@tinycloud/node-sdk 3.2.6-beta.1 → 3.2.6-beta.2

package/dist/{WasmKeyProvider-LXRTjZTA.d.cts → WasmKeyProvider-CYU_dqOx.d.cts}

@@ -1,7 +1,7 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
-import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, ClientSession, TinyCloudSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, CapabilityPresentationEnvelopeV1, Delegation, DelegatedResource, TelemetryConfig, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, CreateDelegationParams, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate, KeyProvider, JWK } from '@tinycloud/sdk-core';
+import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, ClientSession, TinyCloudSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, CapabilityPresentationEnvelopeV1, Delegation, DelegatedResource, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, CreateDelegationParams, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate, KeyProvider, JWK } from '@tinycloud/sdk-core';
 import { EventEmitter } from 'events';
-import { InvokeFunction, InvokeAnyFunction } from '@tinycloud/sdk-services';
+import { InvokeFunction, InvokeAnyFunction, FetchFunction } from '@tinycloud/sdk-services';
 
 /**
  * In-memory session storage for Node.js.
@@ -323,6 +323,13 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     private readonly includeAccountRegistryPermissions;
     private sessionManager;
     private activeSessionKeyId;
+    /** Incremented by resetSession; a sign-in started earlier publishes nothing. */
+    private sessionGeneration;
+    /**
+     * Sign-in saves run one at a time, in order, each together with its own
+     * cancellation cleanup, so no later write can land between the two.
+     */
+    private persistenceQueue;
     private extensions;
     private _session?;
     private _tinyCloudSession?;
@@ -388,6 +395,15 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      *   {@link ensureTinyCloudHosts}.
      */
     setRestoredTinyCloudSession(session: TinyCloudSession, hosts?: string[]): void;
+    /**
+     * @internal End the session: adopt a fresh session manager whose active key
+     * is `sessionKeyId`, and return to the constructed state.
+     */
+    resetSession(sessionManager: ISessionManager, sessionKeyId: string, hosts?: string[]): void;
+    /** Throws when the session was reset (signed out) after `generation` was read. */
+    private assertSignInCurrent;
+    /** Runs `task` after every earlier queued persistence task has settled. */
+    private enqueuePersistence;
     /** @internal Atomically adopt the state staged by TinyCloudNode.restoreSession. */
     installRestoredSession(sessionManager: ISessionManager, session: TinyCloudSession | undefined, hosts?: string[], nodeFeatures?: string[]): void;
     /**
@@ -1066,7 +1082,16 @@ declare class DelegatedAccess {
     private _sql;
     private _duckdb;
     private _hooks;
-    constructor(session: TinyCloudSession, delegation: PortableDelegation, host: string, invoke: InvokeFunction, invokeAny?: InvokeAnyFunction, telemetry?: TelemetryConfig);
+    /**
+     * @param lifetime - Optional owner of this access: its `fetch` is used for
+     *   requests and the service context is registered with `track`, so the
+     *   owner can cancel and retire the access (TinyCloudNode does this when its
+     *   session is replaced or signed out).
+     */
+    constructor(session: TinyCloudSession, delegation: PortableDelegation, host: string, invoke: InvokeFunction, invokeAny?: InvokeAnyFunction, telemetry?: TelemetryConfig, lifetime?: {
+        fetch: FetchFunction;
+        track(context: ServiceContext): ServiceContext;
+    });
     /**
      * Get the delegation this access was created from.
      */
@@ -1515,6 +1540,18 @@ declare class TinyCloudNode {
     private _restoredTcSession?;
     private _restoredNodeFeatures?;
     private _activeServiceSession?;
+    /** The sign-out in progress; signIn and restoreSession wait for it. */
+    private signOutInFlight?;
+    /**
+     * Incremented by every sign-out. A sign-in or restore records it when it
+     * starts and does not establish its session once it has changed.
+     */
+    private sessionEpoch;
+    /**
+     * Numbers sign-in and restore attempts. A cancelled attempt cleans up only
+     * while it is still the latest, so it never ends a newer session.
+     */
+    private latestSessionAttempt;
     /**
      * True when the last signIn() detected an interactive signer and skipped
      * client-side bootstrap. Apps can read this to know whether bootstrap was
@@ -1610,6 +1647,12 @@ declare class TinyCloudNode {
      * ```
      */
     constructor(config?: TinyCloudNodeConfig);
+    /**
+     * SharingService for receive-only access (no session required), bound to the
+     * current service graph. This lets session-only users receive sharing links
+     * without signIn(); full capabilities (generate) are added after signIn().
+     */
+    private createReceiveOnlySharing;
     /**
      * Set up authorization handler and TinyCloud instance.
      * @internal
@@ -1705,6 +1748,28 @@ declare class TinyCloudNode {
      * pass back to {@link restoreSession}.
      */
     get restorableSession(): TinyCloudSession | undefined;
+    /**
+     * Sign out and end the session on this instance.
+     *
+     * Every service built for the session (and every `useDelegation()` result)
+     * is retired and the session key is replaced before anything is awaited, so
+     * nothing captured from the session can sign once sign-out has started.
+     * Pending work is aborted and the persisted session is cleared from the
+     * configured session storage. Afterwards session accessors return
+     * `undefined` and service calls fail with "Not signed in" until
+     * {@link signIn} or {@link restoreSession}, which wait for a sign-out in
+     * progress.
+     */
+    signOut(): Promise<void>;
+    private endSession;
+    /**
+     * Synchronously drop every piece of in-memory session authority and
+     * invalidate sign-ins and restores still in flight (see `sessionEpoch`).
+     */
+    private teardownSession;
+    private clearPersistedSessionFor;
+    /** Throws when a sign-out started after `epoch` was read. */
+    private assertSessionEpoch;
     /**
      * Sign in and create a new session.
      * This creates the user's space if it doesn't exist.
@@ -1713,6 +1778,7 @@ declare class TinyCloudNode {
      * @param options - Optional per-call SIWE overrides for this sign-in only
      */
     signIn(options?: SignInOptions): Promise<void>;
+    private establishSignIn;
     /**
      * Wait for the account-registry sync that {@link signIn} starts in the
      * background (account index, this app's manifest record, space list).

package/dist/{WasmKeyProvider-LXRTjZTA.d.ts → WasmKeyProvider-CYU_dqOx.d.ts}

@@ -1,7 +1,7 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
-import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, ClientSession, TinyCloudSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, CapabilityPresentationEnvelopeV1, Delegation, DelegatedResource, TelemetryConfig, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, CreateDelegationParams, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate, KeyProvider, JWK } from '@tinycloud/sdk-core';
+import { ISessionStorage, PersistedSessionData, AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, IUserAuthorization, ISigner, ISpaceCreationHandler, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, ClientSession, TinyCloudSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, CapabilityPresentationEnvelopeV1, Delegation, DelegatedResource, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, CreateDelegationParams, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate, KeyProvider, JWK } from '@tinycloud/sdk-core';
 import { EventEmitter } from 'events';
-import { InvokeFunction, InvokeAnyFunction } from '@tinycloud/sdk-services';
+import { InvokeFunction, InvokeAnyFunction, FetchFunction } from '@tinycloud/sdk-services';
 
 /**
  * In-memory session storage for Node.js.
@@ -323,6 +323,13 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     private readonly includeAccountRegistryPermissions;
     private sessionManager;
     private activeSessionKeyId;
+    /** Incremented by resetSession; a sign-in started earlier publishes nothing. */
+    private sessionGeneration;
+    /**
+     * Sign-in saves run one at a time, in order, each together with its own
+     * cancellation cleanup, so no later write can land between the two.
+     */
+    private persistenceQueue;
     private extensions;
     private _session?;
     private _tinyCloudSession?;
@@ -388,6 +395,15 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      *   {@link ensureTinyCloudHosts}.
      */
     setRestoredTinyCloudSession(session: TinyCloudSession, hosts?: string[]): void;
+    /**
+     * @internal End the session: adopt a fresh session manager whose active key
+     * is `sessionKeyId`, and return to the constructed state.
+     */
+    resetSession(sessionManager: ISessionManager, sessionKeyId: string, hosts?: string[]): void;
+    /** Throws when the session was reset (signed out) after `generation` was read. */
+    private assertSignInCurrent;
+    /** Runs `task` after every earlier queued persistence task has settled. */
+    private enqueuePersistence;
     /** @internal Atomically adopt the state staged by TinyCloudNode.restoreSession. */
     installRestoredSession(sessionManager: ISessionManager, session: TinyCloudSession | undefined, hosts?: string[], nodeFeatures?: string[]): void;
     /**
@@ -1066,7 +1082,16 @@ declare class DelegatedAccess {
     private _sql;
     private _duckdb;
     private _hooks;
-    constructor(session: TinyCloudSession, delegation: PortableDelegation, host: string, invoke: InvokeFunction, invokeAny?: InvokeAnyFunction, telemetry?: TelemetryConfig);
+    /**
+     * @param lifetime - Optional owner of this access: its `fetch` is used for
+     *   requests and the service context is registered with `track`, so the
+     *   owner can cancel and retire the access (TinyCloudNode does this when its
+     *   session is replaced or signed out).
+     */
+    constructor(session: TinyCloudSession, delegation: PortableDelegation, host: string, invoke: InvokeFunction, invokeAny?: InvokeAnyFunction, telemetry?: TelemetryConfig, lifetime?: {
+        fetch: FetchFunction;
+        track(context: ServiceContext): ServiceContext;
+    });
     /**
      * Get the delegation this access was created from.
      */
@@ -1515,6 +1540,18 @@ declare class TinyCloudNode {
     private _restoredTcSession?;
     private _restoredNodeFeatures?;
     private _activeServiceSession?;
+    /** The sign-out in progress; signIn and restoreSession wait for it. */
+    private signOutInFlight?;
+    /**
+     * Incremented by every sign-out. A sign-in or restore records it when it
+     * starts and does not establish its session once it has changed.
+     */
+    private sessionEpoch;
+    /**
+     * Numbers sign-in and restore attempts. A cancelled attempt cleans up only
+     * while it is still the latest, so it never ends a newer session.
+     */
+    private latestSessionAttempt;
     /**
      * True when the last signIn() detected an interactive signer and skipped
      * client-side bootstrap. Apps can read this to know whether bootstrap was
@@ -1610,6 +1647,12 @@ declare class TinyCloudNode {
      * ```
      */
     constructor(config?: TinyCloudNodeConfig);
+    /**
+     * SharingService for receive-only access (no session required), bound to the
+     * current service graph. This lets session-only users receive sharing links
+     * without signIn(); full capabilities (generate) are added after signIn().
+     */
+    private createReceiveOnlySharing;
     /**
      * Set up authorization handler and TinyCloud instance.
      * @internal
@@ -1705,6 +1748,28 @@ declare class TinyCloudNode {
      * pass back to {@link restoreSession}.
      */
     get restorableSession(): TinyCloudSession | undefined;
+    /**
+     * Sign out and end the session on this instance.
+     *
+     * Every service built for the session (and every `useDelegation()` result)
+     * is retired and the session key is replaced before anything is awaited, so
+     * nothing captured from the session can sign once sign-out has started.
+     * Pending work is aborted and the persisted session is cleared from the
+     * configured session storage. Afterwards session accessors return
+     * `undefined` and service calls fail with "Not signed in" until
+     * {@link signIn} or {@link restoreSession}, which wait for a sign-out in
+     * progress.
+     */
+    signOut(): Promise<void>;
+    private endSession;
+    /**
+     * Synchronously drop every piece of in-memory session authority and
+     * invalidate sign-ins and restores still in flight (see `sessionEpoch`).
+     */
+    private teardownSession;
+    private clearPersistedSessionFor;
+    /** Throws when a sign-out started after `epoch` was read. */
+    private assertSessionEpoch;
     /**
      * Sign in and create a new session.
      * This creates the user's space if it doesn't exist.
@@ -1713,6 +1778,7 @@ declare class TinyCloudNode {
      * @param options - Optional per-call SIWE overrides for this sign-in only
      */
     signIn(options?: SignInOptions): Promise<void>;
+    private establishSignIn;
     /**
      * Wait for the account-registry sync that {@link signIn} starts in the
      * background (account index, this app's manifest record, space list).