@opendatalabs/personal-server-ts-core 0.0.1-canary.016adf9 → 0.0.1-canary.052d47e

package/dist/contracts/data.js

@@ -0,0 +1,371 @@
+import { createDataFileEnvelope, ScopeSchema, } from "@opendatalabs/vana-sdk/browser";
+import { buildBinaryEnvelopeData, sha256Hex } from "./binary.js";
+import { buildDataBlocksAsync } from "../storage/blocks/build.js";
+import { hasReservedWriterKey, stampWriterAttribution, } from "../write/attribution.js";
+import { hasReservedLineageKey, stampLineage, } from "../lineage/lineage.js";
+/**
+ * Thrown by the ingest contracts when the envelope was already written to
+ * storage but a later step (indexing) failed. The record is on disk and a
+ * re-index can surface it, so callers must treat the write as persisted:
+ * never retry it under the same proof, never release a replay reservation.
+ */
+export class IngestPersistedError extends Error {
+    relativePath;
+    cause;
+    constructor(relativePath, cause) {
+        super(`Envelope written to ${relativePath} but indexing failed: ${cause instanceof Error ? cause.message : String(cause)}`);
+        this.relativePath = relativePath;
+        this.cause = cause;
+        this.name = "IngestPersistedError";
+    }
+}
+async function indexWrittenEnvelope(storage, entry) {
+    try {
+        await storage.insertEntry(entry);
+    }
+    catch (err) {
+        throw new IngestPersistedError(entry.path, err);
+    }
+}
+function invalidScope(message) {
+    return {
+        ok: false,
+        status: 400,
+        body: {
+            error: "INVALID_SCOPE",
+            message,
+        },
+    };
+}
+export function parseDataScopeContract(scopeParam) {
+    const scopeResult = ScopeSchema.safeParse(scopeParam);
+    if (!scopeResult.success) {
+        return invalidScope(scopeResult.error.issues[0]?.message ?? "Invalid scope");
+    }
+    return { ok: true, scope: scopeResult.data };
+}
+function normalizeLimit(value) {
+    return value ?? 20;
+}
+function normalizeOffset(value) {
+    return value ?? 0;
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+const VISIBILITY_PAGE_SIZE = 200;
+export async function listDataScopesContract(input) {
+    const limit = normalizeLimit(input.limit);
+    const offset = normalizeOffset(input.offset);
+    let page;
+    let total;
+    if (input.isVisible) {
+        // Filtered listing: walk every scope so the page and the total both
+        // describe the visible set (the index cannot filter by tombstone).
+        const visible = [];
+        for (let scan = 0;; scan += VISIBILITY_PAGE_SIZE) {
+            const batch = input.storage.listScopes({
+                scopePrefix: input.scopePrefix,
+                limit: VISIBILITY_PAGE_SIZE,
+                offset: scan,
+            });
+            for (const summary of batch.scopes) {
+                const latest = input.storage.findEntry({
+                    scope: summary.scope,
+                    at: summary.latestCollectedAt,
+                });
+                if (!latest || (await input.isVisible(summary.scope, latest))) {
+                    visible.push(summary);
+                }
+            }
+            if (batch.scopes.length < VISIBILITY_PAGE_SIZE)
+                break;
+        }
+        total = visible.length;
+        page = visible.slice(offset, offset + limit);
+    }
+    else {
+        const result = input.storage.listScopes({
+            scopePrefix: input.scopePrefix,
+            limit,
+            offset,
+        });
+        page = result.scopes;
+        total = result.total;
+    }
+    const scopes = await Promise.all(page.map(async (summary) => {
+        const entry = input.storage.findEntry({
+            scope: summary.scope,
+            at: summary.latestCollectedAt,
+        });
+        if (!entry) {
+            return summary;
+        }
+        const hasBlocks = typeof input.storage.hasScopeBlocks === "function"
+            ? await input.storage.hasScopeBlocks(summary.scope, summary.latestCollectedAt)
+            : false;
+        return {
+            ...summary,
+            dataStatus: hasBlocks ? "ready" : "indexing",
+            sizeBytes: entry.sizeBytes,
+        };
+    }));
+    return {
+        ok: true,
+        response: {
+            scopes,
+            total,
+            limit,
+            offset,
+        },
+    };
+}
+export async function listDataVersionsContract(input) {
+    const scopeResult = parseDataScopeContract(input.scopeParam);
+    if (!scopeResult.ok)
+        return scopeResult;
+    const limit = normalizeLimit(input.limit);
+    const offset = normalizeOffset(input.offset);
+    let page;
+    let total;
+    if (input.isVisible) {
+        const visible = [];
+        for (let scan = 0;; scan += VISIBILITY_PAGE_SIZE) {
+            const batch = input.storage.listVersions(scopeResult.scope, {
+                limit: VISIBILITY_PAGE_SIZE,
+                offset: scan,
+            });
+            for (const entry of batch) {
+                if (await input.isVisible(scopeResult.scope, entry)) {
+                    visible.push(entry);
+                }
+            }
+            if (batch.length < VISIBILITY_PAGE_SIZE)
+                break;
+        }
+        total = visible.length;
+        page = visible.slice(offset, offset + limit);
+    }
+    else {
+        page = input.storage.listVersions(scopeResult.scope, { limit, offset });
+        total = input.storage.countVersions(scopeResult.scope);
+    }
+    return {
+        ok: true,
+        scope: scopeResult.scope,
+        response: {
+            scope: scopeResult.scope,
+            versions: page.map((entry) => ({
+                fileId: entry.fileId,
+                schemaId: entry.schemaId,
+                collectedAt: entry.collectedAt,
+            })),
+            total,
+            limit,
+            offset,
+        },
+    };
+}
+export async function readDataContract(input) {
+    const scopeResult = parseDataScopeContract(input.scopeParam);
+    if (!scopeResult.ok)
+        return scopeResult;
+    const entry = input.storage.findEntry({
+        scope: scopeResult.scope,
+        fileId: input.fileId,
+        at: input.at,
+    });
+    if (!entry) {
+        return {
+            ok: false,
+            status: 404,
+            body: {
+                error: "NOT_FOUND",
+                message: `No data found for scope "${scopeResult.scope}"`,
+            },
+        };
+    }
+    return {
+        ok: true,
+        scope: scopeResult.scope,
+        envelope: await input.storage.readEnvelope(scopeResult.scope, entry.collectedAt),
+    };
+}
+export async function ingestDataContract(input) {
+    const scopeResult = parseDataScopeContract(input.scopeParam);
+    if (!scopeResult.ok)
+        return scopeResult;
+    if (!isRecord(input.body)) {
+        return {
+            ok: false,
+            status: 400,
+            body: {
+                error: "INVALID_BODY",
+                message: "Request body must be a JSON object",
+            },
+        };
+    }
+    // The attribution key is server-stamped, never caller-supplied: a payload
+    // that carries it could forge (or shadow) an attribution. That holds for
+    // every JSON ingest, owner writes included, so consumers can trust that a
+    // stored $writtenBy was always produced by the server.
+    if (hasReservedWriterKey(input.body)) {
+        return {
+            ok: false,
+            status: 400,
+            body: {
+                error: "INVALID_BODY",
+                message: "Request body must not contain the reserved $writtenBy key",
+            },
+        };
+    }
+    // Same rule for the lineage mirror: `$lineage` is what the server
+    // validated, so a caller must not be able to plant or shadow it.
+    if (hasReservedLineageKey(input.body)) {
+        return {
+            ok: false,
+            status: 400,
+            body: {
+                error: "INVALID_BODY",
+                message: "Request body must not contain the reserved $lineage key",
+            },
+        };
+    }
+    const envelope = createDataFileEnvelope(scopeResult.scope, input.collectedAt, stampServerKeys(input.body, input));
+    const writeResult = await input.storage.writeEnvelope(envelope);
+    try {
+        await writeBlockSidecars(input.storage, envelope);
+    }
+    catch {
+        // Best-effort bounded sidecars: raw envelope storage remains the source of truth.
+    }
+    await indexWrittenEnvelope(input.storage, {
+        fileId: null,
+        schemaId: null,
+        path: writeResult.relativePath,
+        scope: scopeResult.scope,
+        collectedAt: input.collectedAt,
+        sizeBytes: writeResult.sizeBytes,
+        afterTombstoneVersion: input.afterTombstoneVersion ?? null,
+    });
+    return {
+        ok: true,
+        scope: scopeResult.scope,
+        collectedAt: input.collectedAt,
+        response: ingestResponse(scopeResult.scope, input),
+        writeResult,
+    };
+}
+/**
+ * Stamp the server-owned reserved keys (`$writtenBy`, `$lineage`) into the
+ * record about to be stored. Both are absent from owner root writes, so such
+ * an envelope stays byte-identical to today's.
+ */
+function stampServerKeys(data, input) {
+    let stamped = data;
+    if (input.lineage)
+        stamped = stampLineage(stamped, input.lineage);
+    if (input.attribution) {
+        stamped = stampWriterAttribution(stamped, input.attribution);
+    }
+    return stamped;
+}
+function ingestResponse(scope, input) {
+    return {
+        scope,
+        collectedAt: input.collectedAt,
+        status: input.status,
+        ...(input.lineage ? { lineage: { sources: input.lineage.sources } } : {}),
+    };
+}
+/**
+ * Ingest unstructured/binary data (e.g. a PDF). The bytes are hashed and
+ * base64-encoded into a binary DataFileEnvelope, then written and indexed
+ * exactly like JSON ingest — so the downstream encrypt/upload/register path is
+ * unchanged. Unlike JSON ingest, the body is raw bytes (not a JSON object) and
+ * `schemaId` may be absent (the caller decides whether to auto-register one).
+ */
+export async function ingestBinaryDataContract(input) {
+    const scopeResult = parseDataScopeContract(input.scopeParam);
+    if (!scopeResult.ok)
+        return scopeResult;
+    if (input.bytes.length === 0) {
+        return {
+            ok: false,
+            status: 400,
+            body: {
+                error: "INVALID_BODY",
+                message: "Request body must not be empty",
+            },
+        };
+    }
+    // The caller's metadata object is stored verbatim inside the record, so
+    // the reserved server-stamped keys are refused there too (same rule as a
+    // JSON body): a reader must never find a caller-planted $lineage or
+    // $writtenBy anywhere in what the server wrote.
+    if (isRecord(input.metadata) &&
+        (hasReservedWriterKey(input.metadata) ||
+            hasReservedLineageKey(input.metadata))) {
+        return {
+            ok: false,
+            status: 400,
+            body: {
+                error: "INVALID_BODY",
+                message: "X-Vana-Metadata must not contain the reserved $lineage or $writtenBy keys",
+            },
+        };
+    }
+    const contentHash = await sha256Hex(input.bytes);
+    const data = buildBinaryEnvelopeData({
+        bytes: input.bytes,
+        mimeType: input.mimeType,
+        filename: input.filename,
+        contentHash,
+        metadata: input.metadata,
+    });
+    const envelope = createDataFileEnvelope(scopeResult.scope, input.collectedAt, stampServerKeys(data, input));
+    const writeResult = await input.storage.writeEnvelope(envelope);
+    try {
+        await writeBlockSidecars(input.storage, envelope);
+    }
+    catch {
+        // Best-effort bounded sidecars: raw envelope storage remains the source of truth.
+    }
+    await indexWrittenEnvelope(input.storage, {
+        fileId: null,
+        schemaId: null,
+        path: writeResult.relativePath,
+        scope: scopeResult.scope,
+        collectedAt: input.collectedAt,
+        sizeBytes: input.bytes.length,
+        afterTombstoneVersion: input.afterTombstoneVersion ?? null,
+    });
+    return {
+        ok: true,
+        scope: scopeResult.scope,
+        collectedAt: input.collectedAt,
+        response: ingestResponse(scopeResult.scope, input),
+        writeResult,
+    };
+}
+export async function deleteDataScopeContract(input) {
+    const scopeResult = parseDataScopeContract(input.scopeParam);
+    if (!scopeResult.ok)
+        return scopeResult;
+    return {
+        ok: true,
+        deletedCount: await input.storage.deleteScope(scopeResult.scope),
+    };
+}
+async function writeBlockSidecars(storage, envelope) {
+    if (!storage.writeBlockManifest)
+        return;
+    const built = await buildDataBlocksAsync({
+        scope: envelope.scope,
+        collectedAt: envelope.collectedAt,
+        schemaId: envelope.schemaId,
+        content: envelope,
+    });
+    await storage.writeBlockManifest(envelope.scope, envelope.collectedAt, built.manifest, built.blocks);
+}
+//# sourceMappingURL=data.js.map

package/dist/contracts/data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.js","sourceRoot":"","sources":["../../src/contracts/data.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,sBAAsB,EACtB,WAAW,GAEZ,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,YAAY,GAEb,MAAM,uBAAuB,CAAC;AAmF/B;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAE3B;IACA;IAFlB,YACkB,YAAoB,EACpB,KAAc;QAE9B,KAAK,CACH,uBAAuB,YAAY,yBACjC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QAPc,iBAAY,GAAZ,YAAY,CAAQ;QACpB,UAAK,GAAL,KAAK,CAAS;QAO9B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,KAAK,UAAU,oBAAoB,CACjC,OAA2C,EAC3C,KAAuE;IAEvE,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAoED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,KAAK,EAAE,eAAe;YACtB,OAAO;SACR;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAAkB;IAElB,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,YAAY,CACjB,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,OAAO,KAAK,IAAI,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkC;IAElC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAoB,CAAC;IACzB,IAAI,KAAa,CAAC;IAClB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,IAAI,oBAAoB,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;gBACrC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,oBAAoB;gBAC3B,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YACH,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;oBACrC,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,EAAE,EAAE,OAAO,CAAC,iBAAiB;iBAC9B,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;oBAC9D,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,oBAAoB;gBAAE,MAAM;QACxD,CAAC;QACD,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;QACvB,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK;YACL,MAAM;SACP,CAAC,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;QACrB,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACvB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,EAAE,EAAE,OAAO,CAAC,iBAAiB;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,SAAS,GACb,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,UAAU;YAChD,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAChC,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,iBAAiB,CAC1B;YACH,CAAC,CAAC,KAAK,CAAC;QACZ,OAAO;YACL,GAAG,OAAO;YACV,UAAU,EAAE,SAAS,CAAC,CAAC,CAAE,OAAiB,CAAC,CAAC,CAAE,UAAoB;YAClE,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IACF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACR,MAAM;YACN,KAAK;YACL,KAAK;YACL,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAoC;IAEpC,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IAExC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAkB,CAAC;IACvB,IAAI,KAAa,CAAC;IAClB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,IAAI,oBAAoB,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE;gBAC1D,KAAK,EAAE,oBAAoB;gBAC3B,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;oBACpD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB;gBAAE,MAAM;QACjD,CAAC;QACD,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;QACvB,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,QAAQ,EAAE;YACR,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC7B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YACH,KAAK;YACL,KAAK;YACL,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAA4B;IAE5B,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IAExC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QACpC,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;IAEH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,4BAA4B,WAAW,CAAC,KAAK,GAAG;aAC1D;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,QAAQ,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CACxC,WAAW,CAAC,KAAK,EACjB,KAAK,CAAC,WAAW,CAClB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA8B;IAE9B,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IAExC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,oCAAoC;aAC9C;SACF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,uDAAuD;IACvD,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,2DAA2D;aACrE;SACF,CAAC;IACJ,CAAC;IACD,kEAAkE;IAClE,iEAAiE;IACjE,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,yDAAyD;aACnE;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CACrC,WAAW,CAAC,KAAK,EACjB,KAAK,CAAC,WAAW,EACjB,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CACnC,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,kFAAkF;IACpF,CAAC;IACD,MAAM,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE;QACxC,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,WAAW,CAAC,YAAY;QAC9B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,IAAI,IAAI;KAC3D,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC;QAClD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CACtB,IAA6B,EAC7B,KAA+D;IAE/D,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CACrB,KAAa,EACb,KAA0E;IAE1E,OAAO;QACL,KAAK;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAoC;IAEpC,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IAExC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,gCAAgC;aAC1C;SACF,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,yEAAyE;IACzE,oEAAoE;IACpE,gDAAgD;IAChD,IACE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QACxB,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;YACnC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EACxC,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,cAAc;gBACrB,OAAO,EACL,2EAA2E;aAC9E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,uBAAuB,CAAC;QACnC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW;QACX,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,sBAAsB,CACrC,WAAW,CAAC,KAAK,EACjB,KAAK,CAAC,WAAW,EACjB,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAC7B,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,kFAAkF;IACpF,CAAC;IACD,MAAM,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE;QACxC,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,WAAW,CAAC,YAAY;QAC9B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;QAC7B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,IAAI,IAAI;KAC3D,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC;QAClD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAmC;IAEnC,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IAExC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,YAAY,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,OAAwB,EACxB,QAA0B;IAE1B,IAAI,CAAC,OAAO,CAAC,kBAAkB;QAAE,OAAO;IAExC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC;QACvC,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO,EAAE,QAAQ;KAClB,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,kBAAkB,CAC9B,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,WAAW,EACpB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,MAAM,CACb,CAAC;AACJ,CAAC"}

package/dist/contracts/grants.d.ts

@@ -0,0 +1,45 @@
+import type { DataPortabilityGatewayConfig, GatewayClient } from "@opendatalabs/vana-sdk/browser";
+import type { ServerSigner } from "../signing/index.js";
+import { type ContractResult } from "./http.js";
+export interface VerifyGrantRequestBody {
+    grantorAddress: `0x${string}`;
+    granteeId: `0x${string}`;
+    scopes: string[];
+    grantVersion: string;
+    expiresAt: string;
+    signature: `0x${string}`;
+}
+export interface CreateGrantRequestBody {
+    granteeAddress: `0x${string}`;
+    scopes: string[];
+    /** Unix seconds; 0 = no expiry. Default 0 when omitted. */
+    expiresAt?: number;
+    /** Decimal uint256 string; default "1". */
+    grantVersion?: string;
+}
+export interface CreateGrantContractInput {
+    gateway: Pick<GatewayClient, "getBuilder" | "createGrant">;
+    serverOwner?: `0x${string}`;
+    serverSigner?: Pick<ServerSigner, "signGrantRegistration">;
+    body: unknown;
+}
+export interface RevokeGrantContractInput {
+    gateway: Pick<GatewayClient, "getGrant" | "revokeGrant">;
+    serverOwner?: `0x${string}`;
+    serverSigner?: Partial<Pick<ServerSigner, "signGrantRevocation">>;
+    grantId: string;
+}
+export interface ListGrantsContractInput {
+    gateway: Pick<GatewayClient, "listGrantsByUser">;
+    serverOwner?: `0x${string}`;
+}
+export interface VerifyGrantContractInput {
+    body: unknown;
+    gatewayConfig?: DataPortabilityGatewayConfig;
+    nowSeconds?: number;
+}
+export declare function listGrantsContract(input: ListGrantsContractInput): Promise<ContractResult>;
+export declare function createGrantContract(input: CreateGrantContractInput): Promise<ContractResult>;
+export declare function revokeGrantContract(input: RevokeGrantContractInput): Promise<ContractResult>;
+export declare function verifyGrantContract({ body, gatewayConfig, nowSeconds, }: VerifyGrantContractInput): Promise<ContractResult>;
+//# sourceMappingURL=grants.d.ts.map

package/dist/contracts/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/contracts/grants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,4BAA4B,EAC5B,aAAa,EAEd,MAAM,gCAAgC,CAAC;AAKxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AAMnB,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,KAAK,MAAM,EAAE,CAAC;IAC9B,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;CAC1B;AAMD,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,KAAK,MAAM,EAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,GAAG,aAAa,CAAC,CAAC;IAC3D,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAC3D,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,aAAa,CAAC,CAAC;IACzD,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAClE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IACjD,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,4BAA4B,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA2ED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAIzB;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,cAAc,CAAC,CA0DzB;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAoDzB;AAED,wBAAsB,mBAAmB,CAAC,EACxC,IAAI,EACJ,aAAa,EACb,UAA0C,GAC3C,EAAE,wBAAwB,GAAG,OAAO,CAAC,cAAc,CAAC,CAsCpD"}

package/dist/contracts/grants.js

@@ -0,0 +1,177 @@
+import { isDataPortabilityGatewayConfig, verifyGrantRegistration, } from "@opendatalabs/vana-sdk/browser";
+import { contractError, contractOk, contractProtocolError, } from "./http.js";
+function isStringArray(value) {
+    return (Array.isArray(value) && value.every((entry) => typeof entry === "string"));
+}
+function isValidCreateBody(body) {
+    if (body === null || typeof body !== "object" || Array.isArray(body)) {
+        return false;
+    }
+    const b = body;
+    if (typeof b.granteeAddress !== "string" ||
+        !b.granteeAddress.startsWith("0x")) {
+        return false;
+    }
+    if (!isStringArray(b.scopes) || b.scopes.length === 0)
+        return false;
+    if (b.expiresAt !== undefined && typeof b.expiresAt !== "number") {
+        return false;
+    }
+    if (b.grantVersion !== undefined && typeof b.grantVersion !== "string") {
+        return false;
+    }
+    return true;
+}
+function isValidVerifyBody(body) {
+    if (body === null || typeof body !== "object" || Array.isArray(body)) {
+        return false;
+    }
+    const b = body;
+    if (typeof b.grantorAddress !== "string" ||
+        !b.grantorAddress.startsWith("0x")) {
+        return false;
+    }
+    if (typeof b.granteeId !== "string" || !b.granteeId.startsWith("0x")) {
+        return false;
+    }
+    if (!isStringArray(b.scopes) || b.scopes.length === 0)
+        return false;
+    if (typeof b.grantVersion !== "string")
+        return false;
+    if (typeof b.expiresAt !== "string")
+        return false;
+    if (typeof b.signature !== "string" || !b.signature.startsWith("0x")) {
+        return false;
+    }
+    return true;
+}
+function isValidGrantId(grantId) {
+    return grantId.startsWith("0x") && grantId.length > 2;
+}
+function serverOwnerNotConfigured() {
+    return contractProtocolError(500, "SERVER_NOT_CONFIGURED", "Server owner address not configured. Set VANA_MASTER_KEY_SIGNATURE environment variable.");
+}
+// Bigint conversion guard. Returns null on non-numeric / negative input.
+function toUint256(value) {
+    try {
+        const big = typeof value === "bigint" ? value : BigInt(value);
+        if (big < 0n)
+            return null;
+        return big;
+    }
+    catch {
+        return null;
+    }
+}
+export async function listGrantsContract(input) {
+    if (!input.serverOwner)
+        return serverOwnerNotConfigured();
+    const grants = await input.gateway.listGrantsByUser(input.serverOwner);
+    return contractOk({ grants });
+}
+export async function createGrantContract(input) {
+    if (!input.serverOwner)
+        return serverOwnerNotConfigured();
+    if (!input.serverSigner) {
+        return contractProtocolError(500, "SERVER_SIGNER_NOT_CONFIGURED", "Server signer not configured. Set VANA_MASTER_KEY_SIGNATURE environment variable.");
+    }
+    if (!isValidCreateBody(input.body)) {
+        return contractError(400, "INVALID_BODY", "Body must include granteeAddress (0x string) and scopes (non-empty string array)");
+    }
+    const { granteeAddress, scopes, expiresAt, grantVersion } = input.body;
+    const builder = await input.gateway.getBuilder(granteeAddress);
+    if (!builder) {
+        return contractProtocolError(404, "BUILDER_NOT_REGISTERED", `Builder ${granteeAddress} is not registered on-chain`);
+    }
+    // Default to first-registration grantVersion=1. Re-registration callers
+    // are expected to pass a strictly higher value. The gateway returns 409
+    // on stale versions so retries can rebase against the live counter.
+    const grantVersionBig = toUint256(grantVersion ?? "1");
+    if (grantVersionBig === null || grantVersionBig < 1n) {
+        return contractError(400, "INVALID_BODY", "grantVersion must be a uint256 >= 1");
+    }
+    const expiresAtBig = BigInt(expiresAt ?? 0);
+    const signature = await input.serverSigner.signGrantRegistration({
+        grantorAddress: input.serverOwner,
+        granteeId: builder.id,
+        scopes,
+        grantVersion: grantVersionBig,
+        expiresAt: expiresAtBig,
+    });
+    const params = {
+        grantorAddress: input.serverOwner,
+        granteeId: builder.id,
+        scopes,
+        grantVersion: grantVersionBig.toString(),
+        expiresAt: expiresAtBig.toString(),
+        signature,
+    };
+    const result = await input.gateway.createGrant(params);
+    return contractOk({ grantId: result.grantId }, 201);
+}
+export async function revokeGrantContract(input) {
+    if (!input.serverOwner)
+        return serverOwnerNotConfigured();
+    if (!input.serverSigner?.signGrantRevocation) {
+        return contractProtocolError(500, "SERVER_SIGNER_NOT_CONFIGURED", "Server signer not configured. Set VANA_MASTER_KEY_SIGNATURE environment variable.");
+    }
+    if (!isValidGrantId(input.grantId)) {
+        return contractError(400, "INVALID_GRANT_ID", "Grant id must be a non-empty 0x string");
+    }
+    // Canary GrantRevocation shares the (grantor, grantee) monotonic nonce
+    // with registration: both events advance the same grantVersion counter.
+    // Fetch the current grant to read its grantVersion, then increment so
+    // the on-chain CAS check accepts the revocation.
+    const current = await input.gateway.getGrant(input.grantId);
+    if (!current) {
+        return contractProtocolError(404, "GRANT_NOT_FOUND", `Grant ${input.grantId} not found`);
+    }
+    const currentVersion = toUint256(current.grantVersion);
+    if (currentVersion === null) {
+        return contractProtocolError(500, "INVALID_GRANT_STATE", `Grant ${input.grantId} has unparseable grantVersion`);
+    }
+    const nextVersion = currentVersion + 1n;
+    const signature = await input.serverSigner.signGrantRevocation({
+        grantorAddress: input.serverOwner,
+        grantId: input.grantId,
+        grantVersion: nextVersion,
+    });
+    const params = {
+        grantorAddress: input.serverOwner,
+        grantId: input.grantId,
+        grantVersion: nextVersion.toString(),
+        signature,
+    };
+    await input.gateway.revokeGrant(params);
+    return contractOk({ status: "revoked", grantId: input.grantId });
+}
+export async function verifyGrantContract({ body, gatewayConfig, nowSeconds = Math.floor(Date.now() / 1000), }) {
+    if (!isValidVerifyBody(body)) {
+        return contractError(400, "INVALID_BODY", "Body must include grantorAddress, granteeId, scopes, grantVersion, expiresAt, and signature");
+    }
+    if (!isDataPortabilityGatewayConfig(gatewayConfig)) {
+        return contractProtocolError(500, "SERVER_NOT_CONFIGURED", "Gateway config is not configured");
+    }
+    const result = await verifyGrantRegistration({
+        gatewayConfig,
+        grantorAddress: body.grantorAddress,
+        granteeId: body.granteeId,
+        scopes: body.scopes,
+        grantVersion: body.grantVersion,
+        expiresAt: body.expiresAt,
+        signature: body.signature,
+        nowSeconds,
+    });
+    if (!result.valid) {
+        return contractOk({ valid: false, error: result.error });
+    }
+    return contractOk({
+        valid: true,
+        grantorAddress: result.grantorAddress,
+        granteeId: result.granteeId,
+        scopes: result.scopes,
+        grantVersion: result.grantVersion,
+        expiresAt: result.expiresAt,
+    });
+}
+//# sourceMappingURL=grants.js.map

package/dist/contracts/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/contracts/grants.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,aAAa,EACb,UAAU,EACV,qBAAqB,GAEtB,MAAM,WAAW,CAAC;AAqDnB,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa;IACtC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IACE,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;QACpC,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,EAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACvE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa;IACtC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IACE,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;QACpC,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,EAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,qBAAqB,CAC1B,GAAG,EACH,uBAAuB,EACvB,0FAA0F,CAC3F,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,SAAS,CAAC,KAA+B;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,GAAG,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA8B;IAE9B,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,wBAAwB,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,wBAAwB,EAAE,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACxB,OAAO,qBAAqB,CAC1B,GAAG,EACH,8BAA8B,EAC9B,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,aAAa,CAClB,GAAG,EACH,cAAc,EACd,kFAAkF,CACnF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,qBAAqB,CAC1B,GAAG,EACH,wBAAwB,EACxB,WAAW,cAAc,6BAA6B,CACvD,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,eAAe,GAAG,SAAS,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC;IACvD,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,GAAG,EAAE,EAAE,CAAC;QACrD,OAAO,aAAa,CAClB,GAAG,EACH,cAAc,EACd,qCAAqC,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAE5C,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,qBAAqB,CAAC;QAC/D,cAAc,EAAE,KAAK,CAAC,WAAW;QACjC,SAAS,EAAE,OAAO,CAAC,EAAmB;QACtC,MAAM;QACN,YAAY,EAAE,eAAe;QAC7B,SAAS,EAAE,YAAY;KACxB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAsB;QAChC,cAAc,EAAE,KAAK,CAAC,WAAW;QACjC,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM;QACN,YAAY,EAAE,eAAe,CAAC,QAAQ,EAAE;QACxC,SAAS,EAAE,YAAY,CAAC,QAAQ,EAAE;QAClC,SAAS;KACV,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,wBAAwB,EAAE,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,mBAAmB,EAAE,CAAC;QAC7C,OAAO,qBAAqB,CAC1B,GAAG,EACH,8BAA8B,EAC9B,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,aAAa,CAClB,GAAG,EACH,kBAAkB,EAClB,wCAAwC,CACzC,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,iDAAiD;IACjD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,qBAAqB,CAC1B,GAAG,EACH,iBAAiB,EACjB,SAAS,KAAK,CAAC,OAAO,YAAY,CACnC,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,qBAAqB,CAC1B,GAAG,EACH,qBAAqB,EACrB,SAAS,KAAK,CAAC,OAAO,+BAA+B,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,cAAc,GAAG,EAAE,CAAC;IAExC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC;QAC7D,cAAc,EAAE,KAAK,CAAC,WAAW;QACjC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IACH,MAAM,MAAM,GAAsB;QAChC,cAAc,EAAE,KAAK,CAAC,WAAW;QACjC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE;QACpC,SAAS;KACV,CAAC;IACF,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,IAAI,EACJ,aAAa,EACb,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GACjB;IACzB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,aAAa,CAClB,GAAG,EACH,cAAc,EACd,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,8BAA8B,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,OAAO,qBAAqB,CAC1B,GAAG,EACH,uBAAuB,EACvB,kCAAkC,CACnC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;QAC3C,aAAa;QACb,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU;KACX,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,UAAU,CAAC;QAChB,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC"}

package/dist/contracts/http.d.ts

@@ -0,0 +1,21 @@
+export type ContractResult<TBody = unknown> = {
+    ok: true;
+    status: number;
+    body: TBody;
+} | {
+    ok: false;
+    status: number;
+    body: unknown;
+};
+export declare function contractOk<TBody>(body: TBody, status?: number): ContractResult<TBody>;
+export declare function contractError(status: number, error: string, message: string): ContractResult;
+export declare function contractProtocolError(status: number, errorCode: string, message: string): ContractResult;
+export declare function normalizeIntegerParam(value: string | null | undefined, fallback: number): number;
+export declare function parseJsonObjectBody(request: Request, invalidJsonMessage?: string): Promise<{
+    ok: true;
+    body: Record<string, unknown>;
+} | {
+    ok: false;
+    result: ContractResult;
+}>;
+//# sourceMappingURL=http.d.ts.map

package/dist/contracts/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/contracts/http.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,CAAC,KAAK,GAAG,OAAO,IACtC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEjD,wBAAgB,UAAU,CAAC,KAAK,EAC9B,IAAI,EAAE,KAAK,EACX,MAAM,SAAM,GACX,cAAc,CAAC,KAAK,CAAC,CAEvB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,cAAc,CAMhB;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,cAAc,CAYhB;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,QAAQ,EAAE,MAAM,GACf,MAAM,CAIR;AAED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,kBAAkB,SAAsB,GACvC,OAAO,CACN;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAC3C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CACxC,CAuBA"}