@opendatalabs/vana-sdk 3.4.1 → 3.5.1-pr.159.12a6f39

package/README.md

@@ -104,6 +104,122 @@ const result = await storage.upload(myBlob, "report.json");
 console.log(result.url);
 ```
 
+## Build a direct Vana app
+
+Request user-approved data, read it from the user's Personal Server, and pay
+for the read — without the browser ever seeing your app private key or choosing
+scopes. Your **backend** owns the controller (`@opendatalabs/vana-sdk/server`);
+your **frontend** drives a two-tab approval flow with a React hook
+(`@opendatalabs/vana-sdk/react`).
+
+> **How it fits together.** Access requests are created through the Vana Account
+> access-request API; the Personal Server read uses Web3Signed auth; and payment
+> settles on a `402` through the DPv2 escrow surface (`protocol/escrow`), where the
+> controller signs a `GenericPayment` with your app key. You can inject your own
+> `accessRequestClient` to target a custom deployment, and `escrow` config to wire
+> the escrow gateway.
+
+### Backend controller
+
+```typescript
+// lib/vana.ts
+import { createDirectDataController } from "@opendatalabs/vana-sdk/server";
+
+import { createEscrowGatewayClient } from "@opendatalabs/vana-sdk/node";
+
+export const vana = createDirectDataController({
+  env: process.env.VANA_ENV === "dev" ? "dev" : "production",
+  appPrivateKey: process.env.VANA_APP_PRIVATE_KEY!,
+  app: {
+    id: "notes-lens",
+    name: "Notes Lens",
+    homepageUrl: process.env.VANA_APP_URL!,
+  },
+  source: "icloud_notes",
+  scopes: ["icloud_notes.notes"],
+  // Settle paid reads through the DPv2 escrow gateway. The controller signs the
+  // GenericPayment with your app key; you supply the gateway client + contract.
+  escrow: {
+    client: createEscrowGatewayClient(process.env.VANA_DP_RPC_URL!),
+    escrowContract: process.env.VANA_ESCROW_CONTRACT! as `0x${string}`,
+  },
+});
+
+// The app's on-chain address — fund and inspect this in the Builder activity
+// report. (`vana.getAppIdentity()` also returns the configured id/name/homepage.)
+console.log(vana.getAppAddress()); // 0x...
+```
+
+Wire it to three routes — your backend chooses the source and scopes, owns the
+private key, and handles `402 Payment Required`:
+
+```typescript
+// POST /api/vana/request
+const request = await vana.createAccessRequest({
+  returnUrl: `${process.env.VANA_APP_URL}/connect/return`,
+});
+// -> { requestId: "dcr_...", approvalUrl: "https://app.vana.org/...", appAddress: "0x..." }
+
+// GET /api/vana/status?requestId=...
+const status = await vana.getAccessRequestStatus(requestId);
+// -> { status: "approved", personalServerUrl, grantId, scope }
+
+// GET /api/vana/data?requestId=...
+const result = await vana.readApprovedData({ requestId });
+// -> {
+//   scope: "icloud_notes.notes",
+//   data: ...,
+//   payment?: {            // present only when this read settled a payment
+//     amount, asset, paymentNonce, paidAt,
+//     breakdown: { registrationFee, dataAccessFee, registrationPaid },
+//   },
+// }
+```
+
+`readApprovedData` hides the payment flow for normal builders. If the Personal
+Server returns `402 Payment Required`, the controller settles the grant through
+the escrow gateway and retries, attaching a `payment` receipt so you can inspect
+the amount, asset, and fee breakdown. If `escrow` is not configured (or the read
+still requires payment afterward), it throws `PaymentRequiredError` carrying the
+amount and asset owed.
+
+### Frontend hook
+
+```tsx
+"use client";
+import { useDirectVanaConnect } from "@opendatalabs/vana-sdk/react";
+
+export function ConnectNotesButton() {
+  const connect = useDirectVanaConnect({
+    createRequest: () =>
+      fetch("/api/vana/request", { method: "POST" }).then((r) => r.json()),
+    getStatus: (requestId) =>
+      fetch(`/api/vana/status?requestId=${encodeURIComponent(requestId)}`).then(
+        (r) => r.json(),
+      ),
+    readResult: (requestId) =>
+      fetch(`/api/vana/data?requestId=${encodeURIComponent(requestId)}`).then(
+        (r) => r.json(),
+      ),
+  });
+
+  return (
+    <button
+      disabled={connect.state.type !== "idle"}
+      onClick={connect.start}
+      type="button"
+    >
+      {connect.state.type === "idle" ? "Connect Apple Notes" : "Connecting..."}
+    </button>
+  );
+}
+```
+
+The hook calls `createRequest`, opens the Vana approval URL, polls `getStatus`
+until the request is approved, then calls `readResult`. `react` is an optional
+peer dependency. The underlying `createDirectConnectFlow` store is also exported
+for non-React frontends.
+
 ## Networks
 
 | Network        | Chain ID | RPC URL                     |

package/dist/account/personal-server-lite-owner-binding.cjs

@@ -22,7 +22,7 @@ __export(personal_server_lite_owner_binding_exports, {
   signPersonalServerLiteOwnerBindingWithAccountClient: () => signPersonalServerLiteOwnerBindingWithAccountClient
 });
 module.exports = __toCommonJS(personal_server_lite_owner_binding_exports);
-var import_personal_server_lite_owner_binding = require("../protocol/personal-server-lite-owner-binding");
+var import_owner_binding = require("../personal-server-lite/owner-binding");
 class AccountPersonalServerLiteOwnerBindingError extends Error {
   code;
   details;
@@ -46,7 +46,7 @@ async function signPersonalServerLiteOwnerBindingWithAccountClient(config) {
       code: "account_address_required"
     });
   }
-  const message = (0, import_personal_server_lite_owner_binding.buildPersonalServerLiteOwnerBindingMessage)(address);
+  const message = (0, import_owner_binding.buildPersonalServerLiteOwnerBindingMessage)(address);
   let signature;
   try {
     signature = await config.client.signMessage({ message });
@@ -57,7 +57,7 @@ async function signPersonalServerLiteOwnerBindingWithAccountClient(config) {
     signature,
     signerAddress: address,
     message,
-    purpose: import_personal_server_lite_owner_binding.PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE
+    purpose: import_owner_binding.PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE
   };
 }
 function accountOwnerBindingError(error) {

package/dist/account/personal-server-lite-owner-binding.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/personal-server-lite-owner-binding.ts"],"sourcesContent":["/**\n * Optional first-party Account integration for PS Lite owner binding.\n *\n * The protocol helper lives in `protocol/personal-server-lite-owner-binding`.\n * This module adapts any Account-style client exposing `getAddress` and\n * `signMessage` to the SDK owner-binding signature shape.\n *\n * @category Account\n */\n\nimport type { Address, Hex } from \"viem\";\nimport {\n  buildPersonalServerLiteOwnerBindingMessage,\n  PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE,\n  type PersonalServerLiteOwnerBindingSignature,\n} from \"../protocol/personal-server-lite-owner-binding\";\n\nexport interface AccountPersonalServerLiteOwnerBindingClient {\n  getAddress(): Promise<Address | null> | Address | null;\n  signMessage(input: {\n    message: ReturnType<typeof buildPersonalServerLiteOwnerBindingMessage>;\n  }): Promise<Hex> | Hex;\n}\n\nexport interface SignPersonalServerLiteOwnerBindingWithAccountClientConfig {\n  client: AccountPersonalServerLiteOwnerBindingClient;\n}\n\nexport class AccountPersonalServerLiteOwnerBindingError extends Error {\n  code?: number | string;\n  details?: unknown;\n\n  constructor(input: {\n    message: string;\n    code?: number | string;\n    details?: unknown;\n  }) {\n    super(input.message);\n    this.name = \"AccountPersonalServerLiteOwnerBindingError\";\n    this.code = input.code;\n    this.details = input.details;\n  }\n}\n\nexport async function signPersonalServerLiteOwnerBindingWithAccountClient(\n  config: SignPersonalServerLiteOwnerBindingWithAccountClientConfig,\n): Promise<PersonalServerLiteOwnerBindingSignature> {\n  let address: Address | null;\n  try {\n    address = await config.client.getAddress();\n  } catch (error) {\n    throw accountOwnerBindingError(error);\n  }\n\n  if (!address) {\n    throw new AccountPersonalServerLiteOwnerBindingError({\n      message: \"Account did not return a wallet address\",\n      code: \"account_address_required\",\n    });\n  }\n\n  const message = buildPersonalServerLiteOwnerBindingMessage(address);\n  let signature: Hex;\n  try {\n    signature = await config.client.signMessage({ message });\n  } catch (error) {\n    throw accountOwnerBindingError(error);\n  }\n\n  return {\n    signature,\n    signerAddress: address,\n    message,\n    purpose: PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE,\n  };\n}\n\nfunction accountOwnerBindingError(\n  error: unknown,\n): AccountPersonalServerLiteOwnerBindingError {\n  if (error instanceof AccountPersonalServerLiteOwnerBindingError) {\n    return error;\n  }\n\n  const rpcError = error as\n    | { code?: number | string; message?: string }\n    | undefined;\n  const code = rpcError?.code;\n  const message =\n    typeof rpcError?.message === \"string\" && rpcError.message.length > 0\n      ? rpcError.message\n      : \"Account PS Lite owner-binding signature failed\";\n\n  return new AccountPersonalServerLiteOwnerBindingError({\n    message,\n    code,\n    details: error,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA,gDAIO;AAaA,MAAM,mDAAmD,MAAM;AAAA,EACpE;AAAA,EACA;AAAA,EAEA,YAAY,OAIT;AACD,UAAM,MAAM,OAAO;AACnB,SAAK,OAAO;AACZ,SAAK,OAAO,MAAM;AAClB,SAAK,UAAU,MAAM;AAAA,EACvB;AACF;AAEA,eAAsB,oDACpB,QACkD;AAClD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,OAAO,OAAO,WAAW;AAAA,EAC3C,SAAS,OAAO;AACd,UAAM,yBAAyB,KAAK;AAAA,EACtC;AAEA,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,2CAA2C;AAAA,MACnD,SAAS;AAAA,MACT,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,cAAU,sFAA2C,OAAO;AAClE,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;AAAA,EACzD,SAAS,OAAO;AACd,UAAM,yBAAyB,KAAK;AAAA,EACtC;AAEA,SAAO;AAAA,IACL;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA,SAAS;AAAA,EACX;AACF;AAEA,SAAS,yBACP,OAC4C;AAC5C,MAAI,iBAAiB,4CAA4C;AAC/D,WAAO;AAAA,EACT;AAEA,QAAM,WAAW;AAGjB,QAAM,OAAO,UAAU;AACvB,QAAM,UACJ,OAAO,UAAU,YAAY,YAAY,SAAS,QAAQ,SAAS,IAC/D,SAAS,UACT;AAEN,SAAO,IAAI,2CAA2C;AAAA,IACpD;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../src/account/personal-server-lite-owner-binding.ts"],"sourcesContent":["/**\n * Optional first-party Account integration for PS Lite owner binding.\n *\n * The PS Lite helper lives in `personal-server-lite/owner-binding`.\n * This module adapts any Account-style client exposing `getAddress` and\n * `signMessage` to the SDK owner-binding signature shape.\n *\n * @category Account\n */\n\nimport type { Address, Hex } from \"viem\";\nimport {\n  buildPersonalServerLiteOwnerBindingMessage,\n  PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE,\n  type PersonalServerLiteOwnerBindingSignature,\n} from \"../personal-server-lite/owner-binding\";\n\nexport interface AccountPersonalServerLiteOwnerBindingClient {\n  getAddress(): Promise<Address | null> | Address | null;\n  signMessage(input: {\n    message: ReturnType<typeof buildPersonalServerLiteOwnerBindingMessage>;\n  }): Promise<Hex> | Hex;\n}\n\nexport interface SignPersonalServerLiteOwnerBindingWithAccountClientConfig {\n  client: AccountPersonalServerLiteOwnerBindingClient;\n}\n\nexport class AccountPersonalServerLiteOwnerBindingError extends Error {\n  code?: number | string;\n  details?: unknown;\n\n  constructor(input: {\n    message: string;\n    code?: number | string;\n    details?: unknown;\n  }) {\n    super(input.message);\n    this.name = \"AccountPersonalServerLiteOwnerBindingError\";\n    this.code = input.code;\n    this.details = input.details;\n  }\n}\n\nexport async function signPersonalServerLiteOwnerBindingWithAccountClient(\n  config: SignPersonalServerLiteOwnerBindingWithAccountClientConfig,\n): Promise<PersonalServerLiteOwnerBindingSignature> {\n  let address: Address | null;\n  try {\n    address = await config.client.getAddress();\n  } catch (error) {\n    throw accountOwnerBindingError(error);\n  }\n\n  if (!address) {\n    throw new AccountPersonalServerLiteOwnerBindingError({\n      message: \"Account did not return a wallet address\",\n      code: \"account_address_required\",\n    });\n  }\n\n  const message = buildPersonalServerLiteOwnerBindingMessage(address);\n  let signature: Hex;\n  try {\n    signature = await config.client.signMessage({ message });\n  } catch (error) {\n    throw accountOwnerBindingError(error);\n  }\n\n  return {\n    signature,\n    signerAddress: address,\n    message,\n    purpose: PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE,\n  };\n}\n\nfunction accountOwnerBindingError(\n  error: unknown,\n): AccountPersonalServerLiteOwnerBindingError {\n  if (error instanceof AccountPersonalServerLiteOwnerBindingError) {\n    return error;\n  }\n\n  const rpcError = error as\n    | { code?: number | string; message?: string }\n    | undefined;\n  const code = rpcError?.code;\n  const message =\n    typeof rpcError?.message === \"string\" && rpcError.message.length > 0\n      ? rpcError.message\n      : \"Account PS Lite owner-binding signature failed\";\n\n  return new AccountPersonalServerLiteOwnerBindingError({\n    message,\n    code,\n    details: error,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA,2BAIO;AAaA,MAAM,mDAAmD,MAAM;AAAA,EACpE;AAAA,EACA;AAAA,EAEA,YAAY,OAIT;AACD,UAAM,MAAM,OAAO;AACnB,SAAK,OAAO;AACZ,SAAK,OAAO,MAAM;AAClB,SAAK,UAAU,MAAM;AAAA,EACvB;AACF;AAEA,eAAsB,oDACpB,QACkD;AAClD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,OAAO,OAAO,WAAW;AAAA,EAC3C,SAAS,OAAO;AACd,UAAM,yBAAyB,KAAK;AAAA,EACtC;AAEA,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,2CAA2C;AAAA,MACnD,SAAS;AAAA,MACT,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,cAAU,iEAA2C,OAAO;AAClE,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;AAAA,EACzD,SAAS,OAAO;AACd,UAAM,yBAAyB,KAAK;AAAA,EACtC;AAEA,SAAO;AAAA,IACL;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA,SAAS;AAAA,EACX;AACF;AAEA,SAAS,yBACP,OAC4C;AAC5C,MAAI,iBAAiB,4CAA4C;AAC/D,WAAO;AAAA,EACT;AAEA,QAAM,WAAW;AAGjB,QAAM,OAAO,UAAU;AACvB,QAAM,UACJ,OAAO,UAAU,YAAY,YAAY,SAAS,QAAQ,SAAS,IAC/D,SAAS,UACT;AAEN,SAAO,IAAI,2CAA2C;AAAA,IACpD;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AACH;","names":[]}

package/dist/account/personal-server-lite-owner-binding.d.ts

@@ -1,14 +1,14 @@
 /**
  * Optional first-party Account integration for PS Lite owner binding.
  *
- * The protocol helper lives in `protocol/personal-server-lite-owner-binding`.
+ * The PS Lite helper lives in `personal-server-lite/owner-binding`.
  * This module adapts any Account-style client exposing `getAddress` and
  * `signMessage` to the SDK owner-binding signature shape.
  *
  * @category Account
  */
 import type { Address, Hex } from "viem";
-import { buildPersonalServerLiteOwnerBindingMessage, type PersonalServerLiteOwnerBindingSignature } from "../protocol/personal-server-lite-owner-binding";
+import { buildPersonalServerLiteOwnerBindingMessage, type PersonalServerLiteOwnerBindingSignature } from "../personal-server-lite/owner-binding";
 export interface AccountPersonalServerLiteOwnerBindingClient {
     getAddress(): Promise<Address | null> | Address | null;
     signMessage(input: {

package/dist/account/personal-server-lite-owner-binding.js

@@ -1,7 +1,7 @@
 import {
   buildPersonalServerLiteOwnerBindingMessage,
   PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE
-} from "../protocol/personal-server-lite-owner-binding.js";
+} from "../personal-server-lite/owner-binding.js";
 class AccountPersonalServerLiteOwnerBindingError extends Error {
   code;
   details;

package/dist/account/personal-server-lite-owner-binding.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/account/personal-server-lite-owner-binding.ts"],"sourcesContent":["/**\n * Optional first-party Account integration for PS Lite owner binding.\n *\n * The protocol helper lives in `protocol/personal-server-lite-owner-binding`.\n * This module adapts any Account-style client exposing `getAddress` and\n * `signMessage` to the SDK owner-binding signature shape.\n *\n * @category Account\n */\n\nimport type { Address, Hex } from \"viem\";\nimport {\n  buildPersonalServerLiteOwnerBindingMessage,\n  PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE,\n  type PersonalServerLiteOwnerBindingSignature,\n} from \"../protocol/personal-server-lite-owner-binding\";\n\nexport interface AccountPersonalServerLiteOwnerBindingClient {\n  getAddress(): Promise<Address | null> | Address | null;\n  signMessage(input: {\n    message: ReturnType<typeof buildPersonalServerLiteOwnerBindingMessage>;\n  }): Promise<Hex> | Hex;\n}\n\nexport interface SignPersonalServerLiteOwnerBindingWithAccountClientConfig {\n  client: AccountPersonalServerLiteOwnerBindingClient;\n}\n\nexport class AccountPersonalServerLiteOwnerBindingError extends Error {\n  code?: number | string;\n  details?: unknown;\n\n  constructor(input: {\n    message: string;\n    code?: number | string;\n    details?: unknown;\n  }) {\n    super(input.message);\n    this.name = \"AccountPersonalServerLiteOwnerBindingError\";\n    this.code = input.code;\n    this.details = input.details;\n  }\n}\n\nexport async function signPersonalServerLiteOwnerBindingWithAccountClient(\n  config: SignPersonalServerLiteOwnerBindingWithAccountClientConfig,\n): Promise<PersonalServerLiteOwnerBindingSignature> {\n  let address: Address | null;\n  try {\n    address = await config.client.getAddress();\n  } catch (error) {\n    throw accountOwnerBindingError(error);\n  }\n\n  if (!address) {\n    throw new AccountPersonalServerLiteOwnerBindingError({\n      message: \"Account did not return a wallet address\",\n      code: \"account_address_required\",\n    });\n  }\n\n  const message = buildPersonalServerLiteOwnerBindingMessage(address);\n  let signature: Hex;\n  try {\n    signature = await config.client.signMessage({ message });\n  } catch (error) {\n    throw accountOwnerBindingError(error);\n  }\n\n  return {\n    signature,\n    signerAddress: address,\n    message,\n    purpose: PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE,\n  };\n}\n\nfunction accountOwnerBindingError(\n  error: unknown,\n): AccountPersonalServerLiteOwnerBindingError {\n  if (error instanceof AccountPersonalServerLiteOwnerBindingError) {\n    return error;\n  }\n\n  const rpcError = error as\n    | { code?: number | string; message?: string }\n    | undefined;\n  const code = rpcError?.code;\n  const message =\n    typeof rpcError?.message === \"string\" && rpcError.message.length > 0\n      ? rpcError.message\n      : \"Account PS Lite owner-binding signature failed\";\n\n  return new AccountPersonalServerLiteOwnerBindingError({\n    message,\n    code,\n    details: error,\n  });\n}\n"],"mappings":"AAWA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAaA,MAAM,mDAAmD,MAAM;AAAA,EACpE;AAAA,EACA;AAAA,EAEA,YAAY,OAIT;AACD,UAAM,MAAM,OAAO;AACnB,SAAK,OAAO;AACZ,SAAK,OAAO,MAAM;AAClB,SAAK,UAAU,MAAM;AAAA,EACvB;AACF;AAEA,eAAsB,oDACpB,QACkD;AAClD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,OAAO,OAAO,WAAW;AAAA,EAC3C,SAAS,OAAO;AACd,UAAM,yBAAyB,KAAK;AAAA,EACtC;AAEA,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,2CAA2C;AAAA,MACnD,SAAS;AAAA,MACT,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,UAAU,2CAA2C,OAAO;AAClE,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;AAAA,EACzD,SAAS,OAAO;AACd,UAAM,yBAAyB,KAAK;AAAA,EACtC;AAEA,SAAO;AAAA,IACL;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA,SAAS;AAAA,EACX;AACF;AAEA,SAAS,yBACP,OAC4C;AAC5C,MAAI,iBAAiB,4CAA4C;AAC/D,WAAO;AAAA,EACT;AAEA,QAAM,WAAW;AAGjB,QAAM,OAAO,UAAU;AACvB,QAAM,UACJ,OAAO,UAAU,YAAY,YAAY,SAAS,QAAQ,SAAS,IAC/D,SAAS,UACT;AAEN,SAAO,IAAI,2CAA2C;AAAA,IACpD;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../src/account/personal-server-lite-owner-binding.ts"],"sourcesContent":["/**\n * Optional first-party Account integration for PS Lite owner binding.\n *\n * The PS Lite helper lives in `personal-server-lite/owner-binding`.\n * This module adapts any Account-style client exposing `getAddress` and\n * `signMessage` to the SDK owner-binding signature shape.\n *\n * @category Account\n */\n\nimport type { Address, Hex } from \"viem\";\nimport {\n  buildPersonalServerLiteOwnerBindingMessage,\n  PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE,\n  type PersonalServerLiteOwnerBindingSignature,\n} from \"../personal-server-lite/owner-binding\";\n\nexport interface AccountPersonalServerLiteOwnerBindingClient {\n  getAddress(): Promise<Address | null> | Address | null;\n  signMessage(input: {\n    message: ReturnType<typeof buildPersonalServerLiteOwnerBindingMessage>;\n  }): Promise<Hex> | Hex;\n}\n\nexport interface SignPersonalServerLiteOwnerBindingWithAccountClientConfig {\n  client: AccountPersonalServerLiteOwnerBindingClient;\n}\n\nexport class AccountPersonalServerLiteOwnerBindingError extends Error {\n  code?: number | string;\n  details?: unknown;\n\n  constructor(input: {\n    message: string;\n    code?: number | string;\n    details?: unknown;\n  }) {\n    super(input.message);\n    this.name = \"AccountPersonalServerLiteOwnerBindingError\";\n    this.code = input.code;\n    this.details = input.details;\n  }\n}\n\nexport async function signPersonalServerLiteOwnerBindingWithAccountClient(\n  config: SignPersonalServerLiteOwnerBindingWithAccountClientConfig,\n): Promise<PersonalServerLiteOwnerBindingSignature> {\n  let address: Address | null;\n  try {\n    address = await config.client.getAddress();\n  } catch (error) {\n    throw accountOwnerBindingError(error);\n  }\n\n  if (!address) {\n    throw new AccountPersonalServerLiteOwnerBindingError({\n      message: \"Account did not return a wallet address\",\n      code: \"account_address_required\",\n    });\n  }\n\n  const message = buildPersonalServerLiteOwnerBindingMessage(address);\n  let signature: Hex;\n  try {\n    signature = await config.client.signMessage({ message });\n  } catch (error) {\n    throw accountOwnerBindingError(error);\n  }\n\n  return {\n    signature,\n    signerAddress: address,\n    message,\n    purpose: PERSONAL_SERVER_LITE_OWNER_BINDING_PURPOSE,\n  };\n}\n\nfunction accountOwnerBindingError(\n  error: unknown,\n): AccountPersonalServerLiteOwnerBindingError {\n  if (error instanceof AccountPersonalServerLiteOwnerBindingError) {\n    return error;\n  }\n\n  const rpcError = error as\n    | { code?: number | string; message?: string }\n    | undefined;\n  const code = rpcError?.code;\n  const message =\n    typeof rpcError?.message === \"string\" && rpcError.message.length > 0\n      ? rpcError.message\n      : \"Account PS Lite owner-binding signature failed\";\n\n  return new AccountPersonalServerLiteOwnerBindingError({\n    message,\n    code,\n    details: error,\n  });\n}\n"],"mappings":"AAWA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAaA,MAAM,mDAAmD,MAAM;AAAA,EACpE;AAAA,EACA;AAAA,EAEA,YAAY,OAIT;AACD,UAAM,MAAM,OAAO;AACnB,SAAK,OAAO;AACZ,SAAK,OAAO,MAAM;AAClB,SAAK,UAAU,MAAM;AAAA,EACvB;AACF;AAEA,eAAsB,oDACpB,QACkD;AAClD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,OAAO,OAAO,WAAW;AAAA,EAC3C,SAAS,OAAO;AACd,UAAM,yBAAyB,KAAK;AAAA,EACtC;AAEA,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,2CAA2C;AAAA,MACnD,SAAS;AAAA,MACT,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,QAAM,UAAU,2CAA2C,OAAO;AAClE,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;AAAA,EACzD,SAAS,OAAO;AACd,UAAM,yBAAyB,KAAK;AAAA,EACtC;AAEA,SAAO;AAAA,IACL;AAAA,IACA,eAAe;AAAA,IACf;AAAA,IACA,SAAS;AAAA,EACX;AACF;AAEA,SAAS,yBACP,OAC4C;AAC5C,MAAI,iBAAiB,4CAA4C;AAC/D,WAAO;AAAA,EACT;AAEA,QAAM,WAAW;AAGjB,QAAM,OAAO,UAAU;AACvB,QAAM,UACJ,OAAO,UAAU,YAAY,YAAY,SAAS,QAAQ,SAAS,IAC/D,SAAS,UACT;AAEN,SAAO,IAAI,2CAA2C;AAAA,IACpD;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AACH;","names":[]}

package/dist/direct/access-request-client.cjs

@@ -0,0 +1,104 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var access_request_client_exports = {};
+__export(access_request_client_exports, {
+  buildApprovalUrl: () => buildApprovalUrl,
+  createDefaultAccessRequestClient: () => createDefaultAccessRequestClient
+});
+module.exports = __toCommonJS(access_request_client_exports);
+const VALID_STATUSES = [
+  "pending",
+  "approved",
+  "denied",
+  "expired"
+];
+function normalizeStatus(value) {
+  return VALID_STATUSES.includes(value) ? value : "pending";
+}
+function stripTrailingSlash(url) {
+  return url.replace(/\/+$/, "");
+}
+function buildApprovalUrl(approvalBaseUrl, requestId) {
+  return `${stripTrailingSlash(approvalBaseUrl)}/data-connection-requests/${encodeURIComponent(
+    requestId
+  )}?mode=page`;
+}
+function createDefaultAccessRequestClient(options) {
+  const fetchFn = options.fetchFn ?? globalThis.fetch;
+  if (!fetchFn) {
+    throw new Error(
+      "No fetch implementation available. Pass `fetchFn` to createDefaultAccessRequestClient."
+    );
+  }
+  const base = stripTrailingSlash(options.baseUrl);
+  return {
+    async createAccessRequest(input) {
+      const res = await fetchFn(`${base}/api/v1/data-connection-requests`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          appAddress: input.appAddress,
+          app: input.app,
+          source: input.source,
+          scopes: input.scopes,
+          returnUrl: input.returnUrl
+        })
+      });
+      if (!res.ok) {
+        throw new Error(
+          `Access request service error: ${res.status} ${res.statusText}`
+        );
+      }
+      const body = await res.json();
+      const requestId = body.requestId ?? body.id;
+      if (!requestId) {
+        throw new Error("Access request service returned no requestId");
+      }
+      return {
+        requestId,
+        approvalUrl: body.approvalUrl ?? buildApprovalUrl(options.approvalBaseUrl, requestId),
+        appAddress: body.appAddress ?? input.appAddress
+      };
+    },
+    async getAccessRequestStatus(requestId) {
+      const res = await fetchFn(
+        `${base}/api/v1/data-connection-requests/${encodeURIComponent(requestId)}`,
+        { method: "GET" }
+      );
+      if (!res.ok) {
+        throw new Error(
+          `Access request service error: ${res.status} ${res.statusText}`
+        );
+      }
+      const body = await res.json();
+      return {
+        status: normalizeStatus(body.status),
+        personalServerUrl: body.personalServerUrl,
+        grantId: body.grantId,
+        scope: body.scope
+      };
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  buildApprovalUrl,
+  createDefaultAccessRequestClient
+});
+//# sourceMappingURL=access-request-client.cjs.map

package/dist/direct/access-request-client.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/direct/access-request-client.ts"],"sourcesContent":["/**\n * Default client for the Vana Account access-request API.\n *\n * @remarks\n * Calls the Vana Account endpoints that issue `dcr_*` ids and approval URLs and\n * report request status. Inject a custom {@link AccessRequestClient} on the\n * controller to point at a different deployment; pass `fetchFn` to supply a test\n * double for the HTTP layer.\n *\n * @category Direct\n * @module direct/access-request-client\n */\n\nimport type {\n  AccessRequest,\n  AccessRequestClient,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n} from \"./types\";\n\n/** Minimal `fetch` signature so the client is testable without a global fetch. */\nexport type FetchLike = (\n  input: string,\n  init?: {\n    method?: string;\n    headers?: Record<string, string>;\n    body?: string;\n  },\n) => Promise<{\n  ok: boolean;\n  status: number;\n  statusText: string;\n  json(): Promise<unknown>;\n  text(): Promise<string>;\n}>;\n\n/** Options for {@link createDefaultAccessRequestClient}. */\nexport interface DefaultAccessRequestClientOptions {\n  /** Base URL of the Vana Account access-request API. */\n  baseUrl: string;\n  /** Base URL the user is sent to for approval. */\n  approvalBaseUrl: string;\n  /** `fetch` implementation. Defaults to the global `fetch`. */\n  fetchFn?: FetchLike;\n}\n\nconst VALID_STATUSES: readonly AccessRequestStatusValue[] = [\n  \"pending\",\n  \"approved\",\n  \"denied\",\n  \"expired\",\n];\n\nfunction normalizeStatus(value: unknown): AccessRequestStatusValue {\n  return VALID_STATUSES.includes(value as AccessRequestStatusValue)\n    ? (value as AccessRequestStatusValue)\n    : \"pending\";\n}\n\nfunction stripTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, \"\");\n}\n\n/**\n * Build an approval URL for a request id, matching the documented format\n * (`{app}/data-connection-requests/{requestId}?mode=page`).\n *\n * @param approvalBaseUrl - Base URL of the Vana approval app.\n * @param requestId - The `dcr_*` request id.\n * @returns The full approval URL.\n */\nexport function buildApprovalUrl(\n  approvalBaseUrl: string,\n  requestId: string,\n): string {\n  return `${stripTrailingSlash(approvalBaseUrl)}/data-connection-requests/${encodeURIComponent(\n    requestId,\n  )}?mode=page`;\n}\n\n/**\n * Create the default {@link AccessRequestClient} for the Vana Account\n * access-request API.\n *\n * @param options - Base URLs and an optional `fetch` implementation.\n * @returns An {@link AccessRequestClient} backed by HTTP calls.\n */\nexport function createDefaultAccessRequestClient(\n  options: DefaultAccessRequestClientOptions,\n): AccessRequestClient {\n  const fetchFn = options.fetchFn ?? (globalThis.fetch as FetchLike);\n  if (!fetchFn) {\n    throw new Error(\n      \"No fetch implementation available. Pass `fetchFn` to createDefaultAccessRequestClient.\",\n    );\n  }\n  const base = stripTrailingSlash(options.baseUrl);\n\n  return {\n    async createAccessRequest(input): Promise<AccessRequest> {\n      const res = await fetchFn(`${base}/api/v1/data-connection-requests`, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({\n          appAddress: input.appAddress,\n          app: input.app,\n          source: input.source,\n          scopes: input.scopes,\n          returnUrl: input.returnUrl,\n        }),\n      });\n      if (!res.ok) {\n        throw new Error(\n          `Access request service error: ${res.status} ${res.statusText}`,\n        );\n      }\n      const body = (await res.json()) as {\n        requestId?: string;\n        id?: string;\n        approvalUrl?: string;\n        appAddress?: string;\n      };\n      const requestId = body.requestId ?? body.id;\n      if (!requestId) {\n        throw new Error(\"Access request service returned no requestId\");\n      }\n      return {\n        requestId,\n        approvalUrl:\n          body.approvalUrl ??\n          buildApprovalUrl(options.approvalBaseUrl, requestId),\n        appAddress: body.appAddress ?? input.appAddress,\n      };\n    },\n\n    async getAccessRequestStatus(\n      requestId: string,\n    ): Promise<AccessRequestStatus> {\n      const res = await fetchFn(\n        `${base}/api/v1/data-connection-requests/${encodeURIComponent(requestId)}`,\n        { method: \"GET\" },\n      );\n      if (!res.ok) {\n        throw new Error(\n          `Access request service error: ${res.status} ${res.statusText}`,\n        );\n      }\n      const body = (await res.json()) as {\n        status?: string;\n        personalServerUrl?: string;\n        grantId?: string;\n        scope?: string;\n      };\n      return {\n        status: normalizeStatus(body.status),\n        personalServerUrl: body.personalServerUrl,\n        grantId: body.grantId,\n        scope: body.scope,\n      };\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA8CA,MAAM,iBAAsD;AAAA,EAC1D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,gBAAgB,OAA0C;AACjE,SAAO,eAAe,SAAS,KAAiC,IAC3D,QACD;AACN;AAEA,SAAS,mBAAmB,KAAqB;AAC/C,SAAO,IAAI,QAAQ,QAAQ,EAAE;AAC/B;AAUO,SAAS,iBACd,iBACA,WACQ;AACR,SAAO,GAAG,mBAAmB,eAAe,CAAC,6BAA6B;AAAA,IACxE;AAAA,EACF,CAAC;AACH;AASO,SAAS,iCACd,SACqB;AACrB,QAAM,UAAU,QAAQ,WAAY,WAAW;AAC/C,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO,mBAAmB,QAAQ,OAAO;AAE/C,SAAO;AAAA,IACL,MAAM,oBAAoB,OAA+B;AACvD,YAAM,MAAM,MAAM,QAAQ,GAAG,IAAI,oCAAoC;AAAA,QACnE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU;AAAA,UACnB,YAAY,MAAM;AAAA,UAClB,KAAK,MAAM;AAAA,UACX,QAAQ,MAAM;AAAA,UACd,QAAQ,MAAM;AAAA,UACd,WAAW,MAAM;AAAA,QACnB,CAAC;AAAA,MACH,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI;AAAA,UACR,iCAAiC,IAAI,MAAM,IAAI,IAAI,UAAU;AAAA,QAC/D;AAAA,MACF;AACA,YAAM,OAAQ,MAAM,IAAI,KAAK;AAM7B,YAAM,YAAY,KAAK,aAAa,KAAK;AACzC,UAAI,CAAC,WAAW;AACd,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AACA,aAAO;AAAA,QACL;AAAA,QACA,aACE,KAAK,eACL,iBAAiB,QAAQ,iBAAiB,SAAS;AAAA,QACrD,YAAY,KAAK,cAAc,MAAM;AAAA,MACvC;AAAA,IACF;AAAA,IAEA,MAAM,uBACJ,WAC8B;AAC9B,YAAM,MAAM,MAAM;AAAA,QAChB,GAAG,IAAI,oCAAoC,mBAAmB,SAAS,CAAC;AAAA,QACxE,EAAE,QAAQ,MAAM;AAAA,MAClB;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI;AAAA,UACR,iCAAiC,IAAI,MAAM,IAAI,IAAI,UAAU;AAAA,QAC/D;AAAA,MACF;AACA,YAAM,OAAQ,MAAM,IAAI,KAAK;AAM7B,aAAO;AAAA,QACL,QAAQ,gBAAgB,KAAK,MAAM;AAAA,QACnC,mBAAmB,KAAK;AAAA,QACxB,SAAS,KAAK;AAAA,QACd,OAAO,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/direct/access-request-client.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Default client for the Vana Account access-request API.
+ *
+ * @remarks
+ * Calls the Vana Account endpoints that issue `dcr_*` ids and approval URLs and
+ * report request status. Inject a custom {@link AccessRequestClient} on the
+ * controller to point at a different deployment; pass `fetchFn` to supply a test
+ * double for the HTTP layer.
+ *
+ * @category Direct
+ * @module direct/access-request-client
+ */
+import type { AccessRequestClient } from "./types";
+/** Minimal `fetch` signature so the client is testable without a global fetch. */
+export type FetchLike = (input: string, init?: {
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    statusText: string;
+    json(): Promise<unknown>;
+    text(): Promise<string>;
+}>;
+/** Options for {@link createDefaultAccessRequestClient}. */
+export interface DefaultAccessRequestClientOptions {
+    /** Base URL of the Vana Account access-request API. */
+    baseUrl: string;
+    /** Base URL the user is sent to for approval. */
+    approvalBaseUrl: string;
+    /** `fetch` implementation. Defaults to the global `fetch`. */
+    fetchFn?: FetchLike;
+}
+/**
+ * Build an approval URL for a request id, matching the documented format
+ * (`{app}/data-connection-requests/{requestId}?mode=page`).
+ *
+ * @param approvalBaseUrl - Base URL of the Vana approval app.
+ * @param requestId - The `dcr_*` request id.
+ * @returns The full approval URL.
+ */
+export declare function buildApprovalUrl(approvalBaseUrl: string, requestId: string): string;
+/**
+ * Create the default {@link AccessRequestClient} for the Vana Account
+ * access-request API.
+ *
+ * @param options - Base URLs and an optional `fetch` implementation.
+ * @returns An {@link AccessRequestClient} backed by HTTP calls.
+ */
+export declare function createDefaultAccessRequestClient(options: DefaultAccessRequestClientOptions): AccessRequestClient;

package/dist/direct/access-request-client.js

@@ -0,0 +1,79 @@
+const VALID_STATUSES = [
+  "pending",
+  "approved",
+  "denied",
+  "expired"
+];
+function normalizeStatus(value) {
+  return VALID_STATUSES.includes(value) ? value : "pending";
+}
+function stripTrailingSlash(url) {
+  return url.replace(/\/+$/, "");
+}
+function buildApprovalUrl(approvalBaseUrl, requestId) {
+  return `${stripTrailingSlash(approvalBaseUrl)}/data-connection-requests/${encodeURIComponent(
+    requestId
+  )}?mode=page`;
+}
+function createDefaultAccessRequestClient(options) {
+  const fetchFn = options.fetchFn ?? globalThis.fetch;
+  if (!fetchFn) {
+    throw new Error(
+      "No fetch implementation available. Pass `fetchFn` to createDefaultAccessRequestClient."
+    );
+  }
+  const base = stripTrailingSlash(options.baseUrl);
+  return {
+    async createAccessRequest(input) {
+      const res = await fetchFn(`${base}/api/v1/data-connection-requests`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          appAddress: input.appAddress,
+          app: input.app,
+          source: input.source,
+          scopes: input.scopes,
+          returnUrl: input.returnUrl
+        })
+      });
+      if (!res.ok) {
+        throw new Error(
+          `Access request service error: ${res.status} ${res.statusText}`
+        );
+      }
+      const body = await res.json();
+      const requestId = body.requestId ?? body.id;
+      if (!requestId) {
+        throw new Error("Access request service returned no requestId");
+      }
+      return {
+        requestId,
+        approvalUrl: body.approvalUrl ?? buildApprovalUrl(options.approvalBaseUrl, requestId),
+        appAddress: body.appAddress ?? input.appAddress
+      };
+    },
+    async getAccessRequestStatus(requestId) {
+      const res = await fetchFn(
+        `${base}/api/v1/data-connection-requests/${encodeURIComponent(requestId)}`,
+        { method: "GET" }
+      );
+      if (!res.ok) {
+        throw new Error(
+          `Access request service error: ${res.status} ${res.statusText}`
+        );
+      }
+      const body = await res.json();
+      return {
+        status: normalizeStatus(body.status),
+        personalServerUrl: body.personalServerUrl,
+        grantId: body.grantId,
+        scope: body.scope
+      };
+    }
+  };
+}
+export {
+  buildApprovalUrl,
+  createDefaultAccessRequestClient
+};
+//# sourceMappingURL=access-request-client.js.map

package/dist/direct/access-request-client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/direct/access-request-client.ts"],"sourcesContent":["/**\n * Default client for the Vana Account access-request API.\n *\n * @remarks\n * Calls the Vana Account endpoints that issue `dcr_*` ids and approval URLs and\n * report request status. Inject a custom {@link AccessRequestClient} on the\n * controller to point at a different deployment; pass `fetchFn` to supply a test\n * double for the HTTP layer.\n *\n * @category Direct\n * @module direct/access-request-client\n */\n\nimport type {\n  AccessRequest,\n  AccessRequestClient,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n} from \"./types\";\n\n/** Minimal `fetch` signature so the client is testable without a global fetch. */\nexport type FetchLike = (\n  input: string,\n  init?: {\n    method?: string;\n    headers?: Record<string, string>;\n    body?: string;\n  },\n) => Promise<{\n  ok: boolean;\n  status: number;\n  statusText: string;\n  json(): Promise<unknown>;\n  text(): Promise<string>;\n}>;\n\n/** Options for {@link createDefaultAccessRequestClient}. */\nexport interface DefaultAccessRequestClientOptions {\n  /** Base URL of the Vana Account access-request API. */\n  baseUrl: string;\n  /** Base URL the user is sent to for approval. */\n  approvalBaseUrl: string;\n  /** `fetch` implementation. Defaults to the global `fetch`. */\n  fetchFn?: FetchLike;\n}\n\nconst VALID_STATUSES: readonly AccessRequestStatusValue[] = [\n  \"pending\",\n  \"approved\",\n  \"denied\",\n  \"expired\",\n];\n\nfunction normalizeStatus(value: unknown): AccessRequestStatusValue {\n  return VALID_STATUSES.includes(value as AccessRequestStatusValue)\n    ? (value as AccessRequestStatusValue)\n    : \"pending\";\n}\n\nfunction stripTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, \"\");\n}\n\n/**\n * Build an approval URL for a request id, matching the documented format\n * (`{app}/data-connection-requests/{requestId}?mode=page`).\n *\n * @param approvalBaseUrl - Base URL of the Vana approval app.\n * @param requestId - The `dcr_*` request id.\n * @returns The full approval URL.\n */\nexport function buildApprovalUrl(\n  approvalBaseUrl: string,\n  requestId: string,\n): string {\n  return `${stripTrailingSlash(approvalBaseUrl)}/data-connection-requests/${encodeURIComponent(\n    requestId,\n  )}?mode=page`;\n}\n\n/**\n * Create the default {@link AccessRequestClient} for the Vana Account\n * access-request API.\n *\n * @param options - Base URLs and an optional `fetch` implementation.\n * @returns An {@link AccessRequestClient} backed by HTTP calls.\n */\nexport function createDefaultAccessRequestClient(\n  options: DefaultAccessRequestClientOptions,\n): AccessRequestClient {\n  const fetchFn = options.fetchFn ?? (globalThis.fetch as FetchLike);\n  if (!fetchFn) {\n    throw new Error(\n      \"No fetch implementation available. Pass `fetchFn` to createDefaultAccessRequestClient.\",\n    );\n  }\n  const base = stripTrailingSlash(options.baseUrl);\n\n  return {\n    async createAccessRequest(input): Promise<AccessRequest> {\n      const res = await fetchFn(`${base}/api/v1/data-connection-requests`, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({\n          appAddress: input.appAddress,\n          app: input.app,\n          source: input.source,\n          scopes: input.scopes,\n          returnUrl: input.returnUrl,\n        }),\n      });\n      if (!res.ok) {\n        throw new Error(\n          `Access request service error: ${res.status} ${res.statusText}`,\n        );\n      }\n      const body = (await res.json()) as {\n        requestId?: string;\n        id?: string;\n        approvalUrl?: string;\n        appAddress?: string;\n      };\n      const requestId = body.requestId ?? body.id;\n      if (!requestId) {\n        throw new Error(\"Access request service returned no requestId\");\n      }\n      return {\n        requestId,\n        approvalUrl:\n          body.approvalUrl ??\n          buildApprovalUrl(options.approvalBaseUrl, requestId),\n        appAddress: body.appAddress ?? input.appAddress,\n      };\n    },\n\n    async getAccessRequestStatus(\n      requestId: string,\n    ): Promise<AccessRequestStatus> {\n      const res = await fetchFn(\n        `${base}/api/v1/data-connection-requests/${encodeURIComponent(requestId)}`,\n        { method: \"GET\" },\n      );\n      if (!res.ok) {\n        throw new Error(\n          `Access request service error: ${res.status} ${res.statusText}`,\n        );\n      }\n      const body = (await res.json()) as {\n        status?: string;\n        personalServerUrl?: string;\n        grantId?: string;\n        scope?: string;\n      };\n      return {\n        status: normalizeStatus(body.status),\n        personalServerUrl: body.personalServerUrl,\n        grantId: body.grantId,\n        scope: body.scope,\n      };\n    },\n  };\n}\n"],"mappings":"AA8CA,MAAM,iBAAsD;AAAA,EAC1D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,gBAAgB,OAA0C;AACjE,SAAO,eAAe,SAAS,KAAiC,IAC3D,QACD;AACN;AAEA,SAAS,mBAAmB,KAAqB;AAC/C,SAAO,IAAI,QAAQ,QAAQ,EAAE;AAC/B;AAUO,SAAS,iBACd,iBACA,WACQ;AACR,SAAO,GAAG,mBAAmB,eAAe,CAAC,6BAA6B;AAAA,IACxE;AAAA,EACF,CAAC;AACH;AASO,SAAS,iCACd,SACqB;AACrB,QAAM,UAAU,QAAQ,WAAY,WAAW;AAC/C,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,OAAO,mBAAmB,QAAQ,OAAO;AAE/C,SAAO;AAAA,IACL,MAAM,oBAAoB,OAA+B;AACvD,YAAM,MAAM,MAAM,QAAQ,GAAG,IAAI,oCAAoC;AAAA,QACnE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU;AAAA,UACnB,YAAY,MAAM;AAAA,UAClB,KAAK,MAAM;AAAA,UACX,QAAQ,MAAM;AAAA,UACd,QAAQ,MAAM;AAAA,UACd,WAAW,MAAM;AAAA,QACnB,CAAC;AAAA,MACH,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI;AAAA,UACR,iCAAiC,IAAI,MAAM,IAAI,IAAI,UAAU;AAAA,QAC/D;AAAA,MACF;AACA,YAAM,OAAQ,MAAM,IAAI,KAAK;AAM7B,YAAM,YAAY,KAAK,aAAa,KAAK;AACzC,UAAI,CAAC,WAAW;AACd,cAAM,IAAI,MAAM,8CAA8C;AAAA,MAChE;AACA,aAAO;AAAA,QACL;AAAA,QACA,aACE,KAAK,eACL,iBAAiB,QAAQ,iBAAiB,SAAS;AAAA,QACrD,YAAY,KAAK,cAAc,MAAM;AAAA,MACvC;AAAA,IACF;AAAA,IAEA,MAAM,uBACJ,WAC8B;AAC9B,YAAM,MAAM,MAAM;AAAA,QAChB,GAAG,IAAI,oCAAoC,mBAAmB,SAAS,CAAC;AAAA,QACxE,EAAE,QAAQ,MAAM;AAAA,MAClB;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI;AAAA,UACR,iCAAiC,IAAI,MAAM,IAAI,IAAI,UAAU;AAAA,QAC/D;AAAA,MACF;AACA,YAAM,OAAQ,MAAM,IAAI,KAAK;AAM7B,aAAO;AAAA,QACL,QAAQ,gBAAgB,KAAK,MAAM;AAAA,QACnC,mBAAmB,KAAK;AAAA,QACxB,SAAS,KAAK;AAAA,QACd,OAAO,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/direct/access-request-client.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/direct/connect-flow.cjs

@@ -0,0 +1,152 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var connect_flow_exports = {};
+__export(connect_flow_exports, {
+  createDirectConnectFlow: () => createDirectConnectFlow
+});
+module.exports = __toCommonJS(connect_flow_exports);
+const DEFAULT_POLL_INTERVAL_MS = 1500;
+const DEFAULT_TIMEOUT_MS = 3e5;
+function toError(value) {
+  return value instanceof Error ? value : new Error(String(value));
+}
+function createDirectConnectFlow(transports, options = {}) {
+  const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const openWindow = options.openWindow ?? ((url) => {
+    if (typeof window !== "undefined" && window.open) {
+      window.open(url, "_blank", "noopener,noreferrer");
+    }
+  });
+  const setTimeoutFn = options.setTimeoutFn ?? ((cb, ms) => globalThis.setTimeout(cb, ms));
+  const clearTimeoutFn = options.clearTimeoutFn ?? ((handle) => {
+    globalThis.clearTimeout(handle);
+  });
+  const now = options.now ?? (() => Date.now());
+  let state = { type: "idle" };
+  const listeners = /* @__PURE__ */ new Set();
+  let pollHandle = null;
+  let running = false;
+  function emit() {
+    for (const listener of listeners) listener();
+  }
+  function setState(next) {
+    state = next;
+    emit();
+  }
+  function clearPoll() {
+    if (pollHandle !== null) {
+      clearTimeoutFn(pollHandle);
+      pollHandle = null;
+    }
+  }
+  function isRunningPhase() {
+    return state.type === "creating" || state.type === "awaiting_approval" || state.type === "reading";
+  }
+  async function readAndFinish(request) {
+    setState({ type: "reading", request });
+    try {
+      const result = await transports.readResult(request.requestId);
+      if (!running) return;
+      setState({ type: "done", result });
+    } catch (err) {
+      if (!running) return;
+      setState({ type: "error", error: toError(err) });
+    } finally {
+      running = false;
+    }
+  }
+  function scheduleNextPoll(request, deadline) {
+    pollHandle = setTimeoutFn(() => {
+      void poll(request, deadline);
+    }, pollIntervalMs);
+  }
+  async function poll(request, deadline) {
+    if (!running) return;
+    if (now() >= deadline) {
+      running = false;
+      setState({
+        type: "error",
+        error: new Error("Timed out waiting for approval")
+      });
+      return;
+    }
+    let status;
+    try {
+      status = await transports.getStatus(request.requestId);
+    } catch (err) {
+      if (!running) return;
+      running = false;
+      setState({ type: "error", error: toError(err) });
+      return;
+    }
+    if (!running) return;
+    if (status.status === "approved") {
+      clearPoll();
+      await readAndFinish(request);
+      return;
+    }
+    if (status.status === "denied" || status.status === "expired") {
+      running = false;
+      setState({
+        type: "error",
+        error: new Error(`Access request ${status.status}`)
+      });
+      return;
+    }
+    scheduleNextPoll(request, deadline);
+  }
+  return {
+    getState() {
+      return state;
+    },
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => listeners.delete(listener);
+    },
+    async start() {
+      if (running || isRunningPhase()) return;
+      running = true;
+      setState({ type: "creating" });
+      let request;
+      try {
+        request = await transports.createRequest();
+      } catch (err) {
+        running = false;
+        setState({ type: "error", error: toError(err) });
+        return;
+      }
+      if (!running) return;
+      setState({ type: "awaiting_approval", request });
+      openWindow(request.approvalUrl);
+      const deadline = now() + timeoutMs;
+      scheduleNextPoll(request, deadline);
+    },
+    reset() {
+      running = false;
+      clearPoll();
+      setState({ type: "idle" });
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createDirectConnectFlow
+});
+//# sourceMappingURL=connect-flow.cjs.map