@tinycloud/web-sdk 3.0.0-beta.18 → 3.0.0-beta.19

package/dist/modules/Storage/tinycloud/types.schema.d.ts

@@ -39,8 +39,8 @@ export declare const SessionConfigSchema: z.ZodObject<{
     address?: string;
     chainId?: number;
     issuedAt?: string;
-    jwk?: Record<string, unknown>;
     notBefore?: string;
+    jwk?: Record<string, unknown>;
     expirationTime?: string;
     parents?: string[];
 }, {
@@ -50,8 +50,8 @@ export declare const SessionConfigSchema: z.ZodObject<{
     address?: string;
     chainId?: number;
     issuedAt?: string;
-    jwk?: Record<string, unknown>;
     notBefore?: string;
+    jwk?: Record<string, unknown>;
     expirationTime?: string;
     parents?: string[];
 }>;

package/dist/share/service.d.ts

@@ -3,7 +3,7 @@ import { type ShareMetadata } from "@tinycloud/share-sdk";
 import { type ShareEnvelopeV3 } from "@tinycloud/share-envelope";
 import { CredentialsService } from "../credentials";
 import { type ReceiverSessionStorage } from "./receiver-session";
-import type { ReceivedShare, ShareImportAccountClient, ShareImportOptions, ShareImportResult, ShareReceiveOptions, ShareReceivedContent, ShareReceiverClient, ShareReceiverIdentity, ShareReceiverRecipient } from "./types";
+import type { ReceivedShare, ShareDelegateOptions, ShareDelegation, ShareImportAccountClient, ShareImportOptions, ShareImportResult, ShareReceiveOptions, ShareReceivedContent, ShareReceiverClient, ShareReceiverIdentity, ShareReceiverRecipient } from "./types";
 export interface ShareReceiverServiceOptions {
     readonly origin?: string;
     readonly sessionStorage?: ReceiverSessionStorage;
@@ -25,7 +25,6 @@ export declare function selectShareReceiverAccountSession(client: ShareReceiverC
  * committed requirement is rejected before anything is displayed or sent.
  */
 export declare function verifiedShareRequirement(envelope: ShareEnvelopeV3): Promise<CredentialRequirement>;
-/** @internal */
 export declare class ReceivedShareImpl implements ReceivedShare {
     readonly identity: ShareReceiverIdentity;
     readonly metadata: ShareMetadata;
@@ -38,11 +37,19 @@ export declare class ReceivedShareImpl implements ReceivedShare {
     private readonly credentialDiscoveryUrl;
     private content?;
     private getPromise?;
+    private accessPromise?;
+    private stage?;
     readonly recipient: ShareReceiverRecipient;
     constructor(identity: ShareReceiverIdentity, metadata: ShareMetadata, envelope: ShareEnvelopeV3, requirement: CredentialRequirement, credentials: CredentialsService, sign: (bytes: Uint8Array) => Promise<Uint8Array>, options: ShareReceiveOptions, fetchFn: typeof fetch, credentialDiscoveryUrl: string);
     get shareId(): string;
     get(): Promise<ShareReceivedContent>;
+    /** The admitted access, admitted again once its chain has expired. */
+    private access;
+    /** Forget `access` so the next request admits again, unless it was already replaced. */
+    private forget;
+    private admit;
     private load;
+    delegate(options: ShareDelegateOptions): Promise<ShareDelegation>;
     importInto(accountClient: ShareImportAccountClient, options: ShareImportOptions): Promise<ShareImportResult>;
 }
 export declare class ShareReceiverService {

package/dist/share/types.d.ts

@@ -45,6 +45,34 @@ export interface ShareReceiveOptions {
     };
     readonly signal?: AbortSignal;
     readonly onProgress?: (event: ShareReceiveProgress) => void;
+    /**
+     * Open through access another recipient delegated to this identity's key,
+     * instead of proving a credential.
+     */
+    readonly delegation?: ShareDelegation;
+}
+/** One signed link of a share's delegation chain. The owner's Node holds it too. */
+export interface ShareDelegationLink {
+    readonly authorization: string;
+    readonly cid: string;
+}
+/**
+ * A share's access re-delegated to another key: the admitted session first,
+ * then each re-delegation in order. It holds no secret; only the key it names
+ * can use it.
+ */
+export interface ShareDelegation {
+    readonly shareId: string;
+    readonly delegateDid: string;
+    readonly expiresAt: string;
+    readonly chain: readonly ShareDelegationLink[];
+}
+export interface ShareDelegateOptions {
+    /** DID of the key that should hold this share's access, such as an account session key. */
+    readonly to: string;
+    /** Defaults to the longest the current access allows. */
+    readonly expiresAt?: Date;
+    readonly signal?: AbortSignal;
 }
 export interface ShareReceivedContent {
     readonly bytes: Uint8Array;
@@ -91,6 +119,12 @@ export interface ReceivedShare {
     readonly shareId: string;
     get(): Promise<ShareReceivedContent>;
     importInto(accountClient: ShareImportAccountClient, options: ShareImportOptions): Promise<ShareImportResult>;
+    /**
+     * Re-delegate this share's access, including decryption, to another key.
+     * Proves the credential first if this share has not been opened yet. The
+     * delegate opens it with `receive(url, { delegation })`.
+     */
+    delegate(options: ShareDelegateOptions): Promise<ShareDelegation>;
 }
 export interface ShareReceiverClient extends ShareImportAccountClient {
     readonly credentialHolderDid: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinycloud/web-sdk",
-  "version": "3.0.0-beta.18",
+  "version": "3.0.0-beta.19",
   "description": "A set of tools and utilities to help you build your app with TinyCloud.",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -43,10 +43,10 @@
   "dependencies": {
     "@multiformats/multiaddr": "^13.0.1",
     "@multiformats/multiaddr-to-uri": "^12.0.0",
-    "@tinycloud/node-sdk": "3.0.0-beta.18",
-    "@tinycloud/sdk-core": "3.0.0-beta.18",
+    "@tinycloud/node-sdk": "3.0.0-beta.19",
+    "@tinycloud/sdk-core": "3.0.0-beta.19",
     "@tinycloud/share-envelope": "1.0.0-beta.5",
-    "@tinycloud/share-sdk": "1.0.0-beta.8",
+    "@tinycloud/share-sdk": "1.0.0-beta.9",
     "@tinycloud/web-sdk-wasm": "1.7.6",
     "axios": "^1.7.9",
     "viem": "^2.45.0",