npm - @opendatalabs/personal-server-ts-server - Versions diffs - 0.2.0 → 1.0.1 - Mend

@opendatalabs/personal-server-ts-server 0.2.0 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (177) hide show

package/dist/api-auth.d.ts +16 -0
package/dist/api-auth.d.ts.map +1 -0
package/dist/api-auth.js +97 -0
package/dist/api-auth.js.map +1 -0
package/dist/api.d.ts +4 -0
package/dist/api.d.ts.map +1 -1
package/dist/api.js +3 -0
package/dist/api.js.map +1 -1
package/dist/app.d.ts +46 -1
package/dist/app.d.ts.map +1 -1
package/dist/app.js +102 -30
package/dist/app.js.map +1 -1
package/dist/bootstrap.d.ts +11 -3
package/dist/bootstrap.d.ts.map +1 -1
package/dist/bootstrap.js +266 -33
package/dist/bootstrap.js.map +1 -1
package/dist/client.d.ts +17 -0
package/dist/client.d.ts.map +1 -0
package/dist/client.js +368 -0
package/dist/client.js.map +1 -0
package/dist/config/defaults.d.ts +12 -0
package/dist/config/defaults.d.ts.map +1 -0
package/dist/config/defaults.js +14 -0
package/dist/config/defaults.js.map +1 -0
package/dist/config/index.d.ts +4 -0
package/dist/config/index.d.ts.map +1 -0
package/dist/config/index.js +4 -0
package/dist/config/index.js.map +1 -0
package/dist/config/loader.d.ts +8 -0
package/dist/config/loader.d.ts.map +1 -0
package/dist/config/loader.js +74 -0
package/dist/config/loader.js.map +1 -0
package/dist/config/paths.d.ts +9 -0
package/dist/config/paths.d.ts.map +1 -0
package/dist/config/paths.js +22 -0
package/dist/config/paths.js.map +1 -0
package/dist/hono-context.d.ts +14 -0
package/dist/hono-context.d.ts.map +1 -0
package/dist/hono-context.js +2 -0
package/dist/hono-context.js.map +1 -0
package/dist/index.js +64 -12
package/dist/index.js.map +1 -1
package/dist/keys/server-account.d.ts +28 -0
package/dist/keys/server-account.d.ts.map +1 -0
package/dist/keys/server-account.js +48 -0
package/dist/keys/server-account.js.map +1 -0
package/dist/logger/index.d.ts +5 -0
package/dist/logger/index.d.ts.map +1 -0
package/dist/logger/index.js +9 -0
package/dist/logger/index.js.map +1 -0
package/dist/logging/access-log.d.ts +15 -0
package/dist/logging/access-log.d.ts.map +1 -0
package/dist/logging/access-log.js +25 -0
package/dist/logging/access-log.js.map +1 -0
package/dist/logging/access-reader.d.ts +19 -0
package/dist/logging/access-reader.d.ts.map +1 -0
package/dist/logging/access-reader.js +50 -0
package/dist/logging/access-reader.js.map +1 -0
package/dist/middleware/access-log.d.ts.map +1 -1
package/dist/middleware/access-log.js +8 -2
package/dist/middleware/access-log.js.map +1 -1
package/dist/middleware/builder-check.d.ts +2 -2
package/dist/middleware/builder-check.d.ts.map +1 -1
package/dist/middleware/builder-check.js +7 -2
package/dist/middleware/builder-check.js.map +1 -1
package/dist/middleware/owner-check.js +1 -1
package/dist/middleware/owner-check.js.map +1 -1
package/dist/middleware/web3-auth.d.ts +12 -0
package/dist/middleware/web3-auth.d.ts.map +1 -1
package/dist/middleware/web3-auth.js +27 -31
package/dist/middleware/web3-auth.js.map +1 -1
package/dist/migrations/local-state.d.ts +21 -0
package/dist/migrations/local-state.d.ts.map +1 -0
package/dist/migrations/local-state.js +106 -0
package/dist/migrations/local-state.js.map +1 -0
package/dist/routes/access-logs.d.ts +7 -0
package/dist/routes/access-logs.d.ts.map +1 -1
package/dist/routes/access-logs.js +11 -17
package/dist/routes/access-logs.js.map +1 -1
package/dist/routes/auth-device.d.ts +49 -0
package/dist/routes/auth-device.d.ts.map +1 -0
package/dist/routes/auth-device.js +581 -0
package/dist/routes/auth-device.js.map +1 -0
package/dist/routes/data.d.ts +42 -1
package/dist/routes/data.d.ts.map +1 -1
package/dist/routes/data.js +36 -201
package/dist/routes/data.js.map +1 -1
package/dist/routes/grants.d.ts +9 -2
package/dist/routes/grants.d.ts.map +1 -1
package/dist/routes/grants.js +18 -196
package/dist/routes/grants.js.map +1 -1
package/dist/routes/health.d.ts +7 -1
package/dist/routes/health.d.ts.map +1 -1
package/dist/routes/health.js +39 -2
package/dist/routes/health.js.map +1 -1
package/dist/routes/mcp.d.ts +93 -6
package/dist/routes/mcp.d.ts.map +1 -1
package/dist/routes/mcp.js +526 -53
package/dist/routes/mcp.js.map +1 -1
package/dist/routes/oauth-token.d.ts +56 -0
package/dist/routes/oauth-token.d.ts.map +1 -0
package/dist/routes/oauth-token.js +49 -0
package/dist/routes/oauth-token.js.map +1 -0
package/dist/routes/sync.d.ts +7 -0
package/dist/routes/sync.d.ts.map +1 -1
package/dist/routes/sync.js +12 -39
package/dist/routes/sync.js.map +1 -1
package/dist/routes/ui-config.d.ts.map +1 -1
package/dist/routes/ui-config.js +17 -82
package/dist/routes/ui-config.js.map +1 -1
package/dist/routes/ui-registration.d.ts +9 -0
package/dist/routes/ui-registration.d.ts.map +1 -0
package/dist/routes/ui-registration.js +217 -0
package/dist/routes/ui-registration.js.map +1 -0
package/dist/routes/ui.d.ts +1 -0
package/dist/routes/ui.d.ts.map +1 -1
package/dist/routes/ui.js +46 -4
package/dist/routes/ui.js.map +1 -1
package/dist/storage/hierarchy.d.ts +29 -0
package/dist/storage/hierarchy.d.ts.map +1 -0
package/dist/storage/hierarchy.js +241 -0
package/dist/storage/hierarchy.js.map +1 -0
package/dist/storage/index-manager.d.ts +53 -0
package/dist/storage/index-manager.d.ts.map +1 -0
package/dist/storage/index-manager.js +167 -0
package/dist/storage/index-manager.js.map +1 -0
package/dist/storage/index-schema.d.ts +5 -0
package/dist/storage/index-schema.d.ts.map +1 -0
package/dist/storage/index-schema.js +62 -0
package/dist/storage/index-schema.js.map +1 -0
package/dist/storage/node-data-storage.d.ts +9 -0
package/dist/storage/node-data-storage.d.ts.map +1 -0
package/dist/storage/node-data-storage.js +84 -0
package/dist/storage/node-data-storage.js.map +1 -0
package/dist/sync-cursor.d.ts +15 -0
package/dist/sync-cursor.d.ts.map +1 -0
package/dist/sync-cursor.js +110 -0
package/dist/sync-cursor.js.map +1 -0
package/dist/token-store.d.ts +22 -0
package/dist/token-store.d.ts.map +1 -0
package/dist/token-store.js +120 -0
package/dist/token-store.js.map +1 -0
package/dist/tunnel/auth.d.ts +4 -0
package/dist/tunnel/auth.d.ts.map +1 -1
package/dist/tunnel/auth.js +2 -1
package/dist/tunnel/auth.js.map +1 -1
package/dist/tunnel/config.d.ts +1 -0
package/dist/tunnel/config.d.ts.map +1 -1
package/dist/tunnel/config.js +1 -1
package/dist/tunnel/config.js.map +1 -1
package/dist/tunnel/manager.d.ts +21 -1
package/dist/tunnel/manager.d.ts.map +1 -1
package/dist/tunnel/manager.js +78 -23
package/dist/tunnel/manager.js.map +1 -1
package/dist/tunnel/verify.d.ts +1 -1
package/dist/tunnel/verify.d.ts.map +1 -1
package/dist/tunnel/verify.js +8 -2
package/dist/tunnel/verify.js.map +1 -1
package/dist/ui/browser_tls_rustls_bg.wasm +0 -0
package/dist/ui/index.html +2192 -0
package/dist/ui/ps-lite-debug.d.ts +93 -0
package/dist/ui/ps-lite-debug.d.ts.map +1 -0
package/dist/ui/ps-lite-debug.js +129415 -0
package/dist/ui/ps-lite-debug.js.map +1 -0
package/package.json +20 -8
package/dist/middleware/grant-check.d.ts +0 -12
package/dist/middleware/grant-check.d.ts.map +0 -1
package/dist/middleware/grant-check.js +0 -90
package/dist/middleware/grant-check.js.map +0 -1
package/dist/oauth/provider.d.ts +0 -55
package/dist/oauth/provider.d.ts.map +0 -1
package/dist/oauth/provider.js +0 -160
package/dist/oauth/provider.js.map +0 -1
package/dist/oauth/routes.d.ts +0 -10
package/dist/oauth/routes.d.ts.map +0 -1
package/dist/oauth/routes.js +0 -206
package/dist/oauth/routes.js.map +0 -1

package/dist/ui/index.html ADDED Viewed

@@ -0,0 +1,2192 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Personal Server — Dev UI</title>
+    <style>
+      *,
+      *::before,
+      *::after {
+        box-sizing: border-box;
+        margin: 0;
+        padding: 0;
+      }
+      :root {
+        --bg: #0a0a0a;
+        --surface: #141414;
+        --surface-2: #1e1e1e;
+        --border: #2a2a2a;
+        --text: #e0e0e0;
+        --text-dim: #808080;
+        --accent: #00ff88;
+        --accent-dim: #00cc6a;
+        --error: #ff4444;
+        --warn: #ffaa00;
+        --mono:
+          "SF Mono", "Cascadia Code", "Fira Code", "JetBrains Mono", monospace;
+        --sans:
+          -apple-system, BlinkMacSystemFont, "Segoe UI", system-ui, sans-serif;
+        --radius: 4px;
+      }
+      body {
+        font-family: var(--mono);
+        font-size: 13px;
+        background: var(--bg);
+        color: var(--text);
+        line-height: 1.5;
+        min-height: 100vh;
+      }
+      header {
+        display: flex;
+        align-items: center;
+        gap: 16px;
+        padding: 12px 20px;
+        border-bottom: 1px solid var(--border);
+        background: var(--surface);
+      }
+      header h1 {
+        font-size: 14px;
+        font-weight: 600;
+        letter-spacing: 0.5px;
+        color: var(--accent);
+      }
+      .header-spacer {
+        flex: 1;
+      }
+      .runtime-picker {
+        display: flex;
+        align-items: center;
+        gap: 8px;
+        color: var(--text-dim);
+        font-size: 12px;
+      }
+      .runtime-picker select {
+        width: auto;
+        min-width: 128px;
+      }
+      header .status-dot {
+        width: 8px;
+        height: 8px;
+        border-radius: 50%;
+        background: var(--accent);
+        animation: pulse 2s ease-in-out infinite;
+      }
+      @keyframes pulse {
+        0%,
+        100% {
+          opacity: 1;
+        }
+        50% {
+          opacity: 0.4;
+        }
+      }
+      nav {
+        display: flex;
+        gap: 0;
+        border-bottom: 1px solid var(--border);
+        background: var(--surface);
+        overflow-x: auto;
+      }
+      nav button {
+        font-family: var(--mono);
+        font-size: 12px;
+        padding: 10px 16px;
+        background: none;
+        border: none;
+        border-bottom: 2px solid transparent;
+        color: var(--text-dim);
+        cursor: pointer;
+        white-space: nowrap;
+        transition:
+          color 0.15s,
+          border-color 0.15s;
+      }
+      nav button:hover {
+        color: var(--text);
+      }
+      nav button.active {
+        color: var(--accent);
+        border-bottom-color: var(--accent);
+      }
+      main {
+        padding: 20px;
+        max-width: 1200px;
+      }
+      .panel {
+        display: none;
+      }
+      .panel.active {
+        display: block;
+      }
+      .card {
+        background: var(--surface);
+        border: 1px solid var(--border);
+        border-radius: var(--radius);
+        padding: 16px;
+        margin-bottom: 16px;
+      }
+      .card-title {
+        font-size: 11px;
+        text-transform: uppercase;
+        letter-spacing: 1px;
+        color: var(--text-dim);
+        margin-bottom: 12px;
+      }
+      .kv-grid {
+        display: grid;
+        grid-template-columns: auto 1fr;
+        gap: 6px 16px;
+      }
+      .kv-grid .label {
+        color: var(--text-dim);
+      }
+      .kv-grid .value {
+        color: var(--text);
+        word-break: break-all;
+      }
+      .kv-grid .value.ok {
+        color: var(--accent);
+      }
+      .kv-grid .value.err {
+        color: var(--error);
+      }
+      .kv-grid .value.warn {
+        color: var(--warn);
+      }
+      textarea,
+      input,
+      select {
+        font-family: var(--mono);
+        font-size: 13px;
+        background: var(--surface-2);
+        color: var(--text);
+        border: 1px solid var(--border);
+        border-radius: var(--radius);
+        padding: 8px 10px;
+        width: 100%;
+        outline: none;
+        transition: border-color 0.15s;
+      }
+      textarea:focus,
+      input:focus,
+      select:focus {
+        border-color: var(--accent);
+      }
+      textarea {
+        resize: vertical;
+        min-height: 300px;
+      }
+      button.btn {
+        font-family: var(--mono);
+        font-size: 12px;
+        padding: 8px 16px;
+        border: 1px solid var(--accent);
+        border-radius: var(--radius);
+        background: transparent;
+        color: var(--accent);
+        cursor: pointer;
+        transition:
+          background 0.15s,
+          color 0.15s;
+      }
+      button.btn:hover {
+        background: var(--accent);
+        color: var(--bg);
+      }
+      button.btn:disabled {
+        opacity: 0.4;
+        cursor: not-allowed;
+      }
+      button.btn.secondary {
+        border-color: var(--border);
+        color: var(--text-dim);
+      }
+      button.btn.secondary:hover {
+        background: var(--surface-2);
+        color: var(--text);
+      }
+      .toolbar {
+        display: flex;
+        gap: 8px;
+        align-items: center;
+        margin-bottom: 12px;
+        flex-wrap: wrap;
+      }
+      .toolbar input,
+      .toolbar select {
+        width: auto;
+        min-width: 120px;
+      }
+      .msg {
+        padding: 8px 12px;
+        border-radius: var(--radius);
+        font-size: 12px;
+        margin-bottom: 12px;
+      }
+      .msg.ok {
+        background: rgba(0, 255, 136, 0.1);
+        color: var(--accent);
+        border: 1px solid rgba(0, 255, 136, 0.2);
+      }
+      .msg.err {
+        background: rgba(255, 68, 68, 0.1);
+        color: var(--error);
+        border: 1px solid rgba(255, 68, 68, 0.2);
+      }
+      pre.json {
+        background: var(--surface-2);
+        border: 1px solid var(--border);
+        border-radius: var(--radius);
+        padding: 12px;
+        overflow-x: auto;
+        white-space: pre-wrap;
+        word-break: break-all;
+        font-size: 12px;
+        max-height: 500px;
+        overflow-y: auto;
+      }
+      table {
+        width: 100%;
+        border-collapse: collapse;
+        font-size: 12px;
+      }
+      th,
+      td {
+        text-align: left;
+        padding: 8px 12px;
+        border-bottom: 1px solid var(--border);
+      }
+      th {
+        color: var(--text-dim);
+        font-weight: 500;
+        text-transform: uppercase;
+        font-size: 11px;
+        letter-spacing: 0.5px;
+      }
+      td {
+        color: var(--text);
+      }
+      tr:hover td {
+        background: var(--surface-2);
+      }
+      .empty {
+        color: var(--text-dim);
+        font-style: italic;
+        padding: 20px 0;
+        text-align: center;
+      }
+      .loading::after {
+        content: "";
+        display: inline-block;
+        width: 12px;
+        height: 12px;
+        border: 2px solid var(--border);
+        border-top-color: var(--accent);
+        border-radius: 50%;
+        animation: spin 0.6s linear infinite;
+        margin-left: 8px;
+        vertical-align: middle;
+      }
+      @keyframes spin {
+        to {
+          transform: rotate(360deg);
+        }
+      }
+    </style>
+  </head>
+  <body>
+    <header>
+      <div class="status-dot"></div>
+      <h1>PERSONAL SERVER</h1>
+      <div class="header-spacer"></div>
+      <label class="runtime-picker">
+        <span>Runtime</span>
+        <select id="runtime-select">
+          <option value="node">Node</option>
+          <option value="browser">Browser</option>
+        </select>
+      </label>
+    </header>
+    <nav id="tabs">
+      <button class="active" data-tab="health">Health</button>
+      <button data-tab="config">Config</button>
+      <button data-tab="data">Data</button>
+      <button data-tab="grants">Grants</button>
+      <button data-tab="logs">Access Logs</button>
+      <button data-tab="api">API Tester</button>
+      <button data-tab="connect">Connect</button>
+    </nav>
+    <main>
+      <!-- Health Panel -->
+      <div id="panel-health" class="panel active">
+        <div class="card">
+          <div class="card-title">Server Status</div>
+          <div class="toolbar">
+            <button class="btn secondary" id="register-node-server-btn">
+              Register Server
+            </button>
+          </div>
+          <div
+            id="node-registration-status"
+            style="margin-bottom: 8px; font-size: 12px; color: var(--text-dim)"
+          ></div>
+          <div id="health-content" class="kv-grid">
+            <span class="label">status</span
+            ><span class="value">loading...</span>
+          </div>
+        </div>
+      </div>
+      <!-- Config Panel -->
+      <div id="panel-config" class="panel">
+        <div class="card">
+          <div class="card-title">Server Configuration</div>
+          <div id="config-msg"></div>
+          <textarea id="config-editor" spellcheck="false"></textarea>
+          <div style="margin-top: 12px; display: flex; gap: 8px">
+            <button class="btn" id="save-config-btn">Save</button>
+            <button class="btn secondary" id="reload-config-btn">Reload</button>
+          </div>
+        </div>
+      </div>
+      <!-- Data Panel -->
+      <div id="panel-data" class="panel">
+        <div class="card">
+          <div class="card-title">Add Data</div>
+          <label
+            style="
+              display: block;
+              margin-bottom: 4px;
+              font-size: 11px;
+              color: var(--text-dim);
+            "
+            >Scope</label
+          >
+          <input
+            id="add-data-scope"
+            type="text"
+            value="instagram.profile"
+            style="margin-bottom: 12px"
+          />
+          <label
+            style="
+              display: block;
+              margin-bottom: 4px;
+              font-size: 11px;
+              color: var(--text-dim);
+            "
+            >JSON Data</label
+          >
+          <textarea
+            id="add-data-json"
+            spellcheck="false"
+            style="min-height: 120px; margin-bottom: 12px"
+          >
+{
+  "username": "vana_debug",
+  "full_name": "Vana Debug Profile",
+  "bio": "Schema-shaped sample profile for Personal Server debug UI testing.",
+  "biography_with_entities": {
+    "raw_text": "Schema-shaped sample profile for Personal Server debug UI testing.",
+    "entities": []
+  },
+  "pronouns": ["they/them"],
+  "bio_links": [
+    {
+      "title": "Vana",
+      "url": "https://www.vana.org",
+      "lynx_url": "https://www.vana.org"
+    }
+  ],
+  "external_url": "https://www.vana.org",
+  "external_url_linkshimmed": "https://www.vana.org",
+  "fb_profile_biolink": null,
+  "profile_pic_url": "https://www.vana.org/favicon.ico",
+  "hd_profile_pic_url": "https://www.vana.org/favicon.ico",
+  "pk": "2605080001",
+  "id": "2605080001",
+  "fbid": null,
+  "eimu_id": null,
+  "follower_count": 1234,
+  "following_count": 321,
+  "media_count": 42,
+  "highlight_reel_count": 3,
+  "pinned_channels_list_count": 0,
+  "is_private": false,
+  "is_verified": true,
+  "is_verified_by_mv4b": false,
+  "is_business": false,
+  "is_professional_account": true,
+  "is_supervised_user": false,
+  "is_supervision_enabled": false,
+  "is_joined_recently": false,
+  "is_embeds_disabled": false,
+  "is_regulated_c18": false,
+  "hide_like_and_view_counts": false,
+  "ai_agent_type": null,
+  "has_clips": true,
+  "has_channel": false,
+  "has_guides": false,
+  "has_ar_effects": false,
+  "has_chaining": true,
+  "country_block": false,
+  "should_show_category": true,
+  "should_show_public_contacts": false,
+  "show_account_transparency_details": true,
+  "transparency_label": null,
+  "transparency_product": null,
+  "business": {
+    "is_business_account": false,
+    "category_name": "Technology",
+    "business_category_name": null,
+    "overall_category_name": null,
+    "category_enum": null,
+    "business_contact_method": null,
+    "business_email": null,
+    "business_phone_number": null,
+    "business_address_json": null
+  },
+  "viewer_relationship": {
+    "followed_by_viewer": true,
+    "follows_viewer": false,
+    "requested_by_viewer": false,
+    "has_requested_viewer": false,
+    "blocked_by_viewer": false,
+    "has_blocked_viewer": false,
+    "restricted_by_viewer": false,
+    "is_guardian_of_viewer": false,
+    "is_supervised_by_viewer": false,
+    "mutual_followed_by_count": 7
+  },
+  "collected_at": "2026-05-08T00:00:00.000Z",
+  "debug_source": "debug-ui"
+}</textarea>
+          <button class="btn" id="submit-data-btn">Submit</button>
+          <div id="add-data-msg" style="margin-top: 12px"></div>
+        </div>
+        <div class="card">
+          <div class="card-title">Data Scopes</div>
+          <div class="toolbar">
+            <button class="btn" id="refresh-data-btn">Refresh</button>
+            <button class="btn secondary" id="sync-now-btn">Sync Now</button>
+          </div>
+          <div id="sync-msg" style="margin-bottom: 12px"></div>
+          <div id="data-scopes"></div>
+        </div>
+        <div id="data-detail" class="card" style="display: none">
+          <div class="card-title">Scope Data</div>
+          <div id="data-detail-content"></div>
+        </div>
+      </div>
+      <!-- Grants Panel -->
+      <div id="panel-grants" class="panel">
+        <div class="card">
+          <div class="card-title">Active Grants</div>
+          <div class="toolbar">
+            <button class="btn" id="refresh-grants-btn">Refresh</button>
+          </div>
+          <div id="grants-content"></div>
+        </div>
+      </div>
+      <!-- Access Logs Panel -->
+      <div id="panel-logs" class="panel">
+        <div class="card">
+          <div class="card-title">Access Logs</div>
+          <div class="toolbar">
+            <button class="btn" id="refresh-logs-btn">Refresh</button>
+          </div>
+          <div id="logs-content"></div>
+        </div>
+      </div>
+      <!-- API Tester Panel -->
+      <div id="panel-api" class="panel">
+        <div class="card">
+          <div class="card-title">API Tester</div>
+          <div class="toolbar">
+            <select id="api-method">
+              <option>GET</option>
+              <option>POST</option>
+              <option>PUT</option>
+              <option>DELETE</option>
+            </select>
+            <input
+              id="api-path"
+              type="text"
+              placeholder="/health"
+              value="/health"
+              style="flex: 1"
+            />
+            <button class="btn" id="send-api-btn">Send</button>
+          </div>
+          <textarea
+            id="api-body"
+            placeholder="Request body (JSON, for POST/PUT)"
+            style="min-height: 100px; margin-bottom: 12px"
+          ></textarea>
+          <div class="card-title">Response</div>
+          <div
+            id="api-status"
+            style="margin-bottom: 8px; font-size: 12px; color: var(--text-dim)"
+          ></div>
+          <pre class="json" id="api-response">No request sent yet.</pre>
+        </div>
+      </div>
+      <!-- Connect Panel -->
+      <div id="panel-connect" class="panel">
+        <div class="card">
+          <div class="card-title">Connect Simulator</div>
+          <label
+            style="
+              display: block;
+              margin-bottom: 4px;
+              font-size: 11px;
+              color: var(--text-dim);
+            "
+            >Session Relay URL</label
+          >
+          <input
+            id="connect-relay-url"
+            type="text"
+            value="https://session-relay-git-dev-opendatalabs.vercel.app"
+            style="margin-bottom: 12px"
+          />
+          <label
+            style="
+              display: block;
+              margin-bottom: 4px;
+              font-size: 11px;
+              color: var(--text-dim);
+            "
+            >Deep Link URL</label
+          >
+          <input
+            id="connect-deep-link"
+            type="text"
+            placeholder="Paste deep link URL from the test builder app"
+            style="margin-bottom: 12px"
+          />
+          <div style="display: flex; gap: 8px">
+            <button class="btn" id="connect-parse-btn">Parse</button>
+          </div>
+          <div id="connect-parsed" style="margin-top: 12px; display: none">
+            <div class="kv-grid" id="connect-parsed-info"></div>
+          </div>
+        </div>
+        <div class="card" id="connect-flow-card" style="display: none">
+          <div class="card-title">Flow Steps</div>
+          <div
+            style="
+              display: flex;
+              gap: 8px;
+              flex-wrap: wrap;
+              margin-bottom: 12px;
+            "
+          >
+            <button class="btn" id="connect-claim-btn" disabled>
+              1. Claim Session
+            </button>
+            <button class="btn" id="connect-grant-btn" disabled>
+              2. Create Grant
+            </button>
+            <button class="btn" id="connect-approve-btn" disabled>
+              3. Approve Session
+            </button>
+          </div>
+          <div style="display: flex; gap: 8px; margin-bottom: 12px">
+            <button class="btn" id="connect-auto-btn" disabled>
+              Auto-Approve All
+            </button>
+            <button class="btn secondary" id="connect-deny-btn" disabled>
+              Deny
+            </button>
+          </div>
+          <div class="card-title" style="margin-top: 8px">Progress Log</div>
+          <div
+            id="connect-log"
+            style="
+              background: var(--surface-2);
+              border: 1px solid var(--border);
+              border-radius: var(--radius);
+              padding: 8px 12px;
+              font-size: 11px;
+              max-height: 300px;
+              overflow-y: auto;
+              white-space: pre-wrap;
+            "
+          ></div>
+        </div>
+        <div class="card" id="connect-result-card" style="display: none">
+          <div class="card-title">Result</div>
+          <pre class="json" id="connect-result"></pre>
+        </div>
+      </div>
+    </main>
+    <script>
+      const TOKEN = "__DEV_TOKEN__";
+      const BASE = window.location.origin;
+      window.__PS_LITE_BOOTSTRAP__ = "__PS_LITE_BOOTSTRAP_JSON__";
+      const runtimeState = {
+        active: "node",
+        registration: { ownerPrivateKeyConfigured: false },
+        devTokenExpired: false,
+      };
+      // --- DOM helpers ---
+      function el(id) {
+        return document.getElementById(id);
+      }
+      function clearChildren(node) {
+        while (node.firstChild) node.removeChild(node.firstChild);
+      }
+      function text(str) {
+        return document.createTextNode(String(str != null ? str : ""));
+      }
+      function createEl(tag, attrs, children) {
+        const e = document.createElement(tag);
+        if (attrs) {
+          for (const [k, v] of Object.entries(attrs)) {
+            if (k === "style" && typeof v === "object") {
+              Object.assign(e.style, v);
+            } else if (k.startsWith("on") && typeof v === "function") {
+              e.addEventListener(k.slice(2), v);
+            } else {
+              e.setAttribute(k, v);
+            }
+          }
+        }
+        if (children) {
+          for (const c of Array.isArray(children) ? children : [children]) {
+            if (typeof c === "string") e.appendChild(text(c));
+            else if (c) e.appendChild(c);
+          }
+        }
+        return e;
+      }
+      function showMsg(container, message, type) {
+        clearChildren(container);
+        const div = createEl("div", { class: "msg " + type });
+        div.textContent = message;
+        container.appendChild(div);
+      }
+      function showJson(container, data) {
+        clearChildren(container);
+        const pre = createEl("pre", { class: "json" });
+        pre.textContent =
+          typeof data === "string" ? data : JSON.stringify(data, null, 2);
+        container.appendChild(pre);
+      }
+      function showEmpty(container, message) {
+        clearChildren(container);
+        const div = createEl("div", { class: "empty" });
+        div.textContent = message;
+        container.appendChild(div);
+      }
+      function showLoading(container) {
+        clearChildren(container);
+        const span = createEl("span", { class: "loading" });
+        span.textContent = "Loading";
+        container.appendChild(span);
+      }
+      // --- Tabs ---
+      el("tabs").addEventListener("click", function (e) {
+        if (e.target.tagName !== "BUTTON") return;
+        document.querySelectorAll("#tabs button").forEach(function (b) {
+          b.classList.remove("active");
+        });
+        document.querySelectorAll(".panel").forEach(function (p) {
+          p.classList.remove("active");
+        });
+        e.target.classList.add("active");
+        el("panel-" + e.target.dataset.tab).classList.add("active");
+        var tab = e.target.dataset.tab;
+        if (tab === "health") loadHealth();
+        if (tab === "config") loadConfig();
+        if (tab === "data") loadScopes();
+        if (tab === "grants") loadGrants();
+        if (tab === "logs") loadAccessLogs();
+      });
+      // --- Fetch helper ---
+      async function api(path, opts) {
+        opts = opts || {};
+        var headers = Object.assign(
+          { Authorization: "Bearer " + TOKEN },
+          opts.headers || {},
+        );
+        var res = await fetch(
+          BASE + path,
+          Object.assign({}, opts, { headers: headers }),
+        );
+        var txt = await res.text();
+        var json;
+        try {
+          json = JSON.parse(txt);
+        } catch (e) {
+          json = txt;
+        }
+        var result = { status: res.status, ok: res.ok, data: json };
+        if (isDevTokenAuthError(result)) {
+          runtimeState.devTokenExpired = true;
+          throw new Error("Dev UI token expired. Reload this page.");
+        }
+        return result;
+      }
+      function isDevTokenAuthError(result) {
+        var error = result.data && result.data.error;
+        var errorCode = error && (error.errorCode || error.code);
+        return (
+          result.status === 401 &&
+          (errorCode === "UNAUTHORIZED" || errorCode === "INVALID_SIGNATURE")
+        );
+      }
+      async function runtimeApi(path, opts) {
+        return runtimeState.active === "browser"
+          ? psLiteApiRequest(path, opts)
+          : api(path, opts);
+      }
+      async function runtimeListGrants() {
+        return runtimeState.active === "browser"
+          ? psLiteClient().listGrants()
+          : api("/v1/grants", { auth: "owner" });
+      }
+      async function runtimeCreateGrant(body) {
+        return runtimeState.active === "browser"
+          ? psLiteClient().createGrant(body)
+          : api("/v1/grants", {
+              method: "POST",
+              auth: "owner",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify(body),
+            });
+      }
+      async function runtimeRevokeGrant(grantId) {
+        var path = "/v1/grants/" + encodeURIComponent(grantId);
+        return runtimeState.active === "browser"
+          ? psLiteClient().revokeGrant(grantId)
+          : api(path, { method: "DELETE", auth: "owner" });
+      }
+      function runtimeName() {
+        return runtimeState.active === "browser" ? "Browser" : "Node";
+      }
+      function registrationRequired(healthData) {
+        return Boolean(
+          healthData &&
+          healthData.registration &&
+          healthData.registration.registered === false,
+        );
+      }
+      async function loadRegistrationStatus() {
+        try {
+          var result = await api("/ui/api/registration");
+          if (result.ok && result.data) {
+            runtimeState.registration = result.data;
+          }
+        } catch (e) {
+          if (runtimeState.devTokenExpired) {
+            runtimeState.registration = { ownerPrivateKeyConfigured: false };
+          }
+        }
+        updateRegisterButton();
+      }
+      function selectedPanel() {
+        var active = document.querySelector("#tabs button.active");
+        return active ? active.dataset.tab : "health";
+      }
+      function refreshSelectedPanel() {
+        var tab = selectedPanel();
+        if (tab === "health") loadHealth();
+        if (tab === "config") loadConfig();
+        if (tab === "data") loadScopes();
+        if (tab === "grants") loadGrants();
+        if (tab === "logs") loadAccessLogs();
+      }
+      function updateRegisterButton() {
+        var btn = el("register-node-server-btn");
+        if (!btn) return;
+        btn.disabled =
+          runtimeState.devTokenExpired ||
+          !runtimeState.registration.ownerPrivateKeyConfigured;
+        btn.title = runtimeState.devTokenExpired
+          ? "Reload this page to refresh the Dev UI token"
+          : btn.disabled
+            ? "Set VANA_OWNER_PRIVATE_KEY to register servers"
+            : "Register selected runtime";
+      }
+      function isPublicServerUrl(url) {
+        try {
+          var parsed = new URL(url);
+          var host = parsed.hostname.toLowerCase();
+          return (
+            (parsed.protocol === "https:" || parsed.protocol === "http:") &&
+            host !== "localhost" &&
+            host !== "127.0.0.1" &&
+            host !== "0.0.0.0" &&
+            host !== "::1" &&
+            host !== "[::1]" &&
+            host !== "ps-lite.local" &&
+            !host.startsWith("10.") &&
+            !host.startsWith("192.168.") &&
+            !/^172\.(1[6-9]|2\d|3[0-1])\./.test(host)
+          );
+        } catch (e) {
+          return false;
+        }
+      }
+      async function selectedHealth() {
+        if (runtimeState.active === "node") return api("/health");
+        var result = await psLiteClient().status();
+        if (result.ok && result.data && !result.data.runtime) {
+          result = await psLiteClient().activate();
+        }
+        var data = result.data || {};
+        var runtime = data.runtime || {};
+        var relay = data.relay || {};
+        var registration = runtime.registration;
+        if (registration && relay.publicUrl) {
+          registration = Object.assign({}, registration, {
+            serverUrl: relay.publicUrl,
+          });
+        }
+        return {
+          status: result.status,
+          ok: result.ok,
+          data: Object.assign({}, runtime, {
+            apiOrigin: relay.publicUrl || runtime.apiOrigin,
+            registration: registration,
+            relay: relay,
+            runtime: {
+              kind: "ps-lite",
+              available: runtime.active !== false,
+            },
+          }),
+        };
+      }
+      el("runtime-select").addEventListener("change", function (e) {
+        runtimeState.active = e.target.value;
+        el("node-registration-status").textContent = "";
+        refreshSelectedPanel();
+      });
+      // --- Health ---
+      async function loadHealth() {
+        var container = el("health-content");
+        try {
+          await loadRegistrationStatus();
+          var result = await selectedHealth();
+          var d = result.data;
+          clearChildren(container);
+          var items = [
+            ["runtime", runtimeName(), result.ok ? "ok" : "err"],
+            ["status", d.status, d.status === "healthy" ? "ok" : "err"],
+            ["version", d.version || "\u2014", ""],
+            [
+              "uptime",
+              typeof d.uptime === "number" ? formatUptime(d.uptime) : "\u2014",
+              "",
+            ],
+            [
+              "api url",
+              d.apiOrigin || BASE,
+              d.apiOrigin && d.apiOrigin !== BASE ? "ok" : "warn",
+            ],
+            ["owner", d.owner ?? "not configured", d.owner ? "ok" : "err"],
+          ];
+          if (runtimeState.active === "browser") {
+            items.push([
+              "relay",
+              d.relay && d.relay.connected
+                ? "connected"
+                : d.relay
+                  ? d.relay.status
+                  : "disconnected",
+              d.relay && d.relay.connected ? "ok" : "warn",
+            ]);
+          } else if (d.tunnel) {
+            var tunnelValue = d.tunnel.status || "unknown";
+            if (
+              d.tunnel.status === "connected" &&
+              d.tunnel.routable === false
+            ) {
+              tunnelValue =
+                d.registration && d.registration.registered
+                  ? "connected (not routable)"
+                  : "connected (not registered)";
+            }
+            items.push([
+              "tunnel",
+              tunnelValue,
+              d.tunnel.status === "connected" && d.tunnel.routable !== false
+                ? "ok"
+                : "warn",
+            ]);
+          }
+          if (d.identity) {
+            var registered =
+              d.registration && typeof d.registration.registered === "boolean"
+                ? d.registration.registered
+                : d.identity.serverId !== null;
+            items.push([
+              "address",
+              d.identity.address,
+              registered ? "ok" : "warn",
+            ]);
+            items.push(["publicKey", truncAddr(d.identity.publicKey), ""]);
+            items.push([
+              "identity",
+              registered ? "registered" : "not registered",
+              registered ? "ok" : "warn",
+            ]);
+          } else {
+            items.push(["identity", "not configured", ""]);
+          }
+          for (var i = 0; i < items.length; i++) {
+            var lbl = createEl("span", { class: "label" });
+            lbl.textContent = items[i][0];
+            var val = createEl("span", {
+              class: "value" + (items[i][2] ? " " + items[i][2] : ""),
+            });
+            val.textContent = items[i][1];
+            // Copy-on-click for publicKey and API URLs
+            if (
+              (items[i][0] === "publicKey" && d.identity) ||
+              items[i][0] === "api url"
+            ) {
+              var fullValue =
+                items[i][0] === "publicKey" && d.identity
+                  ? d.identity.publicKey
+                  : items[i][1];
+              val.style.cursor = "pointer";
+              val.title = "Click to copy";
+              val.addEventListener(
+                "click",
+                (function (copyValue, displayValue) {
+                  return function () {
+                    navigator.clipboard.writeText(copyValue);
+                    val.textContent = "copied!";
+                    setTimeout(function () {
+                      val.textContent = displayValue;
+                    }, 1200);
+                  };
+                })(fullValue, items[i][1]),
+              );
+            }
+            container.appendChild(lbl);
+            container.appendChild(val);
+          }
+          if (d.identity && !(d.registration && d.registration.registered)) {
+            var noteEl = createEl("span", {
+              class: "label",
+              style: { gridColumn: "1 / -1", marginTop: "8px" },
+            });
+            noteEl.textContent = runtimeState.registration
+              .ownerPrivateKeyConfigured
+              ? "Register this runtime once the public API URL is reachable."
+              : "Set VANA_OWNER_PRIVATE_KEY to enable server registration.";
+            noteEl.style.color = "var(--text-dim)";
+            noteEl.style.fontSize = "11px";
+            noteEl.style.fontStyle = "italic";
+            container.appendChild(noteEl);
+          }
+        } catch (e) {
+          clearChildren(container);
+          var lbl2 = createEl("span", { class: "label" });
+          lbl2.textContent = "status";
+          var val2 = createEl("span", { class: "value err" });
+          val2.textContent = "unreachable";
+          container.appendChild(lbl2);
+          container.appendChild(val2);
+        }
+      }
+      async function registerNodeServer() {
+        var statusEl = el("node-registration-status");
+        statusEl.textContent = "Registering " + runtimeName() + " server...";
+        try {
+          var health = await selectedHealth();
+          var serverUrl =
+            health.data &&
+            health.data.registration &&
+            health.data.registration.serverUrl;
+          if (!isPublicServerUrl(serverUrl)) {
+            statusEl.style.color = "var(--error)";
+            statusEl.textContent =
+              "Registration requires a reachable public API URL.";
+            return;
+          }
+          var result = await api("/ui/api/registration/server", {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+              gatewayConfig: health.data.gatewayConfig,
+              registration: health.data.registration,
+            }),
+          });
+          statusEl.style.color = result.ok ? "var(--accent)" : "var(--error)";
+          statusEl.textContent = result.ok
+            ? "Registered " + runtimeName() + " server"
+            : (result.data && result.data.error && result.data.error.message) ||
+              "Registration failed";
+          await loadHealth();
+        } catch (e) {
+          statusEl.style.color = "var(--error)";
+          statusEl.textContent = e.message;
+        }
+      }
+      function formatUptime(s) {
+        var h = Math.floor(s / 3600);
+        var m = Math.floor((s % 3600) / 60);
+        var sec = s % 60;
+        return h + "h " + m + "m " + sec + "s";
+      }
+      loadHealth();
+      setInterval(loadHealth, 5000);
+      // --- Config ---
+      async function loadConfig() {
+        var editor = el("config-editor");
+        var msg = el("config-msg");
+        clearChildren(msg);
+        try {
+          var result = await runtimeApi("/ui/api/config", { auth: "owner" });
+          if (result.ok) {
+            editor.value = JSON.stringify(result.data, null, 2);
+          } else {
+            showMsg(msg, "Failed to load " + runtimeName() + " config", "err");
+          }
+        } catch (e) {
+          showMsg(msg, "Error loading config", "err");
+        }
+      }
+      async function saveConfig() {
+        var editor = el("config-editor");
+        var msg = el("config-msg");
+        clearChildren(msg);
+        var body;
+        try {
+          body = JSON.parse(editor.value);
+        } catch (e) {
+          showMsg(msg, "Invalid JSON", "err");
+          return;
+        }
+        try {
+          var result = await runtimeApi("/ui/api/config", {
+            method: "PUT",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(body),
+          });
+          if (result.ok) {
+            showMsg(
+              msg,
+              "Config saved. Restart server to apply changes.",
+              "ok",
+            );
+            editor.value = JSON.stringify(result.data.config, null, 2);
+          } else {
+            var errMsg =
+              (result.data && result.data.error && result.data.error.message) ||
+              "Save failed";
+            showMsg(msg, errMsg, "err");
+          }
+        } catch (e) {
+          showMsg(msg, "Error saving config", "err");
+        }
+      }
+      el("save-config-btn").addEventListener("click", saveConfig);
+      el("reload-config-btn").addEventListener("click", loadConfig);
+      el("register-node-server-btn").addEventListener(
+        "click",
+        registerNodeServer,
+      );
+      // --- Data ---
+      async function loadScopes() {
+        var container = el("data-scopes");
+        el("data-detail").style.display = "none";
+        showLoading(container);
+        try {
+          var result = await runtimeApi("/v1/data?limit=100");
+          if (!result.ok) {
+            showJson(container, result.data);
+            return;
+          }
+          if (!result.data.scopes || result.data.scopes.length === 0) {
+            showEmpty(container, "No " + runtimeName() + " data scopes found.");
+            return;
+          }
+          var syncResult = await runtimeApi("/v1/sync/status", {
+            auth: "owner",
+          }).catch(function (e) {
+            return { ok: false, data: { error: e.message } };
+          });
+          var health = await selectedHealth().catch(function () {
+            return { data: {} };
+          });
+          var needsRegistration = registrationRequired(health.data);
+          var latestByScope = {};
+          var fileIds = [];
+          for (var vIdx = 0; vIdx < result.data.scopes.length; vIdx++) {
+            var scopeItem = result.data.scopes[vIdx];
+            var scopeName =
+              typeof scopeItem === "string"
+                ? scopeItem
+                : scopeItem.scope || JSON.stringify(scopeItem);
+            var versions = await runtimeApi(
+              "/v1/data/" + encodeURIComponent(scopeName) + "/versions?limit=1",
+            ).catch(function (e) {
+              return { ok: false, data: { error: e.message } };
+            });
+            var latest =
+              versions.ok &&
+              versions.data &&
+              versions.data.versions &&
+              versions.data.versions.length > 0
+                ? versions.data.versions[0]
+                : null;
+            latestByScope[scopeName] = latest;
+            if (latest && latest.fileId) fileIds.push(latest.fileId);
+          }
+          var rpcFiles = await verifyRpcFiles(
+            health.data && health.data.gatewayUrl,
+            Array.from(new Set(fileIds)),
+          ).catch(function () {
+            return {};
+          });
+          clearChildren(container);
+          var table = createEl("table");
+          var thead = createEl("thead");
+          var headRow = createEl("tr", null, [
+            createEl("th", null, "Scope"),
+            createEl("th", null, "Local"),
+            createEl("th", null, "RPC"),
+            createEl("th", null, "Sync"),
+            createEl("th", null, "Actions"),
+          ]);
+          thead.appendChild(headRow);
+          table.appendChild(thead);
+          var tbody = createEl("tbody");
+          for (var i = 0; i < result.data.scopes.length; i++) {
+            var scope = result.data.scopes[i];
+            var s =
+              typeof scope === "string"
+                ? scope
+                : scope.scope || JSON.stringify(scope);
+            var tr = createEl("tr");
+            var tdScope = createEl("td");
+            tdScope.textContent = s;
+            var latestVersion = latestByScope[s];
+            var tdLocal = createEl("td");
+            tdLocal.textContent =
+              latestVersion && latestVersion.fileId ? "file id" : "unsynced";
+            tdLocal.style.color =
+              latestVersion && latestVersion.fileId
+                ? "var(--accent)"
+                : "var(--warn)";
+            var tdRpc = createEl("td");
+            if (latestVersion && latestVersion.fileId) {
+              var rpc = rpcFiles[latestVersion.fileId];
+              tdRpc.textContent = rpc
+                ? rpc.registered
+                  ? "registered"
+                  : "missing"
+                : "unknown";
+              tdRpc.style.color =
+                rpc && rpc.registered
+                  ? "var(--accent)"
+                  : rpc
+                    ? "var(--error)"
+                    : "var(--text-dim)";
+            } else {
+              tdRpc.textContent = "\u2014";
+              tdRpc.style.color = "var(--text-dim)";
+            }
+            var tdSync = createEl("td");
+            var syncData = syncResult.data || {};
+            var syncErrors = Array.isArray(syncData.errors)
+              ? syncData.errors
+              : [];
+            var hasPendingFiles =
+              typeof syncData.pendingFiles === "number" &&
+              syncData.pendingFiles > 0;
+            if (syncData.enabled === false) {
+              tdSync.textContent = "disabled";
+              tdSync.style.color = "var(--text-dim)";
+            } else if (needsRegistration && hasPendingFiles) {
+              tdSync.textContent = "register server";
+              tdSync.style.color = "var(--warn)";
+              tdSync.title =
+                "Register this runtime before syncing pending files.";
+            } else if (!syncResult.ok) {
+              tdSync.textContent = "unavailable";
+              tdSync.style.color = "var(--warn)";
+            } else if (syncData.syncing) {
+              tdSync.textContent = "syncing";
+              tdSync.style.color = "var(--warn)";
+            } else if (syncErrors.length > 0 && hasPendingFiles) {
+              tdSync.textContent = "error";
+              tdSync.style.color = "var(--error)";
+              tdSync.title = syncErrors[syncErrors.length - 1].message || "";
+            } else if (hasPendingFiles) {
+              tdSync.textContent = "pending";
+              tdSync.style.color = "var(--warn)";
+            } else {
+              tdSync.textContent = "idle";
+              tdSync.style.color = "var(--accent)";
+            }
+            var tdActions = createEl("td");
+            var btnView = createEl("button", { class: "btn secondary" });
+            btnView.textContent = "View Latest";
+            btnView.addEventListener(
+              "click",
+              (function (sc) {
+                return function () {
+                  viewScope(sc);
+                };
+              })(s),
+            );
+            var btnVer = createEl("button", {
+              class: "btn secondary",
+              style: { marginLeft: "8px" },
+            });
+            btnVer.textContent = "Versions";
+            btnVer.addEventListener(
+              "click",
+              (function (sc) {
+                return function () {
+                  viewVersions(sc);
+                };
+              })(s),
+            );
+            tdActions.appendChild(btnView);
+            tdActions.appendChild(btnVer);
+            tr.appendChild(tdScope);
+            tr.appendChild(tdLocal);
+            tr.appendChild(tdRpc);
+            tr.appendChild(tdSync);
+            tr.appendChild(tdActions);
+            tbody.appendChild(tr);
+          }
+          table.appendChild(tbody);
+          container.appendChild(table);
+        } catch (e) {
+          showMsg(container, "Error: " + e.message, "err");
+        }
+      }
+      el("refresh-data-btn").addEventListener("click", loadScopes);
+      async function triggerSync() {
+        var msg = el("sync-msg");
+        try {
+          var health = await selectedHealth();
+          if (registrationRequired(health.data)) {
+            showMsg(
+              msg,
+              "Register " + runtimeName() + " server before syncing.",
+              "warn",
+            );
+            await loadHealth();
+            return;
+          }
+          showMsg(msg, "Triggering " + runtimeName() + " sync...", "ok");
+          var result = await runtimeApi("/v1/sync/trigger", {
+            method: "POST",
+            auth: "owner",
+          });
+          if (!result.ok) {
+            var errMsg =
+              (result.data && result.data.error && result.data.error.message) ||
+              "Sync trigger failed (" + result.status + ")";
+            showMsg(msg, errMsg, "err");
+            return;
+          }
+          if (result.data && result.data.status === "disabled") {
+            showMsg(msg, "Sync is disabled for " + runtimeName() + ".", "warn");
+            return;
+          }
+          var statusResult = await runtimeApi("/v1/sync/status", {
+            auth: "owner",
+          }).catch(function () {
+            return { ok: false, data: {} };
+          });
+          var syncStatus = statusResult.data || {};
+          var syncErrors = Array.isArray(syncStatus.errors)
+            ? syncStatus.errors
+            : [];
+          var pendingFiles =
+            typeof syncStatus.pendingFiles === "number"
+              ? syncStatus.pendingFiles
+              : 0;
+          if (syncErrors.length > 0 && pendingFiles > 0) {
+            var latestError = syncErrors[syncErrors.length - 1];
+            showMsg(
+              msg,
+              "Sync finished with errors: " +
+                (latestError.message || "unknown error"),
+              "err",
+            );
+          } else if (pendingFiles > 0) {
+            showMsg(
+              msg,
+              "Sync finished with " + pendingFiles + " pending file(s).",
+              "warn",
+            );
+          } else {
+            showMsg(msg, "Sync finished for " + runtimeName() + ".", "ok");
+          }
+          await loadScopes();
+        } catch (e) {
+          showMsg(msg, "Error: " + e.message, "err");
+        }
+      }
+      el("sync-now-btn").addEventListener("click", triggerSync);
+      async function verifyRpcFiles(gatewayUrl, fileIds) {
+        if (!gatewayUrl || fileIds.length === 0) return {};
+        var result = await api("/ui/api/rpc/files", {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ gatewayUrl: gatewayUrl, fileIds: fileIds }),
+        });
+        return result.ok && result.data && result.data.files
+          ? result.data.files
+          : {};
+      }
+      async function submitData() {
+        var msg = el("add-data-msg");
+        clearChildren(msg);
+        var scope = el("add-data-scope").value.trim();
+        if (!scope) {
+          showMsg(msg, "Scope is required.", "err");
+          return;
+        }
+        var raw = el("add-data-json").value.trim();
+        var parsed;
+        try {
+          parsed = JSON.parse(raw);
+        } catch (e) {
+          showMsg(msg, "Invalid JSON: " + e.message, "err");
+          return;
+        }
+        if (
+          parsed === null ||
+          typeof parsed !== "object" ||
+          Array.isArray(parsed)
+        ) {
+          showMsg(
+            msg,
+            "JSON must be a plain object (not array or null).",
+            "err",
+          );
+          return;
+        }
+        try {
+          var result = await runtimeApi(
+            "/v1/data/" + encodeURIComponent(scope),
+            {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify(parsed),
+            },
+          );
+          if (result.ok) {
+            var collectedAt =
+              (result.data && result.data.collectedAt) || "unknown";
+            showMsg(
+              msg,
+              'Stored data for scope "' +
+                scope +
+                '" (collectedAt: ' +
+                collectedAt +
+                ")",
+              "ok",
+            );
+            loadScopes();
+          } else {
+            var errCode =
+              (result.data && result.data.error && result.data.error.code) ||
+              "";
+            var errMsg =
+              (result.data && result.data.error && result.data.error.message) ||
+              "Request failed (" + result.status + ")";
+            showMsg(msg, errCode ? errCode + ": " + errMsg : errMsg, "err");
+          }
+        } catch (e) {
+          showMsg(msg, "Error: " + e.message, "err");
+        }
+      }
+      el("submit-data-btn").addEventListener("click", submitData);
+      async function viewScope(scope) {
+        var detail = el("data-detail");
+        var content = el("data-detail-content");
+        detail.style.display = "block";
+        showLoading(content);
+        try {
+          var path = "/v1/data/" + encodeURIComponent(scope);
+          if (runtimeState.active === "browser") {
+            path += "?grantId=debug-grant";
+          }
+          var result = await runtimeApi(path);
+          showJson(content, result.data);
+        } catch (e) {
+          showMsg(content, "Error: " + e.message, "err");
+        }
+      }
+      async function viewVersions(scope) {
+        var detail = el("data-detail");
+        var content = el("data-detail-content");
+        detail.style.display = "block";
+        showLoading(content);
+        try {
+          var result = await runtimeApi(
+            "/v1/data/" + encodeURIComponent(scope) + "/versions",
+          );
+          if (!result.data.versions || result.data.versions.length === 0) {
+            showEmpty(content, "No versions found.");
+            return;
+          }
+          clearChildren(content);
+          var table = createEl("table");
+          var thead = createEl("thead");
+          var headRow = createEl("tr", null, [
+            createEl("th", null, "File ID"),
+            createEl("th", null, "Collected At"),
+          ]);
+          thead.appendChild(headRow);
+          table.appendChild(thead);
+          var tbody = createEl("tbody");
+          for (var i = 0; i < result.data.versions.length; i++) {
+            var v = result.data.versions[i];
+            var tr = createEl("tr");
+            var td1 = createEl("td");
+            td1.textContent = v.fileId || "\u2014";
+            var td2 = createEl("td");
+            td2.textContent = v.collectedAt;
+            tr.appendChild(td1);
+            tr.appendChild(td2);
+            tbody.appendChild(tr);
+          }
+          table.appendChild(tbody);
+          content.appendChild(table);
+        } catch (e) {
+          showMsg(content, "Error: " + e.message, "err");
+        }
+      }
+      // --- Grants ---
+      async function loadGrants() {
+        var container = el("grants-content");
+        showLoading(container);
+        try {
+          var result = await runtimeListGrants();
+          if (!result.ok) {
+            showJson(container, result.data);
+            return;
+          }
+          if (!result.data.grants || result.data.grants.length === 0) {
+            showEmpty(container, "No grants found.");
+            return;
+          }
+          clearChildren(container);
+          var table = createEl("table");
+          var thead = createEl("thead");
+          var headRow = createEl("tr", null, [
+            createEl("th", null, "ID"),
+            createEl("th", null, "Grantee"),
+            createEl("th", null, "Status"),
+            createEl("th", null, "Created"),
+            createEl("th", null, "Actions"),
+          ]);
+          thead.appendChild(headRow);
+          table.appendChild(thead);
+          var tbody = createEl("tbody");
+          for (var i = 0; i < result.data.grants.length; i++) {
+            var g = result.data.grants[i];
+            var status = g.revokedAt ? "revoked" : "active";
+            var tr = createEl("tr");
+            var td1 = createEl("td");
+            td1.textContent = String(g.id);
+            var td2 = createEl("td");
+            td2.textContent = g.granteeId || "\u2014";
+            var td3 = createEl("td");
+            var statusSpan = createEl("span");
+            statusSpan.textContent = status;
+            statusSpan.style.color =
+              status === "active" ? "var(--accent)" : "var(--error)";
+            td3.appendChild(statusSpan);
+            var td4 = createEl("td");
+            td4.textContent = g.createdAt || "\u2014";
+            var td5 = createEl("td");
+            if (status === "active") {
+              var revokeBtn = createEl("button", { class: "btn" }, "Revoke");
+              revokeBtn.addEventListener(
+                "click",
+                (function (grantId) {
+                  return async function () {
+                    revokeBtn.disabled = true;
+                    var revokeResult = await runtimeRevokeGrant(grantId);
+                    if (!revokeResult.ok) {
+                      showJson(container, revokeResult.data);
+                      return;
+                    }
+                    await loadGrants();
+                  };
+                })(String(g.id)),
+              );
+              td5.appendChild(revokeBtn);
+            } else {
+              td5.textContent = "\u2014";
+            }
+            tr.appendChild(td1);
+            tr.appendChild(td2);
+            tr.appendChild(td3);
+            tr.appendChild(td4);
+            tr.appendChild(td5);
+            tbody.appendChild(tr);
+          }
+          table.appendChild(tbody);
+          container.appendChild(table);
+        } catch (e) {
+          showMsg(container, "Error: " + e.message, "err");
+        }
+      }
+      el("refresh-grants-btn").addEventListener("click", loadGrants);
+      // --- Access Logs ---
+      async function loadAccessLogs() {
+        var container = el("logs-content");
+        showLoading(container);
+        try {
+          var result = await runtimeApi("/v1/access-logs?limit=50", {
+            auth: "owner",
+          });
+          if (!result.ok) {
+            showJson(container, result.data);
+            return;
+          }
+          var entries = result.data.logs || result.data.entries || result.data;
+          if (!Array.isArray(entries) || entries.length === 0) {
+            showEmpty(container, "No access logs found.");
+            return;
+          }
+          clearChildren(container);
+          var table = createEl("table");
+          var thead = createEl("thead");
+          var headRow = createEl("tr", null, [
+            createEl("th", null, "Timestamp"),
+            createEl("th", null, "Builder"),
+            createEl("th", null, "Scope"),
+            createEl("th", null, "Action"),
+          ]);
+          thead.appendChild(headRow);
+          table.appendChild(thead);
+          var tbody = createEl("tbody");
+          for (var i = 0; i < entries.length; i++) {
+            var entry = entries[i];
+            var tr = createEl("tr");
+            var td1 = createEl("td");
+            td1.textContent = entry.timestamp || "\u2014";
+            var td2 = createEl("td");
+            td2.textContent = truncAddr(entry.builder);
+            var td3 = createEl("td");
+            td3.textContent = entry.scope || "\u2014";
+            var td4 = createEl("td");
+            td4.textContent = entry.action || "\u2014";
+            tr.appendChild(td1);
+            tr.appendChild(td2);
+            tr.appendChild(td3);
+            tr.appendChild(td4);
+            tbody.appendChild(tr);
+          }
+          table.appendChild(tbody);
+          container.appendChild(table);
+        } catch (e) {
+          showMsg(container, "Error: " + e.message, "err");
+        }
+      }
+      el("refresh-logs-btn").addEventListener("click", loadAccessLogs);
+      // --- API Tester ---
+      async function sendApiRequest() {
+        var method = el("api-method").value;
+        var path = el("api-path").value;
+        var bodyText = el("api-body").value.trim();
+        var statusEl2 = el("api-status");
+        var responseEl = el("api-response");
+        statusEl2.textContent = "Sending...";
+        responseEl.textContent = "";
+        var opts = { method: method };
+        if (bodyText && (method === "POST" || method === "PUT")) {
+          opts.headers = { "Content-Type": "application/json" };
+          opts.body = bodyText;
+        }
+        try {
+          var result = await runtimeApi(path, opts);
+          var color =
+            result.status < 300
+              ? "var(--accent)"
+              : result.status < 500
+                ? "var(--warn)"
+                : "var(--error)";
+          clearChildren(statusEl2);
+          var statusSpan = createEl("span");
+          statusSpan.textContent = result.status;
+          statusSpan.style.color = color;
+          statusEl2.appendChild(statusSpan);
+          statusEl2.appendChild(text(" " + method + " " + path));
+          responseEl.textContent =
+            typeof result.data === "string"
+              ? result.data
+              : JSON.stringify(result.data, null, 2);
+        } catch (e) {
+          clearChildren(statusEl2);
+          var errSpan = createEl("span");
+          errSpan.textContent = "Error";
+          errSpan.style.color = "var(--error)";
+          statusEl2.appendChild(errSpan);
+          responseEl.textContent = e.message;
+        }
+      }
+      el("send-api-btn").addEventListener("click", sendApiRequest);
+      // --- Browser Runtime Bridge ---
+      function psLiteClient() {
+        if (!window.psLiteDebug) {
+          throw new Error("Browser runtime bundle is still loading");
+        }
+        return window.psLiteDebug;
+      }
+      async function psLiteApiRequest(path, opts) {
+        opts = opts || {};
+        var body;
+        if (opts.body) {
+          try {
+            body = JSON.parse(opts.body);
+          } catch (e) {
+            body = opts.body;
+          }
+        }
+        var client = psLiteClient();
+        var url = new URL(path, "https://ps-lite.local");
+        var dataPrefix = "/v1/data";
+        if (
+          url.pathname === dataPrefix &&
+          (!opts.method || opts.method.toUpperCase() === "GET")
+        ) {
+          return client.listData({
+            scopePrefix: url.searchParams.get("scopePrefix") || undefined,
+            limit: numberParam(url.searchParams.get("limit")),
+            offset: numberParam(url.searchParams.get("offset")),
+          });
+        }
+        if (url.pathname.startsWith(dataPrefix + "/")) {
+          var dataSuffix = url.pathname.slice((dataPrefix + "/").length);
+          if (dataSuffix.endsWith("/versions")) {
+            return client.listVersions(
+              decodeURIComponent(dataSuffix.slice(0, -"/versions".length)),
+              {
+                limit: numberParam(url.searchParams.get("limit")),
+                offset: numberParam(url.searchParams.get("offset")),
+              },
+            );
+          }
+          var scope = decodeURIComponent(dataSuffix);
+          var method = (opts.method || "GET").toUpperCase();
+          if (method === "POST") {
+            return client.postData(scope, body);
+          }
+          if (method === "GET") {
+            return client.readData(scope, {
+              grantId: url.searchParams.get("grantId") || undefined,
+              fileId: url.searchParams.get("fileId") || undefined,
+              at: url.searchParams.get("at") || undefined,
+            });
+          }
+        }
+        if (
+          url.pathname === "/v1/sync/status" &&
+          (!opts.method || opts.method.toUpperCase() === "GET")
+        ) {
+          return client.syncStatus();
+        }
+        if (
+          url.pathname === "/v1/sync/trigger" &&
+          (opts.method || "GET").toUpperCase() === "POST"
+        ) {
+          return client.syncTrigger();
+        }
+        if (url.pathname === "/v1/grants") {
+          var grantMethod = (opts.method || "GET").toUpperCase();
+          if (grantMethod === "GET") return client.listGrants();
+          if (grantMethod === "POST") return client.createGrant(body);
+        }
+        if (url.pathname.startsWith("/v1/grants/")) {
+          var revokeMethod = (opts.method || "GET").toUpperCase();
+          if (revokeMethod === "DELETE") {
+            return client.revokeGrant(
+              decodeURIComponent(url.pathname.slice("/v1/grants/".length)),
+            );
+          }
+        }
+        return psLiteClient().request(path, {
+          method: opts.method || "GET",
+          body: body,
+          auth: opts.auth,
+          headers: opts.headers,
+        });
+      }
+      function numberParam(value) {
+        if (value === null || value === "") return undefined;
+        var parsed = Number(value);
+        return Number.isFinite(parsed) ? parsed : undefined;
+      }
+      window.addEventListener("ps-lite-relay-status", function () {
+        if (runtimeState.active === "browser") refreshSelectedPanel();
+      });
+      window.addEventListener("ps-lite-relay-log", function (event) {
+        if (runtimeState.active === "browser" && selectedPanel() === "health") {
+          el("node-registration-status").textContent = String(event.detail);
+        }
+      });
+      // --- Connect Simulator ---
+      var connectState = {
+        relayUrl: "",
+        sessionId: "",
+        secret: "",
+        granteeAddress: "",
+        scopes: [],
+        userAddress: "",
+        serverAddress: "",
+        grantId: "",
+      };
+      function connectLog(message, type) {
+        var logEl = el("connect-log");
+        var ts = new Date().toLocaleTimeString();
+        var color =
+          type === "ok"
+            ? "var(--accent)"
+            : type === "err"
+              ? "var(--error)"
+              : "var(--text-dim)";
+        var line = createEl("div", { style: { color: color } });
+        line.textContent = "[" + ts + "] " + message;
+        logEl.appendChild(line);
+        logEl.scrollTop = logEl.scrollHeight;
+      }
+      async function relayFetch(path, opts) {
+        opts = opts || {};
+        var url = connectState.relayUrl + path;
+        var res = await fetch(url, {
+          method: opts.method || "GET",
+          headers: Object.assign(
+            { "Content-Type": "application/json" },
+            opts.headers || {},
+          ),
+          body: opts.body,
+        });
+        var json = await res.json().catch(function () {
+          return {};
+        });
+        return { status: res.status, ok: res.ok, data: json };
+      }
+      function connectParse() {
+        var relayUrl = el("connect-relay-url").value.trim().replace(/\/+$/, "");
+        var deepLink = el("connect-deep-link").value.trim();
+        if (!deepLink) {
+          connectLog("Deep link URL is required", "err");
+          return;
+        }
+        var url;
+        try {
+          url = new URL(deepLink);
+        } catch (e) {
+          connectLog("Invalid deep link URL: " + e.message, "err");
+          return;
+        }
+        var sessionId = url.searchParams.get("sessionId");
+        var secret = url.searchParams.get("secret");
+        if (!sessionId || !secret) {
+          connectLog(
+            "Deep link must contain sessionId and secret params",
+            "err",
+          );
+          return;
+        }
+        connectState.relayUrl = relayUrl;
+        connectState.sessionId = sessionId;
+        connectState.secret = secret;
+        // Show parsed info
+        var info = el("connect-parsed-info");
+        clearChildren(info);
+        var items = [
+          ["sessionId", sessionId],
+          ["secret", secret.slice(0, 8) + "..."],
+          ["relay", relayUrl],
+        ];
+        for (var i = 0; i < items.length; i++) {
+          var lbl = createEl("span", { class: "label" });
+          lbl.textContent = items[i][0];
+          var val = createEl("span", { class: "value" });
+          val.textContent = items[i][1];
+          info.appendChild(lbl);
+          info.appendChild(val);
+        }
+        el("connect-parsed").style.display = "block";
+        el("connect-flow-card").style.display = "block";
+        // Enable buttons
+        el("connect-claim-btn").disabled = false;
+        el("connect-auto-btn").disabled = false;
+        el("connect-deny-btn").disabled = false;
+        el("connect-grant-btn").disabled = true;
+        el("connect-approve-btn").disabled = true;
+        connectLog("Parsed deep link — sessionId: " + sessionId, "ok");
+      }
+      async function connectClaim() {
+        connectLog("Claiming session...");
+        el("connect-claim-btn").disabled = true;
+        try {
+          var result = await relayFetch("/v1/session/claim", {
+            method: "POST",
+            body: JSON.stringify({
+              sessionId: connectState.sessionId,
+              secret: connectState.secret,
+            }),
+          });
+          if (!result.ok) {
+            var errMsg =
+              (result.data.error && result.data.error.message) ||
+              "Claim failed (" + result.status + ")";
+            connectLog("Claim failed: " + errMsg, "err");
+            el("connect-claim-btn").disabled = false;
+            return false;
+          }
+          connectState.granteeAddress =
+            result.data.granteeAddress ||
+            result.data.session?.granteeAddress ||
+            "";
+          connectState.scopes =
+            result.data.scopes || result.data.session?.scopes || [];
+          connectLog(
+            "Session claimed — grantee: " +
+              connectState.granteeAddress +
+              ", scopes: [" +
+              connectState.scopes.join(", ") +
+              "]",
+            "ok",
+          );
+          el("connect-grant-btn").disabled = false;
+          return true;
+        } catch (e) {
+          connectLog("Claim error: " + e.message, "err");
+          el("connect-claim-btn").disabled = false;
+          return false;
+        }
+      }
+      async function connectCreateGrant() {
+        connectLog("Creating grant...");
+        el("connect-grant-btn").disabled = true;
+        try {
+          // Get owner address from /health
+          var healthResult = await selectedHealth();
+          if (
+            !healthResult.ok ||
+            !healthResult.data ||
+            !healthResult.data.owner
+          ) {
+            connectLog(
+              "Could not get owner address from /health. Is VANA_MASTER_KEY_SIGNATURE set?",
+              "err",
+            );
+            el("connect-grant-btn").disabled = false;
+            return false;
+          }
+          connectState.userAddress = healthResult.data.owner;
+          connectState.serverAddress =
+            (healthResult.data.identity &&
+              healthResult.data.identity.address) ||
+            "";
+          connectLog("Owner address: " + connectState.userAddress);
+          var grantResult = await runtimeCreateGrant({
+            granteeAddress: connectState.granteeAddress,
+            scopes: connectState.scopes,
+          });
+          if (!grantResult.ok) {
+            var errMsg =
+              (grantResult.data.error && grantResult.data.error.message) ||
+              "Create grant failed (" + grantResult.status + ")";
+            connectLog("Grant creation failed: " + errMsg, "err");
+            el("connect-grant-btn").disabled = false;
+            return false;
+          }
+          connectState.grantId = String(grantResult.data.grantId);
+          connectLog("Grant created — grantId: " + connectState.grantId, "ok");
+          el("connect-approve-btn").disabled = false;
+          return true;
+        } catch (e) {
+          connectLog("Grant error: " + e.message, "err");
+          el("connect-grant-btn").disabled = false;
+          return false;
+        }
+      }
+      async function connectApprove() {
+        connectLog("Approving session...");
+        el("connect-approve-btn").disabled = true;
+        try {
+          var result = await relayFetch(
+            "/v1/session/" + connectState.sessionId + "/approve",
+            {
+              method: "POST",
+              body: JSON.stringify({
+                secret: connectState.secret,
+                grantId: connectState.grantId,
+                userAddress: connectState.userAddress,
+                serverAddress: connectState.serverAddress,
+                scopes: connectState.scopes,
+              }),
+            },
+          );
+          if (!result.ok) {
+            var errMsg =
+              (result.data.error && result.data.error.message) ||
+              "Approve failed (" + result.status + ")";
+            connectLog("Approve failed: " + errMsg, "err");
+            el("connect-approve-btn").disabled = false;
+            return false;
+          }
+          connectLog("Session approved!", "ok");
+          // Show result
+          el("connect-result-card").style.display = "block";
+          el("connect-result").textContent = JSON.stringify(
+            {
+              grantId: connectState.grantId,
+              userAddress: connectState.userAddress,
+              granteeAddress: connectState.granteeAddress,
+              scopes: connectState.scopes,
+              sessionId: connectState.sessionId,
+            },
+            null,
+            2,
+          );
+          // Disable all buttons
+          el("connect-auto-btn").disabled = true;
+          el("connect-deny-btn").disabled = true;
+          return true;
+        } catch (e) {
+          connectLog("Approve error: " + e.message, "err");
+          el("connect-approve-btn").disabled = false;
+          return false;
+        }
+      }
+      async function connectDeny() {
+        connectLog("Denying session...");
+        try {
+          var result = await relayFetch(
+            "/v1/session/" + connectState.sessionId + "/deny",
+            {
+              method: "POST",
+              body: JSON.stringify({
+                secret: connectState.secret,
+                reason: "Denied from Dev UI",
+              }),
+            },
+          );
+          if (!result.ok) {
+            var errMsg =
+              (result.data.error && result.data.error.message) ||
+              "Deny failed (" + result.status + ")";
+            connectLog("Deny failed: " + errMsg, "err");
+            return;
+          }
+          connectLog("Session denied", "ok");
+          // Disable all action buttons
+          el("connect-claim-btn").disabled = true;
+          el("connect-grant-btn").disabled = true;
+          el("connect-approve-btn").disabled = true;
+          el("connect-auto-btn").disabled = true;
+          el("connect-deny-btn").disabled = true;
+        } catch (e) {
+          connectLog("Deny error: " + e.message, "err");
+        }
+      }
+      async function connectAutoApprove() {
+        el("connect-auto-btn").disabled = true;
+        el("connect-deny-btn").disabled = true;
+        connectLog("Starting auto-approve flow...");
+        var ok = await connectClaim();
+        if (!ok) {
+          el("connect-auto-btn").disabled = false;
+          el("connect-deny-btn").disabled = false;
+          return;
+        }
+        ok = await connectCreateGrant();
+        if (!ok) {
+          el("connect-auto-btn").disabled = false;
+          el("connect-deny-btn").disabled = false;
+          return;
+        }
+        await connectApprove();
+      }
+      el("connect-parse-btn").addEventListener("click", connectParse);
+      el("connect-claim-btn").addEventListener("click", connectClaim);
+      el("connect-grant-btn").addEventListener("click", connectCreateGrant);
+      el("connect-approve-btn").addEventListener("click", connectApprove);
+      el("connect-deny-btn").addEventListener("click", connectDeny);
+      el("connect-auto-btn").addEventListener("click", connectAutoApprove);
+      // --- Utilities ---
+      function truncAddr(addr) {
+        if (!addr || addr.length < 12) return addr || "\u2014";
+        return addr.slice(0, 6) + "..." + addr.slice(-4);
+      }
+    </script>
+    <script type="module" src="/ui/ps-lite-debug.js"></script>
+  </body>
+</html>