@tinycloud/web-sdk 2.11.0-beta.9 → 3.0.0-beta.0

package/dist/modules/tcw.d.ts

@@ -9,12 +9,13 @@
  *
  * @packageDocumentation
  */
-import { TinyCloudNode, type BootstrapWarning, type DelegateToOptions, type DelegateToResult, type ISessionStorage, type SignStrategy } from "@tinycloud/node-sdk/core";
+import { TinyCloudNode, type BootstrapWarning, type DelegateToOptions, type DelegateToResult, type ISessionStorage, type SignStrategy, type ValidatedRuntimeDelegation, type UnifiedOwnerRootInput, type UnifiedOwnerRootReceipt } from "@tinycloud/node-sdk/core";
 import { IKVService, ISQLService, IDuckDbService, IDataVaultService, ISecretsService, ISpaceService, ISpace, ISharingService, ICapabilityKeyRegistry, IHooksService, IEncryptionService, DelegationManager, Delegation, DelegationRevocationReceipt, CreateDelegationParams, Result, DelegationError, ClientSession, Extension, type TelemetryConfig, ISpaceCreationHandler, type Manifest, type ComposedManifestRequest, type AccountService, type ResolvedDelegate, type PermissionEntry, type NetworkDescriptor, type CreateOwnerDelegationParams, type OwnerDelegationReceipt, type RegisterOwnerSharePolicyParams, type OwnerSharePolicyRegistrationReceipt, type LocalNodeIdentityStore, SignInOptions } from "@tinycloud/sdk-core";
-import type { providers } from "ethers";
+import { type BrowserProvider, type BrowserWalletProvider } from "../adapters/browserProvider";
 import { RPCProviders, ClientConfig } from "../providers";
 import type { NotificationConfig } from "../notifications/types";
 import type { PortableDelegation, DelegatedAccess } from "@tinycloud/node-sdk/core";
+import { CredentialsService } from "../credentials";
 declare global {
     interface Window {
         ethereum?: any;
@@ -78,6 +79,8 @@ export interface Config extends ClientConfig {
     persistSession?: boolean;
     /** Custom session storage implementation. */
     sessionStorage?: ISessionStorage;
+    /** Whether to run node-sdk's canonical first-account bootstrap after sign-in. */
+    autoBootstrapAccount?: boolean;
     /** Browser storage key prefix for isolating apps/environments. */
     sessionStorageKeyPrefix?: string;
     /** SIWE domain (default: window.location.hostname in browser, app.tinycloud.xyz otherwise) */
@@ -102,7 +105,7 @@ export interface Config extends ClientConfig {
     capabilityRequest?: ComposedManifestRequest;
     /** Strategy for TinyCloud root signature requests. */
     signStrategy?: SignStrategy;
-    /** Include implicit account registry permissions when composing `manifest`. Default true. */
+    /** Include canonical account registry read/create-update/list permissions in plain sessions and composed manifests. Default true. */
     includeAccountRegistryPermissions?: boolean;
     /** Default-off service telemetry. */
     telemetry?: TelemetryConfig;
@@ -133,8 +136,10 @@ export interface ShareReceiveResult<T = unknown> {
     spaceId: string;
 }
 export declare class TinyCloudWeb {
-    /** The Ethereum provider */
-    provider: providers.Web3Provider;
+    /** The connected wallet's raw EIP-1193 provider. */
+    provider: BrowserProvider;
+    /** The normalized EIP-1193 provider used by the SDK. */
+    eip1193Provider: BrowserProvider;
     /** Supported RPC Providers */
     static RPCProviders: typeof RPCProviders;
     /** Underlying TinyCloudNode (created after WASM init) */
@@ -148,6 +153,7 @@ export declare class TinyCloudWeb {
     private sessionStorage?;
     private _sessionRestoreStatus;
     private _secrets;
+    private _credentialsService?;
     /** Promise that resolves when WASM + node are ready */
     private _initPromise;
     /** User config */
@@ -224,6 +230,8 @@ export declare class TinyCloudWeb {
     get account(): AccountService;
     get hosts(): string[];
     get sessionRestoreStatus(): SessionRestoreStatus;
+    /** Holder-bound OpenCredentials issuance using the active TinyCloud session. */
+    get credentials(): CredentialsService;
     space(nameOrUri: string): ISpace;
     get kvPrefix(): string;
     getEncryptionNetwork(nameOrNetworkId?: string): Promise<NetworkDescriptor | null>;
@@ -263,13 +271,26 @@ export declare class TinyCloudWeb {
     chainId: () => number | undefined;
     get did(): string;
     get sessionDid(): string;
+    get credentialHolderDid(): string;
+    get credentialHolderKid(): string;
     get isSessionOnly(): boolean;
     get isWalletConnected(): boolean;
     /** Sign protocol bytes with the established session key without exposing key material. */
     signSessionBytes(bytes: Uint8Array): Promise<Uint8Array>;
+    createUnifiedOwnerRoot(input: UnifiedOwnerRootInput): Promise<UnifiedOwnerRootReceipt>;
+    autoSignCredentialBytes(bytes: Uint8Array): Promise<Uint8Array | undefined>;
+    approveCredentialBytes(bytes: Uint8Array): Promise<Uint8Array>;
+    activateCompactRuntimeDelegation(input: {
+        readonly authorization: string;
+        readonly cid: string;
+        readonly host: string;
+    }): Promise<ValidatedRuntimeDelegation>;
+    credentialSpaceOwnerDid(spaceId: string): string;
+    /** Root authorization CID of the active session, which {@link session} omits. */
+    accountAuthorizationCid(): string;
     extend(_extension: Extension): void;
     cleanup(): void;
-    connectWallet(provider: providers.ExternalProvider | providers.Web3Provider, options?: {
+    connectWallet(provider: BrowserWalletProvider, options?: {
         spacePrefix?: string;
     }): void;
     createDelegation(params: {
@@ -345,6 +366,12 @@ export declare class TinyCloudWeb {
         delegateDID: string;
         disableSubDelegation?: boolean;
         expiryMs?: number;
+        resources?: Array<{
+            service: string;
+            space?: string;
+            path: string;
+            actions: string[];
+        }>;
     }): Promise<PortableDelegation>;
     delegate(params: CreateDelegationParams): Promise<Result<Delegation, DelegationError>>;
     revokeDelegation(cid: string): Promise<Result<DelegationRevocationReceipt, DelegationError>>;

package/dist/openkey-session.d.ts

@@ -1,8 +1,8 @@
-import type { ClientSession, Manifest } from "@tinycloud/sdk-core";
+import type { ClientSession, Manifest, SignCallback } from "@tinycloud/sdk-core";
 import { TinyCloudWeb, type Config } from "./modules/tcw";
 declare const SESSION_EXPIRATION_MS: 3600000;
 declare const SESSION_STORAGE_KEY_PREFIX: "coordinationos:tinycloud:session:v1:";
-type CoordinationOsControlledConfig = "provider" | "providers" | "signStrategy" | "manifest" | "capabilityRequest" | "siweConfig" | "nonce" | "domain" | "persistSession" | "sessionStorage" | "sessionExpirationMs" | "sessionStorageKeyPrefix" | "includeAccountRegistryPermissions" | "autoCreateSpace" | "spaceCreationHandler" | "spacePrefix" | "kvPrefix";
+type CoordinationOsControlledConfig = "provider" | "providers" | "signStrategy" | "manifest" | "capabilityRequest" | "siweConfig" | "nonce" | "domain" | "persistSession" | "sessionStorage" | "sessionExpirationMs" | "sessionStorageKeyPrefix" | "includeAccountRegistryPermissions" | "autoCreateSpace" | "autoBootstrapAccount" | "spaceCreationHandler" | "spacePrefix" | "kvPrefix";
 export type EstablishOpenKeySessionStatus = "established" | "restored" | "missing" | "expired" | "corrupt" | "storage-unavailable" | "restore-failed" | "stale" | "disabled";
 export interface EstablishOpenKeySessionOptions {
     providerToken?: string;
@@ -18,6 +18,8 @@ export interface EstablishOpenKeySessionOptions {
     sessionStorageKeyPrefix: typeof SESSION_STORAGE_KEY_PREFIX;
     tinycloud?: Omit<Config, CoordinationOsControlledConfig>;
     fetch?: typeof fetch;
+    /** Normal OpenKey consent surface for credential bindings outside Auto-Sign policy. */
+    requestCredentialApproval?: SignCallback;
 }
 export interface EstablishOpenKeySessionResult {
     client: TinyCloudWeb;

package/dist/providers/extension.d.ts

@@ -2,13 +2,13 @@
  * Browser-coupled extension types.
  *
  * These types stay in web-sdk because they depend on browser-specific
- * APIs (@tinycloud/web-sdk-wasm, ethers Web3Provider, axios).
+ * APIs (@tinycloud/web-sdk-wasm, EIP-1193 provider, axios).
  *
  * @packageDocumentation
  */
 import { tcwSession } from "@tinycloud/web-sdk-wasm";
 import { AxiosInstance } from "axios";
-import { ethers } from "ethers";
+import type { BrowserProvider } from "../adapters/browserProvider";
 import type { ClientSession, SiweConfig } from "@tinycloud/sdk-core";
 import type { ClientConfig } from "./config";
 /** Extra SIWE fields. */
@@ -26,7 +26,7 @@ export interface IConnected {
     /** List of enabled extensions. */
     extensions: Extension[];
     /** Web3 provider. */
-    provider: ethers.providers.Web3Provider;
+    provider: BrowserProvider;
     /** Promise that is initialized on construction to run the "afterConnect" methods of extensions. */
     afterConnectHooksPromise: Promise<void>;
     /** Method to verify if extension is enabled. */

package/dist/providers/types.d.ts

@@ -4,10 +4,13 @@
  * @packageDocumentation
  */
 import { z } from "zod";
-import { providers } from "ethers";
-import { ConnectionInfo } from "ethers/lib/utils";
 import type { AxiosRequestConfig } from "axios";
 import type { ClientSession } from "@tinycloud/sdk-core";
+export type ConnectionInfo = Record<string, unknown>;
+export type Networkish = string | number | {
+    chainId: number | string;
+    name?: string;
+};
 /** Enum of supported EthersJS providers. */
 export declare enum RPCProviders {
     AlchemyProvider = "alchemy",
@@ -110,13 +113,13 @@ export type AnkrProvider = {
 export type CustomProvider = {
     service: RPCProviders.CustomProvider;
     url?: string | ConnectionInfo;
-    network?: providers.Networkish;
+    network?: Networkish;
 };
 /** Generic provider settings. */
 export type GenericProvider = {
     service: RPCProviders;
     url?: string | ConnectionInfo;
-    network?: providers.Networkish;
+    network?: Networkish;
     apiKey?: string | InfuraProviderProjectSettings;
 };
 /** Supported provider types. */
@@ -385,7 +388,7 @@ export declare const GenericProviderSchema: z.ZodObject<{
         projectSecret?: string;
     }>]>>;
 }, "strip", z.ZodTypeAny, {
-    service?: "alchemy" | "ankr" | "cloudflare" | "custom" | "etherscan" | "infura" | "pocket";
+    service?: "custom" | "alchemy" | "ankr" | "cloudflare" | "etherscan" | "infura" | "pocket";
     apiKey?: string | {
         projectId?: string;
         projectSecret?: string;
@@ -393,7 +396,7 @@ export declare const GenericProviderSchema: z.ZodObject<{
     network?: unknown;
     url?: unknown;
 }, {
-    service?: "alchemy" | "ankr" | "cloudflare" | "custom" | "etherscan" | "infura" | "pocket";
+    service?: "custom" | "alchemy" | "ankr" | "cloudflare" | "etherscan" | "infura" | "pocket";
     apiKey?: string | {
         projectId?: string;
         projectSecret?: string;

package/dist/providers/utils.d.ts

@@ -3,18 +3,13 @@
  *
  * @packageDocumentation
  */
-import { ethers } from "ethers";
-import { EnsData, RPCProvider } from "./types";
-/**
- * @param rpc - RPCProvider
- * @returns an ethers provider based on the RPC configuration.
- */
-export declare const getProvider: (rpc?: RPCProvider) => ethers.providers.BaseProvider;
+import type { EnsData } from "./types";
+import type { BrowserProvider } from "../adapters/browserProvider";
 /**
  * Resolves ENS data supported by TCW.
- * @param provider - Ethers provider.
+ * @param provider - EIP-1193 RPC provider.
  * @param address - User address.
  * @returns Object containing ENS data.
  */
-export declare const resolveEns: (provider: ethers.providers.BaseProvider, address: string) => Promise<EnsData>;
+export declare const resolveEns: (provider: BrowserProvider, address: string) => Promise<EnsData>;
 //# sourceMappingURL=utils.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinycloud/web-sdk",
-  "version": "2.11.0-beta.9",
+  "version": "3.0.0-beta.0",
   "description": "A set of tools and utilities to help you build your app with TinyCloud.",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -41,16 +41,12 @@
     "test": "jest"
   },
   "dependencies": {
-    "@metamask/detect-provider": "^1.2.0",
     "@multiformats/multiaddr": "^13.0.1",
     "@multiformats/multiaddr-to-uri": "^12.0.0",
-    "@tinycloud/node-sdk": "2.11.0-beta.9",
-    "@tinycloud/sdk-core": "2.11.0-beta.9",
-    "@tinycloud/web-sdk-wasm": "1.7.6-beta.0",
+    "@tinycloud/node-sdk": "3.0.0-beta.0",
+    "@tinycloud/sdk-core": "3.0.0-beta.0",
+    "@tinycloud/web-sdk-wasm": "1.7.6",
     "axios": "^1.7.9",
-    "ethers": "^5.7.2",
-    "lodash.merge": "^4.6.2",
-    "siwe": "^3.0.0",
     "viem": "^2.45.0",
     "zod": "^3.22.0"
   },
@@ -59,7 +55,6 @@
     "@microsoft/api-documenter": "^7.26.5",
     "@microsoft/api-extractor": "^7.49.1",
     "@types/jest": "^30.0.0",
-    "@types/lodash.merge": "^4.6.9",
     "@types/node": "^18.19.74",
     "@types/webpack": "^5.28.5",
     "@typescript-eslint/eslint-plugin": "^8.57.1",

package/dist/modules/registry/Registry.d.ts

@@ -1,59 +0,0 @@
-import { type Address } from "viem";
-import { providers } from "ethers";
-export declare const REGISTRY_CONTRACT_ADDRESS: {
-    1: string;
-    11155111: string;
-};
-export interface RegistryConfig {
-    provider: providers.Web3Provider;
-}
-/**
- * Registry provides access to the TinyCloud Registry contract for resolving
- * account addresses to their associated node identifiers.
- */
-export declare class Registry {
-    provider: providers.Web3Provider;
-    /**
-     * Creates a new instance of the Registry class.
-     *
-     * @param config - Configuration options for the Registry
-     * @param config.rpcUrl - The RPC URL to connect to the blockchain
-     * @param config.contractAddress - The address of the Registry contract
-     */
-    constructor(config: RegistryConfig);
-    /**
-     * Gets the node identifier associated with an account address.
-     *
-     * @param account - The account address to look up
-     * @returns A Promise containing the node identifier string
-     *
-     * @example
-     * ```ts
-     * const registry = new Registry({
-     *   rpcUrl: 'https://mainnet.base.org',
-     *   contractAddress: '0x...'
-     * });
-     * const node = await registry.getNode('0x1234...');
-     * console.log(node); // 'my-node-id'
-     * ```
-     */
-    getNode(account: Address): Promise<string>;
-    addressNode(): Promise<string>;
-    /**
-     * Checks if an account has a registered node.
-     *
-     * @param account - The account address to check
-     * @returns A Promise containing a boolean indicating if the account has a node
-     *
-     * @example
-     * ```ts
-     * const hasNode = await registry.hasNode('0x1234...');
-     * if (hasNode) {
-     *   const node = await registry.getNode('0x1234...');
-     * }
-     * ```
-     */
-    hasNode(account: Address): Promise<boolean>;
-}
-export default Registry;
-//# sourceMappingURL=Registry.d.ts.map