@opendatalabs/personal-server-ts-core 0.2.0 → 1.0.1

package/dist/sync/workers/upload.js

@@ -1,65 +1,157 @@
-import { readDataFile } from "../../storage/hierarchy/index.js";
-import { deriveScopeKey } from "../../keys/derive.js";
-import { encryptWithPassword } from "../../storage/encryption/index.js";
+import { encodeAbiParameters, keccak256, stringToHex } from "viem";
+import { deriveScopeKey, encryptWithPassword, } from "@opendatalabs/vana-sdk/browser";
 /**
  * Upload a single unsynced index entry:
  * 1. Read local data file from disk
- * 2. Look up schema for the scope → get schemaId
- * 3. Derive scope key from master key → hex-encode as OpenPGP password
- * 4. Encrypt with OpenPGP password-based encryption → binary
- * 5. Upload OpenPGP binary to storage backend
- * 6. Sign file registration via EIP-712
- * 7. Register file record on-chain via Gateway (with schemaId)
- * 8. Update local index with fileId
+ * 2. Derive scope key from master key → hex-encode as OpenPGP password
+ * 3. Encrypt envelope with OpenPGP password-based encryption → ciphertext
+ * 4. Compute dataHash / metadataHash commitments (scope-addressed, no schema)
+ * 5. Upload ciphertext to storage backend, version-keyed `{scope}/{version}`
+ * 6. Register DPv2 data point on-chain (AddData) if not already
+ * 7. Persist the gateway-assigned dataPointId (marks the entry synced)
  */
 export async function uploadOne(deps, entry) {
-    const { indexManager, hierarchyOptions, storageAdapter, gateway, signer, masterKey, serverOwner, logger, } = deps;
+    const { storage, storageAdapter, gateway, signer, masterKey, serverOwner, logger, } = deps;
     // 1. Read local data file
-    const envelope = await readDataFile(hierarchyOptions, entry.scope, entry.collectedAt);
-    // 2. Look up schema for the scope
-    const schema = await gateway.getSchemaForScope(entry.scope);
-    if (!schema) {
-        throw new Error(`No schema found for scope: ${entry.scope}`);
-    }
-    // 3. Derive scope key → hex-encode as OpenPGP password
+    const envelope = await storage.readEnvelope(entry.scope, entry.collectedAt);
+    // 2. Derive scope key → hex-encode as OpenPGP password
     const scopeKey = deriveScopeKey(masterKey, entry.scope);
-    const scopeKeyHex = Buffer.from(scopeKey).toString("hex");
-    // 4. Encrypt with OpenPGP password-based encryption
+    const scopeKeyHex = uint8ToHex(scopeKey);
+    // 3. Encrypt with OpenPGP password-based encryption
     const plaintext = new TextEncoder().encode(JSON.stringify(envelope));
     const encrypted = await encryptWithPassword(plaintext, scopeKeyHex);
-    // 5. Upload to storage backend
-    const storageKey = `${entry.scope}/${entry.collectedAt}`;
-    const url = await storageAdapter.upload(storageKey, encrypted);
-    // 6. Sign file registration via EIP-712
-    const signature = await signer.signFileRegistration({
-        ownerAddress: serverOwner,
-        url,
-        schemaId: schema.id,
-    });
-    // 7. Register file on-chain via Gateway
-    const registration = await gateway.registerFile({
-        ownerAddress: serverOwner,
-        url,
-        schemaId: schema.id,
-        signature,
-    });
-    const fileId = registration.fileId;
-    if (!fileId) {
-        throw new Error(`Gateway registerFile did not return a fileId for ${entry.path}`);
+    // 4. Compute the on-chain commitments.
+    //   dataHash     = keccak256 of the plaintext envelope JSON. Commits to the
+    //                  canonical content, not the ciphertext — OpenPGP
+    //                  password-based encryption embeds random salts so
+    //                  re-encrypting the same plaintext yields different bytes;
+    //                  hashing the plaintext keeps the on-chain commitment
+    //                  reproducible across replicas serving the same version.
+    //   metadataHash = keccak256 of canonical-JSON({scope, collectedAt,
+    //                  sizeBytes}). Commits to the off-chain metadata that
+    //                  describes this version without leaking the payload. DPv2
+    //                  is scope-addressed with no schema concept — the gateway
+    //                  neither records nor registers schemas — so no schemaId is
+    //                  looked up or committed.
+    const dataHash = keccak256(plaintext);
+    const metadataHash = keccak256(stringToHex(JSON.stringify({
+        scope: entry.scope,
+        collectedAt: entry.collectedAt,
+        sizeBytes: encrypted.byteLength,
+    })));
+    // 5. Upload ciphertext to storage backend FIRST, version-keyed so the
+    // download worker can reconstruct the URL from a DataPointRecord's
+    // (scope, expectedVersion) — DataPointRecords carry no URL. We upload
+    // before registering so the on-chain data point (the synced marker) is
+    // never stamped ahead of a blob that failed to land.
+    const storageKey = `${entry.scope}/${entry.version}`;
+    let url = await storageAdapter.upload(storageKey, encrypted);
+    // 6. DPv2 data-point registration (idempotent — skipped when a prior run
+    // already persisted a dataPointId on this entry). registerDataPoint stamps
+    // the synced marker that excludes this entry from findUnsynced next time.
+    let dataPointId;
+    if (entry.dataPointId) {
+        dataPointId = entry.dataPointId;
+    }
+    else {
+        const registerAt = async (version) => {
+            const addDataSignature = await signer.signAddData({
+                ownerAddress: serverOwner,
+                scope: entry.scope,
+                dataHash,
+                metadataHash,
+                expectedVersion: version,
+            });
+            const dataPointResult = await gateway.registerDataPoint({
+                ownerAddress: serverOwner,
+                scope: entry.scope,
+                dataHash,
+                metadataHash,
+                expectedVersion: String(version),
+                signature: addDataSignature,
+            });
+            const id = dataPointResult.dataPointId ?? null;
+            if (!id) {
+                throw new Error(`Gateway registerDataPoint did not return a dataPointId for ${entry.path} (scope=${entry.scope}, version=${version})`);
+            }
+            return id;
+        };
+        try {
+            dataPointId = await registerAt(BigInt(entry.version));
+        }
+        catch (err) {
+            if (!isStaleVersionConflict(err))
+                throw err;
+            // The registry's version for this (owner, scope) is ahead of the local
+            // index: pre-DPv2 rows were backfilled to version 1, and other replicas
+            // (PS Lite in the browser) advance the same per-scope sequence. The
+            // gateway 409s precisely so the client can re-sign against the live
+            // version — retrying the same version every cycle head-blocks the
+            // scope's whole upload queue.
+            const record = await gateway.getDataPoint(computeDataPointId(serverOwner, entry.scope));
+            if (!record)
+                throw err;
+            if (record.dataHash.toLowerCase() === dataHash.toLowerCase()) {
+                // Identical content is already registered (this entry, or a replica's
+                // copy of it) — adopt the registered data point rather than minting a
+                // new version of the same bytes.
+                dataPointId = record.id;
+                // Align the local row with the adopted registry version — downstream
+                // consumers sign from the row's version (e.g. x402 RecordDataAccess),
+                // so a stale local version would emit records the registry rejects.
+                const adoptedVersion = Number(record.expectedVersion);
+                if (adoptedVersion !== entry.version) {
+                    // Cross-replica adopt: "the registrant already uploaded the blob
+                    // under the registered version key" is an assumption, not a fact —
+                    // a replica that crashed between register and upload leaves a
+                    // registry row whose bytes 404 for every consumer (readers
+                    // reconstruct the URL from the record's (scope, expectedVersion);
+                    // records carry no URL). Verify, and heal from our identical
+                    // plaintext (dataHash matched, so our ciphertext decrypts to the
+                    // registered content).
+                    const adoptedKey = `${entry.scope}/${adoptedVersion}`;
+                    const adoptedBlobExists = await storageAdapter.exists(storageAdapter.urlForKey(adoptedKey));
+                    if (!adoptedBlobExists) {
+                        logger.warn({ scope: entry.scope, version: adoptedVersion, dataPointId }, "Adopted registry version has no blob in storage; re-uploading from local content");
+                        url = await storageAdapter.upload(adoptedKey, encrypted);
+                    }
+                    await storage.updateEntryVersion(entry.path, adoptedVersion);
+                }
+            }
+            else {
+                // Rebase: re-sign one past the registry's live version. The blob key
+                // embeds the version (replicas reconstruct URLs from the registry
+                // record), so the rebased version needs its own blob; the one written
+                // under the stale key above is orphaned, which storage tolerates.
+                const rebased = BigInt(record.expectedVersion) + 1n;
+                url = await storageAdapter.upload(`${entry.scope}/${rebased}`, encrypted);
+                // A concurrent replica can still win the race to `rebased`; the next
+                // sync cycle re-reads the registry and rebases again, so this stays
+                // convergent without looping here.
+                dataPointId = await registerAt(rebased);
+                await storage.updateEntryVersion(entry.path, Number(rebased));
+            }
+        }
+        // 7. Stamp the dataPointId on the local index entry — marks it synced.
+        await storage.updateDataPointId(entry.path, dataPointId);
     }
-    // 8. Update local index with fileId
-    indexManager.updateFileId(entry.path, fileId);
-    logger.info({ path: entry.path, fileId, url }, "Uploaded and registered file");
-    return { path: entry.path, fileId, url };
+    logger.info({
+        path: entry.path,
+        scope: entry.scope,
+        version: entry.version,
+        url,
+        dataPointId,
+    }, "Uploaded and registered DPv2 data point");
+    return { path: entry.path, url, dataPointId };
 }
 /**
- * Process all unsynced entries (fileId === null).
+ * Process all unsynced entries (dataPointId === null).
  * Processes sequentially to avoid overwhelming storage backend.
  * Returns array of results (skips failures, logs errors).
  */
 export async function uploadAll(deps, options) {
     const batchSize = options?.batchSize ?? 50;
-    const entries = deps.indexManager.findUnsynced({ limit: batchSize });
+    const entries = deps.storage.findUnsynced({ limit: batchSize });
     const results = [];
     for (const entry of entries) {
         try {
@@ -67,9 +159,34 @@ export async function uploadAll(deps, options) {
             results.push(result);
         }
         catch (err) {
-            deps.logger.error({ path: entry.path, scope: entry.scope, error: err.message }, "Failed to upload entry");
+            const error = err;
+            options?.onError?.(entry, error);
+            deps.logger.error({ path: entry.path, scope: entry.scope, error: error.message }, "Failed to upload entry");
         }
     }
     return results;
 }
+function uint8ToHex(bytes) {
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+// The gateway rejects a registration whose expectedVersion is not strictly
+// greater than its stored value with a 409; the SDK client surfaces it as
+// `Gateway error: 409 <detail>`. Anything else is not a version conflict.
+function isStaleVersionConflict(err) {
+    return err instanceof Error && /Gateway error: 409\b/.test(err.message);
+}
+/**
+ * Deterministic DPv2 data-point id — `keccak256(abi.encode(owner, scope))`,
+ * the same primary key DataRegistryV2 and the gateway use. Lets the upload
+ * worker look up the registry's live row for a scope without a list call.
+ */
+export function computeDataPointId(ownerAddress, scope) {
+    // ABI-encoding an address is checksum-insensitive (same bytes either way),
+    // but viem rejects mixed-case strings that fail checksum validation —
+    // normalize so config-sourced owner strings can't trip it.
+    return keccak256(encodeAbiParameters([
+        { name: "ownerAddress", type: "address" },
+        { name: "scope", type: "string" },
+    ], [ownerAddress.toLowerCase(), scope]));
+}
 //# sourceMappingURL=upload.js.map

package/dist/sync/workers/upload.js.map

@@ -1 +1 @@
-{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../../src/sync/workers/upload.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAmBxE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAsB,EACtB,KAAiB;IAEjB,MAAM,EACJ,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,OAAO,EACP,MAAM,EACN,SAAS,EACT,WAAW,EACX,MAAM,GACP,GAAG,IAAI,CAAC;IAET,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,gBAAgB,EAChB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,WAAW,CAClB,CAAC;IAEF,kCAAkC;IAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,uDAAuD;IACvD,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE1D,oDAAoD;IACpD,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEpE,+BAA+B;IAC/B,MAAM,UAAU,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAE/D,wCAAwC;IACxC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC;QAClD,YAAY,EAAE,WAA4B;QAC1C,GAAG;QACH,QAAQ,EAAE,MAAM,CAAC,EAAmB;KACrC,CAAC,CAAC;IAEH,wCAAwC;IACxC,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;QAC9C,YAAY,EAAE,WAAW;QACzB,GAAG;QACH,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,oDAAoD,KAAK,CAAC,IAAI,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE9C,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,EACjC,8BAA8B,CAC/B,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAsB,EACtB,OAAgC;IAEhC,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACrE,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EACvE,wBAAwB,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../../src/sync/workers/upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAEnE,OAAO,EACL,cAAc,EACd,mBAAmB,GAEpB,MAAM,gCAAgC,CAAC;AAiCxC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAsB,EACtB,KAAiB;IAEjB,MAAM,EACJ,OAAO,EACP,cAAc,EACd,OAAO,EACP,MAAM,EACN,SAAS,EACT,WAAW,EACX,MAAM,GACP,GAAG,IAAI,CAAC;IAET,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAE5E,uDAAuD;IACvD,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEzC,oDAAoD;IACpD,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEpE,uCAAuC;IACvC,4EAA4E;IAC5E,mEAAmE;IACnE,oEAAoE;IACpE,4EAA4E;IAC5E,uEAAuE;IACvE,0EAA0E;IAC1E,oEAAoE;IACpE,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,SAAS,CAC5B,WAAW,CACT,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,SAAS,CAAC,UAAU;KAChC,CAAC,CACH,CACF,CAAC;IAEF,sEAAsE;IACtE,mEAAmE;IACnE,sEAAsE;IACtE,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,UAAU,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;IACrD,IAAI,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAE7D,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,WAAmB,CAAC;IACxB,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,KAAK,EAAE,OAAe,EAAmB,EAAE;YAC5D,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;gBAChD,YAAY,EAAE,WAA4B;gBAC1C,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ;gBACR,YAAY;gBACZ,eAAe,EAAE,OAAO;aACzB,CAAC,CAAC;YAEH,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;gBACtD,YAAY,EAAE,WAAW;gBACzB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ;gBACR,YAAY;gBACZ,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC;gBAChC,SAAS,EAAE,gBAAgB;aAC5B,CAAC,CAAC;YAEH,MAAM,EAAE,GAAG,eAAe,CAAC,WAAW,IAAI,IAAI,CAAC;YAC/C,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,8DAA8D,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,KAAK,aAAa,OAAO,GAAG,CACtH,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5C,uEAAuE;YACvE,wEAAwE;YACxE,oEAAoE;YACpE,oEAAoE;YACpE,kEAAkE;YAClE,8BAA8B;YAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CACvC,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAC7C,CAAC;YACF,IAAI,CAAC,MAAM;gBAAE,MAAM,GAAG,CAAC;YAEvB,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC7D,sEAAsE;gBACtE,sEAAsE;gBACtE,iCAAiC;gBACjC,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC;gBACxB,qEAAqE;gBACrE,sEAAsE;gBACtE,oEAAoE;gBACpE,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;gBACtD,IAAI,cAAc,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;oBACrC,iEAAiE;oBACjE,mEAAmE;oBACnE,8DAA8D;oBAC9D,2DAA2D;oBAC3D,kEAAkE;oBAClE,6DAA6D;oBAC7D,iEAAiE;oBACjE,uBAAuB;oBACvB,MAAM,UAAU,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,cAAc,EAAE,CAAC;oBACtD,MAAM,iBAAiB,GAAG,MAAM,cAAc,CAAC,MAAM,CACnD,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC,CACrC,CAAC;oBACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;wBACvB,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,EAC5D,kFAAkF,CACnF,CAAC;wBACF,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;oBAC3D,CAAC;oBACD,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,qEAAqE;gBACrE,kEAAkE;gBAClE,sEAAsE;gBACtE,kEAAkE;gBAClE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC;gBACpD,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,CAC/B,GAAG,KAAK,CAAC,KAAK,IAAI,OAAO,EAAE,EAC3B,SAAS,CACV,CAAC;gBACF,qEAAqE;gBACrE,oEAAoE;gBACpE,mCAAmC;gBACnC,WAAW,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,CAAC,IAAI,CACT;QACE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG;QACH,WAAW;KACZ,EACD,yCAAyC,CAC1C,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAsB,EACtB,OAA0B;IAE1B,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAY,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAC9D,wBAAwB,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CACzE,EAAE,CACH,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,SAAS,sBAAsB,CAAC,GAAY;IAC1C,OAAO,GAAG,YAAY,KAAK,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,YAAoB,EACpB,KAAa;IAEb,2EAA2E;IAC3E,sEAAsE;IACtE,2DAA2D;IAC3D,OAAO,SAAS,CACd,mBAAmB,CACjB;QACE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE;QACzC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;KAClC,EACD,CAAC,YAAY,CAAC,WAAW,EAAmB,EAAE,KAAK,CAAC,CACrD,CACF,CAAC;AACJ,CAAC"}

package/dist/test-utils/wallet.d.ts

@@ -33,6 +33,7 @@ export declare function buildWeb3SignedHeader(params: {
     method: string;
     uri: string;
     bodyHash?: string;
+    body?: Uint8Array;
     iat?: number;
     exp?: number;
     grantId?: string;

package/dist/test-utils/wallet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../src/test-utils/wallet.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IACrD,aAAa,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QAC7D,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAU,GAAG,UAAU,CA0B7D;AAWD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,MAAM,EAAE,UAAU,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiClB"}
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../src/test-utils/wallet.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IACrD,aAAa,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QAC7D,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAU,GAAG,UAAU,CA0B7D;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,MAAM,EAAE,UAAU,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,MAAM,CAAC,CAYlB"}

package/dist/test-utils/wallet.js

@@ -3,6 +3,7 @@
  * Provides deterministic wallets and header builders for integration tests.
  */
 import { privateKeyToAccount } from "viem/accounts";
+import { buildWeb3SignedHeader as sdkBuildWeb3SignedHeader } from "@opendatalabs/vana-sdk/browser";
 /**
  * Create a deterministic test wallet from a seed index.
  * Seed 0 produces a fixed private key, seed N produces key = padded hex(N+1).
@@ -29,14 +30,6 @@ export function createTestWallet(seed = 0) {
         },
     };
 }
-/** Base64url encode a string (no padding). */
-function base64urlEncode(input) {
-    return Buffer.from(input, "utf-8")
-        .toString("base64")
-        .replace(/\+/g, "-")
-        .replace(/\//g, "_")
-        .replace(/=+$/, "");
-}
 /**
  * Build a valid Web3Signed Authorization header value.
  * Format: "Web3Signed {base64url(payload)}.{signature}"
@@ -44,31 +37,16 @@ function base64urlEncode(input) {
  * The payload is JSON with sorted keys, signed via EIP-191.
  */
 export async function buildWeb3SignedHeader(params) {
-    const now = Math.floor(Date.now() / 1000);
-    const payload = {
+    return sdkBuildWeb3SignedHeader({
+        signMessage: (message) => params.wallet.signMessage(message),
         aud: params.aud,
-        // SHA256 of empty string is a well-known constant
-        bodyHash: params.bodyHash ??
-            "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
-        exp: params.exp ?? now + 300,
-        iat: params.iat ?? now,
         method: params.method,
         uri: params.uri,
-    };
-    if (params.grantId !== undefined) {
-        payload["grantId"] = params.grantId;
-    }
-    // Sort keys for deterministic serialization
-    const sortedPayload = Object.keys(payload)
-        .sort()
-        .reduce((acc, key) => {
-        acc[key] = payload[key];
-        return acc;
-    }, {});
-    const payloadJson = JSON.stringify(sortedPayload);
-    const payloadBase64 = base64urlEncode(payloadJson);
-    // Sign the base64url string via EIP-191
-    const signature = await params.wallet.signMessage(payloadBase64);
-    return `Web3Signed ${payloadBase64}.${signature}`;
+        bodyHash: params.bodyHash,
+        body: params.body,
+        iat: params.iat,
+        exp: params.exp,
+        grantId: params.grantId,
+    });
 }
 //# sourceMappingURL=wallet.js.map

package/dist/test-utils/wallet.js.map

@@ -1 +1 @@
-{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../src/test-utils/wallet.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAepD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,CAAC;IAC/C,oDAAoD;IACpD,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,KAAK,QAAQ,EAAmB,CAAC;IACpD,MAAM,OAAO,GAAsB,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAEnE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU;QACV,KAAK,CAAC,WAAW,CAAC,OAAe;YAC/B,OAAO,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,MAAM;YACxB,OAAO,OAAO,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAED;gBACd,KAAK,EAAE,MAAM,CAAC,KAED;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8CAA8C;AAC9C,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;SAC/B,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAS3C;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAA4B;QACvC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,kDAAkD;QAClD,QAAQ,EACN,MAAM,CAAC,QAAQ;YACf,yEAAyE;QAC3E,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,GAAG,GAAG;QAC5B,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG;QACtB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACtC,CAAC;IAED,4CAA4C;IAC5C,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;SACvC,IAAI,EAAE;SACN,MAAM,CAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IAET,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAEnD,wCAAwC;IACxC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAEjE,OAAO,cAAc,aAAa,IAAI,SAAS,EAAE,CAAC;AACpD,CAAC"}
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../src/test-utils/wallet.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,qBAAqB,IAAI,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAcnG;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,CAAC;IAC/C,oDAAoD;IACpD,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,KAAK,QAAQ,EAAmB,CAAC;IACpD,MAAM,OAAO,GAAsB,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAEnE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU;QACV,KAAK,CAAC,WAAW,CAAC,OAAe;YAC/B,OAAO,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,MAAM;YACxB,OAAO,OAAO,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAED;gBACd,KAAK,EAAE,MAAM,CAAC,KAED;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAU3C;IACC,OAAO,wBAAwB,CAAC;QAC9B,WAAW,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;QACpE,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opendatalabs/personal-server-ts-core",
-  "version": "0.2.0",
+  "version": "1.0.1",
   "description": "Protocol logic for the Vana Personal Server — auth, grants, scopes, storage, keys",
   "license": "MIT",
   "repository": {
@@ -24,6 +24,22 @@
       "types": "./dist/config/index.d.ts",
       "import": "./dist/config/index.js"
     },
+    "./auth": {
+      "types": "./dist/auth/index.d.ts",
+      "import": "./dist/auth/index.js"
+    },
+    "./contracts": {
+      "types": "./dist/contracts/index.d.ts",
+      "import": "./dist/contracts/index.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js"
+    },
+    "./api": {
+      "types": "./dist/api/index.d.ts",
+      "import": "./dist/api/index.js"
+    },
     "./logger": {
       "types": "./dist/logger/index.d.ts",
       "import": "./dist/logger/index.js"
@@ -36,10 +52,6 @@
       "types": "./dist/schemas/server-config.d.ts",
       "import": "./dist/schemas/server-config.js"
     },
-    "./scopes": {
-      "types": "./dist/scopes/index.d.ts",
-      "import": "./dist/scopes/index.js"
-    },
     "./storage/hierarchy": {
       "types": "./dist/storage/hierarchy/index.d.ts",
       "import": "./dist/storage/hierarchy/index.js"
@@ -48,26 +60,38 @@
       "types": "./dist/storage/index/index.d.ts",
       "import": "./dist/storage/index/index.js"
     },
-    "./schemas/data-file": {
-      "types": "./dist/schemas/data-file.d.ts",
-      "import": "./dist/schemas/data-file.js"
+    "./storage/blocks": {
+      "types": "./dist/storage/blocks/index.d.ts",
+      "import": "./dist/storage/blocks/index.js"
     },
-    "./auth": {
-      "types": "./dist/auth/web3-signed.d.ts",
-      "import": "./dist/auth/web3-signed.js"
+    "./storage/preview": {
+      "types": "./dist/storage/preview.d.ts",
+      "import": "./dist/storage/preview.js"
+    },
+    "./storage/blocks/build": {
+      "types": "./dist/storage/blocks/build.d.ts",
+      "import": "./dist/storage/blocks/build.js"
     },
     "./grants": {
       "types": "./dist/grants/index.d.ts",
       "import": "./dist/grants/index.js"
     },
-    "./gateway": {
-      "types": "./dist/gateway/client.d.ts",
-      "import": "./dist/gateway/client.js"
+    "./policy": {
+      "types": "./dist/policy/index.d.ts",
+      "import": "./dist/policy/index.js"
+    },
+    "./ports": {
+      "types": "./dist/ports/index.d.ts",
+      "import": "./dist/ports/index.js"
     },
     "./logging/access-log": {
       "types": "./dist/logging/access-log.d.ts",
       "import": "./dist/logging/access-log.js"
     },
+    "./mcp": {
+      "types": "./dist/mcp/index.d.ts",
+      "import": "./dist/mcp/index.js"
+    },
     "./keys": {
       "types": "./dist/keys/index.d.ts",
       "import": "./dist/keys/index.js"
@@ -84,9 +108,9 @@
       "types": "./dist/sync/index.d.ts",
       "import": "./dist/sync/index.js"
     },
-    "./storage/encryption": {
-      "types": "./dist/storage/encryption/index.d.ts",
-      "import": "./dist/storage/encryption/index.js"
+    "./sync/manager": {
+      "types": "./dist/sync/engine/sync-manager.d.ts",
+      "import": "./dist/sync/engine/sync-manager.js"
     },
     "./storage/adapters": {
       "types": "./dist/storage/adapters/index.d.ts",
@@ -95,21 +119,21 @@
     "./test-utils": {
       "types": "./dist/test-utils/index.d.ts",
       "import": "./dist/test-utils/index.js"
+    },
+    "./payment": {
+      "types": "./dist/payment/index.d.ts",
+      "import": "./dist/payment/index.js"
     }
   },
   "scripts": {
     "build": "tsc --build"
   },
   "dependencies": {
-    "@noble/hashes": "^2.0.1",
-    "better-sqlite3": "^12.6.2",
-    "openpgp": "^6.3.0",
-    "pino": "^10.3.0",
-    "pino-pretty": "^13.0.0",
-    "viem": "^2.45.1",
-    "zod": "^4.3.6"
-  },
-  "devDependencies": {
-    "@types/better-sqlite3": "^7.6.0"
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@opendatalabs/vana-sdk": "3.13.0",
+    "minisearch": "^7.2.0",
+    "unpdf": "^1.6.2",
+    "viem": "^2.54.2",
+    "zod": "^4.4.3"
   }
 }

package/dist/auth/web3-signed.d.ts

@@ -1,48 +0,0 @@
-/**
- * Web3Signed Authorization header parsing and verification.
- *
- * Header format: "Web3Signed {base64url(payload)}.{signature}"
- * Payload is JSON with fields: aud, method, uri, bodyHash, iat, exp, grantId?
- * Signature is EIP-191 over the base64url-encoded payload string.
- */
-export interface Web3SignedPayload {
-    aud: string;
-    method: string;
-    uri: string;
-    bodyHash: string;
-    iat: number;
-    exp: number;
-    grantId?: string;
-}
-export interface VerifiedAuth {
-    signer: `0x${string}`;
-    payload: Web3SignedPayload;
-}
-/**
- * Parse "Web3Signed <base64url>.<signature>" header value.
- * Throws MissingAuthError if header is missing/empty.
- * Throws InvalidSignatureError if format is invalid.
- */
-export declare function parseWeb3SignedHeader(headerValue: string | undefined): {
-    payloadBase64: string;
-    payload: Web3SignedPayload;
-    signature: `0x${string}`;
-};
-/**
- * Full verification: parse header, recover signer via EIP-191, check claims.
- *
- * Steps:
- * 1. Parse header -> base64url + signature
- * 2. Recover signer via recoverMessageAddress (EIP-191) over the base64url string
- * 3. Check aud === expectedOrigin, method === expectedMethod, uri === expectedPath
- * 4. Check iat/exp within clock skew (60s)
- * 5. Return { signer, payload }
- */
-export declare function verifyWeb3Signed(params: {
-    headerValue: string | undefined;
-    expectedOrigin: string;
-    expectedMethod: string;
-    expectedPath: string;
-    now?: number;
-}): Promise<VerifiedAuth>;
-//# sourceMappingURL=web3-signed.d.ts.map

package/dist/auth/web3-signed.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"web3-signed.d.ts","sourceRoot":"","sources":["../../src/auth/web3-signed.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAaD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG;IACtE,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;CAC1B,CAmCA;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,YAAY,CAAC,CAqDxB"}