@tinycloud/web-sdk 3.0.0-beta.1 → 3.0.0-beta.11

package/dist/adapters/BrowserSessionStorage.d.ts

@@ -19,8 +19,12 @@ export declare class BrowserSessionStorage implements ISessionStorage {
     constructor(options?: BrowserSessionStorageOptions);
     private defaultStorage;
     private key;
+    private activeAddressKey;
+    private clearActiveAddress;
     private assertPersistable;
     save(address: string, data: PersistedSessionData): Promise<void>;
+    /** Most recently saved, still-valid session address for provider-free reloads. */
+    activeAddress(): string | undefined;
     load(address: string): Promise<PersistedSessionData | null>;
     loadWithStatus(address: string): Promise<BrowserSessionLoadResult>;
     clear(address: string): Promise<void>;

package/dist/credentials/element.d.ts

@@ -1,16 +1,31 @@
 import { type CredentialFlowDescriptor } from "@tinycloud/sdk-core";
-import type { CredentialAcquisitionTheme, CredentialInteractionSurface, InlineCredentialProofRequest, PrimitiveStepResult } from "./types";
+import type { CredentialAcquisitionTheme, CredentialInteractionSurface, CredentialProofSubject, InlineCredentialProofRequest, PrimitiveStepResult } from "./types";
 export declare const TINYCLOUD_CREDENTIAL_ACQUISITION_TAG = "tinycloud-credential-acquisition";
+/** Length of the mailbox code OpenCredentials issues for the `mailbox_otp` step. */
+export declare const MAILBOX_OTP_LENGTH = 8;
 declare const ElementBase: typeof HTMLElement;
+/**
+ * Reduces typed, pasted, or autofilled text to the mailbox code digits.
+ * Full-width digits are folded to ASCII, and a pasted sentence contributes
+ * only its first eight-digit group (optionally split as `1234 5678`).
+ */
+export declare function normalizeMailboxCode(value: string): string;
 /** SDK-owned Shadow-DOM view. It is deliberately unaware of locators, verifiers, sessions, and transport. */
 export declare class TinyCloudCredentialAcquisitionElement extends ElementBase {
     private root?;
     private resolver?;
     private rejecter?;
     private closed;
+    private subject?;
+    private codeTtlSeconds?;
     connectedCallback(): void;
     disconnectedCallback(): void;
     configure(theme?: CredentialAcquisitionTheme): void;
+    /** Context known before the first proof request, used for the opening state. */
+    prepare(input: {
+        readonly subject?: CredentialProofSubject;
+        readonly codeTtlSeconds?: number;
+    }): void;
     requestProof(request: InlineCredentialProofRequest): Promise<PrimitiveStepResult>;
     report(state: "signing" | "verifying" | "saving" | "success" | "recovery", message?: string): void;
     finish(): void;
@@ -18,6 +33,10 @@ export declare class TinyCloudCredentialAcquisitionElement extends ElementBase {
     isClosed(): boolean;
     private renderShell;
     private renderPrompt;
+    private settle;
+    private actions;
+    private mailboxForm;
+    private inputForm;
 }
 /** Registers the element once in a browser document. */
 export declare function defineTinyCloudCredentialAcquisitionElement(): void;
@@ -29,6 +48,7 @@ export declare class CredentialAcquisitionController {
         readonly descriptor: CredentialFlowDescriptor;
         readonly mountTarget?: Element | string;
         readonly theme?: CredentialAcquisitionTheme;
+        readonly subject?: CredentialProofSubject;
     });
     start(input: {
         readonly signal?: AbortSignal;

package/dist/credentials/interpreter.d.ts

@@ -1,5 +1,7 @@
 import { type CredentialFlowDescriptor, type CredentialProgressEvent, type CredentialRequirement } from "@tinycloud/sdk-core";
-import type { CredentialAcquisitionTransport, CredentialSigningAdapter, InlineCredentialProofHandler, PrimitiveStepHandler } from "./types";
+import type { CredentialAcquisitionTransport, CredentialProofSubject, CredentialSigningAdapter, InlineCredentialProofHandler, PrimitiveStepHandler } from "./types";
+/** The mailbox named by an email requirement, which the issuer delivers the code to. */
+export declare function mailboxSubject(requirement: CredentialRequirement): CredentialProofSubject | undefined;
 /** Finite step interpreter. Dispatch is exclusively by registered primitive and version. */
 export declare function interpretCredentialFlow(input: {
     readonly descriptor: CredentialFlowDescriptor;

package/dist/credentials/service.d.ts

@@ -18,6 +18,8 @@ export declare class CredentialsService {
     store(verified: VerifiedCredential, requirementValue: CredentialRequirement, options?: CredentialsOperationOptions): Promise<{
         readonly record: StoredCredentialRecord;
         readonly receipt: import("@tinycloud/sdk-core").CredentialStorageReceipt;
+    } | {
+        record: StoredCredentialRecord;
     }>;
     acquire(requirementValue: CredentialRequirement, options: CredentialsAcquireOptions): Promise<VerifiedCredential>;
     ensure(requirementValue: CredentialRequirement, options: CredentialsEnsureOptions): Promise<CredentialsEnsureResult>;

package/dist/credentials/types.d.ts

@@ -21,6 +21,23 @@ export interface CredentialClient {
      * than on {@link ClientSession} so the CID stays out of the public session.
      */
     accountAuthorizationCid(): string;
+    /** Receiver-local credential custody. Its presence selects accountless mode. */
+    readonly receiverCredentialCustody?: ReceiverCredentialCustody;
+}
+export interface ReceiverCredentialCustody {
+    find(input: {
+        readonly requirement: CredentialRequirement;
+        readonly requirementDigest: string;
+        readonly holderDid: string;
+        readonly now?: Date;
+    }): Promise<StoredCredentialRecord | undefined>;
+    store(input: {
+        readonly verified: VerifiedCredential;
+        readonly requirement: CredentialRequirement;
+        readonly requirementDigest: string;
+        readonly holderDid: string;
+        readonly now?: Date;
+    }): Promise<StoredCredentialRecord>;
 }
 export interface CredentialSigningAdapter {
     /** Return undefined when the existing exact-request auto-sign policy does not apply. */
@@ -55,8 +72,22 @@ export interface InlineCredentialProofRequest {
         readonly label: string;
         readonly schema: CredentialFlowDescriptor["inputs"][number]["schema"];
     }[];
+    /** Present when this step's previous proof was rejected and may be retried. */
+    readonly feedback?: {
+        readonly kind: "rejected";
+        readonly attemptsRemaining: number;
+    };
     readonly signal?: AbortSignal;
 }
+/**
+ * The mailbox a `mailbox_otp` code is sent to, copied from the digest-bound
+ * credential requirement. Only the SDK-owned inline view receives it; host
+ * proof handlers never see requirement values.
+ */
+export interface CredentialProofSubject {
+    readonly kind: "email";
+    readonly value: string;
+}
 export type InlineCredentialProofHandler = (input: InlineCredentialProofRequest) => Promise<PrimitiveStepResult>;
 export type CredentialInteractionKind = "popup" | "redirect" | "headless" | "inline";
 export interface CredentialInteractionSurface {
@@ -200,6 +231,7 @@ export interface CredentialsPolicyAdmissionOptions {
     readonly requestedCapabilities: readonly UnifiedPolicyCapability[];
     readonly nodeOrigin: string;
     readonly fetch?: typeof fetch;
+    readonly signal?: AbortSignal;
     readonly now?: Date;
     readonly jti?: string;
 }