@jsonjoy.com/json-pack 1.20.0 → 17.59.0

package/lib/nfs/v4/server/Nfsv4TcpServer.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Nfsv4TcpServer = void 0;
+const tslib_1 = require("tslib");
+const net = tslib_1.__importStar(require("net"));
+const Nfsv4Connection_1 = require("./Nfsv4Connection");
+/* tslint:disable:no-console */
+const PORT = Number(process.env.NFS_PORT) || Number(process.env.PORT) || 2049;
+const HOST = process.env.NFS_HOST
+    ? String(process.env.NFS_HOST)
+    : process.env.HOST
+        ? String(process.env.HOST)
+        : '127.0.0.1';
+class Nfsv4TcpServer {
+    static start(opts) {
+        const server = new Nfsv4TcpServer(opts);
+        server.start().catch(console.error);
+    }
+    constructor(opts) {
+        this.port = PORT;
+        this.host = HOST;
+        this.debug = false;
+        this.port = opts.port ?? PORT;
+        this.host = opts.host ?? HOST;
+        this.debug = opts.debug ?? false;
+        this.logger = opts.logger ?? console;
+        const ops = opts.ops;
+        const server = (this.server = new net.Server());
+        server.on('connection', (socket) => {
+            if (this.debug)
+                this.logger.log('New connection from', socket.remoteAddress, 'port', socket.remotePort);
+            new Nfsv4Connection_1.Nfsv4Connection({
+                duplex: socket,
+                ops,
+                debug: this.debug,
+                logger: this.logger,
+            });
+        });
+        server.on('error', opts.onError ??
+            ((err) => {
+                if (this.debug)
+                    this.logger.error('Server error:', err.message);
+                process.exit(1);
+            }));
+        if (opts.stopOnSigint ?? true) {
+            this.sigintHandler = () => {
+                if (this.debug)
+                    this.logger.log('\nShutting down NFSv4 server...');
+                this.cleanup();
+                process.exit(0);
+            };
+            process.on('SIGINT', this.sigintHandler);
+        }
+    }
+    cleanup() {
+        if (this.sigintHandler) {
+            process.off('SIGINT', this.sigintHandler);
+            this.sigintHandler = undefined;
+        }
+        this.server.close((err) => {
+            if (this.debug && err)
+                this.logger.error('Error closing server:', err);
+        });
+    }
+    stop() {
+        return new Promise((resolve) => {
+            this.cleanup();
+            this.server.close(() => {
+                if (this.debug)
+                    this.logger.log('NFSv4 server closed');
+                resolve();
+            });
+        });
+    }
+    start(port = this.port, host = this.host) {
+        if (this.debug)
+            this.logger.log(`Starting NFSv4 TCP server on ${host}:${port}...`);
+        return new Promise((resolve, reject) => {
+            const onError = (err) => reject(err);
+            const server = this.server;
+            server.on('error', onError);
+            server.listen(port, host, () => {
+                if (this.debug)
+                    this.logger.log(`NFSv4 TCP server listening on ${host}:${port}`);
+                server.off('error', onError);
+                resolve();
+            });
+        });
+    }
+}
+exports.Nfsv4TcpServer = Nfsv4TcpServer;
+//# sourceMappingURL=Nfsv4TcpServer.js.map

package/lib/nfs/v4/server/Nfsv4TcpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Nfsv4TcpServer.js","sourceRoot":"","sources":["../../../../src/nfs/v4/server/Nfsv4TcpServer.ts"],"names":[],"mappings":";;;;AAAA,iDAA2B;AAC3B,uDAAkD;AAIlD,+BAA+B;AAE/B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ;IAC/B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI;QAChB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAC1B,CAAC,CAAC,WAAW,CAAC;AAYlB,MAAa,cAAc;IAClB,MAAM,CAAC,KAAK,CAAC,IAAwB;QAC1C,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IASD,YAAY,IAAwB;QAN7B,SAAI,GAAW,IAAI,CAAC;QACpB,SAAI,GAAW,IAAI,CAAC;QACpB,UAAK,GAAY,KAAK,CAAC;QAK5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;YACjC,IAAI,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACxG,IAAI,iCAAe,CAAC;gBAClB,MAAM,EAAE,MAAM;gBACd,GAAG;gBACH,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CACP,OAAO,EACP,IAAI,CAAC,OAAO;YACV,CAAC,CAAC,GAAG,EAAE,EAAE;gBACP,IAAI,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,CACL,CAAC;QACF,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,aAAa,GAAG,GAAG,EAAE;gBACxB,IAAI,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gBACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC;YACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAEO,OAAO;QACb,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1C,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,IAAI;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACrB,IAAI,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;gBACvD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,OAAe,IAAI,CAAC,IAAI,EAAE,OAAe,IAAI,CAAC,IAAI;QAC7D,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC;QACnF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBAC7B,IAAI,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;gBACjF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7B,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAhFD,wCAgFC"}

package/lib/nfs/v4/server/operations/ByteRangeLock.d.ts

@@ -0,0 +1,79 @@
+import type * as struct from '../../structs';
+/**
+ * Byte-range lock record for NFSv4 LOCK operations.
+ * Represents a single byte-range lock held by a lock-owner on a file.
+ */
+export declare class ByteRangeLock {
+    /**
+     * Stateid associated with this lock.
+     * Used by client to identify this lock in subsequent operations (LOCKU, etc.).
+     */
+    readonly stateid: struct.Nfsv4Stateid;
+    /**
+     * Absolute file system path of the locked file.
+     * Used to identify which file this lock applies to.
+     */
+    readonly path: string;
+    /**
+     * Lock type - READ or WRITE lock.
+     * READ locks (shared) can coexist with other READ locks.
+     * WRITE locks (exclusive) conflict with all other locks.
+     */
+    readonly locktype: number;
+    /**
+     * Starting byte offset of the locked range.
+     * 0-based offset from start of file.
+     */
+    readonly offset: bigint;
+    /**
+     * Length of the locked range in bytes.
+     * Special value 0xFFFFFFFFFFFFFFFF means "to end of file".
+     */
+    readonly length: bigint;
+    /**
+     * Key identifying the lock-owner that holds this lock.
+     * Format: `${clientid}:${base64(owner)}`.
+     * Links this lock back to the owner for cleanup and conflict checking.
+     */
+    readonly lockOwnerKey: string;
+    constructor(
+    /**
+     * Stateid associated with this lock.
+     * Used by client to identify this lock in subsequent operations (LOCKU, etc.).
+     */
+    stateid: struct.Nfsv4Stateid, 
+    /**
+     * Absolute file system path of the locked file.
+     * Used to identify which file this lock applies to.
+     */
+    path: string, 
+    /**
+     * Lock type - READ or WRITE lock.
+     * READ locks (shared) can coexist with other READ locks.
+     * WRITE locks (exclusive) conflict with all other locks.
+     */
+    locktype: number, 
+    /**
+     * Starting byte offset of the locked range.
+     * 0-based offset from start of file.
+     */
+    offset: bigint, 
+    /**
+     * Length of the locked range in bytes.
+     * Special value 0xFFFFFFFFFFFFFFFF means "to end of file".
+     */
+    length: bigint, 
+    /**
+     * Key identifying the lock-owner that holds this lock.
+     * Format: `${clientid}:${base64(owner)}`.
+     * Links this lock back to the owner for cleanup and conflict checking.
+     */
+    lockOwnerKey: string);
+    /**
+     * Check if this lock overlaps with a given byte range.
+     * @param offset - Start offset to check
+     * @param length - Length to check
+     * @returns true if ranges overlap
+     */
+    overlaps(offset: bigint, length: bigint): boolean;
+}

package/lib/nfs/v4/server/operations/ByteRangeLock.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ByteRangeLock = void 0;
+/**
+ * Byte-range lock record for NFSv4 LOCK operations.
+ * Represents a single byte-range lock held by a lock-owner on a file.
+ */
+class ByteRangeLock {
+    constructor(
+    /**
+     * Stateid associated with this lock.
+     * Used by client to identify this lock in subsequent operations (LOCKU, etc.).
+     */
+    stateid, 
+    /**
+     * Absolute file system path of the locked file.
+     * Used to identify which file this lock applies to.
+     */
+    path, 
+    /**
+     * Lock type - READ or WRITE lock.
+     * READ locks (shared) can coexist with other READ locks.
+     * WRITE locks (exclusive) conflict with all other locks.
+     */
+    locktype, 
+    /**
+     * Starting byte offset of the locked range.
+     * 0-based offset from start of file.
+     */
+    offset, 
+    /**
+     * Length of the locked range in bytes.
+     * Special value 0xFFFFFFFFFFFFFFFF means "to end of file".
+     */
+    length, 
+    /**
+     * Key identifying the lock-owner that holds this lock.
+     * Format: `${clientid}:${base64(owner)}`.
+     * Links this lock back to the owner for cleanup and conflict checking.
+     */
+    lockOwnerKey) {
+        this.stateid = stateid;
+        this.path = path;
+        this.locktype = locktype;
+        this.offset = offset;
+        this.length = length;
+        this.lockOwnerKey = lockOwnerKey;
+    }
+    /**
+     * Check if this lock overlaps with a given byte range.
+     * @param offset - Start offset to check
+     * @param length - Length to check
+     * @returns true if ranges overlap
+     */
+    overlaps(offset, length) {
+        const MAX_UINT64 = BigInt('0xFFFFFFFFFFFFFFFF');
+        const thisEnd = this.length === MAX_UINT64 ? MAX_UINT64 : this.offset + this.length;
+        const otherEnd = length === MAX_UINT64 ? MAX_UINT64 : offset + length;
+        return this.offset < otherEnd && offset < thisEnd;
+    }
+}
+exports.ByteRangeLock = ByteRangeLock;
+//# sourceMappingURL=ByteRangeLock.js.map

package/lib/nfs/v4/server/operations/ByteRangeLock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ByteRangeLock.js","sourceRoot":"","sources":["../../../../../src/nfs/v4/server/operations/ByteRangeLock.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACH,MAAa,aAAa;IACxB;IACE;;;OAGG;IACa,OAA4B;IAE5C;;;OAGG;IACa,IAAY;IAE5B;;;;OAIG;IACa,QAAgB;IAEhC;;;OAGG;IACa,MAAc;IAE9B;;;OAGG;IACa,MAAc;IAE9B;;;;OAIG;IACa,YAAoB;QAhCpB,YAAO,GAAP,OAAO,CAAqB;QAM5B,SAAI,GAAJ,IAAI,CAAQ;QAOZ,aAAQ,GAAR,QAAQ,CAAQ;QAMhB,WAAM,GAAN,MAAM,CAAQ;QAMd,WAAM,GAAN,MAAM,CAAQ;QAOd,iBAAY,GAAZ,YAAY,CAAQ;IACnC,CAAC;IAEJ;;;;;OAKG;IACI,QAAQ,CAAC,MAAc,EAAE,MAAc;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACpF,MAAM,QAAQ,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;QACtE,OAAO,IAAI,CAAC,MAAM,GAAG,QAAQ,IAAI,MAAM,GAAG,OAAO,CAAC;IACpD,CAAC;CACF;AArDD,sCAqDC"}

package/lib/nfs/v4/server/operations/ClientRecord.d.ts

@@ -0,0 +1,110 @@
+import type * as msg from '../../messages';
+import type * as struct from '../../structs';
+/** Client state record for NFS v4 client registration. */
+export declare class ClientRecord {
+    /**
+     * Principal associated with this client (from RPC credentials).
+     */
+    readonly principal: string;
+    /**
+     * Client verifier - used to detect client reboots.
+     * If client sends SETCLIENTID with same clientIdString but different verifier,
+     * it indicates the client rebooted and old state should be discarded.
+     * Size 8 bytes (NFS4_VERIFIER_SIZE) buffer.
+     */
+    readonly verifier: Uint8Array;
+    /**
+     * Client identifier string - globally unique client identity.
+     * Typically contains hostname or other unique data.
+     * Used to find existing client records across SETCLIENTID calls.
+     */
+    readonly clientIdString: Uint8Array;
+    /**
+     * Callback information - RPC program number and network address.
+     * Used by server to initiate callbacks to client (e.g., for delegation recalls).
+     * Server opens new TCP connection to client using this address when needed.
+     */
+    readonly callback: struct.Nfsv4CbClient;
+    /**
+     * Callback identifier - client-provided value.
+     * Sent by server in callback RPCs to help client distinguish which
+     * server is calling back (useful if client talks to multiple servers).
+     */
+    readonly callbackIdent: number;
+    /**
+     * SETCLIENTID confirmation verifier - random 8-byte token.
+     * Generated by server, returned to client, must be echoed back in
+     * SETCLIENTID_CONFIRM to prove client received the SETCLIENTID response.
+     * Prevents race conditions and stale client ID reuse.
+     *
+     *     const NFS4_VERIFIER_SIZE        = 8;
+     *     typedef opaque  verifier4[NFS4_VERIFIER_SIZE];
+     */
+    readonly setclientidConfirm: Uint8Array;
+    /**
+     * Cached SETCLIENTID response for duplicate request handling.
+     * If a client repeats a SETCLIENTID request (same clientIdString and verifier),
+     * server can return this cached response instead of creating a new record.
+     * This helps handle network retries and duplicate requests gracefully.
+     */
+    cache: msg.Nfsv4SetclientidResponse | undefined;
+    /**
+     * Last time this client renewed its lease (in milliseconds since epoch).
+     * Per RFC 7530 §9.5, any stateful operation from the client renews the lease.
+     * The server must track this to detect expired leases and revoke client state.
+     */
+    lastRenew: number;
+    constructor(
+    /**
+     * Principal associated with this client (from RPC credentials).
+     */
+    principal: string, 
+    /**
+     * Client verifier - used to detect client reboots.
+     * If client sends SETCLIENTID with same clientIdString but different verifier,
+     * it indicates the client rebooted and old state should be discarded.
+     * Size 8 bytes (NFS4_VERIFIER_SIZE) buffer.
+     */
+    verifier: Uint8Array, 
+    /**
+     * Client identifier string - globally unique client identity.
+     * Typically contains hostname or other unique data.
+     * Used to find existing client records across SETCLIENTID calls.
+     */
+    clientIdString: Uint8Array, 
+    /**
+     * Callback information - RPC program number and network address.
+     * Used by server to initiate callbacks to client (e.g., for delegation recalls).
+     * Server opens new TCP connection to client using this address when needed.
+     */
+    callback: struct.Nfsv4CbClient, 
+    /**
+     * Callback identifier - client-provided value.
+     * Sent by server in callback RPCs to help client distinguish which
+     * server is calling back (useful if client talks to multiple servers).
+     */
+    callbackIdent: number, 
+    /**
+     * SETCLIENTID confirmation verifier - random 8-byte token.
+     * Generated by server, returned to client, must be echoed back in
+     * SETCLIENTID_CONFIRM to prove client received the SETCLIENTID response.
+     * Prevents race conditions and stale client ID reuse.
+     *
+     *     const NFS4_VERIFIER_SIZE        = 8;
+     *     typedef opaque  verifier4[NFS4_VERIFIER_SIZE];
+     */
+    setclientidConfirm: Uint8Array, 
+    /**
+     * Cached SETCLIENTID response for duplicate request handling.
+     * If a client repeats a SETCLIENTID request (same clientIdString and verifier),
+     * server can return this cached response instead of creating a new record.
+     * This helps handle network retries and duplicate requests gracefully.
+     */
+    cache?: msg.Nfsv4SetclientidResponse | undefined, 
+    /**
+     * Last time this client renewed its lease (in milliseconds since epoch).
+     * Per RFC 7530 §9.5, any stateful operation from the client renews the lease.
+     * The server must track this to detect expired leases and revoke client state.
+     */
+    lastRenew?: number);
+}

package/lib/nfs/v4/server/operations/ClientRecord.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientRecord = void 0;
+/** Client state record for NFS v4 client registration. */
+class ClientRecord {
+    constructor(
+    /**
+     * Principal associated with this client (from RPC credentials).
+     */
+    principal, 
+    /**
+     * Client verifier - used to detect client reboots.
+     * If client sends SETCLIENTID with same clientIdString but different verifier,
+     * it indicates the client rebooted and old state should be discarded.
+     * Size 8 bytes (NFS4_VERIFIER_SIZE) buffer.
+     */
+    verifier, 
+    /**
+     * Client identifier string - globally unique client identity.
+     * Typically contains hostname or other unique data.
+     * Used to find existing client records across SETCLIENTID calls.
+     */
+    clientIdString, 
+    /**
+     * Callback information - RPC program number and network address.
+     * Used by server to initiate callbacks to client (e.g., for delegation recalls).
+     * Server opens new TCP connection to client using this address when needed.
+     */
+    callback, 
+    /**
+     * Callback identifier - client-provided value.
+     * Sent by server in callback RPCs to help client distinguish which
+     * server is calling back (useful if client talks to multiple servers).
+     */
+    callbackIdent, 
+    /**
+     * SETCLIENTID confirmation verifier - random 8-byte token.
+     * Generated by server, returned to client, must be echoed back in
+     * SETCLIENTID_CONFIRM to prove client received the SETCLIENTID response.
+     * Prevents race conditions and stale client ID reuse.
+     *
+     *     const NFS4_VERIFIER_SIZE        = 8;
+     *     typedef opaque  verifier4[NFS4_VERIFIER_SIZE];
+     */
+    setclientidConfirm, 
+    /**
+     * Cached SETCLIENTID response for duplicate request handling.
+     * If a client repeats a SETCLIENTID request (same clientIdString and verifier),
+     * server can return this cached response instead of creating a new record.
+     * This helps handle network retries and duplicate requests gracefully.
+     */
+    cache = undefined, 
+    /**
+     * Last time this client renewed its lease (in milliseconds since epoch).
+     * Per RFC 7530 §9.5, any stateful operation from the client renews the lease.
+     * The server must track this to detect expired leases and revoke client state.
+     */
+    lastRenew = Date.now()) {
+        this.principal = principal;
+        this.verifier = verifier;
+        this.clientIdString = clientIdString;
+        this.callback = callback;
+        this.callbackIdent = callbackIdent;
+        this.setclientidConfirm = setclientidConfirm;
+        this.cache = cache;
+        this.lastRenew = lastRenew;
+    }
+}
+exports.ClientRecord = ClientRecord;
+//# sourceMappingURL=ClientRecord.js.map

package/lib/nfs/v4/server/operations/ClientRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientRecord.js","sourceRoot":"","sources":["../../../../../src/nfs/v4/server/operations/ClientRecord.ts"],"names":[],"mappings":";;;AAGA,0DAA0D;AAC1D,MAAa,YAAY;IACvB;IACE;;OAEG;IACa,SAAiB;IAEjC;;;;;OAKG;IACa,QAAoB;IAEpC;;;;OAIG;IACa,cAA0B;IAE1C;;;;OAIG;IACa,QAA8B;IAE9C;;;;OAIG;IACa,aAAqB;IAErC;;;;;;;;OAQG;IACa,kBAA8B;IAE9C;;;;;OAKG;IACI,QAAkD,SAAS;IAElE;;;;OAIG;IACI,YAAoB,IAAI,CAAC,GAAG,EAAE;QAvDrB,cAAS,GAAT,SAAS,CAAQ;QAQjB,aAAQ,GAAR,QAAQ,CAAY;QAOpB,mBAAc,GAAd,cAAc,CAAY;QAO1B,aAAQ,GAAR,QAAQ,CAAsB;QAO9B,kBAAa,GAAb,aAAa,CAAQ;QAWrB,uBAAkB,GAAlB,kBAAkB,CAAY;QAQvC,UAAK,GAAL,KAAK,CAAsD;QAO3D,cAAS,GAAT,SAAS,CAAqB;IACpC,CAAC;CACL;AA9DD,oCA8DC"}

package/lib/nfs/v4/server/operations/FilesystemStats.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Filesystem statistics for NFSv4 space and file count attributes.
+ */
+export declare class FilesystemStats {
+    /** Available space in bytes for unprivileged users */
+    readonly spaceAvail: bigint;
+    /** Free space in bytes on the filesystem */
+    readonly spaceFree: bigint;
+    /** Total space in bytes on the filesystem */
+    readonly spaceTotal: bigint;
+    /** Available file slots (inodes) */
+    readonly filesAvail: bigint;
+    /** Free file slots (inodes) */
+    readonly filesFree: bigint;
+    /** Total file slots (inodes) */
+    readonly filesTotal: bigint;
+    constructor(
+    /** Available space in bytes for unprivileged users */
+    spaceAvail: bigint, 
+    /** Free space in bytes on the filesystem */
+    spaceFree: bigint, 
+    /** Total space in bytes on the filesystem */
+    spaceTotal: bigint, 
+    /** Available file slots (inodes) */
+    filesAvail: bigint, 
+    /** Free file slots (inodes) */
+    filesFree: bigint, 
+    /** Total file slots (inodes) */
+    filesTotal: bigint);
+}

package/lib/nfs/v4/server/operations/FilesystemStats.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FilesystemStats = void 0;
+/**
+ * Filesystem statistics for NFSv4 space and file count attributes.
+ */
+class FilesystemStats {
+    constructor(
+    /** Available space in bytes for unprivileged users */
+    spaceAvail, 
+    /** Free space in bytes on the filesystem */
+    spaceFree, 
+    /** Total space in bytes on the filesystem */
+    spaceTotal, 
+    /** Available file slots (inodes) */
+    filesAvail, 
+    /** Free file slots (inodes) */
+    filesFree, 
+    /** Total file slots (inodes) */
+    filesTotal) {
+        this.spaceAvail = spaceAvail;
+        this.spaceFree = spaceFree;
+        this.spaceTotal = spaceTotal;
+        this.filesAvail = filesAvail;
+        this.filesFree = filesFree;
+        this.filesTotal = filesTotal;
+    }
+}
+exports.FilesystemStats = FilesystemStats;
+//# sourceMappingURL=FilesystemStats.js.map

package/lib/nfs/v4/server/operations/FilesystemStats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FilesystemStats.js","sourceRoot":"","sources":["../../../../../src/nfs/v4/server/operations/FilesystemStats.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,MAAa,eAAe;IAC1B;IACE,sDAAsD;IACtC,UAAkB;IAClC,4CAA4C;IAC5B,SAAiB;IACjC,6CAA6C;IAC7B,UAAkB;IAClC,oCAAoC;IACpB,UAAkB;IAClC,+BAA+B;IACf,SAAiB;IACjC,gCAAgC;IAChB,UAAkB;QAVlB,eAAU,GAAV,UAAU,CAAQ;QAElB,cAAS,GAAT,SAAS,CAAQ;QAEjB,eAAU,GAAV,UAAU,CAAQ;QAElB,eAAU,GAAV,UAAU,CAAQ;QAElB,cAAS,GAAT,SAAS,CAAQ;QAEjB,eAAU,GAAV,UAAU,CAAQ;IACjC,CAAC;CACL;AAfD,0CAeC"}

package/lib/nfs/v4/server/operations/LockOwnerState.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Lock-owner state record for NFSv4 LOCK operations.
+ * A lock-owner represents a single entity (process, thread) on a client
+ * that can acquire byte-range locks on files. Tracks all locks held by this owner.
+ */
+export declare class LockOwnerState {
+    /**
+     * Client ID that owns this lock-owner.
+     * Links the owner back to the specific NFS client that created it.
+     */
+    readonly clientid: bigint;
+    /**
+     * Opaque lock-owner identifier provided by the client.
+     * Typically represents a process or thread ID on the client.
+     * Combined with clientid, uniquely identifies this lock-owner.
+     */
+    readonly owner: Uint8Array;
+    /**
+     * Sequence number for operations from this lock-owner.
+     * Used to serialize LOCK/LOCKU operations.
+     * Incremented after each successful stateful operation.
+     * Server rejects operations with incorrect sequence numbers to prevent replays.
+     */
+    seqid: number;
+    /**
+     * Set of lock keys for all byte-range locks currently held by this owner.
+     * Format: lock keys are `${stateid}:${offset}:${length}`.
+     * Used to track all active locks and clean them up if the owner goes away.
+     */
+    readonly locks: Set<string>;
+    /**
+     * Cached response from the last successful operation.
+     * Per RFC 7530 §9.1.7, when a client retries with the same seqid (replay),
+     * the server must return the cached response instead of re-executing the operation.
+     * This ensures idempotency for LOCK and LOCKU operations.
+     */
+    lastResponse?: any | undefined;
+    /**
+     * Signature of the last request to validate true replays.
+     * Used to detect mismatched replays where the client reuses a seqid but changes
+     * the request parameters, which must be rejected with NFS4ERR_BAD_SEQID.
+     */
+    lastRequestKey?: string | undefined;
+    constructor(
+    /**
+     * Client ID that owns this lock-owner.
+     * Links the owner back to the specific NFS client that created it.
+     */
+    clientid: bigint, 
+    /**
+     * Opaque lock-owner identifier provided by the client.
+     * Typically represents a process or thread ID on the client.
+     * Combined with clientid, uniquely identifies this lock-owner.
+     */
+    owner: Uint8Array, 
+    /**
+     * Sequence number for operations from this lock-owner.
+     * Used to serialize LOCK/LOCKU operations.
+     * Incremented after each successful stateful operation.
+     * Server rejects operations with incorrect sequence numbers to prevent replays.
+     */
+    seqid: number, 
+    /**
+     * Set of lock keys for all byte-range locks currently held by this owner.
+     * Format: lock keys are `${stateid}:${offset}:${length}`.
+     * Used to track all active locks and clean them up if the owner goes away.
+     */
+    locks?: Set<string>, 
+    /**
+     * Cached response from the last successful operation.
+     * Per RFC 7530 §9.1.7, when a client retries with the same seqid (replay),
+     * the server must return the cached response instead of re-executing the operation.
+     * This ensures idempotency for LOCK and LOCKU operations.
+     */
+    lastResponse?: any | undefined, 
+    /**
+     * Signature of the last request to validate true replays.
+     * Used to detect mismatched replays where the client reuses a seqid but changes
+     * the request parameters, which must be rejected with NFS4ERR_BAD_SEQID.
+     */
+    lastRequestKey?: string | undefined);
+}

package/lib/nfs/v4/server/operations/LockOwnerState.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LockOwnerState = void 0;
+/**
+ * Lock-owner state record for NFSv4 LOCK operations.
+ * A lock-owner represents a single entity (process, thread) on a client
+ * that can acquire byte-range locks on files. Tracks all locks held by this owner.
+ */
+class LockOwnerState {
+    constructor(
+    /**
+     * Client ID that owns this lock-owner.
+     * Links the owner back to the specific NFS client that created it.
+     */
+    clientid, 
+    /**
+     * Opaque lock-owner identifier provided by the client.
+     * Typically represents a process or thread ID on the client.
+     * Combined with clientid, uniquely identifies this lock-owner.
+     */
+    owner, 
+    /**
+     * Sequence number for operations from this lock-owner.
+     * Used to serialize LOCK/LOCKU operations.
+     * Incremented after each successful stateful operation.
+     * Server rejects operations with incorrect sequence numbers to prevent replays.
+     */
+    seqid, 
+    /**
+     * Set of lock keys for all byte-range locks currently held by this owner.
+     * Format: lock keys are `${stateid}:${offset}:${length}`.
+     * Used to track all active locks and clean them up if the owner goes away.
+     */
+    locks = new Set(), 
+    /**
+     * Cached response from the last successful operation.
+     * Per RFC 7530 §9.1.7, when a client retries with the same seqid (replay),
+     * the server must return the cached response instead of re-executing the operation.
+     * This ensures idempotency for LOCK and LOCKU operations.
+     */
+    lastResponse, 
+    /**
+     * Signature of the last request to validate true replays.
+     * Used to detect mismatched replays where the client reuses a seqid but changes
+     * the request parameters, which must be rejected with NFS4ERR_BAD_SEQID.
+     */
+    lastRequestKey) {
+        this.clientid = clientid;
+        this.owner = owner;
+        this.seqid = seqid;
+        this.locks = locks;
+        this.lastResponse = lastResponse;
+        this.lastRequestKey = lastRequestKey;
+    }
+}
+exports.LockOwnerState = LockOwnerState;
+//# sourceMappingURL=LockOwnerState.js.map

package/lib/nfs/v4/server/operations/LockOwnerState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LockOwnerState.js","sourceRoot":"","sources":["../../../../../src/nfs/v4/server/operations/LockOwnerState.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH,MAAa,cAAc;IACzB;IACE;;;OAGG;IACa,QAAgB;IAEhC;;;;OAIG;IACa,KAAiB;IAEjC;;;;;OAKG;IACI,KAAa;IAEpB;;;;OAIG;IACa,QAAqB,IAAI,GAAG,EAAE;IAE9C;;;;;OAKG;IACI,YAAkB;IAEzB;;;;OAIG;IACI,cAAuB;QArCd,aAAQ,GAAR,QAAQ,CAAQ;QAOhB,UAAK,GAAL,KAAK,CAAY;QAQ1B,UAAK,GAAL,KAAK,CAAQ;QAOJ,UAAK,GAAL,KAAK,CAAyB;QAQvC,iBAAY,GAAZ,YAAY,CAAM;QAOlB,mBAAc,GAAd,cAAc,CAAS;IAC7B,CAAC;CACL;AA7CD,wCA6CC"}