@opendatalabs/vana-sdk 0.1.0-alpha.a260bf0 → 0.1.0-alpha.a6b60fc

package/dist/server/relayerHandler.cjs

@@ -167,15 +167,11 @@ async function handleDirectOperation(sdk, request) {
     }
     case "submitFileAdditionComplete": {
       const { url, userAddress, permissions, schemaId, ownerAddress } = request.params;
-      const sdkPermissions = permissions.map((p) => ({
-        account: p.account,
-        publicKey: p.key
-        // Map 'key' to 'publicKey'
-      }));
-      const result = await sdk.data.addFileWithPermissionsAndSchema(
+      const result = await sdk.data.addFileWithEncryptedPermissionsAndSchema(
         url,
         ownerAddress ?? userAddress,
-        sdkPermissions,
+        permissions,
+        // Already in correct format with encrypted 'key' field
         schemaId
       );
       const eventData = await sdk.waitForTransactionEvents(result);

package/dist/server/relayerHandler.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/relayerHandler.ts"],"sourcesContent":["import type { VanaInstance } from \"../index.node\";\nimport type {\n  UnifiedRelayerRequest,\n  UnifiedRelayerResponse,\n  SignedRelayerRequest,\n  DirectRelayerRequest,\n} from \"../types/relayer\";\nimport type {\n  GenericTypedData,\n  PermissionGrantTypedData,\n  RevokePermissionTypedData,\n  TrustServerTypedData,\n  AddAndTrustServerTypedData,\n  ServerFilesAndPermissionTypedData,\n  TypedDataPrimaryType,\n} from \"../types/permissions\";\nimport { SignatureError } from \"../errors\";\nimport { recoverTypedDataAddress, getAddress, type Hash } from \"viem\";\n\n/**\n * Universal handler for all relayer operations.\n *\n * This function processes both EIP-712 signed operations and direct operations,\n * automatically routing to the appropriate SDK methods.\n *\n * @param sdk - Initialized Vana SDK instance\n * @param request - The unified relayer request\n * @returns Promise resolving to operation-specific response\n *\n * @category Server\n * @example\n * ```typescript\n * // In your server endpoint (Next.js example):\n * import { handleRelayerOperation } from '@opendatalabs/vana-sdk/node';\n *\n * export async function POST(request: NextRequest) {\n *   try {\n *     const body = await request.json();\n *     const vana = getServerVanaInstance(); // Your server SDK instance\n *\n *     const result = await handleRelayerOperation(vana, body);\n *\n *     return NextResponse.json(result);\n *   } catch (error) {\n *     return NextResponse.json(\n *       { error: error.message },\n *       { status: 500 }\n *     );\n *   }\n * }\n * ```\n */\nexport async function handleRelayerOperation(\n  sdk: VanaInstance,\n  request: UnifiedRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  // Handle signed operations (EIP-712)\n  if (request.type === \"signed\") {\n    return handleSignedOperation(sdk, request);\n  }\n\n  // Handle direct operations (non-signed)\n  return handleDirectOperation(sdk, request);\n}\n\n/**\n * Handle EIP-712 signed operations with full type safety\n */\nasync function handleSignedOperation(\n  sdk: VanaInstance,\n  request: SignedRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  const { typedData, signature, expectedUserAddress } = request;\n\n  // Step 1: Verify the signature (security check)\n  let recoveredAddress: `0x${string}`;\n  try {\n    recoveredAddress = await recoverTypedDataAddress({\n      domain: {\n        ...typedData.domain,\n        chainId: typedData.domain.chainId\n          ? BigInt(typedData.domain.chainId)\n          : undefined,\n      },\n      types: typedData.types,\n      primaryType: typedData.primaryType,\n      message: typedData.message as unknown as Record<string, unknown>,\n      signature,\n    });\n  } catch (error) {\n    // Handle signature verification errors\n    throw new SignatureError(\n      `Signature verification failed: ${error instanceof Error ? error.message : \"Unknown error\"}`,\n    );\n  }\n\n  // Optional security check: Verify the signer matches expected address\n  if (expectedUserAddress) {\n    const normalizedExpected = getAddress(expectedUserAddress);\n    const normalizedSigner = getAddress(recoveredAddress);\n\n    if (normalizedSigner !== normalizedExpected) {\n      throw new SignatureError(\n        `Security verification failed: Recovered signer address (${normalizedSigner}) does not match expected user address (${normalizedExpected})`,\n      );\n    }\n  }\n\n  // Step 2: Route to appropriate SDK method based on primaryType\n  // Using proper type narrowing instead of unsafe casts\n  const result = await routeSignedOperation(sdk, typedData, signature);\n\n  // Return the transaction hash with type\n  return {\n    type: \"signed\",\n    hash: result.hash,\n  };\n}\n\n/**\n * Route signed operations to the appropriate SDK method with type safety\n */\nasync function routeSignedOperation(\n  sdk: VanaInstance,\n  typedData: GenericTypedData,\n  signature: Hash,\n) {\n  const primaryType = typedData.primaryType as TypedDataPrimaryType;\n\n  // Type-safe routing based on primaryType\n  switch (primaryType) {\n    case \"Permission\":\n      // TypeScript knows this is a Permission operation\n      return sdk.permissions.submitSignedGrant(\n        {\n          ...typedData,\n          primaryType: \"Permission\",\n        } as PermissionGrantTypedData,\n        signature,\n      );\n\n    case \"RevokePermission\":\n      return sdk.permissions.submitSignedRevoke(\n        {\n          ...typedData,\n          primaryType: \"RevokePermission\",\n        } as RevokePermissionTypedData,\n        signature,\n      );\n\n    case \"TrustServer\":\n      return sdk.permissions.submitSignedTrustServer(\n        {\n          ...typedData,\n          primaryType: \"TrustServer\",\n        } as TrustServerTypedData,\n        signature,\n      );\n\n    case \"AddServer\":\n      return sdk.permissions.submitSignedAddAndTrustServer(\n        {\n          ...typedData,\n          primaryType: \"AddServer\",\n        } as AddAndTrustServerTypedData,\n        signature,\n      );\n\n    case \"UntrustServer\":\n      return sdk.permissions.submitSignedUntrustServer(\n        {\n          ...typedData,\n          primaryType: \"UntrustServer\",\n        } as GenericTypedData,\n        signature,\n      );\n\n    case \"ServerFilesAndPermission\":\n      return sdk.permissions.submitSignedAddServerFilesAndPermissions(\n        {\n          ...typedData,\n          primaryType: \"ServerFilesAndPermission\",\n        } as ServerFilesAndPermissionTypedData,\n        signature,\n      );\n\n    // TODO: RegisterGrantee with signature is not supported until\n    // DataPortabilityGrantees contract adds registerGranteeWithSignature function\n    // case \"RegisterGrantee\":\n    //   return sdk.permissions.submitSignedRegisterGrantee(...);\n\n    default:\n      throw new Error(`Unsupported operation type: ${typedData.primaryType}`);\n  }\n}\n\n/**\n * Handle direct (non-signed) operations\n */\nasync function handleDirectOperation(\n  sdk: VanaInstance,\n  request: DirectRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  switch (request.operation) {\n    case \"submitFileAddition\": {\n      const { url, userAddress } = request.params;\n\n      // Use SDK to add file with no permissions\n      const result = await sdk.data.addFileWithPermissions(\n        url,\n        userAddress,\n        [], // No permissions\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"submitFileAdditionWithPermissions\": {\n      const { url, userAddress, permissions } = request.params;\n\n      // Use SDK to add file with permissions\n      const result = await sdk.data.addFileWithPermissions(\n        url,\n        userAddress,\n        permissions,\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"submitFileAdditionComplete\": {\n      const { url, userAddress, permissions, schemaId, ownerAddress } =\n        request.params;\n\n      // Map permissions from relayer format to SDK format\n      const sdkPermissions = permissions.map((p) => ({\n        account: p.account,\n        publicKey: p.key, // Map 'key' to 'publicKey'\n      }));\n\n      // Use SDK to add file with permissions and schema\n      const result = await sdk.data.addFileWithPermissionsAndSchema(\n        url,\n        ownerAddress ?? userAddress,\n        sdkPermissions,\n        schemaId,\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"storeGrantFile\": {\n      const grantFile = request.params;\n\n      // Store grant file using SDK's data controller\n      // Convert grant file to blob for storage\n      const blob = new Blob([JSON.stringify(grantFile)], {\n        type: \"application/json\",\n      });\n\n      // Upload using the data controller\n      const result = await sdk.data.upload({\n        content: blob,\n        filename: `grant-${Date.now()}.json`,\n      });\n\n      return {\n        type: \"direct\",\n        result: { url: result.url },\n      };\n    }\n\n    default: {\n      // TypeScript exhaustiveness check - ensures all cases are handled at compile time\n      const exhaustiveCheck: never = request;\n      // Return exhaustiveCheck to satisfy TypeScript while throwing an error\n      // This should never be reached if all cases are handled\n      return exhaustiveCheck;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBA,oBAA+B;AAC/B,kBAA+D;AAmC/D,eAAsB,uBACpB,KACA,SACiC;AAEjC,MAAI,QAAQ,SAAS,UAAU;AAC7B,WAAO,sBAAsB,KAAK,OAAO;AAAA,EAC3C;AAGA,SAAO,sBAAsB,KAAK,OAAO;AAC3C;AAKA,eAAe,sBACb,KACA,SACiC;AACjC,QAAM,EAAE,WAAW,WAAW,oBAAoB,IAAI;AAGtD,MAAI;AACJ,MAAI;AACF,uBAAmB,UAAM,qCAAwB;AAAA,MAC/C,QAAQ;AAAA,QACN,GAAG,UAAU;AAAA,QACb,SAAS,UAAU,OAAO,UACtB,OAAO,UAAU,OAAO,OAAO,IAC/B;AAAA,MACN;AAAA,MACA,OAAO,UAAU;AAAA,MACjB,aAAa,UAAU;AAAA,MACvB,SAAS,UAAU;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,UAAM,IAAI;AAAA,MACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,IAC5F;AAAA,EACF;AAGA,MAAI,qBAAqB;AACvB,UAAM,yBAAqB,wBAAW,mBAAmB;AACzD,UAAM,uBAAmB,wBAAW,gBAAgB;AAEpD,QAAI,qBAAqB,oBAAoB;AAC3C,YAAM,IAAI;AAAA,QACR,2DAA2D,gBAAgB,2CAA2C,kBAAkB;AAAA,MAC1I;AAAA,IACF;AAAA,EACF;AAIA,QAAM,SAAS,MAAM,qBAAqB,KAAK,WAAW,SAAS;AAGnE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,OAAO;AAAA,EACf;AACF;AAKA,eAAe,qBACb,KACA,WACA,WACA;AACA,QAAM,cAAc,UAAU;AAG9B,UAAQ,aAAa;AAAA,IACnB,KAAK;AAEH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAOF;AACE,YAAM,IAAI,MAAM,+BAA+B,UAAU,WAAW,EAAE;AAAA,EAC1E;AACF;AAKA,eAAe,sBACb,KACA,SACiC;AACjC,UAAQ,QAAQ,WAAW;AAAA,IACzB,KAAK,sBAAsB;AACzB,YAAM,EAAE,KAAK,YAAY,IAAI,QAAQ;AAGrC,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,CAAC;AAAA;AAAA,MACH;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,qCAAqC;AACxC,YAAM,EAAE,KAAK,aAAa,YAAY,IAAI,QAAQ;AAGlD,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,8BAA8B;AACjC,YAAM,EAAE,KAAK,aAAa,aAAa,UAAU,aAAa,IAC5D,QAAQ;AAGV,YAAM,iBAAiB,YAAY,IAAI,CAAC,OAAO;AAAA,QAC7C,SAAS,EAAE;AAAA,QACX,WAAW,EAAE;AAAA;AAAA,MACf,EAAE;AAGF,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,kBAAkB;AACrB,YAAM,YAAY,QAAQ;AAI1B,YAAM,OAAO,IAAI,KAAK,CAAC,KAAK,UAAU,SAAS,CAAC,GAAG;AAAA,QACjD,MAAM;AAAA,MACR,CAAC;AAGD,YAAM,SAAS,MAAM,IAAI,KAAK,OAAO;AAAA,QACnC,SAAS;AAAA,QACT,UAAU,SAAS,KAAK,IAAI,CAAC;AAAA,MAC/B,CAAC;AAED,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ,EAAE,KAAK,OAAO,IAAI;AAAA,MAC5B;AAAA,IACF;AAAA,IAEA,SAAS;AAEP,YAAM,kBAAyB;AAG/B,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/server/relayerHandler.ts"],"sourcesContent":["import type { VanaInstance } from \"../index.node\";\nimport type {\n  UnifiedRelayerRequest,\n  UnifiedRelayerResponse,\n  SignedRelayerRequest,\n  DirectRelayerRequest,\n} from \"../types/relayer\";\nimport type {\n  GenericTypedData,\n  PermissionGrantTypedData,\n  RevokePermissionTypedData,\n  TrustServerTypedData,\n  AddAndTrustServerTypedData,\n  ServerFilesAndPermissionTypedData,\n  TypedDataPrimaryType,\n} from \"../types/permissions\";\nimport { SignatureError } from \"../errors\";\nimport { recoverTypedDataAddress, getAddress, type Hash } from \"viem\";\n\n/**\n * Universal handler for all relayer operations.\n *\n * This function processes both EIP-712 signed operations and direct operations,\n * automatically routing to the appropriate SDK methods.\n *\n * @param sdk - Initialized Vana SDK instance\n * @param request - The unified relayer request\n * @returns Promise resolving to operation-specific response\n *\n * @category Server\n * @example\n * ```typescript\n * // In your server endpoint (Next.js example):\n * import { handleRelayerOperation } from '@opendatalabs/vana-sdk/node';\n *\n * export async function POST(request: NextRequest) {\n *   try {\n *     const body = await request.json();\n *     const vana = getServerVanaInstance(); // Your server SDK instance\n *\n *     const result = await handleRelayerOperation(vana, body);\n *\n *     return NextResponse.json(result);\n *   } catch (error) {\n *     return NextResponse.json(\n *       { error: error.message },\n *       { status: 500 }\n *     );\n *   }\n * }\n * ```\n */\nexport async function handleRelayerOperation(\n  sdk: VanaInstance,\n  request: UnifiedRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  // Handle signed operations (EIP-712)\n  if (request.type === \"signed\") {\n    return handleSignedOperation(sdk, request);\n  }\n\n  // Handle direct operations (non-signed)\n  return handleDirectOperation(sdk, request);\n}\n\n/**\n * Handle EIP-712 signed operations with full type safety\n */\nasync function handleSignedOperation(\n  sdk: VanaInstance,\n  request: SignedRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  const { typedData, signature, expectedUserAddress } = request;\n\n  // Step 1: Verify the signature (security check)\n  let recoveredAddress: `0x${string}`;\n  try {\n    recoveredAddress = await recoverTypedDataAddress({\n      domain: {\n        ...typedData.domain,\n        chainId: typedData.domain.chainId\n          ? BigInt(typedData.domain.chainId)\n          : undefined,\n      },\n      types: typedData.types,\n      primaryType: typedData.primaryType,\n      message: typedData.message as unknown as Record<string, unknown>,\n      signature,\n    });\n  } catch (error) {\n    // Handle signature verification errors\n    throw new SignatureError(\n      `Signature verification failed: ${error instanceof Error ? error.message : \"Unknown error\"}`,\n    );\n  }\n\n  // Optional security check: Verify the signer matches expected address\n  if (expectedUserAddress) {\n    const normalizedExpected = getAddress(expectedUserAddress);\n    const normalizedSigner = getAddress(recoveredAddress);\n\n    if (normalizedSigner !== normalizedExpected) {\n      throw new SignatureError(\n        `Security verification failed: Recovered signer address (${normalizedSigner}) does not match expected user address (${normalizedExpected})`,\n      );\n    }\n  }\n\n  // Step 2: Route to appropriate SDK method based on primaryType\n  // Using proper type narrowing instead of unsafe casts\n  const result = await routeSignedOperation(sdk, typedData, signature);\n\n  // Return the transaction hash with type\n  return {\n    type: \"signed\",\n    hash: result.hash,\n  };\n}\n\n/**\n * Route signed operations to the appropriate SDK method with type safety\n */\nasync function routeSignedOperation(\n  sdk: VanaInstance,\n  typedData: GenericTypedData,\n  signature: Hash,\n) {\n  const primaryType = typedData.primaryType as TypedDataPrimaryType;\n\n  // Type-safe routing based on primaryType\n  switch (primaryType) {\n    case \"Permission\":\n      // TypeScript knows this is a Permission operation\n      return sdk.permissions.submitSignedGrant(\n        {\n          ...typedData,\n          primaryType: \"Permission\",\n        } as PermissionGrantTypedData,\n        signature,\n      );\n\n    case \"RevokePermission\":\n      return sdk.permissions.submitSignedRevoke(\n        {\n          ...typedData,\n          primaryType: \"RevokePermission\",\n        } as RevokePermissionTypedData,\n        signature,\n      );\n\n    case \"TrustServer\":\n      return sdk.permissions.submitSignedTrustServer(\n        {\n          ...typedData,\n          primaryType: \"TrustServer\",\n        } as TrustServerTypedData,\n        signature,\n      );\n\n    case \"AddServer\":\n      return sdk.permissions.submitSignedAddAndTrustServer(\n        {\n          ...typedData,\n          primaryType: \"AddServer\",\n        } as AddAndTrustServerTypedData,\n        signature,\n      );\n\n    case \"UntrustServer\":\n      return sdk.permissions.submitSignedUntrustServer(\n        {\n          ...typedData,\n          primaryType: \"UntrustServer\",\n        } as GenericTypedData,\n        signature,\n      );\n\n    case \"ServerFilesAndPermission\":\n      return sdk.permissions.submitSignedAddServerFilesAndPermissions(\n        {\n          ...typedData,\n          primaryType: \"ServerFilesAndPermission\",\n        } as ServerFilesAndPermissionTypedData,\n        signature,\n      );\n\n    // TODO: RegisterGrantee with signature is not supported until\n    // DataPortabilityGrantees contract adds registerGranteeWithSignature function\n    // case \"RegisterGrantee\":\n    //   return sdk.permissions.submitSignedRegisterGrantee(...);\n\n    default:\n      throw new Error(`Unsupported operation type: ${typedData.primaryType}`);\n  }\n}\n\n/**\n * Handle direct (non-signed) operations\n */\nasync function handleDirectOperation(\n  sdk: VanaInstance,\n  request: DirectRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  switch (request.operation) {\n    case \"submitFileAddition\": {\n      const { url, userAddress } = request.params;\n\n      // Use SDK to add file with no permissions\n      const result = await sdk.data.addFileWithPermissions(\n        url,\n        userAddress,\n        [], // No permissions\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"submitFileAdditionWithPermissions\": {\n      const { url, userAddress, permissions } = request.params;\n\n      // Use SDK to add file with permissions\n      const result = await sdk.data.addFileWithPermissions(\n        url,\n        userAddress,\n        permissions,\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"submitFileAdditionComplete\": {\n      const { url, userAddress, permissions, schemaId, ownerAddress } =\n        request.params;\n\n      // Permissions are already encrypted, use the appropriate method\n      // No mapping needed - permissions already have { account, key } format\n      const result = await sdk.data.addFileWithEncryptedPermissionsAndSchema(\n        url,\n        ownerAddress ?? userAddress,\n        permissions, // Already in correct format with encrypted 'key' field\n        schemaId,\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"storeGrantFile\": {\n      const grantFile = request.params;\n\n      // Store grant file using SDK's data controller\n      // Convert grant file to blob for storage\n      const blob = new Blob([JSON.stringify(grantFile)], {\n        type: \"application/json\",\n      });\n\n      // Upload using the data controller\n      const result = await sdk.data.upload({\n        content: blob,\n        filename: `grant-${Date.now()}.json`,\n      });\n\n      return {\n        type: \"direct\",\n        result: { url: result.url },\n      };\n    }\n\n    default: {\n      // TypeScript exhaustiveness check - ensures all cases are handled at compile time\n      const exhaustiveCheck: never = request;\n      // Return exhaustiveCheck to satisfy TypeScript while throwing an error\n      // This should never be reached if all cases are handled\n      return exhaustiveCheck;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBA,oBAA+B;AAC/B,kBAA+D;AAmC/D,eAAsB,uBACpB,KACA,SACiC;AAEjC,MAAI,QAAQ,SAAS,UAAU;AAC7B,WAAO,sBAAsB,KAAK,OAAO;AAAA,EAC3C;AAGA,SAAO,sBAAsB,KAAK,OAAO;AAC3C;AAKA,eAAe,sBACb,KACA,SACiC;AACjC,QAAM,EAAE,WAAW,WAAW,oBAAoB,IAAI;AAGtD,MAAI;AACJ,MAAI;AACF,uBAAmB,UAAM,qCAAwB;AAAA,MAC/C,QAAQ;AAAA,QACN,GAAG,UAAU;AAAA,QACb,SAAS,UAAU,OAAO,UACtB,OAAO,UAAU,OAAO,OAAO,IAC/B;AAAA,MACN;AAAA,MACA,OAAO,UAAU;AAAA,MACjB,aAAa,UAAU;AAAA,MACvB,SAAS,UAAU;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,UAAM,IAAI;AAAA,MACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,IAC5F;AAAA,EACF;AAGA,MAAI,qBAAqB;AACvB,UAAM,yBAAqB,wBAAW,mBAAmB;AACzD,UAAM,uBAAmB,wBAAW,gBAAgB;AAEpD,QAAI,qBAAqB,oBAAoB;AAC3C,YAAM,IAAI;AAAA,QACR,2DAA2D,gBAAgB,2CAA2C,kBAAkB;AAAA,MAC1I;AAAA,IACF;AAAA,EACF;AAIA,QAAM,SAAS,MAAM,qBAAqB,KAAK,WAAW,SAAS;AAGnE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,OAAO;AAAA,EACf;AACF;AAKA,eAAe,qBACb,KACA,WACA,WACA;AACA,QAAM,cAAc,UAAU;AAG9B,UAAQ,aAAa;AAAA,IACnB,KAAK;AAEH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAOF;AACE,YAAM,IAAI,MAAM,+BAA+B,UAAU,WAAW,EAAE;AAAA,EAC1E;AACF;AAKA,eAAe,sBACb,KACA,SACiC;AACjC,UAAQ,QAAQ,WAAW;AAAA,IACzB,KAAK,sBAAsB;AACzB,YAAM,EAAE,KAAK,YAAY,IAAI,QAAQ;AAGrC,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,CAAC;AAAA;AAAA,MACH;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,qCAAqC;AACxC,YAAM,EAAE,KAAK,aAAa,YAAY,IAAI,QAAQ;AAGlD,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,8BAA8B;AACjC,YAAM,EAAE,KAAK,aAAa,aAAa,UAAU,aAAa,IAC5D,QAAQ;AAIV,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,kBAAkB;AACrB,YAAM,YAAY,QAAQ;AAI1B,YAAM,OAAO,IAAI,KAAK,CAAC,KAAK,UAAU,SAAS,CAAC,GAAG;AAAA,QACjD,MAAM;AAAA,MACR,CAAC;AAGD,YAAM,SAAS,MAAM,IAAI,KAAK,OAAO;AAAA,QACnC,SAAS;AAAA,QACT,UAAU,SAAS,KAAK,IAAI,CAAC;AAAA,MAC/B,CAAC;AAED,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ,EAAE,KAAK,OAAO,IAAI;AAAA,MAC5B;AAAA,IACF;AAAA,IAEA,SAAS;AAEP,YAAM,kBAAyB;AAG/B,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}

package/dist/server/relayerHandler.js

@@ -144,15 +144,11 @@ async function handleDirectOperation(sdk, request) {
     }
     case "submitFileAdditionComplete": {
       const { url, userAddress, permissions, schemaId, ownerAddress } = request.params;
-      const sdkPermissions = permissions.map((p) => ({
-        account: p.account,
-        publicKey: p.key
-        // Map 'key' to 'publicKey'
-      }));
-      const result = await sdk.data.addFileWithPermissionsAndSchema(
+      const result = await sdk.data.addFileWithEncryptedPermissionsAndSchema(
         url,
         ownerAddress ?? userAddress,
-        sdkPermissions,
+        permissions,
+        // Already in correct format with encrypted 'key' field
         schemaId
       );
       const eventData = await sdk.waitForTransactionEvents(result);

package/dist/server/relayerHandler.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/relayerHandler.ts"],"sourcesContent":["import type { VanaInstance } from \"../index.node\";\nimport type {\n  UnifiedRelayerRequest,\n  UnifiedRelayerResponse,\n  SignedRelayerRequest,\n  DirectRelayerRequest,\n} from \"../types/relayer\";\nimport type {\n  GenericTypedData,\n  PermissionGrantTypedData,\n  RevokePermissionTypedData,\n  TrustServerTypedData,\n  AddAndTrustServerTypedData,\n  ServerFilesAndPermissionTypedData,\n  TypedDataPrimaryType,\n} from \"../types/permissions\";\nimport { SignatureError } from \"../errors\";\nimport { recoverTypedDataAddress, getAddress, type Hash } from \"viem\";\n\n/**\n * Universal handler for all relayer operations.\n *\n * This function processes both EIP-712 signed operations and direct operations,\n * automatically routing to the appropriate SDK methods.\n *\n * @param sdk - Initialized Vana SDK instance\n * @param request - The unified relayer request\n * @returns Promise resolving to operation-specific response\n *\n * @category Server\n * @example\n * ```typescript\n * // In your server endpoint (Next.js example):\n * import { handleRelayerOperation } from '@opendatalabs/vana-sdk/node';\n *\n * export async function POST(request: NextRequest) {\n *   try {\n *     const body = await request.json();\n *     const vana = getServerVanaInstance(); // Your server SDK instance\n *\n *     const result = await handleRelayerOperation(vana, body);\n *\n *     return NextResponse.json(result);\n *   } catch (error) {\n *     return NextResponse.json(\n *       { error: error.message },\n *       { status: 500 }\n *     );\n *   }\n * }\n * ```\n */\nexport async function handleRelayerOperation(\n  sdk: VanaInstance,\n  request: UnifiedRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  // Handle signed operations (EIP-712)\n  if (request.type === \"signed\") {\n    return handleSignedOperation(sdk, request);\n  }\n\n  // Handle direct operations (non-signed)\n  return handleDirectOperation(sdk, request);\n}\n\n/**\n * Handle EIP-712 signed operations with full type safety\n */\nasync function handleSignedOperation(\n  sdk: VanaInstance,\n  request: SignedRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  const { typedData, signature, expectedUserAddress } = request;\n\n  // Step 1: Verify the signature (security check)\n  let recoveredAddress: `0x${string}`;\n  try {\n    recoveredAddress = await recoverTypedDataAddress({\n      domain: {\n        ...typedData.domain,\n        chainId: typedData.domain.chainId\n          ? BigInt(typedData.domain.chainId)\n          : undefined,\n      },\n      types: typedData.types,\n      primaryType: typedData.primaryType,\n      message: typedData.message as unknown as Record<string, unknown>,\n      signature,\n    });\n  } catch (error) {\n    // Handle signature verification errors\n    throw new SignatureError(\n      `Signature verification failed: ${error instanceof Error ? error.message : \"Unknown error\"}`,\n    );\n  }\n\n  // Optional security check: Verify the signer matches expected address\n  if (expectedUserAddress) {\n    const normalizedExpected = getAddress(expectedUserAddress);\n    const normalizedSigner = getAddress(recoveredAddress);\n\n    if (normalizedSigner !== normalizedExpected) {\n      throw new SignatureError(\n        `Security verification failed: Recovered signer address (${normalizedSigner}) does not match expected user address (${normalizedExpected})`,\n      );\n    }\n  }\n\n  // Step 2: Route to appropriate SDK method based on primaryType\n  // Using proper type narrowing instead of unsafe casts\n  const result = await routeSignedOperation(sdk, typedData, signature);\n\n  // Return the transaction hash with type\n  return {\n    type: \"signed\",\n    hash: result.hash,\n  };\n}\n\n/**\n * Route signed operations to the appropriate SDK method with type safety\n */\nasync function routeSignedOperation(\n  sdk: VanaInstance,\n  typedData: GenericTypedData,\n  signature: Hash,\n) {\n  const primaryType = typedData.primaryType as TypedDataPrimaryType;\n\n  // Type-safe routing based on primaryType\n  switch (primaryType) {\n    case \"Permission\":\n      // TypeScript knows this is a Permission operation\n      return sdk.permissions.submitSignedGrant(\n        {\n          ...typedData,\n          primaryType: \"Permission\",\n        } as PermissionGrantTypedData,\n        signature,\n      );\n\n    case \"RevokePermission\":\n      return sdk.permissions.submitSignedRevoke(\n        {\n          ...typedData,\n          primaryType: \"RevokePermission\",\n        } as RevokePermissionTypedData,\n        signature,\n      );\n\n    case \"TrustServer\":\n      return sdk.permissions.submitSignedTrustServer(\n        {\n          ...typedData,\n          primaryType: \"TrustServer\",\n        } as TrustServerTypedData,\n        signature,\n      );\n\n    case \"AddServer\":\n      return sdk.permissions.submitSignedAddAndTrustServer(\n        {\n          ...typedData,\n          primaryType: \"AddServer\",\n        } as AddAndTrustServerTypedData,\n        signature,\n      );\n\n    case \"UntrustServer\":\n      return sdk.permissions.submitSignedUntrustServer(\n        {\n          ...typedData,\n          primaryType: \"UntrustServer\",\n        } as GenericTypedData,\n        signature,\n      );\n\n    case \"ServerFilesAndPermission\":\n      return sdk.permissions.submitSignedAddServerFilesAndPermissions(\n        {\n          ...typedData,\n          primaryType: \"ServerFilesAndPermission\",\n        } as ServerFilesAndPermissionTypedData,\n        signature,\n      );\n\n    // TODO: RegisterGrantee with signature is not supported until\n    // DataPortabilityGrantees contract adds registerGranteeWithSignature function\n    // case \"RegisterGrantee\":\n    //   return sdk.permissions.submitSignedRegisterGrantee(...);\n\n    default:\n      throw new Error(`Unsupported operation type: ${typedData.primaryType}`);\n  }\n}\n\n/**\n * Handle direct (non-signed) operations\n */\nasync function handleDirectOperation(\n  sdk: VanaInstance,\n  request: DirectRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  switch (request.operation) {\n    case \"submitFileAddition\": {\n      const { url, userAddress } = request.params;\n\n      // Use SDK to add file with no permissions\n      const result = await sdk.data.addFileWithPermissions(\n        url,\n        userAddress,\n        [], // No permissions\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"submitFileAdditionWithPermissions\": {\n      const { url, userAddress, permissions } = request.params;\n\n      // Use SDK to add file with permissions\n      const result = await sdk.data.addFileWithPermissions(\n        url,\n        userAddress,\n        permissions,\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"submitFileAdditionComplete\": {\n      const { url, userAddress, permissions, schemaId, ownerAddress } =\n        request.params;\n\n      // Map permissions from relayer format to SDK format\n      const sdkPermissions = permissions.map((p) => ({\n        account: p.account,\n        publicKey: p.key, // Map 'key' to 'publicKey'\n      }));\n\n      // Use SDK to add file with permissions and schema\n      const result = await sdk.data.addFileWithPermissionsAndSchema(\n        url,\n        ownerAddress ?? userAddress,\n        sdkPermissions,\n        schemaId,\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"storeGrantFile\": {\n      const grantFile = request.params;\n\n      // Store grant file using SDK's data controller\n      // Convert grant file to blob for storage\n      const blob = new Blob([JSON.stringify(grantFile)], {\n        type: \"application/json\",\n      });\n\n      // Upload using the data controller\n      const result = await sdk.data.upload({\n        content: blob,\n        filename: `grant-${Date.now()}.json`,\n      });\n\n      return {\n        type: \"direct\",\n        result: { url: result.url },\n      };\n    }\n\n    default: {\n      // TypeScript exhaustiveness check - ensures all cases are handled at compile time\n      const exhaustiveCheck: never = request;\n      // Return exhaustiveCheck to satisfy TypeScript while throwing an error\n      // This should never be reached if all cases are handled\n      return exhaustiveCheck;\n    }\n  }\n}\n"],"mappings":"AAgBA,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB,kBAA6B;AAmC/D,eAAsB,uBACpB,KACA,SACiC;AAEjC,MAAI,QAAQ,SAAS,UAAU;AAC7B,WAAO,sBAAsB,KAAK,OAAO;AAAA,EAC3C;AAGA,SAAO,sBAAsB,KAAK,OAAO;AAC3C;AAKA,eAAe,sBACb,KACA,SACiC;AACjC,QAAM,EAAE,WAAW,WAAW,oBAAoB,IAAI;AAGtD,MAAI;AACJ,MAAI;AACF,uBAAmB,MAAM,wBAAwB;AAAA,MAC/C,QAAQ;AAAA,QACN,GAAG,UAAU;AAAA,QACb,SAAS,UAAU,OAAO,UACtB,OAAO,UAAU,OAAO,OAAO,IAC/B;AAAA,MACN;AAAA,MACA,OAAO,UAAU;AAAA,MACjB,aAAa,UAAU;AAAA,MACvB,SAAS,UAAU;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,UAAM,IAAI;AAAA,MACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,IAC5F;AAAA,EACF;AAGA,MAAI,qBAAqB;AACvB,UAAM,qBAAqB,WAAW,mBAAmB;AACzD,UAAM,mBAAmB,WAAW,gBAAgB;AAEpD,QAAI,qBAAqB,oBAAoB;AAC3C,YAAM,IAAI;AAAA,QACR,2DAA2D,gBAAgB,2CAA2C,kBAAkB;AAAA,MAC1I;AAAA,IACF;AAAA,EACF;AAIA,QAAM,SAAS,MAAM,qBAAqB,KAAK,WAAW,SAAS;AAGnE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,OAAO;AAAA,EACf;AACF;AAKA,eAAe,qBACb,KACA,WACA,WACA;AACA,QAAM,cAAc,UAAU;AAG9B,UAAQ,aAAa;AAAA,IACnB,KAAK;AAEH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAOF;AACE,YAAM,IAAI,MAAM,+BAA+B,UAAU,WAAW,EAAE;AAAA,EAC1E;AACF;AAKA,eAAe,sBACb,KACA,SACiC;AACjC,UAAQ,QAAQ,WAAW;AAAA,IACzB,KAAK,sBAAsB;AACzB,YAAM,EAAE,KAAK,YAAY,IAAI,QAAQ;AAGrC,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,CAAC;AAAA;AAAA,MACH;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,qCAAqC;AACxC,YAAM,EAAE,KAAK,aAAa,YAAY,IAAI,QAAQ;AAGlD,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,8BAA8B;AACjC,YAAM,EAAE,KAAK,aAAa,aAAa,UAAU,aAAa,IAC5D,QAAQ;AAGV,YAAM,iBAAiB,YAAY,IAAI,CAAC,OAAO;AAAA,QAC7C,SAAS,EAAE;AAAA,QACX,WAAW,EAAE;AAAA;AAAA,MACf,EAAE;AAGF,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,kBAAkB;AACrB,YAAM,YAAY,QAAQ;AAI1B,YAAM,OAAO,IAAI,KAAK,CAAC,KAAK,UAAU,SAAS,CAAC,GAAG;AAAA,QACjD,MAAM;AAAA,MACR,CAAC;AAGD,YAAM,SAAS,MAAM,IAAI,KAAK,OAAO;AAAA,QACnC,SAAS;AAAA,QACT,UAAU,SAAS,KAAK,IAAI,CAAC;AAAA,MAC/B,CAAC;AAED,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ,EAAE,KAAK,OAAO,IAAI;AAAA,MAC5B;AAAA,IACF;AAAA,IAEA,SAAS;AAEP,YAAM,kBAAyB;AAG/B,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/server/relayerHandler.ts"],"sourcesContent":["import type { VanaInstance } from \"../index.node\";\nimport type {\n  UnifiedRelayerRequest,\n  UnifiedRelayerResponse,\n  SignedRelayerRequest,\n  DirectRelayerRequest,\n} from \"../types/relayer\";\nimport type {\n  GenericTypedData,\n  PermissionGrantTypedData,\n  RevokePermissionTypedData,\n  TrustServerTypedData,\n  AddAndTrustServerTypedData,\n  ServerFilesAndPermissionTypedData,\n  TypedDataPrimaryType,\n} from \"../types/permissions\";\nimport { SignatureError } from \"../errors\";\nimport { recoverTypedDataAddress, getAddress, type Hash } from \"viem\";\n\n/**\n * Universal handler for all relayer operations.\n *\n * This function processes both EIP-712 signed operations and direct operations,\n * automatically routing to the appropriate SDK methods.\n *\n * @param sdk - Initialized Vana SDK instance\n * @param request - The unified relayer request\n * @returns Promise resolving to operation-specific response\n *\n * @category Server\n * @example\n * ```typescript\n * // In your server endpoint (Next.js example):\n * import { handleRelayerOperation } from '@opendatalabs/vana-sdk/node';\n *\n * export async function POST(request: NextRequest) {\n *   try {\n *     const body = await request.json();\n *     const vana = getServerVanaInstance(); // Your server SDK instance\n *\n *     const result = await handleRelayerOperation(vana, body);\n *\n *     return NextResponse.json(result);\n *   } catch (error) {\n *     return NextResponse.json(\n *       { error: error.message },\n *       { status: 500 }\n *     );\n *   }\n * }\n * ```\n */\nexport async function handleRelayerOperation(\n  sdk: VanaInstance,\n  request: UnifiedRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  // Handle signed operations (EIP-712)\n  if (request.type === \"signed\") {\n    return handleSignedOperation(sdk, request);\n  }\n\n  // Handle direct operations (non-signed)\n  return handleDirectOperation(sdk, request);\n}\n\n/**\n * Handle EIP-712 signed operations with full type safety\n */\nasync function handleSignedOperation(\n  sdk: VanaInstance,\n  request: SignedRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  const { typedData, signature, expectedUserAddress } = request;\n\n  // Step 1: Verify the signature (security check)\n  let recoveredAddress: `0x${string}`;\n  try {\n    recoveredAddress = await recoverTypedDataAddress({\n      domain: {\n        ...typedData.domain,\n        chainId: typedData.domain.chainId\n          ? BigInt(typedData.domain.chainId)\n          : undefined,\n      },\n      types: typedData.types,\n      primaryType: typedData.primaryType,\n      message: typedData.message as unknown as Record<string, unknown>,\n      signature,\n    });\n  } catch (error) {\n    // Handle signature verification errors\n    throw new SignatureError(\n      `Signature verification failed: ${error instanceof Error ? error.message : \"Unknown error\"}`,\n    );\n  }\n\n  // Optional security check: Verify the signer matches expected address\n  if (expectedUserAddress) {\n    const normalizedExpected = getAddress(expectedUserAddress);\n    const normalizedSigner = getAddress(recoveredAddress);\n\n    if (normalizedSigner !== normalizedExpected) {\n      throw new SignatureError(\n        `Security verification failed: Recovered signer address (${normalizedSigner}) does not match expected user address (${normalizedExpected})`,\n      );\n    }\n  }\n\n  // Step 2: Route to appropriate SDK method based on primaryType\n  // Using proper type narrowing instead of unsafe casts\n  const result = await routeSignedOperation(sdk, typedData, signature);\n\n  // Return the transaction hash with type\n  return {\n    type: \"signed\",\n    hash: result.hash,\n  };\n}\n\n/**\n * Route signed operations to the appropriate SDK method with type safety\n */\nasync function routeSignedOperation(\n  sdk: VanaInstance,\n  typedData: GenericTypedData,\n  signature: Hash,\n) {\n  const primaryType = typedData.primaryType as TypedDataPrimaryType;\n\n  // Type-safe routing based on primaryType\n  switch (primaryType) {\n    case \"Permission\":\n      // TypeScript knows this is a Permission operation\n      return sdk.permissions.submitSignedGrant(\n        {\n          ...typedData,\n          primaryType: \"Permission\",\n        } as PermissionGrantTypedData,\n        signature,\n      );\n\n    case \"RevokePermission\":\n      return sdk.permissions.submitSignedRevoke(\n        {\n          ...typedData,\n          primaryType: \"RevokePermission\",\n        } as RevokePermissionTypedData,\n        signature,\n      );\n\n    case \"TrustServer\":\n      return sdk.permissions.submitSignedTrustServer(\n        {\n          ...typedData,\n          primaryType: \"TrustServer\",\n        } as TrustServerTypedData,\n        signature,\n      );\n\n    case \"AddServer\":\n      return sdk.permissions.submitSignedAddAndTrustServer(\n        {\n          ...typedData,\n          primaryType: \"AddServer\",\n        } as AddAndTrustServerTypedData,\n        signature,\n      );\n\n    case \"UntrustServer\":\n      return sdk.permissions.submitSignedUntrustServer(\n        {\n          ...typedData,\n          primaryType: \"UntrustServer\",\n        } as GenericTypedData,\n        signature,\n      );\n\n    case \"ServerFilesAndPermission\":\n      return sdk.permissions.submitSignedAddServerFilesAndPermissions(\n        {\n          ...typedData,\n          primaryType: \"ServerFilesAndPermission\",\n        } as ServerFilesAndPermissionTypedData,\n        signature,\n      );\n\n    // TODO: RegisterGrantee with signature is not supported until\n    // DataPortabilityGrantees contract adds registerGranteeWithSignature function\n    // case \"RegisterGrantee\":\n    //   return sdk.permissions.submitSignedRegisterGrantee(...);\n\n    default:\n      throw new Error(`Unsupported operation type: ${typedData.primaryType}`);\n  }\n}\n\n/**\n * Handle direct (non-signed) operations\n */\nasync function handleDirectOperation(\n  sdk: VanaInstance,\n  request: DirectRelayerRequest,\n): Promise<UnifiedRelayerResponse> {\n  switch (request.operation) {\n    case \"submitFileAddition\": {\n      const { url, userAddress } = request.params;\n\n      // Use SDK to add file with no permissions\n      const result = await sdk.data.addFileWithPermissions(\n        url,\n        userAddress,\n        [], // No permissions\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"submitFileAdditionWithPermissions\": {\n      const { url, userAddress, permissions } = request.params;\n\n      // Use SDK to add file with permissions\n      const result = await sdk.data.addFileWithPermissions(\n        url,\n        userAddress,\n        permissions,\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"submitFileAdditionComplete\": {\n      const { url, userAddress, permissions, schemaId, ownerAddress } =\n        request.params;\n\n      // Permissions are already encrypted, use the appropriate method\n      // No mapping needed - permissions already have { account, key } format\n      const result = await sdk.data.addFileWithEncryptedPermissionsAndSchema(\n        url,\n        ownerAddress ?? userAddress,\n        permissions, // Already in correct format with encrypted 'key' field\n        schemaId,\n      );\n\n      // Wait for transaction events to get fileId\n      const eventData = await sdk.waitForTransactionEvents(result);\n      const fileId = eventData.expectedEvents?.FileAdded?.fileId;\n\n      if (!fileId) {\n        throw new Error(\"Failed to get fileId from transaction events\");\n      }\n\n      return {\n        type: \"direct\",\n        result: {\n          fileId: Number(fileId),\n          transactionHash: result.hash,\n        },\n      };\n    }\n\n    case \"storeGrantFile\": {\n      const grantFile = request.params;\n\n      // Store grant file using SDK's data controller\n      // Convert grant file to blob for storage\n      const blob = new Blob([JSON.stringify(grantFile)], {\n        type: \"application/json\",\n      });\n\n      // Upload using the data controller\n      const result = await sdk.data.upload({\n        content: blob,\n        filename: `grant-${Date.now()}.json`,\n      });\n\n      return {\n        type: \"direct\",\n        result: { url: result.url },\n      };\n    }\n\n    default: {\n      // TypeScript exhaustiveness check - ensures all cases are handled at compile time\n      const exhaustiveCheck: never = request;\n      // Return exhaustiveCheck to satisfy TypeScript while throwing an error\n      // This should never be reached if all cases are handled\n      return exhaustiveCheck;\n    }\n  }\n}\n"],"mappings":"AAgBA,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB,kBAA6B;AAmC/D,eAAsB,uBACpB,KACA,SACiC;AAEjC,MAAI,QAAQ,SAAS,UAAU;AAC7B,WAAO,sBAAsB,KAAK,OAAO;AAAA,EAC3C;AAGA,SAAO,sBAAsB,KAAK,OAAO;AAC3C;AAKA,eAAe,sBACb,KACA,SACiC;AACjC,QAAM,EAAE,WAAW,WAAW,oBAAoB,IAAI;AAGtD,MAAI;AACJ,MAAI;AACF,uBAAmB,MAAM,wBAAwB;AAAA,MAC/C,QAAQ;AAAA,QACN,GAAG,UAAU;AAAA,QACb,SAAS,UAAU,OAAO,UACtB,OAAO,UAAU,OAAO,OAAO,IAC/B;AAAA,MACN;AAAA,MACA,OAAO,UAAU;AAAA,MACjB,aAAa,UAAU;AAAA,MACvB,SAAS,UAAU;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,UAAM,IAAI;AAAA,MACR,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,IAC5F;AAAA,EACF;AAGA,MAAI,qBAAqB;AACvB,UAAM,qBAAqB,WAAW,mBAAmB;AACzD,UAAM,mBAAmB,WAAW,gBAAgB;AAEpD,QAAI,qBAAqB,oBAAoB;AAC3C,YAAM,IAAI;AAAA,QACR,2DAA2D,gBAAgB,2CAA2C,kBAAkB;AAAA,MAC1I;AAAA,IACF;AAAA,EACF;AAIA,QAAM,SAAS,MAAM,qBAAqB,KAAK,WAAW,SAAS;AAGnE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,OAAO;AAAA,EACf;AACF;AAKA,eAAe,qBACb,KACA,WACA,WACA;AACA,QAAM,cAAc,UAAU;AAG9B,UAAQ,aAAa;AAAA,IACnB,KAAK;AAEH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IAEF,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,QACrB;AAAA,UACE,GAAG;AAAA,UACH,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAOF;AACE,YAAM,IAAI,MAAM,+BAA+B,UAAU,WAAW,EAAE;AAAA,EAC1E;AACF;AAKA,eAAe,sBACb,KACA,SACiC;AACjC,UAAQ,QAAQ,WAAW;AAAA,IACzB,KAAK,sBAAsB;AACzB,YAAM,EAAE,KAAK,YAAY,IAAI,QAAQ;AAGrC,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,CAAC;AAAA;AAAA,MACH;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,qCAAqC;AACxC,YAAM,EAAE,KAAK,aAAa,YAAY,IAAI,QAAQ;AAGlD,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,8BAA8B;AACjC,YAAM,EAAE,KAAK,aAAa,aAAa,UAAU,aAAa,IAC5D,QAAQ;AAIV,YAAM,SAAS,MAAM,IAAI,KAAK;AAAA,QAC5B;AAAA,QACA,gBAAgB;AAAA,QAChB;AAAA;AAAA,QACA;AAAA,MACF;AAGA,YAAM,YAAY,MAAM,IAAI,yBAAyB,MAAM;AAC3D,YAAM,SAAS,UAAU,gBAAgB,WAAW;AAEpD,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AAEA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,QAAQ,OAAO,MAAM;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AAAA,IAEA,KAAK,kBAAkB;AACrB,YAAM,YAAY,QAAQ;AAI1B,YAAM,OAAO,IAAI,KAAK,CAAC,KAAK,UAAU,SAAS,CAAC,GAAG;AAAA,QACjD,MAAM;AAAA,MACR,CAAC;AAGD,YAAM,SAAS,MAAM,IAAI,KAAK,OAAO;AAAA,QACnC,SAAS;AAAA,QACT,UAAU,SAAS,KAAK,IAAI,CAAC;AAAA,MAC/B,CAAC;AAED,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ,EAAE,KAAK,OAAO,IAAI;AAAA,MAC5B;AAAA,IACF;AAAA,IAEA,SAAS;AAEP,YAAM,kBAAyB;AAG/B,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opendatalabs/vana-sdk",
-  "version": "0.1.0-alpha.a260bf0",
+  "version": "0.1.0-alpha.a6b60fc",
   "description": "A TypeScript library for interacting with Vana Network smart contracts.",
   "publishConfig": {
     "access": "public"