@tinycloud/node-sdk 2.11.0-beta.11 → 2.11.0-beta.12

package/dist/index.js

@@ -24502,6 +24502,14 @@ function signedAuthorityFromCompactUcan(authorization) {
   if (typeof payload.aud !== "string" || payload.aud.length === 0) {
     throw new Error("Validated runtime delegation is missing a signed audience.");
   }
+  if (typeof payload.iss !== "string" || payload.iss.length === 0) {
+    throw new Error("Validated runtime delegation is missing a signed issuer.");
+  }
+  if (!Array.isArray(payload.prf) || payload.prf.some(
+    (proof) => typeof proof !== "string" || proof.length === 0
+  )) {
+    throw new Error("Validated runtime delegation has malformed signed proofs.");
+  }
   if (typeof payload.exp !== "number" || !Number.isFinite(payload.exp)) {
     throw new Error("Validated runtime delegation is missing a signed expiry.");
   }
@@ -24512,6 +24520,11 @@ function signedAuthorityFromCompactUcan(authorization) {
   if (payload.att === null || typeof payload.att !== "object" || Array.isArray(payload.att)) {
     throw new Error("Validated runtime delegation is missing a signed attenuation.");
   }
+  const fact = Array.isArray(payload.fct) && payload.fct.length > 0 && payload.fct[0] !== null && typeof payload.fct[0] === "object" && !Array.isArray(payload.fct[0]) ? payload.fct[0] : void 0;
+  const remainingRedelegationDepth = fact?.remainingRedelegationDepth;
+  if (remainingRedelegationDepth !== void 0 && (!Number.isInteger(remainingRedelegationDepth) || remainingRedelegationDepth < 0 || remainingRedelegationDepth > 8)) {
+    throw new Error("Validated runtime delegation has invalid signed redelegation depth.");
+  }
   const permissions = [];
   for (const [resource, abilities] of Object.entries(payload.att)) {
     if (abilities === null || typeof abilities !== "object" || Array.isArray(abilities)) {
@@ -24562,8 +24575,11 @@ function signedAuthorityFromCompactUcan(authorization) {
     ...permission.caveats === void 0 ? {} : { caveats: permission.caveats }
   }));
   return {
+    issuer: payload.iss,
     audience: payload.aud,
     expiry,
+    proofs: [...payload.prf],
+    ...remainingRedelegationDepth === void 0 ? {} : { remainingRedelegationDepth },
     permissions: canonicalPermissions,
     resources: canonicalResources
   };
@@ -24654,6 +24670,13 @@ async function activateValidatedRuntimeDelegation(node, delegation, options) {
     delegationHeader: { Authorization: authorization },
     ownerAddress: delegation.ownerAddress,
     chainId: delegation.chainId,
+    delegatorDID: signed2.issuer,
+    ...signed2.proofs.length === 1 ? { parentCid: signed2.proofs[0] } : {},
+    ...signed2.remainingRedelegationDepth === void 0 ? {} : {
+      allowSubDelegation: signed2.remainingRedelegationDepth > 0,
+      disableSubDelegation: signed2.remainingRedelegationDepth === 0
+    },
+    authHeader: authorization,
     spaceId: signedSpace ?? delegation.spaceId,
     path: primary.path,
     actions: [...primary.actions],