@extrovert.dev/sdk 0.1.0-pre.16 → 0.1.0-pre.17

package/dist/index.d.cts

@@ -4762,7 +4762,19 @@ interface SignUpRequest {
  * (verification-only, with no inbox read or send permission) that expires with the emailed code. Successful verification revokes
  * it and returns a replacement full-scope key. The OTP itself is never returned.
  */
+interface InboxActivation {
+    agent_id: string;
+    address: string;
+    human_email: string;
+    created_ms: number;
+    expires_ms: number;
+    revision: number;
+    state: "pending" | "proven" | "activated" | "expired";
+}
 interface SignUpResponse {
+    activation_method?: "incoming_email";
+    human_email?: string;
+    activation_expires_at?: string;
     customer_id: string;
     agent_id: string;
     /** Limited-scope bootstrap key, shown once and bounded by `otp_expires_at`. */
@@ -4773,14 +4785,14 @@ interface SignUpResponse {
     address: string;
     verified: boolean;
     /** Where the verification code was sent. */
-    otp_sent_to: string;
-    otp_expires_at: IsoTimestamp;
+    otp_sent_to?: string;
+    otp_expires_at?: IsoTimestamp;
     message: string;
 }
 /** Request body for `POST /v1/agent/verify`. */
 interface VerifyRequest {
     /** The one-time code delivered to the signup human email. */
-    otp: string;
+    otp?: string;
 }
 /** One copy-ready MCP operation in the post-verification mailbox handoff. */
 interface MailboxQuickstartCall {
@@ -4997,6 +5009,8 @@ interface Transport {
     administrativeRequest(request: AdministrativeRequest): Promise<unknown>;
     enroll(req: EnrollRequest, signal?: AbortSignal): Promise<EnrollResponse>;
     signUp(req: SignUpRequest, signal?: AbortSignal): Promise<SignUpResponse>;
+    activationStatus(signal?: AbortSignal): Promise<InboxActivation>;
+    correctActivationEmail(human_email: string, revision: number, signal?: AbortSignal): Promise<InboxActivation>;
     verify(req: VerifyRequest, signal?: AbortSignal): Promise<VerifyResponse>;
     whoami(signal?: AbortSignal): Promise<WhoAmI>;
     createInbox(req: CreateInboxRequest, idempotencyKey?: string, signal?: AbortSignal): Promise<Inbox>;
@@ -5104,6 +5118,12 @@ interface Transport {
  * SDK exposes. One instance per mock client so tests/examples don't bleed into each other.
  */
 declare class MockBackend {
+    incomingActivation: boolean;
+    private pendingActivation?;
+    activationStatus(): InboxActivation;
+    correctActivationEmail(email: string, revision: number): InboxActivation;
+    /** Test-only trusted delivery; never available through a production client. */
+    proveFixtureActivation(sender: string): void;
     private administrativeFixtures;
     configureAdministrativeFixture(credential: string): void;
     administrativeRequest(request: AdministrativeRequest): Promise<unknown>;
@@ -6404,6 +6424,8 @@ declare class ExtrovertClient {
      * Pending verification is also fail-closed with 403 `signup_disabled` while
      * free signup is paused.
      */
+    activationStatus(signal?: AbortSignal): Promise<InboxActivation>;
+    correctActivationEmail(human_email: string, revision: number, signal?: AbortSignal): Promise<InboxActivation>;
     verify(req: VerifyRequest, signal?: AbortSignal): Promise<VerifyResponse>;
     /** Introspect the principal behind the current key (`GET /v1/auth/me`). */
     whoami(signal?: AbortSignal): Promise<WhoAmI>;
@@ -6969,7 +6991,7 @@ declare function signWebhook(secret: string, body: string, timestampSeconds: num
  *
  * ## Provisional, pre-1.0 (0.x)
  *
- * {@link CONTRACT_VERSION} is **`0.1.0-pre.16`** - a deliberately **provisional**, pre-1.0
+ * {@link CONTRACT_VERSION} is **`0.1.0-pre.17`** - a deliberately **provisional**, pre-1.0
  * contract. It is open and documented, but it MAY still evolve before 1.0: there
  * are no external users yet, and the **D20 shared-pool auto-send governor** is a
  * hard prerequisite before onboarding external users. Pin the version; expect
@@ -7026,12 +7048,12 @@ interface DiffJson {
 /**
  * The published version of the Extrovert Review-Loop open contract (D14).
  *
- * **`0.1.0-pre.16` - PROVISIONAL, pre-1.0.** Versioned *with the SDK* (this package's
+ * **`0.1.0-pre.17` - PROVISIONAL, pre-1.0.** Versioned *with the SDK* (this package's
  * `package.json` version) and aligned to the openapi `info.version`. Open and
  * documented, but MAY still evolve before 1.0 (no external users yet; the D20
  * shared-pool governor is required before external users). Pin it.
  */
-declare const CONTRACT_VERSION: "0.1.0-pre.16";
+declare const CONTRACT_VERSION: "0.1.0-pre.17";
 /** The stability posture of a published contract version. */
 type ContractStability = "provisional" | "stable";
 /**
@@ -7074,7 +7096,18 @@ interface ContractManifest {
  */
 declare const CONTRACT_MANIFEST: ContractManifest;
 
+/** Advisory usage accompanying mail responses. Native writes enforce the cap. */
+interface StorageWarning {
+    threshold: 90 | 95 | 99 | 100;
+    used_bytes: number;
+    limit_bytes: number;
+    cleanup_url?: string;
+    billing_url?: string;
+}
+/** Read from a custom fetch response without consuming its body. */
+declare function storageWarningFromHeaders(headers: Headers): StorageWarning | undefined;
+
 /** Explicit offline full-control fixture; ordinary mock agent keys stay scoped. */
 declare const ADMINISTRATIVE_FIXTURE_KEY = "ev_credential_mock_full_account";
 
-export { ADMINISTRATIVE_FIXTURE_KEY, API_VERSION_HEADER, type AccountRiskDial, type AckReviewEventEntry, type AckReviewEventRequest, type AckReviewEventResult, type AddContactListRequest, Administration, type AdministrativeActionID, type AdministrativeActionSummary, type AdministrativeDownload, type AdministrativeInput, type AdministrativeMode, type AdministrativeOperations, type Agent, type AgentStatus, ApiError, type ApiErrorBody, type Attachment, type AttachmentDownload, type AttachmentInput, AuthenticationError, type BatchUpdateMessagesRequest, type BatchUpdateResult, BornStaleError, BreadthRequiredError, CONTRACT_MANIFEST, CONTRACT_VERSION, CURRENT_API_VERSION, Categories, type Category, type CategoryPacingState, type CategoryRiskDial, Commerce, type CommerceBlocker, type CommerceRequest, type CommerceRequestKind, ConflictError, ConnectionError, type ConnectionResourceSelection, type ContactListDirection, type ContactListEntry, type ContactListKind, ContactLists, type ContractManifest, type ContractStability, type CreateInboxRequest, type Cursor, DEFAULT_BASE_URL, type DeleteResult, type DiffHunk, type DiffJson, type Domain, type DomainOffboard, type DomainQuote, type DomainReadiness, type DomainRecord, type DomainScope, type DomainStatusEvent, type DomainStatusEventPage, type DomainWaitResult, Domains, type EffectiveRiskDial, type EmailAddress, type EnrollRequest, type EnrollResponse, type ExtractedCredentials, ExtrovertClient as Extrovert, ExtrovertClient, type ExtrovertClientOptions, ForbiddenScopeError, type ForwardRequest, type GetInboxParams, type GetRuleAuditParams, type GetRulesParams, type GraduationStatus, IdempotencyConflictError, type Inbox, type InboxCredentials, InboxHandle, type InboxInclude, type InboxMetadata, type InboxMetadataPatch, type InboxMetadataValue, type InboxStatus, Inboxes, IntentRequiredError, type IsoTimestamp, type Job, type KeyTier, type LearnReviewRuleRequest, type LearnedReviewRule, type List, type ListCategoriesParams, type ListCommerceRequestsParams, type ListInboxesParams, type ListMessagesParams, ListPage, type ListParams, type ListReviewEventsParams, type ListReviewsParams, type ListSuppressionsParams, type ListThreadsParams, type ListWebhooksParams, MOCK_BASE_URL, type MailFolder, type MailboxQuickstart, type MailboxQuickstartCall, type MarkReadRequest, type Message, type MessageDirection, Messages, MockBackend, NotFoundError, type OnboardDomainRequest, type OnboardingMode, PROBLEM_CODES, type PacingItem, type Page, type PageFetcher, PaymentRequiredError, PermissionError, type PostReviewChatRequest, type Problem, type ProblemCode, type ProblemField, type ProjectInboxListParams, ProjectInboxes, Projects, type ProposeCategoryRequest, type ProposeGraduationRequest, type QueuedForReviewResult, type QuoteDomainRequest, REVIEW_PROBLEM_RETRYABLE, RateLimitError, RecipientSuppressedError, type RegisterWebhookRequest, type ReplyRequest, type RequestDomainPurchaseRequest, type RequestPlanChangeRequest, type RestampReviewRequest, type Review, ReviewConflictError, type ReviewDecisionContext, type ReviewEvent, type ReviewEventCursor, type ReviewEventReason, ReviewEvents, type ReviewEventsResult, type ReviewFeedback, type ReviewFeedbackComment, type ReviewInclude, type ReviewIntent, type ReviewMode, type ReviewPolicy, type ReviewState, type ReviewTurn, type ReviewerAction, type ReviewerDecisionRequest, type ReviewerDecisionResult, Reviews, type RiskDial, type Rule, type RuleAuditEntry, type RuleLayer, type RuleSnapshot, Rules, SDK_VERSION, type SaveRuleRequest, type ScanBacklogStatus, type Scope, type SearchMessagesParams, SendNeedsReconciliationError, type SendOutcome, type SendRequest, type SendResult, type SentCopyStatus, type SentResult, type SignUpRequest, type SignUpResponse, StaleError, type StreamEvent, type StreamOptions, type Submission, type SubmissionRecipientState, type SubmissionTracking, Submissions, type SubmitForReviewResult, type SubmitRevisionRequest, type SuppressionEntry, type SuppressionPrecheck, type SuppressionScope, type SuppressionSource, Suppressions, TerminalError, type Thread, type ThreadDetail, Threads, TimeoutError, type TransportCounts, UnavailableError, type UpdateCategoryRequest, type UpdateInboxRequest, type UpdateWebhookRequest, ValidationError, type VerifyRequest, type VerifyResponse, type VerifyWebhookOptions, type WaitForEmailRequest, type WaitForEmailResult, type WaitForReviewEventParams, type Webhook, type WebhookEvent, type WebhookPayload, Webhooks, type WhoAmI, WrongStateError, extractCredentials, extractLink, extractOtp, isProblemCode, isQueuedForReview, isSentImmediately, listPage, parseKeyTier, parseProblem, parseWebhook, reviewIdOf, sentMessageIdOf, serializeInclude, signWebhook, threadIdOf, tierAllowsOrgWildcard, tierNeedsExplicitBreadth, verifyWebhookSignature };
+export { ADMINISTRATIVE_FIXTURE_KEY, API_VERSION_HEADER, type AccountRiskDial, type AckReviewEventEntry, type AckReviewEventRequest, type AckReviewEventResult, type AddContactListRequest, Administration, type AdministrativeActionID, type AdministrativeActionSummary, type AdministrativeDownload, type AdministrativeInput, type AdministrativeMode, type AdministrativeOperations, type Agent, type AgentStatus, ApiError, type ApiErrorBody, type Attachment, type AttachmentDownload, type AttachmentInput, AuthenticationError, type BatchUpdateMessagesRequest, type BatchUpdateResult, BornStaleError, BreadthRequiredError, CONTRACT_MANIFEST, CONTRACT_VERSION, CURRENT_API_VERSION, Categories, type Category, type CategoryPacingState, type CategoryRiskDial, Commerce, type CommerceBlocker, type CommerceRequest, type CommerceRequestKind, ConflictError, ConnectionError, type ConnectionResourceSelection, type ContactListDirection, type ContactListEntry, type ContactListKind, ContactLists, type ContractManifest, type ContractStability, type CreateInboxRequest, type Cursor, DEFAULT_BASE_URL, type DeleteResult, type DiffHunk, type DiffJson, type Domain, type DomainOffboard, type DomainQuote, type DomainReadiness, type DomainRecord, type DomainScope, type DomainStatusEvent, type DomainStatusEventPage, type DomainWaitResult, Domains, type EffectiveRiskDial, type EmailAddress, type EnrollRequest, type EnrollResponse, type ExtractedCredentials, ExtrovertClient as Extrovert, ExtrovertClient, type ExtrovertClientOptions, ForbiddenScopeError, type ForwardRequest, type GetInboxParams, type GetRuleAuditParams, type GetRulesParams, type GraduationStatus, IdempotencyConflictError, type Inbox, type InboxActivation, type InboxCredentials, InboxHandle, type InboxInclude, type InboxMetadata, type InboxMetadataPatch, type InboxMetadataValue, type InboxStatus, Inboxes, IntentRequiredError, type IsoTimestamp, type Job, type KeyTier, type LearnReviewRuleRequest, type LearnedReviewRule, type List, type ListCategoriesParams, type ListCommerceRequestsParams, type ListInboxesParams, type ListMessagesParams, ListPage, type ListParams, type ListReviewEventsParams, type ListReviewsParams, type ListSuppressionsParams, type ListThreadsParams, type ListWebhooksParams, MOCK_BASE_URL, type MailFolder, type MailboxQuickstart, type MailboxQuickstartCall, type MarkReadRequest, type Message, type MessageDirection, Messages, MockBackend, NotFoundError, type OnboardDomainRequest, type OnboardingMode, PROBLEM_CODES, type PacingItem, type Page, type PageFetcher, PaymentRequiredError, PermissionError, type PostReviewChatRequest, type Problem, type ProblemCode, type ProblemField, type ProjectInboxListParams, ProjectInboxes, Projects, type ProposeCategoryRequest, type ProposeGraduationRequest, type QueuedForReviewResult, type QuoteDomainRequest, REVIEW_PROBLEM_RETRYABLE, RateLimitError, RecipientSuppressedError, type RegisterWebhookRequest, type ReplyRequest, type RequestDomainPurchaseRequest, type RequestPlanChangeRequest, type RestampReviewRequest, type Review, ReviewConflictError, type ReviewDecisionContext, type ReviewEvent, type ReviewEventCursor, type ReviewEventReason, ReviewEvents, type ReviewEventsResult, type ReviewFeedback, type ReviewFeedbackComment, type ReviewInclude, type ReviewIntent, type ReviewMode, type ReviewPolicy, type ReviewState, type ReviewTurn, type ReviewerAction, type ReviewerDecisionRequest, type ReviewerDecisionResult, Reviews, type RiskDial, type Rule, type RuleAuditEntry, type RuleLayer, type RuleSnapshot, Rules, SDK_VERSION, type SaveRuleRequest, type ScanBacklogStatus, type Scope, type SearchMessagesParams, SendNeedsReconciliationError, type SendOutcome, type SendRequest, type SendResult, type SentCopyStatus, type SentResult, type SignUpRequest, type SignUpResponse, StaleError, type StorageWarning, type StreamEvent, type StreamOptions, type Submission, type SubmissionRecipientState, type SubmissionTracking, Submissions, type SubmitForReviewResult, type SubmitRevisionRequest, type SuppressionEntry, type SuppressionPrecheck, type SuppressionScope, type SuppressionSource, Suppressions, TerminalError, type Thread, type ThreadDetail, Threads, TimeoutError, type TransportCounts, UnavailableError, type UpdateCategoryRequest, type UpdateInboxRequest, type UpdateWebhookRequest, ValidationError, type VerifyRequest, type VerifyResponse, type VerifyWebhookOptions, type WaitForEmailRequest, type WaitForEmailResult, type WaitForReviewEventParams, type Webhook, type WebhookEvent, type WebhookPayload, Webhooks, type WhoAmI, WrongStateError, extractCredentials, extractLink, extractOtp, isProblemCode, isQueuedForReview, isSentImmediately, listPage, parseKeyTier, parseProblem, parseWebhook, reviewIdOf, sentMessageIdOf, serializeInclude, signWebhook, storageWarningFromHeaders, threadIdOf, tierAllowsOrgWildcard, tierNeedsExplicitBreadth, verifyWebhookSignature };

package/dist/index.d.ts

@@ -4762,7 +4762,19 @@ interface SignUpRequest {
  * (verification-only, with no inbox read or send permission) that expires with the emailed code. Successful verification revokes
  * it and returns a replacement full-scope key. The OTP itself is never returned.
  */
+interface InboxActivation {
+    agent_id: string;
+    address: string;
+    human_email: string;
+    created_ms: number;
+    expires_ms: number;
+    revision: number;
+    state: "pending" | "proven" | "activated" | "expired";
+}
 interface SignUpResponse {
+    activation_method?: "incoming_email";
+    human_email?: string;
+    activation_expires_at?: string;
     customer_id: string;
     agent_id: string;
     /** Limited-scope bootstrap key, shown once and bounded by `otp_expires_at`. */
@@ -4773,14 +4785,14 @@ interface SignUpResponse {
     address: string;
     verified: boolean;
     /** Where the verification code was sent. */
-    otp_sent_to: string;
-    otp_expires_at: IsoTimestamp;
+    otp_sent_to?: string;
+    otp_expires_at?: IsoTimestamp;
     message: string;
 }
 /** Request body for `POST /v1/agent/verify`. */
 interface VerifyRequest {
     /** The one-time code delivered to the signup human email. */
-    otp: string;
+    otp?: string;
 }
 /** One copy-ready MCP operation in the post-verification mailbox handoff. */
 interface MailboxQuickstartCall {
@@ -4997,6 +5009,8 @@ interface Transport {
     administrativeRequest(request: AdministrativeRequest): Promise<unknown>;
     enroll(req: EnrollRequest, signal?: AbortSignal): Promise<EnrollResponse>;
     signUp(req: SignUpRequest, signal?: AbortSignal): Promise<SignUpResponse>;
+    activationStatus(signal?: AbortSignal): Promise<InboxActivation>;
+    correctActivationEmail(human_email: string, revision: number, signal?: AbortSignal): Promise<InboxActivation>;
     verify(req: VerifyRequest, signal?: AbortSignal): Promise<VerifyResponse>;
     whoami(signal?: AbortSignal): Promise<WhoAmI>;
     createInbox(req: CreateInboxRequest, idempotencyKey?: string, signal?: AbortSignal): Promise<Inbox>;
@@ -5104,6 +5118,12 @@ interface Transport {
  * SDK exposes. One instance per mock client so tests/examples don't bleed into each other.
  */
 declare class MockBackend {
+    incomingActivation: boolean;
+    private pendingActivation?;
+    activationStatus(): InboxActivation;
+    correctActivationEmail(email: string, revision: number): InboxActivation;
+    /** Test-only trusted delivery; never available through a production client. */
+    proveFixtureActivation(sender: string): void;
     private administrativeFixtures;
     configureAdministrativeFixture(credential: string): void;
     administrativeRequest(request: AdministrativeRequest): Promise<unknown>;
@@ -6404,6 +6424,8 @@ declare class ExtrovertClient {
      * Pending verification is also fail-closed with 403 `signup_disabled` while
      * free signup is paused.
      */
+    activationStatus(signal?: AbortSignal): Promise<InboxActivation>;
+    correctActivationEmail(human_email: string, revision: number, signal?: AbortSignal): Promise<InboxActivation>;
     verify(req: VerifyRequest, signal?: AbortSignal): Promise<VerifyResponse>;
     /** Introspect the principal behind the current key (`GET /v1/auth/me`). */
     whoami(signal?: AbortSignal): Promise<WhoAmI>;
@@ -6969,7 +6991,7 @@ declare function signWebhook(secret: string, body: string, timestampSeconds: num
  *
  * ## Provisional, pre-1.0 (0.x)
  *
- * {@link CONTRACT_VERSION} is **`0.1.0-pre.16`** - a deliberately **provisional**, pre-1.0
+ * {@link CONTRACT_VERSION} is **`0.1.0-pre.17`** - a deliberately **provisional**, pre-1.0
  * contract. It is open and documented, but it MAY still evolve before 1.0: there
  * are no external users yet, and the **D20 shared-pool auto-send governor** is a
  * hard prerequisite before onboarding external users. Pin the version; expect
@@ -7026,12 +7048,12 @@ interface DiffJson {
 /**
  * The published version of the Extrovert Review-Loop open contract (D14).
  *
- * **`0.1.0-pre.16` - PROVISIONAL, pre-1.0.** Versioned *with the SDK* (this package's
+ * **`0.1.0-pre.17` - PROVISIONAL, pre-1.0.** Versioned *with the SDK* (this package's
  * `package.json` version) and aligned to the openapi `info.version`. Open and
  * documented, but MAY still evolve before 1.0 (no external users yet; the D20
  * shared-pool governor is required before external users). Pin it.
  */
-declare const CONTRACT_VERSION: "0.1.0-pre.16";
+declare const CONTRACT_VERSION: "0.1.0-pre.17";
 /** The stability posture of a published contract version. */
 type ContractStability = "provisional" | "stable";
 /**
@@ -7074,7 +7096,18 @@ interface ContractManifest {
  */
 declare const CONTRACT_MANIFEST: ContractManifest;
 
+/** Advisory usage accompanying mail responses. Native writes enforce the cap. */
+interface StorageWarning {
+    threshold: 90 | 95 | 99 | 100;
+    used_bytes: number;
+    limit_bytes: number;
+    cleanup_url?: string;
+    billing_url?: string;
+}
+/** Read from a custom fetch response without consuming its body. */
+declare function storageWarningFromHeaders(headers: Headers): StorageWarning | undefined;
+
 /** Explicit offline full-control fixture; ordinary mock agent keys stay scoped. */
 declare const ADMINISTRATIVE_FIXTURE_KEY = "ev_credential_mock_full_account";
 
-export { ADMINISTRATIVE_FIXTURE_KEY, API_VERSION_HEADER, type AccountRiskDial, type AckReviewEventEntry, type AckReviewEventRequest, type AckReviewEventResult, type AddContactListRequest, Administration, type AdministrativeActionID, type AdministrativeActionSummary, type AdministrativeDownload, type AdministrativeInput, type AdministrativeMode, type AdministrativeOperations, type Agent, type AgentStatus, ApiError, type ApiErrorBody, type Attachment, type AttachmentDownload, type AttachmentInput, AuthenticationError, type BatchUpdateMessagesRequest, type BatchUpdateResult, BornStaleError, BreadthRequiredError, CONTRACT_MANIFEST, CONTRACT_VERSION, CURRENT_API_VERSION, Categories, type Category, type CategoryPacingState, type CategoryRiskDial, Commerce, type CommerceBlocker, type CommerceRequest, type CommerceRequestKind, ConflictError, ConnectionError, type ConnectionResourceSelection, type ContactListDirection, type ContactListEntry, type ContactListKind, ContactLists, type ContractManifest, type ContractStability, type CreateInboxRequest, type Cursor, DEFAULT_BASE_URL, type DeleteResult, type DiffHunk, type DiffJson, type Domain, type DomainOffboard, type DomainQuote, type DomainReadiness, type DomainRecord, type DomainScope, type DomainStatusEvent, type DomainStatusEventPage, type DomainWaitResult, Domains, type EffectiveRiskDial, type EmailAddress, type EnrollRequest, type EnrollResponse, type ExtractedCredentials, ExtrovertClient as Extrovert, ExtrovertClient, type ExtrovertClientOptions, ForbiddenScopeError, type ForwardRequest, type GetInboxParams, type GetRuleAuditParams, type GetRulesParams, type GraduationStatus, IdempotencyConflictError, type Inbox, type InboxCredentials, InboxHandle, type InboxInclude, type InboxMetadata, type InboxMetadataPatch, type InboxMetadataValue, type InboxStatus, Inboxes, IntentRequiredError, type IsoTimestamp, type Job, type KeyTier, type LearnReviewRuleRequest, type LearnedReviewRule, type List, type ListCategoriesParams, type ListCommerceRequestsParams, type ListInboxesParams, type ListMessagesParams, ListPage, type ListParams, type ListReviewEventsParams, type ListReviewsParams, type ListSuppressionsParams, type ListThreadsParams, type ListWebhooksParams, MOCK_BASE_URL, type MailFolder, type MailboxQuickstart, type MailboxQuickstartCall, type MarkReadRequest, type Message, type MessageDirection, Messages, MockBackend, NotFoundError, type OnboardDomainRequest, type OnboardingMode, PROBLEM_CODES, type PacingItem, type Page, type PageFetcher, PaymentRequiredError, PermissionError, type PostReviewChatRequest, type Problem, type ProblemCode, type ProblemField, type ProjectInboxListParams, ProjectInboxes, Projects, type ProposeCategoryRequest, type ProposeGraduationRequest, type QueuedForReviewResult, type QuoteDomainRequest, REVIEW_PROBLEM_RETRYABLE, RateLimitError, RecipientSuppressedError, type RegisterWebhookRequest, type ReplyRequest, type RequestDomainPurchaseRequest, type RequestPlanChangeRequest, type RestampReviewRequest, type Review, ReviewConflictError, type ReviewDecisionContext, type ReviewEvent, type ReviewEventCursor, type ReviewEventReason, ReviewEvents, type ReviewEventsResult, type ReviewFeedback, type ReviewFeedbackComment, type ReviewInclude, type ReviewIntent, type ReviewMode, type ReviewPolicy, type ReviewState, type ReviewTurn, type ReviewerAction, type ReviewerDecisionRequest, type ReviewerDecisionResult, Reviews, type RiskDial, type Rule, type RuleAuditEntry, type RuleLayer, type RuleSnapshot, Rules, SDK_VERSION, type SaveRuleRequest, type ScanBacklogStatus, type Scope, type SearchMessagesParams, SendNeedsReconciliationError, type SendOutcome, type SendRequest, type SendResult, type SentCopyStatus, type SentResult, type SignUpRequest, type SignUpResponse, StaleError, type StreamEvent, type StreamOptions, type Submission, type SubmissionRecipientState, type SubmissionTracking, Submissions, type SubmitForReviewResult, type SubmitRevisionRequest, type SuppressionEntry, type SuppressionPrecheck, type SuppressionScope, type SuppressionSource, Suppressions, TerminalError, type Thread, type ThreadDetail, Threads, TimeoutError, type TransportCounts, UnavailableError, type UpdateCategoryRequest, type UpdateInboxRequest, type UpdateWebhookRequest, ValidationError, type VerifyRequest, type VerifyResponse, type VerifyWebhookOptions, type WaitForEmailRequest, type WaitForEmailResult, type WaitForReviewEventParams, type Webhook, type WebhookEvent, type WebhookPayload, Webhooks, type WhoAmI, WrongStateError, extractCredentials, extractLink, extractOtp, isProblemCode, isQueuedForReview, isSentImmediately, listPage, parseKeyTier, parseProblem, parseWebhook, reviewIdOf, sentMessageIdOf, serializeInclude, signWebhook, threadIdOf, tierAllowsOrgWildcard, tierNeedsExplicitBreadth, verifyWebhookSignature };
+export { ADMINISTRATIVE_FIXTURE_KEY, API_VERSION_HEADER, type AccountRiskDial, type AckReviewEventEntry, type AckReviewEventRequest, type AckReviewEventResult, type AddContactListRequest, Administration, type AdministrativeActionID, type AdministrativeActionSummary, type AdministrativeDownload, type AdministrativeInput, type AdministrativeMode, type AdministrativeOperations, type Agent, type AgentStatus, ApiError, type ApiErrorBody, type Attachment, type AttachmentDownload, type AttachmentInput, AuthenticationError, type BatchUpdateMessagesRequest, type BatchUpdateResult, BornStaleError, BreadthRequiredError, CONTRACT_MANIFEST, CONTRACT_VERSION, CURRENT_API_VERSION, Categories, type Category, type CategoryPacingState, type CategoryRiskDial, Commerce, type CommerceBlocker, type CommerceRequest, type CommerceRequestKind, ConflictError, ConnectionError, type ConnectionResourceSelection, type ContactListDirection, type ContactListEntry, type ContactListKind, ContactLists, type ContractManifest, type ContractStability, type CreateInboxRequest, type Cursor, DEFAULT_BASE_URL, type DeleteResult, type DiffHunk, type DiffJson, type Domain, type DomainOffboard, type DomainQuote, type DomainReadiness, type DomainRecord, type DomainScope, type DomainStatusEvent, type DomainStatusEventPage, type DomainWaitResult, Domains, type EffectiveRiskDial, type EmailAddress, type EnrollRequest, type EnrollResponse, type ExtractedCredentials, ExtrovertClient as Extrovert, ExtrovertClient, type ExtrovertClientOptions, ForbiddenScopeError, type ForwardRequest, type GetInboxParams, type GetRuleAuditParams, type GetRulesParams, type GraduationStatus, IdempotencyConflictError, type Inbox, type InboxActivation, type InboxCredentials, InboxHandle, type InboxInclude, type InboxMetadata, type InboxMetadataPatch, type InboxMetadataValue, type InboxStatus, Inboxes, IntentRequiredError, type IsoTimestamp, type Job, type KeyTier, type LearnReviewRuleRequest, type LearnedReviewRule, type List, type ListCategoriesParams, type ListCommerceRequestsParams, type ListInboxesParams, type ListMessagesParams, ListPage, type ListParams, type ListReviewEventsParams, type ListReviewsParams, type ListSuppressionsParams, type ListThreadsParams, type ListWebhooksParams, MOCK_BASE_URL, type MailFolder, type MailboxQuickstart, type MailboxQuickstartCall, type MarkReadRequest, type Message, type MessageDirection, Messages, MockBackend, NotFoundError, type OnboardDomainRequest, type OnboardingMode, PROBLEM_CODES, type PacingItem, type Page, type PageFetcher, PaymentRequiredError, PermissionError, type PostReviewChatRequest, type Problem, type ProblemCode, type ProblemField, type ProjectInboxListParams, ProjectInboxes, Projects, type ProposeCategoryRequest, type ProposeGraduationRequest, type QueuedForReviewResult, type QuoteDomainRequest, REVIEW_PROBLEM_RETRYABLE, RateLimitError, RecipientSuppressedError, type RegisterWebhookRequest, type ReplyRequest, type RequestDomainPurchaseRequest, type RequestPlanChangeRequest, type RestampReviewRequest, type Review, ReviewConflictError, type ReviewDecisionContext, type ReviewEvent, type ReviewEventCursor, type ReviewEventReason, ReviewEvents, type ReviewEventsResult, type ReviewFeedback, type ReviewFeedbackComment, type ReviewInclude, type ReviewIntent, type ReviewMode, type ReviewPolicy, type ReviewState, type ReviewTurn, type ReviewerAction, type ReviewerDecisionRequest, type ReviewerDecisionResult, Reviews, type RiskDial, type Rule, type RuleAuditEntry, type RuleLayer, type RuleSnapshot, Rules, SDK_VERSION, type SaveRuleRequest, type ScanBacklogStatus, type Scope, type SearchMessagesParams, SendNeedsReconciliationError, type SendOutcome, type SendRequest, type SendResult, type SentCopyStatus, type SentResult, type SignUpRequest, type SignUpResponse, StaleError, type StorageWarning, type StreamEvent, type StreamOptions, type Submission, type SubmissionRecipientState, type SubmissionTracking, Submissions, type SubmitForReviewResult, type SubmitRevisionRequest, type SuppressionEntry, type SuppressionPrecheck, type SuppressionScope, type SuppressionSource, Suppressions, TerminalError, type Thread, type ThreadDetail, Threads, TimeoutError, type TransportCounts, UnavailableError, type UpdateCategoryRequest, type UpdateInboxRequest, type UpdateWebhookRequest, ValidationError, type VerifyRequest, type VerifyResponse, type VerifyWebhookOptions, type WaitForEmailRequest, type WaitForEmailResult, type WaitForReviewEventParams, type Webhook, type WebhookEvent, type WebhookPayload, Webhooks, type WhoAmI, WrongStateError, extractCredentials, extractLink, extractOtp, isProblemCode, isQueuedForReview, isSentImmediately, listPage, parseKeyTier, parseProblem, parseWebhook, reviewIdOf, sentMessageIdOf, serializeInclude, signWebhook, storageWarningFromHeaders, threadIdOf, tierAllowsOrgWildcard, tierNeedsExplicitBreadth, verifyWebhookSignature };

package/dist/index.js

@@ -1120,11 +1120,31 @@ ${parent.text}`;
 }
 var MockBackend = class {
   constructor() {
+    this.incomingActivation = false;
     this.administrativeFixtures = new AdministrativeFixtures();
     this.state = freshState();
     /** Save / edit a rule (mock) - append-only by supersession (D11). */
     this.learnedRules = /* @__PURE__ */ new Map();
   }
+  activationStatus() {
+    const activation = this.pendingActivation;
+    if (!activation) throw new Error("No incoming-email activation exists");
+    if (activation.expires_ms <= Date.now() && activation.state !== "activated") activation.state = "expired";
+    return { ...activation };
+  }
+  correctActivationEmail(email, revision) {
+    const activation = this.activationStatus();
+    if (activation.revision !== revision || !["pending", "proven"].includes(activation.state)) throw new Error("Activation changed or expired");
+    if (!/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(email)) throw new Error("Invalid human email");
+    this.pendingActivation = { ...activation, human_email: email, revision: revision + 1, state: "pending" };
+    return this.activationStatus();
+  }
+  /** Test-only trusted delivery; never available through a production client. */
+  proveFixtureActivation(sender) {
+    const activation = this.activationStatus();
+    if (activation.state !== "pending" || sender !== activation.human_email) throw new Error("Activation sender mismatch or expired");
+    this.pendingActivation = { ...activation, state: "proven" };
+  }
   configureAdministrativeFixture(credential) {
     this.administrativeFixtures = new AdministrativeFixtures(credential);
   }
@@ -1170,6 +1190,10 @@ var MockBackend = class {
     const agentId = existing?.agentId ?? rid("agt");
     const address = existing?.address ?? `${validatedSharedLocalPart(req.username ?? randomHandle())}@${FREE_SHARED_DOMAIN}`;
     const otp = "492013";
+    if (this.incomingActivation) {
+      if (existing) throw new Error("Activation already pending; use the existing key");
+      this.pendingActivation = { agent_id: agentId, address, human_email: email, created_ms: Date.now(), expires_ms: Date.now() + 864e5, revision: 1, state: "pending" };
+    }
     this.state.signupByEmail.set(email, { customerId, agentId, address, otp, verified: false });
     return {
       customer_id: customerId,
@@ -1179,16 +1203,24 @@ var MockBackend = class {
       scopes: ["signup:verify"],
       address,
       verified: false,
-      otp_sent_to: email,
-      otp_expires_at: new Date(Date.now() + 15 * 60 * 1e3).toISOString(),
-      message: "A verification code was sent to your email. Call verify with it."
+      ...this.incomingActivation ? {
+        activation_method: "incoming_email",
+        human_email: email,
+        activation_expires_at: new Date(this.pendingActivation.expires_ms).toISOString(),
+        message: `Your agent\u2019s inbox is almost ready. Send an email from ${email} to ${address} to activate it and link it to your human email.`
+      } : {
+        otp_sent_to: email,
+        otp_expires_at: new Date(Date.now() + 15 * 60 * 1e3).toISOString(),
+        message: "A verification code was sent to your email. Call verify with it."
+      }
     };
   }
   /** Confirm a signup OTP and return a full-scope key (mock). */
   verify(req) {
     for (const [, s] of this.state.signupByEmail) {
-      if (!s.verified && s.otp === req.otp.trim()) {
+      if (!s.verified && (this.incomingActivation ? this.activationStatus().state === "proven" && this.pendingActivation?.agent_id === s.agentId : s.otp === (req.otp ?? "").trim())) {
         s.verified = true;
+        if (this.incomingActivation && this.pendingActivation) this.pendingActivation.state = "activated";
         return {
           agent_id: s.agentId,
           agent_key: `pk_agent_${s.agentId.slice(4)}_${rid("sk").slice(3)}`,
@@ -3562,6 +3594,12 @@ var HttpTransport = class {
   signUp(req, signal) {
     return this.call({ method: "POST", path: "/v1/agent/sign-up", body: req, signal });
   }
+  activationStatus(signal) {
+    return this.call({ method: "GET", path: "/v1/agent/activation", signal });
+  }
+  correctActivationEmail(human_email, revision, signal) {
+    return this.call({ method: "PATCH", path: "/v1/agent/activation", body: { human_email, revision }, signal });
+  }
   verify(req, signal) {
     return this.call({ method: "POST", path: "/v1/agent/verify", body: req, signal });
   }
@@ -4194,6 +4232,12 @@ var MockTransport = class {
   async signUp(req) {
     return this.backend.signUp(req);
   }
+  async activationStatus() {
+    return this.backend.activationStatus();
+  }
+  async correctActivationEmail(email, revision) {
+    return this.backend.correctActivationEmail(email, revision);
+  }
   async verify(req) {
     return this.backend.verify(req);
   }
@@ -5737,6 +5781,12 @@ var ExtrovertClient = class _ExtrovertClient {
    * Pending verification is also fail-closed with 403 `signup_disabled` while
    * free signup is paused.
    */
+  activationStatus(signal) {
+    return this.transport.activationStatus(signal);
+  }
+  correctActivationEmail(human_email, revision, signal) {
+    return this.transport.correctActivationEmail(human_email, revision, signal);
+  }
   verify(req, signal) {
     return this.transport.verify(req, signal);
   }
@@ -5904,7 +5954,7 @@ async function signWebhook(secret, body, timestampSeconds) {
 }
 
 // src/contract.ts
-var CONTRACT_VERSION = "0.1.0-pre.16";
+var CONTRACT_VERSION = "0.1.0-pre.17";
 var CONTRACT_MANIFEST = {
   name: "extrovert.review-loop",
   version: CONTRACT_VERSION,
@@ -5980,6 +6030,26 @@ var CONTRACT_MANIFEST = {
   skills: ["extrovert-send-email", "extrovert-writing-rules"]
 };
 
-export { ADMINISTRATIVE_FIXTURE_KEY, API_VERSION_HEADER, Administration, ApiError, AuthenticationError, BornStaleError, BreadthRequiredError, CONTRACT_MANIFEST, CONTRACT_VERSION, CURRENT_API_VERSION, Categories, Commerce, ConflictError, ConnectionError, ContactLists, DEFAULT_BASE_URL, Domains, ExtrovertClient as Extrovert, ExtrovertClient, ForbiddenScopeError, IdempotencyConflictError, InboxHandle, Inboxes, IntentRequiredError, ListPage, MOCK_BASE_URL, Messages, MockBackend, NotFoundError, PROBLEM_CODES, PaymentRequiredError, PermissionError, ProjectInboxes, Projects, REVIEW_PROBLEM_RETRYABLE, RateLimitError, RecipientSuppressedError, ReviewConflictError, ReviewEvents, Reviews, Rules, SDK_VERSION, SendNeedsReconciliationError, StaleError, Submissions, Suppressions, TerminalError, Threads, TimeoutError, UnavailableError, ValidationError, Webhooks, WrongStateError, extractCredentials, extractLink, extractOtp, isProblemCode, isQueuedForReview, isSentImmediately, listPage, parseKeyTier, parseProblem, parseWebhook, reviewIdOf, sentMessageIdOf, serializeInclude, signWebhook, threadIdOf, tierAllowsOrgWildcard, tierNeedsExplicitBreadth, verifyWebhookSignature };
+// src/storage.ts
+function storageWarningFromHeaders(headers) {
+  if (headers.get("x-extrovert-storage-status") !== "available") return;
+  const threshold = Number(headers.get("x-extrovert-storage-threshold"));
+  if (!headers.has("x-extrovert-storage-used-bytes") || !headers.has("x-extrovert-storage-limit-bytes")) return;
+  const used = Number(headers.get("x-extrovert-storage-used-bytes"));
+  const limit = Number(headers.get("x-extrovert-storage-limit-bytes"));
+  if (![90, 95, 99, 100].includes(threshold) || !Number.isSafeInteger(used) || used < 0 || !Number.isSafeInteger(limit) || limit < 0) return;
+  const link = (name) => {
+    const raw = headers.get(name);
+    if (!raw || raw.length > 2048) return;
+    try {
+      const url = new URL(raw);
+      if (url.protocol === "https:" && !url.username && !url.password) return url.href;
+    } catch {
+    }
+  };
+  return { threshold, used_bytes: used, limit_bytes: limit, cleanup_url: link("x-extrovert-storage-cleanup-url"), billing_url: link("x-extrovert-storage-billing-url") };
+}
+
+export { ADMINISTRATIVE_FIXTURE_KEY, API_VERSION_HEADER, Administration, ApiError, AuthenticationError, BornStaleError, BreadthRequiredError, CONTRACT_MANIFEST, CONTRACT_VERSION, CURRENT_API_VERSION, Categories, Commerce, ConflictError, ConnectionError, ContactLists, DEFAULT_BASE_URL, Domains, ExtrovertClient as Extrovert, ExtrovertClient, ForbiddenScopeError, IdempotencyConflictError, InboxHandle, Inboxes, IntentRequiredError, ListPage, MOCK_BASE_URL, Messages, MockBackend, NotFoundError, PROBLEM_CODES, PaymentRequiredError, PermissionError, ProjectInboxes, Projects, REVIEW_PROBLEM_RETRYABLE, RateLimitError, RecipientSuppressedError, ReviewConflictError, ReviewEvents, Reviews, Rules, SDK_VERSION, SendNeedsReconciliationError, StaleError, Submissions, Suppressions, TerminalError, Threads, TimeoutError, UnavailableError, ValidationError, Webhooks, WrongStateError, extractCredentials, extractLink, extractOtp, isProblemCode, isQueuedForReview, isSentImmediately, listPage, parseKeyTier, parseProblem, parseWebhook, reviewIdOf, sentMessageIdOf, serializeInclude, signWebhook, storageWarningFromHeaders, threadIdOf, tierAllowsOrgWildcard, tierNeedsExplicitBreadth, verifyWebhookSignature };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map