@tinycloud/share-sdk 1.3.0-beta.0 → 1.4.0-beta.0

package/dist/{owner-policy-CRFeEC98.d.cts → owner-policy-aPmXIR3e.d.cts}

@@ -294,4 +294,4 @@ declare function validateOwnerSharePolicyRegistration(value: unknown, expected:
 /** Validate the exact UTF-8 response bytes emitted by the registration route. */
 declare function validateOwnerSharePolicyRegistrationBytes(bytesValue: Uint8Array, expected: RegisterOwnerSharePolicyParams): OwnerSharePolicyRegistrationReceipt;
 
-export { type CreateOwnerDelegationParams as C, type DelegatedShareKey as D, MAX_CONTENT_BYTES as M, type OwnerShareAction as O, type PublishedShareDeliveryMaterial as P, type RegisterOwnerSharePolicyParams as R, type SignedDelegation as S, type OwnerShareMatcher as a, type OwnerSharePolicyRegistrationReceipt as b, type PublishedShare as c, type SharePublishTarget as d, type SharePublishOptions as e, type OwnerDelegationReceipt as f, DEFAULT_SHARE_LIFETIME_MS as g, OWNER_SHARE_REGISTRATION_DOMAIN as h, type OwnerDelegationPermission as i, type OwnerShareDecryption as j, type OwnerSharePolicyRegistration as k, type OwnerSharePolicyV2 as l, type PublishedShareMetadata as m, SHARE_CONTENT_LIMIT as n, SHARE_PUBLISH_RESULT_VERSION as o, SharePublishError as p, type SharePublishErrorCode as q, canonicalOwnerSharePolicy as r, computeOwnerShareRegistrationCid as s, createDelegatedShareKey as t, createPolicyEnforcementDelegation as u, redactPublishedShare as v, restoreDelegatedShareKey as w, validateOwnerSharePolicyRegistration as x, validateOwnerSharePolicyRegistrationBytes as y };
+export { type CreateOwnerDelegationParams as C, type DelegatedShareKey as D, MAX_CONTENT_BYTES as M, type OwnerShareAction as O, type PublishedShareDeliveryMaterial as P, type RegisterOwnerSharePolicyParams as R, type SignedDelegation as S, type OwnerShareMatcher as a, type OwnerSharePolicyRegistrationReceipt as b, type PublishedShare as c, type SharePublishTarget as d, type SharePublishOptions as e, SharePublishError as f, type OwnerDelegationReceipt as g, DEFAULT_SHARE_LIFETIME_MS as h, OWNER_SHARE_REGISTRATION_DOMAIN as i, type OwnerDelegationPermission as j, type OwnerShareDecryption as k, type OwnerSharePolicyRegistration as l, type OwnerSharePolicyV2 as m, type PublishedShareMetadata as n, SHARE_CONTENT_LIMIT as o, SHARE_PUBLISH_RESULT_VERSION as p, type SharePublishErrorCode as q, canonicalOwnerSharePolicy as r, computeOwnerShareRegistrationCid as s, createDelegatedShareKey as t, createPolicyEnforcementDelegation as u, redactPublishedShare as v, restoreDelegatedShareKey as w, validateOwnerSharePolicyRegistration as x, validateOwnerSharePolicyRegistrationBytes as y };

package/dist/{owner-policy-CRFeEC98.d.ts → owner-policy-aPmXIR3e.d.ts}

@@ -294,4 +294,4 @@ declare function validateOwnerSharePolicyRegistration(value: unknown, expected:
 /** Validate the exact UTF-8 response bytes emitted by the registration route. */
 declare function validateOwnerSharePolicyRegistrationBytes(bytesValue: Uint8Array, expected: RegisterOwnerSharePolicyParams): OwnerSharePolicyRegistrationReceipt;
 
-export { type CreateOwnerDelegationParams as C, type DelegatedShareKey as D, MAX_CONTENT_BYTES as M, type OwnerShareAction as O, type PublishedShareDeliveryMaterial as P, type RegisterOwnerSharePolicyParams as R, type SignedDelegation as S, type OwnerShareMatcher as a, type OwnerSharePolicyRegistrationReceipt as b, type PublishedShare as c, type SharePublishTarget as d, type SharePublishOptions as e, type OwnerDelegationReceipt as f, DEFAULT_SHARE_LIFETIME_MS as g, OWNER_SHARE_REGISTRATION_DOMAIN as h, type OwnerDelegationPermission as i, type OwnerShareDecryption as j, type OwnerSharePolicyRegistration as k, type OwnerSharePolicyV2 as l, type PublishedShareMetadata as m, SHARE_CONTENT_LIMIT as n, SHARE_PUBLISH_RESULT_VERSION as o, SharePublishError as p, type SharePublishErrorCode as q, canonicalOwnerSharePolicy as r, computeOwnerShareRegistrationCid as s, createDelegatedShareKey as t, createPolicyEnforcementDelegation as u, redactPublishedShare as v, restoreDelegatedShareKey as w, validateOwnerSharePolicyRegistration as x, validateOwnerSharePolicyRegistrationBytes as y };
+export { type CreateOwnerDelegationParams as C, type DelegatedShareKey as D, MAX_CONTENT_BYTES as M, type OwnerShareAction as O, type PublishedShareDeliveryMaterial as P, type RegisterOwnerSharePolicyParams as R, type SignedDelegation as S, type OwnerShareMatcher as a, type OwnerSharePolicyRegistrationReceipt as b, type PublishedShare as c, type SharePublishTarget as d, type SharePublishOptions as e, SharePublishError as f, type OwnerDelegationReceipt as g, DEFAULT_SHARE_LIFETIME_MS as h, OWNER_SHARE_REGISTRATION_DOMAIN as i, type OwnerDelegationPermission as j, type OwnerShareDecryption as k, type OwnerSharePolicyRegistration as l, type OwnerSharePolicyV2 as m, type PublishedShareMetadata as n, SHARE_CONTENT_LIMIT as o, SHARE_PUBLISH_RESULT_VERSION as p, type SharePublishErrorCode as q, canonicalOwnerSharePolicy as r, computeOwnerShareRegistrationCid as s, createDelegatedShareKey as t, createPolicyEnforcementDelegation as u, redactPublishedShare as v, restoreDelegatedShareKey as w, validateOwnerSharePolicyRegistration as x, validateOwnerSharePolicyRegistrationBytes as y };

package/dist/share-index.cjs

@@ -44,6 +44,7 @@ __export(share_index_exports, {
   agentRecordBinding: () => agentRecordBinding,
   agentRecordKey: () => agentRecordKey,
   agentRecordPrefix: () => agentRecordPrefix,
+  assertLinkBoundToMaterial: () => assertLinkBoundToMaterial,
   attenuationCovers: () => attenuationCovers,
   checkRegistrationReceipt: () => checkRegistrationReceipt,
   claimRank: () => claimRank,
@@ -66,7 +67,6 @@ __export(share_index_exports, {
   parseStoredAgentRecord: () => parseStoredAgentRecord,
   project: () => project,
   sealAgentRecord: () => sealAgentRecord,
-  shareLinkForRecord: () => shareLinkForRecord,
   validateShareLink: () => validateShareLink,
   verifyAgentRecordChain: () => verifyAgentRecordChain,
   verifyEnvelopeV3At: () => verifyEnvelopeV3At,
@@ -4995,7 +4995,8 @@ function isCanonicalRawCid(cidString) {
   } catch {
     return false;
   }
-  return cid2.version === 1 && cid2.code === code && cid2.multihash.code === SHA256_CODE && cid2.toString() === cidString;
+  return cid2.version === 1 && cid2.code === code && cid2.multihash.code === SHA256_CODE && // `toString` of a parsed CID gives back the string it was parsed from; a fresh CID is encoded again.
+  CID.createV1(cid2.code, cid2.multihash).toString() === cidString;
 }
 var base64 = rfc4648({
   prefix: "m",
@@ -5611,7 +5612,6 @@ function verifyEnvelopeV3SignatureOnly(envelope) {
   return import_ed255193.ed25519.verify(fromBase64Url(signature.value), (0, import_sha256.sha256)(signingBytesV3(unsigned)), ed25519PublicKeyFromDidKey(signature.signerDid), ED25519_VERIFY_OPTS2);
 }
 var KEY_LENGTH2 = 32;
-var MAX_INLINE_BYTES = 256 * 1024;
 function assertCanonicalCid(cidString) {
   const cid2 = CID.parse(cidString);
   if (cid2.version !== 1 || cid2.code !== code || cid2.multihash.code !== 18 || // sha2-256 (0x12) only, at the link layer too
@@ -5619,21 +5619,6 @@ function assertCanonicalCid(cidString) {
     throw new TypeError(`not a canonical CIDv1 raw sha2-256 base32 CID: ${cidString}`);
   }
 }
-async function encodeSealedInlineShareUrl(parts) {
-  if (!isCanonicalHttpsOrigin(parts.origin)) throw new TypeError("origin must be a canonical https origin");
-  if (parts.ciphertext.byteLength === 0 || parts.ciphertext.byteLength > MAX_INLINE_BYTES) throw new RangeError("inline ciphertext is outside the allowed size");
-  if (parts.key32.byteLength !== KEY_LENGTH2) throw new TypeError("inline key must be 32 bytes");
-  const ciphertextCid = await computeCid(parts.ciphertext);
-  const payload = canonicalize({
-    v: 2,
-    c: toBase64Url(parts.ciphertext),
-    cid: ciphertextCid,
-    k: toBase64Url(parts.key32)
-  });
-  const payloadBytes = new TextEncoder().encode(payload);
-  if (payloadBytes.byteLength > MAX_INLINE_BYTES * 2) throw new RangeError("inline URL is too large");
-  return `${parts.origin}/s/inline#v=2&p=${toBase64Url(payloadBytes)}`;
-}
 function parseShareUrl(url, options = {}) {
   const parsed = new URL(url);
   if (parsed.protocol !== "https:") {
@@ -5672,47 +5657,6 @@ function parseShareUrl(url, options = {}) {
   }
   return { ciphertextCid, key32 };
 }
-async function parseSealedInlineShareUrl(url, options = {}) {
-  const parsed = new URL(url);
-  if (parsed.protocol !== "https:" || parsed.username !== "" || parsed.password !== "") throw new TypeError("sealed inline share URL must be canonical HTTPS without userinfo");
-  if (!isCanonicalHttpsOrigin(parsed.origin) || options.expectedOrigin !== void 0 && parsed.origin !== options.expectedOrigin) throw new TypeError("sealed inline share URL origin is not trusted");
-  if (parsed.pathname !== "/s/inline" || parsed.search !== "") throw new TypeError("not a Node sealed-inline share URL");
-  if (url !== `${parsed.origin}/s/inline${parsed.hash}`) throw new TypeError("sealed inline share URL is not lexically canonical");
-  const prefix = "#v=2&p=";
-  if (!parsed.hash.startsWith(prefix)) throw new TypeError("sealed inline URL is missing its canonical fragment");
-  const encoded = parsed.hash.slice(prefix.length);
-  if (encoded.length === 0 || parsed.hash !== `${prefix}${encoded}`) throw new TypeError("sealed inline URL fragment is not canonical");
-  let payloadBytes;
-  try {
-    payloadBytes = fromBase64Url(encoded);
-  } catch {
-    throw new TypeError("sealed inline payload is not canonical base64url");
-  }
-  if (payloadBytes.byteLength === 0 || payloadBytes.byteLength > MAX_INLINE_BYTES * 2) throw new TypeError("sealed inline payload is too large");
-  const payloadText = new TextDecoder("utf-8", { fatal: true }).decode(payloadBytes);
-  let value;
-  try {
-    value = JSON.parse(payloadText);
-  } catch {
-    throw new TypeError("sealed inline payload is not valid JSON");
-  }
-  if (typeof value !== "object" || value === null || Array.isArray(value) || canonicalize(value) !== payloadText) throw new TypeError("sealed inline payload is not canonical JSON");
-  const record2 = value;
-  if (Object.keys(record2).length !== 4 || record2.v !== 2 || typeof record2.c !== "string" || typeof record2.cid !== "string" || typeof record2.k !== "string") throw new TypeError("sealed inline payload has invalid fields");
-  let ciphertext;
-  let key32;
-  try {
-    ciphertext = fromBase64Url(record2.c);
-    key32 = fromBase64Url(record2.k);
-  } catch {
-    throw new TypeError("sealed inline payload has invalid base64url material");
-  }
-  if (ciphertext.byteLength === 0 || ciphertext.byteLength > MAX_INLINE_BYTES) throw new TypeError("sealed inline ciphertext is outside the allowed size");
-  if (key32.byteLength !== KEY_LENGTH2) throw new TypeError("sealed inline key must be 32 bytes");
-  assertCanonicalCid(record2.cid);
-  if (await computeCid(ciphertext) !== record2.cid) throw new TypeError("sealed inline ciphertext does not match its CID");
-  return { kind: "inline", ciphertextCid: record2.cid, ciphertext, key32 };
-}
 
 // src/share-index/ids.ts
 var SHARE_RECORDS_VAULT_PREFIX = "sender-history/v2/records/";
@@ -5765,6 +5709,9 @@ function classifyRecordKey(key) {
   return { kind: "rejected", ...owner };
 }
 
+// src/share-index/link.ts
+var import_links = require("@tinycloud/share-envelope/links");
+
 // src/native.ts
 var NATIVE_SHARE_FRAGMENT_PARAMETER = "tc1";
 function parseNativeShareUrl(value) {
@@ -5778,14 +5725,17 @@ function parseNativeShareUrl(value) {
 
 // src/share-index/link.ts
 var MAX_LINK_LENGTH = 12 * 1024;
+var MAX_FULL_LINK_LENGTH = Math.ceil(import_links.MAX_LINK_REQUEST_BYTES * 4 / 3) + 512;
+var V4_SHARE_PATH = /^\/s\/([A-Za-z2-7]{26}|full)$/;
 function validateShareLink(link, shareOrigins) {
-  if (typeof link !== "string" || link.length === 0 || link.length > MAX_LINK_LENGTH || /[\s\u0000-\u001f\u007f]/.test(link)) return { ok: false };
+  if (typeof link !== "string" || link.length === 0 || link.length > MAX_FULL_LINK_LENGTH || /[\s\u0000-\u001f\u007f]/.test(link)) return { ok: false };
   let url;
   try {
     url = new URL(link);
   } catch {
     return { ok: false };
   }
+  if (link.length > MAX_LINK_LENGTH && url.pathname !== "/s/full") return { ok: false };
   if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.search !== "") return { ok: false };
   if (!isCanonicalHttpsOrigin(url.origin) || !shareOrigins.includes(url.origin)) return { ok: false };
   try {
@@ -5793,8 +5743,9 @@ function validateShareLink(link, shareOrigins) {
       parseNativeShareUrl(link);
       return link === `${url.origin}/viewer${url.hash}` ? { ok: true, shape: "native" } : { ok: false };
     }
-    if (url.pathname === "/s/inline") {
-      return link === `${url.origin}/s/inline${url.hash}` && /^#v=2&p=[A-Za-z0-9_-]+$/.test(url.hash) ? { ok: true, shape: "inline" } : { ok: false };
+    if (V4_SHARE_PATH.test(url.pathname)) {
+      const parsed = (0, import_links.parseLink)(link, { trustedOrigins: shareOrigins });
+      return parsed.form === "full" || parsed.pathType === "share" ? { ok: true, shape: "link" } : { ok: false };
     }
     parseShareUrl(link, { expectedOrigin: url.origin });
     return { ok: true, shape: "envelope" };
@@ -6155,6 +6106,7 @@ async function runCas(key, policy, attempt) {
 }
 
 // src/share-index/delivery.ts
+var import_links2 = require("@tinycloud/share-envelope/links");
 var STORED_DELIVERY_MATERIAL_KEYS = ["shareCid", "sealedEnvelope", "envelopeKey"];
 var DeliveryMaterialError = class extends Error {
   constructor(message) {
@@ -6192,13 +6144,17 @@ async function openDeliveryEnvelope(material) {
   if (value === null || typeof value !== "object" || Array.isArray(value) || canonicalize(value) !== text) throw new DeliveryMaterialError("sealed envelope is not canonical JSON");
   return value;
 }
-async function shareLinkForRecord(record2, shareOrigin) {
-  if (record2.link !== void 0) return record2.link;
-  const material = record2.deliveryMaterial;
-  if (material === void 0) return void 0;
+function assertLinkBoundToMaterial(link, material) {
   const { sealed, key } = sealedParts(material);
-  if (await computeCid(sealed) !== material.shareCid) throw new DeliveryMaterialError("sealed envelope does not match shareCid");
-  return encodeSealedInlineShareUrl({ origin: shareOrigin, ciphertext: sealed, key32: key });
+  let parsed;
+  try {
+    parsed = (0, import_links2.parseLink)(link, { trustedOrigins: [new URL(link).origin] });
+  } catch {
+    throw new DeliveryMaterialError("link is not a v=4 share link");
+  }
+  const sameBody = parsed.form === "short" ? parsed.c === material.shareCid : typeof parsed.record === "object" && parsed.record !== null && "body" in parsed.record && parsed.record.body === toBase64Url(sealed);
+  if (!sameBody || !equalBytes(parsed.key, key)) throw new DeliveryMaterialError("link is not the link of this delivery material");
+  return parsed.form;
 }
 async function compactShareRecord(record2) {
   const material = record2.deliveryMaterial;
@@ -6208,29 +6164,17 @@ async function compactShareRecord(record2) {
   const opened = await openDeliveryEnvelope(stored);
   if (material.envelope !== void 0 && canonicalize(opened) !== canonicalize(material.envelope)) throw new DeliveryMaterialError("envelope is not the sealed envelope");
   const { link, deliveryMaterial: _material, ...rest } = record2;
-  if (link !== void 0) {
-    const { sealed, key } = sealedParts(stored);
-    let parsed;
-    try {
-      parsed = await parseSealedInlineShareUrl(link);
-    } catch {
-      parsed = void 0;
-    }
-    if (parsed === void 0 || parsed.ciphertextCid !== stored.shareCid || !equalBytes(parsed.ciphertext, sealed) || !equalBytes(parsed.key32, key)) {
-      throw new DeliveryMaterialError("link is not the sealed-inline link of this delivery material");
-    }
-  }
-  return { ...rest, deliveryMaterial: stored };
+  const keptLink = link !== void 0 && assertLinkBoundToMaterial(link, stored) === "short" ? link : void 0;
+  return { ...rest, ...keptLink === void 0 ? {} : { link: keptLink }, deliveryMaterial: stored };
 }
 function equalBytes(left, right) {
   return left.length === right.length && left.every((byte, index) => byte === right[index]);
 }
-async function expandShareRecord(record2, shareOrigin) {
+async function expandShareRecord(record2) {
   const material = record2.deliveryMaterial;
   if (material === void 0) return record2;
   const envelope = await openDeliveryEnvelope(material);
-  const link = shareOrigin === void 0 ? record2.link : await shareLinkForRecord(record2, shareOrigin);
-  return { ...record2, ...link === void 0 ? {} : { link }, deliveryMaterial: { ...material, envelope } };
+  return { ...record2, deliveryMaterial: { ...material, envelope } };
 }
 
 // src/share-index/record-store.ts
@@ -6337,7 +6281,7 @@ var AgentShareRecordStore = class {
     }
     if (!isRecordShape(value) || value.shareId !== shareId) throw new AgentRecordError("shape");
     try {
-      return await expandShareRecord(value, this.options.shareOrigin);
+      return await expandShareRecord(value);
     } catch {
       throw new AgentRecordError("shape");
     }
@@ -6528,6 +6472,15 @@ var ShareRecordSchemaError = class extends Error {
     this.name = "ShareRecordSchemaError";
   }
 };
+function carriesSealedRecord(link) {
+  try {
+    const url = new URL(link);
+    const fragment = new URLSearchParams(url.hash.slice(1));
+    return url.pathname === "/s/full" || fragment.has("r") || fragment.has("p");
+  } catch {
+    return false;
+  }
+}
 function checkAgentRecordSchema(value, context) {
   const fail2 = () => {
     throw new ShareRecordSchemaError("schema");
@@ -6564,7 +6517,7 @@ function checkAgentRecordSchema(value, context) {
   if (record2.deliveryMaterial !== void 0) {
     const material = record2.deliveryMaterial;
     if (!isObject(material) || Object.keys(material).length !== STORED_DELIVERY_MATERIAL_KEYS.length || !STORED_DELIVERY_MATERIAL_KEYS.every((key) => typeof material[key] === "string")) return fail2();
-    if (record2.link !== void 0) return fail2();
+    if (typeof record2.link === "string" && carriesSealedRecord(record2.link)) return fail2();
   }
   if (record2.deliveredRecipients !== void 0 && (!Array.isArray(record2.deliveredRecipients) || !record2.deliveredRecipients.every((item) => typeof item === "string"))) return fail2();
   if (record2.proofs !== void 0) {
@@ -8302,6 +8255,13 @@ var SenderShareIndex = class {
       return { kind: "reject", reason: error instanceof ShareRecordSchemaError && error.reason === "provenance" ? "provenance" : "schema" };
     }
     if (record2.link !== void 0 && !validateShareLink(record2.link, this.options.shareOrigins).ok) return { kind: "reject", reason: "link" };
+    if (record2.link !== void 0 && record2.deliveryMaterial !== void 0) {
+      try {
+        assertLinkBoundToMaterial(record2.link, record2.deliveryMaterial);
+      } catch {
+        return { kind: "reject", reason: "link" };
+      }
+    }
     const verdict = await verifyAgentRecordChain(record2, {
       accountOwnerDid: this.options.ownerDid,
       agentDid: input.agentDid,
@@ -8682,6 +8642,7 @@ var SenderShareIndex = class {
   agentRecordBinding,
   agentRecordKey,
   agentRecordPrefix,
+  assertLinkBoundToMaterial,
   attenuationCovers,
   checkRegistrationReceipt,
   claimRank,
@@ -8704,7 +8665,6 @@ var SenderShareIndex = class {
   parseStoredAgentRecord,
   project,
   sealAgentRecord,
-  shareLinkForRecord,
   validateShareLink,
   verifyAgentRecordChain,
   verifyEnvelopeV3At,