@vaultsandbox/client 0.6.1 → 0.8.0

package/dist/types/index.d.ts

@@ -36,6 +36,10 @@ export interface CreateInboxOptions {
     ttl?: number;
     /** A specific email address to request for the inbox. */
     emailAddress?: string;
+    /** Enable or disable email authentication checks (SPF, DKIM, DMARC, PTR). Omit to use server default. */
+    emailAuth?: boolean;
+    /** Request encrypted or plain inbox. Omit to use server default based on encryptionPolicy. */
+    encryption?: 'encrypted' | 'plain';
 }
 /**
  * Exported inbox data structure for sharing or backup purposes.
@@ -51,10 +55,12 @@ export interface ExportedInboxData {
     expiresAt: string;
     /** Unique hash identifier for the inbox */
     inboxHash: string;
-    /** Server's ML-DSA-65 public key (base64url encoded, 1952 bytes decoded) */
-    serverSigPk: string;
-    /** ML-KEM-768 secret key (base64url encoded, 2400 bytes decoded) */
-    secretKey: string;
+    /** Whether this inbox uses encryption. */
+    encrypted: boolean;
+    /** Server's ML-DSA-65 public key (base64url encoded, 1952 bytes decoded). Only present for encrypted inboxes. */
+    serverSigPk?: string;
+    /** ML-KEM-768 secret key (base64url encoded, 2400 bytes decoded). Only present for encrypted inboxes. */
+    secretKey?: string;
     /** ISO 8601 timestamp when the export was created */
     exportedAt: string;
 }
@@ -70,8 +76,12 @@ export interface InboxData {
     expiresAt: string;
     /** Base64URL-encoded SHA-256 hash of the client KEM public key, used for SSE subscriptions and API references. */
     inboxHash: string;
-    /** Base64URL-encoded server signing public key for verifying server signatures. */
-    serverSigPk: string;
+    /** Whether this inbox uses encryption. */
+    encrypted: boolean;
+    /** Base64URL-encoded server signing public key for verifying server signatures. Only present for encrypted inboxes. */
+    serverSigPk?: string;
+    /** Whether email authentication checks (SPF, DKIM, DMARC, PTR) are enabled for this inbox. */
+    emailAuth?: boolean;
 }
 /**
  * The synchronization status of an inbox.
@@ -105,10 +115,10 @@ export interface WaitForCountOptions {
     timeout?: number;
 }
 /**
- * Raw email data returned from the API.
+ * Encrypted email data returned from the API.
  * @internal
  */
-export interface EmailData {
+export interface EncryptedEmailData {
     id: string;
     inboxId: string;
     receivedAt: string;
@@ -116,6 +126,26 @@ export interface EmailData {
     encryptedMetadata: EncryptedData;
     encryptedParsed?: EncryptedData;
 }
+/**
+ * Plain (unencrypted) email data returned from the API.
+ * @internal
+ */
+export interface PlainEmailData {
+    id: string;
+    inboxId: string;
+    receivedAt: string;
+    isRead: boolean;
+    /** Base64-encoded JSON metadata */
+    metadata: string;
+    /** Base64-encoded JSON parsed content */
+    parsed?: string;
+}
+/**
+ * Raw email data returned from the API (encrypted or plain).
+ * Use `isEncryptedEmailData()` type guard to discriminate.
+ * @internal
+ */
+export type EmailData = EncryptedEmailData | PlainEmailData;
 /**
  * The structure of encrypted data returned from the server.
  * @internal
@@ -186,17 +216,21 @@ export interface RawEmail {
     raw: string;
 }
 /**
+ * Raw email data from the API (encrypted or plain).
  * @internal
  */
 export interface RawEmailData {
     id: string;
-    encryptedRaw: EncryptedData;
+    /** Encrypted raw email content. Present for encrypted inboxes. */
+    encryptedRaw?: EncryptedData;
+    /** Base64-encoded raw email content. Present for plain inboxes. */
+    raw?: string;
 }
 /**
  * The result of an SPF (Sender Policy Framework) validation check.
  */
 export interface SPFResult {
-    result: 'pass' | 'fail' | 'softfail' | 'neutral' | 'none' | 'temperror' | 'permerror';
+    result: 'pass' | 'fail' | 'softfail' | 'neutral' | 'none' | 'temperror' | 'permerror' | 'skipped';
     domain?: string;
     ip?: string;
     details?: string;
@@ -205,7 +239,7 @@ export interface SPFResult {
  * The result of a DKIM (DomainKeys Identified Mail) validation check.
  */
 export interface DKIMResult {
-    result: 'pass' | 'fail' | 'none';
+    result: 'pass' | 'fail' | 'none' | 'skipped';
     domain?: string;
     selector?: string;
     signature?: string;
@@ -214,7 +248,7 @@ export interface DKIMResult {
  * The result of a DMARC (Domain-based Message Authentication, Reporting, and Conformance) validation check.
  */
 export interface DMARCResult {
-    result: 'pass' | 'fail' | 'none';
+    result: 'pass' | 'fail' | 'none' | 'skipped';
     policy?: 'none' | 'quarantine' | 'reject';
     aligned?: boolean;
     domain?: string;
@@ -223,7 +257,7 @@ export interface DMARCResult {
  * The result of a reverse DNS validation check.
  */
 export interface ReverseDNSResult {
-    verified: boolean;
+    result: 'pass' | 'fail' | 'none' | 'skipped';
     ip?: string;
     hostname?: string;
 }
@@ -290,12 +324,22 @@ export interface IEmail {
 export interface AuthResults extends AuthResultsData {
     validate(): AuthValidation;
 }
+/**
+ * The server's encryption policy for inboxes.
+ * - `always`: All inboxes are encrypted, no override allowed
+ * - `enabled`: Inboxes are encrypted by default, can request plain
+ * - `disabled`: Inboxes are plain by default, can request encrypted
+ * - `never`: All inboxes are plain, no override allowed
+ */
+export type EncryptionPolicy = 'always' | 'enabled' | 'disabled' | 'never';
 /**
  * Information about the VaultSandbox server.
  */
 export interface ServerInfo {
     /** Base64URL-encoded server signing public key for ML-DSA-65. */
     serverSigPk: string;
+    /** The server's encryption policy for inboxes. */
+    encryptionPolicy: EncryptionPolicy;
     /** Cryptographic algorithms supported by the server. */
     algs: {
         /** Key encapsulation mechanism algorithm (e.g., 'ML-KEM-768'). */
@@ -336,12 +380,16 @@ export interface SSEConfig {
     backoffMultiplier?: number;
 }
 /**
+ * SSE message data for new email notifications.
  * @internal
  */
 export interface SSEMessageData {
     inboxId: string;
     emailId: string;
-    encryptedMetadata: EncryptedData;
+    /** Encrypted metadata. Present for encrypted inboxes. */
+    encryptedMetadata?: EncryptedData;
+    /** Base64-encoded JSON metadata. Present for plain inboxes. */
+    metadata?: string;
 }
 /**
  * A quantum-safe keypair used for encryption and decryption.
@@ -432,3 +480,165 @@ export declare class InvalidImportDataError extends VaultSandboxError {
 export declare class StrategyError extends VaultSandboxError {
     constructor(message: string);
 }
+/**
+ * An error thrown when a webhook is not found.
+ */
+export declare class WebhookNotFoundError extends VaultSandboxError {
+    constructor(message: string);
+}
+/**
+ * Webhook event types.
+ */
+export type WebhookEventType = 'email.received' | 'email.stored' | 'email.deleted';
+/**
+ * A single filter rule for webhook filtering.
+ */
+export interface FilterRule {
+    /** The field to filter on. */
+    field: string;
+    /** The operator to use for matching. */
+    operator: 'equals' | 'contains' | 'starts_with' | 'ends_with' | 'domain' | 'regex' | 'exists';
+    /** The value to match against. */
+    value: string;
+    /** Whether the match should be case sensitive. */
+    caseSensitive?: boolean;
+}
+/**
+ * Filter configuration for webhooks.
+ */
+export interface FilterConfig {
+    /** The filter rules to apply. */
+    rules: FilterRule[];
+    /** How to combine the rules: 'all' (AND) or 'any' (OR). */
+    mode: 'all' | 'any';
+    /** Whether to require email authentication to pass. */
+    requireAuth?: boolean;
+}
+/**
+ * A custom webhook template.
+ */
+export interface CustomTemplate {
+    /** Template type, must be 'custom'. */
+    type: 'custom';
+    /** The template body. */
+    body: string;
+    /** The content type for the webhook payload. */
+    contentType?: string;
+}
+/**
+ * Options for creating a webhook.
+ */
+export interface CreateWebhookOptions {
+    /** The URL to send webhook requests to. */
+    url: string;
+    /** The events that trigger the webhook. */
+    events: WebhookEventType[];
+    /** The template to use for formatting the webhook payload. */
+    template?: 'slack' | 'discord' | 'teams' | 'simple' | 'notification' | 'zapier' | 'default' | CustomTemplate;
+    /** Filter configuration to control which emails trigger the webhook. */
+    filter?: FilterConfig;
+    /** A description of the webhook. */
+    description?: string;
+}
+/**
+ * Options for updating a webhook.
+ */
+export interface UpdateWebhookOptions {
+    /** The URL to send webhook requests to. */
+    url?: string;
+    /** The events that trigger the webhook. */
+    events?: WebhookEventType[];
+    /** The template to use for formatting the webhook payload. Set to null to remove. */
+    template?: string | CustomTemplate | null;
+    /** Filter configuration to control which emails trigger the webhook. Set to null to remove. */
+    filter?: FilterConfig | null;
+    /** A description of the webhook. */
+    description?: string;
+    /** Whether the webhook is enabled. */
+    enabled?: boolean;
+}
+/**
+ * Webhook delivery statistics.
+ */
+export interface WebhookStats {
+    /** Total number of delivery attempts. */
+    totalDeliveries: number;
+    /** Number of successful deliveries. */
+    successfulDeliveries: number;
+    /** Number of failed deliveries. */
+    failedDeliveries: number;
+}
+/**
+ * Webhook data returned from the API.
+ */
+export interface WebhookData {
+    /** Unique identifier for the webhook. */
+    id: string;
+    /** The URL to send webhook requests to. */
+    url: string;
+    /** The events that trigger the webhook. */
+    events: WebhookEventType[];
+    /** The scope of the webhook. */
+    scope: 'global' | 'inbox';
+    /** The email address of the inbox (for inbox-scoped webhooks). */
+    inboxEmail?: string;
+    /** The hash of the inbox (for inbox-scoped webhooks). */
+    inboxHash?: string;
+    /** Whether the webhook is enabled. */
+    enabled: boolean;
+    /** The webhook secret for signature verification. Only included on creation. */
+    secret?: string;
+    /** The template configuration. */
+    template?: unknown;
+    /** The filter configuration. */
+    filter?: FilterConfig;
+    /** A description of the webhook. */
+    description?: string;
+    /** ISO 8601 timestamp when the webhook was created. */
+    createdAt: string;
+    /** ISO 8601 timestamp when the webhook was last updated. */
+    updatedAt?: string;
+    /** ISO 8601 timestamp of the last delivery attempt. */
+    lastDeliveryAt?: string;
+    /** The status of the last delivery attempt. */
+    lastDeliveryStatus?: 'success' | 'failed';
+    /** Delivery statistics. */
+    stats?: WebhookStats;
+}
+/**
+ * Response from listing webhooks.
+ */
+export interface WebhookListResponse {
+    /** The list of webhooks. */
+    webhooks: WebhookData[];
+    /** Total number of webhooks. */
+    total: number;
+}
+/**
+ * Response from testing a webhook.
+ */
+export interface TestWebhookResponse {
+    /** Whether the test was successful. */
+    success: boolean;
+    /** The HTTP status code returned by the webhook endpoint. */
+    statusCode?: number;
+    /** The response time in milliseconds. */
+    responseTime?: number;
+    /** The response body from the webhook endpoint. */
+    responseBody?: string;
+    /** Error message if the test failed. */
+    error?: string;
+    /** The payload that was sent to the webhook endpoint. */
+    payloadSent?: unknown;
+}
+/**
+ * Response from rotating a webhook secret.
+ */
+export interface RotateSecretResponse {
+    /** The webhook ID. */
+    id: string;
+    /** The new webhook secret. */
+    secret: string;
+    /** ISO 8601 timestamp until which the previous secret remains valid. */
+    previousSecretValidUntil: string;
+}

package/dist/types/index.js

@@ -124,4 +124,14 @@ export class StrategyError extends VaultSandboxError {
         Object.setPrototypeOf(this, StrategyError.prototype);
     }
 }
+/**
+ * An error thrown when a webhook is not found.
+ */
+export class WebhookNotFoundError extends VaultSandboxError {
+    constructor(message) {
+        super(message);
+        this.name = 'WebhookNotFoundError';
+        Object.setPrototypeOf(this, WebhookNotFoundError.prototype);
+    }
+}
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AA8ZH,qBAAqB;AAErB;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,iBAAiB;IAEpC;IADT,YACS,UAAkB,EACzB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,eAAU,GAAV,UAAU,CAAQ;QAIzB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,iBAAiB;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,iBAAiB;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,iBAAiB;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,iBAAiB;IAC/D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,iBAAiB;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,iBAAiB;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,iBAAiB;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,iBAAiB;IAC5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,iBAAiB;IAC3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,iBAAiB;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkdH,qBAAqB;AAErB;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,iBAAiB;IAEpC;IADT,YACS,UAAkB,EACzB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,eAAU,GAAV,UAAU,CAAQ;QAIzB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,iBAAiB;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,iBAAiB;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,iBAAiB;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,iBAAiB;IAC/D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,iBAAiB;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,iBAAiB;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,iBAAiB;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,iBAAiB;IAC5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,iBAAiB;IAC3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,iBAAiB;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,iBAAiB;IACzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/utils/email-utils.d.ts

@@ -1,14 +1,25 @@
 /**
  * Shared email utilities for decryption and filtering
  */
-import type { Keypair, EmailData, IEmail, WaitOptions } from '../types/index.js';
+import type { Keypair, EmailData, EncryptedEmailData, PlainEmailData, IEmail, WaitOptions } from '../types/index.js';
 import type { ApiClient } from '../http/api-client.js';
 /**
- * Decrypts an EmailData object into an Email instance.
+ * Type guard to determine if email data is encrypted.
+ * @param email - The email data to check
+ * @returns true if the email has encryptedMetadata (encrypted format)
+ */
+export declare function isEncryptedEmailData(email: EmailData): email is EncryptedEmailData;
+/**
+ * Decrypts an EncryptedEmailData object into an Email instance.
  * Expects full email data with encryptedParsed content.
  * IMPORTANT: Signature verification happens BEFORE decryption for security
  */
-export declare function decryptEmailData(emailData: EmailData, keypair: Keypair, emailAddress: string, apiClient: ApiClient): Promise<IEmail>;
+export declare function decryptEmailData(emailData: EncryptedEmailData, keypair: Keypair, emailAddress: string, apiClient: ApiClient): Promise<IEmail>;
+/**
+ * Decodes a PlainEmailData object into an Email instance.
+ * Plain emails have base64-encoded metadata and parsed content.
+ */
+export declare function decodeBase64EmailData(emailData: PlainEmailData, emailAddress: string, apiClient: ApiClient): IEmail;
 /**
  * Finds the first email matching the specified criteria
  */

package/dist/utils/email-utils.js

@@ -6,7 +6,15 @@ import { decryptMetadata, decryptParsed } from '../crypto/decrypt.js';
 import { verifySignature } from '../crypto/signature.js';
 import { fromBase64 } from '../crypto/utils.js';
 /**
- * Decrypts an EmailData object into an Email instance.
+ * Type guard to determine if email data is encrypted.
+ * @param email - The email data to check
+ * @returns true if the email has encryptedMetadata (encrypted format)
+ */
+export function isEncryptedEmailData(email) {
+    return 'encryptedMetadata' in email;
+}
+/**
+ * Decrypts an EncryptedEmailData object into an Email instance.
  * Expects full email data with encryptedParsed content.
  * IMPORTANT: Signature verification happens BEFORE decryption for security
  */
@@ -39,6 +47,36 @@ export async function decryptEmailData(emailData, keypair, emailAddress, apiClie
     }
     return new Email(emailData, metadata, parsed, emailAddress, apiClient, keypair);
 }
+/**
+ * Decodes a PlainEmailData object into an Email instance.
+ * Plain emails have base64-encoded metadata and parsed content.
+ */
+export function decodeBase64EmailData(emailData, emailAddress, apiClient) {
+    // Decode base64 metadata
+    const metadataJson = Buffer.from(emailData.metadata, 'base64').toString('utf-8');
+    const metadata = JSON.parse(metadataJson);
+    // Decode parsed content if available
+    let parsed = null;
+    if (emailData.parsed) {
+        const parsedJson = Buffer.from(emailData.parsed, 'base64').toString('utf-8');
+        parsed = JSON.parse(parsedJson);
+        // Transform attachment content from base64 strings to Uint8Array
+        // Same as encrypted path - server sends attachment content as base64
+        if (parsed?.attachments) {
+            parsed.attachments = parsed.attachments.map((att) => {
+                if (att.content && typeof att.content === 'string') {
+                    return {
+                        ...att,
+                        content: fromBase64(att.content),
+                    };
+                }
+                return att;
+            });
+        }
+    }
+    // Pass null for keypair since plain emails don't need decryption
+    return new Email(emailData, metadata, parsed, emailAddress, apiClient, null);
+}
 /**
  * Finds the first email matching the specified criteria
  */

package/dist/utils/email-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-utils.js","sourceRoot":"","sources":["../../src/utils/email-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAoB,EACpB,OAAgB,EAChB,YAAoB,EACpB,SAAoB;IAEpB,oFAAoF;IACpF,eAAe,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAE7C,mBAAmB;IACnB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAoB,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAEhG,sCAAsC;IACtC,IAAI,MAAM,GAA2B,IAAI,CAAC;IAC1C,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;QAC9B,0CAA0C;QAC1C,eAAe,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC3C,MAAM,GAAG,MAAM,aAAa,CAAkB,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAElF,iEAAiE;QACjE,mGAAmG;QACnG,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;YACxB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAClD,2DAA2D;gBAC3D,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACnD,OAAO;wBACL,GAAG,GAAG;wBACN,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;qBACjC,CAAC;gBACJ,CAAC;gBACD,6CAA6C;gBAC7C,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAgB,EAAE,OAAoB;IACtE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAoB;IAChE,uBAAuB;IACvB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,uEAAuE;QACvE,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,uEAAuE;QACvE,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,YAAY,MAAM,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"email-utils.js","sourceRoot":"","sources":["../../src/utils/email-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAchD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACnD,OAAO,mBAAmB,IAAI,KAAK,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAA6B,EAC7B,OAAgB,EAChB,YAAoB,EACpB,SAAoB;IAEpB,oFAAoF;IACpF,eAAe,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAE7C,mBAAmB;IACnB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAoB,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAEhG,sCAAsC;IACtC,IAAI,MAAM,GAA2B,IAAI,CAAC;IAC1C,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;QAC9B,0CAA0C;QAC1C,eAAe,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC3C,MAAM,GAAG,MAAM,aAAa,CAAkB,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAElF,iEAAiE;QACjE,mGAAmG;QACnG,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;YACxB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAClD,2DAA2D;gBAC3D,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACnD,OAAO;wBACL,GAAG,GAAG;wBACN,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;qBACjC,CAAC;gBACJ,CAAC;gBACD,6CAA6C;gBAC7C,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAyB,EAAE,YAAoB,EAAE,SAAoB;IACzG,yBAAyB;IACzB,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAsB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAE7D,qCAAqC;IACrC,IAAI,MAAM,GAA2B,IAAI,CAAC;IAC1C,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7E,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEhC,iEAAiE;QACjE,qEAAqE;QACrE,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;YACxB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAuD,EAAE,EAAE;gBACtG,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACnD,OAAO;wBACL,GAAG,GAAG;wBACN,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;qBACjC,CAAC;gBACJ,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAgB,EAAE,OAAoB;IACtE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAoB;IAChE,uBAAuB;IACvB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,uEAAuE;QACvE,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,uEAAuE;QACvE,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,YAAY,MAAM,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vaultsandbox/client",
-  "version": "0.6.1",
+  "version": "0.8.0",
   "description": "Node.js SDK for VaultSandbox Gateway — quantum-safe email testing with zero crypto knowledge required. Create isolated inboxes, validate SPF/DKIM/DMARC, and test your full email stack in CI/CD pipelines.",
   "type": "module",
   "homepage": "https://github.com/vaultsandbox/client-node",
@@ -38,7 +38,7 @@
     "vaultsandbox"
   ],
   "author": "Antero <antero@vaultsandbox.com>",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"
   },
@@ -61,7 +61,7 @@
     "prepublishOnly": "npm run clean && npm run build"
   },
   "dependencies": {
-    "@noble/post-quantum": "0.5.2",
+    "@noble/post-quantum": "0.5.4",
     "axios": "1.13.2",
     "debug": "4.4.3",
     "eventsource": "4.1.0"
@@ -70,8 +70,8 @@
     "@types/debug": "4.1.12",
     "@types/jest": "30.0.0",
     "@types/node": "24.10.2",
-    "@typescript-eslint/eslint-plugin": "8.47.0",
-    "@typescript-eslint/parser": "8.49.0",
+    "@typescript-eslint/eslint-plugin": "8.52.0",
+    "@typescript-eslint/parser": "8.52.0",
     "dotenv": "17.2.3",
     "eslint": "9.39.1",
     "eslint-config-prettier": "10.1.8",