@tinycloud/node-sdk 2.7.0-beta.3 → 2.7.0-beta.5

package/dist/{core-DGFXEW74.d.cts → core-aXks8jFT.d.cts}

@@ -351,6 +351,8 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      *   {@link ensureTinyCloudHosts}.
      */
     setRestoredTinyCloudSession(session: TinyCloudSession, hosts?: string[]): void;
+    /** @internal Atomically adopt the state staged by TinyCloudNode.restoreSession. */
+    installRestoredSession(sessionManager: ISessionManager, session: TinyCloudSession | undefined, hosts?: string[]): void;
     /**
      * Ensure `tinycloudHosts` are resolved before a host-needing call.
      *
@@ -621,6 +623,47 @@ interface DelegationAuthority {
         prompted: boolean;
     }>;
 }
+/**
+ * Authority that the validated runtime-delegation activation helper needs.
+ * `TinyCloudNode` implements this surface directly; keeping it structural
+ * makes the helper usable by a compatible Node wrapper without exposing node
+ * internals.
+ */
+interface RuntimeDelegationActivator {
+    readonly sessionDid: string;
+    readonly did?: string;
+    readonly isSessionOnly?: boolean;
+    computeDelegationCid(authorization: string): string;
+    useRuntimeDelegation(delegation: PortableDelegation): Promise<void>;
+    useDelegation?(delegation: PortableDelegation): Promise<unknown>;
+    getRuntimePermissionDelegations(): PortableDelegation[];
+}
+/** The installed authority returned by {@link activateValidatedRuntimeDelegation}. */
+interface ValidatedRuntimeDelegation {
+    /** CID recomputed from the signed authorization bytes. */
+    readonly cid: string;
+    /** The authority object installed by the node runtime. */
+    readonly delegation: PortableDelegation;
+    /** Capabilities read from the signed compact UCAN attenuation. */
+    readonly effectivePermissions: readonly PermissionEntry[];
+    /** Expiry read from the signed compact UCAN payload. */
+    readonly expiry: Date;
+    /** Audience read from the signed compact UCAN payload. */
+    readonly audience: string;
+    /** Host selected for, and used by, the runtime activation. */
+    readonly host: string;
+}
+/**
+ * CID-bind and activate one compact runtime delegation.
+ *
+ * The helper derives audience, expiry, and effective permissions from the
+ * compact UCAN's signed payload, verifies the transport fields agree, then
+ * invokes {@link TinyCloudNode.useRuntimeDelegation}. The node activation call
+ * remains the authority and delegation-chain validation boundary.
+ */
+declare function activateValidatedRuntimeDelegation(node: RuntimeDelegationActivator, delegation: PortableDelegation, options: {
+    host: string;
+}): Promise<ValidatedRuntimeDelegation>;
 /**
  * Turn a delegation REQUEST into a signed GRANT.
  *
@@ -757,6 +800,47 @@ declare class DelegatedAccess {
  * ```
  */
 
+/** Input for {@link TinyCloudNode.readSecret}. The target space is required. */
+interface SecretReadInput {
+    /** Explicit full space URI or an owned-space name. */
+    space: string;
+    /** Env-style secret name. */
+    name: string;
+    /** Optional logical secret scope. */
+    scope?: string;
+}
+/** Safe, validated capability hint returned when the node denies one read phase. */
+interface SecretPermissionHint {
+    readonly service: "tinycloud.kv" | "tinycloud.encryption";
+    readonly space?: string;
+    readonly path: string;
+    readonly actions: readonly string[];
+}
+/**
+ * Safe classified result for an explicit-space secret read.
+ *
+ * Failure variants contain no raw node response, envelope, plaintext, keys,
+ * tokens, or delegation data.
+ */
+type SecretReadResult = {
+    status: "ok";
+    value: string;
+} | {
+    status: "not_found";
+} | {
+    status: "permission_required";
+    hint: SecretPermissionHint;
+} | {
+    status: "node_unreachable";
+} | {
+    status: "read_failed";
+} | {
+    status: "corrupt_envelope";
+} | {
+    status: "decrypt_failed";
+} | {
+    status: "invalid_payload";
+};
 interface CreateOwnerDelegationParams {
     readonly delegateDid: string;
     readonly spaceId: string;
@@ -777,6 +861,10 @@ interface OwnerDelegationReceipt {
         readonly skipped: readonly string[];
     };
 }
+declare class UnsupportedSessionRestoreError extends Error {
+    readonly code: "RESTORE_SESSION_KEY_REPLACEMENT_UNSUPPORTED";
+    constructor(reason?: string);
+}
 /**
  * Configuration for TinyCloudNode.
  * All fields are optional - TinyCloudNode can work with zero configuration.
@@ -909,6 +997,7 @@ declare class TinyCloudNode {
     private _chainId;
     private wasmBindings;
     private sessionManager;
+    private _serviceGraph;
     private _serviceContext?;
     private _kv?;
     private _sql?;
@@ -916,6 +1005,7 @@ declare class TinyCloudNode {
     private _hooks?;
     private _vault?;
     private _encryption?;
+    private _baseVaults;
     private _baseSecrets;
     private _secrets;
     private _account?;
@@ -1002,6 +1092,7 @@ declare class TinyCloudNode {
      */
     private setupAuth;
     private shouldUseBootstrapSignInRequest;
+    private createServiceGraphLifetime;
     private syncResolvedHostFromAuth;
     /**
      * Install or replace the manifest that drives the SIWE recap at
@@ -1034,6 +1125,15 @@ declare class TinyCloudNode {
      * Use this when you specifically need the session key, not the user identity.
      */
     get sessionDid(): string;
+    /**
+     * Return the current session's signed ReCap capabilities after the session
+     * has been authenticated or restored. This is intentionally distinct from
+     * installed runtime delegations: it reports base-session authority only.
+     *
+     * Invalid or unparseable signed ReCap material throws so callers fail closed
+     * rather than treating a malformed session as unrestricted authority.
+     */
+    getVerifiedSessionCapabilities(): PermissionEntry[];
     /**
      * Get the Ethereum address for this user.
      */
@@ -1224,6 +1324,8 @@ declare class TinyCloudNode {
         };
         delegationCid: string;
         spaceId: string;
+        /** Additional capability spaces persisted with the primary session. */
+        spaces?: Record<string, string>;
         jwk: object;
         verificationMethod: string;
         address?: string;
@@ -1238,11 +1340,16 @@ declare class TinyCloudNode {
          */
         siwe?: string;
         /**
-         * The wallet/OpenKey signature over `siwe`. Optional because the
-         * runtime doesn't re-verify it — it's persisted alongside the SIWE
-         * for callers that need to round-trip the full session shape.
+         * The wallet/OpenKey signature over `siwe`. When any signed-session
+         * metadata is restored, this is required and verified in WASM before
+         * local ReCap or expiry authority is installed.
          */
         signature?: string;
+        /**
+         * Persisted policy expiry. Required when an otherwise valid SIWE omits
+         * `Expiration Time`; restore never invents a new renewable lifetime.
+         */
+        expiresAt?: string;
         /**
          * The TinyCloud hosts this session was created against (from
          * {@link PersistedSessionData.tinycloudHosts}). When present they are
@@ -1254,6 +1361,8 @@ declare class TinyCloudNode {
          */
         tinycloudHosts?: string[];
     }): Promise<void>;
+    private stagePrimarySessionState;
+    private stageRestoredServiceGraph;
     /**
      * Resolve the host a restored session should target.
      *
@@ -1331,9 +1440,16 @@ declare class TinyCloudNode {
     getEncryptionNetworkIdForSpace(spaceId: string, name?: string): string;
     private ownerDidFromSpaceId;
     private requireServiceSession;
+    /**
+     * Runtime-permission helpers can be used from an authenticated Node session
+     * before its public ServiceContext is initialized. They still need the
+     * current signed session, never an optional or stale authority object.
+     */
+    private requireEncryptionSession;
     private createEncryptionCrypto;
     private fetchNodeId;
     private signRawNetworkAuthorization;
+    private fetchEncryptionNetworkAt;
     private createEncryptionService;
     private getEncryptionService;
     private createVaultService;
@@ -1371,7 +1487,7 @@ declare class TinyCloudNode {
      * with expiry longer than the current session.
      * @internal
      */
-    createOwnerDelegation(params: CreateOwnerDelegationParams): Promise<OwnerDelegationReceipt>;
+    createOwnerDelegation(params: CreateOwnerDelegationParams, assertActive?: () => void): Promise<OwnerDelegationReceipt>;
     private createRootDelegationForSharing;
     /**
      * Track a received delegation in the capability registry.
@@ -1440,7 +1556,14 @@ declare class TinyCloudNode {
      * App-facing secrets API backed by the requested space's vault.
      */
     secretsForSpace(spaceId: string): ISecretsService;
+    /**
+     * Read a secret from an explicit target space without requesting or
+     * auto-signing authority. Active runtime delegations are selected by the
+     * normal KV and encryption invocation paths.
+     */
+    readSecret(input: SecretReadInput): Promise<SecretReadResult>;
     private getBaseSecrets;
+    private getBaseVault;
     /**
      * Hooks write stream subscription API.
      */
@@ -1498,6 +1621,15 @@ declare class TinyCloudNode {
      * returned. Base-session manifest permissions are not represented here.
      */
     getRuntimePermissionDelegations(permissions?: PermissionEntry[]): PortableDelegation[];
+    /**
+     * Return the effective capabilities of installed runtime grants.
+     *
+     * The result is projected from the SDK's activated, expiry-pruned grant
+     * operations rather than from PortableDelegation transport metadata. Base
+     * session authority is intentionally omitted; callers that need the full
+     * live authority must combine this with {@link getVerifiedSessionCapabilities}.
+     */
+    getEffectiveRuntimePermissionEntries(): PermissionEntry[];
     /**
      * Install a portable runtime permission delegation into this SDK instance so
      * matching service calls and downstream `delegateTo()` calls can use it.
@@ -1650,7 +1782,7 @@ declare class TinyCloudNode {
     revokeDelegation(cid: string): Promise<DelegationResult<DelegationRevocationReceipt>>;
     /** Read node-confirmed lifecycle state for one delegation. */
     getDelegationStatus(cid: string): Promise<DelegationResult<DelegationStatus>>;
-    /** Compute the canonical CID of a compact delegation authorization. */
+    /** Compute the canonical CID of a compact UCAN or DAG-CBOR delegation authorization. */
     computeDelegationCid(authorization: string): string;
     /**
      * List all delegations for the current session's space.
@@ -1744,6 +1876,20 @@ declare class TinyCloudNode {
     private createDelegationViaRuntimeGrant;
     private resolvePermissionSpace;
     private expandPermissionEntries;
+    /**
+     * The current WASM child-delegation APIs accept action-only maps. Refuse any
+     * constrained branch rather than signing a broader action-only child UCAN.
+     */
+    private assertDelegationCaveatsPreservable;
+    /**
+     * Runtime grant selection intentionally allows an uncaveated operation to
+     * select a caveated grant so invocation can restore the signed caveat before
+     * crossing the caveat-aware WASM boundary. Child delegation cannot do that:
+     * it only accepts action maps, so reject the selected constrained branch.
+     */
+    private assertRuntimeGrantCaveatsPreservable;
+    /** Reject caveated parent branches before action-only child signing. */
+    private assertPortableDelegationCaveatsPreservable;
     private shortServiceName;
     private permissionsToAbilities;
     private isEncryptionPermissionEntry;
@@ -1789,6 +1935,8 @@ declare class TinyCloudNode {
     private normalizeSpaceAddress;
     private actionContains;
     private invocationServiceName;
+    /** Prefer the v2 caveat-preserving parser while retaining old custom WASM. */
+    private parseRecapWithCaveats;
     private isEncryptionNetworkOperation;
     private operationFromInvokeAnyEntry;
     private pathContains;
@@ -1981,4 +2129,4 @@ declare class WasmKeyProvider implements KeyProvider {
  */
 declare function createWasmKeyProvider(sessionManager: SessionManagerWithListing): WasmKeyProvider;
 
-export { type AuthDelegationArtifact as A, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, FileSessionStorage as F, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, type RestorableSession as R, type SignStrategy as S, TinyCloudNode as T, WasmKeyProvider as W, type AuthRequestArtifact as a, type DelegateToResult as b, DelegatedAccess as c, type DelegationAuthority as d, NodeUserAuthorization as e, type NodeUserAuthorizationConfig as f, type RuntimePermissionGrantOptions as g, type TinyCloudNodeConfig as h, type WasmKeyProviderConfig as i, createWasmKeyProvider as j, defaultSignStrategy as k, deserializeDelegation as l, grantAuthRequest as m, serializeDelegation as s };
+export { type AuthDelegationArtifact as A, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, FileSessionStorage as F, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, type RestorableSession as R, type SecretPermissionHint as S, TinyCloudNode as T, UnsupportedSessionRestoreError as U, type ValidatedRuntimeDelegation as V, WasmKeyProvider as W, type AuthRequestArtifact as a, type DelegateToResult as b, DelegatedAccess as c, type DelegationAuthority as d, NodeUserAuthorization as e, type NodeUserAuthorizationConfig as f, type RuntimeDelegationActivator as g, type RuntimePermissionGrantOptions as h, type SecretReadInput as i, type SecretReadResult as j, type SignStrategy as k, type TinyCloudNodeConfig as l, type WasmKeyProviderConfig as m, activateValidatedRuntimeDelegation as n, createWasmKeyProvider as o, defaultSignStrategy as p, deserializeDelegation as q, grantAuthRequest as r, serializeDelegation as s };

package/dist/{core-DGFXEW74.d.ts → core-aXks8jFT.d.ts}

@@ -351,6 +351,8 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      *   {@link ensureTinyCloudHosts}.
      */
     setRestoredTinyCloudSession(session: TinyCloudSession, hosts?: string[]): void;
+    /** @internal Atomically adopt the state staged by TinyCloudNode.restoreSession. */
+    installRestoredSession(sessionManager: ISessionManager, session: TinyCloudSession | undefined, hosts?: string[]): void;
     /**
      * Ensure `tinycloudHosts` are resolved before a host-needing call.
      *
@@ -621,6 +623,47 @@ interface DelegationAuthority {
         prompted: boolean;
     }>;
 }
+/**
+ * Authority that the validated runtime-delegation activation helper needs.
+ * `TinyCloudNode` implements this surface directly; keeping it structural
+ * makes the helper usable by a compatible Node wrapper without exposing node
+ * internals.
+ */
+interface RuntimeDelegationActivator {
+    readonly sessionDid: string;
+    readonly did?: string;
+    readonly isSessionOnly?: boolean;
+    computeDelegationCid(authorization: string): string;
+    useRuntimeDelegation(delegation: PortableDelegation): Promise<void>;
+    useDelegation?(delegation: PortableDelegation): Promise<unknown>;
+    getRuntimePermissionDelegations(): PortableDelegation[];
+}
+/** The installed authority returned by {@link activateValidatedRuntimeDelegation}. */
+interface ValidatedRuntimeDelegation {
+    /** CID recomputed from the signed authorization bytes. */
+    readonly cid: string;
+    /** The authority object installed by the node runtime. */
+    readonly delegation: PortableDelegation;
+    /** Capabilities read from the signed compact UCAN attenuation. */
+    readonly effectivePermissions: readonly PermissionEntry[];
+    /** Expiry read from the signed compact UCAN payload. */
+    readonly expiry: Date;
+    /** Audience read from the signed compact UCAN payload. */
+    readonly audience: string;
+    /** Host selected for, and used by, the runtime activation. */
+    readonly host: string;
+}
+/**
+ * CID-bind and activate one compact runtime delegation.
+ *
+ * The helper derives audience, expiry, and effective permissions from the
+ * compact UCAN's signed payload, verifies the transport fields agree, then
+ * invokes {@link TinyCloudNode.useRuntimeDelegation}. The node activation call
+ * remains the authority and delegation-chain validation boundary.
+ */
+declare function activateValidatedRuntimeDelegation(node: RuntimeDelegationActivator, delegation: PortableDelegation, options: {
+    host: string;
+}): Promise<ValidatedRuntimeDelegation>;
 /**
  * Turn a delegation REQUEST into a signed GRANT.
  *
@@ -757,6 +800,47 @@ declare class DelegatedAccess {
  * ```
  */
 
+/** Input for {@link TinyCloudNode.readSecret}. The target space is required. */
+interface SecretReadInput {
+    /** Explicit full space URI or an owned-space name. */
+    space: string;
+    /** Env-style secret name. */
+    name: string;
+    /** Optional logical secret scope. */
+    scope?: string;
+}
+/** Safe, validated capability hint returned when the node denies one read phase. */
+interface SecretPermissionHint {
+    readonly service: "tinycloud.kv" | "tinycloud.encryption";
+    readonly space?: string;
+    readonly path: string;
+    readonly actions: readonly string[];
+}
+/**
+ * Safe classified result for an explicit-space secret read.
+ *
+ * Failure variants contain no raw node response, envelope, plaintext, keys,
+ * tokens, or delegation data.
+ */
+type SecretReadResult = {
+    status: "ok";
+    value: string;
+} | {
+    status: "not_found";
+} | {
+    status: "permission_required";
+    hint: SecretPermissionHint;
+} | {
+    status: "node_unreachable";
+} | {
+    status: "read_failed";
+} | {
+    status: "corrupt_envelope";
+} | {
+    status: "decrypt_failed";
+} | {
+    status: "invalid_payload";
+};
 interface CreateOwnerDelegationParams {
     readonly delegateDid: string;
     readonly spaceId: string;
@@ -777,6 +861,10 @@ interface OwnerDelegationReceipt {
         readonly skipped: readonly string[];
     };
 }
+declare class UnsupportedSessionRestoreError extends Error {
+    readonly code: "RESTORE_SESSION_KEY_REPLACEMENT_UNSUPPORTED";
+    constructor(reason?: string);
+}
 /**
  * Configuration for TinyCloudNode.
  * All fields are optional - TinyCloudNode can work with zero configuration.
@@ -909,6 +997,7 @@ declare class TinyCloudNode {
     private _chainId;
     private wasmBindings;
     private sessionManager;
+    private _serviceGraph;
     private _serviceContext?;
     private _kv?;
     private _sql?;
@@ -916,6 +1005,7 @@ declare class TinyCloudNode {
     private _hooks?;
     private _vault?;
     private _encryption?;
+    private _baseVaults;
     private _baseSecrets;
     private _secrets;
     private _account?;
@@ -1002,6 +1092,7 @@ declare class TinyCloudNode {
      */
     private setupAuth;
     private shouldUseBootstrapSignInRequest;
+    private createServiceGraphLifetime;
     private syncResolvedHostFromAuth;
     /**
      * Install or replace the manifest that drives the SIWE recap at
@@ -1034,6 +1125,15 @@ declare class TinyCloudNode {
      * Use this when you specifically need the session key, not the user identity.
      */
     get sessionDid(): string;
+    /**
+     * Return the current session's signed ReCap capabilities after the session
+     * has been authenticated or restored. This is intentionally distinct from
+     * installed runtime delegations: it reports base-session authority only.
+     *
+     * Invalid or unparseable signed ReCap material throws so callers fail closed
+     * rather than treating a malformed session as unrestricted authority.
+     */
+    getVerifiedSessionCapabilities(): PermissionEntry[];
     /**
      * Get the Ethereum address for this user.
      */
@@ -1224,6 +1324,8 @@ declare class TinyCloudNode {
         };
         delegationCid: string;
         spaceId: string;
+        /** Additional capability spaces persisted with the primary session. */
+        spaces?: Record<string, string>;
         jwk: object;
         verificationMethod: string;
         address?: string;
@@ -1238,11 +1340,16 @@ declare class TinyCloudNode {
          */
         siwe?: string;
         /**
-         * The wallet/OpenKey signature over `siwe`. Optional because the
-         * runtime doesn't re-verify it — it's persisted alongside the SIWE
-         * for callers that need to round-trip the full session shape.
+         * The wallet/OpenKey signature over `siwe`. When any signed-session
+         * metadata is restored, this is required and verified in WASM before
+         * local ReCap or expiry authority is installed.
          */
         signature?: string;
+        /**
+         * Persisted policy expiry. Required when an otherwise valid SIWE omits
+         * `Expiration Time`; restore never invents a new renewable lifetime.
+         */
+        expiresAt?: string;
         /**
          * The TinyCloud hosts this session was created against (from
          * {@link PersistedSessionData.tinycloudHosts}). When present they are
@@ -1254,6 +1361,8 @@ declare class TinyCloudNode {
          */
         tinycloudHosts?: string[];
     }): Promise<void>;
+    private stagePrimarySessionState;
+    private stageRestoredServiceGraph;
     /**
      * Resolve the host a restored session should target.
      *
@@ -1331,9 +1440,16 @@ declare class TinyCloudNode {
     getEncryptionNetworkIdForSpace(spaceId: string, name?: string): string;
     private ownerDidFromSpaceId;
     private requireServiceSession;
+    /**
+     * Runtime-permission helpers can be used from an authenticated Node session
+     * before its public ServiceContext is initialized. They still need the
+     * current signed session, never an optional or stale authority object.
+     */
+    private requireEncryptionSession;
     private createEncryptionCrypto;
     private fetchNodeId;
     private signRawNetworkAuthorization;
+    private fetchEncryptionNetworkAt;
     private createEncryptionService;
     private getEncryptionService;
     private createVaultService;
@@ -1371,7 +1487,7 @@ declare class TinyCloudNode {
      * with expiry longer than the current session.
      * @internal
      */
-    createOwnerDelegation(params: CreateOwnerDelegationParams): Promise<OwnerDelegationReceipt>;
+    createOwnerDelegation(params: CreateOwnerDelegationParams, assertActive?: () => void): Promise<OwnerDelegationReceipt>;
     private createRootDelegationForSharing;
     /**
      * Track a received delegation in the capability registry.
@@ -1440,7 +1556,14 @@ declare class TinyCloudNode {
      * App-facing secrets API backed by the requested space's vault.
      */
     secretsForSpace(spaceId: string): ISecretsService;
+    /**
+     * Read a secret from an explicit target space without requesting or
+     * auto-signing authority. Active runtime delegations are selected by the
+     * normal KV and encryption invocation paths.
+     */
+    readSecret(input: SecretReadInput): Promise<SecretReadResult>;
     private getBaseSecrets;
+    private getBaseVault;
     /**
      * Hooks write stream subscription API.
      */
@@ -1498,6 +1621,15 @@ declare class TinyCloudNode {
      * returned. Base-session manifest permissions are not represented here.
      */
     getRuntimePermissionDelegations(permissions?: PermissionEntry[]): PortableDelegation[];
+    /**
+     * Return the effective capabilities of installed runtime grants.
+     *
+     * The result is projected from the SDK's activated, expiry-pruned grant
+     * operations rather than from PortableDelegation transport metadata. Base
+     * session authority is intentionally omitted; callers that need the full
+     * live authority must combine this with {@link getVerifiedSessionCapabilities}.
+     */
+    getEffectiveRuntimePermissionEntries(): PermissionEntry[];
     /**
      * Install a portable runtime permission delegation into this SDK instance so
      * matching service calls and downstream `delegateTo()` calls can use it.
@@ -1650,7 +1782,7 @@ declare class TinyCloudNode {
     revokeDelegation(cid: string): Promise<DelegationResult<DelegationRevocationReceipt>>;
     /** Read node-confirmed lifecycle state for one delegation. */
     getDelegationStatus(cid: string): Promise<DelegationResult<DelegationStatus>>;
-    /** Compute the canonical CID of a compact delegation authorization. */
+    /** Compute the canonical CID of a compact UCAN or DAG-CBOR delegation authorization. */
     computeDelegationCid(authorization: string): string;
     /**
      * List all delegations for the current session's space.
@@ -1744,6 +1876,20 @@ declare class TinyCloudNode {
     private createDelegationViaRuntimeGrant;
     private resolvePermissionSpace;
     private expandPermissionEntries;
+    /**
+     * The current WASM child-delegation APIs accept action-only maps. Refuse any
+     * constrained branch rather than signing a broader action-only child UCAN.
+     */
+    private assertDelegationCaveatsPreservable;
+    /**
+     * Runtime grant selection intentionally allows an uncaveated operation to
+     * select a caveated grant so invocation can restore the signed caveat before
+     * crossing the caveat-aware WASM boundary. Child delegation cannot do that:
+     * it only accepts action maps, so reject the selected constrained branch.
+     */
+    private assertRuntimeGrantCaveatsPreservable;
+    /** Reject caveated parent branches before action-only child signing. */
+    private assertPortableDelegationCaveatsPreservable;
     private shortServiceName;
     private permissionsToAbilities;
     private isEncryptionPermissionEntry;
@@ -1789,6 +1935,8 @@ declare class TinyCloudNode {
     private normalizeSpaceAddress;
     private actionContains;
     private invocationServiceName;
+    /** Prefer the v2 caveat-preserving parser while retaining old custom WASM. */
+    private parseRecapWithCaveats;
     private isEncryptionNetworkOperation;
     private operationFromInvokeAnyEntry;
     private pathContains;
@@ -1981,4 +2129,4 @@ declare class WasmKeyProvider implements KeyProvider {
  */
 declare function createWasmKeyProvider(sessionManager: SessionManagerWithListing): WasmKeyProvider;
 
-export { type AuthDelegationArtifact as A, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, FileSessionStorage as F, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, type RestorableSession as R, type SignStrategy as S, TinyCloudNode as T, WasmKeyProvider as W, type AuthRequestArtifact as a, type DelegateToResult as b, DelegatedAccess as c, type DelegationAuthority as d, NodeUserAuthorization as e, type NodeUserAuthorizationConfig as f, type RuntimePermissionGrantOptions as g, type TinyCloudNodeConfig as h, type WasmKeyProviderConfig as i, createWasmKeyProvider as j, defaultSignStrategy as k, deserializeDelegation as l, grantAuthRequest as m, serializeDelegation as s };
+export { type AuthDelegationArtifact as A, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, FileSessionStorage as F, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, type RestorableSession as R, type SecretPermissionHint as S, TinyCloudNode as T, UnsupportedSessionRestoreError as U, type ValidatedRuntimeDelegation as V, WasmKeyProvider as W, type AuthRequestArtifact as a, type DelegateToResult as b, DelegatedAccess as c, type DelegationAuthority as d, NodeUserAuthorization as e, type NodeUserAuthorizationConfig as f, type RuntimeDelegationActivator as g, type RuntimePermissionGrantOptions as h, type SecretReadInput as i, type SecretReadResult as j, type SignStrategy as k, type TinyCloudNodeConfig as l, type WasmKeyProviderConfig as m, activateValidatedRuntimeDelegation as n, createWasmKeyProvider as o, defaultSignStrategy as p, deserializeDelegation as q, grantAuthRequest as r, serializeDelegation as s };