@tinycloud/sdk-core 3.8.0-beta.2 → 3.8.0-beta.20

package/dist/{recipient-types.schema-BApcOn1t.d.cts → recipient-types.schema-BIJcihno.d.cts}

@@ -1,1743 +1,7 @@
-import { ServiceSession, InvokeFunction, InvokeAnyFunction, FetchFunction, Result as Result$1, ServiceError, IKVService, ServiceHeaders } from '@tinycloud/sdk-services';
+import { ServiceSession, Result as Result$1, ServiceError, FetchFunction, InvokeFunction, IKVService, ServiceHeaders } from '@tinycloud/sdk-services';
+import { p as DelegationManagerConfig, R as Result, r as DelegationRevocationReceipt, s as DelegationStatus, a as AccountDelegationQueryOptions, A as AccountDelegationPage, b as AccountDelegationRecord, j as DelegationChain, K as KeyInfo, h as Delegation, C as CapabilityEntry, I as IngestOptions, g as DelegatedResource, G as GenerateShareParams, v as ShareLink, D as DelegationError, J as JWK, x as ShareSchema, t as KeyProvider, d as CreateDelegationParams, e as CreateDelegationWasmParams, f as CreateDelegationWasmResult } from './types.schema-BmN-OnCA.cjs';
 import { z } from 'zod';
 
-/**
- * Zod schemas for delegation management types.
- *
- * These schemas provide runtime validation for delegation, capability key management,
- * and sharing link functionality. Types are derived from schemas using z.infer<>.
- *
- * @packageDocumentation
- */
-
-/**
- * Result type pattern for delegation operations.
- */
-type Result<T, E = DelegationError> = {
-    ok: true;
-    data: T;
-} | {
-    ok: false;
-    error: E;
-};
-/**
- * JSON Web Key representation for cryptographic keys.
- * Follows the JWK specification (RFC 7517).
- */
-declare const JWKSchema: z.ZodObject<{
-    /** Key type (e.g., "EC", "RSA", "OKP") */
-    kty: z.ZodString;
-    /** Curve for EC/OKP keys (e.g., "P-256", "Ed25519") */
-    crv: z.ZodOptional<z.ZodString>;
-    /** X coordinate for EC keys, public key for OKP */
-    x: z.ZodOptional<z.ZodString>;
-    /** Y coordinate for EC keys */
-    y: z.ZodOptional<z.ZodString>;
-    /** Private key value (d parameter) */
-    d: z.ZodOptional<z.ZodString>;
-    /** Public exponent for RSA keys */
-    e: z.ZodOptional<z.ZodString>;
-    /** Modulus for RSA keys */
-    n: z.ZodOptional<z.ZodString>;
-    /** Key ID */
-    kid: z.ZodOptional<z.ZodString>;
-    /** Algorithm */
-    alg: z.ZodOptional<z.ZodString>;
-    /** Key use (e.g., "sig", "enc") */
-    use: z.ZodOptional<z.ZodString>;
-    /** Key operations (e.g., ["sign", "verify"]) */
-    key_ops: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strip", z.ZodTypeAny, {
-    kty: string;
-    kid?: string | undefined;
-    alg?: string | undefined;
-    crv?: string | undefined;
-    x?: string | undefined;
-    y?: string | undefined;
-    d?: string | undefined;
-    e?: string | undefined;
-    n?: string | undefined;
-    use?: string | undefined;
-    key_ops?: string[] | undefined;
-}, {
-    kty: string;
-    kid?: string | undefined;
-    alg?: string | undefined;
-    crv?: string | undefined;
-    x?: string | undefined;
-    y?: string | undefined;
-    d?: string | undefined;
-    e?: string | undefined;
-    n?: string | undefined;
-    use?: string | undefined;
-    key_ops?: string[] | undefined;
-}>;
-type JWK = z.infer<typeof JWKSchema>;
-/**
- * Type of key in the capability registry.
- */
-declare const KeyTypeSchema: z.ZodEnum<["main", "session", "ingested"]>;
-type KeyType = z.infer<typeof KeyTypeSchema>;
-/**
- * Information about a cryptographic key used for delegations.
- */
-declare const KeyInfoSchema: z.ZodObject<{
-    /** Unique identifier for this key */
-    id: z.ZodString;
-    /** DID associated with this key */
-    did: z.ZodString;
-    /** Type of key determining its authority level */
-    type: z.ZodEnum<["main", "session", "ingested"]>;
-    /** Private key in JWK format */
-    jwk: z.ZodOptional<z.ZodObject<{
-        /** Key type (e.g., "EC", "RSA", "OKP") */
-        kty: z.ZodString;
-        /** Curve for EC/OKP keys (e.g., "P-256", "Ed25519") */
-        crv: z.ZodOptional<z.ZodString>;
-        /** X coordinate for EC keys, public key for OKP */
-        x: z.ZodOptional<z.ZodString>;
-        /** Y coordinate for EC keys */
-        y: z.ZodOptional<z.ZodString>;
-        /** Private key value (d parameter) */
-        d: z.ZodOptional<z.ZodString>;
-        /** Public exponent for RSA keys */
-        e: z.ZodOptional<z.ZodString>;
-        /** Modulus for RSA keys */
-        n: z.ZodOptional<z.ZodString>;
-        /** Key ID */
-        kid: z.ZodOptional<z.ZodString>;
-        /** Algorithm */
-        alg: z.ZodOptional<z.ZodString>;
-        /** Key use (e.g., "sig", "enc") */
-        use: z.ZodOptional<z.ZodString>;
-        /** Key operations (e.g., ["sign", "verify"]) */
-        key_ops: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        kty: string;
-        kid?: string | undefined;
-        alg?: string | undefined;
-        crv?: string | undefined;
-        x?: string | undefined;
-        y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
-        n?: string | undefined;
-        use?: string | undefined;
-        key_ops?: string[] | undefined;
-    }, {
-        kty: string;
-        kid?: string | undefined;
-        alg?: string | undefined;
-        crv?: string | undefined;
-        x?: string | undefined;
-        y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
-        n?: string | undefined;
-        use?: string | undefined;
-        key_ops?: string[] | undefined;
-    }>>;
-    /** Priority for key selection (lower = higher priority) */
-    priority: z.ZodNumber;
-}, "strip", z.ZodTypeAny, {
-    type: "session" | "main" | "ingested";
-    did: string;
-    id: string;
-    priority: number;
-    jwk?: {
-        kty: string;
-        kid?: string | undefined;
-        alg?: string | undefined;
-        crv?: string | undefined;
-        x?: string | undefined;
-        y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
-        n?: string | undefined;
-        use?: string | undefined;
-        key_ops?: string[] | undefined;
-    } | undefined;
-}, {
-    type: "session" | "main" | "ingested";
-    did: string;
-    id: string;
-    priority: number;
-    jwk?: {
-        kty: string;
-        kid?: string | undefined;
-        alg?: string | undefined;
-        crv?: string | undefined;
-        x?: string | undefined;
-        y?: string | undefined;
-        d?: string | undefined;
-        e?: string | undefined;
-        n?: string | undefined;
-        use?: string | undefined;
-        key_ops?: string[] | undefined;
-    } | undefined;
-}>;
-type KeyInfo = z.infer<typeof KeyInfoSchema>;
-/**
- * Error type for delegation operations.
- */
-declare const DelegationErrorSchema: z.ZodObject<{
-    /** Error code for programmatic handling */
-    code: z.ZodString;
-    /** Human-readable error message */
-    message: z.ZodString;
-    /** The service that produced the error */
-    service: z.ZodLiteral<"delegation">;
-    /** Original error if wrapping another error */
-    cause: z.ZodOptional<z.ZodType<Error, z.ZodTypeDef, Error>>;
-    /** Additional metadata about the error */
-    meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-}, "strip", z.ZodTypeAny, {
-    code: string;
-    message: string;
-    service: "delegation";
-    cause?: Error | undefined;
-    meta?: Record<string, unknown> | undefined;
-}, {
-    code: string;
-    message: string;
-    service: "delegation";
-    cause?: Error | undefined;
-    meta?: Record<string, unknown> | undefined;
-}>;
-type DelegationError = z.infer<typeof DelegationErrorSchema>;
-/**
- * Error codes for delegation operations.
- */
-declare const DelegationErrorCodes: {
-    readonly AUTH_REQUIRED: "AUTH_REQUIRED";
-    readonly AUTH_UNAUTHORIZED: "AUTH_UNAUTHORIZED";
-    readonly AUTH_EXPIRED: "AUTH_EXPIRED";
-    readonly NOT_INITIALIZED: "NOT_INITIALIZED";
-    readonly NOT_FOUND: "NOT_FOUND";
-    readonly REVOKED: "REVOKED";
-    readonly NETWORK_ERROR: "NETWORK_ERROR";
-    readonly TIMEOUT: "TIMEOUT";
-    readonly ABORTED: "ABORTED";
-    readonly INVALID_INPUT: "INVALID_INPUT";
-    readonly PERMISSION_DENIED: "PERMISSION_DENIED";
-    readonly CREATION_FAILED: "CREATION_FAILED";
-    readonly REVOCATION_FAILED: "REVOCATION_FAILED";
-    readonly INVALID_TOKEN: "INVALID_TOKEN";
-    readonly KV_SERVICE_UNAVAILABLE: "KV_SERVICE_UNAVAILABLE";
-    readonly DATA_FETCH_FAILED: "DATA_FETCH_FAILED";
-    readonly VALIDATION_ERROR: "VALIDATION_ERROR";
-    readonly UNSUPPORTED_OPERATION: "UNSUPPORTED_OPERATION";
-};
-type DelegationErrorCode = (typeof DelegationErrorCodes)[keyof typeof DelegationErrorCodes];
-/**
- * Represents a delegation from one DID to another.
- */
-declare const DelegationSchema: z.ZodObject<{
-    /** Content identifier (CID) of the delegation */
-    cid: z.ZodString;
-    /** DID of the delegate (the party receiving the delegation) */
-    delegateDID: z.ZodString;
-    /** Space ID this delegation applies to */
-    spaceId: z.ZodString;
-    /** Resource path this delegation grants access to */
-    path: z.ZodString;
-    /** Actions this delegation authorizes */
-    actions: z.ZodArray<z.ZodString, "many">;
-    /** Exact ReCap caveats that constrain every action in this scope. */
-    caveats: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
-    /** When this delegation expires (accepts Date or ISO string from JSON) */
-    expiry: z.ZodDate;
-    /** Whether this delegation has been revoked */
-    isRevoked: z.ZodBoolean;
-    /** DID of the delegator (the party granting the delegation) */
-    delegatorDID: z.ZodOptional<z.ZodString>;
-    /** When this delegation was created (accepts Date or ISO string from JSON) */
-    createdAt: z.ZodOptional<z.ZodDate>;
-    /** Parent delegation CID if this is a sub-delegation */
-    parentCid: z.ZodOptional<z.ZodString>;
-    /** Whether sub-delegation is allowed */
-    allowSubDelegation: z.ZodOptional<z.ZodBoolean>;
-    /** Authorization header (UCAN bearer token) */
-    authHeader: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    path: string;
-    expiry: Date;
-    actions: string[];
-    spaceId: string;
-    cid: string;
-    delegateDID: string;
-    isRevoked: boolean;
-    caveats?: Record<string, unknown>[] | undefined;
-    createdAt?: Date | undefined;
-    delegatorDID?: string | undefined;
-    parentCid?: string | undefined;
-    allowSubDelegation?: boolean | undefined;
-    authHeader?: string | undefined;
-}, {
-    path: string;
-    expiry: Date;
-    actions: string[];
-    spaceId: string;
-    cid: string;
-    delegateDID: string;
-    isRevoked: boolean;
-    caveats?: Record<string, unknown>[] | undefined;
-    createdAt?: Date | undefined;
-    delegatorDID?: string | undefined;
-    parentCid?: string | undefined;
-    allowSubDelegation?: boolean | undefined;
-    authHeader?: string | undefined;
-}>;
-type Delegation = z.infer<typeof DelegationSchema>;
-/** Node-confirmed lifecycle state for one delegation. */
-declare const DelegationStatusSchema: z.ZodEffects<z.ZodObject<{
-    cid: z.ZodString;
-    status: z.ZodEnum<["active", "revoked", "expired", "unavailable", "not_found"]>;
-    exists: z.ZodBoolean;
-    active: z.ZodBoolean;
-    revoked: z.ZodBoolean;
-    expired: z.ZodBoolean;
-}, "strict", z.ZodTypeAny, {
-    status: "active" | "revoked" | "expired" | "unavailable" | "not_found";
-    active: boolean;
-    revoked: boolean;
-    cid: string;
-    expired: boolean;
-    exists: boolean;
-}, {
-    status: "active" | "revoked" | "expired" | "unavailable" | "not_found";
-    active: boolean;
-    revoked: boolean;
-    cid: string;
-    expired: boolean;
-    exists: boolean;
-}>, {
-    status: "active" | "revoked" | "expired" | "unavailable" | "not_found";
-    active: boolean;
-    revoked: boolean;
-    cid: string;
-    expired: boolean;
-    exists: boolean;
-}, {
-    status: "active" | "revoked" | "expired" | "unavailable" | "not_found";
-    active: boolean;
-    revoked: boolean;
-    cid: string;
-    expired: boolean;
-    exists: boolean;
-}>;
-type DelegationStatus = z.infer<typeof DelegationStatusSchema>;
-declare const DelegationRevocationReceiptSchema: z.ZodObject<{
-    revoked: z.ZodLiteral<true>;
-    cid: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    revoked: true;
-    cid: string;
-}, {
-    revoked: true;
-    cid: string;
-}>;
-type DelegationRevocationReceipt = z.infer<typeof DelegationRevocationReceiptSchema>;
-declare const AccountDelegationResourceSchema: z.ZodObject<{
-    resource: z.ZodString;
-    actions: z.ZodArray<z.ZodString, "many">;
-    caveats: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">;
-}, "strict", z.ZodTypeAny, {
-    actions: string[];
-    caveats: Record<string, unknown>[];
-    resource: string;
-}, {
-    actions: string[];
-    caveats: Record<string, unknown>[];
-    resource: string;
-}>;
-declare const AccountDelegationRecordSchema: z.ZodObject<{
-    cid: z.ZodString;
-    direction: z.ZodEnum<["granted", "received"]>;
-    delegatorDid: z.ZodString;
-    delegateDid: z.ZodString;
-    resources: z.ZodArray<z.ZodObject<{
-        resource: z.ZodString;
-        actions: z.ZodArray<z.ZodString, "many">;
-        caveats: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">;
-    }, "strict", z.ZodTypeAny, {
-        actions: string[];
-        caveats: Record<string, unknown>[];
-        resource: string;
-    }, {
-        actions: string[];
-        caveats: Record<string, unknown>[];
-        resource: string;
-    }>, "many">;
-    parents: z.ZodArray<z.ZodString, "many">;
-    issuedAt: z.ZodNullable<z.ZodEffects<z.ZodString, Date, string>>;
-    notBefore: z.ZodNullable<z.ZodEffects<z.ZodString, Date, string>>;
-    expiresAt: z.ZodNullable<z.ZodEffects<z.ZodString, Date, string>>;
-    status: z.ZodEnum<["active", "pending", "expired", "revoked", "ancestor_revoked"]>;
-    revokedAt: z.ZodOptional<z.ZodNullable<z.ZodEffects<z.ZodString, Date, string>>>;
-    revokedBy: z.ZodOptional<z.ZodString>;
-    revokedAncestorCid: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    status: "active" | "revoked" | "expired" | "pending" | "ancestor_revoked";
-    notBefore: Date | null;
-    resources: {
-        actions: string[];
-        caveats: Record<string, unknown>[];
-        resource: string;
-    }[];
-    issuedAt: Date | null;
-    expiresAt: Date | null;
-    cid: string;
-    direction: "received" | "granted";
-    delegatorDid: string;
-    delegateDid: string;
-    parents: string[];
-    revokedAt?: Date | null | undefined;
-    revokedBy?: string | undefined;
-    revokedAncestorCid?: string | undefined;
-}, {
-    status: "active" | "revoked" | "expired" | "pending" | "ancestor_revoked";
-    notBefore: string | null;
-    resources: {
-        actions: string[];
-        caveats: Record<string, unknown>[];
-        resource: string;
-    }[];
-    issuedAt: string | null;
-    expiresAt: string | null;
-    cid: string;
-    direction: "received" | "granted";
-    delegatorDid: string;
-    delegateDid: string;
-    parents: string[];
-    revokedAt?: string | null | undefined;
-    revokedBy?: string | undefined;
-    revokedAncestorCid?: string | undefined;
-}>;
-declare const AccountDelegationPageSchema: z.ZodObject<{
-    schemaVersion: z.ZodLiteral<2>;
-    items: z.ZodArray<z.ZodObject<{
-        cid: z.ZodString;
-        direction: z.ZodEnum<["granted", "received"]>;
-        delegatorDid: z.ZodString;
-        delegateDid: z.ZodString;
-        resources: z.ZodArray<z.ZodObject<{
-            resource: z.ZodString;
-            actions: z.ZodArray<z.ZodString, "many">;
-            caveats: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">;
-        }, "strict", z.ZodTypeAny, {
-            actions: string[];
-            caveats: Record<string, unknown>[];
-            resource: string;
-        }, {
-            actions: string[];
-            caveats: Record<string, unknown>[];
-            resource: string;
-        }>, "many">;
-        parents: z.ZodArray<z.ZodString, "many">;
-        issuedAt: z.ZodNullable<z.ZodEffects<z.ZodString, Date, string>>;
-        notBefore: z.ZodNullable<z.ZodEffects<z.ZodString, Date, string>>;
-        expiresAt: z.ZodNullable<z.ZodEffects<z.ZodString, Date, string>>;
-        status: z.ZodEnum<["active", "pending", "expired", "revoked", "ancestor_revoked"]>;
-        revokedAt: z.ZodOptional<z.ZodNullable<z.ZodEffects<z.ZodString, Date, string>>>;
-        revokedBy: z.ZodOptional<z.ZodString>;
-        revokedAncestorCid: z.ZodOptional<z.ZodString>;
-    }, "strict", z.ZodTypeAny, {
-        status: "active" | "revoked" | "expired" | "pending" | "ancestor_revoked";
-        notBefore: Date | null;
-        resources: {
-            actions: string[];
-            caveats: Record<string, unknown>[];
-            resource: string;
-        }[];
-        issuedAt: Date | null;
-        expiresAt: Date | null;
-        cid: string;
-        direction: "received" | "granted";
-        delegatorDid: string;
-        delegateDid: string;
-        parents: string[];
-        revokedAt?: Date | null | undefined;
-        revokedBy?: string | undefined;
-        revokedAncestorCid?: string | undefined;
-    }, {
-        status: "active" | "revoked" | "expired" | "pending" | "ancestor_revoked";
-        notBefore: string | null;
-        resources: {
-            actions: string[];
-            caveats: Record<string, unknown>[];
-            resource: string;
-        }[];
-        issuedAt: string | null;
-        expiresAt: string | null;
-        cid: string;
-        direction: "received" | "granted";
-        delegatorDid: string;
-        delegateDid: string;
-        parents: string[];
-        revokedAt?: string | null | undefined;
-        revokedBy?: string | undefined;
-        revokedAncestorCid?: string | undefined;
-    }>, "many">;
-    nextCursor: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    schemaVersion: 2;
-    items: {
-        status: "active" | "revoked" | "expired" | "pending" | "ancestor_revoked";
-        notBefore: Date | null;
-        resources: {
-            actions: string[];
-            caveats: Record<string, unknown>[];
-            resource: string;
-        }[];
-        issuedAt: Date | null;
-        expiresAt: Date | null;
-        cid: string;
-        direction: "received" | "granted";
-        delegatorDid: string;
-        delegateDid: string;
-        parents: string[];
-        revokedAt?: Date | null | undefined;
-        revokedBy?: string | undefined;
-        revokedAncestorCid?: string | undefined;
-    }[];
-    nextCursor?: string | undefined;
-}, {
-    schemaVersion: 2;
-    items: {
-        status: "active" | "revoked" | "expired" | "pending" | "ancestor_revoked";
-        notBefore: string | null;
-        resources: {
-            actions: string[];
-            caveats: Record<string, unknown>[];
-            resource: string;
-        }[];
-        issuedAt: string | null;
-        expiresAt: string | null;
-        cid: string;
-        direction: "received" | "granted";
-        delegatorDid: string;
-        delegateDid: string;
-        parents: string[];
-        revokedAt?: string | null | undefined;
-        revokedBy?: string | undefined;
-        revokedAncestorCid?: string | undefined;
-    }[];
-    nextCursor?: string | undefined;
-}>;
-type AccountDelegationResource = z.infer<typeof AccountDelegationResourceSchema>;
-type AccountDelegationRecord = z.infer<typeof AccountDelegationRecordSchema>;
-type AccountDelegationPage = z.infer<typeof AccountDelegationPageSchema>;
-declare const AccountDelegationQueryOptionsSchema: z.ZodObject<{
-    direction: z.ZodOptional<z.ZodEnum<["granted", "received", "all"]>>;
-    status: z.ZodOptional<z.ZodEnum<["active", "pending", "expired", "revoked", "ancestor_revoked"]>>;
-    space: z.ZodOptional<z.ZodString>;
-    limit: z.ZodOptional<z.ZodNumber>;
-    cursor: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    status?: "active" | "revoked" | "expired" | "pending" | "ancestor_revoked" | undefined;
-    space?: string | undefined;
-    direction?: "received" | "all" | "granted" | undefined;
-    limit?: number | undefined;
-    cursor?: string | undefined;
-}, {
-    status?: "active" | "revoked" | "expired" | "pending" | "ancestor_revoked" | undefined;
-    space?: string | undefined;
-    direction?: "received" | "all" | "granted" | undefined;
-    limit?: number | undefined;
-    cursor?: string | undefined;
-}>;
-type AccountDelegationQueryOptions = z.infer<typeof AccountDelegationQueryOptionsSchema>;
-/**
- * Entry in the capability registry mapping a capability to available keys.
- */
-declare const CapabilityEntrySchema: z.ZodObject<{
-    /** Resource URI this capability applies to */
-    resource: z.ZodString;
-    /** Action this capability authorizes */
-    action: z.ZodString;
-    /** Keys that can exercise this capability, ordered by priority */
-    keys: z.ZodArray<z.ZodObject<{
-        /** Unique identifier for this key */
-        id: z.ZodString;
-        /** DID associated with this key */
-        did: z.ZodString;
-        /** Type of key determining its authority level */
-        type: z.ZodEnum<["main", "session", "ingested"]>;
-        /** Private key in JWK format */
-        jwk: z.ZodOptional<z.ZodObject<{
-            /** Key type (e.g., "EC", "RSA", "OKP") */
-            kty: z.ZodString;
-            /** Curve for EC/OKP keys (e.g., "P-256", "Ed25519") */
-            crv: z.ZodOptional<z.ZodString>;
-            /** X coordinate for EC keys, public key for OKP */
-            x: z.ZodOptional<z.ZodString>;
-            /** Y coordinate for EC keys */
-            y: z.ZodOptional<z.ZodString>;
-            /** Private key value (d parameter) */
-            d: z.ZodOptional<z.ZodString>;
-            /** Public exponent for RSA keys */
-            e: z.ZodOptional<z.ZodString>;
-            /** Modulus for RSA keys */
-            n: z.ZodOptional<z.ZodString>;
-            /** Key ID */
-            kid: z.ZodOptional<z.ZodString>;
-            /** Algorithm */
-            alg: z.ZodOptional<z.ZodString>;
-            /** Key use (e.g., "sig", "enc") */
-            use: z.ZodOptional<z.ZodString>;
-            /** Key operations (e.g., ["sign", "verify"]) */
-            key_ops: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        }, "strip", z.ZodTypeAny, {
-            kty: string;
-            kid?: string | undefined;
-            alg?: string | undefined;
-            crv?: string | undefined;
-            x?: string | undefined;
-            y?: string | undefined;
-            d?: string | undefined;
-            e?: string | undefined;
-            n?: string | undefined;
-            use?: string | undefined;
-            key_ops?: string[] | undefined;
-        }, {
-            kty: string;
-            kid?: string | undefined;
-            alg?: string | undefined;
-            crv?: string | undefined;
-            x?: string | undefined;
-            y?: string | undefined;
-            d?: string | undefined;
-            e?: string | undefined;
-            n?: string | undefined;
-            use?: string | undefined;
-            key_ops?: string[] | undefined;
-        }>>;
-        /** Priority for key selection (lower = higher priority) */
-        priority: z.ZodNumber;
-    }, "strip", z.ZodTypeAny, {
-        type: "session" | "main" | "ingested";
-        did: string;
-        id: string;
-        priority: number;
-        jwk?: {
-            kty: string;
-            kid?: string | undefined;
-            alg?: string | undefined;
-            crv?: string | undefined;
-            x?: string | undefined;
-            y?: string | undefined;
-            d?: string | undefined;
-            e?: string | undefined;
-            n?: string | undefined;
-            use?: string | undefined;
-            key_ops?: string[] | undefined;
-        } | undefined;
-    }, {
-        type: "session" | "main" | "ingested";
-        did: string;
-        id: string;
-        priority: number;
-        jwk?: {
-            kty: string;
-            kid?: string | undefined;
-            alg?: string | undefined;
-            crv?: string | undefined;
-            x?: string | undefined;
-            y?: string | undefined;
-            d?: string | undefined;
-            e?: string | undefined;
-            n?: string | undefined;
-            use?: string | undefined;
-            key_ops?: string[] | undefined;
-        } | undefined;
-    }>, "many">;
-    /** The delegation that grants this capability */
-    delegation: z.ZodObject<{
-        /** Content identifier (CID) of the delegation */
-        cid: z.ZodString;
-        /** DID of the delegate (the party receiving the delegation) */
-        delegateDID: z.ZodString;
-        /** Space ID this delegation applies to */
-        spaceId: z.ZodString;
-        /** Resource path this delegation grants access to */
-        path: z.ZodString;
-        /** Actions this delegation authorizes */
-        actions: z.ZodArray<z.ZodString, "many">;
-        /** Exact ReCap caveats that constrain every action in this scope. */
-        caveats: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
-        /** When this delegation expires (accepts Date or ISO string from JSON) */
-        expiry: z.ZodDate;
-        /** Whether this delegation has been revoked */
-        isRevoked: z.ZodBoolean;
-        /** DID of the delegator (the party granting the delegation) */
-        delegatorDID: z.ZodOptional<z.ZodString>;
-        /** When this delegation was created (accepts Date or ISO string from JSON) */
-        createdAt: z.ZodOptional<z.ZodDate>;
-        /** Parent delegation CID if this is a sub-delegation */
-        parentCid: z.ZodOptional<z.ZodString>;
-        /** Whether sub-delegation is allowed */
-        allowSubDelegation: z.ZodOptional<z.ZodBoolean>;
-        /** Authorization header (UCAN bearer token) */
-        authHeader: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }, {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }>;
-    /** When this capability expires (accepts Date or ISO string from JSON) */
-    expiresAt: z.ZodOptional<z.ZodDate>;
-}, "strip", z.ZodTypeAny, {
-    keys: {
-        type: "session" | "main" | "ingested";
-        did: string;
-        id: string;
-        priority: number;
-        jwk?: {
-            kty: string;
-            kid?: string | undefined;
-            alg?: string | undefined;
-            crv?: string | undefined;
-            x?: string | undefined;
-            y?: string | undefined;
-            d?: string | undefined;
-            e?: string | undefined;
-            n?: string | undefined;
-            use?: string | undefined;
-            key_ops?: string[] | undefined;
-        } | undefined;
-    }[];
-    delegation: {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    };
-    resource: string;
-    action: string;
-    expiresAt?: Date | undefined;
-}, {
-    keys: {
-        type: "session" | "main" | "ingested";
-        did: string;
-        id: string;
-        priority: number;
-        jwk?: {
-            kty: string;
-            kid?: string | undefined;
-            alg?: string | undefined;
-            crv?: string | undefined;
-            x?: string | undefined;
-            y?: string | undefined;
-            d?: string | undefined;
-            e?: string | undefined;
-            n?: string | undefined;
-            use?: string | undefined;
-            key_ops?: string[] | undefined;
-        } | undefined;
-    }[];
-    delegation: {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    };
-    resource: string;
-    action: string;
-    expiresAt?: Date | undefined;
-}>;
-type CapabilityEntry = z.infer<typeof CapabilityEntrySchema>;
-/**
- * Persistent record of a delegation stored in the system.
- */
-declare const DelegationRecordSchema: z.ZodObject<{
-    /** Content identifier (CID) of the delegation */
-    cid: z.ZodString;
-    /** Space ID this delegation applies to */
-    spaceId: z.ZodString;
-    /** DID of the delegator (grantor) */
-    delegator: z.ZodString;
-    /** DID of the delegatee (recipient) */
-    delegatee: z.ZodString;
-    /** Key ID used to sign/exercise this delegation */
-    keyId: z.ZodOptional<z.ZodString>;
-    /** Resource path pattern this delegation grants access to */
-    path: z.ZodString;
-    /** Actions this delegation authorizes */
-    actions: z.ZodArray<z.ZodString, "many">;
-    /** When this delegation expires (accepts Date or ISO string from JSON) */
-    expiry: z.ZodOptional<z.ZodDate>;
-    /** When this delegation becomes valid (not before) (accepts Date or ISO string) */
-    notBefore: z.ZodOptional<z.ZodDate>;
-    /** Whether this delegation has been revoked */
-    isRevoked: z.ZodBoolean;
-    /** When this delegation was created (accepts Date or ISO string from JSON) */
-    createdAt: z.ZodDate;
-    /** Parent delegation CID if this is a sub-delegation */
-    parentCid: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    path: string;
-    actions: string[];
-    createdAt: Date;
-    spaceId: string;
-    cid: string;
-    isRevoked: boolean;
-    delegator: string;
-    delegatee: string;
-    notBefore?: Date | undefined;
-    expiry?: Date | undefined;
-    parentCid?: string | undefined;
-    keyId?: string | undefined;
-}, {
-    path: string;
-    actions: string[];
-    createdAt: Date;
-    spaceId: string;
-    cid: string;
-    isRevoked: boolean;
-    delegator: string;
-    delegatee: string;
-    notBefore?: Date | undefined;
-    expiry?: Date | undefined;
-    parentCid?: string | undefined;
-    keyId?: string | undefined;
-}>;
-type DelegationRecord = z.infer<typeof DelegationRecordSchema>;
-/**
- * Parameters for creating a new delegation.
- */
-declare const CreateDelegationParamsSchema: z.ZodObject<{
-    /** DID of the delegate (the party receiving the delegation) */
-    delegateDID: z.ZodString;
-    /** Resource path this delegation grants access to */
-    path: z.ZodString;
-    /** Actions to authorize */
-    actions: z.ZodArray<z.ZodString, "many">;
-    /** When this delegation expires (accepts Date or ISO string) */
-    expiry: z.ZodOptional<z.ZodDate>;
-    /** Whether to disable sub-delegation */
-    disableSubDelegation: z.ZodOptional<z.ZodBoolean>;
-    /** Optional statement for the SIWE message */
-    statement: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    path: string;
-    actions: string[];
-    delegateDID: string;
-    statement?: string | undefined;
-    expiry?: Date | undefined;
-    disableSubDelegation?: boolean | undefined;
-}, {
-    path: string;
-    actions: string[];
-    delegateDID: string;
-    statement?: string | undefined;
-    expiry?: Date | undefined;
-    disableSubDelegation?: boolean | undefined;
-}>;
-type CreateDelegationParams = z.infer<typeof CreateDelegationParamsSchema>;
-/**
- * A chain of delegations from root to leaf (array format).
- */
-declare const DelegationChainSchema: z.ZodArray<z.ZodObject<{
-    /** Content identifier (CID) of the delegation */
-    cid: z.ZodString;
-    /** DID of the delegate (the party receiving the delegation) */
-    delegateDID: z.ZodString;
-    /** Space ID this delegation applies to */
-    spaceId: z.ZodString;
-    /** Resource path this delegation grants access to */
-    path: z.ZodString;
-    /** Actions this delegation authorizes */
-    actions: z.ZodArray<z.ZodString, "many">;
-    /** Exact ReCap caveats that constrain every action in this scope. */
-    caveats: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
-    /** When this delegation expires (accepts Date or ISO string from JSON) */
-    expiry: z.ZodDate;
-    /** Whether this delegation has been revoked */
-    isRevoked: z.ZodBoolean;
-    /** DID of the delegator (the party granting the delegation) */
-    delegatorDID: z.ZodOptional<z.ZodString>;
-    /** When this delegation was created (accepts Date or ISO string from JSON) */
-    createdAt: z.ZodOptional<z.ZodDate>;
-    /** Parent delegation CID if this is a sub-delegation */
-    parentCid: z.ZodOptional<z.ZodString>;
-    /** Whether sub-delegation is allowed */
-    allowSubDelegation: z.ZodOptional<z.ZodBoolean>;
-    /** Authorization header (UCAN bearer token) */
-    authHeader: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    path: string;
-    expiry: Date;
-    actions: string[];
-    spaceId: string;
-    cid: string;
-    delegateDID: string;
-    isRevoked: boolean;
-    caveats?: Record<string, unknown>[] | undefined;
-    createdAt?: Date | undefined;
-    delegatorDID?: string | undefined;
-    parentCid?: string | undefined;
-    allowSubDelegation?: boolean | undefined;
-    authHeader?: string | undefined;
-}, {
-    path: string;
-    expiry: Date;
-    actions: string[];
-    spaceId: string;
-    cid: string;
-    delegateDID: string;
-    isRevoked: boolean;
-    caveats?: Record<string, unknown>[] | undefined;
-    createdAt?: Date | undefined;
-    delegatorDID?: string | undefined;
-    parentCid?: string | undefined;
-    allowSubDelegation?: boolean | undefined;
-    authHeader?: string | undefined;
-}>, "many">;
-type DelegationChain = z.infer<typeof DelegationChainSchema>;
-/**
- * Structured delegation chain (v2 spec).
- */
-declare const DelegationChainV2Schema: z.ZodObject<{
-    /** The root delegation from the original authority */
-    root: z.ZodObject<{
-        /** Content identifier (CID) of the delegation */
-        cid: z.ZodString;
-        /** DID of the delegate (the party receiving the delegation) */
-        delegateDID: z.ZodString;
-        /** Space ID this delegation applies to */
-        spaceId: z.ZodString;
-        /** Resource path this delegation grants access to */
-        path: z.ZodString;
-        /** Actions this delegation authorizes */
-        actions: z.ZodArray<z.ZodString, "many">;
-        /** Exact ReCap caveats that constrain every action in this scope. */
-        caveats: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
-        /** When this delegation expires (accepts Date or ISO string from JSON) */
-        expiry: z.ZodDate;
-        /** Whether this delegation has been revoked */
-        isRevoked: z.ZodBoolean;
-        /** DID of the delegator (the party granting the delegation) */
-        delegatorDID: z.ZodOptional<z.ZodString>;
-        /** When this delegation was created (accepts Date or ISO string from JSON) */
-        createdAt: z.ZodOptional<z.ZodDate>;
-        /** Parent delegation CID if this is a sub-delegation */
-        parentCid: z.ZodOptional<z.ZodString>;
-        /** Whether sub-delegation is allowed */
-        allowSubDelegation: z.ZodOptional<z.ZodBoolean>;
-        /** Authorization header (UCAN bearer token) */
-        authHeader: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }, {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }>;
-    /** Intermediate delegations in the chain (may be empty) */
-    chain: z.ZodArray<z.ZodObject<{
-        /** Content identifier (CID) of the delegation */
-        cid: z.ZodString;
-        /** DID of the delegate (the party receiving the delegation) */
-        delegateDID: z.ZodString;
-        /** Space ID this delegation applies to */
-        spaceId: z.ZodString;
-        /** Resource path this delegation grants access to */
-        path: z.ZodString;
-        /** Actions this delegation authorizes */
-        actions: z.ZodArray<z.ZodString, "many">;
-        /** Exact ReCap caveats that constrain every action in this scope. */
-        caveats: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
-        /** When this delegation expires (accepts Date or ISO string from JSON) */
-        expiry: z.ZodDate;
-        /** Whether this delegation has been revoked */
-        isRevoked: z.ZodBoolean;
-        /** DID of the delegator (the party granting the delegation) */
-        delegatorDID: z.ZodOptional<z.ZodString>;
-        /** When this delegation was created (accepts Date or ISO string from JSON) */
-        createdAt: z.ZodOptional<z.ZodDate>;
-        /** Parent delegation CID if this is a sub-delegation */
-        parentCid: z.ZodOptional<z.ZodString>;
-        /** Whether sub-delegation is allowed */
-        allowSubDelegation: z.ZodOptional<z.ZodBoolean>;
-        /** Authorization header (UCAN bearer token) */
-        authHeader: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }, {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }>, "many">;
-    /** The final delegation to the current user */
-    leaf: z.ZodObject<{
-        /** Content identifier (CID) of the delegation */
-        cid: z.ZodString;
-        /** DID of the delegate (the party receiving the delegation) */
-        delegateDID: z.ZodString;
-        /** Space ID this delegation applies to */
-        spaceId: z.ZodString;
-        /** Resource path this delegation grants access to */
-        path: z.ZodString;
-        /** Actions this delegation authorizes */
-        actions: z.ZodArray<z.ZodString, "many">;
-        /** Exact ReCap caveats that constrain every action in this scope. */
-        caveats: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
-        /** When this delegation expires (accepts Date or ISO string from JSON) */
-        expiry: z.ZodDate;
-        /** Whether this delegation has been revoked */
-        isRevoked: z.ZodBoolean;
-        /** DID of the delegator (the party granting the delegation) */
-        delegatorDID: z.ZodOptional<z.ZodString>;
-        /** When this delegation was created (accepts Date or ISO string from JSON) */
-        createdAt: z.ZodOptional<z.ZodDate>;
-        /** Parent delegation CID if this is a sub-delegation */
-        parentCid: z.ZodOptional<z.ZodString>;
-        /** Whether sub-delegation is allowed */
-        allowSubDelegation: z.ZodOptional<z.ZodBoolean>;
-        /** Authorization header (UCAN bearer token) */
-        authHeader: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }, {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    root: {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    };
-    chain: {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }[];
-    leaf: {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    };
-}, {
-    root: {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    };
-    chain: {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }[];
-    leaf: {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    };
-}>;
-type DelegationChainV2 = z.infer<typeof DelegationChainV2Schema>;
-/**
- * Direction of delegation to filter by.
- */
-declare const DelegationDirectionSchema: z.ZodEnum<["granted", "received", "all"]>;
-type DelegationDirection = z.infer<typeof DelegationDirectionSchema>;
-/**
- * Filters for listing delegations.
- */
-declare const DelegationFiltersSchema: z.ZodObject<{
-    /** Filter by delegation direction */
-    direction: z.ZodOptional<z.ZodEnum<["granted", "received", "all"]>>;
-    /** Filter by resource path pattern */
-    path: z.ZodOptional<z.ZodString>;
-    /** Filter by required actions */
-    actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    /** Include revoked delegations */
-    includeRevoked: z.ZodOptional<z.ZodBoolean>;
-    /** Filter by delegator DID */
-    delegator: z.ZodOptional<z.ZodString>;
-    /** Filter by delegatee DID */
-    delegatee: z.ZodOptional<z.ZodString>;
-    /** Only include delegations valid at this time */
-    validAt: z.ZodOptional<z.ZodDate>;
-    /** Maximum number of results to return */
-    limit: z.ZodOptional<z.ZodNumber>;
-    /** Cursor for pagination */
-    cursor: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    path?: string | undefined;
-    actions?: string[] | undefined;
-    direction?: "received" | "all" | "granted" | undefined;
-    limit?: number | undefined;
-    cursor?: string | undefined;
-    delegator?: string | undefined;
-    delegatee?: string | undefined;
-    includeRevoked?: boolean | undefined;
-    validAt?: Date | undefined;
-}, {
-    path?: string | undefined;
-    actions?: string[] | undefined;
-    direction?: "received" | "all" | "granted" | undefined;
-    limit?: number | undefined;
-    cursor?: string | undefined;
-    delegator?: string | undefined;
-    delegatee?: string | undefined;
-    includeRevoked?: boolean | undefined;
-    validAt?: Date | undefined;
-}>;
-type DelegationFilters = z.infer<typeof DelegationFiltersSchema>;
-/**
- * Type of space ownership.
- */
-declare const SpaceOwnershipSchema: z.ZodEnum<["owned", "delegated"]>;
-type SpaceOwnership = z.infer<typeof SpaceOwnershipSchema>;
-/**
- * Information about a space the user has access to.
- */
-declare const SpaceInfoSchema: z.ZodObject<{
-    /** Space identifier */
-    id: z.ZodString;
-    /** Human-readable name for the space */
-    name: z.ZodOptional<z.ZodString>;
-    /** DID of the space owner */
-    owner: z.ZodString;
-    /** Whether user owns or has delegated access */
-    type: z.ZodEnum<["owned", "delegated"]>;
-    /** Permissions the user has in this space */
-    permissions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    /** When the access expires (for delegated spaces) */
-    expiresAt: z.ZodOptional<z.ZodDate>;
-}, "strip", z.ZodTypeAny, {
-    type: "owned" | "delegated";
-    id: string;
-    owner: string;
-    expiresAt?: Date | undefined;
-    name?: string | undefined;
-    permissions?: string[] | undefined;
-}, {
-    type: "owned" | "delegated";
-    id: string;
-    owner: string;
-    expiresAt?: Date | undefined;
-    name?: string | undefined;
-    permissions?: string[] | undefined;
-}>;
-type SpaceInfo = z.infer<typeof SpaceInfoSchema>;
-/**
- * Schema for encoding share link data.
- */
-declare const ShareSchemaSchema: z.ZodEnum<["base64", "compact", "ipfs"]>;
-type ShareSchema = z.infer<typeof ShareSchemaSchema>;
-/**
- * A shareable link containing delegation credentials.
- */
-declare const ShareLinkSchema: z.ZodObject<{
-    /** Unique token identifying this share link */
-    token: z.ZodString;
-    /** Full URL for sharing */
-    url: z.ZodString;
-    /** The delegation this link grants access to */
-    delegation: z.ZodObject<{
-        /** Content identifier (CID) of the delegation */
-        cid: z.ZodString;
-        /** DID of the delegate (the party receiving the delegation) */
-        delegateDID: z.ZodString;
-        /** Space ID this delegation applies to */
-        spaceId: z.ZodString;
-        /** Resource path this delegation grants access to */
-        path: z.ZodString;
-        /** Actions this delegation authorizes */
-        actions: z.ZodArray<z.ZodString, "many">;
-        /** Exact ReCap caveats that constrain every action in this scope. */
-        caveats: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
-        /** When this delegation expires (accepts Date or ISO string from JSON) */
-        expiry: z.ZodDate;
-        /** Whether this delegation has been revoked */
-        isRevoked: z.ZodBoolean;
-        /** DID of the delegator (the party granting the delegation) */
-        delegatorDID: z.ZodOptional<z.ZodString>;
-        /** When this delegation was created (accepts Date or ISO string from JSON) */
-        createdAt: z.ZodOptional<z.ZodDate>;
-        /** Parent delegation CID if this is a sub-delegation */
-        parentCid: z.ZodOptional<z.ZodString>;
-        /** Whether sub-delegation is allowed */
-        allowSubDelegation: z.ZodOptional<z.ZodBoolean>;
-        /** Authorization header (UCAN bearer token) */
-        authHeader: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }, {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    }>;
-    /** Encoding schema used for the link */
-    schema: z.ZodEnum<["base64", "compact", "ipfs"]>;
-    /** When this share link expires */
-    expiresAt: z.ZodOptional<z.ZodDate>;
-    /** Human-readable description of what is being shared */
-    description: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    schema: "base64" | "compact" | "ipfs";
-    delegation: {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    };
-    url: string;
-    token: string;
-    expiresAt?: Date | undefined;
-    description?: string | undefined;
-}, {
-    schema: "base64" | "compact" | "ipfs";
-    delegation: {
-        path: string;
-        expiry: Date;
-        actions: string[];
-        spaceId: string;
-        cid: string;
-        delegateDID: string;
-        isRevoked: boolean;
-        caveats?: Record<string, unknown>[] | undefined;
-        createdAt?: Date | undefined;
-        delegatorDID?: string | undefined;
-        parentCid?: string | undefined;
-        allowSubDelegation?: boolean | undefined;
-        authHeader?: string | undefined;
-    };
-    url: string;
-    token: string;
-    expiresAt?: Date | undefined;
-    description?: string | undefined;
-}>;
-type ShareLink = z.infer<typeof ShareLinkSchema>;
-type ShareLinkData<T = unknown> = {
-    data: T;
-    delegation: Delegation;
-    spaceId: string;
-    path: string;
-};
-/**
- * Options for ingesting an external delegation.
- */
-declare const IngestOptionsSchema: z.ZodObject<{
-    /** Whether to persist the delegation to storage */
-    persist: z.ZodOptional<z.ZodBoolean>;
-    /** Whether to validate the full delegation chain */
-    validateChain: z.ZodOptional<z.ZodBoolean>;
-    /** Name for the ingested key */
-    keyName: z.ZodOptional<z.ZodString>;
-    /** Whether to create a session key for this delegation */
-    createSessionKey: z.ZodOptional<z.ZodBoolean>;
-    /** Override the priority for the ingested key */
-    priority: z.ZodOptional<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    priority?: number | undefined;
-    persist?: boolean | undefined;
-    validateChain?: boolean | undefined;
-    keyName?: string | undefined;
-    createSessionKey?: boolean | undefined;
-}, {
-    priority?: number | undefined;
-    persist?: boolean | undefined;
-    validateChain?: boolean | undefined;
-    keyName?: string | undefined;
-    createSessionKey?: boolean | undefined;
-}>;
-type IngestOptions = z.infer<typeof IngestOptionsSchema>;
-/**
- * Parameters for generating a share link.
- */
-declare const GenerateShareParamsSchema: z.ZodObject<{
-    /** Resource path to share */
-    path: z.ZodString;
-    /** Actions to authorize */
-    actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    /** When the share link expires */
-    expiry: z.ZodOptional<z.ZodDate>;
-    /** Encoding schema for the link */
-    schema: z.ZodOptional<z.ZodEnum<["base64", "compact", "ipfs"]>>;
-    /** Human-readable description */
-    description: z.ZodOptional<z.ZodString>;
-    /** Base URL for the share link */
-    baseUrl: z.ZodOptional<z.ZodString>;
-    /**
-     * Whether the recipient may re-delegate the share. Default `true`.
-     * `false` issues a terminal delegation: the node refuses onward `/delegate`.
-     * Without a session-key delegation that covers the path, `false` fails with PERMISSION_DENIED.
-     * Receive such a share with `receive(link, { autoSubdelegate: false })`; the default auto-subdelegation is refused for it.
-     */
-    allowSubDelegation: z.ZodOptional<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-    path: string;
-    description?: string | undefined;
-    schema?: "base64" | "compact" | "ipfs" | undefined;
-    expiry?: Date | undefined;
-    actions?: string[] | undefined;
-    allowSubDelegation?: boolean | undefined;
-    baseUrl?: string | undefined;
-}, {
-    path: string;
-    description?: string | undefined;
-    schema?: "base64" | "compact" | "ipfs" | undefined;
-    expiry?: Date | undefined;
-    actions?: string[] | undefined;
-    allowSubDelegation?: boolean | undefined;
-    baseUrl?: string | undefined;
-}>;
-type GenerateShareParams = z.infer<typeof GenerateShareParamsSchema>;
-/**
- * Configuration for DelegationManager.
- * Note: ServiceSession, InvokeFunction, and FetchFunction are external types.
- */
-declare const DelegationManagerConfigSchema: z.ZodObject<{
-    /** TinyCloud host URLs */
-    hosts: z.ZodArray<z.ZodString, "many">;
-    /** Account space used by account-wide delegation history queries */
-    accountSpaceId: z.ZodOptional<z.ZodString>;
-    /** Active session for authentication */
-    session: z.ZodEffects<z.ZodUnknown, ServiceSession, unknown>;
-    /** Platform-specific invoke function */
-    invoke: z.ZodEffects<z.ZodUnknown, InvokeFunction, unknown>;
-    /** Platform-specific invoke function for raw resource URIs */
-    invokeAny: z.ZodOptional<z.ZodEffects<z.ZodUnknown, InvokeAnyFunction, unknown>>;
-    /** Optional owner-signed authorization for direct CID revocation */
-    signOwnerRevocation: z.ZodOptional<z.ZodType<(cid: string) => Promise<string>, z.ZodTypeDef, (cid: string) => Promise<string>>>;
-    /** Optional custom fetch implementation */
-    fetch: z.ZodOptional<z.ZodEffects<z.ZodUnknown, FetchFunction, unknown>>;
-}, "strip", z.ZodTypeAny, {
-    session: ServiceSession;
-    hosts: string[];
-    invoke: InvokeFunction;
-    invokeAny?: InvokeAnyFunction | undefined;
-    accountSpaceId?: string | undefined;
-    signOwnerRevocation?: ((cid: string) => Promise<string>) | undefined;
-    fetch?: FetchFunction | undefined;
-}, {
-    hosts: string[];
-    session?: unknown;
-    invokeAny?: unknown;
-    accountSpaceId?: string | undefined;
-    invoke?: unknown;
-    signOwnerRevocation?: ((cid: string) => Promise<string>) | undefined;
-    fetch?: unknown;
-}>;
-type DelegationManagerConfig = z.infer<typeof DelegationManagerConfigSchema>;
-/**
- * Provider interface for cryptographic key operations.
- */
-declare const KeyProviderSchema: z.ZodObject<{
-    /** Generate a new session key, returns key ID */
-    createSessionKey: z.ZodEffects<z.ZodUnknown, (name: string) => Promise<string>, unknown>;
-    /** Get JWK for a key */
-    getJWK: z.ZodEffects<z.ZodUnknown, (keyId: string) => object, unknown>;
-    /** Get DID for a key */
-    getDID: z.ZodEffects<z.ZodUnknown, (keyId: string) => Promise<string>, unknown>;
-}, "strip", z.ZodTypeAny, {
-    createSessionKey: (name: string) => Promise<string>;
-    getJWK: (keyId: string) => object;
-    getDID: (keyId: string) => Promise<string>;
-}, {
-    createSessionKey?: unknown;
-    getJWK?: unknown;
-    getDID?: unknown;
-}>;
-type KeyProvider = z.infer<typeof KeyProviderSchema>;
-/**
- * Response from the delegation API.
- */
-declare const DelegationApiResponseSchema: z.ZodObject<{
-    /** SIWE message content */
-    siwe: z.ZodString;
-    /** Signature of the SIWE message */
-    signature: z.ZodString;
-    /** Delegation version */
-    version: z.ZodNumber;
-    /** CID of the created delegation */
-    cid: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    siwe: string;
-    signature: string;
-    version: number;
-    cid?: string | undefined;
-}, {
-    siwe: string;
-    signature: string;
-    version: number;
-    cid?: string | undefined;
-}>;
-type DelegationApiResponse = z.infer<typeof DelegationApiResponseSchema>;
-/**
- * A single (service, space, path, actions) entry inside a
- * createDelegation WASM result.
- *
- * Mirrors the Rust `DelegatedResource` struct in
- * `tinycloud-sdk-wasm/src/session.rs`. Field names match the manifest
- * {@link PermissionEntry} shape so callers can reconstruct what they sent
- * without having to re-parse the UCAN.
- *
- * `service` is the short form (e.g. `"kv"`, `"sql"`) as returned by the
- * Rust layer. The SDK layer translates to the long form
- * (`"tinycloud.kv"`) when comparing against manifests.
- */
-declare const DelegatedResourceSchema: z.ZodObject<{
-    /** Short-form service name, e.g. "kv", "sql", "duckdb", "capabilities", "hooks". */
-    service: z.ZodString;
-    /** Full space id string, e.g. "tinycloud:pkh:eip155:1:0x....:default". */
-    space: z.ZodString;
-    /** Resource path; empty string when the resource URI had no path segment. */
-    path: z.ZodString;
-    /** Full-URN ability strings, e.g. ["tinycloud.kv/get", "tinycloud.kv/put"]. */
-    actions: z.ZodArray<z.ZodString, "many">;
-    /** Exact ReCap caveats that constrain every action in this scope. */
-    caveats: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
-}, "strip", z.ZodTypeAny, {
-    path: string;
-    space: string;
-    actions: string[];
-    service: string;
-    caveats?: Record<string, unknown>[] | undefined;
-}, {
-    path: string;
-    space: string;
-    actions: string[];
-    service: string;
-    caveats?: Record<string, unknown>[] | undefined;
-}>;
-type DelegatedResource = z.infer<typeof DelegatedResourceSchema>;
-/**
- * Input parameters for the createDelegation WASM function.
- *
- * A single call may encode multiple `(service, path, actions)` entries
- * via the `abilities` map — the underlying UCAN will contain one
- * attenuation entry per `(service, path)` pair, all signed by the same
- * session key in one blob.
- *
- * The `abilities` shape is identical to what `prepareSession` accepts
- * (`Record<shortService, Record<path, actionURNs[]>>`), so manifest
- * resolution can feed both sides from one data structure.
- */
-declare const CreateDelegationWasmParamsSchema: z.ZodObject<{
-    /** The session containing delegation credentials */
-    session: z.ZodEffects<z.ZodUnknown, ServiceSession, unknown>;
-    /** DID of the delegate */
-    delegateDID: z.ZodString;
-    /** Space ID this delegation applies to */
-    spaceId: z.ZodString;
-    /**
-     * Multi-resource abilities map: short-service → path → full-URN actions.
-     * Matches the shape accepted by `prepareSession`.
-     *
-     * Example:
-     * ```
-     * {
-     *   kv: {
-     *     "com.listen.app/": ["tinycloud.kv/get", "tinycloud.kv/put"]
-     *   },
-     *   sql: {
-     *     "com.listen.app/data.sqlite": ["tinycloud.sql/read"]
-     *   }
-     * }
-     * ```
-     */
-    abilities: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
-    /** Expiration time in seconds since Unix epoch */
-    expirationSecs: z.ZodNumber;
-    /** Optional not-before time in seconds since Unix epoch */
-    notBeforeSecs: z.ZodOptional<z.ZodNumber>;
-    /** Issue a terminal delegation: the node refuses onward delegation. Default `false`. */
-    disableSubDelegation: z.ZodOptional<z.ZodBoolean>;
-}, "strip", z.ZodTypeAny, {
-    session: ServiceSession;
-    spaceId: string;
-    delegateDID: string;
-    abilities: Record<string, Record<string, string[]>>;
-    expirationSecs: number;
-    disableSubDelegation?: boolean | undefined;
-    notBeforeSecs?: number | undefined;
-}, {
-    spaceId: string;
-    delegateDID: string;
-    abilities: Record<string, Record<string, string[]>>;
-    expirationSecs: number;
-    session?: unknown;
-    disableSubDelegation?: boolean | undefined;
-    notBeforeSecs?: number | undefined;
-}>;
-type CreateDelegationWasmParams = z.infer<typeof CreateDelegationWasmParamsSchema>;
-/**
- * Result from the createDelegation WASM function.
- *
- * A single UCAN may cover multiple resources. The `resources` array
- * describes every `(service, space, path, actions)` entry granted, in
- * deterministic (service, path) lexicographic order (the Rust side sorts
- * the HashMap entries before signing).
- */
-declare const CreateDelegationWasmResultSchema: z.ZodObject<{
-    /** Base64url-encoded UCAN delegation */
-    delegation: z.ZodString;
-    /** CID of the delegation */
-    cid: z.ZodString;
-    /** DID of the delegate */
-    delegateDID: z.ZodString;
-    /** Expiration time */
-    expiry: z.ZodDate;
-    /**
-     * All (service, space, path, actions) entries granted by this delegation.
-     * Always non-empty on success.
-     */
-    resources: z.ZodArray<z.ZodObject<{
-        /** Short-form service name, e.g. "kv", "sql", "duckdb", "capabilities", "hooks". */
-        service: z.ZodString;
-        /** Full space id string, e.g. "tinycloud:pkh:eip155:1:0x....:default". */
-        space: z.ZodString;
-        /** Resource path; empty string when the resource URI had no path segment. */
-        path: z.ZodString;
-        /** Full-URN ability strings, e.g. ["tinycloud.kv/get", "tinycloud.kv/put"]. */
-        actions: z.ZodArray<z.ZodString, "many">;
-        /** Exact ReCap caveats that constrain every action in this scope. */
-        caveats: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        path: string;
-        space: string;
-        actions: string[];
-        service: string;
-        caveats?: Record<string, unknown>[] | undefined;
-    }, {
-        path: string;
-        space: string;
-        actions: string[];
-        service: string;
-        caveats?: Record<string, unknown>[] | undefined;
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    resources: {
-        path: string;
-        space: string;
-        actions: string[];
-        service: string;
-        caveats?: Record<string, unknown>[] | undefined;
-    }[];
-    delegation: string;
-    expiry: Date;
-    cid: string;
-    delegateDID: string;
-}, {
-    resources: {
-        path: string;
-        space: string;
-        actions: string[];
-        service: string;
-        caveats?: Record<string, unknown>[] | undefined;
-    }[];
-    delegation: string;
-    expiry: Date;
-    cid: string;
-    delegateDID: string;
-}>;
-type CreateDelegationWasmResult = z.infer<typeof CreateDelegationWasmResultSchema>;
-
 /**
  * DelegationManager - Handles delegation CRUD operations.
  *
@@ -1777,6 +41,8 @@ declare class DelegationManager {
     private signOwnerRevocation?;
     private fetchFn;
     private accountSpaceId?;
+    private sessionInvocationSigner?;
+    private issuedState;
     /**
      * Creates a new DelegationManager instance.
      *
@@ -1826,8 +92,43 @@ declare class DelegationManager {
      * exposing delegation metadata.
      */
     status(cid: string): Promise<Result<DelegationStatus>>;
-    /** Query lifecycle-complete delegation history for the authenticated account. */
-    query(options?: AccountDelegationQueryOptions): Promise<Result<AccountDelegationPage>>;
+    /**
+     * Query lifecycle-complete delegation history for the authenticated account.
+     *
+     * `scope.spaces` lists the spaces to sign `tinycloud.delegation/list` for, in order. Omitted, the
+     * account space is tried, then the session's own space. A caller that knows which of them the session
+     * holds passes only those; an empty list sends nothing and answers PERMISSION_DENIED.
+     */
+    query(options?: AccountDelegationQueryOptions, scope?: {
+        readonly spaces?: readonly string[];
+    }): Promise<Result<AccountDelegationPage>>;
+    /** The state the lazily loaded issued-delegation module reads and updates. */
+    private issuedContext;
+    /**
+     * Lists the delegations this session's own key issued (`direction: "issued"`).
+     * The implementation loads on first use.
+     */
+    private queryIssued;
+    /**
+     * Every delegation this session's key issued, following `nextCursor` until
+     * it is absent. `maxItems` stops early once that many are collected;
+     * `untilCid` stops after the page that contains that delegation. Items come
+     * in CID order (each carries `issuedAt`). The implementation loads on first use.
+     */
+    queryAllIssued(options?: Pick<AccountDelegationQueryOptions, "status" | "space"> & {
+        pageSize?: number;
+        maxItems?: number;
+        untilCid?: string;
+    }): Promise<Result<AccountDelegationRecord[]>>;
+    /**
+     * Revokes a delegation this session's key issued, with no proof: a UCAN
+     * signed by the session's own did:key carrying `urn:cid:<cid>` and
+     * `tinycloud.delegation/revoke`. Revoking a delegation that is already revoked
+     * succeeds. A refusal (the key is not the delegator) carries the node's
+     * message; 503 means the chain is too deep right now, retry later.
+     * The implementation loads on first use.
+     */
+    revokeIssued(cid: string): Promise<Result<DelegationRevocationReceipt>>;
     /**
      * Gets the full delegation chain for a given delegation.
      *
@@ -4568,4 +2869,4 @@ declare const ShareNativeResponseSchema: z.ZodDiscriminatedUnion<"action", [z.Zo
 }>]>;
 type ShareNativeResponse = z.infer<typeof ShareNativeResponseSchema>;
 
-export { type OwnerSharePolicyRegistration as $, type AccountDelegationPage as A, type DelegationStatus as B, CREDENTIAL_INVITATION_REQUEST_DOMAIN as C, type DelegationError as D, type DeliveryAdmission as E, type EncodedShareData as F, type GenerateShareParams as G, type ISharingService as H, type ICapabilityKeyRegistry as I, type IngestOptions as J, type JWK as K, type KeyInfo as L, type KeyProvider as M, type KeyType as N, MAX_CONTENT_BYTES as O, MAX_SEALED_SHARE_CONTENT_BYTES as P, MAX_SHARE_ARTIFACT_BYTES as Q, type Result as R, MAX_SHARE_CONTENT_BYTES as S, MemorySenderShareKeyStorage as T, MemorySenderShareRecordStorage as U, MemoryShareCache as V, type OwnerDelegationPermission as W, type OwnerDelegationReceipt as X, type OwnerShareAction as Y, type OwnerShareDecryption as Z, type OwnerShareMatcher as _, type AccountDelegationQueryOptions as a, ShareRecipientClient as a$, type OwnerSharePolicyRegistrationReceipt as a0, type OwnerSharePolicyV2 as a1, type PortableDelegationImportReceipt as a2, type ReceiveOptions as a3, type RegisterOwnerSharePolicyParams as a4, type SenderShareKeyStorage as a5, type SenderShareRecord as a6, type SenderShareRecordStorage as a7, type SenderShareRevocationScope as a8, SenderShareStore as a9, ShareDeliveryRefusedError as aA, type ShareDetachedProof as aB, ShareEnvelopeError as aC, type ShareEnvelopeV2 as aD, type ShareExpiryBounds as aE, type ShareKvContentSource as aF, type ShareLink as aG, type ShareLinkData as aH, type ShareLinkLocation as aI, type ShareListEntry as aJ, type ShareListResult as aK, type ShareNativeAction as aL, type ShareNativeInvokeEnvelopeV1 as aM, type ShareNativeInvokeErrorResult as aN, type ShareNativeInvokeInput as aO, type ShareNativeInvokeResult as aP, type ShareNativeInvokeSuccessResult as aQ, type ShareNativeResponse as aR, ShareNativeResponseSchema as aS, type SharePolicy as aT, type SharePolicyBinding as aU, type SharePolicySession as aV, type SharePolicySessionV1 as aW, type SharePolicySessionWireV1 as aX, type PortableDelegation as aY, type ShareReadInvocationV1 as aZ, type ShareReadResult as a_, type ShareAccess as aa, ShareAccessError as ab, type ShareAccessV2 as ac, type ShareAction as ad, ShareActionSchema as ae, type ShareAddressedDelegationEnvelopeV2 as af, ShareAddressedDelegationEnvelopeV2Schema as ag, type ShareAddressedDelegationRequestV2 as ah, ShareAddressedDelegationRequestV2Schema as ai, type ShareAddressedDelegationResponseV2 as aj, ShareAddressedDelegationResponseV2Schema as ak, type ShareAddressedRecipientMatcher as al, type ShareArtifactInput as am, type ShareArtifactResult as an, type ShareArtifactV2 as ao, type ShareCache as ap, type ShareCacheEntry as aq, type ShareCacheKey as ar, type ShareCacheMetadata as as, type ShareCapabilityLike as at, ShareConflict as au, type ShareContentMetadata as av, type ShareContentSource as aw, type ShareDelegationPreflight as ax, type ShareDeliveryAuthorizationV3Receipt as ay, type ShareDeliveryAuthorizationV3Request as az, type AccountDelegationRecord as b, type ShareRecipientClientOptions as b0, ShareRecipientClientOptionsSchema as b1, type ShareRecipientPolicy as b2, ShareRecipientPolicySchema as b3, type ShareRecipientResult as b4, type ShareRecipientTarget as b5, ShareRecipientTargetSchema as b6, type ShareResource as b7, ShareResourceSchema as b8, type ShareSaveOptions as b9, intersectShareCapabilities as bA, isV2ShareLink as bB, normalizeShareActions as bC, normalizeShareRecipientTarget as bD, normalizeShareResource as bE, parsePortableDelegation as bF, parseShareArtifact as bG, parseShareUrl as bH, restoreDelegatedShareKey as bI, serializePortableDelegation as bJ, shareCapabilityAllows as bK, shortDeliveryLinkBodyCid as bL, signShareEnvelope as bM, validateOwnerSharePolicyRegistration as bN, validateOwnerSharePolicyRegistrationBytes as bO, verifyShareCid as bP, verifyShareDeliveryAuthorizationV3Bytes as bQ, verifyShareEnvelope as bR, withoutShareLink as bS, CapabilityKeyRegistry as bT, type CapabilityKeyRegistryErrorCode as bU, CapabilityKeyRegistryErrorCodes as bV, type StoredDelegationChain as bW, createCapabilityKeyRegistry as bX, type ShareSchema as ba, type ShareSqlContentSource as bb, type ShareWireAction as bc, SharingService as bd, type SharingServiceConfig as be, type SignedDelegation as bf, type SpaceInfo as bg, type SpaceOwnership as bh, type VerifyShareEnvelopeOptions as bi, canonicalOwnerSharePolicy as bj, computeOwnerShareRegistrationCid as bk, computeShareCid as bl, createDelegatedShareKey as bm, createPolicyEnforcementDelegation as bn, createShareArtifact as bo, createShareArtifactAsync as bp, createSharePolicy as bq, createSharingService as br, decryptShareBytesAsync as bs, delegatePortablePolicySession as bt, encodeInlineShareUrl as bu, encodeShareArtifact as bv, encodeShareUrl as bw, encryptShareBytes as bx, encryptShareBytesAsync as by, importPortableDelegation as bz, type AccountDelegationResource as c, type CapabilityEntry as d, type CreateDelegationParams as e, type CreateDelegationWasmParams as f, type CreateDelegationWasmResult as g, type CreateOwnerDelegationParams as h, type CredentialInvitationRequest as i, DELIVERY_ADMISSION_DOMAIN as j, type DelegateReceivedShareParams as k, type DelegatedResource as l, type DelegatedShareAccess as m, type DelegatedShareKey as n, type Delegation as o, type DelegationApiResponse as p, type DelegationChain as q, type DelegationChainV2 as r, type DelegationDirection as s, type DelegationErrorCode as t, DelegationErrorCodes as u, type DelegationFilters as v, DelegationManager as w, type DelegationManagerConfig as x, type DelegationRecord as y, type DelegationRevocationReceipt as z };
+export { type ShareCacheMetadata as $, type ShareAccess as A, ShareAccessError as B, CREDENTIAL_INVITATION_REQUEST_DOMAIN as C, DELIVERY_ADMISSION_DOMAIN as D, type EncodedShareData as E, type ShareAccessV2 as F, type ShareAction as G, ShareActionSchema as H, type ICapabilityKeyRegistry as I, type ShareAddressedDelegationEnvelopeV2 as J, ShareAddressedDelegationEnvelopeV2Schema as K, type ShareAddressedDelegationRequestV2 as L, MAX_CONTENT_BYTES as M, ShareAddressedDelegationRequestV2Schema as N, type OwnerDelegationPermission as O, type PortableDelegationImportReceipt as P, type ShareAddressedDelegationResponseV2 as Q, type ReceiveOptions as R, type SenderShareKeyStorage as S, ShareAddressedDelegationResponseV2Schema as T, type ShareAddressedRecipientMatcher as U, type ShareArtifactInput as V, type ShareArtifactResult as W, type ShareArtifactV2 as X, type ShareCache as Y, type ShareCacheEntry as Z, type ShareCacheKey as _, type CreateOwnerDelegationParams as a, encryptShareBytes as a$, type ShareCapabilityLike as a0, ShareConflict as a1, type ShareContentMetadata as a2, type ShareContentSource as a3, type ShareDelegationPreflight as a4, type ShareDeliveryAuthorizationV3Receipt as a5, type ShareDeliveryAuthorizationV3Request as a6, ShareDeliveryRefusedError as a7, type ShareDetachedProof as a8, ShareEnvelopeError as a9, ShareRecipientPolicySchema as aA, type ShareRecipientResult as aB, type ShareRecipientTarget as aC, ShareRecipientTargetSchema as aD, type ShareResource as aE, ShareResourceSchema as aF, type ShareSaveOptions as aG, type ShareSqlContentSource as aH, type ShareWireAction as aI, SharingService as aJ, type SharingServiceConfig as aK, type SignedDelegation as aL, type VerifyShareEnvelopeOptions as aM, canonicalOwnerSharePolicy as aN, computeOwnerShareRegistrationCid as aO, computeShareCid as aP, createDelegatedShareKey as aQ, createPolicyEnforcementDelegation as aR, createShareArtifact as aS, createShareArtifactAsync as aT, createSharePolicy as aU, createSharingService as aV, decryptShareBytesAsync as aW, delegatePortablePolicySession as aX, encodeInlineShareUrl as aY, encodeShareArtifact as aZ, encodeShareUrl as a_, type ShareEnvelopeV2 as aa, type ShareExpiryBounds as ab, type ShareKvContentSource as ac, type ShareLinkLocation as ad, type ShareListEntry as ae, type ShareListResult as af, type ShareNativeAction as ag, type ShareNativeInvokeEnvelopeV1 as ah, type ShareNativeInvokeErrorResult as ai, type ShareNativeInvokeInput as aj, type ShareNativeInvokeResult as ak, type ShareNativeInvokeSuccessResult as al, type ShareNativeResponse as am, ShareNativeResponseSchema as an, type SharePolicy as ao, type SharePolicyBinding as ap, type SharePolicySession as aq, type SharePolicySessionV1 as ar, type SharePolicySessionWireV1 as as, type PortableDelegation as at, type ShareReadInvocationV1 as au, type ShareReadResult as av, ShareRecipientClient as aw, type ShareRecipientClientOptions as ax, ShareRecipientClientOptionsSchema as ay, type ShareRecipientPolicy as az, type CredentialInvitationRequest as b, encryptShareBytesAsync as b0, importPortableDelegation as b1, intersectShareCapabilities as b2, isV2ShareLink as b3, normalizeShareActions as b4, normalizeShareRecipientTarget as b5, normalizeShareResource as b6, parsePortableDelegation as b7, parseShareArtifact as b8, parseShareUrl as b9, restoreDelegatedShareKey as ba, serializePortableDelegation as bb, shareCapabilityAllows as bc, shortDeliveryLinkBodyCid as bd, signShareEnvelope as be, validateOwnerSharePolicyRegistration as bf, validateOwnerSharePolicyRegistrationBytes as bg, verifyShareCid as bh, verifyShareDeliveryAuthorizationV3Bytes as bi, verifyShareEnvelope as bj, withoutShareLink as bk, CapabilityKeyRegistry as bl, type CapabilityKeyRegistryErrorCode as bm, CapabilityKeyRegistryErrorCodes as bn, type StoredDelegationChain as bo, createCapabilityKeyRegistry as bp, type DelegateReceivedShareParams as c, type DelegatedShareAccess as d, type DelegatedShareKey as e, DelegationManager as f, type DeliveryAdmission as g, type ISharingService as h, MAX_SEALED_SHARE_CONTENT_BYTES as i, MAX_SHARE_ARTIFACT_BYTES as j, MAX_SHARE_CONTENT_BYTES as k, MemorySenderShareKeyStorage as l, MemorySenderShareRecordStorage as m, MemoryShareCache as n, type OwnerDelegationReceipt as o, type OwnerShareAction as p, type OwnerShareDecryption as q, type OwnerShareMatcher as r, type OwnerSharePolicyRegistration as s, type OwnerSharePolicyRegistrationReceipt as t, type OwnerSharePolicyV2 as u, type RegisterOwnerSharePolicyParams as v, type SenderShareRecord as w, type SenderShareRecordStorage as x, type SenderShareRevocationScope as y, SenderShareStore as z };