@tinycloud/node-sdk 2.6.3 → 2.6.4-beta.1

package/dist/index.cjs

@@ -17368,6 +17368,7 @@ function addRawAbility(rawAbilities, resource, action) {
 }
 var NodeUserAuthorization = class {
   constructor(config) {
+    this.activeSessionKeyId = "default";
     this.extensions = [];
     this._nodeFeatures = [];
     this._lastActivationSkippedSpaceIds = [];
@@ -17416,7 +17417,7 @@ var NodeUserAuthorization = class {
     this.includeAccountRegistryPermissions = config.includeAccountRegistryPermissions ?? true;
     this._manifest = config.manifest;
     this._capabilityRequest = config.capabilityRequest;
-    this.sessionManager = this.wasm.createSessionManager();
+    this.sessionManager = config.sessionManager ?? this.wasm.createSessionManager();
   }
   /**
    * Return the manifest currently driving sign-in behavior, or
@@ -17923,7 +17924,8 @@ var NodeUserAuthorization = class {
     const chainId = this._chainId;
     await this.resolveTinyCloudHostsForSignIn(address, chainId);
     const keyId = `session-${Date.now()}`;
-    this.sessionManager.renameSessionKeyId("default", keyId);
+    this.sessionManager.renameSessionKeyId(this.activeSessionKeyId, keyId);
+    this.activeSessionKeyId = keyId;
     const jwkString = this.sessionManager.jwk(keyId);
     if (!jwkString) {
       throw new Error("Failed to create session key");
@@ -18072,7 +18074,8 @@ var NodeUserAuthorization = class {
     const address = (0, import_sdk_core2.canonicalizeAddress)(await this.signer.getAddress());
     const chainId = await this.signer.getChainId();
     const keyId = `session-${Date.now()}`;
-    this.sessionManager.renameSessionKeyId("default", keyId);
+    this.sessionManager.renameSessionKeyId(this.activeSessionKeyId, keyId);
+    this.activeSessionKeyId = keyId;
     const jwkString = this.sessionManager.jwk(keyId);
     if (!jwkString) {
       throw new Error("Failed to create session key");
@@ -18976,6 +18979,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       signer: this.signer,
       signStrategy: config.signStrategy ?? { type: "auto-sign" },
       wasmBindings: this.wasmBindings,
+      sessionManager: this.sessionManager,
       sessionStorage: config.sessionStorage ?? new MemorySessionStorage(),
       domain: this.siweDomain,
       spacePrefix: config.prefix,
@@ -19164,6 +19168,11 @@ var _TinyCloudNode = class _TinyCloudNode {
     this.runtimePermissionGrants = [];
     await this.tc.signIn(options);
     this.syncResolvedHostFromAuth();
+    const signedInSession = this.currentTinyCloudSession();
+    if (signedInSession) {
+      this.sessionKeyId = signedInSession.sessionKey;
+      this.sessionKeyJwk = signedInSession.jwk;
+    }
     this.initializeServices();
     const primarySession = this.currentTinyCloudSession();
     if (primarySession) {
@@ -19965,6 +19974,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       signer: this.signer,
       signStrategy: this.config.signStrategy ?? { type: "auto-sign" },
       wasmBindings: this.wasmBindings,
+      sessionManager: this.sessionManager,
       sessionStorage: options?.sessionStorage ?? this.config.sessionStorage ?? new MemorySessionStorage(),
       domain: this.siweDomain,
       spacePrefix: prefix,
@@ -20012,6 +20022,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       signer: this.signer,
       signStrategy: this.config.signStrategy ?? { type: "auto-sign" },
       wasmBindings: this.wasmBindings,
+      sessionManager: this.sessionManager,
       sessionStorage: options?.sessionStorage ?? this.config.sessionStorage ?? new MemorySessionStorage(),
       domain: this.siweDomain,
       spacePrefix: prefix,
@@ -20487,7 +20498,10 @@ var _TinyCloudNode = class _TinyCloudNode {
       delegationCid: params.session.delegationCid,
       jwk: params.session.jwk,
       spaceId: params.session.spaceId,
-      verificationMethod: params.session.verificationMethod
+      // Session storage carries the verification method as a DID URL
+      // (`did:key:...#key-id`). The Rust UCAN builder expects the principal
+      // DID here and rejects the fragment as an invalid audience DID.
+      verificationMethod: params.session.verificationMethod.split("#", 1)[0]
     };
     const result = this.wasmBindings.createDelegation(
       wasmSession,