@bopen-io/wallet-toolbox 2.1.21-parity-fix.2 → 2.6.2-brc153.2

package/out/src/storage/remoting/KnexSessionManager.js

@@ -0,0 +1,256 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KnexSessionManager = exports.DEFAULT_AUTH_SESSION_TOUCH_INTERVAL_MS = exports.DEFAULT_AUTH_SESSION_TTL_MS = exports.AUTH_SESSION_TABLE = void 0;
+const TableAuthSession_1 = require("../schema/tables/TableAuthSession");
+exports.AUTH_SESSION_TABLE = 'auth_sessions';
+exports.DEFAULT_AUTH_SESSION_TTL_MS = 24 * 60 * 60 * 1000;
+exports.DEFAULT_AUTH_SESSION_TOUCH_INTERVAL_MS = 60 * 1000;
+/**
+ * Shared BRC-103 session storage for horizontally scaled StorageServer nodes.
+ *
+ * Every instance must use the same Knex database. The wallet-toolbox migration
+ * creates the required `auth_sessions` table. Writes are monotonic by
+ * `PeerSession.lastUpdate`, preventing a delayed request on one replica from
+ * replacing newer session state written by another replica.
+ */
+class KnexSessionManager {
+    knex;
+    ttlMs;
+    touchIntervalMs;
+    now;
+    /** Rows associated with session objects returned by this manager. */
+    persistedRows = new WeakMap();
+    constructor(knex, options = {}) {
+        this.knex = knex;
+        this.ttlMs = options.ttlMs ?? exports.DEFAULT_AUTH_SESSION_TTL_MS;
+        this.touchIntervalMs = options.touchIntervalMs ?? Math.min(exports.DEFAULT_AUTH_SESSION_TOUCH_INTERVAL_MS, Math.max(1, Math.floor(this.ttlMs / 4)));
+        this.now = options.now ?? Date.now;
+        if (!Number.isSafeInteger(this.ttlMs) || this.ttlMs <= 0) {
+            throw new TypeError('KnexSessionManager ttlMs must be a positive safe integer.');
+        }
+        if (!Number.isSafeInteger(this.touchIntervalMs) || this.touchIntervalMs < 0) {
+            throw new TypeError('KnexSessionManager touchIntervalMs must be a non-negative safe integer.');
+        }
+    }
+    async addSession(session) {
+        await this.persistSession(session, false);
+    }
+    async updateSession(session) {
+        await this.persistSession(session, true);
+    }
+    async getSession(identifier) {
+        const byNonce = await this.activeSessions()
+            .where({ sessionNonce: identifier })
+            .first();
+        if (byNonce != null)
+            return this.sessionForRow(byNonce);
+        const byIdentity = await this.activeSessions()
+            .where({ peerIdentityKey: identifier })
+            .orderBy('lastUpdate', 'desc')
+            .orderBy('sessionNonce', 'desc')
+            .first();
+        return byIdentity == null ? undefined : this.sessionForRow(byIdentity);
+    }
+    async removeSession(session) {
+        if (typeof session.sessionNonce !== 'string')
+            return;
+        if (!Number.isSafeInteger(session.lastUpdate) || session.lastUpdate < 0)
+            return;
+        await this.knex(exports.AUTH_SESSION_TABLE)
+            .where({ sessionNonce: session.sessionNonce })
+            .where(function () {
+            // Knex query builders are thenable, but these calls only build the
+            // surrounding delete predicate; they do not start standalone queries.
+            // eslint-disable-next-line @typescript-eslint/no-floating-promises
+            this.where('lastUpdate', '<', session.lastUpdate)
+                .orWhere(function () {
+                // eslint-disable-next-line @typescript-eslint/no-floating-promises
+                this.where('lastUpdate', '=', session.lastUpdate)
+                    .where('isAuthenticated', session.isAuthenticated);
+                applyNullableMatch(this, 'peerNonce', session.peerNonce);
+                applyNullableMatch(this, 'peerIdentityKey', session.peerIdentityKey);
+                applyNullableMatch(this, 'certificatesRequired', session.certificatesRequired);
+                applyNullableMatch(this, 'certificatesValidated', session.certificatesValidated);
+            });
+        })
+            .delete();
+    }
+    async hasSession(identifier) {
+        const byNonce = await this.activeSessions()
+            .where({ sessionNonce: identifier })
+            .first('sessionNonce');
+        if (byNonce != null)
+            return true;
+        const byIdentity = await this.activeSessions()
+            .where({ peerIdentityKey: identifier })
+            .first('sessionNonce');
+        return byIdentity != null;
+    }
+    /** Delete expired rows. Call from an operator-controlled maintenance task. */
+    async pruneExpiredSessions() {
+        return await this.knex(exports.AUTH_SESSION_TABLE)
+            .where('expiresAt', '<=', this.now())
+            .delete();
+    }
+    activeSessions() {
+        return this.knex(exports.AUTH_SESSION_TABLE)
+            .where('expiresAt', '>', this.now());
+    }
+    async persistSession(session, coalesceTouch) {
+        this.validatePersistentSession(session);
+        const row = this.toTableAuthSession(session);
+        if (coalesceTouch && this.canCoalesceTouch(session, row))
+            return;
+        const updated = await this.updateIfCurrentOrNewer(row);
+        if (updated > 0) {
+            this.persistedRows.set(session, row);
+            return;
+        }
+        // A zero-row update can mean either that this write is stale or that the
+        // database reports no changed rows for an idempotent update. Avoid an
+        // expected duplicate-key failure in both cases; insert only when the nonce
+        // is genuinely absent.
+        const existing = await this.knex(exports.AUTH_SESSION_TABLE)
+            .where({ sessionNonce: row.sessionNonce })
+            .first('lastUpdate');
+        if (existing != null) {
+            // A concurrent insert may have appeared after the first update. Retry if
+            // our state is still current enough to advance or merge that new row.
+            if (existing.lastUpdate <= row.lastUpdate) {
+                const retried = await this.updateIfCurrentOrNewer(row);
+                if (retried > 0)
+                    this.persistedRows.set(session, row);
+            }
+            return;
+        }
+        try {
+            await this.knex(exports.AUTH_SESSION_TABLE).insert(row);
+            this.persistedRows.set(session, row);
+        }
+        catch (error) {
+            // Another replica may have inserted this nonce between our update and
+            // insert. Retry only known duplicate-key races; preserve every other
+            // database failure for the caller.
+            if (!isDuplicateKeyError(error))
+                throw error;
+            const retried = await this.updateIfCurrentOrNewer(row);
+            if (retried > 0)
+                this.persistedRows.set(session, row);
+        }
+    }
+    validatePersistentSession(session) {
+        if (typeof session.sessionNonce !== 'string' || session.sessionNonce.length === 0) {
+            throw new TypeError('Invalid session: sessionNonce is required to persist a session.');
+        }
+        if (!Number.isSafeInteger(session.lastUpdate) || session.lastUpdate < 0) {
+            throw new TypeError('Invalid session: lastUpdate must be a non-negative safe integer.');
+        }
+    }
+    /**
+     * Coalesce only the routine last-used write performed after an authenticated
+     * general message. The WeakMap proves that this exact session object came
+     * from a durable row read (or successful write) by this manager. Every
+     * authentication/certificate transition and every unrecognized object still
+     * takes the monotonic database path.
+     */
+    canCoalesceTouch(session, row) {
+        if (this.touchIntervalMs === 0 || row.isAuthenticated !== true)
+            return false;
+        const persisted = this.persistedRows.get(session);
+        if (!persisted?.isAuthenticated)
+            return false;
+        const persistedLastUpdate = Number(persisted.lastUpdate);
+        const elapsed = Number(row.lastUpdate) - persistedLastUpdate;
+        if (elapsed < 0 || elapsed >= this.touchIntervalMs)
+            return false;
+        if (Number(persisted.expiresAt) - this.now() <= this.touchIntervalMs)
+            return false;
+        return nullableEqual(row.peerNonce, persisted.peerNonce) &&
+            nullableEqual(row.peerIdentityKey, persisted.peerIdentityKey) &&
+            nullableBooleanEqual(row.certificatesRequired, persisted.certificatesRequired) &&
+            nullableBooleanEqual(row.certificatesValidated, persisted.certificatesValidated);
+    }
+    sessionForRow(row) {
+        const session = (0, TableAuthSession_1.tableAuthSessionToPeerSession)(row);
+        this.persistedRows.set(session, { ...row });
+        return session;
+    }
+    async updateIfCurrentOrNewer(row) {
+        return await this.knex(exports.AUTH_SESSION_TABLE)
+            .where({ sessionNonce: row.sessionNonce })
+            .where('lastUpdate', '<=', row.lastUpdate)
+            .update({
+            // Identity and peer nonces become immutable once established. This
+            // prevents an equal-timestamp write from another replica replacing
+            // the identifiers attached to an authenticated session.
+            peerNonce: this.knex.raw('coalesce(??, ?)', ['peerNonce', row.peerNonce ?? null]),
+            peerIdentityKey: this.knex.raw('coalesce(??, ?)', ['peerIdentityKey', row.peerIdentityKey ?? null]),
+            // Authentication and certificate validation only advance during a
+            // session. Merge those flags so two writes in the same millisecond
+            // cannot downgrade stronger state merely because Date.now collided.
+            isAuthenticated: this.knex.raw('case when ?? = 1 or ? = 1 then 1 else 0 end', ['isAuthenticated', row.isAuthenticated === true || row.isAuthenticated === 1 ? 1 : 0]),
+            certificatesRequired: this.mergeNullableBoolean('certificatesRequired', row.certificatesRequired),
+            certificatesValidated: this.mergeNullableBoolean('certificatesValidated', row.certificatesValidated),
+            lastUpdate: row.lastUpdate,
+            expiresAt: row.expiresAt
+        });
+    }
+    mergeNullableBoolean(column, value) {
+        let incoming;
+        if (value == null) {
+            incoming = null;
+        }
+        else if (value === true || value === 1) {
+            incoming = 1;
+        }
+        else {
+            incoming = 0;
+        }
+        return this.knex.raw('case when ?? = 1 or ? = 1 then 1 when ?? is null and ? is null then null else 0 end', [column, incoming, column, incoming]);
+    }
+    toTableAuthSession(session) {
+        const expiresAt = session.lastUpdate + this.ttlMs;
+        if (!Number.isSafeInteger(expiresAt)) {
+            throw new TypeError('Invalid session: lastUpdate plus ttlMs must be a safe integer.');
+        }
+        return {
+            sessionNonce: session.sessionNonce,
+            peerNonce: session.peerNonce ?? null,
+            peerIdentityKey: session.peerIdentityKey ?? null,
+            isAuthenticated: session.isAuthenticated,
+            lastUpdate: session.lastUpdate,
+            certificatesRequired: session.certificatesRequired ?? null,
+            certificatesValidated: session.certificatesValidated ?? null,
+            expiresAt
+        };
+    }
+}
+exports.KnexSessionManager = KnexSessionManager;
+function applyNullableMatch(query, column, value) {
+    if (value == null) {
+        // eslint-disable-next-line @typescript-eslint/no-floating-promises
+        query.whereNull(column);
+    }
+    else {
+        // eslint-disable-next-line @typescript-eslint/no-floating-promises
+        query.where(column, value);
+    }
+}
+function nullableEqual(left, right) {
+    return (left ?? null) === (right ?? null);
+}
+function nullableBooleanEqual(left, right) {
+    if (left == null || right == null)
+        return left == null && right == null;
+    return Boolean(left) === Boolean(right);
+}
+function isDuplicateKeyError(error) {
+    if (typeof error !== 'object' || error == null)
+        return false;
+    const databaseError = error;
+    return databaseError.code === 'SQLITE_CONSTRAINT_PRIMARYKEY' ||
+        databaseError.code === 'SQLITE_CONSTRAINT_UNIQUE' ||
+        databaseError.code === 'ER_DUP_ENTRY' ||
+        databaseError.errno === 1062;
+}
+//# sourceMappingURL=KnexSessionManager.js.map

package/out/src/storage/remoting/KnexSessionManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KnexSessionManager.js","sourceRoot":"","sources":["../../../../src/storage/remoting/KnexSessionManager.ts"],"names":[],"mappings":";;;AAEA,wEAAmG;AAEtF,QAAA,kBAAkB,GAAG,eAAe,CAAA;AACpC,QAAA,2BAA2B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACjD,QAAA,sCAAsC,GAAG,EAAE,GAAG,IAAI,CAAA;AAgB/D;;;;;;;GAOG;AACH;IAOgC,IAAI;IANjB,KAAK,CAAQ;IACb,eAAe,CAAQ;IACvB,GAAG,CAAc;IAClC,qEAAqE;IACpD,aAAa,GAAG,IAAI,OAAO,EAAiC,CAAA;IAE7E,YAA8B,IAAU,EAAE,OAAO,GAA8B,EAAE;oBAAnD,IAAI;QAChC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAA,2BAA2B,CAAA;QACzD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,CACxD,QAAA,sCAAsC,EACtC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CACxC,CAAA;QACD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;QAElC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAA;QAClF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,SAAS,CAAC,yEAAyE,CAAC,CAAA;QAChG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAE,OAAoB;QACpC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,aAAa,CAAE,OAAoB;QACvC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,UAAU,CAAE,UAAkB;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;aACxC,KAAK,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;aACnC,KAAK,EAAE,CAAA;QACV,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QAEvD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;aAC3C,KAAK,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;aACtC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC;aAC7B,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;aAC/B,KAAK,EAAE,CAAA;QACV,OAAO,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IACxE,CAAC;IAED,KAAK,CAAC,aAAa,CAAE,OAAoB;QACvC,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;YAAE,OAAM;QACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC;YAAE,OAAM;QAE/E,MAAM,IAAI,CAAC,IAAI,CAAmB,QAAA,kBAAkB,CAAC;aAClD,KAAK,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;aAC7C,KAAK,CAAC;YACL,mEAAmE;YACnE,sEAAsE;YACtE,mEAAmE;YACnE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC;iBAC9C,OAAO,CAAC;gBACP,mEAAmE;gBACnE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC;qBAC9C,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;gBACpD,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;gBACxD,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;gBACpE,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;gBAC9E,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;YAClF,CAAC,CAAC,CAAA;QACN,CAAC,CAAC;aACD,MAAM,EAAE,CAAA;IACb,CAAC;IAED,KAAK,CAAC,UAAU,CAAE,UAAkB;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;aACxC,KAAK,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;aACnC,KAAK,CAAC,cAAc,CAAC,CAAA;QACxB,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,IAAI,CAAA;QAEhC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;aAC3C,KAAK,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;aACtC,KAAK,CAAC,cAAc,CAAC,CAAA;QACxB,OAAO,UAAU,IAAI,IAAI,CAAA;IAC3B,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,oBAAoB;QACxB,OAAO,MAAM,IAAI,CAAC,IAAI,CAAmB,QAAA,kBAAkB,CAAC;aACzD,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;aACpC,MAAM,EAAE,CAAA;IACb,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,CAAC,IAAI,CAAmB,QAAA,kBAAkB,CAAC;aACnD,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACxC,CAAC;IAEO,KAAK,CAAC,cAAc,CAAE,OAAoB,EAAE,aAAsB;QACxE,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC5C,IAAI,aAAa,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC;YAAE,OAAM;QAEhE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAA;QACtD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;YACpC,OAAM;QACR,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAmB,QAAA,kBAAkB,CAAC;aACnE,KAAK,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;aACzC,KAAK,CAAC,YAAY,CAAC,CAAA;QACtB,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,yEAAyE;YACzE,sEAAsE;YACtE,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAA;gBACtD,IAAI,OAAO,GAAG,CAAC;oBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;YACvD,CAAC;YACD,OAAM;QACR,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAmB,QAAA,kBAAkB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACjE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,sEAAsE;YACtE,qEAAqE;YACrE,mCAAmC;YACnC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAA;YAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAA;YACtD,IAAI,OAAO,GAAG,CAAC;gBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IAEO,yBAAyB,CAAE,OAAoB;QACrD,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAA;QACxF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,SAAS,CAAC,kEAAkE,CAAC,CAAA;QACzF,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,gBAAgB,CAAE,OAAoB,EAAE,GAAqB;QACnE,IAAI,IAAI,CAAC,eAAe,KAAK,CAAC,IAAI,GAAG,CAAC,eAAe,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjD,IAAI,CAAC,SAAS,EAAE,eAAe;YAAE,OAAO,KAAK,CAAA;QAE7C,MAAM,mBAAmB,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,mBAAmB,CAAA;QAC5D,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,KAAK,CAAA;QAChE,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,KAAK,CAAA;QAElF,OAAO,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC;YACtD,aAAa,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,eAAe,CAAC;YAC7D,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,CAAC;YAC9E,oBAAoB,CAAC,GAAG,CAAC,qBAAqB,EAAE,SAAS,CAAC,qBAAqB,CAAC,CAAA;IACpF,CAAC;IAEO,aAAa,CAAE,GAAqB;QAC1C,MAAM,OAAO,GAAG,IAAA,gDAA6B,EAAC,GAAG,CAAC,CAAA;QAClD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,CAAA;QAC3C,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAE,GAAqB;QACzD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAmB,QAAA,kBAAkB,CAAC;aACzD,KAAK,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;aACzC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC;aACzC,MAAM,CAAC;YACN,mEAAmE;YACnE,mEAAmE;YACnE,wDAAwD;YACxD,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;YACjF,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC;YACnG,kEAAkE;YAClE,mEAAmE;YACnE,oEAAoE;YACpE,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5B,6CAA6C,EAC7C,CAAC,iBAAiB,EAAE,GAAG,CAAC,eAAe,KAAK,IAAI,IAAI,GAAG,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvF;YACD,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,GAAG,CAAC,oBAAoB,CAAC;YACjG,qBAAqB,EAAE,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,EAAE,GAAG,CAAC,qBAAqB,CAAC;YACpG,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAA;IACN,CAAC;IAEO,oBAAoB,CAAE,MAAc,EAAE,KAAsB;QAClE,IAAI,QAAsB,CAAA;QAC1B,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAA;QACjB,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YACzC,QAAQ,GAAG,CAAC,CAAA;QACd,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,CAAC,CAAA;QACd,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAClB,qFAAqF,EACrF,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CACrC,CAAA;IACH,CAAC;IAEO,kBAAkB,CAAE,OAAoB;QAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAA;QACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAA;QACvF,CAAC;QAED,OAAO;YACL,YAAY,EAAE,OAAO,CAAC,YAAsB;YAC5C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACpC,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,IAAI;YAChD,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,IAAI;YAC1D,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,IAAI;YAC5D,SAAS;SACV,CAAA;IACH,CAAC;CACF;;AAED,SAAS,kBAAkB,CACzB,KAAwB,EACxB,MAAc,EACd,KAAmC;IAEnC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,mEAAmE;QACnE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,mEAAmE;QACnE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAE,IAA+B,EAAE,KAAgC;IACvF,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAyC,EACzC,KAA0C;IAE1C,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAA;IACvE,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,CAAA;AACzC,CAAC;AAED,SAAS,mBAAmB,CAAE,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAA;IAC5D,MAAM,aAAa,GAAG,KAA4C,CAAA;IAClE,OAAO,aAAa,CAAC,IAAI,KAAK,8BAA8B;QAC1D,aAAa,CAAC,IAAI,KAAK,0BAA0B;QACjD,aAAa,CAAC,IAAI,KAAK,cAAc;QACrC,aAAa,CAAC,KAAK,KAAK,IAAI,CAAA;AAChC,CAAC"}

package/out/src/storage/remoting/RateLimitPolicy.d.ts

@@ -0,0 +1,10 @@
+import type { Application, Request } from 'express';
+import { type Options } from 'express-rate-limit';
+export type TrustProxySetting = number | string | string[] | ((ip: string, hop: number) => boolean);
+export declare function rateLimitOptions(defaults: {
+    windowMs: number;
+    limit: number;
+}, overrides?: Partial<Options>): Partial<Options>;
+export declare function authenticatedIdentityKey(req: Request): string;
+export declare function configureTrustProxy(app: Application, setting: TrustProxySetting | undefined): void;
+//# sourceMappingURL=RateLimitPolicy.d.ts.map

package/out/src/storage/remoting/RateLimitPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimitPolicy.d.ts","sourceRoot":"","sources":["../../../../src/storage/remoting/RateLimitPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAY,MAAM,SAAS,CAAA;AAC7D,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAEjE,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,MAAM,GACN,MAAM,EAAE,GACR,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAA;AAE1C,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAC7C,SAAS,GAAE,OAAO,CAAC,OAAO,CAAM,GAC/B,OAAO,CAAC,OAAO,CAAC,CAclB;AAED,wBAAgB,wBAAwB,CAAE,GAAG,EAAE,OAAO,GAAG,MAAM,CAQ9D;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,iBAAiB,GAAG,SAAS,GACrC,IAAI,CAMN"}

package/out/src/storage/remoting/RateLimitPolicy.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rateLimitOptions = rateLimitOptions;
+exports.authenticatedIdentityKey = authenticatedIdentityKey;
+exports.configureTrustProxy = configureTrustProxy;
+const express_rate_limit_1 = require("express-rate-limit");
+function rateLimitOptions(defaults, overrides = {}) {
+    return {
+        ...defaults,
+        standardHeaders: 'draft-8',
+        legacyHeaders: false,
+        handler: (_req, res) => {
+            res.status(429).json({
+                status: 'error',
+                code: 'ERR_RATE_LIMITED',
+                description: 'Too many requests. Please retry later.'
+            });
+        },
+        ...overrides
+    };
+}
+function authenticatedIdentityKey(req) {
+    const identityKey = req.auth?.identityKey;
+    if (typeof identityKey === 'string' && identityKey.trim() !== '' && identityKey !== 'unknown') {
+        return `identity:${identityKey}`;
+    }
+    return `ip:${(0, express_rate_limit_1.ipKeyGenerator)(req.ip ?? req.socket.remoteAddress ?? 'unknown')}`;
+}
+function configureTrustProxy(app, setting) {
+    if (setting === undefined)
+        return;
+    if (typeof setting === 'number' && (!Number.isSafeInteger(setting) || setting < 0)) {
+        throw new Error('trustProxy hop count must be a non-negative integer');
+    }
+    app.set('trust proxy', setting);
+}
+//# sourceMappingURL=RateLimitPolicy.js.map

package/out/src/storage/remoting/RateLimitPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimitPolicy.js","sourceRoot":"","sources":["../../../../src/storage/remoting/RateLimitPolicy.ts"],"names":[],"mappings":";;;;;AACA,2DAAiE;AAQjE,0BACE,QAA6C,EAC7C,SAAS,GAAqB,EAAE;IAEhC,OAAO;QACL,GAAG,QAAQ;QACX,eAAe,EAAE,SAAS;QAC1B,aAAa,EAAE,KAAK;QACpB,OAAO,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,kBAAkB;gBACxB,WAAW,EAAE,wCAAwC;aACtD,CAAC,CAAA;QACJ,CAAC;QACD,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,kCAA0C,GAAY;IACpD,MAAM,WAAW,GAAI,GAEnB,CAAC,IAAI,EAAE,WAAW,CAAA;IACpB,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9F,OAAO,YAAY,WAAW,EAAE,CAAA;IAClC,CAAC;IACD,OAAO,MAAM,IAAA,mCAAc,EAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC,EAAE,CAAA;AAChF,CAAC;AAED,6BACE,GAAgB,EAChB,OAAsC;IAEtC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAM;IACjC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;AACjC,CAAC"}

package/out/src/storage/remoting/StorageClient.d.ts

@@ -1,14 +1,5 @@
-import { AbortActionArgs, AbortActionResult, InternalizeActionArgs, ListActionsResult, ListCertificatesResult, ListOutputsResult, RelinquishCertificateArgs, RelinquishOutputArgs, WalletInterface, Validation } from '@bsv/sdk';
-import { AuthId, FindCertificatesArgs, FindOutputBasketsArgs, FindOutputsArgs, FindProvenTxReqsArgs, ProcessSyncChunkResult, RequestSyncChunkArgs, StorageCreateActionResult, StorageInternalizeActionResult, StorageProcessActionArgs, StorageProcessActionResults, SyncChunk, UpdateProvenTxReqWithNewProvenTxArgs, UpdateProvenTxReqWithNewProvenTxResult, WalletStorageProvider } from '../../sdk/WalletStorage.interfaces';
-import { TableSettings } from '../schema/tables/TableSettings';
-import { WalletServices } from '../../sdk/WalletServices.interfaces';
-import { TableUser } from '../schema/tables/TableUser';
-import { TableSyncState } from '../schema/tables/TableSyncState';
-import { TableCertificateX } from '../schema/tables/TableCertificate';
-import { TableOutputBasket } from '../schema/tables/TableOutputBasket';
-import { TableOutput } from '../schema/tables/TableOutput';
-import { TableProvenTxReq } from '../schema/tables/TableProvenTxReq';
-import { EntityTimeStamp } from '../../sdk/types';
+import { WalletInterface } from '@bsv/sdk';
+import { StorageClientBase, type StorageClientOptions } from './StorageClientBase';
 /**
  * `StorageClient` implements the `WalletStorageProvider` interface which allows it to
  * serve as a BRC-100 wallet's active storage.
@@ -23,270 +14,15 @@ import { EntityTimeStamp } from '../../sdk/types';
  *
  * For details of the API implemented, follow the "See also" link for the `WalletStorageProvider` interface.
  */
-export declare class StorageClient implements WalletStorageProvider {
-    readonly endpointUrl: string;
-    private readonly authClient;
-    private nextId;
-    settings?: TableSettings;
-    constructor(wallet: WalletInterface, endpointUrl: string);
-    /**
-     * The `StorageClient` implements the `WalletStorageProvider` interface.
-     * It does not implement the lower level `StorageProvider` interface.
-     *
-     * @returns false
-     */
-    isStorageProvider(): boolean;
+export declare class StorageClient extends StorageClientBase {
+    constructor(wallet: WalletInterface, endpointUrl: string, options?: StorageClientOptions);
     /**
      * Make a JSON-RPC call to the remote server.
      * @param method The WalletStorage method name to call.
      * @param params The array of parameters to pass to the method in order.
      */
-    private rpcCall;
-    /**
-     * @returns true once storage `TableSettings` have been retreived from remote storage.
-     */
-    isAvailable(): boolean;
-    /**
-     * @returns remote storage `TableSettings` if they have been retreived by `makeAvailable`.
-     * @throws WERR_INVALID_OPERATION if `makeAvailable` has not yet been called.
-     */
-    getSettings(): TableSettings;
-    /**
-     * Must be called prior to making use of storage.
-     * Retreives `TableSettings` from remote storage provider.
-     * @returns remote storage `TableSettings`
-     */
-    makeAvailable(): Promise<TableSettings>;
-    /**
-     * Called to cleanup resources when no further use of this object will occur.
-     */
-    destroy(): Promise<void>;
-    /**
-     * Requests schema migration to latest.
-     * Typically remote storage will ignore this request.
-     * @param storageName Unique human readable name for remote storage if it does not yet exist.
-     * @param storageIdentityKey Unique identity key for remote storage if it does not yet exist.
-     * @returns current schema migration identifier
-     */
-    migrate(storageName: string, storageIdentityKey: string): Promise<string>;
-    /**
-     * Remote storage does not offer `Services` to remote clients.
-     * @throws WERR_INVALID_OPERATION
-     */
-    getServices(): WalletServices;
-    /**
-     * Ignored. Remote storage cannot share `Services` with remote clients.
-     */
-    setServices(v: WalletServices): void;
-    /**
-     * Storage level processing for wallet `internalizeAction`.
-     * Updates internalized outputs in remote storage.
-     * Triggers proof validation of containing transaction.
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args Original wallet `internalizeAction` arguments.
-     * @returns `internalizeAction` results
-     */
-    internalizeAction(auth: AuthId, args: InternalizeActionArgs): Promise<StorageInternalizeActionResult>;
-    /**
-     * Storage level processing for wallet `createAction`.
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args Validated extension of original wallet `createAction` arguments.
-     * @returns `StorageCreateActionResults` supporting additional wallet processing to yield `createAction` results.
-     */
-    createAction(auth: AuthId, args: Validation.ValidCreateActionArgs): Promise<StorageCreateActionResult>;
-    /**
-     * Storage level processing for wallet `createAction` and `signAction`.
-     *
-     * Handles remaining storage tasks once a fully signed transaction has been completed. This is common to both `createAction` and `signAction`.
-     *
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args `StorageProcessActionArgs` convey completed signed transaction to storage.
-     * @returns `StorageProcessActionResults` supporting final wallet processing to yield `createAction` or `signAction` results.
-     */
-    processAction(auth: AuthId, args: StorageProcessActionArgs): Promise<StorageProcessActionResults>;
-    /**
-     * Aborts an action by `reference` string.
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args original wallet `abortAction` args.
-     * @returns `abortAction` result.
-     */
-    abortAction(auth: AuthId, args: AbortActionArgs): Promise<AbortActionResult>;
-    /**
-     * Used to both find and initialize a new user by identity key.
-     * It is up to the remote storage whether to allow creation of new users by this method.
-     * @param identityKey of the user.
-     * @returns `TableUser` for the user and whether a new user was created.
-     */
-    findOrInsertUser(identityKey: any): Promise<{
-        user: TableUser;
-        isNew: boolean;
-    }>;
-    /**
-     * Used to both find and insert a `TableSyncState` record for the user to track wallet data replication across storage providers.
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param storageName the name of the remote storage being sync'd
-     * @param storageIdentityKey the identity key of the remote storage being sync'd
-     * @returns `TableSyncState` and whether a new record was created.
-     */
-    findOrInsertSyncStateAuth(auth: AuthId, storageIdentityKey: string, storageName: string): Promise<{
-        syncState: TableSyncState;
-        isNew: boolean;
-    }>;
-    /**
-     * Inserts a new certificate with fields and keyring into remote storage.
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param certificate the certificate to insert.
-     * @returns record Id of the inserted `TableCertificate` record.
-     */
-    insertCertificateAuth(auth: AuthId, certificate: TableCertificateX): Promise<number>;
-    /**
-     * Storage level processing for wallet `listActions`.
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args Validated extension of original wallet `listActions` arguments.
-     * @returns `listActions` results.
-     */
-    listActions(auth: AuthId, vargs: Validation.ValidListActionsArgs): Promise<ListActionsResult>;
-    /**
-     * Storage level processing for wallet `listOutputs`.
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args Validated extension of original wallet `listOutputs` arguments.
-     * @returns `listOutputs` results.
-     */
-    listOutputs(auth: AuthId, vargs: Validation.ValidListOutputsArgs): Promise<ListOutputsResult>;
-    /**
-     * Storage level processing for wallet `listCertificates`.
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args Validated extension of original wallet `listCertificates` arguments.
-     * @returns `listCertificates` results.
-     */
-    listCertificates(auth: AuthId, vargs: Validation.ValidListCertificatesArgs): Promise<ListCertificatesResult>;
-    /**
-     * Find user certificates, optionally with fields.
-     *
-     * This certificate retrieval method supports internal wallet operations.
-     * Field values are stored and retrieved encrypted.
-     *
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args `FindCertificatesArgs` determines which certificates to retrieve and whether to include fields.
-     * @returns array of certificates matching args.
-     */
-    findCertificatesAuth(auth: AuthId, args: FindCertificatesArgs): Promise<TableCertificateX[]>;
-    /**
-     * Find output baskets.
-     *
-     * This retrieval method supports internal wallet operations.
-     *
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args `FindOutputBasketsArgs` determines which baskets to retrieve.
-     * @returns array of output baskets matching args.
-     */
-    findOutputBasketsAuth(auth: AuthId, args: FindOutputBasketsArgs): Promise<TableOutputBasket[]>;
-    /**
-     * Find outputs.
-     *
-     * This retrieval method supports internal wallet operations.
-     *
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args `FindOutputsArgs` determines which outputs to retrieve.
-     * @returns array of outputs matching args.
-     */
-    findOutputsAuth(auth: AuthId, args: FindOutputsArgs): Promise<TableOutput[]>;
-    /**
-     * Find requests for transaction proofs.
-     *
-     * This retrieval method supports internal wallet operations.
-     *
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args `FindProvenTxReqsArgs` determines which proof requests to retrieve.
-     * @returns array of proof requests matching args.
-     */
-    findProvenTxReqs(args: FindProvenTxReqsArgs): Promise<TableProvenTxReq[]>;
-    /**
-     * Relinquish a certificate.
-     *
-     * For storage supporting replication records must be kept of deletions. Therefore certificates are marked as deleted
-     * when relinquished, and no longer returned by `listCertificates`, but are still retained by storage.
-     *
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args original wallet `relinquishCertificate` args.
-     */
-    relinquishCertificate(auth: AuthId, args: RelinquishCertificateArgs): Promise<number>;
-    /**
-     * Relinquish an output.
-     *
-     * Relinquishing an output removes the output from whatever basket was tracking it.
-     *
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param args original wallet `relinquishOutput` args.
-     */
-    relinquishOutput(auth: AuthId, args: RelinquishOutputArgs): Promise<number>;
-    /**
-     * Process a "chunk" of replication data for the user.
-     *
-     * The normal data flow is for the active storage to push backups as a sequence of data chunks to backup storage providers.
-     *
-     * @param args a copy of the replication request args that initiated the sequence of data chunks.
-     * @param chunk the current data chunk to process.
-     * @returns whether processing is done, counts of inserts and udpates, and related progress tracking properties.
-     */
-    processSyncChunk(args: RequestSyncChunkArgs, chunk: SyncChunk): Promise<ProcessSyncChunkResult>;
-    /**
-     * Request a "chunk" of replication data for a specific user and storage provider.
-     *
-     * The normal data flow is for the active storage to push backups as a sequence of data chunks to backup storage providers.
-     * Also supports recovery where non-active storage can attempt to merge available data prior to becoming active.
-     *
-     * @param args that identify the non-active storage which will receive replication data and constrains the replication process.
-     * @returns the next "chunk" of replication data
-     */
-    getSyncChunk(args: RequestSyncChunkArgs): Promise<SyncChunk>;
-    /**
-     * Handles the data received when a new transaction proof is found in response to an outstanding request for proof data:
-     *
-     *   - Creates a new `TableProvenTx` record.
-     *   - Notifies all user transaction records of the new status.
-     *   - Updates the proof request record to 'completed' status which enables delayed deletion.
-     *
-     * @param args proof request and new transaction proof data
-     * @returns results of updates
-     */
-    updateProvenTxReqWithNewProvenTx(args: UpdateProvenTxReqWithNewProvenTxArgs): Promise<UpdateProvenTxReqWithNewProvenTxResult>;
-    /**
-     * Ensures up-to-date wallet data replication to all configured backup storage providers,
-     * then promotes one of the configured backups to active,
-     * demoting the current active to new backup.
-     *
-     * @param auth Identifies client by identity key and the storage identity key of their currently active storage.
-     * This must match the `AuthFetch` identity securing the remote conneciton.
-     * @param newActiveStorageIdentityKey which must be a currently configured backup storage provider.
-     */
-    setActive(auth: AuthId, newActiveStorageIdentityKey: string): Promise<number>;
-    validateDate(date: Date | string | number): Date;
-    /**
-     * Helper to force uniform behavior across database engines.
-     * Use to process all individual records with time stamps retreived from database.
-     */
-    validateEntity<T extends EntityTimeStamp>(entity: T, dateFields?: string[]): T;
-    /**
-     * Helper to force uniform behavior across database engines.
-     * Use to process all arrays of records with time stamps retreived from database.
-     * @returns input `entities` array with contained values validated.
-     */
-    validateEntities<T extends EntityTimeStamp>(entities: T[], dateFields?: string[]): T[];
+    protected rpcCall<T>(method: string, params: unknown[]): Promise<T>;
+    private startRpcLogging;
+    private restoreRpcLogging;
 }
 //# sourceMappingURL=StorageClient.d.ts.map

package/out/src/storage/remoting/StorageClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StorageClient.d.ts","sourceRoot":"","sources":["../../../../src/storage/remoting/StorageClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EAEf,UAAU,EAEX,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,MAAM,EACN,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,8BAA8B,EAC9B,wBAAwB,EACxB,2BAA2B,EAC3B,SAAS,EACT,oCAAoC,EACpC,sCAAsC,EACtC,qBAAqB,EACtB,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAA;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAA;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAKjD;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAc,YAAW,qBAAqB;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAW;IACtC,OAAO,CAAC,MAAM,CAAI;IAGX,QAAQ,CAAC,EAAE,aAAa,CAAA;gBAEnB,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM;IAKxD;;;;;OAKG;IACH,iBAAiB,IAAI,OAAO;IAQ5B;;;;OAIG;YACW,OAAO;IA4DrB;;OAEG;IACH,WAAW,IAAI,OAAO;IAKtB;;;OAGG;IACH,WAAW,IAAI,aAAa;IAO5B;;;;OAIG;IACG,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC;IAe7C;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B;;;;;;OAMG;IACG,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI/E;;;OAGG;IACH,WAAW,IAAI,cAAc;IAQ7B;;OAEG;IACH,WAAW,CAAC,CAAC,EAAE,cAAc,GAAG,IAAI;IAKpC;;;;;;;;OAQG;IACG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAI3G;;;;;;OAMG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,qBAAqB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAI5G;;;;;;;;;OASG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAIvG;;;;;;OAMG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIlF;;;;;OAKG;IACG,gBAAgB,CAAC,WAAW,KAAA,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAIjF;;;;;;;OAOG;IACG,yBAAyB,CAC7B,IAAI,EAAE,MAAM,EACZ,kBAAkB,EAAE,MAAM,EAC1B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,SAAS,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAUzD;;;;;;OAMG;IACG,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAK1F;;;;;;OAMG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAKnG;;;;;;OAMG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAKnG;;;;;;OAMG;IACG,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,yBAAyB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAKlH;;;;;;;;;;OAUG;IACG,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAWlG;;;;;;;;;OASG;IACG,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAMpG;;;;;;;;;OASG;IACG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAMlF;;;;;;;;;OASG;IACG,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAM/E;;;;;;;;;OASG;IACG,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC;IAI3F;;;;;;;;OAQG;IACG,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIjF;;;;;;;;OAQG;IACG,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAKrG;;;;;;;;OAQG;IACG,YAAY,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,CAAC;IAkBlE;;;;;;;;;OASG;IACG,gCAAgC,CACpC,IAAI,EAAE,oCAAoC,GACzC,OAAO,CAAC,sCAAsC,CAAC;IAKlD;;;;;;;;OAQG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAInF,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI;IAOhD;;;OAGG;IACH,cAAc,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC;IAmB9E;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,SAAS,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE;CAMvF"}
+{"version":3,"file":"StorageClient.d.ts","sourceRoot":"","sources":["../../../../src/storage/remoting/StorageClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAyB,MAAM,UAAU,CAAA;AAGjE,OAAO,EAAE,iBAAiB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAclF;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAc,SAAQ,iBAAiB;IAClD,YAAY,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB,EAE3F;IAMD;;;;OAIG;IACH,UAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAkGxE;IAED,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,iBAAiB;CAM1B"}