@tinycloud/node-sdk 2.2.0-beta.8 → 2.2.0-beta.9

package/dist/core.cjs

@@ -56,6 +56,7 @@ __export(core_exports, {
   TinyCloud: () => import_sdk_core7.TinyCloud,
   TinyCloudNode: () => TinyCloudNode,
   UnsupportedFeatureError: () => import_sdk_core17.UnsupportedFeatureError,
+  VAULT_PERMISSION_SERVICE: () => import_sdk_core9.VAULT_PERMISSION_SERVICE,
   VaultHeaders: () => import_sdk_core13.VaultHeaders,
   VaultPublicSpaceKVActions: () => import_sdk_core13.VaultPublicSpaceKVActions,
   VersionCheckError: () => import_sdk_core17.VersionCheckError,
@@ -72,6 +73,8 @@ __export(core_exports, {
   defaultSpaceCreationHandler: () => import_sdk_core8.defaultSpaceCreationHandler,
   deserializeDelegation: () => deserializeDelegation,
   expandActionShortNames: () => import_sdk_core9.expandActionShortNames,
+  expandPermissionEntries: () => import_sdk_core9.expandPermissionEntries,
+  expandPermissionEntry: () => import_sdk_core9.expandPermissionEntry,
   isCapabilitySubset: () => import_sdk_core9.isCapabilitySubset,
   loadManifest: () => import_sdk_core9.loadManifest,
   makePublicSpaceId: () => import_sdk_core16.makePublicSpaceId,
@@ -1272,30 +1275,26 @@ function secretsError(code, message, cause) {
     }
   };
 }
-function actionUrn(action) {
-  return `tinycloud.kv/${action}`;
+function displayActionUrn(action) {
+  return action === "put" ? "tinycloud.vault/write" : "tinycloud.vault/delete";
 }
-function secretResourcePath(base, name) {
-  return `${base}/${SECRET_PREFIX}${name}`;
+function kvActionUrn(action) {
+  return `tinycloud.kv/${action}`;
 }
 function secretPermissionEntries(name, action) {
   return [
     {
-      service: "tinycloud.kv",
-      space: SECRETS_SPACE,
-      path: secretResourcePath("keys", name),
-      actions: [action],
-      skipPrefix: true
-    },
-    {
-      service: "tinycloud.kv",
+      service: "tinycloud.vault",
       space: SECRETS_SPACE,
-      path: secretResourcePath("vault", name),
-      actions: [action],
+      path: `${SECRET_PREFIX}${name}`,
+      actions: [action === "put" ? "write" : "delete"],
       skipPrefix: true
     }
   ];
 }
+function secretResourcePath(base, name) {
+  return `${base}/${SECRET_PREFIX}${name}`;
+}
 function isSecretsSpace(space) {
   return space === SECRETS_SPACE || space.endsWith(`:${SECRETS_SPACE}`);
 }
@@ -1357,7 +1356,7 @@ var NodeSecretsService = class {
     if (!this.config.canEscalate()) {
       return secretsError(
         import_sdk_core5.ErrorCodes.PERMISSION_DENIED,
-        `Cannot autosign ${actionUrn(action)} for ${name}; TinyCloudNode needs wallet mode with a signer or privateKey.`
+        `Cannot autosign ${displayActionUrn(action)} for ${name}; TinyCloudNode needs wallet mode with a signer or privateKey.`
       );
     }
     try {
@@ -1366,7 +1365,7 @@ var NodeSecretsService = class {
     } catch (error) {
       return secretsError(
         import_sdk_core5.ErrorCodes.PERMISSION_DENIED,
-        error instanceof Error ? error.message : `Autosign escalation for ${actionUrn(action)} on ${name} failed.`,
+        error instanceof Error ? error.message : `Autosign escalation for ${displayActionUrn(action)} on ${name} failed.`,
         error instanceof Error ? error : void 0
       );
     }
@@ -1383,7 +1382,7 @@ var NodeSecretsService = class {
       return false;
     }
     const manifests = Array.isArray(manifest) ? manifest : [manifest];
-    const requiredAction = actionUrn(action);
+    const requiredAction = kvActionUrn(action);
     return manifests.some((entry) => {
       const resolved = (0, import_sdk_core5.resolveManifest)(entry);
       return ["keys", "vault"].every(
@@ -2939,10 +2938,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         "delegateTo requires a non-empty permissions array"
       );
     }
-    const expandedEntries = permissions.map((entry) => ({
-      ...entry,
-      actions: (0, import_sdk_core6.expandActionShortNames)(entry.service, entry.actions)
-    }));
+    const expandedEntries = this.expandPermissionEntries(permissions);
     const now = /* @__PURE__ */ new Date();
     const expiryMs = resolveExpiryMs(options?.expiry);
     const expirationTime = new Date(now.getTime() + expiryMs);
@@ -3182,10 +3178,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     return this.wasmBindings.makeSpaceId(session.address, session.chainId, space);
   }
   expandPermissionEntries(permissions) {
-    return permissions.map((entry) => ({
-      ...entry,
-      actions: (0, import_sdk_core6.expandActionShortNames)(entry.service, entry.actions)
-    }));
+    return (0, import_sdk_core6.expandPermissionEntries)(permissions);
   }
   shortServiceName(service) {
     const short = import_sdk_core6.SERVICE_LONG_TO_SHORT[service];
@@ -3846,6 +3839,7 @@ var import_sdk_core18 = require("@tinycloud/sdk-core");
   TinyCloud,
   TinyCloudNode,
   UnsupportedFeatureError,
+  VAULT_PERMISSION_SERVICE,
   VaultHeaders,
   VaultPublicSpaceKVActions,
   VersionCheckError,
@@ -3862,6 +3856,8 @@ var import_sdk_core18 = require("@tinycloud/sdk-core");
   defaultSpaceCreationHandler,
   deserializeDelegation,
   expandActionShortNames,
+  expandPermissionEntries,
+  expandPermissionEntry,
   isCapabilitySubset,
   loadManifest,
   makePublicSpaceId,