@bsv/wallet-toolbox 2.12.0 → 2.13.2

package/out/src/storage/remoting/SyncTransfer.js

@@ -0,0 +1,153 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SYNC_TRANSFER_PART_BYTES = exports.SYNC_TRANSFER_MAX_BYTES = void 0;
+exports.syncTransferDigest = syncTransferDigest;
+exports.encodeSyncTransfer = encodeSyncTransfer;
+exports.decodeSyncTransfer = decodeSyncTransfer;
+exports.validateSyncTransferCapabilities = validateSyncTransferCapabilities;
+exports.validateSyncTransferManifest = validateSyncTransferManifest;
+exports.receiveSyncTransfer = receiveSyncTransfer;
+const Hash_1 = require("@bsv/sdk/primitives/Hash");
+const utils_1 = require("@bsv/sdk/primitives/utils");
+const BinaryJson_1 = require("./BinaryJson");
+exports.SYNC_TRANSFER_MAX_BYTES = 64 * 1024 * 1024;
+exports.SYNC_TRANSFER_PART_BYTES = 256 * 1024;
+function syncTransferDigest(bytes) {
+    return (0, utils_1.toHex)((0, Hash_1.sha256)(bytes));
+}
+/** A length-prefixed JSON metadata header followed by raw byte fields, without base64 expansion. */
+function encodeSyncTransfer(value) {
+    const fields = [];
+    const parts = [];
+    const ancestors = new Set();
+    const visit = (value, path) => {
+        if (path.length > 64)
+            throw new RangeError('Wallet sync transfer nesting exceeds 64 levels');
+        if (value instanceof Uint8Array) {
+            fields.push({ path, length: value.length });
+            parts.push(value);
+            return null;
+        }
+        if (value == null || typeof value !== 'object' || value instanceof Date)
+            return value;
+        if (ancestors.has(value))
+            throw new TypeError('Cyclic wallet sync transfer data');
+        ancestors.add(value);
+        const copy = Array.isArray(value)
+            ? value.map((entry, index) => visit(entry, [...path, index]))
+            : Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, visit(entry, [...path, key])]));
+        ancestors.delete(value);
+        return copy;
+    };
+    const metadata = visit(value, []);
+    if (fields.length > 4096)
+        throw new RangeError('Too many binary fields in wallet sync transfer');
+    const header = new TextEncoder().encode((0, BinaryJson_1.stringifyJsonRpc)({ version: 1, value: metadata, fields }, true));
+    const length = 4 + header.length + parts.reduce((sum, part) => sum + part.length, 0);
+    if (length > exports.SYNC_TRANSFER_MAX_BYTES)
+        throw new RangeError('Wallet sync record exceeds the transfer size limit');
+    const frame = new Uint8Array(length);
+    new DataView(frame.buffer).setUint32(0, header.length, false);
+    frame.set(header, 4);
+    let offset = 4 + header.length;
+    for (const part of parts) {
+        frame.set(part, offset);
+        offset += part.length;
+    }
+    return frame;
+}
+function invalid() {
+    throw new TypeError('Invalid wallet sync transfer frame');
+}
+function restoreBinaryField(holder, fieldPath, bytes) {
+    let target = holder;
+    const path = ['value', ...fieldPath];
+    for (let i = 0; i < path.length; i++) {
+        const key = path[i];
+        if ((typeof key !== 'string' && (!Number.isSafeInteger(key) || key < 0)) ||
+            target == null ||
+            typeof target !== 'object' ||
+            !Object.hasOwn(target, key))
+            invalid();
+        if (i === path.length - 1) {
+            if (target[key] !== null)
+                invalid();
+            Object.defineProperty(target, key, { value: bytes, enumerable: true, writable: true, configurable: true });
+        }
+        else
+            target = target[key];
+    }
+}
+function decodeSyncTransfer(bytes) {
+    if (bytes.length < 4 || bytes.length > exports.SYNC_TRANSFER_MAX_BYTES)
+        invalid();
+    const headerLength = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength).getUint32(0, false);
+    if (headerLength > bytes.length - 4)
+        invalid();
+    const header = (0, BinaryJson_1.parseJsonRpc)(new TextDecoder('utf-8', { fatal: true }).decode(bytes.subarray(4, 4 + headerLength)), true);
+    if (header?.version !== 1 || !Array.isArray(header.fields) || header.fields.length > 4096)
+        invalid();
+    const holder = { value: header.value };
+    let offset = 4 + headerLength;
+    for (const field of header.fields) {
+        if (field == null ||
+            !Array.isArray(field.path) ||
+            field.path.length > 64 ||
+            !Number.isSafeInteger(field.length) ||
+            field.length < 0 ||
+            field.length > bytes.length - offset)
+            invalid();
+        restoreBinaryField(holder, field.path, bytes.subarray(offset, offset + field.length));
+        offset += field.length;
+    }
+    if (offset !== bytes.length)
+        invalid();
+    return holder.value;
+}
+function validateSyncTransferCapabilities(value) {
+    if (value?.version !== 1 ||
+        !Number.isSafeInteger(value.maxBytes) ||
+        value.maxBytes < 1 ||
+        value.maxBytes > exports.SYNC_TRANSFER_MAX_BYTES ||
+        !Number.isSafeInteger(value.partBytes) ||
+        value.partBytes < 1024 ||
+        value.partBytes > exports.SYNC_TRANSFER_PART_BYTES ||
+        (value.inlineBytes != null &&
+            (!Number.isSafeInteger(value.inlineBytes) ||
+                value.inlineBytes < 1024 ||
+                value.inlineBytes > exports.SYNC_TRANSFER_MAX_BYTES))) {
+        throw new TypeError('Unsupported wallet sync transfer capabilities');
+    }
+    return value;
+}
+function validateSyncTransferManifest(value, capabilities) {
+    if (value == null ||
+        !/^[a-f0-9]{64}$/.test(value.transferId) ||
+        !/^[a-f0-9]{64}$/.test(value.digest) ||
+        !Number.isSafeInteger(value.totalBytes) ||
+        value.totalBytes < 1 ||
+        value.totalBytes > capabilities.maxBytes ||
+        value.partBytes !== capabilities.partBytes ||
+        !Number.isSafeInteger(value.expiresAt) ||
+        value.expiresAt <= Date.now()) {
+        throw new TypeError('Invalid wallet sync transfer manifest');
+    }
+    return value;
+}
+/** Read-only part retries never advance the wallet's durable BRC-40 checkpoint. */
+async function receiveSyncTransfer(manifest, read) {
+    const bytes = new Uint8Array(manifest.totalBytes);
+    for (let offset = 0; offset < bytes.length;) {
+        const part = await read(offset);
+        const length = Math.min(manifest.partBytes, bytes.length - offset);
+        if (part.offset !== offset || !(part.bytes instanceof Uint8Array) || part.bytes.length !== length) {
+            throw new TypeError('Invalid wallet sync transfer part');
+        }
+        bytes.set(part.bytes, offset);
+        offset += length;
+    }
+    if (syncTransferDigest(bytes) !== manifest.digest)
+        throw new Error('Wallet sync transfer integrity check failed');
+    return decodeSyncTransfer(bytes);
+}
+//# sourceMappingURL=SyncTransfer.js.map

package/out/src/storage/remoting/SyncTransfer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SyncTransfer.js","sourceRoot":"","sources":["../../../../src/storage/remoting/SyncTransfer.ts"],"names":[],"mappings":";;;;;;;;;AAAA,mDAAiD;AACjD,qDAAiD;AACjD,6CAA6D;AAuBhD,QAAA,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAC1C,QAAA,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAA;AAElD,4BAAmC,KAAiB;IAClD,OAAO,IAAA,aAAK,EAAC,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,CAAA;AAC7B,CAAC;AAOD,oGAAoG;AACpG,4BAAmC,KAAc;IAC/C,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,MAAM,KAAK,GAAiB,EAAE,CAAA;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,IAA4B,EAAW,EAAE;QACtE,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,gDAAgD,CAAC,CAAA;QAC5F,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;YAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACjB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,IAAI;YAAE,OAAO,KAAK,CAAA;QACrF,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAA;QACjF,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAC/B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7D,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACvB,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACjC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,gDAAgD,CAAC,CAAA;IAChG,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAA,6BAAgB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;IACxG,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACpF,IAAI,MAAM,GAAG,QAAA,uBAAuB;QAAE,MAAM,IAAI,UAAU,CAAC,oDAAoD,CAAC,CAAA;IAChH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC7D,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACpB,IAAI,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACvB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAA;IACvB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAA;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA0B,EAAE,SAAiC,EAAE,KAAiB;IAC1G,IAAI,MAAM,GAAqC,MAAM,CAAA;IACrD,MAAM,IAAI,GAA2B,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAA;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IACE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;YACpE,MAAM,IAAI,IAAI;YACd,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;YAE3B,OAAO,EAAE,CAAA;QACX,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAA;YACnC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5G,CAAC;;YAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAqC,CAAA;IACjE,CAAC;AACH,CAAC;AAED,4BAAmC,KAAiB;IAClD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,QAAA,uBAAuB;QAAE,OAAO,EAAE,CAAA;IACzE,MAAM,YAAY,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACvG,IAAI,YAAY,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC9C,MAAM,MAAM,GAAG,IAAA,yBAAY,EACzB,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EACrF,IAAI,CACL,CAAA;IACD,IAAI,MAAM,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,EAAE,CAAA;IACpG,MAAM,MAAM,GAAuB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;IAC1D,IAAI,MAAM,GAAG,CAAC,GAAG,YAAY,CAAA;IAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAuB,EAAE,CAAC;QACnD,IACE,KAAK,IAAI,IAAI;YACb,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE;YACtB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YACnC,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM;YAEpC,OAAO,EAAE,CAAA;QACX,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QACrF,MAAM,IAAI,KAAK,CAAC,MAAM,CAAA;IACxB,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IACtC,OAAO,MAAM,CAAC,KAAK,CAAA;AACrB,CAAC;AAED,0CAAiD,KAA+B;IAC9E,IACE,KAAK,EAAE,OAAO,KAAK,CAAC;QACpB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QACrC,KAAK,CAAC,QAAQ,GAAG,CAAC;QAClB,KAAK,CAAC,QAAQ,GAAG,QAAA,uBAAuB;QACxC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;QACtC,KAAK,CAAC,SAAS,GAAG,IAAI;QACtB,KAAK,CAAC,SAAS,GAAG,QAAA,wBAAwB;QAC1C,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI;YACxB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC;gBACvC,KAAK,CAAC,WAAW,GAAG,IAAI;gBACxB,KAAK,CAAC,WAAW,GAAG,QAAA,uBAAuB,CAAC,CAAC,EACjD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,sCACE,KAA2B,EAC3B,YAAsC;IAEtC,IACE,KAAK,IAAI,IAAI;QACb,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACxC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;QACvC,KAAK,CAAC,UAAU,GAAG,CAAC;QACpB,KAAK,CAAC,UAAU,GAAG,YAAY,CAAC,QAAQ;QACxC,KAAK,CAAC,SAAS,KAAK,YAAY,CAAC,SAAS;QAC1C,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;QACtC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAC7B,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,mFAAmF;AAC5E,KAAK,8BACV,QAA8B,EAC9B,IAAmD;IAEnD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACjD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAA;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAA;QAClE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClG,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;QAC1D,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAC7B,MAAM,IAAI,MAAM,CAAA;IAClB,CAAC;IACD,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IACjH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAA;AAClC,CAAC"}

package/out/src/storage/remoting/entityValidationHelpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entityValidationHelpers.d.ts","sourceRoot":"","sources":["../../../../src/storage/remoting/entityValidationHelpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjD;;;;;;;;GAQG;AAEH,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAG/D;AAmBD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAuB7F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAMrG;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,CAejE"}
+{"version":3,"file":"entityValidationHelpers.d.ts","sourceRoot":"","sources":["../../../../src/storage/remoting/entityValidationHelpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAmB,MAAM,oCAAoC,CAAA;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjD;;;;;;;;GAQG;AAEH,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAG/D;AAmBD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAuB7F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAMrG;AAqCD;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,CAgBjE"}

package/out/src/storage/remoting/entityValidationHelpers.js

@@ -72,11 +72,46 @@ function validateEntities(entities, dateFields) {
     }
     return entities;
 }
+const syncChunkTotalRecordNames = [
+    'provenTxs',
+    'outputBaskets',
+    'outputTags',
+    'txLabels',
+    'transactions',
+    'outputs',
+    'txLabelMaps',
+    'outputTagMaps',
+    'certificates',
+    'certificateFields',
+    'commissions',
+    'provenTxReqs'
+];
+function validateSyncChunkTotals(totals) {
+    if (typeof totals !== 'object' || totals == null || typeof totals.records !== 'object' || totals.records == null) {
+        throw new TypeError('Invalid sync chunk totals');
+    }
+    if (!Number.isSafeInteger(totals.totalRecords) || totals.totalRecords < 0) {
+        throw new TypeError('Invalid sync chunk totalRecords');
+    }
+    let calculatedTotal = 0;
+    for (const name of syncChunkTotalRecordNames) {
+        const count = totals.records[name];
+        if (!Number.isSafeInteger(count) || count < 0) {
+            throw new TypeError(`Invalid sync chunk total for ${name}`);
+        }
+        calculatedTotal += count;
+    }
+    if (!Number.isSafeInteger(calculatedTotal) || calculatedTotal !== totals.totalRecords) {
+        throw new TypeError('Sync chunk record totals do not equal totalRecords');
+    }
+}
 /**
  * Validate all entity arrays within a `SyncChunk` received from a remote storage call.
  * Normalises timestamps, nulls, and binary fields in-place.
  */
 function validateSyncChunkEntities(r) {
+    if (r.totals != null)
+        validateSyncChunkTotals(r.totals);
     if (r.certificateFields != null)
         r.certificateFields = validateEntities(r.certificateFields);
     if (r.certificates != null)

package/out/src/storage/remoting/entityValidationHelpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"entityValidationHelpers.js","sourceRoot":"","sources":["../../../../src/storage/remoting/entityValidationHelpers.ts"],"names":[],"mappings":";;;;;;AAGA;;;;;;;;GAQG;AAEH,sBAA6B,IAA4B;IACvD,IAAI,IAAI,YAAY,IAAI;QAAE,OAAO,IAAI,CAAA;IACrC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,MAAoC;IAC3E,MAAM,CAAC,gBAAgB,CACrB,MAAM,EACN,MAAM,CAAC,WAAW,CAChB,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACnC,GAAG;QACH;YACE,KAAK;YACL,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;SACnB;KACF,CAAC,CACH,CACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,wBAA0D,MAAS,EAAE,UAAqB;IACxF,MAAM,aAAa,GAAG,MAAqC,CAAA;IAC3D,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACnD,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACnD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAA;IAC/C,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;YAC/B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;gBACvC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,KAA+B,CAAC,CAAC,CAAA;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAC9E,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QAClC,CAAC;aAAM,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;YACrC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACxC,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC;QAAE,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAChE,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;GAIG;AACH,0BAA4D,QAAa,EAAE,UAAqB;IAC9F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,QAAQ,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,mCAA0C,CAAY;IACpD,IAAI,CAAC,CAAC,iBAAiB,IAAI,IAAI;QAAE,CAAC,CAAC,iBAAiB,GAAG,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;IAC5F,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI;QAAE,CAAC,CAAC,YAAY,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC7E,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI;QAAE,CAAC,CAAC,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAC1E,IAAI,CAAC,CAAC,aAAa,IAAI,IAAI;QAAE,CAAC,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IAChF,IAAI,CAAC,CAAC,aAAa,IAAI,IAAI;QAAE,CAAC,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IAChF,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI;QAAE,CAAC,CAAC,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IACvE,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI;QAAE,CAAC,CAAC,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC9D,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI;QAAE,CAAC,CAAC,YAAY,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC7E,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI;QAAE,CAAC,CAAC,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACpE,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI;QAAE,CAAC,CAAC,YAAY,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC7E,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI;QAAE,CAAC,CAAC,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAC1E,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI;QAAE,CAAC,CAAC,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IACjE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI;QAAE,CAAC,CAAC,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACnD,OAAO,CAAC,CAAA;AACV,CAAC"}
+{"version":3,"file":"entityValidationHelpers.js","sourceRoot":"","sources":["../../../../src/storage/remoting/entityValidationHelpers.ts"],"names":[],"mappings":";;;;;;AAGA;;;;;;;;GAQG;AAEH,sBAA6B,IAA4B;IACvD,IAAI,IAAI,YAAY,IAAI;QAAE,OAAO,IAAI,CAAA;IACrC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,MAAoC;IAC3E,MAAM,CAAC,gBAAgB,CACrB,MAAM,EACN,MAAM,CAAC,WAAW,CAChB,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACnC,GAAG;QACH;YACE,KAAK;YACL,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;SACnB;KACF,CAAC,CACH,CACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,wBAA0D,MAAS,EAAE,UAAqB;IACxF,MAAM,aAAa,GAAG,MAAqC,CAAA;IAC3D,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACnD,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACnD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAA;IAC/C,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;YAC/B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;gBACvC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,KAA+B,CAAC,CAAC,CAAA;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QAC9E,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QAClC,CAAC;aAAM,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;YACrC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACxC,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC;QAAE,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAChE,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;GAIG;AACH,0BAA4D,QAAa,EAAE,UAAqB;IAC9F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,QAAQ,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,yBAAyB,GAAG;IAChC,WAAW;IACX,eAAe;IACf,YAAY;IACZ,UAAU;IACV,cAAc;IACd,SAAS;IACT,aAAa;IACb,eAAe;IACf,cAAc;IACd,mBAAmB;IACnB,aAAa;IACb,cAAc;CACN,CAAA;AAEV,SAAS,uBAAuB,CAAC,MAAuB;IACtD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QACjH,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAA;IAClD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,eAAe,GAAG,CAAC,CAAA;IACvB,KAAK,MAAM,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,SAAS,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAA;QAC7D,CAAC;QACD,eAAe,IAAI,KAAK,CAAA;IAC1B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;QACtF,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,mCAA0C,CAAY;IACpD,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI;QAAE,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACvD,IAAI,CAAC,CAAC,iBAAiB,IAAI,IAAI;QAAE,CAAC,CAAC,iBAAiB,GAAG,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;IAC5F,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI;QAAE,CAAC,CAAC,YAAY,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC7E,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI;QAAE,CAAC,CAAC,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAC1E,IAAI,CAAC,CAAC,aAAa,IAAI,IAAI;QAAE,CAAC,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IAChF,IAAI,CAAC,CAAC,aAAa,IAAI,IAAI;QAAE,CAAC,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IAChF,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI;QAAE,CAAC,CAAC,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IACvE,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI;QAAE,CAAC,CAAC,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC9D,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI;QAAE,CAAC,CAAC,YAAY,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC7E,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI;QAAE,CAAC,CAAC,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACpE,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI;QAAE,CAAC,CAAC,YAAY,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC7E,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI;QAAE,CAAC,CAAC,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAC1E,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI;QAAE,CAAC,CAAC,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IACjE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI;QAAE,CAAC,CAAC,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACnD,OAAO,CAAC,CAAA;AACV,CAAC"}

package/out/src/storage/remoting/syncChunkBinary.d.ts

@@ -0,0 +1,4 @@
+import type { SyncChunk } from '../../sdk/WalletStorage.interfaces';
+/** Copy schema-defined byte fields for the already negotiated binary JSON codec. */
+export declare function syncChunkBinary(chunk: SyncChunk): Record<string, unknown>;
+//# sourceMappingURL=syncChunkBinary.d.ts.map

package/out/src/storage/remoting/syncChunkBinary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncChunkBinary.d.ts","sourceRoot":"","sources":["../../../../src/storage/remoting/syncChunkBinary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAA;AAkBnE,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAczE"}

package/out/src/storage/remoting/syncChunkBinary.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.syncChunkBinary = syncChunkBinary;
+const binaryFields = {
+    provenTxs: ['rawTx', 'merklePath'],
+    provenTxReqs: ['rawTx', 'inputBEEF'],
+    transactions: ['rawTx', 'inputBEEF', 'noSendExpiryReclaimRawTx'],
+    outputs: ['lockingScript'],
+    commissions: ['lockingScript']
+};
+function isLargeByteArray(value) {
+    if (!Array.isArray(value) || value.length < 128)
+        return false;
+    for (const byte of value) {
+        if (!Number.isInteger(byte) || byte < 0 || byte > 255)
+            return false;
+    }
+    return true;
+}
+/** Copy schema-defined byte fields for the already negotiated binary JSON codec. */
+function syncChunkBinary(chunk) {
+    const result = { ...chunk };
+    for (const [name, fields] of Object.entries(binaryFields)) {
+        const rows = Reflect.get(chunk, name);
+        if (!Array.isArray(rows))
+            continue;
+        result[name] = rows.map((row) => {
+            const copy = { ...row };
+            for (const field of fields) {
+                if (isLargeByteArray(copy[field]))
+                    copy[field] = Uint8Array.from(copy[field]);
+            }
+            return copy;
+        });
+    }
+    return result;
+}
+//# sourceMappingURL=syncChunkBinary.js.map

package/out/src/storage/remoting/syncChunkBinary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncChunkBinary.js","sourceRoot":"","sources":["../../../../src/storage/remoting/syncChunkBinary.ts"],"names":[],"mappings":";;;AAEA,MAAM,YAAY,GAAG;IACnB,SAAS,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;IAClC,YAAY,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC;IACpC,YAAY,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,0BAA0B,CAAC;IAChE,OAAO,EAAE,CAAC,eAAe,CAAC;IAC1B,WAAW,EAAE,CAAC,eAAe,CAAC;CACtB,CAAA;AAEV,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAA;IAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG;YAAE,OAAO,KAAK,CAAA;IACrE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,oFAAoF;AACpF,yBAAgC,KAAgB;IAC9C,MAAM,MAAM,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAA;IACpD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAQ;QAClC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAA4B,EAAE,EAAE;YACvD,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,CAAA;YACvB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YAC/E,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/out/src/storage/remoting/validateRpcSyncProofs.d.ts

@@ -0,0 +1,5 @@
+import type { SyncProofValidationStorage } from '../methods/validateSyncProof';
+import type { TableProvenTx } from '../schema/tables/TableProvenTx';
+/** Validate a whole RPC page with at most eight proofs in flight and no database writes. */
+export declare function validateSyncProofs(storage: SyncProofValidationStorage, candidates: TableProvenTx[]): Promise<void>;
+//# sourceMappingURL=validateRpcSyncProofs.d.ts.map

package/out/src/storage/remoting/validateRpcSyncProofs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateRpcSyncProofs.d.ts","sourceRoot":"","sources":["../../../../src/storage/remoting/validateRpcSyncProofs.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAA;AAC9E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAuCnE,4FAA4F;AAC5F,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,0BAA0B,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BxH"}

package/out/src/storage/remoting/validateRpcSyncProofs.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateSyncProofs = validateSyncProofs;
+const WERR_errors_1 = require("../../sdk/WERR_errors");
+const utilityHelpers_1 = require("../../utility/utilityHelpers");
+const utilityHelpers_noBuffer_1 = require("../../utility/utilityHelpers.noBuffer");
+const validateSyncProof_1 = require("../methods/validateSyncProof");
+/** Obtain replacement metadata; never alter transaction bytes, IDs or timestamps. */
+async function refreshSyncProof(storage, candidate) {
+    const services = storage.getServices();
+    let current;
+    const validate = async ({ merklePath }) => {
+        if (merklePath == null)
+            throw new Error('Current proof unavailable');
+        const header = await services.getHeaderForHeight(merklePath.blockHeight);
+        const replacement = {
+            ...candidate,
+            height: merklePath.blockHeight,
+            index: merklePath.path[0]?.find(leaf => leaf.txid === true && leaf.hash === candidate.txid)?.offset ?? -1,
+            merklePath: merklePath.toBinary(),
+            merkleRoot: merklePath.computeRoot(candidate.txid),
+            blockHash: (0, utilityHelpers_noBuffer_1.asString)((0, utilityHelpers_1.doubleSha256BE)(header))
+        };
+        // Recheck raw bytes, membership, root and active header before authorizing
+        // any global proof replacement. A provider's success response is insufficient.
+        await (0, validateSyncProof_1.validateSyncProof)(storage, replacement);
+        (0, validateSyncProof_1.markSyncProofReconciled)(replacement);
+        current = replacement;
+    };
+    try {
+        if (services.getValidatedMerklePath != null) {
+            await services.getValidatedMerklePath(candidate.txid, validate);
+        }
+        else {
+            // Custom services remain compatible; one bounded lookup, fully validated.
+            await validate(await services.getMerklePath(candidate.txid));
+        }
+        if (current != null)
+            return current;
+    }
+    catch {
+        // Report a recoverable sync error, without leaking provider response data.
+    }
+    throw new WERR_errors_1.WERR_INVALID_PARAMETER('provenTx', 'a server-verified proof. Merkle root is not active at the recorded height and a current proof could not be verified. ' +
+        'Ask the source provider to reconcile this transaction, then resume synchronization; saved wallet data is unchanged.');
+}
+/** Validate a whole RPC page with at most eight proofs in flight and no database writes. */
+async function validateSyncProofs(storage, candidates) {
+    let next = 0;
+    let failed = false;
+    const validated = [];
+    const workers = Array.from({ length: Math.min(8, candidates.length) }, async () => {
+        while (!failed && next < candidates.length) {
+            const index = next++;
+            const candidate = candidates[index];
+            try {
+                try {
+                    await (0, validateSyncProof_1.validateSyncProof)(storage, candidate);
+                    validated[index] = candidate;
+                }
+                catch (error) {
+                    if (!(error instanceof validateSyncProof_1.StaleSyncProofError))
+                        throw error;
+                    validated[index] = await refreshSyncProof(storage, candidate);
+                }
+            }
+            catch (error) {
+                failed = true;
+                throw error;
+            }
+        }
+    });
+    // Drain started checks before rejecting; no proof work outlives the request.
+    const results = await Promise.allSettled(workers);
+    for (const result of results) {
+        if (result.status === 'rejected')
+            throw result.reason;
+    }
+    for (let i = 0; i < validated.length; i++)
+        candidates[i] = validated[i];
+}
+//# sourceMappingURL=validateRpcSyncProofs.js.map

package/out/src/storage/remoting/validateRpcSyncProofs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateRpcSyncProofs.js","sourceRoot":"","sources":["../../../../src/storage/remoting/validateRpcSyncProofs.ts"],"names":[],"mappings":";;;AAAA,uDAA8D;AAE9D,iEAA6D;AAC7D,mFAAgE;AAChE,oEAA8G;AAI9G,qFAAqF;AACrF,KAAK,UAAU,gBAAgB,CAAC,OAAmC,EAAE,SAAwB;IAC3F,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;IACtC,IAAI,OAAkC,CAAA;IACtC,MAAM,QAAQ,GAAG,KAAK,EAAE,EAAE,UAAU,EAAuB,EAAiB,EAAE;QAC5E,IAAI,UAAU,IAAI,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QACpE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QACxE,MAAM,WAAW,GAAG;YAClB,GAAG,SAAS;YACZ,MAAM,EAAE,UAAU,CAAC,WAAW;YAC9B,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;YACzG,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;YACjC,UAAU,EAAE,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;YAClD,SAAS,EAAE,IAAA,kCAAQ,EAAC,IAAA,+BAAc,EAAC,MAAM,CAAC,CAAC;SAC5C,CAAA;QACD,2EAA2E;QAC3E,+EAA+E;QAC/E,MAAM,IAAA,qCAAiB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAA;QAC7C,IAAA,2CAAuB,EAAC,WAAW,CAAC,CAAA;QACpC,OAAO,GAAG,WAAW,CAAA;IACvB,CAAC,CAAA;IACD,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,sBAAsB,IAAI,IAAI,EAAE,CAAC;YAC5C,MAAM,QAAQ,CAAC,sBAAsB,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACjE,CAAC;aAAM,CAAC;YACN,0EAA0E;YAC1E,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9D,CAAC;QACD,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,OAAO,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;IACD,MAAM,IAAI,oCAAsB,CAAC,UAAU,EACzC,uHAAuH;QACvH,qHAAqH,CAAC,CAAA;AAC1H,CAAC;AAED,4FAA4F;AACrF,KAAK,6BAA6B,OAAmC,EAAE,UAA2B;IACvG,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,MAAM,SAAS,GAAoB,EAAE,CAAA;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QAChF,OAAO,CAAC,MAAM,IAAI,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,EAAE,CAAA;YACpB,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;YACnC,IAAI,CAAC;gBACH,IAAI,CAAC;oBACH,MAAM,IAAA,qCAAiB,EAAC,OAAO,EAAE,SAAS,CAAC,CAAA;oBAC3C,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;gBAC9B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,uCAAmB,CAAC;wBAAE,MAAM,KAAK,CAAA;oBACxD,SAAS,CAAC,KAAK,CAAC,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;gBAC/D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,IAAI,CAAA;gBACb,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IACF,6EAA6E;IAC7E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IACjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,MAAM,MAAM,CAAC,MAAM,CAAA;IACvD,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;AACzE,CAAC"}

package/out/src/storage/schema/KnexMigrations.d.ts

@@ -1,13 +1,16 @@
 import { Knex } from 'knex';
 import { DBType } from '../StorageReader';
 import { Chain } from '../../sdk/types';
+export declare const SYNC_TRANSFER_MIGRATION = "2026-09-09-001 add bounded sync transfers";
 export declare const AUTH_SESSION_MIGRATION = "2026-07-14-001 add shared auth sessions";
+export declare const AUTH_MESSAGE_NONCE_MIGRATION = "2026-09-16-001 add auth message replay claims";
 export declare const MONITOR_CREATED_AT_INDEX_MIGRATION = "2026-07-14-002 add monitor created index";
 export declare const CREATE_ACTION_FUNDING_INDEX_MIGRATION = "2026-08-02-001 add createAction funding selection index";
 export declare const PAYMENT_REPLAY_MIGRATION = "2026-08-04-001 add payment replay claims";
 export declare const MANAGED_CHANGE_POLICY_MIGRATION = "2026-08-10-001 upgrade managed change liquidity defaults";
 export declare const PREPARED_BEEF_MIGRATION = "2026-08-31-001 add prepared beef artifacts";
 export declare const BRC177_NO_SEND_EXPIRY_MIGRATION = "2026-08-30-001 add brc177 nosend expiry state";
+export declare const WALLET_SYNC_SOURCE_INDEX_MIGRATION = "2026-08-17-001 add wallet sync source indexes";
 interface Migration {
     up: (knex: Knex) => Promise<void>;
     down?: (knex: Knex) => Promise<void>;

package/out/src/storage/schema/KnexMigrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"KnexMigrations.d.ts","sourceRoot":"","sources":["../../../../src/storage/schema/KnexMigrations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAUvC,eAAO,MAAM,sBAAsB,4CAA4C,CAAA;AAC/E,eAAO,MAAM,kCAAkC,6CAA6C,CAAA;AAC5F,eAAO,MAAM,qCAAqC,4DAA4D,CAAA;AAC9G,eAAO,MAAM,wBAAwB,6CAA6C,CAAA;AAClF,eAAO,MAAM,+BAA+B,6DAA6D,CAAA;AACzG,eAAO,MAAM,uBAAuB,+CAA+C,CAAA;AACnF,eAAO,MAAM,+BAA+B,kDAAkD,CAAA;AAE9F,UAAU,SAAS;IACjB,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,UAAU,eAAe,CAAC,cAAc;IACtC,aAAa,EAAE,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAC/E,gBAAgB,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,MAAM,CAAA;IACvD,YAAY,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;CAChE;AAED,qBAAa,cAAe,YAAW,eAAe,CAAC,MAAM,CAAC;IASnD,KAAK,EAAE,KAAK;IACZ,WAAW,EAAE,MAAM;IACnB,kBAAkB,EAAE,MAAM;IAC1B,qBAAqB,EAAE,MAAM;IAXtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAK;IAE1C;;;;OAIG;IACH,YACS,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,EAAE,MAAM,EAGrC;IAEK,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAEvC;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,UAEjC;IAEK,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAExD;IAEK,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAG1C;IAED,OAAa,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAG9C;IAED,eAAe,CACb,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,EAAE,MAAM,GAC5B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAysB3B;CACF;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAoB7E"}
+{"version":3,"file":"KnexMigrations.d.ts","sourceRoot":"","sources":["../../../../src/storage/schema/KnexMigrations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAUvC,eAAO,MAAM,uBAAuB,8CAA8C,CAAA;AAElF,eAAO,MAAM,sBAAsB,4CAA4C,CAAA;AAC/E,eAAO,MAAM,4BAA4B,kDAAkD,CAAA;AAC3F,eAAO,MAAM,kCAAkC,6CAA6C,CAAA;AAC5F,eAAO,MAAM,qCAAqC,4DAA4D,CAAA;AAC9G,eAAO,MAAM,wBAAwB,6CAA6C,CAAA;AAClF,eAAO,MAAM,+BAA+B,6DAA6D,CAAA;AACzG,eAAO,MAAM,uBAAuB,+CAA+C,CAAA;AACnF,eAAO,MAAM,+BAA+B,kDAAkD,CAAA;AAE9F,eAAO,MAAM,kCAAkC,kDAAkD,CAAA;AAEjG,UAAU,SAAS;IACjB,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,UAAU,eAAe,CAAC,cAAc;IACtC,aAAa,EAAE,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAC/E,gBAAgB,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,MAAM,CAAA;IACvD,YAAY,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;CAChE;AAED,qBAAa,cAAe,YAAW,eAAe,CAAC,MAAM,CAAC;IASnD,KAAK,EAAE,KAAK;IACZ,WAAW,EAAE,MAAM;IACnB,kBAAkB,EAAE,MAAM;IAC1B,qBAAqB,EAAE,MAAM;IAXtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAK;IAE1C;;;;OAIG;IACH,YACS,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,EAAE,MAAM,EAGrC;IAEK,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAEvC;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,UAEjC;IAEK,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAExD;IAEK,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAG1C;IAED,OAAa,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAG9C;IAED,eAAe,CACb,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,EAAE,MAAM,GAC5B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAgyB3B;CACF;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAoB7E"}

package/out/src/storage/schema/KnexMigrations.js

@@ -1,18 +1,21 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.KnexMigrations = exports.BRC177_NO_SEND_EXPIRY_MIGRATION = exports.PREPARED_BEEF_MIGRATION = exports.MANAGED_CHANGE_POLICY_MIGRATION = exports.PAYMENT_REPLAY_MIGRATION = exports.CREATE_ACTION_FUNDING_INDEX_MIGRATION = exports.MONITOR_CREATED_AT_INDEX_MIGRATION = exports.AUTH_SESSION_MIGRATION = void 0;
+exports.KnexMigrations = exports.WALLET_SYNC_SOURCE_INDEX_MIGRATION = exports.BRC177_NO_SEND_EXPIRY_MIGRATION = exports.PREPARED_BEEF_MIGRATION = exports.MANAGED_CHANGE_POLICY_MIGRATION = exports.PAYMENT_REPLAY_MIGRATION = exports.CREATE_ACTION_FUNDING_INDEX_MIGRATION = exports.MONITOR_CREATED_AT_INDEX_MIGRATION = exports.AUTH_MESSAGE_NONCE_MIGRATION = exports.AUTH_SESSION_MIGRATION = exports.SYNC_TRANSFER_MIGRATION = void 0;
 exports.determineDBType = determineDBType;
 const StorageKnex_1 = require("../StorageKnex");
 const WalletError_1 = require("../../sdk/WalletError");
 const WERR_errors_1 = require("../../sdk/WERR_errors");
 const managedChangePolicy_1 = require("../methods/managedChangePolicy");
+exports.SYNC_TRANSFER_MIGRATION = '2026-09-09-001 add bounded sync transfers';
 exports.AUTH_SESSION_MIGRATION = '2026-07-14-001 add shared auth sessions';
+exports.AUTH_MESSAGE_NONCE_MIGRATION = '2026-09-16-001 add auth message replay claims';
 exports.MONITOR_CREATED_AT_INDEX_MIGRATION = '2026-07-14-002 add monitor created index';
 exports.CREATE_ACTION_FUNDING_INDEX_MIGRATION = '2026-08-02-001 add createAction funding selection index';
 exports.PAYMENT_REPLAY_MIGRATION = '2026-08-04-001 add payment replay claims';
 exports.MANAGED_CHANGE_POLICY_MIGRATION = '2026-08-10-001 upgrade managed change liquidity defaults';
 exports.PREPARED_BEEF_MIGRATION = '2026-08-31-001 add prepared beef artifacts';
 exports.BRC177_NO_SEND_EXPIRY_MIGRATION = '2026-08-30-001 add brc177 nosend expiry state';
+exports.WALLET_SYNC_SOURCE_INDEX_MIGRATION = '2026-08-17-001 add wallet sync source indexes';
 class KnexMigrations {
     chain;
     storageName;
@@ -60,6 +63,45 @@ class KnexMigrations {
                 table.timestamp('updated_at', { precision: 3 }).defaultTo(knex.fn.now()).notNullable();
             }
         };
+        migrations[exports.SYNC_TRANSFER_MIGRATION] = {
+            config: { transaction: true },
+            async up(knex) {
+                // MySQL DDL commits implicitly; table/slot creation also tolerates an interrupted migration.
+                if (!(await knex.schema.hasTable('sync_transfers')))
+                    await knex.schema.createTable('sync_transfers', table => {
+                        table.integer('slot').primary();
+                        table.string('transferId', 64).unique().nullable();
+                        table.string('identityKey', 130).nullable();
+                        table.string('context', 64).nullable();
+                        table.string('direction', 8).nullable();
+                        table.string('digest', 64).nullable();
+                        table.integer('totalBytes').nullable();
+                        table.integer('receivedBytes').notNullable().defaultTo(0);
+                        table.integer('partBytes').nullable();
+                        table.bigInteger('expiresAt').notNullable().defaultTo(0);
+                        table.string('state', 16).nullable();
+                        table.text('result').nullable();
+                    });
+                // Slot zero serializes allocation across replicas; eight slots bound total disk usage.
+                await knex('sync_transfers')
+                    .insert(Array.from({ length: 9 }, (_, slot) => ({ slot })))
+                    .onConflict('slot')
+                    .ignore();
+                if (!(await knex.schema.hasTable('sync_transfer_parts')))
+                    await knex.schema.createTable('sync_transfer_parts', table => {
+                        table.integer('slot').notNullable().references('slot').inTable('sync_transfers');
+                        table.integer('offset').notNullable();
+                        table
+                            .specificType('bytes', String(knex.client.config.client).includes('mysql') ? 'mediumblob' : 'blob')
+                            .notNullable();
+                        table.primary(['slot', 'offset']);
+                    });
+            },
+            async down(knex) {
+                await knex.schema.dropTableIfExists('sync_transfer_parts');
+                await knex.schema.dropTableIfExists('sync_transfers');
+            }
+        };
         migrations[exports.AUTH_SESSION_MIGRATION] = {
             async up(knex) {
                 await knex.schema.createTable('auth_sessions', table => {
@@ -79,6 +121,22 @@ class KnexMigrations {
                 await knex.schema.dropTable('auth_sessions');
             }
         };
+        migrations[exports.AUTH_MESSAGE_NONCE_MIGRATION] = {
+            async up(knex) {
+                await knex.schema.createTable('auth_message_nonces', table => {
+                    // Session nonces are 64 characters. Initial-request replay scopes
+                    // use `initial:` plus a 66-character compressed identity key.
+                    table.string('sessionNonce', 130).notNullable();
+                    table.string('messageNonce', 64).notNullable();
+                    table.bigInteger('expiresAt').notNullable();
+                    table.primary(['sessionNonce', 'messageNonce']);
+                    table.index('expiresAt', 'idx_auth_message_nonces_expires');
+                });
+            },
+            async down(knex) {
+                await knex.schema.dropTable('auth_message_nonces');
+            }
+        };
         migrations[exports.PAYMENT_REPLAY_MIGRATION] = {
             async up(knex) {
                 await knex.schema.createTable('payment_replays', table => {
@@ -140,6 +198,35 @@ class KnexMigrations {
                 // rollback would actively re-fragment wallets that already migrated.
             }
         };
+        migrations[exports.WALLET_SYNC_SOURCE_INDEX_MIGRATION] = {
+            async up(knex) {
+                await knex.schema.alterTable('transactions', table => {
+                    table.index(['userId', 'provenTxId'], 'idx_transactions_user_proven_tx');
+                    table.index(['userId', 'txid'], 'idx_transactions_user_txid');
+                });
+            },
+            async down(knex) {
+                // MySQL may discard the automatically-created userId index after one
+                // of these wider indexes becomes able to support the foreign key.
+                // Restore it before removing both migration-owned indexes.
+                if ((await determineDBType(knex)) === 'MySQL') {
+                    const result = await knex.raw('SHOW INDEX FROM ?? WHERE Key_name = ?', [
+                        'transactions',
+                        'transactions_userid_foreign'
+                    ]);
+                    const indexes = result[0];
+                    if (indexes.length === 0) {
+                        await knex.schema.alterTable('transactions', table => {
+                            table.index(['userId'], 'transactions_userid_foreign');
+                        });
+                    }
+                }
+                await knex.schema.alterTable('transactions', table => {
+                    table.dropIndex(['userId', 'provenTxId'], 'idx_transactions_user_proven_tx');
+                    table.dropIndex(['userId', 'txid'], 'idx_transactions_user_txid');
+                });
+            }
+        };
         migrations[exports.BRC177_NO_SEND_EXPIRY_MIGRATION] = {
             async up(knex) {
                 await knex.schema.alterTable('transactions', table => {
@@ -449,7 +536,7 @@ class KnexMigrations {
                     knex
                 });
                 const settings = await storage.makeAvailable();
-                await knex.raw(`update users set activeStorage = '${settings.storageIdentityKey}' where activeStorage is NULL`);
+                await knex.raw('update users set activeStorage = ? where activeStorage is NULL', [settings.storageIdentityKey]);
                 await knex.schema.alterTable('users', table => {
                     table.string('activeStorage').notNullable().alter();
                 });