@artenx/dshb 0.1.18 → 0.1.20

package/lib/core/sync/peer-manager.js

@@ -0,0 +1,258 @@
+import { parseSyncPeer, parseSyncPeerDraft } from "./model.js";
+import { credentialKey } from "@deepseek-ai/dsh-credentials";
+//#region src/core/sync/peer-manager.ts
+const SECRET_FIELDS = /* @__PURE__ */ new Set([
+	"password",
+	"privateKey",
+	"passphrase"
+]);
+const PATCH_FIELDS = /* @__PURE__ */ new Set([
+	"name",
+	"host",
+	"port",
+	"username",
+	"authKind",
+	"remoteDshHome",
+	"remoteProfile",
+	"remoteWebPort",
+	"direction",
+	"schedule",
+	"syncSessions",
+	"enabled"
+]);
+const MAX_SECRET_BYTES = 65536;
+var SyncPeerInputError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "SyncPeerInputError";
+	}
+};
+var SyncPeerNotFoundError = class extends Error {
+	constructor(id) {
+		super(`sync peer ${id} not found`);
+		this.name = "SyncPeerNotFoundError";
+	}
+};
+function asRecord(value, label) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new SyncPeerInputError(`${label} must be an object`);
+	return value;
+}
+function parseSecrets(value) {
+	if (value === void 0) return void 0;
+	const input = asRecord(value, "secrets");
+	for (const key of Object.keys(input)) if (!SECRET_FIELDS.has(key)) throw new SyncPeerInputError(`unsupported secret field: ${key}`);
+	const output = {};
+	for (const field of [
+		"password",
+		"privateKey",
+		"passphrase"
+	]) {
+		const secret = input[field];
+		if (secret === void 0 || secret === "") continue;
+		if (typeof secret !== "string" || Buffer.byteLength(secret, "utf8") > MAX_SECRET_BYTES || secret.includes("\0")) throw new SyncPeerInputError(`${field} is invalid`);
+		output[field] = secret;
+	}
+	return Object.keys(output).length === 0 ? void 0 : output;
+}
+function payloadFromRecord(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return {};
+	const payload = value.payload;
+	if (payload === null || typeof payload !== "object" || Array.isArray(payload)) return {};
+	const source = payload;
+	return {
+		...typeof source.password === "string" ? { password: source.password } : {},
+		...typeof source.privateKey === "string" ? { privateKey: source.privateKey } : {},
+		...typeof source.passphrase === "string" ? { passphrase: source.passphrase } : {}
+	};
+}
+function toView(peer, secrets) {
+	return {
+		...peer,
+		hasSecret: {
+			hasPassword: Boolean(secrets.password),
+			hasKey: Boolean(secrets.privateKey),
+			hasPassphrase: Boolean(secrets.passphrase)
+		}
+	};
+}
+function validateAuthSecrets(authKind, supplied, effective) {
+	if (authKind === "password") {
+		if (supplied?.privateKey !== void 0 || supplied?.passphrase !== void 0) throw new SyncPeerInputError("key credentials do not match password authentication");
+		if (!effective.password) throw new SyncPeerInputError("password authentication requires a saved password");
+		return;
+	}
+	if (supplied?.password !== void 0) throw new SyncPeerInputError("password does not match key authentication");
+	if (!effective.privateKey) throw new SyncPeerInputError("key authentication requires a saved private key");
+}
+function secretsForAuth(authKind, secrets) {
+	return authKind === "password" ? secrets.password ? { password: secrets.password } : {} : {
+		...secrets.privateKey ? { privateKey: secrets.privateKey } : {},
+		...secrets.passphrase ? { passphrase: secrets.passphrase } : {}
+	};
+}
+function asInputError(error) {
+	return error instanceof SyncPeerInputError ? error : new SyncPeerInputError(error instanceof Error ? error.message : "invalid sync peer");
+}
+var SyncPeerManager = class {
+	peers;
+	state;
+	credentials;
+	listeners = /* @__PURE__ */ new Set();
+	constructor(peers, state, credentials) {
+		this.peers = peers;
+		this.state = state;
+		this.credentials = credentials;
+	}
+	async list() {
+		return Promise.all(this.peers.list().map((peer) => this.view(peer)));
+	}
+	subscribe(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	updateProgress(id, patch) {
+		if (!this.peers.get(id)) throw new SyncPeerNotFoundError(id);
+		this.state.update((state) => {
+			state.peers[id] = {
+				...state.peers[id],
+				...patch
+			};
+		});
+	}
+	async get(id) {
+		const peer = this.peers.get(id);
+		return peer ? this.view(peer) : void 0;
+	}
+	async connectionData(id) {
+		const peer = this.peers.get(id);
+		if (!peer) throw new SyncPeerNotFoundError(id);
+		return {
+			peer,
+			secrets: payloadFromRecord(await this.credentials.readRecord(this.credentialKey(id)))
+		};
+	}
+	async pinHostKey(id, fingerprint) {
+		if (!/^SHA256:[A-Za-z0-9+/]{43}$/.test(fingerprint)) throw new SyncPeerInputError("invalid SSH host-key fingerprint");
+		const peer = this.peers.update(id, { hostKeyFingerprint: fingerprint });
+		return this.view(peer);
+	}
+	async create(draftValue, secretsValue) {
+		let draft;
+		let secrets;
+		try {
+			draft = parseSyncPeerDraft(draftValue);
+			secrets = parseSecrets(secretsValue);
+			validateAuthSecrets(draft.authKind, secrets, secrets ?? {});
+		} catch (error) {
+			throw asInputError(error);
+		}
+		const peer = this.peers.create(draft);
+		let attemptedSecrets = false;
+		try {
+			if (secrets) {
+				attemptedSecrets = true;
+				await this.writeSecrets(peer.id, secretsForAuth(peer.authKind, secrets));
+			}
+			const view = await this.view(peer);
+			this.notify(peer.id, peer);
+			return view;
+		} catch (error) {
+			this.peers.remove(peer.id);
+			if (attemptedSecrets) try {
+				await this.credentials.deleteRecord(this.credentialKey(peer.id));
+			} catch {}
+			throw error;
+		}
+	}
+	async update(id, patchValue, secretsValue) {
+		const current = this.peers.get(id);
+		if (!current) throw new SyncPeerNotFoundError(id);
+		let patch;
+		let secrets;
+		try {
+			const input = asRecord(patchValue, "sync peer patch");
+			for (const key of Object.keys(input)) if (!PATCH_FIELDS.has(key)) throw new SyncPeerInputError(`unsupported peer field: ${key}`);
+			const { id: _id, hostKeyFingerprint: _fingerprint, ...validatedPatch } = parseSyncPeer({
+				...current,
+				...input,
+				id
+			});
+			patch = validatedPatch;
+			secrets = parseSecrets(secretsValue);
+		} catch (error) {
+			throw asInputError(error);
+		}
+		const credentialKeyValue = this.credentialKey(id);
+		const previousRecord = await this.credentials.readRecord(credentialKeyValue);
+		const effectiveSecrets = {
+			...payloadFromRecord(previousRecord),
+			...secrets
+		};
+		const authKind = patch.authKind ?? current.authKind;
+		validateAuthSecrets(authKind, secrets, effectiveSecrets);
+		if (secrets || authKind !== current.authKind) try {
+			await this.writeSecrets(id, secretsForAuth(authKind, effectiveSecrets));
+		} catch (error) {
+			await this.restoreCredentialRecord(credentialKeyValue, previousRecord);
+			throw error;
+		}
+		let updated;
+		try {
+			updated = this.peers.update(id, patch);
+		} catch (error) {
+			await this.restoreCredentialRecord(credentialKeyValue, previousRecord);
+			throw error;
+		}
+		this.notify(id, updated);
+		return this.view(updated);
+	}
+	async remove(id) {
+		if (!this.peers.get(id)) return false;
+		this.peers.remove(id);
+		this.notify(id, void 0);
+		await this.credentials.deleteRecord(this.credentialKey(id));
+		this.state.update((state) => {
+			delete state.peers[id];
+		});
+		return true;
+	}
+	async view(peer) {
+		const record = await this.credentials.readRecord(this.credentialKey(peer.id));
+		const progress = this.state.read().peers[peer.id];
+		return {
+			...toView(peer, payloadFromRecord(record)),
+			...progress ? { progress } : {}
+		};
+	}
+	notify(peerId, peer) {
+		for (const listener of this.listeners) try {
+			listener(peerId, peer);
+		} catch {}
+	}
+	async writeSecrets(id, secrets) {
+		const key = this.credentialKey(id);
+		await this.credentials.modifyRecord(key, async (_current) => ({
+			kind: "grant",
+			payload: secrets
+		}));
+	}
+	async restoreCredentialRecord(key, previous) {
+		try {
+			if (previous === void 0) await this.credentials.deleteRecord(key);
+			else await this.credentials.modifyRecord(key, async () => previous);
+		} catch {}
+	}
+	credentialKey(id) {
+		try {
+			return credentialKey("dshb-core", id);
+		} catch {
+			throw new Error("credentials service unavailable");
+		}
+	}
+};
+//#endregion
+export { SyncPeerInputError, SyncPeerManager, SyncPeerNotFoundError };
+
+//# sourceMappingURL=peer-manager.js.map

package/lib/core/sync/peer-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-manager.js","names":[],"sources":["../../../src/core/sync/peer-manager.ts"],"sourcesContent":["import { credentialKey, type CredentialKey, type CredentialRecord } from '@deepseek-ai/dsh-credentials'\nimport { parseSyncPeer, parseSyncPeerDraft, type SyncPeer, type SyncPeerDraft, type SyncPeerProgress } from './model.js'\nimport { SyncPeerStore, SyncStateStore } from './stores.js'\n\nexport interface SyncPeerSecrets {\n  password?: string\n  privateKey?: string\n  passphrase?: string\n}\n\nexport interface SyncPeerView extends SyncPeer {\n  hasSecret: { hasPassword: boolean; hasKey: boolean; hasPassphrase: boolean }\n  progress?: SyncPeerProgress\n}\n\nexport type SyncPeerChangeListener = (peerId: string, peer: SyncPeer | undefined) => void\n\ninterface CredentialsLike {\n  readRecord(key: CredentialKey): Promise<unknown>\n  modifyRecord(key: CredentialKey, mutate: (current: unknown) => Promise<unknown>): Promise<unknown>\n  deleteRecord(key: CredentialKey): Promise<void>\n}\n\nconst SECRET_FIELDS = new Set(['password', 'privateKey', 'passphrase'])\nconst PATCH_FIELDS = new Set([\n  'name',\n  'host',\n  'port',\n  'username',\n  'authKind',\n  'remoteDshHome',\n  'remoteProfile',\n  'remoteWebPort',\n  'direction',\n  'schedule',\n  'syncSessions',\n  'enabled',\n])\nconst MAX_SECRET_BYTES = 64 * 1024\n\nexport class SyncPeerInputError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'SyncPeerInputError'\n  }\n}\n\nexport class SyncPeerNotFoundError extends Error {\n  constructor(id: string) {\n    super(`sync peer ${id} not found`)\n    this.name = 'SyncPeerNotFoundError'\n  }\n}\n\nfunction asRecord(value: unknown, label: string): Record<string, unknown> {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n    throw new SyncPeerInputError(`${label} must be an object`)\n  }\n  return value as Record<string, unknown>\n}\n\nfunction parseSecrets(value: unknown): SyncPeerSecrets | undefined {\n  if (value === undefined) return undefined\n  const input = asRecord(value, 'secrets')\n  for (const key of Object.keys(input)) {\n    if (!SECRET_FIELDS.has(key)) throw new SyncPeerInputError(`unsupported secret field: ${key}`)\n  }\n\n  const output: SyncPeerSecrets = {}\n  for (const field of ['password', 'privateKey', 'passphrase'] as const) {\n    const secret = input[field]\n    if (secret === undefined || secret === '') continue\n    if (typeof secret !== 'string' || Buffer.byteLength(secret, 'utf8') > MAX_SECRET_BYTES || secret.includes('\\0')) {\n      throw new SyncPeerInputError(`${field} is invalid`)\n    }\n    output[field] = secret\n  }\n  return Object.keys(output).length === 0 ? undefined : output\n}\n\nfunction payloadFromRecord(value: unknown): SyncPeerSecrets {\n  if (value === null || typeof value !== 'object' || Array.isArray(value)) return {}\n  const payload = (value as { payload?: unknown }).payload\n  if (payload === null || typeof payload !== 'object' || Array.isArray(payload)) return {}\n  const source = payload as Record<string, unknown>\n  return {\n    ...(typeof source.password === 'string' ? { password: source.password } : {}),\n    ...(typeof source.privateKey === 'string' ? { privateKey: source.privateKey } : {}),\n    ...(typeof source.passphrase === 'string' ? { passphrase: source.passphrase } : {}),\n  }\n}\n\nfunction toView(peer: SyncPeer, secrets: SyncPeerSecrets): SyncPeerView {\n  return {\n    ...peer,\n    hasSecret: {\n      hasPassword: Boolean(secrets.password),\n      hasKey: Boolean(secrets.privateKey),\n      hasPassphrase: Boolean(secrets.passphrase),\n    },\n  }\n}\n\nfunction validateAuthSecrets(\n  authKind: SyncPeer['authKind'],\n  supplied: SyncPeerSecrets | undefined,\n  effective: SyncPeerSecrets,\n): void {\n  if (authKind === 'password') {\n    if (supplied?.privateKey !== undefined || supplied?.passphrase !== undefined) {\n      throw new SyncPeerInputError('key credentials do not match password authentication')\n    }\n    if (!effective.password) throw new SyncPeerInputError('password authentication requires a saved password')\n    return\n  }\n  if (supplied?.password !== undefined) throw new SyncPeerInputError('password does not match key authentication')\n  if (!effective.privateKey) throw new SyncPeerInputError('key authentication requires a saved private key')\n}\n\nfunction secretsForAuth(authKind: SyncPeer['authKind'], secrets: SyncPeerSecrets): SyncPeerSecrets {\n  return authKind === 'password'\n    ? (secrets.password ? { password: secrets.password } : {})\n    : {\n        ...(secrets.privateKey ? { privateKey: secrets.privateKey } : {}),\n        ...(secrets.passphrase ? { passphrase: secrets.passphrase } : {}),\n      }\n}\n\nfunction asInputError(error: unknown): SyncPeerInputError {\n  return error instanceof SyncPeerInputError\n    ? error\n    : new SyncPeerInputError(error instanceof Error ? error.message : 'invalid sync peer')\n}\n\nexport class SyncPeerManager {\n  private readonly listeners = new Set<SyncPeerChangeListener>()\n\n  constructor(\n    private readonly peers: SyncPeerStore,\n    private readonly state: SyncStateStore,\n    private readonly credentials: CredentialsLike,\n  ) {}\n\n  async list(): Promise<SyncPeerView[]> {\n    return Promise.all(this.peers.list().map((peer) => this.view(peer)))\n  }\n\n  subscribe(listener: SyncPeerChangeListener): () => void {\n    this.listeners.add(listener)\n    return () => { this.listeners.delete(listener) }\n  }\n\n  updateProgress(id: string, patch: SyncPeerProgress): void {\n    if (!this.peers.get(id)) throw new SyncPeerNotFoundError(id)\n    this.state.update((state) => {\n      state.peers[id] = { ...state.peers[id], ...patch }\n    })\n  }\n\n  async get(id: string): Promise<SyncPeerView | undefined> {\n    const peer = this.peers.get(id)\n    return peer ? this.view(peer) : undefined\n  }\n\n  async connectionData(id: string): Promise<{ peer: SyncPeer; secrets: SyncPeerSecrets }> {\n    const peer = this.peers.get(id)\n    if (!peer) throw new SyncPeerNotFoundError(id)\n    const record = await this.credentials.readRecord(this.credentialKey(id))\n    return { peer, secrets: payloadFromRecord(record) }\n  }\n\n  async pinHostKey(id: string, fingerprint: string): Promise<SyncPeerView> {\n    if (!/^SHA256:[A-Za-z0-9+/]{43}$/.test(fingerprint)) {\n      throw new SyncPeerInputError('invalid SSH host-key fingerprint')\n    }\n    const peer = this.peers.update(id, { hostKeyFingerprint: fingerprint })\n    return this.view(peer)\n  }\n\n  async create(draftValue: unknown, secretsValue?: unknown): Promise<SyncPeerView> {\n    let draft: SyncPeerDraft\n    let secrets: SyncPeerSecrets | undefined\n    try {\n      draft = parseSyncPeerDraft(draftValue)\n      secrets = parseSecrets(secretsValue)\n      validateAuthSecrets(draft.authKind, secrets, secrets ?? {})\n    } catch (error) {\n      throw asInputError(error)\n    }\n\n    const peer = this.peers.create(draft)\n    let attemptedSecrets = false\n    try {\n      if (secrets) {\n        attemptedSecrets = true\n        await this.writeSecrets(peer.id, secretsForAuth(peer.authKind, secrets))\n      }\n      const view = await this.view(peer)\n      this.notify(peer.id, peer)\n      return view\n    } catch (error) {\n      this.peers.remove(peer.id)\n      if (attemptedSecrets) {\n        try {\n          await this.credentials.deleteRecord(this.credentialKey(peer.id))\n        } catch {}\n      }\n      throw error\n    }\n  }\n\n  async update(id: string, patchValue: unknown, secretsValue?: unknown): Promise<SyncPeerView> {\n    const current = this.peers.get(id)\n    if (!current) throw new SyncPeerNotFoundError(id)\n\n    let patch: Partial<Omit<SyncPeer, 'id' | 'hostKeyFingerprint'>>\n    let secrets: SyncPeerSecrets | undefined\n    try {\n      const input = asRecord(patchValue, 'sync peer patch')\n      for (const key of Object.keys(input)) {\n        if (!PATCH_FIELDS.has(key)) throw new SyncPeerInputError(`unsupported peer field: ${key}`)\n      }\n      const validated = parseSyncPeer({ ...current, ...input, id })\n      const { id: _id, hostKeyFingerprint: _fingerprint, ...validatedPatch } = validated\n      void _id\n      void _fingerprint\n      patch = validatedPatch\n      secrets = parseSecrets(secretsValue)\n    } catch (error) {\n      throw asInputError(error)\n    }\n\n    const credentialKeyValue = this.credentialKey(id)\n    const previousRecord = await this.credentials.readRecord(credentialKeyValue)\n    const effectiveSecrets = { ...payloadFromRecord(previousRecord), ...secrets }\n    const authKind = patch.authKind ?? current.authKind\n    validateAuthSecrets(authKind, secrets, effectiveSecrets)\n    if (secrets || authKind !== current.authKind) {\n      try {\n        await this.writeSecrets(id, secretsForAuth(authKind, effectiveSecrets))\n      } catch (error) {\n        await this.restoreCredentialRecord(credentialKeyValue, previousRecord)\n        throw error\n      }\n    }\n\n    let updated: SyncPeer\n    try {\n      updated = this.peers.update(id, patch)\n    } catch (error) {\n      await this.restoreCredentialRecord(credentialKeyValue, previousRecord)\n      throw error\n    }\n    this.notify(id, updated)\n    return this.view(updated)\n  }\n\n  async remove(id: string): Promise<boolean> {\n    if (!this.peers.get(id)) return false\n    this.peers.remove(id)\n    this.notify(id, undefined)\n    await this.credentials.deleteRecord(this.credentialKey(id))\n    this.state.update((state) => {\n      delete state.peers[id]\n    })\n    return true\n  }\n\n  private async view(peer: SyncPeer): Promise<SyncPeerView> {\n    const record = await this.credentials.readRecord(this.credentialKey(peer.id))\n    const progress = this.state.read().peers[peer.id]\n    return { ...toView(peer, payloadFromRecord(record)), ...(progress ? { progress } : {}) }\n  }\n\n  private notify(peerId: string, peer: SyncPeer | undefined): void {\n    for (const listener of this.listeners) {\n      try {\n        listener(peerId, peer)\n      } catch {}\n    }\n  }\n\n  private async writeSecrets(id: string, secrets: SyncPeerSecrets): Promise<void> {\n    const key = this.credentialKey(id)\n    await this.credentials.modifyRecord(key, async (_current) => ({\n      kind: 'grant',\n      payload: secrets,\n    }) as CredentialRecord)\n  }\n\n  private async restoreCredentialRecord(key: CredentialKey, previous: unknown): Promise<void> {\n    try {\n      if (previous === undefined) await this.credentials.deleteRecord(key)\n      else await this.credentials.modifyRecord(key, async () => previous)\n    } catch {}\n  }\n\n  private credentialKey(id: string): CredentialKey {\n    try {\n      return credentialKey('dshb-core', id)\n    } catch {\n      throw new Error('credentials service unavailable')\n    }\n  }\n}\n"],"mappings":";;;AAuBA,MAAM,gCAAgB,IAAI,IAAI;CAAC;CAAY;CAAc;AAAY,CAAC;AACtE,MAAM,+BAAe,IAAI,IAAI;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AACD,MAAM,mBAAmB;AAEzB,IAAa,qBAAb,cAAwC,MAAM;CAC5C,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,IAAa,wBAAb,cAA2C,MAAM;CAC/C,YAAY,IAAY;EACtB,MAAM,aAAa,GAAG,WAAW;EACjC,KAAK,OAAO;CACd;AACF;AAEA,SAAS,SAAS,OAAgB,OAAwC;CACxE,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,mBAAmB,GAAG,MAAM,mBAAmB;CAE3D,OAAO;AACT;AAEA,SAAS,aAAa,OAA6C;CACjE,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,MAAM,QAAQ,SAAS,OAAO,SAAS;CACvC,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GACjC,IAAI,CAAC,cAAc,IAAI,GAAG,GAAG,MAAM,IAAI,mBAAmB,6BAA6B,KAAK;CAG9F,MAAM,SAA0B,CAAC;CACjC,KAAK,MAAM,SAAS;EAAC;EAAY;EAAc;CAAY,GAAY;EACrE,MAAM,SAAS,MAAM;EACrB,IAAI,WAAW,KAAA,KAAa,WAAW,IAAI;EAC3C,IAAI,OAAO,WAAW,YAAY,OAAO,WAAW,QAAQ,MAAM,IAAI,oBAAoB,OAAO,SAAS,IAAI,GAC5G,MAAM,IAAI,mBAAmB,GAAG,MAAM,YAAY;EAEpD,OAAO,SAAS;CAClB;CACA,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,WAAW,IAAI,KAAA,IAAY;AACxD;AAEA,SAAS,kBAAkB,OAAiC;CAC1D,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACjF,MAAM,UAAW,MAAgC;CACjD,IAAI,YAAY,QAAQ,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAAG,OAAO,CAAC;CACvF,MAAM,SAAS;CACf,OAAO;EACL,GAAI,OAAO,OAAO,aAAa,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;EAC3E,GAAI,OAAO,OAAO,eAAe,WAAW,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;EACjF,GAAI,OAAO,OAAO,eAAe,WAAW,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;CACnF;AACF;AAEA,SAAS,OAAO,MAAgB,SAAwC;CACtE,OAAO;EACL,GAAG;EACH,WAAW;GACT,aAAa,QAAQ,QAAQ,QAAQ;GACrC,QAAQ,QAAQ,QAAQ,UAAU;GAClC,eAAe,QAAQ,QAAQ,UAAU;EAC3C;CACF;AACF;AAEA,SAAS,oBACP,UACA,UACA,WACM;CACN,IAAI,aAAa,YAAY;EAC3B,IAAI,UAAU,eAAe,KAAA,KAAa,UAAU,eAAe,KAAA,GACjE,MAAM,IAAI,mBAAmB,sDAAsD;EAErF,IAAI,CAAC,UAAU,UAAU,MAAM,IAAI,mBAAmB,mDAAmD;EACzG;CACF;CACA,IAAI,UAAU,aAAa,KAAA,GAAW,MAAM,IAAI,mBAAmB,4CAA4C;CAC/G,IAAI,CAAC,UAAU,YAAY,MAAM,IAAI,mBAAmB,iDAAiD;AAC3G;AAEA,SAAS,eAAe,UAAgC,SAA2C;CACjG,OAAO,aAAa,aACf,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC,IACtD;EACE,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;EAC/D,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;CACjE;AACN;AAEA,SAAS,aAAa,OAAoC;CACxD,OAAO,iBAAiB,qBACpB,QACA,IAAI,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,mBAAmB;AACzF;AAEA,IAAa,kBAAb,MAA6B;CAIR;CACA;CACA;CALnB,4BAA6B,IAAI,IAA4B;CAE7D,YACE,OACA,OACA,aACA;EAHiB,KAAA,QAAA;EACA,KAAA,QAAA;EACA,KAAA,cAAA;CAChB;CAEH,MAAM,OAAgC;EACpC,OAAO,QAAQ,IAAI,KAAK,MAAM,KAAK,CAAC,CAAC,KAAK,SAAS,KAAK,KAAK,IAAI,CAAC,CAAC;CACrE;CAEA,UAAU,UAA8C;EACtD,KAAK,UAAU,IAAI,QAAQ;EAC3B,aAAa;GAAE,KAAK,UAAU,OAAO,QAAQ;EAAE;CACjD;CAEA,eAAe,IAAY,OAA+B;EACxD,IAAI,CAAC,KAAK,MAAM,IAAI,EAAE,GAAG,MAAM,IAAI,sBAAsB,EAAE;EAC3D,KAAK,MAAM,QAAQ,UAAU;GAC3B,MAAM,MAAM,MAAM;IAAE,GAAG,MAAM,MAAM;IAAK,GAAG;GAAM;EACnD,CAAC;CACH;CAEA,MAAM,IAAI,IAA+C;EACvD,MAAM,OAAO,KAAK,MAAM,IAAI,EAAE;EAC9B,OAAO,OAAO,KAAK,KAAK,IAAI,IAAI,KAAA;CAClC;CAEA,MAAM,eAAe,IAAmE;EACtF,MAAM,OAAO,KAAK,MAAM,IAAI,EAAE;EAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,sBAAsB,EAAE;EAE7C,OAAO;GAAE;GAAM,SAAS,kBAAkB,MADrB,KAAK,YAAY,WAAW,KAAK,cAAc,EAAE,CAAC,CACvB;EAAE;CACpD;CAEA,MAAM,WAAW,IAAY,aAA4C;EACvE,IAAI,CAAC,6BAA6B,KAAK,WAAW,GAChD,MAAM,IAAI,mBAAmB,kCAAkC;EAEjE,MAAM,OAAO,KAAK,MAAM,OAAO,IAAI,EAAE,oBAAoB,YAAY,CAAC;EACtE,OAAO,KAAK,KAAK,IAAI;CACvB;CAEA,MAAM,OAAO,YAAqB,cAA+C;EAC/E,IAAI;EACJ,IAAI;EACJ,IAAI;GACF,QAAQ,mBAAmB,UAAU;GACrC,UAAU,aAAa,YAAY;GACnC,oBAAoB,MAAM,UAAU,SAAS,WAAW,CAAC,CAAC;EAC5D,SAAS,OAAO;GACd,MAAM,aAAa,KAAK;EAC1B;EAEA,MAAM,OAAO,KAAK,MAAM,OAAO,KAAK;EACpC,IAAI,mBAAmB;EACvB,IAAI;GACF,IAAI,SAAS;IACX,mBAAmB;IACnB,MAAM,KAAK,aAAa,KAAK,IAAI,eAAe,KAAK,UAAU,OAAO,CAAC;GACzE;GACA,MAAM,OAAO,MAAM,KAAK,KAAK,IAAI;GACjC,KAAK,OAAO,KAAK,IAAI,IAAI;GACzB,OAAO;EACT,SAAS,OAAO;GACd,KAAK,MAAM,OAAO,KAAK,EAAE;GACzB,IAAI,kBACF,IAAI;IACF,MAAM,KAAK,YAAY,aAAa,KAAK,cAAc,KAAK,EAAE,CAAC;GACjE,QAAQ,CAAC;GAEX,MAAM;EACR;CACF;CAEA,MAAM,OAAO,IAAY,YAAqB,cAA+C;EAC3F,MAAM,UAAU,KAAK,MAAM,IAAI,EAAE;EACjC,IAAI,CAAC,SAAS,MAAM,IAAI,sBAAsB,EAAE;EAEhD,IAAI;EACJ,IAAI;EACJ,IAAI;GACF,MAAM,QAAQ,SAAS,YAAY,iBAAiB;GACpD,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GACjC,IAAI,CAAC,aAAa,IAAI,GAAG,GAAG,MAAM,IAAI,mBAAmB,2BAA2B,KAAK;GAG3F,MAAM,EAAE,IAAI,KAAK,oBAAoB,cAAc,GAAG,mBADpC,cAAc;IAAE,GAAG;IAAS,GAAG;IAAO;GAAG,CACsB;GAGjF,QAAQ;GACR,UAAU,aAAa,YAAY;EACrC,SAAS,OAAO;GACd,MAAM,aAAa,KAAK;EAC1B;EAEA,MAAM,qBAAqB,KAAK,cAAc,EAAE;EAChD,MAAM,iBAAiB,MAAM,KAAK,YAAY,WAAW,kBAAkB;EAC3E,MAAM,mBAAmB;GAAE,GAAG,kBAAkB,cAAc;GAAG,GAAG;EAAQ;EAC5E,MAAM,WAAW,MAAM,YAAY,QAAQ;EAC3C,oBAAoB,UAAU,SAAS,gBAAgB;EACvD,IAAI,WAAW,aAAa,QAAQ,UAClC,IAAI;GACF,MAAM,KAAK,aAAa,IAAI,eAAe,UAAU,gBAAgB,CAAC;EACxE,SAAS,OAAO;GACd,MAAM,KAAK,wBAAwB,oBAAoB,cAAc;GACrE,MAAM;EACR;EAGF,IAAI;EACJ,IAAI;GACF,UAAU,KAAK,MAAM,OAAO,IAAI,KAAK;EACvC,SAAS,OAAO;GACd,MAAM,KAAK,wBAAwB,oBAAoB,cAAc;GACrE,MAAM;EACR;EACA,KAAK,OAAO,IAAI,OAAO;EACvB,OAAO,KAAK,KAAK,OAAO;CAC1B;CAEA,MAAM,OAAO,IAA8B;EACzC,IAAI,CAAC,KAAK,MAAM,IAAI,EAAE,GAAG,OAAO;EAChC,KAAK,MAAM,OAAO,EAAE;EACpB,KAAK,OAAO,IAAI,KAAA,CAAS;EACzB,MAAM,KAAK,YAAY,aAAa,KAAK,cAAc,EAAE,CAAC;EAC1D,KAAK,MAAM,QAAQ,UAAU;GAC3B,OAAO,MAAM,MAAM;EACrB,CAAC;EACD,OAAO;CACT;CAEA,MAAc,KAAK,MAAuC;EACxD,MAAM,SAAS,MAAM,KAAK,YAAY,WAAW,KAAK,cAAc,KAAK,EAAE,CAAC;EAC5E,MAAM,WAAW,KAAK,MAAM,KAAK,CAAC,CAAC,MAAM,KAAK;EAC9C,OAAO;GAAE,GAAG,OAAO,MAAM,kBAAkB,MAAM,CAAC;GAAG,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;EAAG;CACzF;CAEA,OAAe,QAAgB,MAAkC;EAC/D,KAAK,MAAM,YAAY,KAAK,WAC1B,IAAI;GACF,SAAS,QAAQ,IAAI;EACvB,QAAQ,CAAC;CAEb;CAEA,MAAc,aAAa,IAAY,SAAyC;EAC9E,MAAM,MAAM,KAAK,cAAc,EAAE;EACjC,MAAM,KAAK,YAAY,aAAa,KAAK,OAAO,cAAc;GAC5D,MAAM;GACN,SAAS;EACX,EAAsB;CACxB;CAEA,MAAc,wBAAwB,KAAoB,UAAkC;EAC1F,IAAI;GACF,IAAI,aAAa,KAAA,GAAW,MAAM,KAAK,YAAY,aAAa,GAAG;QAC9D,MAAM,KAAK,YAAY,aAAa,KAAK,YAAY,QAAQ;EACpE,QAAQ,CAAC;CACX;CAEA,cAAsB,IAA2B;EAC/C,IAAI;GACF,OAAO,cAAc,aAAa,EAAE;EACtC,QAAQ;GACN,MAAM,IAAI,MAAM,iCAAiC;EACnD;CACF;AACF"}

package/lib/core/sync/protocol.d.ts

@@ -0,0 +1,2 @@
+import { a as SyncFrame, c as encodeSyncControlFrame, i as SYNC_PROTOCOL_VERSION, l as encodeSyncDataFrame, n as MAX_SYNC_DATA_CHUNK_BYTES, o as SyncFrameDecoder, r as MAX_SYNC_TRANSFER_BYTES, s as SyncProtocolError, t as MAX_SYNC_CONTROL_FRAME_BYTES } from "../../protocol-CV7LGE44.js";
+export { MAX_SYNC_CONTROL_FRAME_BYTES, MAX_SYNC_DATA_CHUNK_BYTES, MAX_SYNC_TRANSFER_BYTES, SYNC_PROTOCOL_VERSION, SyncFrame, SyncFrameDecoder, SyncProtocolError, encodeSyncControlFrame, encodeSyncDataFrame };

package/lib/core/sync/protocol.js

@@ -0,0 +1,124 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+//#region src/core/sync/protocol.ts
+const SYNC_PROTOCOL_VERSION = 1;
+const MAX_SYNC_CONTROL_FRAME_BYTES = 65536;
+const MAX_SYNC_DATA_CHUNK_BYTES = 1048576;
+const MAX_SYNC_TRANSFER_BYTES = 107374182400;
+const FRAME_HEADER_BYTES = 5;
+const CONTROL_FRAME = 0;
+const DATA_FRAME = 1;
+const DATA_METADATA_BYTES = 36;
+var SyncProtocolError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "SyncProtocolError";
+	}
+};
+function makeHeader(type, payloadLength) {
+	const header = Buffer.allocUnsafe(FRAME_HEADER_BYTES);
+	header[0] = type;
+	header.writeUInt32BE(payloadLength, 1);
+	return header;
+}
+function encodeSyncControlFrame(value) {
+	const payload = Buffer.from(`${JSON.stringify(value)}\n`, "utf8");
+	if (payload.length > 65536) throw new SyncProtocolError("control frame exceeds size limit");
+	return Buffer.concat([makeHeader(CONTROL_FRAME, payload.length), payload]);
+}
+function encodeSyncDataFrame(sequence, data) {
+	if (!Number.isSafeInteger(sequence) || sequence < 0 || sequence > 4294967295) throw new SyncProtocolError("data sequence is invalid");
+	if (data.length > 1048576) throw new SyncProtocolError("data chunk exceeds size limit");
+	const metadata = Buffer.allocUnsafe(DATA_METADATA_BYTES);
+	metadata.writeUInt32BE(sequence, 0);
+	createHash("sha256").update(data).digest().copy(metadata, 4);
+	return Buffer.concat([
+		makeHeader(DATA_FRAME, metadata.length + data.length),
+		metadata,
+		data
+	]);
+}
+var SyncFrameDecoder = class {
+	header = Buffer.allocUnsafe(FRAME_HEADER_BYTES);
+	headerOffset = 0;
+	frameType = -1;
+	payload;
+	payloadOffset = 0;
+	nextDataSequence = 0;
+	ended = false;
+	push(chunk) {
+		if (this.ended) throw new SyncProtocolError("frame decoder is already finished");
+		const frames = [];
+		let inputOffset = 0;
+		while (inputOffset < chunk.length) {
+			if (!this.payload) {
+				const copied = Math.min(FRAME_HEADER_BYTES - this.headerOffset, chunk.length - inputOffset);
+				chunk.copy(this.header, this.headerOffset, inputOffset, inputOffset + copied);
+				this.headerOffset += copied;
+				inputOffset += copied;
+				if (this.headerOffset < FRAME_HEADER_BYTES) continue;
+				this.frameType = this.header[0];
+				const payloadLength = this.header.readUInt32BE(1);
+				if (this.frameType === CONTROL_FRAME) {
+					if (payloadLength < 2 || payloadLength > 65536) throw new SyncProtocolError("control frame length is invalid");
+				} else if (this.frameType === DATA_FRAME) {
+					if (payloadLength < DATA_METADATA_BYTES || payloadLength > 1048612) throw new SyncProtocolError("data frame length is invalid");
+				} else throw new SyncProtocolError("unknown frame type");
+				this.payload = Buffer.allocUnsafe(payloadLength);
+				this.payloadOffset = 0;
+			}
+			const payload = this.payload;
+			const copied = Math.min(payload.length - this.payloadOffset, chunk.length - inputOffset);
+			chunk.copy(payload, this.payloadOffset, inputOffset, inputOffset + copied);
+			this.payloadOffset += copied;
+			inputOffset += copied;
+			if (this.payloadOffset === payload.length) {
+				frames.push(this.decodeFrame(this.frameType, payload));
+				this.resetFrame();
+			}
+		}
+		return frames;
+	}
+	finish() {
+		if (this.headerOffset !== 0 || this.payload !== void 0) throw new SyncProtocolError("truncated frame stream");
+		this.ended = true;
+	}
+	decodeFrame(type, payload) {
+		if (type === CONTROL_FRAME) {
+			if (payload[payload.length - 1] !== 10) throw new SyncProtocolError("control frame must end with a newline");
+			let value;
+			try {
+				value = JSON.parse(payload.subarray(0, -1).toString("utf8"));
+			} catch {
+				throw new SyncProtocolError("control frame contains invalid JSON");
+			}
+			if (value === null || typeof value !== "object" || Array.isArray(value)) throw new SyncProtocolError("control frame must contain an object");
+			return {
+				kind: "control",
+				value
+			};
+		}
+		const sequence = payload.readUInt32BE(0);
+		if (sequence !== this.nextDataSequence) throw new SyncProtocolError("data sequence is out of order");
+		const expectedDigest = payload.subarray(4, DATA_METADATA_BYTES);
+		const data = payload.subarray(DATA_METADATA_BYTES);
+		const actualDigest = createHash("sha256").update(data).digest();
+		if (!timingSafeEqual(expectedDigest, actualDigest)) throw new SyncProtocolError("data chunk digest mismatch");
+		this.nextDataSequence += 1;
+		return {
+			kind: "data",
+			sequence,
+			digest: actualDigest.toString("hex"),
+			data: Buffer.from(data)
+		};
+	}
+	resetFrame() {
+		this.headerOffset = 0;
+		this.frameType = -1;
+		this.payload = void 0;
+		this.payloadOffset = 0;
+	}
+};
+//#endregion
+export { MAX_SYNC_CONTROL_FRAME_BYTES, MAX_SYNC_DATA_CHUNK_BYTES, MAX_SYNC_TRANSFER_BYTES, SYNC_PROTOCOL_VERSION, SyncFrameDecoder, SyncProtocolError, encodeSyncControlFrame, encodeSyncDataFrame };
+
+//# sourceMappingURL=protocol.js.map

package/lib/core/sync/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","names":[],"sources":["../../../src/core/sync/protocol.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from 'node:crypto'\n\nexport const SYNC_PROTOCOL_VERSION = 1\nexport const MAX_SYNC_CONTROL_FRAME_BYTES = 64 * 1024\nexport const MAX_SYNC_DATA_CHUNK_BYTES = 1024 * 1024\nexport const MAX_SYNC_TRANSFER_BYTES = 100 * 1024 * 1024 * 1024\n\nconst FRAME_HEADER_BYTES = 5\nconst CONTROL_FRAME = 0\nconst DATA_FRAME = 1\nconst DATA_METADATA_BYTES = 36\n\nexport type SyncFrame =\n  | { kind: 'control'; value: Record<string, unknown> }\n  | { kind: 'data'; sequence: number; digest: string; data: Buffer }\n\nexport class SyncProtocolError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'SyncProtocolError'\n  }\n}\n\nfunction makeHeader(type: number, payloadLength: number): Buffer {\n  const header = Buffer.allocUnsafe(FRAME_HEADER_BYTES)\n  header[0] = type\n  header.writeUInt32BE(payloadLength, 1)\n  return header\n}\n\nexport function encodeSyncControlFrame(value: Record<string, unknown>): Buffer {\n  const payload = Buffer.from(`${JSON.stringify(value)}\\n`, 'utf8')\n  if (payload.length > MAX_SYNC_CONTROL_FRAME_BYTES) throw new SyncProtocolError('control frame exceeds size limit')\n  return Buffer.concat([makeHeader(CONTROL_FRAME, payload.length), payload])\n}\n\nexport function encodeSyncDataFrame(sequence: number, data: Buffer): Buffer {\n  if (!Number.isSafeInteger(sequence) || sequence < 0 || sequence > 0xffffffff) {\n    throw new SyncProtocolError('data sequence is invalid')\n  }\n  if (data.length > MAX_SYNC_DATA_CHUNK_BYTES) throw new SyncProtocolError('data chunk exceeds size limit')\n  const metadata = Buffer.allocUnsafe(DATA_METADATA_BYTES)\n  metadata.writeUInt32BE(sequence, 0)\n  createHash('sha256').update(data).digest().copy(metadata, 4)\n  return Buffer.concat([makeHeader(DATA_FRAME, metadata.length + data.length), metadata, data])\n}\n\nexport class SyncFrameDecoder {\n  private readonly header = Buffer.allocUnsafe(FRAME_HEADER_BYTES)\n  private headerOffset = 0\n  private frameType = -1\n  private payload: Buffer | undefined\n  private payloadOffset = 0\n  private nextDataSequence = 0\n  private ended = false\n\n  push(chunk: Buffer): SyncFrame[] {\n    if (this.ended) throw new SyncProtocolError('frame decoder is already finished')\n    const frames: SyncFrame[] = []\n    let inputOffset = 0\n\n    while (inputOffset < chunk.length) {\n      if (!this.payload) {\n        const copied = Math.min(FRAME_HEADER_BYTES - this.headerOffset, chunk.length - inputOffset)\n        chunk.copy(this.header, this.headerOffset, inputOffset, inputOffset + copied)\n        this.headerOffset += copied\n        inputOffset += copied\n        if (this.headerOffset < FRAME_HEADER_BYTES) continue\n\n        this.frameType = this.header[0]\n        const payloadLength = this.header.readUInt32BE(1)\n        if (this.frameType === CONTROL_FRAME) {\n          if (payloadLength < 2 || payloadLength > MAX_SYNC_CONTROL_FRAME_BYTES) {\n            throw new SyncProtocolError('control frame length is invalid')\n          }\n        } else if (this.frameType === DATA_FRAME) {\n          if (payloadLength < DATA_METADATA_BYTES || payloadLength > DATA_METADATA_BYTES + MAX_SYNC_DATA_CHUNK_BYTES) {\n            throw new SyncProtocolError('data frame length is invalid')\n          }\n        } else {\n          throw new SyncProtocolError('unknown frame type')\n        }\n        this.payload = Buffer.allocUnsafe(payloadLength)\n        this.payloadOffset = 0\n      }\n\n      const payload = this.payload\n      const copied = Math.min(payload.length - this.payloadOffset, chunk.length - inputOffset)\n      chunk.copy(payload, this.payloadOffset, inputOffset, inputOffset + copied)\n      this.payloadOffset += copied\n      inputOffset += copied\n\n      if (this.payloadOffset === payload.length) {\n        frames.push(this.decodeFrame(this.frameType, payload))\n        this.resetFrame()\n      }\n    }\n    return frames\n  }\n\n  finish(): void {\n    if (this.headerOffset !== 0 || this.payload !== undefined) throw new SyncProtocolError('truncated frame stream')\n    this.ended = true\n  }\n\n  private decodeFrame(type: number, payload: Buffer): SyncFrame {\n    if (type === CONTROL_FRAME) {\n      if (payload[payload.length - 1] !== 0x0a) throw new SyncProtocolError('control frame must end with a newline')\n      let value: unknown\n      try {\n        value = JSON.parse(payload.subarray(0, -1).toString('utf8'))\n      } catch {\n        throw new SyncProtocolError('control frame contains invalid JSON')\n      }\n      if (value === null || typeof value !== 'object' || Array.isArray(value)) {\n        throw new SyncProtocolError('control frame must contain an object')\n      }\n      return { kind: 'control', value: value as Record<string, unknown> }\n    }\n\n    const sequence = payload.readUInt32BE(0)\n    if (sequence !== this.nextDataSequence) throw new SyncProtocolError('data sequence is out of order')\n    const expectedDigest = payload.subarray(4, DATA_METADATA_BYTES)\n    const data = payload.subarray(DATA_METADATA_BYTES)\n    const actualDigest = createHash('sha256').update(data).digest()\n    if (!timingSafeEqual(expectedDigest, actualDigest)) throw new SyncProtocolError('data chunk digest mismatch')\n    this.nextDataSequence += 1\n    return { kind: 'data', sequence, digest: actualDigest.toString('hex'), data: Buffer.from(data) }\n  }\n\n  private resetFrame(): void {\n    this.headerOffset = 0\n    this.frameType = -1\n    this.payload = undefined\n    this.payloadOffset = 0\n  }\n}\n"],"mappings":";;AAEA,MAAa,wBAAwB;AACrC,MAAa,+BAA+B;AAC5C,MAAa,4BAA4B;AACzC,MAAa,0BAA0B;AAEvC,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB;AACtB,MAAM,aAAa;AACnB,MAAM,sBAAsB;AAM5B,IAAa,oBAAb,cAAuC,MAAM;CAC3C,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAS,WAAW,MAAc,eAA+B;CAC/D,MAAM,SAAS,OAAO,YAAY,kBAAkB;CACpD,OAAO,KAAK;CACZ,OAAO,cAAc,eAAe,CAAC;CACrC,OAAO;AACT;AAEA,SAAgB,uBAAuB,OAAwC;CAC7E,MAAM,UAAU,OAAO,KAAK,GAAG,KAAK,UAAU,KAAK,EAAE,KAAK,MAAM;CAChE,IAAI,QAAQ,SAAA,OAAuC,MAAM,IAAI,kBAAkB,kCAAkC;CACjH,OAAO,OAAO,OAAO,CAAC,WAAW,eAAe,QAAQ,MAAM,GAAG,OAAO,CAAC;AAC3E;AAEA,SAAgB,oBAAoB,UAAkB,MAAsB;CAC1E,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,KAAK,WAAW,YAChE,MAAM,IAAI,kBAAkB,0BAA0B;CAExD,IAAI,KAAK,SAAA,SAAoC,MAAM,IAAI,kBAAkB,+BAA+B;CACxG,MAAM,WAAW,OAAO,YAAY,mBAAmB;CACvD,SAAS,cAAc,UAAU,CAAC;CAClC,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,UAAU,CAAC;CAC3D,OAAO,OAAO,OAAO;EAAC,WAAW,YAAY,SAAS,SAAS,KAAK,MAAM;EAAG;EAAU;CAAI,CAAC;AAC9F;AAEA,IAAa,mBAAb,MAA8B;CAC5B,SAA0B,OAAO,YAAY,kBAAkB;CAC/D,eAAuB;CACvB,YAAoB;CACpB;CACA,gBAAwB;CACxB,mBAA2B;CAC3B,QAAgB;CAEhB,KAAK,OAA4B;EAC/B,IAAI,KAAK,OAAO,MAAM,IAAI,kBAAkB,mCAAmC;EAC/E,MAAM,SAAsB,CAAC;EAC7B,IAAI,cAAc;EAElB,OAAO,cAAc,MAAM,QAAQ;GACjC,IAAI,CAAC,KAAK,SAAS;IACjB,MAAM,SAAS,KAAK,IAAI,qBAAqB,KAAK,cAAc,MAAM,SAAS,WAAW;IAC1F,MAAM,KAAK,KAAK,QAAQ,KAAK,cAAc,aAAa,cAAc,MAAM;IAC5E,KAAK,gBAAgB;IACrB,eAAe;IACf,IAAI,KAAK,eAAe,oBAAoB;IAE5C,KAAK,YAAY,KAAK,OAAO;IAC7B,MAAM,gBAAgB,KAAK,OAAO,aAAa,CAAC;IAChD,IAAI,KAAK,cAAc,eACjB;SAAA,gBAAgB,KAAK,gBAAA,OACvB,MAAM,IAAI,kBAAkB,iCAAiC;IAAA,OAE1D,IAAI,KAAK,cAAc,YACxB;SAAA,gBAAgB,uBAAuB,gBAAgB,SACzD,MAAM,IAAI,kBAAkB,8BAA8B;IAAA,OAG5D,MAAM,IAAI,kBAAkB,oBAAoB;IAElD,KAAK,UAAU,OAAO,YAAY,aAAa;IAC/C,KAAK,gBAAgB;GACvB;GAEA,MAAM,UAAU,KAAK;GACrB,MAAM,SAAS,KAAK,IAAI,QAAQ,SAAS,KAAK,eAAe,MAAM,SAAS,WAAW;GACvF,MAAM,KAAK,SAAS,KAAK,eAAe,aAAa,cAAc,MAAM;GACzE,KAAK,iBAAiB;GACtB,eAAe;GAEf,IAAI,KAAK,kBAAkB,QAAQ,QAAQ;IACzC,OAAO,KAAK,KAAK,YAAY,KAAK,WAAW,OAAO,CAAC;IACrD,KAAK,WAAW;GAClB;EACF;EACA,OAAO;CACT;CAEA,SAAe;EACb,IAAI,KAAK,iBAAiB,KAAK,KAAK,YAAY,KAAA,GAAW,MAAM,IAAI,kBAAkB,wBAAwB;EAC/G,KAAK,QAAQ;CACf;CAEA,YAAoB,MAAc,SAA4B;EAC5D,IAAI,SAAS,eAAe;GAC1B,IAAI,QAAQ,QAAQ,SAAS,OAAO,IAAM,MAAM,IAAI,kBAAkB,uCAAuC;GAC7G,IAAI;GACJ,IAAI;IACF,QAAQ,KAAK,MAAM,QAAQ,SAAS,GAAG,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC;GAC7D,QAAQ;IACN,MAAM,IAAI,kBAAkB,qCAAqC;GACnE;GACA,IAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GACpE,MAAM,IAAI,kBAAkB,sCAAsC;GAEpE,OAAO;IAAE,MAAM;IAAkB;GAAiC;EACpE;EAEA,MAAM,WAAW,QAAQ,aAAa,CAAC;EACvC,IAAI,aAAa,KAAK,kBAAkB,MAAM,IAAI,kBAAkB,+BAA+B;EACnG,MAAM,iBAAiB,QAAQ,SAAS,GAAG,mBAAmB;EAC9D,MAAM,OAAO,QAAQ,SAAS,mBAAmB;EACjD,MAAM,eAAe,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO;EAC9D,IAAI,CAAC,gBAAgB,gBAAgB,YAAY,GAAG,MAAM,IAAI,kBAAkB,4BAA4B;EAC5G,KAAK,oBAAoB;EACzB,OAAO;GAAE,MAAM;GAAQ;GAAU,QAAQ,aAAa,SAAS,KAAK;GAAG,MAAM,OAAO,KAAK,IAAI;EAAE;CACjG;CAEA,aAA2B;EACzB,KAAK,eAAe;EACpB,KAAK,YAAY;EACjB,KAAK,UAAU,KAAA;EACf,KAAK,gBAAgB;CACvB;AACF"}

package/lib/core/sync/remote-helper.d.ts

@@ -0,0 +1,5 @@
+//#region src/core/sync/remote-helper.d.ts
+declare const REMOTE_SYNC_HELPER_COMMAND: string;
+//#endregion
+export { REMOTE_SYNC_HELPER_COMMAND };
+//# sourceMappingURL=remote-helper.d.ts.map

package/lib/core/sync/remote-helper.js

@@ -0,0 +1,160 @@
+import { Buffer } from "node:buffer";
+//#region src/core/sync/remote-helper.ts
+const REMOTE_HELPER_SOURCE = String.raw`'use strict'
+const { createHash, timingSafeEqual } = require('node:crypto')
+const MAX_CONTROL = 65536
+const MAX_CHUNK = 1048576
+const MAX_TRANSFER = 107374182400
+const PATHS = {
+  handshake: { path: '/api/dshb/sync/internal/handshake', method: 'GET' },
+  'node-manifest': { path: '/api/dshb/sync/internal/nodes/manifest', method: 'GET' },
+  'node-apply': { path: '/api/dshb/sync/internal/nodes/apply', method: 'POST' },
+  'session-bundle': { path: '/api/dshb/sync/internal/sessions/bundle', method: 'GET' },
+  'session-apply': { path: '/api/dshb/sync/internal/sessions/apply', method: 'POST' },
+}
+const input = []
+let inputBytes = 0
+
+function encodeControl(value) {
+  const body = Buffer.from(JSON.stringify(value) + '\n', 'utf8')
+  if (body.length > MAX_CONTROL) throw new Error('control frame too large')
+  const header = Buffer.alloc(5)
+  header[0] = 0
+  header.writeUInt32BE(body.length, 1)
+  return Buffer.concat([header, body])
+}
+
+function encodeData(sequence, data) {
+  const digest = createHash('sha256').update(data).digest()
+  const metadata = Buffer.alloc(36)
+  metadata.writeUInt32BE(sequence, 0)
+  digest.copy(metadata, 4)
+  const payload = Buffer.concat([metadata, data])
+  const header = Buffer.alloc(5)
+  header[0] = 1
+  header.writeUInt32BE(payload.length, 1)
+  return Buffer.concat([header, payload])
+}
+
+function decodeFrames(buffer) {
+  const frames = []
+  let offset = 0
+  let sequence = 0
+  let totalData = 0
+  while (offset < buffer.length) {
+    if (buffer.length - offset < 5) throw new Error('truncated frame header')
+    const kind = buffer[offset]
+    const length = buffer.readUInt32BE(offset + 1)
+    offset += 5
+    const maxLength = kind === 0 ? MAX_CONTROL : 36 + MAX_CHUNK
+    if ((kind !== 0 && kind !== 1) || length > maxLength || length > buffer.length - offset) {
+      throw new Error('invalid frame length')
+    }
+    const payload = buffer.subarray(offset, offset + length)
+    offset += length
+    if (kind === 0) {
+      if (length < 2 || payload[length - 1] !== 10) throw new Error('invalid control frame')
+      frames.push({ kind: 'control', value: JSON.parse(payload.subarray(0, -1).toString('utf8')) })
+    } else {
+      if (length < 36) throw new Error('invalid data frame')
+      const currentSequence = payload.readUInt32BE(0)
+      const expected = payload.subarray(4, 36)
+      const data = payload.subarray(36)
+      const actual = createHash('sha256').update(data).digest()
+      if (currentSequence !== sequence || !timingSafeEqual(expected, actual)) throw new Error('invalid data chunk')
+      sequence += 1
+      totalData += data.length
+      if (totalData > MAX_TRANSFER) throw new Error('transfer exceeds size limit')
+      frames.push({ kind: 'data', data })
+    }
+  }
+  return frames
+}
+
+function parseRequest(buffer) {
+  const frames = decodeFrames(buffer)
+  const first = frames[0]
+  if (!first || first.kind !== 'control') throw new Error('request control frame required')
+  const request = first.value
+  if (!request || request.kind !== 'request' || request.protocolVersion !== 1 || !Object.prototype.hasOwnProperty.call(PATHS, request.operation)) {
+    throw new Error('unsupported helper request')
+  }
+  if (Object.keys(request).some((key) => !['kind', 'protocolVersion', 'operation', 'port'].includes(key))) {
+    throw new Error('unsupported helper request field')
+  }
+  if (!Number.isInteger(request.port) || request.port < 1 || request.port > 65535) throw new Error('invalid loopback port')
+  const operation = PATHS[request.operation]
+  if (request.operation === 'node-apply' || request.operation === 'session-apply') {
+    const last = frames[frames.length - 1]
+    if (!last || last.kind !== 'control' || last.value.kind !== 'request-end') throw new Error('apply request terminator required')
+    if (frames.slice(1, -1).some((frame) => frame.kind !== 'data')) throw new Error('invalid apply request body')
+    const chunks = frames.slice(1, -1).map((frame) => frame.data)
+    return { request, operation, body: Buffer.concat(chunks) }
+  }
+  if (frames.length !== 1) throw new Error('unexpected helper request frames')
+  return { request, operation }
+}
+
+async function run() {
+  const buffer = Buffer.concat(input, inputBytes)
+  const { request, operation, body } = parseRequest(buffer)
+  const url = 'http://127.0.0.1:' + request.port + operation.path
+  const response = await fetch(url, {
+    method: operation.method,
+    redirect: 'error',
+    headers: { accept: 'application/json', ...(body ? { 'content-type': 'application/json' } : {}) },
+    ...(body ? { body } : {}),
+  })
+
+  function writeStdout(data) {
+    return new Promise(function(resolve, reject) {
+      if (process.stdout.write(data)) resolve()
+      else process.stdout.once('drain', resolve)
+    })
+  }
+
+  if (request.operation === 'node-manifest' || request.operation === 'session-bundle') {
+    await writeStdout(encodeControl({ kind: 'response', status: response.status, bodyMode: 'data' }))
+    if (!response.body) throw new Error('manifest response body missing')
+    var sequence = 0
+    var total = 0
+    for await (var chunk of response.body) {
+      var data = Buffer.from(chunk)
+      total += data.length
+      if (total > MAX_TRANSFER) throw new Error('manifest exceeds size limit')
+      for (var offset = 0; offset < data.length; offset += MAX_CHUNK) {
+        await writeStdout(encodeData(sequence++, data.subarray(offset, Math.min(offset + MAX_CHUNK, data.length))))
+      }
+    }
+    await writeStdout(encodeControl({ kind: 'response-end' }))
+    if (!response.ok) process.exitCode = 1
+    return
+  }
+
+  var text = await response.text()
+  if (Buffer.byteLength(text, 'utf8') > MAX_CONTROL) throw new Error('response control frame too large')
+  await writeStdout(encodeControl({ kind: 'response', status: response.status, body: JSON.parse(text) }))
+  if (!response.ok) process.exitCode = 1
+}
+
+process.stdin.on('data', (chunk) => {
+  inputBytes += chunk.length
+  if (inputBytes > MAX_TRANSFER + 2 * MAX_CONTROL) {
+    process.exitCode = 1
+    process.stdin.destroy()
+    return
+  }
+  input.push(Buffer.from(chunk))
+})
+process.stdin.on('end', () => {
+  run().catch(() => {
+    try { process.stdout.write(encodeControl({ kind: 'error', code: 'helper-failed' })) } catch {}
+    process.exitCode = 1
+  })
+})
+`;
+const REMOTE_SYNC_HELPER_COMMAND = `node -e 'eval(Buffer.from("${Buffer.from(REMOTE_HELPER_SOURCE, "utf8").toString("base64")}","base64").toString("utf8"))'`;
+//#endregion
+export { REMOTE_SYNC_HELPER_COMMAND };
+
+//# sourceMappingURL=remote-helper.js.map

package/lib/core/sync/remote-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-helper.js","names":[],"sources":["../../../src/core/sync/remote-helper.ts"],"sourcesContent":["import { Buffer } from 'node:buffer'\n\nconst REMOTE_HELPER_SOURCE = String.raw`'use strict'\nconst { createHash, timingSafeEqual } = require('node:crypto')\nconst MAX_CONTROL = 65536\nconst MAX_CHUNK = 1048576\nconst MAX_TRANSFER = 107374182400\nconst PATHS = {\n  handshake: { path: '/api/dshb/sync/internal/handshake', method: 'GET' },\n  'node-manifest': { path: '/api/dshb/sync/internal/nodes/manifest', method: 'GET' },\n  'node-apply': { path: '/api/dshb/sync/internal/nodes/apply', method: 'POST' },\n  'session-bundle': { path: '/api/dshb/sync/internal/sessions/bundle', method: 'GET' },\n  'session-apply': { path: '/api/dshb/sync/internal/sessions/apply', method: 'POST' },\n}\nconst input = []\nlet inputBytes = 0\n\nfunction encodeControl(value) {\n  const body = Buffer.from(JSON.stringify(value) + '\\n', 'utf8')\n  if (body.length > MAX_CONTROL) throw new Error('control frame too large')\n  const header = Buffer.alloc(5)\n  header[0] = 0\n  header.writeUInt32BE(body.length, 1)\n  return Buffer.concat([header, body])\n}\n\nfunction encodeData(sequence, data) {\n  const digest = createHash('sha256').update(data).digest()\n  const metadata = Buffer.alloc(36)\n  metadata.writeUInt32BE(sequence, 0)\n  digest.copy(metadata, 4)\n  const payload = Buffer.concat([metadata, data])\n  const header = Buffer.alloc(5)\n  header[0] = 1\n  header.writeUInt32BE(payload.length, 1)\n  return Buffer.concat([header, payload])\n}\n\nfunction decodeFrames(buffer) {\n  const frames = []\n  let offset = 0\n  let sequence = 0\n  let totalData = 0\n  while (offset < buffer.length) {\n    if (buffer.length - offset < 5) throw new Error('truncated frame header')\n    const kind = buffer[offset]\n    const length = buffer.readUInt32BE(offset + 1)\n    offset += 5\n    const maxLength = kind === 0 ? MAX_CONTROL : 36 + MAX_CHUNK\n    if ((kind !== 0 && kind !== 1) || length > maxLength || length > buffer.length - offset) {\n      throw new Error('invalid frame length')\n    }\n    const payload = buffer.subarray(offset, offset + length)\n    offset += length\n    if (kind === 0) {\n      if (length < 2 || payload[length - 1] !== 10) throw new Error('invalid control frame')\n      frames.push({ kind: 'control', value: JSON.parse(payload.subarray(0, -1).toString('utf8')) })\n    } else {\n      if (length < 36) throw new Error('invalid data frame')\n      const currentSequence = payload.readUInt32BE(0)\n      const expected = payload.subarray(4, 36)\n      const data = payload.subarray(36)\n      const actual = createHash('sha256').update(data).digest()\n      if (currentSequence !== sequence || !timingSafeEqual(expected, actual)) throw new Error('invalid data chunk')\n      sequence += 1\n      totalData += data.length\n      if (totalData > MAX_TRANSFER) throw new Error('transfer exceeds size limit')\n      frames.push({ kind: 'data', data })\n    }\n  }\n  return frames\n}\n\nfunction parseRequest(buffer) {\n  const frames = decodeFrames(buffer)\n  const first = frames[0]\n  if (!first || first.kind !== 'control') throw new Error('request control frame required')\n  const request = first.value\n  if (!request || request.kind !== 'request' || request.protocolVersion !== 1 || !Object.prototype.hasOwnProperty.call(PATHS, request.operation)) {\n    throw new Error('unsupported helper request')\n  }\n  if (Object.keys(request).some((key) => !['kind', 'protocolVersion', 'operation', 'port'].includes(key))) {\n    throw new Error('unsupported helper request field')\n  }\n  if (!Number.isInteger(request.port) || request.port < 1 || request.port > 65535) throw new Error('invalid loopback port')\n  const operation = PATHS[request.operation]\n  if (request.operation === 'node-apply' || request.operation === 'session-apply') {\n    const last = frames[frames.length - 1]\n    if (!last || last.kind !== 'control' || last.value.kind !== 'request-end') throw new Error('apply request terminator required')\n    if (frames.slice(1, -1).some((frame) => frame.kind !== 'data')) throw new Error('invalid apply request body')\n    const chunks = frames.slice(1, -1).map((frame) => frame.data)\n    return { request, operation, body: Buffer.concat(chunks) }\n  }\n  if (frames.length !== 1) throw new Error('unexpected helper request frames')\n  return { request, operation }\n}\n\nasync function run() {\n  const buffer = Buffer.concat(input, inputBytes)\n  const { request, operation, body } = parseRequest(buffer)\n  const url = 'http://127.0.0.1:' + request.port + operation.path\n  const response = await fetch(url, {\n    method: operation.method,\n    redirect: 'error',\n    headers: { accept: 'application/json', ...(body ? { 'content-type': 'application/json' } : {}) },\n    ...(body ? { body } : {}),\n  })\n\n  function writeStdout(data) {\n    return new Promise(function(resolve, reject) {\n      if (process.stdout.write(data)) resolve()\n      else process.stdout.once('drain', resolve)\n    })\n  }\n\n  if (request.operation === 'node-manifest' || request.operation === 'session-bundle') {\n    await writeStdout(encodeControl({ kind: 'response', status: response.status, bodyMode: 'data' }))\n    if (!response.body) throw new Error('manifest response body missing')\n    var sequence = 0\n    var total = 0\n    for await (var chunk of response.body) {\n      var data = Buffer.from(chunk)\n      total += data.length\n      if (total > MAX_TRANSFER) throw new Error('manifest exceeds size limit')\n      for (var offset = 0; offset < data.length; offset += MAX_CHUNK) {\n        await writeStdout(encodeData(sequence++, data.subarray(offset, Math.min(offset + MAX_CHUNK, data.length))))\n      }\n    }\n    await writeStdout(encodeControl({ kind: 'response-end' }))\n    if (!response.ok) process.exitCode = 1\n    return\n  }\n\n  var text = await response.text()\n  if (Buffer.byteLength(text, 'utf8') > MAX_CONTROL) throw new Error('response control frame too large')\n  await writeStdout(encodeControl({ kind: 'response', status: response.status, body: JSON.parse(text) }))\n  if (!response.ok) process.exitCode = 1\n}\n\nprocess.stdin.on('data', (chunk) => {\n  inputBytes += chunk.length\n  if (inputBytes > MAX_TRANSFER + 2 * MAX_CONTROL) {\n    process.exitCode = 1\n    process.stdin.destroy()\n    return\n  }\n  input.push(Buffer.from(chunk))\n})\nprocess.stdin.on('end', () => {\n  run().catch(() => {\n    try { process.stdout.write(encodeControl({ kind: 'error', code: 'helper-failed' })) } catch {}\n    process.exitCode = 1\n  })\n})\n`\n\nconst REMOTE_HELPER_BASE64 = Buffer.from(REMOTE_HELPER_SOURCE, 'utf8').toString('base64')\n\nexport const REMOTE_SYNC_HELPER_COMMAND =\n  `node -e 'eval(Buffer.from(\"${REMOTE_HELPER_BASE64}\",\"base64\").toString(\"utf8\"))'`\n"],"mappings":";;AAEA,MAAM,uBAAuB,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4JvC,MAAa,6BACX,8BAH2B,OAAO,KAAK,sBAAsB,MAAM,CAAC,CAAC,SAAS,QAGhD,EAAqB"}

package/lib/core/sync/revision.d.ts

@@ -0,0 +1,2 @@
+import { i as compareSyncRevision, n as HybridLogicalClock, r as SyncRevision, t as HlcSnapshot } from "../../revision-C9sOlDZ6.js";
+export { HlcSnapshot, HybridLogicalClock, SyncRevision, compareSyncRevision };