@tinycloud/share-sdk 1.4.1-beta.0 → 1.4.1-beta.2

package/dist/{web-recipient-entry-CiUzdSQs.d.cts → web-recipient-entry-Bn3yRB7g.d.cts}

@@ -1,5 +1,5 @@
-import { ShareEnvelopeV3, ShareEnvelopeV2 } from '@tinycloud/share-envelope';
-import { a as ShareAuthorizationMethod, f as ShareAuthorizedContent, c as ShareAuthorizationAdapter } from './authorization-CmP1skO8.cjs';
+import { ShareEnvelopeV2, ShareEnvelopeV3 } from '@tinycloud/share-envelope';
+import { c as ShareAuthorizationAdapter, f as ShareAuthorizedContent, a as ShareAuthorizationMethod } from './authorization-CmP1skO8.cjs';
 
 type ShareErrorCode = "invalid-link" | "fetch-failed" | "max-bytes-exceeded" | "cid-mismatch" | "decrypt-failed" | "envelope-invalid" | "origin-mismatch" | "signature-invalid" | "capability-invalid" | "expired" | "unsupported-target" | "authorization-denied" | "content-integrity-failed";
 declare const SHARE_RESULT_VERSION: 1;
@@ -42,7 +42,19 @@ interface ShareFetchOptions {
     readonly now?: () => number;
     readonly maxSealedBlobBytes?: number;
     readonly maxContentBlobBytes?: number;
-    readonly onResolvedAddressedEnvelope?: (envelope: ShareEnvelopeV3, cid: string) => void;
+    readonly onResolvedAddressedEnvelope?: (envelope: ShareEnvelopeV2 | ShareEnvelopeV3, cid: string) => void;
+    /** Legacy V2 registry transport; used only for existing compact V2 links. */
+    readonly registryBaseUrl?: string;
+    readonly fetchBlob?: (input: {
+        readonly origin: string;
+        readonly cid: string;
+        readonly signal?: AbortSignal;
+    }) => Promise<Uint8Array>;
+    readonly trustedSignerDid?: string;
+    readonly trustedPolicyAuthority?: SharePolicyAuthority;
+    readonly authorization?: ShareAuthorizationAdapter<ShareAuthorizedContent>;
+    readonly authorizationResumeToken?: string;
+    readonly authorizationProof?: unknown;
 }
 interface ShareMetadata {
     readonly protocol: "tinycloud-share";
@@ -77,8 +89,37 @@ interface ShareInspection {
     readonly link: {
         readonly origin: string;
         readonly cid: string;
-        readonly kind: "policy";
+        readonly kind: "policy" | "compact";
+    };
+}
+interface SharePolicyEvidence {
+    readonly policyCid: string;
+    readonly signerDid: string;
+    readonly registrationCid: string;
+    readonly shareId: string;
+    readonly recipientMatcher: unknown;
+    readonly target: {
+        readonly origin: string;
+        readonly nodeAudience: string;
+        readonly spaceId: string;
     };
+    readonly resource: {
+        readonly kind: "exact" | "prefix";
+        readonly path: string;
+    };
+    readonly actions: readonly string[];
+    readonly contentSource: unknown;
+    readonly contentSourceDigest: string;
+    readonly delegationCid: string;
+    readonly authorityMaterialHandle: string;
+    readonly authorityMaterialDigest: string;
+    readonly expiresAt: string;
+}
+interface SharePolicyAuthority {
+    resolve(input: {
+        readonly policyCid: string;
+        readonly envelope: ShareEnvelopeV2;
+    }): Promise<SharePolicyEvidence | undefined>;
 }
 interface ShareReceiveAuthorizationRequired {
     readonly state: "authorization-required";
@@ -185,7 +226,7 @@ declare class ShareRecipientClient {
     authorize(envelope: ShareEnvelopeV2): Promise<ShareAuthorizedContent>;
     establishPolicySession(): Promise<SharePolicySession>;
     private establishV3;
-    /** Decrypt a v3 KV value through a fresh recipient-signed decrypt invocation. */
+    /** Decrypt unscoped v1 or path-bound v2 content, independently checking canonical and registered raw-key digests. */
     decryptV3Content(bytes: Uint8Array): Promise<{
         readonly bytes: Uint8Array;
         readonly mediaType: string;
@@ -211,4 +252,4 @@ declare function createAddressedAuthorization(input: Omit<ShareRecipientClientOp
     }) => Promise<SharePresentationMaterial>;
 }): ShareAuthorizationAdapter<ShareAuthorizedContent>;
 
-export { DEFAULT_MAX_CONTENT_BLOB_BYTES as D, SHARE_RESULT_VERSION as S, DEFAULT_MAX_SEALED_BLOB_BYTES as a, type ShareErrorCode as b, type ShareErrorInfo as c, type ShareFetchOptions as d, type ShareInspection as e, type ShareMetadata as f, type ShareNodeTrust as g, type SharePolicyChallenge as h, type SharePolicyDelegationLink as i, type SharePolicySession as j, type SharePresentationMaterial as k, type ShareReceiveAuthorizationRequired as l, ShareReceiveError as m, type ShareReceiveOutcome as n, type ShareReceiveResult as o, ShareRecipientClient as p, type ShareRecipientClientOptions as q, createAddressedAuthorization as r, inspectShare as s, receiveShare as t, toShareErrorInfo as u };
+export { DEFAULT_MAX_CONTENT_BLOB_BYTES as D, SHARE_RESULT_VERSION as S, DEFAULT_MAX_SEALED_BLOB_BYTES as a, type ShareErrorCode as b, type ShareErrorInfo as c, type ShareFetchOptions as d, type ShareInspection as e, type ShareMetadata as f, type ShareNodeTrust as g, type SharePolicyAuthority as h, type SharePolicyChallenge as i, type SharePolicyDelegationLink as j, type SharePolicyEvidence as k, type SharePolicySession as l, type SharePresentationMaterial as m, type ShareReceiveAuthorizationRequired as n, ShareReceiveError as o, type ShareReceiveOutcome as p, type ShareReceiveResult as q, ShareRecipientClient as r, type ShareRecipientClientOptions as s, createAddressedAuthorization as t, inspectShare as u, receiveShare as v, toShareErrorInfo as w };

package/dist/{web-recipient-entry-DVyTQBl0.d.ts → web-recipient-entry-CTFoIH8l.d.ts}

@@ -1,5 +1,5 @@
-import { ShareEnvelopeV3, ShareEnvelopeV2 } from '@tinycloud/share-envelope';
-import { a as ShareAuthorizationMethod, f as ShareAuthorizedContent, c as ShareAuthorizationAdapter } from './authorization-CmP1skO8.js';
+import { ShareEnvelopeV2, ShareEnvelopeV3 } from '@tinycloud/share-envelope';
+import { c as ShareAuthorizationAdapter, f as ShareAuthorizedContent, a as ShareAuthorizationMethod } from './authorization-CmP1skO8.js';
 
 type ShareErrorCode = "invalid-link" | "fetch-failed" | "max-bytes-exceeded" | "cid-mismatch" | "decrypt-failed" | "envelope-invalid" | "origin-mismatch" | "signature-invalid" | "capability-invalid" | "expired" | "unsupported-target" | "authorization-denied" | "content-integrity-failed";
 declare const SHARE_RESULT_VERSION: 1;
@@ -42,7 +42,19 @@ interface ShareFetchOptions {
     readonly now?: () => number;
     readonly maxSealedBlobBytes?: number;
     readonly maxContentBlobBytes?: number;
-    readonly onResolvedAddressedEnvelope?: (envelope: ShareEnvelopeV3, cid: string) => void;
+    readonly onResolvedAddressedEnvelope?: (envelope: ShareEnvelopeV2 | ShareEnvelopeV3, cid: string) => void;
+    /** Legacy V2 registry transport; used only for existing compact V2 links. */
+    readonly registryBaseUrl?: string;
+    readonly fetchBlob?: (input: {
+        readonly origin: string;
+        readonly cid: string;
+        readonly signal?: AbortSignal;
+    }) => Promise<Uint8Array>;
+    readonly trustedSignerDid?: string;
+    readonly trustedPolicyAuthority?: SharePolicyAuthority;
+    readonly authorization?: ShareAuthorizationAdapter<ShareAuthorizedContent>;
+    readonly authorizationResumeToken?: string;
+    readonly authorizationProof?: unknown;
 }
 interface ShareMetadata {
     readonly protocol: "tinycloud-share";
@@ -77,8 +89,37 @@ interface ShareInspection {
     readonly link: {
         readonly origin: string;
         readonly cid: string;
-        readonly kind: "policy";
+        readonly kind: "policy" | "compact";
+    };
+}
+interface SharePolicyEvidence {
+    readonly policyCid: string;
+    readonly signerDid: string;
+    readonly registrationCid: string;
+    readonly shareId: string;
+    readonly recipientMatcher: unknown;
+    readonly target: {
+        readonly origin: string;
+        readonly nodeAudience: string;
+        readonly spaceId: string;
     };
+    readonly resource: {
+        readonly kind: "exact" | "prefix";
+        readonly path: string;
+    };
+    readonly actions: readonly string[];
+    readonly contentSource: unknown;
+    readonly contentSourceDigest: string;
+    readonly delegationCid: string;
+    readonly authorityMaterialHandle: string;
+    readonly authorityMaterialDigest: string;
+    readonly expiresAt: string;
+}
+interface SharePolicyAuthority {
+    resolve(input: {
+        readonly policyCid: string;
+        readonly envelope: ShareEnvelopeV2;
+    }): Promise<SharePolicyEvidence | undefined>;
 }
 interface ShareReceiveAuthorizationRequired {
     readonly state: "authorization-required";
@@ -185,7 +226,7 @@ declare class ShareRecipientClient {
     authorize(envelope: ShareEnvelopeV2): Promise<ShareAuthorizedContent>;
     establishPolicySession(): Promise<SharePolicySession>;
     private establishV3;
-    /** Decrypt a v3 KV value through a fresh recipient-signed decrypt invocation. */
+    /** Decrypt unscoped v1 or path-bound v2 content, independently checking canonical and registered raw-key digests. */
     decryptV3Content(bytes: Uint8Array): Promise<{
         readonly bytes: Uint8Array;
         readonly mediaType: string;
@@ -211,4 +252,4 @@ declare function createAddressedAuthorization(input: Omit<ShareRecipientClientOp
     }) => Promise<SharePresentationMaterial>;
 }): ShareAuthorizationAdapter<ShareAuthorizedContent>;
 
-export { DEFAULT_MAX_CONTENT_BLOB_BYTES as D, SHARE_RESULT_VERSION as S, DEFAULT_MAX_SEALED_BLOB_BYTES as a, type ShareErrorCode as b, type ShareErrorInfo as c, type ShareFetchOptions as d, type ShareInspection as e, type ShareMetadata as f, type ShareNodeTrust as g, type SharePolicyChallenge as h, type SharePolicyDelegationLink as i, type SharePolicySession as j, type SharePresentationMaterial as k, type ShareReceiveAuthorizationRequired as l, ShareReceiveError as m, type ShareReceiveOutcome as n, type ShareReceiveResult as o, ShareRecipientClient as p, type ShareRecipientClientOptions as q, createAddressedAuthorization as r, inspectShare as s, receiveShare as t, toShareErrorInfo as u };
+export { DEFAULT_MAX_CONTENT_BLOB_BYTES as D, SHARE_RESULT_VERSION as S, DEFAULT_MAX_SEALED_BLOB_BYTES as a, type ShareErrorCode as b, type ShareErrorInfo as c, type ShareFetchOptions as d, type ShareInspection as e, type ShareMetadata as f, type ShareNodeTrust as g, type SharePolicyAuthority as h, type SharePolicyChallenge as i, type SharePolicyDelegationLink as j, type SharePolicyEvidence as k, type SharePolicySession as l, type SharePresentationMaterial as m, type ShareReceiveAuthorizationRequired as n, ShareReceiveError as o, type ShareReceiveOutcome as p, type ShareReceiveResult as q, ShareRecipientClient as r, type ShareRecipientClientOptions as s, createAddressedAuthorization as t, inspectShare as u, receiveShare as v, toShareErrorInfo as w };