@opendatalabs/personal-server-ts-server 0.0.1-canary.e9e40b0 → 0.0.1-canary.eee90fe

package/dist/ui/ps-lite-debug.js

@@ -52520,13 +52520,6 @@ function createStorageReadMethods(entries, entriesForScope) {
     }
   };
 }
-function readEnvelopeFromMap(envelopes, key) {
-  const envelope = envelopes.get(key);
-  if (!envelope) {
-    throw new Error("Envelope not found");
-  }
-  return envelope;
-}
 function summarizeScopes(entries, options) {
   const summaries = /* @__PURE__ */ new Map();
   for (const entry of entries) {
@@ -69648,33 +69641,16 @@ function toDataStoragePort(storage) {
   if ("listScopes" in storage) {
     return storage;
   }
-  return createMemoryPsLiteStorage(storage);
-}
-function createMemoryAccessLogStore() {
-  const logs = [];
-  return {
-    capabilities: { accessLogs: "memory" },
-    async write(entry) {
-      logs.push(entry);
-    },
-    async read(options) {
-      const limit = options?.limit ?? 50;
-      const offset = options?.offset ?? 0;
-      const sorted = [...logs].sort((a2, b2) => new Date(b2.timestamp).getTime() - new Date(a2.timestamp).getTime());
-      return {
-        logs: sorted.slice(offset, offset + limit),
-        total: sorted.length,
-        limit,
-        offset
-      };
-    }
-  };
+  throw new Error("PS Lite runtime requires a persistent DataStoragePort. Use createIndexedDbPsLiteRuntime() or createPersistentPsLiteStorage().");
 }
 function indexedDbAvailable() {
   return typeof indexedDB !== "undefined";
 }
 function createDefaultAccessLogStore() {
-  return indexedDbAvailable() ? createIndexedDbPsLiteAccessLogStore() : createMemoryAccessLogStore();
+  if (!indexedDbAvailable()) {
+    throw new Error("IndexedDB is required for default PS Lite access log persistence.");
+  }
+  return createIndexedDbPsLiteAccessLogStore();
 }
 function createLogId() {
   return globalThis.crypto?.randomUUID?.() ?? `log-${Date.now()}`;
@@ -69684,46 +69660,21 @@ function randomHex(byteLength) {
   globalThis.crypto.getRandomValues(bytes);
   return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
-function createMemoryTokenStore() {
-  const tokens = /* @__PURE__ */ new Map();
-  function normalizeExpiresAt(value) {
-    if (value == null)
-      return null;
-    const date9 = value instanceof Date ? value : new Date(value);
-    if (Number.isNaN(date9.getTime())) {
-      throw new Error("Invalid token expiry");
-    }
-    return date9.toISOString();
+function createDefaultTokenStore() {
+  if (!indexedDbAvailable()) {
+    throw new Error("IndexedDB is required for default PS Lite token storage.");
   }
-  function isExpired(expiresAt) {
-    return expiresAt ? new Date(expiresAt).getTime() <= Date.now() : false;
+  return createIndexedDbPsLiteTokenStore();
+}
+function createDefaultSaveConfig() {
+  if (!indexedDbAvailable()) {
+    throw new Error("IndexedDB is required for default PS Lite config persistence.");
   }
-  return {
-    capabilities: { tokens: "memory" },
-    async getTokens() {
-      return Array.from(tokens.entries()).filter(([, expiresAt]) => !isExpired(expiresAt)).map(([token]) => token);
-    },
-    async isValid(token) {
-      const expiresAt = tokens.get(token);
-      if (expiresAt === void 0)
-        return false;
-      if (isExpired(expiresAt)) {
-        tokens.delete(token);
-        return false;
-      }
-      return true;
-    },
-    async addToken(token, options) {
-      tokens.set(token, normalizeExpiresAt(options?.expiresAt));
-    },
-    async removeToken(token) {
-      tokens.delete(token);
-    }
+  const stateStore = createIndexedDbPsLiteStateStore();
+  return async (nextConfig) => {
+    await savePsLiteConfig(stateStore, nextConfig);
   };
 }
-function createDefaultTokenStore() {
-  return indexedDbAvailable() ? createIndexedDbPsLiteTokenStore() : createMemoryTokenStore();
-}
 function bearerToken(request2) {
   const authorization = request2.headers.get("authorization");
   if (!authorization?.startsWith("Bearer "))
@@ -69733,75 +69684,6 @@ function bearerToken(request2) {
 async function readForm(request2) {
   return new URLSearchParams(await request2.text());
 }
-function createMemoryPsLiteStorage(adapter = { kind: "indexeddb" }) {
-  const entries = /* @__PURE__ */ new Map();
-  const envelopes = /* @__PURE__ */ new Map();
-  let nextId = 1;
-  function envelopeKey(scope, collectedAt) {
-    return `${scope}
-${collectedAt}`;
-  }
-  function entriesForScope(scope) {
-    return sortEntries(Array.from(entries.values()).filter((entry) => entry.scope === scope));
-  }
-  const storagePort = {
-    kind: adapter.kind === "custom" ? "custom" : "browser-indexeddb-opfs",
-    capabilities: {
-      metadata: "memory",
-      files: "memory",
-      opfsAvailable: false
-    },
-    ...createStorageReadMethods(() => entries.values(), entriesForScope),
-    findByFileId(fileId) {
-      return Array.from(entries.values()).find((entry) => entry.fileId === fileId);
-    },
-    findUnsynced(options) {
-      const unsynced = Array.from(entries.values()).filter((entry) => entry.fileId === null).sort((a2, b2) => a2.createdAt.localeCompare(b2.createdAt));
-      return options?.limit === void 0 ? unsynced : unsynced.slice(0, options.limit);
-    },
-    async readEnvelope(scope, collectedAt) {
-      return readEnvelopeFromMap(envelopes, envelopeKey(scope, collectedAt));
-    },
-    async writeEnvelope(envelope) {
-      envelopes.set(envelopeKey(envelope.scope, envelope.collectedAt), envelope);
-      return {
-        path: `${envelope.scope}/${envelope.collectedAt}.json`,
-        relativePath: `${envelope.scope}/${envelope.collectedAt}.json`,
-        sizeBytes: new TextEncoder().encode(JSON.stringify(envelope)).length
-      };
-    },
-    insertEntry(entry) {
-      const indexed = {
-        ...entry,
-        schemaId: entry.schemaId ?? null,
-        id: nextId,
-        createdAt: (/* @__PURE__ */ new Date()).toISOString()
-      };
-      nextId += 1;
-      entries.set(entry.path, indexed);
-      return indexed;
-    },
-    updateFileId(path, fileId) {
-      const entry = entries.get(path);
-      if (!entry)
-        return false;
-      entries.set(path, { ...entry, fileId });
-      return true;
-    },
-    async deleteScope(scope) {
-      let deleted = 0;
-      for (const [path, entry] of entries.entries()) {
-        if (entry.scope === scope) {
-          entries.delete(path);
-          envelopes.delete(envelopeKey(entry.scope, entry.collectedAt));
-          deleted += 1;
-        }
-      }
-      return deleted;
-    }
-  };
-  return storagePort;
-}
 function parseScope(pathPart) {
   const scopeResult = parseDataScopeContract(decodeURIComponent(pathPart));
   if (!scopeResult.ok)
@@ -69833,13 +69715,15 @@ function createPsLiteRuntime(options) {
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   const auth = options.auth ?? createMissingAuthAdapter();
   const dataStorage = toDataStoragePort(options.storage);
-  const accessLogStore = createDefaultAccessLogStore();
-  const accessLogReader = options.accessLogReader ?? accessLogStore;
-  const accessLogWriter = options.accessLogWriter ?? accessLogStore;
+  let accessLogReader = options.accessLogReader;
+  let accessLogWriter = options.accessLogWriter;
+  if (!accessLogReader || !accessLogWriter) {
+    const accessLogStore = createDefaultAccessLogStore();
+    accessLogReader ??= accessLogStore;
+    accessLogWriter ??= accessLogStore;
+  }
   const tokenStore = options.tokenStore ?? createDefaultTokenStore();
-  const saveConfig = options.saveConfig ?? (indexedDbAvailable() ? async (nextConfig) => {
-    await savePsLiteConfig(createIndexedDbPsLiteStateStore(), nextConfig);
-  } : void 0);
+  const saveConfig = options.saveConfig ?? createDefaultSaveConfig();
   const deviceSessions = createMemoryDeviceSessionStore();
   async function withProtocolErrors(handler) {
     try {
@@ -70036,7 +69920,7 @@ function createPsLiteRuntime(options) {
           const stateCapabilities = {
             tokens: tokenStore.capabilities?.tokens ?? "custom",
             accessLogs: accessLogReader.capabilities?.accessLogs ?? "custom",
-            config: options.stateCapabilities?.config ?? (options.saveConfig ? "custom" : saveConfig ? "indexeddb" : "memory")
+            config: options.stateCapabilities?.config ?? (options.saveConfig ? "custom" : "indexeddb")
           };
           return jsonResponse({
             status: active ? "healthy" : "unavailable",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opendatalabs/personal-server-ts-server",
-  "version": "0.0.1-canary.e9e40b0",
+  "version": "0.0.1-canary.eee90fe",
   "description": "Hono HTTP server for the Vana Personal Server — routes, middleware, composition root",
   "license": "MIT",
   "repository": {
@@ -40,7 +40,7 @@
   },
   "dependencies": {
     "@hono/node-server": "^1.19.13",
-    "@opendatalabs/personal-server-ts-core": "0.0.1-canary.e9e40b0",
+    "@opendatalabs/personal-server-ts-core": "0.0.1-canary.eee90fe",
     "@opendatalabs/personal-server-ts-lite": "*",
     "@opendatalabs/vana-sdk": "file:../../../vana-sdk/packages/vana-sdk",
     "hono": "^4.12.18",

package/dist/middleware/grant-check.d.ts

@@ -1,12 +0,0 @@
-import type { MiddlewareHandler } from "hono";
-import type { GatewayClient } from "@opendatalabs/vana-sdk/node";
-/**
- * Enforces grant for data reads. Must run AFTER web3-auth middleware.
- * Fetches grant from Gateway, checks revocation/expiry/scope/grantee.
- * Sets c.set('grant', grantResponse).
- */
-export declare function createGrantCheckMiddleware(params: {
-    gateway: GatewayClient;
-    serverOwner?: `0x${string}`;
-}): MiddlewareHandler;
-//# sourceMappingURL=grant-check.d.ts.map

package/dist/middleware/grant-check.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"grant-check.d.ts","sourceRoot":"","sources":["../../src/middleware/grant-check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAmCjE;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,OAAO,EAAE,aAAa,CAAC;IACvB,WAAW,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;CAC7B,GAAG,iBAAiB,CAyEpB"}

package/dist/middleware/grant-check.js

@@ -1,90 +0,0 @@
-import { scopeCoveredByGrant } from "@opendatalabs/vana-sdk/node";
-import { GrantRequiredError, GrantRevokedError, GrantExpiredError, ScopeMismatchError, InvalidSignatureError, ProtocolError, } from "@opendatalabs/personal-server-ts-core/errors";
-/**
- * Parse the opaque `grant` string from the gateway response.
- * The grant field is a JSON-serialized EIP-712 grant payload containing
- * { user, builder, scopes, expiresAt, nonce }.
- */
-function parseGrantPayload(grantString) {
-    try {
-        const parsed = JSON.parse(grantString);
-        return {
-            scopes: Array.isArray(parsed.scopes) ? parsed.scopes : [],
-            expiresAt: typeof parsed.expiresAt === "number" ? parsed.expiresAt : 0,
-        };
-    }
-    catch {
-        return { scopes: [], expiresAt: 0 };
-    }
-}
-/**
- * Enforces grant for data reads. Must run AFTER web3-auth middleware.
- * Fetches grant from Gateway, checks revocation/expiry/scope/grantee.
- * Sets c.set('grant', grantResponse).
- */
-export function createGrantCheckMiddleware(params) {
-    const { gateway } = params;
-    return async (c, next) => {
-        if (c.get("isPolicyBypass") ?? c.get("devBypass")) {
-            await next();
-            return;
-        }
-        const auth = c.get("auth");
-        try {
-            // 1. Extract grantId from auth payload
-            const grantId = auth.payload.grantId;
-            if (!grantId) {
-                throw new GrantRequiredError({
-                    reason: "No grantId in authorization payload",
-                });
-            }
-            // 2. Fetch grant from Gateway
-            const grant = await gateway.getGrant(grantId);
-            if (!grant) {
-                throw new GrantRequiredError({ reason: "Grant not found", grantId });
-            }
-            // 3. Check revocation — gateway uses revokedAt (null = not revoked)
-            if (grant.revokedAt !== null) {
-                throw new GrantRevokedError({ grantId: grant.id });
-            }
-            // 4. Parse the opaque grant string to extract scopes and expiresAt
-            const grantPayload = parseGrantPayload(grant.grant);
-            // 5. Check expiry (expiresAt > 0 && expiresAt < now means expired)
-            if (grantPayload.expiresAt > 0) {
-                const now = Math.floor(Date.now() / 1000);
-                if (grantPayload.expiresAt < now) {
-                    throw new GrantExpiredError({ expiresAt: grantPayload.expiresAt });
-                }
-            }
-            // 6. Check scope coverage — extract scope from route param
-            const scope = c.req.param("scope");
-            if (scope && !scopeCoveredByGrant(scope, grantPayload.scopes)) {
-                throw new ScopeMismatchError({
-                    requestedScope: scope,
-                    grantedScopes: grantPayload.scopes,
-                });
-            }
-            // 7. Check grantee — signer must be the grant's builder.
-            //    Gateway returns granteeId (bytes32 builderId), not an address.
-            //    Look up builder by signer address, then compare builder.id === grant.granteeId.
-            const builder = await gateway.getBuilder(auth.signer);
-            if (!builder || builder.id !== grant.granteeId) {
-                throw new InvalidSignatureError({
-                    reason: "Request signer is not the grant builder",
-                    expected: grant.granteeId,
-                    actual: auth.signer,
-                });
-            }
-            // Set grant on context for downstream handlers
-            c.set("grant", grant);
-            await next();
-        }
-        catch (err) {
-            if (err instanceof ProtocolError) {
-                return c.json(err.toJSON(), err.code);
-            }
-            throw err;
-        }
-    };
-}
-//# sourceMappingURL=grant-check.js.map

package/dist/middleware/grant-check.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"grant-check.js","sourceRoot":"","sources":["../../src/middleware/grant-check.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,aAAa,GACd,MAAM,8CAA8C,CAAC;AAGtD;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,WAAmB;IAI5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAGpC,CAAC;QACF,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YACzD,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;SACvE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAG1C;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAE3B,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAgB,CAAC;QAE1C,IAAI,CAAC;YACH,uCAAuC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,kBAAkB,CAAC;oBAC3B,MAAM,EAAE,qCAAqC;iBAC9C,CAAC,CAAC;YACL,CAAC;YAED,8BAA8B;YAC9B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,oEAAoE;YACpE,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC;YAED,mEAAmE;YACnE,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAEpD,mEAAmE;YACnE,IAAI,YAAY,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;gBAC1C,IAAI,YAAY,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;oBACjC,MAAM,IAAI,iBAAiB,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;YAED,2DAA2D;YAC3D,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,kBAAkB,CAAC;oBAC3B,cAAc,EAAE,KAAK;oBACrB,aAAa,EAAE,YAAY,CAAC,MAAM;iBACnC,CAAC,CAAC;YACL,CAAC;YAED,yDAAyD;YACzD,oEAAoE;YACpE,qFAAqF;YACrF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,qBAAqB,CAAC;oBAC9B,MAAM,EAAE,yCAAyC;oBACjD,QAAQ,EAAE,KAAK,CAAC,SAAS;oBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;YAED,+CAA+C;YAC/C,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACtB,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,IAAiB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}