updateWallet
Apply an explicit change set: name, rights and policy assignments.
Status
Proposed target SDK behavior for implementation. It is not an available SDK or evidence of backend support.
Business action#
Atomically request a wallet metadata and authority change: rename it, grant or revoke a right, or assign or remove a policy from its effective scope.
Proposed call#
updateWallet(
input: UpdateWalletInput,
options?: CallOptions,
): Promise<Operation<UpdateWalletResult>>
TypeScript uses requestId, walletId, expectedVersion, changes, actor and optional authorization. changes is a non-empty array of explicit discriminated actions; undefined omits optional data and null never clears a field implicitly.
async def update_wallet(
input: UpdateWalletInput,
*,
options: CallOptions | None = None,
) -> Operation[UpdateWalletResult]: ...
Python uses request_id, wallet_id, expected_version, changes, actor and optional authorization. Each change is a typed action; UNSET means omitted and None is accepted only where the action DTO declares a nullable value.
UpdateWallet(
ctx context.Context,
input *UpdateWalletInput,
) (*Operation[UpdateWalletResult], error)
Go uses RequestID, WalletID, ExpectedVersion, Changes, Actor and optional Authorization, each with the stable JSON name. Change variants make clear/set/remove behavior explicit; zero values and nil do not request a destructive change.
Required input:
requestId,walletId, and expected wallet version;- a complete, explicit change set;
- actor and mode-appropriate embedded-owner or server-service authorization when required.
The change set distinguishes:
- granting or revoking the right to sign, export, or administer restrictions;
- assigning or removing a policy from this wallet;
- changing a display name.
Removing a restrictive policy is not the same action as revoking an actor's right. The SDK must preserve that distinction in inputs, results and audit identity.
Control mode and controlling embedded-owner/server-service identity are immutable in this base surface. Granting ordinary rights cannot transfer ownership, service control or mode; any migration requires a separate accepted contract.
Result and effects#
Success returns the next wallet version, mode, controlling identity, grants, limits and effective policy assignments. Requested changes commit as one backend-defined atomic outcome or none do.
For revocation, committing the next wallet version and denying new authorization by the revoked actor are one atomic effect. An operation not yet at an irreversible signing, export-disclosure or network-submission boundary must pass an execution authorization check and is denied after revocation even if previously staged or durably approved. A signature, export disclosure or submitted transaction already produced before the boundary cannot be clawed back; its in-flight result remains visible for reconciliation.
Same-ID/same-material replay converges; changed material conflicts. Unknown outcomes are recovered through getOperation(requestId). Denial, expiry or insufficient agreement creates no partial grant, revocation, assignment or removal.
Authorization#
Existing authority may complete the call. Otherwise the SDK either uses the application handler and submits its response once or returns requiresAction for explicit continuation; it cannot do both. Proof binds the exact actor, wallet, request ID, expected version and full change set and is accumulated separately from immutable operation material.
A browser session supplies identity only. Embedded changes require owner/admin authority; server-wallet changes require service/admin authority and cannot be granted by end-user login. A session or UI role cannot elevate itself.
Acceptance#
- Positive: a completed update is visible through
getWalletwith one next version and the exact requested owner-right/policy state. - Negative: stale, foreign, denied or conflicting input changes nothing; removing a policy cannot silently preserve its effect; revoking a right cannot be represented as policy removal.
See getWallet, createPolicy, and getOperation.