@tinycloud/node-sdk 3.8.0-beta.2 → 3.8.0-beta.21

package/README.md

@@ -1,5 +1,11 @@
 # @tinycloud/node-sdk
 
+## Signed SIWE metadata
+
+Set `siweConfig.resources` to `urn:tinycloud:recipients:<base64url>` URI strings to include a recipients declaration in the signed SIWE. The payload uses only unpadded base64url characters (`A–Z`, `a–z`, `0–9`, `_`, `-`). Node-sdk inserts these URIs immediately before the original ReCap resource, which remains last. Ordinary sign-in, external/OpenKey preparation, and bootstrap sessions use the same insertion path; completion and session storage retain the signed message unchanged.
+
+These resources do not add permissions. Other schemes, percent encoding, escape sequences and literal controls are not accepted in this option. The generated statement and ReCap remain unchanged; `siweConfig.statement` does not replace the generated statement. Omitting resources or passing an empty array leaves the prepared message unchanged.
+
 ## `@tinycloud/node-sdk/credential-pending-store`
 
 File-backed pending store for the email-proof flow. It keeps one file per request under `<home>/credentials/`, named by a hash of the request id. The directory is created with mode 0700 and each file with mode 0600. Permissions and ownership are re-checked on every read. Only a `home` that is itself a symlink is refused; ancestors of `home` may be symlinks, but `realpath(home)` must be owned by the current user. Unsafe files are left in place and reported as an error.

package/dist/{TinyCloudNode-B6VOBrCb.d.ts → TinyCloudNode-DaD5vJhL.d.cts}

@@ -2,8 +2,9 @@ import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
 import { AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, CapabilityPresentationEnvelopeV1, IUserAuthorization, ISigner, ISessionStorage, ISpaceCreationHandler, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, TinyCloudSession, PersistedSessionData, ClientSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, Delegation, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, RetryPolicy, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
 import { ReplicaPurgeFailedEvent, ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction, RequestSink, RequestLogReader } from '@tinycloud/sdk-services';
+import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
 import { EventEmitter } from 'events';
-import { P as PortableDelegation, S as SessionGrantProof, g as VerifiedSessionGrant } from './delegation-0LKZkmP2.js';
+import { P as PortableDelegation, S as SessionGrantProof, h as VerifiedSessionGrant } from './delegation-Ckc3UETl.cjs';
 
 /**
  * Node.js-specific SignStrategy types for TinyCloud authorization.
@@ -80,6 +81,8 @@ interface OpenKeyAuthorizeTinyCloud {
          * validates and size-bounds it before use.
          */
         presentation?: CapabilityPresentationEnvelopeV1;
+    }, opts?: {
+        mode?: "iframe" | "popup" | "redirect";
     }): Promise<{
         protocolVersion: 1;
         address: string;
@@ -142,9 +145,22 @@ type NodeUserAuthorizationAuthorizeFn = (input: OpenKeyBridgeInput) => Promise<{
  * const clientSession = await nodeAuth.signInWithOpenKey(authorize);
  * ```
  */
-declare function wireOpenKeyAuthorize(openkey: OpenKeyAuthorizeTinyCloud): NodeUserAuthorizationAuthorizeFn;
+declare function wireOpenKeyAuthorize(openkey: OpenKeyAuthorizeTinyCloud, opts?: {
+    mode?: "iframe" | "popup" | "redirect";
+}): NodeUserAuthorizationAuthorizeFn;
 
 type OpenKeyAuthorizeInput = OpenKeyBridgeInput;
+/** SIWE and session key prepared before an OpenKey approval click. */
+interface PreparedOpenKeyAuthorization {
+    readonly request: OpenKeyAuthorizeInput;
+    readonly prepared: PreparedOpenKeySession;
+    readonly keyId: string;
+    readonly jwk: Record<string, unknown>;
+    readonly address: string;
+    readonly chainId: number;
+    readonly generation: number;
+    readonly createdAt: number;
+}
 type OpenKeyAuthorizationResultV1 = Awaited<ReturnType<NodeUserAuthorizationAuthorizeFn>>;
 type PreparedOpenKeySession = {
     siwe: string;
@@ -365,6 +381,7 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     private readonly includeAccountRegistryPermissions;
     private sessionManager;
     private activeSessionKeyId;
+    private preparedSessionCounter;
     /** Incremented by resetSession; a sign-in started earlier publishes nothing. */
     private sessionGeneration;
     /**
@@ -515,6 +532,9 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      * @internal
      */
     private getCapabilityRequest;
+    private refreshNamedKeyFeatureForSignIn;
+    /** Manifest key paths that this sign-in cannot grant. */
+    get unavailableKeyPaths(): string[];
     private resolveSpaceName;
     /**
      * The plain-session primary abilities: `defaultActions` (the shared table)
@@ -567,13 +587,13 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     /**
      * Build SIWE overrides from the top-level nonce and siweConfig.
      * - Top-level `nonce` is seeded first so `siweConfig.nonce` wins if both are set.
-     * - statement is prepended to the default statement
-     * - resources are appended to the default resources
+     * - resources are inserted after WASM preparation, before the final ReCap
      * - uri triggers a warning (overwriting delegation target)
      * - all other fields override directly
      * - per-call nonce overrides siweConfig.nonce when provided
      */
     private buildSiweOverrides;
+    private prepareSessionWithResources;
     /**
      * Add an extension to the authorization flow.
      */
@@ -734,6 +754,10 @@ declare class NodeUserAuthorization implements IUserAuthorization {
          */
         retryResult?: (error: Error, originalRequest: OpenKeyAuthorizeInput, attempt: number) => Promise<OpenKeyAuthorizationResultV1 | null>;
     }): Promise<ClientSession>;
+    /** Finish address, host and SIWE preparation before an approval click. */
+    prepareOpenKeySignIn(options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<PreparedOpenKeyAuthorization>;
+    /** Complete a prepared approval. The caller starts authorization before awaiting this method. */
+    completeOpenKeySignIn(pending: PreparedOpenKeyAuthorization, authorization: Promise<OpenKeyAuthorizationResultV1>, options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<ClientSession>;
     /**
      * Build a `CapabilityPresentationEnvelopeV1` from `this._manifest`. The
      * envelope is display-only — the OpenKey widget renders it under an
@@ -1167,6 +1191,8 @@ interface DelegateToResult {
 interface RuntimePermissionGrantOptions {
     /** Override expiry. ms-format string ("7d", "1h") or raw milliseconds. */
     expiry?: string | number;
+    /** In-memory key snapshot captured when exact Share-key consent opened. */
+    expectedSessionKey?: Readonly<TinyCloudSession["jwk"]>;
 }
 interface EnsureEncryptionNetworkOptions {
     /**
@@ -1276,6 +1302,7 @@ declare class TinyCloudNode {
     private readonly explicitHost?;
     private signer;
     private auth;
+    private readonly consumedOpenKeyPendings;
     private tc;
     private _address?;
     private _chainId;
@@ -1301,6 +1328,8 @@ declare class TinyCloudNode {
     private _hooks?;
     private _vault?;
     private _encryption?;
+    private _namedKeyClient?;
+    private _keysUnavailable;
     private _baseVaults;
     private _baseSecrets;
     private _secrets;
@@ -1650,6 +1679,10 @@ declare class TinyCloudNode {
      * bytes before the network session or replica stamp is committed.
      */
     signInWithOpenKey(authorizeFn: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[0], options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<void>;
+    /** Prepare the OpenKey request before the approval click. */
+    prepareOpenKeySignIn(): Promise<PreparedOpenKeyAuthorization>;
+    /** Start OpenKey authorization synchronously, then complete normal session setup. */
+    signInWithPreparedOpenKey(pending: PreparedOpenKeyAuthorization, authorizeFn: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[0]): Promise<void>;
     private signInWith;
     private establishSignIn;
     /**
@@ -1954,6 +1987,12 @@ declare class TinyCloudNode {
     invokeAny(entries: Parameters<InvokeAnyFunction$1>[1], facts?: Parameters<InvokeAnyFunction$1>[2]): ReturnType<InvokeAnyFunction$1>;
     /** Sign protocol bytes with the established in-memory session key. */
     signSessionBytes(bytes: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Signs proofless invocations with `session`'s own did:key, for the node's
+     * issued-delegation list and revocation by the delegator. The audience is
+     * this Node's DID; each invocation lives 60 seconds.
+     */
+    private sessionInvocationSignerFor;
     /** Author a proofless Policy/v3 owner root with the authenticated holder key. */
     createUnifiedOwnerRoot(input: UnifiedOwnerRootInput): Promise<UnifiedOwnerRootReceipt>;
     /** Apply only an already-enabled signing policy to the exact credential request. */
@@ -2080,7 +2119,7 @@ declare class TinyCloudNode {
      * Sign a wallet (CACAO) revocation of the delegation `cid` for the node's
      * `POST /revoke`, and return its Authorization header value. The node
      * accepts it when the owner delegated `cid` or owns a space its abilities
-     * target, whichever key issued it. Valid for 60 seconds. Requires the
+     * target, whichever key issued it. Valid for 10 minutes. Requires the
      * owner wallet signer.
      */
     signOwnerRevocation(cid: string): Promise<string>;
@@ -2162,6 +2201,10 @@ declare class TinyCloudNode {
      * Network-scoped encryption/decrypt service.
      */
     get encryption(): IEncryptionService;
+    /** Named keys bound to the current session. */
+    get keys(): NamedKeyClient;
+    /** Manifest key paths unavailable during the latest `signIn()` attempt. */
+    get keysUnavailable(): readonly string[];
     getEncryptionNetwork(nameOrNetworkId?: string): Promise<NetworkDescriptor | null>;
     createEncryptionNetwork(name?: string): Promise<NetworkDescriptor>;
     /**
@@ -2698,4 +2741,4 @@ declare class TinyCloudNode {
     }): Promise<PortableDelegation>;
 }
 
-export { ACCEPTED_MARKER_VERSIONS as A, type BootstrapWarning as B, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, InvalidRestoredSessionError as I, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type RuntimePermissionGrantOptions as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type DelegateToResult as a, DelegatedAccess as b, NodeUserAuthorization as c, type NodeUserAuthorizationConfig as d, type SecretReadInput as e, type SecretReadResult as f, type SignStrategy as g, type TinyCloudNodeConfig as h, type UnifiedOwnerRootReceipt as i, UnsupportedSessionRestoreError as j, defaultSignStrategy as k, BOOTSTRAP_COMPLETION_MARKER_KEY as l, BOOTSTRAP_COMPLETION_MARKER_VERSION as m, type BootstrapCompletionMarker as n, type NodeUserAuthorizationAuthorizeFn as o, type OpenKeyAuthorizationResultV1 as p, type OpenKeyAuthorizeInput as q, type OpenKeyAuthorizeTinyCloud as r, type OpenKeyBridgeInput as s, type RestorableSession as t, wireOpenKeyAuthorize as w };
+export { ACCEPTED_MARKER_VERSIONS as A, type BootstrapWarning as B, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, InvalidRestoredSessionError as I, type NodeEventEmitterStrategy as N, type OpenKeyAuthorizeTinyCloud as O, type PreparedOpenKeyAuthorization as P, type RuntimePermissionGrantOptions as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type DelegateToResult as a, DelegatedAccess as b, NodeUserAuthorization as c, type NodeUserAuthorizationConfig as d, type OwnerDelegationReceipt as e, type SecretReadInput as f, type SecretReadResult as g, type SignStrategy as h, type TinyCloudNodeConfig as i, type UnifiedOwnerRootReceipt as j, UnsupportedSessionRestoreError as k, defaultSignStrategy as l, BOOTSTRAP_COMPLETION_MARKER_KEY as m, BOOTSTRAP_COMPLETION_MARKER_VERSION as n, type BootstrapCompletionMarker as o, type NodeUserAuthorizationAuthorizeFn as p, type OpenKeyAuthorizationResultV1 as q, type OpenKeyAuthorizeInput as r, type OpenKeyBridgeInput as s, type RestorableSession as t, wireOpenKeyAuthorize as w };

package/dist/{TinyCloudNode-CVO41O12.d.cts → TinyCloudNode-k3TbBwwj.d.ts}

@@ -2,8 +2,9 @@ import * as _tinycloud_sdk_core from '@tinycloud/sdk-core';
 import { AutoSignStrategy, AutoRejectStrategy, CallbackStrategy, CapabilityPresentationEnvelopeV1, IUserAuthorization, ISigner, ISessionStorage, ISpaceCreationHandler, RegistryPolicy, RegistrySequenceStore, OnNodeNotFound, LocalNodeIdentityStore, IWasmBindings, ISessionManager, SiweConfig, Manifest, ComposedManifestRequest, ReplicationOptions, TinyCloudSession, PersistedSessionData, ClientSession, PermissionEntry, Extension, SignRequest, SpaceHostResult, SignInOptions, TelemetryConfig, ServiceContext, IKVService, ISQLService, IDuckDbService, IHooksService, CreateOwnerDelegationParams as CreateOwnerDelegationParams$1, OwnerDelegationReceipt as OwnerDelegationReceipt$1, Delegation, StorageFullEvent, IStorageService, INotificationHandler, IENSResolver, RetryPolicy, KVReplicaStorage, AccountService, InvokeAnyFunction as InvokeAnyFunction$1, UnifiedPolicyCapability, RegisterPolicyV3Input, RegisterPolicyV3Receipt, CanonicalJson, ShareDeliveryAuthorizationV3Receipt, IDataVaultService, IEncryptionService, NetworkDescriptor, ISecretsService, ICapabilityKeyRegistry, DelegationManager, ISpaceService, ISpace, ISharingService, DelegationResult, DelegationRevocationReceipt, DelegationStatus, ServiceSession, ReplicationControl, ResolvedDelegate } from '@tinycloud/sdk-core';
 import { ReplicaPurgeFailedEvent, ReplicaSessionStamp } from '@tinycloud/sdk-services/kv/replication';
 import { InvokeFunction, InvokeAnyFunction, FetchFunction, RequestSink, RequestLogReader } from '@tinycloud/sdk-services';
+import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
 import { EventEmitter } from 'events';
-import { P as PortableDelegation, S as SessionGrantProof, g as VerifiedSessionGrant } from './delegation-0LKZkmP2.cjs';
+import { P as PortableDelegation, S as SessionGrantProof, h as VerifiedSessionGrant } from './delegation-Ckc3UETl.js';
 
 /**
  * Node.js-specific SignStrategy types for TinyCloud authorization.
@@ -80,6 +81,8 @@ interface OpenKeyAuthorizeTinyCloud {
          * validates and size-bounds it before use.
          */
         presentation?: CapabilityPresentationEnvelopeV1;
+    }, opts?: {
+        mode?: "iframe" | "popup" | "redirect";
     }): Promise<{
         protocolVersion: 1;
         address: string;
@@ -142,9 +145,22 @@ type NodeUserAuthorizationAuthorizeFn = (input: OpenKeyBridgeInput) => Promise<{
  * const clientSession = await nodeAuth.signInWithOpenKey(authorize);
  * ```
  */
-declare function wireOpenKeyAuthorize(openkey: OpenKeyAuthorizeTinyCloud): NodeUserAuthorizationAuthorizeFn;
+declare function wireOpenKeyAuthorize(openkey: OpenKeyAuthorizeTinyCloud, opts?: {
+    mode?: "iframe" | "popup" | "redirect";
+}): NodeUserAuthorizationAuthorizeFn;
 
 type OpenKeyAuthorizeInput = OpenKeyBridgeInput;
+/** SIWE and session key prepared before an OpenKey approval click. */
+interface PreparedOpenKeyAuthorization {
+    readonly request: OpenKeyAuthorizeInput;
+    readonly prepared: PreparedOpenKeySession;
+    readonly keyId: string;
+    readonly jwk: Record<string, unknown>;
+    readonly address: string;
+    readonly chainId: number;
+    readonly generation: number;
+    readonly createdAt: number;
+}
 type OpenKeyAuthorizationResultV1 = Awaited<ReturnType<NodeUserAuthorizationAuthorizeFn>>;
 type PreparedOpenKeySession = {
     siwe: string;
@@ -365,6 +381,7 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     private readonly includeAccountRegistryPermissions;
     private sessionManager;
     private activeSessionKeyId;
+    private preparedSessionCounter;
     /** Incremented by resetSession; a sign-in started earlier publishes nothing. */
     private sessionGeneration;
     /**
@@ -515,6 +532,9 @@ declare class NodeUserAuthorization implements IUserAuthorization {
      * @internal
      */
     private getCapabilityRequest;
+    private refreshNamedKeyFeatureForSignIn;
+    /** Manifest key paths that this sign-in cannot grant. */
+    get unavailableKeyPaths(): string[];
     private resolveSpaceName;
     /**
      * The plain-session primary abilities: `defaultActions` (the shared table)
@@ -567,13 +587,13 @@ declare class NodeUserAuthorization implements IUserAuthorization {
     /**
      * Build SIWE overrides from the top-level nonce and siweConfig.
      * - Top-level `nonce` is seeded first so `siweConfig.nonce` wins if both are set.
-     * - statement is prepended to the default statement
-     * - resources are appended to the default resources
+     * - resources are inserted after WASM preparation, before the final ReCap
      * - uri triggers a warning (overwriting delegation target)
      * - all other fields override directly
      * - per-call nonce overrides siweConfig.nonce when provided
      */
     private buildSiweOverrides;
+    private prepareSessionWithResources;
     /**
      * Add an extension to the authorization flow.
      */
@@ -734,6 +754,10 @@ declare class NodeUserAuthorization implements IUserAuthorization {
          */
         retryResult?: (error: Error, originalRequest: OpenKeyAuthorizeInput, attempt: number) => Promise<OpenKeyAuthorizationResultV1 | null>;
     }): Promise<ClientSession>;
+    /** Finish address, host and SIWE preparation before an approval click. */
+    prepareOpenKeySignIn(options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<PreparedOpenKeyAuthorization>;
+    /** Complete a prepared approval. The caller starts authorization before awaiting this method. */
+    completeOpenKeySignIn(pending: PreparedOpenKeyAuthorization, authorization: Promise<OpenKeyAuthorizationResultV1>, options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<ClientSession>;
     /**
      * Build a `CapabilityPresentationEnvelopeV1` from `this._manifest`. The
      * envelope is display-only — the OpenKey widget renders it under an
@@ -1167,6 +1191,8 @@ interface DelegateToResult {
 interface RuntimePermissionGrantOptions {
     /** Override expiry. ms-format string ("7d", "1h") or raw milliseconds. */
     expiry?: string | number;
+    /** In-memory key snapshot captured when exact Share-key consent opened. */
+    expectedSessionKey?: Readonly<TinyCloudSession["jwk"]>;
 }
 interface EnsureEncryptionNetworkOptions {
     /**
@@ -1276,6 +1302,7 @@ declare class TinyCloudNode {
     private readonly explicitHost?;
     private signer;
     private auth;
+    private readonly consumedOpenKeyPendings;
     private tc;
     private _address?;
     private _chainId;
@@ -1301,6 +1328,8 @@ declare class TinyCloudNode {
     private _hooks?;
     private _vault?;
     private _encryption?;
+    private _namedKeyClient?;
+    private _keysUnavailable;
     private _baseVaults;
     private _baseSecrets;
     private _secrets;
@@ -1650,6 +1679,10 @@ declare class TinyCloudNode {
      * bytes before the network session or replica stamp is committed.
      */
     signInWithOpenKey(authorizeFn: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[0], options?: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[1]): Promise<void>;
+    /** Prepare the OpenKey request before the approval click. */
+    prepareOpenKeySignIn(): Promise<PreparedOpenKeyAuthorization>;
+    /** Start OpenKey authorization synchronously, then complete normal session setup. */
+    signInWithPreparedOpenKey(pending: PreparedOpenKeyAuthorization, authorizeFn: Parameters<NodeUserAuthorization["signInWithOpenKey"]>[0]): Promise<void>;
     private signInWith;
     private establishSignIn;
     /**
@@ -1954,6 +1987,12 @@ declare class TinyCloudNode {
     invokeAny(entries: Parameters<InvokeAnyFunction$1>[1], facts?: Parameters<InvokeAnyFunction$1>[2]): ReturnType<InvokeAnyFunction$1>;
     /** Sign protocol bytes with the established in-memory session key. */
     signSessionBytes(bytes: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Signs proofless invocations with `session`'s own did:key, for the node's
+     * issued-delegation list and revocation by the delegator. The audience is
+     * this Node's DID; each invocation lives 60 seconds.
+     */
+    private sessionInvocationSignerFor;
     /** Author a proofless Policy/v3 owner root with the authenticated holder key. */
     createUnifiedOwnerRoot(input: UnifiedOwnerRootInput): Promise<UnifiedOwnerRootReceipt>;
     /** Apply only an already-enabled signing policy to the exact credential request. */
@@ -2080,7 +2119,7 @@ declare class TinyCloudNode {
      * Sign a wallet (CACAO) revocation of the delegation `cid` for the node's
      * `POST /revoke`, and return its Authorization header value. The node
      * accepts it when the owner delegated `cid` or owns a space its abilities
-     * target, whichever key issued it. Valid for 60 seconds. Requires the
+     * target, whichever key issued it. Valid for 10 minutes. Requires the
      * owner wallet signer.
      */
     signOwnerRevocation(cid: string): Promise<string>;
@@ -2162,6 +2201,10 @@ declare class TinyCloudNode {
      * Network-scoped encryption/decrypt service.
      */
     get encryption(): IEncryptionService;
+    /** Named keys bound to the current session. */
+    get keys(): NamedKeyClient;
+    /** Manifest key paths unavailable during the latest `signIn()` attempt. */
+    get keysUnavailable(): readonly string[];
     getEncryptionNetwork(nameOrNetworkId?: string): Promise<NetworkDescriptor | null>;
     createEncryptionNetwork(name?: string): Promise<NetworkDescriptor>;
     /**
@@ -2698,4 +2741,4 @@ declare class TinyCloudNode {
     }): Promise<PortableDelegation>;
 }
 
-export { ACCEPTED_MARKER_VERSIONS as A, type BootstrapWarning as B, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, InvalidRestoredSessionError as I, type NodeEventEmitterStrategy as N, type OwnerDelegationReceipt as O, type RuntimePermissionGrantOptions as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type DelegateToResult as a, DelegatedAccess as b, NodeUserAuthorization as c, type NodeUserAuthorizationConfig as d, type SecretReadInput as e, type SecretReadResult as f, type SignStrategy as g, type TinyCloudNodeConfig as h, type UnifiedOwnerRootReceipt as i, UnsupportedSessionRestoreError as j, defaultSignStrategy as k, BOOTSTRAP_COMPLETION_MARKER_KEY as l, BOOTSTRAP_COMPLETION_MARKER_VERSION as m, type BootstrapCompletionMarker as n, type NodeUserAuthorizationAuthorizeFn as o, type OpenKeyAuthorizationResultV1 as p, type OpenKeyAuthorizeInput as q, type OpenKeyAuthorizeTinyCloud as r, type OpenKeyBridgeInput as s, type RestorableSession as t, wireOpenKeyAuthorize as w };
+export { ACCEPTED_MARKER_VERSIONS as A, type BootstrapWarning as B, type CreateOwnerDelegationParams as C, type DelegateToOptions as D, type EnsureEncryptionNetworkOptions as E, InvalidRestoredSessionError as I, type NodeEventEmitterStrategy as N, type OpenKeyAuthorizeTinyCloud as O, type PreparedOpenKeyAuthorization as P, type RuntimePermissionGrantOptions as R, type SecretPermissionHint as S, TinyCloudNode as T, type UnifiedOwnerRootInput as U, type DelegateToResult as a, DelegatedAccess as b, NodeUserAuthorization as c, type NodeUserAuthorizationConfig as d, type OwnerDelegationReceipt as e, type SecretReadInput as f, type SecretReadResult as g, type SignStrategy as h, type TinyCloudNodeConfig as i, type UnifiedOwnerRootReceipt as j, UnsupportedSessionRestoreError as k, defaultSignStrategy as l, BOOTSTRAP_COMPLETION_MARKER_KEY as m, BOOTSTRAP_COMPLETION_MARKER_VERSION as n, type BootstrapCompletionMarker as o, type NodeUserAuthorizationAuthorizeFn as p, type OpenKeyAuthorizationResultV1 as q, type OpenKeyAuthorizeInput as r, type OpenKeyBridgeInput as s, type RestorableSession as t, wireOpenKeyAuthorize as w };

package/dist/{WasmKeyProvider-5Ee7fcAw.d.cts → WasmKeyProvider-BKCPRC-c.d.cts}

@@ -106,6 +106,26 @@ declare class FileSessionStorage implements ISessionStorage {
     isAvailable(): boolean;
 }
 
+/**
+ * Whether sign-in at `origin` can be granted named-key abilities for the app
+ * whose manifest `keys_app_id` (or `app_id`) is `keysAppId`.
+ *
+ * "Bound" means the key app id equals the reversed host of the origin, or
+ * extends it with further dot-separated labels: `tinycloud.chat` binds
+ * `chat.tinycloud.tinychat` and `chat.tinycloud.tinychat.worker`. Origins with
+ * no registrable host (`localhost`, `tauri.localhost`, IP addresses) or with
+ * lookalike hosts (`evil-tinycloud.chat`, `tinycloud.chat.evil.com`) are not
+ * bound. `origin` is a URL, an origin string such as `https://tinycloud.chat`,
+ * or a bare SIWE domain such as `tinycloud.chat`; the host (including any
+ * non-default port, which makes the origin unbound) is what is checked.
+ *
+ * This is the check `NodeUserAuthorization` applies when it decides whether a
+ * manifest's `keys` rows are granted at sign-in. A bound origin still needs a
+ * node that lists `encryption-named-keys-v1` in `/info` to actually receive
+ * the row.
+ */
+declare function isAppKeyHostBound(keysAppId: string, origin: string | URL): boolean;
+
 /**
  * WasmKeyProvider - KeyProvider implementation using WASM session manager.
  *
@@ -214,4 +234,4 @@ declare class WasmKeyProvider implements KeyProvider {
  */
 declare function createWasmKeyProvider(sessionManager: SessionManagerWithListing): WasmKeyProvider;
 
-export { FileSessionStorage as F, MemorySessionStorage as M, WasmKeyProvider as W, type WasmKeyProviderConfig as a, createWasmKeyProvider as c };
+export { FileSessionStorage as F, MemorySessionStorage as M, WasmKeyProvider as W, type WasmKeyProviderConfig as a, createWasmKeyProvider as c, isAppKeyHostBound as i };

package/dist/{WasmKeyProvider-5Ee7fcAw.d.ts → WasmKeyProvider-BKCPRC-c.d.ts}

@@ -106,6 +106,26 @@ declare class FileSessionStorage implements ISessionStorage {
     isAvailable(): boolean;
 }
 
+/**
+ * Whether sign-in at `origin` can be granted named-key abilities for the app
+ * whose manifest `keys_app_id` (or `app_id`) is `keysAppId`.
+ *
+ * "Bound" means the key app id equals the reversed host of the origin, or
+ * extends it with further dot-separated labels: `tinycloud.chat` binds
+ * `chat.tinycloud.tinychat` and `chat.tinycloud.tinychat.worker`. Origins with
+ * no registrable host (`localhost`, `tauri.localhost`, IP addresses) or with
+ * lookalike hosts (`evil-tinycloud.chat`, `tinycloud.chat.evil.com`) are not
+ * bound. `origin` is a URL, an origin string such as `https://tinycloud.chat`,
+ * or a bare SIWE domain such as `tinycloud.chat`; the host (including any
+ * non-default port, which makes the origin unbound) is what is checked.
+ *
+ * This is the check `NodeUserAuthorization` applies when it decides whether a
+ * manifest's `keys` rows are granted at sign-in. A bound origin still needs a
+ * node that lists `encryption-named-keys-v1` in `/info` to actually receive
+ * the row.
+ */
+declare function isAppKeyHostBound(keysAppId: string, origin: string | URL): boolean;
+
 /**
  * WasmKeyProvider - KeyProvider implementation using WASM session manager.
  *
@@ -214,4 +234,4 @@ declare class WasmKeyProvider implements KeyProvider {
  */
 declare function createWasmKeyProvider(sessionManager: SessionManagerWithListing): WasmKeyProvider;
 
-export { FileSessionStorage as F, MemorySessionStorage as M, WasmKeyProvider as W, type WasmKeyProviderConfig as a, createWasmKeyProvider as c };
+export { FileSessionStorage as F, MemorySessionStorage as M, WasmKeyProvider as W, type WasmKeyProviderConfig as a, createWasmKeyProvider as c, isAppKeyHostBound as i };

package/dist/{authority-DGi1hIMK.d.ts → authority-C_fWaxAu.d.ts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-B6VOBrCb.js';
+import { T as TinyCloudNode } from './TinyCloudNode-k3TbBwwj.js';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {

package/dist/{authority-DgVV80bI.d.cts → authority-DJdbZM6k.d.cts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-CVO41O12.cjs';
+import { T as TinyCloudNode } from './TinyCloudNode-DaD5vJhL.cjs';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {