@tinycloud/node-sdk 2.5.1 → 2.6.0-beta.0

package/dist/core.js

@@ -237,7 +237,13 @@ import {
   EXPIRY,
   canonicalizeAddress,
   makePkhSpaceId,
-  pkhDid
+  pkhDid,
+  KV,
+  SQL,
+  DUCKDB,
+  CAPABILITIES,
+  HOOKS,
+  ENCRYPTION
 } from "@tinycloud/sdk-core";
 
 // src/authorization/strategies.ts
@@ -245,8 +251,8 @@ import { createOpenKeyCallbackSigningStrategy } from "@tinycloud/sdk-core";
 var defaultSignStrategy = { type: "auto-sign" };
 
 // src/authorization/NodeUserAuthorization.ts
-var DECRYPT_ACTION = "tinycloud.encryption/decrypt";
-var NETWORK_CREATE_ACTION = "tinycloud.encryption/network.create";
+var DECRYPT_ACTION = ENCRYPTION.DECRYPT;
+var NETWORK_CREATE_ACTION = ENCRYPTION.NETWORK_CREATE;
 function didPrincipalMatches(actual, expected) {
   try {
     return principalDidEquals(actual, expected);
@@ -279,44 +285,27 @@ var NodeUserAuthorization = class {
     this.spacePrefix = config.spacePrefix ?? "default";
     this.defaultActions = config.defaultActions ?? {
       kv: {
-        "": [
-          "tinycloud.kv/put",
-          "tinycloud.kv/get",
-          "tinycloud.kv/del",
-          "tinycloud.kv/list",
-          "tinycloud.kv/metadata"
-        ]
+        "": [KV.PUT, KV.GET, KV.DEL, KV.LIST, KV.METADATA]
       },
       sql: {
-        "": [
-          "tinycloud.sql/read",
-          "tinycloud.sql/write",
-          "tinycloud.sql/schema",
-          "tinycloud.sql/admin",
-          "tinycloud.sql/export"
-        ]
+        "": [SQL.READ, SQL.WRITE, SQL.SCHEMA, SQL.ADMIN, SQL.EXPORT]
       },
       duckdb: {
         "": [
-          "tinycloud.duckdb/read",
-          "tinycloud.duckdb/write",
-          "tinycloud.duckdb/admin",
-          "tinycloud.duckdb/describe",
-          "tinycloud.duckdb/export",
-          "tinycloud.duckdb/import",
-          "tinycloud.duckdb/execute"
+          DUCKDB.READ,
+          DUCKDB.WRITE,
+          DUCKDB.ADMIN,
+          DUCKDB.DESCRIBE,
+          DUCKDB.EXPORT,
+          DUCKDB.IMPORT,
+          DUCKDB.EXECUTE
         ]
       },
       capabilities: {
-        "": ["tinycloud.capabilities/read"]
+        "": [CAPABILITIES.READ]
       },
       hooks: {
-        "": [
-          "tinycloud.hooks/subscribe",
-          "tinycloud.hooks/register",
-          "tinycloud.hooks/list",
-          "tinycloud.hooks/unregister"
-        ]
+        "": [HOOKS.SUBSCRIBE, HOOKS.REGISTER, HOOKS.LIST, HOOKS.UNREGISTER]
       }
     };
     this.sessionExpirationMs = config.sessionExpirationMs ?? EXPIRY.SESSION_MS;
@@ -516,20 +505,17 @@ var NodeUserAuthorization = class {
           [secretsSpaceId]: {
             kv: {
               "vault/secrets/": [
-                "tinycloud.kv/get",
-                "tinycloud.kv/put",
-                "tinycloud.kv/del",
-                "tinycloud.kv/list",
-                "tinycloud.kv/metadata"
+                KV.GET,
+                KV.PUT,
+                KV.DEL,
+                KV.LIST,
+                KV.METADATA
               ]
             }
           }
         },
         rawAbilities: {
-          [defaultNetworkId]: [
-            "tinycloud.encryption/decrypt",
-            "tinycloud.encryption/network.create"
-          ]
+          [defaultNetworkId]: [DECRYPT_ACTION, NETWORK_CREATE_ACTION]
         }
       };
     }
@@ -1205,6 +1191,10 @@ import {
   isCapabilitySubset,
   parseRecapCapabilities,
   SERVICE_LONG_TO_SHORT,
+  KV as KV2,
+  SQL as SQL2,
+  DUCKDB as DUCKDB2,
+  ENCRYPTION as ENCRYPTION2,
   EXPIRY as EXPIRY3,
   canonicalHashHex,
   canonicalizeEncryptionJson,
@@ -1650,9 +1640,27 @@ var NodeSecretsService = class {
 // src/TinyCloudNode.ts
 var DEFAULT_HOST = "https://node.tinycloud.xyz";
 var DEFAULT_ENCRYPTION_NETWORK_NAME = "default";
-var NETWORK_CREATE_ACTION2 = "tinycloud.encryption/network.create";
-var DECRYPT_ACTION2 = "tinycloud.encryption/decrypt";
+var NETWORK_CREATE_ACTION2 = ENCRYPTION2.NETWORK_CREATE;
+var DECRYPT_ACTION2 = ENCRYPTION2.DECRYPT;
 var NETWORK_ADMIN_TYPE = "tinycloud.encryption.network-admin/v1";
+var ROOT_DELEGATION_ACTIONS = [
+  KV2.PUT,
+  KV2.GET,
+  KV2.DEL,
+  KV2.LIST,
+  KV2.METADATA,
+  SQL2.READ,
+  SQL2.WRITE,
+  SQL2.ADMIN,
+  SQL2.ALL,
+  DUCKDB2.READ,
+  DUCKDB2.WRITE,
+  DUCKDB2.ADMIN,
+  DUCKDB2.DESCRIBE,
+  DUCKDB2.EXPORT,
+  DUCKDB2.IMPORT,
+  DUCKDB2.ALL
+];
 var DEFAULT_SESSION_EXPIRATION_MS = EXPIRY3.SESSION_MS;
 function isOpenKeyAutoSignStrategy(strategy) {
   return strategy?.openKeyAutoSign === true;
@@ -3174,24 +3182,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         spaceId: tcSession.spaceId,
         path: "",
         // Root access
-        actions: [
-          "tinycloud.kv/put",
-          "tinycloud.kv/get",
-          "tinycloud.kv/del",
-          "tinycloud.kv/list",
-          "tinycloud.kv/metadata",
-          "tinycloud.sql/read",
-          "tinycloud.sql/write",
-          "tinycloud.sql/admin",
-          "tinycloud.sql/*",
-          "tinycloud.duckdb/read",
-          "tinycloud.duckdb/write",
-          "tinycloud.duckdb/admin",
-          "tinycloud.duckdb/describe",
-          "tinycloud.duckdb/export",
-          "tinycloud.duckdb/import",
-          "tinycloud.duckdb/*"
-        ],
+        actions: [...ROOT_DELEGATION_ACTIONS],
         expiry: this.getSessionExpiry(),
         isRevoked: false,
         allowSubDelegation: true
@@ -3204,24 +3195,7 @@ var _TinyCloudNode = class _TinyCloudNode {
             delegateDID: tcSession.verificationMethod,
             spaceId,
             path: "",
-            actions: [
-              "tinycloud.kv/put",
-              "tinycloud.kv/get",
-              "tinycloud.kv/del",
-              "tinycloud.kv/list",
-              "tinycloud.kv/metadata",
-              "tinycloud.sql/read",
-              "tinycloud.sql/write",
-              "tinycloud.sql/admin",
-              "tinycloud.sql/*",
-              "tinycloud.duckdb/read",
-              "tinycloud.duckdb/write",
-              "tinycloud.duckdb/admin",
-              "tinycloud.duckdb/describe",
-              "tinycloud.duckdb/export",
-              "tinycloud.duckdb/import",
-              "tinycloud.duckdb/*"
-            ],
+            actions: [...ROOT_DELEGATION_ACTIONS],
             expiry: this.getSessionExpiry(),
             isRevoked: false,
             allowSubDelegation: true
@@ -4065,13 +4039,7 @@ var _TinyCloudNode = class _TinyCloudNode {
       throw new Error("Public space not enabled. Set enablePublicSpace: true in config.");
     }
     await this.auth.hostPublicSpace(publicSpaceId);
-    const kvActions = [
-      "tinycloud.kv/put",
-      "tinycloud.kv/get",
-      "tinycloud.kv/del",
-      "tinycloud.kv/list",
-      "tinycloud.kv/metadata"
-    ];
+    const kvActions = [KV2.PUT, KV2.GET, KV2.DEL, KV2.LIST, KV2.METADATA];
     const abilities = { kv: { "": kvActions } };
     const now = /* @__PURE__ */ new Date();
     const expiryMs = EXPIRY3.EPHEMERAL_MS;
@@ -5000,7 +4968,7 @@ var _TinyCloudNode = class _TinyCloudNode {
         session.chainId
       );
       const publicAbilities = {
-        kv: { "": ["tinycloud.kv/get", "tinycloud.kv/put", "tinycloud.kv/metadata"] }
+        kv: { "": [KV2.GET, KV2.PUT, KV2.METADATA] }
       };
       const publicPrepared = this.wasmBindings.prepareSession({
         abilities: publicAbilities,
@@ -5028,7 +4996,7 @@ var _TinyCloudNode = class _TinyCloudNode {
           delegationHeader: publicSession.delegationHeader,
           spaceId: publicSpaceId,
           path: "",
-          actions: ["tinycloud.kv/get", "tinycloud.kv/put", "tinycloud.kv/metadata"],
+          actions: [KV2.GET, KV2.PUT, KV2.METADATA],
           disableSubDelegation: params.disableSubDelegation ?? false,
           expiry: expirationTime,
           delegateDID: params.delegateDID,