@tinycloud/operations 0.3.4-beta.6 → 0.4.0-beta.7

package/dist/authority-ofwbEqmj.d.cts

@@ -0,0 +1,30 @@
+import { PermissionEntry } from '@tinycloud/sdk-core';
+
+/**
+ * A capability in the canonical form persisted in a v1 request artifact.
+ *
+ * The SDK remains the semantic authority for containment. This module only
+ * establishes deterministic exact identity for persistence and display.
+ */
+type CanonicalPermissionEntry = Readonly<PermissionEntry>;
+interface AuthorityEvaluation {
+    readonly satisfied: boolean;
+    readonly missing: readonly CanonicalPermissionEntry[];
+}
+/**
+ * Operation-owned space resolution. The SDK's general capability evaluator
+ * intentionally preserves its historical short/full-space compatibility; the
+ * operation kernel supplies this narrower resolver when a space identifies a
+ * remote owner's resource.
+ */
+type OperationSpaceResolver = (space: string) => string;
+/**
+ * Evaluates required authority with the SDK's public subset primitive.
+ *
+ * In particular, this intentionally does not implement matching rules or
+ * manufacture wildcards. A wildcard can cover a requirement only when it was
+ * already present in the supplied granted authority and the SDK says so.
+ */
+declare function evaluateAuthority(granted: readonly PermissionEntry[], required: readonly PermissionEntry[]): AuthorityEvaluation;
+
+export { type OperationSpaceResolver as O, evaluateAuthority as e };

package/dist/authority-ofwbEqmj.d.ts

@@ -0,0 +1,30 @@
+import { PermissionEntry } from '@tinycloud/sdk-core';
+
+/**
+ * A capability in the canonical form persisted in a v1 request artifact.
+ *
+ * The SDK remains the semantic authority for containment. This module only
+ * establishes deterministic exact identity for persistence and display.
+ */
+type CanonicalPermissionEntry = Readonly<PermissionEntry>;
+interface AuthorityEvaluation {
+    readonly satisfied: boolean;
+    readonly missing: readonly CanonicalPermissionEntry[];
+}
+/**
+ * Operation-owned space resolution. The SDK's general capability evaluator
+ * intentionally preserves its historical short/full-space compatibility; the
+ * operation kernel supplies this narrower resolver when a space identifies a
+ * remote owner's resource.
+ */
+type OperationSpaceResolver = (space: string) => string;
+/**
+ * Evaluates required authority with the SDK's public subset primitive.
+ *
+ * In particular, this intentionally does not implement matching rules or
+ * manufacture wildcards. A wildcard can cover a requirement only when it was
+ * already present in the supplied granted authority and the SDK says so.
+ */
+declare function evaluateAuthority(granted: readonly PermissionEntry[], required: readonly PermissionEntry[]): AuthorityEvaluation;
+
+export { type OperationSpaceResolver as O, evaluateAuthority as e };

package/dist/cli-runtime.cjs

@@ -6967,6 +6967,9 @@ function evaluateOperationAuthority(granted, required, resolveSpace2) {
     missing: canonicalizeCapabilities(missing)
   };
 }
+function delegationWithinRequest(requested, effective, resolveSpace2) {
+  return requested.length > 0 && evaluateOperationAuthority(requested, canonicalizeCapabilities(effective), resolveSpace2).satisfied;
+}
 function isExactCapabilityMemberSubset(hinted, planned, resolveSpace2) {
   const canonicalHinted = canonicalizeOperationCapabilities(hinted, resolveSpace2);
   const canonicalPlanned = canonicalizeOperationCapabilities(planned, resolveSpace2);
@@ -7079,6 +7082,11 @@ var init_authority = __esm({
 });
 
 // src/state.ts
+function processWideContext(key) {
+  var _a;
+  const registry = globalThis;
+  return registry[_a = Symbol.for(key)] ?? (registry[_a] = new import_node_async_hooks.AsyncLocalStorage());
+}
 function tinycloudHomePath() {
   const home = invocationStateRoot.getStore() ?? process.env.TC_HOME ?? process.env.HOME ?? process.env.USERPROFILE ?? (0, import_node_os.homedir)();
   return (0, import_node_path.join)(home, ".tinycloud");
@@ -7418,8 +7426,8 @@ var init_state = __esm({
     TEST_LOCK_CLAIMED_BARRIER_DIR = "TC_TEST_PROFILE_LOCK_CLAIMED_BARRIER_DIR";
     TEST_LOCK_FENCED_BARRIER_DIR = "TC_TEST_PROFILE_LOCK_FENCED_BARRIER_DIR";
     TEST_LOCK_VERIFIED_BARRIER_DIR = "TC_TEST_PROFILE_LOCK_VERIFIED_BARRIER_DIR";
-    invocationStateRoot = new import_node_async_hooks.AsyncLocalStorage();
-    heldProfileLocks = new import_node_async_hooks.AsyncLocalStorage();
+    invocationStateRoot = processWideContext("tinycloud.operations.invocationStateRoot.v1");
+    heldProfileLocks = processWideContext("tinycloud.operations.heldProfileLocks.v1");
     ProfileLockTimeoutError = class extends Error {
       constructor(profile, timeoutMs) {
         super(`Timed out waiting for the profile lock for "${profile}" after ${timeoutMs}ms.`);
@@ -7634,7 +7642,7 @@ function evaluateArtifactAuthority(granted, required, resolveSpace2) {
 function defaultRequestId(now) {
   return `req_${now.getTime().toString(36)}_${(0, import_node_crypto2.randomUUID)().replace(/-/g, "")}`;
 }
-var import_node_crypto2, import_zod2, THIRTY_DAYS_MS, PermissionEntrySchema, CommandSchema, LegacyPermissionRequestArtifactSchema, PortableDelegationSchema, PermissionRequestArtifactSchema, DelegationImportArtifactSchema;
+var import_node_crypto2, import_zod2, THIRTY_DAYS_MS, PermissionEntrySchema, CommandSchema, LegacyPermissionRequestArtifactSchema, PortableDelegationSchema, PermissionRequestArtifactSchema, DelegationImportArtifactSchema, DelegationRequestBindingSchema;
 var init_artifacts = __esm({
   "src/artifacts.ts"() {
     "use strict";
@@ -7709,6 +7717,7 @@ var init_artifacts = __esm({
       expiry: import_zod2.z.string().datetime({ offset: true }).optional(),
       prompted: import_zod2.z.boolean().optional()
     }).strict();
+    DelegationRequestBindingSchema = PermissionRequestArtifactSchema.pick({ requestId: true, requested: true }).strict();
   }
 });
 
@@ -7768,18 +7777,18 @@ function resolveOperationSpace(space, node, ownerSpace) {
     if (resolved !== void 0) return canonicalizeSpaceUri(resolved);
   }
   const did = typeof candidate.did === "string" ? candidate.did : void 0;
-  const pkh = did === void 0 ? null : (0, import_node_sdk.parsePkhDid)(did);
+  const pkh = did === void 0 ? null : nodeSdk.parsePkhDid(did);
   if (pkh === null) {
     throw invalidSecretInput();
   }
-  return (0, import_node_sdk.makePkhSpaceId)(pkh.address, pkh.chainId, space);
+  return nodeSdk.makePkhSpaceId(pkh.address, pkh.chainId, space);
 }
 function ownedSpaceForName(ownerSpace, name) {
-  const parsed = (0, import_node_sdk.parseSpaceUri)(ownerSpace);
+  const parsed = nodeSdk.parseSpaceUri(ownerSpace);
   if (parsed === null) return void 0;
   try {
-    const pkh = (0, import_node_sdk.parsePkhDid)(parsed.owner);
-    return pkh === null ? void 0 : (0, import_node_sdk.makePkhSpaceId)(pkh.address, pkh.chainId, name);
+    const pkh = nodeSdk.parsePkhDid(parsed.owner);
+    return pkh === null ? void 0 : nodeSdk.makePkhSpaceId(pkh.address, pkh.chainId, name);
   } catch {
     return void 0;
   }
@@ -7794,7 +7803,7 @@ function canonicalizeSpaceUri(space) {
     /^tinycloud:pkh:eip155:(\d+):(0x[0-9a-fA-F]{40}):([^:]+)$/
   );
   if (pkh !== null) {
-    return `tinycloud:pkh:eip155:${pkh[1]}:${(0, import_node_sdk.canonicalizeAddress)(pkh[2]).toLowerCase()}:${pkh[3]}`;
+    return `tinycloud:pkh:eip155:${pkh[1]}:${nodeSdk.canonicalizeAddress(pkh[2]).toLowerCase()}:${pkh[3]}`;
   }
   return space;
 }
@@ -7834,11 +7843,11 @@ function invalidSecretInput() {
     operationError("INPUT_INVALID", "The secret reference is invalid.")
   );
 }
-var import_node_sdk, DEFAULT_SECRETS_SPACE, SECRET_MANAGER_BASE_URL, SECRET_NAME_RE2, RESERVED_SECRET_SCOPES;
+var nodeSdk, DEFAULT_SECRETS_SPACE, SECRET_MANAGER_BASE_URL, SECRET_NAME_RE2, RESERVED_SECRET_SCOPES;
 var init_secrets = __esm({
   "src/secrets.ts"() {
     "use strict";
-    import_node_sdk = require("@tinycloud/node-sdk");
+    nodeSdk = __toESM(require("@tinycloud/node-sdk"), 1);
     init_errors();
     DEFAULT_SECRETS_SPACE = "secrets";
     SECRET_MANAGER_BASE_URL = "https://secrets.tinycloud.xyz";
@@ -7991,7 +8000,7 @@ async function importRequestBoundDelegation(context, input) {
     };
     let activated;
     try {
-      activated = await nodeSdk.activateValidatedRuntimeDelegation(
+      activated = await nodeSdk2.activateValidatedRuntimeDelegation(
         context.runtime.node,
         delegation,
         { host }
@@ -8007,11 +8016,7 @@ async function importRequestBoundDelegation(context, input) {
       context.runtime.node,
       context.summary.space
     );
-    if (request.requested.length === 0 || !evaluateOperationAuthority(
-      request.requested,
-      effectivePermissions,
-      resolveSpace2
-    ).satisfied) {
+    if (!delegationWithinRequest(request.requested, effectivePermissions, resolveSpace2)) {
       return operationFailure(
         "DELEGATION_REJECTED",
         "The delegation exceeds the stored authority request."
@@ -8039,12 +8044,19 @@ async function importRequestBoundDelegation(context, input) {
               )
             };
           }
-          const alreadyPresent = records.some((entry) => delegationCid(entry) === activated.cid);
+          const record = {
+            delegation: activated.delegation,
+            permissions: activated.effectivePermissions,
+            authorityRequest: {
+              requestId: request.requestId,
+              requested: request.requested
+            }
+          };
+          const position = records.findIndex((entry) => delegationCid(entry) === activated.cid);
+          const alreadyPresent = position !== -1;
+          const others = records.filter((entry) => delegationCid(entry) !== activated.cid);
           return {
-            records: alreadyPresent ? records : [...records, {
-              delegation: activated.delegation,
-              permissions: activated.effectivePermissions
-            }],
+            records: alreadyPresent ? [...others.slice(0, position), record, ...others.slice(position)] : [...records, record],
             result: {
               status: "ok",
               output: {
@@ -8173,11 +8185,11 @@ function internalImportFailure() {
 function operationFailure(code, message, details) {
   return { status: "error", error: operationError(code, message, { ...details === void 0 ? {} : { details } }) };
 }
-var nodeSdk, import_zod3, EmptyInputSchema, CapabilitiesOutputSchema, AuthRequestInputSchema, PermissionRequestOutputSchema, AuthRequestOutputSchema, AuthImportOutputSchema, AUTH_POSTURES, AUTH_EXPOSURE, AUTH_CAPABILITIES_SENSITIVITY, AUTH_REQUEST_SENSITIVITY, AUTH_IMPORT_SENSITIVITY, authOperationDefinitions;
+var nodeSdk2, import_zod3, EmptyInputSchema, CapabilitiesOutputSchema, AuthRequestInputSchema, PermissionRequestOutputSchema, AuthRequestOutputSchema, AuthImportOutputSchema, AUTH_POSTURES, AUTH_EXPOSURE, AUTH_CAPABILITIES_SENSITIVITY, AUTH_REQUEST_SENSITIVITY, AUTH_IMPORT_SENSITIVITY, authOperationDefinitions;
 var init_auth = __esm({
   "src/operations/auth.ts"() {
     "use strict";
-    nodeSdk = __toESM(require("@tinycloud/node-sdk"), 1);
+    nodeSdk2 = __toESM(require("@tinycloud/node-sdk"), 1);
     import_zod3 = require("zod");
     init_authority();
     init_artifacts();
@@ -9774,6 +9786,173 @@ ORDER BY type, name`;
   }
 });
 
+// src/delegation-binding.ts
+function bindingMigrationPath(profile) {
+  return (0, import_node_path2.join)(profilePath(profile), "delegation-binding-migration.json");
+}
+function storedDelegationKind(entry) {
+  if (!isRecord4(entry)) return "refused";
+  const delegation = entry.delegation;
+  if (!isRecord4(delegation)) return "refused";
+  const header = delegation.delegationHeader;
+  if (!isRecord4(header) || Object.keys(header).length !== 1 || !Object.prototype.hasOwnProperty.call(header, "Authorization") || typeof header.Authorization !== "string") {
+    return "refused";
+  }
+  if ("siweProof" in delegation) return "signed-login";
+  if (header.Authorization.includes(".")) return "compact";
+  return "authorityRequest" in entry ? "refused" : "other";
+}
+function replayLimit(entry, migrated) {
+  const kind = storedDelegationKind(entry);
+  if (!isRecord4(entry) || kind !== "compact" && kind !== "signed-login") return void 0;
+  const binding = DelegationRequestBindingSchema.safeParse(entry.authorityRequest);
+  if (binding.success) return binding.data.requested;
+  return !migrated && kind === "compact" && !("authorityRequest" in entry) ? "signed" : void 0;
+}
+function bindToSignedCapabilities(record, signed, source, recordedAt = (/* @__PURE__ */ new Date()).toISOString()) {
+  return {
+    ...record,
+    authorityRequest: DelegationRequestBindingSchema.parse({
+      requestId: `${REQUEST_ID_PREFIX[source]}:${record.delegation.cid}`,
+      requested: structuredClone(signed)
+    }),
+    authorityRequestAudit: { source, recordedAt, note: BINDING_NOTES[source] }
+  };
+}
+async function prepareStoredDelegationReplay(profile, node, options) {
+  if (await bindingMigrationRecorded(profile)) return true;
+  if (!options.migrate || !await holdsPersistedSession(profile, node)) return false;
+  try {
+    return await withProfileLock(profile, async () => {
+      if (await bindingMigrationRecorded(profile)) return true;
+      if (!await holdsPersistedSession(profile, node)) return false;
+      const recordedAt = (/* @__PURE__ */ new Date()).toISOString();
+      const bound = /* @__PURE__ */ new Map();
+      const unbound = [];
+      for (const entry of await readAdditionalDelegations(profile)) {
+        if (!isRecord4(entry) || "authorityRequest" in entry || storedDelegationKind(entry) !== "compact") continue;
+        const migrated = await migratedRecord(node, entry, options.host, recordedAt);
+        if (migrated === void 0) unbound.push(String(storedCid(entry)));
+        else bound.set(recordKey(entry), migrated);
+      }
+      if (bound.size > 0) {
+        await updateProfileStore(profile, "additional-delegations", (records) => ({
+          records: records.map((entry) => {
+            const key = !isRecord4(entry) || "authorityRequest" in entry ? void 0 : recordKey(entry);
+            return (key === void 0 ? void 0 : bound.get(key)) ?? entry;
+          }),
+          result: void 0
+        }));
+      }
+      await writeJsonAtomic(bindingMigrationPath(profile), {
+        formatVersion: 1,
+        migratedAt: recordedAt,
+        bound: [...bound.values()].map(storedCid),
+        unbound
+      });
+      return true;
+    }, { timeoutMs: MIGRATION_LOCK_TIMEOUT_MS });
+  } catch {
+    return false;
+  }
+}
+async function holdsPersistedSession(profile, node) {
+  try {
+    const persisted = await readSession(profile);
+    return typeof persisted?.verificationMethod === "string" && typeof node.sessionDid === "string" && persisted.verificationMethod.split("#", 1)[0] === node.sessionDid.split("#", 1)[0];
+  } catch {
+    return false;
+  }
+}
+async function migratedRecord(node, entry, host, recordedAt) {
+  const delegation = normalizeStoredDelegation(entry);
+  if (delegation === void 0) return void 0;
+  const signed = await signedCapabilities(node, delegation, host);
+  if (signed === void 0) return void 0;
+  try {
+    return bindToSignedCapabilities({ ...entry, delegation: { ...entry.delegation, cid: delegation.cid } }, signed, "migration", recordedAt);
+  } catch {
+    return void 0;
+  }
+}
+async function replayStoredDelegation(node, entry, options) {
+  const delegation = normalizeStoredDelegation(entry);
+  if (delegation === void 0 || delegation.expiry.getTime() <= Date.now()) return void 0;
+  const limit = replayLimit(entry, options.migrated);
+  if (limit === void 0) return void 0;
+  const authorize = limit === "signed" ? () => true : (effective) => delegationWithinRequest(limit, effective, options.resolveSpace);
+  try {
+    return await nodeSdk3.activateValidatedRuntimeDelegation(node, delegation, { host: options.host, authorize });
+  } catch {
+    return void 0;
+  }
+}
+async function bindingMigrationRecorded(profile) {
+  try {
+    return await readJson(bindingMigrationPath(profile)) !== null;
+  } catch {
+    return true;
+  }
+}
+async function signedCapabilities(node, delegation, host) {
+  let signed;
+  try {
+    await nodeSdk3.activateValidatedRuntimeDelegation(node, delegation, {
+      // The transport host is not signed authority; check it at replay instead.
+      host: delegation.host ?? host,
+      authorize: (effective) => {
+        signed = effective;
+        return false;
+      }
+    });
+  } catch {
+  }
+  return signed;
+}
+function normalizeStoredDelegation(entry) {
+  if (!isRecord4(entry)) return void 0;
+  const raw = entry.delegation;
+  if (!isRecord4(raw) || !isRecord4(raw.delegationHeader)) return void 0;
+  const expiry = raw.expiry instanceof Date ? raw.expiry : typeof raw.expiry === "string" ? new Date(raw.expiry) : void 0;
+  if (expiry === void 0 || Number.isNaN(expiry.getTime()) || typeof raw.cid !== "string" || typeof raw.spaceId !== "string" || typeof raw.path !== "string" || !Array.isArray(raw.actions) || !raw.actions.every((action) => typeof action === "string") || typeof raw.delegateDID !== "string" || typeof raw.ownerAddress !== "string" || typeof raw.chainId !== "number" || typeof raw.delegationHeader.Authorization !== "string") {
+    return void 0;
+  }
+  return { ...raw, expiry };
+}
+function storedCid(entry) {
+  const cid = isRecord4(entry) && isRecord4(entry.delegation) ? entry.delegation.cid : void 0;
+  return typeof cid === "string" ? cid : void 0;
+}
+function recordKey(entry) {
+  const delegation = entry.delegation;
+  if (!isRecord4(delegation) || !isRecord4(delegation.delegationHeader)) return void 0;
+  return JSON.stringify([delegation.cid, delegation.delegationHeader.Authorization]);
+}
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var import_node_path2, nodeSdk3, REQUEST_ID_PREFIX, BINDING_NOTES, MIGRATION_LOCK_TIMEOUT_MS;
+var init_delegation_binding = __esm({
+  "src/delegation-binding.ts"() {
+    "use strict";
+    import_node_path2 = require("path");
+    nodeSdk3 = __toESM(require("@tinycloud/node-sdk"), 1);
+    init_artifacts();
+    init_authority();
+    init_state();
+    init_secrets();
+    REQUEST_ID_PREFIX = {
+      migration: "migrated",
+      "unbound-import": "unbound-import"
+    };
+    BINDING_NOTES = {
+      migration: "Stored without a request binding before bindings were required. Bound at migration to exactly its own signed capabilities, so replay refuses any delegation in this record that exceeds them.",
+      "unbound-import": "Imported by `tc auth import` without a stored request. Bound to exactly its own signed capabilities, so replay refuses any delegation in this record that exceeds them."
+    };
+    MIGRATION_LOCK_TIMEOUT_MS = 250;
+  }
+});
+
 // src/operations/status.ts
 function createStatusDefinition(params) {
   return {
@@ -9829,7 +10008,7 @@ async function inspectPinnedProfileStatus(context, _input) {
 async function pinnedProfileExists(profile) {
   try {
     const storedProfile = await readProfile(profile);
-    return isRecord4(storedProfile);
+    return isRecord5(storedProfile);
   } catch {
     return false;
   }
@@ -9840,16 +10019,18 @@ async function countLiveAdditionalDelegations(profile) {
   if (rawDelegations === null) return 0;
   if (!Array.isArray(rawDelegations)) throw new TypeError("Invalid additional delegation store.");
   const now = Date.now();
+  const migrated = await bindingMigrationRecorded(profile);
   let count = 0;
   for (const entry of rawDelegations) {
+    if (storedDelegationKind(entry) === "refused") continue;
     const expiry = storedDelegationExpiry(entry);
-    if (expiry.getTime() > now) count += 1;
+    if (expiry.getTime() > now && replayLimit(entry, migrated) !== void 0) count += 1;
   }
   return count;
 }
 function summarizeSession(session) {
   if (session === null) return { present: false, expired: null, expiresAt: null };
-  if (!isRecord4(session)) throw new TypeError("Invalid session store.");
+  if (!isRecord5(session)) throw new TypeError("Invalid session store.");
   const expiry = extractSessionExpiry(session);
   if (expiry === null) return { present: true, expired: null, expiresAt: null };
   return {
@@ -9859,7 +10040,7 @@ function summarizeSession(session) {
   };
 }
 function storedDelegationExpiry(entry) {
-  if (!isRecord4(entry) || !isRecord4(entry.delegation) || !("expiry" in entry.delegation)) {
+  if (!isRecord5(entry) || !isRecord5(entry.delegation) || !("expiry" in entry.delegation)) {
     throw new TypeError("Invalid stored delegation.");
   }
   return parseExpiry(entry.delegation.expiry);
@@ -9888,7 +10069,7 @@ function profileNotFound(profile) {
     )
   };
 }
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var import_zod7, StatusInputSchema, StatusOutputSchema, STATUS_POSTURES, STATUS_EXPOSURE, STATUS_SENSITIVITY, statusOperationDefinitions;
@@ -9896,6 +10077,7 @@ var init_status = __esm({
   "src/operations/status.ts"() {
     "use strict";
     import_zod7 = require("zod");
+    init_delegation_binding();
     init_errors();
     init_state();
     StatusInputSchema = import_zod7.z.object({}).strict();
@@ -9918,7 +10100,9 @@ var init_status = __esm({
         expired: import_zod7.z.boolean().nullable(),
         expiresAt: import_zod7.z.string().datetime({ offset: true }).nullable()
       }).strict(),
-      liveAdditionalDelegationCount: import_zod7.z.number().int().nonnegative()
+      liveAdditionalDelegationCount: import_zod7.z.number().int().nonnegative().describe(
+        "Stored, unexpired delegations the replay rule accepts: compact-UCAN or signed-login records with a request binding, and unbound compact-UCAN records before the profile's one-time binding migration. Each is still validated, and checked against its binding, when a runtime installs it."
+      )
     }).strict();
     STATUS_POSTURES = [
       "owner-openkey",
@@ -10072,9 +10256,9 @@ function isOperatorType(value) {
   return value === "human" || value === "agent";
 }
 function isStoredProfile(value) {
-  return isRecord5(value) && isNonEmptyString(value.name) && isNonEmptyString(value.host) && typeof value.chainId === "number" && Number.isFinite(value.chainId) && isNonEmptyString(value.spaceName) && isNonEmptyString(value.did) && isNonEmptyString(value.createdAt) && isOptionalNonEmptyString(value.sessionDid) && isOptionalNonEmptyString(value.ownerDid) && isOptionalNonEmptyString(value.spaceId) && isOptionalPosture(value.posture) && isOptionalOperatorType(value.operatorType) && isOptionalAuthMethod(value.authMethod) && isOptionalNonEmptyString(value.defaultSpace) && isOptionalNonEmptyString(value.privateKey) && isOptionalNonEmptyString(value.address) && isOptionalNonEmptyString(value.openkeyHost);
+  return isRecord6(value) && isNonEmptyString(value.name) && isNonEmptyString(value.host) && typeof value.chainId === "number" && Number.isFinite(value.chainId) && isNonEmptyString(value.spaceName) && isNonEmptyString(value.did) && isNonEmptyString(value.createdAt) && isOptionalNonEmptyString(value.sessionDid) && isOptionalNonEmptyString(value.ownerDid) && isOptionalNonEmptyString(value.spaceId) && isOptionalPosture(value.posture) && isOptionalOperatorType(value.operatorType) && isOptionalAuthMethod(value.authMethod) && isOptionalNonEmptyString(value.defaultSpace) && isOptionalNonEmptyString(value.privateKey) && isOptionalNonEmptyString(value.address) && isOptionalNonEmptyString(value.openkeyHost);
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isNonEmptyString(value) {
@@ -10131,14 +10315,12 @@ async function createInvocationRuntime(target, requirement = "authenticated") {
   const profileName = summary.profile;
   try {
     const {
-      activateValidatedRuntimeDelegation: activateValidatedRuntimeDelegation2,
       TinyCloudNode: TinyCloudNodeConstructor
-    } = nodeSdk2;
+    } = nodeSdk4;
     const explicitPrivateKeyOverride = typeof target.privateKey === "string";
-    const [session, key, additionalDelegations] = explicitPrivateKeyOverride ? [null, null, []] : await Promise.all([
+    const [session, key] = explicitPrivateKeyOverride ? [null, null] : await Promise.all([
       readSession(profileName),
-      readJson(`${profilePath(profileName)}/key.json`),
-      readAdditionalDelegations(profileName)
+      readJson(`${profilePath(profileName)}/key.json`)
     ]);
     const profile = resolved.profile;
     const actualPosture = resolvePosture(profile);
@@ -10185,19 +10367,26 @@ async function createInvocationRuntime(target, requirement = "authenticated") {
     const livePrincipalDid = normalizeDid(node.did);
     const authenticatedSpace = explicitPrivateKeyOverride ? spaceForAuthenticatedPrincipal(livePrincipalDid) : void 0;
     const livePermissions = [...node.getVerifiedSessionCapabilities()];
+    const resolveSpace2 = operationSpaceResolver(node, authenticatedSpace ?? summary.space);
     const seenCids = /* @__PURE__ */ new Set();
-    for (const entry of additionalDelegations) {
-      const delegation = normalizeStoredDelegation(entry);
-      if (delegation === void 0 || delegation.expiry.getTime() <= Date.now()) continue;
-      try {
-        const activated = await activateValidatedRuntimeDelegation2(node, delegation, {
-          host: summary.host
+    if (!explicitPrivateKeyOverride) {
+      const activator = node;
+      const migrated = await prepareStoredDelegationReplay(profileName, activator, {
+        host: summary.host,
+        // Only the profile's own restored session; a local sign-in without
+        // one uses a fresh session key the stored records do not address.
+        migrate: activeSession !== void 0
+      });
+      for (const entry of await readAdditionalDelegations(profileName)) {
+        const activated = await replayStoredDelegation(activator, entry, {
+          host: summary.host,
+          migrated,
+          resolveSpace: resolveSpace2
         });
-        if (!seenCids.has(activated.cid)) {
+        if (activated !== void 0 && !seenCids.has(activated.cid)) {
           seenCids.add(activated.cid);
           livePermissions.push(...activated.effectivePermissions);
         }
-      } catch {
       }
     }
     const runtime = {
@@ -10229,8 +10418,8 @@ async function createInvocationRuntime(target, requirement = "authenticated") {
 function spaceForAuthenticatedPrincipal(principal2) {
   if (principal2 === void 0) return void 0;
   try {
-    const pkh = nodeSdk2.parsePkhDid(principal2);
-    return pkh === null ? void 0 : nodeSdk2.makePkhSpaceId(pkh.address, pkh.chainId, "secrets");
+    const pkh = nodeSdk4.parsePkhDid(principal2);
+    return pkh === null ? void 0 : nodeSdk4.makePkhSpaceId(pkh.address, pkh.chainId, "secrets");
   } catch {
     return void 0;
   }
@@ -10238,7 +10427,7 @@ function spaceForAuthenticatedPrincipal(principal2) {
 function normalizeSession(session, key) {
   const header = session.delegationHeader;
   const jwk = hasPrivateParameter(session.jwk) ? session.jwk : key;
-  if (!isRecord6(header) || typeof header.Authorization !== "string" || typeof session.delegationCid !== "string" || typeof session.spaceId !== "string" || !hasPrivateParameter(jwk) || typeof session.verificationMethod !== "string") {
+  if (!isRecord7(header) || typeof header.Authorization !== "string" || typeof session.delegationCid !== "string" || typeof session.spaceId !== "string" || !hasPrivateParameter(jwk) || typeof session.verificationMethod !== "string") {
     return void 0;
   }
   return {
@@ -10254,27 +10443,14 @@ function normalizeSession(session, key) {
     ...Array.isArray(session.tinycloudHosts) && session.tinycloudHosts.every((host) => typeof host === "string") ? { tinycloudHosts: session.tinycloudHosts } : {}
   };
 }
-function normalizeStoredDelegation(entry) {
-  const raw = entry.delegation;
-  if (!isRecord6(raw) || !isRecord6(raw.delegationHeader)) return void 0;
-  const expiry = parseExpiry2(raw.expiry);
-  if (expiry === void 0 || typeof raw.cid !== "string" || typeof raw.spaceId !== "string" || typeof raw.path !== "string" || !Array.isArray(raw.actions) || !raw.actions.every((action) => typeof action === "string") || typeof raw.delegateDID !== "string" || typeof raw.ownerAddress !== "string" || typeof raw.chainId !== "number" || typeof raw.delegationHeader.Authorization !== "string") {
-    return void 0;
-  }
-  return { ...raw, expiry };
-}
-function parseExpiry2(value) {
-  const expiry = value instanceof Date ? value : typeof value === "string" ? new Date(value) : void 0;
-  return expiry !== void 0 && !Number.isNaN(expiry.getTime()) ? expiry : void 0;
-}
 function hasPrivateParameter(value) {
-  return isRecord6(value) && typeof value.d === "string" && value.d.length > 0;
+  return isRecord7(value) && typeof value.d === "string" && value.d.length > 0;
 }
 function normalizeDid(value) {
   if (typeof value !== "string" || value.length === 0) return void 0;
   return value.split("#", 1)[0];
 }
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function failed(context, error) {
@@ -10287,15 +10463,17 @@ function unresolvedSummary(target) {
     posture: "unauthenticated"
   };
 }
-var nodeSdk2;
+var nodeSdk4;
 var init_runtime = __esm({
   "src/runtime.ts"() {
     "use strict";
-    nodeSdk2 = __toESM(require("@tinycloud/node-sdk"), 1);
+    nodeSdk4 = __toESM(require("@tinycloud/node-sdk"), 1);
     init_authority();
     init_errors();
     init_profile();
+    init_secrets();
     init_state();
+    init_delegation_binding();
   }
 });
 
@@ -10308,8 +10486,8 @@ module.exports = __toCommonJS(cli_runtime_exports);
 
 // src/invoke.ts
 var import_node_crypto3 = require("crypto");
-var import_node_path2 = require("path");
-var import_node_sdk2 = require("@tinycloud/node-sdk");
+var import_node_path3 = require("path");
+var import_node_sdk = require("@tinycloud/node-sdk");
 
 // ../sdk-core/src/policy/errors.ts
 var SignedObjectProfileError = class extends Error {
@@ -11129,7 +11307,7 @@ function normalizeInvocationTarget(target) {
     const stateRoot = candidate.stateRoot;
     const allowOwnerProfile = candidate.allowOwnerProfile;
     const privateKey = candidate.privateKey;
-    if (profile !== void 0 && typeof profile !== "string" || host !== void 0 && typeof host !== "string" || stateRoot !== void 0 && (typeof stateRoot !== "string" || !(0, import_node_path2.isAbsolute)(stateRoot)) || allowOwnerProfile !== void 0 && typeof allowOwnerProfile !== "boolean" || privateKey !== void 0 && typeof privateKey !== "string") {
+    if (profile !== void 0 && typeof profile !== "string" || host !== void 0 && typeof host !== "string" || stateRoot !== void 0 && (typeof stateRoot !== "string" || !(0, import_node_path3.isAbsolute)(stateRoot)) || allowOwnerProfile !== void 0 && typeof allowOwnerProfile !== "boolean" || privateKey !== void 0 && typeof privateKey !== "string") {
       return void 0;
     }
     return {
@@ -11269,11 +11447,11 @@ function requirementsBelongToAuthenticatedOwner(requirements, authenticatedSpace
 }
 function canonicalPkhOwner(space) {
   if (typeof space !== "string") return void 0;
-  const parsedSpace = (0, import_node_sdk2.parseSpaceUri)(space);
+  const parsedSpace = (0, import_node_sdk.parseSpaceUri)(space);
   if (parsedSpace === null) return void 0;
   try {
-    const pkh = (0, import_node_sdk2.parsePkhDid)(parsedSpace.owner);
-    return pkh === null ? void 0 : (0, import_node_sdk2.parseSpaceUri)((0, import_node_sdk2.makePkhSpaceId)(pkh.address, pkh.chainId, parsedSpace.name))?.owner;
+    const pkh = (0, import_node_sdk.parsePkhDid)(parsedSpace.owner);
+    return pkh === null ? void 0 : (0, import_node_sdk.parseSpaceUri)((0, import_node_sdk.makePkhSpaceId)(pkh.address, pkh.chainId, parsedSpace.name))?.owner;
   } catch {
     return void 0;
   }