@monoes/monomindcli 2.7.5 → 2.7.7

package/dist/src/transfer/store/discovery.js

@@ -1,431 +0,0 @@
-/**
- * IPFS-Based Pattern Discovery
- * Secure discovery mechanism for finding patterns in decentralized environment
- */
-import * as crypto from 'crypto';
-/** Maximum bytes read from any IPFS gateway response to prevent OOM */
-const MAX_DISCOVERY_RESPONSE_BYTES = 10 * 1024 * 1024; // 10 MB
-/**
- * Read a fetch response body with a hard byte cap.
- * Aborts the stream early if the limit is exceeded.
- */
-async function readBodyCapped(response, maxBytes = MAX_DISCOVERY_RESPONSE_BYTES) {
-    const lengthHeader = response.headers.get('content-length');
-    if (lengthHeader) {
-        const declared = parseInt(lengthHeader, 10);
-        if (Number.isFinite(declared) && declared > maxBytes) {
-            throw new Error(`Response too large: ${declared} bytes (max ${maxBytes})`);
-        }
-    }
-    const reader = response.body?.getReader();
-    if (!reader)
-        return '';
-    const chunks = [];
-    let total = 0;
-    while (true) {
-        const { done, value } = await reader.read();
-        if (done)
-            break;
-        if (value) {
-            total += value.byteLength;
-            if (total > maxBytes) {
-                await reader.cancel();
-                throw new Error(`Response too large: exceeded ${maxBytes} bytes`);
-            }
-            chunks.push(value);
-        }
-    }
-    const combined = new Uint8Array(total);
-    let offset = 0;
-    for (const c of chunks) {
-        combined.set(c, offset);
-        offset += c.byteLength;
-    }
-    return new TextDecoder('utf-8').decode(combined);
-}
-import { DEFAULT_STORE_CONFIG, } from './registry.js';
-/**
- * Pattern Store Discovery Service
- * Handles secure discovery of pattern registries via IPFS/IPNS
- */
-export class PatternDiscovery {
-    config;
-    cache;
-    ipnsCache;
-    constructor(config = {}) {
-        this.config = { ...DEFAULT_STORE_CONFIG, ...config };
-        this.cache = new Map();
-        this.ipnsCache = new Map();
-    }
-    /**
-     * Discover and load the pattern registry
-     */
-    async discoverRegistry(registryName) {
-        const targetRegistry = registryName || this.config.defaultRegistry;
-        const knownRegistry = this.config.registries.find(r => r.name === targetRegistry);
-        if (!knownRegistry) {
-            return {
-                success: false,
-                source: targetRegistry,
-                fromCache: false,
-                error: `Unknown registry: ${targetRegistry}`,
-            };
-        }
-        console.log(`[Discovery] Looking for registry: ${knownRegistry.name}`);
-        // Check cache first
-        const cached = this.getCachedRegistry(knownRegistry.ipnsName);
-        if (cached) {
-            console.log(`[Discovery] Found in cache`);
-            return {
-                success: true,
-                registry: cached,
-                source: knownRegistry.name,
-                fromCache: true,
-            };
-        }
-        // Resolve IPNS to get current CID
-        console.log(`[Discovery] Resolving IPNS: ${knownRegistry.ipnsName}`);
-        const resolution = await this.resolveIPNS(knownRegistry.ipnsName);
-        if (!resolution) {
-            return {
-                success: false,
-                source: knownRegistry.name,
-                fromCache: false,
-                error: 'Failed to resolve IPNS name',
-            };
-        }
-        // Fetch registry from IPFS
-        console.log(`[Discovery] Fetching from IPFS: ${resolution.cid}`);
-        const registry = await this.fetchRegistry(resolution.cid, knownRegistry.gateway);
-        if (!registry) {
-            return {
-                success: false,
-                source: knownRegistry.name,
-                fromCache: false,
-                cid: resolution.cid,
-                error: 'Failed to fetch registry from IPFS',
-            };
-        }
-        // Verify registry — fail closed for trusted registries.
-        // Previously this only warn-and-continued, and the `&& registry.registrySignature`
-        // guard meant an attacker could simply omit the signature to bypass verification entirely.
-        if (knownRegistry.trusted) {
-            // Use the real Ed25519 verifier from registry.ts, not the stub length-check below
-            const { verifyRegistrySignature } = await import('./registry.js');
-            const expected = knownRegistry.publicKey;
-            if (!registry.registrySignature || !registry.registryPublicKey) {
-                return {
-                    success: false,
-                    source: knownRegistry.name,
-                    fromCache: false,
-                    cid: resolution.cid,
-                    error: 'Trusted registry response is missing required signature/publicKey fields',
-                };
-            }
-            // Pin the public key to the known registry's expected key
-            if (registry.registryPublicKey !== expected) {
-                return {
-                    success: false,
-                    source: knownRegistry.name,
-                    fromCache: false,
-                    cid: resolution.cid,
-                    error: 'Registry public key does not match pinned trusted key',
-                };
-            }
-            const verified = await verifyRegistrySignature(registry);
-            if (!verified) {
-                return {
-                    success: false,
-                    source: knownRegistry.name,
-                    fromCache: false,
-                    cid: resolution.cid,
-                    error: 'Registry signature verification failed',
-                };
-            }
-        }
-        // Cache the result
-        this.cacheRegistry(knownRegistry.ipnsName, registry);
-        return {
-            success: true,
-            registry,
-            source: knownRegistry.name,
-            fromCache: false,
-            cid: resolution.cid,
-        };
-    }
-    /**
-     * Resolve IPNS name to CID via real IPFS gateway
-     */
-    async resolveIPNS(ipnsName) {
-        // Check cache
-        const cached = this.ipnsCache.get(ipnsName);
-        if (cached && new Date(cached.expiresAt) > new Date()) {
-            return cached;
-        }
-        const gateways = [
-            'https://ipfs.io',
-            'https://dweb.link',
-            'https://cloudflare-ipfs.com',
-        ];
-        for (const gateway of gateways) {
-            try {
-                console.log(`[Discovery] Resolving IPNS via ${gateway}...`);
-                // Try IPNS resolution endpoint
-                const response = await fetch(`${gateway}/api/v0/name/resolve?arg=${ipnsName}`, {
-                    method: 'POST',
-                    signal: AbortSignal.timeout(10000),
-                });
-                if (response.ok) {
-                    const text = await readBodyCapped(response, 64 * 1024); // IPNS resolve is tiny
-                    const data = JSON.parse(text);
-                    const cid = data.Path?.replace('/ipfs/', '') || '';
-                    if (cid) {
-                        const resolution = {
-                            ipnsName,
-                            cid,
-                            resolvedAt: new Date().toISOString(),
-                            expiresAt: new Date(Date.now() + 3600000).toISOString(), // 1 hour
-                        };
-                        if (this.ipnsCache.size >= PatternDiscovery.MAX_IPNS_CACHE && !this.ipnsCache.has(ipnsName)) {
-                            const oldest = this.ipnsCache.keys().next().value;
-                            if (oldest !== undefined)
-                                this.ipnsCache.delete(oldest);
-                        }
-                        this.ipnsCache.set(ipnsName, resolution);
-                        console.log(`[Discovery] Resolved IPNS to CID: ${cid}`);
-                        return resolution;
-                    }
-                }
-                // Fallback: Try fetching content directly via IPNS gateway URL
-                const ipnsResponse = await fetch(`${gateway}/ipns/${ipnsName}`, {
-                    method: 'HEAD',
-                    signal: AbortSignal.timeout(10000),
-                    redirect: 'follow',
-                });
-                if (ipnsResponse.ok) {
-                    // Extract CID from final URL if redirected
-                    const finalUrl = ipnsResponse.url;
-                    const cidMatch = finalUrl.match(/\/ipfs\/([a-zA-Z0-9]+)/);
-                    if (cidMatch) {
-                        const cid = cidMatch[1];
-                        const resolution = {
-                            ipnsName,
-                            cid,
-                            resolvedAt: new Date().toISOString(),
-                            expiresAt: new Date(Date.now() + 3600000).toISOString(),
-                        };
-                        if (this.ipnsCache.size >= PatternDiscovery.MAX_IPNS_CACHE && !this.ipnsCache.has(ipnsName)) {
-                            const oldest = this.ipnsCache.keys().next().value;
-                            if (oldest !== undefined)
-                                this.ipnsCache.delete(oldest);
-                        }
-                        this.ipnsCache.set(ipnsName, resolution);
-                        console.log(`[Discovery] Resolved IPNS via redirect to CID: ${cid}`);
-                        return resolution;
-                    }
-                }
-            }
-            catch (error) {
-                console.warn(`[Discovery] IPNS resolution via ${gateway} failed:`, error);
-                // Continue to next gateway
-            }
-        }
-        // Fallback: Generate deterministic CID for well-known registries
-        console.warn(`⚠ [Discovery] OFFLINE MODE - Could not resolve IPNS: ${ipnsName}`);
-        console.warn(`⚠ [Discovery] Using built-in fallback registry (may be outdated)`);
-        const fallbackCid = this.generateFallbackCID(ipnsName);
-        const resolution = {
-            ipnsName,
-            cid: fallbackCid,
-            resolvedAt: new Date().toISOString(),
-            expiresAt: new Date(Date.now() + 3600000).toISOString(),
-        };
-        this.ipnsCache.set(ipnsName, resolution);
-        return resolution;
-    }
-    /**
-     * Generate deterministic fallback CID for offline/demo mode
-     */
-    generateFallbackCID(input) {
-        const hash = crypto.createHash('sha256').update(input + 'registry').digest();
-        const prefix = 'bafybei';
-        const base32Chars = 'abcdefghijklmnopqrstuvwxyz234567';
-        let result = prefix;
-        for (let i = 0; i < 44; i++) {
-            result += base32Chars[hash[i % hash.length] % 32];
-        }
-        return result;
-    }
-    /**
-     * Fetch registry from IPFS gateway
-     */
-    async fetchRegistry(cid, gateway) {
-        const url = `${gateway}/ipfs/${cid}`;
-        console.log(`[Discovery] Fetching: ${url}`);
-        try {
-            const response = await fetch(url, {
-                signal: AbortSignal.timeout(30000),
-            });
-            if (response.ok) {
-                const text = await readBodyCapped(response);
-                try {
-                    const registry = JSON.parse(text);
-                    console.log(`[Discovery] Fetched registry with ${registry.patterns?.length || 0} patterns`);
-                    return registry;
-                }
-                catch {
-                    console.error(`[Discovery] Invalid registry JSON`);
-                }
-            }
-        }
-        catch (error) {
-            console.warn(`[Discovery] Fetch from ${gateway} failed:`, error);
-        }
-        // Try alternative gateways
-        const alternativeGateways = [
-            'https://ipfs.io',
-            'https://dweb.link',
-            'https://cloudflare-ipfs.com',
-            'https://gateway.pinata.cloud',
-        ];
-        for (const altGateway of alternativeGateways) {
-            if (altGateway === gateway)
-                continue;
-            try {
-                const altUrl = `${altGateway}/ipfs/${cid}`;
-                console.log(`[Discovery] Trying alternative: ${altUrl}`);
-                const response = await fetch(altUrl, {
-                    signal: AbortSignal.timeout(15000),
-                });
-                if (response.ok) {
-                    const altText = await readBodyCapped(response);
-                    const registry = JSON.parse(altText);
-                    console.log(`[Discovery] Fetched registry from ${altGateway}`);
-                    return registry;
-                }
-            }
-            catch {
-                // Continue to next gateway
-            }
-        }
-        // Check for GCS-hosted registry
-        try {
-            const { hasGCSCredentials, downloadFromGCS } = await import('../storage/gcs.js');
-            if (hasGCSCredentials()) {
-                const gcsUri = `gs://monomind-patterns/registry/${cid}.json`;
-                console.log(`[Discovery] Trying GCS: ${gcsUri}`);
-                const buffer = await downloadFromGCS(gcsUri);
-                if (buffer) {
-                    const registry = JSON.parse(buffer.toString());
-                    console.log(`[Discovery] Fetched registry from GCS`);
-                    return registry;
-                }
-            }
-        }
-        catch {
-            // GCS not available
-        }
-        // No registry could be reached. Previously this fell back to a built-in
-        // "genesis registry" that invented a pattern with fabricated stats
-        // (1,000 downloads, 5.0 rating, 42 reviews). Return an honest empty
-        // registry instead.
-        console.log(`[Discovery] No registry reachable — transfer store requires a configured registry`);
-        return this.getEmptyRegistry();
-    }
-    /**
-     * Honest empty registry returned when no registry is reachable.
-     * Contains no patterns and no fabricated stats.
-     */
-    getEmptyRegistry() {
-        return {
-            version: '1.0.0',
-            updatedAt: new Date().toISOString(),
-            ipnsName: '',
-            previousCid: undefined,
-            patterns: [],
-            categories: [],
-            authors: [],
-            totalPatterns: 0,
-            totalDownloads: 0,
-            totalAuthors: 0,
-            featured: [],
-            trending: [],
-            newest: [],
-            // No signature — trusted-registry callers must reject this fallback
-            // (the verification path requires `registrySignature` to be present
-            // and verified against a pinned public key).
-        };
-    }
-    /**
-     * Verify registry signature.
-     *
-     * DEPRECATED: Do not use this method. It was a length-only stub. Real
-     * verification must use `verifyRegistrySignature` from registry.ts which
-     * performs Ed25519 verification. This stub is preserved only to avoid
-     * breaking callers that imported it; it now always returns false.
-     */
-    verifyRegistry(_registry, _expectedPublicKey) {
-        // Always return false — the call site at line 117 was already migrated to
-        // the real verifier. Any other caller using this stub is treated as a
-        // verification failure (fail-closed).
-        return false;
-    }
-    /**
-     * Get cached registry
-     */
-    getCachedRegistry(ipnsName) {
-        const cached = this.cache.get(ipnsName);
-        if (cached && cached.expiresAt > Date.now()) {
-            return cached.registry;
-        }
-        return null;
-    }
-    /**
-     * Cache registry
-     */
-    static MAX_REGISTRY_CACHE = 50;
-    static MAX_IPNS_CACHE = 200;
-    cacheRegistry(ipnsName, registry) {
-        if (this.cache.size >= PatternDiscovery.MAX_REGISTRY_CACHE && !this.cache.has(ipnsName)) {
-            const oldest = this.cache.keys().next().value;
-            if (oldest !== undefined)
-                this.cache.delete(oldest);
-        }
-        this.cache.set(ipnsName, {
-            registry,
-            expiresAt: Date.now() + this.config.cacheExpiry,
-        });
-    }
-    /**
-     * Clear cache
-     */
-    clearCache() {
-        this.cache.clear();
-        this.ipnsCache.clear();
-    }
-    /**
-     * List all known registries
-     */
-    listRegistries() {
-        return this.config.registries;
-    }
-    /**
-     * Add a custom registry
-     */
-    addRegistry(registry) {
-        const existing = this.config.registries.findIndex(r => r.name === registry.name);
-        if (existing >= 0) {
-            this.config.registries[existing] = registry;
-        }
-        else {
-            this.config.registries.push(registry);
-        }
-    }
-}
-/**
- * Create discovery service with default config
- */
-export function createDiscoveryService(config) {
-    return new PatternDiscovery(config);
-}
-//# sourceMappingURL=discovery.js.map

package/dist/src/transfer/store/discovery.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../../src/transfer/store/discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,uEAAuE;AACvE,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAE/D;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,QAAkB,EAAE,QAAQ,GAAW,4BAA4B;IAC/F,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5D,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,eAAe,QAAQ,GAAG,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,QAAQ,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC;IAAC,CAAC;IAC5E,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAQD,OAAO,EAEL,oBAAoB,GAErB,MAAM,eAAe,CAAC;AAwBvB;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAc;IACpB,KAAK,CAAgE;IACrE,SAAS,CAA8B;IAE/C,YAAY,MAAM,GAAyB,EAAE;QAC3C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,oBAAoB,EAAE,GAAG,MAAM,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,YAAqB;QAC1C,MAAM,cAAc,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QACnE,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QAElF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,cAAc;gBACtB,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,qBAAqB,cAAc,EAAE;aAC7C,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,qCAAqC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QAEvE,oBAAoB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,aAAa,CAAC,IAAI;gBAC1B,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,OAAO,CAAC,GAAG,CAAC,+BAA+B,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAElE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,aAAa,CAAC,IAAI;gBAC1B,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,6BAA6B;aACrC,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,OAAO,CAAC,GAAG,CAAC,mCAAmC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;QAEjF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,aAAa,CAAC,IAAI;gBAC1B,SAAS,EAAE,KAAK;gBAChB,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,KAAK,EAAE,oCAAoC;aAC5C,CAAC;QACJ,CAAC;QAED,wDAAwD;QACxD,mFAAmF;QACnF,2FAA2F;QAC3F,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YAC1B,kFAAkF;YAClF,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBAC/D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,aAAa,CAAC,IAAI;oBAC1B,SAAS,EAAE,KAAK;oBAChB,GAAG,EAAE,UAAU,CAAC,GAAG;oBACnB,KAAK,EAAE,0EAA0E;iBAClF,CAAC;YACJ,CAAC;YACD,0DAA0D;YAC1D,IAAI,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBAC5C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,aAAa,CAAC,IAAI;oBAC1B,SAAS,EAAE,KAAK;oBAChB,GAAG,EAAE,UAAU,CAAC,GAAG;oBACnB,KAAK,EAAE,uDAAuD;iBAC/D,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,aAAa,CAAC,IAAI;oBAC1B,SAAS,EAAE,KAAK;oBAChB,GAAG,EAAE,UAAU,CAAC,GAAG;oBACnB,KAAK,EAAE,wCAAwC;iBAChD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAErD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,MAAM,EAAE,aAAa,CAAC,IAAI;YAC1B,SAAS,EAAE,KAAK;YAChB,GAAG,EAAE,UAAU,CAAC,GAAG;SACpB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB;QAChC,cAAc;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,iBAAiB;YACjB,mBAAmB;YACnB,6BAA6B;SAC9B,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,kCAAkC,OAAO,KAAK,CAAC,CAAC;gBAE5D,+BAA+B;gBAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,4BAA4B,QAAQ,EAAE,EAAE;oBAC7E,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;iBACnC,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,uBAAuB;oBAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC;oBAClD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;oBAEnD,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,UAAU,GAAmB;4BACjC,QAAQ;4BACR,GAAG;4BACH,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BACpC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS;yBACnE,CAAC;wBAEF,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,gBAAgB,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;4BAClD,IAAI,MAAM,KAAK,SAAS;gCAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;wBAC1D,CAAC;wBACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;wBACzC,OAAO,CAAC,GAAG,CAAC,qCAAqC,GAAG,EAAE,CAAC,CAAC;wBACxD,OAAO,UAAU,CAAC;oBACpB,CAAC;gBACH,CAAC;gBAED,+DAA+D;gBAC/D,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,SAAS,QAAQ,EAAE,EAAE;oBAC9D,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;oBAClC,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;gBAEH,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;oBACpB,2CAA2C;oBAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC;oBAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;oBAC1D,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;wBACxB,MAAM,UAAU,GAAmB;4BACjC,QAAQ;4BACR,GAAG;4BACH,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BACpC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE;yBACxD,CAAC;wBAEF,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,gBAAgB,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;4BAClD,IAAI,MAAM,KAAK,SAAS;gCAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;wBAC1D,CAAC;wBACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;wBACzC,OAAO,CAAC,GAAG,CAAC,kDAAkD,GAAG,EAAE,CAAC,CAAC;wBACrE,OAAO,UAAU,CAAC;oBACpB,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,mCAAmC,OAAO,UAAU,EAAE,KAAK,CAAC,CAAC;gBAC1E,2BAA2B;YAC7B,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,OAAO,CAAC,IAAI,CAAC,wDAAwD,QAAQ,EAAE,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,UAAU,GAAmB;YACjC,QAAQ;YACR,GAAG,EAAE,WAAW;YAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE;SACxD,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,KAAa;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAG,SAAS,CAAC;QACzB,MAAM,WAAW,GAAG,kCAAkC,CAAC;QACvD,IAAI,MAAM,GAAG,MAAM,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,OAAe;QAC9C,MAAM,GAAG,GAAG,GAAG,OAAO,SAAS,GAAG,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;aACnC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC5C,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;oBACrD,OAAO,CAAC,GAAG,CAAC,qCAAqC,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC5F,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,0BAA0B,OAAO,UAAU,EAAE,KAAK,CAAC,CAAC;QACnE,CAAC;QAED,2BAA2B;QAC3B,MAAM,mBAAmB,GAAG;YAC1B,iBAAiB;YACjB,mBAAmB;YACnB,6BAA6B;YAC7B,8BAA8B;SAC/B,CAAC;QAEF,KAAK,MAAM,UAAU,IAAI,mBAAmB,EAAE,CAAC;YAC7C,IAAI,UAAU,KAAK,OAAO;gBAAE,SAAS;YACrC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,GAAG,UAAU,SAAS,GAAG,EAAE,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAC;gBAEzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;oBACnC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;iBACnC,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;oBAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;oBACxD,OAAO,CAAC,GAAG,CAAC,qCAAqC,UAAU,EAAE,CAAC,CAAC;oBAC/D,OAAO,QAAQ,CAAC;gBAClB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC;YACH,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACjF,IAAI,iBAAiB,EAAE,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,mCAAmC,GAAG,OAAO,CAAC;gBAC7D,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAoB,CAAC;oBAClE,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;oBACrD,OAAO,QAAQ,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QAED,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,oBAAoB;QACpB,OAAO,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAC;QACjG,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACjC,CAAC;IAED;;;OAGG;IACK,gBAAgB;QACtB,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,SAAS;YACtB,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,EAAE;YACX,aAAa,EAAE,CAAC;YAChB,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,CAAC;YACf,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,oEAAoE;YACpE,oEAAoE;YACpE,6CAA6C;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,SAA0B,EAAE,kBAA0B;QACnE,0EAA0E;QAC1E,sEAAsE;QACtE,sCAAsC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,QAAgB;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,MAAM,CAAU,kBAAkB,GAAG,EAAE,CAAC;IACxC,MAAM,CAAU,cAAc,GAAG,GAAG,CAAC;IAE7C,aAAa,CAAC,QAAgB,EAAE,QAAyB;QACvD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,gBAAgB,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;YACvB,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;SAChD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAuB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjF,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;CAKF;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA6B;IAClE,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC"}

package/dist/src/transfer/store/download.d.ts

@@ -1,79 +0,0 @@
-/**
- * Pattern Download Service
- * Secure download and verification of patterns from IPFS
- */
-import type { PatternEntry, DownloadOptions, DownloadResult, StoreConfig } from './types.js';
-/**
- * Download progress callback
- */
-export type DownloadProgressCallback = (progress: {
-    bytesDownloaded: number;
-    totalBytes: number;
-    percentage: number;
-}) => void;
-export declare class PatternDownloader {
-    private config;
-    private downloadCache;
-    constructor(config?: Partial<StoreConfig>);
-    /**
-     * Download a pattern from IPFS
-     */
-    downloadPattern(pattern: PatternEntry, options?: DownloadOptions, onProgress?: DownloadProgressCallback): Promise<DownloadResult>;
-    /**
-     * Fetch content from IPFS gateway or GCS
-     */
-    private fetchFromIPFS;
-    /**
-     * Fetch content from Google Cloud Storage
-     */
-    private fetchFromGCS;
-    /**
-     * Verify content checksum
-     */
-    private verifyChecksum;
-    /**
-     * Verify content signature using real Ed25519.
-     *
-     * CRITICAL FIX: Previously this used HMAC-SHA256 keyed with the *public* key —
-     * which is a no-op for security since the key is, by definition, public.
-     * Anyone reading the registry could recompute a valid "signature".
-     * The fallback at the bottom returned true for length>20, which made the
-     * function effectively a length check rather than a signature check.
-     * Now uses @noble/ed25519 verifyAsync, the same library used in publish.ts,
-     * and fails closed on any error.
-     */
-    private verifySignature;
-    /**
-     * Resolve output path for pattern.
-     *
-     * CRITICAL: pattern.name and pattern.version come from registry data fetched
-     * over the network. Without strict validation, an attacker who controls the
-     * registry response can write to arbitrary paths (e.g. ~/.claude/helpers/
-     * hook-handler.cjs) via traversal sequences in pattern.name.
-     */
-    private resolveOutputPath;
-    /**
-     * Import downloaded pattern
-     */
-    private importPattern;
-    /**
-     * Clear download cache
-     */
-    clearCache(): void;
-    /**
-     * Get cache statistics
-     */
-    getCacheStats(): {
-        count: number;
-        totalSize: number;
-    };
-}
-/**
- * Batch download multiple patterns
- */
-export declare function batchDownload(patterns: PatternEntry[], options?: DownloadOptions, config?: Partial<StoreConfig>): Promise<DownloadResult[]>;
-/**
- * Create downloader with default config
- */
-export declare function createDownloader(config?: Partial<StoreConfig>): PatternDownloader;
-//# sourceMappingURL=download.d.ts.map

package/dist/src/transfer/store/download.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"download.d.ts","sourceRoot":"","sources":["../../../../src/transfer/store/download.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,cAAc,EACd,WAAW,EACZ,MAAM,YAAY,CAAC;AAIpB;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,QAAQ,EAAE;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,KAAK,IAAI,CAAC;AA0BX,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAAsD;IAE3E,YAAY,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,EAG5C;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,eAAoB,EAC7B,UAAU,CAAC,EAAE,wBAAwB,GACpC,OAAO,CAAC,cAAc,CAAC,CA+HzB;IAED;;OAEG;YACW,aAAa;IA2G3B;;OAEG;YACW,YAAY;IA+B1B;;OAEG;IACH,OAAO,CAAC,cAAc;IAQtB;;;;;;;;;;OAUG;YACW,eAAe;IA2B7B;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;IA+BzB;;OAEG;YACW,aAAa;IA+B3B;;OAEG;IACH,UAAU,IAAI,IAAI,CAGjB;IAED;;OAEG;IACH,aAAa,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAapD;CACF;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,YAAY,EAAE,EACxB,OAAO,GAAE,eAAoB,EAC7B,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC5B,OAAO,CAAC,cAAc,EAAE,CAAC,CAU3B;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,iBAAiB,CAEjF"}