@tinycloud/sdk-core 3.12.0-beta.3 → 3.12.0-beta.5

package/dist/delegations/index.d.cts

@@ -1,7 +1,7 @@
-import { R as Result, D as DelegationError } from '../types.schema-BmN-OnCA.cjs';
-export { A as AccountDelegationPage, a as AccountDelegationQueryOptions, b as AccountDelegationRecord, c as AccountDelegationResource, C as CapabilityEntry, d as CreateDelegationParams, e as CreateDelegationWasmParams, f as CreateDelegationWasmResult, g as DelegatedResource, h as Delegation, i as DelegationApiResponse, j as DelegationChain, k as DelegationChainV2, l as DelegationDirection, m as DelegationErrorCode, n as DelegationErrorCodes, o as DelegationFilters, p as DelegationManagerConfig, q as DelegationRecord, r as DelegationRevocationReceipt, s as DelegationStatus, G as GenerateShareParams, I as IngestOptions, J as JWK, K as KeyInfo, t as KeyProvider, u as KeyType, S as SessionInvocationSigner, v as ShareLink, w as ShareLinkData, x as ShareSchema, y as SpaceInfo, z as SpaceOwnership } from '../types.schema-BmN-OnCA.cjs';
-import { I as ICapabilityKeyRegistry } from '../recipient-types.schema-BIJcihno.cjs';
-export { C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, a as CreateOwnerDelegationParams, b as CredentialInvitationRequest, D as DELIVERY_ADMISSION_DOMAIN, c as DelegateReceivedShareParams, d as DelegatedShareAccess, e as DelegatedShareKey, f as DelegationManager, g as DeliveryAdmission, E as EncodedShareData, h as ISharingService, M as MAX_CONTENT_BYTES, i as MAX_SEALED_SHARE_CONTENT_BYTES, j as MAX_SHARE_ARTIFACT_BYTES, k as MAX_SHARE_CONTENT_BYTES, l as MemorySenderShareKeyStorage, m as MemorySenderShareRecordStorage, n as MemoryShareCache, O as OwnerDelegationPermission, o as OwnerDelegationReceipt, p as OwnerShareAction, q as OwnerShareDecryption, r as OwnerShareMatcher, s as OwnerSharePolicyRegistration, t as OwnerSharePolicyRegistrationReceipt, u as OwnerSharePolicyV2, P as PortableDelegationImportReceipt, R as ReceiveOptions, v as RegisterOwnerSharePolicyParams, S as SenderShareKeyStorage, w as SenderShareRecord, x as SenderShareRecordStorage, y as SenderShareRevocationScope, z as SenderShareStore, A as ShareAccess, B as ShareAccessError, F as ShareAccessV2, G as ShareAction, H as ShareActionSchema, J as ShareAddressedDelegationEnvelopeV2, K as ShareAddressedDelegationEnvelopeV2Schema, L as ShareAddressedDelegationRequestV2, N as ShareAddressedDelegationRequestV2Schema, Q as ShareAddressedDelegationResponseV2, T as ShareAddressedDelegationResponseV2Schema, U as ShareAddressedRecipientMatcher, V as ShareArtifactInput, W as ShareArtifactResult, X as ShareArtifactV2, Y as ShareCache, Z as ShareCacheEntry, _ as ShareCacheKey, $ as ShareCacheMetadata, a0 as ShareCapabilityLike, a1 as ShareConflict, a2 as ShareContentMetadata, a3 as ShareContentSource, a4 as ShareDelegationPreflight, a5 as ShareDeliveryAuthorizationV3Receipt, a6 as ShareDeliveryAuthorizationV3Request, a7 as ShareDeliveryRefusedError, a8 as ShareDetachedProof, a9 as ShareEnvelopeError, aa as ShareEnvelopeV2, ab as ShareExpiryBounds, ac as ShareKvContentSource, ad as ShareLinkLocation, ae as ShareListEntry, af as ShareListResult, ag as ShareNativeAction, ah as ShareNativeInvokeEnvelopeV1, ai as ShareNativeInvokeErrorResult, aj as ShareNativeInvokeInput, ak as ShareNativeInvokeResult, al as ShareNativeInvokeSuccessResult, am as ShareNativeResponse, an as ShareNativeResponseSchema, ao as SharePolicy, ap as SharePolicyBinding, aq as SharePolicySession, ar as SharePolicySessionV1, as as SharePolicySessionWireV1, at as SharePortableDelegation, au as ShareReadInvocationV1, av as ShareReadResult, aw as ShareRecipientClient, ax as ShareRecipientClientOptions, ay as ShareRecipientClientOptionsSchema, az as ShareRecipientPolicy, aA as ShareRecipientPolicySchema, aB as ShareRecipientResult, aC as ShareRecipientTarget, aD as ShareRecipientTargetSchema, aE as ShareResource, aF as ShareResourceSchema, aG as ShareSaveOptions, aH as ShareSqlContentSource, aI as ShareWireAction, aJ as SharingService, aK as SharingServiceConfig, aL as SignedDelegation, aM as VerifyShareEnvelopeOptions, aN as canonicalOwnerSharePolicy, aO as computeOwnerShareRegistrationCid, aP as computeShareCid, aQ as createDelegatedShareKey, aR as createPolicyEnforcementDelegation, aS as createShareArtifact, aT as createShareArtifactAsync, aU as createSharePolicy, aV as createSharingService, aW as decryptShareBytesAsync, aX as delegatePortablePolicySession, aY as encodeInlineShareUrl, aZ as encodeShareArtifact, a_ as encodeShareUrl, a$ as encryptShareBytes, b0 as encryptShareBytesAsync, b1 as importPortableDelegation, b2 as intersectShareCapabilities, b3 as isV2ShareLink, b4 as normalizeShareActions, b5 as normalizeShareRecipientTarget, b6 as normalizeShareResource, b7 as parsePortableDelegation, b8 as parseShareArtifact, b9 as parseShareUrl, ba as restoreDelegatedShareKey, bb as serializePortableDelegation, bc as shareCapabilityAllows, bd as shortDeliveryLinkBodyCid, be as signShareEnvelope, bf as validateOwnerSharePolicyRegistration, bg as validateOwnerSharePolicyRegistrationBytes, bh as verifyShareCid, bi as verifyShareDeliveryAuthorizationV3Bytes, bj as verifyShareEnvelope, bk as withoutShareLink } from '../recipient-types.schema-BIJcihno.cjs';
+import { R as Result, D as DelegationError } from '../types.schema-B0ZUx7Ss.cjs';
+export { A as AccountDelegationPage, a as AccountDelegationQueryOptions, b as AccountDelegationRecord, c as AccountDelegationResource, C as CapabilityEntry, d as CreateDelegationParams, e as CreateDelegationWasmParams, f as CreateDelegationWasmResult, g as DelegatedResource, h as Delegation, i as DelegationApiResponse, j as DelegationChain, k as DelegationChainV2, l as DelegationDirection, m as DelegationErrorCode, n as DelegationErrorCodes, o as DelegationFilters, p as DelegationManagerConfig, q as DelegationRecord, r as DelegationRevocationReceipt, s as DelegationStatus, G as GenerateShareParams, I as IngestOptions, J as JWK, K as KeyInfo, t as KeyProvider, u as KeyType, S as SessionInvocationSigner, v as ShareLink, w as ShareLinkData, x as ShareSchema, y as SpaceInfo, z as SpaceOwnership } from '../types.schema-B0ZUx7Ss.cjs';
+import { I as ICapabilityKeyRegistry } from '../recipient-types.schema-C-q64lEk.cjs';
+export { C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, a as CreateOwnerDelegationParams, b as CredentialInvitationRequest, D as DELIVERY_ADMISSION_DOMAIN, c as DelegateReceivedShareParams, d as DelegatedShareAccess, e as DelegatedShareKey, f as DelegationManager, g as DeliveryAdmission, E as EncodedShareData, h as ISharingService, M as MAX_CONTENT_BYTES, i as MAX_SEALED_SHARE_CONTENT_BYTES, j as MAX_SHARE_ARTIFACT_BYTES, k as MAX_SHARE_CONTENT_BYTES, l as MemorySenderShareKeyStorage, m as MemorySenderShareRecordStorage, n as MemoryShareCache, O as OwnerDelegationPermission, o as OwnerDelegationReceipt, p as OwnerShareAction, q as OwnerShareDecryption, r as OwnerShareMatcher, s as OwnerSharePolicyRegistration, t as OwnerSharePolicyRegistrationReceipt, u as OwnerSharePolicyV2, P as PortableDelegationImportReceipt, R as ReceiveOptions, v as RegisterOwnerSharePolicyParams, S as SenderShareKeyStorage, w as SenderShareRecord, x as SenderShareRecordStorage, y as SenderShareRevocationScope, z as SenderShareStore, A as ShareAccess, B as ShareAccessError, F as ShareAccessV2, G as ShareAction, H as ShareActionSchema, J as ShareAddressedDelegationEnvelopeV2, K as ShareAddressedDelegationEnvelopeV2Schema, L as ShareAddressedDelegationRequestV2, N as ShareAddressedDelegationRequestV2Schema, Q as ShareAddressedDelegationResponseV2, T as ShareAddressedDelegationResponseV2Schema, U as ShareAddressedRecipientMatcher, V as ShareArtifactInput, W as ShareArtifactResult, X as ShareArtifactV2, Y as ShareCache, Z as ShareCacheEntry, _ as ShareCacheKey, $ as ShareCacheMetadata, a0 as ShareCapabilityLike, a1 as ShareConflict, a2 as ShareContentMetadata, a3 as ShareContentSource, a4 as ShareDelegationPreflight, a5 as ShareDeliveryAuthorizationV3Receipt, a6 as ShareDeliveryAuthorizationV3Request, a7 as ShareDeliveryRefusedError, a8 as ShareDetachedProof, a9 as ShareEnvelopeError, aa as ShareEnvelopeV2, ab as ShareExpiryBounds, ac as ShareKvContentSource, ad as ShareLinkLocation, ae as ShareListEntry, af as ShareListResult, ag as ShareNativeAction, ah as ShareNativeInvokeEnvelopeV1, ai as ShareNativeInvokeErrorResult, aj as ShareNativeInvokeInput, ak as ShareNativeInvokeResult, al as ShareNativeInvokeSuccessResult, am as ShareNativeResponse, an as ShareNativeResponseSchema, ao as SharePolicy, ap as SharePolicyBinding, aq as SharePolicySession, ar as SharePolicySessionV1, as as SharePolicySessionWireV1, at as SharePortableDelegation, au as ShareReadInvocationV1, av as ShareReadResult, aw as ShareRecipientClient, ax as ShareRecipientClientOptions, ay as ShareRecipientClientOptionsSchema, az as ShareRecipientPolicy, aA as ShareRecipientPolicySchema, aB as ShareRecipientResult, aC as ShareRecipientTarget, aD as ShareRecipientTargetSchema, aE as ShareResource, aF as ShareResourceSchema, aG as ShareSaveOptions, aH as ShareSqlContentSource, aI as ShareWireAction, aJ as SharingService, aK as SharingServiceConfig, aL as SignedDelegation, aM as VerifyShareEnvelopeOptions, aN as canonicalOwnerSharePolicy, aO as computeOwnerShareRegistrationCid, aP as computeShareCid, aQ as createDelegatedShareKey, aR as createPolicyEnforcementDelegation, aS as createShareArtifact, aT as createShareArtifactAsync, aU as createSharePolicy, aV as createSharingService, aW as decryptShareBytesAsync, aX as delegatePortablePolicySession, aY as encodeInlineShareUrl, aZ as encodeShareArtifact, a_ as encodeShareUrl, a$ as encryptShareBytes, b0 as encryptShareBytesAsync, b1 as importPortableDelegation, b2 as intersectShareCapabilities, b3 as isV2ShareLink, b4 as normalizeShareActions, b5 as normalizeShareRecipientTarget, b6 as normalizeShareResource, b7 as parsePortableDelegation, b8 as parseShareArtifact, b9 as parseShareUrl, ba as restoreDelegatedShareKey, bb as serializePortableDelegation, bc as shareCapabilityAllows, bd as shortDeliveryLinkBodyCid, be as signShareEnvelope, bf as validateOwnerSharePolicyRegistration, bg as validateOwnerSharePolicyRegistrationBytes, bh as verifyShareCid, bi as verifyShareDeliveryAuthorizationV3Bytes, bj as verifyShareEnvelope, bk as withoutShareLink } from '../recipient-types.schema-C-q64lEk.cjs';
 export { EncryptedSenderShareHistory, EncryptedShareHistoryStorage, MemoryEncryptedShareHistoryStorage, ShareAuthorizationAdapter, ShareAuthorizationDenied, ShareAuthorizationMethod, ShareAuthorizationReady, ShareAuthorizationRequired, ShareAuthorizationResult, ShareDeliveryAdapter, ShareErrorCode, ShareErrorInfo, ShareFetchOptions, ShareHistoryView, ShareInspection, ShareMetadata, ShareNotifyResult, ShareNotifyState, SharePolicyPublishAdapter, ShareReceiveError, ShareReceiveResult, ShareRevocationAdapter, ShareRevocationIncompleteError, ShareRevocationResult, ShareRootRevocationFailure, ShareRootRevocationState, ShareTarget, TargetPublishAdapter, TargetPublishInput, TargetPublishOutcome, authorizationMethodForTarget, authorizeShare, claimShare, inspectShare, listShares, notifyShare, publishPolicyShare, publishTargetShare, receiveShare, resumeShareAuthorization, revokeShare, showShare, toShareErrorInfo } from '@tinycloud/share-sdk';
 import { z } from 'zod';
 import { ServiceSession, InvokeFunction, FetchFunction, IKVService } from '@tinycloud/sdk-services';
@@ -42,9 +42,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     }, {
@@ -54,9 +54,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     }>, {
@@ -66,9 +66,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     }, {
@@ -78,9 +78,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     }>;
@@ -148,9 +148,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     };
@@ -182,9 +182,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     };

package/dist/delegations/index.d.ts

@@ -1,7 +1,7 @@
-import { R as Result, D as DelegationError } from '../types.schema-BmN-OnCA.js';
-export { A as AccountDelegationPage, a as AccountDelegationQueryOptions, b as AccountDelegationRecord, c as AccountDelegationResource, C as CapabilityEntry, d as CreateDelegationParams, e as CreateDelegationWasmParams, f as CreateDelegationWasmResult, g as DelegatedResource, h as Delegation, i as DelegationApiResponse, j as DelegationChain, k as DelegationChainV2, l as DelegationDirection, m as DelegationErrorCode, n as DelegationErrorCodes, o as DelegationFilters, p as DelegationManagerConfig, q as DelegationRecord, r as DelegationRevocationReceipt, s as DelegationStatus, G as GenerateShareParams, I as IngestOptions, J as JWK, K as KeyInfo, t as KeyProvider, u as KeyType, S as SessionInvocationSigner, v as ShareLink, w as ShareLinkData, x as ShareSchema, y as SpaceInfo, z as SpaceOwnership } from '../types.schema-BmN-OnCA.js';
-import { I as ICapabilityKeyRegistry } from '../recipient-types.schema-Ebi5aliq.js';
-export { C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, a as CreateOwnerDelegationParams, b as CredentialInvitationRequest, D as DELIVERY_ADMISSION_DOMAIN, c as DelegateReceivedShareParams, d as DelegatedShareAccess, e as DelegatedShareKey, f as DelegationManager, g as DeliveryAdmission, E as EncodedShareData, h as ISharingService, M as MAX_CONTENT_BYTES, i as MAX_SEALED_SHARE_CONTENT_BYTES, j as MAX_SHARE_ARTIFACT_BYTES, k as MAX_SHARE_CONTENT_BYTES, l as MemorySenderShareKeyStorage, m as MemorySenderShareRecordStorage, n as MemoryShareCache, O as OwnerDelegationPermission, o as OwnerDelegationReceipt, p as OwnerShareAction, q as OwnerShareDecryption, r as OwnerShareMatcher, s as OwnerSharePolicyRegistration, t as OwnerSharePolicyRegistrationReceipt, u as OwnerSharePolicyV2, P as PortableDelegationImportReceipt, R as ReceiveOptions, v as RegisterOwnerSharePolicyParams, S as SenderShareKeyStorage, w as SenderShareRecord, x as SenderShareRecordStorage, y as SenderShareRevocationScope, z as SenderShareStore, A as ShareAccess, B as ShareAccessError, F as ShareAccessV2, G as ShareAction, H as ShareActionSchema, J as ShareAddressedDelegationEnvelopeV2, K as ShareAddressedDelegationEnvelopeV2Schema, L as ShareAddressedDelegationRequestV2, N as ShareAddressedDelegationRequestV2Schema, Q as ShareAddressedDelegationResponseV2, T as ShareAddressedDelegationResponseV2Schema, U as ShareAddressedRecipientMatcher, V as ShareArtifactInput, W as ShareArtifactResult, X as ShareArtifactV2, Y as ShareCache, Z as ShareCacheEntry, _ as ShareCacheKey, $ as ShareCacheMetadata, a0 as ShareCapabilityLike, a1 as ShareConflict, a2 as ShareContentMetadata, a3 as ShareContentSource, a4 as ShareDelegationPreflight, a5 as ShareDeliveryAuthorizationV3Receipt, a6 as ShareDeliveryAuthorizationV3Request, a7 as ShareDeliveryRefusedError, a8 as ShareDetachedProof, a9 as ShareEnvelopeError, aa as ShareEnvelopeV2, ab as ShareExpiryBounds, ac as ShareKvContentSource, ad as ShareLinkLocation, ae as ShareListEntry, af as ShareListResult, ag as ShareNativeAction, ah as ShareNativeInvokeEnvelopeV1, ai as ShareNativeInvokeErrorResult, aj as ShareNativeInvokeInput, ak as ShareNativeInvokeResult, al as ShareNativeInvokeSuccessResult, am as ShareNativeResponse, an as ShareNativeResponseSchema, ao as SharePolicy, ap as SharePolicyBinding, aq as SharePolicySession, ar as SharePolicySessionV1, as as SharePolicySessionWireV1, at as SharePortableDelegation, au as ShareReadInvocationV1, av as ShareReadResult, aw as ShareRecipientClient, ax as ShareRecipientClientOptions, ay as ShareRecipientClientOptionsSchema, az as ShareRecipientPolicy, aA as ShareRecipientPolicySchema, aB as ShareRecipientResult, aC as ShareRecipientTarget, aD as ShareRecipientTargetSchema, aE as ShareResource, aF as ShareResourceSchema, aG as ShareSaveOptions, aH as ShareSqlContentSource, aI as ShareWireAction, aJ as SharingService, aK as SharingServiceConfig, aL as SignedDelegation, aM as VerifyShareEnvelopeOptions, aN as canonicalOwnerSharePolicy, aO as computeOwnerShareRegistrationCid, aP as computeShareCid, aQ as createDelegatedShareKey, aR as createPolicyEnforcementDelegation, aS as createShareArtifact, aT as createShareArtifactAsync, aU as createSharePolicy, aV as createSharingService, aW as decryptShareBytesAsync, aX as delegatePortablePolicySession, aY as encodeInlineShareUrl, aZ as encodeShareArtifact, a_ as encodeShareUrl, a$ as encryptShareBytes, b0 as encryptShareBytesAsync, b1 as importPortableDelegation, b2 as intersectShareCapabilities, b3 as isV2ShareLink, b4 as normalizeShareActions, b5 as normalizeShareRecipientTarget, b6 as normalizeShareResource, b7 as parsePortableDelegation, b8 as parseShareArtifact, b9 as parseShareUrl, ba as restoreDelegatedShareKey, bb as serializePortableDelegation, bc as shareCapabilityAllows, bd as shortDeliveryLinkBodyCid, be as signShareEnvelope, bf as validateOwnerSharePolicyRegistration, bg as validateOwnerSharePolicyRegistrationBytes, bh as verifyShareCid, bi as verifyShareDeliveryAuthorizationV3Bytes, bj as verifyShareEnvelope, bk as withoutShareLink } from '../recipient-types.schema-Ebi5aliq.js';
+import { R as Result, D as DelegationError } from '../types.schema-B0ZUx7Ss.js';
+export { A as AccountDelegationPage, a as AccountDelegationQueryOptions, b as AccountDelegationRecord, c as AccountDelegationResource, C as CapabilityEntry, d as CreateDelegationParams, e as CreateDelegationWasmParams, f as CreateDelegationWasmResult, g as DelegatedResource, h as Delegation, i as DelegationApiResponse, j as DelegationChain, k as DelegationChainV2, l as DelegationDirection, m as DelegationErrorCode, n as DelegationErrorCodes, o as DelegationFilters, p as DelegationManagerConfig, q as DelegationRecord, r as DelegationRevocationReceipt, s as DelegationStatus, G as GenerateShareParams, I as IngestOptions, J as JWK, K as KeyInfo, t as KeyProvider, u as KeyType, S as SessionInvocationSigner, v as ShareLink, w as ShareLinkData, x as ShareSchema, y as SpaceInfo, z as SpaceOwnership } from '../types.schema-B0ZUx7Ss.js';
+import { I as ICapabilityKeyRegistry } from '../recipient-types.schema--5j8kRNE.js';
+export { C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, a as CreateOwnerDelegationParams, b as CredentialInvitationRequest, D as DELIVERY_ADMISSION_DOMAIN, c as DelegateReceivedShareParams, d as DelegatedShareAccess, e as DelegatedShareKey, f as DelegationManager, g as DeliveryAdmission, E as EncodedShareData, h as ISharingService, M as MAX_CONTENT_BYTES, i as MAX_SEALED_SHARE_CONTENT_BYTES, j as MAX_SHARE_ARTIFACT_BYTES, k as MAX_SHARE_CONTENT_BYTES, l as MemorySenderShareKeyStorage, m as MemorySenderShareRecordStorage, n as MemoryShareCache, O as OwnerDelegationPermission, o as OwnerDelegationReceipt, p as OwnerShareAction, q as OwnerShareDecryption, r as OwnerShareMatcher, s as OwnerSharePolicyRegistration, t as OwnerSharePolicyRegistrationReceipt, u as OwnerSharePolicyV2, P as PortableDelegationImportReceipt, R as ReceiveOptions, v as RegisterOwnerSharePolicyParams, S as SenderShareKeyStorage, w as SenderShareRecord, x as SenderShareRecordStorage, y as SenderShareRevocationScope, z as SenderShareStore, A as ShareAccess, B as ShareAccessError, F as ShareAccessV2, G as ShareAction, H as ShareActionSchema, J as ShareAddressedDelegationEnvelopeV2, K as ShareAddressedDelegationEnvelopeV2Schema, L as ShareAddressedDelegationRequestV2, N as ShareAddressedDelegationRequestV2Schema, Q as ShareAddressedDelegationResponseV2, T as ShareAddressedDelegationResponseV2Schema, U as ShareAddressedRecipientMatcher, V as ShareArtifactInput, W as ShareArtifactResult, X as ShareArtifactV2, Y as ShareCache, Z as ShareCacheEntry, _ as ShareCacheKey, $ as ShareCacheMetadata, a0 as ShareCapabilityLike, a1 as ShareConflict, a2 as ShareContentMetadata, a3 as ShareContentSource, a4 as ShareDelegationPreflight, a5 as ShareDeliveryAuthorizationV3Receipt, a6 as ShareDeliveryAuthorizationV3Request, a7 as ShareDeliveryRefusedError, a8 as ShareDetachedProof, a9 as ShareEnvelopeError, aa as ShareEnvelopeV2, ab as ShareExpiryBounds, ac as ShareKvContentSource, ad as ShareLinkLocation, ae as ShareListEntry, af as ShareListResult, ag as ShareNativeAction, ah as ShareNativeInvokeEnvelopeV1, ai as ShareNativeInvokeErrorResult, aj as ShareNativeInvokeInput, ak as ShareNativeInvokeResult, al as ShareNativeInvokeSuccessResult, am as ShareNativeResponse, an as ShareNativeResponseSchema, ao as SharePolicy, ap as SharePolicyBinding, aq as SharePolicySession, ar as SharePolicySessionV1, as as SharePolicySessionWireV1, at as SharePortableDelegation, au as ShareReadInvocationV1, av as ShareReadResult, aw as ShareRecipientClient, ax as ShareRecipientClientOptions, ay as ShareRecipientClientOptionsSchema, az as ShareRecipientPolicy, aA as ShareRecipientPolicySchema, aB as ShareRecipientResult, aC as ShareRecipientTarget, aD as ShareRecipientTargetSchema, aE as ShareResource, aF as ShareResourceSchema, aG as ShareSaveOptions, aH as ShareSqlContentSource, aI as ShareWireAction, aJ as SharingService, aK as SharingServiceConfig, aL as SignedDelegation, aM as VerifyShareEnvelopeOptions, aN as canonicalOwnerSharePolicy, aO as computeOwnerShareRegistrationCid, aP as computeShareCid, aQ as createDelegatedShareKey, aR as createPolicyEnforcementDelegation, aS as createShareArtifact, aT as createShareArtifactAsync, aU as createSharePolicy, aV as createSharingService, aW as decryptShareBytesAsync, aX as delegatePortablePolicySession, aY as encodeInlineShareUrl, aZ as encodeShareArtifact, a_ as encodeShareUrl, a$ as encryptShareBytes, b0 as encryptShareBytesAsync, b1 as importPortableDelegation, b2 as intersectShareCapabilities, b3 as isV2ShareLink, b4 as normalizeShareActions, b5 as normalizeShareRecipientTarget, b6 as normalizeShareResource, b7 as parsePortableDelegation, b8 as parseShareArtifact, b9 as parseShareUrl, ba as restoreDelegatedShareKey, bb as serializePortableDelegation, bc as shareCapabilityAllows, bd as shortDeliveryLinkBodyCid, be as signShareEnvelope, bf as validateOwnerSharePolicyRegistration, bg as validateOwnerSharePolicyRegistrationBytes, bh as verifyShareCid, bi as verifyShareDeliveryAuthorizationV3Bytes, bj as verifyShareEnvelope, bk as withoutShareLink } from '../recipient-types.schema--5j8kRNE.js';
 export { EncryptedSenderShareHistory, EncryptedShareHistoryStorage, MemoryEncryptedShareHistoryStorage, ShareAuthorizationAdapter, ShareAuthorizationDenied, ShareAuthorizationMethod, ShareAuthorizationReady, ShareAuthorizationRequired, ShareAuthorizationResult, ShareDeliveryAdapter, ShareErrorCode, ShareErrorInfo, ShareFetchOptions, ShareHistoryView, ShareInspection, ShareMetadata, ShareNotifyResult, ShareNotifyState, SharePolicyPublishAdapter, ShareReceiveError, ShareReceiveResult, ShareRevocationAdapter, ShareRevocationIncompleteError, ShareRevocationResult, ShareRootRevocationFailure, ShareRootRevocationState, ShareTarget, TargetPublishAdapter, TargetPublishInput, TargetPublishOutcome, authorizationMethodForTarget, authorizeShare, claimShare, inspectShare, listShares, notifyShare, publishPolicyShare, publishTargetShare, receiveShare, resumeShareAuthorization, revokeShare, showShare, toShareErrorInfo } from '@tinycloud/share-sdk';
 import { z } from 'zod';
 import { ServiceSession, InvokeFunction, FetchFunction, IKVService } from '@tinycloud/sdk-services';
@@ -42,9 +42,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     }, {
@@ -54,9 +54,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     }>, {
@@ -66,9 +66,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     }, {
@@ -78,9 +78,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     }>;
@@ -148,9 +148,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     };
@@ -182,9 +182,9 @@ declare const EncodedShareDataSchema: z.ZodObject<{
         crv?: string | undefined;
         x?: string | undefined;
         y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
         n?: string | undefined;
+        e?: string | undefined;
+        d?: string | undefined;
         use?: string | undefined;
         key_ops?: string[] | undefined;
     };

package/dist/delegations/issued.d.cts

@@ -1,5 +1,5 @@
 import { FetchFunction } from '@tinycloud/sdk-services';
-import { S as SessionInvocationSigner, a as AccountDelegationQueryOptions, R as Result, A as AccountDelegationPage, b as AccountDelegationRecord, r as DelegationRevocationReceipt } from '../types.schema-BmN-OnCA.cjs';
+import { S as SessionInvocationSigner, a as AccountDelegationQueryOptions, R as Result, A as AccountDelegationPage, b as AccountDelegationRecord, r as DelegationRevocationReceipt } from '../types.schema-B0ZUx7Ss.cjs';
 import 'zod';
 
 /**

package/dist/delegations/issued.d.ts

@@ -1,5 +1,5 @@
 import { FetchFunction } from '@tinycloud/sdk-services';
-import { S as SessionInvocationSigner, a as AccountDelegationQueryOptions, R as Result, A as AccountDelegationPage, b as AccountDelegationRecord, r as DelegationRevocationReceipt } from '../types.schema-BmN-OnCA.js';
+import { S as SessionInvocationSigner, a as AccountDelegationQueryOptions, R as Result, A as AccountDelegationPage, b as AccountDelegationRecord, r as DelegationRevocationReceipt } from '../types.schema-B0ZUx7Ss.js';
 import 'zod';
 
 /**

package/dist/index.cjs

@@ -452,6 +452,7 @@ __export(index_exports, {
   principalDidEquals: () => principalDidEquals,
   projectUnifiedPolicyCapabilities: () => projectUnifiedPolicyCapabilities,
   projectUnifiedPolicyCapability: () => projectUnifiedPolicyCapability,
+  publicJwk: () => publicJwk,
   publishLocationRecord: () => publishLocationRecord,
   recapCaveatsEqual: () => recapCaveatsEqual,
   refreshOwnerRegistry: () => refreshOwnerRegistry,
@@ -1378,6 +1379,35 @@ function makePkhSpaceId(address, chainId, name2) {
   return `tinycloud:pkh:eip155:${chainId}:${canonicalizeAddress(address)}:${name2}`;
 }
 
+// src/jwk.ts
+var PUBLIC_MEMBERS = {
+  OKP: ["kty", "crv", "x"],
+  EC: ["kty", "crv", "x", "y"],
+  RSA: ["kty", "n", "e"]
+};
+var hasOwn = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+function publicJwk(jwk) {
+  if (!jwk || typeof jwk !== "object" || Array.isArray(jwk)) {
+    throw new TypeError("A JWK must be an object");
+  }
+  const source = jwk;
+  const kty = hasOwn(source, "kty") ? source.kty : void 0;
+  const members = typeof kty === "string" && hasOwn(PUBLIC_MEMBERS, kty) ? PUBLIC_MEMBERS[kty] : void 0;
+  if (!members) {
+    throw new TypeError(`JWK key type ${JSON.stringify(kty)} has no public form`);
+  }
+  const result = {};
+  for (const member of members) {
+    const value = hasOwn(source, member) ? source[member] : void 0;
+    if (typeof value !== "string" || value === "") {
+      throw new TypeError(`JWK is missing its public "${member}" member`);
+    }
+    result[member] = value;
+  }
+  if (hasOwn(source, "kid") && typeof source.kid === "string") result.kid = source.kid;
+  return result;
+}
+
 // src/requester/index.ts
 var import_viem4 = require("viem");
 var import_blake32 = require("@noble/hashes/blake3");
@@ -2388,7 +2418,7 @@ function normalizePolicyCapabilityWithOptions(input, options2) {
   output.space = canonicalSpace;
   output.path = path;
   output.actions = actions;
-  if (hasOwn(object4, "caveats")) {
+  if (hasOwn2(object4, "caveats")) {
     output.caveats = validateCaveats(
       requiredValue(object4, "caveats", "$", "policy-capability-malformed-caveats"),
       output.service
@@ -2425,7 +2455,7 @@ function assertExactKeys(object4, allowed, path) {
   }
 }
 function requiredValue(object4, key, path, code3) {
-  if (!hasOwn(object4, key)) {
+  if (!hasOwn2(object4, key)) {
     throw new PolicyCapabilityError(code3, `${path}.${key} is required`);
   }
   return object4[key];
@@ -2625,7 +2655,7 @@ function assertCaveatKeys(object4, allowed, path) {
   }
 }
 function requiredCaveat(object4, key, path) {
-  if (!hasOwn(object4, key)) {
+  if (!hasOwn2(object4, key)) {
     throw new PolicyCapabilityError(
       "policy-capability-malformed-caveats",
       `${path}.${key} is required`
@@ -2665,7 +2695,7 @@ function caveatsContain(authority, request) {
     (statement) => authorityStatements.some((candidate) => jcsCanonicalize(candidate) === jcsCanonicalize(statement))
   );
 }
-function hasOwn(object4, key) {
+function hasOwn2(object4, key) {
   return objectHasOwn2(object4, key);
 }
 
@@ -3150,10 +3180,10 @@ function validatePolicyShape(input, signed) {
   validatePolicyResource(requiredValue2(object4, "resource", "$"), "$.resource");
   validateExpression(requiredValue2(object4, "when", "$"), "$.when");
   validateGrant(requiredValue2(object4, "grant", "$"), "$.grant");
-  if (hasOwn2(object4, "disclosure")) {
+  if (hasOwn3(object4, "disclosure")) {
     validateDisclosure(requiredValue2(object4, "disclosure", "$"), "$.disclosure");
   }
-  if (hasOwn2(object4, "audit")) {
+  if (hasOwn3(object4, "audit")) {
     validateAudit(requiredValue2(object4, "audit", "$"), "$.audit");
   }
   return object4;
@@ -3351,7 +3381,7 @@ function validateEvidenceRequirement(input, path) {
   requiredString2(object4, "requirementId", path);
   requiredString2(object4, "verifier", path);
   requiredValue2(object4, "requirements", path);
-  if (hasOwn2(object4, "authority")) {
+  if (hasOwn3(object4, "authority")) {
     const authority = expectJsonObject(requiredValue2(object4, "authority", path), `${path}.authority`);
     assertExactKeys2(
       authority,
@@ -3359,12 +3389,12 @@ function validateEvidenceRequirement(input, path) {
       `${path}.authority`
     );
     optionalString(authority, "profile", `${path}.authority`);
-    if (hasOwn2(authority, "acceptedIssuers")) {
+    if (hasOwn3(authority, "acceptedIssuers")) {
       requiredStringArray(authority, "acceptedIssuers", `${path}.authority`);
     }
     optionalBoolean(authority, "allowOwnerAuthorizedIssuer", `${path}.authority`);
   }
-  if (hasOwn2(object4, "freshness")) {
+  if (hasOwn3(object4, "freshness")) {
     const freshness = expectJsonObject(requiredValue2(object4, "freshness", path), `${path}.freshness`);
     assertExactKeys2(freshness, ["maxStatusAgeSeconds"], `${path}.freshness`);
     requiredInteger(freshness, "maxStatusAgeSeconds", `${path}.freshness`, 0);
@@ -3424,7 +3454,7 @@ function assertIdMatches(signed, material, descriptor) {
   throw new SignedObjectIdError(`${descriptor.idField} does not match ${descriptor.idPrefix}`);
 }
 function assertSigningKeyBindingForCreate(unsigned, signerDid) {
-  if (!hasOwn2(unsigned, "signingKeyDid")) {
+  if (!hasOwn3(unsigned, "signingKeyDid")) {
     return;
   }
   const signingKeyDid = requiredString2(unsigned, "signingKeyDid", "$");
@@ -3435,7 +3465,7 @@ function assertSigningKeyBindingForCreate(unsigned, signerDid) {
   }
 }
 function assertSigningKeyBindingForVerify(signed, signature) {
-  if (!hasOwn2(signed, "signingKeyDid")) {
+  if (!hasOwn3(signed, "signingKeyDid")) {
     return;
   }
   const signingKeyDid = requiredString2(signed, "signingKeyDid", "$");
@@ -3576,7 +3606,7 @@ function assertExactKeys2(object4, allowed, path) {
   }
 }
 function requiredValue2(object4, key, path) {
-  if (!hasOwn2(object4, key)) {
+  if (!hasOwn3(object4, key)) {
     throw new SignedObjectSchemaError(`${path}.${key} is required`);
   }
   return object4[key];
@@ -3585,7 +3615,7 @@ function requiredString2(object4, key, path) {
   return requireStringType(requiredValue2(object4, key, path), `${path}.${key}`);
 }
 function optionalString(object4, key, path) {
-  if (!hasOwn2(object4, key)) {
+  if (!hasOwn3(object4, key)) {
     return;
   }
   requireStringType(requiredValue2(object4, key, path), `${path}.${key}`);
@@ -3597,7 +3627,7 @@ function requireStringType(value, path) {
   return value;
 }
 function optionalBoolean(object4, key, path) {
-  if (!hasOwn2(object4, key)) {
+  if (!hasOwn3(object4, key)) {
     return;
   }
   if (typeof requiredValue2(object4, key, path) !== "boolean") {
@@ -3634,7 +3664,7 @@ function requiredDateString(object4, key, path) {
   assertRfc3339(requiredString2(object4, key, path), `${path}.${key}`);
 }
 function optionalDateString(object4, key, path) {
-  if (!hasOwn2(object4, key)) {
+  if (!hasOwn3(object4, key)) {
     return;
   }
   assertRfc3339(requiredString2(object4, key, path), `${path}.${key}`);
@@ -3669,7 +3699,7 @@ function expectOneOf(actual, allowed, path) {
   }
   throw new SignedObjectSchemaError(`${path} has unsupported value ${actual}`);
 }
-function hasOwn2(object4, key) {
+function hasOwn3(object4, key) {
   return objectHasOwn3(object4, key);
 }
 function assertSupportedSignatureSuite(suite) {
@@ -3787,7 +3817,7 @@ async function verifyPolicyEngineRecordForRequester(options2) {
     ],
     "$"
   );
-  if (!hasOwn3(normalized, "signedRecord")) {
+  if (!hasOwn4(normalized, "signedRecord")) {
     throw new PolicyAuthoringError(
       "policy-engine-record-absent",
       "$.signedRecord must be present"
@@ -3861,14 +3891,14 @@ async function verifyPolicyEngineRecordForRequester(options2) {
       "$.signedRecord.grantIssuerDid does not match"
     );
   }
-  const requiredPolicyVersion = hasOwn3(normalized, "requiredPolicyVersion") ? requiredString3(normalized, "requiredPolicyVersion", "$") : POLICY_VERSION_V0;
+  const requiredPolicyVersion = hasOwn4(normalized, "requiredPolicyVersion") ? requiredString3(normalized, "requiredPolicyVersion", "$") : POLICY_VERSION_V0;
   if (!verified.supportedPolicyVersions.includes(requiredPolicyVersion)) {
     throw new PolicyAuthoringError(
       "policy-engine-record-policy-version-unsupported",
       "$.signedRecord.supportedPolicyVersions does not include the required version"
     );
   }
-  const requiredEvidenceVerifier = hasOwn3(
+  const requiredEvidenceVerifier = hasOwn4(
     normalized,
     "requiredEvidenceVerifier"
   ) ? requiredString3(normalized, "requiredEvidenceVerifier", "$") : W3C_VC_CREDENTIAL_VERIFIER;
@@ -3909,7 +3939,7 @@ function assertExactKeys3(object4, allowed, path) {
   }
 }
 function requiredValue3(object4, key, path) {
-  if (!hasOwn3(object4, key)) {
+  if (!hasOwn4(object4, key)) {
     throw new PolicyAuthoringError(
       "policy-authoring-malformed",
       `${path}.${key} is required`
@@ -3928,7 +3958,7 @@ function requiredString3(object4, key, path) {
   return value;
 }
 function fieldString(object4, key, path, code3) {
-  if (!hasOwn3(object4, key)) {
+  if (!hasOwn4(object4, key)) {
     throw new PolicyAuthoringError(code3, `${path}.${key} is required`);
   }
   const value = object4[key];
@@ -3969,7 +3999,7 @@ function parseStrictRfc3339(value, path) {
 var objectHasOwn4 = Object.hasOwn ?? Object.prototype.hasOwnProperty.call.bind(
   Object.prototype.hasOwnProperty
 );
-function hasOwn3(object4, key) {
+function hasOwn4(object4, key) {
   return objectHasOwn4(object4, key);
 }
 
@@ -20762,8 +20792,9 @@ async function lookupOwnerRegistryVerdict(subject, options2 = {}) {
       message: "no location registry is configured"
     });
   }
+  let verdict;
   try {
-    return await resolveOwnerHosts(subject, {
+    verdict = await resolveOwnerHosts(subject, {
       registryUrl: options2.registryUrl,
       sequenceStore: options2.sequenceStore,
       cacheStore: options2.cacheStore,
@@ -20777,6 +20808,12 @@ async function lookupOwnerRegistryVerdict(subject, options2 = {}) {
       cause: error
     });
   }
+  if (verdict.status === "unregistered" && verdict.offline) {
+    throw Object.assign(new RegistryUnavailableError(subject, void 0, {
+      message: "Couldn't reach your storage settings, and none are saved on this computer yet, so this didn't run. Try again in a few minutes."
+    }), { meta: { reason: "no-saved-settings" } });
+  }
+  return verdict;
 }
 async function resolveRegistryResource(subject, resource, access, options2) {
   const verdict = await lookupOwnerRegistryVerdict(subject, options2);