@opendatalabs/personal-server-ts-server 0.0.1-canary.016adf9 → 0.0.1-canary.052d47e

package/dist/routes/data.d.ts

@@ -1,9 +1,15 @@
 import { Hono } from "hono";
+import { type PersonalServerApiDispatchOptions, type PersonalServerReadFulfillmentReporter } from "@opendatalabs/personal-server-ts-core/api";
 import type { HierarchyManagerOptions } from "@opendatalabs/personal-server-ts-core/storage/hierarchy";
 import type { IndexManager } from "@opendatalabs/personal-server-ts-core/storage/index";
-import type { GatewayClient } from "@opendatalabs/personal-server-ts-core/gateway";
+import type { DataPortabilityGatewayConfig, GatewayClient } from "@opendatalabs/vana-sdk/node";
 import type { AccessLogWriter } from "@opendatalabs/personal-server-ts-core/logging/access-log";
-import type { SyncManager } from "@opendatalabs/personal-server-ts-core/sync";
+import type { ScopeDeletionTracker, SyncManager } from "@opendatalabs/personal-server-ts-core/sync";
+import type { DataStoragePort, RuntimeAvailabilityPort } from "@opendatalabs/personal-server-ts-core/ports";
+import type { ServerSigner } from "@opendatalabs/personal-server-ts-core/signing";
+import type { TokenStore } from "../token-store.js";
+import type { WriteProofReplayStore, WriteSessionStore } from "@opendatalabs/personal-server-ts-core/write";
+import type { LineageGatewayPort } from "@opendatalabs/personal-server-ts-core/lineage";
 import type { Logger } from "pino";
 export interface DataRouteDeps {
     indexManager: IndexManager;
@@ -12,9 +18,68 @@ export interface DataRouteDeps {
     serverOrigin: string | (() => string);
     serverOwner?: `0x${string}`;
     gateway: GatewayClient;
+    /**
+     * Required for the X402 flow on GET /v1/data/:scope. Provides the EIP-712
+     * domain (escrowPaymentDomain + dataRegistryDomain) the server uses to
+     * recover X-PAYMENT signatures and the embedded accessRecord signatures.
+     */
+    gatewayConfig?: DataPortabilityGatewayConfig;
+    /**
+     * Gateway base URL. Used by the X402 forward path — the handler `fetch`es
+     * POST /v1/escrow/pay directly so it can inspect the gateway's structured
+     * error body (the SDK's gateway.payForOperation discards it).
+     */
+    gatewayUrl?: string;
+    /**
+     * When true, GET /v1/data/:scope enforces the X402 challenge / X-PAYMENT
+     * cycle on every read. Off-by-default so dev / test setups don't require
+     * builder-side payment signing.
+     */
+    paymentEnabled?: boolean;
     accessLogWriter: AccessLogWriter;
+    readFulfillmentReporter?: PersonalServerReadFulfillmentReporter;
     syncManager?: SyncManager | null;
+    /** Read-side tombstone memory; reads of a deleted scope answer 410. */
+    scopeDeletions?: ScopeDeletionTracker;
     devToken?: string;
+    accessToken?: string;
+    tokenStore?: TokenStore;
+    dataStorage?: DataStoragePort;
+    runtimeAvailability?: RuntimeAvailabilityPort;
+    /**
+     * Write API sessions (POST /v1/write/session). When present, the ingest
+     * endpoint accepts write-session bearer tokens for delegated builder
+     * writes; absent = owner-only ingest, unchanged.
+     */
+    writeSessionStore?: WriteSessionStore;
+    /** Replay guard for per-write proofs; defaults to in-memory (api-auth). */
+    writeProofReplayStore?: WriteProofReplayStore;
+    /**
+     * Powers the RECORD_DATA_ACCESS attestation embedded in 402 challenges.
+     * When supplied alongside serverOwner + paymentEnabled, every challenge
+     * carries a server-signed accessRecord. Required for the on-chain
+     * recordDataAccess to be scheduled by gateway.settle later.
+     */
+    serverSigner?: ServerSigner;
+    /**
+     * Personal server's own EOA address. Needed by the X402 verifier so it
+     * can confirm that the accessRecord echoed back in X-PAYMENT was signed
+     * by this server (not forged by a malicious builder).
+     */
+    serverAddress?: `0x${string}`;
+    /**
+     * Gateway access for derivative data: lineage source lookups on write, the
+     * signed lineage read and the cascade delete walk. Absent = lineage writes
+     * can only cite local scopes; lineage read / cascade answer 503 / 501.
+     */
+    lineageGateway?: LineageGatewayPort;
+    /** Post-commit write hook (derivative recompute on refresh). */
+    onDataWritten?: (event: {
+        scope: string;
+        collectedAt: string;
+        lineageSources?: string[];
+    }) => void;
+    mountPath?: PersonalServerApiDispatchOptions["basePath"];
 }
 export declare function dataRoutes(deps: DataRouteDeps): Hono;
 //# sourceMappingURL=data.d.ts.map

package/dist/routes/data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"data.d.ts","sourceRoot":"","sources":["../../src/routes/data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AACvG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AACxF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AACnF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAChG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAWnC,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAoRpD"}
+{"version":3,"file":"data.d.ts","sourceRoot":"","sources":["../../src/routes/data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAEL,KAAK,gCAAgC,EACrC,KAAK,qCAAqC,EAC3C,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AACvG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AACxF,OAAO,KAAK,EACV,4BAA4B,EAC5B,aAAa,EACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAChG,OAAO,KAAK,EACV,oBAAoB,EACpB,WAAW,EACZ,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EACV,eAAe,EACf,uBAAuB,EACxB,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+CAA+C,CAAC;AAClF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAQnC,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB;;;;OAIG;IACH,aAAa,CAAC,EAAE,4BAA4B,CAAC;IAC7C;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,uBAAuB,CAAC,EAAE,qCAAqC,CAAC;IAChE,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,uEAAuE;IACvE,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAC9C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,2EAA2E;IAC3E,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C;;;;;OAKG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;;OAIG;IACH,aAAa,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC9B;;;;OAIG;IACH,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,gEAAgE;IAChE,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QACtB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,KAAK,IAAI,CAAC;IACX,SAAS,CAAC,EAAE,gCAAgC,CAAC,UAAU,CAAC,CAAC;CAC1D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAwDpD"}

package/dist/routes/data.js

@@ -1,213 +1,53 @@
 import { Hono } from "hono";
-import { ScopeSchema } from "@opendatalabs/personal-server-ts-core/scopes";
-import { createDataFileEnvelope } from "@opendatalabs/personal-server-ts-core/schemas/data-file";
-import { generateCollectedAt, writeDataFile, readDataFile, deleteAllForScope, } from "@opendatalabs/personal-server-ts-core/storage/hierarchy";
+import { handlePersonalServerDataRequest, } from "@opendatalabs/personal-server-ts-core/api";
 import { createBodyLimit, DATA_INGEST_MAX_SIZE, } from "../middleware/body-limit.js";
-import { createWeb3AuthMiddleware } from "../middleware/web3-auth.js";
-import { createBuilderCheckMiddleware } from "../middleware/builder-check.js";
-import { createGrantCheckMiddleware } from "../middleware/grant-check.js";
-import { createAccessLogMiddleware } from "../middleware/access-log.js";
-import { createOwnerCheckMiddleware } from "../middleware/owner-check.js";
+import { createNodeDataStorage } from "../storage/node-data-storage.js";
+import { createServerApiAuth } from "../api-auth.js";
 export function dataRoutes(deps) {
     const app = new Hono();
-    // Create middleware instances
-    const web3Auth = createWeb3AuthMiddleware({
+    const dataStorage = deps.dataStorage ??
+        createNodeDataStorage({
+            indexManager: deps.indexManager,
+            hierarchyOptions: deps.hierarchyOptions,
+        });
+    const auth = createServerApiAuth({
         serverOrigin: deps.serverOrigin,
-        devToken: deps.devToken,
         serverOwner: deps.serverOwner,
-    });
-    const builderCheck = createBuilderCheckMiddleware(deps.gateway);
-    const grantCheck = createGrantCheckMiddleware({
         gateway: deps.gateway,
-        serverOwner: deps.serverOwner,
-    });
-    const accessLog = createAccessLogMiddleware(deps.accessLogWriter);
-    // GET /v1/data/:scope/versions — list versions for a scope (requires auth + builder, no grant)
-    app.get("/:scope/versions", web3Auth, builderCheck, async (c) => {
-        // 1. Validate scope
-        const scopeParam = c.req.param("scope");
-        const scopeResult = ScopeSchema.safeParse(scopeParam);
-        if (!scopeResult.success) {
-            return c.json({
-                error: "INVALID_SCOPE",
-                message: scopeResult.error.issues[0].message,
-            }, 400);
-        }
-        const scope = scopeResult.data;
-        // 2. Parse pagination
-        const limit = c.req.query("limit")
-            ? parseInt(c.req.query("limit"), 10)
-            : 20;
-        const offset = c.req.query("offset")
-            ? parseInt(c.req.query("offset"), 10)
-            : 0;
-        // 3. Query index
-        const entries = deps.indexManager.findByScope({ scope, limit, offset });
-        const total = deps.indexManager.countByScope(scope);
-        // 4. Return response
-        return c.json({
-            scope,
-            versions: entries.map((e) => ({
-                fileId: e.fileId,
-                collectedAt: e.collectedAt,
-            })),
-            total,
-            limit,
-            offset,
-        });
-    });
-    // GET /v1/data — list distinct scopes (requires auth + builder, no grant)
-    app.get("/", web3Auth, builderCheck, async (c) => {
-        const scopePrefix = c.req.query("scopePrefix");
-        const limit = c.req.query("limit")
-            ? parseInt(c.req.query("limit"), 10)
-            : 20;
-        const offset = c.req.query("offset")
-            ? parseInt(c.req.query("offset"), 10)
-            : 0;
-        const result = deps.indexManager.listDistinctScopes({
-            scopePrefix: scopePrefix || undefined,
-            limit,
-            offset,
-        });
-        return c.json({
-            scopes: result.scopes,
-            total: result.total,
-            limit,
-            offset,
-        });
-    });
-    // GET /v1/data/:scope — read a data file (requires auth + grant)
-    app.get("/:scope", web3Auth, builderCheck, grantCheck, accessLog, async (c) => {
-        // 1. Validate scope
-        const scopeParam = c.req.param("scope");
-        const scopeResult = ScopeSchema.safeParse(scopeParam);
-        if (!scopeResult.success) {
-            return c.json({
-                error: "INVALID_SCOPE",
-                message: scopeResult.error.issues[0].message,
-            }, 400);
-        }
-        const scope = scopeResult.data;
-        // 2. Determine lookup strategy: fileId, at, or latest
-        const fileIdParam = c.req.query("fileId");
-        const atParam = c.req.query("at");
-        let entry;
-        if (fileIdParam) {
-            entry = deps.indexManager.findByFileId(fileIdParam);
-        }
-        else if (atParam) {
-            entry = deps.indexManager.findClosestByScope(scope, atParam);
-        }
-        else {
-            entry = deps.indexManager.findLatestByScope(scope);
-        }
-        // 3. 404 if not found
-        if (!entry) {
-            return c.json({
-                error: "NOT_FOUND",
-                message: `No data found for scope "${scope}"`,
-            }, 404);
-        }
-        // 4. Read the data file from disk
-        const envelope = await readDataFile(deps.hierarchyOptions, scope, entry.collectedAt);
-        // 5. Return 200 with envelope
-        return c.json(envelope);
+        devToken: deps.devToken,
+        accessToken: deps.accessToken,
+        tokenStore: deps.tokenStore,
+        dataStorage,
+        runtimeAvailability: deps.runtimeAvailability,
+        writeSessionStore: deps.writeSessionStore,
+        writeProofReplayStore: deps.writeProofReplayStore,
     });
     app.use("/:scope", createBodyLimit(DATA_INGEST_MAX_SIZE));
-    app.post("/:scope", async (c) => {
-        // 1. Parse & validate scope
-        const scopeParam = c.req.param("scope");
-        const scopeResult = ScopeSchema.safeParse(scopeParam);
-        if (!scopeResult.success) {
-            return c.json({
-                error: "INVALID_SCOPE",
-                message: scopeResult.error.issues[0].message,
-            }, 400);
-        }
-        const scope = scopeResult.data;
-        // 2. Parse JSON body
-        let body;
-        try {
-            body = await c.req.json();
-        }
-        catch {
-            return c.json({
-                error: "INVALID_BODY",
-                message: "Request body must be valid JSON",
-            }, 400);
-        }
-        if (body === null || typeof body !== "object" || Array.isArray(body)) {
-            return c.json({
-                error: "INVALID_BODY",
-                message: "Request body must be a JSON object",
-            }, 400);
-        }
-        // 3. Look up schema via Gateway (strict: reject if not found)
-        let schemaUrl;
-        try {
-            const schema = await deps.gateway.getSchemaForScope(scope);
-            if (!schema) {
-                return c.json({
-                    error: "NO_SCHEMA",
-                    message: `No schema registered for scope: ${scope}`,
-                }, 400);
-            }
-            schemaUrl = schema.definitionUrl;
-        }
-        catch (err) {
-            deps.logger.error({ err, scope }, "Gateway schema lookup failed");
-            return c.json({
-                error: "GATEWAY_ERROR",
-                message: "Failed to look up schema for scope",
-            }, 502);
-        }
-        // 4. Generate collectedAt
-        const collectedAt = generateCollectedAt();
-        // 5. Construct envelope
-        const envelope = createDataFileEnvelope(scope, collectedAt, body, schemaUrl);
-        // 6. Write atomically
-        const writeResult = await writeDataFile(deps.hierarchyOptions, envelope);
-        // 7. Insert into index
-        deps.indexManager.insert({
-            fileId: null,
-            path: writeResult.relativePath,
-            scope,
-            collectedAt,
-            sizeBytes: writeResult.sizeBytes,
-        });
-        deps.logger.info({ scope, collectedAt, path: writeResult.relativePath }, "Data file ingested");
-        // 8. Notify sync manager of new data (if enabled)
-        let status = "stored";
-        if (deps.syncManager) {
-            deps.syncManager.notifyNewData();
-            status = "syncing";
-        }
-        // 9. Return 201
-        return c.json({ scope, collectedAt, status }, 201);
-    });
-    // Owner-check middleware (web3-auth + owner-check)
-    const ownerCheck = createOwnerCheckMiddleware(deps.serverOwner);
-    // DELETE /v1/data/:scope — delete all versions for a scope (owner auth required)
-    app.delete("/:scope", web3Auth, ownerCheck, async (c) => {
-        // 1. Validate scope
-        const scopeParam = c.req.param("scope");
-        const scopeResult = ScopeSchema.safeParse(scopeParam);
-        if (!scopeResult.success) {
-            return c.json({
-                error: "INVALID_SCOPE",
-                message: scopeResult.error.issues[0].message,
-            }, 400);
-        }
-        const scope = scopeResult.data;
-        // 2. Delete from index
-        const deletedCount = deps.indexManager.deleteByScope(scope);
-        // 3. Delete from filesystem
-        await deleteAllForScope(deps.hierarchyOptions, scope);
-        deps.logger.info({ scope, deletedCount }, "Scope deleted");
-        // 4. Return 204
-        return c.body(null, 204);
-    });
+    app.all("*", (c) => handlePersonalServerDataRequest(c.req.raw, {
+        storage: dataStorage,
+        auth,
+        accessLogWriter: deps.accessLogWriter,
+        readFulfillmentReporter: deps.readFulfillmentReporter,
+        syncManager: deps.syncManager ?? null,
+        scopeDeletions: deps.scopeDeletions,
+        runtimeAvailability: deps.runtimeAvailability,
+        serverSigner: deps.serverSigner,
+        serverOwner: deps.serverOwner,
+        serverAddress: deps.serverAddress,
+        gateway: deps.gateway,
+        gatewayConfig: deps.gatewayConfig,
+        gatewayUrl: deps.gatewayUrl,
+        paymentEnabled: deps.paymentEnabled,
+        lineageGateway: deps.lineageGateway,
+        onDataWritten: deps.onDataWritten,
+        // Network identifier for the 402 challenge body. We use the chain
+        // id as the convention since the gateway is chain-scoped; clients
+        // dispatch on the (scheme, chainId) pair, not the human name.
+        network: deps.gatewayConfig
+            ? `vana:${deps.gatewayConfig.chainId}`
+            : undefined,
+        logger: deps.logger,
+    }, { basePath: deps.mountPath }));
     return app;
 }
 //# sourceMappingURL=data.js.map

package/dist/routes/data.js.map

@@ -1 +1 @@
-{"version":3,"file":"data.js","sourceRoot":"","sources":["../../src/routes/data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,yDAAyD,CAAC;AACjG,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,iBAAiB,GAClB,MAAM,yDAAyD,CAAC;AAOjE,OAAO,EACL,eAAe,EACf,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAc1E,MAAM,UAAU,UAAU,CAAC,IAAmB;IAC5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACxC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,0BAA0B,CAAC;QAC5C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAElE,+FAA+F;IAC/F,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9D,oBAAoB;QACpB,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO;aAC7C,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC;QAE/B,sBAAsB;QACtB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAE,EAAE,EAAE,CAAC;YACrC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAClC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAE,EAAE,EAAE,CAAC;YACtC,CAAC,CAAC,CAAC,CAAC;QAEN,iBAAiB;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAEpD,qBAAqB;QACrB,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,KAAK;YACL,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC;YACH,KAAK;YACL,KAAK;YACL,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAE,EAAE,EAAE,CAAC;YACrC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAClC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAE,EAAE,EAAE,CAAC;YACtC,CAAC,CAAC,CAAC,CAAC;QAEN,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;YAClD,WAAW,EAAE,WAAW,IAAI,SAAS;YACrC,KAAK;YACL,MAAM;SACP,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK;YACL,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iEAAiE;IACjE,GAAG,CAAC,GAAG,CACL,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,SAAS,EACT,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,oBAAoB;QACpB,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO;aAC7C,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC;QAE/B,sDAAsD;QACtD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,IAAI,KAAK,CAAC;QACV,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,4BAA4B,KAAK,GAAG;aAC9C,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,IAAI,CAAC,gBAAgB,EACrB,KAAK,EACL,KAAK,CAAC,WAAW,CAClB,CAAC;QAEF,8BAA8B;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAE1D,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,4BAA4B;QAC5B,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO;aAC7C,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC;QAE/B,qBAAqB;QACrB,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,iCAAiC;aAC3C,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,oCAAoC;aAC9C,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,8DAA8D;QAC9D,IAAI,SAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,mCAAmC,KAAK,EAAE;iBACpD,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,8BAA8B,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,oCAAoC;aAC9C,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;QAE1C,wBAAwB;QACxB,MAAM,QAAQ,GAAG,sBAAsB,CACrC,KAAK,EACL,WAAW,EACX,IAA+B,EAC/B,SAAS,CACV,CAAC;QAEF,sBAAsB;QACtB,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAEzE,uBAAuB;QACvB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,WAAW,CAAC,YAAY;YAC9B,KAAK;YACL,WAAW;YACX,SAAS,EAAE,WAAW,CAAC,SAAS;SACjC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,YAAY,EAAE,EACtD,oBAAoB,CACrB,CAAC;QAEF,kDAAkD;QAClD,IAAI,MAAM,GAAyB,QAAQ,CAAC;QAC5C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YACjC,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;QAED,gBAAgB;QAChB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEhE,iFAAiF;IACjF,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,oBAAoB;QACpB,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO;aAC7C,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC;QAE/B,uBAAuB;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE5D,4BAA4B;QAC5B,MAAM,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QAEtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,eAAe,CAAC,CAAC;QAE3D,gBAAgB;QAChB,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"data.js","sourceRoot":"","sources":["../../src/routes/data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,+BAA+B,GAGhC,MAAM,2CAA2C,CAAC;AAwBnD,OAAO,EACL,eAAe,EACf,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAyErD,MAAM,UAAU,UAAU,CAAC,IAAmB;IAC5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,WAAW,GACf,IAAI,CAAC,WAAW;QAChB,qBAAqB,CAAC;YACpB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAC;IACL,MAAM,IAAI,GAAG,mBAAmB,CAAC;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW;QACX,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;KAClD,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,+BAA+B,CAC7B,CAAC,CAAC,GAAG,CAAC,GAAG,EACT;QACE,OAAO,EAAE,WAAW;QACpB,IAAI;QACJ,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,kEAAkE;QAClE,kEAAkE;QAClE,8DAA8D;QAC9D,OAAO,EAAE,IAAI,CAAC,aAAa;YACzB,CAAC,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE;YACtC,CAAC,CAAC,SAAS;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,EACD,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7B,CACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/derivatives.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Derivative compute routes: /v1/derivatives/questions. Thin Hono wrapper
+ * over the runtime-agnostic core handler; builder auth is the Write API's
+ * (write-session token + signed proof), owner auth is the usual owner gate.
+ */
+import { Hono } from "hono";
+import type { Logger } from "pino";
+import type { GatewayClient } from "@opendatalabs/vana-sdk/node";
+import { type PersonalServerDerivativesApiDeps } from "@opendatalabs/personal-server-ts-core/derivatives";
+import type { PersonalServerApiDispatchOptions } from "@opendatalabs/personal-server-ts-core/api";
+import type { DataStoragePort, RuntimeAvailabilityPort } from "@opendatalabs/personal-server-ts-core/ports";
+import type { WriteProofReplayStore, WriteSessionStore } from "@opendatalabs/personal-server-ts-core/write";
+import type { TokenStore } from "../token-store.js";
+export interface DerivativesRouteDeps {
+    logger: Logger;
+    serverOrigin: string | (() => string);
+    serverOwner?: `0x${string}`;
+    gateway: GatewayClient;
+    devToken?: string;
+    accessToken?: string;
+    tokenStore?: TokenStore;
+    dataStorage?: DataStoragePort;
+    runtimeAvailability?: RuntimeAvailabilityPort;
+    /** Shared with the data routes so builder tokens work on both. */
+    writeSessionStore?: WriteSessionStore;
+    writeProofReplayStore?: WriteProofReplayStore;
+    /** The compute layer (store + scheduler). Absent = every route answers 503. */
+    compute?: PersonalServerDerivativesApiDeps["compute"];
+    now?: () => Date;
+    mountPath?: PersonalServerApiDispatchOptions["basePath"];
+}
+export declare function derivativesRoutes(deps: DerivativesRouteDeps): Hono;
+//# sourceMappingURL=derivatives.d.ts.map

package/dist/routes/derivatives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derivatives.d.ts","sourceRoot":"","sources":["../../src/routes/derivatives.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAGL,KAAK,gCAAgC,EACtC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAClG,OAAO,KAAK,EACV,eAAe,EACf,uBAAuB,EACxB,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAIpD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAC9C,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,+EAA+E;IAC/E,OAAO,CAAC,EAAE,gCAAgC,CAAC,SAAS,CAAC,CAAC;IACtD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,gCAAgC,CAAC,UAAU,CAAC,CAAC;CAC1D;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CA6BlE"}

package/dist/routes/derivatives.js

@@ -0,0 +1,33 @@
+/**
+ * Derivative compute routes: /v1/derivatives/questions. Thin Hono wrapper
+ * over the runtime-agnostic core handler; builder auth is the Write API's
+ * (write-session token + signed proof), owner auth is the usual owner gate.
+ */
+import { Hono } from "hono";
+import { handlePersonalServerDerivativesRequest, MAX_QUESTION_BODY_BYTES, } from "@opendatalabs/personal-server-ts-core/derivatives";
+import { createBodyLimit } from "../middleware/body-limit.js";
+import { createServerApiAuth } from "../api-auth.js";
+export function derivativesRoutes(deps) {
+    const app = new Hono();
+    const auth = createServerApiAuth({
+        serverOrigin: deps.serverOrigin,
+        serverOwner: deps.serverOwner,
+        gateway: deps.gateway,
+        devToken: deps.devToken,
+        accessToken: deps.accessToken,
+        tokenStore: deps.tokenStore,
+        dataStorage: deps.dataStorage,
+        runtimeAvailability: deps.runtimeAvailability,
+        writeSessionStore: deps.writeSessionStore,
+        writeProofReplayStore: deps.writeProofReplayStore,
+    });
+    app.use("*", createBodyLimit(MAX_QUESTION_BODY_BYTES));
+    app.all("*", (c) => handlePersonalServerDerivativesRequest(c.req.raw, {
+        auth,
+        compute: deps.compute ?? null,
+        now: deps.now,
+        logger: deps.logger,
+    }, { basePath: deps.mountPath }));
+    return app;
+}
+//# sourceMappingURL=derivatives.js.map

package/dist/routes/derivatives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derivatives.js","sourceRoot":"","sources":["../../src/routes/derivatives.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EACL,sCAAsC,EACtC,uBAAuB,GAExB,MAAM,mDAAmD,CAAC;AAW3D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAqBrD,MAAM,UAAU,iBAAiB,CAAC,IAA0B;IAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,mBAAmB,CAAC;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;KAClD,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACvD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,sCAAsC,CACpC,CAAC,CAAC,GAAG,CAAC,GAAG,EACT;QACE,IAAI;QACJ,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,EACD,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7B,CACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/enclave-jobs.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import { type JobRequestEnvelope } from "@opendatalabs/vana-sdk/protocol/jobs";
+import type { JobExecuteResponse } from "../jobs/types.js";
+export interface EnclaveJobRouteDeps {
+    accessToken: string;
+    executeJob(envelope: JobRequestEnvelope): Promise<JobExecuteResponse>;
+}
+export declare function enclaveJobRoutes(deps: EnclaveJobRouteDeps): Hono;
+//# sourceMappingURL=enclave-jobs.d.ts.map

package/dist/routes/enclave-jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave-jobs.d.ts","sourceRoot":"","sources":["../../src/routes/enclave-jobs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,KAAK,EAEV,kBAAkB,EAEnB,MAAM,kBAAkB,CAAC;AAM1B,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACvE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CA0ChE"}

package/dist/routes/enclave-jobs.js

@@ -0,0 +1,104 @@
+import { timingSafeEqual } from "node:crypto";
+import { Hono } from "hono";
+import { isAddress, isHex } from "viem";
+import { JOB_OPERATIONS, JOB_PROTOCOL_VERSION, } from "@opendatalabs/vana-sdk/protocol/jobs";
+import { createBodyLimit } from "../middleware/body-limit.js";
+import { JobFailure } from "../jobs/worker.js";
+const MAX_JOB_BODY_BYTES = 256 * 1024;
+const BEARER_PREFIX = "Bearer ";
+export function enclaveJobRoutes(deps) {
+    const app = new Hono();
+    app.use("/execute", createBodyLimit(MAX_JOB_BODY_BYTES));
+    app.post("/execute", async (context) => {
+        if (!hasValidBearer(context.req.header("authorization"), deps.accessToken)) {
+            return context.json(jobError("AUTH_INVALID", "invalid bearer token"), 401);
+        }
+        let body;
+        try {
+            body = await context.req.json();
+        }
+        catch {
+            return context.json({ error: { message: "invalid request body" } }, 400);
+        }
+        if (!isJobEnvelope(body)) {
+            return context.json({ error: { message: "invalid request body" } }, 400);
+        }
+        try {
+            return context.json(await deps.executeJob(body), 200);
+        }
+        catch (error) {
+            if (error instanceof JobFailure) {
+                return context.json(jobError(error.code, error.message, error.retryable), statusFor(error.code));
+            }
+            return context.json(jobError("INTERNAL", "job execution failed", true), 500);
+        }
+    });
+    return app;
+}
+function hasValidBearer(header, expected) {
+    if (!header?.startsWith(BEARER_PREFIX)) {
+        return false;
+    }
+    const received = Buffer.from(header.slice(BEARER_PREFIX.length));
+    const target = Buffer.from(expected);
+    if (received.length !== target.length) {
+        return false;
+    }
+    return timingSafeEqual(received, target);
+}
+function isJobEnvelope(value) {
+    if (!isRecord(value) || !isRecord(value.request)) {
+        return false;
+    }
+    const request = value.request;
+    return (value.auth !== "" &&
+        typeof value.auth === "string" &&
+        request.v === JOB_PROTOCOL_VERSION &&
+        typeof request.jobId === "string" &&
+        isAddressValue(request.owner) &&
+        isAddressValue(request.builder) &&
+        isHexValue(request.builderPublicKey) &&
+        isHexValue(request.grantId) &&
+        typeof request.scope === "string" &&
+        JOB_OPERATIONS.some((operation) => operation === request.operation) &&
+        (request.pinnedVersion === null ||
+            typeof request.pinnedVersion === "string") &&
+        typeof request.deadline === "string");
+}
+function isAddressValue(value) {
+    return typeof value === "string" && isAddress(value);
+}
+function isHexValue(value) {
+    return typeof value === "string" && isHex(value);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function jobError(code, message, retryable = false) {
+    return { error: { code, message, retryable } };
+}
+function statusFor(code) {
+    switch (code) {
+        case "AUTH_INVALID":
+            return 401;
+        case "BUILDER_MISMATCH":
+        case "OWNER_MISMATCH":
+        case "GRANT_REVOKED":
+        case "GRANT_INVALID":
+        case "SIGNED_ARTIFACT_MISSING":
+        case "SIGNED_ARTIFACT_INVALID":
+        case "SERVER_NOT_REGISTERED":
+            return 403;
+        case "SCOPE_NOT_FOUND":
+            return 404;
+        case "VERSION_MISMATCH":
+            return 409;
+        case "DEADLINE_PASSED":
+            return 410;
+        case "RESULT_TOO_LARGE":
+            return 413;
+        case "INTERNAL":
+            return 500;
+    }
+}
+//# sourceMappingURL=enclave-jobs.js.map

package/dist/routes/enclave-jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave-jobs.js","sourceRoot":"","sources":["../../src/routes/enclave-jobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,KAAK,EAA0B,MAAM,MAAM,CAAC;AAChE,OAAO,EACL,cAAc,EACd,oBAAoB,GAErB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAM9D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;AACtC,MAAM,aAAa,GAAG,SAAS,CAAC;AAOhC,MAAM,UAAU,gBAAgB,CAAC,IAAyB;IACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACrC,IACE,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EACtE,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CACjB,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC,EAChD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;gBAChC,OAAO,OAAO,CAAC,IAAI,CACjB,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EACpD,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CACtB,CAAC;YACJ,CAAC;YAED,OAAO,OAAO,CAAC,IAAI,CACjB,QAAQ,CAAC,UAAU,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAClD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,MAA0B,EAAE,QAAgB;IAClE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAE9B,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,EAAE;QACjB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,KAAK,oBAAoB;QAClC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACjC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7B,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/B,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACpC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC;QAC3B,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACjC,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC;QACnE,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI;YAC7B,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC;QAC5C,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,QAAQ,CACf,IAAoB,EACpB,OAAe,EACf,SAAS,GAAG,KAAK;IAEjB,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAChB,IAAoB;IAEpB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,GAAG,CAAC;QACb,KAAK,kBAAkB,CAAC;QACxB,KAAK,gBAAgB,CAAC;QACtB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe,CAAC;QACrB,KAAK,yBAAyB,CAAC;QAC/B,KAAK,yBAAyB,CAAC;QAC/B,KAAK,uBAAuB;YAC1B,OAAO,GAAG,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,GAAG,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,GAAG,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb,KAAK,UAAU;YACb,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/routes/grants.d.ts

@@ -1,17 +1,24 @@
 /**
- * Grants routes — GET / (owner), POST / (create grant), POST /verify (public).
+ * Grants routes — GET / (owner), POST / (create grant), DELETE /:grantId
+ * (revoke grant), POST /verify (public).
  */
 import { Hono } from "hono";
 import type { Logger } from "pino";
-import type { GatewayClient } from "@opendatalabs/personal-server-ts-core/gateway";
+import type { DataPortabilityGatewayConfig, GatewayClient } from "@opendatalabs/vana-sdk/node";
+import { type PersonalServerApiDispatchOptions } from "@opendatalabs/personal-server-ts-core/api";
 import type { ServerSigner } from "@opendatalabs/personal-server-ts-core/signing";
+import type { TokenStore } from "../token-store.js";
 export interface GrantsRouteDeps {
     logger: Logger;
     gateway: GatewayClient;
+    gatewayConfig?: DataPortabilityGatewayConfig;
     serverOwner?: `0x${string}`;
     serverOrigin: string | (() => string);
     devToken?: string;
+    accessToken?: string;
+    tokenStore?: TokenStore;
     serverSigner?: ServerSigner;
+    mountPath?: PersonalServerApiDispatchOptions["basePath"];
 }
 export declare function grantsRoutes(deps: GrantsRouteDeps): Hono;
 //# sourceMappingURL=grants.d.ts.map

package/dist/routes/grants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/routes/grants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAKnF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+CAA+C,CAAC;AAIlF,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC;IACvB,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAoED,wBAAgB,YAAY,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAwMxD"}
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/routes/grants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EACV,4BAA4B,EAC5B,aAAa,EACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+CAA+C,CAAC;AAClF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,4BAA4B,CAAC;IAC7C,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,gCAAgC,CAAC,UAAU,CAAC,CAAC;CAC1D;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CA8BxD"}