@aicloud360/dsh-cloud-disk-api-provider 0.1.1-rc.2 → 0.1.1-rc.2.cloud.1

package/README.md

@@ -11,7 +11,7 @@ Host-side direct 360 CloudDisk OpenAPI provider. It exchanges a Host-held user c
 | Field | Meaning |
 |---|---|
 | `credentialRef` | User API-key reference. |
-| `signingSecretRef` | Application signing-secret reference. |
+| `signingSecret` | Required application signing material from Host configuration. |
 | `endpoint` | Audited OpenAPI endpoint. |
 | `clientEnv`, `clientSource`, `subChannel` | Deployment identity sent during authentication. |
 | `credentials`, `http` | Host credential and HTTP providers. |
@@ -23,14 +23,14 @@ The user key, access token, qid, signing secret, request headers, and raw API re
 
 `getUser()` exchanges the user credential and reads the current user. `list()` maps `File.getList` pages; listed directory ids are resolved to their path only within the current credential generation. `search()` maps form-encoded `File.searchList` pages. Both cursors are opaque source-page numbers.
 
-The provider rejects a missing user credential or signing secret before a signed request. A credential change clears the in-memory directory-path map. Caller cancellation is not retried; retryable transport failures and retryable HTTP statuses are bounded by `maxRetries`.
+The provider rejects a missing user credential before a request. A missing signing secret rejects Bundle configuration at load. A credential change clears the in-memory directory-path map. Caller cancellation is not retried; retryable transport failures and retryable HTTP statuses are bounded by `maxRetries`.
 
 ## Deployment prerequisite
 
-The signing secret needs an approved, rotatable Host-only source. Do not copy signing material from an MCP reference project or commit it to source, fixtures, Bundle YAML, or client configuration. The package includes a production fetch transport, but remains a tested Provider implementation until that secret source and Provider registration are composed into the Bundle.
+The signing secret is a literal Host configuration value. The CloudDisk Bundle intentionally places a replacement marker in its tracked patch file, so replacing it with a real value exposes that value to every reader of the Bundle. The package includes a production fetch transport and the Bundle composes its Provider registration.
 
 ## Known Limitations and Deferred Work
 
 - The Provider implements only user lookup, directory listing, and search. It has no upload, download, mutation, sharing, or transfer API.
 - One configured Provider serves one Host process. Multi-account switching and remote change observation are not implemented.
-- Signing material remains a user-managed Host credential in this release; a managed distribution or rotation service is not part of this package.
+- Signing material has no managed distribution or rotation service in this package.

package/README.zh.md

@@ -11,7 +11,7 @@ Host 侧直连 360 云盘 OpenAPI Provider。它用 Host 保存的用户凭据
 | 字段 | 含义 |
 |---|---|
 | `credentialRef` | 用户 API key 引用。 |
-| `signingSecretRef` | 应用签名密钥引用。 |
+| `signingSecret` | 来自 Host 配置的必填应用签名材料。 |
 | `endpoint` | 已审计的 OpenAPI endpoint。 |
 | `clientEnv`、`clientSource`、`subChannel` | 鉴权时发送的部署身份。 |
 | `credentials`、`http` | Host 凭据和 HTTP Provider。 |
@@ -23,14 +23,14 @@ Host 侧直连 360 云盘 OpenAPI Provider。它用 Host 保存的用户凭据
 
 `getUser()` 交换用户凭据并读取当前用户。`list()` 映射 `File.getList` 分页；已列出的目录 id 仅在当前凭据代次内解析为路径。`search()` 映射表单编码的 `File.searchList` 分页。两种 cursor 都是不透明的源页码。
 
-缺少用户凭据或签名密钥时，Provider 会在发出签名请求前拒绝。凭据变化会清除内存目录路径映射。调用方取消不会重试；可重试的传输失败和 HTTP 状态由 `maxRetries` 限制。
+缺少用户凭据时，Provider 会在发出请求前拒绝。缺少签名密钥会在 Bundle 加载时拒绝配置。凭据变化会清除内存目录路径映射。调用方取消不会重试；可重试的传输失败和 HTTP 状态由 `maxRetries` 限制。
 
 ## 部署前提
 
-签名密钥需要经过批准、可轮换的 Host-only 来源。不得从 MCP 参考项目复制签名材料，也不得将其提交到源码、fixture、Bundle YAML 或客户端配置。本包已包含生产 fetch transport；但在该来源与 Provider 注册被组合到 Bundle 前，它只是经过测试的 Provider 实现，不是已部署集成。
+签名密钥是 Host 配置中的字面量。CloudDisk Bundle 有意在受版本控制的 patch 文件中放置替换标记，因此替换为真实值后，任何可以读取 Bundle 的人都能读取该值。本包包含生产 fetch transport，Bundle 也会组合其 Provider 注册。
 
 ## 已知限制与暂缓事项
 
 - Provider 只实现用户查询、目录列表和搜索；不提供上传、下载、变更、分享或传输 API。
 - 一个已配置的 Provider 服务于一个 Host 进程，尚未实现多账户切换和远端变更观察。
-- 本发布中的签名材料仍是用户自管的 Host 凭据；本包不提供托管分发或轮换服务。
+- 本包不提供签名材料的托管分发或轮换服务。

package/lib/index.js

@@ -6,8 +6,6 @@ import CloudDiskRuntime, { CloudDiskError } from "@aicloud360/dsh-cloud-disk";
 /** Private Connection RPC for the CloudDisk browser workspace. */
 const CHANNEL = "/cloud-disk";
 const API_KEY_REF = credentialRef("CLOUD_DISK_API_KEY");
-const SIGNING_SECRET_REF = credentialRef("CLOUD_DISK_SIGNING_SECRET");
-const credentialKindSchema = z.union([z.const("apiKey"), z.const("signingSecret")]);
 const listSchema = z.object({
 	parentId: z.string(),
 	cursor: z.string(),
@@ -18,26 +16,19 @@ const searchSchema = z.object({
 	cursor: z.string(),
 	limit: z.number().step(1).min(1)
 });
-const credentialSetSchema = z.object({
-	kind: credentialKindSchema.required(),
-	value: z.string().min(1).required()
-});
-const credentialUnsetSchema = z.object({ kind: credentialKindSchema.required() });
+const credentialSetSchema = z.object({ value: z.string().min(1).required() });
+const credentialUnsetSchema = z.object({});
 const CLOUD_DISK_FAILURE_CODES = new Set([
 	"CLOUD_DISK_PROVIDER_CONFIGURED_MISSING",
 	"CLOUD_DISK_PROVIDER_CONFIGURED_UNAVAILABLE",
 	"CLOUD_DISK_PROVIDER_UNAVAILABLE",
 	"CLOUD_DISK_PROVIDER_AMBIGUOUS",
 	"CLOUD_DISK_CREDENTIAL_MISSING",
-	"CLOUD_DISK_SIGNING_SECRET_MISSING",
 	"CLOUD_DISK_AUTHENTICATION_FAILED",
 	"CLOUD_DISK_NETWORK_FAILED",
 	"CLOUD_DISK_INVALID_REQUEST",
 	"CLOUD_DISK_PROVIDER_FAILED"
 ]);
-function credentialFor(kind) {
-	return kind === "apiKey" ? API_KEY_REF : SIGNING_SECRET_REF;
-}
 function parse(schema, payload) {
 	try {
 		return schema(payload);
@@ -94,7 +85,7 @@ function pageView(page) {
 }
 /**
 * Register the CloudDisk browser RPC channel. Credential endpoints only address
-* the two CloudDisk references, so this plugin cannot become a general
+* the CloudDisk API-key reference, so this plugin cannot become a general
 * credential-inspection surface.
 * @param ctx - Host context with the selected CloudDisk provider and credentials.
 */
@@ -122,22 +113,17 @@ function installCloudDiskRpc(ctx) {
 						}
 					};
 				}
-			case "credentials/describe": {
+			case "credentials/describe":
 				if (parse(z.object({}), payload) === void 0) return badRequest("invalid cloud disk credential request");
-				const [apiKey, signingSecret] = await Promise.all([ctx.credentials.describe(API_KEY_REF), ctx.credentials.describe(SIGNING_SECRET_REF)]);
 				return {
 					ok: true,
-					value: {
-						apiKey,
-						signingSecret
-					}
+					value: { apiKey: await ctx.credentials.describe(API_KEY_REF) }
 				};
-			}
 			case "credentials/set": {
 				const parsed = parse(credentialSetSchema, payload);
 				if (parsed === void 0) return badRequest("invalid cloud disk credential request");
 				try {
-					await ctx.credentials.set(credentialFor(parsed.kind), parsed.value);
+					await ctx.credentials.set(API_KEY_REF, parsed.value);
 					return {
 						ok: true,
 						value: {}
@@ -146,11 +132,10 @@ function installCloudDiskRpc(ctx) {
 					return internalFailure("cloud disk credential could not be saved");
 				}
 			}
-			case "credentials/unset": {
-				const parsed = parse(credentialUnsetSchema, payload);
-				if (parsed === void 0) return badRequest("invalid cloud disk credential request");
+			case "credentials/unset":
+				if (parse(credentialUnsetSchema, payload) === void 0) return badRequest("invalid cloud disk credential request");
 				try {
-					await ctx.credentials.unset(credentialFor(parsed.kind));
+					await ctx.credentials.unset(API_KEY_REF);
 					return {
 						ok: true,
 						value: {}
@@ -158,7 +143,6 @@ function installCloudDiskRpc(ctx) {
 				} catch {
 					return internalFailure("cloud disk credential could not be removed");
 				}
-			}
 			case "browse/list": {
 				const parsed = parse(listSchema, payload);
 				if (parsed === void 0) return badRequest("invalid cloud disk list request");
@@ -214,7 +198,7 @@ const inject = [
 const Config = z.object({
 	endpoint: z.string().required(),
 	apiKeyRef: z.string().required(),
-	signingSecretRef: z.string().required(),
+	signingSecret: z.string().min(1).required(),
 	clientEnv: z.string().required(),
 	clientSource: z.string().required(),
 	subChannel: z.string().required(),
@@ -365,14 +349,12 @@ var DirectCloudDiskProvider = class {
 		};
 		return {
 			...input,
-			sign: sign(input, secret.value),
+			sign: sign(input, secret),
 			sub_channel: this.options.subChannel
 		};
 	}
-	async signingSecret() {
-		const secret = await this.options.credentials.resolve(this.options.signingSecretRef);
-		if (secret === void 0) throw signingSecretMissing();
-		return secret;
+	signingSecret() {
+		return this.options.signingSecret;
 	}
 	getInput(params, accessToken) {
 		return {
@@ -454,7 +436,7 @@ function applyDirectCloudDiskProvider(ctx, options) {
 	return ctx.cloudDisk.registerProvider(new DirectCloudDiskProvider(options));
 }
 /**
-* Register the production fetch Provider from a profile's explicit credential references.
+* Register the production fetch Provider from a profile's API-key reference and signing material.
 * @param ctx - Host context that owns the CloudDisk and credential services.
 * @param config - Complete direct-Provider configuration from the profile Bundle.
 */
@@ -462,7 +444,7 @@ function apply(ctx, config) {
 	applyDirectCloudDiskProvider(ctx, {
 		endpoint: config.endpoint,
 		credentialRef: credentialRef(config.apiKeyRef),
-		signingSecretRef: credentialRef(config.signingSecretRef),
+		signingSecret: config.signingSecret,
 		clientEnv: config.clientEnv,
 		clientSource: config.clientSource,
 		subChannel: config.subChannel,
@@ -479,9 +461,6 @@ function isRecord(value) {
 function credentialMissing() {
 	return new CloudDiskError("CloudDisk credential is not configured", "CLOUD_DISK_CREDENTIAL_MISSING");
 }
-function signingSecretMissing() {
-	return new CloudDiskError("CloudDisk signing secret is not configured", "CLOUD_DISK_SIGNING_SECRET_MISSING");
-}
 function authenticationFailed() {
 	return new CloudDiskError("CloudDisk authentication failed", "CLOUD_DISK_AUTHENTICATION_FAILED");
 }

package/lib/types/cloud-disk-rpc.d.ts

@@ -2,7 +2,7 @@
 import type { Context } from '@deepseek-ai/cordis';
 /**
  * Register the CloudDisk browser RPC channel. Credential endpoints only address
- * the two CloudDisk references, so this plugin cannot become a general
+ * the CloudDisk API-key reference, so this plugin cannot become a general
  * credential-inspection surface.
  * @param ctx - Host context with the selected CloudDisk provider and credentials.
  */

package/lib/types/index.d.ts

@@ -1,7 +1,7 @@
 /** Direct Host-side adapter for the audited 360 CloudDisk OpenAPI. */
 import type { Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
-import { type CredentialProvider, type CredentialRef } from '@deepseek-ai/dsh-credentials';
+import { type CredentialProvider } from '@deepseek-ai/dsh-credentials';
 import CloudDiskRuntime, { type CloudDiskListRequest, type CloudDiskPage, type CloudDiskProvider, type CloudDiskProviderConfig, type CloudDiskSearchRequest, type CloudDiskUser } from '@aicloud360/dsh-cloud-disk';
 /** Cordis loader name for the direct CloudDisk Provider plugin. */
 export declare const name = "cloud-disk-api-provider";
@@ -13,8 +13,8 @@ export interface Config {
     endpoint: string;
     /** Credential reference containing the user API key. */
     apiKeyRef: string;
-    /** Credential reference containing the server-side request-signing secret. */
-    signingSecretRef: string;
+    /** Host-only application secret used to sign directory and search requests. */
+    signingSecret: string;
     /** 360 client environment identifier. */
     clientEnv: string;
     /** 360 client source identifier. */
@@ -51,7 +51,7 @@ export interface CloudDiskHttpClient {
 export declare function createFetchCloudDiskHttpClient(fetchImpl?: typeof fetch): CloudDiskHttpClient;
 /** Host-only configuration for the audited direct 360 OpenAPI Provider. */
 export interface DirectCloudDiskProviderOptions extends CloudDiskProviderConfig {
-    readonly signingSecretRef: CredentialRef;
+    readonly signingSecret: string;
     readonly clientEnv: string;
     readonly clientSource: string;
     readonly subChannel: string;
@@ -102,7 +102,7 @@ export declare class DirectCloudDiskProvider implements CloudDiskProvider {
  */
 export declare function applyDirectCloudDiskProvider(ctx: Context, options: DirectCloudDiskProviderOptions): () => void;
 /**
- * Register the production fetch Provider from a profile's explicit credential references.
+ * Register the production fetch Provider from a profile's API-key reference and signing material.
  * @param ctx - Host context that owns the CloudDisk and credential services.
  * @param config - Complete direct-Provider configuration from the profile Bundle.
  */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aicloud360/dsh-cloud-disk-api-provider",
   "description": "Direct Host-side HTTP provider adapter for the native CloudDisk capability seam",
-  "version": "0.1.1-rc.2",
+  "version": "0.1.1-rc.2.cloud.1",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org"
@@ -39,6 +39,6 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aicloud360/dsh-cloud-disk": "0.1.1-rc.2"
+    "@aicloud360/dsh-cloud-disk": "0.1.1-rc.2.cloud.1"
   }
 }