@tinycloud/node-sdk 3.2.0-beta.5 → 3.2.0-beta.6

package/dist/{WasmKeyProvider-D2gBxuiY.d.cts → WasmKeyProvider-C3NFgOmv.d.cts}

@@ -898,11 +898,11 @@ interface ValidatedRuntimeDelegation {
     readonly cid: string;
     /** The authority object installed by the node runtime. */
     readonly delegation: PortableDelegation;
-    /** Capabilities read from the signed compact UCAN attenuation. */
+    /** Capabilities read from the signed compact UCAN attenuation or SIWE ReCap. */
     readonly effectivePermissions: readonly PermissionEntry[];
-    /** Expiry read from the signed compact UCAN payload. */
+    /** Expiry read from the signed compact UCAN payload or SIWE. */
     readonly expiry: Date;
-    /** Audience read from the signed compact UCAN payload. */
+    /** Audience read from the signed compact UCAN payload or SIWE. */
     readonly audience: string;
     /** Host selected for, and used by, the runtime activation. */
     readonly host: string;
@@ -982,6 +982,20 @@ declare function activateValidatedRuntimeDelegation(node: RuntimeDelegationActiv
  * derived from signed bytes before `/delegate` is called.
  */
 declare function activateCompactRuntimeDelegation(node: RuntimeDelegationActivator, input: CompactRuntimeDelegationInput): Promise<ValidatedRuntimeDelegation>;
+/**
+ * Project an OpenKey signed-login delegation from the same verified CACAO
+ * authority used when the runtime activates and replays it.
+ */
+declare function siweRuntimeDelegation(node: RuntimeDelegationActivator, input: {
+    readonly authorization: string;
+    readonly cid: string;
+    readonly spaceId: string;
+    readonly ownerAddress: string;
+    readonly chainId: number;
+    readonly siwe: string;
+    readonly signature: string;
+    readonly host: string;
+}): PortableDelegation;
 /**
  * Turn a delegation REQUEST into a signed GRANT.
  *
@@ -2741,4 +2755,4 @@ declare class WasmKeyProvider implements KeyProvider {
  */
 declare function createWasmKeyProvider(sessionManager: SessionManagerWithListing): WasmKeyProvider;
 
-export { ACCEPTED_MARKER_VERSIONS as A, BOOTSTRAP_COMPLETION_MARKER_KEY as B, type CompactRuntimeDelegationInput as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, FileSessionStorage as F, activateValidatedRuntimeDelegation as G, createWasmKeyProvider as H, InvalidRestoredSessionError as I, defaultSignStrategy as J, deserializeDelegation as K, grantAuthRequest as L, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, serializeDelegation as Q, RUNTIME_DELEGATION_REJECTIONS as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type ValidatedRuntimeDelegation as V, WasmKeyProvider as W, signedCompactUcanExpiry as X, type AuthDelegationArtifact as a, type AuthRequestArtifact as b, BOOTSTRAP_COMPLETION_MARKER_VERSION as c, type BootstrapCompletionMarker as d, type BootstrapWarning as e, type CreateOwnerDelegationParams as f, type DelegateToResult as g, DelegatedAccess as h, type DelegationAuthority as i, NodeUserAuthorization as j, type NodeUserAuthorizationConfig as k, type RestorableSession as l, type RuntimeDelegationActivator as m, RuntimeDelegationRejectedError as n, type RuntimeDelegationRejection as o, type RuntimePermissionGrantOptions as p, type SecretReadInput as q, type SecretReadResult as r, type SessionGrantProof as s, type SignStrategy as t, type TinyCloudNodeConfig as u, type UnifiedOwnerRootReceipt as v, UnsupportedSessionRestoreError as w, type VerifiedSessionGrant as x, type WasmKeyProviderConfig as y, activateCompactRuntimeDelegation as z };
+export { ACCEPTED_MARKER_VERSIONS as A, BOOTSTRAP_COMPLETION_MARKER_KEY as B, type CompactRuntimeDelegationInput as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, FileSessionStorage as F, activateValidatedRuntimeDelegation as G, createWasmKeyProvider as H, InvalidRestoredSessionError as I, defaultSignStrategy as J, deserializeDelegation as K, grantAuthRequest as L, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, serializeDelegation as Q, RUNTIME_DELEGATION_REJECTIONS as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type ValidatedRuntimeDelegation as V, WasmKeyProvider as W, signedCompactUcanExpiry as X, siweRuntimeDelegation as Y, type AuthDelegationArtifact as a, type AuthRequestArtifact as b, BOOTSTRAP_COMPLETION_MARKER_VERSION as c, type BootstrapCompletionMarker as d, type BootstrapWarning as e, type CreateOwnerDelegationParams as f, type DelegateToResult as g, DelegatedAccess as h, type DelegationAuthority as i, NodeUserAuthorization as j, type NodeUserAuthorizationConfig as k, type RestorableSession as l, type RuntimeDelegationActivator as m, RuntimeDelegationRejectedError as n, type RuntimeDelegationRejection as o, type RuntimePermissionGrantOptions as p, type SecretReadInput as q, type SecretReadResult as r, type SessionGrantProof as s, type SignStrategy as t, type TinyCloudNodeConfig as u, type UnifiedOwnerRootReceipt as v, UnsupportedSessionRestoreError as w, type VerifiedSessionGrant as x, type WasmKeyProviderConfig as y, activateCompactRuntimeDelegation as z };

package/dist/{WasmKeyProvider-D2gBxuiY.d.ts → WasmKeyProvider-C3NFgOmv.d.ts}

@@ -898,11 +898,11 @@ interface ValidatedRuntimeDelegation {
     readonly cid: string;
     /** The authority object installed by the node runtime. */
     readonly delegation: PortableDelegation;
-    /** Capabilities read from the signed compact UCAN attenuation. */
+    /** Capabilities read from the signed compact UCAN attenuation or SIWE ReCap. */
     readonly effectivePermissions: readonly PermissionEntry[];
-    /** Expiry read from the signed compact UCAN payload. */
+    /** Expiry read from the signed compact UCAN payload or SIWE. */
     readonly expiry: Date;
-    /** Audience read from the signed compact UCAN payload. */
+    /** Audience read from the signed compact UCAN payload or SIWE. */
     readonly audience: string;
     /** Host selected for, and used by, the runtime activation. */
     readonly host: string;
@@ -982,6 +982,20 @@ declare function activateValidatedRuntimeDelegation(node: RuntimeDelegationActiv
  * derived from signed bytes before `/delegate` is called.
  */
 declare function activateCompactRuntimeDelegation(node: RuntimeDelegationActivator, input: CompactRuntimeDelegationInput): Promise<ValidatedRuntimeDelegation>;
+/**
+ * Project an OpenKey signed-login delegation from the same verified CACAO
+ * authority used when the runtime activates and replays it.
+ */
+declare function siweRuntimeDelegation(node: RuntimeDelegationActivator, input: {
+    readonly authorization: string;
+    readonly cid: string;
+    readonly spaceId: string;
+    readonly ownerAddress: string;
+    readonly chainId: number;
+    readonly siwe: string;
+    readonly signature: string;
+    readonly host: string;
+}): PortableDelegation;
 /**
  * Turn a delegation REQUEST into a signed GRANT.
  *
@@ -2741,4 +2755,4 @@ declare class WasmKeyProvider implements KeyProvider {
  */
 declare function createWasmKeyProvider(sessionManager: SessionManagerWithListing): WasmKeyProvider;
 
-export { ACCEPTED_MARKER_VERSIONS as A, BOOTSTRAP_COMPLETION_MARKER_KEY as B, type CompactRuntimeDelegationInput as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, FileSessionStorage as F, activateValidatedRuntimeDelegation as G, createWasmKeyProvider as H, InvalidRestoredSessionError as I, defaultSignStrategy as J, deserializeDelegation as K, grantAuthRequest as L, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, serializeDelegation as Q, RUNTIME_DELEGATION_REJECTIONS as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type ValidatedRuntimeDelegation as V, WasmKeyProvider as W, signedCompactUcanExpiry as X, type AuthDelegationArtifact as a, type AuthRequestArtifact as b, BOOTSTRAP_COMPLETION_MARKER_VERSION as c, type BootstrapCompletionMarker as d, type BootstrapWarning as e, type CreateOwnerDelegationParams as f, type DelegateToResult as g, DelegatedAccess as h, type DelegationAuthority as i, NodeUserAuthorization as j, type NodeUserAuthorizationConfig as k, type RestorableSession as l, type RuntimeDelegationActivator as m, RuntimeDelegationRejectedError as n, type RuntimeDelegationRejection as o, type RuntimePermissionGrantOptions as p, type SecretReadInput as q, type SecretReadResult as r, type SessionGrantProof as s, type SignStrategy as t, type TinyCloudNodeConfig as u, type UnifiedOwnerRootReceipt as v, UnsupportedSessionRestoreError as w, type VerifiedSessionGrant as x, type WasmKeyProviderConfig as y, activateCompactRuntimeDelegation as z };
+export { ACCEPTED_MARKER_VERSIONS as A, BOOTSTRAP_COMPLETION_MARKER_KEY as B, type CompactRuntimeDelegationInput as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, FileSessionStorage as F, activateValidatedRuntimeDelegation as G, createWasmKeyProvider as H, InvalidRestoredSessionError as I, defaultSignStrategy as J, deserializeDelegation as K, grantAuthRequest as L, MemorySessionStorage as M, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type PortableDelegation as P, serializeDelegation as Q, RUNTIME_DELEGATION_REJECTIONS as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type ValidatedRuntimeDelegation as V, WasmKeyProvider as W, signedCompactUcanExpiry as X, siweRuntimeDelegation as Y, type AuthDelegationArtifact as a, type AuthRequestArtifact as b, BOOTSTRAP_COMPLETION_MARKER_VERSION as c, type BootstrapCompletionMarker as d, type BootstrapWarning as e, type CreateOwnerDelegationParams as f, type DelegateToResult as g, DelegatedAccess as h, type DelegationAuthority as i, NodeUserAuthorization as j, type NodeUserAuthorizationConfig as k, type RestorableSession as l, type RuntimeDelegationActivator as m, RuntimeDelegationRejectedError as n, type RuntimeDelegationRejection as o, type RuntimePermissionGrantOptions as p, type SecretReadInput as q, type SecretReadResult as r, type SessionGrantProof as s, type SignStrategy as t, type TinyCloudNodeConfig as u, type UnifiedOwnerRootReceipt as v, UnsupportedSessionRestoreError as w, type VerifiedSessionGrant as x, type WasmKeyProviderConfig as y, activateCompactRuntimeDelegation as z };

package/dist/core.cjs

@@ -2408,18 +2408,25 @@ async function activateCompactRuntimeDelegation(node, input) {
     throw new Error("Compact runtime delegation CID does not match authorization bytes.");
   }
   const signed = signedAuthorityFromCompactUcan(authorization);
+  return activateValidatedRuntimeDelegation(
+    node,
+    portableFromSignedAuthority(cid, authorization, signed, input),
+    { host: input.host }
+  );
+}
+function portableFromSignedAuthority(cid, authorization, signed, transport) {
   const primary = signed.resources[0];
   const signedSpace = signed.permissions.find(
     (permission) => permission.service !== "tinycloud.encryption"
   )?.space;
-  const delegation = {
+  return {
     cid,
     delegationHeader: { Authorization: authorization },
-    ownerAddress: input.ownerAddress,
-    chainId: input.chainId,
+    ownerAddress: transport.ownerAddress,
+    chainId: transport.chainId,
     delegatorDID: signed.issuer,
     authHeader: authorization,
-    spaceId: signedSpace ?? primary.space,
+    spaceId: signedSpace ?? transport.spaceId ?? primary.space,
     path: primary.path,
     actions: [...primary.actions],
     ...primary.caveats === void 0 ? {} : { caveats: primary.caveats },
@@ -2429,11 +2436,8 @@ async function activateCompactRuntimeDelegation(node, input) {
     })),
     expiry: new Date(signed.expiry),
     delegateDID: signed.audience,
-    host: normalizedHost(input.host)
+    host: normalizedHost(transport.host)
   };
-  return activateValidatedRuntimeDelegation(node, delegation, {
-    host: input.host
-  });
 }
 function serializeDelegation(delegation) {
   return JSON.stringify({