@tinycloud/operations 0.5.2-beta.1 → 0.5.3-beta.0

package/dist/index.js

@@ -33,6 +33,16 @@ var __toESM = (mod2, isNodeMode, target) => (target = mod2 != null ? __create(__
 ));
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
 
+// src/cli-name.ts
+import { basename } from "path";
+var CLI_NAME;
+var init_cli_name = __esm({
+  "src/cli-name.ts"() {
+    "use strict";
+    CLI_NAME = basename(process.argv[1] ?? "") === "tinycloud" ? "tinycloud" : "tc";
+  }
+});
+
 // ../sdk-core/src/policy/errors.ts
 var SignedObjectProfileError, SignedObjectCanonicalizationError;
 var init_errors = __esm({
@@ -4252,7 +4262,7 @@ import {
 } from "fs/promises";
 import { connect, createServer } from "net";
 import { homedir } from "os";
-import { basename, dirname, isAbsolute, join, relative, resolve } from "path";
+import { basename as basename2, dirname, isAbsolute, join, relative, resolve } from "path";
 function processWideContext(key) {
   var _a4;
   const registry = globalThis;
@@ -4321,7 +4331,7 @@ async function bindLiveness(directory) {
     await rename(pinned.path(`${socket}.new`), pinned.path(socket));
     const stats = await lstat(pinned.path(socket), { bigint: true });
     if (!stats.isSocket()) throw new Error(`${socket} is not a socket`);
-    await waitForTestBarrier(TEST_LOCK_LIVENESS_BARRIER_DIR, basename(directory));
+    await waitForTestBarrier(TEST_LOCK_LIVENESS_BARRIER_DIR, basename2(directory));
     return { record: { socket, dev: String(stats.dev), ino: String(stats.ino) }, path: join(directory, socket), server };
   } catch {
     if (bound) {
@@ -4466,7 +4476,7 @@ async function replaceJson(filePath, value, durable) {
   const directory = dirname(filePath);
   const temporaryPath = join(
     directory,
-    `.${basename(filePath)}.${process.pid}.${randomUUID()}.tmp`
+    `.${basename2(filePath)}.${process.pid}.${randomUUID()}.tmp`
   );
   const contents = `${JSON.stringify(value, null, 2)}
 `;
@@ -4788,7 +4798,7 @@ async function markTurn(path, token, kind) {
 async function createTurnDirectory(directory) {
   const token = randomUUID();
   const owner = { pid: process.pid, createdAt: (/* @__PURE__ */ new Date()).toISOString(), token, after: null, ...processOwner(null) };
-  await publishDirectory(join(dirname(directory), `.stage-${basename(directory)}-${process.pid}-${token}`), directory, {
+  await publishDirectory(join(dirname(directory), `.stage-${basename2(directory)}-${process.pid}-${token}`), directory, {
     "0/owner.json": `${JSON.stringify(owner, null, 2)}
 `,
     [`0/${token}.held`]: "",
@@ -5455,7 +5465,7 @@ function isSafeRecovery(value, action) {
   if (!("command" in record)) return true;
   const command = record.command;
   if (typeof command !== "string") return false;
-  const profile = /^tc --profile (\S+) /.exec(command)?.[1];
+  const profile = /^\S+ --profile (\S+) /.exec(command)?.[1];
   if (profile === void 0 || !SAFE_PROFILE_TOKEN.test(profile)) return false;
   return action === "sign_in" ? Object.values(SIGN_IN_TEMPLATES).some((template) => template(profile) === command) : migrationCommand(profile) === command;
 }
@@ -5463,14 +5473,15 @@ var SAFE_PROFILE_TOKEN, MIGRATION_OPERATION_ID, SIGN_IN_TEMPLATES, migrationComm
 var init_recovery = __esm({
   "src/recovery.ts"() {
     "use strict";
+    init_cli_name();
     SAFE_PROFILE_TOKEN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
     MIGRATION_OPERATION_ID = "tinycloud.auth.capabilities";
     SIGN_IN_TEMPLATES = {
-      local: (profile) => `tc --profile ${profile} auth login --method local`,
-      openkey: (profile) => `tc --profile ${profile} auth login --method openkey`,
-      scoped: (profile) => `tc --profile ${profile} auth login --method openkey --paste --manifest <manifest.json>`
+      local: (profile) => `${CLI_NAME} --profile ${profile} auth login --method local`,
+      openkey: (profile) => `${CLI_NAME} --profile ${profile} auth login --method openkey`,
+      scoped: (profile) => `${CLI_NAME} --profile ${profile} auth login --method openkey --paste --manifest <manifest.json>`
     };
-    migrationCommand = (profile) => `tc --profile ${profile} auth caps`;
+    migrationCommand = (profile) => `${CLI_NAME} --profile ${profile} auth caps`;
   }
 });
 
@@ -6972,7 +6983,7 @@ function ownerOfSpace(space) {
   return ownerOrUndefined(`did:pkh:eip155:${match[1]}:${match[2].toLowerCase()}`);
 }
 function putCommands(names, scope) {
-  return dedupe(names).map((name) => `tc secrets put ${name}${scope === void 0 ? "" : ` --scope ${scope}`} --stdin`).join("; ");
+  return dedupe(names).map((name) => `${CLI_NAME} secrets put ${name}${scope === void 0 ? "" : ` --scope ${scope}`} --stdin`).join("; ");
 }
 function dedupe(names) {
   return [...new Set(names)];
@@ -6984,6 +6995,7 @@ var SECRET_MANAGER_ORIGIN, SECRET_REQUEST_MAX_NAMES, SECRET_REQUEST_MAX_URL_LENG
 var init_secret_request = __esm({
   "src/secret-request.ts"() {
     "use strict";
+    init_cli_name();
     SECRET_MANAGER_ORIGIN = "https://secrets.tinycloud.xyz";
     SECRET_REQUEST_MAX_NAMES = 10;
     SECRET_REQUEST_MAX_URL_LENGTH = 8192;
@@ -7093,7 +7105,7 @@ function classifySecretRead(reference, result, localOwner) {
         approval: {
           kind: "openkey",
           requestId: "runtime-hint",
-          fallback: "tc auth grant <request-artifact>"
+          fallback: `${CLI_NAME} auth grant <request-artifact>`
         }
       };
     case "node_unreachable":
@@ -7195,6 +7207,7 @@ var SecretsGetInputSchema, SecretsGetOutputSchema, SECRETS_GET_POSTURES, SECRETS
 var init_secrets_get = __esm({
   "src/operations/secrets-get.ts"() {
     "use strict";
+    init_cli_name();
     init_errors2();
     init_secret_request();
     init_secrets();
@@ -8824,7 +8837,7 @@ async function createRestoredRuntime(target, resolved) {
       )) {
         return failed(summary, operationError(
           "PROFILE_MIGRATION_REQUIRED",
-          `Profile "${profileName}" has a one-time stored-grant upgrade to finish. Run one authenticated command on it (tc --profile <profile> auth caps), then retry.`,
+          `Profile "${profileName}" has a one-time stored-grant upgrade to finish. Run one authenticated command on it (${CLI_NAME} --profile <profile> auth caps), then retry.`,
           { retryable: false, details: { recovery: migrationRecovery(profileName) } }
         ));
       }
@@ -8934,6 +8947,7 @@ function unresolvedSummary(target) {
 var init_runtime = __esm({
   "src/runtime.ts"() {
     "use strict";
+    init_cli_name();
     init_authority();
     init_errors2();
     init_profile();
@@ -8945,6 +8959,7 @@ var init_runtime = __esm({
 });
 
 // src/invoke.ts
+init_cli_name();
 init_jcs();
 init_errors2();
 init_authority();
@@ -9643,7 +9658,7 @@ function approvalAction(request, node) {
     kind: "openkey",
     requestId: request.requestId,
     ...url === void 0 ? {} : { url },
-    fallback: "tc auth grant <request-artifact>"
+    fallback: `${CLI_NAME} auth grant <request-artifact>`
   };
 }
 function exactCapabilities2(value) {