mindoodb 0.0.57 → 0.0.59

package/dist/node/server/IrohServerEndpoint.js

@@ -0,0 +1,156 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IrohServerEndpoint = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const crypto_1 = require("crypto");
+const IrohNetworkTransport_1 = require("../../core/appendonlystores/network/IrohNetworkTransport");
+const IrohStreamIO_1 = require("../../core/appendonlystores/network/IrohStreamIO");
+/**
+ * Optional native Iroh listen loop. `@number0/iroh` is loaded dynamically so
+ * tests and HTTP-only installs do not need the N-API binary.
+ */
+class IrohServerEndpoint {
+    constructor() {
+        this.stop = null;
+        this.status = { enabled: false };
+    }
+    getStatus() {
+        return this.status;
+    }
+    async start(options) {
+        await this.stopListening();
+        if (!options.config.enabled) {
+            this.status = { enabled: false };
+            return this.status;
+        }
+        const io = await createNativeIrohStreamIO(options.dataDir, options.config);
+        const abort = new AbortController();
+        const listen = (0, IrohNetworkTransport_1.listenForIrohPeers)(io, options.handler, { signal: abort.signal });
+        this.stop = async () => {
+            abort.abort();
+            await io.close?.();
+        };
+        void listen.catch((error) => {
+            console.error("[Iroh] listen loop failed:", error);
+        });
+        const ticket = await io.getLocalTicket();
+        this.status = {
+            enabled: true,
+            ticket,
+            endpointId: io.endpointId,
+        };
+        console.log(`[Iroh] Listening on ALPN ${IrohStreamIO_1.MINDOODB_IROH_ALPN}`);
+        console.log(`[Iroh] Endpoint id: ${this.status.endpointId ?? "(unknown)"}`);
+        console.log(`[Iroh] Ticket: ${ticket}`);
+        return this.status;
+    }
+    async stopListening() {
+        if (this.stop) {
+            const stop = this.stop;
+            this.stop = null;
+            await stop().catch((error) => {
+                console.error("[Iroh] stop failed:", error);
+            });
+        }
+        this.status = { enabled: false };
+    }
+}
+exports.IrohServerEndpoint = IrohServerEndpoint;
+async function createNativeIrohStreamIO(dataDir, config) {
+    let iroh;
+    try {
+        iroh = await import("@number0/iroh");
+    }
+    catch (error) {
+        throw new Error("Iroh is enabled in config.json but @number0/iroh is missing from the server image. " +
+            "Rebuild with ./serversetup.sh --update " +
+            `(${error instanceof Error ? error.message : String(error)}).`);
+    }
+    const secretBytes = loadOrCreateIrohSecret(dataDir, config.secretKeyPath);
+    const alpn = Array.from(Buffer.from(IrohStreamIO_1.MINDOODB_IROH_ALPN));
+    const secretKey = createSecretKey(iroh, secretBytes);
+    const endpoint = (await iroh.Endpoint.bind({
+        alpns: [alpn],
+        secretKey,
+    }));
+    const ticket = iroh.EndpointTicket.fromAddr(endpoint.addr()).toString();
+    const endpointId = endpoint.id().toString();
+    return {
+        endpointId,
+        async getLocalTicket() {
+            return ticket;
+        },
+        async connect(peerTicket, protocolAlpn) {
+            const addr = iroh.EndpointTicket.fromString(peerTicket).endpointAddr();
+            const conn = await endpoint.connect(addr, protocolAlpn ? Array.from(Buffer.from(protocolAlpn)) : alpn);
+            const bi = await conn.openBi();
+            return wrapNativeBiStream(bi);
+        },
+        async *listen() {
+            const acceptNext = endpoint.acceptNext.bind(endpoint);
+            while (true) {
+                const incoming = await acceptNext();
+                const connecting = await incoming.accept();
+                const conn = await connecting.connect();
+                const bi = await conn.acceptBi();
+                yield wrapNativeBiStream(bi);
+            }
+        },
+        async close() {
+            await endpoint.close();
+        },
+    };
+}
+function wrapNativeBiStream(bi) {
+    return (0, IrohStreamIO_1.wrapLengthPrefixedByteStream)({
+        async write(bytes) {
+            await bi.send.writeAll(bytes);
+        },
+        async read(max) {
+            if (typeof bi.recv.read === "function") {
+                const chunk = await bi.recv.read(max);
+                return chunk ? toUint8Array(chunk) : null;
+            }
+            const chunk = await bi.recv.readToEnd?.(max);
+            return chunk ? toUint8Array(chunk) : null;
+        },
+        async close() {
+            await bi.send.finish().catch(() => undefined);
+        },
+    });
+}
+function toUint8Array(value) {
+    return value instanceof Uint8Array ? value : new Uint8Array(value);
+}
+function createSecretKey(iroh, secretBytes) {
+    const SecretKey = iroh.SecretKey;
+    if (typeof SecretKey?.fromBytes === "function") {
+        return SecretKey.fromBytes(secretBytes);
+    }
+    if (typeof SecretKey?.fromString === "function") {
+        return SecretKey.fromString(Buffer.from(secretBytes).toString("hex"));
+    }
+    throw new Error("@number0/iroh SecretKey.fromBytes is not available");
+}
+function loadOrCreateIrohSecret(dataDir, configuredPath) {
+    const filePath = configuredPath
+        ? (0, path_1.isAbsolute)(configuredPath)
+            ? configuredPath
+            : (0, path_1.join)(dataDir, configuredPath)
+        : (0, path_1.join)(dataDir, "iroh-secret.key");
+    if ((0, fs_1.existsSync)(filePath)) {
+        const raw = (0, fs_1.readFileSync)(filePath, "utf-8").trim();
+        const bytes = Buffer.from(raw, raw.length === 64 ? "hex" : "base64");
+        if (bytes.length !== 32) {
+            throw new Error(`Iroh secret key at ${filePath} must be 32 bytes`);
+        }
+        return new Uint8Array(bytes);
+    }
+    const bytes = (0, crypto_1.randomBytes)(32);
+    (0, fs_1.mkdirSync)((0, path_1.dirname)(filePath), { recursive: true });
+    (0, fs_1.writeFileSync)(filePath, bytes.toString("hex"), { encoding: "utf-8", mode: 0o600 });
+    console.log(`[Iroh] Wrote new secret key to ${filePath}`);
+    return new Uint8Array(bytes);
+}
+//# sourceMappingURL=IrohServerEndpoint.js.map

package/dist/node/server/IrohServerEndpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IrohServerEndpoint.js","sourceRoot":"","sources":["../../../src/node/server/IrohServerEndpoint.ts"],"names":[],"mappings":";;;AAAA,2BAAwE;AACxE,+BAAiD;AACjD,mCAAqC;AAErC,mGAGkE;AAClE,mFAK0D;AAe1D;;;GAGG;AACH,MAAa,kBAAkB;IAA/B;QACU,SAAI,GAAiC,IAAI,CAAC;QAC1C,WAAM,GAA6B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAiDhE,CAAC;IA/CC,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAIX;QACC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAA,yCAAkB,EAAC,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE;YACrB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACrB,CAAC,CAAC;QACF,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC1B,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,IAAI;YACb,MAAM;YACN,UAAU,EAAE,EAAE,CAAC,UAAU;SAC1B,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,4BAA4B,iCAAkB,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC3B,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;CACF;AAnDD,gDAmDC;AAOD,KAAK,UAAU,wBAAwB,CACrC,OAAe,EACf,MAAwB;IAExB,IAAI,IAAoC,CAAC;IACzC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,qFAAqF;YACnF,yCAAyC;YACzC,IAAI,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAkB,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzC,KAAK,EAAE,CAAC,IAAI,CAAC;QACb,SAAS;KACV,CAAC,CAAsB,CAAC;IAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxE,MAAM,UAAU,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC;IAE5C,OAAO;QACL,UAAU;QACV,KAAK,CAAC,cAAc;YAClB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY;YACpC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,YAAY,EAAE,CAAC;YACvE,MAAM,IAAI,GAAG,MAAO,QAElB,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9E,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,CAAC,MAAM;YACX,MAAM,UAAU,GAAI,QAA+D,CAAC,UAAU,CAAC,IAAI,CACjG,QAAQ,CACT,CAAC;YACF,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAmBD,SAAS,kBAAkB,CAAC,EAAgB;IAC1C,OAAO,IAAA,2CAA4B,EAAC;QAClC,KAAK,CAAC,KAAK,CAAC,KAAK;YACf,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,IAAI,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACvC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtC,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAA4B;IAChD,OAAO,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CACtB,IAAoC,EACpC,WAAuB;IAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,SAGtB,CAAC;IACF,IAAI,OAAO,SAAS,EAAE,SAAS,KAAK,UAAU,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,SAAS,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAE,cAAuB;IACtE,MAAM,QAAQ,GAAG,cAAc;QAC7B,CAAC,CAAC,IAAA,iBAAU,EAAC,cAAc,CAAC;YAC1B,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,IAAA,WAAI,EAAC,OAAO,EAAE,cAAc,CAAC;QACjC,CAAC,CAAC,IAAA,WAAI,EAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrC,IAAI,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,mBAAmB,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IAC9B,IAAA,cAAS,EAAC,IAAA,cAAO,EAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAA,kBAAa,EAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAC1D,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/node/server/IrohServerRpc.d.ts

@@ -0,0 +1,52 @@
+import { StoreKind } from "../../core/appendonlystores/types";
+import type { IrohRpcHandler } from "../../core/appendonlystores/network/IrohNetworkTransport";
+import type { MindooDBServerInfo } from "../../core/types";
+import { ValidationError } from "./validation";
+export interface IrohServerAuthService {
+    generateChallenge(username?: string, options?: {
+        signingPublicKey?: string;
+    }): Promise<string>;
+    authenticate(challenge: string, signature: Uint8Array): Promise<{
+        success: boolean;
+        token?: string;
+        error?: string;
+    }>;
+}
+export interface IrohServerStore {
+    handleFindNewEntries(token: string, haveIds: string[]): Promise<unknown>;
+    handleFindNewEntriesForDoc(token: string, haveIds: string[], docId: string): Promise<unknown>;
+    handleFindEntries(token: string, type: unknown, creationDateFrom: number | null, creationDateUntil: number | null): Promise<unknown>;
+    handleScanEntriesSince(token: string, cursor: unknown, limit?: number, filters?: unknown): Promise<unknown>;
+    handleGetIdBloomSummary(token: string): Promise<unknown>;
+    handleGetStoreHead(token: string): Promise<unknown>;
+    handleGetCompactionStatus(token: string): Promise<unknown>;
+    handleGetCapabilities(token: string): Promise<unknown>;
+    handleGetEntries(token: string, ids: string[]): Promise<unknown>;
+    handleGetEntriesSessionWrapped(token: string, ids: string[]): Promise<unknown>;
+    handleGetEntryMetadata(token: string, id: string): Promise<unknown>;
+    handlePutEntries(token: string, entries: unknown[]): Promise<unknown>;
+    handleHasEntries(token: string, ids: string[]): Promise<unknown>;
+    handleGetAllIds(token: string): Promise<unknown>;
+    handleResolveDependencies(token: string, startId: string, options?: Record<string, unknown>): Promise<unknown>;
+    handlePlanDocumentMaterialization(token: string, docId: string, options?: unknown): Promise<unknown>;
+    handlePlanDocumentMaterializationBatch(token: string, docIds: string[], options?: unknown): Promise<unknown>;
+    handlePlanAttachmentReadByWalkingMetadata(token: string, lastChunkId: string, attachmentSize: number, options: unknown): Promise<unknown>;
+}
+export interface IrohServerRpcHost {
+    getServerPublicInfo(): MindooDBServerInfo | null;
+    getJsonBodyLimit?: () => {
+        limit: string;
+        bytes: number | null;
+    };
+    getClusterRole?: () => string;
+    listTenantPublicInfosFingerprints(tenantId: string): Promise<string[]>;
+    getAuthService(tenantId: string): Promise<IrohServerAuthService>;
+    getServerStore(tenantId: string, dbId: string, storeKind: StoreKind): Promise<IrohServerStore>;
+}
+/**
+ * Inverse of {@link IrohNetworkTransport}: same method names, same args.
+ * Discovery methods are unauthenticated, matching `/.well-known/*`.
+ */
+export declare function createMindooDBServerIrohHandler(host: IrohServerRpcHost): IrohRpcHandler;
+export declare function isIrohValidationError(error: unknown): error is ValidationError;
+//# sourceMappingURL=IrohServerRpc.d.ts.map

package/dist/node/server/IrohServerRpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IrohServerRpc.d.ts","sourceRoot":"","sources":["../../../src/node/server/IrohServerRpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAE/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAoB,eAAe,EAAE,MAAM,cAAc,CAAC;AAEjE,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,CACf,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,GACtC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,eAAe;IAC9B,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9F,iBAAiB,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,OAAO,EACb,gBAAgB,EAAE,MAAM,GAAG,IAAI,EAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,sBAAsB,CACpB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,OAAO,EACf,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,8BAA8B,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpE,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,yBAAyB,CACvB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,iCAAiC,CAC/B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,sCAAsC,CACpC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,yCAAyC,CACvC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,mBAAmB,IAAI,kBAAkB,GAAG,IAAI,CAAC;IACjD,gBAAgB,CAAC,EAAE,MAAM;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACjE,cAAc,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,iCAAiC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvE,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACjE,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAChG;AAyBD;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,iBAAiB,GAAG,cAAc,CA4CvF;AAsED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE9E"}

package/dist/node/server/IrohServerRpc.js

@@ -0,0 +1,120 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMindooDBServerIrohHandler = createMindooDBServerIrohHandler;
+exports.isIrohValidationError = isIrohValidationError;
+const types_1 = require("../../core/appendonlystores/types");
+const validation_1 = require("./validation");
+function requireTenant(ctx) {
+    const tenantId = ctx?.tenantId?.trim().toLowerCase();
+    if (!tenantId) {
+        throw new Error("Iroh RPC requires ctx.tenantId");
+    }
+    (0, validation_1.validateTenantId)(tenantId);
+    return tenantId;
+}
+function requireStoreScope(ctx) {
+    const tenantId = requireTenant(ctx);
+    const dbId = ctx?.dbId?.trim();
+    if (!dbId) {
+        throw new Error("Iroh RPC requires ctx.dbId");
+    }
+    const storeKind = ctx?.storeKind === types_1.StoreKind.attachments ? types_1.StoreKind.attachments : types_1.StoreKind.docs;
+    return { tenantId, dbId, storeKind };
+}
+/**
+ * Inverse of {@link IrohNetworkTransport}: same method names, same args.
+ * Discovery methods are unauthenticated, matching `/.well-known/*`.
+ */
+function createMindooDBServerIrohHandler(host) {
+    return async (method, args, ctx) => {
+        switch (method) {
+            case "getServerInfo": {
+                const info = host.getServerPublicInfo();
+                if (!info) {
+                    throw new Error("Server identity not initialized");
+                }
+                const limit = host.getJsonBodyLimit?.();
+                return {
+                    ...info,
+                    clusterRole: host.getClusterRole?.() ?? "peer",
+                    maxJsonRequestBodyLimit: limit?.limit,
+                    maxJsonRequestBodyBytes: limit?.bytes ?? undefined,
+                };
+            }
+            case "getTenantPublicInfosFingerprints": {
+                const tenantId = String(args[0] ?? "").trim().toLowerCase();
+                (0, validation_1.validateTenantId)(tenantId);
+                const fingerprints = await host.listTenantPublicInfosFingerprints(tenantId);
+                if (fingerprints.length === 0) {
+                    throw new Error("Tenant not found on server");
+                }
+                return { tenantId, fingerprints };
+            }
+            case "requestChallenge": {
+                const tenantId = requireTenant(ctx);
+                const auth = await host.getAuthService(tenantId);
+                return auth.generateChallenge(typeof args[0] === "string" ? args[0] : undefined, args[1]);
+            }
+            case "authenticate": {
+                const tenantId = requireTenant(ctx);
+                const auth = await host.getAuthService(tenantId);
+                const challenge = String(args[0] ?? "");
+                const signature = args[1];
+                return auth.authenticate(challenge, signature);
+            }
+            default:
+                return dispatchStoreMethod(host, method, args, ctx);
+        }
+    };
+}
+async function dispatchStoreMethod(host, method, args, ctx) {
+    const scope = requireStoreScope(ctx);
+    const store = await host.getServerStore(scope.tenantId, scope.dbId, scope.storeKind);
+    const token = String(args[0] ?? "");
+    switch (method) {
+        case "getCapabilities":
+            return store.handleGetCapabilities(token);
+        case "findNewEntries":
+            return store.handleFindNewEntries(token, args[1] ?? []);
+        case "findNewEntriesForDoc":
+            return store.handleFindNewEntriesForDoc(token, args[1] ?? [], String(args[2] ?? ""));
+        case "findEntries":
+            return store.handleFindEntries(token, args[1], args[2] ?? null, args[3] ?? null);
+        case "scanEntriesSince":
+            return store.handleScanEntriesSince(token, args[1], args[2], args[3]);
+        case "getIdBloomSummary":
+            return store.handleGetIdBloomSummary(token);
+        case "getStoreHead":
+            return store.handleGetStoreHead(token);
+        case "getCompactionStatus":
+            return store.handleGetCompactionStatus(token);
+        case "planDocumentMaterialization":
+            return store.handlePlanDocumentMaterialization(token, String(args[1] ?? ""), args[2]);
+        case "planDocumentMaterializationBatch":
+            return store.handlePlanDocumentMaterializationBatch(token, args[1] ?? [], args[2]);
+        case "planAttachmentReadByWalkingMetadata":
+            return store.handlePlanAttachmentReadByWalkingMetadata(token, String(args[1] ?? ""), Number(args[2] ?? 0), args[3]);
+        case "getEntries":
+            return store.handleGetEntries(token, args[1] ?? []);
+        case "getEntriesSessionWrapped":
+            return store.handleGetEntriesSessionWrapped(token, args[1] ?? []);
+        case "getEntryMetadata":
+            return store.handleGetEntryMetadata(token, String(args[1] ?? ""));
+        case "putEntries":
+            return store.handlePutEntries(token, args[1] ?? []);
+        case "hasEntries":
+            return store.handleHasEntries(token, args[1] ?? []);
+        case "getAllIds":
+            return store.handleGetAllIds(token);
+        case "resolveDependencies":
+            return store.handleResolveDependencies(token, String(args[1] ?? ""), args[2]);
+        case "subscribeToChanges":
+            throw new Error("subscribeToChanges is not implemented on the Iroh server path yet");
+        default:
+            throw new Error(`Unknown Iroh RPC method ${method}`);
+    }
+}
+function isIrohValidationError(error) {
+    return error instanceof validation_1.ValidationError;
+}
+//# sourceMappingURL=IrohServerRpc.js.map

package/dist/node/server/IrohServerRpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IrohServerRpc.js","sourceRoot":"","sources":["../../../src/node/server/IrohServerRpc.ts"],"names":[],"mappings":";;AAqGA,0EA4CC;AAsED,sDAEC;AAzND,6DAA8D;AAI9D,6CAAiE;AAsEjE,SAAS,aAAa,CAAC,GAAoB;IACzC,MAAM,QAAQ,GAAG,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAA,6BAAgB,EAAC,QAAQ,CAAC,CAAC;IAC3B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAoB;IAK7C,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,EAAE,SAAS,KAAK,iBAAS,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAS,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAS,CAAC,IAAI,CAAC;IACpG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAgB,+BAA+B,CAAC,IAAuB;IACrE,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACjC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;gBACxC,OAAO;oBACL,GAAG,IAAI;oBACP,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,MAAM;oBAC9C,uBAAuB,EAAE,KAAK,EAAE,KAAK;oBACrC,uBAAuB,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS;iBACnD,CAAC;YACJ,CAAC;YACD,KAAK,kCAAkC,CAAC,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC5D,IAAA,6BAAgB,EAAC,QAAQ,CAAC,CAAC;gBAC3B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,QAAQ,CAAC,CAAC;gBAC5E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAChD,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;YACpC,CAAC;YACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACjD,OAAO,IAAI,CAAC,iBAAiB,CAC3B,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EACjD,IAAI,CAAC,CAAC,CAA8C,CACrD,CAAC;YACJ,CAAC;YACD,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACjD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACxC,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAe,CAAC;gBACxC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACjD,CAAC;YACD;gBACE,OAAO,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAAuB,EACvB,MAAc,EACd,IAAe,EACf,GAAoB;IAEpB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEpC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,iBAAiB;YACpB,OAAO,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC5C,KAAK,gBAAgB;YACnB,OAAO,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAG,IAAI,CAAC,CAAC,CAAc,IAAI,EAAE,CAAC,CAAC;QACxE,KAAK,sBAAsB;YACzB,OAAO,KAAK,CAAC,0BAA0B,CAAC,KAAK,EAAG,IAAI,CAAC,CAAC,CAAc,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrG,KAAK,aAAa;YAChB,OAAO,KAAK,CAAC,iBAAiB,CAC5B,KAAK,EACL,IAAI,CAAC,CAAC,CAAC,EACN,IAAI,CAAC,CAAC,CAAmB,IAAI,IAAI,EACjC,IAAI,CAAC,CAAC,CAAmB,IAAI,IAAI,CACnC,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO,KAAK,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAuB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,KAAK,mBAAmB;YACtB,OAAO,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC9C,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACzC,KAAK,qBAAqB;YACxB,OAAO,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAChD,KAAK,6BAA6B;YAChC,OAAO,KAAK,CAAC,iCAAiC,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,KAAK,kCAAkC;YACrC,OAAO,KAAK,CAAC,sCAAsC,CAAC,KAAK,EAAG,IAAI,CAAC,CAAC,CAAc,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnG,KAAK,qCAAqC;YACxC,OAAO,KAAK,CAAC,yCAAyC,CACpD,KAAK,EACL,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EACrB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EACpB,IAAI,CAAC,CAAC,CAAC,CACR,CAAC;QACJ,KAAK,YAAY;YACf,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAG,IAAI,CAAC,CAAC,CAAc,IAAI,EAAE,CAAC,CAAC;QACpE,KAAK,0BAA0B;YAC7B,OAAO,KAAK,CAAC,8BAA8B,CAAC,KAAK,EAAG,IAAI,CAAC,CAAC,CAAc,IAAI,EAAE,CAAC,CAAC;QAClF,KAAK,kBAAkB;YACrB,OAAO,KAAK,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpE,KAAK,YAAY;YACf,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAG,IAAI,CAAC,CAAC,CAAe,IAAI,EAAE,CAAC,CAAC;QACrE,KAAK,YAAY;YACf,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAG,IAAI,CAAC,CAAC,CAAc,IAAI,EAAE,CAAC,CAAC;QACpE,KAAK,WAAW;YACd,OAAO,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACtC,KAAK,qBAAqB;YACxB,OAAO,KAAK,CAAC,yBAAyB,CACpC,KAAK,EACL,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EACrB,IAAI,CAAC,CAAC,CAAwC,CAC/C,CAAC;QACJ,KAAK,oBAAoB;YACvB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF;YACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAgB,qBAAqB,CAAC,KAAc;IAClD,OAAO,KAAK,YAAY,4BAAe,CAAC;AAC1C,CAAC"}

package/dist/node/server/MindooDBServer.d.ts

@@ -59,6 +59,7 @@ export declare class MindooDBServer {
      * SSRF boundary for {@link handleTimestampRequest}.
      */
     private readonly tsaProviders;
+    private readonly irohEndpoint;
     /**
      * @param dataDir      Root directory for on-disk tenant data and server identity
      * @param serverPassword  Password used to decrypt the server identity private keys
@@ -99,6 +100,8 @@ export declare class MindooDBServer {
      * with Express; the `as unknown` casts bridge the type gap.
      */
     listenTls(port: number, certPath: string, keyPath: string): void;
+    getIrohStatus(): import("./IrohServerEndpoint").IrohServerEndpointStatus;
+    startIrohIfEnabled(): Promise<void>;
     /**
      * Global middleware stack applied to every request, in order:
      * 1. helmet — security headers (CSP, X-Frame-Options, etc.)

package/dist/node/server/MindooDBServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MindooDBServer.d.ts","sourceRoot":"","sources":["../../../src/node/server/MindooDBServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,OAAoD,MAAM,SAAS,CAAC;AAuB3E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAwBvD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAKhD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAkB3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAqC5C;;;;;GAKG;AACH,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,WAAW,CAAC,EAAE;gBAAE,QAAQ,EAAE,MAAM,CAAC;gBAAC,aAAa,EAAE,MAAM,CAAA;aAAE,CAAC;YAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,yFAAyF;YACzF,kBAAkB,CAAC,EAAE,MAAM,CAAC;YAC5B,yFAAyF;YACzF,aAAa,CAAC,EAAE,MAAM,CAAC;SACxB;KACF;CACF;AAiFD,qBAAa,cAAc;IACzB,OAAO,CAAC,GAAG,CAAsB;IACjC,0EAA0E;IAC1E,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,eAAe,CAAyB;IAChD,kEAAkE;IAClE,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAgB;IACnD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD;;;;;;;;OAQG;gBAED,OAAO,EAAE,MAAM,EACf,cAAc,CAAC,EAAE,MAAM,EACvB,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,YAAY,EACrB,UAAU,CAAC,EAAE,MAAM;IAwFrB,MAAM,IAAI,OAAO,CAAC,WAAW;IAI7B,gBAAgB,IAAI,aAAa;IAIjC,kBAAkB,IAAI,sBAAsB;IAI5C,iBAAiB,IAAI,cAAc;IAInC;;;;;;;OAOG;IACH,YAAY,IAAI,IAAI;IAId,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlC,eAAe,IAAI,YAAY;IAI/B,aAAa,IAAI,MAAM;IAIvB;;;;OAIG;IACH,YAAY,CAAC,SAAS,EAAE,YAAY,GAAG,IAAI;IAM3C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAQ1B;;;;;OAKG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAgBhE;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IA4CvB,qFAAqF;IACrF;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,sBAAsB;IAyB9B,OAAO,CAAC,sBAAsB;IAe9B;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAyLnB;;;;;;;;OAQG;YACW,qBAAqB;IA6CnC;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAsBnC,OAAO,CAAC,gBAAgB;IA0BxB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;YAgTX,qBAAqB;YAmCrB,wBAAwB;YAgCxB,kBAAkB;IA4DhC;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAqE1B;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAiBhC,2FAA2F;IAC3F,OAAO,CAAC,sBAAsB;IAO9B,2FAA2F;IAC3F,OAAO,CAAC,sBAAsB;IAO9B,gGAAgG;IAChG,OAAO,CAAC,2BAA2B;IAanC;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IA6BhC;;;;;;;;;OASG;YACW,uBAAuB;IAkBrC;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IA2B3B;;;;;;OAMG;YACW,uBAAuB;IAoBrC;;;;;;;;OAQG;YACW,sBAAsB;IAoDpC;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAmB3B;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAyB3B;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAgB3B;;;;;;;;;OASG;IACH,OAAO,CAAC,uBAAuB;IAU/B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,iCAAiC;YAO3B,qBAAqB;YAerB,oBAAoB;YA+BpB,eAAe;YA0Bf,kBAAkB;YA8BlB,oBAAoB;YAuBpB,0BAA0B;YAuB1B,iBAAiB;YAuBjB,sBAAsB;YA8BtB,kBAAkB;YAelB,uBAAuB;YAevB,qBAAqB;IAqBnC;;;;;;;;;;;;;;OAcG;YACW,gBAAgB;IAyD9B;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;YA+BhB,yBAAyB;YAezB,gBAAgB;IAuC9B;;;;OAIG;YACW,sBAAsB;YAgCtB,sBAAsB;IAsBpC;;;;OAIG;YACW,gBAAgB;IAiG9B;;;;OAIG;YACW,sBAAsB;YAoFtB,gBAAgB;YAiBhB,eAAe;YAcf,yBAAyB;YAoBzB,iCAAiC;YAqBjC,sCAAsC;YAkBtC,yCAAyC;IAuCvD;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,YAAY;IAQpB,yEAAyE;IACzE,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,qBAAqB;IAmB7B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IA+CpB,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,wBAAwB;IAIhC,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,kBAAkB;CAG3B"}
+{"version":3,"file":"MindooDBServer.d.ts","sourceRoot":"","sources":["../../../src/node/server/MindooDBServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,OAAoD,MAAM,SAAS,CAAC;AAuB3E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAwBvD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAKhD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAkB3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAuC5C;;;;;GAKG;AACH,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,WAAW,CAAC,EAAE;gBAAE,QAAQ,EAAE,MAAM,CAAC;gBAAC,aAAa,EAAE,MAAM,CAAA;aAAE,CAAC;YAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,yFAAyF;YACzF,kBAAkB,CAAC,EAAE,MAAM,CAAC;YAC5B,yFAAyF;YACzF,aAAa,CAAC,EAAE,MAAM,CAAC;SACxB;KACF;CACF;AAiFD,qBAAa,cAAc;IACzB,OAAO,CAAC,GAAG,CAAsB;IACjC,0EAA0E;IAC1E,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,eAAe,CAAyB;IAChD,kEAAkE;IAClE,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAgB;IACnD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IAEzD;;;;;;;;OAQG;gBAED,OAAO,EAAE,MAAM,EACf,cAAc,CAAC,EAAE,MAAM,EACvB,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,YAAY,EACrB,UAAU,CAAC,EAAE,MAAM;IAwFrB,MAAM,IAAI,OAAO,CAAC,WAAW;IAI7B,gBAAgB,IAAI,aAAa;IAIjC,kBAAkB,IAAI,sBAAsB;IAI5C,iBAAiB,IAAI,cAAc;IAInC;;;;;;;OAOG;IACH,YAAY,IAAI,IAAI;IAId,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlC,eAAe,IAAI,YAAY;IAI/B,aAAa,IAAI,MAAM;IAIvB;;;;OAIG;IACH,YAAY,CAAC,SAAS,EAAE,YAAY,GAAG,IAAI;IAM3C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAS1B;;;;;OAKG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAiBhE,aAAa;IAIP,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IA4BzC;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IA4CvB,qFAAqF;IACrF;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,sBAAsB;IAyB9B,OAAO,CAAC,sBAAsB;IAe9B;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAyLnB;;;;;;;;OAQG;YACW,qBAAqB;IA6CnC;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAsBnC,OAAO,CAAC,gBAAgB;IA0BxB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;YAgTX,qBAAqB;YAmCrB,wBAAwB;YAgCxB,kBAAkB;IA4DhC;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAqE1B;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAiBhC,2FAA2F;IAC3F,OAAO,CAAC,sBAAsB;IAO9B,2FAA2F;IAC3F,OAAO,CAAC,sBAAsB;IAO9B,gGAAgG;IAChG,OAAO,CAAC,2BAA2B;IAanC;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IA6BhC;;;;;;;;;OASG;YACW,uBAAuB;IAkBrC;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IA2B3B;;;;;;OAMG;YACW,uBAAuB;IAoBrC;;;;;;;;OAQG;YACW,sBAAsB;IAoDpC;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAmB3B;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAyB3B;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAgB3B;;;;;;;;;OASG;IACH,OAAO,CAAC,uBAAuB;IAU/B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,iCAAiC;YAO3B,qBAAqB;YAerB,oBAAoB;YA+BpB,eAAe;YA0Bf,kBAAkB;YA8BlB,oBAAoB;YAuBpB,0BAA0B;YAuB1B,iBAAiB;YAuBjB,sBAAsB;YA8BtB,kBAAkB;YAelB,uBAAuB;YAevB,qBAAqB;IAqBnC;;;;;;;;;;;;;;OAcG;YACW,gBAAgB;IAyD9B;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;YA+BhB,yBAAyB;YAezB,gBAAgB;IAuC9B;;;;OAIG;YACW,sBAAsB;YAgCtB,sBAAsB;IAsBpC;;;;OAIG;YACW,gBAAgB;IAiG9B;;;;OAIG;YACW,sBAAsB;YAoFtB,gBAAgB;YAiBhB,eAAe;YAcf,yBAAyB;YAoBzB,iCAAiC;YAqBjC,sCAAsC;YAkBtC,yCAAyC;IAuCvD;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,YAAY;IAQpB,yEAAyE;IACzE,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,qBAAqB;IAmB7B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IA+CpB,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,wBAAwB;IAIhC,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,kBAAkB;CAG3B"}

package/dist/node/server/MindooDBServer.js

@@ -72,6 +72,8 @@ const SystemAdminAuth_1 = require("./SystemAdminAuth");
 const DeviceDiscoveryService_1 = require("./DeviceDiscoveryService");
 const config_1 = require("./config");
 const SystemIpAllowlist_1 = require("./SystemIpAllowlist");
+const IrohServerRpc_1 = require("./IrohServerRpc");
+const IrohServerEndpoint_1 = require("./IrohServerEndpoint");
 const validation_1 = require("./validation");
 const urlSafety_1 = require("../../core/utils/urlSafety");
 const types_4 = require("./types");
@@ -161,6 +163,7 @@ class MindooDBServer {
      * @param configPath   Explicit path to config.json; defaults to `<dataDir>/config.json`
      */
     constructor(dataDir, serverPassword, staticDir, config, configPath) {
+        this.irohEndpoint = new IrohServerEndpoint_1.IrohServerEndpoint();
         this.app = (0, express_1.default)();
         this.syncEventBus = new SyncEventBus_1.SyncEventBus();
         this.tenantManager = new TenantManager_1.TenantManager(dataDir, serverPassword);
@@ -275,6 +278,7 @@ class MindooDBServer {
             console.log(`[MindooDBServer] Listening on port ${port}`);
         });
         server.setTimeout(DEFAULT_SERVER_SOCKET_TIMEOUT_MS);
+        void this.startIrohIfEnabled();
     }
     /**
      * Start the server with TLS using HTTP/2 (with automatic HTTP/1.1 ALPN
@@ -295,6 +299,36 @@ class MindooDBServer {
             console.log(`[MindooDBServer] Listening on HTTPS port ${port} with HTTP/2 enabled (HTTP/1 fallback active)`);
         });
         server.setTimeout(DEFAULT_SERVER_SOCKET_TIMEOUT_MS);
+        void this.startIrohIfEnabled();
+    }
+    getIrohStatus() {
+        return this.irohEndpoint.getStatus();
+    }
+    async startIrohIfEnabled() {
+        const irohConfig = this.serverConfig.iroh;
+        if (!irohConfig?.enabled) {
+            return;
+        }
+        try {
+            await this.irohEndpoint.start({
+                dataDir: this.tenantManager.getDataDir(),
+                config: irohConfig,
+                handler: (0, IrohServerRpc_1.createMindooDBServerIrohHandler)({
+                    getServerPublicInfo: () => this.tenantManager.getServerPublicInfo(),
+                    getJsonBodyLimit: () => ({
+                        limit: this.jsonBodyLimit,
+                        bytes: this.jsonBodyLimitBytes,
+                    }),
+                    getClusterRole: () => this.serverConfig.cluster?.role ?? "peer",
+                    listTenantPublicInfosFingerprints: (tenantId) => this.tenantManager.listTenantPublicInfosFingerprints(tenantId),
+                    getAuthService: (tenantId) => this.tenantManager.getAuthService(tenantId),
+                    getServerStore: (tenantId, dbId, storeKind) => this.tenantManager.getServerStore(tenantId, dbId, storeKind),
+                }),
+            });
+        }
+        catch (error) {
+            console.error("[MindooDBServer] Failed to start Iroh listener:", error);
+        }
     }
     /**
      * Global middleware stack applied to every request, in order: