@opendatalabs/personal-server-ts-core 0.0.1-canary.00328bf

package/dist/lineage/lineage.js

@@ -0,0 +1,255 @@
+/**
+ * Derivative data: lineage on the write path.
+ *
+ * A derivative is an ordinary write whose body names the data points it was
+ * computed from. The caller's `lineage` field (top level of a JSON body, or
+ * inside the `X-Vana-Metadata` object of a binary write) is a list of data
+ * point ids, `keccak256(abi.encode(owner, scope))`. The Personal Server
+ * validates it against the owner's own data points and mirrors it into the
+ * envelope `data` under the reserved `$lineage` key, the same in-`data`
+ * marker idiom as `$writtenBy` and `$binary`, so lineage rides the unchanged
+ * encrypt / upload / register path and `metadataHash` commits to it.
+ *
+ * The caller's `lineage` field is left in the record untouched: for session
+ * writes it is inside the bytes the builder signed, so the lineage claim is
+ * builder-signed and `$lineage` is the server-validated mirror of it.
+ *
+ * See docs/derivative-data-api.md for the wire contract.
+ */
+import { LineageInvalidError, LineageScopeUnderSourcePrefixError, LineageSourceLookupFailedError, LineageSourceUnknownError, ServerNotConfiguredError, } from "../errors/catalog.js";
+import { computeDataPointId } from "../sync/data-point-id.js";
+/** Reserved key inside the envelope `data` record for validated lineage. */
+export const LINEAGE_KEY = "$lineage";
+/** The caller-facing field name (JSON body top level / binary metadata). */
+export const LINEAGE_FIELD = "lineage";
+/** Upper bound on sources per record; keeps validation and hashing bounded. */
+export const MAX_LINEAGE_SOURCES = 256;
+/** Page size of the local index scan the source resolver runs. */
+export const LOCAL_SCOPE_SCAN_PAGE = 1000;
+const BYTES32_HEX = /^0x[0-9a-fA-F]{64}$/;
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+export function hasReservedLineageKey(data) {
+    return Object.prototype.hasOwnProperty.call(data, LINEAGE_KEY);
+}
+/** Stamp validated lineage into an envelope `data` record. */
+export function stampLineage(data, lineage) {
+    return { ...data, [LINEAGE_KEY]: lineage };
+}
+/**
+ * The stored `$lineage` of a record, or null for a root record. Tolerates
+ * hand-crafted envelopes: anything that is not the exact stamped shape is
+ * treated as no lineage rather than thrown on.
+ */
+export class StoredLineageMalformedError extends Error {
+    constructor(detail) {
+        super(`Stored $lineage is malformed: ${detail}`);
+        this.name = "StoredLineageMalformedError";
+    }
+}
+/**
+ * Absent `$lineage` (or a data object that is not a record) is `null`: no
+ * statement. A PRESENT but malformed `$lineage` throws: a corrupted or
+ * hand-crafted derivative must fail closed, never fall through the root
+ * path and get registered as if it made no lineage statement.
+ */
+export function readStoredLineage(data) {
+    if (!isRecord(data) || !(LINEAGE_KEY in data))
+        return null;
+    const value = data[LINEAGE_KEY];
+    if (!isRecord(value)) {
+        throw new StoredLineageMalformedError("not an object");
+    }
+    const sources = value.sources;
+    if (!Array.isArray(sources) ||
+        !sources.every((id) => typeof id === "string" && BYTES32_HEX.test(id))) {
+        throw new StoredLineageMalformedError("sources is not a list of bytes32 ids");
+    }
+    if (typeof value.writtenAt !== "string") {
+        throw new StoredLineageMalformedError("writtenAt is not a string");
+    }
+    return {
+        sources: sources.map((id) => id.toLowerCase()),
+        writtenAt: value.writtenAt,
+    };
+}
+/**
+ * The caller's `lineage` field from a JSON body or a binary write's parsed
+ * metadata. `undefined` when the container is not an object or carries no
+ * such field, so a bare-string metadata header or a lineage-less body is a
+ * root record.
+ */
+export function extractLineageField(container) {
+    if (!isRecord(container))
+        return undefined;
+    return container[LINEAGE_FIELD];
+}
+/**
+ * Parse the caller's `lineage` value: an array of distinct 0x-prefixed
+ * 32-byte hex strings, at most MAX_LINEAGE_SOURCES long. Ids are lowercased
+ * so equal ids compare equal wherever they are stored. Throws
+ * LineageInvalidError (400).
+ */
+export function parseLineageSources(value) {
+    if (!Array.isArray(value)) {
+        throw new LineageInvalidError(`${LINEAGE_FIELD} must be an array of data point ids (0x-prefixed 32-byte hex)`);
+    }
+    if (value.length > MAX_LINEAGE_SOURCES) {
+        throw new LineageInvalidError(`${LINEAGE_FIELD} lists ${value.length} sources; the maximum is ${MAX_LINEAGE_SOURCES}`, { max: MAX_LINEAGE_SOURCES, count: value.length });
+    }
+    const seen = new Set();
+    const sources = [];
+    for (const entry of value) {
+        if (typeof entry !== "string" || !BYTES32_HEX.test(entry)) {
+            throw new LineageInvalidError(`${LINEAGE_FIELD} entries must be 0x-prefixed 32-byte hex data point ids`, { entry: typeof entry === "string" ? entry : typeof entry });
+        }
+        const id = entry.toLowerCase();
+        if (seen.has(id)) {
+            throw new LineageInvalidError(`${LINEAGE_FIELD} lists the same source twice`, { duplicate: id });
+        }
+        seen.add(id);
+        sources.push(id);
+    }
+    return sources;
+}
+/** First dot-segment of a scope (`chatgpt` for `chatgpt.conversations`). */
+export function scopeNamespace(scope) {
+    const dot = scope.indexOf(".");
+    return dot === -1 ? scope : scope.slice(0, dot);
+}
+/**
+ * The naming rule. Grant patterns are exact, `prefix.*` or `*`; `prefix.*`
+ * covers every scope that starts with `prefix.`. A derived scope and a
+ * source scope are both covered by the same non-universal pattern exactly
+ * when they share their first segment, and that is the one way the current
+ * grammar can leak across a lineage edge (a grant on `chatgpt.*` would read
+ * both `chatgpt.conversations` and a derivative named `chatgpt.summary`).
+ * `*` reads everything by definition and is not a lineage leak.
+ */
+export function derivedScopeViolatesNaming(derivedScope, sourceScope) {
+    return scopeNamespace(derivedScope) === scopeNamespace(sourceScope);
+}
+export function assertDerivedScopeNaming(derivedScope, sourceScopes) {
+    for (const sourceScope of sourceScopes) {
+        if (derivedScopeViolatesNaming(derivedScope, sourceScope)) {
+            throw new LineageScopeUnderSourcePrefixError({
+                scope: derivedScope,
+                sourceScope,
+            });
+        }
+    }
+}
+/**
+ * Resolve every source id to a data point of this owner. The local index is
+ * consulted first (`keccak256(owner, scope)` over the server's own scopes,
+ * so an unsynced local scope is a valid source), then the gateway with
+ * deleted points included. An id that resolves to nothing, or to another
+ * owner's data point, fails the whole write with 422
+ * LINEAGE_SOURCE_UNKNOWN listing every offending id; a gateway that cannot
+ * be reached fails with 502 so the builder retries instead of being told
+ * its source does not exist.
+ */
+export async function resolveLineageSources(input) {
+    const ownId = computeDataPointId(input.serverOwner, input.scope);
+    const self = input.sources.find((id) => id === ownId);
+    if (self) {
+        throw new LineageInvalidError("A record cannot list its own data point as a lineage source", { dataPointId: self });
+    }
+    const local = localScopesById(input.storage, input.serverOwner, new Set(input.sources));
+    const resolved = [];
+    const unknown = [];
+    for (const dataPointId of input.sources) {
+        const localScope = local.get(dataPointId);
+        if (localScope !== undefined) {
+            resolved.push({
+                dataPointId,
+                scope: localScope,
+                version: null,
+                deletedAt: null,
+            });
+            continue;
+        }
+        if (!input.gateway) {
+            unknown.push(dataPointId);
+            continue;
+        }
+        let record;
+        try {
+            record = await input.gateway.getDataPoint(dataPointId);
+        }
+        catch (err) {
+            throw new LineageSourceLookupFailedError({
+                dataPointId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+        if (!record ||
+            record.ownerAddress.toLowerCase() !== input.serverOwner.toLowerCase()) {
+            unknown.push(dataPointId);
+            continue;
+        }
+        resolved.push({
+            dataPointId,
+            scope: record.scope,
+            version: record.version,
+            deletedAt: record.deletedAt,
+        });
+    }
+    if (unknown.length > 0) {
+        throw new LineageSourceUnknownError({ unknown });
+    }
+    return resolved;
+}
+/**
+ * `dataPointId -> scope` for the server's own scopes that appear in
+ * `wanted`. Pages through the whole local index (an unsynced scope is a
+ * valid source wherever it sorts), stopping early once every wanted id has
+ * been found.
+ */
+function localScopesById(storage, serverOwner, wanted) {
+    const byId = new Map();
+    for (let offset = 0;; offset += LOCAL_SCOPE_SCAN_PAGE) {
+        const { scopes, total } = storage.listScopes({
+            limit: LOCAL_SCOPE_SCAN_PAGE,
+            offset,
+        });
+        for (const summary of scopes) {
+            const id = computeDataPointId(serverOwner, summary.scope);
+            if (wanted.has(id))
+                byId.set(id, summary.scope);
+        }
+        if (byId.size === wanted.size ||
+            scopes.length === 0 ||
+            offset + scopes.length >= total) {
+            break;
+        }
+    }
+    return byId;
+}
+/**
+ * Validate a write's lineage end to end (shape, sources, naming rule) and
+ * produce the `$lineage` record to stamp. An empty list is an EXPLICIT root
+ * statement: it is stamped (`sources: []`) and registered as an attested
+ * root, distinct from an absent field, which makes no lineage statement.
+ * Throws ProtocolErrors; callers on the write path let them propagate
+ * before anything is stored.
+ */
+export async function prepareLineage(input) {
+    const sources = parseLineageSources(input.field);
+    if (!input.serverOwner) {
+        throw new ServerNotConfiguredError({
+            reason: "serverOwner is required to validate lineage sources",
+        });
+    }
+    const resolved = await resolveLineageSources({
+        scope: input.scope,
+        sources,
+        serverOwner: input.serverOwner,
+        storage: input.storage,
+        gateway: input.gateway,
+    });
+    assertDerivedScopeNaming(input.scope, resolved.map((source) => source.scope));
+    return { sources, writtenAt: input.now().toISOString() };
+}
+//# sourceMappingURL=lineage.js.map

package/dist/lineage/lineage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lineage.js","sourceRoot":"","sources":["../../src/lineage/lineage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACL,mBAAmB,EACnB,kCAAkC,EAClC,8BAA8B,EAC9B,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,WAAW,GAAG,UAAmB,CAAC;AAE/C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAG,SAAkB,CAAC;AAEhD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC,kEAAkE;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAE1C,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAoC1C,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAA6B;IACjE,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACjE,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,YAAY,CAC1B,IAA6B,EAC7B,OAAsB;IAEtB,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,MAAc;QACxB,KAAK,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAyC;IAEzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,2BAA2B,CAAC,eAAe,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACvB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,2BAA2B,CAAC,2BAA2B,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAmB,CAAC;QAC/D,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAkB;IACpD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,SAAS,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,mBAAmB,CAC3B,GAAG,aAAa,+DAA+D,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACvC,MAAM,IAAI,mBAAmB,CAC3B,GAAG,aAAa,UAAU,KAAK,CAAC,MAAM,4BAA4B,mBAAmB,EAAE,EACvF,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAClD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,mBAAmB,CAC3B,GAAG,aAAa,yDAAyD,EACzE,EAAE,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAC5D,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,EAAmB,CAAC;QAChD,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,mBAAmB,CAC3B,GAAG,aAAa,8BAA8B,EAC9C,EAAE,SAAS,EAAE,EAAE,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAoB,EACpB,WAAmB;IAEnB,OAAO,cAAc,CAAC,YAAY,CAAC,KAAK,cAAc,CAAC,WAAW,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,YAAoB,EACpB,YAA+B;IAE/B,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,0BAA0B,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,kCAAkC,CAAC;gBAC3C,KAAK,EAAE,YAAY;gBACnB,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAYD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAiC;IAEjC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IACtD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAC3B,6DAA6D,EAC7D,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAC3B,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,WAAW,EACjB,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CACvB,CAAC;IACF,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC;gBACZ,WAAW;gBACX,KAAK,EAAE,UAAU;gBACjB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,MAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CAAC;gBACvC,WAAW;gBACX,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QACD,IACE,CAAC,MAAM;YACP,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,EACrE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,WAAW;YACX,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,yBAAyB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACtB,OAA4C,EAC5C,WAA0B,EAC1B,MAA2B;IAE3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;YAC3C,KAAK,EAAE,qBAAqB;YAC5B,MAAM;SACP,CAAC,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QACD,IACE,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YACzB,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,EAC/B,CAAC;YACD,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAA0B;IAE1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,IAAI,wBAAwB,CAAC;YACjC,MAAM,EAAE,qDAAqD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO;QACP,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IACH,wBAAwB,CACtB,KAAK,CAAC,KAAK,EACX,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CACvC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3D,CAAC"}

package/dist/logger/index.d.ts

@@ -0,0 +1,9 @@
+import type { LoggingConfig } from "../schemas/server-config.js";
+export interface Logger {
+    debug(payloadOrMessage?: unknown, message?: string): void;
+    info(payloadOrMessage?: unknown, message?: string): void;
+    warn(payloadOrMessage?: unknown, message?: string): void;
+    error(payloadOrMessage?: unknown, message?: string): void;
+}
+export declare function createLogger(config: LoggingConfig): Logger;
+//# sourceMappingURL=index.d.ts.map

package/dist/logger/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1D,IAAI,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzD,IAAI,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzD,KAAK,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3D;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAG1D"}

package/dist/logger/index.js

@@ -0,0 +1,5 @@
+export function createLogger(config) {
+    void config;
+    return console;
+}
+//# sourceMappingURL=index.js.map

package/dist/logger/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,YAAY,CAAC,MAAqB;IAChD,KAAK,MAAM,CAAC;IACZ,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/logging/access-log.d.ts

@@ -0,0 +1,23 @@
+export interface AccessLogEntry {
+    logId: string;
+    grantId: string;
+    builder: string;
+    /**
+     * "read"    - a builder read served under a grant.
+     * "write"   - a builder write served under a write grant.
+     * "delete"  - the owner durably deleted a scope (grantId "owner", builder =
+     *             owner address).
+     * "lineage" - a lineage view served (GET /v1/data/:scope/lineage); the
+     *             graph discloses which scopes derive from which, so it is
+     *             logged like a read.
+     */
+    action: "read" | "write" | "delete" | "lineage";
+    scope: string;
+    timestamp: string;
+    ipAddress: string;
+    userAgent: string;
+}
+export interface AccessLogWriter {
+    write(entry: AccessLogEntry): Promise<void>;
+}
+//# sourceMappingURL=access-log.d.ts.map

package/dist/logging/access-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-log.d.ts","sourceRoot":"","sources":["../../src/logging/access-log.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;OAQG;IACH,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C"}

package/dist/logging/access-log.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=access-log.js.map

package/dist/logging/access-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-log.js","sourceRoot":"","sources":["../../src/logging/access-log.ts"],"names":[],"mappings":""}

package/dist/logging/access-reader.d.ts

@@ -0,0 +1,14 @@
+import type { AccessLogEntry } from "./access-log.js";
+export interface AccessLogReadResult {
+    logs: AccessLogEntry[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+export interface AccessLogReader {
+    read(options?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<AccessLogReadResult>;
+}
+//# sourceMappingURL=access-reader.d.ts.map

package/dist/logging/access-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-reader.d.ts","sourceRoot":"","sources":["../../src/logging/access-reader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,cAAc,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,OAAO,CAAC,EAAE;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAClC"}

package/dist/logging/access-reader.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=access-reader.js.map

package/dist/logging/access-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-reader.js","sourceRoot":"","sources":["../../src/logging/access-reader.ts"],"names":[],"mappings":""}

package/dist/mcp/activity.d.ts

@@ -0,0 +1,68 @@
+/**
+ * In-memory MCP activity recorder/ring buffer.
+ *
+ * Records start/end of every MCP tool call so the /mcp UI page can poll for
+ * live and recent activity. No raw data payloads are stored — only metadata
+ * about the call (tool name, scopes, counts, error code, timing).
+ *
+ * The ring buffer is bounded by `maxEvents`; oldest entries are evicted when
+ * full. Running calls occupy a slot; the slot is updated in-place when the
+ * call finishes.
+ */
+export type McpActivityStatus = "running" | "succeeded" | "failed" | "timed_out" | "aborted";
+export type McpActivityPhase = "tool_running" | "response_preparing" | "response_ready";
+export interface McpActivityEvent {
+    id: string;
+    tool: string;
+    status: McpActivityStatus;
+    /** Current server-side phase. This is PS-side only, not a client receipt ack. */
+    phase: McpActivityPhase;
+    startedAt: string;
+    finishedAt?: string;
+    durationMs?: number;
+    handlerDurationMs?: number;
+    payloadBytes?: number;
+    textBytes?: number;
+    structuredContentBytes?: number;
+    /** Scopes involved in the call, where applicable. */
+    scopes?: string[];
+    /** Clipped query preview for search calls only. */
+    queryPreview?: string;
+    resultCount?: number;
+    skippedCount?: number;
+    errorCode?: string;
+    errorMessage?: string;
+}
+export interface McpActivitySnapshot {
+    events: McpActivityEvent[];
+    running: number;
+    total: number;
+}
+export declare class McpActivityRecorder {
+    private readonly _events;
+    private readonly _maxEvents;
+    constructor(maxEvents?: number);
+    /** Start recording a tool call. Returns the activity id. */
+    start(params: {
+        tool: string;
+        scopes?: string[];
+        queryPreview?: string;
+    }): string;
+    /** Update metadata for an in-flight call. No-op if the id is not found. */
+    update(id: string, patch: Partial<Pick<McpActivityEvent, "phase" | "handlerDurationMs" | "payloadBytes" | "textBytes" | "structuredContentBytes" | "resultCount" | "skippedCount" | "errorCode" | "errorMessage">>): void;
+    /** Finish a running call by id. No-op if the id is not found. */
+    finish(id: string, result: {
+        status: Exclude<McpActivityStatus, "running">;
+        handlerDurationMs?: number;
+        payloadBytes?: number;
+        textBytes?: number;
+        structuredContentBytes?: number;
+        resultCount?: number;
+        skippedCount?: number;
+        errorCode?: string;
+        errorMessage?: string;
+    }): void;
+    /** Read the current snapshot, newest first. */
+    snapshot(): McpActivitySnapshot;
+}
+//# sourceMappingURL=activity.d.ts.map

package/dist/mcp/activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../src/mcp/activity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,iBAAiB,GAC3B,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GAC1B,cAAc,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,iBAAiB,CAAC;IAC1B,iFAAiF;IACjF,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AASD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,SAAS,SAAqB;IAI1C,4DAA4D;IAC5D,KAAK,CAAC,MAAM,EAAE;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,MAAM;IAiCV,2EAA2E;IAC3E,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CACZ,IAAI,CACF,gBAAgB,EACd,OAAO,GACP,mBAAmB,GACnB,cAAc,GACd,WAAW,GACX,wBAAwB,GACxB,aAAa,GACb,cAAc,GACd,WAAW,GACX,cAAc,CACjB,CACF,GACA,IAAI;IAMP,iEAAiE;IACjE,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,MAAM,EAAE;QACN,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;QAC9C,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACA,IAAI;IA6CP,+CAA+C;IAC/C,QAAQ,IAAI,mBAAmB;CAKhC"}

package/dist/mcp/activity.js

@@ -0,0 +1,111 @@
+/**
+ * In-memory MCP activity recorder/ring buffer.
+ *
+ * Records start/end of every MCP tool call so the /mcp UI page can poll for
+ * live and recent activity. No raw data payloads are stored — only metadata
+ * about the call (tool name, scopes, counts, error code, timing).
+ *
+ * The ring buffer is bounded by `maxEvents`; oldest entries are evicted when
+ * full. Running calls occupy a slot; the slot is updated in-place when the
+ * call finishes.
+ */
+const DEFAULT_MAX_EVENTS = 50;
+const QUERY_PREVIEW_MAX_CHARS = 120;
+function generateId() {
+    return `act-${crypto.randomUUID().replace(/-/g, "").slice(0, 12)}`;
+}
+export class McpActivityRecorder {
+    _events = [];
+    _maxEvents;
+    constructor(maxEvents = DEFAULT_MAX_EVENTS) {
+        this._maxEvents = maxEvents;
+    }
+    /** Start recording a tool call. Returns the activity id. */
+    start(params) {
+        const id = generateId();
+        const event = {
+            id,
+            tool: params.tool,
+            status: "running",
+            phase: "tool_running",
+            startedAt: new Date().toISOString(),
+            ...(params.scopes && params.scopes.length > 0
+                ? { scopes: params.scopes }
+                : {}),
+            ...(params.queryPreview
+                ? {
+                    queryPreview: params.queryPreview.slice(0, QUERY_PREVIEW_MAX_CHARS),
+                }
+                : {}),
+        };
+        if (this._events.length >= this._maxEvents) {
+            // Evict the oldest finished event. If all are running, evict the oldest.
+            const oldestFinishedIndex = this._events.findIndex((e) => e.status !== "running");
+            if (oldestFinishedIndex >= 0) {
+                this._events.splice(oldestFinishedIndex, 1);
+            }
+            else {
+                this._events.shift();
+            }
+        }
+        this._events.push(event);
+        console.info(`[mcp-activity] start id=${id} tool=${params.tool}`);
+        return id;
+    }
+    /** Update metadata for an in-flight call. No-op if the id is not found. */
+    update(id, patch) {
+        const event = this._events.find((e) => e.id === id);
+        if (!event)
+            return;
+        Object.assign(event, patch);
+    }
+    /** Finish a running call by id. No-op if the id is not found. */
+    finish(id, result) {
+        const event = this._events.find((e) => e.id === id);
+        if (!event)
+            return;
+        const finishedAt = new Date().toISOString();
+        const durationMs = Date.parse(finishedAt) - Date.parse(event.startedAt);
+        event.status = result.status;
+        event.phase = "response_ready";
+        event.finishedAt = finishedAt;
+        event.durationMs = durationMs;
+        if (result.handlerDurationMs !== undefined) {
+            event.handlerDurationMs = result.handlerDurationMs;
+        }
+        if (result.payloadBytes !== undefined) {
+            event.payloadBytes = result.payloadBytes;
+        }
+        if (result.textBytes !== undefined) {
+            event.textBytes = result.textBytes;
+        }
+        if (result.structuredContentBytes !== undefined) {
+            event.structuredContentBytes = result.structuredContentBytes;
+        }
+        if (result.resultCount !== undefined) {
+            event.resultCount = result.resultCount;
+        }
+        if (result.skippedCount !== undefined) {
+            event.skippedCount = result.skippedCount;
+        }
+        if (result.errorCode) {
+            event.errorCode = result.errorCode;
+        }
+        if (result.errorMessage) {
+            event.errorMessage = result.errorMessage;
+        }
+        if (result.status === "succeeded") {
+            console.info(`[mcp-activity] finish id=${id} tool=${event.tool} status=${result.status} durationMs=${durationMs}`);
+        }
+        else {
+            console.warn(`[mcp-activity] finish id=${id} tool=${event.tool} status=${result.status} durationMs=${durationMs}${result.errorCode ? ` errorCode=${result.errorCode}` : ""}`);
+        }
+    }
+    /** Read the current snapshot, newest first. */
+    snapshot() {
+        const events = [...this._events].reverse();
+        const running = events.filter((e) => e.status === "running").length;
+        return { events, running, total: events.length };
+    }
+}
+//# sourceMappingURL=activity.js.map

package/dist/mcp/activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.js","sourceRoot":"","sources":["../../src/mcp/activity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAqCH,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,SAAS,UAAU;IACjB,OAAO,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,OAAO,mBAAmB;IACb,OAAO,GAAuB,EAAE,CAAC;IACjC,UAAU,CAAS;IAEpC,YAAY,SAAS,GAAG,kBAAkB;QACxC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,4DAA4D;IAC5D,KAAK,CAAC,MAIL;QACC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,KAAK,GAAqB;YAC9B,EAAE;YACF,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAC3C,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBAC3B,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,YAAY;gBACrB,CAAC,CAAC;oBACE,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;iBACpE;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,yEAAyE;YACzE,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAC9B,CAAC;YACF,IAAI,mBAAmB,IAAI,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,2BAA2B,EAAE,SAAS,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,2EAA2E;IAC3E,MAAM,CACJ,EAAU,EACV,KAaC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,iEAAiE;IACjE,MAAM,CACJ,EAAU,EACV,MAUC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,KAAK,CAAC,KAAK,GAAG,gBAAgB,CAAC;QAC/B,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;QAC9B,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;QAC9B,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC3C,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACrD,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAC3C,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YAChD,KAAK,CAAC,sBAAsB,GAAG,MAAM,CAAC,sBAAsB,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACzC,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAC3C,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAC3C,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CACV,4BAA4B,EAAE,SAAS,KAAK,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,eAAe,UAAU,EAAE,CACrG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CACV,4BAA4B,EAAE,SAAS,KAAK,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,eAAe,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAChK,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,QAAQ;QACN,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACnD,CAAC;CACF"}

package/dist/mcp/builder-registration.d.ts

@@ -0,0 +1,24 @@
+import type { Builder, DataPortabilityGatewayConfig, GatewayClient } from "@opendatalabs/vana-sdk/browser";
+import type { McpConnectionRecord } from "./types.js";
+export interface EnsureMcpGranteeRegisteredInput {
+    connection: McpConnectionRecord;
+    gateway: Pick<GatewayClient, "getBuilder">;
+    gatewayConfig: DataPortabilityGatewayConfig;
+    gatewayUrl: string;
+    appUrl: string;
+    fetch?: typeof fetch;
+}
+export interface EnsureMcpGranteeRegisteredOutput {
+    alreadyRegistered: boolean;
+    builder: Builder | null;
+    granteeAddress: `0x${string}`;
+}
+export declare class McpGranteeRegistrationError extends Error {
+    code: string;
+    status?: number | undefined;
+    body?: unknown | undefined;
+    constructor(code: string, message: string, status?: number | undefined, body?: unknown | undefined);
+}
+export declare function ensureMcpGranteeRegistered(input: EnsureMcpGranteeRegisteredInput): Promise<EnsureMcpGranteeRegisteredOutput>;
+export declare function appUrlFromOAuthRedirectUri(redirectUri: string, fallback: string): string;
+//# sourceMappingURL=builder-registration.d.ts.map

package/dist/mcp/builder-registration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-registration.d.ts","sourceRoot":"","sources":["../../src/mcp/builder-registration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EACP,4BAA4B,EAC5B,aAAa,EACd,MAAM,gCAAgC,CAAC;AAOxC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,mBAAmB,CAAC;IAChC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC3C,aAAa,EAAE,4BAA4B,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,gCAAgC;IAC/C,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,KAAK,MAAM,EAAE,CAAC;CAC/B;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IAE3C,IAAI,EAAE,MAAM;IAEZ,MAAM,CAAC,EAAE,MAAM;IACf,IAAI,CAAC,EAAE,OAAO;gBAHd,IAAI,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACR,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,IAAI,CAAC,EAAE,OAAO,YAAA;CAKxB;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,gCAAgC,CAAC,CAuE3C;AAED,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,MAAM,CAMR"}