@haex-space/vault-sdk 3.1.0 → 3.2.2

package/dist/runtime/nuxt.plugin.client.d.mts

@@ -1,7 +1,7 @@
 import * as nuxt_app from 'nuxt/app';
 import { ShallowRef } from 'vue';
-import { H as HaexVaultSdk } from '../client-C0DPNG62.mjs';
-import { A as ApplicationContext } from '../types-DmCSegdY.mjs';
+import { H as HaexVaultSdk } from '../client-GeColu97.mjs';
+import { A as ApplicationContext } from '../types-CDMBvvjl.mjs';
 import 'drizzle-orm/sqlite-proxy';
 
 declare const _default: nuxt_app.Plugin<{

package/dist/runtime/nuxt.plugin.client.d.ts

@@ -1,7 +1,7 @@
 import * as nuxt_app from 'nuxt/app';
 import { ShallowRef } from 'vue';
-import { H as HaexVaultSdk } from '../client-B_B6rLIw.js';
-import { A as ApplicationContext } from '../types-DmCSegdY.js';
+import { H as HaexVaultSdk } from '../client-z1jTcuQE.js';
+import { A as ApplicationContext } from '../types-CDMBvvjl.js';
 import 'drizzle-orm/sqlite-proxy';
 
 declare const _default: nuxt_app.Plugin<{

package/dist/runtime/nuxt.plugin.client.js

@@ -267,6 +267,40 @@ var SHELL_COMMANDS = {
   close: "extension_shell_close"
 };
 
+// src/commands/passwords.ts
+var PASSWORD_COMMANDS = {
+  /** List items (no secrets) within the extension's tag scope */
+  list: "extension_password_list",
+  /** Read full item including secrets, by id */
+  read: "extension_password_read",
+  /** Create item — must include >=1 tag in scope */
+  create: "extension_password_create",
+  /** Update item — keeps >=1 tag in scope */
+  update: "extension_password_update",
+  /** Delete item — must be in scope */
+  delete: "extension_password_delete"
+};
+
+// src/commands/mail.ts
+var MAIL_COMMANDS = {
+  /** LIST mailboxes + optional STATUS counts */
+  listMailboxes: "extension_mail_list_mailboxes",
+  /** Lightweight envelope fetch for list views */
+  fetchEnvelopes: "extension_mail_fetch_envelopes",
+  /** Full message fetch (envelope + body + attachment metadata) */
+  fetchMessage: "extension_mail_fetch_message",
+  /** Set or unset IMAP flags on a UID set */
+  setFlags: "extension_mail_set_flags",
+  /** MOVE messages between mailboxes (COPY+EXPUNGE fallback) */
+  moveMessages: "extension_mail_move_messages",
+  /** APPEND a base64-encoded RFC822 message into a mailbox */
+  appendMessage: "extension_mail_append_message",
+  /** SMTP send. Returns the assigned Message-ID. */
+  sendMessage: "extension_mail_send_message",
+  /** Build RFC822 bytes without sending (for Drafts via APPEND) */
+  buildRfc822: "extension_mail_build_rfc822"
+};
+
 // src/api/storage.ts
 var StorageAPI = class {
   constructor(client) {
@@ -290,6 +324,12 @@ var StorageAPI = class {
 };
 
 // src/api/database.ts
+function quoteIdent(identifier) {
+  if (identifier.startsWith('"') && identifier.endsWith('"')) {
+    return identifier;
+  }
+  return `"${identifier.replace(/"/g, '""')}"`;
+}
 var DatabaseAPI = class {
   constructor(client) {
     this.client = client;
@@ -320,11 +360,11 @@ var DatabaseAPI = class {
     });
   }
   async createTable(tableName, columns) {
-    const query = `CREATE TABLE IF NOT EXISTS ${tableName} (${columns})`;
+    const query = `CREATE TABLE IF NOT EXISTS ${quoteIdent(tableName)} (${columns})`;
     await this.execute(query);
   }
   async dropTable(tableName) {
-    const query = `DROP TABLE IF EXISTS ${tableName}`;
+    const query = `DROP TABLE IF EXISTS ${quoteIdent(tableName)}`;
     await this.execute(query);
   }
   /**
@@ -353,18 +393,17 @@ var DatabaseAPI = class {
   async insert(tableName, data) {
     const keys = Object.keys(data);
     const values = Object.values(data);
+    const quotedCols = keys.map(quoteIdent).join(", ");
     const placeholders = keys.map(() => "?").join(", ");
-    const query = `INSERT INTO ${tableName} (${keys.join(
-      ", "
-    )}) VALUES (${placeholders})`;
+    const query = `INSERT INTO ${quoteIdent(tableName)} (${quotedCols}) VALUES (${placeholders})`;
     const result = await this.execute(query, values);
     return result.lastInsertId ?? -1;
   }
   async update(tableName, data, where, whereParams) {
     const keys = Object.keys(data);
     const values = Object.values(data);
-    const setClause = keys.map((key) => `${key} = ?`).join(", ");
-    const query = `UPDATE ${tableName} SET ${setClause} WHERE ${where}`;
+    const setClause = keys.map((key) => `${quoteIdent(key)} = ?`).join(", ");
+    const query = `UPDATE ${quoteIdent(tableName)} SET ${setClause} WHERE ${where}`;
     const result = await this.execute(query, [
       ...values,
       ...whereParams || []
@@ -372,12 +411,12 @@ var DatabaseAPI = class {
     return result.rowsAffected;
   }
   async delete(tableName, where, whereParams) {
-    const query = `DELETE FROM ${tableName} WHERE ${where}`;
+    const query = `DELETE FROM ${quoteIdent(tableName)} WHERE ${where}`;
     const result = await this.execute(query, whereParams);
     return result.rowsAffected;
   }
   async count(tableName, where, whereParams) {
-    const query = where ? `SELECT COUNT(*) as count FROM ${tableName} WHERE ${where}` : `SELECT COUNT(*) as count FROM ${tableName}`;
+    const query = where ? `SELECT COUNT(*) as count FROM ${quoteIdent(tableName)} WHERE ${where}` : `SELECT COUNT(*) as count FROM ${quoteIdent(tableName)}`;
     const result = await this.queryOne(query, whereParams);
     return result?.count ?? 0;
   }
@@ -1224,6 +1263,140 @@ var ShellAPI = class {
   }
 };
 
+// src/api/passwords.ts
+var PasswordsAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  /** List items in scope — summaries only, no secrets. */
+  async listAsync() {
+    return this.client.request(
+      PASSWORD_COMMANDS.list,
+      {}
+    );
+  }
+  /** Read a single item by id with full secrets. */
+  async readAsync(itemId) {
+    return this.client.request(PASSWORD_COMMANDS.read, {
+      itemId
+    });
+  }
+  /**
+   * Create a new password item. `input.tags` must contain at least one
+   * tag within the extension's permission scope, otherwise the write
+   * is rejected as a security violation.
+   *
+   * Returns the new item id.
+   */
+  async createAsync(input) {
+    return this.client.request(PASSWORD_COMMANDS.create, { input });
+  }
+  /**
+   * Update an existing item. The item must already be in scope, and
+   * the new tag set must keep at least one tag in scope (extensions
+   * cannot orphan an item out of their own reach).
+   */
+  async updateAsync(itemId, input) {
+    return this.client.request(PASSWORD_COMMANDS.update, {
+      itemId,
+      input
+    });
+  }
+  /** Delete an item by id. Item must be in scope. */
+  async deleteAsync(itemId) {
+    return this.client.request(PASSWORD_COMMANDS.delete, { itemId });
+  }
+};
+
+// src/api/mail.ts
+var MailAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  /**
+   * LIST mailboxes for an IMAP account. Pass `includeStatus=true` for
+   * EXISTS/UNSEEN/UIDVALIDITY/UIDNEXT per box (one extra round-trip
+   * per mailbox — fine for typical accounts, expensive for large
+   * trees).
+   */
+  async listMailboxesAsync(imap, options = {}) {
+    return this.client.request(MAIL_COMMANDS.listMailboxes, {
+      imap,
+      reference: options.reference,
+      pattern: options.pattern,
+      includeStatus: options.includeStatus
+    });
+  }
+  /** Fetch lightweight envelopes for a mailbox + range (for list views). */
+  async fetchEnvelopesAsync(imap, mailbox, range) {
+    return this.client.request(
+      MAIL_COMMANDS.fetchEnvelopes,
+      { imap, mailbox, range }
+    );
+  }
+  /** Fetch a full message (envelope + body + attachment metadata) by UID. */
+  async fetchMessageAsync(imap, mailbox, uid) {
+    return this.client.request(MAIL_COMMANDS.fetchMessage, {
+      imap,
+      mailbox,
+      uid
+    });
+  }
+  /**
+   * Set or unset IMAP flags. Use `flags=["\\Seen"]` + `add=true` to
+   * mark messages as read; `add=false` removes the flag(s).
+   */
+  async setFlagsAsync(imap, mailbox, uids, flags, add) {
+    return this.client.request(MAIL_COMMANDS.setFlags, {
+      imap,
+      mailbox,
+      uids,
+      flags,
+      add
+    });
+  }
+  /** Move messages between mailboxes. Falls back to COPY+EXPUNGE on servers without MOVE. */
+  async moveMessagesAsync(imap, sourceMailbox, destinationMailbox, uids) {
+    return this.client.request(MAIL_COMMANDS.moveMessages, {
+      imap,
+      sourceMailbox,
+      destinationMailbox,
+      uids
+    });
+  }
+  /**
+   * APPEND a base64-encoded RFC822 message into a mailbox. Combine
+   * with `buildRfc822Async` to save drafts, or with the bytes returned
+   * after `sendMessageAsync` to mirror the sent copy into "Sent".
+   */
+  async appendMessageAsync(imap, mailbox, rfc822Base64, flags) {
+    return this.client.request(MAIL_COMMANDS.appendMessage, {
+      imap,
+      mailbox,
+      rfc822Base64,
+      flags
+    });
+  }
+  /** Send a message via SMTP. Returns the assigned Message-ID (no angle brackets). */
+  async sendMessageAsync(smtp, message) {
+    return this.client.request(MAIL_COMMANDS.sendMessage, {
+      smtp,
+      message
+    });
+  }
+  /**
+   * Build RFC822 bytes for a message without sending — useful for
+   * drafts that get APPENDed to a "Drafts" folder. Permission-wise
+   * this is a fetch operation (no SMTP host involved).
+   */
+  async buildRfc822Async(imapHost, message) {
+    return this.client.request(MAIL_COMMANDS.buildRfc822, {
+      imapHost,
+      message
+    });
+  }
+};
+
 // src/messages.ts
 var HAEXSPACE_MESSAGE_TYPES = {
   /** Debug message for development/troubleshooting */
@@ -1402,6 +1575,10 @@ function parseTableName(fullTableName) {
 
 // src/client/init.ts
 var PORT_HANDSHAKE_TIMEOUT_MS = 1e4;
+function getCurrentWebviewLabel() {
+  const internals = window.__TAURI_INTERNALS__;
+  return internals?.metadata?.currentWebview?.label;
+}
 function isInIframe() {
   return window.self !== window.top;
 }
@@ -1430,6 +1607,13 @@ async function initNativeMode(ctx, log, onEvent, onContextChange) {
 }
 async function setupTauriEventListeners(ctx, log, onEvent, onContextChange) {
   const { listen } = getTauriEvent();
+  const webviewLabel = getCurrentWebviewLabel();
+  const listenOptions = webviewLabel ? { target: webviewLabel } : void 0;
+  if (!webviewLabel) {
+    log(
+      "WARNING: could not read __TAURI_INTERNALS__.metadata.currentWebview.label \u2014 registering listeners without a target. Label-scoped emits from the host will not be delivered until the metadata is available."
+    );
+  }
   log("Setting up Tauri event listener for:", HAEXTENSION_EVENTS.CONTEXT_CHANGED);
   try {
     await listen(HAEXTENSION_EVENTS.CONTEXT_CHANGED, (event) => {
@@ -1447,7 +1631,7 @@ async function setupTauriEventListeners(ctx, log, onEvent, onContextChange) {
       } else {
         log("Event received but no context in payload:", event);
       }
-    });
+    }, listenOptions);
     log("Context change listener registered successfully");
   } catch (error) {
     log("Failed to setup context change listener:", error);
@@ -1465,7 +1649,7 @@ async function setupTauriEventListeners(ctx, log, onEvent, onContextChange) {
       } else {
         log("External request event has no payload!");
       }
-    });
+    }, listenOptions);
     log("External request listener registered successfully");
   } catch (error) {
     log("Failed to setup external request listener:", error);
@@ -1483,7 +1667,7 @@ async function setupTauriEventListeners(ctx, log, onEvent, onContextChange) {
       } else {
         log("AI action request event has no payload!");
       }
-    });
+    }, listenOptions);
     log("AI action request listener registered successfully");
   } catch (error) {
     log("Failed to setup AI action request listener:", error);
@@ -1502,7 +1686,7 @@ async function setupTauriEventListeners(ctx, log, onEvent, onContextChange) {
           timestamp: Date.now()
         });
       }
-    });
+    }, listenOptions);
     log("File change listener registered successfully");
   } catch (error) {
     log("Failed to setup file change listener:", error);
@@ -1519,14 +1703,14 @@ async function setupTauriEventListeners(ctx, log, onEvent, onContextChange) {
           timestamp: Date.now()
         });
       }
-    });
+    }, listenOptions);
     log("Sync tables updated listener registered successfully");
   } catch (error) {
     log("Failed to setup sync tables updated listener:", error);
   }
   log("Setting up LocalSend event listeners");
   try {
-    await setupLocalSendEventListeners(log, onEvent);
+    await setupLocalSendEventListeners(log, onEvent, listenOptions);
     log("LocalSend event listeners setup complete");
   } catch (error) {
     log("Failed to setup LocalSend event listeners:", error);
@@ -1543,7 +1727,7 @@ async function setupTauriEventListeners(ctx, log, onEvent, onContextChange) {
           data: payload.data
         });
       }
-    });
+    }, listenOptions);
     log("Shell output listener registered");
     await listen(SHELL_EVENTS.EXIT, (event) => {
       if (event.payload) {
@@ -1555,13 +1739,13 @@ async function setupTauriEventListeners(ctx, log, onEvent, onContextChange) {
           exitCode: payload.exitCode
         });
       }
-    });
+    }, listenOptions);
     log("Shell exit listener registered");
   } catch (error) {
     log("Failed to setup Shell event listeners:", error);
   }
 }
-async function setupLocalSendEventListeners(log, onEvent) {
+async function setupLocalSendEventListeners(log, onEvent, listenOptions) {
   const { listen } = getTauriEvent();
   try {
     await listen(LOCALSEND_EVENTS.deviceDiscovered, (event) => {
@@ -1573,7 +1757,7 @@ async function setupLocalSendEventListeners(log, onEvent) {
           timestamp: Date.now()
         });
       }
-    });
+    }, listenOptions);
     log("LocalSend device discovered listener registered");
   } catch (error) {
     log("Failed to setup LocalSend device discovered listener:", error);
@@ -1588,7 +1772,7 @@ async function setupLocalSendEventListeners(log, onEvent) {
           timestamp: Date.now()
         });
       }
-    });
+    }, listenOptions);
     log("LocalSend device lost listener registered");
   } catch (error) {
     log("Failed to setup LocalSend device lost listener:", error);
@@ -1603,7 +1787,7 @@ async function setupLocalSendEventListeners(log, onEvent) {
           timestamp: Date.now()
         });
       }
-    });
+    }, listenOptions);
     log("LocalSend transfer request listener registered");
   } catch (error) {
     log("Failed to setup LocalSend transfer request listener:", error);
@@ -1618,7 +1802,7 @@ async function setupLocalSendEventListeners(log, onEvent) {
           timestamp: Date.now()
         });
       }
-    });
+    }, listenOptions);
     log("LocalSend transfer progress listener registered");
   } catch (error) {
     log("Failed to setup LocalSend transfer progress listener:", error);
@@ -1633,7 +1817,7 @@ async function setupLocalSendEventListeners(log, onEvent) {
           timestamp: Date.now()
         });
       }
-    });
+    }, listenOptions);
     log("LocalSend transfer complete listener registered");
   } catch (error) {
     log("Failed to setup LocalSend transfer complete listener:", error);
@@ -1648,13 +1832,13 @@ async function setupLocalSendEventListeners(log, onEvent) {
           timestamp: Date.now()
         });
       }
-    });
+    }, listenOptions);
     log("LocalSend transfer failed listener registered");
   } catch (error) {
     log("Failed to setup LocalSend transfer failed listener:", error);
   }
 }
-async function initIframeMode(ctx, log, messageHandler, request) {
+async function initIframeMode(ctx, log, messageHandler) {
   if (!isInIframe()) {
     throw new HaexVaultSdkError("NOT_IN_IFRAME" /* NOT_IN_IFRAME */, "errors.not_in_iframe");
   }
@@ -1671,15 +1855,12 @@ async function initIframeMode(ctx, log, messageHandler, request) {
       publicKey: ctx.config.manifest.publicKey,
       name: ctx.config.manifest.name,
       version: ctx.config.manifest.version,
-      displayName: ctx.config.manifest.name
+      displayName: ctx.config.manifest.displayName ?? ctx.config.manifest.name
     };
     log("Extension info loaded from manifest:", ctx.state.extensionInfo);
   }
   sendDebugInfo(ctx.config);
-  const context = await request(EXTENSION_COMMANDS.getContext);
-  ctx.state.context = context;
-  log("Application context received:", context);
-  return { context, port };
+  return port;
 }
 function waitForHostPortAsync(log) {
   return new Promise((resolve, reject) => {
@@ -1862,11 +2043,10 @@ function processEvent(event, log, eventListeners, onContextChanged, onExternalRe
   emitEvent(event, log, eventListeners);
 }
 function emitEvent(event, log, eventListeners) {
-  console.log("[HaexVault SDK] emitEvent called with:", event.type, event);
-  console.log("[HaexVault SDK] Registered event types:", Array.from(eventListeners.keys()));
-  log("Event received:", event);
+  log("emitEvent called with:", event.type, event);
+  log("Registered event types:", Array.from(eventListeners.keys()));
   const listeners = eventListeners.get(event.type);
-  console.log("[HaexVault SDK] Listeners for", event.type, ":", listeners?.size ?? 0);
+  log("Listeners for", event.type, ":", listeners?.size ?? 0);
   if (listeners) {
     listeners.forEach((callback) => callback(event));
   }
@@ -1963,9 +2143,9 @@ function registerExternalHandler(action, handler, handlers, log) {
   };
 }
 async function handleExternalRequest(request, handlers, respond, log) {
-  console.log("[SDK Debug] handleExternalRequest called!");
-  console.log("[SDK Debug] Request:", JSON.stringify(request, null, 2));
-  console.log("[SDK Debug] Available handlers:", Array.from(handlers.keys()));
+  log("handleExternalRequest called");
+  log("Request:", request);
+  log("Available handlers:", Array.from(handlers.keys()));
   log(`[ExternalRequest] Received request: ${request.action} from ${request.publicKey.substring(0, 20)}...`);
   const handler = handlers.get(request.action);
   if (!handler) {
@@ -1991,7 +2171,6 @@ async function handleExternalRequest(request, handlers, respond, log) {
   }
 }
 async function respondToExternalRequest(response, request) {
-  console.log("[SDK Debug] respondToExternalRequest called with:", JSON.stringify(response, null, 2));
   await request(EXTERNAL_BRIDGE_COMMANDS.respond, response);
 }
 
@@ -2049,11 +2228,17 @@ var HaexVaultSdk = class {
     this.localsend = new LocalSendAPI(this);
     this.spaces = new SpacesAPI(this);
     this.shell = new ShellAPI(this);
+    this.passwords = new PasswordsAPI(this);
+    this.mail = new MailAPI(this);
     installConsoleForwarding(this.config.debug);
-    this.readyPromise = new Promise((resolve) => {
+    this.readyPromise = new Promise((resolve, reject) => {
       this.resolveReady = resolve;
+      this.rejectReady = reject;
+    });
+    this.init().catch((error) => {
+      this.log("Init failed:", error);
+      this.rejectReady(error);
     });
-    this.init();
   }
   // ==========================================================================
   // Lifecycle
@@ -2081,9 +2266,14 @@ var HaexVaultSdk = class {
     return this.setupPromise;
   }
   destroy() {
-    if (this.messageHandler) {
-      window.removeEventListener("message", this.messageHandler);
+    if (this.messageHandler && this.hostPort) {
+      this.hostPort.removeEventListener("message", this.messageHandler);
     }
+    if (this.hostPort) {
+      this.hostPort.close();
+      this.hostPort = null;
+    }
+    this.messageHandler = null;
     this.pendingRequests.forEach(({ timeout }) => clearTimeout(timeout));
     this.pendingRequests.clear();
     this.eventListeners.clear();
@@ -2273,7 +2463,7 @@ var HaexVaultSdk = class {
       () => this._extensionInfo,
       this.handleEvent.bind(this)
     );
-    const { context, port } = await initIframeMode(
+    const port = await initIframeMode(
       {
         config: this.config,
         state: {
@@ -2302,8 +2492,7 @@ var HaexVaultSdk = class {
         }
       },
       this.log.bind(this),
-      this.messageHandler,
-      this.request.bind(this)
+      this.messageHandler
     );
     this.hostPort = port;
     if (this.config.manifest) {
@@ -2311,10 +2500,12 @@ var HaexVaultSdk = class {
         publicKey: this.config.manifest.publicKey,
         name: this.config.manifest.name,
         version: this.config.manifest.version,
-        displayName: this.config.manifest.name
+        displayName: this.config.manifest.displayName ?? this.config.manifest.name
       };
       this.notifySubscribersInternal();
     }
+    const context = await this.request(EXTENSION_COMMANDS.getContext);
+    this.log("Application context received:", context);
     this._context = context;
     this.isNativeWindow = false;
     this.initialized = true;
@@ -2393,22 +2584,18 @@ var nuxt_plugin_client_default = app.defineNuxtPlugin(async (nuxtApp) => {
     context: client.context
   });
   await client.ready();
-  console.log("[Nuxt Plugin] Client ready, context:", client.context);
   state.value = {
     isReady: true,
     isSetupComplete: false,
     context: client.context
   };
-  console.log("[Nuxt Plugin] Initial state set:", state.value);
   client.subscribe(() => {
-    console.log("[Nuxt Plugin] Client context updated:", client.context);
     const isSetupComplete = client.setupCompleted;
     state.value = {
       ...state.value,
       context: client.context,
       isSetupComplete
     };
-    console.log("[Nuxt Plugin] State updated:", state.value);
   });
   const haexVaultPlugin = {
     client,