@tinycloud/sdk-core 3.8.0-beta.14 → 3.8.0-beta.16

package/dist/{credential-admission-Cg1M9uyV.d.cts → credential-admission-B7_F6Yb3.d.cts}

@@ -426,6 +426,7 @@ interface UnifiedContentSource {
     readonly kvResource: string;
     readonly selector: UnifiedResourceSelector;
     readonly encryptionNetwork: string;
+    readonly encryptionKeyPath?: string;
     readonly encryptedSymmetricKeyDigestHex: string;
     readonly keyVersion: number;
     readonly mode: "mutable" | "immutable";

package/dist/{credential-admission-7I_ymo-C.d.ts → credential-admission-DCJhDFFv.d.ts}

@@ -426,6 +426,7 @@ interface UnifiedContentSource {
     readonly kvResource: string;
     readonly selector: UnifiedResourceSelector;
     readonly encryptionNetwork: string;
+    readonly encryptionKeyPath?: string;
     readonly encryptedSymmetricKeyDigestHex: string;
     readonly keyVersion: number;
     readonly mode: "mutable" | "immutable";

package/dist/delegations/index.cjs

@@ -1301,6 +1301,7 @@ function validateSharingServiceConfig(data) {
 var import_ms = __toESM(require("ms"), 1);
 var import_bootstrap = require("@tinycloud/bootstrap");
 var import_sdk_services = require("@tinycloud/sdk-services");
+var import_resource = require("@tinycloud/sdk-services/encryption/resource");
 var SERVICE_SHORT_TO_LONG = Object.freeze({
   kv: "tinycloud.kv",
   space: "tinycloud.space",
@@ -1385,6 +1386,7 @@ function principalDid(didUrl) {
 }
 
 // src/capabilities.ts
+var import_resource2 = require("@tinycloud/sdk-services/encryption/resource");
 var CaveatedDelegationUnsupportedError = class extends Error {
   constructor(entries) {
     super(
@@ -2610,7 +2612,7 @@ var hashes = { ...sha2_browser_exports, ...identity_exports2 };
 var import_ed255194 = require("@noble/curves/ed25519");
 
 // src/delegations/ShareRecipientClient.ts
-var import_sdk_services3 = require("@tinycloud/sdk-services");
+var import_sdk_services4 = require("@tinycloud/sdk-services");
 var import_ed255193 = require("@noble/curves/ed25519");
 var import_sha2564 = require("@noble/hashes/sha256");
 
@@ -3691,6 +3693,7 @@ var import_sha2563 = require("@noble/hashes/sha256");
 var import_blake32 = require("@noble/hashes/blake3");
 var import_ed255192 = require("@noble/curves/ed25519");
 var import_zod4 = require("zod");
+var import_sdk_services3 = require("@tinycloud/sdk-services");
 
 // src/policy/errors.ts
 var SignedObjectProfileError = class extends Error {
@@ -4237,9 +4240,9 @@ function redactedCode(error) {
   if (error instanceof ShareConflict) return error.code;
   const code3 = error && typeof error === "object" && "code" in error ? error.code : void 0;
   if (typeof code3 !== "string") return "SHARE_INVALID";
-  if (code3 === import_sdk_services3.ErrorCodes.KV_PRECONDITION_FAILED || code3 === "412") return "SHARE_CONFLICT";
-  if (code3 === import_sdk_services3.ErrorCodes.NODE_BUSY || code3 === import_sdk_services3.ErrorCodes.REQUEST_TIMEOUT) return "SHARE_OFFLINE";
-  if (code3 === import_sdk_services3.ErrorCodes.OUTCOME_UNKNOWN) return "SHARE_WRITE_FAILED";
+  if (code3 === import_sdk_services4.ErrorCodes.KV_PRECONDITION_FAILED || code3 === "412") return "SHARE_CONFLICT";
+  if (code3 === import_sdk_services4.ErrorCodes.NODE_BUSY || code3 === import_sdk_services4.ErrorCodes.REQUEST_TIMEOUT) return "SHARE_OFFLINE";
+  if (code3 === import_sdk_services4.ErrorCodes.OUTCOME_UNKNOWN) return "SHARE_WRITE_FAILED";
   if (code3 === "KV_NOT_FOUND" || code3 === "NOT_FOUND" || code3 === "404") return "SHARE_NOT_FOUND";
   if (code3.includes("EXPIRED") || code3 === "expired") return "SHARE_EXPIRED";
   if (code3.includes("REVOK")) return "SHARE_REVOKED";
@@ -4478,7 +4481,7 @@ var ShareRecipientClient = class {
           if (portableDelegation !== void 0 && kv !== void 0) {
             const result2 = await kv.put(resolvedPath, bytes2, { contentType: input.contentType ?? envelope.content.mimeType, ifMatch: input.etag });
             if (!result2.ok) {
-              if (result2.error.code === import_sdk_services3.ErrorCodes.KV_PRECONDITION_FAILED) throw new ShareConflict(resolvedPath, result2.error.meta?.etag);
+              if (result2.error.code === import_sdk_services4.ErrorCodes.KV_PRECONDITION_FAILED) throw new ShareConflict(resolvedPath, result2.error.meta?.etag);
               throw result2.error;
             }
             return { etag: result2.data.headers.etag };
@@ -4486,7 +4489,7 @@ var ShareRecipientClient = class {
           if (policySession !== void 0) return this.nativeSave(envelope, policySession, resolvedPath, bytes2, input);
           const result = await kv.put(resolvedPath, bytes2, { contentType: input.contentType ?? envelope.content.mimeType, ifMatch: input.etag });
           if (!result.ok) {
-            if (result.error.code === import_sdk_services3.ErrorCodes.KV_PRECONDITION_FAILED) throw new ShareConflict(resolvedPath, result.error.meta?.etag);
+            if (result.error.code === import_sdk_services4.ErrorCodes.KV_PRECONDITION_FAILED) throw new ShareConflict(resolvedPath, result.error.meta?.etag);
             throw result.error;
           }
           return { etag: result.data.headers.etag };
@@ -4570,8 +4573,8 @@ var ShareRecipientClient = class {
     if (this.options.createKVService !== void 0) {
       return this.options.createKVService({ hosts: [origin], session, invoke, fetch: this.fetchFn });
     }
-    const context = new import_sdk_services3.ServiceContext({ hosts: [origin], session, invoke, fetch: this.fetchFn });
-    const service = new import_sdk_services3.KVService({ prefix: "" });
+    const context = new import_sdk_services4.ServiceContext({ hosts: [origin], session, invoke, fetch: this.fetchFn });
+    const service = new import_sdk_services4.KVService({ prefix: "" });
     context.registerService("kv", service);
     service.initialize(context);
     return service;