@powerhousedao/reactor 6.0.0-dev.36 → 6.0.0-dev.37

package/dist/src/executor/signature-verifier.js

@@ -0,0 +1,70 @@
+import { deriveOperationId } from "document-model/core";
+import { InvalidSignatureError } from "../shared/errors.js";
+export class SignatureVerifier {
+    verifier;
+    constructor(verifier) {
+        this.verifier = verifier;
+    }
+    async verifyActions(documentId, branch, actions) {
+        if (!this.verifier) {
+            return;
+        }
+        for (const action of actions) {
+            const signer = action.context?.signer;
+            if (!signer) {
+                continue;
+            }
+            if (signer.signatures.length === 0) {
+                throw new InvalidSignatureError(documentId, `Action ${action.id} has signer but no signatures`);
+            }
+            const publicKey = signer.app.key;
+            let isValid = false;
+            try {
+                const tempOperation = {
+                    id: deriveOperationId(documentId, action.scope, branch, action.id),
+                    index: 0,
+                    timestampUtcMs: action.timestampUtcMs || new Date().toISOString(),
+                    hash: "",
+                    skip: 0,
+                    action: action,
+                };
+                isValid = await this.verifier(tempOperation, publicKey);
+            }
+            catch (error) {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                throw new InvalidSignatureError(documentId, `Action ${action.id} verification failed: ${errorMessage}`);
+            }
+            if (!isValid) {
+                throw new InvalidSignatureError(documentId, `Action ${action.id} signature verification returned false`);
+            }
+        }
+    }
+    async verifyOperations(documentId, operations) {
+        if (!this.verifier) {
+            return;
+        }
+        for (let i = 0; i < operations.length; i++) {
+            const operation = operations[i];
+            const signer = operation.action.context?.signer;
+            if (!signer) {
+                continue;
+            }
+            if (signer.signatures.length === 0) {
+                throw new InvalidSignatureError(documentId, `Operation ${operation.id} at index ${operation.index} has signer but no signatures`);
+            }
+            const publicKey = signer.app.key;
+            let isValid = false;
+            try {
+                isValid = await this.verifier(operation, publicKey);
+            }
+            catch (error) {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                throw new InvalidSignatureError(documentId, `Operation ${operation.id} at index ${operation.index} verification failed: ${errorMessage}`);
+            }
+            if (!isValid) {
+                throw new InvalidSignatureError(documentId, `Operation ${operation.id} at index ${operation.index} signature verification returned false`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=signature-verifier.js.map

package/dist/src/executor/signature-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature-verifier.js","sourceRoot":"","sources":["../../../src/executor/signature-verifier.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,MAAM,OAAO,iBAAiB;IACR;IAApB,YAAoB,QAAuC;QAAvC,aAAQ,GAAR,QAAQ,CAA+B;IAAG,CAAC;IAE/D,KAAK,CAAC,aAAa,CACjB,UAAkB,EAClB,MAAc,EACd,OAAiB;QAEjB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;YAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,qBAAqB,CAC7B,UAAU,EACV,UAAU,MAAM,CAAC,EAAE,+BAA+B,CACnD,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YACjC,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,IAAI,CAAC;gBACH,MAAM,aAAa,GAAc;oBAC/B,EAAE,EAAE,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;oBAClE,KAAK,EAAE,CAAC;oBACR,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACjE,IAAI,EAAE,EAAE;oBACR,IAAI,EAAE,CAAC;oBACP,MAAM,EAAE,MAAM;iBACf,CAAC;gBAEF,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzD,MAAM,IAAI,qBAAqB,CAC7B,UAAU,EACV,UAAU,MAAM,CAAC,EAAE,yBAAyB,YAAY,EAAE,CAC3D,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,qBAAqB,CAC7B,UAAU,EACV,UAAU,MAAM,CAAC,EAAE,wCAAwC,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,UAAkB,EAClB,UAAuB;QAEvB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;YAEhD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,qBAAqB,CAC7B,UAAU,EACV,aAAa,SAAS,CAAC,EAAE,aAAa,SAAS,CAAC,KAAK,+BAA+B,CACrF,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YACjC,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzD,MAAM,IAAI,qBAAqB,CAC7B,UAAU,EACV,aAAa,SAAS,CAAC,EAAE,aAAa,SAAS,CAAC,KAAK,yBAAyB,YAAY,EAAE,CAC7F,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,qBAAqB,CAC7B,UAAU,EACV,aAAa,SAAS,CAAC,EAAE,aAAa,SAAS,CAAC,KAAK,wCAAwC,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/src/executor/simple-job-executor.d.ts

@@ -22,9 +22,10 @@ export declare class SimpleJobExecutor implements IJobExecutor {
     private operationIndex;
     private documentMetaCache;
     private collectionMembershipCache;
-    private signatureVerifier?;
     private config;
-    constructor(logger: ILogger, registry: IDocumentModelRegistry, operationStore: IOperationStore, eventBus: IEventBus, writeCache: IWriteCache, operationIndex: IOperationIndex, documentMetaCache: IDocumentMetaCache, collectionMembershipCache: ICollectionMembershipCache, config: JobExecutorConfig, signatureVerifier?: SignatureVerificationHandler | undefined);
+    private signatureVerifierModule;
+    private documentActionHandler;
+    constructor(logger: ILogger, registry: IDocumentModelRegistry, operationStore: IOperationStore, eventBus: IEventBus, writeCache: IWriteCache, operationIndex: IOperationIndex, documentMetaCache: IDocumentMetaCache, collectionMembershipCache: ICollectionMembershipCache, config: JobExecutorConfig, signatureVerifier?: SignatureVerificationHandler);
     /**
      * Execute a single job by applying all its actions through the appropriate reducers.
      * Actions are processed sequentially in order.
@@ -32,45 +33,8 @@ export declare class SimpleJobExecutor implements IJobExecutor {
     executeJob(job: Job): Promise<JobResult>;
     private getCollectionMembershipsForOperations;
     private processActions;
-    /**
-     * Execute a document scope action (CREATE_DOCUMENT, DELETE_DOCUMENT, UPGRADE_DOCUMENT,
-     * ADD_RELATIONSHIP, REMOVE_RELATIONSHIP) by dispatching to the appropriate handler.
-     */
-    private executeDocumentAction;
-    /**
-     * Execute a CREATE_DOCUMENT system action.
-     * This creates a new document in storage along with its initial operation.
-     * For a new document, the operation index is always 0.
-     */
-    private executeCreateDocumentAction;
-    /**
-     * Execute a DELETE_DOCUMENT system action.
-     * This deletes a document from legacy storage and writes the operation to IOperationStore.
-     * The operation index is determined from the document's current operation count.
-     */
-    private executeDeleteDocumentAction;
-    /**
-     * Execute an UPGRADE_DOCUMENT system action.
-     * Handles initial upgrades (version 0 to N), same-version no-ops, and multi-step upgrade chains.
-     * The operation index is determined from the document's current operation count.
-     */
-    private executeUpgradeDocumentAction;
-    private executeAddRelationshipAction;
-    private executeRemoveRelationshipAction;
-    /**
-     * Execute a regular document action by applying it through the document model reducer.
-     * If sourceOperation is provided (for load jobs), its id and timestamp are preserved.
-     */
     private executeRegularAction;
-    private createOperation;
     private executeLoadJob;
-    private writeOperationToStore;
-    private updateDocumentRevision;
-    private writeCacheState;
-    private buildSuccessResult;
-    private buildErrorResult;
-    private verifyOperationSignatures;
-    private verifyActionSignatures;
     private accumulateResultOrReturnError;
 }
 //# sourceMappingURL=simple-job-executor.d.ts.map

package/dist/src/executor/simple-job-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simple-job-executor.d.ts","sourceRoot":"","sources":["../../../src/executor/simple-job-executor.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAKxE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAyB/D;;GAEG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IAIlD,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,yBAAyB;IAEjC,OAAO,CAAC,iBAAiB,CAAC;IAZ5B,OAAO,CAAC,MAAM,CAA8B;gBAGlC,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,sBAAsB,EAChC,cAAc,EAAE,eAAe,EAC/B,QAAQ,EAAE,SAAS,EACnB,UAAU,EAAE,WAAW,EACvB,cAAc,EAAE,eAAe,EAC/B,iBAAiB,EAAE,kBAAkB,EACrC,yBAAyB,EAAE,0BAA0B,EAC7D,MAAM,EAAE,iBAAiB,EACjB,iBAAiB,CAAC,EAAE,4BAA4B,YAAA;IAW1D;;;OAGG;IACG,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC;YA+EhC,qCAAqC;YAWrC,cAAc;IAmE5B;;;OAGG;YACW,qBAAqB;IAkEnC;;;;OAIG;YACW,2BAA2B;IAwGzC;;;;OAIG;YACW,2BAA2B;IAmHzC;;;;OAIG;YACW,4BAA4B;YAqK5B,4BAA4B;YAmJ5B,+BAA+B;IAyI7C;;;OAGG;YACW,oBAAoB;IAsLlC,OAAO,CAAC,eAAe;YAuBT,cAAc;YA8Ld,qBAAqB;IAyCnC,OAAO,CAAC,sBAAsB;IAW9B,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,kBAAkB;IA6B1B,OAAO,CAAC,gBAAgB;YAaV,yBAAyB;YA8CzB,sBAAsB;IA2DpC,OAAO,CAAC,6BAA6B;CAgBtC"}
+{"version":3,"file":"simple-job-executor.d.ts","sourceRoot":"","sources":["../../../src/executor/simple-job-executor.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAExE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAoB/D;;GAEG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IAMlD,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,yBAAyB;IAZnC,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,uBAAuB,CAAoB;IACnD,OAAO,CAAC,qBAAqB,CAAwB;gBAG3C,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,sBAAsB,EAChC,cAAc,EAAE,eAAe,EAC/B,QAAQ,EAAE,SAAS,EACnB,UAAU,EAAE,WAAW,EACvB,cAAc,EAAE,eAAe,EAC/B,iBAAiB,EAAE,kBAAkB,EACrC,yBAAyB,EAAE,0BAA0B,EAC7D,MAAM,EAAE,iBAAiB,EACzB,iBAAiB,CAAC,EAAE,4BAA4B;IAoBlD;;;OAGG;IACG,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC;YA+EhC,qCAAqC;YAWrC,cAAc;YAuEd,oBAAoB;YAoMpB,cAAc;IAgL5B,OAAO,CAAC,6BAA6B;CAgBtC"}