@opendatalabs/personal-server-ts-server 1.33.8 → 1.34.0

package/dist/pdpp/bootstrap.js

@@ -0,0 +1,270 @@
+/**
+ * Boot the PDPP Authorization Server for a real Personal Server.
+ *
+ * This is the seam between "the AS exists as a library" and "this running
+ * server is a PDPP authorization server". It opens the persistent store,
+ * derives the declaration trust policy from what the deployment actually
+ * serves, and hands the route module the owner-proof wiring so consent
+ * decisions authenticate against the same wallet signature every other owner
+ * route uses.
+ *
+ * Returns undefined when PDPP is disabled and no connection registry is
+ * configured. It also returns undefined when no declarations or connection
+ * methods remain, so `/pdpp/v1` is mounted only when it can issue tokens.
+ */
+import { createHash } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { AuthorizationSessionStore, declaredSourceId, openPdppAuthStore, PdppTokenService, resolveUrlHostedClientIdentity, UnsupportedAuthStateError, } from "@opendatalabs/personal-server-ts-core/pdpp";
+import { boundedClientDocumentFetcher } from "./client-document-fetch.js";
+import { resolveRetainedSourceId } from "./source-id-compat.js";
+import { deriveSupportedConnectors, } from "./deployment.js";
+import { openDeclarationRegistry, } from "./declaration-registry.js";
+export async function createPdppAuthDeps(options) {
+    const { config, logger } = options;
+    const hasConnectionRegistry = (config.pdpp.connectionMethods?.length ?? 0) > 0;
+    if (!config.pdpp.enabled && !hasConnectionRegistry)
+        return undefined;
+    // The AS binds grants to a subject and authenticates decisions against the
+    // server owner. Without a known owner there is no subject to bind to and no
+    // signature to check, so refuse to mount rather than invent either.
+    if (!options.serverOwner) {
+        logger.warn("PDPP enabled but no server owner is configured — authorization server not mounted");
+        return undefined;
+    }
+    // The connector inventory is what this PS holds. It gates runtime
+    // submissions only. A configured declaration is admitted without it: the
+    // operator (Desktop, after verifying the signed artifact) chose it, and a
+    // fresh server that holds no legacy data yet must still mount it.
+    const { scopes } = options.indexManager.listDistinctScopes();
+    const supportedConnectors = deriveSupportedConnectors(scopes.map((s) => s.scope));
+    const declarations = await readDeclarations(config.pdpp.enabled ? config.pdpp.declarationPaths : [], logger);
+    const declarationSourceByPath = new Map(declarations
+        .filter((declaration) => declaration.path)
+        .map((declaration) => [resolve(declaration.path), declaration.sourceId]));
+    const configuredMethods = (config.pdpp.enabled ? config.pdpp.methods : []).flatMap((method) => {
+        const sourceId = declarationSourceByPath.get(resolve(method.declaration_path));
+        if (!sourceId) {
+            logger.warn({
+                declarationPath: method.declaration_path,
+                methodId: method.method_id,
+            }, "PDPP method does not reference a retained declaration — method is inactive");
+            return [];
+        }
+        return [{ sourceId, methodId: method.method_id }];
+    });
+    const connectionMethods = new Map();
+    for (const method of config.pdpp.connectionMethods ?? []) {
+        const methods = connectionMethods.get(method.source_id) ?? [];
+        methods.push(method.method_id);
+        connectionMethods.set(method.source_id, methods);
+    }
+    const connectionSourceIds = new Set(connectionMethods.keys());
+    // The durable registry the submission route writes to, seeded from the
+    // configured paths. Seeds and submissions share one validator; only
+    // submissions are held to the connector gate. A submitted declaration
+    // becomes resolvable in this lifetime and survives the next restart.
+    const declarationRegistry = openDeclarationRegistry({
+        path: join(options.storageRoot, "pdpp-declarations.db"),
+        supportedConnectors,
+        logger,
+        seed: declarations.map((d) => ({
+            sourceId: d.sourceId,
+            document: d.document,
+        })),
+    });
+    const registry = {
+        resolve: declarationRegistry.resolve,
+        retained: config.pdpp.enabled ? declarationRegistry.list() : [],
+        retainedDocuments: new Map(declarationRegistry
+            .list()
+            .map((snapshot) => [
+            snapshot.source_id,
+            declarationRegistry.documentFor(snapshot.source_id) ?? "",
+        ])),
+    };
+    const retainedSourceIds = new Set(registry.retained.map((declaration) => declaration.source_id));
+    const activeConfiguredMethods = configuredMethods.filter((method) => retainedSourceIds.has(method.sourceId));
+    for (const method of activeConfiguredMethods) {
+        const methods = connectionMethods.get(method.sourceId) ?? [];
+        if (!methods.includes(method.methodId))
+            methods.push(method.methodId);
+        connectionMethods.set(method.sourceId, methods);
+    }
+    for (const sourceId of connectionMethods.keys()) {
+        connectionSourceIds.add(sourceId);
+    }
+    if (registry.retained.length === 0 && connectionSourceIds.size === 0) {
+        logger.warn({ supportedConnectors, configured: config.pdpp.declarationPaths.length }, "PDPP enabled but no declarations were retained — authorization server not mounted");
+        return undefined;
+    }
+    let store;
+    try {
+        store = openPdppAuthStore(join(options.storageRoot, "pdpp-auth.db"));
+    }
+    catch (err) {
+        if (err instanceof UnsupportedAuthStateError) {
+            // §9 AS item 21: persisted authorization state whose contract this build
+            // cannot validate must not be reinterpreted. Refusing to mount is the
+            // conservative half of "migrate or require fresh consent" — the server
+            // keeps running, but it issues nothing against state it cannot read.
+            logger.error({ err: err.message }, "PDPP authorization state is unsupported — authorization server not mounted");
+            return undefined;
+        }
+        throw err;
+    }
+    const tokens = new PdppTokenService(store);
+    const sessions = new AuthorizationSessionStore();
+    const subjectId = options.serverOwner.toLowerCase();
+    logger.info({
+        declarations: registry.retained.map((d) => d.source_id),
+        supportedConnectors,
+        requirePkce: config.pdpp.requirePkce,
+    }, "PDPP Authorization Server mounted at /pdpp/v1");
+    return {
+        logger,
+        store,
+        tokens,
+        sessions,
+        retainedDeclarations: registry.retained,
+        retainedDocuments: registry.retainedDocuments,
+        configuredMethods: activeConfiguredMethods,
+        connectionMethods,
+        resolveConnectionSourceId: (requested) => resolveRetainedSourceId(requested, connectionSourceIds),
+        resolveDeclaration: config.pdpp.enabled ? registry.resolve : () => null,
+        declarationRegistry,
+        supportedConnectors,
+        // The AS's own issuer identity, for its metadata document. Carried as the
+        // same thunk-or-string `serverOrigin` already is, so a deployment that
+        // resolves its origin late still advertises the live one.
+        issuer: options.serverOrigin,
+        // The records bootstrap replaces this with a live registry lookup once
+        // the shared SQLite store is available. Until then, no connection is
+        // eligible for consent.
+        inventoryFor: () => ({ eligibleFor: () => [] }),
+        /**
+         * Bind the session's subject to an *authenticated* owner.
+         *
+         * This PS is single-owner, so there is only ever one subject — but "there
+         * is one subject" and "any caller may open a session bound to it" are
+         * different claims, and the second is the one that was wrong. Previously
+         * this ignored the request entirely and returned the configured owner, so
+         * an unauthenticated caller could create sessions against the owner's
+         * subject: consent-screen spam and unbounded session allocation, even
+         * though approval still required a real owner token.
+         *
+         * Now the caller must present an active PDPP owner token, and the subject
+         * it resolves to must be the configured owner. Single-owner stays a
+         * deployment property; it stops being an authentication bypass.
+         */
+        currentSubjectId: (c) => {
+            const header = c.req.header("authorization");
+            if (!header?.toLowerCase().startsWith("bearer "))
+                return null;
+            const presented = header.slice(7).trim();
+            if (presented.length === 0)
+                return null;
+            const context = tokens.resolveToken(presented);
+            if (!context.active || context.tokenKind !== "owner")
+                return null;
+            // A token for some other subject is not authority here, even though a
+            // single-owner deployment should never mint one.
+            if (context.subjectId !== subjectId)
+                return null;
+            return subjectId;
+        },
+        // Redirect targets are validated by exact match against this. A client
+        // absent from the config gets null, which fails the request closed — an
+        // unregistered client cannot receive an authorization code.
+        registeredClient: (clientId) => {
+            const registered = config.pdpp.clients.find((candidate) => candidate.clientId === clientId);
+            return registered
+                ? {
+                    client_id: registered.clientId,
+                    redirect_uris: registered.redirectUris,
+                }
+                : null;
+        },
+        // Operator grant-lifetime policy, per registered client. Only a client
+        // with a `grantLifetimeSeconds` in config gets a computed expiry; every
+        // other client (including one resolved via `resolveClientIdentity`) gets
+        // `undefined` here, which preserves the existing no-expiry behavior
+        // exactly. This is deployment policy read from static config, never from
+        // the request — there is no client-supplied expiry field to honor.
+        grantExpiryFor: (_request, clientId) => {
+            const registered = config.pdpp.clients.find((candidate) => candidate.clientId === clientId);
+            const lifetimeSeconds = registered?.grantLifetimeSeconds;
+            if (!lifetimeSeconds)
+                return undefined;
+            return new Date(Date.now() + lifetimeSeconds * 1000).toISOString();
+        },
+        // §6 URL-hosted identity for a client NOT in `clients` above. Left
+        // unset (undefined, not a function that always fails) when the
+        // allowlist is empty, so this deployment performs no outbound fetch and
+        // the route's registration-only fallback runs exactly as it did before
+        // this path existed.
+        resolveClientIdentity: config.pdpp.urlHostedClientHosts.length > 0
+            ? (clientId) => resolveUrlHostedClientIdentity({
+                clientId,
+                fetcher: boundedClientDocumentFetcher,
+                policy: { trustedHosts: config.pdpp.urlHostedClientHosts },
+            })
+            : undefined,
+        requirePkce: config.pdpp.requirePkce,
+        ownerAuth: {
+            serverOrigin: options.serverOrigin,
+            serverOwner: options.serverOwner,
+            devToken: options.devToken,
+            accessToken: options.accessToken,
+            tokenStore: options.tokenStore,
+        },
+        // The verified signer is the owner; normalize to the same subject the
+        // grants use so a token minted here resolves sessions created above.
+        ownerSubjectId: () => subjectId,
+    };
+}
+/**
+ * Read each configured declaration document.
+ *
+ * A path that cannot be read is logged and skipped rather than fatal: one
+ * bad declaration should not stop a server booting, and the registry will
+ * refuse to mount if nothing survives.
+ */
+async function readDeclarations(entries, logger) {
+    const out = [];
+    for (const entry of entries) {
+        const path = typeof entry === "string" ? entry : entry.path;
+        try {
+            const document = await readFile(path, "utf-8");
+            if (typeof entry !== "string") {
+                const actual = createHash("sha256")
+                    .update(document, "utf8")
+                    .digest("hex");
+                if (actual !== entry.sha256) {
+                    logger.warn({ path, expected: entry.sha256, actual }, "PDPP declaration does not match its pinned digest — skipped");
+                    continue;
+                }
+            }
+            // The source id is the declaration's own claim; `parseDeclaration`
+            // cross-checks it, so read it here only to key the retention.
+            //
+            // Asking Core for the id rather than picking a field keeps the boot path
+            // shape-agnostic. Reading `source_id` directly meant a normative §5
+            // document -- which nests it under `source.id` -- was skipped here before
+            // the parser (which handles both) ever saw it, so the AS never mounted
+            // and the only evidence was a warning about a missing field the document
+            // was never supposed to have.
+            const sourceId = declaredSourceId(document);
+            if (sourceId === null) {
+                logger.warn({ path }, "PDPP declaration declares no source id — skipped");
+                continue;
+            }
+            out.push({ sourceId, document, path });
+        }
+        catch (err) {
+            logger.warn({ path, err: err.message }, "PDPP declaration could not be read — skipped");
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/pdpp/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/pdpp/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAK1C,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,4CAA4C,CAAC;AAGpD,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EACL,yBAAyB,GAE1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,uBAAuB,GAExB,MAAM,2BAA2B,CAAC;AAkDnC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAkC;IAElC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACnC,MAAM,qBAAqB,GACzB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,qBAAqB;QAAE,OAAO,SAAS,CAAC;IAErE,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CACT,mFAAmF,CACpF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC;IAC7D,MAAM,mBAAmB,GAAG,yBAAyB,CACnD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAC3B,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,gBAAgB,CACzC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EACvD,MAAM,CACP,CAAC;IACF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CACrC,YAAY;SACT,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;SACzC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAK,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAC5E,CAAC;IACF,MAAM,iBAAiB,GAAG,CACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAC/C,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACnB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAC1C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CACjC,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CACT;gBACE,eAAe,EAAE,MAAM,CAAC,gBAAgB;gBACxC,QAAQ,EAAE,MAAM,CAAC,SAAS;aAC3B,EACD,4EAA4E,CAC7E,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAoB,CAAC;IACtD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;IAE9D,uEAAuE;IACvE,oEAAoE;IACpE,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;QAClD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,sBAAsB,CAAC;QACvD,mBAAmB;QACnB,MAAM;QACN,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,mBAAmB,CAAC,OAAO;QACpC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QAC/D,iBAAiB,EAAE,IAAI,GAAG,CACxB,mBAAmB;aAChB,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YACjB,QAAQ,CAAC,SAAS;YAClB,mBAAmB,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE;SAC1D,CAAC,CACL;KACF,CAAC;IAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAC9D,CAAC;IACF,MAAM,uBAAuB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAClE,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CACvC,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtE,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;QAChD,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrE,MAAM,CAAC,IAAI,CACT,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EACxE,mFAAmF,CACpF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;YAC7C,yEAAyE;YACzE,sEAAsE;YACtE,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EACpB,4EAA4E,CAC7E,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;IAEpD,MAAM,CAAC,IAAI,CACT;QACE,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,mBAAmB;QACnB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;KACrC,EACD,+CAA+C,CAChD,CAAC;IAEF,OAAO;QACL,MAAM;QACN,KAAK;QACL,MAAM;QACN,QAAQ;QACR,oBAAoB,EAAE,QAAQ,CAAC,QAAQ;QACvC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,iBAAiB,EAAE,uBAAuB;QAC1C,iBAAiB;QACjB,yBAAyB,EAAE,CAAC,SAAS,EAAE,EAAE,CACvC,uBAAuB,CAAC,SAAS,EAAE,mBAAmB,CAAC;QACzD,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI;QACvE,mBAAmB;QACnB,mBAAmB;QACnB,0EAA0E;QAC1E,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,EAAE,OAAO,CAAC,YAAY;QAC5B,uEAAuE;QACvE,qEAAqE;QACrE,wBAAwB;QACxB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C;;;;;;;;;;;;;;WAcG;QACH,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAExC,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC;YAClE,sEAAsE;YACtE,iDAAiD;YACjD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACjD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,4DAA4D;QAC5D,gBAAgB,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CACzC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAC/C,CAAC;YACF,OAAO,UAAU;gBACf,CAAC,CAAC;oBACE,SAAS,EAAE,UAAU,CAAC,QAAQ;oBAC9B,aAAa,EAAE,UAAU,CAAC,YAAY;iBACvC;gBACH,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,oEAAoE;QACpE,yEAAyE;QACzE,mEAAmE;QACnE,cAAc,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACrC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CACzC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAC/C,CAAC;YACF,MAAM,eAAe,GAAG,UAAU,EAAE,oBAAoB,CAAC;YACzD,IAAI,CAAC,eAAe;gBAAE,OAAO,SAAS,CAAC;YACvC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACrE,CAAC;QACD,mEAAmE;QACnE,+DAA+D;QAC/D,wEAAwE;QACxE,uEAAuE;QACvE,qBAAqB;QACrB,qBAAqB,EACnB,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC;YACzC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CACX,8BAA8B,CAAC;gBAC7B,QAAQ;gBACR,OAAO,EAAE,4BAA4B;gBACrC,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;aAC3D,CAAC;YACN,CAAC,CAAC,SAAS;QACf,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;QACpC,SAAS,EAAE;YACT,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B;QACD,sEAAsE;QACtE,qEAAqE;QACrE,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,OAAiD,EACjD,MAAc;IAEd,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;qBAChC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC;qBACxB,MAAM,CAAC,KAAK,CAAC,CAAC;gBACjB,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC5B,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EACxC,6DAA6D,CAC9D,CAAC;oBACF,SAAS;gBACX,CAAC;YACH,CAAC;YACD,mEAAmE;YACnE,8DAA8D;YAC9D,EAAE;YACF,yEAAyE;YACzE,oEAAoE;YACpE,0EAA0E;YAC1E,uEAAuE;YACvE,yEAAyE;YACzE,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,EACR,kDAAkD,CACnD,CAAC;gBACF,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EACrC,8CAA8C,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/pdpp/chain-enforcement.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Enforcing the Vana chain permission on PDPP client reads.
+ *
+ * ## The gap this closes
+ *
+ * A PDPP access token proves the owner consented. It does not prove the Vana
+ * permission that authorizes the read is still live. Those are two authorities
+ * over two different objects, and the bearer read path checked only the first:
+ * it resolved a locally-issued token in-process and served records. So a
+ * permission revoked on chain kept reading fine through PDPP, and the ledger's
+ * authority was silently not enforced for any PDPP client.
+ *
+ * This adapter is the join. It looks up the retained binding for the presented
+ * PDPP grant, reads the chain grant live, and hands both to
+ * `verifyPdppGrantBinding`, which checks every axis at once: the record, the
+ * deployment, the owner, the grantee app, and revocation.
+ *
+ * ## Why the verification is not re-implemented here
+ *
+ * `packages/core/src/grants/pdpp-binding.ts` already does it, and correctly:
+ * bindings are keyed by the chain's own identity tuple rather than a derived
+ * hash, the record is append-only, and revocation is read live instead of
+ * mirrored into storage. Re-deriving any of that here would create a second
+ * opinion about what a valid binding is, and the two would drift. This file
+ * only supplies inputs and translates the outcome.
+ *
+ * `verifyPdppGrantBinding` checks revocation but NOT expiry — that axis is
+ * added here, immediately after it passes, using the same
+ * `parseGrantExpiresAtSeconds` the legacy chain-grant read path
+ * (`verifyDataReadPolicy`) uses. Without it, this bearer path would silently
+ * keep serving an expired-but-not-revoked grant that the legacy path already
+ * denies — a gap, not a design choice.
+ *
+ * ## Fail closed, and the retryable distinction
+ *
+ * Every denial path answers "no". The only judgment this file makes is whether
+ * a "no" is *definite* or merely *unknown*:
+ *
+ *   - No binding, wrong owner, wrong grantee, revoked, expired → definite.
+ *     Asking again changes nothing.
+ *   - Gateway unreachable, RPC timeout, malformed response → unknown.
+ *
+ * Unknown must still deny. Not knowing is not permission, and an outage that
+ * opened reads would be an authorization bypass that nobody notices, because
+ * the reads all look successful. What unknown gets is a *retryable* answer, so
+ * the route can say "try again" rather than "your grant is dead" to a client
+ * whose grant is probably fine.
+ *
+ * A missing binding is deliberately in the definite-denial bucket, not the
+ * unknown one. "Not bound yet" and "never bound" are indistinguishable from
+ * here, so treating absence as a temporary condition would let an unbound
+ * grant read for as long as a caller kept retrying.
+ */
+import { type PdppGrantBindingStore } from "@opendatalabs/personal-server-ts-core/grants";
+import type { GatewayGrantResponse } from "@opendatalabs/vana-sdk/browser";
+import type { Logger } from "pino";
+import type { PdppChainEnforcementPort } from "../routes/pdpp-records.js";
+export interface ChainEnforcementOptions {
+    /** Retained bindings, written at grant creation. */
+    bindings: PdppGrantBindingStore;
+    /**
+     * Reads the chain grant as it stands NOW. Returning null means "this
+     * permission does not exist", which `verifyPdppGrantBinding` treats as
+     * revoked; THROWING means "I could not find out", which is retryable.
+     *
+     * The two are different answers and must not be collapsed: a gateway that
+     * returns null on a network error would turn every outage into a permanent
+     * revocation for every client.
+     */
+    readChainGrant(permissionId: string): Promise<GatewayGrantResponse | null>;
+    /** The owner this server is configured for, at read time. */
+    serverOwner: `0x${string}`;
+    /** The deployment the PS is configured against. */
+    deployment: {
+        chainId: number;
+        contractAddress: `0x${string}`;
+    };
+    /**
+     * The app's grantee wallet address for a given PDPP `client_id`.
+     *
+     * Resolved per request rather than taken from the binding, because this is
+     * the half that proves the CALLER is the bound app rather than merely
+     * knowing its grant id. Returning null denies.
+     */
+    granteeAddressFor(clientId: string): `0x${string}` | null;
+    logger: Logger;
+    /**
+     * Deterministic clock for expiry comparisons. Defaults to the real clock;
+     * tests inject a fixed value so expiry assertions aren't a race against
+     * wall time.
+     */
+    now?: () => Date;
+}
+export declare function chainPermissionEnforcement(options: ChainEnforcementOptions): PdppChainEnforcementPort;
+//# sourceMappingURL=chain-enforcement.d.ts.map

package/dist/pdpp/chain-enforcement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-enforcement.d.ts","sourceRoot":"","sources":["../../src/pdpp/chain-enforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAEV,wBAAwB,EACzB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,uBAAuB;IACtC,oDAAoD;IACpD,QAAQ,EAAE,qBAAqB,CAAC;IAChC;;;;;;;;OAQG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAC3E,6DAA6D;IAC7D,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;IAC3B,mDAAmD;IACnD,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,KAAK,MAAM,EAAE,CAAA;KAAE,CAAC;IAChE;;;;;;OAMG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,MAAM,EAAE,GAAG,IAAI,CAAC;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,uBAAuB,GAC/B,wBAAwB,CAmG1B"}

package/dist/pdpp/chain-enforcement.js

@@ -0,0 +1,145 @@
+/**
+ * Enforcing the Vana chain permission on PDPP client reads.
+ *
+ * ## The gap this closes
+ *
+ * A PDPP access token proves the owner consented. It does not prove the Vana
+ * permission that authorizes the read is still live. Those are two authorities
+ * over two different objects, and the bearer read path checked only the first:
+ * it resolved a locally-issued token in-process and served records. So a
+ * permission revoked on chain kept reading fine through PDPP, and the ledger's
+ * authority was silently not enforced for any PDPP client.
+ *
+ * This adapter is the join. It looks up the retained binding for the presented
+ * PDPP grant, reads the chain grant live, and hands both to
+ * `verifyPdppGrantBinding`, which checks every axis at once: the record, the
+ * deployment, the owner, the grantee app, and revocation.
+ *
+ * ## Why the verification is not re-implemented here
+ *
+ * `packages/core/src/grants/pdpp-binding.ts` already does it, and correctly:
+ * bindings are keyed by the chain's own identity tuple rather than a derived
+ * hash, the record is append-only, and revocation is read live instead of
+ * mirrored into storage. Re-deriving any of that here would create a second
+ * opinion about what a valid binding is, and the two would drift. This file
+ * only supplies inputs and translates the outcome.
+ *
+ * `verifyPdppGrantBinding` checks revocation but NOT expiry — that axis is
+ * added here, immediately after it passes, using the same
+ * `parseGrantExpiresAtSeconds` the legacy chain-grant read path
+ * (`verifyDataReadPolicy`) uses. Without it, this bearer path would silently
+ * keep serving an expired-but-not-revoked grant that the legacy path already
+ * denies — a gap, not a design choice.
+ *
+ * ## Fail closed, and the retryable distinction
+ *
+ * Every denial path answers "no". The only judgment this file makes is whether
+ * a "no" is *definite* or merely *unknown*:
+ *
+ *   - No binding, wrong owner, wrong grantee, revoked, expired → definite.
+ *     Asking again changes nothing.
+ *   - Gateway unreachable, RPC timeout, malformed response → unknown.
+ *
+ * Unknown must still deny. Not knowing is not permission, and an outage that
+ * opened reads would be an authorization bypass that nobody notices, because
+ * the reads all look successful. What unknown gets is a *retryable* answer, so
+ * the route can say "try again" rather than "your grant is dead" to a client
+ * whose grant is probably fine.
+ *
+ * A missing binding is deliberately in the definite-denial bucket, not the
+ * unknown one. "Not bound yet" and "never bound" are indistinguishable from
+ * here, so treating absence as a temporary condition would let an unbound
+ * grant read for as long as a caller kept retrying.
+ */
+import { verifyPdppGrantBinding, } from "@opendatalabs/personal-server-ts-core/grants";
+import { parseGrantExpiresAtSeconds } from "@opendatalabs/personal-server-ts-core/policy";
+export function chainPermissionEnforcement(options) {
+    const { bindings, deployment, logger, serverOwner } = options;
+    return {
+        async authorize({ clientId, pdppGrantId }) {
+            const binding = bindings.getByPdppGrantId(pdppGrantId);
+            if (!binding) {
+                // Definite: absence of a binding is not a pending state.
+                return {
+                    ok: false,
+                    reason: "No chain binding for this grant",
+                    retryable: false,
+                };
+            }
+            const granteeAddress = options.granteeAddressFor(clientId);
+            if (!granteeAddress) {
+                return {
+                    ok: false,
+                    reason: "No grantee address for this client",
+                    retryable: false,
+                };
+            }
+            let chainGrant;
+            try {
+                chainGrant = await options.readChainGrant(binding.permission.permissionId);
+            }
+            catch (err) {
+                // Unknown, not denied. Logged at warn because a persistent unknown is
+                // an outage worth paging on, and it is invisible in the response.
+                logger.warn({
+                    err: err.message,
+                    permissionId: binding.permission.permissionId,
+                    pdppGrantId,
+                }, "PDPP chain enforcement: could not read chain grant");
+                return {
+                    ok: false,
+                    reason: "Chain grant could not be read",
+                    retryable: true,
+                };
+            }
+            try {
+                verifyPdppGrantBinding({
+                    binding,
+                    chainGrant,
+                    deployment,
+                    pdppGrantId,
+                    // The caller proves it is the app by being the bound grantee. On the
+                    // bearer path the token IS the proof of which client is calling, so
+                    // the resolved address for that client_id stands in for a signature.
+                    requestSigner: granteeAddress,
+                    serverOwner,
+                });
+            }
+            catch (err) {
+                // Every failure here is definite: owner mismatch, grantee mismatch,
+                // wrong deployment, or revocation. None improve on retry.
+                return {
+                    ok: false,
+                    reason: err.message,
+                    retryable: false,
+                };
+            }
+            // `verifyPdppGrantBinding` does not check expiry — it only checks
+            // revocation. The legacy `/v1/data/:scope` chain-grant read path
+            // (`verifyDataReadPolicy`) enforces `grant.expiresAt`; this bearer path
+            // must not silently skip a check that path already makes. `chainGrant`
+            // is non-null here (a null grant already returned above via
+            // `verifyPdppGrantBinding`'s "not found = revoked" check).
+            const expiresAtSec = parseGrantExpiresAtSeconds(chainGrant.expiresAt);
+            if (expiresAtSec === null) {
+                return {
+                    ok: false,
+                    reason: "Grant expiry is invalid",
+                    retryable: false,
+                };
+            }
+            if (expiresAtSec > 0) {
+                const nowSec = Math.floor((options.now?.() ?? new Date()).getTime() / 1000);
+                if (expiresAtSec < nowSec) {
+                    return {
+                        ok: false,
+                        reason: "Grant has expired",
+                        retryable: false,
+                    };
+                }
+            }
+            return { ok: true };
+        },
+    };
+}
+//# sourceMappingURL=chain-enforcement.js.map

package/dist/pdpp/chain-enforcement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-enforcement.js","sourceRoot":"","sources":["../../src/pdpp/chain-enforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,EACL,sBAAsB,GAEvB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AA0C1F,MAAM,UAAU,0BAA0B,CACxC,OAAgC;IAEhC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAE9D,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE;YACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,yDAAyD;gBACzD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,iCAAiC;oBACzC,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,oCAAoC;oBAC5C,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,CAAC;YAED,IAAI,UAAuC,CAAC;YAC5C,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CACvC,OAAO,CAAC,UAAU,CAAC,YAAY,CAChC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sEAAsE;gBACtE,kEAAkE;gBAClE,MAAM,CAAC,IAAI,CACT;oBACE,GAAG,EAAG,GAAa,CAAC,OAAO;oBAC3B,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY;oBAC7C,WAAW;iBACZ,EACD,oDAAoD,CACrD,CAAC;gBACF,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,+BAA+B;oBACvC,SAAS,EAAE,IAAI;iBAChB,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,sBAAsB,CAAC;oBACrB,OAAO;oBACP,UAAU;oBACV,UAAU;oBACV,WAAW;oBACX,qEAAqE;oBACrE,oEAAoE;oBACpE,qEAAqE;oBACrE,aAAa,EAAE,cAAc;oBAC7B,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,oEAAoE;gBACpE,0DAA0D;gBAC1D,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAG,GAAa,CAAC,OAAO;oBAC9B,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,CAAC;YAED,kEAAkE;YAClE,iEAAiE;YACjE,wEAAwE;YACxE,uEAAuE;YACvE,4DAA4D;YAC5D,2DAA2D;YAC3D,MAAM,YAAY,GAAG,0BAA0B,CAAC,UAAW,CAAC,SAAS,CAAC,CAAC;YACvE,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,yBAAyB;oBACjC,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CACjD,CAAC;gBACF,IAAI,YAAY,GAAG,MAAM,EAAE,CAAC;oBAC1B,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,mBAAmB;wBAC3B,SAAS,EAAE,KAAK;qBACjB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/pdpp/client-document-fetch.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Bounded production fetcher for a URL-hosted client identity document
+ * (Core §6). Implements `ClientDocumentFetcher` from
+ * `@opendatalabs/personal-server-ts-core/pdpp`.
+ *
+ * Invariants:
+ *   - HTTPS only.
+ *   - Every address actually dialed is checked: a hostname's DNS answers via
+ *     a custom `lookup` on the `undici` dispatcher (defends DNS rebinding —
+ *     `net`/`tls`/`undici` dial exactly the address `lookup` returns, so
+ *     there is no separate resolution to race), and a literal-IP URL
+ *     hostname separately, since that never reaches `dns.lookup` at all.
+ *   - No redirect is followed; a redirect or an oversized/rejected body is
+ *     drained (`discardBody`), never left dangling on the socket.
+ *   - One `AbortSignal`/timeout spans connect + headers + body + cleanup.
+ *   - The body is read incrementally and dropped past the byte cap.
+ *   - No credentials are forwarded.
+ */
+import { Agent } from "undici";
+import type { ClientDocumentFetcher } from "@opendatalabs/personal-server-ts-core/pdpp";
+export declare const FETCH_TIMEOUT_MS = 5000;
+export declare const MAX_RESPONSE_BYTES: number;
+/** Thrown by the connect-time guard; surfaces as a `fetch_failed` result. */
+export declare class BlockedAddressError extends Error {
+}
+export declare function isBlockedAddress(address: string): boolean;
+/**
+ * Build a dispatcher that only ever connects to an address that passes the
+ * guard, bundled with the exact predicate it was built with so a caller
+ * can't pass a mismatched one to the pre-dial literal-IP check in
+ * {@link createBoundedFetcher}. `tlsOpts` is exposed solely so tests can
+ * trust a local self-signed certificate; `isBlocked` lets tests run against
+ * loopback without disabling the guard mechanism itself. Production code
+ * must call {@link boundedClientDocumentFetcher}, which passes neither.
+ */
+declare function buildGuardedAgent(tlsOpts?: {
+    ca?: string | Buffer;
+    isBlocked?: (address: string) => boolean;
+}): {
+    dispatcher: Agent;
+    isBlocked: (address: string) => boolean;
+};
+/**
+ * Build a bounded `ClientDocumentFetcher`. HTTPS-only, no redirects, one
+ * connect+headers+body timeout, a streamed byte cap, and address validation
+ * on every DNS answer *and* on a literal-IP hostname (which never reaches
+ * `dns.lookup`, so the dispatcher's guarded `lookup` alone would miss it).
+ *
+ * Takes {@link buildGuardedAgent}'s return value as a whole (not just its
+ * `dispatcher`) so the pre-dial literal-IP check always uses the exact same
+ * predicate the dispatcher's `lookup` guard was built with — there is no
+ * call shape that lets the two diverge.
+ */
+declare function createBoundedFetcher({ dispatcher, isBlocked, }: ReturnType<typeof buildGuardedAgent>): ClientDocumentFetcher;
+/** The production fetcher: no test-only overrides reach this path. */
+export declare const boundedClientDocumentFetcher: ClientDocumentFetcher;
+/** Test-only seam: same bounds, with a dispatcher that trusts a test CA. */
+export declare const __testing: {
+    createBoundedFetcher: typeof createBoundedFetcher;
+    buildGuardedAgent: typeof buildGuardedAgent;
+};
+export {};
+//# sourceMappingURL=client-document-fetch.d.ts.map

package/dist/pdpp/client-document-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-document-fetch.d.ts","sourceRoot":"","sources":["../../src/pdpp/client-document-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAE,KAAK,EAAwB,MAAM,QAAQ,CAAC;AAGrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAExF,eAAO,MAAM,gBAAgB,OAAQ,CAAC;AACtC,eAAO,MAAM,kBAAkB,QAAY,CAAC;AAE5C,6EAA6E;AAC7E,qBAAa,mBAAoB,SAAQ,KAAK;CAAG;AAyCjD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAIzD;AAwED;;;;;;;;GAQG;AACH,iBAAS,iBAAiB,CAAC,OAAO,CAAC,EAAE;IACnC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;CAC1C,GAAG;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,CAQjE;AAwCD;;;;;;;;;;GAUG;AACH,iBAAS,oBAAoB,CAAC,EAC5B,UAAU,EACV,SAAS,GACV,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,GAAG,qBAAqB,CAwD9D;AAmBD,sEAAsE;AACtE,eAAO,MAAM,4BAA4B,EAAE,qBACZ,CAAC;AAEhC,4EAA4E;AAC5E,eAAO,MAAM,SAAS;;;CAA8C,CAAC"}