@tinycloud/node-sdk 3.2.0-beta.2 → 3.2.0-beta.4

package/dist/{core-DjLtgeVT.d.cts → WasmKeyProvider-DjfRu9aL.d.cts}

@@ -1,5 +1,5 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
-import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ClientSession, TinyCloudSession, Extension, SignRequest, SpaceHostResult, SignInOptions, CapabilityPresentationEnvelopeV1, Delegation, DelegatedResource, PermissionEntry, TelemetryConfig, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, INotificationHandler, IENSResolver, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, CreateDelegationParams, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ResolvedDelegate, KeyProvider, JWK } from '@tinycloud/sdk-core';
+import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, ClientSession, TinyCloudSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, CapabilityPresentationEnvelopeV1, Delegation, DelegatedResource, TelemetryConfig, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, INotificationHandler, IENSResolver, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, CreateDelegationParams, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate, KeyProvider, JWK } from '@tinycloud/sdk-core';
 import { EventEmitter } from 'events';
 import { InvokeFunction, InvokeAnyFunction } from '@tinycloud/sdk-services';
 
@@ -242,6 +242,14 @@ interface NodeUserAuthorizationConfig {
     capabilityRequest?: ComposedManifestRequest;
     /** Include canonical account registry read/create-update/list permissions when composing `manifest` and plain sign-in. Default true. */
     includeAccountRegistryPermissions?: boolean;
+    /**
+     * Replication sign-in augmentation (TC-858 §4.1): prefixes whose reads a
+     * local replica may serve. For each prefix the session request gains one
+     * `kv` entry `{get, sync}` on the primary space — but only where an
+     * unrestricted `get` covering it is already requested. Storage and
+     * scheduling never reach this layer.
+     */
+    replication?: Pick<ReplicationOptions, "enabled" | "prefixes" | "allowSecrets">;
 }
 interface CreateBootstrapSessionOptions {
     spaceId: string;
@@ -301,6 +309,7 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     private readonly expectedNodeDid?;
     private readonly localNodeIdentityStore?;
     private readonly enablePublicSpace;
+    private readonly replication?;
     private readonly nonce?;
     private readonly siweConfig?;
     private readonly wasm;
@@ -430,6 +439,50 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      */
     private getCapabilityRequest;
     private resolveSpaceName;
+    /**
+     * The plain-session primary abilities: `defaultActions` (the shared table)
+     * unless the primary space IS the account space, where account-registry
+     * permissions merge into a private clone so the shared table is never
+     * mutated. Shared between `resolveSignInCapabilities` and
+     * `signInPermissionInputs` so sign-in and `replicationSignInEntries`
+     * can't disagree (§4.6).
+     */
+    private primaryActionsForSignIn;
+    /**
+     * The abilities a `spacePrefix: "secrets"` plain session actually requests
+     * for its primary space: the vault-secrets subtree only — the
+     * `defaultActions` root `get` is REPLACED, not merged (sign-in installs
+     * this map under the primary space id). Shared between
+     * `resolveSignInCapabilities` and `signInPermissionInputs` so the
+     * replication augmentation measures coverage against the effective
+     * pre-replication request, never the uninstalled `primaryActions` (§4.1).
+     */
+    private secretsPrimaryAbilities;
+    /**
+     * The effective sign-in request as `PermissionEntry`s plus the resolved
+     * primary space id — the inputs to the replication augmentation (§4.1).
+     * `resolveSignInCapabilities` merges the augmented entries into its
+     * abilities; `replicationSignInEntries()` returns them verbatim, so the
+     * entries the SIWE recap carries and the restore check sees are the same.
+     */
+    private signInPermissionInputs;
+    /**
+     * Merge replication augmentation entries into a space's abilities map
+     * without mutating shared tables (`defaultActions` may back the base map):
+     * the primary entry in `spaceAbilities` is replaced with a copy whose `kv`
+     * paths gain `get`/`sync`. Returns the merged map for `abilities`.
+     */
+    private mergeReplicationEntries;
+    /**
+     * The replication entries this authorization's sign-in request carries
+     * for the signed-in or restored address (TC-858 §4.1/§4.6): the output of
+     * the same augmentation `resolveSignInCapabilities` runs — one
+     * `{tinycloud.kv, primarySpace, prefix, [get, sync]}` per configured
+     * prefix that already has an unrestricted covering `get` and passes the
+     * secrets opt-in gate. Empty when replication is off or no address is
+     * known. Pure.
+     */
+    replicationSignInEntries(): PermissionEntry[];
     private defaultEncryptionNetworkId;
     private resolveSignInCapabilities;
     /**
@@ -470,7 +523,7 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      * keeps its HTTP status (e.g. a typed 401/403) instead of collapsing to
      * `false`.
      */
-    hostOwnedSpaceResult(spaceId: string, purpose?: SignRequest["purpose"]): Promise<SpaceHostResult>;
+    hostOwnedSpaceResult(spaceId: string, purpose?: SignRequest["purpose"], signal?: AbortSignal): Promise<SpaceHostResult>;
     /**
      * Ensure the user's space exists on the TinyCloud server.
      * Creates the space if it doesn't exist and autoCreateSpace is enabled.
@@ -1197,6 +1250,11 @@ interface TinyCloudNodeConfig {
     autoBootstrapAccount?: boolean;
     /** Default-off service telemetry. */
     telemetry?: TelemetryConfig;
+    /** Optional read-through replica configuration; disabled unless explicitly enabled. */
+    replication?: ReplicationOptions & {
+        storage: KVReplicaStorage;
+        mode?: "background" | "foreground";
+    };
 }
 /**
  * Options for {@link TinyCloudNode.delegateTo}.
@@ -1263,6 +1321,56 @@ interface EnsureEncryptionNetworkOptions {
      */
     assumeMissing?: boolean;
 }
+interface RuntimePermissionOperation {
+    spaceId?: string;
+    resource?: string;
+    service: string;
+    path: string;
+    action: string;
+    /** Exact signed ReCap attenuation for this action, if any. */
+    caveats?: Record<string, unknown>[];
+}
+/**
+ * The parent `delegateTo` would sign under (TC-858 §4.3): the session's own
+ * delegation CID on the session path, or the selected runtime grant's
+ * session CID on the runtime path. Refusals classify why no authority can
+ * be derived; `expiredAt`/`missing`/`granted`/`caveated` let `delegateTo`
+ * reproduce its exact typed errors from the same decision.
+ */
+type DelegationPlan = {
+    path: "session";
+    parentCid: string;
+    expiresAt: number;
+    effectiveExpiration: Date;
+} | {
+    path: "runtime";
+    parentCid: string;
+    expiresAt: number;
+    effectiveExpiration: Date;
+    grant: RuntimePermissionGrant;
+    operations: RuntimePermissionOperation[];
+} | {
+    refused: "NOT_COVERED" | "CAVEATED_AUTHORITY" | "SESSION_EXPIRING";
+    expiredAt?: Date;
+    missing?: PermissionEntry[];
+    granted?: PermissionEntry[];
+    caveated?: PermissionEntry[];
+};
+interface RuntimePermissionGrant {
+    session: ServiceSession;
+    delegation: PortableDelegation;
+    operations: RuntimePermissionOperation[];
+    expiresAt: Date;
+    /**
+     * Where this grant came from. Drives precedence in
+     * {@link TinyCloudNode.findGrantForOperations} (a `"primary"` grant — the
+     * synthetic representation of the base session's own recap — always
+     * out-ranks other covering grants) and gates the public-surface guardrails
+     * that must never surface the synthetic primary grant. Optional so existing
+     * test constructors and older call sites remain valid.
+     */
+    provenance?: "primary" | "bootstrap" | "delegated" | "runtime";
+}
 /**
  * High-level TinyCloud API for Node.js environments.
  *
@@ -1314,6 +1422,11 @@ declare class TinyCloudNode {
     private _serviceGraph;
     private _serviceContext?;
     private _kv?;
+    private readonly replicationRuntime?;
+    private replicationRuntimeInstance?;
+    private replicationDelegateSession?;
+    private replicationScopeError?;
+    private readonly replicationControl?;
     private _sql?;
     private _duckdb?;
     private _hooks?;
@@ -1351,6 +1464,8 @@ declare class TinyCloudNode {
     private readonly confirmedHostedSpaceIds;
     /** Serializes account-registry writes for the active node instance. */
     private accountRegistryTail;
+    /** Bounds best-effort registry work on the sign-in critical path. */
+    private accountRegistryDeadlineMs;
     private pendingAccountRegistrySync?;
     /**
      * TinyCloudSession captured by {@link restoreSession} when there's no
@@ -1569,6 +1684,7 @@ declare class TinyCloudNode {
      */
     private registerPrimarySessionGrant;
     private writeManifestRegistryRecords;
+    private createAccountRegistryServices;
     private scheduleAccountRegistrySync;
     private enqueueAccountRegistryOperation;
     /**
@@ -1823,6 +1939,7 @@ declare class TinyCloudNode {
      * @internal
      */
     private initializeServices;
+    private attachReplicationKV;
     private createSpaceScopedKVService;
     getDefaultEncryptionNetworkId(name?: string): string;
     getEncryptionNetworkIdForSpace(spaceId: string, name?: string): string;
@@ -2282,6 +2399,42 @@ declare class TinyCloudNode {
      *   delegation.
      */
     delegateTo(did: string, permissions: PermissionEntry[], options?: DelegateToOptions): Promise<DelegateToResult>;
+    /**
+     * What `delegateTo` would select for `entries`, without signing or any
+     * network call (TC-858 plan v3 §4.3): the session path when the signed
+     * recap covers every entry, the runtime-grant path otherwise, or a
+     * refusal. A refusal of `CAVEATED_AUTHORITY` means coverage exists only
+     * through caveated branches, which the action-only WASM child-delegation
+     * boundary cannot preserve — replication never derives authority through
+     * them. `expiredAt`/`missing`/`granted`/`caveated` carry the payload
+     * `delegateTo` turns back into its typed errors.
+     * @internal
+     */
+    private planDerivation;
+    /**
+     * The plan `delegateTo(device, entries)` would follow, as a pure lookup:
+     * no WASM sign and no `POST /delegate`. Backs
+     * `ReplicationAuthority.plan` (and `mint` inside it) so a predicted
+     * parent and expiry can never disagree with what a mint would use (§4.3,
+     * §4.4). Session expiry inside the 60 s margin refuses with
+     * `SESSION_EXPIRING`; the same check delegateTo performs.
+     * @internal
+     */
+    planDelegation(entries: PermissionEntry[], options?: {
+        expiry?: string | number;
+    }): DelegationPlan;
+    /**
+     * The replication entries this node's sign-in request carries for the
+     * current replication config and the signed-in or restored address: the
+     * output of the same augmentation step `resolveSignInCapabilities` runs,
+     * with the unrestricted-get and secrets gates applied (§4.1, §4.6).
+     * Empty when replication is off or no address is known. Pure.
+     */
+    replicationSignInEntries(): PermissionEntry[];
+    private replicationAuthority;
+    private bindReplicationRuntime;
+    /** Stable control facade for this node's optional replication runtime. */
+    get replication(): ReplicationControl | undefined;
     /**
      * Materialize one manifest-declared delegation using the current session key.
      * Delivery is intentionally out of band; callers decide how to transmit the
@@ -2325,6 +2478,13 @@ declare class TinyCloudNode {
      * it only accepts action maps, so reject the selected constrained branch.
      */
     private assertRuntimeGrantCaveatsPreservable;
+    /**
+     * The entries of `grant` that cover a requested operation while carrying
+     * caveats — the branches {@link assertRuntimeGrantCaveatsPreservable}
+     * rejects and {@link planDerivation} classifies as `CAVEATED_AUTHORITY`.
+     * Shared so the pure plan and the mint path can't disagree.
+     */
+    private caveatedRuntimeGrantEntries;
     /** Reject caveated parent branches before action-only child signing. */
     private assertPortableDelegationCaveatsPreservable;
     private shortServiceName;

package/dist/{core-DjLtgeVT.d.ts → WasmKeyProvider-DjfRu9aL.d.ts}

@@ -1,5 +1,5 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
-import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ClientSession, TinyCloudSession, Extension, SignRequest, SpaceHostResult, SignInOptions, CapabilityPresentationEnvelopeV1, Delegation, DelegatedResource, PermissionEntry, TelemetryConfig, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, INotificationHandler, IENSResolver, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, CreateDelegationParams, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ResolvedDelegate, KeyProvider, JWK } from '@tinycloud/sdk-core';
+import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, ClientSession, TinyCloudSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, CapabilityPresentationEnvelopeV1, Delegation, DelegatedResource, TelemetryConfig, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, INotificationHandler, IENSResolver, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, CreateDelegationParams, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate, KeyProvider, JWK } from '@tinycloud/sdk-core';
 import { EventEmitter } from 'events';
 import { InvokeFunction, InvokeAnyFunction } from '@tinycloud/sdk-services';
 
@@ -242,6 +242,14 @@ interface NodeUserAuthorizationConfig {
     capabilityRequest?: ComposedManifestRequest;
     /** Include canonical account registry read/create-update/list permissions when composing `manifest` and plain sign-in. Default true. */
     includeAccountRegistryPermissions?: boolean;
+    /**
+     * Replication sign-in augmentation (TC-858 §4.1): prefixes whose reads a
+     * local replica may serve. For each prefix the session request gains one
+     * `kv` entry `{get, sync}` on the primary space — but only where an
+     * unrestricted `get` covering it is already requested. Storage and
+     * scheduling never reach this layer.
+     */
+    replication?: Pick<ReplicationOptions, "enabled" | "prefixes" | "allowSecrets">;
 }
 interface CreateBootstrapSessionOptions {
     spaceId: string;
@@ -301,6 +309,7 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     private readonly expectedNodeDid?;
     private readonly localNodeIdentityStore?;
     private readonly enablePublicSpace;
+    private readonly replication?;
     private readonly nonce?;
     private readonly siweConfig?;
     private readonly wasm;
@@ -430,6 +439,50 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      */
     private getCapabilityRequest;
     private resolveSpaceName;
+    /**
+     * The plain-session primary abilities: `defaultActions` (the shared table)
+     * unless the primary space IS the account space, where account-registry
+     * permissions merge into a private clone so the shared table is never
+     * mutated. Shared between `resolveSignInCapabilities` and
+     * `signInPermissionInputs` so sign-in and `replicationSignInEntries`
+     * can't disagree (§4.6).
+     */
+    private primaryActionsForSignIn;
+    /**
+     * The abilities a `spacePrefix: "secrets"` plain session actually requests
+     * for its primary space: the vault-secrets subtree only — the
+     * `defaultActions` root `get` is REPLACED, not merged (sign-in installs
+     * this map under the primary space id). Shared between
+     * `resolveSignInCapabilities` and `signInPermissionInputs` so the
+     * replication augmentation measures coverage against the effective
+     * pre-replication request, never the uninstalled `primaryActions` (§4.1).
+     */
+    private secretsPrimaryAbilities;
+    /**
+     * The effective sign-in request as `PermissionEntry`s plus the resolved
+     * primary space id — the inputs to the replication augmentation (§4.1).
+     * `resolveSignInCapabilities` merges the augmented entries into its
+     * abilities; `replicationSignInEntries()` returns them verbatim, so the
+     * entries the SIWE recap carries and the restore check sees are the same.
+     */
+    private signInPermissionInputs;
+    /**
+     * Merge replication augmentation entries into a space's abilities map
+     * without mutating shared tables (`defaultActions` may back the base map):
+     * the primary entry in `spaceAbilities` is replaced with a copy whose `kv`
+     * paths gain `get`/`sync`. Returns the merged map for `abilities`.
+     */
+    private mergeReplicationEntries;
+    /**
+     * The replication entries this authorization's sign-in request carries
+     * for the signed-in or restored address (TC-858 §4.1/§4.6): the output of
+     * the same augmentation `resolveSignInCapabilities` runs — one
+     * `{tinycloud.kv, primarySpace, prefix, [get, sync]}` per configured
+     * prefix that already has an unrestricted covering `get` and passes the
+     * secrets opt-in gate. Empty when replication is off or no address is
+     * known. Pure.
+     */
+    replicationSignInEntries(): PermissionEntry[];
     private defaultEncryptionNetworkId;
     private resolveSignInCapabilities;
     /**
@@ -470,7 +523,7 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      * keeps its HTTP status (e.g. a typed 401/403) instead of collapsing to
      * `false`.
      */
-    hostOwnedSpaceResult(spaceId: string, purpose?: SignRequest["purpose"]): Promise<SpaceHostResult>;
+    hostOwnedSpaceResult(spaceId: string, purpose?: SignRequest["purpose"], signal?: AbortSignal): Promise<SpaceHostResult>;
     /**
      * Ensure the user's space exists on the TinyCloud server.
      * Creates the space if it doesn't exist and autoCreateSpace is enabled.
@@ -1197,6 +1250,11 @@ interface TinyCloudNodeConfig {
     autoBootstrapAccount?: boolean;
     /** Default-off service telemetry. */
     telemetry?: TelemetryConfig;
+    /** Optional read-through replica configuration; disabled unless explicitly enabled. */
+    replication?: ReplicationOptions & {
+        storage: KVReplicaStorage;
+        mode?: "background" | "foreground";
+    };
 }
 /**
  * Options for {@link TinyCloudNode.delegateTo}.
@@ -1263,6 +1321,56 @@ interface EnsureEncryptionNetworkOptions {
      */
     assumeMissing?: boolean;
 }
+interface RuntimePermissionOperation {
+    spaceId?: string;
+    resource?: string;
+    service: string;
+    path: string;
+    action: string;
+    /** Exact signed ReCap attenuation for this action, if any. */
+    caveats?: Record<string, unknown>[];
+}
+/**
+ * The parent `delegateTo` would sign under (TC-858 §4.3): the session's own
+ * delegation CID on the session path, or the selected runtime grant's
+ * session CID on the runtime path. Refusals classify why no authority can
+ * be derived; `expiredAt`/`missing`/`granted`/`caveated` let `delegateTo`
+ * reproduce its exact typed errors from the same decision.
+ */
+type DelegationPlan = {
+    path: "session";
+    parentCid: string;
+    expiresAt: number;
+    effectiveExpiration: Date;
+} | {
+    path: "runtime";
+    parentCid: string;
+    expiresAt: number;
+    effectiveExpiration: Date;
+    grant: RuntimePermissionGrant;
+    operations: RuntimePermissionOperation[];
+} | {
+    refused: "NOT_COVERED" | "CAVEATED_AUTHORITY" | "SESSION_EXPIRING";
+    expiredAt?: Date;
+    missing?: PermissionEntry[];
+    granted?: PermissionEntry[];
+    caveated?: PermissionEntry[];
+};
+interface RuntimePermissionGrant {
+    session: ServiceSession;
+    delegation: PortableDelegation;
+    operations: RuntimePermissionOperation[];
+    expiresAt: Date;
+    /**
+     * Where this grant came from. Drives precedence in
+     * {@link TinyCloudNode.findGrantForOperations} (a `"primary"` grant — the
+     * synthetic representation of the base session's own recap — always
+     * out-ranks other covering grants) and gates the public-surface guardrails
+     * that must never surface the synthetic primary grant. Optional so existing
+     * test constructors and older call sites remain valid.
+     */
+    provenance?: "primary" | "bootstrap" | "delegated" | "runtime";
+}
 /**
  * High-level TinyCloud API for Node.js environments.
  *
@@ -1314,6 +1422,11 @@ declare class TinyCloudNode {
     private _serviceGraph;
     private _serviceContext?;
     private _kv?;
+    private readonly replicationRuntime?;
+    private replicationRuntimeInstance?;
+    private replicationDelegateSession?;
+    private replicationScopeError?;
+    private readonly replicationControl?;
     private _sql?;
     private _duckdb?;
     private _hooks?;
@@ -1351,6 +1464,8 @@ declare class TinyCloudNode {
     private readonly confirmedHostedSpaceIds;
     /** Serializes account-registry writes for the active node instance. */
     private accountRegistryTail;
+    /** Bounds best-effort registry work on the sign-in critical path. */
+    private accountRegistryDeadlineMs;
     private pendingAccountRegistrySync?;
     /**
      * TinyCloudSession captured by {@link restoreSession} when there's no
@@ -1569,6 +1684,7 @@ declare class TinyCloudNode {
      */
     private registerPrimarySessionGrant;
     private writeManifestRegistryRecords;
+    private createAccountRegistryServices;
     private scheduleAccountRegistrySync;
     private enqueueAccountRegistryOperation;
     /**
@@ -1823,6 +1939,7 @@ declare class TinyCloudNode {
      * @internal
      */
     private initializeServices;
+    private attachReplicationKV;
     private createSpaceScopedKVService;
     getDefaultEncryptionNetworkId(name?: string): string;
     getEncryptionNetworkIdForSpace(spaceId: string, name?: string): string;
@@ -2282,6 +2399,42 @@ declare class TinyCloudNode {
      *   delegation.
      */
     delegateTo(did: string, permissions: PermissionEntry[], options?: DelegateToOptions): Promise<DelegateToResult>;
+    /**
+     * What `delegateTo` would select for `entries`, without signing or any
+     * network call (TC-858 plan v3 §4.3): the session path when the signed
+     * recap covers every entry, the runtime-grant path otherwise, or a
+     * refusal. A refusal of `CAVEATED_AUTHORITY` means coverage exists only
+     * through caveated branches, which the action-only WASM child-delegation
+     * boundary cannot preserve — replication never derives authority through
+     * them. `expiredAt`/`missing`/`granted`/`caveated` carry the payload
+     * `delegateTo` turns back into its typed errors.
+     * @internal
+     */
+    private planDerivation;
+    /**
+     * The plan `delegateTo(device, entries)` would follow, as a pure lookup:
+     * no WASM sign and no `POST /delegate`. Backs
+     * `ReplicationAuthority.plan` (and `mint` inside it) so a predicted
+     * parent and expiry can never disagree with what a mint would use (§4.3,
+     * §4.4). Session expiry inside the 60 s margin refuses with
+     * `SESSION_EXPIRING`; the same check delegateTo performs.
+     * @internal
+     */
+    planDelegation(entries: PermissionEntry[], options?: {
+        expiry?: string | number;
+    }): DelegationPlan;
+    /**
+     * The replication entries this node's sign-in request carries for the
+     * current replication config and the signed-in or restored address: the
+     * output of the same augmentation step `resolveSignInCapabilities` runs,
+     * with the unrestricted-get and secrets gates applied (§4.1, §4.6).
+     * Empty when replication is off or no address is known. Pure.
+     */
+    replicationSignInEntries(): PermissionEntry[];
+    private replicationAuthority;
+    private bindReplicationRuntime;
+    /** Stable control facade for this node's optional replication runtime. */
+    get replication(): ReplicationControl | undefined;
     /**
      * Materialize one manifest-declared delegation using the current session key.
      * Delivery is intentionally out of band; callers decide how to transmit the
@@ -2325,6 +2478,13 @@ declare class TinyCloudNode {
      * it only accepts action maps, so reject the selected constrained branch.
      */
     private assertRuntimeGrantCaveatsPreservable;
+    /**
+     * The entries of `grant` that cover a requested operation while carrying
+     * caveats — the branches {@link assertRuntimeGrantCaveatsPreservable}
+     * rejects and {@link planDerivation} classifies as `CAVEATED_AUTHORITY`.
+     * Shared so the pure plan and the mint path can't disagree.
+     */
+    private caveatedRuntimeGrantEntries;
     /** Reject caveated parent branches before action-only child signing. */
     private assertPortableDelegationCaveatsPreservable;
     private shortServiceName;

package/dist/authority-mTQEgN56.d.cts

@@ -0,0 +1,97 @@
+import { PermissionEntry, ReplicationOptions as ReplicationOptions$1, TinyCloudSession } from '@tinycloud/sdk-core';
+import { ReplicationOptions, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
+
+/** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
+declare function assertValidReplicationConfig(replication: (ReplicationOptions & {
+    storage?: unknown;
+}) | undefined): void;
+
+declare function hasUnrestrictedGetCoverage(entries: readonly PermissionEntry[], spaceId: string, prefix: string): boolean;
+declare function augmentSignInEntriesWithReplication(input: {
+    entries: readonly PermissionEntry[];
+    primarySpaceId: string;
+    replication?: Pick<ReplicationOptions$1, "prefixes" | "allowSecrets">;
+}): PermissionEntry[];
+
+/**
+ * Replication authority (TC-858, plan v3 §4).
+ *
+ * `ReplicationAuthority` answers, per configured prefix, whether this node's
+ * session can back a local replica: the session UCAN itself (delegate
+ * posture), a child UCAN minted through `delegateTo`, or nothing (the
+ * controller then reports `grant_missing` and reads from the network).
+ *
+ * The unrestricted-authority rule is enforced here, before any network work:
+ * a prefix covered only by a caveated `get`/`sync` refuses with
+ * `CAVEATED_AUTHORITY` — on the session path, the runtime-grant path, and on
+ * any reuse of an installed grant (the adapter marks every grant's
+ * `unconstrained` flag; the controller enforces it on reuse).
+ */
+
+/**
+ * Whether the signed `att` grants `ability` over the selected namespace, with
+ * each grant unrestricted (no caveats). A bare selector requires both its
+ * exact key and its slash descendants; a trailing-slash selector is one range.
+ */
+declare function ucanAttCovers(att: Record<string, Record<string, unknown>>, space: string, prefix: string, ability: string, options?: {
+    ignoreCaveats?: boolean;
+}): boolean;
+/** `unconstrained` for `ReplicaGrantInfo` (§2.1): get AND sync on the prefix carry no caveats. */
+declare function ucanAttUnconstrainedFor(att: Record<string, Record<string, unknown>>, space: string, prefix: string): boolean;
+interface DelegationPlanResult {
+    path: "session" | "runtime";
+    parentCid: string;
+    expiresAt: number;
+}
+/**
+ * The `TinyCloudNode` internals the authority needs. `planDelegation` is the
+ * pure extraction of `delegateTo`'s parent selection (§4.3), so `plan` and
+ * `mint` can never disagree about which parent or expiry a delegation gets.
+ */
+type ReplicationAuthoritySession = Pick<TinyCloudSession, "delegationHeader" | "delegationCid" | "spaceId" | "verificationMethod" | "jwk"> & Partial<Pick<TinyCloudSession, "siwe">>;
+interface ReplicationAuthorityHost {
+    replicationSession(): ReplicationAuthoritySession | undefined;
+    /** The SIWE "Expiration Time" of the session — the delegateTo delegation cap. */
+    siweExpiration(siwe: string): Date | undefined;
+    planDelegation(entries: PermissionEntry[], options?: {
+        expiry?: string | number;
+    }): ({
+        grant?: unknown;
+    } & DelegationPlanResult) | AuthorityRefusal;
+    mintDelegation(deviceDid: string, entries: PermissionEntry[]): Promise<{
+        ucan: string;
+        expiresAt: number;
+    }>;
+}
+/** Milliseconds of validity a session or parent must have left for authority reuse (delegateTo's margin). */
+declare const AUTHORITY_EXPIRY_MARGIN_MS = 60000;
+/** Verify a compact session delegation before using any persisted space metadata. */
+declare function replicationScopeFromSignedSession(input: {
+    delegationHeader: {
+        Authorization: string;
+    };
+    delegationCid: string;
+    verificationMethod: string;
+    persistedSpace: string;
+}): {
+    space: string;
+    principal: string;
+} | undefined;
+declare function createReplicationAuthority(host: ReplicationAuthorityHost): ReplicationAuthority;
+
+declare const __authority_AUTHORITY_EXPIRY_MARGIN_MS: typeof AUTHORITY_EXPIRY_MARGIN_MS;
+type __authority_DelegationPlanResult = DelegationPlanResult;
+type __authority_ReplicationAuthorityHost = ReplicationAuthorityHost;
+type __authority_ReplicationAuthoritySession = ReplicationAuthoritySession;
+declare const __authority_assertValidReplicationConfig: typeof assertValidReplicationConfig;
+declare const __authority_augmentSignInEntriesWithReplication: typeof augmentSignInEntriesWithReplication;
+declare const __authority_createReplicationAuthority: typeof createReplicationAuthority;
+declare const __authority_hasUnrestrictedGetCoverage: typeof hasUnrestrictedGetCoverage;
+declare const __authority_replicationScopeFromSignedSession: typeof replicationScopeFromSignedSession;
+declare const __authority_ucanAttCovers: typeof ucanAttCovers;
+declare const __authority_ucanAttUnconstrainedFor: typeof ucanAttUnconstrainedFor;
+declare namespace __authority {
+  export { __authority_AUTHORITY_EXPIRY_MARGIN_MS as AUTHORITY_EXPIRY_MARGIN_MS, type __authority_DelegationPlanResult as DelegationPlanResult, type __authority_ReplicationAuthorityHost as ReplicationAuthorityHost, type __authority_ReplicationAuthoritySession as ReplicationAuthoritySession, __authority_assertValidReplicationConfig as assertValidReplicationConfig, __authority_augmentSignInEntriesWithReplication as augmentSignInEntriesWithReplication, __authority_createReplicationAuthority as createReplicationAuthority, __authority_hasUnrestrictedGetCoverage as hasUnrestrictedGetCoverage, __authority_replicationScopeFromSignedSession as replicationScopeFromSignedSession, __authority_ucanAttCovers as ucanAttCovers, __authority_ucanAttUnconstrainedFor as ucanAttUnconstrainedFor };
+}
+
+export { AUTHORITY_EXPIRY_MARGIN_MS as A, type DelegationPlanResult as D, type ReplicationAuthorityHost as R, __authority as _, type ReplicationAuthoritySession as a, assertValidReplicationConfig as b, augmentSignInEntriesWithReplication as c, createReplicationAuthority as d, ucanAttUnconstrainedFor as e, hasUnrestrictedGetCoverage as h, replicationScopeFromSignedSession as r, ucanAttCovers as u };