Struct nativeAttachmentStore

internal/httpapi/attachments.go:52–55

nativeAttachmentStore mints capability tokens with the deployment HMAC secret (HMAC-SHA256, the same crypto family as the HITL magic-link) and points URLs at e2a's own /…/attachments/{index}/download route. Zero external dependency. The token is purpose-scoped: it binds message_id + index + expiry,

// token is purpose-scoped: it binds message_id + index + expiry, so it can only
// download the exact attachment it was minted for and only until it expires.
type nativeAttachmentStore struct {
	secret    []byte
	publicURL string // base, e.g. https://api.e2a.dev (no trailing slash)
}

// NewNativeAttachmentStore returns the default (zero-dependency) attachment store.
func NewNativeAttachmentStore(secret, publicURL string) AttachmentStore {