@tinycloud/node-sdk 3.6.0-beta.6 → 3.6.0-beta.8

package/dist/index.cjs

@@ -17143,11 +17143,11 @@ function resolvedOptions(options) {
     verify: options.verify === true
   };
 }
-var import_sdk_core10, scheduler, ReplicationRuntime;
+var import_sdk_core11, scheduler, ReplicationRuntime;
 var init_runtime = __esm({
   "src/replication/runtime.ts"() {
     "use strict";
-    import_sdk_core10 = require("@tinycloud/sdk-core");
+    import_sdk_core11 = require("@tinycloud/sdk-core");
     scheduler = {
       now: () => Date.now(),
       setTimeout(fn, ms) {
@@ -17311,7 +17311,7 @@ var init_runtime = __esm({
             identity = services.canonicalReplicationIdentity({
               host: context.hosts[0],
               space: session.spaceId,
-              principal: input.principal ?? (0, import_sdk_core10.pkhDid)(input.address, input.chainId)
+              principal: input.principal ?? (0, import_sdk_core11.pkhDid)(input.address, input.chainId)
             });
           } catch {
             for (const prefix of this.options.prefixes) {
@@ -17460,11 +17460,11 @@ function verifiedOwnerConsentAnchor(session, wasmBindings, exactVerifiedRecap2)
     const issuedAt = Date.parse(signedIssuedAt);
     if (!Number.isSafeInteger(issuedAt) || issuedAt < 0) return null;
     const granted = exactVerifiedRecap2(verified).filter((entry) => entry.space === session.spaceId && entry.service === "kv").map((entry) => ({ ...entry, service: "tinycloud.kv" }));
-    const coversGetAndSync = granted.some((entry) => (0, import_sdk_core11.isCapabilitySubset)([{
+    const coversGetAndSync = granted.some((entry) => (0, import_sdk_core12.isCapabilitySubset)([{
       service: "tinycloud.kv",
       space: session.spaceId,
       path: entry.path,
-      actions: [import_sdk_core11.KV.GET, import_sdk_core11.KV.SYNC]
+      actions: [import_sdk_core12.KV.GET, import_sdk_core12.KV.SYNC]
     }], granted).subset);
     return coversGetAndSync ? { at: issuedAt, source: "siwe" } : null;
   } catch {
@@ -17510,7 +17510,7 @@ function caveatBranchesUnconstrained(value) {
   }
   if (!Array.isArray(value)) return false;
   try {
-    return (0, import_sdk_core11.canonicalizeRecapCaveats)(value) === (0, import_sdk_core11.canonicalizeRecapCaveats)(void 0);
+    return (0, import_sdk_core12.canonicalizeRecapCaveats)(value) === (0, import_sdk_core12.canonicalizeRecapCaveats)(void 0);
   } catch {
     return false;
   }
@@ -17529,8 +17529,8 @@ function ucanAttCovers(att, space, prefix, ability, options) {
     const path = kvPathInResource(resource, space);
     if (path === void 0) continue;
     for (const [granted, caveats] of Object.entries(abilities)) {
-      if (!(0, import_sdk_core11.actionContains)(granted, ability)) continue;
-      if (!(0, import_sdk_core11.isCapabilitySubset)(
+      if (!(0, import_sdk_core12.actionContains)(granted, ability)) continue;
+      if (!(0, import_sdk_core12.isCapabilitySubset)(
         [{ service: KV_SERVICE2, space, path: prefix, actions: [ability] }],
         [{ service: KV_SERVICE2, space, path, actions: [granted] }]
       ).subset) continue;
@@ -17550,7 +17550,7 @@ async function mintNodeReplicationGrant(deviceDid, entries, options, renewalSess
       assertRenewalParent(prepared.delegationHeader.Authorization, renewalSession);
     }
   } : options?.expiryMs === void 0 ? void 0 : { expiry: options.expiryMs };
-  const result = await node.delegateTo((0, import_sdk_core11.principalDid)(deviceDid), entries, delegateOptions);
+  const result = await node.delegateTo((0, import_sdk_core12.principalDid)(deviceDid), entries, delegateOptions);
   return {
     ucan: result.delegation.delegationHeader.Authorization,
     expiresAt: result.delegation.expiry.getTime()
@@ -17568,7 +17568,7 @@ function replicationScopeFromSignedSession(input) {
   for (const resource of Object.keys(grant.att)) {
     const space = resource.match(/^(?:tinycloud:\/\/)?(.+?)\/kv(?:\/|$)/)?.[1];
     if (space !== input.persistedSpace) continue;
-    const owner = (0, import_sdk_core11.parseSpaceUri)(space);
+    const owner = (0, import_sdk_core12.parseSpaceUri)(space);
     if (owner?.owner && owner.address && owner.chainId) return { space, principal: owner.owner };
   }
   return void 0;
@@ -17699,18 +17699,18 @@ function createReplicationAuthority(host) {
   };
   return authority;
 }
-var import_siwe3, import_sdk_core11, import_replica, parseUcanGrant, KV_GET2, KV_SYNC2, KV_SERVICE2, AUTHORITY_EXPIRY_MARGIN_MS;
+var import_siwe3, import_sdk_core12, import_replica, parseUcanGrant, KV_GET2, KV_SYNC2, KV_SERVICE2, AUTHORITY_EXPIRY_MARGIN_MS;
 var init_authority = __esm({
   "src/replication/authority.ts"() {
     "use strict";
     import_siwe3 = require("siwe");
-    import_sdk_core11 = require("@tinycloud/sdk-core");
+    import_sdk_core12 = require("@tinycloud/sdk-core");
     import_replica = require("@tinycloud/replica");
     init_config();
     init_authority_sign_in();
     parseUcanGrant = import_replica.parseUcanGrant;
-    KV_GET2 = import_sdk_core11.KV.GET;
-    KV_SYNC2 = import_sdk_core11.KV.SYNC;
+    KV_GET2 = import_sdk_core12.KV.GET;
+    KV_SYNC2 = import_sdk_core12.KV.SYNC;
     KV_SERVICE2 = "tinycloud.kv";
     AUTHORITY_EXPIRY_MARGIN_MS = 6e4;
   }
@@ -17792,172 +17792,172 @@ var init_gated_network = __esm({
 var src_exports = {};
 __export(src_exports, {
   ACCEPTED_MARKER_VERSIONS: () => ACCEPTED_MARKER_VERSIONS,
-  ACCOUNT_REGISTRY_PATH: () => import_sdk_core16.ACCOUNT_REGISTRY_PATH,
-  ACCOUNT_REGISTRY_SPACE: () => import_sdk_core16.ACCOUNT_REGISTRY_SPACE,
-  AccountService: () => import_sdk_core5.AccountService,
-  AutoApproveSpaceCreationHandler: () => import_sdk_core15.AutoApproveSpaceCreationHandler,
+  ACCOUNT_REGISTRY_PATH: () => import_sdk_core17.ACCOUNT_REGISTRY_PATH,
+  ACCOUNT_REGISTRY_SPACE: () => import_sdk_core17.ACCOUNT_REGISTRY_SPACE,
+  AccountService: () => import_sdk_core6.AccountService,
+  AutoApproveSpaceCreationHandler: () => import_sdk_core16.AutoApproveSpaceCreationHandler,
   BOOTSTRAP_COMPLETION_MARKER_KEY: () => BOOTSTRAP_COMPLETION_MARKER_KEY,
   BOOTSTRAP_COMPLETION_MARKER_VERSION: () => BOOTSTRAP_COMPLETION_MARKER_VERSION,
-  CapabilityKeyRegistry: () => import_sdk_core24.CapabilityKeyRegistry,
-  CapabilityKeyRegistryErrorCodes: () => import_sdk_core24.CapabilityKeyRegistryErrorCodes,
-  CaveatedDelegationUnsupportedError: () => import_sdk_core16.CaveatedDelegationUnsupportedError,
-  DECRYPT_ACTION: () => import_sdk_core21.DECRYPT_ACTION,
-  DECRYPT_FACT_TYPE: () => import_sdk_core21.DECRYPT_FACT_TYPE,
-  DECRYPT_RESULT_TYPE: () => import_sdk_core21.DECRYPT_RESULT_TYPE,
-  DEFAULT_ENCRYPTION_ALG: () => import_sdk_core21.DEFAULT_ENCRYPTION_ALG,
-  DEFAULT_KEY_VERSION: () => import_sdk_core21.DEFAULT_KEY_VERSION,
-  DEFAULT_MANIFEST_SPACE: () => import_sdk_core16.DEFAULT_MANIFEST_SPACE,
-  DEFAULT_MANIFEST_VERSION: () => import_sdk_core16.DEFAULT_MANIFEST_VERSION,
-  DEFAULT_SIGNED_READ_URL_EXPIRY_MS: () => import_sdk_core17.DEFAULT_SIGNED_READ_URL_EXPIRY_MS,
-  DataVaultService: () => import_sdk_core20.DataVaultService,
-  DatabaseHandle: () => import_sdk_core18.DatabaseHandle,
-  DecryptTransportResponseError: () => import_sdk_core21.DecryptTransportResponseError,
+  CapabilityKeyRegistry: () => import_sdk_core25.CapabilityKeyRegistry,
+  CapabilityKeyRegistryErrorCodes: () => import_sdk_core25.CapabilityKeyRegistryErrorCodes,
+  CaveatedDelegationUnsupportedError: () => import_sdk_core17.CaveatedDelegationUnsupportedError,
+  DECRYPT_ACTION: () => import_sdk_core22.DECRYPT_ACTION,
+  DECRYPT_FACT_TYPE: () => import_sdk_core22.DECRYPT_FACT_TYPE,
+  DECRYPT_RESULT_TYPE: () => import_sdk_core22.DECRYPT_RESULT_TYPE,
+  DEFAULT_ENCRYPTION_ALG: () => import_sdk_core22.DEFAULT_ENCRYPTION_ALG,
+  DEFAULT_KEY_VERSION: () => import_sdk_core22.DEFAULT_KEY_VERSION,
+  DEFAULT_MANIFEST_SPACE: () => import_sdk_core17.DEFAULT_MANIFEST_SPACE,
+  DEFAULT_MANIFEST_VERSION: () => import_sdk_core17.DEFAULT_MANIFEST_VERSION,
+  DEFAULT_SIGNED_READ_URL_EXPIRY_MS: () => import_sdk_core18.DEFAULT_SIGNED_READ_URL_EXPIRY_MS,
+  DataVaultService: () => import_sdk_core21.DataVaultService,
+  DatabaseHandle: () => import_sdk_core19.DatabaseHandle,
+  DecryptTransportResponseError: () => import_sdk_core22.DecryptTransportResponseError,
   DelegatedAccess: () => DelegatedAccess,
-  DelegationErrorCodes: () => import_sdk_core23.DelegationErrorCodes,
-  DelegationManager: () => import_sdk_core23.DelegationManager,
-  DuckDbAction: () => import_sdk_core19.DuckDbAction,
-  DuckDbDatabaseHandle: () => import_sdk_core19.DuckDbDatabaseHandle,
-  DuckDbService: () => import_sdk_core19.DuckDbService,
-  ENCRYPTION_NETWORK_URN_PREFIX: () => import_sdk_core21.ENCRYPTION_NETWORK_URN_PREFIX,
-  ENCRYPTION_SERVICE: () => import_sdk_core21.ENCRYPTION_SERVICE,
-  ENCRYPTION_SERVICE_SHORT: () => import_sdk_core21.ENCRYPTION_SERVICE_SHORT,
-  ENVELOPE_VERSION: () => import_sdk_core21.ENVELOPE_VERSION,
-  EncryptionService: () => import_sdk_core21.EncryptionService,
+  DelegationErrorCodes: () => import_sdk_core24.DelegationErrorCodes,
+  DelegationManager: () => import_sdk_core24.DelegationManager,
+  DuckDbAction: () => import_sdk_core20.DuckDbAction,
+  DuckDbDatabaseHandle: () => import_sdk_core20.DuckDbDatabaseHandle,
+  DuckDbService: () => import_sdk_core20.DuckDbService,
+  ENCRYPTION_NETWORK_URN_PREFIX: () => import_sdk_core22.ENCRYPTION_NETWORK_URN_PREFIX,
+  ENCRYPTION_SERVICE: () => import_sdk_core22.ENCRYPTION_SERVICE,
+  ENCRYPTION_SERVICE_SHORT: () => import_sdk_core22.ENCRYPTION_SERVICE_SHORT,
+  ENVELOPE_VERSION: () => import_sdk_core22.ENVELOPE_VERSION,
+  EncryptionService: () => import_sdk_core22.EncryptionService,
   FileSessionStorage: () => FileSessionStorage,
-  HooksService: () => import_sdk_core22.HooksService,
-  IdentityParseError: () => import_sdk_core15.IdentityParseError,
+  HooksService: () => import_sdk_core23.HooksService,
+  IdentityParseError: () => import_sdk_core16.IdentityParseError,
   InvalidRestoredSessionError: () => InvalidRestoredSessionError,
-  KVService: () => import_sdk_core17.KVService,
-  MAX_SECRET_SCOPE_LENGTH: () => import_sdk_core20.MAX_SECRET_SCOPE_LENGTH,
-  ManifestValidationError: () => import_sdk_core16.ManifestValidationError,
+  KVService: () => import_sdk_core18.KVService,
+  MAX_SECRET_SCOPE_LENGTH: () => import_sdk_core21.MAX_SECRET_SCOPE_LENGTH,
+  ManifestValidationError: () => import_sdk_core17.ManifestValidationError,
   MemorySessionStorage: () => MemorySessionStorage,
-  NETWORK_NAME_PATTERN: () => import_sdk_core21.NETWORK_NAME_PATTERN,
-  NetworkIdError: () => import_sdk_core21.NetworkIdError,
+  NETWORK_NAME_PATTERN: () => import_sdk_core22.NETWORK_NAME_PATTERN,
+  NetworkIdError: () => import_sdk_core22.NetworkIdError,
   NodeUserAuthorization: () => NodeUserAuthorization,
   NodeWasmBindings: () => NodeWasmBindings,
-  PermissionNotInManifestError: () => import_sdk_core16.PermissionNotInManifestError,
-  PrefixedKVService: () => import_sdk_core17.PrefixedKVService,
+  PermissionNotInManifestError: () => import_sdk_core17.PermissionNotInManifestError,
+  PrefixedKVService: () => import_sdk_core18.PrefixedKVService,
   PrivateKeySigner: () => PrivateKeySigner,
-  ProtocolMismatchError: () => import_sdk_core26.ProtocolMismatchError,
+  ProtocolMismatchError: () => import_sdk_core27.ProtocolMismatchError,
   REPLICA_LOGOUT_PENDING_FILE: () => REPLICA_LOGOUT_PENDING_FILE,
   RESTORED_GATE_MESSAGE: () => RESTORED_GATE_MESSAGE,
   RUNTIME_DELEGATION_REJECTIONS: () => RUNTIME_DELEGATION_REJECTIONS,
   RuntimeDelegationRejectedError: () => RuntimeDelegationRejectedError,
-  SECRET_NAME_RE: () => import_sdk_core20.SECRET_NAME_RE,
-  SECRET_SCOPE_RE: () => import_sdk_core20.SECRET_SCOPE_RE,
-  SQLAction: () => import_sdk_core18.SQLAction,
-  SQLService: () => import_sdk_core18.SQLService,
-  STORAGE_FULL_MESSAGE: () => import_sdk_core15.STORAGE_FULL_MESSAGE,
-  STORAGE_MANAGE_URL: () => import_sdk_core15.STORAGE_MANAGE_URL,
-  STORAGE_WRITE_TOO_LARGE_MESSAGE: () => import_sdk_core15.STORAGE_WRITE_TOO_LARGE_MESSAGE,
-  SecretsService: () => import_sdk_core20.SecretsService,
-  ServiceContext: () => import_sdk_core27.ServiceContext,
-  SessionExpiredError: () => import_sdk_core16.SessionExpiredError,
-  SharingService: () => import_sdk_core23.SharingService,
-  SilentNotificationHandler: () => import_sdk_core15.SilentNotificationHandler,
-  Space: () => import_sdk_core25.Space,
-  SpaceErrorCodes: () => import_sdk_core25.SpaceErrorCodes,
-  SpaceService: () => import_sdk_core25.SpaceService,
-  TC832_RESERVED_SCOPES: () => import_sdk_core20.TC832_RESERVED_SCOPES,
-  TinyCloud: () => import_sdk_core14.TinyCloud,
-  TinyCloudDebugLogger: () => import_sdk_core15.TinyCloudDebugLogger,
+  SECRET_NAME_RE: () => import_sdk_core21.SECRET_NAME_RE,
+  SECRET_SCOPE_RE: () => import_sdk_core21.SECRET_SCOPE_RE,
+  SQLAction: () => import_sdk_core19.SQLAction,
+  SQLService: () => import_sdk_core19.SQLService,
+  STORAGE_FULL_MESSAGE: () => import_sdk_core16.STORAGE_FULL_MESSAGE,
+  STORAGE_MANAGE_URL: () => import_sdk_core16.STORAGE_MANAGE_URL,
+  STORAGE_WRITE_TOO_LARGE_MESSAGE: () => import_sdk_core16.STORAGE_WRITE_TOO_LARGE_MESSAGE,
+  SecretsService: () => import_sdk_core21.SecretsService,
+  ServiceContext: () => import_sdk_core28.ServiceContext,
+  SessionExpiredError: () => import_sdk_core17.SessionExpiredError,
+  SharingService: () => import_sdk_core24.SharingService,
+  SilentNotificationHandler: () => import_sdk_core16.SilentNotificationHandler,
+  Space: () => import_sdk_core26.Space,
+  SpaceErrorCodes: () => import_sdk_core26.SpaceErrorCodes,
+  SpaceService: () => import_sdk_core26.SpaceService,
+  TC832_RESERVED_SCOPES: () => import_sdk_core21.TC832_RESERVED_SCOPES,
+  TinyCloud: () => import_sdk_core15.TinyCloud,
+  TinyCloudDebugLogger: () => import_sdk_core16.TinyCloudDebugLogger,
   TinyCloudNode: () => TinyCloudNode,
-  UnsupportedFeatureError: () => import_sdk_core26.UnsupportedFeatureError,
+  UnsupportedFeatureError: () => import_sdk_core27.UnsupportedFeatureError,
   UnsupportedSessionRestoreError: () => UnsupportedSessionRestoreError,
-  VAULT_PERMISSION_SERVICE: () => import_sdk_core16.VAULT_PERMISSION_SERVICE,
-  VaultHeaders: () => import_sdk_core20.VaultHeaders,
-  VaultPublicSpaceKVActions: () => import_sdk_core20.VaultPublicSpaceKVActions,
-  VersionCheckError: () => import_sdk_core26.VersionCheckError,
+  VAULT_PERMISSION_SERVICE: () => import_sdk_core17.VAULT_PERMISSION_SERVICE,
+  VaultHeaders: () => import_sdk_core21.VaultHeaders,
+  VaultPublicSpaceKVActions: () => import_sdk_core21.VaultPublicSpaceKVActions,
+  VersionCheckError: () => import_sdk_core27.VersionCheckError,
   WasmKeyProvider: () => WasmKeyProvider,
   activateCompactRuntimeDelegation: () => activateCompactRuntimeDelegation,
   activateValidatedRuntimeDelegation: () => activateValidatedRuntimeDelegation,
-  addressStorageKey: () => import_sdk_core15.addressStorageKey,
-  appSecretScope: () => import_sdk_core20.appSecretScope,
+  addressStorageKey: () => import_sdk_core16.addressStorageKey,
+  appSecretScope: () => import_sdk_core21.appSecretScope,
   assertProfileLogoutClear: () => assertProfileLogoutClear,
-  buildCanonicalDecryptRequest: () => import_sdk_core21.buildCanonicalDecryptRequest,
-  buildDecryptAttenuation: () => import_sdk_core21.buildDecryptAttenuation,
-  buildDecryptFacts: () => import_sdk_core21.buildDecryptFacts,
-  buildDecryptInvocation: () => import_sdk_core21.buildDecryptInvocation,
-  buildNetworkId: () => import_sdk_core21.buildNetworkId,
-  buildSpaceUri: () => import_sdk_core25.buildSpaceUri,
-  canonicalHashHex: () => import_sdk_core21.canonicalHashHex,
-  canonicalSignedResponse: () => import_sdk_core21.canonicalSignedResponse,
-  canonicalizeAddress: () => import_sdk_core15.canonicalizeAddress,
-  canonicalizeDid: () => import_sdk_core15.canonicalizeDid,
-  canonicalizeDidUrl: () => import_sdk_core15.canonicalizeDidUrl,
-  canonicalizeEncryptionJson: () => import_sdk_core21.canonicalizeEncryptionJson,
-  canonicalizeNetworkId: () => import_sdk_core15.canonicalizeNetworkId,
-  canonicalizeSecretScope: () => import_sdk_core20.canonicalizeSecretScope,
-  checkDecryptInvocationInput: () => import_sdk_core21.checkDecryptInvocationInput,
-  checkNodeInfo: () => import_sdk_core26.checkNodeInfo,
-  clearTinyCloudDebugLogs: () => import_sdk_core15.clearTinyCloudDebugLogs,
-  composeManifestRequest: () => import_sdk_core16.composeManifestRequest,
-  createCapabilityKeyRegistry: () => import_sdk_core24.createCapabilityKeyRegistry,
-  createOpenKeyCallbackSigningStrategy: () => import_sdk_core3.createOpenKeyCallbackSigningStrategy,
+  buildCanonicalDecryptRequest: () => import_sdk_core22.buildCanonicalDecryptRequest,
+  buildDecryptAttenuation: () => import_sdk_core22.buildDecryptAttenuation,
+  buildDecryptFacts: () => import_sdk_core22.buildDecryptFacts,
+  buildDecryptInvocation: () => import_sdk_core22.buildDecryptInvocation,
+  buildNetworkId: () => import_sdk_core22.buildNetworkId,
+  buildSpaceUri: () => import_sdk_core26.buildSpaceUri,
+  canonicalHashHex: () => import_sdk_core22.canonicalHashHex,
+  canonicalSignedResponse: () => import_sdk_core22.canonicalSignedResponse,
+  canonicalizeAddress: () => import_sdk_core16.canonicalizeAddress,
+  canonicalizeDid: () => import_sdk_core16.canonicalizeDid,
+  canonicalizeDidUrl: () => import_sdk_core16.canonicalizeDidUrl,
+  canonicalizeEncryptionJson: () => import_sdk_core22.canonicalizeEncryptionJson,
+  canonicalizeNetworkId: () => import_sdk_core16.canonicalizeNetworkId,
+  canonicalizeSecretScope: () => import_sdk_core21.canonicalizeSecretScope,
+  checkDecryptInvocationInput: () => import_sdk_core22.checkDecryptInvocationInput,
+  checkNodeInfo: () => import_sdk_core27.checkNodeInfo,
+  clearTinyCloudDebugLogs: () => import_sdk_core16.clearTinyCloudDebugLogs,
+  composeManifestRequest: () => import_sdk_core17.composeManifestRequest,
+  createCapabilityKeyRegistry: () => import_sdk_core25.createCapabilityKeyRegistry,
+  createOpenKeyCallbackSigningStrategy: () => import_sdk_core4.createOpenKeyCallbackSigningStrategy,
   createProfileReplicaPurge: () => createProfileReplicaPurge,
-  createSharingService: () => import_sdk_core23.createSharingService,
-  createSpaceService: () => import_sdk_core25.createSpaceService,
-  createVaultCrypto: () => import_sdk_core20.createVaultCrypto,
+  createSharingService: () => import_sdk_core24.createSharingService,
+  createSpaceService: () => import_sdk_core26.createSpaceService,
+  createVaultCrypto: () => import_sdk_core21.createVaultCrypto,
   createWasmKeyProvider: () => createWasmKeyProvider,
-  decryptEnvelopeWithKey: () => import_sdk_core21.decryptEnvelopeWithKey,
+  decryptEnvelopeWithKey: () => import_sdk_core22.decryptEnvelopeWithKey,
   defaultSignStrategy: () => defaultSignStrategy,
-  defaultSpaceCreationHandler: () => import_sdk_core15.defaultSpaceCreationHandler,
-  deriveSignedReceiverKey: () => import_sdk_core21.deriveSignedReceiverKey,
+  defaultSpaceCreationHandler: () => import_sdk_core16.defaultSpaceCreationHandler,
+  deriveSignedReceiverKey: () => import_sdk_core22.deriveSignedReceiverKey,
   deserializeDelegation: () => deserializeDelegation,
-  didCacheKey: () => import_sdk_core15.didCacheKey,
-  didEquals: () => import_sdk_core15.didEquals,
-  disableTinyCloudDebug: () => import_sdk_core15.disableTinyCloudDebug,
-  discoverNetwork: () => import_sdk_core21.discoverNetwork,
-  enableTinyCloudDebug: () => import_sdk_core15.enableTinyCloudDebug,
-  encryptToNetwork: () => import_sdk_core21.encryptToNetwork,
-  encryptionBase64Decode: () => import_sdk_core21.encryptionBase64Decode,
-  encryptionBase64Encode: () => import_sdk_core21.encryptionBase64Encode,
-  encryptionError: () => import_sdk_core21.encryptionError,
-  encryptionUtf8Decode: () => import_sdk_core21.encryptionUtf8Decode,
-  encryptionUtf8Encode: () => import_sdk_core21.encryptionUtf8Encode,
-  ensureNetworkUsableForDecrypt: () => import_sdk_core21.ensureNetworkUsableForDecrypt,
-  expandActionShortNames: () => import_sdk_core16.expandActionShortNames,
-  expandPermissionEntries: () => import_sdk_core16.expandPermissionEntries,
-  expandPermissionEntry: () => import_sdk_core16.expandPermissionEntry,
+  didCacheKey: () => import_sdk_core16.didCacheKey,
+  didEquals: () => import_sdk_core16.didEquals,
+  disableTinyCloudDebug: () => import_sdk_core16.disableTinyCloudDebug,
+  discoverNetwork: () => import_sdk_core22.discoverNetwork,
+  enableTinyCloudDebug: () => import_sdk_core16.enableTinyCloudDebug,
+  encryptToNetwork: () => import_sdk_core22.encryptToNetwork,
+  encryptionBase64Decode: () => import_sdk_core22.encryptionBase64Decode,
+  encryptionBase64Encode: () => import_sdk_core22.encryptionBase64Encode,
+  encryptionError: () => import_sdk_core22.encryptionError,
+  encryptionUtf8Decode: () => import_sdk_core22.encryptionUtf8Decode,
+  encryptionUtf8Encode: () => import_sdk_core22.encryptionUtf8Encode,
+  ensureNetworkUsableForDecrypt: () => import_sdk_core22.ensureNetworkUsableForDecrypt,
+  expandActionShortNames: () => import_sdk_core17.expandActionShortNames,
+  expandPermissionEntries: () => import_sdk_core17.expandPermissionEntries,
+  expandPermissionEntry: () => import_sdk_core17.expandPermissionEntry,
   extractSiweExpiration: () => extractSiweExpiration,
-  generateRandomReceiverKey: () => import_sdk_core21.generateRandomReceiverKey,
-  getTinyCloudDebugLogs: () => import_sdk_core15.getTinyCloudDebugLogs,
+  generateRandomReceiverKey: () => import_sdk_core22.generateRandomReceiverKey,
+  getTinyCloudDebugLogs: () => import_sdk_core16.getTinyCloudDebugLogs,
   grantAuthRequest: () => grantAuthRequest,
-  hexDecode: () => import_sdk_core21.hexDecode,
-  hexEncode: () => import_sdk_core21.hexEncode,
-  installTinyCloudDebugGlobals: () => import_sdk_core15.installTinyCloudDebugGlobals,
-  isCapabilitySubset: () => import_sdk_core16.isCapabilitySubset,
-  isEvmAddress: () => import_sdk_core15.isEvmAddress,
-  isNetworkId: () => import_sdk_core21.isNetworkId,
-  isStorageFullError: () => import_sdk_core15.isStorageFullError,
-  loadManifest: () => import_sdk_core16.loadManifest,
+  hexDecode: () => import_sdk_core22.hexDecode,
+  hexEncode: () => import_sdk_core22.hexEncode,
+  installTinyCloudDebugGlobals: () => import_sdk_core16.installTinyCloudDebugGlobals,
+  isCapabilitySubset: () => import_sdk_core17.isCapabilitySubset,
+  isEvmAddress: () => import_sdk_core16.isEvmAddress,
+  isNetworkId: () => import_sdk_core22.isNetworkId,
+  isStorageFullError: () => import_sdk_core16.isStorageFullError,
+  loadManifest: () => import_sdk_core17.loadManifest,
   logoutPrincipalDigest: () => logoutPrincipalDigest,
-  makePkhSpaceId: () => import_sdk_core15.makePkhSpaceId,
-  makePublicSpaceId: () => import_sdk_core25.makePublicSpaceId,
-  networkDiscoveryKey: () => import_sdk_core21.networkDiscoveryKey,
-  openWrappedKey: () => import_sdk_core21.openWrappedKey,
-  parseCanonicalNetworkId: () => import_sdk_core15.parseCanonicalNetworkId,
-  parseExpiry: () => import_sdk_core16.parseExpiry,
-  parseNetworkId: () => import_sdk_core21.parseNetworkId,
-  parsePkhDid: () => import_sdk_core15.parsePkhDid,
-  parseSecretCatalogKey: () => import_sdk_core20.parseSecretCatalogKey,
-  parseSpaceUri: () => import_sdk_core25.parseSpaceUri,
-  pkhDid: () => import_sdk_core15.pkhDid,
-  principalDid: () => import_sdk_core15.principalDid,
-  principalDidEquals: () => import_sdk_core15.principalDidEquals,
-  resolveManifest: () => import_sdk_core16.resolveManifest,
-  resolveSecretListPrefix: () => import_sdk_core20.resolveSecretListPrefix,
-  resolveSecretPath: () => import_sdk_core20.resolveSecretPath,
-  resourceCapabilitiesToSpaceAbilitiesMap: () => import_sdk_core16.resourceCapabilitiesToSpaceAbilitiesMap,
+  makePkhSpaceId: () => import_sdk_core16.makePkhSpaceId,
+  makePublicSpaceId: () => import_sdk_core26.makePublicSpaceId,
+  networkDiscoveryKey: () => import_sdk_core22.networkDiscoveryKey,
+  openWrappedKey: () => import_sdk_core22.openWrappedKey,
+  parseCanonicalNetworkId: () => import_sdk_core16.parseCanonicalNetworkId,
+  parseExpiry: () => import_sdk_core17.parseExpiry,
+  parseNetworkId: () => import_sdk_core22.parseNetworkId,
+  parsePkhDid: () => import_sdk_core16.parsePkhDid,
+  parseSecretCatalogKey: () => import_sdk_core21.parseSecretCatalogKey,
+  parseSpaceUri: () => import_sdk_core26.parseSpaceUri,
+  pkhDid: () => import_sdk_core16.pkhDid,
+  principalDid: () => import_sdk_core16.principalDid,
+  principalDidEquals: () => import_sdk_core16.principalDidEquals,
+  resolveManifest: () => import_sdk_core17.resolveManifest,
+  resolveSecretListPrefix: () => import_sdk_core21.resolveSecretListPrefix,
+  resolveSecretPath: () => import_sdk_core21.resolveSecretPath,
+  resourceCapabilitiesToSpaceAbilitiesMap: () => import_sdk_core17.resourceCapabilitiesToSpaceAbilitiesMap,
   serializeDelegation: () => serializeDelegation,
   signedCompactUcanExpiry: () => signedCompactUcanExpiry,
   siweRuntimeDelegation: () => siweRuntimeDelegation,
   sqliteReplicaStorage: () => sqliteReplicaStorage,
-  storageUsageState: () => import_sdk_core15.storageUsageState,
-  tinyCloudDebugLogger: () => import_sdk_core15.tinyCloudDebugLogger,
-  validateEnvelope: () => import_sdk_core21.validateEnvelope,
-  validateManifest: () => import_sdk_core16.validateManifest,
-  verifyDecryptResponse: () => import_sdk_core21.verifyDecryptResponse,
+  storageUsageState: () => import_sdk_core16.storageUsageState,
+  tinyCloudDebugLogger: () => import_sdk_core16.tinyCloudDebugLogger,
+  validateEnvelope: () => import_sdk_core22.validateEnvelope,
+  validateManifest: () => import_sdk_core17.validateManifest,
+  verifyDecryptResponse: () => import_sdk_core22.verifyDecryptResponse,
   wireOpenKeyAuthorize: () => wireOpenKeyAuthorize
 });
 module.exports = __toCommonJS(src_exports);
@@ -18785,18 +18785,31 @@ function getNodeReplicationLoaders() {
 }
 
 // src/TinyCloudNode.ts
-var import_sdk_core9 = require("@tinycloud/sdk-core");
+var import_sdk_core10 = require("@tinycloud/sdk-core");
 var import_sdk_services3 = require("@tinycloud/sdk-services");
 var import_requestLog2 = require("@tinycloud/sdk-services/telemetry/requestLog");
 
 // src/authorization/NodeUserAuthorization.ts
 var import_node_crypto = require("crypto");
 var import_siwe = require("siwe");
-var import_sdk_core4 = require("@tinycloud/sdk-core");
+var import_sdk_core5 = require("@tinycloud/sdk-core");
 init_authority_sign_in();
 
-// src/authorization/strategies.ts
+// src/authorization/caveatRefusal.ts
 var import_sdk_core3 = require("@tinycloud/sdk-core");
+function refuseCaveated(input) {
+  const caveated = [input ?? []].flat().flatMap((item) => [item, ...item.permissions ?? []]).filter(({ caveats }) => {
+    try {
+      return caveats === null || !(0, import_sdk_core3.recapCaveatsEqual)(caveats, void 0);
+    } catch {
+      return true;
+    }
+  });
+  if (caveated.length) throw new import_sdk_core3.CaveatedDelegationUnsupportedError(caveated);
+}
+
+// src/authorization/strategies.ts
+var import_sdk_core4 = require("@tinycloud/sdk-core");
 var defaultSignStrategy = { type: "auto-sign" };
 
 // src/storage/MemorySessionStorage.ts
@@ -18875,8 +18888,8 @@ function pkhSpaceIdentity(spaceId) {
   const match = /^(tinycloud:pkh:eip155:\d+:)(0x[0-9a-fA-F]{40})(:.+)$/.exec(spaceId);
   return match === null ? spaceId : `${match[1]}${match[2].toLowerCase()}${match[3]}`;
 }
-var DECRYPT_ACTION = import_sdk_core4.ENCRYPTION.DECRYPT;
-var NETWORK_CREATE_ACTION = import_sdk_core4.ENCRYPTION.NETWORK_CREATE;
+var DECRYPT_ACTION = import_sdk_core5.ENCRYPTION.DECRYPT;
+var NETWORK_CREATE_ACTION = import_sdk_core5.ENCRYPTION.NETWORK_CREATE;
 function describeHostFailure(result) {
   const text = result.error?.trim();
   return text ? `${result.status} - ${text}` : `${result.status}`;
@@ -18904,7 +18917,7 @@ function canonicalOpenKeyManifestSha256Hex(value) {
 }
 function didPrincipalMatches(actual, expected) {
   try {
-    return (0, import_sdk_core4.principalDidEquals)(actual, expected);
+    return (0, import_sdk_core5.principalDidEquals)(actual, expected);
   } catch {
     return actual === expected;
   }
@@ -18920,7 +18933,7 @@ function addRawAbility(rawAbilities, resource, action) {
   }
 }
 function primaryManifestSpace(resources) {
-  return resources.find((entry) => entry.space !== "account")?.space ?? resources[0]?.space ?? import_sdk_core4.DEFAULT_MANIFEST_SPACE;
+  return resources.find((entry) => entry.space !== "account")?.space ?? resources[0]?.space ?? import_sdk_core5.DEFAULT_MANIFEST_SPACE;
 }
 function cloneAbilitiesMap(actions) {
   return Object.fromEntries(
@@ -18961,30 +18974,30 @@ var NodeUserAuthorization = class {
     this.spacePrefix = config.spacePrefix ?? "default";
     this.defaultActions = config.defaultActions ?? {
       kv: {
-        "": [import_sdk_core4.KV.PUT, import_sdk_core4.KV.GET, import_sdk_core4.KV.DEL, import_sdk_core4.KV.LIST, import_sdk_core4.KV.METADATA]
+        "": [import_sdk_core5.KV.PUT, import_sdk_core5.KV.GET, import_sdk_core5.KV.DEL, import_sdk_core5.KV.LIST, import_sdk_core5.KV.METADATA]
       },
       sql: {
-        "": [import_sdk_core4.SQL.READ, import_sdk_core4.SQL.WRITE, import_sdk_core4.SQL.SCHEMA, import_sdk_core4.SQL.ADMIN, import_sdk_core4.SQL.EXPORT]
+        "": [import_sdk_core5.SQL.READ, import_sdk_core5.SQL.WRITE, import_sdk_core5.SQL.SCHEMA, import_sdk_core5.SQL.ADMIN, import_sdk_core5.SQL.EXPORT]
       },
       duckdb: {
         "": [
-          import_sdk_core4.DUCKDB.READ,
-          import_sdk_core4.DUCKDB.WRITE,
-          import_sdk_core4.DUCKDB.ADMIN,
-          import_sdk_core4.DUCKDB.DESCRIBE,
-          import_sdk_core4.DUCKDB.EXPORT,
-          import_sdk_core4.DUCKDB.IMPORT,
-          import_sdk_core4.DUCKDB.EXECUTE
+          import_sdk_core5.DUCKDB.READ,
+          import_sdk_core5.DUCKDB.WRITE,
+          import_sdk_core5.DUCKDB.ADMIN,
+          import_sdk_core5.DUCKDB.DESCRIBE,
+          import_sdk_core5.DUCKDB.EXPORT,
+          import_sdk_core5.DUCKDB.IMPORT,
+          import_sdk_core5.DUCKDB.EXECUTE
         ]
       },
       capabilities: {
-        "": [import_sdk_core4.CAPABILITIES.READ]
+        "": [import_sdk_core5.CAPABILITIES.READ]
       },
       hooks: {
-        "": [import_sdk_core4.HOOKS.SUBSCRIBE, import_sdk_core4.HOOKS.REGISTER, import_sdk_core4.HOOKS.LIST, import_sdk_core4.HOOKS.UNREGISTER]
+        "": [import_sdk_core5.HOOKS.SUBSCRIBE, import_sdk_core5.HOOKS.REGISTER, import_sdk_core5.HOOKS.LIST, import_sdk_core5.HOOKS.UNREGISTER]
       }
     };
-    this.sessionExpirationMs = config.sessionExpirationMs ?? import_sdk_core4.EXPIRY.SESSION_MS;
+    this.sessionExpirationMs = config.sessionExpirationMs ?? import_sdk_core5.EXPIRY.SESSION_MS;
     this.autoCreateSpace = config.autoCreateSpace ?? false;
     this.spaceCreationHandler = config.spaceCreationHandler;
     this.tinycloudHosts = config.tinycloudHosts;
@@ -18993,7 +19006,7 @@ var NodeUserAuthorization = class {
     this.registryPolicy = config.registryPolicy;
     this.newUserHost = config.newUserHost;
     this.registryChainId = config.registryChainId;
-    this.registrySequenceStore = config.registrySequenceStore ?? (0, import_sdk_core4.createInMemoryRegistrySequenceStore)();
+    this.registrySequenceStore = config.registrySequenceStore ?? (0, import_sdk_core5.createInMemoryRegistrySequenceStore)();
     this.onNodeNotFound = config.onNodeNotFound;
     this.autoDiscoverLocalNode = config.autoDiscoverLocalNode;
     this.localNodeUrl = config.localNodeUrl;
@@ -19070,7 +19083,7 @@ var NodeUserAuthorization = class {
    *   {@link ensureTinyCloudHosts}.
    */
   setRestoredTinyCloudSession(session, hosts) {
-    const address = (0, import_sdk_core4.canonicalizeAddress)(session.address);
+    const address = (0, import_sdk_core5.canonicalizeAddress)(session.address);
     this._tinyCloudSession = { ...session, address };
     this._address = address;
     this._chainId = session.chainId;
@@ -19158,7 +19171,7 @@ var NodeUserAuthorization = class {
       return;
     }
     if (this.registryPolicy === "fail-closed") {
-      const resolved2 = await (0, import_sdk_core4.resolveFailClosedTinyCloudHosts)(address, {
+      const resolved2 = await (0, import_sdk_core5.resolveFailClosedTinyCloudHosts)(address, {
         registryUrl: this.tinycloudRegistryUrl,
         registryChainId: this.registryChainId,
         newUserHost: this.newUserHost,
@@ -19174,8 +19187,8 @@ var NodeUserAuthorization = class {
       this.registryVerdict = resolved2.verdict;
       return;
     }
-    const subject = (0, import_sdk_core4.pkhDid)(address, chainId);
-    const resolved = await (0, import_sdk_core4.resolveTinyCloudHosts)(subject, {
+    const subject = (0, import_sdk_core5.pkhDid)(address, chainId);
+    const resolved = await (0, import_sdk_core5.resolveTinyCloudHosts)(subject, {
       registryUrl: this.tinycloudRegistryUrl,
       fallbackHosts: this.tinycloudFallbackHosts,
       autoDiscoverLocalNode: this.autoDiscoverLocalNode,
@@ -19201,16 +19214,16 @@ var NodeUserAuthorization = class {
       throw new Error("Must be signed in to create a space");
     }
     await this.ensureTinyCloudHosts();
-    const subject = (0, import_sdk_core4.registryOwnerSubjectV1)(this._address, this.registryChainId);
+    const subject = (0, import_sdk_core5.registryOwnerSubjectV1)(this._address, this.registryChainId);
     let verdict = this.registryVerdict;
     if (verdict?.subject !== subject || verdict.status === "unavailable") {
-      verdict = await (0, import_sdk_core4.lookupOwnerRegistryVerdict)(subject, {
+      verdict = await (0, import_sdk_core5.lookupOwnerRegistryVerdict)(subject, {
         registryUrl: this.tinycloudRegistryUrl,
         sequenceStore: this.registrySequenceStore
       });
       this.registryVerdict = verdict;
     }
-    (0, import_sdk_core4.assertSpaceCreationAllowed)(verdict, this.primaryTinyCloudHost);
+    (0, import_sdk_core5.assertSpaceCreationAllowed)(verdict, this.primaryTinyCloudHost);
   }
   requireTinyCloudHosts() {
     if (!this.tinycloudHosts || this.tinycloudHosts.length === 0) {
@@ -19229,7 +19242,7 @@ var NodeUserAuthorization = class {
   }
   async refreshNodeInfo() {
     const infoHost = this.primaryTinyCloudHost;
-    const nodeInfo = await (0, import_sdk_core4.checkNodeInfo)(infoHost, this.wasm.protocolVersion());
+    const nodeInfo = await (0, import_sdk_core5.checkNodeInfo)(infoHost, this.wasm.protocolVersion());
     this._nodeFeatures = nodeInfo.features;
     this._nodeFeaturesKnown = true;
     this._nodeInfoIdentity = nodeInfo.nodeId ? { host: infoHost, nodeId: nodeInfo.nodeId } : void 0;
@@ -19282,7 +19295,7 @@ var NodeUserAuthorization = class {
     if (this._manifest === void 0) {
       return void 0;
     }
-    this._capabilityRequest = (0, import_sdk_core4.composeManifestRequest)(
+    this._capabilityRequest = (0, import_sdk_core5.composeManifestRequest)(
       Array.isArray(this._manifest) ? this._manifest : [this._manifest],
       {
         includeAccountRegistryPermissions: this.includeAccountRegistryPermissions
@@ -19294,7 +19307,7 @@ var NodeUserAuthorization = class {
     if (space.startsWith("tinycloud:")) {
       return space;
     }
-    return (0, import_sdk_core4.makePkhSpaceId)(address, chainId, space);
+    return (0, import_sdk_core5.makePkhSpaceId)(address, chainId, space);
   }
   /**
    * The plain-session primary abilities: `defaultActions` (the shared table)
@@ -19305,10 +19318,10 @@ var NodeUserAuthorization = class {
    * can't disagree (§4.6).
    */
   primaryActionsForSignIn() {
-    const primaryActions = this.includeAccountRegistryPermissions && this.spacePrefix === import_sdk_core4.ACCOUNT_REGISTRY_SPACE ? cloneAbilitiesMap(this.defaultActions) : this.defaultActions;
-    if (this.includeAccountRegistryPermissions && this.spacePrefix === import_sdk_core4.ACCOUNT_REGISTRY_SPACE) {
-      const accountAbilities = (0, import_sdk_core4.resourceCapabilitiesToAbilitiesMap)(
-        import_sdk_core4.ACCOUNT_MANIFEST_PERMISSIONS
+    const primaryActions = this.includeAccountRegistryPermissions && this.spacePrefix === import_sdk_core5.ACCOUNT_REGISTRY_SPACE ? cloneAbilitiesMap(this.defaultActions) : this.defaultActions;
+    if (this.includeAccountRegistryPermissions && this.spacePrefix === import_sdk_core5.ACCOUNT_REGISTRY_SPACE) {
+      const accountAbilities = (0, import_sdk_core5.resourceCapabilitiesToAbilitiesMap)(
+        import_sdk_core5.ACCOUNT_MANIFEST_PERMISSIONS
       );
       for (const [service, paths] of Object.entries(accountAbilities)) {
         const existingPaths = primaryActions[service] ?? (primaryActions[service] = {});
@@ -19335,11 +19348,11 @@ var NodeUserAuthorization = class {
     return {
       kv: {
         "vault/secrets/": [
-          import_sdk_core4.KV.GET,
-          import_sdk_core4.KV.PUT,
-          import_sdk_core4.KV.DEL,
-          import_sdk_core4.KV.LIST,
-          import_sdk_core4.KV.METADATA
+          import_sdk_core5.KV.GET,
+          import_sdk_core5.KV.PUT,
+          import_sdk_core5.KV.DEL,
+          import_sdk_core5.KV.LIST,
+          import_sdk_core5.KV.METADATA
         ]
       }
     };
@@ -19354,7 +19367,7 @@ var NodeUserAuthorization = class {
   signInPermissionInputs(address, chainId) {
     const request = this.getCapabilityRequest();
     if (request === void 0) {
-      const primarySpaceId2 = (0, import_sdk_core4.makePkhSpaceId)(address, chainId, this.spacePrefix);
+      const primarySpaceId2 = (0, import_sdk_core5.makePkhSpaceId)(address, chainId, this.spacePrefix);
       const effectivePrimary = this.spacePrefix === "secrets" ? this.secretsPrimaryAbilities() : this.primaryActionsForSignIn();
       const kvPaths = effectivePrimary["kv"] ?? {};
       return {
@@ -19368,7 +19381,7 @@ var NodeUserAuthorization = class {
       };
     }
     const spaceResources = request.resources.filter(
-      (entry) => entry.service !== import_sdk_core4.ENCRYPTION_PERMISSION_SERVICE
+      (entry) => entry.service !== import_sdk_core5.ENCRYPTION_PERMISSION_SERVICE
     );
     const primarySpaceName = primaryManifestSpace(spaceResources);
     const primarySpaceId = this.resolveSpaceName(
@@ -19434,21 +19447,21 @@ var NodeUserAuthorization = class {
     });
   }
   defaultEncryptionNetworkId(address, chainId) {
-    return `urn:tinycloud:encryption:${(0, import_sdk_core4.pkhDid)(address, chainId)}:default`;
+    return `urn:tinycloud:encryption:${(0, import_sdk_core5.pkhDid)(address, chainId)}:default`;
   }
   resolveSignInCapabilities(address, chainId) {
     const request = this.getCapabilityRequest();
     if (request === void 0) {
       const defaultNetworkId = this.defaultEncryptionNetworkId(address, chainId);
-      const primarySpaceId2 = (0, import_sdk_core4.makePkhSpaceId)(address, chainId, this.spacePrefix);
-      const secretsSpaceId = (0, import_sdk_core4.makePkhSpaceId)(address, chainId, "secrets");
+      const primarySpaceId2 = (0, import_sdk_core5.makePkhSpaceId)(address, chainId, this.spacePrefix);
+      const secretsSpaceId = (0, import_sdk_core5.makePkhSpaceId)(address, chainId, "secrets");
       const primaryActions = this.primaryActionsForSignIn();
       const spaceAbilities2 = {
         [primarySpaceId2]: primaryActions,
         [secretsSpaceId]: this.secretsPrimaryAbilities()
       };
-      if (this.includeAccountRegistryPermissions && this.spacePrefix !== import_sdk_core4.ACCOUNT_REGISTRY_SPACE) {
-        spaceAbilities2[(0, import_sdk_core4.makePkhSpaceId)(address, chainId, import_sdk_core4.ACCOUNT_REGISTRY_SPACE)] = (0, import_sdk_core4.resourceCapabilitiesToAbilitiesMap)(import_sdk_core4.ACCOUNT_MANIFEST_PERMISSIONS);
+      if (this.includeAccountRegistryPermissions && this.spacePrefix !== import_sdk_core5.ACCOUNT_REGISTRY_SPACE) {
+        spaceAbilities2[(0, import_sdk_core5.makePkhSpaceId)(address, chainId, import_sdk_core5.ACCOUNT_REGISTRY_SPACE)] = (0, import_sdk_core5.resourceCapabilitiesToAbilitiesMap)(import_sdk_core5.ACCOUNT_MANIFEST_PERMISSIONS);
       }
       const mergedPrimary = this.mergeReplicationEntries(
         spaceAbilities2,
@@ -19469,16 +19482,16 @@ var NodeUserAuthorization = class {
       };
     }
     const rawAbilities = {};
-    const currentDid = (0, import_sdk_core4.pkhDid)(address, chainId);
+    const currentDid = (0, import_sdk_core5.pkhDid)(address, chainId);
     const spaceResources = request.resources.filter((entry) => {
-      if (entry.service !== import_sdk_core4.ENCRYPTION_PERMISSION_SERVICE) {
+      if (entry.service !== import_sdk_core5.ENCRYPTION_PERMISSION_SERVICE) {
         return true;
       }
       for (const action of entry.actions) {
         addRawAbility(rawAbilities, entry.path, action);
       }
       if (entry.actions.includes(DECRYPT_ACTION)) {
-        const parsed = (0, import_sdk_core4.parseNetworkId)(entry.path);
+        const parsed = (0, import_sdk_core5.parseNetworkId)(entry.path);
         if (didPrincipalMatches(parsed.ownerDid, currentDid)) {
           addRawAbility(rawAbilities, entry.path, NETWORK_CREATE_ACTION);
         }
@@ -19491,7 +19504,7 @@ var NodeUserAuthorization = class {
       address,
       chainId
     );
-    const bySpace = (0, import_sdk_core4.resourceCapabilitiesToSpaceAbilitiesMap)(spaceResources);
+    const bySpace = (0, import_sdk_core5.resourceCapabilitiesToSpaceAbilitiesMap)(spaceResources);
     const spaceAbilities = {};
     for (const [space, abilities] of Object.entries(bySpace)) {
       spaceAbilities[this.resolveSpaceName(space, address, chainId)] = abilities;
@@ -19499,7 +19512,7 @@ var NodeUserAuthorization = class {
     const mergedPrimaryAbilities = this.mergeReplicationEntries(
       spaceAbilities,
       primarySpaceId,
-      spaceAbilities[primarySpaceId] ?? (0, import_sdk_core4.resourceCapabilitiesToAbilitiesMap)([]),
+      spaceAbilities[primarySpaceId] ?? (0, import_sdk_core5.resourceCapabilitiesToAbilitiesMap)([]),
       augmentSignInEntriesWithReplication({
         ...this.signInPermissionInputs(address, chainId),
         replication: this.replication
@@ -19571,7 +19584,7 @@ var NodeUserAuthorization = class {
     await this.ensureTinyCloudHosts();
     const host = this.primaryTinyCloudHost;
     const spaceId = targetSpaceId ?? this._tinyCloudSession.spaceId;
-    const peerId = await (0, import_sdk_core4.fetchPeerId)(host, spaceId, signal);
+    const peerId = await (0, import_sdk_core5.fetchPeerId)(host, spaceId, signal);
     const siwe = this.wasm.generateHostSIWEMessage({
       address: this._address,
       chainId: this._chainId,
@@ -19601,7 +19614,7 @@ var NodeUserAuthorization = class {
     }
     if (signal?.aborted) throw signal.reason;
     const headers = this.wasm.siweToDelegationHeaders({ siwe, signature: signature2 });
-    return (0, import_sdk_core4.submitHostDelegation)(host, headers, signal);
+    return (0, import_sdk_core5.submitHostDelegation)(host, headers, signal);
   }
   /**
    * Create a specific space on the server via host delegation.
@@ -19640,12 +19653,12 @@ var NodeUserAuthorization = class {
     await this.ensureTinyCloudHosts();
     const host = this.primaryTinyCloudHost;
     const primarySpaceId = this._tinyCloudSession.spaceId;
-    const result = await (0, import_sdk_core4.activateSessionWithHost)(
+    const result = await (0, import_sdk_core5.activateSessionWithHost)(
       host,
       this._tinyCloudSession.delegationHeader
     );
     this.recordActivationSkippedSpaces(result, primarySpaceId);
-    const handler = this.spaceCreationHandler ?? (this.autoCreateSpace ? new import_sdk_core4.AutoApproveSpaceCreationHandler() : void 0);
+    const handler = this.spaceCreationHandler ?? (this.autoCreateSpace ? new import_sdk_core5.AutoApproveSpaceCreationHandler() : void 0);
     const creationContext = {
       spaceId: primarySpaceId,
       address: this._address,
@@ -19682,7 +19695,7 @@ var NodeUserAuthorization = class {
         throw error;
       }
       await new Promise((resolve2) => setTimeout(resolve2, 100));
-      const retryResult = await (0, import_sdk_core4.activateSessionWithHost)(
+      const retryResult = await (0, import_sdk_core5.activateSessionWithHost)(
         host,
         this._tinyCloudSession.delegationHeader
       );
@@ -19723,7 +19736,7 @@ var NodeUserAuthorization = class {
         throw error;
       }
       await new Promise((resolve2) => setTimeout(resolve2, 100));
-      const retryResult = await (0, import_sdk_core4.activateSessionWithHost)(
+      const retryResult = await (0, import_sdk_core5.activateSessionWithHost)(
         host,
         this._tinyCloudSession.delegationHeader
       );
@@ -19763,6 +19776,7 @@ var NodeUserAuthorization = class {
     this._lastActivationSkippedSpaceIds = result.status === 404 ? [primarySpaceId] : [];
   }
   async createBootstrapSession(options) {
+    refuseCaveated(options.capabilityRequest.manifests);
     if (!this._address || !this._chainId) {
       throw new Error("Must be signed in before creating bootstrap sessions");
     }
@@ -19791,9 +19805,9 @@ var NodeUserAuthorization = class {
     }
     const spaceAbilities = {};
     for (const { spaceId, resources } of resourcesBySpace.values()) {
-      spaceAbilities[spaceId] = (0, import_sdk_core4.resourceCapabilitiesToAbilitiesMap)(resources);
+      spaceAbilities[spaceId] = (0, import_sdk_core5.resourceCapabilitiesToAbilitiesMap)(resources);
     }
-    const abilities = spaceAbilities[options.spaceId] ?? (0, import_sdk_core4.resourceCapabilitiesToAbilitiesMap)([]);
+    const abilities = spaceAbilities[options.spaceId] ?? (0, import_sdk_core5.resourceCapabilitiesToAbilitiesMap)([]);
     const prepared = this.wasm.prepareSession({
       abilities,
       spaceAbilities,
@@ -19864,8 +19878,9 @@ var NodeUserAuthorization = class {
    * @param options - Optional per-call SIWE overrides for this sign-in only
    */
   async signIn(options) {
+    refuseCaveated(this.getCapabilityRequest()?.manifests);
     const generation = this.sessionGeneration;
-    const address = (0, import_sdk_core4.canonicalizeAddress)(await this.signer.getAddress());
+    const address = (0, import_sdk_core5.canonicalizeAddress)(await this.signer.getAddress());
     const chainId = await this.signer.getChainId();
     this.assertSignInCurrent(generation);
     this._address = address;
@@ -19917,7 +19932,7 @@ var NodeUserAuthorization = class {
       siwe: prepared.siwe,
       signature: signature2
     };
-    const spacesMetadata = this.enablePublicSpace ? { public: (0, import_sdk_core4.makePkhSpaceId)(address, chainId, "public") } : void 0;
+    const spacesMetadata = this.enablePublicSpace ? { public: (0, import_sdk_core5.makePkhSpaceId)(address, chainId, "public") } : void 0;
     const tinyCloudSession = {
       address,
       chainId,
@@ -19987,7 +20002,7 @@ var NodeUserAuthorization = class {
    */
   async signMessage(message, purpose) {
     if (!this._address) {
-      this._address = (0, import_sdk_core4.canonicalizeAddress)(await this.signer.getAddress());
+      this._address = (0, import_sdk_core5.canonicalizeAddress)(await this.signer.getAddress());
     }
     if (!this._chainId) {
       this._chainId = await this.signer.getChainId();
@@ -20015,7 +20030,8 @@ var NodeUserAuthorization = class {
    * ```
    */
   async prepareSessionForSigning() {
-    const address = (0, import_sdk_core4.canonicalizeAddress)(await this.signer.getAddress());
+    refuseCaveated(this.getCapabilityRequest()?.manifests);
+    const address = (0, import_sdk_core5.canonicalizeAddress)(await this.signer.getAddress());
     const chainId = await this.signer.getChainId();
     const keyId = `session-${Date.now()}`;
     this.sessionManager.renameSessionKeyId(this.activeSessionKeyId, keyId);
@@ -20066,7 +20082,7 @@ var NodeUserAuthorization = class {
       ...prepared,
       signature: signature2
     });
-    const address = (0, import_sdk_core4.canonicalizeAddress)(await this.signer.getAddress());
+    const address = (0, import_sdk_core5.canonicalizeAddress)(await this.signer.getAddress());
     const chainId = await this.signer.getChainId();
     await this.resolveTinyCloudHostsForSignIn(address, chainId);
     const clientSession = {
@@ -20077,7 +20093,7 @@ var NodeUserAuthorization = class {
       siwe: prepared.siwe,
       signature: signature2
     };
-    const spacesMetadata = this.enablePublicSpace ? { public: (0, import_sdk_core4.makePkhSpaceId)(address, chainId, "public") } : void 0;
+    const spacesMetadata = this.enablePublicSpace ? { public: (0, import_sdk_core5.makePkhSpaceId)(address, chainId, "public") } : void 0;
     const tinyCloudSession = {
       address,
       chainId,
@@ -20146,6 +20162,7 @@ var NodeUserAuthorization = class {
    * @param options Optional overrides for the OpenKey request.
    */
   async signInWithOpenKey(authorizeFn, options) {
+    refuseCaveated(this.getCapabilityRequest()?.manifests);
     if (options?.host !== void 0) {
       const overrideHost = options.host.trim();
       if (!overrideHost) {
@@ -20153,7 +20170,7 @@ var NodeUserAuthorization = class {
       }
       this.tinycloudHosts = [overrideHost];
     }
-    const signingAddress = (0, import_sdk_core4.canonicalizeAddress)(await this.signer.getAddress());
+    const signingAddress = (0, import_sdk_core5.canonicalizeAddress)(await this.signer.getAddress());
     const signingChainId = await this.signer.getChainId();
     await this.resolveTinyCloudHostsForSignIn(signingAddress, signingChainId);
     const { prepared, keyId, jwk } = await this.prepareSessionForSigning();
@@ -20284,8 +20301,8 @@ var NodeUserAuthorization = class {
         "signInWithOpenKeyResult requires prepared.siwe (the SDK-generated SIWE the sign-in was proposed with)"
       );
     }
-    const expectedAddress = (0, import_sdk_core4.canonicalizeAddress)(await this.signer.getAddress());
-    if ((0, import_sdk_core4.canonicalizeAddress)(result.address) !== expectedAddress) {
+    const expectedAddress = (0, import_sdk_core5.canonicalizeAddress)(await this.signer.getAddress());
+    if ((0, import_sdk_core5.canonicalizeAddress)(result.address) !== expectedAddress) {
       throw new Error(
         `OpenKey returned signature from ${result.address} but expected ${expectedAddress}`
       );
@@ -20310,15 +20327,15 @@ var NodeUserAuthorization = class {
         `OpenKey signature verification failed${type ? `: ${type}` : ""}${details}`
       );
     }
-    if ((0, import_sdk_core4.canonicalizeAddress)(parsedSignedSiwe.address) !== expectedAddress) {
+    if ((0, import_sdk_core5.canonicalizeAddress)(parsedSignedSiwe.address) !== expectedAddress) {
       throw new Error(
         `OpenKey signedMessage.address (${parsedSignedSiwe.address}) does not match local signer address (${expectedAddress})`
       );
     }
     const originalHasRecap = /(?:^|\n)-\s+urn:recap:/i.test(prepared.siwe);
-    const originalFields = (0, import_sdk_core4.extractImmutableSiweFields)(prepared.siwe);
-    const signedFields = (0, import_sdk_core4.extractImmutableSiweFields)(result.signedMessage);
-    const changedFields = (0, import_sdk_core4.diffImmutableSiweFields)(originalFields, signedFields, {
+    const originalFields = (0, import_sdk_core5.extractImmutableSiweFields)(prepared.siwe);
+    const signedFields = (0, import_sdk_core5.extractImmutableSiweFields)(result.signedMessage);
+    const changedFields = (0, import_sdk_core5.diffImmutableSiweFields)(originalFields, signedFields, {
       originalHasRecap
     });
     if (changedFields.length > 0) {
@@ -20329,20 +20346,20 @@ var NodeUserAuthorization = class {
     let originalCaps;
     let signedCaps;
     try {
-      originalCaps = (0, import_sdk_core4.extractRecapAttenuations)(prepared.siwe);
+      originalCaps = (0, import_sdk_core5.extractRecapAttenuations)(prepared.siwe);
     } catch (err2) {
       throw new Error(
         `Failed to decode prepared SIWE recap: ${err2.message}`
       );
     }
     try {
-      signedCaps = (0, import_sdk_core4.extractRecapAttenuations)(result.signedMessage);
+      signedCaps = (0, import_sdk_core5.extractRecapAttenuations)(result.signedMessage);
     } catch (err2) {
       throw new Error(
         `Failed to decode OpenKey signedMessage recap: ${err2.message}`
       );
     }
-    const unauthorized = (0, import_sdk_core4.unauthorizedRecapCapabilities)(signedCaps, originalCaps);
+    const unauthorized = (0, import_sdk_core5.unauthorizedRecapCapabilities)(signedCaps, originalCaps);
     if (unauthorized.length > 0) {
       const previewLimit = 5;
       const preview = unauthorized.slice(0, previewLimit).map((u) => `${u.resource}::${u.action}`).join(", ");
@@ -20359,7 +20376,7 @@ var NodeUserAuthorization = class {
     const grantedPairs = /* @__PURE__ */ new Set();
     const grantedFourPartIndex = /* @__PURE__ */ new Map();
     for (const [resource, actions] of Object.entries(signedCaps)) {
-      const { space, path } = (0, import_sdk_core4.parseCanonicalRecapResource)(resource);
+      const { space, path } = (0, import_sdk_core5.parseCanonicalRecapResource)(resource);
       for (const action of Object.keys(actions)) {
         grantedPairs.add(`${resource}\0${action}`);
         const slashIdx = action.indexOf("/");
@@ -20595,10 +20612,10 @@ var NodeUserAuthorization = class {
 };
 
 // src/account/AccountService.ts
-var import_sdk_core5 = require("@tinycloud/sdk-core");
+var import_sdk_core6 = require("@tinycloud/sdk-core");
 
 // src/DelegatedAccess.ts
-var import_sdk_core6 = require("@tinycloud/sdk-core");
+var import_sdk_core7 = require("@tinycloud/sdk-core");
 var DelegatedAccess = class {
   /**
    * @param lifetime - Optional owner of this access: its `fetch` is used for
@@ -20620,16 +20637,16 @@ var DelegatedAccess = class {
     });
     this._serviceContext = lifetime ? lifetime.track(context) : context;
     const prefix = this._delegation.path.replace(/\/$/, "");
-    this._kv = new import_sdk_core6.KVService({ prefix });
+    this._kv = new import_sdk_core7.KVService({ prefix });
     this._kv.initialize(this._serviceContext);
     this._serviceContext.registerService("kv", this._kv);
-    this._sql = new import_sdk_core6.SQLService({});
+    this._sql = new import_sdk_core7.SQLService({});
     this._sql.initialize(this._serviceContext);
     this._serviceContext.registerService("sql", this._sql);
-    this._duckdb = new import_sdk_core6.DuckDbService({});
+    this._duckdb = new import_sdk_core7.DuckDbService({});
     this._duckdb.initialize(this._serviceContext);
     this._serviceContext.registerService("duckdb", this._duckdb);
-    this._hooks = new import_sdk_core6.HooksService({});
+    this._hooks = new import_sdk_core7.HooksService({});
     this._hooks.initialize(this._serviceContext);
     this._serviceContext.registerService("hooks", this._hooks);
     const serviceSession = {
@@ -20779,7 +20796,7 @@ function createWasmKeyProvider(sessionManager) {
 }
 
 // src/delegateToHelpers.ts
-var import_sdk_core7 = require("@tinycloud/sdk-core");
+var import_sdk_core8 = require("@tinycloud/sdk-core");
 function legacyParamsToPermissionEntries(actions, path, spaceIdOverride) {
   const byService = /* @__PURE__ */ new Map();
   for (const a of actions) {
@@ -20810,7 +20827,7 @@ function legacyParamsToPermissionEntries(actions, path, spaceIdOverride) {
   }
   return entries;
 }
-var DEFAULT_DELEGATION_EXPIRY_MS = import_sdk_core7.EXPIRY.SESSION_MS;
+var DEFAULT_DELEGATION_EXPIRY_MS = import_sdk_core8.EXPIRY.SESSION_MS;
 function resolveExpiryMs(expiry) {
   if (expiry === void 0) {
     return DEFAULT_DELEGATION_EXPIRY_MS;
@@ -20823,10 +20840,10 @@ function resolveExpiryMs(expiry) {
     }
     return expiry;
   }
-  return (0, import_sdk_core7.parseExpiry)(expiry);
+  return (0, import_sdk_core8.parseExpiry)(expiry);
 }
 function extractSiweExpiration(siwe) {
-  const parsed = new import_sdk_core7.SiweMessage(siwe);
+  const parsed = new import_sdk_core8.SiweMessage(siwe);
   if (parsed.expirationTime === void 0 || parsed.expirationTime === null) {
     return void 0;
   }
@@ -20840,7 +20857,7 @@ function extractSiweExpiration(siwe) {
 }
 
 // src/NodeSecretsService.ts
-var import_sdk_core8 = require("@tinycloud/sdk-core");
+var import_sdk_core9 = require("@tinycloud/sdk-core");
 var SECRETS_SPACE = "secrets";
 function ok() {
   return { ok: true, data: void 0 };
@@ -20873,7 +20890,7 @@ function secretActionName(action) {
 }
 function secretPermissionEntries(name, options, action, space, encryptionNetworkId) {
   const entries = [];
-  const path = action === "list" ? (0, import_sdk_core8.resolveSecretListPrefix)(options) : (0, import_sdk_core8.resolveSecretPath)(name, options).permissionPaths.vault;
+  const path = action === "list" ? (0, import_sdk_core9.resolveSecretListPrefix)(options) : (0, import_sdk_core9.resolveSecretPath)(name, options).permissionPaths.vault;
   entries.push({
     service: "tinycloud.kv",
     space,
@@ -20970,7 +20987,7 @@ var NodeSecretsService = class {
       );
     } catch (error) {
       return secretsError(
-        import_sdk_core8.ErrorCodes.INVALID_INPUT,
+        import_sdk_core9.ErrorCodes.INVALID_INPUT,
         error instanceof Error ? error.message : String(error),
         error instanceof Error ? error : void 0
       );
@@ -20989,7 +21006,7 @@ var NodeSecretsService = class {
     }
     if (!this.config.canEscalate()) {
       return secretsError(
-        import_sdk_core8.ErrorCodes.PERMISSION_DENIED,
+        import_sdk_core9.ErrorCodes.PERMISSION_DENIED,
         `Cannot autosign ${displayActionUrn(action)} for ${target}; TinyCloudNode needs wallet mode with a signer or privateKey.`
       );
     }
@@ -21002,7 +21019,7 @@ var NodeSecretsService = class {
   }
   escalationError(action, target, error) {
     return secretsError(
-      import_sdk_core8.ErrorCodes.PERMISSION_DENIED,
+      import_sdk_core9.ErrorCodes.PERMISSION_DENIED,
       error instanceof Error ? error.message : `Autosign escalation for ${displayActionUrn(action)} on ${target} failed.`,
       error instanceof Error ? error : void 0
     );
@@ -21022,10 +21039,10 @@ var NodeSecretsService = class {
       return false;
     }
     const manifests = Array.isArray(manifest) ? manifest : [manifest];
-    const requestedEntries = (0, import_sdk_core8.expandPermissionEntries)(permissionEntries);
+    const requestedEntries = (0, import_sdk_core9.expandPermissionEntries)(permissionEntries);
     return requestedEntries.every(
       (entry) => manifests.some((candidate) => {
-        const resolved = (0, import_sdk_core8.resolveManifest)(candidate);
+        const resolved = (0, import_sdk_core9.resolveManifest)(candidate);
         return resolved.resources.some(
           (resource) => resource.service === entry.service && spaceMatches(
             resource.space,
@@ -21041,8 +21058,8 @@ var NodeSecretsService = class {
 // src/TinyCloudNode.ts
 var DEFAULT_HOST = "https://node.tinycloud.xyz";
 var DEFAULT_ENCRYPTION_NETWORK_NAME = "default";
-var NETWORK_CREATE_ACTION2 = import_sdk_core9.ENCRYPTION.NETWORK_CREATE;
-var DECRYPT_ACTION2 = import_sdk_core9.ENCRYPTION.DECRYPT;
+var NETWORK_CREATE_ACTION2 = import_sdk_core10.ENCRYPTION.NETWORK_CREATE;
+var DECRYPT_ACTION2 = import_sdk_core10.ENCRYPTION.DECRYPT;
 var BOOTSTRAP_COMPLETION_MARKER_KEY = "system/bootstrap/complete";
 var BOOTSTRAP_COMPLETION_MARKER_VERSION = 1;
 var ACCEPTED_MARKER_VERSIONS = [BOOTSTRAP_COMPLETION_MARKER_VERSION];
@@ -21051,24 +21068,24 @@ function isSecretPayload(value) {
   return typeof value === "object" && value !== null && "value" in value && typeof value.value === "string" && "createdAt" in value && typeof value.createdAt === "string" && "updatedAt" in value && typeof value.updatedAt === "string";
 }
 var ROOT_DELEGATION_ACTIONS = [
-  import_sdk_core9.KV.PUT,
-  import_sdk_core9.KV.GET,
-  import_sdk_core9.KV.DEL,
-  import_sdk_core9.KV.LIST,
-  import_sdk_core9.KV.METADATA,
-  import_sdk_core9.SQL.READ,
-  import_sdk_core9.SQL.WRITE,
-  import_sdk_core9.SQL.ADMIN,
-  import_sdk_core9.SQL.ALL,
-  import_sdk_core9.DUCKDB.READ,
-  import_sdk_core9.DUCKDB.WRITE,
-  import_sdk_core9.DUCKDB.ADMIN,
-  import_sdk_core9.DUCKDB.DESCRIBE,
-  import_sdk_core9.DUCKDB.EXPORT,
-  import_sdk_core9.DUCKDB.IMPORT,
-  import_sdk_core9.DUCKDB.ALL
+  import_sdk_core10.KV.PUT,
+  import_sdk_core10.KV.GET,
+  import_sdk_core10.KV.DEL,
+  import_sdk_core10.KV.LIST,
+  import_sdk_core10.KV.METADATA,
+  import_sdk_core10.SQL.READ,
+  import_sdk_core10.SQL.WRITE,
+  import_sdk_core10.SQL.ADMIN,
+  import_sdk_core10.SQL.ALL,
+  import_sdk_core10.DUCKDB.READ,
+  import_sdk_core10.DUCKDB.WRITE,
+  import_sdk_core10.DUCKDB.ADMIN,
+  import_sdk_core10.DUCKDB.DESCRIBE,
+  import_sdk_core10.DUCKDB.EXPORT,
+  import_sdk_core10.DUCKDB.IMPORT,
+  import_sdk_core10.DUCKDB.ALL
 ];
-var DEFAULT_SESSION_EXPIRATION_MS = import_sdk_core9.EXPIRY.SESSION_MS;
+var DEFAULT_SESSION_EXPIRATION_MS = import_sdk_core10.EXPIRY.SESSION_MS;
 function unifiedRootAttenuation(capabilities) {
   const attenuation = {};
   for (const capability of capabilities) {
@@ -21119,7 +21136,7 @@ function spaceOwnerKey(spaceId) {
 }
 function didPrincipalMatches2(actual, expected) {
   try {
-    return (0, import_sdk_core9.principalDidEquals)(actual, expected);
+    return (0, import_sdk_core10.principalDidEquals)(actual, expected);
   } catch {
     return actual === expected;
   }
@@ -21340,6 +21357,7 @@ function ownerDelegationPermissions(params) {
     if (!Array.isArray(params.permissions)) {
       throw new Error("Owner delegation permissions are invalid");
     }
+    refuseCaveated(params.permissions);
     permissions.push(...params.permissions.map((permission) => ({
       service: permission.service,
       path: permission.path,
@@ -21356,7 +21374,7 @@ function ownerDelegationPermissions(params) {
       }
       const slash = action.indexOf("/");
       const service = slash === -1 ? "" : action.slice(0, slash);
-      if (import_sdk_core9.SERVICE_LONG_TO_SHORT[service] === void 0) {
+      if (import_sdk_core10.SERVICE_LONG_TO_SHORT[service] === void 0) {
         throw new Error("Owner delegation capabilities are unsupported");
       }
       const actions = byService.get(service) ?? [];
@@ -21372,7 +21390,7 @@ function ownerDelegationPermissions(params) {
   }
   const resources = /* @__PURE__ */ new Set();
   for (const permission of permissions) {
-    if (typeof permission.service !== "string" || import_sdk_core9.SERVICE_LONG_TO_SHORT[permission.service] === void 0 || typeof permission.path !== "string" || permission.path.length === 0 || permission.path.trim() !== permission.path || /[\u0000-\u001f\u007f\\*]/.test(permission.path) || !Array.isArray(permission.actions) || permission.actions.length === 0 || permission.actions.length > 32) {
+    if (typeof permission.service !== "string" || import_sdk_core10.SERVICE_LONG_TO_SHORT[permission.service] === void 0 || typeof permission.path !== "string" || permission.path.length === 0 || permission.path.trim() !== permission.path || /[\u0000-\u001f\u007f\\*]/.test(permission.path) || !Array.isArray(permission.actions) || permission.actions.length === 0 || permission.actions.length > 32) {
       throw new Error("Owner delegation requires bounded capabilities");
     }
     const resourceKey = `${permission.service}\0${permission.path}`;
@@ -21387,9 +21405,9 @@ function ownerDelegationPermissions(params) {
       }
       actions.add(action);
     }
-    if (permission.service === import_sdk_core9.ENCRYPTION_PERMISSION_SERVICE) {
+    if (permission.service === import_sdk_core10.ENCRYPTION_PERMISSION_SERVICE) {
       try {
-        (0, import_sdk_core9.parseNetworkId)(permission.path);
+        (0, import_sdk_core10.parseNetworkId)(permission.path);
       } catch {
         throw new Error("Owner delegation encryption permission requires a canonical network URN");
       }
@@ -21401,11 +21419,11 @@ function ownerPermissionsToAbilities(permissions) {
   const abilities = {};
   const rawAbilities = {};
   for (const permission of permissions) {
-    if (permission.service === import_sdk_core9.ENCRYPTION_PERMISSION_SERVICE) {
+    if (permission.service === import_sdk_core10.ENCRYPTION_PERMISSION_SERVICE) {
       rawAbilities[permission.path] = [...permission.actions];
       continue;
     }
-    const shortService = import_sdk_core9.SERVICE_LONG_TO_SHORT[permission.service];
+    const shortService = import_sdk_core10.SERVICE_LONG_TO_SHORT[permission.service];
     abilities[shortService] ?? (abilities[shortService] = {});
     abilities[shortService][permission.path] = [...permission.actions];
   }
@@ -21584,7 +21602,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         }
         const stamp = await establishReplicaSessionStamp2(
           replication.storage,
-          (0, import_sdk_core9.pkhDid)(session.address, session.chainId),
+          (0, import_sdk_core10.pkhDid)(session.address, session.chainId),
           anchor
         );
         if (epoch !== this.sessionEpoch || attempt !== this.latestSessionAttempt) return void 0;
@@ -21663,7 +21681,7 @@ var _TinyCloudNode = class _TinyCloudNode {
      * and remembers whose storage is full so sign-in and listing skip their
      * best-effort writes. Lives as long as this instance, across sign-ins.
      */
-    this.storageFull = new import_sdk_core9.StorageFullMonitor((spaceId) => spaceOwnerKey(spaceId) ?? spaceId);
+    this.storageFull = new import_sdk_core10.StorageFullMonitor((spaceId) => spaceOwnerKey(spaceId) ?? spaceId);
     this.invokeWithRuntimePermissions = (session, service, path, action, facts) => {
       const operation = {
         spaceId: session.spaceId,
@@ -21714,7 +21732,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         if (!granted?.caveats?.length) {
           return entry;
         }
-        if (entry.caveats !== void 0 && !(0, import_sdk_core9.recapCaveatsEqual)(entry.caveats, granted.caveats)) {
+        if (entry.caveats !== void 0 && !(0, import_sdk_core10.recapCaveatsEqual)(entry.caveats, granted.caveats)) {
           throw new Error("Invocation caveats do not match signed ReCap authority.");
         }
         return { ...entry, caveats: cloneRecapCaveats(granted.caveats) };
@@ -21727,7 +21745,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       ...config,
       host: config.host ?? DEFAULT_HOST,
       // One store for every authorization this client creates.
-      registrySequenceStore: config.registrySequenceStore ?? (0, import_sdk_core9.createInMemoryRegistrySequenceStore)()
+      registrySequenceStore: config.registrySequenceStore ?? (0, import_sdk_core10.createInMemoryRegistrySequenceStore)()
     };
     if (this.config.replication?.enabled) {
       const runtime = getNodeReplicationLoaders().runtime().then(({ ReplicationRuntime: ReplicationRuntime2 }) => {
@@ -21796,11 +21814,11 @@ var _TinyCloudNode = class _TinyCloudNode {
     this.sessionKeyJwk = sessionKey.jwk;
     this._requestLog = config.requestLog === true ? new import_requestLog2.RequestLog() : void 0;
     this._serviceGraph = this.createServiceGraphLifetime();
-    this._capabilityRegistry = new import_sdk_core9.CapabilityKeyRegistry();
+    this._capabilityRegistry = new import_sdk_core10.CapabilityKeyRegistry();
     this._keyProvider = new WasmKeyProvider({
       sessionManager: this.sessionManager
     });
-    this.notificationHandler = config.notificationHandler ?? new import_sdk_core9.SilentNotificationHandler();
+    this.notificationHandler = config.notificationHandler ?? new import_sdk_core10.SilentNotificationHandler();
     this._sharingService = this.createReceiveOnlySharing();
     if (config.signer) {
       this.signer = config.signer;
@@ -21874,13 +21892,13 @@ var _TinyCloudNode = class _TinyCloudNode {
   async readStorageStatus(options) {
     const session = this._serviceContext?.session;
     if (!this._serviceContext || !session) {
-      return (0, import_sdk_core9.err)((0, import_sdk_core9.serviceError)(import_sdk_core9.ErrorCodes.AUTH_REQUIRED, "Not signed in. Call signIn() first.", "storage"));
+      return (0, import_sdk_core10.err)((0, import_sdk_core10.serviceError)(import_sdk_core10.ErrorCodes.AUTH_REQUIRED, "Not signed in. Call signIn() first.", "storage"));
     }
     const spaceId = options?.space === void 0 ? session.spaceId : options.space.startsWith("tinycloud:") ? options.space : this.ownedSpaceId(options.space);
     const action = "tinycloud.space/info";
     if (!this.findGrantForOperation({ spaceId, service: "space", path: "", action })) {
-      return (0, import_sdk_core9.err)((0, import_sdk_core9.serviceError)(
-        import_sdk_core9.ErrorCodes.PERMISSION_DENIED,
+      return (0, import_sdk_core10.err)((0, import_sdk_core10.serviceError)(
+        import_sdk_core10.ErrorCodes.PERMISSION_DENIED,
         `Reading storage status needs ${action} on ${spaceId}, which this session was not granted.`,
         "storage",
         { meta: { requiredAction: action, resource: spaceId } }
@@ -21896,8 +21914,8 @@ var _TinyCloudNode = class _TinyCloudNode {
       const text = await response.text();
       if (!response.ok) {
         const unauthorized = response.status === 401 || response.status === 403;
-        return (0, import_sdk_core9.err)((0, import_sdk_core9.serviceError)(
-          unauthorized ? import_sdk_core9.ErrorCodes.AUTH_UNAUTHORIZED : import_sdk_core9.ErrorCodes.NETWORK_ERROR,
+        return (0, import_sdk_core10.err)((0, import_sdk_core10.serviceError)(
+          unauthorized ? import_sdk_core10.ErrorCodes.AUTH_UNAUTHORIZED : import_sdk_core10.ErrorCodes.NETWORK_ERROR,
           `Failed to read storage status: ${response.status} - ${text.slice(0, 300)}`,
           "storage",
           { meta: { status: response.status, ...unauthorized ? { requiredAction: action, resource: spaceId } : {} } }
@@ -21909,10 +21927,10 @@ var _TinyCloudNode = class _TinyCloudNode {
       } catch {
         body = void 0;
       }
-      const status = (0, import_sdk_core9.parseStorageStatus)(body);
+      const status = (0, import_sdk_core10.parseStorageStatus)(body);
       if (!status) {
-        return (0, import_sdk_core9.err)((0, import_sdk_core9.serviceError)(
-          import_sdk_core9.ErrorCodes.STORAGE_STATUS_UNAVAILABLE,
+        return (0, import_sdk_core10.err)((0, import_sdk_core10.serviceError)(
+          import_sdk_core10.ErrorCodes.STORAGE_STATUS_UNAVAILABLE,
           "This TinyCloud node does not report storage usage yet.",
           "storage",
           { meta: { status: response.status } }
@@ -21922,10 +21940,10 @@ var _TinyCloudNode = class _TinyCloudNode {
         this.storageFull.clearFor(spaceId);
         if (spaceOwnerKey(spaceId) === this.currentStorageOwner()) this.storageFull.clearFor(void 0);
       }
-      return (0, import_sdk_core9.ok)(status);
+      return (0, import_sdk_core10.ok)(status);
     } catch (error) {
-      return (0, import_sdk_core9.err)((0, import_sdk_core9.serviceError)(
-        import_sdk_core9.ErrorCodes.NETWORK_ERROR,
+      return (0, import_sdk_core10.err)((0, import_sdk_core10.serviceError)(
+        import_sdk_core10.ErrorCodes.NETWORK_ERROR,
         `Failed to read storage status: ${error instanceof Error ? error.message : String(error)}`,
         "storage",
         { cause: error instanceof Error ? error : void 0 }
@@ -21950,7 +21968,7 @@ var _TinyCloudNode = class _TinyCloudNode {
    */
   createReceiveOnlySharing() {
     const receiveOnlyGraph = this._serviceGraph;
-    return new import_sdk_core9.SharingService({
+    return new import_sdk_core10.SharingService({
       hosts: [this.config.host],
       // session: undefined - not needed for receive()
       invoke: receiveOnlyGraph.invoke,
@@ -21965,7 +21983,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       },
       createKVService: (config) => {
         const prefix = config.pathPrefix?.replace(/\/$/, "");
-        const kvService = new import_sdk_core9.KVService({ prefix });
+        const kvService = new import_sdk_core10.KVService({ prefix });
         const kvContext = receiveOnlyGraph.track(createServiceContext({
           requestSink: receiveOnlyGraph.requestSink,
           invoke: config.invoke,
@@ -22011,7 +22029,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       nonce: config.nonce,
       siweConfig: config.siweConfig,
       manifest: useBootstrapSignInRequest ? void 0 : config.manifest,
-      capabilityRequest: useBootstrapSignInRequest ? config.includeAccountRegistryPermissions === false ? import_sdk_core9.BOOTSTRAP_DEFAULT_ONLY_SESSION_REQUEST : import_sdk_core9.BOOTSTRAP_SESSION_REQUESTS.default : config.capabilityRequest,
+      capabilityRequest: useBootstrapSignInRequest ? config.includeAccountRegistryPermissions === false ? import_sdk_core10.BOOTSTRAP_DEFAULT_ONLY_SESSION_REQUEST : import_sdk_core10.BOOTSTRAP_SESSION_REQUESTS.default : config.capabilityRequest,
       includeAccountRegistryPermissions: useBootstrapSignInRequest ? false : config.includeAccountRegistryPermissions,
       // Sign-in needs only the entry inputs (prefixes + secrets opt-in);
       // storage and scheduling never leave TinyCloudNode.
@@ -22021,7 +22039,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         allowSecrets: config.replication.allowSecrets === true
       } : void 0
     });
-    this.tc = new import_sdk_core9.TinyCloud(this.auth, {
+    this.tc = new import_sdk_core10.TinyCloud(this.auth, {
       invokeAny: this.invokeAnyWithRuntimePermissions,
       telemetry: config.telemetry,
       retryPolicy: config.retryPolicy
@@ -22111,7 +22129,7 @@ var _TinyCloudNode = class _TinyCloudNode {
   /** Publish the active owner Node as a session-signed registry record. */
   async publishActiveNodeLocation(registryUrl, fetchFn = globalThis.fetch.bind(globalThis)) {
     const node = await this.activeNodeIdentity();
-    return (0, import_sdk_core9.publishLocationRecord)({
+    return (0, import_sdk_core10.publishLocationRecord)({
       registryUrl,
       subject: this.credentialHolderDid,
       nodeOrigin: node.origin,
@@ -22128,7 +22146,7 @@ var _TinyCloudNode = class _TinyCloudNode {
    */
   get did() {
     if (this._address) {
-      return (0, import_sdk_core9.pkhDid)(this._address, this._chainId);
+      return (0, import_sdk_core10.pkhDid)(this._address, this._chainId);
     }
     return this.sessionManager.getDID(this.sessionKeyId);
   }
@@ -22165,7 +22183,7 @@ var _TinyCloudNode = class _TinyCloudNode {
   /** Normalize signed capabilities without collapsing nested encryption into raw authority. */
   projectSignedRecapCapabilities(siwe) {
     const projected = this.parseRecapWithCaveats(siwe).map((entry) => {
-      const normalized = (0, import_sdk_core9.parseRecapCapabilities)(() => [entry], siwe)[0];
+      const normalized = (0, import_sdk_core10.parseRecapCapabilities)(() => [entry], siwe)[0];
       if (normalized.service !== "tinycloud.encryption") return normalized;
       if (!this.isEncryptionNetworkOperation("encryption", entry.path, entry.space)) {
         return { ...normalized, space: entry.space };
@@ -22209,14 +22227,14 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (!this._address) {
       return void 0;
     }
-    return this.wasmBindings.makeSpaceId(this._address, this._chainId, import_sdk_core9.ACCOUNT_REGISTRY_SPACE);
+    return this.wasmBindings.makeSpaceId(this._address, this._chainId, import_sdk_core10.ACCOUNT_REGISTRY_SPACE);
   }
   /**
    * Account-level application and delegation helpers.
    */
   get account() {
     if (!this._account) {
-      this._account = new import_sdk_core5.AccountService({
+      this._account = new import_sdk_core6.AccountService({
         getDid: () => this.did,
         getHost: () => this.hosts[0] ?? this.config.host,
         getPrimarySpaceId: () => this.spaceId,
@@ -22274,7 +22292,7 @@ var _TinyCloudNode = class _TinyCloudNode {
   async endSession() {
     const leavingAddress = this.address ?? this._restoredTcSession?.address;
     const leavingChainId = this._chainId;
-    const leavingPrincipal = this.replicaSessionPrincipal ?? (leavingAddress ? (0, import_sdk_core9.pkhDid)(leavingAddress, leavingChainId) : void 0);
+    const leavingPrincipal = this.replicaSessionPrincipal ?? (leavingAddress ? (0, import_sdk_core10.pkhDid)(leavingAddress, leavingChainId) : void 0);
     const leavingAuth = this.auth;
     const leavingContext = this._serviceContext;
     let denied;
@@ -22391,12 +22409,12 @@ var _TinyCloudNode = class _TinyCloudNode {
     this.replicaRestoreGate = void 0;
     this._serviceGraph = this.createServiceGraphLifetime();
     this.auth = oldAuth;
-    this.tc = this.auth ? new import_sdk_core9.TinyCloud(this.auth, {
+    this.tc = this.auth ? new import_sdk_core10.TinyCloud(this.auth, {
       invokeAny: this.invokeAnyWithRuntimePermissions,
       telemetry: this.config.telemetry,
       retryPolicy: this.config.retryPolicy
     }) : null;
-    this._capabilityRegistry = new import_sdk_core9.CapabilityKeyRegistry();
+    this._capabilityRegistry = new import_sdk_core10.CapabilityKeyRegistry();
     this._keyProvider = new WasmKeyProvider({ sessionManager: this.sessionManager });
     this._sharingService = this.createReceiveOnlySharing();
   }
@@ -22433,6 +22451,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     await this.signInWith(() => this.auth.signInWithOpenKey(authorizeFn, options));
   }
   async signInWith(performSignIn) {
+    refuseCaveated(this.auth?.capabilityRequest?.manifests);
     const epoch = this.sessionEpoch;
     const attempt = ++this.latestSessionAttempt;
     await this.signOutInFlight;
@@ -22452,11 +22471,11 @@ var _TinyCloudNode = class _TinyCloudNode {
     this.pendingAccountRegistrySync?.controller.abort();
     await this.accountRegistryTail;
     await this.wasmBindings.ensureInitialized?.();
-    const address = (0, import_sdk_core9.canonicalizeAddress)(await this.signer.getAddress());
+    const address = (0, import_sdk_core10.canonicalizeAddress)(await this.signer.getAddress());
     const chainId = await this.signer.getChainId();
     this.assertSessionEpoch(epoch, "Sign-in");
-    const nextPrincipal = (0, import_sdk_core9.pkhDid)(address, chainId);
-    const priorPrincipal = this.replicaSessionPrincipal ?? (this.address ? (0, import_sdk_core9.pkhDid)(this.address, this._chainId) : void 0);
+    const nextPrincipal = (0, import_sdk_core10.pkhDid)(address, chainId);
+    const priorPrincipal = this.replicaSessionPrincipal ?? (this.address ? (0, import_sdk_core10.pkhDid)(this.address, this._chainId) : void 0);
     if (this.config.replication?.enabled && priorPrincipal && priorPrincipal !== nextPrincipal) {
       const denial = await this.denyReplicaGate({ reason: "account_switch", principal: priorPrincipal, next: nextPrincipal });
       this.replicaRestoreGate = denial?.status === "unguarded" ? "gate_unavailable" : "stamp_stale";
@@ -22502,7 +22521,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       this.hostedOwnedSpaceIds.add(spaceId);
     }
     this.replicationDelegateSession = void 0;
-    this.replicaSessionPrincipal = (0, import_sdk_core9.pkhDid)(address, chainId);
+    this.replicaSessionPrincipal = (0, import_sdk_core10.pkhDid)(address, chainId);
     this.replicationScopeError = void 0;
     await this.quiesceReplicaRuntime();
     this.assertSessionEpoch(epoch, "Sign-in");
@@ -22526,7 +22545,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     await this.ensureRequestedEncryptionNetworks();
     this.assertSessionEpoch(epoch, "Sign-in");
     if (!bootstrapped && this.config.manifest === void 0 && this.config.capabilityRequest === void 0) {
-      await this.ensureOwnedSpaceHostedById(this.ownedSpaceId(import_sdk_core9.SECRETS_SPACE));
+      await this.ensureOwnedSpaceHostedById(this.ownedSpaceId(import_sdk_core10.SECRETS_SPACE));
     }
     this.assertSessionEpoch(epoch, "Sign-in");
     if (!bootstrapped) {
@@ -22569,7 +22588,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       this._bootstrapStatus = { skipped: true, reason: "interactive-signer" };
       return false;
     }
-    const steps = (0, import_sdk_core9.bootstrapSteps)(this._address, this._chainId);
+    const steps = (0, import_sdk_core10.bootstrapSteps)(this._address, this._chainId);
     try {
       const decision = await this.resolveBootstrapDecision(steps);
       if (decision.action === "skip") {
@@ -22612,7 +22631,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (!auth) {
       throw new Error("Account bootstrap requires an active wallet session");
     }
-    const accountSpaceId = this.ownedSpaceId(import_sdk_core9.ACCOUNT_REGISTRY_SPACE);
+    const accountSpaceId = this.ownedSpaceId(import_sdk_core10.ACCOUNT_REGISTRY_SPACE);
     const skipped = auth.lastActivationSkippedSpaceIds;
     if (skipped.includes(accountSpaceId)) return { action: "run", mode: "fresh" };
     if (skipped.some((spaceId) => enshrinedSpaceIds.has(spaceId))) {
@@ -22635,7 +22654,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         }
         return { action: "run", mode: "repair" };
       }
-      if (marker.error.code === import_sdk_core9.ErrorCodes.KV_NOT_FOUND && this.markerReadIsUnhostedSpace(marker.error.meta)) {
+      if (marker.error.code === import_sdk_core10.ErrorCodes.KV_NOT_FOUND && this.markerReadIsUnhostedSpace(marker.error.meta)) {
         return { action: "run", mode: "fresh" };
       }
     } catch (err2) {
@@ -22649,7 +22668,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     return { action: "run", mode: "repair" };
   }
   async readBootstrapCompletionMarker() {
-    return this.kvForSpace(this.ownedSpaceId(import_sdk_core9.ACCOUNT_REGISTRY_SPACE)).get(
+    return this.kvForSpace(this.ownedSpaceId(import_sdk_core10.ACCOUNT_REGISTRY_SPACE)).get(
       BOOTSTRAP_COMPLETION_MARKER_KEY
     );
   }
@@ -22658,7 +22677,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       throw new Error("Bootstrap completion marker requires an active wallet session");
     }
     const canonicalStepIds = new Set(
-      (0, import_sdk_core9.bootstrapSteps)(this._address, this._chainId).map((step) => step.id)
+      (0, import_sdk_core10.bootstrapSteps)(this._address, this._chainId).map((step) => step.id)
     );
     const providedStepIds = new Set(steps.map((step) => step.id));
     if (canonicalStepIds.size !== providedStepIds.size || [...canonicalStepIds].some((stepId) => !providedStepIds.has(stepId))) {
@@ -22669,7 +22688,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       stepIds: [...canonicalStepIds],
       completedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    const written = await this.kvForSpace(this.ownedSpaceId(import_sdk_core9.ACCOUNT_REGISTRY_SPACE)).put(
+    const written = await this.kvForSpace(this.ownedSpaceId(import_sdk_core10.ACCOUNT_REGISTRY_SPACE)).put(
       BOOTSTRAP_COMPLETION_MARKER_KEY,
       marker
     );
@@ -22716,7 +22735,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     const warnings = [];
     const primarySession = auth.tinyCloudSession;
     const defaultSpaceId = this.ownedSpaceId("default");
-    const canReusePrimaryBootstrapSession = primarySession?.spaceId === defaultSpaceId && auth.capabilityRequest === import_sdk_core9.BOOTSTRAP_SESSION_REQUESTS.default;
+    const canReusePrimaryBootstrapSession = primarySession?.spaceId === defaultSpaceId && auth.capabilityRequest === import_sdk_core10.BOOTSTRAP_SESSION_REQUESTS.default;
     if (steps.some((step) => step.kind === "host")) {
       await this.assertMayCreateSpace();
     }
@@ -22735,7 +22754,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       try {
         session = await auth.createBootstrapSession({
           spaceId: step.spaceId,
-          capabilityRequest: step.request ?? import_sdk_core9.BOOTSTRAP_SESSION_REQUESTS[step.space],
+          capabilityRequest: step.request ?? import_sdk_core10.BOOTSTRAP_SESSION_REQUESTS[step.space],
           rawAbilities
         });
       } catch (err2) {
@@ -22767,7 +22786,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       if (!session) {
         throw new Error(`Missing bootstrap session for ${step.space}`);
       }
-      const activated = await (0, import_sdk_core9.activateSessionWithHost)(host, session.delegationHeader, graph.signal).catch((error) => {
+      const activated = await (0, import_sdk_core10.activateSessionWithHost)(host, session.delegationHeader, graph.signal).catch((error) => {
         graph.assertActive();
         throw error;
       });
@@ -22782,7 +22801,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       }
       this.registerBootstrapRuntimeGrant(
         session,
-        import_sdk_core9.BOOTSTRAP_SESSION_REQUESTS[step.space],
+        import_sdk_core10.BOOTSTRAP_SESSION_REQUESTS[step.space],
         rawAbilitiesBySpace.get(step.space)
       );
     }
@@ -22832,7 +22851,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       }
       if (step.kind === "seed-applications") {
         const registered = await this.account.applications.register(
-          step.manifests.length > 0 ? [...step.manifests] : import_sdk_core9.TINYCLOUD_SECRETS_BOOTSTRAP_MANIFEST,
+          step.manifests.length > 0 ? [...step.manifests] : import_sdk_core10.TINYCLOUD_SECRETS_BOOTSTRAP_MANIFEST,
           // The write is an INSERT OR REPLACE and is safe to repeat during a
           // repair, so skip the manifest-hash pre-read.
           { assumeUnregistered: true }
@@ -22851,7 +22870,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           migrations: [
             {
               id: "001_initial",
-              sql: [...import_sdk_core9.SECRET_RECORDS_SCHEMA]
+              sql: [...import_sdk_core10.SECRET_RECORDS_SCHEMA]
             }
           ]
         });
@@ -23026,7 +23045,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (!this.auth || !this.signer) {
       throw new Error("Manifest registry write requires wallet mode");
     }
-    const accountSpaceId = this.ownedSpaceId(import_sdk_core9.ACCOUNT_REGISTRY_SPACE);
+    const accountSpaceId = this.ownedSpaceId(import_sdk_core10.ACCOUNT_REGISTRY_SPACE);
     await this.ensureOwnedSpaceHostedById(accountSpaceId, signal);
     if (signal.aborted) throw signal.reason;
     const result = await account.applications.register(request.manifests);
@@ -23041,7 +23060,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     const session = context.session;
     if (!session) throw new Error("Account registry requires an active service session");
     const contexts = [context];
-    const accountSpaceId = this.ownedSpaceId(import_sdk_core9.ACCOUNT_REGISTRY_SPACE);
+    const accountSpaceId = this.ownedSpaceId(import_sdk_core10.ACCOUNT_REGISTRY_SPACE);
     const createScopedContext = (spaceId) => {
       const scoped = this._serviceGraph.track(createServiceContext({
         requestSink: this._serviceGraph.requestSink,
@@ -23057,10 +23076,10 @@ var _TinyCloudNode = class _TinyCloudNode {
       contexts.push(scoped);
       return scoped;
     };
-    const sql = new import_sdk_core9.SQLService({});
+    const sql = new import_sdk_core10.SQLService({});
     const sqlContext = createScopedContext(accountSpaceId);
     sql.initialize(sqlContext);
-    const spaces = new import_sdk_core9.SpaceService({
+    const spaces = new import_sdk_core10.SpaceService({
       hosts: context.hosts,
       session,
       invoke: context.invoke,
@@ -23070,14 +23089,14 @@ var _TinyCloudNode = class _TinyCloudNode {
       }),
       userDid: this.did,
       createKVService: (spaceId) => {
-        const kv = new import_sdk_core9.KVService({});
+        const kv = new import_sdk_core10.KVService({});
         kv.initialize(createScopedContext(spaceId));
         return kv;
       }
     });
     return {
       contexts,
-      account: new import_sdk_core5.AccountService({
+      account: new import_sdk_core6.AccountService({
         getDid: () => this.did,
         getHost: () => context.hosts[0] ?? this.config.host,
         getPrimarySpaceId: () => session.spaceId,
@@ -23233,7 +23252,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       return true;
     }
     const indexRead = {
-      spaceId: this.ownedSpaceId(import_sdk_core9.ACCOUNT_REGISTRY_SPACE),
+      spaceId: this.ownedSpaceId(import_sdk_core10.ACCOUNT_REGISTRY_SPACE),
       service: "sql",
       path: "account",
       action: "tinycloud.sql/read"
@@ -23261,7 +23280,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           stopped(error);
           return;
         }
-        const verdict = (0, import_sdk_core9.authorizationVerdictOf)(error);
+        const verdict = (0, import_sdk_core10.authorizationVerdictOf)(error);
         const message = error instanceof Error ? error.message : String(error);
         const isAuthorizationVerdict = verdict === void 0 ? /^(?:Unauthorized Action\b|(?:(?:request failed|HTTP request failed|status(?: code)?|response status)\s*:\s*)?(?:HTTP\s*)?(?:401|403)\b)/i.test(message) : verdict !== "other";
         if (isAuthorizationVerdict) {
@@ -23271,7 +23290,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           );
           return;
         }
-        if ((0, import_sdk_core9.isStorageFullError)(error) || (0, import_sdk_core9.isStorageFullError)(error?.cause) || message.includes(import_sdk_core9.STORAGE_FULL_MESSAGE) || message.includes(import_sdk_core9.STORAGE_WRITE_TOO_LARGE_MESSAGE)) {
+        if ((0, import_sdk_core10.isStorageFullError)(error) || (0, import_sdk_core10.isStorageFullError)(error?.cause) || message.includes(import_sdk_core10.STORAGE_FULL_MESSAGE) || message.includes(import_sdk_core10.STORAGE_WRITE_TOO_LARGE_MESSAGE)) {
           console.warn(
             "TinyCloud account registry sync stopped: storage is full",
             error
@@ -23309,7 +23328,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     }
     const networkIds = /* @__PURE__ */ new Set();
     for (const resource of request.resources) {
-      if (resource.service === import_sdk_core9.ENCRYPTION_PERMISSION_SERVICE && resource.path.startsWith("urn:tinycloud:encryption:") && resource.actions.includes(DECRYPT_ACTION2)) {
+      if (resource.service === import_sdk_core10.ENCRYPTION_PERMISSION_SERVICE && resource.path.startsWith("urn:tinycloud:encryption:") && resource.actions.includes(DECRYPT_ACTION2)) {
         networkIds.add(resource.path);
       }
     }
@@ -23320,7 +23339,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       return;
     }
     for (const networkId of this.requestedEncryptionNetworkIds()) {
-      const parsed = (0, import_sdk_core9.parseNetworkId)(networkId);
+      const parsed = (0, import_sdk_core10.parseNetworkId)(networkId);
       if (!didPrincipalMatches2(parsed.ownerDid, this.did)) {
         continue;
       }
@@ -23358,7 +23377,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (!host) {
       throw new Error("Owned space hosting requires a TinyCloud host");
     }
-    const activation = await (0, import_sdk_core9.activateSessionWithHost)(host, session.delegationHeader, signal);
+    const activation = await (0, import_sdk_core10.activateSessionWithHost)(host, session.delegationHeader, signal);
     if (activation.success && !activation.skipped?.includes(spaceId)) {
       this.confirmedHostedSpaceIds.add(spaceId);
       return;
@@ -23379,7 +23398,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       );
     }
     if (signal?.aborted) throw signal.reason;
-    const retry = await (0, import_sdk_core9.activateSessionWithHost)(host, session.delegationHeader, signal);
+    const retry = await (0, import_sdk_core10.activateSessionWithHost)(host, session.delegationHeader, signal);
     if (!retry.success || retry.skipped?.includes(spaceId)) {
       throw Object.assign(
         new Error(
@@ -23430,7 +23449,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         { cause: hosted }
       );
     }
-    const activation = await (0, import_sdk_core9.activateSessionWithHost)(
+    const activation = await (0, import_sdk_core10.activateSessionWithHost)(
       host,
       session.delegationHeader
     );
@@ -23690,7 +23709,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     }
     let restoredAddress;
     try {
-      restoredAddress = hasPersistedProof ? (0, import_sdk_core9.canonicalizeAddress)(sessionData.address) : void 0;
+      restoredAddress = hasPersistedProof ? (0, import_sdk_core10.canonicalizeAddress)(sessionData.address) : void 0;
     } catch {
       throw new InvalidRestoredSessionError("Persisted session has an invalid wallet address.");
     }
@@ -23734,9 +23753,9 @@ var _TinyCloudNode = class _TinyCloudNode {
     let replicaProtocolMismatch = false;
     if (this.config.replication?.enabled) {
       try {
-        restoredNodeFeatures = (await (0, import_sdk_core9.checkNodeInfo)(stagedHost, this.wasmBindings.protocolVersion())).features;
+        restoredNodeFeatures = (await (0, import_sdk_core10.checkNodeInfo)(stagedHost, this.wasmBindings.protocolVersion())).features;
       } catch (error) {
-        replicaProtocolMismatch = error instanceof import_sdk_core9.ProtocolMismatchError;
+        replicaProtocolMismatch = error instanceof import_sdk_core10.ProtocolMismatchError;
       }
     }
     const stagedAddress = restoredAddress;
@@ -23747,7 +23766,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     let replicationScopeUnavailable = false;
     if (this.config.replication?.enabled) {
       if (stagedAddress !== void 0) {
-        replicationPrincipal = (0, import_sdk_core9.pkhDid)(stagedAddress, stagedChainId);
+        replicationPrincipal = (0, import_sdk_core10.pkhDid)(stagedAddress, stagedChainId);
       } else {
         try {
           const { replicationScopeFromSignedSession: replicationScopeFromSignedSession2 } = await getNodeReplicationLoaders().authority();
@@ -23796,7 +23815,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         }
       }
     }
-    const stagedNodeDid = stagedAddress ? (0, import_sdk_core9.pkhDid)(stagedAddress, stagedChainId) : canonicalVerificationMethod;
+    const stagedNodeDid = stagedAddress ? (0, import_sdk_core10.pkhDid)(stagedAddress, stagedChainId) : canonicalVerificationMethod;
     const serviceSession = {
       delegationHeader: sessionData.delegationHeader,
       delegationCid: sessionData.delegationCid,
@@ -23824,7 +23843,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       stagedSessionExpiry,
       stagedRecap
     );
-    const stagedAccountSpaceId = stagedAddress ? this.wasmBindings.makeSpaceId(stagedAddress, stagedChainId, import_sdk_core9.ACCOUNT_REGISTRY_SPACE) : void 0;
+    const stagedAccountSpaceId = stagedAddress ? this.wasmBindings.makeSpaceId(stagedAddress, stagedChainId, import_sdk_core10.ACCOUNT_REGISTRY_SPACE) : void 0;
     const stagedGraph = this.stageRestoredServiceGraph({
       host: stagedHost,
       manager: stagedManager,
@@ -23959,7 +23978,7 @@ var _TinyCloudNode = class _TinyCloudNode {
   }
   stageRestoredServiceGraph(input) {
     const graph = this.createServiceGraphLifetime();
-    const core = this.auth ? new import_sdk_core9.TinyCloud(this.auth, {
+    const core = this.auth ? new import_sdk_core10.TinyCloud(this.auth, {
       invokeAny: graph.invokeAny,
       telemetry: this.config.telemetry,
       retryPolicy: this.config.retryPolicy
@@ -23978,16 +23997,16 @@ var _TinyCloudNode = class _TinyCloudNode {
       telemetry: this.config.telemetry,
       retryPolicy: this.config.retryPolicy
     }));
-    const kv = new import_sdk_core9.KVService({});
+    const kv = new import_sdk_core10.KVService({});
     kv.initialize(serviceContext);
     serviceContext.registerService("kv", kv);
-    const sql = new import_sdk_core9.SQLService({});
+    const sql = new import_sdk_core10.SQLService({});
     sql.initialize(serviceContext);
     serviceContext.registerService("sql", sql);
-    const duckdb = new import_sdk_core9.DuckDbService({});
+    const duckdb = new import_sdk_core10.DuckDbService({});
     duckdb.initialize(serviceContext);
     serviceContext.registerService("duckdb", duckdb);
-    const hooks = new import_sdk_core9.HooksService({});
+    const hooks = new import_sdk_core10.HooksService({});
     hooks.initialize(serviceContext);
     serviceContext.registerService("hooks", hooks);
     serviceContext.setSession(input.serviceSession);
@@ -24010,7 +24029,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     });
     vault.initialize(serviceContext);
     serviceContext.registerService("vault", vault);
-    const capabilityRegistry = new import_sdk_core9.CapabilityKeyRegistry();
+    const capabilityRegistry = new import_sdk_core10.CapabilityKeyRegistry();
     if (input.tinyCloudSession) {
       const session = input.tinyCloudSession;
       const delegations = input.recap.map((entry) => ({
@@ -24034,7 +24053,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         }, delegations);
       }
     }
-    const delegationManager = new import_sdk_core9.DelegationManager({
+    const delegationManager = new import_sdk_core10.DelegationManager({
       hosts: [input.host],
       accountSpaceId: input.accountSpaceId,
       session: input.serviceSession,
@@ -24044,7 +24063,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       fetch: graph.fetch
     });
     const keyProvider = new WasmKeyProvider({ sessionManager: input.manager });
-    const sharingService = new import_sdk_core9.SharingService({
+    const sharingService = new import_sdk_core10.SharingService({
       hosts: [input.host],
       invoke: graph.invoke,
       fetch: graph.fetch,
@@ -24057,7 +24076,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         return this.wasmBindings.computeCid(data, codec);
       },
       createKVService: (config) => {
-        const service = new import_sdk_core9.KVService({ prefix: config.pathPrefix?.replace(/\/$/, "") });
+        const service = new import_sdk_core10.KVService({ prefix: config.pathPrefix?.replace(/\/$/, "") });
         const context = graph.track(createServiceContext({
           requestSink: graph.requestSink,
           invoke: config.invoke,
@@ -24089,7 +24108,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         return delegation;
       } : void 0
     });
-    const spaceService = new import_sdk_core9.SpaceService({
+    const spaceService = new import_sdk_core10.SpaceService({
       hosts: [input.host],
       session: input.serviceSession,
       invoke: graph.invoke,
@@ -24098,7 +24117,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       userDid: input.nodeDid,
       createKVService: (spaceId) => {
         graph.assertActive();
-        const scopedKv = new import_sdk_core9.KVService({});
+        const scopedKv = new import_sdk_core10.KVService({});
         const context = graph.track(createServiceContext({
           requestSink: graph.requestSink,
           invoke: graph.invoke,
@@ -24115,7 +24134,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       },
       createVaultService: (spaceId) => {
         graph.assertActive();
-        const scopedKv = new import_sdk_core9.KVService({});
+        const scopedKv = new import_sdk_core10.KVService({});
         const context = graph.track(createServiceContext({
           requestSink: graph.requestSink,
           invoke: graph.invoke,
@@ -24207,7 +24226,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       return void 0;
     }
     if (this.config.registryPolicy === "fail-closed") {
-      const resolved2 = await (0, import_sdk_core9.resolveFailClosedTinyCloudHosts)(address, {
+      const resolved2 = await (0, import_sdk_core10.resolveFailClosedTinyCloudHosts)(address, {
         registryUrl: this.config.tinycloudRegistryUrl,
         registryChainId: this.config.registryChainId,
         newUserHost: this.config.newUserHost,
@@ -24221,7 +24240,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       });
       return resolved2.hosts[0];
     }
-    const resolved = await (0, import_sdk_core9.resolveTinyCloudHosts)((0, import_sdk_core9.pkhDid)(address, chainId), {
+    const resolved = await (0, import_sdk_core10.resolveTinyCloudHosts)((0, import_sdk_core10.pkhDid)(address, chainId), {
       registryUrl: this.config.tinycloudRegistryUrl,
       fallbackHosts: this.config.tinycloudFallbackHosts,
       autoDiscoverLocalNode: this.config.autoDiscoverLocalNode,
@@ -24273,7 +24292,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       nodeAudience: input.nodeAudience,
       ...input.role === "policy-enforcement" ? { enforcerDid: input.audienceDid } : {}
     };
-    const root = await (0, import_sdk_core9.signCompactUcanRootAuthorization)({
+    const root = await (0, import_sdk_core10.signCompactUcanRootAuthorization)({
       issuerDid: ownerDid,
       audienceDid: input.audienceDid,
       attenuation: unifiedRootAttenuation(input.capabilities),
@@ -24315,7 +24334,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       if (decision.needsApproval) return void 0;
       throw new Error(decision.reason ?? "OpenKey automatic credential signing was rejected");
     }
-    if (typeof decision.signature !== "string" || !await (0, import_sdk_core9.verifyEip191MessageSignature)(
+    if (typeof decision.signature !== "string" || !await (0, import_sdk_core10.verifyEip191MessageSignature)(
       request.message,
       decision.signature,
       request.address
@@ -24340,7 +24359,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (approval) {
       const decision = await approval(request);
       if (!decision.approved) throw new Error(decision.reason ?? "Credential signing was rejected");
-      if (decision.signature !== void 0 && !await (0, import_sdk_core9.verifyEip191MessageSignature)(
+      if (decision.signature !== void 0 && !await (0, import_sdk_core10.verifyEip191MessageSignature)(
         request.message,
         decision.signature,
         request.address
@@ -24425,7 +24444,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       nonce: this.config.nonce,
       siweConfig: this.config.siweConfig,
       manifest: useBootstrapSignInRequest ? void 0 : this.config.manifest,
-      capabilityRequest: useBootstrapSignInRequest ? this.config.includeAccountRegistryPermissions === false ? import_sdk_core9.BOOTSTRAP_DEFAULT_ONLY_SESSION_REQUEST : import_sdk_core9.BOOTSTRAP_SESSION_REQUESTS.default : this.config.capabilityRequest,
+      capabilityRequest: useBootstrapSignInRequest ? this.config.includeAccountRegistryPermissions === false ? import_sdk_core10.BOOTSTRAP_DEFAULT_ONLY_SESSION_REQUEST : import_sdk_core10.BOOTSTRAP_SESSION_REQUESTS.default : this.config.capabilityRequest,
       includeAccountRegistryPermissions: useBootstrapSignInRequest ? false : this.config.includeAccountRegistryPermissions,
       replication: this.config.replication?.enabled === true ? {
         enabled: true,
@@ -24433,7 +24452,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         allowSecrets: this.config.replication.allowSecrets === true
       } : void 0
     });
-    this.tc = new import_sdk_core9.TinyCloud(this.auth, {
+    this.tc = new import_sdk_core10.TinyCloud(this.auth, {
       invokeAny: this.invokeAnyWithRuntimePermissions,
       telemetry: this.config.telemetry,
       retryPolicy: this.config.retryPolicy
@@ -24486,7 +24505,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       nonce: this.config.nonce,
       siweConfig: this.config.siweConfig,
       manifest: useBootstrapSignInRequest ? void 0 : this.config.manifest,
-      capabilityRequest: useBootstrapSignInRequest ? this.config.includeAccountRegistryPermissions === false ? import_sdk_core9.BOOTSTRAP_DEFAULT_ONLY_SESSION_REQUEST : import_sdk_core9.BOOTSTRAP_SESSION_REQUESTS.default : this.config.capabilityRequest,
+      capabilityRequest: useBootstrapSignInRequest ? this.config.includeAccountRegistryPermissions === false ? import_sdk_core10.BOOTSTRAP_DEFAULT_ONLY_SESSION_REQUEST : import_sdk_core10.BOOTSTRAP_SESSION_REQUESTS.default : this.config.capabilityRequest,
       includeAccountRegistryPermissions: useBootstrapSignInRequest ? false : this.config.includeAccountRegistryPermissions,
       replication: this.config.replication?.enabled === true ? {
         enabled: true,
@@ -24494,7 +24513,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         allowSecrets: this.config.replication.allowSecrets === true
       } : void 0
     });
-    this.tc = new import_sdk_core9.TinyCloud(this.auth, {
+    this.tc = new import_sdk_core10.TinyCloud(this.auth, {
       invokeAny: this.invokeAnyWithRuntimePermissions,
       telemetry: this.config.telemetry,
       retryPolicy: this.config.retryPolicy
@@ -24525,21 +24544,21 @@ var _TinyCloudNode = class _TinyCloudNode {
       telemetry: this.config.telemetry,
       retryPolicy: this.config.retryPolicy
     }));
-    this._kv = new import_sdk_core9.KVService({});
+    this._kv = new import_sdk_core10.KVService({});
     this._kv.initialize(this._serviceContext);
     this._serviceContext.registerService("kv", this._kv);
     const features = this.nodeFeatures;
     if (features.length === 0 || features.includes("sql")) {
-      this._sql = new import_sdk_core9.SQLService({});
+      this._sql = new import_sdk_core10.SQLService({});
       this._sql.initialize(this._serviceContext);
       this._serviceContext.registerService("sql", this._sql);
     }
     if (features.length === 0 || features.includes("duckdb")) {
-      this._duckdb = new import_sdk_core9.DuckDbService({});
+      this._duckdb = new import_sdk_core10.DuckDbService({});
       this._duckdb.initialize(this._serviceContext);
       this._serviceContext.registerService("duckdb", this._duckdb);
     }
-    this._hooks = new import_sdk_core9.HooksService({});
+    this._hooks = new import_sdk_core10.HooksService({});
     this._hooks.initialize(this._serviceContext);
     this._serviceContext.registerService("hooks", this._hooks);
     const serviceSession = {
@@ -24563,7 +24582,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     kvService.setReadThroughReady(attached);
   }
   createSpaceScopedKVService(spaceId) {
-    const kvService = new import_sdk_core9.KVService({});
+    const kvService = new import_sdk_core10.KVService({});
     if (this._serviceContext) {
       const spaceScopedContext = this._serviceGraph.track(createServiceContext({
         requestSink: this._serviceGraph.requestSink,
@@ -24660,7 +24679,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         const shared = wasm.vault_x25519_dh(receiverPrivateKey, peerPublic);
         return columnDecrypt(shared, ciphertext);
       },
-      verifyNodeSignature: (nodeId, message, signature2) => (0, import_sdk_core9.verifyDidKeyEd25519Signature)(nodeId, message, signature2)
+      verifyNodeSignature: (nodeId, message, signature2) => (0, import_sdk_core10.verifyDidKeyEd25519Signature)(nodeId, message, signature2)
     };
   }
   /**
@@ -24676,7 +24695,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (cached) return cached;
     const response = await fetch(`${this.config.host}/info`);
     if (!response.ok) {
-      throw await (0, import_sdk_core9.httpResponseError)(response, "Failed to fetch node info");
+      throw await (0, import_sdk_core10.httpResponseError)(response, "Failed to fetch node info");
     }
     const info = await response.json();
     if (typeof info.nodeId !== "string" || info.nodeId.length === 0) {
@@ -24726,7 +24745,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     );
     if (response.status === 404) return null;
     if (!response.ok) {
-      throw await (0, import_sdk_core9.httpResponseError)(response, `Failed to fetch encryption network ${networkId}`);
+      throw await (0, import_sdk_core10.httpResponseError)(response, `Failed to fetch encryption network ${networkId}`);
     }
     const body = await response.json();
     return "descriptor" in body && body.descriptor ? body.descriptor : body;
@@ -24762,12 +24781,12 @@ var _TinyCloudNode = class _TinyCloudNode {
             path: networkId,
             actions: ["tinycloud.encryption/decrypt"]
           }) : void 0;
-          throw new import_sdk_core9.DecryptTransportResponseError(response.status, permissionHint);
+          throw new import_sdk_core10.DecryptTransportResponseError(response.status, permissionHint);
         }
         return await response.json();
       }
     };
-    return new import_sdk_core9.EncryptionService({
+    return new import_sdk_core10.EncryptionService({
       crypto: crypto3,
       signer: {
         signDecryptInvocation: async (input) => {
@@ -24781,7 +24800,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           graph.assertActive();
           return {
             ...signed2,
-            canonicalBody: (0, import_sdk_core9.canonicalizeEncryptionJson)(
+            canonicalBody: (0, import_sdk_core10.canonicalizeEncryptionJson)(
               input.body
             )
           };
@@ -24813,7 +24832,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           if (!address || !didPrincipalMatches2(principal, did)) {
             return null;
           }
-          const publicSpaceId = (0, import_sdk_core9.makePublicSpaceId)(address, chainId);
+          const publicSpaceId = (0, import_sdk_core10.makePublicSpaceId)(address, chainId);
           const encodedKey = discoveryKey.split("/").map(encodeURIComponent).join("/");
           const response = await graph.fetch(
             `${host}/public/${encodeURIComponent(publicSpaceId)}/kv/${encodedKey}`,
@@ -24845,7 +24864,7 @@ var _TinyCloudNode = class _TinyCloudNode {
   createVaultService(spaceId, kv, encryptionService = this.getEncryptionService(), nodeContext) {
     const wasm = this.wasmBindings;
     const serviceGraph = nodeContext?.serviceGraph ?? this._serviceGraph;
-    const vaultCrypto = (0, import_sdk_core9.createVaultCrypto)({
+    const vaultCrypto = (0, import_sdk_core10.createVaultCrypto)({
       vault_encrypt: wasm.vault_encrypt,
       vault_decrypt: wasm.vault_decrypt,
       vault_derive_key: wasm.vault_derive_key,
@@ -24860,7 +24879,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     const chainId = nodeContext?.chainId ?? this._chainId;
     const host = nodeContext?.host ?? this.config.host;
     const ownerDid = this.ownerDidFromSpaceId(spaceId) ?? did;
-    return new import_sdk_core9.DataVaultService({
+    return new import_sdk_core10.DataVaultService({
       spaceId,
       crypto: vaultCrypto,
       encryption: {
@@ -24885,8 +24904,8 @@ var _TinyCloudNode = class _TinyCloudNode {
           serviceGraph.assertActive();
           return self2._publicKV ?? self2.tc.publicKV;
         },
-        readPublicSpace: (host2, targetSpaceId, key2) => import_sdk_core9.TinyCloud.readPublicSpace(host2, targetSpaceId, key2),
-        makePublicSpaceId: import_sdk_core9.TinyCloud.makePublicSpaceId,
+        readPublicSpace: (host2, targetSpaceId, key2) => import_sdk_core10.TinyCloud.readPublicSpace(host2, targetSpaceId, key2),
+        makePublicSpaceId: import_sdk_core10.TinyCloud.makePublicSpaceId,
         did,
         address: address ?? "",
         chainId,
@@ -24900,7 +24919,7 @@ var _TinyCloudNode = class _TinyCloudNode {
    */
   initializeV2Services(serviceSession) {
     const graph = this._serviceGraph;
-    this._capabilityRegistry = new import_sdk_core9.CapabilityKeyRegistry();
+    this._capabilityRegistry = new import_sdk_core10.CapabilityKeyRegistry();
     const tcSession = this.auth?.tinyCloudSession;
     if (tcSession && this._address) {
       const sessionKey = {
@@ -24940,7 +24959,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       }
       this._capabilityRegistry.registerKey(sessionKey, delegations);
     }
-    this._delegationManager = new import_sdk_core9.DelegationManager({
+    this._delegationManager = new import_sdk_core10.DelegationManager({
       hosts: [this.config.host],
       accountSpaceId: this.accountSpaceId,
       session: serviceSession,
@@ -24949,7 +24968,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       signOwnerRevocation: this.signer ? (cid) => this.signOwnerRevocation(cid) : void 0,
       fetch: graph.fetch
     });
-    this._spaceService = new import_sdk_core9.SpaceService({
+    this._spaceService = new import_sdk_core10.SpaceService({
       hosts: [this.config.host],
       session: serviceSession,
       invoke: graph.invoke,
@@ -25015,7 +25034,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       },
       isStorageFull: () => this.ownStorageFull
     });
-    this._sharingService = new import_sdk_core9.SharingService({
+    this._sharingService = new import_sdk_core10.SharingService({
       hosts: [this.config.host],
       session: serviceSession,
       invoke: graph.invoke,
@@ -25034,7 +25053,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       },
       createKVService: (config) => {
         graph.assertActive();
-        const service = new import_sdk_core9.KVService({ prefix: config.pathPrefix?.replace(/\/$/, "") });
+        const service = new import_sdk_core10.KVService({ prefix: config.pathPrefix?.replace(/\/$/, "") });
         const context = graph.track(createServiceContext({
           requestSink: graph.requestSink,
           invoke: config.invoke,
@@ -25108,7 +25127,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       params.notBeforeSecs
     );
     return {
-      ...terminal ? (0, import_sdk_core9.markDelegationTerminal)(result.delegation, params.session.jwk) : { delegation: result.delegation, cid: result.cid },
+      ...terminal ? (0, import_sdk_core10.markDelegationTerminal)(result.delegation, params.session.jwk) : { delegation: result.delegation, cid: result.cid },
       // Rust serde `rename_all = "camelCase"` emits `delegateDid`
       // (lowercase d); the TypeScript interface uses `delegateDID`
       // (historical, matches Delegation.delegateDID). Normalize here.
@@ -25131,15 +25150,15 @@ var _TinyCloudNode = class _TinyCloudNode {
     }
     const permissions = ownerDelegationPermissions(params);
     const now = /* @__PURE__ */ new Date();
-    if (!(params.expiresAt instanceof Date) || params.expiresAt.getTime() <= now.getTime() || params.expiresAt.getTime() - now.getTime() > import_sdk_core9.EXPIRY.MAX_MS) {
+    if (!(params.expiresAt instanceof Date) || params.expiresAt.getTime() <= now.getTime() || params.expiresAt.getTime() - now.getTime() > import_sdk_core10.EXPIRY.MAX_MS) {
       throw new Error("Owner delegation expiry must be explicit, future, and within EXPIRY.MAX_MS");
     }
     if (!this.signer) throw new Error("Owner wallet signer is required");
     const session = this.currentTinyCloudSession();
     if (!session) throw new Error("Owner session is required");
-    const ownerDid = (0, import_sdk_core9.pkhDid)(session.address, session.chainId);
+    const ownerDid = (0, import_sdk_core10.pkhDid)(session.address, session.chainId);
     for (const permission of permissions) {
-      if (permission.service === import_sdk_core9.ENCRYPTION_PERMISSION_SERVICE && !(0, import_sdk_core9.principalDidEquals)((0, import_sdk_core9.parseNetworkId)(permission.path).ownerDid, ownerDid)) {
+      if (permission.service === import_sdk_core10.ENCRYPTION_PERMISSION_SERVICE && !(0, import_sdk_core10.principalDidEquals)((0, import_sdk_core10.parseNetworkId)(permission.path).ownerDid, ownerDid)) {
         throw new Error("Owner delegation cannot grant a foreign encryption network");
       }
     }
@@ -25160,7 +25179,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     const signature2 = await this.signer.signMessage(prepared.siwe);
     assertOwnerGraphActive();
     const delegationSession = this.wasmBindings.completeSessionSetup({ ...prepared, signature: signature2 });
-    const activation = await (0, import_sdk_core9.activateSessionWithHost)(host, delegationSession.delegationHeader);
+    const activation = await (0, import_sdk_core10.activateSessionWithHost)(host, delegationSession.delegationHeader);
     assertOwnerGraphActive();
     if (!activation.success) {
       throw Object.assign(
@@ -25221,7 +25240,7 @@ var _TinyCloudNode = class _TinyCloudNode {
   /** Register a signed policy and sibling roots with this Node's Policy/v3 runtime. */
   async registerPolicy(params) {
     this._serviceGraph.assertActive();
-    return (0, import_sdk_core9.registerPolicyV3)({
+    return (0, import_sdk_core10.registerPolicyV3)({
       ...params,
       nodeOrigin: this.config.host,
       fetch: globalThis.fetch.bind(globalThis)
@@ -25248,23 +25267,23 @@ var _TinyCloudNode = class _TinyCloudNode {
       jti: base64UrlEncode(jtiDigest.slice(0, 16)),
       expiresAt: new Date(input.expiresAt).toISOString().replace(/\.\d{3}Z$/, "Z")
     };
-    const requestBodyDigest = base64UrlEncode(new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode((0, import_sdk_core9.canonicalizeEncryptionJson)(body)))));
+    const requestBodyDigest = base64UrlEncode(new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode((0, import_sdk_core10.canonicalizeEncryptionJson)(body)))));
     const request = { ...body, requestBodyDigest };
     const authorization = authorizationHeader(this.wasmBindings.invoke(serviceSession, "kv", input.resourcePath, "tinycloud.kv/get"));
     const response = await fetch(`${this.config.host}/policy/v3/deliveries/authorize`, {
       method: "POST",
       headers: { accept: "application/json", "content-type": "application/json", authorization },
-      body: (0, import_sdk_core9.canonicalizeEncryptionJson)(request)
+      body: (0, import_sdk_core10.canonicalizeEncryptionJson)(request)
     });
-    if (!response.ok) throw await (0, import_sdk_core9.httpResponseError)(response, "V3 share delivery authorization failed");
-    const verified = (0, import_sdk_core9.validateShareDeliveryAuthorizationV3Bytes)(new Uint8Array(await response.arrayBuffer()), {
+    if (!response.ok) throw await (0, import_sdk_core10.httpResponseError)(response, "V3 share delivery authorization failed");
+    const verified = (0, import_sdk_core10.validateShareDeliveryAuthorizationV3Bytes)(new Uint8Array(await response.arrayBuffer()), {
       request,
       senderKeyDid: this.credentialHolderDid,
       deliveryAudience: input.deliveryAudience
     });
     const requestDigest = new Uint8Array(await crypto.subtle.digest(
       "SHA-256",
-      new TextEncoder().encode(`${import_sdk_core9.CREDENTIAL_INVITATION_REQUEST_DOMAIN}${(0, import_sdk_core9.canonicalizeEncryptionJson)(verified.request)}`)
+      new TextEncoder().encode(`${import_sdk_core10.CREDENTIAL_INVITATION_REQUEST_DOMAIN}${(0, import_sdk_core10.canonicalizeEncryptionJson)(verified.request)}`)
     ));
     return {
       ...verified,
@@ -25332,7 +25351,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (!this._sql) {
       const features = this.nodeFeatures;
       if (features.length > 0 && !features.includes("sql")) {
-        throw new import_sdk_core9.UnsupportedFeatureError("sql", this.config.host, features);
+        throw new import_sdk_core10.UnsupportedFeatureError("sql", this.config.host, features);
       }
       throw new Error("Not signed in. Call signIn() first.");
     }
@@ -25356,7 +25375,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (!this._serviceContext || !this._serviceContext.session) {
       throw new Error("Not signed in. Call signIn() first.");
     }
-    const sql = new import_sdk_core9.SQLService({});
+    const sql = new import_sdk_core10.SQLService({});
     const spaceScopedContext = this._serviceGraph.track(createServiceContext({
       requestSink: this._serviceGraph.requestSink,
       invoke: this._serviceContext.invoke,
@@ -25388,7 +25407,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (!this._serviceContext || !this._serviceContext.session) {
       throw new Error("Not signed in. Call signIn() first.");
     }
-    const kv = new import_sdk_core9.KVService({});
+    const kv = new import_sdk_core10.KVService({});
     const spaceScopedContext = this._serviceGraph.track(createServiceContext({
       requestSink: this._serviceGraph.requestSink,
       invoke: this._serviceContext.invoke,
@@ -25408,7 +25427,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (!this._duckdb) {
       const features = this.nodeFeatures;
       if (features.length > 0 && !features.includes("duckdb")) {
-        throw new import_sdk_core9.UnsupportedFeatureError("duckdb", this.config.host, features);
+        throw new import_sdk_core10.UnsupportedFeatureError("duckdb", this.config.host, features);
       }
       throw new Error("Not signed in. Call signIn() first.");
     }
@@ -25452,7 +25471,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       type: NETWORK_ADMIN_TYPE,
       targetNode,
       networkId,
-      bodyHash: (0, import_sdk_core9.canonicalHashHex)(
+      bodyHash: (0, import_sdk_core10.canonicalHashHex)(
         crypto3.sha256,
         body
       ),
@@ -25470,7 +25489,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         Authorization: signed2.authorization,
         "Content-Type": "application/json"
       },
-      body: (0, import_sdk_core9.canonicalizeEncryptionJson)(
+      body: (0, import_sdk_core10.canonicalizeEncryptionJson)(
         body
       )
     });
@@ -25482,7 +25501,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       );
     }
     if (!response.ok) {
-      throw await (0, import_sdk_core9.httpResponseError)(response, `Failed to create encryption network ${networkId}`);
+      throw await (0, import_sdk_core10.httpResponseError)(response, `Failed to create encryption network ${networkId}`);
     }
     const created = await response.json();
     return created.descriptor;
@@ -25501,7 +25520,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         return existing;
       }
     }
-    const parsed = (0, import_sdk_core9.parseNetworkId)(networkId);
+    const parsed = (0, import_sdk_core10.parseNetworkId)(networkId);
     if (!didPrincipalMatches2(parsed.ownerDid, this.did)) {
       throw new Error(
         `Cannot create encryption network ${networkId}: owner ${parsed.ownerDid} does not match signed-in DID ${this.did}`
@@ -25550,7 +25569,7 @@ var _TinyCloudNode = class _TinyCloudNode {
    * normal KV and encryption invocation paths.
    */
   async readSecret(input) {
-    const resolved = (0, import_sdk_core9.resolveSecretPath)(input.name, { scope: input.scope });
+    const resolved = (0, import_sdk_core10.resolveSecretPath)(input.name, { scope: input.scope });
     const targetSpace = input.space.startsWith("tinycloud:") ? input.space : this.ownedSpaceId(input.space);
     const result = await this.getBaseVault(targetSpace).readNetworkEncrypted(
       resolved.vaultKey
@@ -25584,7 +25603,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     const resolvedSpace = spaceId.startsWith("tinycloud:") ? spaceId : this.ownedSpaceId(spaceId);
     let secrets = this._baseSecrets.get(resolvedSpace);
     if (!secrets) {
-      secrets = new import_sdk_core9.SecretsService(() => this.getBaseVault(resolvedSpace));
+      secrets = new import_sdk_core10.SecretsService(() => this.getBaseVault(resolvedSpace));
       this._baseSecrets.set(resolvedSpace, secrets);
     }
     return secrets;
@@ -25727,7 +25746,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     for (const grant of this.runtimePermissionGrants) {
       if (grant.provenance === "primary") continue;
       for (const operation of grant.operations) {
-        const service = import_sdk_core9.SERVICE_SHORT_TO_LONG[operation.service];
+        const service = import_sdk_core10.SERVICE_SHORT_TO_LONG[operation.service];
         if (service === void 0 || typeof operation.path !== "string" || typeof operation.action !== "string") {
           continue;
         }
@@ -25745,7 +25764,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           service,
           ...space === void 0 ? {} : { space },
           path: operation.path,
-          caveats: (0, import_sdk_core9.canonicalizeRecapCaveats)(caveats)
+          caveats: (0, import_sdk_core10.canonicalizeRecapCaveats)(caveats)
         });
         const existing = grouped.get(identity);
         if (existing === void 0) {
@@ -25790,7 +25809,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       delegationCid: grant.delegationCid,
       spaceId: grant.spaceId,
       jwk: this.sessionKeyJwk,
-      address: (0, import_sdk_core9.canonicalizeAddress)(grant.address),
+      address: (0, import_sdk_core10.canonicalizeAddress)(grant.address),
       chainId: grant.chainId,
       siwe: grant.siwe,
       signature: grant.signature
@@ -25812,10 +25831,10 @@ var _TinyCloudNode = class _TinyCloudNode {
     const graph = this._serviceGraph;
     const session = this.currentTinyCloudSession();
     if (!session) {
-      throw new import_sdk_core9.SessionExpiredError(/* @__PURE__ */ new Date(0));
+      throw new import_sdk_core10.SessionExpiredError(/* @__PURE__ */ new Date(0));
     }
     if (delegation.expiry.getTime() <= Date.now()) {
-      throw new import_sdk_core9.SessionExpiredError(delegation.expiry);
+      throw new import_sdk_core10.SessionExpiredError(delegation.expiry);
     }
     const expectedDids = [session.verificationMethod, this.sessionDid];
     if (!expectedDids.some((did) => didPrincipalMatches2(delegation.delegateDID, did))) {
@@ -25826,7 +25845,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     const targetHost = delegation.host ?? this.config.host;
     let activateResult;
     try {
-      activateResult = await (0, import_sdk_core9.activateSessionWithHost)(
+      activateResult = await (0, import_sdk_core10.activateSessionWithHost)(
         targetHost,
         delegation.delegationHeader,
         graph.signal
@@ -25872,13 +25891,13 @@ var _TinyCloudNode = class _TinyCloudNode {
     const graph = this._serviceGraph;
     const session = this.currentTinyCloudSession();
     if (!session) {
-      throw new import_sdk_core9.SessionExpiredError(/* @__PURE__ */ new Date(0));
+      throw new import_sdk_core10.SessionExpiredError(/* @__PURE__ */ new Date(0));
     }
     const sessionExpiry = extractSiweExpiration(session.siwe);
     if (sessionExpiry !== void 0) {
       const marginMs = _TinyCloudNode.SESSION_EXPIRY_SAFETY_MARGIN_MS;
       if (sessionExpiry.getTime() <= Date.now() + marginMs) {
-        throw new import_sdk_core9.SessionExpiredError(sessionExpiry);
+        throw new import_sdk_core10.SessionExpiredError(sessionExpiry);
       }
     }
     const expanded = this.expandPermissionEntries(permissions);
@@ -25955,7 +25974,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         ...prepared,
         signature: signature2
       });
-      const activateResult = await (0, import_sdk_core9.activateSessionWithHost)(
+      const activateResult = await (0, import_sdk_core10.activateSessionWithHost)(
         this.config.host,
         delegatedSession.delegationHeader,
         graph.signal
@@ -26128,10 +26147,10 @@ var _TinyCloudNode = class _TinyCloudNode {
     }
     await this.assertMayCreateSpace();
     await this.auth.hostPublicSpace(publicSpaceId);
-    const kvActions = [import_sdk_core9.KV.PUT, import_sdk_core9.KV.GET, import_sdk_core9.KV.DEL, import_sdk_core9.KV.LIST, import_sdk_core9.KV.METADATA];
+    const kvActions = [import_sdk_core10.KV.PUT, import_sdk_core10.KV.GET, import_sdk_core10.KV.DEL, import_sdk_core10.KV.LIST, import_sdk_core10.KV.METADATA];
     const abilities = { kv: { "": kvActions } };
     const now = /* @__PURE__ */ new Date();
-    const expiryMs = import_sdk_core9.EXPIRY.EPHEMERAL_MS;
+    const expiryMs = import_sdk_core10.EXPIRY.EPHEMERAL_MS;
     const expirationTime = new Date(now.getTime() + expiryMs);
     const prepared = this.wasmBindings.prepareSession({
       abilities,
@@ -26149,7 +26168,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       ...prepared,
       signature: signature2
     });
-    const activateResult = await (0, import_sdk_core9.activateSessionWithHost)(
+    const activateResult = await (0, import_sdk_core10.activateSessionWithHost)(
       this.config.host,
       delegationSession.delegationHeader
     );
@@ -26179,7 +26198,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       }]);
     }
     if (this._serviceContext) {
-      const publicKV = new import_sdk_core9.KVService({ prefix: "" });
+      const publicKV = new import_sdk_core10.KVService({ prefix: "" });
       const publicContext = this._serviceGraph.track(createServiceContext({
         requestSink: this._serviceGraph.requestSink,
         invoke: this._serviceGraph.invoke,
@@ -26304,14 +26323,14 @@ var _TinyCloudNode = class _TinyCloudNode {
     }
     const session = this.currentTinyCloudSession();
     if (!session) {
-      throw new import_sdk_core9.SessionExpiredError(/* @__PURE__ */ new Date(0));
+      throw new import_sdk_core10.SessionExpiredError(/* @__PURE__ */ new Date(0));
     }
     const sessionExpiry = extractSiweExpiration(session.siwe);
     if (sessionExpiry !== void 0) {
       const now2 = Date.now();
       const marginMs = _TinyCloudNode.SESSION_EXPIRY_SAFETY_MARGIN_MS;
       if (sessionExpiry.getTime() <= now2 + marginMs) {
-        throw new import_sdk_core9.SessionExpiredError(sessionExpiry);
+        throw new import_sdk_core10.SessionExpiredError(sessionExpiry);
       }
     }
     if (!Array.isArray(permissions) || permissions.length === 0) {
@@ -26352,12 +26371,12 @@ var _TinyCloudNode = class _TinyCloudNode {
     );
     if ("refused" in plan) {
       if (plan.refused === "SESSION_EXPIRING") {
-        throw new import_sdk_core9.SessionExpiredError(plan.expiredAt ?? sessionExpiry ?? /* @__PURE__ */ new Date(0));
+        throw new import_sdk_core10.SessionExpiredError(plan.expiredAt ?? sessionExpiry ?? /* @__PURE__ */ new Date(0));
       }
       if (plan.refused === "CAVEATED_AUTHORITY") {
-        throw new import_sdk_core9.CaveatedDelegationUnsupportedError(plan.caveated ?? []);
+        throw new import_sdk_core10.CaveatedDelegationUnsupportedError(plan.caveated ?? []);
       }
-      throw new import_sdk_core9.PermissionNotInManifestError(plan.missing ?? [], plan.granted ?? []);
+      throw new import_sdk_core10.PermissionNotInManifestError(plan.missing ?? [], plan.granted ?? []);
     }
     if (plan.path === "runtime") {
       const delegation2 = await this.createDelegationViaRuntimeGrant(
@@ -26396,7 +26415,7 @@ var _TinyCloudNode = class _TinyCloudNode {
    */
   planDerivation(expandedEntries, session, effectiveExpiration, nowMs) {
     const caveatedRequest = expandedEntries.filter(
-      (entry) => !(0, import_sdk_core9.recapCaveatsEqual)(entry.caveats, void 0)
+      (entry) => !(0, import_sdk_core10.recapCaveatsEqual)(entry.caveats, void 0)
     );
     if (caveatedRequest.length > 0) {
       return { refused: "CAVEATED_AUTHORITY", caveated: caveatedRequest };
@@ -26537,7 +26556,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         }, getNodeReplicationLoaders().gatedNetwork);
         return;
       }
-      const identityPrincipal = principal ?? (this._address === void 0 ? void 0 : (0, import_sdk_core9.pkhDid)(this._address, this._chainId));
+      const identityPrincipal = principal ?? (this._address === void 0 ? void 0 : (0, import_sdk_core10.pkhDid)(this._address, this._chainId));
       if (identityPrincipal === void 0) return;
       const authority = await this.replicationAuthority();
       if (epoch !== this.sessionEpoch || attempt !== this.latestSessionAttempt || this._kv !== kv || this._serviceContext !== context) return;
@@ -26633,7 +26652,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     const spaceId = resolvedSpaces.size === 1 ? [...resolvedSpaces][0] : session.spaceId;
     const abilities = {};
     for (const entry of entries) {
-      const shortService = import_sdk_core9.SERVICE_LONG_TO_SHORT[entry.service];
+      const shortService = import_sdk_core10.SERVICE_LONG_TO_SHORT[entry.service];
       if (shortService === void 0) {
         throw new Error(
           `delegateTo: unknown service '${entry.service}' \u2014 no short-form mapping`
@@ -26690,7 +26709,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (onPrepared) {
       await onPrepared(delegation);
     }
-    const activateResult = await (0, import_sdk_core9.activateSessionWithHost)(
+    const activateResult = await (0, import_sdk_core10.activateSessionWithHost)(
       this.config.host,
       delegationHeader
     );
@@ -26727,7 +26746,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (onPrepared) {
       await onPrepared(delegation);
     }
-    const activateResult = await (0, import_sdk_core9.activateSessionWithHost)(
+    const activateResult = await (0, import_sdk_core10.activateSessionWithHost)(
       targetHost,
       delegationHeader
     );
@@ -26751,7 +26770,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     return this.wasmBindings.makeSpaceId(session.address, session.chainId, space);
   }
   expandPermissionEntries(permissions) {
-    return (0, import_sdk_core9.expandPermissionEntries)(permissions);
+    return (0, import_sdk_core10.expandPermissionEntries)(permissions);
   }
   /**
    * The current WASM child-delegation APIs accept action-only maps. Refuse any
@@ -26759,10 +26778,10 @@ var _TinyCloudNode = class _TinyCloudNode {
    */
   assertDelegationCaveatsPreservable(entries) {
     const caveated = entries.filter(
-      (entry) => !(0, import_sdk_core9.recapCaveatsEqual)(entry.caveats, void 0)
+      (entry) => !(0, import_sdk_core10.recapCaveatsEqual)(entry.caveats, void 0)
     );
     if (caveated.length > 0) {
-      throw new import_sdk_core9.CaveatedDelegationUnsupportedError(caveated);
+      throw new import_sdk_core10.CaveatedDelegationUnsupportedError(caveated);
     }
   }
   /**
@@ -26774,7 +26793,7 @@ var _TinyCloudNode = class _TinyCloudNode {
   assertRuntimeGrantCaveatsPreservable(entries, requestedOperations, grant) {
     const caveated = this.caveatedRuntimeGrantEntries(entries, requestedOperations, grant);
     if (caveated.length > 0) {
-      throw new import_sdk_core9.CaveatedDelegationUnsupportedError(caveated);
+      throw new import_sdk_core10.CaveatedDelegationUnsupportedError(caveated);
     }
   }
   /**
@@ -26791,7 +26810,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         const requested = requestedOperations[operationIndex++];
         if (!requested) continue;
         const constrained = grant.operations.find(
-          (granted) => this.operationCovers(granted, requested) && !(0, import_sdk_core9.recapCaveatsEqual)(granted.caveats, void 0)
+          (granted) => this.operationCovers(granted, requested) && !(0, import_sdk_core10.recapCaveatsEqual)(granted.caveats, void 0)
         );
         if (constrained) {
           caveated.push({
@@ -26808,7 +26827,7 @@ var _TinyCloudNode = class _TinyCloudNode {
   assertPortableDelegationCaveatsPreservable(delegation) {
     const entries = [];
     const add3 = (service, space, path, actions, caveats) => {
-      if ((0, import_sdk_core9.recapCaveatsEqual)(caveats, void 0)) return;
+      if ((0, import_sdk_core10.recapCaveatsEqual)(caveats, void 0)) return;
       entries.push({
         service: service.startsWith("tinycloud.") ? service : `tinycloud.${service}`,
         space,
@@ -26828,11 +26847,11 @@ var _TinyCloudNode = class _TinyCloudNode {
       add3(resource.service, resource.space, resource.path, resource.actions, resource.caveats);
     }
     if (entries.length > 0) {
-      throw new import_sdk_core9.CaveatedDelegationUnsupportedError(entries);
+      throw new import_sdk_core10.CaveatedDelegationUnsupportedError(entries);
     }
   }
   shortServiceName(service) {
-    const short = import_sdk_core9.SERVICE_LONG_TO_SHORT[service];
+    const short = import_sdk_core10.SERVICE_LONG_TO_SHORT[service];
     if (short === void 0) {
       throw new Error(
         `unknown service '${service}' \u2014 no short-form mapping`
@@ -26859,7 +26878,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     return abilities;
   }
   isEncryptionPermissionEntry(entry) {
-    return entry.service === import_sdk_core9.ENCRYPTION_PERMISSION_SERVICE && this.isEncryptionNetworkOperation("encryption", entry.path, entry.space);
+    return entry.service === import_sdk_core10.ENCRYPTION_PERMISSION_SERVICE && this.isEncryptionNetworkOperation("encryption", entry.path, entry.space);
   }
   isRawRevocationPermissionEntry(entry) {
     return entry.service === "tinycloud.delegation" && entry.path === "" && entry.space?.startsWith("urn:cid:") === true && entry.actions.includes("tinycloud.delegation/revoke");
@@ -26907,7 +26926,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     const missing = requested.filter((entry) => {
       const raw = this.isEncryptionPermissionEntry(entry) || this.isRawRevocationPermissionEntry(entry);
       const comparable = raw && this.isEncryptionPermissionEntry(entry) ? { ...entry, space: "encryption" } : entry;
-      return !(0, import_sdk_core9.isCapabilitySubset)([comparable], raw ? rawGranted : spaceGranted).subset;
+      return !(0, import_sdk_core10.isCapabilitySubset)([comparable], raw ? rawGranted : spaceGranted).subset;
     });
     return { subset: missing.length === 0, missing };
   }
@@ -27154,7 +27173,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (granted.service !== requested.service || !this.actionContains(granted.action, requested.action)) {
       return false;
     }
-    if (requested.caveats !== void 0 && !(0, import_sdk_core9.recapCaveatsEqual)(granted.caveats, requested.caveats)) {
+    if (requested.caveats !== void 0 && !(0, import_sdk_core10.recapCaveatsEqual)(granted.caveats, requested.caveats)) {
       return false;
     }
     if (granted.resource !== void 0 || requested.resource !== void 0) {
@@ -27176,7 +27195,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (grantedAction === requestedAction) {
       return true;
     }
-    if ((0, import_sdk_core9.isExplicitOnlyAction)(requestedAction)) {
+    if ((0, import_sdk_core10.isExplicitOnlyAction)(requestedAction)) {
       return false;
     }
     if (grantedAction.endsWith("/*")) {
@@ -27288,7 +27307,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (resolvedDelegateDID.endsWith(".eth") && this.config.ensResolver) {
       const address = await this.config.ensResolver.resolveAddress(resolvedDelegateDID);
       if (!address) throw new Error(`Could not resolve ENS name: ${resolvedDelegateDID}`);
-      resolvedDelegateDID = (0, import_sdk_core9.pkhDid)(address, 1);
+      resolvedDelegateDID = (0, import_sdk_core10.pkhDid)(address, 1);
     }
     const entries = legacyParamsToPermissionEntries(
       params.actions,
@@ -27302,7 +27321,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       });
       return result.delegation;
     } catch (err2) {
-      if (err2 instanceof import_sdk_core9.PermissionNotInManifestError) {
+      if (err2 instanceof import_sdk_core10.PermissionNotInManifestError) {
       } else {
         throw err2;
       }
@@ -27362,7 +27381,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       ...prepared,
       signature: signature2
     });
-    const activateResult = await (0, import_sdk_core9.activateSessionWithHost)(
+    const activateResult = await (0, import_sdk_core10.activateSessionWithHost)(
       this.config.host,
       delegationSession.delegationHeader
     );
@@ -27387,12 +27406,12 @@ var _TinyCloudNode = class _TinyCloudNode {
     };
     const hasKvActions = params.actions.some((a) => a.startsWith("tinycloud.kv/"));
     if (hasKvActions && params.includePublicSpace !== false) {
-      const publicSpaceId = (0, import_sdk_core9.makePublicSpaceId)(
+      const publicSpaceId = (0, import_sdk_core10.makePublicSpaceId)(
         this.wasmBindings.ensureEip55(session.address),
         session.chainId
       );
       const publicAbilities = {
-        kv: { "": [import_sdk_core9.KV.GET, import_sdk_core9.KV.PUT, import_sdk_core9.KV.METADATA] }
+        kv: { "": [import_sdk_core10.KV.GET, import_sdk_core10.KV.PUT, import_sdk_core10.KV.METADATA] }
       };
       const publicPrepared = this.wasmBindings.prepareSession({
         abilities: publicAbilities,
@@ -27410,7 +27429,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         ...publicPrepared,
         signature: publicSignature
       });
-      const publicActivateResult = await (0, import_sdk_core9.activateSessionWithHost)(
+      const publicActivateResult = await (0, import_sdk_core10.activateSessionWithHost)(
         this.config.host,
         publicSession.delegationHeader
       );
@@ -27420,7 +27439,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           delegationHeader: publicSession.delegationHeader,
           spaceId: publicSpaceId,
           path: "",
-          actions: [import_sdk_core9.KV.GET, import_sdk_core9.KV.PUT, import_sdk_core9.KV.METADATA],
+          actions: [import_sdk_core10.KV.GET, import_sdk_core10.KV.PUT, import_sdk_core10.KV.METADATA],
           disableSubDelegation: false,
           expiry: expirationTime,
           delegateDID: params.delegateDID,
@@ -27518,7 +27537,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       ...prepared,
       signature: signature2
     });
-    const activateResult = await (0, import_sdk_core9.activateSessionWithHost)(
+    const activateResult = await (0, import_sdk_core10.activateSessionWithHost)(
       targetHost,
       invokerSession.delegationHeader,
       graph.signal
@@ -27579,6 +27598,7 @@ var _TinyCloudNode = class _TinyCloudNode {
    */
   async createSubDelegation(parentDelegation, params) {
     this.assertPortableDelegationCaveatsPreservable(parentDelegation);
+    refuseCaveated(params.resources);
     if (!this.signer) {
       throw new Error("Cannot createSubDelegation() in session-only mode. Requires wallet mode.");
     }
@@ -27647,7 +27667,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       ...prepared,
       signature: signature2
     });
-    const activateResult = await (0, import_sdk_core9.activateSessionWithHost)(
+    const activateResult = await (0, import_sdk_core10.activateSessionWithHost)(
       targetHost,
       subDelegationSession.delegationHeader
     );
@@ -27713,11 +27733,11 @@ registerReplicationLoaders({
 });
 
 // src/index.ts
-var import_sdk_core14 = require("@tinycloud/sdk-core");
 var import_sdk_core15 = require("@tinycloud/sdk-core");
+var import_sdk_core16 = require("@tinycloud/sdk-core");
 
 // src/storage/FileSessionStorage.ts
-var import_sdk_core12 = require("@tinycloud/sdk-core");
+var import_sdk_core13 = require("@tinycloud/sdk-core");
 var import_fs = require("fs");
 var import_path = require("path");
 var FileSessionStorage = class {
@@ -27772,7 +27792,7 @@ var FileSessionStorage = class {
     try {
       const data = (0, import_fs.readFileSync)(filePath, "utf-8");
       const parsed = JSON.parse(data);
-      const validation = (0, import_sdk_core12.validatePersistedSessionData)(parsed);
+      const validation = (0, import_sdk_core13.validatePersistedSessionData)(parsed);
       if (!validation.ok) {
         console.warn(`Invalid session data for ${address}:`, validation.error.message);
         (0, import_fs.unlinkSync)(filePath);
@@ -27881,7 +27901,6 @@ function wireOpenKeyAuthorize(openkey) {
 }
 
 // src/index.ts
-var import_sdk_core16 = require("@tinycloud/sdk-core");
 var import_sdk_core17 = require("@tinycloud/sdk-core");
 var import_sdk_core18 = require("@tinycloud/sdk-core");
 var import_sdk_core19 = require("@tinycloud/sdk-core");
@@ -27893,6 +27912,7 @@ var import_sdk_core24 = require("@tinycloud/sdk-core");
 var import_sdk_core25 = require("@tinycloud/sdk-core");
 var import_sdk_core26 = require("@tinycloud/sdk-core");
 var import_sdk_core27 = require("@tinycloud/sdk-core");
+var import_sdk_core28 = require("@tinycloud/sdk-core");
 
 // src/replication/sqlite.ts
 var import_node_async_hooks = require("async_hooks");
@@ -27900,7 +27920,7 @@ var import_node_crypto2 = require("crypto");
 var import_node_fs = require("fs");
 var import_promises = require("fs/promises");
 var import_node_path = require("path");
-var import_sdk_core13 = require("@tinycloud/sdk-core");
+var import_sdk_core14 = require("@tinycloud/sdk-core");
 var import_sdk_services4 = require("@tinycloud/sdk-services");
 var import_contractConstants = require("@tinycloud/sdk-services/kv/replication/contractConstants");
 init_authority();
@@ -28443,7 +28463,7 @@ async function realDirectoryExists(path) {
   return true;
 }
 function principalOf(did) {
-  return (0, import_sdk_core13.principalDid)(did);
+  return (0, import_sdk_core14.principalDid)(did);
 }
 var BASE32 = "abcdefghijklmnopqrstuvwxyz234567";
 function sha256Base32(material) {
@@ -29058,13 +29078,13 @@ transports_fn = async function() {
     const device = __privateGet(this, _device);
     const fetch2 = spec.fetch ?? globalThis.fetch.bind(globalThis);
     return (grant) => {
-      const context = new import_sdk_core13.ServiceContext({
+      const context = new import_sdk_core14.ServiceContext({
         invoke: wasm.invoke,
         invokeAny: wasm.invokeAny,
         fetch: fetch2,
         hosts: [spec.identity.host]
       });
-      const kv = new import_sdk_core13.KVService({});
+      const kv = new import_sdk_core14.KVService({});
       kv.initialize(context);
       context.registerService("kv", kv);
       context.setSession({