@tinycloud/sdk-core 3.11.0 → 3.12.0-beta.4

package/dist/index.d.ts

@@ -3419,6 +3419,27 @@ interface LocationRecordPayload {
 interface LocationRecord extends LocationRecordPayload {
     signature: string;
 }
+interface LocationRecordV2Payload {
+    version: 2;
+    subject: string;
+    nodes: Array<{
+        did: string;
+        url: string;
+    }>;
+    spaces: Array<{
+        space: string;
+        nodes: Array<{
+            did: string;
+            mode: "read-write" | "read-only";
+        }>;
+    }>;
+    encryptionNode: string | null;
+    updated_at: string;
+    sequence: number;
+}
+interface LocationRecordV2 extends LocationRecordV2Payload {
+    signature: string;
+}
 interface VerifyOwnerNodeBindingOptions {
     /** Registry that serves the owner's signed location record. */
     registryUrl: string;
@@ -3630,6 +3651,11 @@ declare function signLocationRecord(payload: LocationRecordPayload, signer: Loca
 declare function validateLocationRecordPayload(input: unknown): LocationRecordPayload;
 declare function validateLocationRecord(input: unknown): LocationRecord;
 declare function verifyLocationRecord(input: LocationRecord): Promise<boolean>;
+declare function canonicalLocationPayloadV2(payload: LocationRecordV2Payload): string;
+declare function validateLocationRecordV2Payload(input: unknown): LocationRecordV2Payload;
+declare function validateLocationRecordV2(input: unknown): LocationRecordV2;
+declare function verifyLocationRecordV2(input: LocationRecordV2): Promise<boolean>;
+declare function signLocationRecordV2(payload: LocationRecordV2Payload, signer: LocationRecordSigner): Promise<LocationRecordV2>;
 declare function fetchLocationRecord(registryUrl: string, subject: string, fetchFn?: typeof fetch, signal?: AbortSignal): Promise<LocationRecord | null>;
 /**
  * Publish the active owner node as a subject-signed discovery record.
@@ -3660,6 +3686,7 @@ declare function resolveTinyCloudHosts(subject: string, options?: ResolveTinyClo
  */
 declare function discoverLocalTinyCloudNode(options?: DiscoverLocalTinyCloudNodeOptions): Promise<DiscoveredLocalTinyCloudNode | null>;
 declare function multiaddrToHttpUrl(input: string): string;
+declare function exactHttpOrigin(value: string, label: string): string;
 /**
  * Proves that an addressed-share target is the owner's published TinyCloud.
  *
@@ -3695,6 +3722,7 @@ declare function verifyDidKeyEd25519Signature(did: string, payload: Uint8Array,
  * classifier's rules are written to be portable: the shared vectors in
  * `test-vectors/registry-verdict/` state them for other implementations.
  */
+
 type RegistryVerdictStatus = "registered" | "unregistered" | "unavailable";
 /** Which registry source produced a verdict. */
 type RegistryVerdictSource = "chain" | "chain-cache" | "offchain";
@@ -3729,23 +3757,29 @@ type RegistryUnavailableReason =
 /** The record signature does not verify for its subject. */
  | "invalid-signature"
 /** The record's sequence is below the remembered sequence. */
- | "rollback"
-/** The registry said "not found" for a subject remembered as registered. */
- | "not-found-after-registered";
+ | "rollback" | "not-found-after-registered"
+/** The owner has only a recognized record in the legacy registry format. */
+ | "unsupported-format";
 interface RegisteredRegistryVerdict {
     readonly status: "registered";
     readonly subject: string;
     readonly source: RegistryVerdictSource;
     /** Sequence of the accepted record. Callers persist the maximum they have seen. */
     readonly sequence: number;
+    /** Present for accepted signed-v2 records; absent for legacy classifiers. */
+    readonly record?: LocationRecordV2;
     /** Listed hosts in record order. Empty when the record lists no usable host. */
     readonly hosts: readonly RegistryHost[];
+    /** Routing used a reverified cache younger than one hour after an eligible outage. */
+    readonly offline?: true;
 }
 interface UnregisteredRegistryVerdict {
     readonly status: "unregistered";
     readonly subject: string;
     readonly source: RegistryVerdictSource;
     readonly hosts: readonly [];
+    /** Cold transport outage compatibility, not an authenticated registry absence. */
+    readonly offline?: true;
 }
 interface UnavailableRegistryVerdict {
     readonly status: "unavailable";
@@ -3778,6 +3812,8 @@ interface ClassifyRegistryLookupOptions {
      * or an older record is `unavailable`, never `unregistered`.
      */
     rememberedSequence?: number | null;
+    /** v1 remains available to non-routing callers; owner routing requests v2. */
+    recordVersion?: 1 | 2;
 }
 type RegistryLookupInputErrorCode = "invalid-subject" | "invalid-remembered-sequence";
 /** The caller passed a lookup input that cannot be classified. */
@@ -3790,17 +3826,14 @@ declare const REGISTRY_LOOKUP_MAX_BODY_BYTES: number;
 /** The exact body of the location registry's 404 for a subject with no record. */
 declare const REGISTRY_NOT_FOUND_BODY = "{\"error\":\"location record not found\"}";
 /**
- * Classify one off-chain location registry v1 response for `subject`.
+ * Classify one off-chain location registry response for `subject`. The
+ * default is v1 for legacy non-routing callers; v2 owner routing selects
+ * `recordVersion: 2` and receives a verified owner record with node-bound
+ * hosts.
  *
- * Checks run in this order, and the first failure decides the reason:
- * transport (`network-error`, `timeout`); status other than 200 or 404
- * (`http-status`); body over 65536 UTF-8 bytes (`oversize-response`). A 404
- * is `unregistered` only if its body, with leading and trailing JSON
- * whitespace removed, is exactly {@link REGISTRY_NOT_FOUND_BODY} and no
- * sequence is remembered. A 200 must be strict JSON holding a valid v1
- * `record` (`malformed-response`) for exactly `subject`
- * (`subject-mismatch`) whose signature verifies (`invalid-signature`) and
- * whose sequence is not below the remembered one (`rollback`).
+ * Both formats share strict transport, status, body-size, not-found, and
+ * rollback classification. V2 additionally rejects unknown fields and binds
+ * owner membership, node origins, and encryption destination to its signature.
  *
  * A 404 is unauthenticated: its exact bytes are the only evidence that the
  * registry itself answered.
@@ -3810,24 +3843,54 @@ declare const REGISTRY_NOT_FOUND_BODY = "{\"error\":\"location record not found\
  * `rememberedSequence` is not a non-negative safe integer.
  */
 declare function classifyRegistryLookup(subject: string, response: RegistryLookupResponse, options?: ClassifyRegistryLookupOptions): Promise<RegistryVerdict>;
+/** Settled chain-independent key shared by lookup, cache storage and signature owner binding. */
+declare function registryOwnerKeyV2(subject: string): string;
+
+/** Storage metadata is outside the untouched signed HTTP response text. */
+interface RegistryCacheEntry {
+    readonly ownerKey: string;
+    readonly responseBody: string;
+    readonly fetchedAt: number;
+    readonly sequence: number;
+    /** Local invalidation generation, not a signed sequence. Legacy entries omit it. */
+    readonly revision?: number;
+}
+/** Durable negative state. No signed response bytes survive an invalidation. */
+interface RegistryCacheTombstone {
+    readonly ownerKey: string;
+    readonly revision: number;
+    readonly invalidated: true;
+}
+type RegistryCacheRecord = RegistryCacheEntry | RegistryCacheTombstone;
+/** Entry, revision, update and invalidation guards share one serialized authority. */
+interface RegistryCacheStore {
+    get(ownerKey: string): Promise<RegistryCacheEntry | undefined>;
+    /** Legacy/absent state is zero; positive tombstone revisions retain known-owner evidence. */
+    getRevision(ownerKey: string): Promise<number>;
+    /** Pass the locked revision and preserve it regardless of callback-provided metadata. */
+    update(ownerKey: string, update: (current: RegistryCacheEntry | undefined, revision: number) => Promise<RegistryCacheEntry>): Promise<RegistryCacheEntry>;
+    /** Advance even when empty. Guard mismatches refuse without a write or counter advance. */
+    delete(ownerKey: string, expectedRevision?: number, maximumSequence?: number): Promise<void>;
+}
+declare function createInMemoryRegistryCacheStore(): RegistryCacheStore;
+declare const DEFAULT_REGISTRY_CACHE_STORAGE_KEY = "tinycloud.registryCache.v2";
+/** Web Locks make the signature-check/compare/write atomic across browser tabs. */
+declare function createLocalStorageRegistryCacheStore(storage?: WebStorageLike, storageKey?: string): RegistryCacheStore;
+/** Every read, including comparison under the storage lock, uses the canonical verifier. */
+declare function verifyRegistryCacheEntry(subject: string, ownerKey: string, entry: RegistryCacheEntry, rememberedSequence?: number): Promise<RegisteredRegistryVerdict>;
 
 /**
- * Registry policy for host resolution and space creation (TC-1443).
- *
- * - `legacy-fallback` (the default, deprecated): {@link resolveTinyCloudHosts}
- *   as before. A registry miss or failure silently routes to the hosted
- *   fallback node, with a one-time deprecation warning.
- * - `fail-closed` (opt-in): routing and space creation act on the three-state
- *   registry verdict. `unavailable` is never treated as `unregistered`.
+ * Signed-v2 registry policy for host resolution and space creation (TC-2481).
+ * Every routing decision awaits a bounded refresh. A reverified cache younger
+ * than one hour can serve transport/timeouts or HTTP 502/503/504 only.
+ * Only verified absence permits onboarding; an outage without saved settings refuses.
  *
- * Registry lookups key on the owner's signer address, never the session
- * chain. The v1 registry stores records under an exact
- * `did:pkh:eip155:<chain>:<EIP-55 address>` subject, so v1 lookups use
- * {@link registryOwnerSubjectV1} with a configured chain (default 1). Registry
- * v2 keys owner records on the EIP-55 address alone, chain-independent.
+ * V2 owner keys are chain-independent: EOA records use the exact EIP-55
+ * address and did:key records use the exact DID. V1 probes distinguish
+ * legacy-only owners, never supply routing hosts.
  */
 
-type RegistryPolicy = "legacy-fallback" | "fail-closed";
+type RegistryPolicy = "fail-closed";
 /** Chain of the v1 registry subject when none is configured. */
 declare const DEFAULT_REGISTRY_OWNER_CHAIN_ID = 1;
 /** Host for `unregistered` owners under `fail-closed` when none is configured. */
@@ -3835,7 +3898,10 @@ declare const DEFAULT_NEW_USER_HOST = "https://node.tinycloud.xyz";
 /** Budget for one registry lookup, covering the request and the body. */
 declare const DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS = 3000;
 /** Default key {@link createLocalStorageRegistrySequenceStore} stores its sequences under. */
-declare const DEFAULT_REGISTRY_SEQUENCE_STORAGE_KEY = "tinycloud.registrySequences.v1";
+declare const DEFAULT_REGISTRY_SEQUENCE_STORAGE_KEY = "tinycloud.registrySequences.v2";
+/** Strict maximum age for cached routing during an eligible registry outage. */
+declare const REGISTRY_CACHE_MAX_AGE_MS = 3600000;
+type RegistryFallbackReason = "using_default_node" | "using_cached_settings";
 /**
  * The v1 registry subject for an owner: `did:pkh:eip155:<registryChainId>:<EIP-55 address>`.
  *
@@ -3849,11 +3915,10 @@ declare function registryOwnerSubjectV1(address: string, registryChainId?: numbe
  * sequence marks the subject as registered: a later not-found or an older
  * record is `unavailable`, never `unregistered`.
  *
- * `set` is only called with a sequence above the remembered one. A `get`
- * failure fails that lookup closed (`RegistryUnavailableError`, never
- * "nothing remembered"). A `set` failure is logged once and the verdict in
- * hand stands: failing to remember weakens later rollback detection but
- * never turns a correct `registered` answer into a lockout.
+ * Ordinary accepted-record `set` calls advance the remembered sequence; a
+ * failure is logged once and the accepted verdict stands. A `get` failure
+ * fails the lookup closed. Authoritative cache invalidation may restate the
+ * current maximum and requires that marker write to succeed before deletion.
  */
 interface RegistrySequenceStore {
     get(subject: string): number | undefined | Promise<number | undefined>;
@@ -3868,31 +3933,36 @@ declare function createInMemoryRegistrySequenceStore(): RegistrySequenceStore;
  * read-only storage) is still remembered for this page. A storage read that
  * throws, or a corrupt stored value, throws instead of being reset:
  * forgetting a sequence would let a registry not-found read as
- * `unregistered`. Remove `storageKey` to reset.
+ * `unregistered`. Persistent merges require a storage-key Web Lock; write
+ * failures still retain per-page memory and the resolver's best-effort policy.
+ * Remove `storageKey` to reset persisted history.
  */
 declare function createLocalStorageRegistrySequenceStore(storage?: WebStorageLike, storageKey?: string): RegistrySequenceStore;
 interface ResolveOwnerHostsOptions {
     /** Location registry base URL. Default https://registry.tinycloud.xyz. */
     registryUrl?: string;
-    /** Remembered sequences. Omit to remember nothing. */
+    /** Remembered v2 sequences keyed by EIP-55 address or exact did:key. */
     sequenceStore?: RegistrySequenceStore;
+    /** Exact signed-v2 responses; verified on every read. */
+    cacheStore?: RegistryCacheStore;
     /** Custom fetch implementation. Defaults to globalThis.fetch. */
     fetch?: typeof fetch;
     /** Lookup budget in milliseconds. Default {@link DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS}. */
     timeoutMs?: number;
+    /** V1 format-probe chain for EOA owners. V2 lookup is chain-independent. */
+    registryChainId?: number;
 }
 /**
- * Look up `subject` in the off-chain v1 location registry and classify the
- * answer with {@link classifyRegistryLookup}, using and updating the
- * remembered sequence. Transport failures, timeouts and oversize or non-UTF-8
- * bodies are `unavailable` verdicts. Performs no host probing and never
- * applies a fallback.
- *
- * @throws RegistryLookupInputError if `subject` is not canonical or a
- * remembered sequence is invalid. The subject is length-checked before any
- * other parsing.
+ * Read and reverify cached signed-v2 state before starting network refresh.
+ * Cold lookups probe v1 after v2 absence (or a cold registry outage) so
+ * recognized legacy records cannot authorize fallback. Sequence memory and
+ * signed cache entries use the chain-independent v2 owner key.
  */
 declare function resolveOwnerHosts(subject: string, options?: ResolveOwnerHostsOptions): Promise<RegistryVerdict>;
+/** Coalesce overlapping refreshes only; every later decision starts a new lookup. */
+declare function refreshOwnerRegistry(subject: string, options: ResolveOwnerHostsOptions): Promise<RegistryVerdict>;
+/** Report only an actual cold default-node selection, never a background lookup. */
+declare function warnRegistryDefaultNode(verdict: RegistryVerdict, cacheStore?: RegistryCacheStore, onRegistryFallback?: (reason: string, code?: RegistryFallbackReason) => void): void;
 /** Sign-in found no usable host for a registered owner, or none for an unregistered owner when `newUserHost` is null. */
 declare class NodeNotFoundError extends Error {
     readonly subject: string;
@@ -3926,18 +3996,32 @@ declare class NodeRegistryEntryExistsError extends Error {
     constructor(subject: string, host: string, verdict: RegisteredRegistryVerdict);
 }
 interface LookupOwnerRegistryVerdictOptions {
-    /** Location registry base URL. `null` means none, which is `RegistryUnavailableError`. */
+    /** Location registry base URL. `null` means none, which is unavailable. */
     registryUrl?: string | null;
     sequenceStore?: RegistrySequenceStore;
+    cacheStore?: RegistryCacheStore;
     fetch?: typeof fetch;
     timeoutMs?: number;
+    /** V1 format-probe chain for EOA owners. V2 lookup is chain-independent. */
+    registryChainId?: number;
+    /** Value-free warning only after a fallback route is selected. */
+    onRegistryFallback?: (reason: string, code?: RegistryFallbackReason) => void;
 }
 /**
- * {@link resolveOwnerHosts} for policy decisions: a lookup that throws, or no
- * configured registry, becomes {@link RegistryUnavailableError}. An
- * `unavailable` verdict is returned as a verdict.
+ * {@link resolveOwnerHosts} for policy decisions: a lookup that throws, no
+ * configured registry, or cold outage without saved settings becomes
+ * {@link RegistryUnavailableError}. Other `unavailable` verdicts remain verdicts.
  */
 declare function lookupOwnerRegistryVerdict(subject: string, options?: LookupOwnerRegistryVerdictOptions): Promise<RegistryVerdict>;
+/**
+ * Resolve one resource exclusively from a verified v2 owner record. A genuine
+ * no-entry verdict returns no hosts for existing onboarding; a registered
+ * resource with no authorized destination throws instead of falling back.
+ */
+declare function resolveRegistryResource(subject: string, resource: string, access: "read" | "write" | "host" | "encryption", options: LookupOwnerRegistryVerdictOptions): Promise<{
+    verdict: RegistryVerdict;
+    hosts: RegistryHost[];
+}>;
 interface NodeNotFoundContext {
     readonly error: NodeNotFoundError | RegistryUnavailableError;
     /** 1 for the first failure, incremented after each `retry`. */
@@ -3952,16 +4036,12 @@ type NodeNotFoundDecision = {
     readonly action: "abort";
 };
 /**
- * Decides what sign-in does when no host can be resolved under `fail-closed`:
- * look up again, use another host, or abort with the error. A `use-host`
- * host must be an HTTPS or loopback HTTP origin. The SDK does not verify its
- * identity, and it persists with the session like any resolved host; space
- * creation there still goes through the creation guard.
+ * Decides what sign-in does when no host can be resolved under `fail-closed`.
+ * A callback may retry or abort for any error; `use-host` is accepted only
+ * for a genuine unregistered verdict with no configured host.
  */
 type OnNodeNotFound = (context: NodeNotFoundContext) => NodeNotFoundDecision | Promise<NodeNotFoundDecision>;
 interface FailClosedHostOptions extends LookupOwnerRegistryVerdictOptions {
-    /** Chain of the v1 registry subject. Default {@link DEFAULT_REGISTRY_OWNER_CHAIN_ID}. */
-    registryChainId?: number;
     /**
      * Host for owners the registry reports as `unregistered`, and only them.
      * Default {@link DEFAULT_NEW_USER_HOST}. `null`: unregistered owners get
@@ -3971,9 +4051,8 @@ interface FailClosedHostOptions extends LookupOwnerRegistryVerdictOptions {
     /** Without a callback, resolution throws the error. */
     onNodeNotFound?: OnNodeNotFound;
     /**
-     * Probe local nodes before routing on the verdict. Default true. Only
-     * configured candidates (`localNodeUrl`, `localLinkName`) and
-     * `*.local.tinycloud.link` hosts from a `registered` verdict are probed.
+     * Probe configured local candidates only after genuine unregistration.
+     * Discovery never overrides a registered or unavailable verdict.
      */
     autoDiscoverLocalNode?: boolean;
     localNodeUrl?: string;
@@ -3983,29 +4062,27 @@ interface FailClosedHostOptions extends LookupOwnerRegistryVerdictOptions {
 }
 interface FailClosedHosts {
     hosts: string[];
-    /** The registry verdict behind `hosts`. Absent when a verified local node was used. */
+    /** The registry verdict behind `hosts`. */
     verdict?: RegistryVerdict;
 }
 /**
- * Resolve the hosts for `address` under the `fail-closed` policy. The
- * registry verdict for {@link registryOwnerSubjectV1} comes first. Then a
- * verified local node is used if one is configured or listed by a
- * `registered` verdict. Otherwise `registered` routes to the record's hosts
- * (record order, HTTPS or loopback only), `unregistered` to `newUserHost`,
- * and `unavailable` or a record without a usable host goes to
- * `onNodeNotFound`, else throws.
+ * Resolve the hosts for `address` under the `fail-closed` policy. A
+ * registered v2 verdict routes only to its signed nodes; `unregistered`
+ * routes to `newUserHost` or a configured verified local node. An unavailable
+ * verdict or registered record without a usable host throws unless the
+ * callback retries or aborts.
  */
 declare function resolveFailClosedTinyCloudHosts(address: string, options?: FailClosedHostOptions): Promise<FailClosedHosts>;
 /**
- * The space-creation guard under `fail-closed`: creating a space on `host` is
- * allowed for an `unregistered` owner, or for a `registered` owner whose
- * record lists `host` as an HTTPS or loopback HTTP origin.
+ * The replica-registration guard under `fail-closed`. Signed v2 verdicts require
+ * the full `spaceId` and a listed node membership. Read-only members may register
+ * a replica; ordinary writes are separately restricted to read-write members.
  *
- * @throws NodeRegistryEntryExistsError for a registered owner whose record
- * does not list `host` that way (including an empty record).
+ * @throws NodeRegistryEntryExistsError when a registered owner does not list
+ * the requested space on this host (including when v2 `spaceId` is omitted).
  * @throws RegistryUnavailableError for an `unavailable` verdict.
  */
-declare function assertSpaceCreationAllowed(verdict: RegistryVerdict, host: string): void;
+declare function assertSpaceCreationAllowed(verdict: RegistryVerdict, host: string, spaceId?: string): void;
 
 /**
  * Default lifetimes for the various delegation shapes the SDK mints.
@@ -4059,4 +4136,4 @@ declare function assertExpiryWithinTechnicalLimit(expiresAt: Date | number, kind
 declare const DEFAULT_SIGNED_READ_URL_EXPIRY_MS: number;
 type ExpiryTier = keyof typeof EXPIRY;
 
-export { ACCOUNT_REGISTRY_PATH, ACCOUNT_REGISTRY_SPACE, type AbilitiesMap, type AccountApplication, type AccountApplicationListOptions, type AccountApplicationRegisterOptions, type AccountDelegation, type AccountDelegationListOptions, AccountDelegationPage, AccountDelegationQueryOptions, type AccountDelegationRevokeOptions, type AccountIndexEnsureResult, type AccountIndexRebuildResult, type AccountIndexStatus, type AccountIndexedReadOptions, AccountService, type AccountServiceConfig, type AccountSpace, type AccountSpaceListOptions, type AccountStatus, AutoApproveSpaceCreationHandler, type AutoRejectStrategy, type AutoSignStrategy, type Bytes, CREDENTIAL_ERROR_CODES, type CallbackStrategy, type CanonicalAddress, type CanonicalParsedNetworkId, type CanonicalTinyCloudIdentity, type CapabilityPresentationEnvelopeV1, CaveatedDelegationUnsupportedError, type CheckChangedExpirationInput, type ClassifyRegistryLookupOptions, type ClientSession, ClientSessionSchema, CloudLocationResolutionError, type ComposeManifestOptions, type ComposedManifestRequest, type CreateDelegationFunction, CreateDelegationParams, CredentialError, type CredentialErrorCode, CredentialFlowDescriptor, CredentialHolderBinding, CredentialIssuerMetadata, CredentialRequirement, CredentialStorageReceipt, DEFAULT_DEFAULTS, DEFAULT_EXPIRY, DEFAULT_KNOWLEDGE_ROOT, DEFAULT_LOCAL_NODE_PIN_STORAGE_KEY, DEFAULT_LOCAL_NODE_URL, DEFAULT_MANIFEST_SPACE, DEFAULT_MANIFEST_VERSION, DEFAULT_NEW_USER_HOST, DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS, DEFAULT_REGISTRY_OWNER_CHAIN_ID, DEFAULT_REGISTRY_SEQUENCE_STORAGE_KEY, DEFAULT_SIGNED_READ_URL_EXPIRY_MS, DEFAULT_TINYCLOUD_FALLBACK_HOST, DEFAULT_TINYCLOUD_LOCATION_REGISTRY_URL, Delegation, DelegationManager, DelegationRevocationReceipt, type DidCacheKeyOptions, type DidEqualsOptions, type DiscoverLocalTinyCloudNodeOptions, type DiscoveredLocalTinyCloudNode, EMAIL_CREDENTIAL_MAX_AGE_SECONDS, EMAIL_DOMAIN_CREDENTIAL_MAX_AGE_SECONDS, ENCRYPTION_MANIFEST_SPACE, ENCRYPTION_PERMISSION_SERVICE, EXPIRY, type EnsData, EnsDataSchema, type EventEmitterStrategy, type ExpiryTier, type Extension, type FailClosedHostOptions, type FailClosedHosts, GenerateShareParams, ICapabilityKeyRegistry, type IENSResolver, type INotificationHandler, type ISessionManager, type ISessionStorage, ISharingService, type ISigner, type ISpace, type ISpaceCreationHandler, type ISpaceScopedDelegations, type ISpaceScopedSharing, type ISpaceService, type IUserAuthorization, type IWasmBindings, IdentityParseError, type ImmutableSiweFields, IssuedCredentialEnvelope, LOCAL_LINK_HOST_SUFFIX, LOCAL_LINK_PROBE_TIMEOUT_MS, LOCAL_LOOPBACK_PROBE_TIMEOUT_MS, type LocalNodeIdentityStore, type LocationCandidate, type LocationCandidateInput, type LocationRecord, type LocationRecordPayload, type LocationRecordSigner, LocationRecordValidationError, LocationRegistryHttpError, type LocationResolutionAttempt, type LocationSource, type LookupOwnerRegistryVerdictOptions, MAX_SIWE_EXPIRY_MS, MAX_UCAN_EXPIRY_MS, type Manifest, type ManifestDefaults, type ManifestKnowledge, type ManifestRegistryRecord, type ManifestSecretActions, ManifestValidationError, type NodeInfo, type NodeNotFoundContext, type NodeNotFoundDecision, NodeNotFoundError, NodeRegistryEntryExistsError, OPENKEY_ACTION_ID_SEPARATOR, OWNER_NODE_BINDING_TIMEOUT_MS, type OnNodeNotFound, type OpenKeyCallbackStrategy, type OpenKeyManageKeyCallbackStrategy, OpenKeyManageKeyError, type OpenKeyManageKeyErrorCode, type OpenKeyManageKeyFetch, type OpenKeyManageKeySigningRequestBody, type OpenKeyManageKeySigningResponseBody, type OpenKeyManageKeySigningStrategyOptions, type OpenKeySigningRequestBody, type OpenKeySigningResponseBody, type OpenKeySigningStrategyOptions, type ParseRecapFromSiwe, type PartialSiweMessage, type PermissionEntry, PermissionNotInManifestError, type PersistedSessionData, type PersistedSessionProof, type PersistedTinyCloudSession, type PkhDidParts, ProtocolMismatchError, type PublishLocationRecordOptions, REGISTRY_LOOKUP_MAX_BODY_BYTES, REGISTRY_NOT_FOUND_BODY, type RecapAttenuation, type RegisterBatchSuccess, type RegisteredRegistryVerdict, type RegistryHost, type RegistryHostSource, RegistryLookupInputError, type RegistryLookupInputErrorCode, type RegistryLookupResponse, type RegistryPolicy, type RegistrySequenceStore, RegistryUnavailableError, type RegistryUnavailableReason, type RegistryVerdict, type RegistryVerdictSource, type RegistryVerdictStatus, type ResolveCloudLocationOptions, type ResolveOwnerHostsOptions, type ResolveTinyCloudHostsOptions, type ResolvedCapabilities, type ResolvedCloudLocation, type ResolvedDelegate, type ResolvedTinyCloudHosts, type ResourceCapability, SECRETS_SPACE, SERVICE_LONG_TO_SHORT, SERVICE_SHORT_TO_LONG, type ServerHost, SessionExpiredError, ShareLink, type SignCallback, type SignInOptions, type SignRequest, type SignResponse, type SignStrategy, type SignedSiweCacao, SilentNotificationHandler, type SiweConfig, SiweConfigSchema, Space, type SpaceAbilitiesMap, type SpaceConfig, type SpaceCreationContext, type SpaceDelegationParams, type SpaceErrorCode, SpaceErrorCodes, type SpaceHostResult, SpaceInfo, SpaceService, type SpaceServiceConfig, StoredCredentialRecord, type SubsetCheckResult, TERMINAL_DELEGATION_FACT, TINYCLOUD_CANONICAL_IDENTITY_CLAIM, TINYCLOUD_MANAGE_KEY_SCOPE, type TechnicalExpiryKind, type TerminalDelegationSigningKey, TicketHolderBinding, TinyCloud, type TinyCloudAuthorizationRequestV1, type TinyCloudAuthorizationResultV1, type TinyCloudConfig, type TinyCloudEffectiveGrantV1, type TinyCloudSession, type UnavailableRegistryVerdict, type UnregisteredRegistryVerdict, UnsupportedFeatureError, type UserAuthorizationConfig, VAULT_PERMISSION_SERVICE, type ValidatedPersistedSessionProof, type ValidationError, VerifiedCredential, type VerifiedOwnerNodeBinding, type VerifyOwnerNodeBindingOptions, VersionCheckError, type WasmRecapEntry, type WebStorageLike, actionContains, activateSessionWithHost, addressStorageKey, applyPrefix, assertExpiryWithinTechnicalLimit, assertSpaceCreationAllowed, buildSpaceUri, canonicalDigest, canonicalLocationPayload, canonicalizeAddress, canonicalizeDid, canonicalizeDidUrl, canonicalizeNetworkId, canonicalizeRecapCaveats, checkChangedExpiration, checkNodeInfo, classifyRegistryLookup, composeManifestRequest, createEmailCredentialRequirement, createEmailDomainCredentialRequirement, createHolderBinding, createInMemoryLocalNodeIdentityStore, createInMemoryRegistrySequenceStore, createLocalStorageLocalNodeIdentityStore, createLocalStorageRegistrySequenceStore, createOpenKeyCallbackSigningStrategy, createOpenKeyManageKeySigningStrategy, createSpaceService, createStorageReceipt, createStoredCredentialRecord, credentialEndpointPath, credentialError, credentialIndexKey, credentialMatchesRequirement, credentialRecordKey, credentialRequirementDigest, decodeBase64Url, defaultSignStrategy, defaultSpaceCreationHandler, descriptorSatisfiesRequirement, didCacheKey, didEquals, diffImmutableSiweFields, discoverLocalTinyCloudNode, encodeBase64Url, expandActionShortNames, expandDelegationPermissionEntries, expandPermissionEntries, expandPermissionEntry, expandRuntimePermissionEntries, extractImmutableSiweFields, extractRecapAttenuations, fetchLocationRecord, fetchPeerId, hasTinyCloudManageKeyScope, holderBindingCanonicalBytes, holderBindingSigningBytes, httpResponseError, httpUrlToMultiaddr, isCapabilitySubset, isDigest, isEvmAddress, isExplicitOnlyAction, isPlausibleOpenKeyActionId, loadManifest, locationPayloadForRecord, lookupOwnerRegistryVerdict, makePkhSpaceId, makePublicSpaceId, manifestAbilitiesUnion, markDelegationTerminal, multiaddrToHttpUrl, normalizeDefaults, parseCanonicalNetworkId, parseCanonicalRecapResource, parseCanonicalTinyCloudIdentity, parseCanonicalTinyCloudIdentityClaims, parseExpiry, parsePkhDid, parseRecapCapabilities, parseSignedSiweCacao, parseSpaceUri, pkhDid, principalDid, principalDidEquals, publishLocationRecord, recapCaveatsEqual, registryOwnerSubjectV1, requestTinyCloudManageKeyScope, resolveCloudLocation, resolveFailClosedTinyCloudHosts, resolveManifest, resolveManifestKnowledgeRoot, resolveOwnerHosts, resolveTinyCloudHosts, resourceCapabilitiesToAbilitiesMap, resourceCapabilitiesToSpaceAbilitiesMap, sha256Base64Url, signLocationRecord, submitHostDelegation, technicalExpiryRefusal, unauthorizedRecapCapabilities, validateAuthorizationResultV1, validateClientSession, validateCredentialFlowDescriptor, validateCredentialHolderBinding, validateCredentialRequirement, validateLocationRecord, validateLocationRecordPayload, validateManifest, validatePersistedSessionData, verifyDidKeyEd25519Signature, verifyEip191MessageSignature, verifyIssuedCredential, verifyLocationRecord, verifyOwnerNodeBinding, verifyStorageReceipt };
+export { ACCOUNT_REGISTRY_PATH, ACCOUNT_REGISTRY_SPACE, type AbilitiesMap, type AccountApplication, type AccountApplicationListOptions, type AccountApplicationRegisterOptions, type AccountDelegation, type AccountDelegationListOptions, AccountDelegationPage, AccountDelegationQueryOptions, type AccountDelegationRevokeOptions, type AccountIndexEnsureResult, type AccountIndexRebuildResult, type AccountIndexStatus, type AccountIndexedReadOptions, AccountService, type AccountServiceConfig, type AccountSpace, type AccountSpaceListOptions, type AccountStatus, AutoApproveSpaceCreationHandler, type AutoRejectStrategy, type AutoSignStrategy, type Bytes, CREDENTIAL_ERROR_CODES, type CallbackStrategy, type CanonicalAddress, type CanonicalParsedNetworkId, type CanonicalTinyCloudIdentity, type CapabilityPresentationEnvelopeV1, CaveatedDelegationUnsupportedError, type CheckChangedExpirationInput, type ClassifyRegistryLookupOptions, type ClientSession, ClientSessionSchema, CloudLocationResolutionError, type ComposeManifestOptions, type ComposedManifestRequest, type CreateDelegationFunction, CreateDelegationParams, CredentialError, type CredentialErrorCode, CredentialFlowDescriptor, CredentialHolderBinding, CredentialIssuerMetadata, CredentialRequirement, CredentialStorageReceipt, DEFAULT_DEFAULTS, DEFAULT_EXPIRY, DEFAULT_KNOWLEDGE_ROOT, DEFAULT_LOCAL_NODE_PIN_STORAGE_KEY, DEFAULT_LOCAL_NODE_URL, DEFAULT_MANIFEST_SPACE, DEFAULT_MANIFEST_VERSION, DEFAULT_NEW_USER_HOST, DEFAULT_REGISTRY_CACHE_STORAGE_KEY, DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS, DEFAULT_REGISTRY_OWNER_CHAIN_ID, DEFAULT_REGISTRY_SEQUENCE_STORAGE_KEY, DEFAULT_SIGNED_READ_URL_EXPIRY_MS, DEFAULT_TINYCLOUD_FALLBACK_HOST, DEFAULT_TINYCLOUD_LOCATION_REGISTRY_URL, Delegation, DelegationManager, DelegationRevocationReceipt, type DidCacheKeyOptions, type DidEqualsOptions, type DiscoverLocalTinyCloudNodeOptions, type DiscoveredLocalTinyCloudNode, EMAIL_CREDENTIAL_MAX_AGE_SECONDS, EMAIL_DOMAIN_CREDENTIAL_MAX_AGE_SECONDS, ENCRYPTION_MANIFEST_SPACE, ENCRYPTION_PERMISSION_SERVICE, EXPIRY, type EnsData, EnsDataSchema, type EventEmitterStrategy, type ExpiryTier, type Extension, type FailClosedHostOptions, type FailClosedHosts, GenerateShareParams, ICapabilityKeyRegistry, type IENSResolver, type INotificationHandler, type ISessionManager, type ISessionStorage, ISharingService, type ISigner, type ISpace, type ISpaceCreationHandler, type ISpaceScopedDelegations, type ISpaceScopedSharing, type ISpaceService, type IUserAuthorization, type IWasmBindings, IdentityParseError, type ImmutableSiweFields, IssuedCredentialEnvelope, LOCAL_LINK_HOST_SUFFIX, LOCAL_LINK_PROBE_TIMEOUT_MS, LOCAL_LOOPBACK_PROBE_TIMEOUT_MS, type LocalNodeIdentityStore, type LocationCandidate, type LocationCandidateInput, type LocationRecord, type LocationRecordPayload, type LocationRecordSigner, type LocationRecordV2, type LocationRecordV2Payload, LocationRecordValidationError, LocationRegistryHttpError, type LocationResolutionAttempt, type LocationSource, type LookupOwnerRegistryVerdictOptions, MAX_SIWE_EXPIRY_MS, MAX_UCAN_EXPIRY_MS, type Manifest, type ManifestDefaults, type ManifestKnowledge, type ManifestRegistryRecord, type ManifestSecretActions, ManifestValidationError, type NodeInfo, type NodeNotFoundContext, type NodeNotFoundDecision, NodeNotFoundError, NodeRegistryEntryExistsError, OPENKEY_ACTION_ID_SEPARATOR, OWNER_NODE_BINDING_TIMEOUT_MS, type OnNodeNotFound, type OpenKeyCallbackStrategy, type OpenKeyManageKeyCallbackStrategy, OpenKeyManageKeyError, type OpenKeyManageKeyErrorCode, type OpenKeyManageKeyFetch, type OpenKeyManageKeySigningRequestBody, type OpenKeyManageKeySigningResponseBody, type OpenKeyManageKeySigningStrategyOptions, type OpenKeySigningRequestBody, type OpenKeySigningResponseBody, type OpenKeySigningStrategyOptions, type ParseRecapFromSiwe, type PartialSiweMessage, type PermissionEntry, PermissionNotInManifestError, type PersistedSessionData, type PersistedSessionProof, type PersistedTinyCloudSession, type PkhDidParts, ProtocolMismatchError, type PublishLocationRecordOptions, REGISTRY_CACHE_MAX_AGE_MS, REGISTRY_LOOKUP_MAX_BODY_BYTES, REGISTRY_NOT_FOUND_BODY, type RecapAttenuation, type RegisterBatchSuccess, type RegisteredRegistryVerdict, type RegistryCacheEntry, type RegistryCacheRecord, type RegistryCacheStore, type RegistryCacheTombstone, type RegistryFallbackReason, type RegistryHost, type RegistryHostSource, RegistryLookupInputError, type RegistryLookupInputErrorCode, type RegistryLookupResponse, type RegistryPolicy, type RegistrySequenceStore, RegistryUnavailableError, type RegistryUnavailableReason, type RegistryVerdict, type RegistryVerdictSource, type RegistryVerdictStatus, type ResolveCloudLocationOptions, type ResolveOwnerHostsOptions, type ResolveTinyCloudHostsOptions, type ResolvedCapabilities, type ResolvedCloudLocation, type ResolvedDelegate, type ResolvedTinyCloudHosts, type ResourceCapability, SECRETS_SPACE, SERVICE_LONG_TO_SHORT, SERVICE_SHORT_TO_LONG, type ServerHost, SessionExpiredError, ShareLink, type SignCallback, type SignInOptions, type SignRequest, type SignResponse, type SignStrategy, type SignedSiweCacao, SilentNotificationHandler, type SiweConfig, SiweConfigSchema, Space, type SpaceAbilitiesMap, type SpaceConfig, type SpaceCreationContext, type SpaceDelegationParams, type SpaceErrorCode, SpaceErrorCodes, type SpaceHostResult, SpaceInfo, SpaceService, type SpaceServiceConfig, StoredCredentialRecord, type SubsetCheckResult, TERMINAL_DELEGATION_FACT, TINYCLOUD_CANONICAL_IDENTITY_CLAIM, TINYCLOUD_MANAGE_KEY_SCOPE, type TechnicalExpiryKind, type TerminalDelegationSigningKey, TicketHolderBinding, TinyCloud, type TinyCloudAuthorizationRequestV1, type TinyCloudAuthorizationResultV1, type TinyCloudConfig, type TinyCloudEffectiveGrantV1, type TinyCloudSession, type UnavailableRegistryVerdict, type UnregisteredRegistryVerdict, UnsupportedFeatureError, type UserAuthorizationConfig, VAULT_PERMISSION_SERVICE, type ValidatedPersistedSessionProof, type ValidationError, VerifiedCredential, type VerifiedOwnerNodeBinding, type VerifyOwnerNodeBindingOptions, VersionCheckError, type WasmRecapEntry, type WebStorageLike, actionContains, activateSessionWithHost, addressStorageKey, applyPrefix, assertExpiryWithinTechnicalLimit, assertSpaceCreationAllowed, buildSpaceUri, canonicalDigest, canonicalLocationPayload, canonicalLocationPayloadV2, canonicalizeAddress, canonicalizeDid, canonicalizeDidUrl, canonicalizeNetworkId, canonicalizeRecapCaveats, checkChangedExpiration, checkNodeInfo, classifyRegistryLookup, composeManifestRequest, createEmailCredentialRequirement, createEmailDomainCredentialRequirement, createHolderBinding, createInMemoryLocalNodeIdentityStore, createInMemoryRegistryCacheStore, createInMemoryRegistrySequenceStore, createLocalStorageLocalNodeIdentityStore, createLocalStorageRegistryCacheStore, createLocalStorageRegistrySequenceStore, createOpenKeyCallbackSigningStrategy, createOpenKeyManageKeySigningStrategy, createSpaceService, createStorageReceipt, createStoredCredentialRecord, credentialEndpointPath, credentialError, credentialIndexKey, credentialMatchesRequirement, credentialRecordKey, credentialRequirementDigest, decodeBase64Url, defaultSignStrategy, defaultSpaceCreationHandler, descriptorSatisfiesRequirement, didCacheKey, didEquals, diffImmutableSiweFields, discoverLocalTinyCloudNode, encodeBase64Url, exactHttpOrigin, expandActionShortNames, expandDelegationPermissionEntries, expandPermissionEntries, expandPermissionEntry, expandRuntimePermissionEntries, extractImmutableSiweFields, extractRecapAttenuations, fetchLocationRecord, fetchPeerId, hasTinyCloudManageKeyScope, holderBindingCanonicalBytes, holderBindingSigningBytes, httpResponseError, httpUrlToMultiaddr, isCapabilitySubset, isDigest, isEvmAddress, isExplicitOnlyAction, isPlausibleOpenKeyActionId, loadManifest, locationPayloadForRecord, lookupOwnerRegistryVerdict, makePkhSpaceId, makePublicSpaceId, manifestAbilitiesUnion, markDelegationTerminal, multiaddrToHttpUrl, normalizeDefaults, parseCanonicalNetworkId, parseCanonicalRecapResource, parseCanonicalTinyCloudIdentity, parseCanonicalTinyCloudIdentityClaims, parseExpiry, parsePkhDid, parseRecapCapabilities, parseSignedSiweCacao, parseSpaceUri, pkhDid, principalDid, principalDidEquals, publishLocationRecord, recapCaveatsEqual, refreshOwnerRegistry, registryOwnerKeyV2, registryOwnerSubjectV1, requestTinyCloudManageKeyScope, resolveCloudLocation, resolveFailClosedTinyCloudHosts, resolveManifest, resolveManifestKnowledgeRoot, resolveOwnerHosts, resolveRegistryResource, resolveTinyCloudHosts, resourceCapabilitiesToAbilitiesMap, resourceCapabilitiesToSpaceAbilitiesMap, sha256Base64Url, signLocationRecord, signLocationRecordV2, submitHostDelegation, technicalExpiryRefusal, unauthorizedRecapCapabilities, validateAuthorizationResultV1, validateClientSession, validateCredentialFlowDescriptor, validateCredentialHolderBinding, validateCredentialRequirement, validateLocationRecord, validateLocationRecordPayload, validateLocationRecordV2, validateLocationRecordV2Payload, validateManifest, validatePersistedSessionData, verifyDidKeyEd25519Signature, verifyEip191MessageSignature, verifyIssuedCredential, verifyLocationRecord, verifyLocationRecordV2, verifyOwnerNodeBinding, verifyRegistryCacheEntry, verifyStorageReceipt, warnRegistryDefaultNode };