@tinycloud/share-sdk 1.5.0-beta.2 → 1.5.0-beta.4

package/dist/share-root.js

@@ -7068,6 +7068,15 @@ function parseArtifactVersionPath(path) {
 
 // src/share-network.ts
 import { sha256 as sha2565 } from "@noble/hashes/sha256";
+
+// src/encryption-origin.ts
+var TEE_NODE_ORIGIN = "https://tee.node.tinycloud.xyz";
+var PRODUCTION_NODE_ORIGINS = /* @__PURE__ */ new Set(["https://node.tinycloud.xyz", TEE_NODE_ORIGIN]);
+function encryptionNodeOrigin(nodeOrigin) {
+  return PRODUCTION_NODE_ORIGINS.has(nodeOrigin) ? TEE_NODE_ORIGIN : nodeOrigin;
+}
+
+// src/share-network.ts
 var SHARE_NETWORK_NAME_PREFIX = "share-";
 var NETWORK_SAFE_SHARE_ID = /^[a-z0-9][a-z0-9-]{15,35}$/;
 var NETWORK_URN = /^urn:tinycloud:encryption:did:pkh:eip155:([1-9]\d*):(0x[0-9a-fA-F]{40}):([a-z0-9][a-z0-9-]*)$/;
@@ -7114,7 +7123,7 @@ async function nodeDidOf(nodeOrigin, fetchFn) {
   return nodeDid;
 }
 async function lookupShareNetwork(nodeOrigin, networkId, fetchFn) {
-  const response = await fetchFn(new URL(`/encryption/networks/${encodeURIComponent(networkId)}`, nodeOrigin), { redirect: "error" });
+  const response = await fetchFn(new URL(`/encryption/networks/${encodeURIComponent(networkId)}`, encryptionNodeOrigin(nodeOrigin)), { redirect: "error" });
   if (response.status === 404) return { state: "absent" };
   if (!response.ok) throw new ShareRootError("node-refused", `share network lookup failed: HTTP ${response.status}`);
   let body;
@@ -7162,7 +7171,7 @@ async function sendNetworkAdmin(input) {
     sign: input.signer.sign
   });
   const path = input.action === NETWORK_CREATE_ABILITY ? "/encryption/networks" : `/encryption/networks/${encodeURIComponent(input.networkId)}/revoke`;
-  const response = await input.fetch(new URL(path, input.nodeOrigin), {
+  const response = await input.fetch(new URL(path, encryptionNodeOrigin(input.nodeOrigin)), {
     method: "POST",
     redirect: "error",
     headers: { Authorization: invocation.authorization, ...input.action === NETWORK_CREATE_ABILITY ? { "content-type": "application/json" } : {} },
@@ -7376,7 +7385,7 @@ var ShareGrant = class _ShareGrant {
     const signer = this.#signer();
     const first = await lookupShareNetwork(this.nodeOrigin, this.networkId, this.#fetch);
     if (first.state === "absent") {
-      const nodeDid = await nodeDidOf(this.nodeOrigin, this.#fetch);
+      const nodeDid = await nodeDidOf(encryptionNodeOrigin(this.nodeOrigin), this.#fetch);
       await sendNetworkAdmin({ nodeOrigin: this.nodeOrigin, nodeDid, networkId: this.networkId, action: NETWORK_CREATE_ABILITY, signer, proof: this.cid, fetch: this.#fetch, now: this.#now });
       return this.assertNetworkActive();
     }
@@ -7396,7 +7405,7 @@ var ShareGrant = class _ShareGrant {
    */
   async retireNetwork() {
     const signer = this.#signer();
-    const nodeDid = await nodeDidOf(this.nodeOrigin, this.#fetch);
+    const nodeDid = await nodeDidOf(encryptionNodeOrigin(this.nodeOrigin), this.#fetch);
     return retireShareNetwork({ nodeOrigin: this.nodeOrigin, nodeDid, networkId: this.networkId, signer, proof: this.cid, fetch: this.#fetch, now: this.#now });
   }
   /** Step 4 check (I1): the stored object belongs to this share, on its exact key and network. */
@@ -7723,7 +7732,7 @@ async function runShareControlBatch(input) {
     const imported = await fetchFn(new URL("/delegate", nodeOrigin), { method: "POST", redirect: "error", headers: { Authorization: headerValue(bytes2) } });
     if (!imported.ok) throw new ShareRootError("node-refused", `owner control import failed: HTTP ${imported.status} ${(await imported.text()).slice(0, 120)}`);
     await imported.body?.cancel();
-    const nodeDid = await nodeDidOf(nodeOrigin, fetchFn);
+    const nodeDid = await nodeDidOf(encryptionNodeOrigin(nodeOrigin), fetchFn);
     const signer = { did: key.did, sign: (data) => key.sign(data) };
     const networks = [];
     for (const target of batch.targets) {