@tinycloud/share-sdk 1.2.0-beta.3 → 1.2.0-beta.5

package/dist/owner-policy-BqzRlkb6.d.cts

@@ -0,0 +1,297 @@
+declare const SHARE_CONTENT_LIMIT: number;
+declare const SHARE_PUBLISH_RESULT_VERSION: 1;
+declare const DEFAULT_SHARE_LIFETIME_MS: number;
+type SharePublishTarget = {
+    readonly kind: "bearer";
+} | {
+    readonly kind: "recipientDid";
+    readonly did: string;
+} | {
+    readonly kind: "email";
+    readonly address: string;
+} | {
+    readonly kind: "emailDomain";
+    readonly domain: string;
+};
+/** Input shared by the native bearer and Policy/v3 addressed publishers. */
+interface SharePublishOptions {
+    readonly source: Uint8Array | AsyncIterable<Uint8Array>;
+    readonly filename: string;
+    readonly mediaType?: string;
+    readonly allowBinary?: boolean;
+    readonly target?: SharePublishTarget;
+    readonly expiresAt?: Date;
+    readonly expiryWasExplicit?: boolean;
+    readonly origin: string;
+    readonly maxBytes?: number;
+    readonly now?: () => number;
+}
+interface PublishedShareMetadata {
+    readonly protocol: "tinycloud-share";
+    readonly version: 1;
+    readonly shareId: string;
+    readonly origin: string;
+    readonly target: {
+        readonly kind: "bearer" | "recipientDid" | "email" | "emailDomain";
+        readonly origin: string;
+        readonly nodeAudience: string;
+        readonly spaceId: string;
+    };
+    readonly resource: {
+        readonly kind: "exact" | "prefix";
+        readonly path: string;
+    };
+    readonly actions: readonly string[];
+    readonly expiryClamped?: boolean;
+    readonly expiresAt: string;
+    readonly display: {
+        readonly filename?: string;
+        readonly senderName?: string;
+    };
+    readonly recipientMatcher?: {
+        readonly kind: "bearer" | "recipientDid" | "exactEmail" | "emailDomain";
+        readonly value?: string;
+    };
+    readonly registrationCid?: string;
+    readonly policyCid?: string;
+    readonly ownerDelegationCid?: string;
+    readonly enforcementDelegationCid?: string;
+    readonly ownerDid?: string;
+    readonly shareKeyDid?: string;
+    readonly enforcerDid?: string;
+    readonly envelopeCid?: string;
+    readonly shareCid?: string;
+    /** Set when the content is a numbered artifact version (TC-1428). Pinned: the share can only ever read this version. */
+    readonly artifact?: {
+        readonly id: string;
+        readonly version: number;
+        readonly mode: "pinned";
+    };
+}
+/** Sender-only Policy/v3 material retained in encrypted history for delivery retries. */
+interface PublishedShareDeliveryMaterial {
+    /**
+     * The signed plaintext policy envelope. It is retained only in encrypted
+     * sender history so a delivery can be retried; it never travels in a URL.
+     */
+    readonly envelope: Readonly<Record<string, unknown>>;
+    /** CIDv1/raw/sha2-256 of `sealedEnvelope`, and the CID in the share URL. */
+    readonly shareCid: string;
+    /**
+     * Canonical `version || nonce || AES-256-GCM ciphertext+tag`, base64url.
+     * Node reopens this exact value before authorizing email delivery.
+     */
+    readonly sealedEnvelope: string;
+    /** 32-byte AES-GCM key for `sealedEnvelope`, base64url and fragment-only in the URL. */
+    readonly envelopeKey: string;
+}
+interface PublishedShare {
+    readonly protocol: "tinycloud-share";
+    readonly version: typeof SHARE_PUBLISH_RESULT_VERSION;
+    /** The complete link is deliberately non-enumerable on production results. */
+    readonly url: string;
+    readonly link: {
+        readonly kind: "native" | "policy";
+        readonly cid: string;
+    };
+    readonly metadata: PublishedShareMetadata;
+    /** Non-enumerable Policy/v3 delivery material; never included in command output. */
+    readonly deliveryMaterial?: PublishedShareDeliveryMaterial;
+}
+/** Machine-readable output omits the complete bearer capability and delivery material. */
+declare function redactPublishedShare(result: PublishedShare): Omit<PublishedShare, "url" | "deliveryMaterial">;
+type SharePublishErrorCode = "invalid-argument" | "authority-required" | "max-bytes-exceeded";
+declare class SharePublishError extends Error {
+    readonly code: SharePublishErrorCode;
+    constructor(code: SharePublishErrorCode, message: string);
+}
+
+interface OwnerDelegationReceipt {
+    readonly delegationCid: string;
+    readonly signedDagCbor: Uint8Array;
+    readonly delegation: {
+        readonly delegateDID: string;
+        readonly spaceId: string;
+        readonly path: string;
+        readonly actions: readonly string[];
+        readonly expiry: Date;
+    };
+    /** Exact service-scoped capabilities encoded in the signed owner delegation. */
+    readonly permissions?: readonly OwnerDelegationPermission[];
+}
+interface OwnerDelegationPermission {
+    readonly service: string;
+    readonly path: string;
+    readonly actions: readonly string[];
+}
+interface CreateOwnerDelegationBase {
+    readonly delegateDid: string;
+    readonly spaceId: string;
+    readonly expiresAt: Date;
+}
+type CreateOwnerDelegationParams = CreateOwnerDelegationBase & ({
+    readonly path: string;
+    readonly actions: readonly string[];
+    readonly permissions?: never;
+} | {
+    readonly permissions: readonly OwnerDelegationPermission[];
+    readonly path?: never;
+    readonly actions?: never;
+});
+declare const MAX_CONTENT_BYTES: number;
+declare const OWNER_SHARE_REGISTRATION_DOMAIN = "xyz.tinycloud.share/policy-registration/v2\0";
+type OwnerShareAction = "tinycloud.kv/get" | "tinycloud.kv/list" | "tinycloud.kv/metadata" | "tinycloud.kv/put";
+interface OwnerShareDecryption {
+    readonly networkId: string;
+    readonly action: "tinycloud.encryption/decrypt";
+}
+type OwnerShareMatcher = {
+    readonly kind: "exactEmail";
+    readonly value: string;
+} | {
+    readonly kind: "emailDomain";
+    readonly value: string;
+} | {
+    readonly kind: "recipientDid";
+    readonly value: string;
+} | {
+    readonly kind: "bearer";
+};
+interface OwnerSharePolicyV2 {
+    readonly type: "TinyCloudSharePolicy";
+    readonly version: 2;
+    readonly shareId: string;
+    readonly ownerDid: string;
+    readonly shareKeyDid: string;
+    readonly recipientMatcher: OwnerShareMatcher;
+    readonly target: {
+        readonly origin: string;
+        readonly nodeAudience: string;
+        readonly enforcerDid: string;
+        readonly spaceId: string;
+    };
+    readonly resource: {
+        readonly kind: "exact" | "prefix";
+        readonly path: string;
+    };
+    readonly actions: readonly OwnerShareAction[];
+    readonly decryption?: OwnerShareDecryption;
+    readonly contentSource: {
+        readonly kind: "kv";
+        readonly space: string;
+        readonly path: string;
+        readonly action: "tinycloud.kv/get";
+    };
+    readonly contentSourceDigest: string;
+    readonly ownerDelegationCid: string;
+    readonly expiresAt: string;
+}
+interface DelegatedShareKey {
+    readonly did: string;
+    readonly publicKey: Uint8Array;
+    readonly extractable: boolean;
+    /** The underlying WebCrypto private key handle; private JWK material is never returned. */
+    readonly cryptoKey: CryptoKey;
+    sign(bytes: Uint8Array): Promise<Uint8Array>;
+    clear(): void;
+}
+interface SignedDelegation {
+    readonly cid: string;
+    readonly dagCbor: string;
+    readonly issuerDid: string;
+    readonly audienceDid: string;
+    readonly facts: Record<string, string | readonly string[]>;
+    readonly signature: string;
+}
+interface RegisterOwnerSharePolicyParams {
+    readonly policy: {
+        readonly bytes: Uint8Array;
+        readonly cid: string;
+        readonly proof: string;
+    };
+    readonly ownerDelegation: OwnerDelegationReceipt;
+    readonly enforcementDelegation: SignedDelegation;
+    readonly contentSourceDigest: string;
+    /** The enrolled receipt key from the node trust bundle. */
+    readonly nodeProof?: {
+        readonly kid: string;
+        readonly publicKey: Uint8Array;
+    };
+}
+interface OwnerSharePolicyRegistration {
+    readonly registrationCid: string;
+    readonly policyCid: string;
+    readonly ownerDelegationCid: string;
+    readonly enforcementDelegationCid: string;
+    readonly ownerDid: string;
+    readonly shareKeyDid: string;
+    readonly enforcerDid: string;
+    readonly shareId: string;
+    readonly recipientMatcher: OwnerShareMatcher;
+    readonly target: {
+        readonly origin: string;
+        readonly nodeAudience: string;
+        readonly spaceId: string;
+    };
+    readonly resource: {
+        readonly kind: "exact" | "prefix";
+        readonly path: string;
+    };
+    readonly actions: readonly OwnerShareAction[];
+    readonly contentSource: {
+        readonly kind: "kv";
+        readonly space: string;
+        readonly path: string;
+        readonly action: "tinycloud.kv/get";
+    };
+    readonly contentSourceDigest: string;
+    readonly registeredAt: string;
+    readonly expiresAt: string;
+}
+interface OwnerSharePolicyRegistrationReceipt {
+    readonly registration: OwnerSharePolicyRegistration;
+    readonly proof: {
+        readonly alg: "EdDSA";
+        readonly kid: string;
+        readonly signature: string;
+    };
+}
+declare function createDelegatedShareKey(options: {
+    readonly extractable: boolean;
+}): Promise<DelegatedShareKey>;
+/**
+ * Rehydrate a signer wrapper around a `DelegatedShareKey`'s private
+ * `CryptoKey` handle that was persisted (e.g. via IndexedDB structured
+ * clone) and recovered after a reload. `privateKey` must be the same
+ * non-extractable Ed25519 `CryptoKey` originally produced by
+ * {@link createDelegatedShareKey}.
+ */
+declare function restoreDelegatedShareKey(input: {
+    readonly privateKey: CryptoKey;
+    readonly publicKey: Uint8Array;
+    readonly extractable: boolean;
+}): DelegatedShareKey;
+declare function createPolicyEnforcementDelegation(input: {
+    readonly ownerDelegation: OwnerDelegationReceipt;
+    readonly shareKey: DelegatedShareKey;
+    readonly enforcerDid: string;
+    readonly policyCid: string;
+    readonly shareId: string;
+    readonly spaceId: string;
+    readonly nodeAudience: string;
+    readonly path: string;
+    readonly actions: readonly OwnerShareAction[];
+    readonly contentSourceDigest: string;
+    readonly expiresAt: string;
+}): Promise<SignedDelegation>;
+declare function canonicalOwnerSharePolicy(policy: OwnerSharePolicyV2): Promise<{
+    readonly bytes: Uint8Array;
+    readonly cid: string;
+    readonly digest: string;
+}>;
+declare function computeOwnerShareRegistrationCid(registration: Omit<OwnerSharePolicyRegistration, "registrationCid">): string;
+declare function validateOwnerSharePolicyRegistration(value: unknown, expected: RegisterOwnerSharePolicyParams): OwnerSharePolicyRegistrationReceipt;
+/** Validate the exact UTF-8 response bytes emitted by the registration route. */
+declare function validateOwnerSharePolicyRegistrationBytes(bytesValue: Uint8Array, expected: RegisterOwnerSharePolicyParams): OwnerSharePolicyRegistrationReceipt;
+
+export { type CreateOwnerDelegationParams as C, DEFAULT_SHARE_LIFETIME_MS as D, MAX_CONTENT_BYTES as M, OWNER_SHARE_REGISTRATION_DOMAIN as O, type PublishedShare as P, type RegisterOwnerSharePolicyParams as R, SHARE_CONTENT_LIMIT as S, type DelegatedShareKey as a, type OwnerDelegationPermission as b, type OwnerDelegationReceipt as c, type OwnerShareAction as d, type OwnerShareDecryption as e, type OwnerShareMatcher as f, type OwnerSharePolicyRegistration as g, type OwnerSharePolicyRegistrationReceipt as h, type OwnerSharePolicyV2 as i, type PublishedShareDeliveryMaterial as j, type PublishedShareMetadata as k, SHARE_PUBLISH_RESULT_VERSION as l, SharePublishError as m, type SharePublishErrorCode as n, type SharePublishOptions as o, type SharePublishTarget as p, type SignedDelegation as q, canonicalOwnerSharePolicy as r, computeOwnerShareRegistrationCid as s, createDelegatedShareKey as t, createPolicyEnforcementDelegation as u, redactPublishedShare as v, restoreDelegatedShareKey as w, validateOwnerSharePolicyRegistration as x, validateOwnerSharePolicyRegistrationBytes as y };

package/dist/owner-policy-BqzRlkb6.d.ts

@@ -0,0 +1,297 @@
+declare const SHARE_CONTENT_LIMIT: number;
+declare const SHARE_PUBLISH_RESULT_VERSION: 1;
+declare const DEFAULT_SHARE_LIFETIME_MS: number;
+type SharePublishTarget = {
+    readonly kind: "bearer";
+} | {
+    readonly kind: "recipientDid";
+    readonly did: string;
+} | {
+    readonly kind: "email";
+    readonly address: string;
+} | {
+    readonly kind: "emailDomain";
+    readonly domain: string;
+};
+/** Input shared by the native bearer and Policy/v3 addressed publishers. */
+interface SharePublishOptions {
+    readonly source: Uint8Array | AsyncIterable<Uint8Array>;
+    readonly filename: string;
+    readonly mediaType?: string;
+    readonly allowBinary?: boolean;
+    readonly target?: SharePublishTarget;
+    readonly expiresAt?: Date;
+    readonly expiryWasExplicit?: boolean;
+    readonly origin: string;
+    readonly maxBytes?: number;
+    readonly now?: () => number;
+}
+interface PublishedShareMetadata {
+    readonly protocol: "tinycloud-share";
+    readonly version: 1;
+    readonly shareId: string;
+    readonly origin: string;
+    readonly target: {
+        readonly kind: "bearer" | "recipientDid" | "email" | "emailDomain";
+        readonly origin: string;
+        readonly nodeAudience: string;
+        readonly spaceId: string;
+    };
+    readonly resource: {
+        readonly kind: "exact" | "prefix";
+        readonly path: string;
+    };
+    readonly actions: readonly string[];
+    readonly expiryClamped?: boolean;
+    readonly expiresAt: string;
+    readonly display: {
+        readonly filename?: string;
+        readonly senderName?: string;
+    };
+    readonly recipientMatcher?: {
+        readonly kind: "bearer" | "recipientDid" | "exactEmail" | "emailDomain";
+        readonly value?: string;
+    };
+    readonly registrationCid?: string;
+    readonly policyCid?: string;
+    readonly ownerDelegationCid?: string;
+    readonly enforcementDelegationCid?: string;
+    readonly ownerDid?: string;
+    readonly shareKeyDid?: string;
+    readonly enforcerDid?: string;
+    readonly envelopeCid?: string;
+    readonly shareCid?: string;
+    /** Set when the content is a numbered artifact version (TC-1428). Pinned: the share can only ever read this version. */
+    readonly artifact?: {
+        readonly id: string;
+        readonly version: number;
+        readonly mode: "pinned";
+    };
+}
+/** Sender-only Policy/v3 material retained in encrypted history for delivery retries. */
+interface PublishedShareDeliveryMaterial {
+    /**
+     * The signed plaintext policy envelope. It is retained only in encrypted
+     * sender history so a delivery can be retried; it never travels in a URL.
+     */
+    readonly envelope: Readonly<Record<string, unknown>>;
+    /** CIDv1/raw/sha2-256 of `sealedEnvelope`, and the CID in the share URL. */
+    readonly shareCid: string;
+    /**
+     * Canonical `version || nonce || AES-256-GCM ciphertext+tag`, base64url.
+     * Node reopens this exact value before authorizing email delivery.
+     */
+    readonly sealedEnvelope: string;
+    /** 32-byte AES-GCM key for `sealedEnvelope`, base64url and fragment-only in the URL. */
+    readonly envelopeKey: string;
+}
+interface PublishedShare {
+    readonly protocol: "tinycloud-share";
+    readonly version: typeof SHARE_PUBLISH_RESULT_VERSION;
+    /** The complete link is deliberately non-enumerable on production results. */
+    readonly url: string;
+    readonly link: {
+        readonly kind: "native" | "policy";
+        readonly cid: string;
+    };
+    readonly metadata: PublishedShareMetadata;
+    /** Non-enumerable Policy/v3 delivery material; never included in command output. */
+    readonly deliveryMaterial?: PublishedShareDeliveryMaterial;
+}
+/** Machine-readable output omits the complete bearer capability and delivery material. */
+declare function redactPublishedShare(result: PublishedShare): Omit<PublishedShare, "url" | "deliveryMaterial">;
+type SharePublishErrorCode = "invalid-argument" | "authority-required" | "max-bytes-exceeded";
+declare class SharePublishError extends Error {
+    readonly code: SharePublishErrorCode;
+    constructor(code: SharePublishErrorCode, message: string);
+}
+
+interface OwnerDelegationReceipt {
+    readonly delegationCid: string;
+    readonly signedDagCbor: Uint8Array;
+    readonly delegation: {
+        readonly delegateDID: string;
+        readonly spaceId: string;
+        readonly path: string;
+        readonly actions: readonly string[];
+        readonly expiry: Date;
+    };
+    /** Exact service-scoped capabilities encoded in the signed owner delegation. */
+    readonly permissions?: readonly OwnerDelegationPermission[];
+}
+interface OwnerDelegationPermission {
+    readonly service: string;
+    readonly path: string;
+    readonly actions: readonly string[];
+}
+interface CreateOwnerDelegationBase {
+    readonly delegateDid: string;
+    readonly spaceId: string;
+    readonly expiresAt: Date;
+}
+type CreateOwnerDelegationParams = CreateOwnerDelegationBase & ({
+    readonly path: string;
+    readonly actions: readonly string[];
+    readonly permissions?: never;
+} | {
+    readonly permissions: readonly OwnerDelegationPermission[];
+    readonly path?: never;
+    readonly actions?: never;
+});
+declare const MAX_CONTENT_BYTES: number;
+declare const OWNER_SHARE_REGISTRATION_DOMAIN = "xyz.tinycloud.share/policy-registration/v2\0";
+type OwnerShareAction = "tinycloud.kv/get" | "tinycloud.kv/list" | "tinycloud.kv/metadata" | "tinycloud.kv/put";
+interface OwnerShareDecryption {
+    readonly networkId: string;
+    readonly action: "tinycloud.encryption/decrypt";
+}
+type OwnerShareMatcher = {
+    readonly kind: "exactEmail";
+    readonly value: string;
+} | {
+    readonly kind: "emailDomain";
+    readonly value: string;
+} | {
+    readonly kind: "recipientDid";
+    readonly value: string;
+} | {
+    readonly kind: "bearer";
+};
+interface OwnerSharePolicyV2 {
+    readonly type: "TinyCloudSharePolicy";
+    readonly version: 2;
+    readonly shareId: string;
+    readonly ownerDid: string;
+    readonly shareKeyDid: string;
+    readonly recipientMatcher: OwnerShareMatcher;
+    readonly target: {
+        readonly origin: string;
+        readonly nodeAudience: string;
+        readonly enforcerDid: string;
+        readonly spaceId: string;
+    };
+    readonly resource: {
+        readonly kind: "exact" | "prefix";
+        readonly path: string;
+    };
+    readonly actions: readonly OwnerShareAction[];
+    readonly decryption?: OwnerShareDecryption;
+    readonly contentSource: {
+        readonly kind: "kv";
+        readonly space: string;
+        readonly path: string;
+        readonly action: "tinycloud.kv/get";
+    };
+    readonly contentSourceDigest: string;
+    readonly ownerDelegationCid: string;
+    readonly expiresAt: string;
+}
+interface DelegatedShareKey {
+    readonly did: string;
+    readonly publicKey: Uint8Array;
+    readonly extractable: boolean;
+    /** The underlying WebCrypto private key handle; private JWK material is never returned. */
+    readonly cryptoKey: CryptoKey;
+    sign(bytes: Uint8Array): Promise<Uint8Array>;
+    clear(): void;
+}
+interface SignedDelegation {
+    readonly cid: string;
+    readonly dagCbor: string;
+    readonly issuerDid: string;
+    readonly audienceDid: string;
+    readonly facts: Record<string, string | readonly string[]>;
+    readonly signature: string;
+}
+interface RegisterOwnerSharePolicyParams {
+    readonly policy: {
+        readonly bytes: Uint8Array;
+        readonly cid: string;
+        readonly proof: string;
+    };
+    readonly ownerDelegation: OwnerDelegationReceipt;
+    readonly enforcementDelegation: SignedDelegation;
+    readonly contentSourceDigest: string;
+    /** The enrolled receipt key from the node trust bundle. */
+    readonly nodeProof?: {
+        readonly kid: string;
+        readonly publicKey: Uint8Array;
+    };
+}
+interface OwnerSharePolicyRegistration {
+    readonly registrationCid: string;
+    readonly policyCid: string;
+    readonly ownerDelegationCid: string;
+    readonly enforcementDelegationCid: string;
+    readonly ownerDid: string;
+    readonly shareKeyDid: string;
+    readonly enforcerDid: string;
+    readonly shareId: string;
+    readonly recipientMatcher: OwnerShareMatcher;
+    readonly target: {
+        readonly origin: string;
+        readonly nodeAudience: string;
+        readonly spaceId: string;
+    };
+    readonly resource: {
+        readonly kind: "exact" | "prefix";
+        readonly path: string;
+    };
+    readonly actions: readonly OwnerShareAction[];
+    readonly contentSource: {
+        readonly kind: "kv";
+        readonly space: string;
+        readonly path: string;
+        readonly action: "tinycloud.kv/get";
+    };
+    readonly contentSourceDigest: string;
+    readonly registeredAt: string;
+    readonly expiresAt: string;
+}
+interface OwnerSharePolicyRegistrationReceipt {
+    readonly registration: OwnerSharePolicyRegistration;
+    readonly proof: {
+        readonly alg: "EdDSA";
+        readonly kid: string;
+        readonly signature: string;
+    };
+}
+declare function createDelegatedShareKey(options: {
+    readonly extractable: boolean;
+}): Promise<DelegatedShareKey>;
+/**
+ * Rehydrate a signer wrapper around a `DelegatedShareKey`'s private
+ * `CryptoKey` handle that was persisted (e.g. via IndexedDB structured
+ * clone) and recovered after a reload. `privateKey` must be the same
+ * non-extractable Ed25519 `CryptoKey` originally produced by
+ * {@link createDelegatedShareKey}.
+ */
+declare function restoreDelegatedShareKey(input: {
+    readonly privateKey: CryptoKey;
+    readonly publicKey: Uint8Array;
+    readonly extractable: boolean;
+}): DelegatedShareKey;
+declare function createPolicyEnforcementDelegation(input: {
+    readonly ownerDelegation: OwnerDelegationReceipt;
+    readonly shareKey: DelegatedShareKey;
+    readonly enforcerDid: string;
+    readonly policyCid: string;
+    readonly shareId: string;
+    readonly spaceId: string;
+    readonly nodeAudience: string;
+    readonly path: string;
+    readonly actions: readonly OwnerShareAction[];
+    readonly contentSourceDigest: string;
+    readonly expiresAt: string;
+}): Promise<SignedDelegation>;
+declare function canonicalOwnerSharePolicy(policy: OwnerSharePolicyV2): Promise<{
+    readonly bytes: Uint8Array;
+    readonly cid: string;
+    readonly digest: string;
+}>;
+declare function computeOwnerShareRegistrationCid(registration: Omit<OwnerSharePolicyRegistration, "registrationCid">): string;
+declare function validateOwnerSharePolicyRegistration(value: unknown, expected: RegisterOwnerSharePolicyParams): OwnerSharePolicyRegistrationReceipt;
+/** Validate the exact UTF-8 response bytes emitted by the registration route. */
+declare function validateOwnerSharePolicyRegistrationBytes(bytesValue: Uint8Array, expected: RegisterOwnerSharePolicyParams): OwnerSharePolicyRegistrationReceipt;
+
+export { type CreateOwnerDelegationParams as C, DEFAULT_SHARE_LIFETIME_MS as D, MAX_CONTENT_BYTES as M, OWNER_SHARE_REGISTRATION_DOMAIN as O, type PublishedShare as P, type RegisterOwnerSharePolicyParams as R, SHARE_CONTENT_LIMIT as S, type DelegatedShareKey as a, type OwnerDelegationPermission as b, type OwnerDelegationReceipt as c, type OwnerShareAction as d, type OwnerShareDecryption as e, type OwnerShareMatcher as f, type OwnerSharePolicyRegistration as g, type OwnerSharePolicyRegistrationReceipt as h, type OwnerSharePolicyV2 as i, type PublishedShareDeliveryMaterial as j, type PublishedShareMetadata as k, SHARE_PUBLISH_RESULT_VERSION as l, SharePublishError as m, type SharePublishErrorCode as n, type SharePublishOptions as o, type SharePublishTarget as p, type SignedDelegation as q, canonicalOwnerSharePolicy as r, computeOwnerShareRegistrationCid as s, createDelegatedShareKey as t, createPolicyEnforcementDelegation as u, redactPublishedShare as v, restoreDelegatedShareKey as w, validateOwnerSharePolicyRegistration as x, validateOwnerSharePolicyRegistrationBytes as y };