@tinycloud/operations 0.5.0-beta.0 → 0.5.0-beta.2

package/dist/index.js

@@ -298,6 +298,7 @@ var init_errors2 = __esm({
       "PROFILE_NOT_FOUND",
       "PROFILE_POSTURE_NOT_ALLOWED",
       "PROFILE_OWNER_OPT_IN_REQUIRED",
+      "PROFILE_MIGRATION_REQUIRED",
       "AUTH_REQUIRED",
       "PERMISSION_DENIED",
       "SESSION_NOT_FOUND",
@@ -5243,6 +5244,45 @@ var init_artifacts = __esm({
   }
 });
 
+// src/recovery.ts
+function signInRecovery(profile, posture) {
+  if (!SAFE_PROFILE_TOKEN.test(profile)) return { action: "sign_in" };
+  const template = posture === "local-owner-key" ? SIGN_IN_TEMPLATES.local : posture === "delegate-session" ? SIGN_IN_TEMPLATES.scoped : SIGN_IN_TEMPLATES.openkey;
+  return { action: "sign_in", command: template(profile) };
+}
+function migrationRecovery(profile) {
+  return SAFE_PROFILE_TOKEN.test(profile) ? { action: "complete_migration", command: migrationCommand(profile), operationId: MIGRATION_OPERATION_ID } : { action: "complete_migration", operationId: MIGRATION_OPERATION_ID };
+}
+function isSafeRecovery(value, action) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const record = value;
+  if (record.action !== action) return false;
+  const keys = Object.keys(record);
+  const allowed = action === "sign_in" ? ["action", "command"] : ["action", "command", "operationId"];
+  if (!keys.every((key) => allowed.includes(key))) return false;
+  if (action === "complete_migration" && record.operationId !== MIGRATION_OPERATION_ID) return false;
+  if (!("command" in record)) return true;
+  const command = record.command;
+  if (typeof command !== "string") return false;
+  const profile = /^tc --profile (\S+) /.exec(command)?.[1];
+  if (profile === void 0 || !SAFE_PROFILE_TOKEN.test(profile)) return false;
+  return action === "sign_in" ? Object.values(SIGN_IN_TEMPLATES).some((template) => template(profile) === command) : migrationCommand(profile) === command;
+}
+var SAFE_PROFILE_TOKEN, MIGRATION_OPERATION_ID, SIGN_IN_TEMPLATES, migrationCommand;
+var init_recovery = __esm({
+  "src/recovery.ts"() {
+    "use strict";
+    SAFE_PROFILE_TOKEN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+    MIGRATION_OPERATION_ID = "tinycloud.auth.capabilities";
+    SIGN_IN_TEMPLATES = {
+      local: (profile) => `tc --profile ${profile} auth login --method local`,
+      openkey: (profile) => `tc --profile ${profile} auth login --method openkey`,
+      scoped: (profile) => `tc --profile ${profile} auth login --method openkey --paste --manifest <manifest.json>`
+    };
+    migrationCommand = (profile) => `tc --profile ${profile} auth caps`;
+  }
+});
+
 // src/secrets.ts
 import * as nodeSdk from "@tinycloud/node-sdk";
 function normalizeSecretsGetInput(input) {
@@ -5330,15 +5370,6 @@ function canonicalizeSpaceUri(space) {
   }
   return space;
 }
-function buildSecretSetupUrl(reference) {
-  const parameters = [
-    ["secret", reference.name],
-    ...reference.scope === void 0 ? [] : [["scope", reference.scope]],
-    ["space", reference.space]
-  ];
-  const query = parameters.map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join("&");
-  return `${SECRET_MANAGER_BASE_URL}/app?${query}`;
-}
 function canonicalizeSecretScope(scope) {
   if (scope === void 0 || scope === "") return void 0;
   const trimmed = scope.trim();
@@ -5366,13 +5397,12 @@ function invalidSecretInput() {
     operationError("INPUT_INVALID", "The secret reference is invalid.")
   );
 }
-var DEFAULT_SECRETS_SPACE, SECRET_MANAGER_BASE_URL, SECRET_NAME_RE2, RESERVED_SECRET_SCOPES;
+var DEFAULT_SECRETS_SPACE, SECRET_NAME_RE2, RESERVED_SECRET_SCOPES;
 var init_secrets = __esm({
   "src/secrets.ts"() {
     "use strict";
     init_errors2();
     DEFAULT_SECRETS_SPACE = "secrets";
-    SECRET_MANAGER_BASE_URL = "https://secrets.tinycloud.xyz";
     SECRET_NAME_RE2 = /^[A-Z][A-Z0-9_]*$/;
     RESERVED_SECRET_SCOPES = /* @__PURE__ */ new Set(["default", "global"]);
   }
@@ -5529,7 +5559,10 @@ async function importRequestBoundDelegation(context, input) {
         delegation,
         { host }
       );
-    } catch {
+    } catch (error) {
+      if (typeof error === "object" && error !== null && "reason" in error && error.reason === "expired") {
+        return expiredDelegation();
+      }
       return operationFailure(
         "DELEGATION_REJECTED",
         "The delegation was rejected by the TinyCloud runtime."
@@ -5547,55 +5580,67 @@ async function importRequestBoundDelegation(context, input) {
       );
     }
     try {
-      return await updateProfileStore(
-        context.summary.profile,
-        "additional-delegations",
-        async (records) => {
-          const state = await importState(context, input.requestId);
-          if (!state.ok) return { records, result: state.result };
-          if (state.sessionDid !== sessionDid || normalizeHost(state.host) !== normalizeHost(host)) {
-            return {
-              records,
-              result: audienceMismatch(state.sessionDid, sessionDid)
+      return await withProfileLock(context.summary.profile, async () => {
+        const previousRecords = await readAdditionalDelegations(context.summary.profile);
+        const result = await updateProfileStore(
+          context.summary.profile,
+          "additional-delegations",
+          async (records) => {
+            const state = await importState(context, input.requestId);
+            if (!state.ok) return { records, result: state.result };
+            if (state.sessionDid !== sessionDid || normalizeHost(state.host) !== normalizeHost(host)) {
+              return {
+                records,
+                result: audienceMismatch(state.sessionDid, sessionDid)
+              };
+            }
+            if (state.request.profile !== context.summary.profile || !samePrincipal(state.request.sessionDid, sessionDid) || normalizeHost(state.request.host) !== normalizeHost(host) || JSON.stringify(canonicalizeOperationCapabilities(state.request.requested, resolveSpace2)) !== JSON.stringify(canonicalizeOperationCapabilities(request.requested, resolveSpace2))) {
+              return {
+                records,
+                result: operationFailure(
+                  "DELEGATION_ARTIFACT_INVALID",
+                  "The delegation does not reference a current stored request."
+                )
+              };
+            }
+            const record = {
+              delegation: activated.delegation,
+              permissions: activated.effectivePermissions,
+              authorityRequest: {
+                requestId: request.requestId,
+                requested: request.requested
+              }
             };
-          }
-          if (state.request.profile !== context.summary.profile || !samePrincipal(state.request.sessionDid, sessionDid) || normalizeHost(state.request.host) !== normalizeHost(host) || JSON.stringify(canonicalizeOperationCapabilities(state.request.requested, resolveSpace2)) !== JSON.stringify(canonicalizeOperationCapabilities(request.requested, resolveSpace2))) {
+            const position = records.findIndex((entry) => delegationCid(entry) === activated.cid);
+            const alreadyPresent = position !== -1;
+            const others = records.filter((entry) => delegationCid(entry) !== activated.cid);
             return {
-              records,
-              result: operationFailure(
-                "DELEGATION_ARTIFACT_INVALID",
-                "The delegation does not reference a current stored request."
-              )
+              records: alreadyPresent ? [...others.slice(0, position), record, ...others.slice(position)] : [...records, record],
+              result: {
+                status: "ok",
+                output: {
+                  cid: activated.cid,
+                  effectivePermissions,
+                  expiry: activated.expiry.toISOString(),
+                  audience: activated.audience,
+                  host: activated.host,
+                  activated: true,
+                  alreadyPresent
+                }
+              }
             };
           }
-          const record = {
-            delegation: activated.delegation,
-            permissions: activated.effectivePermissions,
-            authorityRequest: {
-              requestId: request.requestId,
-              requested: request.requested
-            }
-          };
-          const position = records.findIndex((entry) => delegationCid(entry) === activated.cid);
-          const alreadyPresent = position !== -1;
-          const others = records.filter((entry) => delegationCid(entry) !== activated.cid);
-          return {
-            records: alreadyPresent ? [...others.slice(0, position), record, ...others.slice(position)] : [...records, record],
-            result: {
-              status: "ok",
-              output: {
-                cid: activated.cid,
-                effectivePermissions,
-                expiry: activated.expiry.toISOString(),
-                audience: activated.audience,
-                host: activated.host,
-                activated: true,
-                alreadyPresent
-              }
-            }
-          };
+        );
+        if (activated.expiry.getTime() <= Date.now()) {
+          await updateProfileStore(
+            context.summary.profile,
+            "additional-delegations",
+            () => ({ records: previousRecords, result: void 0 })
+          );
+          return expiredDelegation();
         }
-      );
+        return result;
+      });
     } catch {
       return internalImportFailure();
     }
@@ -5842,8 +5887,33 @@ var init_auth = __esm({
   }
 });
 
-// src/operations/exploration.ts
+// src/kv-failure.ts
 import { authorizationVerdictOf, validatedCapabilityOf } from "@tinycloud/sdk-services";
+function kvRefusal(error) {
+  const verdict = authorizationVerdictOf(error);
+  if (verdict === "unauthenticated") {
+    return validatedCapabilityOf(error) === void 0 ? "auth_required" : "permission_denied";
+  }
+  return verdict === "forbidden" ? "permission_denied" : void 0;
+}
+function authorizationFailure(error, action) {
+  switch (kvRefusal(error)) {
+    case "auth_required":
+      return { status: "error", error: operationError("AUTH_REQUIRED", `Authentication is required to ${action}.`) };
+    case "permission_denied":
+      return { status: "error", error: operationError("PERMISSION_DENIED", `Permission is denied to ${action}.`) };
+    case void 0:
+      return void 0;
+  }
+}
+var init_kv_failure = __esm({
+  "src/kv-failure.ts"() {
+    "use strict";
+    init_errors2();
+  }
+});
+
+// src/operations/exploration.ts
 import { z as z4 } from "zod";
 async function planAccountRegistryRead(context, path) {
   return [{
@@ -6211,19 +6281,6 @@ function caughtKvFailure(error, action) {
   if (error instanceof OperationInvocationError) return { status: "error", error: error.operationError };
   return authorizationFailure(error, action) ?? nodeFailure(action);
 }
-function authorizationFailure(error, action) {
-  const verdict = authorizationVerdictOf(error);
-  if (verdict === "unauthenticated") {
-    if (validatedCapabilityOf(error) !== void 0) {
-      return { status: "error", error: operationError("PERMISSION_DENIED", `Permission is denied to ${action}.`) };
-    }
-    return { status: "error", error: operationError("AUTH_REQUIRED", `Authentication is required to ${action}.`) };
-  }
-  if (verdict === "forbidden") {
-    return { status: "error", error: operationError("PERMISSION_DENIED", `Permission is denied to ${action}.`) };
-  }
-  return void 0;
-}
 function accountRegistryOutput(output) {
   if (Buffer.byteLength(JSON.stringify(output), "utf8") > MAX_ACCOUNT_REGISTRY_BYTES) {
     return {
@@ -6276,6 +6333,7 @@ var MAX_KV_VALUE_BYTES, DEFAULT_KV_LIST_LIMIT, MAX_ACCOUNT_REGISTRY_RECORDS, MAX
 var init_exploration = __esm({
   "src/operations/exploration.ts"() {
     "use strict";
+    init_kv_failure();
     init_errors2();
     init_secrets();
     MAX_KV_VALUE_BYTES = 1024 * 1024;
@@ -6576,6 +6634,191 @@ var init_exploration = __esm({
   }
 });
 
+// src/secret-request.ts
+import * as nodeSdk3 from "@tinycloud/node-sdk";
+function canonicalSecretRequestOwner(did) {
+  const match = typeof did === "string" ? OWNER_RE.exec(did) : null;
+  if (match === null || !Number.isSafeInteger(Number(match[1]))) throw invalidOwner();
+  const address = match[2];
+  let checksummed;
+  try {
+    checksummed = nodeSdk3.canonicalizeAddress(address);
+  } catch {
+    throw invalidOwner();
+  }
+  if (/[A-F]/.test(address.slice(2)) && address !== checksummed) throw invalidOwner();
+  return `did:pkh:eip155:${match[1]}:${checksummed}`;
+}
+function buildSecretRequestUrl(input) {
+  const owner = canonicalSecretRequestOwner(input.owner);
+  const names = validSecretNames(input.names);
+  if (input.scope !== void 0) assertSecretRequestScope(input.scope);
+  const requester = input.requester;
+  if (requester !== void 0 && (typeof requester !== "string" || requester.length === 0 || requester.length > MAX_REQUESTER_LENGTH || CONTROL_OR_FORMAT.test(requester))) {
+    throw new SecretRequestInputError("INVALID_REQUESTER", "The requester label must be 1-64 characters with no control or format characters.");
+  }
+  if (input.returnTo !== void 0 && !isAllowedReturnTo(input.returnTo)) {
+    throw new SecretRequestInputError("INVALID_RETURN_TO", "The return address is not an allowed Secret Manager callback.");
+  }
+  if (input.state !== void 0 && !STATE_RE.test(input.state)) {
+    throw new SecretRequestInputError("INVALID_STATE", "The state must be 1-128 characters of A-Z, a-z, 0-9, '.', '_', '~' or '-'.");
+  }
+  const parameters = [
+    ["owner", owner],
+    ...names.map((name) => ["name", name]),
+    ...input.scope === void 0 ? [] : [["scope", input.scope]],
+    ...input.requester === void 0 ? [] : [["requester", input.requester]],
+    ...input.returnTo === void 0 ? [] : [["return_to", input.returnTo]],
+    ...input.state === void 0 ? [] : [["state", input.state]],
+    ["v", "1"]
+  ];
+  const url = `${SECRET_MANAGER_ORIGIN}/request?${parameters.map(([key, value]) => `${key}=${encodeURIComponent(value)}`).join("&")}`;
+  if (url.length > SECRET_REQUEST_MAX_URL_LENGTH) {
+    throw new SecretRequestInputError("REQUEST_LINK_TOO_LONG", `The request link is longer than ${SECRET_REQUEST_MAX_URL_LENGTH} characters.`);
+  }
+  return { url, owner, names, ...input.scope === void 0 ? {} : { scope: input.scope } };
+}
+function secretSetupFor(link2) {
+  return {
+    url: link2.url,
+    names: [...link2.names],
+    ...link2.scope === void 0 ? {} : { scope: link2.scope },
+    owner: link2.owner,
+    action: "add_secret"
+  };
+}
+function resolveSecretsOwner(profile, requestedOwner) {
+  const resolved = profile.local ? ownerOrUndefined(profile.principalDid) : ownerOrUndefined(profile.ownerDid) ?? (profile.posture === "delegate-session" ? ownerOfSpace(profile.space) : void 0) ?? ownerOrUndefined(profile.principalDid);
+  const requested = requestedOwner === void 0 ? void 0 : ownerOrUndefined(requestedOwner);
+  if (resolved !== void 0) {
+    if (requestedOwner !== void 0 && requested !== resolved) {
+      return {
+        ok: false,
+        code: "OWNER_MISMATCH",
+        message: "The requested owner is not the owner of this identity's secrets."
+      };
+    }
+    return { ok: true, owner: resolved, local: profile.local };
+  }
+  if (requested !== void 0 && !profile.local) return { ok: true, owner: requested, local: false };
+  return {
+    ok: false,
+    code: "OWNER_DID_UNKNOWN",
+    message: "The owner of this identity's secrets is unknown. Pass the owner's did:pkh with --owner."
+  };
+}
+function missingSecretRecovery(input) {
+  if (input.local) {
+    return { kind: "put_locally", hint: `Store it with: ${putCommands(input.names, input.scope)}` };
+  }
+  if (input.owner !== void 0) {
+    try {
+      return {
+        kind: "add_secret",
+        setup: secretSetupFor(buildSecretRequestUrl({
+          owner: input.owner,
+          names: input.names,
+          ...input.scope === void 0 ? {} : { scope: input.scope }
+        }))
+      };
+    } catch {
+    }
+  }
+  return {
+    kind: "not_requestable",
+    hint: `No Secret Manager request link can express this secret. The owner can store it with: ${putCommands(input.names, input.scope)}`
+  };
+}
+function isValidSecretRequestScope(scope) {
+  return scope.length <= MAX_SCOPE_LENGTH && SCOPE_RE.test(scope) && !RESERVED_SCOPES.includes(scope);
+}
+function isValidSecretName(name) {
+  return name.length <= MAX_NAME_LENGTH && NAME_RE.test(name);
+}
+function validSecretNames(names) {
+  for (const name of names) assertSecretName(name);
+  const unique = dedupe(names);
+  if (unique.length === 0) {
+    throw new SecretRequestInputError("INVALID_SECRET_NAME", "At least one secret name is required.");
+  }
+  if (unique.length > SECRET_REQUEST_MAX_NAMES) {
+    throw new SecretRequestInputError("TOO_MANY_SECRET_NAMES", `At most ${SECRET_REQUEST_MAX_NAMES} secret names can be requested at once.`);
+  }
+  return unique;
+}
+function assertSecretName(name) {
+  if (typeof name !== "string" || !isValidSecretName(name)) {
+    throw new SecretRequestInputError("INVALID_SECRET_NAME", "Secret names are 1-64 characters of A-Z, 0-9 and '_', starting with a letter.");
+  }
+}
+function assertSecretRequestScope(scope) {
+  if (typeof scope !== "string" || !isValidSecretRequestScope(scope)) {
+    throw new SecretRequestInputError("INVALID_SECRET_SCOPE", "The scope must be a canonical scope of at most 64 characters, not default, global or scoped.");
+  }
+}
+function isAllowedReturnTo(returnTo) {
+  if (typeof returnTo !== "string" || returnTo.length > MAX_RETURN_TO_LENGTH) return false;
+  let url;
+  try {
+    url = new URL(returnTo);
+  } catch {
+    return false;
+  }
+  if (url.username !== "" || url.password !== "") return false;
+  return RETURN_TO_ORIGINS.includes(url.origin) || RETURN_TO_PREVIEW.test(url.origin);
+}
+function ownerOrUndefined(did) {
+  if (did === void 0) return void 0;
+  try {
+    return canonicalSecretRequestOwner(did);
+  } catch {
+    return void 0;
+  }
+}
+function ownerOfSpace(space) {
+  const match = space === void 0 ? null : PKH_SPACE_RE.exec(space);
+  if (match === null) return void 0;
+  return ownerOrUndefined(`did:pkh:eip155:${match[1]}:${match[2].toLowerCase()}`);
+}
+function putCommands(names, scope) {
+  return dedupe(names).map((name) => `tc secrets put ${name}${scope === void 0 ? "" : ` --scope ${scope}`} --stdin`).join("; ");
+}
+function dedupe(names) {
+  return [...new Set(names)];
+}
+function invalidOwner() {
+  return new SecretRequestInputError("INVALID_OWNER", "The owner must be a did:pkh:eip155 account with a valid EIP-55 address.");
+}
+var SECRET_MANAGER_ORIGIN, SECRET_REQUEST_MAX_NAMES, SECRET_REQUEST_MAX_URL_LENGTH, OWNER_RE, NAME_RE, MAX_NAME_LENGTH, SCOPE_RE, MAX_SCOPE_LENGTH, RESERVED_SCOPES, MAX_REQUESTER_LENGTH, CONTROL_OR_FORMAT, STATE_RE, MAX_RETURN_TO_LENGTH, RETURN_TO_ORIGINS, RETURN_TO_PREVIEW, PKH_SPACE_RE, SecretRequestInputError;
+var init_secret_request = __esm({
+  "src/secret-request.ts"() {
+    "use strict";
+    SECRET_MANAGER_ORIGIN = "https://secrets.tinycloud.xyz";
+    SECRET_REQUEST_MAX_NAMES = 10;
+    SECRET_REQUEST_MAX_URL_LENGTH = 8192;
+    OWNER_RE = /^did:pkh:eip155:([1-9][0-9]*):(0x[0-9a-fA-F]{40})$/;
+    NAME_RE = /^[A-Z][A-Z0-9_]*$/;
+    MAX_NAME_LENGTH = 64;
+    SCOPE_RE = /^[a-z0-9]+(-[a-z0-9]+)*$/;
+    MAX_SCOPE_LENGTH = 64;
+    RESERVED_SCOPES = ["default", "global", "scoped"];
+    MAX_REQUESTER_LENGTH = 64;
+    CONTROL_OR_FORMAT = /[\p{Cc}\p{Cf}]/u;
+    STATE_RE = /^[A-Za-z0-9._~-]{1,128}$/;
+    MAX_RETURN_TO_LENGTH = 2048;
+    RETURN_TO_ORIGINS = ["https://feed.tinycloud.xyz"];
+    RETURN_TO_PREVIEW = /^https:\/\/[a-z0-9-]+\.tinyfeed\.pages\.dev$/;
+    PKH_SPACE_RE = /^tinycloud:pkh:eip155:([1-9][0-9]*):(0x[0-9a-fA-F]{40}):[^:]+$/;
+    SecretRequestInputError = class extends Error {
+      constructor(code, message) {
+        super(message);
+        this.name = "SecretRequestInputError";
+        this.code = code;
+      }
+    };
+  }
+});
+
 // src/operations/secrets-get.ts
 import { z as z5 } from "zod";
 async function planSecretGet(context, input) {
@@ -6643,27 +6886,14 @@ async function executeSecretGet(context, input) {
       )
     };
   }
-  return classifySecretRead(reference, result);
+  return classifySecretRead(reference, result, context.runtime?.localOwner === true);
 }
-function classifySecretRead(reference, result) {
+function classifySecretRead(reference, result, localOwner) {
   switch (result.status) {
     case "ok":
       return { status: "ok", output: { value: result.value } };
     case "not_found":
-      return {
-        status: "setup_required",
-        setup: {
-          kind: "secret_manager",
-          secret: {
-            name: reference.name,
-            ...reference.scope === void 0 ? {} : { scope: reference.scope },
-            space: reference.space
-          },
-          url: buildSecretSetupUrl(reference),
-          message: "Enter this secret in Secret Manager, then retry the operation."
-        },
-        requiresCallerInput: true
-      };
+      return missingSecretOutcome(reference, localOwner);
     case "permission_required":
       return {
         status: "authority_required",
@@ -6708,6 +6938,47 @@ function classifySecretRead(reference, result) {
     error: operationError("SECRET_READ_FAILED", "The secret read failed.")
   };
 }
+function missingSecretOutcome(reference, localOwner) {
+  const owner = ownerOfSpace(reference.space);
+  const recovery = missingSecretRecovery({
+    owner,
+    local: localOwner,
+    names: [reference.name],
+    ...reference.scope === void 0 ? {} : { scope: reference.scope }
+  });
+  if (recovery.kind === "add_secret") {
+    const { setup } = recovery;
+    return {
+      status: "setup_required",
+      setup: {
+        kind: "secret_manager",
+        action: setup.action,
+        url: setup.url,
+        names: setup.names,
+        ...setup.scope === void 0 ? {} : { scope: setup.scope },
+        owner: setup.owner,
+        secret: {
+          name: reference.name,
+          ...reference.scope === void 0 ? {} : { scope: reference.scope },
+          space: reference.space
+        },
+        message: "Ask the owner to add this secret in Secret Manager, then retry the operation."
+      },
+      requiresCallerInput: true
+    };
+  }
+  return {
+    status: "error",
+    error: operationError("KV_NOT_FOUND", recovery.hint, {
+      details: {
+        names: [reference.name],
+        ...reference.scope === void 0 ? {} : { scope: reference.scope },
+        ...owner === void 0 ? {} : { owner },
+        recoveryKind: recovery.kind
+      }
+    })
+  };
+}
 function resolveEncryptionNetworkId(node, space) {
   const candidate = node;
   let scoped;
@@ -6734,6 +7005,7 @@ var init_secrets_get = __esm({
   "src/operations/secrets-get.ts"() {
     "use strict";
     init_errors2();
+    init_secret_request();
     init_secrets();
     SecretsGetInputSchema = z5.object({
       name: z5.string(),
@@ -6785,9 +7057,197 @@ var init_secrets_get = __esm({
   }
 });
 
+// src/operations/secrets-status.ts
+import { z as z6 } from "zod";
+import * as nodeSdk4 from "@tinycloud/node-sdk";
+async function executeSecretsStatus(context, input) {
+  const runtime = context.runtime;
+  const node = runtime?.node;
+  if (runtime === void 0 || typeof node?.kvForSpace !== "function") {
+    return {
+      status: "error",
+      error: operationError("NODE_ERROR", "The TinyCloud node could not check the secrets.", { retryable: true })
+    };
+  }
+  const local = runtime.localOwner === true;
+  const resolution = resolveSecretsOwner({
+    local,
+    posture: context.summary.posture,
+    ...context.summary.ownerDid === void 0 ? {} : { ownerDid: context.summary.ownerDid },
+    ...context.summary.principalDid === void 0 ? {} : { principalDid: context.summary.principalDid },
+    ...context.summary.space === void 0 ? {} : { space: context.summary.space }
+  }, input.owner);
+  if (!resolution.ok) {
+    return {
+      status: "error",
+      error: operationError("INPUT_INVALID", resolution.message, { details: { reason: resolution.code } })
+    };
+  }
+  const owner = resolution.owner;
+  const skipped2 = runtime.skippedGrantReasons ?? [];
+  const pkh = nodeSdk4.parsePkhDid(owner);
+  const kv = node.kvForSpace(nodeSdk4.makePkhSpaceId(pkh.address, pkh.chainId, "secrets"));
+  const outcomes = await Promise.all(input.names.map(async (name) => {
+    const path = input.scope === void 0 ? `vault/secrets/${name}` : `vault/secrets/scoped/${input.scope}/${name}`;
+    try {
+      const result = await kv.get(path, { raw: true, prefix: "", timeout: PROBE_TIMEOUT_MS });
+      if (result.ok) return "present";
+      const error = result.error;
+      if (typeof error === "object" && error !== null && "code" in error && error.code === "KV_NOT_FOUND") {
+        return "pending";
+      }
+      const refusal = kvRefusal(error);
+      if (refusal === "auth_required") return "auth_required";
+      if (refusal === "permission_denied") return "denied";
+      return "unreachable";
+    } catch {
+      return "unreachable";
+    }
+  }));
+  const namesWith = (outcome) => input.names.filter((_, index) => outcomes[index] === outcome);
+  const present = namesWith("present");
+  const pending = namesWith("pending");
+  const denied = namesWith("denied");
+  if (present.length + pending.length < input.names.length) {
+    if (outcomes.includes("auth_required") || skipped2.includes("activation_unauthenticated")) {
+      return {
+        status: "error",
+        error: operationError(
+          "AUTH_REQUIRED",
+          "The node did not accept this profile's stored session. Sign in again, then retry.",
+          { retryable: false, details: { recovery: signInRecovery(context.summary.profile, context.summary.posture) } }
+        )
+      };
+    }
+    if (outcomes.includes("unreachable") || skipped2.includes("activation_unavailable")) {
+      return {
+        status: "error",
+        error: operationError("NODE_UNREACHABLE", "The TinyCloud node could not be reached.", { retryable: true })
+      };
+    }
+  }
+  const recovery = pending.length === 0 ? void 0 : missingSecretRecovery({
+    owner,
+    local,
+    names: pending,
+    ...input.scope === void 0 ? {} : { scope: input.scope }
+  });
+  return {
+    status: "ok",
+    output: {
+      status: denied.length > 0 ? "consent_required" : pending.length > 0 ? "pending" : "ready",
+      owner,
+      names: [...input.names],
+      ...input.scope === void 0 ? {} : { scope: input.scope },
+      present,
+      pending,
+      denied,
+      ...recovery === void 0 ? {} : recovery.kind === "add_secret" ? { setup: recovery.setup } : { hint: recovery.hint }
+    }
+  };
+}
+var PROBE_TIMEOUT_MS, SECRETS_STATUS_DEADLINE_MS, SecretsStatusInputSchema, SecretSetupSchema, SecretsStatusOutputSchema, SECRETS_STATUS_POSTURES, SECRETS_STATUS_EXPOSURE, SECRETS_STATUS_SENSITIVITY, secretsStatusOperationDefinition, secretsStatusOperationDefinitions;
+var init_secrets_status = __esm({
+  "src/operations/secrets-status.ts"() {
+    "use strict";
+    init_errors2();
+    init_kv_failure();
+    init_recovery();
+    init_secret_request();
+    init_secrets();
+    PROBE_TIMEOUT_MS = 15e3;
+    SECRETS_STATUS_DEADLINE_MS = 18e3;
+    SecretsStatusInputSchema = z6.object({
+      names: z6.array(z6.string()),
+      scope: z6.string().optional(),
+      owner: z6.string().optional()
+    }).strict().superRefine((input, context) => {
+      try {
+        validSecretNames(input.names);
+      } catch {
+        context.addIssue({ code: z6.ZodIssueCode.custom, path: ["names"], message: "Invalid secret names." });
+      }
+      try {
+        const scope = canonicalizeSecretScope(input.scope);
+        if (scope !== void 0 && !isValidSecretRequestScope(scope)) throw new Error("invalid scope");
+      } catch {
+        context.addIssue({ code: z6.ZodIssueCode.custom, path: ["scope"], message: "Invalid secret scope." });
+      }
+      if (input.owner !== void 0) {
+        try {
+          canonicalSecretRequestOwner(input.owner);
+        } catch {
+          context.addIssue({ code: z6.ZodIssueCode.custom, path: ["owner"], message: "Invalid owner." });
+        }
+      }
+    }).transform((input) => {
+      const scope = canonicalizeSecretScope(input.scope);
+      return {
+        names: validSecretNames(input.names),
+        ...scope === void 0 ? {} : { scope },
+        ...input.owner === void 0 ? {} : { owner: canonicalSecretRequestOwner(input.owner) }
+      };
+    });
+    SecretSetupSchema = z6.object({
+      url: z6.string().url(),
+      names: z6.array(z6.string()).min(1),
+      scope: z6.string().optional(),
+      owner: z6.string(),
+      action: z6.literal("add_secret")
+    }).strict();
+    SecretsStatusOutputSchema = z6.object({
+      status: z6.enum(["ready", "pending", "consent_required"]),
+      owner: z6.string(),
+      names: z6.array(z6.string()).min(1),
+      scope: z6.string().optional(),
+      present: z6.array(z6.string()),
+      pending: z6.array(z6.string()),
+      denied: z6.array(z6.string()),
+      setup: SecretSetupSchema.optional(),
+      hint: z6.string().optional()
+    }).strict();
+    SECRETS_STATUS_POSTURES = [
+      "owner-openkey",
+      "delegate-session",
+      "local-owner-key"
+    ];
+    SECRETS_STATUS_EXPOSURE = {
+      cli: { status: "required" },
+      mcp: { status: "required" },
+      skill: { status: "required" },
+      docs: { status: "required" }
+    };
+    SECRETS_STATUS_SENSITIVITY = {
+      input: [],
+      output: []
+    };
+    secretsStatusOperationDefinition = {
+      id: "tinycloud.secrets.status",
+      version: 1,
+      title: "Check whether TinyCloud secrets exist",
+      description: "Report, without reading any value, which named secrets exist in the owner's secrets space: ready, pending (with a Secret Manager request link), or consent_required for names this identity may not read. Each name needs tinycloud.kv/get; this operation never requests it. It never signs in: it uses only the profile's stored session, and writes no profile state.",
+      input: SecretsStatusInputSchema,
+      output: SecretsStatusOutputSchema,
+      effects: ["read"],
+      runtime: "restored",
+      postures: SECRETS_STATUS_POSTURES,
+      exposure: SECRETS_STATUS_EXPOSURE,
+      sensitivity: SECRETS_STATUS_SENSITIVITY,
+      deadlineMs: SECRETS_STATUS_DEADLINE_MS,
+      // Never evaluated against the session: a missing grant is reported as
+      // `consent_required`, never saved as an authority request.
+      authority: async () => [],
+      execute: executeSecretsStatus
+    };
+    secretsStatusOperationDefinitions = [
+      secretsStatusOperationDefinition
+    ];
+  }
+});
+
 // src/operations/sql.ts
 import nodeSqlParser from "node-sql-parser";
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 async function planSqlRead(context, input) {
   const space = resolveSqlSpace(context, input.space);
   return [{
@@ -7105,7 +7565,7 @@ var init_sql = __esm({
     "use strict";
     init_errors2();
     init_secrets();
-    init_exploration();
+    init_kv_failure();
     DEFAULT_MAX_ROWS = 100;
     MAX_MAX_ROWS = 1e3;
     DEFAULT_MAX_BYTES = 1024 * 1024;
@@ -7121,29 +7581,29 @@ WHERE type IN ('table', 'view', 'index', 'trigger')
   AND name NOT LIKE 'sqlite_%'
 ORDER BY type, name`;
     sqlParser = new nodeSqlParser.Parser();
-    SpaceSchema2 = z6.string().min(1).refine(
+    SpaceSchema2 = z7.string().min(1).refine(
       (space) => (/^[A-Za-z0-9_-]+$/.test(space) || space.startsWith("tinycloud:")) && !space.includes("*"),
       "Invalid TinyCloud space."
     );
-    DatabaseSchema = z6.string().min(1).max(256).refine(
+    DatabaseSchema = z7.string().min(1).max(256).refine(
       (database) => database !== "/" && !database.endsWith("/") && !database.includes("*") && !/[\u0000-\u001f\u007f]/.test(database),
       "Invalid SQLite database name."
     );
-    SafeNumberSchema = z6.number().finite().refine(
+    SafeNumberSchema = z7.number().finite().refine(
       (value) => !Number.isInteger(value) || Number.isSafeInteger(value),
       "SQLite integer parameters must be JavaScript safe integers."
     );
-    Base64Schema = z6.string().max(Math.ceil(MAX_MAX_BYTES / 3) * 4).refine(
+    Base64Schema = z7.string().max(Math.ceil(MAX_MAX_BYTES / 3) * 4).refine(
       isCanonicalBase642,
       "Invalid base64 BLOB value."
     );
-    SqlInputValueSchema = z6.union([
-      z6.null(),
+    SqlInputValueSchema = z7.union([
+      z7.null(),
       SafeNumberSchema,
-      z6.string().max(MAX_MAX_BYTES),
-      z6.object({ type: z6.literal("blob"), base64: Base64Schema }).strict()
+      z7.string().max(MAX_MAX_BYTES),
+      z7.object({ type: z7.literal("blob"), base64: Base64Schema }).strict()
     ]);
-    SqlParamsSchema = z6.array(SqlInputValueSchema).max(MAX_PARAMETERS).superRefine(
+    SqlParamsSchema = z7.array(SqlInputValueSchema).max(MAX_PARAMETERS).superRefine(
       (params, context) => {
         const totalBytes = params.reduce(
           (total, value) => total + sqlInputValueBytes(value),
@@ -7151,13 +7611,13 @@ ORDER BY type, name`;
         );
         if (totalBytes > MAX_MAX_BYTES) {
           context.addIssue({
-            code: z6.ZodIssueCode.custom,
+            code: z7.ZodIssueCode.custom,
             message: "SQLite query parameters exceed the 4 MiB input limit."
           });
         }
       }
     );
-    RequiredSqlParamsSchema = z6.array(SqlInputValueSchema).min(1).max(MAX_PARAMETERS).superRefine(
+    RequiredSqlParamsSchema = z7.array(SqlInputValueSchema).min(1).max(MAX_PARAMETERS).superRefine(
       (params, context) => {
         const totalBytes = params.reduce(
           (total, value) => total + sqlInputValueBytes(value),
@@ -7165,88 +7625,88 @@ ORDER BY type, name`;
         );
         if (totalBytes > MAX_MAX_BYTES) {
           context.addIssue({
-            code: z6.ZodIssueCode.custom,
+            code: z7.ZodIssueCode.custom,
             message: "SQLite query parameters exceed the 4 MiB input limit."
           });
         }
       }
     );
-    SqlOutputValueSchema = z6.union([
-      z6.null(),
+    SqlOutputValueSchema = z7.union([
+      z7.null(),
       SafeNumberSchema,
-      z6.string(),
-      z6.object({
-        type: z6.literal("blob"),
-        base64: z6.string(),
-        byteLength: z6.number().int().nonnegative()
+      z7.string(),
+      z7.object({
+        type: z7.literal("blob"),
+        base64: z7.string(),
+        byteLength: z7.number().int().nonnegative()
       }).strict()
     ]);
-    SqlTargetInputSchema = z6.object({
+    SqlTargetInputSchema = z7.object({
       space: SpaceSchema2,
       database: DatabaseSchema
     }).strict();
-    SqlQueryInputSchema = z6.object({
+    SqlQueryInputSchema = z7.object({
       space: SpaceSchema2,
       database: DatabaseSchema,
-      sql: z6.string().min(1).max(MAX_SQL_LENGTH).superRefine((sql, context) => {
+      sql: z7.string().min(1).max(MAX_SQL_LENGTH).superRefine((sql, context) => {
         if (!isSingleReadQuery(sql)) {
           context.addIssue({
-            code: z6.ZodIssueCode.custom,
+            code: z7.ZodIssueCode.custom,
             message: "SQL must parse as exactly one SQLite SELECT statement."
           });
         }
       }),
       params: SqlParamsSchema.optional(),
-      maxRows: z6.number().int().positive().max(MAX_MAX_ROWS).optional(),
-      maxBytes: z6.number().int().positive().max(MAX_MAX_BYTES).optional()
+      maxRows: z7.number().int().positive().max(MAX_MAX_ROWS).optional(),
+      maxBytes: z7.number().int().positive().max(MAX_MAX_BYTES).optional()
     }).strict();
-    SqlExecuteInputSchema = z6.object({
+    SqlExecuteInputSchema = z7.object({
       space: SpaceSchema2,
       database: DatabaseSchema,
-      sql: z6.string().min(1).max(MAX_SQL_LENGTH),
+      sql: z7.string().min(1).max(MAX_SQL_LENGTH),
       params: RequiredSqlParamsSchema,
-      acknowledgeDatabaseWideAuthority: z6.literal(true).describe(SQL_WRITE_AUTHORITY_NOTICE)
+      acknowledgeDatabaseWideAuthority: z7.literal(true).describe(SQL_WRITE_AUTHORITY_NOTICE)
     }).strict().superRefine((input, context) => {
       if (parseSingleDmlStatement(input.sql, input.params.length) === void 0) {
         context.addIssue({
-          code: z6.ZodIssueCode.custom,
+          code: z7.ZodIssueCode.custom,
           path: ["sql"],
           message: "SQL must parse as exactly one parameterized INSERT, UPDATE, or DELETE with one value per positional placeholder."
         });
       }
     });
-    SqlLimitsOutputSchema = z6.object({
-      maxRows: z6.number().int().positive(),
-      maxBytes: z6.number().int().positive(),
-      enforcement: z6.literal("node-requested-client-verified")
+    SqlLimitsOutputSchema = z7.object({
+      maxRows: z7.number().int().positive(),
+      maxBytes: z7.number().int().positive(),
+      enforcement: z7.literal("node-requested-client-verified")
     }).strict();
-    SqlSchemaInspectOutputSchema = z6.object({
-      space: z6.string().min(1),
-      database: z6.string().min(1),
-      objects: z6.array(z6.object({
-        type: z6.enum(["table", "view", "index", "trigger"]),
-        name: z6.string().min(1),
-        tableName: z6.string().min(1),
-        sql: z6.string().optional()
+    SqlSchemaInspectOutputSchema = z7.object({
+      space: z7.string().min(1),
+      database: z7.string().min(1),
+      objects: z7.array(z7.object({
+        type: z7.enum(["table", "view", "index", "trigger"]),
+        name: z7.string().min(1),
+        tableName: z7.string().min(1),
+        sql: z7.string().optional()
       }).strict()),
-      count: z6.number().int().nonnegative(),
+      count: z7.number().int().nonnegative(),
       limits: SqlLimitsOutputSchema
     }).strict();
-    SqlQueryOutputSchema = z6.object({
-      space: z6.string().min(1),
-      database: z6.string().min(1),
-      columns: z6.array(z6.string()),
-      rows: z6.array(z6.array(SqlOutputValueSchema)),
-      rowCount: z6.number().int().nonnegative(),
+    SqlQueryOutputSchema = z7.object({
+      space: z7.string().min(1),
+      database: z7.string().min(1),
+      columns: z7.array(z7.string()),
+      rows: z7.array(z7.array(SqlOutputValueSchema)),
+      rowCount: z7.number().int().nonnegative(),
       limits: SqlLimitsOutputSchema
     }).strict();
-    SqlExecuteOutputSchema = z6.object({
-      space: z6.string().min(1),
-      database: z6.string().min(1),
-      statementType: z6.enum(["insert", "update", "delete"]),
-      changes: z6.number().int().nonnegative(),
-      lastInsertRowId: z6.number().int().nullable(),
-      authorityNotice: z6.literal(SQL_WRITE_AUTHORITY_NOTICE)
+    SqlExecuteOutputSchema = z7.object({
+      space: z7.string().min(1),
+      database: z7.string().min(1),
+      statementType: z7.enum(["insert", "update", "delete"]),
+      changes: z7.number().int().nonnegative(),
+      lastInsertRowId: z7.number().int().nullable(),
+      authorityNotice: z7.literal(SQL_WRITE_AUTHORITY_NOTICE)
     }).strict();
     AUTHENTICATED_POSTURES2 = [
       "owner-openkey",
@@ -7346,6 +7806,8 @@ var init_contract = __esm({
       "resources_mismatch",
       "unsupported",
       "activation_rejected",
+      "activation_unavailable",
+      "activation_unauthenticated",
       "invalid"
     ];
     DELEGATION_CID_PATTERN = "^bafkr4i[a-z2-7]{52}$";
@@ -7354,7 +7816,7 @@ var init_contract = __esm({
 
 // src/delegation-binding.ts
 import { join as join2 } from "path";
-import * as nodeSdk3 from "@tinycloud/node-sdk";
+import * as nodeSdk5 from "@tinycloud/node-sdk";
 function bindingMigrationPath(profile) {
   return join2(profilePath(profile), "delegation-binding-migration.json");
 }
@@ -7450,6 +7912,9 @@ function skipped(reason) {
 }
 async function replayProfileDelegations(profile, node, options) {
   await prepareStoredDelegationReplay(profile, node, { host: options.host, migrate: options.migrate });
+  return replayStoredDelegationRecords(profile, node, options);
+}
+async function replayStoredDelegationRecords(profile, node, options) {
   const installed = [];
   const warnings = [];
   const seen = /* @__PURE__ */ new Set();
@@ -7490,7 +7955,7 @@ function storedDelegationForAnotherKey(entry, node) {
   const audience = verifiedCompactAudience(node, delegation);
   if (audience === void 0) return false;
   try {
-    return nodeSdk3.principalDidEquals(delegation.delegateDID, audience) && !nodeSdk3.principalDidEquals(audience, node.sessionDid);
+    return nodeSdk5.principalDidEquals(delegation.delegateDID, audience) && !nodeSdk5.principalDidEquals(audience, node.sessionDid);
   } catch {
     return false;
   }
@@ -7524,7 +7989,7 @@ async function assess(node, entry, options, mode) {
   let outsideRequest = false;
   let effectivePermissions;
   try {
-    const installed = await nodeSdk3.activateValidatedRuntimeDelegation(node, toActivate, {
+    const installed = await nodeSdk5.activateValidatedRuntimeDelegation(node, toActivate, {
       host: options.host,
       authorize: (effective) => {
         verifyCompactProof(toActivate);
@@ -7556,7 +8021,7 @@ function verifyCompactProof(delegation) {
   try {
     parseSignedCompactUcanAttenuation(withoutBearer(authorization), delegation.cid);
   } catch {
-    throw new nodeSdk3.RuntimeDelegationRejectedError("proof_invalid", "The compact delegation proof is invalid.");
+    throw new nodeSdk5.RuntimeDelegationRejectedError("proof_invalid", "The compact delegation proof is invalid.");
   }
 }
 function rejectionReason(error) {
@@ -7573,7 +8038,7 @@ async function bindingMigrationRecorded(profile) {
 async function signedCapabilities(node, delegation, host) {
   let signed;
   try {
-    await nodeSdk3.activateValidatedRuntimeDelegation(node, delegation, {
+    await nodeSdk5.activateValidatedRuntimeDelegation(node, delegation, {
       // The transport host is not signed authority; check it at replay instead.
       host: delegation.host ?? host,
       authorize: (effective) => {
@@ -7636,7 +8101,7 @@ var init_delegation_binding = __esm({
 });
 
 // src/operations/status.ts
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 function createStatusDefinition(params) {
   return {
     id: params.id,
@@ -7761,27 +8226,27 @@ var init_status = __esm({
     init_delegation_binding();
     init_errors2();
     init_state();
-    StatusInputSchema = z7.object({}).strict();
-    StatusOutputSchema = z7.object({
-      profile: z7.string().min(1),
-      host: z7.string().min(1),
-      posture: z7.enum([
+    StatusInputSchema = z8.object({}).strict();
+    StatusOutputSchema = z8.object({
+      profile: z8.string().min(1),
+      host: z8.string().min(1),
+      posture: z8.enum([
         "owner-openkey",
         "delegate-session",
         "local-owner-key",
         "unauthenticated"
       ]),
-      operatorType: z7.enum(["human", "agent"]).optional(),
-      principalDid: z7.string().min(1).optional(),
-      sessionDid: z7.string().min(1).optional(),
-      ownerDid: z7.string().min(1).optional(),
-      space: z7.string().min(1).optional(),
-      session: z7.object({
-        present: z7.boolean(),
-        expired: z7.boolean().nullable(),
-        expiresAt: z7.string().datetime({ offset: true }).nullable()
+      operatorType: z8.enum(["human", "agent"]).optional(),
+      principalDid: z8.string().min(1).optional(),
+      sessionDid: z8.string().min(1).optional(),
+      ownerDid: z8.string().min(1).optional(),
+      space: z8.string().min(1).optional(),
+      session: z8.object({
+        present: z8.boolean(),
+        expired: z8.boolean().nullable(),
+        expiresAt: z8.string().datetime({ offset: true }).nullable()
       }).strict(),
-      liveAdditionalDelegationCount: z7.number().int().nonnegative().describe(
+      liveAdditionalDelegationCount: z8.number().int().nonnegative().describe(
         "Stored, unexpired compact-UCAN or signed-login delegations with a valid request binding. Each still requires local proof validation and node activation before it grants authority."
       )
     }).strict();
@@ -7825,7 +8290,8 @@ function registeredOperationDefinitions() {
     ...authOperationDefinitions,
     ...explorationOperationDefinitions,
     ...sqlOperationDefinitions,
-    ...secretsGetOperationDefinitions
+    ...secretsGetOperationDefinitions,
+    ...secretsStatusOperationDefinitions
   ]);
   return operationDefinitions;
 }
@@ -7857,6 +8323,7 @@ var init_registry = __esm({
     init_auth();
     init_exploration();
     init_secrets_get();
+    init_secrets_status();
     init_sql();
     init_status();
   }
@@ -7909,6 +8376,9 @@ function resolvePosture(profile) {
   if (profile.authMethod === "local") return "local-owner-key";
   return "owner-openkey";
 }
+function isLocalOwnerProfile(profile) {
+  return resolvePosture(profile) === "local-owner-key" || profile.authMethod === "local" || typeof profile.privateKey === "string";
+}
 function profileNotFound2(profile) {
   return {
     ok: false,
@@ -7980,7 +8450,7 @@ var runtime_exports = {};
 __export(runtime_exports, {
   createInvocationRuntime: () => createInvocationRuntime
 });
-import * as nodeSdk4 from "@tinycloud/node-sdk";
+import * as nodeSdk6 from "@tinycloud/node-sdk";
 async function createInvocationRuntime(target, requirement = "authenticated") {
   const resolved = await resolveInvocationProfile(target);
   if (!resolved.ok) {
@@ -7994,11 +8464,14 @@ async function createInvocationRuntime(target, requirement = "authenticated") {
   if (requirement === "inspection") {
     return { ok: true, context: { summary } };
   }
+  if (requirement === "restored") {
+    return createRestoredRuntime(target, resolved);
+  }
   const profileName = summary.profile;
   try {
     const {
       TinyCloudNode: TinyCloudNodeConstructor
-    } = nodeSdk4;
+    } = nodeSdk6;
     const explicitPrivateKeyOverride = typeof target.privateKey === "string";
     const [session, key] = explicitPrivateKeyOverride ? [null, null] : await Promise.all([
       readSession(profileName),
@@ -8076,7 +8549,9 @@ async function createInvocationRuntime(target, requirement = "authenticated") {
     const runtime = {
       node,
       granted: canonicalizeCapabilities(livePermissions),
-      ...warnings.length === 0 ? {} : { warnings }
+      ...warnings.length === 0 ? {} : { warnings },
+      localOwner: explicitPrivateKeyOverride || isLocalOwnerProfile(profile),
+      skippedGrantReasons: warnings.map((warning) => warning.reason)
     };
     return {
       ok: true,
@@ -8100,11 +8575,112 @@ async function createInvocationRuntime(target, requirement = "authenticated") {
     ));
   }
 }
+async function createRestoredRuntime(target, resolved) {
+  const summary = resolved.context;
+  const profileName = summary.profile;
+  const profile = resolved.profile;
+  if (typeof target.privateKey === "string") {
+    return failed(summary, operationError(
+      "AUTH_REQUIRED",
+      "This operation never signs in; an explicit private key has no stored session.",
+      { details: { reason: "explicit_key" } }
+    ));
+  }
+  try {
+    const actualPosture = resolvePosture(profile);
+    const selectedPosture = profile.authMethod === "local" ? "local-owner-key" : summary.posture;
+    if (actualPosture !== summary.posture || selectedPosture !== summary.posture) {
+      return failed(
+        { ...summary, posture: actualPosture !== summary.posture ? actualPosture : selectedPosture },
+        operationError(
+          "PROFILE_POSTURE_NOT_ALLOWED",
+          "The selected profile changed posture during runtime resolution."
+        )
+      );
+    }
+    const [session, key] = await Promise.all([
+      readSession(profileName),
+      readJson(`${profilePath(profileName)}/key.json`)
+    ]);
+    const activeSession = session === null ? void 0 : normalizeSession(session, key);
+    if (activeSession === void 0) {
+      return failed(summary, operationError(
+        "SESSION_NOT_FOUND",
+        "The selected profile does not have an active session. This operation never signs in.",
+        { details: { recovery: signInRecovery(profileName, summary.posture) } }
+      ));
+    }
+    if (!await bindingMigrationRecorded(profileName)) {
+      const records = await readAdditionalDelegations(profileName);
+      if (records.some(
+        (entry) => storedDelegationKind(entry) === "compact" && !("authorityRequest" in entry)
+      )) {
+        return failed(summary, operationError(
+          "PROFILE_MIGRATION_REQUIRED",
+          `Profile "${profileName}" has a one-time stored-grant upgrade to finish. Run one authenticated command on it (tc --profile <profile> auth caps), then retry.`,
+          { retryable: false, details: { recovery: migrationRecovery(profileName) } }
+        ));
+      }
+    }
+    const { TinyCloudNode: TinyCloudNodeConstructor } = nodeSdk6;
+    const node = new TinyCloudNodeConstructor({
+      host: summary.host,
+      ...typeof profile.privateKey === "string" ? { privateKey: profile.privateKey } : {}
+    });
+    try {
+      await node.restoreSession(activeSession);
+    } catch (error) {
+      if (isRecord7(error) && error.code === "AUTH_EXPIRED") {
+        return failed(summary, operationError(
+          "AUTH_REQUIRED",
+          "The stored session has expired or is no longer valid. Sign in again.",
+          { retryable: false, details: { recovery: signInRecovery(profileName, summary.posture) } }
+        ));
+      }
+      throw error;
+    }
+    const activeSessionDid = normalizeDid(node.sessionDid);
+    const livePrincipalDid = normalizeDid(node.did);
+    const livePermissions = [...node.getVerifiedSessionCapabilities()];
+    const replay = await replayStoredDelegationRecords(
+      profileName,
+      node,
+      { host: summary.host, resolveSpace: operationSpaceResolver(node, summary.space) }
+    );
+    for (const installed of replay.installed) {
+      livePermissions.push(...installed.effectivePermissions);
+    }
+    const runtime = {
+      node,
+      granted: canonicalizeCapabilities(livePermissions),
+      ...replay.warnings.length === 0 ? {} : { warnings: replay.warnings },
+      localOwner: isLocalOwnerProfile(profile),
+      skippedGrantReasons: replay.warnings.map((warning) => warning.reason)
+    };
+    return {
+      ok: true,
+      context: {
+        summary: {
+          ...summary,
+          ...livePrincipalDid === void 0 ? {} : { principalDid: livePrincipalDid },
+          ...activeSessionDid === void 0 ? {} : { sessionDid: activeSessionDid }
+        },
+        runtime
+      }
+    };
+  } catch {
+    return failed(summary, operationError(
+      "NODE_ERROR",
+      "The selected profile runtime could not be initialized.",
+      { retryable: true }
+    ));
+  }
+}
 function spaceForAuthenticatedPrincipal(principal2) {
   if (principal2 === void 0) return void 0;
   try {
-    const pkh = nodeSdk4.parsePkhDid(principal2);
-    return pkh === null ? void 0 : nodeSdk4.makePkhSpaceId(pkh.address, pkh.chainId, "secrets");
+    const pkh = nodeSdk6.parsePkhDid(principal2);
+    return pkh === null ? void 0 : nodeSdk6.makePkhSpaceId(pkh.address, pkh.chainId, "secrets");
   } catch {
     return void 0;
   }
@@ -8154,6 +8730,7 @@ var init_runtime = __esm({
     init_authority();
     init_errors2();
     init_profile();
+    init_recovery();
     init_secrets();
     init_state();
     init_delegation_binding();
@@ -8168,11 +8745,14 @@ init_artifacts();
 import { createHash } from "crypto";
 import { isAbsolute as isAbsolute2 } from "path";
 import {
-  makePkhSpaceId as makePkhSpaceId3,
-  parsePkhDid as parsePkhDid3,
+  makePkhSpaceId as makePkhSpaceId4,
+  parsePkhDid as parsePkhDid4,
   parseSpaceUri as parseSpaceUri2
 } from "@tinycloud/node-sdk";
 
+// src/redaction.ts
+init_recovery();
+
 // src/safe-values.ts
 function safeOriginHost(value) {
   if (typeof value !== "string" || value.length === 0) return void 0;
@@ -8249,7 +8829,25 @@ function redactOperationError(_definition, error) {
 }
 var SAFE_ERROR_DETAIL_POLICIES = {
   INPUT_INVALID: {
-    issues: (value) => Array.isArray(value) ? safeIssueCodes(value) : void 0
+    issues: (value) => Array.isArray(value) ? safeIssueCodes(value) : void 0,
+    reason: (value) => value === "OWNER_MISMATCH" || value === "OWNER_DID_UNKNOWN" ? value : void 0
+  },
+  AUTH_REQUIRED: {
+    recovery: (value) => isSafeRecovery(value, "sign_in") ? { ...value } : void 0,
+    reason: (value) => value === "explicit_key" ? value : void 0
+  },
+  SESSION_NOT_FOUND: {
+    recovery: (value) => isSafeRecovery(value, "sign_in") ? { ...value } : void 0
+  },
+  PROFILE_MIGRATION_REQUIRED: {
+    recovery: (value) => isSafeRecovery(value, "complete_migration") ? { ...value } : void 0
+  },
+  // `secrets.get` not found for an identity no request link serves.
+  KV_NOT_FOUND: {
+    recoveryKind: (value) => value === "put_locally" || value === "not_requestable" ? value : void 0,
+    names: (value) => Array.isArray(value) && value.length >= 1 && value.length <= 10 && value.every((name) => typeof name === "string" && name.length <= 256 && /^[A-Z][A-Z0-9_]*$/.test(name)) ? [...value] : void 0,
+    scope: (value) => typeof value === "string" && value.length <= 256 && /^[a-z0-9]+(-[a-z0-9]+)*$/.test(value) ? value : void 0,
+    owner: (value) => typeof value === "string" && /^did:pkh:eip155:[1-9][0-9]*:0x[0-9a-fA-F]{40}$/.test(value) ? value : void 0
   },
   OPERATION_VERSION_UNSUPPORTED: {
     supportedVersions: (value) => Array.isArray(value) && value.every((item) => Number.isInteger(item)) ? value : void 0
@@ -8331,7 +8929,7 @@ async function invokeOperation(operationId, operationVersion, invocationTarget,
       operationError("INPUT_INVALID", "The invocation target is invalid.")
     );
   }
-  return withTinyCloudStateRoot(target.stateRoot, async () => {
+  const run = withTinyCloudStateRoot(target.stateRoot, async () => {
     const prepared = await prepareInvocation(
       operationId,
       operationVersion,
@@ -8341,6 +8939,33 @@ async function invokeOperation(operationId, operationVersion, invocationTarget,
     if (isPreparedError(prepared)) return prepared.result;
     return withRuntimeWarnings(await executePreparedInvocation(prepared), prepared);
   });
+  const { lookupOperation: lookupOperation2 } = await Promise.resolve().then(() => (init_registry(), registry_exports));
+  const lookup = lookupOperation2(operationId, operationVersion);
+  const deadlineMs = lookup.status === "found" ? lookup.definition.deadlineMs : void 0;
+  if (deadlineMs === void 0) return run;
+  return withResponseDeadline(run, deadlineMs, () => errorResult(
+    { operationId, operationVersion },
+    unresolvedContextSummary(target),
+    operationError(
+      "NODE_UNREACHABLE",
+      `The operation did not finish within ${deadlineMs / 1e3} s.`,
+      { retryable: true }
+    )
+  ));
+}
+async function withResponseDeadline(run, deadlineMs, expired) {
+  run.catch(() => {
+  });
+  let timer;
+  const deadline = new Promise((resolve2) => {
+    timer = setTimeout(() => resolve2(expired()), deadlineMs);
+    timer.unref();
+  });
+  try {
+    return await Promise.race([run, deadline]);
+  } finally {
+    clearTimeout(timer);
+  }
 }
 function withRuntimeWarnings(result, prepared) {
   const warnings = prepared.runtimeResolution.context.runtime?.warnings;
@@ -8415,7 +9040,7 @@ async function prepareInvocation(operationId, operationVersion, invocationTarget
       )
     ) };
   }
-  if (target.privateKey === void 0 && definition.runtime === "authenticated" && isOwnerPosture(inspectionResolution.context.summary.posture) && target.allowOwnerProfile !== true) {
+  if (target.privateKey === void 0 && requiresRuntime(definition.runtime) && isOwnerPosture(inspectionResolution.context.summary.posture) && target.allowOwnerProfile !== true) {
     return { status: "error", result: errorResult(
       operation,
       inspectionResolution.context.summary,
@@ -8425,15 +9050,15 @@ async function prepareInvocation(operationId, operationVersion, invocationTarget
       )
     ) };
   }
-  const runtimeResolution = definition.runtime === "inspection" ? inspectionResolution : await resolveRuntime(target, "authenticated");
+  const runtimeResolution = definition.runtime === "inspection" ? inspectionResolution : await resolveRuntime(target, definition.runtime);
   if (!runtimeResolution.ok) {
     return { status: "error", result: errorResult(
       operation,
       runtimeResolution.context,
-      runtimeResolution.error
+      redactOperationError(definition, runtimeResolution.error)
     ) };
   }
-  if (definition.runtime === "authenticated") {
+  if (requiresRuntime(definition.runtime)) {
     const actualPosture = runtimeResolution.context.summary.posture;
     if (!definition.postures.includes(actualPosture)) {
       return { status: "error", result: errorResult(
@@ -8820,6 +9445,15 @@ function exactCapabilities2(value) {
 function isOwnerPosture(posture) {
   return posture === "owner-openkey" || posture === "local-owner-key";
 }
+function requiresRuntime(requirement) {
+  switch (requirement) {
+    case "authenticated":
+    case "restored":
+      return true;
+    case "inspection":
+      return false;
+  }
+}
 function zodIssueDetails(error) {
   return {
     // The canonical error channel carries only schema-owned issue codes.