@opendatalabs/personal-server-ts-server 1.16.0 → 1.17.0

package/dist/mcp/tee-ingress.js

@@ -0,0 +1,203 @@
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { isAddress } from "viem";
+import { approveMcpOAuthAuthorization, handleMcpHandshake, hashConnectionToken, isMcpHandshake, toMcpOAuthAuthorizationView, } from "@opendatalabs/personal-server-ts-core/mcp";
+import { mcpOAuthRoutes } from "../routes/mcp.js";
+import { createBodyLimit } from "../middleware/body-limit.js";
+/** Stable, non-retryable code for a caller whose owner withdrew enclave access
+ * (server deregistered, identity epoch bumped, delegation revoked). Retrying
+ * cannot help; the owner has to approve this enclave again. */
+export const OWNER_ACCESS_REVOKED_CODE = "OWNER_ACCESS_REVOKED";
+const OWNER_ACCESS_REVOKED_MESSAGE = "Owner access to this enclave was revoked; ask the owner to approve it again";
+/** Thrown by `dispatch`/`ownerReady` providers when the live protocol identity
+ * shows the owner no longer authorizes this enclave. */
+export class McpOwnerAccessRevokedError extends Error {
+    constructor() {
+        super(OWNER_ACCESS_REVOKED_MESSAGE);
+        this.name = "McpOwnerAccessRevokedError";
+    }
+}
+/** Public ingress: HTTPS terminates in the same CVM as this process. */
+export function createTeeMcpIngress(deps) {
+    const app = new Hono();
+    const { state } = deps;
+    const redirectUris = new Set(deps.allowedRedirectUris);
+    app.use("*", createBodyLimit(256 * 1024));
+    app.use("*", cors({
+        origin: new URL(deps.approvalUrl).origin,
+        allowMethods: ["GET", "POST", "OPTIONS"],
+        allowHeaders: ["Content-Type", "Authorization", "MCP-Protocol-Version"],
+        exposeHeaders: ["WWW-Authenticate"],
+    }));
+    app.use("*", async (c, next) => {
+        c.header("Cache-Control", "no-store");
+        c.header("X-Content-Type-Options", "nosniff");
+        await next();
+    });
+    // One ingress writer serializes the core engine's multi-step OAuth updates.
+    app.use("/mcp/oauth/*", (c, next) => state.exclusive(async () => {
+        if (c.req.path === "/mcp/oauth/authorize" &&
+            !redirectUris.has(c.req.query("redirect_uri") ?? "")) {
+            return c.json({
+                error: "invalid_request",
+                error_description: "Unregistered demo redirect URI",
+            }, 400);
+        }
+        if (c.req.path === "/mcp/oauth/register") {
+            let body;
+            try {
+                body = await c.req.raw.clone().json();
+            }
+            catch {
+                return c.json({ error: "invalid_client_metadata" }, 400);
+            }
+            if (!Array.isArray(body.redirect_uris) ||
+                body.redirect_uris.length === 0 ||
+                body.redirect_uris.some((uri) => typeof uri !== "string" || !redirectUris.has(uri))) {
+                return c.json({ error: "invalid_redirect_uri" }, 400);
+            }
+        }
+        await next();
+    }));
+    // The random pending authorization ID reveals only the new grantee's public
+    // consent metadata. It does not authorize approval or return a private key.
+    app.get("/v1/mcp/readiness", async (c) => {
+        const owner = c.req.query("owner");
+        const chainId = Number(c.req.query("chainId"));
+        if (!owner || !isAddress(owner) || !Number.isSafeInteger(chainId))
+            return c.json({ error: "Owner and chain required" }, 400);
+        return c.json({
+            ready: (await deps.ownerReady?.({ owner, chainId })) ?? false,
+        });
+    });
+    app.get("/v1/mcp/oauth/authorizations/:id", async (c) => {
+        const record = await state.authorizations.getById(c.req.param("id"));
+        if (!record ||
+            record.status !== "pending" ||
+            Date.parse(record.expiresAt) <= Date.now())
+            return c.json({ error: "Authorization not found" }, 404);
+        const connection = await state.connections.getById(record.connectionId);
+        if (!connection)
+            return c.json({ error: "Connection not found" }, 404);
+        await deps.registerGrantee(connection, record.redirectUri);
+        return c.json(toMcpOAuthAuthorizationView(record));
+    });
+    app.post("/v1/mcp/oauth/authorizations/:id/approve", (c) => state.exclusive(async () => {
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "Invalid JSON" }, 400);
+        }
+        if (!body.owner ||
+            !isAddress(body.owner) ||
+            !Number.isSafeInteger(body.chainId) ||
+            !Array.isArray(body.grants) ||
+            body.grants.length === 0 ||
+            body.grants.some((grant) => !grant ||
+                typeof grant.grantId !== "string" ||
+                !Array.isArray(grant.scopes) ||
+                grant.scopes.length === 0 ||
+                grant.scopes.some((scope) => typeof scope !== "string"))) {
+            return c.json({ error: "Owner, chain and grants required" }, 400);
+        }
+        const authorization = await state.authorizations.getById(c.req.param("id"));
+        if (!authorization ||
+            authorization.status !== "pending" ||
+            Date.parse(authorization.expiresAt) <= Date.now())
+            return c.json({ error: "Authorization unavailable" }, 409);
+        const connection = await state.connections.getById(authorization.connectionId);
+        if (!connection)
+            return c.json({ error: "Connection unavailable" }, 404);
+        const binding = {
+            owner: body.owner,
+            chainId: body.chainId,
+        };
+        try {
+            await deps.verifyGrants(connection, binding, body.grants);
+        }
+        catch {
+            return c.json({ error: "Owner grant verification failed" }, 403);
+        }
+        if (deps.ownerReady && !(await deps.ownerReady(binding)))
+            return c.json({
+                error: "OWNER_PREWARM_REQUIRED",
+                message: "Finish owner prewarm before approving MCP",
+            }, 503);
+        try {
+            await deps.beforeOwnerApproval?.(binding);
+        }
+        catch {
+            return c.json({ error: "Owner scheduling unavailable" }, 503);
+        }
+        await state.bindOwner(connection.id, binding);
+        const approved = await approveMcpOAuthAuthorization({ authorizationId: authorization.id, grants: body.grants }, {
+            connectionStore: state.connections,
+            authorizationStore: state.authorizations,
+        });
+        return c.json({ redirectTo: approved.redirectTo });
+    }));
+    app.all("/mcp", async (c) => {
+        const header = c.req.header("authorization");
+        const token = header?.startsWith("Bearer ") ? header.slice(7).trim() : "";
+        const connection = token
+            ? await state.connections.getByTokenHash(await hashConnectionToken(token))
+            : null;
+        const binding = connection ? await state.getOwner(connection.id) : null;
+        if (!connection || !binding) {
+            c.header("WWW-Authenticate", `Bearer resource_metadata="${deps.origin}/.well-known/oauth-protected-resource/mcp", scope="vana:read"`);
+            return c.json({ error: "MCP authorization required" }, 401);
+        }
+        if (c.req.method !== "POST")
+            return c.body(null, 405, { Allow: "POST" });
+        // The handshake reads the static tool table, nothing of the owner's, so it
+        // is answered here rather than through grant verification, placement and
+        // two attested peer hops per message — the three messages a fresh client
+        // sends cost ~18 s each on that path.
+        let body;
+        try {
+            body = await c.req.raw.clone().json();
+        }
+        catch {
+            body = undefined;
+        }
+        if (isMcpHandshake(body))
+            return handleMcpHandshake(c.req.raw.clone());
+        try {
+            await deps.verifyGrants(connection, binding, connection.grants);
+        }
+        catch {
+            return c.json({ error: "MCP grants are no longer valid" }, 403);
+        }
+        return deps.dispatch(c.req.raw, connection, binding);
+    });
+    app.route("/", mcpOAuthRoutes({
+        gateway: deps.gateway,
+        serverOrigin: deps.origin,
+        oauthApprovalUrl: deps.approvalUrl,
+        connectionStore: state.connections,
+        oauthAuthorizationStore: state.authorizations,
+    }));
+    app.onError((error) => {
+        // A revoked owner is a terminal answer, not the transient 503 every other
+        // ingress failure gets: the MCP client must stop retrying this connection.
+        if (error instanceof McpOwnerAccessRevokedError)
+            return jsonError(403, {
+                error: OWNER_ACCESS_REVOKED_CODE,
+                message: OWNER_ACCESS_REVOKED_MESSAGE,
+            });
+        return jsonError(503, { error: "MCP request unavailable" });
+    });
+    return app;
+}
+function jsonError(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: {
+            "content-type": "application/json",
+            "cache-control": "no-store",
+        },
+    });
+}
+//# sourceMappingURL=tee-ingress.js.map

package/dist/mcp/tee-ingress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tee-ingress.js","sourceRoot":"","sources":["../../src/mcp/tee-ingress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,2BAA2B,GAG5B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAG9D;;+DAE+D;AAC/D,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAChE,MAAM,4BAA4B,GAChC,6EAA6E,CAAC;AAEhF;wDACwD;AACxD,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD;QACE,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AA2BD,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,IAAuB;IACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,GAAG,CACL,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM;QACxC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;QACxC,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,sBAAsB,CAAC;QACvE,aAAa,EAAE,CAAC,kBAAkB,CAAC;KACpC,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACtC,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IACH,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAClC,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;QACzB,IACE,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,sBAAsB;YACrC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EACpD,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,iBAAiB;gBACxB,iBAAiB,EAAE,gCAAgC;aACpD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACzC,IAAI,IAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC;YACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;gBAClC,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;gBAC/B,IAAI,CAAC,aAAa,CAAC,IAAI,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAC3D,EACD,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CACH,CAAC;IACF,4EAA4E;IAC5E,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;YAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,KAAK;SAC9D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,IACE,CAAC,MAAM;YACP,MAAM,CAAC,MAAM,KAAK,SAAS;YAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;YAE1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxE,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,0CAA0C,EAAE,CAAC,CAAC,EAAE,EAAE,CACzD,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;QACzB,IAAI,IAIH,CAAC;QACF,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,IACE,CAAC,IAAI,CAAC,KAAK;YACX,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YACtB,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YACnC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK;gBACN,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBACjC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC5B,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBACzB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAC1D,EACD,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,OAAO,CACtD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAClB,CAAC;QACF,IACE,CAAC,aAAa;YACd,aAAa,CAAC,MAAM,KAAK,SAAS;YAClC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;YAEjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAChD,aAAa,CAAC,YAAY,CAC3B,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QACzE,MAAM,OAAO,GAAoB;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAQ;SACvB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,wBAAwB;gBAC/B,OAAO,EAAE,2CAA2C;aACrD,EACD,GAAG,CACJ,CAAC;QACJ,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CACjD,EAAE,eAAe,EAAE,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAC1D;YACE,eAAe,EAAE,KAAK,CAAC,WAAW;YAClC,kBAAkB,EAAE,KAAK,CAAC,cAAc;SACzC,CACF,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,UAAU,GAAG,KAAK;YACtB,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC1E,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,CAAC,CAAC,MAAM,CACN,kBAAkB,EAClB,6BAA6B,IAAI,CAAC,MAAM,+DAA+D,CACxG,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,yEAAyE;QACzE,sCAAsC;QACtC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,cAAc,CAAC,IAAI,CAAC;YAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,KAAK,CACP,GAAG,EACH,cAAc,CAAC;QACb,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,MAAM;QACzB,gBAAgB,EAAE,IAAI,CAAC,WAAW;QAClC,eAAe,EAAE,KAAK,CAAC,WAAW;QAClC,uBAAuB,EAAE,KAAK,CAAC,cAAc;KAC9C,CAAC,CACH,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,0EAA0E;QAC1E,2EAA2E;QAC3E,IAAI,KAAK,YAAY,0BAA0B;YAC7C,OAAO,SAAS,CAAC,GAAG,EAAE;gBACpB,KAAK,EAAE,yBAAyB;gBAChC,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;QAEL,OAAO,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,IAA4B;IAC7D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU;SAC5B;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/middleware/local-listener.d.ts

@@ -0,0 +1,33 @@
+import type { MiddlewareHandler } from "hono";
+export interface LoopbackListenerDeps {
+    /**
+     * Port of the loopback-only auth listener (see `index.ts`). The dev UI is
+     * served ONLY to connections that arrived on this listener. `undefined`
+     * (cloud mode, or not yet bound) means the UI is never served.
+     */
+    localApprovalPort: number | undefined;
+    /**
+     * The main (tunneled) server port. If the loopback port collides with it
+     * the loopback bind fails but the port value survives, and every tunneled
+     * request would match — so a collision disables the UI outright.
+     */
+    serverPort?: number;
+}
+/**
+ * Restrict a route subtree to requests that physically arrived on the
+ * loopback auth listener, addressed it by a loopback name, and did not come
+ * from another browser origin.
+ *
+ * Why the listener port and not the peer address: the tunnel client (frpc)
+ * runs on the same host and connects to the MAIN server port from
+ * 127.0.0.1, so every tunneled request already looks local by
+ * `remoteAddress`. The one thing a remote caller can never influence is
+ * which listening socket accepted the connection — the tunnel forwards to
+ * `config.server.port` only, never to the loopback auth port.
+ *
+ * Fails closed: no socket information (tests, non-Node runtimes), no
+ * loopback listener configured, a port collision, or an unparseable URL →
+ * 404, so the subtree is invisible.
+ */
+export declare function requireLoopbackListener(deps: LoopbackListenerDeps): MiddlewareHandler;
+//# sourceMappingURL=local-listener.d.ts.map

package/dist/middleware/local-listener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-listener.d.ts","sourceRoot":"","sources":["../../src/middleware/local-listener.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAEvD,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAkED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,oBAAoB,GACzB,iBAAiB,CAgCnB"}

package/dist/middleware/local-listener.js

@@ -0,0 +1,103 @@
+const LOOPBACK_V4 = /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/;
+/** Socket-level check: is this IP address (not a hostname) loopback? */
+function isLoopbackIp(address) {
+    if (!address)
+        return false;
+    return (address === "::1" ||
+        address === "::ffff:127.0.0.1" ||
+        LOOPBACK_V4.test(address));
+}
+/**
+ * Host-header check (DNS-rebinding defense). A hostile page can point a
+ * name it controls at 127.0.0.1 and then fetch
+ * `http://attacker.example:<port>/ui`; the browser sends that name as both
+ * `Host` and `Origin`, so origin equality alone would pass and the browser
+ * would treat the response as same-origin. Only loopback literals and the
+ * exact name `localhost` may address this listener. (`URL.hostname` keeps
+ * IPv6 brackets.)
+ */
+function isLoopbackRequestHost(hostname) {
+    return (hostname === "localhost" ||
+        hostname === "127.0.0.1" ||
+        hostname === "[::1]" ||
+        hostname === "::1" ||
+        LOOPBACK_V4.test(hostname));
+}
+function getSocket(c) {
+    // Access the Node.js socket via Hono's env bindings when running on the
+    // real server (@hono/node-server sets `c.env.incoming`).
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    return c.env?.incoming?.socket;
+}
+/**
+ * Browser check. A cross-origin fetch always carries an `Origin` header
+ * naming the requesting site; same-origin navigations carry none, and the
+ * page's own fetches (if the browser adds one) carry the page's origin,
+ * which is this listener's origin. Anything else is another page in the
+ * user's browser probing the loopback listener — the app's global CORS is
+ * `*`, and not every browser enforces Private Network Access.
+ *
+ * Exact equality against the request's own origin, deliberately: hostname
+ * heuristics are bypassable (`127.attacker.example` is a public name), and
+ * another *local* origin such as `http://localhost:12345` must not read
+ * this page either. Combined with the Host allowlist above, the request
+ * origin itself is guaranteed to be a loopback origin.
+ */
+function hasForeignOrigin(c, requestOrigin) {
+    const origin = c.req.header("origin");
+    if (!origin)
+        return false;
+    try {
+        return new URL(origin).origin !== requestOrigin;
+    }
+    catch {
+        return true;
+    }
+}
+/**
+ * Restrict a route subtree to requests that physically arrived on the
+ * loopback auth listener, addressed it by a loopback name, and did not come
+ * from another browser origin.
+ *
+ * Why the listener port and not the peer address: the tunnel client (frpc)
+ * runs on the same host and connects to the MAIN server port from
+ * 127.0.0.1, so every tunneled request already looks local by
+ * `remoteAddress`. The one thing a remote caller can never influence is
+ * which listening socket accepted the connection — the tunnel forwards to
+ * `config.server.port` only, never to the loopback auth port.
+ *
+ * Fails closed: no socket information (tests, non-Node runtimes), no
+ * loopback listener configured, a port collision, or an unparseable URL →
+ * 404, so the subtree is invisible.
+ */
+export function requireLoopbackListener(deps) {
+    return async (c, next) => {
+        const port = deps.localApprovalPort;
+        if (port === undefined || port === deps.serverPort) {
+            return c.notFound();
+        }
+        const socket = getSocket(c);
+        if (!socket ||
+            socket.localPort !== port ||
+            !isLoopbackIp(typeof socket.localAddress === "string"
+                ? socket.localAddress
+                : undefined)) {
+            return c.notFound();
+        }
+        let requestUrl;
+        try {
+            requestUrl = new URL(c.req.url);
+        }
+        catch {
+            return c.notFound();
+        }
+        if (!isLoopbackRequestHost(requestUrl.hostname)) {
+            return c.notFound();
+        }
+        if (hasForeignOrigin(c, requestUrl.origin)) {
+            return c.notFound();
+        }
+        await next();
+    };
+}
+//# sourceMappingURL=local-listener.js.map

package/dist/middleware/local-listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-listener.js","sourceRoot":"","sources":["../../src/middleware/local-listener.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,GAAG,kCAAkC,CAAC;AAEvD,wEAAwE;AACxE,SAAS,YAAY,CAAC,OAA2B;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,CACL,OAAO,KAAK,KAAK;QACjB,OAAO,KAAK,kBAAkB;QAC9B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,CACL,QAAQ,KAAK,WAAW;QACxB,QAAQ,KAAK,WAAW;QACxB,QAAQ,KAAK,OAAO;QACpB,QAAQ,KAAK,KAAK;QAClB,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,CAAU;IAEV,wEAAwE;IACxE,yDAAyD;IACzD,8DAA8D;IAC9D,OAAQ,CAAC,CAAC,GAAW,EAAE,QAAQ,EAAE,MAAM,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,gBAAgB,CAAC,CAAU,EAAE,aAAqB;IACzD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAA0B;IAE1B,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YACnD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,IACE,CAAC,MAAM;YACP,MAAM,CAAC,SAAS,KAAK,IAAI;YACzB,CAAC,YAAY,CACX,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;gBACrC,CAAC,CAAC,MAAM,CAAC,YAAY;gBACrB,CAAC,CAAC,SAAS,CACd,EACD,CAAC;YACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,UAAe,CAAC;QACpB,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,gBAAgB,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@opendatalabs/personal-server-ts-server",
+  "version": "0.0.1",
+  "description": "Hono HTTP server for the Vana Personal Server — routes, middleware, composition root",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/vana-com/personal-server-ts.git",
+    "directory": "packages/server"
+  },
+  "homepage": "https://github.com/vana-com/personal-server-ts#readme",
+  "bugs": {
+    "url": "https://github.com/vana-com/personal-server-ts/issues"
+  },
+  "type": "module",
+  "main": "./dist/api.js",
+  "types": "./dist/api.d.ts",
+  "exports": {
+    "./mcp/tee": {
+      "types": "./dist/mcp/index.d.ts",
+      "import": "./dist/mcp/index.js"
+    },
+    ".": {
+      "types": "./dist/api.d.ts",
+      "import": "./dist/api.js"
+    },
+    "./config": {
+      "types": "./dist/config/index.d.ts",
+      "import": "./dist/config/index.js"
+    },
+    "./runtime": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "!dist/bundle"
+  ],
+  "scripts": {
+    "copy-ui": "mkdir -p dist/ui && cp src/ui/index.html dist/ui/index.html && cp ../lite/src/browser-tls-rustls/browser_tls_rustls_bg.wasm dist/ui/browser_tls_rustls_bg.wasm",
+    "bundle-ui": "esbuild src/ui/ps-lite-debug.ts --bundle --format=esm --platform=browser --target=es2022 --outfile=dist/ui/ps-lite-debug.js",
+    "build:bundle": "mkdir -p dist/bundle && esbuild dist/index.js --bundle --platform=node --format=esm --target=node22 --outfile=dist/bundle/enclave-main.mjs --external:better-sqlite3 --external:pino --external:pino-pretty --external:secp256k1 --external:thread-stream --packages=bundle --banner:js=\"import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __filename = __bundleFileURLToPath(import.meta.url); const __dirname = __bundleDirname(__filename);\" && cp package.json dist/package.json && npm run verify:bundle",
+    "verify:bundle": "node dist/scripts/verify-bundle.js",
+    "build": "tsc --build && npm run copy-ui && npm run bundle-ui && npm run build:bundle",
+    "start": "node dist/index.js",
+    "dev": "node --watch dist/index.js"
+  },
+  "dependencies": {
+    "@hono/node-server": "^1.19.13",
+    "@opendatalabs/personal-server-ts-core": "*",
+    "@opendatalabs/personal-server-ts-lite": "*",
+    "@opendatalabs/vana-sdk": "3.23.0-pr.211.36da1d8",
+    "better-sqlite3": "^12.11.1",
+    "hono": "^4.12.27",
+    "pino": "^10.3.1",
+    "pino-pretty": "^13.0.0",
+    "viem": "^2.54.2"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.0",
+    "esbuild": "0.28.1"
+  }
+}

package/dist/routes/enclave-fleet.d.ts

@@ -0,0 +1,14 @@
+import { Hono } from "hono";
+/** Sandbox-local endpoint. Never mounted on a full PS or a public router. */
+export declare function enclaveFleetRoutes(deps: {
+    accessToken: string;
+    hydrate(scopes: string[]): Promise<void>;
+    observe(scope: string): {
+        dataVersion: number | null;
+        ready: boolean;
+    } | Promise<{
+        dataVersion: number | null;
+        ready: boolean;
+    }>;
+}): Hono;
+//# sourceMappingURL=enclave-fleet.d.ts.map

package/dist/routes/enclave-fleet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave-fleet.d.ts","sourceRoot":"","sources":["../../src/routes/enclave-fleet.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,CACL,KAAK,EAAE,MAAM,GAEX;QAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,GAC9C,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC7D,GAAG,IAAI,CAkDP"}

package/dist/routes/enclave-fleet.js

@@ -0,0 +1,43 @@
+import { timingSafeEqual } from "node:crypto";
+import { Hono } from "hono";
+import { ScopeSchema } from "@opendatalabs/vana-sdk/protocol/scopes";
+import { createBodyLimit } from "../middleware/body-limit.js";
+/** Sandbox-local endpoint. Never mounted on a full PS or a public router. */
+export function enclaveFleetRoutes(deps) {
+    const app = new Hono();
+    app.use("*", createBodyLimit(16 * 1024));
+    app.post("/readiness", async (c) => {
+        const received = Buffer.from(c.req.header("authorization") ?? "");
+        const expected = Buffer.from(`Bearer ${deps.accessToken}`);
+        if (received.length !== expected.length ||
+            !timingSafeEqual(received, expected))
+            return c.json({ error: "authorization required" }, 401);
+        const body = (await c.req.json().catch(() => null));
+        if (!body ||
+            !Array.isArray(body.scopes) ||
+            body.scopes.length > 32 ||
+            body.scopes.some((s) => !s ||
+                !ScopeSchema.safeParse(s.scope).success ||
+                (s.minimumVersion !== undefined &&
+                    (!Number.isSafeInteger(s.minimumVersion) || s.minimumVersion < 1)))) {
+            return c.json({ error: "invalid scopes" }, 400);
+        }
+        if (body.hydrate)
+            await deps.hydrate(body.scopes.map((s) => s.scope));
+        return c.json(await Promise.all(body.scopes.map(async (s) => {
+            const observed = await deps.observe(s.scope);
+            return {
+                scope: s.scope,
+                dataVersion: observed.dataVersion,
+                state: observed.ready &&
+                    observed.dataVersion !== null &&
+                    observed.dataVersion >= (s.minimumVersion ?? 1)
+                    ? "ready"
+                    : "pending",
+                observedAt: new Date().toISOString(),
+            };
+        })));
+    });
+    return app;
+}
+//# sourceMappingURL=enclave-fleet.js.map

package/dist/routes/enclave-fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave-fleet.js","sourceRoot":"","sources":["../../src/routes/enclave-fleet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,wCAAwC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,IAQlC;IACC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACzC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,IACE,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACnC,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAEpC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAG1C,CAAC;QACT,IACE,CAAC,IAAI;YACL,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE;YACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC;gBACF,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO;gBACvC,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS;oBAC7B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CACvE,EACD,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CACX,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO;gBACL,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,KAAK,EACH,QAAQ,CAAC,KAAK;oBACd,QAAQ,CAAC,WAAW,KAAK,IAAI;oBAC7B,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC;oBAC7C,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,SAAS;gBACf,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC;QACJ,CAAC,CAAC,CACH,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/enclave-jobs.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import { type JobRequestEnvelope } from "@opendatalabs/vana-sdk/protocol/jobs";
+import type { JobExecuteResponse } from "../jobs/types.js";
+export interface EnclaveJobRouteDeps {
+    accessToken: string;
+    executeJob(envelope: JobRequestEnvelope): Promise<JobExecuteResponse>;
+}
+export declare function enclaveJobRoutes(deps: EnclaveJobRouteDeps): Hono;
+//# sourceMappingURL=enclave-jobs.d.ts.map

package/dist/routes/enclave-jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave-jobs.d.ts","sourceRoot":"","sources":["../../src/routes/enclave-jobs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,KAAK,EAEV,kBAAkB,EAEnB,MAAM,kBAAkB,CAAC;AAM1B,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACvE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CA0ChE"}

package/dist/routes/enclave-jobs.js

@@ -0,0 +1,106 @@
+import { timingSafeEqual } from "node:crypto";
+import { Hono } from "hono";
+import { isAddress, isHex } from "viem";
+import { JOB_OPERATIONS, JOB_PROTOCOL_VERSION, } from "@opendatalabs/vana-sdk/protocol/jobs";
+import { createBodyLimit } from "../middleware/body-limit.js";
+import { JobFailure } from "../jobs/worker.js";
+const MAX_JOB_BODY_BYTES = 256 * 1024;
+const BEARER_PREFIX = "Bearer ";
+export function enclaveJobRoutes(deps) {
+    const app = new Hono();
+    app.use("/execute", createBodyLimit(MAX_JOB_BODY_BYTES));
+    app.post("/execute", async (context) => {
+        if (!hasValidBearer(context.req.header("authorization"), deps.accessToken)) {
+            return context.json(jobError("AUTH_INVALID", "invalid bearer token"), 401);
+        }
+        let body;
+        try {
+            body = await context.req.json();
+        }
+        catch {
+            return context.json({ error: { message: "invalid request body" } }, 400);
+        }
+        if (!isJobEnvelope(body)) {
+            return context.json({ error: { message: "invalid request body" } }, 400);
+        }
+        try {
+            return context.json(await deps.executeJob(body), 200);
+        }
+        catch (error) {
+            if (error instanceof JobFailure) {
+                return context.json(jobError(error.code, error.message, error.retryable), statusFor(error.code));
+            }
+            return context.json(jobError("INTERNAL", "job execution failed", true), 500);
+        }
+    });
+    return app;
+}
+function hasValidBearer(header, expected) {
+    if (!header?.startsWith(BEARER_PREFIX)) {
+        return false;
+    }
+    const received = Buffer.from(header.slice(BEARER_PREFIX.length));
+    const target = Buffer.from(expected);
+    if (received.length !== target.length) {
+        return false;
+    }
+    return timingSafeEqual(received, target);
+}
+function isJobEnvelope(value) {
+    if (!isRecord(value) || !isRecord(value.request)) {
+        return false;
+    }
+    const request = value.request;
+    return (value.auth !== "" &&
+        typeof value.auth === "string" &&
+        request.v === JOB_PROTOCOL_VERSION &&
+        typeof request.jobId === "string" &&
+        isAddressValue(request.owner) &&
+        isAddressValue(request.builder) &&
+        isHexValue(request.builderPublicKey) &&
+        isHexValue(request.grantId) &&
+        typeof request.scope === "string" &&
+        JOB_OPERATIONS.some((operation) => operation === request.operation) &&
+        (request.pinnedVersion === null ||
+            typeof request.pinnedVersion === "string") &&
+        typeof request.deadline === "string");
+}
+function isAddressValue(value) {
+    return typeof value === "string" && isAddress(value);
+}
+function isHexValue(value) {
+    return typeof value === "string" && isHex(value);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function jobError(code, message, retryable = false) {
+    return { error: { code, message, retryable } };
+}
+function statusFor(code) {
+    switch (code) {
+        case "AUTH_INVALID":
+            return 401;
+        case "BUILDER_MISMATCH":
+        case "OWNER_MISMATCH":
+        case "GRANT_REVOKED":
+        case "GRANT_INVALID":
+        case "SIGNED_ARTIFACT_MISSING":
+        case "SIGNED_ARTIFACT_INVALID":
+        case "SERVER_NOT_REGISTERED":
+        case "RESULT_SIGNING_REFUSED":
+            return 403;
+        case "SCOPE_NOT_FOUND":
+            return 404;
+        case "VERSION_MISMATCH":
+            return 409;
+        case "DEADLINE_PASSED":
+            return 410;
+        case "RESULT_TOO_LARGE":
+            return 413;
+        case "RESULT_UPLOAD_FAILED":
+        case "INTERNAL":
+            return 500;
+    }
+}
+//# sourceMappingURL=enclave-jobs.js.map

package/dist/routes/enclave-jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave-jobs.js","sourceRoot":"","sources":["../../src/routes/enclave-jobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,KAAK,EAA0B,MAAM,MAAM,CAAC;AAChE,OAAO,EACL,cAAc,EACd,oBAAoB,GAErB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAM9D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;AACtC,MAAM,aAAa,GAAG,SAAS,CAAC;AAOhC,MAAM,UAAU,gBAAgB,CAAC,IAAyB;IACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACrC,IACE,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EACtE,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CACjB,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC,EAChD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;gBAChC,OAAO,OAAO,CAAC,IAAI,CACjB,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EACpD,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CACtB,CAAC;YACJ,CAAC;YAED,OAAO,OAAO,CAAC,IAAI,CACjB,QAAQ,CAAC,UAAU,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAClD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,MAA0B,EAAE,QAAgB;IAClE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAE9B,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,EAAE;QACjB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,KAAK,oBAAoB;QAClC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACjC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7B,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/B,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACpC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC;QAC3B,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACjC,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC;QACnE,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI;YAC7B,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,CAAC;QAC5C,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,QAAQ,CACf,IAAoB,EACpB,OAAe,EACf,SAAS,GAAG,KAAK;IAEjB,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAChB,IAAoB;IAEpB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,GAAG,CAAC;QACb,KAAK,kBAAkB,CAAC;QACxB,KAAK,gBAAgB,CAAC;QACtB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe,CAAC;QACrB,KAAK,yBAAyB,CAAC;QAC/B,KAAK,yBAAyB,CAAC;QAC/B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,wBAAwB;YAC3B,OAAO,GAAG,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,GAAG,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,GAAG,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb,KAAK,sBAAsB,CAAC;QAC5B,KAAK,UAAU;YACb,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/routes/enclave-mcp.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import type { McpConnectionRecord } from "@opendatalabs/personal-server-ts-core/mcp";
+import { type Address } from "viem";
+export declare function enclaveMcpRoutes(deps: {
+    accessToken: string;
+    serverOwner: Address;
+    execute(request: Request, connection: McpConnectionRecord): Promise<Response>;
+}): Hono;
+//# sourceMappingURL=enclave-mcp.d.ts.map

package/dist/routes/enclave-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave-mcp.d.ts","sourceRoot":"","sources":["../../src/routes/enclave-mcp.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAA6B,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAG/D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC/E,GAAG,IAAI,CAoDP"}