@tinycloud/node-sdk 3.8.0-beta.0 → 3.8.0-beta.10

package/dist/{TinyCloudNode-BtKzLDJX.d.ts → TinyCloudNode-DnD-SH6t.d.ts}

@@ -1,9 +1,10 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
 import { AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, CapabilityPresentationEnvelopeV1, IUserAuthorization, ISigner, ISessionStorage, ISpaceCreationHandler, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, TinyCloudSession, PersistedSessionData, ClientSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, Delegation, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, RetryPolicy, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
-import { ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
+import { ReplicaPurgeFailedEvent, ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction, RequestSink, RequestLogReader } from '@tinycloud/sdk-services';
+import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
 import { EventEmitter } from 'events';
-import { P as PortableDelegation, S as SessionGrantProof, g as VerifiedSessionGrant } from './delegation-0LKZkmP2.js';
+import { P as PortableDelegation, S as SessionGrantProof, h as VerifiedSessionGrant } from './delegation-Ckc3UETl.js';
 
 /**
  * Node.js-specific SignStrategy types for TinyCloud authorization.
@@ -275,7 +276,7 @@ interface NodeUserAuthorizationConfig {
      * unrestricted `get` covering it is already requested. Storage and
      * scheduling never reach this layer.
      */
-    replication?: Pick<ReplicationOptions, "enabled" | "prefixes" | "allowSecrets">;
+    replication?: Pick<ReplicationOptions, "enabled" | "prefixes" | "allowSecrets" | "syncScope">;
     /** Extra top-level resource URIs and their abilities added to the sign-in ReCap (e.g. named-key prefixes). */
     additionalRawAbilities?: Record<string, string[]>;
     /**
@@ -515,6 +516,9 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      * @internal
      */
     private getCapabilityRequest;
+    private refreshNamedKeyFeatureForSignIn;
+    /** Manifest key paths that this sign-in cannot grant. */
+    get unavailableKeyPaths(): string[];
     private resolveSpaceName;
     /**
      * The plain-session primary abilities: `defaultActions` (the shared table)
@@ -1292,6 +1296,7 @@ declare class TinyCloudNode {
     private replicaRestoreGate?;
     private replicaSessionPrincipal?;
     private replicaSessionStamp?;
+    private readonly replicaPurgeFailedHandlers;
     /** Mints the replica session stamp on each fresh sign-in (TC-858 §4.1). Undefined when replication is off. */
     private readonly establishReplicaStamp;
     private readonly replicationControl?;
@@ -1300,6 +1305,8 @@ declare class TinyCloudNode {
     private _hooks?;
     private _vault?;
     private _encryption?;
+    private _namedKeyClient?;
+    private _keysUnavailable;
     private _baseVaults;
     private _baseSecrets;
     private _secrets;
@@ -1421,6 +1428,12 @@ declare class TinyCloudNode {
      * the unsubscribe function.
      */
     on(event: "storage.full", handler: (event: StorageFullEvent) => void): () => void;
+    /**
+     * Subscribe to `replica.purge.failed`. It fires when the browser local copy could not be erased
+     * after the bounded retries (sign-out, account switch or `purgeLocalCopy()`). The event carries the
+     * typed gate reason and `retryNow`; the SDK retries again on the next load. Returns the unsubscribe function.
+     */
+    on(event: "replica.purge.failed", handler: (event: ReplicaPurgeFailedEvent) => void): () => void;
     /**
      * Storage episode state for the UI mount. @internal
      *
@@ -1611,6 +1624,12 @@ declare class TinyCloudNode {
      */
     signOut(): Promise<void>;
     private endSession;
+    /**
+     * Erases the browser local copy after a deny (retry, event and next-load marker live in the lazy
+     * replication authority). Never rejects; `undefined` when replication is off or the storage keeps
+     * no browser database.
+     */
+    private eraseReplicaLocalCopy;
     /**
      * Step 1 of replica sign-out. Never rejects: failures come back as `unguarded` so the session
      * is still cleared. Returns `undefined` when replication is off.
@@ -2067,7 +2086,7 @@ declare class TinyCloudNode {
      * Sign a wallet (CACAO) revocation of the delegation `cid` for the node's
      * `POST /revoke`, and return its Authorization header value. The node
      * accepts it when the owner delegated `cid` or owns a space its abilities
-     * target, whichever key issued it. Valid for 60 seconds. Requires the
+     * target, whichever key issued it. Valid for 10 minutes. Requires the
      * owner wallet signer.
      */
     signOwnerRevocation(cid: string): Promise<string>;
@@ -2149,6 +2168,10 @@ declare class TinyCloudNode {
      * Network-scoped encryption/decrypt service.
      */
     get encryption(): IEncryptionService;
+    /** Named keys bound to the current session. */
+    get keys(): NamedKeyClient;
+    /** Manifest key paths unavailable during the latest `signIn()` attempt. */
+    get keysUnavailable(): readonly string[];
     getEncryptionNetwork(nameOrNetworkId?: string): Promise<NetworkDescriptor | null>;
     createEncryptionNetwork(name?: string): Promise<NetworkDescriptor>;
     /**

package/dist/{TinyCloudNode-ggmlnSfI.d.cts → TinyCloudNode-Dy65bxqs.d.cts}

@@ -1,9 +1,10 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
 import { AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, CapabilityPresentationEnvelopeV1, IUserAuthorization, ISigner, ISessionStorage, ISpaceCreationHandler, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, TinyCloudSession, PersistedSessionData, ClientSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, Delegation, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, RetryPolicy, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
-import { ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
+import { ReplicaPurgeFailedEvent, ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction, RequestSink, RequestLogReader } from '@tinycloud/sdk-services';
+import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
 import { EventEmitter } from 'events';
-import { P as PortableDelegation, S as SessionGrantProof, g as VerifiedSessionGrant } from './delegation-0LKZkmP2.cjs';
+import { P as PortableDelegation, S as SessionGrantProof, h as VerifiedSessionGrant } from './delegation-Ckc3UETl.cjs';
 
 /**
  * Node.js-specific SignStrategy types for TinyCloud authorization.
@@ -275,7 +276,7 @@ interface NodeUserAuthorizationConfig {
      * unrestricted `get` covering it is already requested. Storage and
      * scheduling never reach this layer.
      */
-    replication?: Pick<ReplicationOptions, "enabled" | "prefixes" | "allowSecrets">;
+    replication?: Pick<ReplicationOptions, "enabled" | "prefixes" | "allowSecrets" | "syncScope">;
     /** Extra top-level resource URIs and their abilities added to the sign-in ReCap (e.g. named-key prefixes). */
     additionalRawAbilities?: Record<string, string[]>;
     /**
@@ -515,6 +516,9 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      * @internal
      */
     private getCapabilityRequest;
+    private refreshNamedKeyFeatureForSignIn;
+    /** Manifest key paths that this sign-in cannot grant. */
+    get unavailableKeyPaths(): string[];
     private resolveSpaceName;
     /**
      * The plain-session primary abilities: `defaultActions` (the shared table)
@@ -1292,6 +1296,7 @@ declare class TinyCloudNode {
     private replicaRestoreGate?;
     private replicaSessionPrincipal?;
     private replicaSessionStamp?;
+    private readonly replicaPurgeFailedHandlers;
     /** Mints the replica session stamp on each fresh sign-in (TC-858 §4.1). Undefined when replication is off. */
     private readonly establishReplicaStamp;
     private readonly replicationControl?;
@@ -1300,6 +1305,8 @@ declare class TinyCloudNode {
     private _hooks?;
     private _vault?;
     private _encryption?;
+    private _namedKeyClient?;
+    private _keysUnavailable;
     private _baseVaults;
     private _baseSecrets;
     private _secrets;
@@ -1421,6 +1428,12 @@ declare class TinyCloudNode {
      * the unsubscribe function.
      */
     on(event: "storage.full", handler: (event: StorageFullEvent) => void): () => void;
+    /**
+     * Subscribe to `replica.purge.failed`. It fires when the browser local copy could not be erased
+     * after the bounded retries (sign-out, account switch or `purgeLocalCopy()`). The event carries the
+     * typed gate reason and `retryNow`; the SDK retries again on the next load. Returns the unsubscribe function.
+     */
+    on(event: "replica.purge.failed", handler: (event: ReplicaPurgeFailedEvent) => void): () => void;
     /**
      * Storage episode state for the UI mount. @internal
      *
@@ -1611,6 +1624,12 @@ declare class TinyCloudNode {
      */
     signOut(): Promise<void>;
     private endSession;
+    /**
+     * Erases the browser local copy after a deny (retry, event and next-load marker live in the lazy
+     * replication authority). Never rejects; `undefined` when replication is off or the storage keeps
+     * no browser database.
+     */
+    private eraseReplicaLocalCopy;
     /**
      * Step 1 of replica sign-out. Never rejects: failures come back as `unguarded` so the session
      * is still cleared. Returns `undefined` when replication is off.
@@ -2067,7 +2086,7 @@ declare class TinyCloudNode {
      * Sign a wallet (CACAO) revocation of the delegation `cid` for the node's
      * `POST /revoke`, and return its Authorization header value. The node
      * accepts it when the owner delegated `cid` or owns a space its abilities
-     * target, whichever key issued it. Valid for 60 seconds. Requires the
+     * target, whichever key issued it. Valid for 10 minutes. Requires the
      * owner wallet signer.
      */
     signOwnerRevocation(cid: string): Promise<string>;
@@ -2149,6 +2168,10 @@ declare class TinyCloudNode {
      * Network-scoped encryption/decrypt service.
      */
     get encryption(): IEncryptionService;
+    /** Named keys bound to the current session. */
+    get keys(): NamedKeyClient;
+    /** Manifest key paths unavailable during the latest `signIn()` attempt. */
+    get keysUnavailable(): readonly string[];
     getEncryptionNetwork(nameOrNetworkId?: string): Promise<NetworkDescriptor | null>;
     createEncryptionNetwork(name?: string): Promise<NetworkDescriptor>;
     /**

package/dist/{authority-sJ6buHMj.d.ts → authority-BQnTX3fI.d.ts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
-import { ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-BtKzLDJX.js';
+import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
+import { T as TinyCloudNode } from './TinyCloudNode-DnD-SH6t.js';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {
@@ -12,7 +12,7 @@ declare function hasUnrestrictedGetCoverage(entries: readonly PermissionEntry[],
 declare function augmentSignInEntriesWithReplication(input: {
     entries: readonly PermissionEntry[];
     primarySpaceId: string;
-    replication?: Pick<ReplicationOptions, "prefixes" | "allowSecrets">;
+    replication?: Pick<ReplicationOptions, "prefixes" | "allowSecrets" | "syncScope">;
 }): PermissionEntry[];
 
 /** Report a completed deny from the already-loaded authority; delivery was revoked synchronously. */
@@ -21,6 +21,20 @@ declare function reportReplicaDenial(result: {
     code?: string;
     intents?: number;
 }, reason: ReplicaDenyInput["reason"], onEvent: ReplicationOptions["onEvent"], context?: ServiceContext): void;
+/** What the root needs after a local-copy erase: the outcome, the `purgeLocalCopy()` result and the marker state. */
+interface ReplicaLocalEraseReport {
+    outcome: ReplicaLocalEraseOutcome;
+    purge: ReplicaPurgeLocalCopyResult;
+    /** The logout marker is set: the next load finishes the erase and the replica stays gated meanwhile. */
+    logoutPending?: true;
+}
+/**
+ * Erases the browser local copy after a deny, retrying a `failed` outcome with the delays above. After
+ * the last failure (or a refusal while the deny kept the keys) it notifies `handlers` with
+ * `replica.purge.failed`; the logout marker the lifecycle set makes the next load finish the erase.
+ * Never rejects. `undefined`: this storage has no browser local copy to erase.
+ */
+declare function eraseReplicaLocalCopy(lifecycle: KVReplicaStorage["lifecycle"], trigger: ReplicaPurgeTrigger, denyStatus: string | undefined, handlers: ReadonlySet<(event: ReplicaPurgeFailedEvent) => void>): Promise<ReplicaLocalEraseReport | undefined>;
 /** The verified owner proof is signed, finite, exact-space, and uncaveated on one get+sync scope. */
 declare function verifiedOwnerConsentAnchor(session: TinyCloudSession, wasmBindings: Pick<IWasmBindings, "validatePersistedSession">, exactVerifiedRecap: (verified: {
     verifiedRecap?: unknown;
@@ -96,12 +110,14 @@ declare function createReplicationAuthority(host: ReplicationAuthorityHost): Rep
 
 declare const __authority_AUTHORITY_EXPIRY_MARGIN_MS: typeof AUTHORITY_EXPIRY_MARGIN_MS;
 type __authority_DelegationPlanResult = DelegationPlanResult;
+type __authority_ReplicaLocalEraseReport = ReplicaLocalEraseReport;
 type __authority_ReplicationAuthorityHost = ReplicationAuthorityHost;
 type __authority_ReplicationAuthoritySession = ReplicationAuthoritySession;
 declare const __authority_assertRenewalParent: typeof assertRenewalParent;
 declare const __authority_assertValidReplicationConfig: typeof assertValidReplicationConfig;
 declare const __authority_augmentSignInEntriesWithReplication: typeof augmentSignInEntriesWithReplication;
 declare const __authority_createReplicationAuthority: typeof createReplicationAuthority;
+declare const __authority_eraseReplicaLocalCopy: typeof eraseReplicaLocalCopy;
 declare const __authority_establishReplicaSessionStamp: typeof establishReplicaSessionStamp;
 declare const __authority_hasUnrestrictedGetCoverage: typeof hasUnrestrictedGetCoverage;
 declare const __authority_mintNodeReplicationGrant: typeof mintNodeReplicationGrant;
@@ -112,7 +128,7 @@ declare const __authority_ucanAttCovers: typeof ucanAttCovers;
 declare const __authority_ucanAttUnconstrainedFor: typeof ucanAttUnconstrainedFor;
 declare const __authority_verifiedOwnerConsentAnchor: typeof verifiedOwnerConsentAnchor;
 declare namespace __authority {
-  export { __authority_AUTHORITY_EXPIRY_MARGIN_MS as AUTHORITY_EXPIRY_MARGIN_MS, type __authority_DelegationPlanResult as DelegationPlanResult, type __authority_ReplicationAuthorityHost as ReplicationAuthorityHost, type __authority_ReplicationAuthoritySession as ReplicationAuthoritySession, __authority_assertRenewalParent as assertRenewalParent, __authority_assertValidReplicationConfig as assertValidReplicationConfig, __authority_augmentSignInEntriesWithReplication as augmentSignInEntriesWithReplication, __authority_createReplicationAuthority as createReplicationAuthority, __authority_establishReplicaSessionStamp as establishReplicaSessionStamp, __authority_hasUnrestrictedGetCoverage as hasUnrestrictedGetCoverage, __authority_mintNodeReplicationGrant as mintNodeReplicationGrant, __authority_replicationScopeFromSignedSession as replicationScopeFromSignedSession, __authority_reportReplicaDenial as reportReplicaDenial, __authority_restoreReplicaSessionStamp as restoreReplicaSessionStamp, __authority_ucanAttCovers as ucanAttCovers, __authority_ucanAttUnconstrainedFor as ucanAttUnconstrainedFor, __authority_verifiedOwnerConsentAnchor as verifiedOwnerConsentAnchor };
+  export { __authority_AUTHORITY_EXPIRY_MARGIN_MS as AUTHORITY_EXPIRY_MARGIN_MS, type __authority_DelegationPlanResult as DelegationPlanResult, type __authority_ReplicaLocalEraseReport as ReplicaLocalEraseReport, type __authority_ReplicationAuthorityHost as ReplicationAuthorityHost, type __authority_ReplicationAuthoritySession as ReplicationAuthoritySession, __authority_assertRenewalParent as assertRenewalParent, __authority_assertValidReplicationConfig as assertValidReplicationConfig, __authority_augmentSignInEntriesWithReplication as augmentSignInEntriesWithReplication, __authority_createReplicationAuthority as createReplicationAuthority, __authority_eraseReplicaLocalCopy as eraseReplicaLocalCopy, __authority_establishReplicaSessionStamp as establishReplicaSessionStamp, __authority_hasUnrestrictedGetCoverage as hasUnrestrictedGetCoverage, __authority_mintNodeReplicationGrant as mintNodeReplicationGrant, __authority_replicationScopeFromSignedSession as replicationScopeFromSignedSession, __authority_reportReplicaDenial as reportReplicaDenial, __authority_restoreReplicaSessionStamp as restoreReplicaSessionStamp, __authority_ucanAttCovers as ucanAttCovers, __authority_ucanAttUnconstrainedFor as ucanAttUnconstrainedFor, __authority_verifiedOwnerConsentAnchor as verifiedOwnerConsentAnchor };
 }
 
-export { AUTHORITY_EXPIRY_MARGIN_MS as A, type DelegationPlanResult as D, type ReplicationAuthorityHost as R, __authority as _, type ReplicationAuthoritySession as a, assertRenewalParent as b, assertValidReplicationConfig as c, augmentSignInEntriesWithReplication as d, createReplicationAuthority as e, establishReplicaSessionStamp as f, reportReplicaDenial as g, hasUnrestrictedGetCoverage as h, restoreReplicaSessionStamp as i, ucanAttUnconstrainedFor as j, mintNodeReplicationGrant as m, replicationScopeFromSignedSession as r, ucanAttCovers as u, verifiedOwnerConsentAnchor as v };
+export { AUTHORITY_EXPIRY_MARGIN_MS as A, type DelegationPlanResult as D, type ReplicaLocalEraseReport as R, __authority as _, type ReplicationAuthorityHost as a, type ReplicationAuthoritySession as b, assertRenewalParent as c, assertValidReplicationConfig as d, augmentSignInEntriesWithReplication as e, createReplicationAuthority as f, eraseReplicaLocalCopy as g, establishReplicaSessionStamp as h, hasUnrestrictedGetCoverage as i, reportReplicaDenial as j, restoreReplicaSessionStamp as k, ucanAttUnconstrainedFor as l, mintNodeReplicationGrant as m, replicationScopeFromSignedSession as r, ucanAttCovers as u, verifiedOwnerConsentAnchor as v };

package/dist/{authority-_SYAE-uV.d.cts → authority-Rbye1U4o.d.cts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
-import { ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-ggmlnSfI.cjs';
+import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
+import { T as TinyCloudNode } from './TinyCloudNode-Dy65bxqs.cjs';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {
@@ -12,7 +12,7 @@ declare function hasUnrestrictedGetCoverage(entries: readonly PermissionEntry[],
 declare function augmentSignInEntriesWithReplication(input: {
     entries: readonly PermissionEntry[];
     primarySpaceId: string;
-    replication?: Pick<ReplicationOptions, "prefixes" | "allowSecrets">;
+    replication?: Pick<ReplicationOptions, "prefixes" | "allowSecrets" | "syncScope">;
 }): PermissionEntry[];
 
 /** Report a completed deny from the already-loaded authority; delivery was revoked synchronously. */
@@ -21,6 +21,20 @@ declare function reportReplicaDenial(result: {
     code?: string;
     intents?: number;
 }, reason: ReplicaDenyInput["reason"], onEvent: ReplicationOptions["onEvent"], context?: ServiceContext): void;
+/** What the root needs after a local-copy erase: the outcome, the `purgeLocalCopy()` result and the marker state. */
+interface ReplicaLocalEraseReport {
+    outcome: ReplicaLocalEraseOutcome;
+    purge: ReplicaPurgeLocalCopyResult;
+    /** The logout marker is set: the next load finishes the erase and the replica stays gated meanwhile. */
+    logoutPending?: true;
+}
+/**
+ * Erases the browser local copy after a deny, retrying a `failed` outcome with the delays above. After
+ * the last failure (or a refusal while the deny kept the keys) it notifies `handlers` with
+ * `replica.purge.failed`; the logout marker the lifecycle set makes the next load finish the erase.
+ * Never rejects. `undefined`: this storage has no browser local copy to erase.
+ */
+declare function eraseReplicaLocalCopy(lifecycle: KVReplicaStorage["lifecycle"], trigger: ReplicaPurgeTrigger, denyStatus: string | undefined, handlers: ReadonlySet<(event: ReplicaPurgeFailedEvent) => void>): Promise<ReplicaLocalEraseReport | undefined>;
 /** The verified owner proof is signed, finite, exact-space, and uncaveated on one get+sync scope. */
 declare function verifiedOwnerConsentAnchor(session: TinyCloudSession, wasmBindings: Pick<IWasmBindings, "validatePersistedSession">, exactVerifiedRecap: (verified: {
     verifiedRecap?: unknown;
@@ -96,12 +110,14 @@ declare function createReplicationAuthority(host: ReplicationAuthorityHost): Rep
 
 declare const __authority_AUTHORITY_EXPIRY_MARGIN_MS: typeof AUTHORITY_EXPIRY_MARGIN_MS;
 type __authority_DelegationPlanResult = DelegationPlanResult;
+type __authority_ReplicaLocalEraseReport = ReplicaLocalEraseReport;
 type __authority_ReplicationAuthorityHost = ReplicationAuthorityHost;
 type __authority_ReplicationAuthoritySession = ReplicationAuthoritySession;
 declare const __authority_assertRenewalParent: typeof assertRenewalParent;
 declare const __authority_assertValidReplicationConfig: typeof assertValidReplicationConfig;
 declare const __authority_augmentSignInEntriesWithReplication: typeof augmentSignInEntriesWithReplication;
 declare const __authority_createReplicationAuthority: typeof createReplicationAuthority;
+declare const __authority_eraseReplicaLocalCopy: typeof eraseReplicaLocalCopy;
 declare const __authority_establishReplicaSessionStamp: typeof establishReplicaSessionStamp;
 declare const __authority_hasUnrestrictedGetCoverage: typeof hasUnrestrictedGetCoverage;
 declare const __authority_mintNodeReplicationGrant: typeof mintNodeReplicationGrant;
@@ -112,7 +128,7 @@ declare const __authority_ucanAttCovers: typeof ucanAttCovers;
 declare const __authority_ucanAttUnconstrainedFor: typeof ucanAttUnconstrainedFor;
 declare const __authority_verifiedOwnerConsentAnchor: typeof verifiedOwnerConsentAnchor;
 declare namespace __authority {
-  export { __authority_AUTHORITY_EXPIRY_MARGIN_MS as AUTHORITY_EXPIRY_MARGIN_MS, type __authority_DelegationPlanResult as DelegationPlanResult, type __authority_ReplicationAuthorityHost as ReplicationAuthorityHost, type __authority_ReplicationAuthoritySession as ReplicationAuthoritySession, __authority_assertRenewalParent as assertRenewalParent, __authority_assertValidReplicationConfig as assertValidReplicationConfig, __authority_augmentSignInEntriesWithReplication as augmentSignInEntriesWithReplication, __authority_createReplicationAuthority as createReplicationAuthority, __authority_establishReplicaSessionStamp as establishReplicaSessionStamp, __authority_hasUnrestrictedGetCoverage as hasUnrestrictedGetCoverage, __authority_mintNodeReplicationGrant as mintNodeReplicationGrant, __authority_replicationScopeFromSignedSession as replicationScopeFromSignedSession, __authority_reportReplicaDenial as reportReplicaDenial, __authority_restoreReplicaSessionStamp as restoreReplicaSessionStamp, __authority_ucanAttCovers as ucanAttCovers, __authority_ucanAttUnconstrainedFor as ucanAttUnconstrainedFor, __authority_verifiedOwnerConsentAnchor as verifiedOwnerConsentAnchor };
+  export { __authority_AUTHORITY_EXPIRY_MARGIN_MS as AUTHORITY_EXPIRY_MARGIN_MS, type __authority_DelegationPlanResult as DelegationPlanResult, type __authority_ReplicaLocalEraseReport as ReplicaLocalEraseReport, type __authority_ReplicationAuthorityHost as ReplicationAuthorityHost, type __authority_ReplicationAuthoritySession as ReplicationAuthoritySession, __authority_assertRenewalParent as assertRenewalParent, __authority_assertValidReplicationConfig as assertValidReplicationConfig, __authority_augmentSignInEntriesWithReplication as augmentSignInEntriesWithReplication, __authority_createReplicationAuthority as createReplicationAuthority, __authority_eraseReplicaLocalCopy as eraseReplicaLocalCopy, __authority_establishReplicaSessionStamp as establishReplicaSessionStamp, __authority_hasUnrestrictedGetCoverage as hasUnrestrictedGetCoverage, __authority_mintNodeReplicationGrant as mintNodeReplicationGrant, __authority_replicationScopeFromSignedSession as replicationScopeFromSignedSession, __authority_reportReplicaDenial as reportReplicaDenial, __authority_restoreReplicaSessionStamp as restoreReplicaSessionStamp, __authority_ucanAttCovers as ucanAttCovers, __authority_ucanAttUnconstrainedFor as ucanAttUnconstrainedFor, __authority_verifiedOwnerConsentAnchor as verifiedOwnerConsentAnchor };
 }
 
-export { AUTHORITY_EXPIRY_MARGIN_MS as A, type DelegationPlanResult as D, type ReplicationAuthorityHost as R, __authority as _, type ReplicationAuthoritySession as a, assertRenewalParent as b, assertValidReplicationConfig as c, augmentSignInEntriesWithReplication as d, createReplicationAuthority as e, establishReplicaSessionStamp as f, reportReplicaDenial as g, hasUnrestrictedGetCoverage as h, restoreReplicaSessionStamp as i, ucanAttUnconstrainedFor as j, mintNodeReplicationGrant as m, replicationScopeFromSignedSession as r, ucanAttCovers as u, verifiedOwnerConsentAnchor as v };
+export { AUTHORITY_EXPIRY_MARGIN_MS as A, type DelegationPlanResult as D, type ReplicaLocalEraseReport as R, __authority as _, type ReplicationAuthorityHost as a, type ReplicationAuthoritySession as b, assertRenewalParent as c, assertValidReplicationConfig as d, augmentSignInEntriesWithReplication as e, createReplicationAuthority as f, eraseReplicaLocalCopy as g, establishReplicaSessionStamp as h, hasUnrestrictedGetCoverage as i, reportReplicaDenial as j, restoreReplicaSessionStamp as k, ucanAttUnconstrainedFor as l, mintNodeReplicationGrant as m, replicationScopeFromSignedSession as r, ucanAttCovers as u, verifiedOwnerConsentAnchor as v };