@tinycloud/sdk-core 3.3.0-beta.17 → 3.3.0-beta.20

package/dist/index.d.ts

@@ -3591,6 +3591,341 @@ declare function verifyOwnerNodeBinding(options: VerifyOwnerNodeBindingOptions):
 declare function httpUrlToMultiaddr(input: string): string;
 declare function verifyDidKeyEd25519Signature(did: string, payload: Uint8Array, signature: Uint8Array): boolean;
 
+/**
+ * Three-state registry verdict for an owner DID (TC-1443, TC-1444).
+ *
+ * A registry lookup has exactly three outcomes, and callers must never
+ * collapse them:
+ *
+ * - `registered`: a verified owner record exists. `hosts: []` is a valid
+ *   registered record with no usable hosts (for example a tombstone), not
+ *   "no record".
+ * - `unregistered`: the registry said there is no record and nothing
+ *   remembered says otherwise. Only this state may route an owner to a
+ *   new-user default.
+ * - `unavailable`: anything else. Network errors, timeouts, non-200/404
+ *   statuses, unrecognised or oversize bodies, subject mismatches, bad
+ *   signatures, and records older than the remembered sequence all fail
+ *   closed here.
+ *
+ * {@link classifyRegistryLookup} is a pure classifier over one registry
+ * response. It performs no I/O; `resolveOwnerHosts` (`registry-policy.ts`)
+ * does the lookup for the opt-in `fail-closed` registry policy. The
+ * classifier's rules are written to be portable: the shared vectors in
+ * `test-vectors/registry-verdict/` state them for other implementations.
+ */
+type RegistryVerdictStatus = "registered" | "unregistered" | "unavailable";
+/** Which registry source produced a verdict. */
+type RegistryVerdictSource = "chain" | "chain-cache" | "offchain";
+/** Which source listed a host. `hint` is an address hint not yet confirmed by a node record. */
+type RegistryHostSource = RegistryVerdictSource | "hint";
+interface RegistryHost {
+    /** Node DID that must answer `/info` at these origins, when the record names one. */
+    readonly nodeDid?: string;
+    /**
+     * HTTP(S) origins (`scheme://host[:port]`, no path, query, fragment or
+     * userinfo). Not filtered for HTTPS, address class or node identity: host
+     * selection applies that policy.
+     */
+    readonly urls: readonly string[];
+    readonly source: RegistryHostSource;
+    /** Expiry of the node record the origins came from, when it has one. */
+    readonly expiresAt?: string;
+}
+type RegistryUnavailableReason = 
+/** The registry could not be reached (refused, DNS, TLS, redirect refused). */
+"network-error"
+/** The lookup exceeded its time budget. */
+ | "timeout"
+/** The registry answered with a status other than 200 or 404. */
+ | "http-status"
+/** The body is not the registry's record or not-found response. */
+ | "malformed-response"
+/** The body exceeds {@link REGISTRY_LOOKUP_MAX_BODY_BYTES}. */
+ | "oversize-response"
+/** A record was returned for a different subject. */
+ | "subject-mismatch"
+/** The record signature does not verify for its subject. */
+ | "invalid-signature"
+/** The record's sequence is below the remembered sequence. */
+ | "rollback"
+/** The registry said "not found" for a subject remembered as registered. */
+ | "not-found-after-registered";
+interface RegisteredRegistryVerdict {
+    readonly status: "registered";
+    readonly subject: string;
+    readonly source: RegistryVerdictSource;
+    /** Sequence of the accepted record. Callers persist the maximum they have seen. */
+    readonly sequence: number;
+    /** Listed hosts in record order. Empty when the record lists no usable host. */
+    readonly hosts: readonly RegistryHost[];
+}
+interface UnregisteredRegistryVerdict {
+    readonly status: "unregistered";
+    readonly subject: string;
+    readonly source: RegistryVerdictSource;
+    readonly hosts: readonly [];
+}
+interface UnavailableRegistryVerdict {
+    readonly status: "unavailable";
+    readonly subject: string;
+    readonly source: RegistryVerdictSource;
+    readonly reason: RegistryUnavailableReason;
+    /** Human-readable detail for logs and errors. Not part of the contract. */
+    readonly message: string;
+    readonly hosts: readonly [];
+}
+type RegistryVerdict = RegisteredRegistryVerdict | UnregisteredRegistryVerdict | UnavailableRegistryVerdict;
+/**
+ * One observed registry lookup: an HTTP response, or the reason none arrived.
+ * The I/O layer must cap the raw body while reading it (as
+ * `fetchLocationRecord` does); `body` is that capped body decoded as UTF-8.
+ */
+type RegistryLookupResponse = {
+    readonly kind: "http";
+    readonly status: number;
+    readonly body: string;
+} | {
+    readonly kind: "network-error";
+} | {
+    readonly kind: "timeout";
+};
+interface ClassifyRegistryLookupOptions {
+    /**
+     * Highest record sequence previously accepted for this subject. Its
+     * presence means the subject is known to be registered: a later not-found
+     * or an older record is `unavailable`, never `unregistered`.
+     */
+    rememberedSequence?: number | null;
+}
+type RegistryLookupInputErrorCode = "invalid-subject" | "invalid-remembered-sequence";
+/** The caller passed a lookup input that cannot be classified. */
+declare class RegistryLookupInputError extends TypeError {
+    readonly code: RegistryLookupInputErrorCode;
+    constructor(code: RegistryLookupInputErrorCode, message: string);
+}
+/** Largest registry response body accepted, in UTF-8 bytes. */
+declare const REGISTRY_LOOKUP_MAX_BODY_BYTES: number;
+/** The exact body of the location registry's 404 for a subject with no record. */
+declare const REGISTRY_NOT_FOUND_BODY = "{\"error\":\"location record not found\"}";
+/**
+ * Classify one off-chain location registry v1 response for `subject`.
+ *
+ * Checks run in this order, and the first failure decides the reason:
+ * transport (`network-error`, `timeout`); status other than 200 or 404
+ * (`http-status`); body over 65536 UTF-8 bytes (`oversize-response`). A 404
+ * is `unregistered` only if its body, with leading and trailing JSON
+ * whitespace removed, is exactly {@link REGISTRY_NOT_FOUND_BODY} and no
+ * sequence is remembered. A 200 must be strict JSON holding a valid v1
+ * `record` (`malformed-response`) for exactly `subject`
+ * (`subject-mismatch`) whose signature verifies (`invalid-signature`) and
+ * whose sequence is not below the remembered one (`rollback`).
+ *
+ * A 404 is unauthenticated: its exact bytes are the only evidence that the
+ * registry itself answered.
+ *
+ * @throws RegistryLookupInputError if `subject` is not a canonical
+ * `did:pkh:eip155:<chainId>:<EIP-55 address>` or Ed25519 `did:key`, or
+ * `rememberedSequence` is not a non-negative safe integer.
+ */
+declare function classifyRegistryLookup(subject: string, response: RegistryLookupResponse, options?: ClassifyRegistryLookupOptions): Promise<RegistryVerdict>;
+
+/**
+ * Registry policy for host resolution and space creation (TC-1443).
+ *
+ * - `legacy-fallback` (the default, deprecated): {@link resolveTinyCloudHosts}
+ *   as before. A registry miss or failure silently routes to the hosted
+ *   fallback node, with a one-time deprecation warning.
+ * - `fail-closed` (opt-in): routing and space creation act on the three-state
+ *   registry verdict. `unavailable` is never treated as `unregistered`.
+ *
+ * Registry lookups key on the owner's signer address, never the session
+ * chain. The v1 registry stores records under an exact
+ * `did:pkh:eip155:<chain>:<EIP-55 address>` subject, so v1 lookups use
+ * {@link registryOwnerSubjectV1} with a configured chain (default 1). Registry
+ * v2 keys owner records on the EIP-55 address alone, chain-independent.
+ */
+
+type RegistryPolicy = "legacy-fallback" | "fail-closed";
+/** Chain of the v1 registry subject when none is configured. */
+declare const DEFAULT_REGISTRY_OWNER_CHAIN_ID = 1;
+/** Host for `unregistered` owners under `fail-closed` when none is configured. */
+declare const DEFAULT_NEW_USER_HOST = "https://node.tinycloud.xyz";
+/** Budget for one registry lookup, covering the request and the body. */
+declare const DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS = 3000;
+/** Default key {@link createLocalStorageRegistrySequenceStore} stores its sequences under. */
+declare const DEFAULT_REGISTRY_SEQUENCE_STORAGE_KEY = "tinycloud.registrySequences.v1";
+/**
+ * The v1 registry subject for an owner: `did:pkh:eip155:<registryChainId>:<EIP-55 address>`.
+ *
+ * Built from the signer address and a configured chain, never from the
+ * session chain, so switching wallet chains never changes the lookup. Registry
+ * v2 will key on the EIP-55 address alone.
+ */
+declare function registryOwnerSubjectV1(address: string, registryChainId?: number): string;
+/**
+ * The highest registry record sequence accepted per subject. A remembered
+ * sequence marks the subject as registered: a later not-found or an older
+ * record is `unavailable`, never `unregistered`.
+ *
+ * `set` is only called with a sequence above the remembered one. A `get`
+ * failure fails that lookup closed (`RegistryUnavailableError`, never
+ * "nothing remembered"). A `set` failure is logged once and the verdict in
+ * hand stands: failing to remember weakens later rollback detection but
+ * never turns a correct `registered` answer into a lockout.
+ */
+interface RegistrySequenceStore {
+    get(subject: string): number | undefined | Promise<number | undefined>;
+    set(subject: string, sequence: number): void | Promise<void>;
+}
+/** In-memory {@link RegistrySequenceStore}. Does not persist across process restarts. */
+declare function createInMemoryRegistrySequenceStore(): RegistrySequenceStore;
+/**
+ * `localStorage`-backed {@link RegistrySequenceStore}, one JSON object under
+ * `storageKey`. Falls back to an in-memory store when `localStorage` is
+ * unavailable. Sequences are also kept in memory, so a failed write (full or
+ * read-only storage) is still remembered for this page. A storage read that
+ * throws, or a corrupt stored value, throws instead of being reset:
+ * forgetting a sequence would let a registry not-found read as
+ * `unregistered`. Remove `storageKey` to reset.
+ */
+declare function createLocalStorageRegistrySequenceStore(storage?: WebStorageLike, storageKey?: string): RegistrySequenceStore;
+interface ResolveOwnerHostsOptions {
+    /** Location registry base URL. Default https://registry.tinycloud.xyz. */
+    registryUrl?: string;
+    /** Remembered sequences. Omit to remember nothing. */
+    sequenceStore?: RegistrySequenceStore;
+    /** Custom fetch implementation. Defaults to globalThis.fetch. */
+    fetch?: typeof fetch;
+    /** Lookup budget in milliseconds. Default {@link DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS}. */
+    timeoutMs?: number;
+}
+/**
+ * Look up `subject` in the off-chain v1 location registry and classify the
+ * answer with {@link classifyRegistryLookup}, using and updating the
+ * remembered sequence. Transport failures, timeouts and oversize or non-UTF-8
+ * bodies are `unavailable` verdicts. Performs no host probing and never
+ * applies a fallback.
+ *
+ * @throws RegistryLookupInputError if `subject` is not canonical or a
+ * remembered sequence is invalid. The subject is length-checked before any
+ * other parsing.
+ */
+declare function resolveOwnerHosts(subject: string, options?: ResolveOwnerHostsOptions): Promise<RegistryVerdict>;
+/** Sign-in found no usable host for a registered owner, or none for an unregistered owner when `newUserHost` is null. */
+declare class NodeNotFoundError extends Error {
+    readonly subject: string;
+    readonly verdict: RegisteredRegistryVerdict | UnregisteredRegistryVerdict;
+    readonly code: "node_not_found";
+    constructor(subject: string, verdict: RegisteredRegistryVerdict | UnregisteredRegistryVerdict);
+}
+/**
+ * The registry could not give a verdict: unreachable, timed out, an invalid
+ * or rolled-back answer, no registry configured, or a lookup that threw
+ * (`cause`). Never treated as "unregistered".
+ */
+declare class RegistryUnavailableError extends Error {
+    readonly subject: string;
+    readonly verdict: UnavailableRegistryVerdict | undefined;
+    readonly code: "registry_unavailable";
+    readonly cause?: unknown;
+    constructor(subject: string, verdict: UnavailableRegistryVerdict | undefined, detail?: {
+        message?: string;
+        cause?: unknown;
+    });
+}
+/** Space creation was refused: the owner's registry record does not list this host. */
+declare class NodeRegistryEntryExistsError extends Error {
+    readonly subject: string;
+    readonly host: string;
+    readonly verdict: RegisteredRegistryVerdict;
+    readonly code: "node_registry_entry_exists";
+    /** HTTPS or loopback origins the owner's record lists, in record order. */
+    readonly registeredHosts: string[];
+    constructor(subject: string, host: string, verdict: RegisteredRegistryVerdict);
+}
+interface LookupOwnerRegistryVerdictOptions {
+    /** Location registry base URL. `null` means none, which is `RegistryUnavailableError`. */
+    registryUrl?: string | null;
+    sequenceStore?: RegistrySequenceStore;
+    fetch?: typeof fetch;
+    timeoutMs?: number;
+}
+/**
+ * {@link resolveOwnerHosts} for policy decisions: a lookup that throws, or no
+ * configured registry, becomes {@link RegistryUnavailableError}. An
+ * `unavailable` verdict is returned as a verdict.
+ */
+declare function lookupOwnerRegistryVerdict(subject: string, options?: LookupOwnerRegistryVerdictOptions): Promise<RegistryVerdict>;
+interface NodeNotFoundContext {
+    readonly error: NodeNotFoundError | RegistryUnavailableError;
+    /** 1 for the first failure, incremented after each `retry`. */
+    readonly attempt: number;
+}
+type NodeNotFoundDecision = {
+    readonly action: "retry";
+} | {
+    readonly action: "use-host";
+    readonly host: string;
+} | {
+    readonly action: "abort";
+};
+/**
+ * Decides what sign-in does when no host can be resolved under `fail-closed`:
+ * look up again, use another host, or abort with the error. A `use-host`
+ * host must be an HTTPS or loopback HTTP origin. The SDK does not verify its
+ * identity, and it persists with the session like any resolved host; space
+ * creation there still goes through the creation guard.
+ */
+type OnNodeNotFound = (context: NodeNotFoundContext) => NodeNotFoundDecision | Promise<NodeNotFoundDecision>;
+interface FailClosedHostOptions extends LookupOwnerRegistryVerdictOptions {
+    /** Chain of the v1 registry subject. Default {@link DEFAULT_REGISTRY_OWNER_CHAIN_ID}. */
+    registryChainId?: number;
+    /**
+     * Host for owners the registry reports as `unregistered`, and only them.
+     * Default {@link DEFAULT_NEW_USER_HOST}. `null`: unregistered owners get
+     * {@link NodeNotFoundError}.
+     */
+    newUserHost?: string | null;
+    /** Without a callback, resolution throws the error. */
+    onNodeNotFound?: OnNodeNotFound;
+    /**
+     * Probe local nodes before routing on the verdict. Default true. Only
+     * configured candidates (`localNodeUrl`, `localLinkName`) and
+     * `*.local.tinycloud.link` hosts from a `registered` verdict are probed.
+     */
+    autoDiscoverLocalNode?: boolean;
+    localNodeUrl?: string;
+    localLinkName?: string;
+    expectedNodeDid?: string;
+    localNodeIdentityStore?: LocalNodeIdentityStore;
+}
+interface FailClosedHosts {
+    hosts: string[];
+    /** The registry verdict behind `hosts`. Absent when a verified local node was used. */
+    verdict?: RegistryVerdict;
+}
+/**
+ * Resolve the hosts for `address` under the `fail-closed` policy. The
+ * registry verdict for {@link registryOwnerSubjectV1} comes first. Then a
+ * verified local node is used if one is configured or listed by a
+ * `registered` verdict. Otherwise `registered` routes to the record's hosts
+ * (record order, HTTPS or loopback only), `unregistered` to `newUserHost`,
+ * and `unavailable` or a record without a usable host goes to
+ * `onNodeNotFound`, else throws.
+ */
+declare function resolveFailClosedTinyCloudHosts(address: string, options?: FailClosedHostOptions): Promise<FailClosedHosts>;
+/**
+ * The space-creation guard under `fail-closed`: creating a space on `host` is
+ * allowed for an `unregistered` owner, or for a `registered` owner whose
+ * record lists `host` as an HTTPS or loopback HTTP origin.
+ *
+ * @throws NodeRegistryEntryExistsError for a registered owner whose record
+ * does not list `host` that way (including an empty record).
+ * @throws RegistryUnavailableError for an `unavailable` verdict.
+ */
+declare function assertSpaceCreationAllowed(verdict: RegistryVerdict, host: string): void;
+
 /**
  * Default lifetimes for the various delegation shapes the SDK mints.
  *
@@ -3620,4 +3955,4 @@ declare const EXPIRY: {
 declare const DEFAULT_SIGNED_READ_URL_EXPIRY_MS: number;
 type ExpiryTier = keyof typeof EXPIRY;
 
-export { ACCOUNT_REGISTRY_PATH, ACCOUNT_REGISTRY_SPACE, type AbilitiesMap, type AccountApplication, type AccountApplicationListOptions, type AccountApplicationRegisterOptions, type AccountDelegation, type AccountDelegationListOptions, AccountDelegationPage, AccountDelegationQueryOptions, type AccountDelegationRevokeOptions, type AccountIndexEnsureResult, type AccountIndexRebuildResult, type AccountIndexStatus, type AccountIndexedReadOptions, AccountService, type AccountServiceConfig, type AccountSpace, type AccountSpaceListOptions, type AccountStatus, AutoApproveSpaceCreationHandler, type AutoRejectStrategy, type AutoSignStrategy, type Bytes, CREDENTIAL_ERROR_CODES, type CallbackStrategy, type CanonicalAddress, type CanonicalParsedNetworkId, type CanonicalTinyCloudIdentity, type CapabilityPresentationEnvelopeV1, CaveatedDelegationUnsupportedError, type ClientSession, ClientSessionSchema, CloudLocationResolutionError, type ComposeManifestOptions, type ComposedManifestRequest, type CreateDelegationFunction, CreateDelegationParams, CredentialError, type CredentialErrorCode, CredentialFlowDescriptor, CredentialHolderBinding, CredentialIssuerMetadata, CredentialRequirement, CredentialStorageReceipt, DEFAULT_DEFAULTS, DEFAULT_EXPIRY, DEFAULT_KNOWLEDGE_ROOT, DEFAULT_LOCAL_NODE_PIN_STORAGE_KEY, DEFAULT_LOCAL_NODE_URL, DEFAULT_MANIFEST_SPACE, DEFAULT_MANIFEST_VERSION, DEFAULT_SIGNED_READ_URL_EXPIRY_MS, DEFAULT_TINYCLOUD_FALLBACK_HOST, DEFAULT_TINYCLOUD_LOCATION_REGISTRY_URL, Delegation, DelegationManager, DelegationRevocationReceipt, type DidCacheKeyOptions, type DidEqualsOptions, type DiscoverLocalTinyCloudNodeOptions, type DiscoveredLocalTinyCloudNode, EMAIL_CREDENTIAL_MAX_AGE_SECONDS, EMAIL_DOMAIN_CREDENTIAL_MAX_AGE_SECONDS, ENCRYPTION_MANIFEST_SPACE, ENCRYPTION_PERMISSION_SERVICE, EXPIRY, type EnsData, EnsDataSchema, type EventEmitterStrategy, type ExpiryTier, type Extension, GenerateShareParams, ICapabilityKeyRegistry, type IENSResolver, type INotificationHandler, type ISessionManager, type ISessionStorage, ISharingService, type ISigner, type ISpace, type ISpaceCreationHandler, type ISpaceScopedDelegations, type ISpaceScopedSharing, type ISpaceService, type IUserAuthorization, type IWasmBindings, IdentityParseError, type ImmutableSiweFields, IssuedCredentialEnvelope, LOCAL_LINK_HOST_SUFFIX, LOCAL_LINK_PROBE_TIMEOUT_MS, LOCAL_LOOPBACK_PROBE_TIMEOUT_MS, type LocalNodeIdentityStore, type LocationCandidate, type LocationCandidateInput, type LocationRecord, type LocationRecordPayload, type LocationRecordSigner, LocationRecordValidationError, LocationRegistryHttpError, type LocationResolutionAttempt, type LocationSource, type Manifest, type ManifestDefaults, type ManifestKnowledge, type ManifestRegistryRecord, type ManifestSecretActions, ManifestValidationError, type NodeInfo, OPENKEY_ACTION_ID_SEPARATOR, OWNER_NODE_BINDING_TIMEOUT_MS, type OpenKeyCallbackStrategy, type OpenKeyManageKeyCallbackStrategy, OpenKeyManageKeyError, type OpenKeyManageKeyErrorCode, type OpenKeyManageKeyFetch, type OpenKeyManageKeySigningRequestBody, type OpenKeyManageKeySigningResponseBody, type OpenKeyManageKeySigningStrategyOptions, type OpenKeySigningRequestBody, type OpenKeySigningResponseBody, type OpenKeySigningStrategyOptions, type ParseRecapFromSiwe, type PartialSiweMessage, type PermissionEntry, PermissionNotInManifestError, type PersistedSessionData, type PersistedSessionProof, type PersistedTinyCloudSession, type PkhDidParts, ProtocolMismatchError, type PublishLocationRecordOptions, type RecapAttenuation, type RegisterBatchSuccess, type ResolveCloudLocationOptions, type ResolveTinyCloudHostsOptions, type ResolvedCapabilities, type ResolvedCloudLocation, type ResolvedDelegate, type ResolvedTinyCloudHosts, type ResourceCapability, SECRETS_SPACE, SERVICE_LONG_TO_SHORT, SERVICE_SHORT_TO_LONG, type ServerHost, SessionExpiredError, ShareLink, type SignCallback, type SignInOptions, type SignRequest, type SignResponse, type SignStrategy, type SignedSiweCacao, SilentNotificationHandler, type SiweConfig, SiweConfigSchema, Space, type SpaceAbilitiesMap, type SpaceConfig, type SpaceCreationContext, type SpaceDelegationParams, type SpaceErrorCode, SpaceErrorCodes, type SpaceHostResult, SpaceInfo, SpaceService, type SpaceServiceConfig, StoredCredentialRecord, type SubsetCheckResult, TERMINAL_DELEGATION_FACT, TINYCLOUD_CANONICAL_IDENTITY_CLAIM, TINYCLOUD_MANAGE_KEY_SCOPE, type TerminalDelegationSigningKey, TinyCloud, type TinyCloudAuthorizationRequestV1, type TinyCloudAuthorizationResultV1, type TinyCloudConfig, type TinyCloudEffectiveGrantV1, type TinyCloudSession, UnsupportedFeatureError, type UserAuthorizationConfig, VAULT_PERMISSION_SERVICE, type ValidatedPersistedSessionProof, type ValidationError, VerifiedCredential, type VerifiedOwnerNodeBinding, type VerifyOwnerNodeBindingOptions, VersionCheckError, type WasmRecapEntry, type WebStorageLike, actionContains, activateSessionWithHost, addressStorageKey, applyPrefix, buildSpaceUri, canonicalDigest, canonicalLocationPayload, canonicalizeAddress, canonicalizeDid, canonicalizeDidUrl, canonicalizeNetworkId, canonicalizeRecapCaveats, checkNodeInfo, composeManifestRequest, createEmailCredentialRequirement, createEmailDomainCredentialRequirement, createHolderBinding, createInMemoryLocalNodeIdentityStore, createLocalStorageLocalNodeIdentityStore, createOpenKeyCallbackSigningStrategy, createOpenKeyManageKeySigningStrategy, createSpaceService, createStorageReceipt, createStoredCredentialRecord, credentialEndpointPath, credentialError, credentialIndexKey, credentialMatchesRequirement, credentialRecordKey, credentialRequirementDigest, decodeBase64Url, defaultSignStrategy, defaultSpaceCreationHandler, descriptorSatisfiesRequirement, didCacheKey, didEquals, diffImmutableSiweFields, discoverLocalTinyCloudNode, encodeBase64Url, expandActionShortNames, expandPermissionEntries, expandPermissionEntry, extractImmutableSiweFields, extractRecapAttenuations, fetchLocationRecord, fetchPeerId, hasTinyCloudManageKeyScope, holderBindingCanonicalBytes, holderBindingSigningBytes, httpResponseError, httpUrlToMultiaddr, isCapabilitySubset, isDigest, isEvmAddress, isExplicitOnlyAction, isPlausibleOpenKeyActionId, loadManifest, locationPayloadForRecord, makePkhSpaceId, makePublicSpaceId, manifestAbilitiesUnion, markDelegationTerminal, multiaddrToHttpUrl, normalizeDefaults, parseCanonicalNetworkId, parseCanonicalRecapResource, parseCanonicalTinyCloudIdentity, parseCanonicalTinyCloudIdentityClaims, parseExpiry, parsePkhDid, parseRecapCapabilities, parseSignedSiweCacao, parseSpaceUri, pkhDid, principalDid, principalDidEquals, publishLocationRecord, recapCaveatsEqual, requestTinyCloudManageKeyScope, resolveCloudLocation, resolveManifest, resolveManifestKnowledgeRoot, resolveTinyCloudHosts, resourceCapabilitiesToAbilitiesMap, resourceCapabilitiesToSpaceAbilitiesMap, sha256Base64Url, signLocationRecord, submitHostDelegation, unauthorizedRecapCapabilities, validateAuthorizationResultV1, validateClientSession, validateCredentialFlowDescriptor, validateCredentialHolderBinding, validateCredentialRequirement, validateLocationRecord, validateLocationRecordPayload, validateManifest, validatePersistedSessionData, verifyDidKeyEd25519Signature, verifyEip191MessageSignature, verifyIssuedCredential, verifyLocationRecord, verifyOwnerNodeBinding, verifyStorageReceipt };
+export { ACCOUNT_REGISTRY_PATH, ACCOUNT_REGISTRY_SPACE, type AbilitiesMap, type AccountApplication, type AccountApplicationListOptions, type AccountApplicationRegisterOptions, type AccountDelegation, type AccountDelegationListOptions, AccountDelegationPage, AccountDelegationQueryOptions, type AccountDelegationRevokeOptions, type AccountIndexEnsureResult, type AccountIndexRebuildResult, type AccountIndexStatus, type AccountIndexedReadOptions, AccountService, type AccountServiceConfig, type AccountSpace, type AccountSpaceListOptions, type AccountStatus, AutoApproveSpaceCreationHandler, type AutoRejectStrategy, type AutoSignStrategy, type Bytes, CREDENTIAL_ERROR_CODES, type CallbackStrategy, type CanonicalAddress, type CanonicalParsedNetworkId, type CanonicalTinyCloudIdentity, type CapabilityPresentationEnvelopeV1, CaveatedDelegationUnsupportedError, type ClassifyRegistryLookupOptions, type ClientSession, ClientSessionSchema, CloudLocationResolutionError, type ComposeManifestOptions, type ComposedManifestRequest, type CreateDelegationFunction, CreateDelegationParams, CredentialError, type CredentialErrorCode, CredentialFlowDescriptor, CredentialHolderBinding, CredentialIssuerMetadata, CredentialRequirement, CredentialStorageReceipt, DEFAULT_DEFAULTS, DEFAULT_EXPIRY, DEFAULT_KNOWLEDGE_ROOT, DEFAULT_LOCAL_NODE_PIN_STORAGE_KEY, DEFAULT_LOCAL_NODE_URL, DEFAULT_MANIFEST_SPACE, DEFAULT_MANIFEST_VERSION, DEFAULT_NEW_USER_HOST, DEFAULT_REGISTRY_LOOKUP_TIMEOUT_MS, DEFAULT_REGISTRY_OWNER_CHAIN_ID, DEFAULT_REGISTRY_SEQUENCE_STORAGE_KEY, DEFAULT_SIGNED_READ_URL_EXPIRY_MS, DEFAULT_TINYCLOUD_FALLBACK_HOST, DEFAULT_TINYCLOUD_LOCATION_REGISTRY_URL, Delegation, DelegationManager, DelegationRevocationReceipt, type DidCacheKeyOptions, type DidEqualsOptions, type DiscoverLocalTinyCloudNodeOptions, type DiscoveredLocalTinyCloudNode, EMAIL_CREDENTIAL_MAX_AGE_SECONDS, EMAIL_DOMAIN_CREDENTIAL_MAX_AGE_SECONDS, ENCRYPTION_MANIFEST_SPACE, ENCRYPTION_PERMISSION_SERVICE, EXPIRY, type EnsData, EnsDataSchema, type EventEmitterStrategy, type ExpiryTier, type Extension, type FailClosedHostOptions, type FailClosedHosts, GenerateShareParams, ICapabilityKeyRegistry, type IENSResolver, type INotificationHandler, type ISessionManager, type ISessionStorage, ISharingService, type ISigner, type ISpace, type ISpaceCreationHandler, type ISpaceScopedDelegations, type ISpaceScopedSharing, type ISpaceService, type IUserAuthorization, type IWasmBindings, IdentityParseError, type ImmutableSiweFields, IssuedCredentialEnvelope, LOCAL_LINK_HOST_SUFFIX, LOCAL_LINK_PROBE_TIMEOUT_MS, LOCAL_LOOPBACK_PROBE_TIMEOUT_MS, type LocalNodeIdentityStore, type LocationCandidate, type LocationCandidateInput, type LocationRecord, type LocationRecordPayload, type LocationRecordSigner, LocationRecordValidationError, LocationRegistryHttpError, type LocationResolutionAttempt, type LocationSource, type LookupOwnerRegistryVerdictOptions, type Manifest, type ManifestDefaults, type ManifestKnowledge, type ManifestRegistryRecord, type ManifestSecretActions, ManifestValidationError, type NodeInfo, type NodeNotFoundContext, type NodeNotFoundDecision, NodeNotFoundError, NodeRegistryEntryExistsError, OPENKEY_ACTION_ID_SEPARATOR, OWNER_NODE_BINDING_TIMEOUT_MS, type OnNodeNotFound, type OpenKeyCallbackStrategy, type OpenKeyManageKeyCallbackStrategy, OpenKeyManageKeyError, type OpenKeyManageKeyErrorCode, type OpenKeyManageKeyFetch, type OpenKeyManageKeySigningRequestBody, type OpenKeyManageKeySigningResponseBody, type OpenKeyManageKeySigningStrategyOptions, type OpenKeySigningRequestBody, type OpenKeySigningResponseBody, type OpenKeySigningStrategyOptions, type ParseRecapFromSiwe, type PartialSiweMessage, type PermissionEntry, PermissionNotInManifestError, type PersistedSessionData, type PersistedSessionProof, type PersistedTinyCloudSession, type PkhDidParts, ProtocolMismatchError, type PublishLocationRecordOptions, REGISTRY_LOOKUP_MAX_BODY_BYTES, REGISTRY_NOT_FOUND_BODY, type RecapAttenuation, type RegisterBatchSuccess, type RegisteredRegistryVerdict, type RegistryHost, type RegistryHostSource, RegistryLookupInputError, type RegistryLookupInputErrorCode, type RegistryLookupResponse, type RegistryPolicy, type RegistrySequenceStore, RegistryUnavailableError, type RegistryUnavailableReason, type RegistryVerdict, type RegistryVerdictSource, type RegistryVerdictStatus, type ResolveCloudLocationOptions, type ResolveOwnerHostsOptions, type ResolveTinyCloudHostsOptions, type ResolvedCapabilities, type ResolvedCloudLocation, type ResolvedDelegate, type ResolvedTinyCloudHosts, type ResourceCapability, SECRETS_SPACE, SERVICE_LONG_TO_SHORT, SERVICE_SHORT_TO_LONG, type ServerHost, SessionExpiredError, ShareLink, type SignCallback, type SignInOptions, type SignRequest, type SignResponse, type SignStrategy, type SignedSiweCacao, SilentNotificationHandler, type SiweConfig, SiweConfigSchema, Space, type SpaceAbilitiesMap, type SpaceConfig, type SpaceCreationContext, type SpaceDelegationParams, type SpaceErrorCode, SpaceErrorCodes, type SpaceHostResult, SpaceInfo, SpaceService, type SpaceServiceConfig, StoredCredentialRecord, type SubsetCheckResult, TERMINAL_DELEGATION_FACT, TINYCLOUD_CANONICAL_IDENTITY_CLAIM, TINYCLOUD_MANAGE_KEY_SCOPE, type TerminalDelegationSigningKey, TinyCloud, type TinyCloudAuthorizationRequestV1, type TinyCloudAuthorizationResultV1, type TinyCloudConfig, type TinyCloudEffectiveGrantV1, type TinyCloudSession, type UnavailableRegistryVerdict, type UnregisteredRegistryVerdict, UnsupportedFeatureError, type UserAuthorizationConfig, VAULT_PERMISSION_SERVICE, type ValidatedPersistedSessionProof, type ValidationError, VerifiedCredential, type VerifiedOwnerNodeBinding, type VerifyOwnerNodeBindingOptions, VersionCheckError, type WasmRecapEntry, type WebStorageLike, actionContains, activateSessionWithHost, addressStorageKey, applyPrefix, assertSpaceCreationAllowed, buildSpaceUri, canonicalDigest, canonicalLocationPayload, canonicalizeAddress, canonicalizeDid, canonicalizeDidUrl, canonicalizeNetworkId, canonicalizeRecapCaveats, checkNodeInfo, classifyRegistryLookup, composeManifestRequest, createEmailCredentialRequirement, createEmailDomainCredentialRequirement, createHolderBinding, createInMemoryLocalNodeIdentityStore, createInMemoryRegistrySequenceStore, createLocalStorageLocalNodeIdentityStore, createLocalStorageRegistrySequenceStore, createOpenKeyCallbackSigningStrategy, createOpenKeyManageKeySigningStrategy, createSpaceService, createStorageReceipt, createStoredCredentialRecord, credentialEndpointPath, credentialError, credentialIndexKey, credentialMatchesRequirement, credentialRecordKey, credentialRequirementDigest, decodeBase64Url, defaultSignStrategy, defaultSpaceCreationHandler, descriptorSatisfiesRequirement, didCacheKey, didEquals, diffImmutableSiweFields, discoverLocalTinyCloudNode, encodeBase64Url, expandActionShortNames, expandPermissionEntries, expandPermissionEntry, extractImmutableSiweFields, extractRecapAttenuations, fetchLocationRecord, fetchPeerId, hasTinyCloudManageKeyScope, holderBindingCanonicalBytes, holderBindingSigningBytes, httpResponseError, httpUrlToMultiaddr, isCapabilitySubset, isDigest, isEvmAddress, isExplicitOnlyAction, isPlausibleOpenKeyActionId, loadManifest, locationPayloadForRecord, lookupOwnerRegistryVerdict, makePkhSpaceId, makePublicSpaceId, manifestAbilitiesUnion, markDelegationTerminal, multiaddrToHttpUrl, normalizeDefaults, parseCanonicalNetworkId, parseCanonicalRecapResource, parseCanonicalTinyCloudIdentity, parseCanonicalTinyCloudIdentityClaims, parseExpiry, parsePkhDid, parseRecapCapabilities, parseSignedSiweCacao, parseSpaceUri, pkhDid, principalDid, principalDidEquals, publishLocationRecord, recapCaveatsEqual, registryOwnerSubjectV1, requestTinyCloudManageKeyScope, resolveCloudLocation, resolveFailClosedTinyCloudHosts, resolveManifest, resolveManifestKnowledgeRoot, resolveOwnerHosts, resolveTinyCloudHosts, resourceCapabilitiesToAbilitiesMap, resourceCapabilitiesToSpaceAbilitiesMap, sha256Base64Url, signLocationRecord, submitHostDelegation, unauthorizedRecapCapabilities, validateAuthorizationResultV1, validateClientSession, validateCredentialFlowDescriptor, validateCredentialHolderBinding, validateCredentialRequirement, validateLocationRecord, validateLocationRecordPayload, validateManifest, validatePersistedSessionData, verifyDidKeyEd25519Signature, verifyEip191MessageSignature, verifyIssuedCredential, verifyLocationRecord, verifyOwnerNodeBinding, verifyStorageReceipt };