mindoodb 0.0.1

package/dist/core/appendonlystores/network/AuthenticationService.js

@@ -0,0 +1,297 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationService = void 0;
+const uuid_1 = require("uuid");
+const types_1 = require("./types");
+/**
+ * Authentication service for network sync operations.
+ *
+ * Handles:
+ * - Challenge generation (UUID v7)
+ * - Signature verification using user's public signing key
+ * - JWT token generation and validation
+ * - User revocation checks
+ *
+ * Security features:
+ * - Single-use challenges prevent replay attacks
+ * - Challenge expiration (5 minutes default)
+ * - Token expiration (1 hour default)
+ * - Revocation checks against tenant directory
+ */
+class AuthenticationService {
+    constructor(cryptoAdapter, directory, tenantId, options) {
+        // In-memory challenge storage (in production, use a distributed cache)
+        this.challenges = new Map();
+        this.cryptoAdapter = cryptoAdapter;
+        this.directory = directory;
+        this.tenantId = tenantId;
+        // Generate random JWT secret if not provided
+        this.jwtSecret = options?.jwtSecret || this.cryptoAdapter.getRandomValues(new Uint8Array(32));
+        // Default: 5 minutes for challenge, 1 hour for token
+        this.challengeExpirationMs = options?.challengeExpirationMs || 5 * 60 * 1000;
+        this.tokenExpirationMs = options?.tokenExpirationMs || 60 * 60 * 1000;
+    }
+    /**
+     * Generate a challenge for a user to sign.
+     *
+     * @param username The username requesting authentication
+     * @returns The challenge string (UUID v7)
+     * @throws NetworkError if user not found or revoked
+     */
+    async generateChallenge(username) {
+        console.log(`[AuthenticationService] Generating challenge for user: ${username}`);
+        // Check if user exists and is not revoked
+        const userKeys = await this.directory.getUserPublicKeys(username);
+        if (!userKeys) {
+            // Check if user was revoked or never existed
+            const isRevoked = await this.directory.isUserRevoked(username);
+            if (isRevoked) {
+                throw new types_1.NetworkError(types_1.NetworkErrorType.USER_REVOKED, `User ${username} has been revoked`);
+            }
+            throw new types_1.NetworkError(types_1.NetworkErrorType.USER_NOT_FOUND, `User ${username} not found`);
+        }
+        // Generate UUID v7 challenge
+        const challenge = (0, uuid_1.v7)();
+        const now = Date.now();
+        // Store challenge
+        const authChallenge = {
+            challenge,
+            username,
+            createdAt: now,
+            expiresAt: now + this.challengeExpirationMs,
+            used: false,
+        };
+        this.challenges.set(challenge, authChallenge);
+        // Clean up expired challenges periodically
+        this.cleanupExpiredChallenges();
+        console.log(`[AuthenticationService] Generated challenge for user ${username}: ${challenge}`);
+        return challenge;
+    }
+    /**
+     * Authenticate a user by verifying their signed challenge.
+     *
+     * @param challenge The challenge string
+     * @param signature The Ed25519 signature of the challenge
+     * @returns AuthResult with success status and JWT token
+     */
+    async authenticate(challenge, signature) {
+        console.log(`[AuthenticationService] Authenticating challenge: ${challenge}`);
+        // Get and validate challenge
+        const authChallenge = this.challenges.get(challenge);
+        if (!authChallenge) {
+            console.log(`[AuthenticationService] Challenge not found: ${challenge}`);
+            return {
+                success: false,
+                error: "Challenge not found or expired",
+            };
+        }
+        // Check if challenge is expired
+        if (Date.now() > authChallenge.expiresAt) {
+            console.log(`[AuthenticationService] Challenge expired: ${challenge}`);
+            this.challenges.delete(challenge);
+            return {
+                success: false,
+                error: "Challenge expired",
+            };
+        }
+        // Check if challenge was already used
+        if (authChallenge.used) {
+            console.log(`[AuthenticationService] Challenge already used: ${challenge}`);
+            return {
+                success: false,
+                error: "Challenge already used",
+            };
+        }
+        // Mark challenge as used (single-use)
+        authChallenge.used = true;
+        const username = authChallenge.username;
+        // Get user's public signing key
+        const userKeys = await this.directory.getUserPublicKeys(username);
+        if (!userKeys) {
+            console.log(`[AuthenticationService] User not found or revoked: ${username}`);
+            return {
+                success: false,
+                error: "User not found or revoked",
+            };
+        }
+        // Verify signature
+        const isValid = await this.verifySignature(challenge, signature, userKeys.signingPublicKey);
+        if (!isValid) {
+            console.log(`[AuthenticationService] Invalid signature for user: ${username}`);
+            return {
+                success: false,
+                error: "Invalid signature",
+            };
+        }
+        // Generate JWT token
+        const token = await this.generateToken(username);
+        console.log(`[AuthenticationService] Authentication successful for user: ${username}`);
+        return {
+            success: true,
+            token,
+        };
+    }
+    /**
+     * Validate a JWT token.
+     *
+     * @param token The JWT token to validate
+     * @returns The token payload if valid, null otherwise
+     */
+    async validateToken(token) {
+        console.log(`[AuthenticationService] Validating token`);
+        try {
+            const payload = await this.verifyToken(token);
+            if (!payload) {
+                console.log(`[AuthenticationService] Invalid token signature`);
+                return null;
+            }
+            // Check expiration
+            const now = Math.floor(Date.now() / 1000);
+            if (payload.exp < now) {
+                console.log(`[AuthenticationService] Token expired`);
+                return null;
+            }
+            // Check if user is still valid (not revoked)
+            const isRevoked = await this.directory.isUserRevoked(payload.sub);
+            if (isRevoked) {
+                console.log(`[AuthenticationService] User revoked: ${payload.sub}`);
+                return null;
+            }
+            console.log(`[AuthenticationService] Token valid for user: ${payload.sub}`);
+            return payload;
+        }
+        catch (error) {
+            console.error(`[AuthenticationService] Token validation error:`, error);
+            return null;
+        }
+    }
+    /**
+     * Verify an Ed25519 signature.
+     */
+    async verifySignature(message, signature, publicKeyPem) {
+        const subtle = this.cryptoAdapter.getSubtle();
+        try {
+            // Import public key
+            const pemContents = publicKeyPem
+                .replace(/-----BEGIN PUBLIC KEY-----/g, "")
+                .replace(/-----END PUBLIC KEY-----/g, "")
+                .replace(/\s/g, "");
+            const keyData = this.base64ToUint8Array(pemContents);
+            const publicKey = await subtle.importKey("spki", keyData.buffer, { name: "Ed25519" }, false, ["verify"]);
+            // Verify signature
+            const messageBytes = new TextEncoder().encode(message);
+            const isValid = await subtle.verify({ name: "Ed25519" }, publicKey, signature.buffer.slice(signature.byteOffset, signature.byteOffset + signature.byteLength), messageBytes.buffer);
+            return isValid;
+        }
+        catch (error) {
+            console.error(`[AuthenticationService] Signature verification error:`, error);
+            return false;
+        }
+    }
+    /**
+     * Generate a JWT token.
+     * Uses HMAC-SHA256 for signing.
+     */
+    async generateToken(username) {
+        const subtle = this.cryptoAdapter.getSubtle();
+        const now = Math.floor(Date.now() / 1000);
+        const payload = {
+            sub: username,
+            iat: now,
+            exp: now + Math.floor(this.tokenExpirationMs / 1000),
+            tenantId: this.tenantId,
+        };
+        // Create JWT header and payload
+        const header = { alg: "HS256", typ: "JWT" };
+        const headerB64 = this.base64UrlEncode(JSON.stringify(header));
+        const payloadB64 = this.base64UrlEncode(JSON.stringify(payload));
+        // Sign with HMAC-SHA256
+        const signingKey = await subtle.importKey("raw", this.jwtSecret.buffer, { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+        const dataToSign = new TextEncoder().encode(`${headerB64}.${payloadB64}`);
+        const signature = await subtle.sign("HMAC", signingKey, dataToSign.buffer);
+        const signatureB64 = this.uint8ArrayToBase64Url(new Uint8Array(signature));
+        return `${headerB64}.${payloadB64}.${signatureB64}`;
+    }
+    /**
+     * Verify and decode a JWT token.
+     */
+    async verifyToken(token) {
+        const subtle = this.cryptoAdapter.getSubtle();
+        const parts = token.split(".");
+        if (parts.length !== 3) {
+            return null;
+        }
+        const [headerB64, payloadB64, signatureB64] = parts;
+        try {
+            // Verify signature
+            const signingKey = await subtle.importKey("raw", this.jwtSecret.buffer, { name: "HMAC", hash: "SHA-256" }, false, ["verify"]);
+            const dataToVerify = new TextEncoder().encode(`${headerB64}.${payloadB64}`);
+            const signature = this.base64UrlToUint8Array(signatureB64);
+            const isValid = await subtle.verify("HMAC", signingKey, signature.buffer.slice(signature.byteOffset, signature.byteOffset + signature.byteLength), dataToVerify.buffer);
+            if (!isValid) {
+                return null;
+            }
+            // Decode payload
+            const payloadJson = this.base64UrlDecode(payloadB64);
+            const payload = JSON.parse(payloadJson);
+            return payload;
+        }
+        catch (error) {
+            console.error(`[AuthenticationService] Token verification error:`, error);
+            return null;
+        }
+    }
+    /**
+     * Clean up expired challenges.
+     */
+    cleanupExpiredChallenges() {
+        const now = Date.now();
+        for (const [challenge, authChallenge] of this.challenges) {
+            if (authChallenge.expiresAt < now) {
+                this.challenges.delete(challenge);
+            }
+        }
+    }
+    // Base64 URL encoding/decoding utilities
+    base64UrlEncode(str) {
+        const base64 = btoa(str);
+        return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+    }
+    base64UrlDecode(str) {
+        let base64 = str.replace(/-/g, "+").replace(/_/g, "/");
+        while (base64.length % 4) {
+            base64 += "=";
+        }
+        return atob(base64);
+    }
+    uint8ArrayToBase64Url(bytes) {
+        let binary = "";
+        for (let i = 0; i < bytes.length; i++) {
+            binary += String.fromCharCode(bytes[i]);
+        }
+        const base64 = btoa(binary);
+        return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+    }
+    base64UrlToUint8Array(str) {
+        let base64 = str.replace(/-/g, "+").replace(/_/g, "/");
+        while (base64.length % 4) {
+            base64 += "=";
+        }
+        const binary = atob(base64);
+        const bytes = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i++) {
+            bytes[i] = binary.charCodeAt(i);
+        }
+        return bytes;
+    }
+    base64ToUint8Array(base64) {
+        const binary = atob(base64);
+        const bytes = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i++) {
+            bytes[i] = binary.charCodeAt(i);
+        }
+        return bytes;
+    }
+}
+exports.AuthenticationService = AuthenticationService;
+//# sourceMappingURL=AuthenticationService.js.map

package/dist/core/appendonlystores/network/AuthenticationService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthenticationService.js","sourceRoot":"","sources":["../../../../src/core/appendonlystores/network/AuthenticationService.ts"],"names":[],"mappings":";;;AAAA,+BAAoC;AAQpC,mCAAyD;AAEzD;;;;;;;;;;;;;;GAcG;AACH,MAAa,qBAAqB;IAehC,YACE,aAA4B,EAC5B,SAAgC,EAChC,QAAgB,EAChB,OAIC;QAlBH,uEAAuE;QAC/D,eAAU,GAA+B,IAAI,GAAG,EAAE,CAAC;QAmBzD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,6CAA6C;QAC7C,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAE9F,qDAAqD;QACrD,IAAI,CAAC,qBAAqB,GAAG,OAAO,EAAE,qBAAqB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC7E,IAAI,CAAC,iBAAiB,GAAG,OAAO,EAAE,iBAAiB,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACxE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QACtC,OAAO,CAAC,GAAG,CAAC,0DAA0D,QAAQ,EAAE,CAAC,CAAC;QAElF,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,6CAA6C;YAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC/D,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,oBAAY,CAAC,wBAAgB,CAAC,YAAY,EAAE,QAAQ,QAAQ,mBAAmB,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,IAAI,oBAAY,CAAC,wBAAgB,CAAC,cAAc,EAAE,QAAQ,QAAQ,YAAY,CAAC,CAAC;QACxF,CAAC;QAED,6BAA6B;QAC7B,MAAM,SAAS,GAAG,IAAA,SAAM,GAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,kBAAkB;QAClB,MAAM,aAAa,GAAkB;YACnC,SAAS;YACT,QAAQ;YACR,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,qBAAqB;YAC3C,IAAI,EAAE,KAAK;SACZ,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAE9C,2CAA2C;QAC3C,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAEhC,OAAO,CAAC,GAAG,CAAC,wDAAwD,QAAQ,KAAK,SAAS,EAAE,CAAC,CAAC;QAC9F,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,SAAqB;QACzD,OAAO,CAAC,GAAG,CAAC,qDAAqD,SAAS,EAAE,CAAC,CAAC;QAE9E,6BAA6B;QAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,gDAAgD,SAAS,EAAE,CAAC,CAAC;YACzE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,gCAAgC;aACxC,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,8CAA8C,SAAS,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,mBAAmB;aAC3B,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,mDAAmD,SAAS,EAAE,CAAC,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,wBAAwB;aAChC,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,aAAa,CAAC,IAAI,GAAG,IAAI,CAAC;QAE1B,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;QAExC,gCAAgC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,sDAAsD,QAAQ,EAAE,CAAC,CAAC;YAC9E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,2BAA2B;aACnC,CAAC;QACJ,CAAC;QAED,mBAAmB;QACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CACxC,SAAS,EACT,SAAS,EACT,QAAQ,CAAC,gBAAgB,CAC1B,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,uDAAuD,QAAQ,EAAE,CAAC,CAAC;YAC/E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,mBAAmB;aAC3B,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAEjD,OAAO,CAAC,GAAG,CAAC,+DAA+D,QAAQ,EAAE,CAAC,CAAC;QACvF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK;SACN,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAE9C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,mBAAmB;YACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;gBACrD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,6CAA6C;YAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClE,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,yCAAyC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBACpE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,iDAAiD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5E,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAC3B,OAAe,EACf,SAAqB,EACrB,YAAoB;QAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QAE9C,IAAI,CAAC;YACH,oBAAoB;YACpB,MAAM,WAAW,GAAG,YAAY;iBAC7B,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC;iBAC1C,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC;iBACxC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAEtB,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;YAErD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CACtC,MAAM,EACN,OAAO,CAAC,MAAqB,EAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;YAEF,mBAAmB;YACnB,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CACjC,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,SAAS,EACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAgB,EACxG,YAAY,CAAC,MAAqB,CACnC,CAAC;YAEF,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,KAAK,CAAC,CAAC;YAC9E,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,aAAa,CAAC,QAAgB;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QAE9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAA4B;YACvC,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YACpD,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;QAEF,gCAAgC;QAChC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAEjE,wBAAwB;QACxB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,IAAI,CAAC,SAAS,CAAC,MAAqB,EACpC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,MAAqB,CAAC,CAAC;QAC1F,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAE3E,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,YAAY,EAAE,CAAC;IACtD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,KAAa;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QAE9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;QAEpD,IAAI,CAAC;YACH,mBAAmB;YACnB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,IAAI,CAAC,SAAS,CAAC,MAAqB,EACpC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;YAEF,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;YAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;YAE3D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CACjC,MAAM,EACN,UAAU,EACV,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAgB,EACxG,YAAY,CAAC,MAAqB,CACnC,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YAED,iBAAiB;YACjB,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAA4B,CAAC;YAEnE,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,wBAAwB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzD,IAAI,aAAa,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBAClC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,yCAAyC;IAEjC,eAAe,CAAC,GAAW;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,eAAe,CAAC,GAAW;QACjC,IAAI,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAEO,qBAAqB,CAAC,KAAiB;QAC7C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,qBAAqB,CAAC,GAAW;QACvC,IAAI,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,kBAAkB,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA9XD,sDA8XC"}

package/dist/core/appendonlystores/network/NetworkTransport.d.ts

@@ -0,0 +1,174 @@
+import type { StoreEntry, StoreEntryMetadata } from "../../types";
+import type { NetworkEncryptedEntry, AuthResult } from "./types";
+/**
+ * Abstract interface for network communication in MindooDB sync.
+ *
+ * This interface defines the protocol for secure communication between
+ * clients and servers (or peer-to-peer). It can be implemented for various
+ * transport protocols like HTTP, WebSocket, WebRTC, etc.
+ *
+ * The authentication flow is:
+ * 1. Client calls requestChallenge(username) to get a challenge string
+ * 2. Client signs the challenge with their private signing key
+ * 3. Client calls authenticate(challenge, signature) to get a JWT token
+ * 4. Client uses the token for subsequent findNewEntries() and getEntries() calls
+ *
+ * Security features:
+ * - Challenge-response prevents replay attacks
+ * - JWT tokens have expiration for session management
+ * - Entry payloads are RSA-encrypted with recipient's public key
+ */
+export interface NetworkTransport {
+    /**
+     * Request a challenge string for authentication.
+     *
+     * The server generates a unique challenge (UUID v7) that the client
+     * must sign with their private signing key to prove identity.
+     *
+     * @param username The username requesting authentication
+     * @returns The challenge string (UUID v7) to be signed
+     * @throws NetworkError with type USER_NOT_FOUND if user doesn't exist
+     * @throws NetworkError with type USER_REVOKED if user has been revoked
+     */
+    requestChallenge(username: string): Promise<string>;
+    /**
+     * Authenticate by providing a signed challenge.
+     *
+     * The server verifies the signature using the user's public signing key
+     * from the tenant directory. If valid, returns a JWT access token.
+     *
+     * @param challenge The challenge string that was signed
+     * @param signature The Ed25519 signature of the challenge
+     * @returns AuthResult with success status and JWT token (if successful)
+     * @throws NetworkError with type INVALID_SIGNATURE if signature verification fails
+     * @throws NetworkError with type CHALLENGE_EXPIRED if challenge has expired or was already used
+     * @throws NetworkError with type USER_REVOKED if user has been revoked
+     */
+    authenticate(challenge: string, signature: Uint8Array): Promise<AuthResult>;
+    /**
+     * Find entries that the remote has which we don't have locally.
+     *
+     * This is used to identify which entries need to be synchronized.
+     * The returned StoreEntryMetadata contains metadata only (no encrypted payload).
+     *
+     * @param token JWT access token from authenticate()
+     * @param haveIds List of entry IDs we already have locally
+     * @returns List of entry metadata for entries that exist remotely but not locally
+     * @throws NetworkError with type INVALID_TOKEN if token is invalid or expired
+     * @throws NetworkError with type USER_REVOKED if user has been revoked since token was issued
+     */
+    findNewEntries(token: string, haveIds: string[]): Promise<StoreEntryMetadata[]>;
+    /**
+     * Find entries for a specific document that the remote has which we don't have locally.
+     *
+     * This is an optimized version of findNewEntries that only returns entries for a specific document.
+     *
+     * @param token JWT access token from authenticate()
+     * @param haveIds List of entry IDs we already have locally for this document
+     * @param docId The document ID to filter by
+     * @returns List of entry metadata for the specified document that exist remotely but not locally
+     * @throws NetworkError with type INVALID_TOKEN if token is invalid or expired
+     * @throws NetworkError with type USER_REVOKED if user has been revoked since token was issued
+     */
+    findNewEntriesForDoc(token: string, haveIds: string[], docId: string): Promise<StoreEntryMetadata[]>;
+    /**
+     * Get entries from the remote store.
+     *
+     * The returned entries have their payloads RSA-encrypted with the
+     * requesting user's public encryption key. The client must decrypt
+     * these with their private key to get the original payload.
+     *
+     * @param token JWT access token from authenticate()
+     * @param ids The IDs of entries to retrieve
+     * @returns NetworkEncryptedEntry[] with RSA-encrypted payloads
+     * @throws NetworkError with type INVALID_TOKEN if token is invalid or expired
+     * @throws NetworkError with type USER_REVOKED if user has been revoked since token was issued
+     */
+    getEntries(token: string, ids: string[]): Promise<NetworkEncryptedEntry[]>;
+    /**
+     * Push entries to the remote store.
+     *
+     * This is used to send locally-created entries to the server for storage.
+     * The server will verify that the entry was created by a trusted user
+     * (by checking the createdByPublicKey against the tenant directory).
+     *
+     * @param token JWT access token from authenticate()
+     * @param entries The entries to push to the remote store
+     * @throws NetworkError with type INVALID_TOKEN if token is invalid or expired
+     * @throws NetworkError with type USER_REVOKED if user has been revoked since token was issued
+     * @throws NetworkError with type INVALID_SIGNATURE if entry signature verification fails
+     */
+    putEntries(token: string, entries: StoreEntry[]): Promise<void>;
+    /**
+     * Check which of the provided IDs exist in the remote store.
+     *
+     * This is more efficient than getAllIds() when checking a small number of IDs,
+     * as it only transfers the IDs that exist rather than all IDs in the store.
+     *
+     * @param token JWT access token from authenticate()
+     * @param ids The IDs to check for existence
+     * @returns List of IDs that exist in the remote store (subset of input)
+     * @throws NetworkError with type INVALID_TOKEN if token is invalid or expired
+     * @throws NetworkError with type USER_REVOKED if user has been revoked since token was issued
+     */
+    hasEntries(token: string, ids: string[]): Promise<string[]>;
+    /**
+     * Get all entry IDs from the remote store.
+     *
+     * This is used for synchronization to identify which entries the remote has.
+     * Returns only the IDs (not the full entries) for efficiency.
+     *
+     * @param token JWT access token from authenticate()
+     * @returns List of all entry IDs in the remote store
+     * @throws NetworkError with type INVALID_TOKEN if token is invalid or expired
+     * @throws NetworkError with type USER_REVOKED if user has been revoked since token was issued
+     */
+    getAllIds(token: string): Promise<string[]>;
+    /**
+     * Resolve the dependency chain starting from an entry ID.
+     *
+     * Returns IDs in dependency order, traversing backward through dependencyIds.
+     * This is more efficient than client-side traversal as it avoids multiple round trips.
+     *
+     * @param token JWT access token from authenticate()
+     * @param startId The entry ID to start traversal from
+     * @param options Optional traversal options:
+     *   - stopAtEntryType: Stop when encountering an entry of this type (e.g., "doc_snapshot")
+     *   - maxDepth: Maximum number of hops to traverse
+     *   - includeStart: Whether to include startId in the result (default: true)
+     * @returns List of entry IDs in dependency order (oldest first)
+     * @throws NetworkError with type INVALID_TOKEN if token is invalid or expired
+     * @throws NetworkError with type USER_REVOKED if user has been revoked since token was issued
+     */
+    resolveDependencies(token: string, startId: string, options?: Record<string, unknown>): Promise<string[]>;
+}
+/**
+ * Configuration options for network transport implementations.
+ */
+export interface NetworkTransportConfig {
+    /**
+     * Base URL for the remote server (for HTTP transport)
+     */
+    baseUrl?: string;
+    /**
+     * Timeout for network requests in milliseconds (default: 30000)
+     */
+    timeout?: number;
+    /**
+     * Number of retry attempts for failed requests (default: 3)
+     */
+    retryAttempts?: number;
+    /**
+     * Base delay for exponential backoff in milliseconds (default: 1000)
+     */
+    retryDelayMs?: number;
+    /**
+     * Tenant ID for scoping requests
+     */
+    tenantId: string;
+    /**
+     * Database ID for scoping requests (optional)
+     */
+    dbId?: string;
+}
+//# sourceMappingURL=NetworkTransport.d.ts.map

package/dist/core/appendonlystores/network/NetworkTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NetworkTransport.d.ts","sourceRoot":"","sources":["../../../../src/core/appendonlystores/network/NetworkTransport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEjE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEpD;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE5E;;;;;;;;;;;OAWG;IACH,cAAc,CACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAEjC;;;;;;;;;;;OAWG;IACH,oBAAoB,CAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EAAE,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAEjC;;;;;;;;;;;;OAYG;IACH,UAAU,CACR,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EAAE,GACZ,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAEpC;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhE;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5D;;;;;;;;;;OAUG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5C;;;;;;;;;;;;;;;OAeG;IACH,mBAAmB,CACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/core/appendonlystores/network/NetworkTransport.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=NetworkTransport.js.map

package/dist/core/appendonlystores/network/NetworkTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NetworkTransport.js","sourceRoot":"","sources":["../../../../src/core/appendonlystores/network/NetworkTransport.ts"],"names":[],"mappings":""}

package/dist/core/appendonlystores/network/types.d.ts

@@ -0,0 +1,135 @@
+import type { StoreEntryMetadata } from "../../types";
+/**
+ * Network-encrypted entry for secure transport over the network.
+ *
+ * Extends StoreEntryMetadata (metadata stays clear for routing/filtering)
+ * but adds an RSA-encrypted version of the payload for transport security.
+ *
+ * The metadata (docId, id, etc.) is transmitted unencrypted to allow
+ * efficient filtering and routing without requiring decryption. The actual
+ * payload data is RSA-encrypted with the recipient's public encryption key.
+ */
+export interface NetworkEncryptedEntry extends StoreEntryMetadata {
+    /**
+     * The original symmetric-encrypted payload, wrapped in RSA encryption
+     * for secure network transport.
+     *
+     * Must be decrypted with the recipient's RSA private key to get the
+     * original StoreEntry.encryptedData (which is still encrypted with
+     * the symmetric key).
+     *
+     * This provides defense-in-depth: even if RSA is compromised, the
+     * underlying symmetric encryption remains intact.
+     */
+    rsaEncryptedPayload: Uint8Array;
+}
+/**
+ * User public keys retrieved from the tenant directory.
+ * Used for authentication (signature verification) and encryption (transport encryption).
+ */
+export interface UserPublicKeys {
+    /**
+     * The user's public signing key (Ed25519, PEM format).
+     * Used for verifying signatures on challenges during authentication.
+     */
+    signingPublicKey: string;
+    /**
+     * The user's public encryption key (RSA-OAEP, PEM format).
+     * Used for encrypting change payloads for network transport.
+     */
+    encryptionPublicKey: string;
+}
+/**
+ * JWT token payload structure for authenticated sessions.
+ */
+export interface NetworkAuthTokenPayload {
+    /**
+     * Subject: the username of the authenticated user
+     */
+    sub: string;
+    /**
+     * Issued at: timestamp when the token was issued (Unix epoch seconds)
+     */
+    iat: number;
+    /**
+     * Expiration: timestamp when the token expires (Unix epoch seconds)
+     */
+    exp: number;
+    /**
+     * Tenant ID this token is valid for
+     */
+    tenantId: string;
+    /**
+     * Optional: database ID if token is scoped to a specific database
+     */
+    dbId?: string;
+}
+/**
+ * Challenge stored server-side for authentication.
+ */
+export interface AuthChallenge {
+    /**
+     * The challenge string (UUID v7)
+     */
+    challenge: string;
+    /**
+     * The username this challenge was issued for
+     */
+    username: string;
+    /**
+     * Timestamp when the challenge was created (Unix epoch milliseconds)
+     */
+    createdAt: number;
+    /**
+     * Timestamp when the challenge expires (Unix epoch milliseconds)
+     */
+    expiresAt: number;
+    /**
+     * Whether the challenge has been used (for single-use enforcement)
+     */
+    used: boolean;
+}
+/**
+ * Result of an authentication attempt.
+ */
+export interface AuthResult {
+    /**
+     * Whether authentication was successful
+     */
+    success: boolean;
+    /**
+     * JWT access token (only present if success is true)
+     */
+    token?: string;
+    /**
+     * Error message (only present if success is false)
+     */
+    error?: string;
+}
+/**
+ * Network transport error types for error handling.
+ */
+export declare enum NetworkErrorType {
+    /** Token is invalid or expired */
+    INVALID_TOKEN = "INVALID_TOKEN",
+    /** User has been revoked */
+    USER_REVOKED = "USER_REVOKED",
+    /** Signature verification failed */
+    INVALID_SIGNATURE = "INVALID_SIGNATURE",
+    /** Challenge expired or already used */
+    CHALLENGE_EXPIRED = "CHALLENGE_EXPIRED",
+    /** Network communication error */
+    NETWORK_ERROR = "NETWORK_ERROR",
+    /** Server-side error */
+    SERVER_ERROR = "SERVER_ERROR",
+    /** User not found in directory */
+    USER_NOT_FOUND = "USER_NOT_FOUND"
+}
+/**
+ * Network transport error with type for structured error handling.
+ */
+export declare class NetworkError extends Error {
+    readonly type: NetworkErrorType;
+    constructor(type: NetworkErrorType, message: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/appendonlystores/network/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/appendonlystores/network/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D;;;;;;;;;;OAUG;IACH,mBAAmB,EAAE,UAAU,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,oBAAY,gBAAgB;IAC1B,kCAAkC;IAClC,aAAa,kBAAkB;IAC/B,4BAA4B;IAC5B,YAAY,iBAAiB;IAC7B,oCAAoC;IACpC,iBAAiB,sBAAsB;IACvC,wCAAwC;IACxC,iBAAiB,sBAAsB;IACvC,kCAAkC;IAClC,aAAa,kBAAkB;IAC/B,wBAAwB;IACxB,YAAY,iBAAiB;IAC7B,kCAAkC;IAClC,cAAc,mBAAmB;CAClC;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,KAAK;aAEnB,IAAI,EAAE,gBAAgB;gBAAtB,IAAI,EAAE,gBAAgB,EACtC,OAAO,EAAE,MAAM;CAKlB"}