@keeper-security/keeper-sdk-javascript 0.1.0

package/dist/src/sharedFolders/listSharedFolders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listSharedFolders.js","sourceRoot":"","sources":["../../../src/sharedFolders/listSharedFolders.ts"],"names":[],"mappings":";;;AAOA,oCAAkD;AAClD,4DAAsE;AAoBtE,MAAM,oBAAoB,GAAG,EAAE,CAAA;AAC/B,MAAM,mBAAmB,GAAG,CAAC,CAAA;AAE7B,SAAS,uBAAuB,CAAC,MAAqB;IAClD,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,GAAG,CAAA;AAC3D,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAwB,EAAE,OAAe;IAChE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnD,MAAM,OAAO,GAAoB,EAAE,CAAA;IACnC,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,MAAM,CAAgB,0BAAU,CAAC,YAAY,CAAC,EAAE;QAC/E,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAA;QAC5B,MAAM,IAAI,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAA;QAChE,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAA;QAC9C,IAAI,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE;YACvC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;SAC7B;KACJ;IACD,OAAO,OAAO,CAAA;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,WAAqB,EAAE,WAAqB;IAC7D,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;QAClC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;YAClC,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;gBAC3E,OAAO,IAAI,CAAA;aACd;SACJ;KACJ;IACD,OAAO,KAAK,CAAA;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,+BAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAClF,CAAC;AAED,SAAS,sBAAsB,CAAwC,KAAU,EAAE,eAAuB;IACtG,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;QACtB,IAAI,IAAI,CAAC,eAAe,KAAK,eAAe;YAAE,KAAK,IAAI,CAAC,CAAA;KAC3D;IACD,OAAO,KAAK,CAAA;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAwB,EAAE,eAAuB;IAC1E,OAAO,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAoB,+BAAe,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC,CAAA;AACvH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAwB,EAAE,eAAuB;IAC1E,OAAO,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAoB,+BAAe,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC,CAAA;AACvH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAwB,EAAE,eAAuB;IAC5E,OAAO,sBAAsB,CACzB,OAAO,CAAC,MAAM,CAAsB,+BAAe,CAAC,kBAAkB,CAAC,EACvE,eAAe,CAClB,CAAA;AACL,CAAC;AAED,SAAgB,iBAAiB,CAC7B,OAAwB,EACxB,UAAoC,EAAE;IAEtC,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IACnD,MAAM,aAAa,GAAoB,OAAO;QAC1C,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC;QACrC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAgB,0BAAU,CAAC,YAAY,CAAC,CAAA;IAE5D,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;QACtC,MAAM,iBAAiB,GAAG,YAAY,CAAC,GAAG,CAAA;QAC1C,MAAM,IAAI,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAA;QAClD,MAAM,GAAG,GAAwB,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAA;QAC5D,IAAI,cAAc,EAAE;YAChB,GAAG,CAAC,YAAY,GAAG,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;YACpE,GAAG,CAAC,UAAU,GAAG,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;YAChE,GAAG,CAAC,UAAU,GAAG,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;YAChE,GAAG,CAAC,sBAAsB,GAAG,YAAY,CAAC,oBAAoB,CAAA;YAC9D,GAAG,CAAC,oBAAoB,GAAG,YAAY,CAAC,kBAAkB,CAAA;YAC1D,GAAG,CAAC,gBAAgB,GAAG,YAAY,CAAC,cAAc,CAAA;YAClD,GAAG,CAAC,iBAAiB,GAAG,YAAY,CAAC,eAAe,CAAA;SACvD;QACD,OAAO,GAAG,CAAA;IACd,CAAC,CAAC,CAAA;AACN,CAAC;AAxBD,8CAwBC;AAOD,SAAS,YAAY,CAAC,IAAY,EAAE,SAAiB;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,IAAI,CAAA;IACzC,IAAI,SAAS,IAAI,mBAAmB;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IACrE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAA;AACjE,CAAC;AAED,SAAgB,wBAAwB,CACpC,IAA2B,EAC3B,UAAuD,EAAE;IAEzD,MAAM,EAAE,OAAO,GAAG,KAAK,EAAE,WAAW,GAAG,oBAAoB,EAAE,GAAG,OAAO,CAAA;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAA;IAC7C,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAA;IAClD,MAAM,OAAO,GAAe,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAA;QACpG,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AACrC,CAAC;AAbD,4DAaC;AAED,SAAgB,6BAA6B,CACzC,KAAkC,EAClC,UAAoC,EAAE;IAEtC,MAAM,EAAE,WAAW,GAAG,CAAC,EAAE,GAAG,OAAO,CAAA;IACnC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;IAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAA;IAClC,MAAM,YAAY,GAAa,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7D,KAAK,IAAI,WAAW,GAAG,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,WAAW,IAAI,CAAC,EAAE;QACnE,YAAY,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;KACjF;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;QACpB,KAAK,IAAI,WAAW,GAAG,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,WAAW,IAAI,CAAC,EAAE;YACnE,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;YACnC,YAAY,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;SAC5F;KACJ;IACD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,WAAmB,EAAE,EAAE,CAClD,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IAC9D,MAAM,SAAS,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9G,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,CACzE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CACxC;SACI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;SAC1D,IAAI,CAAC,IAAI,CAAC,CAAA;IACf,MAAM,KAAK,GAAa,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;IACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;QACpB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;KAC7B;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AA9BD,sEA8BC"}

package/dist/src/sharedFolders/shareFolder.d.ts

@@ -0,0 +1,36 @@
+import type { Auth } from '@keeper-security/keeperapi';
+import { InMemoryStorage } from '../storage/InMemoryStorage';
+import { FolderKind } from '../folders/folderHelpers';
+export declare enum ShareFolderAction {
+    Grant = "grant",
+    Remove = "remove"
+}
+export type ShareFolderActionInput = ShareFolderAction | `${ShareFolderAction}`;
+export declare enum ShareFolderUserResultStatus {
+    Success = "success",
+    Invited = "invited",
+    MissingPublicKey = "missing_public_key",
+    Unknown = "unknown"
+}
+export type ShareFolderInput = {
+    folder: string;
+    emails: string[];
+    action?: ShareFolderActionInput;
+    manageRecords?: boolean;
+    manageUsers?: boolean;
+};
+export type ShareFolderUserStatus = {
+    email: string;
+    success: boolean;
+    status: string;
+    message?: string;
+};
+export type ShareFolderResult = {
+    success: boolean;
+    message?: string;
+    folderUid: string;
+    folderKind: FolderKind.SharedFolder;
+    sharedFolderUid: string;
+    results: ShareFolderUserStatus[];
+};
+export declare function shareFolder(auth: Auth, storage: InMemoryStorage, input: ShareFolderInput): Promise<ShareFolderResult>;

package/dist/src/sharedFolders/shareFolder.js

@@ -0,0 +1,352 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.shareFolder = exports.ShareFolderUserResultStatus = exports.ShareFolderAction = void 0;
+const keeperapi_1 = require("@keeper-security/keeperapi");
+const utils_1 = require("../utils");
+const folderHelpers_1 = require("../folders/folderHelpers");
+var ShareFolderAction;
+(function (ShareFolderAction) {
+    ShareFolderAction["Grant"] = "grant";
+    ShareFolderAction["Remove"] = "remove";
+})(ShareFolderAction = exports.ShareFolderAction || (exports.ShareFolderAction = {}));
+var ShareFolderUserResultStatus;
+(function (ShareFolderUserResultStatus) {
+    ShareFolderUserResultStatus["Success"] = "success";
+    ShareFolderUserResultStatus["Invited"] = "invited";
+    ShareFolderUserResultStatus["MissingPublicKey"] = "missing_public_key";
+    ShareFolderUserResultStatus["Unknown"] = "unknown";
+})(ShareFolderUserResultStatus = exports.ShareFolderUserResultStatus || (exports.ShareFolderUserResultStatus = {}));
+function toSetBoolean(value) {
+    if (value === true)
+        return keeperapi_1.Folder.SetBooleanValue.BOOLEAN_TRUE;
+    if (value === false)
+        return keeperapi_1.Folder.SetBooleanValue.BOOLEAN_FALSE;
+    return keeperapi_1.Folder.SetBooleanValue.BOOLEAN_NO_CHANGE;
+}
+function dataName(data) {
+    if ((0, utils_1.isObject)(data)) {
+        const { title, name } = data;
+        return (title || name || '').trim();
+    }
+    return '';
+}
+function resolveFolder(storage, nameOrUid) {
+    const trimmedNameOrUid = nameOrUid.trim();
+    if (!trimmedNameOrUid)
+        return undefined;
+    const sharedFolder = storage.getByUid(folderHelpers_1.FolderKind.SharedFolder, trimmedNameOrUid);
+    if (sharedFolder) {
+        return {
+            kind: folderHelpers_1.FolderKind.SharedFolder,
+            folderUid: sharedFolder.uid,
+            sharedFolderUid: sharedFolder.uid,
+            displayName: (sharedFolder.name || sharedFolder.uid).trim() || sharedFolder.uid,
+        };
+    }
+    const sharedFolderFolder = storage.getByUid(folderHelpers_1.FolderKind.SharedFolderFolder, trimmedNameOrUid);
+    if (sharedFolderFolder) {
+        return {
+            kind: folderHelpers_1.FolderKind.SharedFolderFolder,
+            folderUid: sharedFolderFolder.uid,
+            sharedFolderUid: sharedFolderFolder.sharedFolderUid,
+            displayName: dataName(sharedFolderFolder.data) || sharedFolderFolder.uid,
+        };
+    }
+    const userFolder = storage.getByUid(folderHelpers_1.FolderKind.UserFolder, trimmedNameOrUid);
+    if (userFolder) {
+        return {
+            kind: folderHelpers_1.FolderKind.UserFolder,
+            folderUid: userFolder.uid,
+            displayName: dataName(userFolder.data) || userFolder.uid,
+        };
+    }
+    const lowerNameOrUid = trimmedNameOrUid.toLowerCase();
+    for (const candidateSharedFolder of storage.getAll(folderHelpers_1.FolderKind.SharedFolder)) {
+        if ((candidateSharedFolder.name || '').trim().toLowerCase() === lowerNameOrUid) {
+            return {
+                kind: folderHelpers_1.FolderKind.SharedFolder,
+                folderUid: candidateSharedFolder.uid,
+                sharedFolderUid: candidateSharedFolder.uid,
+                displayName: candidateSharedFolder.name || candidateSharedFolder.uid,
+            };
+        }
+    }
+    for (const candidateSharedFolderFolder of storage.getAll(folderHelpers_1.FolderKind.SharedFolderFolder)) {
+        const candidateName = dataName(candidateSharedFolderFolder.data);
+        if (candidateName && candidateName.toLowerCase() === lowerNameOrUid) {
+            return {
+                kind: folderHelpers_1.FolderKind.SharedFolderFolder,
+                folderUid: candidateSharedFolderFolder.uid,
+                sharedFolderUid: candidateSharedFolderFolder.sharedFolderUid,
+                displayName: candidateName,
+            };
+        }
+    }
+    for (const candidateUserFolder of storage.getAll(folderHelpers_1.FolderKind.UserFolder)) {
+        const candidateName = dataName(candidateUserFolder.data);
+        if (candidateName && candidateName.toLowerCase() === lowerNameOrUid) {
+            return {
+                kind: folderHelpers_1.FolderKind.UserFolder,
+                folderUid: candidateUserFolder.uid,
+                displayName: candidateName,
+            };
+        }
+    }
+    return undefined;
+}
+async function fetchUserPublicKeys(auth, emails) {
+    const usernameToKeys = new Map();
+    if (emails.length === 0)
+        return usernameToKeys;
+    const keysRequest = (0, keeperapi_1.getPublicKeysMessage)({ usernames: emails });
+    let response;
+    try {
+        response = await auth.executeRest(keysRequest);
+    }
+    catch (err) {
+        throw new utils_1.KeeperSdkError(`Failed to fetch public keys: ${(0, utils_1.extractErrorMessage)(err)}`);
+    }
+    for (const entry of response.keyResponses || []) {
+        const username = (entry.username || '').toLowerCase();
+        if (!username)
+            continue;
+        usernameToKeys.set(username, {
+            username: entry.username || '',
+            rsaPublicKey: entry.publicKey && entry.publicKey.length > 0 ? entry.publicKey : null,
+            eccPublicKey: entry.publicEccKey && entry.publicEccKey.length > 0 ? entry.publicEccKey : null,
+            errorCode: entry.errorCode || undefined,
+            message: entry.message || undefined,
+        });
+    }
+    return usernameToKeys;
+}
+function dedupeEmails(emails) {
+    const seen = new Set();
+    const dedupedEmails = [];
+    for (const rawEmail of emails) {
+        const normalized = (rawEmail || '').trim().toLowerCase();
+        if (!normalized)
+            continue;
+        if (seen.has(normalized))
+            continue;
+        seen.add(normalized);
+        dedupedEmails.push(normalized);
+    }
+    return dedupedEmails;
+}
+async function removeFromSharedFolder(auth, sharedFolder, resolved, emails) {
+    const updateRequest = {
+        sharedFolderUid: (0, keeperapi_1.normal64Bytes)(sharedFolder.uid),
+        revision: sharedFolder.revision,
+        forceUpdate: false,
+        sharedFolderRemoveUser: emails,
+    };
+    let response;
+    try {
+        response = await auth.executeRest((0, keeperapi_1.sharedFolderUpdateV3Message)({ sharedFoldersUpdateV3: [updateRequest] }));
+    }
+    catch (err) {
+        return {
+            success: false,
+            folderUid: resolved.folderUid,
+            sharedFolderUid: sharedFolder.uid,
+            folderKind: folderHelpers_1.FolderKind.SharedFolder,
+            message: `shared_folder_update_v3 (remove) failed for "${resolved.displayName}" (uid=${sharedFolder.uid}): ${(0, utils_1.extractErrorMessage)(err)}`,
+            results: [],
+        };
+    }
+    const innerResponse = (response.sharedFoldersUpdateV3Response || [])[0];
+    const requestOk = !(innerResponse === null || innerResponse === void 0 ? void 0 : innerResponse.status) || innerResponse.status === folderHelpers_1.FolderResultStatus.Success;
+    const userResults = [];
+    for (const userStatus of (innerResponse === null || innerResponse === void 0 ? void 0 : innerResponse.sharedFolderRemoveUserStatus) || []) {
+        const status = userStatus.status || ShareFolderUserResultStatus.Unknown;
+        userResults.push({
+            email: userStatus.username || '',
+            success: status === folderHelpers_1.FolderResultStatus.Success,
+            status,
+        });
+    }
+    const allUsersOk = userResults.length > 0 && userResults.every((userResult) => userResult.success);
+    const failureReason = !requestOk
+        ? (innerResponse === null || innerResponse === void 0 ? void 0 : innerResponse.status) ||
+            `shared_folder_update_v3 (remove) failed for "${resolved.displayName}" (uid=${sharedFolder.uid}): server returned no status`
+        : undefined;
+    return {
+        success: requestOk && allUsersOk,
+        folderUid: resolved.folderUid,
+        sharedFolderUid: sharedFolder.uid,
+        folderKind: folderHelpers_1.FolderKind.SharedFolder,
+        message: failureReason,
+        results: userResults,
+    };
+}
+async function shareWithSharedFolder(auth, storage, resolved, input) {
+    const sharedFolder = storage.getByUid(folderHelpers_1.FolderKind.SharedFolder, resolved.sharedFolderUid);
+    if (!sharedFolder) {
+        throw new utils_1.KeeperSdkError(`Shared folder "${resolved.sharedFolderUid}" not found.`, 'shared_folder_not_found');
+    }
+    const sharedFolderKey = await storage.getKeyBytes(sharedFolder.uid);
+    if (!sharedFolderKey) {
+        throw new utils_1.KeeperSdkError('Shared folder encryption key not available. Sync the vault and try again.', 'shared_folder_key_missing');
+    }
+    const emails = dedupeEmails(input.emails);
+    if (emails.length === 0) {
+        throw new utils_1.KeeperSdkError('Provide at least one user email.', 'no_emails');
+    }
+    const invalidEmails = emails.filter((email) => !(0, utils_1.isValidEmail)(email));
+    if (invalidEmails.length > 0) {
+        throw new utils_1.KeeperSdkError(`Invalid email(s): ${invalidEmails.join(', ')}`, 'invalid_email');
+    }
+    if (input.action === ShareFolderAction.Remove) {
+        return removeFromSharedFolder(auth, sharedFolder, resolved, emails);
+    }
+    const existingMembers = new Set();
+    for (const sharedFolderUser of storage.getAll(folderHelpers_1.VaultObjectKind.SharedFolderUser)) {
+        if (sharedFolderUser.sharedFolderUid === sharedFolder.uid && sharedFolderUser.accountUsername) {
+            existingMembers.add(sharedFolderUser.accountUsername.toLowerCase());
+        }
+    }
+    const newEmails = emails.filter((email) => !existingMembers.has(email));
+    const usernameToKeys = await fetchUserPublicKeys(auth, newEmails);
+    const usersToAdd = [];
+    const usersToUpdate = [];
+    const userResults = [];
+    const newUserManageRecords = (0, utils_1.isBoolean)(input.manageRecords)
+        ? input.manageRecords
+        : sharedFolder.defaultManageRecords;
+    const newUserManageUsers = (0, utils_1.isBoolean)(input.manageUsers)
+        ? input.manageUsers
+        : sharedFolder.defaultManageUsers;
+    for (const email of emails) {
+        if (existingMembers.has(email)) {
+            usersToUpdate.push({
+                username: email,
+                manageRecords: toSetBoolean(input.manageRecords),
+                manageUsers: toSetBoolean(input.manageUsers),
+            });
+            continue;
+        }
+        const publicKeys = usernameToKeys.get(email);
+        if (!publicKeys) {
+            userResults.push({
+                email,
+                success: false,
+                status: ShareFolderUserResultStatus.MissingPublicKey,
+                message: `No public key returned for user "${email}" (folder="${resolved.displayName}")`,
+            });
+            continue;
+        }
+        if (publicKeys.errorCode) {
+            userResults.push({
+                email,
+                success: false,
+                status: publicKeys.errorCode,
+                message: publicKeys.message || publicKeys.errorCode,
+            });
+            continue;
+        }
+        let encryptedKey;
+        let encryptedKeyType;
+        if (publicKeys.rsaPublicKey) {
+            const rsaPublicKeyBase64 = keeperapi_1.platform.bytesToBase64(publicKeys.rsaPublicKey);
+            encryptedKey = keeperapi_1.platform.publicEncrypt(sharedFolderKey, rsaPublicKeyBase64);
+            encryptedKeyType = keeperapi_1.Folder.EncryptedKeyType.encrypted_by_public_key;
+        }
+        else if (publicKeys.eccPublicKey) {
+            encryptedKey = await keeperapi_1.platform.publicEncryptEC(sharedFolderKey, publicKeys.eccPublicKey);
+            encryptedKeyType = keeperapi_1.Folder.EncryptedKeyType.encrypted_by_public_key_ecc;
+        }
+        else {
+            userResults.push({
+                email,
+                success: false,
+                status: ShareFolderUserResultStatus.MissingPublicKey,
+                message: `No usable public key for user "${email}" (folder="${resolved.displayName}")`,
+            });
+            continue;
+        }
+        usersToAdd.push({
+            username: email,
+            manageRecords: toSetBoolean(newUserManageRecords),
+            manageUsers: toSetBoolean(newUserManageUsers),
+            typedSharedFolderKey: { encryptedKey, encryptedKeyType },
+        });
+    }
+    if (usersToAdd.length === 0 && usersToUpdate.length === 0) {
+        return {
+            success: false,
+            folderUid: resolved.folderUid,
+            sharedFolderUid: sharedFolder.uid,
+            folderKind: folderHelpers_1.FolderKind.SharedFolder,
+            message: `No users could be processed for shared folder "${resolved.displayName}" (uid=${sharedFolder.uid}).`,
+            results: userResults,
+        };
+    }
+    const updateRequest = {
+        sharedFolderUid: (0, keeperapi_1.normal64Bytes)(sharedFolder.uid),
+        revision: sharedFolder.revision,
+        forceUpdate: false,
+    };
+    if (usersToAdd.length > 0)
+        updateRequest.sharedFolderAddUser = usersToAdd;
+    if (usersToUpdate.length > 0)
+        updateRequest.sharedFolderUpdateUser = usersToUpdate;
+    let response;
+    try {
+        response = await auth.executeRest((0, keeperapi_1.sharedFolderUpdateV3Message)({ sharedFoldersUpdateV3: [updateRequest] }));
+    }
+    catch (err) {
+        return {
+            success: false,
+            folderUid: resolved.folderUid,
+            sharedFolderUid: sharedFolder.uid,
+            folderKind: folderHelpers_1.FolderKind.SharedFolder,
+            message: `shared_folder_update_v3 (grant) failed for "${resolved.displayName}" (uid=${sharedFolder.uid}): ${(0, utils_1.extractErrorMessage)(err)}`,
+            results: userResults,
+        };
+    }
+    const innerResponse = (response.sharedFoldersUpdateV3Response || [])[0];
+    const requestOk = !(innerResponse === null || innerResponse === void 0 ? void 0 : innerResponse.status) || innerResponse.status === folderHelpers_1.FolderResultStatus.Success;
+    for (const addUserStatus of (innerResponse === null || innerResponse === void 0 ? void 0 : innerResponse.sharedFolderAddUserStatus) || []) {
+        const status = addUserStatus.status || ShareFolderUserResultStatus.Unknown;
+        const success = status === folderHelpers_1.FolderResultStatus.Success || status === folderHelpers_1.FolderResultStatus.Invited;
+        userResults.push({
+            email: addUserStatus.username || '',
+            success,
+            status,
+        });
+    }
+    for (const updateUserStatus of (innerResponse === null || innerResponse === void 0 ? void 0 : innerResponse.sharedFolderUpdateUserStatus) || []) {
+        const status = updateUserStatus.status || ShareFolderUserResultStatus.Unknown;
+        userResults.push({
+            email: updateUserStatus.username || '',
+            success: status === folderHelpers_1.FolderResultStatus.Success,
+            status,
+        });
+    }
+    const allUsersOk = userResults.length > 0 && userResults.every((userResult) => userResult.success);
+    const failureReason = !requestOk
+        ? (innerResponse === null || innerResponse === void 0 ? void 0 : innerResponse.status) ||
+            `shared_folder_update_v3 (grant) failed for "${resolved.displayName}" (uid=${sharedFolder.uid}): server returned no status`
+        : undefined;
+    return {
+        success: requestOk && allUsersOk,
+        folderUid: resolved.folderUid,
+        sharedFolderUid: sharedFolder.uid,
+        folderKind: folderHelpers_1.FolderKind.SharedFolder,
+        message: failureReason,
+        results: userResults,
+    };
+}
+async function shareFolder(auth, storage, input) {
+    const resolved = resolveFolder(storage, input.folder);
+    if (!resolved) {
+        throw new utils_1.KeeperSdkError(`Folder "${input.folder}" was not found.`, 'folder_not_found');
+    }
+    if (resolved.kind === folderHelpers_1.FolderKind.UserFolder) {
+        throw new utils_1.KeeperSdkError(`"${resolved.displayName}" is a personal folder. Only shared folders can be shared.`, 'not_a_shared_folder');
+    }
+    return shareWithSharedFolder(auth, storage, resolved, input);
+}
+exports.shareFolder = shareFolder;
+//# sourceMappingURL=shareFolder.js.map

package/dist/src/sharedFolders/shareFolder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shareFolder.js","sourceRoot":"","sources":["../../../src/sharedFolders/shareFolder.ts"],"names":[],"mappings":";;;AAQA,0DAMmC;AAEnC,oCAAiG;AACjG,4DAA0F;AAE1F,IAAY,iBAGX;AAHD,WAAY,iBAAiB;IACzB,oCAAe,CAAA;IACf,sCAAiB,CAAA;AACrB,CAAC,EAHW,iBAAiB,GAAjB,yBAAiB,KAAjB,yBAAiB,QAG5B;AAID,IAAY,2BAKX;AALD,WAAY,2BAA2B;IACnC,kDAAmB,CAAA;IACnB,kDAAmB,CAAA;IACnB,sEAAuC,CAAA;IACvC,kDAAmB,CAAA;AACvB,CAAC,EALW,2BAA2B,GAA3B,mCAA2B,KAA3B,mCAA2B,QAKtC;AAiDD,SAAS,YAAY,CAAC,KAA0B;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,kBAAM,CAAC,eAAe,CAAC,YAAY,CAAA;IAC9D,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,kBAAM,CAAC,eAAe,CAAC,aAAa,CAAA;IAChE,OAAO,kBAAM,CAAC,eAAe,CAAC,iBAAiB,CAAA;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAa;IAC3B,IAAI,IAAA,gBAAQ,EAAC,IAAI,CAAC,EAAE;QAChB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAyC,CAAA;QACjE,OAAO,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;KACtC;IACD,OAAO,EAAE,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CAAC,OAAwB,EAAE,SAAiB;IAC9D,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IACzC,IAAI,CAAC,gBAAgB;QAAE,OAAO,SAAS,CAAA;IAEvC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAgB,0BAAU,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAA;IAC/F,IAAI,YAAY,EAAE;QACd,OAAO;YACH,IAAI,EAAE,0BAAU,CAAC,YAAY;YAC7B,SAAS,EAAE,YAAY,CAAC,GAAG;YAC3B,eAAe,EAAE,YAAY,CAAC,GAAG;YACjC,WAAW,EAAE,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,YAAY,CAAC,GAAG;SAClF,CAAA;KACJ;IACD,MAAM,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAsB,0BAAU,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAA;IACjH,IAAI,kBAAkB,EAAE;QACpB,OAAO;YACH,IAAI,EAAE,0BAAU,CAAC,kBAAkB;YACnC,SAAS,EAAE,kBAAkB,CAAC,GAAG;YACjC,eAAe,EAAE,kBAAkB,CAAC,eAAe;YACnD,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG;SAC3E,CAAA;KACJ;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAc,0BAAU,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;IACzF,IAAI,UAAU,EAAE;QACZ,OAAO;YACH,IAAI,EAAE,0BAAU,CAAC,UAAU;YAC3B,SAAS,EAAE,UAAU,CAAC,GAAG;YACzB,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG;SAC3D,CAAA;KACJ;IAED,MAAM,cAAc,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAA;IACrD,KAAK,MAAM,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAgB,0BAAU,CAAC,YAAY,CAAC,EAAE;QACxF,IAAI,CAAC,qBAAqB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,cAAc,EAAE;YAC5E,OAAO;gBACH,IAAI,EAAE,0BAAU,CAAC,YAAY;gBAC7B,SAAS,EAAE,qBAAqB,CAAC,GAAG;gBACpC,eAAe,EAAE,qBAAqB,CAAC,GAAG;gBAC1C,WAAW,EAAE,qBAAqB,CAAC,IAAI,IAAI,qBAAqB,CAAC,GAAG;aACvE,CAAA;SACJ;KACJ;IACD,KAAK,MAAM,2BAA2B,IAAI,OAAO,CAAC,MAAM,CAAsB,0BAAU,CAAC,kBAAkB,CAAC,EAAE;QAC1G,MAAM,aAAa,GAAG,QAAQ,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAA;QAChE,IAAI,aAAa,IAAI,aAAa,CAAC,WAAW,EAAE,KAAK,cAAc,EAAE;YACjE,OAAO;gBACH,IAAI,EAAE,0BAAU,CAAC,kBAAkB;gBACnC,SAAS,EAAE,2BAA2B,CAAC,GAAG;gBAC1C,eAAe,EAAE,2BAA2B,CAAC,eAAe;gBAC5D,WAAW,EAAE,aAAa;aAC7B,CAAA;SACJ;KACJ;IACD,KAAK,MAAM,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAc,0BAAU,CAAC,UAAU,CAAC,EAAE;QAClF,MAAM,aAAa,GAAG,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAA;QACxD,IAAI,aAAa,IAAI,aAAa,CAAC,WAAW,EAAE,KAAK,cAAc,EAAE;YACjE,OAAO;gBACH,IAAI,EAAE,0BAAU,CAAC,UAAU;gBAC3B,SAAS,EAAE,mBAAmB,CAAC,GAAG;gBAClC,WAAW,EAAE,aAAa;aAC7B,CAAA;SACJ;KACJ;IAED,OAAO,SAAS,CAAA;AACpB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAU,EAAE,MAAgB;IAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,EAA0B,CAAA;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAA;IAE9C,MAAM,WAAW,GAAG,IAAA,gCAAoB,EAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/D,IAAI,QAA+C,CAAA;IACnD,IAAI;QACA,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;KACjD;IAAC,OAAO,GAAG,EAAE;QACV,MAAM,IAAI,sBAAc,CAAC,gCAAgC,IAAA,2BAAmB,EAAC,GAAG,CAAC,EAAE,CAAC,CAAA;KACvF;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE;QAC7C,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;QACrD,IAAI,CAAC,QAAQ;YAAE,SAAQ;QACvB,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;YAC9B,YAAY,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,SAAwB,CAAC,CAAC,CAAC,IAAI;YACpG,YAAY,EACR,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,YAA2B,CAAC,CAAC,CAAC,IAAI;YACnG,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS;SACtC,CAAC,CAAA;KACL;IACD,OAAO,cAAc,CAAA;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,MAAgB;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,aAAa,GAAa,EAAE,CAAA;IAClC,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE;QAC3B,MAAM,UAAU,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACxD,IAAI,CAAC,UAAU;YAAE,SAAQ;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAQ;QAClC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;KACjC;IACD,OAAO,aAAa,CAAA;AACxB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACjC,IAAU,EACV,YAA2B,EAC3B,QAAoG,EACpG,MAAgB;IAEhB,MAAM,aAAa,GAAwC;QACvD,eAAe,EAAE,IAAA,yBAAa,EAAC,YAAY,CAAC,GAAG,CAAC;QAChD,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,WAAW,EAAE,KAAK;QAClB,sBAAsB,EAAE,MAAM;KACjC,CAAA;IAED,IAAI,QAAgD,CAAA;IACpD,IAAI;QACA,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAA,uCAA2B,EAAC,EAAE,qBAAqB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAA;KAC7G;IAAC,OAAO,GAAG,EAAE;QACV,OAAO;YACH,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,eAAe,EAAE,YAAY,CAAC,GAAG;YACjC,UAAU,EAAE,0BAAU,CAAC,YAAY;YACnC,OAAO,EAAE,gDAAgD,QAAQ,CAAC,WAAW,UAAU,YAAY,CAAC,GAAG,MAAM,IAAA,2BAAmB,EAAC,GAAG,CAAC,EAAE;YACvI,OAAO,EAAE,EAAE;SACd,CAAA;KACJ;IAED,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,SAAS,GAAG,CAAC,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,MAAM,CAAA,IAAI,aAAa,CAAC,MAAM,KAAK,kCAAkB,CAAC,OAAO,CAAA;IAE/F,MAAM,WAAW,GAA4B,EAAE,CAAA;IAC/C,KAAK,MAAM,UAAU,IAAI,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,4BAA4B,KAAI,EAAE,EAAE;QACxE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,2BAA2B,CAAC,OAAO,CAAA;QACvE,WAAW,CAAC,IAAI,CAAC;YACb,KAAK,EAAE,UAAU,CAAC,QAAQ,IAAI,EAAE;YAChC,OAAO,EAAE,MAAM,KAAK,kCAAkB,CAAC,OAAO;YAC9C,MAAM;SACT,CAAC,CAAA;KACL;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAElG,MAAM,aAAa,GAAG,CAAC,SAAS;QAC5B,CAAC,CAAC,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,MAAM;YACrB,gDAAgD,QAAQ,CAAC,WAAW,UAAU,YAAY,CAAC,GAAG,8BAA8B;QAC9H,CAAC,CAAC,SAAS,CAAA;IAEf,OAAO;QACH,OAAO,EAAE,SAAS,IAAI,UAAU;QAChC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,eAAe,EAAE,YAAY,CAAC,GAAG;QACjC,UAAU,EAAE,0BAAU,CAAC,YAAY;QACnC,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,WAAW;KACvB,CAAA;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAChC,IAAU,EACV,OAAwB,EACxB,QAAoG,EACpG,KAAuB;IAEvB,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAgB,0BAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;IACvG,IAAI,CAAC,YAAY,EAAE;QACf,MAAM,IAAI,sBAAc,CAAC,kBAAkB,QAAQ,CAAC,eAAe,cAAc,EAAE,yBAAyB,CAAC,CAAA;KAChH;IACD,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;IACnE,IAAI,CAAC,eAAe,EAAE;QAClB,MAAM,IAAI,sBAAc,CACpB,2EAA2E,EAC3E,2BAA2B,CAC9B,CAAA;KACJ;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;QACrB,MAAM,IAAI,sBAAc,CAAC,kCAAkC,EAAE,WAAW,CAAC,CAAA;KAC5E;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAA,oBAAY,EAAC,KAAK,CAAC,CAAC,CAAA;IACpE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;QAC1B,MAAM,IAAI,sBAAc,CAAC,qBAAqB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;KAC7F;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,EAAE;QAC3C,OAAO,sBAAsB,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;KACtE;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAA;IACzC,KAAK,MAAM,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAoB,+BAAe,CAAC,gBAAgB,CAAC,EAAE;QAChG,IAAI,gBAAgB,CAAC,eAAe,KAAK,YAAY,CAAC,GAAG,IAAI,gBAAgB,CAAC,eAAe,EAAE;YAC3F,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,CAAA;SACtE;KACJ;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;IACvE,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAEjE,MAAM,UAAU,GAAqC,EAAE,CAAA;IACvD,MAAM,aAAa,GAAqC,EAAE,CAAA;IAC1D,MAAM,WAAW,GAA4B,EAAE,CAAA;IAE/C,MAAM,oBAAoB,GAAG,IAAA,iBAAS,EAAC,KAAK,CAAC,aAAa,CAAC;QACvD,CAAC,CAAC,KAAK,CAAC,aAAa;QACrB,CAAC,CAAC,YAAY,CAAC,oBAAoB,CAAA;IACvC,MAAM,kBAAkB,GAAG,IAAA,iBAAS,EAAC,KAAK,CAAC,WAAW,CAAC;QACnD,CAAC,CAAC,KAAK,CAAC,WAAW;QACnB,CAAC,CAAC,YAAY,CAAC,kBAAkB,CAAA;IAErC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;QACxB,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YAC5B,aAAa,CAAC,IAAI,CAAC;gBACf,QAAQ,EAAE,KAAK;gBACf,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC;gBAChD,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC;aAC/C,CAAC,CAAA;YACF,SAAQ;SACX;QAED,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC5C,IAAI,CAAC,UAAU,EAAE;YACb,WAAW,CAAC,IAAI,CAAC;gBACb,KAAK;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,2BAA2B,CAAC,gBAAgB;gBACpD,OAAO,EAAE,oCAAoC,KAAK,cAAc,QAAQ,CAAC,WAAW,IAAI;aAC3F,CAAC,CAAA;YACF,SAAQ;SACX;QACD,IAAI,UAAU,CAAC,SAAS,EAAE;YACtB,WAAW,CAAC,IAAI,CAAC;gBACb,KAAK;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,UAAU,CAAC,SAAS;gBAC5B,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,SAAS;aACtD,CAAC,CAAA;YACF,SAAQ;SACX;QAED,IAAI,YAAwB,CAAA;QAC5B,IAAI,gBAAyC,CAAA;QAC7C,IAAI,UAAU,CAAC,YAAY,EAAE;YACzB,MAAM,kBAAkB,GAAG,oBAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;YAC1E,YAAY,GAAG,oBAAQ,CAAC,aAAa,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAA;YAC1E,gBAAgB,GAAG,kBAAM,CAAC,gBAAgB,CAAC,uBAAuB,CAAA;SACrE;aAAM,IAAI,UAAU,CAAC,YAAY,EAAE;YAChC,YAAY,GAAG,MAAM,oBAAQ,CAAC,eAAe,CAAC,eAAe,EAAE,UAAU,CAAC,YAAY,CAAC,CAAA;YACvF,gBAAgB,GAAG,kBAAM,CAAC,gBAAgB,CAAC,2BAA2B,CAAA;SACzE;aAAM;YACH,WAAW,CAAC,IAAI,CAAC;gBACb,KAAK;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,2BAA2B,CAAC,gBAAgB;gBACpD,OAAO,EAAE,kCAAkC,KAAK,cAAc,QAAQ,CAAC,WAAW,IAAI;aACzF,CAAC,CAAA;YACF,SAAQ;SACX;QAED,UAAU,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,KAAK;YACf,aAAa,EAAE,YAAY,CAAC,oBAAoB,CAAC;YACjD,WAAW,EAAE,YAAY,CAAC,kBAAkB,CAAC;YAC7C,oBAAoB,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE;SAC3D,CAAC,CAAA;KACL;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE;QACvD,OAAO;YACH,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,eAAe,EAAE,YAAY,CAAC,GAAG;YACjC,UAAU,EAAE,0BAAU,CAAC,YAAY;YACnC,OAAO,EAAE,kDAAkD,QAAQ,CAAC,WAAW,UAAU,YAAY,CAAC,GAAG,IAAI;YAC7G,OAAO,EAAE,WAAW;SACvB,CAAA;KACJ;IAED,MAAM,aAAa,GAAwC;QACvD,eAAe,EAAE,IAAA,yBAAa,EAAC,YAAY,CAAC,GAAG,CAAC;QAChD,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,WAAW,EAAE,KAAK;KACrB,CAAA;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,aAAa,CAAC,mBAAmB,GAAG,UAAU,CAAA;IACzE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,aAAa,CAAC,sBAAsB,GAAG,aAAa,CAAA;IAElF,IAAI,QAAgD,CAAA;IACpD,IAAI;QACA,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAA,uCAA2B,EAAC,EAAE,qBAAqB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAA;KAC7G;IAAC,OAAO,GAAG,EAAE;QACV,OAAO;YACH,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,eAAe,EAAE,YAAY,CAAC,GAAG;YACjC,UAAU,EAAE,0BAAU,CAAC,YAAY;YACnC,OAAO,EAAE,+CAA+C,QAAQ,CAAC,WAAW,UAAU,YAAY,CAAC,GAAG,MAAM,IAAA,2BAAmB,EAAC,GAAG,CAAC,EAAE;YACtI,OAAO,EAAE,WAAW;SACvB,CAAA;KACJ;IAED,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,SAAS,GAAG,CAAC,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,MAAM,CAAA,IAAI,aAAa,CAAC,MAAM,KAAK,kCAAkB,CAAC,OAAO,CAAA;IAE/F,KAAK,MAAM,aAAa,IAAI,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,yBAAyB,KAAI,EAAE,EAAE;QACxE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,IAAI,2BAA2B,CAAC,OAAO,CAAA;QAC1E,MAAM,OAAO,GAAG,MAAM,KAAK,kCAAkB,CAAC,OAAO,IAAI,MAAM,KAAK,kCAAkB,CAAC,OAAO,CAAA;QAC9F,WAAW,CAAC,IAAI,CAAC;YACb,KAAK,EAAE,aAAa,CAAC,QAAQ,IAAI,EAAE;YACnC,OAAO;YACP,MAAM;SACT,CAAC,CAAA;KACL;IACD,KAAK,MAAM,gBAAgB,IAAI,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,4BAA4B,KAAI,EAAE,EAAE;QAC9E,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,IAAI,2BAA2B,CAAC,OAAO,CAAA;QAC7E,WAAW,CAAC,IAAI,CAAC;YACb,KAAK,EAAE,gBAAgB,CAAC,QAAQ,IAAI,EAAE;YACtC,OAAO,EAAE,MAAM,KAAK,kCAAkB,CAAC,OAAO;YAC9C,MAAM;SACT,CAAC,CAAA;KACL;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAElG,MAAM,aAAa,GAAG,CAAC,SAAS;QAC5B,CAAC,CAAC,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,MAAM;YACrB,+CAA+C,QAAQ,CAAC,WAAW,UAAU,YAAY,CAAC,GAAG,8BAA8B;QAC7H,CAAC,CAAC,SAAS,CAAA;IAEf,OAAO;QACH,OAAO,EAAE,SAAS,IAAI,UAAU;QAChC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,eAAe,EAAE,YAAY,CAAC,GAAG;QACjC,UAAU,EAAE,0BAAU,CAAC,YAAY;QACnC,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,WAAW;KACvB,CAAA;AACL,CAAC;AAEM,KAAK,UAAU,WAAW,CAC7B,IAAU,EACV,OAAwB,EACxB,KAAuB;IAEvB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IACrD,IAAI,CAAC,QAAQ,EAAE;QACX,MAAM,IAAI,sBAAc,CAAC,WAAW,KAAK,CAAC,MAAM,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;KAC1F;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,0BAAU,CAAC,UAAU,EAAE;QACzC,MAAM,IAAI,sBAAc,CACpB,IAAI,QAAQ,CAAC,WAAW,4DAA4D,EACpF,qBAAqB,CACxB,CAAA;KACJ;IAED,OAAO,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;AAChE,CAAC;AAlBD,kCAkBC"}

package/dist/src/sharing/Sharing.d.ts

@@ -0,0 +1,50 @@
+import { Auth } from '@keeper-security/keeperapi';
+export type ShareRecordInput = {
+    recordUid: string;
+    email: string;
+    canEdit?: boolean;
+    canShare?: boolean;
+};
+export type ShareRecordResult = {
+    recordUid: string;
+    email: string;
+    success: boolean;
+    status: string;
+    message: string;
+};
+export type RemoveShareInput = {
+    recordUid: string;
+    email: string;
+};
+export type RemoveShareResult = {
+    recordUid: string;
+    email: string;
+    success: boolean;
+    status: string;
+    message: string;
+};
+export declare function shareRecord(auth: Auth, recordKey: Uint8Array, input: ShareRecordInput): Promise<ShareRecordResult>;
+export declare function removeRecordShare(auth: Auth, input: RemoveShareInput): Promise<RemoveShareResult>;
+export type RecordUserPermission = {
+    username: string;
+    accountUid?: string;
+    owner: boolean;
+    shareAdmin: boolean;
+    shareable: boolean;
+    editable: boolean;
+    awaitingApproval: boolean;
+    expiration?: number;
+};
+export type RecordSharedFolderPermission = {
+    sharedFolderUid: string;
+    resharable: boolean;
+    editable: boolean;
+    revision?: number;
+    expiration?: number;
+};
+export type RecordShareInfo = {
+    recordUid: string;
+    userPermissions: RecordUserPermission[];
+    sharedFolderPermissions: RecordSharedFolderPermission[];
+};
+export declare function getRecordShareInfo(auth: Auth, recordUid: string): Promise<RecordShareInfo | null>;

package/dist/src/sharing/Sharing.js

@@ -0,0 +1,195 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRecordShareInfo = exports.removeRecordShare = exports.shareRecord = void 0;
+const keeperapi_1 = require("@keeper-security/keeperapi");
+const errors_1 = require("../utils/errors");
+var ShareStatus;
+(function (ShareStatus) {
+    ShareStatus["Success"] = "success";
+    ShareStatus["PendingAccept"] = "pending_accept";
+    ShareStatus["MissingPublicKey"] = "missing_public_key";
+    ShareStatus["Error"] = "error";
+    ShareStatus["Unknown"] = "unknown";
+})(ShareStatus || (ShareStatus = {}));
+async function loadUserPublicKey(auth, email) {
+    const msg = (0, keeperapi_1.getPublicKeysMessage)({ usernames: [email] });
+    let response;
+    try {
+        response = await auth.executeRest(msg);
+    }
+    catch (err) {
+        throw new errors_1.KeeperSdkError(`Failed to fetch public key for ${email}: ${(0, errors_1.extractErrorMessage)(err)}`);
+    }
+    const keyResponses = response.keyResponses || [];
+    if (keyResponses.length === 0) {
+        throw new errors_1.KeeperSdkError(`No public key returned for ${email}`, 'missing_public_key');
+    }
+    const entry = keyResponses[0];
+    if (entry.errorCode) {
+        throw new errors_1.KeeperSdkError(`Public key lookup failed for ${email}: ${entry.errorCode} - ${entry.message || ''}`, entry.errorCode);
+    }
+    return {
+        username: entry.username || email,
+        rsaPublicKey: entry.publicKey && entry.publicKey.length > 0 ? entry.publicKey : null,
+        eccPublicKey: entry.publicEccKey && entry.publicEccKey.length > 0 ? entry.publicEccKey : null,
+        errorCode: entry.errorCode || null,
+    };
+}
+async function shareRecord(auth, recordKey, input) {
+    const { recordUid, email, canEdit = false, canShare = false } = input;
+    const userKeys = await loadUserPublicKey(auth, email);
+    let encryptedRecordKey;
+    let useEccKey = false;
+    if (userKeys.eccPublicKey) {
+        encryptedRecordKey = await keeperapi_1.platform.publicEncryptEC(recordKey, userKeys.eccPublicKey);
+        useEccKey = true;
+    }
+    else if (userKeys.rsaPublicKey) {
+        const rsaKeyBase64 = keeperapi_1.platform.bytesToBase64(userKeys.rsaPublicKey);
+        encryptedRecordKey = keeperapi_1.platform.publicEncrypt(recordKey, rsaKeyBase64);
+        useEccKey = false;
+    }
+    else {
+        return {
+            recordUid,
+            email,
+            success: false,
+            status: ShareStatus.MissingPublicKey,
+            message: `No usable public key available for ${email}`,
+        };
+    }
+    const sharedRecord = {
+        toUsername: email,
+        recordUid: (0, keeperapi_1.normal64Bytes)(recordUid),
+        recordKey: encryptedRecordKey,
+        editable: canEdit,
+        shareable: canShare,
+        useEccKey,
+    };
+    const msg = (0, keeperapi_1.recordsShareUpdateMessage)({ addSharedRecord: [sharedRecord] });
+    let response;
+    try {
+        response = await auth.executeRest(msg);
+    }
+    catch (err) {
+        return {
+            recordUid,
+            email,
+            success: false,
+            status: ShareStatus.Error,
+            message: (0, errors_1.extractErrorMessage)(err),
+        };
+    }
+    const addStatuses = response.addSharedRecordStatus || [];
+    if (addStatuses.length > 0) {
+        const st = addStatuses[0];
+        const isSuccess = st.status === ShareStatus.Success || st.status === ShareStatus.PendingAccept;
+        return {
+            recordUid,
+            email: st.username || email,
+            success: isSuccess,
+            status: st.status || ShareStatus.Unknown,
+            message: st.message || st.status || '',
+        };
+    }
+    return {
+        recordUid,
+        email,
+        success: true,
+        status: ShareStatus.Success,
+        message: 'Record shared successfully',
+    };
+}
+exports.shareRecord = shareRecord;
+async function removeRecordShare(auth, input) {
+    const { recordUid, email } = input;
+    const msg = (0, keeperapi_1.recordsShareUpdateMessage)({
+        removeSharedRecord: [
+            {
+                toUsername: email,
+                recordUid: (0, keeperapi_1.normal64Bytes)(recordUid),
+            },
+        ],
+    });
+    let response;
+    try {
+        response = await auth.executeRest(msg);
+    }
+    catch (err) {
+        return {
+            recordUid,
+            email,
+            success: false,
+            status: ShareStatus.Error,
+            message: (0, errors_1.extractErrorMessage)(err),
+        };
+    }
+    const removeStatuses = response.removeSharedRecordStatus || [];
+    if (removeStatuses.length > 0) {
+        const st = removeStatuses[0];
+        return {
+            recordUid,
+            email: st.username || email,
+            success: st.status === ShareStatus.Success,
+            status: st.status || ShareStatus.Unknown,
+            message: st.message || st.status || '',
+        };
+    }
+    return {
+        recordUid,
+        email,
+        success: true,
+        status: ShareStatus.Success,
+        message: 'Share removed successfully',
+    };
+}
+exports.removeRecordShare = removeRecordShare;
+function bytesToUid(bytes) {
+    return bytes && bytes.length > 0 ? (0, keeperapi_1.webSafe64FromBytes)(bytes) : undefined;
+}
+function longToNumber(value) {
+    if (value == null)
+        return undefined;
+    return typeof value === 'number' ? value : value.toNumber();
+}
+async function getRecordShareInfo(auth, recordUid) {
+    var _a, _b, _c;
+    const msg = (0, keeperapi_1.getRecordsDetailsMessage)({
+        clientTime: Date.now(),
+        recordUid: [(0, keeperapi_1.normal64Bytes)(recordUid)],
+        recordDetailsInclude: keeperapi_1.Records.RecordDetailsInclude.SHARE_ONLY,
+    });
+    let response;
+    try {
+        response = await auth.executeRest(msg);
+    }
+    catch (err) {
+        throw new errors_1.KeeperSdkError(`Failed to fetch share info for ${recordUid}: ${(0, errors_1.extractErrorMessage)(err)}`);
+    }
+    const detail = (_a = response.recordDataWithAccessInfo) === null || _a === void 0 ? void 0 : _a[0];
+    if (!detail)
+        return null;
+    const userPermissions = ((_b = detail.userPermission) !== null && _b !== void 0 ? _b : []).map((u) => ({
+        username: u.username || '',
+        accountUid: bytesToUid(u.accountUid),
+        owner: !!u.owner,
+        shareAdmin: !!u.shareAdmin,
+        shareable: !!u.sharable,
+        editable: !!u.editable,
+        awaitingApproval: !!u.awaitingApproval,
+        expiration: longToNumber(u.expiration),
+    }));
+    const sharedFolderPermissions = ((_c = detail.sharedFolderPermission) !== null && _c !== void 0 ? _c : []).map((s) => {
+        var _a;
+        return ({
+            sharedFolderUid: (_a = bytesToUid(s.sharedFolderUid)) !== null && _a !== void 0 ? _a : '',
+            resharable: !!s.resharable,
+            editable: !!s.editable,
+            revision: longToNumber(s.revision),
+            expiration: longToNumber(s.expiration),
+        });
+    });
+    return { recordUid, userPermissions, sharedFolderPermissions };
+}
+exports.getRecordShareInfo = getRecordShareInfo;
+//# sourceMappingURL=Sharing.js.map