@tinycloud/node-sdk 2.0.2-beta.0 → 2.0.3-beta.0

package/dist/core.d.cts

@@ -1,4 +1,4 @@
-import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, IWasmBindings, ClientSession, TinyCloudSession, Extension, Delegation, IKVService, ISQLService, IDuckDbService, INotificationHandler, IENSResolver, IDataVaultService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISharingService, CreateDelegationParams, DelegationResult, KeyProvider, ISessionManager, JWK } from '@tinycloud/sdk-core';
+import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, IWasmBindings, SiweConfig, ClientSession, TinyCloudSession, Extension, Delegation, IKVService, ISQLService, IDuckDbService, INotificationHandler, IENSResolver, IDataVaultService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISharingService, CreateDelegationParams, DelegationResult, KeyProvider, ISessionManager, JWK } from '@tinycloud/sdk-core';
 export { AutoApproveSpaceCreationHandler, AutoRejectStrategy, AutoSignStrategy, BatchOptions, BatchResponse, CallbackStrategy, CapabilityEntry, CapabilityKeyRegistry, CapabilityKeyRegistryErrorCode, CapabilityKeyRegistryErrorCodes, ClientSession, ColumnInfo, CreateDelegationParams, DataVaultConfig, DataVaultService, DatabaseHandle, Delegation, DelegationChain, DelegationChainV2, DelegationDirection, DelegationError, DelegationErrorCode, DelegationErrorCodes, DelegationFilters, DelegationManager, DelegationManagerConfig, DelegationRecord, DelegationResult, DuckDbAction, DuckDbActionType, DuckDbBatchOptions, DuckDbBatchResponse, DuckDbDatabaseHandle, DuckDbExecuteOptions, DuckDbExecuteResponse, DuckDbOptions, DuckDbQueryOptions, DuckDbQueryResponse, DuckDbService, DuckDbServiceConfig, DuckDbStatement, DuckDbValue, EncodedShareData, ExecuteOptions, ExecuteResponse, Extension, FetchFunction, GenerateShareParams, ICapabilityKeyRegistry, IDataVaultService, IDatabaseHandle, IDuckDbDatabaseHandle, IDuckDbService, IENSResolver, IKVService, INotificationHandler, IPrefixedKVService, ISQLService, ISessionManager, ISessionStorage, ISharingService, ISigner, ISpace, ISpaceCreationHandler, ISpaceScopedDelegations, ISpaceScopedSharing, ISpaceService, IUserAuthorization, IWasmBindings, IngestOptions, InvokeFunction, JWK, KVResponse, KVService, KVServiceConfig, KeyInfo, KeyProvider, KeyType, PersistedSessionData, PrefixedKVService, ProtocolMismatchError, QueryOptions, QueryResponse, ReceiveOptions, SQLAction, SQLActionType, SQLService, SQLServiceConfig, SchemaInfo, ServiceContext, ServiceContextConfig, ServiceSession, ShareAccess, ShareLink, ShareLinkData, ShareSchema, SharingService, SharingServiceConfig, SignCallback, SignRequest, SignResponse, SilentNotificationHandler, Space, SpaceConfig, SpaceCreationContext, SpaceErrorCode, SpaceErrorCodes, SpaceInfo, SpaceOwnership, SpaceService, SpaceServiceConfig, SqlStatement, SqlValue, StoredDelegationChain, TableInfo, TinyCloud, TinyCloudConfig, TinyCloudSession, UnsupportedFeatureError, VaultCrypto, VaultEntry, VaultError, VaultGetOptions, VaultGrantOptions, VaultHeaders, VaultListOptions, VaultPublicSpaceKVActions, VaultPutOptions, VersionCheckError, ViewInfo, WasmVaultFunctions, buildSpaceUri, checkNodeInfo, createCapabilityKeyRegistry, createSharingService, createSpaceService, createVaultCrypto, defaultSpaceCreationHandler, makePublicSpaceId, parseSpaceUri } from '@tinycloud/sdk-core';
 import { EventEmitter } from 'events';
 import { InvokeFunction } from '@tinycloud/sdk-services';
@@ -196,6 +196,8 @@ interface NodeUserAuthorizationConfig {
     enablePublicSpace?: boolean;
     /** WASM bindings for cryptographic operations. Required. */
     wasmBindings: IWasmBindings;
+    /** Optional SIWE configuration overrides (e.g., nonce for server-provided nonces) */
+    siweConfig?: SiweConfig;
 }
 /**
  * Node.js implementation of IUserAuthorization.
@@ -243,6 +245,7 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     private readonly spaceCreationHandler?;
     private readonly tinycloudHosts;
     private readonly enablePublicSpace;
+    private readonly siweConfig?;
     private readonly wasm;
     private sessionManager;
     private extensions;
@@ -262,6 +265,14 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      */
     get tinyCloudSession(): TinyCloudSession | undefined;
     get nodeFeatures(): string[];
+    /**
+     * Build SIWE overrides from siweConfig.
+     * - statement is prepended to the default statement
+     * - resources are appended to the default resources
+     * - uri triggers a warning (overwriting delegation target)
+     * - all other fields override directly
+     */
+    private buildSiweOverrides;
     /**
      * Add an extension to the authorization flow.
      */
@@ -519,6 +530,8 @@ interface TinyCloudNodeConfig {
     ensResolver?: IENSResolver;
     /** Custom space creation handler (default: auto-approve when autoCreateSpace is true) */
     spaceCreationHandler?: ISpaceCreationHandler;
+    /** Optional SIWE configuration overrides (e.g., nonce for server-provided nonces) */
+    siweConfig?: SiweConfig;
 }
 /**
  * High-level TinyCloud API for Node.js environments.
@@ -563,6 +576,8 @@ declare class TinyCloudNode {
     private _delegationManager?;
     private _spaceService?;
     private get nodeFeatures();
+    /** SIWE domain — uses config override or defaults to app.tinycloud.xyz */
+    private get siweDomain();
     /**
      * Create a new TinyCloudNode instance.
      *

package/dist/core.d.ts

@@ -1,4 +1,4 @@
-import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, IWasmBindings, ClientSession, TinyCloudSession, Extension, Delegation, IKVService, ISQLService, IDuckDbService, INotificationHandler, IENSResolver, IDataVaultService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISharingService, CreateDelegationParams, DelegationResult, KeyProvider, ISessionManager, JWK } from '@tinycloud/sdk-core';
+import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, IWasmBindings, SiweConfig, ClientSession, TinyCloudSession, Extension, Delegation, IKVService, ISQLService, IDuckDbService, INotificationHandler, IENSResolver, IDataVaultService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISharingService, CreateDelegationParams, DelegationResult, KeyProvider, ISessionManager, JWK } from '@tinycloud/sdk-core';
 export { AutoApproveSpaceCreationHandler, AutoRejectStrategy, AutoSignStrategy, BatchOptions, BatchResponse, CallbackStrategy, CapabilityEntry, CapabilityKeyRegistry, CapabilityKeyRegistryErrorCode, CapabilityKeyRegistryErrorCodes, ClientSession, ColumnInfo, CreateDelegationParams, DataVaultConfig, DataVaultService, DatabaseHandle, Delegation, DelegationChain, DelegationChainV2, DelegationDirection, DelegationError, DelegationErrorCode, DelegationErrorCodes, DelegationFilters, DelegationManager, DelegationManagerConfig, DelegationRecord, DelegationResult, DuckDbAction, DuckDbActionType, DuckDbBatchOptions, DuckDbBatchResponse, DuckDbDatabaseHandle, DuckDbExecuteOptions, DuckDbExecuteResponse, DuckDbOptions, DuckDbQueryOptions, DuckDbQueryResponse, DuckDbService, DuckDbServiceConfig, DuckDbStatement, DuckDbValue, EncodedShareData, ExecuteOptions, ExecuteResponse, Extension, FetchFunction, GenerateShareParams, ICapabilityKeyRegistry, IDataVaultService, IDatabaseHandle, IDuckDbDatabaseHandle, IDuckDbService, IENSResolver, IKVService, INotificationHandler, IPrefixedKVService, ISQLService, ISessionManager, ISessionStorage, ISharingService, ISigner, ISpace, ISpaceCreationHandler, ISpaceScopedDelegations, ISpaceScopedSharing, ISpaceService, IUserAuthorization, IWasmBindings, IngestOptions, InvokeFunction, JWK, KVResponse, KVService, KVServiceConfig, KeyInfo, KeyProvider, KeyType, PersistedSessionData, PrefixedKVService, ProtocolMismatchError, QueryOptions, QueryResponse, ReceiveOptions, SQLAction, SQLActionType, SQLService, SQLServiceConfig, SchemaInfo, ServiceContext, ServiceContextConfig, ServiceSession, ShareAccess, ShareLink, ShareLinkData, ShareSchema, SharingService, SharingServiceConfig, SignCallback, SignRequest, SignResponse, SilentNotificationHandler, Space, SpaceConfig, SpaceCreationContext, SpaceErrorCode, SpaceErrorCodes, SpaceInfo, SpaceOwnership, SpaceService, SpaceServiceConfig, SqlStatement, SqlValue, StoredDelegationChain, TableInfo, TinyCloud, TinyCloudConfig, TinyCloudSession, UnsupportedFeatureError, VaultCrypto, VaultEntry, VaultError, VaultGetOptions, VaultGrantOptions, VaultHeaders, VaultListOptions, VaultPublicSpaceKVActions, VaultPutOptions, VersionCheckError, ViewInfo, WasmVaultFunctions, buildSpaceUri, checkNodeInfo, createCapabilityKeyRegistry, createSharingService, createSpaceService, createVaultCrypto, defaultSpaceCreationHandler, makePublicSpaceId, parseSpaceUri } from '@tinycloud/sdk-core';
 import { EventEmitter } from 'events';
 import { InvokeFunction } from '@tinycloud/sdk-services';
@@ -196,6 +196,8 @@ interface NodeUserAuthorizationConfig {
     enablePublicSpace?: boolean;
     /** WASM bindings for cryptographic operations. Required. */
     wasmBindings: IWasmBindings;
+    /** Optional SIWE configuration overrides (e.g., nonce for server-provided nonces) */
+    siweConfig?: SiweConfig;
 }
 /**
  * Node.js implementation of IUserAuthorization.
@@ -243,6 +245,7 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     private readonly spaceCreationHandler?;
     private readonly tinycloudHosts;
     private readonly enablePublicSpace;
+    private readonly siweConfig?;
     private readonly wasm;
     private sessionManager;
     private extensions;
@@ -262,6 +265,14 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      */
     get tinyCloudSession(): TinyCloudSession | undefined;
     get nodeFeatures(): string[];
+    /**
+     * Build SIWE overrides from siweConfig.
+     * - statement is prepended to the default statement
+     * - resources are appended to the default resources
+     * - uri triggers a warning (overwriting delegation target)
+     * - all other fields override directly
+     */
+    private buildSiweOverrides;
     /**
      * Add an extension to the authorization flow.
      */
@@ -519,6 +530,8 @@ interface TinyCloudNodeConfig {
     ensResolver?: IENSResolver;
     /** Custom space creation handler (default: auto-approve when autoCreateSpace is true) */
     spaceCreationHandler?: ISpaceCreationHandler;
+    /** Optional SIWE configuration overrides (e.g., nonce for server-provided nonces) */
+    siweConfig?: SiweConfig;
 }
 /**
  * High-level TinyCloud API for Node.js environments.
@@ -563,6 +576,8 @@ declare class TinyCloudNode {
     private _delegationManager?;
     private _spaceService?;
     private get nodeFeatures();
+    /** SIWE domain — uses config override or defaults to app.tinycloud.xyz */
+    private get siweDomain();
     /**
      * Create a new TinyCloudNode instance.
      *

package/dist/core.js

@@ -260,6 +260,7 @@ var NodeUserAuthorization = class {
     this.spaceCreationHandler = config.spaceCreationHandler;
     this.tinycloudHosts = config.tinycloudHosts ?? ["https://node.tinycloud.xyz"];
     this.enablePublicSpace = config.enablePublicSpace ?? true;
+    this.siweConfig = config.siweConfig;
     this.sessionManager = this.wasm.createSessionManager();
   }
   /**
@@ -278,6 +279,31 @@ var NodeUserAuthorization = class {
   get nodeFeatures() {
     return this._nodeFeatures;
   }
+  /**
+   * Build SIWE overrides from siweConfig.
+   * - statement is prepended to the default statement
+   * - resources are appended to the default resources
+   * - uri triggers a warning (overwriting delegation target)
+   * - all other fields override directly
+   */
+  buildSiweOverrides() {
+    if (!this.siweConfig) return { uri: this.uri };
+    const { statement, resources, uri, ...rest } = this.siweConfig;
+    const overrides = { uri: this.uri, ...rest };
+    if (statement) {
+      overrides.statement = this.statement ? `${statement} ${this.statement}` : statement;
+    }
+    if (resources && resources.length > 0) {
+      overrides.resources = resources;
+    }
+    if (uri) {
+      console.warn(
+        "[tinycloud] siweConfig.uri is overwriting the delegation target URI. This may break delegation chain validation if the URI does not match the session key DID."
+      );
+      overrides.uri = uri;
+    }
+    return overrides;
+  }
   /**
    * Add an extension to the authorization flow.
    */
@@ -452,7 +478,8 @@ var NodeUserAuthorization = class {
       issuedAt: now.toISOString(),
       expirationTime: expirationTime.toISOString(),
       spaceId,
-      jwk
+      jwk,
+      ...this.buildSiweOverrides()
     });
     const signature = await this.requestSignature({
       address,
@@ -591,7 +618,8 @@ var NodeUserAuthorization = class {
       issuedAt: now.toISOString(),
       expirationTime: expirationTime.toISOString(),
       spaceId,
-      jwk
+      jwk,
+      ...this.buildSiweOverrides()
     });
     return {
       prepared,
@@ -1016,25 +1044,29 @@ var TinyCloudNode = class _TinyCloudNode {
   get nodeFeatures() {
     return this.auth?.nodeFeatures ?? [];
   }
+  /** SIWE domain — uses config override or defaults to app.tinycloud.xyz */
+  get siweDomain() {
+    return this.config.domain ?? "app.tinycloud.xyz";
+  }
   /**
    * Set up authorization handler and TinyCloud instance.
    * @internal
    */
   setupAuth(config) {
     const host = this.config.host;
-    const domain = config.domain ?? new URL(host).hostname;
     this.auth = new NodeUserAuthorization({
       signer: this.signer,
       signStrategy: { type: "auto-sign" },
       wasmBindings: this.wasmBindings,
       sessionStorage: config.sessionStorage ?? new MemorySessionStorage(),
-      domain,
+      domain: this.siweDomain,
       spacePrefix: config.prefix,
       sessionExpirationMs: config.sessionExpirationMs ?? 60 * 60 * 1e3,
       tinycloudHosts: [host],
       autoCreateSpace: config.autoCreateSpace,
       enablePublicSpace: config.enablePublicSpace ?? true,
-      spaceCreationHandler: config.spaceCreationHandler
+      spaceCreationHandler: config.spaceCreationHandler,
+      siweConfig: config.siweConfig
     });
     this.tc = new TinyCloud(this.auth);
   }
@@ -1223,7 +1255,6 @@ var TinyCloudNode = class _TinyCloudNode {
     }
     const prefix = options?.prefix ?? "default";
     const host = this.config.host;
-    const domain = new URL(host).hostname;
     if (!_TinyCloudNode.nodeDefaults) {
       throw new Error(
         "connectWallet() requires PrivateKeySigner. Use connectSigner() instead, or import from '@tinycloud/node-sdk' (not '/core') for automatic Node.js defaults."
@@ -1235,7 +1266,7 @@ var TinyCloudNode = class _TinyCloudNode {
       signStrategy: { type: "auto-sign" },
       wasmBindings: this.wasmBindings,
       sessionStorage: options?.sessionStorage ?? this.config.sessionStorage ?? new MemorySessionStorage(),
-      domain,
+      domain: this.siweDomain,
       spacePrefix: prefix,
       sessionExpirationMs: this.config.sessionExpirationMs ?? 60 * 60 * 1e3,
       tinycloudHosts: [host],
@@ -1265,14 +1296,13 @@ var TinyCloudNode = class _TinyCloudNode {
     }
     const prefix = options?.prefix ?? "default";
     const host = this.config.host;
-    const domain = new URL(host).hostname;
     this.signer = signer;
     this.auth = new NodeUserAuthorization({
       signer: this.signer,
       signStrategy: { type: "auto-sign" },
       wasmBindings: this.wasmBindings,
       sessionStorage: options?.sessionStorage ?? this.config.sessionStorage ?? new MemorySessionStorage(),
-      domain,
+      domain: this.siweDomain,
       spacePrefix: prefix,
       sessionExpirationMs: this.config.sessionExpirationMs ?? 60 * 60 * 1e3,
       tinycloudHosts: [host],
@@ -1583,7 +1613,7 @@ var TinyCloudNode = class _TinyCloudNode {
         abilities,
         address: this.wasmBindings.ensureEip55(session.address),
         chainId: session.chainId,
-        domain: new URL(host).hostname,
+        domain: this.siweDomain,
         issuedAt: now.toISOString(),
         expirationTime: params.requestedExpiry.toISOString(),
         spaceId: params.spaceId,
@@ -1892,7 +1922,7 @@ var TinyCloudNode = class _TinyCloudNode {
       abilities,
       address: this.wasmBindings.ensureEip55(this.session.address),
       chainId: this.session.chainId,
-      domain: new URL(this.config.host).hostname,
+      domain: this.siweDomain,
       issuedAt: now.toISOString(),
       expirationTime: expirationTime.toISOString(),
       spaceId: publicSpaceId,
@@ -2059,7 +2089,7 @@ var TinyCloudNode = class _TinyCloudNode {
       abilities,
       address: this.wasmBindings.ensureEip55(session.address),
       chainId: session.chainId,
-      domain: new URL(this.config.host).hostname,
+      domain: this.siweDomain,
       issuedAt: now.toISOString(),
       expirationTime: expirationTime.toISOString(),
       spaceId: params.spaceIdOverride ?? session.spaceId,
@@ -2104,7 +2134,7 @@ var TinyCloudNode = class _TinyCloudNode {
         abilities: publicAbilities,
         address: this.wasmBindings.ensureEip55(session.address),
         chainId: session.chainId,
-        domain: new URL(this.config.host).hostname,
+        domain: this.siweDomain,
         issuedAt: now.toISOString(),
         expirationTime: expirationTime.toISOString(),
         spaceId: publicSpaceId,
@@ -2203,7 +2233,7 @@ var TinyCloudNode = class _TinyCloudNode {
       abilities,
       address: this.wasmBindings.ensureEip55(mySession.address),
       chainId: mySession.chainId,
-      domain: new URL(targetHost).hostname,
+      domain: this.siweDomain,
       issuedAt: now.toISOString(),
       expirationTime: expirationTime.toISOString(),
       spaceId: delegation.spaceId,
@@ -2292,7 +2322,7 @@ var TinyCloudNode = class _TinyCloudNode {
       abilities,
       address: this.wasmBindings.ensureEip55(this._address),
       chainId: this._chainId,
-      domain: new URL(targetHost).hostname,
+      domain: this.siweDomain,
       issuedAt: now.toISOString(),
       expirationTime: actualExpiry.toISOString(),
       spaceId: parentDelegation.spaceId,