@opendatalabs/vana-sdk 4.1.0 → 4.3.0

package/dist/protocol/jobs.d.ts

@@ -21,7 +21,52 @@ export type JobOperation = (typeof JOB_OPERATIONS)[number];
 export declare const JOB_STATES: readonly ["queued", "claimed", "running", "completed", "failed", "expired", "cancelled"];
 export type JobState = (typeof JOB_STATES)[number];
 /** Payment lifecycle recorded for a queued job. */
-export type PaymentState = "none" | "reserved" | "settled";
+/**
+ * What actually happened to the money for one read.
+ *
+ * `none` is the pre-fee literal every job carried before job fees and stays in
+ * the union for those rows. `free` is a chain whose `data_access` fee is
+ * disabled or zero — priced honestly at nothing, not a placeholder. `unbilled`
+ * is a read the Gateway priced but did not charge, either during the fee
+ * rollout or on a path with no payer.
+ */
+export type PaymentState = "none" | "free" | "unbilled" | "reserved" | "settling" | "settled" | "released";
+/**
+ * The builder's signed authorization for the price of one read.
+ *
+ * The same EIP-712 `GenericPayment` a legacy Personal Server read signs into
+ * its `X-PAYMENT` header, over `opType: "job_access"` and
+ * `opId: keccak256(jobId)`. The Gateway stores it verbatim on the payment row.
+ */
+export interface JobPaymentAuthorization {
+    signature: Hex;
+    /** uint256 decimal; must equal the Gateway's quote for this chain. */
+    amount: string;
+    asset: Address;
+    /** uint256 decimal, unique per (payer, kind). */
+    paymentNonce: string;
+}
+/** The price of one delivered read, as `GET /v1/jobs/quote` reports it. */
+export interface JobQuote {
+    chainId: number;
+    /** uint256 decimal; "0" when this chain charges nothing. */
+    price: string;
+    asset: Address;
+    /** False when the fee is disabled or zero, so no payment is needed. */
+    payable: boolean;
+    /** Whether the Gateway refuses an unpaid submission today. */
+    enforced: boolean;
+}
+/** RecordDataAccess receipt fields plus the enclave signature over them. */
+export interface JobAccessRecord {
+    dataPointId: Hex;
+    /** uint256 decimal — the data-point version actually served. */
+    version: string;
+    accessor: Address;
+    /** bytes32 per-event replay nonce; the contract pins it. */
+    recordId: Hex;
+    signature: Hex;
+}
 export declare const DEFAULT_LEASE_SECONDS = 30;
 export declare const MAX_LEASE_SECONDS = 300;
 export declare const MAX_ATTEMPTS = 3;
@@ -64,6 +109,18 @@ export interface JobSubmission {
     deadline?: string;
     /** Base64 ECIES from `sealJobRequest`. */
     requestCiphertext: string;
+    /**
+     * The most the builder accepts for this read, uint256 decimal. The Gateway
+     * refuses a quote above it rather than charging a price nobody agreed to.
+     *
+     * @remarks
+     * This submission is authenticated by a Web3Signed body hash, not by an
+     * EIP-712 struct, so these three fields are covered by the builder's existing
+     * request signature. No typed-data version changes.
+     */
+    maxPrice?: string;
+    priceAsset?: Address;
+    payment?: JobPaymentAuthorization;
 }
 /** Where a completed job's sealed result lives. Bytes never transit the Gateway. */
 export interface ResultHandle {
@@ -89,6 +146,12 @@ export interface JobStatus {
     pinnedVersion: string | null;
     attempt: number;
     price: string;
+    /**
+     * Null exactly when the read is free; nothing owed is owed to nobody.
+     * Optional so a consumer's existing `JobStatus` fixtures keep compiling; the
+     * Gateway always sends it.
+     */
+    priceAsset?: Address | null;
     payer: "builder";
     paymentState: PaymentState;
     createdAt: string;
@@ -139,6 +202,13 @@ export interface CompleteRequest {
     resultSize: number;
     /** `jobresults/{chainId}/{jobId}`. */
     resultObjectKey: string;
+    /**
+     * Server-signed delivery receipt for the read this job served, minted by the
+     * node agent with the owner's enclave wallet. Binds the reserved payment to
+     * an on-chain `recordDataAccess`, exactly as the legacy paid read does.
+     * Required whenever the job reserved a fee.
+     */
+    accessRecord?: JobAccessRecord;
 }
 /** Request body for `POST /v1/jobs/:id/fail`. */
 export interface FailRequest {

package/dist/protocol/jobs.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/protocol/jobs.ts"],"sourcesContent":["/**\n * Job queue protocol types for encrypted Personal Server execution.\n *\n *                 Builder -> GW -> Agent -> Sandbox\n * Builder -> GW: submit an enclave-encrypted request.\n * GW -> Agent: claim work with a fenced lease and sealed owner identity.\n * Agent -> Sandbox: decrypt, wake the owner sandbox, and execute privately.\n * Sandbox -> Agent: encrypt the result to the builder's public key.\n * Agent -> GW: store the sealed result and complete with its object key, hash, and size.\n * GW -> Builder: return inline or polled status with an object-storage handle.\n * Builder: decrypt and verify the result's job, scope, and version bindings.\n * Full flow: personal-server-ts `docs/260903-jobs-contract.md`, section 1.\n *\n * @category Protocol\n */\n\nimport type { Address, Hex } from \"viem\";\nimport type { SealedEnvelope } from \"./identity\";\n\nexport const JOB_PROTOCOL_VERSION = 1;\nexport const JOB_OPERATIONS = [\"raw_read\", \"inference\"] as const;\nexport type JobOperation = (typeof JOB_OPERATIONS)[number];\nexport const JOB_STATES = [\n  \"queued\",\n  \"claimed\",\n  \"running\",\n  \"completed\",\n  \"failed\",\n  \"expired\",\n  \"cancelled\",\n] as const;\nexport type JobState = (typeof JOB_STATES)[number];\n/** Payment lifecycle recorded for a queued job. */\nexport type PaymentState = \"none\" | \"reserved\" | \"settled\";\nexport const DEFAULT_LEASE_SECONDS = 30;\nexport const MAX_LEASE_SECONDS = 300;\nexport const MAX_ATTEMPTS = 3;\nexport const MAX_WAIT_SECONDS = 25;\nexport const CLAIM_POLL_FLOOR_MS = 1000;\nexport const DEFAULT_JOB_DEADLINE_SECONDS = 600;\nexport const MAX_JOB_DEADLINE_SECONDS = 3600;\n\n/** Inner plaintext of the request box (ECIES to the enclave publicKey). */\nexport interface JobRequest {\n  v: 1;\n  jobId: string;\n  owner: Address;\n  builder: Address;\n  builderPublicKey: Hex;\n  grantId: Hex;\n  scope: string;\n  operation: JobOperation;\n  pinnedVersion: string | null;\n  deadline: string; /* ISO */\n}\n/** Plaintext of the request box; the Gateway never sees it. */\nexport interface JobRequestEnvelope {\n  request: JobRequest;\n  /**\n   * `Web3Signed <b64>.<sig>` by the builder: `aud` = Gateway origin,\n   * `uri` = `/v1/jobs/execute`,\n   * `bodyHash` = `sha256(canonicalJobRequestBytes(request))`.\n   */\n  auth: string;\n}\n/** Outer body of POST /v1/jobs (signed Web3Signed by the builder). */\nexport interface JobSubmission {\n  owner: Address;\n  grantId: Hex;\n  scope: string;\n  operation: JobOperation;\n  idempotencyKey: string;\n  /** Client UUID, echoed in `JobRequest.jobId`. */\n  jobId: string;\n  deadline?: string;\n  /** Base64 ECIES from `sealJobRequest`. */\n  requestCiphertext: string;\n}\n/** Where a completed job's sealed result lives. Bytes never transit the Gateway. */\nexport interface ResultHandle {\n  /** Object key in vana-storage, `jobresults/{chainId}/{jobId}`. */\n  objectKey: string;\n  /** Absolute URL the builder GETs. The Gateway builds it from its storage origin. */\n  url: string;\n  /** Byte length of the sealed object. */\n  size: number;\n  /** sha256 of the sealed bytes, 0x-prefixed. */\n  hash: Hex;\n  /** Logical expiry. After this the Gateway stops serving the handle. */\n  expiresAt: string;\n}\n/** Response from `GET /v1/jobs/:id`. */\nexport interface JobStatus {\n  jobId: string;\n  state: JobState;\n  operation: JobOperation;\n  owner: Address;\n  grantId: Hex;\n  scope: string;\n  pinnedVersion: string | null;\n  attempt: number;\n  price: string;\n  payer: \"builder\";\n  paymentState: PaymentState;\n  createdAt: string;\n  claimedAt: string | null;\n  completedAt: string | null;\n  failureReason: string | null;\n  /** Present only when `state === \"completed\"`. */\n  result?: ResultHandle;\n}\n/** Request body for `POST /v1/jobs/claim`. */\nexport interface ClaimRequest {\n  leaseSeconds?: number;\n  capacity?: number;\n}\n/** Claimed job and owner identity returned by `POST /v1/jobs/claim`. */\nexport interface ClaimResponse {\n  job: {\n    jobId: string;\n    owner: Address;\n    builder: Address;\n    grantId: Hex;\n    scope: string;\n    operation: JobOperation;\n    pinnedVersion: string | null;\n    requestCiphertext: string;\n    attempt: number;\n    deadlineAt: string | null;\n    claimExpiresAt: string;\n    fencingToken: number; /* = attempt; every node write echoes it */\n  };\n  identity: {\n    userPsId: Hex;\n    epoch: number;\n    enclaveAddress: Address;\n    enclavePublicKey: Hex;\n    sealedEnvelope: SealedEnvelope;\n  };\n}\n/** Request body for `POST /v1/jobs/:id/heartbeat`. */\nexport interface HeartbeatRequest {\n  leaseSeconds?: number;\n  fencingToken: number;\n}\n/** Request body for `POST /v1/jobs/:id/complete`. */\nexport interface CompleteRequest {\n  fencingToken: number;\n  resultHash: Hex;\n  resultSize: number;\n  /** `jobresults/{chainId}/{jobId}`. */\n  resultObjectKey: string;\n}\n/** Request body for `POST /v1/jobs/:id/fail`. */\nexport interface FailRequest {\n  fencingToken: number;\n  reason: string; /* <= 1024, fail.ts:16 */\n}\n/** Successful response from a fenced job write endpoint. */\nexport interface FencedResponse {\n  success: true;\n  jobId: string;\n  state: JobState;\n  claimExpiresAt: string | null;\n}\n/** Inner plaintext of the result box (ECIES to builderPublicKey). */\nexport interface JobResult {\n  v: 1;\n  jobId: string;\n  scope: string;\n  version: string | null;\n  contentType: string;\n  /** Raw result bytes; callers decode text explicitly when appropriate. */\n  body: Uint8Array;\n}\n/** Admission lifecycle of a registered TEE node. */\nexport type TeeNodeState = \"pending\" | \"admitted\" | \"draining\" | \"removed\";\n/** Request body for `POST /v1/tee-nodes`. */\nexport interface TeeNodeRegistration {\n  nodeId: string;\n  appId: Hex;\n  composeHash: Hex;\n  publicUrl: string;\n  capacity: number;\n  secret: string;\n}\n/** Request body for `POST /v1/tee-nodes/:id/heartbeat`. */\nexport interface TeeNodeHeartbeat {\n  composeHash: Hex;\n  instanceId: string;\n  activeSandboxes: number;\n  capacity: number;\n}\n/** Public registration and capacity state for a TEE node. */\nexport interface TeeNode {\n  nodeId: string;\n  appId: Hex;\n  composeHash: Hex;\n  publicUrl: string;\n  state: TeeNodeState;\n  capacity: number;\n  activeSandboxes: number;\n  lastHeartbeatAt: string | null;\n}\n"],"mappings":"AAmBO,MAAM,uBAAuB;AAC7B,MAAM,iBAAiB,CAAC,YAAY,WAAW;AAE/C,MAAM,aAAa;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,MAAM,wBAAwB;AAC9B,MAAM,oBAAoB;AAC1B,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,sBAAsB;AAC5B,MAAM,+BAA+B;AACrC,MAAM,2BAA2B;","names":[]}
+{"version":3,"sources":["../../src/protocol/jobs.ts"],"sourcesContent":["/**\n * Job queue protocol types for encrypted Personal Server execution.\n *\n *                 Builder -> GW -> Agent -> Sandbox\n * Builder -> GW: submit an enclave-encrypted request.\n * GW -> Agent: claim work with a fenced lease and sealed owner identity.\n * Agent -> Sandbox: decrypt, wake the owner sandbox, and execute privately.\n * Sandbox -> Agent: encrypt the result to the builder's public key.\n * Agent -> GW: store the sealed result and complete with its object key, hash, and size.\n * GW -> Builder: return inline or polled status with an object-storage handle.\n * Builder: decrypt and verify the result's job, scope, and version bindings.\n * Full flow: personal-server-ts `docs/260903-jobs-contract.md`, section 1.\n *\n * @category Protocol\n */\n\nimport type { Address, Hex } from \"viem\";\nimport type { SealedEnvelope } from \"./identity\";\n\nexport const JOB_PROTOCOL_VERSION = 1;\nexport const JOB_OPERATIONS = [\"raw_read\", \"inference\"] as const;\nexport type JobOperation = (typeof JOB_OPERATIONS)[number];\nexport const JOB_STATES = [\n  \"queued\",\n  \"claimed\",\n  \"running\",\n  \"completed\",\n  \"failed\",\n  \"expired\",\n  \"cancelled\",\n] as const;\nexport type JobState = (typeof JOB_STATES)[number];\n/** Payment lifecycle recorded for a queued job. */\n/**\n * What actually happened to the money for one read.\n *\n * `none` is the pre-fee literal every job carried before job fees and stays in\n * the union for those rows. `free` is a chain whose `data_access` fee is\n * disabled or zero — priced honestly at nothing, not a placeholder. `unbilled`\n * is a read the Gateway priced but did not charge, either during the fee\n * rollout or on a path with no payer.\n */\nexport type PaymentState =\n  | \"none\"\n  | \"free\"\n  | \"unbilled\"\n  | \"reserved\"\n  | \"settling\"\n  | \"settled\"\n  | \"released\";\n\n/**\n * The builder's signed authorization for the price of one read.\n *\n * The same EIP-712 `GenericPayment` a legacy Personal Server read signs into\n * its `X-PAYMENT` header, over `opType: \"job_access\"` and\n * `opId: keccak256(jobId)`. The Gateway stores it verbatim on the payment row.\n */\nexport interface JobPaymentAuthorization {\n  signature: Hex;\n  /** uint256 decimal; must equal the Gateway's quote for this chain. */\n  amount: string;\n  asset: Address;\n  /** uint256 decimal, unique per (payer, kind). */\n  paymentNonce: string;\n}\n\n/** The price of one delivered read, as `GET /v1/jobs/quote` reports it. */\nexport interface JobQuote {\n  chainId: number;\n  /** uint256 decimal; \"0\" when this chain charges nothing. */\n  price: string;\n  asset: Address;\n  /** False when the fee is disabled or zero, so no payment is needed. */\n  payable: boolean;\n  /** Whether the Gateway refuses an unpaid submission today. */\n  enforced: boolean;\n}\n\n/** RecordDataAccess receipt fields plus the enclave signature over them. */\nexport interface JobAccessRecord {\n  dataPointId: Hex;\n  /** uint256 decimal — the data-point version actually served. */\n  version: string;\n  accessor: Address;\n  /** bytes32 per-event replay nonce; the contract pins it. */\n  recordId: Hex;\n  signature: Hex;\n}\nexport const DEFAULT_LEASE_SECONDS = 30;\nexport const MAX_LEASE_SECONDS = 300;\nexport const MAX_ATTEMPTS = 3;\nexport const MAX_WAIT_SECONDS = 25;\nexport const CLAIM_POLL_FLOOR_MS = 1000;\nexport const DEFAULT_JOB_DEADLINE_SECONDS = 600;\nexport const MAX_JOB_DEADLINE_SECONDS = 3600;\n\n/** Inner plaintext of the request box (ECIES to the enclave publicKey). */\nexport interface JobRequest {\n  v: 1;\n  jobId: string;\n  owner: Address;\n  builder: Address;\n  builderPublicKey: Hex;\n  grantId: Hex;\n  scope: string;\n  operation: JobOperation;\n  pinnedVersion: string | null;\n  deadline: string; /* ISO */\n}\n/** Plaintext of the request box; the Gateway never sees it. */\nexport interface JobRequestEnvelope {\n  request: JobRequest;\n  /**\n   * `Web3Signed <b64>.<sig>` by the builder: `aud` = Gateway origin,\n   * `uri` = `/v1/jobs/execute`,\n   * `bodyHash` = `sha256(canonicalJobRequestBytes(request))`.\n   */\n  auth: string;\n}\n/** Outer body of POST /v1/jobs (signed Web3Signed by the builder). */\nexport interface JobSubmission {\n  owner: Address;\n  grantId: Hex;\n  scope: string;\n  operation: JobOperation;\n  idempotencyKey: string;\n  /** Client UUID, echoed in `JobRequest.jobId`. */\n  jobId: string;\n  deadline?: string;\n  /** Base64 ECIES from `sealJobRequest`. */\n  requestCiphertext: string;\n  /**\n   * The most the builder accepts for this read, uint256 decimal. The Gateway\n   * refuses a quote above it rather than charging a price nobody agreed to.\n   *\n   * @remarks\n   * This submission is authenticated by a Web3Signed body hash, not by an\n   * EIP-712 struct, so these three fields are covered by the builder's existing\n   * request signature. No typed-data version changes.\n   */\n  maxPrice?: string;\n  priceAsset?: Address;\n  payment?: JobPaymentAuthorization;\n}\n/** Where a completed job's sealed result lives. Bytes never transit the Gateway. */\nexport interface ResultHandle {\n  /** Object key in vana-storage, `jobresults/{chainId}/{jobId}`. */\n  objectKey: string;\n  /** Absolute URL the builder GETs. The Gateway builds it from its storage origin. */\n  url: string;\n  /** Byte length of the sealed object. */\n  size: number;\n  /** sha256 of the sealed bytes, 0x-prefixed. */\n  hash: Hex;\n  /** Logical expiry. After this the Gateway stops serving the handle. */\n  expiresAt: string;\n}\n/** Response from `GET /v1/jobs/:id`. */\nexport interface JobStatus {\n  jobId: string;\n  state: JobState;\n  operation: JobOperation;\n  owner: Address;\n  grantId: Hex;\n  scope: string;\n  pinnedVersion: string | null;\n  attempt: number;\n  price: string;\n  /**\n   * Null exactly when the read is free; nothing owed is owed to nobody.\n   * Optional so a consumer's existing `JobStatus` fixtures keep compiling; the\n   * Gateway always sends it.\n   */\n  priceAsset?: Address | null;\n  payer: \"builder\";\n  paymentState: PaymentState;\n  createdAt: string;\n  claimedAt: string | null;\n  completedAt: string | null;\n  failureReason: string | null;\n  /** Present only when `state === \"completed\"`. */\n  result?: ResultHandle;\n}\n/** Request body for `POST /v1/jobs/claim`. */\nexport interface ClaimRequest {\n  leaseSeconds?: number;\n  capacity?: number;\n}\n/** Claimed job and owner identity returned by `POST /v1/jobs/claim`. */\nexport interface ClaimResponse {\n  job: {\n    jobId: string;\n    owner: Address;\n    builder: Address;\n    grantId: Hex;\n    scope: string;\n    operation: JobOperation;\n    pinnedVersion: string | null;\n    requestCiphertext: string;\n    attempt: number;\n    deadlineAt: string | null;\n    claimExpiresAt: string;\n    fencingToken: number; /* = attempt; every node write echoes it */\n  };\n  identity: {\n    userPsId: Hex;\n    epoch: number;\n    enclaveAddress: Address;\n    enclavePublicKey: Hex;\n    sealedEnvelope: SealedEnvelope;\n  };\n}\n/** Request body for `POST /v1/jobs/:id/heartbeat`. */\nexport interface HeartbeatRequest {\n  leaseSeconds?: number;\n  fencingToken: number;\n}\n/** Request body for `POST /v1/jobs/:id/complete`. */\nexport interface CompleteRequest {\n  fencingToken: number;\n  resultHash: Hex;\n  resultSize: number;\n  /** `jobresults/{chainId}/{jobId}`. */\n  resultObjectKey: string;\n  /**\n   * Server-signed delivery receipt for the read this job served, minted by the\n   * node agent with the owner's enclave wallet. Binds the reserved payment to\n   * an on-chain `recordDataAccess`, exactly as the legacy paid read does.\n   * Required whenever the job reserved a fee.\n   */\n  accessRecord?: JobAccessRecord;\n}\n/** Request body for `POST /v1/jobs/:id/fail`. */\nexport interface FailRequest {\n  fencingToken: number;\n  reason: string; /* <= 1024, fail.ts:16 */\n}\n/** Successful response from a fenced job write endpoint. */\nexport interface FencedResponse {\n  success: true;\n  jobId: string;\n  state: JobState;\n  claimExpiresAt: string | null;\n}\n/** Inner plaintext of the result box (ECIES to builderPublicKey). */\nexport interface JobResult {\n  v: 1;\n  jobId: string;\n  scope: string;\n  version: string | null;\n  contentType: string;\n  /** Raw result bytes; callers decode text explicitly when appropriate. */\n  body: Uint8Array;\n}\n/** Admission lifecycle of a registered TEE node. */\nexport type TeeNodeState = \"pending\" | \"admitted\" | \"draining\" | \"removed\";\n/** Request body for `POST /v1/tee-nodes`. */\nexport interface TeeNodeRegistration {\n  nodeId: string;\n  appId: Hex;\n  composeHash: Hex;\n  publicUrl: string;\n  capacity: number;\n  secret: string;\n}\n/** Request body for `POST /v1/tee-nodes/:id/heartbeat`. */\nexport interface TeeNodeHeartbeat {\n  composeHash: Hex;\n  instanceId: string;\n  activeSandboxes: number;\n  capacity: number;\n}\n/** Public registration and capacity state for a TEE node. */\nexport interface TeeNode {\n  nodeId: string;\n  appId: Hex;\n  composeHash: Hex;\n  publicUrl: string;\n  state: TeeNodeState;\n  capacity: number;\n  activeSandboxes: number;\n  lastHeartbeatAt: string | null;\n}\n"],"mappings":"AAmBO,MAAM,uBAAuB;AAC7B,MAAM,iBAAiB,CAAC,YAAY,WAAW;AAE/C,MAAM,aAAa;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA2DO,MAAM,wBAAwB;AAC9B,MAAM,oBAAoB;AAC1B,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,sBAAsB;AAC5B,MAAM,+BAA+B;AACrC,MAAM,2BAA2B;","names":[]}

package/dist/server.cjs

@@ -41,10 +41,13 @@ __export(server_exports, {
   createDefaultNonceSource: () => import_escrow_payment.createDefaultNonceSource,
   createDirectDataController: () => import_controller.createDirectDataController,
   dataPathForScope: () => import_personal_server_read.dataPathForScope,
+  findLiveGrant: () => import_grant_union.findLiveGrant,
   formatScopeEntry: () => import_scope_actions.formatScopeEntry,
   getDirectEndpoints: () => import_endpoints.getDirectEndpoints,
   grantPermissions: () => import_scope_actions.grantPermissions,
   hasAction: () => import_scope_actions.hasAction,
+  liveGrantScopes: () => import_grant_union.liveGrantScopes,
+  mergeWithLiveGrant: () => import_grant_union.mergeWithLiveGrant,
   parsePersonalServerPaymentRequired: () => import_personal_server_read.parsePersonalServerPaymentRequired,
   parseScope: () => import_scopes.parseScope,
   parseScopeEntry: () => import_scope_actions.parseScopeEntry,
@@ -56,11 +59,13 @@ __export(server_exports, {
   toDirectFeeBreakdown: () => import_escrow_payment.toDirectFeeBreakdown,
   toDirectPaymentReceipt: () => import_escrow_payment.toDirectPaymentReceipt,
   tryGrantPermissions: () => import_scope_actions.tryGrantPermissions,
+  unionGrantScopes: () => import_grant_union.unionGrantScopes,
   validateAccessRequestQuestions: () => import_access_request_client.validateAccessRequestQuestions
 });
 module.exports = __toCommonJS(server_exports);
 var import_controller = require("./direct/controller");
 var import_access_request_client = require("./direct/access-request-client");
+var import_grant_union = require("./direct/grant-union");
 var import_personal_server_read = require("./direct/personal-server-read");
 var import_escrow_payment = require("./direct/escrow-payment");
 var import_endpoints = require("./direct/endpoints");
@@ -93,10 +98,13 @@ var import_types = require("./direct/types");
   createDefaultNonceSource,
   createDirectDataController,
   dataPathForScope,
+  findLiveGrant,
   formatScopeEntry,
   getDirectEndpoints,
   grantPermissions,
   hasAction,
+  liveGrantScopes,
+  mergeWithLiveGrant,
   parsePersonalServerPaymentRequired,
   parseScope,
   parseScopeEntry,
@@ -108,6 +116,7 @@ var import_types = require("./direct/types");
   toDirectFeeBreakdown,
   toDirectPaymentReceipt,
   tryGrantPermissions,
+  unionGrantScopes,
   validateAccessRequestQuestions
 });
 //# sourceMappingURL=server.cjs.map

package/dist/server.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link createDirectDataController} and its supporting types/errors.\n * This is a Node/server entry point — it owns the app private key and must never\n * be imported into browser code.\n *\n * @example\n * ```typescript\n * import { createDirectDataController } from \"@opendatalabs/vana-sdk/server\";\n *\n * export const vana = createDirectDataController({\n *   env: process.env.VANA_ENV === \"dev\" ? \"dev\" : \"production\",\n *   appPrivateKey: process.env.VANA_APP_PRIVATE_KEY!,\n *   app: { id: \"notes-lens\", name: \"Notes Lens\", homepageUrl: process.env.VANA_APP_URL! },\n *   source: \"icloud_notes\",\n *   scopes: [\"icloud_notes.notes\"],\n * });\n * ```\n *\n * @category Direct\n * @module server\n */\n\nexport {\n  createDirectDataController,\n  type DirectDataController,\n  type DirectDataControllerConfig,\n  type DirectEscrowConfig,\n} from \"./direct/controller\";\n\n// Lower-level building blocks (advanced use / custom transports).\nexport {\n  createDefaultAccessRequestClient,\n  buildApprovalUrl,\n  validateAccessRequestQuestions,\n  type DefaultAccessRequestClientOptions,\n  type FetchLike,\n} from \"./direct/access-request-client\";\nexport {\n  buildPersonalServerDataReadRequest,\n  readPersonalServerData,\n  parsePersonalServerPaymentRequired,\n  dataPathForScope,\n  type PersonalServerDataReadRequest,\n  type PersonalServerReadResult,\n  type PersonalServerFetch,\n  type PersonalServerTransportRetryOptions,\n  type FetchResponseLike,\n} from \"./direct/personal-server-read\";\n// Escrow-backed payment (built on protocol/escrow).\nexport {\n  authorizeEscrowPayment,\n  authorizeGrantPayment,\n  buildEscrowPaymentHeader,\n  buildGrantPaymentHeader,\n  paymentResponseMetadataFromHeader,\n  toDirectPaymentReceipt,\n  toDirectFeeBreakdown,\n  createDefaultNonceSource,\n  DATA_ACCESS_OP_TYPE,\n  GRANT_OP_TYPE,\n  type EscrowPaymentConfig,\n  type EscrowPaymentHeaderConfig,\n  type SignTypedDataFn,\n  type PaymentNonceSource,\n} from \"./direct/escrow-payment\";\nexport {\n  getDirectEndpoints,\n  PRODUCTION_ENDPOINTS,\n  DEV_ENDPOINTS,\n} from \"./direct/endpoints\";\n// Grant scope entries: the `[operation:]scope` vocabulary the controller's\n// `scopes` are written in, so a backend can build and read them without\n// reaching for a platform entry point.\nexport {\n  ScopeSchema,\n  parseScope,\n  scopeMatchesPattern,\n  scopeCoveredByGrant,\n  type Scope,\n  type ParsedScope,\n} from \"./protocol/scopes\";\nexport {\n  SCOPE_ACTIONS,\n  InvalidScopeEntryError,\n  parseScopeEntry,\n  formatScopeEntry,\n  grantPermissions,\n  permissionsToScopes,\n  tryGrantPermissions,\n  hasAction,\n  type ScopeAction,\n  type ParsedScopeEntry,\n  type GrantPermission,\n} from \"./protocol/scope-actions\";\n\n// Errors\nexport {\n  DirectConfigError,\n  AccessNotApprovedError,\n  ScopeNotApprovedError,\n  PersonalServerReadError,\n  PaymentRequiredError,\n} from \"./direct/errors\";\n\n// Shared types\nexport type {\n  DirectEnv,\n  DirectNetwork,\n  DirectAppConfig,\n  ForegroundDelivery,\n  AppIdentity,\n  DirectServiceEndpoints,\n  AccessRequest,\n  AccessRequestQuestion,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n  MultiScopeDataResult,\n  AccessRequestClient,\n  DirectOpTypeValue,\n  PersonalServerDataAccessPaymentOperation,\n  PersonalServerGrantPaymentOperation,\n  PersonalServerPaymentOperation,\n  PersonalServerPaymentRequired,\n  DirectPaymentReceipt,\n  DirectPaymentResponseMetadata,\n  DirectFeeBreakdown,\n} from \"./direct/types\";\n\n// Op-type vocabulary constant.\nexport { DirectOpType } from \"./direct/types\";\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAyBA,wBAKO;AAGP,mCAMO;AACP,kCAUO;AAEP,4BAeO;AACP,uBAIO;AAIP,oBAOO;AACP,2BAYO;AAGP,oBAMO;AA4BP,mBAA6B;","names":[]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link createDirectDataController} and its supporting types/errors.\n * This is a Node/server entry point — it owns the app private key and must never\n * be imported into browser code.\n *\n * @example\n * ```typescript\n * import { createDirectDataController } from \"@opendatalabs/vana-sdk/server\";\n *\n * export const vana = createDirectDataController({\n *   env: process.env.VANA_ENV === \"dev\" ? \"dev\" : \"production\",\n *   appPrivateKey: process.env.VANA_APP_PRIVATE_KEY!,\n *   app: { id: \"notes-lens\", name: \"Notes Lens\", homepageUrl: process.env.VANA_APP_URL! },\n *   source: \"icloud_notes\",\n *   scopes: [\"icloud_notes.notes\"],\n * });\n * ```\n *\n * @category Direct\n * @module server\n */\n\nexport {\n  createDirectDataController,\n  type DirectDataController,\n  type DirectDataControllerConfig,\n  type DirectEscrowConfig,\n} from \"./direct/controller\";\n\n// Lower-level building blocks (advanced use / custom transports).\nexport {\n  createDefaultAccessRequestClient,\n  buildApprovalUrl,\n  validateAccessRequestQuestions,\n  type DefaultAccessRequestClientOptions,\n  type FetchLike,\n} from \"./direct/access-request-client\";\n// Grant union: extend the owner's live grant instead of replacing it.\nexport {\n  mergeWithLiveGrant,\n  liveGrantScopes,\n  findLiveGrant,\n  unionGrantScopes,\n  type GrantUnion,\n  type GrantUnionGateway,\n  type GrantUnionStatus,\n  type MergeWithLiveGrantInput,\n  type MergeWithLiveGrantResult,\n} from \"./direct/grant-union\";\nexport {\n  buildPersonalServerDataReadRequest,\n  readPersonalServerData,\n  parsePersonalServerPaymentRequired,\n  dataPathForScope,\n  type PersonalServerDataReadRequest,\n  type PersonalServerReadResult,\n  type PersonalServerFetch,\n  type PersonalServerTransportRetryOptions,\n  type FetchResponseLike,\n} from \"./direct/personal-server-read\";\n// Escrow-backed payment (built on protocol/escrow).\nexport {\n  authorizeEscrowPayment,\n  authorizeGrantPayment,\n  buildEscrowPaymentHeader,\n  buildGrantPaymentHeader,\n  paymentResponseMetadataFromHeader,\n  toDirectPaymentReceipt,\n  toDirectFeeBreakdown,\n  createDefaultNonceSource,\n  DATA_ACCESS_OP_TYPE,\n  GRANT_OP_TYPE,\n  type EscrowPaymentConfig,\n  type EscrowPaymentHeaderConfig,\n  type SignTypedDataFn,\n  type PaymentNonceSource,\n} from \"./direct/escrow-payment\";\nexport {\n  getDirectEndpoints,\n  PRODUCTION_ENDPOINTS,\n  DEV_ENDPOINTS,\n} from \"./direct/endpoints\";\n// Grant scope entries: the `[operation:]scope` vocabulary the controller's\n// `scopes` are written in, so a backend can build and read them without\n// reaching for a platform entry point.\nexport {\n  ScopeSchema,\n  parseScope,\n  scopeMatchesPattern,\n  scopeCoveredByGrant,\n  type Scope,\n  type ParsedScope,\n} from \"./protocol/scopes\";\nexport {\n  SCOPE_ACTIONS,\n  InvalidScopeEntryError,\n  parseScopeEntry,\n  formatScopeEntry,\n  grantPermissions,\n  permissionsToScopes,\n  tryGrantPermissions,\n  hasAction,\n  type ScopeAction,\n  type ParsedScopeEntry,\n  type GrantPermission,\n} from \"./protocol/scope-actions\";\n\n// Errors\nexport {\n  DirectConfigError,\n  AccessNotApprovedError,\n  ScopeNotApprovedError,\n  PersonalServerReadError,\n  PaymentRequiredError,\n} from \"./direct/errors\";\n\n// Shared types\nexport type {\n  DirectEnv,\n  DirectNetwork,\n  DirectAppConfig,\n  ForegroundDelivery,\n  AppIdentity,\n  DirectServiceEndpoints,\n  AccessRequest,\n  AccessRequestGrantUnion,\n  AccessRequestQuestion,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n  MultiScopeDataResult,\n  AccessRequestClient,\n  DirectOpTypeValue,\n  PersonalServerDataAccessPaymentOperation,\n  PersonalServerGrantPaymentOperation,\n  PersonalServerPaymentOperation,\n  PersonalServerPaymentRequired,\n  DirectPaymentReceipt,\n  DirectPaymentResponseMetadata,\n  DirectFeeBreakdown,\n} from \"./direct/types\";\n\n// Op-type vocabulary constant.\nexport { DirectOpType } from \"./direct/types\";\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAyBA,wBAKO;AAGP,mCAMO;AAEP,yBAUO;AACP,kCAUO;AAEP,4BAeO;AACP,uBAIO;AAIP,oBAOO;AACP,2BAYO;AAGP,oBAMO;AA6BP,mBAA6B;","names":[]}

package/dist/server.d.ts

@@ -24,11 +24,12 @@
  */
 export { createDirectDataController, type DirectDataController, type DirectDataControllerConfig, type DirectEscrowConfig, } from "./direct/controller.js";
 export { createDefaultAccessRequestClient, buildApprovalUrl, validateAccessRequestQuestions, type DefaultAccessRequestClientOptions, type FetchLike, } from "./direct/access-request-client.js";
+export { mergeWithLiveGrant, liveGrantScopes, findLiveGrant, unionGrantScopes, type GrantUnion, type GrantUnionGateway, type GrantUnionStatus, type MergeWithLiveGrantInput, type MergeWithLiveGrantResult, } from "./direct/grant-union.js";
 export { buildPersonalServerDataReadRequest, readPersonalServerData, parsePersonalServerPaymentRequired, dataPathForScope, type PersonalServerDataReadRequest, type PersonalServerReadResult, type PersonalServerFetch, type PersonalServerTransportRetryOptions, type FetchResponseLike, } from "./direct/personal-server-read.js";
 export { authorizeEscrowPayment, authorizeGrantPayment, buildEscrowPaymentHeader, buildGrantPaymentHeader, paymentResponseMetadataFromHeader, toDirectPaymentReceipt, toDirectFeeBreakdown, createDefaultNonceSource, DATA_ACCESS_OP_TYPE, GRANT_OP_TYPE, type EscrowPaymentConfig, type EscrowPaymentHeaderConfig, type SignTypedDataFn, type PaymentNonceSource, } from "./direct/escrow-payment.js";
 export { getDirectEndpoints, PRODUCTION_ENDPOINTS, DEV_ENDPOINTS, } from "./direct/endpoints.js";
 export { ScopeSchema, parseScope, scopeMatchesPattern, scopeCoveredByGrant, type Scope, type ParsedScope, } from "./protocol/scopes.js";
 export { SCOPE_ACTIONS, InvalidScopeEntryError, parseScopeEntry, formatScopeEntry, grantPermissions, permissionsToScopes, tryGrantPermissions, hasAction, type ScopeAction, type ParsedScopeEntry, type GrantPermission, } from "./protocol/scope-actions.js";
 export { DirectConfigError, AccessNotApprovedError, ScopeNotApprovedError, PersonalServerReadError, PaymentRequiredError, } from "./direct/errors.js";
-export type { DirectEnv, DirectNetwork, DirectAppConfig, ForegroundDelivery, AppIdentity, DirectServiceEndpoints, AccessRequest, AccessRequestQuestion, AccessRequestStatus, AccessRequestStatusValue, ApprovedDataResult, MultiScopeDataResult, AccessRequestClient, DirectOpTypeValue, PersonalServerDataAccessPaymentOperation, PersonalServerGrantPaymentOperation, PersonalServerPaymentOperation, PersonalServerPaymentRequired, DirectPaymentReceipt, DirectPaymentResponseMetadata, DirectFeeBreakdown, } from "./direct/types.js";
+export type { DirectEnv, DirectNetwork, DirectAppConfig, ForegroundDelivery, AppIdentity, DirectServiceEndpoints, AccessRequest, AccessRequestGrantUnion, AccessRequestQuestion, AccessRequestStatus, AccessRequestStatusValue, ApprovedDataResult, MultiScopeDataResult, AccessRequestClient, DirectOpTypeValue, PersonalServerDataAccessPaymentOperation, PersonalServerGrantPaymentOperation, PersonalServerPaymentOperation, PersonalServerPaymentRequired, DirectPaymentReceipt, DirectPaymentResponseMetadata, DirectFeeBreakdown, } from "./direct/types.js";
 export { DirectOpType } from "./direct/types.js";

package/dist/server.js

@@ -6,6 +6,12 @@ import {
   buildApprovalUrl,
   validateAccessRequestQuestions
 } from "./direct/access-request-client.js";
+import {
+  mergeWithLiveGrant,
+  liveGrantScopes,
+  findLiveGrant,
+  unionGrantScopes
+} from "./direct/grant-union.js";
 import {
   buildPersonalServerDataReadRequest,
   readPersonalServerData,
@@ -77,10 +83,13 @@ export {
   createDefaultNonceSource,
   createDirectDataController,
   dataPathForScope,
+  findLiveGrant,
   formatScopeEntry,
   getDirectEndpoints,
   grantPermissions,
   hasAction,
+  liveGrantScopes,
+  mergeWithLiveGrant,
   parsePersonalServerPaymentRequired,
   parseScope,
   parseScopeEntry,
@@ -92,6 +101,7 @@ export {
   toDirectFeeBreakdown,
   toDirectPaymentReceipt,
   tryGrantPermissions,
+  unionGrantScopes,
   validateAccessRequestQuestions
 };
 //# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link createDirectDataController} and its supporting types/errors.\n * This is a Node/server entry point — it owns the app private key and must never\n * be imported into browser code.\n *\n * @example\n * ```typescript\n * import { createDirectDataController } from \"@opendatalabs/vana-sdk/server\";\n *\n * export const vana = createDirectDataController({\n *   env: process.env.VANA_ENV === \"dev\" ? \"dev\" : \"production\",\n *   appPrivateKey: process.env.VANA_APP_PRIVATE_KEY!,\n *   app: { id: \"notes-lens\", name: \"Notes Lens\", homepageUrl: process.env.VANA_APP_URL! },\n *   source: \"icloud_notes\",\n *   scopes: [\"icloud_notes.notes\"],\n * });\n * ```\n *\n * @category Direct\n * @module server\n */\n\nexport {\n  createDirectDataController,\n  type DirectDataController,\n  type DirectDataControllerConfig,\n  type DirectEscrowConfig,\n} from \"./direct/controller\";\n\n// Lower-level building blocks (advanced use / custom transports).\nexport {\n  createDefaultAccessRequestClient,\n  buildApprovalUrl,\n  validateAccessRequestQuestions,\n  type DefaultAccessRequestClientOptions,\n  type FetchLike,\n} from \"./direct/access-request-client\";\nexport {\n  buildPersonalServerDataReadRequest,\n  readPersonalServerData,\n  parsePersonalServerPaymentRequired,\n  dataPathForScope,\n  type PersonalServerDataReadRequest,\n  type PersonalServerReadResult,\n  type PersonalServerFetch,\n  type PersonalServerTransportRetryOptions,\n  type FetchResponseLike,\n} from \"./direct/personal-server-read\";\n// Escrow-backed payment (built on protocol/escrow).\nexport {\n  authorizeEscrowPayment,\n  authorizeGrantPayment,\n  buildEscrowPaymentHeader,\n  buildGrantPaymentHeader,\n  paymentResponseMetadataFromHeader,\n  toDirectPaymentReceipt,\n  toDirectFeeBreakdown,\n  createDefaultNonceSource,\n  DATA_ACCESS_OP_TYPE,\n  GRANT_OP_TYPE,\n  type EscrowPaymentConfig,\n  type EscrowPaymentHeaderConfig,\n  type SignTypedDataFn,\n  type PaymentNonceSource,\n} from \"./direct/escrow-payment\";\nexport {\n  getDirectEndpoints,\n  PRODUCTION_ENDPOINTS,\n  DEV_ENDPOINTS,\n} from \"./direct/endpoints\";\n// Grant scope entries: the `[operation:]scope` vocabulary the controller's\n// `scopes` are written in, so a backend can build and read them without\n// reaching for a platform entry point.\nexport {\n  ScopeSchema,\n  parseScope,\n  scopeMatchesPattern,\n  scopeCoveredByGrant,\n  type Scope,\n  type ParsedScope,\n} from \"./protocol/scopes\";\nexport {\n  SCOPE_ACTIONS,\n  InvalidScopeEntryError,\n  parseScopeEntry,\n  formatScopeEntry,\n  grantPermissions,\n  permissionsToScopes,\n  tryGrantPermissions,\n  hasAction,\n  type ScopeAction,\n  type ParsedScopeEntry,\n  type GrantPermission,\n} from \"./protocol/scope-actions\";\n\n// Errors\nexport {\n  DirectConfigError,\n  AccessNotApprovedError,\n  ScopeNotApprovedError,\n  PersonalServerReadError,\n  PaymentRequiredError,\n} from \"./direct/errors\";\n\n// Shared types\nexport type {\n  DirectEnv,\n  DirectNetwork,\n  DirectAppConfig,\n  ForegroundDelivery,\n  AppIdentity,\n  DirectServiceEndpoints,\n  AccessRequest,\n  AccessRequestQuestion,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n  MultiScopeDataResult,\n  AccessRequestClient,\n  DirectOpTypeValue,\n  PersonalServerDataAccessPaymentOperation,\n  PersonalServerGrantPaymentOperation,\n  PersonalServerPaymentOperation,\n  PersonalServerPaymentRequired,\n  DirectPaymentReceipt,\n  DirectPaymentResponseMetadata,\n  DirectFeeBreakdown,\n} from \"./direct/types\";\n\n// Op-type vocabulary constant.\nexport { DirectOpType } from \"./direct/types\";\n"],"mappings":"AAyBA;AAAA,EACE;AAAA,OAIK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA4BP,SAAS,oBAAoB;","names":[]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link createDirectDataController} and its supporting types/errors.\n * This is a Node/server entry point — it owns the app private key and must never\n * be imported into browser code.\n *\n * @example\n * ```typescript\n * import { createDirectDataController } from \"@opendatalabs/vana-sdk/server\";\n *\n * export const vana = createDirectDataController({\n *   env: process.env.VANA_ENV === \"dev\" ? \"dev\" : \"production\",\n *   appPrivateKey: process.env.VANA_APP_PRIVATE_KEY!,\n *   app: { id: \"notes-lens\", name: \"Notes Lens\", homepageUrl: process.env.VANA_APP_URL! },\n *   source: \"icloud_notes\",\n *   scopes: [\"icloud_notes.notes\"],\n * });\n * ```\n *\n * @category Direct\n * @module server\n */\n\nexport {\n  createDirectDataController,\n  type DirectDataController,\n  type DirectDataControllerConfig,\n  type DirectEscrowConfig,\n} from \"./direct/controller\";\n\n// Lower-level building blocks (advanced use / custom transports).\nexport {\n  createDefaultAccessRequestClient,\n  buildApprovalUrl,\n  validateAccessRequestQuestions,\n  type DefaultAccessRequestClientOptions,\n  type FetchLike,\n} from \"./direct/access-request-client\";\n// Grant union: extend the owner's live grant instead of replacing it.\nexport {\n  mergeWithLiveGrant,\n  liveGrantScopes,\n  findLiveGrant,\n  unionGrantScopes,\n  type GrantUnion,\n  type GrantUnionGateway,\n  type GrantUnionStatus,\n  type MergeWithLiveGrantInput,\n  type MergeWithLiveGrantResult,\n} from \"./direct/grant-union\";\nexport {\n  buildPersonalServerDataReadRequest,\n  readPersonalServerData,\n  parsePersonalServerPaymentRequired,\n  dataPathForScope,\n  type PersonalServerDataReadRequest,\n  type PersonalServerReadResult,\n  type PersonalServerFetch,\n  type PersonalServerTransportRetryOptions,\n  type FetchResponseLike,\n} from \"./direct/personal-server-read\";\n// Escrow-backed payment (built on protocol/escrow).\nexport {\n  authorizeEscrowPayment,\n  authorizeGrantPayment,\n  buildEscrowPaymentHeader,\n  buildGrantPaymentHeader,\n  paymentResponseMetadataFromHeader,\n  toDirectPaymentReceipt,\n  toDirectFeeBreakdown,\n  createDefaultNonceSource,\n  DATA_ACCESS_OP_TYPE,\n  GRANT_OP_TYPE,\n  type EscrowPaymentConfig,\n  type EscrowPaymentHeaderConfig,\n  type SignTypedDataFn,\n  type PaymentNonceSource,\n} from \"./direct/escrow-payment\";\nexport {\n  getDirectEndpoints,\n  PRODUCTION_ENDPOINTS,\n  DEV_ENDPOINTS,\n} from \"./direct/endpoints\";\n// Grant scope entries: the `[operation:]scope` vocabulary the controller's\n// `scopes` are written in, so a backend can build and read them without\n// reaching for a platform entry point.\nexport {\n  ScopeSchema,\n  parseScope,\n  scopeMatchesPattern,\n  scopeCoveredByGrant,\n  type Scope,\n  type ParsedScope,\n} from \"./protocol/scopes\";\nexport {\n  SCOPE_ACTIONS,\n  InvalidScopeEntryError,\n  parseScopeEntry,\n  formatScopeEntry,\n  grantPermissions,\n  permissionsToScopes,\n  tryGrantPermissions,\n  hasAction,\n  type ScopeAction,\n  type ParsedScopeEntry,\n  type GrantPermission,\n} from \"./protocol/scope-actions\";\n\n// Errors\nexport {\n  DirectConfigError,\n  AccessNotApprovedError,\n  ScopeNotApprovedError,\n  PersonalServerReadError,\n  PaymentRequiredError,\n} from \"./direct/errors\";\n\n// Shared types\nexport type {\n  DirectEnv,\n  DirectNetwork,\n  DirectAppConfig,\n  ForegroundDelivery,\n  AppIdentity,\n  DirectServiceEndpoints,\n  AccessRequest,\n  AccessRequestGrantUnion,\n  AccessRequestQuestion,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n  MultiScopeDataResult,\n  AccessRequestClient,\n  DirectOpTypeValue,\n  PersonalServerDataAccessPaymentOperation,\n  PersonalServerGrantPaymentOperation,\n  PersonalServerPaymentOperation,\n  PersonalServerPaymentRequired,\n  DirectPaymentReceipt,\n  DirectPaymentResponseMetadata,\n  DirectFeeBreakdown,\n} from \"./direct/types\";\n\n// Op-type vocabulary constant.\nexport { DirectOpType } from \"./direct/types\";\n"],"mappings":"AAyBA;AAAA,EACE;AAAA,OAIK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA6BP,SAAS,oBAAoB;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opendatalabs/vana-sdk",
-  "version": "4.1.0",
+  "version": "4.3.0",
   "description": "A TypeScript library for interacting with Vana Network smart contracts.",
   "publishConfig": {
     "access": "public"