@bobfrankston/mailx-types 0.1.67 → 0.1.69

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/mailx-types",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "type": "module",
   "main": "index.js",
   "types": "index.d.ts",

package/trust.d.ts

@@ -93,8 +93,14 @@ export interface SpamScore {
      *  the chip stays visible and says so, rather than going red at a number
      *  and teaching the reader to ignore it. (Claude Code 2026-08-27) */
     kind: "forgery" | "association" | "bulk" | "unclassified";
-    /** The From domain passed DMARC, aligned, at the receiving server. */
+    /** The From line is proved — provedBy says by what. */
     proved: boolean;
+    /** Which evidence: the server's DMARC verdict, a valid signature from the
+     *  author's own domain, or never having crossed an untrusted host. The
+     *  chip's tooltip has to say which one, or it asserts a DMARC pass that
+     *  may not exist (Bob's own mail carries no Authentication-Results at
+     *  all). */
+    provedBy: "dmarc" | "dkim" | "trusted" | "";
     /** Top scoring rules, named — "6.0 URIBL_SBL (Contains an URL's NS IP
      *  listed in the Spamhaus SBL blocklist)". A number alone is unactionable;
      *  this can be judged in a second. */

package/trust.js

@@ -626,6 +626,7 @@ export function spamScoreOf(input) {
         flagged: a.flagged,
         kind: a.kind,
         proved: a.proved,
+        provedBy: a.provedBy,
         reasons: a.reasons,
     };
 }