Where may a directly permitted subtype be declared?

Where may a directly permitted subtype be declared?

1. In the same named module, or in the same package when the root is in an unnamed module
2. Only in the same source file in every build
3. In any exported package of any module
4. Only as a nested class of the sealed root