@vaultsandbox/client 0.6.0 → 0.7.0

package/dist/sync/inbox-sync.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Inbox synchronization utilities for hash-based sync with deletion handling
+ */
+import type { ApiClient } from '../http/api-client.js';
+import type { EmailData } from '../types/index.js';
+/**
+ * Result of a sync operation.
+ */
+export interface SyncResult {
+    /** Emails that exist on the server but not locally */
+    added: EmailData[];
+    /** Email IDs that exist locally but not on the server */
+    deleted: string[];
+    /** Whether the inbox was already in sync (no changes) */
+    unchanged: boolean;
+}
+/**
+ * Synchronizes the local email cache with the server using hash comparison.
+ *
+ * This implements the spec's hash-based sync algorithm:
+ * 1. Compute local hash from current email IDs
+ * 2. Get server hash via /sync endpoint
+ * 3. If hashes match, no sync needed
+ * 4. If hashes differ, fetch full email list and reconcile
+ *
+ * @param apiClient - The API client for server communication
+ * @param emailAddress - The inbox email address
+ * @param localEmails - Map of local email IDs to EmailData
+ * @returns Promise resolving to sync result with added/deleted emails
+ */
+export declare function syncInbox(apiClient: ApiClient, emailAddress: string, localEmails: Map<string, EmailData>): Promise<SyncResult>;

package/dist/sync/inbox-sync.js

@@ -0,0 +1,52 @@
+/**
+ * Inbox synchronization utilities for hash-based sync with deletion handling
+ */
+import createDebug from 'debug';
+import { computeEmailsHash } from '../utils/hash.js';
+const debug = createDebug('vaultsandbox:sync');
+/**
+ * Synchronizes the local email cache with the server using hash comparison.
+ *
+ * This implements the spec's hash-based sync algorithm:
+ * 1. Compute local hash from current email IDs
+ * 2. Get server hash via /sync endpoint
+ * 3. If hashes match, no sync needed
+ * 4. If hashes differ, fetch full email list and reconcile
+ *
+ * @param apiClient - The API client for server communication
+ * @param emailAddress - The inbox email address
+ * @param localEmails - Map of local email IDs to EmailData
+ * @returns Promise resolving to sync result with added/deleted emails
+ */
+export async function syncInbox(apiClient, emailAddress, localEmails) {
+    debug('Starting sync for inbox %s', emailAddress);
+    // Step 1: Compute local hash from current email IDs
+    const localIds = Array.from(localEmails.keys());
+    const localHash = computeEmailsHash(localIds);
+    debug('Computed local hash: %s (from %d emails)', localHash, localIds.length);
+    // Step 2: Get server hash
+    const syncStatus = await apiClient.getSyncStatus(emailAddress);
+    debug('Server hash: %s (with %d emails)', syncStatus.emailsHash, syncStatus.emailCount);
+    // Step 3: Compare hashes
+    if (localHash === syncStatus.emailsHash) {
+        debug('Hashes match - inbox %s is in sync', emailAddress);
+        return { added: [], deleted: [], unchanged: true };
+    }
+    debug('Hash mismatch detected for inbox %s - fetching full email list', emailAddress);
+    // Step 4: Fetch full email list from server
+    const serverEmails = await apiClient.listEmails(emailAddress, false);
+    const serverIds = new Set(serverEmails.map((e) => e.id));
+    const localIdSet = new Set(localIds);
+    // Step 5: Find new emails (on server but not local)
+    const newEmails = serverEmails.filter((e) => !localIdSet.has(e.id));
+    debug('Found %d new emails on server', newEmails.length);
+    // Step 6: Find deleted emails (local but not on server)
+    const deletedIds = localIds.filter((id) => !serverIds.has(id));
+    debug('Found %d emails deleted from server', deletedIds.length);
+    return {
+        added: newEmails,
+        deleted: deletedIds,
+        unchanged: false,
+    };
+}
+//# sourceMappingURL=inbox-sync.js.map

package/dist/sync/inbox-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox-sync.js","sourceRoot":"","sources":["../../src/sync/inbox-sync.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,WAAW,MAAM,OAAO,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIrD,MAAM,KAAK,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;AAc/C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAoB,EACpB,YAAoB,EACpB,WAAmC;IAEnC,KAAK,CAAC,4BAA4B,EAAE,YAAY,CAAC,CAAC;IAElD,oDAAoD;IACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,KAAK,CAAC,0CAA0C,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9E,0BAA0B;IAC1B,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAC/D,KAAK,CAAC,kCAAkC,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IAExF,yBAAyB;IACzB,IAAI,SAAS,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;QACxC,KAAK,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,gEAAgE,EAAE,YAAY,CAAC,CAAC;IAEtF,4CAA4C;IAC5C,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAErC,oDAAoD;IACpD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,+BAA+B,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAEzD,wDAAwD;IACxD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,qCAAqC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAEhE,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,UAAU;QACnB,SAAS,EAAE,KAAK;KACjB,CAAC;AACJ,CAAC"}

package/dist/types/index.d.ts

@@ -11,11 +11,10 @@ export interface ClientConfig {
     apiKey: string;
     /**
      * The email delivery strategy to use.
-     * - `sse`: Use Server-Sent Events for real-time updates.
+     * - `sse`: Use Server-Sent Events for real-time updates (default).
      * - `polling`: Use traditional polling.
-     * - `auto`: Use SSE if available, otherwise fall back to polling (default).
      */
-    strategy?: 'sse' | 'polling' | 'auto';
+    strategy?: 'sse' | 'polling';
     /** The base interval for polling in milliseconds (default: 2000). */
     pollingInterval?: number;
     /** The maximum number of retries for failed HTTP requests (default: 3). */
@@ -37,6 +36,10 @@ export interface CreateInboxOptions {
     ttl?: number;
     /** A specific email address to request for the inbox. */
     emailAddress?: string;
+    /** Enable or disable email authentication checks (SPF, DKIM, DMARC, PTR). Omit to use server default. */
+    emailAuth?: boolean;
+    /** Request encrypted or plain inbox. Omit to use server default based on encryptionPolicy. */
+    encryption?: 'encrypted' | 'plain';
 }
 /**
  * Exported inbox data structure for sharing or backup purposes.
@@ -52,10 +55,12 @@ export interface ExportedInboxData {
     expiresAt: string;
     /** Unique hash identifier for the inbox */
     inboxHash: string;
-    /** Server's ML-DSA-65 public key (base64url encoded, 1952 bytes decoded) */
-    serverSigPk: string;
-    /** ML-KEM-768 secret key (base64url encoded, 2400 bytes decoded) */
-    secretKey: string;
+    /** Whether this inbox uses encryption. */
+    encrypted: boolean;
+    /** Server's ML-DSA-65 public key (base64url encoded, 1952 bytes decoded). Only present for encrypted inboxes. */
+    serverSigPk?: string;
+    /** ML-KEM-768 secret key (base64url encoded, 2400 bytes decoded). Only present for encrypted inboxes. */
+    secretKey?: string;
     /** ISO 8601 timestamp when the export was created */
     exportedAt: string;
 }
@@ -71,8 +76,12 @@ export interface InboxData {
     expiresAt: string;
     /** Base64URL-encoded SHA-256 hash of the client KEM public key, used for SSE subscriptions and API references. */
     inboxHash: string;
-    /** Base64URL-encoded server signing public key for verifying server signatures. */
-    serverSigPk: string;
+    /** Whether this inbox uses encryption. */
+    encrypted: boolean;
+    /** Base64URL-encoded server signing public key for verifying server signatures. Only present for encrypted inboxes. */
+    serverSigPk?: string;
+    /** Whether email authentication checks (SPF, DKIM, DMARC, PTR) are enabled for this inbox. */
+    emailAuth?: boolean;
 }
 /**
  * The synchronization status of an inbox.
@@ -106,10 +115,10 @@ export interface WaitForCountOptions {
     timeout?: number;
 }
 /**
- * Raw email data returned from the API.
+ * Encrypted email data returned from the API.
  * @internal
  */
-export interface EmailData {
+export interface EncryptedEmailData {
     id: string;
     inboxId: string;
     receivedAt: string;
@@ -117,6 +126,26 @@ export interface EmailData {
     encryptedMetadata: EncryptedData;
     encryptedParsed?: EncryptedData;
 }
+/**
+ * Plain (unencrypted) email data returned from the API.
+ * @internal
+ */
+export interface PlainEmailData {
+    id: string;
+    inboxId: string;
+    receivedAt: string;
+    isRead: boolean;
+    /** Base64-encoded JSON metadata */
+    metadata: string;
+    /** Base64-encoded JSON parsed content */
+    parsed?: string;
+}
+/**
+ * Raw email data returned from the API (encrypted or plain).
+ * Use `isEncryptedEmailData()` type guard to discriminate.
+ * @internal
+ */
+export type EmailData = EncryptedEmailData | PlainEmailData;
 /**
  * The structure of encrypted data returned from the server.
  * @internal
@@ -187,17 +216,21 @@ export interface RawEmail {
     raw: string;
 }
 /**
+ * Raw email data from the API (encrypted or plain).
  * @internal
  */
 export interface RawEmailData {
     id: string;
-    encryptedRaw: EncryptedData;
+    /** Encrypted raw email content. Present for encrypted inboxes. */
+    encryptedRaw?: EncryptedData;
+    /** Base64-encoded raw email content. Present for plain inboxes. */
+    raw?: string;
 }
 /**
  * The result of an SPF (Sender Policy Framework) validation check.
  */
 export interface SPFResult {
-    result: 'pass' | 'fail' | 'softfail' | 'neutral' | 'none' | 'temperror' | 'permerror';
+    result: 'pass' | 'fail' | 'softfail' | 'neutral' | 'none' | 'temperror' | 'permerror' | 'skipped';
     domain?: string;
     ip?: string;
     details?: string;
@@ -206,7 +239,7 @@ export interface SPFResult {
  * The result of a DKIM (DomainKeys Identified Mail) validation check.
  */
 export interface DKIMResult {
-    result: 'pass' | 'fail' | 'none';
+    result: 'pass' | 'fail' | 'none' | 'skipped';
     domain?: string;
     selector?: string;
     signature?: string;
@@ -215,7 +248,7 @@ export interface DKIMResult {
  * The result of a DMARC (Domain-based Message Authentication, Reporting, and Conformance) validation check.
  */
 export interface DMARCResult {
-    result: 'pass' | 'fail' | 'none';
+    result: 'pass' | 'fail' | 'none' | 'skipped';
     policy?: 'none' | 'quarantine' | 'reject';
     aligned?: boolean;
     domain?: string;
@@ -224,7 +257,7 @@ export interface DMARCResult {
  * The result of a reverse DNS validation check.
  */
 export interface ReverseDNSResult {
-    verified: boolean;
+    result: 'pass' | 'fail' | 'none' | 'skipped';
     ip?: string;
     hostname?: string;
 }
@@ -291,12 +324,22 @@ export interface IEmail {
 export interface AuthResults extends AuthResultsData {
     validate(): AuthValidation;
 }
+/**
+ * The server's encryption policy for inboxes.
+ * - `always`: All inboxes are encrypted, no override allowed
+ * - `enabled`: Inboxes are encrypted by default, can request plain
+ * - `disabled`: Inboxes are plain by default, can request encrypted
+ * - `never`: All inboxes are plain, no override allowed
+ */
+export type EncryptionPolicy = 'always' | 'enabled' | 'disabled' | 'never';
 /**
  * Information about the VaultSandbox server.
  */
 export interface ServerInfo {
     /** Base64URL-encoded server signing public key for ML-DSA-65. */
     serverSigPk: string;
+    /** The server's encryption policy for inboxes. */
+    encryptionPolicy: EncryptionPolicy;
     /** Cryptographic algorithms supported by the server. */
     algs: {
         /** Key encapsulation mechanism algorithm (e.g., 'ML-KEM-768'). */
@@ -337,12 +380,16 @@ export interface SSEConfig {
     backoffMultiplier?: number;
 }
 /**
+ * SSE message data for new email notifications.
  * @internal
  */
 export interface SSEMessageData {
     inboxId: string;
     emailId: string;
-    encryptedMetadata: EncryptedData;
+    /** Encrypted metadata. Present for encrypted inboxes. */
+    encryptedMetadata?: EncryptedData;
+    /** Base64-encoded JSON metadata. Present for plain inboxes. */
+    metadata?: string;
 }
 /**
  * A quantum-safe keypair used for encryption and decryption.

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AA+ZH,qBAAqB;AAErB;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,iBAAiB;IAEpC;IADT,YACS,UAAkB,EACzB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,eAAU,GAAV,UAAU,CAAQ;QAIzB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,iBAAiB;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,iBAAiB;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,iBAAiB;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,iBAAiB;IAC/D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,iBAAiB;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,iBAAiB;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,iBAAiB;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,iBAAiB;IAC5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,iBAAiB;IAC3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,iBAAiB;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkdH,qBAAqB;AAErB;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,iBAAiB;IAEpC;IADT,YACS,UAAkB,EACzB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,eAAU,GAAV,UAAU,CAAQ;QAIzB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,iBAAiB;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,iBAAiB;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,iBAAiB;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,iBAAiB;IAC/D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,iBAAiB;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,iBAAiB;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,iBAAiB;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,iBAAiB;IAC5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,iBAAiB;IAC3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,iBAAiB;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF"}

package/dist/utils/email-utils.d.ts

@@ -1,14 +1,25 @@
 /**
  * Shared email utilities for decryption and filtering
  */
-import type { Keypair, EmailData, IEmail, WaitOptions } from '../types/index.js';
+import type { Keypair, EmailData, EncryptedEmailData, PlainEmailData, IEmail, WaitOptions } from '../types/index.js';
 import type { ApiClient } from '../http/api-client.js';
 /**
- * Decrypts an EmailData object into an Email instance.
+ * Type guard to determine if email data is encrypted.
+ * @param email - The email data to check
+ * @returns true if the email has encryptedMetadata (encrypted format)
+ */
+export declare function isEncryptedEmailData(email: EmailData): email is EncryptedEmailData;
+/**
+ * Decrypts an EncryptedEmailData object into an Email instance.
  * Expects full email data with encryptedParsed content.
  * IMPORTANT: Signature verification happens BEFORE decryption for security
  */
-export declare function decryptEmailData(emailData: EmailData, keypair: Keypair, emailAddress: string, apiClient: ApiClient): Promise<IEmail>;
+export declare function decryptEmailData(emailData: EncryptedEmailData, keypair: Keypair, emailAddress: string, apiClient: ApiClient): Promise<IEmail>;
+/**
+ * Decodes a PlainEmailData object into an Email instance.
+ * Plain emails have base64-encoded metadata and parsed content.
+ */
+export declare function decodeBase64EmailData(emailData: PlainEmailData, emailAddress: string, apiClient: ApiClient): IEmail;
 /**
  * Finds the first email matching the specified criteria
  */

package/dist/utils/email-utils.js

@@ -6,7 +6,15 @@ import { decryptMetadata, decryptParsed } from '../crypto/decrypt.js';
 import { verifySignature } from '../crypto/signature.js';
 import { fromBase64 } from '../crypto/utils.js';
 /**
- * Decrypts an EmailData object into an Email instance.
+ * Type guard to determine if email data is encrypted.
+ * @param email - The email data to check
+ * @returns true if the email has encryptedMetadata (encrypted format)
+ */
+export function isEncryptedEmailData(email) {
+    return 'encryptedMetadata' in email;
+}
+/**
+ * Decrypts an EncryptedEmailData object into an Email instance.
  * Expects full email data with encryptedParsed content.
  * IMPORTANT: Signature verification happens BEFORE decryption for security
  */
@@ -39,6 +47,36 @@ export async function decryptEmailData(emailData, keypair, emailAddress, apiClie
     }
     return new Email(emailData, metadata, parsed, emailAddress, apiClient, keypair);
 }
+/**
+ * Decodes a PlainEmailData object into an Email instance.
+ * Plain emails have base64-encoded metadata and parsed content.
+ */
+export function decodeBase64EmailData(emailData, emailAddress, apiClient) {
+    // Decode base64 metadata
+    const metadataJson = Buffer.from(emailData.metadata, 'base64').toString('utf-8');
+    const metadata = JSON.parse(metadataJson);
+    // Decode parsed content if available
+    let parsed = null;
+    if (emailData.parsed) {
+        const parsedJson = Buffer.from(emailData.parsed, 'base64').toString('utf-8');
+        parsed = JSON.parse(parsedJson);
+        // Transform attachment content from base64 strings to Uint8Array
+        // Same as encrypted path - server sends attachment content as base64
+        if (parsed?.attachments) {
+            parsed.attachments = parsed.attachments.map((att) => {
+                if (att.content && typeof att.content === 'string') {
+                    return {
+                        ...att,
+                        content: fromBase64(att.content),
+                    };
+                }
+                return att;
+            });
+        }
+    }
+    // Pass null for keypair since plain emails don't need decryption
+    return new Email(emailData, metadata, parsed, emailAddress, apiClient, null);
+}
 /**
  * Finds the first email matching the specified criteria
  */
@@ -56,6 +94,7 @@ export function findMatchingEmail(emails, options) {
 export function matchesFilters(email, options) {
     // Check subject filter
     if (options.subject) {
+        /* istanbul ignore else - defensive check for non-TypeScript callers */
         if (typeof options.subject === 'string') {
             if (!email.subject.includes(options.subject)) {
                 return false;
@@ -69,6 +108,7 @@ export function matchesFilters(email, options) {
     }
     // Check from filter
     if (options.from) {
+        /* istanbul ignore else - defensive check for non-TypeScript callers */
         if (typeof options.from === 'string') {
             if (!email.from.includes(options.from)) {
                 return false;

package/dist/utils/email-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-utils.js","sourceRoot":"","sources":["../../src/utils/email-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAoB,EACpB,OAAgB,EAChB,YAAoB,EACpB,SAAoB;IAEpB,oFAAoF;IACpF,eAAe,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAE7C,mBAAmB;IACnB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAoB,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAEhG,sCAAsC;IACtC,IAAI,MAAM,GAA2B,IAAI,CAAC;IAC1C,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;QAC9B,0CAA0C;QAC1C,eAAe,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC3C,MAAM,GAAG,MAAM,aAAa,CAAkB,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAElF,iEAAiE;QACjE,mGAAmG;QACnG,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;YACxB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAClD,2DAA2D;gBAC3D,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACnD,OAAO;wBACL,GAAG,GAAG;wBACN,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;qBACjC,CAAC;gBACJ,CAAC;gBACD,6CAA6C;gBAC7C,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAgB,EAAE,OAAoB;IACtE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAoB;IAChE,uBAAuB;IACvB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,YAAY,MAAM,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"email-utils.js","sourceRoot":"","sources":["../../src/utils/email-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAchD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACnD,OAAO,mBAAmB,IAAI,KAAK,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAA6B,EAC7B,OAAgB,EAChB,YAAoB,EACpB,SAAoB;IAEpB,oFAAoF;IACpF,eAAe,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAE7C,mBAAmB;IACnB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAoB,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAEhG,sCAAsC;IACtC,IAAI,MAAM,GAA2B,IAAI,CAAC;IAC1C,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;QAC9B,0CAA0C;QAC1C,eAAe,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC3C,MAAM,GAAG,MAAM,aAAa,CAAkB,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAElF,iEAAiE;QACjE,mGAAmG;QACnG,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;YACxB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAClD,2DAA2D;gBAC3D,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACnD,OAAO;wBACL,GAAG,GAAG;wBACN,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;qBACjC,CAAC;gBACJ,CAAC;gBACD,6CAA6C;gBAC7C,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAyB,EAAE,YAAoB,EAAE,SAAoB;IACzG,yBAAyB;IACzB,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAsB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAE7D,qCAAqC;IACrC,IAAI,MAAM,GAA2B,IAAI,CAAC;IAC1C,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7E,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEhC,iEAAiE;QACjE,qEAAqE;QACrE,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;YACxB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAuD,EAAE,EAAE;gBACtG,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACnD,OAAO;wBACL,GAAG,GAAG;wBACN,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;qBACjC,CAAC;gBACJ,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAgB,EAAE,OAAoB;IACtE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAoB;IAChE,uBAAuB;IACvB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,uEAAuE;QACvE,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,uEAAuE;QACvE,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,YAAY,MAAM,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/utils/hash.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Hash utilities for email synchronization
+ */
+/**
+ * Computes the emails hash using the spec algorithm:
+ * BASE64URL(SHA256(SORT(emailIds).join(",")))
+ *
+ * This hash is used to efficiently detect changes between
+ * the local and server email lists without transferring
+ * the full list.
+ *
+ * @param emailIds - Array of email IDs to hash
+ * @returns Base64URL encoded SHA-256 hash (no padding)
+ */
+export declare function computeEmailsHash(emailIds: string[]): string;

package/dist/utils/hash.js

@@ -0,0 +1,31 @@
+/**
+ * Hash utilities for email synchronization
+ */
+import { createHash } from 'crypto';
+/**
+ * Computes the emails hash using the spec algorithm:
+ * BASE64URL(SHA256(SORT(emailIds).join(",")))
+ *
+ * This hash is used to efficiently detect changes between
+ * the local and server email lists without transferring
+ * the full list.
+ *
+ * @param emailIds - Array of email IDs to hash
+ * @returns Base64URL encoded SHA-256 hash (no padding)
+ */
+export function computeEmailsHash(emailIds) {
+    const sorted = [...emailIds].sort();
+    const joined = sorted.join(',');
+    const hash = createHash('sha256').update(joined).digest();
+    return base64UrlEncode(hash);
+}
+/**
+ * Encodes a buffer as Base64URL (RFC 4648 §5) without padding.
+ *
+ * @param buffer - The buffer to encode
+ * @returns Base64URL encoded string without padding
+ */
+function base64UrlEncode(buffer) {
+    return buffer.toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+//# sourceMappingURL=hash.js.map

package/dist/utils/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../src/utils/hash.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAkB;IAClD,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1D,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC9F,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vaultsandbox/client",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Node.js SDK for VaultSandbox Gateway — quantum-safe email testing with zero crypto knowledge required. Create isolated inboxes, validate SPF/DKIM/DMARC, and test your full email stack in CI/CD pipelines.",
   "type": "module",
   "homepage": "https://github.com/vaultsandbox/client-node",
@@ -38,7 +38,7 @@
     "vaultsandbox"
   ],
   "author": "Antero <antero@vaultsandbox.com>",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"
   },
@@ -61,7 +61,7 @@
     "prepublishOnly": "npm run clean && npm run build"
   },
   "dependencies": {
-    "@noble/post-quantum": "0.5.2",
+    "@noble/post-quantum": "0.5.4",
     "axios": "1.13.2",
     "debug": "4.4.3",
     "eventsource": "4.1.0"
@@ -70,8 +70,8 @@
     "@types/debug": "4.1.12",
     "@types/jest": "30.0.0",
     "@types/node": "24.10.2",
-    "@typescript-eslint/eslint-plugin": "8.47.0",
-    "@typescript-eslint/parser": "8.49.0",
+    "@typescript-eslint/eslint-plugin": "8.52.0",
+    "@typescript-eslint/parser": "8.52.0",
     "dotenv": "17.2.3",
     "eslint": "9.39.1",
     "eslint-config-prettier": "10.1.8",