@opendatalabs/personal-server-ts-server 1.16.1 → 1.17.0

package/dist/enclave-main.js

@@ -0,0 +1,188 @@
+import { createPublicOnlyAccount } from "@opendatalabs/personal-server-ts-core/keys";
+import { isAddress, isHex } from "viem";
+import { createServer } from "./bootstrap.js";
+import { createAccessReporter } from "./jobs/access-reporter.js";
+import { loadConfig } from "./config/index.js";
+import { listenHttpServer } from "./listen.js";
+const REQUIRED_ENV = [
+    "VANA_MASTER_KEY_SIGNATURE",
+    "PS_ACCESS_TOKEN",
+    "PS_SERVER_ADDRESS",
+    "PS_SERVER_PUBLIC_KEY",
+    "ENCLAVE_AGENT_URL",
+];
+const SYNC_DISABLED = "false";
+const MAINNET_CHAIN_ID = 1_480;
+const MOKSHA_CHAIN_ID = 14_800;
+const DEFAULT_STORAGE_API_URLS = {
+    [MAINNET_CHAIN_ID]: "https://storage.vana.org",
+    [MOKSHA_CHAIN_ID]: "https://storage-dev.vana.org",
+};
+const CONTRACT_ENV = {
+    DATA_REGISTRY_CONTRACT: "dataRegistry",
+    DATA_PORTABILITY_SERVER_CONTRACT: "dataPortabilityServer",
+    DATA_PORTABILITY_GRANTEES_CONTRACT: "dataPortabilityGrantees",
+    DATA_PORTABILITY_PERMISSIONS_CONTRACT: "dataPortabilityPermissions",
+};
+export function readEnclaveEnv(env) {
+    if (env.VANA_OWNER_PRIVATE_KEY) {
+        throw new Error("VANA_OWNER_PRIVATE_KEY is forbidden in enclave profile");
+    }
+    for (const key of REQUIRED_ENV) {
+        if (!env[key]) {
+            throw new Error(`${key} is required in enclave profile`);
+        }
+    }
+    const ownerSignature = env.VANA_MASTER_KEY_SIGNATURE;
+    const accessToken = env.PS_ACCESS_TOKEN;
+    const serverAddress = env.PS_SERVER_ADDRESS;
+    const serverPublicKey = env.PS_SERVER_PUBLIC_KEY;
+    const agentUrl = env.ENCLAVE_AGENT_URL;
+    // Drop the master signature before config and application code can inspect env.
+    delete env.VANA_MASTER_KEY_SIGNATURE;
+    if (!isHex(ownerSignature)) {
+        throw new Error("VANA_MASTER_KEY_SIGNATURE must be hex encoded");
+    }
+    if (!isAddress(serverAddress)) {
+        throw new Error("PS_SERVER_ADDRESS must be an address");
+    }
+    if (!isHex(serverPublicKey)) {
+        throw new Error("PS_SERVER_PUBLIC_KEY must be hex encoded");
+    }
+    assertHttpUrl(agentUrl, "ENCLAVE_AGENT_URL");
+    return {
+        ownerSignature,
+        accessToken,
+        serverAddress,
+        serverPublicKey,
+        agentUrl,
+    };
+}
+export async function runEnclaveMain() {
+    const enclaveEnv = readEnclaveEnv(process.env);
+    const rootPath = process.env.PERSONAL_SERVER_ROOT_PATH;
+    const config = await loadConfig({ rootPath });
+    const chainId = readChainId(process.env.CHAIN_ID);
+    config.gateway.chainId = chainId;
+    for (const [envName, contractName] of Object.entries(CONTRACT_ENV)) {
+        const address = process.env[envName];
+        if (!address) {
+            continue;
+        }
+        if (!isAddress(address)) {
+            throw new Error(`${envName} must be an address`);
+        }
+        config.gateway.contracts[contractName] = address;
+    }
+    if (process.env.GATEWAY_URL) {
+        config.gateway.url = process.env.GATEWAY_URL;
+    }
+    const storageApiUrlValue = process.env.STORAGE_API_URL ?? DEFAULT_STORAGE_API_URLS[chainId];
+    if (storageApiUrlValue) {
+        let storageApiUrl;
+        try {
+            storageApiUrl = new URL(storageApiUrlValue);
+        }
+        catch {
+            throw new Error("STORAGE_API_URL must be a valid absolute https URL");
+        }
+        if (storageApiUrl.protocol !== "https:") {
+            throw new Error("STORAGE_API_URL must be a valid absolute https URL");
+        }
+        config.storage.config.vana = {
+            ...config.storage.config.vana,
+            apiUrl: storageApiUrlValue,
+        };
+    }
+    // Preview-testing hook; production fetch behaviour is unchanged when unset.
+    if (process.env.VERCEL_PROTECTION_BYPASS) {
+        installGatewayBypass(config.gateway.url, process.env.VERCEL_PROTECTION_BYPASS);
+    }
+    config.sync.enabled = process.env.SYNC_ENABLED !== SYNC_DISABLED;
+    config.devUi.enabled = false;
+    config.tunnel.enabled = false;
+    const serverAccount = createPublicOnlyAccount({
+        address: enclaveEnv.serverAddress,
+        publicKey: enclaveEnv.serverPublicKey,
+    });
+    // Enclave only: MCP reads become enclave-signed access records. Other
+    // profiles have no agent to sign them, so they report nothing.
+    const accessReporter = createAccessReporter({
+        agentEndpoint: enclaveEnv.agentUrl,
+        accessToken: enclaveEnv.accessToken,
+        chainId,
+    });
+    const context = await createServer(config, {
+        rootPath,
+        hydrateScopes: readHydrateScopes(process.env.PS_HYDRATE_SCOPES),
+        ownerSignature: enclaveEnv.ownerSignature,
+        serverAccount,
+        profile: "enclave",
+        readFulfillmentReporter: accessReporter,
+        jobResultUpload: {
+            storageEndpoint: storageApiUrlValue,
+            agentEndpoint: enclaveEnv.agentUrl,
+            accessToken: enclaveEnv.accessToken,
+            chainId,
+        },
+    });
+    const server = await listenHttpServer({
+        fetch: context.app.fetch,
+        port: config.server.port,
+        onListening: (info) => {
+            context.logger.info({ port: info.port }, "Enclave server started");
+        },
+    });
+    void context.startBackgroundServices();
+    const shutdown = (signal) => {
+        context.logger.info({ signal }, "Shutdown signal received");
+        server.close(() => {
+            void accessReporter.stop().then(() => context.cleanup());
+        });
+    };
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+    process.on("SIGINT", () => shutdown("SIGINT"));
+}
+function readHydrateScopes(value) {
+    if (!value) {
+        return undefined;
+    }
+    const scopes = [
+        ...new Set(value.split(",").map((scope) => scope.trim())),
+    ].filter(Boolean);
+    return scopes.length > 0 ? scopes : undefined;
+}
+function assertHttpUrl(value, name) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error(`${name} must be a valid absolute http(s) URL`);
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        throw new Error(`${name} must be a valid absolute http(s) URL`);
+    }
+}
+function readChainId(value) {
+    const chainId = value === undefined ? MOKSHA_CHAIN_ID : Number(value);
+    if (chainId !== MAINNET_CHAIN_ID && chainId !== MOKSHA_CHAIN_ID) {
+        throw new Error("CHAIN_ID must be 1480 or 14800");
+    }
+    return chainId;
+}
+function installGatewayBypass(gatewayUrl, secret) {
+    const gatewayOrigin = new URL(gatewayUrl).origin;
+    const requestFetch = globalThis.fetch;
+    globalThis.fetch = (input, init) => {
+        const requestUrl = new URL(input instanceof Request ? input.url : input.toString());
+        if (requestUrl.origin !== gatewayOrigin) {
+            return requestFetch(input, init);
+        }
+        const headers = new Headers(input instanceof Request ? input.headers : undefined);
+        new Headers(init?.headers).forEach((value, key) => headers.set(key, value));
+        headers.set("x-vercel-protection-bypass", secret);
+        return requestFetch(input, { ...init, headers });
+    };
+}
+//# sourceMappingURL=enclave-main.js.map

package/dist/enclave-main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave-main.js","sourceRoot":"","sources":["../src/enclave-main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,KAAK,EAA0B,MAAM,MAAM,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,YAAY,GAAG;IACnB,2BAA2B;IAC3B,iBAAiB;IACjB,mBAAmB;IACnB,sBAAsB;IACtB,mBAAmB;CACX,CAAC;AACX,MAAM,aAAa,GAAG,OAAO,CAAC;AAC9B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,wBAAwB,GAAG;IAC/B,CAAC,gBAAgB,CAAC,EAAE,0BAA0B;IAC9C,CAAC,eAAe,CAAC,EAAE,8BAA8B;CACzC,CAAC;AACX,MAAM,YAAY,GAAG;IACnB,sBAAsB,EAAE,cAAc;IACtC,gCAAgC,EAAE,uBAAuB;IACzD,kCAAkC,EAAE,yBAAyB;IAC7D,qCAAqC,EAAE,4BAA4B;CAC3D,CAAC;AAUX,MAAM,UAAU,cAAc,CAAC,GAAsB;IACnD,IAAI,GAAG,CAAC,sBAAsB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,iCAAiC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,GAAG,CAAC,yBAAmC,CAAC;IAC/D,MAAM,WAAW,GAAG,GAAG,CAAC,eAAyB,CAAC;IAClD,MAAM,aAAa,GAAG,GAAG,CAAC,iBAA2B,CAAC;IACtD,MAAM,eAAe,GAAG,GAAG,CAAC,oBAA8B,CAAC;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAA2B,CAAC;IAEjD,gFAAgF;IAChF,OAAO,GAAG,CAAC,yBAAyB,CAAC;IAErC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,aAAa,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAE7C,OAAO;QACL,cAAc;QACd,WAAW;QACX,aAAa;QACb,eAAe;QACf,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;IACjC,KAAK,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,qBAAqB,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5B,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC/C,CAAC;IACD,MAAM,kBAAkB,GACtB,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,kBAAkB,EAAE,CAAC;QACvB,IAAI,aAAkB,CAAC;QACvB,IAAI,CAAC;YACH,aAAa,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,aAAa,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG;YAC3B,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;YAC7B,MAAM,EAAE,kBAAkB;SAC3B,CAAC;IACJ,CAAC;IACD,4EAA4E;IAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;QACzC,oBAAoB,CAClB,MAAM,CAAC,OAAO,CAAC,GAAG,EAClB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CACrC,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,aAAa,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;IAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;IAE9B,MAAM,aAAa,GAAG,uBAAuB,CAAC;QAC5C,OAAO,EAAE,UAAU,CAAC,aAAa;QACjC,SAAS,EAAE,UAAU,CAAC,eAAe;KACtC,CAAC,CAAC;IACH,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,cAAc,GAAG,oBAAoB,CAAC;QAC1C,aAAa,EAAE,UAAU,CAAC,QAAQ;QAClC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,OAAO;KACR,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE;QACzC,QAAQ;QACR,aAAa,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC/D,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,aAAa;QACb,OAAO,EAAE,SAAS;QAClB,uBAAuB,EAAE,cAAc;QACvC,eAAe,EAAE;YACf,eAAe,EAAE,kBAAkB;YACnC,aAAa,EAAE,UAAU,CAAC,QAAQ;YAClC,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,OAAO;SACR;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;QACpC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK;QACxB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QACxB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;QACrE,CAAC;KACF,CAAC,CAAC;IAEH,KAAK,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YAChB,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG;QACb,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;KAC1D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAElB,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,IAAY;IAChD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,MAAc;IAC9D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC;IACtC,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACjC,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CACxD,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACxC,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CACrD,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;QAElD,OAAO,YAAY,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.js

@@ -1,33 +1,17 @@
-import { createAdaptorServer } from "@hono/node-server";
 import { createRequire } from "node:module";
 import { loadConfig } from "./config/index.js";
 import { createServer } from "./bootstrap.js";
 import { verifyTunnelUrl } from "./tunnel/index.js";
+import { runEnclaveMain } from "./enclave-main.js";
+import { listenHttpServer } from "./listen.js";
 const require = createRequire(import.meta.url);
 const pkg = require("../package.json");
 const DRAIN_TIMEOUT_MS = 5_000;
-async function listenHttpServer(params) {
-    const server = createAdaptorServer({ fetch: params.fetch });
-    await new Promise((resolve, reject) => {
-        const onError = (error) => {
-            server.off("error", onError);
-            reject(error);
-        };
-        server.once("error", onError);
-        server.listen(params.port, params.hostname, () => {
-            server.off("error", onError);
-            const address = server.address();
-            if (!address || typeof address === "string") {
-                reject(new Error("Could not resolve bound server address"));
-                return;
-            }
-            params.onListening?.(address);
-            resolve();
-        });
-    });
-    return server;
-}
 async function main() {
+    if (process.env.ENCLAVE_MODE === "true") {
+        await runEnclaveMain();
+        return;
+    }
     const rootPath = process.env.PERSONAL_SERVER_ROOT_PATH;
     const config = await loadConfig({ rootPath });
     const context = await createServer(config, { rootPath });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;AAE9D,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAI/B,KAAK,UAAU,gBAAgB,CAAC,MAK/B;IACC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAE5D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAE1C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;QACpC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QACxB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;YAEzE,IAAI,QAAQ,EAAE,CAAC;gBACb,oEAAoE;gBACpE,4BAA4B;gBAC5B,MAAM,CAAC,IAAI,CACT;oBACE,GAAG,EAAE,oBAAoB,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,KAAK;iBACrE,EACD,kBAAkB,CACnB,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,eAAuC,CAAC;IAC5C,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,eAAe,GAAG,MAAM,gBAAgB,CAAC;gBACvC,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,IAAI,EAAE,OAAO,CAAC,iBAAiB;gBAC/B,QAAQ,EAAE,WAAW;gBACrB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;oBACpB,MAAM,mBAAmB,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5D,OAAO,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;oBACpD,MAAM,CAAC,IAAI,CACT,EAAE,mBAAmB,EAAE,EACvB,gCAAgC,CACjC,CAAC;gBACJ,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,iBAAiB,EAAE,EACxC,0FAA0F,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,6EAA6E;IAC7E,OAAO,CAAC,uBAAuB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QAC1C,6EAA6E;QAC7E,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QAC7C,IACE,SAAS;YACT,aAAa;YACb,OAAO,CAAC,kBAAkB,EAAE;YAC5B,aAAa,CAAC,SAAS,EAAE,CAAC,MAAM,KAAK,OAAO,EAC5C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,sCAAsC,CAAC,CAAC;YACnE,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACzC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EACxC,qBAAqB,CACtB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAC7D,8DAA8D,CAC/D,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,QAAQ,CAAC,MAAc;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,gDAAgD,CAAC,CAAC;QAE1E,IAAI,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,eAAe,EAAE,CAAC;YACpB,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,iCAAiC;QACjC,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,gBAAgB,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAmB,MAAM,aAAa,CAAC;AAEhE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;AAE9D,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACxC,MAAM,cAAc,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAE1C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;QACpC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QACxB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;YAEzE,IAAI,QAAQ,EAAE,CAAC;gBACb,oEAAoE;gBACpE,4BAA4B;gBAC5B,MAAM,CAAC,IAAI,CACT;oBACE,GAAG,EAAE,oBAAoB,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,KAAK;iBACrE,EACD,kBAAkB,CACnB,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,eAAuC,CAAC;IAC5C,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,eAAe,GAAG,MAAM,gBAAgB,CAAC;gBACvC,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,IAAI,EAAE,OAAO,CAAC,iBAAiB;gBAC/B,QAAQ,EAAE,WAAW;gBACrB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;oBACpB,MAAM,mBAAmB,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC5D,OAAO,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;oBACpD,MAAM,CAAC,IAAI,CACT,EAAE,mBAAmB,EAAE,EACvB,gCAAgC,CACjC,CAAC;gBACJ,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,iBAAiB,EAAE,EACxC,0FAA0F,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,6EAA6E;IAC7E,OAAO,CAAC,uBAAuB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QAC1C,6EAA6E;QAC7E,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QAC7C,IACE,SAAS;YACT,aAAa;YACb,OAAO,CAAC,kBAAkB,EAAE;YAC5B,aAAa,CAAC,SAAS,EAAE,CAAC,MAAM,KAAK,OAAO,EAC5C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,sCAAsC,CAAC,CAAC;YACnE,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACzC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EACxC,qBAAqB,CACtB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAC7D,8DAA8D,CAC/D,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,QAAQ,CAAC,MAAc;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,gDAAgD,CAAC,CAAC;QAE1E,IAAI,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,eAAe,EAAE,CAAC;YACpB,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,iCAAiC;QACjC,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,gBAAgB,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/jobs/access-reporter.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Buffered access-record reporter (enclave profile only).
+ *
+ * Every MCP read the sandbox PS serves or refuses becomes one access record.
+ * The sandbox cannot reach the Gateway itself, so records go to the enclave
+ * agent, which signs them with the user's enclave key and relays them:
+ *
+ *   sandbox PS  --Bearer PS_ACCESS_TOKEN-->  agent  --node bearer-->  Gateway
+ *
+ * Reporting is best effort by contract: a read is never delayed or failed
+ * because its record could not be delivered. Delivery itself is not best
+ * effort — a failed batch is retried with backoff, and a batch that is finally
+ * given up on is logged as dropped so the gap in the owner's audit trail is
+ * visible rather than silent (security #9).
+ */
+import type { PersonalServerReadFulfillmentReporter } from "@opendatalabs/personal-server-ts-core/api";
+/** Log line a dropped batch always emits; the audit gap is a metric, not noise. */
+export declare const ACCESS_RECORDS_DROPPED = "Access records dropped";
+export interface AccessReporterLogger {
+    warn(payload: Record<string, unknown>, message: string): void;
+}
+export interface AccessReporterOptions {
+    agentEndpoint: string;
+    accessToken: string;
+    chainId: number;
+    logger?: AccessReporterLogger;
+    fetch?: typeof fetch;
+}
+export interface AccessReporter extends PersonalServerReadFulfillmentReporter {
+    /** Sends everything buffered. Resolves even when delivery failed. */
+    flush(): Promise<void>;
+    /** Stops the timer and flushes; call on shutdown. */
+    stop(): Promise<void>;
+}
+export declare function createAccessReporter(options: AccessReporterOptions): AccessReporter;
+//# sourceMappingURL=access-reporter.d.ts.map

package/dist/jobs/access-reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-reporter.d.ts","sourceRoot":"","sources":["../../src/jobs/access-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAEV,qCAAqC,EACtC,MAAM,2CAA2C,CAAC;AAsBnD,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/D;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,cAAe,SAAQ,qCAAqC;IAC3E,qEAAqE;IACrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,qDAAqD;IACrD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AA4BD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,qBAAqB,GAC7B,cAAc,CAoMhB"}

package/dist/jobs/access-reporter.js

@@ -0,0 +1,272 @@
+/**
+ * Buffered access-record reporter (enclave profile only).
+ *
+ * Every MCP read the sandbox PS serves or refuses becomes one access record.
+ * The sandbox cannot reach the Gateway itself, so records go to the enclave
+ * agent, which signs them with the user's enclave key and relays them:
+ *
+ *   sandbox PS  --Bearer PS_ACCESS_TOKEN-->  agent  --node bearer-->  Gateway
+ *
+ * Reporting is best effort by contract: a read is never delayed or failed
+ * because its record could not be delivered. Delivery itself is not best
+ * effort — a failed batch is retried with backoff, and a batch that is finally
+ * given up on is logged as dropped so the gap in the owner's audit trail is
+ * visible rather than silent (security #9).
+ */
+const ACCESS_RECORDS_PATH = "/agent/v1/access-records";
+const ACTION_READ = "read";
+const POST = "POST";
+const JSON_CONTENT_TYPE = "application/json";
+/** One request carries at most this many records; the agent enforces it too. */
+const MAX_BATCH_RECORDS = 50;
+/** A partial batch waits at most this long before it is sent. */
+const FLUSH_INTERVAL_MS = 5_000;
+/** Backstop for an unreachable agent: drop oldest rather than grow forever. */
+const MAX_QUEUED_RECORDS = 500;
+const REQUEST_TIMEOUT_MS = 10_000;
+const HTTP_BAD_REQUEST = 400;
+const HTTP_SERVER_ERROR = 500;
+/** Delivery attempts per batch before it is given up on and logged. */
+const MAX_SEND_ATTEMPTS = 3;
+/** Backoff between attempts: 500 ms, then 1 s. */
+const RETRY_BASE_DELAY_MS = 500;
+/** Log line a dropped batch always emits; the audit gap is a metric, not noise. */
+export const ACCESS_RECORDS_DROPPED = "Access records dropped";
+export function createAccessReporter(options) {
+    const requestFetch = options.fetch ?? fetch;
+    const endpoint = `${options.agentEndpoint.replace(/\/$/, "")}${ACCESS_RECORDS_PATH}`;
+    const logger = options.logger ?? consoleAccessReporterLogger;
+    const queue = [];
+    let timer;
+    let sending = Promise.resolve();
+    // Shutdown must not wait out the backoff; a stopping reporter sends once.
+    let stopping = false;
+    // Every record this reporter never delivered, across both drop paths.
+    let dropped = 0;
+    function enqueue(event) {
+        queue.push(toPayload(options.chainId, event));
+        if (queue.length > MAX_QUEUED_RECORDS) {
+            const overflow = queue.splice(0, queue.length - MAX_QUEUED_RECORDS);
+            drop(overflow, { reason: "queue_full" });
+        }
+        if (queue.length >= MAX_BATCH_RECORDS) {
+            void flush();
+            return;
+        }
+        startTimer();
+    }
+    function startTimer() {
+        if (timer)
+            return;
+        timer = setTimeout(() => {
+            timer = undefined;
+            void flush();
+        }, FLUSH_INTERVAL_MS);
+        timer.unref?.();
+    }
+    function clearFlushTimer() {
+        if (!timer)
+            return;
+        clearTimeout(timer);
+        timer = undefined;
+    }
+    // Serialized so two flushes never interleave batches on the wire.
+    function flush() {
+        clearFlushTimer();
+        sending = sending.then(async () => {
+            while (queue.length > 0) {
+                const batch = queue.splice(0, MAX_BATCH_RECORDS);
+                await send(batch);
+            }
+        });
+        return sending;
+    }
+    /**
+     * Deliver one batch, retrying a transient failure with backoff.
+     *
+     *   attempt 1 --fail--> 500 ms --> attempt 2 --fail--> 1 s --> attempt 3
+     *
+     * A 4xx is the agent refusing these records, not a blip, so it is not
+     * retried. Whatever is finally undelivered goes through `drop`, which is the
+     * one place an audit gap becomes visible.
+     */
+    async function send(records) {
+        for (let attempt = 1; attempt <= MAX_SEND_ATTEMPTS; attempt += 1) {
+            const outcome = await attemptSend(records);
+            if (outcome === null)
+                return;
+            // A 400 that names the records it objects to indicts those records, not
+            // the batch: the rest still describe reads the owner is owed.
+            if (outcome.rejected) {
+                await sendWithoutRejected(records, outcome);
+                return;
+            }
+            const lastChance = attempt === MAX_SEND_ATTEMPTS || stopping;
+            if (outcome.permanent || lastChance) {
+                drop(records, { ...detailOf(outcome), attempts: attempt });
+                return;
+            }
+            await delay(RETRY_BASE_DELAY_MS * 2 ** (attempt - 1));
+        }
+    }
+    /**
+     * Drop only the records the responder named and resend the remainder once.
+     *
+     *   [a bad b] --400 index 1--> drop [bad] --resend--> [a b]
+     *
+     * One attempt, not the full backoff ladder: the batch has already cost a
+     * round trip, and a second refusal means the remainder is no better.
+     */
+    async function sendWithoutRejected(records, failure) {
+        const rejected = new Set(failure.rejected);
+        drop(records.filter((_, index) => rejected.has(index)), { ...detailOf(failure), attempts: 1 });
+        const remainder = records.filter((_, index) => !rejected.has(index));
+        if (remainder.length === 0)
+            return;
+        const outcome = await attemptSend(remainder);
+        if (outcome === null)
+            return;
+        drop(remainder, { ...detailOf(outcome), attempts: 1 });
+    }
+    /** null when the batch landed; otherwise why it did not. */
+    async function attemptSend(records) {
+        try {
+            const response = await requestFetch(endpoint, {
+                method: POST,
+                headers: {
+                    Authorization: `Bearer ${options.accessToken}`,
+                    "Content-Type": JSON_CONTENT_TYPE,
+                },
+                body: JSON.stringify({ records }),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            if (response.ok)
+                return null;
+            return {
+                reason: `refused_${response.status}`,
+                permanent: response.status >= HTTP_BAD_REQUEST &&
+                    response.status < HTTP_SERVER_ERROR,
+                ...(await readRefusal(response, records.length)),
+            };
+        }
+        catch (err) {
+            return {
+                reason: err instanceof Error ? err.message : String(err),
+                permanent: false,
+            };
+        }
+    }
+    /**
+     * What a dropped batch is logged with. `rejected` positions are meaningless
+     * once the records they point at are gone, so they stay out of the line.
+     */
+    function detailOf(failure) {
+        return {
+            reason: failure.reason,
+            ...(failure.code === undefined ? {} : { code: failure.code }),
+        };
+    }
+    /**
+     * Records that will never reach the Gateway. Reads were already served, so
+     * this is the audit trail's gap: it is counted and logged under one stable
+     * message, never swallowed.
+     */
+    function drop(records, detail) {
+        dropped += records.length;
+        logger.warn({ count: records.length, droppedTotal: dropped, ...detail }, ACCESS_RECORDS_DROPPED);
+    }
+    function delay(ms) {
+        return new Promise((resolve) => {
+            const handle = setTimeout(resolve, ms);
+            handle.unref?.();
+        });
+    }
+    return {
+        async report(event) {
+            enqueue(event);
+        },
+        async reportDenied(event) {
+            enqueue(event);
+        },
+        flush,
+        async stop() {
+            stopping = true;
+            clearFlushTimer();
+            await flush();
+        },
+    };
+}
+/**
+ * What a refusal body says: the error code, and — on a 400 — which records it
+ * objects to. Anything unparseable leaves both unset, so a bodyless refusal
+ * behaves exactly as it did before.
+ */
+async function readRefusal(response, batchSize) {
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch {
+        return {};
+    }
+    if (typeof body !== "object" || body === null)
+        return {};
+    const refusal = body;
+    const code = refusal["code"];
+    const rejected = response.status === HTTP_BAD_REQUEST
+        ? rejectedIndices(refusal, batchSize)
+        : undefined;
+    return {
+        ...(typeof code === "string" ? { code } : {}),
+        ...(rejected === undefined ? {} : { rejected }),
+    };
+}
+/**
+ * Positions the responder objected to, in either shape it may use:
+ *
+ *   { rejected: [{ index: 1, code }, ...] }   per-record report
+ *   { error, index: 1 }                       single offending record
+ *
+ * Out-of-range or absent indices yield undefined, which keeps the caller on
+ * the whole-batch path rather than dropping records nobody named.
+ */
+function rejectedIndices(refusal, batchSize) {
+    const entries = Array.isArray(refusal["rejected"])
+        ? refusal["rejected"]
+        : [refusal];
+    const indices = new Set();
+    for (const entry of entries) {
+        if (typeof entry !== "object" || entry === null)
+            continue;
+        const index = entry["index"];
+        if (isBatchIndex(index, batchSize))
+            indices.add(index);
+    }
+    return indices.size > 0 ? [...indices] : undefined;
+}
+function isBatchIndex(value, batchSize) {
+    return (Number.isInteger(value) &&
+        value >= 0 &&
+        value < batchSize);
+}
+function toPayload(chainId, event) {
+    return {
+        action: ACTION_READ,
+        chainId,
+        ...(event.denyReason === undefined ? {} : { denyReason: event.denyReason }),
+        grantId: event.grantId,
+        granteeAddress: event.builder,
+        logId: event.logId,
+        occurredAt: event.servedAt,
+        outcome: event.outcome,
+        scope: event.scope,
+        source: event.source,
+        ...(event.tool === undefined ? {} : { tool: event.tool }),
+    };
+}
+const consoleAccessReporterLogger = {
+    warn(payload, message) {
+        console.warn(message, payload);
+    },
+};
+//# sourceMappingURL=access-reporter.js.map

package/dist/jobs/access-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-reporter.js","sourceRoot":"","sources":["../../src/jobs/access-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AACvD,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,IAAI,GAAG,MAAM,CAAC;AACpB,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,iEAAiE;AACjE,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,+EAA+E;AAC/E,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,uEAAuE;AACvE,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,kDAAkD;AAClD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AA+C/D,MAAM,UAAU,oBAAoB,CAClC,OAA8B;IAE9B,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IAC5C,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,mBAAmB,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,2BAA2B,CAAC;IAC7D,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,IAAI,KAAgD,CAAC;IACrD,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/C,0EAA0E;IAC1E,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,sEAAsE;IACtE,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,SAAS,OAAO,CAAC,KAAoC;QACnD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAE9C,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC;YACpE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;YACtC,KAAK,KAAK,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,UAAU,EAAE,CAAC;IACf,CAAC;IAED,SAAS,UAAU;QACjB,IAAI,KAAK;YAAE,OAAO;QAClB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,KAAK,GAAG,SAAS,CAAC;YAClB,KAAK,KAAK,EAAE,CAAC;QACf,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC;IAED,SAAS,eAAe;QACtB,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,KAAK,GAAG,SAAS,CAAC;IACpB,CAAC;IAED,kEAAkE;IAClE,SAAS,KAAK;QACZ,eAAe,EAAE,CAAC;QAClB,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAChC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBACjD,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,UAAU,IAAI,CAAC,OAA8B;QAChD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,iBAAiB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO;YAE7B,wEAAwE;YACxE,8DAA8D;YAC9D,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,KAAK,iBAAiB,IAAI,QAAQ,CAAC;YAC7D,IAAI,OAAO,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;gBACpC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YAED,MAAM,KAAK,CAAC,mBAAmB,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,UAAU,mBAAmB,CAChC,OAA8B,EAC9B,OAAoB;QAEpB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CACF,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EACjD,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CACtC,CAAC;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEnC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO;QAE7B,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,4DAA4D;IAC5D,KAAK,UAAU,WAAW,CACxB,OAA8B;QAE9B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE;gBAC5C,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE;oBAC9C,cAAc,EAAE,iBAAiB;iBAClC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;gBACjC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAE7B,OAAO;gBACL,MAAM,EAAE,WAAW,QAAQ,CAAC,MAAM,EAAE;gBACpC,SAAS,EACP,QAAQ,CAAC,MAAM,IAAI,gBAAgB;oBACnC,QAAQ,CAAC,MAAM,GAAG,iBAAiB;gBACrC,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;aACjD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACxD,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,SAAS,QAAQ,CAAC,OAAoB;QAIpC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,SAAS,IAAI,CACX,OAA8B,EAC9B,MAA6C;QAE7C,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;QAC1B,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,EAC3D,sBAAsB,CACvB,CAAC;IACJ,CAAC;IAED,SAAS,KAAK,CAAC,EAAU;QACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,KAAK;YACtB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QACD,KAAK;QACL,KAAK,CAAC,IAAI;YACR,QAAQ,GAAG,IAAI,CAAC;YAChB,eAAe,EAAE,CAAC;YAClB,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CACxB,QAAkB,EAClB,SAAiB;IAEjB,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAEzD,MAAM,OAAO,GAAG,IAA+B,CAAC;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,QAAQ,GACZ,QAAQ,CAAC,MAAM,KAAK,gBAAgB;QAClC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,OAAgC,EAChC,SAAiB;IAEjB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QACrB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEd,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAE1D,MAAM,KAAK,GAAI,KAAiC,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,SAAiB;IACrD,OAAO,CACL,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACtB,KAAgB,IAAI,CAAC;QACrB,KAAgB,GAAG,SAAS,CAC9B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,OAAe,EACf,KAAoC;IAEpC,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QAC3E,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,OAAO;QAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,QAAQ;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,2BAA2B,GAAyB;IACxD,IAAI,CAAC,OAAO,EAAE,OAAO;QACnB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;CACF,CAAC"}

package/dist/jobs/raw-envelope-stream.d.ts

@@ -0,0 +1,3 @@
+/** Open twice: once for bounded metadata inspection, then for streamed output. */
+export declare function openRedactedEnvelopeStream(open: () => Promise<ReadableStream<Uint8Array>>): Promise<ReadableStream<Uint8Array>>;
+//# sourceMappingURL=raw-envelope-stream.d.ts.map

package/dist/jobs/raw-envelope-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-envelope-stream.d.ts","sourceRoot":"","sources":["../../src/jobs/raw-envelope-stream.ts"],"names":[],"mappings":"AAoCA,kFAAkF;AAClF,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,GAC9C,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAQrC"}