAG,KAAK;QACvF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,EAAE;YAC1C,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,WAAW;gBAAE,OAAO;YAC5D,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACxB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAE,CAAC;YACjD,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;YAChD,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;YAC/F,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,KAAK,iBAAiB;oBAAE,OAAO;gBACjI,IAAI,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;gBACvD,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBAC5D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,cAAc,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAAE,OAAO;YAClK,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ;gBAAE,MAAM,aAAa,CAAC,sBAAsB,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;gBACrG,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,YAAY;gBACtF,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACjF,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,SAAS;gBAC5F,GAAG,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAyB,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAC3G,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACjF,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ;gBACzF,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACrG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,GAAG,CAAC;gBACnF,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;IAC7B,CAAC;IACD,gGAAgG;IACxF,eAAe,CAAC,OAAkC;QACxD,IAAI,CAAC,GAAG,OAAO,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YACtI,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC;gBAAE,SAAS;YACnE,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,iBAAiB;gBAAE,MAAM,aAAa,CAAC,0BAA0B,CAAC,CAAC;YACxG,gFAAgF;YAChF,mFAAmF;YACnF,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;gBAC9G,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO;gBAC7F,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACjF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,EAC/F,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa;oBACtF,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;YACvI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACQ,UAAU,GAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,OAAO;QACvJ,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChG,IAAI,WAAW,EAAE,WAAW,KAAK,QAAQ;YAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzF,IAAI,UAAU,KAAK,WAAW;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACvI,CAAC,CAAC;IACM,WAAW,CAAC,MAAkB;QACpC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,OAAO;QACrF,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,OAAO;QACxF,MAAM,IAAI,GAAG,YAAY,CAAuD,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrH,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;QACjC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAiB,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,cAAc;YAChH,CAAC,CAAC,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,MAAM,aAAa,CAAC,yBAAyB,CAAC,CAAC;QAC9H,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC;IACD,SAAS,CAAC,UAAwB,EAAE;QAClC,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;gBAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnI,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,EAAE;gBAC7F,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;oBAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,CAAC;IACL,CAAC;IACD,eAAe,CAAC,MAAsB;QACpC,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAClI,CAAC;CACF;AAED,kGAAkG;AAClG,MAAM,UAAU,wBAAwB,CAAC,KAAkC,EAAE,MAA4D,EACvI,eAA8D,EAAE,KAAuB,EAAE,GAAkB;IAC3G,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC,KAAK,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,MAAM,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnJ,OAAO,CAAC,eAAe,GAAG,IAAI,4BAA4B,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC;QACxH,YAAY,EAAE,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3J,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IACnE,OAAO,OAAO,CAAC;AACjB,CAAC;AAGD,MAAM,CAAC,MAAM,4BAA4B,GAGrC,0CAA0C,CAAC"}

package/dist/packages/runtime/dist/delivery-store.d.ts

@@ -0,0 +1,125 @@
+import * as fs from 'node:fs';
+import type { KeyPair, SignedEnvelope } from '../../core/dist/index.js';
+import type { LocalIdentityOptions } from './local-identity.js';
+import type { DeliveryLimits, DeliveryRecords, InboundReceiptV1, MessageRecordV1, OutboxRecordV1 } from './delivery-records.js';
+export interface DeliveryStoreOptions extends LocalIdentityOptions {
+    now?: () => number;
+    limits?: Partial<DeliveryLimits>;
+}
+export declare function deliveryRoot(did: string, options?: LocalIdentityOptions): string;
+type Kind = keyof DeliveryRecords;
+export interface DeliveryWrite {
+    kind: Kind;
+    id: string;
+    record: DeliveryRecords[Kind];
+}
+export interface PreparedDeliveryWrite extends DeliveryWrite {
+    temporary: string;
+    bytes: Buffer;
+    published?: true;
+}
+type StatusMessage = Pick<MessageRecordV1, 'messageId' | 'relayUrl' | 'protocolVersion' | 'retainUntil'>;
+type OutboxSummary = Pick<OutboxRecordV1, 'envelopeId' | 'messageId' | 'batchId' | 'state' | 'kind' | 'ordinal' | 'nextAttemptAt' | 'lease'> & {
+    bytes: number;
+};
+/** Signer-scoped records. Construction and reads have no publication or cleanup side effects. */
+declare class DeliveryStoreImplementation {
+    readonly owner: KeyPair;
+    readonly options: DeliveryStoreOptions;
+    readonly root: string;
+    readonly limits: DeliveryLimits;
+    readonly io: typeof fs;
+    readonly platform: NodeJS.Platform;
+    readonly now: () => number;
+    private generationFd?;
+    private stagedWrites?;
+    private transactionDirectories?;
+    private transactionReads?;
+    private readonly verified;
+    private verifiedBytes;
+    private preparedMode;
+    private readonly idempotencyLeaseMs;
+    private outboxIndex?;
+    private readonly idempotencyIndexes;
+    private messageIndex?;
+    private readonly inspected;
+    private readonly listings;
+    private forget;
+    /** Reuse verified records only while file identity, permissions and timestamps match. */
+    private remember;
+    constructor(owner: KeyPair, options?: DeliveryStoreOptions);
+    path(kind: Kind, id: string): string;
+    private directories;
+    private inspectPath;
+    private inspect;
+    private directoryStamp;
+    private generationStamp;
+    private listingStamp;
+    private adoptIdempotencyStamp;
+    /** Lazily held for this signer lock, including multiple record publications. */
+    private openGeneration;
+    private publishIdempotencyChange;
+    ids(kind: Kind, onError?: (error: Error) => void): string[];
+    read<K extends Kind>(kind: K, id: string): DeliveryRecords[K] | undefined;
+    snapshot<K extends Kind>(kind: K, onError?: (error: Error) => void): DeliveryRecords[K][];
+    scan<K extends Kind>(kind: K, signal: AbortSignal): AsyncGenerator<DeliveryRecords[K]>;
+    getMessage(id: string): MessageRecordV1 | undefined;
+    findTask(taskId: string): MessageRecordV1[];
+    /** All cross-process changes use this short lock; no callback performs I/O to a relay. */
+    transaction<T>(change: () => T): T;
+    /** Caller holds the signer lock. */
+    write<K extends Kind>(kind: K, id: string, record: DeliveryRecords[K]): void;
+    private checkObservation;
+    /** Creating/removing an unpublished temporary does not change the indexed JSON records. */
+    private temporaryChange;
+    private stageWrites;
+    private openWrites;
+    /** Synchronous callers also close written handles before acquiring the publication lock. */
+    prepareWritesSync(writes: DeliveryWrite[]): PreparedDeliveryWrite[];
+    /** Complete unique temporary writes outside the signer lock; close handles before publication. */
+    prepareWrites(writes: DeliveryWrite[]): Promise<PreparedDeliveryWrite[]>;
+    /** C4 synchronous lifecycle writes: plan under lock, write outside, then recheck before publication.
+     * Callbacks only read and stage record replacements; they may run again after a concurrent writer.
+     */
+    preparedTransaction<T>(change: () => T): T;
+    /** Caller holds the signer lock. Prepared writes have completed and their handles are closed. */
+    publishWrite(write: PreparedDeliveryWrite): void;
+    discardWrites(writes: PreparedDeliveryWrite[]): void;
+    remove(kind: Kind, id: string): void;
+    /** Gateway entry points load/reconcile indexes in bounded slices before synchronous publication. */
+    prepare(signal?: AbortSignal): Promise<void>;
+    /** Retain only routing metadata; recovery yields and local writes keep it current. */
+    private prepareStatusMessages;
+    statusMessages(onError?: (error: Error) => void): StatusMessage[];
+    /** Resolve status candidates from metadata without reopening unrelated task ciphertext. */
+    statusOutbox(messageId?: string, published?: readonly string[]): OutboxRecordV1[];
+    /** Metadata only: local atomic writes update this index without scanning retained ciphertext. */
+    private summaries;
+    pending(messageId: string): OutboxSummary[];
+    /** Reconcile C2 capacity metadata outside the signer lock, yielding between retained records. */
+    prepareIdempotency(): Promise<void>;
+    /** Caller holds the signer lock. Reread both inventories and validate every listed record. */
+    private refreshIdempotencyIndexes;
+    /** Caller holds the signer lock. Unchanged retained results require no file scans or reopens. */
+    reserveIdempotencyCapacity(now: number): void;
+    assertCapacity(records: OutboxRecordV1[], message?: MessageRecordV1): void;
+    /** Read-only preflight; publication rechecks capacity under the signer lock. */
+    checkAvailable(envelopes?: number): void;
+    committed(batchId: string): OutboxRecordV1[];
+    finishBatch(batchId: string): void;
+    receipt(envelope: SignedEnvelope, deadline: number, state: InboundReceiptV1['state'], outcomeCode?: string): InboundReceiptV1;
+    receiptPrepared(envelope: SignedEnvelope, deadline: number, state: InboundReceiptV1['state'], signal?: AbortSignal): Promise<void>;
+    /** Caller holds the signer lock, including when publishing a task checkpoint. */
+    receiptLocked(envelope: SignedEnvelope, deadline: number, state: InboundReceiptV1['state'], outcomeCode?: string): InboundReceiptV1;
+    private nextReceipt;
+    private maintenanceSteps;
+    maintain(onError?: (error: Error) => void): void;
+    /** One batch (at most two frames) or one retained record per event-loop turn. */
+    maintainInBackground(onError: (error: Error) => void, signal: AbortSignal): Promise<void>;
+}
+export type DeliveryStore = Pick<DeliveryStoreImplementation, keyof DeliveryStoreImplementation>;
+export declare const DeliveryStore: {
+    new (owner: KeyPair, options?: DeliveryStoreOptions): DeliveryStore;
+    readonly prototype: DeliveryStore;
+};
+export {};