@brightchain/brightchain-api-lib 0.25.0 → 0.27.0

package/src/lib/services/emailGateway/recipientLookupService.js

@@ -0,0 +1,307 @@
+"use strict";
+/**
+ * RecipientLookupService — TCP socketmap server for Postfix recipient validation.
+ *
+ * Implements the Postfix `socketmap` lookup protocol over TCP so that Postfix
+ * can validate whether a recipient address corresponds to a registered
+ * BrightChain user *before* accepting the message (preventing backscatter).
+ *
+ * Protocol (simplified):
+ *   Client sends: `<name> <key>\n`   (e.g. `virtual alice@brightchain.org\n`)
+ *   Server responds: `OK <value>\n` | `NOTFOUND \n` | `TEMP <reason>\n`
+ *
+ * The service:
+ * - Listens on a configurable TCP port (default 2526) on localhost
+ * - Queries a user-registry dependency for the local part at the canonical domain
+ * - Caches positive results in an LRU cache with configurable TTL (default 300 s)
+ * - Responds within 5 seconds (timeout handling)
+ *
+ * @see Requirements 13.1, 13.2, 13.3, 13.4, 13.5, 13.6, 13.7, 4.1, 4.2, 4.3
+ * @module recipientLookupService
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RecipientLookupService = exports.RecipientLookupCache = void 0;
+const tslib_1 = require("tslib");
+const net = tslib_1.__importStar(require("net"));
+/**
+ * Simple LRU cache for positive recipient lookup results.
+ *
+ * Only positive (`OK`) results are cached — negative and temporary results
+ * are always re-queried so that newly registered users are found promptly.
+ *
+ * @see Requirement 13.6
+ */
+class RecipientLookupCache {
+    maxSize;
+    ttlMs;
+    cache = new Map();
+    constructor(maxSize, ttlMs) {
+        this.maxSize = maxSize;
+        this.ttlMs = ttlMs;
+    }
+    /**
+     * Retrieve a cached positive result for `key`.
+     *
+     * @returns `true` if the key is cached and not expired, `false` otherwise.
+     */
+    get(key) {
+        const entry = this.cache.get(key);
+        if (!entry) {
+            return false;
+        }
+        if (Date.now() >= entry.expiresAt) {
+            this.cache.delete(key);
+            return false;
+        }
+        // Move to end (most-recently used) by re-inserting.
+        this.cache.delete(key);
+        this.cache.set(key, entry);
+        return true;
+    }
+    /**
+     * Store a positive lookup result for `key`.
+     */
+    set(key) {
+        // If already present, delete first so insertion order is refreshed.
+        if (this.cache.has(key)) {
+            this.cache.delete(key);
+        }
+        // Evict the least-recently used entry if at capacity.
+        if (this.cache.size >= this.maxSize) {
+            const oldest = this.cache.keys().next().value;
+            if (oldest !== undefined) {
+                this.cache.delete(oldest);
+            }
+        }
+        this.cache.set(key, { expiresAt: Date.now() + this.ttlMs });
+    }
+    /** Number of entries currently in the cache. */
+    get size() {
+        return this.cache.size;
+    }
+    /** Remove all entries. */
+    clear() {
+        this.cache.clear();
+    }
+}
+exports.RecipientLookupCache = RecipientLookupCache;
+// ─── Constants ──────────────────────────────────────────────────────────────
+/** Maximum time (ms) to wait for a registry lookup before returning TEMP. */
+const LOOKUP_TIMEOUT_MS = 5_000;
+/** Default maximum number of entries in the LRU cache. */
+const DEFAULT_CACHE_MAX_SIZE = 10_000;
+// ─── RecipientLookupService ─────────────────────────────────────────────────
+/**
+ * TCP socketmap server that Postfix queries to validate recipient addresses
+ * against the BrightChain user registry.
+ *
+ * Implements `IRecipientLookupService` from brightchain-lib for the `lookup`
+ * contract, and adds TCP server lifecycle (`start` / `stop`).
+ *
+ * @see Requirements 13.1, 13.2, 13.3, 13.4, 13.5, 13.6, 13.7
+ */
+class RecipientLookupService {
+    config;
+    userRegistry;
+    server = null;
+    cache;
+    port;
+    canonicalDomain;
+    constructor(config, userRegistry) {
+        this.config = config;
+        this.userRegistry = userRegistry;
+        this.port = config.recipientLookupPort;
+        this.canonicalDomain = config.canonicalDomain.toLowerCase();
+        this.cache = new RecipientLookupCache(DEFAULT_CACHE_MAX_SIZE, config.recipientLookupCacheTtlSeconds * 1_000);
+    }
+    /**
+     * Update the canonical domain used for recipient validation.
+     *
+     * Clears the lookup cache since cached entries may belong to the old domain.
+     *
+     * @param newDomain - The new canonical domain
+     *
+     * @see Requirement 8.5 — hot-reload canonical domain without restart
+     */
+    updateCanonicalDomain(newDomain) {
+        this.canonicalDomain = newDomain.toLowerCase();
+        this.cache.clear();
+    }
+    // ─── IRecipientLookupService ────────────────────────────────────────
+    /**
+     * Look up whether `emailAddress` corresponds to a registered BrightChain
+     * user at the canonical domain.
+     *
+     * 1. Check the LRU cache for a positive hit.
+     * 2. Query the user registry (with a 5-second timeout).
+     * 3. Cache positive results.
+     *
+     * @returns `'OK'` | `'NOTFOUND'` | `'TEMP'`
+     *
+     * @see Requirements 13.2, 13.3, 13.4, 13.5, 13.6
+     */
+    async lookup(emailAddress) {
+        const normalised = emailAddress.toLowerCase().trim();
+        // Validate that the address belongs to the canonical domain.
+        const atIndex = normalised.lastIndexOf('@');
+        if (atIndex === -1) {
+            return 'NOTFOUND';
+        }
+        const domain = normalised.slice(atIndex + 1);
+        if (domain !== this.canonicalDomain) {
+            return 'NOTFOUND';
+        }
+        // 1. Cache hit → return OK immediately (Req 13.6).
+        if (this.cache.get(normalised)) {
+            return 'OK';
+        }
+        // 2. Query registry with timeout (Req 4.3 — respond within 5 s).
+        try {
+            const found = await this.withTimeout(this.userRegistry.hasUser(normalised), LOOKUP_TIMEOUT_MS);
+            if (found) {
+                this.cache.set(normalised);
+                return 'OK';
+            }
+            return 'NOTFOUND';
+        }
+        catch {
+            // Registry unreachable or timeout → TEMP (Req 13.5).
+            return 'TEMP';
+        }
+    }
+    // ─── TCP Server Lifecycle ───────────────────────────────────────────
+    /**
+     * Start the TCP socketmap server on the configured port (localhost only).
+     *
+     * @see Requirement 13.1
+     */
+    start() {
+        return new Promise((resolve, reject) => {
+            if (this.server) {
+                resolve();
+                return;
+            }
+            this.server = net.createServer((socket) => this.handleConnection(socket));
+            this.server.on('error', (err) => {
+                reject(err);
+            });
+            this.server.listen(this.port, '127.0.0.1', () => {
+                resolve();
+            });
+        });
+    }
+    /**
+     * Stop the TCP server and clear the cache.
+     */
+    stop() {
+        return new Promise((resolve) => {
+            this.cache.clear();
+            if (!this.server) {
+                resolve();
+                return;
+            }
+            this.server.close(() => {
+                this.server = null;
+                resolve();
+            });
+        });
+    }
+    /** Whether the TCP server is currently listening. */
+    isRunning() {
+        return this.server !== null && this.server.listening;
+    }
+    /** Expose cache for testing purposes. */
+    getCache() {
+        return this.cache;
+    }
+    // ─── Connection Handler ─────────────────────────────────────────────
+    /**
+     * Handle a single TCP connection from Postfix.
+     *
+     * Postfix socketmap protocol:
+     *   Request:  `<mapname> <key>\n`
+     *   Response: `OK <value>\n` | `NOTFOUND \n` | `TEMP <reason>\n`
+     *
+     * The connection may carry multiple newline-delimited requests.
+     */
+    handleConnection(socket) {
+        let buffer = '';
+        socket.setEncoding('utf-8');
+        socket.on('data', (data) => {
+            buffer += data;
+            // Process all complete lines in the buffer.
+            let newlineIdx;
+            while ((newlineIdx = buffer.indexOf('\n')) !== -1) {
+                const line = buffer.slice(0, newlineIdx).trim();
+                buffer = buffer.slice(newlineIdx + 1);
+                if (line.length === 0) {
+                    continue;
+                }
+                this.handleRequest(line)
+                    .then((response) => {
+                    if (!socket.destroyed) {
+                        socket.write(response + '\n');
+                    }
+                })
+                    .catch(() => {
+                    if (!socket.destroyed) {
+                        socket.write('TEMP internal error\n');
+                    }
+                });
+            }
+        });
+        socket.on('error', () => {
+            // Silently handle socket errors (e.g. client disconnect).
+        });
+    }
+    /**
+     * Parse a socketmap request line and return the response string.
+     *
+     * @param line - A single request line, e.g. `virtual alice@brightchain.org`
+     * @returns The response string, e.g. `OK alice@brightchain.org`
+     */
+    async handleRequest(line) {
+        // Format: `<mapname> <key>`
+        const spaceIdx = line.indexOf(' ');
+        if (spaceIdx === -1) {
+            return 'TEMP malformed request';
+        }
+        const key = line.slice(spaceIdx + 1).trim();
+        if (key.length === 0) {
+            return 'TEMP malformed request';
+        }
+        const result = await this.lookup(key);
+        switch (result) {
+            case 'OK':
+                return `OK ${key}`;
+            case 'NOTFOUND':
+                return 'NOTFOUND ';
+            case 'TEMP':
+                return 'TEMP registry unavailable';
+        }
+    }
+    // ─── Helpers ────────────────────────────────────────────────────────
+    /**
+     * Race a promise against a timeout.
+     *
+     * @throws If the timeout fires first.
+     */
+    withTimeout(promise, ms) {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                reject(new Error(`Lookup timed out after ${ms}ms`));
+            }, ms);
+            promise
+                .then((value) => {
+                clearTimeout(timer);
+                resolve(value);
+            })
+                .catch((err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+        });
+    }
+}
+exports.RecipientLookupService = RecipientLookupService;
+//# sourceMappingURL=recipientLookupService.js.map

package/src/lib/services/emailGateway/recipientLookupService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipientLookupService.js","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/services/emailGateway/recipientLookupService.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;;AAEH,iDAA2B;AAkC3B;;;;;;;GAOG;AACH,MAAa,oBAAoB;IAIZ;IACA;IAJF,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEvD,YACmB,OAAe,EACf,KAAa;QADb,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAQ;IAC7B,CAAC;IAEJ;;;;OAIG;IACH,GAAG,CAAC,GAAW;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,oDAAoD;QACpD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,GAAW;QACb,oEAAoE;QACpE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,sDAAsD;QACtD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,gDAAgD;IAChD,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,0BAA0B;IAC1B,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAvDD,oDAuDC;AAGD,+EAA+E;AAE/E,6EAA6E;AAC7E,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,0DAA0D;AAC1D,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAa,sBAAsB;IAOd;IACA;IAPX,MAAM,GAAsB,IAAI,CAAC;IACxB,KAAK,CAAuB;IAC5B,IAAI,CAAS;IACtB,eAAe,CAAS;IAEhC,YACmB,MAA2B,EAC3B,YAA2B;QAD3B,WAAM,GAAN,MAAM,CAAqB;QAC3B,iBAAY,GAAZ,YAAY,CAAe;QAE5C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC;QACvC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;QAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CACnC,sBAAsB,EACtB,MAAM,CAAC,8BAA8B,GAAG,KAAK,CAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,qBAAqB,CAAC,SAAiB;QACrC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,uEAAuE;IAEvE;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,YAAoB;QAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAErD,6DAA6D;QAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;YACnB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YACpC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,mDAAmD;QACnD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAClC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,EACrC,iBAAiB,CAClB,CAAC;YAEF,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC3B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;;;OAIG;IACH,KAAK;QACH,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CACxC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAC9B,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBAC9C,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IACrD,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IACvD,CAAC;IAED,yCAAyC;IACzC,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,uEAAuE;IAEvE;;;;;;;;OAQG;IACK,gBAAgB,CAAC,MAAkB;QACzC,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAE5B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACjC,MAAM,IAAI,IAAI,CAAC;YAEf,4CAA4C;YAC5C,IAAI,UAAkB,CAAC;YACvB,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;gBAEtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtB,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;qBACrB,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;oBACjB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;wBACtB,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;oBAChC,CAAC;gBACH,CAAC,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE;oBACV,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;wBACtB,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;oBACxC,CAAC;gBACH,CAAC,CAAC,CAAC;YACP,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,0DAA0D;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,aAAa,CAAC,IAAY;QACtC,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,OAAO,wBAAwB,CAAC;QAClC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,wBAAwB,CAAC;QAClC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEtC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,IAAI;gBACP,OAAO,MAAM,GAAG,EAAE,CAAC;YACrB,KAAK,UAAU;gBACb,OAAO,WAAW,CAAC;YACrB,KAAK,MAAM;gBACT,OAAO,2BAA2B,CAAC;QACvC,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;;;OAIG;IACK,WAAW,CAAI,OAAmB,EAAE,EAAU;QACpD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC;YACtD,CAAC,EAAE,EAAE,CAAC,CAAC;YAEP,OAAO;iBACJ,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA/OD,wDA+OC"}

package/src/lib/services/emailGateway/retryBackoff.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Retry Back-Off Utilities — exponential back-off with jitter for outbound
+ * email delivery retries.
+ *
+ * Provides pure utility functions that the OutboundDeliveryWorker and
+ * OutboundQueue use to compute retry delays and determine whether a
+ * message should be retried or permanently failed.
+ *
+ * Back-off formula: baseInterval × 2^retryCount + random jitter (0–25%)
+ *
+ * @see Requirements 3.1, 3.2, 3.3, 3.4, 3.5
+ * @module retryBackoff
+ */
+/**
+ * Configuration for retry back-off behaviour.
+ *
+ * Extracted from `IEmailGatewayConfig` so the utility functions remain
+ * decoupled from the full gateway config.
+ */
+export interface IRetryConfig {
+    /** Maximum number of delivery retry attempts (default: 5). Req 3.3 */
+    retryMaxCount: number;
+    /** Maximum total retry duration in milliseconds (default: 48h). Req 3.3 */
+    retryMaxDurationMs: number;
+    /** Base interval in milliseconds for exponential back-off (default: 60000). Req 3.2 */
+    retryBaseIntervalMs: number;
+}
+/**
+ * Minimal item shape needed by `shouldRetry`.
+ */
+export interface IRetryableItem {
+    /** Number of delivery attempts made so far. */
+    retryCount: number;
+    /** Timestamp when the item was first enqueued. */
+    enqueuedAt: Date;
+}
+/**
+ * Compute the exponential back-off delay for a retry attempt.
+ *
+ * Formula: `baseIntervalMs × 2^retryCount + jitter`
+ * where jitter is a random value between 0% and 25% of the base delay.
+ *
+ * @param baseIntervalMs - Base interval in milliseconds (e.g. 60000)
+ * @param retryCount     - Current retry attempt number (0-based: first retry = 0)
+ * @param randomFn       - Optional random function for deterministic testing (default: Math.random)
+ * @returns Delay in milliseconds before the next retry attempt
+ *
+ * @see Requirement 3.2
+ */
+export declare function computeBackoffDelay(baseIntervalMs: number, retryCount: number, randomFn?: () => number): number;
+/**
+ * Determine whether a queue item should be retried or permanently failed.
+ *
+ * An item should be retried when BOTH conditions are met:
+ * 1. `retryCount < config.retryMaxCount`
+ * 2. Time since `enqueuedAt` has not exceeded `config.retryMaxDurationMs`
+ *
+ * @param item   - The queue item to evaluate
+ * @param config - Retry configuration limits
+ * @param nowMs  - Current time in epoch milliseconds (default: Date.now())
+ * @returns `true` if the item is eligible for another retry attempt
+ *
+ * @see Requirements 3.3, 3.4
+ */
+export declare function shouldRetry(item: IRetryableItem, config: IRetryConfig, nowMs?: number): boolean;
+/**
+ * Compute the `nextAttemptAt` timestamp for a requeued item.
+ *
+ * Convenience wrapper that combines `computeBackoffDelay` with the
+ * current time to produce an absolute `Date`.
+ *
+ * @param baseIntervalMs - Base interval in milliseconds
+ * @param retryCount     - Current retry count (before increment)
+ * @param nowMs          - Current time in epoch milliseconds (default: Date.now())
+ * @param randomFn       - Optional random function for deterministic testing
+ * @returns The `Date` at which the next attempt should be made
+ */
+export declare function computeNextAttemptAt(baseIntervalMs: number, retryCount: number, nowMs?: number, randomFn?: () => number): Date;
+//# sourceMappingURL=retryBackoff.d.ts.map

package/src/lib/services/emailGateway/retryBackoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retryBackoff.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/services/emailGateway/retryBackoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,aAAa,EAAE,MAAM,CAAC;IAEtB,2EAA2E;IAC3E,kBAAkB,EAAE,MAAM,CAAC;IAE3B,uFAAuF;IACvF,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,UAAU,EAAE,MAAM,CAAC;IAEnB,kDAAkD;IAClD,UAAU,EAAE,IAAI,CAAC;CAClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,QAAQ,GAAE,MAAM,MAAoB,GACnC,MAAM,CAIR;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,YAAY,EACpB,KAAK,GAAE,MAAmB,GACzB,OAAO,CAST;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAmB,EAC1B,QAAQ,CAAC,EAAE,MAAM,MAAM,GACtB,IAAI,CAGN"}

package/src/lib/services/emailGateway/retryBackoff.js

@@ -0,0 +1,77 @@
+"use strict";
+/**
+ * Retry Back-Off Utilities — exponential back-off with jitter for outbound
+ * email delivery retries.
+ *
+ * Provides pure utility functions that the OutboundDeliveryWorker and
+ * OutboundQueue use to compute retry delays and determine whether a
+ * message should be retried or permanently failed.
+ *
+ * Back-off formula: baseInterval × 2^retryCount + random jitter (0–25%)
+ *
+ * @see Requirements 3.1, 3.2, 3.3, 3.4, 3.5
+ * @module retryBackoff
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeBackoffDelay = computeBackoffDelay;
+exports.shouldRetry = shouldRetry;
+exports.computeNextAttemptAt = computeNextAttemptAt;
+/**
+ * Compute the exponential back-off delay for a retry attempt.
+ *
+ * Formula: `baseIntervalMs × 2^retryCount + jitter`
+ * where jitter is a random value between 0% and 25% of the base delay.
+ *
+ * @param baseIntervalMs - Base interval in milliseconds (e.g. 60000)
+ * @param retryCount     - Current retry attempt number (0-based: first retry = 0)
+ * @param randomFn       - Optional random function for deterministic testing (default: Math.random)
+ * @returns Delay in milliseconds before the next retry attempt
+ *
+ * @see Requirement 3.2
+ */
+function computeBackoffDelay(baseIntervalMs, retryCount, randomFn = Math.random) {
+    const baseDelay = baseIntervalMs * Math.pow(2, retryCount);
+    const jitter = baseDelay * 0.25 * randomFn();
+    return baseDelay + jitter;
+}
+/**
+ * Determine whether a queue item should be retried or permanently failed.
+ *
+ * An item should be retried when BOTH conditions are met:
+ * 1. `retryCount < config.retryMaxCount`
+ * 2. Time since `enqueuedAt` has not exceeded `config.retryMaxDurationMs`
+ *
+ * @param item   - The queue item to evaluate
+ * @param config - Retry configuration limits
+ * @param nowMs  - Current time in epoch milliseconds (default: Date.now())
+ * @returns `true` if the item is eligible for another retry attempt
+ *
+ * @see Requirements 3.3, 3.4
+ */
+function shouldRetry(item, config, nowMs = Date.now()) {
+    if (item.retryCount >= config.retryMaxCount) {
+        return false;
+    }
+    const age = nowMs - item.enqueuedAt.getTime();
+    if (age > config.retryMaxDurationMs) {
+        return false;
+    }
+    return true;
+}
+/**
+ * Compute the `nextAttemptAt` timestamp for a requeued item.
+ *
+ * Convenience wrapper that combines `computeBackoffDelay` with the
+ * current time to produce an absolute `Date`.
+ *
+ * @param baseIntervalMs - Base interval in milliseconds
+ * @param retryCount     - Current retry count (before increment)
+ * @param nowMs          - Current time in epoch milliseconds (default: Date.now())
+ * @param randomFn       - Optional random function for deterministic testing
+ * @returns The `Date` at which the next attempt should be made
+ */
+function computeNextAttemptAt(baseIntervalMs, retryCount, nowMs = Date.now(), randomFn) {
+    const delay = computeBackoffDelay(baseIntervalMs, retryCount, randomFn);
+    return new Date(nowMs + delay);
+}
+//# sourceMappingURL=retryBackoff.js.map

package/src/lib/services/emailGateway/retryBackoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retryBackoff.js","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/services/emailGateway/retryBackoff.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AA2CH,kDAQC;AAgBD,kCAaC;AAcD,oDAQC;AAxED;;;;;;;;;;;;GAYG;AACH,SAAgB,mBAAmB,CACjC,cAAsB,EACtB,UAAkB,EAClB,WAAyB,IAAI,CAAC,MAAM;IAEpC,MAAM,SAAS,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,QAAQ,EAAE,CAAC;IAC7C,OAAO,SAAS,GAAG,MAAM,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,WAAW,CACzB,IAAoB,EACpB,MAAoB,EACpB,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,IAAI,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IAC9C,IAAI,GAAG,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,oBAAoB,CAClC,cAAsB,EACtB,UAAkB,EAClB,QAAgB,IAAI,CAAC,GAAG,EAAE,EAC1B,QAAuB;IAEvB,MAAM,KAAK,GAAG,mBAAmB,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACxE,OAAO,IAAI,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;AACjC,CAAC"}

package/src/lib/services/index.d.ts

@@ -12,6 +12,7 @@ export * from './contentAwareBlocksService';
 export * from './contentIngestionService';
 export * from './diskQuorumService';
 export * from './email';
+export * from './emailGateway';
 export * from './eventNotificationSystem';
 export * from './fakeEmailService';
 export { WasmFecService } from './fec';

package/src/lib/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../brightchain-api-lib/src/lib/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,mCAAmC,CAAC;AAClD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,SAAS,CAAC;AACxB,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,UAAU,CAAC;AACzB,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../brightchain-api-lib/src/lib/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,mCAAmC,CAAC;AAClD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,UAAU,CAAC;AACzB,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC"}

package/src/lib/services/index.js

@@ -16,6 +16,7 @@ tslib_1.__exportStar(require("./contentAwareBlocksService"), exports);
 tslib_1.__exportStar(require("./contentIngestionService"), exports);
 tslib_1.__exportStar(require("./diskQuorumService"), exports);
 tslib_1.__exportStar(require("./email"), exports);
+tslib_1.__exportStar(require("./emailGateway"), exports);
 tslib_1.__exportStar(require("./eventNotificationSystem"), exports);
 tslib_1.__exportStar(require("./fakeEmailService"), exports);
 var fec_1 = require("./fec");

package/src/lib/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../brightchain-api-lib/src/lib/services/index.ts"],"names":[],"mappings":";;;;AAAA,iDAAuB;AACvB,iDAAuB;AACvB,mDAAyB;AACzB,gEAAsC;AACtC,uDAA6B;AAC7B,4EAAkD;AAClD,yEAA+C;AAC/C,sDAA4B;AAC5B,kEAAwC;AACxC,8DAAoC;AACpC,sEAA4C;AAC5C,oEAA0C;AAC1C,8DAAoC;AACpC,kDAAwB;AACxB,oEAA0C;AAC1C,6DAAmC;AACnC,6BAAuC;AAA9B,qGAAA,cAAc,OAAA;AACvB,8DAAoC;AACpC,4DAAkC;AAClC,wEAA8C;AAC9C,0EAAgD;AAChD,kEAAwC;AACxC,+DAAqC;AACrC,4DAAkC;AAClC,mDAAyB;AACzB,kEAAwC;AACxC,+DAAqC;AACrC,wDAA8B;AAC9B,iDAAuB;AACvB,6DAAmC;AACnC,2DAAiC;AACjC,6DAAmC;AACnC,mEAAyC;AACzC,kEAAwC;AACxC,sEAA4C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../brightchain-api-lib/src/lib/services/index.ts"],"names":[],"mappings":";;;;AAAA,iDAAuB;AACvB,iDAAuB;AACvB,mDAAyB;AACzB,gEAAsC;AACtC,uDAA6B;AAC7B,4EAAkD;AAClD,yEAA+C;AAC/C,sDAA4B;AAC5B,kEAAwC;AACxC,8DAAoC;AACpC,sEAA4C;AAC5C,oEAA0C;AAC1C,8DAAoC;AACpC,kDAAwB;AACxB,yDAA+B;AAC/B,oEAA0C;AAC1C,6DAAmC;AACnC,6BAAuC;AAA9B,qGAAA,cAAc,OAAA;AACvB,8DAAoC;AACpC,4DAAkC;AAClC,wEAA8C;AAC9C,0EAAgD;AAChD,kEAAwC;AACxC,+DAAqC;AACrC,4DAAkC;AAClC,mDAAyB;AACzB,kEAAwC;AACxC,+DAAqC;AACrC,wDAA8B;AAC9B,iDAAuB;AACvB,6DAAmC;AACnC,2DAAiC;AACjC,6DAAmC;AACnC,mEAAyC;AACzC,kEAAwC;AACxC,sEAA4C"}

package/src/lib/services/quorumDatabaseAdapter.d.ts

@@ -9,7 +9,7 @@
  *
  * @see Requirements 9, 10
  */
-import { AliasRecord, ChainedAuditLogEntry, IdentityRecoveryRecord, IQuorumDatabase, IQuorumMember, OperationalState, Proposal, QuorumAuditLogEntry, QuorumDataRecord, QuorumEpoch, RedistributionJournalEntry, StatuteOfLimitationsConfig, Vote } from '@brightchain/brightchain-lib';
+import { AliasRecord, ChainedAuditLogEntry, IdentityRecoveryRecord, IQuorumDatabase, IQuorumMember, OperationalState, Proposal, QuorumAuditLogEntry, QuorumDataRecord, QuorumEpoch, RedistributionJournalEntry, StatuteOfLimitationsConfig, Vote, IBanRecord } from '@brightchain/brightchain-lib';
 import type { BrightDb } from '@brightchain/db';
 import { IIdProvider, PlatformID } from '@digitaldefiance/ecies-lib';
 /** Dedicated pool ID for quorum data isolation */
@@ -57,5 +57,11 @@ export declare class QuorumDatabaseAdapter<TID extends PlatformID = Uint8Array>
     getOperationalState(): Promise<OperationalState | null>;
     withTransaction<R>(fn: () => Promise<R>): Promise<R>;
     isAvailable(): Promise<boolean>;
+    saveBanRecord(record: IBanRecord<TID>): Promise<void>;
+    deleteBanRecord(memberId: TID): Promise<void>;
+    getBanRecord(memberId: TID): Promise<IBanRecord<TID> | null>;
+    getAllBanRecords(): Promise<IBanRecord<TID>[]>;
+    getMemberAdmissionProposerId(memberId: TID): Promise<TID | null>;
+    private deserializeBanRecord;
 }
 //# sourceMappingURL=quorumDatabaseAdapter.d.ts.map

package/src/lib/services/quorumDatabaseAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quorumDatabaseAdapter.d.ts","sourceRoot":"","sources":["../../../../../brightchain-api-lib/src/lib/services/quorumDatabaseAdapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,EAChB,WAAW,EACX,0BAA0B,EAC1B,0BAA0B,EAC1B,IAAI,EACL,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,QAAQ,EAAgB,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAEL,WAAW,EACX,UAAU,EAEX,MAAM,4BAA4B,CAAC;AAgBpC,kDAAkD;AAClD,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AA6hBrD;;;;;;;GAOG;AACH,qBAAa,qBAAqB,CAAC,GAAG,SAAS,UAAU,GAAG,UAAU,CACpE,YAAW,eAAe,CAAC,GAAG,CAAC;IAE/B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAW;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;gBAElC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC;IAOhD,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBjD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAO/D,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAe5C,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBrD,SAAS,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAQ5D,iBAAiB,IAAI,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;IAUlD,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBvD,WAAW,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAU9D,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;IAc7B,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBpD,WAAW,CAAC,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAQ3D,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBxC,mBAAmB,CAAC,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAW1D,kBAAkB,CAAC,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBtE,iBAAiB,CACrB,QAAQ,EAAE,GAAG,GACZ,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAUxC,oBAAoB,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAQlD,0BAA0B,CAC9B,MAAM,EAAE,IAAI,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;IAsBnC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBjD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAO7D,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASrD,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAShE,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAShE,gBAAgB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlE,iBAAiB,CACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,0BAA0B,EAAE,CAAC;IAQlC,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxD,iBAAiB,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBpE,gBAAgB,IAAI,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAS9D,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB5D,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAWvD,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAQpD,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAYtC"}
+{"version":3,"file":"quorumDatabaseAdapter.d.ts","sourceRoot":"","sources":["../../../../../brightchain-api-lib/src/lib/services/quorumDatabaseAdapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,EAChB,WAAW,EACX,0BAA0B,EAC1B,0BAA0B,EAC1B,IAAI,EACJ,UAAU,EACX,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,QAAQ,EAAgB,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAEL,WAAW,EACX,UAAU,EAEX,MAAM,4BAA4B,CAAC;AAiBpC,kDAAkD;AAClD,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AAkiBrD;;;;;;;GAOG;AACH,qBAAa,qBAAqB,CAAC,GAAG,SAAS,UAAU,GAAG,UAAU,CACpE,YAAW,eAAe,CAAC,GAAG,CAAC;IAE/B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAW;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;gBAElC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC;IAOhD,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBjD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAO/D,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAe5C,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBrD,SAAS,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAQ5D,iBAAiB,IAAI,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;IAUlD,YAAY,CAAC,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBvD,WAAW,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAU9D,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;IAc7B,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBpD,WAAW,CAAC,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAQ3D,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBxC,mBAAmB,CAAC,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAW1D,kBAAkB,CAAC,MAAM,EAAE,sBAAsB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBtE,iBAAiB,CACrB,QAAQ,EAAE,GAAG,GACZ,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAUxC,oBAAoB,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAQlD,0BAA0B,CAC9B,MAAM,EAAE,IAAI,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;IAsBnC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBjD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAO7D,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASrD,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAShE,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAShE,gBAAgB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlE,iBAAiB,CACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,0BAA0B,EAAE,CAAC;IAQlC,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxD,iBAAiB,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBpE,gBAAgB,IAAI,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAS9D,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB5D,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAWvD,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAQpD,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAe/B,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBrD,eAAe,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C,YAAY,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAQ5D,gBAAgB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;IAM9C,4BAA4B,CAAC,QAAQ,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IA0BtE,OAAO,CAAC,oBAAoB;CAgB7B"}

package/src/lib/services/quorumDatabaseAdapter.js

@@ -24,6 +24,7 @@ const COLLECTION_AUDIT_LOG = 'audit_log';
 const COLLECTION_REDISTRIBUTION_JOURNAL = 'redistribution_journal';
 const COLLECTION_STATUTE_CONFIG = 'statute_config';
 const COLLECTION_OPERATIONAL_STATE = 'operational_state';
+const COLLECTION_BAN_RECORDS = 'ban_records';
 /** Dedicated pool ID for quorum data isolation */
 exports.QUORUM_SYSTEM_POOL_ID = 'quorum-system';
 // ─── Serialization Helpers ──────────────────────────────────────────────────
@@ -735,6 +736,88 @@ class QuorumDatabaseAdapter {
             return false;
         }
     }
+    // === Ban Records ===
+    async saveBanRecord(record) {
+        const col = this.db.collection(COLLECTION_BAN_RECORDS);
+        const memberId = this.idProvider.idToString(record.memberId);
+        const data = {
+            memberId: memberId,
+            reason: record.reason,
+            proposalId: this.idProvider.idToString(record.proposalId),
+            epoch: record.epoch,
+            bannedAt: record.bannedAt.toISOString(),
+            evidenceBlockIds: record.evidenceBlockIds,
+            approvalSignatures: record.approvalSignatures.map((sig) => ({
+                memberId: this.idProvider.idToString(sig.memberId),
+                signature: serializeUint8Array(sig.signature),
+            })),
+            requiredSignatures: record.requiredSignatures,
+        };
+        const existing = await col.findOne({ memberId });
+        if (existing) {
+            await col.updateOne({ memberId }, { $set: { data } });
+        }
+        else {
+            await col.insertOne({ memberId, data });
+        }
+    }
+    async deleteBanRecord(memberId) {
+        const col = this.db.collection(COLLECTION_BAN_RECORDS);
+        const id = this.idProvider.idToString(memberId);
+        await col.deleteOne({ memberId: id });
+    }
+    async getBanRecord(memberId) {
+        const col = this.db.collection(COLLECTION_BAN_RECORDS);
+        const id = this.idProvider.idToString(memberId);
+        const doc = await col.findOne({ memberId: id });
+        if (!doc)
+            return null;
+        return this.deserializeBanRecord(doc.data);
+    }
+    async getAllBanRecords() {
+        const col = this.db.collection(COLLECTION_BAN_RECORDS);
+        const docs = await col.find({}).toArray();
+        return docs.map((doc) => this.deserializeBanRecord(doc.data));
+    }
+    async getMemberAdmissionProposerId(memberId) {
+        // Look up the ADD_MEMBER proposal that admitted this member.
+        // If no such proposal exists, the member is a founder.
+        const col = this.db.collection(COLLECTION_PROPOSALS);
+        const memberIdStr = this.idProvider.idToString(memberId);
+        const docs = await col
+            .find({})
+            .toArray();
+        for (const doc of docs) {
+            const data = doc.data;
+            if (data['actionType'] === 'ADD_MEMBER' &&
+                data['status'] === 'APPROVED') {
+                const payload = data['actionPayload'];
+                if (payload && payload['targetMemberId'] === memberIdStr) {
+                    const proposerId = data['proposerMemberId'];
+                    if (proposerId) {
+                        return this.idProvider.idFromString(proposerId);
+                    }
+                }
+            }
+        }
+        return null;
+    }
+    deserializeBanRecord(data) {
+        const sigs = data['approvalSignatures'] ?? [];
+        return {
+            memberId: this.idProvider.idFromString(data['memberId']),
+            reason: data['reason'],
+            proposalId: this.idProvider.idFromString(data['proposalId']),
+            epoch: data['epoch'],
+            bannedAt: new Date(data['bannedAt']),
+            evidenceBlockIds: data['evidenceBlockIds'],
+            approvalSignatures: sigs.map((sig) => ({
+                memberId: this.idProvider.idFromString(sig.memberId),
+                signature: deserializeUint8Array(sig.signature),
+            })),
+            requiredSignatures: data['requiredSignatures'],
+        };
+    }
 }
 exports.QuorumDatabaseAdapter = QuorumDatabaseAdapter;
 //# sourceMappingURL=quorumDatabaseAdapter.js.map