@haex-space/vault-sdk 2.5.112 → 2.5.114

package/dist/{client-BVMJXZiK.d.ts → client-CA59HZfa.d.ts}

@@ -1,4 +1,4 @@
-import { b as HaexHubEvent, c as EXTERNAL_EVENTS, D as DatabaseQueryResult, M as Migration, d as MigrationResult, W as WebRequestOptions, e as WebResponse, H as HaexHubConfig, a as ExtensionInfo, A as ApplicationContext, f as DatabasePermissionRequest, P as PermissionResponse, S as SearchResult, g as EventCallback } from './types-gfc9eCL4.js';
+import { b as HaexHubEvent, c as EXTERNAL_EVENTS, D as DatabaseQueryResult, M as Migration, d as MigrationResult, W as WebRequestOptions, e as WebResponse, H as HaexHubConfig, a as ExtensionInfo, A as ApplicationContext, f as DatabasePermissionRequest, P as PermissionResponse, S as SearchResult, g as EventCallback } from './types-neLTvZJ_.js';
 import { SqliteRemoteDatabase } from 'drizzle-orm/sqlite-proxy';
 
 /**
@@ -939,6 +939,75 @@ declare class LocalSendAPI {
     cancelSend(sessionId: string): Promise<void>;
 }
 
+type SpaceRole = 'admin' | 'member' | 'viewer';
+interface SharedSpace {
+    id: string;
+    ownerId: string;
+    encryptedName: string;
+    nameNonce: string;
+    currentKeyGeneration: number;
+    role: SpaceRole;
+    canInvite: boolean;
+    createdAt: string;
+}
+interface SpaceMemberInfo {
+    publicKey: string;
+    label: string;
+    role: SpaceRole;
+    canInvite: boolean;
+    invitedBy: string | null;
+    joinedAt: string;
+}
+interface SpaceKeyGrantInfo {
+    spaceId: string;
+    generation: number;
+    encryptedSpaceKey: string;
+    keyNonce: string;
+    ephemeralPublicKey: string;
+}
+interface SpaceInvite {
+    spaceId: string;
+    serverUrl: string;
+    spaceName: string;
+    accessToken: string;
+    encryptedSpaceKey: string;
+    keyNonce: string;
+    ephemeralPublicKey: string;
+    generation: number;
+    role: SpaceRole;
+}
+interface SpaceAccessTokenInfo {
+    id: string;
+    publicKey: string;
+    role: SpaceRole;
+    label: string | null;
+    revoked: boolean;
+    createdAt: string;
+    lastUsedAt: string | null;
+}
+/**
+ * A shared space with its decrypted name.
+ * Returned by the extension API after vault-side decryption.
+ */
+interface DecryptedSpace {
+    id: string;
+    name: string;
+    role: SpaceRole;
+    canInvite: boolean;
+    serverUrl: string;
+    createdAt: string;
+}
+/**
+ * Minimal sync backend info exposed to extensions.
+ * Extensions use this to pick a server when creating a space.
+ */
+interface SyncBackendInfo {
+    id: string;
+    name: string;
+    serverUrl: string;
+    isDefault: boolean;
+}
+
 /**
  * A mapping of a row to a shared space.
  */
@@ -1010,6 +1079,23 @@ declare class SpacesAPI {
      * @returns Number of assignments removed (0 or 1)
      */
     unassignRowAsync(tableName: string, rowPks: string, spaceId: string): Promise<number>;
+    /**
+     * List all shared spaces the user is a member of.
+     * Returns spaces with decrypted names (decryption happens vault-side).
+     */
+    listSpacesAsync(): Promise<DecryptedSpace[]>;
+    /**
+     * Create a new shared space.
+     * @param name - Human-readable space name
+     * @param serverUrl - The sync server URL to create the space on
+     * @returns The created space with decrypted name
+     */
+    createSpaceAsync(name: string, serverUrl: string): Promise<DecryptedSpace>;
+    /**
+     * List available sync backends that can host shared spaces.
+     * @returns Array of backend info with server URLs
+     */
+    listSyncBackendsAsync(): Promise<SyncBackendInfo[]>;
 }
 
 /**
@@ -1088,4 +1174,4 @@ declare class HaexVaultSdk {
     private log;
 }
 
-export { type AuthorizedClient as A, type BlockedClient as B, type SelectFolderOptions as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type ServerInfo as G, HaexVaultSdk as H, type ServerStatus as I, type SessionAuthorization as J, type SpaceAssignment as K, LOCALSEND_EVENTS as L, SpacesAPI as M, type TransferProgress as N, type TransferState as O, type PendingAuthorization as P, canExternalClientSendRequests as Q, RemoteStorageAPI as R, StorageAPI as S, type TransferDirection as T, type UpdateBackendRequest as U, isExternalClientConnected as V, WebAPI as W, type Device as a, type DeviceInfo as b, type DeviceType as c, type DirEntry as d, type ExternalConnection as e, ExternalConnectionErrorCode as f, ExternalConnectionState as g, type ExternalRequest as h, type ExternalRequestEvent as i, type ExternalRequestHandler as j, type ExternalRequestPayload as k, type ExternalResponse as l, FilesystemAPI as m, LocalSendAPI as n, type LocalSendEvent as o, type FileInfo as p, type LocalSendSettings as q, type PendingTransfer as r, PermissionsAPI as s, type AddBackendRequest as t, type S3Config as u, type S3PublicConfig as v, type StorageBackendInfo as w, type StorageObjectInfo as x, type RequestedExtension as y, type SelectFileOptions as z };
+export { type TransferState as $, type AuthorizedClient as A, type BlockedClient as B, type SelectFileOptions as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type SelectFolderOptions as G, HaexVaultSdk as H, type ServerInfo as I, type ServerStatus as J, type SessionAuthorization as K, LOCALSEND_EVENTS as L, type SharedSpace as M, type SpaceAccessTokenInfo as N, type SpaceAssignment as O, type PendingAuthorization as P, type SpaceInvite as Q, RemoteStorageAPI as R, StorageAPI as S, type SpaceKeyGrantInfo as T, type UpdateBackendRequest as U, type SpaceMemberInfo as V, type SpaceRole as W, SpacesAPI as X, type SyncBackendInfo as Y, type TransferDirection as Z, type TransferProgress as _, type DecryptedSpace as a, WebAPI as a0, canExternalClientSendRequests as a1, isExternalClientConnected as a2, type Device as b, type DeviceInfo as c, type DeviceType as d, type DirEntry as e, type ExternalConnection as f, ExternalConnectionErrorCode as g, ExternalConnectionState as h, type ExternalRequest as i, type ExternalRequestEvent as j, type ExternalRequestHandler as k, type ExternalRequestPayload as l, type ExternalResponse as m, FilesystemAPI as n, LocalSendAPI as o, type LocalSendEvent as p, type FileInfo as q, type LocalSendSettings as r, type PendingTransfer as s, PermissionsAPI as t, type AddBackendRequest as u, type S3Config as v, type S3PublicConfig as w, type StorageBackendInfo as x, type StorageObjectInfo as y, type RequestedExtension as z };

package/dist/{client-GPE112vL.d.mts → client-DSvkG_lC.d.mts}

@@ -1,4 +1,4 @@
-import { b as HaexHubEvent, c as EXTERNAL_EVENTS, D as DatabaseQueryResult, M as Migration, d as MigrationResult, W as WebRequestOptions, e as WebResponse, H as HaexHubConfig, a as ExtensionInfo, A as ApplicationContext, f as DatabasePermissionRequest, P as PermissionResponse, S as SearchResult, g as EventCallback } from './types-gfc9eCL4.mjs';
+import { b as HaexHubEvent, c as EXTERNAL_EVENTS, D as DatabaseQueryResult, M as Migration, d as MigrationResult, W as WebRequestOptions, e as WebResponse, H as HaexHubConfig, a as ExtensionInfo, A as ApplicationContext, f as DatabasePermissionRequest, P as PermissionResponse, S as SearchResult, g as EventCallback } from './types-neLTvZJ_.mjs';
 import { SqliteRemoteDatabase } from 'drizzle-orm/sqlite-proxy';
 
 /**
@@ -939,6 +939,75 @@ declare class LocalSendAPI {
     cancelSend(sessionId: string): Promise<void>;
 }
 
+type SpaceRole = 'admin' | 'member' | 'viewer';
+interface SharedSpace {
+    id: string;
+    ownerId: string;
+    encryptedName: string;
+    nameNonce: string;
+    currentKeyGeneration: number;
+    role: SpaceRole;
+    canInvite: boolean;
+    createdAt: string;
+}
+interface SpaceMemberInfo {
+    publicKey: string;
+    label: string;
+    role: SpaceRole;
+    canInvite: boolean;
+    invitedBy: string | null;
+    joinedAt: string;
+}
+interface SpaceKeyGrantInfo {
+    spaceId: string;
+    generation: number;
+    encryptedSpaceKey: string;
+    keyNonce: string;
+    ephemeralPublicKey: string;
+}
+interface SpaceInvite {
+    spaceId: string;
+    serverUrl: string;
+    spaceName: string;
+    accessToken: string;
+    encryptedSpaceKey: string;
+    keyNonce: string;
+    ephemeralPublicKey: string;
+    generation: number;
+    role: SpaceRole;
+}
+interface SpaceAccessTokenInfo {
+    id: string;
+    publicKey: string;
+    role: SpaceRole;
+    label: string | null;
+    revoked: boolean;
+    createdAt: string;
+    lastUsedAt: string | null;
+}
+/**
+ * A shared space with its decrypted name.
+ * Returned by the extension API after vault-side decryption.
+ */
+interface DecryptedSpace {
+    id: string;
+    name: string;
+    role: SpaceRole;
+    canInvite: boolean;
+    serverUrl: string;
+    createdAt: string;
+}
+/**
+ * Minimal sync backend info exposed to extensions.
+ * Extensions use this to pick a server when creating a space.
+ */
+interface SyncBackendInfo {
+    id: string;
+    name: string;
+    serverUrl: string;
+    isDefault: boolean;
+}
+
 /**
  * A mapping of a row to a shared space.
  */
@@ -1010,6 +1079,23 @@ declare class SpacesAPI {
      * @returns Number of assignments removed (0 or 1)
      */
     unassignRowAsync(tableName: string, rowPks: string, spaceId: string): Promise<number>;
+    /**
+     * List all shared spaces the user is a member of.
+     * Returns spaces with decrypted names (decryption happens vault-side).
+     */
+    listSpacesAsync(): Promise<DecryptedSpace[]>;
+    /**
+     * Create a new shared space.
+     * @param name - Human-readable space name
+     * @param serverUrl - The sync server URL to create the space on
+     * @returns The created space with decrypted name
+     */
+    createSpaceAsync(name: string, serverUrl: string): Promise<DecryptedSpace>;
+    /**
+     * List available sync backends that can host shared spaces.
+     * @returns Array of backend info with server URLs
+     */
+    listSyncBackendsAsync(): Promise<SyncBackendInfo[]>;
 }
 
 /**
@@ -1088,4 +1174,4 @@ declare class HaexVaultSdk {
     private log;
 }
 
-export { type AuthorizedClient as A, type BlockedClient as B, type SelectFolderOptions as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type ServerInfo as G, HaexVaultSdk as H, type ServerStatus as I, type SessionAuthorization as J, type SpaceAssignment as K, LOCALSEND_EVENTS as L, SpacesAPI as M, type TransferProgress as N, type TransferState as O, type PendingAuthorization as P, canExternalClientSendRequests as Q, RemoteStorageAPI as R, StorageAPI as S, type TransferDirection as T, type UpdateBackendRequest as U, isExternalClientConnected as V, WebAPI as W, type Device as a, type DeviceInfo as b, type DeviceType as c, type DirEntry as d, type ExternalConnection as e, ExternalConnectionErrorCode as f, ExternalConnectionState as g, type ExternalRequest as h, type ExternalRequestEvent as i, type ExternalRequestHandler as j, type ExternalRequestPayload as k, type ExternalResponse as l, FilesystemAPI as m, LocalSendAPI as n, type LocalSendEvent as o, type FileInfo as p, type LocalSendSettings as q, type PendingTransfer as r, PermissionsAPI as s, type AddBackendRequest as t, type S3Config as u, type S3PublicConfig as v, type StorageBackendInfo as w, type StorageObjectInfo as x, type RequestedExtension as y, type SelectFileOptions as z };
+export { type TransferState as $, type AuthorizedClient as A, type BlockedClient as B, type SelectFileOptions as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type SelectFolderOptions as G, HaexVaultSdk as H, type ServerInfo as I, type ServerStatus as J, type SessionAuthorization as K, LOCALSEND_EVENTS as L, type SharedSpace as M, type SpaceAccessTokenInfo as N, type SpaceAssignment as O, type PendingAuthorization as P, type SpaceInvite as Q, RemoteStorageAPI as R, StorageAPI as S, type SpaceKeyGrantInfo as T, type UpdateBackendRequest as U, type SpaceMemberInfo as V, type SpaceRole as W, SpacesAPI as X, type SyncBackendInfo as Y, type TransferDirection as Z, type TransferProgress as _, type DecryptedSpace as a, WebAPI as a0, canExternalClientSendRequests as a1, isExternalClientConnected as a2, type Device as b, type DeviceInfo as c, type DeviceType as d, type DirEntry as e, type ExternalConnection as f, ExternalConnectionErrorCode as g, ExternalConnectionState as h, type ExternalRequest as i, type ExternalRequestEvent as j, type ExternalRequestHandler as k, type ExternalRequestPayload as l, type ExternalResponse as m, FilesystemAPI as n, LocalSendAPI as o, type LocalSendEvent as p, type FileInfo as q, type LocalSendSettings as r, type PendingTransfer as s, PermissionsAPI as t, type AddBackendRequest as u, type S3Config as v, type S3PublicConfig as w, type StorageBackendInfo as x, type StorageObjectInfo as y, type RequestedExtension as z };

package/dist/index.d.mts

@@ -1,7 +1,7 @@
-import { H as HaexVaultSdk } from './client-GPE112vL.mjs';
-export { A as AuthorizedClient, B as BlockedClient, D as DatabaseAPI, a as Device, b as DeviceInfo, c as DeviceType, d as DirEntry, E as ExternalAuthDecision, e as ExternalConnection, f as ExternalConnectionErrorCode, g as ExternalConnectionState, h as ExternalRequest, i as ExternalRequestEvent, j as ExternalRequestHandler, k as ExternalRequestPayload, l as ExternalResponse, F as FileStat, m as FilesystemAPI, L as LOCALSEND_EVENTS, n as LocalSendAPI, o as LocalSendEvent, p as LocalSendFileInfo, q as LocalSendSettings, P as PendingAuthorization, r as PendingTransfer, s as PermissionsAPI, t as RemoteAddBackendRequest, u as RemoteS3Config, v as RemoteS3PublicConfig, R as RemoteStorageAPI, w as RemoteStorageBackendInfo, x as RemoteStorageObjectInfo, U as RemoteUpdateBackendRequest, y as RequestedExtension, z as SelectFileOptions, C as SelectFolderOptions, G as ServerInfo, I as ServerStatus, J as SessionAuthorization, K as SpaceAssignment, M as SpacesAPI, T as TransferDirection, N as TransferProgress, O as TransferState, W as WebAPI, Q as canExternalClientSendRequests, V as isExternalClientConnected } from './client-GPE112vL.mjs';
-import { E as ExtensionManifest, H as HaexHubConfig } from './types-gfc9eCL4.mjs';
-export { A as ApplicationContext, C as ContextChangedEvent, h as DEFAULT_TIMEOUT, i as DatabaseColumnInfo, j as DatabaseExecuteParams, k as DatabasePermission, f as DatabasePermissionRequest, l as DatabaseQueryParams, D as DatabaseQueryResult, m as DatabaseTableInfo, c as EXTERNAL_EVENTS, n as ErrorCode, g as EventCallback, a as ExtensionInfo, o as ExtensionRuntimeMode, p as ExternalEvent, F as FileChangeEvent, q as FileChangePayload, r as FileChangeType, s as FilteredSyncTablesResult, t as HAEXTENSION_EVENTS, b as HaexHubEvent, u as HaexHubRequest, v as HaexHubResponse, w as HaexVaultSdkError, x as HaextensionEvent, y as PermissionDeniedError, z as PermissionErrorBase, B as PermissionErrorCode, G as PermissionPromptError, P as PermissionResponse, I as PermissionStatus, J as SearchQuery, K as SearchRequestEvent, S as SearchResult, L as SyncTablesUpdatedEvent, T as TABLE_SEPARATOR, W as WebRequestOptions, e as WebResponse, N as getTableName, O as isPermissionDeniedError, Q as isPermissionError, R as isPermissionPromptError } from './types-gfc9eCL4.mjs';
+import { H as HaexVaultSdk } from './client-DSvkG_lC.mjs';
+export { A as AuthorizedClient, B as BlockedClient, D as DatabaseAPI, a as DecryptedSpace, b as Device, c as DeviceInfo, d as DeviceType, e as DirEntry, E as ExternalAuthDecision, f as ExternalConnection, g as ExternalConnectionErrorCode, h as ExternalConnectionState, i as ExternalRequest, j as ExternalRequestEvent, k as ExternalRequestHandler, l as ExternalRequestPayload, m as ExternalResponse, F as FileStat, n as FilesystemAPI, L as LOCALSEND_EVENTS, o as LocalSendAPI, p as LocalSendEvent, q as LocalSendFileInfo, r as LocalSendSettings, P as PendingAuthorization, s as PendingTransfer, t as PermissionsAPI, u as RemoteAddBackendRequest, v as RemoteS3Config, w as RemoteS3PublicConfig, R as RemoteStorageAPI, x as RemoteStorageBackendInfo, y as RemoteStorageObjectInfo, U as RemoteUpdateBackendRequest, z as RequestedExtension, C as SelectFileOptions, G as SelectFolderOptions, I as ServerInfo, J as ServerStatus, K as SessionAuthorization, M as SharedSpace, N as SpaceAccessTokenInfo, O as SpaceAssignment, Q as SpaceInvite, T as SpaceKeyGrantInfo, V as SpaceMemberInfo, W as SpaceRole, X as SpacesAPI, Y as SyncBackendInfo, Z as TransferDirection, _ as TransferProgress, $ as TransferState, a0 as WebAPI, a1 as canExternalClientSendRequests, a2 as isExternalClientConnected } from './client-DSvkG_lC.mjs';
+import { E as ExtensionManifest, H as HaexHubConfig } from './types-neLTvZJ_.mjs';
+export { A as ApplicationContext, C as ContextChangedEvent, h as DEFAULT_TIMEOUT, i as DatabaseColumnInfo, j as DatabaseExecuteParams, k as DatabasePermission, f as DatabasePermissionRequest, l as DatabaseQueryParams, D as DatabaseQueryResult, m as DatabaseTableInfo, c as EXTERNAL_EVENTS, n as ErrorCode, g as EventCallback, a as ExtensionInfo, o as ExtensionRuntimeMode, p as ExternalEvent, F as FileChangeEvent, q as FileChangePayload, r as FileChangeType, s as FilteredSyncTablesResult, t as HAEXTENSION_EVENTS, b as HaexHubEvent, u as HaexHubRequest, v as HaexHubResponse, w as HaexVaultSdkError, x as HaextensionEvent, y as PermissionDeniedError, z as PermissionErrorBase, B as PermissionErrorCode, G as PermissionPromptError, P as PermissionResponse, I as PermissionStatus, J as SearchQuery, K as SearchRequestEvent, S as SearchResult, L as SyncTablesUpdatedEvent, T as TABLE_SEPARATOR, W as WebRequestOptions, e as WebResponse, N as getTableName, O as isPermissionDeniedError, Q as isPermissionError, R as isPermissionPromptError } from './types-neLTvZJ_.mjs';
 export { H as HaextensionConfig } from './config-D_HXjsEV.mjs';
 import 'drizzle-orm/sqlite-proxy';
 
@@ -217,53 +217,6 @@ interface RegisterKeypairRequest {
     privateKeySalt: string;
 }
 
-type SpaceRole = 'admin' | 'member' | 'viewer';
-interface SharedSpace {
-    id: string;
-    ownerId: string;
-    encryptedName: string;
-    nameNonce: string;
-    currentKeyGeneration: number;
-    role: SpaceRole;
-    canInvite: boolean;
-    createdAt: string;
-}
-interface SpaceMemberInfo {
-    publicKey: string;
-    label: string;
-    role: SpaceRole;
-    canInvite: boolean;
-    invitedBy: string | null;
-    joinedAt: string;
-}
-interface SpaceKeyGrantInfo {
-    spaceId: string;
-    generation: number;
-    encryptedSpaceKey: string;
-    keyNonce: string;
-    ephemeralPublicKey: string;
-}
-interface SpaceInvite {
-    spaceId: string;
-    serverUrl: string;
-    spaceName: string;
-    accessToken: string;
-    encryptedSpaceKey: string;
-    keyNonce: string;
-    ephemeralPublicKey: string;
-    generation: number;
-    role: SpaceRole;
-}
-interface SpaceAccessTokenInfo {
-    id: string;
-    publicKey: string;
-    role: SpaceRole;
-    label: string | null;
-    revoked: boolean;
-    createdAt: string;
-    lastUsedAt: string | null;
-}
-
 /**
  * Central message type definitions for HaexSpace SDK
  *
@@ -568,6 +521,12 @@ declare const SPACE_COMMANDS: {
     readonly unassign: "extension_space_unassign";
     /** Get space assignments for a table */
     readonly getAssignments: "extension_space_get_assignments";
+    /** List all spaces the user is a member of (with decrypted names) */
+    readonly list: "extension_space_list";
+    /** Create a new shared space */
+    readonly create: "extension_space_create";
+    /** List available sync backends */
+    readonly listBackends: "extension_space_list_backends";
 };
 
 /**
@@ -692,6 +651,9 @@ declare const TAURI_COMMANDS: {
         readonly assign: "extension_space_assign";
         readonly unassign: "extension_space_unassign";
         readonly getAssignments: "extension_space_get_assignments";
+        readonly list: "extension_space_list";
+        readonly create: "extension_space_create";
+        readonly listBackends: "extension_space_list_backends";
     };
 };
 type TauriCommand = (typeof DATABASE_COMMANDS)[keyof typeof DATABASE_COMMANDS] | (typeof PERMISSIONS_COMMANDS)[keyof typeof PERMISSIONS_COMMANDS] | (typeof WEB_COMMANDS)[keyof typeof WEB_COMMANDS] | (typeof WEB_STORAGE_COMMANDS)[keyof typeof WEB_STORAGE_COMMANDS] | (typeof FILESYSTEM_COMMANDS)[keyof typeof FILESYSTEM_COMMANDS] | (typeof EXTERNAL_BRIDGE_COMMANDS)[keyof typeof EXTERNAL_BRIDGE_COMMANDS] | (typeof EXTENSION_COMMANDS)[keyof typeof EXTENSION_COMMANDS] | (typeof REMOTE_STORAGE_COMMANDS)[keyof typeof REMOTE_STORAGE_COMMANDS] | (typeof LOCALSEND_COMMANDS)[keyof typeof LOCALSEND_COMMANDS] | (typeof SPACE_COMMANDS)[keyof typeof SPACE_COMMANDS];
@@ -859,6 +821,18 @@ interface EncryptedSpaceKey {
 declare function generateSpaceKey(): Uint8Array<ArrayBuffer>;
 declare function encryptSpaceKeyForRecipientAsync(spaceKey: Uint8Array<ArrayBuffer>, recipientPublicKeyBase64: string): Promise<EncryptedSpaceKey>;
 declare function decryptSpaceKeyAsync(encrypted: EncryptedSpaceKey, ownPrivateKeyBase64: string): Promise<Uint8Array>;
+/**
+ * Encrypt a space name using the raw space key.
+ * Returns the encrypted name and nonce as base64 strings.
+ */
+declare function encryptSpaceNameAsync(spaceKey: Uint8Array, spaceName: string): Promise<{
+    encryptedName: string;
+    nameNonce: string;
+}>;
+/**
+ * Decrypt a space name using the raw space key.
+ */
+declare function decryptSpaceNameAsync(spaceKey: Uint8Array, encryptedName: string, nameNonce: string): Promise<string>;
 
 interface SignableRecord {
     tableName: string;
@@ -963,4 +937,4 @@ declare function exportKeyPairAsync(keyPair: PasskeyKeyPair): Promise<ExportedPa
 
 declare function createHaexVaultSdk(config?: HaexHubConfig): HaexVaultSdk;
 
-export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type EncryptedSpaceKey, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, type PasskeyKeyPair, type RegisterKeypairRequest, SIGNING_ALGO, type SharedSpace, type SignableRecord, type SpaceAccessTokenInfo, type SpaceInvite, type SpaceKeyGrantInfo, type SpaceMemberInfo, type SpaceRole, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceKeyAsync, decryptString, decryptVaultKey, decryptVaultName, deriveKeyFromPassword, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceKeyForRecipientAsync, encryptString, encryptVaultKey, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };
+export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type EncryptedSpaceKey, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, type PasskeyKeyPair, type RegisterKeypairRequest, SIGNING_ALGO, type SignableRecord, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceKeyAsync, decryptSpaceNameAsync, decryptString, decryptVaultKey, decryptVaultName, deriveKeyFromPassword, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceKeyForRecipientAsync, encryptSpaceNameAsync, encryptString, encryptVaultKey, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { H as HaexVaultSdk } from './client-BVMJXZiK.js';
-export { A as AuthorizedClient, B as BlockedClient, D as DatabaseAPI, a as Device, b as DeviceInfo, c as DeviceType, d as DirEntry, E as ExternalAuthDecision, e as ExternalConnection, f as ExternalConnectionErrorCode, g as ExternalConnectionState, h as ExternalRequest, i as ExternalRequestEvent, j as ExternalRequestHandler, k as ExternalRequestPayload, l as ExternalResponse, F as FileStat, m as FilesystemAPI, L as LOCALSEND_EVENTS, n as LocalSendAPI, o as LocalSendEvent, p as LocalSendFileInfo, q as LocalSendSettings, P as PendingAuthorization, r as PendingTransfer, s as PermissionsAPI, t as RemoteAddBackendRequest, u as RemoteS3Config, v as RemoteS3PublicConfig, R as RemoteStorageAPI, w as RemoteStorageBackendInfo, x as RemoteStorageObjectInfo, U as RemoteUpdateBackendRequest, y as RequestedExtension, z as SelectFileOptions, C as SelectFolderOptions, G as ServerInfo, I as ServerStatus, J as SessionAuthorization, K as SpaceAssignment, M as SpacesAPI, T as TransferDirection, N as TransferProgress, O as TransferState, W as WebAPI, Q as canExternalClientSendRequests, V as isExternalClientConnected } from './client-BVMJXZiK.js';
-import { E as ExtensionManifest, H as HaexHubConfig } from './types-gfc9eCL4.js';
-export { A as ApplicationContext, C as ContextChangedEvent, h as DEFAULT_TIMEOUT, i as DatabaseColumnInfo, j as DatabaseExecuteParams, k as DatabasePermission, f as DatabasePermissionRequest, l as DatabaseQueryParams, D as DatabaseQueryResult, m as DatabaseTableInfo, c as EXTERNAL_EVENTS, n as ErrorCode, g as EventCallback, a as ExtensionInfo, o as ExtensionRuntimeMode, p as ExternalEvent, F as FileChangeEvent, q as FileChangePayload, r as FileChangeType, s as FilteredSyncTablesResult, t as HAEXTENSION_EVENTS, b as HaexHubEvent, u as HaexHubRequest, v as HaexHubResponse, w as HaexVaultSdkError, x as HaextensionEvent, y as PermissionDeniedError, z as PermissionErrorBase, B as PermissionErrorCode, G as PermissionPromptError, P as PermissionResponse, I as PermissionStatus, J as SearchQuery, K as SearchRequestEvent, S as SearchResult, L as SyncTablesUpdatedEvent, T as TABLE_SEPARATOR, W as WebRequestOptions, e as WebResponse, N as getTableName, O as isPermissionDeniedError, Q as isPermissionError, R as isPermissionPromptError } from './types-gfc9eCL4.js';
+import { H as HaexVaultSdk } from './client-CA59HZfa.js';
+export { A as AuthorizedClient, B as BlockedClient, D as DatabaseAPI, a as DecryptedSpace, b as Device, c as DeviceInfo, d as DeviceType, e as DirEntry, E as ExternalAuthDecision, f as ExternalConnection, g as ExternalConnectionErrorCode, h as ExternalConnectionState, i as ExternalRequest, j as ExternalRequestEvent, k as ExternalRequestHandler, l as ExternalRequestPayload, m as ExternalResponse, F as FileStat, n as FilesystemAPI, L as LOCALSEND_EVENTS, o as LocalSendAPI, p as LocalSendEvent, q as LocalSendFileInfo, r as LocalSendSettings, P as PendingAuthorization, s as PendingTransfer, t as PermissionsAPI, u as RemoteAddBackendRequest, v as RemoteS3Config, w as RemoteS3PublicConfig, R as RemoteStorageAPI, x as RemoteStorageBackendInfo, y as RemoteStorageObjectInfo, U as RemoteUpdateBackendRequest, z as RequestedExtension, C as SelectFileOptions, G as SelectFolderOptions, I as ServerInfo, J as ServerStatus, K as SessionAuthorization, M as SharedSpace, N as SpaceAccessTokenInfo, O as SpaceAssignment, Q as SpaceInvite, T as SpaceKeyGrantInfo, V as SpaceMemberInfo, W as SpaceRole, X as SpacesAPI, Y as SyncBackendInfo, Z as TransferDirection, _ as TransferProgress, $ as TransferState, a0 as WebAPI, a1 as canExternalClientSendRequests, a2 as isExternalClientConnected } from './client-CA59HZfa.js';
+import { E as ExtensionManifest, H as HaexHubConfig } from './types-neLTvZJ_.js';
+export { A as ApplicationContext, C as ContextChangedEvent, h as DEFAULT_TIMEOUT, i as DatabaseColumnInfo, j as DatabaseExecuteParams, k as DatabasePermission, f as DatabasePermissionRequest, l as DatabaseQueryParams, D as DatabaseQueryResult, m as DatabaseTableInfo, c as EXTERNAL_EVENTS, n as ErrorCode, g as EventCallback, a as ExtensionInfo, o as ExtensionRuntimeMode, p as ExternalEvent, F as FileChangeEvent, q as FileChangePayload, r as FileChangeType, s as FilteredSyncTablesResult, t as HAEXTENSION_EVENTS, b as HaexHubEvent, u as HaexHubRequest, v as HaexHubResponse, w as HaexVaultSdkError, x as HaextensionEvent, y as PermissionDeniedError, z as PermissionErrorBase, B as PermissionErrorCode, G as PermissionPromptError, P as PermissionResponse, I as PermissionStatus, J as SearchQuery, K as SearchRequestEvent, S as SearchResult, L as SyncTablesUpdatedEvent, T as TABLE_SEPARATOR, W as WebRequestOptions, e as WebResponse, N as getTableName, O as isPermissionDeniedError, Q as isPermissionError, R as isPermissionPromptError } from './types-neLTvZJ_.js';
 export { H as HaextensionConfig } from './config-D_HXjsEV.js';
 import 'drizzle-orm/sqlite-proxy';
 
@@ -217,53 +217,6 @@ interface RegisterKeypairRequest {
     privateKeySalt: string;
 }
 
-type SpaceRole = 'admin' | 'member' | 'viewer';
-interface SharedSpace {
-    id: string;
-    ownerId: string;
-    encryptedName: string;
-    nameNonce: string;
-    currentKeyGeneration: number;
-    role: SpaceRole;
-    canInvite: boolean;
-    createdAt: string;
-}
-interface SpaceMemberInfo {
-    publicKey: string;
-    label: string;
-    role: SpaceRole;
-    canInvite: boolean;
-    invitedBy: string | null;
-    joinedAt: string;
-}
-interface SpaceKeyGrantInfo {
-    spaceId: string;
-    generation: number;
-    encryptedSpaceKey: string;
-    keyNonce: string;
-    ephemeralPublicKey: string;
-}
-interface SpaceInvite {
-    spaceId: string;
-    serverUrl: string;
-    spaceName: string;
-    accessToken: string;
-    encryptedSpaceKey: string;
-    keyNonce: string;
-    ephemeralPublicKey: string;
-    generation: number;
-    role: SpaceRole;
-}
-interface SpaceAccessTokenInfo {
-    id: string;
-    publicKey: string;
-    role: SpaceRole;
-    label: string | null;
-    revoked: boolean;
-    createdAt: string;
-    lastUsedAt: string | null;
-}
-
 /**
  * Central message type definitions for HaexSpace SDK
  *
@@ -568,6 +521,12 @@ declare const SPACE_COMMANDS: {
     readonly unassign: "extension_space_unassign";
     /** Get space assignments for a table */
     readonly getAssignments: "extension_space_get_assignments";
+    /** List all spaces the user is a member of (with decrypted names) */
+    readonly list: "extension_space_list";
+    /** Create a new shared space */
+    readonly create: "extension_space_create";
+    /** List available sync backends */
+    readonly listBackends: "extension_space_list_backends";
 };
 
 /**
@@ -692,6 +651,9 @@ declare const TAURI_COMMANDS: {
         readonly assign: "extension_space_assign";
         readonly unassign: "extension_space_unassign";
         readonly getAssignments: "extension_space_get_assignments";
+        readonly list: "extension_space_list";
+        readonly create: "extension_space_create";
+        readonly listBackends: "extension_space_list_backends";
     };
 };
 type TauriCommand = (typeof DATABASE_COMMANDS)[keyof typeof DATABASE_COMMANDS] | (typeof PERMISSIONS_COMMANDS)[keyof typeof PERMISSIONS_COMMANDS] | (typeof WEB_COMMANDS)[keyof typeof WEB_COMMANDS] | (typeof WEB_STORAGE_COMMANDS)[keyof typeof WEB_STORAGE_COMMANDS] | (typeof FILESYSTEM_COMMANDS)[keyof typeof FILESYSTEM_COMMANDS] | (typeof EXTERNAL_BRIDGE_COMMANDS)[keyof typeof EXTERNAL_BRIDGE_COMMANDS] | (typeof EXTENSION_COMMANDS)[keyof typeof EXTENSION_COMMANDS] | (typeof REMOTE_STORAGE_COMMANDS)[keyof typeof REMOTE_STORAGE_COMMANDS] | (typeof LOCALSEND_COMMANDS)[keyof typeof LOCALSEND_COMMANDS] | (typeof SPACE_COMMANDS)[keyof typeof SPACE_COMMANDS];
@@ -859,6 +821,18 @@ interface EncryptedSpaceKey {
 declare function generateSpaceKey(): Uint8Array<ArrayBuffer>;
 declare function encryptSpaceKeyForRecipientAsync(spaceKey: Uint8Array<ArrayBuffer>, recipientPublicKeyBase64: string): Promise<EncryptedSpaceKey>;
 declare function decryptSpaceKeyAsync(encrypted: EncryptedSpaceKey, ownPrivateKeyBase64: string): Promise<Uint8Array>;
+/**
+ * Encrypt a space name using the raw space key.
+ * Returns the encrypted name and nonce as base64 strings.
+ */
+declare function encryptSpaceNameAsync(spaceKey: Uint8Array, spaceName: string): Promise<{
+    encryptedName: string;
+    nameNonce: string;
+}>;
+/**
+ * Decrypt a space name using the raw space key.
+ */
+declare function decryptSpaceNameAsync(spaceKey: Uint8Array, encryptedName: string, nameNonce: string): Promise<string>;
 
 interface SignableRecord {
     tableName: string;
@@ -963,4 +937,4 @@ declare function exportKeyPairAsync(keyPair: PasskeyKeyPair): Promise<ExportedPa
 
 declare function createHaexVaultSdk(config?: HaexHubConfig): HaexVaultSdk;
 
-export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type EncryptedSpaceKey, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, type PasskeyKeyPair, type RegisterKeypairRequest, SIGNING_ALGO, type SharedSpace, type SignableRecord, type SpaceAccessTokenInfo, type SpaceInvite, type SpaceKeyGrantInfo, type SpaceMemberInfo, type SpaceRole, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceKeyAsync, decryptString, decryptVaultKey, decryptVaultName, deriveKeyFromPassword, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceKeyForRecipientAsync, encryptString, encryptVaultKey, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };
+export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type EncryptedSpaceKey, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, type PasskeyKeyPair, type RegisterKeypairRequest, SIGNING_ALGO, type SignableRecord, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceKeyAsync, decryptSpaceNameAsync, decryptString, decryptVaultKey, decryptVaultName, deriveKeyFromPassword, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceKeyForRecipientAsync, encryptSpaceNameAsync, encryptString, encryptVaultKey, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };

package/dist/index.js

@@ -683,7 +683,13 @@ var SPACE_COMMANDS = {
   /** Bulk unassign rows from spaces */
   unassign: "extension_space_unassign",
   /** Get space assignments for a table */
-  getAssignments: "extension_space_get_assignments"
+  getAssignments: "extension_space_get_assignments",
+  /** List all spaces the user is a member of (with decrypted names) */
+  list: "extension_space_list",
+  /** Create a new shared space */
+  create: "extension_space_create",
+  /** List available sync backends */
+  listBackends: "extension_space_list_backends"
 };
 
 // src/commands/index.ts
@@ -1760,19 +1766,48 @@ var SpacesAPI = class {
   async unassignRowAsync(tableName, rowPks, spaceId) {
     return this.unassignAsync([{ tableName, rowPks, spaceId }]);
   }
+  // ==========================================================================
+  // Space Management
+  // ==========================================================================
+  /**
+   * List all shared spaces the user is a member of.
+   * Returns spaces with decrypted names (decryption happens vault-side).
+   */
+  async listSpacesAsync() {
+    return this.client.request(SPACE_COMMANDS.list);
+  }
+  /**
+   * Create a new shared space.
+   * @param name - Human-readable space name
+   * @param serverUrl - The sync server URL to create the space on
+   * @returns The created space with decrypted name
+   */
+  async createSpaceAsync(name, serverUrl) {
+    return this.client.request(SPACE_COMMANDS.create, {
+      name,
+      server_url: serverUrl
+    });
+  }
+  /**
+   * List available sync backends that can host shared spaces.
+   * @returns Array of backend info with server URLs
+   */
+  async listSyncBackendsAsync() {
+    return this.client.request(SPACE_COMMANDS.listBackends);
+  }
 };
-function toSnakeCase(a) {
+function toSnakeCase(assignment) {
   return {
-    table_name: a.tableName,
-    row_pks: a.rowPks,
-    space_id: a.spaceId
+    table_name: assignment.tableName,
+    row_pks: assignment.rowPks,
+    space_id: assignment.spaceId
   };
 }
-function fromSnakeCase(a) {
+function fromSnakeCase(assignment) {
   return {
-    tableName: a.table_name,
-    rowPks: a.row_pks,
-    spaceId: a.space_id
+    tableName: assignment.table_name,
+    rowPks: assignment.row_pks,
+    spaceId: assignment.space_id
   };
 }
 
@@ -2950,6 +2985,27 @@ async function decryptSpaceKeyAsync(encrypted, ownPrivateKeyBase64) {
   );
   return new Uint8Array(decrypted);
 }
+async function encryptSpaceNameAsync(spaceKey, spaceName) {
+  const cryptoKey = await crypto.subtle.importKey(
+    "raw",
+    new Uint8Array(spaceKey).buffer,
+    { name: "AES-GCM" },
+    false,
+    ["encrypt"]
+  );
+  const { encryptedData, nonce } = await encryptString(spaceName, cryptoKey);
+  return { encryptedName: encryptedData, nameNonce: nonce };
+}
+async function decryptSpaceNameAsync(spaceKey, encryptedName, nameNonce) {
+  const cryptoKey = await crypto.subtle.importKey(
+    "raw",
+    new Uint8Array(spaceKey).buffer,
+    { name: "AES-GCM" },
+    false,
+    ["decrypt"]
+  );
+  return decryptString(encryptedName, nameNonce, cryptoKey);
+}
 
 // src/crypto/recordSigning.ts
 function canonicalize(record) {
@@ -3214,6 +3270,7 @@ exports.createHaexVaultSdk = createHaexVaultSdk;
 exports.decryptCrdtData = decryptCrdtData;
 exports.decryptPrivateKeyAsync = decryptPrivateKeyAsync;
 exports.decryptSpaceKeyAsync = decryptSpaceKeyAsync;
+exports.decryptSpaceNameAsync = decryptSpaceNameAsync;
 exports.decryptString = decryptString;
 exports.decryptVaultKey = decryptVaultKey;
 exports.decryptVaultName = decryptVaultName;
@@ -3221,6 +3278,7 @@ exports.deriveKeyFromPassword = deriveKeyFromPassword;
 exports.encryptCrdtData = encryptCrdtData;
 exports.encryptPrivateKeyAsync = encryptPrivateKeyAsync;
 exports.encryptSpaceKeyForRecipientAsync = encryptSpaceKeyForRecipientAsync;
+exports.encryptSpaceNameAsync = encryptSpaceNameAsync;
 exports.encryptString = encryptString;
 exports.encryptVaultKey = encryptVaultKey;
 exports.exportKeyPairAsync = exportKeyPairAsync;