@kubun/server 0.4.3 → 0.5.0

package/lib/data/access-control.d.ts

@@ -18,7 +18,7 @@ export type AccessChecker = (doc: DocumentNode, permissionType: 'read' | 'write'
 /**
  * Parse and validate access permissions from document data
  */
-export declare function parseDocumentAccessPermissions(data: any): AccessPermissions | null;
+export declare function parseDocumentAccessPermissions(data: unknown): AccessPermissions | null;
 /**
  * Validate that DIDs have the correct format
  */
@@ -43,4 +43,3 @@ export declare function checkAccess(viewerDID: string | null, document: Document
  * Create an access checker function bound to specific viewer and delegation tokens
  */
 export declare function createAccessChecker(viewerDID: string | null, delegationTokens: Array<string> | undefined, db: KubunDB, serverConfig: ServerAccessConfig): AccessChecker;
-//# sourceMappingURL=access-control.d.ts.map

package/lib/data/access-control.js

@@ -1,164 +1 @@
-import { checkCapability } from '@enkaku/capability';
-/**
- * Parse and validate access permissions from document data
- */ export function parseDocumentAccessPermissions(data) {
-    try {
-        if (!data.accessPermissions) return null;
-        const perms = data.accessPermissions;
-        // Basic validation - check if the permission object has the expected structure
-        if (typeof perms !== 'object') {
-            console.warn('Invalid accessPermissions structure in document, ignoring');
-            return null;
-        }
-        return perms;
-    } catch (error) {
-        console.warn('Failed to parse document access permissions:', error);
-        return null;
-    }
-}
-/**
- * Validate that DIDs have the correct format
- */ export function validateDIDs(dids) {
-    for (const did of dids){
-        if (!did.startsWith('did:')) {
-            throw new Error(`Invalid DID format: ${did}`);
-        }
-    }
-}
-/**
- * Check if a level string is valid for the given permission type
- */ function isValidAccessLevel(level, permissionType) {
-    if (permissionType === 'read') {
-        return level === 'only_owner' || level === 'anyone' || level === 'allowed_dids';
-    }
-    // write permission
-    return level === 'only_owner' || level === 'allowed_dids';
-}
-/**
- * Resolve the effective access rule for a document and permission type
- * Order of precedence:
- * 1. Document accessPermissions override
- * 2. User's model default from database
- * 3. Server configuration default
- */ export async function resolveAccessRule(document, modelId, ownerDID, permissionType, db, serverConfig) {
-    // 1. Check document override
-    const docPerms = parseDocumentAccessPermissions(document.data);
-    if (docPerms?.[permissionType]) {
-        const rule = docPerms[permissionType];
-        if (rule && isValidAccessLevel(rule.level, permissionType)) {
-            return {
-                level: rule.level,
-                allowedDIDs: rule.allowedDIDs || null
-            };
-        }
-    }
-    // 2. Check user's model default
-    const modelDefault = await db.getUserModelAccessDefault(ownerDID, modelId, permissionType);
-    if (modelDefault) {
-        return {
-            level: modelDefault.level,
-            allowedDIDs: modelDefault.allowedDIDs
-        };
-    }
-    // 3. Fall back to server default
-    const level = serverConfig.defaultAccessLevel[permissionType];
-    return {
-        level,
-        allowedDIDs: null
-    };
-}
-/**
- * Check if viewer has access to document through delegation tokens
- */ export async function checkDelegation(viewerDID, grantor, document, permissionType, delegationTokens) {
-    if (!delegationTokens || delegationTokens.length === 0) {
-        return false;
-    }
-    // Build expected permission based on specificity
-    const resources = [
-        `urn:kubun:document:${document.id}`,
-        `urn:kubun:model:${document.model}`,
-        '*'
-    ];
-    const action = `document/${permissionType}` // document/read or document/write
-    ;
-    // First, try tokens as a delegation chain (for A→B→C scenarios)
-    for (const res of resources){
-        try {
-            await checkCapability({
-                act: action,
-                res
-            }, {
-                iss: viewerDID,
-                sub: grantor,
-                cap: delegationTokens
-            });
-            return true;
-        } catch  {}
-    }
-    // If chain validation fails, try each token independently (for multiple independent grants)
-    for (const token of delegationTokens){
-        for (const res of resources){
-            try {
-                await checkCapability({
-                    act: action,
-                    res
-                }, {
-                    iss: viewerDID,
-                    sub: grantor,
-                    cap: token
-                });
-                return true;
-            } catch  {}
-        }
-    }
-    return false;
-}
-/**
- * Check if viewer has access to a document for the specified permission type
- */ export async function checkAccess(viewerDID, document, permissionType, db, serverConfig, delegationTokens) {
-    // Validate document has owner
-    if (!document.owner) {
-        throw new Error('Document missing owner field');
-    }
-    // FAST PATH: Owner always has access
-    if (viewerDID === document.owner) {
-        return true;
-    }
-    // Resolve effective access rule
-    const rule = await resolveAccessRule(document, document.model, document.owner, permissionType, db, serverConfig);
-    // ANYONE: Always allow (read only)
-    if (rule.level === 'anyone') {
-        return true;
-    }
-    // No viewer: Deny
-    if (!viewerDID) {
-        return false;
-    }
-    // ONLY_OWNER: Check delegation from owner
-    if (rule.level === 'only_owner') {
-        return await checkDelegation(viewerDID, document.owner, document, permissionType, delegationTokens);
-    }
-    // ALLOWED_DIDS: Check if viewer is in list or has delegation
-    if (rule.level === 'allowed_dids') {
-        const allowedDIDs = rule.allowedDIDs || [];
-        if (allowedDIDs.includes(viewerDID)) {
-            return true;
-        }
-        // Check if any allowedDID has delegated to viewer
-        for (const allowedDID of allowedDIDs){
-            if (await checkDelegation(viewerDID, allowedDID, document, permissionType, delegationTokens)) {
-                return true;
-            }
-        }
-        return false;
-    }
-    // Unknown access level
-    return false;
-}
-/**
- * Create an access checker function bound to specific viewer and delegation tokens
- */ export function createAccessChecker(viewerDID, delegationTokens, db, serverConfig) {
-    return async (doc, permissionType)=>{
-        return await checkAccess(viewerDID, doc, permissionType, db, serverConfig, delegationTokens);
-    };
-}
+import{checkCapability as e}from"@enkaku/capability";export function parseDocumentAccessPermissions(e){try{if(!e||"object"!=typeof e||!("accessPermissions"in e))return null;let r=e.accessPermissions;if("object"!=typeof r)return console.warn("Invalid accessPermissions structure in document, ignoring"),null;return r}catch(e){return console.warn("Failed to parse document access permissions:",e),null}}export function validateDIDs(e){for(let r of e)if(!r.startsWith("did:"))throw Error(`Invalid DID format: ${r}`)}export async function resolveAccessRule(e,r,t,n,l,o){let s=parseDocumentAccessPermissions(e.data);if(s?.[n]){var c;let e=s[n];if(e&&(c=e.level,"read"===n?"only_owner"===c||"anyone"===c||"allowed_dids"===c:"only_owner"===c||"allowed_dids"===c))return{level:e.level,allowedDIDs:e.allowedDIDs||null}}let a=await l.getUserModelAccessDefault(t,r,n);return a?{level:a.level,allowedDIDs:a.allowedDIDs}:{level:o.defaultAccessLevel[n],allowedDIDs:null}}export async function checkDelegation(r,t,n,l,o){if(!o||0===o.length)return!1;let s=[`urn:kubun:document:${n.id}`,`urn:kubun:model:${n.model}`,"*"],c=`document/${l}`;for(let n of s)try{return await e({act:c,res:n},{iss:r,sub:t,cap:o}),!0}catch{}for(let n of o)for(let l of s)try{return await e({act:c,res:l},{iss:r,sub:t,cap:n}),!0}catch{}return!1}export async function checkAccess(e,r,t,n,l,o){if(!r.owner)throw Error("Document missing owner field");if(e===r.owner)return!0;let s=await resolveAccessRule(r,r.model,r.owner,t,n,l);if("anyone"===s.level)return!0;if(!e)return!1;if("only_owner"===s.level)return await checkDelegation(e,r.owner,r,t,o);if("allowed_dids"===s.level){let n=s.allowedDIDs||[];if(n.includes(e))return!0;for(let l of n)if(await checkDelegation(e,l,r,t,o))return!0}return!1}export function createAccessChecker(e,r,t,n){return async(l,o)=>await checkAccess(e,l,o,t,n,r)}

package/lib/data/graphql.d.ts

@@ -18,4 +18,3 @@ export type ExecuteGraphQLParams = {
     variables: Record<string, unknown>;
 };
 export declare function getExecutionArgs(params: ExecuteGraphQLParams): ExecutionArgs;
-//# sourceMappingURL=graphql.d.ts.map

package/lib/data/graphql.js

@@ -1,75 +1 @@
-import { createReadContext } from '@kubun/graphql';
-import { Kind, parse } from 'graphql';
-import { removeDocumentAccessOverride, removeModelAccessDefaults, setDocumentAccessOverride, setModelAccessDefaults } from './mutations.js';
-export function createContext(ctx) {
-    const readContext = createReadContext({
-        db: ctx.db,
-        viewerDID: ctx.viewerDID,
-        accessChecker: ctx.accessChecker
-    });
-    function getMutationDocument(info) {
-        return ctx.mutatedDocuments?.[info.path.key];
-    }
-    return {
-        ...readContext,
-        async executeCreateMutation (_modelID, _data, info) {
-            return getMutationDocument(info);
-        },
-        async executeSetMutation (_modelID, _unique, _data, info) {
-            return getMutationDocument(info);
-        },
-        async executeUpdateMutation (_input, info) {
-            return getMutationDocument(info);
-        },
-        async executeRemoveMutation (_id, _info) {
-        // no-op
-        },
-        async executeSetModelAccessDefaults (modelId, permissionType, accessLevel, allowedDIDs) {
-            await setModelAccessDefaults({
-                ownerDID: ctx.viewerDID,
-                modelID: modelId,
-                permissionType,
-                accessLevel,
-                allowedDIDs
-            }, ctx.db);
-        },
-        async executeRemoveModelAccessDefaults (modelId, permissionTypes) {
-            await removeModelAccessDefaults({
-                ownerDID: ctx.viewerDID,
-                modelID: modelId,
-                permissionTypes
-            }, ctx.db);
-        },
-        async executeSetDocumentAccessOverride (documentId, permissionType, accessLevel, allowedDIDs) {
-            await setDocumentAccessOverride({
-                documentID: documentId,
-                permissionType,
-                accessLevel,
-                allowedDIDs
-            }, ctx.db);
-        },
-        async executeRemoveDocumentAccessOverride (documentId, permissionTypes) {
-            await removeDocumentAccessOverride({
-                documentID: documentId,
-                permissionTypes
-            }, ctx.db);
-        }
-    };
-}
-export function getExecutionArgs(params) {
-    const document = parse(params.text);
-    const definition = document.definitions[0];
-    if (definition == null) {
-        throw new Error('Missing GraphQL document definition');
-    }
-    // Ensure the operation matching the expected type
-    if (definition.kind !== Kind.OPERATION_DEFINITION || definition.operation !== params.type) {
-        throw new Error(`Invalid GraphQL document definition: expected ${params.type} operation`);
-    }
-    return {
-        document,
-        schema: params.schema,
-        variableValues: params.variables,
-        contextValue: createContext(params.context)
-    };
-}
+import{createReadContext as e}from"@kubun/graphql";import{Kind as t,parse as n}from"graphql";import{removeDocumentAccessOverride as c,removeModelAccessDefaults as o,setDocumentAccessOverride as a,setModelAccessDefaults as r}from"./mutations.js";export function createContext(t){function n(e){return t.mutatedDocuments?.[e.path.key]}return{...e({db:t.db,viewerDID:t.viewerDID,accessChecker:t.accessChecker}),executeCreateMutation:async(e,t,c)=>n(c),executeSetMutation:async(e,t,c,o)=>n(o),executeUpdateMutation:async(e,t)=>n(t),async executeRemoveMutation(e,t){},executeSetModelAccessDefaults:async(e,n,c,o)=>await r({ownerDID:t.viewerDID,modelID:e,permissionType:n,accessLevel:c,allowedDIDs:o},t.db),async executeRemoveModelAccessDefaults(e,n){await o({ownerDID:t.viewerDID,modelID:e,permissionTypes:n},t.db)},executeSetDocumentAccessOverride:async(e,n,c,o)=>await a({documentID:e,permissionType:n,accessLevel:c,allowedDIDs:o},t.db),async executeRemoveDocumentAccessOverride(e,n){await c({documentID:e,permissionTypes:n},t.db)}}}export function getExecutionArgs(e){let c=n(e.text),o=c.definitions[0];if(null==o)throw Error("Missing GraphQL document definition");if(o.kind!==t.OPERATION_DEFINITION||o.operation!==e.type)throw Error(`Invalid GraphQL document definition: expected ${e.type} operation`);return{document:c,schema:e.schema,variableValues:e.variables,contextValue:createContext(e.context)}}

package/lib/data/mutation-capture.d.ts

@@ -0,0 +1,7 @@
+import type { KubunDB } from '@kubun/db';
+export declare function captureMutation(params: {
+    db: KubunDB;
+    documentID: string;
+    mutationPayload: string;
+    authorDID: string;
+}): Promise<void>;

package/lib/data/mutation-capture.js

@@ -0,0 +1 @@
+import{sql as e}from"kysely";import{storeMutationLog as t}from"./mutation-log.js";export async function captureMutation(u){let{db:n,documentID:r,mutationPayload:m,authorDID:o}=u,i=await n.getDB(),a=await i.selectFrom("kubun_document_mutation_log").select("sequence_number").where("document_id","=",r).orderBy(e`CAST(sequence_number AS INTEGER)`,"desc").limit(1).executeTakeFirst(),c=a?String(Number(a.sequence_number)+1):"1";await t(n,{documentID:r,sequenceNumber:c,mutationJWT:m,authorDID:o})}

package/lib/data/mutation-log.d.ts

@@ -0,0 +1,17 @@
+import type { DocumentMutationLog, KubunDB } from '@kubun/db';
+export type MutationLogEntry = {
+    documentID: string;
+    sequenceNumber: string;
+    mutationJWT: string;
+    authorDID: string;
+};
+/**
+ * Stores a mutation log entry and maintains ring buffer of last 10 mutations per document
+ */
+export declare function storeMutationLog(db: KubunDB, entry: MutationLogEntry): Promise<void>;
+/** @deprecated Use DocumentMutationLog from @kubun/db instead */
+export type MutationLogRecord = DocumentMutationLog;
+/**
+ * Retrieves mutation log entries for a document starting from a given sequence number
+ */
+export declare function getMutationLog(db: KubunDB, documentID: string, fromSequence: number): Promise<Array<DocumentMutationLog>>;

package/lib/data/mutation-log.js

@@ -0,0 +1 @@
+export async function storeMutationLog(t,o){await t.storeMutationLog(o)}export async function getMutationLog(t,o,n){return t.getMutationLog(o,n)}

package/lib/data/mutations.d.ts

@@ -1,4 +1,5 @@
 import type { KubunDB } from '@kubun/db';
+import type { ModelAccessDefaults } from '@kubun/graphql';
 import { type MutationContext } from '@kubun/mutation';
 import { type DocumentNode } from '@kubun/protocol';
 import { type ServerAccessConfig } from './access-control.js';
@@ -12,7 +13,7 @@ export declare function setModelAccessDefaults(params: {
     permissionType: 'read' | 'write';
     accessLevel: string;
     allowedDIDs: Array<string> | null;
-}, db: KubunDB): Promise<void>;
+}, db: KubunDB): Promise<ModelAccessDefaults>;
 /**
  * Remove model-level access defaults for a user
  */
@@ -29,7 +30,7 @@ export declare function setDocumentAccessOverride(params: {
     permissionType: 'read' | 'write';
     accessLevel: string;
     allowedDIDs: Array<string> | null;
-}, db: KubunDB): Promise<void>;
+}, db: KubunDB): Promise<DocumentNode>;
 /**
  * Remove document-level access override
  */
@@ -38,4 +39,3 @@ export declare function removeDocumentAccessOverride(params: {
     permissionTypes: Array<'read' | 'write'>;
 }, db: KubunDB): Promise<void>;
 export type { ServerAccessConfig };
-//# sourceMappingURL=mutations.d.ts.map

package/lib/data/mutations.js

@@ -1,114 +1 @@
-import { asType, createValidator } from '@enkaku/schema';
-import { verifyToken } from '@enkaku/token';
-import { DocumentID } from '@kubun/id';
-import { applyMutation as apply } from '@kubun/mutation';
-import { documentMutation } from '@kubun/protocol';
-import { validateDIDs } from './access-control.js';
-const validateMutation = createValidator(documentMutation);
-export async function applyMutation(ctx, token) {
-    const verified = await verifyToken(token);
-    const mutation = asType(validateMutation, verified.payload);
-    return await apply(ctx, mutation);
-}
-/**
- * Set model-level access defaults for a user
- */ export async function setModelAccessDefaults(params, db) {
-    const { ownerDID, modelID, permissionType, accessLevel, allowedDIDs } = params;
-    // Validate DIDs if provided
-    if (allowedDIDs && allowedDIDs.length > 0) {
-        validateDIDs(allowedDIDs);
-    }
-    // Validate access level for permission type
-    const validLevels = {
-        read: [
-            'only_owner',
-            'anyone',
-            'allowed_dids'
-        ],
-        write: [
-            'only_owner',
-            'allowed_dids'
-        ]
-    };
-    if (!validLevels[permissionType].includes(accessLevel)) {
-        throw new Error(`Invalid access level "${accessLevel}" for permission type "${permissionType}"`);
-    }
-    await db.setUserModelAccessDefault({
-        ownerDID,
-        modelID,
-        permissionType,
-        accessLevel,
-        allowedDIDs
-    });
-}
-/**
- * Remove model-level access defaults for a user
- */ export async function removeModelAccessDefaults(params, db) {
-    const { ownerDID, modelID, permissionTypes } = params;
-    await db.removeUserModelAccessDefaults(ownerDID, modelID, permissionTypes);
-}
-/**
- * Set document-level access override
- */ export async function setDocumentAccessOverride(params, db) {
-    const { documentID, permissionType, accessLevel, allowedDIDs } = params;
-    // Validate DIDs if provided
-    if (allowedDIDs && allowedDIDs.length > 0) {
-        validateDIDs(allowedDIDs);
-    }
-    // Get the document
-    const docID = DocumentID.fromString(documentID);
-    const doc = await db.getDocument(docID);
-    if (!doc) {
-        throw new Error(`Document not found: ${documentID}`);
-    }
-    // Preserve existing permissions
-    const existingPerms = doc.data?.accessPermissions || {};
-    // Update the specific permission type
-    const updatedPerms = {
-        ...existingPerms,
-        [permissionType]: {
-            level: accessLevel,
-            allowedDIDs
-        }
-    };
-    // Update the document with new access permissions
-    await db.saveDocument({
-        id: docID,
-        data: {
-            ...doc.data,
-            accessPermissions: updatedPerms
-        },
-        state: null,
-        existing: doc
-    });
-}
-/**
- * Remove document-level access override
- */ export async function removeDocumentAccessOverride(params, db) {
-    const { documentID, permissionTypes } = params;
-    // Get the document
-    const docID = DocumentID.fromString(documentID);
-    const doc = await db.getDocument(docID);
-    if (!doc) {
-        // Silently return if document doesn't exist
-        return;
-    }
-    // Preserve existing permissions, removing specified types
-    const existingPerms = doc.data?.accessPermissions || {};
-    const updatedPerms = {
-        ...existingPerms
-    };
-    for (const permType of permissionTypes){
-        delete updatedPerms[permType];
-    }
-    // Update the document with updated access permissions
-    await db.saveDocument({
-        id: docID,
-        data: {
-            ...doc.data,
-            accessPermissions: Object.keys(updatedPerms).length > 0 ? updatedPerms : undefined
-        },
-        state: null,
-        existing: doc
-    });
-}
+import{asType as e,createValidator as t}from"@enkaku/schema";import{verifyToken as o}from"@enkaku/token";import{DocumentID as a}from"@kubun/id";import{applyMutation as s}from"@kubun/mutation";import{documentMutation as r}from"@kubun/protocol";import{validateDIDs as l}from"./access-control.js";import{captureMutation as n}from"./mutation-capture.js";let i=t(r);export async function applyMutation(t,a){let r=e(i,(await o(a)).payload),l=await s(t,r);return await n({db:t.db,documentID:l.id,mutationPayload:a,authorDID:r.iss}),l}export async function setModelAccessDefaults(e,t){let{ownerDID:o,modelID:a,permissionType:s,accessLevel:r,allowedDIDs:n}=e;if(n&&n.length>0&&l(n),!({read:["only_owner","anyone","allowed_dids"],write:["only_owner","allowed_dids"]})[s].includes(r))throw Error(`Invalid access level "${r}" for permission type "${s}"`);await t.setUserModelAccessDefault({ownerDID:o,modelID:a,permissionType:s,accessLevel:r,allowedDIDs:n});let i=await t.getUserModelAccessDefault(o,a,"read"),c=await t.getUserModelAccessDefault(o,a,"write"),d={};return i&&(d.read={level:i.level,allowedDIDs:i.allowedDIDs??[]}),c&&(d.write={level:c.level,allowedDIDs:c.allowedDIDs??[]}),{ownerDID:o,modelId:a,permissions:d}}export async function removeModelAccessDefaults(e,t){let{ownerDID:o,modelID:a,permissionTypes:s}=e;await t.removeUserModelAccessDefaults(o,a,s)}export async function setDocumentAccessOverride(e,t){let{documentID:o,permissionType:s,accessLevel:r,allowedDIDs:n}=e;n&&n.length>0&&l(n);let i=a.fromString(o),c=await t.getDocument(i);if(!c)throw Error(`Document not found: ${o}`);let d={...c.data?.accessPermissions||{},[s]:{level:r,allowedDIDs:n}};return await t.saveDocument({id:i,data:{...c.data,accessPermissions:d},state:null,existing:c})}export async function removeDocumentAccessOverride(e,t){let{documentID:o,permissionTypes:s}=e,r=a.fromString(o),l=await t.getDocument(r);if(!l)return;let n={...l.data?.accessPermissions||{}};for(let e of s)delete n[e];await t.saveDocument({id:r,data:{...l.data,accessPermissions:Object.keys(n).length>0?n:void 0},state:null,existing:l})}

package/lib/handlers/document.d.ts

@@ -2,4 +2,3 @@ import type { ProcedureHandlers } from '@enkaku/server';
 import type { DocumentProtocol } from '@kubun/protocol';
 import type { CreateHandlersParams } from './types.js';
 export declare function createHandlers(handlersParams: CreateHandlersParams): ProcedureHandlers<DocumentProtocol>;
-//# sourceMappingURL=document.d.ts.map

package/lib/handlers/document.js

@@ -1,28 +1 @@
-import { toB64 } from '@enkaku/codec';
-export function createHandlers(handlersParams) {
-    const { db } = handlersParams;
-    return {
-        'document/sync': async (ctx)=>{
-            const ids = Object.keys(ctx.param.documents);
-            const loadedStates = await db.getDocumentStates(ids);
-            const states = ids.reduce((acc, id)=>{
-                const loaded = loadedStates[id];
-                if (loaded == null) {
-                    acc[id] = null;
-                    return acc;
-                }
-                const provided = ctx.param.documents[id];
-                if (provided == null) {
-                    acc[id] = toB64(loaded);
-                } else {
-                    // TODO: send diff rather than full doc state
-                    acc[id] = toB64(loaded);
-                }
-                return acc;
-            }, {});
-            return {
-                states
-            };
-        }
-    };
-}
+import{toB64 as e}from"@enkaku/codec";export function createHandlers(t){let{db:n}=t;return{"document/sync":async t=>{let r=Object.keys(t.param.documents),a=await n.getDocumentStates(r);return{states:r.reduce((n,r)=>{let c=a[r];return null==c?n[r]=null:(t.param.documents[r],n[r]=e(c)),n},{})}}}}

package/lib/handlers/graph.d.ts

@@ -2,4 +2,3 @@ import type { ProcedureHandlers } from '@enkaku/server';
 import type { GraphProtocol } from '@kubun/protocol';
 import type { CreateHandlersParams } from './types.js';
 export declare function createHandlers(handlersParams: CreateHandlersParams): ProcedureHandlers<GraphProtocol>;
-//# sourceMappingURL=graph.d.ts.map

package/lib/handlers/graph.js

@@ -1,191 +1 @@
-import { fromB64, toB64 } from '@enkaku/codec';
-import { consume } from '@enkaku/generator';
-import { createSchema } from '@kubun/graphql';
-import { AttachmentID } from '@kubun/id';
-import { GraphModel } from '@kubun/protocol';
-import { execute, OperationTypeNode, // printSchema,
-subscribe } from 'graphql';
-import { createAccessChecker } from '../data/access-control.js';
-import { getExecutionArgs } from '../data/graphql.js';
-import { applyMutation } from '../data/mutations.js';
-function toGraphResult(result) {
-    return {
-        data: result.data,
-        errors: result.errors?.map((err)=>err.toJSON()),
-        extensions: result.extensions
-    };
-}
-export function createHandlers(handlersParams) {
-    const { db, logger, serverAccessConfig } = handlersParams;
-    const graphModels = {};
-    async function getGraphModels(id) {
-        if (graphModels[id] == null) {
-            graphModels[id] = db.getGraph(id).then((graph)=>{
-                if (graph == null) {
-                    logger.warn('graph {id} not found', {
-                        id
-                    });
-                    delete graphModels[id];
-                    throw new Error(`Graph not found: ${id}`);
-                }
-                logger.debug('cached model for graph {id}', {
-                    id
-                });
-                return {
-                    record: graph.record,
-                    aliases: graph.aliases
-                };
-            });
-        }
-        return await graphModels[id];
-    }
-    const schemas = {};
-    async function getGraphQLSchema(id) {
-        if (schemas[id] == null) {
-            schemas[id] = getGraphModels(id).then((model)=>{
-                const schema = createSchema(model);
-                logger.debug('cached schema for graph {id}', {
-                    id
-                });
-                // console.log(printSchema(schema))
-                return schema;
-            }).catch((err)=>{
-                delete schemas[id];
-                throw err;
-            });
-        }
-        return await schemas[id];
-    }
-    async function executeGraphQL(params) {
-        const result = await execute(getExecutionArgs(params));
-        return toGraphResult(result);
-    }
-    return {
-        'graph/deploy': async (ctx)=>{
-            const model = GraphModel.fromClusters({
-                clusters: ctx.param.clusters
-            });
-            const id = await db.createGraph({
-                id: ctx.param.id,
-                name: ctx.param.name,
-                record: model.record
-            });
-            logger.info('deployed graph {id}', {
-                id
-            });
-            return {
-                id,
-                ...model.toJSON()
-            };
-        },
-        'graph/list': async ()=>{
-            const graphs = await db.listGraphs();
-            return {
-                graphs: graphs.map((graph)=>({
-                        id: graph.id,
-                        name: graph.name
-                    }))
-            };
-        },
-        'graph/load': async (ctx)=>{
-            return await getGraphModels(ctx.param.id);
-        },
-        'graph/mutate': async (ctx)=>{
-            const attachments = Object.entries(ctx.param.attachments ?? {}).map(([key, value])=>{
-                const aid = AttachmentID.fromString(key);
-                return {
-                    id: toB64(aid.digest),
-                    data: fromB64(value)
-                };
-            });
-            if (attachments.length !== 0) {
-                await db.addAttachments(attachments);
-            }
-            // Apply mutations and make the documents available to the GraphQL resolvers in the context
-            const mutatedDocuments = {};
-            const validators = {};
-            await Promise.all(Object.entries(ctx.param.mutations).map(async ([key, mutation])=>{
-                mutatedDocuments[key] = await applyMutation({
-                    db,
-                    validators
-                }, mutation);
-            }));
-            const payload = ctx.message.payload;
-            const viewerDID = payload.sub || payload.iss;
-            const delegationTokens = payload.cap ? Array.isArray(payload.cap) ? payload.cap : [
-                payload.cap
-            ] : undefined;
-            const accessChecker = createAccessChecker(viewerDID, delegationTokens, db, serverAccessConfig);
-            return await executeGraphQL({
-                schema: await getGraphQLSchema(ctx.param.id),
-                type: OperationTypeNode.MUTATION,
-                text: ctx.param.text,
-                variables: ctx.param.variables ?? {},
-                context: {
-                    db,
-                    mutatedDocuments,
-                    viewerDID,
-                    accessChecker
-                }
-            });
-        },
-        'graph/query': async (ctx)=>{
-            const payload = ctx.message.payload;
-            const viewerDID = payload.sub || payload.iss;
-            const delegationTokens = payload.cap ? Array.isArray(payload.cap) ? payload.cap : [
-                payload.cap
-            ] : undefined;
-            const accessChecker = createAccessChecker(viewerDID, delegationTokens, db, serverAccessConfig);
-            return await executeGraphQL({
-                schema: await getGraphQLSchema(ctx.param.id),
-                type: OperationTypeNode.QUERY,
-                text: ctx.param.text,
-                variables: ctx.param.variables ?? {},
-                context: {
-                    db,
-                    viewerDID,
-                    accessChecker
-                }
-            });
-        },
-        'graph/subscribe': async (ctx)=>{
-            const payload = ctx.message.payload;
-            const viewerDID = payload.sub || payload.iss;
-            const delegationTokens = payload.cap ? Array.isArray(payload.cap) ? payload.cap : [
-                payload.cap
-            ] : undefined;
-            const accessChecker = createAccessChecker(viewerDID, delegationTokens, db, serverAccessConfig);
-            const args = getExecutionArgs({
-                schema: await getGraphQLSchema(ctx.param.id),
-                type: OperationTypeNode.SUBSCRIPTION,
-                text: ctx.param.text,
-                variables: ctx.param.variables ?? {},
-                context: {
-                    db,
-                    viewerDID,
-                    accessChecker
-                }
-            });
-            const subscription = await subscribe(args);
-            if (ctx.signal.aborted) {
-                return null;
-            }
-            if ('errors' in subscription) {
-                return toGraphResult(subscription);
-            }
-            const writer = ctx.writable.getWriter();
-            try {
-                await consume(subscription, async (value)=>{
-                    await writer.write(toGraphResult(value));
-                }, ctx.signal);
-            } catch (reason) {
-                if (reason !== 'Close') {
-                    throw reason;
-                }
-            } finally{
-                await writer.close();
-            }
-            return null;
-        }
-    };
-}
+import{fromB64 as a,toB64 as e}from"@enkaku/codec";import{consume as r}from"@enkaku/generator";import{createSchema as t}from"@kubun/graphql";import{AttachmentID as i}from"@kubun/id";import{GraphModel as o}from"@kubun/protocol";import{execute as n,OperationTypeNode as s,subscribe as l}from"graphql";import{createAccessChecker as c}from"../data/access-control.js";import{getExecutionArgs as d}from"../data/graphql.js";import{applyMutation as m}from"../data/mutations.js";function p(a){return{data:a.data,errors:a.errors?.map(a=>a.toJSON()),extensions:a.extensions}}export function createHandlers(u){let{db:f,logger:h,serverAccessConfig:g}=u,y={};function b(a){return a?.fieldsMeta?Object.entries(a.fieldsMeta).filter(([a,e])=>!0===e.searchable).map(([a])=>a):[]}async function w(a,e,r){let t;h.info("starting backfill for model {modelID} in graph {graphID}",{modelID:e,graphID:a});let i=0,o=!0;for(;o;){let a=await f.queryDocuments({modelIDs:[e],first:100,after:t});for(let t of a.entries)t.document.data&&(await f.updateSearchEntry(e,t.document.id,t.document.data,r),i++);o=a.hasMore,t=a.entries.at(-1)?.cursor}h.info("backfill completed for model {modelID}: {total} documents indexed",{modelID:e,total:String(i)})}f.events.on("document:saved",async a=>{let e=a.document;for(let[a,r]of Object.entries(y)){let a=r[e.model];if(a&&a.length>0)try{null===e.data?await f.removeSearchEntry(e.model,e.id):await f.updateSearchEntry(e.model,e.id,e.data,a)}catch(a){h.error("failed to update search index for document {id}: {err}",{id:e.id,err:String(a)})}}});let x={};async function v(a){return null==x[a]&&(x[a]=f.getGraph(a).then(e=>{if(null==e)throw h.warn("graph {id} not found",{id:a}),delete x[a],Error(`Graph not found: ${a}`);if(h.debug("cached model for graph {id}",{id:a}),e.search){let r={};for(let[a,t]of Object.entries(e.search))r[a]=t.fields??b(e.record[a]);y[a]=r}return{record:e.record,aliases:e.aliases}})),await x[a]}let S={};async function O(a){return null==S[a]&&(S[a]=v(a).then(e=>{let r=t(e);return h.debug("cached schema for graph {id}",{id:a}),r}).catch(e=>{throw delete S[a],e})),await S[a]}async function j(a){return p(await n(d(a)))}return{"graph/deploy":async a=>{let e=o.fromClusters({clusters:a.param.clusters}),r=a.param.search,t=await f.createGraph({id:a.param.id,name:a.param.name,record:e.record,search:r});if(h.info("deployed graph {id}",{id:t}),r){for(let[a,i]of Object.entries(r)){let r=i.fields??b(e.record[a]);r.length>0&&(await f.createSearchIndex(a,r),h.info("created search index for model {modelID}",{modelID:a}),w(t,a,r).catch(e=>{h.error("backfill failed for model {modelID}: {err}",{modelID:a,err:String(e)})}))}let a={};for(let[t,i]of Object.entries(r))a[t]=i.fields??b(e.record[t]);y[t]=a}return delete x[t],delete S[t],{id:t,...e.toJSON(),search:r}},"graph/list":async()=>({graphs:(await f.listGraphs()).map(a=>({id:a.id,name:a.name}))}),"graph/load":async a=>await v(a.param.id),"graph/mutate":async r=>{let t=Object.entries(r.param.attachments??{}).map(([r,t])=>({id:e(i.fromString(r).digest),data:a(t)}));0!==t.length&&await f.addAttachments(t);let o={},n={};await Promise.all(Object.entries(r.param.mutations).map(async([a,e])=>{o[a]=await m({db:f,validators:n},e)}));let l=r.message.payload,d=l.sub||l.iss,p=c(d,l.cap?Array.isArray(l.cap)?l.cap:[l.cap]:void 0,f,g);return await j({schema:await O(r.param.id),type:s.MUTATION,text:r.param.text,variables:r.param.variables??{},context:{db:f,mutatedDocuments:o,viewerDID:d,accessChecker:p}})},"graph/query":async a=>{let e=a.message.payload,r=e.sub||e.iss,t=c(r,e.cap?Array.isArray(e.cap)?e.cap:[e.cap]:void 0,f,g);return await j({schema:await O(a.param.id),type:s.QUERY,text:a.param.text,variables:a.param.variables??{},context:{db:f,viewerDID:r,accessChecker:t}})},"graph/subscribe":async a=>{let e=a.message.payload,t=e.sub||e.iss,i=c(t,e.cap?Array.isArray(e.cap)?e.cap:[e.cap]:void 0,f,g),o=d({schema:await O(a.param.id),type:s.SUBSCRIPTION,text:a.param.text,variables:a.param.variables??{},context:{db:f,viewerDID:t,accessChecker:i}}),n=await l(o);if(a.signal.aborted)return null;if("errors"in n)return p(n);let m=a.writable.getWriter();try{await r(n,async a=>{await m.write(p(a))},a.signal)}catch(a){if("Close"!==a)throw a}finally{await m.close()}return null}}}

package/lib/handlers/index.d.ts

@@ -3,4 +3,3 @@ import type { Protocol } from '@kubun/protocol';
 import type { CreateHandlersParams } from './types.js';
 export type Handlers = ProcedureHandlers<Protocol>;
 export declare function createHandlers(params: CreateHandlersParams): Handlers;
-//# sourceMappingURL=index.d.ts.map

package/lib/handlers/index.js

@@ -1,8 +1 @@
-import { createHandlers as documentHandlers } from './document.js';
-import { createHandlers as graphHandlers } from './graph.js';
-export function createHandlers(params) {
-    return {
-        ...documentHandlers(params),
-        ...graphHandlers(params)
-    };
-}
+import{createHandlers as r}from"./document.js";import{createHandlers as e}from"./graph.js";import{createHandlers as a}from"./sync.js";export function createHandlers(s){return{...r(s),...e(s),...a(s)}}

package/lib/handlers/sync.d.ts

@@ -0,0 +1,4 @@
+import type { ProcedureHandlers } from '@enkaku/server';
+import type { SyncProtocol } from '@kubun/protocol';
+import type { CreateHandlersParams } from './types.js';
+export declare function createHandlers(handlersParams: CreateHandlersParams): ProcedureHandlers<SyncProtocol>;

package/lib/handlers/sync.js

@@ -0,0 +1 @@
+import{checkCapability as e}from"@enkaku/capability";import{toB64 as t}from"@enkaku/codec";import{DocumentID as r}from"@kubun/id";import{blake3 as n}from"@noble/hashes/blake3.js";import{getMutationLog as o}from"../data/mutation-log.js";async function a(t,r,n){if(!n||0===n.length)return!1;let o=["*","urn:kubun:user:*",`urn:kubun:user:${r}`],a="document/read";for(let s of o)try{return await e({act:a,res:s},{iss:t,sub:r,cap:n}),!0}catch{}for(let s of n)for(let n of o)try{return await e({act:a,res:n},{iss:t,sub:r,cap:s}),!0}catch{}return!1}export function createHandlers(e){let{db:s,logger:c}=e;return{"sync/discovery":async e=>{let{userIDs:t,delegationTokens:r}=e.param,i=e.message.payload,u=i.sub||i.iss;c.debug("sync/discovery requested",{userIDs:t,viewerDID:u});let l=[];for(let e of t){let t=u===e,i=!t&&await a(u,e,r);if(!t&&!i){c.debug("sync/discovery: no access for user",{userID:e,viewerDID:u,hasDelegation:i});continue}for(let r of(c.debug("sync/discovery: access granted",{userID:e,viewerDID:u,isOwner:t,hasDelegation:i}),await s.listDocumentModelIDs()))try{for(let t of(await s.queryDocumentsByOwner(r,e))){let e=t.id,a=t.model??r,c=await s.getDocumentState(e),i=c?Array.from(n(c)).map(e=>e.toString(16).padStart(2,"0")).join("").slice(0,16):"",u=await o(s,e,0),m=u.length>0?u[u.length-1]:null,d=m?.timestamp??Date.now();l.push({documentID:e,modelID:a,lastMutationTimestamp:d,checkpointHash:i,sequenceNumber:m?.sequence_number??"0",priority:d})}}catch(e){c.debug("sync/discovery: skipping model table",{modelID:r,error:e})}}return l.sort((e,t)=>t.priority-e.priority),c.info("sync/discovery completed",{documentCount:l.length}),{documents:l}},"sync/stream":async e=>{let{documentIDs:n,delegationTokens:i}=e.param,u=e.message.payload,l=u.sub||u.iss;c.info("sync/stream started",{documentIDs:n,viewerDID:l});let m=0,d=0,y=e.writable.getWriter();try{for(let e of n){let n=await s.getDocumentState(e);if(!n){c.debug("sync/stream: document state not found",{documentID:e});continue}let u=r.fromString(e),f=await s.getDocument(u);if(!f){c.debug("sync/stream: document not found",{documentID:e});continue}let p=l===f.owner,w=!p&&await a(l,f.owner,i);if(!p&&!w){c.debug("sync/stream: access denied for document",{documentID:e,viewerDID:l,owner:f.owner}),await y.write({type:"skipped",documentID:e,reason:"access_denied"}),d++;continue}let g=await o(s,e,0);g.length>0&&g.length<=10?await y.write({type:"document",documentID:e,syncMode:"incremental",mutationJWTs:g.map(e=>e.mutation_jwt)}):await y.write({type:"document",documentID:e,syncMode:"full",fullState:t(n)}),m++}await y.write({type:"complete"})}catch(e){throw c.error("sync/stream error",{error:e}),e}finally{await y.close()}return c.info("sync/stream completed",{syncedDocuments:m,skippedDocuments:d}),{success:!0,syncedDocuments:m}},"sync/checkpoint":async e=>{let{peerServerID:t,checkpointData:r}=e.param;c.debug("sync/checkpoint storing",{peerServerID:t,userID:r.userID});let n=await s.storeSyncCheckpoint(t,r);return n?c.info("sync/checkpoint stored",{peerServerID:t,userID:r.userID}):c.error("sync/checkpoint failed to store"),{success:n}}}}

package/lib/handlers/types.d.ts

@@ -6,4 +6,3 @@ export type CreateHandlersParams = {
     logger: Logger;
     serverAccessConfig: ServerAccessConfig;
 };
-//# sourceMappingURL=types.d.ts.map

package/lib/handlers/types.js

@@ -1 +1 @@
-export { };
+export{};

package/lib/index.d.ts

@@ -2,4 +2,3 @@ export { createContext, type ExecutionContext } from './data/graphql.js';
 export { createHandlers } from './handlers/index.js';
 export type { CreateHandlersParams } from './handlers/types.js';
 export { type CreateClientParams, KubunServer, type ServerParams } from './server.js';
-//# sourceMappingURL=index.d.ts.map

package/lib/index.js

@@ -1,3 +1 @@
-export { createContext } from './data/graphql.js';
-export { createHandlers } from './handlers/index.js';
-export { KubunServer } from './server.js';
+export{createContext}from"./data/graphql.js";export{createHandlers}from"./handlers/index.js";export{KubunServer}from"./server.js";

package/lib/server.d.ts

@@ -1,12 +1,14 @@
 import { type Server } from '@enkaku/server';
+import type { Identity } from '@enkaku/token';
 import { type ClientParams, KubunClient } from '@kubun/client';
 import { type DBParams, KubunDB } from '@kubun/db';
 import { type Logger } from '@kubun/logger';
 import type { Protocol, ServerTransport } from '@kubun/protocol';
+import { SyncManager } from './sync/sync-manager.js';
 export type ServerParams = {
     access?: Record<string, boolean | Array<string>>;
     db: KubunDB | DBParams;
-    id: string;
+    identity: Identity;
     logger?: Logger;
     defaultAccessLevel?: {
         read?: 'only_owner' | 'anyone' | 'allowed_dids';
@@ -24,7 +26,7 @@ export declare class KubunServer {
         read: "only_owner" | "anyone" | "allowed_dids";
         write: "only_owner" | "allowed_dids";
     };
+    get sync(): SyncManager;
     createClient(params: CreateClientParams): KubunClient;
     serve(transport: ServerTransport, signal?: AbortSignal): Server<Protocol>;
 }
-//# sourceMappingURL=server.d.ts.map

package/lib/server.js

@@ -1,68 +1 @@
-import { serve } from '@enkaku/server';
-import { DirectTransports } from '@enkaku/transport';
-import { KubunClient } from '@kubun/client';
-import { KubunDB } from '@kubun/db';
-import { getKubunLogger } from '@kubun/logger';
-import { createHandlers } from './handlers/index.js';
-export class KubunServer {
-    #access;
-    #db;
-    #handlers;
-    #id;
-    #logger;
-    #defaultAccessLevel;
-    constructor(params){
-        const { access, db, id } = params;
-        const logger = params.logger ?? getKubunLogger('server', {
-            serverID: id
-        });
-        this.#access = access ?? {};
-        this.#db = db instanceof KubunDB ? db : new KubunDB(db);
-        this.#id = id;
-        this.#logger = logger;
-        // Secure by default
-        this.#defaultAccessLevel = {
-            read: params.defaultAccessLevel?.read ?? 'only_owner',
-            write: params.defaultAccessLevel?.write ?? 'only_owner'
-        };
-        this.#handlers = createHandlers({
-            db: this.#db,
-            logger,
-            serverAccessConfig: {
-                defaultAccessLevel: this.#defaultAccessLevel
-            }
-        });
-    }
-    get db() {
-        return this.#db;
-    }
-    get defaultAccessLevel() {
-        return this.#defaultAccessLevel;
-    }
-    createClient(params) {
-        const { signal, ...clientParams } = params;
-        const transports = new DirectTransports({
-            signal
-        });
-        this.serve(transports.server, signal);
-        const logger = params.logger ?? this.#logger.getChild('client').with({
-            clientID: params.getRandomID?.() ?? crypto.randomUUID()
-        });
-        return new KubunClient({
-            logger,
-            serverID: this.#id,
-            transport: transports.client,
-            ...clientParams
-        });
-    }
-    serve(transport, signal) {
-        return serve({
-            access: this.#access,
-            handlers: this.#handlers,
-            id: this.#id,
-            logger: this.#logger,
-            signal,
-            transport
-        });
-    }
-}
+import{serve as e}from"@enkaku/server";import{DirectTransports as t}from"@enkaku/transport";import{KubunClient as s}from"@kubun/client";import{KubunDB as r}from"@kubun/db";import{getKubunLogger as i}from"@kubun/logger";import{createHandlers as n}from"./handlers/index.js";import{SyncManager as l}from"./sync/sync-manager.js";export class KubunServer{#e;#t;#s;#r;#i;#n;#l;constructor(e){let{access:t,db:s,identity:c}=e,o=e.logger??i("server",{serverID:c.id});this.#e=t??{},this.#t=s instanceof r?s:new r(s),this.#r=c,this.#i=o,this.#n={read:e.defaultAccessLevel?.read??"only_owner",write:e.defaultAccessLevel?.write??"only_owner"},this.#s=n({db:this.#t,logger:o,serverAccessConfig:{defaultAccessLevel:this.#n}}),this.#l=new l({db:this.#t,identity:this.#r,logger:this.#i})}get db(){return this.#t}get defaultAccessLevel(){return this.#n}get sync(){return this.#l}createClient(e){let{signal:r,...i}=e,n=new t({signal:r});return this.serve(n.server,r),new s({logger:e.logger??this.#i.getChild("client").with({clientID:e.getRandomID?.()??crypto.randomUUID()}),serverID:this.#r.id,transport:n.client,...i})}serve(t,s){return e({access:this.#e,handlers:this.#s,identity:this.#r,logger:this.#i,signal:s,transport:t})}}

package/lib/sync/crdt-merge.d.ts

@@ -0,0 +1,26 @@
+import type { KubunDB } from '@kubun/db';
+import type { Logger } from '@kubun/logger';
+export type CRDTMergeResult = {
+    documentID: string;
+    success: boolean;
+    merged: boolean;
+    error?: string;
+};
+export type MergeFullStateParams = {
+    db: KubunDB;
+    logger: Logger;
+    documentID: string;
+    fullState: string;
+};
+/**
+ * Merge an Automerge state received from a peer with the local document state.
+ *
+ * This handles the "full sync" mode where we receive a complete Automerge document
+ * and need to merge it with our local state using CRDT semantics.
+ */
+export declare function mergeFullState(params: MergeFullStateParams): Promise<CRDTMergeResult>;
+/**
+ * Check if full sync merge is possible for a document.
+ * Full sync requires the document to already exist locally.
+ */
+export declare function canMergeFullState(db: KubunDB, documentID: string): Promise<boolean>;

package/lib/sync/crdt-merge.js

@@ -0,0 +1 @@
+import{automergeWasmBase64 as e}from"@automerge/automerge/automerge.wasm.base64";import*as t from"@automerge/automerge/slim";import{lazy as r}from"@enkaku/async";import{fromB64 as a}from"@enkaku/codec";import{asType as n,createValidator as o}from"@enkaku/schema";import{DocumentID as m}from"@kubun/id";let s=r(()=>t.initializeBase64Wasm(e)),l={};async function i(e,t){return null==l[t]&&(l[t]=e.getDocumentModel(t).then(e=>o({...e.schema,$id:t}))),l[t]}export async function mergeFullState(e){let{db:r,logger:o,documentID:l,fullState:u}=e;try{await s;let e=a(u),c=t.load(e),g=m.fromString(l),d=g.model.toString(),[f,p,y]=await Promise.all([r.getDocument(g),r.getDocumentState(l),i(r,d)]);if(null===f)return o.warn("Cannot apply full sync to non-existent document",{documentID:l}),{documentID:l,success:!1,merged:!1,error:"Document does not exist locally. Use incremental sync with create mutation."};let h=p?t.load(p):t.from(f.data||{}),S=t.merge(h,c),k=n(y,JSON.parse(JSON.stringify(S)));return await r.saveDocument({id:g,existing:f,data:k,state:t.save(S)}),o.info("Merged full state for document",{documentID:l,localHeads:t.getHeads(h).length,receivedHeads:t.getHeads(c).length,mergedHeads:t.getHeads(S).length}),{documentID:l,success:!0,merged:!0}}catch(t){let e=t instanceof Error?t.message:String(t);return o.error("Failed to merge full state",{documentID:l,error:e}),{documentID:l,success:!1,merged:!1,error:e}}}export async function canMergeFullState(e,t){try{let r=m.fromString(t),a=await e.getDocument(r);return null!==a}catch{return!1}}

package/lib/sync/mutation-replay.d.ts

@@ -0,0 +1,31 @@
+import type { KubunDB } from '@kubun/db';
+import type { Logger } from '@kubun/logger';
+import type { DocumentNode } from '@kubun/protocol';
+export type MutationReplayResult = {
+    documentID: string;
+    success: boolean;
+    error?: string;
+};
+export type ReplayMutationsParams = {
+    db: KubunDB;
+    logger: Logger;
+    mutationJWTs: string[];
+    /** Skip capturing mutations in local log (useful for avoiding duplicate captures) */
+    skipCapture?: boolean;
+};
+/**
+ * Replay mutation JWTs received from a peer server.
+ * This applies each mutation sequentially and captures them in the local mutation log
+ * for onward synchronization with other peers.
+ */
+export declare function replayMutations(params: ReplayMutationsParams): Promise<MutationReplayResult[]>;
+/**
+ * Replay a single mutation JWT.
+ * Returns the resulting document or throws on error.
+ */
+export declare function replaySingleMutation(params: {
+    db: KubunDB;
+    logger: Logger;
+    mutationJWT: string;
+    skipCapture?: boolean;
+}): Promise<DocumentNode>;

package/lib/sync/mutation-replay.js

@@ -0,0 +1 @@
+import{asType as t,createValidator as a}from"@enkaku/schema";import{verifyToken as o}from"@enkaku/token";import{applyMutation as e}from"@kubun/mutation";import{documentMutation as r}from"@kubun/protocol";import{captureMutation as i}from"../data/mutation-capture.js";let u=a(r);export async function replayMutations(a){let{db:r,logger:n,mutationJWTs:s,skipCapture:c=!1}=a,d=[],m={db:r,validators:{},accessChecker:void 0};for(let a of s)try{let s=await o(a),p=t(u,s.payload),l=await e(m,p);c||await i({db:r,documentID:l.id,mutationPayload:a,authorDID:p.iss}),d.push({documentID:l.id,success:!0}),n.debug("Replayed mutation",{documentID:l.id,type:p.typ,author:p.iss})}catch(a){let t=a instanceof Error?a.message:String(a);n.error("Failed to replay mutation",{error:t}),d.push({documentID:"unknown",success:!1,error:t})}return d}export async function replaySingleMutation(a){let{db:r,logger:n,mutationJWT:s,skipCapture:c=!1}=a,d=t(u,(await o(s)).payload),m=await e({db:r,validators:{},accessChecker:void 0},d);return c||await i({db:r,documentID:m.id,mutationPayload:s,authorDID:d.iss}),n.debug("Replayed single mutation",{documentID:m.id,type:d.typ,author:d.iss}),m}

package/lib/sync/peer-registry.d.ts

@@ -0,0 +1,26 @@
+import type { KubunDB } from '@kubun/db';
+export type PeerConfig = {
+    peerDID: string;
+    endpoint: string;
+    mode: 'persistent' | 'on-demand';
+    allowedUsers: Array<string> | {
+        all: boolean;
+    };
+    priority: string;
+    trustLevel: 'trusted' | 'restricted';
+};
+export type PeerConfigWithID = PeerConfig & {
+    id: string;
+    createdAt: number;
+    updatedAt: number;
+};
+export declare class PeerRegistry {
+    private db;
+    constructor(db: KubunDB);
+    addPeer(config: PeerConfig): Promise<void>;
+    getPeer(peerDID: string): Promise<PeerConfigWithID | undefined>;
+    listPeers(): Promise<Array<PeerConfigWithID>>;
+    updatePeer(peerDID: string, updates: Partial<PeerConfig>): Promise<void>;
+    removePeer(peerDID: string): Promise<void>;
+    isPeerAllowed(peerDID: string): Promise<boolean>;
+}

package/lib/sync/peer-registry.js

@@ -0,0 +1 @@
+import{nanoid as e}from"nanoid";export class PeerRegistry{db;constructor(e){this.db=e}async addPeer(t){let r=await this.db.getDB();await r.insertInto("kubun_sync_peers").values({id:e(),peer_did:t.peerDID,endpoint:t.endpoint,mode:t.mode,allowed_users:JSON.stringify(t.allowedUsers),priority:t.priority,trust_level:t.trustLevel,config:JSON.stringify({}),created_at:Date.now(),updated_at:Date.now()}).execute()}async getPeer(e){let t=await this.db.getDB(),r=await t.selectFrom("kubun_sync_peers").selectAll().where("peer_did","=",e).executeTakeFirst();if(r)return{id:r.id,peerDID:r.peer_did,endpoint:r.endpoint,mode:r.mode,allowedUsers:r.allowed_users,priority:r.priority,trustLevel:r.trust_level,createdAt:r.created_at,updatedAt:r.updated_at}}async listPeers(){let e=await this.db.getDB();return(await e.selectFrom("kubun_sync_peers").selectAll().execute()).map(e=>({id:e.id,peerDID:e.peer_did,endpoint:e.endpoint,mode:e.mode,allowedUsers:e.allowed_users,priority:e.priority,trustLevel:e.trust_level,createdAt:e.created_at,updatedAt:e.updated_at}))}async updatePeer(e,t){let r=await this.getPeer(e);if(!r)throw Error(`Peer ${e} not found`);let i={...r,...t},d=await this.db.getDB();await d.updateTable("kubun_sync_peers").set({endpoint:i.endpoint,mode:i.mode,allowed_users:JSON.stringify(i.allowedUsers),priority:i.priority,trust_level:i.trustLevel,config:JSON.stringify({}),updated_at:Date.now()}).where("peer_did","=",e).execute()}async removePeer(e){let t=await this.db.getDB();await t.deleteFrom("kubun_sync_peers").where("peer_did","=",e).execute()}async isPeerAllowed(e){return void 0!==await this.getPeer(e)}}

package/lib/sync/sync-client.d.ts

@@ -0,0 +1,66 @@
+import type { SigningIdentity } from '@enkaku/token';
+import { KubunClient } from '@kubun/client';
+import type { Logger } from '@kubun/logger';
+import type { KubunServer } from '../server.js';
+export type SyncClientParams = {
+    identity: SigningIdentity;
+    logger: Logger;
+    serverResolver?: (serverID: string) => KubunServer | undefined;
+};
+export type SyncStreamMessage = {
+    type?: string;
+    documentID?: string;
+    syncMode?: string;
+    mutationJWTs?: Array<string>;
+    fullState?: string;
+    reason?: string;
+};
+export type DiscoveryDocument = {
+    documentID: string;
+    modelID: string;
+    lastMutationTimestamp: number;
+    checkpointHash: string;
+    sequenceNumber: string;
+    priority: number;
+};
+export type DiscoveryResult = {
+    documents: Array<DiscoveryDocument>;
+};
+export type SyncCheckpointData = {
+    userID: string;
+    lastSyncTimestamp: number;
+    documentCheckpoints: Record<string, {
+        lastKnownHash: string;
+        lastSyncedSequence: number;
+    }>;
+    vectorClock: Record<string, number>;
+};
+/**
+ * Client for connecting to peer servers for sync operations.
+ * Supports both direct (in-process) and HTTP transports.
+ */
+export declare class SyncClient {
+    #private;
+    constructor(params: SyncClientParams);
+    /**
+     * Connect to a peer server using the specified endpoint.
+     * - `direct://server-id` - Use in-process direct transport
+     * - `http://...` or `https://...` - Use HTTP transport (not yet implemented)
+     */
+    connect(endpoint: string): Promise<KubunClient>;
+    /**
+     * Perform sync discovery to get document manifest from peer.
+     * Documents are returned sorted by priority (most recently modified first).
+     */
+    discovery(client: KubunClient, userIDs: Array<string>, delegationTokens?: Array<string>): Promise<DiscoveryResult>;
+    /**
+     * Request documents via sync/stream and collect all messages.
+     */
+    streamDocuments(client: KubunClient, documentIDs: Array<string>, delegationTokens?: Array<string>): Promise<Array<SyncStreamMessage>>;
+    /**
+     * Store a sync checkpoint on the peer server.
+     */
+    storeCheckpoint(client: KubunClient, peerServerID: string, checkpointData: SyncCheckpointData): Promise<{
+        success: boolean;
+    }>;
+}

package/lib/sync/sync-client.js

@@ -0,0 +1 @@
+import{createArraySink as e}from"@enkaku/stream";import{DirectTransports as r}from"@enkaku/transport";import{KubunClient as t}from"@kubun/client";export class SyncClient{#e;#r;#t;constructor(e){this.#e=e.identity,this.#r=e.logger,this.#t=e.serverResolver}async connect(e){if(e.startsWith("direct://"))return this.#n(e);throw Error(`HTTP transport not yet implemented: ${e}`)}#n(e){let n=e.replace("direct://","");if(!this.#t)throw Error("Server resolver not configured for direct transport");let s=this.#t(n);if(!s)throw Error(`Server not found: ${n}`);let i=new r;return s.serve(i.server),new t({identity:this.#e,logger:this.#r.getChild("sync-client"),serverID:n,transport:i.client})}async discovery(e,r,t=[]){return e.client.request("sync/discovery",{param:{userIDs:r,delegationTokens:t}})}async streamDocuments(r,t,n=[]){let[s,i]=e(),o=r.client.createStream("sync/stream",{param:{documentIDs:t,delegationTokens:n}});return o.readable.pipeTo(s),await o,i}async storeCheckpoint(e,r,t){return e.client.request("sync/checkpoint",{param:{peerServerID:r,checkpointData:t}})}}

package/lib/sync/sync-manager.d.ts

@@ -0,0 +1,57 @@
+import { type Identity, type SigningIdentity } from '@enkaku/token';
+import type { KubunDB } from '@kubun/db';
+import type { Logger } from '@kubun/logger';
+import type { KubunServer } from '../server.js';
+import { type PeerConfig, type PeerConfigWithID } from './peer-registry.js';
+export type SyncOptions = {
+    userIDs?: Array<string>;
+    documentIDs?: Array<string>;
+};
+export type SyncSessionInfo = {
+    peerID: string;
+    startTime: number;
+    documentsAttempted: number;
+    documentsCompleted: number;
+};
+export type SyncStatus = {
+    activeSessions: Array<SyncSessionInfo>;
+    lastSyncByPeer: Record<string, number>;
+};
+export type SyncEvent = {
+    type: 'started' | 'completed' | 'error' | 'document:complete' | 'document:failed' | 'document:skipped';
+    peerID: string;
+    documentID?: string;
+    timestamp: number;
+    error?: string;
+    reason?: string;
+};
+export type SyncEvents = {
+    sync: SyncEvent;
+};
+export type SyncManagerParams = {
+    db: KubunDB;
+    identity: Identity;
+    logger: Logger;
+};
+export declare class SyncManager {
+    #private;
+    constructor(params: SyncManagerParams);
+    /**
+     * Configure the signing identity used for sync operations.
+     */
+    setIdentity(identity: SigningIdentity): void;
+    /**
+     * Configure the server resolver for direct transport connections.
+     */
+    setServerResolver(resolver: (serverID: string) => KubunServer | undefined): void;
+    addPeer(config: PeerConfig): Promise<void>;
+    removePeer(peerDID: string): Promise<void>;
+    updatePeerConfig(peerDID: string, updates: Partial<PeerConfig>): Promise<void>;
+    listPeers(): Promise<Array<PeerConfigWithID>>;
+    getPeer(peerDID: string): Promise<PeerConfigWithID | undefined>;
+    syncWithPeer(peerDID: string, options?: SyncOptions): Promise<{
+        sessionID: string;
+    }>;
+    getStatus(peerDID?: string): SyncStatus;
+    onSyncEvent(callback: (event: SyncEvent) => void): () => void;
+}

package/lib/sync/sync-manager.js

@@ -0,0 +1 @@
+import{EventEmitter as e}from"@enkaku/event";import{isSigningIdentity as t}from"@enkaku/token";import{mergeFullState as r}from"./crdt-merge.js";import{replayMutations as n}from"./mutation-replay.js";import{PeerRegistry as s}from"./peer-registry.js";import{SyncClient as o}from"./sync-client.js";export class SyncManager{#e;#t;#r;#n=new e;#s=new Map;#o=new Map;#i;#m;constructor(e){this.#e=e.db,this.#i=e.identity,this.#t=e.logger,this.#r=new s(e.db)}setIdentity(e){this.#i=e}setServerResolver(e){this.#m=e}async addPeer(e){await this.#r.addPeer(e),this.#t.info("Peer added",{peerDID:e.peerDID})}async removePeer(e){await this.#r.removePeer(e),this.#t.info("Peer removed",{peerDID:e})}async updatePeerConfig(e,t){await this.#r.updatePeer(e,t),this.#t.info("Peer updated",{peerDID:e})}async listPeers(){return this.#r.listPeers()}async getPeer(e){return this.#r.getPeer(e)}async syncWithPeer(e,r){this.#t.info("Starting sync with peer",{peerDID:e,options:r});let n=await this.#r.getPeer(e);if(!n)throw Error(`Peer ${e} not found`);let s=`sync-${e}-${Date.now()}`,i={peerID:e,startTime:Date.now(),documentsAttempted:0,documentsCompleted:0};this.#s.set(s,i),this.#a({type:"started",peerID:e,timestamp:Date.now()});try{let m=this.#i;if(t(m)){let t=new o({identity:m,logger:this.#t,serverResolver:this.#m});this.#t.info("Connecting to peer",{endpoint:n.endpoint});let s=await t.connect(n.endpoint),a=r?.documentIDs??[];if(0===a.length&&r?.userIDs&&r.userIDs.length>0&&(this.#t.info("Discovering documents for users",{userIDs:r.userIDs}),a=(await t.discovery(s,r.userIDs)).documents.map(e=>e.documentID),this.#t.info("Discovered documents",{count:a.length})),0===a.length)this.#t.info("No documents to sync");else{for(let r of(i.documentsAttempted=a.length,this.#t.info("Requesting documents via stream",{count:a.length}),await t.streamDocuments(s,a)))if("document"===r.type&&r.documentID)try{await this.#c(r),i.documentsCompleted++,this.#a({type:"document:complete",peerID:e,documentID:r.documentID,timestamp:Date.now()})}catch(t){this.#t.error("Failed to apply document sync",{documentID:r.documentID,error:t}),this.#a({type:"document:failed",peerID:e,documentID:r.documentID,timestamp:Date.now(),error:t instanceof Error?t.message:String(t)})}else"skipped"===r.type&&r.documentID&&(this.#t.debug("Document skipped by peer",{documentID:r.documentID,reason:r.reason}),this.#a({type:"document:skipped",peerID:e,documentID:r.documentID,timestamp:Date.now(),reason:r.reason}));this.#t.info("Sync complete",{attempted:i.documentsAttempted,completed:i.documentsCompleted})}}else this.#t.warn("Sync session initiated without identity signer (skipping actual sync)",{sessionID:s,peerDID:e,endpoint:n.endpoint,options:r});this.#o.set(e,Date.now()),this.#a({type:"completed",peerID:e,timestamp:Date.now()})}catch(t){throw this.#t.error("Sync failed",{peerDID:e,error:t}),this.#a({type:"error",peerID:e,timestamp:Date.now(),error:t instanceof Error?t.message:String(t)}),t}finally{this.#s.delete(s)}return{sessionID:s}}async #c(e){if(!e.documentID)throw Error("Document ID is required");if("incremental"===e.syncMode&&e.mutationJWTs){this.#t.debug("Applying incremental sync",{documentID:e.documentID,mutationCount:e.mutationJWTs.length});let t=await n({db:this.#e,logger:this.#t,mutationJWTs:e.mutationJWTs,skipCapture:!1}),r=t.filter(e=>!e.success);r.length>0&&this.#t.warn("Some mutations failed to replay",{documentID:e.documentID,total:t.length,failed:r.length,errors:r.map(e=>e.error)}),this.#t.info("Replayed incremental mutations",{documentID:e.documentID,total:t.length,succeeded:t.length-r.length})}else if("full"===e.syncMode&&e.fullState){this.#t.debug("Applying full sync",{documentID:e.documentID});let t=await r({db:this.#e,logger:this.#t,documentID:e.documentID,fullState:e.fullState});if(!t.success)throw Error(t.error||"Failed to merge full state");this.#t.info("Applied full state sync",{documentID:e.documentID,merged:t.merged})}else throw Error(`Unknown sync mode: ${e.syncMode}`)}getStatus(e){let t=Array.from(this.#s.values()).filter(t=>!e||t.peerID===e).map(e=>({peerID:e.peerID,startTime:e.startTime,documentsAttempted:e.documentsAttempted,documentsCompleted:e.documentsCompleted})),r={};for(let[t,n]of this.#o.entries())e&&t!==e||(r[t]=n);return{activeSessions:t,lastSyncByPeer:r}}onSyncEvent(e){return this.#n.on("sync",e)}#a(e){this.#n.emit("sync",e).catch(e=>{this.#t.error("Error in sync event listener",{error:e})})}}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kubun/server",
-  "version": "0.4.3",
+  "version": "0.5.0",
   "license": "see LICENSE.md",
   "keywords": [],
   "type": "module",
@@ -15,30 +15,31 @@
   ],
   "sideEffects": false,
   "dependencies": {
-    "@enkaku/async": "^0.12.2",
-    "@enkaku/capability": "^0.12.1",
-    "@enkaku/codec": "^0.12.0",
-    "@enkaku/generator": "^0.12.1",
-    "@enkaku/schema": "^0.12.1",
-    "@enkaku/server": "^0.12.3",
-    "@enkaku/token": "0.12.3",
-    "@enkaku/transport": "0.12.0",
+    "@enkaku/async": "^0.13.0",
+    "@enkaku/capability": "^0.13.0",
+    "@enkaku/codec": "^0.13.0",
+    "@enkaku/event": "^0.13.0",
+    "@enkaku/generator": "^0.13.0",
+    "@enkaku/schema": "^0.13.0",
+    "@enkaku/server": "^0.13.0",
+    "@enkaku/token": "0.13.0",
+    "@enkaku/transport": "0.13.1",
     "graphql": "^16.12.0",
-    "@kubun/client": "^0.4.1",
-    "@kubun/mutation": "^0.4.0",
-    "@kubun/graphql": "^0.4.5",
-    "@kubun/logger": "^0.4.0",
-    "@kubun/protocol": "^0.4.1",
-    "@kubun/db": "^0.4.0",
-    "@kubun/id": "^0.4.0"
+    "@kubun/db": "^0.5.0",
+    "@kubun/graphql": "^0.5.0",
+    "@kubun/mutation": "^0.5.0",
+    "@kubun/client": "^0.5.0",
+    "@kubun/protocol": "^0.5.0",
+    "@kubun/logger": "^0.5.0",
+    "@kubun/id": "^0.5.0"
   },
   "devDependencies": {
     "@databases/pg-test": "^3.1.2",
-    "@enkaku/stream": "^0.12.1",
-    "@kubun/db-postgres": "^0.4.0",
-    "@kubun/db-sqlite": "^0.4.0",
-    "@kubun/scalars": "^0.4.0",
-    "@kubun/test-utils": "^0.4.0"
+    "@enkaku/stream": "^0.13.0",
+    "@kubun/db-sqlite": "^0.5.0",
+    "@kubun/db-postgres": "^0.5.0",
+    "@kubun/test-utils": "^0.5.0",
+    "@kubun/scalars": "^0.5.0"
   },
   "scripts": {
     "build:clean": "del lib",

package/lib/data/access-control.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"access-control.d.ts","sourceRoot":"","sources":["../../src/data/access-control.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAEnD,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;CAClC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,KAAK,CAAC,EAAE,UAAU,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,kBAAkB,EAAE;QAClB,IAAI,EAAE,YAAY,GAAG,QAAQ,GAAG,cAAc,CAAA;QAC9C,KAAK,EAAE,YAAY,GAAG,cAAc,CAAA;KACrC,CAAA;CACF,CAAA;AAED,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,EAAE,YAAY,EACjB,cAAc,EAAE,MAAM,GAAG,OAAO,KAC7B,OAAO,CAAC,OAAO,CAAC,CAAA;AAErB;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,GAAG,GAAG,iBAAiB,GAAG,IAAI,CAiBlF;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAMtD;AAaD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GAAG,OAAO,EAChC,EAAE,EAAE,OAAO,EACX,YAAY,EAAE,kBAAkB,GAC/B,OAAO,CAAC,UAAU,CAAC,CA4BrB;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,GAAG,OAAO,EAChC,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAC/B,OAAO,CAAC,OAAO,CAAC,CAoClB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,GAAG,OAAO,EAChC,EAAE,EAAE,OAAO,EACX,YAAY,EAAE,kBAAkB,EAChC,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAC/B,OAAO,CAAC,OAAO,CAAC,CA+DlB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,EAC3C,EAAE,EAAE,OAAO,EACX,YAAY,EAAE,kBAAkB,GAC/B,aAAa,CAIf"}

package/lib/data/graphql.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"graphql.d.ts","sourceRoot":"","sources":["../../src/data/graphql.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,KAAK,OAAO,EAA+C,MAAM,gBAAgB,CAAA;AAC1F,OAAO,KAAK,EAAgB,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACjE,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,aAAa,EAElB,KAAK,iBAAiB,EAEvB,MAAM,SAAS,CAAA;AAEhB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAQxD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,OAAO,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAC/C,aAAa,CAAC,EAAE,aAAa,CAAA;CAC9B,CAAA;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAgG5D;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,gBAAgB,CAAA;IACzB,MAAM,EAAE,aAAa,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,iBAAiB,CAAA;IACvB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC,CAAA;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,GAAG,aAAa,CAiB5E"}

package/lib/data/mutations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mutations.d.ts","sourceRoot":"","sources":["../../src/data/mutations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAExC,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAC9E,OAAO,EAAyB,KAAK,YAAY,EAAoB,MAAM,iBAAiB,CAAA;AAE5F,OAAO,EAAE,KAAK,kBAAkB,EAAgB,MAAM,qBAAqB,CAAA;AAI3E,wBAAsB,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAI9F;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE;IACN,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,MAAM,GAAG,OAAO,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;CAClC,EACD,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE;IACN,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAA;CACzC,EACD,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE;IACN,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,GAAG,OAAO,CAAA;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;CAClC,EACD,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;GAEG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE;IACN,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAA;CACzC,EACD,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAGD,YAAY,EAAE,kBAAkB,EAAE,CAAA"}

package/lib/handlers/document.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/handlers/document.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAEvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEtD,wBAAgB,cAAc,CAC5B,cAAc,EAAE,oBAAoB,GACnC,iBAAiB,CAAC,gBAAgB,CAAC,CA8BrC"}

package/lib/handlers/graph.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/handlers/graph.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAKvD,OAAO,KAAK,EAIV,aAAa,EACd,MAAM,iBAAiB,CAAA;AAexB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAUtD,wBAAgB,cAAc,CAC5B,cAAc,EAAE,oBAAoB,GACnC,iBAAiB,CAAC,aAAa,CAAC,CAqKlC"}

package/lib/handlers/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/handlers/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAI/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEtD,MAAM,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;AAElD,wBAAgB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,QAAQ,CAKrE"}

package/lib/handlers/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/handlers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAE3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAEnE,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,kBAAkB,EAAE,kBAAkB,CAAA;CACvC,CAAA"}

package/lib/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAAE,KAAK,kBAAkB,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAA"}

package/lib/server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAS,MAAM,gBAAgB,CAAA;AAEnD,OAAO,EAAE,KAAK,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC9D,OAAO,EAAE,KAAK,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAkB,KAAK,MAAM,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,KAAK,EAAiB,QAAQ,EAAiB,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAI9F,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IAChD,EAAE,EAAE,OAAO,GAAG,QAAQ,CAAA;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,kBAAkB,CAAC,EAAE;QACnB,IAAI,CAAC,EAAE,YAAY,GAAG,QAAQ,GAAG,cAAc,CAAA;QAC/C,KAAK,CAAC,EAAE,YAAY,GAAG,cAAc,CAAA;KACtC,CAAA;CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,UAAU,GAAG,WAAW,CAAC,GAAG;IAC9E,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,CAAA;AAED,qBAAa,WAAW;;gBAWV,MAAM,EAAE,YAAY;IAmBhC,IAAI,EAAE,IAAI,OAAO,CAEhB;IAED,IAAI,kBAAkB;cA3Bd,YAAY,GAAG,QAAQ,GAAG,cAAc;eACvC,YAAY,GAAG,cAAc;MA4BrC;IAED,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,WAAW;IAkBrD,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC;CAU1E"}