@tangle-network/agent-app 0.45.51 → 0.45.52

package/dist/{chunk-RRH23CGS.js → chunk-MA2RIIIH.js}

@@ -2153,10 +2153,15 @@ function secretStoreFromClient(shell) {
     create: async (name, value) => {
       await client.secrets.create(name, value);
     },
+    // The API has no replace route, so a replacement is a delete followed by a
+    // create. That pair is NOT atomic: if the create fails, the secret is left
+    // deleted rather than at its previous value. `storeSecret` reports that
+    // state instead of reporting a generic write failure, because a caller
+    // retrying a lost secret needs to know it is now absent.
     update: async (name, value) => {
-      await client.secrets.update(name, value);
+      await client.secrets.delete(name);
+      await client.secrets.create(name, value);
     },
-    get: (name) => client.secrets.get(name),
     delete: async (name) => {
       await client.secrets.delete(name);
     }
@@ -2171,17 +2176,15 @@ async function storeSecret(store, name, value) {
       await store.update(name, value);
       return ok(void 0);
     } catch (err) {
-      return fail(new Error(`Failed to store sandbox secret ${name}`, { cause: err }));
+      return fail(
+        new Error(
+          `Failed to store sandbox secret ${name}. A replacement deletes before it creates, so ${name} may now be absent rather than holding its previous value.`,
+          { cause: err }
+        )
+      );
     }
   }
 }
-async function readSecret(store, name) {
-  try {
-    return ok(await store.get(name));
-  } catch (err) {
-    return fail(err);
-  }
-}
 async function deleteSecret(store, name) {
   try {
     await store.delete(name);
@@ -2366,7 +2369,6 @@ export {
   syncSandboxMemberRole,
   secretStoreFromClient,
   storeSecret,
-  readSecret,
   deleteSecret,
   mintSandboxScopedToken,
   driveSandboxTurn,
@@ -2374,4 +2376,4 @@ export {
   isTerminalPromptEvent,
   detectInteractiveQuestion
 };
-//# sourceMappingURL=chunk-RRH23CGS.js.map
+//# sourceMappingURL=chunk-MA2RIIIH.js.map