@opendatalabs/personal-server-ts-core 0.2.0 → 1.0.1

package/dist/client.js

@@ -0,0 +1,243 @@
+import { buildWeb3SignedHeader, } from "@opendatalabs/vana-sdk/browser";
+import { buildPersonalServerRegistrationTypedData, } from "@opendatalabs/vana-sdk/protocol/personal-server-registration";
+export class PersonalServerClientError extends Error {
+    status;
+    errorCode;
+    details;
+    body;
+    constructor(params) {
+        super(params.message);
+        this.name = "PersonalServerClientError";
+        this.status = params.status;
+        this.errorCode = params.errorCode;
+        this.details = params.details;
+        this.body = params.body;
+    }
+}
+export function createPersonalServerRegistrationRequest(params) {
+    const candidate = {
+        ownerAddress: params.ownerAddress,
+        serverAddress: params.serverAddress,
+        publicKey: params.publicKey,
+        serverUrl: params.serverUrl,
+    };
+    return {
+        gatewayConfig: params.gatewayConfig,
+        candidate,
+        typedData: buildPersonalServerRegistrationTypedData({
+            ownerAddress: params.ownerAddress,
+            serverAddress: params.serverAddress,
+            serverPublicKey: params.publicKey,
+            serverUrl: params.serverUrl,
+            config: params.gatewayConfig,
+        }),
+    };
+}
+export function createPersonalServerInfoFromHealth(params) {
+    const health = toHealthBody(params.health);
+    const publicUrl = params.publicUrl === undefined
+        ? (health.apiOrigin ?? null)
+        : params.publicUrl;
+    const apiOrigin = publicUrl ?? health.apiOrigin ?? params.localUrl ?? null;
+    const gatewayConfig = stripGatewayUrl(health.gatewayConfig);
+    const candidate = health.registration
+        ? {
+            ownerAddress: health.registration.ownerAddress,
+            serverAddress: health.registration.serverAddress,
+            publicKey: health.registration.publicKey,
+            serverUrl: publicUrl ?? health.registration.serverUrl,
+        }
+        : null;
+    return {
+        kind: params.kind,
+        status: health.status === "unavailable" && params.status === "ready"
+            ? "unavailable"
+            : params.status,
+        ownerAddress: health.owner ?? health.registration?.ownerAddress ?? null,
+        server: health.identity
+            ? {
+                address: health.identity.address,
+                publicKey: health.identity.publicKey,
+                serverId: health.identity.serverId,
+            }
+            : null,
+        urls: {
+            local: params.localUrl ?? null,
+            public: publicUrl,
+            apiOrigin,
+            registration: publicUrl ?? health.registration?.serverUrl ?? null,
+        },
+        registration: {
+            registered: Boolean(health.registration?.registered),
+            candidate,
+        },
+        gatewayUrl: health.gatewayUrl ?? health.gatewayConfig?.url ?? null,
+        gatewayConfig,
+        checkedAt: health.checkedAt,
+        details: health,
+    };
+}
+export async function createOwnerSignedPersonalServerRequest(params) {
+    const headers = new Headers(params.headers);
+    if ("bearerToken" in params.auth) {
+        headers.set("Authorization", `Bearer ${params.auth.bearerToken}`);
+    }
+    else {
+        headers.set("Authorization", await buildWeb3SignedHeader({
+            signMessage: params.auth.signMessage,
+            aud: params.origin,
+            method: params.method,
+            uri: new URL(params.path, params.origin).pathname,
+            body: params.body,
+        }));
+    }
+    return new Request(`${params.origin}${params.path}`, {
+        method: params.method,
+        headers,
+        body: params.body,
+    });
+}
+export async function submitPersonalServerRegistration(params) {
+    const existing = await params.gateway.getServer(params.request.candidate.serverAddress);
+    if (existing?.id && !serverInfoRevoked(existing)) {
+        assertRegistrationMatches(existing, params.request.candidate);
+        return { alreadyRegistered: true, serverId: existing.id };
+    }
+    return params.gateway.registerServer({
+        ...params.request.candidate,
+        signature: params.signature,
+    });
+}
+export function requestPath(input) {
+    const url = input instanceof Request
+        ? new URL(input.url)
+        : input instanceof URL
+            ? input
+            : new URL(input, "https://personal-server.local");
+    return `${url.pathname}${url.search}`;
+}
+export function dataListPath(options = {}) {
+    const params = new URLSearchParams();
+    if (options.scopePrefix)
+        params.set("scopePrefix", options.scopePrefix);
+    if (options.limit !== undefined)
+        params.set("limit", String(options.limit));
+    if (options.offset !== undefined)
+        params.set("offset", String(options.offset));
+    const query = params.toString();
+    return query ? `/v1/data?${query}` : "/v1/data";
+}
+export function accessLogsListPath(options = {}) {
+    const params = new URLSearchParams();
+    if (options.limit !== undefined)
+        params.set("limit", String(options.limit));
+    if (options.offset !== undefined)
+        params.set("offset", String(options.offset));
+    const query = params.toString();
+    return query ? `/v1/access-logs?${query}` : "/v1/access-logs";
+}
+export function dataVersionsPath(scope, options = {}) {
+    const params = new URLSearchParams();
+    if (options.limit !== undefined)
+        params.set("limit", String(options.limit));
+    if (options.offset !== undefined)
+        params.set("offset", String(options.offset));
+    const query = params.toString();
+    return `/v1/data/${encodeURIComponent(scope)}/versions${query ? `?${query}` : ""}`;
+}
+export function dataReadPath(scope, options = {}) {
+    const params = new URLSearchParams();
+    if (options.grantId)
+        params.set("grantId", options.grantId);
+    if (options.fileId)
+        params.set("fileId", options.fileId);
+    if (options.at)
+        params.set("at", options.at);
+    const query = params.toString();
+    return `/v1/data/${encodeURIComponent(scope)}${query ? `?${query}` : ""}`;
+}
+export function grantRevokePath(grantId) {
+    return `/v1/grants/${encodeURIComponent(grantId)}`;
+}
+export async function parsePersonalServerJsonResponse(response, action) {
+    const body = await readJsonBody(response);
+    if (!response.ok) {
+        const structured = toClientErrorBody(body);
+        throw new PersonalServerClientError({
+            status: response.status,
+            errorCode: structured?.error?.errorCode,
+            details: structured?.error?.details,
+            body,
+            message: structured?.error?.message ??
+                `Personal Server ${action} failed: ${response.status}`,
+        });
+    }
+    return body;
+}
+async function readJsonBody(response) {
+    const text = await response.text();
+    if (!text)
+        return null;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+function toClientErrorBody(value) {
+    if (!value || typeof value !== "object")
+        return null;
+    const record = value;
+    // Nested protocol shape: `{ error: { errorCode, message, details, code } }`.
+    if (record.error && typeof record.error === "object") {
+        return record;
+    }
+    // Flat contract shape: `{ error: "INVALID_BODY", message }`. The data/scope
+    // contract layer (contractError) emits `error` as a bare code string with a
+    // top-level `message` — normalize it into the nested shape so the real
+    // errorCode + message reach the consumer instead of collapsing into the
+    // opaque "Personal Server <action> failed: <status>" (see BUI-683).
+    const message = typeof record.message === "string" ? record.message : undefined;
+    if (typeof record.error === "string") {
+        return { ...record, error: { errorCode: record.error, message } };
+    }
+    // No structured `error`, but a top-level `message` is still worth surfacing.
+    if (message !== undefined) {
+        return { ...record, error: { message } };
+    }
+    return record;
+}
+function assertRegistrationMatches(existing, candidate) {
+    if (existing.serverUrl === candidate.serverUrl)
+        return;
+    throw new PersonalServerClientError({
+        status: 409,
+        errorCode: "SERVER_URL_MISMATCH",
+        message: `Server ${existing.id} is already registered with URL "${existing.serverUrl}". Cannot change to "${candidate.serverUrl}".`,
+        details: {
+            serverId: existing.id,
+            existingUrl: existing.serverUrl,
+            candidateUrl: candidate.serverUrl,
+        },
+    });
+}
+function serverInfoRevoked(existing) {
+    const revokedAt = existing
+        .revokedAt;
+    return revokedAt !== undefined && revokedAt !== null;
+}
+function toHealthBody(value) {
+    return value && typeof value === "object"
+        ? value
+        : {};
+}
+function stripGatewayUrl(config) {
+    if (!config)
+        return null;
+    return {
+        chainId: config.chainId,
+        contracts: config.contracts,
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,GAStB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,wCAAwC,GAEzC,MAAM,8DAA8D,CAAC;AAqOtE,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,MAAM,CAAS;IACf,SAAS,CAAU;IACnB,OAAO,CAAW;IAClB,IAAI,CAAW;IAExB,YAAY,MAMX;QACC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;CACF;AA6BD,MAAM,UAAU,uCAAuC,CAAC,MAMvD;IACC,MAAM,SAAS,GAAG;QAChB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IACF,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS;QACT,SAAS,EAAE,wCAAwC,CAAC;YAClD,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,MAAM,CAAC,SAAS;YACjC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,aAAa;SAC7B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,MAMlD;IACC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,SAAS,GACb,MAAM,CAAC,SAAS,KAAK,SAAS;QAC5B,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;QAC5B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACvB,MAAM,SAAS,GAAG,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC3E,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY;QACnC,CAAC,CAAC;YACE,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,YAAY;YAC9C,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,aAAa;YAChD,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS;YACxC,SAAS,EAAE,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS;SACtD;QACH,CAAC,CAAC,IAAI,CAAC;IAET,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EACJ,MAAM,CAAC,MAAM,KAAK,aAAa,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;YAC1D,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,MAAM,CAAC,MAAM;QACnB,YAAY,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,EAAE,YAAY,IAAI,IAAI;QACvE,MAAM,EAAE,MAAM,CAAC,QAAQ;YACrB,CAAC,CAAC;gBACE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;gBAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;gBACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;aACnC;YACH,CAAC,CAAC,IAAI;QACR,IAAI,EAAE;YACJ,KAAK,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YAC9B,MAAM,EAAE,SAAS;YACjB,SAAS;YACT,YAAY,EAAE,SAAS,IAAI,MAAM,CAAC,YAAY,EAAE,SAAS,IAAI,IAAI;SAClE;QACD,YAAY,EAAE;YACZ,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC;YACpD,SAAS;SACV;QACD,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,aAAa,EAAE,GAAG,IAAI,IAAI;QAClE,aAAa;QACb,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAAC,MAO5D;IACC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,aAAa,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,eAAe,EACf,MAAM,qBAAqB,CAAC;YAC1B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;YACpC,GAAG,EAAE,MAAM,CAAC,MAAM;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ;YACjD,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE;QACnD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO;QACP,IAAI,EAAE,MAAM,CAAC,IAA4B;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,MAItD;IACC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAC7C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CACvC,CAAC;IACF,IAAI,QAAQ,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,yBAAyB,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QACnC,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAA6B;IACvD,MAAM,GAAG,GACP,KAAK,YAAY,OAAO;QACtB,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;QACpB,CAAC,CAAC,KAAK,YAAY,GAAG;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IACxD,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,UAAyC,EAAE;IAE3C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,WAAW;QAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAC9B,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,UAA+C,EAAE;IAEjD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAC9B,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,CAAC,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,UAA6C,EAAE;IAE/C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAC9B,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,YAAY,kBAAkB,CAAC,KAAK,CAAC,YAC1C,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EACxB,EAAE,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAa,EACb,UAAyC,EAAE;IAE3C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,YAAY,kBAAkB,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,cAAc,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,QAAkB,EAClB,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,IAAI,yBAAyB,CAAC;YAClC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS;YACvC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO;YACnC,IAAI;YACJ,OAAO,EACL,UAAU,EAAE,KAAK,EAAE,OAAO;gBAC1B,mBAAmB,MAAM,YAAY,QAAQ,CAAC,MAAM,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAEhD,6EAA6E;IAC7E,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,MAAuC,CAAC;IACjD,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,OAAO,GACX,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,6EAA6E;IAC7E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;IAC3C,CAAC;IAED,OAAO,MAAuC,CAAC;AACjD,CAAC;AAED,SAAS,yBAAyB,CAChC,QAAoB,EACpB,SAA8C;IAE9C,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;QAAE,OAAO;IACvD,MAAM,IAAI,yBAAyB,CAAC;QAClC,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,qBAAqB;QAChC,OAAO,EAAE,UAAU,QAAQ,CAAC,EAAE,oCAAoC,QAAQ,CAAC,SAAS,wBAAwB,SAAS,CAAC,SAAS,IAAI;QACnI,OAAO,EAAE;YACP,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,WAAW,EAAE,QAAQ,CAAC,SAAS;YAC/B,YAAY,EAAE,SAAS,CAAC,SAAS;SAClC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAoB;IAC7C,MAAM,SAAS,GAAI,QAAiD;SACjE,SAAS,CAAC;IACb,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QACvC,CAAC,CAAE,KAAkC;QACrC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,eAAe,CACtB,MAA4E;IAE5E,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/dist/config/defaults.d.ts

@@ -1,12 +1,12 @@
-export declare const DEFAULT_ROOT_PATH: string;
-export declare const DEFAULT_DATA_DIR: string;
-export declare const DEFAULT_CONFIG_PATH: string;
+export declare const DEFAULT_ROOT_PATH = "~/personal-server";
+export declare const DEFAULT_DATA_DIR = "~/personal-server/data";
+export declare const DEFAULT_CONFIG_PATH = "~/personal-server/config.json";
 /**
  * @deprecated Use DEFAULT_ROOT_PATH instead.
  */
-export declare const DEFAULT_VANA_DIR: string;
+export declare const DEFAULT_VANA_DIR = "~/personal-server";
 /**
  * @deprecated Use DEFAULT_ROOT_PATH instead.
  */
-export declare const DEFAULT_SERVER_DIR: string;
+export declare const DEFAULT_SERVER_DIR = "~/personal-server";
 //# sourceMappingURL=defaults.d.ts.map

package/dist/config/defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,iBAAiB,QAAqC,CAAC;AACpE,eAAO,MAAM,gBAAgB,QAAkC,CAAC;AAChE,eAAO,MAAM,mBAAmB,QAAyC,CAAC;AAE1E;;GAEG;AACH,eAAO,MAAM,gBAAgB,QAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,kBAAkB,QAAoB,CAAC"}
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,eAAO,MAAM,gBAAgB,2BAA8B,CAAC;AAC5D,eAAO,MAAM,mBAAmB,kCAAqC,CAAC;AAEtE;;GAEG;AACH,eAAO,MAAM,gBAAgB,sBAAoB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,kBAAkB,sBAAoB,CAAC"}

package/dist/config/defaults.js

@@ -1,8 +1,6 @@
-import { join } from "node:path";
-import { homedir } from "node:os";
-export const DEFAULT_ROOT_PATH = join(homedir(), "personal-server");
-export const DEFAULT_DATA_DIR = join(DEFAULT_ROOT_PATH, "data");
-export const DEFAULT_CONFIG_PATH = join(DEFAULT_ROOT_PATH, "config.json");
+export const DEFAULT_ROOT_PATH = "~/personal-server";
+export const DEFAULT_DATA_DIR = `${DEFAULT_ROOT_PATH}/data`;
+export const DEFAULT_CONFIG_PATH = `${DEFAULT_ROOT_PATH}/config.json`;
 /**
  * @deprecated Use DEFAULT_ROOT_PATH instead.
  */

package/dist/config/defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;AAE1E;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAElD;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC"}
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,iBAAiB,OAAO,CAAC;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,iBAAiB,cAAc,CAAC;AAEtE;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAElD;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC"}

package/dist/config/index.d.ts

@@ -1,4 +1,3 @@
 export { DEFAULT_ROOT_PATH, DEFAULT_VANA_DIR, DEFAULT_SERVER_DIR, DEFAULT_DATA_DIR, DEFAULT_CONFIG_PATH, } from "./defaults.js";
-export { loadConfig, saveConfig, type LoadConfigOptions } from "./loader.js";
 export { expandHomePath, resolveRootPath } from "./paths.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/config/index.js

@@ -1,4 +1,3 @@
 export { DEFAULT_ROOT_PATH, DEFAULT_VANA_DIR, DEFAULT_SERVER_DIR, DEFAULT_DATA_DIR, DEFAULT_CONFIG_PATH, } from "./defaults.js";
-export { loadConfig, saveConfig } from "./loader.js";
 export { expandHomePath, resolveRootPath } from "./paths.js";
 //# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,UAAU,EAA0B,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/config/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQpD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtD"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/config/paths.js

@@ -1,22 +1,14 @@
-import { homedir } from "node:os";
-import { resolve } from "node:path";
 import { DEFAULT_ROOT_PATH } from "./defaults.js";
 /**
  * Expands a leading "~" to the current user's home directory.
  */
 export function expandHomePath(input) {
-    if (input === "~") {
-        return homedir();
-    }
-    if (input.startsWith("~/")) {
-        return resolve(homedir(), input.slice(2));
-    }
     return input;
 }
 /**
  * Resolves the configured root path (or default) to an absolute path.
  */
 export function resolveRootPath(input) {
-    return resolve(expandHomePath(input ?? DEFAULT_ROOT_PATH));
+    return expandHomePath(input ?? DEFAULT_ROOT_PATH);
 }
 //# sourceMappingURL=paths.js.map

package/dist/config/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QAClB,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,cAAc,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC;AACpD,CAAC"}

package/dist/contracts/access-logs.d.ts

@@ -0,0 +1,8 @@
+import type { AccessLogReader } from "../logging/access-reader.js";
+import { type ContractResult } from "./http.js";
+export declare function listAccessLogsContract(input: {
+    accessLogReader: AccessLogReader;
+    limit?: string | null;
+    offset?: string | null;
+}): Promise<ContractResult>;
+//# sourceMappingURL=access-logs.d.ts.map

package/dist/contracts/access-logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-logs.d.ts","sourceRoot":"","sources":["../../src/contracts/access-logs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AAEnB,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,eAAe,EAAE,eAAe,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,GAAG,OAAO,CAAC,cAAc,CAAC,CAI1B"}

package/dist/contracts/access-logs.js

@@ -0,0 +1,7 @@
+import { contractOk, normalizeIntegerParam, } from "./http.js";
+export async function listAccessLogsContract(input) {
+    const limit = normalizeIntegerParam(input.limit, 50);
+    const offset = normalizeIntegerParam(input.offset, 0);
+    return contractOk(await input.accessLogReader.read({ limit, offset }));
+}
+//# sourceMappingURL=access-logs.js.map

package/dist/contracts/access-logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-logs.js","sourceRoot":"","sources":["../../src/contracts/access-logs.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,qBAAqB,GAEtB,MAAM,WAAW,CAAC;AAEnB,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAI5C;IACC,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC"}

package/dist/contracts/auth-device.d.ts

@@ -0,0 +1,70 @@
+export declare const DEVICE_SESSION_TTL_MS: number;
+export declare const DEVICE_POLL_INTERVAL_MS: number;
+export declare const CLI_TOKEN_TTL_MS: number;
+export interface DeviceTokenStorePort {
+    isValid(token: string): Promise<boolean>;
+    addToken(token: string, options?: {
+        expiresAt?: string | Date | null;
+    }): Promise<void>;
+    removeToken(token: string): Promise<void>;
+}
+export interface DeviceSession {
+    sessionId: string;
+    pollToken: string;
+    requestedServerOrigin: string;
+    status: "pending" | "approved";
+    accessToken?: string;
+    accessTokenExpiresAt?: string;
+    createdAt: number;
+    lastPollAt: number;
+}
+export interface DeviceSessionStore {
+    create(input: {
+        requestedServerOrigin: string;
+        sessionId: string;
+        pollToken: string;
+        now: number;
+    }): DeviceSession;
+    get(sessionId: string): DeviceSession | undefined;
+    findByPollToken(pollToken: string): DeviceSession | undefined;
+    delete(sessionId: string): void;
+    purgeExpired(now: number): void;
+}
+export declare function createMemoryDeviceSessionStore(): DeviceSessionStore;
+export type DeviceContractResult = {
+    status: number;
+    body: unknown;
+};
+export declare function initiateDeviceSessionContract(input: {
+    sessionStore: DeviceSessionStore;
+    serverOwner?: `0x${string}`;
+    requestOrigin: string;
+    approvalOrigin: string;
+    sessionId: string;
+    pollToken: string;
+    now: number;
+}): DeviceContractResult;
+export declare function pollDeviceSessionContract(input: {
+    sessionStore: DeviceSessionStore;
+    pollToken: string | null;
+    serverOwner?: `0x${string}`;
+    now: number;
+}): DeviceContractResult;
+export declare function approveDeviceSessionContract(input: {
+    sessionStore: DeviceSessionStore;
+    tokenStore: DeviceTokenStorePort;
+    sessionId: string | null;
+    serverOwner?: `0x${string}`;
+    accessToken: string;
+    now: number;
+}): Promise<DeviceContractResult>;
+export declare function provisionDeviceTokenContract(input: {
+    tokenStore: DeviceTokenStorePort;
+    body: unknown;
+    now: number;
+}): Promise<DeviceContractResult>;
+export declare function revokeDeviceTokenContract(input: {
+    tokenStore: DeviceTokenStorePort;
+    bearerToken: string | null;
+}): Promise<DeviceContractResult>;
+//# sourceMappingURL=auth-device.d.ts.map

package/dist/contracts/auth-device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-device.d.ts","sourceRoot":"","sources":["../../src/contracts/auth-device.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,QAAgB,CAAC;AACnD,eAAO,MAAM,uBAAuB,QAAW,CAAC;AAChD,eAAO,MAAM,gBAAgB,QAA2B,CAAC;AAEzD,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,QAAQ,CACN,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;KAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,KAAK,EAAE;QACZ,qBAAqB,EAAE,MAAM,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;KACb,GAAG,aAAa,CAAC;IAClB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAClD,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAC9D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wBAAgB,8BAA8B,IAAI,kBAAkB,CAmCnE;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAuBF,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,YAAY,EAAE,kBAAkB,CAAC;IACjC,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,oBAAoB,CAmBvB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,YAAY,EAAE,kBAAkB,CAAC;IACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,oBAAoB,CAkCvB;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,YAAY,EAAE,kBAAkB,CAAC;IACjC,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiBhC;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,UAAU,EAAE,oBAAoB,CAAC;IACjC,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA0BhC;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,UAAU,EAAE,oBAAoB,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAMhC"}

package/dist/contracts/auth-device.js

@@ -0,0 +1,163 @@
+export const DEVICE_SESSION_TTL_MS = 5 * 60 * 1000;
+export const DEVICE_POLL_INTERVAL_MS = 5 * 1000;
+export const CLI_TOKEN_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+export function createMemoryDeviceSessionStore() {
+    const sessions = new Map();
+    return {
+        create(input) {
+            const session = {
+                sessionId: input.sessionId,
+                pollToken: input.pollToken,
+                requestedServerOrigin: input.requestedServerOrigin,
+                status: "pending",
+                createdAt: input.now,
+                lastPollAt: 0,
+            };
+            sessions.set(input.sessionId, session);
+            return session;
+        },
+        get(sessionId) {
+            return sessions.get(sessionId);
+        },
+        findByPollToken(pollToken) {
+            for (const session of sessions.values()) {
+                if (session.pollToken === pollToken)
+                    return session;
+            }
+            return undefined;
+        },
+        delete(sessionId) {
+            sessions.delete(sessionId);
+        },
+        purgeExpired(now) {
+            for (const [sessionId, session] of sessions.entries()) {
+                if (now - session.createdAt > DEVICE_SESSION_TTL_MS) {
+                    sessions.delete(sessionId);
+                }
+            }
+        },
+    };
+}
+function jsonError(status, message) {
+    return {
+        status,
+        body: { error: { code: status, message } },
+    };
+}
+function serverNotConfigured() {
+    return {
+        status: 500,
+        body: {
+            error: {
+                code: 500,
+                errorCode: "SERVER_NOT_CONFIGURED",
+                message: "Server owner address not configured. Set VANA_MASTER_KEY_SIGNATURE environment variable.",
+            },
+        },
+    };
+}
+export function initiateDeviceSessionContract(input) {
+    if (!input.serverOwner)
+        return serverNotConfigured();
+    input.sessionStore.purgeExpired(input.now);
+    input.sessionStore.create({
+        requestedServerOrigin: input.requestOrigin,
+        sessionId: input.sessionId,
+        pollToken: input.pollToken,
+        now: input.now,
+    });
+    return {
+        status: 200,
+        body: {
+            login: `${input.approvalOrigin}/auth/device/approve?session=${input.sessionId}`,
+            poll: {
+                endpoint: "/auth/device/poll",
+                token: input.pollToken,
+            },
+        },
+    };
+}
+export function pollDeviceSessionContract(input) {
+    input.sessionStore.purgeExpired(input.now);
+    if (!input.pollToken)
+        return jsonError(400, "Missing token parameter");
+    const session = input.sessionStore.findByPollToken(input.pollToken);
+    if (!session)
+        return { status: 404, body: { status: "expired" } };
+    if (input.now - session.lastPollAt < DEVICE_POLL_INTERVAL_MS) {
+        return jsonError(429, `Too many requests. Poll every ${DEVICE_POLL_INTERVAL_MS / 1000} seconds.`);
+    }
+    session.lastPollAt = input.now;
+    if (session.status === "pending") {
+        return { status: 404, body: { status: "pending" } };
+    }
+    if (!input.serverOwner) {
+        input.sessionStore.delete(session.sessionId);
+        return serverNotConfigured();
+    }
+    if (session.status === "approved" && session.accessToken) {
+        const body = {
+            status: "authorized",
+            server: session.requestedServerOrigin,
+            address: input.serverOwner,
+            access_token: session.accessToken,
+            expires_at: session.accessTokenExpiresAt,
+        };
+        input.sessionStore.delete(session.sessionId);
+        return { status: 200, body };
+    }
+    return { status: 404, body: { status: "pending" } };
+}
+export async function approveDeviceSessionContract(input) {
+    input.sessionStore.purgeExpired(input.now);
+    if (!input.sessionId)
+        return jsonError(400, "Missing session parameter");
+    const session = input.sessionStore.get(input.sessionId);
+    if (!session)
+        return jsonError(404, "Session expired or invalid");
+    if (session.status === "approved") {
+        return { status: 200, body: { status: "already_approved" } };
+    }
+    if (!input.serverOwner)
+        return serverNotConfigured();
+    const expiresAt = new Date(input.now + CLI_TOKEN_TTL_MS).toISOString();
+    await input.tokenStore.addToken(input.accessToken, { expiresAt });
+    session.status = "approved";
+    session.accessToken = input.accessToken;
+    session.accessTokenExpiresAt = expiresAt;
+    return { status: 200, body: { status: "approved" } };
+}
+export async function provisionDeviceTokenContract(input) {
+    if (input.body === null || typeof input.body !== "object") {
+        return jsonError(400, "Request body must be valid JSON");
+    }
+    const body = input.body;
+    if (!body.token || typeof body.token !== "string") {
+        return jsonError(400, "Missing token");
+    }
+    let expiresAt = null;
+    if (body.expires_at !== undefined && body.expires_at !== null) {
+        if (typeof body.expires_at !== "string") {
+            return jsonError(400, "Invalid expires_at");
+        }
+        const parsed = new Date(body.expires_at);
+        if (Number.isNaN(parsed.getTime())) {
+            return jsonError(400, "Invalid expires_at");
+        }
+        if (parsed.getTime() <= input.now) {
+            return jsonError(400, "expires_at must be in the future");
+        }
+        expiresAt = parsed.toISOString();
+    }
+    await input.tokenStore.addToken(body.token, { expiresAt });
+    return { status: 201, body: { status: "created" } };
+}
+export async function revokeDeviceTokenContract(input) {
+    if (!input.bearerToken)
+        return jsonError(401, "Missing Bearer token");
+    if (await input.tokenStore.isValid(input.bearerToken)) {
+        await input.tokenStore.removeToken(input.bearerToken);
+    }
+    return { status: 200, body: { status: "revoked" } };
+}
+//# sourceMappingURL=auth-device.js.map

package/dist/contracts/auth-device.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-device.js","sourceRoot":"","sources":["../../src/contracts/auth-device.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACnD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAmCzD,MAAM,UAAU,8BAA8B;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,OAAO;QACL,MAAM,CAAC,KAAK;YACV,MAAM,OAAO,GAAkB;gBAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;gBAClD,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,KAAK,CAAC,GAAG;gBACpB,UAAU,EAAE,CAAC;aACd,CAAC;YACF,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACvC,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,GAAG,CAAC,SAAS;YACX,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,eAAe,CAAC,SAAS;YACvB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;oBAAE,OAAO,OAAO,CAAC;YACtD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,SAAS;YACd,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,YAAY,CAAC,GAAG;YACd,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;gBACtD,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,qBAAqB,EAAE,CAAC;oBACpD,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,SAAS,CAAC,MAAc,EAAE,OAAe;IAChD,OAAO;QACL,MAAM;QACN,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,KAAK,EAAE;gBACL,IAAI,EAAE,GAAG;gBACT,SAAS,EAAE,uBAAuB;gBAClC,OAAO,EACL,0FAA0F;aAC7F;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAQ7C;IACC,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,mBAAmB,EAAE,CAAC;IACrD,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QACxB,qBAAqB,EAAE,KAAK,CAAC,aAAa;QAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,KAAK,EAAE,GAAG,KAAK,CAAC,cAAc,gCAAgC,KAAK,CAAC,SAAS,EAAE;YAC/E,IAAI,EAAE;gBACJ,QAAQ,EAAE,mBAAmB;gBAC7B,KAAK,EAAE,KAAK,CAAC,SAAS;aACvB;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAKzC;IACC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IAEvE,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;IAElE,IAAI,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,UAAU,GAAG,uBAAuB,EAAE,CAAC;QAC7D,OAAO,SAAS,CACd,GAAG,EACH,iCAAiC,uBAAuB,GAAG,IAAI,WAAW,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC;IAE/B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,OAAO,CAAC,qBAAqB;YACrC,OAAO,EAAE,KAAK,CAAC,WAAW;YAC1B,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,UAAU,EAAE,OAAO,CAAC,oBAAoB;SACzC,CAAC;QACF,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAOlD;IACC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;IAEzE,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,mBAAmB,EAAE,CAAC;IAErD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;IACvE,MAAM,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC5B,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACxC,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IACzC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAIlD;IACC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAiD,CAAC;IACrE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC9D,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACnC,OAAO,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;QAC5D,CAAC;QACD,SAAS,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAG/C;IACC,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACtE,IAAI,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;AACtD,CAAC"}