vana-cli 0.15.1 → 0.23.4

package/dist/cli/app/register.js

@@ -0,0 +1,113 @@
+/**
+ * `vana app register` - idempotent builder registration at the gateway.
+ *
+ * Resolves the app key (generating one on first use), checks the gateway
+ * first and exits 0 when the app is already registered, otherwise signs the
+ * EIP-712 BuilderRegistration and posts it. Safe at the top of any script.
+ */
+import { BUILDER_REGISTRATION_TYPES, createGatewayClient, } from "@opendatalabs/vana-sdk";
+import { privateKeyToAccount } from "viem/accounts";
+import { resolveAppKey, InvalidAppKeyError, } from "../../core/app-key.js";
+import { UnknownNetworkError, resolveNetwork, } from "../../core/network.js";
+import { emitAppOutcome } from "./outcome.js";
+const EIP712_DOMAIN_NAME = "Vana Data Portability";
+const EIP712_DOMAIN_VERSION = "1";
+export function builderRegistrationDomainFor(network) {
+    return {
+        name: EIP712_DOMAIN_NAME,
+        version: EIP712_DOMAIN_VERSION,
+        chainId: BigInt(network.chainId),
+        verifyingContract: network.granteesContract,
+    };
+}
+export async function signBuilderRegistration(key, network, appUrl) {
+    const account = privateKeyToAccount(key.privateKey);
+    const message = {
+        ownerAddress: key.address,
+        granteeAddress: key.address,
+        publicKey: key.publicKey,
+        appUrl,
+    };
+    const signature = await account.signTypedData({
+        domain: builderRegistrationDomainFor(network),
+        types: BUILDER_REGISTRATION_TYPES,
+        primaryType: "BuilderRegistration",
+        message,
+    });
+    return { ...message, signature };
+}
+export async function runAppRegister(options, deps = {}) {
+    let network;
+    try {
+        network = resolveNetwork(options.network);
+    }
+    catch (error) {
+        if (error instanceof UnknownNetworkError) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "bad_usage",
+                message: error.message,
+            });
+        }
+        throw error;
+    }
+    let key;
+    try {
+        key = (deps.resolveKey ?? resolveAppKey)({ allowGenerate: true });
+    }
+    catch (error) {
+        if (error instanceof InvalidAppKeyError) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "bad_usage",
+                message: error.message,
+                network: network.name,
+            });
+        }
+        throw error;
+    }
+    const client = (deps.createClient ?? createGatewayClient)(network.gatewayUrl);
+    try {
+        if (await client.isRegisteredBuilder(key.address)) {
+            return emitAppOutcome(options, {
+                status: "done",
+                code: "ok",
+                message: "Already registered.",
+                network: network.name,
+                data: {
+                    address: key.address,
+                    keySource: key.source,
+                    alreadyRegistered: true,
+                },
+            });
+        }
+        const params = await signBuilderRegistration(key, network, options.appUrl ?? "");
+        const result = await client.registerBuilder(params);
+        return emitAppOutcome(options, {
+            status: "done",
+            code: "ok",
+            message: result.alreadyRegistered
+                ? "Already registered."
+                : "Builder registered.",
+            network: network.name,
+            data: {
+                address: key.address,
+                keySource: key.source,
+                builderId: result.builderId ?? null,
+                alreadyRegistered: result.alreadyRegistered,
+            },
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "Gateway request failed.";
+        return emitAppOutcome(options, {
+            status: "failed",
+            code: "gateway_unreachable",
+            message: `Builder registration failed: ${message}`,
+            remedy: "check connectivity to " + network.gatewayUrl + " and retry",
+            network: network.name,
+            data: { address: key.address },
+        });
+    }
+}
+//# sourceMappingURL=register.js.map

package/dist/cli/app/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../src/cli/app/register.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACL,aAAa,EACb,kBAAkB,GAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,cAAc,GAEf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAA0B,MAAM,cAAc,CAAC;AAYtE,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AACnD,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,UAAU,4BAA4B,CAAC,OAAwB;IACnE,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAChC,iBAAiB,EAAE,OAAO,CAAC,gBAAiC;KACpD,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAmB,EACnB,OAAwB,EACxB,MAAc;IAQd,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG;QACd,YAAY,EAAE,GAAG,CAAC,OAAO;QACzB,cAAc,EAAE,GAAG,CAAC,OAAO;QAC3B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM;KACP,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;QAC5C,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;QAC7C,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,qBAAqB;QAClC,OAAO;KACR,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA+B,EAC/B,OAAqB,EAAE;IAEvB,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,GAAmB,CAAC;IACxB,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE9E,IAAI,CAAC;QACH,IAAI,MAAM,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,qBAAqB;gBAC9B,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,IAAI,EAAE;oBACJ,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,SAAS,EAAE,GAAG,CAAC,MAAM;oBACrB,iBAAiB,EAAE,IAAI;iBACxB;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC1C,GAAG,EACH,OAAO,EACP,OAAO,CAAC,MAAM,IAAI,EAAE,CACrB,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACpD,OAAO,cAAc,CAAC,OAAO,EAAE;YAC7B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,MAAM,CAAC,iBAAiB;gBAC/B,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,qBAAqB;YACzB,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,IAAI,EAAE;gBACJ,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAE,GAAG,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;gBACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;aAC5C;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;QACrE,OAAO,cAAc,CAAC,OAAO,EAAE;YAC7B,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,gCAAgC,OAAO,EAAE;YAClD,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,UAAU,GAAG,YAAY;YACpE,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/cli/app/request.d.ts

@@ -0,0 +1,50 @@
+/**
+ * `vana app request` - ask a person for access and get the grant back.
+ *
+ * The half of the loop that cannot be driven headlessly: the CLI creates
+ * the access request, prints the approval URL, and polls until the person
+ * approves, denies, or it expires. With `--no-input` it prints the URL and
+ * exits 7, so an agent can hand the link to a human and come back later
+ * with `vana app requests show <id>`.
+ *
+ * The request is persisted the moment it is created, before any approval,
+ * so a `--no-input` run is findable afterwards.
+ */
+import { createDirectDataController } from "@opendatalabs/vana-sdk/server";
+import { resolveAppKey } from "../../core/app-key.js";
+import { type RequestsStore } from "../../core/requests-store.js";
+import { type AppCommandOptions } from "./outcome.js";
+export interface RequestCommandOptions extends AppCommandOptions {
+    scopes?: string;
+    /** Derivative question text, requires --derived and --sources. */
+    question?: string;
+    derived?: string;
+    sources?: string;
+    /** Where the approval UI returns the person after they decide. */
+    returnUrl?: string;
+    /** Seconds to poll before giving up. */
+    timeout?: string;
+    appId?: string;
+    appName?: string;
+    appUrl?: string;
+}
+export interface RequestDeps {
+    resolveKey?: typeof resolveAppKey;
+    createController?: typeof createDirectDataController;
+    requests?: RequestsStore;
+    sleep?: (ms: number) => Promise<void>;
+    now?: () => number;
+}
+/**
+ * The connector source shown on the approval screen.
+ *
+ * It has to come from a scope the person actually connected, not from the
+ * first entry in the list: with a derivative question the derived scope can
+ * come first, and a request for `coach.weekly,spotify.history` would ask
+ * the person to "Connect coach", a source that does not exist. Source
+ * scopes win, then any non-derived scope, and `write:` prefixes never count
+ * as a source name.
+ */
+export declare function resolveSourceKey(scopes: string[], derived: string | undefined, sourceScopes: string[]): string;
+export declare function runAppRequest(options: RequestCommandOptions, deps?: RequestDeps): Promise<number>;
+//# sourceMappingURL=request.d.ts.map

package/dist/cli/app/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../../src/cli/app/request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAEL,aAAa,EAEd,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAEL,KAAK,aAAa,EAGnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtE,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,OAAO,aAAa,CAAC;IAClC,gBAAgB,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACrD,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAaD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,YAAY,EAAE,MAAM,EAAE,GACrB,MAAM,CAQR;AASD,wBAAsB,aAAa,CACjC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,MAAM,CAAC,CAwNjB"}

package/dist/cli/app/request.js

@@ -0,0 +1,252 @@
+/**
+ * `vana app request` - ask a person for access and get the grant back.
+ *
+ * The half of the loop that cannot be driven headlessly: the CLI creates
+ * the access request, prints the approval URL, and polls until the person
+ * approves, denies, or it expires. With `--no-input` it prints the URL and
+ * exits 7, so an agent can hand the link to a human and come back later
+ * with `vana app requests show <id>`.
+ *
+ * The request is persisted the moment it is created, before any approval,
+ * so a `--no-input` run is findable afterwards.
+ */
+import { createDirectDataController } from "@opendatalabs/vana-sdk/server";
+import { AppKeyMissingError, resolveAppKey, } from "../../core/app-key.js";
+import { UnknownNetworkError, resolveNetwork, } from "../../core/network.js";
+import { createRequestsStore, } from "../../core/requests-store.js";
+import { emitAppOutcome } from "./outcome.js";
+const POLL_INTERVAL_MS = 3_000;
+const DEFAULT_TIMEOUT_SECONDS = 600;
+/** Statuses that end the poll loop. */
+const TERMINAL = new Set([
+    "approved",
+    "ready_for_read",
+    "completed",
+    "denied",
+    "expired",
+]);
+/**
+ * The connector source shown on the approval screen.
+ *
+ * It has to come from a scope the person actually connected, not from the
+ * first entry in the list: with a derivative question the derived scope can
+ * come first, and a request for `coach.weekly,spotify.history` would ask
+ * the person to "Connect coach", a source that does not exist. Source
+ * scopes win, then any non-derived scope, and `write:` prefixes never count
+ * as a source name.
+ */
+export function resolveSourceKey(scopes, derived, sourceScopes) {
+    const namespace = (scope) => scope.replace(/^write:/, "").split(".")[0];
+    if (sourceScopes.length > 0) {
+        return namespace(sourceScopes[0]);
+    }
+    const plain = scopes.filter((scope) => scope !== derived);
+    return namespace((plain[0] ?? scopes[0]));
+}
+function splitList(value) {
+    return (value ?? "")
+        .split(",")
+        .map((entry) => entry.trim())
+        .filter(Boolean);
+}
+export async function runAppRequest(options, deps = {}) {
+    let network;
+    try {
+        network = resolveNetwork(options.network);
+    }
+    catch (error) {
+        if (error instanceof UnknownNetworkError) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "bad_usage",
+                message: error.message,
+            });
+        }
+        throw error;
+    }
+    const scopes = splitList(options.scopes);
+    if (scopes.length === 0) {
+        return emitAppOutcome(options, {
+            status: "failed",
+            code: "bad_usage",
+            message: "At least one scope is required.",
+            remedy: "vana app request --scopes github.repositories",
+            network: network.name,
+        });
+    }
+    // A question needs its derived scope granted as a plain read too, which
+    // the SDK validates eagerly; check it here so the error names the fix.
+    const sourceScopes = splitList(options.sources);
+    if (options.question || options.derived || sourceScopes.length > 0) {
+        if (!options.question || !options.derived || sourceScopes.length === 0) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "bad_usage",
+                message: "A derivative question needs --question, --derived and --sources together.",
+                network: network.name,
+            });
+        }
+        if (!scopes.includes(options.derived)) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "bad_usage",
+                message: `The derived scope ${options.derived} must also appear in --scopes as a plain read.`,
+                remedy: `vana app request --scopes ${[...scopes, options.derived].join(",")} ...`,
+                network: network.name,
+            });
+        }
+    }
+    let key;
+    try {
+        key = (deps.resolveKey ?? resolveAppKey)({});
+    }
+    catch (error) {
+        if (error instanceof AppKeyMissingError) {
+            return emitAppOutcome(options, {
+                status: "failed",
+                code: "bad_usage",
+                message: "No app key on this machine yet.",
+                remedy: "vana app register",
+                network: network.name,
+            });
+        }
+        throw error;
+    }
+    const controller = (deps.createController ?? createDirectDataController)({
+        // The dev host set serves moksha; production serves both networks.
+        env: network.env === "dev" ? "dev" : "production",
+        network: network.name,
+        appPrivateKey: key.privateKey,
+        app: {
+            id: options.appId ?? "vana-cli",
+            name: options.appName ?? "Vana CLI",
+            homepageUrl: options.appUrl ?? "https://github.com/vana-com/vana-cli",
+        },
+        source: resolveSourceKey(scopes, options.derived, sourceScopes),
+        scopes,
+    });
+    const requests = deps.requests ?? createRequestsStore();
+    let created;
+    try {
+        created = await controller.createAccessRequest({
+            returnUrl: options.returnUrl ?? "https://github.com/vana-com/vana-cli",
+            ...(options.question && options.derived
+                ? {
+                    questions: [
+                        {
+                            derivedScope: options.derived,
+                            sourceScopes,
+                            question: options.question,
+                        },
+                    ],
+                }
+                : {}),
+        });
+    }
+    catch (error) {
+        return emitAppOutcome(options, {
+            status: "failed",
+            code: "gateway_unreachable",
+            message: `Could not create the access request: ${error instanceof Error ? error.message : String(error)}`,
+            network: network.name,
+        });
+    }
+    // Persist before anything can go wrong, so --no-input runs are findable.
+    const stored = {
+        requestId: created.requestId,
+        appAddress: key.address,
+        network: network.name,
+        gatewayUrl: network.gatewayUrl,
+        scopes,
+        approvalUrl: created.approvalUrl,
+        createdAt: new Date().toISOString(),
+        status: "pending",
+        updatedAt: new Date().toISOString(),
+        ...(created.expiresAt ? { expiresAt: created.expiresAt } : {}),
+        ...(options.question && options.derived
+            ? { questions: [{ derivedScope: options.derived, sourceScopes }] }
+            : {}),
+    };
+    requests.save(stored);
+    if (options.noInput) {
+        return emitAppOutcome(options, {
+            status: "failed",
+            code: "confirmation_required",
+            message: "A person has to approve this request.",
+            remedy: `send them ${created.approvalUrl}, then: vana app requests show ${created.requestId}`,
+            network: network.name,
+            data: {
+                requestId: created.requestId,
+                approvalUrl: created.approvalUrl,
+                scopes,
+                expiresAt: created.expiresAt ?? null,
+            },
+        });
+    }
+    if (!options.json && !options.quiet) {
+        process.stderr.write(`\n  Approve at  ${created.approvalUrl}\n  Request     ${created.requestId}\n  Waiting for approval...\n\n`);
+    }
+    const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    const now = deps.now ?? (() => Date.now());
+    const deadline = now() + Number(options.timeout ?? DEFAULT_TIMEOUT_SECONDS) * 1000;
+    while (now() < deadline) {
+        let status;
+        try {
+            status = await controller.getAccessRequestStatus(created.requestId);
+        }
+        catch {
+            await sleep(POLL_INTERVAL_MS);
+            continue;
+        }
+        if (TERMINAL.has(status.status)) {
+            requests.update(created.requestId, {
+                status: status.status,
+                ...(status.grantId ? { grantId: status.grantId } : {}),
+                ...(status.scopes ? { approvedScopes: status.scopes } : {}),
+                ...(status.delivery ? { delivery: status.delivery } : {}),
+                ...(status.personalServerUrl
+                    ? { personalServerUrl: status.personalServerUrl }
+                    : {}),
+            });
+            if (status.status === "denied" || status.status === "expired") {
+                return emitAppOutcome(options, {
+                    status: "failed",
+                    code: "grant_invalid",
+                    message: `The request was ${status.status}.`,
+                    network: network.name,
+                    data: { requestId: created.requestId },
+                });
+            }
+            const approvedScopes = status.scopes ?? scopes;
+            return emitAppOutcome(options, {
+                status: "done",
+                code: "ok",
+                message: `Approved. Grant ${status.grantId ?? "(pending id)"}.`,
+                remedy: status.grantId
+                    ? `vana app read ${approvedScopes[0]} --grant ${status.grantId}`
+                    : undefined,
+                network: network.name,
+                data: {
+                    requestId: created.requestId,
+                    grantId: status.grantId ?? null,
+                    scopes: approvedScopes,
+                    delivery: status.delivery ?? "personal_server",
+                    personalServerUrl: status.personalServerUrl ?? null,
+                },
+            });
+        }
+        await sleep(POLL_INTERVAL_MS);
+    }
+    return emitAppOutcome(options, {
+        status: "failed",
+        code: "not_ready",
+        message: "Nobody approved the request in time; it is still open.",
+        remedy: `vana app requests show ${created.requestId}`,
+        network: network.name,
+        data: {
+            requestId: created.requestId,
+            approvalUrl: created.approvalUrl,
+        },
+    });
+}
+//# sourceMappingURL=request.js.map

package/dist/cli/app/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../../src/cli/app/request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACL,kBAAkB,EAClB,aAAa,GAEd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,cAAc,GAEf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,GAIpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAA0B,MAAM,cAAc,CAAC;AAyBtE,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,uCAAuC;AACvC,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC;IAC5C,UAAU;IACV,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAgB,EAChB,OAA2B,EAC3B,YAAsB;IAEtB,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAClC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IAC1D,OAAO,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA8B,EAC9B,OAAoB,EAAE;IAEtB,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,cAAc,CAAC,OAAO,EAAE;YAC7B,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,iCAAiC;YAC1C,MAAM,EAAE,+CAA+C;YACvD,OAAO,EAAE,OAAO,CAAC,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,WAAW;gBACjB,OAAO,EACL,2EAA2E;gBAC7E,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,qBAAqB,OAAO,CAAC,OAAO,gDAAgD;gBAC7F,MAAM,EAAE,6BAA6B,CAAC,GAAG,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM;gBACjF,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,GAAmB,CAAC;IACxB,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,iCAAiC;gBAC1C,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC,CAAC;QACvE,mEAAmE;QACnE,GAAG,EAAE,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;QACjD,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,aAAa,EAAE,GAAG,CAAC,UAAU;QAC7B,GAAG,EAAE;YACH,EAAE,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU;YAC/B,IAAI,EAAE,OAAO,CAAC,OAAO,IAAI,UAAU;YACnC,WAAW,EAAE,OAAO,CAAC,MAAM,IAAI,sCAAsC;SACtE;QACD,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC;QAC/D,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,mBAAmB,EAAE,CAAC;IACxD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAAC;YAC7C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,sCAAsC;YACtE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO;gBACrC,CAAC,CAAC;oBACE,SAAS,EAAE;wBACT;4BACE,YAAY,EAAE,OAAO,CAAC,OAAO;4BAC7B,YAAY;4BACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAClB;qBACX;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,OAAO,EAAE;YAC7B,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,wCACP,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;YACF,OAAO,EAAE,OAAO,CAAC,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,MAAM,MAAM,GAAkB;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,GAAG,CAAC,OAAO;QACvB,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM;QACN,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO;YACrC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEtB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,cAAc,CAAC,OAAO,EAAE;YAC7B,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,uCAAuC;YAChD,MAAM,EAAE,aAAa,OAAO,CAAC,WAAW,kCAAkC,OAAO,CAAC,SAAS,EAAE;YAC7F,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,IAAI,EAAE;gBACJ,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,MAAM;gBACN,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;aACrC;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mBAAmB,OAAO,CAAC,WAAW,mBAAmB,OAAO,CAAC,SAAS,iCAAiC,CAC5G,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GACZ,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,uBAAuB,CAAC,GAAG,IAAI,CAAC;IAEpE,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE;gBACjC,MAAM,EAAE,MAAM,CAAC,MAA6B;gBAC5C,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,MAAM,CAAC,iBAAiB;oBAC1B,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE;oBACjD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9D,OAAO,cAAc,CAAC,OAAO,EAAE;oBAC7B,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,mBAAmB,MAAM,CAAC,MAAM,GAAG;oBAC5C,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;iBACvC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC;YAC/C,OAAO,cAAc,CAAC,OAAO,EAAE;gBAC7B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,mBAAmB,MAAM,CAAC,OAAO,IAAI,cAAc,GAAG;gBAC/D,MAAM,EAAE,MAAM,CAAC,OAAO;oBACpB,CAAC,CAAC,iBAAiB,cAAc,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,OAAO,EAAE;oBAChE,CAAC,CAAC,SAAS;gBACb,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,IAAI,EAAE;oBACJ,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;oBAC/B,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,iBAAiB;oBAC9C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;iBACpD;aACF,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,EAAE;QAC7B,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,0BAA0B,OAAO,CAAC,SAAS,EAAE;QACrD,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,IAAI,EAAE;YACJ,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/app/requests.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `vana app requests list|show <id>` - what this machine asked for, and
+ * what came back.
+ *
+ * `list` reads the local index alone, so it works offline and is the way an
+ * agent recovers a request id it did not keep. `show` merges the local
+ * entry with the live status and writes back what changed, which is how a
+ * `--no-input` request eventually learns its grant id.
+ */
+import { createDirectDataController } from "@opendatalabs/vana-sdk/server";
+import { resolveAppKey } from "../../core/app-key.js";
+import { type RequestsStore } from "../../core/requests-store.js";
+import { type AppCommandOptions } from "./outcome.js";
+export interface RequestsDeps {
+    resolveKey?: typeof resolveAppKey;
+    createController?: typeof createDirectDataController;
+    requests?: RequestsStore;
+}
+export declare function runAppRequestsList(options: AppCommandOptions, deps?: RequestsDeps): Promise<number>;
+export declare function runAppRequestsShow(requestId: string, options: AppCommandOptions, deps?: RequestsDeps): Promise<number>;
+//# sourceMappingURL=requests.d.ts.map

package/dist/cli/app/requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../../src/cli/app/requests.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAEL,aAAa,EAEd,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAEL,KAAK,aAAa,EAEnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGtE,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,OAAO,aAAa,CAAC;IAClC,gBAAgB,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACrD,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAsBD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,MAAM,CAAC,CA4CjB;AAED,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,MAAM,CAAC,CAoGjB"}

package/dist/cli/app/requests.js

@@ -0,0 +1,163 @@
+/**
+ * `vana app requests list|show <id>` - what this machine asked for, and
+ * what came back.
+ *
+ * `list` reads the local index alone, so it works offline and is the way an
+ * agent recovers a request id it did not keep. `show` merges the local
+ * entry with the live status and writes back what changed, which is how a
+ * `--no-input` request eventually learns its grant id.
+ */
+import { createDirectDataController } from "@opendatalabs/vana-sdk/server";
+import { AppKeyMissingError, resolveAppKey, } from "../../core/app-key.js";
+import { UnknownNetworkError, resolveNetwork, } from "../../core/network.js";
+import { createRequestsStore, } from "../../core/requests-store.js";
+import { emitAppOutcome } from "./outcome.js";
+import { resolveSourceKey } from "./request.js";
+function resolveNetworkOrFail(options) {
+    try {
+        return { ok: true, network: resolveNetwork(options.network) };
+    }
+    catch (error) {
+        if (error instanceof UnknownNetworkError) {
+            return {
+                ok: false,
+                exitCode: emitAppOutcome(options, {
+                    status: "failed",
+                    code: "bad_usage",
+                    message: error.message,
+                }),
+            };
+        }
+        throw error;
+    }
+}
+export async function runAppRequestsList(options, deps = {}) {
+    const resolved = resolveNetworkOrFail(options);
+    if (!resolved.ok) {
+        return resolved.exitCode;
+    }
+    const { network } = resolved;
+    // Scoped to this app when a key exists; without one, show everything the
+    // machine has rather than nothing.
+    let appAddress;
+    try {
+        appAddress = (deps.resolveKey ?? resolveAppKey)({}).address;
+    }
+    catch (error) {
+        if (!(error instanceof AppKeyMissingError)) {
+            throw error;
+        }
+    }
+    const entries = (deps.requests ?? createRequestsStore()).list({
+        appAddress,
+        network: network.name,
+    });
+    return emitAppOutcome(options, {
+        status: "done",
+        code: "ok",
+        message: entries.length === 0
+            ? "No access requests from this machine yet."
+            : `${entries.length} access request${entries.length === 1 ? "" : "s"}.`,
+        remedy: entries.length === 0 ? "vana app request --scopes <scope>" : undefined,
+        network: network.name,
+        data: {
+            count: entries.length,
+            requests: entries.map((entry) => ({
+                requestId: entry.requestId,
+                status: entry.status,
+                scopes: entry.scopes,
+                grantId: entry.grantId ?? null,
+                createdAt: entry.createdAt,
+            })),
+        },
+    });
+}
+export async function runAppRequestsShow(requestId, options, deps = {}) {
+    const resolved = resolveNetworkOrFail(options);
+    if (!resolved.ok) {
+        return resolved.exitCode;
+    }
+    const { network } = resolved;
+    const requests = deps.requests ?? createRequestsStore();
+    const stored = requests.get(requestId);
+    if (!stored) {
+        return emitAppOutcome(options, {
+            status: "failed",
+            code: "bad_usage",
+            message: `No local record of ${requestId}.`,
+            remedy: "vana app requests list",
+            network: network.name,
+        });
+    }
+    let key = null;
+    try {
+        key = (deps.resolveKey ?? resolveAppKey)({});
+    }
+    catch (error) {
+        if (!(error instanceof AppKeyMissingError)) {
+            throw error;
+        }
+    }
+    // Refresh from the service when we can sign; offline or keyless, report
+    // what the local index knows rather than failing.
+    let live = null;
+    if (key) {
+        try {
+            const controller = (deps.createController ?? createDirectDataController)({
+                env: network.env === "dev" ? "dev" : "production",
+                network: network.name,
+                appPrivateKey: key.privateKey,
+                app: {
+                    id: "vana-cli",
+                    name: "Vana CLI",
+                    homepageUrl: "https://github.com/vana-com/vana-cli",
+                },
+                source: resolveSourceKey(stored.scopes, stored.questions?.[0]?.derivedScope, stored.questions?.[0]?.sourceScopes ?? []),
+                scopes: stored.scopes,
+            });
+            live = await controller.getAccessRequestStatus(requestId);
+        }
+        catch {
+            live = null;
+        }
+    }
+    if (live) {
+        requests.update(requestId, {
+            status: live.status,
+            ...(live.grantId ? { grantId: live.grantId } : {}),
+            ...(live.scopes ? { approvedScopes: live.scopes } : {}),
+            ...(live.delivery ? { delivery: live.delivery } : {}),
+            ...(live.personalServerUrl
+                ? { personalServerUrl: live.personalServerUrl }
+                : {}),
+        });
+    }
+    const status = live?.status ?? stored.status;
+    const grantId = live?.grantId ?? stored.grantId ?? null;
+    const scopes = live?.scopes ?? stored.approvedScopes ?? stored.scopes;
+    return emitAppOutcome(options, {
+        status: "done",
+        code: "ok",
+        message: `${requestId}: ${status}${live ? "" : " (local record, service not reached)"}.`,
+        remedy: grantId
+            ? `vana app read ${scopes[0]} --grant ${grantId}`
+            : status === "pending"
+                ? `still waiting; approve at ${stored.approvalUrl}`
+                : undefined,
+        network: network.name,
+        data: {
+            requestId,
+            status,
+            live: Boolean(live),
+            scopes,
+            requestedScopes: stored.scopes,
+            grantId,
+            delivery: live?.delivery ?? stored.delivery ?? null,
+            personalServerUrl: live?.personalServerUrl ?? stored.personalServerUrl ?? null,
+            approvalUrl: stored.approvalUrl,
+            createdAt: stored.createdAt,
+            expiresAt: stored.expiresAt ?? null,
+        },
+    });
+}
+//# sourceMappingURL=requests.js.map

package/dist/cli/app/requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../../src/cli/app/requests.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACL,kBAAkB,EAClB,aAAa,GAEd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,cAAc,GAEf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,GAGpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAA0B,MAAM,cAAc,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAQhD,SAAS,oBAAoB,CAC3B,OAA0B;IAE1B,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE;oBAChC,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB,CAAC;aACH,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA0B,EAC1B,OAAqB,EAAE;IAEvB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAE7B,yEAAyE;IACzE,mCAAmC;IACnC,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC;QAC5D,UAAU;QACV,OAAO,EAAE,OAAO,CAAC,IAAI;KACtB,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC,OAAO,EAAE;QAC7B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI;QACV,OAAO,EACL,OAAO,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC,2CAA2C;YAC7C,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,kBAAkB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;QAC3E,MAAM,EACJ,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,SAAS;QACxE,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,IAAI,EAAE;YACJ,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAChC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;SACJ;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,OAA0B,EAC1B,OAAqB,EAAE;IAEvB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC3B,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,mBAAmB,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,cAAc,CAAC,OAAO,EAAE;YAC7B,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,sBAAsB,SAAS,GAAG;YAC3C,MAAM,EAAE,wBAAwB;YAChC,OAAO,EAAE,OAAO,CAAC,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,GAA0B,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,kDAAkD;IAClD,IAAI,IAAI,GAIG,IAAI,CAAC;IAChB,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC,CAAC;gBACvE,GAAG,EAAE,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;gBACjD,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,aAAa,EAAE,GAAG,CAAC,UAAU;gBAC7B,GAAG,EAAE;oBACH,EAAE,EAAE,UAAU;oBACd,IAAI,EAAE,UAAU;oBAChB,WAAW,EAAE,sCAAsC;iBACpD;gBACD,MAAM,EAAE,gBAAgB,CACtB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EACnC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,EAAE,CAC1C;gBACD,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,IAAI,GAAG,MAAM,UAAU,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,MAA6B;YAC1C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,iBAAiB;gBACxB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,CAAC;IAEtE,OAAO,cAAc,CAAC,OAAO,EAAE;QAC7B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,GAAG,SAAS,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sCAAsC,GAAG;QACxF,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,iBAAiB,MAAM,CAAC,CAAC,CAAC,YAAY,OAAO,EAAE;YACjD,CAAC,CAAC,MAAM,KAAK,SAAS;gBACpB,CAAC,CAAC,6BAA6B,MAAM,CAAC,WAAW,EAAE;gBACnD,CAAC,CAAC,SAAS;QACf,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,IAAI,EAAE;YACJ,SAAS;YACT,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;YACnB,MAAM;YACN,eAAe,EAAE,MAAM,CAAC,MAAM;YAC9B,OAAO;YACP,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI;YACnD,iBAAiB,EACf,IAAI,EAAE,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,IAAI,IAAI;YAC7D,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;SACpC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/app/whoami.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `vana app whoami` - the app identity at a glance: address, where the key
+ * came from, network, registration state. Never creates a key.
+ */
+import { type GatewayClient } from "@opendatalabs/vana-sdk";
+import { resolveAppKey } from "../../core/app-key.js";
+import { type AppCommandOptions } from "./outcome.js";
+export interface WhoamiDeps {
+    createClient?: (gatewayUrl: string) => GatewayClient;
+    resolveKey?: typeof resolveAppKey;
+}
+export declare function runAppWhoami(options: AppCommandOptions, deps?: WhoamiDeps): Promise<number>;
+//# sourceMappingURL=whoami.d.ts.map

package/dist/cli/app/whoami.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../../src/cli/app/whoami.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,aAAa,EACd,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtE,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,aAAa,CAAC;IACrD,UAAU,CAAC,EAAE,OAAO,aAAa,CAAC;CACnC;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE,UAAe,GACpB,OAAO,CAAC,MAAM,CAAC,CA6DjB"}