@bopen-io/wallet-toolbox 2.6.2-brc153.5 → 2.14.6

package/out/src/storage/remoting/StorageMobile.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StorageClient = void 0;
+const WalletErrorFromJson_1 = require("../../sdk/WalletErrorFromJson");
 const StorageClientBase_1 = require("./StorageClientBase");
 const BinaryJson_1 = require("./BinaryJson");
 /**
@@ -9,6 +10,11 @@ const BinaryJson_1 = require("./BinaryJson");
  *
  * Internally, it uses JSON-RPC over HTTPS to make requests of a remote server.
  * Typically this server uses the `StorageServer` class to implement the service.
+ * Responses must complete mutual authentication. By default, the first authenticated
+ * server identity is trusted for this client instance; callers can instead supply
+ * `serverIdentityKey` as an independently validated pin. The distinct storage-provider
+ * identity advertised by the authenticated `makeAvailable` response is authoritative
+ * by default; callers can independently pin it with `storageIdentityKey`.
  *
  * This mobile variant omits the full logger support present in `StorageClient` to keep
  * the bundle lean for mobile / browser environments.
@@ -29,16 +35,16 @@ class StorageClient extends StorageClientBase_1.StorageClientBase {
      */
     async rpcCall(method, params) {
         return await this.traceRpcCall(method, params, async (rpcSpan) => {
-            const id = this.nextId++;
+            const id = this.nextRequestId();
             const body = {
                 jsonrpc: '2.0',
                 method,
                 params,
                 id
             };
-            const requestUsesBinary = this.binaryRequests && this.serverSupportsBinary;
+            const requestUsesBinary = this.requestUsesBinary(method);
             const requestBody = await this.traceRpcStep('wallet.storage.request.serialize', rpcSpan, () => (0, BinaryJson_1.stringifyJsonRpc)(body, requestUsesBinary), { 'rpc.encoding': requestUsesBinary ? 'binary-json' : 'json' });
-            const response = await this.traceRpcStep('wallet.storage.http', rpcSpan, async () => await this.authClient.fetch(this.endpointUrl, {
+            const response = await this.traceRpcStep('wallet.storage.http', rpcSpan, async () => await this.authenticatedFetch(this.endpointUrl, {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
@@ -51,7 +57,7 @@ class StorageClient extends StorageClientBase_1.StorageClientBase {
                 'rpc.encoding': requestUsesBinary ? 'binary-json' : 'json'
             });
             if (!response.ok) {
-                throw new Error(`WalletStorageClient rpcCall: network error ${response.status} ${response.statusText}`);
+                throw this.rpcResponseError(response);
             }
             const responseUsesBinary = response.headers.get(BinaryJson_1.BINARY_ENCODING_HEADER) === BinaryJson_1.BINARY_ENCODING;
             if (responseUsesBinary)
@@ -60,16 +66,12 @@ class StorageClient extends StorageClientBase_1.StorageClientBase {
                 'http.response.status_code': response.status,
                 'rpc.encoding': responseUsesBinary ? 'binary-json' : 'json'
             });
-            const json = await this.traceRpcStep('wallet.storage.response.parse', rpcSpan, () => (0, BinaryJson_1.parseJsonRpc)(responseText, responseUsesBinary), {
+            const json = await this.traceRpcStep('wallet.storage.response.parse', rpcSpan, () => (0, BinaryJson_1.validateJsonRpcResponse)((0, BinaryJson_1.parseJsonRpc)(responseText, responseUsesBinary), id), {
                 'rpc.encoding': responseUsesBinary ? 'binary-json' : 'json',
                 'response.size_bytes': responseText.length
             });
-            if (json.error) {
-                const { code, message, data } = json.error;
-                const err = new Error(`RPC Error: ${message}`);
-                err.code = code;
-                err.data = data;
-                throw err;
+            if ('error' in json) {
+                throw (0, WalletErrorFromJson_1.WalletErrorFromJson)(json.error);
             }
             rpcSpan?.end({
                 attributes: {

package/out/src/storage/remoting/StorageMobile.js.map

@@ -1 +1 @@
-{"version":3,"file":"StorageMobile.js","sourceRoot":"","sources":["../../../../src/storage/remoting/StorageMobile.ts"],"names":[],"mappings":";;;AACA,2DAAkF;AAClF,6CAMqB;AAErB;;;;;;;;;;;GAWG;AACH,mBAA2B,SAAQ,qCAAiB;IAClD,YAAY,MAAuB,EAAE,WAAmB,EAAE,OAAO,GAAyB,EAAE;QAC1F,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IACrC,CAAC;IAED,+EAA+E;IAC/E,kBAAkB;IAClB,+EAA+E;IAE/E;;;;OAIG;IACO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,MAAiB;QAC1D,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;YACxB,MAAM,IAAI,GAAG;gBACX,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,MAAM;gBACN,EAAE;aACH,CAAA;YAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,oBAAoB,CAAA;YAC1E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CACzC,kCAAkC,EAClC,OAAO,EACP,GAAG,EAAE,CAAC,IAAA,6BAAgB,EAAC,IAAI,EAAE,iBAAiB,CAAC,EAC/C,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAC/D,CAAA;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CACtC,qBAAqB,EACrB,OAAO,EACP,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,CAAC,mCAAsB,CAAC,EAAE,4BAAe;oBACzC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,2CAA8B,CAAC,EAAE,4BAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpF;gBACD,IAAI,EAAE,WAAW;aAClB,CAAC,EACJ;gBACE,qBAAqB,EAAE,MAAM;gBAC7B,cAAc,EAAE,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;aAC3D,CACF,CAAA;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;YACzG,CAAC;YAED,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAsB,CAAC,KAAK,4BAAe,CAAA;YAC3F,IAAI,kBAAkB;gBAAE,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;YACxD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAC1C,8BAA8B,EAC9B,OAAO,EACP,KAAK,IAAI,EAAE,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EACjC;gBACE,2BAA2B,EAAE,QAAQ,CAAC,MAAM;gBAC5C,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;aAC5D,CACF,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAClC,+BAA+B,EAC/B,OAAO,EACP,GAAG,EAAE,CAAC,IAAA,yBAAY,EAAC,YAAY,EAAE,kBAAkB,CAAC,EACpD;gBACE,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;gBAC3D,qBAAqB,EAAE,YAAY,CAAC,MAAM;aAC3C,CACF,CAAA;YACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAA;gBAC1C,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,cAAc,OAAO,EAAE,CAAC,CAE7C;gBAAC,GAAW,CAAC,IAAI,GAAG,IAAI,CACxB;gBAAC,GAAW,CAAC,IAAI,GAAG,IAAI,CAAA;gBACzB,MAAM,GAAG,CAAA;YACX,CAAC;YAED,OAAO,EAAE,GAAG,CAAC;gBACX,UAAU,EAAE;oBACV,2BAA2B,EAAE,QAAQ,CAAC,MAAM;oBAC5C,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;iBAC5D;aACF,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,MAAM,CAAA;QACpB,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}
+{"version":3,"file":"StorageMobile.js","sourceRoot":"","sources":["../../../../src/storage/remoting/StorageMobile.ts"],"names":[],"mappings":";;;AACA,uEAAmE;AACnE,2DAAkF;AAClF,6CAOqB;AAErB;;;;;;;;;;;;;;;;GAgBG;AACH,mBAA2B,SAAQ,qCAAiB;IAClD,YAAY,MAAuB,EAAE,WAAmB,EAAE,OAAO,GAAyB,EAAE;QAC1F,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IACrC,CAAC;IAED,+EAA+E;IAC/E,kBAAkB;IAClB,+EAA+E;IAE/E;;;;OAIG;IACO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,MAAiB;QAC1D,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;YAC/B,MAAM,IAAI,GAAG;gBACX,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,MAAM;gBACN,EAAE;aACH,CAAA;YAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YACxD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CACzC,kCAAkC,EAClC,OAAO,EACP,GAAG,EAAE,CAAC,IAAA,6BAAgB,EAAC,IAAI,EAAE,iBAAiB,CAAC,EAC/C,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAC/D,CAAA;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CACtC,qBAAqB,EACrB,OAAO,EACP,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,CAAC,mCAAsB,CAAC,EAAE,4BAAe;oBACzC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,2CAA8B,CAAC,EAAE,4BAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpF;gBACD,IAAI,EAAE,WAAW;aAClB,CAAC,EACJ;gBACE,qBAAqB,EAAE,MAAM;gBAC7B,cAAc,EAAE,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;aAC3D,CACF,CAAA;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;YACvC,CAAC;YAED,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAsB,CAAC,KAAK,4BAAe,CAAA;YAC3F,IAAI,kBAAkB;gBAAE,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;YACxD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAC1C,8BAA8B,EAC9B,OAAO,EACP,KAAK,IAAI,EAAE,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EACjC;gBACE,2BAA2B,EAAE,QAAQ,CAAC,MAAM;gBAC5C,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;aAC5D,CACF,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAClC,+BAA+B,EAC/B,OAAO,EACP,GAAG,EAAE,CAAC,IAAA,oCAAuB,EAAC,IAAA,yBAAY,EAAC,YAAY,EAAE,kBAAkB,CAAC,EAAE,EAAE,CAAC,EACjF;gBACE,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;gBAC3D,qBAAqB,EAAE,YAAY,CAAC,MAAM;aAC3C,CACF,CAAA;YACD,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAA,yCAAmB,EAAC,IAAI,CAAC,KAAe,CAAC,CAAA;YACjD,CAAC;YAED,OAAO,EAAE,GAAG,CAAC;gBACX,UAAU,EAAE;oBACV,2BAA2B,EAAE,QAAQ,CAAC,MAAM;oBAC5C,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;iBAC5D;aACF,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,MAAW,CAAA;QACzB,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}

package/out/src/storage/remoting/StorageServer.d.ts

@@ -67,14 +67,19 @@ export interface WalletStorageServerOptions {
     defaultRpcListLimit?: number;
     /** Largest caller-selected list/find item limit. Use -1 to disable this operator ceiling. */
     maxRpcListLimit?: number;
+    /** Largest list/find/sync offset accepted at the RPC edge. Use -1 only for trusted tenants. */
+    maxRpcListOffset?: number;
     /** Maximum elements in any decoded request array. Use -1 only for trusted callers. */
     maxRpcArrayItems?: number;
     /** Maximum serialized JSON-RPC response bytes. Use -1 to disable. */
     maxRpcResponseBytes?: number;
+    /** Disable the additive durable transfer transport during a mixed-version rollout. Knex only. */
+    syncTransfers?: boolean;
     /** Durable BRC-105 replay claims for monetized multi-replica deployments. */
     paymentReplayStore?: PaymentReplayStore;
 }
 export declare class StorageServer {
+    private readonly syncTransfers?;
     private readonly app;
     private readonly host?;
     private readonly port;
@@ -97,6 +102,7 @@ export declare class StorageServer {
     private readonly telemetryConfig?;
     private readonly defaultRpcListLimit;
     private readonly maxRpcListLimit;
+    private readonly maxRpcListOffset;
     private readonly maxRpcArrayItems;
     private readonly maxRpcResponseBytes;
     private readonly paymentReplayStore?;
@@ -105,18 +111,21 @@ export declare class StorageServer {
     private setupRoutes;
     private handleRpcRequest;
     private handleRpcRequestCore;
+    private sendOversizedSyncResponse;
     private traceHttpRequest;
     private sendRpc;
     private enforceRpcRequestBudgets;
     private enforceRpcArrayBudget;
     private objectArgument;
     private normalizedRpcLimit;
+    private normalizedRpcOffset;
     private sendRpcError;
     private createRpcLog;
     private dispatchRpcCall;
+    private dispatchSyncTransfer;
     private traceRpcStep;
     private authorizeRpcCall;
-    private logIgnoredDestroy;
+    private logIgnoredLifecycleMutation;
     private authorizeAdminStats;
     private authorizeStandardRpcCall;
     private createRpcLogger;

package/out/src/storage/remoting/StorageServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StorageServer.d.ts","sourceRoot":"","sources":["../../../../src/storage/remoting/StorageServer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,gBAAgB,EAEhB,eAAe,EAIhB,MAAM,UAAU,CAAA;AACjB,OAAgB,EAAE,OAAO,EAAY,MAAM,SAAS,CAAA;AACpD,OAAO,EAAE,qBAAqB,EAAqC,MAAM,8BAA8B,CAAA;AAEvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACzE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAa,MAAM,oBAAoB,CAAA;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAGpD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAYjD,OAAO,EAAmE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACtH,OAAO,EAWL,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAA;AAkHrB,MAAM,WAAW,0BAA0B;IACzC,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;IACjB,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B;;;OAGG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAC,gBAAgB,CAAC,CAAA;IACxD;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5C;;;;OAIG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,yGAAyG;IACzG,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,qDAAqD;IACrD,IAAI,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACxC,kDAAkD;IAClD,eAAe,CAAC,EAAE,sBAAsB,CAAA;IACxC,0EAA0E;IAC1E,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,eAAe,CAAA;IAC3B,yFAAyF;IACzF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,6FAA6F;IAC7F,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,6EAA6E;IAC7E,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;CACxC;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAA4C;IACnF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAyC;IACzE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAA2B;IAC7D,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAA2B;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAQ;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAwB;IAC9D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAQ;IAC5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAQ;IAC5C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAoB;IAExD,YAAY,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAiFxE;IAED,OAAO,CAAC,oBAAoB;IA4B5B,OAAO,CAAC,WAAW;YA0JL,gBAAgB;YAiBhB,oBAAoB;IAiClC,OAAO,CAAC,gBAAgB;IAiCxB,OAAO,CAAC,OAAO;IAkBf,OAAO,CAAC,wBAAwB;IA8BhC,OAAO,CAAC,qBAAqB;IAoB7B,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,YAAY;YAqBN,eAAe;YAsCf,YAAY;YAmBZ,gBAAgB;IA8B9B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,mBAAmB;YAUb,wBAAwB;IAQtC,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,gBAAgB;YAWV,iBAAiB;YAcjB,qBAAqB;YAerB,cAAc;IAe5B,MAAM,EAAE,GAAG,CAAA;IAEJ,KAAK,IAAI,IAAI,CAOnB;IAEY,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAMlC;IAED,gCAAgC;IAChC,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAE/C;IAED;;;;OAIG;IACH,cAAc,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAE7E;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,CAAC,SAAS,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAErF;CACF"}
+{"version":3,"file":"StorageServer.d.ts","sourceRoot":"","sources":["../../../../src/storage/remoting/StorageServer.ts"],"names":[],"mappings":"AAUA;;;;;GAKG;AAEH,OAAO,EACL,gBAAgB,EAEhB,eAAe,EAIhB,MAAM,UAAU,CAAA;AACjB,OAAgB,EAAE,OAAO,EAAY,MAAM,SAAS,CAAA;AACpD,OAAO,EAAE,qBAAqB,EAAqC,MAAM,8BAA8B,CAAA;AAEvG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACzE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAa,MAAM,oBAAoB,CAAA;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAGpD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAYjD,OAAO,EAAmE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACtH,OAAO,EAWL,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAA;AAmKrB,MAAM,WAAW,0BAA0B;IACzC,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;IACjB,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B;;;OAGG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAC,gBAAgB,CAAC,CAAA;IACxD;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5C;;;;OAIG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,yGAAyG;IACzG,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,qDAAqD;IACrD,IAAI,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACxC,kDAAkD;IAClD,eAAe,CAAC,EAAE,sBAAsB,CAAA;IACxC,0EAA0E;IAC1E,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,eAAe,CAAA;IAC3B,yFAAyF;IACzF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,6FAA6F;IAC7F,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,+FAA+F;IAC/F,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,iGAAiG;IACjG,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,6EAA6E;IAC7E,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;CACxC;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAuB;IACtD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAA4C;IACnF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAyC;IACzE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAA2B;IAC7D,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAA2B;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAQ;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAwB;IAC9D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAQ;IAC5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAQ;IAC5C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAoB;IAExD,YAAY,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EA0HxE;IAED,OAAO,CAAC,oBAAoB;IA4B5B,OAAO,CAAC,WAAW;YA0JL,gBAAgB;YAiBhB,oBAAoB;YA8CpB,yBAAyB;IAoBvC,OAAO,CAAC,gBAAgB;IAiCxB,OAAO,CAAC,OAAO;IAuBf,OAAO,CAAC,wBAAwB;IA4ChC,OAAO,CAAC,qBAAqB;IAsB7B,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,mBAAmB;IAY3B,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,YAAY;YAqBN,eAAe;YAwDf,oBAAoB;YAmEpB,YAAY;YAmBZ,gBAAgB;IAuC9B,OAAO,CAAC,2BAA2B;IAOnC,OAAO,CAAC,mBAAmB;YAUb,wBAAwB;IAQtC,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,gBAAgB;YAWV,iBAAiB;YAcjB,qBAAqB;YAerB,cAAc;IAe5B,MAAM,EAAE,GAAG,CAAA;IAEJ,KAAK,IAAI,IAAI,CAOnB;IAEY,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAMlC;IAED,gCAAgC;IAChC,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAE/C;IAED;;;;OAIG;IACH,cAAc,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAE7E;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,CAAC,SAAS,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAErF;CACF"}

package/out/src/storage/remoting/StorageServer.js

@@ -1,15 +1,19 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageServer = void 0;
+const StorageKnex_1 = require("../StorageKnex");
+const KnexSyncTransferStore_1 = require("./KnexSyncTransferStore");
+const SyncTransfer_1 = require("./SyncTransfer");
+const syncChunkBinary_1 = require("./syncChunkBinary");
 /**
  * StorageServer.ts
  *
  * A server-side class that "has a" local WalletStorage (like a StorageKnex instance),
  * and exposes it via a JSON-RPC POST endpoint using Express.
  */
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.StorageServer = void 0;
 const sdk_1 = require("@bsv/sdk");
 const express_1 = __importDefault(require("express"));
 const auth_express_middleware_1 = require("@bsv/auth-express-middleware");
@@ -25,9 +29,12 @@ const RateLimitPolicy_1 = require("./RateLimitPolicy");
 const edgePolicy_1 = require("./edgePolicy");
 const actionBatchPack_1 = require("../../utility/actionBatchPack");
 const actionBatchBlobs_1 = require("../methods/actionBatchBlobs");
+const validateRpcSyncProofs_1 = require("./validateRpcSyncProofs");
 const storageRpcMethods = new Set([
     'abortAction',
     'abortActionBatch',
+    'activateNoSendExpiry',
+    'armNoSendExpiry',
     'adminStats',
     'beginActionBatch',
     'commitActionBatch',
@@ -37,6 +44,7 @@ const storageRpcMethods = new Set([
     'extendActionBatch',
     'findCertificatesAuth',
     'findOrInsertSyncStateAuth',
+    'getSyncCheckpoint',
     'findOrInsertUser',
     'findOutputBaskets',
     'findOutputBasketsAuth',
@@ -53,17 +61,36 @@ const storageRpcMethods = new Set([
     'makeAvailable',
     'migrate',
     'prepareActionBatchCommit',
+    'prepareNoSendExpiry',
     'processAction',
     'processSyncChunk',
     'relinquishCertificate',
     'relinquishOutput',
     'renewActionBatch',
+    'resumeActionBatch',
     'setActive',
     'updateProvenTxReqWithNewProvenTx'
 ]);
+/**
+ * Serialize an error for an authenticated network peer without exposing
+ * provider, database, filesystem, or other server-internal diagnostics.
+ *
+ * WalletError subclasses are the storage protocol's explicit public error
+ * contract. WERR_INTERNAL and unknown exceptions are deliberately collapsed
+ * to the stable default message; operators can still capture the original
+ * exception through the explicitly configured server logger and telemetry.
+ */
+function publicWalletErrorJson(error) {
+    if (!(error instanceof WalletError_1.WalletError) || error.name === 'WERR_INTERNAL' || error.name === 'WERR_UNKNOWN') {
+        return WalletError_1.WalletError.unknownToJson(new WERR_errors_1.WERR_INTERNAL());
+    }
+    return WalletError_1.WalletError.unknownToJson(error);
+}
 const authIdRpcMethods = new Set([
     'abortAction',
     'abortActionBatch',
+    'activateNoSendExpiry',
+    'armNoSendExpiry',
     'beginActionBatch',
     'commitActionBatch',
     'commitActionBatchByDigest',
@@ -71,6 +98,7 @@ const authIdRpcMethods = new Set([
     'extendActionBatch',
     'findCertificatesAuth',
     'findOrInsertSyncStateAuth',
+    'getSyncCheckpoint',
     'findOutputBaskets',
     'findOutputBasketsAuth',
     'findOutputsAuth',
@@ -80,20 +108,27 @@ const authIdRpcMethods = new Set([
     'listCertificates',
     'listOutputs',
     'prepareActionBatchCommit',
+    'prepareNoSendExpiry',
     'processAction',
     'relinquishCertificate',
     'relinquishOutput',
     'renewActionBatch',
+    'resumeActionBatch',
     'setActive'
 ]);
-const actionBatchRpcMethods = new Set([
+const activeStorageRpcMethods = new Set([
     'abortActionBatch',
+    'activateNoSendExpiry',
+    'armNoSendExpiry',
     'beginActionBatch',
     'commitActionBatch',
     'commitActionBatchByDigest',
     'extendActionBatch',
     'prepareActionBatchCommit',
-    'renewActionBatch'
+    'prepareNoSendExpiry',
+    'renewActionBatch',
+    'resumeActionBatch',
+    'updateProvenTxReqWithNewProvenTx'
 ]);
 const topLevelLimitArgument = new Map([
     ['listActions', 1],
@@ -107,6 +142,17 @@ const pagedLimitArgument = new Map([
     ['findOutputsAuth', 1],
     ['findProvenTxReqs', 0]
 ]);
+const binaryRowResults = new Map([
+    ['findOutputsAuth', 'outputs'],
+    ['findProvenTxReqs', 'provenTxReqs']
+]);
+/** Copy a result's schema-defined byte fields for the already negotiated binary JSON codec. */
+function binaryRpcResult(method, result) {
+    if (method === 'getSyncChunk')
+        return (0, syncChunkBinary_1.syncChunkBinary)(result);
+    const table = binaryRowResults.get(method);
+    return table != null && Array.isArray(result) ? (0, syncChunkBinary_1.tableRowsBinary)(table, result) : result;
+}
 function requiredAuthenticatedIdentityKey(req) {
     const identityKey = req.auth?.identityKey;
     if (typeof identityKey !== 'string' || identityKey.trim() === '' || identityKey === 'unknown') {
@@ -114,11 +160,16 @@ function requiredAuthenticatedIdentityKey(req) {
     }
     return identityKey;
 }
+function escapeRpcJson(serialized) {
+    const escapes = { '<': String.raw `\u003c`, '>': String.raw `\u003e`, '&': String.raw `\u0026` };
+    return serialized.replace(/[<>&]/g, character => escapes[character]);
+}
 function firstRequestHeader(req, name) {
     const value = req.headers[name.toLowerCase()];
     return Array.isArray(value) ? value[0] : value;
 }
 class StorageServer {
+    syncTransfers;
     app = (0, express_1.default)();
     host;
     port;
@@ -141,6 +192,7 @@ class StorageServer {
     telemetryConfig;
     defaultRpcListLimit;
     maxRpcListLimit;
+    maxRpcListOffset;
     maxRpcArrayItems;
     maxRpcResponseBytes;
     paymentReplayStore;
@@ -181,6 +233,9 @@ class StorageServer {
         this.maxRpcListLimit =
             options.maxRpcListLimit ??
                 (0, edgePolicy_1.readResourceLimit)('WALLET_STORAGE', 'RPC_MAX_LIST_LIMIT', (0, edgePolicy_1.profileValue)(profile, { small: 500, standard: 1_000, highThroughput: 5_000 }));
+        this.maxRpcListOffset =
+            options.maxRpcListOffset ??
+                (0, edgePolicy_1.readResourceLimit)('WALLET_STORAGE', 'RPC_MAX_LIST_OFFSET', (0, edgePolicy_1.profileValue)(profile, { small: 100_000, standard: 1_000_000, highThroughput: 10_000_000 }));
         this.maxRpcArrayItems =
             options.maxRpcArrayItems ??
                 (0, edgePolicy_1.readResourceLimit)('WALLET_STORAGE', 'RPC_MAX_ARRAY_ITEMS', (0, edgePolicy_1.profileValue)(profile, { small: 250_000, standard: 1_000_000, highThroughput: 4_000_000 }));
@@ -196,6 +251,26 @@ class StorageServer {
             this.defaultRpcListLimit > this.maxRpcListLimit) {
             throw new RangeError('defaultRpcListLimit must not exceed maxRpcListLimit');
         }
+        if (!Number.isSafeInteger(this.maxRpcListOffset) || this.maxRpcListOffset < -1) {
+            throw new RangeError('maxRpcListOffset must be -1 or a non-negative safe integer');
+        }
+        const jsonBodyLimit = (0, edgePolicy_1.readBodyLimitBytes)('WALLET_STORAGE_JSON', (0, edgePolicy_1.profileValue)(profile, {
+            small: 2 * 1024 * 1024,
+            standard: 8 * 1024 * 1024,
+            highThroughput: 32 * 1024 * 1024
+        }));
+        // Keep legacy configurations working when their envelopes cannot fit even a minimum part.
+        if (options.syncTransfers !== false &&
+            storage instanceof StorageKnex_1.StorageKnex &&
+            jsonBodyLimit >= 4096 &&
+            (this.maxRpcResponseBytes === -1 || this.maxRpcResponseBytes >= 4096)) {
+            this.syncTransfers = new KnexSyncTransferStore_1.KnexSyncTransferStore(storage.knex, {
+                version: 1,
+                maxBytes: SyncTransfer_1.SYNC_TRANSFER_MAX_BYTES,
+                inlineBytes: Math.min(6 * 1024 * 1024, Math.floor(jsonBodyLimit / 2), this.maxRpcResponseBytes === -1 ? SyncTransfer_1.SYNC_TRANSFER_MAX_BYTES : Math.floor(this.maxRpcResponseBytes / 2)),
+                partBytes: Math.min(SyncTransfer_1.SYNC_TRANSFER_PART_BYTES, Math.floor(jsonBodyLimit / 4), this.maxRpcResponseBytes === -1 ? SyncTransfer_1.SYNC_TRANSFER_PART_BYTES : Math.floor(this.maxRpcResponseBytes / 4))
+            });
+        }
         const legacyLogShortReqs = options['logShortReqs'];
         if (legacyLogShortReqs) {
             this.setupShortReqLogging();
@@ -327,7 +402,7 @@ class StorageServer {
                 res.status(200).json({ uploaded: true });
             }
             catch (error) {
-                const json = WalletError_1.WalletError.unknownToJson(error);
+                const json = publicWalletErrorJson(error);
                 res.status(400).json(JSON.parse(json));
             }
         });
@@ -343,7 +418,7 @@ class StorageServer {
                 res.status(200).json({ uploaded: true });
             }
             catch (error) {
-                const json = WalletError_1.WalletError.unknownToJson(error);
+                const json = publicWalletErrorJson(error);
                 res.status(400).json(JSON.parse(json));
             }
         });
@@ -376,7 +451,9 @@ class StorageServer {
         const logObj = this.createRpcLog(req, method, id, params);
         try {
             this.enforceRpcRequestBudgets(method, params);
-            const dispatch = await this.dispatchRpcCall(method, params, req, logObj, rpcSpan);
+            const dispatch = method.endsWith('SyncTransfer') || method.endsWith('SyncTransferPart')
+                ? await this.dispatchSyncTransfer(method, params, req)
+                : await this.dispatchRpcCall(method, params, req, logObj, rpcSpan);
             if (!dispatch.found) {
                 return this.sendRpc(res, useBinary, {
                     jsonrpc: '2.0',
@@ -384,12 +461,30 @@ class StorageServer {
                     id
                 }, 400);
             }
-            return this.sendRpc(res, useBinary, { jsonrpc: '2.0', result: dispatch.result, id });
+            const result = useBinary ? binaryRpcResult(method, dispatch.result) : dispatch.result;
+            // JSON-RPC success responses must carry a result member. Preserve an
+            // explicit null for void storage methods rather than letting
+            // JSON.stringify silently omit an undefined result.
+            const payload = { jsonrpc: '2.0', result: result ?? null, id };
+            const serialized = escapeRpcJson((0, BinaryJson_1.stringifyJsonRpc)(payload, useBinary));
+            // Apply the response bound before consulting any client transport preference.
+            if (this.maxRpcResponseBytes !== -1 && Buffer.byteLength(serialized, 'utf8') > this.maxRpcResponseBytes) {
+                return await this.sendOversizedSyncResponse(req, res, useBinary, method, params, payload);
+            }
+            return this.sendRpc(res, useBinary, payload, 200, serialized);
         }
         catch (error) {
             return this.sendRpcError(res, useBinary, id, error);
         }
     }
+    async sendOversizedSyncResponse(req, res, useBinary, method, params, payload) {
+        // Dispatch already applied normal RPC authorization. Negotiation changes only framing.
+        if (method !== 'getSyncChunk' || params[0]?.syncTransferVersion !== 1 || this.syncTransfers == null) {
+            return this.sendRpc(res, useBinary, payload);
+        }
+        const manifest = await this.syncTransfers.beginRead(requiredAuthenticatedIdentityKey(req), (0, SyncTransfer_1.syncTransferDigest)((0, SyncTransfer_1.encodeSyncTransfer)(params[0])), (0, SyncTransfer_1.encodeSyncTransfer)((0, syncChunkBinary_1.syncChunkBinary)(payload.result)));
+        return this.sendRpc(res, useBinary, { ...payload, result: { syncTransfer: manifest } });
+    }
     traceHttpRequest(req, res, next) {
         const span = this.telemetry.startSpan('wallet.storage.http.request', {
             component: 'wallet-storage-server',
@@ -423,9 +518,8 @@ class StorageServer {
         });
         next();
     }
-    sendRpc(res, useBinary, payload, status = 200) {
+    sendRpc(res, useBinary, payload, status = 200, serialized = escapeRpcJson((0, BinaryJson_1.stringifyJsonRpc)(payload, useBinary))) {
         res.set('X-Content-Type-Options', 'nosniff');
-        const serialized = (0, BinaryJson_1.stringifyJsonRpc)(payload, useBinary);
         if (this.maxRpcResponseBytes !== -1 && Buffer.byteLength(serialized, 'utf8') > this.maxRpcResponseBytes) {
             return res.status(413).json({
                 jsonrpc: '2.0',
@@ -446,6 +540,7 @@ class StorageServer {
         if (topLevelIndex != null) {
             const args = this.objectArgument(params, topLevelIndex);
             args.limit = this.normalizedRpcLimit(args.limit);
+            args.offset = this.normalizedRpcOffset(args.offset);
         }
         const pagedIndex = pagedLimitArgument.get(method);
         if (pagedIndex != null) {
@@ -455,8 +550,22 @@ class StorageServer {
                 throw new TypeError('paged must be an object');
             }
             paged.limit = this.normalizedRpcLimit(paged.limit);
+            paged.offset = this.normalizedRpcOffset(paged.offset);
             args.paged = paged;
         }
+        if (method === 'getSyncChunk' || method === 'processSyncChunk') {
+            const args = this.objectArgument(params, 0);
+            if (args.offsets != null) {
+                if (!Array.isArray(args.offsets))
+                    throw new TypeError('offsets must be an array');
+                for (const entry of args.offsets) {
+                    if (entry == null || typeof entry !== 'object' || Array.isArray(entry)) {
+                        throw new TypeError('offset entries must be objects');
+                    }
+                    entry.offset = this.normalizedRpcOffset(entry.offset);
+                }
+            }
+        }
         if (method === 'getSyncChunk') {
             const args = this.objectArgument(params, 0);
             args.maxItems = this.normalizedRpcLimit(args.maxItems);
@@ -477,6 +586,9 @@ class StorageServer {
                 throw new RangeError('RPC parameter nesting exceeds 64 levels');
             if (current.value == null || typeof current.value !== 'object')
                 continue;
+            // Decoded binary values are bounded by the HTTP body limit, not item cardinality.
+            if (current.value instanceof Uint8Array)
+                continue;
             if (seen.has(current.value))
                 continue;
             seen.add(current.value);
@@ -513,12 +625,24 @@ class StorageServer {
         }
         return limit;
     }
+    normalizedRpcOffset(value) {
+        if (value == null)
+            return 0;
+        if (!Number.isSafeInteger(value) || Number(value) < 0) {
+            throw new RangeError('RPC list offsets must be non-negative safe integers');
+        }
+        const offset = Number(value);
+        if (this.maxRpcListOffset !== -1 && offset > this.maxRpcListOffset) {
+            throw new RangeError(`RPC list offsets must not exceed ${this.maxRpcListOffset}`);
+        }
+        return offset;
+    }
     sendRpcError(res, useBinary, id, error) {
         /**
          * Convert errors to standard JSON object format that can be converted back
          * to WalletError derived objects on the client side and re-thrown.
          */
-        const json = WalletError_1.WalletError.unknownToJson(error);
+        const json = publicWalletErrorJson(error);
         return this.sendRpc(res, useBinary, {
             jsonrpc: '2.0',
             error: JSON.parse(json),
@@ -547,7 +671,13 @@ class StorageServer {
     async dispatchRpcCall(method, params, req, logObj, rpcSpan) {
         if (!storageRpcMethods.has(method))
             return { found: false };
-        const storageMethod = method === 'findOutputBaskets' ? 'findOutputBasketsAuth' : method;
+        const storageMethod = method === 'findOutputBaskets'
+            ? 'findOutputBasketsAuth'
+            : method === 'findProvenTxReqs'
+                ? 'findProvenTxReqsAuth'
+                : method === 'updateProvenTxReqWithNewProvenTx'
+                    ? 'updateProvenTxReqWithNewProvenTxAuth'
+                    : method;
         const storageHandler = this.storage[storageMethod];
         if (typeof storageHandler !== 'function')
             return { found: false };
@@ -556,7 +686,16 @@ class StorageServer {
             return { found: true, result: undefined };
         const logger = this.createRpcLogger(method, params);
         try {
-            const result = await this.traceRpcStep('wallet.storage.handler', rpcSpan, async () => await storageHandler.call(this.storage, ...params), { 'rpc.method': method });
+            let result = await this.traceRpcStep('wallet.storage.handler', rpcSpan, async () => await storageHandler.call(this.storage, ...params), { 'rpc.method': method });
+            if ((method === 'makeAvailable' || method === 'getSettings') &&
+                typeof this.storage.getSyncCheckpoint === 'function') {
+                // Advertise on the wire without mutating the persisted settings object.
+                result = {
+                    ...result,
+                    syncCheckpointVersion: 1,
+                    ...(this.syncTransfers == null ? {} : { syncTransfer: this.syncTransfers.capabilities })
+                };
+            }
             this.finishRpcLogging(logger, result);
             return { found: true, result };
         }
@@ -566,6 +705,70 @@ class StorageServer {
             throw error;
         }
     }
+    async dispatchSyncTransfer(method, params, req) {
+        const transfers = this.syncTransfers;
+        if (transfers == null)
+            return { found: false };
+        const identityKey = requiredAuthenticatedIdentityKey(req);
+        const input = params[0];
+        if (input == null || typeof input !== 'object' || input.identityKey !== identityKey) {
+            throw new WERR_errors_1.WERR_UNAUTHORIZED('Sync transfer identity must match authentication');
+        }
+        let result;
+        switch (method) {
+            case 'beginReadSyncTransfer': {
+                const args = input.args;
+                if (args?.identityKey !== identityKey ||
+                    args.fromStorageIdentityKey !== this.storage.getSettings().storageIdentityKey) {
+                    throw new WERR_errors_1.WERR_UNAUTHORIZED('Sync transfer source must match authenticated storage');
+                }
+                // Retain existing request validation, authorization, ordering and user scoping.
+                const context = (0, SyncTransfer_1.syncTransferDigest)((0, SyncTransfer_1.encodeSyncTransfer)(args));
+                this.enforceRpcRequestBudgets('getSyncChunk', [args]);
+                await this.authorizeRpcCall('getSyncChunk', [args], req);
+                const chunk = await this.storage.getSyncChunk(args);
+                const bytes = (0, SyncTransfer_1.encodeSyncTransfer)((0, syncChunkBinary_1.syncChunkBinary)(chunk));
+                result = await transfers.beginRead(identityKey, context, bytes);
+                break;
+            }
+            case 'readSyncTransferPart':
+                result = await transfers.read(identityKey, input.transferId, input.offset);
+                break;
+            case 'beginWriteSyncTransfer':
+                result = await transfers.beginWrite(identityKey, input.digest, input.totalBytes);
+                break;
+            case 'writeSyncTransferPart':
+                result = await transfers.write(identityKey, input.transferId, input.offset, input.bytes);
+                break;
+            case 'commitSyncTransfer': {
+                const staged = await transfers.loadWrite(identityKey, input.transferId);
+                if (staged.result !== undefined)
+                    return { found: true, result: staged.result };
+                const payload = (0, SyncTransfer_1.decodeSyncTransfer)(staged.bytes);
+                if (payload?.args?.identityKey !== identityKey ||
+                    payload.chunk?.userIdentityKey !== identityKey ||
+                    payload.args.toStorageIdentityKey !== this.storage.getSettings().storageIdentityKey ||
+                    payload.chunk.toStorageIdentityKey !== payload.args.toStorageIdentityKey ||
+                    payload.chunk.fromStorageIdentityKey !== payload.args.fromStorageIdentityKey) {
+                    throw new WERR_errors_1.WERR_UNAUTHORIZED('Sync transfer wallet and storage identities must match');
+                }
+                // Mark only the reconstructed request: old peers retain their existing wire contract.
+                payload.args.requireMatchingCheckpoint = true;
+                this.enforceRpcRequestBudgets('processSyncChunk', [payload.args, payload.chunk]);
+                const dispatch = await this.dispatchRpcCall('processSyncChunk', [payload.args, payload.chunk], req);
+                result = dispatch.result;
+                await transfers.complete(identityKey, input.transferId, result);
+                break;
+            }
+            case 'releaseSyncTransfer':
+                await transfers.release(identityKey, input.transferId);
+                result = true;
+                break;
+            default:
+                return { found: false };
+        }
+        return { found: true, result };
+    }
     async traceRpcStep(name, parent, callback, attributes) {
         if (parent == null)
             return await callback();
@@ -579,7 +782,8 @@ class StorageServer {
     async authorizeRpcCall(method, params, req, logObj) {
         switch (method) {
             case 'destroy':
-                this.logIgnoredDestroy(logObj);
+            case 'migrate':
+                this.logIgnoredLifecycleMutation(logObj);
                 return false;
             case 'getSettings':
                 return true;
@@ -591,16 +795,24 @@ class StorageServer {
             case 'adminStats':
                 this.authorizeAdminStats(params, req);
                 return true;
+            case 'findProvenTxReqs':
+            case 'updateProvenTxReqWithNewProvenTx': {
+                const args = params[0];
+                const auth = await this.authenticatedAuth(req, activeStorageRpcMethods.has(method));
+                params.splice(0, params.length, auth, args);
+                return true;
+            }
             case 'processSyncChunk':
                 await this.validateParam0(params, req);
                 (0, entityValidationHelpers_1.validateSyncChunkEntities)(params[1]);
+                await (0, validateRpcSyncProofs_1.validateSyncProofs)(this.storage, params[1].provenTxs ?? []);
                 return true;
             default:
                 await this.authorizeStandardRpcCall(method, params, req);
                 return true;
         }
     }
-    logIgnoredDestroy(logObj) {
+    logIgnoredLifecycleMutation(logObj) {
         if (logObj == null)
             return;
         logObj.result = undefined;
@@ -618,7 +830,7 @@ class StorageServer {
     }
     async authorizeStandardRpcCall(method, params, req) {
         if (authIdRpcMethods.has(method)) {
-            await this.bindAuthenticatedAuth(params, req, actionBatchRpcMethods.has(method));
+            await this.bindAuthenticatedAuth(params, req, activeStorageRpcMethods.has(method));
             return;
         }
         await this.validateParam0(params, req);
@@ -652,7 +864,7 @@ class StorageServer {
         const { user } = await this.storage.findOrInsertUser(identityKey);
         const isActive = user.activeStorage === this.storage.getSettings().storageIdentityKey;
         if (requireActive && !isActive) {
-            throw new WERR_errors_1.WERR_NOT_ACTIVE("action batch methods require the authenticated user's active storage provider");
+            throw new WERR_errors_1.WERR_NOT_ACTIVE("this method requires the authenticated user's active storage provider");
         }
         return {
             identityKey,