@tinycloud/node-sdk 3.12.0-beta.3 → 3.12.0-beta.5

package/README.md

@@ -8,7 +8,7 @@ Routing uses the complete space URI, not a short space name or a single account-
 
 Encryption is resolved separately: descriptor reads, network creation, and decrypt requests use the signed `encryptionNode`, including its invocation audience. A data-space host does not become an encryption destination, or vice versa.
 
-Explicit `host`, saved-profile hosts, local discovery, and new-user defaults are onboarding hints. The lookup checks v2 first, then v1 to distinguish absence from an existing v1 registration. Cold HTTP5xx, transport errors and timeouts without cached or remembered registration retain configured/default-host compatibility, including direct Core callers without a cache adapter; the verdict is marked `offline`, not genuine registry absence. HTTP4xx refusals, v1-only registrations, corrupt caches, invalid responses, remembered registrations, empty registered memberships and missing encryption destinations never authorize fallback. Signed strings are validated without rewriting them.
+Explicit `host`, saved-profile hosts, local discovery, and new-user defaults are onboarding hints only after the reachable registry confirms genuine absence. The lookup checks v2 first, then v1 to distinguish absence from an existing v1 registration. Cold HTTP5xx, transport errors and timeouts without saved settings refuse live routing with `registry_unavailable`; neither a configured/default host nor `onNodeNotFound` may override that refusal. Low-level background lookup may still describe an offline unregistered verdict, but policy lookups do not authorize it. HTTP4xx refusals, v1-only registrations, corrupt caches, invalid responses, remembered registrations, empty registered memberships and missing encryption destinations never authorize fallback. Signed strings are validated without rewriting them.
 
 `NodeNotRespondingError` has code `NODE_NOT_RESPONDING`. Registry refusals and node-identity mismatches remain distinct errors. Multi-node writes are not atomic: `PartialNodeWriteError` exposes `succeeded` URLs and `failed` destinations/statuses/causes so callers do not mistake incomplete writes for success.
 
@@ -32,7 +32,7 @@ Each caller retains registration evidence observed before joining an in-flight r
 
 Restored host hints install alongside the replacement session and service graph. Subsequent public delegation preparation uses that installed hint when fresh routing permits onboarding; verified signed destinations still take precedence.
 
-Actual cold fallback logs `registry unavailable; using the default node`; warm fallback logs `Storage settings are unreachable; using cached settings checked less than 1 hour ago.` Each diagnostic is emitted once per owner/client cache and fallback kind, only after a route is selected. `onRegistryFallback(reason, code?)` collects these value-free diagnostics instead of the default console warning; semantic codes are `using_default_node` and `using_cached_settings`. Background refresh alone does not warn.
+With no saved settings, an unreachable registry refuses before data requests; it does not select a default host or emit a default-host warning. Warm fallback still logs `Storage settings are unreachable; using cached settings checked less than 1 hour ago.` once per owner/client cache after selecting the verified cached route. `onRegistryFallback(reason, code?)` collects that value-free diagnostic instead of the default console warning, using `using_cached_settings`. Background refresh alone does not warn. CLI errors keep `REGISTRY_UNAVAILABLE` and explain that no settings are saved on this computer.
 
 This is a client cache: a node that performs online registry admission still needs its own registry connectivity. It is not a whole-service-outage guarantee.
 

package/dist/{NodeUserAuthorization-B_TFUlua.d.cts → NodeUserAuthorization-D41H1_c0.d.cts}

@@ -102,6 +102,7 @@ interface OpenKeyAuthorizeTinyCloud {
 interface OpenKeyBridgeInput {
     protocolVersion: 1;
     siwe: string;
+    /** The public session key. The bridge sends only its public members to OpenKey. */
     jwk: Record<string, unknown>;
     /** SDK-prepared session-key DID, for local handoff consistency only; not an OpenKey request field. */
     readonly verificationMethod: string;

package/dist/{NodeUserAuthorization-B_TFUlua.d.ts → NodeUserAuthorization-D41H1_c0.d.ts}

@@ -102,6 +102,7 @@ interface OpenKeyAuthorizeTinyCloud {
 interface OpenKeyBridgeInput {
     protocolVersion: 1;
     siwe: string;
+    /** The public session key. The bridge sends only its public members to OpenKey. */
     jwk: Record<string, unknown>;
     /** SDK-prepared session-key DID, for local handoff consistency only; not an OpenKey request field. */
     readonly verificationMethod: string;

package/dist/{TinyCloudNode-Brcu8QoX.d.cts → TinyCloudNode-B0pKoTaw.d.cts}

@@ -3,7 +3,7 @@ import { TinyCloudSession, TelemetryConfig, ServiceContext, IKVService, ISQLServ
 import { ReplicaPurgeFailedEvent, ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction, RequestSink, RequestLogReader } from '@tinycloud/sdk-services';
 import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
-import { S as SpaceHosting, c as SignStrategy, a as NodeUserAuthorization, P as PreparedOpenKeyAuthorization } from './NodeUserAuthorization-B_TFUlua.cjs';
+import { S as SpaceHosting, c as SignStrategy, a as NodeUserAuthorization, P as PreparedOpenKeyAuthorization } from './NodeUserAuthorization-D41H1_c0.cjs';
 import { P as PortableDelegation, S as SessionGrantProof, e as VerifiedSessionGrant } from './delegation-CeOWDnBB.cjs';
 
 /**
@@ -886,7 +886,7 @@ declare class TinyCloudNode {
     signIn(options?: SignInOptions): Promise<void>;
     /**
      * Fresh OpenKey sign-in. The callback receives the SDK's original SIWE and
-     * session JWK before approval; the signed result is verified against those
+     * public session JWK before approval; the signed result is verified against those
      * bytes before the network session or replica stamp is committed.
      */
     signInWithOpenKey(authorizeFn: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[0], options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<void>;

package/dist/{TinyCloudNode-DBJUnsMN.d.ts → TinyCloudNode-DvzCZgJX.d.ts}

@@ -3,7 +3,7 @@ import { TinyCloudSession, TelemetryConfig, ServiceContext, IKVService, ISQLServ
 import { ReplicaPurgeFailedEvent, ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction, RequestSink, RequestLogReader } from '@tinycloud/sdk-services';
 import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
-import { S as SpaceHosting, c as SignStrategy, a as NodeUserAuthorization, P as PreparedOpenKeyAuthorization } from './NodeUserAuthorization-B_TFUlua.js';
+import { S as SpaceHosting, c as SignStrategy, a as NodeUserAuthorization, P as PreparedOpenKeyAuthorization } from './NodeUserAuthorization-D41H1_c0.js';
 import { P as PortableDelegation, S as SessionGrantProof, e as VerifiedSessionGrant } from './delegation-CeOWDnBB.js';
 
 /**
@@ -886,7 +886,7 @@ declare class TinyCloudNode {
     signIn(options?: SignInOptions): Promise<void>;
     /**
      * Fresh OpenKey sign-in. The callback receives the SDK's original SIWE and
-     * session JWK before approval; the signed result is verified against those
+     * public session JWK before approval; the signed result is verified against those
      * bytes before the network session or replica stamp is committed.
      */
     signInWithOpenKey(authorizeFn: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[0], options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<void>;

package/dist/{authority-DQ6R1HEG.d.cts → authority-Bu8hivr-.d.cts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-Brcu8QoX.cjs';
+import { T as TinyCloudNode } from './TinyCloudNode-B0pKoTaw.cjs';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {

package/dist/{authority-BFc5lesl.d.ts → authority-D9JwzD7C.d.ts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-DBJUnsMN.js';
+import { T as TinyCloudNode } from './TinyCloudNode-DvzCZgJX.js';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {