@tinycloud/sdk-core 2.7.0-beta.2 → 2.7.0-beta.3

package/dist/{capability-Dbx-xqUh.d.cts → capability-DpdAwc1W.d.cts}

@@ -43,4 +43,4 @@ declare function canonicalizePolicyCapability(input: unknown): PolicyCapability;
 declare function policyCapabilityDigestHex(input: unknown): string;
 declare function policyCapabilityContains(authority: unknown, request: unknown): boolean;
 
-export { type JsonObject as J, PolicyCapabilityError as P, type JsonValue as a, type PolicyCapability as b, type PolicyCapabilityErrorCode as c, canonicalizePolicyCapability as d, normalizePolicyCapability as e, policyCapabilityDigestHex as f, jcsCanonicalize as j, normalizeJson as n, policyCapabilityContains as p, serialize as s };
+export { type JsonObject as J, type PolicyCapability as P, PolicyCapabilityError as a, type JsonValue as b, type PolicyCapabilityErrorCode as c, canonicalizePolicyCapability as d, normalizePolicyCapability as e, policyCapabilityDigestHex as f, jcsCanonicalize as j, normalizeJson as n, policyCapabilityContains as p, serialize as s };

package/dist/{capability-Dbx-xqUh.d.ts → capability-DpdAwc1W.d.ts}

@@ -43,4 +43,4 @@ declare function canonicalizePolicyCapability(input: unknown): PolicyCapability;
 declare function policyCapabilityDigestHex(input: unknown): string;
 declare function policyCapabilityContains(authority: unknown, request: unknown): boolean;
 
-export { type JsonObject as J, PolicyCapabilityError as P, type JsonValue as a, type PolicyCapability as b, type PolicyCapabilityErrorCode as c, canonicalizePolicyCapability as d, normalizePolicyCapability as e, policyCapabilityDigestHex as f, jcsCanonicalize as j, normalizeJson as n, policyCapabilityContains as p, serialize as s };
+export { type JsonObject as J, type PolicyCapability as P, PolicyCapabilityError as a, type JsonValue as b, type PolicyCapabilityErrorCode as c, canonicalizePolicyCapability as d, normalizePolicyCapability as e, policyCapabilityDigestHex as f, jcsCanonicalize as j, normalizeJson as n, policyCapabilityContains as p, serialize as s };

package/dist/index.cjs

@@ -3731,6 +3731,43 @@ var DelegationStatusSchema = import_zod4.z.object({
     });
   }
 });
+var DelegationRevocationReceiptSchema = import_zod4.z.object({
+  revoked: import_zod4.z.literal(true),
+  cid: import_zod4.z.string().min(1)
+}).strict();
+var AccountDelegationResourceSchema = import_zod4.z.object({
+  resource: import_zod4.z.string().min(1),
+  actions: import_zod4.z.array(import_zod4.z.string()),
+  caveats: import_zod4.z.array(import_zod4.z.record(import_zod4.z.string(), import_zod4.z.unknown()))
+}).strict();
+var AccountDelegationDateSchema = import_zod4.z.string().datetime({ offset: true }).transform((value) => new Date(value));
+var AccountDelegationRecordSchema = import_zod4.z.object({
+  cid: import_zod4.z.string().min(1),
+  direction: import_zod4.z.enum(["granted", "received"]),
+  delegatorDid: import_zod4.z.string().min(1),
+  delegateDid: import_zod4.z.string().min(1),
+  resources: import_zod4.z.array(AccountDelegationResourceSchema),
+  parents: import_zod4.z.array(import_zod4.z.string()),
+  issuedAt: AccountDelegationDateSchema.nullable(),
+  notBefore: AccountDelegationDateSchema.nullable(),
+  expiresAt: AccountDelegationDateSchema.nullable(),
+  status: import_zod4.z.enum(["active", "pending", "expired", "revoked", "ancestor_revoked"]),
+  revokedAt: AccountDelegationDateSchema.nullable().optional(),
+  revokedBy: import_zod4.z.string().optional(),
+  revokedAncestorCid: import_zod4.z.string().optional()
+}).strict();
+var AccountDelegationPageSchema = import_zod4.z.object({
+  schemaVersion: import_zod4.z.literal(2),
+  items: import_zod4.z.array(AccountDelegationRecordSchema),
+  nextCursor: import_zod4.z.string().optional()
+}).strict();
+var AccountDelegationQueryOptionsSchema = import_zod4.z.object({
+  direction: import_zod4.z.enum(["granted", "received", "all"]).optional(),
+  status: import_zod4.z.enum(["active", "pending", "expired", "revoked", "ancestor_revoked"]).optional(),
+  space: import_zod4.z.string().trim().min(1).optional(),
+  limit: import_zod4.z.number().int().min(1).max(100).optional(),
+  cursor: import_zod4.z.string().min(1).optional()
+}).strict();
 var CapabilityEntrySchema = import_zod4.z.object({
   /** Resource URI this capability applies to */
   resource: import_zod4.z.string(),
@@ -3885,6 +3922,8 @@ var GenerateShareParamsSchema = import_zod4.z.object({
 var DelegationManagerConfigSchema = import_zod4.z.object({
   /** TinyCloud host URLs */
   hosts: import_zod4.z.array(import_zod4.z.string()),
+  /** Account space used by account-wide delegation history queries */
+  accountSpaceId: import_zod4.z.string().min(1).optional(),
   /** Active session for authentication */
   session: import_zod4.z.unknown().refine(
     (val) => val !== null && typeof val === "object",
@@ -6170,12 +6209,20 @@ function withCapabilitiesReadForSpaces(resources) {
   ]);
 }
 function accountRegistryPermissions() {
-  return [ACCOUNT_REGISTRY_PATH, "spaces/"].map((path) => ({
-    service: "tinycloud.kv",
-    space: ACCOUNT_REGISTRY_SPACE,
-    path,
-    actions: ["tinycloud.kv/get", "tinycloud.kv/put", "tinycloud.kv/list"]
-  }));
+  return [
+    ...[ACCOUNT_REGISTRY_PATH, "spaces/"].map((path) => ({
+      service: "tinycloud.kv",
+      space: ACCOUNT_REGISTRY_SPACE,
+      path,
+      actions: ["tinycloud.kv/get", "tinycloud.kv/put", "tinycloud.kv/list"]
+    })),
+    {
+      service: "tinycloud.delegation",
+      space: ACCOUNT_REGISTRY_SPACE,
+      path: "",
+      actions: ["tinycloud.delegation/list"]
+    }
+  ];
 }
 function accountRegistryIndexPermission() {
   return {
@@ -6442,6 +6489,18 @@ var AccountService = class {
       }
     };
     this.delegations = {
+      query: async (options = {}) => {
+        const manager = this.config.getDelegationManager?.();
+        if (!manager) {
+          return (0, import_sdk_services5.err)((0, import_sdk_services5.serviceError)(
+            "NOT_INITIALIZED",
+            "Delegation history requires an authenticated delegation manager",
+            SERVICE_NAME2
+          ));
+        }
+        const queried = await manager.query(options);
+        return queried.ok ? (0, import_sdk_services5.ok)(queried.data) : accountErr(queried.error);
+      },
       list: async (options = {}) => {
         if (options.preferIndex) {
           const indexed = await this.index.delegations.list(options);
@@ -6476,10 +6535,23 @@ var AccountService = class {
         delegations.sort((a, b) => a.spaceId.localeCompare(b.spaceId) || a.cid.localeCompare(b.cid));
         return (0, import_sdk_services5.ok)(delegations);
       },
-      revoke: async (options) => {
-        const space = await this.resolveSpace(options.space);
+      revoke: async (input) => {
+        const cid = typeof input === "string" ? input : input.cid;
+        const manager = this.config.getDelegationManager?.();
+        if (manager) {
+          const revoked2 = await manager.revoke(cid);
+          return revoked2.ok ? (0, import_sdk_services5.ok)(revoked2.data) : accountErr(revoked2.error);
+        }
+        if (typeof input === "string") {
+          return (0, import_sdk_services5.err)((0, import_sdk_services5.serviceError)(
+            "NOT_INITIALIZED",
+            "CID-only revocation requires an authenticated delegation manager",
+            SERVICE_NAME2
+          ));
+        }
+        const space = await this.resolveSpace(input.space);
         if (!space.ok) return space;
-        const revoked = await this.config.getSpaces().get(space.data.id).delegations.revoke(options.cid);
+        const revoked = await this.config.getSpaces().get(space.data.id).delegations.revoke(cid);
         if (!revoked.ok) return accountErr(revoked.error);
         return (0, import_sdk_services5.ok)(void 0);
       }
@@ -7180,6 +7252,7 @@ var DelegationManager = class {
     this.invoke = config.invoke;
     this.invokeAny = config.invokeAny;
     this.fetchFn = config.fetch ?? globalThis.fetch.bind(globalThis);
+    this.accountSpaceId = config.accountSpaceId;
   }
   /**
    * Updates the session (e.g., after re-authentication).
@@ -7385,7 +7458,19 @@ var DelegationManager = class {
           )
         };
       }
-      return { ok: true, data: void 0 };
+      const parsed = DelegationRevocationReceiptSchema.safeParse(await response.json());
+      if (!parsed.success || parsed.data.cid !== cid) {
+        return {
+          ok: false,
+          error: createError(
+            DelegationErrorCodes.REVOCATION_FAILED,
+            "Node returned an invalid delegation revocation receipt",
+            void 0,
+            { cid }
+          )
+        };
+      }
+      return { ok: true, data: parsed.data };
     } catch (error) {
       if (error instanceof Error && error.name === "AbortError") {
         return {
@@ -7482,6 +7567,86 @@ var DelegationManager = class {
       };
     }
   }
+  /** Query lifecycle-complete delegation history for the authenticated account. */
+  async query(options = {}) {
+    const validated = AccountDelegationQueryOptionsSchema.safeParse(options);
+    if (!validated.success) {
+      return {
+        ok: false,
+        error: createError(
+          DelegationErrorCodes.INVALID_INPUT,
+          "Invalid delegation query options",
+          void 0,
+          { issues: validated.error.issues }
+        )
+      };
+    }
+    if (!this.invokeAny) {
+      return {
+        ok: false,
+        error: createError(
+          DelegationErrorCodes.NOT_INITIALIZED,
+          "Delegation query requires an invokeAny function"
+        )
+      };
+    }
+    if (!this.accountSpaceId) {
+      return {
+        ok: false,
+        error: createError(
+          DelegationErrorCodes.NOT_INITIALIZED,
+          "Delegation query requires an account space"
+        )
+      };
+    }
+    try {
+      const invocationHeaders = this.invokeAny(this.session, [{
+        spaceId: this.accountSpaceId,
+        service: "delegation",
+        path: "",
+        action: DelegationAction.LIST
+      }]);
+      const headers = Object.fromEntries(new Headers(invocationHeaders).entries());
+      headers["content-type"] = "application/json";
+      const response = await this.fetchFn(`${this.host}/delegation/query`, {
+        method: "POST",
+        headers,
+        body: JSON.stringify(validated.data)
+      });
+      if (!response.ok) {
+        const errorText = await response.text();
+        return {
+          ok: false,
+          error: createError(
+            DelegationErrorCodes.NETWORK_ERROR,
+            `Failed to query delegations: ${response.status} - ${errorText}`,
+            void 0,
+            { status: response.status }
+          )
+        };
+      }
+      const parsed = AccountDelegationPageSchema.safeParse(await response.json());
+      if (!parsed.success) {
+        return {
+          ok: false,
+          error: createError(
+            DelegationErrorCodes.INVALID_TOKEN,
+            "Node returned an invalid delegation query response"
+          )
+        };
+      }
+      return { ok: true, data: parsed.data };
+    } catch (error) {
+      return {
+        ok: false,
+        error: createError(
+          DelegationErrorCodes.NETWORK_ERROR,
+          `Network error during delegation query: ${String(error)}`,
+          error instanceof Error ? error : void 0
+        )
+      };
+    }
+  }
   /**
    * Lists all delegations for the current session's space.
    *