
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@leosprograms/syn-store
Advanced tools
Reactive store that holds the state for the syn
Holochain zome.
These are the high level concepts that syn
implements:
syn
can manage multiple document
s.document
is identified by its root commit hash.document
has multiple workspaces
which can evolve independently of each other, and also fork and merge (eg. "main", "proposal").workspace
has a latest "tip" commit, which represents the latest snapshot of the state of the document in that workspace.workspace
has a session
, which you can join to edit the state of the workspace collaboratively with other agents.And at the level of code, these concepts translate to these classes:
SynStore
: to create and fetch the documents in this network.DocumentStore
: to create and fetch the workspaces for the given document, and also its commits.WorkspaceStore
: to fetch the latest snaphshot and also the previous commits for the given workspace.SessionStore
: to edit the state of the given workspace in a real-time collaborative session.You can initialize a new document like this:
import { AppWebsocket, AppAgentWebsocket } from '@holochain/client';
import { SynStore, DocumentStore, WorkspaceStore } from '@holochain-syn/store';
import { SynClient } from '@holochain-syn/client';
const appWs = await AppWebsocket.connect(url);
const client = await AppAgentWebsocket.connect(appWs, 'YOUR_APP_ID')
const synStore = new SynStore(new SynClient(client, 'YOUR_ROLE_NAME', 'YOUR_ZOME_NAME'));
// Create a new document
const documentStore = await synStore.createDocument(
// Initial state of the document
{ applicationDefinedField: 'somevalue' },
// This is an optional object to be able to store arbitrary information in the commit
{ meta: 'value'}
);
// Tag the document as "active" to allow other peers to discover it
await synStore.client.tagDocument(documentHash, "active")
// Create the workspace for the document
const workspaceStore = new documentStore.createWorkspace(
'main',
// Commit hash that will act as the initial tip for the workspace
// Passing undefined means the workspace will be initialized with the document's initial state
undefined
);
At this point, no synchronization is happening yet. This is because you haven't joined the session for the newly created workspace. Let's join the session:
const sessionStore: SessionStore = await sessionStore.joinSession();
If you want another peer to discover that document and join the same session, you can do this:
import { AnyDhtHash } from '@holochain/client'
import { Commit } from '@holochain-syn/client';
import { EntryRecord, EntryHashMap } from '@holochain-open-dev/utils';
import { DocumentStore, WorkspaceStore } from '@holochain-syn/store';
import { toPromise, joinAsyncMap, pipe } from '@holochain-open-dev/stores';
// Fetch all the active documents
const documentsHashes: Array<AnyDhtHash> = await synStore.client.getDocumentsWithTag("active");
// Build the documentStore for the document with the first document
const documentStore = synStore.documents.get(documentsHashes[0]);
// Fetch all workspaces for that document
const workspaces: ReadonlyMap<EntryHash, WorkspaceStore> = await toPromise(documentStore.allWorkspaces);
// Find the workspace
const workspaceStore = Array.from(workspaces.entries())[0];
// Join the session for the workspace
const sessionStore = await workspaceStore.joinSession();
Now you are connected to all the peers in that same workspace, and can subscribe to the current state for the workspace and also request changes to the state:
sessionStore.state.subscribe(state => console.log('New State!', state));
// The input for the function needs to be a function that mutates the given javascript object state
sessionStore.change(state => {
state.applicationDefinedField = 'Updated content!';
});
Alternatively, you can also get information about the current state of the workspace without joining the session:
workspaceStore.tip.subscribe(tip => {
if (tip.status === 'complete') { // "status" can also be "pending" or "error"
console.log('current tip of the workspace: ', tip);
}
});
workspaceStore.latestSnapshot.subscribe(latestSnapshot => {
if (latestSnapshot.status === 'complete') { // "status" can also be "pending" or "error"
console.log('current state of the workspace: ', latestSnapshot);
}
});
workspaceStore.sessionParticipants.subscribe(participants => {
if (participants.status === 'complete') { // "status" can also be "pending" or "error"
console.log('current participants of the workspace session: ', participants);
}
});
This is useful to display information about the current state of the workspace without having to join the session.
When you are done with those changes, you need to explicitly leave the session:
await sessionStore.leaveSession();
If you don't, all other participants in the session will try to keep synchronizing with you.
Changes are committed every 10 seconds by default, and also when the last participant for the workspaces leaves the workspace. You can also commit the changes manually:
await sessionStore.commitChanges(
// This is an optional object to be able to store arbitrary information in the commit
{ applicationDefinedField: 'somevalue'}
);
FAQs
Reactive store that holds the state for the `syn` Holochain zome.
We found that @leosprograms/syn-store demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.