vana-cli 0.24.5 → 0.26.0

package/dist/personal-server/local/config.d.ts

@@ -0,0 +1,23 @@
+import type { VanaNetworkName } from "../../core/network.js";
+/** What a Personal Server needs to know about the network it serves. */
+export interface LocalServerNetwork {
+    name: VanaNetworkName;
+    chainId: number;
+    gatewayUrl: string;
+    storageApiUrl: string;
+    contracts: Record<string, string>;
+}
+export declare function localServerNetwork(name: VanaNetworkName): LocalServerNetwork;
+/** The pinned server release, matching runtime-pkg/package.json. */
+export declare const PERSONAL_SERVER_VERSION = "1.24.6";
+export declare function localServerHome(): string;
+/**
+ * The CLI's own data dir per network. Never Desktop's
+ * (`~/.vana/desktop/personal-server/...`): two processes on one index and one
+ * server key would corrupt both.
+ */
+export declare function localServerDataDir(network: VanaNetworkName): string;
+export declare function localServerRuntimeDir(): string;
+/** Ports Desktop and the CLI both try first; the loopback approval page is port + 1. */
+export declare const LOCAL_SERVER_PORTS: readonly [8080, 8082, 8084];
+//# sourceMappingURL=config.d.ts.map

package/dist/personal-server/local/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/personal-server/local/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AA+BD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,kBAAkB,CAE5E;AAED,oEAAoE;AACpE,eAAO,MAAM,uBAAuB,WAAW,CAAC;AAEhD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,CAEnE;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wFAAwF;AACxF,eAAO,MAAM,kBAAkB,6BAA8B,CAAC"}

package/dist/personal-server/local/config.js

@@ -0,0 +1,51 @@
+import path from "node:path";
+import { getVanaHome } from "../../core/paths.js";
+// Same deployment on both chains. Mirrors the `contracts` block of Vana
+// Desktop's packages/app-runtime/src/personal-server/environments.json.
+const CONTRACTS = {
+    dataPortabilityEscrow: "0x07d7769081adc3a3DBe91f5E4B98E9A5a6B292e3",
+    dataPortabilityGrantees: "0x8325C0A0948483EdA023A1A2Fd895e62C5131234",
+    dataPortabilityPermissions: "0x4d3FA76064D88e0454cFc4CaD7e5FeC3e3124011",
+    dataPortabilityServer: "0xCae2CE0e9caa6643ed28186cF57bd40Bd9E17Eab",
+    dataRefinerRegistry: "0x93c3EF89369fDcf08Be159D9DeF0F18AB6Be008c",
+    dataRegistry: "0x8f1eFCdff3d0d5BB535e32620721c7EBed151867",
+    feeRegistry: "0xb4FA18443E0FA6cdC0280D20b8cCDB2377D13Bf2",
+};
+const NETWORKS = {
+    moksha: {
+        name: "moksha",
+        chainId: 14800,
+        gatewayUrl: "https://dp-rpc.moksha.vana.org",
+        storageApiUrl: "https://storage-dev.vana.org",
+        contracts: CONTRACTS,
+    },
+    mainnet: {
+        name: "mainnet",
+        chainId: 1480,
+        gatewayUrl: "https://dp-rpc.vana.org",
+        storageApiUrl: "https://storage.vana.org",
+        contracts: CONTRACTS,
+    },
+};
+export function localServerNetwork(name) {
+    return NETWORKS[name];
+}
+/** The pinned server release, matching runtime-pkg/package.json. */
+export const PERSONAL_SERVER_VERSION = "1.24.6";
+export function localServerHome() {
+    return path.join(getVanaHome(), "cli", "personal-server");
+}
+/**
+ * The CLI's own data dir per network. Never Desktop's
+ * (`~/.vana/desktop/personal-server/...`): two processes on one index and one
+ * server key would corrupt both.
+ */
+export function localServerDataDir(network) {
+    return path.join(localServerHome(), network);
+}
+export function localServerRuntimeDir() {
+    return path.join(localServerHome(), "runtime", PERSONAL_SERVER_VERSION);
+}
+/** Ports Desktop and the CLI both try first; the loopback approval page is port + 1. */
+export const LOCAL_SERVER_PORTS = [8080, 8082, 8084];
+//# sourceMappingURL=config.js.map

package/dist/personal-server/local/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/personal-server/local/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAYlD,wEAAwE;AACxE,wEAAwE;AACxE,MAAM,SAAS,GAA2B;IACxC,qBAAqB,EAAE,4CAA4C;IACnE,uBAAuB,EAAE,4CAA4C;IACrE,0BAA0B,EAAE,4CAA4C;IACxE,qBAAqB,EAAE,4CAA4C;IACnE,mBAAmB,EAAE,4CAA4C;IACjE,YAAY,EAAE,4CAA4C;IAC1D,WAAW,EAAE,4CAA4C;CAC1D,CAAC;AAEF,MAAM,QAAQ,GAAgD;IAC5D,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,gCAAgC;QAC5C,aAAa,EAAE,8BAA8B;QAC7C,SAAS,EAAE,SAAS;KACrB;IACD,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,yBAAyB;QACrC,aAAa,EAAE,0BAA0B;QACzC,SAAS,EAAE,SAAS;KACrB;CACF,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC;AAEhD,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAwB;IACzD,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,uBAAuB,CAAC,CAAC;AAC1E,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC"}

package/dist/personal-server/local/owner-binding.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The signature a Personal Server's owner makes over this exact message. The
+ * server recovers its owner from it and derives the data encryption key from
+ * it, so it is as sensitive as a key.
+ */
+export declare const OWNER_BINDING_MESSAGE = "vana-master-key-v1";
+export declare const OWNER_BINDING_INTENT = "personal_server.owner_binding.v1";
+export interface OwnerBinding {
+    signature: string;
+    signerAddress: string;
+    /**
+     * Account's proof that this owner approved this client, needed later to
+     * register the server. Present for public native clients such as the CLI.
+     */
+    trustToken: string | null;
+}
+export interface OwnerBindingDeps {
+    fetchImpl?: typeof fetch;
+    openBrowser: (url: string) => void;
+    /** Called with the confirmation URL, so a person can open it by hand. */
+    onConfirmationUrl?: (url: string) => void;
+    timeoutMs?: number;
+}
+/**
+ * Get the owner-binding signature through Account's signing exchange: Account
+ * never signs silently for the CLI, so the person confirms in the browser,
+ * and the result comes back to a one-time loopback listener.
+ */
+export declare function runOwnerBindingExchange(input: {
+    accountUrl: string;
+    accessToken: string;
+}, deps: OwnerBindingDeps): Promise<OwnerBinding>;
+//# sourceMappingURL=owner-binding.d.ts.map

package/dist/personal-server/local/owner-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-binding.d.ts","sourceRoot":"","sources":["../../../src/personal-server/local/owner-binding.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAC1D,eAAO,MAAM,oBAAoB,qCAAqC,CAAC;AAEvE,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAClD,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,YAAY,CAAC,CA6FvB"}

package/dist/personal-server/local/owner-binding.js

@@ -0,0 +1,155 @@
+import crypto from "node:crypto";
+import http from "node:http";
+/**
+ * The signature a Personal Server's owner makes over this exact message. The
+ * server recovers its owner from it and derives the data encryption key from
+ * it, so it is as sensitive as a key.
+ */
+export const OWNER_BINDING_MESSAGE = "vana-master-key-v1";
+export const OWNER_BINDING_INTENT = "personal_server.owner_binding.v1";
+const DEFAULT_TIMEOUT_MS = 5 * 60 * 1000;
+function base64url(bytes) {
+    return bytes.toString("base64url");
+}
+const DONE_PAGE = `<!doctype html><meta charset="utf-8"><title>Vana CLI</title>
+<body style="font-family:system-ui;margin:4rem"><h1>Done</h1><p>You can close this tab and return to the terminal.</p></body>`;
+const FAILED_PAGE = `<!doctype html><meta charset="utf-8"><title>Vana CLI</title>
+<body style="font-family:system-ui;margin:4rem"><h1>That did not work</h1><p>Return to the terminal for details.</p></body>`;
+/**
+ * Wait for Account to send the browser back to this machine with the
+ * exchange's one-time code. Listens on 127.0.0.1 only, accepts exactly one
+ * request whose state matches, and closes.
+ */
+async function startLoopbackCallback(expectedState) {
+    let settle = null;
+    const code = new Promise((resolve, reject) => {
+        settle = { resolve, reject };
+    });
+    const server = http.createServer((request, response) => {
+        const url = new URL(request.url ?? "/", "http://127.0.0.1");
+        if (url.pathname !== "/signing/callback") {
+            response.writeHead(404).end();
+            return;
+        }
+        const state = url.searchParams.get("state");
+        const received = url.searchParams.get("code");
+        const error = url.searchParams.get("error");
+        if (state !== expectedState) {
+            // Not ours; keep waiting for the real callback.
+            response.writeHead(400, { "content-type": "text/html" }).end(FAILED_PAGE);
+            return;
+        }
+        if (error || !received) {
+            response.writeHead(200, { "content-type": "text/html" }).end(FAILED_PAGE);
+            settle?.reject(new Error(error === "access_denied"
+                ? "The request was declined in the browser."
+                : `Account returned ${error ?? "no code"}.`));
+            return;
+        }
+        response.writeHead(200, { "content-type": "text/html" }).end(DONE_PAGE);
+        settle?.resolve(received);
+    });
+    await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+    const { port } = server.address();
+    return {
+        redirectUri: `http://127.0.0.1:${port}/signing/callback`,
+        code,
+        close: () => server.close(),
+    };
+}
+/**
+ * Get the owner-binding signature through Account's signing exchange: Account
+ * never signs silently for the CLI, so the person confirms in the browser,
+ * and the result comes back to a one-time loopback listener.
+ */
+export async function runOwnerBindingExchange(input, deps) {
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    const account = input.accountUrl.replace(/\/+$/, "");
+    const state = base64url(crypto.randomBytes(32));
+    const codeVerifier = base64url(crypto.randomBytes(32));
+    const codeChallenge = base64url(crypto.createHash("sha256").update(codeVerifier).digest());
+    const callback = await startLoopbackCallback(state);
+    try {
+        const created = await fetchImpl(`${account}/api/v1/signing-exchanges`, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                authorization: `Bearer ${input.accessToken}`,
+            },
+            body: JSON.stringify({
+                intent: OWNER_BINDING_INTENT,
+                redirectUri: callback.redirectUri,
+                state,
+                codeChallenge,
+                codeChallengeMethod: "S256",
+            }),
+        });
+        if (!created.ok) {
+            throw new Error(await describeFailure("start the owner confirmation", created));
+        }
+        const { confirmationUrl } = (await created.json());
+        if (!confirmationUrl) {
+            throw new Error("Account did not return a confirmation page.");
+        }
+        deps.onConfirmationUrl?.(confirmationUrl);
+        deps.openBrowser(confirmationUrl);
+        const timeoutMs = deps.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        let timer = null;
+        const code = await Promise.race([
+            callback.code,
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error("Nobody confirmed in the browser in time.")), timeoutMs);
+            }),
+        ]).finally(() => {
+            if (timer)
+                clearTimeout(timer);
+        });
+        const redeemed = await fetchImpl(`${account}/api/v1/signing-exchanges/redeem`, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                authorization: `Bearer ${input.accessToken}`,
+            },
+            body: JSON.stringify({
+                code,
+                state,
+                codeVerifier,
+                redirectUri: callback.redirectUri,
+            }),
+        });
+        if (!redeemed.ok) {
+            throw new Error(await describeFailure("finish the owner confirmation", redeemed));
+        }
+        const body = (await redeemed.json());
+        if (body.status !== "signed" || !body.signature || !body.signerAddress) {
+            throw new Error("Account answered the owner confirmation without a signature.");
+        }
+        return {
+            signature: body.signature,
+            signerAddress: body.signerAddress,
+            trustToken: body.desktopSigningTrustToken ?? null,
+        };
+    }
+    finally {
+        callback.close();
+    }
+}
+async function describeFailure(step, response) {
+    let code = "";
+    try {
+        const body = (await response.json());
+        code = body.error?.code ?? "";
+    }
+    catch {
+        // Not JSON.
+    }
+    if (response.status === 401) {
+        return `Could not ${step}: your vana login is not accepted. Run \`vana login\` again.`;
+    }
+    if (code === "client_not_allowed" ||
+        code === "intent_not_allowed_for_client") {
+        return `Could not ${step}: this Vana Account does not let the CLI run a Personal Server yet (${code}).`;
+    }
+    return `Could not ${step} (HTTP ${response.status}${code ? `, ${code}` : ""}).`;
+}
+//# sourceMappingURL=owner-binding.js.map

package/dist/personal-server/local/owner-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-binding.js","sourceRoot":"","sources":["../../../src/personal-server/local/owner-binding.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAoBvE,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzC,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,SAAS,GAAG;8HAC4G,CAAC;AAC/H,MAAM,WAAW,GAAG;4HACwG,CAAC;AAE7H;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAAC,aAAqB;IAKxD,IAAI,MAAM,GAGC,IAAI,CAAC;IAChB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YACzC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC5B,gDAAgD;YAChD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC1E,MAAM,EAAE,MAAM,CACZ,IAAI,KAAK,CACP,KAAK,KAAK,eAAe;gBACvB,CAAC,CAAC,0CAA0C;gBAC5C,CAAC,CAAC,oBAAoB,KAAK,IAAI,SAAS,GAAG,CAC9C,CACF,CAAC;YACF,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,OAAO;QACL,WAAW,EAAE,oBAAoB,IAAI,mBAAmB;QACxD,IAAI;QACJ,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAkD,EAClD,IAAsB;IAEtB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,SAAS,CAC7B,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAC1D,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,2BAA2B,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE;aAC7C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE,oBAAoB;gBAC5B,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,KAAK;gBACL,aAAa;gBACb,mBAAmB,EAAE,MAAM;aAC5B,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,MAAM,eAAe,CAAC,8BAA8B,EAAE,OAAO,CAAC,CAC/D,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAEhD,CAAC;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,iBAAiB,EAAE,CAAC,eAAe,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAElC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACvD,IAAI,KAAK,GAA0B,IAAI,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC9B,QAAQ,CAAC,IAAI;YACb,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,EACnE,SAAS,CACV,CAAC;YACJ,CAAC,CAAC;SACH,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACd,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,GAAG,OAAO,kCAAkC,EAC5C;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE;aAC7C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI;gBACJ,KAAK;gBACL,YAAY;gBACZ,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,MAAM,eAAe,CAAC,+BAA+B,EAAE,QAAQ,CAAC,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKlC,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,IAAI,CAAC,wBAAwB,IAAI,IAAI;SAClD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,QAAkB;IAElB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkC,CAAC;QACtE,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,aAAa,IAAI,8DAA8D,CAAC;IACzF,CAAC;IACD,IACE,IAAI,KAAK,oBAAoB;QAC7B,IAAI,KAAK,+BAA+B,EACxC,CAAC;QACD,OAAO,aAAa,IAAI,uEAAuE,IAAI,IAAI,CAAC;IAC1G,CAAC;IACD,OAAO,aAAa,IAAI,UAAU,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;AAClF,CAAC"}

package/dist/personal-server/local/owner-secret.d.ts

@@ -0,0 +1,17 @@
+import type { OwnerBinding } from "./owner-binding.js";
+/**
+ * Where the owner-binding signature is kept between starts, so starting a
+ * server does not ask for a browser confirmation every time. It derives the
+ * server's encryption key, so on macOS it lives in the keychain; elsewhere in
+ * a 0600 file, as the app key does.
+ */
+export interface OwnerSecretStore {
+    get(key: string): OwnerBinding | null;
+    set(key: string, binding: OwnerBinding): void;
+    delete(key: string): void;
+}
+export declare function ownerSecretKey(accountUrl: string, address: string): string;
+declare function fileStore(file?: string): OwnerSecretStore;
+export declare function defaultOwnerSecretStore(): OwnerSecretStore;
+export { fileStore as fileOwnerSecretStore };
+//# sourceMappingURL=owner-secret.d.ts.map

package/dist/personal-server/local/owner-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-secret.d.ts","sourceRoot":"","sources":["../../../src/personal-server/local/owner-secret.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;IACtC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAID,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE1E;AAoED,iBAAS,SAAS,CAChB,IAAI,SAAsD,GACzD,gBAAgB,CA4BlB;AAiBD,wBAAgB,uBAAuB,IAAI,gBAAgB,CAI1D;AAED,OAAO,EAAE,SAAS,IAAI,oBAAoB,EAAE,CAAC"}

package/dist/personal-server/local/owner-secret.js

@@ -0,0 +1,119 @@
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { localServerHome } from "./config.js";
+const KEYCHAIN_SERVICE = "org.vana.cli.personal-server-owner";
+export function ownerSecretKey(accountUrl, address) {
+    return `${new URL(accountUrl).host}:${address.toLowerCase()}`;
+}
+function parse(raw) {
+    if (!raw)
+        return null;
+    try {
+        const value = JSON.parse(raw);
+        if (typeof value.signature === "string" &&
+            typeof value.signerAddress === "string") {
+            return {
+                signature: value.signature,
+                signerAddress: value.signerAddress,
+                trustToken: typeof value.trustToken === "string" ? value.trustToken : null,
+            };
+        }
+    }
+    catch {
+        // Unreadable entry: treat as absent.
+    }
+    return null;
+}
+function keychainStore() {
+    const run = (args) => execFileSync("security", args, {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+    });
+    return {
+        get(key) {
+            try {
+                return parse(run([
+                    "find-generic-password",
+                    "-s",
+                    KEYCHAIN_SERVICE,
+                    "-a",
+                    key,
+                    "-w",
+                ]).trim());
+            }
+            catch {
+                return null;
+            }
+        },
+        set(key, binding) {
+            run([
+                "add-generic-password",
+                "-U",
+                "-s",
+                KEYCHAIN_SERVICE,
+                "-a",
+                key,
+                "-w",
+                JSON.stringify(binding),
+            ]);
+        },
+        delete(key) {
+            try {
+                run(["delete-generic-password", "-s", KEYCHAIN_SERVICE, "-a", key]);
+            }
+            catch {
+                // Already gone.
+            }
+        },
+    };
+}
+function fileStore(file = path.join(localServerHome(), "owner-bindings.json")) {
+    const read = () => {
+        try {
+            return JSON.parse(fs.readFileSync(file, "utf8"));
+        }
+        catch {
+            return {};
+        }
+    };
+    const write = (entries) => {
+        fs.mkdirSync(path.dirname(file), { recursive: true, mode: 0o700 });
+        fs.writeFileSync(file, `${JSON.stringify(entries, null, 2)}\n`, {
+            mode: 0o600,
+        });
+    };
+    return {
+        get: (key) => parse(read()[key]),
+        set(key, binding) {
+            write({ ...read(), [key]: JSON.stringify(binding) });
+        },
+        delete(key) {
+            const entries = read();
+            delete entries[key];
+            write(entries);
+        },
+    };
+}
+// Without a default keychain (a HOME with no login keychain, a fresh
+// account), `security add-generic-password` does not fail: it puts up a GUI
+// dialog and waits. Asking for the default keychain never prompts.
+function hasDefaultKeychain() {
+    try {
+        execFileSync("security", ["default-keychain"], {
+            stdio: ["ignore", "ignore", "ignore"],
+            timeout: 5_000,
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function defaultOwnerSecretStore() {
+    return process.platform === "darwin" && hasDefaultKeychain()
+        ? keychainStore()
+        : fileStore();
+}
+export { fileStore as fileOwnerSecretStore };
+//# sourceMappingURL=owner-secret.js.map

package/dist/personal-server/local/owner-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-secret.js","sourceRoot":"","sources":["../../../src/personal-server/local/owner-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAe9C,MAAM,gBAAgB,GAAG,oCAAoC,CAAC;AAE9D,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,OAAe;IAChE,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,KAAK,CAAC,GAA8B;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;QACvD,IACE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EACvC,CAAC;YACD,OAAO;gBACL,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,UAAU,EACR,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;aACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,EAAE,CAC7B,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE;QAC7B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;KACpC,CAAC,CAAC;IACL,OAAO;QACL,GAAG,CAAC,GAAG;YACL,IAAI,CAAC;gBACH,OAAO,KAAK,CACV,GAAG,CAAC;oBACF,uBAAuB;oBACvB,IAAI;oBACJ,gBAAgB;oBAChB,IAAI;oBACJ,GAAG;oBACH,IAAI;iBACL,CAAC,CAAC,IAAI,EAAE,CACV,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,GAAG,CAAC,GAAG,EAAE,OAAO;YACd,GAAG,CAAC;gBACF,sBAAsB;gBACtB,IAAI;gBACJ,IAAI;gBACJ,gBAAgB;gBAChB,IAAI;gBACJ,GAAG;gBACH,IAAI;gBACJ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aACxB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,GAAG;YACR,IAAI,CAAC;gBACH,GAAG,CAAC,CAAC,yBAAyB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,qBAAqB,CAAC;IAE1D,MAAM,IAAI,GAAG,GAA2B,EAAE;QACxC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAG9C,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,OAA+B,EAAE,EAAE;QAChD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC9D,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO;QACL,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;QAChC,GAAG,CAAC,GAAG,EAAE,OAAO;YACd,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,CAAC,GAAG;YACR,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;YACpB,KAAK,CAAC,OAAO,CAAC,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,4EAA4E;AAC5E,mEAAmE;AACnE,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,YAAY,CAAC,UAAU,EAAE,CAAC,kBAAkB,CAAC,EAAE;YAC7C,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACrC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,kBAAkB,EAAE;QAC1D,CAAC,CAAC,aAAa,EAAE;QACjB,CAAC,CAAC,SAAS,EAAE,CAAC;AAClB,CAAC;AAED,OAAO,EAAE,SAAS,IAAI,oBAAoB,EAAE,CAAC"}

package/dist/personal-server/local/runtime-pkg/entry.mjs

@@ -0,0 +1,153 @@
+// The Personal Server process `vana server start` runs, modeled on Vana
+// Desktop's sidecar (apps/desktop/personal-server/index.js in unity-surfaces).
+//
+// It reads one JSON line on stdin, so the owner signature never appears in the
+// process list or environment:
+//   { rootPath, port, ownerSignature, ownerAddress, network: { gatewayUrl, chainId,
+//     contracts, storageApiUrl } }
+// and writes one JSON object per line on stdout: ready, error, stopped.
+// Logs go to stderr.
+
+import { readFile, rename, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import readline from "node:readline";
+
+import {
+  loadConfig,
+  startPersonalServer,
+} from "@opendatalabs/personal-server-ts/node";
+
+const send = (message) => process.stdout.write(`${JSON.stringify(message)}\n`);
+
+function isPlainObject(value) {
+  return (
+    typeof value === "object" &&
+    value !== null &&
+    !Array.isArray(value) &&
+    Object.getPrototypeOf(value) !== null
+  );
+}
+
+// Derived leaves win and every other persisted key survives, as in Desktop's
+// applyDerivedServerConfig.
+function applyDerived(persisted, derived) {
+  if (!isPlainObject(persisted)) return structuredClone(derived);
+  const merged = { ...persisted };
+  for (const [key, value] of Object.entries(derived)) {
+    merged[key] =
+      isPlainObject(value) && isPlainObject(merged[key])
+        ? applyDerived(merged[key], value)
+        : structuredClone(value);
+  }
+  return merged;
+}
+
+// Everything that follows from the network. Local only for now: no tunnel,
+// so nothing is reachable from outside and nothing may be registered, and no
+// sync to Vana storage until registration exists.
+function derivedConfig(network) {
+  return {
+    devUi: { enabled: true },
+    gateway: {
+      url: network.gatewayUrl,
+      chainId: network.chainId,
+      contracts: network.contracts,
+    },
+    inference: {
+      baseUrl: `${network.gatewayUrl.replace(/\/+$/, "")}/v1/inference`,
+    },
+    logging: { level: "info", pretty: false },
+    storage: {
+      backend: "vana",
+      config: { vana: { apiUrl: network.storageApiUrl } },
+    },
+    sync: { enabled: false },
+    tunnel: { enabled: false },
+  };
+}
+
+async function readInput() {
+  const rl = readline.createInterface({ input: process.stdin });
+  for await (const line of rl) {
+    if (line.trim()) {
+      rl.close();
+      return JSON.parse(line);
+    }
+  }
+  throw new Error("No configuration on stdin.");
+}
+
+let ps = null;
+
+async function main() {
+  const input = await readInput();
+  const { rootPath, port, ownerSignature, ownerAddress, network } = input;
+  const configPath = join(rootPath, "server.json");
+  const derived = derivedConfig(network);
+
+  // Persist the derived block the way Desktop does, so a network change can
+  // never leave an old gateway or storage host behind in server.json.
+  let persisted = null;
+  try {
+    persisted = JSON.parse(await readFile(configPath, "utf8"));
+  } catch {
+    persisted = null;
+  }
+  const next = applyDerived(persisted, derived);
+  const temporary = `${configPath}.${process.pid}.tmp`;
+  await writeFile(temporary, `${JSON.stringify(next, null, 2)}\n`, {
+    mode: 0o600,
+  });
+  await rename(temporary, configPath);
+
+  // configDefaults merges shallowly for some sections, so hand back whole
+  // sections from the schema-complete loaded config.
+  const loaded = await loadConfig({ configPath, rootPath });
+  const configDefaults = {
+    server: {
+      ...loaded.server,
+      port,
+      ...(ownerAddress ? { address: ownerAddress } : {}),
+    },
+  };
+  for (const key of Object.keys(derived)) {
+    configDefaults[key] = applyDerived(loaded[key], derived[key]);
+  }
+
+  ps = await startPersonalServer({
+    configPath,
+    rootPath,
+    port,
+    ownerSignature,
+    mcpOAuthApprovalUrl: "vana://mcp-authorization",
+    configDefaults,
+    onStatus: (status) => process.stderr.write(`[status] ${status}\n`),
+  });
+  const info = await ps.ready();
+  send({
+    type: "ready",
+    port,
+    url: info.urls?.local ?? `http://localhost:${port}`,
+  });
+}
+
+async function shutdown(signal) {
+  process.stderr.write(`[entry] ${signal}, stopping\n`);
+  try {
+    await ps?.stop();
+  } finally {
+    send({ type: "stopped" });
+    process.exit(0);
+  }
+}
+
+process.on("SIGINT", () => void shutdown("SIGINT"));
+process.on("SIGTERM", () => void shutdown("SIGTERM"));
+
+main().catch((error) => {
+  send({
+    type: "error",
+    message: error instanceof Error ? error.message : String(error),
+  });
+  process.exit(1);
+});