mindoodb-app-sdk 0.0.37 → 0.0.39

package/README.md

@@ -242,6 +242,7 @@ Each database mapped to your app carries a set of **capabilities** that Haven co
 | `history`     | Access document revision history and historical snapshots    |
 | `attachments` | List, upload, download, remove, and preview file attachments |
 | `views`       | Create app-defined virtual views for this database           |
+| `sealedchannel` | Open an encrypted channel to a tenant-joined service       |
 
 ```ts
 const db = ctx.databases[0]!;
@@ -256,6 +257,40 @@ if (!db.capabilities.includes("delete")) {
 
 When the database is readable, `documents.list()` can also expose deleted document IDs by setting `status: "all"` or `status: "deleted"`. This is useful for app-side indexes and sync checkpoints.
 
+### Sealed channels
+
+Some services join the user's tenant as a member of their own and then talk to your app over HTTP — the MindooMail bridge is the first. A sealed channel is how you reach one without your app ever touching key material.
+
+Haven does the key exchange with the user's identity key, keeps the resulting AES key host-side, and seals and opens every payload. Your app holds an opaque `channelId` and exchanges plain JSON.
+
+```ts
+const opened = await session.openSealedChannel({
+  databaseId: db.id,
+  baseUrl: "https://bridge.example.com",
+});
+if (!opened.ok) {
+  // The user declined. Not an error — leave your UI intact.
+  return;
+}
+
+const reply = await session.sealedChannelRequest<JmapResponse>({
+  channelId: opened.channelId,
+  path: "/jmap/api",
+  payload: { using: [], methodCalls: [] },
+});
+
+await session.closeSealedChannel(opened.channelId);
+```
+
+Requirements and limits worth knowing before you design around this:
+
+- The binding named by `databaseId` needs the `sealedchannel` capability.
+- The user is asked to approve the origin the first time this app connects there. Haven stores that grant per identity, app, and origin, and does not ask again on later launches.
+- `baseUrl` must be a bare `https:` origin (or `http:` on loopback for local development) with no path, query, or credentials, and `path` may not leave that origin.
+- The service must allow Haven's origin in its CORS configuration — the request comes from the host, not from your app's iframe.
+
+There is deliberately no API for decrypting arbitrary data with the user's key. That would be a decryption oracle: doc keys wrapped to the same key are publicly readable in the tenant directory, so an app able to unwrap chosen ciphertext could obtain keys for databases it was never granted.
+
 ### Theme and viewport events
 
 Haven pushes two types of live events to your app:
@@ -1465,6 +1500,9 @@ Connect options: `launchId?`, `targetOrigin?`, `connectTimeoutMs?`.
 | `openDatabase(databaseId)`            | `Promise<MindooDBAppDatabase>`       |
 | `createViewNavigator(input)`          | `Promise<MindooDBAppViewNavigator>`  |
 | `openViewNavigator(viewId, options?)` | `Promise<MindooDBAppViewNavigator>`  |
+| `openSealedChannel(input)`            | `Promise<MindooDBAppSealedChannelOpenResult>` |
+| `sealedChannelRequest(input)`         | `Promise<T>`                         |
+| `closeSealedChannel(channelId)`       | `Promise<void>`                      |
 | `menus.show(input)`                   | `Promise<MindooDBAppShowMenuResult>` |
 | `menus.hide()`                        | `Promise<void>`                      |
 | `onThemeChange(listener)`             | `() => void` (unsubscribe)           |
@@ -1488,6 +1526,7 @@ Connect options: `launchId?`, `targetOrigin?`, `connectTimeoutMs?`.
 | `query(query?)`                    | `Promise<MindooDBAppQueryResult>`            |
 | `liveQuery(query, onResult)`       | `Promise<MindooDBAppLiveQuerySubscription>`  |
 | `list(query?)`                     | `Promise<MindooDBAppDocumentListResult>`     |
+| `listInaccessible(query?)`         | `Promise<MindooDBAppInaccessibleDocumentListResult>` |
 | `get(docId)`                       | `Promise<MindooDBAppDocument \| null>`       |
 | `getRichText(docId, path, opts?)`  | `Promise<MindooDBAppRichTextSnapshot>`       |
 | `getAutomergeSnapshot(docId, opts?)` | `Promise<MindooDBAppAutomergeSnapshot>`   |
@@ -1510,6 +1549,8 @@ Connect options: `launchId?`, `targetOrigin?`, `connectTimeoutMs?`.
 
 `list(query?)` accepts the changefeed query options documented above. The `cursor` value is an opaque checkpoint string managed by Haven and should be stored and passed back unchanged.
 
+`listInaccessible(query?)` returns documents that exist locally but the current user cannot decrypt (not a recipient, or missing the document key). Those ids never appear in `list` / `get`. Each row is unsigned store metadata only (`id`, `createdAt`, `decryptionKeyId`, optional `authorLabel`) — the app does not get CAS access. Use it to distinguish an empty database from one sealed to someone else.
+
 For `create(input)`, use `MindooDBAppCreateDocumentInput` with shape `{ set: Record<string, unknown>; decryptionKeyId?: string; recipients?: string[]; recipientOptions?: { includeSelf?: boolean }; id?: string }`. Omit both `decryptionKeyId` and `recipients` to use the database default shared key (`getDefaultCreateKeyId()` / `listCreateKeys()`). Pass `recipients` to encrypt the document for specific directory users (the launching user is included unless `recipientOptions.includeSelf` is `false`). Use `includeSelf: false` to write initial `set` values and hand the document to someone else — empty `recipients` with `includeSelf: false` is rejected. Changing that list later is `addRecipients` / `removeRecipients` / `setRecipients` — do not write `_encryptFor` via `update`. The optional `id` lets the app pick the document id instead of letting MindooDB generate an ObjectId; when provided it must match `/^[a-z][a-z0-9_]*$/` (lowercase only, since ids become on-disk filenames) and existing live documents with that id are returned as-is (idempotent create-if-missing). If an existing custom-id document is deleted, `create({ id })` undeletes it and preserves the previous document body. Documents created with the same custom id on different replicas converge correctly when synced.
 
 `delete(docId)` writes a lifecycle tombstone; it does not erase the document body from the append-only history. Use `undelete(docId)` to make the latest document state live again. If you want to record a deletion reason, first call `update(docId, { set: { intendedDeletionReason: "..." } })`, then call `delete(docId)`.

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { M as MindooDBAppAttachmentPreviewMode, a as MindooDBAppBridge, b as MindooDBAppDatabase, c as MindooDBAppDocument, d as MindooDBAppRichTextSpan, e as MindooDBAppRichTextSnapshot } from './types-Plb92iSn.js';
-export { f as MINDOODB_APP_SEAL_SIGNING_DOMAIN, g as MindooDBAppAccessDecision, h as MindooDBAppAccessTier, i as MindooDBAppAttachmentApi, j as MindooDBAppAttachmentChunk, k as MindooDBAppAttachmentInfo, l as MindooDBAppAttachmentPreviewOptions, m as MindooDBAppAttachmentPreviewSession, n as MindooDBAppAutomergeChangesPatch, o as MindooDBAppAutomergeChangesSince, p as MindooDBAppAutomergeGetOptions, q as MindooDBAppAutomergePatchResult, r as MindooDBAppAutomergeSnapshot, s as MindooDBAppBridgeConnectMessage, t as MindooDBAppBridgeConnectOptions, u as MindooDBAppBridgeConnectedMessage, v as MindooDBAppBridgeErrorPayload, w as MindooDBAppBridgeHandshakeErrorMessage, x as MindooDBAppBridgeLocaleChangedMessage, y as MindooDBAppBridgePortMessage, z as MindooDBAppBridgeQueryResultMessage, A as MindooDBAppBridgeRpcError, B as MindooDBAppBridgeRpcMessage, C as MindooDBAppBridgeRpcRequest, D as MindooDBAppBridgeRpcSuccess, E as MindooDBAppBridgeStreamAbortRequest, F as MindooDBAppBridgeStreamAck, G as MindooDBAppBridgeStreamCloseRequest, H as MindooDBAppBridgeStreamError, I as MindooDBAppBridgeStreamMessage, J as MindooDBAppBridgeStreamOpenResult, K as MindooDBAppBridgeStreamReadRequest, L as MindooDBAppBridgeStreamWriteRequest, N as MindooDBAppBridgeThemeChangedMessage, O as MindooDBAppBridgeUiPreferencesChangedMessage, P as MindooDBAppBridgeViewChangedMessage, Q as MindooDBAppBridgeViewportChangedMessage, R as MindooDBAppCapability, S as MindooDBAppConfiguredViewCategorizationStyle, T as MindooDBAppConfiguredViewColumn, U as MindooDBAppConfiguredViewColumnRole, V as MindooDBAppConfiguredViewExpressionMode, W as MindooDBAppConfiguredViewFieldExpression, X as MindooDBAppConfiguredViewFilterDefinition, Y as MindooDBAppConfiguredViewFilterMode, Z as MindooDBAppConfiguredViewFilterRule, _ as MindooDBAppConfiguredViewFormulaExpression, $ as MindooDBAppConfiguredViewFormulaFilterDefinition, a0 as MindooDBAppConfiguredViewPreviewMode, a1 as MindooDBAppConfiguredViewRuleFilterDefinition, a2 as MindooDBAppConfiguredViewRuleMatchMode, a3 as MindooDBAppConfiguredViewRuleOperator, a4 as MindooDBAppConfiguredViewValueExpression, a5 as MindooDBAppCreateDocumentInput, a6 as MindooDBAppCreateKeyInfo, a7 as MindooDBAppCreateViewInput, a8 as MindooDBAppCreateViewNavigatorInput, a9 as MindooDBAppDatabaseInfo, aa as MindooDBAppDirectoryApi, ab as MindooDBAppDirectoryEntry, ac as MindooDBAppDocumentApi, ad as MindooDBAppDocumentHeadCursorResult, ae as MindooDBAppDocumentHistoryEntry, af as MindooDBAppDocumentListQuery, ag as MindooDBAppDocumentListResult, ah as MindooDBAppDocumentQuery, ai as MindooDBAppDocumentRevisionId, aj as MindooDBAppDocumentScanPreset, ak as MindooDBAppDocumentSummary, al as MindooDBAppEntryAttachmentRef, am as MindooDBAppEntryProvenance, an as MindooDBAppExtractDocumentTextInput, ao as MindooDBAppExtractDocumentTextResult, ap as MindooDBAppExtractTextFormat, aq as MindooDBAppExtractionSetup, ar as MindooDBAppFulltextSetup, as as MindooDBAppHistoricalDocument, at as MindooDBAppHistoryQuery, au as MindooDBAppHostTheme, av as MindooDBAppIdentityApi, aw as MindooDBAppJsonListDeletePatch, ax as MindooDBAppJsonListInsertPatch, ay as MindooDBAppJsonPatch, az as MindooDBAppJsonSetPatch, aA as MindooDBAppJsonTextMarkPatch, aB as MindooDBAppJsonTextSplicePatch, aC as MindooDBAppJsonTextUnmarkPatch, aD as MindooDBAppJsonUnsetPatch, aE as MindooDBAppLaunchContext, aF as MindooDBAppLiveQuerySubscription, aG as MindooDBAppMenuAnchor, aH as MindooDBAppMenuApi, aI as MindooDBAppMenuCommandItem, aJ as MindooDBAppMenuDismissReason, aK as MindooDBAppMenuDismissedResult, aL as MindooDBAppMenuItem, aM as MindooDBAppMenuKind, aN as MindooDBAppMenuPlacement, aO as MindooDBAppMenuPointAnchor, aP as MindooDBAppMenuRect, aQ as MindooDBAppMenuRectAnchor, aR as MindooDBAppMenuSelectionResult, aS as MindooDBAppMenuSeparatorItem, aT as MindooDBAppQueryCoverage, aU as MindooDBAppQueryResult, aV as MindooDBAppQueryRow, aW as MindooDBAppQuerySortKey, aX as MindooDBAppQueryTextClause, aY as MindooDBAppReadableAttachmentStream, aZ as MindooDBAppRecipientOptions, a_ as MindooDBAppResolvedViewDefinition, a$ as MindooDBAppResolvedViewSource, b0 as MindooDBAppRevisionPhase, b1 as MindooDBAppRevisionVerification, b2 as MindooDBAppRichTextBlockSpan, b3 as MindooDBAppRichTextGetOptions, b4 as MindooDBAppRichTextImmutableString, b5 as MindooDBAppRichTextMarkRange, b6 as MindooDBAppRichTextMaterializeValue, b7 as MindooDBAppRichTextPatch, b8 as MindooDBAppRichTextScalar, b9 as MindooDBAppRichTextSpliceStep, ba as MindooDBAppRichTextStep, bb as MindooDBAppRichTextStepPatch, bc as MindooDBAppRichTextTextSpan, bd as MindooDBAppRuntime, be as MindooDBAppScanAttachmentOptions, bf as MindooDBAppScanAttachmentResult, bg as MindooDBAppScopedDocId, bh as MindooDBAppScopedDocumentSummary, bi as MindooDBAppSealIntent, bj as MindooDBAppSession, bk as MindooDBAppShowMenuInput, bl as MindooDBAppShowMenuResult, bm as MindooDBAppSignPreview, bn as MindooDBAppSignPreviewScope, bo as MindooDBAppSignStatementInput, bp as MindooDBAppSignStatementResult, bq as MindooDBAppTextEdit, br as MindooDBAppTextPatch, bs as MindooDBAppThemeMode, bt as MindooDBAppTimestampApi, bu as MindooDBAppTimestampInput, bv as MindooDBAppTimestampProvider, bw as MindooDBAppTimestampResult, bx as MindooDBAppUiPreferences, by as MindooDBAppUpdateDocumentInput, bz as MindooDBAppViewCursorDocumentListResult, bA as MindooDBAppViewCursorResult, bB as MindooDBAppViewEntry, bC as MindooDBAppViewEntryKind, bD as MindooDBAppViewNavigator, bE as MindooDBAppViewNavigatorExpansionState, bF as MindooDBAppViewNavigatorOpenOptions, bG as MindooDBAppViewNavigatorPageOptions, bH as MindooDBAppViewNavigatorPageResult, bI as MindooDBAppViewNavigatorRangeQuery, bJ as MindooDBAppViewNavigatorSelectionState, bK as MindooDBAppViewUpdateStats, bL as MindooDBAppViewport, bM as MindooDBAppWritableAttachmentStream } from './types-Plb92iSn.js';
+import { M as MindooDBAppAttachmentPreviewMode, a as MindooDBAppBridge, b as MindooDBAppDatabase, c as MindooDBAppDocument, d as MindooDBAppRichTextSpan, e as MindooDBAppRichTextSnapshot } from './types-DlZpHkfb.js';
+export { f as MINDOODB_APP_SEAL_SIGNING_DOMAIN, g as MindooDBAppAccessDecision, h as MindooDBAppAccessTier, i as MindooDBAppAttachmentApi, j as MindooDBAppAttachmentChunk, k as MindooDBAppAttachmentInfo, l as MindooDBAppAttachmentPreviewOptions, m as MindooDBAppAttachmentPreviewSession, n as MindooDBAppAutomergeChangesPatch, o as MindooDBAppAutomergeChangesSince, p as MindooDBAppAutomergeGetOptions, q as MindooDBAppAutomergePatchResult, r as MindooDBAppAutomergeSnapshot, s as MindooDBAppBridgeConnectMessage, t as MindooDBAppBridgeConnectOptions, u as MindooDBAppBridgeConnectedMessage, v as MindooDBAppBridgeErrorPayload, w as MindooDBAppBridgeHandshakeErrorMessage, x as MindooDBAppBridgeLocaleChangedMessage, y as MindooDBAppBridgePortMessage, z as MindooDBAppBridgeQueryResultMessage, A as MindooDBAppBridgeRpcError, B as MindooDBAppBridgeRpcMessage, C as MindooDBAppBridgeRpcRequest, D as MindooDBAppBridgeRpcSuccess, E as MindooDBAppBridgeStreamAbortRequest, F as MindooDBAppBridgeStreamAck, G as MindooDBAppBridgeStreamCloseRequest, H as MindooDBAppBridgeStreamError, I as MindooDBAppBridgeStreamMessage, J as MindooDBAppBridgeStreamOpenResult, K as MindooDBAppBridgeStreamReadRequest, L as MindooDBAppBridgeStreamWriteRequest, N as MindooDBAppBridgeThemeChangedMessage, O as MindooDBAppBridgeUiPreferencesChangedMessage, P as MindooDBAppBridgeViewChangedMessage, Q as MindooDBAppBridgeViewportChangedMessage, R as MindooDBAppCapability, S as MindooDBAppConfiguredViewCategorizationStyle, T as MindooDBAppConfiguredViewColumn, U as MindooDBAppConfiguredViewColumnRole, V as MindooDBAppConfiguredViewExpressionMode, W as MindooDBAppConfiguredViewFieldExpression, X as MindooDBAppConfiguredViewFilterDefinition, Y as MindooDBAppConfiguredViewFilterMode, Z as MindooDBAppConfiguredViewFilterRule, _ as MindooDBAppConfiguredViewFormulaExpression, $ as MindooDBAppConfiguredViewFormulaFilterDefinition, a0 as MindooDBAppConfiguredViewPreviewMode, a1 as MindooDBAppConfiguredViewRuleFilterDefinition, a2 as MindooDBAppConfiguredViewRuleMatchMode, a3 as MindooDBAppConfiguredViewRuleOperator, a4 as MindooDBAppConfiguredViewValueExpression, a5 as MindooDBAppCreateDocumentInput, a6 as MindooDBAppCreateKeyInfo, a7 as MindooDBAppCreateViewInput, a8 as MindooDBAppCreateViewNavigatorInput, a9 as MindooDBAppDatabaseInfo, aa as MindooDBAppDirectoryApi, ab as MindooDBAppDirectoryEntry, ac as MindooDBAppDocumentApi, ad as MindooDBAppDocumentHeadCursorResult, ae as MindooDBAppDocumentHistoryEntry, af as MindooDBAppDocumentListQuery, ag as MindooDBAppDocumentListResult, ah as MindooDBAppDocumentQuery, ai as MindooDBAppDocumentRevisionId, aj as MindooDBAppDocumentScanPreset, ak as MindooDBAppDocumentSummary, al as MindooDBAppEntryAttachmentRef, am as MindooDBAppEntryProvenance, an as MindooDBAppExtractDocumentTextInput, ao as MindooDBAppExtractDocumentTextResult, ap as MindooDBAppExtractTextFormat, aq as MindooDBAppExtractionSetup, ar as MindooDBAppFulltextSetup, as as MindooDBAppHistoricalDocument, at as MindooDBAppHistoryQuery, au as MindooDBAppHostTheme, av as MindooDBAppIdentityApi, aw as MindooDBAppInaccessibleDocument, ax as MindooDBAppInaccessibleDocumentListQuery, ay as MindooDBAppInaccessibleDocumentListResult, az as MindooDBAppJsonListDeletePatch, aA as MindooDBAppJsonListInsertPatch, aB as MindooDBAppJsonPatch, aC as MindooDBAppJsonSetPatch, aD as MindooDBAppJsonTextMarkPatch, aE as MindooDBAppJsonTextSplicePatch, aF as MindooDBAppJsonTextUnmarkPatch, aG as MindooDBAppJsonUnsetPatch, aH as MindooDBAppLaunchContext, aI as MindooDBAppLiveQuerySubscription, aJ as MindooDBAppMenuAnchor, aK as MindooDBAppMenuApi, aL as MindooDBAppMenuCommandItem, aM as MindooDBAppMenuDismissReason, aN as MindooDBAppMenuDismissedResult, aO as MindooDBAppMenuItem, aP as MindooDBAppMenuKind, aQ as MindooDBAppMenuPlacement, aR as MindooDBAppMenuPointAnchor, aS as MindooDBAppMenuRect, aT as MindooDBAppMenuRectAnchor, aU as MindooDBAppMenuSelectionResult, aV as MindooDBAppMenuSeparatorItem, aW as MindooDBAppQueryCoverage, aX as MindooDBAppQueryResult, aY as MindooDBAppQueryRow, aZ as MindooDBAppQuerySortKey, a_ as MindooDBAppQueryTextClause, a$ as MindooDBAppReadableAttachmentStream, b0 as MindooDBAppRecipientOptions, b1 as MindooDBAppResolvedViewDefinition, b2 as MindooDBAppResolvedViewSource, b3 as MindooDBAppRevisionPhase, b4 as MindooDBAppRevisionVerification, b5 as MindooDBAppRichTextBlockSpan, b6 as MindooDBAppRichTextGetOptions, b7 as MindooDBAppRichTextImmutableString, b8 as MindooDBAppRichTextMarkRange, b9 as MindooDBAppRichTextMaterializeValue, ba as MindooDBAppRichTextPatch, bb as MindooDBAppRichTextScalar, bc as MindooDBAppRichTextSpliceStep, bd as MindooDBAppRichTextStep, be as MindooDBAppRichTextStepPatch, bf as MindooDBAppRichTextTextSpan, bg as MindooDBAppRuntime, bh as MindooDBAppScanAttachmentOptions, bi as MindooDBAppScanAttachmentResult, bj as MindooDBAppScopedDocId, bk as MindooDBAppScopedDocumentSummary, bl as MindooDBAppSealIntent, bm as MindooDBAppSealedChannelOpenInput, bn as MindooDBAppSealedChannelOpenResult, bo as MindooDBAppSealedChannelRequestInput, bp as MindooDBAppSession, bq as MindooDBAppShowMenuInput, br as MindooDBAppShowMenuResult, bs as MindooDBAppSignPreview, bt as MindooDBAppSignPreviewScope, bu as MindooDBAppSignStatementInput, bv as MindooDBAppSignStatementResult, bw as MindooDBAppTextEdit, bx as MindooDBAppTextPatch, by as MindooDBAppThemeMode, bz as MindooDBAppTimestampApi, bA as MindooDBAppTimestampInput, bB as MindooDBAppTimestampProvider, bC as MindooDBAppTimestampResult, bD as MindooDBAppUiPreferences, bE as MindooDBAppUpdateDocumentInput, bF as MindooDBAppViewCursorDocumentListResult, bG as MindooDBAppViewCursorResult, bH as MindooDBAppViewEntry, bI as MindooDBAppViewEntryKind, bJ as MindooDBAppViewNavigator, bK as MindooDBAppViewNavigatorExpansionState, bL as MindooDBAppViewNavigatorOpenOptions, bM as MindooDBAppViewNavigatorPageOptions, bN as MindooDBAppViewNavigatorPageResult, bO as MindooDBAppViewNavigatorRangeQuery, bP as MindooDBAppViewNavigatorSelectionState, bQ as MindooDBAppViewUpdateStats, bR as MindooDBAppViewport, bS as MindooDBAppWritableAttachmentStream } from './types-DlZpHkfb.js';
 import { MindooDBAppBooleanExpression } from 'mindoodb-view-language';
 export { MindooDBAppBooleanExpression, MindooDBAppExpression, MindooDBAppFilterDefinition, MindooDBAppViewCategoryChildrenPageRequest, MindooDBAppViewColumn, MindooDBAppViewColumnRole, MindooDBAppViewDefinition, MindooDBAppViewExpansionState, MindooDBAppViewExpressionBase, MindooDBAppViewExpressionDatePart, MindooDBAppViewExpressionOperation, MindooDBAppViewFieldExpression, MindooDBAppViewIfExpression, MindooDBAppViewLetExpression, MindooDBAppViewLiteralExpression, MindooDBAppViewLookupByPath, MindooDBAppViewOperationExpression, MindooDBAppViewOriginExpression, MindooDBAppViewPageRequest, MindooDBAppViewPageResult, MindooDBAppViewRow, MindooDBAppViewSortDirection, MindooDBAppViewTotalMode, MindooDBAppViewValueExpressionRef, MindooDBAppViewVariableExpression, createViewLanguage } from 'mindoodb-view-language';
 import { MindooDB, MindooQuerySortKey, MindooQueryOptions, MindooQueryResult } from 'mindoodb';

package/dist/index.js

@@ -758,6 +758,10 @@ var MindooDBAppDatabaseImpl = class {
         databaseId: this.databaseId,
         query: query ?? {}
       }),
+      listInaccessible: async (query) => await this.rpc.call("documents.listInaccessible", {
+        databaseId: this.databaseId,
+        query: query ?? {}
+      }),
       query: async (query) => await this.rpc.call("documents.query", {
         databaseId: this.databaseId,
         query: normalizeDocumentQuery(query)
@@ -1176,6 +1180,22 @@ var MindooDBAppSessionImpl = class {
   async getLaunchContext() {
     return await this.rpc.call("session.getLaunchContext", {});
   }
+  /**
+   * Asks the host to open an encrypted channel to a tenant-joined service.
+   * The host owns the key exchange and the resulting session key; nothing
+   * secret crosses back into the app.
+   */
+  async openSealedChannel(input) {
+    return await this.rpc.call("sealedChannel.open", input);
+  }
+  /** Sends one request through an open channel; the host seals and opens it. */
+  async sealedChannelRequest(input) {
+    return await this.rpc.call("sealedChannel.request", input);
+  }
+  /** Discards a channel host-side. */
+  async closeSealedChannel(channelId) {
+    await this.rpc.call("sealedChannel.close", { channelId });
+  }
   /** Returns the product names currently licensed in the Haven host. */
   async getLicensedProducts() {
     return await this.rpc.call("session.getLicensedProducts", {});

package/dist/testing/index.d.ts

@@ -1,4 +1,4 @@
-import { a8 as MindooDBAppCreateViewNavigatorInput, bD as MindooDBAppViewNavigator, aE as MindooDBAppLaunchContext, a9 as MindooDBAppDatabaseInfo, ac as MindooDBAppDocumentApi, bF as MindooDBAppViewNavigatorOpenOptions, i as MindooDBAppAttachmentApi, av as MindooDBAppIdentityApi, bt as MindooDBAppTimestampApi, aa as MindooDBAppDirectoryApi, c as MindooDBAppDocument, ar as MindooDBAppFulltextSetup, aq as MindooDBAppExtractionSetup, a as MindooDBAppBridge, bj as MindooDBAppSession, C as MindooDBAppBridgeRpcRequest, au as MindooDBAppHostTheme, bL as MindooDBAppViewport, bx as MindooDBAppUiPreferences, aU as MindooDBAppQueryResult, bK as MindooDBAppViewUpdateStats, y as MindooDBAppBridgePortMessage } from '../types-Plb92iSn.js';
+import { a8 as MindooDBAppCreateViewNavigatorInput, bJ as MindooDBAppViewNavigator, aH as MindooDBAppLaunchContext, a9 as MindooDBAppDatabaseInfo, ac as MindooDBAppDocumentApi, bL as MindooDBAppViewNavigatorOpenOptions, i as MindooDBAppAttachmentApi, av as MindooDBAppIdentityApi, bz as MindooDBAppTimestampApi, aa as MindooDBAppDirectoryApi, c as MindooDBAppDocument, ar as MindooDBAppFulltextSetup, aq as MindooDBAppExtractionSetup, a as MindooDBAppBridge, bp as MindooDBAppSession, C as MindooDBAppBridgeRpcRequest, au as MindooDBAppHostTheme, bR as MindooDBAppViewport, bD as MindooDBAppUiPreferences, aX as MindooDBAppQueryResult, bQ as MindooDBAppViewUpdateStats, y as MindooDBAppBridgePortMessage } from '../types-DlZpHkfb.js';
 import * as mindoodb from 'mindoodb';
 import 'mindoodb-view-language';
 
@@ -38,7 +38,12 @@ interface MockSeedDocument {
     id: string;
     data: Record<string, unknown>;
     updatedAt?: string;
+    createdAt?: string;
     isDeleted?: boolean;
+    /** When true the doc is hidden from `list`/`get` and returned by `listInaccessible`. */
+    inaccessible?: boolean;
+    decryptionKeyId?: string;
+    authorLabel?: string;
     heads?: string[];
     attachments?: MindooDBAppDocument["attachments"];
 }
@@ -67,10 +72,31 @@ interface MockMindooDBAppDatabaseDefinition {
      */
     extractionSetup?: MindooDBAppExtractionSetup | null;
 }
+/**
+ * Stands in for the host-owned sealed channel.
+ *
+ * The mock carries no crypto: Haven does the key exchange and the AES sealing
+ * for real, and a test host has no identity key to do it with. What a test can
+ * exercise is the shape apps actually depend on — that a declined channel is an
+ * ordinary `ok: false`, and that a request round-trips plain JSON.
+ */
+interface MockSealedChannelOptions {
+    /** When true, `openSealedChannel` resolves `{ ok: false, reason: "declined" }`. */
+    declined?: boolean;
+    /** Username reported by a successfully opened channel. Defaults to the launch context user. */
+    username?: string;
+    /** Handles each `sealedChannelRequest`. Without it, requests throw. */
+    onRequest?: (input: {
+        baseUrl: string;
+        path: string;
+        payload: unknown;
+    }) => MaybePromise<unknown>;
+}
 interface CreateMockMindooDBAppSessionOptions {
     launchContext?: Partial<MindooDBAppLaunchContext>;
     databases?: MockMindooDBAppDatabaseDefinition[];
     onDisconnect?: () => MaybePromise<void>;
+    sealedChannel?: MockSealedChannelOptions;
 }
 interface MockMindooDBAppSessionController {
     bridge: MindooDBAppBridge;
@@ -123,4 +149,4 @@ interface FakeBridgeHostController {
 }
 declare function createFakeBridgeHost(options?: CreateFakeBridgeHostOptions): FakeBridgeHostController;
 
-export { type CreateFakeBridgeHostOptions, type CreateMockMindooDBAppSessionOptions, type EvaluatingViewDocument, type FakeBridgeHostController, type FakeBridgePortMessageHandler, type FakeBridgeRequestHandler, type MockMindooDBAppDatabaseDefinition, type MockMindooDBAppSessionController, type MockSeedDocument, createEvaluatingViewNavigator, createFakeBridgeHost, createMockMindooDBAppBridge, createMockMindooDBAppSession, loadMindoodbForTesting };
+export { type CreateFakeBridgeHostOptions, type CreateMockMindooDBAppSessionOptions, type EvaluatingViewDocument, type FakeBridgeHostController, type FakeBridgePortMessageHandler, type FakeBridgeRequestHandler, type MockMindooDBAppDatabaseDefinition, type MockMindooDBAppSessionController, type MockSealedChannelOptions, type MockSeedDocument, createEvaluatingViewNavigator, createFakeBridgeHost, createMockMindooDBAppBridge, createMockMindooDBAppSession, loadMindoodbForTesting };

package/dist/testing/index.js

@@ -942,7 +942,7 @@ function runMockDocumentQuery(storedDocuments, databaseId, query) {
   const sortBy = query?.sortBy && query.sortBy.length > 0 ? query.sortBy : query?.text ? [{ special: "textScore", direction: "descending" }] : [];
   const matches = [];
   for (const document of storedDocuments.values()) {
-    if (document.isDeleted) {
+    if (document.isDeleted || document.inaccessible) {
       continue;
     }
     let textScore;
@@ -1228,7 +1228,11 @@ function createDatabaseHandle(definition) {
       heads: seed.heads ? [...seed.heads] : void 0,
       attachments: seed.attachments ? structuredClone(seed.attachments) : [],
       updatedAt: seed.updatedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
-      isDeleted: seed.isDeleted ?? false
+      isDeleted: seed.isDeleted ?? false,
+      inaccessible: seed.inaccessible ?? false,
+      decryptionKeyId: seed.decryptionKeyId,
+      authorLabel: seed.authorLabel,
+      createdAt: seed.createdAt
     });
   }
   const liveQuerySubscriptions = /* @__PURE__ */ new Set();
@@ -1325,7 +1329,7 @@ function createDatabaseHandle(definition) {
       const offset = decodeMockListCursor(query?.cursor) + skip;
       const metadataOnly = query?.metadataOnly ?? false;
       const idPrefix = query?.idPrefix;
-      const items = Array.from(storedDocuments.values()).filter(
+      const items = Array.from(storedDocuments.values()).filter((document) => !document.inaccessible).filter(
         (document) => status === "all" ? true : status === "deleted" ? document.isDeleted : !document.isDeleted
       ).filter((document) => matchesMockIdPrefix(document.id, idPrefix)).filter(
         (document) => metadataOnly ? true : matchesDocumentFilter(document, query?.filter)
@@ -1362,9 +1366,19 @@ function createDatabaseHandle(definition) {
         cursor: String(storedDocuments.size)
       };
     },
+    async listInaccessible(query) {
+      const idPrefix = query?.idPrefix;
+      const items = Array.from(storedDocuments.values()).filter((document) => document.inaccessible).filter((document) => matchesMockIdPrefix(document.id, idPrefix)).sort((left, right) => left.id.localeCompare(right.id)).map((document) => ({
+        id: document.id,
+        createdAt: document.createdAt ?? document.updatedAt ?? (/* @__PURE__ */ new Date(0)).toISOString(),
+        decryptionKeyId: document.decryptionKeyId ?? "sealed",
+        authorLabel: document.authorLabel
+      }));
+      return { items };
+    },
     async get(_docId) {
       const document = storedDocuments.get(_docId);
-      if (!document || document.isDeleted) {
+      if (!document || document.isDeleted || document.inaccessible) {
         return null;
       }
       return {
@@ -1803,7 +1817,7 @@ function createDatabaseHandle(definition) {
   };
   return {
     handle: databaseHandle,
-    listViewDocuments: () => Array.from(storedDocuments.values()).filter((document) => !document.isDeleted).map((document) => ({
+    listViewDocuments: () => Array.from(storedDocuments.values()).filter((document) => !document.isDeleted && !document.inaccessible).map((document) => ({
       origin: definition.info.id,
       docId: document.id,
       data: structuredClone(document.data),
@@ -1823,6 +1837,18 @@ function createMockSessionState(options = {}) {
   const sessionViews = /* @__PURE__ */ new Map();
   let activeMenuResolve = null;
   let databaseInfos = [];
+  const openSealedChannels = /* @__PURE__ */ new Map();
+  const requireCapability = (databaseId, capability) => {
+    const info = databaseInfos.find((entry) => entry.id === databaseId);
+    if (!info) {
+      throw new Error(`Unknown database "${databaseId}"`);
+    }
+    if (!info.capabilities.includes(capability)) {
+      throw new Error(
+        `Database "${databaseId}" was not granted the "${capability}" capability`
+      );
+    }
+  };
   const menus = {
     async show(_input) {
       if (activeMenuResolve) {
@@ -1883,6 +1909,36 @@ function createMockSessionState(options = {}) {
     async getLaunchContext() {
       return mergeLaunchContext(launchContext);
     },
+    async openSealedChannel(input) {
+      if (options.sealedChannel?.declined) {
+        return { ok: false, reason: "declined" };
+      }
+      requireCapability(input.databaseId, "sealedchannel");
+      const channelId = `mock-channel-${openSealedChannels.size + 1}`;
+      openSealedChannels.set(channelId, input.baseUrl);
+      return {
+        ok: true,
+        channelId,
+        username: options.sealedChannel?.username ?? launchContext.user.username,
+        expiresAt: Date.now() + 12 * 60 * 60 * 1e3
+      };
+    },
+    async sealedChannelRequest(input) {
+      const baseUrl = openSealedChannels.get(input.channelId);
+      if (baseUrl == null) {
+        throw new Error(`Unknown sealed channel "${input.channelId}"`);
+      }
+      const handler = options.sealedChannel?.onRequest;
+      if (!handler) {
+        throw new Error(
+          "sealedChannelRequest is not configured in this test session (pass sealedChannel.onRequest)"
+        );
+      }
+      return await handler({ baseUrl, path: input.path, payload: input.payload });
+    },
+    async closeSealedChannel(channelId) {
+      openSealedChannels.delete(channelId);
+    },
     async getLicensedProducts() {
       return [...launchContext.licensedProducts ?? []];
     },
@@ -2243,10 +2299,25 @@ function createFakeBridgeHost(options = {}) {
       case "session.disconnect":
         await state.session.disconnect();
         return { ok: true };
+      case "sealedChannel.open":
+        return await state.session.openSealedChannel(
+          params
+        );
+      case "sealedChannel.request":
+        return await state.session.sealedChannelRequest(
+          params
+        );
+      case "sealedChannel.close":
+        await state.session.closeSealedChannel(String(params.channelId));
+        return { ok: true };
       case "documents.list":
         return await state.getDatabase(String(params.databaseId)).documents.list(
           params.query
         );
+      case "documents.listInaccessible":
+        return await state.getDatabase(String(params.databaseId)).documents.listInaccessible(
+          params.query
+        );
       case "documents.getHeadCursor":
         return await state.getDatabase(String(params.databaseId)).documents.getHeadCursor();
       case "database.getFulltextSetup":

package/dist/{types-Plb92iSn.d.ts → types-DlZpHkfb.d.ts}

@@ -102,7 +102,7 @@ interface MindooDBAppResolvedViewDefinition {
     columns: MindooDBAppConfiguredViewColumn[];
 }
 /** Permission/capability flags exposed for a database binding inside the app session. */
-type MindooDBAppCapability = "read" | "create" | "update" | "delete" | "history" | "attachments" | "views" | "sign" | "timestamps" | "directory";
+type MindooDBAppCapability = "read" | "create" | "update" | "delete" | "history" | "attachments" | "views" | "sign" | "timestamps" | "directory" | "sealedchannel";
 /** Metadata about the current app launch supplied by the Haven host. */
 interface MindooDBAppLaunchContext {
     appId: string;
@@ -359,6 +359,30 @@ interface MindooDBAppDocumentListQuery {
      */
     idPrefix?: string;
 }
+/** Query options for {@link MindooDBAppDocumentApi.listInaccessible}. */
+interface MindooDBAppInaccessibleDocumentListQuery {
+    /**
+     * Restrict the listing to documents whose id matches this prefix. Matching is
+     * the same boundary-aware rule as {@link MindooDBAppDocumentListQuery.idPrefix}.
+     */
+    idPrefix?: string;
+}
+/**
+ * A document that exists in the local store but the current user cannot open.
+ * Built from unsigned `doc_create` (or `doc_snapshot`) metadata — no payload
+ * and no CAS access for the app.
+ */
+interface MindooDBAppInaccessibleDocument {
+    id: string;
+    createdAt: string;
+    decryptionKeyId: string;
+    /** Directory display name of the origin author, when the host can resolve it. */
+    authorLabel?: string;
+}
+/** Result of {@link MindooDBAppDocumentApi.listInaccessible}. */
+interface MindooDBAppInaccessibleDocumentListResult {
+    items: MindooDBAppInaccessibleDocument[];
+}
 /** Paged result returned by `documents.list()`. */
 interface MindooDBAppDocumentListResult {
     items: MindooDBAppDocumentSummary[];
@@ -1177,6 +1201,14 @@ interface MindooDBAppDocumentApi {
      * {@link query}. Requires the `read` capability.
      */
     list(query?: MindooDBAppDocumentListQuery): Promise<MindooDBAppDocumentListResult>;
+    /**
+     * Documents present in this database that the current user cannot decrypt
+     * (not a recipient, or missing `decryptionKeyId`). They do not appear in
+     * {@link list} or {@link get}. Each row is store-metadata only: id,
+     * origin timestamp, key id, and the author's directory label when known.
+     * Requires the `read` capability.
+     */
+    listInaccessible(query?: MindooDBAppInaccessibleDocumentListQuery): Promise<MindooDBAppInaccessibleDocumentListResult>;
     /**
      * The database's latest changefeed cursor without loading any documents.
      * Useful as a baseline checkpoint before starting an incremental
@@ -1934,6 +1966,43 @@ interface MindooDBAppDatabase {
      */
     setExtractionSetup(config: MindooDBAppExtractionSetup | null): Promise<void>;
 }
+/** Request to open a host-owned encrypted channel to a tenant-joined service. */
+interface MindooDBAppSealedChannelOpenInput {
+    /** Binding whose `sealedchannel` capability authorises the channel. */
+    databaseId: string;
+    /**
+     * Base URL of the service, e.g. `https://bridge.example.com`. Must be
+     * `https:` unless it is a loopback host, and carries no path, query or
+     * fragment.
+     */
+    baseUrl: string;
+}
+/**
+ * Outcome of {@link MindooDBAppSession.openSealedChannel}.
+ *
+ * Declining is an ordinary outcome, not an error, so an app can tell "the user
+ * said no" from "the handshake failed" without inspecting error strings.
+ */
+type MindooDBAppSealedChannelOpenResult = {
+    ok: true;
+    /** Handle for {@link MindooDBAppSession.sealedChannelRequest}. Not a secret. */
+    channelId: string;
+    /** Tenant username the far side authenticated this channel as. */
+    username: string;
+    /** Epoch milliseconds after which the far side stops accepting the channel. */
+    expiresAt: number;
+} | {
+    ok: false;
+    reason: "declined";
+};
+/** One request over an open sealed channel. */
+interface MindooDBAppSealedChannelRequestInput {
+    channelId: string;
+    /** Path below the channel's base URL, e.g. `/jmap/api`. */
+    path: string;
+    /** JSON-serialisable body. Sealed by the host before it leaves the device. */
+    payload: unknown;
+}
 /** Connected session between the running app and the Haven host. */
 interface MindooDBAppSession {
     /**
@@ -1942,6 +2011,26 @@ interface MindooDBAppSession {
      * mapped to this app. Cached — repeated calls do not hit the host again.
      */
     getLaunchContext(): Promise<MindooDBAppLaunchContext>;
+    /**
+     * Open an end-to-end encrypted channel to a service that has joined the
+     * user's tenant, such as a mail bridge.
+     *
+     * Haven performs the key exchange with the user's identity key and keeps the
+     * resulting AES key host-side, so the app sends and receives plain JSON and
+     * never handles key material. Requires the `sealedchannel` capability on
+     * `databaseId` plus the user's consent for the target origin.
+     *
+     * Resolves with `ok: false` when the user declines — an ordinary outcome, not
+     * an error.
+     */
+    openSealedChannel(input: MindooDBAppSealedChannelOpenInput): Promise<MindooDBAppSealedChannelOpenResult>;
+    /**
+     * Send `payload` through an open channel and return the decrypted reply.
+     * `path` is resolved against the channel's base URL and may not escape it.
+     */
+    sealedChannelRequest<T = unknown>(input: MindooDBAppSealedChannelRequestInput): Promise<T>;
+    /** Discard a channel and its key. Idempotent. */
+    closeSealedChannel(channelId: string): Promise<void>;
     /**
      * Product license identifiers active for the current Haven user, for apps
      * that gate features on licensing.
@@ -2026,4 +2115,4 @@ interface MindooDBAppBridge {
     connect(options?: MindooDBAppBridgeConnectOptions): Promise<MindooDBAppSession>;
 }
 
-export { type MindooDBAppConfiguredViewFormulaFilterDefinition as $, type MindooDBAppBridgeRpcError as A, type MindooDBAppBridgeRpcMessage as B, type MindooDBAppBridgeRpcRequest as C, type MindooDBAppBridgeRpcSuccess as D, type MindooDBAppBridgeStreamAbortRequest as E, type MindooDBAppBridgeStreamAck as F, type MindooDBAppBridgeStreamCloseRequest as G, type MindooDBAppBridgeStreamError as H, type MindooDBAppBridgeStreamMessage as I, type MindooDBAppBridgeStreamOpenResult as J, type MindooDBAppBridgeStreamReadRequest as K, type MindooDBAppBridgeStreamWriteRequest as L, type MindooDBAppAttachmentPreviewMode as M, type MindooDBAppBridgeThemeChangedMessage as N, type MindooDBAppBridgeUiPreferencesChangedMessage as O, type MindooDBAppBridgeViewChangedMessage as P, type MindooDBAppBridgeViewportChangedMessage as Q, type MindooDBAppCapability as R, type MindooDBAppConfiguredViewCategorizationStyle as S, type MindooDBAppConfiguredViewColumn as T, type MindooDBAppConfiguredViewColumnRole as U, type MindooDBAppConfiguredViewExpressionMode as V, type MindooDBAppConfiguredViewFieldExpression as W, type MindooDBAppConfiguredViewFilterDefinition as X, type MindooDBAppConfiguredViewFilterMode as Y, type MindooDBAppConfiguredViewFilterRule as Z, type MindooDBAppConfiguredViewFormulaExpression as _, type MindooDBAppBridge as a, type MindooDBAppResolvedViewSource as a$, type MindooDBAppConfiguredViewPreviewMode as a0, type MindooDBAppConfiguredViewRuleFilterDefinition as a1, type MindooDBAppConfiguredViewRuleMatchMode as a2, type MindooDBAppConfiguredViewRuleOperator as a3, type MindooDBAppConfiguredViewValueExpression as a4, type MindooDBAppCreateDocumentInput as a5, type MindooDBAppCreateKeyInfo as a6, type MindooDBAppCreateViewInput as a7, type MindooDBAppCreateViewNavigatorInput as a8, type MindooDBAppDatabaseInfo as a9, type MindooDBAppJsonTextMarkPatch as aA, type MindooDBAppJsonTextSplicePatch as aB, type MindooDBAppJsonTextUnmarkPatch as aC, type MindooDBAppJsonUnsetPatch as aD, type MindooDBAppLaunchContext as aE, type MindooDBAppLiveQuerySubscription as aF, type MindooDBAppMenuAnchor as aG, type MindooDBAppMenuApi as aH, type MindooDBAppMenuCommandItem as aI, type MindooDBAppMenuDismissReason as aJ, type MindooDBAppMenuDismissedResult as aK, type MindooDBAppMenuItem as aL, type MindooDBAppMenuKind as aM, type MindooDBAppMenuPlacement as aN, type MindooDBAppMenuPointAnchor as aO, type MindooDBAppMenuRect as aP, type MindooDBAppMenuRectAnchor as aQ, type MindooDBAppMenuSelectionResult as aR, type MindooDBAppMenuSeparatorItem as aS, type MindooDBAppQueryCoverage as aT, type MindooDBAppQueryResult as aU, type MindooDBAppQueryRow as aV, type MindooDBAppQuerySortKey as aW, type MindooDBAppQueryTextClause as aX, type MindooDBAppReadableAttachmentStream as aY, type MindooDBAppRecipientOptions as aZ, type MindooDBAppResolvedViewDefinition as a_, type MindooDBAppDirectoryApi as aa, type MindooDBAppDirectoryEntry as ab, type MindooDBAppDocumentApi as ac, type MindooDBAppDocumentHeadCursorResult as ad, type MindooDBAppDocumentHistoryEntry as ae, type MindooDBAppDocumentListQuery as af, type MindooDBAppDocumentListResult as ag, type MindooDBAppDocumentQuery as ah, type MindooDBAppDocumentRevisionId as ai, type MindooDBAppDocumentScanPreset as aj, type MindooDBAppDocumentSummary as ak, type MindooDBAppEntryAttachmentRef as al, type MindooDBAppEntryProvenance as am, type MindooDBAppExtractDocumentTextInput as an, type MindooDBAppExtractDocumentTextResult as ao, type MindooDBAppExtractTextFormat as ap, type MindooDBAppExtractionSetup as aq, type MindooDBAppFulltextSetup as ar, type MindooDBAppHistoricalDocument as as, type MindooDBAppHistoryQuery as at, type MindooDBAppHostTheme as au, type MindooDBAppIdentityApi as av, type MindooDBAppJsonListDeletePatch as aw, type MindooDBAppJsonListInsertPatch as ax, type MindooDBAppJsonPatch as ay, type MindooDBAppJsonSetPatch as az, type MindooDBAppDatabase as b, type MindooDBAppRevisionPhase as b0, type MindooDBAppRevisionVerification as b1, type MindooDBAppRichTextBlockSpan as b2, type MindooDBAppRichTextGetOptions as b3, type MindooDBAppRichTextImmutableString as b4, type MindooDBAppRichTextMarkRange as b5, type MindooDBAppRichTextMaterializeValue as b6, type MindooDBAppRichTextPatch as b7, type MindooDBAppRichTextScalar as b8, type MindooDBAppRichTextSpliceStep as b9, type MindooDBAppViewCursorResult as bA, type MindooDBAppViewEntry as bB, type MindooDBAppViewEntryKind as bC, type MindooDBAppViewNavigator as bD, type MindooDBAppViewNavigatorExpansionState as bE, type MindooDBAppViewNavigatorOpenOptions as bF, type MindooDBAppViewNavigatorPageOptions as bG, type MindooDBAppViewNavigatorPageResult as bH, type MindooDBAppViewNavigatorRangeQuery as bI, type MindooDBAppViewNavigatorSelectionState as bJ, type MindooDBAppViewUpdateStats as bK, type MindooDBAppViewport as bL, type MindooDBAppWritableAttachmentStream as bM, type MindooDBAppRichTextStep as ba, type MindooDBAppRichTextStepPatch as bb, type MindooDBAppRichTextTextSpan as bc, type MindooDBAppRuntime as bd, type MindooDBAppScanAttachmentOptions as be, type MindooDBAppScanAttachmentResult as bf, type MindooDBAppScopedDocId as bg, type MindooDBAppScopedDocumentSummary as bh, type MindooDBAppSealIntent as bi, type MindooDBAppSession as bj, type MindooDBAppShowMenuInput as bk, type MindooDBAppShowMenuResult as bl, type MindooDBAppSignPreview as bm, type MindooDBAppSignPreviewScope as bn, type MindooDBAppSignStatementInput as bo, type MindooDBAppSignStatementResult as bp, type MindooDBAppTextEdit as bq, type MindooDBAppTextPatch as br, type MindooDBAppThemeMode as bs, type MindooDBAppTimestampApi as bt, type MindooDBAppTimestampInput as bu, type MindooDBAppTimestampProvider as bv, type MindooDBAppTimestampResult as bw, type MindooDBAppUiPreferences as bx, type MindooDBAppUpdateDocumentInput as by, type MindooDBAppViewCursorDocumentListResult as bz, type MindooDBAppDocument as c, type MindooDBAppRichTextSpan as d, type MindooDBAppRichTextSnapshot as e, MINDOODB_APP_SEAL_SIGNING_DOMAIN as f, type MindooDBAppAccessDecision as g, type MindooDBAppAccessTier as h, type MindooDBAppAttachmentApi as i, type MindooDBAppAttachmentChunk as j, type MindooDBAppAttachmentInfo as k, type MindooDBAppAttachmentPreviewOptions as l, type MindooDBAppAttachmentPreviewSession as m, type MindooDBAppAutomergeChangesPatch as n, type MindooDBAppAutomergeChangesSince as o, type MindooDBAppAutomergeGetOptions as p, type MindooDBAppAutomergePatchResult as q, type MindooDBAppAutomergeSnapshot as r, type MindooDBAppBridgeConnectMessage as s, type MindooDBAppBridgeConnectOptions as t, type MindooDBAppBridgeConnectedMessage as u, type MindooDBAppBridgeErrorPayload as v, type MindooDBAppBridgeHandshakeErrorMessage as w, type MindooDBAppBridgeLocaleChangedMessage as x, type MindooDBAppBridgePortMessage as y, type MindooDBAppBridgeQueryResultMessage as z };
+export { type MindooDBAppConfiguredViewFormulaFilterDefinition as $, type MindooDBAppBridgeRpcError as A, type MindooDBAppBridgeRpcMessage as B, type MindooDBAppBridgeRpcRequest as C, type MindooDBAppBridgeRpcSuccess as D, type MindooDBAppBridgeStreamAbortRequest as E, type MindooDBAppBridgeStreamAck as F, type MindooDBAppBridgeStreamCloseRequest as G, type MindooDBAppBridgeStreamError as H, type MindooDBAppBridgeStreamMessage as I, type MindooDBAppBridgeStreamOpenResult as J, type MindooDBAppBridgeStreamReadRequest as K, type MindooDBAppBridgeStreamWriteRequest as L, type MindooDBAppAttachmentPreviewMode as M, type MindooDBAppBridgeThemeChangedMessage as N, type MindooDBAppBridgeUiPreferencesChangedMessage as O, type MindooDBAppBridgeViewChangedMessage as P, type MindooDBAppBridgeViewportChangedMessage as Q, type MindooDBAppCapability as R, type MindooDBAppConfiguredViewCategorizationStyle as S, type MindooDBAppConfiguredViewColumn as T, type MindooDBAppConfiguredViewColumnRole as U, type MindooDBAppConfiguredViewExpressionMode as V, type MindooDBAppConfiguredViewFieldExpression as W, type MindooDBAppConfiguredViewFilterDefinition as X, type MindooDBAppConfiguredViewFilterMode as Y, type MindooDBAppConfiguredViewFilterRule as Z, type MindooDBAppConfiguredViewFormulaExpression as _, type MindooDBAppBridge as a, type MindooDBAppReadableAttachmentStream as a$, type MindooDBAppConfiguredViewPreviewMode as a0, type MindooDBAppConfiguredViewRuleFilterDefinition as a1, type MindooDBAppConfiguredViewRuleMatchMode as a2, type MindooDBAppConfiguredViewRuleOperator as a3, type MindooDBAppConfiguredViewValueExpression as a4, type MindooDBAppCreateDocumentInput as a5, type MindooDBAppCreateKeyInfo as a6, type MindooDBAppCreateViewInput as a7, type MindooDBAppCreateViewNavigatorInput as a8, type MindooDBAppDatabaseInfo as a9, type MindooDBAppJsonListInsertPatch as aA, type MindooDBAppJsonPatch as aB, type MindooDBAppJsonSetPatch as aC, type MindooDBAppJsonTextMarkPatch as aD, type MindooDBAppJsonTextSplicePatch as aE, type MindooDBAppJsonTextUnmarkPatch as aF, type MindooDBAppJsonUnsetPatch as aG, type MindooDBAppLaunchContext as aH, type MindooDBAppLiveQuerySubscription as aI, type MindooDBAppMenuAnchor as aJ, type MindooDBAppMenuApi as aK, type MindooDBAppMenuCommandItem as aL, type MindooDBAppMenuDismissReason as aM, type MindooDBAppMenuDismissedResult as aN, type MindooDBAppMenuItem as aO, type MindooDBAppMenuKind as aP, type MindooDBAppMenuPlacement as aQ, type MindooDBAppMenuPointAnchor as aR, type MindooDBAppMenuRect as aS, type MindooDBAppMenuRectAnchor as aT, type MindooDBAppMenuSelectionResult as aU, type MindooDBAppMenuSeparatorItem as aV, type MindooDBAppQueryCoverage as aW, type MindooDBAppQueryResult as aX, type MindooDBAppQueryRow as aY, type MindooDBAppQuerySortKey as aZ, type MindooDBAppQueryTextClause as a_, type MindooDBAppDirectoryApi as aa, type MindooDBAppDirectoryEntry as ab, type MindooDBAppDocumentApi as ac, type MindooDBAppDocumentHeadCursorResult as ad, type MindooDBAppDocumentHistoryEntry as ae, type MindooDBAppDocumentListQuery as af, type MindooDBAppDocumentListResult as ag, type MindooDBAppDocumentQuery as ah, type MindooDBAppDocumentRevisionId as ai, type MindooDBAppDocumentScanPreset as aj, type MindooDBAppDocumentSummary as ak, type MindooDBAppEntryAttachmentRef as al, type MindooDBAppEntryProvenance as am, type MindooDBAppExtractDocumentTextInput as an, type MindooDBAppExtractDocumentTextResult as ao, type MindooDBAppExtractTextFormat as ap, type MindooDBAppExtractionSetup as aq, type MindooDBAppFulltextSetup as ar, type MindooDBAppHistoricalDocument as as, type MindooDBAppHistoryQuery as at, type MindooDBAppHostTheme as au, type MindooDBAppIdentityApi as av, type MindooDBAppInaccessibleDocument as aw, type MindooDBAppInaccessibleDocumentListQuery as ax, type MindooDBAppInaccessibleDocumentListResult as ay, type MindooDBAppJsonListDeletePatch as az, type MindooDBAppDatabase as b, type MindooDBAppRecipientOptions as b0, type MindooDBAppResolvedViewDefinition as b1, type MindooDBAppResolvedViewSource as b2, type MindooDBAppRevisionPhase as b3, type MindooDBAppRevisionVerification as b4, type MindooDBAppRichTextBlockSpan as b5, type MindooDBAppRichTextGetOptions as b6, type MindooDBAppRichTextImmutableString as b7, type MindooDBAppRichTextMarkRange as b8, type MindooDBAppRichTextMaterializeValue as b9, type MindooDBAppTimestampInput as bA, type MindooDBAppTimestampProvider as bB, type MindooDBAppTimestampResult as bC, type MindooDBAppUiPreferences as bD, type MindooDBAppUpdateDocumentInput as bE, type MindooDBAppViewCursorDocumentListResult as bF, type MindooDBAppViewCursorResult as bG, type MindooDBAppViewEntry as bH, type MindooDBAppViewEntryKind as bI, type MindooDBAppViewNavigator as bJ, type MindooDBAppViewNavigatorExpansionState as bK, type MindooDBAppViewNavigatorOpenOptions as bL, type MindooDBAppViewNavigatorPageOptions as bM, type MindooDBAppViewNavigatorPageResult as bN, type MindooDBAppViewNavigatorRangeQuery as bO, type MindooDBAppViewNavigatorSelectionState as bP, type MindooDBAppViewUpdateStats as bQ, type MindooDBAppViewport as bR, type MindooDBAppWritableAttachmentStream as bS, type MindooDBAppRichTextPatch as ba, type MindooDBAppRichTextScalar as bb, type MindooDBAppRichTextSpliceStep as bc, type MindooDBAppRichTextStep as bd, type MindooDBAppRichTextStepPatch as be, type MindooDBAppRichTextTextSpan as bf, type MindooDBAppRuntime as bg, type MindooDBAppScanAttachmentOptions as bh, type MindooDBAppScanAttachmentResult as bi, type MindooDBAppScopedDocId as bj, type MindooDBAppScopedDocumentSummary as bk, type MindooDBAppSealIntent as bl, type MindooDBAppSealedChannelOpenInput as bm, type MindooDBAppSealedChannelOpenResult as bn, type MindooDBAppSealedChannelRequestInput as bo, type MindooDBAppSession as bp, type MindooDBAppShowMenuInput as bq, type MindooDBAppShowMenuResult as br, type MindooDBAppSignPreview as bs, type MindooDBAppSignPreviewScope as bt, type MindooDBAppSignStatementInput as bu, type MindooDBAppSignStatementResult as bv, type MindooDBAppTextEdit as bw, type MindooDBAppTextPatch as bx, type MindooDBAppThemeMode as by, type MindooDBAppTimestampApi as bz, type MindooDBAppDocument as c, type MindooDBAppRichTextSpan as d, type MindooDBAppRichTextSnapshot as e, MINDOODB_APP_SEAL_SIGNING_DOMAIN as f, type MindooDBAppAccessDecision as g, type MindooDBAppAccessTier as h, type MindooDBAppAttachmentApi as i, type MindooDBAppAttachmentChunk as j, type MindooDBAppAttachmentInfo as k, type MindooDBAppAttachmentPreviewOptions as l, type MindooDBAppAttachmentPreviewSession as m, type MindooDBAppAutomergeChangesPatch as n, type MindooDBAppAutomergeChangesSince as o, type MindooDBAppAutomergeGetOptions as p, type MindooDBAppAutomergePatchResult as q, type MindooDBAppAutomergeSnapshot as r, type MindooDBAppBridgeConnectMessage as s, type MindooDBAppBridgeConnectOptions as t, type MindooDBAppBridgeConnectedMessage as u, type MindooDBAppBridgeErrorPayload as v, type MindooDBAppBridgeHandshakeErrorMessage as w, type MindooDBAppBridgeLocaleChangedMessage as x, type MindooDBAppBridgePortMessage as y, type MindooDBAppBridgeQueryResultMessage as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mindoodb-app-sdk",
-  "version": "0.0.37",
+  "version": "0.0.39",
   "engines": {
     "node": ">=22.13.0"
   },
@@ -40,7 +40,7 @@
   },
   "peerDependencies": {
     "@automerge/automerge": "^3.3.2",
-    "mindoodb": ">=0.0.53"
+    "mindoodb": ">=0.0.56"
   },
   "peerDependenciesMeta": {
     "@automerge/automerge": {
@@ -52,7 +52,7 @@
   },
   "devDependencies": {
     "@automerge/automerge": "^3.3.2",
-    "mindoodb": "^0.0.53",
+    "mindoodb": "^0.0.56",
     "@types/node": "25.5.0",
     "tsup": "^8.5.1",
     "typescript": "^6.0.2",