@nmshd/transport 1.0.0

package/dist/modules/secrets/SecretController.js

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretController = exports.SecretBaseKeyType = void 0;
+const ts_serval_1 = require("@js-soft/ts-serval");
+const crypto_1 = require("@nmshd/crypto");
+const core_1 = require("../../core");
+const DbCollectionNames_1 = require("../../core/DbCollectionNames");
+const TransportController_1 = require("../../core/TransportController");
+const DeviceSecretController_1 = require("../devices/DeviceSecretController");
+const SecretContainerCipher_1 = require("./data/SecretContainerCipher");
+const SecretContainerPlain_1 = require("./data/SecretContainerPlain");
+var SecretBaseKeyType;
+(function (SecretBaseKeyType) {
+    SecretBaseKeyType["Random"] = "random";
+    SecretBaseKeyType["Password"] = "password";
+    SecretBaseKeyType["External"] = "external";
+})(SecretBaseKeyType = exports.SecretBaseKeyType || (exports.SecretBaseKeyType = {}));
+/**
+ * The SecretController which acts as a single touchpoint to access any secret within the runtime.
+ * Each access can be audited.
+ */
+class SecretController extends TransportController_1.TransportController {
+    constructor(parent, name = TransportController_1.ControllerName.Secret) {
+        super(name, parent);
+        this.nonce = 0;
+    }
+    async init() {
+        await super.init();
+        this.secrets = await this.parent.getSynchronizedCollection(DbCollectionNames_1.DbCollectionNames.Secrets);
+        const lastNonce = await this.parent.info.get(SecretController.secretNonceKey);
+        if (lastNonce) {
+            this.nonce = lastNonce;
+        }
+        return this;
+    }
+    async storeSecret(secret, name, description = "", validTo) {
+        const plainString = secret.serialize();
+        const plainBuffer = crypto_1.CoreBuffer.fromUtf8(plainString);
+        const nonce = await this.increaseNonce();
+        const encryptionKey = await core_1.CoreCrypto.deriveKeyFromBase(await this.getBaseKey(), nonce, SecretController.secretContext);
+        const cipher = await core_1.CoreCrypto.encrypt(plainBuffer, encryptionKey);
+        const createdAt = core_1.CoreDate.utc();
+        const secretContainerInterface = {
+            cipher: cipher,
+            createdAt: createdAt,
+            name: name,
+            description: description,
+            id: await core_1.TransportIds.secret.generate(),
+            nonce: nonce,
+            validFrom: createdAt,
+            validTo: validTo,
+            active: true
+        };
+        const container = await SecretContainerCipher_1.SecretContainerCipher.from(secretContainerInterface);
+        this.log.trace(`Created secret id:${container.id} name:${container.name} on ${container.createdAt.toISOString()}.`);
+        await this.secrets.create(container);
+        return container;
+    }
+    async loadSecretsByName(name) {
+        const secrets = await this.secrets.find({ name: name });
+        const plainSecrets = [];
+        for (const secretObj of secrets) {
+            const secret = await SecretContainerCipher_1.SecretContainerCipher.from(secretObj);
+            const plainSecret = await this.loadSecretById(secret.id);
+            if (plainSecret) {
+                plainSecrets.push(plainSecret);
+            }
+        }
+        return plainSecrets;
+    }
+    async loadActiveSecretByName(name) {
+        const secret = await this.getActiveSecretContainerByName(name);
+        if (!secret)
+            return;
+        const plainSecret = await this.loadSecretById(secret.id);
+        return plainSecret;
+    }
+    async getActiveSecretContainerByName(name) {
+        const secrets = await this.secrets.find({ name: name, active: true });
+        if (!secrets.length)
+            return;
+        if (secrets.length > 1) {
+            this.log.warn(`More than one active secret has been found for secret name '${name}'.`);
+        }
+        const secret = await SecretContainerCipher_1.SecretContainerCipher.from(secrets[0]);
+        return secret;
+    }
+    async succeedSecretWithName(secret, name, description = "", validTo) {
+        const oldSecret = await this.secrets.findOne({ name: name, active: true });
+        if (oldSecret) {
+            const updatedOldSecret = await SecretContainerCipher_1.SecretContainerCipher.from(oldSecret);
+            updatedOldSecret.validTo = core_1.CoreDate.utc();
+            updatedOldSecret.active = false;
+            await this.secrets.update(oldSecret, updatedOldSecret);
+        }
+        return await this.storeSecret(secret, name, description, validTo);
+    }
+    async decryptSecret(secret) {
+        const baseKey = await this.getBaseKey();
+        const decryptionKey = await core_1.CoreCrypto.deriveKeyFromBase(baseKey, secret.nonce ? secret.nonce : 0, SecretController.secretContext);
+        const plainBuffer = await core_1.CoreCrypto.decrypt(secret.cipher, decryptionKey);
+        const plainString = plainBuffer.toUtf8();
+        const decryptedSecret = await ts_serval_1.SerializableAsync.deserializeUnknown(plainString);
+        const plainSecret = await SecretContainerPlain_1.SecretContainerPlain.from({
+            id: secret.id,
+            createdAt: secret.createdAt,
+            description: secret.description,
+            nonce: secret.nonce,
+            name: secret.name,
+            secret: decryptedSecret,
+            active: secret.active,
+            validFrom: secret.validFrom,
+            validTo: secret.validTo
+        });
+        this.log.trace(`Accessed secret id:${plainSecret.id} name:${plainSecret.name} on ${core_1.CoreDate.utc().toISOString()}.`);
+        return plainSecret;
+    }
+    async loadSecretById(id) {
+        const secretObj = await this.secrets.findOne({ id: id.toString() });
+        if (!secretObj)
+            return;
+        const secret = await SecretContainerCipher_1.SecretContainerCipher.from(secretObj);
+        return await this.decryptSecret(secret);
+    }
+    async deleteSecretById(id) {
+        const secretObj = await this.secrets.findOne({ id: id.toString() });
+        if (!secretObj) {
+            return false;
+        }
+        await this.secrets.delete({ id: id });
+        this.log.trace(`Deleted secret id:${secretObj.id} name:${secretObj.name} on ${core_1.CoreDate.utc().toISOString()}.`);
+        return true;
+    }
+    async createExchangeKey(name = "", description = "", validTo) {
+        const exchangeKeypair = await core_1.CoreCrypto.generateExchangeKeypair();
+        const secretContainer = await this.storeSecret(exchangeKeypair, name, description, validTo);
+        // TODO: JSSNMSHDD-2485 (wipe private key)
+        return [exchangeKeypair.publicKey, secretContainer];
+    }
+    async getBaseKey() {
+        if (this.baseKey) {
+            return this.baseKey;
+        }
+        const baseKey = await this.parent.activeDevice.secrets.loadSecret(DeviceSecretController_1.DeviceSecretType.SharedSecretBaseKey);
+        if (baseKey) {
+            this.baseKey = baseKey.secret;
+        }
+        else {
+            throw core_1.TransportErrors.general
+                .recordNotFound(crypto_1.CryptoSecretKey, DeviceSecretController_1.DeviceSecretType.SharedSecretBaseKey)
+                .logWith(this._log);
+        }
+        return this.baseKey;
+    }
+    async increaseNonce() {
+        const nextNonce = this.nonce++;
+        await this.parent.info.set(SecretController.secretNonceKey, nextNonce);
+        return nextNonce;
+    }
+}
+exports.SecretController = SecretController;
+/**
+ * Context of the secret derivation function. Doesn't have to be secret.
+ * Must be 8 characters long.
+ */
+SecretController.secretContext = "SECRET01";
+SecretController.secretNonceKey = "secret_lastnonce";
+//# sourceMappingURL=SecretController.js.map

package/dist/modules/secrets/SecretController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretController.js","sourceRoot":"","sources":["../../../src/modules/secrets/SecretController.ts"],"names":[],"mappings":";;;AAAA,kDAAsD;AACtD,0CAWsB;AACtB,qCAAwF;AACxF,oEAAgE;AAChE,wEAAoF;AAEpF,8EAAoE;AAEpE,wEAA4F;AAC5F,sEAAkE;AAElE,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IACzB,sCAAiB,CAAA;IACjB,0CAAqB,CAAA;IACrB,0CAAqB,CAAA;AACzB,CAAC,EAJW,iBAAiB,GAAjB,yBAAiB,KAAjB,yBAAiB,QAI5B;AAED;;;GAGG;AACH,MAAa,gBAAiB,SAAQ,yCAAmB;IAerD,YAAmB,MAAyB,EAAE,OAAuB,oCAAc,CAAC,MAAM;QACtF,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAPf,UAAK,GAAG,CAAC,CAAA;IAQjB,CAAC;IAEM,KAAK,CAAC,IAAI;QACb,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAElB,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,qCAAiB,CAAC,OAAO,CAAC,CAAA;QACrF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAA;QAC7E,IAAI,SAAS,EAAE;YACX,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;SACzB;QACD,OAAO,IAAI,CAAA;IACf,CAAC;IAEM,KAAK,CAAC,WAAW,CACpB,MAOqB,EACrB,IAAY,EACZ,WAAW,GAAG,EAAE,EAChB,OAAkB;QAElB,MAAM,WAAW,GAAW,MAAM,CAAC,SAAS,EAAE,CAAA;QAC9C,MAAM,WAAW,GAAe,mBAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAEhE,MAAM,KAAK,GAAW,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;QAChD,MAAM,aAAa,GAAoB,MAAM,iBAAU,CAAC,iBAAiB,CACrE,MAAM,IAAI,CAAC,UAAU,EAAE,EACvB,KAAK,EACL,gBAAgB,CAAC,aAAa,CACjC,CAAA;QAED,MAAM,MAAM,GAAiB,MAAM,iBAAU,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;QACjF,MAAM,SAAS,GAAa,eAAQ,CAAC,GAAG,EAAE,CAAA;QAC1C,MAAM,wBAAwB,GAA2B;YACrD,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,SAAS;YACpB,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,WAAW;YACxB,EAAE,EAAE,MAAM,mBAAY,CAAC,MAAM,CAAC,QAAQ,EAAE;YACxC,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,IAAI;SACf,CAAA;QACD,MAAM,SAAS,GAA0B,MAAM,6CAAqB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;QAEnG,IAAI,CAAC,GAAG,CAAC,KAAK,CACV,qBAAqB,SAAS,CAAC,EAAE,SAAS,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CACtG,CAAA;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAEpC,OAAO,SAAS,CAAA;IACpB,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,IAAY;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,MAAM,YAAY,GAA2B,EAAE,CAAA;QAC/C,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE;YAC7B,MAAM,MAAM,GAA0B,MAAM,6CAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACjF,MAAM,WAAW,GAAqC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC1F,IAAI,WAAW,EAAE;gBACb,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;aACjC;SACJ;QACD,OAAO,YAAY,CAAA;IACvB,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,IAAY;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAA;QAC9D,IAAI,CAAC,MAAM;YAAE,OAAM;QAEnB,MAAM,WAAW,GAAqC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAE1F,OAAO,WAAW,CAAA;IACtB,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAAC,IAAY;QACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACrE,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAM;QAE3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;YACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,+DAA+D,IAAI,IAAI,CAAC,CAAA;SACzF;QAED,MAAM,MAAM,GAA0B,MAAM,6CAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;QAClF,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAC9B,MAOqB,EACrB,IAAY,EACZ,WAAW,GAAG,EAAE,EAChB,OAAkB;QAElB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1E,IAAI,SAAS,EAAE;YACX,MAAM,gBAAgB,GAAG,MAAM,6CAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACpE,gBAAgB,CAAC,OAAO,GAAG,eAAQ,CAAC,GAAG,EAAE,CAAA;YACzC,gBAAgB,CAAC,MAAM,GAAG,KAAK,CAAA;YAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA;SACzD;QACD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IACrE,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAA6B;QACrD,MAAM,OAAO,GAAoB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACxD,MAAM,aAAa,GAAoB,MAAM,iBAAU,CAAC,iBAAiB,CACrE,OAAO,EACP,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC/B,gBAAgB,CAAC,aAAa,CACjC,CAAA;QACD,MAAM,WAAW,GAAe,MAAM,iBAAU,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;QACtF,MAAM,WAAW,GAAW,WAAW,CAAC,MAAM,EAAE,CAAA;QAChD,MAAM,eAAe,GAAG,MAAM,6BAAiB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAA;QAE/E,MAAM,WAAW,GAAyB,MAAM,2CAAoB,CAAC,IAAI,CAAC;YACtE,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;SAC1B,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,KAAK,CACV,sBAAsB,WAAW,CAAC,EAAE,SAAS,WAAW,CAAC,IAAI,OAAO,eAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,CACtG,CAAA;QACD,OAAO,WAAW,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,EAAU;QAClC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QACnE,IAAI,CAAC,SAAS;YAAE,OAAM;QACtB,MAAM,MAAM,GAA0B,MAAM,6CAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAEjF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IAC3C,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,EAAU;QACpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QACnE,IAAI,CAAC,SAAS,EAAE;YACZ,OAAO,KAAK,CAAA;SACf;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QACrC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,qBAAqB,SAAS,CAAC,EAAE,SAAS,SAAS,CAAC,IAAI,OAAO,eAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QAC9G,OAAO,IAAI,CAAA;IACf,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAC1B,IAAI,GAAG,EAAE,EACT,WAAW,GAAG,EAAE,EAChB,OAAkB;QAElB,MAAM,eAAe,GAA0B,MAAM,iBAAU,CAAC,uBAAuB,EAAE,CAAA;QACzF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;QAC3F,0CAA0C;QAC1C,OAAO,CAAC,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IACvD,CAAC;IAEO,KAAK,CAAC,UAAU;QACpB,IAAI,IAAI,CAAC,OAAO,EAAE;YACd,OAAO,IAAI,CAAC,OAAO,CAAA;SACtB;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,yCAAgB,CAAC,mBAAmB,CAAC,CAAA;QAEvG,IAAI,OAAO,EAAE;YACT,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAyB,CAAA;SACnD;aAAM;YACH,MAAM,sBAAe,CAAC,OAAO;iBACxB,cAAc,CAAC,wBAAe,EAAE,yCAAgB,CAAC,mBAAmB,CAAC;iBACrE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;SAC1B;QAED,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;IAEO,KAAK,CAAC,aAAa;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;QACtE,OAAO,SAAS,CAAA;IACpB,CAAC;;AAvNL,4CAwNC;AAvNG;;;GAGG;AACqB,8BAAa,GAAW,UAAU,CAAA;AAEnC,+BAAc,GAAW,kBAAkB,CAAA"}

package/dist/modules/secrets/data/SecretContainerCipher.d.ts

@@ -0,0 +1,25 @@
+import { CryptoCipher, ICryptoCipher } from "@nmshd/crypto";
+import { CoreSynchronizable, ICoreSynchronizable } from "../../../core/CoreSynchronizable";
+import { CoreDate, ICoreDate } from "../../../core/types/CoreDate";
+export interface ISecretContainerCipher extends ICoreSynchronizable {
+    name: string;
+    description?: string;
+    createdAt: ICoreDate;
+    nonce?: number;
+    validFrom: ICoreDate;
+    validTo?: ICoreDate;
+    active: boolean;
+    cipher: ICryptoCipher;
+}
+export declare class SecretContainerCipher extends CoreSynchronizable implements ISecretContainerCipher {
+    readonly technicalProperties: string[];
+    name: string;
+    description: string;
+    createdAt: CoreDate;
+    validFrom: CoreDate;
+    validTo: CoreDate;
+    nonce?: number;
+    active: boolean;
+    cipher: CryptoCipher;
+    static from(value: ISecretContainerCipher): Promise<SecretContainerCipher>;
+}

package/dist/modules/secrets/data/SecretContainerCipher.js

@@ -0,0 +1,87 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var SecretContainerCipher_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretContainerCipher = void 0;
+const ts_serval_1 = require("@js-soft/ts-serval");
+const crypto_1 = require("@nmshd/crypto");
+const ts_simple_nameof_1 = require("ts-simple-nameof");
+const CoreSynchronizable_1 = require("../../../core/CoreSynchronizable");
+const CoreDate_1 = require("../../../core/types/CoreDate");
+let SecretContainerCipher = SecretContainerCipher_1 = class SecretContainerCipher extends CoreSynchronizable_1.CoreSynchronizable {
+    constructor() {
+        super(...arguments);
+        this.technicalProperties = [
+            "@type",
+            "@context",
+            (0, ts_simple_nameof_1.nameof)((x) => x.name),
+            (0, ts_simple_nameof_1.nameof)((x) => x.description),
+            (0, ts_simple_nameof_1.nameof)((x) => x.createdAt),
+            (0, ts_simple_nameof_1.nameof)((x) => x.validFrom),
+            (0, ts_simple_nameof_1.nameof)((x) => x.validTo),
+            (0, ts_simple_nameof_1.nameof)((x) => x.nonce),
+            (0, ts_simple_nameof_1.nameof)((x) => x.active),
+            (0, ts_simple_nameof_1.nameof)((x) => x.cipher)
+        ];
+        // eslint-disable-next-line @typescript-eslint/no-inferrable-types
+        this.name = "";
+        // eslint-disable-next-line @typescript-eslint/no-inferrable-types
+        this.description = "";
+    }
+    static async from(value) {
+        return await super.fromT(value, SecretContainerCipher_1);
+    }
+};
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)({ nullable: true }),
+    __metadata("design:type", String)
+], SecretContainerCipher.prototype, "name", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)({ nullable: true }),
+    __metadata("design:type", String)
+], SecretContainerCipher.prototype, "description", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)(),
+    __metadata("design:type", CoreDate_1.CoreDate)
+], SecretContainerCipher.prototype, "createdAt", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)(),
+    __metadata("design:type", CoreDate_1.CoreDate)
+], SecretContainerCipher.prototype, "validFrom", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)({ nullable: true }),
+    __metadata("design:type", CoreDate_1.CoreDate)
+], SecretContainerCipher.prototype, "validTo", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)({ nullable: true }),
+    __metadata("design:type", Number)
+], SecretContainerCipher.prototype, "nonce", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)(),
+    __metadata("design:type", Boolean)
+], SecretContainerCipher.prototype, "active", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)(),
+    __metadata("design:type", crypto_1.CryptoCipher)
+], SecretContainerCipher.prototype, "cipher", void 0);
+SecretContainerCipher = SecretContainerCipher_1 = __decorate([
+    (0, ts_serval_1.type)("SecretContainerCipher")
+], SecretContainerCipher);
+exports.SecretContainerCipher = SecretContainerCipher;
+//# sourceMappingURL=SecretContainerCipher.js.map

package/dist/modules/secrets/data/SecretContainerCipher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretContainerCipher.js","sourceRoot":"","sources":["../../../../src/modules/secrets/data/SecretContainerCipher.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,kDAA8D;AAC9D,0CAA2D;AAC3D,uDAAyC;AACzC,yEAA0F;AAC1F,2DAAkE;AAclE,IAAa,qBAAqB,6BAAlC,MAAa,qBAAsB,SAAQ,uCAAkB;IAA7D;;QACoB,wBAAmB,GAAG;YAClC,OAAO;YACP,UAAU;YACV,IAAA,yBAAM,EAAwB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5C,IAAA,yBAAM,EAAwB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YACnD,IAAA,yBAAM,EAAwB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACjD,IAAA,yBAAM,EAAwB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACjD,IAAA,yBAAM,EAAwB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,IAAA,yBAAM,EAAwB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YAC7C,IAAA,yBAAM,EAAwB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9C,IAAA,yBAAM,EAAwB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;SACjD,CAAA;QAED,kEAAkE;QAG3D,SAAI,GAAW,EAAE,CAAA;QAExB,kEAAkE;QAG3D,gBAAW,GAAW,EAAE,CAAA;IA6BnC,CAAC;IAHU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAA6B;QAClD,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,uBAAqB,CAAC,CAAA;IAC1D,CAAC;CACJ,CAAA;AAlCG;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDACL;AAKxB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DACE;AAI/B;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,GAAE;8BACO,mBAAQ;wDAAA;AAI1B;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,GAAE;8BACO,mBAAQ;wDAAA;AAI1B;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BACb,mBAAQ;sDAAA;AAIxB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACR;AAIrB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,GAAE;;qDACW;AAItB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,GAAE;8BACI,qBAAY;qDAAA;AA9ClB,qBAAqB;IADjC,IAAA,gBAAI,EAAC,uBAAuB,CAAC;GACjB,qBAAqB,CAmDjC;AAnDY,sDAAqB"}

package/dist/modules/secrets/data/SecretContainerPlain.d.ts

@@ -0,0 +1,25 @@
+import { SerializableAsync } from "@js-soft/ts-serval";
+import { CoreDate, CoreId, CoreSerializableAsync, ICoreDate, ICoreId, ICoreSerializableAsync } from "../../../core";
+export interface ISecretContainerPlain extends ICoreSerializableAsync {
+    id: ICoreId;
+    name: string;
+    description?: string;
+    createdAt: ICoreDate;
+    nonce?: number;
+    validFrom: ICoreDate;
+    validTo?: ICoreDate;
+    active: boolean;
+    secret: ICoreSerializableAsync;
+}
+export declare class SecretContainerPlain extends CoreSerializableAsync implements ISecretContainerPlain {
+    id: CoreId;
+    name: string;
+    description: string;
+    createdAt: CoreDate;
+    validFrom: CoreDate;
+    validTo: CoreDate;
+    nonce?: number;
+    active: boolean;
+    secret: SerializableAsync;
+    static from(value: ISecretContainerPlain): Promise<SecretContainerPlain>;
+}

package/dist/modules/secrets/data/SecretContainerPlain.js

@@ -0,0 +1,76 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var SecretContainerPlain_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretContainerPlain = void 0;
+/* eslint-disable @typescript-eslint/no-inferrable-types */
+const ts_serval_1 = require("@js-soft/ts-serval");
+const core_1 = require("../../../core");
+let SecretContainerPlain = SecretContainerPlain_1 = class SecretContainerPlain extends core_1.CoreSerializableAsync {
+    constructor() {
+        super(...arguments);
+        this.name = "";
+        this.description = "";
+    }
+    static async from(value) {
+        return await super.fromT(value, SecretContainerPlain_1);
+    }
+};
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)(),
+    __metadata("design:type", core_1.CoreId)
+], SecretContainerPlain.prototype, "id", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)({ nullable: true }),
+    __metadata("design:type", String)
+], SecretContainerPlain.prototype, "name", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)({ nullable: true }),
+    __metadata("design:type", String)
+], SecretContainerPlain.prototype, "description", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)(),
+    __metadata("design:type", core_1.CoreDate)
+], SecretContainerPlain.prototype, "createdAt", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)(),
+    __metadata("design:type", core_1.CoreDate)
+], SecretContainerPlain.prototype, "validFrom", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)({ nullable: true }),
+    __metadata("design:type", core_1.CoreDate)
+], SecretContainerPlain.prototype, "validTo", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)({ nullable: true }),
+    __metadata("design:type", Number)
+], SecretContainerPlain.prototype, "nonce", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)(),
+    __metadata("design:type", Boolean)
+], SecretContainerPlain.prototype, "active", void 0);
+__decorate([
+    (0, ts_serval_1.serialize)(),
+    (0, ts_serval_1.validate)(),
+    __metadata("design:type", ts_serval_1.SerializableAsync)
+], SecretContainerPlain.prototype, "secret", void 0);
+SecretContainerPlain = SecretContainerPlain_1 = __decorate([
+    (0, ts_serval_1.type)("SecretContainerPlain")
+], SecretContainerPlain);
+exports.SecretContainerPlain = SecretContainerPlain;
+//# sourceMappingURL=SecretContainerPlain.js.map

package/dist/modules/secrets/data/SecretContainerPlain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretContainerPlain.js","sourceRoot":"","sources":["../../../../src/modules/secrets/data/SecretContainerPlain.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2DAA2D;AAC3D,kDAAiF;AACjF,wCAAmH;AAenH,IAAa,oBAAoB,4BAAjC,MAAa,oBAAqB,SAAQ,4BAAqB;IAA/D;;QAOW,SAAI,GAAW,EAAE,CAAA;QAIjB,gBAAW,GAAW,EAAE,CAAA;IA6BnC,CAAC;IAHU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAA4B;QACjD,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,sBAAoB,CAAC,CAAA;IACzD,CAAC;CACJ,CAAA;AArCG;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,GAAE;8BACA,aAAM;gDAAA;AAIjB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDACL;AAIxB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACE;AAI/B;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,GAAE;8BACO,eAAQ;uDAAA;AAI1B;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,GAAE;8BACO,eAAQ;uDAAA;AAI1B;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BACb,eAAQ;qDAAA;AAIxB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDACR;AAIrB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,GAAE;;oDACW;AAItB;IAFC,IAAA,qBAAS,GAAE;IACX,IAAA,oBAAQ,GAAE;8BACI,6BAAiB;oDAAA;AAnCvB,oBAAoB;IADhC,IAAA,gBAAI,EAAC,sBAAsB,CAAC;GAChB,oBAAoB,CAwChC;AAxCY,oDAAoB"}

package/dist/modules/sync/ChangedItems.d.ts

@@ -0,0 +1,9 @@
+import { Message } from "../messages/local/Message";
+import { Relationship } from "../relationships/local/Relationship";
+export declare class ChangedItems {
+    readonly relationships: Relationship[];
+    readonly messages: Message[];
+    constructor(relationships?: Relationship[], messages?: Message[]);
+    addRelationship(relationship: Relationship): void;
+    addMessage(message: Message): void;
+}

package/dist/modules/sync/ChangedItems.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChangedItems = void 0;
+class ChangedItems {
+    constructor(relationships = [], messages = []) {
+        this.relationships = relationships;
+        this.messages = messages;
+    }
+    addRelationship(relationship) {
+        this.relationships.push(relationship);
+    }
+    addMessage(message) {
+        this.messages.push(message);
+    }
+}
+exports.ChangedItems = ChangedItems;
+//# sourceMappingURL=ChangedItems.js.map

package/dist/modules/sync/ChangedItems.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChangedItems.js","sourceRoot":"","sources":["../../../src/modules/sync/ChangedItems.ts"],"names":[],"mappings":";;;AAGA,MAAa,YAAY;IACrB,YAAmC,gBAAgC,EAAE,EAAkB,WAAsB,EAAE;QAA5E,kBAAa,GAAb,aAAa,CAAqB;QAAkB,aAAQ,GAAR,QAAQ,CAAgB;IAAG,CAAC;IAE5G,eAAe,CAAC,YAA0B;QAC7C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACzC,CAAC;IAEM,UAAU,CAAC,OAAgB;QAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC/B,CAAC;CACJ;AAVD,oCAUC"}

package/dist/modules/sync/DatawalletModificationMapper.d.ts

@@ -0,0 +1,7 @@
+import { BackboneDatawalletModification } from "./backbone/BackboneDatawalletModification";
+import { CreateDatawalletModificationsRequestItem } from "./backbone/CreateDatawalletModifications";
+import { DatawalletModification } from "./local/DatawalletModification";
+export declare class DatawalletModificationMapper {
+    static fromBackboneDatawalletModification(backboneDatawalletModification: BackboneDatawalletModification, decryptedPayload: object | undefined): Promise<DatawalletModification>;
+    static toCreateDatawalletModificationsRequestItem(datawalletModification: DatawalletModification, encryptedPayload: string | undefined): CreateDatawalletModificationsRequestItem;
+}

package/dist/modules/sync/DatawalletModificationMapper.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatawalletModificationMapper = void 0;
+const core_1 = require("../../core");
+const DatawalletModification_1 = require("./local/DatawalletModification");
+class DatawalletModificationMapper {
+    static async fromBackboneDatawalletModification(backboneDatawalletModification, decryptedPayload) {
+        let type;
+        switch (backboneDatawalletModification.type) {
+            case "Create":
+                type = DatawalletModification_1.DatawalletModificationType.Create;
+                break;
+            case "Update":
+                type = DatawalletModification_1.DatawalletModificationType.Update;
+                break;
+            case "Delete":
+                type = DatawalletModification_1.DatawalletModificationType.Delete;
+                break;
+            case "CacheChanged":
+                type = DatawalletModification_1.DatawalletModificationType.CacheChanged;
+                break;
+            default:
+                throw new Error("Unsupported DatawalletModificationType '${backboneDatawalletModification.type}'");
+        }
+        let payloadCategory;
+        switch (backboneDatawalletModification.payloadCategory) {
+            case "TechnicalData":
+                payloadCategory = DatawalletModification_1.DatawalletModificationCategory.TechnicalData;
+                break;
+            case "Userdata":
+                payloadCategory = DatawalletModification_1.DatawalletModificationCategory.Userdata;
+                break;
+            case "Metadata":
+                payloadCategory = DatawalletModification_1.DatawalletModificationCategory.Metadata;
+                break;
+            case null:
+                payloadCategory = undefined;
+                break;
+            default:
+                throw new Error(`Unsupported DatawalletModificationCategory '${backboneDatawalletModification.payloadCategory}'`);
+        }
+        return DatawalletModification_1.DatawalletModification.from({
+            localId: await core_1.TransportIds.datawalletModification.generate(),
+            objectIdentifier: core_1.CoreId.from(backboneDatawalletModification.objectIdentifier),
+            payloadCategory: payloadCategory,
+            collection: backboneDatawalletModification.collection,
+            type: type,
+            payload: decryptedPayload
+        });
+    }
+    static toCreateDatawalletModificationsRequestItem(datawalletModification, encryptedPayload) {
+        return {
+            objectIdentifier: datawalletModification.objectIdentifier.toString(),
+            payloadCategory: datawalletModification.payloadCategory,
+            collection: datawalletModification.collection,
+            type: datawalletModification.type,
+            encryptedPayload: encryptedPayload
+        };
+    }
+}
+exports.DatawalletModificationMapper = DatawalletModificationMapper;
+//# sourceMappingURL=DatawalletModificationMapper.js.map

package/dist/modules/sync/DatawalletModificationMapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DatawalletModificationMapper.js","sourceRoot":"","sources":["../../../src/modules/sync/DatawalletModificationMapper.ts"],"names":[],"mappings":";;;AAAA,qCAAiD;AAGjD,2EAIuC;AAEvC,MAAa,4BAA4B;IAC9B,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAClD,8BAA8D,EAC9D,gBAAoC;QAEpC,IAAI,IAAgC,CAAA;QAEpC,QAAQ,8BAA8B,CAAC,IAAI,EAAE;YACzC,KAAK,QAAQ;gBACT,IAAI,GAAG,mDAA0B,CAAC,MAAM,CAAA;gBACxC,MAAK;YACT,KAAK,QAAQ;gBACT,IAAI,GAAG,mDAA0B,CAAC,MAAM,CAAA;gBACxC,MAAK;YACT,KAAK,QAAQ;gBACT,IAAI,GAAG,mDAA0B,CAAC,MAAM,CAAA;gBACxC,MAAK;YACT,KAAK,cAAc;gBACf,IAAI,GAAG,mDAA0B,CAAC,YAAY,CAAA;gBAC9C,MAAK;YACT;gBACI,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAA;SACzG;QAED,IAAI,eAA2D,CAAA;QAE/D,QAAQ,8BAA8B,CAAC,eAAe,EAAE;YACpD,KAAK,eAAe;gBAChB,eAAe,GAAG,uDAA8B,CAAC,aAAa,CAAA;gBAC9D,MAAK;YACT,KAAK,UAAU;gBACX,eAAe,GAAG,uDAA8B,CAAC,QAAQ,CAAA;gBACzD,MAAK;YACT,KAAK,UAAU;gBACX,eAAe,GAAG,uDAA8B,CAAC,QAAQ,CAAA;gBACzD,MAAK;YACT,KAAK,IAAI;gBACL,eAAe,GAAG,SAAS,CAAA;gBAC3B,MAAK;YACT;gBACI,MAAM,IAAI,KAAK,CACX,+CAA+C,8BAA8B,CAAC,eAAe,GAAG,CACnG,CAAA;SACR;QAED,OAAO,+CAAsB,CAAC,IAAI,CAAC;YAC/B,OAAO,EAAE,MAAM,mBAAY,CAAC,sBAAsB,CAAC,QAAQ,EAAE;YAC7D,gBAAgB,EAAE,aAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,gBAAgB,CAAC;YAC9E,eAAe,EAAE,eAAe;YAChC,UAAU,EAAE,8BAA8B,CAAC,UAAU;YACrD,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,gBAAgB;SAC5B,CAAC,CAAA;IACN,CAAC;IAEM,MAAM,CAAC,0CAA0C,CACpD,sBAA8C,EAC9C,gBAAoC;QAEpC,OAAO;YACH,gBAAgB,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,QAAQ,EAAE;YACpE,eAAe,EAAE,sBAAsB,CAAC,eAAe;YACvD,UAAU,EAAE,sBAAsB,CAAC,UAAU;YAC7C,IAAI,EAAE,sBAAsB,CAAC,IAAI;YACjC,gBAAgB,EAAE,gBAAgB;SACrC,CAAA;IACL,CAAC;CACJ;AAnED,oEAmEC"}

package/dist/modules/sync/DatawalletModificationsProcessor.d.ts

@@ -0,0 +1,21 @@
+import { IDatabaseCollectionProvider } from "@js-soft/docdb-access-abstractions";
+import { DatawalletModification } from "./local/DatawalletModification";
+interface ICacheUpdater {
+    updateCache(ids: string[]): Promise<any[]>;
+}
+export declare class DatawalletModificationsProcessor {
+    private readonly collectionProvider;
+    private readonly modifications;
+    private readonly fileCacheUpdater;
+    private readonly messageCacheUpdater;
+    private readonly relationshipTemplateCacheUpdater;
+    private readonly relationshipCacheUpdater;
+    private readonly tokenCacheUpdater;
+    constructor(collectionProvider: IDatabaseCollectionProvider, modifications: DatawalletModification[], fileCacheUpdater: ICacheUpdater, messageCacheUpdater: ICacheUpdater, relationshipTemplateCacheUpdater: ICacheUpdater, relationshipCacheUpdater: ICacheUpdater, tokenCacheUpdater: ICacheUpdater);
+    execute(): Promise<void>;
+    private applyCreations;
+    private applyUpdates;
+    private applyDeletes;
+    private applyCacheChanges;
+}
+export {};

package/dist/modules/sync/DatawalletModificationsProcessor.js

@@ -0,0 +1,111 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatawalletModificationsProcessor = void 0;
+const lodash_1 = __importDefault(require("lodash"));
+const core_1 = require("../../core");
+const DbCollectionNames_1 = require("../../core/DbCollectionNames");
+const DatawalletModification_1 = require("./local/DatawalletModification");
+class DatawalletModificationsProcessor {
+    constructor(collectionProvider, modifications, fileCacheUpdater, messageCacheUpdater, relationshipTemplateCacheUpdater, relationshipCacheUpdater, tokenCacheUpdater) {
+        this.collectionProvider = collectionProvider;
+        this.modifications = modifications;
+        this.fileCacheUpdater = fileCacheUpdater;
+        this.messageCacheUpdater = messageCacheUpdater;
+        this.relationshipTemplateCacheUpdater = relationshipTemplateCacheUpdater;
+        this.relationshipCacheUpdater = relationshipCacheUpdater;
+        this.tokenCacheUpdater = tokenCacheUpdater;
+    }
+    async execute() {
+        const modificationsGroupedByType = lodash_1.default.groupBy(this.modifications, (m) => m.type);
+        await this.applyCreations(modificationsGroupedByType[DatawalletModification_1.DatawalletModificationType.Create]);
+        await this.applyUpdates(modificationsGroupedByType[DatawalletModification_1.DatawalletModificationType.Update]);
+        await this.applyDeletes(modificationsGroupedByType[DatawalletModification_1.DatawalletModificationType.Delete]);
+        await this.applyCacheChanges(modificationsGroupedByType[DatawalletModification_1.DatawalletModificationType.CacheChanged]);
+    }
+    async applyCreations(creations) {
+        if (!creations || creations.length === 0) {
+            return;
+        }
+        const creationsGroupedByObjectIdentifier = lodash_1.default.groupBy(creations, (c) => c.objectIdentifier);
+        for (const objectIdentifier in creationsGroupedByObjectIdentifier) {
+            const currentCreations = creationsGroupedByObjectIdentifier[objectIdentifier];
+            const targetCollection = await this.collectionProvider.getCollection(currentCreations[0].collection);
+            let mergedCreation = { id: objectIdentifier };
+            for (const creation of currentCreations) {
+                mergedCreation = { ...mergedCreation, ...creation.payload };
+            }
+            const newObject = await core_1.CoreSerializableAsync.fromUnknown(mergedCreation);
+            const oldDoc = await targetCollection.read(objectIdentifier);
+            if (oldDoc) {
+                const oldObject = await core_1.CoreSerializableAsync.fromUnknown(oldDoc);
+                const updatedObject = { ...oldObject.toJSON(), ...newObject.toJSON() };
+                await targetCollection.update(oldDoc, updatedObject);
+            }
+            await targetCollection.create(newObject);
+        }
+    }
+    async applyUpdates(updateModifications) {
+        if (!updateModifications || updateModifications.length === 0) {
+            return;
+        }
+        for (const updateModification of updateModifications) {
+            const targetCollection = await this.collectionProvider.getCollection(updateModification.collection);
+            const oldDoc = await targetCollection.read(updateModification.objectIdentifier.toString());
+            if (!oldDoc) {
+                throw new Error("Document to update was not found.");
+            }
+            const oldObject = await core_1.CoreSerializableAsync.fromUnknown(oldDoc);
+            const newObject = { ...oldObject.toJSON(), ...updateModification.payload };
+            await targetCollection.update(oldDoc, newObject);
+        }
+    }
+    async applyDeletes(deleteModifications) {
+        if (!deleteModifications || deleteModifications.length === 0) {
+            return;
+        }
+        for (const deleteModification of deleteModifications) {
+            const targetCollection = await this.collectionProvider.getCollection(deleteModification.collection);
+            await targetCollection.delete({ id: deleteModification.objectIdentifier });
+        }
+    }
+    async applyCacheChanges(cacheChanges) {
+        if (!cacheChanges || cacheChanges.length === 0) {
+            return;
+        }
+        const cacheChangesGroupedByCollection = lodash_1.default.groupBy(cacheChanges, (c) => c.collection);
+        const fillCachePromises = [];
+        for (const collectionName in cacheChangesGroupedByCollection) {
+            const modificationsInCollection = cacheChangesGroupedByCollection[collectionName];
+            switch (collectionName) {
+                case DbCollectionNames_1.DbCollectionNames.Files:
+                    fillCachePromises.push(this.fileCacheUpdater.updateCache(modificationsInCollection.map((m) => m.objectIdentifier.toString())));
+                    break;
+                case DbCollectionNames_1.DbCollectionNames.Messages:
+                    fillCachePromises.push(this.messageCacheUpdater.updateCache(modificationsInCollection.map((m) => m.objectIdentifier.toString())));
+                    break;
+                case DbCollectionNames_1.DbCollectionNames.Relationships:
+                    // Relationship caches are filled afterwards. It requires the template caches to be filled.
+                    break;
+                case DbCollectionNames_1.DbCollectionNames.Templates:
+                    fillCachePromises.push(this.relationshipTemplateCacheUpdater.updateCache(modificationsInCollection.map((m) => m.objectIdentifier.toString())));
+                    break;
+                case DbCollectionNames_1.DbCollectionNames.Tokens:
+                    fillCachePromises.push(this.tokenCacheUpdater.updateCache(modificationsInCollection.map((m) => m.objectIdentifier.toString())));
+                    break;
+                default:
+                    throw new Error(`DB collection with name '${collectionName}' is not supported.'`);
+            }
+        }
+        await Promise.all(fillCachePromises);
+        const relationshipCacheUpdates = cacheChangesGroupedByCollection[DbCollectionNames_1.DbCollectionNames.Relationships];
+        // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
+        if (relationshipCacheUpdates) {
+            await this.relationshipCacheUpdater.updateCache(relationshipCacheUpdates.map((m) => m.objectIdentifier.toString()));
+        }
+    }
+}
+exports.DatawalletModificationsProcessor = DatawalletModificationsProcessor;
+//# sourceMappingURL=DatawalletModificationsProcessor.js.map