@tinycloud/node-sdk 3.12.0-beta.1 → 3.12.0-beta.3

package/dist/{TinyCloudNode-C24728N_.d.cts → TinyCloudNode-DBJUnsMN.d.ts}

@@ -1,10 +1,10 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
-import { TinyCloudSession, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, Delegation, IWasmBindings, ISigner, StorageFullEvent, IStorageService, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, ISessionStorage, INotificationHandler, IENSResolver, ISpaceCreationHandler, SiweConfig, Manifest, ComposedManifestRequest, RetryPolicy, ReplicationOptions, KVReplicaStorage, PermissionEntry, AccountService, SignInOptions, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
+import { TinyCloudSession, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, Delegation, IWasmBindings, ISigner, StorageFullEvent, IStorageService, RegistryPolicy, RegistrySequenceStore, RegistryCacheStore, RegistryFallbackReason, OnNodeNotFound, LocalNodeIdentityStore, ISessionStorage, INotificationHandler, IENSResolver, ISpaceCreationHandler, SiweConfig, Manifest, ComposedManifestRequest, RetryPolicy, ReplicationOptions, KVReplicaStorage, PermissionEntry, AccountService, SignInOptions, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
 import { ReplicaPurgeFailedEvent, ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction, RequestSink, RequestLogReader } from '@tinycloud/sdk-services';
 import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
-import { S as SpaceHosting, c as SignStrategy, a as NodeUserAuthorization, P as PreparedOpenKeyAuthorization } from './NodeUserAuthorization-BtoDI9in.cjs';
-import { P as PortableDelegation, S as SessionGrantProof, e as VerifiedSessionGrant } from './delegation-BQbAuKad.cjs';
+import { S as SpaceHosting, c as SignStrategy, a as NodeUserAuthorization, P as PreparedOpenKeyAuthorization } from './NodeUserAuthorization-B_TFUlua.js';
+import { P as PortableDelegation, S as SessionGrantProof, e as VerifiedSessionGrant } from './delegation-CeOWDnBB.js';
 
 /**
  * The handles needed to rehydrate this delegation activation in a fresh
@@ -192,32 +192,15 @@ interface TinyCloudNodeConfig {
     signer?: ISigner;
     /** Strategy for root signature requests. Defaults to auto-sign for local keys. */
     signStrategy?: SignStrategy;
-    /** Explicit TinyCloud server URL. When omitted, signIn resolves the user's host. */
+    /** Host hint for genuine no-entry onboarding; a signed registry entry takes precedence. */
     host?: string;
     /** Build a developer request log (sanitized, in-memory, bounded). Off by default. */
     requestLog?: boolean;
     /** TinyCloud location registry URL. Default: https://registry.tinycloud.xyz. */
     tinycloudRegistryUrl?: string | null;
-    /**
-     * Fallback TinyCloud hosts. Default: hosted TinyCloud node. Used only by the
-     * default `registryPolicy` ("legacy-fallback"), whose silent fallback is
-     * deprecated and will be removed in a future major release.
-     */
+    /** Host hints for genuine no-entry onboarding. Never used for registered or unavailable owners. */
     tinycloudFallbackHosts?: string[] | null;
-    /**
-     * How sign-in uses the location registry when no `host` is configured.
-     * Default `"legacy-fallback"` (deprecated): a registry miss or failure
-     * silently uses `tinycloudFallbackHosts`, with a one-time warning.
-     * `"fail-closed"`: routing acts on the registry verdict for the signer
-     * address, an unavailable registry is `RegistryUnavailableError` (never a
-     * new account), record hosts are used only if HTTPS or loopback, and
-     * automatic space creation (sign-in, account bootstrap, owned-space
-     * hosting, the public space the vault creates) is refused on a host the
-     * owner's registry record does not list (`NodeRegistryEntryExistsError`)
-     * or when the registry gives no verdict. An explicit `hostOwnedSpace()`
-     * call is not guarded. `newUserHost` governs routing only: a pinned host
-     * may still create spaces for an unregistered owner.
-     */
+    /** Registry routing is always v2-first and fail-closed. */
     registryPolicy?: RegistryPolicy;
     /** `fail-closed` only: host for owners with no registry record. Default https://node.tinycloud.xyz; `null` refuses them with `NodeNotFoundError`. */
     newUserHost?: string | null;
@@ -225,9 +208,13 @@ interface TinyCloudNodeConfig {
     registryChainId?: number;
     /** `fail-closed` only: highest registry sequence seen per owner. Default: in-memory for this client. */
     registrySequenceStore?: RegistrySequenceStore;
-    /** `fail-closed` only: retry, use another host (not identity-checked; it persists with the session), or abort when sign-in resolves no host. Without it, sign-in throws. */
+    /** Exact signed-v2 responses; pass a persistent adapter to survive restarts. */
+    registryCacheStore?: RegistryCacheStore;
+    /** Value-free warning after an actual cached-settings or default-node fallback. */
+    onRegistryFallback?: (reason: string, code?: RegistryFallbackReason) => void;
+    /** Retry or abort when registry resolution fails; `use-host` is accepted only for genuine no-entry onboarding. */
     onNodeNotFound?: OnNodeNotFound;
-    /** Probe configured/registered local nodes before registry/fallback resolution. Default: true. */
+    /** Probe configured local nodes only for genuine no-entry onboarding. Default: true. */
     autoDiscoverLocalNode?: boolean;
     /** Local loopback node URL to probe. Omit to avoid probing loopback. */
     localNodeUrl?: string;
@@ -487,6 +474,7 @@ declare class TinyCloudNode {
     static registerNodeDefaults(defaults: NodeDefaults): void;
     private config;
     private readonly explicitHost?;
+    private readonly registryRefreshOwners;
     private signer;
     private auth;
     private readonly consumedOpenKeyPendings;
@@ -698,6 +686,8 @@ declare class TinyCloudNode {
      * `unknown` answer leaves the previous one in place.
      */
     checkSpaceHosting(space?: string): Promise<SpaceHosting>;
+    /** Run the existing primary-space creation flow for the restored session. */
+    ensurePrimarySpaceHosted(hosting: SpaceHosting): Promise<void>;
     /**
      * The node's last answer for the primary space: recorded at sign-in from the
      * activation, or by {@link checkSpaceHosting}. `unknown` after a restore until
@@ -756,7 +746,12 @@ declare class TinyCloudNode {
     private shouldUseBootstrapSignInRequest;
     /** Sanitized developer request events; undefined unless the node was built with `requestLog: true`. */
     get requests(): RequestLogReader | undefined;
+    private throwRegistryRefusal;
     private createServiceGraphLifetime;
+    private routingDestinations;
+    /** Transport hints cannot override verified full-resource registry routing. */
+    resolveRegisteredDelegationHost(permissions: readonly PermissionEntry[], noEntryHost: string): Promise<string | undefined>;
+    private bindRoutedAudience;
     private syncResolvedHostFromAuth;
     /**
      * Install or replace the manifest that drives the SIWE recap at
@@ -809,6 +804,9 @@ declare class TinyCloudNode {
      * rather than treating a malformed session as unrestricted authority.
      */
     getVerifiedSessionCapabilities(): PermissionEntry[];
+    /** Start one background refresh for each owner derived from verified authority. */
+    refreshRegistryForCapabilities(permissions: readonly PermissionEntry[]): void;
+    private refreshRegistryOwner;
     /** Normalize signed capabilities without collapsing nested encryption into raw authority. */
     private projectSignedRecapCapabilities;
     /**
@@ -1051,23 +1049,15 @@ declare class TinyCloudNode {
      * session's recap doesn't cover it and the registry has no record; the host
      * SIWE is idempotent server-side. Must be called after {@link signIn}.
      *
-     * Under `registryPolicy: "fail-closed"`, hosting is refused with
-     * `NodeRegistryEntryExistsError` when the owner's registry record does not
-     * list the host, or `RegistryUnavailableError` when the registry gives no
-     * verdict. {@link hostOwnedSpace} itself is an explicit action and is not
-     * guarded.
+     * Current signed per-space membership is checked before both automatic and
+     * explicit hosting. Registered replicas use the session grant; no-entry
+     * onboarding retains the host-SIWE flow.
      *
      * @param name - The owned space name (e.g. `"secrets"`).
      * @returns The hosted owned-space URI.
      */
     ensureOwnedSpaceHosted(name: string): Promise<string>;
-    /**
-     * Space-creation guard (TC-1443) for the automatic hosting paths: sign-in's
-     * owned spaces, account bootstrap, {@link ensureOwnedSpaceHosted} and
-     * {@link ensurePublicSpace}. Only `registryPolicy: "fail-closed"` consults
-     * the registry ({@link NodeUserAuthorization.assertMayCreateSpace}); the
-     * default policy performs no lookup.
-     */
+    /** Refresh full-space membership before any automatic or explicit hosting. */
     private assertMayCreateSpace;
     /** Registry-policy settings shared by every authorization this client creates. */
     private registryPolicyConfig;
@@ -1149,13 +1139,8 @@ declare class TinyCloudNode {
          */
         expiresAt?: string;
         /**
-         * The TinyCloud hosts this session was created against (from
-         * {@link PersistedSessionData.tinycloudHosts}). When present they are
-         * adopted so the restored session targets the same node as the
-         * original sign-in — without this, service calls fall back to the
-         * default host and the auth layer throws "TinyCloud hosts have not
-         * been resolved". When absent (old persisted session) hosts resolve
-         * lazily via the registry/fallback on the first host-needing call.
+         * Persisted node origins are no-entry hints only. Restore resolves the
+         * current signed entry before selecting any data destination.
          */
         tinycloudHosts?: string[];
         /**
@@ -1171,21 +1156,6 @@ declare class TinyCloudNode {
     }): Promise<void>;
     private stagePrimarySessionState;
     private stageRestoredServiceGraph;
-    /**
-     * Resolve the host a restored session should target.
-     *
-     * Mirrors fresh sign-in host resolution but for the restore path:
-     * an explicit/pinned host always wins, then the hosts the session was
-     * persisted with, then a lazy registry/fallback resolution for sessions
-     * that predate the persisted `tinycloudHosts` field. Returns `undefined`
-     * only when there's nothing to resolve from (no explicit host, no
-     * persisted hosts, and no address/chainId) — in which case the existing
-     * `config.host` (default) is left in place.
-     *
-     * Resolution failures are surfaced, not swallowed: a genuinely broken
-     * registry lookup throws rather than silently falling back to a wrong host.
-     */
-    private resolveRestoredHost;
     /**
      * Resolve the currently-active TinyCloudSession, preferring the auth
      * layer's value (wallet mode) and falling back to the node-level
@@ -1288,6 +1258,7 @@ declare class TinyCloudNode {
      */
     private fetchNodeId;
     private signRawNetworkAuthorization;
+    private encryptionDestination;
     private fetchEncryptionNetworkAt;
     private createEncryptionService;
     private getEncryptionService;
@@ -1534,6 +1505,9 @@ declare class TinyCloudNode {
      * which also refuses decrypt-only grants.
      */
     verifySessionGrant(grant: SessionGrantProof): VerifiedSessionGrant;
+    private activateResourceSession;
+    private activateRoutedDelegation;
+    private activateSignedSession;
     /**
      * Install a portable runtime permission delegation into this SDK instance so
      * matching service calls and downstream `delegateTo()` calls can use it.

package/dist/{authority-BQN2Z3st.d.ts → authority-BFc5lesl.d.ts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-DLrINr98.js';
+import { T as TinyCloudNode } from './TinyCloudNode-DBJUnsMN.js';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {

package/dist/{authority-DDdheOL6.d.cts → authority-DQ6R1HEG.d.cts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-C24728N_.cjs';
+import { T as TinyCloudNode } from './TinyCloudNode-Brcu8QoX.cjs';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {