@opendatalabs/personal-server-ts-core 1.8.0 → 1.10.0

package/dist/test-utils/e2ee-gateway.js

@@ -0,0 +1,248 @@
+/**
+ * A fake Phala-style ACI gateway behind a `fetch` function, for tests of the
+ * E2EE v2 client: serves the attestation report for its keyset and a chat
+ * completions endpoint that behaves like the enclave (validates the five
+ * headers, decrypts the request fields, encrypts the answer to the client
+ * key). It records what the "relay" saw on the wire and what the "enclave"
+ * decrypted, so a test can assert the two differ.
+ */
+import { requestFieldAad, responseFieldAad } from "../derivatives/e2ee/aad.js";
+import { reportDataFor, workloadKeysetDigest, } from "../derivatives/e2ee/attestation.js";
+import { E2EE_ALGO_X25519, bytesToHex, decryptField, encryptField, generateX25519KeyPair, hexToBytes, importX25519PrivateKey, } from "../derivatives/e2ee/suite.js";
+/** The spec test-vector service key: seed 32 x 0x03. */
+export const TEST_VECTOR_SERVICE_SEED = new Uint8Array(32).fill(3);
+export const TEST_VECTOR_SERVICE_PUBLIC_KEY_HEX = "5dfedd3b6bd47f6fa28ee15d969d5bb0ea53774d488bdaf9df1c6e0124b3ef22";
+export async function testVectorServiceKeyPair() {
+    return importX25519PrivateKey(TEST_VECTOR_SERVICE_SEED, hexToBytes(TEST_VECTOR_SERVICE_PUBLIC_KEY_HEX));
+}
+function jsonResponse(status, body, headers = {}) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { "Content-Type": "application/json", ...headers },
+    });
+}
+function errorResponse(status, type) {
+    return jsonResponse(status, {
+        error: { type, message: `fake gateway: ${type}` },
+    });
+}
+export async function createFakeE2eeGateway(options = {}) {
+    const baseUrl = (options.baseUrl ?? "https://relay.test/v1").replace(/\/+$/, "");
+    let serviceKey = options.serviceKey ?? (await testVectorServiceKeyPair());
+    const keyId = options.keyId ?? "dstack-kms-e2ee-x25519-v1";
+    const notAfter = options.notAfter ?? Math.floor(Date.now() / 1000) + 30 * 24 * 3600;
+    const responseId = options.responseId ?? "chatcmpl-test";
+    const respond = options.respond ??
+        (() => JSON.stringify({ answer: "fake answer", evidence: "fake evidence" }));
+    const buildKeyset = () => ({
+        subject: null,
+        not_after: notAfter,
+        receipt_signing_keys: [
+            {
+                key_id: "dstack-kms-receipt-ed25519-v1",
+                algo: "ed25519",
+                public_key: "00".repeat(32),
+            },
+        ],
+        e2ee_public_keys: [
+            {
+                key_id: "dstack-kms-e2ee-v1",
+                algo: "secp256k1-aes-256-gcm-hkdf-sha256",
+                public_key: "04" + "11".repeat(64),
+            },
+            {
+                key_id: keyId,
+                algo: E2EE_ALGO_X25519,
+                public_key: bytesToHex(serviceKey.publicKey),
+            },
+        ],
+        tls_public_keys: [{ spki_sha256: "22".repeat(32), domain: "relay.test" }],
+    });
+    const gateway = {
+        fetch: undefined,
+        keyset: buildKeyset(),
+        requests: [],
+        attestationRequests: [],
+        decryptedPrompts: [],
+        async rotateKey() {
+            serviceKey = await generateX25519KeyPair();
+            gateway.keyset = buildKeyset();
+        },
+        failNext(count, status, errorType) {
+            pendingFailures = { count, status, errorType };
+        },
+        plaintextNext() {
+            plaintextOnce = true;
+        },
+        keysetDigest: () => workloadKeysetDigest(gateway.keyset),
+    };
+    let pendingFailures = null;
+    let plaintextOnce = false;
+    const serveAttestation = async (url) => {
+        gateway.attestationRequests.push(url.toString());
+        if (options.attestationRoute === false) {
+            return jsonResponse(404, { error: "not found" });
+        }
+        const nonce = url.searchParams.get("nonce");
+        if (!nonce || !/^[0-9a-f]{64}$/.test(nonce)) {
+            return errorResponse(400, "invalid_request_error");
+        }
+        const digest = await workloadKeysetDigest(gateway.keyset);
+        const reportData = await reportDataFor(digest, nonce);
+        const report = {
+            api_version: "aci/1",
+            workload_keyset_digest: digest,
+            attestation: {
+                tee_type: "tdx",
+                workload_keyset: gateway.keyset,
+                report_data: reportData,
+                source_provenance: {
+                    repo_url: "https://github.com/Dstack-TEE/private-ai-gateway.git",
+                    repo_commit: "d567f6b4c4d93e33037ea202db04db86a8ad881c",
+                    image_digest: null,
+                    image_provenance: null,
+                },
+                evidence: {
+                    quote: "0400",
+                    quote_report_data: reportData + "0".repeat(64),
+                },
+            },
+            service_capabilities: {
+                supported_e2ee_versions: options.supportedE2eeVersions ?? ["2"],
+                serving: "aggregator",
+            },
+        };
+        return jsonResponse(200, report);
+    };
+    const serveChat = async (url, init) => {
+        const headers = new Headers(init?.headers);
+        const headerRecord = {};
+        headers.forEach((value, key) => {
+            headerRecord[key] = value;
+        });
+        const body = JSON.parse(String(init?.body));
+        gateway.requests.push({ url: url.toString(), headers: headerRecord, body });
+        const digest = await workloadKeysetDigest(gateway.keyset);
+        const common = { "X-ACI-Keyset-Digest": digest, "X-Receipt-Id": "rcpt-1" };
+        if (pendingFailures && pendingFailures.count > 0) {
+            pendingFailures.count -= 1;
+            return errorResponse(pendingFailures.status, pendingFailures.errorType);
+        }
+        const required = [
+            "x-e2ee-version",
+            "x-client-pub-key",
+            "x-model-pub-key",
+            "x-e2ee-nonce",
+            "x-e2ee-timestamp",
+        ];
+        const present = required.filter((name) => headers.has(name));
+        if (present.length !== required.length) {
+            return errorResponse(400, "e2ee_header_missing");
+        }
+        if (headers.get("x-e2ee-version") !== "2") {
+            return errorResponse(400, "e2ee_invalid_version");
+        }
+        if (headers.get("x-model-pub-key") !== bytesToHex(serviceKey.publicKey)) {
+            return errorResponse(400, "e2ee_model_key_mismatch");
+        }
+        const nonce = headers.get("x-e2ee-nonce");
+        if (!/^[0-9a-fA-F]{64}$/.test(nonce)) {
+            return errorResponse(400, "e2ee_invalid_nonce");
+        }
+        const ts = Number(headers.get("x-e2ee-timestamp"));
+        if (!Number.isInteger(ts)) {
+            return errorResponse(400, "e2ee_invalid_timestamp");
+        }
+        if (typeof body.model !== "string") {
+            return errorResponse(400, "e2ee_invalid_payload_model");
+        }
+        let clientPublicKey;
+        try {
+            clientPublicKey = hexToBytes(headers.get("x-client-pub-key"));
+            if (clientPublicKey.length !== 32)
+                throw new Error("length");
+        }
+        catch {
+            return errorResponse(400, "e2ee_invalid_public_key");
+        }
+        const context = {
+            algo: E2EE_ALGO_X25519,
+            model: body.model,
+            nonce,
+            ts,
+        };
+        const messages = Array.isArray(body.messages) ? body.messages : [];
+        const decrypted = [];
+        for (let index = 0; index < messages.length; index += 1) {
+            const message = messages[index];
+            if (typeof message.content !== "string") {
+                return errorResponse(400, "e2ee_decryption_failed");
+            }
+            try {
+                decrypted.push({
+                    role: message.role,
+                    content: await decryptField({
+                        wire: message.content,
+                        privateKey: serviceKey.privateKey,
+                        aad: requestFieldAad(context, `messages.${index}.content`),
+                    }),
+                });
+            }
+            catch {
+                return errorResponse(400, "e2ee_decryption_failed");
+            }
+        }
+        if (decrypted.length === 0) {
+            return errorResponse(400, "e2ee_decryption_failed");
+        }
+        gateway.decryptedPrompts.push(decrypted.map((m) => m.content));
+        const answer = await respond({ model: body.model, messages: decrypted });
+        if (plaintextOnce) {
+            plaintextOnce = false;
+            return jsonResponse(200, {
+                id: responseId,
+                choices: [
+                    { index: 0, message: { role: "assistant", content: answer } },
+                ],
+            }, common);
+        }
+        const content = await encryptField({
+            plaintext: answer,
+            recipientPublicKey: clientPublicKey,
+            aad: responseFieldAad(context, "choices.0.message.content", responseId),
+        });
+        return jsonResponse(200, {
+            id: responseId,
+            object: "chat.completion",
+            model: body.model,
+            choices: [
+                {
+                    index: 0,
+                    finish_reason: "stop",
+                    message: { role: "assistant", content },
+                },
+            ],
+            usage: { prompt_tokens: 1, completion_tokens: 1, total_tokens: 2 },
+        }, {
+            ...common,
+            "X-E2EE-Applied": "true",
+            "X-E2EE-Version": "2",
+            "X-E2EE-Algo": E2EE_ALGO_X25519,
+        });
+    };
+    gateway.fetch = (async (input, init) => {
+        const url = new URL(typeof input === "string"
+            ? input
+            : input instanceof URL
+                ? input.toString()
+                : input.url);
+        const path = url.origin + url.pathname;
+        if (path === `${baseUrl}/aci/attestation`)
+            return serveAttestation(url);
+        if (path === `${baseUrl}/chat/completions`)
+            return serveChat(url, init);
+        return jsonResponse(404, { error: "not found" });
+    });
+    return gateway;
+}
+//# sourceMappingURL=e2ee-gateway.js.map

package/dist/test-utils/e2ee-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2ee-gateway.js","sourceRoot":"","sources":["../../src/test-utils/e2ee-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EACL,aAAa,EACb,oBAAoB,GAGrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,UAAU,EACV,sBAAsB,GAEvB,MAAM,8BAA8B,CAAC;AAEtC,wDAAwD;AACxD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,kCAAkC,GAC7C,kEAAkE,CAAC;AAErE,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,OAAO,sBAAsB,CAC3B,wBAAwB,EACxB,UAAU,CAAC,kCAAkC,CAAC,CAC/C,CAAC;AACJ,CAAC;AA+CD,SAAS,YAAY,CACnB,MAAc,EACd,IAAa,EACb,UAAkC,EAAE;IAEpC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,IAAY;IACjD,OAAO,YAAY,CAAC,MAAM,EAAE;QAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,IAAI,EAAE,EAAE;KAClD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkC,EAAE;IAEpC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAClE,MAAM,EACN,EAAE,CACH,CAAC;IACF,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,wBAAwB,EAAE,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,2BAA2B,CAAC;IAC3D,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,eAAe,CAAC;IACzD,MAAM,OAAO,GACX,OAAO,CAAC,OAAO;QACf,CAAC,GAAG,EAAE,CACJ,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;IAE1E,MAAM,WAAW,GAAG,GAAsB,EAAE,CAAC,CAAC;QAC5C,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAQ;QACnB,oBAAoB,EAAE;YACpB;gBACE,MAAM,EAAE,+BAA+B;gBACvC,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;aAC5B;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,MAAM,EAAE,oBAAoB;gBAC5B,IAAI,EAAE,mCAAmC;gBACzC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;aACnC;YACD;gBACE,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,gBAAgB;gBACtB,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;aAC7C;SACF;QACD,eAAe,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;KAC1E,CAAC,CAAC;IAEH,MAAM,OAAO,GAAoB;QAC/B,KAAK,EAAE,SAAoC;QAC3C,MAAM,EAAE,WAAW,EAAE;QACrB,QAAQ,EAAE,EAAE;QACZ,mBAAmB,EAAE,EAAE;QACvB,gBAAgB,EAAE,EAAE;QACpB,KAAK,CAAC,SAAS;YACb,UAAU,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAC3C,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS;YAC/B,eAAe,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACjD,CAAC;QACD,aAAa;YACX,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;KACzD,CAAC;IACF,IAAI,eAAe,GAIR,IAAI,CAAC;IAChB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,MAAM,gBAAgB,GAAG,KAAK,EAAE,GAAQ,EAAqB,EAAE;QAC7D,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YACvC,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,aAAa,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAyB;YACnC,WAAW,EAAE,OAAO;YACpB,sBAAsB,EAAE,MAAM;YAC9B,WAAW,EAAE;gBACX,QAAQ,EAAE,KAAK;gBACf,eAAe,EAAE,OAAO,CAAC,MAAM;gBAC/B,WAAW,EAAE,UAAU;gBACvB,iBAAiB,EAAE;oBACjB,QAAQ,EAAE,sDAAsD;oBAChE,WAAW,EAAE,0CAA0C;oBACvD,YAAY,EAAE,IAAI;oBAClB,gBAAgB,EAAE,IAAI;iBACvB;gBACD,QAAQ,EAAE;oBACR,KAAK,EAAE,MAAM;oBACb,iBAAiB,EAAE,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;iBAC/C;aACF;YACD,oBAAoB,EAAE;gBACpB,uBAAuB,EAAE,OAAO,CAAC,qBAAqB,IAAI,CAAC,GAAG,CAAC;gBAC/D,OAAO,EAAE,YAAY;aACtB;SACF,CAAC;QACF,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,EACrB,GAAQ,EACR,IAA6B,EACV,EAAE;QACrB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,YAAY,GAA2B,EAAE,CAAC;QAChD,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7B,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAA4B,CAAC;QACvE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;QAE3E,IAAI,eAAe,IAAI,eAAe,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACjD,eAAe,CAAC,KAAK,IAAI,CAAC,CAAC;YAC3B,OAAO,aAAa,CAAC,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,QAAQ,GAAG;YACf,gBAAgB;YAChB,kBAAkB;YAClB,iBAAiB;YACjB,cAAc;YACd,kBAAkB;SACnB,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACvC,OAAO,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;YAC1C,OAAO,aAAa,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxE,OAAO,aAAa,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAE,CAAC;QAC3C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,OAAO,aAAa,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,aAAa,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,eAA2B,CAAC;QAChC,IAAI,CAAC;YACH,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAE,CAAC,CAAC;YAC/D,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK;YACL,EAAE;SACH,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,SAAS,GAA6C,EAAE,CAAC;QAC/D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAuC,CAAC;YACtE,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACxC,OAAO,aAAa,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,MAAM,YAAY,CAAC;wBAC1B,IAAI,EAAE,OAAO,CAAC,OAAO;wBACrB,UAAU,EAAE,UAAU,CAAC,UAAU;wBACjC,GAAG,EAAE,eAAe,CAAC,OAAO,EAAE,YAAY,KAAK,UAAU,CAAC;qBAC3D,CAAC;iBACH,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,aAAa,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,aAAa,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACzE,IAAI,aAAa,EAAE,CAAC;YAClB,aAAa,GAAG,KAAK,CAAC;YACtB,OAAO,YAAY,CACjB,GAAG,EACH;gBACE,EAAE,EAAE,UAAU;gBACd,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;iBAC9D;aACF,EACD,MAAM,CACP,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC;YACjC,SAAS,EAAE,MAAM;YACjB,kBAAkB,EAAE,eAAe;YACnC,GAAG,EAAE,gBAAgB,CAAC,OAAO,EAAE,2BAA2B,EAAE,UAAU,CAAC;SACxE,CAAC,CAAC;QACH,OAAO,YAAY,CACjB,GAAG,EACH;YACE,EAAE,EAAE,UAAU;YACd,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE;gBACP;oBACE,KAAK,EAAE,CAAC;oBACR,aAAa,EAAE,MAAM;oBACrB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE;iBACxC;aACF;YACD,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;SACnE,EACD;YACE,GAAG,MAAM;YACT,gBAAgB,EAAE,MAAM;YACxB,gBAAgB,EAAE,GAAG;YACrB,aAAa,EAAE,gBAAgB;SAChC,CACF,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,CAAC,KAAK,GAAG,CAAC,KAAK,EACpB,KAA6B,EAC7B,IAAkB,EAClB,EAAE;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,KAAK,YAAY,GAAG;gBACpB,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAClB,CAAC,CAAC,KAAK,CAAC,GAAG,CAChB,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvC,IAAI,IAAI,KAAK,GAAG,OAAO,kBAAkB;YAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxE,IAAI,IAAI,KAAK,GAAG,OAAO,mBAAmB;YAAE,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC,CAAiB,CAAC;IAEnB,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/test-utils/index.d.ts

@@ -1,2 +1,5 @@
 export { createTestWallet, buildWeb3SignedHeader, type TestWallet, } from "./wallet.js";
+export { createMemoryDataStorage, type MemoryDataStorage, } from "./memory-storage.js";
+export { TEST_VECTOR_SERVICE_PUBLIC_KEY_HEX, TEST_VECTOR_SERVICE_SEED, createFakeE2eeGateway, testVectorServiceKeyPair, type FakeE2eeGateway, type FakeE2eeGatewayOptions, type FakeE2eeGatewayRequest, } from "./e2ee-gateway.js";
+export { LIVE_ACI_ATTESTATION_CLOCK_S, LIVE_ACI_ATTESTATION_NONCE, LIVE_ACI_ATTESTATION_REPORT, LIVE_ACI_X25519_PUBLIC_KEY_HEX, } from "./e2ee-fixtures.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/test-utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/test-utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/test-utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,EACvB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC"}

package/dist/test-utils/index.js

@@ -1,2 +1,5 @@
 export { createTestWallet, buildWeb3SignedHeader, } from "./wallet.js";
+export { createMemoryDataStorage, } from "./memory-storage.js";
+export { TEST_VECTOR_SERVICE_PUBLIC_KEY_HEX, TEST_VECTOR_SERVICE_SEED, createFakeE2eeGateway, testVectorServiceKeyPair, } from "./e2ee-gateway.js";
+export { LIVE_ACI_ATTESTATION_CLOCK_S, LIVE_ACI_ATTESTATION_NONCE, LIVE_ACI_ATTESTATION_REPORT, LIVE_ACI_X25519_PUBLIC_KEY_HEX, } from "./e2ee-fixtures.js";
 //# sourceMappingURL=index.js.map

package/dist/test-utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/test-utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/test-utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,GAIzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC"}

package/dist/test-utils/memory-storage.d.ts

@@ -0,0 +1,12 @@
+/**
+ * In-memory DataStoragePort for unit tests: envelopes in a Map, index rows
+ * in an array, versions assigned max+1 per scope like the real index.
+ */
+import type { DataStoragePort } from "../ports/index.js";
+import type { IndexEntry } from "../storage/index/types.js";
+export interface MemoryDataStorage extends DataStoragePort {
+    /** Every index row, oldest first (test inspection). */
+    readonly entries: IndexEntry[];
+}
+export declare function createMemoryDataStorage(): MemoryDataStorage;
+//# sourceMappingURL=memory-storage.d.ts.map

package/dist/test-utils/memory-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-storage.d.ts","sourceRoot":"","sources":["../../src/test-utils/memory-storage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;CAChC;AAED,wBAAgB,uBAAuB,IAAI,iBAAiB,CA8J3D"}

package/dist/test-utils/memory-storage.js

@@ -0,0 +1,146 @@
+/**
+ * In-memory DataStoragePort for unit tests: envelopes in a Map, index rows
+ * in an array, versions assigned max+1 per scope like the real index.
+ */
+export function createMemoryDataStorage() {
+    const entries = [];
+    const envelopes = new Map();
+    let nextId = 1;
+    const key = (scope, collectedAt) => `${scope}\n${collectedAt}`;
+    const byPath = (path) => entries.find((entry) => entry.path === path);
+    const forScope = (scope) => entries
+        .filter((entry) => entry.scope === scope)
+        .sort((a, b) => b.collectedAt.localeCompare(a.collectedAt) || b.version - a.version);
+    const remove = (predicate) => {
+        let removed = 0;
+        for (let index = entries.length - 1; index >= 0; index -= 1) {
+            const entry = entries[index];
+            if (!predicate(entry))
+                continue;
+            entries.splice(index, 1);
+            envelopes.delete(key(entry.scope, entry.collectedAt));
+            removed += 1;
+        }
+        return removed;
+    };
+    return {
+        kind: "custom",
+        entries,
+        listScopes({ scopePrefix, limit = 20, offset = 0 }) {
+            const summaries = new Map();
+            for (const entry of entries) {
+                if (scopePrefix && !entry.scope.startsWith(scopePrefix))
+                    continue;
+                const existing = summaries.get(entry.scope);
+                summaries.set(entry.scope, {
+                    scope: entry.scope,
+                    latestCollectedAt: existing &&
+                        existing.latestCollectedAt.localeCompare(entry.collectedAt) > 0
+                        ? existing.latestCollectedAt
+                        : entry.collectedAt,
+                    versionCount: (existing?.versionCount ?? 0) + 1,
+                });
+            }
+            const scopes = [...summaries.values()].sort((a, b) => a.scope.localeCompare(b.scope));
+            return {
+                scopes: scopes.slice(offset, offset + limit),
+                total: scopes.length,
+            };
+        },
+        listVersions(scope, { limit = 20, offset = 0 }) {
+            return forScope(scope).slice(offset, offset + limit);
+        },
+        countVersions(scope) {
+            return forScope(scope).length;
+        },
+        findEntry({ scope, fileId, at }) {
+            if (fileId)
+                return entries.find((entry) => entry.fileId === fileId);
+            const scoped = forScope(scope);
+            if (at)
+                return scoped.find((entry) => entry.collectedAt === at);
+            return scoped[0];
+        },
+        findByFileId(fileId) {
+            return entries.find((entry) => entry.fileId === fileId);
+        },
+        findByDataPointId(dataPointId) {
+            return entries.find((entry) => entry.dataPointId === dataPointId);
+        },
+        findUnsynced(options) {
+            const unsynced = entries.filter((entry) => entry.dataPointId === null);
+            return options?.limit ? unsynced.slice(0, options.limit) : unsynced;
+        },
+        async readEnvelope(scope, collectedAt) {
+            const envelope = envelopes.get(key(scope, collectedAt));
+            if (!envelope)
+                throw new Error(`missing envelope ${scope}@${collectedAt}`);
+            return envelope;
+        },
+        async writeEnvelope(envelope) {
+            envelopes.set(key(envelope.scope, envelope.collectedAt), envelope);
+            const path = `${envelope.scope}/${envelope.collectedAt}.json`;
+            return {
+                path,
+                relativePath: path,
+                sizeBytes: JSON.stringify(envelope).length,
+            };
+        },
+        insertEntry(entry) {
+            const version = entry.version ??
+                forScope(entry.scope).reduce((max, row) => Math.max(max, row.version), 0) + 1;
+            const indexed = {
+                ...entry,
+                id: nextId,
+                schemaId: entry.schemaId ?? null,
+                createdAt: new Date(0).toISOString(),
+                version,
+                dataPointId: entry.dataPointId ?? null,
+            };
+            nextId += 1;
+            entries.push(indexed);
+            return indexed;
+        },
+        updateFileId(path, fileId) {
+            const entry = byPath(path);
+            if (!entry)
+                return false;
+            entry.fileId = fileId;
+            return true;
+        },
+        findLatestVersionByScope(scope) {
+            return forScope(scope).reduce((max, row) => Math.max(max, row.version), 0);
+        },
+        updateDataPointId(path, dataPointId) {
+            const entry = byPath(path);
+            if (!entry)
+                return false;
+            entry.dataPointId = dataPointId;
+            return true;
+        },
+        updateEntryVersion(path, version) {
+            const entry = byPath(path);
+            if (!entry)
+                return false;
+            entry.version = version;
+            return true;
+        },
+        async deleteScope(scope) {
+            return remove((entry) => entry.scope === scope);
+        },
+        async deleteByFileId(fileId) {
+            return remove((entry) => entry.fileId === fileId) > 0;
+        },
+        async deleteVersion(scope, collectedAt) {
+            return (remove((entry) => entry.scope === scope && entry.collectedAt === collectedAt) > 0);
+        },
+        dropUnsyncedEntry(path) {
+            const index = entries.findIndex((entry) => entry.path === path && entry.dataPointId === null);
+            if (index === -1)
+                return false;
+            entries.splice(index, 1);
+            return true;
+        },
+    };
+}
+//# sourceMappingURL=memory-storage.js.map

package/dist/test-utils/memory-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-storage.js","sourceRoot":"","sources":["../../src/test-utils/memory-storage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,MAAM,UAAU,uBAAuB;IACrC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IACtD,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,WAAmB,EAAE,EAAE,CACjD,GAAG,KAAK,KAAK,WAAW,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE,CACjC,OAAO;SACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;SACxC,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CACtE,CAAC;IACN,MAAM,MAAM,GAAG,CAAC,SAAyC,EAAE,EAAE;QAC3D,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,SAAS;YAChC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACzB,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,OAAO;QACP,UAAU,CAAC,EAAE,WAAW,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,GAAG,CAAC,EAAE;YAChD,MAAM,SAAS,GAAG,IAAI,GAAG,EAGtB,CAAC;YACJ,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,WAAW,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,SAAS;gBAClE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC5C,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;oBACzB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,iBAAiB,EACf,QAAQ;wBACR,QAAQ,CAAC,iBAAiB,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;wBAC7D,CAAC,CAAC,QAAQ,CAAC,iBAAiB;wBAC5B,CAAC,CAAC,KAAK,CAAC,WAAW;oBACvB,YAAY,EAAE,CAAC,QAAQ,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC;iBAChD,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnD,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAC/B,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;gBAC5C,KAAK,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,KAAK,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,GAAG,CAAC,EAAE;YAC5C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,aAAa,CAAC,KAAK;YACjB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAChC,CAAC;QACD,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;YAC7B,IAAI,MAAM;gBAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,EAAE;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,YAAY,CAAC,MAAM;YACjB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC1D,CAAC;QACD,iBAAiB,CAAC,WAAW;YAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACpE,CAAC;QACD,YAAY,CAAC,OAAO;YAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;YACvE,OAAO,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW;YACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ;gBACX,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI,WAAW,EAAE,CAAC,CAAC;YAC9D,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,QAAQ;YAC1B,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;YACnE,MAAM,IAAI,GAAG,GAAG,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,WAAW,OAAO,CAAC;YAC9D,OAAO;gBACL,IAAI;gBACJ,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM;aAC3C,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,KAAK;YACf,MAAM,OAAO,GACX,KAAK,CAAC,OAAO;gBACb,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAC1B,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,EACxC,CAAC,CACF,GAAG,CAAC,CAAC;YACR,MAAM,OAAO,GAAe;gBAC1B,GAAG,KAAK;gBACR,EAAE,EAAE,MAAM;gBACV,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;gBACpC,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;aACvC,CAAC;YACF,MAAM,IAAI,CAAC,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,YAAY,CAAC,IAAI,EAAE,MAAM;YACvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,wBAAwB,CAAC,KAAK;YAC5B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,CAC3B,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,EACxC,CAAC,CACF,CAAC;QACJ,CAAC;QACD,iBAAiB,CAAC,IAAI,EAAE,WAAW;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,kBAAkB,CAAC,IAAI,EAAE,OAAO;YAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YACzB,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,OAAO,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,MAAM;YACzB,OAAO,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW;YACpC,OAAO,CACL,MAAM,CACJ,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,CACtE,GAAG,CAAC,CACN,CAAC;QACJ,CAAC;QACD,iBAAiB,CAAC,IAAI;YACpB,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAC7B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAC7D,CAAC;YACF,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opendatalabs/personal-server-ts-core",
-  "version": "1.8.0",
+  "version": "1.10.0",
   "description": "Protocol logic for the Vana Personal Server — auth, grants, scopes, storage, keys",
   "license": "MIT",
   "repository": {
@@ -84,6 +84,10 @@
       "types": "./dist/lineage/index.d.ts",
       "import": "./dist/lineage/index.js"
     },
+    "./derivatives": {
+      "types": "./dist/derivatives/index.d.ts",
+      "import": "./dist/derivatives/index.js"
+    },
     "./ports": {
       "types": "./dist/ports/index.d.ts",
       "import": "./dist/ports/index.js"