@tinycloud/sdk-core 2.11.0-beta.5 → 2.11.0-beta.8

package/dist/delegations/index.cjs

@@ -35,10 +35,12 @@ __export(delegations_exports, {
   DelegationErrorCodes: () => DelegationErrorCodes,
   DelegationManager: () => DelegationManager,
   EncodedShareDataSchema: () => EncodedShareDataSchema,
+  EncryptedSenderShareHistory: () => import_share_sdk.EncryptedSenderShareHistory,
   MAX_CONTENT_BYTES: () => MAX_CONTENT_BYTES,
   MAX_SEALED_SHARE_CONTENT_BYTES: () => MAX_SEALED_SHARE_CONTENT_BYTES,
   MAX_SHARE_ARTIFACT_BYTES: () => MAX_SHARE_ARTIFACT_BYTES,
   MAX_SHARE_CONTENT_BYTES: () => MAX_SHARE_CONTENT_BYTES,
+  MemoryEncryptedShareHistoryStorage: () => import_share_sdk.MemoryEncryptedShareHistoryStorage,
   MemorySenderShareKeyStorage: () => MemorySenderShareKeyStorage,
   MemorySenderShareRecordStorage: () => MemorySenderShareRecordStorage,
   MemoryShareCache: () => MemoryShareCache,
@@ -53,6 +55,7 @@ __export(delegations_exports, {
   ShareConflict: () => ShareConflict,
   ShareEnvelopeError: () => ShareEnvelopeError,
   ShareNativeResponseSchema: () => ShareNativeResponseSchema,
+  ShareReceiveError: () => import_share_sdk2.ShareReceiveError,
   ShareRecipientClient: () => ShareRecipientClient,
   ShareRecipientClientOptionsSchema: () => ShareRecipientClientOptionsSchema,
   ShareRecipientPolicySchema: () => ShareRecipientPolicySchema,
@@ -60,7 +63,10 @@ __export(delegations_exports, {
   ShareResourceSchema: () => ShareResourceSchema,
   SharingService: () => SharingService,
   SharingServiceConfigSchema: () => SharingServiceConfigSchema,
+  authorizationMethodForTarget: () => import_share_sdk.authorizationMethodForTarget,
+  authorizeShare: () => import_share_sdk.authorizeShare,
   canonicalOwnerSharePolicy: () => canonicalOwnerSharePolicy,
+  claimShare: () => import_share_sdk.claimShare,
   computeOwnerShareRegistrationCid: () => computeOwnerShareRegistrationCid,
   computeShareCid: () => computeShareCid,
   createDelegatedShareKey: () => createDelegatedShareKey,
@@ -75,23 +81,37 @@ __export(delegations_exports, {
   encodeShareUrl: () => encodeShareUrl,
   encryptShareBytes: () => encryptShareBytes,
   encryptShareBytesAsync: () => encryptShareBytesAsync,
+  inspectShare: () => import_share_sdk2.inspectShare,
   intersectShareCapabilities: () => intersectShareCapabilities,
+  isLegacyShareLink: () => import_share_sdk.isLegacyShareLink,
   isV2ShareLink: () => isV2ShareLink,
+  listShares: () => import_share_sdk.listShares,
+  migrateShare: () => import_share_sdk.migrateShare,
   normalizeShareActions: () => normalizeShareActions,
   normalizeShareRecipientTarget: () => normalizeShareRecipientTarget,
   normalizeShareResource: () => normalizeShareResource,
+  notifyShare: () => import_share_sdk.notifyShare,
   parseShareArtifact: () => parseShareArtifact,
   parseShareUrl: () => parseShareUrl,
+  publishPolicyShare: () => import_share_sdk.publishPolicyShare,
+  publishTargetShare: () => import_share_sdk.publishTargetShare,
+  receiveLegacyShare: () => import_share_sdk.receiveLegacyShare,
+  receiveShare: () => import_share_sdk2.receiveShare,
   restoreDelegatedShareKey: () => restoreDelegatedShareKey,
+  resumeShareAuthorization: () => import_share_sdk.resumeShareAuthorization,
+  revokeShare: () => import_share_sdk.revokeShare,
   shareCapabilityAllows: () => shareCapabilityAllows,
   shareDeliveryTrustedKid: () => shareDeliveryTrustedKid,
+  showShare: () => import_share_sdk.showShare,
   signShareEnvelope: () => signShareEnvelope,
+  toShareErrorInfo: () => import_share_sdk2.toShareErrorInfo,
   validateEncodedShareData: () => validateEncodedShareData,
   validateOwnerSharePolicyRegistration: () => validateOwnerSharePolicyRegistration,
   validateOwnerSharePolicyRegistrationBytes: () => validateOwnerSharePolicyRegistrationBytes,
   validateReceiveOptions: () => validateReceiveOptions,
   validateShareDeliveryAuthorizationBytes: () => validateShareDeliveryAuthorizationBytes,
   validateSharingServiceConfig: () => validateSharingServiceConfig,
+  verifyBearerEnvelope: () => import_share_sdk2.verifyBearerEnvelope,
   verifyShareCid: () => verifyShareCid,
   verifyShareEnvelope: () => verifyShareEnvelope
 });
@@ -2820,6 +2840,10 @@ function normalizeRecipient(recipient) {
     }
     return { kind: recipient.kind, value: domain };
   }
+  if (recipient.kind === "recipientDid") {
+    if (!isCanonicalRecipientDid(recipient.value)) throw new ShareEnvelopeError("invalid-envelope", "recipient DID is invalid");
+    return { kind: recipient.kind, value: recipient.value };
+  }
   const exact = recipient.value.trim();
   const at = exact.lastIndexOf("@");
   const normalizedExact = at > 0 ? `${exact.slice(0, at)}@${exact.slice(at + 1).toLowerCase()}` : exact;
@@ -2828,6 +2852,28 @@ function normalizeRecipient(recipient) {
   }
   return { kind: recipient.kind, value: normalizedExact };
 }
+function isCanonicalRecipientDid(value) {
+  if (value.length === 0 || value.length > 2048 || /[\u0000-\u0020\u007f]/.test(value)) return false;
+  const parts = value.split(":");
+  if (parts.length < 3 || parts[0] !== "did" || !/^[a-z0-9]+$/.test(parts[1] ?? "")) return false;
+  const identifier = parts.slice(2);
+  if (identifier.some((part) => part.length === 0)) return false;
+  if (parts[1] === "web") {
+    const host = identifier[0] ?? "";
+    if (host.length > 253 || host.split(".").some((label) => !label || label.length > 63 || !/^[A-Za-z0-9-]+$/.test(label) || label.startsWith("-") || label.endsWith("-"))) return false;
+    return identifier.slice(1).every((part) => /^[A-Za-z0-9._%-]+$/.test(part));
+  }
+  if (parts[1] === "pkh") return identifier.length >= 3 && identifier.every((part) => /^[A-Za-z0-9._%-]+$/.test(part));
+  if (parts[1] === "key") {
+    try {
+      const bytes2 = base58btc.decode(identifier.join(":"));
+      return bytes2.length === 34 && bytes2[0] === 237 && bytes2[1] === 1;
+    } catch {
+      return false;
+    }
+  }
+  return false;
+}
 function normalizeShareRecipientTarget(recipient) {
   const normalized = normalizeRecipient(recipient);
   if (normalized === void 0) throw new ShareEnvelopeError("invalid-envelope", "recipient matcher is required");
@@ -2914,9 +2960,9 @@ function verifyShareEnvelope(envelope, options = {}) {
     const recipient = normalizeRecipient(envelope.recipient);
     if (recipient !== void 0 && JSON.stringify(recipient) !== JSON.stringify(envelope.recipient)) throw new ShareEnvelopeError("invalid-envelope", "recipient is not canonical");
     if (recipient?.kind === "exactEmail" || recipient?.kind === "emailDomain") throw new ShareEnvelopeError("unsafe-plaintext", "recipient matchers are not public envelope fields");
-    if (envelope.recipientKind !== void 0 && !["exactEmail", "emailDomain", "bearer"].includes(envelope.recipientKind)) throw new ShareEnvelopeError("invalid-envelope", "recipient mode is invalid");
+    if (envelope.recipientKind !== void 0 && !["exactEmail", "emailDomain", "recipientDid", "bearer"].includes(envelope.recipientKind)) throw new ShareEnvelopeError("invalid-envelope", "recipient mode is invalid");
     if (envelope.recipientKind === "bearer" && recipient?.kind !== void 0 && recipient.kind !== "bearer") throw new ShareEnvelopeError("invalid-envelope", "recipient mode does not match recipient");
-    if ((envelope.recipientKind === "exactEmail" || envelope.recipientKind === "emailDomain") && !envelope.encrypted) throw new ShareEnvelopeError("unsafe-plaintext", "policy shares require encryption");
+    if ((envelope.recipientKind === "exactEmail" || envelope.recipientKind === "emailDomain" || envelope.recipientKind === "recipientDid") && !envelope.encrypted) throw new ShareEnvelopeError("unsafe-plaintext", "addressed shares require encryption");
     if (typeof envelope.spaceId !== "string" || envelope.spaceId.length === 0 || typeof envelope.content.mimeType !== "string" || envelope.content.mimeType.length === 0 || typeof envelope.content.digest !== "string" || !/^[A-Za-z0-9_-]+$/.test(envelope.content.digest)) throw new ShareEnvelopeError("invalid-envelope", "content metadata is invalid");
     const maxContentBytes = envelope.encrypted ? options.maxSealedContentBytes ?? MAX_SEALED_SHARE_CONTENT_BYTES : options.maxContentBytes ?? MAX_SHARE_CONTENT_BYTES;
     if (!Number.isInteger(envelope.content.size) || envelope.content.size < 0 || envelope.content.size > maxContentBytes) throw new ShareEnvelopeError("content-too-large", "share content exceeds the configured limit");
@@ -3055,7 +3101,7 @@ function parsePolicyMetadata(policyBytes, target, expectedExpiry) {
     assertKeys(policy, ["type", "version", "issuerDid", "recipientMatcher", "target", "delegation", "authority", "actions", "resource", "content-source", "expiresAt"], "published canonical policy material");
     if (typeof policy.issuerDid !== "string" || typeof policy.expiresAt !== "string" || policy.expiresAt !== expectedExpiry) throw new ShareEnvelopeError("invalid-envelope", "policy expiry is not bound to the envelope");
     const matcherValue = policy.recipientMatcher;
-    if (!isPlainObject(matcherValue) || matcherValue.kind !== "exactEmail" && matcherValue.kind !== "emailDomain" || typeof matcherValue.value !== "string") throw new ShareEnvelopeError("invalid-envelope", "policy matcher is invalid");
+    if (!isPlainObject(matcherValue) || matcherValue.kind !== "exactEmail" && matcherValue.kind !== "emailDomain" && matcherValue.kind !== "recipientDid" || typeof matcherValue.value !== "string") throw new ShareEnvelopeError("invalid-envelope", "policy matcher is invalid");
     const matcher2 = normalizeRecipient(matcherValue);
     if (matcher2 === void 0 || matcher2.kind === "bearer") throw new ShareEnvelopeError("invalid-envelope", "policy matcher is invalid");
     if (!isPlainObject(policy.target)) throw new ShareEnvelopeError("invalid-envelope", "policy target is invalid");
@@ -3142,7 +3188,7 @@ function parseCanonicalPublishedV2(value, options) {
   if (!Number.isFinite(expiry) || expiry <= (options.now ?? /* @__PURE__ */ new Date()).getTime() || new Date(expiry).toISOString() !== value.expiry) throw new ShareEnvelopeError("expired", "published share envelope has expired");
   if (typeof delegation.cid !== "string" || typeof delegation.issuerDid !== "string" || typeof delegation.audience !== "string" || typeof delegation.expiresAt !== "string" || Date.parse(delegation.expiresAt) > expiry) throw new ShareEnvelopeError("invalid-envelope", "published v2 delegation is invalid");
   const matcher = value.recipientMatcher;
-  if (!isPlainObject(matcher) || matcher.kind !== "exactEmail" && matcher.kind !== "emailDomain" || typeof matcher.value !== "string") throw new ShareEnvelopeError("invalid-envelope", "published v2 recipient matcher is invalid");
+  if (!isPlainObject(matcher) || matcher.kind !== "exactEmail" && matcher.kind !== "emailDomain" && matcher.kind !== "recipientDid" || typeof matcher.value !== "string") throw new ShareEnvelopeError("invalid-envelope", "published v2 recipient matcher is invalid");
   const normalizedMatcher = normalizeRecipient(matcher);
   if (normalizedMatcher === void 0 || normalizedMatcher.kind === "bearer") throw new ShareEnvelopeError("invalid-envelope", "published v2 recipient matcher is invalid");
   if (!Array.isArray(value.actions)) throw new ShareEnvelopeError("invalid-envelope", "published v2 actions are invalid");
@@ -3583,10 +3629,11 @@ var ShareConflict = class extends Error {
   }
 };
 var ShareAccessError = class extends Error {
-  constructor(code3, message) {
+  constructor(code3, message, details) {
     super(message ?? "shared access could not be completed");
     this.name = "ShareAccessError";
     this.code = code3;
+    this.details = details;
   }
 };
 
@@ -3595,6 +3642,7 @@ var import_zod3 = require("zod");
 var ShareRecipientTargetSchema = import_zod3.z.discriminatedUnion("kind", [
   import_zod3.z.object({ kind: import_zod3.z.literal("exactEmail"), value: import_zod3.z.string().min(1) }).strict(),
   import_zod3.z.object({ kind: import_zod3.z.literal("emailDomain"), value: import_zod3.z.string().min(1) }).strict(),
+  import_zod3.z.object({ kind: import_zod3.z.literal("recipientDid"), value: import_zod3.z.string().regex(/^did:[a-z0-9]+:.+$/) }).strict(),
   import_zod3.z.object({ kind: import_zod3.z.literal("bearer") }).strict()
 ]);
 var ShareResourceSchema = import_zod3.z.discriminatedUnion("kind", [
@@ -3638,7 +3686,8 @@ var ShareContentSourceSchema = import_zod3.z.discriminatedUnion("kind", [
 ]);
 var ShareAddressedRecipientSchema = import_zod3.z.discriminatedUnion("kind", [
   import_zod3.z.object({ kind: import_zod3.z.literal("exactEmail"), value: import_zod3.z.string().min(1) }).strict(),
-  import_zod3.z.object({ kind: import_zod3.z.literal("emailDomain"), value: import_zod3.z.string().min(1) }).strict()
+  import_zod3.z.object({ kind: import_zod3.z.literal("emailDomain"), value: import_zod3.z.string().min(1) }).strict(),
+  import_zod3.z.object({ kind: import_zod3.z.literal("recipientDid"), value: import_zod3.z.string().regex(/^did:[a-z0-9]+:.+$/) }).strict()
 ]);
 var ShareAddressedDelegationRequestV2Schema = import_zod3.z.object({
   version: import_zod3.z.literal(2),
@@ -3893,12 +3942,21 @@ var ShareRecipientClient = class {
       const { envelope } = resolved.artifact;
       const { location } = resolved;
       const bearer = isBearerEnvelope(envelope);
-      const policy = envelope.recipientKind === "exactEmail" || envelope.recipientKind === "emailDomain";
+      const policy = envelope.recipientKind === "exactEmail" || envelope.recipientKind === "emailDomain" || envelope.authorizationTargetKind === "recipientDid";
       const legacyBearer = !policy && envelope.recipientKind === void 0;
-      if (envelope.authorizationTargetKind === "recipientDid") throw new ShareAccessError("SHARE_RECIPIENT_DID_UNSUPPORTED");
+      let recipientDidSession;
+      if (envelope.authorizationTargetKind === "recipientDid") {
+        if (this.options.establishRecipientDidSession === void 0) throw new ShareAccessError("SHARE_DEVICE_AUTH_REQUIRED", "an OpenKey device authorization is required");
+        const authorization = await this.options.establishRecipientDidSession({ envelope, recipientDid: envelope.recipient?.kind === "recipientDid" ? envelope.recipient.value : "" });
+        if ("state" in authorization) {
+          if (authorization.state === "authorization-required") throw new ShareAccessError("SHARE_DEVICE_AUTH_REQUIRED", "an OpenKey device authorization is required", authorization);
+          throw new ShareAccessError("SHARE_DENIED", "recipient DID authorization was denied", authorization);
+        }
+        recipientDidSession = authorization;
+      }
       if (policy && this.options.bearerSession !== void 0) throw new ShareAccessError("SHARE_POLICY_BEARER_MISMATCH");
       if (bearer && this.options.presentation !== void 0) throw new ShareAccessError("SHARE_BEARER_PRESENTATION_MISMATCH");
-      const session = bearer || legacyBearer ? this.options.bearerSession : policy && this.options.establishPolicySession !== void 0 ? await this.options.establishPolicySession({ envelope, presentation: this.options.presentation }) : policy ? await this.establishPolicySession(envelope) : void 0;
+      const session = bearer || legacyBearer ? this.options.bearerSession : recipientDidSession ? recipientDidSession : policy && this.options.establishPolicySession !== void 0 ? await this.options.establishPolicySession({ envelope, presentation: this.options.presentation }) : policy ? await this.establishPolicySession(envelope) : void 0;
       const kv = bearer || legacyBearer ? session === void 0 ? void 0 : this.createKV(envelope.origin, session) : void 0;
       const policySession = policy ? session : void 0;
       if (policySession !== void 0) this.assertProvidedPolicySession(policySession, envelope);
@@ -5801,10 +5859,6 @@ var import_sha2564 = require("@noble/hashes/sha256");
 
 // src/policy/signed-object.ts
 var import_ed255194 = require("@noble/curves/ed25519");
-var import_viem3 = require("viem");
-
-// src/policy/capability.ts
-var import_bootstrap = require("@tinycloud/bootstrap");
 var import_viem2 = require("viem");
 
 // src/policy/errors.ts
@@ -6003,33 +6057,11 @@ function assertUnicodeScalarString(value, path) {
   }
 }
 
-// src/policy/capability.ts
+// src/policy/signed-object.ts
 var textEncoder2 = new TextEncoder();
 var objectHasOwn2 = Object.hasOwn ?? Object.prototype.hasOwnProperty.call.bind(
   Object.prototype.hasOwnProperty
 );
-var CEILING_SERVICES = /* @__PURE__ */ new Set(["tinycloud.kv", "tinycloud.sql", "tinycloud.vfs"]);
-var GRANTABLE_ACTIONS = /* @__PURE__ */ new Map();
-for (const entry of import_bootstrap.CAPABILITY_REGISTRY) {
-  if (!CEILING_SERVICES.has(entry.service)) {
-    continue;
-  }
-  if (entry.aliasOf !== void 0 || entry.implies !== void 0 || entry.urn.endsWith("/*")) {
-    continue;
-  }
-  const existing = GRANTABLE_ACTIONS.get(entry.service);
-  if (existing === void 0) {
-    GRANTABLE_ACTIONS.set(entry.service, /* @__PURE__ */ new Set([entry.urn]));
-    continue;
-  }
-  existing.add(entry.urn);
-}
-
-// src/policy/signed-object.ts
-var textEncoder3 = new TextEncoder();
-var objectHasOwn3 = Object.hasOwn ?? Object.prototype.hasOwnProperty.call.bind(
-  Object.prototype.hasOwnProperty
-);
 function canonicalizeSignedObjectUnsigned(input) {
   return jcsCanonicalize(input);
 }
@@ -6336,7 +6368,7 @@ function validateShareDeliveryAuthorizationBytes(bytesValue, expected) {
   const authorization = assertObject2(root.authorization, AUTHORIZATION_KEYS, "share delivery authorization");
   const proof = assertObject2(root.proof, ["alg", "kid", "signature"], "share delivery authorization proof");
   const request = expected.request;
-  if (authorization.type !== "TinyCloudShareDeliveryAuthorization" || authorization.version !== 2 || authorization.dataAuthority !== false || authorization.jti !== request.jti || authorization.shareCid !== request.shareCid || authorization.shareId !== request.shareId || authorization.registrationCid !== request.registrationCid || authorization.delegationCid !== request.delegationCid || authorization.enforcementDelegationCid !== request.enforcementDelegationCid || authorization.envelopeCid !== request.envelopeCid || authorization.policyCid !== request.policyCid || authorization.deliveryEmail !== request.recipientEmail || authorization.shareUrl !== request.shareUrl || authorization.documentName !== request.documentName || authorization.requestBodyDigest !== request.requestBodyDigest || authorization.expiresAt !== request.expiresAt || authorization.idempotencyKey !== request.jti || authorization.reportAbuseToken !== request.jti || authorization.authorityMaterialHandle !== request.registrationCid) {
+  if (authorization.type !== "TinyCloudShareDeliveryAuthorization" || authorization.version !== 2 || authorization.dataAuthority !== false || authorization.jti !== request.jti || authorization.shareCid !== request.shareCid || authorization.shareId !== request.shareId || authorization.registrationCid !== request.registrationCid || authorization.delegationCid !== request.delegationCid || authorization.enforcementDelegationCid !== request.enforcementDelegationCid || authorization.envelopeCid !== request.envelopeCid || authorization.policyCid !== request.policyCid || authorization.deliveryEmail !== request.recipientEmail || authorization.shareUrl !== request.shareUrl || authorization.documentName !== request.documentName || authorization.requestBodyDigest !== request.requestBodyDigest || authorization.expiresAt !== request.expiresAt || authorization.idempotencyKey !== request.idempotencyKey || authorization.reportAbuseToken !== request.jti || authorization.authorityMaterialHandle !== request.registrationCid) {
     throw new Error("share delivery authorization is not bound to the submitted request");
   }
   if (typeof authorization.issuedAt !== "string" || Date.parse(authorization.issuedAt) > Date.now() + 6e4) throw new Error("share delivery authorization issuedAt is invalid");
@@ -6470,15 +6502,21 @@ var SenderShareStore = class {
     await this.keys.delete(shareId);
   }
 };
+
+// src/delegations/index.ts
+var import_share_sdk = require("@tinycloud/share-sdk");
+var import_share_sdk2 = require("@tinycloud/share-sdk");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   DelegationErrorCodes,
   DelegationManager,
   EncodedShareDataSchema,
+  EncryptedSenderShareHistory,
   MAX_CONTENT_BYTES,
   MAX_SEALED_SHARE_CONTENT_BYTES,
   MAX_SHARE_ARTIFACT_BYTES,
   MAX_SHARE_CONTENT_BYTES,
+  MemoryEncryptedShareHistoryStorage,
   MemorySenderShareKeyStorage,
   MemorySenderShareRecordStorage,
   MemoryShareCache,
@@ -6493,6 +6531,7 @@ var SenderShareStore = class {
   ShareConflict,
   ShareEnvelopeError,
   ShareNativeResponseSchema,
+  ShareReceiveError,
   ShareRecipientClient,
   ShareRecipientClientOptionsSchema,
   ShareRecipientPolicySchema,
@@ -6500,7 +6539,10 @@ var SenderShareStore = class {
   ShareResourceSchema,
   SharingService,
   SharingServiceConfigSchema,
+  authorizationMethodForTarget,
+  authorizeShare,
   canonicalOwnerSharePolicy,
+  claimShare,
   computeOwnerShareRegistrationCid,
   computeShareCid,
   createDelegatedShareKey,
@@ -6515,23 +6557,37 @@ var SenderShareStore = class {
   encodeShareUrl,
   encryptShareBytes,
   encryptShareBytesAsync,
+  inspectShare,
   intersectShareCapabilities,
+  isLegacyShareLink,
   isV2ShareLink,
+  listShares,
+  migrateShare,
   normalizeShareActions,
   normalizeShareRecipientTarget,
   normalizeShareResource,
+  notifyShare,
   parseShareArtifact,
   parseShareUrl,
+  publishPolicyShare,
+  publishTargetShare,
+  receiveLegacyShare,
+  receiveShare,
   restoreDelegatedShareKey,
+  resumeShareAuthorization,
+  revokeShare,
   shareCapabilityAllows,
   shareDeliveryTrustedKid,
+  showShare,
   signShareEnvelope,
+  toShareErrorInfo,
   validateEncodedShareData,
   validateOwnerSharePolicyRegistration,
   validateOwnerSharePolicyRegistrationBytes,
   validateReceiveOptions,
   validateShareDeliveryAuthorizationBytes,
   validateSharingServiceConfig,
+  verifyBearerEnvelope,
   verifyShareCid,
   verifyShareEnvelope
 });