Deletes every entry and the manifest; the user's clear-cache action.
Verified bytes for the identity, or undefined for any kind of miss.
Optionalsignal: AbortSignalReads the manifest, drops what cannot be trusted, sweeps orphans.
Marks the open scene's resources; they are never evicted while held.
Offers bytes a live fetch produced. Never throws; refusal is a stat.
Releases every protection, typically before another scene loads.
Content-addressed, quota-bounded, least-recently-used cache over a flat byte store. Every manifest mutation runs through one queue so a single instance is deterministic; across instances (two tabs) the manifest is last-writer- wins and entries are self-verifying, so the worst outcome of a race is an unlisted entry, which the next open sweeps.