@opendatalabs/vana-sdk 4.4.0 → 4.5.0

package/dist/react.cjs

@@ -18,15 +18,23 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var react_exports = {};
 __export(react_exports, {
+  VanaConnectHttpError: () => import_http_transports.VanaConnectHttpError,
   createDirectConnectFlow: () => import_connect_flow.createDirectConnectFlow,
-  useDirectVanaConnect: () => import_use_direct_vana_connect.useDirectVanaConnect
+  createVanaConnectTransports: () => import_http_transports.createVanaConnectTransports,
+  useDirectVanaConnect: () => import_use_direct_vana_connect.useDirectVanaConnect,
+  useVanaConnect: () => import_use_vana_connect.useVanaConnect
 });
 module.exports = __toCommonJS(react_exports);
 var import_use_direct_vana_connect = require("./direct/use-direct-vana-connect");
+var import_use_vana_connect = require("./direct/use-vana-connect");
+var import_http_transports = require("./connect/http-transports");
 var import_connect_flow = require("./direct/connect-flow");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  VanaConnectHttpError,
   createDirectConnectFlow,
-  useDirectVanaConnect
+  createVanaConnectTransports,
+  useDirectVanaConnect,
+  useVanaConnect
 });
 //# sourceMappingURL=react.cjs.map

package/dist/react.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/react.ts"],"sourcesContent":["/**\n * React entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link useDirectVanaConnect} (and the underlying framework-agnostic\n * connect-flow store) for browser apps. This entry point is browser-safe and\n * imports nothing Node-only. `react` is a peer dependency.\n *\n * @example\n * ```tsx\n * \"use client\";\n * import { useDirectVanaConnect } from \"@opendatalabs/vana-sdk/react\";\n *\n * export function ConnectNotesButton() {\n *   const connect = useDirectVanaConnect({\n *     createRequest: () => fetch(\"/api/vana/request\", { method: \"POST\" }).then((r) => r.json()),\n *     getStatus: (id) => fetch(`/api/vana/status?requestId=${id}`).then((r) => r.json()),\n *     readResult: (id) => fetch(`/api/vana/data?requestId=${id}`).then((r) => r.json()),\n *   });\n *   const { state, start } = connect;\n *   return (\n *     <div>\n *       <button disabled={state.type !== \"idle\"} onClick={start} type=\"button\">\n *         {state.type === \"idle\" ? \"Connect Apple Notes\" : \"Connecting...\"}\n *       </button>\n *       {state.type === \"awaiting_approval\" && (\n *         // Fallback link: if the browser blocked the approval popup, the user\n *         // can still open it manually instead of the flow silently hanging.\n *         <a href={state.request.approvalUrl} target=\"_blank\" rel=\"noreferrer\">\n *           {state.popupBlocked ? \"Popup blocked — open approval\" : \"Open approval\"}\n *         </a>\n *       )}\n *       {state.type === \"ready_to_open\" && (\n *         // Mobile deep Direct: render the HTTPS continuation as a primary tap.\n *         // The SDK keeps polling in this tab; if the tab is lost, restart.\n *         <a href={state.mobileContinuationUrl} target=\"_blank\" rel=\"noreferrer\">\n *           Open Vana\n *         </a>\n *       )}\n *     </div>\n *   );\n * }\n * ```\n *\n * @category Direct\n * @module react\n */\n\nexport {\n  useDirectVanaConnect,\n  type UseDirectVanaConnectOptions,\n  type UseDirectVanaConnectResult,\n} from \"./direct/use-direct-vana-connect\";\n\n// Framework-agnostic store (usable without React).\nexport {\n  createDirectConnectFlow,\n  type ConnectWindow,\n  type DirectBrowserPlatform,\n  type DirectBrowserPlatformPolicy,\n  type DirectConnectFlow,\n  type DirectConnectRetryOutcome,\n  type DirectConnectState,\n  type DirectConnectOptions,\n  type DirectConnectTransports,\n} from \"./direct/connect-flow\";\n\n// Shared types useful when typing the transports.\nexport type {\n  ForegroundDelivery,\n  AccessRequest,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n} from \"./direct/types\";\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgDA,qCAIO;AAGP,0BAUO;","names":[]}
+{"version":3,"sources":["../src/react.ts"],"sourcesContent":["/**\n * React entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link useDirectVanaConnect} (and the underlying framework-agnostic\n * connect-flow store) for browser apps. This entry point is browser-safe and\n * imports nothing Node-only. `react` is a peer dependency.\n *\n * @example\n * ```tsx\n * \"use client\";\n * import { useDirectVanaConnect } from \"@opendatalabs/vana-sdk/react\";\n *\n * export function ConnectNotesButton() {\n *   const connect = useDirectVanaConnect({\n *     createRequest: () => fetch(\"/api/vana/request\", { method: \"POST\" }).then((r) => r.json()),\n *     getStatus: (id) => fetch(`/api/vana/status?requestId=${id}`).then((r) => r.json()),\n *     readResult: (id) => fetch(`/api/vana/data?requestId=${id}`).then((r) => r.json()),\n *   });\n *   const { state, start } = connect;\n *   return (\n *     <div>\n *       <button disabled={state.type !== \"idle\"} onClick={start} type=\"button\">\n *         {state.type === \"idle\" ? \"Connect Apple Notes\" : \"Connecting...\"}\n *       </button>\n *       {state.type === \"awaiting_approval\" && (\n *         // Fallback link: if the browser blocked the approval popup, the user\n *         // can still open it manually instead of the flow silently hanging.\n *         <a href={state.request.approvalUrl} target=\"_blank\" rel=\"noreferrer\">\n *           {state.popupBlocked ? \"Popup blocked — open approval\" : \"Open approval\"}\n *         </a>\n *       )}\n *       {state.type === \"ready_to_open\" && (\n *         // Mobile deep Direct: render the HTTPS continuation as a primary tap.\n *         // The SDK keeps polling in this tab; if the tab is lost, restart.\n *         <a href={state.mobileContinuationUrl} target=\"_blank\" rel=\"noreferrer\">\n *           Open Vana\n *         </a>\n *       )}\n *     </div>\n *   );\n * }\n * ```\n *\n * @category Direct\n * @module react\n */\n\nexport {\n  useDirectVanaConnect,\n  type UseDirectVanaConnectOptions,\n  type UseDirectVanaConnectResult,\n} from \"./direct/use-direct-vana-connect\";\n\n// Zero-transport hook for a `createVanaConnectHandler` backend; presents\n// approval in Vana's in-page sheet by default.\nexport {\n  useVanaConnect,\n  type UseVanaConnectOptions,\n  type UseVanaConnectResult,\n} from \"./direct/use-vana-connect\";\nexport {\n  createVanaConnectTransports,\n  VanaConnectHttpError,\n  type VanaConnectConfig,\n  type VanaConnectTransportOptions,\n  type VanaConnectTransports,\n} from \"./connect/http-transports\";\nexport type {\n  ConnectCompletion,\n  ConnectEvent,\n  ConnectProgressPhase,\n  RequestAuthorization,\n  SheetErrorCode,\n} from \"./connect\";\n\n// Framework-agnostic store (usable without React).\nexport {\n  createDirectConnectFlow,\n  type DirectConnectPresentation,\n  type DirectConnectSheetOptions,\n  type DirectConnectSheetState,\n  type ConnectWindow,\n  type DirectBrowserPlatform,\n  type DirectBrowserPlatformPolicy,\n  type DirectConnectFlow,\n  type DirectConnectRetryOutcome,\n  type DirectConnectState,\n  type DirectConnectOptions,\n  type DirectConnectTransports,\n} from \"./direct/connect-flow\";\n\n// Shared types useful when typing the transports.\nexport type {\n  ForegroundDelivery,\n  AccessRequest,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n} from \"./direct/types\";\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgDA,qCAIO;AAIP,8BAIO;AACP,6BAMO;AAUP,0BAaO;","names":[]}

package/dist/react.d.ts

@@ -46,5 +46,8 @@
  * @module react
  */
 export { useDirectVanaConnect, type UseDirectVanaConnectOptions, type UseDirectVanaConnectResult, } from "./direct/use-direct-vana-connect.js";
-export { createDirectConnectFlow, type ConnectWindow, type DirectBrowserPlatform, type DirectBrowserPlatformPolicy, type DirectConnectFlow, type DirectConnectRetryOutcome, type DirectConnectState, type DirectConnectOptions, type DirectConnectTransports, } from "./direct/connect-flow.js";
+export { useVanaConnect, type UseVanaConnectOptions, type UseVanaConnectResult, } from "./direct/use-vana-connect.js";
+export { createVanaConnectTransports, VanaConnectHttpError, type VanaConnectConfig, type VanaConnectTransportOptions, type VanaConnectTransports, } from "./connect/http-transports.js";
+export type { ConnectCompletion, ConnectEvent, ConnectProgressPhase, RequestAuthorization, SheetErrorCode, } from "./connect.js";
+export { createDirectConnectFlow, type DirectConnectPresentation, type DirectConnectSheetOptions, type DirectConnectSheetState, type ConnectWindow, type DirectBrowserPlatform, type DirectBrowserPlatformPolicy, type DirectConnectFlow, type DirectConnectRetryOutcome, type DirectConnectState, type DirectConnectOptions, type DirectConnectTransports, } from "./direct/connect-flow.js";
 export type { ForegroundDelivery, AccessRequest, AccessRequestStatus, AccessRequestStatusValue, ApprovedDataResult, } from "./direct/types.js";

package/dist/react.js

@@ -1,11 +1,21 @@
 import {
   useDirectVanaConnect
 } from "./direct/use-direct-vana-connect.js";
+import {
+  useVanaConnect
+} from "./direct/use-vana-connect.js";
+import {
+  createVanaConnectTransports,
+  VanaConnectHttpError
+} from "./connect/http-transports.js";
 import {
   createDirectConnectFlow
 } from "./direct/connect-flow.js";
 export {
+  VanaConnectHttpError,
   createDirectConnectFlow,
-  useDirectVanaConnect
+  createVanaConnectTransports,
+  useDirectVanaConnect,
+  useVanaConnect
 };
 //# sourceMappingURL=react.js.map

package/dist/react.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/react.ts"],"sourcesContent":["/**\n * React entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link useDirectVanaConnect} (and the underlying framework-agnostic\n * connect-flow store) for browser apps. This entry point is browser-safe and\n * imports nothing Node-only. `react` is a peer dependency.\n *\n * @example\n * ```tsx\n * \"use client\";\n * import { useDirectVanaConnect } from \"@opendatalabs/vana-sdk/react\";\n *\n * export function ConnectNotesButton() {\n *   const connect = useDirectVanaConnect({\n *     createRequest: () => fetch(\"/api/vana/request\", { method: \"POST\" }).then((r) => r.json()),\n *     getStatus: (id) => fetch(`/api/vana/status?requestId=${id}`).then((r) => r.json()),\n *     readResult: (id) => fetch(`/api/vana/data?requestId=${id}`).then((r) => r.json()),\n *   });\n *   const { state, start } = connect;\n *   return (\n *     <div>\n *       <button disabled={state.type !== \"idle\"} onClick={start} type=\"button\">\n *         {state.type === \"idle\" ? \"Connect Apple Notes\" : \"Connecting...\"}\n *       </button>\n *       {state.type === \"awaiting_approval\" && (\n *         // Fallback link: if the browser blocked the approval popup, the user\n *         // can still open it manually instead of the flow silently hanging.\n *         <a href={state.request.approvalUrl} target=\"_blank\" rel=\"noreferrer\">\n *           {state.popupBlocked ? \"Popup blocked — open approval\" : \"Open approval\"}\n *         </a>\n *       )}\n *       {state.type === \"ready_to_open\" && (\n *         // Mobile deep Direct: render the HTTPS continuation as a primary tap.\n *         // The SDK keeps polling in this tab; if the tab is lost, restart.\n *         <a href={state.mobileContinuationUrl} target=\"_blank\" rel=\"noreferrer\">\n *           Open Vana\n *         </a>\n *       )}\n *     </div>\n *   );\n * }\n * ```\n *\n * @category Direct\n * @module react\n */\n\nexport {\n  useDirectVanaConnect,\n  type UseDirectVanaConnectOptions,\n  type UseDirectVanaConnectResult,\n} from \"./direct/use-direct-vana-connect\";\n\n// Framework-agnostic store (usable without React).\nexport {\n  createDirectConnectFlow,\n  type ConnectWindow,\n  type DirectBrowserPlatform,\n  type DirectBrowserPlatformPolicy,\n  type DirectConnectFlow,\n  type DirectConnectRetryOutcome,\n  type DirectConnectState,\n  type DirectConnectOptions,\n  type DirectConnectTransports,\n} from \"./direct/connect-flow\";\n\n// Shared types useful when typing the transports.\nexport type {\n  ForegroundDelivery,\n  AccessRequest,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n} from \"./direct/types\";\n"],"mappings":"AAgDA;AAAA,EACE;AAAA,OAGK;AAGP;AAAA,EACE;AAAA,OASK;","names":[]}
+{"version":3,"sources":["../src/react.ts"],"sourcesContent":["/**\n * React entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link useDirectVanaConnect} (and the underlying framework-agnostic\n * connect-flow store) for browser apps. This entry point is browser-safe and\n * imports nothing Node-only. `react` is a peer dependency.\n *\n * @example\n * ```tsx\n * \"use client\";\n * import { useDirectVanaConnect } from \"@opendatalabs/vana-sdk/react\";\n *\n * export function ConnectNotesButton() {\n *   const connect = useDirectVanaConnect({\n *     createRequest: () => fetch(\"/api/vana/request\", { method: \"POST\" }).then((r) => r.json()),\n *     getStatus: (id) => fetch(`/api/vana/status?requestId=${id}`).then((r) => r.json()),\n *     readResult: (id) => fetch(`/api/vana/data?requestId=${id}`).then((r) => r.json()),\n *   });\n *   const { state, start } = connect;\n *   return (\n *     <div>\n *       <button disabled={state.type !== \"idle\"} onClick={start} type=\"button\">\n *         {state.type === \"idle\" ? \"Connect Apple Notes\" : \"Connecting...\"}\n *       </button>\n *       {state.type === \"awaiting_approval\" && (\n *         // Fallback link: if the browser blocked the approval popup, the user\n *         // can still open it manually instead of the flow silently hanging.\n *         <a href={state.request.approvalUrl} target=\"_blank\" rel=\"noreferrer\">\n *           {state.popupBlocked ? \"Popup blocked — open approval\" : \"Open approval\"}\n *         </a>\n *       )}\n *       {state.type === \"ready_to_open\" && (\n *         // Mobile deep Direct: render the HTTPS continuation as a primary tap.\n *         // The SDK keeps polling in this tab; if the tab is lost, restart.\n *         <a href={state.mobileContinuationUrl} target=\"_blank\" rel=\"noreferrer\">\n *           Open Vana\n *         </a>\n *       )}\n *     </div>\n *   );\n * }\n * ```\n *\n * @category Direct\n * @module react\n */\n\nexport {\n  useDirectVanaConnect,\n  type UseDirectVanaConnectOptions,\n  type UseDirectVanaConnectResult,\n} from \"./direct/use-direct-vana-connect\";\n\n// Zero-transport hook for a `createVanaConnectHandler` backend; presents\n// approval in Vana's in-page sheet by default.\nexport {\n  useVanaConnect,\n  type UseVanaConnectOptions,\n  type UseVanaConnectResult,\n} from \"./direct/use-vana-connect\";\nexport {\n  createVanaConnectTransports,\n  VanaConnectHttpError,\n  type VanaConnectConfig,\n  type VanaConnectTransportOptions,\n  type VanaConnectTransports,\n} from \"./connect/http-transports\";\nexport type {\n  ConnectCompletion,\n  ConnectEvent,\n  ConnectProgressPhase,\n  RequestAuthorization,\n  SheetErrorCode,\n} from \"./connect\";\n\n// Framework-agnostic store (usable without React).\nexport {\n  createDirectConnectFlow,\n  type DirectConnectPresentation,\n  type DirectConnectSheetOptions,\n  type DirectConnectSheetState,\n  type ConnectWindow,\n  type DirectBrowserPlatform,\n  type DirectBrowserPlatformPolicy,\n  type DirectConnectFlow,\n  type DirectConnectRetryOutcome,\n  type DirectConnectState,\n  type DirectConnectOptions,\n  type DirectConnectTransports,\n} from \"./direct/connect-flow\";\n\n// Shared types useful when typing the transports.\nexport type {\n  ForegroundDelivery,\n  AccessRequest,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n} from \"./direct/types\";\n"],"mappings":"AAgDA;AAAA,EACE;AAAA,OAGK;AAIP;AAAA,EACE;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AAUP;AAAA,EACE;AAAA,OAYK;","names":[]}

package/dist/server.cjs

@@ -19,14 +19,19 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var server_exports = {};
 __export(server_exports, {
   AccessNotApprovedError: () => import_errors.AccessNotApprovedError,
+  CONNECT_BINDING_KEY_PURPOSE: () => import_connect_handler.CONNECT_BINDING_KEY_PURPOSE,
   DATA_ACCESS_OP_TYPE: () => import_escrow_payment.DATA_ACCESS_OP_TYPE,
   DEFAULT_TEST_CREDIT_BASE_URL: () => import_test_credit.DEFAULT_TEST_CREDIT_BASE_URL,
   DEV_ENDPOINTS: () => import_endpoints.DEV_ENDPOINTS,
+  DIRECT_CONNECT_CAPABILITIES: () => import_controller.DIRECT_CONNECT_CAPABILITIES,
   DirectConfigError: () => import_errors.DirectConfigError,
   DirectOpType: () => import_types.DirectOpType,
   EscrowBalanceTooLowError: () => import_errors.EscrowBalanceTooLowError,
   GRANT_OP_TYPE: () => import_escrow_payment.GRANT_OP_TYPE,
+  InvalidPdppGrantError: () => import_pdpp_scopes.InvalidPdppGrantError,
   InvalidScopeEntryError: () => import_scope_actions.InvalidScopeEntryError,
+  PDPP_SCOPE_NAMESPACE: () => import_pdpp_scopes.PDPP_SCOPE_NAMESPACE,
+  PDPP_SOURCE_ID_PREFIX: () => import_pdpp_scopes.PDPP_SOURCE_ID_PREFIX,
   PRODUCTION_ENDPOINTS: () => import_endpoints.PRODUCTION_ENDPOINTS,
   PaymentRequiredError: () => import_errors.PaymentRequiredError,
   PersonalServerReadError: () => import_errors.PersonalServerReadError,
@@ -34,40 +39,66 @@ __export(server_exports, {
   ScopeNotApprovedError: () => import_errors.ScopeNotApprovedError,
   ScopeSchema: () => import_scopes.ScopeSchema,
   TestCreditError: () => import_test_credit.TestCreditError,
+  VANA_ACCOUNT_ORIGINS: () => import_protocol.VANA_ACCOUNT_ORIGINS,
   authorizeEscrowPayment: () => import_escrow_payment.authorizeEscrowPayment,
   authorizeGrantPayment: () => import_escrow_payment.authorizeGrantPayment,
   buildApprovalUrl: () => import_access_request_client.buildApprovalUrl,
+  buildDirectAccessRequestAuthMessage: () => import_access_request_client.buildDirectAccessRequestAuthMessage,
   buildEscrowPaymentHeader: () => import_escrow_payment.buildEscrowPaymentHeader,
   buildGrantPaymentHeader: () => import_escrow_payment.buildGrantPaymentHeader,
   buildPersonalServerDataReadRequest: () => import_personal_server_read.buildPersonalServerDataReadRequest,
+  buildRequestReadAuthorizationMessage: () => import_request_authorization.buildRequestReadAuthorizationMessage,
+  connectBindingCookieName: () => import_connect_handler.connectBindingCookieName,
   createDefaultAccessRequestClient: () => import_access_request_client.createDefaultAccessRequestClient,
   createDefaultNonceSource: () => import_escrow_payment.createDefaultNonceSource,
   createDirectDataController: () => import_controller.createDirectDataController,
+  createMemoryRateLimit: () => import_connect_handler.createMemoryRateLimit,
+  createVanaConnectHandler: () => import_connect_handler.createVanaConnectHandler,
   dataPathForScope: () => import_personal_server_read.dataPathForScope,
+  defaultClientIp: () => import_connect_handler.defaultClientIp,
   findLiveGrant: () => import_grant_union.findLiveGrant,
   formatScopeEntry: () => import_scope_actions.formatScopeEntry,
   getDirectEndpoints: () => import_endpoints.getDirectEndpoints,
   grantPermissions: () => import_scope_actions.grantPermissions,
+  grantRequestScopes: () => import_pdpp_scopes.grantRequestScopes,
   hasAction: () => import_scope_actions.hasAction,
+  isConnectCapableController: () => import_controller.isConnectCapableController,
+  isPdppScopeKey: () => import_pdpp_scopes.isPdppScopeKey,
+  isRequestId: () => import_protocol.isRequestId,
   liveGrantScopes: () => import_grant_union.liveGrantScopes,
   mergeWithLiveGrant: () => import_grant_union.mergeWithLiveGrant,
+  missingConnectCapabilities: () => import_controller.missingConnectCapabilities,
+  parseOriginAllowlist: () => import_account_origin.parseOriginAllowlist,
+  parsePdppScopeKey: () => import_pdpp_scopes.parsePdppScopeKey,
   parsePersonalServerPaymentRequired: () => import_personal_server_read.parsePersonalServerPaymentRequired,
   parseScope: () => import_scopes.parseScope,
   parseScopeEntry: () => import_scope_actions.parseScopeEntry,
   paymentResponseMetadataFromHeader: () => import_escrow_payment.paymentResponseMetadataFromHeader,
+  pdppGrantsToScopes: () => import_pdpp_scopes.pdppGrantsToScopes,
+  pdppScopeKey: () => import_pdpp_scopes.pdppScopeKey,
   permissionsToScopes: () => import_scope_actions.permissionsToScopes,
+  readConnectRequest: () => import_protocol.readConnectRequest,
   readPersonalServerData: () => import_personal_server_read.readPersonalServerData,
+  requestReadPath: () => import_request_authorization.requestReadPath,
   requestTestCredit: () => import_test_credit.requestTestCredit,
+  resolveVanaAccountOrigin: () => import_account_origin.resolveVanaAccountOrigin,
   scopeCoveredByGrant: () => import_scopes.scopeCoveredByGrant,
   scopeMatchesPattern: () => import_scopes.scopeMatchesPattern,
+  signRequestReadAuthorization: () => import_request_authorization.signRequestReadAuthorization,
   toDirectFeeBreakdown: () => import_escrow_payment.toDirectFeeBreakdown,
   toDirectPaymentReceipt: () => import_escrow_payment.toDirectPaymentReceipt,
+  toNodeHandler: () => import_connect_handler.toNodeHandler,
   tryGrantPermissions: () => import_scope_actions.tryGrantPermissions,
   unionGrantScopes: () => import_grant_union.unionGrantScopes,
-  validateAccessRequestQuestions: () => import_access_request_client.validateAccessRequestQuestions
+  validateAccessRequestQuestions: () => import_access_request_client.validateAccessRequestQuestions,
+  vanaConnectCsp: () => import_protocol.vanaConnectCsp
 });
 module.exports = __toCommonJS(server_exports);
 var import_controller = require("./direct/controller");
+var import_connect_handler = require("./direct/connect-handler");
+var import_request_authorization = require("./direct/request-authorization");
+var import_protocol = require("./connect/protocol");
+var import_account_origin = require("./connect/account-origin");
 var import_access_request_client = require("./direct/access-request-client");
 var import_grant_union = require("./direct/grant-union");
 var import_personal_server_read = require("./direct/personal-server-read");
@@ -75,20 +106,26 @@ var import_escrow_payment = require("./direct/escrow-payment");
 var import_endpoints = require("./direct/endpoints");
 var import_scopes = require("./protocol/scopes");
 var import_scope_actions = require("./protocol/scope-actions");
+var import_pdpp_scopes = require("./protocol/pdpp-scopes");
 var import_errors = require("./direct/errors");
 var import_test_credit = require("./direct/test-credit");
 var import_types = require("./direct/types");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AccessNotApprovedError,
+  CONNECT_BINDING_KEY_PURPOSE,
   DATA_ACCESS_OP_TYPE,
   DEFAULT_TEST_CREDIT_BASE_URL,
   DEV_ENDPOINTS,
+  DIRECT_CONNECT_CAPABILITIES,
   DirectConfigError,
   DirectOpType,
   EscrowBalanceTooLowError,
   GRANT_OP_TYPE,
+  InvalidPdppGrantError,
   InvalidScopeEntryError,
+  PDPP_SCOPE_NAMESPACE,
+  PDPP_SOURCE_ID_PREFIX,
   PRODUCTION_ENDPOINTS,
   PaymentRequiredError,
   PersonalServerReadError,
@@ -96,36 +133,58 @@ var import_types = require("./direct/types");
   ScopeNotApprovedError,
   ScopeSchema,
   TestCreditError,
+  VANA_ACCOUNT_ORIGINS,
   authorizeEscrowPayment,
   authorizeGrantPayment,
   buildApprovalUrl,
+  buildDirectAccessRequestAuthMessage,
   buildEscrowPaymentHeader,
   buildGrantPaymentHeader,
   buildPersonalServerDataReadRequest,
+  buildRequestReadAuthorizationMessage,
+  connectBindingCookieName,
   createDefaultAccessRequestClient,
   createDefaultNonceSource,
   createDirectDataController,
+  createMemoryRateLimit,
+  createVanaConnectHandler,
   dataPathForScope,
+  defaultClientIp,
   findLiveGrant,
   formatScopeEntry,
   getDirectEndpoints,
   grantPermissions,
+  grantRequestScopes,
   hasAction,
+  isConnectCapableController,
+  isPdppScopeKey,
+  isRequestId,
   liveGrantScopes,
   mergeWithLiveGrant,
+  missingConnectCapabilities,
+  parseOriginAllowlist,
+  parsePdppScopeKey,
   parsePersonalServerPaymentRequired,
   parseScope,
   parseScopeEntry,
   paymentResponseMetadataFromHeader,
+  pdppGrantsToScopes,
+  pdppScopeKey,
   permissionsToScopes,
+  readConnectRequest,
   readPersonalServerData,
+  requestReadPath,
   requestTestCredit,
+  resolveVanaAccountOrigin,
   scopeCoveredByGrant,
   scopeMatchesPattern,
+  signRequestReadAuthorization,
   toDirectFeeBreakdown,
   toDirectPaymentReceipt,
+  toNodeHandler,
   tryGrantPermissions,
   unionGrantScopes,
-  validateAccessRequestQuestions
+  validateAccessRequestQuestions,
+  vanaConnectCsp
 });
 //# sourceMappingURL=server.cjs.map

package/dist/server.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link createDirectDataController} and its supporting types/errors.\n * This is a Node/server entry point — it owns the app private key and must never\n * be imported into browser code.\n *\n * @example\n * ```typescript\n * import { createDirectDataController } from \"@opendatalabs/vana-sdk/server\";\n *\n * export const vana = createDirectDataController({\n *   env: process.env.VANA_ENV === \"dev\" ? \"dev\" : \"production\",\n *   appPrivateKey: process.env.VANA_APP_PRIVATE_KEY!,\n *   app: { id: \"notes-lens\", name: \"Notes Lens\", homepageUrl: process.env.VANA_APP_URL! },\n *   source: \"icloud_notes\",\n *   scopes: [\"icloud_notes.notes\"],\n * });\n * ```\n *\n * @category Direct\n * @module server\n */\n\nexport {\n  createDirectDataController,\n  type DirectDataController,\n  type DirectDataControllerConfig,\n  type DirectEscrowConfig,\n} from \"./direct/controller\";\n\n// Lower-level building blocks (advanced use / custom transports).\nexport {\n  createDefaultAccessRequestClient,\n  buildApprovalUrl,\n  validateAccessRequestQuestions,\n  type DefaultAccessRequestClientOptions,\n  type FetchLike,\n} from \"./direct/access-request-client\";\n// Grant union: extend the owner's live grant instead of replacing it.\nexport {\n  mergeWithLiveGrant,\n  liveGrantScopes,\n  findLiveGrant,\n  unionGrantScopes,\n  type GrantUnion,\n  type GrantUnionGateway,\n  type GrantUnionStatus,\n  type MergeWithLiveGrantInput,\n  type MergeWithLiveGrantResult,\n} from \"./direct/grant-union\";\nexport {\n  buildPersonalServerDataReadRequest,\n  readPersonalServerData,\n  parsePersonalServerPaymentRequired,\n  dataPathForScope,\n  type PersonalServerDataReadRequest,\n  type PersonalServerReadResult,\n  type PersonalServerFetch,\n  type PersonalServerTransportRetryOptions,\n  type FetchResponseLike,\n} from \"./direct/personal-server-read\";\n// Escrow-backed payment (built on protocol/escrow).\nexport {\n  authorizeEscrowPayment,\n  authorizeGrantPayment,\n  buildEscrowPaymentHeader,\n  buildGrantPaymentHeader,\n  paymentResponseMetadataFromHeader,\n  toDirectPaymentReceipt,\n  toDirectFeeBreakdown,\n  createDefaultNonceSource,\n  DATA_ACCESS_OP_TYPE,\n  GRANT_OP_TYPE,\n  type EscrowPaymentConfig,\n  type EscrowPaymentHeaderConfig,\n  type SignTypedDataFn,\n  type PaymentNonceSource,\n} from \"./direct/escrow-payment\";\nexport {\n  getDirectEndpoints,\n  PRODUCTION_ENDPOINTS,\n  DEV_ENDPOINTS,\n} from \"./direct/endpoints\";\n// Grant scope entries: the `[operation:]scope` vocabulary the controller's\n// `scopes` are written in, so a backend can build and read them without\n// reaching for a platform entry point.\nexport {\n  ScopeSchema,\n  parseScope,\n  scopeMatchesPattern,\n  scopeCoveredByGrant,\n  type Scope,\n  type ParsedScope,\n} from \"./protocol/scopes\";\nexport {\n  SCOPE_ACTIONS,\n  InvalidScopeEntryError,\n  parseScopeEntry,\n  formatScopeEntry,\n  grantPermissions,\n  permissionsToScopes,\n  tryGrantPermissions,\n  hasAction,\n  type ScopeAction,\n  type ParsedScopeEntry,\n  type GrantPermission,\n} from \"./protocol/scope-actions\";\n\n// Errors\nexport {\n  DirectConfigError,\n  AccessNotApprovedError,\n  ScopeNotApprovedError,\n  PersonalServerReadError,\n  PaymentRequiredError,\n  EscrowBalanceTooLowError,\n} from \"./direct/errors\";\nexport {\n  requestTestCredit,\n  TestCreditError,\n  DEFAULT_TEST_CREDIT_BASE_URL,\n  type TestCreditResult,\n  type TestCreditOperation,\n  type RequestTestCreditOptions,\n} from \"./direct/test-credit\";\n\n// Shared types\nexport type {\n  DirectEnv,\n  DirectNetwork,\n  DirectAppConfig,\n  ForegroundDelivery,\n  AppIdentity,\n  DirectServiceEndpoints,\n  AccessRequest,\n  AccessRequestGrantUnion,\n  AccessRequestQuestion,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n  MultiScopeDataResult,\n  AccessRequestClient,\n  DirectOpTypeValue,\n  PersonalServerDataAccessPaymentOperation,\n  PersonalServerGrantPaymentOperation,\n  PersonalServerPaymentOperation,\n  PersonalServerPaymentRequired,\n  DirectPaymentReceipt,\n  DirectPaymentResponseMetadata,\n  DirectFeeBreakdown,\n} from \"./direct/types\";\n\n// Op-type vocabulary constant.\nexport { DirectOpType } from \"./direct/types\";\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAyBA,wBAKO;AAGP,mCAMO;AAEP,yBAUO;AACP,kCAUO;AAEP,4BAeO;AACP,uBAIO;AAIP,oBAOO;AACP,2BAYO;AAGP,oBAOO;AACP,yBAOO;AA6BP,mBAA6B;","names":[]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link createDirectDataController} and its supporting types/errors.\n * This is a Node/server entry point — it owns the app private key and must never\n * be imported into browser code.\n *\n * @example\n * ```typescript\n * import { createDirectDataController } from \"@opendatalabs/vana-sdk/server\";\n *\n * export const vana = createDirectDataController({\n *   env: process.env.VANA_ENV === \"dev\" ? \"dev\" : \"production\",\n *   appPrivateKey: process.env.VANA_APP_PRIVATE_KEY!,\n *   app: { id: \"notes-lens\", name: \"Notes Lens\", homepageUrl: process.env.VANA_APP_URL! },\n *   source: \"chatgpt\",\n *   // PDPP grants; each stream is requested as `pdpp.<source>.<stream>`.\n *   grants: [\n *     {\n *       source_id: \"https://registry.pdpp.dev/sources/chatgpt\",\n *       streams: [\"conversations\", \"messages\"],\n *     },\n *   ],\n *   // Legacy `scopes` entries are still accepted, alone or with `grants`.\n * });\n * ```\n *\n * @category Direct\n * @module server\n */\n\nexport {\n  createDirectDataController,\n  isConnectCapableController,\n  missingConnectCapabilities,\n  DIRECT_CONNECT_CAPABILITIES,\n  type ConnectCapableDirectDataController,\n  type DirectConnectCapabilities,\n  type DirectDataController,\n  type DirectDataControllerConfig,\n  type DirectEscrowConfig,\n} from \"./direct/controller\";\n\n// Embedded connect sheet: one handler for config/request/status/data, and\n// the read capability the sheet asks for.\nexport {\n  createVanaConnectHandler,\n  toNodeHandler,\n  connectBindingCookieName,\n  CONNECT_BINDING_KEY_PURPOSE,\n  createMemoryRateLimit,\n  defaultClientIp,\n  type MemoryRateLimitOptions,\n  type VanaConnectRateLimit,\n  type VanaConnectRateLimitDecision,\n  type VanaConnectHandler,\n  type VanaConnectHandlerOptions,\n  type VanaConnectCreateOptions,\n  type VanaConnectErrorCode,\n  type VanaConnectConfig,\n  type NodeRequestLike,\n  type NodeResponseLike,\n  type ToNodeHandlerOptions,\n} from \"./direct/connect-handler\";\nexport {\n  signRequestReadAuthorization,\n  buildRequestReadAuthorizationMessage,\n  requestReadPath,\n  type SignRequestReadAuthorizationInput,\n} from \"./direct/request-authorization\";\nexport {\n  vanaConnectCsp,\n  VANA_ACCOUNT_ORIGINS,\n  isRequestId,\n  readConnectRequest,\n  type ConnectRequest,\n  type RequestAuthorization,\n  type VanaConnectEnv,\n} from \"./connect/protocol\";\nexport {\n  parseOriginAllowlist,\n  resolveVanaAccountOrigin,\n  type ResolveVanaAccountOriginInput,\n} from \"./connect/account-origin\";\n\n// Lower-level building blocks (advanced use / custom transports).\nexport {\n  createDefaultAccessRequestClient,\n  buildApprovalUrl,\n  validateAccessRequestQuestions,\n  buildDirectAccessRequestAuthMessage,\n  type DefaultAccessRequestClientOptions,\n  type FetchLike,\n} from \"./direct/access-request-client\";\n// Grant union: extend the owner's live grant instead of replacing it.\nexport {\n  mergeWithLiveGrant,\n  liveGrantScopes,\n  findLiveGrant,\n  unionGrantScopes,\n  type GrantUnion,\n  type GrantUnionGateway,\n  type GrantUnionStatus,\n  type MergeWithLiveGrantInput,\n  type MergeWithLiveGrantResult,\n} from \"./direct/grant-union\";\nexport {\n  buildPersonalServerDataReadRequest,\n  readPersonalServerData,\n  parsePersonalServerPaymentRequired,\n  dataPathForScope,\n  type PersonalServerDataReadRequest,\n  type PersonalServerReadResult,\n  type PersonalServerFetch,\n  type PersonalServerTransportRetryOptions,\n  type FetchResponseLike,\n} from \"./direct/personal-server-read\";\n// Escrow-backed payment (built on protocol/escrow).\nexport {\n  authorizeEscrowPayment,\n  authorizeGrantPayment,\n  buildEscrowPaymentHeader,\n  buildGrantPaymentHeader,\n  paymentResponseMetadataFromHeader,\n  toDirectPaymentReceipt,\n  toDirectFeeBreakdown,\n  createDefaultNonceSource,\n  DATA_ACCESS_OP_TYPE,\n  GRANT_OP_TYPE,\n  type EscrowPaymentConfig,\n  type EscrowPaymentHeaderConfig,\n  type SignTypedDataFn,\n  type PaymentNonceSource,\n} from \"./direct/escrow-payment\";\nexport {\n  getDirectEndpoints,\n  PRODUCTION_ENDPOINTS,\n  DEV_ENDPOINTS,\n} from \"./direct/endpoints\";\n// Grant scope entries: the `[operation:]scope` vocabulary the controller's\n// `scopes` are written in, and the PDPP grant -> scope key mapping its\n// `grants` use, so a backend can build and read them without reaching for a\n// platform entry point.\nexport {\n  ScopeSchema,\n  parseScope,\n  scopeMatchesPattern,\n  scopeCoveredByGrant,\n  type Scope,\n  type ParsedScope,\n} from \"./protocol/scopes\";\nexport {\n  SCOPE_ACTIONS,\n  InvalidScopeEntryError,\n  parseScopeEntry,\n  formatScopeEntry,\n  grantPermissions,\n  permissionsToScopes,\n  tryGrantPermissions,\n  hasAction,\n  type ScopeAction,\n  type ParsedScopeEntry,\n  type GrantPermission,\n} from \"./protocol/scope-actions\";\nexport {\n  PDPP_SCOPE_NAMESPACE,\n  PDPP_SOURCE_ID_PREFIX,\n  InvalidPdppGrantError,\n  pdppScopeKey,\n  parsePdppScopeKey,\n  isPdppScopeKey,\n  pdppGrantsToScopes,\n  grantRequestScopes,\n  type PdppGrant,\n  type PdppScopeKeyParts,\n} from \"./protocol/pdpp-scopes\";\n\n// Errors\nexport {\n  DirectConfigError,\n  AccessNotApprovedError,\n  ScopeNotApprovedError,\n  PersonalServerReadError,\n  PaymentRequiredError,\n  EscrowBalanceTooLowError,\n} from \"./direct/errors\";\nexport {\n  requestTestCredit,\n  TestCreditError,\n  DEFAULT_TEST_CREDIT_BASE_URL,\n  type TestCreditResult,\n  type TestCreditOperation,\n  type RequestTestCreditOptions,\n} from \"./direct/test-credit\";\n\n// Shared types\nexport type {\n  DirectEnv,\n  DirectNetwork,\n  DirectAppConfig,\n  ForegroundDelivery,\n  AppIdentity,\n  DirectServiceEndpoints,\n  AccessRequest,\n  AccessRequestGrantUnion,\n  AccessRequestQuestion,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n  MultiScopeDataResult,\n  AccessRequestClient,\n  DirectOpTypeValue,\n  PersonalServerDataAccessPaymentOperation,\n  PersonalServerGrantPaymentOperation,\n  PersonalServerPaymentOperation,\n  PersonalServerPaymentRequired,\n  DirectPaymentReceipt,\n  DirectPaymentResponseMetadata,\n  DirectFeeBreakdown,\n} from \"./direct/types\";\n\n// Op-type vocabulary constant.\nexport { DirectOpType } from \"./direct/types\";\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgCA,wBAUO;AAIP,6BAkBO;AACP,mCAKO;AACP,sBAQO;AACP,4BAIO;AAGP,mCAOO;AAEP,yBAUO;AACP,kCAUO;AAEP,4BAeO;AACP,uBAIO;AAKP,oBAOO;AACP,2BAYO;AACP,yBAWO;AAGP,oBAOO;AACP,yBAOO;AA6BP,mBAA6B;","names":[]}

package/dist/server.d.ts

@@ -14,22 +14,34 @@
  *   env: process.env.VANA_ENV === "dev" ? "dev" : "production",
  *   appPrivateKey: process.env.VANA_APP_PRIVATE_KEY!,
  *   app: { id: "notes-lens", name: "Notes Lens", homepageUrl: process.env.VANA_APP_URL! },
- *   source: "icloud_notes",
- *   scopes: ["icloud_notes.notes"],
+ *   source: "chatgpt",
+ *   // PDPP grants; each stream is requested as `pdpp.<source>.<stream>`.
+ *   grants: [
+ *     {
+ *       source_id: "https://registry.pdpp.dev/sources/chatgpt",
+ *       streams: ["conversations", "messages"],
+ *     },
+ *   ],
+ *   // Legacy `scopes` entries are still accepted, alone or with `grants`.
  * });
  * ```
  *
  * @category Direct
  * @module server
  */
-export { createDirectDataController, type DirectDataController, type DirectDataControllerConfig, type DirectEscrowConfig, } from "./direct/controller.js";
-export { createDefaultAccessRequestClient, buildApprovalUrl, validateAccessRequestQuestions, type DefaultAccessRequestClientOptions, type FetchLike, } from "./direct/access-request-client.js";
+export { createDirectDataController, isConnectCapableController, missingConnectCapabilities, DIRECT_CONNECT_CAPABILITIES, type ConnectCapableDirectDataController, type DirectConnectCapabilities, type DirectDataController, type DirectDataControllerConfig, type DirectEscrowConfig, } from "./direct/controller.js";
+export { createVanaConnectHandler, toNodeHandler, connectBindingCookieName, CONNECT_BINDING_KEY_PURPOSE, createMemoryRateLimit, defaultClientIp, type MemoryRateLimitOptions, type VanaConnectRateLimit, type VanaConnectRateLimitDecision, type VanaConnectHandler, type VanaConnectHandlerOptions, type VanaConnectCreateOptions, type VanaConnectErrorCode, type VanaConnectConfig, type NodeRequestLike, type NodeResponseLike, type ToNodeHandlerOptions, } from "./direct/connect-handler.js";
+export { signRequestReadAuthorization, buildRequestReadAuthorizationMessage, requestReadPath, type SignRequestReadAuthorizationInput, } from "./direct/request-authorization.js";
+export { vanaConnectCsp, VANA_ACCOUNT_ORIGINS, isRequestId, readConnectRequest, type ConnectRequest, type RequestAuthorization, type VanaConnectEnv, } from "./connect/protocol.js";
+export { parseOriginAllowlist, resolveVanaAccountOrigin, type ResolveVanaAccountOriginInput, } from "./connect/account-origin.js";
+export { createDefaultAccessRequestClient, buildApprovalUrl, validateAccessRequestQuestions, buildDirectAccessRequestAuthMessage, type DefaultAccessRequestClientOptions, type FetchLike, } from "./direct/access-request-client.js";
 export { mergeWithLiveGrant, liveGrantScopes, findLiveGrant, unionGrantScopes, type GrantUnion, type GrantUnionGateway, type GrantUnionStatus, type MergeWithLiveGrantInput, type MergeWithLiveGrantResult, } from "./direct/grant-union.js";
 export { buildPersonalServerDataReadRequest, readPersonalServerData, parsePersonalServerPaymentRequired, dataPathForScope, type PersonalServerDataReadRequest, type PersonalServerReadResult, type PersonalServerFetch, type PersonalServerTransportRetryOptions, type FetchResponseLike, } from "./direct/personal-server-read.js";
 export { authorizeEscrowPayment, authorizeGrantPayment, buildEscrowPaymentHeader, buildGrantPaymentHeader, paymentResponseMetadataFromHeader, toDirectPaymentReceipt, toDirectFeeBreakdown, createDefaultNonceSource, DATA_ACCESS_OP_TYPE, GRANT_OP_TYPE, type EscrowPaymentConfig, type EscrowPaymentHeaderConfig, type SignTypedDataFn, type PaymentNonceSource, } from "./direct/escrow-payment.js";
 export { getDirectEndpoints, PRODUCTION_ENDPOINTS, DEV_ENDPOINTS, } from "./direct/endpoints.js";
 export { ScopeSchema, parseScope, scopeMatchesPattern, scopeCoveredByGrant, type Scope, type ParsedScope, } from "./protocol/scopes.js";
 export { SCOPE_ACTIONS, InvalidScopeEntryError, parseScopeEntry, formatScopeEntry, grantPermissions, permissionsToScopes, tryGrantPermissions, hasAction, type ScopeAction, type ParsedScopeEntry, type GrantPermission, } from "./protocol/scope-actions.js";
+export { PDPP_SCOPE_NAMESPACE, PDPP_SOURCE_ID_PREFIX, InvalidPdppGrantError, pdppScopeKey, parsePdppScopeKey, isPdppScopeKey, pdppGrantsToScopes, grantRequestScopes, type PdppGrant, type PdppScopeKeyParts, } from "./protocol/pdpp-scopes.js";
 export { DirectConfigError, AccessNotApprovedError, ScopeNotApprovedError, PersonalServerReadError, PaymentRequiredError, EscrowBalanceTooLowError, } from "./direct/errors.js";
 export { requestTestCredit, TestCreditError, DEFAULT_TEST_CREDIT_BASE_URL, type TestCreditResult, type TestCreditOperation, type RequestTestCreditOptions, } from "./direct/test-credit.js";
 export type { DirectEnv, DirectNetwork, DirectAppConfig, ForegroundDelivery, AppIdentity, DirectServiceEndpoints, AccessRequest, AccessRequestGrantUnion, AccessRequestQuestion, AccessRequestStatus, AccessRequestStatusValue, ApprovedDataResult, MultiScopeDataResult, AccessRequestClient, DirectOpTypeValue, PersonalServerDataAccessPaymentOperation, PersonalServerGrantPaymentOperation, PersonalServerPaymentOperation, PersonalServerPaymentRequired, DirectPaymentReceipt, DirectPaymentResponseMetadata, DirectFeeBreakdown, } from "./direct/types.js";

package/dist/server.js

@@ -1,10 +1,37 @@
 import {
-  createDirectDataController
+  createDirectDataController,
+  isConnectCapableController,
+  missingConnectCapabilities,
+  DIRECT_CONNECT_CAPABILITIES
 } from "./direct/controller.js";
+import {
+  createVanaConnectHandler,
+  toNodeHandler,
+  connectBindingCookieName,
+  CONNECT_BINDING_KEY_PURPOSE,
+  createMemoryRateLimit,
+  defaultClientIp
+} from "./direct/connect-handler.js";
+import {
+  signRequestReadAuthorization,
+  buildRequestReadAuthorizationMessage,
+  requestReadPath
+} from "./direct/request-authorization.js";
+import {
+  vanaConnectCsp,
+  VANA_ACCOUNT_ORIGINS,
+  isRequestId,
+  readConnectRequest
+} from "./connect/protocol.js";
+import {
+  parseOriginAllowlist,
+  resolveVanaAccountOrigin
+} from "./connect/account-origin.js";
 import {
   createDefaultAccessRequestClient,
   buildApprovalUrl,
-  validateAccessRequestQuestions
+  validateAccessRequestQuestions,
+  buildDirectAccessRequestAuthMessage
 } from "./direct/access-request-client.js";
 import {
   mergeWithLiveGrant,
@@ -51,6 +78,16 @@ import {
   tryGrantPermissions,
   hasAction
 } from "./protocol/scope-actions.js";
+import {
+  PDPP_SCOPE_NAMESPACE,
+  PDPP_SOURCE_ID_PREFIX,
+  InvalidPdppGrantError,
+  pdppScopeKey,
+  parsePdppScopeKey,
+  isPdppScopeKey,
+  pdppGrantsToScopes,
+  grantRequestScopes
+} from "./protocol/pdpp-scopes.js";
 import {
   DirectConfigError,
   AccessNotApprovedError,
@@ -67,14 +104,19 @@ import {
 import { DirectOpType } from "./direct/types.js";
 export {
   AccessNotApprovedError,
+  CONNECT_BINDING_KEY_PURPOSE,
   DATA_ACCESS_OP_TYPE,
   DEFAULT_TEST_CREDIT_BASE_URL,
   DEV_ENDPOINTS,
+  DIRECT_CONNECT_CAPABILITIES,
   DirectConfigError,
   DirectOpType,
   EscrowBalanceTooLowError,
   GRANT_OP_TYPE,
+  InvalidPdppGrantError,
   InvalidScopeEntryError,
+  PDPP_SCOPE_NAMESPACE,
+  PDPP_SOURCE_ID_PREFIX,
   PRODUCTION_ENDPOINTS,
   PaymentRequiredError,
   PersonalServerReadError,
@@ -82,36 +124,58 @@ export {
   ScopeNotApprovedError,
   ScopeSchema,
   TestCreditError,
+  VANA_ACCOUNT_ORIGINS,
   authorizeEscrowPayment,
   authorizeGrantPayment,
   buildApprovalUrl,
+  buildDirectAccessRequestAuthMessage,
   buildEscrowPaymentHeader,
   buildGrantPaymentHeader,
   buildPersonalServerDataReadRequest,
+  buildRequestReadAuthorizationMessage,
+  connectBindingCookieName,
   createDefaultAccessRequestClient,
   createDefaultNonceSource,
   createDirectDataController,
+  createMemoryRateLimit,
+  createVanaConnectHandler,
   dataPathForScope,
+  defaultClientIp,
   findLiveGrant,
   formatScopeEntry,
   getDirectEndpoints,
   grantPermissions,
+  grantRequestScopes,
   hasAction,
+  isConnectCapableController,
+  isPdppScopeKey,
+  isRequestId,
   liveGrantScopes,
   mergeWithLiveGrant,
+  missingConnectCapabilities,
+  parseOriginAllowlist,
+  parsePdppScopeKey,
   parsePersonalServerPaymentRequired,
   parseScope,
   parseScopeEntry,
   paymentResponseMetadataFromHeader,
+  pdppGrantsToScopes,
+  pdppScopeKey,
   permissionsToScopes,
+  readConnectRequest,
   readPersonalServerData,
+  requestReadPath,
   requestTestCredit,
+  resolveVanaAccountOrigin,
   scopeCoveredByGrant,
   scopeMatchesPattern,
+  signRequestReadAuthorization,
   toDirectFeeBreakdown,
   toDirectPaymentReceipt,
+  toNodeHandler,
   tryGrantPermissions,
   unionGrantScopes,
-  validateAccessRequestQuestions
+  validateAccessRequestQuestions,
+  vanaConnectCsp
 };
 //# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link createDirectDataController} and its supporting types/errors.\n * This is a Node/server entry point — it owns the app private key and must never\n * be imported into browser code.\n *\n * @example\n * ```typescript\n * import { createDirectDataController } from \"@opendatalabs/vana-sdk/server\";\n *\n * export const vana = createDirectDataController({\n *   env: process.env.VANA_ENV === \"dev\" ? \"dev\" : \"production\",\n *   appPrivateKey: process.env.VANA_APP_PRIVATE_KEY!,\n *   app: { id: \"notes-lens\", name: \"Notes Lens\", homepageUrl: process.env.VANA_APP_URL! },\n *   source: \"icloud_notes\",\n *   scopes: [\"icloud_notes.notes\"],\n * });\n * ```\n *\n * @category Direct\n * @module server\n */\n\nexport {\n  createDirectDataController,\n  type DirectDataController,\n  type DirectDataControllerConfig,\n  type DirectEscrowConfig,\n} from \"./direct/controller\";\n\n// Lower-level building blocks (advanced use / custom transports).\nexport {\n  createDefaultAccessRequestClient,\n  buildApprovalUrl,\n  validateAccessRequestQuestions,\n  type DefaultAccessRequestClientOptions,\n  type FetchLike,\n} from \"./direct/access-request-client\";\n// Grant union: extend the owner's live grant instead of replacing it.\nexport {\n  mergeWithLiveGrant,\n  liveGrantScopes,\n  findLiveGrant,\n  unionGrantScopes,\n  type GrantUnion,\n  type GrantUnionGateway,\n  type GrantUnionStatus,\n  type MergeWithLiveGrantInput,\n  type MergeWithLiveGrantResult,\n} from \"./direct/grant-union\";\nexport {\n  buildPersonalServerDataReadRequest,\n  readPersonalServerData,\n  parsePersonalServerPaymentRequired,\n  dataPathForScope,\n  type PersonalServerDataReadRequest,\n  type PersonalServerReadResult,\n  type PersonalServerFetch,\n  type PersonalServerTransportRetryOptions,\n  type FetchResponseLike,\n} from \"./direct/personal-server-read\";\n// Escrow-backed payment (built on protocol/escrow).\nexport {\n  authorizeEscrowPayment,\n  authorizeGrantPayment,\n  buildEscrowPaymentHeader,\n  buildGrantPaymentHeader,\n  paymentResponseMetadataFromHeader,\n  toDirectPaymentReceipt,\n  toDirectFeeBreakdown,\n  createDefaultNonceSource,\n  DATA_ACCESS_OP_TYPE,\n  GRANT_OP_TYPE,\n  type EscrowPaymentConfig,\n  type EscrowPaymentHeaderConfig,\n  type SignTypedDataFn,\n  type PaymentNonceSource,\n} from \"./direct/escrow-payment\";\nexport {\n  getDirectEndpoints,\n  PRODUCTION_ENDPOINTS,\n  DEV_ENDPOINTS,\n} from \"./direct/endpoints\";\n// Grant scope entries: the `[operation:]scope` vocabulary the controller's\n// `scopes` are written in, so a backend can build and read them without\n// reaching for a platform entry point.\nexport {\n  ScopeSchema,\n  parseScope,\n  scopeMatchesPattern,\n  scopeCoveredByGrant,\n  type Scope,\n  type ParsedScope,\n} from \"./protocol/scopes\";\nexport {\n  SCOPE_ACTIONS,\n  InvalidScopeEntryError,\n  parseScopeEntry,\n  formatScopeEntry,\n  grantPermissions,\n  permissionsToScopes,\n  tryGrantPermissions,\n  hasAction,\n  type ScopeAction,\n  type ParsedScopeEntry,\n  type GrantPermission,\n} from \"./protocol/scope-actions\";\n\n// Errors\nexport {\n  DirectConfigError,\n  AccessNotApprovedError,\n  ScopeNotApprovedError,\n  PersonalServerReadError,\n  PaymentRequiredError,\n  EscrowBalanceTooLowError,\n} from \"./direct/errors\";\nexport {\n  requestTestCredit,\n  TestCreditError,\n  DEFAULT_TEST_CREDIT_BASE_URL,\n  type TestCreditResult,\n  type TestCreditOperation,\n  type RequestTestCreditOptions,\n} from \"./direct/test-credit\";\n\n// Shared types\nexport type {\n  DirectEnv,\n  DirectNetwork,\n  DirectAppConfig,\n  ForegroundDelivery,\n  AppIdentity,\n  DirectServiceEndpoints,\n  AccessRequest,\n  AccessRequestGrantUnion,\n  AccessRequestQuestion,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n  MultiScopeDataResult,\n  AccessRequestClient,\n  DirectOpTypeValue,\n  PersonalServerDataAccessPaymentOperation,\n  PersonalServerGrantPaymentOperation,\n  PersonalServerPaymentOperation,\n  PersonalServerPaymentRequired,\n  DirectPaymentReceipt,\n  DirectPaymentResponseMetadata,\n  DirectFeeBreakdown,\n} from \"./direct/types\";\n\n// Op-type vocabulary constant.\nexport { DirectOpType } from \"./direct/types\";\n"],"mappings":"AAyBA;AAAA,EACE;AAAA,OAIK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AA6BP,SAAS,oBAAoB;","names":[]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server entry point for the Vana SDK direct Data Portability flow.\n *\n * @remarks\n * Exposes {@link createDirectDataController} and its supporting types/errors.\n * This is a Node/server entry point — it owns the app private key and must never\n * be imported into browser code.\n *\n * @example\n * ```typescript\n * import { createDirectDataController } from \"@opendatalabs/vana-sdk/server\";\n *\n * export const vana = createDirectDataController({\n *   env: process.env.VANA_ENV === \"dev\" ? \"dev\" : \"production\",\n *   appPrivateKey: process.env.VANA_APP_PRIVATE_KEY!,\n *   app: { id: \"notes-lens\", name: \"Notes Lens\", homepageUrl: process.env.VANA_APP_URL! },\n *   source: \"chatgpt\",\n *   // PDPP grants; each stream is requested as `pdpp.<source>.<stream>`.\n *   grants: [\n *     {\n *       source_id: \"https://registry.pdpp.dev/sources/chatgpt\",\n *       streams: [\"conversations\", \"messages\"],\n *     },\n *   ],\n *   // Legacy `scopes` entries are still accepted, alone or with `grants`.\n * });\n * ```\n *\n * @category Direct\n * @module server\n */\n\nexport {\n  createDirectDataController,\n  isConnectCapableController,\n  missingConnectCapabilities,\n  DIRECT_CONNECT_CAPABILITIES,\n  type ConnectCapableDirectDataController,\n  type DirectConnectCapabilities,\n  type DirectDataController,\n  type DirectDataControllerConfig,\n  type DirectEscrowConfig,\n} from \"./direct/controller\";\n\n// Embedded connect sheet: one handler for config/request/status/data, and\n// the read capability the sheet asks for.\nexport {\n  createVanaConnectHandler,\n  toNodeHandler,\n  connectBindingCookieName,\n  CONNECT_BINDING_KEY_PURPOSE,\n  createMemoryRateLimit,\n  defaultClientIp,\n  type MemoryRateLimitOptions,\n  type VanaConnectRateLimit,\n  type VanaConnectRateLimitDecision,\n  type VanaConnectHandler,\n  type VanaConnectHandlerOptions,\n  type VanaConnectCreateOptions,\n  type VanaConnectErrorCode,\n  type VanaConnectConfig,\n  type NodeRequestLike,\n  type NodeResponseLike,\n  type ToNodeHandlerOptions,\n} from \"./direct/connect-handler\";\nexport {\n  signRequestReadAuthorization,\n  buildRequestReadAuthorizationMessage,\n  requestReadPath,\n  type SignRequestReadAuthorizationInput,\n} from \"./direct/request-authorization\";\nexport {\n  vanaConnectCsp,\n  VANA_ACCOUNT_ORIGINS,\n  isRequestId,\n  readConnectRequest,\n  type ConnectRequest,\n  type RequestAuthorization,\n  type VanaConnectEnv,\n} from \"./connect/protocol\";\nexport {\n  parseOriginAllowlist,\n  resolveVanaAccountOrigin,\n  type ResolveVanaAccountOriginInput,\n} from \"./connect/account-origin\";\n\n// Lower-level building blocks (advanced use / custom transports).\nexport {\n  createDefaultAccessRequestClient,\n  buildApprovalUrl,\n  validateAccessRequestQuestions,\n  buildDirectAccessRequestAuthMessage,\n  type DefaultAccessRequestClientOptions,\n  type FetchLike,\n} from \"./direct/access-request-client\";\n// Grant union: extend the owner's live grant instead of replacing it.\nexport {\n  mergeWithLiveGrant,\n  liveGrantScopes,\n  findLiveGrant,\n  unionGrantScopes,\n  type GrantUnion,\n  type GrantUnionGateway,\n  type GrantUnionStatus,\n  type MergeWithLiveGrantInput,\n  type MergeWithLiveGrantResult,\n} from \"./direct/grant-union\";\nexport {\n  buildPersonalServerDataReadRequest,\n  readPersonalServerData,\n  parsePersonalServerPaymentRequired,\n  dataPathForScope,\n  type PersonalServerDataReadRequest,\n  type PersonalServerReadResult,\n  type PersonalServerFetch,\n  type PersonalServerTransportRetryOptions,\n  type FetchResponseLike,\n} from \"./direct/personal-server-read\";\n// Escrow-backed payment (built on protocol/escrow).\nexport {\n  authorizeEscrowPayment,\n  authorizeGrantPayment,\n  buildEscrowPaymentHeader,\n  buildGrantPaymentHeader,\n  paymentResponseMetadataFromHeader,\n  toDirectPaymentReceipt,\n  toDirectFeeBreakdown,\n  createDefaultNonceSource,\n  DATA_ACCESS_OP_TYPE,\n  GRANT_OP_TYPE,\n  type EscrowPaymentConfig,\n  type EscrowPaymentHeaderConfig,\n  type SignTypedDataFn,\n  type PaymentNonceSource,\n} from \"./direct/escrow-payment\";\nexport {\n  getDirectEndpoints,\n  PRODUCTION_ENDPOINTS,\n  DEV_ENDPOINTS,\n} from \"./direct/endpoints\";\n// Grant scope entries: the `[operation:]scope` vocabulary the controller's\n// `scopes` are written in, and the PDPP grant -> scope key mapping its\n// `grants` use, so a backend can build and read them without reaching for a\n// platform entry point.\nexport {\n  ScopeSchema,\n  parseScope,\n  scopeMatchesPattern,\n  scopeCoveredByGrant,\n  type Scope,\n  type ParsedScope,\n} from \"./protocol/scopes\";\nexport {\n  SCOPE_ACTIONS,\n  InvalidScopeEntryError,\n  parseScopeEntry,\n  formatScopeEntry,\n  grantPermissions,\n  permissionsToScopes,\n  tryGrantPermissions,\n  hasAction,\n  type ScopeAction,\n  type ParsedScopeEntry,\n  type GrantPermission,\n} from \"./protocol/scope-actions\";\nexport {\n  PDPP_SCOPE_NAMESPACE,\n  PDPP_SOURCE_ID_PREFIX,\n  InvalidPdppGrantError,\n  pdppScopeKey,\n  parsePdppScopeKey,\n  isPdppScopeKey,\n  pdppGrantsToScopes,\n  grantRequestScopes,\n  type PdppGrant,\n  type PdppScopeKeyParts,\n} from \"./protocol/pdpp-scopes\";\n\n// Errors\nexport {\n  DirectConfigError,\n  AccessNotApprovedError,\n  ScopeNotApprovedError,\n  PersonalServerReadError,\n  PaymentRequiredError,\n  EscrowBalanceTooLowError,\n} from \"./direct/errors\";\nexport {\n  requestTestCredit,\n  TestCreditError,\n  DEFAULT_TEST_CREDIT_BASE_URL,\n  type TestCreditResult,\n  type TestCreditOperation,\n  type RequestTestCreditOptions,\n} from \"./direct/test-credit\";\n\n// Shared types\nexport type {\n  DirectEnv,\n  DirectNetwork,\n  DirectAppConfig,\n  ForegroundDelivery,\n  AppIdentity,\n  DirectServiceEndpoints,\n  AccessRequest,\n  AccessRequestGrantUnion,\n  AccessRequestQuestion,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n  MultiScopeDataResult,\n  AccessRequestClient,\n  DirectOpTypeValue,\n  PersonalServerDataAccessPaymentOperation,\n  PersonalServerGrantPaymentOperation,\n  PersonalServerPaymentOperation,\n  PersonalServerPaymentRequired,\n  DirectPaymentReceipt,\n  DirectPaymentResponseMetadata,\n  DirectFeeBreakdown,\n} from \"./direct/types\";\n\n// Op-type vocabulary constant.\nexport { DirectOpType } from \"./direct/types\";\n"],"mappings":"AAgCA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AAIP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAYK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAKP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AAGP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AA6BP,SAAS,oBAAoB;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opendatalabs/vana-sdk",
-  "version": "4.4.0",
+  "version": "4.5.0",
   "description": "A TypeScript library for interacting with Vana Network smart contracts.",
   "publishConfig": {
     "access": "public"
@@ -55,6 +55,15 @@
       "types": "./dist/react.d.ts",
       "import": "./dist/react.js"
     },
+    "./connect": {
+      "types": "./dist/connect.d.ts",
+      "import": "./dist/connect.js"
+    },
+    "./connect/protocol": {
+      "types": "./dist/connect/protocol.d.ts",
+      "import": "./dist/connect/protocol.js",
+      "require": "./dist/connect/protocol.cjs"
+    },
     "./session-relay": {
       "browser": {
         "types": "./dist/session-relay.d.ts",
@@ -170,6 +179,7 @@
     "eslint-plugin-tsdoc": "^0.4.0",
     "eslint-plugin-unused-imports": "^4.2.0",
     "globals": "^16.3.0",
+    "happy-dom": "^20.9.0",
     "prettier": "^3.5.3",
     "react": "^19.0.0",
     "rimraf": "^6.0.1",