@tinycloud/sdk-core 2.11.0-beta.8 → 2.11.0

package/dist/index.d.ts

@@ -2,10 +2,10 @@ import { z } from 'zod';
 import { InvokeFunction, InvokeAnyFunction, ParsedNetworkId, ServiceError, Result, FetchFunction, ServiceConstructor, RetryPolicy, TelemetryConfig, IServiceContext, IService, IKVService, ISQLService, IDuckDbService, IHooksService, IDataVaultService, IEncryptionService, ISecretsService, ServiceSession, IDatabaseHandle, SqlValue, QueryResponse } from '@tinycloud/sdk-services';
 export { BatchOptions, BatchResponse, BuildCanonicalDecryptRequestInput, BuildDecryptFactsInput, BuildDecryptInvocationInput, BuiltDecryptInvocation, CanonicalDecryptRequest, CanonicalJson, ColumnInfo, DECRYPT_ACTION, DECRYPT_FACT_TYPE, DECRYPT_RESULT_TYPE, DEFAULT_ENCRYPTION_ALG, DEFAULT_KEY_VERSION, DataVaultConfig, DataVaultService, DatabaseHandle, DecryptCapabilityProof, DecryptEnvelopeOptions, DecryptInvocationFact, DecryptInvocationSigner, DecryptRequestBody, DecryptResponseBody, DecryptTransport, DecryptTransportResponseError, DiscoverNetworkInput, DiscoveredNetwork, DiscoverySource, DuckDbAction, DuckDbActionType, DuckDbBatchOptions, DuckDbBatchResponse, DuckDbDatabaseHandle, DuckDbExecuteOptions, DuckDbExecuteResponse, DuckDbOptions, DuckDbQueryOptions, DuckDbQueryResponse, DuckDbService, DuckDbServiceConfig, DuckDbStatement, DuckDbValue, ENCRYPTION_NETWORK_URN_PREFIX, ENCRYPTION_SERVICE, ENCRYPTION_SERVICE_SHORT, ENVELOPE_VERSION, EncryptToNetworkInput, EncryptToNetworkOptions, EncryptToNetworkResult, EncryptionCrypto, EncryptionError, EncryptionErrorInput, EncryptionService, EncryptionServiceConfig, ErrorCode, ErrorCodes, ExecuteOptions, ExecuteResponse, FetchFunction, HookEvent, HookServiceName, HookStreamEvent, HookSubscription, HookWebhookListOptions, HookWebhookRecord, HookWebhookRegistration, HookWebhookScope, HookWebhookUnregisterOptions, HooksService, HooksServiceConfig, IDataVaultService, IDatabaseHandle, IDuckDbDatabaseHandle, IDuckDbService, IEncryptionService, IHooksService, IKVService, IPrefixedKVService, ISQLService, ISecretsService, IService, IServiceContext, InlineEncryptedEnvelope, InvokeAnyEntry, InvokeAnyFunction, InvokeFunction, KVBatchReadResponse, KVCreateSignedReadUrlOptions, KVDeleteOptions, KVGetOptions, KVHeadOptions, KVListOptions, KVListResponse, KVPutOptions, KVResponse, KVResponseHeaders, KVService, KVServiceConfig, KVSignedReadUrlResponse, NETWORK_NAME_PATTERN, NetworkDescriptor, NetworkIdError, NodeDescriptorFetcher, ParsedNetworkId, PrefixedKVService, QueryOptions, QueryResponse, RandomReceiverKeyInput, ReceiverKeyPair, ReceiverKeySigner, ResolvedSecretPath, Result, RetryPolicy, SECRET_NAME_RE, SQLAction, SQLActionType, SQLService, SQLServiceConfig, SchemaInfo, SecretPayload, SecretScopeOptions, SecretsError, SecretsService, ServiceContext, ServiceContextConfig, ServiceError, ServiceSession, SignedReceiverKeyInput, SqlStatement, SqlValue, SubscribeOptions, TableInfo, TelemetryConfig, TelemetryEventHandler, TinyCloudDebugEnableOptions, TinyCloudDebugEvent, TinyCloudDebugLevel, TinyCloudDebugLogger, TinyCloudDebugTimer, VaultCrypto, VaultEntry, VaultError, VaultGetOptions, VaultGrantOptions, VaultHeaders, VaultListOptions, VaultNetworkReadResult, VaultPublicSpaceKVActions, VaultPutOptions, VerifyDecryptResponseInput, ViewInfo, WasmVaultFunctions, WellKnownDescriptorFetcher, buildCanonicalDecryptRequest, buildDecryptAttenuation, buildDecryptFacts, buildDecryptInvocation, buildNetworkId, canonicalHashHex, canonicalSignedResponse, canonicalizeEncryptionJson, canonicalizeSecretScope, checkDecryptInvocationInput, clearTinyCloudDebugLogs, createVaultCrypto, decryptEnvelopeWithKey, defaultRetryPolicy, deriveSignedReceiverKey, disableTinyCloudDebug, discoverNetwork, enableTinyCloudDebug, encryptToNetwork, base64Decode as encryptionBase64Decode, base64Encode as encryptionBase64Encode, encryptionError, utf8Decode as encryptionUtf8Decode, utf8Encode as encryptionUtf8Encode, ensureNetworkUsableForDecrypt, err, generateRandomReceiverKey, getTinyCloudDebugLogs, hexDecode, hexEncode, installTinyCloudDebugGlobals, isNetworkId, networkDiscoveryKey, ok, openWrappedKey, parseNetworkId, resolveSecretListPrefix, resolveSecretPath, serviceError, tinyCloudDebugLogger, validateEnvelope, verifyDecryptResponse } from '@tinycloud/sdk-services';
 export { HOLDER_KEY_BINDING_PRESENTATION_SCHEMA, HolderKeyBindingPresentation, LISTEN_SQL_STATEMENT_CATALOG, ListenSqlStatementName, POLICY_ENGINE_CHALLENGE_REQUEST_SCHEMA, POLICY_ENGINE_CHALLENGE_RESPONSE_SCHEMA, POLICY_ENGINE_DENIAL_SCHEMA, POLICY_ENGINE_GRANT_PRESENTATION_DENIAL_CODES, POLICY_ENGINE_RESOLVE_REQUEST_SCHEMA, PORTABLE_DELEGATION_SCHEMA, PolicyEngineGrantPresentationDenialCode, PortableDelegation, REQUESTER_ENGINE_RETRY_ATTEMPTS, REQUESTER_ENGINE_RETRY_MAX_DELAY_MS, REQUESTER_NEAR_EXPIRY_SECONDS, RequesterEndpointResolution, RequesterHttpRequest, RequesterHttpResponse, RequesterInvocationCapability, RequesterSigningCapability, RequesterTransport, TranscriptRequester, TranscriptRequesterError, TranscriptRequesterErrorCode, TranscriptRequesterErrorState, TranscriptRequesterOptions, TranscriptRequesterReadKvResult, TranscriptRequesterReadSqlResult, createTranscriptRequester, deriveDelegationCid, parseNodeNativePortableDelegation } from './requester/index.js';
-import { m as Delegation, e as CreateDelegationParams, G as GenerateShareParams, aB as ShareLink, ba as SpaceInfo, I as ICapabilityKeyRegistry, y as ISharingService, D as DelegationManager, b as AccountDelegationQueryOptions, A as AccountDelegationPage, w as DelegationRevocationReceipt } from './recipient-types.schema-D5pDlIqn.js';
-export { c as AccountDelegationRecord, d as AccountDelegationResource, C as CapabilityEntry, bJ as CapabilityKeyRegistry, bK as CapabilityKeyRegistryErrorCode, bL as CapabilityKeyRegistryErrorCodes, f as CreateDelegationWasmParams, g as CreateDelegationWasmResult, h as CreateOwnerDelegationParams, i as DelegateReceivedShareParams, j as DelegatedResource, k as DelegatedShareAccess, l as DelegatedShareKey, n as DelegationApiResponse, o as DelegationChain, p as DelegationChainV2, q as DelegationDirection, a as DelegationError, r as DelegationErrorCode, s as DelegationErrorCodes, t as DelegationFilters, u as DelegationManagerConfig, v as DelegationRecord, R as DelegationResult, x as DelegationStatus, E as EncodedShareData, z as IngestOptions, J as JWK, K as KeyInfo, B as KeyProvider, F as KeyType, M as MAX_CONTENT_BYTES, H as MAX_SEALED_SHARE_CONTENT_BYTES, L as MAX_SHARE_ARTIFACT_BYTES, N as MAX_SHARE_CONTENT_BYTES, O as MemorySenderShareKeyStorage, P as MemorySenderShareRecordStorage, Q as MemoryShareCache, S as OwnerDelegationPermission, T as OwnerDelegationReceipt, U as OwnerShareAction, V as OwnerShareDecryption, W as OwnerShareMatcher, X as OwnerSharePolicyRegistration, Y as OwnerSharePolicyRegistrationReceipt, Z as OwnerSharePolicyV2, _ as ReceiveOptions, $ as RegisterOwnerSharePolicyParams, a0 as SHARE_DELIVERY_AUTHORIZATION_DOMAIN, a1 as SenderShareKeyStorage, a2 as SenderShareRecord, a3 as SenderShareRecordStorage, a4 as SenderShareRevocationScope, a5 as SenderShareStore, a6 as ShareAccess, a7 as ShareAccessError, a8 as ShareAccessV2, a9 as ShareAction, ab as ShareAddressedDelegationEnvelopeV2, ac as ShareAddressedDelegationEnvelopeV2Schema, ad as ShareAddressedDelegationRequestV2, ae as ShareAddressedDelegationRequestV2Schema, af as ShareAddressedDelegationResponseV2, ag as ShareAddressedDelegationResponseV2Schema, ah as ShareAddressedRecipientMatcher, ai as ShareArtifactInput, aj as ShareArtifactResult, ak as ShareArtifactV2, al as ShareCache, am as ShareCacheEntry, an as ShareCacheKey, ao as ShareCacheMetadata, ap as ShareCapabilityLike, aq as ShareConflict, ar as ShareContentMetadata, as as ShareContentSource, at as ShareDeliveryAuthorization, au as ShareDeliveryAuthorizationReceipt, av as ShareDeliveryAuthorizationRequest, aw as ShareDetachedProof, ax as ShareEnvelopeError, ay as ShareEnvelopeV2, az as ShareExpiryBounds, aA as ShareKvContentSource, aC as ShareLinkData, aD as ShareLinkLocation, aE as ShareListEntry, aF as ShareListResult, aG as ShareNativeAction, aH as ShareNativeInvokeEnvelopeV1, aI as ShareNativeInvokeErrorResult, aJ as ShareNativeInvokeInput, aK as ShareNativeInvokeResult, aL as ShareNativeInvokeSuccessResult, aM as ShareNativeResponse, aN as ShareNativeResponseSchema, aO as SharePolicy, aP as SharePolicyBinding, aQ as SharePolicySession, aR as SharePolicySessionV1, aS as SharePolicySessionWireV1, aT as ShareReadInvocationV1, aU as ShareReadResult, aV as ShareRecipientClient, aW as ShareRecipientClientOptions, aY as ShareRecipientPolicy, a_ as ShareRecipientResult, a$ as ShareRecipientTarget, b1 as ShareResource, b3 as ShareSaveOptions, b4 as ShareSchema, b5 as ShareSqlContentSource, b6 as ShareWireAction, b7 as SharingService, b8 as SharingServiceConfig, b9 as SignedDelegation, bb as SpaceOwnership, bM as StoredDelegationChain, bc as ValidateShareDeliveryAuthorizationExpected, bd as VerifyShareEnvelopeOptions, be as canonicalOwnerSharePolicy, bf as computeOwnerShareRegistrationCid, bg as computeShareCid, bN as createCapabilityKeyRegistry, bh as createDelegatedShareKey, bi as createPolicyEnforcementDelegation, bj as createShareArtifact, bk as createShareArtifactAsync, bl as createSharePolicy, bm as createSharingService, bn as decryptShareBytesAsync, bo as encodeInlineShareUrl, bp as encodeShareArtifact, bq as encodeShareUrl, br as encryptShareBytes, bs as encryptShareBytesAsync, bt as intersectShareCapabilities, bu as isV2ShareLink, bv as normalizeShareActions, bw as normalizeShareRecipientTarget, bx as normalizeShareResource, by as parseShareArtifact, bz as parseShareUrl, bA as restoreDelegatedShareKey, bB as shareCapabilityAllows, bC as shareDeliveryTrustedKid, bD as signShareEnvelope, bE as validateOwnerSharePolicyRegistration, bF as validateOwnerSharePolicyRegistrationBytes, bG as validateShareDeliveryAuthorizationBytes, bH as verifyShareCid, bI as verifyShareEnvelope } from './recipient-types.schema-D5pDlIqn.js';
-export { ACCOUNT_INDEX_SCHEMA, BOOTSTRAP_ALLOWLIST, BOOTSTRAP_DEFAULT_SPACE, BOOTSTRAP_ENCRYPTION_NETWORK_NAME, BOOTSTRAP_ENCRYPTION_NETWORK_RESOURCE_TEMPLATE, BOOTSTRAP_MANIFEST, BOOTSTRAP_PERSISTED_APPLICATION_MANIFESTS, BOOTSTRAP_PUBLIC_SPACE, BOOTSTRAP_SESSION_REQUESTS, BOOTSTRAP_SPACE_MANIFESTS, BOOTSTRAP_SPACE_NAMES, BootstrapAllowlistEntry, BootstrapAllowlistKind, BootstrapEncryptionNetworkStep, BootstrapManifest, BootstrapRawAbilityAllowlistEntry, BootstrapSchemaStep, BootstrapSeedApplicationsStep, BootstrapSeedSpacesStep, BootstrapSpaceDescriptor, BootstrapSpaceName, BootstrapSpaceStep, BootstrapStep, BootstrapStepKind, CAPABILITIES, CAPABILITY_REGISTRY, CapabilityRegistryEntry, CapabilityStatus, DUCKDB, ENCRYPTION, HOOKS, KV, SECRET_RECORDS_SCHEMA, SPACE, SQL, TINYCLOUD_ACCOUNT_SPACE_MANIFEST, TINYCLOUD_APPLICATIONS_SPACE_MANIFEST, TINYCLOUD_DEFAULT_SPACE_MANIFEST, TINYCLOUD_PUBLIC_SPACE_MANIFEST, TINYCLOUD_SECRETS_BOOTSTRAP_MANIFEST, bootstrapEncryptionNetworkId, bootstrapSpaceId, bootstrapSteps, composeBootstrapSpaceManifest } from '@tinycloud/bootstrap';
-export { E as ED25519_JCS_SIGNATURE_SUITE, b as EIP191_JCS_SIGNATURE_SUITE, J as JsonObject, c as POLICY_ENGINE_RECORD_SCHEMA, d as POLICY_SCHEMA, e as POLICY_STATUS_SCHEMA, a as Policy, P as PolicyEngineRecord, f as PolicyStatus, g as SignatureMaterialError, h as SignatureSuite, i as SignatureVerificationError, j as SignedObjectCanonicalizationError, k as SignedObjectDigestError, l as SignedObjectErrorCode, m as SignedObjectIdError, n as SignedObjectKind, o as SignedObjectMaterial, p as SignedObjectProfileError, q as SignedObjectSchemaError, r as SignedObjectSignature, S as SignedObjectSigner, s as SignedObjectVerificationResult, t as SignedPolicyObject, u as SigningKeyBindingError, v as UnsignedPolicy, U as UnsignedPolicyEngineRecord, w as UnsignedPolicyObject, x as UnsignedPolicyStatus, y as UnsupportedSignatureSuiteError, z as canonicalizeSignedObjectUnsigned, A as createAndSignPolicy, B as createAndSignPolicyEngineRecord, C as createAndSignPolicyStatus, D as createAndSignSignedObject, F as deriveSignedObjectMaterial, G as signedObjectIdFor, H as toSignedObjectError, I as validatePolicyEngineRecordSigned, K as validatePolicyEngineRecordSignedShape, L as validatePolicyEngineRecordUnsigned, M as validatePolicySigned, N as validatePolicySignedShape, O as validatePolicyStatusSigned, Q as validatePolicyStatusSignedShape, R as validatePolicyStatusUnsigned, T as validatePolicyUnsigned, V as verifyPolicy, W as verifyPolicyEngineRecord, X as verifyPolicyStatus, Y as verifySignedObject } from './signed-object-C6mWbTbB.js';
+import { m as Delegation, e as CreateDelegationParams, G as GenerateShareParams, aC as ShareLink, bc as SpaceInfo, I as ICapabilityKeyRegistry, y as ISharingService, D as DelegationManager, b as AccountDelegationQueryOptions, A as AccountDelegationPage, w as DelegationRevocationReceipt } from './recipient-types.schema-CieclU3Z.js';
+export { c as AccountDelegationRecord, d as AccountDelegationResource, C as CapabilityEntry, bP as CapabilityKeyRegistry, bQ as CapabilityKeyRegistryErrorCode, bR as CapabilityKeyRegistryErrorCodes, f as CreateDelegationWasmParams, g as CreateDelegationWasmResult, h as CreateOwnerDelegationParams, i as DelegateReceivedShareParams, j as DelegatedResource, k as DelegatedShareAccess, l as DelegatedShareKey, n as DelegationApiResponse, o as DelegationChain, p as DelegationChainV2, q as DelegationDirection, a as DelegationError, r as DelegationErrorCode, s as DelegationErrorCodes, t as DelegationFilters, u as DelegationManagerConfig, v as DelegationRecord, R as DelegationResult, x as DelegationStatus, E as EncodedShareData, z as IngestOptions, J as JWK, K as KeyInfo, B as KeyProvider, F as KeyType, M as MAX_CONTENT_BYTES, H as MAX_SEALED_SHARE_CONTENT_BYTES, L as MAX_SHARE_ARTIFACT_BYTES, N as MAX_SHARE_CONTENT_BYTES, O as MemorySenderShareKeyStorage, P as MemorySenderShareRecordStorage, Q as MemoryShareCache, S as OwnerDelegationPermission, T as OwnerDelegationReceipt, U as OwnerShareAction, V as OwnerShareDecryption, W as OwnerShareMatcher, X as OwnerSharePolicyRegistration, Y as OwnerSharePolicyRegistrationReceipt, Z as OwnerSharePolicyV2, _ as PortableDelegationImportReceipt, $ as ReceiveOptions, a0 as RegisterOwnerSharePolicyParams, a1 as SHARE_DELIVERY_AUTHORIZATION_DOMAIN, a2 as SenderShareKeyStorage, a3 as SenderShareRecord, a4 as SenderShareRecordStorage, a5 as SenderShareRevocationScope, a6 as SenderShareStore, a7 as ShareAccess, a8 as ShareAccessError, a9 as ShareAccessV2, aa as ShareAction, ac as ShareAddressedDelegationEnvelopeV2, ad as ShareAddressedDelegationEnvelopeV2Schema, ae as ShareAddressedDelegationRequestV2, af as ShareAddressedDelegationRequestV2Schema, ag as ShareAddressedDelegationResponseV2, ah as ShareAddressedDelegationResponseV2Schema, ai as ShareAddressedRecipientMatcher, aj as ShareArtifactInput, ak as ShareArtifactResult, al as ShareArtifactV2, am as ShareCache, an as ShareCacheEntry, ao as ShareCacheKey, ap as ShareCacheMetadata, aq as ShareCapabilityLike, ar as ShareConflict, as as ShareContentMetadata, at as ShareContentSource, au as ShareDeliveryAuthorization, av as ShareDeliveryAuthorizationReceipt, aw as ShareDeliveryAuthorizationRequest, ax as ShareDetachedProof, ay as ShareEnvelopeError, az as ShareEnvelopeV2, aA as ShareExpiryBounds, aB as ShareKvContentSource, aD as ShareLinkData, aE as ShareLinkLocation, aF as ShareListEntry, aG as ShareListResult, aH as ShareNativeAction, aI as ShareNativeInvokeEnvelopeV1, aJ as ShareNativeInvokeErrorResult, aK as ShareNativeInvokeInput, aL as ShareNativeInvokeResult, aM as ShareNativeInvokeSuccessResult, aN as ShareNativeResponse, aO as ShareNativeResponseSchema, aP as SharePolicy, aQ as SharePolicyBinding, aR as SharePolicySession, aS as SharePolicySessionV1, aT as SharePolicySessionWireV1, aU as SharePortableDelegation, aV as ShareReadInvocationV1, aW as ShareReadResult, aX as ShareRecipientClient, aY as ShareRecipientClientOptions, a_ as ShareRecipientPolicy, b0 as ShareRecipientResult, b1 as ShareRecipientTarget, b3 as ShareResource, b5 as ShareSaveOptions, b6 as ShareSchema, b7 as ShareSqlContentSource, b8 as ShareWireAction, b9 as SharingService, ba as SharingServiceConfig, bb as SignedDelegation, bd as SpaceOwnership, bS as StoredDelegationChain, be as ValidateShareDeliveryAuthorizationExpected, bf as VerifyShareEnvelopeOptions, bg as canonicalOwnerSharePolicy, bh as computeOwnerShareRegistrationCid, bi as computeShareCid, bT as createCapabilityKeyRegistry, bj as createDelegatedShareKey, bk as createPolicyEnforcementDelegation, bl as createShareArtifact, bm as createShareArtifactAsync, bn as createSharePolicy, bo as createSharingService, bp as decryptShareBytesAsync, bq as delegatePortablePolicySession, br as encodeInlineShareUrl, bs as encodeShareArtifact, bt as encodeShareUrl, bu as encryptShareBytes, bv as encryptShareBytesAsync, bw as importPortableDelegation, bx as intersectShareCapabilities, by as isV2ShareLink, bz as normalizeShareActions, bA as normalizeShareRecipientTarget, bB as normalizeShareResource, bC as parsePortableDelegation, bD as parseShareArtifact, bE as parseShareUrl, bF as restoreDelegatedShareKey, bG as serializePortableDelegation, bH as shareCapabilityAllows, bI as shareDeliveryTrustedKid, bJ as signShareEnvelope, bK as validateOwnerSharePolicyRegistration, bL as validateOwnerSharePolicyRegistrationBytes, bM as validateShareDeliveryAuthorizationBytes, bN as verifyShareCid, bO as verifyShareEnvelope } from './recipient-types.schema-CieclU3Z.js';
+export { A as ATTESTED_ENFORCER_BINDING_V2_SCHEMA, C as CONTENT_SOURCE_V1_DOMAIN, c as CompactUcanAuthorizationV1, E as ED25519_JCS_SIGNATURE_SUITE, d as EIP191_JCS_SIGNATURE_SUITE, J as JsonObject, L as LAST_V2_CREATE_AT, e as LAST_V2_READ_AT, M as MAX_LEGACY_ENVELOPE_EXPIRES_AT, N as NATIVE_PROJECTION_V1_DOMAIN, f as POLICY_CAPABILITY_V1_DOMAIN, g as POLICY_CAPABILITY_V1_SCHEMA, h as POLICY_ENFORCEMENT_DELEGATION_V2_SCHEMA, i as POLICY_ENGINE_RECORD_SCHEMA, j as POLICY_SCHEMA, k as POLICY_SESSION_UCAN_V1_PROFILE, l as POLICY_STATUS_SCHEMA, m as POLICY_V1_DOMAIN, n as POLICY_V1_SCHEMA, a as Policy, P as PolicyEngineRecord, p as PolicyRootStatusV3, q as PolicySessionUcanV1, r as PolicyStatus, R as ROOT_REVOCATION_V1_DOMAIN, s as ROOT_REVOCATION_V1_SCHEMA, t as ROOT_STATUS_CHECKPOINT_V1_SCHEMA, u as ROOT_STATUS_RENEWAL_V1_DOMAIN, v as ROOT_STATUS_V1_DOMAIN, w as SignCompactUcanAuthorizationInput, x as SignatureMaterialError, y as SignatureSuite, z as SignatureVerificationError, B as SignedObjectCanonicalizationError, D as SignedObjectDigestError, F as SignedObjectErrorCode, G as SignedObjectIdError, H as SignedObjectKind, I as SignedObjectMaterial, K as SignedObjectProfileError, O as SignedObjectSchemaError, Q as SignedObjectSignature, S as SignedObjectSigner, T as SignedObjectVerificationResult, V as SignedPolicyObject, W as SigningKeyBindingError, X as UnifiedContentSource, Y as UnifiedEncryptionCapability, Z as UnifiedKvCapability, _ as UnifiedNativeCapability, $ as UnifiedPolicyCapability, a0 as UnifiedPolicyV1, a1 as UnifiedResourceSelector, a2 as UnsignedPolicy, U as UnsignedPolicyEngineRecord, a3 as UnsignedPolicyObject, a4 as UnsignedPolicyStatus, a5 as UnsupportedSignatureSuiteError, a6 as canonicalizeSignedObjectUnsigned, a7 as canonicalizeUnifiedPolicyCapability, a8 as compactAttenuationContains, a9 as contentSourceDigestHex, aa as createAndSignPolicy, ab as createAndSignPolicyEngineRecord, ac as createAndSignPolicyStatus, ad as createAndSignSignedObject, ag as deriveSignedObjectMaterial, ah as getPolicyRootStatusV3, aj as normalizeUnifiedPolicyCapability, ak as parseCompactUcanAuthorization, al as parsePolicySessionUcan, am as policyCidFromCanonicalBytes, an as policyDigestHex, ao as policyIdForDigestHex, ap as projectUnifiedPolicyCapabilities, aq as projectUnifiedPolicyCapability, ar as renewPolicyRootStatusV3, at as revokePolicyRootV3, au as signCompactUcanAuthorization, av as signedObjectIdFor, aw as toSignedObjectError, ax as unifiedNativeProjectionHashHex, ay as unifiedPolicyCapabilityContains, az as unifiedPolicyCapabilityDigestHex, aA as unifiedPolicyCapabilityFromNative, aB as validatePolicyEngineRecordSigned, aC as validatePolicyEngineRecordSignedShape, aD as validatePolicyEngineRecordUnsigned, aE as validatePolicySigned, aF as validatePolicySignedShape, aG as validatePolicyStatusSigned, aH as validatePolicyStatusSignedShape, aI as validatePolicyStatusUnsigned, aJ as validatePolicyUnsigned, aK as verifyPolicy, aL as verifyPolicyEngineRecord, aM as verifyPolicyRootRevocationV3, aN as verifyPolicyRootStatusCheckpointV3, aO as verifyPolicyStatus, aP as verifySignedObject } from './unified-HWqC-h7O.js';
+export { ACCOUNT_INDEX_SCHEMA, ACCOUNT_MANIFEST_PERMISSIONS, BOOTSTRAP_ALLOWLIST, BOOTSTRAP_DEFAULT_ONLY_SESSION_REQUEST, BOOTSTRAP_DEFAULT_SPACE, BOOTSTRAP_ENCRYPTION_NETWORK_NAME, BOOTSTRAP_ENCRYPTION_NETWORK_RESOURCE_TEMPLATE, BOOTSTRAP_MANIFEST, BOOTSTRAP_PERSISTED_APPLICATION_MANIFESTS, BOOTSTRAP_PUBLIC_SPACE, BOOTSTRAP_SESSION_REQUESTS, BOOTSTRAP_SPACE_MANIFESTS, BOOTSTRAP_SPACE_NAMES, BootstrapAllowlistEntry, BootstrapAllowlistKind, BootstrapEncryptionNetworkStep, BootstrapManifest, BootstrapRawAbilityAllowlistEntry, BootstrapSchemaStep, BootstrapSeedApplicationsStep, BootstrapSeedSpacesStep, BootstrapSpaceDescriptor, BootstrapSpaceName, BootstrapSpaceStep, BootstrapStep, BootstrapStepKind, CAPABILITIES, CAPABILITY_REGISTRY, CapabilityRegistryEntry, CapabilityStatus, DUCKDB, ENCRYPTION, HOOKS, KV, SECRET_RECORDS_SCHEMA, SPACE, SQL, TINYCLOUD_ACCOUNT_SPACE_MANIFEST, TINYCLOUD_APPLICATIONS_SPACE_MANIFEST, TINYCLOUD_DEFAULT_SPACE_MANIFEST, TINYCLOUD_PUBLIC_SPACE_MANIFEST, TINYCLOUD_SECRETS_BOOTSTRAP_MANIFEST, bootstrapEncryptionNetworkId, bootstrapSpaceId, bootstrapSteps, composeBootstrapSpaceManifest } from '@tinycloud/bootstrap';
 export { a as JsonValue, j as jcsCanonicalize, n as normalizeJson, s as serializeJcsJson } from './capability-BjzXwtNw.js';
 export { SiweMessage } from 'siwe';
 
@@ -185,6 +185,311 @@ interface IENSResolver {
     resolveAvatar?(ensName: string): Promise<string | null>;
 }
 
+declare const CREDENTIAL_ACQUISITION_PROTOCOL: "tinycloud.credentials/acquisition/v1";
+declare const HOLDER_BINDING_DOMAIN: "tinycloud.credentials/holder-binding/v1";
+declare const CREDENTIAL_CONTRACT_VERSION: 1;
+declare const CREDENTIAL_STEP_REGISTRY_VERSION: 1;
+declare const CREDENTIAL_FORMAT: "vc+sd-jwt";
+type CredentialStepType = "collect_input" | "mailbox_otp" | "holder_signature";
+type CredentialEndpointId = "request" | "state" | "challenge" | "proof" | "holder_binding" | "holder_signature" | "issue" | "result";
+interface CredentialClaimDescriptor {
+    readonly name: string;
+    readonly matching: "normalized_exact";
+    readonly selectiveDisclosure: boolean;
+}
+interface CredentialInputDescriptor {
+    readonly id: string;
+    readonly label: string;
+    readonly schema: {
+        readonly type: "string";
+        readonly minLength?: number;
+        readonly maxLength?: number;
+        readonly pattern?: string;
+        readonly format?: "email";
+    };
+    readonly prefill: "privacy_hint_only";
+    readonly autocomplete: "off";
+}
+interface CredentialStepDescriptor {
+    readonly type: CredentialStepType;
+    readonly version: 1;
+}
+/** The canonical TC-462 descriptor. Its bytes are hashed without normalization. */
+interface CredentialFlowDescriptor {
+    readonly type: "tinycloud.credentials/descriptor/v1";
+    readonly contractVersion: 1;
+    readonly protocol: typeof CREDENTIAL_ACQUISITION_PROTOCOL;
+    readonly profile: string;
+    readonly profileVersion: 1;
+    readonly display: {
+        readonly title: string;
+        readonly description: string;
+        readonly consent: string;
+        readonly securityTextLocked: true;
+    };
+    readonly accessibility: {
+        readonly progressLabel: string;
+        readonly errorLiveRegion: "assertive";
+    };
+    readonly theme: {
+        readonly tokenVersion: "tinycloud.credentials/tokens/v1";
+        readonly allowed: readonly ("accentColor" | "fontFamily" | "borderRadius")[];
+    };
+    readonly issuer: {
+        readonly origin: string;
+        readonly did: string;
+        readonly kid: string;
+    };
+    readonly interaction: {
+        readonly origin: "https://credentials.org";
+        readonly pathTemplate: "/credentials/acquire/{requestId}";
+    };
+    readonly format: {
+        readonly id: typeof CREDENTIAL_FORMAT;
+        readonly vct: string;
+    };
+    readonly claims: readonly CredentialClaimDescriptor[];
+    readonly subjectRelationship: "holder_is_subject";
+    readonly inputs: readonly CredentialInputDescriptor[];
+    readonly steps: readonly CredentialStepDescriptor[];
+    readonly holderBinding: {
+        readonly required: true;
+        readonly alg: "EdDSA";
+        readonly domain: typeof HOLDER_BINDING_DOMAIN;
+        readonly version: 1;
+    };
+    readonly endpoints: Readonly<Record<"request" | "state" | "challenge" | "proof" | "holderBinding" | "holderSignature" | "issue" | "result", CredentialEndpointId>>;
+    readonly lifecycle: {
+        readonly requestTtlSeconds: number;
+        readonly challengeTtlSeconds: number;
+        readonly maxProofAttempts: number;
+        readonly challengeConsumption: "atomic_once";
+        readonly retry: "bounded";
+    };
+    readonly status: {
+        readonly type: "none";
+        readonly freshnessSeconds: number;
+    };
+    readonly revocation: {
+        readonly supported: false;
+    };
+    readonly presentation: {
+        readonly stateVersion: "tinycloud.credentials/ux-states/v1";
+        readonly states: readonly CredentialUxState[];
+    };
+}
+interface CredentialRequirement {
+    readonly type: "TinyCloudCredentialRequirement";
+    readonly version: 1;
+    readonly profile: {
+        readonly id: string;
+        readonly version: 1;
+    };
+    readonly credentialType: {
+        readonly id: string;
+        readonly version: 1;
+    };
+    readonly claims: Readonly<Record<string, string>>;
+    readonly maxAgeSeconds?: number;
+}
+interface CredentialHolderBinding {
+    readonly type: typeof HOLDER_BINDING_DOMAIN;
+    readonly protocol: typeof CREDENTIAL_ACQUISITION_PROTOCOL;
+    readonly requestId: string;
+    readonly profile: string;
+    readonly profileVersion: 1;
+    readonly descriptorDigest: string;
+    readonly requirementDigest: string;
+    readonly issuer: string;
+    readonly issuerKid: string;
+    readonly holderDid: string;
+    readonly normalizedClaimsDigest: string;
+    readonly challengeNonce: string;
+    readonly audience: string;
+    readonly openerOrigin: string;
+    readonly completionOrigin: string;
+    readonly completionContext: string;
+    readonly jti: string;
+    readonly issuedAt: string;
+    readonly expiresAt: string;
+}
+interface IssuerVerificationKey {
+    readonly kid: string;
+    readonly alg: "EdDSA";
+    readonly jwk: {
+        readonly kty: "OKP";
+        readonly crv: "Ed25519";
+        readonly x: string;
+    };
+    readonly validFrom: string;
+    readonly validUntil: string;
+    readonly retiredAt?: string;
+}
+interface CredentialIssuerMetadata {
+    readonly type: "OpenCredentialsIssuerMetadata";
+    readonly version: 1;
+    readonly origin: string;
+    readonly issuerDid: string;
+    readonly keys: readonly IssuerVerificationKey[];
+    readonly cache: {
+        readonly maxAgeSeconds: number;
+        readonly etag: string;
+    };
+}
+interface IssuedCredentialEnvelope {
+    readonly type: "OpenCredentialsIssuedCredential";
+    readonly version: 1;
+    readonly protocol: typeof CREDENTIAL_ACQUISITION_PROTOCOL;
+    readonly profile: {
+        readonly id: string;
+        readonly version: 1;
+    };
+    readonly credentialType: {
+        readonly id: string;
+        readonly version: 1;
+    };
+    readonly schema: string;
+    readonly format: typeof CREDENTIAL_FORMAT;
+    readonly issuerDid: string;
+    readonly issuerKid: string;
+    readonly subjectDid: string;
+    readonly holderDid: string;
+    readonly claims: Readonly<Record<string, string>>;
+    readonly claimsDigest: string;
+    readonly descriptorDigest: string;
+    readonly credentialId: string;
+    readonly issuedAt: string;
+    readonly notBefore: string;
+    readonly expiresAt: string;
+    readonly status: {
+        readonly method: "none";
+        readonly freshnessSeconds: number;
+    };
+    readonly credential: string;
+}
+interface VerifiedCredential extends IssuedCredentialEnvelope {
+    readonly verifiedAt: string;
+    readonly credentialDigest: string;
+    readonly statusCheckedAt: string;
+}
+interface StoredCredentialRecord {
+    readonly type: "TinyCloudStoredCredential";
+    readonly version: 1;
+    readonly ownerDid: string;
+    readonly recordId: string;
+    readonly requirementDigest: string;
+    readonly descriptorDigest: string;
+    readonly profile: {
+        readonly id: string;
+        readonly version: 1;
+    };
+    readonly credentialType: {
+        readonly id: string;
+        readonly version: 1;
+    };
+    readonly issuerDid: string;
+    readonly issuerKid: string;
+    readonly holderDid: string;
+    readonly claims: Readonly<Record<string, string>>;
+    readonly claimsDigest: string;
+    readonly credentialDigest: string;
+    readonly credential: string;
+    readonly schema: string;
+    readonly credentialId: string;
+    readonly issuedAt: string;
+    readonly notBefore: string;
+    readonly expiresAt: string;
+    readonly status: {
+        readonly method: "none";
+        readonly freshnessSeconds: number;
+    };
+    readonly verifiedAt: string;
+    readonly storedAt: string;
+}
+interface CredentialStorageReceipt {
+    readonly type: "TinyCloudCredentialStorageReceipt";
+    readonly version: 1;
+    readonly ownerDid: string;
+    readonly recordId: string;
+    readonly recordDigest: string;
+    readonly storedAt: string;
+    readonly etag?: string;
+}
+type CredentialUxState = "collecting" | "challenging" | "proving" | "signing" | "issuing" | "verifying" | "saving" | "success" | "recovery";
+interface CredentialProgressEvent {
+    readonly state: CredentialUxState | "checking";
+    readonly stepId?: string;
+    readonly correlationId?: string;
+}
+
+declare function createHolderBinding(input: Omit<CredentialHolderBinding, "type" | "protocol">): CredentialHolderBinding;
+/** Rejects unknown binding fields before any active-session signing operation. */
+declare function validateCredentialHolderBinding(value: unknown): CredentialHolderBinding;
+declare function holderBindingCanonicalBytes(binding: CredentialHolderBinding): Uint8Array;
+declare function holderBindingSigningBytes(binding: CredentialHolderBinding): Uint8Array;
+
+/** Strictly validates and preserves the Rust-owned canonical descriptor bytes. */
+declare function validateCredentialFlowDescriptor(value: unknown): CredentialFlowDescriptor;
+declare function credentialEndpointPath(id: "request" | "state" | "challenge" | "proof" | "holder_binding" | "holder_signature" | "issue" | "result" | "issuer_metadata", requestId?: string): string;
+
+declare function encodeBase64Url(bytes: Uint8Array): string;
+declare function decodeBase64Url(value: string): Uint8Array;
+declare function sha256Base64Url(value: string | Uint8Array): Promise<string>;
+declare function canonicalDigest(value: unknown): Promise<string>;
+declare function isDigest(value: unknown): value is string;
+
+declare const CREDENTIAL_ERROR_CODES: readonly ["ACTIVE_SESSION_REQUIRED", "CANCELED", "DESCRIPTOR_INVALID", "HOLDER_MISMATCH", "ISSUER_UNREADY", "OFFLINE", "POPUP_BLOCKED", "REQUEST_EXPIRED", "REQUEST_SUBSTITUTED", "SIGNATURE_REJECTED", "UNSUPPORTED_PROFILE", "VERIFICATION_FAILED", "VERIFIED_NOT_SAVED"];
+type CredentialErrorCode = (typeof CREDENTIAL_ERROR_CODES)[number];
+/** Stable, redaction-safe error returned by the credential acquisition module. */
+declare class CredentialError extends Error {
+    readonly code: CredentialErrorCode;
+    readonly details: {
+        readonly retryAfterMs?: number;
+        readonly state?: string;
+        readonly correlationId?: string;
+        readonly cause?: unknown;
+    };
+    readonly name = "CredentialError";
+    readonly recoverable: boolean;
+    constructor(code: CredentialErrorCode, message: string, details?: {
+        readonly retryAfterMs?: number;
+        readonly state?: string;
+        readonly correlationId?: string;
+        readonly cause?: unknown;
+    });
+}
+declare function credentialError(value: unknown, fallbackCode?: CredentialErrorCode): CredentialError;
+
+declare function validateCredentialRequirement(value: unknown): CredentialRequirement;
+declare function credentialRequirementDigest(requirement: CredentialRequirement): Promise<string>;
+declare function descriptorSatisfiesRequirement(descriptor: CredentialFlowDescriptor, requirement: CredentialRequirement): boolean;
+declare function credentialMatchesRequirement(requirement: CredentialRequirement, candidate: Pick<StoredCredentialRecord | VerifiedCredential, "profile" | "credentialType" | "claims" | "holderDid" | "expiresAt" | "issuedAt">, holderDid: string, now?: Date): boolean;
+
+declare function credentialRecordKey(recordId: string): string;
+declare function credentialIndexKey(requirementDigest: string, recordId: string): string;
+declare function createStoredCredentialRecord(input: {
+    readonly verified: VerifiedCredential;
+    readonly ownerDid: string;
+    readonly requirement: CredentialRequirement;
+    readonly requirementDigest: string;
+    readonly storedAt?: string;
+}): Promise<StoredCredentialRecord>;
+declare function createStorageReceipt(record: StoredCredentialRecord, etag?: string): Promise<CredentialStorageReceipt>;
+declare function verifyStorageReceipt(record: StoredCredentialRecord, receipt: CredentialStorageReceipt, activeOwnerDid: string, activeHolderDid: string): Promise<boolean>;
+
+/** Independently verifies the Rust-owned SD-JWT profile contract before storage. */
+declare function verifyIssuedCredential(input: {
+    readonly envelope: IssuedCredentialEnvelope;
+    readonly descriptor: CredentialFlowDescriptor;
+    readonly descriptorDigest: string;
+    readonly requirement: CredentialRequirement;
+    readonly holderDid: string;
+    readonly issuerMetadata: CredentialIssuerMetadata;
+    readonly now?: Date;
+    readonly checkStatus: (status: IssuedCredentialEnvelope["status"], signal?: AbortSignal) => Promise<boolean>;
+    readonly signal?: AbortSignal;
+}): Promise<VerifiedCredential>;
+
 /**
  * TinyCloud App Manifest
  *
@@ -934,6 +1239,8 @@ declare class IdentityParseError extends Error {
 }
 declare function isEvmAddress(input: string): boolean;
 declare function canonicalizeAddress(address: string): CanonicalAddress;
+/** Verify EIP-191 evidence over the exact UTF-8 message and recover its signer. */
+declare function verifyEip191MessageSignature(message: string, signature: string, expectedAddress: string): Promise<boolean>;
 declare function addressStorageKey(address: string): CanonicalAddress;
 declare function pkhDid(address: string, chainId?: number): string;
 declare function parsePkhDid(did: string): PkhDidParts | null;
@@ -991,18 +1298,18 @@ declare const PersistedTinyCloudSessionSchema: z.ZodObject<{
     verificationMethod: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     spaceId: string;
-    delegationCid: string;
     delegationHeader: {
         Authorization: string;
     };
+    delegationCid: string;
     verificationMethod: string;
     spaces?: Record<string, string> | undefined;
 }, {
     spaceId: string;
-    delegationCid: string;
     delegationHeader: {
         Authorization: string;
     };
+    delegationCid: string;
     verificationMethod: string;
     spaces?: Record<string, string> | undefined;
 }>;
@@ -1043,18 +1350,18 @@ declare const PersistedSessionDataSchema: z.ZodObject<{
         verificationMethod: z.ZodString;
     }, "strip", z.ZodTypeAny, {
         spaceId: string;
-        delegationCid: string;
         delegationHeader: {
             Authorization: string;
         };
+        delegationCid: string;
         verificationMethod: string;
         spaces?: Record<string, string> | undefined;
     }, {
         spaceId: string;
-        delegationCid: string;
         delegationHeader: {
             Authorization: string;
         };
+        delegationCid: string;
         verificationMethod: string;
         spaces?: Record<string, string> | undefined;
     }>>;
@@ -1091,19 +1398,19 @@ declare const PersistedSessionDataSchema: z.ZodObject<{
     sessionKey: string;
     siwe: string;
     signature: string;
-    createdAt: string;
     expiresAt: string;
     version: string;
+    createdAt: string;
     ens?: {
         domain?: string | null | undefined;
         avatarUrl?: string | null | undefined;
     } | undefined;
     tinycloudSession?: {
         spaceId: string;
-        delegationCid: string;
         delegationHeader: {
             Authorization: string;
         };
+        delegationCid: string;
         verificationMethod: string;
         spaces?: Record<string, string> | undefined;
     } | undefined;
@@ -1114,19 +1421,19 @@ declare const PersistedSessionDataSchema: z.ZodObject<{
     sessionKey: string;
     siwe: string;
     signature: string;
-    createdAt: string;
     expiresAt: string;
     version: string;
+    createdAt: string;
     ens?: {
         domain?: string | null | undefined;
         avatarUrl?: string | null | undefined;
     } | undefined;
     tinycloudSession?: {
         spaceId: string;
-        delegationCid: string;
         delegationHeader: {
             Authorization: string;
         };
+        delegationCid: string;
         verificationMethod: string;
         spaces?: Record<string, string> | undefined;
     } | undefined;
@@ -1173,14 +1480,14 @@ declare const TinyCloudSessionSchema: z.ZodObject<{
     sessionKey: string;
     siwe: string;
     signature: string;
-    spaceId: string;
     jwk: {} & {
         [k: string]: unknown;
     };
-    delegationCid: string;
+    spaceId: string;
     delegationHeader: {
         Authorization: string;
     };
+    delegationCid: string;
     verificationMethod: string;
     spaces?: Record<string, string> | undefined;
 }, {
@@ -1189,14 +1496,14 @@ declare const TinyCloudSessionSchema: z.ZodObject<{
     sessionKey: string;
     siwe: string;
     signature: string;
-    spaceId: string;
     jwk: {} & {
         [k: string]: unknown;
     };
-    delegationCid: string;
+    spaceId: string;
     delegationHeader: {
         Authorization: string;
     };
+    delegationCid: string;
     verificationMethod: string;
     spaces?: Record<string, string> | undefined;
 }>;
@@ -1315,6 +1622,8 @@ interface SignResponse {
     signature?: string;
     /** Reason for rejection if not approved */
     reason?: string;
+    /** The policy declined automatic signing and requires normal user consent. */
+    needsApproval?: boolean;
 }
 /**
  * Callback handler type for sign requests.
@@ -1345,6 +1654,8 @@ interface OpenKeySigningStrategyOptions {
     fetch?: typeof fetch;
     /** Request credentials mode for browser integrations. */
     credentials?: "include" | "omit" | "same-origin";
+    /** Normal user-visible approval for a request that is outside Auto-Sign policy. */
+    requestApproval?: SignCallback;
 }
 interface OpenKeySigningRequestBody extends SignRequest {
     keyId?: string;
@@ -1360,6 +1671,8 @@ interface OpenKeySigningResponseBody {
 interface OpenKeyCallbackStrategy extends CallbackStrategy {
     /** Marker used by SDK runtimes to choose the bootstrap-safe initial SIWE. */
     openKeyAutoSign: true;
+    /** Separate interactive approval path; never treated as an Auto-Sign grant. */
+    openKeyRequestApproval?: SignCallback;
 }
 /**
  * Create a callback signing strategy that delegates message signing to OpenKey.
@@ -1562,6 +1875,259 @@ declare class AutoApproveSpaceCreationHandler implements ISpaceCreationHandler {
  */
 declare const defaultSpaceCreationHandler: ISpaceCreationHandler;
 
+interface TinyCloudAuthorizationRequestV1 {
+    protocolVersion: 1;
+    /** The suggested SIWE. OpenKey may narrow this before signing. */
+    siwe: string;
+    /** Which OpenKey keyId to sign with. Optional; user may pick. */
+    keyId?: string;
+    /** Optional presentation envelope for the review page. */
+    presentation?: CapabilityPresentationEnvelopeV1;
+}
+interface TinyCloudAuthorizationResultV1 {
+    protocolVersion: 1;
+    /** EIP-55 encoded signer address. */
+    address: string;
+    /** Signature over `signedMessage`, hex-encoded (0x…). */
+    signature: string;
+    /**
+     * The EXACT bytes the signature verifies against. When the user narrows
+     * capabilities in the review, this is the regenerated SIWE — not the
+     * caller's original request.
+     */
+    signedMessage: string;
+    /** Action IDs the user selected (or default consent). Opaque strings. */
+    selectedActionKeys: string[];
+    /** Effective grant set after narrowing. */
+    permissions: Array<TinyCloudEffectiveGrantV1>;
+}
+interface TinyCloudEffectiveGrantV1 {
+    service: string;
+    space: string;
+    path: string;
+    actions: string[];
+}
+interface CapabilityPresentationEnvelopeV1 {
+    protocolVersion: 1;
+    displayName?: string;
+    /**
+     * Reason string the caller supplied for the delegation. Rendered as
+     * caller-supplied context — NEVER treated as verified metadata unless
+     * the receiving side origin-binds a manifest that carries the same
+     * text. The OpenKey widget marks this as "reason provided by caller".
+     */
+    reason?: string;
+    manifestId?: string;
+    manifestDigest?: string;
+    /**
+     * Full manifest payload(s) the SDK forwards so the OpenKey review UI
+     * can render honest provenance labels. Display-only:
+     *   - The envelope MUST NEVER expand authority; the ReCap payload is
+     *     the sole gate for what the user can approve.
+     *   - The widget transport size-bounds and validates the envelope
+     *     before use; oversized/malformed envelopes are dropped.
+     *   - The OpenKey server's /authorize-sign-prepare route decides trust
+     *     — even a well-formed envelope stays `unsigned` unless the
+     *     browser origin is verifiable and its well-known manifest
+     *     content-digest matches `manifestDigest`.
+     */
+    manifests?: Array<{
+        name?: string;
+        appId?: string;
+        payload?: Record<string, unknown>;
+    }>;
+}
+/**
+ * Runtime validator for a TinyCloudAuthorizationResultV1. Returns null when
+ * the payload matches the expected shape; returns an error message string
+ * otherwise. Designed for use at the js-sdk trust boundary (browser-auth,
+ * NodeUserAuthorization) so a compromised OpenKey response cannot inject
+ * unexpected fields into a session.
+ */
+declare function validateAuthorizationResultV1(value: unknown): {
+    ok: true;
+    value: TinyCloudAuthorizationResultV1;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Selected action ID rules. The OpenKey side builds these with the exact
+ * separator convention below (mirror of `packages/capability-review/src/ids`).
+ * Consumers should treat them as opaque; only equality comparisons and set
+ * membership are guaranteed to be stable.
+ */
+declare const OPENKEY_ACTION_ID_SEPARATOR = "\0";
+declare function isPlausibleOpenKeyActionId(id: unknown): id is string;
+/**
+ * Canonical decomposition of a ReCap `att` resource URI into `{ space, path }`
+ * matching the SEMANTIC the WASM `parseRecapFromSiwe` emitter uses.
+ *
+ * Sol final continuation contract requirement 1: every producer AND consumer
+ * of canonical four-part action IDs must parse resources the same way. The
+ * on-wire structure of a TinyCloud ReCap resource is:
+ *
+ *   `<space>/<short-service>[/<sub-path>]`
+ *
+ * where `<space>` is a `tinycloud:pkh:...` URN and `<short-service>` is the
+ * unqualified service name (`kv`, `sql`, `capabilities`, …). WASM's
+ * `parseRecapFromSiwe` returns `{ service: <short>, space: <space>, path: <sub-path OR "">}`
+ * — the service segment is NEVER part of the `path`. Prior consumer parsing
+ * left the service segment INSIDE `path`, which produced a four-part ID
+ * different from what OpenKey emits (which uses WASM's `entry.path`
+ * directly). That divergence caused every real production round-trip to
+ * fail the `grantedFourPartIndex.get(rawKey)` lookup silently — Sol
+ * explicitly cited this as blocking approval.
+ *
+ * Behaviour:
+ *   - Non-`tinycloud:` URIs are returned unchanged as `{ space: uri, path: "" }`.
+ *   - `tinycloud:<...>` without any `/` → `{ space: uri, path: "" }`.
+ *   - `tinycloud:<...>/short` → `{ space, path: "" }` (service segment stripped).
+ *   - `tinycloud:<...>/short/rest...` → `{ space, path: "rest..." }`.
+ *
+ * This makes the consumer's canonical `path` byte-for-byte equal to WASM's
+ * `entry.path`, and therefore byte-for-byte equal to the `path` OpenKey's
+ * `computeActionKey` uses when emitting four-part IDs.
+ */
+declare function parseCanonicalRecapResource(resource: string): {
+    space: string;
+    path: string;
+};
+/**
+ * Immutable SIWE header fields the OpenKey widget is NOT allowed to alter.
+ * The user may narrow capabilities (which changes the ReCap `urn:recap:`
+ * resource AND — because the WASM statement is a human-readable rendering of
+ * the ReCap — the statement text along with it). But domain/address/URI/
+ * version/chainId/nonce/issuedAt bind the message to a specific relying party
+ * plus a specific session-key request and MUST come back identical byte-for-byte.
+ *
+ * `statement` is intentionally NOT part of the immutable set: it derives from
+ * the ReCap and MUST be allowed to change when the ReCap changes. The
+ * capability-subset check (via `unauthorizedRecapCapabilities`) is the
+ * authoritative gate for what the widget was allowed to change.
+ */
+interface ImmutableSiweFields {
+    domain?: string;
+    address?: string;
+    uri?: string;
+    version?: string;
+    chainId?: string;
+    nonce?: string;
+    issuedAt?: string;
+    expirationTime?: string;
+    notBefore?: string;
+    requestId?: string;
+    statement?: string;
+    nonRecapResources?: string;
+}
+/**
+ * Extract the header fields that must be preserved byte-for-byte between the
+ * caller's original prepared SIWE and the bytes OpenKey actually signed. Uses
+ * line-based parsing tolerant of the specific format the WASM emitter uses:
+ *
+ *   <domain> wants you to sign in with your Ethereum account:
+ *   <address>
+ *
+ *   <statement>
+ *
+ *   URI: <uri>
+ *   Version: <n>
+ *   Chain ID: <n>
+ *   Nonce: <hex>
+ *   Issued At: <iso8601>
+ *   Resources:
+ *   - <resource1>
+ *   ...
+ *
+ * Returns fields it was able to identify; downstream comparison is field-by-field
+ * so a missing field on both sides is treated as equal.
+ */
+declare function extractImmutableSiweFields(siwe: string): ImmutableSiweFields;
+/**
+ * Diff two SIWE header field sets. Returns the field names that differ. An
+ * empty array means the caller's prepared header and the signed header agree
+ * on every immutable field.
+ *
+ * Sol final continuation contract requirement 2: `statement` is
+ * ReCap-DERIVED whenever the SIWE carries a `urn:recap:` resource — the
+ * WASM `prepareSession` emitter renders "I further authorize the stated URI
+ * to perform the following actions..." from the ReCap contents and DROPS
+ * any caller-supplied `statement`. Narrowing the ReCap therefore ALWAYS
+ * changes the statement, and treating statement as byte-immutable made
+ * every legitimate narrowing fail immediate rejection — the exact
+ * production round-trip failure Sol cited as blocking approval.
+ *
+ * Correct semantics:
+ *   - For ReCap-bearing SIWEs, statement is validated indirectly via the
+ *     `unauthorizedRecapCapabilities` subset check (the ReCap the
+ *     statement renders is the true authoritative narrowing check).
+ *   - For plain (no-ReCap) SIWEs, statement IS caller-authored and MUST
+ *     remain byte-for-byte identical.
+ *
+ * Callers signal which regime applies via `options.originalHasRecap`.
+ * When omitted (legacy callers), statement is included in the diff — the
+ * safer default for non-ReCap flows.
+ */
+declare function diffImmutableSiweFields(original: ImmutableSiweFields, signed: ImmutableSiweFields, options?: {
+    originalHasRecap?: boolean;
+}): string[];
+/**
+ * Parsed ReCap attenuation payload. Keyed by resource URI ("space/service/path"),
+ * each value is a map of action -> list of caveat objects. Consumers care about
+ * subset comparisons on (resource, action) pairs; caveats are compared shallowly
+ * (any narrowing of caveats is treated as still a subset when the parent grants
+ * the same action).
+ */
+interface RecapAttenuation {
+    [resource: string]: {
+        [action: string]: unknown[];
+    };
+}
+/**
+ * Extract the union of `att` maps from every `urn:recap:` resource in a SIWE
+ * message. Returns an empty object if the SIWE contains no ReCap resources
+ * (which is legal — a plain SIWE grants nothing beyond the message itself).
+ *
+ * Throws if a `urn:recap:` payload is present but cannot be decoded as
+ * base64url JSON with an `att` object. Silent tolerance would let a compromised
+ * OpenKey response bypass the subset check by returning garbage.
+ */
+declare function extractRecapAttenuations(siwe: string): RecapAttenuation;
+/**
+ * Prove that `child` grants are a subset of `parent` grants. Returns a list of
+ * unauthorized (resource, action) pairs — empty means every capability in
+ * `child` was authorized by `parent`.
+ *
+ * "Subset" here means:
+ *   1. Every (resource, action) pair the child grants must appear in the parent.
+ *   2. Every caveat object in the child's caveat list for a given (resource,
+ *      action) must be present (by deep-equality with sorted-key canonicalization)
+ *      in the parent's caveat list for the same pair. That is: child caveats ⊆
+ *      parent caveats as sets of caveat objects.
+ *
+ * ReCap caveat semantics: a caveat list is a DISJUNCTION of alternatives — the
+ * caller may exercise the ability under ANY listed caveat. Broadening a list
+ * (adding a new alternative not in parent) is a violation. Removing an
+ * alternative is fine (narrowing). Replacing a restrictive alternative with a
+ * less-restrictive one is a violation (the replacement is a different object).
+ *
+ * The conservative safe rule: reject if child has ANY caveat not present in the
+ * parent's caveat set. This catches:
+ *   - Removed caveats (parent had 1+, child has 0): the empty list is "no
+ *     restriction" which is broader than any restriction — reject.
+ *   - Broadened caveats (parent had caveat X, child has caveat Y not equal to
+ *     X): Y is a new alternative — reject.
+ *   - Incompatible duplicate caveats (child adds a new caveat alongside a
+ *     parent one): the new caveat is unauthorized — reject.
+ *
+ * Special case: when both parent and child have empty caveat lists, that means
+ * neither imposes restrictions, and the child is a subset.
+ */
+declare function unauthorizedRecapCapabilities(child: RecapAttenuation, parent: RecapAttenuation): Array<{
+    resource: string;
+    action: string;
+}>;
+
 /**
  * Interface for an extension to TCW.
  * This is the platform-agnostic subset — browser-coupled extensions
@@ -3016,4 +3582,4 @@ declare const EXPIRY: {
 declare const DEFAULT_SIGNED_READ_URL_EXPIRY_MS: number;
 type ExpiryTier = keyof typeof EXPIRY;
 
-export { ACCOUNT_REGISTRY_PATH, ACCOUNT_REGISTRY_SPACE, type AbilitiesMap, type AccountApplication, type AccountApplicationListOptions, type AccountApplicationRegisterOptions, type AccountDelegation, type AccountDelegationListOptions, AccountDelegationPage, AccountDelegationQueryOptions, type AccountDelegationRevokeOptions, type AccountIndexEnsureResult, type AccountIndexRebuildResult, type AccountIndexStatus, type AccountIndexedReadOptions, AccountService, type AccountServiceConfig, type AccountSpace, type AccountSpaceListOptions, type AccountStatus, AutoApproveSpaceCreationHandler, type AutoRejectStrategy, type AutoSignStrategy, type Bytes, type CallbackStrategy, type CanonicalAddress, type CanonicalParsedNetworkId, CaveatedDelegationUnsupportedError, type ClientSession, ClientSessionSchema, CloudLocationResolutionError, type ComposeManifestOptions, type ComposedManifestRequest, type CreateDelegationFunction, CreateDelegationParams, DEFAULT_DEFAULTS, DEFAULT_EXPIRY, DEFAULT_KNOWLEDGE_ROOT, DEFAULT_LOCAL_NODE_PIN_STORAGE_KEY, DEFAULT_LOCAL_NODE_URL, DEFAULT_MANIFEST_SPACE, DEFAULT_MANIFEST_VERSION, DEFAULT_SIGNED_READ_URL_EXPIRY_MS, DEFAULT_TINYCLOUD_FALLBACK_HOST, DEFAULT_TINYCLOUD_LOCATION_REGISTRY_URL, Delegation, DelegationManager, DelegationRevocationReceipt, type DidCacheKeyOptions, type DidEqualsOptions, type DiscoverLocalTinyCloudNodeOptions, type DiscoveredLocalTinyCloudNode, ENCRYPTION_MANIFEST_SPACE, ENCRYPTION_PERMISSION_SERVICE, EXPIRY, type EnsData, EnsDataSchema, type EventEmitterStrategy, type ExpiryTier, type Extension, GenerateShareParams, ICapabilityKeyRegistry, type IENSResolver, type INotificationHandler, type ISessionManager, type ISessionStorage, ISharingService, type ISigner, type ISpace, type ISpaceCreationHandler, type ISpaceScopedDelegations, type ISpaceScopedSharing, type ISpaceService, type IUserAuthorization, type IWasmBindings, IdentityParseError, LOCAL_LINK_HOST_SUFFIX, LOCAL_LINK_PROBE_TIMEOUT_MS, LOCAL_LOOPBACK_PROBE_TIMEOUT_MS, type LocalNodeIdentityStore, type LocationCandidate, type LocationCandidateInput, type LocationRecord, type LocationRecordPayload, type LocationRecordSigner, LocationRecordValidationError, type LocationResolutionAttempt, type LocationSource, type Manifest, type ManifestDefaults, type ManifestKnowledge, type ManifestRegistryRecord, type ManifestSecretActions, ManifestValidationError, type NodeInfo, type OpenKeyCallbackStrategy, type OpenKeySigningRequestBody, type OpenKeySigningResponseBody, type OpenKeySigningStrategyOptions, type ParseRecapFromSiwe, type PartialSiweMessage, type PermissionEntry, PermissionNotInManifestError, type PersistedSessionData, type PersistedSessionProof, type PersistedTinyCloudSession, type PkhDidParts, ProtocolMismatchError, type RegisterBatchSuccess, type ResolveCloudLocationOptions, type ResolveTinyCloudHostsOptions, type ResolvedCapabilities, type ResolvedCloudLocation, type ResolvedDelegate, type ResolvedTinyCloudHosts, type ResourceCapability, SECRETS_SPACE, SERVICE_LONG_TO_SHORT, SERVICE_SHORT_TO_LONG, type ServerHost, SessionExpiredError, ShareLink, type SignCallback, type SignInOptions, type SignRequest, type SignResponse, type SignStrategy, SilentNotificationHandler, type SiweConfig, SiweConfigSchema, Space, type SpaceAbilitiesMap, type SpaceConfig, type SpaceCreationContext, type SpaceDelegationParams, type SpaceErrorCode, SpaceErrorCodes, type SpaceHostResult, SpaceInfo, SpaceService, type SpaceServiceConfig, type SubsetCheckResult, TinyCloud, type TinyCloudConfig, type TinyCloudSession, UnsupportedFeatureError, type UserAuthorizationConfig, VAULT_PERMISSION_SERVICE, type ValidatedPersistedSessionProof, type ValidationError, VersionCheckError, type WasmRecapEntry, type WebStorageLike, actionContains, activateSessionWithHost, addressStorageKey, applyPrefix, buildSpaceUri, canonicalLocationPayload, canonicalizeAddress, canonicalizeDid, canonicalizeDidUrl, canonicalizeNetworkId, canonicalizeRecapCaveats, checkNodeInfo, composeManifestRequest, createInMemoryLocalNodeIdentityStore, createLocalStorageLocalNodeIdentityStore, createOpenKeyCallbackSigningStrategy, createSpaceService, defaultSignStrategy, defaultSpaceCreationHandler, didCacheKey, didEquals, discoverLocalTinyCloudNode, expandActionShortNames, expandPermissionEntries, expandPermissionEntry, fetchLocationRecord, fetchPeerId, httpUrlToMultiaddr, isCapabilitySubset, isEvmAddress, loadManifest, locationPayloadForRecord, makePkhSpaceId, makePublicSpaceId, manifestAbilitiesUnion, multiaddrToHttpUrl, normalizeDefaults, parseCanonicalNetworkId, parseExpiry, parsePkhDid, parseRecapCapabilities, parseSpaceUri, pkhDid, principalDid, principalDidEquals, recapCaveatsEqual, resolveCloudLocation, resolveManifest, resolveManifestKnowledgeRoot, resolveTinyCloudHosts, resourceCapabilitiesToAbilitiesMap, resourceCapabilitiesToSpaceAbilitiesMap, signLocationRecord, submitHostDelegation, validateClientSession, validateLocationRecord, validateLocationRecordPayload, validateManifest, validatePersistedSessionData, verifyDidKeyEd25519Signature, verifyLocationRecord };
+export { ACCOUNT_REGISTRY_PATH, ACCOUNT_REGISTRY_SPACE, type AbilitiesMap, type AccountApplication, type AccountApplicationListOptions, type AccountApplicationRegisterOptions, type AccountDelegation, type AccountDelegationListOptions, AccountDelegationPage, AccountDelegationQueryOptions, type AccountDelegationRevokeOptions, type AccountIndexEnsureResult, type AccountIndexRebuildResult, type AccountIndexStatus, type AccountIndexedReadOptions, AccountService, type AccountServiceConfig, type AccountSpace, type AccountSpaceListOptions, type AccountStatus, AutoApproveSpaceCreationHandler, type AutoRejectStrategy, type AutoSignStrategy, type Bytes, CREDENTIAL_ACQUISITION_PROTOCOL, CREDENTIAL_CONTRACT_VERSION, CREDENTIAL_ERROR_CODES, CREDENTIAL_FORMAT, CREDENTIAL_ACQUISITION_PROTOCOL as CREDENTIAL_PROTOCOL, CREDENTIAL_STEP_REGISTRY_VERSION, type CallbackStrategy, type CanonicalAddress, type CanonicalParsedNetworkId, type CapabilityPresentationEnvelopeV1, CaveatedDelegationUnsupportedError, type ClientSession, ClientSessionSchema, CloudLocationResolutionError, type ComposeManifestOptions, type ComposedManifestRequest, type CreateDelegationFunction, CreateDelegationParams, type CredentialClaimDescriptor, type CredentialEndpointId, CredentialError, type CredentialErrorCode, type CredentialFlowDescriptor, type CredentialHolderBinding, type CredentialInputDescriptor, type CredentialIssuerMetadata, type CredentialProgressEvent, type CredentialRequirement, type CredentialStepDescriptor, type CredentialStepType, type CredentialStorageReceipt, type CredentialUxState, DEFAULT_DEFAULTS, DEFAULT_EXPIRY, DEFAULT_KNOWLEDGE_ROOT, DEFAULT_LOCAL_NODE_PIN_STORAGE_KEY, DEFAULT_LOCAL_NODE_URL, DEFAULT_MANIFEST_SPACE, DEFAULT_MANIFEST_VERSION, DEFAULT_SIGNED_READ_URL_EXPIRY_MS, DEFAULT_TINYCLOUD_FALLBACK_HOST, DEFAULT_TINYCLOUD_LOCATION_REGISTRY_URL, Delegation, DelegationManager, DelegationRevocationReceipt, type DidCacheKeyOptions, type DidEqualsOptions, type DiscoverLocalTinyCloudNodeOptions, type DiscoveredLocalTinyCloudNode, ENCRYPTION_MANIFEST_SPACE, ENCRYPTION_PERMISSION_SERVICE, EXPIRY, type EnsData, EnsDataSchema, type EventEmitterStrategy, type ExpiryTier, type Extension, GenerateShareParams, HOLDER_BINDING_DOMAIN, ICapabilityKeyRegistry, type IENSResolver, type INotificationHandler, type ISessionManager, type ISessionStorage, ISharingService, type ISigner, type ISpace, type ISpaceCreationHandler, type ISpaceScopedDelegations, type ISpaceScopedSharing, type ISpaceService, type IUserAuthorization, type IWasmBindings, IdentityParseError, type ImmutableSiweFields, type IssuedCredentialEnvelope, type IssuerVerificationKey, LOCAL_LINK_HOST_SUFFIX, LOCAL_LINK_PROBE_TIMEOUT_MS, LOCAL_LOOPBACK_PROBE_TIMEOUT_MS, type LocalNodeIdentityStore, type LocationCandidate, type LocationCandidateInput, type LocationRecord, type LocationRecordPayload, type LocationRecordSigner, LocationRecordValidationError, type LocationResolutionAttempt, type LocationSource, type Manifest, type ManifestDefaults, type ManifestKnowledge, type ManifestRegistryRecord, type ManifestSecretActions, ManifestValidationError, type NodeInfo, OPENKEY_ACTION_ID_SEPARATOR, type OpenKeyCallbackStrategy, type OpenKeySigningRequestBody, type OpenKeySigningResponseBody, type OpenKeySigningStrategyOptions, type ParseRecapFromSiwe, type PartialSiweMessage, type PermissionEntry, PermissionNotInManifestError, type PersistedSessionData, type PersistedSessionProof, type PersistedTinyCloudSession, type PkhDidParts, ProtocolMismatchError, type RecapAttenuation, type RegisterBatchSuccess, type ResolveCloudLocationOptions, type ResolveTinyCloudHostsOptions, type ResolvedCapabilities, type ResolvedCloudLocation, type ResolvedDelegate, type ResolvedTinyCloudHosts, type ResourceCapability, SECRETS_SPACE, SERVICE_LONG_TO_SHORT, SERVICE_SHORT_TO_LONG, type ServerHost, SessionExpiredError, ShareLink, type SignCallback, type SignInOptions, type SignRequest, type SignResponse, type SignStrategy, SilentNotificationHandler, type SiweConfig, SiweConfigSchema, Space, type SpaceAbilitiesMap, type SpaceConfig, type SpaceCreationContext, type SpaceDelegationParams, type SpaceErrorCode, SpaceErrorCodes, type SpaceHostResult, SpaceInfo, SpaceService, type SpaceServiceConfig, type StoredCredentialRecord, type SubsetCheckResult, TinyCloud, type TinyCloudAuthorizationRequestV1, type TinyCloudAuthorizationResultV1, type TinyCloudConfig, type TinyCloudEffectiveGrantV1, type TinyCloudSession, UnsupportedFeatureError, type UserAuthorizationConfig, VAULT_PERMISSION_SERVICE, type ValidatedPersistedSessionProof, type ValidationError, type VerifiedCredential, VersionCheckError, type WasmRecapEntry, type WebStorageLike, actionContains, activateSessionWithHost, addressStorageKey, applyPrefix, buildSpaceUri, canonicalDigest, canonicalLocationPayload, canonicalizeAddress, canonicalizeDid, canonicalizeDidUrl, canonicalizeNetworkId, canonicalizeRecapCaveats, checkNodeInfo, composeManifestRequest, createHolderBinding, createInMemoryLocalNodeIdentityStore, createLocalStorageLocalNodeIdentityStore, createOpenKeyCallbackSigningStrategy, createSpaceService, createStorageReceipt, createStoredCredentialRecord, credentialEndpointPath, credentialError, credentialIndexKey, credentialMatchesRequirement, credentialRecordKey, credentialRequirementDigest, decodeBase64Url, defaultSignStrategy, defaultSpaceCreationHandler, descriptorSatisfiesRequirement, didCacheKey, didEquals, diffImmutableSiweFields, discoverLocalTinyCloudNode, encodeBase64Url, expandActionShortNames, expandPermissionEntries, expandPermissionEntry, extractImmutableSiweFields, extractRecapAttenuations, fetchLocationRecord, fetchPeerId, holderBindingCanonicalBytes, holderBindingSigningBytes, httpUrlToMultiaddr, isCapabilitySubset, isDigest, isEvmAddress, isPlausibleOpenKeyActionId, loadManifest, locationPayloadForRecord, makePkhSpaceId, makePublicSpaceId, manifestAbilitiesUnion, multiaddrToHttpUrl, normalizeDefaults, parseCanonicalNetworkId, parseCanonicalRecapResource, parseExpiry, parsePkhDid, parseRecapCapabilities, parseSpaceUri, pkhDid, principalDid, principalDidEquals, recapCaveatsEqual, resolveCloudLocation, resolveManifest, resolveManifestKnowledgeRoot, resolveTinyCloudHosts, resourceCapabilitiesToAbilitiesMap, resourceCapabilitiesToSpaceAbilitiesMap, sha256Base64Url, signLocationRecord, submitHostDelegation, unauthorizedRecapCapabilities, validateAuthorizationResultV1, validateClientSession, validateCredentialFlowDescriptor, validateCredentialHolderBinding, validateCredentialRequirement, validateLocationRecord, validateLocationRecordPayload, validateManifest, validatePersistedSessionData, verifyDidKeyEd25519Signature, verifyEip191MessageSignature, verifyIssuedCredential, verifyLocationRecord, verifyStorageReceipt };