@storacha/clawracha 0.3.14 → 0.4.0

package/dist/sync.js

@@ -9,80 +9,48 @@
  * 6. Apply remote changes to local filesystem
  */
 // UCN Pail imports
-import { Agent, Name, NoValueError, Revision } from "@storacha/ucn/pail";
+import { NoValueError, Revision } from "@storacha/ucn/pail";
 import { createWorkspaceBlockstore, } from "./blockstore/index.js";
 import { applyPendingOps } from "./handlers/apply.js";
 import { applyRemoteChanges } from "./handlers/remote.js";
 import { processChanges } from "./handlers/process.js";
 import { diffRemoteChanges } from "./utils/differ.js";
 import { makeTempCar } from "./utils/tempcar.js";
-import { createStorachaClient } from "./utils/client.js";
-import { decodeDelegation, encodeDelegation } from "./utils/delegation.js";
-import { extract } from "@storacha/client/delegation";
-import { makeEncryptionConfig, makeDecryptionConfig, getEncryptedClient, delegatePlanningDelegationToKMS, makeDecryptFn, } from "./utils/crypto.js";
+import { createStorachaClient, resolveNameFromConfig, resolveCryptoConfig, } from "./utils/config.js";
+import { encodeDelegation } from "./utils/delegation.js";
+import { publish } from "@storacha/ucn/pail/revision";
+import { makeEncoder } from "./utils/encoder.js";
+import { makeContentFetcher } from "./utils/contentfetcher.js";
+import { Agent } from "@storacha/ucn/pail";
 export class SyncEngine {
     workspace;
     blocks;
-    state = { initialized: false, running: false };
+    state = { running: false };
     current = null;
     pendingOps = [];
     carFile = null;
     lastSync = null;
     syncLock = Promise.resolve();
-    encryptionConfig;
-    decryptionConfig;
-    encryptedClient;
-    constructor(workspace) {
+    client;
+    name;
+    encoder;
+    contentFetcher;
+    remotes;
+    constructor(workspace, deps) {
         this.workspace = workspace;
-        this.blocks = createWorkspaceBlockstore(workspace);
+        this.blocks = deps.blocks;
+        this.client = deps.client;
+        this.name = deps.name;
+        this.encoder = deps.encoder;
+        this.contentFetcher = deps.contentFetcher;
+        this.remotes = deps.remotes;
     }
-    /**
-     * Initialize sync engine with device config.
-     * Creates the Storacha client and resolves the UCN name.
-     */
-    async init(config) {
-        const storachaClient = await createStorachaClient(config);
-        const agent = Agent.parse(config.agentKey);
-        let name;
-        if (config.nameArchive) {
-            // Restore from previously saved archive (has full state)
-            const archiveBytes = decodeDelegation(config.nameArchive);
-            name = await Name.extract(agent, archiveBytes);
-        }
-        else if (config.nameDelegation) {
-            // Reconstruct from delegation (granted by another device)
-            const nameBytes = decodeDelegation(config.nameDelegation);
-            const { ok: delegation } = await extract(nameBytes);
-            if (!delegation)
-                throw new Error("Failed to extract name delegation");
-            name = Name.from(agent, [delegation]);
-        }
-        else {
-            // First device — create a new name
-            name = await Name.create(agent);
-        }
-        this.state = { initialized: true, running: true, name, storachaClient };
-        // Set up encryption for private spaces
-        if (config.access?.type === "private") {
-            if (!config.planDelegation) {
-                throw new Error("Private space requires a plan delegation for KMS access");
-            }
-            const planBytes = decodeDelegation(config.planDelegation);
-            const { ok: planDel } = await extract(planBytes);
-            if (!planDel)
-                throw new Error("Failed to extract plan delegation");
-            const planDelForKMS = await delegatePlanningDelegationToKMS(agent, planDel);
-            const uploadBytes = decodeDelegation(config.uploadDelegation);
-            const { ok: uploadDel } = await extract(uploadBytes);
-            if (!uploadDel)
-                throw new Error("Failed to extract upload delegation");
-            this.encryptionConfig = makeEncryptionConfig(agent, config.spaceDID, [planDelForKMS, uploadDel]);
-            // For decrypt, uploadDelegation covers space/content/decrypt
-            this.decryptionConfig = makeDecryptionConfig(config.spaceDID, uploadDel, [planDelForKMS, uploadDel]);
-            this.encryptedClient = await getEncryptedClient(storachaClient);
-        }
+    async start() {
+        this.state = { running: true };
         try {
-            const result = await Revision.resolve(this.blocks, name);
+            const result = await Revision.resolve(this.blocks, this.name, {
+                remotes: this.remotes,
+            });
             this.current = result.value;
             await this.storeBlocks(result.additions);
         }
@@ -95,6 +63,27 @@ export class SyncEngine {
             }
         }
     }
+    /**
+     * Initialize sync engine with device config.
+     * Creates the Storacha client and resolves the UCN name.
+     */
+    static async fromConfig(workspace, config) {
+        const blocks = createWorkspaceBlockstore(workspace);
+        const client = await createStorachaClient(config);
+        const name = await resolveNameFromConfig(config);
+        // Set up encryption for private spaces
+        const crypto = await resolveCryptoConfig(config);
+        const encoder = makeEncoder(crypto);
+        const agent = Agent.parse(config.agentKey);
+        const contentFetcher = makeContentFetcher(crypto, blocks, client, agent);
+        return new SyncEngine(workspace, {
+            blocks,
+            name,
+            client,
+            encoder,
+            contentFetcher,
+        });
+    }
     /**
      * Require running state or throw.
      */
@@ -102,16 +91,7 @@ export class SyncEngine {
         if (!this.state.running) {
             throw new Error("Sync engine not running");
         }
-        return this.state;
-    }
-    /**
-     * Require state is initialized or throw.
-     */
-    requireInitialized() {
-        if (!this.state.initialized) {
-            throw new Error("Sync engine not initialized");
-        }
-        return this.state;
+        return;
     }
     /**
      * Process a batch of file changes.
@@ -121,7 +101,9 @@ export class SyncEngine {
         if (!this.carFile) {
             this.carFile = await makeTempCar();
         }
-        const pendingOps = await processChanges(changes, this.workspace, this.current, this.blocks, (block) => this.carFile.put(block), (block) => this.blocks.put(block), this.encryptionConfig);
+        const pendingOps = await processChanges(changes, this.workspace, this.current, this.blocks, async (block) => {
+            await this.storeForUpload([block]);
+        }, this.encoder, this.contentFetcher);
         this.pendingOps.push(...pendingOps);
     }
     /**
@@ -133,13 +115,14 @@ export class SyncEngine {
         return op;
     }
     async _syncInner() {
-        const { name } = this.requireRunning();
+        this.requireRunning();
         const beforeEntries = await this.getPailEntries();
         if (this.pendingOps.length === 0) {
             // No pending ops — just pull remote
             try {
-                const result = await Revision.resolve(this.blocks, name, {
+                const result = await Revision.resolve(this.blocks, this.name, {
                     base: this.current ?? undefined,
+                    remotes: this.remotes,
                 });
                 await this.storeBlocks(result.additions);
                 this.current = result.value;
@@ -155,22 +138,19 @@ export class SyncEngine {
             try {
                 while (pendingOps.length > 0) {
                     if (!this.carFile) {
-                        throw new Error("CAR file not initialized");
-                    }
-                    const { current, revisionBlocks, event, remainingOps } = await applyPendingOps(this.blocks, name, this.current, pendingOps);
-                    this.current = current;
-                    for (const block of revisionBlocks) {
-                        await this.carFile.put(block);
-                    }
-                    await this.storeBlocks(revisionBlocks);
-                    if (event) {
-                        await this.carFile.put(event);
-                        await this.storeBlocks([event]);
+                        this.carFile = await makeTempCar();
                     }
-                    pendingOps = remainingOps;
+                    const { revision, additions, remainingOps } = await applyPendingOps(this.blocks, this.current, pendingOps);
+                    await this.storeForUpload(additions);
+                    await this.storeForUpload([revision.event]);
                     await this.possiblyUploadCAR();
-                    if (pendingOps.length > 0) {
+                    const { value, additions: publishAdditions } = await publish(this.blocks, this.name, revision, { remotes: this.remotes });
+                    pendingOps = remainingOps;
+                    this.current = value;
+                    // save the next round of additions to CAR so they're ready to go if there are more pending ops, otherwise we would have to wait until the next sync call to upload them
+                    if (publishAdditions.length > 0) {
                         this.carFile = await makeTempCar();
+                        await this.storeForUpload(publishAdditions);
                     }
                 }
             }
@@ -183,12 +163,9 @@ export class SyncEngine {
         const afterEntries = await this.getPailEntries();
         const remoteChanges = diffRemoteChanges(beforeEntries, afterEntries);
         if (remoteChanges.length > 0) {
-            await applyRemoteChanges(remoteChanges, afterEntries, this.workspace, {
+            await applyRemoteChanges(remoteChanges, afterEntries, this.workspace, this.contentFetcher, {
                 blocks: this.blocks,
                 current: this.current ?? undefined,
-                decrypt: this.decryptionConfig && this.encryptedClient
-                    ? makeDecryptFn(this.encryptedClient, this.decryptionConfig, name.agent)
-                    : undefined,
             });
         }
         this.lastSync = Date.now();
@@ -198,12 +175,12 @@ export class SyncEngine {
      */
     async possiblyUploadCAR() {
         if (this.carFile) {
-            const { storachaClient } = this.requireRunning();
+            this.requireRunning();
             const readableCar = await this.carFile.switchToReadable();
             this.carFile = null;
             if (readableCar) {
                 try {
-                    await storachaClient.uploadCAR(readableCar.readable);
+                    await this.client.uploadCAR(readableCar.readable);
                 }
                 finally {
                     await readableCar.cleanup();
@@ -230,14 +207,7 @@ export class SyncEngine {
      */
     async stop() {
         this.syncLock = this.syncLock.then(() => {
-            this.state = this.state.initialized
-                ? {
-                    initialized: true,
-                    running: false,
-                    name: this.state.name,
-                    storachaClient: this.state.storachaClient,
-                }
-                : { initialized: false, running: false };
+            this.state = { running: false };
         });
         return this.syncLock;
     }
@@ -251,10 +221,11 @@ export class SyncEngine {
         return op;
     }
     async _pullRemoteInner() {
-        const { name } = this.requireRunning();
+        this.requireRunning();
         try {
-            const result = await Revision.resolve(this.blocks, name, {
+            const result = await Revision.resolve(this.blocks, this.name, {
                 base: this.current ?? undefined,
+                remotes: this.remotes,
             });
             await this.storeBlocks(result.additions);
             this.current = result.value;
@@ -266,12 +237,9 @@ export class SyncEngine {
         const entries = await this.getPailEntries();
         if (entries.size > 0) {
             const allPaths = [...entries.keys()];
-            await applyRemoteChanges(allPaths, entries, this.workspace, {
+            await applyRemoteChanges(allPaths, entries, this.workspace, this.contentFetcher, {
                 blocks: this.blocks,
                 current: this.current ?? undefined,
-                decrypt: this.decryptionConfig && this.encryptedClient
-                    ? makeDecryptFn(this.encryptedClient, this.decryptionConfig, name.agent)
-                    : undefined,
             });
         }
         this.lastSync = Date.now();
@@ -307,8 +275,7 @@ export class SyncEngine {
         };
     }
     async exportNameArchive() {
-        const { name } = this.requireInitialized();
-        const bytes = await name.archive();
+        const bytes = await this.name.archive();
         return encodeDelegation(bytes);
     }
     async storeBlocks(blocks) {
@@ -316,4 +283,8 @@ export class SyncEngine {
             await this.blocks.put(block);
         }
     }
+    async storeForUpload(blocks) {
+        await this.carFile.put(blocks);
+        await this.storeBlocks(blocks);
+    }
 }

package/dist/types/index.d.ts

@@ -4,6 +4,7 @@
 import type { UnknownLink } from "multiformats";
 import type { Block } from "multiformats";
 import type { CID } from "multiformats/cid";
+import type { DecryptionConfig, EncryptionConfig } from "@storacha/encrypt-upload-client/types";
 /** Plugin configuration (from openclaw.plugin.json schema) */
 export interface SyncPluginConfig {
     enabled: boolean;
@@ -58,12 +59,17 @@ export interface FileChange {
     type: "add" | "change" | "unlink";
     path: string;
 }
-/** Encoded file result */
-export interface EncodedFile {
-    path: string;
-    blocks: ReadableStream<Block>;
-    size: number;
+/** Bundled encryption + decryption config for private spaces. */
+export interface CryptoConfig {
+    encryptionConfig: EncryptionConfig;
+    decryptionConfig: DecryptionConfig;
+}
+/** Minimal storage client interface (subset of @storacha/client used by SyncEngine). */
+export interface StorageClient {
+    uploadCAR(car: import("@storacha/upload-client/types").BlobLike): Promise<unknown>;
 }
+export type Encoder = (file: Blob) => Promise<ReadableStream<Block>>;
+export type ContentFetcher = (cid: CID) => Promise<Uint8Array>;
 /** Diff operation for pail */
 export interface PailOp {
     type: "put" | "del";

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE5C,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE;QACV,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,aAAa,CAAC;AAEvD,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,mEAAmE;IACnE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,yBAAyB;AACzB,MAAM,WAAW,SAAS;IACxB,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,4BAA4B;IAC5B,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,qCAAqC;AACrC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,0BAA0B;AAC1B,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,8BAA8B;AAC9B,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,KAAK,GAAG,KAAK,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,GAAG,CAAC;CACb"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAE/C,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE;QACV,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,aAAa,CAAC;AAEvD,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,mEAAmE;IACnE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,yBAAyB;AACzB,MAAM,WAAW,SAAS;IACxB,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,4BAA4B;IAC5B,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,qCAAqC;AACrC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,iEAAiE;AACjE,MAAM,WAAW,YAAY;IAC3B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,gBAAgB,EAAE,gBAAgB,CAAC;CACpC;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,GAAG,EAAE,OAAO,+BAA+B,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpF;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAErE,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAE/D,8BAA8B;AAC9B,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,KAAK,GAAG,KAAK,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,GAAG,CAAC;CACb"}

package/dist/utils/config.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Helpers for building runtime objects from DeviceConfig.
+ *
+ * - createStorachaClient: Storacha upload client
+ * - resolveNameFromConfig: UCN Pail NameView
+ * - resolveCryptoConfig: encryption / decryption config (private spaces)
+ */
+import type { NameView } from "@storacha/ucn/pail/api";
+import type { DeviceConfig, CryptoConfig } from "../types/index.js";
+import type { Client } from "@storacha/client";
+/**
+ * Build a Storacha Client from device config.
+ * Requires agentKey and uploadDelegation to be present.
+ */
+export declare function createStorachaClient(config: DeviceConfig): Promise<Client>;
+/**
+ * Resolve a UCN Pail NameView from device config.
+ * Picks the right path: archive → delegation → create new.
+ */
+export declare function resolveNameFromConfig(config: DeviceConfig): Promise<NameView>;
+/**
+ * Build encryption/decryption config from device config.
+ * Returns null for public spaces.
+ */
+export declare function resolveCryptoConfig(config: DeviceConfig): Promise<CryptoConfig | null>;
+//# sourceMappingURL=config.d.ts.map

package/dist/utils/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAUvD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,MAAM,CAAC,CA6BjB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,QAAQ,CAAC,CAcnB;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAmC9B"}

package/dist/utils/config.js

@@ -0,0 +1,89 @@
+/**
+ * Helpers for building runtime objects from DeviceConfig.
+ *
+ * - createStorachaClient: Storacha upload client
+ * - resolveNameFromConfig: UCN Pail NameView
+ * - resolveCryptoConfig: encryption / decryption config (private spaces)
+ */
+import { Agent as PailAgent, Name } from "@storacha/ucn/pail";
+import { create as createClient } from "@storacha/client";
+import { StoreMemory } from "@storacha/client/stores/memory";
+import { extract } from "@storacha/client/delegation";
+import { decodeDelegation } from "./delegation.js";
+import { makeEncryptionConfig, makeDecryptionConfig, delegatePlanningDelegationToKMS, } from "./crypto.js";
+/**
+ * Build a Storacha Client from device config.
+ * Requires agentKey and uploadDelegation to be present.
+ */
+export async function createStorachaClient(config) {
+    if (!config.uploadDelegation) {
+        throw new Error("No upload delegation in device config");
+    }
+    const agent = PailAgent.parse(config.agentKey);
+    const client = await createClient({
+        principal: agent,
+        store: new StoreMemory(),
+    });
+    // Import the upload delegation (space → agent)
+    const uploadBytes = decodeDelegation(config.uploadDelegation);
+    const { ok: uploadDelegation, error: uploadErr } = await extract(uploadBytes);
+    if (!uploadDelegation) {
+        throw new Error(`Failed to extract upload delegation: ${uploadErr}`);
+    }
+    // addSpace registers the space and adds the delegation as a proof
+    await client.addSpace(uploadDelegation);
+    // Set the space as current so uploads target it
+    const spaceDID = uploadDelegation.capabilities[0]?.with;
+    if (spaceDID) {
+        await client.setCurrentSpace(spaceDID);
+    }
+    return client;
+}
+/**
+ * Resolve a UCN Pail NameView from device config.
+ * Picks the right path: archive → delegation → create new.
+ */
+export async function resolveNameFromConfig(config) {
+    const agent = PailAgent.parse(config.agentKey);
+    if (config.nameArchive) {
+        const archiveBytes = decodeDelegation(config.nameArchive);
+        return Name.extract(agent, archiveBytes);
+    }
+    else if (config.nameDelegation) {
+        const nameBytes = decodeDelegation(config.nameDelegation);
+        const { ok: delegation } = await extract(nameBytes);
+        if (!delegation)
+            throw new Error("Failed to extract name delegation");
+        return Name.from(agent, [delegation]);
+    }
+    else {
+        return Name.create(agent);
+    }
+}
+/**
+ * Build encryption/decryption config from device config.
+ * Returns null for public spaces.
+ */
+export async function resolveCryptoConfig(config) {
+    if (config.access?.type !== "private")
+        return null;
+    if (!config.planDelegation) {
+        throw new Error("Private space requires a plan delegation for KMS access");
+    }
+    const agent = PailAgent.parse(config.agentKey);
+    const planBytes = decodeDelegation(config.planDelegation);
+    const { ok: planDel } = await extract(planBytes);
+    if (!planDel)
+        throw new Error("Failed to extract plan delegation");
+    const planDelForKMS = await delegatePlanningDelegationToKMS(agent, planDel);
+    const uploadBytes = decodeDelegation(config.uploadDelegation);
+    const { ok: uploadDel } = await extract(uploadBytes);
+    if (!uploadDel)
+        throw new Error("Failed to extract upload delegation");
+    const encryptionConfig = makeEncryptionConfig(agent, config.spaceDID, [planDelForKMS, uploadDel]);
+    const decryptionConfig = makeDecryptionConfig(config.spaceDID, uploadDel, [planDelForKMS, uploadDel]);
+    return {
+        encryptionConfig,
+        decryptionConfig,
+    };
+}

package/dist/utils/contentfetcher.d.ts

@@ -0,0 +1,6 @@
+import { BlockFetcher } from "@web3-storage/pail/api";
+import { ContentFetcher, CryptoConfig } from "../types/index.js";
+import { Signer } from "@ucanto/interface";
+import { Client } from "@storacha/client";
+export declare const makeContentFetcher: (cryptoConfig: CryptoConfig | null, blocks: BlockFetcher, client: Client, agent: Signer) => ContentFetcher;
+//# sourceMappingURL=contentfetcher.d.ts.map

package/dist/utils/contentfetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contentfetcher.d.ts","sourceRoot":"","sources":["../../src/utils/contentfetcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAG3C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAK1C,eAAO,MAAM,kBAAkB,GAC7B,cAAc,YAAY,GAAG,IAAI,EACjC,QAAQ,YAAY,EACpB,QAAQ,MAAM,EACd,OAAO,MAAM,KACZ,cAoCF,CAAC"}

package/dist/utils/contentfetcher.js

@@ -0,0 +1,58 @@
+import { decrypt } from "@storacha/capabilities/space";
+import { decryptFile } from "@storacha/encrypt-upload-client/utils/decrypt";
+import { getKMSCryptoAdapter } from "./crypto.js";
+import { exporter } from "ipfs-unixfs-exporter";
+export const makeContentFetcher = (cryptoConfig, blocks, client, agent) => {
+    if (cryptoConfig) {
+        const { decryptionConfig } = cryptoConfig;
+        return async (cid) => {
+            const decryptDelegation = await decrypt.delegate({
+                issuer: agent,
+                audience: agent,
+                with: decryptionConfig.spaceDID,
+                nb: {
+                    resource: cid,
+                },
+                expiration: Math.floor(Date.now() / 1000) + 60 * 15, // 15 minutes
+                proofs: [decryptionConfig.decryptDelegation],
+            });
+            const { stream } = await decryptFile(getKMSCryptoAdapter(), client, readableStorageFromFetcher(blocks), cid, {
+                ...decryptionConfig,
+                decryptDelegation,
+            });
+            return drainStream(stream);
+        };
+    }
+    return async (cid) => {
+        const entry = await exporter(cid, readableStorageFromFetcher(blocks));
+        if (entry.type !== "file" && entry.type !== "raw") {
+            throw new Error(`Expected file or raw entry for CID ${cid}, got ${entry.type}`);
+        }
+        return drainStream(entry.content());
+    };
+};
+const readableStorageFromFetcher = (blocks) => ({
+    get: async (cid) => {
+        const block = await blocks.get(cid);
+        if (!block)
+            throw new Error(`Block not found for CID ${cid}`);
+        return block.bytes;
+    },
+});
+/**
+ * Drain an AsyncIterable (or ReadableStream) into a single Uint8Array.
+ */
+async function drainStream(iter) {
+    const chunks = [];
+    for await (const chunk of iter) {
+        chunks.push(chunk);
+    }
+    const totalLength = chunks.reduce((sum, c) => sum + c.length, 0);
+    const result = new Uint8Array(totalLength);
+    let offset = 0;
+    for (const chunk of chunks) {
+        result.set(chunk, offset);
+        offset += chunk.length;
+    }
+    return result;
+}

package/dist/utils/crypto.d.ts

@@ -3,7 +3,6 @@
  * Uses @storacha/encrypt-upload-client with KMS-based key management.
  */
 import type { Block } from "multiformats";
-import type { CID } from "multiformats/cid";
 import type { Client } from "@storacha/client";
 import type { Proof, Signer } from "@ucanto/interface";
 type SpaceDID = `did:key:${string}`;
@@ -21,10 +20,5 @@ export declare function makeDecryptionConfig(spaceDID: SpaceDID, decryptDelegati
  * (UnixFS-encoded encrypted content + metadata block appended).
  */
 export declare function encryptToBlockStream(file: BlobLike, encryptionConfig: EncryptionConfig): Promise<ReadableStream<Block>>;
-/**
- * Create a decrypt function for mdsync resolveValue.
- * Fetches encrypted content by CID via EncryptedClient and returns decrypted bytes.
- */
-export declare function makeDecryptFn(encryptedClient: EncryptedClient, decryptionConfig: DecryptionConfig, agent: Signer): (cid: CID) => Promise<Uint8Array>;
 export {};
 //# sourceMappingURL=crypto.d.ts.map

package/dist/utils/crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/utils/crypto.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACvD,KAAK,QAAQ,GAAG,WAAW,MAAM,EAAE,CAAC;AACpC,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,QAAQ,EACR,eAAe,EAChB,MAAM,uCAAuC,CAAC;AAO/C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAU/C,wBAAgB,mBAAmB,IAAI,aAAa,CAInD;AAED,wBAAsB,kBAAkB,CACtC,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,eAAe,CAAC,CAM1B;AAED,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,UAAU,GACzB,OAAO,CAAC,KAAK,CAAC,CAUhB;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,WAAW,MAAM,EAAE,CAAA;CAAE,EAC1C,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,KAAK,EAAE,GACd,gBAAgB,CAMlB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,QAAQ,EAClB,iBAAiB,EAAE,KAAK,EACxB,MAAM,CAAC,EAAE,KAAK,EAAE,GACf,gBAAgB,CAMlB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,QAAQ,EACd,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAIhC;AAuBD;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,eAAe,EAAE,eAAe,EAChC,gBAAgB,EAAE,gBAAgB,EAClC,KAAK,EAAE,MAAM,GACZ,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,CAkBnC"}
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/utils/crypto.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACvD,KAAK,QAAQ,GAAG,WAAW,MAAM,EAAE,CAAC;AACpC,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,QAAQ,EACR,eAAe,EAChB,MAAM,uCAAuC,CAAC;AAO/C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAS/C,wBAAgB,mBAAmB,IAAI,aAAa,CAInD;AAED,wBAAsB,kBAAkB,CACtC,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,eAAe,CAAC,CAM1B;AAED,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,UAAU,GACzB,OAAO,CAAC,KAAK,CAAC,CAUhB;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,WAAW,MAAM,EAAE,CAAA;CAAE,EAC1C,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,KAAK,EAAE,GACd,gBAAgB,CAMlB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,QAAQ,EAClB,iBAAiB,EAAE,KAAK,EACxB,MAAM,CAAC,EAAE,KAAK,EAAE,GACf,gBAAgB,CAMlB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,QAAQ,EACd,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAIhC"}

package/dist/utils/crypto.js

@@ -6,7 +6,6 @@ import { createGenericKMSAdapter } from "@storacha/encrypt-upload-client/factori
 import { create as createEncryptedClient } from "@storacha/encrypt-upload-client";
 import { encryptFile, encryptedBlockStream, } from "@storacha/encrypt-upload-client/utils/encrypt";
 import { delegate } from "@ucanto/core";
-import { decrypt } from "@storacha/capabilities/space";
 const KMS_SERVICE_URL = "https://ucan-kms-production.protocol-labs.workers.dev";
 const KMS_SERVICE_DID = "did:key:z6MksQJobJmBfPhjHWgFXVppqM6Fcjc1k7xu4z6xvusVrtKv";
 let cachedAdapter = null;
@@ -57,47 +56,3 @@ export async function encryptToBlockStream(file, encryptionConfig) {
     const payload = await encryptFile(adapter, file, encryptionConfig);
     return encryptedBlockStream(payload, adapter);
 }
-/**
- * Drain a ReadableStream into a single Uint8Array.
- */
-async function drainStream(stream) {
-    const reader = stream.getReader();
-    const chunks = [];
-    while (true) {
-        const { done, value } = await reader.read();
-        if (done)
-            break;
-        chunks.push(value);
-    }
-    const totalLength = chunks.reduce((sum, c) => sum + c.length, 0);
-    const result = new Uint8Array(totalLength);
-    let offset = 0;
-    for (const chunk of chunks) {
-        result.set(chunk, offset);
-        offset += chunk.length;
-    }
-    return result;
-}
-/**
- * Create a decrypt function for mdsync resolveValue.
- * Fetches encrypted content by CID via EncryptedClient and returns decrypted bytes.
- */
-export function makeDecryptFn(encryptedClient, decryptionConfig, agent) {
-    return async (cid) => {
-        const decryptDelegation = await decrypt.delegate({
-            issuer: agent,
-            audience: agent,
-            with: decryptionConfig.spaceDID,
-            nb: {
-                resource: cid,
-            },
-            expiration: Math.floor(Date.now() / 1000) + 60 * 15, // 15 minutes
-            proofs: [decryptionConfig.decryptDelegation],
-        });
-        const { stream } = await encryptedClient.retrieveAndDecryptFile(cid, {
-            ...decryptionConfig,
-            decryptDelegation,
-        });
-        return drainStream(stream);
-    };
-}

package/dist/utils/differ.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"differ.d.ts","sourceRoot":"","sources":["../../src/utils/differ.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,0CAA0C;AAC1C,MAAM,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE3C,iDAAiD;AACjD,MAAM,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE5C;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,EAAE,CAmB5E;AAGD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,WAAW,GACjB,MAAM,EAAE,CAWV"}
+{"version":3,"file":"differ.d.ts","sourceRoot":"","sources":["../../src/utils/differ.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,0CAA0C;AAC1C,MAAM,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE3C,iDAAiD;AACjD,MAAM,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE5C;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,GAAG,MAAM,EAAE,CAmB5E;AAGD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,WAAW,GACjB,MAAM,EAAE,CAkBV"}

package/dist/utils/differ.js

@@ -43,5 +43,11 @@ export function diffRemoteChanges(before, after) {
             changed.push(path);
         }
     }
+    // Detect deletions: paths in before but not in after
+    for (const path of before.keys()) {
+        if (!after.has(path)) {
+            changed.push(path);
+        }
+    }
     return changed;
 }

package/dist/utils/encoder.d.ts

@@ -1,16 +1,3 @@
-/**
- * File encoder - converts files to UnixFS DAG with root CID
- *
- * Uses @storacha/upload-client's UnixFS encoding to generate
- * content-addressed blocks for each file.
- */
-import type { EncodedFile } from "../types/index.js";
-/**
- * Encode a single file to UnixFS blocks
- */
-export declare function encodeWorkspaceFile(workspacePath: string, relativePath: string): Promise<EncodedFile>;
-/**
- * Encode multiple files, returning all encoded results
- */
-export declare function encodeFiles(workspacePath: string, relativePaths: string[]): Promise<EncodedFile[]>;
+import { CryptoConfig, Encoder } from "../types/index.js";
+export declare const makeEncoder: (cryptoConfig: CryptoConfig | null) => Encoder;
 //# sourceMappingURL=encoder.d.ts.map