@tinycloud/node-sdk 3.8.0-beta.1 → 3.8.0-beta.11

package/dist/{TinyCloudNode-Ckqu_fqH.d.ts → TinyCloudNode-BVDUdEcf.d.cts}

@@ -1,9 +1,10 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
 import { AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, CapabilityPresentationEnvelopeV1, IUserAuthorization, ISigner, ISessionStorage, ISpaceCreationHandler, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, TinyCloudSession, PersistedSessionData, ClientSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, Delegation, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, RetryPolicy, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
-import { ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
+import { ReplicaPurgeFailedEvent, ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction, RequestSink, RequestLogReader } from '@tinycloud/sdk-services';
+import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
 import { EventEmitter } from 'events';
-import { P as PortableDelegation, S as SessionGrantProof, g as VerifiedSessionGrant } from './delegation-0LKZkmP2.js';
+import { P as PortableDelegation, S as SessionGrantProof, h as VerifiedSessionGrant } from './delegation-Ckc3UETl.cjs';
 
 /**
  * Node.js-specific SignStrategy types for TinyCloud authorization.
@@ -80,6 +81,8 @@ interface OpenKeyAuthorizeTinyCloud {
          * validates and size-bounds it before use.
          */
         presentation?: CapabilityPresentationEnvelopeV1;
+    }, opts?: {
+        mode?: "iframe" | "popup" | "redirect";
     }): Promise<{
         protocolVersion: 1;
         address: string;
@@ -142,9 +145,22 @@ type NodeUserAuthorizationAuthorizeFn = (input: OpenKeyBridgeInput) => Promise<{
  * const clientSession = await nodeAuth.signInWithOpenKey(authorize);
  * ```
  */
-declare function wireOpenKeyAuthorize(openkey: OpenKeyAuthorizeTinyCloud): NodeUserAuthorizationAuthorizeFn;
+declare function wireOpenKeyAuthorize(openkey: OpenKeyAuthorizeTinyCloud, opts?: {
+    mode?: "iframe" | "popup" | "redirect";
+}): NodeUserAuthorizationAuthorizeFn;
 
 type OpenKeyAuthorizeInput = OpenKeyBridgeInput;
+/** SIWE and session key prepared before an OpenKey approval click. */
+interface PreparedOpenKeyAuthorization {
+    readonly request: OpenKeyAuthorizeInput;
+    readonly prepared: PreparedOpenKeySession;
+    readonly keyId: string;
+    readonly jwk: Record<string, unknown>;
+    readonly address: string;
+    readonly chainId: number;
+    readonly generation: number;
+    readonly createdAt: number;
+}
 type OpenKeyAuthorizationResultV1 = Awaited<ReturnType<NodeUserAuthorizationAuthorizeFn>>;
 type PreparedOpenKeySession = {
     siwe: string;
@@ -365,6 +381,7 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     private readonly includeAccountRegistryPermissions;
     private sessionManager;
     private activeSessionKeyId;
+    private preparedSessionCounter;
     /** Incremented by resetSession; a sign-in started earlier publishes nothing. */
     private sessionGeneration;
     /**
@@ -515,6 +532,9 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      * @internal
      */
     private getCapabilityRequest;
+    private refreshNamedKeyFeatureForSignIn;
+    /** Manifest key paths that this sign-in cannot grant. */
+    get unavailableKeyPaths(): string[];
     private resolveSpaceName;
     /**
      * The plain-session primary abilities: `defaultActions` (the shared table)
@@ -734,6 +754,10 @@ declare class NodeUserAuthorization implements IUserAuthorization {
          */
         retryResult?: (error: Error, originalRequest: OpenKeyAuthorizeInput, attempt: number) => Promise<OpenKeyAuthorizationResultV1 | null>;
     }): Promise<ClientSession>;
+    /** Finish address, host and SIWE preparation before an approval click. */
+    prepareOpenKeySignIn(options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<PreparedOpenKeyAuthorization>;
+    /** Complete a prepared approval. The caller starts authorization before awaiting this method. */
+    completeOpenKeySignIn(pending: PreparedOpenKeyAuthorization, authorization: Promise<OpenKeyAuthorizationResultV1>, options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<ClientSession>;
     /**
      * Build a `CapabilityPresentationEnvelopeV1` from `this._manifest`. The
      * envelope is display-only — the OpenKey widget renders it under an
@@ -1276,6 +1300,7 @@ declare class TinyCloudNode {
     private readonly explicitHost?;
     private signer;
     private auth;
+    private readonly consumedOpenKeyPendings;
     private tc;
     private _address?;
     private _chainId;
@@ -1292,6 +1317,7 @@ declare class TinyCloudNode {
     private replicaRestoreGate?;
     private replicaSessionPrincipal?;
     private replicaSessionStamp?;
+    private readonly replicaPurgeFailedHandlers;
     /** Mints the replica session stamp on each fresh sign-in (TC-858 §4.1). Undefined when replication is off. */
     private readonly establishReplicaStamp;
     private readonly replicationControl?;
@@ -1300,6 +1326,8 @@ declare class TinyCloudNode {
     private _hooks?;
     private _vault?;
     private _encryption?;
+    private _namedKeyClient?;
+    private _keysUnavailable;
     private _baseVaults;
     private _baseSecrets;
     private _secrets;
@@ -1421,6 +1449,12 @@ declare class TinyCloudNode {
      * the unsubscribe function.
      */
     on(event: "storage.full", handler: (event: StorageFullEvent) => void): () => void;
+    /**
+     * Subscribe to `replica.purge.failed`. It fires when the browser local copy could not be erased
+     * after the bounded retries (sign-out, account switch or `purgeLocalCopy()`). The event carries the
+     * typed gate reason and `retryNow`; the SDK retries again on the next load. Returns the unsubscribe function.
+     */
+    on(event: "replica.purge.failed", handler: (event: ReplicaPurgeFailedEvent) => void): () => void;
     /**
      * Storage episode state for the UI mount. @internal
      *
@@ -1611,6 +1645,12 @@ declare class TinyCloudNode {
      */
     signOut(): Promise<void>;
     private endSession;
+    /**
+     * Erases the browser local copy after a deny (retry, event and next-load marker live in the lazy
+     * replication authority). Never rejects; `undefined` when replication is off or the storage keeps
+     * no browser database.
+     */
+    private eraseReplicaLocalCopy;
     /**
      * Step 1 of replica sign-out. Never rejects: failures come back as `unguarded` so the session
      * is still cleared. Returns `undefined` when replication is off.
@@ -1637,6 +1677,10 @@ declare class TinyCloudNode {
      * bytes before the network session or replica stamp is committed.
      */
     signInWithOpenKey(authorizeFn: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[0], options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<void>;
+    /** Prepare the OpenKey request before the approval click. */
+    prepareOpenKeySignIn(): Promise<PreparedOpenKeyAuthorization>;
+    /** Start OpenKey authorization synchronously, then complete normal session setup. */
+    signInWithPreparedOpenKey(pending: PreparedOpenKeyAuthorization, authorizeFn: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[0]): Promise<void>;
     private signInWith;
     private establishSignIn;
     /**
@@ -2067,7 +2111,7 @@ declare class TinyCloudNode {
      * Sign a wallet (CACAO) revocation of the delegation `cid` for the node's
      * `POST /revoke`, and return its Authorization header value. The node
      * accepts it when the owner delegated `cid` or owns a space its abilities
-     * target, whichever key issued it. Valid for 60 seconds. Requires the
+     * target, whichever key issued it. Valid for 10 minutes. Requires the
      * owner wallet signer.
      */
     signOwnerRevocation(cid: string): Promise<string>;
@@ -2149,6 +2193,10 @@ declare class TinyCloudNode {
      * Network-scoped encryption/decrypt service.
      */
     get encryption(): IEncryptionService;
+    /** Named keys bound to the current session. */
+    get keys(): NamedKeyClient;
+    /** Manifest key paths unavailable during the latest `signIn()` attempt. */
+    get keysUnavailable(): readonly string[];
     getEncryptionNetwork(nameOrNetworkId?: string): Promise<NetworkDescriptor | null>;
     createEncryptionNetwork(name?: string): Promise<NetworkDescriptor>;
     /**
@@ -2685,4 +2733,4 @@ declare class TinyCloudNode {
     }): Promise<PortableDelegation>;
 }
 
-export { ACCEPTED_MARKER_VERSIONS as A, type BootstrapWarning as B, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, InvalidRestoredSessionError as I, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type RuntimePermissionGrantOptions as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type DelegateToResult as a, DelegatedAccess as b, NodeUserAuthorization as c, type NodeUserAuthorizationConfig as d, type SecretReadInput as e, type SecretReadResult as f, type SignStrategy as g, type TinyCloudNodeConfig as h, type UnifiedOwnerRootReceipt as i, UnsupportedSessionRestoreError as j, defaultSignStrategy as k, BOOTSTRAP_COMPLETION_MARKER_KEY as l, BOOTSTRAP_COMPLETION_MARKER_VERSION as m, type BootstrapCompletionMarker as n, type NodeUserAuthorizationAuthorizeFn as o, type OpenKeyAuthorizationResultV1 as p, type OpenKeyAuthorizeInput as q, type OpenKeyAuthorizeTinyCloud as r, type OpenKeyBridgeInput as s, type RestorableSession as t, wireOpenKeyAuthorize as w };
+export { ACCEPTED_MARKER_VERSIONS as A, type BootstrapWarning as B, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, InvalidRestoredSessionError as I, type NodeEventEmitterStrategy as N, type OpenKeyAuthorizeTinyCloud as O, type PreparedOpenKeyAuthorization as P, type RuntimePermissionGrantOptions as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type DelegateToResult as a, DelegatedAccess as b, NodeUserAuthorization as c, type NodeUserAuthorizationConfig as d, type OwnerDelegationReceipt as e, type SecretReadInput as f, type SecretReadResult as g, type SignStrategy as h, type TinyCloudNodeConfig as i, type UnifiedOwnerRootReceipt as j, UnsupportedSessionRestoreError as k, defaultSignStrategy as l, BOOTSTRAP_COMPLETION_MARKER_KEY as m, BOOTSTRAP_COMPLETION_MARKER_VERSION as n, type BootstrapCompletionMarker as o, type NodeUserAuthorizationAuthorizeFn as p, type OpenKeyAuthorizationResultV1 as q, type OpenKeyAuthorizeInput as r, type OpenKeyBridgeInput as s, type RestorableSession as t, wireOpenKeyAuthorize as w };

package/dist/{TinyCloudNode-DDfx8Fx5.d.cts → TinyCloudNode-jMK_2Uj8.d.ts}

@@ -1,9 +1,10 @@
 import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
 import { AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, CapabilityPresentationEnvelopeV1, IUserAuthorization, ISigner, ISessionStorage, ISpaceCreationHandler, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, TinyCloudSession, PersistedSessionData, ClientSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, Delegation, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, RetryPolicy, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
-import { ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
+import { ReplicaPurgeFailedEvent, ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction, RequestSink, RequestLogReader } from '@tinycloud/sdk-services';
+import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
 import { EventEmitter } from 'events';
-import { P as PortableDelegation, S as SessionGrantProof, g as VerifiedSessionGrant } from './delegation-0LKZkmP2.cjs';
+import { P as PortableDelegation, S as SessionGrantProof, h as VerifiedSessionGrant } from './delegation-Ckc3UETl.js';
 
 /**
  * Node.js-specific SignStrategy types for TinyCloud authorization.
@@ -80,6 +81,8 @@ interface OpenKeyAuthorizeTinyCloud {
          * validates and size-bounds it before use.
          */
         presentation?: CapabilityPresentationEnvelopeV1;
+    }, opts?: {
+        mode?: "iframe" | "popup" | "redirect";
     }): Promise<{
         protocolVersion: 1;
         address: string;
@@ -142,9 +145,22 @@ type NodeUserAuthorizationAuthorizeFn = (input: OpenKeyBridgeInput) => Promise<{
  * const clientSession = await nodeAuth.signInWithOpenKey(authorize);
  * ```
  */
-declare function wireOpenKeyAuthorize(openkey: OpenKeyAuthorizeTinyCloud): NodeUserAuthorizationAuthorizeFn;
+declare function wireOpenKeyAuthorize(openkey: OpenKeyAuthorizeTinyCloud, opts?: {
+    mode?: "iframe" | "popup" | "redirect";
+}): NodeUserAuthorizationAuthorizeFn;
 
 type OpenKeyAuthorizeInput = OpenKeyBridgeInput;
+/** SIWE and session key prepared before an OpenKey approval click. */
+interface PreparedOpenKeyAuthorization {
+    readonly request: OpenKeyAuthorizeInput;
+    readonly prepared: PreparedOpenKeySession;
+    readonly keyId: string;
+    readonly jwk: Record<string, unknown>;
+    readonly address: string;
+    readonly chainId: number;
+    readonly generation: number;
+    readonly createdAt: number;
+}
 type OpenKeyAuthorizationResultV1 = Awaited<ReturnType<NodeUserAuthorizationAuthorizeFn>>;
 type PreparedOpenKeySession = {
     siwe: string;
@@ -365,6 +381,7 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     private readonly includeAccountRegistryPermissions;
     private sessionManager;
     private activeSessionKeyId;
+    private preparedSessionCounter;
     /** Incremented by resetSession; a sign-in started earlier publishes nothing. */
     private sessionGeneration;
     /**
@@ -515,6 +532,9 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      * @internal
      */
     private getCapabilityRequest;
+    private refreshNamedKeyFeatureForSignIn;
+    /** Manifest key paths that this sign-in cannot grant. */
+    get unavailableKeyPaths(): string[];
     private resolveSpaceName;
     /**
      * The plain-session primary abilities: `defaultActions` (the shared table)
@@ -734,6 +754,10 @@ declare class NodeUserAuthorization implements IUserAuthorization {
          */
         retryResult?: (error: Error, originalRequest: OpenKeyAuthorizeInput, attempt: number) => Promise<OpenKeyAuthorizationResultV1 | null>;
     }): Promise<ClientSession>;
+    /** Finish address, host and SIWE preparation before an approval click. */
+    prepareOpenKeySignIn(options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<PreparedOpenKeyAuthorization>;
+    /** Complete a prepared approval. The caller starts authorization before awaiting this method. */
+    completeOpenKeySignIn(pending: PreparedOpenKeyAuthorization, authorization: Promise<OpenKeyAuthorizationResultV1>, options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<ClientSession>;
     /**
      * Build a `CapabilityPresentationEnvelopeV1` from `this._manifest`. The
      * envelope is display-only — the OpenKey widget renders it under an
@@ -1276,6 +1300,7 @@ declare class TinyCloudNode {
     private readonly explicitHost?;
     private signer;
     private auth;
+    private readonly consumedOpenKeyPendings;
     private tc;
     private _address?;
     private _chainId;
@@ -1292,6 +1317,7 @@ declare class TinyCloudNode {
     private replicaRestoreGate?;
     private replicaSessionPrincipal?;
     private replicaSessionStamp?;
+    private readonly replicaPurgeFailedHandlers;
     /** Mints the replica session stamp on each fresh sign-in (TC-858 §4.1). Undefined when replication is off. */
     private readonly establishReplicaStamp;
     private readonly replicationControl?;
@@ -1300,6 +1326,8 @@ declare class TinyCloudNode {
     private _hooks?;
     private _vault?;
     private _encryption?;
+    private _namedKeyClient?;
+    private _keysUnavailable;
     private _baseVaults;
     private _baseSecrets;
     private _secrets;
@@ -1421,6 +1449,12 @@ declare class TinyCloudNode {
      * the unsubscribe function.
      */
     on(event: "storage.full", handler: (event: StorageFullEvent) => void): () => void;
+    /**
+     * Subscribe to `replica.purge.failed`. It fires when the browser local copy could not be erased
+     * after the bounded retries (sign-out, account switch or `purgeLocalCopy()`). The event carries the
+     * typed gate reason and `retryNow`; the SDK retries again on the next load. Returns the unsubscribe function.
+     */
+    on(event: "replica.purge.failed", handler: (event: ReplicaPurgeFailedEvent) => void): () => void;
     /**
      * Storage episode state for the UI mount. @internal
      *
@@ -1611,6 +1645,12 @@ declare class TinyCloudNode {
      */
     signOut(): Promise<void>;
     private endSession;
+    /**
+     * Erases the browser local copy after a deny (retry, event and next-load marker live in the lazy
+     * replication authority). Never rejects; `undefined` when replication is off or the storage keeps
+     * no browser database.
+     */
+    private eraseReplicaLocalCopy;
     /**
      * Step 1 of replica sign-out. Never rejects: failures come back as `unguarded` so the session
      * is still cleared. Returns `undefined` when replication is off.
@@ -1637,6 +1677,10 @@ declare class TinyCloudNode {
      * bytes before the network session or replica stamp is committed.
      */
     signInWithOpenKey(authorizeFn: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[0], options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<void>;
+    /** Prepare the OpenKey request before the approval click. */
+    prepareOpenKeySignIn(): Promise<PreparedOpenKeyAuthorization>;
+    /** Start OpenKey authorization synchronously, then complete normal session setup. */
+    signInWithPreparedOpenKey(pending: PreparedOpenKeyAuthorization, authorizeFn: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[0]): Promise<void>;
     private signInWith;
     private establishSignIn;
     /**
@@ -2067,7 +2111,7 @@ declare class TinyCloudNode {
      * Sign a wallet (CACAO) revocation of the delegation `cid` for the node's
      * `POST /revoke`, and return its Authorization header value. The node
      * accepts it when the owner delegated `cid` or owns a space its abilities
-     * target, whichever key issued it. Valid for 60 seconds. Requires the
+     * target, whichever key issued it. Valid for 10 minutes. Requires the
      * owner wallet signer.
      */
     signOwnerRevocation(cid: string): Promise<string>;
@@ -2149,6 +2193,10 @@ declare class TinyCloudNode {
      * Network-scoped encryption/decrypt service.
      */
     get encryption(): IEncryptionService;
+    /** Named keys bound to the current session. */
+    get keys(): NamedKeyClient;
+    /** Manifest key paths unavailable during the latest `signIn()` attempt. */
+    get keysUnavailable(): readonly string[];
     getEncryptionNetwork(nameOrNetworkId?: string): Promise<NetworkDescriptor | null>;
     createEncryptionNetwork(name?: string): Promise<NetworkDescriptor>;
     /**
@@ -2685,4 +2733,4 @@ declare class TinyCloudNode {
     }): Promise<PortableDelegation>;
 }
 
-export { ACCEPTED_MARKER_VERSIONS as A, type BootstrapWarning as B, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, InvalidRestoredSessionError as I, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type RuntimePermissionGrantOptions as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type DelegateToResult as a, DelegatedAccess as b, NodeUserAuthorization as c, type NodeUserAuthorizationConfig as d, type SecretReadInput as e, type SecretReadResult as f, type SignStrategy as g, type TinyCloudNodeConfig as h, type UnifiedOwnerRootReceipt as i, UnsupportedSessionRestoreError as j, defaultSignStrategy as k, BOOTSTRAP_COMPLETION_MARKER_KEY as l, BOOTSTRAP_COMPLETION_MARKER_VERSION as m, type BootstrapCompletionMarker as n, type NodeUserAuthorizationAuthorizeFn as o, type OpenKeyAuthorizationResultV1 as p, type OpenKeyAuthorizeInput as q, type OpenKeyAuthorizeTinyCloud as r, type OpenKeyBridgeInput as s, type RestorableSession as t, wireOpenKeyAuthorize as w };
+export { ACCEPTED_MARKER_VERSIONS as A, type BootstrapWarning as B, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, InvalidRestoredSessionError as I, type NodeEventEmitterStrategy as N, type OpenKeyAuthorizeTinyCloud as O, type PreparedOpenKeyAuthorization as P, type RuntimePermissionGrantOptions as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type DelegateToResult as a, DelegatedAccess as b, NodeUserAuthorization as c, type NodeUserAuthorizationConfig as d, type OwnerDelegationReceipt as e, type SecretReadInput as f, type SecretReadResult as g, type SignStrategy as h, type TinyCloudNodeConfig as i, type UnifiedOwnerRootReceipt as j, UnsupportedSessionRestoreError as k, defaultSignStrategy as l, BOOTSTRAP_COMPLETION_MARKER_KEY as m, BOOTSTRAP_COMPLETION_MARKER_VERSION as n, type BootstrapCompletionMarker as o, type NodeUserAuthorizationAuthorizeFn as p, type OpenKeyAuthorizationResultV1 as q, type OpenKeyAuthorizeInput as r, type OpenKeyBridgeInput as s, type RestorableSession as t, wireOpenKeyAuthorize as w };

package/dist/{authority-BwM_s3Ya.d.cts → authority-DJ-PE4Xo.d.cts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
-import { ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-DDfx8Fx5.cjs';
+import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
+import { T as TinyCloudNode } from './TinyCloudNode-BVDUdEcf.cjs';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {
@@ -21,6 +21,20 @@ declare function reportReplicaDenial(result: {
     code?: string;
     intents?: number;
 }, reason: ReplicaDenyInput["reason"], onEvent: ReplicationOptions["onEvent"], context?: ServiceContext): void;
+/** What the root needs after a local-copy erase: the outcome, the `purgeLocalCopy()` result and the marker state. */
+interface ReplicaLocalEraseReport {
+    outcome: ReplicaLocalEraseOutcome;
+    purge: ReplicaPurgeLocalCopyResult;
+    /** The logout marker is set: the next load finishes the erase and the replica stays gated meanwhile. */
+    logoutPending?: true;
+}
+/**
+ * Erases the browser local copy after a deny, retrying a `failed` outcome with the delays above. After
+ * the last failure (or a refusal while the deny kept the keys) it notifies `handlers` with
+ * `replica.purge.failed`; the logout marker the lifecycle set makes the next load finish the erase.
+ * Never rejects. `undefined`: this storage has no browser local copy to erase.
+ */
+declare function eraseReplicaLocalCopy(lifecycle: KVReplicaStorage["lifecycle"], trigger: ReplicaPurgeTrigger, denyStatus: string | undefined, handlers: ReadonlySet<(event: ReplicaPurgeFailedEvent) => void>): Promise<ReplicaLocalEraseReport | undefined>;
 /** The verified owner proof is signed, finite, exact-space, and uncaveated on one get+sync scope. */
 declare function verifiedOwnerConsentAnchor(session: TinyCloudSession, wasmBindings: Pick<IWasmBindings, "validatePersistedSession">, exactVerifiedRecap: (verified: {
     verifiedRecap?: unknown;
@@ -96,12 +110,14 @@ declare function createReplicationAuthority(host: ReplicationAuthorityHost): Rep
 
 declare const __authority_AUTHORITY_EXPIRY_MARGIN_MS: typeof AUTHORITY_EXPIRY_MARGIN_MS;
 type __authority_DelegationPlanResult = DelegationPlanResult;
+type __authority_ReplicaLocalEraseReport = ReplicaLocalEraseReport;
 type __authority_ReplicationAuthorityHost = ReplicationAuthorityHost;
 type __authority_ReplicationAuthoritySession = ReplicationAuthoritySession;
 declare const __authority_assertRenewalParent: typeof assertRenewalParent;
 declare const __authority_assertValidReplicationConfig: typeof assertValidReplicationConfig;
 declare const __authority_augmentSignInEntriesWithReplication: typeof augmentSignInEntriesWithReplication;
 declare const __authority_createReplicationAuthority: typeof createReplicationAuthority;
+declare const __authority_eraseReplicaLocalCopy: typeof eraseReplicaLocalCopy;
 declare const __authority_establishReplicaSessionStamp: typeof establishReplicaSessionStamp;
 declare const __authority_hasUnrestrictedGetCoverage: typeof hasUnrestrictedGetCoverage;
 declare const __authority_mintNodeReplicationGrant: typeof mintNodeReplicationGrant;
@@ -112,7 +128,7 @@ declare const __authority_ucanAttCovers: typeof ucanAttCovers;
 declare const __authority_ucanAttUnconstrainedFor: typeof ucanAttUnconstrainedFor;
 declare const __authority_verifiedOwnerConsentAnchor: typeof verifiedOwnerConsentAnchor;
 declare namespace __authority {
-  export { __authority_AUTHORITY_EXPIRY_MARGIN_MS as AUTHORITY_EXPIRY_MARGIN_MS, type __authority_DelegationPlanResult as DelegationPlanResult, type __authority_ReplicationAuthorityHost as ReplicationAuthorityHost, type __authority_ReplicationAuthoritySession as ReplicationAuthoritySession, __authority_assertRenewalParent as assertRenewalParent, __authority_assertValidReplicationConfig as assertValidReplicationConfig, __authority_augmentSignInEntriesWithReplication as augmentSignInEntriesWithReplication, __authority_createReplicationAuthority as createReplicationAuthority, __authority_establishReplicaSessionStamp as establishReplicaSessionStamp, __authority_hasUnrestrictedGetCoverage as hasUnrestrictedGetCoverage, __authority_mintNodeReplicationGrant as mintNodeReplicationGrant, __authority_replicationScopeFromSignedSession as replicationScopeFromSignedSession, __authority_reportReplicaDenial as reportReplicaDenial, __authority_restoreReplicaSessionStamp as restoreReplicaSessionStamp, __authority_ucanAttCovers as ucanAttCovers, __authority_ucanAttUnconstrainedFor as ucanAttUnconstrainedFor, __authority_verifiedOwnerConsentAnchor as verifiedOwnerConsentAnchor };
+  export { __authority_AUTHORITY_EXPIRY_MARGIN_MS as AUTHORITY_EXPIRY_MARGIN_MS, type __authority_DelegationPlanResult as DelegationPlanResult, type __authority_ReplicaLocalEraseReport as ReplicaLocalEraseReport, type __authority_ReplicationAuthorityHost as ReplicationAuthorityHost, type __authority_ReplicationAuthoritySession as ReplicationAuthoritySession, __authority_assertRenewalParent as assertRenewalParent, __authority_assertValidReplicationConfig as assertValidReplicationConfig, __authority_augmentSignInEntriesWithReplication as augmentSignInEntriesWithReplication, __authority_createReplicationAuthority as createReplicationAuthority, __authority_eraseReplicaLocalCopy as eraseReplicaLocalCopy, __authority_establishReplicaSessionStamp as establishReplicaSessionStamp, __authority_hasUnrestrictedGetCoverage as hasUnrestrictedGetCoverage, __authority_mintNodeReplicationGrant as mintNodeReplicationGrant, __authority_replicationScopeFromSignedSession as replicationScopeFromSignedSession, __authority_reportReplicaDenial as reportReplicaDenial, __authority_restoreReplicaSessionStamp as restoreReplicaSessionStamp, __authority_ucanAttCovers as ucanAttCovers, __authority_ucanAttUnconstrainedFor as ucanAttUnconstrainedFor, __authority_verifiedOwnerConsentAnchor as verifiedOwnerConsentAnchor };
 }
 
-export { AUTHORITY_EXPIRY_MARGIN_MS as A, type DelegationPlanResult as D, type ReplicationAuthorityHost as R, __authority as _, type ReplicationAuthoritySession as a, assertRenewalParent as b, assertValidReplicationConfig as c, augmentSignInEntriesWithReplication as d, createReplicationAuthority as e, establishReplicaSessionStamp as f, reportReplicaDenial as g, hasUnrestrictedGetCoverage as h, restoreReplicaSessionStamp as i, ucanAttUnconstrainedFor as j, mintNodeReplicationGrant as m, replicationScopeFromSignedSession as r, ucanAttCovers as u, verifiedOwnerConsentAnchor as v };
+export { AUTHORITY_EXPIRY_MARGIN_MS as A, type DelegationPlanResult as D, type ReplicaLocalEraseReport as R, __authority as _, type ReplicationAuthorityHost as a, type ReplicationAuthoritySession as b, assertRenewalParent as c, assertValidReplicationConfig as d, augmentSignInEntriesWithReplication as e, createReplicationAuthority as f, eraseReplicaLocalCopy as g, establishReplicaSessionStamp as h, hasUnrestrictedGetCoverage as i, reportReplicaDenial as j, restoreReplicaSessionStamp as k, ucanAttUnconstrainedFor as l, mintNodeReplicationGrant as m, replicationScopeFromSignedSession as r, ucanAttCovers as u, verifiedOwnerConsentAnchor as v };

package/dist/{authority-DcyJpajL.d.ts → authority-i22vHbbp.d.ts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
-import { ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-Ckqu_fqH.js';
+import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
+import { T as TinyCloudNode } from './TinyCloudNode-jMK_2Uj8.js';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {
@@ -21,6 +21,20 @@ declare function reportReplicaDenial(result: {
     code?: string;
     intents?: number;
 }, reason: ReplicaDenyInput["reason"], onEvent: ReplicationOptions["onEvent"], context?: ServiceContext): void;
+/** What the root needs after a local-copy erase: the outcome, the `purgeLocalCopy()` result and the marker state. */
+interface ReplicaLocalEraseReport {
+    outcome: ReplicaLocalEraseOutcome;
+    purge: ReplicaPurgeLocalCopyResult;
+    /** The logout marker is set: the next load finishes the erase and the replica stays gated meanwhile. */
+    logoutPending?: true;
+}
+/**
+ * Erases the browser local copy after a deny, retrying a `failed` outcome with the delays above. After
+ * the last failure (or a refusal while the deny kept the keys) it notifies `handlers` with
+ * `replica.purge.failed`; the logout marker the lifecycle set makes the next load finish the erase.
+ * Never rejects. `undefined`: this storage has no browser local copy to erase.
+ */
+declare function eraseReplicaLocalCopy(lifecycle: KVReplicaStorage["lifecycle"], trigger: ReplicaPurgeTrigger, denyStatus: string | undefined, handlers: ReadonlySet<(event: ReplicaPurgeFailedEvent) => void>): Promise<ReplicaLocalEraseReport | undefined>;
 /** The verified owner proof is signed, finite, exact-space, and uncaveated on one get+sync scope. */
 declare function verifiedOwnerConsentAnchor(session: TinyCloudSession, wasmBindings: Pick<IWasmBindings, "validatePersistedSession">, exactVerifiedRecap: (verified: {
     verifiedRecap?: unknown;
@@ -96,12 +110,14 @@ declare function createReplicationAuthority(host: ReplicationAuthorityHost): Rep
 
 declare const __authority_AUTHORITY_EXPIRY_MARGIN_MS: typeof AUTHORITY_EXPIRY_MARGIN_MS;
 type __authority_DelegationPlanResult = DelegationPlanResult;
+type __authority_ReplicaLocalEraseReport = ReplicaLocalEraseReport;
 type __authority_ReplicationAuthorityHost = ReplicationAuthorityHost;
 type __authority_ReplicationAuthoritySession = ReplicationAuthoritySession;
 declare const __authority_assertRenewalParent: typeof assertRenewalParent;
 declare const __authority_assertValidReplicationConfig: typeof assertValidReplicationConfig;
 declare const __authority_augmentSignInEntriesWithReplication: typeof augmentSignInEntriesWithReplication;
 declare const __authority_createReplicationAuthority: typeof createReplicationAuthority;
+declare const __authority_eraseReplicaLocalCopy: typeof eraseReplicaLocalCopy;
 declare const __authority_establishReplicaSessionStamp: typeof establishReplicaSessionStamp;
 declare const __authority_hasUnrestrictedGetCoverage: typeof hasUnrestrictedGetCoverage;
 declare const __authority_mintNodeReplicationGrant: typeof mintNodeReplicationGrant;
@@ -112,7 +128,7 @@ declare const __authority_ucanAttCovers: typeof ucanAttCovers;
 declare const __authority_ucanAttUnconstrainedFor: typeof ucanAttUnconstrainedFor;
 declare const __authority_verifiedOwnerConsentAnchor: typeof verifiedOwnerConsentAnchor;
 declare namespace __authority {
-  export { __authority_AUTHORITY_EXPIRY_MARGIN_MS as AUTHORITY_EXPIRY_MARGIN_MS, type __authority_DelegationPlanResult as DelegationPlanResult, type __authority_ReplicationAuthorityHost as ReplicationAuthorityHost, type __authority_ReplicationAuthoritySession as ReplicationAuthoritySession, __authority_assertRenewalParent as assertRenewalParent, __authority_assertValidReplicationConfig as assertValidReplicationConfig, __authority_augmentSignInEntriesWithReplication as augmentSignInEntriesWithReplication, __authority_createReplicationAuthority as createReplicationAuthority, __authority_establishReplicaSessionStamp as establishReplicaSessionStamp, __authority_hasUnrestrictedGetCoverage as hasUnrestrictedGetCoverage, __authority_mintNodeReplicationGrant as mintNodeReplicationGrant, __authority_replicationScopeFromSignedSession as replicationScopeFromSignedSession, __authority_reportReplicaDenial as reportReplicaDenial, __authority_restoreReplicaSessionStamp as restoreReplicaSessionStamp, __authority_ucanAttCovers as ucanAttCovers, __authority_ucanAttUnconstrainedFor as ucanAttUnconstrainedFor, __authority_verifiedOwnerConsentAnchor as verifiedOwnerConsentAnchor };
+  export { __authority_AUTHORITY_EXPIRY_MARGIN_MS as AUTHORITY_EXPIRY_MARGIN_MS, type __authority_DelegationPlanResult as DelegationPlanResult, type __authority_ReplicaLocalEraseReport as ReplicaLocalEraseReport, type __authority_ReplicationAuthorityHost as ReplicationAuthorityHost, type __authority_ReplicationAuthoritySession as ReplicationAuthoritySession, __authority_assertRenewalParent as assertRenewalParent, __authority_assertValidReplicationConfig as assertValidReplicationConfig, __authority_augmentSignInEntriesWithReplication as augmentSignInEntriesWithReplication, __authority_createReplicationAuthority as createReplicationAuthority, __authority_eraseReplicaLocalCopy as eraseReplicaLocalCopy, __authority_establishReplicaSessionStamp as establishReplicaSessionStamp, __authority_hasUnrestrictedGetCoverage as hasUnrestrictedGetCoverage, __authority_mintNodeReplicationGrant as mintNodeReplicationGrant, __authority_replicationScopeFromSignedSession as replicationScopeFromSignedSession, __authority_reportReplicaDenial as reportReplicaDenial, __authority_restoreReplicaSessionStamp as restoreReplicaSessionStamp, __authority_ucanAttCovers as ucanAttCovers, __authority_ucanAttUnconstrainedFor as ucanAttUnconstrainedFor, __authority_verifiedOwnerConsentAnchor as verifiedOwnerConsentAnchor };
 }
 
-export { AUTHORITY_EXPIRY_MARGIN_MS as A, type DelegationPlanResult as D, type ReplicationAuthorityHost as R, __authority as _, type ReplicationAuthoritySession as a, assertRenewalParent as b, assertValidReplicationConfig as c, augmentSignInEntriesWithReplication as d, createReplicationAuthority as e, establishReplicaSessionStamp as f, reportReplicaDenial as g, hasUnrestrictedGetCoverage as h, restoreReplicaSessionStamp as i, ucanAttUnconstrainedFor as j, mintNodeReplicationGrant as m, replicationScopeFromSignedSession as r, ucanAttCovers as u, verifiedOwnerConsentAnchor as v };
+export { AUTHORITY_EXPIRY_MARGIN_MS as A, type DelegationPlanResult as D, type ReplicaLocalEraseReport as R, __authority as _, type ReplicationAuthorityHost as a, type ReplicationAuthoritySession as b, assertRenewalParent as c, assertValidReplicationConfig as d, augmentSignInEntriesWithReplication as e, createReplicationAuthority as f, eraseReplicaLocalCopy as g, establishReplicaSessionStamp as h, hasUnrestrictedGetCoverage as i, reportReplicaDenial as j, restoreReplicaSessionStamp as k, ucanAttUnconstrainedFor as l, mintNodeReplicationGrant as m, replicationScopeFromSignedSession as r, ucanAttCovers as u, verifiedOwnerConsentAnchor as v };