@tinycloud/operations 0.5.0-beta.1 → 0.5.0-beta.3

package/dist/delegation-binding.d.cts

@@ -1,7 +1,7 @@
 import { PermissionEntry, ValidatedRuntimeDelegation, RuntimeDelegationActivator, PortableDelegation } from '@tinycloud/node-sdk';
 import { O as OperationSpaceResolver } from './authority-ofwbEqmj.cjs';
-import { S as StoredGrantSkipReason, b as OperationWarning } from './contract-DfyrluLB.cjs';
-export { c as STORED_GRANT_SKIP_REASONS } from './contract-DfyrluLB.cjs';
+import { S as StoredGrantSkipReason, b as OperationWarning } from './contract-zRklonbR.cjs';
+export { c as STORED_GRANT_SKIP_REASONS } from './contract-zRklonbR.cjs';
 import '@tinycloud/sdk-core';
 
 /** Creates the one owner-aware resolver shared by operation matching paths. */
@@ -130,6 +130,18 @@ declare function replayProfileDelegations(profile: string, node: RuntimeDelegati
     installed: ValidatedRuntimeDelegation[];
     warnings: OperationWarning[];
 }>;
+/**
+ * Replays the profile's stored records as they are, under the replay rule,
+ * without migrating: no lock, no store or marker write. Runtimes that must
+ * never write profile state (the `"restored"` runtime) call only this.
+ */
+declare function replayStoredDelegationRecords(profile: string, node: RuntimeDelegationActivator, options: {
+    readonly host: string;
+    readonly resolveSpace: OperationSpaceResolver;
+}): Promise<{
+    installed: ValidatedRuntimeDelegation[];
+    warnings: OperationWarning[];
+}>;
 /** Return an audience only after the exact compact bytes, CID and signature verify. */
 declare function verifiedCompactAudience(node: RuntimeDelegationActivator, delegation: PortableDelegation): string | undefined;
 /** Only a verified signed audience and matching transport audience can identify a foreign grant. */
@@ -171,4 +183,4 @@ declare function inspectStoredDelegation(entry: unknown, options?: {
 /** An unreadable marker counts as migrated: a damaged marker never reopens migration. */
 declare function bindingMigrationRecorded(profile: string): Promise<boolean>;
 
-export { BINDING_NOTES, type BindingSource, OperationWarning, type StoredDelegationInspection, type StoredDelegationReplay, type StoredDelegationSource, StoredGrantSkipReason, activateUnboundImport, bindCliGrant, bindingMigrationPath, bindingMigrationRecorded, inspectStoredDelegation, mergeDelegationsWithoutRequest, operationSpaceResolver, prepareStoredDelegationReplay, replayLimit, replayProfileDelegations, replayStoredDelegation, storedDelegationForAnotherKey, storedDelegationKind, storedDelegationSource, verifiedCompactAudience, verifiedStoredCid, withoutBearer };
+export { BINDING_NOTES, type BindingSource, OperationWarning, type StoredDelegationInspection, type StoredDelegationReplay, type StoredDelegationSource, StoredGrantSkipReason, activateUnboundImport, bindCliGrant, bindingMigrationPath, bindingMigrationRecorded, inspectStoredDelegation, mergeDelegationsWithoutRequest, operationSpaceResolver, prepareStoredDelegationReplay, replayLimit, replayProfileDelegations, replayStoredDelegation, replayStoredDelegationRecords, storedDelegationForAnotherKey, storedDelegationKind, storedDelegationSource, verifiedCompactAudience, verifiedStoredCid, withoutBearer };

package/dist/delegation-binding.d.ts

@@ -1,7 +1,7 @@
 import { PermissionEntry, ValidatedRuntimeDelegation, RuntimeDelegationActivator, PortableDelegation } from '@tinycloud/node-sdk';
 import { O as OperationSpaceResolver } from './authority-ofwbEqmj.js';
-import { S as StoredGrantSkipReason, b as OperationWarning } from './contract-DfyrluLB.js';
-export { c as STORED_GRANT_SKIP_REASONS } from './contract-DfyrluLB.js';
+import { S as StoredGrantSkipReason, b as OperationWarning } from './contract-zRklonbR.js';
+export { c as STORED_GRANT_SKIP_REASONS } from './contract-zRklonbR.js';
 import '@tinycloud/sdk-core';
 
 /** Creates the one owner-aware resolver shared by operation matching paths. */
@@ -130,6 +130,18 @@ declare function replayProfileDelegations(profile: string, node: RuntimeDelegati
     installed: ValidatedRuntimeDelegation[];
     warnings: OperationWarning[];
 }>;
+/**
+ * Replays the profile's stored records as they are, under the replay rule,
+ * without migrating: no lock, no store or marker write. Runtimes that must
+ * never write profile state (the `"restored"` runtime) call only this.
+ */
+declare function replayStoredDelegationRecords(profile: string, node: RuntimeDelegationActivator, options: {
+    readonly host: string;
+    readonly resolveSpace: OperationSpaceResolver;
+}): Promise<{
+    installed: ValidatedRuntimeDelegation[];
+    warnings: OperationWarning[];
+}>;
 /** Return an audience only after the exact compact bytes, CID and signature verify. */
 declare function verifiedCompactAudience(node: RuntimeDelegationActivator, delegation: PortableDelegation): string | undefined;
 /** Only a verified signed audience and matching transport audience can identify a foreign grant. */
@@ -171,4 +183,4 @@ declare function inspectStoredDelegation(entry: unknown, options?: {
 /** An unreadable marker counts as migrated: a damaged marker never reopens migration. */
 declare function bindingMigrationRecorded(profile: string): Promise<boolean>;
 
-export { BINDING_NOTES, type BindingSource, OperationWarning, type StoredDelegationInspection, type StoredDelegationReplay, type StoredDelegationSource, StoredGrantSkipReason, activateUnboundImport, bindCliGrant, bindingMigrationPath, bindingMigrationRecorded, inspectStoredDelegation, mergeDelegationsWithoutRequest, operationSpaceResolver, prepareStoredDelegationReplay, replayLimit, replayProfileDelegations, replayStoredDelegation, storedDelegationForAnotherKey, storedDelegationKind, storedDelegationSource, verifiedCompactAudience, verifiedStoredCid, withoutBearer };
+export { BINDING_NOTES, type BindingSource, OperationWarning, type StoredDelegationInspection, type StoredDelegationReplay, type StoredDelegationSource, StoredGrantSkipReason, activateUnboundImport, bindCliGrant, bindingMigrationPath, bindingMigrationRecorded, inspectStoredDelegation, mergeDelegationsWithoutRequest, operationSpaceResolver, prepareStoredDelegationReplay, replayLimit, replayProfileDelegations, replayStoredDelegation, replayStoredDelegationRecords, storedDelegationForAnotherKey, storedDelegationKind, storedDelegationSource, verifiedCompactAudience, verifiedStoredCid, withoutBearer };

package/dist/delegation-binding.js

@@ -4493,6 +4493,8 @@ var STORED_GRANT_SKIP_REASONS = [
   "resources_mismatch",
   "unsupported",
   "activation_rejected",
+  "activation_unavailable",
+  "activation_unauthenticated",
   "invalid"
 ];
 var DELEGATION_CID_PATTERN = "^bafkr4i[a-z2-7]{52}$";
@@ -4726,6 +4728,9 @@ function skipped(reason) {
 }
 async function replayProfileDelegations(profile, node, options) {
   await prepareStoredDelegationReplay(profile, node, { host: options.host, migrate: options.migrate });
+  return replayStoredDelegationRecords(profile, node, options);
+}
+async function replayStoredDelegationRecords(profile, node, options) {
   const installed = [];
   const warnings = [];
   const seen = /* @__PURE__ */ new Set();
@@ -4916,6 +4921,7 @@ export {
   replayLimit,
   replayProfileDelegations,
   replayStoredDelegation,
+  replayStoredDelegationRecords,
   storedDelegationForAnotherKey,
   storedDelegationKind,
   storedDelegationSource,