@tinycloud/sdk-core 3.2.6-beta.2 → 3.3.0-beta.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,5 +1,5 @@
1
- import { I as ICapabilityKeyRegistry, D as DelegationManager, R as Result, a as DelegationError } from '../recipient-types.schema-BKrmP8hJ.cjs';
2
- export { A as AccountDelegationPage, b as AccountDelegationQueryOptions, c as AccountDelegationRecord, d as AccountDelegationResource, C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, e as CapabilityEntry, f as CreateDelegationParams, g as CreateDelegationWasmParams, h as CreateDelegationWasmResult, i as CreateOwnerDelegationParams, j as CredentialInvitationRequest, k as DELIVERY_ADMISSION_DOMAIN, l as DelegateReceivedShareParams, m as DelegatedResource, n as DelegatedShareAccess, o as DelegatedShareKey, p as Delegation, q as DelegationApiResponse, r as DelegationChain, s as DelegationChainV2, t as DelegationDirection, u as DelegationErrorCode, v as DelegationErrorCodes, w as DelegationFilters, x as DelegationManagerConfig, y as DelegationRecord, z as DelegationRevocationReceipt, B as DelegationStatus, E as DeliveryAdmission, F as EncodedShareData, G as GenerateShareParams, H as ISharingService, J as IngestOptions, K as JWK, L as KeyInfo, M as KeyProvider, N as KeyType, O as MAX_CONTENT_BYTES, P as MAX_SEALED_SHARE_CONTENT_BYTES, Q as MAX_SHARE_ARTIFACT_BYTES, S as MAX_SHARE_CONTENT_BYTES, T as MemorySenderShareKeyStorage, U as MemorySenderShareRecordStorage, V as MemoryShareCache, W as OwnerDelegationPermission, X as OwnerDelegationReceipt, Y as OwnerShareAction, Z as OwnerShareDecryption, _ as OwnerShareMatcher, $ as OwnerSharePolicyRegistration, a0 as OwnerSharePolicyRegistrationReceipt, a1 as OwnerSharePolicyV2, a2 as PortableDelegationImportReceipt, a3 as ReceiveOptions, a4 as RegisterOwnerSharePolicyParams, a5 as SenderShareKeyStorage, a6 as SenderShareRecord, a7 as SenderShareRecordStorage, a8 as SenderShareRevocationScope, a9 as SenderShareStore, aa as ShareAccess, ab as ShareAccessError, ac as ShareAccessV2, ad as ShareAction, ae as ShareActionSchema, af as ShareAddressedDelegationEnvelopeV2, ag as ShareAddressedDelegationEnvelopeV2Schema, ah as ShareAddressedDelegationRequestV2, ai as ShareAddressedDelegationRequestV2Schema, aj as ShareAddressedDelegationResponseV2, ak as ShareAddressedDelegationResponseV2Schema, al as ShareAddressedRecipientMatcher, am as ShareArtifactInput, an as ShareArtifactResult, ao as ShareArtifactV2, ap as ShareCache, aq as ShareCacheEntry, ar as ShareCacheKey, as as ShareCacheMetadata, at as ShareCapabilityLike, au as ShareConflict, av as ShareContentMetadata, aw as ShareContentSource, ax as ShareDelegationPreflight, ay as ShareDeliveryAuthorizationV3Receipt, az as ShareDeliveryAuthorizationV3Request, aA as ShareDetachedProof, aB as ShareEnvelopeError, aC as ShareEnvelopeV2, aD as ShareExpiryBounds, aE as ShareKvContentSource, aF as ShareLink, aG as ShareLinkData, aH as ShareLinkLocation, aI as ShareListEntry, aJ as ShareListResult, aK as ShareNativeAction, aL as ShareNativeInvokeEnvelopeV1, aM as ShareNativeInvokeErrorResult, aN as ShareNativeInvokeInput, aO as ShareNativeInvokeResult, aP as ShareNativeInvokeSuccessResult, aQ as ShareNativeResponse, aR as ShareNativeResponseSchema, aS as SharePolicy, aT as SharePolicyBinding, aU as SharePolicySession, aV as SharePolicySessionV1, aW as SharePolicySessionWireV1, aX as SharePortableDelegation, aY as ShareReadInvocationV1, aZ as ShareReadResult, a_ as ShareRecipientClient, a$ as ShareRecipientClientOptions, b0 as ShareRecipientClientOptionsSchema, b1 as ShareRecipientPolicy, b2 as ShareRecipientPolicySchema, b3 as ShareRecipientResult, b4 as ShareRecipientTarget, b5 as ShareRecipientTargetSchema, b6 as ShareResource, b7 as ShareResourceSchema, b8 as ShareSaveOptions, b9 as ShareSchema, ba as ShareSqlContentSource, bb as ShareWireAction, bc as SharingService, bd as SharingServiceConfig, be as SignedDelegation, bf as SpaceInfo, bg as SpaceOwnership, bh as VerifyShareEnvelopeOptions, bi as canonicalOwnerSharePolicy, bj as computeOwnerShareRegistrationCid, bk as computeShareCid, bl as createDelegatedShareKey, bm as createPolicyEnforcementDelegation, bn as createShareArtifact, bo as createShareArtifactAsync, bp as createSharePolicy, bq as createSharingService, br as decryptShareBytesAsync, bs as delegatePortablePolicySession, bt as encodeInlineShareUrl, bu as encodeShareArtifact, bv as encodeShareUrl, bw as encryptShareBytes, bx as encryptShareBytesAsync, by as importPortableDelegation, bz as intersectShareCapabilities, bA as isV2ShareLink, bB as normalizeShareActions, bC as normalizeShareRecipientTarget, bD as normalizeShareResource, bE as parsePortableDelegation, bF as parseShareArtifact, bG as parseShareUrl, bH as restoreDelegatedShareKey, bI as serializePortableDelegation, bJ as shareCapabilityAllows, bK as signShareEnvelope, bL as validateOwnerSharePolicyRegistration, bM as validateOwnerSharePolicyRegistrationBytes, bN as validateShareDeliveryAuthorizationV3Bytes, bO as verifyShareCid, bP as verifyShareEnvelope } from '../recipient-types.schema-BKrmP8hJ.cjs';
1
+ import { I as ICapabilityKeyRegistry, D as DelegationManager, R as Result, a as DelegationError } from '../recipient-types.schema-ZCBMchyn.cjs';
2
+ export { A as AccountDelegationPage, b as AccountDelegationQueryOptions, c as AccountDelegationRecord, d as AccountDelegationResource, C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, e as CapabilityEntry, f as CreateDelegationParams, g as CreateDelegationWasmParams, h as CreateDelegationWasmResult, i as CreateOwnerDelegationParams, j as CredentialInvitationRequest, k as DELIVERY_ADMISSION_DOMAIN, l as DelegateReceivedShareParams, m as DelegatedResource, n as DelegatedShareAccess, o as DelegatedShareKey, p as Delegation, q as DelegationApiResponse, r as DelegationChain, s as DelegationChainV2, t as DelegationDirection, u as DelegationErrorCode, v as DelegationErrorCodes, w as DelegationFilters, x as DelegationManagerConfig, y as DelegationRecord, z as DelegationRevocationReceipt, B as DelegationStatus, E as DeliveryAdmission, F as EncodedShareData, G as GenerateShareParams, H as ISharingService, J as IngestOptions, K as JWK, L as KeyInfo, M as KeyProvider, N as KeyType, O as MAX_CONTENT_BYTES, P as MAX_SEALED_SHARE_CONTENT_BYTES, Q as MAX_SHARE_ARTIFACT_BYTES, S as MAX_SHARE_CONTENT_BYTES, T as MemorySenderShareKeyStorage, U as MemorySenderShareRecordStorage, V as MemoryShareCache, W as OwnerDelegationPermission, X as OwnerDelegationReceipt, Y as OwnerShareAction, Z as OwnerShareDecryption, _ as OwnerShareMatcher, $ as OwnerSharePolicyRegistration, a0 as OwnerSharePolicyRegistrationReceipt, a1 as OwnerSharePolicyV2, a2 as PortableDelegationImportReceipt, a3 as ReceiveOptions, a4 as RegisterOwnerSharePolicyParams, a5 as SenderShareKeyStorage, a6 as SenderShareRecord, a7 as SenderShareRecordStorage, a8 as SenderShareRevocationScope, a9 as SenderShareStore, aa as ShareAccess, ab as ShareAccessError, ac as ShareAccessV2, ad as ShareAction, ae as ShareActionSchema, af as ShareAddressedDelegationEnvelopeV2, ag as ShareAddressedDelegationEnvelopeV2Schema, ah as ShareAddressedDelegationRequestV2, ai as ShareAddressedDelegationRequestV2Schema, aj as ShareAddressedDelegationResponseV2, ak as ShareAddressedDelegationResponseV2Schema, al as ShareAddressedRecipientMatcher, am as ShareArtifactInput, an as ShareArtifactResult, ao as ShareArtifactV2, ap as ShareCache, aq as ShareCacheEntry, ar as ShareCacheKey, as as ShareCacheMetadata, at as ShareCapabilityLike, au as ShareConflict, av as ShareContentMetadata, aw as ShareContentSource, ax as ShareDelegationPreflight, ay as ShareDeliveryAuthorizationV3Receipt, az as ShareDeliveryAuthorizationV3Request, aA as ShareDetachedProof, aB as ShareEnvelopeError, aC as ShareEnvelopeV2, aD as ShareExpiryBounds, aE as ShareKvContentSource, aF as ShareLink, aG as ShareLinkData, aH as ShareLinkLocation, aI as ShareListEntry, aJ as ShareListResult, aK as ShareNativeAction, aL as ShareNativeInvokeEnvelopeV1, aM as ShareNativeInvokeErrorResult, aN as ShareNativeInvokeInput, aO as ShareNativeInvokeResult, aP as ShareNativeInvokeSuccessResult, aQ as ShareNativeResponse, aR as ShareNativeResponseSchema, aS as SharePolicy, aT as SharePolicyBinding, aU as SharePolicySession, aV as SharePolicySessionV1, aW as SharePolicySessionWireV1, aX as SharePortableDelegation, aY as ShareReadInvocationV1, aZ as ShareReadResult, a_ as ShareRecipientClient, a$ as ShareRecipientClientOptions, b0 as ShareRecipientClientOptionsSchema, b1 as ShareRecipientPolicy, b2 as ShareRecipientPolicySchema, b3 as ShareRecipientResult, b4 as ShareRecipientTarget, b5 as ShareRecipientTargetSchema, b6 as ShareResource, b7 as ShareResourceSchema, b8 as ShareSaveOptions, b9 as ShareSchema, ba as ShareSqlContentSource, bb as ShareWireAction, bc as SharingService, bd as SharingServiceConfig, be as SignedDelegation, bf as SpaceInfo, bg as SpaceOwnership, bh as VerifyShareEnvelopeOptions, bi as canonicalOwnerSharePolicy, bj as computeOwnerShareRegistrationCid, bk as computeShareCid, bl as createDelegatedShareKey, bm as createPolicyEnforcementDelegation, bn as createShareArtifact, bo as createShareArtifactAsync, bp as createSharePolicy, bq as createSharingService, br as decryptShareBytesAsync, bs as delegatePortablePolicySession, bt as encodeInlineShareUrl, bu as encodeShareArtifact, bv as encodeShareUrl, bw as encryptShareBytes, bx as encryptShareBytesAsync, by as importPortableDelegation, bz as intersectShareCapabilities, bA as isV2ShareLink, bB as normalizeShareActions, bC as normalizeShareRecipientTarget, bD as normalizeShareResource, bE as parsePortableDelegation, bF as parseShareArtifact, bG as parseShareUrl, bH as restoreDelegatedShareKey, bI as serializePortableDelegation, bJ as shareCapabilityAllows, bK as signShareEnvelope, bL as validateOwnerSharePolicyRegistration, bM as validateOwnerSharePolicyRegistrationBytes, bN as validateShareDeliveryAuthorizationV3Bytes, bO as verifyShareCid, bP as verifyShareEnvelope } from '../recipient-types.schema-ZCBMchyn.cjs';
3
3
  export { EncryptedSenderShareHistory, EncryptedShareHistoryStorage, MemoryEncryptedShareHistoryStorage, ShareAuthorizationAdapter, ShareAuthorizationDenied, ShareAuthorizationMethod, ShareAuthorizationReady, ShareAuthorizationRequired, ShareAuthorizationResult, ShareDeliveryAdapter, ShareErrorCode, ShareErrorInfo, ShareFetchOptions, ShareHistoryView, ShareInspection, ShareMetadata, ShareNotifyResult, ShareNotifyState, SharePolicyPublishAdapter, ShareReceiveError, ShareReceiveResult, ShareRevocationAdapter, ShareRevocationResult, ShareTarget, TargetPublishAdapter, TargetPublishInput, TargetPublishOutcome, authorizationMethodForTarget, authorizeShare, claimShare, inspectShare, listShares, notifyShare, publishPolicyShare, publishTargetShare, receiveShare, resumeShareAuthorization, revokeShare, showShare, toShareErrorInfo } from '@tinycloud/share-sdk';
4
4
  import { z } from 'zod';
5
5
  import { ServiceSession, InvokeFunction, FetchFunction, IKVService } from '@tinycloud/sdk-services';
@@ -101,10 +101,10 @@ declare const EncodedShareDataSchema: z.ZodObject<{
101
101
  authHeader: z.ZodOptional<z.ZodString>;
102
102
  }, "strip", z.ZodTypeAny, {
103
103
  path: string;
104
- expiry: Date;
105
- actions: string[];
106
104
  spaceId: string;
107
105
  cid: string;
106
+ expiry: Date;
107
+ actions: string[];
108
108
  delegateDID: string;
109
109
  isRevoked: boolean;
110
110
  caveats?: Record<string, unknown>[] | undefined;
@@ -115,10 +115,10 @@ declare const EncodedShareDataSchema: z.ZodObject<{
115
115
  authHeader?: string | undefined;
116
116
  }, {
117
117
  path: string;
118
- expiry: Date;
119
- actions: string[];
120
118
  spaceId: string;
121
119
  cid: string;
120
+ expiry: Date;
121
+ actions: string[];
122
122
  delegateDID: string;
123
123
  isRevoked: boolean;
124
124
  caveats?: Record<string, unknown>[] | undefined;
@@ -138,6 +138,22 @@ declare const EncodedShareDataSchema: z.ZodObject<{
138
138
  version: z.ZodLiteral<1>;
139
139
  }, "strip", z.ZodTypeAny, {
140
140
  path: string;
141
+ spaceId: string;
142
+ delegation: {
143
+ path: string;
144
+ spaceId: string;
145
+ cid: string;
146
+ expiry: Date;
147
+ actions: string[];
148
+ delegateDID: string;
149
+ isRevoked: boolean;
150
+ caveats?: Record<string, unknown>[] | undefined;
151
+ createdAt?: Date | undefined;
152
+ delegatorDID?: string | undefined;
153
+ parentCid?: string | undefined;
154
+ allowSubDelegation?: boolean | undefined;
155
+ authHeader?: string | undefined;
156
+ };
141
157
  version: 1;
142
158
  key: {
143
159
  kty: string;
@@ -152,12 +168,17 @@ declare const EncodedShareDataSchema: z.ZodObject<{
152
168
  use?: string | undefined;
153
169
  key_ops?: string[] | undefined;
154
170
  };
171
+ keyDid: string;
172
+ host: string;
173
+ }, {
174
+ path: string;
175
+ spaceId: string;
155
176
  delegation: {
156
177
  path: string;
157
- expiry: Date;
158
- actions: string[];
159
178
  spaceId: string;
160
179
  cid: string;
180
+ expiry: Date;
181
+ actions: string[];
161
182
  delegateDID: string;
162
183
  isRevoked: boolean;
163
184
  caveats?: Record<string, unknown>[] | undefined;
@@ -167,11 +188,6 @@ declare const EncodedShareDataSchema: z.ZodObject<{
167
188
  allowSubDelegation?: boolean | undefined;
168
189
  authHeader?: string | undefined;
169
190
  };
170
- spaceId: string;
171
- keyDid: string;
172
- host: string;
173
- }, {
174
- path: string;
175
191
  version: 1;
176
192
  key: {
177
193
  kty: string;
@@ -186,22 +202,6 @@ declare const EncodedShareDataSchema: z.ZodObject<{
186
202
  use?: string | undefined;
187
203
  key_ops?: string[] | undefined;
188
204
  };
189
- delegation: {
190
- path: string;
191
- expiry: Date;
192
- actions: string[];
193
- spaceId: string;
194
- cid: string;
195
- delegateDID: string;
196
- isRevoked: boolean;
197
- caveats?: Record<string, unknown>[] | undefined;
198
- createdAt?: Date | undefined;
199
- delegatorDID?: string | undefined;
200
- parentCid?: string | undefined;
201
- allowSubDelegation?: boolean | undefined;
202
- authHeader?: string | undefined;
203
- };
204
- spaceId: string;
205
205
  keyDid: string;
206
206
  host: string;
207
207
  }>;
@@ -1,5 +1,5 @@
1
- import { I as ICapabilityKeyRegistry, D as DelegationManager, R as Result, a as DelegationError } from '../recipient-types.schema-BKrmP8hJ.js';
2
- export { A as AccountDelegationPage, b as AccountDelegationQueryOptions, c as AccountDelegationRecord, d as AccountDelegationResource, C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, e as CapabilityEntry, f as CreateDelegationParams, g as CreateDelegationWasmParams, h as CreateDelegationWasmResult, i as CreateOwnerDelegationParams, j as CredentialInvitationRequest, k as DELIVERY_ADMISSION_DOMAIN, l as DelegateReceivedShareParams, m as DelegatedResource, n as DelegatedShareAccess, o as DelegatedShareKey, p as Delegation, q as DelegationApiResponse, r as DelegationChain, s as DelegationChainV2, t as DelegationDirection, u as DelegationErrorCode, v as DelegationErrorCodes, w as DelegationFilters, x as DelegationManagerConfig, y as DelegationRecord, z as DelegationRevocationReceipt, B as DelegationStatus, E as DeliveryAdmission, F as EncodedShareData, G as GenerateShareParams, H as ISharingService, J as IngestOptions, K as JWK, L as KeyInfo, M as KeyProvider, N as KeyType, O as MAX_CONTENT_BYTES, P as MAX_SEALED_SHARE_CONTENT_BYTES, Q as MAX_SHARE_ARTIFACT_BYTES, S as MAX_SHARE_CONTENT_BYTES, T as MemorySenderShareKeyStorage, U as MemorySenderShareRecordStorage, V as MemoryShareCache, W as OwnerDelegationPermission, X as OwnerDelegationReceipt, Y as OwnerShareAction, Z as OwnerShareDecryption, _ as OwnerShareMatcher, $ as OwnerSharePolicyRegistration, a0 as OwnerSharePolicyRegistrationReceipt, a1 as OwnerSharePolicyV2, a2 as PortableDelegationImportReceipt, a3 as ReceiveOptions, a4 as RegisterOwnerSharePolicyParams, a5 as SenderShareKeyStorage, a6 as SenderShareRecord, a7 as SenderShareRecordStorage, a8 as SenderShareRevocationScope, a9 as SenderShareStore, aa as ShareAccess, ab as ShareAccessError, ac as ShareAccessV2, ad as ShareAction, ae as ShareActionSchema, af as ShareAddressedDelegationEnvelopeV2, ag as ShareAddressedDelegationEnvelopeV2Schema, ah as ShareAddressedDelegationRequestV2, ai as ShareAddressedDelegationRequestV2Schema, aj as ShareAddressedDelegationResponseV2, ak as ShareAddressedDelegationResponseV2Schema, al as ShareAddressedRecipientMatcher, am as ShareArtifactInput, an as ShareArtifactResult, ao as ShareArtifactV2, ap as ShareCache, aq as ShareCacheEntry, ar as ShareCacheKey, as as ShareCacheMetadata, at as ShareCapabilityLike, au as ShareConflict, av as ShareContentMetadata, aw as ShareContentSource, ax as ShareDelegationPreflight, ay as ShareDeliveryAuthorizationV3Receipt, az as ShareDeliveryAuthorizationV3Request, aA as ShareDetachedProof, aB as ShareEnvelopeError, aC as ShareEnvelopeV2, aD as ShareExpiryBounds, aE as ShareKvContentSource, aF as ShareLink, aG as ShareLinkData, aH as ShareLinkLocation, aI as ShareListEntry, aJ as ShareListResult, aK as ShareNativeAction, aL as ShareNativeInvokeEnvelopeV1, aM as ShareNativeInvokeErrorResult, aN as ShareNativeInvokeInput, aO as ShareNativeInvokeResult, aP as ShareNativeInvokeSuccessResult, aQ as ShareNativeResponse, aR as ShareNativeResponseSchema, aS as SharePolicy, aT as SharePolicyBinding, aU as SharePolicySession, aV as SharePolicySessionV1, aW as SharePolicySessionWireV1, aX as SharePortableDelegation, aY as ShareReadInvocationV1, aZ as ShareReadResult, a_ as ShareRecipientClient, a$ as ShareRecipientClientOptions, b0 as ShareRecipientClientOptionsSchema, b1 as ShareRecipientPolicy, b2 as ShareRecipientPolicySchema, b3 as ShareRecipientResult, b4 as ShareRecipientTarget, b5 as ShareRecipientTargetSchema, b6 as ShareResource, b7 as ShareResourceSchema, b8 as ShareSaveOptions, b9 as ShareSchema, ba as ShareSqlContentSource, bb as ShareWireAction, bc as SharingService, bd as SharingServiceConfig, be as SignedDelegation, bf as SpaceInfo, bg as SpaceOwnership, bh as VerifyShareEnvelopeOptions, bi as canonicalOwnerSharePolicy, bj as computeOwnerShareRegistrationCid, bk as computeShareCid, bl as createDelegatedShareKey, bm as createPolicyEnforcementDelegation, bn as createShareArtifact, bo as createShareArtifactAsync, bp as createSharePolicy, bq as createSharingService, br as decryptShareBytesAsync, bs as delegatePortablePolicySession, bt as encodeInlineShareUrl, bu as encodeShareArtifact, bv as encodeShareUrl, bw as encryptShareBytes, bx as encryptShareBytesAsync, by as importPortableDelegation, bz as intersectShareCapabilities, bA as isV2ShareLink, bB as normalizeShareActions, bC as normalizeShareRecipientTarget, bD as normalizeShareResource, bE as parsePortableDelegation, bF as parseShareArtifact, bG as parseShareUrl, bH as restoreDelegatedShareKey, bI as serializePortableDelegation, bJ as shareCapabilityAllows, bK as signShareEnvelope, bL as validateOwnerSharePolicyRegistration, bM as validateOwnerSharePolicyRegistrationBytes, bN as validateShareDeliveryAuthorizationV3Bytes, bO as verifyShareCid, bP as verifyShareEnvelope } from '../recipient-types.schema-BKrmP8hJ.js';
1
+ import { I as ICapabilityKeyRegistry, D as DelegationManager, R as Result, a as DelegationError } from '../recipient-types.schema-ZCBMchyn.js';
2
+ export { A as AccountDelegationPage, b as AccountDelegationQueryOptions, c as AccountDelegationRecord, d as AccountDelegationResource, C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, e as CapabilityEntry, f as CreateDelegationParams, g as CreateDelegationWasmParams, h as CreateDelegationWasmResult, i as CreateOwnerDelegationParams, j as CredentialInvitationRequest, k as DELIVERY_ADMISSION_DOMAIN, l as DelegateReceivedShareParams, m as DelegatedResource, n as DelegatedShareAccess, o as DelegatedShareKey, p as Delegation, q as DelegationApiResponse, r as DelegationChain, s as DelegationChainV2, t as DelegationDirection, u as DelegationErrorCode, v as DelegationErrorCodes, w as DelegationFilters, x as DelegationManagerConfig, y as DelegationRecord, z as DelegationRevocationReceipt, B as DelegationStatus, E as DeliveryAdmission, F as EncodedShareData, G as GenerateShareParams, H as ISharingService, J as IngestOptions, K as JWK, L as KeyInfo, M as KeyProvider, N as KeyType, O as MAX_CONTENT_BYTES, P as MAX_SEALED_SHARE_CONTENT_BYTES, Q as MAX_SHARE_ARTIFACT_BYTES, S as MAX_SHARE_CONTENT_BYTES, T as MemorySenderShareKeyStorage, U as MemorySenderShareRecordStorage, V as MemoryShareCache, W as OwnerDelegationPermission, X as OwnerDelegationReceipt, Y as OwnerShareAction, Z as OwnerShareDecryption, _ as OwnerShareMatcher, $ as OwnerSharePolicyRegistration, a0 as OwnerSharePolicyRegistrationReceipt, a1 as OwnerSharePolicyV2, a2 as PortableDelegationImportReceipt, a3 as ReceiveOptions, a4 as RegisterOwnerSharePolicyParams, a5 as SenderShareKeyStorage, a6 as SenderShareRecord, a7 as SenderShareRecordStorage, a8 as SenderShareRevocationScope, a9 as SenderShareStore, aa as ShareAccess, ab as ShareAccessError, ac as ShareAccessV2, ad as ShareAction, ae as ShareActionSchema, af as ShareAddressedDelegationEnvelopeV2, ag as ShareAddressedDelegationEnvelopeV2Schema, ah as ShareAddressedDelegationRequestV2, ai as ShareAddressedDelegationRequestV2Schema, aj as ShareAddressedDelegationResponseV2, ak as ShareAddressedDelegationResponseV2Schema, al as ShareAddressedRecipientMatcher, am as ShareArtifactInput, an as ShareArtifactResult, ao as ShareArtifactV2, ap as ShareCache, aq as ShareCacheEntry, ar as ShareCacheKey, as as ShareCacheMetadata, at as ShareCapabilityLike, au as ShareConflict, av as ShareContentMetadata, aw as ShareContentSource, ax as ShareDelegationPreflight, ay as ShareDeliveryAuthorizationV3Receipt, az as ShareDeliveryAuthorizationV3Request, aA as ShareDetachedProof, aB as ShareEnvelopeError, aC as ShareEnvelopeV2, aD as ShareExpiryBounds, aE as ShareKvContentSource, aF as ShareLink, aG as ShareLinkData, aH as ShareLinkLocation, aI as ShareListEntry, aJ as ShareListResult, aK as ShareNativeAction, aL as ShareNativeInvokeEnvelopeV1, aM as ShareNativeInvokeErrorResult, aN as ShareNativeInvokeInput, aO as ShareNativeInvokeResult, aP as ShareNativeInvokeSuccessResult, aQ as ShareNativeResponse, aR as ShareNativeResponseSchema, aS as SharePolicy, aT as SharePolicyBinding, aU as SharePolicySession, aV as SharePolicySessionV1, aW as SharePolicySessionWireV1, aX as SharePortableDelegation, aY as ShareReadInvocationV1, aZ as ShareReadResult, a_ as ShareRecipientClient, a$ as ShareRecipientClientOptions, b0 as ShareRecipientClientOptionsSchema, b1 as ShareRecipientPolicy, b2 as ShareRecipientPolicySchema, b3 as ShareRecipientResult, b4 as ShareRecipientTarget, b5 as ShareRecipientTargetSchema, b6 as ShareResource, b7 as ShareResourceSchema, b8 as ShareSaveOptions, b9 as ShareSchema, ba as ShareSqlContentSource, bb as ShareWireAction, bc as SharingService, bd as SharingServiceConfig, be as SignedDelegation, bf as SpaceInfo, bg as SpaceOwnership, bh as VerifyShareEnvelopeOptions, bi as canonicalOwnerSharePolicy, bj as computeOwnerShareRegistrationCid, bk as computeShareCid, bl as createDelegatedShareKey, bm as createPolicyEnforcementDelegation, bn as createShareArtifact, bo as createShareArtifactAsync, bp as createSharePolicy, bq as createSharingService, br as decryptShareBytesAsync, bs as delegatePortablePolicySession, bt as encodeInlineShareUrl, bu as encodeShareArtifact, bv as encodeShareUrl, bw as encryptShareBytes, bx as encryptShareBytesAsync, by as importPortableDelegation, bz as intersectShareCapabilities, bA as isV2ShareLink, bB as normalizeShareActions, bC as normalizeShareRecipientTarget, bD as normalizeShareResource, bE as parsePortableDelegation, bF as parseShareArtifact, bG as parseShareUrl, bH as restoreDelegatedShareKey, bI as serializePortableDelegation, bJ as shareCapabilityAllows, bK as signShareEnvelope, bL as validateOwnerSharePolicyRegistration, bM as validateOwnerSharePolicyRegistrationBytes, bN as validateShareDeliveryAuthorizationV3Bytes, bO as verifyShareCid, bP as verifyShareEnvelope } from '../recipient-types.schema-ZCBMchyn.js';
3
3
  export { EncryptedSenderShareHistory, EncryptedShareHistoryStorage, MemoryEncryptedShareHistoryStorage, ShareAuthorizationAdapter, ShareAuthorizationDenied, ShareAuthorizationMethod, ShareAuthorizationReady, ShareAuthorizationRequired, ShareAuthorizationResult, ShareDeliveryAdapter, ShareErrorCode, ShareErrorInfo, ShareFetchOptions, ShareHistoryView, ShareInspection, ShareMetadata, ShareNotifyResult, ShareNotifyState, SharePolicyPublishAdapter, ShareReceiveError, ShareReceiveResult, ShareRevocationAdapter, ShareRevocationResult, ShareTarget, TargetPublishAdapter, TargetPublishInput, TargetPublishOutcome, authorizationMethodForTarget, authorizeShare, claimShare, inspectShare, listShares, notifyShare, publishPolicyShare, publishTargetShare, receiveShare, resumeShareAuthorization, revokeShare, showShare, toShareErrorInfo } from '@tinycloud/share-sdk';
4
4
  import { z } from 'zod';
5
5
  import { ServiceSession, InvokeFunction, FetchFunction, IKVService } from '@tinycloud/sdk-services';
@@ -101,10 +101,10 @@ declare const EncodedShareDataSchema: z.ZodObject<{
101
101
  authHeader: z.ZodOptional<z.ZodString>;
102
102
  }, "strip", z.ZodTypeAny, {
103
103
  path: string;
104
- expiry: Date;
105
- actions: string[];
106
104
  spaceId: string;
107
105
  cid: string;
106
+ expiry: Date;
107
+ actions: string[];
108
108
  delegateDID: string;
109
109
  isRevoked: boolean;
110
110
  caveats?: Record<string, unknown>[] | undefined;
@@ -115,10 +115,10 @@ declare const EncodedShareDataSchema: z.ZodObject<{
115
115
  authHeader?: string | undefined;
116
116
  }, {
117
117
  path: string;
118
- expiry: Date;
119
- actions: string[];
120
118
  spaceId: string;
121
119
  cid: string;
120
+ expiry: Date;
121
+ actions: string[];
122
122
  delegateDID: string;
123
123
  isRevoked: boolean;
124
124
  caveats?: Record<string, unknown>[] | undefined;
@@ -138,6 +138,22 @@ declare const EncodedShareDataSchema: z.ZodObject<{
138
138
  version: z.ZodLiteral<1>;
139
139
  }, "strip", z.ZodTypeAny, {
140
140
  path: string;
141
+ spaceId: string;
142
+ delegation: {
143
+ path: string;
144
+ spaceId: string;
145
+ cid: string;
146
+ expiry: Date;
147
+ actions: string[];
148
+ delegateDID: string;
149
+ isRevoked: boolean;
150
+ caveats?: Record<string, unknown>[] | undefined;
151
+ createdAt?: Date | undefined;
152
+ delegatorDID?: string | undefined;
153
+ parentCid?: string | undefined;
154
+ allowSubDelegation?: boolean | undefined;
155
+ authHeader?: string | undefined;
156
+ };
141
157
  version: 1;
142
158
  key: {
143
159
  kty: string;
@@ -152,12 +168,17 @@ declare const EncodedShareDataSchema: z.ZodObject<{
152
168
  use?: string | undefined;
153
169
  key_ops?: string[] | undefined;
154
170
  };
171
+ keyDid: string;
172
+ host: string;
173
+ }, {
174
+ path: string;
175
+ spaceId: string;
155
176
  delegation: {
156
177
  path: string;
157
- expiry: Date;
158
- actions: string[];
159
178
  spaceId: string;
160
179
  cid: string;
180
+ expiry: Date;
181
+ actions: string[];
161
182
  delegateDID: string;
162
183
  isRevoked: boolean;
163
184
  caveats?: Record<string, unknown>[] | undefined;
@@ -167,11 +188,6 @@ declare const EncodedShareDataSchema: z.ZodObject<{
167
188
  allowSubDelegation?: boolean | undefined;
168
189
  authHeader?: string | undefined;
169
190
  };
170
- spaceId: string;
171
- keyDid: string;
172
- host: string;
173
- }, {
174
- path: string;
175
191
  version: 1;
176
192
  key: {
177
193
  kty: string;
@@ -186,22 +202,6 @@ declare const EncodedShareDataSchema: z.ZodObject<{
186
202
  use?: string | undefined;
187
203
  key_ops?: string[] | undefined;
188
204
  };
189
- delegation: {
190
- path: string;
191
- expiry: Date;
192
- actions: string[];
193
- spaceId: string;
194
- cid: string;
195
- delegateDID: string;
196
- isRevoked: boolean;
197
- caveats?: Record<string, unknown>[] | undefined;
198
- createdAt?: Date | undefined;
199
- delegatorDID?: string | undefined;
200
- parentCid?: string | undefined;
201
- allowSubDelegation?: boolean | undefined;
202
- authHeader?: string | undefined;
203
- };
204
- spaceId: string;
205
205
  keyDid: string;
206
206
  host: string;
207
207
  }>;
@@ -328,6 +328,8 @@ var DelegationManagerConfigSchema = z.object({
328
328
  (val) => val === void 0 || typeof val === "function",
329
329
  { message: "Expected an invokeAny function or undefined" }
330
330
  ).optional(),
331
+ /** Optional owner-signed authorization for direct CID revocation */
332
+ signOwnerRevocation: z.custom().optional(),
331
333
  /** Optional custom fetch implementation */
332
334
  fetch: z.unknown().refine(
333
335
  (val) => val === void 0 || typeof val === "function",
@@ -467,6 +469,7 @@ var DelegationManager = class {
467
469
  this.session = config.session;
468
470
  this.invoke = config.invoke;
469
471
  this.invokeAny = config.invokeAny;
472
+ this.signOwnerRevocation = config.signOwnerRevocation;
470
473
  this.fetchFn = config.fetch ?? globalThis.fetch.bind(globalThis);
471
474
  this.accountSpaceId = config.accountSpaceId;
472
475
  }
@@ -609,6 +612,9 @@ var DelegationManager = class {
609
612
  * Once revoked, the delegation can no longer be used to access resources.
610
613
  * This also invalidates any sub-delegations derived from this delegation.
611
614
  *
615
+ * Explicit target-space or authority options keep the delegated session
616
+ * signing path even when an owner signer is available.
617
+ *
612
618
  * @param cid - The CID of the delegation to revoke
613
619
  * @returns Result indicating success or an error
614
620
  *
@@ -631,29 +637,35 @@ var DelegationManager = class {
631
637
  };
632
638
  }
633
639
  try {
634
- if (!this.invokeAny) {
640
+ const ownerSigner = options?.targetSpaceId === void 0 && options?.authorityCid === void 0 ? this.signOwnerRevocation : void 0;
641
+ if (!ownerSigner && !this.invokeAny) {
635
642
  return {
636
643
  ok: false,
637
644
  error: createError(
638
645
  DelegationErrorCodes.NOT_INITIALIZED,
639
- "Revocation requires an invokeAny function that can sign the target CID"
646
+ "Revocation requires an owner signer or invokeAny function that can sign the target CID"
640
647
  )
641
648
  };
642
649
  }
643
- const entry = {
644
- resource: `urn:cid:${cid2}`,
645
- ...options?.targetSpaceId === void 0 ? {} : { spaceId: options.targetSpaceId },
646
- service: "delegation",
647
- path: "",
648
- action: DelegationAction.REVOKE
649
- };
650
- if (options?.authorityCid !== void 0) {
651
- Object.defineProperty(entry, "revokeAuthorityCid", {
652
- value: options.authorityCid,
653
- enumerable: false
654
- });
650
+ let headers;
651
+ if (ownerSigner) {
652
+ headers = { Authorization: await ownerSigner(cid2) };
653
+ } else {
654
+ const entry = {
655
+ resource: `urn:cid:${cid2}`,
656
+ ...options?.targetSpaceId === void 0 ? {} : { spaceId: options.targetSpaceId },
657
+ service: "delegation",
658
+ path: "",
659
+ action: DelegationAction.REVOKE
660
+ };
661
+ if (options?.authorityCid !== void 0) {
662
+ Object.defineProperty(entry, "revokeAuthorityCid", {
663
+ value: options.authorityCid,
664
+ enumerable: false
665
+ });
666
+ }
667
+ headers = this.invokeAny(this.session, [entry]);
655
668
  }
656
- const headers = this.invokeAny(this.session, [entry]);
657
669
  const response = await this.fetchFn(`${this.host}/revoke`, {
658
670
  method: "POST",
659
671
  headers
@@ -4217,7 +4229,9 @@ function redactedCode(error) {
4217
4229
  if (error instanceof ShareConflict) return error.code;
4218
4230
  const code3 = error && typeof error === "object" && "code" in error ? error.code : void 0;
4219
4231
  if (typeof code3 !== "string") return "SHARE_INVALID";
4220
- if (code3 === ErrorCodes2.KV_PRECONDITION_FAILED || code3 === ErrorCodes2.KV_CONFLICT || code3 === "412") return "SHARE_CONFLICT";
4232
+ if (code3 === ErrorCodes2.KV_PRECONDITION_FAILED || code3 === "412") return "SHARE_CONFLICT";
4233
+ if (code3 === ErrorCodes2.NODE_BUSY || code3 === ErrorCodes2.REQUEST_TIMEOUT) return "SHARE_OFFLINE";
4234
+ if (code3 === ErrorCodes2.OUTCOME_UNKNOWN) return "SHARE_WRITE_FAILED";
4221
4235
  if (code3 === "KV_NOT_FOUND" || code3 === "NOT_FOUND" || code3 === "404") return "SHARE_NOT_FOUND";
4222
4236
  if (code3.includes("EXPIRED") || code3 === "expired") return "SHARE_EXPIRED";
4223
4237
  if (code3.includes("REVOK")) return "SHARE_REVOKED";
@@ -4456,7 +4470,7 @@ var ShareRecipientClient = class {
4456
4470
  if (portableDelegation !== void 0 && kv !== void 0) {
4457
4471
  const result2 = await kv.put(resolvedPath, bytes2, { contentType: input.contentType ?? envelope.content.mimeType, ifMatch: input.etag });
4458
4472
  if (!result2.ok) {
4459
- if (result2.error.code === ErrorCodes2.KV_PRECONDITION_FAILED || result2.error.code === ErrorCodes2.KV_CONFLICT) throw new ShareConflict(resolvedPath, result2.error.meta?.etag);
4473
+ if (result2.error.code === ErrorCodes2.KV_PRECONDITION_FAILED) throw new ShareConflict(resolvedPath, result2.error.meta?.etag);
4460
4474
  throw result2.error;
4461
4475
  }
4462
4476
  return { etag: result2.data.headers.etag };
@@ -4464,7 +4478,7 @@ var ShareRecipientClient = class {
4464
4478
  if (policySession !== void 0) return this.nativeSave(envelope, policySession, resolvedPath, bytes2, input);
4465
4479
  const result = await kv.put(resolvedPath, bytes2, { contentType: input.contentType ?? envelope.content.mimeType, ifMatch: input.etag });
4466
4480
  if (!result.ok) {
4467
- if (result.error.code === ErrorCodes2.KV_PRECONDITION_FAILED || result.error.code === ErrorCodes2.KV_CONFLICT) throw new ShareConflict(resolvedPath, result.error.meta?.etag);
4481
+ if (result.error.code === ErrorCodes2.KV_PRECONDITION_FAILED) throw new ShareConflict(resolvedPath, result.error.meta?.etag);
4468
4482
  throw result.error;
4469
4483
  }
4470
4484
  return { etag: result.data.headers.etag };