@tinycloud/mcp 0.5.0-beta.6 → 0.5.0-beta.7

package/dist/index.js

@@ -140,7 +140,10 @@ var TOOL_BINDINGS = [
     readOnlyHint: false,
     idempotentHint: true,
     destructiveHint: false,
-    openWorldHint: false
+    openWorldHint: false,
+    // Hosted delegations must arrive through the owner/request-bound OpenKey callback,
+    // not a caller-supplied import artifact.
+    surfaces: ["local"]
   },
   {
     name: "tinycloud_account_spaces_list",
@@ -312,7 +315,7 @@ function registerTinyCloudTools(server, selection, validator) {
 // package.json
 var package_default = {
   name: "@tinycloud/mcp",
-  version: "0.5.0-beta.6",
+  version: "0.5.0-beta.7",
   description: "TinyCloud delegated operations MCP server",
   keywords: [
     "tinycloud",
@@ -383,9 +386,9 @@ var package_default = {
   dependencies: {
     "@modelcontextprotocol/node": "2.0.0-beta.4",
     "@modelcontextprotocol/server": "2.0.0-beta.4",
-    "@tinycloud/node-sdk": "3.2.0-beta.5",
+    "@tinycloud/node-sdk": "3.2.0-beta.6",
     "@tinycloud/node-sdk-wasm": "1.7.7",
-    "@tinycloud/operations": "0.5.0-beta.6",
+    "@tinycloud/operations": "0.5.0-beta.7",
     jose: "6.1.3"
   },
   devDependencies: {
@@ -539,6 +542,7 @@ import {
   OAuthError,
   OAuthErrorCode
 } from "@modelcontextprotocol/server";
+import { pkhDid } from "@tinycloud/node-sdk";
 import { createRemoteJWKSet, errors, jwtVerify } from "jose";
 var OWNER_DIDS_CLAIM = "https://tinycloud.xyz/owner_dids";
 function createOpenKeyTokenVerifier(config) {
@@ -575,11 +579,11 @@ function authInfo(token, payload, config) {
     );
   }
   const clientId = firstString(payload.azp, payload.client_id) ?? "unknown";
-  const ownerDids = Array.isArray(payload[OWNER_DIDS_CLAIM]) ? payload[OWNER_DIDS_CLAIM].filter((value) => typeof value === "string") : [];
-  if (ownerDids.length === 0) {
+  const ownerDids = canonicalOwnerDids(payload[OWNER_DIDS_CLAIM]);
+  if (ownerDids === void 0) {
     throw new OAuthError(
       OAuthErrorCode.InvalidToken,
-      "The OpenKey access token has no TinyCloud owner identity."
+      "The OpenKey access token has no valid TinyCloud owner identity."
     );
   }
   return {
@@ -594,6 +598,21 @@ function authInfo(token, payload, config) {
     }
   };
 }
+var OWNER_DID = /^did:pkh:eip155:([1-9][0-9]{0,15}):(0x[0-9a-fA-F]{40})$/;
+function canonicalOwnerDids(claim) {
+  if (!Array.isArray(claim) || claim.length === 0) return void 0;
+  const ownerDids = [];
+  for (const value of claim) {
+    const match = typeof value === "string" ? OWNER_DID.exec(value) : null;
+    if (match === null) return void 0;
+    try {
+      ownerDids.push(pkhDid(match[2], Number(match[1])));
+    } catch {
+      return void 0;
+    }
+  }
+  return [...new Set(ownerDids)];
+}
 function firstString(...values) {
   return values.find((value) => typeof value === "string" && value.length > 0);
 }
@@ -604,7 +623,9 @@ import { chmod, mkdir, readFile, readdir, rename, rm, writeFile } from "fs/promi
 import { dirname, join as join2 } from "path";
 import {
   TinyCloudNode,
-  principalDidEquals
+  isCapabilitySubset,
+  principalDidEquals,
+  siweRuntimeDelegation
 } from "@tinycloud/node-sdk";
 import { TCWSessionManager, importKey, initPanicHook } from "@tinycloud/node-sdk-wasm";
 import { invokeOperation as invokeOperation2 } from "@tinycloud/operations";
@@ -719,8 +740,7 @@ var RemoteTenantStore = class {
     if (pending.ownerDids.length > 0 && !pending.ownerDids.some((did) => samePrincipal(node.did, did))) {
       throw new ApprovalOwnerMismatchError();
     }
-    const granted = [...node.getVerifiedSessionCapabilities()];
-    if (!permissionsCover(pending.permissions, granted)) {
+    if (!isCapabilitySubset(pending.permissions, node.getVerifiedSessionCapabilities()).subset) {
       throw new Error("The approved delegation does not cover the requested account access.");
     }
     const profile = await readJson(this.#profilePath(tenant.stateRoot));
@@ -736,14 +756,25 @@ var RemoteTenantStore = class {
   }
   async #storeDelegation(tenant, pending, data) {
     if (pending.requestId === void 0) throw new Error("Authority request is missing.");
-    const { node } = await this.#restoreApproval(tenant, data);
+    const { node, session } = await this.#restoreApproval(tenant, data);
     if (!pending.ownerDids.some((did) => samePrincipal(node.did, did))) throw new ApprovalOwnerMismatchError();
-    const delegation = portableFromCallback(data, pending.permissions, this.#config.nodeHost);
+    const delegation = siweRuntimeDelegation(node, {
+      authorization: session.delegationHeader.Authorization,
+      cid: session.delegationCid,
+      spaceId: session.spaceId,
+      ownerAddress: session.address,
+      chainId: session.chainId,
+      siwe: session.siwe,
+      signature: session.signature,
+      host: this.#config.nodeHost
+    });
     const result = await invokeOperation2(
       "tinycloud.auth.import",
       1,
       { profile: PROFILE, stateRoot: tenant.stateRoot },
       {
+        kind: "tinycloud.auth.delegation",
+        version: 1,
         requestId: pending.requestId,
         delegationCid: delegation.cid,
         delegation
@@ -753,8 +784,10 @@ var RemoteTenantStore = class {
   }
   /**
    * Verify the OpenKey callback as a SIWE session for this tenant's key. The
-   * WASM verifier binds the authorization bytes and CID to the signed SIWE, so
-   * `node.did` is the wallet that signed exactly the delegation being stored.
+   * callback must carry the full signed proof (SIWE, signature, address and
+   * chain), so the WASM verifier always runs: it binds the authorization bytes
+   * and CID to the signed SIWE, and `node.did` is the wallet that signed
+   * exactly the delegation being stored.
    */
   async #restoreApproval(tenant, data) {
     const session = sessionFromCallback(data, tenant.jwk);
@@ -934,7 +967,7 @@ function ensureWasm() {
 }
 function sessionFromCallback(data, privateJwk) {
   const delegationHeader = data.delegationHeader;
-  if (!isRecord(delegationHeader) || typeof delegationHeader.Authorization !== "string" || typeof data.delegationCid !== "string" || typeof data.spaceId !== "string" || typeof data.verificationMethod !== "string") {
+  if (!isRecord(delegationHeader) || typeof delegationHeader.Authorization !== "string" || typeof data.delegationCid !== "string" || typeof data.spaceId !== "string" || typeof data.verificationMethod !== "string" || typeof data.address !== "string" || typeof data.chainId !== "number" || typeof data.siwe !== "string" || typeof data.signature !== "string") {
     throw new Error("OpenKey returned an incomplete delegation.");
   }
   return {
@@ -943,63 +976,12 @@ function sessionFromCallback(data, privateJwk) {
     spaceId: data.spaceId,
     jwk: privateJwk,
     verificationMethod: data.verificationMethod,
-    ...typeof data.address === "string" ? { address: data.address } : {},
-    ...typeof data.chainId === "number" ? { chainId: data.chainId } : {},
-    ...typeof data.siwe === "string" ? { siwe: data.siwe } : {},
-    ...typeof data.signature === "string" ? { signature: data.signature } : {}
-  };
-}
-function portableFromCallback(data, permissions, host) {
-  const primary = permissions.find((permission) => permission.service !== "tinycloud.encryption") ?? permissions[0];
-  if (primary === void 0) throw new Error("The authority request has no permissions.");
-  const session = sessionFromCallback(data, {});
-  const expiry = delegationExpiry(data);
-  return {
-    cid: session.delegationCid,
-    delegationHeader: session.delegationHeader,
-    spaceId: session.spaceId,
-    path: primary.path,
-    actions: [...primary.actions],
-    resources: permissions.map((permission) => ({
-      service: permission.service.startsWith("tinycloud.") ? permission.service.slice("tinycloud.".length) : permission.service,
-      space: permission.service === "tinycloud.encryption" ? requiredPermissionSpace(permission) : session.spaceId,
-      path: permission.path,
-      actions: [...permission.actions]
-    })),
-    expiry,
-    delegateDID: session.verificationMethod,
-    ownerAddress: typeof data.address === "string" ? data.address : "",
-    chainId: typeof data.chainId === "number" ? data.chainId : 1,
-    host
+    address: data.address,
+    chainId: data.chainId,
+    siwe: data.siwe,
+    signature: data.signature
   };
 }
-function delegationExpiry(data) {
-  for (const key of ["expiry", "expiresAt", "expirationTime"]) {
-    const parsed = parseDate(data[key]);
-    if (parsed !== void 0) return parsed;
-  }
-  if (typeof data.siwe === "string") {
-    const match = data.siwe.match(/^Expiration Time:\s*(.+)$/im);
-    const parsed = parseDate(match?.[1]?.trim());
-    if (parsed !== void 0) return parsed;
-  }
-  throw new Error("OpenKey did not return a delegation expiry.");
-}
-function permissionsCover(requested, granted) {
-  return requested.every((request) => granted.some(
-    (grant) => normalizeService(grant.service) === normalizeService(request.service) && typeof grant.space === "string" && typeof request.space === "string" && sameSpace(grant.space, request.space) && grant.path === request.path && request.actions.every((action) => grant.actions.includes(action))
-  ));
-}
-function sameSpace(granted, requested) {
-  return granted === requested || granted.endsWith(`:${requested}`);
-}
-function normalizeService(service) {
-  return service.startsWith("tinycloud.") ? service : `tinycloud.${service}`;
-}
-function requiredPermissionSpace(permission) {
-  if (typeof permission.space !== "string") throw new Error("The authority request has no space.");
-  return permission.space;
-}
 function publicJwk(jwk) {
   const copy = { ...jwk };
   for (const field of ["d", "p", "q", "dp", "dq", "qi", "oth", "k"]) delete copy[field];
@@ -1022,11 +1004,6 @@ function isPermissionEntry(value) {
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function parseDate(value) {
-  if (typeof value !== "string" && typeof value !== "number") return void 0;
-  const date = new Date(typeof value === "number" && value < 1e10 ? value * 1e3 : value);
-  return Number.isNaN(date.getTime()) ? void 0 : date;
-}
 async function secureDirectory(path) {
   await mkdir(path, { recursive: true, mode: 448 });
   await chmod(path, 448);