@easybits.cloud/mailmask 0.4.1 → 0.4.3

package/dist/index.cjs

@@ -44,6 +44,14 @@ async function request(baseUrl, apiKey, path, opts, doFetch = fetch) {
   }
   return res.json();
 }
+async function requestRaw(baseUrl, apiKey, path, doFetch = fetch) {
+  const res = await doFetch(`${baseUrl}${path}`, { headers: { "Authorization": `Bearer ${apiKey}` } });
+  if (!res.ok) {
+    const body = await res.json().catch(() => ({ error: res.statusText }));
+    throw new MailMaskError(res.status, body.error || res.statusText);
+  }
+  return res;
+}
 var MailMask = class {
   constructor(config) {
     this.apiKey = config.apiKey;
@@ -51,7 +59,7 @@ var MailMask = class {
     const doFetch = config.fetch ? config.fetch : fetch;
     const req = (path, opts) => request(this.baseUrl, this.apiKey, path, opts, doFetch);
     this.domains = new DomainsResource(req);
-    this.aliases = new AliasesResource(req);
+    this.aliases = new AliasesResource(req, (path) => requestRaw(this.baseUrl, this.apiKey, path, doFetch));
     this.rules = new RulesResource(req);
     this.logs = new LogsResource(req);
     this.send = new SendResource(req);
@@ -61,6 +69,13 @@ var MailMask = class {
     this.smtp = new SmtpResource(req);
     this.apiKeys = new ApiKeysResource(req);
     this.dns = new DnsResource(req);
+    this.billing = new BillingResource(req);
+    this.registrations = new RegistrationsResource(req);
+    this.transfers = new TransfersResource(req);
+    this.members = new MembersResource(req);
+    this.signature = new SignatureResource(req);
+    this.canned = new CannedResource(req);
+    this.account = new AccountResource(req);
   }
 };
 var DomainsResource = class {
@@ -85,6 +100,10 @@ var DomainsResource = class {
   verify(id) {
     return this.req(`/api/domains/${id}/verify`, { method: "POST" });
   }
+  /** Registros a pegar en el registrador. Con `live` los compara con el DNS público y deduce el panel. */
+  dnsSetup(id, opts) {
+    return this.req(`/api/domains/${id}/dns-setup${opts?.live ? "?live=1" : ""}`);
+  }
 };
 var DnsResource = class {
   constructor(req) {
@@ -114,8 +133,17 @@ var DnsResource = class {
   }
 };
 var AliasesResource = class {
-  constructor(req) {
+  constructor(req, raw) {
     this.req = req;
+    this.raw = raw;
+  }
+  /** Perfil de configuración de Apple Mail (plist) para el buzón de una máscara. */
+  async appleProfile(domainId, alias) {
+    return (await this.raw(`/api/domains/${domainId}/apple-profile?alias=${encodeURIComponent(alias)}`)).text();
+  }
+  /** Exporta el buzón en formato mbox. Devuelve la respuesta en streaming: un buzón puede pesar GB. */
+  exportMbox(domainId, alias) {
+    return this.raw(`/api/domains/${domainId}/alias/${alias}/mailbox/export`);
   }
   list(domainId) {
     return this.req(`/api/domains/${domainId}/alias`);
@@ -263,6 +291,141 @@ var ApiKeysResource = class {
     return this.req(`/api/api-keys/${id}`, { method: "DELETE" });
   }
 };
+var BillingResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  status() {
+    return this.req("/api/billing/status");
+  }
+  addons() {
+    return this.req("/api/addons");
+  }
+  /**
+   * Liga de MercadoPago para un add-on de un dominio (`domain` = activarlo, $99/mes).
+   * El usuario la abre y paga; hasta entonces no cambia nada.
+   */
+  checkout(domainId, kind = "domain", opts) {
+    return this.req("/api/addons/checkout", { method: "POST", body: JSON.stringify({ kind, domainId, payerEmail: opts?.payerEmail }) });
+  }
+};
+var RegistrationsResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  search(domain) {
+    return this.req(`/api/domains/search?q=${encodeURIComponent(domain)}`);
+  }
+  tlds() {
+    return this.req("/api/domains/tlds");
+  }
+  /** Crea el registro pendiente y devuelve la liga de pago; el dominio se registra al pagar. */
+  register(domain) {
+    return this.req("/api/domains/register", { method: "POST", body: JSON.stringify({ domain }) });
+  }
+  list() {
+    return this.req("/api/domains/registrations");
+  }
+  /** Pide el traslado a otro registrador. El código EPP llega por correo al dueño, nunca en la respuesta. */
+  transferOut(regId) {
+    return this.req(`/api/domains/registrations/${regId}/transfer-out`, { method: "POST" });
+  }
+  /** Liga de MercadoPago para la suscripción de renovación anual. */
+  renewal(regId, opts) {
+    return this.req(`/api/domains/registrations/${regId}/renewal`, { method: "POST", body: JSON.stringify({ payerEmail: opts?.payerEmail }) });
+  }
+};
+var TransfersResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  /** Requisitos, precio e inventario del DNS actual. No cobra ni crea nada. */
+  check(domain) {
+    return this.req("/api/domains/transfer/check", { method: "POST", body: JSON.stringify({ domain }) });
+  }
+  dns(regId) {
+    return this.req(`/api/domains/transfer/${regId}/dns`);
+  }
+  /** Reemplaza el inventario completo (RRSets). Vuelve a quedar pendiente de aprobar. */
+  setDns(regId, records) {
+    return this.req(`/api/domains/transfer/${regId}/dns`, { method: "PUT", body: JSON.stringify({ records }) });
+  }
+  approveDns(regId) {
+    return this.req(`/api/domains/transfer/${regId}/dns/approve`, { method: "POST" });
+  }
+  resendEmail(regId) {
+    return this.req(`/api/domains/transfer/${regId}/resend-email`, { method: "POST" });
+  }
+};
+var MembersResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  list(domainId) {
+    return this.req(`/api/domains/${domainId}/agents`);
+  }
+  invite(domainId, input) {
+    return this.req(`/api/domains/${domainId}/agents/invite`, { method: "POST", body: JSON.stringify(input) });
+  }
+  remove(domainId, memberId) {
+    return this.req(`/api/domains/${domainId}/agents/${memberId}`, { method: "DELETE" });
+  }
+  cancelInvite(domainId, token) {
+    return this.req(`/api/domains/${domainId}/agents/invites/${token}`, { method: "DELETE" });
+  }
+};
+var SignatureResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  async get(domainId) {
+    const d = await this.req(`/api/domains/${domainId}`);
+    return { signature: d.signature ?? null };
+  }
+  /** Markdown, máx. 2000 caracteres. Cadena vacía la borra. */
+  set(domainId, signature) {
+    return this.req(`/api/domains/${domainId}/signature`, { method: "PUT", body: JSON.stringify({ signature }) });
+  }
+};
+var CannedResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  list(domainId) {
+    return this.req(`/api/domains/${domainId}/canned`);
+  }
+  create(domainId, input) {
+    return this.req(`/api/domains/${domainId}/canned`, { method: "POST", body: JSON.stringify(input) });
+  }
+  delete(domainId, cannedId) {
+    return this.req(`/api/domains/${domainId}/canned/${cannedId}`, { method: "DELETE" });
+  }
+};
+var AccountResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  getProfile() {
+    return this.req("/api/profile");
+  }
+  /** Nombre visible (máx. 60 caracteres). Cadena vacía lo borra. */
+  updateProfile(input) {
+    return this.req("/api/profile", { method: "PUT", body: JSON.stringify(input) });
+  }
+  /** Foto desde un adjunto que el usuario subió al asistente (URL firmada de `/api/asistente/files/*`). */
+  setAvatarFromUrl(url) {
+    return this.req("/api/profile/avatar", { method: "POST", body: JSON.stringify({ fromUrl: url }) });
+  }
+  /** Foto desde bytes (PNG, JPG o WebP; máx. 2 MB). */
+  setAvatar(file, filename = "avatar") {
+    const form = new FormData();
+    form.append("file", file, filename);
+    return this.req("/api/profile/avatar", { method: "POST", body: form });
+  }
+  removeAvatar() {
+    return this.req("/api/profile/avatar", { method: "DELETE" });
+  }
+};
 
 // src/verify.ts
 function hex(buf) {

package/dist/index.d.cts

@@ -354,6 +354,173 @@ interface DnsChangeResult {
     propagacion: string;
 }
 type DnsPreset = "vercel" | "netlify" | "github-pages" | "cloudflare-pages" | "render" | "fly" | "redirect-a-www" | "dmarc";
+interface DnsSetupRecord {
+    id: string;
+    type: "MX" | "TXT" | "CNAME";
+    /** Relativo al dominio, como lo piden casi todos los paneles ('@', '_amazonses'). */
+    name: string;
+    fqdn: string;
+    value: string;
+    /** Sólo MX, para paneles con campo de prioridad aparte (entonces el valor es `host`). */
+    priority?: number;
+    host?: string;
+    level: "requerido" | "recomendado" | "opcional";
+    purpose: string;
+    benefit?: string;
+    /** Ayuda en texto con **negritas** estilo markdown. */
+    hints: string[];
+    /** Sólo con `live`: si el DNS público ya lo tiene; null = no se pudo consultar. */
+    ok?: boolean | null;
+    observed?: string[];
+    /** SPF: valor fusionado cuando ya existe otro SPF (se edita ése, no se crea otro). */
+    suggestedValue?: string;
+}
+interface DnsSetup {
+    domain: string;
+    records: DnsSetupRecord[];
+    live: boolean;
+    nameservers?: string[];
+    /** Panel donde se pegan, deducido de los nameservers. */
+    registrarHint?: {
+        provider: string;
+        label: string;
+        note: string;
+    } | null;
+    summary?: string;
+}
+interface BillingStatus {
+    subscription: {
+        plan: string;
+        status: string;
+        currentPeriodEnd?: string;
+        [k: string]: unknown;
+    };
+}
+interface Addon {
+    id: string;
+    kind: string;
+    /** Dominio al que aplica; sin él es un add-on legado de toda la cuenta. */
+    domainId?: string;
+    status: "pending" | "active" | "cancelled" | "expired";
+    priceCents: number;
+    currentPeriodEnd?: string;
+    createdAt: string;
+    cancelledAt?: string;
+    source: "purchase" | "courtesy" | "migration";
+}
+interface AddonsResponse {
+    catalog: Record<string, {
+        price: number;
+        label: string;
+    }>;
+    forSale: string[];
+    mine: Addon[];
+}
+/** Liga de pago de MercadoPago. Nada cambia hasta que el usuario la abre y paga. */
+interface CheckoutLink {
+    init_point: string;
+    addonId: string;
+}
+interface DomainSearchResult {
+    available: boolean;
+    domain: string;
+    tld: string;
+    /** Centavos MXN por año. */
+    price: number;
+    currency: "MXN";
+}
+interface TldPrice {
+    tld: string;
+    /** Centavos MXN. */
+    price: number;
+    renewPrice: number;
+    transferPrice: number;
+    popular: boolean;
+}
+interface DomainRegistrationCreated {
+    /** Liga de pago de MercadoPago; el registro arranca al pagar. */
+    initPoint: string;
+    registrationId: string;
+}
+interface DomainRegistration {
+    id: string;
+    domainId: string | null;
+    domainName: string;
+    kind: "register" | "transfer";
+    status: string;
+    expiresAt: string | null;
+    priceCents: number;
+    renewalStatus: string;
+    renewalPriceCents: number | null;
+    nextChargeAt: string | null;
+    dnsImportStatus: string;
+    transferAuthCodeHint: string | null;
+    lastError: string | null;
+    createdAt: string;
+    [k: string]: unknown;
+}
+interface TransferRequirement {
+    texto: string;
+    ok: boolean | null;
+    ayuda?: string;
+}
+interface TransferCheck {
+    domain: string;
+    /** Centavos MXN; incluye un año de renovación. */
+    price: number;
+    currency: "MXN";
+    requisitos: TransferRequirement[];
+    dns: {
+        found: unknown[];
+        nameservers?: string[];
+        warning?: string;
+        truncado?: boolean;
+    };
+    [k: string]: unknown;
+}
+interface TransferDnsInventory {
+    records: unknown[];
+    status: string;
+    takenAt: string | null;
+}
+interface RenewalLink {
+    init_point: string;
+    nextChargeAt: string;
+}
+interface DomainMember {
+    id: string;
+    domainId: string;
+    email: string;
+    name: string;
+    role: "admin" | "agent";
+    createdAt: string;
+    /** Del perfil de su cuenta de MailMask, si lo llenó. */
+    displayName?: string | null;
+    avatarUrl?: string | null;
+}
+interface DomainInvite {
+    token: string;
+    email: string;
+    name: string;
+    role: "admin" | "agent";
+    expiresAt: string;
+    inviteUrl: string;
+}
+interface CannedReply {
+    id: string;
+    domainId: string;
+    title: string;
+    /** Markdown. */
+    body: string;
+    createdAt: string;
+}
+/** Perfil de la cuenta de MailMask (el usuario, no una máscara). */
+interface AccountProfile {
+    email: string;
+    displayName: string | null;
+    /** Ruta relativa al host de MailMask (`/api/avatar/...`), o null sin foto. */
+    avatarUrl: string | null;
+}
 
 declare class MailMaskError extends Error {
     status: number;
@@ -373,6 +540,13 @@ declare class MailMask {
     smtp: SmtpResource;
     apiKeys: ApiKeysResource;
     dns: DnsResource;
+    billing: BillingResource;
+    registrations: RegistrationsResource;
+    transfers: TransfersResource;
+    members: MembersResource;
+    signature: SignatureResource;
+    canned: CannedResource;
+    account: AccountResource;
     constructor(config: MailMaskConfig);
 }
 type Req = <T>(path: string, opts?: RequestInit) => Promise<T>;
@@ -387,6 +561,10 @@ declare class DomainsResource {
     }>;
     health(id: string): Promise<Record<string, unknown>>;
     verify(id: string): Promise<DomainVerification>;
+    /** Registros a pegar en el registrador. Con `live` los compara con el DNS público y deduce el panel. */
+    dnsSetup(id: string, opts?: {
+        live?: boolean;
+    }): Promise<DnsSetup>;
 }
 declare class DnsResource {
     private req;
@@ -410,7 +588,12 @@ declare class DnsResource {
 }
 declare class AliasesResource {
     private req;
-    constructor(req: Req);
+    private raw;
+    constructor(req: Req, raw: (path: string) => Promise<Response>);
+    /** Perfil de configuración de Apple Mail (plist) para el buzón de una máscara. */
+    appleProfile(domainId: string, alias: string): Promise<string>;
+    /** Exporta el buzón en formato mbox. Devuelve la respuesta en streaming: un buzón puede pesar GB. */
+    exportMbox(domainId: string, alias: string): Promise<Response>;
     list(domainId: string): Promise<Alias[]>;
     create(domainId: string, input: CreateAliasInput): Promise<AliasCreated>;
     /** Crea un buzón IMAP para una máscara existente. La contraseña sólo se devuelve aquí. */
@@ -508,6 +691,125 @@ declare class ApiKeysResource {
         ok: boolean;
     }>;
 }
+declare class BillingResource {
+    private req;
+    constructor(req: Req);
+    status(): Promise<BillingStatus>;
+    addons(): Promise<AddonsResponse>;
+    /**
+     * Liga de MercadoPago para un add-on de un dominio (`domain` = activarlo, $99/mes).
+     * El usuario la abre y paga; hasta entonces no cambia nada.
+     */
+    checkout(domainId: string, kind?: "domain" | "storage50" | "sends100", opts?: {
+        payerEmail?: string;
+    }): Promise<CheckoutLink>;
+}
+declare class RegistrationsResource {
+    private req;
+    constructor(req: Req);
+    search(domain: string): Promise<DomainSearchResult>;
+    tlds(): Promise<TldPrice[]>;
+    /** Crea el registro pendiente y devuelve la liga de pago; el dominio se registra al pagar. */
+    register(domain: string): Promise<DomainRegistrationCreated>;
+    list(): Promise<DomainRegistration[]>;
+    /** Pide el traslado a otro registrador. El código EPP llega por correo al dueño, nunca en la respuesta. */
+    transferOut(regId: string): Promise<{
+        ok: boolean;
+        aviso: string;
+    }>;
+    /** Liga de MercadoPago para la suscripción de renovación anual. */
+    renewal(regId: string, opts?: {
+        payerEmail?: string;
+    }): Promise<RenewalLink>;
+}
+declare class TransfersResource {
+    private req;
+    constructor(req: Req);
+    /** Requisitos, precio e inventario del DNS actual. No cobra ni crea nada. */
+    check(domain: string): Promise<TransferCheck>;
+    dns(regId: string): Promise<TransferDnsInventory>;
+    /** Reemplaza el inventario completo (RRSets). Vuelve a quedar pendiente de aprobar. */
+    setDns(regId: string, records: {
+        name: string;
+        type: string;
+        ttl?: number;
+        values: string[];
+    }[]): Promise<{
+        records: unknown[];
+    }>;
+    approveDns(regId: string): Promise<{
+        ok: boolean;
+    }>;
+    resendEmail(regId: string): Promise<{
+        ok: boolean;
+    }>;
+}
+declare class MembersResource {
+    private req;
+    constructor(req: Req);
+    list(domainId: string): Promise<{
+        members: DomainMember[];
+        invites: DomainInvite[];
+    }>;
+    invite(domainId: string, input: {
+        email: string;
+        name: string;
+        role?: "admin" | "agent";
+    }): Promise<{
+        ok: boolean;
+        inviteUrl: string;
+    }>;
+    remove(domainId: string, memberId: string): Promise<{
+        ok: boolean;
+    }>;
+    cancelInvite(domainId: string, token: string): Promise<{
+        ok: boolean;
+    }>;
+}
+declare class SignatureResource {
+    private req;
+    constructor(req: Req);
+    get(domainId: string): Promise<{
+        signature: string | null;
+    }>;
+    /** Markdown, máx. 2000 caracteres. Cadena vacía la borra. */
+    set(domainId: string, signature: string): Promise<{
+        ok: boolean;
+        signature: string | null;
+    }>;
+}
+declare class CannedResource {
+    private req;
+    constructor(req: Req);
+    list(domainId: string): Promise<CannedReply[]>;
+    create(domainId: string, input: {
+        title: string;
+        body: string;
+    }): Promise<CannedReply>;
+    delete(domainId: string, cannedId: string): Promise<{
+        ok: boolean;
+    }>;
+}
+declare class AccountResource {
+    private req;
+    constructor(req: Req);
+    getProfile(): Promise<AccountProfile>;
+    /** Nombre visible (máx. 60 caracteres). Cadena vacía lo borra. */
+    updateProfile(input: {
+        displayName: string | null;
+    }): Promise<AccountProfile>;
+    /** Foto desde un adjunto que el usuario subió al asistente (URL firmada de `/api/asistente/files/*`). */
+    setAvatarFromUrl(url: string): Promise<AccountProfile & {
+        ok: boolean;
+    }>;
+    /** Foto desde bytes (PNG, JPG o WebP; máx. 2 MB). */
+    setAvatar(file: Blob, filename?: string): Promise<AccountProfile & {
+        ok: boolean;
+    }>;
+    removeAvatar(): Promise<AccountProfile & {
+        ok: boolean;
+    }>;
+}
 
 interface WebhookSignatureHeaders {
     /** Header `X-MailMask-Signature`, con forma `sha256=<hex>`. */
@@ -522,4 +824,4 @@ interface WebhookSignatureHeaders {
  */
 declare function verifyWebhookSignature(secret: string, headers: WebhookSignatureHeaders, rawBody: string, toleranceMs?: number): Promise<boolean>;
 
-export { type Alias, type AliasCreated, type ApiKey, type AttachmentRef, type BulkJob, type BulkJobCreated, type BulkSendInput, type CreateAliasInput, type CreateRuleInput, type CreateWebhookInput, type DnsChangeResult, type DnsDelegation, type DnsImportResult, type DnsListResponse, type DnsPreset, type DnsRRSet, type DnsRRSetAnotado, type DnsRecord, type DnsRecordType, type DnsZoneCreated, type DnsZoneState, type Domain, type DomainCreated, type DomainVerification, type EmailLog, MailMask, type MailMaskConfig, MailMaskError, type MailboxCreated, type Rule, type RuleAction, type RuleField, type RuleMatch, type SendEmailInput, type SendOptions, type SmtpCredential, type SmtpCredentialCreated, type Suppression, type UpdateAliasInput, type UpdateRuleInput, type UpdateWebhookInput, type UploadAttachmentInput, type UploadedAttachment, type Webhook, type WebhookCreated, type WebhookDelivery, type WebhookEvent, type WebhookPayload, type WebhookSignatureHeaders, verifyWebhookSignature };
+export { type AccountProfile, type Addon, type AddonsResponse, type Alias, type AliasCreated, type ApiKey, type AttachmentRef, type BillingStatus, type BulkJob, type BulkJobCreated, type BulkSendInput, type CannedReply, type CheckoutLink, type CreateAliasInput, type CreateRuleInput, type CreateWebhookInput, type DnsChangeResult, type DnsDelegation, type DnsImportResult, type DnsListResponse, type DnsPreset, type DnsRRSet, type DnsRRSetAnotado, type DnsRecord, type DnsRecordType, type DnsSetup, type DnsSetupRecord, type DnsZoneCreated, type DnsZoneState, type Domain, type DomainCreated, type DomainInvite, type DomainMember, type DomainRegistration, type DomainRegistrationCreated, type DomainSearchResult, type DomainVerification, type EmailLog, MailMask, type MailMaskConfig, MailMaskError, type MailboxCreated, type RenewalLink, type Rule, type RuleAction, type RuleField, type RuleMatch, type SendEmailInput, type SendOptions, type SmtpCredential, type SmtpCredentialCreated, type Suppression, type TldPrice, type TransferCheck, type TransferDnsInventory, type TransferRequirement, type UpdateAliasInput, type UpdateRuleInput, type UpdateWebhookInput, type UploadAttachmentInput, type UploadedAttachment, type Webhook, type WebhookCreated, type WebhookDelivery, type WebhookEvent, type WebhookPayload, type WebhookSignatureHeaders, verifyWebhookSignature };

package/dist/index.d.ts

@@ -354,6 +354,173 @@ interface DnsChangeResult {
     propagacion: string;
 }
 type DnsPreset = "vercel" | "netlify" | "github-pages" | "cloudflare-pages" | "render" | "fly" | "redirect-a-www" | "dmarc";
+interface DnsSetupRecord {
+    id: string;
+    type: "MX" | "TXT" | "CNAME";
+    /** Relativo al dominio, como lo piden casi todos los paneles ('@', '_amazonses'). */
+    name: string;
+    fqdn: string;
+    value: string;
+    /** Sólo MX, para paneles con campo de prioridad aparte (entonces el valor es `host`). */
+    priority?: number;
+    host?: string;
+    level: "requerido" | "recomendado" | "opcional";
+    purpose: string;
+    benefit?: string;
+    /** Ayuda en texto con **negritas** estilo markdown. */
+    hints: string[];
+    /** Sólo con `live`: si el DNS público ya lo tiene; null = no se pudo consultar. */
+    ok?: boolean | null;
+    observed?: string[];
+    /** SPF: valor fusionado cuando ya existe otro SPF (se edita ése, no se crea otro). */
+    suggestedValue?: string;
+}
+interface DnsSetup {
+    domain: string;
+    records: DnsSetupRecord[];
+    live: boolean;
+    nameservers?: string[];
+    /** Panel donde se pegan, deducido de los nameservers. */
+    registrarHint?: {
+        provider: string;
+        label: string;
+        note: string;
+    } | null;
+    summary?: string;
+}
+interface BillingStatus {
+    subscription: {
+        plan: string;
+        status: string;
+        currentPeriodEnd?: string;
+        [k: string]: unknown;
+    };
+}
+interface Addon {
+    id: string;
+    kind: string;
+    /** Dominio al que aplica; sin él es un add-on legado de toda la cuenta. */
+    domainId?: string;
+    status: "pending" | "active" | "cancelled" | "expired";
+    priceCents: number;
+    currentPeriodEnd?: string;
+    createdAt: string;
+    cancelledAt?: string;
+    source: "purchase" | "courtesy" | "migration";
+}
+interface AddonsResponse {
+    catalog: Record<string, {
+        price: number;
+        label: string;
+    }>;
+    forSale: string[];
+    mine: Addon[];
+}
+/** Liga de pago de MercadoPago. Nada cambia hasta que el usuario la abre y paga. */
+interface CheckoutLink {
+    init_point: string;
+    addonId: string;
+}
+interface DomainSearchResult {
+    available: boolean;
+    domain: string;
+    tld: string;
+    /** Centavos MXN por año. */
+    price: number;
+    currency: "MXN";
+}
+interface TldPrice {
+    tld: string;
+    /** Centavos MXN. */
+    price: number;
+    renewPrice: number;
+    transferPrice: number;
+    popular: boolean;
+}
+interface DomainRegistrationCreated {
+    /** Liga de pago de MercadoPago; el registro arranca al pagar. */
+    initPoint: string;
+    registrationId: string;
+}
+interface DomainRegistration {
+    id: string;
+    domainId: string | null;
+    domainName: string;
+    kind: "register" | "transfer";
+    status: string;
+    expiresAt: string | null;
+    priceCents: number;
+    renewalStatus: string;
+    renewalPriceCents: number | null;
+    nextChargeAt: string | null;
+    dnsImportStatus: string;
+    transferAuthCodeHint: string | null;
+    lastError: string | null;
+    createdAt: string;
+    [k: string]: unknown;
+}
+interface TransferRequirement {
+    texto: string;
+    ok: boolean | null;
+    ayuda?: string;
+}
+interface TransferCheck {
+    domain: string;
+    /** Centavos MXN; incluye un año de renovación. */
+    price: number;
+    currency: "MXN";
+    requisitos: TransferRequirement[];
+    dns: {
+        found: unknown[];
+        nameservers?: string[];
+        warning?: string;
+        truncado?: boolean;
+    };
+    [k: string]: unknown;
+}
+interface TransferDnsInventory {
+    records: unknown[];
+    status: string;
+    takenAt: string | null;
+}
+interface RenewalLink {
+    init_point: string;
+    nextChargeAt: string;
+}
+interface DomainMember {
+    id: string;
+    domainId: string;
+    email: string;
+    name: string;
+    role: "admin" | "agent";
+    createdAt: string;
+    /** Del perfil de su cuenta de MailMask, si lo llenó. */
+    displayName?: string | null;
+    avatarUrl?: string | null;
+}
+interface DomainInvite {
+    token: string;
+    email: string;
+    name: string;
+    role: "admin" | "agent";
+    expiresAt: string;
+    inviteUrl: string;
+}
+interface CannedReply {
+    id: string;
+    domainId: string;
+    title: string;
+    /** Markdown. */
+    body: string;
+    createdAt: string;
+}
+/** Perfil de la cuenta de MailMask (el usuario, no una máscara). */
+interface AccountProfile {
+    email: string;
+    displayName: string | null;
+    /** Ruta relativa al host de MailMask (`/api/avatar/...`), o null sin foto. */
+    avatarUrl: string | null;
+}
 
 declare class MailMaskError extends Error {
     status: number;
@@ -373,6 +540,13 @@ declare class MailMask {
     smtp: SmtpResource;
     apiKeys: ApiKeysResource;
     dns: DnsResource;
+    billing: BillingResource;
+    registrations: RegistrationsResource;
+    transfers: TransfersResource;
+    members: MembersResource;
+    signature: SignatureResource;
+    canned: CannedResource;
+    account: AccountResource;
     constructor(config: MailMaskConfig);
 }
 type Req = <T>(path: string, opts?: RequestInit) => Promise<T>;
@@ -387,6 +561,10 @@ declare class DomainsResource {
     }>;
     health(id: string): Promise<Record<string, unknown>>;
     verify(id: string): Promise<DomainVerification>;
+    /** Registros a pegar en el registrador. Con `live` los compara con el DNS público y deduce el panel. */
+    dnsSetup(id: string, opts?: {
+        live?: boolean;
+    }): Promise<DnsSetup>;
 }
 declare class DnsResource {
     private req;
@@ -410,7 +588,12 @@ declare class DnsResource {
 }
 declare class AliasesResource {
     private req;
-    constructor(req: Req);
+    private raw;
+    constructor(req: Req, raw: (path: string) => Promise<Response>);
+    /** Perfil de configuración de Apple Mail (plist) para el buzón de una máscara. */
+    appleProfile(domainId: string, alias: string): Promise<string>;
+    /** Exporta el buzón en formato mbox. Devuelve la respuesta en streaming: un buzón puede pesar GB. */
+    exportMbox(domainId: string, alias: string): Promise<Response>;
     list(domainId: string): Promise<Alias[]>;
     create(domainId: string, input: CreateAliasInput): Promise<AliasCreated>;
     /** Crea un buzón IMAP para una máscara existente. La contraseña sólo se devuelve aquí. */
@@ -508,6 +691,125 @@ declare class ApiKeysResource {
         ok: boolean;
     }>;
 }
+declare class BillingResource {
+    private req;
+    constructor(req: Req);
+    status(): Promise<BillingStatus>;
+    addons(): Promise<AddonsResponse>;
+    /**
+     * Liga de MercadoPago para un add-on de un dominio (`domain` = activarlo, $99/mes).
+     * El usuario la abre y paga; hasta entonces no cambia nada.
+     */
+    checkout(domainId: string, kind?: "domain" | "storage50" | "sends100", opts?: {
+        payerEmail?: string;
+    }): Promise<CheckoutLink>;
+}
+declare class RegistrationsResource {
+    private req;
+    constructor(req: Req);
+    search(domain: string): Promise<DomainSearchResult>;
+    tlds(): Promise<TldPrice[]>;
+    /** Crea el registro pendiente y devuelve la liga de pago; el dominio se registra al pagar. */
+    register(domain: string): Promise<DomainRegistrationCreated>;
+    list(): Promise<DomainRegistration[]>;
+    /** Pide el traslado a otro registrador. El código EPP llega por correo al dueño, nunca en la respuesta. */
+    transferOut(regId: string): Promise<{
+        ok: boolean;
+        aviso: string;
+    }>;
+    /** Liga de MercadoPago para la suscripción de renovación anual. */
+    renewal(regId: string, opts?: {
+        payerEmail?: string;
+    }): Promise<RenewalLink>;
+}
+declare class TransfersResource {
+    private req;
+    constructor(req: Req);
+    /** Requisitos, precio e inventario del DNS actual. No cobra ni crea nada. */
+    check(domain: string): Promise<TransferCheck>;
+    dns(regId: string): Promise<TransferDnsInventory>;
+    /** Reemplaza el inventario completo (RRSets). Vuelve a quedar pendiente de aprobar. */
+    setDns(regId: string, records: {
+        name: string;
+        type: string;
+        ttl?: number;
+        values: string[];
+    }[]): Promise<{
+        records: unknown[];
+    }>;
+    approveDns(regId: string): Promise<{
+        ok: boolean;
+    }>;
+    resendEmail(regId: string): Promise<{
+        ok: boolean;
+    }>;
+}
+declare class MembersResource {
+    private req;
+    constructor(req: Req);
+    list(domainId: string): Promise<{
+        members: DomainMember[];
+        invites: DomainInvite[];
+    }>;
+    invite(domainId: string, input: {
+        email: string;
+        name: string;
+        role?: "admin" | "agent";
+    }): Promise<{
+        ok: boolean;
+        inviteUrl: string;
+    }>;
+    remove(domainId: string, memberId: string): Promise<{
+        ok: boolean;
+    }>;
+    cancelInvite(domainId: string, token: string): Promise<{
+        ok: boolean;
+    }>;
+}
+declare class SignatureResource {
+    private req;
+    constructor(req: Req);
+    get(domainId: string): Promise<{
+        signature: string | null;
+    }>;
+    /** Markdown, máx. 2000 caracteres. Cadena vacía la borra. */
+    set(domainId: string, signature: string): Promise<{
+        ok: boolean;
+        signature: string | null;
+    }>;
+}
+declare class CannedResource {
+    private req;
+    constructor(req: Req);
+    list(domainId: string): Promise<CannedReply[]>;
+    create(domainId: string, input: {
+        title: string;
+        body: string;
+    }): Promise<CannedReply>;
+    delete(domainId: string, cannedId: string): Promise<{
+        ok: boolean;
+    }>;
+}
+declare class AccountResource {
+    private req;
+    constructor(req: Req);
+    getProfile(): Promise<AccountProfile>;
+    /** Nombre visible (máx. 60 caracteres). Cadena vacía lo borra. */
+    updateProfile(input: {
+        displayName: string | null;
+    }): Promise<AccountProfile>;
+    /** Foto desde un adjunto que el usuario subió al asistente (URL firmada de `/api/asistente/files/*`). */
+    setAvatarFromUrl(url: string): Promise<AccountProfile & {
+        ok: boolean;
+    }>;
+    /** Foto desde bytes (PNG, JPG o WebP; máx. 2 MB). */
+    setAvatar(file: Blob, filename?: string): Promise<AccountProfile & {
+        ok: boolean;
+    }>;
+    removeAvatar(): Promise<AccountProfile & {
+        ok: boolean;
+    }>;
+}
 
 interface WebhookSignatureHeaders {
     /** Header `X-MailMask-Signature`, con forma `sha256=<hex>`. */
@@ -522,4 +824,4 @@ interface WebhookSignatureHeaders {
  */
 declare function verifyWebhookSignature(secret: string, headers: WebhookSignatureHeaders, rawBody: string, toleranceMs?: number): Promise<boolean>;
 
-export { type Alias, type AliasCreated, type ApiKey, type AttachmentRef, type BulkJob, type BulkJobCreated, type BulkSendInput, type CreateAliasInput, type CreateRuleInput, type CreateWebhookInput, type DnsChangeResult, type DnsDelegation, type DnsImportResult, type DnsListResponse, type DnsPreset, type DnsRRSet, type DnsRRSetAnotado, type DnsRecord, type DnsRecordType, type DnsZoneCreated, type DnsZoneState, type Domain, type DomainCreated, type DomainVerification, type EmailLog, MailMask, type MailMaskConfig, MailMaskError, type MailboxCreated, type Rule, type RuleAction, type RuleField, type RuleMatch, type SendEmailInput, type SendOptions, type SmtpCredential, type SmtpCredentialCreated, type Suppression, type UpdateAliasInput, type UpdateRuleInput, type UpdateWebhookInput, type UploadAttachmentInput, type UploadedAttachment, type Webhook, type WebhookCreated, type WebhookDelivery, type WebhookEvent, type WebhookPayload, type WebhookSignatureHeaders, verifyWebhookSignature };
+export { type AccountProfile, type Addon, type AddonsResponse, type Alias, type AliasCreated, type ApiKey, type AttachmentRef, type BillingStatus, type BulkJob, type BulkJobCreated, type BulkSendInput, type CannedReply, type CheckoutLink, type CreateAliasInput, type CreateRuleInput, type CreateWebhookInput, type DnsChangeResult, type DnsDelegation, type DnsImportResult, type DnsListResponse, type DnsPreset, type DnsRRSet, type DnsRRSetAnotado, type DnsRecord, type DnsRecordType, type DnsSetup, type DnsSetupRecord, type DnsZoneCreated, type DnsZoneState, type Domain, type DomainCreated, type DomainInvite, type DomainMember, type DomainRegistration, type DomainRegistrationCreated, type DomainSearchResult, type DomainVerification, type EmailLog, MailMask, type MailMaskConfig, MailMaskError, type MailboxCreated, type RenewalLink, type Rule, type RuleAction, type RuleField, type RuleMatch, type SendEmailInput, type SendOptions, type SmtpCredential, type SmtpCredentialCreated, type Suppression, type TldPrice, type TransferCheck, type TransferDnsInventory, type TransferRequirement, type UpdateAliasInput, type UpdateRuleInput, type UpdateWebhookInput, type UploadAttachmentInput, type UploadedAttachment, type Webhook, type WebhookCreated, type WebhookDelivery, type WebhookEvent, type WebhookPayload, type WebhookSignatureHeaders, verifyWebhookSignature };

package/dist/index.js

@@ -16,6 +16,14 @@ async function request(baseUrl, apiKey, path, opts, doFetch = fetch) {
   }
   return res.json();
 }
+async function requestRaw(baseUrl, apiKey, path, doFetch = fetch) {
+  const res = await doFetch(`${baseUrl}${path}`, { headers: { "Authorization": `Bearer ${apiKey}` } });
+  if (!res.ok) {
+    const body = await res.json().catch(() => ({ error: res.statusText }));
+    throw new MailMaskError(res.status, body.error || res.statusText);
+  }
+  return res;
+}
 var MailMask = class {
   constructor(config) {
     this.apiKey = config.apiKey;
@@ -23,7 +31,7 @@ var MailMask = class {
     const doFetch = config.fetch ? config.fetch : fetch;
     const req = (path, opts) => request(this.baseUrl, this.apiKey, path, opts, doFetch);
     this.domains = new DomainsResource(req);
-    this.aliases = new AliasesResource(req);
+    this.aliases = new AliasesResource(req, (path) => requestRaw(this.baseUrl, this.apiKey, path, doFetch));
     this.rules = new RulesResource(req);
     this.logs = new LogsResource(req);
     this.send = new SendResource(req);
@@ -33,6 +41,13 @@ var MailMask = class {
     this.smtp = new SmtpResource(req);
     this.apiKeys = new ApiKeysResource(req);
     this.dns = new DnsResource(req);
+    this.billing = new BillingResource(req);
+    this.registrations = new RegistrationsResource(req);
+    this.transfers = new TransfersResource(req);
+    this.members = new MembersResource(req);
+    this.signature = new SignatureResource(req);
+    this.canned = new CannedResource(req);
+    this.account = new AccountResource(req);
   }
 };
 var DomainsResource = class {
@@ -57,6 +72,10 @@ var DomainsResource = class {
   verify(id) {
     return this.req(`/api/domains/${id}/verify`, { method: "POST" });
   }
+  /** Registros a pegar en el registrador. Con `live` los compara con el DNS público y deduce el panel. */
+  dnsSetup(id, opts) {
+    return this.req(`/api/domains/${id}/dns-setup${opts?.live ? "?live=1" : ""}`);
+  }
 };
 var DnsResource = class {
   constructor(req) {
@@ -86,8 +105,17 @@ var DnsResource = class {
   }
 };
 var AliasesResource = class {
-  constructor(req) {
+  constructor(req, raw) {
     this.req = req;
+    this.raw = raw;
+  }
+  /** Perfil de configuración de Apple Mail (plist) para el buzón de una máscara. */
+  async appleProfile(domainId, alias) {
+    return (await this.raw(`/api/domains/${domainId}/apple-profile?alias=${encodeURIComponent(alias)}`)).text();
+  }
+  /** Exporta el buzón en formato mbox. Devuelve la respuesta en streaming: un buzón puede pesar GB. */
+  exportMbox(domainId, alias) {
+    return this.raw(`/api/domains/${domainId}/alias/${alias}/mailbox/export`);
   }
   list(domainId) {
     return this.req(`/api/domains/${domainId}/alias`);
@@ -235,6 +263,141 @@ var ApiKeysResource = class {
     return this.req(`/api/api-keys/${id}`, { method: "DELETE" });
   }
 };
+var BillingResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  status() {
+    return this.req("/api/billing/status");
+  }
+  addons() {
+    return this.req("/api/addons");
+  }
+  /**
+   * Liga de MercadoPago para un add-on de un dominio (`domain` = activarlo, $99/mes).
+   * El usuario la abre y paga; hasta entonces no cambia nada.
+   */
+  checkout(domainId, kind = "domain", opts) {
+    return this.req("/api/addons/checkout", { method: "POST", body: JSON.stringify({ kind, domainId, payerEmail: opts?.payerEmail }) });
+  }
+};
+var RegistrationsResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  search(domain) {
+    return this.req(`/api/domains/search?q=${encodeURIComponent(domain)}`);
+  }
+  tlds() {
+    return this.req("/api/domains/tlds");
+  }
+  /** Crea el registro pendiente y devuelve la liga de pago; el dominio se registra al pagar. */
+  register(domain) {
+    return this.req("/api/domains/register", { method: "POST", body: JSON.stringify({ domain }) });
+  }
+  list() {
+    return this.req("/api/domains/registrations");
+  }
+  /** Pide el traslado a otro registrador. El código EPP llega por correo al dueño, nunca en la respuesta. */
+  transferOut(regId) {
+    return this.req(`/api/domains/registrations/${regId}/transfer-out`, { method: "POST" });
+  }
+  /** Liga de MercadoPago para la suscripción de renovación anual. */
+  renewal(regId, opts) {
+    return this.req(`/api/domains/registrations/${regId}/renewal`, { method: "POST", body: JSON.stringify({ payerEmail: opts?.payerEmail }) });
+  }
+};
+var TransfersResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  /** Requisitos, precio e inventario del DNS actual. No cobra ni crea nada. */
+  check(domain) {
+    return this.req("/api/domains/transfer/check", { method: "POST", body: JSON.stringify({ domain }) });
+  }
+  dns(regId) {
+    return this.req(`/api/domains/transfer/${regId}/dns`);
+  }
+  /** Reemplaza el inventario completo (RRSets). Vuelve a quedar pendiente de aprobar. */
+  setDns(regId, records) {
+    return this.req(`/api/domains/transfer/${regId}/dns`, { method: "PUT", body: JSON.stringify({ records }) });
+  }
+  approveDns(regId) {
+    return this.req(`/api/domains/transfer/${regId}/dns/approve`, { method: "POST" });
+  }
+  resendEmail(regId) {
+    return this.req(`/api/domains/transfer/${regId}/resend-email`, { method: "POST" });
+  }
+};
+var MembersResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  list(domainId) {
+    return this.req(`/api/domains/${domainId}/agents`);
+  }
+  invite(domainId, input) {
+    return this.req(`/api/domains/${domainId}/agents/invite`, { method: "POST", body: JSON.stringify(input) });
+  }
+  remove(domainId, memberId) {
+    return this.req(`/api/domains/${domainId}/agents/${memberId}`, { method: "DELETE" });
+  }
+  cancelInvite(domainId, token) {
+    return this.req(`/api/domains/${domainId}/agents/invites/${token}`, { method: "DELETE" });
+  }
+};
+var SignatureResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  async get(domainId) {
+    const d = await this.req(`/api/domains/${domainId}`);
+    return { signature: d.signature ?? null };
+  }
+  /** Markdown, máx. 2000 caracteres. Cadena vacía la borra. */
+  set(domainId, signature) {
+    return this.req(`/api/domains/${domainId}/signature`, { method: "PUT", body: JSON.stringify({ signature }) });
+  }
+};
+var CannedResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  list(domainId) {
+    return this.req(`/api/domains/${domainId}/canned`);
+  }
+  create(domainId, input) {
+    return this.req(`/api/domains/${domainId}/canned`, { method: "POST", body: JSON.stringify(input) });
+  }
+  delete(domainId, cannedId) {
+    return this.req(`/api/domains/${domainId}/canned/${cannedId}`, { method: "DELETE" });
+  }
+};
+var AccountResource = class {
+  constructor(req) {
+    this.req = req;
+  }
+  getProfile() {
+    return this.req("/api/profile");
+  }
+  /** Nombre visible (máx. 60 caracteres). Cadena vacía lo borra. */
+  updateProfile(input) {
+    return this.req("/api/profile", { method: "PUT", body: JSON.stringify(input) });
+  }
+  /** Foto desde un adjunto que el usuario subió al asistente (URL firmada de `/api/asistente/files/*`). */
+  setAvatarFromUrl(url) {
+    return this.req("/api/profile/avatar", { method: "POST", body: JSON.stringify({ fromUrl: url }) });
+  }
+  /** Foto desde bytes (PNG, JPG o WebP; máx. 2 MB). */
+  setAvatar(file, filename = "avatar") {
+    const form = new FormData();
+    form.append("file", file, filename);
+    return this.req("/api/profile/avatar", { method: "POST", body: form });
+  }
+  removeAvatar() {
+    return this.req("/api/profile/avatar", { method: "DELETE" });
+  }
+};
 
 // src/verify.ts
 function hex(buf) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easybits.cloud/mailmask",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "description": "Official SDK for the MailMask email alias/forwarding API",
   "type": "module",
   "main": "./dist/index.cjs",