@tinycloud/share-sdk 1.5.0-beta.3 → 1.5.0-beta.5

package/dist/web-recipient.js

@@ -6076,6 +6076,13 @@ function isLegacyV2Link(link) {
 import { ed25519 as ed255194, x25519 } from "@noble/curves/ed25519";
 import { sha256 as sha2563 } from "@noble/hashes/sha256";
 
+// src/encryption-origin.ts
+var TEE_NODE_ORIGIN = "https://tee.node.tinycloud.xyz";
+var PRODUCTION_NODE_ORIGINS = /* @__PURE__ */ new Set(["https://node.tinycloud.xyz", TEE_NODE_ORIGIN]);
+function encryptionNodeOrigin(nodeOrigin) {
+  return PRODUCTION_NODE_ORIGINS.has(nodeOrigin) ? TEE_NODE_ORIGIN : nodeOrigin;
+}
+
 // src/protocol.ts
 var SHARE_V2_PROTOCOL = Object.freeze({
   challengeDomain: "xyz.tinycloud.share/policy-challenge/v2\0",
@@ -6406,7 +6413,7 @@ var ShareRecipientClient = class {
     });
     try {
       this.options.onStage?.("decryption");
-      const response = await this.fetchFn(new URL("/invoke", this.options.nodeOrigin), { method: "POST", redirect: "error", headers: { accept: "application/json", "content-type": "application/json", Authorization: invocation.authorization }, body: JSON.stringify(body), ...this.options.signal === void 0 ? {} : { signal: this.options.signal } });
+      const response = await this.fetchFn(new URL("/invoke", encryptionNodeOrigin(this.options.nodeOrigin)), { method: "POST", redirect: "error", headers: { accept: "application/json", "content-type": "application/json", Authorization: invocation.authorization }, body: JSON.stringify(body), ...this.options.signal === void 0 ? {} : { signal: this.options.signal } });
       if (!response.ok) throw await recipientHttpError(response, "v3 decrypt invocation rejected");
       const value = object2(await response.json(), "v3 decrypt response");
       const allowed = ["type", "targetNode", "networkId", "invocationCid", "encryptedSymmetricKeyHash", "receiverPublicKeyHash", "wrappedKey", "alg", "keyVersion", "requestHash", "nodeId", "nodeSignature"];