@tinycloud/share-sdk 0.2.0 → 0.3.0-beta.0

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { ShareEnvelopeV2, ShareEnvelope, ShareAction, ContentSource, ShareEnvelopeV3 } from '@tinycloud/share-envelope';
+import { ShareEnvelopeV2, ShareEnvelope, ShareEnvelopeV3, ShareAction, ContentSource } from '@tinycloud/share-envelope';
 export { CheckBearerDelegationOptions, DelegationCheckResult, canonicalize, checkBearerDelegation, fromBase64Url, requiredResourceUri, resourceUriCovers, toBase64Url } from '@tinycloud/share-envelope';
 
 /** The only interactive boundary exposed by the headless SDK. */
@@ -112,8 +112,10 @@ interface ShareFetchOptions {
     readonly fetchBlob?: (input: {
         readonly origin: string;
         readonly cid: string;
+        readonly signal?: AbortSignal;
     }) => Promise<Uint8Array>;
     readonly fetchFn?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
     readonly expectedOrigin?: string;
     /** Out-of-band signer trust root for addressed envelopes. */
     readonly trustedSignerDid?: string;
@@ -132,7 +134,7 @@ interface ShareFetchOptions {
     readonly authorizationResumeToken?: string;
     readonly authorizationProof?: unknown;
     /** Addressed-only presentation hook. Bearer envelopes and their keys never cross this boundary. */
-    readonly onResolvedAddressedEnvelope?: (envelope: ShareEnvelope | ShareEnvelopeV2, cid: string) => void;
+    readonly onResolvedAddressedEnvelope?: (envelope: ShareEnvelope | ShareEnvelopeV2 | ShareEnvelopeV3, cid: string) => void;
 }
 interface SharePolicyEvidence {
     readonly policyCid: string;
@@ -1037,6 +1039,10 @@ interface SharePresentationMaterial {
     readonly claim?: Record<string, unknown>;
     /** Exact v3 presentation returned by the verified holder ceremony. */
     readonly presentation?: Record<string, unknown>;
+    /** Exact verified issuer envelope used by accountless v4 admission. */
+    readonly credentialEnvelope?: Record<string, unknown>;
+    /** Exact credential requirement committed by the signed policy. */
+    readonly requirement?: Record<string, unknown>;
 }
 interface SharePolicyChallenge {
     readonly challengeId: string;
@@ -1059,6 +1065,13 @@ interface ShareRecipientClientOptions {
         readonly policy: Record<string, unknown>;
     }) => Promise<SharePresentationMaterial>;
     readonly sign?: (bytes: Uint8Array) => Promise<Uint8Array>;
+    readonly signal?: AbortSignal;
+    readonly onStage?: (stage: "policy-admission" | "delegation-import" | "invocation" | "decryption") => void;
+    /** Previously admitted and imported ordinary policy delegation (account v3 fast path). */
+    readonly policyAuthorization?: {
+        readonly authorization: string;
+        readonly cid: string;
+    };
 }
 interface SharePolicySession {
     readonly sessionId: string;
@@ -1077,6 +1090,7 @@ declare class ShareRecipientClient {
     private nativeSigner;
     private holderProof;
     private v3Authorization;
+    private v3NodeAudience;
     private v3ContentKey;
     private v3ContentEnvelope;
     constructor(options: ShareRecipientClientOptions);

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { ShareEnvelopeV2, ShareEnvelope, ShareAction, ContentSource, ShareEnvelopeV3 } from '@tinycloud/share-envelope';
+import { ShareEnvelopeV2, ShareEnvelope, ShareEnvelopeV3, ShareAction, ContentSource } from '@tinycloud/share-envelope';
 export { CheckBearerDelegationOptions, DelegationCheckResult, canonicalize, checkBearerDelegation, fromBase64Url, requiredResourceUri, resourceUriCovers, toBase64Url } from '@tinycloud/share-envelope';
 
 /** The only interactive boundary exposed by the headless SDK. */
@@ -112,8 +112,10 @@ interface ShareFetchOptions {
     readonly fetchBlob?: (input: {
         readonly origin: string;
         readonly cid: string;
+        readonly signal?: AbortSignal;
     }) => Promise<Uint8Array>;
     readonly fetchFn?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
     readonly expectedOrigin?: string;
     /** Out-of-band signer trust root for addressed envelopes. */
     readonly trustedSignerDid?: string;
@@ -132,7 +134,7 @@ interface ShareFetchOptions {
     readonly authorizationResumeToken?: string;
     readonly authorizationProof?: unknown;
     /** Addressed-only presentation hook. Bearer envelopes and their keys never cross this boundary. */
-    readonly onResolvedAddressedEnvelope?: (envelope: ShareEnvelope | ShareEnvelopeV2, cid: string) => void;
+    readonly onResolvedAddressedEnvelope?: (envelope: ShareEnvelope | ShareEnvelopeV2 | ShareEnvelopeV3, cid: string) => void;
 }
 interface SharePolicyEvidence {
     readonly policyCid: string;
@@ -1037,6 +1039,10 @@ interface SharePresentationMaterial {
     readonly claim?: Record<string, unknown>;
     /** Exact v3 presentation returned by the verified holder ceremony. */
     readonly presentation?: Record<string, unknown>;
+    /** Exact verified issuer envelope used by accountless v4 admission. */
+    readonly credentialEnvelope?: Record<string, unknown>;
+    /** Exact credential requirement committed by the signed policy. */
+    readonly requirement?: Record<string, unknown>;
 }
 interface SharePolicyChallenge {
     readonly challengeId: string;
@@ -1059,6 +1065,13 @@ interface ShareRecipientClientOptions {
         readonly policy: Record<string, unknown>;
     }) => Promise<SharePresentationMaterial>;
     readonly sign?: (bytes: Uint8Array) => Promise<Uint8Array>;
+    readonly signal?: AbortSignal;
+    readonly onStage?: (stage: "policy-admission" | "delegation-import" | "invocation" | "decryption") => void;
+    /** Previously admitted and imported ordinary policy delegation (account v3 fast path). */
+    readonly policyAuthorization?: {
+        readonly authorization: string;
+        readonly cid: string;
+    };
 }
 interface SharePolicySession {
     readonly sessionId: string;
@@ -1077,6 +1090,7 @@ declare class ShareRecipientClient {
     private nativeSigner;
     private holderProof;
     private v3Authorization;
+    private v3NodeAudience;
     private v3ContentKey;
     private v3ContentEnvelope;
     constructor(options: ShareRecipientClientOptions);