@tinycloud/node-sdk 2.4.0-beta.2 → 2.4.0-beta.3

package/dist/{core-BucTrpWH.d.cts → core-ClOKiSR_.d.cts}

@@ -1538,6 +1538,8 @@ declare class TinyCloudNode {
     private findGrantForOperation;
     private pruneExpiredRuntimePermissionGrants;
     private operationCovers;
+    private spaceIdsEqual;
+    private normalizeSpaceAddress;
     private actionContains;
     private invocationServiceName;
     private isEncryptionNetworkOperation;

package/dist/{core-BucTrpWH.d.ts → core-ClOKiSR_.d.ts}

@@ -1538,6 +1538,8 @@ declare class TinyCloudNode {
     private findGrantForOperation;
     private pruneExpiredRuntimePermissionGrants;
     private operationCovers;
+    private spaceIdsEqual;
+    private normalizeSpaceAddress;
     private actionContains;
     private invocationServiceName;
     private isEncryptionNetworkOperation;

package/dist/core.cjs

@@ -4088,7 +4088,23 @@ var _TinyCloudNode = class _TinyCloudNode {
     if (granted.resource !== void 0 || requested.resource !== void 0) {
       return granted.resource !== void 0 && requested.resource !== void 0 && granted.resource === requested.resource && this.pathContains(granted.path, requested.path);
     }
-    return granted.spaceId !== void 0 && requested.spaceId !== void 0 && granted.spaceId === requested.spaceId && this.pathContains(granted.path, requested.path);
+    return granted.spaceId !== void 0 && requested.spaceId !== void 0 && this.spaceIdsEqual(granted.spaceId, requested.spaceId) && this.pathContains(granted.path, requested.path);
+  }
+  // Space IDs are `tinycloud:pkh:eip155:<chain>:<0xADDR>:<name>`. The embedded
+  // EIP-155 address is case-insensitive, but the CLI canonicalizes it to
+  // lowercase when building a space URI while stored runtime delegations keep
+  // the EIP-55 checksummed form — so a byte-for-byte compare spuriously rejects
+  // an otherwise-valid grant. Lowercase ONLY the `eip155:<chain>:0x<addr>`
+  // segment and leave everything else (crucially the case-sensitive space NAME)
+  // byte-exact. Mirrors the CLI's `normalizeSpaceForCompare` (OPENKEY_SCOPE_MISMATCH fix).
+  spaceIdsEqual(a, b) {
+    return this.normalizeSpaceAddress(a) === this.normalizeSpaceAddress(b);
+  }
+  normalizeSpaceAddress(space) {
+    return space.replace(
+      /(eip155:\d+:)(0x[0-9a-fA-F]{40})/,
+      (_match, prefix, addr) => prefix + addr.toLowerCase()
+    );
   }
   actionContains(grantedAction, requestedAction) {
     if (grantedAction === requestedAction) {