@haex-space/vault-sdk 2.5.111 → 2.5.113

package/dist/{client-DFGx115H.d.mts → client-Dfy9UQeu.d.mts}

@@ -939,6 +939,165 @@ declare class LocalSendAPI {
     cancelSend(sessionId: string): Promise<void>;
 }
 
+type SpaceRole = 'admin' | 'member' | 'viewer';
+interface SharedSpace {
+    id: string;
+    ownerId: string;
+    encryptedName: string;
+    nameNonce: string;
+    currentKeyGeneration: number;
+    role: SpaceRole;
+    canInvite: boolean;
+    createdAt: string;
+}
+interface SpaceMemberInfo {
+    publicKey: string;
+    label: string;
+    role: SpaceRole;
+    canInvite: boolean;
+    invitedBy: string | null;
+    joinedAt: string;
+}
+interface SpaceKeyGrantInfo {
+    spaceId: string;
+    generation: number;
+    encryptedSpaceKey: string;
+    keyNonce: string;
+    ephemeralPublicKey: string;
+}
+interface SpaceInvite {
+    spaceId: string;
+    serverUrl: string;
+    spaceName: string;
+    accessToken: string;
+    encryptedSpaceKey: string;
+    keyNonce: string;
+    ephemeralPublicKey: string;
+    generation: number;
+    role: SpaceRole;
+}
+interface SpaceAccessTokenInfo {
+    id: string;
+    publicKey: string;
+    role: SpaceRole;
+    label: string | null;
+    revoked: boolean;
+    createdAt: string;
+    lastUsedAt: string | null;
+}
+/**
+ * A shared space with its decrypted name.
+ * Returned by the extension API after vault-side decryption.
+ */
+interface DecryptedSpace {
+    id: string;
+    name: string;
+    role: SpaceRole;
+    canInvite: boolean;
+    serverUrl: string;
+    createdAt: string;
+}
+/**
+ * Minimal sync backend info exposed to extensions.
+ * Extensions use this to pick a server when creating a space.
+ */
+interface SyncBackendInfo {
+    id: string;
+    name: string;
+    serverUrl: string;
+    isDefault: boolean;
+}
+
+/**
+ * A mapping of a row to a shared space.
+ */
+interface SpaceAssignment {
+    /** The extension-scoped table name */
+    tableName: string;
+    /** Serialized primary key(s) identifying the row */
+    rowPks: string;
+    /** The shared space ID this row is assigned to */
+    spaceId: string;
+}
+/**
+ * Spaces API for managing row-to-space assignments.
+ *
+ * Extensions use this API to control which rows are synced to which
+ * shared spaces. The sync engine reads these assignments to filter
+ * data when pushing to space backends.
+ *
+ * @example
+ * ```typescript
+ * // Assign a single row to a space
+ * await sdk.spaces.assignRowAsync("events", "evt_123", "space_abc");
+ *
+ * // Bulk assign multiple rows
+ * await sdk.spaces.assignAsync([
+ *   { tableName: "events", rowPks: "evt_1", spaceId: "space_abc" },
+ *   { tableName: "events", rowPks: "evt_2", spaceId: "space_abc" },
+ * ]);
+ *
+ * // Query assignments
+ * const assignments = await sdk.spaces.getAssignmentsAsync("events");
+ * ```
+ */
+declare class SpacesAPI {
+    private client;
+    constructor(client: HaexVaultSdk);
+    /**
+     * Bulk assign rows to spaces.
+     * @param assignments - Array of row-to-space mappings
+     * @returns Number of assignments created
+     */
+    assignAsync(assignments: SpaceAssignment[]): Promise<number>;
+    /**
+     * Bulk unassign rows from spaces.
+     * @param assignments - Array of row-to-space mappings to remove
+     * @returns Number of assignments removed
+     */
+    unassignAsync(assignments: SpaceAssignment[]): Promise<number>;
+    /**
+     * Get space assignments for a table, optionally filtered by row.
+     * @param tableName - The table to query assignments for
+     * @param rowPks - Optional row primary key(s) to filter by
+     * @returns Array of space assignments
+     */
+    getAssignmentsAsync(tableName: string, rowPks?: string): Promise<SpaceAssignment[]>;
+    /**
+     * Convenience method to assign a single row to a space.
+     * @param tableName - The table name
+     * @param rowPks - The row primary key(s)
+     * @param spaceId - The space ID to assign to
+     * @returns Number of assignments created (0 or 1)
+     */
+    assignRowAsync(tableName: string, rowPks: string, spaceId: string): Promise<number>;
+    /**
+     * Convenience method to unassign a single row from a space.
+     * @param tableName - The table name
+     * @param rowPks - The row primary key(s)
+     * @param spaceId - The space ID to unassign from
+     * @returns Number of assignments removed (0 or 1)
+     */
+    unassignRowAsync(tableName: string, rowPks: string, spaceId: string): Promise<number>;
+    /**
+     * List all shared spaces the user is a member of.
+     * Returns spaces with decrypted names (decryption happens vault-side).
+     */
+    listSpacesAsync(): Promise<DecryptedSpace[]>;
+    /**
+     * Create a new shared space.
+     * @param name - Human-readable space name
+     * @param serverUrl - The sync server URL to create the space on
+     * @returns The created space with decrypted name
+     */
+    createSpaceAsync(name: string, serverUrl: string): Promise<DecryptedSpace>;
+    /**
+     * List available sync backends that can host shared spaces.
+     * @returns Array of backend info with server URLs
+     */
+    listSyncBackendsAsync(): Promise<SyncBackendInfo[]>;
+}
+
 /**
  * HaexVault Client
  *
@@ -971,6 +1130,7 @@ declare class HaexVaultSdk {
     readonly permissions: PermissionsAPI;
     readonly remoteStorage: RemoteStorageAPI;
     readonly localsend: LocalSendAPI;
+    readonly spaces: SpacesAPI;
     constructor(config?: HaexHubConfig);
     ready(): Promise<void>;
     get setupCompleted(): boolean;
@@ -1014,4 +1174,4 @@ declare class HaexVaultSdk {
     private log;
 }
 
-export { type AuthorizedClient as A, type BlockedClient as B, type SelectFolderOptions as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type ServerInfo as G, HaexVaultSdk as H, type ServerStatus as I, type SessionAuthorization as J, type TransferProgress as K, LOCALSEND_EVENTS as L, type TransferState as M, canExternalClientSendRequests as N, isExternalClientConnected as O, type PendingAuthorization as P, RemoteStorageAPI as R, StorageAPI as S, type TransferDirection as T, type UpdateBackendRequest as U, WebAPI as W, type Device as a, type DeviceInfo as b, type DeviceType as c, type DirEntry as d, type ExternalConnection as e, ExternalConnectionErrorCode as f, ExternalConnectionState as g, type ExternalRequest as h, type ExternalRequestEvent as i, type ExternalRequestHandler as j, type ExternalRequestPayload as k, type ExternalResponse as l, FilesystemAPI as m, LocalSendAPI as n, type LocalSendEvent as o, type FileInfo as p, type LocalSendSettings as q, type PendingTransfer as r, PermissionsAPI as s, type AddBackendRequest as t, type S3Config as u, type S3PublicConfig as v, type StorageBackendInfo as w, type StorageObjectInfo as x, type RequestedExtension as y, type SelectFileOptions as z };
+export { type TransferState as $, type AuthorizedClient as A, type BlockedClient as B, type SelectFileOptions as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type SelectFolderOptions as G, HaexVaultSdk as H, type ServerInfo as I, type ServerStatus as J, type SessionAuthorization as K, LOCALSEND_EVENTS as L, type SharedSpace as M, type SpaceAccessTokenInfo as N, type SpaceAssignment as O, type PendingAuthorization as P, type SpaceInvite as Q, RemoteStorageAPI as R, StorageAPI as S, type SpaceKeyGrantInfo as T, type UpdateBackendRequest as U, type SpaceMemberInfo as V, type SpaceRole as W, SpacesAPI as X, type SyncBackendInfo as Y, type TransferDirection as Z, type TransferProgress as _, type DecryptedSpace as a, WebAPI as a0, canExternalClientSendRequests as a1, isExternalClientConnected as a2, type Device as b, type DeviceInfo as c, type DeviceType as d, type DirEntry as e, type ExternalConnection as f, ExternalConnectionErrorCode as g, ExternalConnectionState as h, type ExternalRequest as i, type ExternalRequestEvent as j, type ExternalRequestHandler as k, type ExternalRequestPayload as l, type ExternalResponse as m, FilesystemAPI as n, LocalSendAPI as o, type LocalSendEvent as p, type FileInfo as q, type LocalSendSettings as r, type PendingTransfer as s, PermissionsAPI as t, type AddBackendRequest as u, type S3Config as v, type S3PublicConfig as w, type StorageBackendInfo as x, type StorageObjectInfo as y, type RequestedExtension as z };

package/dist/{client-8dlKVNDZ.d.ts → client-Dhn288AJ.d.ts}

@@ -939,6 +939,165 @@ declare class LocalSendAPI {
     cancelSend(sessionId: string): Promise<void>;
 }
 
+type SpaceRole = 'admin' | 'member' | 'viewer';
+interface SharedSpace {
+    id: string;
+    ownerId: string;
+    encryptedName: string;
+    nameNonce: string;
+    currentKeyGeneration: number;
+    role: SpaceRole;
+    canInvite: boolean;
+    createdAt: string;
+}
+interface SpaceMemberInfo {
+    publicKey: string;
+    label: string;
+    role: SpaceRole;
+    canInvite: boolean;
+    invitedBy: string | null;
+    joinedAt: string;
+}
+interface SpaceKeyGrantInfo {
+    spaceId: string;
+    generation: number;
+    encryptedSpaceKey: string;
+    keyNonce: string;
+    ephemeralPublicKey: string;
+}
+interface SpaceInvite {
+    spaceId: string;
+    serverUrl: string;
+    spaceName: string;
+    accessToken: string;
+    encryptedSpaceKey: string;
+    keyNonce: string;
+    ephemeralPublicKey: string;
+    generation: number;
+    role: SpaceRole;
+}
+interface SpaceAccessTokenInfo {
+    id: string;
+    publicKey: string;
+    role: SpaceRole;
+    label: string | null;
+    revoked: boolean;
+    createdAt: string;
+    lastUsedAt: string | null;
+}
+/**
+ * A shared space with its decrypted name.
+ * Returned by the extension API after vault-side decryption.
+ */
+interface DecryptedSpace {
+    id: string;
+    name: string;
+    role: SpaceRole;
+    canInvite: boolean;
+    serverUrl: string;
+    createdAt: string;
+}
+/**
+ * Minimal sync backend info exposed to extensions.
+ * Extensions use this to pick a server when creating a space.
+ */
+interface SyncBackendInfo {
+    id: string;
+    name: string;
+    serverUrl: string;
+    isDefault: boolean;
+}
+
+/**
+ * A mapping of a row to a shared space.
+ */
+interface SpaceAssignment {
+    /** The extension-scoped table name */
+    tableName: string;
+    /** Serialized primary key(s) identifying the row */
+    rowPks: string;
+    /** The shared space ID this row is assigned to */
+    spaceId: string;
+}
+/**
+ * Spaces API for managing row-to-space assignments.
+ *
+ * Extensions use this API to control which rows are synced to which
+ * shared spaces. The sync engine reads these assignments to filter
+ * data when pushing to space backends.
+ *
+ * @example
+ * ```typescript
+ * // Assign a single row to a space
+ * await sdk.spaces.assignRowAsync("events", "evt_123", "space_abc");
+ *
+ * // Bulk assign multiple rows
+ * await sdk.spaces.assignAsync([
+ *   { tableName: "events", rowPks: "evt_1", spaceId: "space_abc" },
+ *   { tableName: "events", rowPks: "evt_2", spaceId: "space_abc" },
+ * ]);
+ *
+ * // Query assignments
+ * const assignments = await sdk.spaces.getAssignmentsAsync("events");
+ * ```
+ */
+declare class SpacesAPI {
+    private client;
+    constructor(client: HaexVaultSdk);
+    /**
+     * Bulk assign rows to spaces.
+     * @param assignments - Array of row-to-space mappings
+     * @returns Number of assignments created
+     */
+    assignAsync(assignments: SpaceAssignment[]): Promise<number>;
+    /**
+     * Bulk unassign rows from spaces.
+     * @param assignments - Array of row-to-space mappings to remove
+     * @returns Number of assignments removed
+     */
+    unassignAsync(assignments: SpaceAssignment[]): Promise<number>;
+    /**
+     * Get space assignments for a table, optionally filtered by row.
+     * @param tableName - The table to query assignments for
+     * @param rowPks - Optional row primary key(s) to filter by
+     * @returns Array of space assignments
+     */
+    getAssignmentsAsync(tableName: string, rowPks?: string): Promise<SpaceAssignment[]>;
+    /**
+     * Convenience method to assign a single row to a space.
+     * @param tableName - The table name
+     * @param rowPks - The row primary key(s)
+     * @param spaceId - The space ID to assign to
+     * @returns Number of assignments created (0 or 1)
+     */
+    assignRowAsync(tableName: string, rowPks: string, spaceId: string): Promise<number>;
+    /**
+     * Convenience method to unassign a single row from a space.
+     * @param tableName - The table name
+     * @param rowPks - The row primary key(s)
+     * @param spaceId - The space ID to unassign from
+     * @returns Number of assignments removed (0 or 1)
+     */
+    unassignRowAsync(tableName: string, rowPks: string, spaceId: string): Promise<number>;
+    /**
+     * List all shared spaces the user is a member of.
+     * Returns spaces with decrypted names (decryption happens vault-side).
+     */
+    listSpacesAsync(): Promise<DecryptedSpace[]>;
+    /**
+     * Create a new shared space.
+     * @param name - Human-readable space name
+     * @param serverUrl - The sync server URL to create the space on
+     * @returns The created space with decrypted name
+     */
+    createSpaceAsync(name: string, serverUrl: string): Promise<DecryptedSpace>;
+    /**
+     * List available sync backends that can host shared spaces.
+     * @returns Array of backend info with server URLs
+     */
+    listSyncBackendsAsync(): Promise<SyncBackendInfo[]>;
+}
+
 /**
  * HaexVault Client
  *
@@ -971,6 +1130,7 @@ declare class HaexVaultSdk {
     readonly permissions: PermissionsAPI;
     readonly remoteStorage: RemoteStorageAPI;
     readonly localsend: LocalSendAPI;
+    readonly spaces: SpacesAPI;
     constructor(config?: HaexHubConfig);
     ready(): Promise<void>;
     get setupCompleted(): boolean;
@@ -1014,4 +1174,4 @@ declare class HaexVaultSdk {
     private log;
 }
 
-export { type AuthorizedClient as A, type BlockedClient as B, type SelectFolderOptions as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type ServerInfo as G, HaexVaultSdk as H, type ServerStatus as I, type SessionAuthorization as J, type TransferProgress as K, LOCALSEND_EVENTS as L, type TransferState as M, canExternalClientSendRequests as N, isExternalClientConnected as O, type PendingAuthorization as P, RemoteStorageAPI as R, StorageAPI as S, type TransferDirection as T, type UpdateBackendRequest as U, WebAPI as W, type Device as a, type DeviceInfo as b, type DeviceType as c, type DirEntry as d, type ExternalConnection as e, ExternalConnectionErrorCode as f, ExternalConnectionState as g, type ExternalRequest as h, type ExternalRequestEvent as i, type ExternalRequestHandler as j, type ExternalRequestPayload as k, type ExternalResponse as l, FilesystemAPI as m, LocalSendAPI as n, type LocalSendEvent as o, type FileInfo as p, type LocalSendSettings as q, type PendingTransfer as r, PermissionsAPI as s, type AddBackendRequest as t, type S3Config as u, type S3PublicConfig as v, type StorageBackendInfo as w, type StorageObjectInfo as x, type RequestedExtension as y, type SelectFileOptions as z };
+export { type TransferState as $, type AuthorizedClient as A, type BlockedClient as B, type SelectFileOptions as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type SelectFolderOptions as G, HaexVaultSdk as H, type ServerInfo as I, type ServerStatus as J, type SessionAuthorization as K, LOCALSEND_EVENTS as L, type SharedSpace as M, type SpaceAccessTokenInfo as N, type SpaceAssignment as O, type PendingAuthorization as P, type SpaceInvite as Q, RemoteStorageAPI as R, StorageAPI as S, type SpaceKeyGrantInfo as T, type UpdateBackendRequest as U, type SpaceMemberInfo as V, type SpaceRole as W, SpacesAPI as X, type SyncBackendInfo as Y, type TransferDirection as Z, type TransferProgress as _, type DecryptedSpace as a, WebAPI as a0, canExternalClientSendRequests as a1, isExternalClientConnected as a2, type Device as b, type DeviceInfo as c, type DeviceType as d, type DirEntry as e, type ExternalConnection as f, ExternalConnectionErrorCode as g, ExternalConnectionState as h, type ExternalRequest as i, type ExternalRequestEvent as j, type ExternalRequestHandler as k, type ExternalRequestPayload as l, type ExternalResponse as m, FilesystemAPI as n, LocalSendAPI as o, type LocalSendEvent as p, type FileInfo as q, type LocalSendSettings as r, type PendingTransfer as s, PermissionsAPI as t, type AddBackendRequest as u, type S3Config as v, type S3PublicConfig as w, type StorageBackendInfo as x, type StorageObjectInfo as y, type RequestedExtension as z };

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { H as HaexVaultSdk } from './client-DFGx115H.mjs';
-export { A as AuthorizedClient, B as BlockedClient, D as DatabaseAPI, a as Device, b as DeviceInfo, c as DeviceType, d as DirEntry, E as ExternalAuthDecision, e as ExternalConnection, f as ExternalConnectionErrorCode, g as ExternalConnectionState, h as ExternalRequest, i as ExternalRequestEvent, j as ExternalRequestHandler, k as ExternalRequestPayload, l as ExternalResponse, F as FileStat, m as FilesystemAPI, L as LOCALSEND_EVENTS, n as LocalSendAPI, o as LocalSendEvent, p as LocalSendFileInfo, q as LocalSendSettings, P as PendingAuthorization, r as PendingTransfer, s as PermissionsAPI, t as RemoteAddBackendRequest, u as RemoteS3Config, v as RemoteS3PublicConfig, R as RemoteStorageAPI, w as RemoteStorageBackendInfo, x as RemoteStorageObjectInfo, U as RemoteUpdateBackendRequest, y as RequestedExtension, z as SelectFileOptions, C as SelectFolderOptions, G as ServerInfo, I as ServerStatus, J as SessionAuthorization, T as TransferDirection, K as TransferProgress, M as TransferState, W as WebAPI, N as canExternalClientSendRequests, O as isExternalClientConnected } from './client-DFGx115H.mjs';
+import { H as HaexVaultSdk } from './client-Dfy9UQeu.mjs';
+export { A as AuthorizedClient, B as BlockedClient, D as DatabaseAPI, a as DecryptedSpace, b as Device, c as DeviceInfo, d as DeviceType, e as DirEntry, E as ExternalAuthDecision, f as ExternalConnection, g as ExternalConnectionErrorCode, h as ExternalConnectionState, i as ExternalRequest, j as ExternalRequestEvent, k as ExternalRequestHandler, l as ExternalRequestPayload, m as ExternalResponse, F as FileStat, n as FilesystemAPI, L as LOCALSEND_EVENTS, o as LocalSendAPI, p as LocalSendEvent, q as LocalSendFileInfo, r as LocalSendSettings, P as PendingAuthorization, s as PendingTransfer, t as PermissionsAPI, u as RemoteAddBackendRequest, v as RemoteS3Config, w as RemoteS3PublicConfig, R as RemoteStorageAPI, x as RemoteStorageBackendInfo, y as RemoteStorageObjectInfo, U as RemoteUpdateBackendRequest, z as RequestedExtension, C as SelectFileOptions, G as SelectFolderOptions, I as ServerInfo, J as ServerStatus, K as SessionAuthorization, M as SharedSpace, N as SpaceAccessTokenInfo, O as SpaceAssignment, Q as SpaceInvite, T as SpaceKeyGrantInfo, V as SpaceMemberInfo, W as SpaceRole, X as SpacesAPI, Y as SyncBackendInfo, Z as TransferDirection, _ as TransferProgress, $ as TransferState, a0 as WebAPI, a1 as canExternalClientSendRequests, a2 as isExternalClientConnected } from './client-Dfy9UQeu.mjs';
 import { E as ExtensionManifest, H as HaexHubConfig } from './types-gfc9eCL4.mjs';
 export { A as ApplicationContext, C as ContextChangedEvent, h as DEFAULT_TIMEOUT, i as DatabaseColumnInfo, j as DatabaseExecuteParams, k as DatabasePermission, f as DatabasePermissionRequest, l as DatabaseQueryParams, D as DatabaseQueryResult, m as DatabaseTableInfo, c as EXTERNAL_EVENTS, n as ErrorCode, g as EventCallback, a as ExtensionInfo, o as ExtensionRuntimeMode, p as ExternalEvent, F as FileChangeEvent, q as FileChangePayload, r as FileChangeType, s as FilteredSyncTablesResult, t as HAEXTENSION_EVENTS, b as HaexHubEvent, u as HaexHubRequest, v as HaexHubResponse, w as HaexVaultSdkError, x as HaextensionEvent, y as PermissionDeniedError, z as PermissionErrorBase, B as PermissionErrorCode, G as PermissionPromptError, P as PermissionResponse, I as PermissionStatus, J as SearchQuery, K as SearchRequestEvent, S as SearchResult, L as SyncTablesUpdatedEvent, T as TABLE_SEPARATOR, W as WebRequestOptions, e as WebResponse, N as getTableName, O as isPermissionDeniedError, Q as isPermissionError, R as isPermissionPromptError } from './types-gfc9eCL4.mjs';
 export { H as HaextensionConfig } from './config-D_HXjsEV.mjs';
@@ -217,53 +217,6 @@ interface RegisterKeypairRequest {
     privateKeySalt: string;
 }
 
-type SpaceRole = 'admin' | 'member' | 'viewer';
-interface SharedSpace {
-    id: string;
-    ownerId: string;
-    encryptedName: string;
-    nameNonce: string;
-    currentKeyGeneration: number;
-    role: SpaceRole;
-    canInvite: boolean;
-    createdAt: string;
-}
-interface SpaceMemberInfo {
-    publicKey: string;
-    label: string;
-    role: SpaceRole;
-    canInvite: boolean;
-    invitedBy: string | null;
-    joinedAt: string;
-}
-interface SpaceKeyGrantInfo {
-    spaceId: string;
-    generation: number;
-    encryptedSpaceKey: string;
-    keyNonce: string;
-    ephemeralPublicKey: string;
-}
-interface SpaceInvite {
-    spaceId: string;
-    serverUrl: string;
-    spaceName: string;
-    accessToken: string;
-    encryptedSpaceKey: string;
-    keyNonce: string;
-    ephemeralPublicKey: string;
-    generation: number;
-    role: SpaceRole;
-}
-interface SpaceAccessTokenInfo {
-    id: string;
-    publicKey: string;
-    role: SpaceRole;
-    label: string | null;
-    revoked: boolean;
-    createdAt: string;
-    lastUsedAt: string | null;
-}
-
 /**
  * Central message type definitions for HaexSpace SDK
  *
@@ -551,6 +504,31 @@ declare const LOCALSEND_COMMANDS: {
     readonly cancelSend: "localsend_cancel_send";
 };
 
+/**
+ * Space Commands
+ *
+ * Commands for managing row-to-space assignments (shared space sync).
+ * These commands are used for both:
+ * - Tauri invoke (WebView extensions)
+ * - postMessage (iframe extensions)
+ *
+ * Naming convention: `extension_space_<action>`
+ */
+declare const SPACE_COMMANDS: {
+    /** Bulk assign rows to spaces */
+    readonly assign: "extension_space_assign";
+    /** Bulk unassign rows from spaces */
+    readonly unassign: "extension_space_unassign";
+    /** Get space assignments for a table */
+    readonly getAssignments: "extension_space_get_assignments";
+    /** List all spaces the user is a member of (with decrypted names) */
+    readonly list: "extension_space_list";
+    /** Create a new shared space */
+    readonly create: "extension_space_create";
+    /** List available sync backends */
+    readonly listBackends: "extension_space_list_backends";
+};
+
 /**
  * Tauri Command Names
  *
@@ -669,8 +647,16 @@ declare const TAURI_COMMANDS: {
         readonly sendFiles: "localsend_send_files";
         readonly cancelSend: "localsend_cancel_send";
     };
+    readonly spaces: {
+        readonly assign: "extension_space_assign";
+        readonly unassign: "extension_space_unassign";
+        readonly getAssignments: "extension_space_get_assignments";
+        readonly list: "extension_space_list";
+        readonly create: "extension_space_create";
+        readonly listBackends: "extension_space_list_backends";
+    };
 };
-type TauriCommand = (typeof DATABASE_COMMANDS)[keyof typeof DATABASE_COMMANDS] | (typeof PERMISSIONS_COMMANDS)[keyof typeof PERMISSIONS_COMMANDS] | (typeof WEB_COMMANDS)[keyof typeof WEB_COMMANDS] | (typeof WEB_STORAGE_COMMANDS)[keyof typeof WEB_STORAGE_COMMANDS] | (typeof FILESYSTEM_COMMANDS)[keyof typeof FILESYSTEM_COMMANDS] | (typeof EXTERNAL_BRIDGE_COMMANDS)[keyof typeof EXTERNAL_BRIDGE_COMMANDS] | (typeof EXTENSION_COMMANDS)[keyof typeof EXTENSION_COMMANDS] | (typeof REMOTE_STORAGE_COMMANDS)[keyof typeof REMOTE_STORAGE_COMMANDS] | (typeof LOCALSEND_COMMANDS)[keyof typeof LOCALSEND_COMMANDS];
+type TauriCommand = (typeof DATABASE_COMMANDS)[keyof typeof DATABASE_COMMANDS] | (typeof PERMISSIONS_COMMANDS)[keyof typeof PERMISSIONS_COMMANDS] | (typeof WEB_COMMANDS)[keyof typeof WEB_COMMANDS] | (typeof WEB_STORAGE_COMMANDS)[keyof typeof WEB_STORAGE_COMMANDS] | (typeof FILESYSTEM_COMMANDS)[keyof typeof FILESYSTEM_COMMANDS] | (typeof EXTERNAL_BRIDGE_COMMANDS)[keyof typeof EXTERNAL_BRIDGE_COMMANDS] | (typeof EXTENSION_COMMANDS)[keyof typeof EXTENSION_COMMANDS] | (typeof REMOTE_STORAGE_COMMANDS)[keyof typeof REMOTE_STORAGE_COMMANDS] | (typeof LOCALSEND_COMMANDS)[keyof typeof LOCALSEND_COMMANDS] | (typeof SPACE_COMMANDS)[keyof typeof SPACE_COMMANDS];
 
 interface VerifyResult {
     valid: boolean;
@@ -835,6 +821,18 @@ interface EncryptedSpaceKey {
 declare function generateSpaceKey(): Uint8Array<ArrayBuffer>;
 declare function encryptSpaceKeyForRecipientAsync(spaceKey: Uint8Array<ArrayBuffer>, recipientPublicKeyBase64: string): Promise<EncryptedSpaceKey>;
 declare function decryptSpaceKeyAsync(encrypted: EncryptedSpaceKey, ownPrivateKeyBase64: string): Promise<Uint8Array>;
+/**
+ * Encrypt a space name using the raw space key.
+ * Returns the encrypted name and nonce as base64 strings.
+ */
+declare function encryptSpaceNameAsync(spaceKey: Uint8Array, spaceName: string): Promise<{
+    encryptedName: string;
+    nameNonce: string;
+}>;
+/**
+ * Decrypt a space name using the raw space key.
+ */
+declare function decryptSpaceNameAsync(spaceKey: Uint8Array, encryptedName: string, nameNonce: string): Promise<string>;
 
 interface SignableRecord {
     tableName: string;
@@ -939,4 +937,4 @@ declare function exportKeyPairAsync(keyPair: PasskeyKeyPair): Promise<ExportedPa
 
 declare function createHaexVaultSdk(config?: HaexHubConfig): HaexVaultSdk;
 
-export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type EncryptedSpaceKey, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, type PasskeyKeyPair, type RegisterKeypairRequest, SIGNING_ALGO, type SharedSpace, type SignableRecord, type SpaceAccessTokenInfo, type SpaceInvite, type SpaceKeyGrantInfo, type SpaceMemberInfo, type SpaceRole, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceKeyAsync, decryptString, decryptVaultKey, decryptVaultName, deriveKeyFromPassword, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceKeyForRecipientAsync, encryptString, encryptVaultKey, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };
+export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type EncryptedSpaceKey, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, type PasskeyKeyPair, type RegisterKeypairRequest, SIGNING_ALGO, type SignableRecord, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceKeyAsync, decryptSpaceNameAsync, decryptString, decryptVaultKey, decryptVaultName, deriveKeyFromPassword, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceKeyForRecipientAsync, encryptSpaceNameAsync, encryptString, encryptVaultKey, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { H as HaexVaultSdk } from './client-8dlKVNDZ.js';
-export { A as AuthorizedClient, B as BlockedClient, D as DatabaseAPI, a as Device, b as DeviceInfo, c as DeviceType, d as DirEntry, E as ExternalAuthDecision, e as ExternalConnection, f as ExternalConnectionErrorCode, g as ExternalConnectionState, h as ExternalRequest, i as ExternalRequestEvent, j as ExternalRequestHandler, k as ExternalRequestPayload, l as ExternalResponse, F as FileStat, m as FilesystemAPI, L as LOCALSEND_EVENTS, n as LocalSendAPI, o as LocalSendEvent, p as LocalSendFileInfo, q as LocalSendSettings, P as PendingAuthorization, r as PendingTransfer, s as PermissionsAPI, t as RemoteAddBackendRequest, u as RemoteS3Config, v as RemoteS3PublicConfig, R as RemoteStorageAPI, w as RemoteStorageBackendInfo, x as RemoteStorageObjectInfo, U as RemoteUpdateBackendRequest, y as RequestedExtension, z as SelectFileOptions, C as SelectFolderOptions, G as ServerInfo, I as ServerStatus, J as SessionAuthorization, T as TransferDirection, K as TransferProgress, M as TransferState, W as WebAPI, N as canExternalClientSendRequests, O as isExternalClientConnected } from './client-8dlKVNDZ.js';
+import { H as HaexVaultSdk } from './client-Dhn288AJ.js';
+export { A as AuthorizedClient, B as BlockedClient, D as DatabaseAPI, a as DecryptedSpace, b as Device, c as DeviceInfo, d as DeviceType, e as DirEntry, E as ExternalAuthDecision, f as ExternalConnection, g as ExternalConnectionErrorCode, h as ExternalConnectionState, i as ExternalRequest, j as ExternalRequestEvent, k as ExternalRequestHandler, l as ExternalRequestPayload, m as ExternalResponse, F as FileStat, n as FilesystemAPI, L as LOCALSEND_EVENTS, o as LocalSendAPI, p as LocalSendEvent, q as LocalSendFileInfo, r as LocalSendSettings, P as PendingAuthorization, s as PendingTransfer, t as PermissionsAPI, u as RemoteAddBackendRequest, v as RemoteS3Config, w as RemoteS3PublicConfig, R as RemoteStorageAPI, x as RemoteStorageBackendInfo, y as RemoteStorageObjectInfo, U as RemoteUpdateBackendRequest, z as RequestedExtension, C as SelectFileOptions, G as SelectFolderOptions, I as ServerInfo, J as ServerStatus, K as SessionAuthorization, M as SharedSpace, N as SpaceAccessTokenInfo, O as SpaceAssignment, Q as SpaceInvite, T as SpaceKeyGrantInfo, V as SpaceMemberInfo, W as SpaceRole, X as SpacesAPI, Y as SyncBackendInfo, Z as TransferDirection, _ as TransferProgress, $ as TransferState, a0 as WebAPI, a1 as canExternalClientSendRequests, a2 as isExternalClientConnected } from './client-Dhn288AJ.js';
 import { E as ExtensionManifest, H as HaexHubConfig } from './types-gfc9eCL4.js';
 export { A as ApplicationContext, C as ContextChangedEvent, h as DEFAULT_TIMEOUT, i as DatabaseColumnInfo, j as DatabaseExecuteParams, k as DatabasePermission, f as DatabasePermissionRequest, l as DatabaseQueryParams, D as DatabaseQueryResult, m as DatabaseTableInfo, c as EXTERNAL_EVENTS, n as ErrorCode, g as EventCallback, a as ExtensionInfo, o as ExtensionRuntimeMode, p as ExternalEvent, F as FileChangeEvent, q as FileChangePayload, r as FileChangeType, s as FilteredSyncTablesResult, t as HAEXTENSION_EVENTS, b as HaexHubEvent, u as HaexHubRequest, v as HaexHubResponse, w as HaexVaultSdkError, x as HaextensionEvent, y as PermissionDeniedError, z as PermissionErrorBase, B as PermissionErrorCode, G as PermissionPromptError, P as PermissionResponse, I as PermissionStatus, J as SearchQuery, K as SearchRequestEvent, S as SearchResult, L as SyncTablesUpdatedEvent, T as TABLE_SEPARATOR, W as WebRequestOptions, e as WebResponse, N as getTableName, O as isPermissionDeniedError, Q as isPermissionError, R as isPermissionPromptError } from './types-gfc9eCL4.js';
 export { H as HaextensionConfig } from './config-D_HXjsEV.js';
@@ -217,53 +217,6 @@ interface RegisterKeypairRequest {
     privateKeySalt: string;
 }
 
-type SpaceRole = 'admin' | 'member' | 'viewer';
-interface SharedSpace {
-    id: string;
-    ownerId: string;
-    encryptedName: string;
-    nameNonce: string;
-    currentKeyGeneration: number;
-    role: SpaceRole;
-    canInvite: boolean;
-    createdAt: string;
-}
-interface SpaceMemberInfo {
-    publicKey: string;
-    label: string;
-    role: SpaceRole;
-    canInvite: boolean;
-    invitedBy: string | null;
-    joinedAt: string;
-}
-interface SpaceKeyGrantInfo {
-    spaceId: string;
-    generation: number;
-    encryptedSpaceKey: string;
-    keyNonce: string;
-    ephemeralPublicKey: string;
-}
-interface SpaceInvite {
-    spaceId: string;
-    serverUrl: string;
-    spaceName: string;
-    accessToken: string;
-    encryptedSpaceKey: string;
-    keyNonce: string;
-    ephemeralPublicKey: string;
-    generation: number;
-    role: SpaceRole;
-}
-interface SpaceAccessTokenInfo {
-    id: string;
-    publicKey: string;
-    role: SpaceRole;
-    label: string | null;
-    revoked: boolean;
-    createdAt: string;
-    lastUsedAt: string | null;
-}
-
 /**
  * Central message type definitions for HaexSpace SDK
  *
@@ -551,6 +504,31 @@ declare const LOCALSEND_COMMANDS: {
     readonly cancelSend: "localsend_cancel_send";
 };
 
+/**
+ * Space Commands
+ *
+ * Commands for managing row-to-space assignments (shared space sync).
+ * These commands are used for both:
+ * - Tauri invoke (WebView extensions)
+ * - postMessage (iframe extensions)
+ *
+ * Naming convention: `extension_space_<action>`
+ */
+declare const SPACE_COMMANDS: {
+    /** Bulk assign rows to spaces */
+    readonly assign: "extension_space_assign";
+    /** Bulk unassign rows from spaces */
+    readonly unassign: "extension_space_unassign";
+    /** Get space assignments for a table */
+    readonly getAssignments: "extension_space_get_assignments";
+    /** List all spaces the user is a member of (with decrypted names) */
+    readonly list: "extension_space_list";
+    /** Create a new shared space */
+    readonly create: "extension_space_create";
+    /** List available sync backends */
+    readonly listBackends: "extension_space_list_backends";
+};
+
 /**
  * Tauri Command Names
  *
@@ -669,8 +647,16 @@ declare const TAURI_COMMANDS: {
         readonly sendFiles: "localsend_send_files";
         readonly cancelSend: "localsend_cancel_send";
     };
+    readonly spaces: {
+        readonly assign: "extension_space_assign";
+        readonly unassign: "extension_space_unassign";
+        readonly getAssignments: "extension_space_get_assignments";
+        readonly list: "extension_space_list";
+        readonly create: "extension_space_create";
+        readonly listBackends: "extension_space_list_backends";
+    };
 };
-type TauriCommand = (typeof DATABASE_COMMANDS)[keyof typeof DATABASE_COMMANDS] | (typeof PERMISSIONS_COMMANDS)[keyof typeof PERMISSIONS_COMMANDS] | (typeof WEB_COMMANDS)[keyof typeof WEB_COMMANDS] | (typeof WEB_STORAGE_COMMANDS)[keyof typeof WEB_STORAGE_COMMANDS] | (typeof FILESYSTEM_COMMANDS)[keyof typeof FILESYSTEM_COMMANDS] | (typeof EXTERNAL_BRIDGE_COMMANDS)[keyof typeof EXTERNAL_BRIDGE_COMMANDS] | (typeof EXTENSION_COMMANDS)[keyof typeof EXTENSION_COMMANDS] | (typeof REMOTE_STORAGE_COMMANDS)[keyof typeof REMOTE_STORAGE_COMMANDS] | (typeof LOCALSEND_COMMANDS)[keyof typeof LOCALSEND_COMMANDS];
+type TauriCommand = (typeof DATABASE_COMMANDS)[keyof typeof DATABASE_COMMANDS] | (typeof PERMISSIONS_COMMANDS)[keyof typeof PERMISSIONS_COMMANDS] | (typeof WEB_COMMANDS)[keyof typeof WEB_COMMANDS] | (typeof WEB_STORAGE_COMMANDS)[keyof typeof WEB_STORAGE_COMMANDS] | (typeof FILESYSTEM_COMMANDS)[keyof typeof FILESYSTEM_COMMANDS] | (typeof EXTERNAL_BRIDGE_COMMANDS)[keyof typeof EXTERNAL_BRIDGE_COMMANDS] | (typeof EXTENSION_COMMANDS)[keyof typeof EXTENSION_COMMANDS] | (typeof REMOTE_STORAGE_COMMANDS)[keyof typeof REMOTE_STORAGE_COMMANDS] | (typeof LOCALSEND_COMMANDS)[keyof typeof LOCALSEND_COMMANDS] | (typeof SPACE_COMMANDS)[keyof typeof SPACE_COMMANDS];
 
 interface VerifyResult {
     valid: boolean;
@@ -835,6 +821,18 @@ interface EncryptedSpaceKey {
 declare function generateSpaceKey(): Uint8Array<ArrayBuffer>;
 declare function encryptSpaceKeyForRecipientAsync(spaceKey: Uint8Array<ArrayBuffer>, recipientPublicKeyBase64: string): Promise<EncryptedSpaceKey>;
 declare function decryptSpaceKeyAsync(encrypted: EncryptedSpaceKey, ownPrivateKeyBase64: string): Promise<Uint8Array>;
+/**
+ * Encrypt a space name using the raw space key.
+ * Returns the encrypted name and nonce as base64 strings.
+ */
+declare function encryptSpaceNameAsync(spaceKey: Uint8Array, spaceName: string): Promise<{
+    encryptedName: string;
+    nameNonce: string;
+}>;
+/**
+ * Decrypt a space name using the raw space key.
+ */
+declare function decryptSpaceNameAsync(spaceKey: Uint8Array, encryptedName: string, nameNonce: string): Promise<string>;
 
 interface SignableRecord {
     tableName: string;
@@ -939,4 +937,4 @@ declare function exportKeyPairAsync(keyPair: PasskeyKeyPair): Promise<ExportedPa
 
 declare function createHaexVaultSdk(config?: HaexHubConfig): HaexVaultSdk;
 
-export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type EncryptedSpaceKey, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, type PasskeyKeyPair, type RegisterKeypairRequest, SIGNING_ALGO, type SharedSpace, type SignableRecord, type SpaceAccessTokenInfo, type SpaceInvite, type SpaceKeyGrantInfo, type SpaceMemberInfo, type SpaceRole, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceKeyAsync, decryptString, decryptVaultKey, decryptVaultName, deriveKeyFromPassword, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceKeyForRecipientAsync, encryptString, encryptVaultKey, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };
+export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type EncryptedSpaceKey, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, type PasskeyKeyPair, type RegisterKeypairRequest, SIGNING_ALGO, type SignableRecord, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceKeyAsync, decryptSpaceNameAsync, decryptString, decryptVaultKey, decryptVaultName, deriveKeyFromPassword, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceKeyForRecipientAsync, encryptSpaceNameAsync, encryptString, encryptVaultKey, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };