vana-cli 0.15.0 → 0.23.3

package/dist/core/exit-codes.d.ts

@@ -0,0 +1,48 @@
+/**
+ * The one exit-code table for the whole binary.
+ *
+ * The previous contract was 0/1 only (every failure path returned 1, bad
+ * usage inherited commander's 1), while docs/CLI-AGENT-FRIENDLY.md claimed a
+ * different set of meanings for 2-5 that was never implemented. Both are
+ * replaced by this table; docs/CLI-EXIT-CODE-MATRIX.md is the human copy.
+ *
+ * Codes exist so an agent can branch without parsing prose. The JSON
+ * outcome's `code` field carries the finer-grained reason.
+ */
+import { CliOutcomeStatus } from "./cli-types.js";
+export declare const CliExitCode: {
+    /** Done. */
+    readonly OK: 0;
+    /** Failed for a reason no other code names. */
+    readonly FAILURE: 1;
+    /** Bad usage: unknown command, unknown option, missing argument. */
+    readonly USAGE: 2;
+    /** No grant, or the grant does not cover this. */
+    readonly NO_GRANT: 3;
+    /** Payment required and not settled. */
+    readonly PAYMENT_REQUIRED: 4;
+    /** No server holding this data answered (incl. owner not ready). */
+    readonly SERVER_UNAVAILABLE: 5;
+    /** Not ready yet, come back. */
+    readonly NOT_READY: 6;
+    /** A person has to confirm before this can proceed. */
+    readonly CONFIRMATION_REQUIRED: 7;
+};
+export type CliExitCode = (typeof CliExitCode)[keyof typeof CliExitCode];
+/**
+ * Exit code for an owner-side outcome status.
+ *
+ * Only statuses with an unambiguous slot in the table map to a distinct
+ * code; the rest stay {@link CliExitCode.FAILURE} with the status itself in
+ * the JSON payload. Success statuses map to OK.
+ */
+export declare function exitCodeForOutcome(status: CliOutcomeStatus): CliExitCode;
+/**
+ * Protocol-level error classes the builder command group maps onto the
+ * table. Keys are the stable `code` values emitted in JSON outcomes.
+ */
+export declare const PROTOCOL_EXIT_MAP: Record<string, CliExitCode>;
+/** Lowercase and strip the transport prefixes real SDK codes carry. */
+export declare function normalizeProtocolCode(code: string): string;
+export declare function exitCodeForProtocolCode(code: string): CliExitCode;
+//# sourceMappingURL=exit-codes.d.ts.map

package/dist/core/exit-codes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.d.ts","sourceRoot":"","sources":["../../src/core/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,eAAO,MAAM,WAAW;IACtB,YAAY;;IAEZ,+CAA+C;;IAE/C,oEAAoE;;IAEpE,kDAAkD;;IAElD,wCAAwC;;IAExC,oEAAoE;;IAEpE,gCAAgC;;IAEhC,uDAAuD;;CAE/C,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEzE;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,WAAW,CAYxE;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAezD,CAAC;AAoBF,uEAAuE;AACvE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAEjE"}

package/dist/core/exit-codes.js

@@ -0,0 +1,96 @@
+/**
+ * The one exit-code table for the whole binary.
+ *
+ * The previous contract was 0/1 only (every failure path returned 1, bad
+ * usage inherited commander's 1), while docs/CLI-AGENT-FRIENDLY.md claimed a
+ * different set of meanings for 2-5 that was never implemented. Both are
+ * replaced by this table; docs/CLI-EXIT-CODE-MATRIX.md is the human copy.
+ *
+ * Codes exist so an agent can branch without parsing prose. The JSON
+ * outcome's `code` field carries the finer-grained reason.
+ */
+import { CliOutcomeStatus } from "./cli-types.js";
+export const CliExitCode = {
+    /** Done. */
+    OK: 0,
+    /** Failed for a reason no other code names. */
+    FAILURE: 1,
+    /** Bad usage: unknown command, unknown option, missing argument. */
+    USAGE: 2,
+    /** No grant, or the grant does not cover this. */
+    NO_GRANT: 3,
+    /** Payment required and not settled. */
+    PAYMENT_REQUIRED: 4,
+    /** No server holding this data answered (incl. owner not ready). */
+    SERVER_UNAVAILABLE: 5,
+    /** Not ready yet, come back. */
+    NOT_READY: 6,
+    /** A person has to confirm before this can proceed. */
+    CONFIRMATION_REQUIRED: 7,
+};
+/**
+ * Exit code for an owner-side outcome status.
+ *
+ * Only statuses with an unambiguous slot in the table map to a distinct
+ * code; the rest stay {@link CliExitCode.FAILURE} with the status itself in
+ * the JSON payload. Success statuses map to OK.
+ */
+export function exitCodeForOutcome(status) {
+    switch (status) {
+        case CliOutcomeStatus.CONNECTED_AND_INGESTED:
+        case CliOutcomeStatus.CONNECTED_LOCAL_ONLY:
+            return CliExitCode.OK;
+        case CliOutcomeStatus.PERSONAL_SERVER_UNAVAILABLE:
+            return CliExitCode.SERVER_UNAVAILABLE;
+        case CliOutcomeStatus.NEEDS_INPUT:
+            return CliExitCode.CONFIRMATION_REQUIRED;
+        default:
+            return CliExitCode.FAILURE;
+    }
+}
+/**
+ * Protocol-level error classes the builder command group maps onto the
+ * table. Keys are the stable `code` values emitted in JSON outcomes.
+ */
+export const PROTOCOL_EXIT_MAP = {
+    ok: CliExitCode.OK,
+    bad_usage: CliExitCode.USAGE,
+    grant_invalid: CliExitCode.NO_GRANT,
+    grant_revoked: CliExitCode.NO_GRANT,
+    payment_required: CliExitCode.PAYMENT_REQUIRED,
+    max_fee_exceeded: CliExitCode.PAYMENT_REQUIRED,
+    server_unavailable: CliExitCode.SERVER_UNAVAILABLE,
+    scope_not_found: CliExitCode.SERVER_UNAVAILABLE,
+    owner_not_ready: CliExitCode.SERVER_UNAVAILABLE,
+    not_ready: CliExitCode.NOT_READY,
+    version_mismatch: CliExitCode.NOT_READY,
+    confirmation_required: CliExitCode.CONFIRMATION_REQUIRED,
+    builder_unknown: CliExitCode.FAILURE,
+    internal: CliExitCode.FAILURE,
+};
+/**
+ * Aliases for codes the SDK and gateway actually emit (jobs-client error
+ * `.code` values, gateway admission codes), normalized onto the table's
+ * stable keys. Extend here as the adapter meets new shapes; unknown codes
+ * stay FAILURE rather than guessing.
+ */
+const PROTOCOL_CODE_ALIASES = {
+    job_owner_not_ready: "owner_not_ready",
+    job_grant_invalid: "grant_invalid",
+    job_timeout: "not_ready",
+    job_not_found: "internal",
+    job_id_taken: "internal",
+    job_request_too_large: "bad_usage",
+    builder_unknown: "builder_unknown",
+    grant_invalid: "grant_invalid",
+    owner_not_ready: "owner_not_ready",
+};
+/** Lowercase and strip the transport prefixes real SDK codes carry. */
+export function normalizeProtocolCode(code) {
+    const lower = code.trim().toLowerCase();
+    return PROTOCOL_CODE_ALIASES[lower] ?? lower;
+}
+export function exitCodeForProtocolCode(code) {
+    return PROTOCOL_EXIT_MAP[normalizeProtocolCode(code)] ?? CliExitCode.FAILURE;
+}
+//# sourceMappingURL=exit-codes.js.map

package/dist/core/exit-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../../src/core/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY;IACZ,EAAE,EAAE,CAAC;IACL,+CAA+C;IAC/C,OAAO,EAAE,CAAC;IACV,oEAAoE;IACpE,KAAK,EAAE,CAAC;IACR,kDAAkD;IAClD,QAAQ,EAAE,CAAC;IACX,wCAAwC;IACxC,gBAAgB,EAAE,CAAC;IACnB,oEAAoE;IACpE,kBAAkB,EAAE,CAAC;IACrB,gCAAgC;IAChC,SAAS,EAAE,CAAC;IACZ,uDAAuD;IACvD,qBAAqB,EAAE,CAAC;CAChB,CAAC;AAIX;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAwB;IACzD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,gBAAgB,CAAC,sBAAsB,CAAC;QAC7C,KAAK,gBAAgB,CAAC,oBAAoB;YACxC,OAAO,WAAW,CAAC,EAAE,CAAC;QACxB,KAAK,gBAAgB,CAAC,2BAA2B;YAC/C,OAAO,WAAW,CAAC,kBAAkB,CAAC;QACxC,KAAK,gBAAgB,CAAC,WAAW;YAC/B,OAAO,WAAW,CAAC,qBAAqB,CAAC;QAC3C;YACE,OAAO,WAAW,CAAC,OAAO,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAgC;IAC5D,EAAE,EAAE,WAAW,CAAC,EAAE;IAClB,SAAS,EAAE,WAAW,CAAC,KAAK;IAC5B,aAAa,EAAE,WAAW,CAAC,QAAQ;IACnC,aAAa,EAAE,WAAW,CAAC,QAAQ;IACnC,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;IAC9C,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;IAC9C,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;IAClD,eAAe,EAAE,WAAW,CAAC,kBAAkB;IAC/C,eAAe,EAAE,WAAW,CAAC,kBAAkB;IAC/C,SAAS,EAAE,WAAW,CAAC,SAAS;IAChC,gBAAgB,EAAE,WAAW,CAAC,SAAS;IACvC,qBAAqB,EAAE,WAAW,CAAC,qBAAqB;IACxD,eAAe,EAAE,WAAW,CAAC,OAAO;IACpC,QAAQ,EAAE,WAAW,CAAC,OAAO;CAC9B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,qBAAqB,GAA2B;IACpD,mBAAmB,EAAE,iBAAiB;IACtC,iBAAiB,EAAE,eAAe;IAClC,WAAW,EAAE,WAAW;IACxB,aAAa,EAAE,UAAU;IACzB,YAAY,EAAE,UAAU;IACxB,qBAAqB,EAAE,WAAW;IAClC,eAAe,EAAE,iBAAiB;IAClC,aAAa,EAAE,eAAe;IAC9B,eAAe,EAAE,iBAAiB;CACnC,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,qBAAqB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,OAAO,iBAAiB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC;AAC/E,CAAC"}

package/dist/core/network.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Resolved network configuration for builder-side commands.
+ *
+ * The owner-side commands keep using {@link getEnvConfig} from constants.ts
+ * (a dev/prod host axis) untouched. Builder commands need one resolved
+ * object carrying the chain and every host, selected with `--network`:
+ * moksha is the default because its fees are play money, and mainnet spends
+ * real USDC.e from the app's escrow.
+ *
+ * `VANA_ENV=dev` swaps in the dev host set (internal use; dev serves the
+ * moksha chain).
+ */
+export type VanaNetworkName = "moksha" | "mainnet";
+export declare const VANA_NETWORKS: readonly VanaNetworkName[];
+export declare const DEFAULT_NETWORK: VanaNetworkName;
+export interface ResolvedNetwork {
+    /** Network name as selected. */
+    name: VanaNetworkName;
+    /** Host set: "dev" only when VANA_ENV=dev (moksha chain, dev hosts). */
+    env: "dev" | "prod";
+    /** Vana chain id: 14800 moksha, 1480 mainnet. */
+    chainId: number;
+    /** Data Gateway base URL (the only address a builder needs). */
+    gatewayUrl: string;
+    /** Vana Account base URL. */
+    accountUrl: string;
+    /** Consent / approval app base URL. */
+    approvalUrl: string;
+    /** Session relay base URL (owner-side flows). */
+    sessionRelayUrl: string;
+    /** Block explorer base URL. */
+    explorerUrl: string;
+    /** JSON-RPC endpoint for on-chain calls (escrow depositNative). */
+    rpcUrl: string;
+    /** DataPortabilityGrantees contract, the EIP-712 verifying contract for
+     * builder registration (same deployment address on both networks). */
+    granteesContract: string;
+}
+export declare class UnknownNetworkError extends Error {
+    readonly value: string;
+    constructor(value: string);
+}
+export declare function isVanaNetworkName(value: string): value is VanaNetworkName;
+/**
+ * Resolve a network selection into hosts and chain.
+ *
+ * @param name - `--network` value; falls back to `VANA_NETWORK`, then moksha.
+ * @param env - process env, injectable for tests.
+ * @throws {UnknownNetworkError} for a name outside {@link VANA_NETWORKS}.
+ */
+export declare function resolveNetwork(name?: string, env?: Record<string, string | undefined>): ResolvedNetwork;
+//# sourceMappingURL=network.d.ts.map

package/dist/core/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/core/network.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEnD,eAAO,MAAM,aAAa,EAAE,SAAS,eAAe,EAG1C,CAAC;AAEX,eAAO,MAAM,eAAe,EAAE,eAA0B,CAAC;AAEzD,MAAM,WAAW,eAAe;IAC9B,gCAAgC;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,wEAAwE;IACxE,GAAG,EAAE,KAAK,GAAG,MAAM,CAAC;IACpB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf;0EACsE;IACtE,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAsCD,qBAAa,mBAAoB,SAAQ,KAAK;aAChB,KAAK,EAAE,MAAM;gBAAb,KAAK,EAAE,MAAM;CAM1C;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,eAAe,CAEzE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,IAAI,CAAC,EAAE,MAAM,EACb,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,eAAe,CAYjB"}

package/dist/core/network.js

@@ -0,0 +1,83 @@
+/**
+ * Resolved network configuration for builder-side commands.
+ *
+ * The owner-side commands keep using {@link getEnvConfig} from constants.ts
+ * (a dev/prod host axis) untouched. Builder commands need one resolved
+ * object carrying the chain and every host, selected with `--network`:
+ * moksha is the default because its fees are play money, and mainnet spends
+ * real USDC.e from the app's escrow.
+ *
+ * `VANA_ENV=dev` swaps in the dev host set (internal use; dev serves the
+ * moksha chain).
+ */
+export const VANA_NETWORKS = [
+    "moksha",
+    "mainnet",
+];
+export const DEFAULT_NETWORK = "moksha";
+const NETWORKS = {
+    moksha: {
+        name: "moksha",
+        chainId: 14800,
+        granteesContract: "0x8325C0A0948483EdA023A1A2Fd895e62C5131234",
+        gatewayUrl: "https://dp-rpc.moksha.vana.org",
+        accountUrl: "https://account.vana.org",
+        approvalUrl: "https://app.vana.org",
+        sessionRelayUrl: "https://session-relay.vana.org",
+        explorerUrl: "https://moksha.vanascan.io",
+        rpcUrl: "https://rpc.moksha.vana.org",
+    },
+    mainnet: {
+        name: "mainnet",
+        chainId: 1480,
+        granteesContract: "0x8325C0A0948483EdA023A1A2Fd895e62C5131234",
+        gatewayUrl: "https://dp-rpc.vana.org",
+        accountUrl: "https://account.vana.org",
+        approvalUrl: "https://app.vana.org",
+        sessionRelayUrl: "https://session-relay.vana.org",
+        explorerUrl: "https://vanascan.io",
+        rpcUrl: "https://rpc.vana.org",
+    },
+};
+/** Dev host overrides (moksha chain served by the dev deployment). */
+const DEV_HOSTS = {
+    gatewayUrl: "https://dp-rpc-dev.vana.org",
+    accountUrl: "https://account-dev.vana.org",
+    // The SDK's dev consent endpoints live on app-dev (see
+    // @opendatalabs/vana-sdk dist/direct/endpoints.js); mixing the prod
+    // approval app with dev everything-else would split deployments.
+    approvalUrl: "https://app-dev.vana.org",
+    sessionRelayUrl: "https://dev.session-relay.vana.org",
+};
+export class UnknownNetworkError extends Error {
+    value;
+    constructor(value) {
+        super(`Unknown network "${value}". Expected one of: ${VANA_NETWORKS.join(", ")}.`);
+        this.value = value;
+        this.name = "UnknownNetworkError";
+    }
+}
+export function isVanaNetworkName(value) {
+    return VANA_NETWORKS.includes(value);
+}
+/**
+ * Resolve a network selection into hosts and chain.
+ *
+ * @param name - `--network` value; falls back to `VANA_NETWORK`, then moksha.
+ * @param env - process env, injectable for tests.
+ * @throws {UnknownNetworkError} for a name outside {@link VANA_NETWORKS}.
+ */
+export function resolveNetwork(name, env = process.env) {
+    const raw = (name ?? env.VANA_NETWORK ?? DEFAULT_NETWORK).toLowerCase();
+    if (!isVanaNetworkName(raw)) {
+        throw new UnknownNetworkError(raw);
+    }
+    const base = NETWORKS[raw];
+    const dev = env.VANA_ENV === "dev";
+    if (dev && raw === "mainnet") {
+        // There is no dev host set for mainnet; refuse rather than guess.
+        throw new UnknownNetworkError("mainnet with VANA_ENV=dev");
+    }
+    return dev ? { ...base, ...DEV_HOSTS, env: "dev" } : { ...base, env: "prod" };
+}
+//# sourceMappingURL=network.js.map

package/dist/core/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/core/network.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,CAAC,MAAM,aAAa,GAA+B;IACvD,QAAQ;IACR,SAAS;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAoB,QAAQ,CAAC;AA0BzD,MAAM,QAAQ,GAA0D;IACtE,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,KAAK;QACd,gBAAgB,EAAE,4CAA4C;QAC9D,UAAU,EAAE,gCAAgC;QAC5C,UAAU,EAAE,0BAA0B;QACtC,WAAW,EAAE,sBAAsB;QACnC,eAAe,EAAE,gCAAgC;QACjD,WAAW,EAAE,4BAA4B;QACzC,MAAM,EAAE,6BAA6B;KACtC;IACD,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;QACb,gBAAgB,EAAE,4CAA4C;QAC9D,UAAU,EAAE,yBAAyB;QACrC,UAAU,EAAE,0BAA0B;QACtC,WAAW,EAAE,sBAAsB;QACnC,eAAe,EAAE,gCAAgC;QACjD,WAAW,EAAE,qBAAqB;QAClC,MAAM,EAAE,sBAAsB;KAC/B;CACF,CAAC;AAEF,sEAAsE;AACtE,MAAM,SAAS,GAAG;IAChB,UAAU,EAAE,6BAA6B;IACzC,UAAU,EAAE,8BAA8B;IAC1C,uDAAuD;IACvD,oEAAoE;IACpE,iEAAiE;IACjE,WAAW,EAAE,0BAA0B;IACvC,eAAe,EAAE,oCAAoC;CAC7C,CAAC;AAEX,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAChB;IAA5B,YAA4B,KAAa;QACvC,KAAK,CACH,oBAAoB,KAAK,uBAAuB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5E,CAAC;QAHwB,UAAK,GAAL,KAAK,CAAQ;QAIvC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAQ,aAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAa,EACb,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,YAAY,IAAI,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC;IACnC,IAAI,GAAG,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,kEAAkE;QAClE,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AAChF,CAAC"}

package/dist/core/paths.d.ts

@@ -11,9 +11,11 @@ export declare function getVanaHome(): string;
  * desktop app) keeps working. DataConnect hardcodes ~/.dataconnect in
  * src-tauri/src/commands/connector.rs:66. It should adopt ~/.vana upstream.
  *
- * Returns true if any migration or symlink was performed.
+ * Returns "migrated" when legacy data was actually moved, "symlinked" when
+ * only the compat symlink was created (typical first run of a fresh
+ * install), and null when nothing changed.
  */
-export declare function migrateLegacyDataHome(): boolean;
+export declare function migrateLegacyDataHome(): "migrated" | "symlinked" | null;
 export declare function getConnectorCacheDir(): string;
 export declare function getBrowserProfilesDir(): string;
 export declare function getCliStatePath(): string;

package/dist/core/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAIA,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CA2B/C;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED,6DAA6D;AAC7D,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhE;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAM5D"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAIA,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,IAAI,UAAU,GAAG,WAAW,GAAG,IAAI,CA2BvE;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED,6DAA6D;AAC7D,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhE;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAM5D"}

package/dist/core/paths.js

@@ -16,7 +16,9 @@ export function getVanaHome() {
  * desktop app) keeps working. DataConnect hardcodes ~/.dataconnect in
  * src-tauri/src/commands/connector.rs:66. It should adopt ~/.vana upstream.
  *
- * Returns true if any migration or symlink was performed.
+ * Returns "migrated" when legacy data was actually moved, "symlinked" when
+ * only the compat symlink was created (typical first run of a fresh
+ * install), and null when nothing changed.
  */
 export function migrateLegacyDataHome() {
     const vanaHome = getVanaHome();
@@ -26,10 +28,10 @@ export function migrateLegacyDataHome() {
         try {
             fs.renameSync(oldHome, vanaHome);
             fs.symlinkSync(vanaHome, oldHome);
-            return true;
+            return "migrated";
         }
         catch {
-            return false;
+            return null;
         }
     }
     // Case 2: new exists, old doesn't → create compat symlink
@@ -37,13 +39,13 @@ export function migrateLegacyDataHome() {
     if (fs.existsSync(vanaHome) && !fs.existsSync(oldHome)) {
         try {
             fs.symlinkSync(vanaHome, oldHome);
-            return true;
+            return "symlinked";
         }
         catch {
-            return false;
+            return null;
         }
     }
-    return false;
+    return null;
 }
 export function getConnectorCacheDir() {
     return path.join(getVanaHome(), "connectors");

package/dist/core/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAExD,4CAA4C;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACjC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,iEAAiE;IACjE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,yBAAyB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,gBAAgB,CAAC,CAAC;AAC7D,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc;IAC/C,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACtE,OAAO,IAAI,CAAC,IAAI,CACd,UAAU,EAAE,EACZ,GAAG,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CACtE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAExD,4CAA4C;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACjC,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClC,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,iEAAiE;IACjE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClC,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,yBAAyB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,gBAAgB,CAAC,CAAC;AAC7D,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc;IAC/C,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACtE,OAAO,IAAI,CAAC,IAAI,CACd,UAAU,EAAE,EACZ,GAAG,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CACtE,CAAC;AACJ,CAAC"}

package/dist/core/receipts.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Durable payment state for the builder read loop.
+ *
+ * Two responsibilities, one 0600 file (`~/.vana/app/receipts.json`):
+ *
+ * - Payment nonces per payer. The gateway rejects a reused (payer, nonce)
+ *   pair, and the SDK's default nonce source is process-local seeded at 1,
+ *   which breaks on the second CLI invocation. Nonces here only move
+ *   forward.
+ * - Receipts: the exact `X-PAYMENT` header (plus amount/asset metadata) of a
+ *   settled read, keyed by network, grant, and scope. A later read replays
+ *   the header first, so a retry after a failure never settles a second fee
+ *   for data the app already paid for.
+ */
+export interface StoredReceipt {
+    /** The signed X-PAYMENT header exactly as sent. */
+    header: string;
+    /** Base-unit decimal amount the header settles. */
+    amount: string;
+    /** Asset address (zero address = native VANA). */
+    asset: string;
+    /** ISO timestamp the CLI captured the header. */
+    capturedAt: string;
+    /** Payment metadata echoed by the Personal Server, when any. */
+    payment?: Record<string, unknown>;
+}
+export declare function receiptKey(network: string, grantId: string, scope: string): string;
+export interface ReceiptsStore {
+    /** Next monotonically-increasing payment nonce for a payer; persisted. */
+    nextNonce(payerAddress: string): bigint;
+    getReceipt(key: string): StoredReceipt | null;
+    saveReceipt(key: string, receipt: StoredReceipt): void;
+    /** Drop a receipt the server refused (stale version, expired nonce). */
+    dropReceipt(key: string): void;
+}
+export declare function createReceiptsStore(filePath?: string): ReceiptsStore;
+//# sourceMappingURL=receipts.d.ts.map

package/dist/core/receipts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts.d.ts","sourceRoot":"","sources":["../../src/core/receipts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAUD,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,MAAM,CAER;AAED,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,SAAS,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACxC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IAC9C,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IACvD,wEAAwE;IACxE,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,CAmDpE"}

package/dist/core/receipts.js

@@ -0,0 +1,72 @@
+/**
+ * Durable payment state for the builder read loop.
+ *
+ * Two responsibilities, one 0600 file (`~/.vana/app/receipts.json`):
+ *
+ * - Payment nonces per payer. The gateway rejects a reused (payer, nonce)
+ *   pair, and the SDK's default nonce source is process-local seeded at 1,
+ *   which breaks on the second CLI invocation. Nonces here only move
+ *   forward.
+ * - Receipts: the exact `X-PAYMENT` header (plus amount/asset metadata) of a
+ *   settled read, keyed by network, grant, and scope. A later read replays
+ *   the header first, so a retry after a failure never settles a second fee
+ *   for data the app already paid for.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { getVanaHome } from "./paths.js";
+const EMPTY = { version: 1, nonces: {}, receipts: {} };
+export function receiptKey(network, grantId, scope) {
+    return `${network}:${grantId.toLowerCase()}:${scope}`;
+}
+export function createReceiptsStore(filePath) {
+    const file = filePath ?? path.join(getVanaHome(), "app", "receipts.json");
+    function read() {
+        try {
+            const parsed = JSON.parse(fs.readFileSync(file, "utf8"));
+            if (parsed?.version !== 1) {
+                return structuredClone(EMPTY);
+            }
+            return {
+                version: 1,
+                nonces: parsed.nonces ?? {},
+                receipts: parsed.receipts ?? {},
+            };
+        }
+        catch {
+            return structuredClone(EMPTY);
+        }
+    }
+    function write(state) {
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, JSON.stringify(state, null, 2) + "\n", {
+            mode: 0o600,
+        });
+    }
+    return {
+        nextNonce(payerAddress) {
+            const state = read();
+            const key = payerAddress.toLowerCase();
+            const next = BigInt(state.nonces[key] ?? "0") + 1n;
+            state.nonces[key] = next.toString();
+            write(state);
+            return next;
+        },
+        getReceipt(key) {
+            return read().receipts[key] ?? null;
+        },
+        saveReceipt(key, receipt) {
+            const state = read();
+            state.receipts[key] = receipt;
+            write(state);
+        },
+        dropReceipt(key) {
+            const state = read();
+            if (key in state.receipts) {
+                delete state.receipts[key];
+                write(state);
+            }
+        },
+    };
+}
+//# sourceMappingURL=receipts.js.map

package/dist/core/receipts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts.js","sourceRoot":"","sources":["../../src/core/receipts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAqBzC,MAAM,KAAK,GAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAErE,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,OAAe,EACf,KAAa;IAEb,OAAO,GAAG,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,IAAI,KAAK,EAAE,CAAC;AACxD,CAAC;AAWD,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAE1E,SAAS,IAAI;QACX,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;YACzE,IAAI,MAAM,EAAE,OAAO,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;aAChC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,SAAS,KAAK,CAAC,KAAmB;QAChC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;YAC5D,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,SAAS,CAAC,YAAoB;YAC5B,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YACnD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,KAAK,CAAC,KAAK,CAAC,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,UAAU,CAAC,GAAW;YACpB,OAAO,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QACtC,CAAC;QACD,WAAW,CAAC,GAAW,EAAE,OAAsB;YAC7C,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;YAC9B,KAAK,CAAC,KAAK,CAAC,CAAC;QACf,CAAC;QACD,WAAW,CAAC,GAAW;YACrB,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,IAAI,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC3B,KAAK,CAAC,KAAK,CAAC,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/requests-store.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Local index of access requests this machine created.
+ *
+ * A request is written the moment it is created, not on approval: a
+ * `--no-input` run prints a URL and exits, and the agent that comes back
+ * later must be able to find the request without having kept the id.
+ *
+ * Entries are namespaced by app address, network and gateway host, so two
+ * apps, two networks or a dev deployment never see each other's requests.
+ *
+ * The DCR status carries no owner address, so an approved entry records the
+ * grant id and the CLI resolves the owner from the gateway when it needs
+ * one (a read does).
+ */
+export type StoredRequestStatus = "pending" | "approved" | "ready_for_read" | "completed" | "denied" | "expired";
+export interface StoredRequest {
+    requestId: string;
+    /** App address that created it. */
+    appAddress: string;
+    network: string;
+    gatewayUrl: string;
+    /** Scopes asked for, verbatim (may carry `write:` prefixes). */
+    scopes: string[];
+    approvalUrl: string;
+    createdAt: string;
+    status: StoredRequestStatus;
+    updatedAt: string;
+    expiresAt?: string;
+    /** Present once approved. */
+    grantId?: string;
+    /** Approved scopes as reported by the status route. */
+    approvedScopes?: string[];
+    /** `enclave` or `personal_server`, once the status route reports it. */
+    delivery?: string;
+    personalServerUrl?: string;
+    /** Derivative questions carried on the request, when any. */
+    questions?: {
+        derivedScope: string;
+        sourceScopes: string[];
+    }[];
+}
+export interface RequestsStore {
+    save(request: StoredRequest): void;
+    /** Merge fields into an existing entry; no-op when it is unknown. */
+    update(requestId: string, patch: Partial<StoredRequest>): void;
+    get(requestId: string): StoredRequest | null;
+    /** Newest first, optionally filtered to one app/network pair. */
+    list(filter?: {
+        appAddress?: string;
+        network?: string;
+    }): StoredRequest[];
+}
+export declare function createRequestsStore(filePath?: string): RequestsStore;
+//# sourceMappingURL=requests-store.d.ts.map

package/dist/core/requests-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests-store.d.ts","sourceRoot":"","sources":["../../src/core/requests-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,UAAU,GACV,gBAAgB,GAChB,WAAW,GACX,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6DAA6D;IAC7D,SAAS,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;CAChE;AASD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IACnC,qEAAqE;IACrE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IAC/D,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IAC7C,iEAAiE;IACjE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,aAAa,EAAE,CAAC;CAC3E;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,CAwEpE"}

package/dist/core/requests-store.js

@@ -0,0 +1,83 @@
+/**
+ * Local index of access requests this machine created.
+ *
+ * A request is written the moment it is created, not on approval: a
+ * `--no-input` run prints a URL and exits, and the agent that comes back
+ * later must be able to find the request without having kept the id.
+ *
+ * Entries are namespaced by app address, network and gateway host, so two
+ * apps, two networks or a dev deployment never see each other's requests.
+ *
+ * The DCR status carries no owner address, so an approved entry records the
+ * grant id and the CLI resolves the owner from the gateway when it needs
+ * one (a read does).
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { getVanaHome } from "./paths.js";
+const EMPTY = { version: 1, requests: [] };
+export function createRequestsStore(filePath) {
+    const file = filePath ?? path.join(getVanaHome(), "app", "requests.json");
+    function read() {
+        try {
+            const parsed = JSON.parse(fs.readFileSync(file, "utf8"));
+            if (parsed?.version !== 1 || !Array.isArray(parsed.requests)) {
+                return structuredClone(EMPTY);
+            }
+            return parsed;
+        }
+        catch {
+            return structuredClone(EMPTY);
+        }
+    }
+    function write(state) {
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, JSON.stringify(state, null, 2) + "\n", {
+            mode: 0o600,
+        });
+    }
+    return {
+        save(request) {
+            const state = read();
+            const index = state.requests.findIndex((entry) => entry.requestId === request.requestId);
+            if (index >= 0) {
+                state.requests[index] = request;
+            }
+            else {
+                state.requests.push(request);
+            }
+            write(state);
+        },
+        update(requestId, patch) {
+            const state = read();
+            const index = state.requests.findIndex((entry) => entry.requestId === requestId);
+            if (index < 0) {
+                return;
+            }
+            state.requests[index] = {
+                ...state.requests[index],
+                ...patch,
+                updatedAt: new Date().toISOString(),
+            };
+            write(state);
+        },
+        get(requestId) {
+            return (read().requests.find((entry) => entry.requestId === requestId) ?? null);
+        },
+        list(filter) {
+            return read()
+                .requests.filter((entry) => {
+                if (filter?.appAddress &&
+                    entry.appAddress.toLowerCase() !== filter.appAddress.toLowerCase()) {
+                    return false;
+                }
+                if (filter?.network && entry.network !== filter.network) {
+                    return false;
+                }
+                return true;
+            })
+                .sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+        },
+    };
+}
+//# sourceMappingURL=requests-store.js.map

package/dist/core/requests-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests-store.js","sourceRoot":"","sources":["../../src/core/requests-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAuCzC,MAAM,KAAK,GAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAWzD,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAE1E,SAAS,IAAI;QACX,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;YACzE,IAAI,MAAM,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7D,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,SAAS,KAAK,CAAC,KAAmB;QAChC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;YAC5D,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,CAAC,OAAsB;YACzB,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CACpC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CACjD,CAAC;YACF,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACf,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,CAAC;QACf,CAAC;QACD,MAAM,CAAC,SAAiB,EAAE,KAA6B;YACrD,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CACpC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CACzC,CAAC;YACF,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG;gBACtB,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACxB,GAAG,KAAK;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,KAAK,CAAC,KAAK,CAAC,CAAC;QACf,CAAC;QACD,GAAG,CAAC,SAAiB;YACnB,OAAO,CACL,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,IAAI,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM;YACT,OAAO,IAAI,EAAE;iBACV,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzB,IACE,MAAM,EAAE,UAAU;oBAClB,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,EAClE,CAAC;oBACD,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;oBACxD,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;iBACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5D,CAAC;KACF,CAAC;AACJ,CAAC"}