@tinycloud/node-sdk 3.1.0-beta.7 → 3.1.0-beta.9

package/dist/{core-BWvBTn9l.d.cts → core-CC7uDKZP.d.cts}

@@ -758,6 +758,17 @@ interface PortableDelegation extends Omit<Delegation, "isRevoked"> {
      * fields are authoritative (legacy single-resource shape).
      */
     resources?: DelegatedResource[];
+    /**
+     * The wallet-signed SIWE message and EIP-191 signature behind a
+     * `delegationHeader` that is a CACAO session grant (OpenKey `/delegate`,
+     * {@link TinyCloudNode.grantRuntimePermissions}) rather than a compact UCAN.
+     * Not authority: activation rebuilds the CACAO from them and accepts only
+     * byte-identical authorization bytes.
+     */
+    siweProof?: {
+        siwe: string;
+        signature: string;
+    };
 }
 /**
  * The transport shape `tc auth request --emit` produces and that an owner
@@ -819,6 +830,11 @@ interface RuntimeDelegationActivator {
     useRuntimeDelegation(delegation: PortableDelegation): Promise<void>;
     useDelegation?(delegation: PortableDelegation): Promise<unknown>;
     getRuntimePermissionDelegations(): PortableDelegation[];
+    /**
+     * Verify a wallet-signed session grant issued to this runtime's live session
+     * key. Required to activate a CACAO grant; compact UCANs do not use it.
+     */
+    verifySessionGrant?(grant: SessionGrantProof): VerifiedSessionGrant;
 }
 /** The installed authority returned by {@link activateValidatedRuntimeDelegation}. */
 interface ValidatedRuntimeDelegation {
@@ -842,13 +858,51 @@ interface CompactRuntimeDelegationInput {
     readonly ownerAddress: string;
     readonly chainId: number;
 }
+/** A CACAO session grant and the signed SIWE proof it was built from. */
+interface SessionGrantProof {
+    readonly delegationHeader: {
+        Authorization: string;
+    };
+    readonly delegationCid: string;
+    readonly spaceId: string;
+    readonly address: string;
+    readonly chainId: number;
+    readonly siwe: string;
+    readonly signature: string;
+}
+/** Authority read from a verified session grant's signed ReCap. */
+interface VerifiedSessionGrant {
+    readonly recap: readonly {
+        service: string;
+        space: string;
+        path: string;
+        actions: string[];
+        caveats?: Record<string, unknown>[];
+    }[];
+    readonly expiresAt: Date;
+}
 /**
- * CID-bind and activate one compact runtime delegation.
+ * Stable reasons {@link activateValidatedRuntimeDelegation} refuses a
+ * delegation for. The error message is for the caller and may quote
+ * transport fields or a node's response; the reason is safe to publish.
+ */
+declare const RUNTIME_DELEGATION_REJECTIONS: readonly ["host_mismatch", "expired", "cid_mismatch", "authority_invalid", "proof_missing", "proof_invalid", "owner_mismatch", "audience_mismatch", "resources_mismatch", "unsupported", "activation_rejected"];
+type RuntimeDelegationRejection = typeof RUNTIME_DELEGATION_REJECTIONS[number];
+declare class RuntimeDelegationRejectedError extends Error {
+    readonly reason: RuntimeDelegationRejection;
+    constructor(reason: RuntimeDelegationRejection, message: string);
+}
+/**
+ * CID-bind and activate one runtime delegation.
  *
- * The helper derives audience, expiry, and effective permissions from the
- * compact UCAN's signed payload, verifies the transport fields agree, then
- * invokes {@link TinyCloudNode.useRuntimeDelegation}. The node activation call
- * remains the authority and delegation-chain validation boundary.
+ * A compact UCAN's audience, expiry and permissions come from its signed
+ * payload, and its transport fields must agree with them. A CACAO session
+ * grant (OpenKey `/delegate`, `grantRuntimePermissions`) is verified from its
+ * `siweProof` against this runtime's live session key; its installed
+ * authority is exactly the verified ReCap, and its transport `resources` are
+ * display data that is never consulted. Either way the helper then invokes
+ * {@link TinyCloudNode.useRuntimeDelegation}; the node activation call remains
+ * the authority and delegation-chain validation boundary.
  *
  * `options.authorize`, when given, sees the signed capabilities before
  * anything is activated or installed; returning `false` refuses the
@@ -1971,6 +2025,18 @@ declare class TinyCloudNode {
      * live authority must combine this with {@link getVerifiedSessionCapabilities}.
      */
     getEffectiveRuntimePermissionEntries(): PermissionEntry[];
+    /**
+     * Verify a wallet-signed session grant (a CACAO built from a SIWE and its
+     * EIP-191 signature) issued to this instance's live session key. The
+     * verifier rebuilds the CACAO from `siwe` and `signature`, so the grant is
+     * accepted only when its authorization bytes and CID are exactly that CACAO,
+     * its signer is `address`, its audience is this session key, it is valid
+     * now, and its ReCap covers `spaceId` or names only raw encryption networks
+     * (a decrypt-only grant has no space). Returns the signed ReCap and expiry.
+     * Bindings without `validateSessionGrant` fall back to the session verifier,
+     * which also refuses decrypt-only grants.
+     */
+    verifySessionGrant(grant: SessionGrantProof): VerifiedSessionGrant;
     /**
      * Install a portable runtime permission delegation into this SDK instance so
      * matching service calls and downstream `delegateTo()` calls can use it.
@@ -2479,4 +2545,4 @@ declare class WasmKeyProvider implements KeyProvider {
  */
 declare function createWasmKeyProvider(sessionManager: SessionManagerWithListing): WasmKeyProvider;
 
-export { ACCEPTED_MARKER_VERSIONS as A, BOOTSTRAP_COMPLETION_MARKER_KEY as B, type CompactRuntimeDelegationInput as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, FileSessionStorage as F, serializeDelegation as G, InvalidRestoredSessionError as I, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, type RestorableSession as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type ValidatedRuntimeDelegation as V, WasmKeyProvider as W, type AuthDelegationArtifact as a, type AuthRequestArtifact as b, BOOTSTRAP_COMPLETION_MARKER_VERSION as c, type BootstrapCompletionMarker as d, type BootstrapWarning as e, type CreateOwnerDelegationParams as f, type DelegateToResult as g, DelegatedAccess as h, type DelegationAuthority as i, NodeUserAuthorization as j, type NodeUserAuthorizationConfig as k, type RuntimeDelegationActivator as l, type RuntimePermissionGrantOptions as m, type SecretReadInput as n, type SecretReadResult as o, type SignStrategy as p, type TinyCloudNodeConfig as q, type UnifiedOwnerRootReceipt as r, UnsupportedSessionRestoreError as s, type WasmKeyProviderConfig as t, activateCompactRuntimeDelegation as u, activateValidatedRuntimeDelegation as v, createWasmKeyProvider as w, defaultSignStrategy as x, deserializeDelegation as y, grantAuthRequest as z };
+export { ACCEPTED_MARKER_VERSIONS as A, BOOTSTRAP_COMPLETION_MARKER_KEY as B, type CompactRuntimeDelegationInput as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, FileSessionStorage as F, activateValidatedRuntimeDelegation as G, createWasmKeyProvider as H, InvalidRestoredSessionError as I, defaultSignStrategy as J, deserializeDelegation as K, grantAuthRequest as L, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, serializeDelegation as Q, RUNTIME_DELEGATION_REJECTIONS as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type ValidatedRuntimeDelegation as V, WasmKeyProvider as W, type AuthDelegationArtifact as a, type AuthRequestArtifact as b, BOOTSTRAP_COMPLETION_MARKER_VERSION as c, type BootstrapCompletionMarker as d, type BootstrapWarning as e, type CreateOwnerDelegationParams as f, type DelegateToResult as g, DelegatedAccess as h, type DelegationAuthority as i, NodeUserAuthorization as j, type NodeUserAuthorizationConfig as k, type RestorableSession as l, type RuntimeDelegationActivator as m, RuntimeDelegationRejectedError as n, type RuntimeDelegationRejection as o, type RuntimePermissionGrantOptions as p, type SecretReadInput as q, type SecretReadResult as r, type SessionGrantProof as s, type SignStrategy as t, type TinyCloudNodeConfig as u, type UnifiedOwnerRootReceipt as v, UnsupportedSessionRestoreError as w, type VerifiedSessionGrant as x, type WasmKeyProviderConfig as y, activateCompactRuntimeDelegation as z };

package/dist/{core-BWvBTn9l.d.ts → core-CC7uDKZP.d.ts}

@@ -758,6 +758,17 @@ interface PortableDelegation extends Omit<Delegation, "isRevoked"> {
      * fields are authoritative (legacy single-resource shape).
      */
     resources?: DelegatedResource[];
+    /**
+     * The wallet-signed SIWE message and EIP-191 signature behind a
+     * `delegationHeader` that is a CACAO session grant (OpenKey `/delegate`,
+     * {@link TinyCloudNode.grantRuntimePermissions}) rather than a compact UCAN.
+     * Not authority: activation rebuilds the CACAO from them and accepts only
+     * byte-identical authorization bytes.
+     */
+    siweProof?: {
+        siwe: string;
+        signature: string;
+    };
 }
 /**
  * The transport shape `tc auth request --emit` produces and that an owner
@@ -819,6 +830,11 @@ interface RuntimeDelegationActivator {
     useRuntimeDelegation(delegation: PortableDelegation): Promise<void>;
     useDelegation?(delegation: PortableDelegation): Promise<unknown>;
     getRuntimePermissionDelegations(): PortableDelegation[];
+    /**
+     * Verify a wallet-signed session grant issued to this runtime's live session
+     * key. Required to activate a CACAO grant; compact UCANs do not use it.
+     */
+    verifySessionGrant?(grant: SessionGrantProof): VerifiedSessionGrant;
 }
 /** The installed authority returned by {@link activateValidatedRuntimeDelegation}. */
 interface ValidatedRuntimeDelegation {
@@ -842,13 +858,51 @@ interface CompactRuntimeDelegationInput {
     readonly ownerAddress: string;
     readonly chainId: number;
 }
+/** A CACAO session grant and the signed SIWE proof it was built from. */
+interface SessionGrantProof {
+    readonly delegationHeader: {
+        Authorization: string;
+    };
+    readonly delegationCid: string;
+    readonly spaceId: string;
+    readonly address: string;
+    readonly chainId: number;
+    readonly siwe: string;
+    readonly signature: string;
+}
+/** Authority read from a verified session grant's signed ReCap. */
+interface VerifiedSessionGrant {
+    readonly recap: readonly {
+        service: string;
+        space: string;
+        path: string;
+        actions: string[];
+        caveats?: Record<string, unknown>[];
+    }[];
+    readonly expiresAt: Date;
+}
 /**
- * CID-bind and activate one compact runtime delegation.
+ * Stable reasons {@link activateValidatedRuntimeDelegation} refuses a
+ * delegation for. The error message is for the caller and may quote
+ * transport fields or a node's response; the reason is safe to publish.
+ */
+declare const RUNTIME_DELEGATION_REJECTIONS: readonly ["host_mismatch", "expired", "cid_mismatch", "authority_invalid", "proof_missing", "proof_invalid", "owner_mismatch", "audience_mismatch", "resources_mismatch", "unsupported", "activation_rejected"];
+type RuntimeDelegationRejection = typeof RUNTIME_DELEGATION_REJECTIONS[number];
+declare class RuntimeDelegationRejectedError extends Error {
+    readonly reason: RuntimeDelegationRejection;
+    constructor(reason: RuntimeDelegationRejection, message: string);
+}
+/**
+ * CID-bind and activate one runtime delegation.
  *
- * The helper derives audience, expiry, and effective permissions from the
- * compact UCAN's signed payload, verifies the transport fields agree, then
- * invokes {@link TinyCloudNode.useRuntimeDelegation}. The node activation call
- * remains the authority and delegation-chain validation boundary.
+ * A compact UCAN's audience, expiry and permissions come from its signed
+ * payload, and its transport fields must agree with them. A CACAO session
+ * grant (OpenKey `/delegate`, `grantRuntimePermissions`) is verified from its
+ * `siweProof` against this runtime's live session key; its installed
+ * authority is exactly the verified ReCap, and its transport `resources` are
+ * display data that is never consulted. Either way the helper then invokes
+ * {@link TinyCloudNode.useRuntimeDelegation}; the node activation call remains
+ * the authority and delegation-chain validation boundary.
  *
  * `options.authorize`, when given, sees the signed capabilities before
  * anything is activated or installed; returning `false` refuses the
@@ -1971,6 +2025,18 @@ declare class TinyCloudNode {
      * live authority must combine this with {@link getVerifiedSessionCapabilities}.
      */
     getEffectiveRuntimePermissionEntries(): PermissionEntry[];
+    /**
+     * Verify a wallet-signed session grant (a CACAO built from a SIWE and its
+     * EIP-191 signature) issued to this instance's live session key. The
+     * verifier rebuilds the CACAO from `siwe` and `signature`, so the grant is
+     * accepted only when its authorization bytes and CID are exactly that CACAO,
+     * its signer is `address`, its audience is this session key, it is valid
+     * now, and its ReCap covers `spaceId` or names only raw encryption networks
+     * (a decrypt-only grant has no space). Returns the signed ReCap and expiry.
+     * Bindings without `validateSessionGrant` fall back to the session verifier,
+     * which also refuses decrypt-only grants.
+     */
+    verifySessionGrant(grant: SessionGrantProof): VerifiedSessionGrant;
     /**
      * Install a portable runtime permission delegation into this SDK instance so
      * matching service calls and downstream `delegateTo()` calls can use it.
@@ -2479,4 +2545,4 @@ declare class WasmKeyProvider implements KeyProvider {
  */
 declare function createWasmKeyProvider(sessionManager: SessionManagerWithListing): WasmKeyProvider;
 
-export { ACCEPTED_MARKER_VERSIONS as A, BOOTSTRAP_COMPLETION_MARKER_KEY as B, type CompactRuntimeDelegationInput as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, FileSessionStorage as F, serializeDelegation as G, InvalidRestoredSessionError as I, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, type RestorableSession as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type ValidatedRuntimeDelegation as V, WasmKeyProvider as W, type AuthDelegationArtifact as a, type AuthRequestArtifact as b, BOOTSTRAP_COMPLETION_MARKER_VERSION as c, type BootstrapCompletionMarker as d, type BootstrapWarning as e, type CreateOwnerDelegationParams as f, type DelegateToResult as g, DelegatedAccess as h, type DelegationAuthority as i, NodeUserAuthorization as j, type NodeUserAuthorizationConfig as k, type RuntimeDelegationActivator as l, type RuntimePermissionGrantOptions as m, type SecretReadInput as n, type SecretReadResult as o, type SignStrategy as p, type TinyCloudNodeConfig as q, type UnifiedOwnerRootReceipt as r, UnsupportedSessionRestoreError as s, type WasmKeyProviderConfig as t, activateCompactRuntimeDelegation as u, activateValidatedRuntimeDelegation as v, createWasmKeyProvider as w, defaultSignStrategy as x, deserializeDelegation as y, grantAuthRequest as z };
+export { ACCEPTED_MARKER_VERSIONS as A, BOOTSTRAP_COMPLETION_MARKER_KEY as B, type CompactRuntimeDelegationInput as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, FileSessionStorage as F, activateValidatedRuntimeDelegation as G, createWasmKeyProvider as H, InvalidRestoredSessionError as I, defaultSignStrategy as J, deserializeDelegation as K, grantAuthRequest as L, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, serializeDelegation as Q, RUNTIME_DELEGATION_REJECTIONS as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type ValidatedRuntimeDelegation as V, WasmKeyProvider as W, type AuthDelegationArtifact as a, type AuthRequestArtifact as b, BOOTSTRAP_COMPLETION_MARKER_VERSION as c, type BootstrapCompletionMarker as d, type BootstrapWarning as e, type CreateOwnerDelegationParams as f, type DelegateToResult as g, DelegatedAccess as h, type DelegationAuthority as i, NodeUserAuthorization as j, type NodeUserAuthorizationConfig as k, type RestorableSession as l, type RuntimeDelegationActivator as m, RuntimeDelegationRejectedError as n, type RuntimeDelegationRejection as o, type RuntimePermissionGrantOptions as p, type SecretReadInput as q, type SecretReadResult as r, type SessionGrantProof as s, type SignStrategy as t, type TinyCloudNodeConfig as u, type UnifiedOwnerRootReceipt as v, UnsupportedSessionRestoreError as w, type VerifiedSessionGrant as x, type WasmKeyProviderConfig as y, activateCompactRuntimeDelegation as z };

package/dist/core.cjs

@@ -1732,14 +1732,14 @@ var NodeUserAuthorization = class {
    * Request signature via event emitter with timeout.
    */
   requestSignatureViaEmitter(request, emitter, timeout) {
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve, reject2) => {
       const timeoutId = setTimeout(() => {
-        reject(new Error("Sign request timed out"));
+        reject2(new Error("Sign request timed out"));
       }, timeout);
       const respond = async (response) => {
         clearTimeout(timeoutId);
         if (!response.approved) {
-          reject(
+          reject2(
             new Error(response.reason ?? "Sign request rejected via emitter")
           );
         } else {
@@ -2322,6 +2322,25 @@ function jsonFromVerifier(value) {
 function verifierRecapEntries(entries) {
   return entries.map((entry) => Array.isArray(entry.caveats) ? { ...entry, caveats: entry.caveats.map((caveat) => jsonFromVerifier(caveat)) } : entry);
 }
+function exactVerifiedRecap(verified) {
+  const exactRecap = Array.isArray(verified.verifiedRecap) ? verifierRecapEntries(verified.verifiedRecap) : verified.verifiedRecap;
+  if (!Array.isArray(exactRecap) || !exactRecap.every(
+    (entry) => entry !== null && typeof entry === "object" && typeof entry.service === "string" && typeof entry.space === "string" && typeof entry.path === "string" && Array.isArray(entry.actions) && entry.actions.every((action) => typeof action === "string") && Array.isArray(entry.caveats) && entry.caveats.every(
+      (caveat) => caveat !== null && typeof caveat === "object" && !Array.isArray(caveat)
+    )
+  )) {
+    throw new UnsupportedSessionRestoreError(
+      "it cannot reconstruct caveat-preserving persisted ReCap authority"
+    );
+  }
+  return exactRecap.map((entry) => ({
+    service: entry.service,
+    space: entry.space,
+    path: entry.path,
+    actions: [...entry.actions],
+    caveats: cloneRecapCaveats(entry.caveats)
+  }));
+}
 var ServiceGraphLifetime = class {
   constructor(invokeFn, invokeAnyFn, fetchFn) {
     this.invokeFn = invokeFn;
@@ -3986,23 +4005,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           throw new InvalidRestoredSessionError(error instanceof Error ? error.message : String(error));
         }
       })();
-      const exactRecap = Array.isArray(verified.verifiedRecap) ? verifierRecapEntries(verified.verifiedRecap) : verified.verifiedRecap;
-      if (!Array.isArray(exactRecap) || !exactRecap.every(
-        (entry) => entry !== null && typeof entry === "object" && typeof entry.service === "string" && typeof entry.space === "string" && typeof entry.path === "string" && Array.isArray(entry.actions) && entry.actions.every((action) => typeof action === "string") && Array.isArray(entry.caveats) && entry.caveats.every(
-          (caveat) => caveat !== null && typeof caveat === "object" && !Array.isArray(caveat)
-        )
-      )) {
-        throw new UnsupportedSessionRestoreError(
-          "it cannot reconstruct caveat-preserving persisted ReCap authority"
-        );
-      }
-      stagedRecap = exactRecap.map((entry) => ({
-        service: entry.service,
-        space: entry.space,
-        path: entry.path,
-        actions: [...entry.actions],
-        caveats: cloneRecapCaveats(entry.caveats)
-      }));
+      stagedRecap = exactVerifiedRecap(verified);
       const signedExpiry = verified.expiresAt === void 0 ? void 0 : persistedExpiry(verified.expiresAt);
       const persistedPolicyExpiry = sessionData.expiresAt === void 0 ? void 0 : persistedExpiry(sessionData.expiresAt);
       if (signedExpiry && persistedPolicyExpiry && !sameInstant(signedExpiry, persistedPolicyExpiry)) {
@@ -5863,6 +5866,42 @@ var _TinyCloudNode = class _TinyCloudNode {
       (left, right) => left.service.localeCompare(right.service) || (left.space ?? "").localeCompare(right.space ?? "") || left.path.localeCompare(right.path) || left.actions.join("\0").localeCompare(right.actions.join("\0"))
     );
   }
+  /**
+   * Verify a wallet-signed session grant (a CACAO built from a SIWE and its
+   * EIP-191 signature) issued to this instance's live session key. The
+   * verifier rebuilds the CACAO from `siwe` and `signature`, so the grant is
+   * accepted only when its authorization bytes and CID are exactly that CACAO,
+   * its signer is `address`, its audience is this session key, it is valid
+   * now, and its ReCap covers `spaceId` or names only raw encryption networks
+   * (a decrypt-only grant has no space). Returns the signed ReCap and expiry.
+   * Bindings without `validateSessionGrant` fall back to the session verifier,
+   * which also refuses decrypt-only grants.
+   */
+  verifySessionGrant(grant) {
+    const bindings = this.wasmBindings;
+    const validate = typeof bindings.validateSessionGrant === "function" ? bindings.validateSessionGrant.bind(bindings) : bindings.validatePersistedSession?.bind(bindings);
+    if (validate === void 0) {
+      throw new UnsupportedSessionRestoreError("it cannot verify persisted SIWE authority");
+    }
+    const verified = validate({
+      delegationHeader: { Authorization: grant.delegationHeader.Authorization },
+      delegationCid: grant.delegationCid,
+      spaceId: grant.spaceId,
+      jwk: this.sessionKeyJwk,
+      address: (0, import_sdk_core8.canonicalizeAddress)(grant.address),
+      chainId: grant.chainId,
+      siwe: grant.siwe,
+      signature: grant.signature
+    });
+    if (typeof verified.expiresAt !== "string") {
+      throw new Error("Session grant has no signed expiry.");
+    }
+    const expiresAt = new Date(verified.expiresAt);
+    if (!Number.isFinite(expiresAt.getTime())) {
+      throw new Error("Session grant has an invalid signed expiry.");
+    }
+    return { recap: exactVerifiedRecap(verified), expiresAt };
+  }
   /**
    * Install a portable runtime permission delegation into this SDK instance so
    * matching service calls and downstream `delegateTo()` calls can use it.
@@ -5995,7 +6034,8 @@ var _TinyCloudNode = class _TinyCloudNode {
         delegatedEntries,
         spaceId,
         session,
-        expiresAt
+        expiresAt,
+        { siwe: prepared.siwe, signature }
       );
       this.runtimePermissionGrants.push({
         session: {
@@ -6781,7 +6821,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     }
     return grants;
   }
-  runtimeDelegationFromSession(delegatedSession, entries, spaceId, session, expiresAt) {
+  runtimeDelegationFromSession(delegatedSession, entries, spaceId, session, expiresAt, siweProof) {
     const resources = this.delegatedResourcesForEntries(entries, spaceId);
     const primary = resources[0];
     return {
@@ -6796,7 +6836,8 @@ var _TinyCloudNode = class _TinyCloudNode {
       delegateDID: session.verificationMethod,
       ownerAddress: session.address,
       chainId: session.chainId,
-      host: this.config.host
+      host: this.config.host,
+      siweProof
     };
   }
   runtimeGrantFromDelegation(delegation, session) {
@@ -6989,6 +7030,9 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (grantedAction === requestedAction) {
       return true;
     }
+    if ((0, import_sdk_core8.isExplicitOnlyAction)(requestedAction)) {
+      return false;
+    }
     if (grantedAction.endsWith("/*")) {
       const prefix = grantedAction.slice(0, -2);
       return requestedAction.startsWith(`${prefix}/`);
@@ -7492,6 +7536,16 @@ var import_sdk_core12 = require("@tinycloud/sdk-core");
 
 // src/delegation.ts
 var import_sdk_core9 = require("@tinycloud/sdk-core");
+var RuntimeDelegationRejectedError = class extends Error {
+  constructor(reason, message) {
+    super(message);
+    this.name = "RuntimeDelegationRejectedError";
+    this.reason = reason;
+  }
+};
+function reject(reason, message) {
+  throw new RuntimeDelegationRejectedError(reason, message);
+}
 var SERVICE_BY_SHORT_NAME = {
   kv: "tinycloud.kv",
   sql: "tinycloud.sql",
@@ -7638,6 +7692,15 @@ function signedAuthorityFromCompactUcan(authorization) {
       abilities
     ));
   }
+  return canonicalSignedAuthority({
+    issuer: payload.iss,
+    audience: payload.aud,
+    expiry,
+    proofs: [...payload.prf],
+    ...remainingRedelegationDepth === void 0 ? {} : { remainingRedelegationDepth }
+  }, permissions);
+}
+function canonicalSignedAuthority(signed, permissions) {
   if (permissions.length === 0) {
     throw new Error("Validated runtime delegation has no signed capabilities.");
   }
@@ -7649,15 +7712,84 @@ function signedAuthorityFromCompactUcan(authorization) {
     actions: [...permission.actions],
     ...permission.caveats === void 0 ? {} : { caveats: permission.caveats }
   }));
-  return {
-    issuer: payload.iss,
-    audience: payload.aud,
-    expiry,
-    proofs: [...payload.prf],
-    ...remainingRedelegationDepth === void 0 ? {} : { remainingRedelegationDepth },
-    permissions: canonicalPermissions,
-    resources: canonicalResources
-  };
+  return { ...signed, permissions: canonicalPermissions, resources: canonicalResources };
+}
+var RAW_ENCRYPTION_PREFIX = "urn:tinycloud:encryption:";
+var PKH_SPACE = /^tinycloud:pkh:eip155:(\d+):(0x[0-9a-fA-F]{40}):(.+)$/;
+function comparableSpace(space) {
+  const match = PKH_SPACE.exec(space);
+  return match ? `tinycloud:pkh:eip155:${match[1]}:${match[2].toLowerCase()}:${match[3]}` : space;
+}
+function signedAuthorityFromSessionGrant(node, delegation, authorization, cid) {
+  const proof = delegation.siweProof;
+  if (proof === void 0 || proof === null || typeof proof !== "object" || typeof proof.siwe !== "string" || typeof proof.signature !== "string") {
+    reject(
+      "proof_missing",
+      "Runtime delegation is a wallet-signed session grant stored without its signed SIWE proof, so its authority cannot be verified."
+    );
+  }
+  if (typeof node.verifySessionGrant !== "function") {
+    reject("unsupported", "This runtime cannot verify wallet-signed session grants.");
+  }
+  const owner = `did:pkh:eip155:${delegation.chainId}:${delegation.ownerAddress}`;
+  if (typeof node.did !== "string" || !didPrincipalsMatch(owner, node.did)) {
+    reject("owner_mismatch", "Runtime delegation is not signed by this session's owner.");
+  }
+  let verified;
+  try {
+    verified = node.verifySessionGrant({
+      delegationHeader: { Authorization: authorization },
+      delegationCid: cid,
+      spaceId: delegation.spaceId,
+      address: delegation.ownerAddress,
+      chainId: delegation.chainId,
+      siwe: proof.siwe,
+      signature: proof.signature
+    });
+  } catch (error) {
+    reject("proof_invalid", error instanceof Error ? error.message : String(error));
+  }
+  const space = comparableSpace(delegation.spaceId);
+  const spaceOwner = PKH_SPACE.exec(delegation.spaceId);
+  if (!spaceOwner || !didPrincipalsMatch(`did:pkh:eip155:${spaceOwner[1]}:${spaceOwner[2]}`, owner)) {
+    reject("authority_invalid", "Runtime delegation space is not owned by its signer.");
+  }
+  const groups = /* @__PURE__ */ new Map();
+  for (const entry of verified.recap) {
+    const service = entry.service.startsWith("tinycloud.") ? entry.service : `tinycloud.${entry.service}`;
+    const raw = entry.space === "encryption";
+    if (raw) {
+      if (service !== "tinycloud.encryption" || !entry.path.startsWith(RAW_ENCRYPTION_PREFIX)) {
+        reject("authority_invalid", "Runtime delegation has an unsupported signed raw resource.");
+      }
+      const networkOwner = entry.path.slice(RAW_ENCRYPTION_PREFIX.length, entry.path.lastIndexOf(":"));
+      if (!didPrincipalsMatch(networkOwner, owner)) {
+        reject("authority_invalid", "Runtime delegation names an encryption network its signer does not own.");
+      }
+    } else if (service === "tinycloud.encryption" || comparableSpace(entry.space) !== space) {
+      reject("authority_invalid", "Runtime delegation has signed authority outside its space.");
+    }
+    const caveats = signedCaveats(entry.caveats ?? []);
+    const key = JSON.stringify([service, raw ? "" : entry.space, entry.path, (0, import_sdk_core9.canonicalizeRecapCaveats)(caveats)]);
+    const group = groups.get(key) ?? {
+      service,
+      ...raw ? {} : { space: entry.space },
+      path: entry.path,
+      actions: [],
+      ...caveats === void 0 ? {} : { caveats }
+    };
+    for (const action of entry.actions) {
+      if (!group.actions.includes(action)) group.actions.push(action);
+    }
+    groups.set(key, group);
+  }
+  return canonicalSignedAuthority({
+    issuer: owner,
+    // The verifier bound the SIWE audience to this runtime's own session key.
+    audience: node.sessionDid,
+    expiry: verified.expiresAt,
+    proofs: []
+  }, [...groups.values()]);
 }
 function canonicalResourcesFromPortableDelegation(delegation) {
   if (delegation.resources !== void 0 && delegation.resources.length > 0) {
@@ -7693,49 +7825,58 @@ function resourcesMatch(actual, expected) {
 async function activateValidatedRuntimeDelegation(node, delegation, options) {
   const host = normalizedHost(options.host);
   if (delegation.host !== void 0 && normalizedHost(delegation.host) !== host) {
-    throw new Error(
+    reject(
+      "host_mismatch",
       `Runtime delegation host '${delegation.host}' does not match expected host '${options.host}'.`
     );
   }
   if (!(delegation.expiry instanceof Date) || Number.isNaN(delegation.expiry.getTime())) {
-    throw new Error("Runtime delegation has an invalid expiry.");
+    reject("authority_invalid", "Runtime delegation has an invalid expiry.");
   }
   if (delegation.expiry.getTime() <= Date.now()) {
-    throw new Error("Runtime delegation is expired.");
+    reject("expired", "Runtime delegation is expired.");
   }
   const authorization = delegation.delegationHeader?.Authorization;
   if (typeof authorization !== "string" || authorization.length === 0) {
-    throw new Error("Runtime delegation is missing authorization bytes.");
+    reject("authority_invalid", "Runtime delegation is missing authorization bytes.");
   }
   const cid = node.computeDelegationCid(authorization);
   if (cid !== delegation.cid) {
-    throw new Error("Runtime delegation CID does not match authorization bytes.");
+    reject("cid_mismatch", "Runtime delegation CID does not match authorization bytes.");
+  }
+  const compact = authorizationWithoutBearer(authorization).split(".").length === 3;
+  let signed;
+  try {
+    signed = compact ? signedAuthorityFromCompactUcan(authorization) : signedAuthorityFromSessionGrant(node, delegation, authorization, cid);
+  } catch (error) {
+    if (error instanceof RuntimeDelegationRejectedError) throw error;
+    reject("authority_invalid", error instanceof Error ? error.message : String(error));
   }
-  const signed = signedAuthorityFromCompactUcan(authorization);
   if (signed.expiry.getTime() <= Date.now()) {
-    throw new Error("Runtime delegation is expired.");
+    reject("expired", "Runtime delegation is expired.");
   }
   if (delegation.expiry.getTime() !== signed.expiry.getTime()) {
-    throw new Error("Runtime delegation expiry does not match signed authority.");
+    reject("authority_invalid", "Runtime delegation expiry does not match signed authority.");
   }
   if (!didPrincipalsMatch(signed.audience, node.sessionDid)) {
-    throw new Error(
+    reject(
+      "audience_mismatch",
       `Runtime delegation targets ${signed.audience} but this session is ${node.sessionDid}.`
     );
   }
   if (!didPrincipalsMatch(delegation.delegateDID, signed.audience)) {
-    throw new Error("Runtime delegation audience does not match signed authority.");
+    reject("audience_mismatch", "Runtime delegation audience does not match signed authority.");
   }
-  const declaredResources = canonicalResourcesFromPortableDelegation(delegation);
-  if (!resourcesMatch(declaredResources, signed.resources)) {
-    throw new Error("Runtime delegation resources do not match signed authority.");
+  if (compact && !resourcesMatch(canonicalResourcesFromPortableDelegation(delegation), signed.resources)) {
+    reject("resources_mismatch", "Runtime delegation resources do not match signed authority.");
   }
   if (options.authorize !== void 0 && !options.authorize(signed.permissions)) {
     throw new Error("Runtime delegation is not authorized for this runtime.");
   }
   const previouslyInstalled = node.getRuntimePermissionDelegations().find((candidate) => candidate.cid === cid);
   if (previouslyInstalled !== void 0 && previouslyInstalled.delegationHeader.Authorization !== authorization) {
-    throw new Error(
+    reject(
+      "cid_mismatch",
       "A different authorization is already installed for this runtime delegation CID."
     );
   }
@@ -7765,22 +7906,28 @@ async function activateValidatedRuntimeDelegation(node, delegation, options) {
     })),
     expiry: new Date(signed.expiry),
     delegateDID: signed.audience,
-    host
+    host,
+    ...compact ? {} : { siweProof: delegation.siweProof }
   };
-  if (node.isSessionOnly === true && typeof node.did === "string" && (0, import_sdk_core9.principalDidEquals)(node.did, node.sessionDid) && typeof node.useDelegation === "function") {
-    await node.useDelegation(installedCandidate);
-  } else {
-    await node.useRuntimeDelegation(installedCandidate);
+  try {
+    if (node.isSessionOnly === true && typeof node.did === "string" && (0, import_sdk_core9.principalDidEquals)(node.did, node.sessionDid) && typeof node.useDelegation === "function") {
+      await node.useDelegation(installedCandidate);
+    } else {
+      await node.useRuntimeDelegation(installedCandidate);
+    }
+  } catch (error) {
+    reject("activation_rejected", error instanceof Error ? error.message : String(error));
   }
   const installed = node.getRuntimePermissionDelegations().find((candidate) => candidate.cid === cid);
   if (!installed) {
-    throw new Error("Runtime delegation activation did not install the validated authority.");
+    reject("activation_rejected", "Runtime delegation activation did not install the validated authority.");
   }
   if (installed.delegationHeader.Authorization !== authorization || !didPrincipalsMatch(installed.delegateDID, signed.audience) || installed.expiry.getTime() !== signed.expiry.getTime() || !resourcesMatch(
     canonicalResourcesFromPortableDelegation(installed),
     signed.resources
   ) || normalizedHost(installed.host ?? "") !== host) {
-    throw new Error(
+    reject(
+      "activation_rejected",
       "Runtime delegation activation installed authority that differs from the validated authority."
     );
   }