@tinycloud/cli 1.3.0-beta.39 → 1.3.0-beta.41

package/README.md

@@ -114,7 +114,7 @@ tc delegation create --to did:pkh:eip155:1:0x...
 | `tc context` | Show the selected profile, owner, host, space and session state |
 | `tc auth status` | Show authentication status |
 | `tc auth whoami` | Show current identity |
-| `tc auth request --preset apps-agent [--app <id>]... [--write]` | Request read-only access for an agent to the user's installed apps (one app, several, or all); Don't request `--write` during the tiny-apps beta. It currently also allows changes to the app's own code and manifest; the narrowed write ships in TC-1620. |
+| `tc auth request --preset apps-agent [--app <id>]... [--write]` | Request read-only access for an agent to the user's installed apps (one app, several, or all); `--write --app <id>` also lets the agent write the app's `knowledge/` and `prefs/` files and table rows, never its code, manifest or install record |
 | `tc knowledge list` | List the installed apps that have a knowledge bundle |
 | `tc knowledge read <app_id> [concept]` | Read an app's knowledge index, or one concept with its frontmatter parsed |
 | `tc kv get <key>` | Retrieve a value |

package/dist/courier-entry.js

@@ -900,11 +900,11 @@ function readSecure(name2, required) {
   }
   const dirMode = fs.statSync(profileDir()).mode & 511;
   if ((dirMode & 63) !== 0) {
-    throw new CourierError("insecure-profile", `${profileDir()} must not be accessible by group or others (mode ${dirMode.toString(8)}).`);
+    throw new CourierError("profile-permissions", `${profileDir()} must be owner-only (mode 0700); found mode ${dirMode.toString(8)}.`);
   }
   const mode = fs.statSync(file).mode & 511;
   if ((mode & 63) !== 0) {
-    throw new CourierError("insecure-profile", `${name2} must not be accessible by group or others (mode ${mode.toString(8)}).`);
+    throw new CourierError("profile-permissions", `${name2} must be owner-only (mode 0600); found mode ${mode.toString(8)}.`);
   }
   try {
     return JSON.parse(fs.readFileSync(file, "utf8"));