@opendatalabs/personal-server-ts-server 0.0.1-canary.016adf9 → 0.0.1-canary.052d47e

package/dist/migrations/detect-stuck-version-ledger.js

@@ -0,0 +1,73 @@
+/**
+ * BUI-715 follow-up — NON-DESTRUCTIVE detection of the stuck version-ledger
+ * fingerprint on the desktop Personal Server.
+ *
+ * Background. The local `version` in `data_files` is a per-snapshot counter
+ * (`findLatestVersionByScope() + 1`, bumped on every connector run). The
+ * gateway's `currentVersion` is a per-content-change counter. When the gateway
+ * falls behind the local counter (a moksha / DataRegistry reset, or a pre-#755
+ * network switch that shared one state folder across mainnet/testnet), repeated
+ * re-snapshots pile up several unsynced rows for the same scope that thrash on
+ * `409 Gap in version sequence`.
+ *
+ * Why detect, not repair. The runtime already recovers this non-destructively:
+ * the upload worker's 409 handling (BUI-540 adopt / BUI-715 rebase, #158/#202)
+ * rebases distinct content onto the gateway's next-valid version and ADOPTS
+ * identical content (`record.dataHash === dataHash`) rather than minting a new
+ * version — so duplicate pending rows dedupe on the next sync without deleting
+ * anything. A boot-time `DELETE` cannot be made safe offline: `data_files`
+ * carries no content hash, so "duplicate re-snapshot" (safe to drop) is
+ * indistinguishable from "distinct history" (must keep). Worse, the schema
+ * migration adds `data_point_id` as a NULL column, so on the first boot after a
+ * schema upgrade a legacy user's fully-synced rows momentarily look pending.
+ * This migration therefore only OBSERVES and records prevalence; recovery is
+ * left to the runtime.
+ *
+ * Caveat on the count. Because `data_point_id IS NULL` also matches rows freshly
+ * backfilled by the schema migration, the reported pending-row count is an upper
+ * bound on the first boot after a schema upgrade. It is telemetry, not a gate.
+ */
+export const DETECT_STUCK_VERSION_LEDGER_ID = "2026-07-14-detect-stuck-version-ledger";
+/**
+ * Scopes with more than one row still pending upload (`data_point_id IS NULL`) —
+ * the accumulation fingerprint. One pending row is ordinary in-flight work.
+ */
+export function findStuckScopes(db) {
+    const rows = db
+        .prepare(`SELECT scope, COUNT(*) AS pending_rows
+         FROM data_files
+        WHERE data_point_id IS NULL
+        GROUP BY scope
+       HAVING COUNT(*) > 1
+        ORDER BY scope ASC`)
+        .all();
+    return rows.map((r) => ({ scope: r.scope, pendingRows: r.pending_rows }));
+}
+export const detectStuckVersionLedger = {
+    id: DETECT_STUCK_VERSION_LEDGER_ID,
+    description: "Detect (non-destructively) scopes whose upload queue has accumulated multiple pending rows — the version-ledger thrash fingerprint (BUI-715). Records prevalence to state.json; the sync worker's 409 rebase/adopt (#158/#202) performs the actual recovery.",
+    // Cheap, mutation-free observation — safe to re-run every boot.
+    everyBoot: true,
+    check(ctx) {
+        return findStuckScopes(ctx.db).length > 0;
+    },
+    run(ctx) {
+        const reports = findStuckScopes(ctx.db);
+        if (reports.length === 0)
+            return { changed: false };
+        const pendingRows = reports.reduce((sum, r) => sum + r.pendingRows, 0);
+        ctx.logger?.warn({
+            migration: DETECT_STUCK_VERSION_LEDGER_ID,
+            scopeCount: reports.length,
+            scopes: reports.map((r) => r.scope),
+            pendingRows,
+        }, "Detected stuck version-ledger scopes (BUI-715); runtime 409 recovery will drain them on the next sync");
+        return {
+            // Non-destructive: nothing was mutated, so `changed` stays false; the log
+            // entry itself is the record of the detection.
+            changed: false,
+            detail: `detected ${reports.length} scope(s) with ${pendingRows} accumulated pending row(s)`,
+        };
+    },
+};
+//# sourceMappingURL=detect-stuck-version-ledger.js.map

package/dist/migrations/detect-stuck-version-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-stuck-version-ledger.js","sourceRoot":"","sources":["../../src/migrations/detect-stuck-version-ledger.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,8BAA8B,GACzC,wCAAwC,CAAC;AAY3C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAqB;IACnD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;;;;;2BAKqB,CACtB;SACA,GAAG,EAAqB,CAAC;IAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAmB;IACtD,EAAE,EAAE,8BAA8B;IAClC,WAAW,EACT,8PAA8P;IAChQ,gEAAgE;IAChE,SAAS,EAAE,IAAI;IACf,KAAK,CAAC,GAA0B;QAC9B,OAAO,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,GAAG,CAAC,GAA0B;QAC5B,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACpD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACvE,GAAG,CAAC,MAAM,EAAE,IAAI,CACd;YACE,SAAS,EAAE,8BAA8B;YACzC,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YACnC,WAAW;SACZ,EACD,uGAAuG,CACxG,CAAC;QACF,OAAO;YACL,0EAA0E;YAC1E,+CAA+C;YAC/C,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,YAAY,OAAO,CAAC,MAAM,kBAAkB,WAAW,6BAA6B;SAC7F,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/migrations/local-state.d.ts

@@ -0,0 +1,35 @@
+import type Database from "better-sqlite3";
+import { type StateMigration, type StateMigrationLogger, type StateMigrationsState } from "./state-migrations.js";
+export declare const LOCAL_STATE_VERSION = 1;
+export declare const INDEX_STATE_VERSION = 1;
+export declare const TOKEN_STORE_VERSION = 1;
+export declare const SYNC_CURSOR_VERSION = 1;
+export declare const DATA_HIERARCHY_VERSION = 1;
+export declare const CONFIG_STATE_VERSION = 1;
+export interface LocalStateMigrationOptions {
+    storageRoot: string;
+    dataDir: string;
+    configPath: string;
+    syncCursorPath: string;
+    tokensPath: string;
+    statePath?: string;
+    /**
+     * Open `index.db` handle. When supplied, the versioned state-migration
+     * registry runs against it and its result is persisted into `state.json`.
+     * Omitted in the file-only unit tests that predate the registry.
+     */
+    db?: Database.Database;
+    /** Overrides the registry (tests). Defaults to STATE_MIGRATIONS. */
+    migrations?: StateMigration[];
+    logger?: StateMigrationLogger;
+    /** Injectable clock for migration log timestamps (tests). */
+    now?: () => string;
+}
+export interface LocalStateMigrationResult {
+    statePath: string;
+    syncCursorCreated: boolean;
+    tokensFileVersioned: boolean;
+    migrations?: StateMigrationsState;
+}
+export declare function migrateLocalState(options: LocalStateMigrationOptions): Promise<LocalStateMigrationResult>;
+//# sourceMappingURL=local-state.d.ts.map

package/dist/migrations/local-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-state.d.ts","sourceRoot":"","sources":["../../src/migrations/local-state.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACvB,oEAAoE;IACpE,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC;AA0ID,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,yBAAyB,CAAC,CAiDpC"}

package/dist/migrations/local-state.js

@@ -0,0 +1,133 @@
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { runStateMigrations, } from "./state-migrations.js";
+export const LOCAL_STATE_VERSION = 1;
+export const INDEX_STATE_VERSION = 1;
+export const TOKEN_STORE_VERSION = 1;
+export const SYNC_CURSOR_VERSION = 1;
+export const DATA_HIERARCHY_VERSION = 1;
+export const CONFIG_STATE_VERSION = 1;
+async function fileExists(path) {
+    try {
+        await readFile(path);
+        return true;
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return false;
+        }
+        throw err;
+    }
+}
+async function writeJsonFile(path, value, mode) {
+    await mkdir(dirname(path), { recursive: true });
+    const tmpPath = `${path}.tmp`;
+    await writeFile(tmpPath, `${JSON.stringify(value, null, 2)}\n`, {
+        encoding: "utf-8",
+        mode,
+    });
+    await rename(tmpPath, path);
+}
+async function migrateSyncCursor(configPath, syncCursorPath) {
+    if (await fileExists(syncCursorPath)) {
+        return false;
+    }
+    let legacyTimestamp = null;
+    try {
+        const raw = await readFile(configPath, "utf-8");
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.sync?.lastProcessedTimestamp === "string") {
+            legacyTimestamp = parsed.sync.lastProcessedTimestamp;
+        }
+    }
+    catch (err) {
+        if (err.code !== "ENOENT") {
+            throw err;
+        }
+    }
+    if (legacyTimestamp === null) {
+        return false;
+    }
+    const state = {
+        version: SYNC_CURSOR_VERSION,
+        lastProcessedTimestamp: legacyTimestamp,
+    };
+    await writeJsonFile(syncCursorPath, state);
+    return true;
+}
+async function migrateTokensFile(tokensPath) {
+    let parsed;
+    try {
+        const raw = await readFile(tokensPath, "utf-8");
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return false;
+        }
+        throw err;
+    }
+    if (parsed.version === TOKEN_STORE_VERSION) {
+        return false;
+    }
+    if (!Array.isArray(parsed.tokens)) {
+        return false;
+    }
+    await writeJsonFile(tokensPath, {
+        version: TOKEN_STORE_VERSION,
+        tokens: parsed.tokens,
+    }, 0o600);
+    return true;
+}
+async function readPriorState(statePath) {
+    try {
+        const raw = await readFile(statePath, "utf-8");
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return undefined;
+        }
+        // A corrupt/unreadable state.json must not brick boot — start fresh. The
+        // migration registry is re-derived from disk state, so nothing is lost
+        // beyond the applied-id/log bookkeeping.
+        return undefined;
+    }
+}
+export async function migrateLocalState(options) {
+    const statePath = options.statePath ?? join(options.storageRoot, "state.json");
+    await mkdir(options.storageRoot, { recursive: true });
+    await mkdir(options.dataDir, { recursive: true });
+    const priorState = await readPriorState(statePath);
+    const syncCursorCreated = await migrateSyncCursor(options.configPath, options.syncCursorPath);
+    const tokensFileVersioned = await migrateTokensFile(options.tokensPath);
+    // Versioned state-migration registry (needs the open index.db handle).
+    const migrations = options.db
+        ? runStateMigrations({
+            db: options.db,
+            storageRoot: options.storageRoot,
+            logger: options.logger,
+        }, priorState?.migrations, { migrations: options.migrations, now: options.now })
+        : priorState?.migrations;
+    const state = {
+        version: LOCAL_STATE_VERSION,
+        migratedAt: new Date().toISOString(),
+        components: {
+            config: CONFIG_STATE_VERSION,
+            index: INDEX_STATE_VERSION,
+            dataHierarchy: DATA_HIERARCHY_VERSION,
+            tokenStore: TOKEN_STORE_VERSION,
+            tokensFile: TOKEN_STORE_VERSION,
+            syncCursor: SYNC_CURSOR_VERSION,
+        },
+        ...(migrations ? { migrations } : {}),
+    };
+    await writeJsonFile(statePath, state);
+    return {
+        statePath,
+        syncCursorCreated,
+        tokensFileVersioned,
+        ...(migrations ? { migrations } : {}),
+    };
+}
+//# sourceMappingURL=local-state.js.map

package/dist/migrations/local-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-state.js","sourceRoot":"","sources":["../../src/migrations/local-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,kBAAkB,GAInB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AA2DtC,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,KAAc,EACd,IAAa;IAEb,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC;IAC9B,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAC9D,QAAQ,EAAE,OAAO;QACjB,IAAI;KACL,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,UAAkB,EAClB,cAAsB;IAEtB,IAAI,MAAM,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QACpD,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YAC5D,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAoB;QAC7B,OAAO,EAAE,mBAAmB;QAC5B,sBAAsB,EAAE,eAAe;KACxC,CAAC;IACF,MAAM,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,aAAa,CACjB,UAAU,EACV;QACE,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,EACD,KAAK,CACN,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,yCAAyC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAmC;IAEnC,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAE/D,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAEnD,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,CAC/C,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,cAAc,CACvB,CAAC;IACF,MAAM,mBAAmB,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAExE,uEAAuE;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE;QAC3B,CAAC,CAAC,kBAAkB,CAChB;YACE,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,EACD,UAAU,EAAE,UAAU,EACtB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CACrD;QACH,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC;IAE3B,MAAM,KAAK,GAAmB;QAC5B,OAAO,EAAE,mBAAmB;QAC5B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU,EAAE;YACV,MAAM,EAAE,oBAAoB;YAC5B,KAAK,EAAE,mBAAmB;YAC1B,aAAa,EAAE,sBAAsB;YACrC,UAAU,EAAE,mBAAmB;YAC/B,UAAU,EAAE,mBAAmB;YAC/B,UAAU,EAAE,mBAAmB;SAChC;QACD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC;IACF,MAAM,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAEtC,OAAO;QACL,SAAS;QACT,iBAAiB;QACjB,mBAAmB;QACnB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC;AACJ,CAAC"}

package/dist/migrations/state-migrations.d.ts

@@ -0,0 +1,78 @@
+import type Database from "better-sqlite3";
+/**
+ * Versioned local-state migration framework for the desktop Personal Server.
+ *
+ * Each release carries a (possibly empty) ordered list of migrations. A
+ * migration inspects the on-disk state (`index.db` and friends) and repairs it
+ * on boot, so users self-heal on upgrade instead of needing manual surgery.
+ *
+ * Two shapes:
+ *   • one-shot (default) — runs once, then its id is recorded in
+ *     `state.json.migrations.applied` and it is never re-checked. Use for
+ *     structural, run-once cleanups.
+ *   • `everyBoot: true` — its `check()`/`run()` are re-evaluated on every boot
+ *     and it is never recorded as applied. Use for idempotent heals whose
+ *     triggering condition can recur. The `check()` MUST be cheap and `run()`
+ *     a no-op when nothing needs repair.
+ *
+ * Every actual repair is appended to `state.json.migrations.log` for support
+ * visibility.
+ */
+export interface StateMigrationLogger {
+    info: (obj: unknown, msg?: string) => void;
+    warn: (obj: unknown, msg?: string) => void;
+}
+export interface StateMigrationContext {
+    db: Database.Database;
+    storageRoot: string;
+    logger?: StateMigrationLogger;
+}
+export interface StateMigrationResult {
+    /** Whether the run actually changed anything (drives the log's `changed`). */
+    changed: boolean;
+    /** Short human-readable summary of what was repaired. */
+    detail?: string;
+}
+export interface StateMigration {
+    /** Stable, unique id. Convention: `YYYY-MM-DD-kebab-summary`. */
+    id: string;
+    description: string;
+    /** Re-run every boot instead of once. See module doc. Default false. */
+    everyBoot?: boolean;
+    /** Cheap guard: is the repair needed right now? */
+    check(ctx: StateMigrationContext): boolean;
+    /**
+     * Apply the repair. Should be a no-op when nothing needs fixing.
+     *
+     * MUST be idempotent even for one-shot (non-`everyBoot`) migrations. The
+     * `applied` ledger in state.json is a best-effort skip cache, not a
+     * guarantee: a lost or corrupt state.json legitimately resets it, so `run`
+     * may execute more than once across boots. Guard destructive work behind
+     * `check()` (which is always consulted before `run` when the id is not in the
+     * ledger) and make `run` safe to repeat.
+     */
+    run(ctx: StateMigrationContext): StateMigrationResult;
+}
+export interface StateMigrationRunLogEntry {
+    id: string;
+    ranAt: string;
+    changed: boolean;
+    detail?: string;
+}
+export interface StateMigrationsState {
+    /** Ids of one-shot migrations already run (never includes everyBoot ones). */
+    applied: string[];
+    /** Bounded history of actual repairs, oldest first. */
+    log: StateMigrationRunLogEntry[];
+}
+export interface RunStateMigrationsOptions {
+    migrations?: StateMigration[];
+    /** Injectable clock (tests). Defaults to `new Date().toISOString()`. */
+    now?: () => string;
+    /** Max retained log entries (oldest dropped). Default 50. */
+    maxLog?: number;
+}
+/** The registry applied on every boot. Append new migrations here. */
+export declare const STATE_MIGRATIONS: StateMigration[];
+export declare function runStateMigrations(ctx: StateMigrationContext, prior: StateMigrationsState | undefined, options?: RunStateMigrationsOptions): StateMigrationsState;
+//# sourceMappingURL=state-migrations.d.ts.map

package/dist/migrations/state-migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-migrations.d.ts","sourceRoot":"","sources":["../../src/migrations/state-migrations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAC;IACjB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mDAAmD;IACnD,KAAK,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAC3C;;;;;;;;;OASG;IACH,GAAG,CAAC,GAAG,EAAE,qBAAqB,GAAG,oBAAoB,CAAC;CACvD;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,uDAAuD;IACvD,GAAG,EAAE,yBAAyB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,EAAE,cAAc,EAA+B,CAAC;AAI7E,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,qBAAqB,EAC1B,KAAK,EAAE,oBAAoB,GAAG,SAAS,EACvC,OAAO,GAAE,yBAA8B,GACtC,oBAAoB,CA8EtB"}

package/dist/migrations/state-migrations.js

@@ -0,0 +1,72 @@
+import { detectStuckVersionLedger } from "./detect-stuck-version-ledger.js";
+/** The registry applied on every boot. Append new migrations here. */
+export const STATE_MIGRATIONS = [detectStuckVersionLedger];
+const DEFAULT_MAX_LOG = 50;
+export function runStateMigrations(ctx, prior, options = {}) {
+    const migrations = options.migrations ?? STATE_MIGRATIONS;
+    const now = options.now ?? (() => new Date().toISOString());
+    const maxLog = options.maxLog ?? DEFAULT_MAX_LOG;
+    // Defensive: state.json is parsed untyped, so a corrupt or hand-edited file
+    // can carry non-array `applied`/`log` (e.g. `{}`). Coerce rather than let
+    // `new Set(...)` / spread throw and brick boot.
+    const applied = new Set(Array.isArray(prior?.applied) ? prior.applied : []);
+    const log = Array.isArray(prior?.log)
+        ? [...prior.log]
+        : [];
+    for (const migration of migrations) {
+        if (!migration.everyBoot && applied.has(migration.id))
+            continue;
+        let needed;
+        try {
+            needed = migration.check(ctx);
+        }
+        catch (err) {
+            // Leave unmarked so a transient failure retries on the next boot.
+            ctx.logger?.warn({ migration: migration.id, error: err.message }, "State migration check failed; skipping");
+            continue;
+        }
+        if (needed) {
+            try {
+                const result = migration.run(ctx);
+                // everyBoot migrations re-observe the same condition on every boot
+                // until it clears; without dedupe a persistent condition fills the
+                // bounded log with identical entries and evicts real history. Keep
+                // one entry per observation streak: skip the push when the latest
+                // entry for this id already records the same outcome. One-shot
+                // migrations always log (a re-run after ledger loss is worth seeing).
+                const latestForId = [...log]
+                    .reverse()
+                    .find((entry) => entry.id === migration.id);
+                const duplicateObservation = migration.everyBoot === true &&
+                    latestForId !== undefined &&
+                    latestForId.changed === result.changed &&
+                    latestForId.detail === result.detail;
+                if (!duplicateObservation) {
+                    log.push({
+                        id: migration.id,
+                        ranAt: now(),
+                        changed: result.changed,
+                        detail: result.detail,
+                    });
+                }
+                ctx.logger?.info({
+                    migration: migration.id,
+                    changed: result.changed,
+                    detail: result.detail,
+                }, "Applied state migration");
+            }
+            catch (err) {
+                // A failed repair must not be recorded as applied — retry next boot.
+                ctx.logger?.warn({ migration: migration.id, error: err.message }, "State migration failed; leaving state unchanged");
+                continue;
+            }
+        }
+        if (!migration.everyBoot)
+            applied.add(migration.id);
+    }
+    return {
+        applied: [...applied],
+        log: log.slice(-maxLog),
+    };
+}
+//# sourceMappingURL=state-migrations.js.map

package/dist/migrations/state-migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-migrations.js","sourceRoot":"","sources":["../../src/migrations/state-migrations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAmF5E,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAqB,CAAC,wBAAwB,CAAC,CAAC;AAE7E,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,MAAM,UAAU,kBAAkB,CAChC,GAA0B,EAC1B,KAAuC,EACvC,UAAqC,EAAE;IAEvC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;IAEjD,4EAA4E;IAC5E,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAgC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;QAChE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;IAEP,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAAE,SAAS;QAEhE,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,kEAAkE;YAClE,GAAG,CAAC,MAAM,EAAE,IAAI,CACd,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAC1D,wCAAwC,CACzC,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClC,mEAAmE;gBACnE,mEAAmE;gBACnE,mEAAmE;gBACnE,kEAAkE;gBAClE,+DAA+D;gBAC/D,sEAAsE;gBACtE,MAAM,WAAW,GAAG,CAAC,GAAG,GAAG,CAAC;qBACzB,OAAO,EAAE;qBACT,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC9C,MAAM,oBAAoB,GACxB,SAAS,CAAC,SAAS,KAAK,IAAI;oBAC5B,WAAW,KAAK,SAAS;oBACzB,WAAW,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;oBACtC,WAAW,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;gBACvC,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC1B,GAAG,CAAC,IAAI,CAAC;wBACP,EAAE,EAAE,SAAS,CAAC,EAAE;wBAChB,KAAK,EAAE,GAAG,EAAE;wBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;gBACL,CAAC;gBACD,GAAG,CAAC,MAAM,EAAE,IAAI,CACd;oBACE,SAAS,EAAE,SAAS,CAAC,EAAE;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,EACD,yBAAyB,CAC1B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,GAAG,CAAC,MAAM,EAAE,IAAI,CACd,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAC1D,iDAAiD,CAClD,CAAC;gBACF,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;QACrB,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;KACxB,CAAC;AACJ,CAAC"}

package/dist/pending-blob-deletions.d.ts

@@ -0,0 +1,10 @@
+import type { PendingBlobDeletionStore } from "@opendatalabs/personal-server-ts-core/ports";
+/**
+ * File-backed retry markers for blob deletions whose gateway tombstone landed
+ * but whose storage DELETE did not finish: one exact (scope, version) key
+ * each. Lives next to `sync-cursor.json` under the server root; written
+ * atomically (tmp + rename) like the cursor. A version-1 file (whole scopes)
+ * is read as version-less markers the retry expands into exact keys.
+ */
+export declare function createFilePendingBlobDeletionStore(filePath: string): PendingBlobDeletionStore;
+//# sourceMappingURL=pending-blob-deletions.d.ts.map

package/dist/pending-blob-deletions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-blob-deletions.d.ts","sourceRoot":"","sources":["../src/pending-blob-deletions.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAEV,wBAAwB,EACzB,MAAM,6CAA6C,CAAC;AAOrD;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,GACf,wBAAwB,CA+B1B"}

package/dist/pending-blob-deletions.js

@@ -0,0 +1,38 @@
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { createPendingBlobDeletionStore, normalizePendingBlobDeletions, } from "@opendatalabs/personal-server-ts-core/sync";
+/**
+ * File-backed retry markers for blob deletions whose gateway tombstone landed
+ * but whose storage DELETE did not finish: one exact (scope, version) key
+ * each. Lives next to `sync-cursor.json` under the server root; written
+ * atomically (tmp + rename) like the cursor. A version-1 file (whole scopes)
+ * is read as version-less markers the retry expands into exact keys.
+ */
+export function createFilePendingBlobDeletionStore(filePath) {
+    const kv = {
+        async read() {
+            try {
+                const raw = await readFile(filePath, "utf8");
+                const parsed = JSON.parse(raw);
+                return normalizePendingBlobDeletions(parsed.keys ?? parsed.scopes);
+            }
+            catch (err) {
+                if (err instanceof Error &&
+                    "code" in err &&
+                    err.code === "ENOENT") {
+                    return null;
+                }
+                throw err;
+            }
+        },
+        async write(keys) {
+            await mkdir(dirname(filePath), { recursive: true });
+            const tmpPath = `${filePath}.tmp`;
+            const state = { version: 2, keys };
+            await writeFile(tmpPath, `${JSON.stringify(state, null, 2)}\n`);
+            await rename(tmpPath, filePath);
+        },
+    };
+    return createPendingBlobDeletionStore(kv);
+}
+//# sourceMappingURL=pending-blob-deletions.js.map

package/dist/pending-blob-deletions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-blob-deletions.js","sourceRoot":"","sources":["../src/pending-blob-deletions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,GAE9B,MAAM,4CAA4C,CAAC;AAWpD;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CAChD,QAAgB;IAEhB,MAAM,EAAE,GAA0B;QAChC,KAAK,CAAC,IAAI;YACR,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAI5B,CAAC;gBACF,OAAO,6BAA6B,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;YACrE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IACE,GAAG,YAAY,KAAK;oBACpB,MAAM,IAAI,GAAG;oBACZ,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAChD,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI;YACd,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,GAAG,QAAQ,MAAM,CAAC;YAClC,MAAM,KAAK,GAA6B,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;YAC7D,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;IACF,OAAO,8BAA8B,CAAC,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/routes/access-logs.d.ts

@@ -5,12 +5,19 @@
 import { Hono } from "hono";
 import type { Logger } from "pino";
 import type { AccessLogReader } from "@opendatalabs/personal-server-ts-core/logging/access-reader";
+import { type PersonalServerApiDispatchOptions } from "@opendatalabs/personal-server-ts-core/api";
+import type { TokenStore } from "../token-store.js";
+import type { GatewayClient } from "@opendatalabs/vana-sdk/node";
 export interface AccessLogsRouteDeps {
     logger: Logger;
     accessLogReader: AccessLogReader;
     serverOrigin: string | (() => string);
     serverOwner?: `0x${string}`;
+    gateway: GatewayClient;
     devToken?: string;
+    accessToken?: string;
+    tokenStore?: TokenStore;
+    mountPath?: PersonalServerApiDispatchOptions["basePath"];
 }
 export declare function accessLogsRoutes(deps: AccessLogsRouteDeps): Hono;
 //# sourceMappingURL=access-logs.d.ts.map

package/dist/routes/access-logs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access-logs.d.ts","sourceRoot":"","sources":["../../src/routes/access-logs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AAInG,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CA2BhE"}
+{"version":3,"file":"access-logs.d.ts","sourceRoot":"","sources":["../../src/routes/access-logs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,gCAAgC,CAAC,UAAU,CAAC,CAAC;CAC1D;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAwBhE"}

package/dist/routes/access-logs.js

@@ -3,28 +3,22 @@
  * Owner auth is wired in Task 4.1.
  */
 import { Hono } from "hono";
-import { createWeb3AuthMiddleware } from "../middleware/web3-auth.js";
-import { createOwnerCheckMiddleware } from "../middleware/owner-check.js";
+import { handlePersonalServerAccessLogsRequest, } from "@opendatalabs/personal-server-ts-core/api";
+import { createServerApiAuth } from "../api-auth.js";
 export function accessLogsRoutes(deps) {
     const app = new Hono();
-    const web3Auth = createWeb3AuthMiddleware({
+    const auth = createServerApiAuth({
         serverOrigin: deps.serverOrigin,
-        devToken: deps.devToken,
         serverOwner: deps.serverOwner,
+        gateway: deps.gateway,
+        devToken: deps.devToken,
+        accessToken: deps.accessToken,
+        tokenStore: deps.tokenStore,
     });
-    const ownerCheck = createOwnerCheckMiddleware(deps.serverOwner);
-    // GET / — list access logs with pagination (owner auth required)
-    app.get("/", web3Auth, ownerCheck, async (c) => {
-        const limitParam = c.req.query("limit");
-        const offsetParam = c.req.query("offset");
-        const limit = limitParam !== undefined ? parseInt(limitParam, 10) : 50;
-        const offset = offsetParam !== undefined ? parseInt(offsetParam, 10) : 0;
-        const result = await deps.accessLogReader.read({
-            limit: Number.isNaN(limit) ? 50 : limit,
-            offset: Number.isNaN(offset) ? 0 : offset,
-        });
-        return c.json(result);
-    });
+    app.all("*", (c) => handlePersonalServerAccessLogsRequest(c.req.raw, {
+        auth,
+        accessLogReader: deps.accessLogReader,
+    }, { basePath: deps.mountPath }));
     return app;
 }
 //# sourceMappingURL=access-logs.js.map

package/dist/routes/access-logs.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-logs.js","sourceRoot":"","sources":["../../src/routes/access-logs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAU1E,MAAM,UAAU,gBAAgB,CAAC,IAAyB;IACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACxC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEhE,iEAAiE;IACjE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAC7C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK;YACvC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;SAC1C,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"access-logs.js","sourceRoot":"","sources":["../../src/routes/access-logs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EACL,qCAAqC,GAEtC,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAerD,MAAM,UAAU,gBAAgB,CAAC,IAAyB;IACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,IAAI,GAAG,mBAAmB,CAAC;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,qCAAqC,CACnC,CAAC,CAAC,GAAG,CAAC,GAAG,EACT;QACE,IAAI;QACJ,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,EACD,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7B,CACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/auth-device.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Login Flow v2 — Nextcloud-style device login for self-hosted CLI authentication.
+ *
+ * POST /auth/device         — Initiate a login session
+ * GET  /auth/device/poll    — Poll for completion (token= query param)
+ * GET  /auth/device/approve — HTML approval page (session= query param)
+ * POST /auth/device/approve — Approve the session (session= query param)
+ */
+import "../hono-context.js";
+import { Hono, type Context } from "hono";
+import type { Logger } from "pino";
+import { DEVICE_POLL_INTERVAL_MS, DEVICE_SESSION_TTL_MS, type DeviceSessionStore } from "@opendatalabs/personal-server-ts-core/contracts";
+import type { TokenStore } from "../token-store.js";
+export interface LoginV2Deps {
+    logger: Logger;
+    serverOrigin: string | (() => string);
+    localApprovalOrigin?: string | (() => string | undefined);
+    serverOwner?: `0x${string}`;
+    tokenStore: TokenStore;
+    devToken?: string;
+    accessToken?: string;
+    allowInteractiveLogin?: boolean;
+    getRemoteAddress?: (c: Context) => string | undefined;
+}
+type InspectableDeviceSessionStore = DeviceSessionStore & {
+    clear(): void;
+    readonly size: number;
+    has(sessionId: string): boolean;
+};
+/** In-memory session store (short-lived device authorization state). */
+declare const sessions: InspectableDeviceSessionStore;
+export declare function authDeviceRoutes(deps: LoginV2Deps): Hono;
+export { sessions, DEVICE_SESSION_TTL_MS as SESSION_TTL_MS, DEVICE_POLL_INTERVAL_MS as POLL_INTERVAL_MS, };
+/**
+ * Read-only adapter exposing the device-flow session map to the standard
+ * RFC 8628 token endpoint (`POST /oauth/token` with
+ * `grant_type=urn:ietf:params:oauth:grant-type:device_code`). The
+ * `pollToken` issued at `POST /auth/device` is the OAuth2 `device_code`.
+ */
+export declare function createDeviceSessionLookup(): {
+    findByDeviceCode(deviceCode: string): {
+        status: "pending" | "approved";
+        accessToken: string | undefined;
+        accessTokenExpiresAt: string | undefined;
+        sessionId: string;
+    } | null;
+    consume(sessionId: string): void;
+};
+//# sourceMappingURL=auth-device.d.ts.map

package/dist/routes/auth-device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-device.d.ts","sourceRoot":"","sources":["../../src/routes/auth-device.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,oBAAoB,CAAC;AAE5B,OAAO,EAAE,IAAI,EAAE,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAKnC,OAAO,EAGL,uBAAuB,EACvB,qBAAqB,EAKrB,KAAK,kBAAkB,EACxB,MAAM,iDAAiD,CAAC;AAKzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAOpD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACtC,mBAAmB,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC;CACvD;AAED,KAAK,6BAA6B,GAAG,kBAAkB,GAAG;IACxD,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC,CAAC;AA0CF,wEAAwE;AACxE,QAAA,MAAM,QAAQ,+BAAwC,CAAC;AAsIvD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CA2MxD;AAkQD,OAAO,EACL,QAAQ,EACR,qBAAqB,IAAI,cAAc,EACvC,uBAAuB,IAAI,gBAAgB,GAC5C,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,yBAAyB;iCAER,MAAM;;;;;;uBAWhB,MAAM;EAI5B"}