@tinycloud/web-sdk 3.0.0-beta.9 → 3.0.1-beta.0

package/dist/modules/tcw.d.ts

@@ -74,7 +74,7 @@ export interface Config extends ClientConfig {
      * modal handler is in use.
      */
     spaceCreationTimeoutMs?: number;
-    /** Session expiration time in milliseconds (default: 1 hour) */
+    /** Session expiration time in milliseconds (default: 30 days, `EXPIRY.SESSION_MS`) */
     sessionExpirationMs?: number;
     /** Persist browser sessions so signIn() can restore before prompting. Default true. */
     persistSession?: boolean;

package/dist/share/service.d.ts

@@ -1,8 +1,9 @@
+import { type CredentialRequirement } from "@tinycloud/sdk-core";
 import { type ShareMetadata } from "@tinycloud/share-sdk";
 import { type ShareEnvelopeV3 } from "@tinycloud/share-envelope";
 import { CredentialsService } from "../credentials";
 import { type ReceiverSessionStorage } from "./receiver-session";
-import type { ReceivedShare, ShareImportAccountClient, ShareImportOptions, ShareImportResult, ShareReceiveOptions, ShareReceivedContent, ShareReceiverClient, ShareReceiverIdentity } from "./types";
+import type { ReceivedShare, ShareDelegateOptions, ShareDelegation, ShareImportAccountClient, ShareImportOptions, ShareImportResult, ShareReceiveOptions, ShareReceivedContent, ShareReceiverClient, ShareReceiverIdentity, ShareReceiverRecipient } from "./types";
 export interface ShareReceiverServiceOptions {
     readonly origin?: string;
     readonly sessionStorage?: ReceiverSessionStorage;
@@ -18,11 +19,17 @@ export declare function validateShareReceiverServiceTrust(envelope: Pick<ShareEn
 export declare function validateShareReceiverExpectedOrigin(shareUrl: string, expectedOrigin: string): string;
 /** @internal */
 export declare function selectShareReceiverAccountSession(client: ShareReceiverClient, requestedIdentity: ShareReceiveOptions["identity"]): Promise<ReturnType<ShareReceiverClient["session"]>>;
-/** @internal */
+/**
+ * @internal Binds the invitation's addressed recipient to the owner-signed
+ * policy's credential commitment. A matcher that does not hash to the
+ * committed requirement is rejected before anything is displayed or sent.
+ */
+export declare function verifiedShareRequirement(envelope: ShareEnvelopeV3): Promise<CredentialRequirement>;
 export declare class ReceivedShareImpl implements ReceivedShare {
     readonly identity: ShareReceiverIdentity;
     readonly metadata: ShareMetadata;
     private readonly envelope;
+    private readonly requirement;
     private readonly credentials;
     private readonly sign;
     private readonly options;
@@ -30,10 +37,19 @@ export declare class ReceivedShareImpl implements ReceivedShare {
     private readonly credentialDiscoveryUrl;
     private content?;
     private getPromise?;
-    constructor(identity: ShareReceiverIdentity, metadata: ShareMetadata, envelope: ShareEnvelopeV3, credentials: CredentialsService, sign: (bytes: Uint8Array) => Promise<Uint8Array>, options: ShareReceiveOptions, fetchFn: typeof fetch, credentialDiscoveryUrl: string);
+    private accessPromise?;
+    private stage?;
+    readonly recipient: ShareReceiverRecipient;
+    constructor(identity: ShareReceiverIdentity, metadata: ShareMetadata, envelope: ShareEnvelopeV3, requirement: CredentialRequirement, credentials: CredentialsService, sign: (bytes: Uint8Array) => Promise<Uint8Array>, options: ShareReceiveOptions, fetchFn: typeof fetch, credentialDiscoveryUrl: string);
     get shareId(): string;
     get(): Promise<ShareReceivedContent>;
+    /** The admitted access, admitted again once its chain has expired. */
+    private access;
+    /** Forget `access` so the next request admits again, unless it was already replaced. */
+    private forget;
+    private admit;
     private load;
+    delegate(options: ShareDelegateOptions): Promise<ShareDelegation>;
     importInto(accountClient: ShareImportAccountClient, options: ShareImportOptions): Promise<ShareImportResult>;
 }
 export declare class ShareReceiverService {

package/dist/share/types.d.ts

@@ -17,6 +17,7 @@ export type ShareReceiveProgress = {
 } | {
     readonly state: "credential-acquisition";
     readonly status: "started" | "completed";
+    readonly mailbox?: string;
 } | {
     readonly state: "policy-admission";
     readonly status: "started" | "completed";
@@ -44,6 +45,34 @@ export interface ShareReceiveOptions {
     };
     readonly signal?: AbortSignal;
     readonly onProgress?: (event: ShareReceiveProgress) => void;
+    /**
+     * Open through access another recipient delegated to this identity's key,
+     * instead of proving a credential.
+     */
+    readonly delegation?: ShareDelegation;
+}
+/** One signed link of a share's delegation chain. The owner's Node holds it too. */
+export interface ShareDelegationLink {
+    readonly authorization: string;
+    readonly cid: string;
+}
+/**
+ * A share's access re-delegated to another key: the admitted session first,
+ * then each re-delegation in order. It holds no secret; only the key it names
+ * can use it.
+ */
+export interface ShareDelegation {
+    readonly shareId: string;
+    readonly delegateDid: string;
+    readonly expiresAt: string;
+    readonly chain: readonly ShareDelegationLink[];
+}
+export interface ShareDelegateOptions {
+    /** DID of the key that should hold this share's access, such as an account session key. */
+    readonly to: string;
+    /** Defaults to the longest the current access allows. */
+    readonly expiresAt?: Date;
+    readonly signal?: AbortSignal;
 }
 export interface ShareReceivedContent {
     readonly bytes: Uint8Array;
@@ -69,12 +98,33 @@ export interface ShareImportAccountClient {
     ensureOwnedSpaceHosted(name: string): Promise<string>;
     kvForSpace(spaceId: string): IKVService;
 }
+/**
+ * The recipient an invitation is addressed to. It comes from the signed,
+ * sealed invitation and is checked against the policy's credential
+ * requirement commitment before `receive` returns, so a host may display it.
+ */
+export type ShareReceiverRecipient = {
+    readonly kind: "exactEmail";
+    readonly email: string;
+}
+/** Anyone who proves a mailbox whose issuer-derived domain equals `domain` exactly. */
+ | {
+    readonly kind: "emailDomain";
+    readonly domain: string;
+};
 export interface ReceivedShare {
     readonly identity: ShareReceiverIdentity;
+    readonly recipient: ShareReceiverRecipient;
     readonly metadata: ShareMetadata;
     readonly shareId: string;
     get(): Promise<ShareReceivedContent>;
     importInto(accountClient: ShareImportAccountClient, options: ShareImportOptions): Promise<ShareImportResult>;
+    /**
+     * Re-delegate this share's access, including decryption, to another key.
+     * Proves the credential first if this share has not been opened yet. The
+     * delegate opens it with `receive(url, { delegation })`.
+     */
+    delegate(options: ShareDelegateOptions): Promise<ShareDelegation>;
 }
 export interface ShareReceiverClient extends ShareImportAccountClient {
     readonly credentialHolderDid: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tinycloud/web-sdk",
-  "version": "3.0.0-beta.9",
+  "version": "3.0.1-beta.0",
   "description": "A set of tools and utilities to help you build your app with TinyCloud.",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",
@@ -43,10 +43,10 @@
   "dependencies": {
     "@multiformats/multiaddr": "^13.0.1",
     "@multiformats/multiaddr-to-uri": "^12.0.0",
-    "@tinycloud/node-sdk": "3.0.0-beta.9",
-    "@tinycloud/sdk-core": "3.0.0-beta.9",
-    "@tinycloud/share-envelope": "1.0.0-beta.3",
-    "@tinycloud/share-sdk": "1.0.0-beta.3",
+    "@tinycloud/node-sdk": "3.0.1-beta.0",
+    "@tinycloud/sdk-core": "3.0.1-beta.0",
+    "@tinycloud/share-envelope": "1.1.0-beta.0",
+    "@tinycloud/share-sdk": "1.0.1-beta.0",
     "@tinycloud/web-sdk-wasm": "1.7.6",
     "axios": "^1.7.9",
     "viem": "^2.45.0",