@opendatalabs/vana-sdk 3.5.0 → 3.5.1-pr.159.2d90789

package/dist/protocol/gateway.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/protocol/gateway.ts"],"sourcesContent":["export interface GatewayEnvelope<T> {\n  data: T;\n  proof: GatewayProof;\n  /**\n   * Cursor-based pagination metadata, present on list endpoints (e.g.\n   * `GET /v1/files`). A sibling of `data`, not nested inside it — so callers\n   * that need it must read the full envelope rather than going through\n   * `unwrapEnvelope`, which intentionally returns only `data`.\n   */\n  pagination?: GatewayPagination;\n}\n\nexport interface GatewayPagination {\n  limit: number;\n  hasMore: boolean;\n  /**\n   * Opaque cursor for the NEXT page; pass back as the `cursor` query param.\n   * Null when there are no further pages.\n   */\n  nextCursor: string | null;\n}\n\nexport interface GatewayProof {\n  signature: string;\n  timestamp: string;\n  gatewayAddress: string;\n  requestHash: string;\n  responseHash: string;\n  userSignature: string;\n  status: string;\n  chainBlockHeight: number;\n}\n\nexport interface Builder {\n  id: string;\n  ownerAddress: string;\n  granteeAddress: string;\n  publicKey: string;\n  appUrl: string;\n  addedAt: string;\n}\n\nexport interface Schema {\n  id: string;\n  ownerAddress: string;\n  name: string;\n  definitionUrl: string;\n  scope: string;\n  addedAt: string;\n}\n\nexport interface ServerInfo {\n  id: string;\n  ownerAddress: string;\n  serverAddress: string;\n  publicKey: string;\n  serverUrl: string;\n  addedAt: string;\n}\n\nexport interface GatewayGrantResponse {\n  id: string;\n  grantorAddress: string;\n  granteeId: string;\n  grant: string;\n  fileIds: string[];\n  status: \"pending\" | \"confirmed\";\n  addedAt: string;\n  revokedAt: string | null;\n  revocationSignature: string | null;\n}\n\nexport interface GrantListItem {\n  id: string;\n  grantorAddress: string;\n  granteeId: string;\n  grant: string;\n  fileIds: string[];\n  status: \"pending\" | \"confirmed\";\n  addedAt: string;\n  revokedAt: string | null;\n  revocationSignature: string | null;\n}\n\nexport interface FileRecord {\n  fileId: string;\n  owner: string;\n  url: string;\n  schemaId: string;\n  createdAt: string;\n  /**\n   * Soft-deletion timestamp (ISO 8601), or null if the file is active. Always present\n   * (`normalizeFileRecord` populates it); non-null only when the gateway returns deletion state\n   * (e.g. listed with `includeDeleted`). Drives the PS sync delete-reconciliation.\n   */\n  deletedAt: string | null;\n}\n\nexport interface FileListResult {\n  files: FileRecord[];\n  cursor: string | null;\n}\n\nexport interface ListFilesOptions {\n  /**\n   * Include soft-deleted files in the result (each carries a non-null `deletedAt`). Default false.\n   * Used by the PS sync download worker to reconcile deletions of files it already holds locally.\n   */\n  includeDeleted?: boolean;\n}\n\ninterface GatewayFileRecord {\n  id?: string;\n  fileId?: string;\n  ownerAddress?: string;\n  owner?: string;\n  url: string;\n  schemaId: string;\n  addedAt?: string;\n  createdAt?: string;\n  deletedAt?: string | null;\n}\n\nexport interface RegisterFileParams {\n  ownerAddress: string;\n  url: string;\n  schemaId: string;\n  signature: string;\n}\n\nexport interface CreateGrantParams {\n  grantorAddress: string;\n  granteeId: string;\n  grant: string;\n  fileIds: string[];\n  signature: string;\n}\n\nexport interface RevokeGrantParams {\n  grantId: string;\n  grantorAddress: string;\n  signature: string;\n}\n\nexport interface DeleteFileParams {\n  fileId: string;\n  ownerAddress: string;\n  /** EIP-712 FileDeletion signature, signed by the owner or the owner's registered server. */\n  signature: string;\n}\n\nexport interface RegisterServerParams {\n  ownerAddress: string;\n  serverAddress: string;\n  publicKey: string;\n  serverUrl: string;\n  signature: string;\n}\n\nexport interface RegisterServerResult {\n  serverId?: string;\n  alreadyRegistered: boolean;\n}\n\nexport interface GatewayClient {\n  isRegisteredBuilder(address: string): Promise<boolean>;\n  getBuilder(address: string): Promise<Builder | null>;\n  getGrant(grantId: string): Promise<GatewayGrantResponse | null>;\n  listGrantsByUser(userAddress: string): Promise<GrantListItem[]>;\n  getSchemaForScope(scope: string): Promise<Schema | null>;\n  getServer(address: string): Promise<ServerInfo | null>;\n  getFile(fileId: string): Promise<FileRecord | null>;\n  listFilesSince(\n    owner: string,\n    cursor: string | null,\n    options?: ListFilesOptions,\n  ): Promise<FileListResult>;\n  getSchema(schemaId: string): Promise<Schema | null>;\n  registerServer(params: RegisterServerParams): Promise<RegisterServerResult>;\n  registerFile(params: RegisterFileParams): Promise<{ fileId?: string }>;\n  createGrant(params: CreateGrantParams): Promise<{ grantId?: string }>;\n  revokeGrant(params: RevokeGrantParams): Promise<void>;\n  /**\n   * Soft-deletes (de-registers) a file at the gateway. Resolves on 200 and on 409\n   * (already deleted) — 409 is treated as idempotent success. Other non-2xx, including\n   * 404 (file not registered), throw; the PS delete cascade decides whether a 404 is\n   * benign (blob already gone) or a hard failure.\n   */\n  deleteFile(params: DeleteFileParams): Promise<void>;\n}\n\nexport function createGatewayClient(baseUrl: string): GatewayClient {\n  const base = baseUrl.replace(/\\/+$/, \"\");\n\n  async function unwrapEnvelope<T>(res: Response): Promise<T> {\n    const envelope = (await res.json()) as GatewayEnvelope<T>;\n    return envelope.data;\n  }\n\n  function normalizeFileRecord(record: GatewayFileRecord): FileRecord {\n    return {\n      fileId: record.fileId ?? record.id ?? \"\",\n      owner: record.owner ?? record.ownerAddress ?? \"\",\n      url: record.url,\n      schemaId: record.schemaId,\n      createdAt: record.createdAt ?? record.addedAt ?? \"\",\n      deletedAt: record.deletedAt ?? null,\n    };\n  }\n\n  function getMutationId(\n    body: Record<string, unknown>,\n    key: string,\n  ): string | undefined {\n    const value = body[key] ?? body[\"id\"];\n    return typeof value === \"string\" ? value : undefined;\n  }\n\n  return {\n    async isRegisteredBuilder(address: string): Promise<boolean> {\n      const builder = await this.getBuilder(address);\n      return builder !== null;\n    },\n\n    async getBuilder(address: string): Promise<Builder | null> {\n      const res = await fetch(`${base}/v1/builders/${address}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<Builder>(res);\n    },\n\n    async getGrant(grantId: string): Promise<GatewayGrantResponse | null> {\n      const res = await fetch(`${base}/v1/grants/${grantId}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<GatewayGrantResponse>(res);\n    },\n\n    async listGrantsByUser(userAddress: string): Promise<GrantListItem[]> {\n      const res = await fetch(`${base}/v1/grants?user=${userAddress}`);\n      if (res.status === 404) return [];\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<GrantListItem[]>(res);\n    },\n\n    async getSchemaForScope(scope: string): Promise<Schema | null> {\n      const res = await fetch(`${base}/v1/schemas?scope=${scope}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<Schema>(res);\n    },\n\n    async getServer(address: string): Promise<ServerInfo | null> {\n      const res = await fetch(`${base}/v1/servers/${address}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<ServerInfo>(res);\n    },\n\n    async getFile(fileId: string): Promise<FileRecord | null> {\n      const res = await fetch(`${base}/v1/files/${fileId}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return normalizeFileRecord(await unwrapEnvelope<GatewayFileRecord>(res));\n    },\n\n    async listFilesSince(\n      owner: string,\n      cursor: string | null,\n      options?: ListFilesOptions,\n    ): Promise<FileListResult> {\n      const params = new URLSearchParams({ user: owner });\n      if (cursor !== null) {\n        params.set(\"cursor\", cursor);\n      }\n      if (options?.includeDeleted) {\n        params.set(\"includeDeleted\", \"true\");\n      }\n      const res = await fetch(`${base}/v1/files?${params.toString()}`);\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      // The next-page cursor lives in the envelope's `pagination.nextCursor`\n      // (a sibling of `data`), so read the full envelope rather than going\n      // through `unwrapEnvelope`, which returns only `data`. Fall back to a\n      // legacy `data.cursor` for older gateways that nested it there.\n      const envelope = (await res.json()) as GatewayEnvelope<{\n        files: GatewayFileRecord[];\n        cursor?: string | null;\n      }>;\n      const { pagination } = envelope;\n      const nextCursor =\n        pagination?.hasMore === false\n          ? null\n          : (pagination?.nextCursor ?? envelope.data.cursor ?? null);\n      return {\n        files: envelope.data.files.map(normalizeFileRecord),\n        cursor: nextCursor,\n      };\n    },\n\n    async getSchema(schemaId: string): Promise<Schema | null> {\n      const res = await fetch(`${base}/v1/schemas/${schemaId}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<Schema>(res);\n    },\n\n    async registerServer(\n      params: RegisterServerParams,\n    ): Promise<RegisterServerResult> {\n      const res = await fetch(`${base}/v1/servers`, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify({\n          ownerAddress: params.ownerAddress,\n          serverAddress: params.serverAddress,\n          publicKey: params.publicKey,\n          serverUrl: params.serverUrl,\n        }),\n      });\n      if (res.status === 409) {\n        const body = await res.json().catch(() => ({}));\n        return {\n          serverId: getMutationId(body as Record<string, unknown>, \"serverId\"),\n          alreadyRegistered: true,\n        };\n      }\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      const body = await res.json().catch(() => ({}));\n      return {\n        serverId: getMutationId(body as Record<string, unknown>, \"serverId\"),\n        alreadyRegistered: false,\n      };\n    },\n\n    async registerFile(\n      params: RegisterFileParams,\n    ): Promise<{ fileId?: string }> {\n      const res = await fetch(`${base}/v1/files`, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify({\n          ownerAddress: params.ownerAddress,\n          url: params.url,\n          schemaId: params.schemaId,\n        }),\n      });\n      if (res.status === 409) {\n        const body = await res.json().catch(() => ({}));\n        return {\n          fileId: getMutationId(body as Record<string, unknown>, \"fileId\"),\n        };\n      }\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      const body = await res.json();\n      return {\n        fileId: getMutationId(body as Record<string, unknown>, \"fileId\"),\n      };\n    },\n\n    async createGrant(\n      params: CreateGrantParams,\n    ): Promise<{ grantId?: string }> {\n      const res = await fetch(`${base}/v1/grants`, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify({\n          grantorAddress: params.grantorAddress,\n          granteeId: params.granteeId,\n          grant: params.grant,\n          fileIds: params.fileIds,\n        }),\n      });\n      if (res.status === 409) {\n        const body = await res.json().catch(() => ({}));\n        return {\n          grantId: getMutationId(body as Record<string, unknown>, \"grantId\"),\n        };\n      }\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      const body = await res.json();\n      return {\n        grantId: getMutationId(body as Record<string, unknown>, \"grantId\"),\n      };\n    },\n\n    async revokeGrant(params: RevokeGrantParams): Promise<void> {\n      const res = await fetch(`${base}/v1/grants/${params.grantId}`, {\n        method: \"DELETE\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify({\n          grantorAddress: params.grantorAddress,\n        }),\n      });\n      if (res.status === 409) return;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n    },\n\n    async deleteFile(params: DeleteFileParams): Promise<void> {\n      const res = await fetch(`${base}/v1/files/${params.fileId}`, {\n        method: \"DELETE\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify({\n          ownerAddress: params.ownerAddress,\n        }),\n      });\n      // 409 = already deleted; treat as success (idempotent), same as revokeGrant.\n      if (res.status === 409) return;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n    },\n  };\n}\n"],"mappings":"AA+LO,SAAS,oBAAoB,SAAgC;AAClE,QAAM,OAAO,QAAQ,QAAQ,QAAQ,EAAE;AAEvC,iBAAe,eAAkB,KAA2B;AAC1D,UAAM,WAAY,MAAM,IAAI,KAAK;AACjC,WAAO,SAAS;AAAA,EAClB;AAEA,WAAS,oBAAoB,QAAuC;AAClE,WAAO;AAAA,MACL,QAAQ,OAAO,UAAU,OAAO,MAAM;AAAA,MACtC,OAAO,OAAO,SAAS,OAAO,gBAAgB;AAAA,MAC9C,KAAK,OAAO;AAAA,MACZ,UAAU,OAAO;AAAA,MACjB,WAAW,OAAO,aAAa,OAAO,WAAW;AAAA,MACjD,WAAW,OAAO,aAAa;AAAA,IACjC;AAAA,EACF;AAEA,WAAS,cACP,MACA,KACoB;AACpB,UAAM,QAAQ,KAAK,GAAG,KAAK,KAAK,IAAI;AACpC,WAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,EAC7C;AAEA,SAAO;AAAA,IACL,MAAM,oBAAoB,SAAmC;AAC3D,YAAM,UAAU,MAAM,KAAK,WAAW,OAAO;AAC7C,aAAO,YAAY;AAAA,IACrB;AAAA,IAEA,MAAM,WAAW,SAA0C;AACzD,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,gBAAgB,OAAO,EAAE;AACxD,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAwB,GAAG;AAAA,IACpC;AAAA,IAEA,MAAM,SAAS,SAAuD;AACpE,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,cAAc,OAAO,EAAE;AACtD,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAqC,GAAG;AAAA,IACjD;AAAA,IAEA,MAAM,iBAAiB,aAA+C;AACpE,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,mBAAmB,WAAW,EAAE;AAC/D,UAAI,IAAI,WAAW,IAAK,QAAO,CAAC;AAChC,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAgC,GAAG;AAAA,IAC5C;AAAA,IAEA,MAAM,kBAAkB,OAAuC;AAC7D,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,qBAAqB,KAAK,EAAE;AAC3D,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAuB,GAAG;AAAA,IACnC;AAAA,IAEA,MAAM,UAAU,SAA6C;AAC3D,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,eAAe,OAAO,EAAE;AACvD,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAA2B,GAAG;AAAA,IACvC;AAAA,IAEA,MAAM,QAAQ,QAA4C;AACxD,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,aAAa,MAAM,EAAE;AACpD,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,oBAAoB,MAAM,eAAkC,GAAG,CAAC;AAAA,IACzE;AAAA,IAEA,MAAM,eACJ,OACA,QACA,SACyB;AACzB,YAAM,SAAS,IAAI,gBAAgB,EAAE,MAAM,MAAM,CAAC;AAClD,UAAI,WAAW,MAAM;AACnB,eAAO,IAAI,UAAU,MAAM;AAAA,MAC7B;AACA,UAAI,SAAS,gBAAgB;AAC3B,eAAO,IAAI,kBAAkB,MAAM;AAAA,MACrC;AACA,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,aAAa,OAAO,SAAS,CAAC,EAAE;AAC/D,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AAKA,YAAM,WAAY,MAAM,IAAI,KAAK;AAIjC,YAAM,EAAE,WAAW,IAAI;AACvB,YAAM,aACJ,YAAY,YAAY,QACpB,OACC,YAAY,cAAc,SAAS,KAAK,UAAU;AACzD,aAAO;AAAA,QACL,OAAO,SAAS,KAAK,MAAM,IAAI,mBAAmB;AAAA,QAClD,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IAEA,MAAM,UAAU,UAA0C;AACxD,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,eAAe,QAAQ,EAAE;AACxD,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAuB,GAAG;AAAA,IACnC;AAAA,IAEA,MAAM,eACJ,QAC+B;AAC/B,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,eAAe;AAAA,QAC5C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,cAAc,OAAO;AAAA,UACrB,eAAe,OAAO;AAAA,UACtB,WAAW,OAAO;AAAA,UAClB,WAAW,OAAO;AAAA,QACpB,CAAC;AAAA,MACH,CAAC;AACD,UAAI,IAAI,WAAW,KAAK;AACtB,cAAMA,QAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,eAAO;AAAA,UACL,UAAU,cAAcA,OAAiC,UAAU;AAAA,UACnE,mBAAmB;AAAA,QACrB;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,YAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,aAAO;AAAA,QACL,UAAU,cAAc,MAAiC,UAAU;AAAA,QACnE,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,IAEA,MAAM,aACJ,QAC8B;AAC9B,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,aAAa;AAAA,QAC1C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,cAAc,OAAO;AAAA,UACrB,KAAK,OAAO;AAAA,UACZ,UAAU,OAAO;AAAA,QACnB,CAAC;AAAA,MACH,CAAC;AACD,UAAI,IAAI,WAAW,KAAK;AACtB,cAAMA,QAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,eAAO;AAAA,UACL,QAAQ,cAAcA,OAAiC,QAAQ;AAAA,QACjE;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,aAAO;AAAA,QACL,QAAQ,cAAc,MAAiC,QAAQ;AAAA,MACjE;AAAA,IACF;AAAA,IAEA,MAAM,YACJ,QAC+B;AAC/B,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,cAAc;AAAA,QAC3C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,gBAAgB,OAAO;AAAA,UACvB,WAAW,OAAO;AAAA,UAClB,OAAO,OAAO;AAAA,UACd,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH,CAAC;AACD,UAAI,IAAI,WAAW,KAAK;AACtB,cAAMA,QAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,eAAO;AAAA,UACL,SAAS,cAAcA,OAAiC,SAAS;AAAA,QACnE;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,aAAO;AAAA,QACL,SAAS,cAAc,MAAiC,SAAS;AAAA,MACnE;AAAA,IACF;AAAA,IAEA,MAAM,YAAY,QAA0C;AAC1D,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,cAAc,OAAO,OAAO,IAAI;AAAA,QAC7D,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,gBAAgB,OAAO;AAAA,QACzB,CAAC;AAAA,MACH,CAAC;AACD,UAAI,IAAI,WAAW,IAAK;AACxB,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AAAA,IACF;AAAA,IAEA,MAAM,WAAW,QAAyC;AACxD,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,aAAa,OAAO,MAAM,IAAI;AAAA,QAC3D,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,cAAc,OAAO;AAAA,QACvB,CAAC;AAAA,MACH,CAAC;AAED,UAAI,IAAI,WAAW,IAAK;AACxB,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;","names":["body"]}
+{"version":3,"sources":["../../src/protocol/gateway.ts"],"sourcesContent":["export interface GatewayEnvelope<T> {\n  data: T;\n  proof: GatewayProof;\n  /**\n   * Cursor-based pagination metadata, present on list endpoints (e.g.\n   * `GET /v1/data`). A sibling of `data`, not nested inside it — so callers\n   * that need it must read the full envelope rather than going through\n   * `unwrapEnvelope`, which intentionally returns only `data`.\n   */\n  pagination?: GatewayPagination;\n}\n\nexport interface GatewayPagination {\n  limit: number;\n  hasMore: boolean;\n  /**\n   * Opaque cursor for the NEXT page; pass back as the `cursor` query param.\n   * Null when there are no further pages.\n   */\n  nextCursor: string | null;\n}\n\nexport interface GatewayProof {\n  signature: string;\n  timestamp: string;\n  gatewayAddress: string;\n  requestHash: string;\n  responseHash: string;\n  userSignature: string;\n  status: string;\n  chainBlockHeight: number;\n}\n\nexport interface Builder {\n  id: string;\n  ownerAddress: string;\n  granteeAddress: string;\n  publicKey: string;\n  appUrl: string;\n  addedAt: string;\n}\n\nexport interface Schema {\n  id: string;\n  ownerAddress: string;\n  name: string;\n  definitionUrl: string;\n  scope: string;\n  addedAt: string;\n}\n\nexport interface ServerInfo {\n  id: string;\n  ownerAddress: string;\n  serverAddress: string;\n  publicKey: string;\n  serverUrl: string;\n  addedAt: string;\n  // ISO timestamp when the grantor deregistered this server, null while\n  // active. The gateway returns this on /v1/servers/:address GETs since\n  // covering revocation in the response keeps the attestation hash\n  // authoritative for both states.\n  revokedAt: string | null;\n}\n\n// Fee annotation surfaced on every GET grant response. Amounts are decimal\n// uint256 strings to match `/v1/escrow/pay`'s wire format. totalDue is a\n// snapshot — the gateway re-resolves fees at pay time, so clients shouldn't\n// cache this across requests.\nexport interface GatewayGrantFee {\n  asset: string;\n  registrationFee: string;\n  dataAccessFee: string;\n  totalDue: string;\n}\n\n// Lifecycle of a grant's on-chain settlement, tracked separately from the\n// fee-payment lifecycle (paymentStatus). Driven by POST /v1/settle:\n//   pending    — nothing on-chain yet\n//   submitting — settle tx broadcast but receipt not yet observed\n//   confirmed  — settle tx mined successfully\n//   finalized  — finalized tip past the settle block, reorg-safe\n//   reorged    — finalized observation reverted; back to 'pending' on next settle\nexport type GatewayGrantStatus =\n  | \"pending\"\n  | \"submitting\"\n  | \"confirmed\"\n  | \"finalized\"\n  | \"reorged\";\n\nexport interface GatewayGrantResponse {\n  id: string;\n  grantorAddress: string;\n  granteeId: string;\n  scopes: string[];\n  status: GatewayGrantStatus;\n  addedAt: string;\n  // Grantor-signed deadline. null = perpetual grant (signed value was 0).\n  expiresAt: string | null;\n  // Derived at read time from expiresAt vs the gateway's clock — a snapshot,\n  // not a cached truth. Re-check against expiresAt locally if you care.\n  expired: boolean;\n  revokedAt: string | null;\n  revocationSignature: string | null;\n  // 'pending' until the grant registration fee is settled via /v1/escrow/pay.\n  paymentStatus: \"pending\" | \"paid\";\n  paidAt: string | null;\n  paidBy: string | null;\n  // Decimal-string uint256 monotonic nonce; advances on every state change.\n  grantVersion: string;\n  // Settle metadata — populated as the grant progresses through the chain\n  // lifecycle. Null while `status === 'pending'`.\n  settleTxHash: string | null;\n  settleSubmittedAt: string | null;\n  // Revocation metadata — populated independently when the grantor signs\n  // and the gateway pushes a deregister tx.\n  revocationTxHash: string | null;\n  revocationSubmittedAt: string | null;\n  fee: GatewayGrantFee;\n}\n\nexport type GrantListItem = GatewayGrantResponse;\n\n// Mirror of a DataRegistryV2 row as the gateway exposes it. `id` is the\n// deterministic `keccak256(abi.encode(owner, scope))` dataPointId — the same\n// value the contract uses as its primary key. `expectedVersion` is the latest\n// version the gateway has accepted; the on-chain row may be one version behind\n// while a settle is still pending. The gateway response intentionally drops\n// `status` from the body — read it from the on-chain contract when you need\n// the canonical lifecycle state.\nexport interface DataPointRecord {\n  id: string;\n  ownerAddress: string;\n  scope: string;\n  dataHash: string;\n  metadataHash: string;\n  // Decimal-string uint256.\n  expectedVersion: string;\n  // ISO 8601 timestamp of the most recent gateway-side upsert.\n  addedAt: string;\n}\n\nexport interface DataPointListResult {\n  dataPoints: DataPointRecord[];\n  cursor: string | null;\n}\n\nexport interface ListDataPointsOptions {\n  /**\n   * Only return rows added at or after this ISO 8601 timestamp. Used by sync\n   * loops that want incremental tails — pass the last seen `addedAt`.\n   */\n  since?: string;\n  /** Page size. Capped at 1000 by the gateway. */\n  limit?: number;\n}\n\n// grantVersion and expiresAt are decimal-string uint256s — same wire format\n// the gateway expects. The caller is responsible for converting their bigint\n// to a decimal string and for signing GRANT_REGISTRATION_TYPES with matching\n// bigint values.\nexport interface CreateGrantParams {\n  grantorAddress: string;\n  granteeId: string;\n  scopes: string[];\n  grantVersion: string;\n  expiresAt: string;\n  signature: string;\n}\n\nexport interface RevokeGrantParams {\n  grantId: string;\n  grantorAddress: string;\n  grantVersion: string;\n  signature: string;\n}\n\nexport interface RegisterServerParams {\n  ownerAddress: string;\n  serverAddress: string;\n  publicKey: string;\n  serverUrl: string;\n  signature: string;\n}\n\nexport interface RegisterServerResult {\n  serverId?: string;\n  alreadyRegistered: boolean;\n}\n\nexport interface RegisterBuilderParams {\n  ownerAddress: string;\n  // Wallet the builder authenticates to the Personal Server with. The\n  // builderId is deterministically derived from (owner, grantee, publicKey,\n  // appUrl) so this triple pins the on-chain identity.\n  granteeAddress: string;\n  publicKey: string;\n  appUrl: string;\n  signature: string;\n}\n\nexport interface RegisterBuilderResult {\n  builderId?: string;\n  alreadyRegistered: boolean;\n}\n\n// AddData on DataRegistryV2. dataHash + metadataHash are bytes32 commitments\n// to the off-chain payload + its metadata. expectedVersion is a CAS knob —\n// the gateway/contract rejects on 409 if a higher version is already stored,\n// and the error body surfaces `currentExpectedVersion` so callers can re-sign.\nexport interface RegisterDataPointParams {\n  ownerAddress: string;\n  scope: string;\n  dataHash: string;\n  metadataHash: string;\n  expectedVersion: string;\n  signature: string;\n}\n\nexport interface RegisterDataPointResult {\n  dataPointId?: string;\n  expectedVersion?: string;\n}\n\n// ── Escrow / data-access payment path ───────────────────────────────────────\n// /v1/escrow/pay debits the payer's escrow balance for a payable op. For a\n// grant: opType = 'grant', opId = the bytes32 grantId. amount, paymentNonce,\n// and asset are decimal-uint256 strings on the wire. The signature is the\n// raw EIP-712 hex of GENERIC_PAYMENT_TYPES against escrowPaymentDomain.\n\n// A server-signed delivery receipt attached to a data-access payment. The\n// signature is over RECORD_DATA_ACCESS_TYPES against dataRegistryDomain; the\n// signer must be a personal server the data point's owner has registered as\n// trusted. The gateway re-uses this signature verbatim on-chain in the next\n// /v1/settle pass via DataRegistryV2.recordDataAccess, where `recordId`\n// dedupes via `_usedRecordIds`.\nexport interface AccessRecord {\n  dataPointId: string;\n  // Decimal-string uint256 — the data point version being attested to.\n  version: string;\n  // Must equal the enclosing payment's payerAddress (the gateway enforces).\n  accessor: string;\n  recordId: string;\n  signature: string;\n}\n\nexport interface PayForOperationParams {\n  payerAddress: string;\n  opType: string;\n  opId: string;\n  asset: string;\n  amount: string;\n  // Per-payer monotonic; (payer, nonce, kind) must be unique. The gateway\n  // returns 409 if reused — bump and re-sign.\n  paymentNonce: string;\n  signature: string;\n  // Optional: attach a server-signed access record so the next /v1/settle\n  // pass submits a recordDataAccess tx alongside the payment settlement.\n  // Required for data-access payments (the second-and-onward payments per\n  // grant) that want their on-chain `totalAccesses` counter to advance.\n  accessRecord?: AccessRecord;\n}\n\nexport interface PayForOperationResult {\n  opType: string;\n  opId: string;\n  payerAddress: string;\n  asset: string;\n  amount: string;\n  // Echoes how the gateway split this payment. `registrationPaid` is true on\n  // the first payment for a grant (which bundles both fees) and false on\n  // subsequent data-access-only payments. Off-chain ledger state only — the\n  // on-chain settlement of the registration is tracked by the grant's\n  // `status` field, not this flag.\n  breakdown: {\n    registrationFee: string;\n    dataAccessFee: string;\n    registrationPaid: boolean;\n  };\n  paymentNonce: string;\n  paidAt: string;\n}\n\n// ── Settle / reconcile ──────────────────────────────────────────────────────\n// POST /v1/settle drains pending-on-chain rows (grants, servers, builders,\n// data points, data-point statuses, access records) to the relayer, then\n// promotes 'submitting' → 'confirmed' and 'confirmed' → 'finalized' for\n// previously-submitted rows. One call does all three; the response surfaces\n// each phase's outcomes.\n\n// The op-types the settle endpoint emits in `items[]`. Kept as a union so\n// callers can narrow inside the discriminated SettleItem shape. Mirrors the\n// gateway's drain phases (drainGrants/drainServers/drainBuilders/\n// drainDataPoints/drainDataPointStatuses/drainAccessRecords) — keep in sync\n// when the gateway adds a drain.\nexport type SettleOpType =\n  | \"grant\"\n  | \"server\"\n  | \"data\"\n  | \"access\"\n  | \"builder\"\n  | \"data-status\";\n\nexport type SettleItem =\n  | {\n      opType: SettleOpType;\n      opId: string;\n      // 'confirmed' when the submit function waited for the receipt and it\n      // mined (registerAndSettle path); 'submitting' when only the tx was\n      // sent (no receipt wait).\n      status: \"submitting\" | \"confirmed\";\n      settleTxHash: string | null;\n      settleSubmittedAt: string | null;\n      // Block height the tx mined in; only set when status === 'confirmed'.\n      chainBlockHeight: string | null;\n      revocationTxHash: string | null;\n      revocationSubmittedAt: string | null;\n      // True while lib/settle.ts is in placeholder mode for this row's pass.\n      placeholder: boolean;\n    }\n  | {\n      opType: SettleOpType;\n      opId: string;\n      status: \"skipped\";\n      reason: string;\n    }\n  | {\n      opType: SettleOpType;\n      opId: string;\n      status: \"failed\";\n      error: string;\n    };\n\n// Outcome of the housekeeping pass that retries earlier `submitting` rows\n// whose receipt arrived after the prior /v1/settle's wait budget elapsed.\nexport interface SettlePromoteResult {\n  opType: SettleOpType;\n  opId: string;\n  status: \"confirmed\" | \"failed\" | \"pending\" | \"skipped\";\n  txHash: string;\n  chainBlockHeight: string | null;\n  reason?: string;\n}\n\n// Outcome of the reconcile pass that advances 'confirmed' → 'finalized' once\n// the chain's finalized tip catches up past the tx's block (or reverts to\n// 'pending' on reorg detection).\nexport interface SettleReconcileItem {\n  opId: string;\n  status: \"finalized\" | \"reorged\" | \"unchanged\";\n  chainBlockHeight: string | null;\n  settleTxHash: string | null;\n  reason?: string;\n}\n\nexport interface SettleParams {\n  // Per-phase cap. Bounded by MAX_LIMIT on the gateway side; omit to use\n  // the gateway's default BATCH_LIMIT.\n  limit?: number;\n}\n\nexport interface SettleResult {\n  scanned: number;\n  submitted: number;\n  confirmed: number;\n  skipped: number;\n  failed: number;\n  items: SettleItem[];\n  promoted: { count: number; items: SettlePromoteResult[] };\n  reconciled: {\n    scanned: number;\n    finalized: number;\n    reorged: number;\n    unchanged: number;\n    items: SettleReconcileItem[];\n  };\n  // Present only when the gateway is configured for paced submission —\n  // spreads work across several blocks within one /v1/settle invocation.\n  paced?: { iterations: number };\n}\n\n// /v1/escrow/balance?account=... — pure read. Returns finalized balances by\n// asset, plus the lifecycle breakdown of deposits.\nexport interface EscrowBalanceEntry {\n  asset: string;\n  // Gross credited deposits for (account, asset). Decremented only when the\n  // reconcile pass marks a payment finalized — NOT on /v1/escrow/pay.\n  balance: string;\n  // Sum of claimedAmount for deposits still in 'submitted' status — surfaced\n  // separately so clients don't conflate \"credited\" with \"deposit announced\n  // but not yet confirmed.\"\n  pendingAmount: string;\n  // Sum of payments.amount for (account, asset) regardless of settled status —\n  // mirrors the /v1/escrow/pay handler's soft-lock counter. Subtract from\n  // `balance` to see how much the payer can still authorise.\n  authorizedAmount: string;\n  // `max(balance − authorizedAmount, 0)`. The headroom a payer has against\n  // the soft-lock before /v1/escrow/pay starts returning 402.\n  availableAmount: string;\n  updatedAt: string | null;\n}\n\nexport interface EscrowDepositSubmitted {\n  txHash: string;\n  submittedAt: string;\n  claimedAsset: string;\n  claimedAmount: string;\n}\n\nexport interface EscrowDepositFinalized {\n  txHash: string;\n  finalizedAt: string | null;\n  blockNumber: string | null;\n  claimedAsset: string;\n  claimedAmount: string;\n}\n\nexport interface EscrowDepositFailed {\n  txHash: string;\n  submittedAt: string;\n  claimedAsset: string;\n  claimedAmount: string;\n  lastError: string | null;\n}\n\nexport interface EscrowBalance {\n  account: string;\n  balances: EscrowBalanceEntry[];\n  deposits: {\n    submitted: EscrowDepositSubmitted[];\n    finalized: EscrowDepositFinalized[];\n    failed: EscrowDepositFailed[];\n  };\n}\n\n// /v1/escrow/deposit announces an on-chain deposit tx so the gateway can\n// reconcile it into the payer's balance. The gateway extracts the credited\n// account from calldata — no off-chain claim about who paid.\nexport interface SubmitDepositParams {\n  txHash: string;\n}\n\nexport interface DepositState {\n  txHash: string;\n  account: string;\n  // 'submitted' | 'finalized' | 'failed' — kept open since the gateway adds\n  // states (e.g. 'orphaned') as the deposit flow evolves.\n  status: string;\n  blockNumber: string | null;\n  submittedAt: string;\n  finalizedAt: string | null;\n  lastError: string | null;\n}\n\nexport interface GatewayClient {\n  isRegisteredBuilder(address: string): Promise<boolean>;\n  getBuilder(address: string): Promise<Builder | null>;\n  getGrant(grantId: string): Promise<GatewayGrantResponse | null>;\n  listGrantsByUser(userAddress: string): Promise<GrantListItem[]>;\n  getSchemaForScope(scope: string): Promise<Schema | null>;\n  getServer(address: string): Promise<ServerInfo | null>;\n  /**\n   * Fetch a single data point by its deterministic id (keccak256 of (owner, scope)).\n   * Returns null on 404. The gateway omits `status` from the response body — read it\n   * from the on-chain DataRegistryV2 contract when you need the canonical lifecycle state.\n   */\n  getDataPoint(dataPointId: string): Promise<DataPointRecord | null>;\n  /**\n   * Page through an owner's data points. Cursor is opaque; pass `null` for the first\n   * page and feed back `result.cursor` until it returns null.\n   */\n  listDataPointsByOwner(\n    owner: string,\n    cursor: string | null,\n    options?: ListDataPointsOptions,\n  ): Promise<DataPointListResult>;\n  getSchema(schemaId: string): Promise<Schema | null>;\n  registerServer(params: RegisterServerParams): Promise<RegisterServerResult>;\n  registerBuilder(\n    params: RegisterBuilderParams,\n  ): Promise<RegisterBuilderResult>;\n  registerDataPoint(\n    params: RegisterDataPointParams,\n  ): Promise<RegisterDataPointResult>;\n  createGrant(params: CreateGrantParams): Promise<{ grantId?: string }>;\n  revokeGrant(params: RevokeGrantParams): Promise<void>;\n  getEscrowBalance(account: string): Promise<EscrowBalance>;\n  submitEscrowDeposit(params: SubmitDepositParams): Promise<DepositState>;\n  payForOperation(\n    params: PayForOperationParams,\n  ): Promise<PayForOperationResult>;\n  settle(params?: SettleParams): Promise<SettleResult>;\n}\n\nexport function createGatewayClient(baseUrl: string): GatewayClient {\n  const base = baseUrl.replace(/\\/+$/, \"\");\n\n  async function unwrapEnvelope<T>(res: Response): Promise<T> {\n    const envelope = (await res.json()) as GatewayEnvelope<T>;\n    return envelope.data;\n  }\n\n  function getMutationId(\n    body: Record<string, unknown>,\n    key: string,\n  ): string | undefined {\n    const value = body[key] ?? body[\"id\"];\n    return typeof value === \"string\" ? value : undefined;\n  }\n\n  return {\n    async isRegisteredBuilder(address: string): Promise<boolean> {\n      const builder = await this.getBuilder(address);\n      return builder !== null;\n    },\n\n    async getBuilder(address: string): Promise<Builder | null> {\n      const res = await fetch(`${base}/v1/builders/${address}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<Builder>(res);\n    },\n\n    async getGrant(grantId: string): Promise<GatewayGrantResponse | null> {\n      const res = await fetch(`${base}/v1/grants/${grantId}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<GatewayGrantResponse>(res);\n    },\n\n    async listGrantsByUser(userAddress: string): Promise<GrantListItem[]> {\n      const res = await fetch(`${base}/v1/grants?user=${userAddress}`);\n      if (res.status === 404) return [];\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<GrantListItem[]>(res);\n    },\n\n    async getSchemaForScope(scope: string): Promise<Schema | null> {\n      const res = await fetch(`${base}/v1/schemas?scope=${scope}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<Schema>(res);\n    },\n\n    async getServer(address: string): Promise<ServerInfo | null> {\n      const res = await fetch(`${base}/v1/servers/${address}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<ServerInfo>(res);\n    },\n\n    async getDataPoint(dataPointId: string): Promise<DataPointRecord | null> {\n      const res = await fetch(`${base}/v1/data/${dataPointId}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<DataPointRecord>(res);\n    },\n\n    async listDataPointsByOwner(\n      owner: string,\n      cursor: string | null,\n      options?: ListDataPointsOptions,\n    ): Promise<DataPointListResult> {\n      const params = new URLSearchParams({ user: owner });\n      if (cursor !== null) {\n        params.set(\"cursor\", cursor);\n      }\n      if (options?.since) {\n        params.set(\"since\", options.since);\n      }\n      if (options?.limit !== undefined) {\n        params.set(\"limit\", String(options.limit));\n      }\n      const res = await fetch(`${base}/v1/data?${params.toString()}`);\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      // Next-page cursor lives in the envelope's `pagination.nextCursor`\n      // (a sibling of `data`), so read the full envelope rather than going\n      // through `unwrapEnvelope`, which returns only `data`.\n      const envelope = (await res.json()) as GatewayEnvelope<{\n        dataPoints: DataPointRecord[];\n      }>;\n      const nextCursor =\n        envelope.pagination?.hasMore === false\n          ? null\n          : (envelope.pagination?.nextCursor ?? null);\n      return {\n        dataPoints: envelope.data.dataPoints,\n        cursor: nextCursor,\n      };\n    },\n\n    async getSchema(schemaId: string): Promise<Schema | null> {\n      const res = await fetch(`${base}/v1/schemas/${schemaId}`);\n      if (res.status === 404) return null;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return unwrapEnvelope<Schema>(res);\n    },\n\n    async registerServer(\n      params: RegisterServerParams,\n    ): Promise<RegisterServerResult> {\n      const res = await fetch(`${base}/v1/servers`, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify({\n          ownerAddress: params.ownerAddress,\n          serverAddress: params.serverAddress,\n          publicKey: params.publicKey,\n          serverUrl: params.serverUrl,\n        }),\n      });\n      if (res.status === 409) {\n        const body = await res.json().catch(() => ({}));\n        return {\n          serverId: getMutationId(body as Record<string, unknown>, \"serverId\"),\n          alreadyRegistered: true,\n        };\n      }\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      const body = await res.json().catch(() => ({}));\n      return {\n        serverId: getMutationId(body as Record<string, unknown>, \"serverId\"),\n        alreadyRegistered: false,\n      };\n    },\n\n    async registerBuilder(\n      params: RegisterBuilderParams,\n    ): Promise<RegisterBuilderResult> {\n      const res = await fetch(`${base}/v1/builders`, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify({\n          ownerAddress: params.ownerAddress,\n          granteeAddress: params.granteeAddress,\n          publicKey: params.publicKey,\n          appUrl: params.appUrl,\n        }),\n      });\n      // 409 is idempotent — the gateway's current 409 body doesn't include\n      // the builderId, but we tolerate it in case that changes (mirrors the\n      // registerServer / createGrant shape).\n      if (res.status === 409) {\n        const body = await res.json().catch(() => ({}));\n        return {\n          builderId: getMutationId(\n            body as Record<string, unknown>,\n            \"builderId\",\n          ),\n          alreadyRegistered: true,\n        };\n      }\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      const body = await res.json().catch(() => ({}));\n      return {\n        builderId: getMutationId(body as Record<string, unknown>, \"builderId\"),\n        alreadyRegistered: false,\n      };\n    },\n\n    async registerDataPoint(\n      params: RegisterDataPointParams,\n    ): Promise<RegisterDataPointResult> {\n      const res = await fetch(`${base}/v1/data`, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify({\n          ownerAddress: params.ownerAddress,\n          scope: params.scope,\n          dataHash: params.dataHash,\n          metadataHash: params.metadataHash,\n          expectedVersion: params.expectedVersion,\n        }),\n      });\n      // 409 is a real failure here (stale CAS), not an idempotent replay —\n      // surface the gateway's error message verbatim so the caller knows\n      // what `currentExpectedVersion` to re-sign against.\n      if (!res.ok) {\n        const body = (await res.json().catch(() => ({}))) as {\n          error?: string;\n        };\n        const detail = body.error ?? res.statusText;\n        throw new Error(`Gateway error: ${res.status} ${detail}`);\n      }\n      const body = (await res.json().catch(() => ({}))) as {\n        dataPointId?: string;\n        expectedVersion?: string;\n      };\n      return {\n        dataPointId: getMutationId(\n          body as Record<string, unknown>,\n          \"dataPointId\",\n        ),\n        expectedVersion: body.expectedVersion,\n      };\n    },\n\n    async createGrant(\n      params: CreateGrantParams,\n    ): Promise<{ grantId?: string }> {\n      const res = await fetch(`${base}/v1/grants`, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify({\n          grantorAddress: params.grantorAddress,\n          granteeId: params.granteeId,\n          scopes: params.scopes,\n          grantVersion: params.grantVersion,\n          expiresAt: params.expiresAt,\n        }),\n      });\n      if (res.status === 409) {\n        const body = await res.json().catch(() => ({}));\n        return {\n          grantId: getMutationId(body as Record<string, unknown>, \"grantId\"),\n        };\n      }\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      const body = await res.json();\n      return {\n        grantId: getMutationId(body as Record<string, unknown>, \"grantId\"),\n      };\n    },\n\n    async revokeGrant(params: RevokeGrantParams): Promise<void> {\n      const res = await fetch(`${base}/v1/grants/${params.grantId}`, {\n        method: \"DELETE\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify({\n          grantorAddress: params.grantorAddress,\n          grantVersion: params.grantVersion,\n        }),\n      });\n      if (res.status === 409) return;\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n    },\n\n    async getEscrowBalance(account: string): Promise<EscrowBalance> {\n      const res = await fetch(`${base}/v1/escrow/balance?account=${account}`);\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      // Unlike the rest of /v1, the balance endpoint returns the body\n      // directly (no GatewayEnvelope wrap) — it's a pure read with no\n      // gateway-signed attestation. See data-gateway api/v1/escrow/balance.ts.\n      return (await res.json()) as EscrowBalance;\n    },\n\n    async submitEscrowDeposit(\n      params: SubmitDepositParams,\n    ): Promise<DepositState> {\n      const res = await fetch(`${base}/v1/escrow/deposit`, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({ txHash: params.txHash }),\n      });\n      // The gateway returns 202 for \"accepted (still confirming)\" and 200 for\n      // duplicate idempotent replays. Both carry the deposit's current state.\n      if (res.status !== 200 && res.status !== 202) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return (await res.json()) as DepositState;\n    },\n\n    async payForOperation(\n      params: PayForOperationParams,\n    ): Promise<PayForOperationResult> {\n      // Build the body without the accessRecord key when absent so the\n      // gateway's \"missing optional\" branch matches the no-receipt case\n      // exactly (an explicit `accessRecord: undefined` would JSON-serialize\n      // to nothing — same result — but keeping it conditional makes wire\n      // traces easier to read).\n      const body: Record<string, unknown> = {\n        payerAddress: params.payerAddress,\n        opType: params.opType,\n        opId: params.opId,\n        asset: params.asset,\n        amount: params.amount,\n        paymentNonce: params.paymentNonce,\n      };\n      if (params.accessRecord) {\n        body[\"accessRecord\"] = params.accessRecord;\n      }\n      const res = await fetch(`${base}/v1/escrow/pay`, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          Authorization: `Web3Signed ${params.signature}`,\n        },\n        body: JSON.stringify(body),\n      });\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return (await res.json()) as PayForOperationResult;\n    },\n\n    async settle(params?: SettleParams): Promise<SettleResult> {\n      const res = await fetch(`${base}/v1/settle`, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        // The gateway accepts an empty body; only `limit` is recognised.\n        // Always send a JSON body so the gateway's req.body shape parse\n        // doesn't have to deal with an undefined.\n        body: JSON.stringify(params ?? {}),\n      });\n      if (!res.ok) {\n        throw new Error(`Gateway error: ${res.status} ${res.statusText}`);\n      }\n      return (await res.json()) as SettleResult;\n    },\n  };\n}\n"],"mappings":"AA8eO,SAAS,oBAAoB,SAAgC;AAClE,QAAM,OAAO,QAAQ,QAAQ,QAAQ,EAAE;AAEvC,iBAAe,eAAkB,KAA2B;AAC1D,UAAM,WAAY,MAAM,IAAI,KAAK;AACjC,WAAO,SAAS;AAAA,EAClB;AAEA,WAAS,cACP,MACA,KACoB;AACpB,UAAM,QAAQ,KAAK,GAAG,KAAK,KAAK,IAAI;AACpC,WAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,EAC7C;AAEA,SAAO;AAAA,IACL,MAAM,oBAAoB,SAAmC;AAC3D,YAAM,UAAU,MAAM,KAAK,WAAW,OAAO;AAC7C,aAAO,YAAY;AAAA,IACrB;AAAA,IAEA,MAAM,WAAW,SAA0C;AACzD,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,gBAAgB,OAAO,EAAE;AACxD,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAwB,GAAG;AAAA,IACpC;AAAA,IAEA,MAAM,SAAS,SAAuD;AACpE,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,cAAc,OAAO,EAAE;AACtD,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAqC,GAAG;AAAA,IACjD;AAAA,IAEA,MAAM,iBAAiB,aAA+C;AACpE,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,mBAAmB,WAAW,EAAE;AAC/D,UAAI,IAAI,WAAW,IAAK,QAAO,CAAC;AAChC,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAgC,GAAG;AAAA,IAC5C;AAAA,IAEA,MAAM,kBAAkB,OAAuC;AAC7D,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,qBAAqB,KAAK,EAAE;AAC3D,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAuB,GAAG;AAAA,IACnC;AAAA,IAEA,MAAM,UAAU,SAA6C;AAC3D,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,eAAe,OAAO,EAAE;AACvD,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAA2B,GAAG;AAAA,IACvC;AAAA,IAEA,MAAM,aAAa,aAAsD;AACvE,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,YAAY,WAAW,EAAE;AACxD,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAgC,GAAG;AAAA,IAC5C;AAAA,IAEA,MAAM,sBACJ,OACA,QACA,SAC8B;AAC9B,YAAM,SAAS,IAAI,gBAAgB,EAAE,MAAM,MAAM,CAAC;AAClD,UAAI,WAAW,MAAM;AACnB,eAAO,IAAI,UAAU,MAAM;AAAA,MAC7B;AACA,UAAI,SAAS,OAAO;AAClB,eAAO,IAAI,SAAS,QAAQ,KAAK;AAAA,MACnC;AACA,UAAI,SAAS,UAAU,QAAW;AAChC,eAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAAA,MAC3C;AACA,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,YAAY,OAAO,SAAS,CAAC,EAAE;AAC9D,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AAIA,YAAM,WAAY,MAAM,IAAI,KAAK;AAGjC,YAAM,aACJ,SAAS,YAAY,YAAY,QAC7B,OACC,SAAS,YAAY,cAAc;AAC1C,aAAO;AAAA,QACL,YAAY,SAAS,KAAK;AAAA,QAC1B,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,IAEA,MAAM,UAAU,UAA0C;AACxD,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,eAAe,QAAQ,EAAE;AACxD,UAAI,IAAI,WAAW,IAAK,QAAO;AAC/B,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAO,eAAuB,GAAG;AAAA,IACnC;AAAA,IAEA,MAAM,eACJ,QAC+B;AAC/B,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,eAAe;AAAA,QAC5C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,cAAc,OAAO;AAAA,UACrB,eAAe,OAAO;AAAA,UACtB,WAAW,OAAO;AAAA,UAClB,WAAW,OAAO;AAAA,QACpB,CAAC;AAAA,MACH,CAAC;AACD,UAAI,IAAI,WAAW,KAAK;AACtB,cAAMA,QAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,eAAO;AAAA,UACL,UAAU,cAAcA,OAAiC,UAAU;AAAA,UACnE,mBAAmB;AAAA,QACrB;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,YAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,aAAO;AAAA,QACL,UAAU,cAAc,MAAiC,UAAU;AAAA,QACnE,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,IAEA,MAAM,gBACJ,QACgC;AAChC,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,gBAAgB;AAAA,QAC7C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,cAAc,OAAO;AAAA,UACrB,gBAAgB,OAAO;AAAA,UACvB,WAAW,OAAO;AAAA,UAClB,QAAQ,OAAO;AAAA,QACjB,CAAC;AAAA,MACH,CAAC;AAID,UAAI,IAAI,WAAW,KAAK;AACtB,cAAMA,QAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,eAAO;AAAA,UACL,WAAW;AAAA,YACTA;AAAA,YACA;AAAA,UACF;AAAA,UACA,mBAAmB;AAAA,QACrB;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,YAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,aAAO;AAAA,QACL,WAAW,cAAc,MAAiC,WAAW;AAAA,QACrE,mBAAmB;AAAA,MACrB;AAAA,IACF;AAAA,IAEA,MAAM,kBACJ,QACkC;AAClC,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,YAAY;AAAA,QACzC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,cAAc,OAAO;AAAA,UACrB,OAAO,OAAO;AAAA,UACd,UAAU,OAAO;AAAA,UACjB,cAAc,OAAO;AAAA,UACrB,iBAAiB,OAAO;AAAA,QAC1B,CAAC;AAAA,MACH,CAAC;AAID,UAAI,CAAC,IAAI,IAAI;AACX,cAAMA,QAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAG/C,cAAM,SAASA,MAAK,SAAS,IAAI;AACjC,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,MAAM,EAAE;AAAA,MAC1D;AACA,YAAM,OAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAI/C,aAAO;AAAA,QACL,aAAa;AAAA,UACX;AAAA,UACA;AAAA,QACF;AAAA,QACA,iBAAiB,KAAK;AAAA,MACxB;AAAA,IACF;AAAA,IAEA,MAAM,YACJ,QAC+B;AAC/B,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,cAAc;AAAA,QAC3C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,gBAAgB,OAAO;AAAA,UACvB,WAAW,OAAO;AAAA,UAClB,QAAQ,OAAO;AAAA,UACf,cAAc,OAAO;AAAA,UACrB,WAAW,OAAO;AAAA,QACpB,CAAC;AAAA,MACH,CAAC;AACD,UAAI,IAAI,WAAW,KAAK;AACtB,cAAMA,QAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,eAAO;AAAA,UACL,SAAS,cAAcA,OAAiC,SAAS;AAAA,QACnE;AAAA,MACF;AACA,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,aAAO;AAAA,QACL,SAAS,cAAc,MAAiC,SAAS;AAAA,MACnE;AAAA,IACF;AAAA,IAEA,MAAM,YAAY,QAA0C;AAC1D,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,cAAc,OAAO,OAAO,IAAI;AAAA,QAC7D,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,gBAAgB,OAAO;AAAA,UACvB,cAAc,OAAO;AAAA,QACvB,CAAC;AAAA,MACH,CAAC;AACD,UAAI,IAAI,WAAW,IAAK;AACxB,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB,SAAyC;AAC9D,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,8BAA8B,OAAO,EAAE;AACtE,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AAIA,aAAQ,MAAM,IAAI,KAAK;AAAA,IACzB;AAAA,IAEA,MAAM,oBACJ,QACuB;AACvB,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,sBAAsB;AAAA,QACnD,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,QAAQ,OAAO,OAAO,CAAC;AAAA,MAChD,CAAC;AAGD,UAAI,IAAI,WAAW,OAAO,IAAI,WAAW,KAAK;AAC5C,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAQ,MAAM,IAAI,KAAK;AAAA,IACzB;AAAA,IAEA,MAAM,gBACJ,QACgC;AAMhC,YAAM,OAAgC;AAAA,QACpC,cAAc,OAAO;AAAA,QACrB,QAAQ,OAAO;AAAA,QACf,MAAM,OAAO;AAAA,QACb,OAAO,OAAO;AAAA,QACd,QAAQ,OAAO;AAAA,QACf,cAAc,OAAO;AAAA,MACvB;AACA,UAAI,OAAO,cAAc;AACvB,aAAK,cAAc,IAAI,OAAO;AAAA,MAChC;AACA,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,kBAAkB;AAAA,QAC/C,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,cAAc,OAAO,SAAS;AAAA,QAC/C;AAAA,QACA,MAAM,KAAK,UAAU,IAAI;AAAA,MAC3B,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAQ,MAAM,IAAI,KAAK;AAAA,IACzB;AAAA,IAEA,MAAM,OAAO,QAA8C;AACzD,YAAM,MAAM,MAAM,MAAM,GAAG,IAAI,cAAc;AAAA,QAC3C,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA;AAAA;AAAA;AAAA,QAI9C,MAAM,KAAK,UAAU,UAAU,CAAC,CAAC;AAAA,MACnC,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,kBAAkB,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,MAClE;AACA,aAAQ,MAAM,IAAI,KAAK;AAAA,IACzB;AAAA,EACF;AACF;","names":["body"]}

package/dist/protocol/grants.cjs

@@ -19,7 +19,6 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var grants_exports = {};
 __export(grants_exports, {
   isDataPortabilityGatewayConfig: () => isDataPortabilityGatewayConfig,
-  parseGrantRegistrationPayload: () => parseGrantRegistrationPayload,
   verifyGrantRegistration: () => verifyGrantRegistration
 });
 module.exports = __toCommonJS(grants_exports);
@@ -38,67 +37,34 @@ function isDataPortabilityGatewayConfig(value) {
     return false;
   }
   const c = contracts;
-  return isHexString(c["dataRegistry"]) && isHexString(c["dataPortabilityPermissions"]) && isHexString(c["dataPortabilityServer"]) && isHexString(c["dataPortabilityGrantees"]);
+  return isHexString(c["dataRegistry"]) && isHexString(c["dataPortabilityPermissions"]) && isHexString(c["dataPortabilityServer"]) && isHexString(c["dataPortabilityGrantees"]) && isHexString(c["dataPortabilityEscrow"]) && isHexString(c["feeRegistry"]);
 }
-function parseGrantRegistrationPayload(grant) {
-  let parsed;
+function toUint256(value) {
   try {
-    parsed = JSON.parse(grant);
-  } catch {
-    return null;
-  }
-  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-    return null;
-  }
-  const value = parsed;
-  if (!Array.isArray(value["scopes"]) || value["scopes"].length === 0) {
-    return null;
-  }
-  if (!value["scopes"].every((scope) => typeof scope === "string")) {
-    return null;
-  }
-  if (typeof value["expiresAt"] !== "number" || !Number.isFinite(value["expiresAt"])) {
-    return null;
-  }
-  if (value["user"] !== void 0 && !isHexString(value["user"])) {
-    return null;
-  }
-  if (value["builder"] !== void 0 && !isHexString(value["builder"])) {
-    return null;
-  }
-  if (value["nonce"] !== void 0 && (typeof value["nonce"] !== "number" || !Number.isFinite(value["nonce"]))) {
-    return null;
-  }
-  return {
-    user: value["user"],
-    builder: value["builder"],
-    scopes: value["scopes"],
-    expiresAt: value["expiresAt"],
-    nonce: value["nonce"]
-  };
-}
-function parseFileIds(fileIds) {
-  try {
-    const values = (fileIds ?? []).map((fileId) => BigInt(fileId));
-    return {
-      values,
-      display: values.map((fileId) => fileId.toString())
-    };
+    if (typeof value === "number" && !Number.isSafeInteger(value)) {
+      return null;
+    }
+    const big = typeof value === "bigint" ? value : BigInt(value);
+    if (big < 0n) return null;
+    return big;
   } catch {
     return null;
   }
 }
 async function verifyGrantRegistration(input) {
-  const payload = parseGrantRegistrationPayload(input.grant);
-  if (!payload) {
-    return {
-      valid: false,
-      error: "Grant must be JSON with scopes and expiresAt"
-    };
+  if (!Array.isArray(input.scopes) || input.scopes.length === 0) {
+    return { valid: false, error: "scopes must be a non-empty array" };
   }
-  const fileIds = parseFileIds(input.fileIds);
-  if (!fileIds) {
-    return { valid: false, error: "fileIds must contain integer values" };
+  if (!input.scopes.every((scope) => typeof scope === "string")) {
+    return { valid: false, error: "scopes must contain only strings" };
+  }
+  const grantVersion = toUint256(input.grantVersion);
+  if (grantVersion === null || grantVersion < 1n) {
+    return { valid: false, error: "grantVersion must be a uint256 >= 1" };
+  }
+  const expiresAt = toUint256(input.expiresAt);
+  if (expiresAt === null) {
+    return { valid: false, error: "expiresAt must be a non-negative uint256" };
   }
   let valid;
   try {
@@ -110,8 +76,9 @@ async function verifyGrantRegistration(input) {
       message: {
         grantorAddress: input.grantorAddress,
         granteeId: input.granteeId,
-        grant: input.grant,
-        fileIds: fileIds.values
+        scopes: input.scopes,
+        grantVersion,
+        expiresAt
       },
       signature: input.signature
     });
@@ -122,25 +89,21 @@ async function verifyGrantRegistration(input) {
     return { valid: false, error: "Grant signature does not match grantor" };
   }
   const nowSeconds = input.nowSeconds ?? Math.floor(Date.now() / 1e3);
-  if (payload.expiresAt > 0 && payload.expiresAt < nowSeconds) {
+  if (expiresAt > 0n && expiresAt < BigInt(nowSeconds)) {
     return { valid: false, error: "Grant has expired" };
   }
-  if (payload.user !== void 0 && payload.user.toLowerCase() !== input.grantorAddress.toLowerCase()) {
-    return { valid: false, error: "Grant user does not match grantorAddress" };
-  }
   return {
     valid: true,
     grantorAddress: input.grantorAddress,
     granteeId: input.granteeId,
-    grant: input.grant,
-    payload,
-    fileIds: fileIds.display
+    scopes: input.scopes,
+    grantVersion: grantVersion.toString(),
+    expiresAt: expiresAt.toString()
   };
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   isDataPortabilityGatewayConfig,
-  parseGrantRegistrationPayload,
   verifyGrantRegistration
 });
 //# sourceMappingURL=grants.cjs.map

package/dist/protocol/grants.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/protocol/grants.ts"],"sourcesContent":["import { verifyTypedData } from \"viem\";\nimport {\n  GRANT_REGISTRATION_TYPES,\n  grantRegistrationDomain,\n  type DataPortabilityGatewayConfig,\n} from \"./eip712\";\n\nexport interface DataPortabilityGrantPayload {\n  user?: `0x${string}`;\n  builder?: `0x${string}`;\n  scopes: string[];\n  expiresAt: number;\n  nonce?: number;\n}\n\nexport interface VerifyGrantRegistrationInput {\n  gatewayConfig: DataPortabilityGatewayConfig;\n  grantorAddress: `0x${string}`;\n  granteeId: `0x${string}`;\n  grant: string;\n  fileIds?: Array<string | number | bigint>;\n  signature: `0x${string}`;\n  nowSeconds?: number;\n}\n\nexport type VerifyGrantRegistrationResult =\n  | {\n      valid: true;\n      grantorAddress: `0x${string}`;\n      granteeId: `0x${string}`;\n      grant: string;\n      payload: DataPortabilityGrantPayload;\n      fileIds: string[];\n    }\n  | {\n      valid: false;\n      error: string;\n    };\n\nfunction isHexString(value: unknown): value is `0x${string}` {\n  return typeof value === \"string\" && value.startsWith(\"0x\");\n}\n\nexport function isDataPortabilityGatewayConfig(\n  value: unknown,\n): value is DataPortabilityGatewayConfig {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n    return false;\n  }\n  const config = value as Record<string, unknown>;\n  const contracts = config[\"contracts\"];\n  if (\n    typeof config[\"chainId\"] !== \"number\" ||\n    !Number.isInteger(config[\"chainId\"]) ||\n    config[\"chainId\"] <= 0 ||\n    contracts === null ||\n    typeof contracts !== \"object\" ||\n    Array.isArray(contracts)\n  ) {\n    return false;\n  }\n  const c = contracts as Record<string, unknown>;\n  return (\n    isHexString(c[\"dataRegistry\"]) &&\n    isHexString(c[\"dataPortabilityPermissions\"]) &&\n    isHexString(c[\"dataPortabilityServer\"]) &&\n    isHexString(c[\"dataPortabilityGrantees\"])\n  );\n}\n\nexport function parseGrantRegistrationPayload(\n  grant: string,\n): DataPortabilityGrantPayload | null {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(grant);\n  } catch {\n    return null;\n  }\n  if (parsed === null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    return null;\n  }\n  const value = parsed as Record<string, unknown>;\n  if (!Array.isArray(value[\"scopes\"]) || value[\"scopes\"].length === 0) {\n    return null;\n  }\n  if (!value[\"scopes\"].every((scope) => typeof scope === \"string\")) {\n    return null;\n  }\n  if (\n    typeof value[\"expiresAt\"] !== \"number\" ||\n    !Number.isFinite(value[\"expiresAt\"])\n  ) {\n    return null;\n  }\n  if (value[\"user\"] !== undefined && !isHexString(value[\"user\"])) {\n    return null;\n  }\n  if (value[\"builder\"] !== undefined && !isHexString(value[\"builder\"])) {\n    return null;\n  }\n  if (\n    value[\"nonce\"] !== undefined &&\n    (typeof value[\"nonce\"] !== \"number\" || !Number.isFinite(value[\"nonce\"]))\n  ) {\n    return null;\n  }\n  return {\n    user: value[\"user\"] as `0x${string}` | undefined,\n    builder: value[\"builder\"] as `0x${string}` | undefined,\n    scopes: value[\"scopes\"] as string[],\n    expiresAt: value[\"expiresAt\"],\n    nonce: value[\"nonce\"] as number | undefined,\n  };\n}\n\nfunction parseFileIds(fileIds: Array<string | number | bigint> | undefined): {\n  values: bigint[];\n  display: string[];\n} | null {\n  try {\n    const values = (fileIds ?? []).map((fileId) => BigInt(fileId));\n    return {\n      values,\n      display: values.map((fileId) => fileId.toString()),\n    };\n  } catch {\n    return null;\n  }\n}\n\nexport async function verifyGrantRegistration(\n  input: VerifyGrantRegistrationInput,\n): Promise<VerifyGrantRegistrationResult> {\n  const payload = parseGrantRegistrationPayload(input.grant);\n  if (!payload) {\n    return {\n      valid: false,\n      error: \"Grant must be JSON with scopes and expiresAt\",\n    };\n  }\n\n  const fileIds = parseFileIds(input.fileIds);\n  if (!fileIds) {\n    return { valid: false, error: \"fileIds must contain integer values\" };\n  }\n\n  let valid: boolean;\n  try {\n    valid = await verifyTypedData({\n      address: input.grantorAddress,\n      domain: grantRegistrationDomain(input.gatewayConfig),\n      types: GRANT_REGISTRATION_TYPES,\n      primaryType: \"GrantRegistration\",\n      message: {\n        grantorAddress: input.grantorAddress,\n        granteeId: input.granteeId,\n        grant: input.grant,\n        fileIds: fileIds.values,\n      },\n      signature: input.signature,\n    });\n  } catch {\n    return { valid: false, error: \"EIP-712 signature verification failed\" };\n  }\n\n  if (!valid) {\n    return { valid: false, error: \"Grant signature does not match grantor\" };\n  }\n\n  const nowSeconds = input.nowSeconds ?? Math.floor(Date.now() / 1000);\n  if (payload.expiresAt > 0 && payload.expiresAt < nowSeconds) {\n    return { valid: false, error: \"Grant has expired\" };\n  }\n\n  if (\n    payload.user !== undefined &&\n    payload.user.toLowerCase() !== input.grantorAddress.toLowerCase()\n  ) {\n    return { valid: false, error: \"Grant user does not match grantorAddress\" };\n  }\n\n  return {\n    valid: true,\n    grantorAddress: input.grantorAddress,\n    granteeId: input.granteeId,\n    grant: input.grant,\n    payload,\n    fileIds: fileIds.display,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAAgC;AAChC,oBAIO;AAkCP,SAAS,YAAY,OAAwC;AAC3D,SAAO,OAAO,UAAU,YAAY,MAAM,WAAW,IAAI;AAC3D;AAEO,SAAS,+BACd,OACuC;AACvC,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AACvE,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,QAAM,YAAY,OAAO,WAAW;AACpC,MACE,OAAO,OAAO,SAAS,MAAM,YAC7B,CAAC,OAAO,UAAU,OAAO,SAAS,CAAC,KACnC,OAAO,SAAS,KAAK,KACrB,cAAc,QACd,OAAO,cAAc,YACrB,MAAM,QAAQ,SAAS,GACvB;AACA,WAAO;AAAA,EACT;AACA,QAAM,IAAI;AACV,SACE,YAAY,EAAE,cAAc,CAAC,KAC7B,YAAY,EAAE,4BAA4B,CAAC,KAC3C,YAAY,EAAE,uBAAuB,CAAC,KACtC,YAAY,EAAE,yBAAyB,CAAC;AAE5C;AAEO,SAAS,8BACd,OACoC;AACpC,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAC1E,WAAO;AAAA,EACT;AACA,QAAM,QAAQ;AACd,MAAI,CAAC,MAAM,QAAQ,MAAM,QAAQ,CAAC,KAAK,MAAM,QAAQ,EAAE,WAAW,GAAG;AACnE,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,QAAQ,EAAE,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ,GAAG;AAChE,WAAO;AAAA,EACT;AACA,MACE,OAAO,MAAM,WAAW,MAAM,YAC9B,CAAC,OAAO,SAAS,MAAM,WAAW,CAAC,GACnC;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,MAAM,MAAM,UAAa,CAAC,YAAY,MAAM,MAAM,CAAC,GAAG;AAC9D,WAAO;AAAA,EACT;AACA,MAAI,MAAM,SAAS,MAAM,UAAa,CAAC,YAAY,MAAM,SAAS,CAAC,GAAG;AACpE,WAAO;AAAA,EACT;AACA,MACE,MAAM,OAAO,MAAM,WAClB,OAAO,MAAM,OAAO,MAAM,YAAY,CAAC,OAAO,SAAS,MAAM,OAAO,CAAC,IACtE;AACA,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,MAAM,MAAM,MAAM;AAAA,IAClB,SAAS,MAAM,SAAS;AAAA,IACxB,QAAQ,MAAM,QAAQ;AAAA,IACtB,WAAW,MAAM,WAAW;AAAA,IAC5B,OAAO,MAAM,OAAO;AAAA,EACtB;AACF;AAEA,SAAS,aAAa,SAGb;AACP,MAAI;AACF,UAAM,UAAU,WAAW,CAAC,GAAG,IAAI,CAAC,WAAW,OAAO,MAAM,CAAC;AAC7D,WAAO;AAAA,MACL;AAAA,MACA,SAAS,OAAO,IAAI,CAAC,WAAW,OAAO,SAAS,CAAC;AAAA,IACnD;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,wBACpB,OACwC;AACxC,QAAM,UAAU,8BAA8B,MAAM,KAAK;AACzD,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,UAAU,aAAa,MAAM,OAAO;AAC1C,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,OAAO,OAAO,OAAO,sCAAsC;AAAA,EACtE;AAEA,MAAI;AACJ,MAAI;AACF,YAAQ,UAAM,6BAAgB;AAAA,MAC5B,SAAS,MAAM;AAAA,MACf,YAAQ,uCAAwB,MAAM,aAAa;AAAA,MACnD,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS;AAAA,QACP,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,QACjB,OAAO,MAAM;AAAA,QACb,SAAS,QAAQ;AAAA,MACnB;AAAA,MACA,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,EAAE,OAAO,OAAO,OAAO,wCAAwC;AAAA,EACxE;AAEA,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,OAAO,OAAO,OAAO,yCAAyC;AAAA,EACzE;AAEA,QAAM,aAAa,MAAM,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACnE,MAAI,QAAQ,YAAY,KAAK,QAAQ,YAAY,YAAY;AAC3D,WAAO,EAAE,OAAO,OAAO,OAAO,oBAAoB;AAAA,EACpD;AAEA,MACE,QAAQ,SAAS,UACjB,QAAQ,KAAK,YAAY,MAAM,MAAM,eAAe,YAAY,GAChE;AACA,WAAO,EAAE,OAAO,OAAO,OAAO,2CAA2C;AAAA,EAC3E;AAEA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,gBAAgB,MAAM;AAAA,IACtB,WAAW,MAAM;AAAA,IACjB,OAAO,MAAM;AAAA,IACb;AAAA,IACA,SAAS,QAAQ;AAAA,EACnB;AACF;","names":[]}
+{"version":3,"sources":["../../src/protocol/grants.ts"],"sourcesContent":["import { verifyTypedData } from \"viem\";\nimport {\n  GRANT_REGISTRATION_TYPES,\n  grantRegistrationDomain,\n  type DataPortabilityGatewayConfig,\n} from \"./eip712\";\n\nexport interface VerifyGrantRegistrationInput {\n  gatewayConfig: DataPortabilityGatewayConfig;\n  grantorAddress: `0x${string}`;\n  granteeId: `0x${string}`;\n  scopes: string[];\n  // Decimal-string uint256 is the wire format; bigint/number are accepted\n  // for ergonomics. Must be >= 1 (first registration uses 1; each override\n  // strictly increases it — see GRANT_REGISTRATION_TYPES).\n  grantVersion: bigint | number | string;\n  // Unix seconds. 0 = no expiry. Anything > 0 is enforced against nowSeconds.\n  expiresAt: bigint | number | string;\n  signature: `0x${string}`;\n  nowSeconds?: number;\n}\n\nexport type VerifyGrantRegistrationResult =\n  | {\n      valid: true;\n      grantorAddress: `0x${string}`;\n      granteeId: `0x${string}`;\n      scopes: string[];\n      grantVersion: string;\n      expiresAt: string;\n    }\n  | {\n      valid: false;\n      error: string;\n    };\n\nfunction isHexString(value: unknown): value is `0x${string}` {\n  return typeof value === \"string\" && value.startsWith(\"0x\");\n}\n\nexport function isDataPortabilityGatewayConfig(\n  value: unknown,\n): value is DataPortabilityGatewayConfig {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n    return false;\n  }\n  const config = value as Record<string, unknown>;\n  const contracts = config[\"contracts\"];\n  if (\n    typeof config[\"chainId\"] !== \"number\" ||\n    !Number.isInteger(config[\"chainId\"]) ||\n    config[\"chainId\"] <= 0 ||\n    contracts === null ||\n    typeof contracts !== \"object\" ||\n    Array.isArray(contracts)\n  ) {\n    return false;\n  }\n  const c = contracts as Record<string, unknown>;\n  return (\n    isHexString(c[\"dataRegistry\"]) &&\n    isHexString(c[\"dataPortabilityPermissions\"]) &&\n    isHexString(c[\"dataPortabilityServer\"]) &&\n    isHexString(c[\"dataPortabilityGrantees\"]) &&\n    isHexString(c[\"dataPortabilityEscrow\"]) &&\n    isHexString(c[\"feeRegistry\"])\n  );\n}\n\nfunction toUint256(value: bigint | number | string): bigint | null {\n  try {\n    // Reject `number` inputs outside the safe-integer range — `BigInt(2**53 + 1)`\n    // doesn't throw, it just converts whatever rounded value JS already stored,\n    // which would silently corrupt grantVersion/expiresAt for any uint256 large\n    // enough to lose precision in a double. Callers that need values past\n    // `MAX_SAFE_INTEGER` must pass a string or bigint.\n    if (typeof value === \"number\" && !Number.isSafeInteger(value)) {\n      return null;\n    }\n    const big = typeof value === \"bigint\" ? value : BigInt(value);\n    if (big < 0n) return null;\n    return big;\n  } catch {\n    return null;\n  }\n}\n\nexport async function verifyGrantRegistration(\n  input: VerifyGrantRegistrationInput,\n): Promise<VerifyGrantRegistrationResult> {\n  if (!Array.isArray(input.scopes) || input.scopes.length === 0) {\n    return { valid: false, error: \"scopes must be a non-empty array\" };\n  }\n  if (!input.scopes.every((scope) => typeof scope === \"string\")) {\n    return { valid: false, error: \"scopes must contain only strings\" };\n  }\n\n  const grantVersion = toUint256(input.grantVersion);\n  if (grantVersion === null || grantVersion < 1n) {\n    return { valid: false, error: \"grantVersion must be a uint256 >= 1\" };\n  }\n\n  const expiresAt = toUint256(input.expiresAt);\n  if (expiresAt === null) {\n    return { valid: false, error: \"expiresAt must be a non-negative uint256\" };\n  }\n\n  let valid: boolean;\n  try {\n    valid = await verifyTypedData({\n      address: input.grantorAddress,\n      domain: grantRegistrationDomain(input.gatewayConfig),\n      types: GRANT_REGISTRATION_TYPES,\n      primaryType: \"GrantRegistration\",\n      message: {\n        grantorAddress: input.grantorAddress,\n        granteeId: input.granteeId,\n        scopes: input.scopes,\n        grantVersion,\n        expiresAt,\n      },\n      signature: input.signature,\n    });\n  } catch {\n    return { valid: false, error: \"EIP-712 signature verification failed\" };\n  }\n\n  if (!valid) {\n    return { valid: false, error: \"Grant signature does not match grantor\" };\n  }\n\n  // 0 is the \"no expiry\" sentinel — only enforce when expiresAt > 0.\n  const nowSeconds = input.nowSeconds ?? Math.floor(Date.now() / 1000);\n  if (expiresAt > 0n && expiresAt < BigInt(nowSeconds)) {\n    return { valid: false, error: \"Grant has expired\" };\n  }\n\n  return {\n    valid: true,\n    grantorAddress: input.grantorAddress,\n    granteeId: input.granteeId,\n    scopes: input.scopes,\n    grantVersion: grantVersion.toString(),\n    expiresAt: expiresAt.toString(),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAAgC;AAChC,oBAIO;AA+BP,SAAS,YAAY,OAAwC;AAC3D,SAAO,OAAO,UAAU,YAAY,MAAM,WAAW,IAAI;AAC3D;AAEO,SAAS,+BACd,OACuC;AACvC,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AACvE,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,QAAM,YAAY,OAAO,WAAW;AACpC,MACE,OAAO,OAAO,SAAS,MAAM,YAC7B,CAAC,OAAO,UAAU,OAAO,SAAS,CAAC,KACnC,OAAO,SAAS,KAAK,KACrB,cAAc,QACd,OAAO,cAAc,YACrB,MAAM,QAAQ,SAAS,GACvB;AACA,WAAO;AAAA,EACT;AACA,QAAM,IAAI;AACV,SACE,YAAY,EAAE,cAAc,CAAC,KAC7B,YAAY,EAAE,4BAA4B,CAAC,KAC3C,YAAY,EAAE,uBAAuB,CAAC,KACtC,YAAY,EAAE,yBAAyB,CAAC,KACxC,YAAY,EAAE,uBAAuB,CAAC,KACtC,YAAY,EAAE,aAAa,CAAC;AAEhC;AAEA,SAAS,UAAU,OAAgD;AACjE,MAAI;AAMF,QAAI,OAAO,UAAU,YAAY,CAAC,OAAO,cAAc,KAAK,GAAG;AAC7D,aAAO;AAAA,IACT;AACA,UAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;AAC5D,QAAI,MAAM,GAAI,QAAO;AACrB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,wBACpB,OACwC;AACxC,MAAI,CAAC,MAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,OAAO,WAAW,GAAG;AAC7D,WAAO,EAAE,OAAO,OAAO,OAAO,mCAAmC;AAAA,EACnE;AACA,MAAI,CAAC,MAAM,OAAO,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ,GAAG;AAC7D,WAAO,EAAE,OAAO,OAAO,OAAO,mCAAmC;AAAA,EACnE;AAEA,QAAM,eAAe,UAAU,MAAM,YAAY;AACjD,MAAI,iBAAiB,QAAQ,eAAe,IAAI;AAC9C,WAAO,EAAE,OAAO,OAAO,OAAO,sCAAsC;AAAA,EACtE;AAEA,QAAM,YAAY,UAAU,MAAM,SAAS;AAC3C,MAAI,cAAc,MAAM;AACtB,WAAO,EAAE,OAAO,OAAO,OAAO,2CAA2C;AAAA,EAC3E;AAEA,MAAI;AACJ,MAAI;AACF,YAAQ,UAAM,6BAAgB;AAAA,MAC5B,SAAS,MAAM;AAAA,MACf,YAAQ,uCAAwB,MAAM,aAAa;AAAA,MACnD,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS;AAAA,QACP,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,QACjB,QAAQ,MAAM;AAAA,QACd;AAAA,QACA;AAAA,MACF;AAAA,MACA,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,EAAE,OAAO,OAAO,OAAO,wCAAwC;AAAA,EACxE;AAEA,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,OAAO,OAAO,OAAO,yCAAyC;AAAA,EACzE;AAGA,QAAM,aAAa,MAAM,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACnE,MAAI,YAAY,MAAM,YAAY,OAAO,UAAU,GAAG;AACpD,WAAO,EAAE,OAAO,OAAO,OAAO,oBAAoB;AAAA,EACpD;AAEA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,gBAAgB,MAAM;AAAA,IACtB,WAAW,MAAM;AAAA,IACjB,QAAQ,MAAM;AAAA,IACd,cAAc,aAAa,SAAS;AAAA,IACpC,WAAW,UAAU,SAAS;AAAA,EAChC;AACF;","names":[]}

package/dist/protocol/grants.d.ts

@@ -1,17 +1,11 @@
 import { type DataPortabilityGatewayConfig } from "./eip712";
-export interface DataPortabilityGrantPayload {
-    user?: `0x${string}`;
-    builder?: `0x${string}`;
-    scopes: string[];
-    expiresAt: number;
-    nonce?: number;
-}
 export interface VerifyGrantRegistrationInput {
     gatewayConfig: DataPortabilityGatewayConfig;
     grantorAddress: `0x${string}`;
     granteeId: `0x${string}`;
-    grant: string;
-    fileIds?: Array<string | number | bigint>;
+    scopes: string[];
+    grantVersion: bigint | number | string;
+    expiresAt: bigint | number | string;
     signature: `0x${string}`;
     nowSeconds?: number;
 }
@@ -19,13 +13,12 @@ export type VerifyGrantRegistrationResult = {
     valid: true;
     grantorAddress: `0x${string}`;
     granteeId: `0x${string}`;
-    grant: string;
-    payload: DataPortabilityGrantPayload;
-    fileIds: string[];
+    scopes: string[];
+    grantVersion: string;
+    expiresAt: string;
 } | {
     valid: false;
     error: string;
 };
 export declare function isDataPortabilityGatewayConfig(value: unknown): value is DataPortabilityGatewayConfig;
-export declare function parseGrantRegistrationPayload(grant: string): DataPortabilityGrantPayload | null;
 export declare function verifyGrantRegistration(input: VerifyGrantRegistrationInput): Promise<VerifyGrantRegistrationResult>;

package/dist/protocol/grants.js

@@ -16,67 +16,34 @@ function isDataPortabilityGatewayConfig(value) {
     return false;
   }
   const c = contracts;
-  return isHexString(c["dataRegistry"]) && isHexString(c["dataPortabilityPermissions"]) && isHexString(c["dataPortabilityServer"]) && isHexString(c["dataPortabilityGrantees"]);
+  return isHexString(c["dataRegistry"]) && isHexString(c["dataPortabilityPermissions"]) && isHexString(c["dataPortabilityServer"]) && isHexString(c["dataPortabilityGrantees"]) && isHexString(c["dataPortabilityEscrow"]) && isHexString(c["feeRegistry"]);
 }
-function parseGrantRegistrationPayload(grant) {
-  let parsed;
+function toUint256(value) {
   try {
-    parsed = JSON.parse(grant);
-  } catch {
-    return null;
-  }
-  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-    return null;
-  }
-  const value = parsed;
-  if (!Array.isArray(value["scopes"]) || value["scopes"].length === 0) {
-    return null;
-  }
-  if (!value["scopes"].every((scope) => typeof scope === "string")) {
-    return null;
-  }
-  if (typeof value["expiresAt"] !== "number" || !Number.isFinite(value["expiresAt"])) {
-    return null;
-  }
-  if (value["user"] !== void 0 && !isHexString(value["user"])) {
-    return null;
-  }
-  if (value["builder"] !== void 0 && !isHexString(value["builder"])) {
-    return null;
-  }
-  if (value["nonce"] !== void 0 && (typeof value["nonce"] !== "number" || !Number.isFinite(value["nonce"]))) {
-    return null;
-  }
-  return {
-    user: value["user"],
-    builder: value["builder"],
-    scopes: value["scopes"],
-    expiresAt: value["expiresAt"],
-    nonce: value["nonce"]
-  };
-}
-function parseFileIds(fileIds) {
-  try {
-    const values = (fileIds ?? []).map((fileId) => BigInt(fileId));
-    return {
-      values,
-      display: values.map((fileId) => fileId.toString())
-    };
+    if (typeof value === "number" && !Number.isSafeInteger(value)) {
+      return null;
+    }
+    const big = typeof value === "bigint" ? value : BigInt(value);
+    if (big < 0n) return null;
+    return big;
   } catch {
     return null;
   }
 }
 async function verifyGrantRegistration(input) {
-  const payload = parseGrantRegistrationPayload(input.grant);
-  if (!payload) {
-    return {
-      valid: false,
-      error: "Grant must be JSON with scopes and expiresAt"
-    };
+  if (!Array.isArray(input.scopes) || input.scopes.length === 0) {
+    return { valid: false, error: "scopes must be a non-empty array" };
   }
-  const fileIds = parseFileIds(input.fileIds);
-  if (!fileIds) {
-    return { valid: false, error: "fileIds must contain integer values" };
+  if (!input.scopes.every((scope) => typeof scope === "string")) {
+    return { valid: false, error: "scopes must contain only strings" };
+  }
+  const grantVersion = toUint256(input.grantVersion);
+  if (grantVersion === null || grantVersion < 1n) {
+    return { valid: false, error: "grantVersion must be a uint256 >= 1" };
+  }
+  const expiresAt = toUint256(input.expiresAt);
+  if (expiresAt === null) {
+    return { valid: false, error: "expiresAt must be a non-negative uint256" };
   }
   let valid;
   try {
@@ -88,8 +55,9 @@ async function verifyGrantRegistration(input) {
       message: {
         grantorAddress: input.grantorAddress,
         granteeId: input.granteeId,
-        grant: input.grant,
-        fileIds: fileIds.values
+        scopes: input.scopes,
+        grantVersion,
+        expiresAt
       },
       signature: input.signature
     });
@@ -100,24 +68,20 @@ async function verifyGrantRegistration(input) {
     return { valid: false, error: "Grant signature does not match grantor" };
   }
   const nowSeconds = input.nowSeconds ?? Math.floor(Date.now() / 1e3);
-  if (payload.expiresAt > 0 && payload.expiresAt < nowSeconds) {
+  if (expiresAt > 0n && expiresAt < BigInt(nowSeconds)) {
     return { valid: false, error: "Grant has expired" };
   }
-  if (payload.user !== void 0 && payload.user.toLowerCase() !== input.grantorAddress.toLowerCase()) {
-    return { valid: false, error: "Grant user does not match grantorAddress" };
-  }
   return {
     valid: true,
     grantorAddress: input.grantorAddress,
     granteeId: input.granteeId,
-    grant: input.grant,
-    payload,
-    fileIds: fileIds.display
+    scopes: input.scopes,
+    grantVersion: grantVersion.toString(),
+    expiresAt: expiresAt.toString()
   };
 }
 export {
   isDataPortabilityGatewayConfig,
-  parseGrantRegistrationPayload,
   verifyGrantRegistration
 };
 //# sourceMappingURL=grants.js.map

package/dist/protocol/grants.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/protocol/grants.ts"],"sourcesContent":["import { verifyTypedData } from \"viem\";\nimport {\n  GRANT_REGISTRATION_TYPES,\n  grantRegistrationDomain,\n  type DataPortabilityGatewayConfig,\n} from \"./eip712\";\n\nexport interface DataPortabilityGrantPayload {\n  user?: `0x${string}`;\n  builder?: `0x${string}`;\n  scopes: string[];\n  expiresAt: number;\n  nonce?: number;\n}\n\nexport interface VerifyGrantRegistrationInput {\n  gatewayConfig: DataPortabilityGatewayConfig;\n  grantorAddress: `0x${string}`;\n  granteeId: `0x${string}`;\n  grant: string;\n  fileIds?: Array<string | number | bigint>;\n  signature: `0x${string}`;\n  nowSeconds?: number;\n}\n\nexport type VerifyGrantRegistrationResult =\n  | {\n      valid: true;\n      grantorAddress: `0x${string}`;\n      granteeId: `0x${string}`;\n      grant: string;\n      payload: DataPortabilityGrantPayload;\n      fileIds: string[];\n    }\n  | {\n      valid: false;\n      error: string;\n    };\n\nfunction isHexString(value: unknown): value is `0x${string}` {\n  return typeof value === \"string\" && value.startsWith(\"0x\");\n}\n\nexport function isDataPortabilityGatewayConfig(\n  value: unknown,\n): value is DataPortabilityGatewayConfig {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n    return false;\n  }\n  const config = value as Record<string, unknown>;\n  const contracts = config[\"contracts\"];\n  if (\n    typeof config[\"chainId\"] !== \"number\" ||\n    !Number.isInteger(config[\"chainId\"]) ||\n    config[\"chainId\"] <= 0 ||\n    contracts === null ||\n    typeof contracts !== \"object\" ||\n    Array.isArray(contracts)\n  ) {\n    return false;\n  }\n  const c = contracts as Record<string, unknown>;\n  return (\n    isHexString(c[\"dataRegistry\"]) &&\n    isHexString(c[\"dataPortabilityPermissions\"]) &&\n    isHexString(c[\"dataPortabilityServer\"]) &&\n    isHexString(c[\"dataPortabilityGrantees\"])\n  );\n}\n\nexport function parseGrantRegistrationPayload(\n  grant: string,\n): DataPortabilityGrantPayload | null {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(grant);\n  } catch {\n    return null;\n  }\n  if (parsed === null || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    return null;\n  }\n  const value = parsed as Record<string, unknown>;\n  if (!Array.isArray(value[\"scopes\"]) || value[\"scopes\"].length === 0) {\n    return null;\n  }\n  if (!value[\"scopes\"].every((scope) => typeof scope === \"string\")) {\n    return null;\n  }\n  if (\n    typeof value[\"expiresAt\"] !== \"number\" ||\n    !Number.isFinite(value[\"expiresAt\"])\n  ) {\n    return null;\n  }\n  if (value[\"user\"] !== undefined && !isHexString(value[\"user\"])) {\n    return null;\n  }\n  if (value[\"builder\"] !== undefined && !isHexString(value[\"builder\"])) {\n    return null;\n  }\n  if (\n    value[\"nonce\"] !== undefined &&\n    (typeof value[\"nonce\"] !== \"number\" || !Number.isFinite(value[\"nonce\"]))\n  ) {\n    return null;\n  }\n  return {\n    user: value[\"user\"] as `0x${string}` | undefined,\n    builder: value[\"builder\"] as `0x${string}` | undefined,\n    scopes: value[\"scopes\"] as string[],\n    expiresAt: value[\"expiresAt\"],\n    nonce: value[\"nonce\"] as number | undefined,\n  };\n}\n\nfunction parseFileIds(fileIds: Array<string | number | bigint> | undefined): {\n  values: bigint[];\n  display: string[];\n} | null {\n  try {\n    const values = (fileIds ?? []).map((fileId) => BigInt(fileId));\n    return {\n      values,\n      display: values.map((fileId) => fileId.toString()),\n    };\n  } catch {\n    return null;\n  }\n}\n\nexport async function verifyGrantRegistration(\n  input: VerifyGrantRegistrationInput,\n): Promise<VerifyGrantRegistrationResult> {\n  const payload = parseGrantRegistrationPayload(input.grant);\n  if (!payload) {\n    return {\n      valid: false,\n      error: \"Grant must be JSON with scopes and expiresAt\",\n    };\n  }\n\n  const fileIds = parseFileIds(input.fileIds);\n  if (!fileIds) {\n    return { valid: false, error: \"fileIds must contain integer values\" };\n  }\n\n  let valid: boolean;\n  try {\n    valid = await verifyTypedData({\n      address: input.grantorAddress,\n      domain: grantRegistrationDomain(input.gatewayConfig),\n      types: GRANT_REGISTRATION_TYPES,\n      primaryType: \"GrantRegistration\",\n      message: {\n        grantorAddress: input.grantorAddress,\n        granteeId: input.granteeId,\n        grant: input.grant,\n        fileIds: fileIds.values,\n      },\n      signature: input.signature,\n    });\n  } catch {\n    return { valid: false, error: \"EIP-712 signature verification failed\" };\n  }\n\n  if (!valid) {\n    return { valid: false, error: \"Grant signature does not match grantor\" };\n  }\n\n  const nowSeconds = input.nowSeconds ?? Math.floor(Date.now() / 1000);\n  if (payload.expiresAt > 0 && payload.expiresAt < nowSeconds) {\n    return { valid: false, error: \"Grant has expired\" };\n  }\n\n  if (\n    payload.user !== undefined &&\n    payload.user.toLowerCase() !== input.grantorAddress.toLowerCase()\n  ) {\n    return { valid: false, error: \"Grant user does not match grantorAddress\" };\n  }\n\n  return {\n    valid: true,\n    grantorAddress: input.grantorAddress,\n    granteeId: input.granteeId,\n    grant: input.grant,\n    payload,\n    fileIds: fileIds.display,\n  };\n}\n"],"mappings":"AAAA,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAkCP,SAAS,YAAY,OAAwC;AAC3D,SAAO,OAAO,UAAU,YAAY,MAAM,WAAW,IAAI;AAC3D;AAEO,SAAS,+BACd,OACuC;AACvC,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AACvE,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,QAAM,YAAY,OAAO,WAAW;AACpC,MACE,OAAO,OAAO,SAAS,MAAM,YAC7B,CAAC,OAAO,UAAU,OAAO,SAAS,CAAC,KACnC,OAAO,SAAS,KAAK,KACrB,cAAc,QACd,OAAO,cAAc,YACrB,MAAM,QAAQ,SAAS,GACvB;AACA,WAAO;AAAA,EACT;AACA,QAAM,IAAI;AACV,SACE,YAAY,EAAE,cAAc,CAAC,KAC7B,YAAY,EAAE,4BAA4B,CAAC,KAC3C,YAAY,EAAE,uBAAuB,CAAC,KACtC,YAAY,EAAE,yBAAyB,CAAC;AAE5C;AAEO,SAAS,8BACd,OACoC;AACpC,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAC1E,WAAO;AAAA,EACT;AACA,QAAM,QAAQ;AACd,MAAI,CAAC,MAAM,QAAQ,MAAM,QAAQ,CAAC,KAAK,MAAM,QAAQ,EAAE,WAAW,GAAG;AACnE,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,QAAQ,EAAE,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ,GAAG;AAChE,WAAO;AAAA,EACT;AACA,MACE,OAAO,MAAM,WAAW,MAAM,YAC9B,CAAC,OAAO,SAAS,MAAM,WAAW,CAAC,GACnC;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,MAAM,MAAM,UAAa,CAAC,YAAY,MAAM,MAAM,CAAC,GAAG;AAC9D,WAAO;AAAA,EACT;AACA,MAAI,MAAM,SAAS,MAAM,UAAa,CAAC,YAAY,MAAM,SAAS,CAAC,GAAG;AACpE,WAAO;AAAA,EACT;AACA,MACE,MAAM,OAAO,MAAM,WAClB,OAAO,MAAM,OAAO,MAAM,YAAY,CAAC,OAAO,SAAS,MAAM,OAAO,CAAC,IACtE;AACA,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,MAAM,MAAM,MAAM;AAAA,IAClB,SAAS,MAAM,SAAS;AAAA,IACxB,QAAQ,MAAM,QAAQ;AAAA,IACtB,WAAW,MAAM,WAAW;AAAA,IAC5B,OAAO,MAAM,OAAO;AAAA,EACtB;AACF;AAEA,SAAS,aAAa,SAGb;AACP,MAAI;AACF,UAAM,UAAU,WAAW,CAAC,GAAG,IAAI,CAAC,WAAW,OAAO,MAAM,CAAC;AAC7D,WAAO;AAAA,MACL;AAAA,MACA,SAAS,OAAO,IAAI,CAAC,WAAW,OAAO,SAAS,CAAC;AAAA,IACnD;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,wBACpB,OACwC;AACxC,QAAM,UAAU,8BAA8B,MAAM,KAAK;AACzD,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,UAAU,aAAa,MAAM,OAAO;AAC1C,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,OAAO,OAAO,OAAO,sCAAsC;AAAA,EACtE;AAEA,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,gBAAgB;AAAA,MAC5B,SAAS,MAAM;AAAA,MACf,QAAQ,wBAAwB,MAAM,aAAa;AAAA,MACnD,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS;AAAA,QACP,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,QACjB,OAAO,MAAM;AAAA,QACb,SAAS,QAAQ;AAAA,MACnB;AAAA,MACA,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,EAAE,OAAO,OAAO,OAAO,wCAAwC;AAAA,EACxE;AAEA,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,OAAO,OAAO,OAAO,yCAAyC;AAAA,EACzE;AAEA,QAAM,aAAa,MAAM,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACnE,MAAI,QAAQ,YAAY,KAAK,QAAQ,YAAY,YAAY;AAC3D,WAAO,EAAE,OAAO,OAAO,OAAO,oBAAoB;AAAA,EACpD;AAEA,MACE,QAAQ,SAAS,UACjB,QAAQ,KAAK,YAAY,MAAM,MAAM,eAAe,YAAY,GAChE;AACA,WAAO,EAAE,OAAO,OAAO,OAAO,2CAA2C;AAAA,EAC3E;AAEA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,gBAAgB,MAAM;AAAA,IACtB,WAAW,MAAM;AAAA,IACjB,OAAO,MAAM;AAAA,IACb;AAAA,IACA,SAAS,QAAQ;AAAA,EACnB;AACF;","names":[]}
+{"version":3,"sources":["../../src/protocol/grants.ts"],"sourcesContent":["import { verifyTypedData } from \"viem\";\nimport {\n  GRANT_REGISTRATION_TYPES,\n  grantRegistrationDomain,\n  type DataPortabilityGatewayConfig,\n} from \"./eip712\";\n\nexport interface VerifyGrantRegistrationInput {\n  gatewayConfig: DataPortabilityGatewayConfig;\n  grantorAddress: `0x${string}`;\n  granteeId: `0x${string}`;\n  scopes: string[];\n  // Decimal-string uint256 is the wire format; bigint/number are accepted\n  // for ergonomics. Must be >= 1 (first registration uses 1; each override\n  // strictly increases it — see GRANT_REGISTRATION_TYPES).\n  grantVersion: bigint | number | string;\n  // Unix seconds. 0 = no expiry. Anything > 0 is enforced against nowSeconds.\n  expiresAt: bigint | number | string;\n  signature: `0x${string}`;\n  nowSeconds?: number;\n}\n\nexport type VerifyGrantRegistrationResult =\n  | {\n      valid: true;\n      grantorAddress: `0x${string}`;\n      granteeId: `0x${string}`;\n      scopes: string[];\n      grantVersion: string;\n      expiresAt: string;\n    }\n  | {\n      valid: false;\n      error: string;\n    };\n\nfunction isHexString(value: unknown): value is `0x${string}` {\n  return typeof value === \"string\" && value.startsWith(\"0x\");\n}\n\nexport function isDataPortabilityGatewayConfig(\n  value: unknown,\n): value is DataPortabilityGatewayConfig {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) {\n    return false;\n  }\n  const config = value as Record<string, unknown>;\n  const contracts = config[\"contracts\"];\n  if (\n    typeof config[\"chainId\"] !== \"number\" ||\n    !Number.isInteger(config[\"chainId\"]) ||\n    config[\"chainId\"] <= 0 ||\n    contracts === null ||\n    typeof contracts !== \"object\" ||\n    Array.isArray(contracts)\n  ) {\n    return false;\n  }\n  const c = contracts as Record<string, unknown>;\n  return (\n    isHexString(c[\"dataRegistry\"]) &&\n    isHexString(c[\"dataPortabilityPermissions\"]) &&\n    isHexString(c[\"dataPortabilityServer\"]) &&\n    isHexString(c[\"dataPortabilityGrantees\"]) &&\n    isHexString(c[\"dataPortabilityEscrow\"]) &&\n    isHexString(c[\"feeRegistry\"])\n  );\n}\n\nfunction toUint256(value: bigint | number | string): bigint | null {\n  try {\n    // Reject `number` inputs outside the safe-integer range — `BigInt(2**53 + 1)`\n    // doesn't throw, it just converts whatever rounded value JS already stored,\n    // which would silently corrupt grantVersion/expiresAt for any uint256 large\n    // enough to lose precision in a double. Callers that need values past\n    // `MAX_SAFE_INTEGER` must pass a string or bigint.\n    if (typeof value === \"number\" && !Number.isSafeInteger(value)) {\n      return null;\n    }\n    const big = typeof value === \"bigint\" ? value : BigInt(value);\n    if (big < 0n) return null;\n    return big;\n  } catch {\n    return null;\n  }\n}\n\nexport async function verifyGrantRegistration(\n  input: VerifyGrantRegistrationInput,\n): Promise<VerifyGrantRegistrationResult> {\n  if (!Array.isArray(input.scopes) || input.scopes.length === 0) {\n    return { valid: false, error: \"scopes must be a non-empty array\" };\n  }\n  if (!input.scopes.every((scope) => typeof scope === \"string\")) {\n    return { valid: false, error: \"scopes must contain only strings\" };\n  }\n\n  const grantVersion = toUint256(input.grantVersion);\n  if (grantVersion === null || grantVersion < 1n) {\n    return { valid: false, error: \"grantVersion must be a uint256 >= 1\" };\n  }\n\n  const expiresAt = toUint256(input.expiresAt);\n  if (expiresAt === null) {\n    return { valid: false, error: \"expiresAt must be a non-negative uint256\" };\n  }\n\n  let valid: boolean;\n  try {\n    valid = await verifyTypedData({\n      address: input.grantorAddress,\n      domain: grantRegistrationDomain(input.gatewayConfig),\n      types: GRANT_REGISTRATION_TYPES,\n      primaryType: \"GrantRegistration\",\n      message: {\n        grantorAddress: input.grantorAddress,\n        granteeId: input.granteeId,\n        scopes: input.scopes,\n        grantVersion,\n        expiresAt,\n      },\n      signature: input.signature,\n    });\n  } catch {\n    return { valid: false, error: \"EIP-712 signature verification failed\" };\n  }\n\n  if (!valid) {\n    return { valid: false, error: \"Grant signature does not match grantor\" };\n  }\n\n  // 0 is the \"no expiry\" sentinel — only enforce when expiresAt > 0.\n  const nowSeconds = input.nowSeconds ?? Math.floor(Date.now() / 1000);\n  if (expiresAt > 0n && expiresAt < BigInt(nowSeconds)) {\n    return { valid: false, error: \"Grant has expired\" };\n  }\n\n  return {\n    valid: true,\n    grantorAddress: input.grantorAddress,\n    granteeId: input.granteeId,\n    scopes: input.scopes,\n    grantVersion: grantVersion.toString(),\n    expiresAt: expiresAt.toString(),\n  };\n}\n"],"mappings":"AAAA,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AA+BP,SAAS,YAAY,OAAwC;AAC3D,SAAO,OAAO,UAAU,YAAY,MAAM,WAAW,IAAI;AAC3D;AAEO,SAAS,+BACd,OACuC;AACvC,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AACvE,WAAO;AAAA,EACT;AACA,QAAM,SAAS;AACf,QAAM,YAAY,OAAO,WAAW;AACpC,MACE,OAAO,OAAO,SAAS,MAAM,YAC7B,CAAC,OAAO,UAAU,OAAO,SAAS,CAAC,KACnC,OAAO,SAAS,KAAK,KACrB,cAAc,QACd,OAAO,cAAc,YACrB,MAAM,QAAQ,SAAS,GACvB;AACA,WAAO;AAAA,EACT;AACA,QAAM,IAAI;AACV,SACE,YAAY,EAAE,cAAc,CAAC,KAC7B,YAAY,EAAE,4BAA4B,CAAC,KAC3C,YAAY,EAAE,uBAAuB,CAAC,KACtC,YAAY,EAAE,yBAAyB,CAAC,KACxC,YAAY,EAAE,uBAAuB,CAAC,KACtC,YAAY,EAAE,aAAa,CAAC;AAEhC;AAEA,SAAS,UAAU,OAAgD;AACjE,MAAI;AAMF,QAAI,OAAO,UAAU,YAAY,CAAC,OAAO,cAAc,KAAK,GAAG;AAC7D,aAAO;AAAA,IACT;AACA,UAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;AAC5D,QAAI,MAAM,GAAI,QAAO;AACrB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,wBACpB,OACwC;AACxC,MAAI,CAAC,MAAM,QAAQ,MAAM,MAAM,KAAK,MAAM,OAAO,WAAW,GAAG;AAC7D,WAAO,EAAE,OAAO,OAAO,OAAO,mCAAmC;AAAA,EACnE;AACA,MAAI,CAAC,MAAM,OAAO,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ,GAAG;AAC7D,WAAO,EAAE,OAAO,OAAO,OAAO,mCAAmC;AAAA,EACnE;AAEA,QAAM,eAAe,UAAU,MAAM,YAAY;AACjD,MAAI,iBAAiB,QAAQ,eAAe,IAAI;AAC9C,WAAO,EAAE,OAAO,OAAO,OAAO,sCAAsC;AAAA,EACtE;AAEA,QAAM,YAAY,UAAU,MAAM,SAAS;AAC3C,MAAI,cAAc,MAAM;AACtB,WAAO,EAAE,OAAO,OAAO,OAAO,2CAA2C;AAAA,EAC3E;AAEA,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,gBAAgB;AAAA,MAC5B,SAAS,MAAM;AAAA,MACf,QAAQ,wBAAwB,MAAM,aAAa;AAAA,MACnD,OAAO;AAAA,MACP,aAAa;AAAA,MACb,SAAS;AAAA,QACP,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,QACjB,QAAQ,MAAM;AAAA,QACd;AAAA,QACA;AAAA,MACF;AAAA,MACA,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,EAAE,OAAO,OAAO,OAAO,wCAAwC;AAAA,EACxE;AAEA,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,OAAO,OAAO,OAAO,yCAAyC;AAAA,EACzE;AAGA,QAAM,aAAa,MAAM,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACnE,MAAI,YAAY,MAAM,YAAY,OAAO,UAAU,GAAG;AACpD,WAAO,EAAE,OAAO,OAAO,OAAO,oBAAoB;AAAA,EACpD;AAEA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,gBAAgB,MAAM;AAAA,IACtB,WAAW,MAAM;AAAA,IACjB,QAAQ,MAAM;AAAA,IACd,cAAc,aAAa,SAAS;AAAA,IACpC,WAAW,UAAU,SAAS;AAAA,EAChC;AACF;","names":[]}

package/dist/protocol/personal-server-data.cjs

@@ -0,0 +1,71 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var personal_server_data_exports = {};
+__export(personal_server_data_exports, {
+  buildPersonalServerDataReadRequest: () => buildPersonalServerDataReadRequest,
+  personalServerDataReadPath: () => personalServerDataReadPath,
+  readPersonalServerData: () => readPersonalServerData
+});
+module.exports = __toCommonJS(personal_server_data_exports);
+var import_web3_signed_builder = require("../auth/web3-signed-builder");
+var import_data_file = require("./data-file");
+function personalServerDataReadPath(scope) {
+  return `/v1/data/${encodeURIComponent(scope)}`;
+}
+async function buildPersonalServerDataReadRequest(params) {
+  const path = personalServerDataReadPath(params.scope);
+  const baseUrl = params.personalServerUrl.replace(/\/+$/, "");
+  const audience = params.audience ?? baseUrl;
+  const headers = new Headers(params.headers);
+  headers.set(
+    "Authorization",
+    await (0, import_web3_signed_builder.buildWeb3SignedHeader)({
+      aud: audience,
+      grantId: params.grantId,
+      method: "GET",
+      signMessage: params.signMessage,
+      uri: path
+    })
+  );
+  return new Request(`${baseUrl}${path}`, {
+    headers,
+    method: "GET"
+  });
+}
+async function readPersonalServerData(params) {
+  const fetchFn = params.fetch ?? globalThis.fetch;
+  if (fetchFn === void 0) {
+    throw new Error("No fetch implementation available");
+  }
+  const request = await buildPersonalServerDataReadRequest(params);
+  const response = await fetchFn(request);
+  if (!response.ok) {
+    throw new Error(
+      `Personal Server data read failed: ${response.status} ${response.statusText}`
+    );
+  }
+  return import_data_file.DataFileEnvelopeSchema.parse(await response.json());
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  buildPersonalServerDataReadRequest,
+  personalServerDataReadPath,
+  readPersonalServerData
+});
+//# sourceMappingURL=personal-server-data.cjs.map