@learncard/types 5.21.0 → 5.22.0

package/dist/share-links.d.ts

@@ -0,0 +1,1846 @@
+import { z } from 'zod/v4';
+/**
+ * LC-2187 multi-credential share-link protocol types.
+ *
+ * This module is the single source of truth for the *recipient* payload grammar
+ * and the owner-facing recovery/API shapes. It is deliberately storage-agnostic:
+ * it defines bytes and structure, never where those bytes live.
+ *
+ * Security boundaries encoded here (see planning/lc-2187/task-a-contract.md and
+ * task-a2-review.md):
+ * - A share id / content key / IV / ciphertext is accepted only when it is
+ *   canonical base64url: alphabet, no `=`, exact decoded byte length, and a
+ *   re-encode round trip. Permissive decoders accept unused padding bits, so one
+ *   byte string would otherwise have several spellings and could defeat an AAD
+ *   or signature binding keyed on the string.
+ * - The recipient manifest never carries source URIs. Credentials are referenced
+ *   by local index into the holder-signed presentation only.
+ * - Envelope authenticity (AES-GCM) only proves a key holder produced the bytes.
+ *   It is NOT issuer identity. Signed VP/credential verification is a separate,
+ *   later step (see `ShareManifestProofVerifier` in learn-card-base).
+ */
+/** Raw byte length of the opaque share id (128 bits). */
+export declare const SHARE_LINK_ID_BYTES = 16;
+/** Raw byte length of the symmetric content key (256 bits). */
+export declare const SHARE_CONTENT_KEY_BYTES = 32;
+/** AES-GCM nonce length (96 bits). */
+export declare const SHARE_IV_BYTES = 12;
+/** AES-GCM authentication tag length (128 bits). */
+export declare const SHARE_TAG_BYTES = 16;
+/** Maximum decoded ciphertext length, tag included (512 KiB). */
+export declare const MAX_SHARE_CIPHERTEXT_BYTES: number;
+/** Maximum UTF-8 length of the serialized owner recovery JWE (64 KiB). */
+export declare const MAX_SHARE_RECOVERY_JWE_BYTES: number;
+/** Maximum number of selected credentials in one share (50). */
+export declare const MAX_SELECTED_CREDENTIALS = 50;
+/** Maximum number of public endorsements attached to one share (200). */
+export declare const MAX_ENDORSEMENTS = 200;
+/**
+ * Conservative total bound on holder-signed VP members (selected + endorsements).
+ * The sum is intentional: the two collections are disjoint and every member must
+ * be classified exactly once, so their maximums bound the VP.
+ */
+export declare const MAX_VP_MEMBERS: number;
+/** Maximum length of an owner-private source URI in recovery. */
+export declare const MAX_SHARE_SOURCE_URI_CHARS = 2048;
+/**
+ * Maximum UTF-8 byte length of one complete owner share-link request body,
+ * measured raw (before Zod strips unknown fields). This is the transport-level
+ * bound enforced ahead of schema parsing; individual field bounds are not a
+ * substitute for it.
+ */
+export declare const MAX_SHARE_LINK_REQUEST_BYTES: number;
+/** Recipient plaintext protocol id. */
+export declare const SHARE_LINK_PROTOCOL = "lc-share/v1";
+/** Owner recovery plaintext protocol id. */
+export declare const SHARE_RECOVERY_PROTOCOL = "lc-share-recovery/v1";
+/** Domain-separation prefix for the AES-GCM AAD. */
+export declare const SHARE_AAD_PREFIX = "lc-share:v1";
+/**
+ * Encode bytes as unpadded base64url. Browser/Node isomorphic on purpose: no
+ * `Buffer`, and no dependency on `btoa`/`atob` encoding quirks.
+ */
+export declare const encodeBase64Url: (bytes: Uint8Array) => string;
+/**
+ * Decode unpadded base64url to bytes. Returns `null` for any non-alphabet,
+ * padding or otherwise malformed input. This step is intentionally more lenient
+ * about trailing padding bits than {@link isCanonicalBase64Url}; callers that
+ * need one unambiguous spelling must re-encode and compare.
+ */
+export declare const decodeBase64Url: (value: string) => Uint8Array | null;
+/**
+ * Strict canonicity check: valid alphabet, no padding, and
+ * `encode(decode(value)) === value`. When `expectedBytes` is supplied the decoded
+ * length must match exactly.
+ */
+export declare const isCanonicalBase64Url: (value: unknown, expectedBytes?: number) => boolean;
+/** Base64url-encoded byte length without materializing the decoded string. */
+export declare const decodedBase64UrlByteLength: (value: string) => number | null;
+/** UTF-8 byte length, independent of the platform's string length semantics. */
+export declare const utf8ByteLength: (value: string) => number;
+/** 16-byte / 22-character share id. */
+export declare const ShareLinkIdValidator: z.ZodString;
+export type ShareLinkId = z.infer<typeof ShareLinkIdValidator>;
+/** 32-byte / 43-character symmetric content key. */
+export declare const ShareContentKeyValidator: z.ZodString;
+export type ShareContentKey = z.infer<typeof ShareContentKeyValidator>;
+/** 12-byte / 16-character AES-GCM nonce. */
+export declare const ShareIvValidator: z.ZodString;
+export type ShareIv = z.infer<typeof ShareIvValidator>;
+/**
+ * Ciphertext||tag as canonical base64url. The decoded length includes the
+ * 16-byte GCM tag, must be at least that tag, and is capped at
+ * {@link MAX_SHARE_CIPHERTEXT_BYTES}.
+ */
+export declare const ShareCiphertextValidator: z.ZodString;
+export type ShareCiphertext = z.infer<typeof ShareCiphertextValidator>;
+/**
+ * AES-256-GCM envelope. `v`/`alg` are literals so an unknown version or
+ * algorithm is rejected by the schema before any decryption is attempted.
+ */
+export declare const ShareEnvelopeValidator: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    alg: z.ZodLiteral<"A256GCM">;
+    iv: z.ZodString;
+    ct: z.ZodString;
+}, z.core.$strict>;
+export type ShareEnvelope = z.infer<typeof ShareEnvelopeValidator>;
+/** Index-only reference to a selected credential inside the signed VP. */
+export declare const ShareSelectionEntryValidator: z.ZodObject<{
+    credentialIndex: z.ZodNumber;
+}, z.core.$strict>;
+export type ShareSelectionEntry = z.infer<typeof ShareSelectionEntryValidator>;
+/**
+ * Index-only reference to an endorsement credential, plus the selected credential
+ * it endorses. Extra keys (for example a source `ref`/`uri`) are rejected so a
+ * recipient payload can never leak the owner's private source index.
+ */
+export declare const ShareEndorsementEntryValidator: z.ZodObject<{
+    credentialIndex: z.ZodNumber;
+    targetCredentialIndex: z.ZodNumber;
+}, z.core.$strict>;
+export type ShareEndorsementEntry = z.infer<typeof ShareEndorsementEntryValidator>;
+export declare const ShareSharerValidator: z.ZodObject<{
+    profileId: z.ZodString;
+    displayName: z.ZodString;
+    avatar: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ShareSharer = z.infer<typeof ShareSharerValidator>;
+export declare const ShareManifestPresentationValidator: z.ZodCustom<{
+    [x: string]: any;
+    '@context': (string | Record<string, any>)[];
+    type: string | string[];
+    proof: {
+        [x: string]: any;
+        type: string;
+        proofPurpose: string;
+        verificationMethod: string;
+        created?: string | undefined;
+        challenge?: string | undefined;
+        domain?: string | undefined;
+        nonce?: string | undefined;
+        jws?: string | undefined;
+    } | {
+        [x: string]: any;
+        type: string;
+        proofPurpose: string;
+        verificationMethod: string;
+        created?: string | undefined;
+        challenge?: string | undefined;
+        domain?: string | undefined;
+        nonce?: string | undefined;
+        jws?: string | undefined;
+    }[];
+    verifiableCredential: {
+        [x: string]: any;
+        '@context': (string | Record<string, any>)[];
+        type: string[];
+        issuer: string | {
+            [x: string]: any;
+            id?: string | undefined;
+            type?: string | string[] | undefined;
+            name?: string | undefined;
+            url?: string | undefined;
+            phone?: string | undefined;
+            description?: string | undefined;
+            endorsement?: any[] | undefined;
+            image?: string | {
+                id: string;
+                type: string;
+                caption?: string | undefined;
+            } | undefined;
+            email?: string | undefined;
+            address?: {
+                type: string | string[];
+                addressCountry?: string | undefined;
+                addressCountryCode?: string | undefined;
+                addressRegion?: string | undefined;
+                addressLocality?: string | undefined;
+                streetAddress?: string | undefined;
+                postOfficeBoxNumber?: string | undefined;
+                postalCode?: string | undefined;
+                geo?: {
+                    type: string | string[];
+                    latitude: number;
+                    longitude: number;
+                } | undefined;
+            } | undefined;
+            otherIdentifier?: {
+                type: string | string[];
+                identifier: string;
+                identifierType: string;
+            }[] | undefined;
+            official?: string | undefined;
+            parentOrg?: any;
+            familyName?: string | undefined;
+            givenName?: string | undefined;
+            additionalName?: string | undefined;
+            patronymicName?: string | undefined;
+            honorificPrefix?: string | undefined;
+            honorificSuffix?: string | undefined;
+            familyNamePrefix?: string | undefined;
+            dateOfBirth?: string | undefined;
+        };
+        credentialSubject: {
+            [x: string]: any;
+            id?: string | undefined;
+        } | {
+            [x: string]: any;
+            id?: string | undefined;
+        }[];
+        proof: {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        }[];
+        id?: string | undefined;
+        refreshService?: {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        }[] | undefined;
+        credentialSchema?: {
+            [x: string]: any;
+            id: string;
+            type: string;
+        } | {
+            [x: string]: any;
+            id: string;
+            type: string;
+        }[] | undefined;
+        issuanceDate?: string | undefined;
+        expirationDate?: string | undefined;
+        credentialStatus?: {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        }[] | undefined;
+        name?: string | undefined;
+        description?: string | undefined;
+        validFrom?: string | undefined;
+        validUntil?: string | undefined;
+        status?: {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        }[] | undefined;
+        termsOfUse?: {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        }[] | undefined;
+        evidence?: {
+            [x: string]: any;
+            type: string[];
+            id?: string | undefined;
+            name?: string | undefined;
+            narrative?: string | undefined;
+            description?: string | undefined;
+            genre?: string | undefined;
+            audience?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string[];
+            id?: string | undefined;
+            name?: string | undefined;
+            narrative?: string | undefined;
+            description?: string | undefined;
+            genre?: string | undefined;
+            audience?: string | undefined;
+        }[] | undefined;
+        renderMethod?: Record<string, any> | {
+            type: "TemplateRenderMethod";
+            renderSuite: string;
+            template: string;
+            renderProperty?: string[] | undefined;
+            outputPreference?: {
+                mediaType: string;
+            } | undefined;
+        } | (Record<string, any> | {
+            type: "TemplateRenderMethod";
+            renderSuite: string;
+            template: string;
+            renderProperty?: string[] | undefined;
+            outputPreference?: {
+                mediaType: string;
+            } | undefined;
+        })[] | undefined;
+    }[];
+    id?: string | undefined;
+    holder?: string | undefined;
+}, {
+    [x: string]: any;
+    '@context': (string | Record<string, any>)[];
+    type: string | string[];
+    proof: {
+        [x: string]: any;
+        type: string;
+        proofPurpose: string;
+        verificationMethod: string;
+        created?: string | undefined;
+        challenge?: string | undefined;
+        domain?: string | undefined;
+        nonce?: string | undefined;
+        jws?: string | undefined;
+    } | {
+        [x: string]: any;
+        type: string;
+        proofPurpose: string;
+        verificationMethod: string;
+        created?: string | undefined;
+        challenge?: string | undefined;
+        domain?: string | undefined;
+        nonce?: string | undefined;
+        jws?: string | undefined;
+    }[];
+    verifiableCredential: {
+        [x: string]: any;
+        '@context': (string | Record<string, any>)[];
+        type: string[];
+        issuer: string | {
+            [x: string]: any;
+            id?: string | undefined;
+            type?: string | string[] | undefined;
+            name?: string | undefined;
+            url?: string | undefined;
+            phone?: string | undefined;
+            description?: string | undefined;
+            endorsement?: any[] | undefined;
+            image?: string | {
+                id: string;
+                type: string;
+                caption?: string | undefined;
+            } | undefined;
+            email?: string | undefined;
+            address?: {
+                type: string | string[];
+                addressCountry?: string | undefined;
+                addressCountryCode?: string | undefined;
+                addressRegion?: string | undefined;
+                addressLocality?: string | undefined;
+                streetAddress?: string | undefined;
+                postOfficeBoxNumber?: string | undefined;
+                postalCode?: string | undefined;
+                geo?: {
+                    type: string | string[];
+                    latitude: number;
+                    longitude: number;
+                } | undefined;
+            } | undefined;
+            otherIdentifier?: {
+                type: string | string[];
+                identifier: string;
+                identifierType: string;
+            }[] | undefined;
+            official?: string | undefined;
+            parentOrg?: any;
+            familyName?: string | undefined;
+            givenName?: string | undefined;
+            additionalName?: string | undefined;
+            patronymicName?: string | undefined;
+            honorificPrefix?: string | undefined;
+            honorificSuffix?: string | undefined;
+            familyNamePrefix?: string | undefined;
+            dateOfBirth?: string | undefined;
+        };
+        credentialSubject: {
+            [x: string]: any;
+            id?: string | undefined;
+        } | {
+            [x: string]: any;
+            id?: string | undefined;
+        }[];
+        proof: {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        }[];
+        id?: string | undefined;
+        refreshService?: {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        }[] | undefined;
+        credentialSchema?: {
+            [x: string]: any;
+            id: string;
+            type: string;
+        } | {
+            [x: string]: any;
+            id: string;
+            type: string;
+        }[] | undefined;
+        issuanceDate?: string | undefined;
+        expirationDate?: string | undefined;
+        credentialStatus?: {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        }[] | undefined;
+        name?: string | undefined;
+        description?: string | undefined;
+        validFrom?: string | undefined;
+        validUntil?: string | undefined;
+        status?: {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        }[] | undefined;
+        termsOfUse?: {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            id?: string | undefined;
+        }[] | undefined;
+        evidence?: {
+            [x: string]: any;
+            type: string[];
+            id?: string | undefined;
+            name?: string | undefined;
+            narrative?: string | undefined;
+            description?: string | undefined;
+            genre?: string | undefined;
+            audience?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string[];
+            id?: string | undefined;
+            name?: string | undefined;
+            narrative?: string | undefined;
+            description?: string | undefined;
+            genre?: string | undefined;
+            audience?: string | undefined;
+        }[] | undefined;
+        renderMethod?: Record<string, any> | {
+            type: "TemplateRenderMethod";
+            renderSuite: string;
+            template: string;
+            renderProperty?: string[] | undefined;
+            outputPreference?: {
+                mediaType: string;
+            } | undefined;
+        } | (Record<string, any> | {
+            type: "TemplateRenderMethod";
+            renderSuite: string;
+            template: string;
+            renderProperty?: string[] | undefined;
+            outputPreference?: {
+                mediaType: string;
+            } | undefined;
+        })[] | undefined;
+    }[];
+    id?: string | undefined;
+    holder?: string | undefined;
+}>;
+export type ShareManifestPresentation = z.infer<typeof ShareManifestPresentationValidator>;
+export declare const SharePayloadValidatorShape: z.ZodObject<{
+    protocol: z.ZodLiteral<"lc-share/v1">;
+    shareId: z.ZodString;
+    contentVersion: z.ZodNumber;
+    createdAt: z.ZodISODateTime;
+    sharer: z.ZodObject<{
+        profileId: z.ZodString;
+        displayName: z.ZodString;
+        avatar: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    presentation: z.ZodCustom<{
+        [x: string]: any;
+        '@context': (string | Record<string, any>)[];
+        type: string | string[];
+        proof: {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        }[];
+        verifiableCredential: {
+            [x: string]: any;
+            '@context': (string | Record<string, any>)[];
+            type: string[];
+            issuer: string | {
+                [x: string]: any;
+                id?: string | undefined;
+                type?: string | string[] | undefined;
+                name?: string | undefined;
+                url?: string | undefined;
+                phone?: string | undefined;
+                description?: string | undefined;
+                endorsement?: any[] | undefined;
+                image?: string | {
+                    id: string;
+                    type: string;
+                    caption?: string | undefined;
+                } | undefined;
+                email?: string | undefined;
+                address?: {
+                    type: string | string[];
+                    addressCountry?: string | undefined;
+                    addressCountryCode?: string | undefined;
+                    addressRegion?: string | undefined;
+                    addressLocality?: string | undefined;
+                    streetAddress?: string | undefined;
+                    postOfficeBoxNumber?: string | undefined;
+                    postalCode?: string | undefined;
+                    geo?: {
+                        type: string | string[];
+                        latitude: number;
+                        longitude: number;
+                    } | undefined;
+                } | undefined;
+                otherIdentifier?: {
+                    type: string | string[];
+                    identifier: string;
+                    identifierType: string;
+                }[] | undefined;
+                official?: string | undefined;
+                parentOrg?: any;
+                familyName?: string | undefined;
+                givenName?: string | undefined;
+                additionalName?: string | undefined;
+                patronymicName?: string | undefined;
+                honorificPrefix?: string | undefined;
+                honorificSuffix?: string | undefined;
+                familyNamePrefix?: string | undefined;
+                dateOfBirth?: string | undefined;
+            };
+            credentialSubject: {
+                [x: string]: any;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                id?: string | undefined;
+            }[];
+            proof: {
+                [x: string]: any;
+                type: string;
+                proofPurpose: string;
+                verificationMethod: string;
+                created?: string | undefined;
+                challenge?: string | undefined;
+                domain?: string | undefined;
+                nonce?: string | undefined;
+                jws?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                proofPurpose: string;
+                verificationMethod: string;
+                created?: string | undefined;
+                challenge?: string | undefined;
+                domain?: string | undefined;
+                nonce?: string | undefined;
+                jws?: string | undefined;
+            }[];
+            id?: string | undefined;
+            refreshService?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            credentialSchema?: {
+                [x: string]: any;
+                id: string;
+                type: string;
+            } | {
+                [x: string]: any;
+                id: string;
+                type: string;
+            }[] | undefined;
+            issuanceDate?: string | undefined;
+            expirationDate?: string | undefined;
+            credentialStatus?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            name?: string | undefined;
+            description?: string | undefined;
+            validFrom?: string | undefined;
+            validUntil?: string | undefined;
+            status?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            termsOfUse?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            evidence?: {
+                [x: string]: any;
+                type: string[];
+                id?: string | undefined;
+                name?: string | undefined;
+                narrative?: string | undefined;
+                description?: string | undefined;
+                genre?: string | undefined;
+                audience?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string[];
+                id?: string | undefined;
+                name?: string | undefined;
+                narrative?: string | undefined;
+                description?: string | undefined;
+                genre?: string | undefined;
+                audience?: string | undefined;
+            }[] | undefined;
+            renderMethod?: Record<string, any> | {
+                type: "TemplateRenderMethod";
+                renderSuite: string;
+                template: string;
+                renderProperty?: string[] | undefined;
+                outputPreference?: {
+                    mediaType: string;
+                } | undefined;
+            } | (Record<string, any> | {
+                type: "TemplateRenderMethod";
+                renderSuite: string;
+                template: string;
+                renderProperty?: string[] | undefined;
+                outputPreference?: {
+                    mediaType: string;
+                } | undefined;
+            })[] | undefined;
+        }[];
+        id?: string | undefined;
+        holder?: string | undefined;
+    }, {
+        [x: string]: any;
+        '@context': (string | Record<string, any>)[];
+        type: string | string[];
+        proof: {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        }[];
+        verifiableCredential: {
+            [x: string]: any;
+            '@context': (string | Record<string, any>)[];
+            type: string[];
+            issuer: string | {
+                [x: string]: any;
+                id?: string | undefined;
+                type?: string | string[] | undefined;
+                name?: string | undefined;
+                url?: string | undefined;
+                phone?: string | undefined;
+                description?: string | undefined;
+                endorsement?: any[] | undefined;
+                image?: string | {
+                    id: string;
+                    type: string;
+                    caption?: string | undefined;
+                } | undefined;
+                email?: string | undefined;
+                address?: {
+                    type: string | string[];
+                    addressCountry?: string | undefined;
+                    addressCountryCode?: string | undefined;
+                    addressRegion?: string | undefined;
+                    addressLocality?: string | undefined;
+                    streetAddress?: string | undefined;
+                    postOfficeBoxNumber?: string | undefined;
+                    postalCode?: string | undefined;
+                    geo?: {
+                        type: string | string[];
+                        latitude: number;
+                        longitude: number;
+                    } | undefined;
+                } | undefined;
+                otherIdentifier?: {
+                    type: string | string[];
+                    identifier: string;
+                    identifierType: string;
+                }[] | undefined;
+                official?: string | undefined;
+                parentOrg?: any;
+                familyName?: string | undefined;
+                givenName?: string | undefined;
+                additionalName?: string | undefined;
+                patronymicName?: string | undefined;
+                honorificPrefix?: string | undefined;
+                honorificSuffix?: string | undefined;
+                familyNamePrefix?: string | undefined;
+                dateOfBirth?: string | undefined;
+            };
+            credentialSubject: {
+                [x: string]: any;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                id?: string | undefined;
+            }[];
+            proof: {
+                [x: string]: any;
+                type: string;
+                proofPurpose: string;
+                verificationMethod: string;
+                created?: string | undefined;
+                challenge?: string | undefined;
+                domain?: string | undefined;
+                nonce?: string | undefined;
+                jws?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                proofPurpose: string;
+                verificationMethod: string;
+                created?: string | undefined;
+                challenge?: string | undefined;
+                domain?: string | undefined;
+                nonce?: string | undefined;
+                jws?: string | undefined;
+            }[];
+            id?: string | undefined;
+            refreshService?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            credentialSchema?: {
+                [x: string]: any;
+                id: string;
+                type: string;
+            } | {
+                [x: string]: any;
+                id: string;
+                type: string;
+            }[] | undefined;
+            issuanceDate?: string | undefined;
+            expirationDate?: string | undefined;
+            credentialStatus?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            name?: string | undefined;
+            description?: string | undefined;
+            validFrom?: string | undefined;
+            validUntil?: string | undefined;
+            status?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            termsOfUse?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            evidence?: {
+                [x: string]: any;
+                type: string[];
+                id?: string | undefined;
+                name?: string | undefined;
+                narrative?: string | undefined;
+                description?: string | undefined;
+                genre?: string | undefined;
+                audience?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string[];
+                id?: string | undefined;
+                name?: string | undefined;
+                narrative?: string | undefined;
+                description?: string | undefined;
+                genre?: string | undefined;
+                audience?: string | undefined;
+            }[] | undefined;
+            renderMethod?: Record<string, any> | {
+                type: "TemplateRenderMethod";
+                renderSuite: string;
+                template: string;
+                renderProperty?: string[] | undefined;
+                outputPreference?: {
+                    mediaType: string;
+                } | undefined;
+            } | (Record<string, any> | {
+                type: "TemplateRenderMethod";
+                renderSuite: string;
+                template: string;
+                renderProperty?: string[] | undefined;
+                outputPreference?: {
+                    mediaType: string;
+                } | undefined;
+            })[] | undefined;
+        }[];
+        id?: string | undefined;
+        holder?: string | undefined;
+    }>;
+    selection: z.ZodArray<z.ZodObject<{
+        credentialIndex: z.ZodNumber;
+    }, z.core.$strict>>;
+    endorsements: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        credentialIndex: z.ZodNumber;
+        targetCredentialIndex: z.ZodNumber;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type SharePayloadShape = z.infer<typeof SharePayloadValidatorShape>;
+/** Structured classification failure raised by {@link classifyShareManifest}. */
+export type ShareManifestClassificationCode = 'NO_PRESENTATION_MEMBERS' | 'TOO_MANY_VP_MEMBERS' | 'BAD_SELECTION' | 'BAD_ENDORSEMENTS' | 'SELECTION_INDEX_OUT_OF_BOUNDS' | 'SELECTION_INDEX_DUPLICATE' | 'ENDORSEMENT_INDEX_OUT_OF_BOUNDS' | 'VP_MEMBER_CLASSIFIED_TWICE' | 'ENDORSEMENT_TARGET_NOT_SELECTED' | 'ENDORSEMENT_TARGET_UNBOUND' | 'UNCLASSIFIED_VP_MEMBER';
+export interface ShareManifestClassification {
+    /** Ordered selected VP member indices, exactly as the manifest declares them. */
+    selectedIndices: number[];
+    /** Endorsement VP member indices (unordered classification helper). */
+    endorsementIndices: number[];
+    /** Total VP members, all of which are classified. */
+    memberCount: number;
+}
+export type ShareManifestClassificationResult = {
+    ok: true;
+    classification: ShareManifestClassification;
+} | {
+    ok: false;
+    code: ShareManifestClassificationCode;
+    message: string;
+    path: (string | number)[];
+};
+/**
+ * Structurally classify every holder-signed VP member exactly once.
+ *
+ * This is *structural* validation only: it proves each member is either selected
+ * or an endorsement of a selected member and that no member is smuggled. It does
+ * not verify any cryptographic proof. Endorsement target binding here reads the
+ * endorsement's own signed claim (`credentialSubject.id` / `endorsement.id`); it
+ * is still not signature verification.
+ */
+export declare const classifyShareManifest: (payload: Pick<SharePayloadShape, "presentation" | "selection" | "endorsements">) => ShareManifestClassificationResult;
+/**
+ * Manifest validator. Beyond the strict shape it enforces the full structural
+ * classification, so a parsed manifest is guaranteed to classify every VP member
+ * exactly once with in-bounds indices and claim-bound endorsement targets.
+ */
+export declare const SharePayloadValidator: z.ZodObject<{
+    protocol: z.ZodLiteral<"lc-share/v1">;
+    shareId: z.ZodString;
+    contentVersion: z.ZodNumber;
+    createdAt: z.ZodISODateTime;
+    sharer: z.ZodObject<{
+        profileId: z.ZodString;
+        displayName: z.ZodString;
+        avatar: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    presentation: z.ZodCustom<{
+        [x: string]: any;
+        '@context': (string | Record<string, any>)[];
+        type: string | string[];
+        proof: {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        }[];
+        verifiableCredential: {
+            [x: string]: any;
+            '@context': (string | Record<string, any>)[];
+            type: string[];
+            issuer: string | {
+                [x: string]: any;
+                id?: string | undefined;
+                type?: string | string[] | undefined;
+                name?: string | undefined;
+                url?: string | undefined;
+                phone?: string | undefined;
+                description?: string | undefined;
+                endorsement?: any[] | undefined;
+                image?: string | {
+                    id: string;
+                    type: string;
+                    caption?: string | undefined;
+                } | undefined;
+                email?: string | undefined;
+                address?: {
+                    type: string | string[];
+                    addressCountry?: string | undefined;
+                    addressCountryCode?: string | undefined;
+                    addressRegion?: string | undefined;
+                    addressLocality?: string | undefined;
+                    streetAddress?: string | undefined;
+                    postOfficeBoxNumber?: string | undefined;
+                    postalCode?: string | undefined;
+                    geo?: {
+                        type: string | string[];
+                        latitude: number;
+                        longitude: number;
+                    } | undefined;
+                } | undefined;
+                otherIdentifier?: {
+                    type: string | string[];
+                    identifier: string;
+                    identifierType: string;
+                }[] | undefined;
+                official?: string | undefined;
+                parentOrg?: any;
+                familyName?: string | undefined;
+                givenName?: string | undefined;
+                additionalName?: string | undefined;
+                patronymicName?: string | undefined;
+                honorificPrefix?: string | undefined;
+                honorificSuffix?: string | undefined;
+                familyNamePrefix?: string | undefined;
+                dateOfBirth?: string | undefined;
+            };
+            credentialSubject: {
+                [x: string]: any;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                id?: string | undefined;
+            }[];
+            proof: {
+                [x: string]: any;
+                type: string;
+                proofPurpose: string;
+                verificationMethod: string;
+                created?: string | undefined;
+                challenge?: string | undefined;
+                domain?: string | undefined;
+                nonce?: string | undefined;
+                jws?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                proofPurpose: string;
+                verificationMethod: string;
+                created?: string | undefined;
+                challenge?: string | undefined;
+                domain?: string | undefined;
+                nonce?: string | undefined;
+                jws?: string | undefined;
+            }[];
+            id?: string | undefined;
+            refreshService?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            credentialSchema?: {
+                [x: string]: any;
+                id: string;
+                type: string;
+            } | {
+                [x: string]: any;
+                id: string;
+                type: string;
+            }[] | undefined;
+            issuanceDate?: string | undefined;
+            expirationDate?: string | undefined;
+            credentialStatus?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            name?: string | undefined;
+            description?: string | undefined;
+            validFrom?: string | undefined;
+            validUntil?: string | undefined;
+            status?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            termsOfUse?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            evidence?: {
+                [x: string]: any;
+                type: string[];
+                id?: string | undefined;
+                name?: string | undefined;
+                narrative?: string | undefined;
+                description?: string | undefined;
+                genre?: string | undefined;
+                audience?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string[];
+                id?: string | undefined;
+                name?: string | undefined;
+                narrative?: string | undefined;
+                description?: string | undefined;
+                genre?: string | undefined;
+                audience?: string | undefined;
+            }[] | undefined;
+            renderMethod?: Record<string, any> | {
+                type: "TemplateRenderMethod";
+                renderSuite: string;
+                template: string;
+                renderProperty?: string[] | undefined;
+                outputPreference?: {
+                    mediaType: string;
+                } | undefined;
+            } | (Record<string, any> | {
+                type: "TemplateRenderMethod";
+                renderSuite: string;
+                template: string;
+                renderProperty?: string[] | undefined;
+                outputPreference?: {
+                    mediaType: string;
+                } | undefined;
+            })[] | undefined;
+        }[];
+        id?: string | undefined;
+        holder?: string | undefined;
+    }, {
+        [x: string]: any;
+        '@context': (string | Record<string, any>)[];
+        type: string | string[];
+        proof: {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        } | {
+            [x: string]: any;
+            type: string;
+            proofPurpose: string;
+            verificationMethod: string;
+            created?: string | undefined;
+            challenge?: string | undefined;
+            domain?: string | undefined;
+            nonce?: string | undefined;
+            jws?: string | undefined;
+        }[];
+        verifiableCredential: {
+            [x: string]: any;
+            '@context': (string | Record<string, any>)[];
+            type: string[];
+            issuer: string | {
+                [x: string]: any;
+                id?: string | undefined;
+                type?: string | string[] | undefined;
+                name?: string | undefined;
+                url?: string | undefined;
+                phone?: string | undefined;
+                description?: string | undefined;
+                endorsement?: any[] | undefined;
+                image?: string | {
+                    id: string;
+                    type: string;
+                    caption?: string | undefined;
+                } | undefined;
+                email?: string | undefined;
+                address?: {
+                    type: string | string[];
+                    addressCountry?: string | undefined;
+                    addressCountryCode?: string | undefined;
+                    addressRegion?: string | undefined;
+                    addressLocality?: string | undefined;
+                    streetAddress?: string | undefined;
+                    postOfficeBoxNumber?: string | undefined;
+                    postalCode?: string | undefined;
+                    geo?: {
+                        type: string | string[];
+                        latitude: number;
+                        longitude: number;
+                    } | undefined;
+                } | undefined;
+                otherIdentifier?: {
+                    type: string | string[];
+                    identifier: string;
+                    identifierType: string;
+                }[] | undefined;
+                official?: string | undefined;
+                parentOrg?: any;
+                familyName?: string | undefined;
+                givenName?: string | undefined;
+                additionalName?: string | undefined;
+                patronymicName?: string | undefined;
+                honorificPrefix?: string | undefined;
+                honorificSuffix?: string | undefined;
+                familyNamePrefix?: string | undefined;
+                dateOfBirth?: string | undefined;
+            };
+            credentialSubject: {
+                [x: string]: any;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                id?: string | undefined;
+            }[];
+            proof: {
+                [x: string]: any;
+                type: string;
+                proofPurpose: string;
+                verificationMethod: string;
+                created?: string | undefined;
+                challenge?: string | undefined;
+                domain?: string | undefined;
+                nonce?: string | undefined;
+                jws?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                proofPurpose: string;
+                verificationMethod: string;
+                created?: string | undefined;
+                challenge?: string | undefined;
+                domain?: string | undefined;
+                nonce?: string | undefined;
+                jws?: string | undefined;
+            }[];
+            id?: string | undefined;
+            refreshService?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            credentialSchema?: {
+                [x: string]: any;
+                id: string;
+                type: string;
+            } | {
+                [x: string]: any;
+                id: string;
+                type: string;
+            }[] | undefined;
+            issuanceDate?: string | undefined;
+            expirationDate?: string | undefined;
+            credentialStatus?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            name?: string | undefined;
+            description?: string | undefined;
+            validFrom?: string | undefined;
+            validUntil?: string | undefined;
+            status?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            termsOfUse?: {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string;
+                id?: string | undefined;
+            }[] | undefined;
+            evidence?: {
+                [x: string]: any;
+                type: string[];
+                id?: string | undefined;
+                name?: string | undefined;
+                narrative?: string | undefined;
+                description?: string | undefined;
+                genre?: string | undefined;
+                audience?: string | undefined;
+            } | {
+                [x: string]: any;
+                type: string[];
+                id?: string | undefined;
+                name?: string | undefined;
+                narrative?: string | undefined;
+                description?: string | undefined;
+                genre?: string | undefined;
+                audience?: string | undefined;
+            }[] | undefined;
+            renderMethod?: Record<string, any> | {
+                type: "TemplateRenderMethod";
+                renderSuite: string;
+                template: string;
+                renderProperty?: string[] | undefined;
+                outputPreference?: {
+                    mediaType: string;
+                } | undefined;
+            } | (Record<string, any> | {
+                type: "TemplateRenderMethod";
+                renderSuite: string;
+                template: string;
+                renderProperty?: string[] | undefined;
+                outputPreference?: {
+                    mediaType: string;
+                } | undefined;
+            })[] | undefined;
+        }[];
+        id?: string | undefined;
+        holder?: string | undefined;
+    }>;
+    selection: z.ZodArray<z.ZodObject<{
+        credentialIndex: z.ZodNumber;
+    }, z.core.$strict>>;
+    endorsements: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        credentialIndex: z.ZodNumber;
+        targetCredentialIndex: z.ZodNumber;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type SharePayload = z.infer<typeof SharePayloadValidatorShape>;
+/** Ordered selected source reference. Source URIs live only in owner recovery. */
+export declare const ShareRecoverySelectionValidator: z.ZodObject<{
+    ref: z.ZodString;
+    order: z.ZodNumber;
+}, z.core.$strict>;
+export type ShareRecoverySelection = z.infer<typeof ShareRecoverySelectionValidator>;
+export declare const ShareRecoveryEndorsementValidator: z.ZodObject<{
+    targetRef: z.ZodString;
+}, z.core.$strict>;
+export type ShareRecoveryEndorsement = z.infer<typeof ShareRecoveryEndorsementValidator>;
+export declare const ShareRecoveryPlaintextValidator: z.ZodObject<{
+    protocol: z.ZodLiteral<"lc-share-recovery/v1">;
+    shareId: z.ZodString;
+    ownerProfileId: z.ZodString;
+    createdAt: z.ZodISODateTime;
+    latest: z.ZodObject<{
+        contentVersion: z.ZodNumber;
+        key: z.ZodString;
+    }, z.core.$strict>;
+    selection: z.ZodArray<z.ZodObject<{
+        ref: z.ZodString;
+        order: z.ZodNumber;
+    }, z.core.$strict>>;
+    endorsements: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        targetRef: z.ZodString;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type ShareRecoveryPlaintext = z.infer<typeof ShareRecoveryPlaintextValidator>;
+/**
+ * Owner-encrypted recovery JWE. The cap applies to the *serialized envelope*
+ * (UTF-8 of the JWE), not to the plaintext index — see Task A2 review item 7.
+ */
+export declare const ShareOwnerRecoveryValidator: z.ZodObject<{
+    protected: z.ZodString;
+    iv: z.ZodString;
+    ciphertext: z.ZodString;
+    tag: z.ZodString;
+    aad: z.ZodOptional<z.ZodString>;
+    recipients: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        header: z.ZodObject<{
+            alg: z.ZodString;
+            iv: z.ZodString;
+            tag: z.ZodString;
+            epk: z.ZodOptional<z.ZodObject<{
+                kty: z.ZodOptional<z.ZodString>;
+                crv: z.ZodOptional<z.ZodString>;
+                x: z.ZodOptional<z.ZodString>;
+                y: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                n: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                d: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+            }, z.core.$strip>>;
+            kid: z.ZodOptional<z.ZodString>;
+            apv: z.ZodOptional<z.ZodString>;
+            apu: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        encrypted_key: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type ShareOwnerRecovery = z.infer<typeof ShareOwnerRecoveryValidator>;
+export declare const ShareLinkStatusValidator: z.ZodEnum<{
+    active: "active";
+    pending: "pending";
+    stopped: "stopped";
+}>;
+export type ShareLinkStatus = z.infer<typeof ShareLinkStatusValidator>;
+export declare const ShareContentStateValidator: z.ZodEnum<{
+    staging: "staging";
+    finalized: "finalized";
+    content_missing: "content_missing";
+}>;
+export type ShareContentState = z.infer<typeof ShareContentStateValidator>;
+/**
+ * Owner-facing share metadata. Never returned to unauthenticated callers; the
+ * public projection below omits age-policy and owner-private fields entirely.
+ */
+export declare const ShareLinkValidator: z.ZodObject<{
+    id: z.ZodString;
+    title: z.ZodString;
+    note: z.ZodOptional<z.ZodString>;
+    selectedCount: z.ZodNumber;
+    version: z.ZodNumber;
+    contentVersion: z.ZodNumber;
+    status: z.ZodEnum<{
+        active: "active";
+        pending: "pending";
+        stopped: "stopped";
+    }>;
+    contentState: z.ZodEnum<{
+        staging: "staging";
+        finalized: "finalized";
+        content_missing: "content_missing";
+    }>;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+    expiresAt: z.ZodNullable<z.ZodISODateTime>;
+    stoppedAt: z.ZodNullable<z.ZodISODateTime>;
+    lastViewedAt: z.ZodNullable<z.ZodISODateTime>;
+    viewCount: z.ZodOptional<z.ZodNumber>;
+    passcodeProtected: z.ZodBoolean;
+    notifyOnView: z.ZodBoolean;
+    minorPolicy: z.ZodObject<{
+        isMinor: z.ZodNullable<z.ZodBoolean>;
+        policyResolved: z.ZodBoolean;
+        defaultExpiryDays: z.ZodUnion<readonly [z.ZodLiteral<30>, z.ZodLiteral<365>]>;
+        viewCountingEnabled: z.ZodBoolean;
+    }, z.core.$strip>;
+    contentUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ShareLink = z.infer<typeof ShareLinkValidator>;
+export declare const CreateShareLinkInputValidator: z.ZodObject<{
+    id: z.ZodString;
+    clientRequestId: z.ZodString;
+    title: z.ZodString;
+    note: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    passcode: z.ZodOptional<z.ZodString>;
+    notifyOnView: z.ZodDefault<z.ZodBoolean>;
+    selectedCount: z.ZodNumber;
+    contentVersion: z.ZodLiteral<1>;
+    envelope: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        alg: z.ZodLiteral<"A256GCM">;
+        iv: z.ZodString;
+        ct: z.ZodString;
+    }, z.core.$strict>;
+    ownerEncryptedRecovery: z.ZodObject<{
+        protected: z.ZodString;
+        iv: z.ZodString;
+        ciphertext: z.ZodString;
+        tag: z.ZodString;
+        aad: z.ZodOptional<z.ZodString>;
+        recipients: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            header: z.ZodObject<{
+                alg: z.ZodString;
+                iv: z.ZodString;
+                tag: z.ZodString;
+                epk: z.ZodOptional<z.ZodObject<{
+                    kty: z.ZodOptional<z.ZodString>;
+                    crv: z.ZodOptional<z.ZodString>;
+                    x: z.ZodOptional<z.ZodString>;
+                    y: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                    n: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                    d: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                }, z.core.$strip>>;
+                kid: z.ZodOptional<z.ZodString>;
+                apv: z.ZodOptional<z.ZodString>;
+                apu: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            encrypted_key: z.ZodString;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>;
+}, z.core.$strict>;
+export type CreateShareLinkInput = z.infer<typeof CreateShareLinkInputValidator>;
+/**
+ * Dependent fields: a content replacement supplies `contentVersion`,
+ * `selectedCount`, `envelope` and `ownerEncryptedRecovery` together, or none of
+ * them. A metadata-only update must not touch content.
+ */
+export declare const UpdateShareLinkInputValidator: z.ZodObject<{
+    id: z.ZodString;
+    expectedVersion: z.ZodNumber;
+    clientRequestId: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    note: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    passcode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    notifyOnView: z.ZodOptional<z.ZodBoolean>;
+    contentVersion: z.ZodOptional<z.ZodNumber>;
+    selectedCount: z.ZodOptional<z.ZodNumber>;
+    envelope: z.ZodOptional<z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        alg: z.ZodLiteral<"A256GCM">;
+        iv: z.ZodString;
+        ct: z.ZodString;
+    }, z.core.$strict>>;
+    ownerEncryptedRecovery: z.ZodOptional<z.ZodObject<{
+        protected: z.ZodString;
+        iv: z.ZodString;
+        ciphertext: z.ZodString;
+        tag: z.ZodString;
+        aad: z.ZodOptional<z.ZodString>;
+        recipients: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            header: z.ZodObject<{
+                alg: z.ZodString;
+                iv: z.ZodString;
+                tag: z.ZodString;
+                epk: z.ZodOptional<z.ZodObject<{
+                    kty: z.ZodOptional<z.ZodString>;
+                    crv: z.ZodOptional<z.ZodString>;
+                    x: z.ZodOptional<z.ZodString>;
+                    y: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                    n: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                    d: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                }, z.core.$strip>>;
+                kid: z.ZodOptional<z.ZodString>;
+                apv: z.ZodOptional<z.ZodString>;
+                apu: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            encrypted_key: z.ZodString;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+}, z.core.$strict>;
+export type UpdateShareLinkInput = z.infer<typeof UpdateShareLinkInputValidator>;
+export declare const ShareLinkIdInputValidator: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strict>;
+export type ShareLinkIdInput = z.infer<typeof ShareLinkIdInputValidator>;
+/**
+ * Owner-scoped retry key. Only the opaque share id and the caller operation id
+ * are accepted; the server re-derives every immutable binding (object ref,
+ * generation, lease, hashes) from persisted Brain state under the owner's own
+ * namespace. This is never a reservation descriptor.
+ */
+export declare const ShareLinkOperationKeyInputValidator: z.ZodObject<{
+    id: z.ZodString;
+    operationId: z.ZodString;
+}, z.core.$strict>;
+export type ShareLinkOperationKeyInput = z.infer<typeof ShareLinkOperationKeyInputValidator>;
+/**
+ * Sanitized owner mutation output. A pending result exposes only the retry key.
+ *
+ * `completed` means the request reached a recorded terminal outcome; the
+ * authoritative share state (`share.status`, e.g. `stopped` after revoke) is
+ * carried inside `share` and must never be overwritten by the outer tag.
+ */
+export declare const ShareLinkOwnerCommitOutputValidator: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"completed">;
+    share: z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        note: z.ZodOptional<z.ZodString>;
+        selectedCount: z.ZodNumber;
+        version: z.ZodNumber;
+        contentVersion: z.ZodNumber;
+        status: z.ZodEnum<{
+            active: "active";
+            pending: "pending";
+            stopped: "stopped";
+        }>;
+        contentState: z.ZodEnum<{
+            staging: "staging";
+            finalized: "finalized";
+            content_missing: "content_missing";
+        }>;
+        createdAt: z.ZodISODateTime;
+        updatedAt: z.ZodISODateTime;
+        expiresAt: z.ZodNullable<z.ZodISODateTime>;
+        stoppedAt: z.ZodNullable<z.ZodISODateTime>;
+        lastViewedAt: z.ZodNullable<z.ZodISODateTime>;
+        viewCount: z.ZodOptional<z.ZodNumber>;
+        passcodeProtected: z.ZodBoolean;
+        notifyOnView: z.ZodBoolean;
+        minorPolicy: z.ZodObject<{
+            isMinor: z.ZodNullable<z.ZodBoolean>;
+            policyResolved: z.ZodBoolean;
+            defaultExpiryDays: z.ZodUnion<readonly [z.ZodLiteral<30>, z.ZodLiteral<365>]>;
+            viewCountingEnabled: z.ZodBoolean;
+        }, z.core.$strip>;
+        contentUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strict>, z.ZodObject<{
+    status: z.ZodLiteral<"pending">;
+    id: z.ZodString;
+    operationId: z.ZodString;
+}, z.core.$strict>], "status">;
+export type ShareLinkOwnerCommitOutput = z.infer<typeof ShareLinkOwnerCommitOutputValidator>;
+/**
+ * Sanitized owner status output; never a raw coordinator record. `found` means a
+ * share snapshot was returned and `share.status` is authoritative (active or
+ * stopped); it does not itself assert the share is active.
+ */
+export declare const ShareLinkOwnerStatusOutputValidator: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"found">;
+    share: z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        note: z.ZodOptional<z.ZodString>;
+        selectedCount: z.ZodNumber;
+        version: z.ZodNumber;
+        contentVersion: z.ZodNumber;
+        status: z.ZodEnum<{
+            active: "active";
+            pending: "pending";
+            stopped: "stopped";
+        }>;
+        contentState: z.ZodEnum<{
+            staging: "staging";
+            finalized: "finalized";
+            content_missing: "content_missing";
+        }>;
+        createdAt: z.ZodISODateTime;
+        updatedAt: z.ZodISODateTime;
+        expiresAt: z.ZodNullable<z.ZodISODateTime>;
+        stoppedAt: z.ZodNullable<z.ZodISODateTime>;
+        lastViewedAt: z.ZodNullable<z.ZodISODateTime>;
+        viewCount: z.ZodOptional<z.ZodNumber>;
+        passcodeProtected: z.ZodBoolean;
+        notifyOnView: z.ZodBoolean;
+        minorPolicy: z.ZodObject<{
+            isMinor: z.ZodNullable<z.ZodBoolean>;
+            policyResolved: z.ZodBoolean;
+            defaultExpiryDays: z.ZodUnion<readonly [z.ZodLiteral<30>, z.ZodLiteral<365>]>;
+            viewCountingEnabled: z.ZodBoolean;
+        }, z.core.$strip>;
+        contentUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strict>, z.ZodObject<{
+    status: z.ZodLiteral<"pending">;
+    id: z.ZodString;
+    operationId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    status: z.ZodLiteral<"not_found">;
+    id: z.ZodString;
+}, z.core.$strict>], "status">;
+export type ShareLinkOwnerStatusOutput = z.infer<typeof ShareLinkOwnerStatusOutputValidator>;
+/** Owner-only recovery response: the owner-encrypted JWE and nothing else. */
+export declare const ShareLinkOwnerRecoveryOutputValidator: z.ZodObject<{
+    recovery: z.ZodObject<{
+        protected: z.ZodString;
+        iv: z.ZodString;
+        ciphertext: z.ZodString;
+        tag: z.ZodString;
+        aad: z.ZodOptional<z.ZodString>;
+        recipients: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            header: z.ZodObject<{
+                alg: z.ZodString;
+                iv: z.ZodString;
+                tag: z.ZodString;
+                epk: z.ZodOptional<z.ZodObject<{
+                    kty: z.ZodOptional<z.ZodString>;
+                    crv: z.ZodOptional<z.ZodString>;
+                    x: z.ZodOptional<z.ZodString>;
+                    y: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                    n: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                    d: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+                }, z.core.$strip>>;
+                kid: z.ZodOptional<z.ZodString>;
+                apv: z.ZodOptional<z.ZodString>;
+                apu: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            encrypted_key: z.ZodString;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>;
+}, z.core.$strict>;
+export type ShareLinkOwnerRecoveryOutput = z.infer<typeof ShareLinkOwnerRecoveryOutputValidator>;
+/** Authenticated owner-only ciphertext response; never includes a view receipt or storage refs. */
+export declare const ShareLinkOwnerContentOutputValidator: z.ZodObject<{
+    id: z.ZodString;
+    contentVersion: z.ZodNumber;
+    envelope: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        alg: z.ZodLiteral<"A256GCM">;
+        iv: z.ZodString;
+        ct: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ShareLinkOwnerContentOutput = z.infer<typeof ShareLinkOwnerContentOutputValidator>;
+export declare const ResolveShareLinkInputValidator: z.ZodObject<{
+    id: z.ZodString;
+    passcode: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ResolveShareLinkInput = z.infer<typeof ResolveShareLinkInputValidator>;
+/** Public state. No `isMinor`, `policyResolved`, thresholds or count policy. */
+export declare const ShareLinkPublicStateValidator: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"passcode_required">;
+    id: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"try_later">;
+    id: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"active">;
+    id: z.ZodString;
+    title: z.ZodString;
+    note: z.ZodOptional<z.ZodString>;
+    selectedCount: z.ZodNumber;
+    contentVersion: z.ZodNumber;
+    contentUrl: z.ZodString;
+    sharer: z.ZodObject<{
+        displayName: z.ZodString;
+        avatar: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+    expiresAt: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"expired">;
+    id: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+}, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"stopped">;
+    id: z.ZodString;
+    stoppedAt: z.ZodISODateTime;
+}, z.core.$strict>, z.ZodObject<{
+    state: z.ZodLiteral<"not_found">;
+    id: z.ZodString;
+}, z.core.$strict>], "state">;
+export type ShareLinkPublicState = z.infer<typeof ShareLinkPublicStateValidator>;
+export declare const ListShareLinksInputValidator: z.ZodObject<{
+    limit: z.ZodDefault<z.ZodNumber>;
+    cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ListShareLinksInput = z.infer<typeof ListShareLinksInputValidator>;
+export declare const PaginatedShareLinksValidator: z.ZodObject<{
+    cursor: z.ZodOptional<z.ZodString>;
+    hasMore: z.ZodBoolean;
+    records: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        note: z.ZodOptional<z.ZodString>;
+        selectedCount: z.ZodNumber;
+        version: z.ZodNumber;
+        contentVersion: z.ZodNumber;
+        status: z.ZodEnum<{
+            active: "active";
+            pending: "pending";
+            stopped: "stopped";
+        }>;
+        contentState: z.ZodEnum<{
+            staging: "staging";
+            finalized: "finalized";
+            content_missing: "content_missing";
+        }>;
+        createdAt: z.ZodISODateTime;
+        updatedAt: z.ZodISODateTime;
+        expiresAt: z.ZodNullable<z.ZodISODateTime>;
+        stoppedAt: z.ZodNullable<z.ZodISODateTime>;
+        lastViewedAt: z.ZodNullable<z.ZodISODateTime>;
+        viewCount: z.ZodOptional<z.ZodNumber>;
+        passcodeProtected: z.ZodBoolean;
+        notifyOnView: z.ZodBoolean;
+        minorPolicy: z.ZodObject<{
+            isMinor: z.ZodNullable<z.ZodBoolean>;
+            policyResolved: z.ZodBoolean;
+            defaultExpiryDays: z.ZodUnion<readonly [z.ZodLiteral<30>, z.ZodLiteral<365>]>;
+            viewCountingEnabled: z.ZodBoolean;
+        }, z.core.$strip>;
+        contentUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type PaginatedShareLinks = z.infer<typeof PaginatedShareLinksValidator>;
+export declare const AcknowledgeViewInputValidator: z.ZodObject<{
+    receipt: z.ZodString;
+}, z.core.$strict>;
+export type AcknowledgeViewInput = z.infer<typeof AcknowledgeViewInputValidator>;
+/** Uniform response: never reveal eligibility or whether a receipt incremented a count. */
+export declare const AcknowledgeViewOutputValidator: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+}, z.core.$strict>;
+export type AcknowledgeViewOutput = z.infer<typeof AcknowledgeViewOutputValidator>;
+/**
+ * Fixed short TTL for a persisted view receipt. Acknowledgement binds the
+ * receipt to one committed `(namespace, share, owner, contentVersion, object,
+ * operation)` tuple; the node is pruned after this window (or once consumed).
+ */
+export declare const SHARE_VIEW_RECEIPT_TTL_SECONDS: number;
+/**
+ * Public content response. The envelope and `contentVersion` come from one
+ * committed tuple; no object ref, hash, operation id, owner recovery, owner id
+ * or policy field is ever returned. `receipt` is ALWAYS present with identical
+ * shape/entropy whether or not the owner is eligible for counting: ineligible,
+ * unknown, managed, minor or dependency-failure responses carry a CSPRNG
+ * padding value that is never persisted, so the response is not an eligibility
+ * oracle.
+ */
+export declare const ShareLinkPublicContentViewValidator: z.ZodObject<{
+    id: z.ZodString;
+    contentVersion: z.ZodNumber;
+    envelope: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        alg: z.ZodLiteral<"A256GCM">;
+        iv: z.ZodString;
+        ct: z.ZodString;
+    }, z.core.$strict>;
+    contentUrl: z.ZodString;
+    receipt: z.ZodString;
+}, z.core.$strict>;
+export type ShareLinkPublicContentView = z.infer<typeof ShareLinkPublicContentViewValidator>;
+//# sourceMappingURL=share-links.d.ts.map