@tinycloud/web-sdk 2.11.0-beta.9 → 2.11.1-beta.0

package/dist/modules/tcw.d.ts

@@ -9,12 +9,13 @@
  *
  * @packageDocumentation
  */
-import { TinyCloudNode, type BootstrapWarning, type DelegateToOptions, type DelegateToResult, type ISessionStorage, type SignStrategy } from "@tinycloud/node-sdk/core";
+import { TinyCloudNode, type BootstrapWarning, type DelegateToOptions, type DelegateToResult, type ISessionStorage, type SignStrategy, type ValidatedRuntimeDelegation, type UnifiedOwnerRootInput, type UnifiedOwnerRootReceipt } from "@tinycloud/node-sdk/core";
 import { IKVService, ISQLService, IDuckDbService, IDataVaultService, ISecretsService, ISpaceService, ISpace, ISharingService, ICapabilityKeyRegistry, IHooksService, IEncryptionService, DelegationManager, Delegation, DelegationRevocationReceipt, CreateDelegationParams, Result, DelegationError, ClientSession, Extension, type TelemetryConfig, ISpaceCreationHandler, type Manifest, type ComposedManifestRequest, type AccountService, type ResolvedDelegate, type PermissionEntry, type NetworkDescriptor, type CreateOwnerDelegationParams, type OwnerDelegationReceipt, type RegisterOwnerSharePolicyParams, type OwnerSharePolicyRegistrationReceipt, type LocalNodeIdentityStore, SignInOptions } from "@tinycloud/sdk-core";
 import type { providers } from "ethers";
 import { RPCProviders, ClientConfig } from "../providers";
 import type { NotificationConfig } from "../notifications/types";
 import type { PortableDelegation, DelegatedAccess } from "@tinycloud/node-sdk/core";
+import { CredentialsService } from "../credentials";
 declare global {
     interface Window {
         ethereum?: any;
@@ -78,6 +79,8 @@ export interface Config extends ClientConfig {
     persistSession?: boolean;
     /** Custom session storage implementation. */
     sessionStorage?: ISessionStorage;
+    /** Whether to run node-sdk's canonical first-account bootstrap after sign-in. */
+    autoBootstrapAccount?: boolean;
     /** Browser storage key prefix for isolating apps/environments. */
     sessionStorageKeyPrefix?: string;
     /** SIWE domain (default: window.location.hostname in browser, app.tinycloud.xyz otherwise) */
@@ -102,7 +105,7 @@ export interface Config extends ClientConfig {
     capabilityRequest?: ComposedManifestRequest;
     /** Strategy for TinyCloud root signature requests. */
     signStrategy?: SignStrategy;
-    /** Include implicit account registry permissions when composing `manifest`. Default true. */
+    /** Include canonical account registry read/create-update/list permissions in plain sessions and composed manifests. Default true. */
     includeAccountRegistryPermissions?: boolean;
     /** Default-off service telemetry. */
     telemetry?: TelemetryConfig;
@@ -148,6 +151,7 @@ export declare class TinyCloudWeb {
     private sessionStorage?;
     private _sessionRestoreStatus;
     private _secrets;
+    private _credentialsService?;
     /** Promise that resolves when WASM + node are ready */
     private _initPromise;
     /** User config */
@@ -224,6 +228,8 @@ export declare class TinyCloudWeb {
     get account(): AccountService;
     get hosts(): string[];
     get sessionRestoreStatus(): SessionRestoreStatus;
+    /** Holder-bound OpenCredentials issuance using the active TinyCloud session. */
+    get credentials(): CredentialsService;
     space(nameOrUri: string): ISpace;
     get kvPrefix(): string;
     getEncryptionNetwork(nameOrNetworkId?: string): Promise<NetworkDescriptor | null>;
@@ -263,10 +269,23 @@ export declare class TinyCloudWeb {
     chainId: () => number | undefined;
     get did(): string;
     get sessionDid(): string;
+    get credentialHolderDid(): string;
+    get credentialHolderKid(): string;
     get isSessionOnly(): boolean;
     get isWalletConnected(): boolean;
     /** Sign protocol bytes with the established session key without exposing key material. */
     signSessionBytes(bytes: Uint8Array): Promise<Uint8Array>;
+    createUnifiedOwnerRoot(input: UnifiedOwnerRootInput): Promise<UnifiedOwnerRootReceipt>;
+    autoSignCredentialBytes(bytes: Uint8Array): Promise<Uint8Array | undefined>;
+    approveCredentialBytes(bytes: Uint8Array): Promise<Uint8Array>;
+    activateCompactRuntimeDelegation(input: {
+        readonly authorization: string;
+        readonly cid: string;
+        readonly host: string;
+    }): Promise<ValidatedRuntimeDelegation>;
+    credentialSpaceOwnerDid(spaceId: string): string;
+    /** Root authorization CID of the active session, which {@link session} omits. */
+    accountAuthorizationCid(): string;
     extend(_extension: Extension): void;
     cleanup(): void;
     connectWallet(provider: providers.ExternalProvider | providers.Web3Provider, options?: {
@@ -345,6 +364,12 @@ export declare class TinyCloudWeb {
         delegateDID: string;
         disableSubDelegation?: boolean;
         expiryMs?: number;
+        resources?: Array<{
+            service: string;
+            space?: string;
+            path: string;
+            actions: string[];
+        }>;
     }): Promise<PortableDelegation>;
     delegate(params: CreateDelegationParams): Promise<Result<Delegation, DelegationError>>;
     revokeDelegation(cid: string): Promise<Result<DelegationRevocationReceipt, DelegationError>>;

package/dist/openkey-session.d.ts

@@ -1,8 +1,8 @@
-import type { ClientSession, Manifest } from "@tinycloud/sdk-core";
+import type { ClientSession, Manifest, SignCallback } from "@tinycloud/sdk-core";
 import { TinyCloudWeb, type Config } from "./modules/tcw";
 declare const SESSION_EXPIRATION_MS: 3600000;
 declare const SESSION_STORAGE_KEY_PREFIX: "coordinationos:tinycloud:session:v1:";
-type CoordinationOsControlledConfig = "provider" | "providers" | "signStrategy" | "manifest" | "capabilityRequest" | "siweConfig" | "nonce" | "domain" | "persistSession" | "sessionStorage" | "sessionExpirationMs" | "sessionStorageKeyPrefix" | "includeAccountRegistryPermissions" | "autoCreateSpace" | "spaceCreationHandler" | "spacePrefix" | "kvPrefix";
+type CoordinationOsControlledConfig = "provider" | "providers" | "signStrategy" | "manifest" | "capabilityRequest" | "siweConfig" | "nonce" | "domain" | "persistSession" | "sessionStorage" | "sessionExpirationMs" | "sessionStorageKeyPrefix" | "includeAccountRegistryPermissions" | "autoCreateSpace" | "autoBootstrapAccount" | "spaceCreationHandler" | "spacePrefix" | "kvPrefix";
 export type EstablishOpenKeySessionStatus = "established" | "restored" | "missing" | "expired" | "corrupt" | "storage-unavailable" | "restore-failed" | "stale" | "disabled";
 export interface EstablishOpenKeySessionOptions {
     providerToken?: string;
@@ -18,6 +18,8 @@ export interface EstablishOpenKeySessionOptions {
     sessionStorageKeyPrefix: typeof SESSION_STORAGE_KEY_PREFIX;
     tinycloud?: Omit<Config, CoordinationOsControlledConfig>;
     fetch?: typeof fetch;
+    /** Normal OpenKey consent surface for credential bindings outside Auto-Sign policy. */
+    requestCredentialApproval?: SignCallback;
 }
 export interface EstablishOpenKeySessionResult {
     client: TinyCloudWeb;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinycloud/web-sdk",
-  "version": "2.11.0-beta.9",
+  "version": "2.11.1-beta.0",
   "description": "A set of tools and utilities to help you build your app with TinyCloud.",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -44,9 +44,9 @@
     "@metamask/detect-provider": "^1.2.0",
     "@multiformats/multiaddr": "^13.0.1",
     "@multiformats/multiaddr-to-uri": "^12.0.0",
-    "@tinycloud/node-sdk": "2.11.0-beta.9",
-    "@tinycloud/sdk-core": "2.11.0-beta.9",
-    "@tinycloud/web-sdk-wasm": "1.7.6-beta.0",
+    "@tinycloud/node-sdk": "2.11.1-beta.0",
+    "@tinycloud/sdk-core": "2.11.1-beta.0",
+    "@tinycloud/web-sdk-wasm": "1.7.6",
     "axios": "^1.7.9",
     "ethers": "^5.7.2",
     "lodash.merge": "^4.6.2",