/**
* Email body HTML often references inline attachments via `cid:`
* URLs (e.g. `
`). Those `cid:` refs are
* meaningless outside the original mail viewer. To make markdown /
* HTML output self-contained we replace each `cid:` with a base64
* `data:` URI sourced from the matching inline attachment.
*
* Hardening #1: only `image/*` content-types are embedded. Anything
* else (`text/html`, `application/javascript`, ...) would let an
* attacker turn an attachment into an executable payload via the
* data URI; skip and leave the original `cid:` ref in place.
*/
type InlineAttachment = {
readonly contentId: string;
readonly contentType: string;
readonly contentBytes: string;
};
declare const embedInlineImages: (html: string, attachments: ReadonlyArray) => string;
export { embedInlineImages };
export type { InlineAttachment };