@tinycloud/node-sdk 3.2.0-beta.5 → 3.2.0-beta.6

package/dist/index.cjs

@@ -17663,6 +17663,7 @@ __export(src_exports, {
   resourceCapabilitiesToSpaceAbilitiesMap: () => import_sdk_core16.resourceCapabilitiesToSpaceAbilitiesMap,
   serializeDelegation: () => serializeDelegation,
   signedCompactUcanExpiry: () => signedCompactUcanExpiry,
+  siweRuntimeDelegation: () => siweRuntimeDelegation,
   sqliteReplicaStorage: () => sqliteReplicaStorage,
   tinyCloudDebugLogger: () => import_sdk_core15.tinyCloudDebugLogger,
   validateEnvelope: () => import_sdk_core21.validateEnvelope,
@@ -18233,18 +18234,45 @@ async function activateCompactRuntimeDelegation(node, input) {
     throw new Error("Compact runtime delegation CID does not match authorization bytes.");
   }
   const signed2 = signedAuthorityFromCompactUcan(authorization);
+  return activateValidatedRuntimeDelegation(
+    node,
+    portableFromSignedAuthority(cid, authorization, signed2, input),
+    { host: input.host }
+  );
+}
+function siweRuntimeDelegation(node, input) {
+  const cid = node.computeDelegationCid(input.authorization);
+  if (cid !== input.cid) {
+    throw new Error("SIWE runtime delegation CID does not match authorization bytes.");
+  }
+  const proof = { siwe: input.siwe, signature: input.signature };
+  const signed2 = signedAuthorityFromSessionGrant(
+    node,
+    { siweProof: proof, spaceId: input.spaceId, ownerAddress: input.ownerAddress, chainId: input.chainId },
+    input.authorization,
+    cid
+  );
+  if (signed2.expiry.getTime() <= Date.now()) {
+    reject("expired", "Runtime delegation is expired.");
+  }
+  return {
+    ...portableFromSignedAuthority(cid, input.authorization, signed2, input),
+    siweProof: proof
+  };
+}
+function portableFromSignedAuthority(cid, authorization, signed2, transport) {
   const primary = signed2.resources[0];
   const signedSpace = signed2.permissions.find(
     (permission) => permission.service !== "tinycloud.encryption"
   )?.space;
-  const delegation = {
+  return {
     cid,
     delegationHeader: { Authorization: authorization },
-    ownerAddress: input.ownerAddress,
-    chainId: input.chainId,
+    ownerAddress: transport.ownerAddress,
+    chainId: transport.chainId,
     delegatorDID: signed2.issuer,
     authHeader: authorization,
-    spaceId: signedSpace ?? primary.space,
+    spaceId: signedSpace ?? transport.spaceId ?? primary.space,
     path: primary.path,
     actions: [...primary.actions],
     ...primary.caveats === void 0 ? {} : { caveats: primary.caveats },
@@ -18254,11 +18282,8 @@ async function activateCompactRuntimeDelegation(node, input) {
     })),
     expiry: new Date(signed2.expiry),
     delegateDID: signed2.audience,
-    host: normalizedHost(input.host)
+    host: normalizedHost(transport.host)
   };
-  return activateValidatedRuntimeDelegation(node, delegation, {
-    host: input.host
-  });
 }
 async function grantAuthRequest(authority, request, options) {
   if (request.kind !== "tinycloud.auth.request") {
@@ -27424,6 +27449,7 @@ function sqliteReplicaStorage(options) {
   resourceCapabilitiesToSpaceAbilitiesMap,
   serializeDelegation,
   signedCompactUcanExpiry,
+  siweRuntimeDelegation,
   sqliteReplicaStorage,
   tinyCloudDebugLogger,
   validateEnvelope,