@tinycloud/node-sdk 3.8.0-beta.9 → 3.8.1-beta.0

package/dist/credentials-core.d.cts

@@ -1,5 +1,5 @@
 import { CredentialFlowDescriptor, CredentialRequirement, CredentialHolderBinding, IssuedCredentialEnvelope, CredentialIssuerMetadata, ClientSession, IKVService, StoredCredentialRecord, VerifiedCredential, CredentialProgressEvent, CredentialStorageReceipt, UnifiedPolicyV2, UnifiedPolicyCapability, PolicyCredentialAdmissionV3 } from '@tinycloud/sdk-core';
-import { V as ValidatedRuntimeDelegation } from './delegation-0LKZkmP2.cjs';
+import { V as ValidatedRuntimeDelegation } from './delegation-Ckc3UETl.cjs';
 
 interface CredentialClient {
     readonly sessionDid: string;

package/dist/credentials-core.d.ts

@@ -1,5 +1,5 @@
 import { CredentialFlowDescriptor, CredentialRequirement, CredentialHolderBinding, IssuedCredentialEnvelope, CredentialIssuerMetadata, ClientSession, IKVService, StoredCredentialRecord, VerifiedCredential, CredentialProgressEvent, CredentialStorageReceipt, UnifiedPolicyV2, UnifiedPolicyCapability, PolicyCredentialAdmissionV3 } from '@tinycloud/sdk-core';
-import { V as ValidatedRuntimeDelegation } from './delegation-0LKZkmP2.js';
+import { V as ValidatedRuntimeDelegation } from './delegation-Ckc3UETl.js';
 
 interface CredentialClient {
     readonly sessionDid: string;

package/dist/credentials.d.cts

@@ -1,4 +1,4 @@
 export { CredentialAcquisitionTheme, CredentialAcquisitionTransport, CredentialBrowserInteractionAdapter, CredentialClient, CredentialInlineInteractionAdapter, CredentialInputRequest, CredentialInteractionAdapter, CredentialInteractionKind, CredentialInteractionSurface, CredentialProofSubject, CredentialRedirectResumeState, CredentialRedirectStore, CredentialRequestState, CredentialSigningAdapter, CredentialsAcquireOptions, CredentialsEnsureOptions, CredentialsEnsureResult, CredentialsOperationOptions, CredentialsPolicyAdmissionOptions, CredentialsPolicyAdmissionResult, HolderSignatureKey, InlineCredentialProofHandler, InlineCredentialProofRequest, OpenCredentialsHttpTransport, PrimitiveStepHandler, PrimitiveStepResult, ReceiverCredentialCustody, interpretCredentialFlow, mailboxSubject } from './credentials-core.cjs';
 export { D as DEFAULT_EMAIL_PROOF_PROFILE, E as EMAIL_PROOF_CREDENTIAL_TYPE, a as EMAIL_PROOF_PENDING_MAX_MS, b as EmailProofAcquireInput, c as EmailProofAcquisition, d as EmailProofError, e as EmailProofErrorCode, f as EmailProofOptions, g as EmailProofPending, h as EmailProofPendingStore, i as EmailProofProfileId, j as EmailProofRequestInput, k as EmailProofResult, l as EmailProofStep, H as HolderAlgorithm, m as HolderSigner, S as StoredEmailProofInput, n as StoredEmailProofRecord, o as acquireEmailProof, p as completeEmailProof, q as createEd25519HolderSigner, r as createMemoryEmailProofPendingStore, s as emailProofRequirement, t as requestEmailProofCode, v as verifyStoredEmailProof } from './email-proof-GXXQhIff.cjs';
 import '@tinycloud/sdk-core';
-import './delegation-0LKZkmP2.cjs';
+import './delegation-Ckc3UETl.cjs';

package/dist/credentials.d.ts

@@ -1,4 +1,4 @@
 export { CredentialAcquisitionTheme, CredentialAcquisitionTransport, CredentialBrowserInteractionAdapter, CredentialClient, CredentialInlineInteractionAdapter, CredentialInputRequest, CredentialInteractionAdapter, CredentialInteractionKind, CredentialInteractionSurface, CredentialProofSubject, CredentialRedirectResumeState, CredentialRedirectStore, CredentialRequestState, CredentialSigningAdapter, CredentialsAcquireOptions, CredentialsEnsureOptions, CredentialsEnsureResult, CredentialsOperationOptions, CredentialsPolicyAdmissionOptions, CredentialsPolicyAdmissionResult, HolderSignatureKey, InlineCredentialProofHandler, InlineCredentialProofRequest, OpenCredentialsHttpTransport, PrimitiveStepHandler, PrimitiveStepResult, ReceiverCredentialCustody, interpretCredentialFlow, mailboxSubject } from './credentials-core.js';
 export { D as DEFAULT_EMAIL_PROOF_PROFILE, E as EMAIL_PROOF_CREDENTIAL_TYPE, a as EMAIL_PROOF_PENDING_MAX_MS, b as EmailProofAcquireInput, c as EmailProofAcquisition, d as EmailProofError, e as EmailProofErrorCode, f as EmailProofOptions, g as EmailProofPending, h as EmailProofPendingStore, i as EmailProofProfileId, j as EmailProofRequestInput, k as EmailProofResult, l as EmailProofStep, H as HolderAlgorithm, m as HolderSigner, S as StoredEmailProofInput, n as StoredEmailProofRecord, o as acquireEmailProof, p as completeEmailProof, q as createEd25519HolderSigner, r as createMemoryEmailProofPendingStore, s as emailProofRequirement, t as requestEmailProofCode, v as verifyStoredEmailProof } from './email-proof-GXXQhIff.js';
 import '@tinycloud/sdk-core';
-import './delegation-0LKZkmP2.js';
+import './delegation-Ckc3UETl.js';

package/dist/{delegation-0LKZkmP2.d.cts → delegation-Ckc3UETl.d.cts}

@@ -248,4 +248,4 @@ declare function serializeDelegation(delegation: PortableDelegation): string;
  */
 declare function deserializeDelegation(data: string): PortableDelegation;
 
-export { type AuthDelegationArtifact as A, type CompactRuntimeDelegationInput as C, type DelegationAuthority as D, type PortableDelegation as P, RUNTIME_DELEGATION_REJECTIONS as R, type SessionGrantProof as S, type ValidatedRuntimeDelegation as V, activateCompactRuntimeDelegation as a, type AuthRequestArtifact as b, type RuntimeDelegationActivator as c, deserializeDelegation as d, RuntimeDelegationRejectedError as e, type RuntimeDelegationRejection as f, type VerifiedSessionGrant as g, activateValidatedRuntimeDelegation as h, grantAuthRequest as i, signedCompactUcanExpiry as j, siweRuntimeDelegation as k, serializeDelegation as s };
+export { type AuthDelegationArtifact as A, type CompactRuntimeDelegationInput as C, type DelegationAuthority as D, type PortableDelegation as P, RuntimeDelegationRejectedError as R, type SessionGrantProof as S, type ValidatedRuntimeDelegation as V, type RuntimeDelegationRejection as a, activateCompactRuntimeDelegation as b, activateValidatedRuntimeDelegation as c, deserializeDelegation as d, type AuthRequestArtifact as e, RUNTIME_DELEGATION_REJECTIONS as f, type RuntimeDelegationActivator as g, type VerifiedSessionGrant as h, grantAuthRequest as i, signedCompactUcanExpiry as j, siweRuntimeDelegation as k, serializeDelegation as s };

package/dist/{delegation-0LKZkmP2.d.ts → delegation-Ckc3UETl.d.ts}

@@ -248,4 +248,4 @@ declare function serializeDelegation(delegation: PortableDelegation): string;
  */
 declare function deserializeDelegation(data: string): PortableDelegation;
 
-export { type AuthDelegationArtifact as A, type CompactRuntimeDelegationInput as C, type DelegationAuthority as D, type PortableDelegation as P, RUNTIME_DELEGATION_REJECTIONS as R, type SessionGrantProof as S, type ValidatedRuntimeDelegation as V, activateCompactRuntimeDelegation as a, type AuthRequestArtifact as b, type RuntimeDelegationActivator as c, deserializeDelegation as d, RuntimeDelegationRejectedError as e, type RuntimeDelegationRejection as f, type VerifiedSessionGrant as g, activateValidatedRuntimeDelegation as h, grantAuthRequest as i, signedCompactUcanExpiry as j, siweRuntimeDelegation as k, serializeDelegation as s };
+export { type AuthDelegationArtifact as A, type CompactRuntimeDelegationInput as C, type DelegationAuthority as D, type PortableDelegation as P, RuntimeDelegationRejectedError as R, type SessionGrantProof as S, type ValidatedRuntimeDelegation as V, type RuntimeDelegationRejection as a, activateCompactRuntimeDelegation as b, activateValidatedRuntimeDelegation as c, deserializeDelegation as d, type AuthRequestArtifact as e, RUNTIME_DELEGATION_REJECTIONS as f, type RuntimeDelegationActivator as g, type VerifiedSessionGrant as h, grantAuthRequest as i, signedCompactUcanExpiry as j, siweRuntimeDelegation as k, serializeDelegation as s };

package/dist/encryption-keys.d.cts

@@ -1,11 +1,11 @@
 import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
 export { DecryptManyResult, KeyCallOptions, KeyDescriptor, KeyEncryptOptions, NamedKeyClient, NamedKeyEnvelope, NamedKeyError, NamedKeyErrorCode, PublicKeyDescriptor, buildKeyAdminFacts, buildKeyDescribeFacts } from '@tinycloud/sdk-services/encryption/named-keys';
-import { T as TinyCloudNode } from './TinyCloudNode-C0LgPzzJ.cjs';
+import { T as TinyCloudNode } from './TinyCloudNode-BhWBbCay.cjs';
 import '@tinycloud/sdk-core';
 import '@tinycloud/sdk-services/kv/replication';
 import '@tinycloud/sdk-services';
 import 'events';
-import './delegation-0LKZkmP2.cjs';
+import './delegation-Ckc3UETl.cjs';
 
 /**
  * Named encryption keys for a signed-in {@link TinyCloudNode}.

package/dist/encryption-keys.d.ts

@@ -1,11 +1,11 @@
 import { NamedKeyClient } from '@tinycloud/sdk-services/encryption/named-keys';
 export { DecryptManyResult, KeyCallOptions, KeyDescriptor, KeyEncryptOptions, NamedKeyClient, NamedKeyEnvelope, NamedKeyError, NamedKeyErrorCode, PublicKeyDescriptor, buildKeyAdminFacts, buildKeyDescribeFacts } from '@tinycloud/sdk-services/encryption/named-keys';
-import { T as TinyCloudNode } from './TinyCloudNode-jPL2UqH5.js';
+import { T as TinyCloudNode } from './TinyCloudNode-BjJJIifr.js';
 import '@tinycloud/sdk-core';
 import '@tinycloud/sdk-services/kv/replication';
 import '@tinycloud/sdk-services';
 import 'events';
-import './delegation-0LKZkmP2.js';
+import './delegation-Ckc3UETl.js';
 
 /**
  * Named encryption keys for a signed-in {@link TinyCloudNode}.

package/dist/index.cjs

@@ -17968,6 +17968,7 @@ __export(src_exports, {
   hexDecode: () => import_sdk_core22.hexDecode,
   hexEncode: () => import_sdk_core22.hexEncode,
   installTinyCloudDebugGlobals: () => import_sdk_core16.installTinyCloudDebugGlobals,
+  isAppKeyHostBound: () => isAppKeyHostBound,
   isCapabilitySubset: () => import_sdk_core17.isCapabilitySubset,
   isEvmAddress: () => import_sdk_core16.isEvmAddress,
   isNetworkId: () => import_sdk_core22.isNetworkId,
@@ -18813,6 +18814,7 @@ function deserializeDelegation(data) {
 
 // src/TinyCloudNode.ts
 var import_siwe2 = require("siwe");
+var import_share_envelope = require("@tinycloud/share-envelope");
 
 // src/replication/module-registry.ts
 var nodeLoaders;
@@ -18862,6 +18864,18 @@ function appKeyHostBinding(domain, appId) {
   const reversed = labels.reverse().join(".");
   return appId === reversed || appId.startsWith(`${reversed}.`);
 }
+function isAppKeyHostBound(keysAppId, origin) {
+  if (typeof origin === "string" && !origin.includes("://")) {
+    return appKeyHostBinding(origin, keysAppId);
+  }
+  let url;
+  try {
+    url = typeof origin === "string" ? new URL(origin) : origin;
+  } catch {
+    return false;
+  }
+  return appKeyHostBinding(url.host, keysAppId);
+}
 
 // src/authorization/NodeUserAuthorization.ts
 init_authority_sign_in();
@@ -19019,6 +19033,7 @@ function cloneAbilitiesMap(actions) {
 var NodeUserAuthorization = class {
   constructor(config) {
     this.activeSessionKeyId = "default";
+    this.preparedSessionCounter = 0;
     /** Incremented by resetSession; a sign-in started earlier publishes nothing. */
     this.sessionGeneration = 0;
     /**
@@ -19601,7 +19616,8 @@ var NodeUserAuthorization = class {
         return true;
       }
       const parsed = entry.path.includes("/") ? (0, import_resource.parseEncryptionResource)(entry.path) : { ...(0, import_sdk_services3.parseNetworkId)(entry.path), kind: "network" };
-      if (parsed.kind !== "network") {
+      const sharePrefix = parsed.kind === "prefix" && parsed.network === "default" && parsed.prefix === "share" && entry.actions.length === 1 && entry.actions[0] === DECRYPT_ACTION && didPrincipalMatches(parsed.ownerDid, currentDid);
+      if (parsed.kind !== "network" && !sharePrefix) {
         throw new import_sdk_core5.ManifestValidationError("named keys go in manifest.keys");
       }
       for (const action of entry.actions) {
@@ -19644,8 +19660,7 @@ var NodeUserAuthorization = class {
   /**
    * Build SIWE overrides from the top-level nonce and siweConfig.
    * - Top-level `nonce` is seeded first so `siweConfig.nonce` wins if both are set.
-   * - statement is prepended to the default statement
-   * - resources are appended to the default resources
+   * - resources are inserted after WASM preparation, before the final ReCap
    * - uri triggers a warning (overwriting delegation target)
    * - all other fields override directly
    * - per-call nonce overrides siweConfig.nonce when provided
@@ -19663,9 +19678,6 @@ var NodeUserAuthorization = class {
     if (statement) {
       overrides.statement = this.statement ? `${statement} ${this.statement}` : statement;
     }
-    if (resources && resources.length > 0) {
-      overrides.resources = resources;
-    }
     if (uri) {
       console.warn(
         "[tinycloud] siweConfig.uri is overwriting the delegation target URI. This may break delegation chain validation if the URI does not match the session key DID."
@@ -19677,6 +19689,29 @@ var NodeUserAuthorization = class {
     }
     return overrides;
   }
+  prepareSessionWithResources(params) {
+    const resources = this.siweConfig?.resources;
+    if (resources?.some((resource) => typeof resource !== "string" || !/^urn:tinycloud:recipients:[A-Za-z0-9_-]+$/.test(resource))) {
+      throw new Error("SIWE metadata resources must be base64url recipients URIs");
+    }
+    const prepared = this.wasm.prepareSession(params);
+    if (!resources?.length) return prepared;
+    const recapLines = /^- urn:recap:[^\r\n]+$/gim;
+    const recaps = prepared.siwe.match(recapLines);
+    const recap = recaps?.[0];
+    if (recaps?.length !== 1 || !prepared.siwe.endsWith(recap)) {
+      throw new Error("Prepared SIWE must end with exactly one ReCap");
+    }
+    const insertedLines = resources.map((resource) => `- ${resource}`);
+    const siwe = prepared.siwe.slice(0, -recap.length) + insertedLines.join("\n") + "\n" + recap;
+    const expectedFields = (0, import_sdk_core5.extractImmutableSiweFields)(prepared.siwe);
+    expectedFields.nonRecapResources = [expectedFields.nonRecapResources, ...insertedLines].filter(Boolean).join("\n");
+    const actualRecaps = siwe.match(recapLines);
+    if (actualRecaps?.length !== 1 || actualRecaps[0] !== recap || (0, import_sdk_core5.diffImmutableSiweFields)(expectedFields, (0, import_sdk_core5.extractImmutableSiweFields)(siwe)).length) {
+      throw new Error("SIWE metadata insertion changed the prepared message");
+    }
+    return { ...prepared, siwe };
+  }
   /**
    * Add an extension to the authorization flow.
    */
@@ -19924,7 +19959,7 @@ var NodeUserAuthorization = class {
       spaceAbilities[spaceId] = (0, import_sdk_core5.resourceCapabilitiesToAbilitiesMap)(resources);
     }
     const abilities = spaceAbilities[options.spaceId] ?? (0, import_sdk_core5.resourceCapabilitiesToAbilitiesMap)([]);
-    const prepared = this.wasm.prepareSession({
+    const prepared = this.prepareSessionWithResources({
       abilities,
       spaceAbilities,
       ...options.rawAbilities !== void 0 ? { rawAbilities: options.rawAbilities } : {},
@@ -20005,8 +20040,8 @@ var NodeUserAuthorization = class {
     this.assertSignInCurrent(generation);
     await this.refreshNamedKeyFeatureForSignIn(address, chainId);
     this.assertSignInCurrent(generation);
-    const keyId = `session-${Date.now()}`;
-    this.sessionManager.renameSessionKeyId(this.activeSessionKeyId, keyId);
+    const keyId = `session-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    this.sessionManager.createSessionKey(keyId);
     this.activeSessionKeyId = keyId;
     const jwkString = this.sessionManager.jwk(keyId);
     if (!jwkString) {
@@ -20017,7 +20052,7 @@ var NodeUserAuthorization = class {
     const spaceId = capabilityPlan.spaceId;
     const now = /* @__PURE__ */ new Date();
     const expirationTime = new Date(now.getTime() + this.sessionExpirationMs);
-    const prepared = this.wasm.prepareSession({
+    const prepared = this.prepareSessionWithResources({
       abilities: capabilityPlan.abilities,
       ...capabilityPlan.spaceAbilities !== void 0 ? { spaceAbilities: capabilityPlan.spaceAbilities } : {},
       ...capabilityPlan.rawAbilities !== void 0 ? { rawAbilities: capabilityPlan.rawAbilities } : {},
@@ -20152,9 +20187,8 @@ var NodeUserAuthorization = class {
     const address = (0, import_sdk_core5.canonicalizeAddress)(await this.signer.getAddress());
     const chainId = await this.signer.getChainId();
     await this.refreshNamedKeyFeatureForSignIn(address, chainId);
-    const keyId = `session-${Date.now()}`;
-    this.sessionManager.renameSessionKeyId(this.activeSessionKeyId, keyId);
-    this.activeSessionKeyId = keyId;
+    const keyId = `openkey-session-${Date.now()}-${++this.preparedSessionCounter}`;
+    this.sessionManager.createSessionKey(keyId);
     const jwkString = this.sessionManager.jwk(keyId);
     if (!jwkString) {
       throw new Error("Failed to create session key");
@@ -20164,7 +20198,7 @@ var NodeUserAuthorization = class {
     const spaceId = capabilityPlan.spaceId;
     const now = /* @__PURE__ */ new Date();
     const expirationTime = new Date(now.getTime() + this.sessionExpirationMs);
-    const prepared = this.wasm.prepareSession({
+    const prepared = this.prepareSessionWithResources({
       abilities: capabilityPlan.abilities,
       ...capabilityPlan.spaceAbilities !== void 0 ? { spaceAbilities: capabilityPlan.spaceAbilities } : {},
       ...capabilityPlan.rawAbilities !== void 0 ? { rawAbilities: capabilityPlan.rawAbilities } : {},
@@ -20235,6 +20269,7 @@ var NodeUserAuthorization = class {
     await this.sessionStorage.save(address, persistedData);
     this._session = clientSession;
     this._tinyCloudSession = tinyCloudSession;
+    this.activeSessionKeyId = keyId;
     this._address = address;
     this._chainId = chainId;
     await this.refreshNodeInfo();
@@ -20281,6 +20316,11 @@ var NodeUserAuthorization = class {
    * @param options Optional overrides for the OpenKey request.
    */
   async signInWithOpenKey(authorizeFn, options) {
+    const pending = await this.prepareOpenKeySignIn(options);
+    return this.completeOpenKeySignIn(pending, authorizeFn(pending.request), options);
+  }
+  /** Finish address, host and SIWE preparation before an approval click. */
+  async prepareOpenKeySignIn(options) {
     refuseCaveated(this.getCapabilityRequest()?.manifests);
     if (options?.host !== void 0) {
       const overrideHost = options.host.trim();
@@ -20292,7 +20332,7 @@ var NodeUserAuthorization = class {
     const signingAddress = (0, import_sdk_core5.canonicalizeAddress)(await this.signer.getAddress());
     const signingChainId = await this.signer.getChainId();
     await this.resolveTinyCloudHostsForSignIn(signingAddress, signingChainId);
-    const { prepared, keyId, jwk } = await this.prepareSessionForSigning();
+    const { prepared, keyId, jwk, address, chainId } = await this.prepareSessionForSigning();
     const presentation = this.buildPresentationEnvelope(options?.reason);
     const hostHint = this.primaryTinyCloudHost;
     const originalRequest = {
@@ -20304,12 +20344,32 @@ var NodeUserAuthorization = class {
       keyId: options?.openkeyKeyId,
       presentation
     };
+    return {
+      request: originalRequest,
+      prepared,
+      keyId,
+      jwk,
+      address,
+      chainId,
+      generation: this.sessionGeneration,
+      createdAt: Date.now()
+    };
+  }
+  /** Complete a prepared approval. The caller starts authorization before awaiting this method. */
+  async completeOpenKeySignIn(pending, authorization, options) {
+    if (Date.now() - pending.createdAt > 5 * 6e4) {
+      throw new Error("Prepared OpenKey sign-in expired; prepare again");
+    }
+    if (pending.generation !== this.sessionGeneration) {
+      throw new Error("Prepared OpenKey sign-in expired after sign-out");
+    }
+    const { request: originalRequest, prepared, keyId, jwk } = pending;
     let result;
     let signed2;
     let signature2;
     for (let attempt = 0; ; ) {
       try {
-        result ?? (result = await authorizeFn(originalRequest));
+        result ?? (result = await authorization);
         signed2 = await this.verifyOpenKeyResult(result, prepared);
         signature2 = result.signature;
         break;
@@ -21703,6 +21763,7 @@ var _TinyCloudNode = class _TinyCloudNode {
   constructor(config = {}) {
     this.signer = null;
     this.auth = null;
+    this.consumedOpenKeyPendings = /* @__PURE__ */ new WeakSet();
     this.tc = null;
     this._chainId = 1;
     this.replicaPurgeFailedHandlers = /* @__PURE__ */ new Set();
@@ -22643,6 +22704,37 @@ var _TinyCloudNode = class _TinyCloudNode {
     }
     await this.signInWith(() => this.auth.signInWithOpenKey(authorizeFn, options));
   }
+  /** Prepare the OpenKey request before the approval click. */
+  async prepareOpenKeySignIn() {
+    if (!this.signer || !this.tc || !this.auth) {
+      throw new Error("Cannot prepare OpenKey sign-in in session-only mode. Provide a signer in config.");
+    }
+    await this.signOutInFlight;
+    await this.accountRegistryTail;
+    await this.wasmBindings.ensureInitialized?.();
+    return this.auth.prepareOpenKeySignIn();
+  }
+  /** Start OpenKey authorization synchronously, then complete normal session setup. */
+  signInWithPreparedOpenKey(pending, authorizeFn) {
+    if (!this.signer || !this.tc || !this.auth || this.signOutInFlight) {
+      throw new Error("Prepared OpenKey sign-in is unavailable");
+    }
+    if (this.consumedOpenKeyPendings.has(pending)) {
+      throw new Error("Prepared OpenKey sign-in was already used");
+    }
+    if (Date.now() - pending.createdAt > 5 * 6e4) {
+      throw new Error("Prepared OpenKey sign-in expired; prepare again");
+    }
+    this.consumedOpenKeyPendings.add(pending);
+    const authorization = authorizeFn(pending.request);
+    void authorization.catch(() => void 0);
+    return this.signInWith(() => {
+      if (this._address !== pending.address || this._chainId !== pending.chainId) {
+        throw new Error("OpenKey account changed after sign-in preparation");
+      }
+      return this.auth.completeOpenKeySignIn(pending, authorization);
+    });
+  }
   async signInWith(performSignIn) {
     refuseCaveated(this.auth?.capabilityRequest?.manifests);
     const epoch = this.sessionEpoch;
@@ -24284,6 +24376,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       invoke: graph.invoke,
       invokeAny: graph.invokeAny,
       signOwnerRevocation: this.signer ? (cid) => this.signOwnerRevocation(cid) : void 0,
+      sessionInvocationSigner: this.sessionInvocationSignerFor(input.serviceSession),
       fetch: graph.fetch
     });
     const keyProvider = new WasmKeyProvider({ sessionManager: input.manager });
@@ -24499,6 +24592,31 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (session === void 0) throw new Error("Not signed in. Call signIn() first.");
     return signBytesWithJwk(bytes, session.jwk);
   }
+  /**
+   * Signs proofless invocations with `session`'s own did:key, for the node's
+   * issued-delegation list and revocation by the delegator. The audience is
+   * this Node's DID; each invocation lives 60 seconds.
+   */
+  sessionInvocationSignerFor(session) {
+    return {
+      did: () => session.verificationMethod.split("#", 1)[0],
+      sign: async (attenuation) => {
+        const now = Math.floor(Date.now() / 1e3);
+        const invocation = await (0, import_sdk_core10.signCompactUcanAuthorization)({
+          issuerDid: session.verificationMethod.split("#", 1)[0],
+          audienceDid: await this.fetchNodeId(),
+          attenuation,
+          facts: [{}],
+          proofs: [],
+          notBefore: now,
+          expiresAt: now + 60,
+          nonce: `urn:uuid:${crypto.randomUUID()}`,
+          sign: (bytes) => signBytesWithJwk(bytes, session.jwk)
+        });
+        return invocation.authorization;
+      }
+    };
+  }
   /** Author a proofless Policy/v3 owner root with the authenticated holder key. */
   async createUnifiedOwnerRoot(input) {
     const ownerDid = this.credentialHolderDid;
@@ -25033,7 +25151,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           graph.assertActive();
           const signed2 = await this.signRawNetworkAuthorization({
             targetNode: input.targetNode,
-            networkId: input.networkId,
+            networkId: input.body.keyPath === void 0 ? input.networkId : `${input.networkId}/${input.body.keyPath}`,
             action: DECRYPT_ACTION2,
             facts: input.facts
           }, { graph, session });
@@ -25206,6 +25324,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       invoke: graph.invoke,
       invokeAny: graph.invokeAny,
       signOwnerRevocation: this.signer ? (cid) => this.signOwnerRevocation(cid) : void 0,
+      sessionInvocationSigner: this.sessionInvocationSignerFor(serviceSession),
       fetch: graph.fetch
     });
     this._spaceService = new import_sdk_core10.SpaceService({
@@ -25989,7 +26108,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (!session || !Array.isArray(permissions) || permissions.length === 0) {
       return false;
     }
-    const expanded = this.expandPermissionEntries(permissions);
+    const expanded = (0, import_sdk_core10.expandRuntimePermissionEntries)(permissions, (0, import_sdk_core10.pkhDid)(session.address, session.chainId));
     if (this.sessionCoversPermissionEntries(session, expanded)) {
       return true;
     }
@@ -26009,7 +26128,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (!session || !Array.isArray(permissions) || permissions.length === 0) {
       return [];
     }
-    const expanded = this.expandPermissionEntries(permissions);
+    const expanded = (0, import_sdk_core10.expandRuntimePermissionEntries)(permissions, (0, import_sdk_core10.pkhDid)(session.address, session.chainId));
     return this.findRuntimeGrantsForPermissionEntries(expanded, session).map(
       (grant) => grant.delegation
     );
@@ -26184,7 +26303,28 @@ var _TinyCloudNode = class _TinyCloudNode {
         throw new import_sdk_core10.SessionExpiredError(sessionExpiry);
       }
     }
-    const expanded = this.expandPermissionEntries(permissions);
+    const expanded = (0, import_sdk_core10.expandRuntimePermissionEntries)(permissions, (0, import_sdk_core10.pkhDid)(session.address, session.chainId));
+    const bindsShareKey = expanded.some((entry) => entry.service === import_sdk_core10.ENCRYPTION_PERMISSION_SERVICE && entry.actions.includes("tinycloud.encryption/key.create"));
+    const captured = bindsShareKey ? { ...session, jwk: { ...options?.expectedSessionKey ?? session.jwk } } : session;
+    const assertCapturedKey = bindsShareKey ? () => {
+      const live = session.jwk;
+      const key2 = captured.jwk;
+      if (this.currentTinyCloudSession() !== session || session.verificationMethod !== captured.verificationMethod || session.delegationCid !== captured.delegationCid || session.spaceId !== captured.spaceId || session.address !== captured.address || session.chainId !== captured.chainId || live?.kty !== key2.kty || live?.crv !== key2.crv || live?.x !== key2.x || live?.y !== key2.y || live?.d !== key2.d) {
+        throw new Error("Runtime permission request cancelled because the session key changed.");
+      }
+    } : void 0;
+    const sessionKeyDid = bindsShareKey ? this.sessionDid : void 0;
+    if (bindsShareKey) {
+      const key2 = captured.jwk;
+      if (key2.kty !== "OKP" || key2.crv !== "Ed25519" || typeof key2.x !== "string") {
+        throw new Error("Runtime permission session key does not match its signed identity.");
+      }
+      const keyDid = (0, import_share_envelope.didKeyFromEd25519PublicKey)(base64UrlDecode(key2.x));
+      if (!didPrincipalMatches2(keyDid, sessionKeyDid) || !didPrincipalMatches2(keyDid, captured.verificationMethod) || !didPrincipalMatches2(keyDid, new import_siwe2.SiweMessage(session.siwe).uri)) {
+        throw new Error("Runtime permission session key does not match its signed identity.");
+      }
+      assertCapturedKey();
+    }
     if (this.sessionCoversPermissionEntries(session, expanded)) {
       return [];
     }
@@ -26192,7 +26332,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (existingGrants.length > 0) {
       return existingGrants.map((grant) => grant.delegation);
     }
-    if (!this.signer) {
+    if (!this.signer && options?.signMessage === void 0) {
       throw new Error(
         "grantRuntimePermissions requires wallet mode with a signer or privateKey."
       );
@@ -26234,13 +26374,13 @@ var _TinyCloudNode = class _TinyCloudNode {
           return this.wasmBindings.prepareSession({
             abilities,
             ...rawForDelegation.length > 0 ? { rawAbilities: this.permissionsToRawAbilities(rawForDelegation) } : {},
-            address: this.wasmBindings.ensureEip55(session.address),
-            chainId: session.chainId,
+            address: this.wasmBindings.ensureEip55(captured.address),
+            chainId: captured.chainId,
             domain: this.siweDomain,
             issuedAt: now.toISOString(),
             expirationTime: expiresAt.toISOString(),
             spaceId,
-            jwk: session.jwk
+            jwk: captured.jwk
           });
         } catch (error) {
           if (rawForDelegation.some((entry) => this.isRawRevocationPermissionEntry(entry)) && /invalid ReCap resource URI/i.test(error instanceof Error ? error.message : String(error))) {
@@ -26252,8 +26392,19 @@ var _TinyCloudNode = class _TinyCloudNode {
           throw error;
         }
       })();
-      const signature2 = await this.signer.signMessage(prepared.siwe);
+      if (bindsShareKey && !didPrincipalMatches2(new import_siwe2.SiweMessage(prepared.siwe).uri, sessionKeyDid)) {
+        throw new Error("Prepared runtime permission targets a different session key.");
+      }
+      assertCapturedKey?.();
+      if (options?.signMessage !== void 0) {
+        this.assertRuntimeGrantMessage(prepared.siwe, session);
+      }
+      const signature2 = options?.signMessage !== void 0 ? await options.signMessage(prepared.siwe) : await this.signer.signMessage(prepared.siwe);
+      if (options?.signMessage !== void 0 && !await (0, import_sdk_core10.verifyEip191MessageSignature)(prepared.siwe, signature2, session.address)) {
+        throw new Error("The signature does not match the account that owns this session.");
+      }
       graph.assertActive();
+      assertCapturedKey?.();
       const delegatedSession = this.wasmBindings.completeSessionSetup({
         ...prepared,
         signature: signature2
@@ -26282,18 +26433,19 @@ var _TinyCloudNode = class _TinyCloudNode {
         delegatedSession,
         delegatedEntries,
         spaceId,
-        session,
+        captured,
         expiresAt,
         { siwe: prepared.siwe, signature: signature2 }
       );
       graph.assertActive();
+      assertCapturedKey?.();
       this.runtimePermissionGrants.push({
         session: {
           delegationHeader: delegatedSession.delegationHeader,
           delegationCid: delegatedSession.delegationCid,
           spaceId,
-          verificationMethod: session.verificationMethod,
-          jwk: session.jwk
+          verificationMethod: captured.verificationMethod,
+          jwk: captured.jwk
         },
         delegation,
         operations: this.permissionOperations(delegatedEntries, spaceId),
@@ -26622,7 +26774,19 @@ var _TinyCloudNode = class _TinyCloudNode {
         "delegateTo requires a non-empty permissions array"
       );
     }
-    const expandedEntries = this.expandPermissionEntries(permissions);
+    const expandedEntries = (0, import_sdk_core10.expandDelegationPermissionEntries)(permissions);
+    const namedKeyEntries = expandedEntries.filter((entry) => entry.service === import_sdk_core10.ENCRYPTION_PERMISSION_SERVICE && entry.path.includes("/"));
+    if (namedKeyEntries.length > 0) {
+      if (expandedEntries.some((entry) => entry.service === import_sdk_core10.ENCRYPTION_PERMISSION_SERVICE && !entry.path.includes("/"))) {
+        throw new import_sdk_core10.ManifestValidationError("named-key delegation cannot include bare-network permissions");
+      }
+      if (options?.forceWalletSign) {
+        throw new import_sdk_core10.ManifestValidationError("named-key delegation requires a signed session grant");
+      }
+      const granted = this.projectSignedRecapCapabilities(session.siwe);
+      const { subset, missing } = this.signedCapabilitySubset(namedKeyEntries, granted);
+      if (!subset) throw new import_sdk_core10.PermissionNotInManifestError(missing, granted);
+    }
     const now = /* @__PURE__ */ new Date();
     const expiryMs = resolveExpiryMs(options?.expiry);
     const expirationTime = new Date(now.getTime() + expiryMs);
@@ -27056,6 +27220,25 @@ var _TinyCloudNode = class _TinyCloudNode {
   expandPermissionEntries(permissions) {
     return (0, import_sdk_core10.expandPermissionEntries)(permissions);
   }
+  /**
+   * Checks the SIWE text a caller-supplied signer is asked to sign: it must be in canonical form (parsing and
+   * re-serializing it gives the same bytes) and name the session's account and chain. The caller then checks the
+   * signature against these exact bytes.
+   */
+  assertRuntimeGrantMessage(siwe, session) {
+    let parsed;
+    try {
+      parsed = new import_siwe2.SiweMessage(siwe);
+    } catch {
+      throw new Error("The prepared sign-in message is not a valid SIWE message.");
+    }
+    if (parsed.prepareMessage() !== siwe) {
+      throw new Error("The prepared sign-in message is not in canonical form.");
+    }
+    if (parsed.chainId !== session.chainId || (0, import_sdk_core10.canonicalizeAddress)(parsed.address) !== (0, import_sdk_core10.canonicalizeAddress)(session.address)) {
+      throw new Error("The prepared sign-in message is for a different account or chain than this session.");
+    }
+  }
   /**
    * The current WASM child-delegation APIs accept action-only maps. Refuse any
    * constrained branch rather than signing a broader action-only child UCAN.
@@ -28141,7 +28324,7 @@ var FileSessionStorage = class {
 };
 
 // src/authorization/openKeyBridge.ts
-function wireOpenKeyAuthorize(openkey) {
+function wireOpenKeyAuthorize(openkey, opts) {
   return async (input) => {
     const result = await openkey.authorizeTinyCloud({
       protocolVersion: 1,
@@ -28152,7 +28335,7 @@ function wireOpenKeyAuthorize(openkey) {
       // Forward the presentation envelope verbatim — the OpenKey SDK
       // validates and size-bounds it before use.
       presentation: input.presentation
-    });
+    }, opts);
     if (result.protocolVersion !== 1) {
       throw new Error(
         `wireOpenKeyAuthorize: OpenKey returned unsupported protocolVersion ${result.protocolVersion}`
@@ -30846,6 +31029,7 @@ function sqliteReplicaStorage(options) {
   hexDecode,
   hexEncode,
   installTinyCloudDebugGlobals,
+  isAppKeyHostBound,
   isCapabilitySubset,
   isEvmAddress,
   isNetworkId,