@tinycloud/node-sdk 3.8.0 → 3.8.1-beta.1

package/dist/{TinyCloudNode-DaD5vJhL.d.cts → TinyCloudNode-BhWBbCay.d.cts}

@@ -1191,6 +1191,12 @@ interface DelegateToResult {
 interface RuntimePermissionGrantOptions {
     /** Override expiry. ms-format string ("7d", "1h") or raw milliseconds. */
     expiry?: string | number;
+    /**
+     * Signs the prepared SIWE and returns the EIP-191 signature, in place of the connected signer's `signMessage`.
+     * For a session whose wallet provider does not sign (an OpenKey session). The signature must recover to the
+     * session's address.
+     */
+    signMessage?: (siwe: string) => Promise<string>;
     /** In-memory key snapshot captured when exact Share-key consent opened. */
     expectedSessionKey?: Readonly<TinyCloudSession["jwk"]>;
 }
@@ -2560,6 +2566,12 @@ declare class TinyCloudNode {
     private createDelegationViaRuntimeGrant;
     private resolvePermissionSpace;
     private expandPermissionEntries;
+    /**
+     * Checks the SIWE text a caller-supplied signer is asked to sign: it must be in canonical form (parsing and
+     * re-serializing it gives the same bytes) and name the session's account and chain. The caller then checks the
+     * signature against these exact bytes.
+     */
+    private assertRuntimeGrantMessage;
     /**
      * The current WASM child-delegation APIs accept action-only maps. Refuse any
      * constrained branch rather than signing a broader action-only child UCAN.

package/dist/{TinyCloudNode-k3TbBwwj.d.ts → TinyCloudNode-BjJJIifr.d.ts}

@@ -1191,6 +1191,12 @@ interface DelegateToResult {
 interface RuntimePermissionGrantOptions {
     /** Override expiry. ms-format string ("7d", "1h") or raw milliseconds. */
     expiry?: string | number;
+    /**
+     * Signs the prepared SIWE and returns the EIP-191 signature, in place of the connected signer's `signMessage`.
+     * For a session whose wallet provider does not sign (an OpenKey session). The signature must recover to the
+     * session's address.
+     */
+    signMessage?: (siwe: string) => Promise<string>;
     /** In-memory key snapshot captured when exact Share-key consent opened. */
     expectedSessionKey?: Readonly<TinyCloudSession["jwk"]>;
 }
@@ -2560,6 +2566,12 @@ declare class TinyCloudNode {
     private createDelegationViaRuntimeGrant;
     private resolvePermissionSpace;
     private expandPermissionEntries;
+    /**
+     * Checks the SIWE text a caller-supplied signer is asked to sign: it must be in canonical form (parsing and
+     * re-serializing it gives the same bytes) and name the session's account and chain. The caller then checks the
+     * signature against these exact bytes.
+     */
+    private assertRuntimeGrantMessage;
     /**
      * The current WASM child-delegation APIs accept action-only maps. Refuse any
      * constrained branch rather than signing a broader action-only child UCAN.

package/dist/{authority-C_fWaxAu.d.ts → authority-BzqKNzOr.d.ts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-k3TbBwwj.js';
+import { T as TinyCloudNode } from './TinyCloudNode-BjJJIifr.js';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {

package/dist/{authority-DJdbZM6k.d.cts → authority-WCJA3phs.d.cts}

@@ -1,7 +1,7 @@
 import { ReplicationOptions, PermissionEntry, TinyCloudSession, KVReplicaStorage, ServiceContext, IWasmBindings, WasmRecapEntry } from '@tinycloud/sdk-core';
 import { ReplicaConsentAnchor, AuthorityRefusal, ReplicationAuthority } from '@tinycloud/sdk-services';
 import { ReplicaLocalEraseOutcome, ReplicaPurgeLocalCopyResult, ReplicaPurgeTrigger, ReplicaPurgeFailedEvent, ReplicaSessionStamp, ReplicaDenyInput } from '@tinycloud/sdk-services/kv/replication';
-import { T as TinyCloudNode } from './TinyCloudNode-DaD5vJhL.cjs';
+import { T as TinyCloudNode } from './TinyCloudNode-BhWBbCay.cjs';
 
 /** Constructor-time validation; the space-dependent secrets check runs at sign-in and open. */
 declare function assertValidReplicationConfig(replication: (ReplicationOptions & {

package/dist/core.cjs

@@ -8508,7 +8508,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (existingGrants.length > 0) {
       return existingGrants.map((grant) => grant.delegation);
     }
-    if (!this.signer) {
+    if (!this.signer && options?.signMessage === void 0) {
       throw new Error(
         "grantRuntimePermissions requires wallet mode with a signer or privateKey."
       );
@@ -8572,7 +8572,13 @@ var _TinyCloudNode = class _TinyCloudNode {
         throw new Error("Prepared runtime permission targets a different session key.");
       }
       assertCapturedKey?.();
-      const signature = await this.signer.signMessage(prepared.siwe);
+      if (options?.signMessage !== void 0) {
+        this.assertRuntimeGrantMessage(prepared.siwe, session);
+      }
+      const signature = options?.signMessage !== void 0 ? await options.signMessage(prepared.siwe) : await this.signer.signMessage(prepared.siwe);
+      if (options?.signMessage !== void 0 && !await (0, import_sdk_core11.verifyEip191MessageSignature)(prepared.siwe, signature, session.address)) {
+        throw new Error("The signature does not match the account that owns this session.");
+      }
       graph.assertActive();
       assertCapturedKey?.();
       const delegatedSession = this.wasmBindings.completeSessionSetup({
@@ -9390,6 +9396,25 @@ var _TinyCloudNode = class _TinyCloudNode {
   expandPermissionEntries(permissions) {
     return (0, import_sdk_core11.expandPermissionEntries)(permissions);
   }
+  /**
+   * Checks the SIWE text a caller-supplied signer is asked to sign: it must be in canonical form (parsing and
+   * re-serializing it gives the same bytes) and name the session's account and chain. The caller then checks the
+   * signature against these exact bytes.
+   */
+  assertRuntimeGrantMessage(siwe, session) {
+    let parsed;
+    try {
+      parsed = new import_siwe2.SiweMessage(siwe);
+    } catch {
+      throw new Error("The prepared sign-in message is not a valid SIWE message.");
+    }
+    if (parsed.prepareMessage() !== siwe) {
+      throw new Error("The prepared sign-in message is not in canonical form.");
+    }
+    if (parsed.chainId !== session.chainId || (0, import_sdk_core11.canonicalizeAddress)(parsed.address) !== (0, import_sdk_core11.canonicalizeAddress)(session.address)) {
+      throw new Error("The prepared sign-in message is for a different account or chain than this session.");
+    }
+  }
   /**
    * The current WASM child-delegation APIs accept action-only maps. Refuse any
    * constrained branch rather than signing a broader action-only child UCAN.