@opendatalabs/personal-server-ts-server 1.13.0 → 1.13.1

package/dist/logging/access-log.d.ts

@@ -1,15 +1,4 @@
-export interface AccessLogEntry {
-    logId: string;
-    grantId: string;
-    builder: string;
-    action: "read" | "write" | "delete";
-    scope: string;
-    timestamp: string;
-    ipAddress: string;
-    userAgent: string;
-}
-export interface AccessLogWriter {
-    write(entry: AccessLogEntry): Promise<void>;
-}
+import type { AccessLogEntry, AccessLogWriter } from "@opendatalabs/personal-server-ts-core/logging/access-log";
+export type { AccessLogEntry, AccessLogWriter };
 export declare function createAccessLogWriter(logsDir: string): AccessLogWriter;
 //# sourceMappingURL=access-log.d.ts.map

package/dist/logging/access-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access-log.d.ts","sourceRoot":"","sources":["../../src/logging/access-log.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAUD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAiBtE"}
+{"version":3,"file":"access-log.d.ts","sourceRoot":"","sources":["../../src/logging/access-log.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EAChB,MAAM,0DAA0D,CAAC;AAElE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;AAUhD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAiBtE"}

package/dist/logging/access-log.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-log.js","sourceRoot":"","sources":["../../src/logging/access-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAiBjC,SAAS,qBAAqB,CAAC,YAAoB;IACjD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,KAAqB;YAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,UAAU,OAAO,MAAM,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEzC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"access-log.js","sourceRoot":"","sources":["../../src/logging/access-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,SAAS,qBAAqB,CAAC,YAAoB;IACjD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,KAAqB;YAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,UAAU,OAAO,MAAM,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEzC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ui/ps-lite-debug.js

@@ -110213,6 +110213,7 @@ function parseGrantExpiresAtSeconds(value) {
   const millis = Date.parse(value);
   return Number.isNaN(millis) ? null : Math.floor(millis / 1e3);
 }
+var SENTINEL_GRANT_IDS = /* @__PURE__ */ new Set(["owner", "policy-bypass"]);
 async function verifyDataReadPolicy(input, ports) {
   const available = await ports.runtimeAvailability?.isAvailable();
   if (available === false) {
@@ -110227,6 +110228,12 @@ async function verifyDataReadPolicy(input, ports) {
       reason: "No grantId in authorization payload"
     });
   }
+  if (SENTINEL_GRANT_IDS.has(input.grantId)) {
+    throw new GrantRequiredError({
+      reason: "Reserved grantId",
+      grantId: input.grantId
+    });
+  }
   const grant = await ports.grantVerifier.getGrant(input.grantId);
   if (!grant) {
     throw new GrantRequiredError({
@@ -110234,6 +110241,12 @@ async function verifyDataReadPolicy(input, ports) {
       grantId: input.grantId
     });
   }
+  if (SENTINEL_GRANT_IDS.has(grant.id)) {
+    throw new GrantRequiredError({
+      reason: "Grant resolved to a reserved id",
+      grantId: input.grantId
+    });
+  }
   if (grant.revokedAt !== null) {
     throw new GrantRevokedError({ grantId: grant.id });
   }
@@ -111422,6 +111435,34 @@ function resolveLineageGrantView(authResult) {
   }
   return { grantId };
 }
+function isOwnerView(authResult) {
+  return authResult === void 0 || authResult.grantId === "owner" || authResult.grantId === "policy-bypass";
+}
+function redactEnvelopeForGrantee(envelope) {
+  const { [WRITER_ATTRIBUTION_KEY]: attribution, [LINEAGE_KEY]: storedLineage, ...rest } = envelope.data;
+  if (attribution === void 0 && storedLineage === void 0) {
+    return envelope;
+  }
+  let data = rest;
+  if (storedLineage !== void 0) {
+    if (isBinaryEnvelope(envelope)) {
+      const metadata = data["metadata"];
+      if (metadata !== null && typeof metadata === "object" && !Array.isArray(metadata)) {
+        const { lineage: _consumed, ...metadataRest } = metadata;
+        if (Object.keys(metadataRest).length === 0) {
+          const { metadata: _emptied, ...dataRest } = data;
+          data = dataRest;
+        } else {
+          data = { ...data, metadata: metadataRest };
+        }
+      }
+    } else {
+      const { lineage: _consumed, ...dataRest } = data;
+      data = dataRest;
+    }
+  }
+  return { ...envelope, data };
+}
 async function handlePersonalServerDataRequest(request2, deps, options = {}) {
   return withApiErrors(async () => {
     const url2 = new URL(request2.url);
@@ -111514,6 +111555,16 @@ async function handlePersonalServerDataRequest(request2, deps, options = {}) {
           body: result.body
         });
       }
+      await deps.accessLogWriter.write({
+        logId: deps.createLogId?.() ?? crypto.randomUUID(),
+        grantId: authResult?.grantId ?? "owner",
+        builder: authResult?.builder ?? "unknown",
+        action: "lineage",
+        scope: scopeResult.scope,
+        timestamp: (deps.now ?? (() => /* @__PURE__ */ new Date()))().toISOString(),
+        ipAddress: request2.headers.get("x-forwarded-for") ?? request2.headers.get("x-real-ip") ?? "unknown",
+        userAgent: request2.headers.get("user-agent") ?? "unknown"
+      });
       return jsonResponse({ data: result.data, proof: result.proof });
     }
     if (parts.length !== 1)
@@ -111598,6 +111649,7 @@ async function handlePersonalServerDataRequest(request2, deps, options = {}) {
         }
         return contractErrorResponse(result);
       }
+      const servedEnvelope = isOwnerView(authResult) ? result.envelope : redactEnvelopeForGrantee(result.envelope);
       const logId = deps.createLogId?.() ?? crypto.randomUUID();
       const timestamp = (deps.now ?? (() => /* @__PURE__ */ new Date()))().toISOString();
       const ipAddress = request2.headers.get("x-forwarded-for") ?? request2.headers.get("x-real-ip") ?? "unknown";
@@ -111634,13 +111686,13 @@ async function handlePersonalServerDataRequest(request2, deps, options = {}) {
       }
       const wantsRawContent = url2.searchParams.get("content") === "raw";
       if (wantsRawContent) {
-        if (!isBinaryEnvelope(result.envelope)) {
+        if (!isBinaryEnvelope(servedEnvelope)) {
           return jsonResponse({
             error: "NOT_BINARY_SCOPE",
             message: `Scope "${scopeResult.scope}" does not expose raw binary content.`
           }, { status: 400, headers });
         }
-        const decoded = decodeBinaryEnvelope(result.envelope);
+        const decoded = decodeBinaryEnvelope(servedEnvelope);
         headers["Content-Type"] = decoded.mimeType;
         headers["Content-Length"] = String(decoded.bytes.length);
         if (decoded.filename) {
@@ -111655,7 +111707,7 @@ async function handlePersonalServerDataRequest(request2, deps, options = {}) {
         });
         return response2;
       }
-      const response = jsonResponse(result.envelope, { headers });
+      const response = jsonResponse(servedEnvelope, { headers });
       reportReadFulfillment();
       return response;
     }
@@ -114267,10 +114319,13 @@ function trimSourceData(data, options = {}) {
     if (Array.isArray(data))
       return trimArray(data, limit2);
     if (isRecord5(data)) {
+      const stamped = "$lineage" in data;
       const out = {};
       for (const [key, value] of Object.entries(data)) {
         if (RESERVED_KEYS.has(key))
           continue;
+        if (stamped && key === "lineage")
+          continue;
         out[key] = Array.isArray(value) ? trimArray(value, limit2) : value;
       }
       return out;
@@ -115719,6 +115774,140 @@ function createInMemoryMcpOAuthAuthorizationStore() {
 }
 
 // ../core/dist/mcp/read-client.js
+var FAIL_CLOSED_CONTEXT = {
+  dropTopLevelLineage: true,
+  dropMetadataLineage: true
+};
+function pathUnder(path, prefix) {
+  return path === prefix || path.startsWith(prefix) && /[.[{]/.test(path.charAt(prefix.length));
+}
+function groupLabelSegments(path) {
+  const match = /^\$\.data(?:\.metadata)?\.\{(.+):(.+)\}$/.exec(path);
+  return match ? [match[1], match[2]] : [];
+}
+function servedLineageShaped(blocks) {
+  return blocks.some((block) => {
+    if (pathUnder(block.path, "$.data.lineage") || pathUnder(block.path, "$.data.metadata.lineage")) {
+      return true;
+    }
+    if (groupLabelSegments(block.path).some((segment) => segment === "lineage" || segment === LINEAGE_KEY)) {
+      return true;
+    }
+    if (!("value" in block) || !isPlainObject3(block.value))
+      return false;
+    const data = block.path === "$" ? block.value["data"] ?? null : block.value;
+    return isPlainObject3(data) && ("lineage" in data || isPlainObject3(data["metadata"]) && "lineage" in data["metadata"]);
+  });
+}
+function visibleStampEvidence(blocks) {
+  for (const block of blocks) {
+    if (pathUnder(block.path, `$.data.${LINEAGE_KEY}`) || groupLabelSegments(block.path).includes(LINEAGE_KEY)) {
+      return { dropTopLevelLineage: true, dropMetadataLineage: false };
+    }
+    if ("value" in block && isPlainObject3(block.value)) {
+      const data = block.path === "$" ? block.value["data"] ?? null : block.value;
+      if (isPlainObject3(data) && LINEAGE_KEY in data) {
+        return { dropTopLevelLineage: true, dropMetadataLineage: false };
+      }
+    }
+  }
+  return null;
+}
+async function resolveBlockRedactionContext(storage, scope, collectedAt2, blocks) {
+  if (!servedLineageShaped(blocks)) {
+    return { dropTopLevelLineage: false, dropMetadataLineage: false };
+  }
+  const visible = visibleStampEvidence(blocks);
+  if (visible)
+    return visible;
+  try {
+    const envelope = await storage.readEnvelope(scope, collectedAt2);
+    if (!(LINEAGE_KEY in envelope.data)) {
+      return { dropTopLevelLineage: false, dropMetadataLineage: false };
+    }
+    return isBinaryEnvelope(envelope) ? { dropTopLevelLineage: false, dropMetadataLineage: true } : { dropTopLevelLineage: true, dropMetadataLineage: false };
+  } catch {
+    return FAIL_CLOSED_CONTEXT;
+  }
+}
+function redactedBlockPathPrefixes(ctx) {
+  return [
+    "$.data.$writtenBy",
+    "$.data.$lineage",
+    ...ctx.dropTopLevelLineage ? ["$.data.lineage"] : [],
+    ...ctx.dropMetadataLineage ? ["$.data.metadata.lineage"] : []
+  ];
+}
+function isRedactedBlockPath(path, ctx) {
+  return redactedBlockPathPrefixes(ctx).some((prefix) => path === prefix || path.startsWith(prefix) && /[.[{]/.test(path.charAt(prefix.length)));
+}
+function isPlainObject3(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isRedactedKeyName(parent, key, ctx) {
+  if (parent === "data") {
+    return key === "$writtenBy" || key === "$lineage" || ctx.dropTopLevelLineage && key === "lineage";
+  }
+  return ctx.dropMetadataLineage && key === "lineage";
+}
+function sanitizeGroupLabel(path, ctx) {
+  const match = /^(\$\.data(?:\.metadata)?)\.\{(.+):(.+)\}$/.exec(path);
+  if (!match)
+    return path;
+  const parent = match[1] === "$.data" ? "data" : "metadata";
+  const first = isRedactedKeyName(parent, match[2], ctx) ? "\u2026" : match[2];
+  const last2 = isRedactedKeyName(parent, match[3], ctx) ? "\u2026" : match[3];
+  return `${match[1]}.{${first}:${last2}}`;
+}
+function stripMetadataLineage(value, ctx) {
+  if (!ctx.dropMetadataLineage || !isPlainObject3(value["metadata"])) {
+    return value;
+  }
+  const { lineage: _metadataLineage, ...metadataRest } = value["metadata"];
+  if (Object.keys(metadataRest).length === 0) {
+    const { metadata: _emptied, ...rest } = value;
+    return rest;
+  }
+  return { ...value, metadata: metadataRest };
+}
+function stripDataLevelKeys(value, ctx) {
+  const { $writtenBy: _writtenBy, $lineage: _lineage, ...rest } = value;
+  let data = rest;
+  if (ctx.dropTopLevelLineage) {
+    const { lineage: _callerLineage, ...dataRest } = data;
+    data = dataRest;
+  }
+  return stripMetadataLineage(data, ctx);
+}
+function redactBlockValue(path, value, ctx) {
+  if (!isPlainObject3(value))
+    return value;
+  if (path === "$.data" || /^\$\.data\.\{.*\}$/.test(path)) {
+    return stripDataLevelKeys(value, ctx);
+  }
+  if (path === "$.data.metadata" || /^\$\.data\.metadata\.\{.*\}$/.test(path)) {
+    if (!ctx.dropMetadataLineage)
+      return value;
+    const { lineage: _metadataLineage, ...rest } = value;
+    return rest;
+  }
+  if (path === "$" && isPlainObject3(value["data"])) {
+    return { ...value, data: stripDataLevelKeys(value["data"], ctx) };
+  }
+  return value;
+}
+function redactBlockRefsForGrantee(blocks, ctx) {
+  return blocks.filter((block) => !isRedactedBlockPath(block.path, ctx)).map((block) => ({ ...block, path: sanitizeGroupLabel(block.path, ctx) }));
+}
+function redactBlockPayloadsForGrantee(blocks, ctx) {
+  return blocks.filter((block) => !isRedactedBlockPath(block.path, ctx)).flatMap((block) => {
+    const value = redactBlockValue(block.path, block.value, ctx);
+    if (isPlainObject3(block.value) && Object.keys(block.value).length > 0 && isPlainObject3(value) && Object.keys(value).length === 0) {
+      return [];
+    }
+    return [{ ...block, path: sanitizeGroupLabel(block.path, ctx), value }];
+  });
+}
 var McpDataReadError = class extends Error {
   status;
   body;
@@ -115887,7 +116076,11 @@ function createMcpDataReadClient(options) {
             userAgent
           });
         }
-        return { status: 200, ...result };
+        return isOwnerView(authResult) ? { status: 200, ...result } : {
+          status: 200,
+          ...result,
+          blocks: redactBlockPayloadsForGrantee(result.blocks, await resolveBlockRedactionContext(storage, scope, selectedEntry.collectedAt, result.blocks))
+        };
       } catch (err2) {
         if (err2 instanceof ProtocolError) {
           throw new McpDataReadError(err2.code, err2.toJSON());
@@ -115924,6 +116117,12 @@ function createMcpDataReadClient(options) {
       });
       const manifest = await storage.readBlockManifest(scope, selectedEntry.collectedAt);
       await writeReadAccessLog(request2, { scope, grantId, authResult });
+      if (manifest && !isOwnerView(authResult)) {
+        return {
+          ...manifest,
+          blocks: redactBlockRefsForGrantee(manifest.blocks, await resolveBlockRedactionContext(storage, scope, selectedEntry.collectedAt, manifest.blocks))
+        };
+      }
       return manifest;
     },
     async readRawScopeFile({ scope, grantId, at: at3, fileId, payment }) {
@@ -127072,7 +127271,7 @@ var Protocol = class {
     };
   }
 };
-function isPlainObject3(value) {
+function isPlainObject4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function mergeCapabilities(base, additional) {
@@ -127083,7 +127282,7 @@ function mergeCapabilities(base, additional) {
     if (addValue === void 0)
       continue;
     const baseValue = result[k10];
-    if (isPlainObject3(baseValue) && isPlainObject3(addValue)) {
+    if (isPlainObject4(baseValue) && isPlainObject4(addValue)) {
       result[k10] = { ...baseValue, ...addValue };
     } else {
       result[k10] = addValue;
@@ -130256,6 +130455,12 @@ function createBearerTokenPsLiteAuth(options) {
           reason: "No grantId in request"
         });
       }
+      if (input.grantId === "owner" || input.grantId === "policy-bypass") {
+        throw new GrantRequiredError({
+          reason: "Reserved grantId",
+          grantId: input.grantId
+        });
+      }
       return { grantId: input.grantId };
     }
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opendatalabs/personal-server-ts-server",
-  "version": "1.13.0",
+  "version": "1.13.1",
   "description": "Hono HTTP server for the Vana Personal Server — routes, middleware, composition root",
   "license": "MIT",
   "repository": {
@@ -44,8 +44,8 @@
   },
   "dependencies": {
     "@hono/node-server": "^1.19.13",
-    "@opendatalabs/personal-server-ts-core": "1.13.0",
-    "@opendatalabs/personal-server-ts-lite": "1.13.0",
+    "@opendatalabs/personal-server-ts-core": "1.13.1",
+    "@opendatalabs/personal-server-ts-lite": "1.13.1",
     "@opendatalabs/vana-sdk": "3.14.0",
     "better-sqlite3": "^12.11.1",
     "hono": "^4.12.27",