@tinycloud/sdk-core 3.8.0-beta.9 → 3.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,5 +1,7 @@
1
- import { I as ICapabilityKeyRegistry, R as Result, D as DelegationError } from '../recipient-types.schema-D7lM-5Jo.cjs';
2
- export { A as AccountDelegationPage, a as AccountDelegationQueryOptions, b as AccountDelegationRecord, c as AccountDelegationResource, C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, d as CapabilityEntry, e as CreateDelegationParams, f as CreateDelegationWasmParams, g as CreateDelegationWasmResult, h as CreateOwnerDelegationParams, i as CredentialInvitationRequest, j as DELIVERY_ADMISSION_DOMAIN, k as DelegateReceivedShareParams, l as DelegatedResource, m as DelegatedShareAccess, n as DelegatedShareKey, o as Delegation, p as DelegationApiResponse, q as DelegationChain, r as DelegationChainV2, s as DelegationDirection, t as DelegationErrorCode, u as DelegationErrorCodes, v as DelegationFilters, w as DelegationManager, x as DelegationManagerConfig, y as DelegationRecord, z as DelegationRevocationReceipt, B as DelegationStatus, E as DeliveryAdmission, F as EncodedShareData, G as GenerateShareParams, H as ISharingService, J as IngestOptions, K as JWK, L as KeyInfo, M as KeyProvider, N as KeyType, O as MAX_CONTENT_BYTES, P as MAX_SEALED_SHARE_CONTENT_BYTES, Q as MAX_SHARE_ARTIFACT_BYTES, S as MAX_SHARE_CONTENT_BYTES, T as MemorySenderShareKeyStorage, U as MemorySenderShareRecordStorage, V as MemoryShareCache, W as OwnerDelegationPermission, X as OwnerDelegationReceipt, Y as OwnerShareAction, Z as OwnerShareDecryption, _ as OwnerShareMatcher, $ as OwnerSharePolicyRegistration, a0 as OwnerSharePolicyRegistrationReceipt, a1 as OwnerSharePolicyV2, a2 as PortableDelegationImportReceipt, a3 as ReceiveOptions, a4 as RegisterOwnerSharePolicyParams, a5 as SenderShareKeyStorage, a6 as SenderShareRecord, a7 as SenderShareRecordStorage, a8 as SenderShareRevocationScope, a9 as SenderShareStore, aa as ShareAccess, ab as ShareAccessError, ac as ShareAccessV2, ad as ShareAction, ae as ShareActionSchema, af as ShareAddressedDelegationEnvelopeV2, ag as ShareAddressedDelegationEnvelopeV2Schema, ah as ShareAddressedDelegationRequestV2, ai as ShareAddressedDelegationRequestV2Schema, aj as ShareAddressedDelegationResponseV2, ak as ShareAddressedDelegationResponseV2Schema, al as ShareAddressedRecipientMatcher, am as ShareArtifactInput, an as ShareArtifactResult, ao as ShareArtifactV2, ap as ShareCache, aq as ShareCacheEntry, ar as ShareCacheKey, as as ShareCacheMetadata, at as ShareCapabilityLike, au as ShareConflict, av as ShareContentMetadata, aw as ShareContentSource, ax as ShareDelegationPreflight, ay as ShareDeliveryAuthorizationV3Receipt, az as ShareDeliveryAuthorizationV3Request, aA as ShareDeliveryRefusedError, aB as ShareDetachedProof, aC as ShareEnvelopeError, aD as ShareEnvelopeV2, aE as ShareExpiryBounds, aF as ShareKvContentSource, aG as ShareLink, aH as ShareLinkData, aI as ShareLinkLocation, aJ as ShareListEntry, aK as ShareListResult, aL as ShareNativeAction, aM as ShareNativeInvokeEnvelopeV1, aN as ShareNativeInvokeErrorResult, aO as ShareNativeInvokeInput, aP as ShareNativeInvokeResult, aQ as ShareNativeInvokeSuccessResult, aR as ShareNativeResponse, aS as ShareNativeResponseSchema, aT as SharePolicy, aU as SharePolicyBinding, aV as SharePolicySession, aW as SharePolicySessionV1, aX as SharePolicySessionWireV1, aY as SharePortableDelegation, aZ as ShareReadInvocationV1, a_ as ShareReadResult, a$ as ShareRecipientClient, b0 as ShareRecipientClientOptions, b1 as ShareRecipientClientOptionsSchema, b2 as ShareRecipientPolicy, b3 as ShareRecipientPolicySchema, b4 as ShareRecipientResult, b5 as ShareRecipientTarget, b6 as ShareRecipientTargetSchema, b7 as ShareResource, b8 as ShareResourceSchema, b9 as ShareSaveOptions, ba as ShareSchema, bb as ShareSqlContentSource, bc as ShareWireAction, bd as SharingService, be as SharingServiceConfig, bf as SignedDelegation, bg as SpaceInfo, bh as SpaceOwnership, bi as VerifyShareEnvelopeOptions, bj as canonicalOwnerSharePolicy, bk as computeOwnerShareRegistrationCid, bl as computeShareCid, bm as createDelegatedShareKey, bn as createPolicyEnforcementDelegation, bo as createShareArtifact, bp as createShareArtifactAsync, bq as createSharePolicy, br as createSharingService, bs as decryptShareBytesAsync, bt as delegatePortablePolicySession, bu as encodeInlineShareUrl, bv as encodeShareArtifact, bw as encodeShareUrl, bx as encryptShareBytes, by as encryptShareBytesAsync, bz as importPortableDelegation, bA as intersectShareCapabilities, bB as isV2ShareLink, bC as normalizeShareActions, bD as normalizeShareRecipientTarget, bE as normalizeShareResource, bF as parsePortableDelegation, bG as parseShareArtifact, bH as parseShareUrl, bI as restoreDelegatedShareKey, bJ as serializePortableDelegation, bK as shareCapabilityAllows, bL as shortDeliveryLinkBodyCid, bM as signShareEnvelope, bN as validateOwnerSharePolicyRegistration, bO as validateOwnerSharePolicyRegistrationBytes, bP as verifyShareCid, bQ as verifyShareDeliveryAuthorizationV3Bytes, bR as verifyShareEnvelope, bS as withoutShareLink } from '../recipient-types.schema-D7lM-5Jo.cjs';
1
+ import { R as Result, D as DelegationError } from '../types.schema-BmN-OnCA.cjs';
2
+ export { A as AccountDelegationPage, a as AccountDelegationQueryOptions, b as AccountDelegationRecord, c as AccountDelegationResource, C as CapabilityEntry, d as CreateDelegationParams, e as CreateDelegationWasmParams, f as CreateDelegationWasmResult, g as DelegatedResource, h as Delegation, i as DelegationApiResponse, j as DelegationChain, k as DelegationChainV2, l as DelegationDirection, m as DelegationErrorCode, n as DelegationErrorCodes, o as DelegationFilters, p as DelegationManagerConfig, q as DelegationRecord, r as DelegationRevocationReceipt, s as DelegationStatus, G as GenerateShareParams, I as IngestOptions, J as JWK, K as KeyInfo, t as KeyProvider, u as KeyType, S as SessionInvocationSigner, v as ShareLink, w as ShareLinkData, x as ShareSchema, y as SpaceInfo, z as SpaceOwnership } from '../types.schema-BmN-OnCA.cjs';
3
+ import { I as ICapabilityKeyRegistry } from '../recipient-types.schema-BIJcihno.cjs';
4
+ export { C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, a as CreateOwnerDelegationParams, b as CredentialInvitationRequest, D as DELIVERY_ADMISSION_DOMAIN, c as DelegateReceivedShareParams, d as DelegatedShareAccess, e as DelegatedShareKey, f as DelegationManager, g as DeliveryAdmission, E as EncodedShareData, h as ISharingService, M as MAX_CONTENT_BYTES, i as MAX_SEALED_SHARE_CONTENT_BYTES, j as MAX_SHARE_ARTIFACT_BYTES, k as MAX_SHARE_CONTENT_BYTES, l as MemorySenderShareKeyStorage, m as MemorySenderShareRecordStorage, n as MemoryShareCache, O as OwnerDelegationPermission, o as OwnerDelegationReceipt, p as OwnerShareAction, q as OwnerShareDecryption, r as OwnerShareMatcher, s as OwnerSharePolicyRegistration, t as OwnerSharePolicyRegistrationReceipt, u as OwnerSharePolicyV2, P as PortableDelegationImportReceipt, R as ReceiveOptions, v as RegisterOwnerSharePolicyParams, S as SenderShareKeyStorage, w as SenderShareRecord, x as SenderShareRecordStorage, y as SenderShareRevocationScope, z as SenderShareStore, A as ShareAccess, B as ShareAccessError, F as ShareAccessV2, G as ShareAction, H as ShareActionSchema, J as ShareAddressedDelegationEnvelopeV2, K as ShareAddressedDelegationEnvelopeV2Schema, L as ShareAddressedDelegationRequestV2, N as ShareAddressedDelegationRequestV2Schema, Q as ShareAddressedDelegationResponseV2, T as ShareAddressedDelegationResponseV2Schema, U as ShareAddressedRecipientMatcher, V as ShareArtifactInput, W as ShareArtifactResult, X as ShareArtifactV2, Y as ShareCache, Z as ShareCacheEntry, _ as ShareCacheKey, $ as ShareCacheMetadata, a0 as ShareCapabilityLike, a1 as ShareConflict, a2 as ShareContentMetadata, a3 as ShareContentSource, a4 as ShareDelegationPreflight, a5 as ShareDeliveryAuthorizationV3Receipt, a6 as ShareDeliveryAuthorizationV3Request, a7 as ShareDeliveryRefusedError, a8 as ShareDetachedProof, a9 as ShareEnvelopeError, aa as ShareEnvelopeV2, ab as ShareExpiryBounds, ac as ShareKvContentSource, ad as ShareLinkLocation, ae as ShareListEntry, af as ShareListResult, ag as ShareNativeAction, ah as ShareNativeInvokeEnvelopeV1, ai as ShareNativeInvokeErrorResult, aj as ShareNativeInvokeInput, ak as ShareNativeInvokeResult, al as ShareNativeInvokeSuccessResult, am as ShareNativeResponse, an as ShareNativeResponseSchema, ao as SharePolicy, ap as SharePolicyBinding, aq as SharePolicySession, ar as SharePolicySessionV1, as as SharePolicySessionWireV1, at as SharePortableDelegation, au as ShareReadInvocationV1, av as ShareReadResult, aw as ShareRecipientClient, ax as ShareRecipientClientOptions, ay as ShareRecipientClientOptionsSchema, az as ShareRecipientPolicy, aA as ShareRecipientPolicySchema, aB as ShareRecipientResult, aC as ShareRecipientTarget, aD as ShareRecipientTargetSchema, aE as ShareResource, aF as ShareResourceSchema, aG as ShareSaveOptions, aH as ShareSqlContentSource, aI as ShareWireAction, aJ as SharingService, aK as SharingServiceConfig, aL as SignedDelegation, aM as VerifyShareEnvelopeOptions, aN as canonicalOwnerSharePolicy, aO as computeOwnerShareRegistrationCid, aP as computeShareCid, aQ as createDelegatedShareKey, aR as createPolicyEnforcementDelegation, aS as createShareArtifact, aT as createShareArtifactAsync, aU as createSharePolicy, aV as createSharingService, aW as decryptShareBytesAsync, aX as delegatePortablePolicySession, aY as encodeInlineShareUrl, aZ as encodeShareArtifact, a_ as encodeShareUrl, a$ as encryptShareBytes, b0 as encryptShareBytesAsync, b1 as importPortableDelegation, b2 as intersectShareCapabilities, b3 as isV2ShareLink, b4 as normalizeShareActions, b5 as normalizeShareRecipientTarget, b6 as normalizeShareResource, b7 as parsePortableDelegation, b8 as parseShareArtifact, b9 as parseShareUrl, ba as restoreDelegatedShareKey, bb as serializePortableDelegation, bc as shareCapabilityAllows, bd as shortDeliveryLinkBodyCid, be as signShareEnvelope, bf as validateOwnerSharePolicyRegistration, bg as validateOwnerSharePolicyRegistrationBytes, bh as verifyShareCid, bi as verifyShareDeliveryAuthorizationV3Bytes, bj as verifyShareEnvelope, bk as withoutShareLink } from '../recipient-types.schema-BIJcihno.cjs';
3
5
  export { EncryptedSenderShareHistory, EncryptedShareHistoryStorage, MemoryEncryptedShareHistoryStorage, ShareAuthorizationAdapter, ShareAuthorizationDenied, ShareAuthorizationMethod, ShareAuthorizationReady, ShareAuthorizationRequired, ShareAuthorizationResult, ShareDeliveryAdapter, ShareErrorCode, ShareErrorInfo, ShareFetchOptions, ShareHistoryView, ShareInspection, ShareMetadata, ShareNotifyResult, ShareNotifyState, SharePolicyPublishAdapter, ShareReceiveError, ShareReceiveResult, ShareRevocationAdapter, ShareRevocationResult, ShareTarget, TargetPublishAdapter, TargetPublishInput, TargetPublishOutcome, authorizationMethodForTarget, authorizeShare, claimShare, inspectShare, listShares, notifyShare, publishPolicyShare, publishTargetShare, receiveShare, resumeShareAuthorization, revokeShare, showShare, toShareErrorInfo } from '@tinycloud/share-sdk';
4
6
  import { z } from 'zod';
5
7
  import { ServiceSession, InvokeFunction, FetchFunction, IKVService } from '@tinycloud/sdk-services';
@@ -1,5 +1,7 @@
1
- import { I as ICapabilityKeyRegistry, R as Result, D as DelegationError } from '../recipient-types.schema-D7lM-5Jo.js';
2
- export { A as AccountDelegationPage, a as AccountDelegationQueryOptions, b as AccountDelegationRecord, c as AccountDelegationResource, C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, d as CapabilityEntry, e as CreateDelegationParams, f as CreateDelegationWasmParams, g as CreateDelegationWasmResult, h as CreateOwnerDelegationParams, i as CredentialInvitationRequest, j as DELIVERY_ADMISSION_DOMAIN, k as DelegateReceivedShareParams, l as DelegatedResource, m as DelegatedShareAccess, n as DelegatedShareKey, o as Delegation, p as DelegationApiResponse, q as DelegationChain, r as DelegationChainV2, s as DelegationDirection, t as DelegationErrorCode, u as DelegationErrorCodes, v as DelegationFilters, w as DelegationManager, x as DelegationManagerConfig, y as DelegationRecord, z as DelegationRevocationReceipt, B as DelegationStatus, E as DeliveryAdmission, F as EncodedShareData, G as GenerateShareParams, H as ISharingService, J as IngestOptions, K as JWK, L as KeyInfo, M as KeyProvider, N as KeyType, O as MAX_CONTENT_BYTES, P as MAX_SEALED_SHARE_CONTENT_BYTES, Q as MAX_SHARE_ARTIFACT_BYTES, S as MAX_SHARE_CONTENT_BYTES, T as MemorySenderShareKeyStorage, U as MemorySenderShareRecordStorage, V as MemoryShareCache, W as OwnerDelegationPermission, X as OwnerDelegationReceipt, Y as OwnerShareAction, Z as OwnerShareDecryption, _ as OwnerShareMatcher, $ as OwnerSharePolicyRegistration, a0 as OwnerSharePolicyRegistrationReceipt, a1 as OwnerSharePolicyV2, a2 as PortableDelegationImportReceipt, a3 as ReceiveOptions, a4 as RegisterOwnerSharePolicyParams, a5 as SenderShareKeyStorage, a6 as SenderShareRecord, a7 as SenderShareRecordStorage, a8 as SenderShareRevocationScope, a9 as SenderShareStore, aa as ShareAccess, ab as ShareAccessError, ac as ShareAccessV2, ad as ShareAction, ae as ShareActionSchema, af as ShareAddressedDelegationEnvelopeV2, ag as ShareAddressedDelegationEnvelopeV2Schema, ah as ShareAddressedDelegationRequestV2, ai as ShareAddressedDelegationRequestV2Schema, aj as ShareAddressedDelegationResponseV2, ak as ShareAddressedDelegationResponseV2Schema, al as ShareAddressedRecipientMatcher, am as ShareArtifactInput, an as ShareArtifactResult, ao as ShareArtifactV2, ap as ShareCache, aq as ShareCacheEntry, ar as ShareCacheKey, as as ShareCacheMetadata, at as ShareCapabilityLike, au as ShareConflict, av as ShareContentMetadata, aw as ShareContentSource, ax as ShareDelegationPreflight, ay as ShareDeliveryAuthorizationV3Receipt, az as ShareDeliveryAuthorizationV3Request, aA as ShareDeliveryRefusedError, aB as ShareDetachedProof, aC as ShareEnvelopeError, aD as ShareEnvelopeV2, aE as ShareExpiryBounds, aF as ShareKvContentSource, aG as ShareLink, aH as ShareLinkData, aI as ShareLinkLocation, aJ as ShareListEntry, aK as ShareListResult, aL as ShareNativeAction, aM as ShareNativeInvokeEnvelopeV1, aN as ShareNativeInvokeErrorResult, aO as ShareNativeInvokeInput, aP as ShareNativeInvokeResult, aQ as ShareNativeInvokeSuccessResult, aR as ShareNativeResponse, aS as ShareNativeResponseSchema, aT as SharePolicy, aU as SharePolicyBinding, aV as SharePolicySession, aW as SharePolicySessionV1, aX as SharePolicySessionWireV1, aY as SharePortableDelegation, aZ as ShareReadInvocationV1, a_ as ShareReadResult, a$ as ShareRecipientClient, b0 as ShareRecipientClientOptions, b1 as ShareRecipientClientOptionsSchema, b2 as ShareRecipientPolicy, b3 as ShareRecipientPolicySchema, b4 as ShareRecipientResult, b5 as ShareRecipientTarget, b6 as ShareRecipientTargetSchema, b7 as ShareResource, b8 as ShareResourceSchema, b9 as ShareSaveOptions, ba as ShareSchema, bb as ShareSqlContentSource, bc as ShareWireAction, bd as SharingService, be as SharingServiceConfig, bf as SignedDelegation, bg as SpaceInfo, bh as SpaceOwnership, bi as VerifyShareEnvelopeOptions, bj as canonicalOwnerSharePolicy, bk as computeOwnerShareRegistrationCid, bl as computeShareCid, bm as createDelegatedShareKey, bn as createPolicyEnforcementDelegation, bo as createShareArtifact, bp as createShareArtifactAsync, bq as createSharePolicy, br as createSharingService, bs as decryptShareBytesAsync, bt as delegatePortablePolicySession, bu as encodeInlineShareUrl, bv as encodeShareArtifact, bw as encodeShareUrl, bx as encryptShareBytes, by as encryptShareBytesAsync, bz as importPortableDelegation, bA as intersectShareCapabilities, bB as isV2ShareLink, bC as normalizeShareActions, bD as normalizeShareRecipientTarget, bE as normalizeShareResource, bF as parsePortableDelegation, bG as parseShareArtifact, bH as parseShareUrl, bI as restoreDelegatedShareKey, bJ as serializePortableDelegation, bK as shareCapabilityAllows, bL as shortDeliveryLinkBodyCid, bM as signShareEnvelope, bN as validateOwnerSharePolicyRegistration, bO as validateOwnerSharePolicyRegistrationBytes, bP as verifyShareCid, bQ as verifyShareDeliveryAuthorizationV3Bytes, bR as verifyShareEnvelope, bS as withoutShareLink } from '../recipient-types.schema-D7lM-5Jo.js';
1
+ import { R as Result, D as DelegationError } from '../types.schema-BmN-OnCA.js';
2
+ export { A as AccountDelegationPage, a as AccountDelegationQueryOptions, b as AccountDelegationRecord, c as AccountDelegationResource, C as CapabilityEntry, d as CreateDelegationParams, e as CreateDelegationWasmParams, f as CreateDelegationWasmResult, g as DelegatedResource, h as Delegation, i as DelegationApiResponse, j as DelegationChain, k as DelegationChainV2, l as DelegationDirection, m as DelegationErrorCode, n as DelegationErrorCodes, o as DelegationFilters, p as DelegationManagerConfig, q as DelegationRecord, r as DelegationRevocationReceipt, s as DelegationStatus, G as GenerateShareParams, I as IngestOptions, J as JWK, K as KeyInfo, t as KeyProvider, u as KeyType, S as SessionInvocationSigner, v as ShareLink, w as ShareLinkData, x as ShareSchema, y as SpaceInfo, z as SpaceOwnership } from '../types.schema-BmN-OnCA.js';
3
+ import { I as ICapabilityKeyRegistry } from '../recipient-types.schema-Ebi5aliq.js';
4
+ export { C as CREDENTIAL_INVITATION_REQUEST_DOMAIN, a as CreateOwnerDelegationParams, b as CredentialInvitationRequest, D as DELIVERY_ADMISSION_DOMAIN, c as DelegateReceivedShareParams, d as DelegatedShareAccess, e as DelegatedShareKey, f as DelegationManager, g as DeliveryAdmission, E as EncodedShareData, h as ISharingService, M as MAX_CONTENT_BYTES, i as MAX_SEALED_SHARE_CONTENT_BYTES, j as MAX_SHARE_ARTIFACT_BYTES, k as MAX_SHARE_CONTENT_BYTES, l as MemorySenderShareKeyStorage, m as MemorySenderShareRecordStorage, n as MemoryShareCache, O as OwnerDelegationPermission, o as OwnerDelegationReceipt, p as OwnerShareAction, q as OwnerShareDecryption, r as OwnerShareMatcher, s as OwnerSharePolicyRegistration, t as OwnerSharePolicyRegistrationReceipt, u as OwnerSharePolicyV2, P as PortableDelegationImportReceipt, R as ReceiveOptions, v as RegisterOwnerSharePolicyParams, S as SenderShareKeyStorage, w as SenderShareRecord, x as SenderShareRecordStorage, y as SenderShareRevocationScope, z as SenderShareStore, A as ShareAccess, B as ShareAccessError, F as ShareAccessV2, G as ShareAction, H as ShareActionSchema, J as ShareAddressedDelegationEnvelopeV2, K as ShareAddressedDelegationEnvelopeV2Schema, L as ShareAddressedDelegationRequestV2, N as ShareAddressedDelegationRequestV2Schema, Q as ShareAddressedDelegationResponseV2, T as ShareAddressedDelegationResponseV2Schema, U as ShareAddressedRecipientMatcher, V as ShareArtifactInput, W as ShareArtifactResult, X as ShareArtifactV2, Y as ShareCache, Z as ShareCacheEntry, _ as ShareCacheKey, $ as ShareCacheMetadata, a0 as ShareCapabilityLike, a1 as ShareConflict, a2 as ShareContentMetadata, a3 as ShareContentSource, a4 as ShareDelegationPreflight, a5 as ShareDeliveryAuthorizationV3Receipt, a6 as ShareDeliveryAuthorizationV3Request, a7 as ShareDeliveryRefusedError, a8 as ShareDetachedProof, a9 as ShareEnvelopeError, aa as ShareEnvelopeV2, ab as ShareExpiryBounds, ac as ShareKvContentSource, ad as ShareLinkLocation, ae as ShareListEntry, af as ShareListResult, ag as ShareNativeAction, ah as ShareNativeInvokeEnvelopeV1, ai as ShareNativeInvokeErrorResult, aj as ShareNativeInvokeInput, ak as ShareNativeInvokeResult, al as ShareNativeInvokeSuccessResult, am as ShareNativeResponse, an as ShareNativeResponseSchema, ao as SharePolicy, ap as SharePolicyBinding, aq as SharePolicySession, ar as SharePolicySessionV1, as as SharePolicySessionWireV1, at as SharePortableDelegation, au as ShareReadInvocationV1, av as ShareReadResult, aw as ShareRecipientClient, ax as ShareRecipientClientOptions, ay as ShareRecipientClientOptionsSchema, az as ShareRecipientPolicy, aA as ShareRecipientPolicySchema, aB as ShareRecipientResult, aC as ShareRecipientTarget, aD as ShareRecipientTargetSchema, aE as ShareResource, aF as ShareResourceSchema, aG as ShareSaveOptions, aH as ShareSqlContentSource, aI as ShareWireAction, aJ as SharingService, aK as SharingServiceConfig, aL as SignedDelegation, aM as VerifyShareEnvelopeOptions, aN as canonicalOwnerSharePolicy, aO as computeOwnerShareRegistrationCid, aP as computeShareCid, aQ as createDelegatedShareKey, aR as createPolicyEnforcementDelegation, aS as createShareArtifact, aT as createShareArtifactAsync, aU as createSharePolicy, aV as createSharingService, aW as decryptShareBytesAsync, aX as delegatePortablePolicySession, aY as encodeInlineShareUrl, aZ as encodeShareArtifact, a_ as encodeShareUrl, a$ as encryptShareBytes, b0 as encryptShareBytesAsync, b1 as importPortableDelegation, b2 as intersectShareCapabilities, b3 as isV2ShareLink, b4 as normalizeShareActions, b5 as normalizeShareRecipientTarget, b6 as normalizeShareResource, b7 as parsePortableDelegation, b8 as parseShareArtifact, b9 as parseShareUrl, ba as restoreDelegatedShareKey, bb as serializePortableDelegation, bc as shareCapabilityAllows, bd as shortDeliveryLinkBodyCid, be as signShareEnvelope, bf as validateOwnerSharePolicyRegistration, bg as validateOwnerSharePolicyRegistrationBytes, bh as verifyShareCid, bi as verifyShareDeliveryAuthorizationV3Bytes, bj as verifyShareEnvelope, bk as withoutShareLink } from '../recipient-types.schema-Ebi5aliq.js';
3
5
  export { EncryptedSenderShareHistory, EncryptedShareHistoryStorage, MemoryEncryptedShareHistoryStorage, ShareAuthorizationAdapter, ShareAuthorizationDenied, ShareAuthorizationMethod, ShareAuthorizationReady, ShareAuthorizationRequired, ShareAuthorizationResult, ShareDeliveryAdapter, ShareErrorCode, ShareErrorInfo, ShareFetchOptions, ShareHistoryView, ShareInspection, ShareMetadata, ShareNotifyResult, ShareNotifyState, SharePolicyPublishAdapter, ShareReceiveError, ShareReceiveResult, ShareRevocationAdapter, ShareRevocationResult, ShareTarget, TargetPublishAdapter, TargetPublishInput, TargetPublishOutcome, authorizationMethodForTarget, authorizeShare, claimShare, inspectShare, listShares, notifyShare, publishPolicyShare, publishTargetShare, receiveShare, resumeShareAuthorization, revokeShare, showShare, toShareErrorInfo } from '@tinycloud/share-sdk';
4
6
  import { z } from 'zod';
5
7
  import { ServiceSession, InvokeFunction, FetchFunction, IKVService } from '@tinycloud/sdk-services';
@@ -75,7 +75,11 @@ var DelegationErrorCodes = {
75
75
  KV_SERVICE_UNAVAILABLE: "KV_SERVICE_UNAVAILABLE",
76
76
  DATA_FETCH_FAILED: "DATA_FETCH_FAILED",
77
77
  VALIDATION_ERROR: "VALIDATION_ERROR",
78
- UNSUPPORTED_OPERATION: "UNSUPPORTED_OPERATION"
78
+ UNSUPPORTED_OPERATION: "UNSUPPORTED_OPERATION",
79
+ /** The node answered 503: the delegation chain is too deep to evaluate right now. Retry later. */
80
+ CHAIN_TOO_DEEP: "CHAIN_TOO_DEEP",
81
+ /** The node answered 400 "invalid delegation query cursor": malformed, foreign or from another filter. Start the listing again without it. */
82
+ INVALID_CURSOR: "INVALID_CURSOR"
79
83
  };
80
84
  var DelegationSchema = z.object({
81
85
  /** Content identifier (CID) of the delegation */
@@ -152,7 +156,7 @@ var AccountDelegationPageSchema = z.object({
152
156
  nextCursor: z.string().optional()
153
157
  }).strict();
154
158
  var AccountDelegationQueryOptionsSchema = z.object({
155
- direction: z.enum(["granted", "received", "all"]).optional(),
159
+ direction: z.enum(["granted", "received", "all", "issued"]).optional(),
156
160
  status: z.enum(["active", "pending", "expired", "revoked", "ancestor_revoked"]).optional(),
157
161
  space: z.string().trim().min(1).optional(),
158
162
  limit: z.number().int().min(1).max(100).optional(),
@@ -338,6 +342,8 @@ var DelegationManagerConfigSchema = z.object({
338
342
  ).optional(),
339
343
  /** Optional owner-signed authorization for direct CID revocation */
340
344
  signOwnerRevocation: z.custom().optional(),
345
+ /** Optional signer for proofless invocations by the session's own did:key (issued-delegation list and revoke) */
346
+ sessionInvocationSigner: z.custom().optional(),
341
347
  /** Optional custom fetch implementation */
342
348
  fetch: z.unknown().refine(
343
349
  (val) => val === void 0 || typeof val === "function",
@@ -433,7 +439,7 @@ var CreateDelegationWasmResultSchema = z.object({
433
439
  resources: z.array(DelegatedResourceSchema)
434
440
  });
435
441
 
436
- // src/delegations/DelegationManager.ts
442
+ // src/delegations/shared.ts
437
443
  var DelegationAction = {
438
444
  REVOKE: "tinycloud.delegation/revoke",
439
445
  STATUS: "tinycloud.delegation/status",
@@ -450,6 +456,8 @@ function createError(code3, message, cause, meta) {
450
456
  meta
451
457
  };
452
458
  }
459
+
460
+ // src/delegations/DelegationManager.ts
453
461
  async function readInvokedJson(response, action) {
454
462
  const text = await response.text();
455
463
  if (text.trim() === "") {
@@ -472,11 +480,13 @@ var DelegationManager = class {
472
480
  * @param config - Configuration including hosts, session, and invoke function
473
481
  */
474
482
  constructor(config) {
483
+ this.issuedState = { issuedQuerySupported: false };
475
484
  this.hosts = config.hosts;
476
485
  this.session = config.session;
477
486
  this.invoke = config.invoke;
478
487
  this.invokeAny = config.invokeAny;
479
488
  this.signOwnerRevocation = config.signOwnerRevocation;
489
+ this.sessionInvocationSigner = config.sessionInvocationSigner;
480
490
  this.fetchFn = config.fetch ?? globalThis.fetch.bind(globalThis);
481
491
  this.accountSpaceId = config.accountSpaceId;
482
492
  }
@@ -719,6 +729,7 @@ var DelegationManager = class {
719
729
  )
720
730
  };
721
731
  }
732
+ if (validated.data.direction === "issued") return this.queryIssued(validated.data);
722
733
  if (!this.invokeAny) {
723
734
  return {
724
735
  ok: false,
@@ -800,6 +811,45 @@ var DelegationManager = class {
800
811
  };
801
812
  }
802
813
  }
814
+ /** The state the lazily loaded issued-delegation module reads and updates. */
815
+ issuedContext() {
816
+ return {
817
+ host: this.host,
818
+ fetchFn: this.fetchFn,
819
+ sessionInvocationSigner: this.sessionInvocationSigner,
820
+ state: this.issuedState
821
+ };
822
+ }
823
+ /**
824
+ * Lists the delegations this session's own key issued (`direction: "issued"`).
825
+ * The implementation loads on first use.
826
+ */
827
+ async queryIssued(options) {
828
+ const issued = await import("@tinycloud/sdk-core/delegations/issued");
829
+ return issued.queryIssued(this.issuedContext(), options);
830
+ }
831
+ /**
832
+ * Every delegation this session's key issued, following `nextCursor` until
833
+ * it is absent. `maxItems` stops early once that many are collected;
834
+ * `untilCid` stops after the page that contains that delegation. Items come
835
+ * in CID order (each carries `issuedAt`). The implementation loads on first use.
836
+ */
837
+ async queryAllIssued(options = {}) {
838
+ const issued = await import("@tinycloud/sdk-core/delegations/issued");
839
+ return issued.queryAllIssued((page) => this.query(page), options);
840
+ }
841
+ /**
842
+ * Revokes a delegation this session's key issued, with no proof: a UCAN
843
+ * signed by the session's own did:key carrying `urn:cid:<cid>` and
844
+ * `tinycloud.delegation/revoke`. Revoking a delegation that is already revoked
845
+ * succeeds. A refusal (the key is not the delegator) carries the node's
846
+ * message; 503 means the chain is too deep right now, retry later.
847
+ * The implementation loads on first use.
848
+ */
849
+ async revokeIssued(cid2) {
850
+ const issued = await import("@tinycloud/sdk-core/delegations/issued");
851
+ return issued.revokeIssued(this.issuedContext(), cid2);
852
+ }
803
853
  /**
804
854
  * Gets the full delegation chain for a given delegation.
805
855
  *
@@ -1137,6 +1187,7 @@ function validateSharingServiceConfig(data) {
1137
1187
  import ms from "ms";
1138
1188
  import { ACCOUNT_MANIFEST_PERMISSIONS } from "@tinycloud/bootstrap";
1139
1189
  import { resolveSecretPath, SECRET_NAME_RE, parseNetworkId } from "@tinycloud/sdk-services";
1190
+ import { parseEncryptionResource } from "@tinycloud/sdk-services/encryption/resource";
1140
1191
  var SERVICE_SHORT_TO_LONG = Object.freeze({
1141
1192
  kv: "tinycloud.kv",
1142
1193
  space: "tinycloud.space",
@@ -1221,6 +1272,7 @@ function principalDid(didUrl) {
1221
1272
  }
1222
1273
 
1223
1274
  // src/capabilities.ts
1275
+ import { encryptionResourceContains } from "@tinycloud/sdk-services/encryption/resource";
1224
1276
  var CaveatedDelegationUnsupportedError = class extends Error {
1225
1277
  constructor(entries) {
1226
1278
  super(
@@ -3531,6 +3583,7 @@ import { sha256 as sha2564 } from "@noble/hashes/sha256";
3531
3583
  import { blake3 as blake32 } from "@noble/hashes/blake3";
3532
3584
  import { ed25519 as ed255192 } from "@noble/curves/ed25519";
3533
3585
  import { z as z4 } from "zod";
3586
+ import { parseEncryptionResource as parseNamedEncryptionResource } from "@tinycloud/sdk-services";
3534
3587
 
3535
3588
  // src/policy/errors.ts
3536
3589
  var SignedObjectProfileError = class extends Error {