OptionalauditOptionalauditRequired when audit is set; contains stable engine/account/session metadata.
OptionalconvergenceConvergence policy (branch selection + maxRewindCommits rollback horizon).
Defaults to the profile-1 policy; set maxRewindCommits: Infinity to retain
forks of any age for re-convergence.
OptionalhistoryOptionalhistoryA full-fork history tree rehydrated from rewindStore on load. When
omitted and a rewindStore is set, a fresh tree is bound to that store and
flushed on GroupSession.save.
OptionalingestionTuning for the persistent ingestion pool (undecryptable events held and retried as the history tree grows): max entries and max epoch-age before an unresolved entry is given up. Defaults bound it; a debugging tool that wants to retain everything can raise both.
OptionalingestOptionallifecycleDurable lifecycle request/terminal store (defaults to ingestStateStore).
OptionalnowInjectable wall-clock for the convergence quiescence window (B5; tests).
OptionalonOptionalonOptionalonOptionalonFired when the quiescence window elapses, so the owner can drain queued outbound (B5).
OptionalonOptionalonOptionalremovedGroup-scoped removal marker backend, potentially shared with state storage.
OptionalretainedThe bounded convergence window, derived from the history tree on load (never persisted separately). Set by the loader (GroupRegistry); fresh groups seed it from the current tip.
OptionalrewindDedicated store for the full-fork history tree (per-node keys under a hex group-id prefix). When set, the tree is flushed on GroupSession.save and survives a restart. Optional — when omitted, history is in-memory only and rebuilt from the current tip after each restart.
OptionalschedulerInjectable settle-check timer (B5); defaults to setTimeout.
OptionalsettlementQuiescence window (ms) before convergence may be treated as settled.
Optional forensic audit sink. Omitted by default; audit logging is app opt-in.