@tinycloud/node-sdk 3.3.0-beta.22 → 3.3.0-beta.24

package/dist/{TinyCloudNode-BPDOmuf6.d.cts → TinyCloudNode-Cm8kblSj.d.cts}

@@ -1,5 +1,5 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
-import { AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, CapabilityPresentationEnvelopeV1, IUserAuthorization, ISigner, ISessionStorage, ISpaceCreationHandler, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, TinyCloudSession, PersistedSessionData, ClientSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, Delegation, DelegatedResource, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, CreateDelegationParams, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
+import { AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, CapabilityPresentationEnvelopeV1, IUserAuthorization, ISigner, ISessionStorage, ISpaceCreationHandler, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, TinyCloudSession, PersistedSessionData, ClientSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, Delegation, DelegatedResource, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
 import { ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { EventEmitter } from 'events';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction } from '@tinycloud/sdk-services';
@@ -1375,6 +1375,12 @@ interface DelegateToOptions {
      * recipient (use its session-key DID). Default false.
      */
     disableSubDelegation?: boolean;
+    /**
+     * Throw when the node answers 200 but skips a space the delegation targets (a space it does not
+     * host): it registers the delegation without attaching it, which otherwise looks like success.
+     * Off by default because grants to a not-yet-hosted space (e.g. secrets) are valid. Default false.
+     */
+    requireActivation?: boolean;
 }
 /**
  * Result of {@link TinyCloudNode.delegateTo}.
@@ -1896,6 +1902,8 @@ declare class TinyCloudNode {
     private registerPrimarySessionGrant;
     private writeManifestRegistryRecords;
     private createAccountRegistryServices;
+    /** Set once per process: the registry sync was skipped for want of account access. */
+    private static accountRegistrySkipLogged;
     private scheduleAccountRegistrySync;
     private enqueueAccountRegistryOperation;
     /**
@@ -2467,16 +2475,8 @@ declare class TinyCloudNode {
      * ```typescript
      * const delegations = alice.delegationManager;
      *
-     * // Create a delegation
-     * const result = await delegations.create({
-     *   delegateDID: bob.did,
-     *   path: "shared/",
-     *   actions: ["tinycloud.kv/get", "tinycloud.kv/put"],
-     *   expiry: new Date(Date.now() + 24 * 60 * 60 * 1000), // 24 hours
-     * });
-     *
-     * // List delegations
-     * const listResult = await delegations.list();
+     * // Query account delegations
+     * const page = await delegations.query();
      *
      * // Revoke a delegation
      * await delegations.revoke(delegationCid);
@@ -2567,30 +2567,6 @@ declare class TinyCloudNode {
      * Writes require authentication (owner/delegate).
      */
     get publicKV(): IKVService;
-    /**
-     * Create a delegation using the v2 DelegationManager.
-     *
-     * This is a convenience method that wraps DelegationManager.create().
-     * For more control, use `this.delegationManager` directly.
-     *
-     * @param params - Delegation parameters
-     * @returns Result containing the created Delegation
-     *
-     * @example
-     * ```typescript
-     * const result = await alice.delegate({
-     *   delegateDID: bob.did,
-     *   path: "shared/",
-     *   actions: ["tinycloud.kv/get", "tinycloud.kv/put"],
-     *   expiry: new Date(Date.now() + 24 * 60 * 60 * 1000),
-     * });
-     *
-     * if (result.ok) {
-     *   console.log("Delegation created:", result.data.cid);
-     * }
-     * ```
-     */
-    delegate(params: CreateDelegationParams): Promise<DelegationResult<Delegation>>;
     /**
      * Revoke a delegation with the owner wallet when available. Session-only
      * clients continue to use their delegated revocation authority.
@@ -2603,12 +2579,6 @@ declare class TinyCloudNode {
     getDelegationStatus(cid: string): Promise<DelegationResult<DelegationStatus>>;
     /** Compute the canonical CID of a compact UCAN or DAG-CBOR delegation authorization. */
     computeDelegationCid(authorization: string): string;
-    /**
-     * List all delegations for the current session's space.
-     *
-     * @returns Result containing an array of Delegations
-     */
-    listDelegations(): Promise<DelegationResult<Delegation[]>>;
     /**
      * Check if the current session has permission for a path and action.
      *

package/dist/{TinyCloudNode-BPDOmuf6.d.ts → TinyCloudNode-Cm8kblSj.d.ts}

@@ -1,5 +1,5 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
-import { AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, CapabilityPresentationEnvelopeV1, IUserAuthorization, ISigner, ISessionStorage, ISpaceCreationHandler, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, TinyCloudSession, PersistedSessionData, ClientSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, Delegation, DelegatedResource, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, CreateDelegationParams, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
+import { AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, CapabilityPresentationEnvelopeV1, IUserAuthorization, ISigner, ISessionStorage, ISpaceCreationHandler, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, TinyCloudSession, PersistedSessionData, ClientSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, Delegation, DelegatedResource, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
 import { ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { EventEmitter } from 'events';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction } from '@tinycloud/sdk-services';
@@ -1375,6 +1375,12 @@ interface DelegateToOptions {
      * recipient (use its session-key DID). Default false.
      */
     disableSubDelegation?: boolean;
+    /**
+     * Throw when the node answers 200 but skips a space the delegation targets (a space it does not
+     * host): it registers the delegation without attaching it, which otherwise looks like success.
+     * Off by default because grants to a not-yet-hosted space (e.g. secrets) are valid. Default false.
+     */
+    requireActivation?: boolean;
 }
 /**
  * Result of {@link TinyCloudNode.delegateTo}.
@@ -1896,6 +1902,8 @@ declare class TinyCloudNode {
     private registerPrimarySessionGrant;
     private writeManifestRegistryRecords;
     private createAccountRegistryServices;
+    /** Set once per process: the registry sync was skipped for want of account access. */
+    private static accountRegistrySkipLogged;
     private scheduleAccountRegistrySync;
     private enqueueAccountRegistryOperation;
     /**
@@ -2467,16 +2475,8 @@ declare class TinyCloudNode {
      * ```typescript
      * const delegations = alice.delegationManager;
      *
-     * // Create a delegation
-     * const result = await delegations.create({
-     *   delegateDID: bob.did,
-     *   path: "shared/",
-     *   actions: ["tinycloud.kv/get", "tinycloud.kv/put"],
-     *   expiry: new Date(Date.now() + 24 * 60 * 60 * 1000), // 24 hours
-     * });
-     *
-     * // List delegations
-     * const listResult = await delegations.list();
+     * // Query account delegations
+     * const page = await delegations.query();
      *
      * // Revoke a delegation
      * await delegations.revoke(delegationCid);
@@ -2567,30 +2567,6 @@ declare class TinyCloudNode {
      * Writes require authentication (owner/delegate).
      */
     get publicKV(): IKVService;
-    /**
-     * Create a delegation using the v2 DelegationManager.
-     *
-     * This is a convenience method that wraps DelegationManager.create().
-     * For more control, use `this.delegationManager` directly.
-     *
-     * @param params - Delegation parameters
-     * @returns Result containing the created Delegation
-     *
-     * @example
-     * ```typescript
-     * const result = await alice.delegate({
-     *   delegateDID: bob.did,
-     *   path: "shared/",
-     *   actions: ["tinycloud.kv/get", "tinycloud.kv/put"],
-     *   expiry: new Date(Date.now() + 24 * 60 * 60 * 1000),
-     * });
-     *
-     * if (result.ok) {
-     *   console.log("Delegation created:", result.data.cid);
-     * }
-     * ```
-     */
-    delegate(params: CreateDelegationParams): Promise<DelegationResult<Delegation>>;
     /**
      * Revoke a delegation with the owner wallet when available. Session-only
      * clients continue to use their delegated revocation authority.
@@ -2603,12 +2579,6 @@ declare class TinyCloudNode {
     getDelegationStatus(cid: string): Promise<DelegationResult<DelegationStatus>>;
     /** Compute the canonical CID of a compact UCAN or DAG-CBOR delegation authorization. */
     computeDelegationCid(authorization: string): string;
-    /**
-     * List all delegations for the current session's space.
-     *
-     * @returns Result containing an array of Delegations
-     */
-    listDelegations(): Promise<DelegationResult<Delegation[]>>;
     /**
      * Check if the current session has permission for a path and action.
      *

package/dist/{authority-C-pzOYXq.d.ts → authority-CPSGMw2l.d.ts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-BPDOmuf6.js';
+import { T as TinyCloudNode } from './TinyCloudNode-Cm8kblSj.js';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {

package/dist/{authority-21H2cKmO.d.cts → authority-S-huUKlr.d.cts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-BPDOmuf6.cjs';
+import { T as TinyCloudNode } from './TinyCloudNode-Cm8kblSj.cjs';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {

package/dist/core.cjs

@@ -3326,6 +3326,12 @@ function describeHostFailure2(result) {
   const text = result.error?.trim();
   return text ? `${result.status} - ${text}` : `${result.status}`;
 }
+function assertDelegationActivated(result, delegation, requireActivation) {
+  const skipped = requireActivation ? (delegation.resources?.map((r) => r.space) ?? [delegation.spaceId]).filter((space) => result.skipped?.includes(space)) : [];
+  if (result.success && skipped.length === 0) return;
+  const detail = result.success ? `the node skipped ${[...new Set(skipped)].join(", ")} (space not hosted on the node)` : describeHostFailure2(result);
+  throw Object.assign(new Error(`Failed to activate delegation with host: ${detail}`), { cause: result });
+}
 function ownerDelegationPermissions(params) {
   const hasPermissions = Object.prototype.hasOwnProperty.call(params, "permissions");
   const hasLegacy = Object.prototype.hasOwnProperty.call(params, "path") || Object.prototype.hasOwnProperty.call(params, "actions");
@@ -3959,7 +3965,6 @@ var _TinyCloudNode = class _TinyCloudNode {
         if (!this.wasmBindings.computeCid) throw new Error("computeCid is unavailable");
         return this.wasmBindings.computeCid(data, codec);
       },
-      // delegationManager: undefined - not needed for receive()
       createKVService: (config) => {
         const prefix = config.pathPrefix?.replace(/\/$/, "");
         const kvService = new import_sdk_core10.KVService({ prefix });
@@ -5078,6 +5083,10 @@ var _TinyCloudNode = class _TinyCloudNode {
       return;
     }
     if (!this.currentSessionCoversAccountRegistry()) {
+      if (!_TinyCloudNode.accountRegistrySkipLogged) {
+        _TinyCloudNode.accountRegistrySkipLogged = true;
+        import_sdk_services2.tinyCloudDebugLogger.log("registry.skip");
+      }
       return;
     }
     const controller = new AbortController();
@@ -6043,7 +6052,6 @@ var _TinyCloudNode = class _TinyCloudNode {
     });
     sharingService.updateConfig({
       session: input.serviceSession,
-      delegationManager,
       sessionExpiry: input.sessionExpiry,
       createDelegationWasm: (params) => {
         graph.assertActive();
@@ -6983,7 +6991,6 @@ var _TinyCloudNode = class _TinyCloudNode {
       assertActive: () => graph.assertActive(),
       keyProvider: this._keyProvider,
       registry: this._capabilityRegistry,
-      delegationManager: this._delegationManager,
       sessionExpiry: this.getSessionExpiry(),
       createDelegationWasm: (params) => {
         graph.assertActive();
@@ -7966,16 +7973,8 @@ var _TinyCloudNode = class _TinyCloudNode {
    * ```typescript
    * const delegations = alice.delegationManager;
    *
-   * // Create a delegation
-   * const result = await delegations.create({
-   *   delegateDID: bob.did,
-   *   path: "shared/",
-   *   actions: ["tinycloud.kv/get", "tinycloud.kv/put"],
-   *   expiry: new Date(Date.now() + 24 * 60 * 60 * 1000), // 24 hours
-   * });
-   *
-   * // List delegations
-   * const listResult = await delegations.list();
+   * // Query account delegations
+   * const page = await delegations.query();
    *
    * // Revoke a delegation
    * await delegations.revoke(delegationCid);
@@ -8176,32 +8175,6 @@ var _TinyCloudNode = class _TinyCloudNode {
   // ===========================================================================
   // v2 Delegation Convenience Methods
   // ===========================================================================
-  /**
-   * Create a delegation using the v2 DelegationManager.
-   *
-   * This is a convenience method that wraps DelegationManager.create().
-   * For more control, use `this.delegationManager` directly.
-   *
-   * @param params - Delegation parameters
-   * @returns Result containing the created Delegation
-   *
-   * @example
-   * ```typescript
-   * const result = await alice.delegate({
-   *   delegateDID: bob.did,
-   *   path: "shared/",
-   *   actions: ["tinycloud.kv/get", "tinycloud.kv/put"],
-   *   expiry: new Date(Date.now() + 24 * 60 * 60 * 1000),
-   * });
-   *
-   * if (result.ok) {
-   *   console.log("Delegation created:", result.data.cid);
-   * }
-   * ```
-   */
-  async delegate(params) {
-    return this.delegationManager.create(params);
-  }
   /**
    * Revoke a delegation with the owner wallet when available. Session-only
    * clients continue to use their delegated revocation authority.
@@ -8227,14 +8200,6 @@ var _TinyCloudNode = class _TinyCloudNode {
       0x55n
     );
   }
-  /**
-   * List all delegations for the current session's space.
-   *
-   * @returns Result containing an array of Delegations
-   */
-  async listDelegations() {
-    return this.delegationManager.list();
-  }
   /**
    * Check if the current session has permission for a path and action.
    *
@@ -8362,7 +8327,8 @@ var _TinyCloudNode = class _TinyCloudNode {
         plan.grant,
         plan.operations,
         onPrepared,
-        options?.disableSubDelegation === true
+        options?.disableSubDelegation === true,
+        options?.requireActivation === true
       );
       return { delegation: delegation2, prompted: false };
     }
@@ -8372,7 +8338,8 @@ var _TinyCloudNode = class _TinyCloudNode {
       effectiveExpiration,
       session,
       onPrepared,
-      options?.disableSubDelegation === true
+      options?.disableSubDelegation === true,
+      options?.requireActivation === true
     );
     return { delegation, prompted: false };
   }
@@ -8603,7 +8570,7 @@ var _TinyCloudNode = class _TinyCloudNode {
    *
    * @internal
    */
-  async createDelegationViaWasmPath(did, entries, expirationTime, session, onPrepared, disableSubDelegation = false) {
+  async createDelegationViaWasmPath(did, entries, expirationTime, session, onPrepared, disableSubDelegation = false, requireActivation = false) {
     if (entries.length === 0) {
       throw new Error(
         "createDelegationViaWasmPath requires a non-empty entries array"
@@ -8687,15 +8654,10 @@ var _TinyCloudNode = class _TinyCloudNode {
       this.config.host,
       delegationHeader
     );
-    if (!activateResult.success) {
-      throw Object.assign(
-        new Error(`Failed to activate delegation with host: ${describeHostFailure2(activateResult)}`),
-        { cause: activateResult }
-      );
-    }
+    assertDelegationActivated(activateResult, delegation, requireActivation);
     return delegation;
   }
-  async createDelegationViaRuntimeGrant(did, entries, expirationTime, grant, requestedOperations, onPrepared, disableSubDelegation = false) {
+  async createDelegationViaRuntimeGrant(did, entries, expirationTime, grant, requestedOperations, onPrepared, disableSubDelegation = false, requireActivation = false) {
     this.assertRuntimeGrantCaveatsPreservable(entries, requestedOperations, grant);
     this.assertDelegationCaveatsPreservable(entries);
     const result = this.createDelegationWrapper({
@@ -8729,12 +8691,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       targetHost,
       delegationHeader
     );
-    if (!activateResult.success) {
-      throw Object.assign(
-        new Error(`Failed to activate delegation with host: ${describeHostFailure2(activateResult)}`),
-        { cause: activateResult }
-      );
-    }
+    assertDelegationActivated(activateResult, delegation, requireActivation);
     return delegation;
   }
   resolvePermissionSpace(space, session) {
@@ -9681,6 +9638,8 @@ var _TinyCloudNode = class _TinyCloudNode {
     };
   }
 };
+/** Set once per process: the registry sync was skipped for want of account access. */
+_TinyCloudNode.accountRegistrySkipLogged = false;
 // ===========================================================================
 // Capability-chain delegation (spec: .claude/specs/capability-chain.md)
 // ===========================================================================