@tinycloud/sdk-core 3.0.0-beta.8 → 3.0.0

package/dist/{recipient-types.schema-DjmM_yJu.d.cts → recipient-types.schema-D9AI8tjN.d.cts}

@@ -210,6 +210,7 @@ type DelegationError = z.infer<typeof DelegationErrorSchema>;
  */
 declare const DelegationErrorCodes: {
     readonly AUTH_REQUIRED: "AUTH_REQUIRED";
+    readonly AUTH_UNAUTHORIZED: "AUTH_UNAUTHORIZED";
     readonly AUTH_EXPIRED: "AUTH_EXPIRED";
     readonly NOT_INITIALIZED: "NOT_INITIALIZED";
     readonly NOT_FOUND: "NOT_FOUND";
@@ -3044,6 +3045,13 @@ interface SharingServiceConfig {
     /** Reject operations after the host session/service graph has been retired. */
     assertActive?: () => void;
 }
+/**
+ * Whether a session can issue a sharing delegation from its own authority:
+ * `"ok"` (an uncaveated entry covers it), `"caveated"` (only caveated entries
+ * cover it; their caveats cannot be carried into a child delegation) or
+ * `"not-covered"`.
+ */
+type ShareDelegationPreflight = "ok" | "caveated" | "not-covered";
 /**
  * Interface for the SharingService.
  */
@@ -3055,6 +3063,12 @@ interface ISharingService {
      * the key and delegation into a shareable link.
      */
     generate(params: GenerateShareParams): Promise<Result<ShareLink, DelegationError>>;
+    /**
+     * Report, without side effects, whether the session's own authority can
+     * issue the delegation {@link generate} would create for these parameters.
+     * Does not consult `onRootDelegationNeeded`.
+     */
+    preflightGenerate(params: Pick<GenerateShareParams, "path" | "actions" | "expiry">): ShareDelegationPreflight;
     /**
      * Receive and activate a sharing link.
      *
@@ -3162,15 +3176,28 @@ declare class SharingService implements ISharingService {
      */
     generate(params: GenerateShareParams): Promise<Result<ShareLink, DelegationError>>;
     /**
-     * Check if any key in the registry can satisfy the delegation request.
-     * A key can satisfy if it has a delegation that:
-     * 1. Covers the required path (exact match or parent path)
-     * 2. Has all required actions
-     * 3. Has sufficient expiry (delegation.expiry >= requestedExpiry)
-     * 4. Allows sub-delegation
+     * Report, without side effects, whether this session's registry authority
+     * can issue the child delegation {@link generate} would create for the same
+     * `path`, `actions` and `expiry` (defaults and `pathPrefix` applied the
+     * same way):
+     *
+     * - `"ok"`: an uncaveated entry covers it.
+     * - `"caveated"`: only caveated entries cover it. SharingService cannot
+     *   carry signed ReCap caveats into a child delegation.
+     * - `"not-covered"`: no entry covers it, or there is no session.
+     *
+     * It does not consult `onRootDelegationNeeded`, so a signer-backed session
+     * may still generate when this is not `"ok"`.
+     */
+    preflightGenerate(params: Pick<GenerateShareParams, "path" | "actions" | "expiry">): ShareDelegationPreflight;
+    /**
+     * Classify the registry's authority for a child delegation. An entry
+     * satisfies it when it is in the session space, valid, lasts at least until
+     * `requestedExpiry`, allows sub-delegation, covers `path` (exact or parent)
+     * and grants every action. Satisfying entries with caveats are unusable.
      * @internal
      */
-    private findSuitableKeyForDelegation;
+    private classifyDelegationAuthority;
     private retiredGraphError;
     /**
      * Check if a delegation path matches/covers the requested path.
@@ -3494,107 +3521,13 @@ declare function validateOwnerSharePolicyRegistration(value: unknown, expected:
 /** Validate the exact UTF-8 response bytes emitted by the registration route. */
 declare function validateOwnerSharePolicyRegistrationBytes(bytesValue: Uint8Array, expected: RegisterOwnerSharePolicyParams): OwnerSharePolicyRegistrationReceipt;
 
-/** Matches V2_DELIVERY_DOMAIN in tinycloud-node-server/src/share_v2.rs. */
-declare const SHARE_DELIVERY_AUTHORIZATION_DOMAIN = "xyz.tinycloud.share/delivery-authorization/v2\0";
-/** Exact camelCase mirror of the Rust `V2DeliveryRequest` wire struct. */
-interface ShareDeliveryAuthorizationRequest {
-    readonly envelopeCid: string;
-    readonly shareCid: string;
-    readonly shareId: string;
-    readonly registrationCid: string;
-    readonly policyCid: string;
-    readonly delegationCid: string;
-    readonly enforcementDelegationCid: string;
-    readonly recipientEmail: string;
-    readonly shareUrl: string;
-    readonly documentName: string;
-    readonly jti: string;
-    readonly idempotencyKey: string;
-    readonly expiresAt: string;
-    readonly requestBodyDigest: string;
-}
-/** Exact mirror of the `authorization` object the Node route signs and returns. */
-interface ShareDeliveryAuthorization {
-    readonly type: "TinyCloudShareDeliveryAuthorization";
-    readonly version: 2;
-    readonly jti: string;
-    readonly shareCid: string;
-    readonly shareId: string;
-    readonly registrationCid: string;
-    readonly delegationCid: string;
-    readonly enforcementDelegationCid: string;
-    readonly envelopeCid: string;
-    readonly policyCid: string;
-    readonly nodeAudience: string;
-    readonly targetOrigin: string;
-    /**
-     * The OpenCredentials witness this delivery is scoped to, sourced from
-     * Node's own trusted credentials origin. Deliberately distinct from
-     * `nodeAudience` (the node's own DID) and `returnOrigin` (Share's page
-     * origin) — conflating any of these three would let a party impersonate
-     * another's audience.
-     */
-    readonly openCredentialsAudience: string;
-    readonly holder: string;
-    readonly recipientMatcher: unknown;
-    readonly deliveryEmail: string;
-    readonly shareUrl: string;
-    readonly returnOrigin: string;
-    readonly documentName: string;
-    readonly senderDid: string;
-    readonly senderTrust: string;
-    readonly contentSource: unknown;
-    readonly contentSourceDigest: string;
-    readonly shareExpiresAt: string;
-    readonly issuedAt: string;
-    readonly reportAbuseToken: string;
-    readonly actions: readonly string[];
-    readonly resource: string;
-    readonly authorityMaterialHandle: string;
-    readonly authorityMaterialDigest: string;
-    readonly requestBodyDigest: string;
-    readonly idempotencyKey: string;
-    readonly expiresAt: string;
-    readonly dataAuthority: false;
-}
-interface ShareDeliveryAuthorizationReceipt {
-    readonly authorization: ShareDeliveryAuthorization;
-    readonly proof: {
-        readonly alg: "EdDSA";
-        readonly kid: string;
-        readonly signature: string;
-    };
-}
-interface ValidateShareDeliveryAuthorizationExpected {
-    readonly request: ShareDeliveryAuthorizationRequest;
-    /** The enrolled receipt key from the node trust bundle. */
-    readonly nodeProof: {
-        readonly kid: string;
-        readonly publicKey: Uint8Array;
-    };
-    /**
-     * The OpenCredentials witness origin the caller trusts, from the same
-     * trust bundle as `nodeProof`. Validated independently of the
-     * authorization's own `nodeAudience`/`returnOrigin` fields so a Node that
-     * mislabels or omits its credentials origin fails closed here rather than
-     * silently inheriting one of those unrelated identities.
-     */
-    readonly credentialsAudience: string;
-}
-/**
- * Validate the exact UTF-8 response bytes emitted by
- * `POST /share/v2/deliveries/authorize`, bind them to the submitted
- * request, and verify the Node's detached EdDSA proof.
- */
-declare function validateShareDeliveryAuthorizationBytes(bytesValue: Uint8Array, expected: ValidateShareDeliveryAuthorizationExpected): ShareDeliveryAuthorizationReceipt;
-/** Build the trusted-signer descriptor `did:key:...#z...` expects from a raw node signing key. */
-declare function shareDeliveryTrustedKid(publicKey: Uint8Array): string;
-
 declare const CREDENTIAL_INVITATION_REQUEST_DOMAIN = "xyz.tinycloud.credentials/invitation-request/v1\0";
 declare const DELIVERY_ADMISSION_DOMAIN = "xyz.tinycloud.policy/delivery-admission/v0\0";
 interface ShareDeliveryAuthorizationV3Request {
     readonly envelope: Record<string, unknown>;
+    /** Base64url canonical sealed envelope bytes, bound by the Node before delivery. */
     readonly sealedEnvelope: string;
+    /** Base64url 32-byte AES-GCM key; this is the #k fragment value in the return link. */
     readonly envelopeKey: string;
     readonly shareCid: string;
     readonly recipientEmail: string;
@@ -3612,6 +3545,8 @@ interface CredentialInvitationRequest {
     readonly credentialType: string;
     readonly returnLink: string;
     readonly envelopeRef: string;
+    readonly label: string;
+    readonly shareExpiresAt: string;
     readonly audience: string;
     readonly issuedAt: string;
     readonly expiresAt: string;
@@ -3627,6 +3562,8 @@ interface DeliveryAdmission {
     readonly credentialType: string;
     readonly returnLink: string;
     readonly envelopeRef: string;
+    readonly label: string;
+    readonly shareExpiresAt: string;
     readonly senderKeyDid: string;
     readonly audience: string;
     readonly issuedAt: string;
@@ -3650,7 +3587,7 @@ interface ShareDeliveryAuthorizationV3Receipt {
 declare function validateShareDeliveryAuthorizationV3Bytes(bytes: Uint8Array, expected: {
     readonly request: ShareDeliveryAuthorizationV3Request;
     readonly senderKeyDid: string;
-    readonly credentialsAudience: string;
+    readonly deliveryAudience: string;
 }): Omit<ShareDeliveryAuthorizationV3Receipt, "proof">;
 
 /**
@@ -4635,4 +4572,4 @@ declare const ShareNativeResponseSchema: z.ZodDiscriminatedUnion<"action", [z.Zo
 }>]>;
 type ShareNativeResponse = z.infer<typeof ShareNativeResponseSchema>;
 
-export { type OwnerSharePolicyRegistration as $, type AccountDelegationPage as A, type DelegationStatus as B, CREDENTIAL_INVITATION_REQUEST_DOMAIN as C, DelegationManager as D, type DeliveryAdmission as E, type EncodedShareData as F, type GenerateShareParams as G, type ISharingService as H, type ICapabilityKeyRegistry as I, type IngestOptions as J, type JWK as K, type KeyInfo as L, type KeyProvider as M, type KeyType as N, MAX_CONTENT_BYTES as O, MAX_SEALED_SHARE_CONTENT_BYTES as P, MAX_SHARE_ARTIFACT_BYTES as Q, type Result as R, MAX_SHARE_CONTENT_BYTES as S, MemorySenderShareKeyStorage as T, MemorySenderShareRecordStorage as U, MemoryShareCache as V, type OwnerDelegationPermission as W, type OwnerDelegationReceipt as X, type OwnerShareAction as Y, type OwnerShareDecryption as Z, type OwnerShareMatcher as _, type DelegationError as a, type ShareReadInvocationV1 as a$, type OwnerSharePolicyRegistrationReceipt as a0, type OwnerSharePolicyV2 as a1, type PortableDelegationImportReceipt as a2, type ReceiveOptions as a3, type RegisterOwnerSharePolicyParams as a4, SHARE_DELIVERY_AUTHORIZATION_DOMAIN as a5, type SenderShareKeyStorage as a6, type SenderShareRecord as a7, type SenderShareRecordStorage as a8, type SenderShareRevocationScope as a9, type ShareDeliveryAuthorizationRequest as aA, type ShareDeliveryAuthorizationV3Receipt as aB, type ShareDeliveryAuthorizationV3Request as aC, type ShareDetachedProof as aD, ShareEnvelopeError as aE, type ShareEnvelopeV2 as aF, type ShareExpiryBounds as aG, type ShareKvContentSource as aH, type ShareLink as aI, type ShareLinkData as aJ, type ShareLinkLocation as aK, type ShareListEntry as aL, type ShareListResult as aM, type ShareNativeAction as aN, type ShareNativeInvokeEnvelopeV1 as aO, type ShareNativeInvokeErrorResult as aP, type ShareNativeInvokeInput as aQ, type ShareNativeInvokeResult as aR, type ShareNativeInvokeSuccessResult as aS, type ShareNativeResponse as aT, ShareNativeResponseSchema as aU, type SharePolicy as aV, type SharePolicyBinding as aW, type SharePolicySession as aX, type SharePolicySessionV1 as aY, type SharePolicySessionWireV1 as aZ, type PortableDelegation as a_, SenderShareStore as aa, type ShareAccess as ab, ShareAccessError as ac, type ShareAccessV2 as ad, type ShareAction as ae, ShareActionSchema as af, type ShareAddressedDelegationEnvelopeV2 as ag, ShareAddressedDelegationEnvelopeV2Schema as ah, type ShareAddressedDelegationRequestV2 as ai, ShareAddressedDelegationRequestV2Schema as aj, type ShareAddressedDelegationResponseV2 as ak, ShareAddressedDelegationResponseV2Schema as al, type ShareAddressedRecipientMatcher as am, type ShareArtifactInput as an, type ShareArtifactResult as ao, type ShareArtifactV2 as ap, type ShareCache as aq, type ShareCacheEntry as ar, type ShareCacheKey as as, type ShareCacheMetadata as at, type ShareCapabilityLike as au, ShareConflict as av, type ShareContentMetadata as aw, type ShareContentSource as ax, type ShareDeliveryAuthorization as ay, type ShareDeliveryAuthorizationReceipt as az, type AccountDelegationQueryOptions as b, type ShareReadResult as b0, ShareRecipientClient as b1, type ShareRecipientClientOptions as b2, ShareRecipientClientOptionsSchema as b3, type ShareRecipientPolicy as b4, ShareRecipientPolicySchema as b5, type ShareRecipientResult as b6, type ShareRecipientTarget as b7, ShareRecipientTargetSchema as b8, type ShareResource as b9, encryptShareBytes as bA, encryptShareBytesAsync as bB, importPortableDelegation as bC, intersectShareCapabilities as bD, isV2ShareLink as bE, normalizeShareActions as bF, normalizeShareRecipientTarget as bG, normalizeShareResource as bH, parsePortableDelegation as bI, parseShareArtifact as bJ, parseShareUrl as bK, restoreDelegatedShareKey as bL, serializePortableDelegation as bM, shareCapabilityAllows as bN, shareDeliveryTrustedKid as bO, signShareEnvelope as bP, validateOwnerSharePolicyRegistration as bQ, validateOwnerSharePolicyRegistrationBytes as bR, validateShareDeliveryAuthorizationBytes as bS, validateShareDeliveryAuthorizationV3Bytes as bT, verifyShareCid as bU, verifyShareEnvelope as bV, CapabilityKeyRegistry as bW, type CapabilityKeyRegistryErrorCode as bX, CapabilityKeyRegistryErrorCodes as bY, type StoredDelegationChain as bZ, createCapabilityKeyRegistry as b_, ShareResourceSchema as ba, type ShareSaveOptions as bb, type ShareSchema as bc, type ShareSqlContentSource as bd, type ShareWireAction as be, SharingService as bf, type SharingServiceConfig as bg, type SignedDelegation as bh, type SpaceInfo as bi, type SpaceOwnership as bj, type ValidateShareDeliveryAuthorizationExpected as bk, type VerifyShareEnvelopeOptions as bl, canonicalOwnerSharePolicy as bm, computeOwnerShareRegistrationCid as bn, computeShareCid as bo, createDelegatedShareKey as bp, createPolicyEnforcementDelegation as bq, createShareArtifact as br, createShareArtifactAsync as bs, createSharePolicy as bt, createSharingService as bu, decryptShareBytesAsync as bv, delegatePortablePolicySession as bw, encodeInlineShareUrl as bx, encodeShareArtifact as by, encodeShareUrl as bz, type AccountDelegationRecord as c, type AccountDelegationResource as d, type CapabilityEntry as e, type CreateDelegationParams as f, type CreateDelegationWasmParams as g, type CreateDelegationWasmResult as h, type CreateOwnerDelegationParams as i, type CredentialInvitationRequest as j, DELIVERY_ADMISSION_DOMAIN as k, type DelegateReceivedShareParams as l, type DelegatedResource as m, type DelegatedShareAccess as n, type DelegatedShareKey as o, type Delegation as p, type DelegationApiResponse as q, type DelegationChain as r, type DelegationChainV2 as s, type DelegationDirection as t, type DelegationErrorCode as u, DelegationErrorCodes as v, type DelegationFilters as w, type DelegationManagerConfig as x, type DelegationRecord as y, type DelegationRevocationReceipt as z };
+export { type OwnerSharePolicyRegistration as $, type AccountDelegationPage as A, type DelegationStatus as B, CREDENTIAL_INVITATION_REQUEST_DOMAIN as C, DelegationManager as D, type DeliveryAdmission as E, type EncodedShareData as F, type GenerateShareParams as G, type ISharingService as H, type ICapabilityKeyRegistry as I, type IngestOptions as J, type JWK as K, type KeyInfo as L, type KeyProvider as M, type KeyType as N, MAX_CONTENT_BYTES as O, MAX_SEALED_SHARE_CONTENT_BYTES as P, MAX_SHARE_ARTIFACT_BYTES as Q, type Result as R, MAX_SHARE_CONTENT_BYTES as S, MemorySenderShareKeyStorage as T, MemorySenderShareRecordStorage as U, MemoryShareCache as V, type OwnerDelegationPermission as W, type OwnerDelegationReceipt as X, type OwnerShareAction as Y, type OwnerShareDecryption as Z, type OwnerShareMatcher as _, type DelegationError as a, type ShareRecipientClientOptions as a$, type OwnerSharePolicyRegistrationReceipt as a0, type OwnerSharePolicyV2 as a1, type PortableDelegationImportReceipt as a2, type ReceiveOptions as a3, type RegisterOwnerSharePolicyParams as a4, type SenderShareKeyStorage as a5, type SenderShareRecord as a6, type SenderShareRecordStorage as a7, type SenderShareRevocationScope as a8, SenderShareStore as a9, type ShareDetachedProof as aA, ShareEnvelopeError as aB, type ShareEnvelopeV2 as aC, type ShareExpiryBounds as aD, type ShareKvContentSource as aE, type ShareLink as aF, type ShareLinkData as aG, type ShareLinkLocation as aH, type ShareListEntry as aI, type ShareListResult as aJ, type ShareNativeAction as aK, type ShareNativeInvokeEnvelopeV1 as aL, type ShareNativeInvokeErrorResult as aM, type ShareNativeInvokeInput as aN, type ShareNativeInvokeResult as aO, type ShareNativeInvokeSuccessResult as aP, type ShareNativeResponse as aQ, ShareNativeResponseSchema as aR, type SharePolicy as aS, type SharePolicyBinding as aT, type SharePolicySession as aU, type SharePolicySessionV1 as aV, type SharePolicySessionWireV1 as aW, type PortableDelegation as aX, type ShareReadInvocationV1 as aY, type ShareReadResult as aZ, ShareRecipientClient as a_, type ShareAccess as aa, ShareAccessError as ab, type ShareAccessV2 as ac, type ShareAction as ad, ShareActionSchema as ae, type ShareAddressedDelegationEnvelopeV2 as af, ShareAddressedDelegationEnvelopeV2Schema as ag, type ShareAddressedDelegationRequestV2 as ah, ShareAddressedDelegationRequestV2Schema as ai, type ShareAddressedDelegationResponseV2 as aj, ShareAddressedDelegationResponseV2Schema as ak, type ShareAddressedRecipientMatcher as al, type ShareArtifactInput as am, type ShareArtifactResult as an, type ShareArtifactV2 as ao, type ShareCache as ap, type ShareCacheEntry as aq, type ShareCacheKey as ar, type ShareCacheMetadata as as, type ShareCapabilityLike as at, ShareConflict as au, type ShareContentMetadata as av, type ShareContentSource as aw, type ShareDelegationPreflight as ax, type ShareDeliveryAuthorizationV3Receipt as ay, type ShareDeliveryAuthorizationV3Request as az, type AccountDelegationQueryOptions as b, ShareRecipientClientOptionsSchema as b0, type ShareRecipientPolicy as b1, ShareRecipientPolicySchema as b2, type ShareRecipientResult as b3, type ShareRecipientTarget as b4, ShareRecipientTargetSchema as b5, type ShareResource as b6, ShareResourceSchema as b7, type ShareSaveOptions as b8, type ShareSchema as b9, isV2ShareLink as bA, normalizeShareActions as bB, normalizeShareRecipientTarget as bC, normalizeShareResource as bD, parsePortableDelegation as bE, parseShareArtifact as bF, parseShareUrl as bG, restoreDelegatedShareKey as bH, serializePortableDelegation as bI, shareCapabilityAllows as bJ, signShareEnvelope as bK, validateOwnerSharePolicyRegistration as bL, validateOwnerSharePolicyRegistrationBytes as bM, validateShareDeliveryAuthorizationV3Bytes as bN, verifyShareCid as bO, verifyShareEnvelope as bP, CapabilityKeyRegistry as bQ, type CapabilityKeyRegistryErrorCode as bR, CapabilityKeyRegistryErrorCodes as bS, type StoredDelegationChain as bT, createCapabilityKeyRegistry as bU, type ShareSqlContentSource as ba, type ShareWireAction as bb, SharingService as bc, type SharingServiceConfig as bd, type SignedDelegation as be, type SpaceInfo as bf, type SpaceOwnership as bg, type VerifyShareEnvelopeOptions as bh, canonicalOwnerSharePolicy as bi, computeOwnerShareRegistrationCid as bj, computeShareCid as bk, createDelegatedShareKey as bl, createPolicyEnforcementDelegation as bm, createShareArtifact as bn, createShareArtifactAsync as bo, createSharePolicy as bp, createSharingService as bq, decryptShareBytesAsync as br, delegatePortablePolicySession as bs, encodeInlineShareUrl as bt, encodeShareArtifact as bu, encodeShareUrl as bv, encryptShareBytes as bw, encryptShareBytesAsync as bx, importPortableDelegation as by, intersectShareCapabilities as bz, type AccountDelegationRecord as c, type AccountDelegationResource as d, type CapabilityEntry as e, type CreateDelegationParams as f, type CreateDelegationWasmParams as g, type CreateDelegationWasmResult as h, type CreateOwnerDelegationParams as i, type CredentialInvitationRequest as j, DELIVERY_ADMISSION_DOMAIN as k, type DelegateReceivedShareParams as l, type DelegatedResource as m, type DelegatedShareAccess as n, type DelegatedShareKey as o, type Delegation as p, type DelegationApiResponse as q, type DelegationChain as r, type DelegationChainV2 as s, type DelegationDirection as t, type DelegationErrorCode as u, DelegationErrorCodes as v, type DelegationFilters as w, type DelegationManagerConfig as x, type DelegationRecord as y, type DelegationRevocationReceipt as z };

package/dist/{recipient-types.schema-DjmM_yJu.d.ts → recipient-types.schema-D9AI8tjN.d.ts}

@@ -210,6 +210,7 @@ type DelegationError = z.infer<typeof DelegationErrorSchema>;
  */
 declare const DelegationErrorCodes: {
     readonly AUTH_REQUIRED: "AUTH_REQUIRED";
+    readonly AUTH_UNAUTHORIZED: "AUTH_UNAUTHORIZED";
     readonly AUTH_EXPIRED: "AUTH_EXPIRED";
     readonly NOT_INITIALIZED: "NOT_INITIALIZED";
     readonly NOT_FOUND: "NOT_FOUND";
@@ -3044,6 +3045,13 @@ interface SharingServiceConfig {
     /** Reject operations after the host session/service graph has been retired. */
     assertActive?: () => void;
 }
+/**
+ * Whether a session can issue a sharing delegation from its own authority:
+ * `"ok"` (an uncaveated entry covers it), `"caveated"` (only caveated entries
+ * cover it; their caveats cannot be carried into a child delegation) or
+ * `"not-covered"`.
+ */
+type ShareDelegationPreflight = "ok" | "caveated" | "not-covered";
 /**
  * Interface for the SharingService.
  */
@@ -3055,6 +3063,12 @@ interface ISharingService {
      * the key and delegation into a shareable link.
      */
     generate(params: GenerateShareParams): Promise<Result<ShareLink, DelegationError>>;
+    /**
+     * Report, without side effects, whether the session's own authority can
+     * issue the delegation {@link generate} would create for these parameters.
+     * Does not consult `onRootDelegationNeeded`.
+     */
+    preflightGenerate(params: Pick<GenerateShareParams, "path" | "actions" | "expiry">): ShareDelegationPreflight;
     /**
      * Receive and activate a sharing link.
      *
@@ -3162,15 +3176,28 @@ declare class SharingService implements ISharingService {
      */
     generate(params: GenerateShareParams): Promise<Result<ShareLink, DelegationError>>;
     /**
-     * Check if any key in the registry can satisfy the delegation request.
-     * A key can satisfy if it has a delegation that:
-     * 1. Covers the required path (exact match or parent path)
-     * 2. Has all required actions
-     * 3. Has sufficient expiry (delegation.expiry >= requestedExpiry)
-     * 4. Allows sub-delegation
+     * Report, without side effects, whether this session's registry authority
+     * can issue the child delegation {@link generate} would create for the same
+     * `path`, `actions` and `expiry` (defaults and `pathPrefix` applied the
+     * same way):
+     *
+     * - `"ok"`: an uncaveated entry covers it.
+     * - `"caveated"`: only caveated entries cover it. SharingService cannot
+     *   carry signed ReCap caveats into a child delegation.
+     * - `"not-covered"`: no entry covers it, or there is no session.
+     *
+     * It does not consult `onRootDelegationNeeded`, so a signer-backed session
+     * may still generate when this is not `"ok"`.
+     */
+    preflightGenerate(params: Pick<GenerateShareParams, "path" | "actions" | "expiry">): ShareDelegationPreflight;
+    /**
+     * Classify the registry's authority for a child delegation. An entry
+     * satisfies it when it is in the session space, valid, lasts at least until
+     * `requestedExpiry`, allows sub-delegation, covers `path` (exact or parent)
+     * and grants every action. Satisfying entries with caveats are unusable.
      * @internal
      */
-    private findSuitableKeyForDelegation;
+    private classifyDelegationAuthority;
     private retiredGraphError;
     /**
      * Check if a delegation path matches/covers the requested path.
@@ -3494,107 +3521,13 @@ declare function validateOwnerSharePolicyRegistration(value: unknown, expected:
 /** Validate the exact UTF-8 response bytes emitted by the registration route. */
 declare function validateOwnerSharePolicyRegistrationBytes(bytesValue: Uint8Array, expected: RegisterOwnerSharePolicyParams): OwnerSharePolicyRegistrationReceipt;
 
-/** Matches V2_DELIVERY_DOMAIN in tinycloud-node-server/src/share_v2.rs. */
-declare const SHARE_DELIVERY_AUTHORIZATION_DOMAIN = "xyz.tinycloud.share/delivery-authorization/v2\0";
-/** Exact camelCase mirror of the Rust `V2DeliveryRequest` wire struct. */
-interface ShareDeliveryAuthorizationRequest {
-    readonly envelopeCid: string;
-    readonly shareCid: string;
-    readonly shareId: string;
-    readonly registrationCid: string;
-    readonly policyCid: string;
-    readonly delegationCid: string;
-    readonly enforcementDelegationCid: string;
-    readonly recipientEmail: string;
-    readonly shareUrl: string;
-    readonly documentName: string;
-    readonly jti: string;
-    readonly idempotencyKey: string;
-    readonly expiresAt: string;
-    readonly requestBodyDigest: string;
-}
-/** Exact mirror of the `authorization` object the Node route signs and returns. */
-interface ShareDeliveryAuthorization {
-    readonly type: "TinyCloudShareDeliveryAuthorization";
-    readonly version: 2;
-    readonly jti: string;
-    readonly shareCid: string;
-    readonly shareId: string;
-    readonly registrationCid: string;
-    readonly delegationCid: string;
-    readonly enforcementDelegationCid: string;
-    readonly envelopeCid: string;
-    readonly policyCid: string;
-    readonly nodeAudience: string;
-    readonly targetOrigin: string;
-    /**
-     * The OpenCredentials witness this delivery is scoped to, sourced from
-     * Node's own trusted credentials origin. Deliberately distinct from
-     * `nodeAudience` (the node's own DID) and `returnOrigin` (Share's page
-     * origin) — conflating any of these three would let a party impersonate
-     * another's audience.
-     */
-    readonly openCredentialsAudience: string;
-    readonly holder: string;
-    readonly recipientMatcher: unknown;
-    readonly deliveryEmail: string;
-    readonly shareUrl: string;
-    readonly returnOrigin: string;
-    readonly documentName: string;
-    readonly senderDid: string;
-    readonly senderTrust: string;
-    readonly contentSource: unknown;
-    readonly contentSourceDigest: string;
-    readonly shareExpiresAt: string;
-    readonly issuedAt: string;
-    readonly reportAbuseToken: string;
-    readonly actions: readonly string[];
-    readonly resource: string;
-    readonly authorityMaterialHandle: string;
-    readonly authorityMaterialDigest: string;
-    readonly requestBodyDigest: string;
-    readonly idempotencyKey: string;
-    readonly expiresAt: string;
-    readonly dataAuthority: false;
-}
-interface ShareDeliveryAuthorizationReceipt {
-    readonly authorization: ShareDeliveryAuthorization;
-    readonly proof: {
-        readonly alg: "EdDSA";
-        readonly kid: string;
-        readonly signature: string;
-    };
-}
-interface ValidateShareDeliveryAuthorizationExpected {
-    readonly request: ShareDeliveryAuthorizationRequest;
-    /** The enrolled receipt key from the node trust bundle. */
-    readonly nodeProof: {
-        readonly kid: string;
-        readonly publicKey: Uint8Array;
-    };
-    /**
-     * The OpenCredentials witness origin the caller trusts, from the same
-     * trust bundle as `nodeProof`. Validated independently of the
-     * authorization's own `nodeAudience`/`returnOrigin` fields so a Node that
-     * mislabels or omits its credentials origin fails closed here rather than
-     * silently inheriting one of those unrelated identities.
-     */
-    readonly credentialsAudience: string;
-}
-/**
- * Validate the exact UTF-8 response bytes emitted by
- * `POST /share/v2/deliveries/authorize`, bind them to the submitted
- * request, and verify the Node's detached EdDSA proof.
- */
-declare function validateShareDeliveryAuthorizationBytes(bytesValue: Uint8Array, expected: ValidateShareDeliveryAuthorizationExpected): ShareDeliveryAuthorizationReceipt;
-/** Build the trusted-signer descriptor `did:key:...#z...` expects from a raw node signing key. */
-declare function shareDeliveryTrustedKid(publicKey: Uint8Array): string;
-
 declare const CREDENTIAL_INVITATION_REQUEST_DOMAIN = "xyz.tinycloud.credentials/invitation-request/v1\0";
 declare const DELIVERY_ADMISSION_DOMAIN = "xyz.tinycloud.policy/delivery-admission/v0\0";
 interface ShareDeliveryAuthorizationV3Request {
     readonly envelope: Record<string, unknown>;
+    /** Base64url canonical sealed envelope bytes, bound by the Node before delivery. */
     readonly sealedEnvelope: string;
+    /** Base64url 32-byte AES-GCM key; this is the #k fragment value in the return link. */
     readonly envelopeKey: string;
     readonly shareCid: string;
     readonly recipientEmail: string;
@@ -3612,6 +3545,8 @@ interface CredentialInvitationRequest {
     readonly credentialType: string;
     readonly returnLink: string;
     readonly envelopeRef: string;
+    readonly label: string;
+    readonly shareExpiresAt: string;
     readonly audience: string;
     readonly issuedAt: string;
     readonly expiresAt: string;
@@ -3627,6 +3562,8 @@ interface DeliveryAdmission {
     readonly credentialType: string;
     readonly returnLink: string;
     readonly envelopeRef: string;
+    readonly label: string;
+    readonly shareExpiresAt: string;
     readonly senderKeyDid: string;
     readonly audience: string;
     readonly issuedAt: string;
@@ -3650,7 +3587,7 @@ interface ShareDeliveryAuthorizationV3Receipt {
 declare function validateShareDeliveryAuthorizationV3Bytes(bytes: Uint8Array, expected: {
     readonly request: ShareDeliveryAuthorizationV3Request;
     readonly senderKeyDid: string;
-    readonly credentialsAudience: string;
+    readonly deliveryAudience: string;
 }): Omit<ShareDeliveryAuthorizationV3Receipt, "proof">;
 
 /**
@@ -4635,4 +4572,4 @@ declare const ShareNativeResponseSchema: z.ZodDiscriminatedUnion<"action", [z.Zo
 }>]>;
 type ShareNativeResponse = z.infer<typeof ShareNativeResponseSchema>;
 
-export { type OwnerSharePolicyRegistration as $, type AccountDelegationPage as A, type DelegationStatus as B, CREDENTIAL_INVITATION_REQUEST_DOMAIN as C, DelegationManager as D, type DeliveryAdmission as E, type EncodedShareData as F, type GenerateShareParams as G, type ISharingService as H, type ICapabilityKeyRegistry as I, type IngestOptions as J, type JWK as K, type KeyInfo as L, type KeyProvider as M, type KeyType as N, MAX_CONTENT_BYTES as O, MAX_SEALED_SHARE_CONTENT_BYTES as P, MAX_SHARE_ARTIFACT_BYTES as Q, type Result as R, MAX_SHARE_CONTENT_BYTES as S, MemorySenderShareKeyStorage as T, MemorySenderShareRecordStorage as U, MemoryShareCache as V, type OwnerDelegationPermission as W, type OwnerDelegationReceipt as X, type OwnerShareAction as Y, type OwnerShareDecryption as Z, type OwnerShareMatcher as _, type DelegationError as a, type ShareReadInvocationV1 as a$, type OwnerSharePolicyRegistrationReceipt as a0, type OwnerSharePolicyV2 as a1, type PortableDelegationImportReceipt as a2, type ReceiveOptions as a3, type RegisterOwnerSharePolicyParams as a4, SHARE_DELIVERY_AUTHORIZATION_DOMAIN as a5, type SenderShareKeyStorage as a6, type SenderShareRecord as a7, type SenderShareRecordStorage as a8, type SenderShareRevocationScope as a9, type ShareDeliveryAuthorizationRequest as aA, type ShareDeliveryAuthorizationV3Receipt as aB, type ShareDeliveryAuthorizationV3Request as aC, type ShareDetachedProof as aD, ShareEnvelopeError as aE, type ShareEnvelopeV2 as aF, type ShareExpiryBounds as aG, type ShareKvContentSource as aH, type ShareLink as aI, type ShareLinkData as aJ, type ShareLinkLocation as aK, type ShareListEntry as aL, type ShareListResult as aM, type ShareNativeAction as aN, type ShareNativeInvokeEnvelopeV1 as aO, type ShareNativeInvokeErrorResult as aP, type ShareNativeInvokeInput as aQ, type ShareNativeInvokeResult as aR, type ShareNativeInvokeSuccessResult as aS, type ShareNativeResponse as aT, ShareNativeResponseSchema as aU, type SharePolicy as aV, type SharePolicyBinding as aW, type SharePolicySession as aX, type SharePolicySessionV1 as aY, type SharePolicySessionWireV1 as aZ, type PortableDelegation as a_, SenderShareStore as aa, type ShareAccess as ab, ShareAccessError as ac, type ShareAccessV2 as ad, type ShareAction as ae, ShareActionSchema as af, type ShareAddressedDelegationEnvelopeV2 as ag, ShareAddressedDelegationEnvelopeV2Schema as ah, type ShareAddressedDelegationRequestV2 as ai, ShareAddressedDelegationRequestV2Schema as aj, type ShareAddressedDelegationResponseV2 as ak, ShareAddressedDelegationResponseV2Schema as al, type ShareAddressedRecipientMatcher as am, type ShareArtifactInput as an, type ShareArtifactResult as ao, type ShareArtifactV2 as ap, type ShareCache as aq, type ShareCacheEntry as ar, type ShareCacheKey as as, type ShareCacheMetadata as at, type ShareCapabilityLike as au, ShareConflict as av, type ShareContentMetadata as aw, type ShareContentSource as ax, type ShareDeliveryAuthorization as ay, type ShareDeliveryAuthorizationReceipt as az, type AccountDelegationQueryOptions as b, type ShareReadResult as b0, ShareRecipientClient as b1, type ShareRecipientClientOptions as b2, ShareRecipientClientOptionsSchema as b3, type ShareRecipientPolicy as b4, ShareRecipientPolicySchema as b5, type ShareRecipientResult as b6, type ShareRecipientTarget as b7, ShareRecipientTargetSchema as b8, type ShareResource as b9, encryptShareBytes as bA, encryptShareBytesAsync as bB, importPortableDelegation as bC, intersectShareCapabilities as bD, isV2ShareLink as bE, normalizeShareActions as bF, normalizeShareRecipientTarget as bG, normalizeShareResource as bH, parsePortableDelegation as bI, parseShareArtifact as bJ, parseShareUrl as bK, restoreDelegatedShareKey as bL, serializePortableDelegation as bM, shareCapabilityAllows as bN, shareDeliveryTrustedKid as bO, signShareEnvelope as bP, validateOwnerSharePolicyRegistration as bQ, validateOwnerSharePolicyRegistrationBytes as bR, validateShareDeliveryAuthorizationBytes as bS, validateShareDeliveryAuthorizationV3Bytes as bT, verifyShareCid as bU, verifyShareEnvelope as bV, CapabilityKeyRegistry as bW, type CapabilityKeyRegistryErrorCode as bX, CapabilityKeyRegistryErrorCodes as bY, type StoredDelegationChain as bZ, createCapabilityKeyRegistry as b_, ShareResourceSchema as ba, type ShareSaveOptions as bb, type ShareSchema as bc, type ShareSqlContentSource as bd, type ShareWireAction as be, SharingService as bf, type SharingServiceConfig as bg, type SignedDelegation as bh, type SpaceInfo as bi, type SpaceOwnership as bj, type ValidateShareDeliveryAuthorizationExpected as bk, type VerifyShareEnvelopeOptions as bl, canonicalOwnerSharePolicy as bm, computeOwnerShareRegistrationCid as bn, computeShareCid as bo, createDelegatedShareKey as bp, createPolicyEnforcementDelegation as bq, createShareArtifact as br, createShareArtifactAsync as bs, createSharePolicy as bt, createSharingService as bu, decryptShareBytesAsync as bv, delegatePortablePolicySession as bw, encodeInlineShareUrl as bx, encodeShareArtifact as by, encodeShareUrl as bz, type AccountDelegationRecord as c, type AccountDelegationResource as d, type CapabilityEntry as e, type CreateDelegationParams as f, type CreateDelegationWasmParams as g, type CreateDelegationWasmResult as h, type CreateOwnerDelegationParams as i, type CredentialInvitationRequest as j, DELIVERY_ADMISSION_DOMAIN as k, type DelegateReceivedShareParams as l, type DelegatedResource as m, type DelegatedShareAccess as n, type DelegatedShareKey as o, type Delegation as p, type DelegationApiResponse as q, type DelegationChain as r, type DelegationChainV2 as s, type DelegationDirection as t, type DelegationErrorCode as u, DelegationErrorCodes as v, type DelegationFilters as w, type DelegationManagerConfig as x, type DelegationRecord as y, type DelegationRevocationReceipt as z };
+export { type OwnerSharePolicyRegistration as $, type AccountDelegationPage as A, type DelegationStatus as B, CREDENTIAL_INVITATION_REQUEST_DOMAIN as C, DelegationManager as D, type DeliveryAdmission as E, type EncodedShareData as F, type GenerateShareParams as G, type ISharingService as H, type ICapabilityKeyRegistry as I, type IngestOptions as J, type JWK as K, type KeyInfo as L, type KeyProvider as M, type KeyType as N, MAX_CONTENT_BYTES as O, MAX_SEALED_SHARE_CONTENT_BYTES as P, MAX_SHARE_ARTIFACT_BYTES as Q, type Result as R, MAX_SHARE_CONTENT_BYTES as S, MemorySenderShareKeyStorage as T, MemorySenderShareRecordStorage as U, MemoryShareCache as V, type OwnerDelegationPermission as W, type OwnerDelegationReceipt as X, type OwnerShareAction as Y, type OwnerShareDecryption as Z, type OwnerShareMatcher as _, type DelegationError as a, type ShareRecipientClientOptions as a$, type OwnerSharePolicyRegistrationReceipt as a0, type OwnerSharePolicyV2 as a1, type PortableDelegationImportReceipt as a2, type ReceiveOptions as a3, type RegisterOwnerSharePolicyParams as a4, type SenderShareKeyStorage as a5, type SenderShareRecord as a6, type SenderShareRecordStorage as a7, type SenderShareRevocationScope as a8, SenderShareStore as a9, type ShareDetachedProof as aA, ShareEnvelopeError as aB, type ShareEnvelopeV2 as aC, type ShareExpiryBounds as aD, type ShareKvContentSource as aE, type ShareLink as aF, type ShareLinkData as aG, type ShareLinkLocation as aH, type ShareListEntry as aI, type ShareListResult as aJ, type ShareNativeAction as aK, type ShareNativeInvokeEnvelopeV1 as aL, type ShareNativeInvokeErrorResult as aM, type ShareNativeInvokeInput as aN, type ShareNativeInvokeResult as aO, type ShareNativeInvokeSuccessResult as aP, type ShareNativeResponse as aQ, ShareNativeResponseSchema as aR, type SharePolicy as aS, type SharePolicyBinding as aT, type SharePolicySession as aU, type SharePolicySessionV1 as aV, type SharePolicySessionWireV1 as aW, type PortableDelegation as aX, type ShareReadInvocationV1 as aY, type ShareReadResult as aZ, ShareRecipientClient as a_, type ShareAccess as aa, ShareAccessError as ab, type ShareAccessV2 as ac, type ShareAction as ad, ShareActionSchema as ae, type ShareAddressedDelegationEnvelopeV2 as af, ShareAddressedDelegationEnvelopeV2Schema as ag, type ShareAddressedDelegationRequestV2 as ah, ShareAddressedDelegationRequestV2Schema as ai, type ShareAddressedDelegationResponseV2 as aj, ShareAddressedDelegationResponseV2Schema as ak, type ShareAddressedRecipientMatcher as al, type ShareArtifactInput as am, type ShareArtifactResult as an, type ShareArtifactV2 as ao, type ShareCache as ap, type ShareCacheEntry as aq, type ShareCacheKey as ar, type ShareCacheMetadata as as, type ShareCapabilityLike as at, ShareConflict as au, type ShareContentMetadata as av, type ShareContentSource as aw, type ShareDelegationPreflight as ax, type ShareDeliveryAuthorizationV3Receipt as ay, type ShareDeliveryAuthorizationV3Request as az, type AccountDelegationQueryOptions as b, ShareRecipientClientOptionsSchema as b0, type ShareRecipientPolicy as b1, ShareRecipientPolicySchema as b2, type ShareRecipientResult as b3, type ShareRecipientTarget as b4, ShareRecipientTargetSchema as b5, type ShareResource as b6, ShareResourceSchema as b7, type ShareSaveOptions as b8, type ShareSchema as b9, isV2ShareLink as bA, normalizeShareActions as bB, normalizeShareRecipientTarget as bC, normalizeShareResource as bD, parsePortableDelegation as bE, parseShareArtifact as bF, parseShareUrl as bG, restoreDelegatedShareKey as bH, serializePortableDelegation as bI, shareCapabilityAllows as bJ, signShareEnvelope as bK, validateOwnerSharePolicyRegistration as bL, validateOwnerSharePolicyRegistrationBytes as bM, validateShareDeliveryAuthorizationV3Bytes as bN, verifyShareCid as bO, verifyShareEnvelope as bP, CapabilityKeyRegistry as bQ, type CapabilityKeyRegistryErrorCode as bR, CapabilityKeyRegistryErrorCodes as bS, type StoredDelegationChain as bT, createCapabilityKeyRegistry as bU, type ShareSqlContentSource as ba, type ShareWireAction as bb, SharingService as bc, type SharingServiceConfig as bd, type SignedDelegation as be, type SpaceInfo as bf, type SpaceOwnership as bg, type VerifyShareEnvelopeOptions as bh, canonicalOwnerSharePolicy as bi, computeOwnerShareRegistrationCid as bj, computeShareCid as bk, createDelegatedShareKey as bl, createPolicyEnforcementDelegation as bm, createShareArtifact as bn, createShareArtifactAsync as bo, createSharePolicy as bp, createSharingService as bq, decryptShareBytesAsync as br, delegatePortablePolicySession as bs, encodeInlineShareUrl as bt, encodeShareArtifact as bu, encodeShareUrl as bv, encryptShareBytes as bw, encryptShareBytesAsync as bx, importPortableDelegation as by, intersectShareCapabilities as bz, type AccountDelegationRecord as c, type AccountDelegationResource as d, type CapabilityEntry as e, type CreateDelegationParams as f, type CreateDelegationWasmParams as g, type CreateDelegationWasmResult as h, type CreateOwnerDelegationParams as i, type CredentialInvitationRequest as j, DELIVERY_ADMISSION_DOMAIN as k, type DelegateReceivedShareParams as l, type DelegatedResource as m, type DelegatedShareAccess as n, type DelegatedShareKey as o, type Delegation as p, type DelegationApiResponse as q, type DelegationChain as r, type DelegationChainV2 as s, type DelegationDirection as t, type DelegationErrorCode as u, DelegationErrorCodes as v, type DelegationFilters as w, type DelegationManagerConfig as x, type DelegationRecord as y, type DelegationRevocationReceipt as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinycloud/sdk-core",
-  "version": "3.0.0-beta.8",
+  "version": "3.0.0",
   "description": "Core TinyCloud SDK - shared interfaces and TinyCloud class",
   "author": "TinyCloud, Inc.",
   "license": "EGPL",
@@ -53,10 +53,10 @@
     "@multiformats/multiaddr-to-uri": "^12.0.0",
     "@multiformats/uri-to-multiaddr": "^10.0.0",
     "@noble/curves": "^1.9.7",
-    "@tinycloud/share-envelope": "0.2.1-beta.2",
-    "@tinycloud/share-sdk": "0.3.0-beta.2",
+    "@tinycloud/share-envelope": "1.0.0",
+    "@tinycloud/share-sdk": "1.0.0",
     "@tinycloud/bootstrap": "2.7.0",
-    "@tinycloud/sdk-services": "3.0.0-beta.8",
+    "@tinycloud/sdk-services": "3.0.0",
     "multiformats": "^13.4.1",
     "ms": "^2.1.3",
     "siwe": "^3.0.0",