@pkcprotocol/pkc-js 0.0.75 → 0.0.77

package/dist/bundled/chunks/{local-community-D4efR9XJ.js → local-community-BIjlDWkC.js}

@@ -1,6 +1,6 @@
 import { i as __toESM, r as __require, t as __commonJSMin } from "./chunk-2rV9d50f.js";
-import { $ as pubsubTopicToDhtKey, $n as t$7, At as trackStartedCommunity, Bt as CommunityEditPublicationPubsubReservedFields, C as contentContainsMarkdownAudio, Ct as findUpdatingCommunity, En as CommentUpdateSchema, F as getIpnsRecordInLocalKuboNode, Fn as CommentEditPubsubMessagePublicationSchema, Ft as untrackUpdatingCommunity, G as isLinkOfAudio, Gt as CommentModerationPubsubMessagePublicationSchema, In as CommentEditPubsubMessagePublicationWithFlexibleAuthorSchema, It as require_sha256, J as isLinkOfVideo, Jt as CommentModerationsTableRowSchema, K as isLinkOfImage, Kt as CommentModerationReservedFields, L as hideClassPrivateProps, Ln as CommentEditReservedFields, M as genToArray, Mr as ZodError, Mt as trackUpdatingCommunity, N as getEquivalentCommunityAddresses, Nt as untrackStartedCommunity, O as derivePublicationFromChallengeRequest, On as CommentUpdateTableRowSchema, P as getErrorCodeFromMessage, Q as isStringDomain, Qn as n$3, R as ipnsNameToIpnsOverPubsubTopic, Rt as pTimeout, S as calculateStringSizeSameAsIpfsAddCidV0, T as contentContainsMarkdownVideos, Un as AuthorReservedFields, W as isLinkOfAnimatedImage, Xn as n$4, Y as isLinkValid, Zn as t$8, _r as PKCError, _t as timestamp, a as ChallengeRequestMessageSchema, ar as t$4, at as removeNullUndefinedValues, b as areEquivalentCommunityAddresses, bt as findCommunityInRegistry, cr as t$5, d as DecryptedChallengeRequestSchema, dr as require_retry, dt as retryKuboIpfsAddAndProvide, er as t$6, fn as VotePubsubMessagePublicationSchema, hn as VoteTablesRowSchema, ht as statMfsPathSafely, ir as r$1, k as doesDomainAddressHaveCapitalLetter, kn as CommentsTableRowSchema, kt as syncCommunityRegistryEntry, lr as t$3, lt as retryKuboBlockPutPinAndProvidePubsubTopic, mt as sleepUntilTimeoutOrAbort, nn as CommunityIpfsSchema, nr as e$1, nt as removeBlocksFromKuboNode, pn as VotePubsubReservedFields, q as isLinkOfMedia, r as ChallengeMessageSchema, rn as CommunitySignedPropertyNames, rt as removeMfsFilesSafely, s as ChallengeVerificationMessageSchema, t as ChallengeAnswerMessageSchema, tr as e, u as DecryptedChallengeRequestPublicationSchema, vn as CommentIpfsSchema, vr as messages, w as contentContainsMarkdownImages, x as calculateIpfsCidV0, xt as findStartedCommunity, y as version_default, yn as CommentPubsubMessageReservedFields, yr as logger_default, yt as writeKuboFilesWithTimeout, zn as CommentEditsTableRowSchema } from "./schema-wNdSno5O.js";
-import { $n as t$10, A as deriveDbPosts, At as verifyCommunityEdit, Bt as getCommunityPublicKeyFromWire, C as BackupAbortError, Dt as verifyCommentPubsubMessage, E as calculateInlineRepliesBudget, Et as verifyCommentModeration, F as importSignerIntoKuboNode, Ft as getAuthorNameFromWire, G as REPLY_REPLIES_SORT_TYPES, Gt as getIpfsKeyFromPrivateKey, Ht as decode, Jn as r$2, Jt as getPublicKeyFromPrivateKey, K as TIMEFRAMES_TO_SECONDS, Kn as t$9, Kt as getPKCAddressFromPublicKey, M as getDefaultCommunityDbConfig, Mt as buildRuntimeAuthor, Nt as cleanWireAuthor, O as deleteOldCommunityInWindows, Ot as verifyCommentUpdate, P as getThumbnailPropsOfLink, R as moveCommunityDbToDeletedDirectory, S as encryptEd25519AesGcmPublicKeyBuffer, St as verifyChallengeRequest, T as calculateExpectedSignatureSize, Tt as verifyCommentIpfs, U as POSTS_SORT_TYPES, Ut as encode, W as POST_REPLIES_SORT_TYPES, Xn as n$6, Yn as t$11, Yt as createSchemaRowParser, Z as iterateOverPageCidsToFindAllCids, Zn as n$5, _ as SignerWithPublicKeyAddress, _t as signCommunity, a as pkcJsChallenges, b as decryptEd25519AesGcmPublicKeyBuffer, bt as verifyChallengeAnswer, cn as parseCommunityIpfsSchemaPassthroughWithPKCErrorIfItFails, d as MAX_FILE_SIZE_BYTES_FOR_COMMUNITY_IPFS, dt as signChallengeVerification, er as stringify, f as KeyvBetterSqlite3, ft as signComment, gt as signCommentUpdateForChallengeVerification, ht as signCommentUpdate, i as getCommunityChallengeFromCommunityChallengeSettings, it as pLimit, j as deriveDbReplies, jt as verifyVote, k as deriveCommentIpfsFromCommentTableRow, kt as verifyCommunity, l as normalizeSelfAddrsForProvider, lt as signChallengeMessage, nr as require_lodash_merge, o as TrackedInstanceRegistry, on as parseCommunityEditOptionsSchemaWithPKCErrorIfItFails, pt as signCommentEdit, qn as t$12, qt as getPKCAddressFromPublicKeySync, r as getChallengeVerification, s as LRUCache, st as cleanUpBeforePublishing, t as RpcLocalCommunity, tr as STORAGE_KEYS, vn as parseDecryptedChallengeAnswerWithPKCErrorIfItFails, w as backupCommunityDb, wt as verifyCommentEdit, xn as parseJsonWithPKCErrorIfFails, z as resolveDbPostsCidRefs, zt as getCommunityNameFromWire } from "./rpc-local-community-O94vseOA.js";
+import { $ as pubsubTopicToDhtKey, $n as n$3, An as CommentsTableRowSchema, At as trackStartedCommunity, Bn as CommentEditsTableRowSchema, Bt as CommunityEditPublicationPubsubReservedFields, C as contentContainsMarkdownAudio, Ct as findUpdatingCommunity, Dn as CommentUpdateSchema, F as getIpnsRecordInLocalKuboNode, Ft as untrackUpdatingCommunity, G as isLinkOfAudio, Gt as CommentModerationPubsubMessagePublicationSchema, In as CommentEditPubsubMessagePublicationSchema, It as require_sha256, J as isLinkOfVideo, Jt as CommentModerationsTableRowSchema, K as isLinkOfImage, Kt as CommentModerationReservedFields, L as hideClassPrivateProps, Ln as CommentEditPubsubMessagePublicationWithFlexibleAuthorSchema, M as genToArray, Mt as trackUpdatingCommunity, N as getEquivalentCommunityAddresses, Nr as ZodError, Nt as untrackStartedCommunity, O as derivePublicationFromChallengeRequest, P as getErrorCodeFromMessage, Q as isStringDomain, Qn as t$8, R as ipnsNameToIpnsOverPubsubTopic, Rn as CommentEditReservedFields, S as calculateStringSizeSameAsIpfsAddCidV0, T as contentContainsMarkdownVideos, W as isLinkOfAnimatedImage, Wn as AuthorReservedFields, Y as isLinkValid, Zn as n$4, _t as timestamp, a as ChallengeRequestMessageSchema, ar as r$1, at as removeNullUndefinedValues, b as areEquivalentCommunityAddresses, bn as CommentPubsubMessageReservedFields, br as logger_default, bt as findCommunityInRegistry, d as DecryptedChallengeRequestSchema, dt as retryKuboIpfsAddAndProvide, er as t$7, fr as require_retry, gn as VoteTablesRowSchema, ht as statMfsPathSafely, in as CommunitySignedPropertyNames, k as doesDomainAddressHaveCapitalLetter, kn as CommentUpdateTableRowSchema, kt as syncCommunityRegistryEntry, lr as t$5, lt as retryKuboBlockPutPinAndProvidePubsubTopic, mn as VotePubsubReservedFields, mt as sleepUntilTimeoutOrAbort, nr as e, nt as removeBlocksFromKuboNode, or as t$4, pn as VotePubsubMessagePublicationSchema, q as isLinkOfMedia, r as ChallengeMessageSchema, rn as CommunityIpfsSchema, rr as e$1, rt as removeMfsFilesSafely, s as ChallengeVerificationMessageSchema, t as ChallengeAnswerMessageSchema, tr as t$6, u as DecryptedChallengeRequestPublicationSchema, ur as t$3, vr as PKCError, w as contentContainsMarkdownImages, x as calculateIpfsCidV0, xt as findStartedCommunity, y as version_default, yn as CommentIpfsSchema, yr as messages, yt as writeKuboFilesWithTimeout } from "./schema-Bu4z3MGE.js";
+import { $n as t$11, A as deriveCommentIpfsFromCommentTableRow, At as verifyCommunity, B as resolveDbPostsCidRefs, Bt as getCommunityNameFromWire, C as encryptEd25519AesGcmPublicKeyBuffer, Ct as verifyChallengeRequest, D as calculateInlineRepliesBudget, Dt as verifyCommentModeration, E as calculateExpectedSignatureSize, Et as verifyCommentIpfs, F as getThumbnailPropsOfLink, G as POST_REPLIES_SORT_TYPES, I as importSignerIntoKuboNode, It as getAuthorNameFromWire, Jt as getPKCAddressFromPublicKeySync, K as REPLY_REPLIES_SORT_TYPES, Kt as getIpfsKeyFromPrivateKey, M as deriveDbReplies, Mt as verifyVote, N as getDefaultCommunityDbConfig, Nt as buildRuntimeAuthor, Ot as verifyCommentPubsubMessage, Pt as cleanWireAuthor, Q as iterateOverPageCidsToFindAllCids, Qn as r$2, Sn as parseJsonWithPKCErrorIfFails, T as backupCommunityDb, Tt as verifyCommentEdit, Ut as decode, Vt as getCommunityPublicKeyFromWire, W as POSTS_SORT_TYPES, Wt as encode, Xn as t$9, Xt as createSchemaRowParser, Yt as getPublicKeyFromPrivateKey, Zn as t$12, _ as SignerWithPublicKeyAddress, _t as signCommentUpdateForChallengeVerification, a as pkcJsChallenges, ar as STORAGE_KEYS, at as pLimit, ct as cleanUpBeforePublishing, d as MAX_FILE_SIZE_BYTES_FOR_COMMUNITY_IPFS, er as n$6, f as KeyvBetterSqlite3, ft as signChallengeVerification, gt as signCommentUpdate, i as getCommunityChallengeFromCommunityChallengeSettings, ir as stringify, j as deriveDbPosts, jt as verifyCommunityEdit, k as deleteOldCommunityInWindows, kt as verifyCommentUpdate, l as normalizeSelfAddrsForProvider, ln as parseCommunityIpfsSchemaPassthroughWithPKCErrorIfItFails, mt as signCommentEdit, o as TrackedInstanceRegistry, or as require_lodash_merge, pt as signComment, q as TIMEFRAMES_TO_SECONDS, qt as getPKCAddressFromPublicKey, r as getChallengeVerification, rr as t$10, s as LRUCache, sn as parseCommunityEditOptionsSchemaWithPKCErrorIfItFails, t as RpcLocalCommunity, tr as n$5, ut as signChallengeMessage, vt as signCommunity, w as BackupAbortError, x as decryptEd25519AesGcmPublicKeyBuffer, xt as verifyChallengeAnswer, yn as parseDecryptedChallengeAnswerWithPKCErrorIfItFails, z as moveCommunityDbToDeletedDirectory } from "./rpc-local-community-BmD9viua.js";
 import { randomFillSync, randomUUID } from "node:crypto";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import path from "node:path";
@@ -11,6 +11,7 @@ import assert from "assert";
 import fs from "fs";
 import Database from "better-sqlite3";
 import { CID } from "multiformats/cid";
+import { peerIdFromString } from "@libp2p/peer-id";
 import { of } from "typestub-ipfs-only-hash";
 //#region node_modules/remeda/dist/entries.js
 function t$2(...t) {
@@ -64,6 +65,138 @@ function r(t) {
 	};
 }
 //#endregion
+//#region dist/node/runtime/node/community/local-community/identity.js
+function communityIdentityPublicKey(community) {
+	return community.anchor?.publicKey ?? community.signer.address;
+}
+//#endregion
+//#region dist/node/runtime/node/community/local-community/anchor-publishing.js
+const ANCHOR_SEQUENCE_MARGIN = 5n;
+const ANCHOR_LOOKUP_TIMEOUT_MS = 3e4;
+function assertDelegated(community) {
+	if (!community.anchor) throw new PKCError("ERR_COMMUNITY_IS_NOT_DELEGATED", {
+		address: community.address,
+		signerAddress: community.signer?.address
+	});
+	return community.anchor;
+}
+function getPersistedAnchorRecordBytes(community) {
+	const stored = community._dbHandler.keyvGet(STORAGE_KEYS[STORAGE_KEYS.ANCHOR_IPNS_RECORD]);
+	if (!stored) return void 0;
+	return stored instanceof Uint8Array ? stored : new Uint8Array(Object.values(stored));
+}
+function getHighestAcceptedAnchorSequence(community) {
+	const stored = community._dbHandler.keyvGet(STORAGE_KEYS[STORAGE_KEYS.HIGHEST_ACCEPTED_ANCHOR_SEQUENCE]);
+	return typeof stored === "string" ? BigInt(stored) : void 0;
+}
+async function lookupAnchorRecordOnNetwork(community, anchorName) {
+	const log = logger_default("pkc-js:local-community:prepareAnchorPublish");
+	const kuboRpcClient = community._clientsManager.getDefaultKuboRpcClient();
+	try {
+		return await Promise.race([getIpnsRecordInLocalKuboNode(kuboRpcClient, anchorName), new Promise((resolve) => setTimeout(() => resolve(void 0), ANCHOR_LOOKUP_TIMEOUT_MS))]);
+	} catch (e) {
+		log.trace(`Anchor (${anchorName}) did not resolve while preparing a publish`, e);
+		return;
+	}
+}
+async function prepareAnchorPublish(community) {
+	const log = logger_default("pkc-js:local-community:prepareAnchorPublish");
+	const anchor = assertDelegated(community);
+	await community._dbHandler.initDbIfNeeded();
+	const persistedSequence = getHighestAcceptedAnchorSequence(community);
+	const networkRecord = await lookupAnchorRecordOnNetwork(community, anchor.publicKey);
+	const networkSequence = networkRecord ? BigInt(networkRecord.sequence) : void 0;
+	if (persistedSequence === void 0 && networkSequence === void 0) throw new PKCError("ERR_UNABLE_TO_DETERMINE_ANCHOR_SEQUENCE", {
+		address: community.address,
+		anchorPublicKey: anchor.publicKey,
+		reason: "This node has never accepted an anchor record for this community and /ipns/<anchor> did not resolve. If this anchor has never been published, sign sequence 0 (the nextSequence createCommunity returned); otherwise retry once the anchor resolves."
+	});
+	const highestKnown = [persistedSequence, networkSequence].reduce((max, seq) => seq !== void 0 && seq > max ? seq : max, 0n);
+	const nextSequence = highestKnown + ANCHOR_SEQUENCE_MARGIN;
+	log(`Prepared anchor publish for community (${community.address}): persisted=${persistedSequence}, network=${networkSequence}, next=${nextSequence}`);
+	return {
+		nextSequence: nextSequence.toString(),
+		currentAnchorRecordSequence: highestKnown.toString(),
+		hasPersistedAnchorRecord: persistedSequence !== void 0
+	};
+}
+async function putAnchorRecordThroughKubo(community, anchorName, recordBytes) {
+	const kuboRpcClient = community._clientsManager.getDefaultKuboRpcClient();
+	for await (const _event of kuboRpcClient._client.routing.put(`/ipns/${anchorName}`, recordBytes, { allowOffline: true }));
+}
+const anchorPublishQueues = /* @__PURE__ */ new Map();
+function serializePerCommunityAddress(address, task) {
+	const run = (anchorPublishQueues.get(address) ?? Promise.resolve()).then(task);
+	const settled = run.then(() => {}, () => {});
+	anchorPublishQueues.set(address, settled);
+	settled.then(() => {
+		if (anchorPublishQueues.get(address) === settled) anchorPublishQueues.delete(address);
+	});
+	return run;
+}
+async function publishAnchorRecord(community, recordBytes) {
+	return serializePerCommunityAddress(community.address, () => publishAnchorRecordSerialized(community, recordBytes));
+}
+async function publishAnchorRecordSerialized(community, recordBytes) {
+	const log = logger_default("pkc-js:local-community:publishAnchorRecord");
+	const anchor = assertDelegated(community);
+	await community._dbHandler.initDbIfNeeded();
+	const { multihashToIPNSRoutingKey, unmarshalIPNSRecord } = await import("ipns");
+	const { ipnsValidator } = await import("ipns/validator");
+	const bytes = recordBytes instanceof Uint8Array ? recordBytes : new Uint8Array(Object.values(recordBytes));
+	try {
+		await ipnsValidator(multihashToIPNSRoutingKey(peerIdFromString(anchor.publicKey).toMultihash()), bytes);
+	} catch (e) {
+		throw new PKCError("ERR_ANCHOR_IPNS_RECORD_IS_INVALID", {
+			address: community.address,
+			anchorPublicKey: anchor.publicKey,
+			validationError: e
+		});
+	}
+	const record = unmarshalIPNSRecord(bytes);
+	const expectedValue = `/ipns/${community.signer.address}`;
+	if (record.value !== expectedValue) throw new PKCError("ERR_ANCHOR_IPNS_RECORD_POINTS_TO_DIFFERENT_MINTER", {
+		address: community.address,
+		anchorPublicKey: anchor.publicKey,
+		expectedValue,
+		recordValue: record.value
+	});
+	const sequence = BigInt(record.sequence);
+	const highestAccepted = getHighestAcceptedAnchorSequence(community);
+	if (highestAccepted !== void 0 && sequence <= highestAccepted) throw new PKCError("ERR_ANCHOR_IPNS_RECORD_SEQUENCE_IS_NOT_GREATER", {
+		address: community.address,
+		anchorPublicKey: anchor.publicKey,
+		recordSequence: sequence.toString(),
+		highestAcceptedSequence: highestAccepted.toString()
+	});
+	await putAnchorRecordThroughKubo(community, anchor.publicKey, bytes);
+	await community._dbHandler.keyvSet(STORAGE_KEYS[STORAGE_KEYS.ANCHOR_IPNS_RECORD], bytes);
+	await community._dbHandler.keyvSet(STORAGE_KEYS[STORAGE_KEYS.HIGHEST_ACCEPTED_ANCHOR_SEQUENCE], sequence.toString());
+	community.anchorRecordSequence = sequence.toString();
+	log(`Published anchor record for community (${community.address}) at sequence ${sequence}, pointing at ${record.value}`);
+	return {
+		sequence: sequence.toString(),
+		value: record.value,
+		anchorPublicKey: anchor.publicKey
+	};
+}
+async function reprovideAnchorRecordIfNeeded(community) {
+	const log = logger_default("pkc-js:local-community:reprovideAnchorRecord");
+	if (!community.anchor) return false;
+	const bytes = getPersistedAnchorRecordBytes(community);
+	if (!bytes) return false;
+	await putAnchorRecordThroughKubo(community, community.anchor.publicKey, bytes);
+	community._lastAnchorRecordReprovideAt = Date.now();
+	log.trace(`Re-provided anchor record of community (${community.address})`);
+	return true;
+}
+async function reprovideAnchorRecordIfDue(community) {
+	if (!community.anchor) return;
+	const lastAt = community._lastAnchorRecordReprovideAt;
+	if (typeof lastAt === "number" && Date.now() - lastAt < 36e5) return;
+	await reprovideAnchorRecordIfNeeded(community);
+}
+//#endregion
 //#region dist/node/runtime/node/community/local-community/comment-updates.js
 function communityChallengePubsubTopic(community) {
 	return community.pubsubTopic || community.signer?.address;
@@ -335,28 +468,64 @@ async function repinCommentUpdateIfNeeded(community) {
 	log(`CommentUpdate directory`, community.address, "will republish all comment updates");
 	community._dbHandler.forceUpdateOnAllComments();
 }
-async function cleanUpIpfsRepoRarely(community, force = false) {
-	const log = logger_default("pkc-js:local-community:syncIpnsWithDb:_cleanUpIpfsRepoRarely");
-	if (Math.random() < 1e-5 || force) {
-		let gcCids = 0;
-		const kuboRpc = community._clientsManager.getDefaultKuboRpcClient();
+const GC_HIGH_WATERMARK = .9;
+const MIN_MS_BETWEEN_GC = 3600 * 1e3;
+const lastGcFinishedAtByKuboUrl = /* @__PURE__ */ new Map();
+const inFlightGcByKuboUrl = /* @__PURE__ */ new Map();
+async function cleanUpIpfsRepoIfDue(community, force = false) {
+	const log = logger_default("pkc-js:local-community:syncIpnsWithDb:_cleanUpIpfsRepoIfDue");
+	const kuboRpc = community._clientsManager.getDefaultKuboRpcClient();
+	const kuboUrl = String(kuboRpc.url);
+	const inFlight = inFlightGcByKuboUrl.get(kuboUrl);
+	if (inFlight) return inFlight;
+	const gcRun = _runRepoGcIfDue({
+		community,
+		kuboUrl,
+		force,
+		log
+	}).finally(() => inFlightGcByKuboUrl.delete(kuboUrl));
+	inFlightGcByKuboUrl.set(kuboUrl, gcRun);
+	return gcRun;
+}
+async function _runRepoGcIfDue({ community, kuboUrl, force, log }) {
+	const kuboRpc = community._clientsManager.getDefaultKuboRpcClient();
+	let repoSizeBefore;
+	if (!force) {
+		const lastGcFinishedAt = lastGcFinishedAtByKuboUrl.get(kuboUrl);
+		if (typeof lastGcFinishedAt === "number" && Date.now() - lastGcFinishedAt < MIN_MS_BETWEEN_GC) return;
+		let repoStat;
 		try {
-			await pTimeout(kuboRpc._client.files.flush("/"), {
-				milliseconds: 15e3,
-				message: "Timed out flushing MFS root before repo.gc"
-			});
+			repoStat = await kuboRpc._client.repo.stat({ searchParams: new URLSearchParams({ "size-only": "true" }) });
 		} catch (e) {
-			log.error("Skipping repo.gc: failed to flush MFS root beforehand (ipfs/kubo#10842 safeguard)", e);
+			log.error("Skipping repo.gc: failed to read repo.stat from the kubo node", kuboUrl, e);
 			return;
 		}
-		try {
-			for await (const res of kuboRpc._client.repo.gc({ quiet: true })) if (res.cid) gcCids++;
-			else log.error("Failed to GC ipfs repo due to error", res.err);
-		} catch (e) {
-			log.error("Failed to GC ipfs repo due to error", e);
+		repoSizeBefore = repoStat.repoSize;
+		if (repoStat.storageMax > 0n) {
+			const gcThreshold = repoStat.storageMax * BigInt(Math.round(GC_HIGH_WATERMARK * 100)) / 100n;
+			if (repoStat.repoSize < gcThreshold) {
+				log.trace("Skipping repo.gc on", kuboUrl, "- repo size", repoStat.repoSize, "is below the", `${GC_HIGH_WATERMARK * 100}%`, "watermark", gcThreshold, "of StorageMax", repoStat.storageMax);
+				return;
+			}
 		}
-		log("GC cleaned", gcCids, "cids out of the IPFS node");
 	}
+	let gcCids = 0;
+	try {
+		for await (const res of kuboRpc._client.repo.gc({ quiet: true })) if (res.cid) gcCids++;
+		else log.error("Failed to GC ipfs repo due to error", res.err);
+	} catch (e) {
+		log.error("Failed to GC ipfs repo due to error", e);
+		return;
+	} finally {
+		lastGcFinishedAtByKuboUrl.set(kuboUrl, Date.now());
+	}
+	let repoSizeAfter;
+	try {
+		repoSizeAfter = (await kuboRpc._client.repo.stat({ searchParams: new URLSearchParams({ "size-only": "true" }) })).repoSize;
+	} catch (e) {
+		log.trace("repo.gc finished but the follow-up repo.stat failed", e);
+	}
+	log("GC cleaned", gcCids, "cids out of the IPFS node", kuboUrl, "- repo size", repoSizeBefore ?? "unknown", "->", repoSizeAfter ?? "unknown");
 }
 async function addAllCidsUnderPurgedCommentToBeRemoved(community, purgedCommentAndCommentUpdate) {
 	community._cidsToUnPin.add(purgedCommentAndCommentUpdate.commentTableRow.cid);
@@ -1008,7 +1177,7 @@ async function checkWireFormatAndCommunityAuthor(community, publication, authorC
 	if ("subplebbitAddress" in publication) return messages.ERR_PUBLICATION_USES_DEPRECATED_SUBPLEBBIT_ADDRESS;
 	if ("communityAddress" in publication) return messages.ERR_PUBLICATION_USES_DEPRECATED_COMMUNITY_ADDRESS;
 	const pubCommunityPublicKey = getCommunityPublicKeyFromWire(publication);
-	if (!pubCommunityPublicKey || pubCommunityPublicKey !== community.signer.address) return messages.ERR_PUBLICATION_INVALID_COMMUNITY_PUBLIC_KEY;
+	if (!pubCommunityPublicKey || pubCommunityPublicKey !== communityIdentityPublicKey(community)) return messages.ERR_PUBLICATION_INVALID_COMMUNITY_PUBLIC_KEY;
 	const pubCommunityName = getCommunityNameFromWire(publication);
 	if (pubCommunityName && pubCommunityName !== community.address) return messages.ERR_PUBLICATION_INVALID_COMMUNITY_NAME;
 	if (publication.timestamp <= timestamp() - 300 || publication.timestamp >= timestamp() + 300) return messages.ERR_PUBLICATION_TIMESTAMP_IS_NOT_IN_PROPER_RANGE;
@@ -1324,7 +1493,7 @@ async function storeCommentEdit(community, commentEditRaw, challengeRequestId) {
 	const log = logger_default("pkc-js:local-community:storeCommentEdit");
 	const strippedOutEditPublication = CommentEditPubsubMessagePublicationWithFlexibleAuthorSchema.strip().parse(commentEditRaw);
 	strippedOutEditPublication.author = cleanWireAuthor(strippedOutEditPublication.author);
-	if (!strippedOutEditPublication.communityPublicKey) strippedOutEditPublication.communityPublicKey = community.signer.address;
+	if (!strippedOutEditPublication.communityPublicKey) strippedOutEditPublication.communityPublicKey = communityIdentityPublicKey(community);
 	if (!strippedOutEditPublication.communityName && isStringDomain(community.address)) strippedOutEditPublication.communityName = community.address;
 	const commentToBeEdited = community._dbHandler.queryComment(commentEditRaw.commentCid);
 	if (!commentToBeEdited) throw Error("The comment to edit doesn't exist");
@@ -1358,7 +1527,7 @@ async function storeCommentModeration(community, commentModRaw, challengeRequest
 	const log = logger_default("pkc-js:local-community:storeCommentModeration");
 	const strippedOutModPublication = CommentModerationPubsubMessagePublicationSchema.strip().parse(commentModRaw);
 	strippedOutModPublication.author = cleanWireAuthor(strippedOutModPublication.author);
-	if (!strippedOutModPublication.communityPublicKey) strippedOutModPublication.communityPublicKey = community.signer.address;
+	if (!strippedOutModPublication.communityPublicKey) strippedOutModPublication.communityPublicKey = communityIdentityPublicKey(community);
 	if (!strippedOutModPublication.communityName && isStringDomain(community.address)) strippedOutModPublication.communityName = community.address;
 	const commentToBeEdited = community._dbHandler.queryComment(commentModRaw.commentCid);
 	if (!commentToBeEdited) throw Error("The comment to edit doesn't exist");
@@ -1456,7 +1625,7 @@ async function storeComment(community, opts) {
 		...pseudonymityMode ? { pseudonymityMode } : {},
 		...challengeAggregate?.aggregatedComment ?? {}
 	};
-	commentIpfs.communityPublicKey = community.signer.address;
+	commentIpfs.communityPublicKey = communityIdentityPublicKey(community);
 	if (isStringDomain(community.address)) commentIpfs.communityName = community.address;
 	delete commentIpfs.communityAddress;
 	commentIpfs.author = cleanWireAuthor(commentIpfs.author);
@@ -5798,6 +5967,7 @@ async function updateInstanceStateWithDbState(community) {
 		}
 		await community.initInternalCommunityAfterFirstUpdateNoMerge(currentDbState);
 	} else await community.initInternalCommunityBeforeFirstUpdateNoMerge(currentDbState);
+	community.anchorRecordSequence = getHighestAcceptedAnchorSequence(community)?.toString();
 }
 async function updateInstancePropsWithStartedCommunityOrDb(community) {
 	const log = logger_default("pkc-js:local-community:_updateInstancePropsWithStartedCommunityOrDb");
@@ -5814,6 +5984,7 @@ async function updateInstancePropsWithStartedCommunityOrDb(community) {
 		else await community.initInternalCommunityBeforeFirstUpdateNoMerge(startedCommunity.toJSONInternalBeforeFirstUpdate());
 		community.started = true;
 		community._exports = startedCommunity.exports;
+		community.anchorRecordSequence = startedCommunity.anchorRecordSequence;
 	} else {
 		await community.initDbHandlerIfNeeded();
 		try {
@@ -5899,6 +6070,8 @@ async function createNewLocalCommunityDb(community) {
 }
 async function initNewLocalCommunityPropsNoMerge(community, newProps) {
 	await initSignerProps(community, newProps.signer);
+	community.anchor = newProps.anchor;
+	if (newProps.anchor) community.ipnsHops = [newProps.anchor.publicKey, community.signer.address];
 	community.title = newProps.title;
 	community.description = newProps.description;
 	community.setAddress(newProps.address);
@@ -5936,6 +6109,7 @@ async function initInternalCommunityAfterFirstUpdateNoMerge(community, newProps)
 				"shortAddress",
 				"type"
 			]),
+			anchor: newProps.anchor,
 			settings: newProps.settings,
 			_usingDefaultChallenge: newProps._usingDefaultChallenge,
 			address: newProps.address,
@@ -5972,9 +6146,6 @@ async function initInternalCommunityBeforeFirstUpdateNoMerge(community, newProps
 	await initSignerProps(community, newProps.signer);
 	community._internalStateUpdateId = newProps._internalStateUpdateId;
 	community._updateIpnsPubsubPropsIfNeeded(newProps);
-	community.ipnsName = newProps.signer.address;
-	community.ipnsPubsubTopic = ipnsNameToIpnsOverPubsubTopic(community.ipnsName);
-	community.ipnsPubsubTopicRoutingCid = pubsubTopicToDhtKey(community.ipnsPubsubTopic);
 	if (processStartedCommunities.has(community)) syncCommunityRegistryEntry(processStartedCommunities, community);
 	community.raw.localCommunity = community.toJSONInternalRpcBeforeFirstUpdate();
 }
@@ -6111,25 +6282,7 @@ async function calculateNextCommunityRecord(community, commentUpdateRowsToPublis
 	const latestComment = community._dbHandler.queryLatestCommentCid();
 	community._dbHandler.commitTransaction();
 	const stats = community._dbHandler.queryCommunityStats();
-	if (commentUpdateRowsToPublishToIpfs.length > 0) try {
-		await syncPostUpdatesWithIpfs(community, commentUpdateRowsToPublishToIpfs);
-	} catch (e) {
-		const err = e;
-		if (err.message.includes("Timed out writing to MFS path") || err.message.includes("Timed out removing MFS paths")) {
-			log.error(`MFS sync stuck for community ${community.address} - auto-nuking /${community.address} and forcing a full republish. See https://github.com/ipfs/kubo/issues/10842 for upstream context.`);
-			const kuboRpc = community._clientsManager.getDefaultKuboRpcClient();
-			try {
-				await kuboRpc._client.files.rm("/" + community.address, {
-					recursive: true,
-					force: true
-				});
-			} catch (rmErr) {
-				log.error(`Auto-nuke files.rm of /${community.address} failed:`, rmErr);
-			}
-			community._dbHandler.forceUpdateOnAllComments();
-		}
-		throw e;
-	}
+	if (commentUpdateRowsToPublishToIpfs.length > 0) await syncPostUpdatesWithIpfs(community, commentUpdateRowsToPublishToIpfs);
 	const newPostUpdates = await community._calculateNewPostUpdates();
 	const newModQueue = await community._pageGenerator.generateModQueuePages();
 	const statsCid = (await retryKuboIpfsAddAndProvide({
@@ -6300,7 +6453,7 @@ async function syncIpnsWithDb(community) {
 		const commentUpdateRows = await updateCommentsThatNeedToBeUpdated(community);
 		requireCommunityUpdateIfModQueueChanged(community);
 		await updateCommunityIpnsIfNeeded(community, commentUpdateRows);
-		await cleanUpIpfsRepoRarely(community);
+		await cleanUpIpfsRepoIfDue(community);
 	} catch (e) {
 		e.details = {
 			...e.details,
@@ -6411,6 +6564,7 @@ async function publishLoop(community, syncIntervalMs) {
 	while (!shouldStopPublishLoop()) try {
 		await syncIpnsWithDb(community);
 		await reprovideOnAddressChangeIfDue(community).catch((e) => log.error("Failed to re-provide connection CIDs on address change", e));
+		await reprovideAnchorRecordIfDue(community).catch((e) => log.error("Failed to re-provide the anchor record", e));
 	} catch (e) {
 		community.emit("error", e);
 	} finally {
@@ -6458,6 +6612,11 @@ async function start(community) {
 	})) throw new PKCError("ERR_COMMUNITY_ALREADY_STARTED", { address: community.address });
 	try {
 		await initBeforeStarting(community);
+		if (community.anchor && !getPersistedAnchorRecordBytes(community)) throw new PKCError("ERR_DELEGATED_COMMUNITY_HAS_NO_ANCHOR_RECORD", {
+			address: community.address,
+			anchorPublicKey: community.anchor.publicKey,
+			minterAddress: community.signer.address
+		});
 		community._setState("started");
 		await community._updateStartedValue();
 		await community._dbHandler.lockCommunityStart();
@@ -6471,6 +6630,7 @@ async function start(community) {
 		await setChallengesToDefaultIfNotDefined(community, log);
 		await importCommunitySignerIntoIpfsIfNeeded(community);
 		await providePubsubTopicRoutingCidsIfNeeded(community, true);
+		await reprovideAnchorRecordIfNeeded(community).catch((e) => log.error("Failed to re-provide the anchor record on start", e));
 		community._communityUpdateTrigger = true;
 		community._setStartedStateWithEmission("publishing-ipns");
 		await community._repinCommentsIPFSIfNeeded();
@@ -6506,6 +6666,7 @@ async function initMirroringStartedOrUpdatingCommunity(community, startedCommuni
 		if (startedCommunity.updateCid) await community.initInternalCommunityAfterFirstUpdateNoMerge(startedCommunity.toJSONInternalAfterFirstUpdate());
 		else await community.initInternalCommunityBeforeFirstUpdateNoMerge(startedCommunity.toJSONInternalBeforeFirstUpdate());
 		community.started = startedCommunity.started;
+		community.anchorRecordSequence = startedCommunity.anchorRecordSequence;
 		community.emit("update", community);
 	};
 	const stateChangeListener = async (newState) => {
@@ -6538,6 +6699,7 @@ async function initMirroringStartedOrUpdatingCommunity(community, startedCommuni
 	}
 	if (startedCommunity.updateCid) await community.initInternalCommunityAfterFirstUpdateNoMerge(startedCommunity.toJSONInternalAfterFirstUpdate());
 	else await community.initInternalCommunityBeforeFirstUpdateNoMerge(startedCommunity.toJSONInternalBeforeFirstUpdate());
+	community.anchorRecordSequence = startedCommunity.anchorRecordSequence;
 	community.emit("update", community);
 }
 async function cleanUpMirroredStartedOrUpdatingCommunity(community) {
@@ -7127,6 +7289,7 @@ var LocalCommunity = class extends RpcLocalCommunity {
 		this._subscribedChallengePubsubTopic = void 0;
 		this._lastProvidedBrowserDialableSelfAddrs = void 0;
 		this._lastAddressReprovideCheckAt = void 0;
+		this._lastAnchorRecordReprovideAt = void 0;
 		this._mirroredStartedOrUpdatingCommunity = void 0;
 		this._pendingEditProps = [];
 		this._blocksToRm = [];
@@ -7151,7 +7314,11 @@ var LocalCommunity = class extends RpcLocalCommunity {
 		const rpcJson = this.toJSONInternalRpcAfterFirstUpdate();
 		return {
 			...rpcJson.community,
-			...n$3(rpcJson.localCommunity, ["started", "startedState"]),
+			...n$3(rpcJson.localCommunity, [
+				"started",
+				"startedState",
+				"anchorRecordSequence"
+			]),
 			updateCid: rpcJson.runtimeFields.updateCid,
 			signer: t$9(this.signer, [
 				"privateKey",
@@ -7169,7 +7336,11 @@ var LocalCommunity = class extends RpcLocalCommunity {
 	}
 	toJSONInternalBeforeFirstUpdate() {
 		return {
-			...n$3(this.toJSONInternalRpcBeforeFirstUpdate().localCommunity, ["started", "startedState"]),
+			...n$3(this.toJSONInternalRpcBeforeFirstUpdate().localCommunity, [
+				"started",
+				"startedState",
+				"anchorRecordSequence"
+			]),
 			signer: t$9(this.signer, [
 				"privateKey",
 				"type",
@@ -7207,6 +7378,12 @@ var LocalCommunity = class extends RpcLocalCommunity {
 			])
 		} };
 	}
+	_updateIpnsPubsubPropsIfNeeded(_newProps) {
+		if (!this.signer?.address) return;
+		this.ipnsName = this.signer.address;
+		this.ipnsPubsubTopic = ipnsNameToIpnsOverPubsubTopic(this.ipnsName);
+		this.ipnsPubsubTopicRoutingCid = pubsubTopicToDhtKey(this.ipnsPubsubTopic);
+	}
 	async _updateStartedValue() {
 		this.started = await this._dbHandler.isCommunityStartLocked(this.address);
 	}
@@ -7247,7 +7424,7 @@ var LocalCommunity = class extends RpcLocalCommunity {
 		}
 		const verificationOpts = {
 			community: recordToPublishRaw,
-			communityIpnsName: this.signer.address,
+			communityIpnsHops: this.ipnsHops ?? [this.signer.address],
 			resolveAuthorNames: false,
 			clientsManager: this._clientsManager,
 			validatePages: true,
@@ -7275,7 +7452,7 @@ var LocalCommunity = class extends RpcLocalCommunity {
 			throw e;
 		}
 		if (this.shouldResolveDomainForVerification()) try {
-			log(`Resolving domain ${this.address} to make sure it's the same as signer.address ${this.signer.address}`);
+			log(`Resolving domain ${this.address} to make sure it's the same as ${communityIdentityPublicKey(this)}`);
 			await this._assertDomainResolvesCorrectly(this.address);
 		} catch (e) {
 			log.error(e);
@@ -7311,15 +7488,23 @@ var LocalCommunity = class extends RpcLocalCommunity {
 				communityName: newAddressAsDomain,
 				cache: { maxAge: 600 }
 			});
-			if (resolvedIpnsFromNewDomain !== this.signer.address) throw new PKCError("ERR_DOMAIN_COMMUNITY_ADDRESS_TXT_RECORD_POINT_TO_DIFFERENT_ADDRESS", {
+			const identityPublicKey = communityIdentityPublicKey(this);
+			if (resolvedIpnsFromNewDomain !== identityPublicKey) throw new PKCError("ERR_DOMAIN_COMMUNITY_ADDRESS_TXT_RECORD_POINT_TO_DIFFERENT_ADDRESS", {
 				currentCommunityAddress: this.address,
 				newAddressAsDomain,
 				resolvedIpnsFromNewDomain,
+				identityPublicKey,
 				signerAddress: this.signer.address,
 				started: this.started
 			});
 		}
 	}
+	async prepareAnchorPublish() {
+		return prepareAnchorPublish(this);
+	}
+	async publishAnchorRecord(recordBytes) {
+		return publishAnchorRecord(this, recordBytes);
+	}
 	async start() {
 		return start(this);
 	}

package/dist/bundled/chunks/{local-community-ChTkd8lH.js → local-community-CVm32rYh.js}

@@ -1,2 +1,2 @@
-import { n as createNewLocalCommunityDb, r as updateInstancePropsWithStartedCommunityOrDb, t as LocalCommunity } from "./local-community-D4efR9XJ.js";
+import { n as createNewLocalCommunityDb, r as updateInstancePropsWithStartedCommunityOrDb, t as LocalCommunity } from "./local-community-BIjlDWkC.js";
 export { LocalCommunity, createNewLocalCommunityDb, updateInstancePropsWithStartedCommunityOrDb };