vana-cli 0.15.1 → 0.23.4

package/dist/cli/app/outcome.js

@@ -0,0 +1,55 @@
+/**
+ * Outcome contract for the builder (`vana app`) command group.
+ *
+ * Every app command ends by emitting exactly one outcome through
+ * {@link emitAppOutcome}: a single JSON line in `--json` mode, readable
+ * lines otherwise. The exit code always comes from the protocol `code`
+ * through the binary-wide table in `src/core/exit-codes.ts`.
+ */
+import { z } from "zod";
+import { exitCodeForProtocolCode, } from "../../core/exit-codes.js";
+export const APP_OUTCOME_STATUSES = ["done", "failed"];
+export const appOutcomeSchema = z
+    .object({
+    type: z.literal("outcome"),
+    status: z.enum(APP_OUTCOME_STATUSES),
+    code: z.string(),
+    exitCode: z.number().int().min(0).max(7),
+    message: z.string(),
+    remedy: z.string().optional(),
+    network: z.string().optional(),
+    data: z.record(z.string(), z.unknown()).optional(),
+})
+    .catchall(z.unknown());
+/** Emit the terminal outcome and return the exit code for the command. */
+export function emitAppOutcome(options, outcome) {
+    const exitCode = exitCodeForProtocolCode(outcome.code);
+    if (options.json) {
+        const payload = appOutcomeSchema.parse({
+            type: "outcome",
+            status: outcome.status,
+            code: outcome.code,
+            exitCode,
+            message: outcome.message,
+            ...(outcome.remedy ? { remedy: outcome.remedy } : {}),
+            ...(outcome.network ? { network: outcome.network } : {}),
+            ...(outcome.data ? { data: outcome.data } : {}),
+        });
+        process.stdout.write(`${JSON.stringify(payload)}\n`);
+        return exitCode;
+    }
+    const stream = outcome.status === "done" ? process.stdout : process.stderr;
+    stream.write(`${outcome.message}\n`);
+    if (!options.quiet) {
+        for (const [key, value] of Object.entries(outcome.data ?? {})) {
+            if (value !== undefined && value !== null) {
+                stream.write(`  ${key}: ${String(value)}\n`);
+            }
+        }
+        if (outcome.remedy) {
+            stream.write(`  next: ${outcome.remedy}\n`);
+        }
+    }
+    return exitCode;
+}
+//# sourceMappingURL=outcome.js.map

package/dist/cli/app/outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome.js","sourceRoot":"","sources":["../../../src/cli/app/outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,uBAAuB,GAExB,MAAM,0BAA0B,CAAC;AAGlC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAU,CAAC;AAahE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAUzB,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAC5B,OAA0B,EAC1B,OAAwB;IAExB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC;YACrC,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,WAAW,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/cli/app/read.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `vana app read <scope> --grant <id>` - signed read of granted data,
+ * settling the fee from escrow when `--pay` allows it.
+ *
+ * Flow: resolve the grant at the gateway (grantor = owner), resolve the
+ * owner's Personal Server registrations (every active one - registrations
+ * are push-only and a record can name a dead server), then read. A stored
+ * receipt for this (network, grant, scope) is replayed before any new
+ * settlement, so a retry never pays twice; a new settlement is gated by
+ * `--pay` and `--max-fee` and its X-PAYMENT header is captured into the
+ * receipts store.
+ *
+ * The enclave delivery leg lands when the jobs result-delivery change ships
+ * in the SDK (vana-sdk#211); today every owner readable here serves through
+ * a Personal Server.
+ */
+import { type GatewayClient } from "@opendatalabs/vana-sdk";
+import { readPersonalServerData } from "@opendatalabs/vana-sdk/direct/personal-server-read";
+import { createJobsClient } from "@opendatalabs/vana-sdk/protocol/jobs-client";
+import { resolveAppKey } from "../../core/app-key.js";
+import { type ReceiptsStore } from "../../core/receipts.js";
+import { type RequestsStore } from "../../core/requests-store.js";
+import { type AppCommandOptions } from "./outcome.js";
+export interface ReadCommandOptions extends AppCommandOptions {
+    grant?: string;
+    /** Settle a 402 from escrow instead of stopping at exit 4. */
+    pay?: boolean;
+    /** Refuse settlements above this amount, in VANA (decimal). */
+    maxFee?: string;
+    /** Explicit Personal Server URL, skipping gateway resolution. */
+    server?: string;
+}
+export interface ReadDeps {
+    createClient?: (gatewayUrl: string) => GatewayClient;
+    resolveKey?: typeof resolveAppKey;
+    read?: typeof readPersonalServerData;
+    receipts?: ReceiptsStore;
+    createJobs?: typeof createJobsClient;
+    /** Access-request records, to learn the delivery path for this grant. */
+    requests?: RequestsStore;
+}
+export declare function runAppRead(scope: string, options: ReadCommandOptions, deps?: ReadDeps): Promise<number>;
+//# sourceMappingURL=read.d.ts.map

package/dist/cli/app/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/cli/app/read.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EAEvB,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAC;AAO/E,OAAO,EAEL,aAAa,EAEd,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtE,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,aAAa,CAAC;IACrD,UAAU,CAAC,EAAE,OAAO,aAAa,CAAC;IAClC,IAAI,CAAC,EAAE,OAAO,sBAAsB,CAAC;IACrC,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,UAAU,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACrC,yEAAyE;IACzE,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAQD,wBAAsB,UAAU,CAC9B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,kBAAkB,EAC3B,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,MAAM,CAAC,CAoSjB"}

package/dist/cli/app/read.js

@@ -0,0 +1,429 @@
+/**
+ * `vana app read <scope> --grant <id>` - signed read of granted data,
+ * settling the fee from escrow when `--pay` allows it.
+ *
+ * Flow: resolve the grant at the gateway (grantor = owner), resolve the
+ * owner's Personal Server registrations (every active one - registrations
+ * are push-only and a record can name a dead server), then read. A stored
+ * receipt for this (network, grant, scope) is replayed before any new
+ * settlement, so a retry never pays twice; a new settlement is gated by
+ * `--pay` and `--max-fee` and its X-PAYMENT header is captured into the
+ * receipts store.
+ *
+ * The enclave delivery leg lands when the jobs result-delivery change ships
+ * in the SDK (vana-sdk#211); today every owner readable here serves through
+ * a Personal Server.
+ */
+import { CONTRACTS, createGatewayClient, } from "@opendatalabs/vana-sdk";
+import { readPersonalServerData, } from "@opendatalabs/vana-sdk/direct/personal-server-read";
+import { createJobsClient } from "@opendatalabs/vana-sdk/protocol/jobs-client";
+import { formatAssetAmount, parseAssetAmount, resolveAsset, } from "../../core/assets.js";
+import { privateKeyToAccount } from "viem/accounts";
+import { AppKeyMissingError, resolveAppKey, } from "../../core/app-key.js";
+import { UnknownNetworkError, resolveNetwork, } from "../../core/network.js";
+import { createReceiptsStore, receiptKey, } from "../../core/receipts.js";
+import { createRequestsStore, } from "../../core/requests-store.js";
+import { emitAppOutcome } from "./outcome.js";
+function isPaymentRequired(error) {
+    return error instanceof Error && error.name === "PaymentRequiredError";
+}
+export async function runAppRead(scope, options, deps = {}) {
+    let network;
+    try {
+        network = resolveNetwork(options.network);
+    }
+    catch (error) {
+        if (error instanceof UnknownNetworkError) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "bad_usage",
+                message: error.message,
+            });
+        }
+        throw error;
+    }
+    if (!options.grant) {
+        return emitAppOutcome(options, {
+            status: "failed",
+            code: "bad_usage",
+            message: "A grant id is required.",
+            remedy: `vana app read ${scope} --grant <id>`,
+            network: network.name,
+        });
+    }
+    let key;
+    try {
+        key = (deps.resolveKey ?? resolveAppKey)({});
+    }
+    catch (error) {
+        if (error instanceof AppKeyMissingError) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "grant_invalid",
+                message: "No app key on this machine; a grant cannot belong to it.",
+                remedy: "vana app register",
+                network: network.name,
+            });
+        }
+        throw error;
+    }
+    const client = (deps.createClient ?? createGatewayClient)(network.gatewayUrl);
+    // 1. The grant: existence, scope coverage, and the owner behind it.
+    let grantorAddress;
+    try {
+        const grant = await client.getGrant(options.grant);
+        if (!grant) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "grant_invalid",
+                message: `Grant ${options.grant} does not exist on ${network.name}.`,
+                network: network.name,
+            });
+        }
+        if (!grant.scopes.includes(scope)) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "grant_invalid",
+                message: `The grant does not cover ${scope}.`,
+                remedy: `granted scopes: ${grant.scopes.join(", ")}`,
+                network: network.name,
+            });
+        }
+        grantorAddress = grant.grantorAddress;
+    }
+    catch (error) {
+        return gatewayFailure(options, network, error, "grant lookup");
+    }
+    // 2. Enclave delivery, when the access request says so. The owner's data
+    //    is served by a TEE sandbox through the gateway's blind job queue, so
+    //    there is no server to resolve and no endpoint to pick: the gateway is
+    //    the only address a builder knows. The result comes back encrypted to
+    //    this app's key, which is why the jobs client needs the raw private
+    //    key rather than a signer.
+    const delivery = (deps.requests ?? createRequestsStore())
+        .list({ network: network.name })
+        .find((entry) => entry.grantId === options.grant)?.delivery;
+    if (delivery === "enclave") {
+        return runEnclaveRead(scope, options, {
+            network,
+            key,
+            grantId: options.grant,
+            owner: grantorAddress,
+            createJobs: deps.createJobs ?? createJobsClient,
+        });
+    }
+    // 3. The owner's servers: every active registration, newest first.
+    let serverUrls;
+    if (options.server) {
+        serverUrls = [options.server];
+    }
+    else {
+        try {
+            const servers = await client.listServersByOwner(grantorAddress);
+            serverUrls = servers.active.map((record) => record.serverUrl);
+        }
+        catch (error) {
+            return gatewayFailure(options, network, error, "server resolution");
+        }
+        if (serverUrls.length === 0) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "owner_not_ready",
+                message: `The owner ${grantorAddress} has no registered Personal Server.`,
+                network: network.name,
+            });
+        }
+    }
+    const account = privateKeyToAccount(key.privateKey);
+    const signMessage = (message) => account.signMessage({ message });
+    const receipts = deps.receipts ?? createReceiptsStore();
+    const storedKey = receiptKey(network.name, options.grant, scope);
+    const stored = receipts.getReceipt(storedKey);
+    const read = deps.read ?? readPersonalServerData;
+    const escrowContract = CONTRACTS.DataPortabilityEscrow.addresses[network.chainId];
+    // Replays the stored receipt header; captures any new X-PAYMENT header.
+    let sentPaymentHeader = null;
+    const fetchWith = (replayHeader) => {
+        return async (input, init) => {
+            const headers = { ...init.headers };
+            if (replayHeader && !headers["X-PAYMENT"]) {
+                headers["X-PAYMENT"] = replayHeader;
+            }
+            if (headers["X-PAYMENT"]) {
+                sentPaymentHeader = headers["X-PAYMENT"];
+            }
+            return fetch(input, { ...init, headers });
+        };
+    };
+    let lastError = null;
+    for (const personalServerUrl of serverUrls) {
+        // Probe (free): signed read, replaying a stored receipt when we have one.
+        try {
+            const result = await read({
+                personalServerUrl,
+                scope,
+                grantId: options.grant,
+                payerAddress: key.address,
+                signMessage,
+                fetchFn: fetchWith(stored?.header ?? null),
+            });
+            return emitReadSuccess(options, network, scope, result.data, {
+                paid: false,
+                replayedReceipt: Boolean(stored),
+                server: personalServerUrl,
+                payment: result.payment,
+            });
+        }
+        catch (error) {
+            if (!isPaymentRequired(error)) {
+                // Transport or server failure: a dead registration is a normal
+                // state, try the next one.
+                lastError = error;
+                continue;
+            }
+            // A 402 with a stale stored receipt means the receipt no longer
+            // satisfies the server; drop it so it cannot shadow a real payment.
+            if (stored) {
+                receipts.dropReceipt(storedKey);
+            }
+            const details = error.details ??
+                {};
+            const amountRaw = details.amount ?? "0";
+            // Fees are quoted in base units of an asset that is often not the
+            // native coin - data_access on mainnet is USDC.e with 6 decimals - so
+            // the asset decides both the display and the --max-fee comparison.
+            const asset = await resolveAsset(details.asset, network.rpcUrl);
+            const amountHuman = formatAssetAmount(amountRaw, asset);
+            if (!options.pay) {
+                return emitAppOutcome(options, {
+                    status: "failed",
+                    code: "payment_required",
+                    message: `This read costs ${amountHuman} and --pay is not set.`,
+                    remedy: `vana app read ${scope} --grant ${options.grant} --pay`,
+                    network: network.name,
+                    data: {
+                        amount: amountRaw,
+                        amountHuman,
+                        asset: details.asset ?? null,
+                        assetSymbol: asset?.symbol ?? null,
+                        assetDecimals: asset?.decimals ?? null,
+                    },
+                });
+            }
+            if (options.maxFee) {
+                const limit = parseAssetAmount(options.maxFee, asset);
+                if (limit === null) {
+                    // Refusing to compare beats comparing in the wrong units.
+                    return emitAppOutcome(options, {
+                        status: "failed",
+                        code: "payment_required",
+                        message: `Cannot enforce --max-fee: fee asset ${details.asset} is unknown on this chain.`,
+                        remedy: "drop --max-fee to accept the quoted fee",
+                        network: network.name,
+                        data: { amount: amountRaw, asset: details.asset ?? null },
+                    });
+                }
+                if (BigInt(amountRaw) > limit) {
+                    return emitAppOutcome(options, {
+                        status: "failed",
+                        code: "max_fee_exceeded",
+                        message: `This read costs ${amountHuman}, above --max-fee ${options.maxFee} ${asset?.symbol ?? ""}.`.trim(),
+                        network: network.name,
+                        data: {
+                            amount: amountRaw,
+                            amountHuman,
+                            asset: details.asset ?? null,
+                        },
+                    });
+                }
+            }
+            if (!escrowContract) {
+                return emitAppOutcome(options, {
+                    status: "failed",
+                    code: "internal",
+                    message: `No escrow contract known for chain ${network.chainId}.`,
+                    network: network.name,
+                });
+            }
+            // Paid attempt: sign a fresh header (durable nonce), capture it.
+            try {
+                const result = await read({
+                    personalServerUrl,
+                    scope,
+                    grantId: options.grant,
+                    payerAddress: key.address,
+                    signMessage,
+                    escrow: {
+                        escrowContract,
+                        chainId: network.chainId,
+                        signTypedData: (typedData) => account.signTypedData(typedData),
+                        nonceSource: (payer) => receipts.nextNonce(payer),
+                    },
+                    fetchFn: fetchWith(null),
+                });
+                if (sentPaymentHeader) {
+                    receipts.saveReceipt(storedKey, {
+                        header: sentPaymentHeader,
+                        amount: amountRaw,
+                        asset: details.asset ?? "",
+                        capturedAt: new Date().toISOString(),
+                        payment: result.payment,
+                    });
+                }
+                return emitReadSuccess(options, network, scope, result.data, {
+                    paid: true,
+                    amount: amountRaw,
+                    amountHuman,
+                    server: personalServerUrl,
+                    payment: result.payment,
+                });
+            }
+            catch (paidError) {
+                // The fee may already be settled: report it instead of inviting a
+                // blind retry that pays again.
+                const spent = sentPaymentHeader ? amountRaw : null;
+                return emitAppOutcome(options, {
+                    status: "failed",
+                    code: isPaymentRequired(paidError)
+                        ? "payment_required"
+                        : "server_unavailable",
+                    message: `Read failed after payment was attempted: ${paidError instanceof Error ? paidError.message : String(paidError)}`,
+                    remedy: "the signed payment header is stored; re-running replays it without paying again",
+                    network: network.name,
+                    data: { spentFee: spent, server: personalServerUrl },
+                });
+            }
+        }
+    }
+    return emitAppOutcome(options, {
+        status: "failed",
+        code: "server_unavailable",
+        message: `No server holding this data answered (${serverUrls.length} registration${serverUrls.length === 1 ? "" : "s"} tried).`,
+        remedy: lastError instanceof Error ? lastError.message : "retry later",
+        network: network.name,
+        data: { serversTried: serverUrls.length },
+    });
+}
+function gatewayFailure(options, network, error, stage) {
+    return emitAppOutcome(options, {
+        status: "failed",
+        code: "gateway_unreachable",
+        message: `Gateway ${stage} failed: ${error instanceof Error ? error.message : String(error)}`,
+        remedy: "check connectivity to " + network.gatewayUrl + " and retry",
+        network: network.name,
+    });
+}
+function emitReadSuccess(options, network, scope, data, meta) {
+    if (options.json) {
+        return emitAppOutcome(options, {
+            status: "done",
+            code: "ok",
+            message: `Read ${scope}.`,
+            network: network.name,
+            data: { ...meta, result: data },
+        });
+    }
+    // Human mode: the payload alone on stdout (pipeable), the summary on
+    // stderr so `vana app read ... | jq` stays clean.
+    process.stdout.write(`${JSON.stringify(data, null, 2)}\n`);
+    if (!options.quiet) {
+        const paidNote = meta.paid
+            ? ` (paid ${String(meta.amountHuman)})`
+            : meta.replayedReceipt
+                ? " (existing receipt replayed, nothing new paid)"
+                : "";
+        process.stderr.write(`Read ${scope}${paidNote} from ${String(meta.server)}\n`);
+    }
+    return 0;
+}
+/**
+ * The enclave leg: submit a raw-read job and wait for the answer.
+ *
+ * Deliberately not paid here. The gateway admits enclave jobs with
+ * `price: '0'` and `paymentState: 'none'`, so there is no fee to settle and
+ * no receipt to store; reporting `paid: false` is the honest answer rather
+ * than implying the read was free by protocol design. When the gateway
+ * starts quoting a price, this is where the escrow path plugs in.
+ *
+ * Waking a cold sandbox takes seconds, so the inline wait is used and a
+ * timeout is `not_ready` (exit 6) rather than a failure.
+ */
+async function runEnclaveRead(scope, options, context) {
+    const { network, key, grantId, owner } = context;
+    try {
+        const jobs = context.createJobs({
+            gatewayUrl: network.gatewayUrl,
+            chainId: network.chainId,
+            builderPrivateKey: key.privateKey,
+        });
+        const result = await jobs.readRaw({
+            owner: owner,
+            grantId: grantId,
+            scope,
+            wait: MAX_INLINE_WAIT_SECONDS,
+        });
+        const text = new TextDecoder().decode(result.body);
+        let payload = text;
+        if (result.contentType.includes("json")) {
+            try {
+                payload = JSON.parse(text);
+            }
+            catch {
+                // Keep the raw text rather than failing on a content-type lie.
+            }
+        }
+        return emitReadSuccess(options, network, scope, payload, {
+            paid: false,
+            delivery: "enclave",
+            jobId: result.jobId,
+            version: result.version,
+            server: "gateway job queue",
+        });
+    }
+    catch (error) {
+        return emitAppOutcome(options, {
+            status: "failed",
+            code: enclaveErrorCode(error),
+            message: `Enclave read failed: ${error instanceof Error ? error.message : String(error)}`,
+            remedy: enclaveRemedy(error),
+            network: network.name,
+            data: { delivery: "enclave", owner },
+        });
+    }
+}
+/** Inline wait the protocol allows; a cold sandbox needs seconds, not ms. */
+const MAX_INLINE_WAIT_SECONDS = 25;
+/** Map the jobs client's typed errors onto the binary's exit-code table. */
+function enclaveErrorCode(error) {
+    const name = error instanceof Error ? error.name : "";
+    switch (name) {
+        case "OwnerNotReadyError":
+            return "owner_not_ready";
+        case "GrantInvalidError":
+            return "grant_invalid";
+        case "BuilderUnknownError":
+            return "builder_unknown";
+        case "JobTimeoutError":
+            return "not_ready";
+        case "JobTransportError":
+            return "server_unavailable";
+        case "JobRequestTooLargeError":
+            return "bad_usage";
+        default:
+            return "internal";
+    }
+}
+function enclaveRemedy(error) {
+    const name = error instanceof Error ? error.name : "";
+    if (name === "OwnerNotReadyError") {
+        return "the owner has not finished Personal Server setup in the web app";
+    }
+    if (name === "JobTimeoutError") {
+        return "the sandbox is still waking; run the same command again";
+    }
+    if (name === "BuilderUnknownError") {
+        return "vana app register";
+    }
+    return undefined;
+}
+//# sourceMappingURL=read.js.map

package/dist/cli/app/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../src/cli/app/read.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,SAAS,EACT,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,GAEvB,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAC;AAC/E,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACL,kBAAkB,EAClB,aAAa,GAEd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,cAAc,GAEf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,UAAU,GAEX,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAA0B,MAAM,cAAc,CAAC;AAsBtE,SAAS,iBAAiB,CAAC,KAAc;IAGvC,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAa,EACb,OAA2B,EAC3B,OAAiB,EAAE;IAEnB,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,cAAc,CAAC,OAAO,EAAE;YAC7B,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,yBAAyB;YAClC,MAAM,EAAE,iBAAiB,KAAK,eAAe;YAC7C,OAAO,EAAE,OAAO,CAAC,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAmB,CAAC;IACxB,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0DAA0D;gBACnE,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE9E,oEAAoE;IACpE,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,SAAS,OAAO,CAAC,KAAK,sBAAsB,OAAO,CAAC,IAAI,GAAG;gBACpE,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,4BAA4B,KAAK,GAAG;gBAC7C,MAAM,EAAE,mBAAmB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACpD,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QACD,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IACjE,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,mBAAmB,EAAE,CAAC;SACtD,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SAC/B,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAE9D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE;YACpC,OAAO;YACP,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,KAAK;YACtB,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,gBAAgB;SAChD,CAAC,CAAC;IACL,CAAC;IAED,mEAAmE;IACnE,IAAI,UAAoB,CAAC;IACzB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,UAAU,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;YAChE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,aAAa,cAAc,qCAAqC;gBACzE,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,mBAAmB,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,sBAAsB,CAAC;IACjD,MAAM,cAAc,GAClB,SAAS,CAAC,qBAAqB,CAAC,SACjC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEnB,wEAAwE;IACxE,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAC5C,MAAM,SAAS,GAAG,CAAC,YAA2B,EAAuB,EAAE;QACrE,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,YAAY,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1C,OAAO,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;YACtC,CAAC;YACD,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzB,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,SAAS,GAAY,IAAI,CAAC;IAC9B,KAAK,MAAM,iBAAiB,IAAI,UAAU,EAAE,CAAC;QAC3C,0EAA0E;QAC1E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;gBACxB,iBAAiB;gBACjB,KAAK;gBACL,OAAO,EAAE,OAAO,CAAC,KAAK;gBACtB,YAAY,EAAE,GAAG,CAAC,OAAO;gBACzB,WAAW;gBACX,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC;aAC3C,CAAC,CAAC;YACH,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE;gBAC3D,IAAI,EAAE,KAAK;gBACX,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,+DAA+D;gBAC/D,2BAA2B;gBAC3B,SAAS,GAAG,KAAK,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,gEAAgE;YAChE,oEAAoE;YACpE,IAAI,MAAM,EAAE,CAAC;gBACX,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,OAAO,GACV,KAA2D,CAAC,OAAO;gBACpE,EAAE,CAAC;YACL,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC;YACxC,kEAAkE;YAClE,sEAAsE;YACtE,mEAAmE;YACnE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAChE,MAAM,WAAW,GAAG,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAExD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjB,OAAO,cAAc,CAAC,OAAO,EAAE;oBAC7B,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,mBAAmB,WAAW,wBAAwB;oBAC/D,MAAM,EAAE,iBAAiB,KAAK,YAAY,OAAO,CAAC,KAAK,QAAQ;oBAC/D,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,IAAI,EAAE;wBACJ,MAAM,EAAE,SAAS;wBACjB,WAAW;wBACX,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;wBAC5B,WAAW,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI;wBAClC,aAAa,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI;qBACvC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACtD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,0DAA0D;oBAC1D,OAAO,cAAc,CAAC,OAAO,EAAE;wBAC7B,MAAM,EAAE,QAAQ;wBAChB,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE,uCAAuC,OAAO,CAAC,KAAK,4BAA4B;wBACzF,MAAM,EAAE,yCAAyC;wBACjD,OAAO,EAAE,OAAO,CAAC,IAAI;wBACrB,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE;qBAC1D,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,CAAC;oBAC9B,OAAO,cAAc,CAAC,OAAO,EAAE;wBAC7B,MAAM,EAAE,QAAQ;wBAChB,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EACL,mBAAmB,WAAW,qBAAqB,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,MAAM,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;wBACpG,OAAO,EAAE,OAAO,CAAC,IAAI;wBACrB,IAAI,EAAE;4BACJ,MAAM,EAAE,SAAS;4BACjB,WAAW;4BACX,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;yBAC7B;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,cAAc,CAAC,OAAO,EAAE;oBAC7B,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,sCAAsC,OAAO,CAAC,OAAO,GAAG;oBACjE,OAAO,EAAE,OAAO,CAAC,IAAI;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,iEAAiE;YACjE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;oBACxB,iBAAiB;oBACjB,KAAK;oBACL,OAAO,EAAE,OAAO,CAAC,KAAK;oBACtB,YAAY,EAAE,GAAG,CAAC,OAAO;oBACzB,WAAW;oBACX,MAAM,EAAE;wBACN,cAAc;wBACd,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,aAAa,EAAE,CAAC,SAAS,EAAE,EAAE,CAC3B,OAAO,CAAC,aAAa,CACnB,SAAwD,CACzD;wBACH,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;qBAClD;oBACD,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC;iBACzB,CAAC,CAAC;gBACH,IAAI,iBAAiB,EAAE,CAAC;oBACtB,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE;wBAC9B,MAAM,EAAE,iBAAiB;wBACzB,MAAM,EAAE,SAAS;wBACjB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;wBAC1B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACpC,OAAO,EAAE,MAAM,CAAC,OAA8C;qBAC/D,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE;oBAC3D,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,SAAS;oBACjB,WAAW;oBACX,MAAM,EAAE,iBAAiB;oBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,kEAAkE;gBAClE,+BAA+B;gBAC/B,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;gBACnD,OAAO,cAAc,CAAC,OAAO,EAAE;oBAC7B,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC;wBAChC,CAAC,CAAC,kBAAkB;wBACpB,CAAC,CAAC,oBAAoB;oBACxB,OAAO,EAAE,4CACP,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CACnE,EAAE;oBACF,MAAM,EACJ,iFAAiF;oBACnF,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE;iBACrD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,EAAE;QAC7B,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,yCAAyC,UAAU,CAAC,MAAM,gBAAgB,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU;QAC/H,MAAM,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;QACtE,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,IAAI,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,MAAM,EAAE;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CACrB,OAA0B,EAC1B,OAAwB,EACxB,KAAc,EACd,KAAa;IAEb,OAAO,cAAc,CAAC,OAAO,EAAE;QAC7B,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,WAAW,KAAK,YACvB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;QACF,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,UAAU,GAAG,YAAY;QACpE,OAAO,EAAE,OAAO,CAAC,IAAI;KACtB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,OAA2B,EAC3B,OAAwB,EACxB,KAAa,EACb,IAAa,EACb,IAA6B;IAE7B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,cAAc,CAAC,OAAO,EAAE;YAC7B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,QAAQ,KAAK,GAAG;YACzB,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;IACD,qEAAqE;IACrE,kDAAkD;IAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI;YACxB,CAAC,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG;YACvC,CAAC,CAAC,IAAI,CAAC,eAAe;gBACpB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,QAAQ,KAAK,GAAG,QAAQ,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,cAAc,CAC3B,KAAa,EACb,OAA2B,EAC3B,OAMC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;YAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,iBAAiB,EAAE,GAAG,CAAC,UAAU;SAClC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,KAAK,EAAE,KAAsB;YAC7B,OAAO,EAAE,OAAwB;YACjC,KAAK;YACL,IAAI,EAAE,uBAAuB;SAC9B,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;YACvD,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,mBAAmB;SAC5B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,OAAO,EAAE;YAC7B,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;YAC7B,OAAO,EAAE,wBACP,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;YACF,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC;YAC5B,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,oBAAoB;YACvB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,mBAAmB;YACtB,OAAO,eAAe,CAAC;QACzB,KAAK,qBAAqB;YACxB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,iBAAiB;YACpB,OAAO,WAAW,CAAC;QACrB,KAAK,mBAAmB;YACtB,OAAO,oBAAoB,CAAC;QAC9B,KAAK,yBAAyB;YAC5B,OAAO,WAAW,CAAC;QACrB;YACE,OAAO,UAAU,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,OAAO,iEAAiE,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACnC,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/cli/app/register.d.ts

@@ -0,0 +1,34 @@
+/**
+ * `vana app register` - idempotent builder registration at the gateway.
+ *
+ * Resolves the app key (generating one on first use), checks the gateway
+ * first and exits 0 when the app is already registered, otherwise signs the
+ * EIP-712 BuilderRegistration and posts it. Safe at the top of any script.
+ */
+import { type GatewayClient } from "@opendatalabs/vana-sdk";
+import { resolveAppKey, type ResolvedAppKey } from "../../core/app-key.js";
+import { type ResolvedNetwork } from "../../core/network.js";
+import { type AppCommandOptions } from "./outcome.js";
+export interface RegisterCommandOptions extends AppCommandOptions {
+    /** Public URL of the app; the gateway stores it on the record. */
+    appUrl?: string;
+}
+export interface RegisterDeps {
+    createClient?: (gatewayUrl: string) => GatewayClient;
+    resolveKey?: typeof resolveAppKey;
+}
+export declare function builderRegistrationDomainFor(network: ResolvedNetwork): {
+    readonly name: "Vana Data Portability";
+    readonly version: "1";
+    readonly chainId: bigint;
+    readonly verifyingContract: `0x${string}`;
+};
+export declare function signBuilderRegistration(key: ResolvedAppKey, network: ResolvedNetwork, appUrl: string): Promise<{
+    ownerAddress: string;
+    granteeAddress: string;
+    publicKey: string;
+    appUrl: string;
+    signature: string;
+}>;
+export declare function runAppRegister(options: RegisterCommandOptions, deps?: RegisterDeps): Promise<number>;
+//# sourceMappingURL=register.d.ts.map

package/dist/cli/app/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../src/cli/app/register.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,aAAa,EAEb,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtE,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,aAAa,CAAC;IACrD,UAAU,CAAC,EAAE,OAAO,aAAa,CAAC;CACnC;AAKD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,eAAe;;;;gCAKlB,KAAK,MAAM,EAAE;EAE/D;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IACT,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAeD;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,sBAAsB,EAC/B,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,MAAM,CAAC,CA+EjB"}