@tinycloud/share-sdk 1.2.0-beta.2 → 1.2.0-beta.4

package/dist/index.d.cts

@@ -1,7 +1,10 @@
 import { ShareEnvelopeV3, ShareEnvelopeV2 } from '@tinycloud/share-envelope';
 export { CheckBearerDelegationOptions, DelegationCheckResult, canonicalize, checkBearerDelegation, fromBase64Url, requiredResourceUri, resourceUriCovers, toBase64Url } from '@tinycloud/share-envelope';
-import { S as ShareAuthorizationMethod, O as OwnerShareAction, a as OwnerShareMatcher, P as PublishedShareDeliveryMaterial, b as OwnerSharePolicyRegistrationReceipt, D as DelegatedShareKey, c as PublishedShare, d as ShareAuthorizedContent, e as ShareAuthorizationAdapter, T as TargetPublishOutcome, f as TargetPublishInput, g as ShareAuthorizationResult, h as ShareTarget } from './addressed-publish-CsUS7-SI.cjs';
-export { A as AddressedOwnerRootInput, i as AddressedOwnerRootReceipt, j as AddressedPolicyRegistrationInput, k as AddressedPolicyRegistrationReceipt, l as AddressedPublishAuthority, m as AddressedSharePublishOptions, n as AddressedShareRequest, C as CreateOwnerDelegationParams, o as DEFAULT_SHARE_LIFETIME_MS, M as MAX_CONTENT_BYTES, p as OWNER_SHARE_REGISTRATION_DOMAIN, q as OwnerDelegationPermission, r as OwnerDelegationReceipt, s as OwnerShareDecryption, t as OwnerSharePolicyRegistration, u as OwnerSharePolicyV2, v as PreparedAddressedShare, w as PublishedShareMetadata, R as RegisterOwnerSharePolicyParams, x as SHARE_CONTENT_LIMIT, y as SHARE_PUBLISH_RESULT_VERSION, z as ShareAuthorizationDenied, B as ShareAuthorizationReady, E as ShareAuthorizationRequired, F as SharePublishError, G as SharePublishErrorCode, H as SharePublishOptions, I as SharePublishTarget, J as SignedDelegation, K as TargetPublishAdapter, L as addressedCredentialRequirement, N as authorizationMethodForTarget, Q as authorizeShare, U as canonicalOwnerSharePolicy, V as computeOwnerShareRegistrationCid, W as createDelegatedShareKey, X as createPolicyEnforcementDelegation, Y as normalizeShareTarget, Z as prepareAddressedShare, _ as publishAddressedShare, $ as publishTargetShare, a0 as redactPublishedShare, a1 as restoreDelegatedShareKey, a2 as targetAuthorizationMethod, a3 as validateOwnerSharePolicyRegistration, a4 as validateOwnerSharePolicyRegistrationBytes } from './addressed-publish-CsUS7-SI.cjs';
+import { S as ShareAuthorizationMethod, a as ShareAuthorizedContent, b as ShareAuthorizationAdapter, T as TargetPublishOutcome, c as TargetPublishInput, d as ShareAuthorizationResult, e as ShareTarget } from './addressed-publish-DVvTlGog.cjs';
+export { A as AddressedOwnerRootInput, f as AddressedOwnerRootReceipt, g as AddressedPolicyRegistrationInput, h as AddressedPolicyRegistrationReceipt, i as AddressedPublishAuthority, j as AddressedSharePublishOptions, k as AddressedShareRequest, P as PreparedAddressedShare, l as ShareAuthorizationDenied, m as ShareAuthorizationReady, n as ShareAuthorizationRequired, o as TargetPublishAdapter, p as addressedCredentialRequirement, q as authorizationMethodForTarget, r as authorizeShare, s as normalizeShareTarget, t as prepareAddressedShare, u as publishAddressedShare, v as publishTargetShare, w as targetAuthorizationMethod } from './addressed-publish-DVvTlGog.cjs';
+export { C as CreateOwnerDelegationParams, D as DEFAULT_SHARE_LIFETIME_MS, a as DelegatedShareKey, M as MAX_CONTENT_BYTES, O as OWNER_SHARE_REGISTRATION_DOMAIN, b as OwnerDelegationPermission, c as OwnerDelegationReceipt, d as OwnerShareAction, e as OwnerShareDecryption, f as OwnerShareMatcher, g as OwnerSharePolicyRegistration, h as OwnerSharePolicyRegistrationReceipt, i as OwnerSharePolicyV2, P as PublishedShare, j as PublishedShareDeliveryMaterial, k as PublishedShareMetadata, R as RegisterOwnerSharePolicyParams, S as SHARE_CONTENT_LIMIT, l as SHARE_PUBLISH_RESULT_VERSION, m as SharePublishError, n as SharePublishErrorCode, o as SharePublishOptions, p as SharePublishTarget, q as SignedDelegation, r as canonicalOwnerSharePolicy, s as computeOwnerShareRegistrationCid, t as createDelegatedShareKey, u as createPolicyEnforcementDelegation, v as redactPublishedShare, w as restoreDelegatedShareKey, x as validateOwnerSharePolicyRegistration, y as validateOwnerSharePolicyRegistrationBytes } from './owner-policy-BqzRlkb6.cjs';
+import { S as SenderShareRecord, a as SenderShareRecordStorage } from './history-CUWDK0lE.cjs';
+export { E as EncryptedSenderShareHistory, b as EncryptedShareHistoryStorage, M as MemoryEncryptedShareHistoryStorage, c as MemorySenderShareKeyStorage, d as MemorySenderShareRecordStorage, e as SenderShareKeyStorage, f as SenderShareRecordProofs, g as SenderShareRevocationScope, h as SenderShareStore, i as historyRecordForPublishedShare } from './history-CUWDK0lE.cjs';
 
 declare function hasUnsafeFilenameCodePoint(value: string): boolean;
 /** A single display/download filename, never a path. Returns the NFC form. */
@@ -139,156 +142,6 @@ declare class MemoryShareCache implements ShareCache {
     clear(): Promise<void>;
 }
 
-interface EncryptedShareHistoryStorage {
-    put(value: Uint8Array): Promise<void>;
-    list(): Promise<readonly Uint8Array[]>;
-    clear(): Promise<void>;
-}
-declare class MemoryEncryptedShareHistoryStorage implements EncryptedShareHistoryStorage {
-    private readonly values;
-    put(value: Uint8Array): Promise<void>;
-    list(): Promise<readonly Uint8Array[]>;
-    clear(): Promise<void>;
-}
-/**
- * The durable record a sender needs, after a reload, to display and manage
- * a share it created. Every identity/CID here comes verbatim from the
- * Node-verified {@link OwnerSharePolicyRegistrationReceipt}; nothing is
- * re-derived or guessed.
- */
-interface SenderShareRecord {
-    readonly shareId: string;
-    readonly registrationCid?: string;
-    readonly policyCid?: string;
-    readonly ownerDelegationCid?: string;
-    readonly enforcementDelegationCid?: string;
-    readonly shareKeyDid?: string;
-    readonly ownerDid?: string;
-    readonly enforcerDid?: string;
-    readonly target: {
-        readonly origin: string;
-        readonly nodeAudience: string;
-        readonly spaceId: string;
-    };
-    readonly resource: {
-        readonly kind: "exact" | "prefix";
-        readonly path: string;
-    };
-    readonly actions: readonly OwnerShareAction[];
-    readonly recipientMatcher: OwnerShareMatcher;
-    /** The signed target discriminator, retained separately from the email matcher. */
-    readonly targetKind?: "bearer" | "recipientDid" | "email" | "emailDomain";
-    readonly registeredAt: string;
-    readonly expiresAt: string;
-    readonly revokedAt?: string;
-    readonly envelopeCid?: string;
-    readonly shareCid?: string;
-    /** Complete bearer links are encrypted at rest and only revealed explicitly. */
-    readonly link?: string;
-    readonly filename?: string;
-    /** Policy/v3 delivery material. The containing history record must remain encrypted at rest. */
-    readonly deliveryMaterial?: PublishedShareDeliveryMaterial;
-    /** Canonical mailboxes whose invitation delivery was confirmed; history is encrypted at rest. */
-    readonly deliveredRecipients?: readonly string[];
-}
-/** Create the durable encrypted-history shape from canonical publication receipts. */
-declare function historyRecordForPublishedShare(result: PublishedShare, now?: Date): SenderShareRecord;
-/**
- * "direct" selects the Policy/v3 enforcement root; "ancestor" selects its
- * policy-authority sibling. Addressed shares revoke that signed root through
- * the Node Policy/v3 endpoint, which cuts off existing sessions as well as
- * fresh admission and delivery. Bearer shares retain ordinary delegation
- * revocation.
- */
-type SenderShareRevocationScope = "direct" | "ancestor";
-interface SenderShareRecordStorage {
-    put(record: SenderShareRecord): Promise<void>;
-    /** Atomically transform the latest record, if present. Implementations that
-     * provide this must serialize the read and write with every other writer. */
-    update?(shareId: string, change: (record: SenderShareRecord) => SenderShareRecord | Promise<SenderShareRecord>): Promise<SenderShareRecord | undefined>;
-    list(): Promise<readonly SenderShareRecord[]>;
-    get(shareId: string): Promise<SenderShareRecord | undefined>;
-    delete(shareId: string): Promise<void>;
-}
-interface StoredSenderShareKey {
-    readonly cryptoKey: CryptoKey;
-    readonly publicKey: Uint8Array;
-    readonly extractable: boolean;
-}
-interface SenderShareKeyStorage {
-    put(shareId: string, key: StoredSenderShareKey): Promise<void>;
-    get(shareId: string): Promise<StoredSenderShareKey | undefined>;
-    delete(shareId: string): Promise<void>;
-}
-/** In-memory reference implementation. Real deployments back these with IndexedDB so the non-extractable `CryptoKey` survives a reload via structured clone. */
-declare class MemorySenderShareRecordStorage implements SenderShareRecordStorage {
-    private readonly records;
-    private operation;
-    private serialize;
-    put(record: SenderShareRecord): Promise<void>;
-    update(shareId: string, change: (record: SenderShareRecord) => SenderShareRecord | Promise<SenderShareRecord>): Promise<SenderShareRecord | undefined>;
-    list(): Promise<readonly SenderShareRecord[]>;
-    get(shareId: string): Promise<SenderShareRecord | undefined>;
-    delete(shareId: string): Promise<void>;
-}
-declare class MemorySenderShareKeyStorage implements SenderShareKeyStorage {
-    private readonly keys;
-    put(shareId: string, key: StoredSenderShareKey): Promise<void>;
-    get(shareId: string): Promise<StoredSenderShareKey | undefined>;
-    delete(shareId: string): Promise<void>;
-}
-interface SenderShareStoreOptions {
-    readonly records: SenderShareRecordStorage;
-    readonly keys: SenderShareKeyStorage;
-    readonly now?: () => Date;
-}
-/**
- * Reload-safe sender-side management for shares created through
- * {@link canonicalOwnerSharePolicy} / `registerOwnerSharePolicy`. Persists
- * the registration receipt's canonical identity tuple plus the ephemeral
- * share key's non-extractable `CryptoKey` handle, so a sender can list,
- * inspect, and revoke shares it created in an earlier session -- without
- * ever re-exporting private key material.
- */
-declare class SenderShareStore {
-    private readonly records;
-    private readonly keys;
-    private readonly now;
-    constructor(options: SenderShareStoreOptions);
-    /** Persist a Node-verified registration receipt and its share key handle. */
-    save(receipt: OwnerSharePolicyRegistrationReceipt, key: DelegatedShareKey): Promise<SenderShareRecord>;
-    /** List shares created in any session, most recent first. */
-    list(options?: {
-        readonly includeRevoked?: boolean;
-        readonly includeExpired?: boolean;
-    }): Promise<readonly SenderShareRecord[]>;
-    get(shareId: string): Promise<SenderShareRecord | undefined>;
-    /** Recover a signer for the persisted share key after a reload. */
-    loadKey(shareId: string): Promise<DelegatedShareKey | undefined>;
-    /**
-     * The delegation CID to pass to the node's existing generic
-     * `tinycloud.delegation/revoke` invocation to revoke this share at the
-     * requested scope. Does not itself call the node -- callers invoke
-     * their own `revokeDelegation`/`DelegationManager.revoke` with the
-     * returned CID, then call {@link markRevoked} once that succeeds.
-     */
-    revocationTarget(shareId: string, scope: SenderShareRevocationScope): Promise<string>;
-    /** Mark a share revoked locally after the caller's node-side revoke call succeeds. */
-    markRevoked(shareId: string, revokedAt?: string): Promise<SenderShareRecord>;
-    /** Forget a share and clear its persisted key handle. */
-    remove(shareId: string): Promise<void>;
-}
-/** WebCrypto-backed persistence adapter; links and private material are absent. */
-declare class EncryptedSenderShareHistory {
-    private readonly storage;
-    private readonly key;
-    private readonly now;
-    constructor(storage: EncryptedShareHistoryStorage, key: CryptoKey, now?: () => Date);
-    put(record: SenderShareRecord): Promise<void>;
-    list(): Promise<readonly SenderShareRecord[]>;
-    clear(): Promise<void>;
-}
-
 type ShareNotifyState = "delivered" | "already-delivered" | "partial-failure";
 interface ShareNotifyResult {
     readonly protocol: "tinycloud-share";
@@ -632,4 +485,4 @@ declare function parseNativeShareUrl(value: string): string;
 /** Receive through the public SDK without creating another transport protocol. */
 declare function openNativeShare(sharing: NativeSharingService, link: string): Promise<unknown>;
 
-export { CredentialInvitationError, type CredentialInvitationErrorCode, type CredentialInvitationReceipt, type CredentialInvitationResult, DEFAULT_MAX_CONTENT_BLOB_BYTES, DEFAULT_MAX_SEALED_BLOB_BYTES, DelegatedShareKey, EncryptedSenderShareHistory, type EncryptedShareHistoryStorage, MemoryEncryptedShareHistoryStorage, MemorySenderShareKeyStorage, MemorySenderShareRecordStorage, MemoryShareCache, NATIVE_SHARE_FRAGMENT_PARAMETER, type NativeShareResult, type NativeSharingService, OwnerShareAction, OwnerShareMatcher, OwnerSharePolicyRegistrationReceipt, type ParsedAddressedEnvelope, PublishedShare, PublishedShareDeliveryMaterial, SHARE_RESULT_VERSION, SHARE_V2_PROTOCOL, type SenderShareKeyStorage, type SenderShareRecord, type SenderShareRecordStorage, type SenderShareRevocationScope, SenderShareStore, ShareAuthorizationAdapter, ShareAuthorizationMethod, ShareAuthorizationResult, ShareAuthorizedContent, type ShareCache, type ShareCacheEntry, type ShareCacheKey, type ShareCacheMetadata, type ShareDeliveryAdapter, type ShareErrorCode, type ShareErrorInfo, type ShareFetchOptions, type ShareHistoryView, type ShareInspection, type ShareMetadata, type ShareNodeTrust, ShareNotifyError, type ShareNotifyInput, type ShareNotifyResult, type ShareNotifyState, type SharePolicyChallenge, type SharePolicyDelegationLink, type SharePolicyPublishAdapter, type SharePolicyRootRevocation, type SharePolicySession, type SharePresentationMaterial, type ShareReceiveAuthorizationRequired, ShareReceiveError, type ShareReceiveOutcome, type ShareReceiveResult, ShareRecipientClient, type ShareRecipientClientOptions, type ShareRevocationAdapter, type ShareRevocationResult, ShareTarget, TargetPublishInput, TargetPublishOutcome, canonicalShareFilename, claimShare, createAddressedAuthorization, createNativeShare, createShareV2HolderBindingArtifact, deliverCredentialInvitation, hasUnsafeFilenameCodePoint, historyRecordForPublishedShare, inspectShare, listShares, notifyShare, openNativeShare, parseAddressedEnvelope, parseNativeShareUrl, publishPolicyShare, receiveShare, recipientMatchesShareRecord, resumeShareAuthorization, revokeShare, shareDeliveryWindowExpiresAt, showShare, toShareErrorInfo };
+export { CredentialInvitationError, type CredentialInvitationErrorCode, type CredentialInvitationReceipt, type CredentialInvitationResult, DEFAULT_MAX_CONTENT_BLOB_BYTES, DEFAULT_MAX_SEALED_BLOB_BYTES, MemoryShareCache, NATIVE_SHARE_FRAGMENT_PARAMETER, type NativeShareResult, type NativeSharingService, type ParsedAddressedEnvelope, SHARE_RESULT_VERSION, SHARE_V2_PROTOCOL, SenderShareRecord, SenderShareRecordStorage, ShareAuthorizationAdapter, ShareAuthorizationMethod, ShareAuthorizationResult, ShareAuthorizedContent, type ShareCache, type ShareCacheEntry, type ShareCacheKey, type ShareCacheMetadata, type ShareDeliveryAdapter, type ShareErrorCode, type ShareErrorInfo, type ShareFetchOptions, type ShareHistoryView, type ShareInspection, type ShareMetadata, type ShareNodeTrust, ShareNotifyError, type ShareNotifyInput, type ShareNotifyResult, type ShareNotifyState, type SharePolicyChallenge, type SharePolicyDelegationLink, type SharePolicyPublishAdapter, type SharePolicyRootRevocation, type SharePolicySession, type SharePresentationMaterial, type ShareReceiveAuthorizationRequired, ShareReceiveError, type ShareReceiveOutcome, type ShareReceiveResult, ShareRecipientClient, type ShareRecipientClientOptions, type ShareRevocationAdapter, type ShareRevocationResult, ShareTarget, TargetPublishInput, TargetPublishOutcome, canonicalShareFilename, claimShare, createAddressedAuthorization, createNativeShare, createShareV2HolderBindingArtifact, deliverCredentialInvitation, hasUnsafeFilenameCodePoint, inspectShare, listShares, notifyShare, openNativeShare, parseAddressedEnvelope, parseNativeShareUrl, publishPolicyShare, receiveShare, recipientMatchesShareRecord, resumeShareAuthorization, revokeShare, shareDeliveryWindowExpiresAt, showShare, toShareErrorInfo };

package/dist/index.d.ts

@@ -1,7 +1,10 @@
 import { ShareEnvelopeV3, ShareEnvelopeV2 } from '@tinycloud/share-envelope';
 export { CheckBearerDelegationOptions, DelegationCheckResult, canonicalize, checkBearerDelegation, fromBase64Url, requiredResourceUri, resourceUriCovers, toBase64Url } from '@tinycloud/share-envelope';
-import { S as ShareAuthorizationMethod, O as OwnerShareAction, a as OwnerShareMatcher, P as PublishedShareDeliveryMaterial, b as OwnerSharePolicyRegistrationReceipt, D as DelegatedShareKey, c as PublishedShare, d as ShareAuthorizedContent, e as ShareAuthorizationAdapter, T as TargetPublishOutcome, f as TargetPublishInput, g as ShareAuthorizationResult, h as ShareTarget } from './addressed-publish-CsUS7-SI.js';
-export { A as AddressedOwnerRootInput, i as AddressedOwnerRootReceipt, j as AddressedPolicyRegistrationInput, k as AddressedPolicyRegistrationReceipt, l as AddressedPublishAuthority, m as AddressedSharePublishOptions, n as AddressedShareRequest, C as CreateOwnerDelegationParams, o as DEFAULT_SHARE_LIFETIME_MS, M as MAX_CONTENT_BYTES, p as OWNER_SHARE_REGISTRATION_DOMAIN, q as OwnerDelegationPermission, r as OwnerDelegationReceipt, s as OwnerShareDecryption, t as OwnerSharePolicyRegistration, u as OwnerSharePolicyV2, v as PreparedAddressedShare, w as PublishedShareMetadata, R as RegisterOwnerSharePolicyParams, x as SHARE_CONTENT_LIMIT, y as SHARE_PUBLISH_RESULT_VERSION, z as ShareAuthorizationDenied, B as ShareAuthorizationReady, E as ShareAuthorizationRequired, F as SharePublishError, G as SharePublishErrorCode, H as SharePublishOptions, I as SharePublishTarget, J as SignedDelegation, K as TargetPublishAdapter, L as addressedCredentialRequirement, N as authorizationMethodForTarget, Q as authorizeShare, U as canonicalOwnerSharePolicy, V as computeOwnerShareRegistrationCid, W as createDelegatedShareKey, X as createPolicyEnforcementDelegation, Y as normalizeShareTarget, Z as prepareAddressedShare, _ as publishAddressedShare, $ as publishTargetShare, a0 as redactPublishedShare, a1 as restoreDelegatedShareKey, a2 as targetAuthorizationMethod, a3 as validateOwnerSharePolicyRegistration, a4 as validateOwnerSharePolicyRegistrationBytes } from './addressed-publish-CsUS7-SI.js';
+import { S as ShareAuthorizationMethod, a as ShareAuthorizedContent, b as ShareAuthorizationAdapter, T as TargetPublishOutcome, c as TargetPublishInput, d as ShareAuthorizationResult, e as ShareTarget } from './addressed-publish-BDaGyQA9.js';
+export { A as AddressedOwnerRootInput, f as AddressedOwnerRootReceipt, g as AddressedPolicyRegistrationInput, h as AddressedPolicyRegistrationReceipt, i as AddressedPublishAuthority, j as AddressedSharePublishOptions, k as AddressedShareRequest, P as PreparedAddressedShare, l as ShareAuthorizationDenied, m as ShareAuthorizationReady, n as ShareAuthorizationRequired, o as TargetPublishAdapter, p as addressedCredentialRequirement, q as authorizationMethodForTarget, r as authorizeShare, s as normalizeShareTarget, t as prepareAddressedShare, u as publishAddressedShare, v as publishTargetShare, w as targetAuthorizationMethod } from './addressed-publish-BDaGyQA9.js';
+export { C as CreateOwnerDelegationParams, D as DEFAULT_SHARE_LIFETIME_MS, a as DelegatedShareKey, M as MAX_CONTENT_BYTES, O as OWNER_SHARE_REGISTRATION_DOMAIN, b as OwnerDelegationPermission, c as OwnerDelegationReceipt, d as OwnerShareAction, e as OwnerShareDecryption, f as OwnerShareMatcher, g as OwnerSharePolicyRegistration, h as OwnerSharePolicyRegistrationReceipt, i as OwnerSharePolicyV2, P as PublishedShare, j as PublishedShareDeliveryMaterial, k as PublishedShareMetadata, R as RegisterOwnerSharePolicyParams, S as SHARE_CONTENT_LIMIT, l as SHARE_PUBLISH_RESULT_VERSION, m as SharePublishError, n as SharePublishErrorCode, o as SharePublishOptions, p as SharePublishTarget, q as SignedDelegation, r as canonicalOwnerSharePolicy, s as computeOwnerShareRegistrationCid, t as createDelegatedShareKey, u as createPolicyEnforcementDelegation, v as redactPublishedShare, w as restoreDelegatedShareKey, x as validateOwnerSharePolicyRegistration, y as validateOwnerSharePolicyRegistrationBytes } from './owner-policy-BqzRlkb6.js';
+import { S as SenderShareRecord, a as SenderShareRecordStorage } from './history-CyT6x8h4.js';
+export { E as EncryptedSenderShareHistory, b as EncryptedShareHistoryStorage, M as MemoryEncryptedShareHistoryStorage, c as MemorySenderShareKeyStorage, d as MemorySenderShareRecordStorage, e as SenderShareKeyStorage, f as SenderShareRecordProofs, g as SenderShareRevocationScope, h as SenderShareStore, i as historyRecordForPublishedShare } from './history-CyT6x8h4.js';
 
 declare function hasUnsafeFilenameCodePoint(value: string): boolean;
 /** A single display/download filename, never a path. Returns the NFC form. */
@@ -139,156 +142,6 @@ declare class MemoryShareCache implements ShareCache {
     clear(): Promise<void>;
 }
 
-interface EncryptedShareHistoryStorage {
-    put(value: Uint8Array): Promise<void>;
-    list(): Promise<readonly Uint8Array[]>;
-    clear(): Promise<void>;
-}
-declare class MemoryEncryptedShareHistoryStorage implements EncryptedShareHistoryStorage {
-    private readonly values;
-    put(value: Uint8Array): Promise<void>;
-    list(): Promise<readonly Uint8Array[]>;
-    clear(): Promise<void>;
-}
-/**
- * The durable record a sender needs, after a reload, to display and manage
- * a share it created. Every identity/CID here comes verbatim from the
- * Node-verified {@link OwnerSharePolicyRegistrationReceipt}; nothing is
- * re-derived or guessed.
- */
-interface SenderShareRecord {
-    readonly shareId: string;
-    readonly registrationCid?: string;
-    readonly policyCid?: string;
-    readonly ownerDelegationCid?: string;
-    readonly enforcementDelegationCid?: string;
-    readonly shareKeyDid?: string;
-    readonly ownerDid?: string;
-    readonly enforcerDid?: string;
-    readonly target: {
-        readonly origin: string;
-        readonly nodeAudience: string;
-        readonly spaceId: string;
-    };
-    readonly resource: {
-        readonly kind: "exact" | "prefix";
-        readonly path: string;
-    };
-    readonly actions: readonly OwnerShareAction[];
-    readonly recipientMatcher: OwnerShareMatcher;
-    /** The signed target discriminator, retained separately from the email matcher. */
-    readonly targetKind?: "bearer" | "recipientDid" | "email" | "emailDomain";
-    readonly registeredAt: string;
-    readonly expiresAt: string;
-    readonly revokedAt?: string;
-    readonly envelopeCid?: string;
-    readonly shareCid?: string;
-    /** Complete bearer links are encrypted at rest and only revealed explicitly. */
-    readonly link?: string;
-    readonly filename?: string;
-    /** Policy/v3 delivery material. The containing history record must remain encrypted at rest. */
-    readonly deliveryMaterial?: PublishedShareDeliveryMaterial;
-    /** Canonical mailboxes whose invitation delivery was confirmed; history is encrypted at rest. */
-    readonly deliveredRecipients?: readonly string[];
-}
-/** Create the durable encrypted-history shape from canonical publication receipts. */
-declare function historyRecordForPublishedShare(result: PublishedShare, now?: Date): SenderShareRecord;
-/**
- * "direct" selects the Policy/v3 enforcement root; "ancestor" selects its
- * policy-authority sibling. Addressed shares revoke that signed root through
- * the Node Policy/v3 endpoint, which cuts off existing sessions as well as
- * fresh admission and delivery. Bearer shares retain ordinary delegation
- * revocation.
- */
-type SenderShareRevocationScope = "direct" | "ancestor";
-interface SenderShareRecordStorage {
-    put(record: SenderShareRecord): Promise<void>;
-    /** Atomically transform the latest record, if present. Implementations that
-     * provide this must serialize the read and write with every other writer. */
-    update?(shareId: string, change: (record: SenderShareRecord) => SenderShareRecord | Promise<SenderShareRecord>): Promise<SenderShareRecord | undefined>;
-    list(): Promise<readonly SenderShareRecord[]>;
-    get(shareId: string): Promise<SenderShareRecord | undefined>;
-    delete(shareId: string): Promise<void>;
-}
-interface StoredSenderShareKey {
-    readonly cryptoKey: CryptoKey;
-    readonly publicKey: Uint8Array;
-    readonly extractable: boolean;
-}
-interface SenderShareKeyStorage {
-    put(shareId: string, key: StoredSenderShareKey): Promise<void>;
-    get(shareId: string): Promise<StoredSenderShareKey | undefined>;
-    delete(shareId: string): Promise<void>;
-}
-/** In-memory reference implementation. Real deployments back these with IndexedDB so the non-extractable `CryptoKey` survives a reload via structured clone. */
-declare class MemorySenderShareRecordStorage implements SenderShareRecordStorage {
-    private readonly records;
-    private operation;
-    private serialize;
-    put(record: SenderShareRecord): Promise<void>;
-    update(shareId: string, change: (record: SenderShareRecord) => SenderShareRecord | Promise<SenderShareRecord>): Promise<SenderShareRecord | undefined>;
-    list(): Promise<readonly SenderShareRecord[]>;
-    get(shareId: string): Promise<SenderShareRecord | undefined>;
-    delete(shareId: string): Promise<void>;
-}
-declare class MemorySenderShareKeyStorage implements SenderShareKeyStorage {
-    private readonly keys;
-    put(shareId: string, key: StoredSenderShareKey): Promise<void>;
-    get(shareId: string): Promise<StoredSenderShareKey | undefined>;
-    delete(shareId: string): Promise<void>;
-}
-interface SenderShareStoreOptions {
-    readonly records: SenderShareRecordStorage;
-    readonly keys: SenderShareKeyStorage;
-    readonly now?: () => Date;
-}
-/**
- * Reload-safe sender-side management for shares created through
- * {@link canonicalOwnerSharePolicy} / `registerOwnerSharePolicy`. Persists
- * the registration receipt's canonical identity tuple plus the ephemeral
- * share key's non-extractable `CryptoKey` handle, so a sender can list,
- * inspect, and revoke shares it created in an earlier session -- without
- * ever re-exporting private key material.
- */
-declare class SenderShareStore {
-    private readonly records;
-    private readonly keys;
-    private readonly now;
-    constructor(options: SenderShareStoreOptions);
-    /** Persist a Node-verified registration receipt and its share key handle. */
-    save(receipt: OwnerSharePolicyRegistrationReceipt, key: DelegatedShareKey): Promise<SenderShareRecord>;
-    /** List shares created in any session, most recent first. */
-    list(options?: {
-        readonly includeRevoked?: boolean;
-        readonly includeExpired?: boolean;
-    }): Promise<readonly SenderShareRecord[]>;
-    get(shareId: string): Promise<SenderShareRecord | undefined>;
-    /** Recover a signer for the persisted share key after a reload. */
-    loadKey(shareId: string): Promise<DelegatedShareKey | undefined>;
-    /**
-     * The delegation CID to pass to the node's existing generic
-     * `tinycloud.delegation/revoke` invocation to revoke this share at the
-     * requested scope. Does not itself call the node -- callers invoke
-     * their own `revokeDelegation`/`DelegationManager.revoke` with the
-     * returned CID, then call {@link markRevoked} once that succeeds.
-     */
-    revocationTarget(shareId: string, scope: SenderShareRevocationScope): Promise<string>;
-    /** Mark a share revoked locally after the caller's node-side revoke call succeeds. */
-    markRevoked(shareId: string, revokedAt?: string): Promise<SenderShareRecord>;
-    /** Forget a share and clear its persisted key handle. */
-    remove(shareId: string): Promise<void>;
-}
-/** WebCrypto-backed persistence adapter; links and private material are absent. */
-declare class EncryptedSenderShareHistory {
-    private readonly storage;
-    private readonly key;
-    private readonly now;
-    constructor(storage: EncryptedShareHistoryStorage, key: CryptoKey, now?: () => Date);
-    put(record: SenderShareRecord): Promise<void>;
-    list(): Promise<readonly SenderShareRecord[]>;
-    clear(): Promise<void>;
-}
-
 type ShareNotifyState = "delivered" | "already-delivered" | "partial-failure";
 interface ShareNotifyResult {
     readonly protocol: "tinycloud-share";
@@ -632,4 +485,4 @@ declare function parseNativeShareUrl(value: string): string;
 /** Receive through the public SDK without creating another transport protocol. */
 declare function openNativeShare(sharing: NativeSharingService, link: string): Promise<unknown>;
 
-export { CredentialInvitationError, type CredentialInvitationErrorCode, type CredentialInvitationReceipt, type CredentialInvitationResult, DEFAULT_MAX_CONTENT_BLOB_BYTES, DEFAULT_MAX_SEALED_BLOB_BYTES, DelegatedShareKey, EncryptedSenderShareHistory, type EncryptedShareHistoryStorage, MemoryEncryptedShareHistoryStorage, MemorySenderShareKeyStorage, MemorySenderShareRecordStorage, MemoryShareCache, NATIVE_SHARE_FRAGMENT_PARAMETER, type NativeShareResult, type NativeSharingService, OwnerShareAction, OwnerShareMatcher, OwnerSharePolicyRegistrationReceipt, type ParsedAddressedEnvelope, PublishedShare, PublishedShareDeliveryMaterial, SHARE_RESULT_VERSION, SHARE_V2_PROTOCOL, type SenderShareKeyStorage, type SenderShareRecord, type SenderShareRecordStorage, type SenderShareRevocationScope, SenderShareStore, ShareAuthorizationAdapter, ShareAuthorizationMethod, ShareAuthorizationResult, ShareAuthorizedContent, type ShareCache, type ShareCacheEntry, type ShareCacheKey, type ShareCacheMetadata, type ShareDeliveryAdapter, type ShareErrorCode, type ShareErrorInfo, type ShareFetchOptions, type ShareHistoryView, type ShareInspection, type ShareMetadata, type ShareNodeTrust, ShareNotifyError, type ShareNotifyInput, type ShareNotifyResult, type ShareNotifyState, type SharePolicyChallenge, type SharePolicyDelegationLink, type SharePolicyPublishAdapter, type SharePolicyRootRevocation, type SharePolicySession, type SharePresentationMaterial, type ShareReceiveAuthorizationRequired, ShareReceiveError, type ShareReceiveOutcome, type ShareReceiveResult, ShareRecipientClient, type ShareRecipientClientOptions, type ShareRevocationAdapter, type ShareRevocationResult, ShareTarget, TargetPublishInput, TargetPublishOutcome, canonicalShareFilename, claimShare, createAddressedAuthorization, createNativeShare, createShareV2HolderBindingArtifact, deliverCredentialInvitation, hasUnsafeFilenameCodePoint, historyRecordForPublishedShare, inspectShare, listShares, notifyShare, openNativeShare, parseAddressedEnvelope, parseNativeShareUrl, publishPolicyShare, receiveShare, recipientMatchesShareRecord, resumeShareAuthorization, revokeShare, shareDeliveryWindowExpiresAt, showShare, toShareErrorInfo };
+export { CredentialInvitationError, type CredentialInvitationErrorCode, type CredentialInvitationReceipt, type CredentialInvitationResult, DEFAULT_MAX_CONTENT_BLOB_BYTES, DEFAULT_MAX_SEALED_BLOB_BYTES, MemoryShareCache, NATIVE_SHARE_FRAGMENT_PARAMETER, type NativeShareResult, type NativeSharingService, type ParsedAddressedEnvelope, SHARE_RESULT_VERSION, SHARE_V2_PROTOCOL, SenderShareRecord, SenderShareRecordStorage, ShareAuthorizationAdapter, ShareAuthorizationMethod, ShareAuthorizationResult, ShareAuthorizedContent, type ShareCache, type ShareCacheEntry, type ShareCacheKey, type ShareCacheMetadata, type ShareDeliveryAdapter, type ShareErrorCode, type ShareErrorInfo, type ShareFetchOptions, type ShareHistoryView, type ShareInspection, type ShareMetadata, type ShareNodeTrust, ShareNotifyError, type ShareNotifyInput, type ShareNotifyResult, type ShareNotifyState, type SharePolicyChallenge, type SharePolicyDelegationLink, type SharePolicyPublishAdapter, type SharePolicyRootRevocation, type SharePolicySession, type SharePresentationMaterial, type ShareReceiveAuthorizationRequired, ShareReceiveError, type ShareReceiveOutcome, type ShareReceiveResult, ShareRecipientClient, type ShareRecipientClientOptions, type ShareRevocationAdapter, type ShareRevocationResult, ShareTarget, TargetPublishInput, TargetPublishOutcome, canonicalShareFilename, claimShare, createAddressedAuthorization, createNativeShare, createShareV2HolderBindingArtifact, deliverCredentialInvitation, hasUnsafeFilenameCodePoint, inspectShare, listShares, notifyShare, openNativeShare, parseAddressedEnvelope, parseNativeShareUrl, publishPolicyShare, receiveShare, recipientMatchesShareRecord, resumeShareAuthorization, revokeShare, shareDeliveryWindowExpiresAt, showShare, toShareErrorInfo };