@tinycloud/node-sdk 3.8.0-beta.0 → 3.8.0-beta.1

package/dist/{TinyCloudNode-BtKzLDJX.d.ts → TinyCloudNode-Ckqu_fqH.d.ts}

@@ -275,7 +275,7 @@ interface NodeUserAuthorizationConfig {
      * unrestricted `get` covering it is already requested. Storage and
      * scheduling never reach this layer.
      */
-    replication?: Pick<ReplicationOptions, "enabled" | "prefixes" | "allowSecrets">;
+    replication?: Pick<ReplicationOptions, "enabled" | "prefixes" | "allowSecrets" | "syncScope">;
     /** Extra top-level resource URIs and their abilities added to the sign-in ReCap (e.g. named-key prefixes). */
     additionalRawAbilities?: Record<string, string[]>;
     /**

package/dist/{TinyCloudNode-ggmlnSfI.d.cts → TinyCloudNode-DDfx8Fx5.d.cts}

@@ -275,7 +275,7 @@ interface NodeUserAuthorizationConfig {
      * unrestricted `get` covering it is already requested. Storage and
      * scheduling never reach this layer.
      */
-    replication?: Pick<ReplicationOptions, "enabled" | "prefixes" | "allowSecrets">;
+    replication?: Pick<ReplicationOptions, "enabled" | "prefixes" | "allowSecrets" | "syncScope">;
     /** Extra top-level resource URIs and their abilities added to the sign-in ReCap (e.g. named-key prefixes). */
     additionalRawAbilities?: Record<string, string[]>;
     /**

package/dist/{authority-_SYAE-uV.d.cts → authority-BwM_s3Ya.d.cts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-ggmlnSfI.cjs';
+import { T as TinyCloudNode } from './TinyCloudNode-DDfx8Fx5.cjs';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {
@@ -12,7 +12,7 @@ declare function hasUnrestrictedGetCoverage(entries: readonly PermissionEntry[],
 declare function augmentSignInEntriesWithReplication(input: {
     entries: readonly PermissionEntry[];
     primarySpaceId: string;
-    replication?: Pick<ReplicationOptions, "prefixes" | "allowSecrets">;
+    replication?: Pick<ReplicationOptions, "prefixes" | "allowSecrets" | "syncScope">;
 }): PermissionEntry[];
 
 /** Report a completed deny from the already-loaded authority; delivery was revoked synchronously. */

package/dist/{authority-sJ6buHMj.d.ts → authority-DcyJpajL.d.ts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-BtKzLDJX.js';
+import { T as TinyCloudNode } from './TinyCloudNode-Ckqu_fqH.js';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {
@@ -12,7 +12,7 @@ declare function hasUnrestrictedGetCoverage(entries: readonly PermissionEntry[],
 declare function augmentSignInEntriesWithReplication(input: {
     entries: readonly PermissionEntry[];
     primarySpaceId: string;
-    replication?: Pick<ReplicationOptions, "prefixes" | "allowSecrets">;
+    replication?: Pick<ReplicationOptions, "prefixes" | "allowSecrets" | "syncScope">;
 }): PermissionEntry[];
 
 /** Report a completed deny from the already-loaded authority; delivery was revoked synchronously. */

package/dist/core.cjs

@@ -375,7 +375,7 @@ function augmentSignInEntriesWithReplication(input) {
     }
     eligiblePaths.push(path);
   }
-  if (eligiblePaths.length === replication.prefixes.length && eligiblePaths.length > 0 && hasUnrestrictedGetCoverage(input.entries, input.primarySpaceId, "")) {
+  if (replication.syncScope !== "prefixes" && eligiblePaths.length === replication.prefixes.length && eligiblePaths.length > 0 && hasUnrestrictedGetCoverage(input.entries, input.primarySpaceId, "")) {
     return [{
       service: KV_SERVICE,
       space: input.primarySpaceId,
@@ -4260,7 +4260,8 @@ var _TinyCloudNode = class _TinyCloudNode {
       replication: config.replication?.enabled === true ? {
         enabled: true,
         prefixes: config.replication.prefixes,
-        allowSecrets: config.replication.allowSecrets === true
+        allowSecrets: config.replication.allowSecrets === true,
+        syncScope: config.replication.syncScope
       } : void 0
     });
     this.tc = new import_sdk_core11.TinyCloud(this.auth, {
@@ -6682,7 +6683,8 @@ var _TinyCloudNode = class _TinyCloudNode {
       replication: this.config.replication?.enabled === true ? {
         enabled: true,
         prefixes: this.config.replication.prefixes,
-        allowSecrets: this.config.replication.allowSecrets === true
+        allowSecrets: this.config.replication.allowSecrets === true,
+        syncScope: this.config.replication.syncScope
       } : void 0
     });
     this.tc = new import_sdk_core11.TinyCloud(this.auth, {
@@ -6744,7 +6746,8 @@ var _TinyCloudNode = class _TinyCloudNode {
       replication: this.config.replication?.enabled === true ? {
         enabled: true,
         prefixes: this.config.replication.prefixes,
-        allowSecrets: this.config.replication.allowSecrets === true
+        allowSecrets: this.config.replication.allowSecrets === true,
+        syncScope: this.config.replication.syncScope
       } : void 0
     });
     this.tc = new import_sdk_core11.TinyCloud(this.auth, {