@haex-space/vault-sdk 3.2.8 → 3.4.0

package/dist/{client-BBD-YsPv.d.ts → client--_QYySP0.d.ts}

@@ -1,4 +1,4 @@
-import { b as HaexHubEvent, c as EXTERNAL_EVENTS, D as DatabaseQueryResult, M as Migration, d as MigrationResult, W as WebRequestOptions, e as WebResponse, f as EventCallback, H as HaexHubConfig, a as ExtensionInfo, A as ApplicationContext, g as DatabasePermissionRequest, P as PermissionResponse, S as SearchResult } from './types-Cji-mUN0.js';
+import { b as HaexHubEvent, c as EXTERNAL_EVENTS, D as DatabaseQueryResult, M as Migration, d as MigrationResult, W as WebRequestOptions, e as WebResponse, f as EventCallback, H as HaexHubConfig, a as ExtensionInfo, A as ApplicationContext, g as DatabasePermissionRequest, P as PermissionResponse, S as SearchResult } from './types-fHuxbqa4.js';
 import { SqliteRemoteDatabase } from 'drizzle-orm/sqlite-proxy';
 
 /**
@@ -1426,6 +1426,14 @@ declare class MailAPI {
     fetchEnvelopesAsync(imap: ImapConfig, mailbox: string, range: FetchRange): Promise<MessageEnvelope[]>;
     /** Fetch a full message (envelope + body + attachment metadata) by UID. */
     fetchMessageAsync(imap: ImapConfig, mailbox: string, uid: number): Promise<MailMessage>;
+    /**
+     * Fetch a single attachment's raw bytes by its `partIndex` (from the
+     * `attachments` array of a fetched `MailMessage`), returned as a
+     * standard-alphabet base64 string. The base64 form drops straight into
+     * `OutgoingAttachment.data` when forwarding, and decodes to bytes for
+     * viewing or downloading.
+     */
+    fetchAttachmentAsync(imap: ImapConfig, mailbox: string, uid: number, partIndex: number): Promise<string>;
     /**
      * Set or unset IMAP flags. Use `flags=["\\Seen"]` + `add=true` to
      * mark messages as read; `add=false` removes the flag(s).
@@ -1449,6 +1457,85 @@ declare class MailAPI {
     buildRfc822Async(imapHost: string, message: OutgoingMessage): Promise<string>;
 }
 
+/**
+ * A deep link into the calling extension. `path` is an extension-internal
+ * route (e.g. "/event/abc-123" or "/inbox/msg/xyz").
+ *
+ * The notification carrying this link is pinned to the calling extension's
+ * public key by the host. Clicks can only route to webviews with that same
+ * public key — there is intentionally no `extensionId` field, so notifications
+ * can never deep-link into a *different* extension.
+ */
+type DeepLink = {
+    path: string;
+};
+/** An action button on a notification. */
+type NotificationAction = {
+    /** Stable id, returned in the click event. */
+    id: string;
+    /** Button text (the caller localises it). */
+    label: string;
+    /** Where a click on this button routes. */
+    deepLink: DeepLink;
+};
+type NotificationOptions = {
+    title: string;
+    body?: string;
+    /** Optional icon override; default = the extension's manifest icon. */
+    icon?: string;
+    /** Click on the notification body → navigate here. */
+    primary?: DeepLink;
+    /**
+     * Up to 3 action buttons (platform-dependent; extra buttons and, on some
+     * platforms, all buttons degrade silently — the `primary` link still works).
+     */
+    actions?: NotificationAction[];
+    /** Dedupe key — showing again with the same tag replaces the previous one. */
+    tag?: string;
+};
+/** Payload delivered to {@link NotificationsAPI.onClick} handlers. */
+type NotificationClickEvent = {
+    /** Id of the clicked notification (the value returned by `show`). */
+    notificationId: string;
+    /** Id of the clicked action button, or undefined for a body click. */
+    actionId?: string;
+    /**
+     * Resolved deep-link path for the click (the `primary` path for a body
+     * click, or the action's `deepLink.path`), if one was set.
+     */
+    path?: string;
+};
+/**
+ * Generic OS notifications, bridged through the host vault.
+ *
+ * Permission model: requires the `notifications` permission with action
+ * `show`. The host assigns and pins the extension's public key on every
+ * `show()` — the extension never supplies or sees its key here.
+ *
+ * Platform reality (the notification itself always shows; routing varies):
+ *  - Click → deep-link routing and action buttons depend on the host's OS
+ *    notification backend. Where the backend reports no click, the body and
+ *    buttons simply don't route; the notification is still displayed.
+ */
+declare class NotificationsAPI {
+    private client;
+    constructor(client: HaexVaultSdk);
+    /** Show a notification. Returns its id so it can be dismissed later. */
+    show(opts: NotificationOptions): Promise<{
+        id: string;
+    }>;
+    /** Dismiss a previously shown notification (only own notifications). */
+    dismiss(id: string): Promise<void>;
+    /**
+     * Listen for clicks on this extension's notifications. Useful when the
+     * extension is already open and wants to react in-app (e.g. router.push the
+     * `path`) instead of relying on the host to focus the webview.
+     *
+     * Returns an unsubscribe function.
+     */
+    onClick(handler: (e: NotificationClickEvent) => void): () => void;
+}
+
 /**
  * HaexVault Client
  *
@@ -1494,6 +1581,7 @@ declare class HaexVaultSdk {
     readonly shell: ShellAPI;
     readonly passwords: PasswordsAPI;
     readonly mail: MailAPI;
+    readonly notifications: NotificationsAPI;
     /** Unified action system - register handlers that work for both Bridge and AI requests */
     readonly actions: {
         register: (action: string, handler: ExternalRequestHandler) => (() => void);
@@ -1542,4 +1630,4 @@ declare class HaexVaultSdk {
     private log;
 }
 
-export { type StorageBackendInfo as $, type AuthorizedClient as A, type BlockedClient as B, type ConnectionSecurity as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type OutgoingMessage as G, HaexVaultSdk as H, type ImapConfig as I, type PasswordItemFull as J, KnownPath as K, LOCALSEND_EVENTS as L, MailAPI as M, type PasswordItemSummary as N, type OutgoingAttachment as O, type PasswordInput as P, type PasswordKeyValue as Q, type PasswordKeyValueInput as R, StorageAPI as S, PasswordsAPI as T, type PendingAuthorization as U, type PendingTransfer as V, PermissionsAPI as W, type AddBackendRequest as X, type S3Config as Y, type S3PublicConfig as Z, RemoteStorageAPI as _, type DecryptedSpace as a, type StorageObjectInfo as a0, type UpdateBackendRequest as a1, type RequestedExtension as a2, type SelectFileOptions as a3, type SelectFolderOptions as a4, type ServerInfo as a5, type ServerStatus as a6, type SessionAuthorization as a7, type SharedSpace as a8, ShellAPI as a9, type ShellCreateOptions as aa, type ShellCreateResponse as ab, type ShellExitEvent as ac, type ShellOutputEvent as ad, type SmtpConfig as ae, type SpaceAccessTokenInfo as af, type SpaceAssignment as ag, type SpaceInvite as ah, type SpaceKeyGrantInfo as ai, type SpaceMemberInfo as aj, SpacesAPI as ak, type SyncBackendInfo as al, type TransferDirection as am, type TransferProgress as an, type TransferState as ao, WebAPI as ap, canExternalClientSendRequests as aq, isExternalClientConnected as ar, type Device as b, type DeviceInfo as c, type DeviceType as d, type DirEntry as e, type ExternalConnection as f, ExternalConnectionErrorCode as g, ExternalConnectionState as h, type ExternalRequest as i, type ExternalRequestEvent as j, type ExternalRequestHandler as k, type ExternalRequestPayload as l, type ExternalResponse as m, FilesystemAPI as n, type KnownPaths as o, LocalSendAPI as p, type LocalSendEvent as q, type FileInfo as r, type LocalSendSettings as s, type MailAccount as t, type MailAddress as u, type Attachment as v, type FetchRange as w, type MailMessage as x, type MailboxInfo as y, type MessageEnvelope as z };
+export { PermissionsAPI as $, type AuthorizedClient as A, type BlockedClient as B, type ConnectionSecurity as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type MessageEnvelope as G, HaexVaultSdk as H, type ImapConfig as I, type NotificationClickEvent as J, KnownPath as K, LOCALSEND_EVENTS as L, MailAPI as M, type NotificationAction as N, type NotificationOptions as O, NotificationsAPI as P, type OutgoingAttachment as Q, type OutgoingMessage as R, StorageAPI as S, type PasswordInput as T, type PasswordItemFull as U, type PasswordItemSummary as V, type PasswordKeyValue as W, type PasswordKeyValueInput as X, PasswordsAPI as Y, type PendingAuthorization as Z, type PendingTransfer as _, type DecryptedSpace as a, type AddBackendRequest as a0, type S3Config as a1, type S3PublicConfig as a2, RemoteStorageAPI as a3, type StorageBackendInfo as a4, type StorageObjectInfo as a5, type UpdateBackendRequest as a6, type RequestedExtension as a7, type SelectFileOptions as a8, type SelectFolderOptions as a9, type ServerInfo as aa, type ServerStatus as ab, type SessionAuthorization as ac, type SharedSpace as ad, ShellAPI as ae, type ShellCreateOptions as af, type ShellCreateResponse as ag, type ShellExitEvent as ah, type ShellOutputEvent as ai, type SmtpConfig as aj, type SpaceAccessTokenInfo as ak, type SpaceAssignment as al, type SpaceInvite as am, type SpaceKeyGrantInfo as an, type SpaceMemberInfo as ao, SpacesAPI as ap, type SyncBackendInfo as aq, type TransferDirection as ar, type TransferProgress as as, type TransferState as at, WebAPI as au, canExternalClientSendRequests as av, isExternalClientConnected as aw, type DeepLink as b, type Device as c, type DeviceInfo as d, type DeviceType as e, type DirEntry as f, type ExternalConnection as g, ExternalConnectionErrorCode as h, ExternalConnectionState as i, type ExternalRequest as j, type ExternalRequestEvent as k, type ExternalRequestHandler as l, type ExternalRequestPayload as m, type ExternalResponse as n, FilesystemAPI as o, type KnownPaths as p, LocalSendAPI as q, type LocalSendEvent as r, type FileInfo as s, type LocalSendSettings as t, type MailAccount as u, type MailAddress as v, type Attachment as w, type FetchRange as x, type MailMessage as y, type MailboxInfo as z };

package/dist/{client-DaS2fAf-.d.mts → client-C9FyPkqp.d.mts}

@@ -1,4 +1,4 @@
-import { b as HaexHubEvent, c as EXTERNAL_EVENTS, D as DatabaseQueryResult, M as Migration, d as MigrationResult, W as WebRequestOptions, e as WebResponse, f as EventCallback, H as HaexHubConfig, a as ExtensionInfo, A as ApplicationContext, g as DatabasePermissionRequest, P as PermissionResponse, S as SearchResult } from './types-Cji-mUN0.mjs';
+import { b as HaexHubEvent, c as EXTERNAL_EVENTS, D as DatabaseQueryResult, M as Migration, d as MigrationResult, W as WebRequestOptions, e as WebResponse, f as EventCallback, H as HaexHubConfig, a as ExtensionInfo, A as ApplicationContext, g as DatabasePermissionRequest, P as PermissionResponse, S as SearchResult } from './types-fHuxbqa4.mjs';
 import { SqliteRemoteDatabase } from 'drizzle-orm/sqlite-proxy';
 
 /**
@@ -1426,6 +1426,14 @@ declare class MailAPI {
     fetchEnvelopesAsync(imap: ImapConfig, mailbox: string, range: FetchRange): Promise<MessageEnvelope[]>;
     /** Fetch a full message (envelope + body + attachment metadata) by UID. */
     fetchMessageAsync(imap: ImapConfig, mailbox: string, uid: number): Promise<MailMessage>;
+    /**
+     * Fetch a single attachment's raw bytes by its `partIndex` (from the
+     * `attachments` array of a fetched `MailMessage`), returned as a
+     * standard-alphabet base64 string. The base64 form drops straight into
+     * `OutgoingAttachment.data` when forwarding, and decodes to bytes for
+     * viewing or downloading.
+     */
+    fetchAttachmentAsync(imap: ImapConfig, mailbox: string, uid: number, partIndex: number): Promise<string>;
     /**
      * Set or unset IMAP flags. Use `flags=["\\Seen"]` + `add=true` to
      * mark messages as read; `add=false` removes the flag(s).
@@ -1449,6 +1457,85 @@ declare class MailAPI {
     buildRfc822Async(imapHost: string, message: OutgoingMessage): Promise<string>;
 }
 
+/**
+ * A deep link into the calling extension. `path` is an extension-internal
+ * route (e.g. "/event/abc-123" or "/inbox/msg/xyz").
+ *
+ * The notification carrying this link is pinned to the calling extension's
+ * public key by the host. Clicks can only route to webviews with that same
+ * public key — there is intentionally no `extensionId` field, so notifications
+ * can never deep-link into a *different* extension.
+ */
+type DeepLink = {
+    path: string;
+};
+/** An action button on a notification. */
+type NotificationAction = {
+    /** Stable id, returned in the click event. */
+    id: string;
+    /** Button text (the caller localises it). */
+    label: string;
+    /** Where a click on this button routes. */
+    deepLink: DeepLink;
+};
+type NotificationOptions = {
+    title: string;
+    body?: string;
+    /** Optional icon override; default = the extension's manifest icon. */
+    icon?: string;
+    /** Click on the notification body → navigate here. */
+    primary?: DeepLink;
+    /**
+     * Up to 3 action buttons (platform-dependent; extra buttons and, on some
+     * platforms, all buttons degrade silently — the `primary` link still works).
+     */
+    actions?: NotificationAction[];
+    /** Dedupe key — showing again with the same tag replaces the previous one. */
+    tag?: string;
+};
+/** Payload delivered to {@link NotificationsAPI.onClick} handlers. */
+type NotificationClickEvent = {
+    /** Id of the clicked notification (the value returned by `show`). */
+    notificationId: string;
+    /** Id of the clicked action button, or undefined for a body click. */
+    actionId?: string;
+    /**
+     * Resolved deep-link path for the click (the `primary` path for a body
+     * click, or the action's `deepLink.path`), if one was set.
+     */
+    path?: string;
+};
+/**
+ * Generic OS notifications, bridged through the host vault.
+ *
+ * Permission model: requires the `notifications` permission with action
+ * `show`. The host assigns and pins the extension's public key on every
+ * `show()` — the extension never supplies or sees its key here.
+ *
+ * Platform reality (the notification itself always shows; routing varies):
+ *  - Click → deep-link routing and action buttons depend on the host's OS
+ *    notification backend. Where the backend reports no click, the body and
+ *    buttons simply don't route; the notification is still displayed.
+ */
+declare class NotificationsAPI {
+    private client;
+    constructor(client: HaexVaultSdk);
+    /** Show a notification. Returns its id so it can be dismissed later. */
+    show(opts: NotificationOptions): Promise<{
+        id: string;
+    }>;
+    /** Dismiss a previously shown notification (only own notifications). */
+    dismiss(id: string): Promise<void>;
+    /**
+     * Listen for clicks on this extension's notifications. Useful when the
+     * extension is already open and wants to react in-app (e.g. router.push the
+     * `path`) instead of relying on the host to focus the webview.
+     *
+     * Returns an unsubscribe function.
+     */
+    onClick(handler: (e: NotificationClickEvent) => void): () => void;
+}
+
 /**
  * HaexVault Client
  *
@@ -1494,6 +1581,7 @@ declare class HaexVaultSdk {
     readonly shell: ShellAPI;
     readonly passwords: PasswordsAPI;
     readonly mail: MailAPI;
+    readonly notifications: NotificationsAPI;
     /** Unified action system - register handlers that work for both Bridge and AI requests */
     readonly actions: {
         register: (action: string, handler: ExternalRequestHandler) => (() => void);
@@ -1542,4 +1630,4 @@ declare class HaexVaultSdk {
     private log;
 }
 
-export { type StorageBackendInfo as $, type AuthorizedClient as A, type BlockedClient as B, type ConnectionSecurity as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type OutgoingMessage as G, HaexVaultSdk as H, type ImapConfig as I, type PasswordItemFull as J, KnownPath as K, LOCALSEND_EVENTS as L, MailAPI as M, type PasswordItemSummary as N, type OutgoingAttachment as O, type PasswordInput as P, type PasswordKeyValue as Q, type PasswordKeyValueInput as R, StorageAPI as S, PasswordsAPI as T, type PendingAuthorization as U, type PendingTransfer as V, PermissionsAPI as W, type AddBackendRequest as X, type S3Config as Y, type S3PublicConfig as Z, RemoteStorageAPI as _, type DecryptedSpace as a, type StorageObjectInfo as a0, type UpdateBackendRequest as a1, type RequestedExtension as a2, type SelectFileOptions as a3, type SelectFolderOptions as a4, type ServerInfo as a5, type ServerStatus as a6, type SessionAuthorization as a7, type SharedSpace as a8, ShellAPI as a9, type ShellCreateOptions as aa, type ShellCreateResponse as ab, type ShellExitEvent as ac, type ShellOutputEvent as ad, type SmtpConfig as ae, type SpaceAccessTokenInfo as af, type SpaceAssignment as ag, type SpaceInvite as ah, type SpaceKeyGrantInfo as ai, type SpaceMemberInfo as aj, SpacesAPI as ak, type SyncBackendInfo as al, type TransferDirection as am, type TransferProgress as an, type TransferState as ao, WebAPI as ap, canExternalClientSendRequests as aq, isExternalClientConnected as ar, type Device as b, type DeviceInfo as c, type DeviceType as d, type DirEntry as e, type ExternalConnection as f, ExternalConnectionErrorCode as g, ExternalConnectionState as h, type ExternalRequest as i, type ExternalRequestEvent as j, type ExternalRequestHandler as k, type ExternalRequestPayload as l, type ExternalResponse as m, FilesystemAPI as n, type KnownPaths as o, LocalSendAPI as p, type LocalSendEvent as q, type FileInfo as r, type LocalSendSettings as s, type MailAccount as t, type MailAddress as u, type Attachment as v, type FetchRange as w, type MailMessage as x, type MailboxInfo as y, type MessageEnvelope as z };
+export { PermissionsAPI as $, type AuthorizedClient as A, type BlockedClient as B, type ConnectionSecurity as C, DatabaseAPI as D, type ExternalAuthDecision as E, type FileStat as F, type MessageEnvelope as G, HaexVaultSdk as H, type ImapConfig as I, type NotificationClickEvent as J, KnownPath as K, LOCALSEND_EVENTS as L, MailAPI as M, type NotificationAction as N, type NotificationOptions as O, NotificationsAPI as P, type OutgoingAttachment as Q, type OutgoingMessage as R, StorageAPI as S, type PasswordInput as T, type PasswordItemFull as U, type PasswordItemSummary as V, type PasswordKeyValue as W, type PasswordKeyValueInput as X, PasswordsAPI as Y, type PendingAuthorization as Z, type PendingTransfer as _, type DecryptedSpace as a, type AddBackendRequest as a0, type S3Config as a1, type S3PublicConfig as a2, RemoteStorageAPI as a3, type StorageBackendInfo as a4, type StorageObjectInfo as a5, type UpdateBackendRequest as a6, type RequestedExtension as a7, type SelectFileOptions as a8, type SelectFolderOptions as a9, type ServerInfo as aa, type ServerStatus as ab, type SessionAuthorization as ac, type SharedSpace as ad, ShellAPI as ae, type ShellCreateOptions as af, type ShellCreateResponse as ag, type ShellExitEvent as ah, type ShellOutputEvent as ai, type SmtpConfig as aj, type SpaceAccessTokenInfo as ak, type SpaceAssignment as al, type SpaceInvite as am, type SpaceKeyGrantInfo as an, type SpaceMemberInfo as ao, SpacesAPI as ap, type SyncBackendInfo as aq, type TransferDirection as ar, type TransferProgress as as, type TransferState as at, WebAPI as au, canExternalClientSendRequests as av, isExternalClientConnected as aw, type DeepLink as b, type Device as c, type DeviceInfo as d, type DeviceType as e, type DirEntry as f, type ExternalConnection as g, ExternalConnectionErrorCode as h, ExternalConnectionState as i, type ExternalRequest as j, type ExternalRequestEvent as k, type ExternalRequestHandler as l, type ExternalRequestPayload as m, type ExternalResponse as n, FilesystemAPI as o, type KnownPaths as p, LocalSendAPI as q, type LocalSendEvent as r, type FileInfo as s, type LocalSendSettings as t, type MailAccount as u, type MailAddress as v, type Attachment as w, type FetchRange as x, type MailMessage as y, type MailboxInfo as z };

package/dist/index.d.mts

@@ -1,7 +1,7 @@
-import { H as HaexVaultSdk } from './client-DaS2fAf-.mjs';
-export { A as AuthorizedClient, B as BlockedClient, C as ConnectionSecurity, D as DatabaseAPI, a as DecryptedSpace, b as Device, c as DeviceInfo, d as DeviceType, e as DirEntry, E as ExternalAuthDecision, f as ExternalConnection, g as ExternalConnectionErrorCode, h as ExternalConnectionState, i as ExternalRequest, j as ExternalRequestEvent, k as ExternalRequestHandler, l as ExternalRequestPayload, m as ExternalResponse, F as FileStat, n as FilesystemAPI, I as ImapConfig, K as KnownPath, o as KnownPaths, L as LOCALSEND_EVENTS, p as LocalSendAPI, q as LocalSendEvent, r as LocalSendFileInfo, s as LocalSendSettings, M as MailAPI, t as MailAccount, u as MailAddress, v as MailAttachment, w as MailFetchRange, x as MailMessage, y as MailboxInfo, z as MessageEnvelope, O as OutgoingAttachment, G as OutgoingMessage, P as PasswordInput, J as PasswordItemFull, N as PasswordItemSummary, Q as PasswordKeyValue, R as PasswordKeyValueInput, T as PasswordsAPI, U as PendingAuthorization, V as PendingTransfer, W as PermissionsAPI, X as RemoteAddBackendRequest, Y as RemoteS3Config, Z as RemoteS3PublicConfig, _ as RemoteStorageAPI, $ as RemoteStorageBackendInfo, a0 as RemoteStorageObjectInfo, a1 as RemoteUpdateBackendRequest, a2 as RequestedExtension, a3 as SelectFileOptions, a4 as SelectFolderOptions, a5 as ServerInfo, a6 as ServerStatus, a7 as SessionAuthorization, a8 as SharedSpace, a9 as ShellAPI, aa as ShellCreateOptions, ab as ShellCreateResponse, ac as ShellExitEvent, ad as ShellOutputEvent, ae as SmtpConfig, af as SpaceAccessTokenInfo, ag as SpaceAssignment, ah as SpaceInvite, ai as SpaceKeyGrantInfo, aj as SpaceMemberInfo, ak as SpacesAPI, al as SyncBackendInfo, am as TransferDirection, an as TransferProgress, ao as TransferState, ap as WebAPI, aq as canExternalClientSendRequests, ar as isExternalClientConnected } from './client-DaS2fAf-.mjs';
-import { E as ExtensionManifest, h as SignedClaimPresentation, H as HaexHubConfig } from './types-Cji-mUN0.mjs';
-export { A as ApplicationContext, C as ClaimRequirement, i as ContextChangedEvent, j as DEFAULT_TIMEOUT, k as DatabaseColumnInfo, l as DatabaseExecuteParams, m as DatabasePermission, g as DatabasePermissionRequest, n as DatabaseQueryParams, D as DatabaseQueryResult, o as DatabaseTableInfo, c as EXTERNAL_EVENTS, p as ErrorCode, f as EventCallback, a as ExtensionInfo, q as ExtensionRuntimeMode, r as ExternalEvent, F as FileChangeEvent, s as FileChangePayload, t as FileChangeType, u as FilteredSyncTablesResult, v as HAEXTENSION_EVENTS, b as HaexHubEvent, w as HaexHubRequest, x as HaexHubResponse, y as HaexVaultSdkError, z as HaextensionEvent, I as IdentityClaim, B as ManifestI18nEntry, G as PermissionDeniedError, J as PermissionErrorBase, K as PermissionErrorCode, L as PermissionPromptError, P as PermissionResponse, N as PermissionStatus, O as SHELL_EVENTS, Q as SearchQuery, R as SearchRequestEvent, S as SearchResult, T as ShellEvent, U as SyncTablesUpdatedEvent, V as TABLE_SEPARATOR, W as WebRequestOptions, e as WebResponse, X as getTableName, Y as isPermissionDeniedError, Z as isPermissionError, _ as isPermissionPromptError } from './types-Cji-mUN0.mjs';
+import { H as HaexVaultSdk } from './client-C9FyPkqp.mjs';
+export { A as AuthorizedClient, B as BlockedClient, C as ConnectionSecurity, D as DatabaseAPI, a as DecryptedSpace, b as DeepLink, c as Device, d as DeviceInfo, e as DeviceType, f as DirEntry, E as ExternalAuthDecision, g as ExternalConnection, h as ExternalConnectionErrorCode, i as ExternalConnectionState, j as ExternalRequest, k as ExternalRequestEvent, l as ExternalRequestHandler, m as ExternalRequestPayload, n as ExternalResponse, F as FileStat, o as FilesystemAPI, I as ImapConfig, K as KnownPath, p as KnownPaths, L as LOCALSEND_EVENTS, q as LocalSendAPI, r as LocalSendEvent, s as LocalSendFileInfo, t as LocalSendSettings, M as MailAPI, u as MailAccount, v as MailAddress, w as MailAttachment, x as MailFetchRange, y as MailMessage, z as MailboxInfo, G as MessageEnvelope, N as NotificationAction, J as NotificationClickEvent, O as NotificationOptions, P as NotificationsAPI, Q as OutgoingAttachment, R as OutgoingMessage, T as PasswordInput, U as PasswordItemFull, V as PasswordItemSummary, W as PasswordKeyValue, X as PasswordKeyValueInput, Y as PasswordsAPI, Z as PendingAuthorization, _ as PendingTransfer, $ as PermissionsAPI, a0 as RemoteAddBackendRequest, a1 as RemoteS3Config, a2 as RemoteS3PublicConfig, a3 as RemoteStorageAPI, a4 as RemoteStorageBackendInfo, a5 as RemoteStorageObjectInfo, a6 as RemoteUpdateBackendRequest, a7 as RequestedExtension, a8 as SelectFileOptions, a9 as SelectFolderOptions, aa as ServerInfo, ab as ServerStatus, ac as SessionAuthorization, ad as SharedSpace, ae as ShellAPI, af as ShellCreateOptions, ag as ShellCreateResponse, ah as ShellExitEvent, ai as ShellOutputEvent, aj as SmtpConfig, ak as SpaceAccessTokenInfo, al as SpaceAssignment, am as SpaceInvite, an as SpaceKeyGrantInfo, ao as SpaceMemberInfo, ap as SpacesAPI, aq as SyncBackendInfo, ar as TransferDirection, as as TransferProgress, at as TransferState, au as WebAPI, av as canExternalClientSendRequests, aw as isExternalClientConnected } from './client-C9FyPkqp.mjs';
+import { E as ExtensionManifest, h as SignedClaimPresentation, H as HaexHubConfig } from './types-fHuxbqa4.mjs';
+export { A as ApplicationContext, C as ClaimRequirement, i as ContextChangedEvent, j as DEFAULT_TIMEOUT, k as DatabaseColumnInfo, l as DatabaseExecuteParams, m as DatabasePermission, g as DatabasePermissionRequest, n as DatabaseQueryParams, D as DatabaseQueryResult, o as DatabaseTableInfo, c as EXTERNAL_EVENTS, p as ErrorCode, f as EventCallback, a as ExtensionInfo, q as ExtensionRuntimeMode, r as ExternalEvent, F as FileChangeEvent, s as FileChangePayload, t as FileChangeType, u as FilteredSyncTablesResult, v as HAEXTENSION_EVENTS, b as HaexHubEvent, w as HaexHubRequest, x as HaexHubResponse, y as HaexVaultSdkError, z as HaextensionEvent, I as IdentityClaim, B as ManifestI18nEntry, N as NOTIFICATION_EVENTS, G as NotificationEvent, J as PermissionDeniedError, K as PermissionErrorBase, L as PermissionErrorCode, O as PermissionPromptError, P as PermissionResponse, Q as PermissionStatus, R as SHELL_EVENTS, T as SearchQuery, U as SearchRequestEvent, S as SearchResult, V as ShellEvent, X as SyncTablesUpdatedEvent, Y as TABLE_SEPARATOR, W as WebRequestOptions, e as WebResponse, Z as getTableName, _ as isPermissionDeniedError, $ as isPermissionError, a0 as isPermissionPromptError } from './types-fHuxbqa4.mjs';
 export { H as HaextensionConfig } from './config-D_HXjsEV.mjs';
 import 'drizzle-orm/sqlite-proxy';
 
@@ -122,6 +122,8 @@ declare const MAIL_COMMANDS: {
     readonly fetchEnvelopes: "extension_mail_fetch_envelopes";
     /** Full message fetch (envelope + body + attachment metadata) */
     readonly fetchMessage: "extension_mail_fetch_message";
+    /** Fetch a single attachment's bytes (base64) by part index */
+    readonly fetchAttachment: "extension_mail_fetch_attachment";
     /** Set or unset IMAP flags on a UID set */
     readonly setFlags: "extension_mail_set_flags";
     /** MOVE messages between mailboxes (COPY+EXPUNGE fallback) */
@@ -135,6 +137,26 @@ declare const MAIL_COMMANDS: {
 };
 type MailCommand = (typeof MAIL_COMMANDS)[keyof typeof MAIL_COMMANDS];
 
+/**
+ * Notifications Commands
+ *
+ * Generic OS-notification bridge. Extensions can't fire OS notifications
+ * themselves (no host privileges), so they go through the vault. Every
+ * notification is pinned to the calling extension's public key by the host;
+ * deep-link clicks can only route back to a webview with that same key.
+ *
+ * Permission: `notifications` resource, action `show`, target `*`.
+ *
+ * Naming convention: `extension_notifications_<action>`
+ */
+declare const NOTIFICATION_COMMANDS: {
+    /** Show an OS notification. Returns the assigned notification id. */
+    readonly show: "extension_notifications_show";
+    /** Dismiss a previously shown notification (only own notifications). */
+    readonly dismiss: "extension_notifications_dismiss";
+};
+type NotificationCommand = (typeof NOTIFICATION_COMMANDS)[keyof typeof NOTIFICATION_COMMANDS];
+
 /**
  * Sync Server API Types
  *
@@ -765,14 +787,19 @@ declare const TAURI_COMMANDS: {
         readonly listMailboxes: "extension_mail_list_mailboxes";
         readonly fetchEnvelopes: "extension_mail_fetch_envelopes";
         readonly fetchMessage: "extension_mail_fetch_message";
+        readonly fetchAttachment: "extension_mail_fetch_attachment";
         readonly setFlags: "extension_mail_set_flags";
         readonly moveMessages: "extension_mail_move_messages";
         readonly appendMessage: "extension_mail_append_message";
         readonly sendMessage: "extension_mail_send_message";
         readonly buildRfc822: "extension_mail_build_rfc822";
     };
+    readonly notifications: {
+        readonly show: "extension_notifications_show";
+        readonly dismiss: "extension_notifications_dismiss";
+    };
 };
-type TauriCommand = (typeof DATABASE_COMMANDS)[keyof typeof DATABASE_COMMANDS] | (typeof PERMISSIONS_COMMANDS)[keyof typeof PERMISSIONS_COMMANDS] | (typeof WEB_COMMANDS)[keyof typeof WEB_COMMANDS] | (typeof WEB_STORAGE_COMMANDS)[keyof typeof WEB_STORAGE_COMMANDS] | (typeof FILESYSTEM_COMMANDS)[keyof typeof FILESYSTEM_COMMANDS] | (typeof EXTERNAL_BRIDGE_COMMANDS)[keyof typeof EXTERNAL_BRIDGE_COMMANDS] | (typeof EXTENSION_COMMANDS)[keyof typeof EXTENSION_COMMANDS] | (typeof REMOTE_STORAGE_COMMANDS)[keyof typeof REMOTE_STORAGE_COMMANDS] | (typeof LOCALSEND_COMMANDS)[keyof typeof LOCALSEND_COMMANDS] | (typeof SPACE_COMMANDS)[keyof typeof SPACE_COMMANDS] | (typeof SHELL_COMMANDS)[keyof typeof SHELL_COMMANDS] | (typeof PASSWORD_COMMANDS)[keyof typeof PASSWORD_COMMANDS] | (typeof MAIL_COMMANDS)[keyof typeof MAIL_COMMANDS];
+type TauriCommand = (typeof DATABASE_COMMANDS)[keyof typeof DATABASE_COMMANDS] | (typeof PERMISSIONS_COMMANDS)[keyof typeof PERMISSIONS_COMMANDS] | (typeof WEB_COMMANDS)[keyof typeof WEB_COMMANDS] | (typeof WEB_STORAGE_COMMANDS)[keyof typeof WEB_STORAGE_COMMANDS] | (typeof FILESYSTEM_COMMANDS)[keyof typeof FILESYSTEM_COMMANDS] | (typeof EXTERNAL_BRIDGE_COMMANDS)[keyof typeof EXTERNAL_BRIDGE_COMMANDS] | (typeof EXTENSION_COMMANDS)[keyof typeof EXTENSION_COMMANDS] | (typeof REMOTE_STORAGE_COMMANDS)[keyof typeof REMOTE_STORAGE_COMMANDS] | (typeof LOCALSEND_COMMANDS)[keyof typeof LOCALSEND_COMMANDS] | (typeof SPACE_COMMANDS)[keyof typeof SPACE_COMMANDS] | (typeof SHELL_COMMANDS)[keyof typeof SHELL_COMMANDS] | (typeof PASSWORD_COMMANDS)[keyof typeof PASSWORD_COMMANDS] | (typeof MAIL_COMMANDS)[keyof typeof MAIL_COMMANDS] | (typeof NOTIFICATION_COMMANDS)[keyof typeof NOTIFICATION_COMMANDS];
 
 interface VerifyResult {
     valid: boolean;
@@ -1093,4 +1120,4 @@ declare function exportKeyPairAsync(keyPair: PasskeyKeyPair): Promise<ExportedPa
 
 declare function createHaexVaultSdk(config?: HaexHubConfig): HaexVaultSdk;
 
-export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, MAIL_COMMANDS, type MailCommand, PASSWORD_COMMANDS, type PasskeyKeyPair, type PasswordCommand, type RegisterKeypairRequest, SIGNING_ALGO, SPACE_COMMANDS, type SealedData, type SignableRecord, SignedClaimPresentation, type SpaceCommand, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base58btcDecode, base58btcEncode, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceNameAsync, decryptString, decryptVaultKey, decryptVaultName, decryptWithPrivateKeyAsync, deriveKeyFromPassword, didKeyToPublicKeyAsync, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceNameAsync, encryptString, encryptVaultKey, encryptWithPublicKeyAsync, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generateIdentityAsync, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, publicKeyToDidKeyAsync, signClaimPresentationAsync, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyClaimPresentationAsync, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };
+export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, MAIL_COMMANDS, type MailCommand, NOTIFICATION_COMMANDS, type NotificationCommand, PASSWORD_COMMANDS, type PasskeyKeyPair, type PasswordCommand, type RegisterKeypairRequest, SIGNING_ALGO, SPACE_COMMANDS, type SealedData, type SignableRecord, SignedClaimPresentation, type SpaceCommand, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base58btcDecode, base58btcEncode, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceNameAsync, decryptString, decryptVaultKey, decryptVaultName, decryptWithPrivateKeyAsync, deriveKeyFromPassword, didKeyToPublicKeyAsync, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceNameAsync, encryptString, encryptVaultKey, encryptWithPublicKeyAsync, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generateIdentityAsync, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, publicKeyToDidKeyAsync, signClaimPresentationAsync, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyClaimPresentationAsync, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { H as HaexVaultSdk } from './client-BBD-YsPv.js';
-export { A as AuthorizedClient, B as BlockedClient, C as ConnectionSecurity, D as DatabaseAPI, a as DecryptedSpace, b as Device, c as DeviceInfo, d as DeviceType, e as DirEntry, E as ExternalAuthDecision, f as ExternalConnection, g as ExternalConnectionErrorCode, h as ExternalConnectionState, i as ExternalRequest, j as ExternalRequestEvent, k as ExternalRequestHandler, l as ExternalRequestPayload, m as ExternalResponse, F as FileStat, n as FilesystemAPI, I as ImapConfig, K as KnownPath, o as KnownPaths, L as LOCALSEND_EVENTS, p as LocalSendAPI, q as LocalSendEvent, r as LocalSendFileInfo, s as LocalSendSettings, M as MailAPI, t as MailAccount, u as MailAddress, v as MailAttachment, w as MailFetchRange, x as MailMessage, y as MailboxInfo, z as MessageEnvelope, O as OutgoingAttachment, G as OutgoingMessage, P as PasswordInput, J as PasswordItemFull, N as PasswordItemSummary, Q as PasswordKeyValue, R as PasswordKeyValueInput, T as PasswordsAPI, U as PendingAuthorization, V as PendingTransfer, W as PermissionsAPI, X as RemoteAddBackendRequest, Y as RemoteS3Config, Z as RemoteS3PublicConfig, _ as RemoteStorageAPI, $ as RemoteStorageBackendInfo, a0 as RemoteStorageObjectInfo, a1 as RemoteUpdateBackendRequest, a2 as RequestedExtension, a3 as SelectFileOptions, a4 as SelectFolderOptions, a5 as ServerInfo, a6 as ServerStatus, a7 as SessionAuthorization, a8 as SharedSpace, a9 as ShellAPI, aa as ShellCreateOptions, ab as ShellCreateResponse, ac as ShellExitEvent, ad as ShellOutputEvent, ae as SmtpConfig, af as SpaceAccessTokenInfo, ag as SpaceAssignment, ah as SpaceInvite, ai as SpaceKeyGrantInfo, aj as SpaceMemberInfo, ak as SpacesAPI, al as SyncBackendInfo, am as TransferDirection, an as TransferProgress, ao as TransferState, ap as WebAPI, aq as canExternalClientSendRequests, ar as isExternalClientConnected } from './client-BBD-YsPv.js';
-import { E as ExtensionManifest, h as SignedClaimPresentation, H as HaexHubConfig } from './types-Cji-mUN0.js';
-export { A as ApplicationContext, C as ClaimRequirement, i as ContextChangedEvent, j as DEFAULT_TIMEOUT, k as DatabaseColumnInfo, l as DatabaseExecuteParams, m as DatabasePermission, g as DatabasePermissionRequest, n as DatabaseQueryParams, D as DatabaseQueryResult, o as DatabaseTableInfo, c as EXTERNAL_EVENTS, p as ErrorCode, f as EventCallback, a as ExtensionInfo, q as ExtensionRuntimeMode, r as ExternalEvent, F as FileChangeEvent, s as FileChangePayload, t as FileChangeType, u as FilteredSyncTablesResult, v as HAEXTENSION_EVENTS, b as HaexHubEvent, w as HaexHubRequest, x as HaexHubResponse, y as HaexVaultSdkError, z as HaextensionEvent, I as IdentityClaim, B as ManifestI18nEntry, G as PermissionDeniedError, J as PermissionErrorBase, K as PermissionErrorCode, L as PermissionPromptError, P as PermissionResponse, N as PermissionStatus, O as SHELL_EVENTS, Q as SearchQuery, R as SearchRequestEvent, S as SearchResult, T as ShellEvent, U as SyncTablesUpdatedEvent, V as TABLE_SEPARATOR, W as WebRequestOptions, e as WebResponse, X as getTableName, Y as isPermissionDeniedError, Z as isPermissionError, _ as isPermissionPromptError } from './types-Cji-mUN0.js';
+import { H as HaexVaultSdk } from './client--_QYySP0.js';
+export { A as AuthorizedClient, B as BlockedClient, C as ConnectionSecurity, D as DatabaseAPI, a as DecryptedSpace, b as DeepLink, c as Device, d as DeviceInfo, e as DeviceType, f as DirEntry, E as ExternalAuthDecision, g as ExternalConnection, h as ExternalConnectionErrorCode, i as ExternalConnectionState, j as ExternalRequest, k as ExternalRequestEvent, l as ExternalRequestHandler, m as ExternalRequestPayload, n as ExternalResponse, F as FileStat, o as FilesystemAPI, I as ImapConfig, K as KnownPath, p as KnownPaths, L as LOCALSEND_EVENTS, q as LocalSendAPI, r as LocalSendEvent, s as LocalSendFileInfo, t as LocalSendSettings, M as MailAPI, u as MailAccount, v as MailAddress, w as MailAttachment, x as MailFetchRange, y as MailMessage, z as MailboxInfo, G as MessageEnvelope, N as NotificationAction, J as NotificationClickEvent, O as NotificationOptions, P as NotificationsAPI, Q as OutgoingAttachment, R as OutgoingMessage, T as PasswordInput, U as PasswordItemFull, V as PasswordItemSummary, W as PasswordKeyValue, X as PasswordKeyValueInput, Y as PasswordsAPI, Z as PendingAuthorization, _ as PendingTransfer, $ as PermissionsAPI, a0 as RemoteAddBackendRequest, a1 as RemoteS3Config, a2 as RemoteS3PublicConfig, a3 as RemoteStorageAPI, a4 as RemoteStorageBackendInfo, a5 as RemoteStorageObjectInfo, a6 as RemoteUpdateBackendRequest, a7 as RequestedExtension, a8 as SelectFileOptions, a9 as SelectFolderOptions, aa as ServerInfo, ab as ServerStatus, ac as SessionAuthorization, ad as SharedSpace, ae as ShellAPI, af as ShellCreateOptions, ag as ShellCreateResponse, ah as ShellExitEvent, ai as ShellOutputEvent, aj as SmtpConfig, ak as SpaceAccessTokenInfo, al as SpaceAssignment, am as SpaceInvite, an as SpaceKeyGrantInfo, ao as SpaceMemberInfo, ap as SpacesAPI, aq as SyncBackendInfo, ar as TransferDirection, as as TransferProgress, at as TransferState, au as WebAPI, av as canExternalClientSendRequests, aw as isExternalClientConnected } from './client--_QYySP0.js';
+import { E as ExtensionManifest, h as SignedClaimPresentation, H as HaexHubConfig } from './types-fHuxbqa4.js';
+export { A as ApplicationContext, C as ClaimRequirement, i as ContextChangedEvent, j as DEFAULT_TIMEOUT, k as DatabaseColumnInfo, l as DatabaseExecuteParams, m as DatabasePermission, g as DatabasePermissionRequest, n as DatabaseQueryParams, D as DatabaseQueryResult, o as DatabaseTableInfo, c as EXTERNAL_EVENTS, p as ErrorCode, f as EventCallback, a as ExtensionInfo, q as ExtensionRuntimeMode, r as ExternalEvent, F as FileChangeEvent, s as FileChangePayload, t as FileChangeType, u as FilteredSyncTablesResult, v as HAEXTENSION_EVENTS, b as HaexHubEvent, w as HaexHubRequest, x as HaexHubResponse, y as HaexVaultSdkError, z as HaextensionEvent, I as IdentityClaim, B as ManifestI18nEntry, N as NOTIFICATION_EVENTS, G as NotificationEvent, J as PermissionDeniedError, K as PermissionErrorBase, L as PermissionErrorCode, O as PermissionPromptError, P as PermissionResponse, Q as PermissionStatus, R as SHELL_EVENTS, T as SearchQuery, U as SearchRequestEvent, S as SearchResult, V as ShellEvent, X as SyncTablesUpdatedEvent, Y as TABLE_SEPARATOR, W as WebRequestOptions, e as WebResponse, Z as getTableName, _ as isPermissionDeniedError, $ as isPermissionError, a0 as isPermissionPromptError } from './types-fHuxbqa4.js';
 export { H as HaextensionConfig } from './config-D_HXjsEV.js';
 import 'drizzle-orm/sqlite-proxy';
 
@@ -122,6 +122,8 @@ declare const MAIL_COMMANDS: {
     readonly fetchEnvelopes: "extension_mail_fetch_envelopes";
     /** Full message fetch (envelope + body + attachment metadata) */
     readonly fetchMessage: "extension_mail_fetch_message";
+    /** Fetch a single attachment's bytes (base64) by part index */
+    readonly fetchAttachment: "extension_mail_fetch_attachment";
     /** Set or unset IMAP flags on a UID set */
     readonly setFlags: "extension_mail_set_flags";
     /** MOVE messages between mailboxes (COPY+EXPUNGE fallback) */
@@ -135,6 +137,26 @@ declare const MAIL_COMMANDS: {
 };
 type MailCommand = (typeof MAIL_COMMANDS)[keyof typeof MAIL_COMMANDS];
 
+/**
+ * Notifications Commands
+ *
+ * Generic OS-notification bridge. Extensions can't fire OS notifications
+ * themselves (no host privileges), so they go through the vault. Every
+ * notification is pinned to the calling extension's public key by the host;
+ * deep-link clicks can only route back to a webview with that same key.
+ *
+ * Permission: `notifications` resource, action `show`, target `*`.
+ *
+ * Naming convention: `extension_notifications_<action>`
+ */
+declare const NOTIFICATION_COMMANDS: {
+    /** Show an OS notification. Returns the assigned notification id. */
+    readonly show: "extension_notifications_show";
+    /** Dismiss a previously shown notification (only own notifications). */
+    readonly dismiss: "extension_notifications_dismiss";
+};
+type NotificationCommand = (typeof NOTIFICATION_COMMANDS)[keyof typeof NOTIFICATION_COMMANDS];
+
 /**
  * Sync Server API Types
  *
@@ -765,14 +787,19 @@ declare const TAURI_COMMANDS: {
         readonly listMailboxes: "extension_mail_list_mailboxes";
         readonly fetchEnvelopes: "extension_mail_fetch_envelopes";
         readonly fetchMessage: "extension_mail_fetch_message";
+        readonly fetchAttachment: "extension_mail_fetch_attachment";
         readonly setFlags: "extension_mail_set_flags";
         readonly moveMessages: "extension_mail_move_messages";
         readonly appendMessage: "extension_mail_append_message";
         readonly sendMessage: "extension_mail_send_message";
         readonly buildRfc822: "extension_mail_build_rfc822";
     };
+    readonly notifications: {
+        readonly show: "extension_notifications_show";
+        readonly dismiss: "extension_notifications_dismiss";
+    };
 };
-type TauriCommand = (typeof DATABASE_COMMANDS)[keyof typeof DATABASE_COMMANDS] | (typeof PERMISSIONS_COMMANDS)[keyof typeof PERMISSIONS_COMMANDS] | (typeof WEB_COMMANDS)[keyof typeof WEB_COMMANDS] | (typeof WEB_STORAGE_COMMANDS)[keyof typeof WEB_STORAGE_COMMANDS] | (typeof FILESYSTEM_COMMANDS)[keyof typeof FILESYSTEM_COMMANDS] | (typeof EXTERNAL_BRIDGE_COMMANDS)[keyof typeof EXTERNAL_BRIDGE_COMMANDS] | (typeof EXTENSION_COMMANDS)[keyof typeof EXTENSION_COMMANDS] | (typeof REMOTE_STORAGE_COMMANDS)[keyof typeof REMOTE_STORAGE_COMMANDS] | (typeof LOCALSEND_COMMANDS)[keyof typeof LOCALSEND_COMMANDS] | (typeof SPACE_COMMANDS)[keyof typeof SPACE_COMMANDS] | (typeof SHELL_COMMANDS)[keyof typeof SHELL_COMMANDS] | (typeof PASSWORD_COMMANDS)[keyof typeof PASSWORD_COMMANDS] | (typeof MAIL_COMMANDS)[keyof typeof MAIL_COMMANDS];
+type TauriCommand = (typeof DATABASE_COMMANDS)[keyof typeof DATABASE_COMMANDS] | (typeof PERMISSIONS_COMMANDS)[keyof typeof PERMISSIONS_COMMANDS] | (typeof WEB_COMMANDS)[keyof typeof WEB_COMMANDS] | (typeof WEB_STORAGE_COMMANDS)[keyof typeof WEB_STORAGE_COMMANDS] | (typeof FILESYSTEM_COMMANDS)[keyof typeof FILESYSTEM_COMMANDS] | (typeof EXTERNAL_BRIDGE_COMMANDS)[keyof typeof EXTERNAL_BRIDGE_COMMANDS] | (typeof EXTENSION_COMMANDS)[keyof typeof EXTENSION_COMMANDS] | (typeof REMOTE_STORAGE_COMMANDS)[keyof typeof REMOTE_STORAGE_COMMANDS] | (typeof LOCALSEND_COMMANDS)[keyof typeof LOCALSEND_COMMANDS] | (typeof SPACE_COMMANDS)[keyof typeof SPACE_COMMANDS] | (typeof SHELL_COMMANDS)[keyof typeof SHELL_COMMANDS] | (typeof PASSWORD_COMMANDS)[keyof typeof PASSWORD_COMMANDS] | (typeof MAIL_COMMANDS)[keyof typeof MAIL_COMMANDS] | (typeof NOTIFICATION_COMMANDS)[keyof typeof NOTIFICATION_COMMANDS];
 
 interface VerifyResult {
     valid: boolean;
@@ -1093,4 +1120,4 @@ declare function exportKeyPairAsync(keyPair: PasskeyKeyPair): Promise<ExportedPa
 
 declare function createHaexVaultSdk(config?: HaexHubConfig): HaexVaultSdk;
 
-export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, MAIL_COMMANDS, type MailCommand, PASSWORD_COMMANDS, type PasskeyKeyPair, type PasswordCommand, type RegisterKeypairRequest, SIGNING_ALGO, SPACE_COMMANDS, type SealedData, type SignableRecord, SignedClaimPresentation, type SpaceCommand, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base58btcDecode, base58btcEncode, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceNameAsync, decryptString, decryptVaultKey, decryptVaultName, decryptWithPrivateKeyAsync, deriveKeyFromPassword, didKeyToPublicKeyAsync, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceNameAsync, encryptString, encryptVaultKey, encryptWithPublicKeyAsync, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generateIdentityAsync, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, publicKeyToDidKeyAsync, signClaimPresentationAsync, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyClaimPresentationAsync, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };
+export { type AuthUser, COSE_ALGORITHM, type CoseAlgorithm, type CreateSpaceRequest, type ExportedPasskeyKeyPair, type ExportedUserKeypair, ExtensionManifest, HAEXSPACE_MESSAGE_TYPES, HaexHubConfig, HaexVaultSdk, type HaexspaceMessageType, type InviteMemberRequest, KEY_AGREEMENT_ALGO, MAIL_COMMANDS, type MailCommand, NOTIFICATION_COMMANDS, type NotificationCommand, PASSWORD_COMMANDS, type PasskeyKeyPair, type PasswordCommand, type RegisterKeypairRequest, SIGNING_ALGO, SPACE_COMMANDS, type SealedData, type SignableRecord, SignedClaimPresentation, type SpaceCommand, type StorageConfig, type ErrorResponse as SyncServerErrorResponse, type ServerInfo as SyncServerInfo, type LoginRequest as SyncServerLoginRequest, type LoginResponse as SyncServerLoginResponse, type RefreshRequest as SyncServerRefreshRequest, TAURI_COMMANDS, type TauriCommand, type UserKeypair, type VerifyResult, type ZipFileEntry, arrayBufferToBase64, base58btcDecode, base58btcEncode, base64ToArrayBuffer, createHaexVaultSdk, decryptCrdtData, decryptPrivateKeyAsync, decryptSpaceNameAsync, decryptString, decryptVaultKey, decryptVaultName, decryptWithPrivateKeyAsync, deriveKeyFromPassword, didKeyToPublicKeyAsync, encryptCrdtData, encryptPrivateKeyAsync, encryptSpaceNameAsync, encryptString, encryptVaultKey, encryptWithPublicKeyAsync, exportKeyPairAsync, exportPrivateKeyAsync, exportPublicKeyAsync, exportPublicKeyCoseAsync, exportUserKeypairAsync, generateCredentialId, generateIdentityAsync, generatePasskeyPairAsync, generateSpaceKey, generateUserKeypairAsync, generateVaultKey, hexToBytes, importPrivateKeyAsync, importPrivateKeyForKeyAgreementAsync, importPublicKeyAsync, importPublicKeyForKeyAgreementAsync, importUserPrivateKeyAsync, importUserPublicKeyAsync, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, publicKeyToDidKeyAsync, signClaimPresentationAsync, signRecordAsync, signSpaceChallengeAsync, signWithPasskeyAsync, sortObjectKeysRecursively, unwrapKey, verifyClaimPresentationAsync, verifyExtensionSignature, verifyRecordSignatureAsync, verifySpaceChallengeAsync, verifyWithPasskeyAsync, wrapKey };

package/dist/index.js

@@ -717,6 +717,10 @@ var HAEXTENSION_EVENTS = {
    *  subscribe via `client.on(HAEXTENSION_EVENTS.PERMISSION_RESOLVED, ...)`. */
   PERMISSION_RESOLVED: "extension:permission-resolved"
 };
+var NOTIFICATION_EVENTS = {
+  /** A click on one of this extension's notifications (body or action button). */
+  CLICK: "haextension:notification:click"
+};
 var EXTERNAL_EVENTS = {
   /** External request from authorized client */
   REQUEST: "haextension:external:request",
@@ -1075,6 +1079,8 @@ var MAIL_COMMANDS = {
   fetchEnvelopes: "extension_mail_fetch_envelopes",
   /** Full message fetch (envelope + body + attachment metadata) */
   fetchMessage: "extension_mail_fetch_message",
+  /** Fetch a single attachment's bytes (base64) by part index */
+  fetchAttachment: "extension_mail_fetch_attachment",
   /** Set or unset IMAP flags on a UID set */
   setFlags: "extension_mail_set_flags",
   /** MOVE messages between mailboxes (COPY+EXPUNGE fallback) */
@@ -1087,6 +1093,14 @@ var MAIL_COMMANDS = {
   buildRfc822: "extension_mail_build_rfc822"
 };
 
+// src/commands/notifications.ts
+var NOTIFICATION_COMMANDS = {
+  /** Show an OS notification. Returns the assigned notification id. */
+  show: "extension_notifications_show",
+  /** Dismiss a previously shown notification (only own notifications). */
+  dismiss: "extension_notifications_dismiss"
+};
+
 // src/commands/index.ts
 var TAURI_COMMANDS = {
   database: DATABASE_COMMANDS,
@@ -1101,7 +1115,8 @@ var TAURI_COMMANDS = {
   spaces: SPACE_COMMANDS,
   shell: SHELL_COMMANDS,
   passwords: PASSWORD_COMMANDS,
-  mail: MAIL_COMMANDS
+  mail: MAIL_COMMANDS,
+  notifications: NOTIFICATION_COMMANDS
 };
 
 // src/api/storage.ts
@@ -2132,6 +2147,21 @@ var MailAPI = class {
       uid
     });
   }
+  /**
+   * Fetch a single attachment's raw bytes by its `partIndex` (from the
+   * `attachments` array of a fetched `MailMessage`), returned as a
+   * standard-alphabet base64 string. The base64 form drops straight into
+   * `OutgoingAttachment.data` when forwarding, and decodes to bytes for
+   * viewing or downloading.
+   */
+  async fetchAttachmentAsync(imap, mailbox, uid, partIndex) {
+    return this.client.request(MAIL_COMMANDS.fetchAttachment, {
+      imap,
+      mailbox,
+      uid,
+      partIndex
+    });
+  }
   /**
    * Set or unset IMAP flags. Use `flags=["\\Seen"]` + `add=true` to
    * mark messages as read; `add=false` removes the flag(s).
@@ -2187,6 +2217,38 @@ var MailAPI = class {
   }
 };
 
+// src/api/notifications.ts
+var NotificationsAPI = class {
+  constructor(client) {
+    this.client = client;
+  }
+  /** Show a notification. Returns its id so it can be dismissed later. */
+  async show(opts) {
+    return this.client.request(NOTIFICATION_COMMANDS.show, {
+      options: opts
+    });
+  }
+  /** Dismiss a previously shown notification (only own notifications). */
+  async dismiss(id) {
+    return this.client.request(NOTIFICATION_COMMANDS.dismiss, { id });
+  }
+  /**
+   * Listen for clicks on this extension's notifications. Useful when the
+   * extension is already open and wants to react in-app (e.g. router.push the
+   * `path`) instead of relying on the host to focus the webview.
+   *
+   * Returns an unsubscribe function.
+   */
+  onClick(handler) {
+    const wrapped = (event) => {
+      const data = event.data;
+      if (data) handler(data);
+    };
+    this.client.on(NOTIFICATION_EVENTS.CLICK, wrapped);
+    return () => this.client.off(NOTIFICATION_EVENTS.CLICK, wrapped);
+  }
+};
+
 // src/client/tableName.ts
 function validatePublicKey(publicKey) {
   if (!publicKey || typeof publicKey !== "string" || publicKey.trim() === "") {
@@ -2354,6 +2416,7 @@ async function setupTauriEventListeners(ctx, log, onEvent, onContextChange) {
     HAEXTENSION_EVENTS.PERMISSION_RESOLVED,
     EXTERNAL_EVENTS.REQUEST,
     EXTERNAL_EVENTS.ACTION_REQUEST,
+    NOTIFICATION_EVENTS.CLICK,
     ...Object.values(LOCALSEND_EVENTS)
   ]) {
     await forwardEvent(listen, log, onEvent, listenOptions, eventName);
@@ -2829,6 +2892,7 @@ var HaexVaultSdk = class {
     this.shell = new ShellAPI(this);
     this.passwords = new PasswordsAPI(this);
     this.mail = new MailAPI(this);
+    this.notifications = new NotificationsAPI(this);
     installConsoleForwarding(this.config.debug);
     this.on(HAEXTENSION_EVENTS.PERMISSION_RESOLVED, (event) => {
       const data = event.data;
@@ -3784,6 +3848,9 @@ exports.LOCALSEND_EVENTS = LOCALSEND_EVENTS;
 exports.LocalSendAPI = LocalSendAPI;
 exports.MAIL_COMMANDS = MAIL_COMMANDS;
 exports.MailAPI = MailAPI;
+exports.NOTIFICATION_COMMANDS = NOTIFICATION_COMMANDS;
+exports.NOTIFICATION_EVENTS = NOTIFICATION_EVENTS;
+exports.NotificationsAPI = NotificationsAPI;
 exports.PASSWORD_COMMANDS = PASSWORD_COMMANDS;
 exports.PasswordsAPI = PasswordsAPI;
 exports.PermissionErrorCode = PermissionErrorCode;