@aithos/sdk 0.1.0-alpha.43 → 0.1.0-alpha.45

package/dist/src/compute.js

@@ -20,6 +20,7 @@ import { buildSignedEnvelope, } from "@aithos/protocol-client";
 import { computeInvokeUrl, } from "./endpoints.js";
 import { delegateKeyPair, ownerKeyPair, } from "./internal/protocol-client-bridge.js";
 import { AithosSDKError } from "./types.js";
+import { LocalPendingTranscribeTracker, TranscribeDraftStore, } from "./transcribe-resilience.js";
 /**
  * `sdk.compute` namespace. Constructed once by the {@link AithosSDK}
  * constructor; reads the active owner from the supplied
@@ -28,9 +29,23 @@ import { AithosSDKError } from "./types.js";
  */
 export class ComputeNamespace {
     #deps;
+    // Lazily-created browser resilience helpers (see transcribe-resilience.ts).
+    // Created on first access only — the core invoke path never touches them.
+    #pendingTracker = null;
+    #draftStore = null;
     constructor(deps) {
         this.#deps = deps;
     }
+    #tracker() {
+        if (!this.#pendingTracker)
+            this.#pendingTracker = new LocalPendingTranscribeTracker();
+        return this.#pendingTracker;
+    }
+    #draft() {
+        if (!this.#draftStore)
+            this.#draftStore = new TranscribeDraftStore();
+        return this.#draftStore;
+    }
     /**
      * Invoke a Bedrock model through the compute proxy. See
      * {@link InvokeBedrockArgs} and {@link InvokeBedrockResult}.
@@ -234,6 +249,307 @@ export class ComputeNamespace {
             signal: args.signal,
         });
     }
+    /* ---------------------------------------------------------------------- */
+    /*  Transcription — low-level (advanced) API                              */
+    /*                                                                        */
+    /*  Four thin wrappers over the JSON-RPC methods. Use these when you want */
+    /*  to own the upload + polling loop; otherwise prefer `invokeTranscribe` */
+    /*  which composes them. All four are isomorphic (sign + POST only).      */
+    /* ---------------------------------------------------------------------- */
+    /**
+     * Provision a transcription job and get a pre-signed S3 URL to PUT the
+     * audio to. No wallet debit. `mandateId` only selects the delegate
+     * signer (it is not part of the wire params for prepare).
+     */
+    async prepareTranscribe(args) {
+        const { endpoints, fetch: fetchImpl } = this.#deps;
+        const choice = this.#resolveSigner(args.mandateId);
+        const url = computeInvokeUrl(endpoints);
+        const params = {
+            app_did: this.#deps.appDid,
+            content_type: args.contentType,
+        };
+        if (args.durationSecEstimate !== undefined) {
+            params.duration_sec_estimate = args.durationSecEstimate;
+        }
+        const r = await this.#signAndPost({
+            url,
+            method: "aithos.compute_transcribe_prepare",
+            params,
+            choice,
+            fetchImpl,
+            signal: args.signal,
+        });
+        return {
+            jobId: r.job_id,
+            uploadUrl: r.upload_url,
+            s3ObjectKey: r.s3_object_key,
+            expiresAt: r.expires_at,
+        };
+    }
+    /**
+     * Verify the uploaded audio, pre-debit the wallet, and launch the AWS
+     * Transcribe job. Returns immediately with `status: "running"`.
+     */
+    async startTranscribe(args) {
+        const { endpoints, fetch: fetchImpl } = this.#deps;
+        const choice = this.#resolveSigner(args.mandateId);
+        const url = computeInvokeUrl(endpoints);
+        const params = {
+            app_did: this.#deps.appDid,
+            mandate_id: this.#resolveMandateIdForWire(args.mandateId, choice),
+            job_id: args.jobId,
+            model: args.model,
+            duration_sec: args.durationSec,
+        };
+        if (args.languageCode !== undefined)
+            params.language_code = args.languageCode;
+        if (args.diarization !== undefined)
+            params.diarization = args.diarization;
+        if (args.idempotencyKey !== undefined)
+            params.idempotency_key = args.idempotencyKey;
+        const r = await this.#signAndPost({
+            url,
+            method: "aithos.compute_transcribe_start",
+            params,
+            choice,
+            fetchImpl,
+            signal: args.signal,
+        });
+        return {
+            jobId: r.job_id,
+            status: "running",
+            estimatedCredits: r.estimated_credits,
+            walletBalance: r.walletBalance,
+            ...(r.fundedBy ? { fundedBy: r.fundedBy } : {}),
+            ...(r.receiptId ? { receiptId: r.receiptId } : {}),
+        };
+    }
+    /**
+     * Poll a job's status. On completion the server finalises (reconcile +
+     * audit) and returns the transcript; a resumed poll after reconnect
+     * re-reads the transcript while it's still in the 24h output window.
+     */
+    async getTranscribeStatus(args) {
+        const { endpoints, fetch: fetchImpl } = this.#deps;
+        const choice = this.#resolveSigner(args.mandateId);
+        const url = computeInvokeUrl(endpoints);
+        const params = { job_id: args.jobId };
+        const r = await this.#signAndPost({
+            url,
+            method: "aithos.compute_transcribe_status",
+            params,
+            choice,
+            fetchImpl,
+            signal: args.signal,
+        });
+        return mapTranscribeStatus(args.jobId, r);
+    }
+    /**
+     * List the caller's transcription jobs. Excludes terminal `completed`
+     * jobs unless `includeCompleted` is set — the resilience "what's still
+     * pending server-side" query.
+     */
+    async listPendingTranscribes(args) {
+        const { endpoints, fetch: fetchImpl } = this.#deps;
+        const choice = this.#resolveSigner(args?.mandateId);
+        const url = computeInvokeUrl(endpoints);
+        const params = {};
+        if (args?.includeCompleted !== undefined) {
+            params.include_completed = args.includeCompleted;
+        }
+        const r = await this.#signAndPost({
+            url,
+            method: "aithos.compute_transcribe_list_pending",
+            params,
+            choice,
+            fetchImpl,
+            signal: args?.signal,
+        });
+        return {
+            jobs: (r.jobs ?? []).map((j) => ({
+                jobId: String(j.job_id),
+                status: j.status,
+                createdAt: Number(j.created_at),
+                ...(j.estimated_credits !== undefined
+                    ? { estimatedCredits: Number(j.estimated_credits) }
+                    : {}),
+                ...(j.creditsCharged !== undefined
+                    ? { creditsCharged: Number(j.creditsCharged) }
+                    : {}),
+            })),
+        };
+    }
+    /* ---------------------------------------------------------------------- */
+    /*  Transcription — high-level one-call API                               */
+    /* ---------------------------------------------------------------------- */
+    /**
+     * Transcribe an audio Blob to text in one call. Composes the four
+     * low-level methods: prepare → direct S3 upload → start → poll. Returns
+     * the transcript and stores NOTHING server-side beyond the ephemeral
+     * job — the consumer decides what to do with the result.
+     *
+     * Isomorphic: depends only on `Blob`, `fetch`/`XMLHttpRequest` and
+     * timers. On a backend, pass `durationSecOverride` (no Blob duration
+     * probing is possible without a DOM); in a browser the duration is
+     * probed automatically when omitted.
+     *
+     * Resilience: the job id is recorded in a localStorage tracker (browser)
+     * before upload, so `listLocalPendingTranscribes()` / `resumeTranscribe()`
+     * can recover a job whose result never arrived. In Node the tracker is a
+     * harmless in-memory no-op.
+     */
+    async invokeTranscribe(args) {
+        const idempotencyKey = args.idempotencyKey ?? generateIdempotencyKey();
+        const model = args.model ?? "transcribe:aws-fr-standard";
+        const contentType = args.audio.type || "audio/webm";
+        const durationSec = args.durationSecOverride ?? (await probeBlobDuration(args.audio));
+        args.onProgress?.({ phase: "queued" });
+        // 1. Prepare — pre-signed S3 URL + job id.
+        const prepared = await this.prepareTranscribe({
+            contentType,
+            durationSecEstimate: durationSec,
+            ...(args.mandateId ? { mandateId: args.mandateId } : {}),
+            ...(args.signal ? { signal: args.signal } : {}),
+        });
+        const tracker = this.#tracker();
+        tracker.upsert(prepared.jobId, "uploading", { model, contentType });
+        // 2. Upload the blob straight to S3 (the proxy never sees the bytes).
+        try {
+            await uploadToS3WithProgress(prepared.uploadUrl, args.audio, contentType, {
+                onProgress: (b, t) => args.onProgress?.({ phase: "uploading", bytesUploaded: b, totalBytes: t }),
+                signal: args.signal,
+                fetchImpl: this.#deps.fetch,
+            });
+        }
+        catch (e) {
+            tracker.upsert(prepared.jobId, "failed");
+            throw e instanceof AithosSDKError
+                ? e
+                : new AithosSDKError("transcribe_upload_failed", e.message);
+        }
+        // 3. Start — pre-debit + launch AWS Transcribe.
+        args.onProgress?.({ phase: "starting" });
+        await this.startTranscribe({
+            jobId: prepared.jobId,
+            ...(args.mandateId ? { mandateId: args.mandateId } : {}),
+            model,
+            durationSec,
+            ...(args.languageCode ? { languageCode: args.languageCode } : {}),
+            ...(args.diarization !== undefined ? { diarization: args.diarization } : {}),
+            idempotencyKey,
+            ...(args.signal ? { signal: args.signal } : {}),
+        });
+        tracker.upsert(prepared.jobId, "running");
+        // 4. Poll to completion.
+        const result = await this.#pollUntilTerminal(prepared.jobId, {
+            ...(args.mandateId ? { mandateId: args.mandateId } : {}),
+            ...(args.signal ? { signal: args.signal } : {}),
+            ...(args.onProgress ? { onProgress: args.onProgress } : {}),
+            ...(args.pollIntervalMs ? { pollIntervalMs: args.pollIntervalMs } : {}),
+        });
+        tracker.remove(prepared.jobId);
+        return result;
+    }
+    /**
+     * Resume polling an in-flight job by id — for recovery after a reload or
+     * crash. Returns the final result and clears the job from the local
+     * pending tracker. Throws if the job has already failed.
+     */
+    async resumeTranscribe(jobId, opts) {
+        const result = await this.#pollUntilTerminal(jobId, {
+            ...(opts?.mandateId ? { mandateId: opts.mandateId } : {}),
+            ...(opts?.signal ? { signal: opts.signal } : {}),
+            ...(opts?.onProgress ? { onProgress: opts.onProgress } : {}),
+            ...(opts?.pollIntervalMs ? { pollIntervalMs: opts.pollIntervalMs } : {}),
+        });
+        this.#tracker().remove(jobId);
+        return result;
+    }
+    async #pollUntilTerminal(jobId, opts) {
+        const startedAt = Date.now();
+        let backoffMs = opts.pollIntervalMs ?? 2000;
+        for (;;) {
+            if (opts.signal?.aborted) {
+                throw new AithosSDKError("aborted", "transcription aborted");
+            }
+            const st = await this.getTranscribeStatus({
+                jobId,
+                ...(opts.mandateId ? { mandateId: opts.mandateId } : {}),
+                ...(opts.signal ? { signal: opts.signal } : {}),
+            });
+            if (st.status === "completed") {
+                opts.onProgress?.({ phase: "completed" });
+                return {
+                    text: st.text,
+                    segments: st.segments,
+                    words: st.words,
+                    durationSec: st.durationSec,
+                    languageCode: st.languageCode,
+                    creditsCharged: st.creditsCharged,
+                    walletBalance: st.walletBalance,
+                    auditId: st.auditId,
+                    jobId: st.jobId,
+                    ...(st.fundedBy ? { fundedBy: st.fundedBy } : {}),
+                    ...(st.sponsoredBy ? { sponsoredBy: st.sponsoredBy } : {}),
+                    ...(st.receiptId ? { receiptId: st.receiptId } : {}),
+                };
+            }
+            if (st.status === "failed") {
+                this.#tracker().upsert(jobId, "failed");
+                throw new AithosSDKError(st.error.code || "transcribe_failed", st.error.message);
+            }
+            opts.onProgress?.({
+                phase: "processing",
+                elapsedSec: Math.floor((Date.now() - startedAt) / 1000),
+            });
+            await sleep(backoffMs, opts.signal);
+            backoffMs = Math.min(15_000, Math.ceil(backoffMs * 1.5));
+        }
+    }
+    /* ---------------------------------------------------------------------- */
+    /*  Transcription — browser resilience (framework-agnostic)               */
+    /* ---------------------------------------------------------------------- */
+    /** Snapshot of locally-tracked in-flight jobs (stable ref between mutations). */
+    listLocalPendingTranscribes() {
+        return this.#tracker().list();
+    }
+    /** Stable snapshot for `useSyncExternalStore`-style consumers. */
+    getLocalPendingTranscribesSnapshot() {
+        return this.#tracker().getSnapshot();
+    }
+    /**
+     * Subscribe to changes in the local pending-jobs registry. Returns an
+     * unsubscribe function. Framework-agnostic: wrap it in a React
+     * `useSyncExternalStore`, a Vue effect, a Svelte store, etc.
+     */
+    subscribeLocalPendingTranscribes(listener) {
+        return this.#tracker().subscribe(listener);
+    }
+    /**
+     * IndexedDB-backed draft queue: persist a recording before any network
+     * call, upload it when the user confirms. Browser-only (methods reject
+     * with TranscribeDraftUnavailableError when IndexedDB is absent).
+     */
+    get transcribeDraft() {
+        const store = this.#draft();
+        const self = this;
+        return {
+            save: (blob, meta) => store.save(blob, meta),
+            list: () => store.list(),
+            get: (draftId) => store.get(draftId),
+            delete: (draftId) => store.delete(draftId),
+            upload: async (draftId, args) => {
+                const rec = await store.get(draftId);
+                if (!rec) {
+                    throw new AithosSDKError("draft_not_found", `no transcription draft '${draftId}'`);
+                }
+                const result = await self.invokeTranscribe({ ...args, audio: rec.blob });
+                await store.delete(draftId);
+                return result;
+            },
+        };
+    }
     /**
      * Resolve the active signer (owner takes precedence over delegate).
      *
@@ -363,6 +679,147 @@ function generateIdempotencyKey() {
     }
     return hex;
 }
+/**
+ * Probe an audio Blob's duration (seconds) in a browser. Returns 0 when no
+ * DOM is available (Node / SSR) or probing fails — the caller should pass
+ * `durationSecOverride` on a backend. Never throws.
+ */
+async function probeBlobDuration(blob) {
+    try {
+        if (typeof document === "undefined" ||
+            typeof URL === "undefined" ||
+            typeof Audio === "undefined") {
+            return 0;
+        }
+        return await new Promise((resolve) => {
+            const url = URL.createObjectURL(blob);
+            const audio = new Audio();
+            let settled = false;
+            const done = (v) => {
+                if (settled)
+                    return;
+                settled = true;
+                try {
+                    URL.revokeObjectURL(url);
+                }
+                catch {
+                    /* ignore */
+                }
+                resolve(Number.isFinite(v) && v > 0 ? v : 0);
+            };
+            audio.preload = "metadata";
+            audio.onloadedmetadata = () => done(audio.duration);
+            audio.onerror = () => done(0);
+            audio.src = url;
+            setTimeout(() => done(0), 5000);
+        });
+    }
+    catch {
+        return 0;
+    }
+}
+/**
+ * PUT a Blob to a pre-signed S3 URL. Uses XMLHttpRequest in browsers for
+ * real upload-progress events; falls back to `fetch` on Node (coarse
+ * 0→100% progress). Honors an AbortSignal.
+ */
+async function uploadToS3WithProgress(url, blob, contentType, opts) {
+    const total = blob.size;
+    if (typeof XMLHttpRequest !== "undefined") {
+        await new Promise((resolve, reject) => {
+            const xhr = new XMLHttpRequest();
+            xhr.open("PUT", url, true);
+            xhr.setRequestHeader("Content-Type", contentType);
+            xhr.upload.onprogress = (e) => {
+                if (e.lengthComputable)
+                    opts.onProgress?.(e.loaded, e.total);
+            };
+            xhr.onload = () => {
+                if (xhr.status >= 200 && xhr.status < 300)
+                    resolve();
+                else
+                    reject(new AithosSDKError("transcribe_upload_failed", `S3 upload failed: HTTP ${xhr.status}`));
+            };
+            xhr.onerror = () => reject(new AithosSDKError("transcribe_upload_failed", "S3 upload network error"));
+            xhr.onabort = () => reject(new AithosSDKError("aborted", "S3 upload aborted"));
+            if (opts.signal) {
+                if (opts.signal.aborted) {
+                    xhr.abort();
+                    return;
+                }
+                opts.signal.addEventListener("abort", () => xhr.abort(), { once: true });
+            }
+            xhr.send(blob);
+        });
+        return;
+    }
+    // Node / no XHR — use the injected fetch (falls back to global fetch).
+    opts.onProgress?.(0, total);
+    const doFetch = opts.fetchImpl ?? fetch;
+    const res = await doFetch(url, {
+        method: "PUT",
+        headers: { "content-type": contentType },
+        body: blob,
+        ...(opts.signal ? { signal: opts.signal } : {}),
+    });
+    if (!res.ok) {
+        throw new AithosSDKError("transcribe_upload_failed", `S3 upload failed: HTTP ${res.status}`);
+    }
+    opts.onProgress?.(total, total);
+}
+/** Sleep `ms`, rejecting early if the signal aborts. */
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        const t = setTimeout(resolve, ms);
+        if (signal) {
+            if (signal.aborted) {
+                clearTimeout(t);
+                reject(new AithosSDKError("aborted", "aborted"));
+                return;
+            }
+            signal.addEventListener("abort", () => {
+                clearTimeout(t);
+                reject(new AithosSDKError("aborted", "aborted"));
+            }, { once: true });
+        }
+    });
+}
+/** Coerce a raw `transcribe_status` JSON-RPC result into the typed union. */
+function mapTranscribeStatus(jobId, r) {
+    const status = r.status;
+    if (status === "completed") {
+        const fundedBy = r.fundedBy;
+        return {
+            jobId,
+            status: "completed",
+            text: String(r.text ?? ""),
+            segments: r.segments ?? [],
+            words: r.words ?? [],
+            durationSec: Number(r.duration_sec_actual ?? 0),
+            languageCode: String(r.language_code ?? ""),
+            creditsCharged: Number(r.creditsCharged ?? 0),
+            walletBalance: Number(r.walletBalance ?? 0),
+            auditId: String(r.auditId ?? ""),
+            ...(fundedBy === "sponsored" || fundedBy === "grant" || fundedBy === "purchase"
+                ? { fundedBy }
+                : {}),
+            ...(typeof r.sponsoredBy === "string" ? { sponsoredBy: r.sponsoredBy } : {}),
+            ...(typeof r.receiptId === "string" ? { receiptId: r.receiptId } : {}),
+        };
+    }
+    if (status === "failed") {
+        const err = r.error ?? {};
+        return {
+            jobId,
+            status: "failed",
+            error: {
+                code: String(err.code ?? "transcribe_failed"),
+                message: String(err.message ?? ""),
+            },
+        };
+    }
+    return { jobId, status: "running", elapsedSec: Number(r.elapsed_sec ?? 0) };
+}
 /**
  * Encode an ArrayBuffer as base64 in environments where `Buffer` is
  * not available (browser). Uses btoa over a binary string — safe for

package/dist/src/data.d.ts

@@ -1,3 +1,4 @@
+import { type SignedMandate } from "@aithos/protocol-client";
 export interface AithosSchemaLite {
     readonly schema: string;
     readonly indexable: ReadonlySet<string>;
@@ -45,12 +46,26 @@ export interface CreateDataClientArgs {
 export interface DataClient {
     /** Get / create a collection handle. */
     collection(name: string): DataCollection;
-    /** Initialize a new collection with an explicit schema. */
+    /** Initialize a new collection with an explicit schema. Throws
+     * `-32073 AITHOS_DATA_COLLECTION_EXISTS` if it already exists. */
     createCollection(args: {
         name: string;
         schema: string;
         forwardSecrecy?: "best_effort" | "strict";
     }): Promise<void>;
+    /**
+     * Get-or-create: create the collection if it doesn't exist, otherwise
+     * succeed silently. Idempotent — safe to call on every app boot before
+     * writing. Absorbs the `-32073 AITHOS_DATA_COLLECTION_EXISTS` conflict
+     * (and the concurrent-create race) so callers don't have to special-case
+     * "already there". Avoids the friction where `collection(name).insert(…)`
+     * on a never-created collection fails with `-32020`.
+     */
+    ensureCollection(args: {
+        name: string;
+        schema: string;
+        forwardSecrecy?: "best_effort" | "strict";
+    }): Promise<void>;
     /** List collections owned by this subject. */
     listCollections(): Promise<readonly {
         name: string;
@@ -102,9 +117,83 @@ export interface DataClient {
     getSchema(schemaId: string, opts?: {
         subjectDid?: string;
     }): Promise<object | null>;
+    /**
+     * Grant a mandate-holding delegate read access to one of this owner's
+     * collections, by re-wrapping the collection's CMK to the grantee's
+     * key and posting `aithos.data.authorize_app`.
+     *
+     * Owner-only. The CMK is unwrapped locally (the owner holds it), then
+     * re-wrapped X25519-HKDF-AEAD to the grantee's X25519 key (derived
+     * from `mandate.grantee.pubkey`). The platform never sees the CMK in
+     * clear — it only appends the wrap to the collection's envelope after
+     * verifying the mandate (data spec §4.5).
+     *
+     * Idempotent at the server: re-authorizing the same grantee on the
+     * same collection is a no-op. One wrap per grantee covers every record
+     * in the collection (O(1) authorization — the CMK is stable).
+     *
+     * The mandate must carry a `data.<collectionName>.{read|write|admin}`
+     * or `data.*.*` scope and a `grantee.pubkey`.
+     */
+    authorizeDelegate(args: {
+        collectionName: string;
+        mandate: SignedMandate;
+    }): Promise<void>;
+    /**
+     * Revoke a delegate's access to a collection (`aithos.data.revoke_app`).
+     * Owner-only, forward-only: after revocation the PDS refuses the
+     * delegate's reads (the mandate is marked revoked), and the delegate's
+     * wrap is dropped from the collection's authorization index. Already-read
+     * / cached plaintext on the delegate side is out of scope (a known limit
+     * of any key-sharing scheme — revocation blocks FUTURE access).
+     */
+    revokeDelegate(args: {
+        collectionName: string;
+        mandateId: string;
+        reason?: string;
+    }): Promise<void>;
+    /** Drop in-memory cache (CMK, collection metadata, …). */
+    reset(): void;
+}
+/**
+ * Read-only view over a subject's data collections, driven by a mandate
+ * the subject granted to a delegate (`data.<collection>.read`). Built by
+ * {@link createDelegateDataClient}.
+ *
+ * Mirror of {@link DataClient} minus every mutating verb: a delegate
+ * holding a read mandate can `get`/`list` and enumerate collections, but
+ * cannot insert, update, delete, create collections, register schemas, or
+ * re-delegate. Those throw `-32042` client-side (and the PDS rejects them
+ * server-side regardless).
+ */
+export interface ReadonlyDataClient {
+    /** Get a read-only collection handle. */
+    collection(name: string): ReadonlyDataCollection;
+    /** List collections the delegate's mandate scopes can reach. */
+    listCollections(): Promise<readonly {
+        name: string;
+        schema: string;
+        record_count: number;
+    }[]>;
+    /** List gamma audit entries (read). */
+    listGammaEntries(opts?: {
+        limit?: number;
+        opPrefix?: string;
+        verify?: boolean;
+    }): Promise<unknown>;
     /** Drop in-memory cache (CMK, collection metadata, …). */
     reset(): void;
 }
+export interface ReadonlyDataCollection {
+    readonly name: string;
+    /** Fetch one record by id (decrypted client-side via the re-wrapped CMK). */
+    get(recordId: string): Promise<Record<string, unknown> | null>;
+    /** List records, decrypted. Pagination via opaque cursor. */
+    list(opts?: ListOpts): Promise<{
+        items: Record<string, unknown>[];
+        nextCursor?: string;
+    }>;
+}
 export interface DataCollection {
     readonly name: string;
     /**
@@ -150,4 +239,42 @@ export interface ListOpts {
     readonly cursor?: string;
 }
 export declare function createDataClient(args: CreateDataClientArgs): DataClient;
+export interface CreateDelegateDataClientArgs {
+    /** PDS base URL (same endpoint the owner writes to). */
+    readonly pdsUrl: string;
+    /** DID of the SUBJECT whose data is being read (the mandate issuer). */
+    readonly subjectDid: string;
+    /**
+     * The full signed mandate the subject granted to this delegate. Must
+     * carry a `data.<collection>.read` (or wider) scope and a
+     * `grantee.pubkey` matching `delegateSeed`.
+     */
+    readonly mandate: SignedMandate;
+    /** The delegate's Ed25519 seed (32 bytes) — the grantee key the mandate
+     * is bound to. Used to sign envelopes AND to derive the X25519 key that
+     * unwraps the re-wrapped CMK. */
+    readonly delegateSeed: Uint8Array;
+    /**
+     * The delegate's Ed25519 public key, multibase-encoded. Defaults to
+     * `mandate.grantee.pubkey`. This is the bare verificationMethod the PDS
+     * binds the delegate envelope to.
+     */
+    readonly granteePubkeyMultibase?: string;
+    /** App-defined (vendor) schemas, as for {@link createDataClient}. */
+    readonly schemas?: readonly AithosSchemaLite[];
+    /** `fetch` override (tests). */
+    readonly fetch?: typeof fetch;
+}
+/**
+ * Build a read-only data client that reads a subject's collections under
+ * a mandate (delegate path). The returned {@link ReadonlyDataClient}
+ * signs every request as the delegate (bare-multibase verificationMethod
+ * + the mandate attached to the envelope), and decrypts records using the
+ * CMK the owner re-wrapped for this delegate via
+ * {@link DataClient.authorizeDelegate}.
+ *
+ * Writes are not available on the returned type and throw `-32042` if
+ * forced.
+ */
+export declare function createDelegateDataClient(args: CreateDelegateDataClientArgs): ReadonlyDataClient;
 //# sourceMappingURL=data.d.ts.map