@tinycloud/node-sdk 3.11.1-beta.0 → 3.12.0-beta.2

package/dist/replication/authority.d.cts

@@ -1,8 +1,9 @@
 import '@tinycloud/sdk-core';
 import '@tinycloud/sdk-services';
 import '@tinycloud/sdk-services/kv/replication';
-import '../TinyCloudNode-BmpjkpWR.cjs';
-export { A as AUTHORITY_EXPIRY_MARGIN_MS, D as DelegationPlanResult, R as ReplicaLocalEraseReport, a as ReplicationAuthorityHost, b as ReplicationAuthoritySession, c as assertRenewalParent, d as assertValidReplicationConfig, e as augmentSignInEntriesWithReplication, f as createReplicationAuthority, g as eraseReplicaLocalCopy, h as establishReplicaSessionStamp, i as hasUnrestrictedGetCoverage, m as mintNodeReplicationGrant, r as replicationScopeFromSignedSession, j as reportReplicaDenial, k as restoreReplicaSessionStamp, u as ucanAttCovers, l as ucanAttUnconstrainedFor, v as verifiedOwnerConsentAnchor } from '../authority-BYSEyjDI.cjs';
+import '../TinyCloudNode-6_IumWu0.cjs';
+export { A as AUTHORITY_EXPIRY_MARGIN_MS, D as DelegationPlanResult, R as ReplicaLocalEraseReport, a as ReplicationAuthorityHost, b as ReplicationAuthoritySession, c as assertRenewalParent, d as assertValidReplicationConfig, e as augmentSignInEntriesWithReplication, f as createReplicationAuthority, g as eraseReplicaLocalCopy, h as establishReplicaSessionStamp, i as hasUnrestrictedGetCoverage, m as mintNodeReplicationGrant, r as replicationScopeFromSignedSession, j as reportReplicaDenial, k as restoreReplicaSessionStamp, u as ucanAttCovers, l as ucanAttUnconstrainedFor, v as verifiedOwnerConsentAnchor } from '../authority-DODDXxoP.cjs';
 import '@tinycloud/sdk-services/encryption/named-keys';
+import '../NodeUserAuthorization-B05Wjjpb.cjs';
 import 'events';
-import '../delegation-Ckc3UETl.cjs';
+import '../delegation-BQbAuKad.cjs';

package/dist/replication/authority.d.ts

@@ -1,8 +1,9 @@
 import '@tinycloud/sdk-core';
 import '@tinycloud/sdk-services';
 import '@tinycloud/sdk-services/kv/replication';
-import '../TinyCloudNode-AUotFGzy.js';
-export { A as AUTHORITY_EXPIRY_MARGIN_MS, D as DelegationPlanResult, R as ReplicaLocalEraseReport, a as ReplicationAuthorityHost, b as ReplicationAuthoritySession, c as assertRenewalParent, d as assertValidReplicationConfig, e as augmentSignInEntriesWithReplication, f as createReplicationAuthority, g as eraseReplicaLocalCopy, h as establishReplicaSessionStamp, i as hasUnrestrictedGetCoverage, m as mintNodeReplicationGrant, r as replicationScopeFromSignedSession, j as reportReplicaDenial, k as restoreReplicaSessionStamp, u as ucanAttCovers, l as ucanAttUnconstrainedFor, v as verifiedOwnerConsentAnchor } from '../authority-dRnJD4iL.js';
+import '../TinyCloudNode-CEFGtSWn.js';
+export { A as AUTHORITY_EXPIRY_MARGIN_MS, D as DelegationPlanResult, R as ReplicaLocalEraseReport, a as ReplicationAuthorityHost, b as ReplicationAuthoritySession, c as assertRenewalParent, d as assertValidReplicationConfig, e as augmentSignInEntriesWithReplication, f as createReplicationAuthority, g as eraseReplicaLocalCopy, h as establishReplicaSessionStamp, i as hasUnrestrictedGetCoverage, m as mintNodeReplicationGrant, r as replicationScopeFromSignedSession, j as reportReplicaDenial, k as restoreReplicaSessionStamp, u as ucanAttCovers, l as ucanAttUnconstrainedFor, v as verifiedOwnerConsentAnchor } from '../authority-DXpnuId1.js';
 import '@tinycloud/sdk-services/encryption/named-keys';
+import '../NodeUserAuthorization-B05Wjjpb.js';
 import 'events';
-import '../delegation-Ckc3UETl.js';
+import '../delegation-BQbAuKad.js';

package/dist/space-hosting.cjs

@@ -0,0 +1,183 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/space-hosting.ts
+var space_hosting_exports = {};
+__export(space_hosting_exports, {
+  askSpaceHosting: () => askSpaceHosting,
+  createPrimarySpace: () => createPrimarySpace
+});
+module.exports = __toCommonJS(space_hosting_exports);
+var hostedBy = /* @__PURE__ */ new WeakMap();
+var TIMEOUT_MS = 5e3;
+var SPACE_PROBE_KEY = ".tinycloud-space-probe";
+var KV_LIST_ACTION = "tinycloud.kv/list";
+var KV_METADATA_ACTION = "tinycloud.kv/metadata";
+var KV_GET_ACTION = "tinycloud.kv/get";
+var SPACE_INFO_ACTION = "tinycloud.space/info";
+var isPrefix = (path) => path === "" || path.endsWith("/") || path.endsWith("/*") || path.endsWith("/**");
+var prefixOf = (path) => path.endsWith("/**") ? path.slice(0, -2) : path.endsWith("/*") ? path.slice(0, -1) : path === "/" ? "" : path;
+var keyOf = (path) => isPrefix(path) ? `${prefixOf(path)}${SPACE_PROBE_KEY}` : path;
+function selectRead({ spaceId, operations, covers }) {
+  const held = operations.filter((operation) => !operation.caveats?.length && covers(operation, { spaceId, service: operation.service, path: operation.path, action: operation.action }));
+  const holding = (service, action) => held.filter((operation) => covers(operation, { spaceId, service, path: operation.path, action }));
+  return [
+    ...holding("kv", KV_LIST_ACTION).map((operation) => ({
+      service: "kv",
+      path: isPrefix(operation.path) ? prefixOf(operation.path) : operation.path,
+      action: KV_LIST_ACTION,
+      headers: { "x-tinycloud-limit": "1" }
+    })),
+    ...holding("kv", KV_METADATA_ACTION).map((operation) => ({
+      service: "kv",
+      path: keyOf(operation.path),
+      action: KV_METADATA_ACTION
+    })),
+    ...holding("space", SPACE_INFO_ACTION).map(() => ({
+      service: "space",
+      path: "",
+      action: SPACE_INFO_ACTION,
+      body: "{}"
+    })),
+    ...holding("kv", KV_GET_ACTION).map((operation) => ({
+      service: "kv",
+      path: keyOf(operation.path),
+      action: KV_GET_ACTION
+    }))
+  ].find((read) => held.some((operation) => covers(operation, { spaceId, service: read.service, path: read.path, action: read.action })));
+}
+async function send(ports, read) {
+  try {
+    const { spaceId } = ports;
+    const response = await ports.fetch(`${ports.host}/invoke`, {
+      method: "POST",
+      headers: { ...ports.sign([{ spaceId, service: read.service, path: read.path, action: read.action }]), ...read.headers },
+      body: read.body,
+      signal: AbortSignal.timeout(TIMEOUT_MS)
+    });
+    if (response.ok) {
+      if (response.body instanceof ReadableStream) await response.body.cancel().catch(() => void 0);
+      return "hosted";
+    }
+    if (response.status === 401 || response.status === 403) return "refused";
+    if (response.status === 404) {
+      return /space not found/i.test(await response.text()) ? "not-hosted" : "hosted";
+    }
+    return "unknown";
+  } catch {
+    return "unknown";
+  }
+}
+async function askSpaceHosting(ports) {
+  const read = selectRead(ports);
+  if (!read) return "unknown";
+  const key = `${ports.host} ${ports.spaceId.replace(/^(tinycloud:pkh:eip155:\d+:)(0x[0-9a-fA-F]{40})/, (_, prefix, address) => prefix + address.toLowerCase())}`;
+  if (hostedBy.get(ports.scope)?.has(key)) return "hosted";
+  let outcome = await send(ports, read);
+  if (outcome === "refused") {
+    try {
+      await ports.activate(AbortSignal.timeout(TIMEOUT_MS));
+    } catch {
+      return "unknown";
+    }
+    outcome = await send(ports, read);
+  }
+  if (outcome === "hosted") hostedBy.set(ports.scope, (hostedBy.get(ports.scope) ?? /* @__PURE__ */ new Set()).add(key));
+  return outcome === "refused" ? "unknown" : outcome;
+}
+function describeFailure(result) {
+  const text = result.error?.trim();
+  return text ? `${result.status} - ${text}` : `${result.status}`;
+}
+async function createPrimarySpace({
+  handler,
+  session,
+  context: existingContext,
+  currentSession,
+  signerAddress,
+  resolveHost,
+  domain,
+  hostName,
+  guard,
+  host,
+  onHosted,
+  activate,
+  signal
+}) {
+  const checkCurrent = () => {
+    signal?.throwIfAborted();
+    if (session && currentSession?.() !== session) throw new Error("Space hosting session changed");
+  };
+  checkCurrent();
+  if (session && signerAddress && (await signerAddress()).toLowerCase() !== session.address.toLowerCase()) return;
+  checkCurrent();
+  const context = existingContext ?? (session && {
+    address: session.address,
+    chainId: session.chainId,
+    spaceId: session.spaceId,
+    host: await resolveHost?.() ?? hostName ?? ""
+  });
+  if (!context) throw new Error("Space hosting requires a session context");
+  checkCurrent();
+  await guard(context);
+  checkCurrent();
+  const approved = await handler.confirmSpaceCreation(context);
+  checkCurrent();
+  if (!approved) return;
+  try {
+    const created = await host(context, checkCurrent, (peerId) => ({
+      address: context.address,
+      chainId: context.chainId,
+      domain: domain ?? "",
+      issuedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      spaceId: context.spaceId,
+      peerId
+    }));
+    if (!created.success) {
+      throw Object.assign(
+        new Error(`Failed to create space ${context.spaceId}: ${describeFailure(created)}`),
+        { cause: created }
+      );
+    }
+  } catch (error) {
+    handler.onSpaceCreationFailed?.(context, error instanceof Error ? error : new Error(String(error)));
+    throw error;
+  }
+  checkCurrent();
+  onHosted(context);
+  await new Promise((resolve) => setTimeout(resolve, 100));
+  checkCurrent();
+  const retry = await activate(context);
+  checkCurrent();
+  if (!retry.success) {
+    const err = Object.assign(
+      new Error(`Failed to activate session after creating space: ${describeFailure(retry)}`),
+      { cause: retry }
+    );
+    handler.onSpaceCreationFailed?.(context, err);
+    throw err;
+  }
+  handler.onSpaceCreated?.(context);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  askSpaceHosting,
+  createPrimarySpace
+});
+//# sourceMappingURL=space-hosting.cjs.map

package/dist/space-hosting.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/space-hosting.ts"],"sourcesContent":["/**\n * The hosting probe's read selection and classification, and the sequence that\n * creates a primary space that is not hosted. Both are loaded on first use, so\n * browser bundles carry them as a separate file rather than in their root.\n */\nimport type { ISpaceCreationHandler, SpaceCreationContext, SpaceHostResult } from \"@tinycloud/sdk-core\";\nimport type { FetchFunction, InvokeAnyEntry, ServiceHeaders } from \"@tinycloud/sdk-services\";\nimport type { SpaceHosting } from \"./authorization/NodeUserAuthorization\";\n\n/** A permission the session holds, as `TinyCloudNode` tracks it. */\nexport interface SpaceHostingOperation {\n  spaceId?: string;\n  resource?: string;\n  service: string;\n  path: string;\n  action: string;\n  caveats?: Record<string, unknown>[];\n}\n\n/** One read to send: `service`, `path` and `action` are what the invocation is signed for. */\nexport interface SpaceHostingRead {\n  service: string;\n  path: string;\n  action: string;\n  headers?: Record<string, string>;\n  body?: string;\n}\n\nexport interface SpaceHostingPorts {\n  spaceId: string;\n  /** Everything the session holds, on any space: its own recap and installed runtime grants. */\n  operations: readonly SpaceHostingOperation[];\n  /** Whether `granted` authorizes `requested`. */\n  covers(granted: SpaceHostingOperation, requested: SpaceHostingOperation): boolean;\n  /** Identifies the session's services: `hosted` answers are remembered per scope, so a later session never inherits one. */\n  scope: object;\n  host: string;\n  fetch: FetchFunction;\n  /** Sign an invocation for exactly these entries. `invoke` would always sign for the session's primary space. */\n  sign(entries: InvokeAnyEntry[]): ServiceHeaders;\n  /** Register the session delegation with the node. Rejects on a network failure or timeout. */\n  activate(signal: AbortSignal): Promise<unknown>;\n}\n\n/** Spaces the node answered `hosted` for, by session: hosting does not go away in normal operation. */\nconst hostedBy = new WeakMap<object, Set<string>>();\n\n/** Per request: the probe never holds up a caller longer. */\nconst TIMEOUT_MS = 5_000;\n\n/** A key that does not exist: a hosted space answers a read of it with a plain 404. */\nconst SPACE_PROBE_KEY = \".tinycloud-space-probe\";\nconst KV_LIST_ACTION = \"tinycloud.kv/list\";\nconst KV_METADATA_ACTION = \"tinycloud.kv/metadata\";\nconst KV_GET_ACTION = \"tinycloud.kv/get\";\nconst SPACE_INFO_ACTION = \"tinycloud.space/info\";\n\nconst isPrefix = (path: string) =>\n  path === \"\" || path.endsWith(\"/\") || path.endsWith(\"/*\") || path.endsWith(\"/**\");\nconst prefixOf = (path: string) =>\n  path.endsWith(\"/**\") ? path.slice(0, -2) : path.endsWith(\"/*\") ? path.slice(0, -1) : path === \"/\" ? \"\" : path;\n// A prefix grant is read at a key that does not exist; a grant on one key reads that key.\nconst keyOf = (path: string) => isPrefix(path) ? `${prefixOf(path)}${SPACE_PROBE_KEY}` : path;\n\n/**\n * The cheapest read of the space the session already holds: never one that\n * downloads a body when another exists. Reads under a caveated grant are\n * skipped, since their limits are not known here.\n */\nfunction selectRead({ spaceId, operations, covers }: SpaceHostingPorts): SpaceHostingRead | undefined {\n  // Held on this space: `covers` an operation's own action and path only when it names this space and no resource.\n  const held = operations.filter((operation) =>\n    !operation.caveats?.length &&\n    covers(operation, { spaceId, service: operation.service, path: operation.path, action: operation.action }));\n  const holding = (service: string, action: string) =>\n    held.filter((operation) => covers(operation, { spaceId, service, path: operation.path, action }));\n\n  return [\n    ...holding(\"kv\", KV_LIST_ACTION).map((operation) => ({\n      service: \"kv\",\n      path: isPrefix(operation.path) ? prefixOf(operation.path) : operation.path,\n      action: KV_LIST_ACTION,\n      headers: { \"x-tinycloud-limit\": \"1\" },\n    })),\n    ...holding(\"kv\", KV_METADATA_ACTION).map((operation) => ({\n      service: \"kv\", path: keyOf(operation.path), action: KV_METADATA_ACTION,\n    })),\n    ...holding(\"space\", SPACE_INFO_ACTION).map(() => ({\n      service: \"space\", path: \"\", action: SPACE_INFO_ACTION, body: \"{}\",\n    })),\n    ...holding(\"kv\", KV_GET_ACTION).map((operation) => ({\n      service: \"kv\", path: keyOf(operation.path), action: KV_GET_ACTION,\n    })),\n  ].find((read) => held.some((operation) =>\n    covers(operation, { spaceId, service: read.service, path: read.path, action: read.action })));\n}\n\n/** One signed read, classified. */\nasync function send(ports: SpaceHostingPorts, read: SpaceHostingRead): Promise<SpaceHosting | \"refused\"> {\n  try {\n    const { spaceId } = ports;\n    const response = await ports.fetch(`${ports.host}/invoke`, {\n      method: \"POST\",\n      headers: { ...ports.sign([{ spaceId, service: read.service, path: read.path, action: read.action }]), ...read.headers },\n      body: read.body,\n      signal: AbortSignal.timeout(TIMEOUT_MS),\n    });\n    if (response.ok) {\n      // A 2xx is the answer; a body that comes with it is not wanted.\n      if (response.body instanceof ReadableStream) await response.body.cancel().catch(() => undefined);\n      return \"hosted\";\n    }\n    if (response.status === 401 || response.status === 403) return \"refused\";\n    if (response.status === 404) {\n      // Only the node's unhosted-space 404 says \"not hosted\"; a missing key is a 404 too.\n      return /space not found/i.test(await response.text()) ? \"not-hosted\" : \"hosted\";\n    }\n    return \"unknown\";\n  } catch {\n    return \"unknown\";\n  }\n}\n\n/**\n * Ask the node whether the space is hosted. A 401/403 registers the session\n * delegation once and asks once more; still refused is `unknown`, as are\n * network failures, 5xx and a session that holds no read.\n */\nexport async function askSpaceHosting(ports: SpaceHostingPorts): Promise<SpaceHosting> {\n  const read = selectRead(ports);\n  if (!read) return \"unknown\";\n  // Only a session that holds a read on the space is answered from what it already saw.\n  // The address in a space id is case-insensitive; the rest of it is not.\n  const key = `${ports.host} ${ports.spaceId.replace(/^(tinycloud:pkh:eip155:\\d+:)(0x[0-9a-fA-F]{40})/, (_, prefix: string, address: string) => prefix + address.toLowerCase())}`;\n  if (hostedBy.get(ports.scope)?.has(key)) return \"hosted\";\n  let outcome = await send(ports, read);\n  if (outcome === \"refused\") {\n    try {\n      await ports.activate(AbortSignal.timeout(TIMEOUT_MS));\n    } catch {\n      return \"unknown\";\n    }\n    outcome = await send(ports, read);\n  }\n  if (outcome === \"hosted\") hostedBy.set(ports.scope, (hostedBy.get(ports.scope) ?? new Set<string>()).add(key));\n  return outcome === \"refused\" ? \"unknown\" : outcome;\n}\n\ntype PrimarySpaceIdentity = Pick<SpaceCreationContext, \"address\" | \"chainId\" | \"spaceId\">;\n\nexport interface PrimarySpaceCreationPorts {\n  handler: ISpaceCreationHandler;\n  session?: PrimarySpaceIdentity;\n  context?: SpaceCreationContext;\n  currentSession?(): unknown;\n  signerAddress?(): Promise<string>;\n  resolveHost?(): Promise<string>;\n  domain?: string;\n  hostName?: string;\n  /** `assertMayCreateSpace`, reporting a refusal to the handler. */\n  guard(context: SpaceCreationContext): Promise<void>;\n  /** Confirm that the host delegation should be submitted. */\n  host(\n    context: SpaceCreationContext,\n    assertCurrent: () => void,\n    siweParameters: (peerId: string) => {\n      address: string;\n      chainId: number;\n      domain: string;\n      issuedAt: string;\n      spaceId: string;\n      peerId: string;\n    },\n  ): Promise<SpaceHostResult>;\n  /** Called once the node has the host delegation. */\n  onHosted(context: SpaceCreationContext): void;\n  /** Register the session delegation again. */\n  activate(context: SpaceCreationContext): Promise<SpaceHostResult>;\n  signal?: AbortSignal;\n}\n/** `<status> - <server text>` for a failed host call. */\nfunction describeFailure(result: SpaceHostResult): string {\n  const text = result.error?.trim();\n  return text ? `${result.status} - ${text}` : `${result.status}`;\n}\n\n/**\n * The guard, confirm, host and re-activate sequence for an unhosted primary\n * space. A declined confirmation ends it quietly; a failure is reported to the\n * handler and thrown.\n */\nexport async function createPrimarySpace({\n  handler,\n  session,\n  context: existingContext,\n  currentSession,\n  signerAddress,\n  resolveHost,\n  domain,\n  hostName,\n  guard,\n  host,\n  onHosted,\n  activate,\n  signal,\n}: PrimarySpaceCreationPorts): Promise<void> {\n  const checkCurrent = () => {\n    signal?.throwIfAborted();\n    if (session && currentSession?.() !== session) throw new Error(\"Space hosting session changed\");\n  };\n  checkCurrent();\n  if (session && signerAddress && (await signerAddress()).toLowerCase() !== session.address.toLowerCase()) return;\n  checkCurrent();\n  const context = existingContext ?? (session && {\n    address: session.address,\n    chainId: session.chainId,\n    spaceId: session.spaceId,\n    host: await resolveHost?.() ?? hostName ?? \"\",\n  });\n  if (!context) throw new Error(\"Space hosting requires a session context\");\n  checkCurrent();\n  await guard(context);\n  checkCurrent();\n  const approved = await handler.confirmSpaceCreation(context);\n  checkCurrent();\n  if (!approved) return;\n\n  try {\n    const created = await host(context, checkCurrent, (peerId) => ({\n      address: context.address,\n      chainId: context.chainId,\n      domain: domain ?? \"\",\n      issuedAt: new Date().toISOString(),\n      spaceId: context.spaceId,\n      peerId,\n    }));\n    if (!created.success) {\n      throw Object.assign(\n        new Error(`Failed to create space ${context.spaceId}: ${describeFailure(created)}`),\n        { cause: created },\n      );\n    }\n  } catch (error) {\n    handler.onSpaceCreationFailed?.(context, error instanceof Error ? error : new Error(String(error)));\n    throw error;\n  }\n  checkCurrent();\n  onHosted(context);\n\n  // Small delay to allow space creation to propagate\n  await new Promise((resolve) => setTimeout(resolve, 100));\n  checkCurrent();\n\n  const retry = await activate(context);\n  checkCurrent();\n  if (!retry.success) {\n    const err = Object.assign(\n      new Error(`Failed to activate session after creating space: ${describeFailure(retry)}`),\n      { cause: retry },\n    );\n    handler.onSpaceCreationFailed?.(context, err);\n    throw err;\n  }\n  handler.onSpaceCreated?.(context);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6CA,IAAM,WAAW,oBAAI,QAA6B;AAGlD,IAAM,aAAa;AAGnB,IAAM,kBAAkB;AACxB,IAAM,iBAAiB;AACvB,IAAM,qBAAqB;AAC3B,IAAM,gBAAgB;AACtB,IAAM,oBAAoB;AAE1B,IAAM,WAAW,CAAC,SAChB,SAAS,MAAM,KAAK,SAAS,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,KAAK;AACjF,IAAM,WAAW,CAAC,SAChB,KAAK,SAAS,KAAK,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,SAAS,MAAM,KAAK;AAE3G,IAAM,QAAQ,CAAC,SAAiB,SAAS,IAAI,IAAI,GAAG,SAAS,IAAI,CAAC,GAAG,eAAe,KAAK;AAOzF,SAAS,WAAW,EAAE,SAAS,YAAY,OAAO,GAAoD;AAEpG,QAAM,OAAO,WAAW,OAAO,CAAC,cAC9B,CAAC,UAAU,SAAS,UACpB,OAAO,WAAW,EAAE,SAAS,SAAS,UAAU,SAAS,MAAM,UAAU,MAAM,QAAQ,UAAU,OAAO,CAAC,CAAC;AAC5G,QAAM,UAAU,CAAC,SAAiB,WAChC,KAAK,OAAO,CAAC,cAAc,OAAO,WAAW,EAAE,SAAS,SAAS,MAAM,UAAU,MAAM,OAAO,CAAC,CAAC;AAElG,SAAO;AAAA,IACL,GAAG,QAAQ,MAAM,cAAc,EAAE,IAAI,CAAC,eAAe;AAAA,MACnD,SAAS;AAAA,MACT,MAAM,SAAS,UAAU,IAAI,IAAI,SAAS,UAAU,IAAI,IAAI,UAAU;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS,EAAE,qBAAqB,IAAI;AAAA,IACtC,EAAE;AAAA,IACF,GAAG,QAAQ,MAAM,kBAAkB,EAAE,IAAI,CAAC,eAAe;AAAA,MACvD,SAAS;AAAA,MAAM,MAAM,MAAM,UAAU,IAAI;AAAA,MAAG,QAAQ;AAAA,IACtD,EAAE;AAAA,IACF,GAAG,QAAQ,SAAS,iBAAiB,EAAE,IAAI,OAAO;AAAA,MAChD,SAAS;AAAA,MAAS,MAAM;AAAA,MAAI,QAAQ;AAAA,MAAmB,MAAM;AAAA,IAC/D,EAAE;AAAA,IACF,GAAG,QAAQ,MAAM,aAAa,EAAE,IAAI,CAAC,eAAe;AAAA,MAClD,SAAS;AAAA,MAAM,MAAM,MAAM,UAAU,IAAI;AAAA,MAAG,QAAQ;AAAA,IACtD,EAAE;AAAA,EACJ,EAAE,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,cAC1B,OAAO,WAAW,EAAE,SAAS,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC;AAChG;AAGA,eAAe,KAAK,OAA0B,MAA2D;AACvG,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI;AACpB,UAAM,WAAW,MAAM,MAAM,MAAM,GAAG,MAAM,IAAI,WAAW;AAAA,MACzD,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,SAAS,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,QAAQ,KAAK,OAAO,CAAC,CAAC,GAAG,GAAG,KAAK,QAAQ;AAAA,MACtH,MAAM,KAAK;AAAA,MACX,QAAQ,YAAY,QAAQ,UAAU;AAAA,IACxC,CAAC;AACD,QAAI,SAAS,IAAI;AAEf,UAAI,SAAS,gBAAgB,eAAgB,OAAM,SAAS,KAAK,OAAO,EAAE,MAAM,MAAM,MAAS;AAC/F,aAAO;AAAA,IACT;AACA,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IAAK,QAAO;AAC/D,QAAI,SAAS,WAAW,KAAK;AAE3B,aAAO,mBAAmB,KAAK,MAAM,SAAS,KAAK,CAAC,IAAI,eAAe;AAAA,IACzE;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,eAAsB,gBAAgB,OAAiD;AACrF,QAAM,OAAO,WAAW,KAAK;AAC7B,MAAI,CAAC,KAAM,QAAO;AAGlB,QAAM,MAAM,GAAG,MAAM,IAAI,IAAI,MAAM,QAAQ,QAAQ,mDAAmD,CAAC,GAAG,QAAgB,YAAoB,SAAS,QAAQ,YAAY,CAAC,CAAC;AAC7K,MAAI,SAAS,IAAI,MAAM,KAAK,GAAG,IAAI,GAAG,EAAG,QAAO;AAChD,MAAI,UAAU,MAAM,KAAK,OAAO,IAAI;AACpC,MAAI,YAAY,WAAW;AACzB,QAAI;AACF,YAAM,MAAM,SAAS,YAAY,QAAQ,UAAU,CAAC;AAAA,IACtD,QAAQ;AACN,aAAO;AAAA,IACT;AACA,cAAU,MAAM,KAAK,OAAO,IAAI;AAAA,EAClC;AACA,MAAI,YAAY,SAAU,UAAS,IAAI,MAAM,QAAQ,SAAS,IAAI,MAAM,KAAK,KAAK,oBAAI,IAAY,GAAG,IAAI,GAAG,CAAC;AAC7G,SAAO,YAAY,YAAY,YAAY;AAC7C;AAmCA,SAAS,gBAAgB,QAAiC;AACxD,QAAM,OAAO,OAAO,OAAO,KAAK;AAChC,SAAO,OAAO,GAAG,OAAO,MAAM,MAAM,IAAI,KAAK,GAAG,OAAO,MAAM;AAC/D;AAOA,eAAsB,mBAAmB;AAAA,EACvC;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA6C;AAC3C,QAAM,eAAe,MAAM;AACzB,YAAQ,eAAe;AACvB,QAAI,WAAW,iBAAiB,MAAM,QAAS,OAAM,IAAI,MAAM,+BAA+B;AAAA,EAChG;AACA,eAAa;AACb,MAAI,WAAW,kBAAkB,MAAM,cAAc,GAAG,YAAY,MAAM,QAAQ,QAAQ,YAAY,EAAG;AACzG,eAAa;AACb,QAAM,UAAU,oBAAoB,WAAW;AAAA,IAC7C,SAAS,QAAQ;AAAA,IACjB,SAAS,QAAQ;AAAA,IACjB,SAAS,QAAQ;AAAA,IACjB,MAAM,MAAM,cAAc,KAAK,YAAY;AAAA,EAC7C;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,0CAA0C;AACxE,eAAa;AACb,QAAM,MAAM,OAAO;AACnB,eAAa;AACb,QAAM,WAAW,MAAM,QAAQ,qBAAqB,OAAO;AAC3D,eAAa;AACb,MAAI,CAAC,SAAU;AAEf,MAAI;AACF,UAAM,UAAU,MAAM,KAAK,SAAS,cAAc,CAAC,YAAY;AAAA,MAC7D,SAAS,QAAQ;AAAA,MACjB,SAAS,QAAQ;AAAA,MACjB,QAAQ,UAAU;AAAA,MAClB,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB;AAAA,IACF,EAAE;AACF,QAAI,CAAC,QAAQ,SAAS;AACpB,YAAM,OAAO;AAAA,QACX,IAAI,MAAM,0BAA0B,QAAQ,OAAO,KAAK,gBAAgB,OAAO,CAAC,EAAE;AAAA,QAClF,EAAE,OAAO,QAAQ;AAAA,MACnB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,wBAAwB,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AAClG,UAAM;AAAA,EACR;AACA,eAAa;AACb,WAAS,OAAO;AAGhB,QAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,GAAG,CAAC;AACvD,eAAa;AAEb,QAAM,QAAQ,MAAM,SAAS,OAAO;AACpC,eAAa;AACb,MAAI,CAAC,MAAM,SAAS;AAClB,UAAM,MAAM,OAAO;AAAA,MACjB,IAAI,MAAM,oDAAoD,gBAAgB,KAAK,CAAC,EAAE;AAAA,MACtF,EAAE,OAAO,MAAM;AAAA,IACjB;AACA,YAAQ,wBAAwB,SAAS,GAAG;AAC5C,UAAM;AAAA,EACR;AACA,UAAQ,iBAAiB,OAAO;AAClC;","names":[]}

package/dist/space-hosting.d.cts

@@ -0,0 +1,84 @@
+import { ISpaceCreationHandler, SpaceCreationContext, SpaceHostResult } from '@tinycloud/sdk-core';
+import { FetchFunction, InvokeAnyEntry, ServiceHeaders } from '@tinycloud/sdk-services';
+import { S as SpaceHosting } from './NodeUserAuthorization-B05Wjjpb.cjs';
+import 'events';
+
+/**
+ * The hosting probe's read selection and classification, and the sequence that
+ * creates a primary space that is not hosted. Both are loaded on first use, so
+ * browser bundles carry them as a separate file rather than in their root.
+ */
+
+/** A permission the session holds, as `TinyCloudNode` tracks it. */
+interface SpaceHostingOperation {
+    spaceId?: string;
+    resource?: string;
+    service: string;
+    path: string;
+    action: string;
+    caveats?: Record<string, unknown>[];
+}
+/** One read to send: `service`, `path` and `action` are what the invocation is signed for. */
+interface SpaceHostingRead {
+    service: string;
+    path: string;
+    action: string;
+    headers?: Record<string, string>;
+    body?: string;
+}
+interface SpaceHostingPorts {
+    spaceId: string;
+    /** Everything the session holds, on any space: its own recap and installed runtime grants. */
+    operations: readonly SpaceHostingOperation[];
+    /** Whether `granted` authorizes `requested`. */
+    covers(granted: SpaceHostingOperation, requested: SpaceHostingOperation): boolean;
+    /** Identifies the session's services: `hosted` answers are remembered per scope, so a later session never inherits one. */
+    scope: object;
+    host: string;
+    fetch: FetchFunction;
+    /** Sign an invocation for exactly these entries. `invoke` would always sign for the session's primary space. */
+    sign(entries: InvokeAnyEntry[]): ServiceHeaders;
+    /** Register the session delegation with the node. Rejects on a network failure or timeout. */
+    activate(signal: AbortSignal): Promise<unknown>;
+}
+/**
+ * Ask the node whether the space is hosted. A 401/403 registers the session
+ * delegation once and asks once more; still refused is `unknown`, as are
+ * network failures, 5xx and a session that holds no read.
+ */
+declare function askSpaceHosting(ports: SpaceHostingPorts): Promise<SpaceHosting>;
+type PrimarySpaceIdentity = Pick<SpaceCreationContext, "address" | "chainId" | "spaceId">;
+interface PrimarySpaceCreationPorts {
+    handler: ISpaceCreationHandler;
+    session?: PrimarySpaceIdentity;
+    context?: SpaceCreationContext;
+    currentSession?(): unknown;
+    signerAddress?(): Promise<string>;
+    resolveHost?(): Promise<string>;
+    domain?: string;
+    hostName?: string;
+    /** `assertMayCreateSpace`, reporting a refusal to the handler. */
+    guard(context: SpaceCreationContext): Promise<void>;
+    /** Confirm that the host delegation should be submitted. */
+    host(context: SpaceCreationContext, assertCurrent: () => void, siweParameters: (peerId: string) => {
+        address: string;
+        chainId: number;
+        domain: string;
+        issuedAt: string;
+        spaceId: string;
+        peerId: string;
+    }): Promise<SpaceHostResult>;
+    /** Called once the node has the host delegation. */
+    onHosted(context: SpaceCreationContext): void;
+    /** Register the session delegation again. */
+    activate(context: SpaceCreationContext): Promise<SpaceHostResult>;
+    signal?: AbortSignal;
+}
+/**
+ * The guard, confirm, host and re-activate sequence for an unhosted primary
+ * space. A declined confirmation ends it quietly; a failure is reported to the
+ * handler and thrown.
+ */
+declare function createPrimarySpace({ handler, session, context: existingContext, currentSession, signerAddress, resolveHost, domain, hostName, guard, host, onHosted, activate, signal, }: PrimarySpaceCreationPorts): Promise<void>;
+
+export { type PrimarySpaceCreationPorts, type SpaceHostingOperation, type SpaceHostingPorts, type SpaceHostingRead, askSpaceHosting, createPrimarySpace };

package/dist/space-hosting.d.ts

@@ -0,0 +1,84 @@
+import { ISpaceCreationHandler, SpaceCreationContext, SpaceHostResult } from '@tinycloud/sdk-core';
+import { FetchFunction, InvokeAnyEntry, ServiceHeaders } from '@tinycloud/sdk-services';
+import { S as SpaceHosting } from './NodeUserAuthorization-B05Wjjpb.js';
+import 'events';
+
+/**
+ * The hosting probe's read selection and classification, and the sequence that
+ * creates a primary space that is not hosted. Both are loaded on first use, so
+ * browser bundles carry them as a separate file rather than in their root.
+ */
+
+/** A permission the session holds, as `TinyCloudNode` tracks it. */
+interface SpaceHostingOperation {
+    spaceId?: string;
+    resource?: string;
+    service: string;
+    path: string;
+    action: string;
+    caveats?: Record<string, unknown>[];
+}
+/** One read to send: `service`, `path` and `action` are what the invocation is signed for. */
+interface SpaceHostingRead {
+    service: string;
+    path: string;
+    action: string;
+    headers?: Record<string, string>;
+    body?: string;
+}
+interface SpaceHostingPorts {
+    spaceId: string;
+    /** Everything the session holds, on any space: its own recap and installed runtime grants. */
+    operations: readonly SpaceHostingOperation[];
+    /** Whether `granted` authorizes `requested`. */
+    covers(granted: SpaceHostingOperation, requested: SpaceHostingOperation): boolean;
+    /** Identifies the session's services: `hosted` answers are remembered per scope, so a later session never inherits one. */
+    scope: object;
+    host: string;
+    fetch: FetchFunction;
+    /** Sign an invocation for exactly these entries. `invoke` would always sign for the session's primary space. */
+    sign(entries: InvokeAnyEntry[]): ServiceHeaders;
+    /** Register the session delegation with the node. Rejects on a network failure or timeout. */
+    activate(signal: AbortSignal): Promise<unknown>;
+}
+/**
+ * Ask the node whether the space is hosted. A 401/403 registers the session
+ * delegation once and asks once more; still refused is `unknown`, as are
+ * network failures, 5xx and a session that holds no read.
+ */
+declare function askSpaceHosting(ports: SpaceHostingPorts): Promise<SpaceHosting>;
+type PrimarySpaceIdentity = Pick<SpaceCreationContext, "address" | "chainId" | "spaceId">;
+interface PrimarySpaceCreationPorts {
+    handler: ISpaceCreationHandler;
+    session?: PrimarySpaceIdentity;
+    context?: SpaceCreationContext;
+    currentSession?(): unknown;
+    signerAddress?(): Promise<string>;
+    resolveHost?(): Promise<string>;
+    domain?: string;
+    hostName?: string;
+    /** `assertMayCreateSpace`, reporting a refusal to the handler. */
+    guard(context: SpaceCreationContext): Promise<void>;
+    /** Confirm that the host delegation should be submitted. */
+    host(context: SpaceCreationContext, assertCurrent: () => void, siweParameters: (peerId: string) => {
+        address: string;
+        chainId: number;
+        domain: string;
+        issuedAt: string;
+        spaceId: string;
+        peerId: string;
+    }): Promise<SpaceHostResult>;
+    /** Called once the node has the host delegation. */
+    onHosted(context: SpaceCreationContext): void;
+    /** Register the session delegation again. */
+    activate(context: SpaceCreationContext): Promise<SpaceHostResult>;
+    signal?: AbortSignal;
+}
+/**
+ * The guard, confirm, host and re-activate sequence for an unhosted primary
+ * space. A declined confirmation ends it quietly; a failure is reported to the
+ * handler and thrown.
+ */
+declare function createPrimarySpace({ handler, session, context: existingContext, currentSession, signerAddress, resolveHost, domain, hostName, guard, host, onHosted, activate, signal, }: PrimarySpaceCreationPorts): Promise<void>;
+
+export { type PrimarySpaceCreationPorts, type SpaceHostingOperation, type SpaceHostingPorts, type SpaceHostingRead, askSpaceHosting, createPrimarySpace };

package/dist/space-hosting.js

@@ -0,0 +1,157 @@
+// src/space-hosting.ts
+var hostedBy = /* @__PURE__ */ new WeakMap();
+var TIMEOUT_MS = 5e3;
+var SPACE_PROBE_KEY = ".tinycloud-space-probe";
+var KV_LIST_ACTION = "tinycloud.kv/list";
+var KV_METADATA_ACTION = "tinycloud.kv/metadata";
+var KV_GET_ACTION = "tinycloud.kv/get";
+var SPACE_INFO_ACTION = "tinycloud.space/info";
+var isPrefix = (path) => path === "" || path.endsWith("/") || path.endsWith("/*") || path.endsWith("/**");
+var prefixOf = (path) => path.endsWith("/**") ? path.slice(0, -2) : path.endsWith("/*") ? path.slice(0, -1) : path === "/" ? "" : path;
+var keyOf = (path) => isPrefix(path) ? `${prefixOf(path)}${SPACE_PROBE_KEY}` : path;
+function selectRead({ spaceId, operations, covers }) {
+  const held = operations.filter((operation) => !operation.caveats?.length && covers(operation, { spaceId, service: operation.service, path: operation.path, action: operation.action }));
+  const holding = (service, action) => held.filter((operation) => covers(operation, { spaceId, service, path: operation.path, action }));
+  return [
+    ...holding("kv", KV_LIST_ACTION).map((operation) => ({
+      service: "kv",
+      path: isPrefix(operation.path) ? prefixOf(operation.path) : operation.path,
+      action: KV_LIST_ACTION,
+      headers: { "x-tinycloud-limit": "1" }
+    })),
+    ...holding("kv", KV_METADATA_ACTION).map((operation) => ({
+      service: "kv",
+      path: keyOf(operation.path),
+      action: KV_METADATA_ACTION
+    })),
+    ...holding("space", SPACE_INFO_ACTION).map(() => ({
+      service: "space",
+      path: "",
+      action: SPACE_INFO_ACTION,
+      body: "{}"
+    })),
+    ...holding("kv", KV_GET_ACTION).map((operation) => ({
+      service: "kv",
+      path: keyOf(operation.path),
+      action: KV_GET_ACTION
+    }))
+  ].find((read) => held.some((operation) => covers(operation, { spaceId, service: read.service, path: read.path, action: read.action })));
+}
+async function send(ports, read) {
+  try {
+    const { spaceId } = ports;
+    const response = await ports.fetch(`${ports.host}/invoke`, {
+      method: "POST",
+      headers: { ...ports.sign([{ spaceId, service: read.service, path: read.path, action: read.action }]), ...read.headers },
+      body: read.body,
+      signal: AbortSignal.timeout(TIMEOUT_MS)
+    });
+    if (response.ok) {
+      if (response.body instanceof ReadableStream) await response.body.cancel().catch(() => void 0);
+      return "hosted";
+    }
+    if (response.status === 401 || response.status === 403) return "refused";
+    if (response.status === 404) {
+      return /space not found/i.test(await response.text()) ? "not-hosted" : "hosted";
+    }
+    return "unknown";
+  } catch {
+    return "unknown";
+  }
+}
+async function askSpaceHosting(ports) {
+  const read = selectRead(ports);
+  if (!read) return "unknown";
+  const key = `${ports.host} ${ports.spaceId.replace(/^(tinycloud:pkh:eip155:\d+:)(0x[0-9a-fA-F]{40})/, (_, prefix, address) => prefix + address.toLowerCase())}`;
+  if (hostedBy.get(ports.scope)?.has(key)) return "hosted";
+  let outcome = await send(ports, read);
+  if (outcome === "refused") {
+    try {
+      await ports.activate(AbortSignal.timeout(TIMEOUT_MS));
+    } catch {
+      return "unknown";
+    }
+    outcome = await send(ports, read);
+  }
+  if (outcome === "hosted") hostedBy.set(ports.scope, (hostedBy.get(ports.scope) ?? /* @__PURE__ */ new Set()).add(key));
+  return outcome === "refused" ? "unknown" : outcome;
+}
+function describeFailure(result) {
+  const text = result.error?.trim();
+  return text ? `${result.status} - ${text}` : `${result.status}`;
+}
+async function createPrimarySpace({
+  handler,
+  session,
+  context: existingContext,
+  currentSession,
+  signerAddress,
+  resolveHost,
+  domain,
+  hostName,
+  guard,
+  host,
+  onHosted,
+  activate,
+  signal
+}) {
+  const checkCurrent = () => {
+    signal?.throwIfAborted();
+    if (session && currentSession?.() !== session) throw new Error("Space hosting session changed");
+  };
+  checkCurrent();
+  if (session && signerAddress && (await signerAddress()).toLowerCase() !== session.address.toLowerCase()) return;
+  checkCurrent();
+  const context = existingContext ?? (session && {
+    address: session.address,
+    chainId: session.chainId,
+    spaceId: session.spaceId,
+    host: await resolveHost?.() ?? hostName ?? ""
+  });
+  if (!context) throw new Error("Space hosting requires a session context");
+  checkCurrent();
+  await guard(context);
+  checkCurrent();
+  const approved = await handler.confirmSpaceCreation(context);
+  checkCurrent();
+  if (!approved) return;
+  try {
+    const created = await host(context, checkCurrent, (peerId) => ({
+      address: context.address,
+      chainId: context.chainId,
+      domain: domain ?? "",
+      issuedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      spaceId: context.spaceId,
+      peerId
+    }));
+    if (!created.success) {
+      throw Object.assign(
+        new Error(`Failed to create space ${context.spaceId}: ${describeFailure(created)}`),
+        { cause: created }
+      );
+    }
+  } catch (error) {
+    handler.onSpaceCreationFailed?.(context, error instanceof Error ? error : new Error(String(error)));
+    throw error;
+  }
+  checkCurrent();
+  onHosted(context);
+  await new Promise((resolve) => setTimeout(resolve, 100));
+  checkCurrent();
+  const retry = await activate(context);
+  checkCurrent();
+  if (!retry.success) {
+    const err = Object.assign(
+      new Error(`Failed to activate session after creating space: ${describeFailure(retry)}`),
+      { cause: retry }
+    );
+    handler.onSpaceCreationFailed?.(context, err);
+    throw err;
+  }
+  handler.onSpaceCreated?.(context);
+}
+export {
+  askSpaceHosting,
+  createPrimarySpace
+};
+//# sourceMappingURL=space-hosting.js.map

package/dist/space-hosting.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/space-hosting.ts"],"sourcesContent":["/**\n * The hosting probe's read selection and classification, and the sequence that\n * creates a primary space that is not hosted. Both are loaded on first use, so\n * browser bundles carry them as a separate file rather than in their root.\n */\nimport type { ISpaceCreationHandler, SpaceCreationContext, SpaceHostResult } from \"@tinycloud/sdk-core\";\nimport type { FetchFunction, InvokeAnyEntry, ServiceHeaders } from \"@tinycloud/sdk-services\";\nimport type { SpaceHosting } from \"./authorization/NodeUserAuthorization\";\n\n/** A permission the session holds, as `TinyCloudNode` tracks it. */\nexport interface SpaceHostingOperation {\n  spaceId?: string;\n  resource?: string;\n  service: string;\n  path: string;\n  action: string;\n  caveats?: Record<string, unknown>[];\n}\n\n/** One read to send: `service`, `path` and `action` are what the invocation is signed for. */\nexport interface SpaceHostingRead {\n  service: string;\n  path: string;\n  action: string;\n  headers?: Record<string, string>;\n  body?: string;\n}\n\nexport interface SpaceHostingPorts {\n  spaceId: string;\n  /** Everything the session holds, on any space: its own recap and installed runtime grants. */\n  operations: readonly SpaceHostingOperation[];\n  /** Whether `granted` authorizes `requested`. */\n  covers(granted: SpaceHostingOperation, requested: SpaceHostingOperation): boolean;\n  /** Identifies the session's services: `hosted` answers are remembered per scope, so a later session never inherits one. */\n  scope: object;\n  host: string;\n  fetch: FetchFunction;\n  /** Sign an invocation for exactly these entries. `invoke` would always sign for the session's primary space. */\n  sign(entries: InvokeAnyEntry[]): ServiceHeaders;\n  /** Register the session delegation with the node. Rejects on a network failure or timeout. */\n  activate(signal: AbortSignal): Promise<unknown>;\n}\n\n/** Spaces the node answered `hosted` for, by session: hosting does not go away in normal operation. */\nconst hostedBy = new WeakMap<object, Set<string>>();\n\n/** Per request: the probe never holds up a caller longer. */\nconst TIMEOUT_MS = 5_000;\n\n/** A key that does not exist: a hosted space answers a read of it with a plain 404. */\nconst SPACE_PROBE_KEY = \".tinycloud-space-probe\";\nconst KV_LIST_ACTION = \"tinycloud.kv/list\";\nconst KV_METADATA_ACTION = \"tinycloud.kv/metadata\";\nconst KV_GET_ACTION = \"tinycloud.kv/get\";\nconst SPACE_INFO_ACTION = \"tinycloud.space/info\";\n\nconst isPrefix = (path: string) =>\n  path === \"\" || path.endsWith(\"/\") || path.endsWith(\"/*\") || path.endsWith(\"/**\");\nconst prefixOf = (path: string) =>\n  path.endsWith(\"/**\") ? path.slice(0, -2) : path.endsWith(\"/*\") ? path.slice(0, -1) : path === \"/\" ? \"\" : path;\n// A prefix grant is read at a key that does not exist; a grant on one key reads that key.\nconst keyOf = (path: string) => isPrefix(path) ? `${prefixOf(path)}${SPACE_PROBE_KEY}` : path;\n\n/**\n * The cheapest read of the space the session already holds: never one that\n * downloads a body when another exists. Reads under a caveated grant are\n * skipped, since their limits are not known here.\n */\nfunction selectRead({ spaceId, operations, covers }: SpaceHostingPorts): SpaceHostingRead | undefined {\n  // Held on this space: `covers` an operation's own action and path only when it names this space and no resource.\n  const held = operations.filter((operation) =>\n    !operation.caveats?.length &&\n    covers(operation, { spaceId, service: operation.service, path: operation.path, action: operation.action }));\n  const holding = (service: string, action: string) =>\n    held.filter((operation) => covers(operation, { spaceId, service, path: operation.path, action }));\n\n  return [\n    ...holding(\"kv\", KV_LIST_ACTION).map((operation) => ({\n      service: \"kv\",\n      path: isPrefix(operation.path) ? prefixOf(operation.path) : operation.path,\n      action: KV_LIST_ACTION,\n      headers: { \"x-tinycloud-limit\": \"1\" },\n    })),\n    ...holding(\"kv\", KV_METADATA_ACTION).map((operation) => ({\n      service: \"kv\", path: keyOf(operation.path), action: KV_METADATA_ACTION,\n    })),\n    ...holding(\"space\", SPACE_INFO_ACTION).map(() => ({\n      service: \"space\", path: \"\", action: SPACE_INFO_ACTION, body: \"{}\",\n    })),\n    ...holding(\"kv\", KV_GET_ACTION).map((operation) => ({\n      service: \"kv\", path: keyOf(operation.path), action: KV_GET_ACTION,\n    })),\n  ].find((read) => held.some((operation) =>\n    covers(operation, { spaceId, service: read.service, path: read.path, action: read.action })));\n}\n\n/** One signed read, classified. */\nasync function send(ports: SpaceHostingPorts, read: SpaceHostingRead): Promise<SpaceHosting | \"refused\"> {\n  try {\n    const { spaceId } = ports;\n    const response = await ports.fetch(`${ports.host}/invoke`, {\n      method: \"POST\",\n      headers: { ...ports.sign([{ spaceId, service: read.service, path: read.path, action: read.action }]), ...read.headers },\n      body: read.body,\n      signal: AbortSignal.timeout(TIMEOUT_MS),\n    });\n    if (response.ok) {\n      // A 2xx is the answer; a body that comes with it is not wanted.\n      if (response.body instanceof ReadableStream) await response.body.cancel().catch(() => undefined);\n      return \"hosted\";\n    }\n    if (response.status === 401 || response.status === 403) return \"refused\";\n    if (response.status === 404) {\n      // Only the node's unhosted-space 404 says \"not hosted\"; a missing key is a 404 too.\n      return /space not found/i.test(await response.text()) ? \"not-hosted\" : \"hosted\";\n    }\n    return \"unknown\";\n  } catch {\n    return \"unknown\";\n  }\n}\n\n/**\n * Ask the node whether the space is hosted. A 401/403 registers the session\n * delegation once and asks once more; still refused is `unknown`, as are\n * network failures, 5xx and a session that holds no read.\n */\nexport async function askSpaceHosting(ports: SpaceHostingPorts): Promise<SpaceHosting> {\n  const read = selectRead(ports);\n  if (!read) return \"unknown\";\n  // Only a session that holds a read on the space is answered from what it already saw.\n  // The address in a space id is case-insensitive; the rest of it is not.\n  const key = `${ports.host} ${ports.spaceId.replace(/^(tinycloud:pkh:eip155:\\d+:)(0x[0-9a-fA-F]{40})/, (_, prefix: string, address: string) => prefix + address.toLowerCase())}`;\n  if (hostedBy.get(ports.scope)?.has(key)) return \"hosted\";\n  let outcome = await send(ports, read);\n  if (outcome === \"refused\") {\n    try {\n      await ports.activate(AbortSignal.timeout(TIMEOUT_MS));\n    } catch {\n      return \"unknown\";\n    }\n    outcome = await send(ports, read);\n  }\n  if (outcome === \"hosted\") hostedBy.set(ports.scope, (hostedBy.get(ports.scope) ?? new Set<string>()).add(key));\n  return outcome === \"refused\" ? \"unknown\" : outcome;\n}\n\ntype PrimarySpaceIdentity = Pick<SpaceCreationContext, \"address\" | \"chainId\" | \"spaceId\">;\n\nexport interface PrimarySpaceCreationPorts {\n  handler: ISpaceCreationHandler;\n  session?: PrimarySpaceIdentity;\n  context?: SpaceCreationContext;\n  currentSession?(): unknown;\n  signerAddress?(): Promise<string>;\n  resolveHost?(): Promise<string>;\n  domain?: string;\n  hostName?: string;\n  /** `assertMayCreateSpace`, reporting a refusal to the handler. */\n  guard(context: SpaceCreationContext): Promise<void>;\n  /** Confirm that the host delegation should be submitted. */\n  host(\n    context: SpaceCreationContext,\n    assertCurrent: () => void,\n    siweParameters: (peerId: string) => {\n      address: string;\n      chainId: number;\n      domain: string;\n      issuedAt: string;\n      spaceId: string;\n      peerId: string;\n    },\n  ): Promise<SpaceHostResult>;\n  /** Called once the node has the host delegation. */\n  onHosted(context: SpaceCreationContext): void;\n  /** Register the session delegation again. */\n  activate(context: SpaceCreationContext): Promise<SpaceHostResult>;\n  signal?: AbortSignal;\n}\n/** `<status> - <server text>` for a failed host call. */\nfunction describeFailure(result: SpaceHostResult): string {\n  const text = result.error?.trim();\n  return text ? `${result.status} - ${text}` : `${result.status}`;\n}\n\n/**\n * The guard, confirm, host and re-activate sequence for an unhosted primary\n * space. A declined confirmation ends it quietly; a failure is reported to the\n * handler and thrown.\n */\nexport async function createPrimarySpace({\n  handler,\n  session,\n  context: existingContext,\n  currentSession,\n  signerAddress,\n  resolveHost,\n  domain,\n  hostName,\n  guard,\n  host,\n  onHosted,\n  activate,\n  signal,\n}: PrimarySpaceCreationPorts): Promise<void> {\n  const checkCurrent = () => {\n    signal?.throwIfAborted();\n    if (session && currentSession?.() !== session) throw new Error(\"Space hosting session changed\");\n  };\n  checkCurrent();\n  if (session && signerAddress && (await signerAddress()).toLowerCase() !== session.address.toLowerCase()) return;\n  checkCurrent();\n  const context = existingContext ?? (session && {\n    address: session.address,\n    chainId: session.chainId,\n    spaceId: session.spaceId,\n    host: await resolveHost?.() ?? hostName ?? \"\",\n  });\n  if (!context) throw new Error(\"Space hosting requires a session context\");\n  checkCurrent();\n  await guard(context);\n  checkCurrent();\n  const approved = await handler.confirmSpaceCreation(context);\n  checkCurrent();\n  if (!approved) return;\n\n  try {\n    const created = await host(context, checkCurrent, (peerId) => ({\n      address: context.address,\n      chainId: context.chainId,\n      domain: domain ?? \"\",\n      issuedAt: new Date().toISOString(),\n      spaceId: context.spaceId,\n      peerId,\n    }));\n    if (!created.success) {\n      throw Object.assign(\n        new Error(`Failed to create space ${context.spaceId}: ${describeFailure(created)}`),\n        { cause: created },\n      );\n    }\n  } catch (error) {\n    handler.onSpaceCreationFailed?.(context, error instanceof Error ? error : new Error(String(error)));\n    throw error;\n  }\n  checkCurrent();\n  onHosted(context);\n\n  // Small delay to allow space creation to propagate\n  await new Promise((resolve) => setTimeout(resolve, 100));\n  checkCurrent();\n\n  const retry = await activate(context);\n  checkCurrent();\n  if (!retry.success) {\n    const err = Object.assign(\n      new Error(`Failed to activate session after creating space: ${describeFailure(retry)}`),\n      { cause: retry },\n    );\n    handler.onSpaceCreationFailed?.(context, err);\n    throw err;\n  }\n  handler.onSpaceCreated?.(context);\n}\n"],"mappings":";AA6CA,IAAM,WAAW,oBAAI,QAA6B;AAGlD,IAAM,aAAa;AAGnB,IAAM,kBAAkB;AACxB,IAAM,iBAAiB;AACvB,IAAM,qBAAqB;AAC3B,IAAM,gBAAgB;AACtB,IAAM,oBAAoB;AAE1B,IAAM,WAAW,CAAC,SAChB,SAAS,MAAM,KAAK,SAAS,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,KAAK;AACjF,IAAM,WAAW,CAAC,SAChB,KAAK,SAAS,KAAK,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI,SAAS,MAAM,KAAK;AAE3G,IAAM,QAAQ,CAAC,SAAiB,SAAS,IAAI,IAAI,GAAG,SAAS,IAAI,CAAC,GAAG,eAAe,KAAK;AAOzF,SAAS,WAAW,EAAE,SAAS,YAAY,OAAO,GAAoD;AAEpG,QAAM,OAAO,WAAW,OAAO,CAAC,cAC9B,CAAC,UAAU,SAAS,UACpB,OAAO,WAAW,EAAE,SAAS,SAAS,UAAU,SAAS,MAAM,UAAU,MAAM,QAAQ,UAAU,OAAO,CAAC,CAAC;AAC5G,QAAM,UAAU,CAAC,SAAiB,WAChC,KAAK,OAAO,CAAC,cAAc,OAAO,WAAW,EAAE,SAAS,SAAS,MAAM,UAAU,MAAM,OAAO,CAAC,CAAC;AAElG,SAAO;AAAA,IACL,GAAG,QAAQ,MAAM,cAAc,EAAE,IAAI,CAAC,eAAe;AAAA,MACnD,SAAS;AAAA,MACT,MAAM,SAAS,UAAU,IAAI,IAAI,SAAS,UAAU,IAAI,IAAI,UAAU;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS,EAAE,qBAAqB,IAAI;AAAA,IACtC,EAAE;AAAA,IACF,GAAG,QAAQ,MAAM,kBAAkB,EAAE,IAAI,CAAC,eAAe;AAAA,MACvD,SAAS;AAAA,MAAM,MAAM,MAAM,UAAU,IAAI;AAAA,MAAG,QAAQ;AAAA,IACtD,EAAE;AAAA,IACF,GAAG,QAAQ,SAAS,iBAAiB,EAAE,IAAI,OAAO;AAAA,MAChD,SAAS;AAAA,MAAS,MAAM;AAAA,MAAI,QAAQ;AAAA,MAAmB,MAAM;AAAA,IAC/D,EAAE;AAAA,IACF,GAAG,QAAQ,MAAM,aAAa,EAAE,IAAI,CAAC,eAAe;AAAA,MAClD,SAAS;AAAA,MAAM,MAAM,MAAM,UAAU,IAAI;AAAA,MAAG,QAAQ;AAAA,IACtD,EAAE;AAAA,EACJ,EAAE,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,cAC1B,OAAO,WAAW,EAAE,SAAS,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC;AAChG;AAGA,eAAe,KAAK,OAA0B,MAA2D;AACvG,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI;AACpB,UAAM,WAAW,MAAM,MAAM,MAAM,GAAG,MAAM,IAAI,WAAW;AAAA,MACzD,QAAQ;AAAA,MACR,SAAS,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,SAAS,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,QAAQ,KAAK,OAAO,CAAC,CAAC,GAAG,GAAG,KAAK,QAAQ;AAAA,MACtH,MAAM,KAAK;AAAA,MACX,QAAQ,YAAY,QAAQ,UAAU;AAAA,IACxC,CAAC;AACD,QAAI,SAAS,IAAI;AAEf,UAAI,SAAS,gBAAgB,eAAgB,OAAM,SAAS,KAAK,OAAO,EAAE,MAAM,MAAM,MAAS;AAC/F,aAAO;AAAA,IACT;AACA,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IAAK,QAAO;AAC/D,QAAI,SAAS,WAAW,KAAK;AAE3B,aAAO,mBAAmB,KAAK,MAAM,SAAS,KAAK,CAAC,IAAI,eAAe;AAAA,IACzE;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,eAAsB,gBAAgB,OAAiD;AACrF,QAAM,OAAO,WAAW,KAAK;AAC7B,MAAI,CAAC,KAAM,QAAO;AAGlB,QAAM,MAAM,GAAG,MAAM,IAAI,IAAI,MAAM,QAAQ,QAAQ,mDAAmD,CAAC,GAAG,QAAgB,YAAoB,SAAS,QAAQ,YAAY,CAAC,CAAC;AAC7K,MAAI,SAAS,IAAI,MAAM,KAAK,GAAG,IAAI,GAAG,EAAG,QAAO;AAChD,MAAI,UAAU,MAAM,KAAK,OAAO,IAAI;AACpC,MAAI,YAAY,WAAW;AACzB,QAAI;AACF,YAAM,MAAM,SAAS,YAAY,QAAQ,UAAU,CAAC;AAAA,IACtD,QAAQ;AACN,aAAO;AAAA,IACT;AACA,cAAU,MAAM,KAAK,OAAO,IAAI;AAAA,EAClC;AACA,MAAI,YAAY,SAAU,UAAS,IAAI,MAAM,QAAQ,SAAS,IAAI,MAAM,KAAK,KAAK,oBAAI,IAAY,GAAG,IAAI,GAAG,CAAC;AAC7G,SAAO,YAAY,YAAY,YAAY;AAC7C;AAmCA,SAAS,gBAAgB,QAAiC;AACxD,QAAM,OAAO,OAAO,OAAO,KAAK;AAChC,SAAO,OAAO,GAAG,OAAO,MAAM,MAAM,IAAI,KAAK,GAAG,OAAO,MAAM;AAC/D;AAOA,eAAsB,mBAAmB;AAAA,EACvC;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA6C;AAC3C,QAAM,eAAe,MAAM;AACzB,YAAQ,eAAe;AACvB,QAAI,WAAW,iBAAiB,MAAM,QAAS,OAAM,IAAI,MAAM,+BAA+B;AAAA,EAChG;AACA,eAAa;AACb,MAAI,WAAW,kBAAkB,MAAM,cAAc,GAAG,YAAY,MAAM,QAAQ,QAAQ,YAAY,EAAG;AACzG,eAAa;AACb,QAAM,UAAU,oBAAoB,WAAW;AAAA,IAC7C,SAAS,QAAQ;AAAA,IACjB,SAAS,QAAQ;AAAA,IACjB,SAAS,QAAQ;AAAA,IACjB,MAAM,MAAM,cAAc,KAAK,YAAY;AAAA,EAC7C;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,0CAA0C;AACxE,eAAa;AACb,QAAM,MAAM,OAAO;AACnB,eAAa;AACb,QAAM,WAAW,MAAM,QAAQ,qBAAqB,OAAO;AAC3D,eAAa;AACb,MAAI,CAAC,SAAU;AAEf,MAAI;AACF,UAAM,UAAU,MAAM,KAAK,SAAS,cAAc,CAAC,YAAY;AAAA,MAC7D,SAAS,QAAQ;AAAA,MACjB,SAAS,QAAQ;AAAA,MACjB,QAAQ,UAAU;AAAA,MAClB,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,MACjC,SAAS,QAAQ;AAAA,MACjB;AAAA,IACF,EAAE;AACF,QAAI,CAAC,QAAQ,SAAS;AACpB,YAAM,OAAO;AAAA,QACX,IAAI,MAAM,0BAA0B,QAAQ,OAAO,KAAK,gBAAgB,OAAO,CAAC,EAAE;AAAA,QAClF,EAAE,OAAO,QAAQ;AAAA,MACnB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,wBAAwB,SAAS,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AAClG,UAAM;AAAA,EACR;AACA,eAAa;AACb,WAAS,OAAO;AAGhB,QAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,GAAG,CAAC;AACvD,eAAa;AAEb,QAAM,QAAQ,MAAM,SAAS,OAAO;AACpC,eAAa;AACb,MAAI,CAAC,MAAM,SAAS;AAClB,UAAM,MAAM,OAAO;AAAA,MACjB,IAAI,MAAM,oDAAoD,gBAAgB,KAAK,CAAC,EAAE;AAAA,MACtF,EAAE,OAAO,MAAM;AAAA,IACjB;AACA,YAAQ,wBAAwB,SAAS,GAAG;AAC5C,UAAM;AAAA,EACR;AACA,UAAQ,iBAAiB,OAAO;AAClC;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinycloud/node-sdk",
-  "version": "3.11.1-beta.0",
+  "version": "3.12.0-beta.2",
   "description": "TinyCloud SDK for Node.js with configurable authorization strategies",
   "author": "TinyCloud, Inc.",
   "license": "EGPL",
@@ -29,6 +29,16 @@
         "default": "./dist/encryption-keys.cjs"
       }
     },
+    "./space-hosting": {
+      "import": {
+        "types": "./dist/space-hosting.d.ts",
+        "default": "./dist/space-hosting.js"
+      },
+      "require": {
+        "types": "./dist/space-hosting.d.cts",
+        "default": "./dist/space-hosting.cjs"
+      }
+    },
     "./credential-pending-store": {
       "types": "./dist/credential-pending-store.d.ts",
       "import": "./dist/credential-pending-store.js",