@tinycloud/share-sdk 0.2.0-beta.0 → 0.2.0-beta.1

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { ShareEnvelopeV2, ShareEnvelope, ShareAction, ContentSource } from '@tinycloud/share-envelope';
+import { ShareEnvelopeV2, ShareEnvelope, ShareAction, ContentSource, ShareEnvelopeV3 } from '@tinycloud/share-envelope';
 export { CheckBearerDelegationOptions, DelegationCheckResult, canonicalize, checkBearerDelegation, fromBase64Url, requiredResourceUri, resourceUriCovers, toBase64Url } from '@tinycloud/share-envelope';
 
 /** The only interactive boundary exposed by the headless SDK. */
@@ -1033,6 +1033,10 @@ interface SharePresentationMaterial {
     readonly proof: Record<string, unknown>;
     readonly sign?: (bytes: Uint8Array) => Promise<Uint8Array>;
     readonly email?: string;
+    /** Exact v3 credential claim returned by the verified holder ceremony. */
+    readonly claim?: Record<string, unknown>;
+    /** Exact v3 presentation returned by the verified holder ceremony. */
+    readonly presentation?: Record<string, unknown>;
 }
 interface SharePolicyChallenge {
     readonly challengeId: string;
@@ -1047,11 +1051,11 @@ interface ShareRecipientClientOptions {
     readonly nodeOrigin: string;
     readonly trustedNode: ShareNodeTrust;
     readonly holderDid: string;
-    readonly envelope: ShareEnvelopeV2;
+    readonly envelope: ShareEnvelopeV2 | ShareEnvelopeV3;
     readonly fetchFn?: typeof fetch;
     readonly buildPresentation?: (input: {
         readonly challenge: SharePolicyChallenge;
-        readonly envelope: ShareEnvelopeV2;
+        readonly envelope: ShareEnvelopeV2 | ShareEnvelopeV3;
         readonly policy: Record<string, unknown>;
     }) => Promise<SharePresentationMaterial>;
     readonly sign?: (bytes: Uint8Array) => Promise<Uint8Array>;
@@ -1070,12 +1074,24 @@ declare class ShareRecipientClient {
     private readonly fetchFn;
     private session;
     private signer;
+    private nativeSigner;
     private holderProof;
+    private v3Authorization;
+    private v3ContentKey;
+    private v3ContentEnvelope;
     constructor(options: ShareRecipientClientOptions);
     beginChallenge(envelope: ShareEnvelopeV2): Promise<SharePolicyChallenge>;
     private establish;
     authorize(envelope: ShareEnvelopeV2): Promise<ShareAuthorizedContent>;
     establishPolicySession(): Promise<SharePolicySession>;
+    private establishV3;
+    /** Decrypt a v3 KV value through a fresh recipient-signed decrypt invocation. */
+    decryptV3Content(bytes: Uint8Array): Promise<{
+        readonly bytes: Uint8Array;
+        readonly mediaType: string;
+    }>;
+    /** Re-encrypt edited v3 content with the admitted content key. */
+    encryptV3Content(bytes: Uint8Array, mediaType: string): Promise<Uint8Array>;
     resumeWithProof(envelope: ShareEnvelopeV2, resumeToken: string, proof: unknown): Promise<ShareAuthorizedContent>;
     nativeInvoke(request: {
         readonly action: string;
@@ -1085,8 +1101,15 @@ declare class ShareRecipientClient {
         readonly ifMatch?: string;
         readonly contentType?: string;
     }): Promise<Response>;
+    private nativeInvokeV3;
 }
-declare function createAddressedAuthorization(input: Omit<ShareRecipientClientOptions, "envelope">): ShareAuthorizationAdapter<ShareAuthorizedContent>;
+declare function createAddressedAuthorization(input: Omit<ShareRecipientClientOptions, "envelope" | "buildPresentation"> & {
+    readonly buildPresentation?: (input: {
+        readonly challenge: SharePolicyChallenge;
+        readonly envelope: ShareEnvelopeV2;
+        readonly policy: Record<string, unknown>;
+    }) => Promise<SharePresentationMaterial>;
+}): ShareAuthorizationAdapter<ShareAuthorizedContent>;
 
 declare const SHARE_V2_PROTOCOL: Readonly<{
     readonly challengeDomain: "xyz.tinycloud.share/policy-challenge/v2\0";

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { ShareEnvelopeV2, ShareEnvelope, ShareAction, ContentSource } from '@tinycloud/share-envelope';
+import { ShareEnvelopeV2, ShareEnvelope, ShareAction, ContentSource, ShareEnvelopeV3 } from '@tinycloud/share-envelope';
 export { CheckBearerDelegationOptions, DelegationCheckResult, canonicalize, checkBearerDelegation, fromBase64Url, requiredResourceUri, resourceUriCovers, toBase64Url } from '@tinycloud/share-envelope';
 
 /** The only interactive boundary exposed by the headless SDK. */
@@ -1033,6 +1033,10 @@ interface SharePresentationMaterial {
     readonly proof: Record<string, unknown>;
     readonly sign?: (bytes: Uint8Array) => Promise<Uint8Array>;
     readonly email?: string;
+    /** Exact v3 credential claim returned by the verified holder ceremony. */
+    readonly claim?: Record<string, unknown>;
+    /** Exact v3 presentation returned by the verified holder ceremony. */
+    readonly presentation?: Record<string, unknown>;
 }
 interface SharePolicyChallenge {
     readonly challengeId: string;
@@ -1047,11 +1051,11 @@ interface ShareRecipientClientOptions {
     readonly nodeOrigin: string;
     readonly trustedNode: ShareNodeTrust;
     readonly holderDid: string;
-    readonly envelope: ShareEnvelopeV2;
+    readonly envelope: ShareEnvelopeV2 | ShareEnvelopeV3;
     readonly fetchFn?: typeof fetch;
     readonly buildPresentation?: (input: {
         readonly challenge: SharePolicyChallenge;
-        readonly envelope: ShareEnvelopeV2;
+        readonly envelope: ShareEnvelopeV2 | ShareEnvelopeV3;
         readonly policy: Record<string, unknown>;
     }) => Promise<SharePresentationMaterial>;
     readonly sign?: (bytes: Uint8Array) => Promise<Uint8Array>;
@@ -1070,12 +1074,24 @@ declare class ShareRecipientClient {
     private readonly fetchFn;
     private session;
     private signer;
+    private nativeSigner;
     private holderProof;
+    private v3Authorization;
+    private v3ContentKey;
+    private v3ContentEnvelope;
     constructor(options: ShareRecipientClientOptions);
     beginChallenge(envelope: ShareEnvelopeV2): Promise<SharePolicyChallenge>;
     private establish;
     authorize(envelope: ShareEnvelopeV2): Promise<ShareAuthorizedContent>;
     establishPolicySession(): Promise<SharePolicySession>;
+    private establishV3;
+    /** Decrypt a v3 KV value through a fresh recipient-signed decrypt invocation. */
+    decryptV3Content(bytes: Uint8Array): Promise<{
+        readonly bytes: Uint8Array;
+        readonly mediaType: string;
+    }>;
+    /** Re-encrypt edited v3 content with the admitted content key. */
+    encryptV3Content(bytes: Uint8Array, mediaType: string): Promise<Uint8Array>;
     resumeWithProof(envelope: ShareEnvelopeV2, resumeToken: string, proof: unknown): Promise<ShareAuthorizedContent>;
     nativeInvoke(request: {
         readonly action: string;
@@ -1085,8 +1101,15 @@ declare class ShareRecipientClient {
         readonly ifMatch?: string;
         readonly contentType?: string;
     }): Promise<Response>;
+    private nativeInvokeV3;
 }
-declare function createAddressedAuthorization(input: Omit<ShareRecipientClientOptions, "envelope">): ShareAuthorizationAdapter<ShareAuthorizedContent>;
+declare function createAddressedAuthorization(input: Omit<ShareRecipientClientOptions, "envelope" | "buildPresentation"> & {
+    readonly buildPresentation?: (input: {
+        readonly challenge: SharePolicyChallenge;
+        readonly envelope: ShareEnvelopeV2;
+        readonly policy: Record<string, unknown>;
+    }) => Promise<SharePresentationMaterial>;
+}): ShareAuthorizationAdapter<ShareAuthorizedContent>;
 
 declare const SHARE_V2_PROTOCOL: Readonly<{
     readonly challengeDomain: "xyz.tinycloud.share/policy-challenge/v2\0";