@tinycloud/sdk-core 3.3.0-beta.22 → 3.3.0-beta.23

package/dist/delegations/index.cjs

@@ -185,7 +185,8 @@ var DelegationErrorCodes = {
   INVALID_TOKEN: "INVALID_TOKEN",
   KV_SERVICE_UNAVAILABLE: "KV_SERVICE_UNAVAILABLE",
   DATA_FETCH_FAILED: "DATA_FETCH_FAILED",
-  VALIDATION_ERROR: "VALIDATION_ERROR"
+  VALIDATION_ERROR: "VALIDATION_ERROR",
+  UNSUPPORTED_OPERATION: "UNSUPPORTED_OPERATION"
 };
 var DelegationSchema = import_zod.z.object({
   /** Content identifier (CID) of the delegation */
@@ -534,26 +535,8 @@ var CreateDelegationWasmResultSchema = import_zod.z.object({
   resources: import_zod.z.array(DelegatedResourceSchema)
 });
 
-// src/expiry.ts
-var EPHEMERAL_MS = 60 * 60 * 1e3;
-var SIGNED_READ_URL_MS = 5 * 60 * 1e3;
-var SESSION_MS = 30 * 24 * 60 * 60 * 1e3;
-var SHARE_MS = 7 * 24 * 60 * 60 * 1e3;
-var APP_MS = 30 * 24 * 60 * 60 * 1e3;
-var MAX_MS = 10 * 365 * 24 * 60 * 60 * 1e3;
-var EXPIRY = {
-  EPHEMERAL_MS,
-  SIGNED_READ_URL_MS,
-  SESSION_MS,
-  SHARE_MS,
-  APP_MS,
-  MAX_MS
-};
-var DEFAULT_SIGNED_READ_URL_EXPIRY_MS = EXPIRY.SIGNED_READ_URL_MS;
-
 // src/delegations/DelegationManager.ts
 var DelegationAction = {
-  CREATE: "tinycloud.delegation/create",
   REVOKE: "tinycloud.delegation/revoke",
   STATUS: "tinycloud.delegation/status",
   LIST: "tinycloud.delegation/list",
@@ -569,6 +552,21 @@ function createError(code3, message, cause, meta) {
     meta
   };
 }
+async function readInvokedJson(response, action) {
+  const text = await response.text();
+  if (text.trim() === "") {
+    return {
+      ok: false,
+      error: createError(
+        DelegationErrorCodes.UNSUPPORTED_OPERATION,
+        `The node answered ${action} with an empty ${response.status} response; it does not support this operation`,
+        void 0,
+        { status: response.status, action }
+      )
+    };
+  }
+  return { ok: true, data: JSON.parse(text) };
+}
 var DelegationManager = class {
   /**
    * Creates a new DelegationManager instance.
@@ -609,114 +607,6 @@ var DelegationManager = class {
       body
     });
   }
-  /**
-   * Creates a new delegation.
-   *
-   * Delegates specific permissions to another DID for a given path.
-   * The delegatee can then use these permissions to access resources
-   * within the specified scope.
-   *
-   * @param params - Parameters for the delegation
-   * @returns Result containing the created Delegation or an error
-   *
-   * @example
-   * ```typescript
-   * const result = await manager.create({
-   *   delegateDID: bob.did,
-   *   path: "documents/shared/",
-   *   actions: ["tinycloud.kv/get", "tinycloud.kv/put"],
-   *   expiry: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000), // 7 days
-   * });
-   * ```
-   */
-  async create(params) {
-    if (!params.delegateDID) {
-      return {
-        ok: false,
-        error: createError(
-          DelegationErrorCodes.INVALID_INPUT,
-          "delegateDID is required"
-        )
-      };
-    }
-    if (!params.path) {
-      return {
-        ok: false,
-        error: createError(
-          DelegationErrorCodes.INVALID_INPUT,
-          "path is required"
-        )
-      };
-    }
-    if (!params.actions || params.actions.length === 0) {
-      return {
-        ok: false,
-        error: createError(
-          DelegationErrorCodes.INVALID_INPUT,
-          "at least one action is required"
-        )
-      };
-    }
-    try {
-      const body = JSON.stringify({
-        delegateDID: params.delegateDID,
-        path: params.path,
-        actions: params.actions,
-        expiry: params.expiry?.toISOString(),
-        disableSubDelegation: params.disableSubDelegation ?? false,
-        statement: params.statement
-      });
-      const response = await this.invokeOperation(
-        params.path,
-        DelegationAction.CREATE,
-        body
-      );
-      if (!response.ok) {
-        const errorText = await response.text();
-        return {
-          ok: false,
-          error: createError(
-            DelegationErrorCodes.CREATION_FAILED,
-            `Failed to create delegation: ${response.status} - ${errorText}`,
-            void 0,
-            { status: response.status, path: params.path }
-          )
-        };
-      }
-      const apiResponse = await response.json();
-      const delegation = {
-        cid: apiResponse.cid ?? "",
-        delegateDID: params.delegateDID,
-        spaceId: this.session.spaceId,
-        path: params.path,
-        actions: params.actions,
-        expiry: params.expiry ?? new Date(Date.now() + EXPIRY.SHARE_MS),
-        isRevoked: false,
-        allowSubDelegation: !(params.disableSubDelegation ?? false),
-        createdAt: /* @__PURE__ */ new Date()
-      };
-      return { ok: true, data: delegation };
-    } catch (error) {
-      if (error instanceof Error && error.name === "AbortError") {
-        return {
-          ok: false,
-          error: createError(
-            DelegationErrorCodes.ABORTED,
-            "Request aborted",
-            error
-          )
-        };
-      }
-      return {
-        ok: false,
-        error: createError(
-          DelegationErrorCodes.NETWORK_ERROR,
-          `Network error during delegation creation: ${String(error)}`,
-          error instanceof Error ? error : void 0
-        )
-      };
-    }
-  }
   /**
    * Revokes an existing delegation.
    *
@@ -945,19 +835,33 @@ var DelegationManager = class {
       };
     }
     try {
-      const invocationHeaders = this.invokeAny(this.session, [{
-        spaceId: accountSpaceId,
-        service: "delegation",
-        path: "",
-        action: DelegationAction.LIST
-      }]);
-      const headers = Object.fromEntries(new Headers(invocationHeaders).entries());
-      headers["content-type"] = "application/json";
-      const response = await this.fetchFn(`${this.host}/delegation/query`, {
-        method: "POST",
-        headers,
-        body: JSON.stringify(validated.data)
-      });
+      let response;
+      for (const spaceId of /* @__PURE__ */ new Set([accountSpaceId, this.session.spaceId])) {
+        const headers = Object.fromEntries(new Headers(this.invokeAny(this.session, [{
+          spaceId,
+          service: "delegation",
+          path: "",
+          action: DelegationAction.LIST
+        }])).entries());
+        headers["content-type"] = "application/json";
+        response = await this.fetchFn(`${this.host}/delegation/query`, {
+          method: "POST",
+          headers,
+          body: JSON.stringify(validated.data)
+        });
+        if (response.status !== 403) break;
+      }
+      if (!response || response.status === 403) {
+        return {
+          ok: false,
+          error: createError(
+            DelegationErrorCodes.PERMISSION_DENIED,
+            "This session does not hold tinycloud.delegation/list on the account space or its own space",
+            void 0,
+            { status: 403 }
+          )
+        };
+      }
       if (!response.ok) {
         const errorText = await response.text();
         return {
@@ -992,75 +896,6 @@ var DelegationManager = class {
       };
     }
   }
-  /**
-   * Lists all delegations for the current session's space.
-   *
-   * Returns both delegations created by the current user (as delegator)
-   * and delegations granted to the current user (as delegatee).
-   *
-   * @returns Result containing an array of Delegations or an error
-   *
-   * @example
-   * ```typescript
-   * const result = await manager.list();
-   * if (result.ok) {
-   *   for (const delegation of result.data) {
-   *     console.log(`${delegation.cid}: ${delegation.path} -> ${delegation.delegateDID}`);
-   *   }
-   * }
-   * ```
-   */
-  async list() {
-    try {
-      const response = await this.invokeOperation("", DelegationAction.LIST);
-      if (!response.ok) {
-        const errorText = await response.text();
-        return {
-          ok: false,
-          error: createError(
-            DelegationErrorCodes.NETWORK_ERROR,
-            `Failed to list delegations: ${response.status} - ${errorText}`,
-            void 0,
-            { status: response.status }
-          )
-        };
-      }
-      const data = await response.json();
-      const delegations = data.map((item) => ({
-        cid: item.cid,
-        delegateDID: item.delegateDID,
-        delegatorDID: item.delegatorDID,
-        spaceId: item.spaceId,
-        path: item.path,
-        actions: item.actions,
-        expiry: new Date(item.expiry),
-        isRevoked: item.isRevoked,
-        createdAt: item.createdAt ? new Date(item.createdAt) : void 0,
-        parentCid: item.parentCid,
-        allowSubDelegation: item.allowSubDelegation
-      }));
-      return { ok: true, data: delegations };
-    } catch (error) {
-      if (error instanceof Error && error.name === "AbortError") {
-        return {
-          ok: false,
-          error: createError(
-            DelegationErrorCodes.ABORTED,
-            "Request aborted",
-            error
-          )
-        };
-      }
-      return {
-        ok: false,
-        error: createError(
-          DelegationErrorCodes.NETWORK_ERROR,
-          `Network error during delegation list: ${String(error)}`,
-          error instanceof Error ? error : void 0
-        )
-      };
-    }
-  }
   /**
    * Gets the full delegation chain for a given delegation.
    *
@@ -1119,7 +954,9 @@ var DelegationManager = class {
           )
         };
       }
-      const data = await response.json();
+      const parsed = await readInvokedJson(response, DelegationAction.GET);
+      if (!parsed.ok) return parsed;
+      const data = parsed.data;
       const chain = data.chain.map((item) => ({
         cid: item.cid,
         delegateDID: item.delegateDID,
@@ -1216,8 +1053,9 @@ var DelegationManager = class {
           )
         };
       }
-      const data = await response.json();
-      return { ok: true, data: data.allowed };
+      const body2 = await readInvokedJson(response, DelegationAction.CHECK);
+      if (!body2.ok) return body2;
+      return { ok: true, data: body2.data.allowed };
     } catch (error) {
       if (error instanceof Error && error.name === "AbortError") {
         return {
@@ -1305,14 +1143,6 @@ var SharingServiceConfigSchema = import_zod2.z.object({
     (val) => val !== null && typeof val === "object",
     { message: "Expected an ICapabilityKeyRegistry object" }
   ),
-  /**
-   * Delegation manager for creating delegations.
-   * Required for generate(), optional for receive().
-   */
-  delegationManager: import_zod2.z.unknown().refine(
-    (val) => val === void 0 || val !== null && typeof val === "object",
-    { message: "Expected a DelegationManager object or undefined" }
-  ).optional(),
   /** Factory for creating KV service instances */
   createKVService: import_zod2.z.unknown().refine(
     (val) => typeof val === "function",
@@ -5413,6 +5243,23 @@ var ShareRecipientClient = class {
   }
 };
 
+// src/expiry.ts
+var EPHEMERAL_MS = 60 * 60 * 1e3;
+var SIGNED_READ_URL_MS = 5 * 60 * 1e3;
+var SESSION_MS = 30 * 24 * 60 * 60 * 1e3;
+var SHARE_MS = 7 * 24 * 60 * 60 * 1e3;
+var APP_MS = 30 * 24 * 60 * 60 * 1e3;
+var MAX_MS = 10 * 365 * 24 * 60 * 60 * 1e3;
+var EXPIRY = {
+  EPHEMERAL_MS,
+  SIGNED_READ_URL_MS,
+  SESSION_MS,
+  SHARE_MS,
+  APP_MS,
+  MAX_MS
+};
+var DEFAULT_SIGNED_READ_URL_EXPIRY_MS = EXPIRY.SIGNED_READ_URL_MS;
+
 // src/delegations/SharingService.ts
 function spaceIdsEqual(left, right) {
   const normalizeOwnerAddress = (space) => {
@@ -5511,7 +5358,6 @@ var SharingService = class {
     this.fetchFn = config.fetch ?? globalThis.fetch.bind(globalThis);
     this.keyProvider = config.keyProvider;
     this.registry = config.registry;
-    this.delegationManager = config.delegationManager;
     this.createKVService = config.createKVService;
     this.baseUrl = (config.baseUrl ?? "").replace(/\/$/, "");
     this.createDelegationFn = config.createDelegation;
@@ -5537,16 +5383,13 @@ var SharingService = class {
   }
   /**
    * Updates the service configuration.
-   * Used to add full capabilities (session, delegationManager, createDelegation, createDelegationWasm) after signIn.
+   * Used to add full capabilities (session, createDelegation, createDelegationWasm) after signIn.
    */
   updateConfig(config) {
     this.assertActiveFn?.();
     if (config.session !== void 0) {
       this.session = config.session;
     }
-    if (config.delegationManager !== void 0) {
-      this.delegationManager = config.delegationManager;
-    }
     if (config.createDelegation !== void 0) {
       this.createDelegationFn = config.createDelegation;
     }
@@ -5585,12 +5428,12 @@ var SharingService = class {
         )
       };
     }
-    if (!this.createDelegationWasmFn && !this.createDelegationFn && !this.delegationManager) {
+    if (!this.createDelegationWasmFn && !this.createDelegationFn) {
       return {
         ok: false,
         error: createError2(
           DelegationErrorCodes.NOT_INITIALIZED,
-          "DelegationManager, createDelegation, or createDelegationWasm function required for generating sharing links."
+          "createDelegation or createDelegationWasm function required for generating sharing links."
         )
       };
     }
@@ -5942,7 +5785,7 @@ var SharingService = class {
         expiry,
         disableSubDelegation: false
       };
-      const delegationResult = this.createDelegationFn ? await this.createDelegationFn(delegationParams) : await this.delegationManager.create(delegationParams);
+      const delegationResult = await this.createDelegationFn(delegationParams);
       const delegationCreationActiveError = this.retiredGraphError();
       if (delegationCreationActiveError) return { ok: false, error: delegationCreationActiveError };
       if (!delegationResult.ok) {