@opendatalabs/personal-server-ts-core 0.0.1-canary.0078f25

package/dist/gateway/client.js

@@ -0,0 +1,171 @@
+/**
+ * Gateway client for communicating with the Vana Gateway API.
+ * Provides builder registration checks and grant lookups.
+ *
+ * All Gateway GET endpoints return responses wrapped in:
+ *   { data: T, proof: GatewayProof }
+ * This client unwraps the envelope and returns just the data.
+ */
+export function createGatewayClient(baseUrl) {
+    const base = baseUrl.replace(/\/+$/, "");
+    async function unwrapEnvelope(res) {
+        const envelope = (await res.json());
+        return envelope.data;
+    }
+    return {
+        async isRegisteredBuilder(address) {
+            const builder = await this.getBuilder(address);
+            // Gateway returns 200 with builder data if registered, 404 if not.
+            // Existence IS registration — no separate `registered` field.
+            return builder !== null;
+        },
+        async getBuilder(address) {
+            const res = await fetch(`${base}/v1/builders/${address}`);
+            if (res.status === 404)
+                return null;
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            return unwrapEnvelope(res);
+        },
+        async getGrant(grantId) {
+            const res = await fetch(`${base}/v1/grants/${grantId}`);
+            if (res.status === 404)
+                return null;
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            return unwrapEnvelope(res);
+        },
+        async listGrantsByUser(userAddress) {
+            const res = await fetch(`${base}/v1/grants?user=${userAddress}`);
+            if (res.status === 404)
+                return [];
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            return unwrapEnvelope(res);
+        },
+        async getSchemaForScope(scope) {
+            const res = await fetch(`${base}/v1/schemas?scope=${scope}`);
+            if (res.status === 404)
+                return null;
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            return unwrapEnvelope(res);
+        },
+        async getServer(address) {
+            const res = await fetch(`${base}/v1/servers/${address}`);
+            if (res.status === 404)
+                return null;
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            return unwrapEnvelope(res);
+        },
+        async getFile(fileId) {
+            const res = await fetch(`${base}/v1/files/${fileId}`);
+            if (res.status === 404)
+                return null;
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            return unwrapEnvelope(res);
+        },
+        async listFilesSince(owner, cursor) {
+            const params = new URLSearchParams({ owner });
+            if (cursor !== null) {
+                params.set("since", cursor);
+            }
+            const res = await fetch(`${base}/v1/files?${params.toString()}`);
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            return unwrapEnvelope(res);
+        },
+        async getSchema(schemaId) {
+            const res = await fetch(`${base}/v1/schemas/${schemaId}`);
+            if (res.status === 404)
+                return null;
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            return unwrapEnvelope(res);
+        },
+        async registerFile(params) {
+            const res = await fetch(`${base}/v1/files`, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Web3Signed ${params.signature}`,
+                },
+                body: JSON.stringify({
+                    ownerAddress: params.ownerAddress,
+                    url: params.url,
+                    schemaId: params.schemaId,
+                }),
+            });
+            // 409 = already registered, treat as success (idempotent)
+            if (res.status === 409) {
+                const body = await res.json().catch(() => ({}));
+                return {
+                    fileId: body.fileId,
+                };
+            }
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            const body = await res.json();
+            return {
+                fileId: body.fileId,
+            };
+        },
+        async createGrant(params) {
+            const res = await fetch(`${base}/v1/grants`, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Web3Signed ${params.signature}`,
+                },
+                body: JSON.stringify({
+                    grantorAddress: params.grantorAddress,
+                    granteeId: params.granteeId,
+                    grant: params.grant,
+                    fileIds: params.fileIds,
+                }),
+            });
+            if (res.status === 409) {
+                const body = await res.json().catch(() => ({}));
+                return {
+                    grantId: body.grantId,
+                };
+            }
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+            const body = await res.json();
+            return {
+                grantId: body.grantId,
+            };
+        },
+        async revokeGrant(params) {
+            const res = await fetch(`${base}/v1/grants/${params.grantId}`, {
+                method: "DELETE",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Web3Signed ${params.signature}`,
+                },
+                body: JSON.stringify({
+                    grantorAddress: params.grantorAddress,
+                }),
+            });
+            if (res.status === 409)
+                return; // already revoked
+            if (!res.ok) {
+                throw new Error(`Gateway error: ${res.status} ${res.statusText}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/gateway/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/gateway/client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiGH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEzC,KAAK,UAAU,cAAc,CAAI,GAAa;QAC5C,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;QAC1D,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,mBAAmB,CAAC,OAAe;YACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC/C,mEAAmE;YACnE,8DAA8D;YAC9D,OAAO,OAAO,KAAK,IAAI,CAAC;QAC1B,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAAe;YAC9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,gBAAgB,OAAO,EAAE,CAAC,CAAC;YAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,cAAc,CAAU,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,OAAe;YAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,cAAc,OAAO,EAAE,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,cAAc,CAAuB,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,WAAmB;YACxC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,mBAAmB,WAAW,EAAE,CAAC,CAAC;YACjE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,cAAc,CAAkB,GAAG,CAAC,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;YACnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,qBAAqB,KAAK,EAAE,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,cAAc,CAAS,GAAG,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,OAAe;YAC7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,eAAe,OAAO,EAAE,CAAC,CAAC;YACzD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,cAAc,CAAa,GAAG,CAAC,CAAC;QACzC,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,MAAc;YAC1B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,aAAa,MAAM,EAAE,CAAC,CAAC;YACtD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,cAAc,CAAa,GAAG,CAAC,CAAC;QACzC,CAAC;QAED,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,MAAqB;YAErB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9B,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,aAAa,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,cAAc,CAAiB,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,QAAgB;YAC9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,eAAe,QAAQ,EAAE,CAAC,CAAC;YAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,cAAc,CAAS,GAAG,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,YAAY,CAChB,MAA0B;YAE1B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,WAAW,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,cAAc,MAAM,CAAC,SAAS,EAAE;iBAChD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B,CAAC;aACH,CAAC,CAAC;YACH,0DAA0D;YAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChD,OAAO;oBACL,MAAM,EAAG,IAAgC,CAAC,MAE7B;iBACd,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO;gBACL,MAAM,EAAG,IAAgC,CAAC,MAA4B;aACvE,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,WAAW,CACf,MAAyB;YAEzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,YAAY,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,cAAc,MAAM,CAAC,SAAS,EAAE;iBAChD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC;aACH,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChD,OAAO;oBACL,OAAO,EAAG,IAAgC,CAAC,OAE9B;iBACd,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAG,IAAgC,CAAC,OAE9B;aACd,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAyB;YACzC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,cAAc,MAAM,CAAC,OAAO,EAAE,EAAE;gBAC7D,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,cAAc,MAAM,CAAC,SAAS,EAAE;iBAChD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,cAAc,EAAE,MAAM,CAAC,cAAc;iBACtC,CAAC;aACH,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,CAAC,kBAAkB;YAClD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/grants/eip712.d.ts

@@ -0,0 +1,28 @@
+/**
+ * EIP-712 domain and type definitions for grant signatures.
+ * See protocol spec §4.1.9 for typed data structure.
+ */
+import type { TypedDataDomain } from "viem";
+import type { GrantPayload } from "./types.js";
+export declare const GRANT_DOMAIN: TypedDataDomain;
+export declare const GRANT_TYPES: {
+    readonly Grant: readonly [{
+        readonly name: "user";
+        readonly type: "address";
+    }, {
+        readonly name: "builder";
+        readonly type: "address";
+    }, {
+        readonly name: "scopes";
+        readonly type: "string[]";
+    }, {
+        readonly name: "expiresAt";
+        readonly type: "uint256";
+    }, {
+        readonly name: "nonce";
+        readonly type: "uint256";
+    }];
+};
+/** Convert a GrantPayload to the message object expected by EIP-712 signTypedData. */
+export declare function grantToEip712Message(payload: GrantPayload): Record<string, unknown>;
+//# sourceMappingURL=eip712.d.ts.map

package/dist/grants/eip712.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip712.d.ts","sourceRoot":"","sources":["../../src/grants/eip712.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,eAAO,MAAM,YAAY,EAAE,eAMjB,CAAC;AAEX,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;CAQd,CAAC;AAEX,sFAAsF;AACtF,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,YAAY,GACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQzB"}

package/dist/grants/eip712.js

@@ -0,0 +1,30 @@
+/**
+ * EIP-712 domain and type definitions for grant signatures.
+ * See protocol spec §4.1.9 for typed data structure.
+ */
+export const GRANT_DOMAIN = {
+    name: "Vana Data Portability",
+    version: "1",
+    chainId: 14800,
+    verifyingContract: "0x0000000000000000000000000000000000000000",
+};
+export const GRANT_TYPES = {
+    Grant: [
+        { name: "user", type: "address" },
+        { name: "builder", type: "address" },
+        { name: "scopes", type: "string[]" },
+        { name: "expiresAt", type: "uint256" },
+        { name: "nonce", type: "uint256" },
+    ],
+};
+/** Convert a GrantPayload to the message object expected by EIP-712 signTypedData. */
+export function grantToEip712Message(payload) {
+    return {
+        user: payload.user,
+        builder: payload.builder,
+        scopes: payload.scopes,
+        expiresAt: payload.expiresAt,
+        nonce: payload.nonce,
+    };
+}
+//# sourceMappingURL=eip712.js.map

package/dist/grants/eip712.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip712.js","sourceRoot":"","sources":["../../src/grants/eip712.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,GAAG;IACZ,OAAO,EAAE,KAAK;IACd,iBAAiB,EACf,4CAA6D;CACvD,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE;QACL,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;QACjC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE;QACpC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;KACnC;CACO,CAAC;AAEX,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAClC,OAAqB;IAErB,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC"}

package/dist/grants/index.d.ts

@@ -0,0 +1,5 @@
+export type { GrantPayload, GrantWithSignature, GatewayGrantResponse, } from "./types.js";
+export { GRANT_DOMAIN, GRANT_TYPES, grantToEip712Message } from "./eip712.js";
+export type { GrantVerificationResult } from "./verify.js";
+export { verifyGrantLocal } from "./verify.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/grants/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/grants/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC9E,YAAY,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/grants/index.js

@@ -0,0 +1,3 @@
+export { GRANT_DOMAIN, GRANT_TYPES, grantToEip712Message } from "./eip712.js";
+export { verifyGrantLocal } from "./verify.js";
+//# sourceMappingURL=index.js.map

package/dist/grants/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/grants/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/grants/types.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Grant types for the Vana Data Portability Protocol.
+ * See protocol spec §5.3 for grant structure.
+ */
+export interface GrantPayload {
+    user: `0x${string}`;
+    builder: `0x${string}`;
+    scopes: string[];
+    expiresAt: bigint;
+    nonce: bigint;
+}
+export interface GrantWithSignature {
+    grantId: string;
+    payload: GrantPayload;
+    signature: `0x${string}`;
+}
+/** Gateway response for GET /v1/grants/{grantId} (unwrapped from envelope) */
+export interface GatewayGrantResponse {
+    id: string;
+    grantorAddress: string;
+    granteeId: string;
+    grant: string;
+    fileIds: string[];
+    status: "pending" | "confirmed";
+    addedAt: string;
+    revokedAt: string | null;
+    revocationSignature: string | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/grants/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/grants/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC"}

package/dist/grants/types.js

@@ -0,0 +1,6 @@
+/**
+ * Grant types for the Vana Data Portability Protocol.
+ * See protocol spec §5.3 for grant structure.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/grants/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/grants/types.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/grants/verify.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Local grant verification — EIP-712 signature recovery + expiry/scope/grantee checks.
+ * No network calls; operates entirely on the provided GrantWithSignature.
+ */
+import type { GrantPayload, GrantWithSignature } from "./types.js";
+export interface GrantVerificationResult {
+    valid: true;
+    grant: GrantPayload;
+}
+/**
+ * Local-only grant verification (no network):
+ * 1. Recover signer from EIP-712 signature, verify === expectedOwner
+ * 2. Check expiresAt (0 = no expiry, else > now)
+ * 3. Check requestedScope ⊆ grantedScopes
+ * 4. Check requestSigner === grant.builder
+ */
+export declare function verifyGrantLocal(params: {
+    grant: GrantWithSignature;
+    expectedOwner: `0x${string}`;
+    requestSigner: `0x${string}`;
+    requestedScope: string;
+    now?: number;
+}): Promise<GrantVerificationResult>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/grants/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/grants/verify.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEnE,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,IAAI,CAAC;IACZ,KAAK,EAAE,YAAY,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,KAAK,EAAE,kBAAkB,CAAC;IAC1B,aAAa,EAAE,KAAK,MAAM,EAAE,CAAC;IAC7B,aAAa,EAAE,KAAK,MAAM,EAAE,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA2DnC"}

package/dist/grants/verify.js

@@ -0,0 +1,71 @@
+/**
+ * Local grant verification — EIP-712 signature recovery + expiry/scope/grantee checks.
+ * No network calls; operates entirely on the provided GrantWithSignature.
+ */
+import { verifyTypedData } from "viem";
+import { InvalidSignatureError, GrantExpiredError, ScopeMismatchError, } from "../errors/catalog.js";
+import { scopeCoveredByGrant } from "../scopes/match.js";
+import { GRANT_DOMAIN, GRANT_TYPES } from "./eip712.js";
+/**
+ * Local-only grant verification (no network):
+ * 1. Recover signer from EIP-712 signature, verify === expectedOwner
+ * 2. Check expiresAt (0 = no expiry, else > now)
+ * 3. Check requestedScope ⊆ grantedScopes
+ * 4. Check requestSigner === grant.builder
+ */
+export async function verifyGrantLocal(params) {
+    const { grant, expectedOwner, requestSigner, requestedScope } = params;
+    const { payload, signature } = grant;
+    // 1. Verify EIP-712 signature was produced by expectedOwner
+    let valid;
+    try {
+        valid = await verifyTypedData({
+            address: expectedOwner,
+            domain: GRANT_DOMAIN,
+            types: GRANT_TYPES,
+            primaryType: "Grant",
+            message: {
+                user: payload.user,
+                builder: payload.builder,
+                scopes: payload.scopes,
+                expiresAt: payload.expiresAt,
+                nonce: payload.nonce,
+            },
+            signature,
+        });
+    }
+    catch {
+        throw new InvalidSignatureError({
+            reason: "EIP-712 signature verification failed",
+        });
+    }
+    if (!valid) {
+        throw new InvalidSignatureError({
+            reason: "Grant signature does not match expected owner",
+        });
+    }
+    // 2. Check expiry (0n = no expiry)
+    if (payload.expiresAt !== 0n) {
+        const now = params.now ?? Math.floor(Date.now() / 1000);
+        if (Number(payload.expiresAt) < now) {
+            throw new GrantExpiredError({ expiresAt: Number(payload.expiresAt) });
+        }
+    }
+    // 3. Check scope coverage
+    if (!scopeCoveredByGrant(requestedScope, payload.scopes)) {
+        throw new ScopeMismatchError({
+            requestedScope,
+            grantedScopes: payload.scopes,
+        });
+    }
+    // 4. Check request signer is the grant's builder
+    if (requestSigner.toLowerCase() !== payload.builder.toLowerCase()) {
+        throw new InvalidSignatureError({
+            reason: "Request signer is not the grant builder",
+            expected: payload.builder,
+            actual: requestSigner,
+        });
+    }
+    return { valid: true, grant: payload };
+}
+//# sourceMappingURL=verify.js.map

package/dist/grants/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/grants/verify.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAEvC,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAQxD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAMtC;IACC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IACvE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAErC,4DAA4D;IAC5D,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,eAAe,CAAC;YAC5B,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,OAAgB;YAC7B,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB;YACD,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC;YAC9B,MAAM,EAAE,uCAAuC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,qBAAqB,CAAC;YAC9B,MAAM,EAAE,+CAA+C;SACxD,CAAC,CAAC;IACL,CAAC;IAED,mCAAmC;IACnC,IAAI,OAAO,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,iBAAiB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,mBAAmB,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,kBAAkB,CAAC;YAC3B,cAAc;YACd,aAAa,EAAE,OAAO,CAAC,MAAM;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,iDAAiD;IACjD,IAAI,aAAa,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAqB,CAAC;YAC9B,MAAM,EAAE,yCAAyC;YACjD,QAAQ,EAAE,OAAO,CAAC,OAAO;YACzB,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC"}

package/dist/keys/derive.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Extracts master key material from EIP-191 signature over "vana-master-key-v1".
+ * The raw signature bytes ARE the master key material (spec §2.3).
+ * @param signature - 0x-prefixed hex string (65 bytes = 130 hex chars + 0x)
+ * @returns 65-byte Uint8Array
+ */
+export declare function deriveMasterKey(signature: `0x${string}`): Uint8Array;
+/**
+ * Recovers the server owner address from a master key signature.
+ * Uses EIP-191 recovery over the canonical message "vana-master-key-v1".
+ */
+export declare function recoverServerOwner(masterKeySignature: `0x${string}`): Promise<`0x${string}`>;
+/**
+ * Derives a scope-specific 32-byte key via HKDF-SHA256.
+ * salt = "vana", info = "scope:{scope}" (spec §2.3).
+ */
+export declare function deriveScopeKey(masterKey: Uint8Array, scope: string): Uint8Array;
+//# sourceMappingURL=derive.d.ts.map

package/dist/keys/derive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.d.ts","sourceRoot":"","sources":["../../src/keys/derive.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,KAAK,MAAM,EAAE,GAAG,UAAU,CAkBpE;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,kBAAkB,EAAE,KAAK,MAAM,EAAE,GAChC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAKxB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,UAAU,EACrB,KAAK,EAAE,MAAM,GACZ,UAAU,CAIZ"}

package/dist/keys/derive.js

@@ -0,0 +1,43 @@
+import { hkdf } from "@noble/hashes/hkdf.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { recoverMessageAddress } from "viem";
+/**
+ * Extracts master key material from EIP-191 signature over "vana-master-key-v1".
+ * The raw signature bytes ARE the master key material (spec §2.3).
+ * @param signature - 0x-prefixed hex string (65 bytes = 130 hex chars + 0x)
+ * @returns 65-byte Uint8Array
+ */
+export function deriveMasterKey(signature) {
+    const hex = signature.slice(2);
+    if (hex.length !== 130) {
+        throw new Error(`Invalid signature length: expected 130 hex chars (65 bytes), got ${hex.length}`);
+    }
+    if (!/^[0-9a-fA-F]+$/.test(hex)) {
+        throw new Error("Invalid signature: contains non-hex characters");
+    }
+    const bytes = new Uint8Array(65);
+    for (let i = 0; i < 65; i++) {
+        bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return bytes;
+}
+/**
+ * Recovers the server owner address from a master key signature.
+ * Uses EIP-191 recovery over the canonical message "vana-master-key-v1".
+ */
+export async function recoverServerOwner(masterKeySignature) {
+    return recoverMessageAddress({
+        message: "vana-master-key-v1",
+        signature: masterKeySignature,
+    });
+}
+/**
+ * Derives a scope-specific 32-byte key via HKDF-SHA256.
+ * salt = "vana", info = "scope:{scope}" (spec §2.3).
+ */
+export function deriveScopeKey(masterKey, scope) {
+    const salt = new TextEncoder().encode("vana");
+    const info = new TextEncoder().encode(`scope:${scope}`);
+    return hkdf(sha256, masterKey, salt, info, 32);
+}
+//# sourceMappingURL=derive.js.map

package/dist/keys/derive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.js","sourceRoot":"","sources":["../../src/keys/derive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,MAAM,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,SAAwB;IACtD,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE/B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,oEAAoE,GAAG,CAAC,MAAM,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,kBAAiC;IAEjC,OAAO,qBAAqB,CAAC;QAC3B,OAAO,EAAE,oBAAoB;QAC7B,SAAS,EAAE,kBAAkB;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,SAAqB,EACrB,KAAa;IAEb,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC"}

package/dist/keys/index.d.ts

@@ -0,0 +1,3 @@
+export { deriveMasterKey, deriveScopeKey, recoverServerOwner, } from "./derive.js";
+export { loadOrCreateServerAccount, type ServerAccount, type SignTypedDataParams, } from "./server-account.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/keys/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/keys/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,cAAc,EACd,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,KAAK,aAAa,EAClB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC"}

package/dist/keys/index.js

@@ -0,0 +1,3 @@
+export { deriveMasterKey, deriveScopeKey, recoverServerOwner, } from "./derive.js";
+export { loadOrCreateServerAccount, } from "./server-account.js";
+//# sourceMappingURL=index.js.map

package/dist/keys/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/keys/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,cAAc,EACd,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,GAG1B,MAAM,qBAAqB,CAAC"}

package/dist/keys/server-account.d.ts

@@ -0,0 +1,28 @@
+/**
+ * ServerAccount wraps a randomly generated private key for EIP-712 signing.
+ * The key is persisted to disk so the same address survives restarts.
+ */
+import type { TypedDataDomain } from "viem";
+export interface SignTypedDataParams {
+    domain: TypedDataDomain;
+    types: Record<string, Array<{
+        name: string;
+        type: string;
+    }>>;
+    primaryType: string;
+    message: Record<string, unknown>;
+}
+export interface ServerAccount {
+    address: `0x${string}`;
+    /** Uncompressed public key (65 bytes, 0x04 prefix). */
+    publicKey: `0x${string}`;
+    signTypedData(params: SignTypedDataParams): Promise<`0x${string}`>;
+    /** Sign a personal message (EIP-191). */
+    signMessage(message: string): Promise<`0x${string}`>;
+}
+/**
+ * Loads an existing server keypair from disk, or generates a new random one
+ * and persists it. Returns a ServerAccount suitable for EIP-712 signing.
+ */
+export declare function loadOrCreateServerAccount(keyPath: string): ServerAccount;
+//# sourceMappingURL=server-account.d.ts.map

package/dist/keys/server-account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-account.d.ts","sourceRoot":"","sources":["../../src/keys/server-account.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAE5C,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,uDAAuD;IACvD,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;IACzB,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IACnE,yCAAyC;IACzC,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;CACtD;AAQD;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CA2CxE"}

package/dist/keys/server-account.js

@@ -0,0 +1,48 @@
+/**
+ * ServerAccount wraps a randomly generated private key for EIP-712 signing.
+ * The key is persisted to disk so the same address survives restarts.
+ */
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
+import { dirname } from "node:path";
+import { generatePrivateKey, privateKeyToAccount } from "viem/accounts";
+/**
+ * Loads an existing server keypair from disk, or generates a new random one
+ * and persists it. Returns a ServerAccount suitable for EIP-712 signing.
+ */
+export function loadOrCreateServerAccount(keyPath) {
+    let privateKey;
+    if (existsSync(keyPath)) {
+        const raw = readFileSync(keyPath, "utf-8");
+        const data = JSON.parse(raw);
+        privateKey = data.privateKey;
+    }
+    else {
+        privateKey = generatePrivateKey();
+        const account = privateKeyToAccount(privateKey);
+        // Ensure parent directories exist
+        mkdirSync(dirname(keyPath), { recursive: true });
+        const data = {
+            address: account.address,
+            publicKey: account.publicKey,
+            privateKey,
+        };
+        writeFileSync(keyPath, JSON.stringify(data, null, 2), { mode: 0o600 });
+    }
+    const account = privateKeyToAccount(privateKey);
+    return {
+        address: account.address,
+        publicKey: account.publicKey,
+        async signTypedData(params) {
+            return account.signTypedData({
+                domain: params.domain,
+                types: params.types,
+                primaryType: params.primaryType,
+                message: params.message,
+            });
+        },
+        async signMessage(message) {
+            return account.signMessage({ message });
+        },
+    };
+}
+//# sourceMappingURL=server-account.js.map

package/dist/keys/server-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-account.js","sourceRoot":"","sources":["../../src/keys/server-account.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAyBxE;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,IAAI,UAAyB,CAAC;IAE9B,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAgB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,UAAU,GAAG,IAAI,CAAC,UAA2B,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,kBAAkB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAEhD,kCAAkC;QAClC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAgB;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU;SACX,CAAC;QACF,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAEhD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,CAAC,aAAa,CAAC,MAA2B;YAC7C,OAAO,OAAO,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAED;gBACd,KAAK,EAAE,MAAM,CAAC,KAED;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,OAAe;YAC/B,OAAO,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/logger/index.d.ts

@@ -0,0 +1,5 @@
+import { type Logger } from "pino";
+import type { LoggingConfig } from "../schemas/server-config.js";
+export type { Logger } from "pino";
+export declare function createLogger(config: LoggingConfig): Logger;
+//# sourceMappingURL=index.d.ts.map

package/dist/logger/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AAAA,OAAa,EAAE,KAAK,MAAM,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,YAAY,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAO1D"}

package/dist/logger/index.js

@@ -0,0 +1,9 @@
+import pino from "pino";
+export function createLogger(config) {
+    const usePretty = config.pretty || process.env.NODE_ENV !== "production";
+    return pino({
+        level: config.level,
+        ...(usePretty ? { transport: { target: "pino-pretty" } } : {}),
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/logger/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AAAA,OAAO,IAAqB,MAAM,MAAM,CAAC;AAKzC,MAAM,UAAU,YAAY,CAAC,MAAqB;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IAEzE,OAAO,IAAI,CAAC;QACV,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC"}

package/dist/logging/access-log.d.ts

@@ -0,0 +1,15 @@
+export interface AccessLogEntry {
+    logId: string;
+    grantId: string;
+    builder: string;
+    action: "read";
+    scope: string;
+    timestamp: string;
+    ipAddress: string;
+    userAgent: string;
+}
+export interface AccessLogWriter {
+    write(entry: AccessLogEntry): Promise<void>;
+}
+export declare function createAccessLogWriter(logsDir: string): AccessLogWriter;
+//# sourceMappingURL=access-log.d.ts.map