@tinycloud/courier 0.5.1-beta.1 → 0.5.1-beta.3

package/dist/state.js

@@ -0,0 +1,516 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { cmd } from './program.js';
+import { hasProfileFields, isAgentKey, loadGrant, loadKey, profileDir, readRegularFile, readSecure, saveKey, saveProfile, writeSecure } from './profile.js';
+import { checkApprovalResultBinding, openRelayResult } from '@tinycloud/share-envelope/links';
+import { APPROVAL_FILE, approvalPhase, clearPending, lacksOwner, readApprovalEntry, resultEnvelopeOf } from './approval-phase.js';
+import { assertBoundToKey } from './grant.js';
+import { bareDid, siweTimes } from './authority.js';
+import { dropPendingDelegation, hasLivePending, liveRedeemedDelegations } from './pending.js';
+import { REVOKE_URL } from './grant-refusal.js';
+import { CourierError } from './errors.js';
+import { base64url32, ed25519DidKey, ed25519PublicKey } from './did-key.js';
+/**
+ * One derivation of where `init` stands, shared by every init mode.
+ *
+ * Inputs (all in the Courier home): profile.json (`status`, `spacePending`), grant.json, key.json, pending-grant.json (live records),
+ * approval-pending.json, rotation.json, and any stray key-bearing temp file (`rotation.json.<pid>.<hex>.tmp`, `key.json.<pid>.<hex>.tmp`).
+ *
+ * `readInputs` is the only place that touches the disk, so the way the inputs are read can be replaced in one spot.
+ * `classifyState` is pure. `deriveState` only reads: it never repairs, drops or rewrites a file. Recovery is the explicit
+ * `recoverInterrupted` step an init mode takes after reading.
+ *
+ * Key rotation is one journaled step over key.json, profile.json, grant.json and approval-pending.json:
+ *   (1) rotation.json is written (temp file, fsync, rename, directory fsync). It holds the complete NEW key and profile and the
+ *       non-secret facts about the approval being discarded, so nothing about the discard depends on the process staying alive;
+ *   (2) key.json is replaced; (3) profile.json is replaced; (4) grant.json, and approval-pending.json when discarding, are removed;
+ *   (5) the discard warning is printed, then rotation.json is removed (its only deletion point).
+ * Before the rename in (1) nothing but a stray temp file can differ from the old state. From then on every init mode rolls forward
+ * from the journal alone; every step is idempotent. A process killed while writing a temp file leaves it behind (0600, holding a
+ * key that may or may not have been installed, or an approval's relay key and result): `recoverInterrupted` zero-fills and removes it, unless
+ * the process that named it is still running.
+ */
+const ROTATION_FILE = 'rotation.json';
+const STRAY_TEMP = /^(?:rotation|key|approval-pending)\.json\.(\d+)\.[0-9a-f]{12}\.tmp$/;
+/** The mode of a grant.json that is a regular file and not owner-only, else undefined. */
+function looseGrantMode() {
+    try {
+        const stat = fs.lstatSync(path.join(profileDir(), 'grant.json'));
+        return stat.isFile() && (stat.mode & 0o077) !== 0 ? (stat.mode & 0o777).toString(8) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * A saved grant is a regular grant.json that parses and has the shape of a grant (the existing `loadGrant`). A truncated or corrupt file,
+ * or a path that is not a file, is not a saved grant: it is left as it is, counted as absent, and reported once. A grant.json that has the
+ * shape of a grant but a loose mode IS a saved grant (it is never counted absent); `DerivedState.grantMode` tells init to stop until
+ * its mode is fixed.
+ */
+function savedGrant(notes) {
+    const file = path.join(profileDir(), 'grant.json');
+    if (!fs.existsSync(file))
+        return false;
+    if (looseGrantMode()) {
+        // Inspect the content before any mode advice: only a file that is a grant has a mode worth fixing.
+        try {
+            const grant = JSON.parse(readRegularFile(file) ?? 'null');
+            if (grant?.v === 1 && !!grant.delegationHeader?.Authorization && !!grant.delegationCid && !!grant.siwe)
+                return true;
+        }
+        catch { /* not JSON: reported below, without the parser's message */ }
+        notes.push('grant.json is not a usable saved grant, so it is treated as not saved and left as it is (it is corrupt or not a grant).');
+        return false;
+    }
+    try {
+        return loadGrant() !== undefined;
+    }
+    catch (error) {
+        notes.push(`grant.json is not a usable saved grant, so it is treated as not saved and left as it is (${error.message}).`);
+        return false;
+    }
+}
+export const heldApproval = (approval) => approval === 'held' || approval === 'committed';
+const liveApproval = (approval) => approval === 'open' || approval === 'unreadable' || heldApproval(approval);
+/**
+ * Whether `init --wait` goes on (collects a saved approval, or makes the request) rather than advising another command. It follows from the
+ * same inputs and action as everything else here: an approval the owner gave (retryable result reference, saved result or commit) is
+ * always collected, even beside a saved grant; an open request is collected while the space is being set up; otherwise `--wait` goes on
+ * only where the action is waiting, requesting or starting, and advises `--resume` for a grant saved and not installed.
+ */
+function waitGoesOn(i, action) {
+    if (action === 'refuse' || action === 'finish-rotation' || action === 'fix-profile')
+        return false;
+    if (heldApproval(i.approval))
+        return true;
+    // As before: on a profile that has a grant (ready) or is setting up its space, `--wait` only collects a request that is saved.
+    if (i.profile === 'awaiting-space' || i.profile === 'ready')
+        return i.approval === 'open';
+    return action === 'wait' || action === 'request' || action === 'init';
+}
+export function classifyState(i) {
+    const is = (state, action) => ({ state, action, cleanTemp: i.rotationTemp, wait: waitGoesOn(i, action) });
+    if (i.rotation)
+        return is('rotation-interrupted', 'finish-rotation');
+    if (i.profile === 'unreadable')
+        return is('profile-unreadable', 'fix-profile');
+    // A saved approval without the profile or key it belongs to is never dropped here: the person decides.
+    if (liveApproval(i.approval) && lacksOwner({ profile: i.profile !== 'absent', key: i.key }))
+        return is('approval-orphaned', 'refuse');
+    if (i.profile === 'absent')
+        return i.key ? is('key-only', 'init') : is('new', 'init');
+    if (!i.key)
+        return is('key-missing', 'rotate-key');
+    if (i.profile === 'awaiting-grant') {
+        // A grant saved and not installed is installed first (`--resume`); a held approval beside it stays on disk for the next `--wait`.
+        if (i.pendingGrant)
+            return is('saved-delegation', 'resume');
+        if (i.grant)
+            return is('saved-grant', 'resume');
+        // With nothing saved to install, an approval the owner gave is collected, never discarded.
+        if (heldApproval(i.approval))
+            return is('approval-held', 'wait');
+        if (i.approval === 'open')
+            return is('approval-open', 'wait');
+        if (i.approval === 'unreadable')
+            return is('approval-unreadable', 'fix-approval');
+        return is('awaiting-grant', 'request');
+    }
+    if (i.profile === 'awaiting-space') {
+        if (!i.grant)
+            return heldApproval(i.approval) ? is('approval-held', 'wait') : is('grant-missing', 'request');
+        return i.spacePending ? is('space-pending', 'resume') : is('space-missing', 'resume');
+    }
+    // ready: a held renewal is collected by `--wait`; `--resume` stays refused on a ready profile, as before.
+    if (heldApproval(i.approval))
+        return is('ready-approval', 'wait');
+    if (i.approval === 'unreadable')
+        return is('approval-unreadable', 'fix-approval');
+    if (!i.grant)
+        return is('grant-missing', 'request');
+    if (i.approval === 'open')
+        return is('ready-approval', 'wait');
+    return is('ready', 'none');
+}
+/** The approval input of the state table, taken from the one classifier. */
+function approvalState() {
+    const phase = approvalPhase(readApprovalEntry());
+    switch (phase.phase) {
+        case 'held': return phase.stage === 'committed' ? 'committed' : 'held';
+        case 'orphaned': return 'none';
+        default: return phase.phase;
+    }
+}
+const rotationPath = () => path.join(profileDir(), ROTATION_FILE);
+/**
+ * The profile's status and spacePending, read without validating the rest (an outdated profile is the job of the mode that loads it).
+ * A profile.json that exists and cannot be read, or has no usable status, is `unreadable`: never the same as absent.
+ */
+function readProfileFields() {
+    if (!fs.existsSync(path.join(profileDir(), 'profile.json')))
+        return { status: 'absent', spacePending: false };
+    try {
+        const profile = readSecure('profile.json', false);
+        const status = profile?.status;
+        if (status === 'awaiting-grant' || status === 'awaiting-space' || status === 'ready')
+            return { status, spacePending: profile?.spacePending === true };
+    }
+    catch { /* unreadable */ }
+    return { status: 'unreadable', spacePending: false };
+}
+/** `text` as one POSIX shell word. */
+function shellQuote(text) {
+    return `'${text.replace(/'/g, `'\\''`)}'`;
+}
+/** Whether the process that named a temp file may still be writing it. This process is not: its writes are synchronous and finished. */
+function writerAlive(pid) {
+    if (pid === process.pid)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === 'EPERM';
+    }
+}
+/**
+ * The stray temp files, classified from ONE directory listing with ONE liveness probe per file: `dead` (writer gone: the only ones
+ * `recoverInterrupted` removes) and `live` (writer may still be running: kept, because between its fsync and its rename the file is live).
+ * A caller acts on this one snapshot, so a process that dies or whose pid is reused between two probes cannot split the decision.
+ */
+function classifyTemps() {
+    const dead = [];
+    const live = [];
+    let names = [];
+    try {
+        names = fs.readdirSync(profileDir()).sort();
+    }
+    catch { /* no home yet */ }
+    for (const name of names) {
+        const match = STRAY_TEMP.exec(name);
+        if (!match)
+            continue;
+        const pid = Number(match[1]);
+        if (writerAlive(pid))
+            live.push({ name, pid });
+        else
+            dead.push(name);
+    }
+    return { dead, live };
+}
+/** The one place the inputs are read. Reads only. `notes` are warnings the init mode prints once; nothing is repaired or removed. */
+export function readInputs(notes = []) {
+    const dir = profileDir();
+    const { status, spacePending } = readProfileFields();
+    return {
+        profile: status,
+        spacePending,
+        grant: savedGrant(notes),
+        key: fs.existsSync(path.join(dir, 'key.json')),
+        pendingGrant: hasLivePending(),
+        approval: approvalState(),
+        rotation: fs.existsSync(rotationPath()),
+        rotationTemp: classifyTemps().dead.length > 0,
+    };
+}
+export function deriveState() {
+    const notes = [];
+    const inputs = readInputs(notes);
+    const grantMode = inputs.grant ? looseGrantMode() : undefined;
+    return { inputs, notes, ...(grantMode ? { grantMode } : {}), ...classifyState(inputs) };
+}
+/** Which mode to restore depends on what is loose: the profile directory is 0700, a private file inside it 0600. */
+function permissionAdvice(name) {
+    return `If the directory is loose, run \`chmod 700 ${profileDir()}\`; if the file is loose, run \`chmod 600 ${path.join(profileDir(), name)}\`.`;
+}
+function orphanAdvice(approval) {
+    const file = path.join(profileDir(), APPROVAL_FILE);
+    const left = `A saved approval request (${file}) has no matching profile and agent key. It was left as it is and nothing was changed.`;
+    if (approval === 'unreadable')
+        return `${left} The request cannot be read. ${permissionAdvice(APPROVAL_FILE)} Then run the command again.`;
+    if (approval === 'open')
+        return `${left} Restore the missing file, or run \`${cmd('init --rotate-key')}\` to start over with a new agent key.`;
+    return `${left} Restore the missing file, or run \`${cmd('init --rotate-key')}\`, which discards that approval and starts over with a new agent key.`;
+}
+/** The next command for the person or agent running init. */
+export function adviceFor(d) {
+    switch (d.state) {
+        case 'rotation-interrupted': return `A key rotation was interrupted. Any \`${cmd('init')}\` command finishes it first.`;
+        case 'profile-unreadable': return `${path.join(profileDir(), 'profile.json')} cannot be read, so nothing was changed. ${permissionAdvice('profile.json')} If its content is damaged, \`${cmd('init --rotate-key')}\` replaces the agent key and the profile with new ones.`;
+        case 'approval-orphaned': return orphanAdvice(d.inputs.approval);
+        case 'new':
+        case 'key-only': return `No Courier profile yet. Run \`${cmd('init --request')}\`, send the printed openkeyUrl to the owner, then run \`${cmd('init --wait')}\`.`;
+        case 'key-missing': return `The profile has no agent key. Run \`${cmd('init --rotate-key')}\` and approve a new grant.`;
+        case 'saved-delegation':
+        case 'saved-grant': return `An approved grant is saved and not installed: run \`${cmd('init --resume')}\`. No new approval is needed.`;
+        case 'approval-held': return `An approval from the owner is saved: run \`${cmd('init --wait')}\`. No new approval is needed.`;
+        case 'approval-open': return `An approval request is open: run \`${cmd('init --wait')}\` to collect it once the owner approves.`;
+        case 'approval-unreadable': return `The saved approval request cannot be read. ${permissionAdvice(APPROVAL_FILE)} Then run \`${cmd('init --wait')}\`.`;
+        case 'awaiting-grant': return `No grant yet. Run \`${cmd('init --request')}\`, send the printed openkeyUrl to the owner, then run \`${cmd('init --wait')}\`.`;
+        case 'grant-missing': return d.inputs.profile === 'ready'
+            ? `This profile already has a grant and no approval request is pending. To renew it, run \`${cmd('init --request')}\`, send the printed openkeyUrl to the owner, then run \`${cmd('init --wait')}\`.`
+            : `The grant is saved and the "agents" space is still being set up: run \`${cmd('init --resume')}\`. \`${cmd('init --wait')}\` collects an approval that \`${cmd('init --request')}\` asked for.`;
+        case 'space-pending':
+        case 'space-missing': return `The grant is saved and the agents space is still being set up: run \`${cmd('init --resume')}\`. \`${cmd('init --wait')}\` collects an approval that \`${cmd('init --request')}\` asked for.`;
+        case 'ready-approval': return `An approval request is saved: run \`${cmd('init --wait')}\` to collect or acknowledge it.`;
+        case 'ready': return `This profile already has a grant and no approval request is pending. To renew it, run \`${cmd('init --request')}\`, send the printed openkeyUrl to the owner, then run \`${cmd('init --wait')}\`.`;
+    }
+}
+// ---------- recovery ----------
+/**
+ * Explicit recovery, run once at the start of an init mode: roll an interrupted rotation forward (only after the journal validated), then
+ * remove stray key-bearing temp files. A refusal in the first step happens before anything is changed.
+ */
+export function recoverInterrupted() {
+    finishRotation();
+    const temps = classifyTemps();
+    for (const name of temps.dead)
+        scrub(path.join(profileDir(), name));
+    for (const { name, pid } of temps.live) {
+        const file = path.join(profileDir(), name);
+        // A running pid does not excuse a file that is not a plain single-link file of this user: that is refused, as for a dead writer.
+        let stat;
+        try {
+            stat = fs.lstatSync(file);
+        }
+        catch (error) {
+            // The writer finished and renamed it into place after the listing: it has moved, there is nothing to keep or refuse.
+            if (error.code === 'ENOENT')
+                continue;
+            throw error;
+        }
+        if (!isPlain(stat))
+            throw refuseStray(file);
+        console.error(`warning: ${name} was kept, not deleted, and may contain private-key material (an agent key, or an approval's relay key and result). Process ${pid}, which named it, is running: either a Courier process still writing it, or an unrelated process that was given the same pid after Courier died (pid reuse); Courier cannot tell which. Check with \`ps -p ${pid} -o pid=,args=\`; only if that is not a Courier process, remove the file with \`rm -- ${shellQuote(file)}\`.`);
+    }
+}
+/**
+ * A stray temp file may hold a private key. Only a plain file of this user with a single link is touched, and it is checked again on the
+ * open descriptor so a swap between the check and the open is caught: its bytes are overwritten with zeros (best effort: a copy-on-write or
+ * journaling filesystem may keep old blocks) and it is unlinked. Anything else is left as it is and reported.
+ */
+const isPlain = (stat) => stat.isFile() && stat.uid === process.getuid?.() && stat.nlink === 1;
+const refuseStray = (file) => new CourierError('stray-temp', `${file} is not a plain file of this user with one link, so it was left as it is. Remove it by hand, then run the command again.`);
+function scrub(file) {
+    const before = fs.lstatSync(file);
+    if (!isPlain(before))
+        throw refuseStray(file);
+    const fd = fs.openSync(file, fs.constants.O_WRONLY | fs.constants.O_NOFOLLOW);
+    try {
+        const open = fs.fstatSync(fd);
+        if (!isPlain(open) || open.dev !== before.dev || open.ino !== before.ino)
+            throw refuseStray(file);
+        fs.writeSync(fd, Buffer.alloc(open.size));
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    fs.unlinkSync(file);
+    syncDir();
+}
+function syncDir() {
+    const dir = fs.openSync(profileDir(), 'r');
+    try {
+        fs.fsyncSync(dir);
+    }
+    finally {
+        fs.closeSync(dir);
+    }
+}
+const validGrantList = (list) => Array.isArray(list)
+    && list.every((g) => !!g && typeof g === 'object' && typeof g.delegationCid === 'string' && g.delegationCid !== '' && (g.expiresAt === undefined || typeof g.expiresAt === 'string'));
+/**
+ * Whether a key is an Ed25519 agent key as `newAgentKey` makes one: a plain-object JWK with kty OKP, crv Ed25519, and `x` and `d` as
+ * unpadded base64url text of exactly 32 bytes, where `x` is the public key of `d`, and the `did:key` is the one derived from `x`
+ * (a `#fragment`, when present, names the same key).
+ */
+function hasKeyProof(key) {
+    const jwk = key.jwk;
+    if (Array.isArray(jwk) || jwk.kty !== 'OKP' || jwk.crv !== 'Ed25519')
+        return false;
+    const x = base64url32(jwk.x);
+    const d = base64url32(jwk.d);
+    if (!x || !d || !x.equals(ed25519PublicKey(d)))
+        return false;
+    const did = ed25519DidKey(x);
+    const parts = key.did.split('#');
+    return parts.length <= 2 && parts[0] === did && (parts.length === 1 || parts[1] === did.slice('did:key:'.length));
+}
+/** What is wrong with a parsed journal, or undefined when it is a rotation this code may replay. Never includes any of its content. */
+function journalProblem(journal) {
+    if (!journal || typeof journal !== 'object' || Array.isArray(journal))
+        return 'it is not an object';
+    const j = journal;
+    if (j.v !== 1)
+        return 'its version is not 1';
+    if (!isAgentKey(j.key) || !hasKeyProof(j.key))
+        return 'its key is not a valid agent key';
+    if (!hasProfileFields(j.profile ?? null))
+        return 'its profile is not a complete current profile';
+    if (j.profile?.status !== 'awaiting-grant')
+        return 'its profile is not awaiting-grant';
+    if (j.profile.courierDid !== bareDid(j.key.did))
+        return 'its profile does not belong to its key';
+    if (typeof j.discardApproval !== 'boolean' || typeof j.grantedResult !== 'boolean')
+        return 'its approval facts are not booleans';
+    if (j.delegationCid !== undefined && typeof j.delegationCid !== 'string')
+        return 'its delegation is not text';
+    if (j.grantExpiresAt !== undefined && typeof j.grantExpiresAt !== 'string')
+        return 'its grant expiry is not text';
+    if (j.discardedGrants !== undefined && !validGrantList(j.discardedGrants))
+        return 'its discarded grants are not a list of delegations';
+    if (j.unmatchedGrants !== undefined && !validGrantList(j.unmatchedGrants))
+        return 'its unmatched grants are not a list of delegations';
+    if (j.installedGrant !== undefined && !validGrantList([j.installedGrant]))
+        return 'its installed grant is not a delegation';
+    return undefined;
+}
+/** The non-secret facts about the saved approval, taken before the journal is written. */
+async function approvalFacts() {
+    const entry = readApprovalEntry();
+    const phase = approvalPhase(entry);
+    if (phase.phase !== 'held' || entry.kind !== 'ok')
+        return { discardApproval: false, grantedResult: false };
+    const pending = entry.pending;
+    // A collected result or a commit means the owner approved and a grant may be live; a reference alone is not yet a result.
+    const grantedResult = phase.stage !== 'ref';
+    let delegationCid;
+    let grantExpiresAt;
+    if (grantedResult) {
+        try {
+            const opened = await openRelayResult(resultEnvelopeOf(pending), pending.requestId, pending.relayPrivateKey);
+            const claimed = opened.delegation?.delegationCid;
+            if (typeof claimed === 'string' && claimed !== '')
+                delegationCid = claimed;
+            grantExpiresAt = checkApprovalResultBinding(opened, { requestId: pending.requestId, bodyCid: pending.bodyCid, request: pending.request }).delegationExpiresAt;
+        }
+        catch { /* the notice is still given, with what could be read */ }
+    }
+    return { discardApproval: true, grantedResult, ...(delegationCid ? { delegationCid } : {}), ...(grantExpiresAt ? { grantExpiresAt } : {}) };
+}
+/** The non-secret facts (CID, expiry) of a saved delegation, or undefined when it names no CID. */
+function grantFacts(cid, expiresAt) {
+    if (typeof cid !== 'string' || cid === '')
+        return undefined;
+    let until;
+    try {
+        until = expiresAt()?.toISOString();
+    }
+    catch { /* unknown */ }
+    return { delegationCid: cid, ...(until ? { expiresAt: until } : {}) };
+}
+/**
+ * Redeemed delegations saved for the OLD agent key: they would be useless after the rotation and may be live grants (`discarded`).
+ * When key.json cannot be read no delegation can be tied to a key: they are `unmatched`, kept as they are and reported, never dropped.
+ */
+function oldKeyDelegations() {
+    let old;
+    try {
+        old = loadKey();
+    }
+    catch {
+        old = undefined;
+    }
+    const discarded = [];
+    const unmatched = [];
+    for (const delegation of liveRedeemedDelegations()) {
+        if (old) {
+            try {
+                assertBoundToKey(delegation, old);
+            }
+            catch {
+                continue;
+            }
+        }
+        const facts = grantFacts(delegation.delegationCid, () => siweTimes(delegation.siwe).expiresAt);
+        if (facts)
+            (old ? discarded : unmatched).push(facts);
+    }
+    return { discarded, unmatched };
+}
+/** The installed grant.json's CID and expiry, read before the rotation removes it. Reads it even at a loose mode; nothing secret is kept. */
+function installedGrantFacts() {
+    try {
+        const grant = JSON.parse(readRegularFile(path.join(profileDir(), 'grant.json')) ?? 'null');
+        return grantFacts(grant?.delegationCid, () => {
+            if (typeof grant?.siwe === 'string')
+                return siweTimes(grant.siwe).expiresAt;
+            return typeof grant?.expiresAt === 'string' ? new Date(grant.expiresAt) : undefined;
+        });
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Steps 1-5. `profile` is the complete new profile. */
+export async function rotateKey(key, profile) {
+    const { discarded, unmatched } = oldKeyDelegations();
+    const installed = installedGrantFacts();
+    const journal = {
+        v: 1, key, profile, ...(await approvalFacts()), discardedGrants: discarded,
+        ...(unmatched.length > 0 ? { unmatchedGrants: unmatched } : {}), ...(installed ? { installedGrant: installed } : {}),
+    };
+    writeSecure(rotationPath(), journal);
+    applyRotation(journal);
+}
+function removeIfPresent(file) {
+    try {
+        fs.unlinkSync(file);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+}
+function applyRotation(journal) {
+    saveKey(journal.key);
+    saveProfile(journal.profile);
+    removeIfPresent(path.join(profileDir(), 'grant.json'));
+    if (journal.discardApproval)
+        clearPending();
+    for (const grant of journal.discardedGrants ?? [])
+        dropPendingDelegation(grant.delegationCid);
+    syncDir();
+    warnDiscarded(journal);
+    fs.unlinkSync(rotationPath());
+    syncDir();
+}
+const untilText = (expiresAt) => (expiresAt ? `, valid until ${expiresAt}` : '');
+/** Printed from the journal, so any init mode that finishes the rotation, also after a crash, says the same thing. */
+function warnDiscarded(journal) {
+    if (journal.discardApproval) {
+        console.error('The saved approval request already held an approval from the owner. It is bound to the old agent key, so this key rotation discards that approval: the owner must approve a new request.');
+    }
+    if (journal.discardApproval && journal.grantedResult) {
+        const named = journal.delegationCid ? ` (delegation ${journal.delegationCid})` : '';
+        console.error(`That request was already granted by the owner${named}, so a live grant may exist${untilText(journal.grantExpiresAt)}. This agent cannot revoke it; the owner can revoke it at ${REVOKE_URL}.`);
+    }
+    for (const grant of journal.discardedGrants ?? []) {
+        console.error(`A redeemed grant saved for the old agent key and not installed (delegation ${grant.delegationCid}) was discarded by this key rotation. A live grant may exist${untilText(grant.expiresAt)}. This agent cannot revoke it; the owner can revoke it at ${REVOKE_URL}.`);
+    }
+    for (const grant of journal.unmatchedGrants ?? []) {
+        console.error(`A redeemed grant saved in pending-grant.json (delegation ${grant.delegationCid}) could not be matched to the old agent key (key.json cannot be read), so it was kept as it is. A live grant may exist${untilText(grant.expiresAt)}. This agent cannot revoke it; the owner can revoke it at ${REVOKE_URL}.`);
+    }
+    // The grant installed for the old key was removed, not revoked: the invoking command and one that finishes the rotation both say so.
+    if (journal.installedGrant) {
+        const { delegationCid, expiresAt } = journal.installedGrant;
+        const until = expiresAt ? `until ${expiresAt}` : 'until it expires';
+        console.error(`The installed grant for the old agent key (delegation ${delegationCid}) was removed by this key rotation. It is not revoked: it may still be valid ${until}. This agent cannot revoke it; the owner can revoke it at ${REVOKE_URL}.`);
+    }
+}
+/** Roll an interrupted rotation forward. Returns whether one was found. Refuses, changing nothing, when the record is not a valid rotation. */
+export function finishRotation() {
+    if (!fs.existsSync(rotationPath()))
+        return false;
+    const journal = readSecure(ROTATION_FILE, true);
+    const problem = journalProblem(journal);
+    if (problem) {
+        throw new CourierError('bad-profile', `${rotationPath()} is not a valid key rotation record (${problem}). Nothing was changed. Restore it from a backup, or move it aside and run \`${cmd('init --rotate-key')}\` to start over with a new agent key.`);
+    }
+    applyRotation(journal);
+    return true;
+}
+//# sourceMappingURL=state.js.map

package/dist/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE5J,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAClI,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,UAAU,GAAG,qEAAqE,CAAC;AAsCzF,0FAA0F;AAC1F,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAe;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,mGAAmG;QACnG,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,MAAM,CAAoH,CAAC;YAC7K,IAAI,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,aAAa,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;QACtH,CAAC;QAAC,MAAM,CAAC,CAAC,4DAA4D,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,yHAAyH,CAAC,CAAC;QACtI,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,OAAO,SAAS,EAAE,KAAK,SAAS,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,4FAA6F,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;QACrI,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAuB,EAAW,EAAE,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,WAAW,CAAC;AAClH,MAAM,YAAY,GAAG,CAAC,QAAuB,EAAW,EAAE,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,YAAY,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;AAEtI;;;;;GAKG;AACH,SAAS,UAAU,CAAC,CAAc,EAAE,MAAmB;IACrD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,iBAAiB,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IAClG,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,+HAA+H;IAC/H,IAAI,CAAC,CAAC,OAAO,KAAK,gBAAgB,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;IAC1F,OAAO,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAc;IAC1C,MAAM,EAAE,GAAG,CAAC,KAAgB,EAAE,MAAmB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAClI,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY;QAAE,OAAO,EAAE,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;IAC/E,uGAAuG;IACvG,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IACtI,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACnC,kIAAkI;QAClI,IAAI,CAAC,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAChD,2FAA2F;QAC3F,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,QAAQ,KAAK,YAAY;YAAE,OAAO,EAAE,CAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC;QAClF,OAAO,EAAE,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QAC7G,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IACxF,CAAC;IACD,0GAA0G;IAC1G,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,EAAE,CAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACjD,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QACvE,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,CAAC;QAC/B,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,CAAC,CAAC;AAE1E;;;GAGG;AACH,SAAS,iBAAiB;IACxB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,cAAc,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC9G,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAA+C,cAAc,EAAE,KAAK,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC/B,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC;IACxJ,CAAC;IAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC;AAED,sCAAsC;AACtC,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC5C,CAAC;AAED,wIAAwI;AACxI,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAAC,CAAC;AACxH,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa;IACpB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAoC,EAAE,CAAC;IACjD,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QAAC,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAChF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,WAAW,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;;YAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,qIAAqI;AACrI,MAAM,UAAU,UAAU,CAAC,QAAkB,EAAE;IAC7C,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,iBAAiB,EAAE,CAAC;IACrD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,YAAY;QACZ,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC;QACxB,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC9C,YAAY,EAAE,cAAc,EAAE;QAC9B,QAAQ,EAAE,aAAa,EAAE;QACzB,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QACvC,YAAY,EAAE,aAAa,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,oHAAoH;AACpH,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,8CAA8C,UAAU,EAAE,6CAA6C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC;AACnJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAuB;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,6BAA6B,IAAI,wFAAwF,CAAC;IACvI,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,GAAG,IAAI,gCAAgC,gBAAgB,CAAC,aAAa,CAAC,8BAA8B,CAAC;IAC3I,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,GAAG,IAAI,uCAAuC,GAAG,CAAC,mBAAmB,CAAC,wCAAwC,CAAC;IAC/I,OAAO,GAAG,IAAI,uCAAuC,GAAG,CAAC,mBAAmB,CAAC,wEAAwE,CAAC;AACxJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,SAAS,CAAC,CAAyC;IACjE,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,sBAAsB,CAAC,CAAC,OAAO,yCAAyC,GAAG,CAAC,MAAM,CAAC,+BAA+B,CAAC;QACxH,KAAK,oBAAoB,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,cAAc,CAAC,4CAA4C,gBAAgB,CAAC,cAAc,CAAC,iCAAiC,GAAG,CAAC,mBAAmB,CAAC,0DAA0D,CAAC;QAC5Q,KAAK,mBAAmB,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjE,KAAK,KAAK,CAAC;QACX,KAAK,UAAU,CAAC,CAAC,OAAO,iCAAiC,GAAG,CAAC,gBAAgB,CAAC,4DAA4D,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC;QAClK,KAAK,aAAa,CAAC,CAAC,OAAO,uCAAuC,GAAG,CAAC,mBAAmB,CAAC,6BAA6B,CAAC;QACxH,KAAK,kBAAkB,CAAC;QACxB,KAAK,aAAa,CAAC,CAAC,OAAO,uDAAuD,GAAG,CAAC,eAAe,CAAC,gCAAgC,CAAC;QACvI,KAAK,eAAe,CAAC,CAAC,OAAO,8CAA8C,GAAG,CAAC,aAAa,CAAC,gCAAgC,CAAC;QAC9H,KAAK,eAAe,CAAC,CAAC,OAAO,sCAAsC,GAAG,CAAC,aAAa,CAAC,2CAA2C,CAAC;QACjI,KAAK,qBAAqB,CAAC,CAAC,OAAO,8CAA8C,gBAAgB,CAAC,aAAa,CAAC,eAAe,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC;QACvJ,KAAK,gBAAgB,CAAC,CAAC,OAAO,uBAAuB,GAAG,CAAC,gBAAgB,CAAC,4DAA4D,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC;QAC9J,KAAK,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO;YACvD,CAAC,CAAC,2FAA2F,GAAG,CAAC,gBAAgB,CAAC,4DAA4D,GAAG,CAAC,aAAa,CAAC,KAAK;YACrM,CAAC,CAAC,0EAA0E,GAAG,CAAC,eAAe,CAAC,SAAS,GAAG,CAAC,aAAa,CAAC,kCAAkC,GAAG,CAAC,gBAAgB,CAAC,eAAe,CAAC;QACpM,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe,CAAC,CAAC,OAAO,wEAAwE,GAAG,CAAC,eAAe,CAAC,SAAS,GAAG,CAAC,aAAa,CAAC,kCAAkC,GAAG,CAAC,gBAAgB,CAAC,eAAe,CAAC;QAC3N,KAAK,gBAAgB,CAAC,CAAC,OAAO,uCAAuC,GAAG,CAAC,aAAa,CAAC,kCAAkC,CAAC;QAC1H,KAAK,OAAO,CAAC,CAAC,OAAO,2FAA2F,GAAG,CAAC,gBAAgB,CAAC,4DAA4D,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC;IAC3N,CAAC;AACH,CAAC;AAED,iCAAiC;AAEjC;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,cAAc,EAAE,CAAC;IACjB,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,iIAAiI;QACjI,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YAAC,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChD,qHAAqH;YACrH,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACjE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,+HAA+H,GAAG,8MAA8M,GAAG,yFAAyF,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACne,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,GAAG,CAAC,IAAc,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;AAClH,MAAM,WAAW,GAAG,CAAC,IAAY,EAAgB,EAAE,CAAC,IAAI,YAAY,CAAC,YAAY,EAAE,GAAG,IAAI,0HAA0H,CAAC,CAAC;AAEtN,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAAE,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QAClG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;AAC3D,CAAC;AA6BD,MAAM,cAAc,GAAG,CAAC,IAAa,EAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;OACjE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC;AAExL;;;;GAIG;AACH,SAAS,WAAW,CAAC,GAAa;IAChC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnF,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACpH,CAAC;AAED,uIAAuI;AACvI,SAAS,cAAc,CAAC,OAAgB;IACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACpG,MAAM,CAAC,GAAG,OAAmC,CAAC;IAC9C,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,kCAAkC,CAAC;IACzF,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;QAAE,OAAO,+CAA+C,CAAC;IACjG,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,gBAAgB;QAAE,OAAO,mCAAmC,CAAC;IACvF,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,wCAAwC,CAAC;IACjG,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,qCAAqC,CAAC;IACjI,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,4BAA4B,CAAC;IAC9G,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;QAAE,OAAO,8BAA8B,CAAC;IAClH,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;QAAE,OAAO,oDAAoD,CAAC;IACvI,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;QAAE,OAAO,oDAAoD,CAAC;IACvI,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAAE,OAAO,yCAAyC,CAAC;IAC5H,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,aAAa;IAC1B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAC3G,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,0HAA0H;IAC1H,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC;IAC5C,IAAI,aAAiC,CAAC;IACtC,IAAI,cAAkC,CAAC;IACvC,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;YAC5G,MAAM,OAAO,GAAI,MAAM,CAAC,UAA6D,EAAE,aAAa,CAAC;YACrG,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE;gBAAE,aAAa,GAAG,OAAO,CAAC;YAC3E,cAAc,GAAG,0BAA0B,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC;QAChK,CAAC;QAAC,MAAM,CAAC,CAAC,wDAAwD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9I,CAAC;AAED,mGAAmG;AACnG,SAAS,UAAU,CAAC,GAAY,EAAE,SAAiC;IACjE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QAAC,KAAK,GAAG,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;IACnE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB;IACxB,IAAI,GAAyB,CAAC;IAC9B,IAAI,CAAC;QAAC,GAAG,GAAG,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,GAAG,GAAG,SAAS,CAAC;IAAC,CAAC;IACnD,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,KAAK,MAAM,UAAU,IAAI,uBAAuB,EAAE,EAAE,CAAC;QACnD,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC;gBAAC,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/F,IAAI,KAAK;YAAE,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAED,6IAA6I;AAC7I,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,YAAY,CAAC,CAAC,IAAI,MAAM,CAA4E,CAAC;QACtK,OAAO,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE;YAC3C,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;YAC5E,OAAO,OAAO,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAa,EAAE,OAAgB;IAC7D,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,iBAAiB,EAAE,CAAC;IACrD,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAoB;QAC/B,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,aAAa,EAAE,CAAC,EAAE,eAAe,EAAE,SAAS;QAC1E,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrH,CAAC;IACF,WAAW,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC;IACrC,aAAa,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC1C,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAwB;IAC7C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,eAAe;QAAE,YAAY,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,eAAe,IAAI,EAAE;QAAE,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9F,OAAO,EAAE,CAAC;IACV,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,SAA6B,EAAU,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE7G,sHAAsH;AACtH,SAAS,aAAa,CAAC,OAAwB;IAC7C,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,0LAA0L,CAAC,CAAC;IAC5M,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,CAAC,KAAK,CAAC,gDAAgD,KAAK,8BAA8B,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,6DAA6D,UAAU,GAAG,CAAC,CAAC;IAChN,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAClD,OAAO,CAAC,KAAK,CAAC,8EAA8E,KAAK,CAAC,aAAa,+DAA+D,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,6DAA6D,UAAU,GAAG,CAAC,CAAC;IACtR,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAClD,OAAO,CAAC,KAAK,CAAC,4DAA4D,KAAK,CAAC,aAAa,yHAAyH,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,6DAA6D,UAAU,GAAG,CAAC,CAAC;IAC9T,CAAC;IACD,qIAAqI;IACrI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;QAC5D,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,SAAS,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACpE,OAAO,CAAC,KAAK,CAAC,yDAAyD,aAAa,gFAAgF,KAAK,6DAA6D,UAAU,GAAG,CAAC,CAAC;IACvP,CAAC;AACH,CAAC;AAED,+IAA+I;AAC/I,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAU,aAAa,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,GAAG,YAAY,EAAE,wCAAwC,OAAO,gFAAgF,GAAG,CAAC,mBAAmB,CAAC,wCAAwC,CAAC,CAAC;IAC1P,CAAC;IACD,aAAa,CAAC,OAA0B,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinycloud/courier",
-  "version": "0.5.1-beta.1",
+  "version": "0.5.1-beta.3",
   "description": "Courier: agent-to-agent threads over TinyCloud (CLI, library and agent skill)",
   "author": "TinyCloud, Inc.",
   "type": "module",
@@ -30,8 +30,8 @@
     "test:live": "tsc -p tsconfig.json && node scripts/happy-path.mjs"
   },
   "dependencies": {
-    "@tinycloud/node-sdk": "3.11.0-beta.1",
-    "@tinycloud/sdk-core": "3.11.0-beta.1",
+    "@tinycloud/node-sdk": "3.11.0-beta.2",
+    "@tinycloud/sdk-core": "3.11.0-beta.2",
     "@tinycloud/share-envelope": "1.5.0",
     "ulid": "^3.0.2"
   },