@tinycloud/node-sdk 2.2.0-beta.8 → 2.2.0-beta.9

package/dist/index.cjs

@@ -17064,6 +17064,7 @@ __export(index_exports, {
   TinyCloud: () => import_sdk_core7.TinyCloud,
   TinyCloudNode: () => TinyCloudNode,
   UnsupportedFeatureError: () => import_sdk_core18.UnsupportedFeatureError,
+  VAULT_PERMISSION_SERVICE: () => import_sdk_core9.VAULT_PERMISSION_SERVICE,
   VaultHeaders: () => import_sdk_core13.VaultHeaders,
   VaultPublicSpaceKVActions: () => import_sdk_core13.VaultPublicSpaceKVActions,
   VersionCheckError: () => import_sdk_core18.VersionCheckError,
@@ -17080,6 +17081,8 @@ __export(index_exports, {
   defaultSpaceCreationHandler: () => import_sdk_core8.defaultSpaceCreationHandler,
   deserializeDelegation: () => deserializeDelegation,
   expandActionShortNames: () => import_sdk_core9.expandActionShortNames,
+  expandPermissionEntries: () => import_sdk_core9.expandPermissionEntries,
+  expandPermissionEntry: () => import_sdk_core9.expandPermissionEntry,
   isCapabilitySubset: () => import_sdk_core9.isCapabilitySubset,
   loadManifest: () => import_sdk_core9.loadManifest,
   makePublicSpaceId: () => import_sdk_core17.makePublicSpaceId,
@@ -18257,30 +18260,26 @@ function secretsError(code, message, cause) {
     }
   };
 }
-function actionUrn(action) {
-  return `tinycloud.kv/${action}`;
+function displayActionUrn(action) {
+  return action === "put" ? "tinycloud.vault/write" : "tinycloud.vault/delete";
 }
-function secretResourcePath(base2, name) {
-  return `${base2}/${SECRET_PREFIX}${name}`;
+function kvActionUrn(action) {
+  return `tinycloud.kv/${action}`;
 }
 function secretPermissionEntries(name, action) {
   return [
     {
-      service: "tinycloud.kv",
-      space: SECRETS_SPACE,
-      path: secretResourcePath("keys", name),
-      actions: [action],
-      skipPrefix: true
-    },
-    {
-      service: "tinycloud.kv",
+      service: "tinycloud.vault",
       space: SECRETS_SPACE,
-      path: secretResourcePath("vault", name),
-      actions: [action],
+      path: `${SECRET_PREFIX}${name}`,
+      actions: [action === "put" ? "write" : "delete"],
       skipPrefix: true
     }
   ];
 }
+function secretResourcePath(base2, name) {
+  return `${base2}/${SECRET_PREFIX}${name}`;
+}
 function isSecretsSpace(space) {
   return space === SECRETS_SPACE || space.endsWith(`:${SECRETS_SPACE}`);
 }
@@ -18342,7 +18341,7 @@ var NodeSecretsService = class {
     if (!this.config.canEscalate()) {
       return secretsError(
         import_sdk_core4.ErrorCodes.PERMISSION_DENIED,
-        `Cannot autosign ${actionUrn(action)} for ${name}; TinyCloudNode needs wallet mode with a signer or privateKey.`
+        `Cannot autosign ${displayActionUrn(action)} for ${name}; TinyCloudNode needs wallet mode with a signer or privateKey.`
       );
     }
     try {
@@ -18351,7 +18350,7 @@ var NodeSecretsService = class {
     } catch (error) {
       return secretsError(
         import_sdk_core4.ErrorCodes.PERMISSION_DENIED,
-        error instanceof Error ? error.message : `Autosign escalation for ${actionUrn(action)} on ${name} failed.`,
+        error instanceof Error ? error.message : `Autosign escalation for ${displayActionUrn(action)} on ${name} failed.`,
         error instanceof Error ? error : void 0
       );
     }
@@ -18368,7 +18367,7 @@ var NodeSecretsService = class {
       return false;
     }
     const manifests = Array.isArray(manifest) ? manifest : [manifest];
-    const requiredAction = actionUrn(action);
+    const requiredAction = kvActionUrn(action);
     return manifests.some((entry) => {
       const resolved = (0, import_sdk_core4.resolveManifest)(entry);
       return ["keys", "vault"].every(
@@ -19924,10 +19923,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         "delegateTo requires a non-empty permissions array"
       );
     }
-    const expandedEntries = permissions.map((entry) => ({
-      ...entry,
-      actions: (0, import_sdk_core5.expandActionShortNames)(entry.service, entry.actions)
-    }));
+    const expandedEntries = this.expandPermissionEntries(permissions);
     const now = /* @__PURE__ */ new Date();
     const expiryMs = resolveExpiryMs(options?.expiry);
     const expirationTime = new Date(now.getTime() + expiryMs);
@@ -20167,10 +20163,7 @@ var _TinyCloudNode = class _TinyCloudNode {
     return this.wasmBindings.makeSpaceId(session.address, session.chainId, space);
   }
   expandPermissionEntries(permissions) {
-    return permissions.map((entry) => ({
-      ...entry,
-      actions: (0, import_sdk_core5.expandActionShortNames)(entry.service, entry.actions)
-    }));
+    return (0, import_sdk_core5.expandPermissionEntries)(permissions);
   }
   shortServiceName(service) {
     const short = import_sdk_core5.SERVICE_LONG_TO_SHORT[service];
@@ -20965,6 +20958,7 @@ var import_sdk_core19 = require("@tinycloud/sdk-core");
   TinyCloud,
   TinyCloudNode,
   UnsupportedFeatureError,
+  VAULT_PERMISSION_SERVICE,
   VaultHeaders,
   VaultPublicSpaceKVActions,
   VersionCheckError,
@@ -20981,6 +20975,8 @@ var import_sdk_core19 = require("@tinycloud/sdk-core");
   defaultSpaceCreationHandler,
   deserializeDelegation,
   expandActionShortNames,
+  expandPermissionEntries,
+  expandPermissionEntry,
   isCapabilitySubset,
   loadManifest,
   makePublicSpaceId,