@extrovert.dev/sdk 0.1.0-pre.6 → 0.1.0-pre.7

package/dist/index.d.cts

@@ -6,7 +6,7 @@
  * on 429/5xx, honors `Retry-After`, and surfaces every failure as a typed {@link ApiError}.
  */
 /** The library version, surfaced in the User-Agent. Kept in sync with package.json by build. */
-declare const SDK_VERSION = "0.1.0-pre.6";
+declare const SDK_VERSION = "0.1.0-pre.7";
 interface RetryOptions {
     /** Max retry attempts for idempotent requests on 429/5xx/network errors. Default 2. */
     maxRetries: number;
@@ -33,7 +33,7 @@ type ReviewInclude = "category" | "turns";
 declare function serializeInclude(include?: readonly string[]): string | undefined;
 
 /**
- * Extrovert API — typed request/response models.
+ * Extrovert API: typed request/response models.
  *
  * These mirror the Extrovert V1 REST contract (`/v1`, §8 of the build spec). The Go API does not
  * exist yet; field shapes here are the source of truth the client codes against and are validated
@@ -52,13 +52,13 @@ type IsoTimestamp = string;
  * its caveats but cannot exceed them (§5).
  *
  * The `mailbox:*` scope strings are the live wire contract (stored in issued keys'
- * caveats) and are NOT renamed despite the public "inbox" product naming — renaming
- * them would invalidate every key already minted. `domain:manage` gates the domains
- * plane; `domain:purchase` is additionally required (and is opt-in, default-off) to
- * buy a new domain (`POST /v1/domains` with `mode: "purchased"`). `review:act` gates
- * the BYO reviewer decision plane.
+ * caveats) and are NOT renamed despite the public "inbox" product naming: renaming
+ * them would invalidate every key already issued. `domain:manage` gates onboarding
+ * for domains the customer already controls. `commerce:request` permits quotes,
+ * requests, and status reads, but never a human approval transition or direct spend.
+ * `review:act` gates the BYO reviewer decision plane.
  */
-type Scope = "mailbox:create" | "mailbox:read" | "mailbox:send" | "mailbox:quota" | "mailbox:credentials" | "mailbox:delete" | "webhook:write" | "domain:manage" | "domain:purchase" | "review:act" | "signup:verify";
+type Scope = "mailbox:create" | "mailbox:read" | "mailbox:send" | "mailbox:quota" | "mailbox:credentials" | "mailbox:delete" | "webhook:write" | "domain:manage" | "domain:read" | "domain:purchase" | "commerce:request" | "review:act" | "signup:verify";
 /** How a Extrovert domain was onboarded (§7). */
 type OnboardingMode = "shared" | "purchased" | "ns_delegated" | "manual";
 /** Lifecycle status of an agent principal. */
@@ -68,35 +68,35 @@ type InboxStatus = "provisioning" | "live" | "disabled" | "deleted";
 /** Direction of a message relative to the inbox that owns it. */
 type MessageDirection = "inbound" | "outbound";
 /**
- * Request body for `POST /v1/enroll`. An agent redeems a `pk_enroll_...` token to mint a scoped
+ * Request body for `POST /v1/enroll`. An agent redeems a `pk_enroll_...` token to issue a scoped
  * agent key. Idempotent on `agent_handle` (à la AgentMail's `client_id`).
  */
 interface EnrollRequest {
     /**
      * The raw enrollment token, format `pk_enroll_<id>_<secret>`. Shown once at issue
-     * time. REQUIRED — this is the wire field the server reads (`json:"token"`); the
+     * time. REQUIRED: this is the wire field the server reads (`json:"token"`); the
      * request is serialized verbatim, so the field name must match the contract.
      */
     token: string;
     /**
      * Stable client-chosen handle for this agent. Redeeming twice with the same handle returns the
-     * same agent rather than minting a new one.
+     * same agent rather than creating a new one.
      */
     agent_handle: string;
-    /** Optional human-readable label for the minted agent. */
+    /** Optional human-readable label for the created agent. */
     agent_name?: string;
     /**
      * Optional idempotency key (sent as the `Idempotency-Key` header). A retry with
-     * the same key replays the original enrollment response instead of re-minting.
+     * the same key replays the original enrollment response instead of reissuing.
      */
     client_id?: string;
 }
 /**
  * Response from `POST /v1/enroll`. The `agent_key` is the short-lived, per-agent scoped key the
- * agent uses for all subsequent calls — never an org-wide key (§5, §14).
+ * agent uses for all subsequent calls: never an org-wide key (§5, §14).
  */
 interface EnrollResponse {
-    /** The minted agent principal id, e.g. `agt_7Hq2...`. */
+    /** The created agent principal id, e.g. `agt_7Hq2...`. */
     agent_id: string;
     /**
      * The scoped agent key, format `pk_agent_<id>_<secret>`. Returned once. Treat as a secret and
@@ -106,13 +106,13 @@ interface EnrollResponse {
     /** Scopes granted to this key (a subset of the enrollment token's scopes). */
     scopes: Scope[];
     /**
-     * The fixed org the minted key is bound to (the token's resolved org). The agent
+     * The fixed org the issued key is bound to (the token's resolved org). The agent
      * cannot change it; it is the canonical org for every subsequent call.
      */
     org_id?: string;
     /**
-     * The fixed project the minted key is bound to (the token's resolved project). The
-     * agent cannot change it — there is no mutable project selector for a scoped key.
+     * The fixed project the issued key is bound to (the token's resolved project). The
+     * agent cannot change it: there is no mutable project selector for a scoped key.
      */
     project_id?: string;
 }
@@ -128,7 +128,7 @@ interface Agent {
 /**
  * One arbitrary metadata value stored on an inbox. The wire allows string, number,
  * or boolean (nested objects and arrays are rejected). In a PATCH (update) body a
- * value of `null` for a key DELETES that key (the merge/null-delete semantics —
+ * value of `null` for a key DELETES that key (the merge/null-delete semantics :
  * see {@link UpdateInboxRequest.metadata}); a read shape ({@link Inbox.metadata})
  * never contains `null`.
  */
@@ -146,25 +146,28 @@ type InboxMetadata = Record<string, InboxMetadataValue>;
  */
 type InboxMetadataPatch = Record<string, InboxMetadataValue | null>;
 /**
- * Request body for `POST /v1/inboxes`. All fields optional: the default path mints an address on a
- * pre-warmed, pre-ACS-verified shared subdomain of `smtp.extrovert.dev`, so creation is instant.
+ * Request body for `POST /v1/inboxes`. All fields are optional. The default path
+ * creates an address on the account's platform shared domain.
  */
 interface CreateInboxRequest {
     /**
-     * Desired local part (before the `@`). If omitted, the server generates a random handle.
-     * Example: `agent7` -> `agent7@smtp.extrovert.dev`.
+     * Desired local part (before the `@`). Shared-domain names are normalized,
+     * must be at least 5 characters, and cannot use reserved names. If omitted,
+     * the server generates a random handle.
+     * Example: `agent7` -> `agent7@extrovertmail.com` for paid accounts or
+     * `agent7@free.extrovertmail.com` for free accounts.
      */
     username?: string;
     /**
-     * Domain to mint on. Must be an org domain the calling key is scoped to. If omitted, the default
-     * shared subdomain is used (zero-config path).
+     * Domain to create the inbox on. Must be an org domain the calling key is
+     * scoped to. If omitted, the account's shared domain is used.
      */
     domain?: string;
     /** Human-readable display name used in the `From:` header on sends. */
     display_name?: string;
     /**
      * Idempotency handle. Re-creating with the same `client_id` returns the existing inbox rather
-     * than minting a duplicate.
+     * than creating a duplicate.
      */
     client_id?: string;
     /**
@@ -181,14 +184,14 @@ interface CreateInboxRequest {
      */
     metadata?: InboxMetadata;
     /**
-     * Optional assertion that must match the key's bound project — NEVER a selector.
+     * Optional assertion that must match the key's bound project: NEVER a selector.
      * A mismatch is a 403. The inbox is always created in the key's stored project;
      * the assertion only lets a caller defend against a misrouted key.
      */
     project_id?: string;
     /**
-     * Whether to return the inbox credentials (IMAP/SMTP password) in the response. Defaults to
-     * false; credentials are sealed at rest and only surfaced on explicit request.
+     * Whether to return paid-inbox credentials (IMAP/SMTP password) in the response.
+     * Requires the `mailbox:credentials` permission and defaults to false.
      */
     return_credentials?: boolean;
 }
@@ -223,15 +226,17 @@ interface UpdateInboxRequest {
      */
     metadata?: InboxMetadataPatch | null;
     /**
-     * Optional assertion that must match the key's bound project — NEVER a selector.
+     * Optional assertion that must match the key's bound project: NEVER a selector.
      * A mismatch is a 403.
      */
     project_id?: string;
 }
 /**
- * IMAP/SMTP connection config + login for an inbox, only present when
+ * IMAP/SMTP connection config + login for a paid inbox. Export requires the
+ * `mailbox:credentials` permission. On create it is present only when
  * `return_credentials` was requested. (The IMAP/SMTP host/port/password are mail
- * protocol internals — the "credentials" of the underlying mailbox.)
+ * protocol internals. Exported credentials do not mean direct SMTP is enabled.
+ * Check `direct_smtp_enabled` on the inbox before attempting an SMTP send.)
  */
 interface InboxCredentials {
     imap_host: string;
@@ -239,7 +244,7 @@ interface InboxCredentials {
     smtp_host: string;
     smtp_port: number;
     username: string;
-    /** Plaintext password — shown once, never re-retrievable. Treat as a secret. */
+    /** Plaintext mailbox password. Credential reads can return it again. Treat every response as a secret. */
     password: string;
 }
 /** A provisioned inbox (read shape). */
@@ -252,7 +257,7 @@ interface Inbox {
     object?: "inbox";
     /**
      * The canonical OPAQUE inbox id and path key (`/v1/inboxes/{inbox_id}` /
-     * `/v1/projects/{project_id}/inboxes/{inbox_id}`). Treat it as opaque — do not parse
+     * `/v1/projects/{project_id}/inboxes/{inbox_id}`). Treat it as opaque: do not parse
      * the `pmbx_` prefix.
      */
     id: string;
@@ -261,11 +266,11 @@ interface Inbox {
      */
     org_id?: string;
     /**
-     * The project this inbox belongs to (RFC D9) — the partition key. Optional for
+     * The project this inbox belongs to (RFC D9): the partition key. Optional for
      * legacy/mock shapes.
      */
     project_id?: string;
-    /** Full address, e.g. `agent7@smtp.extrovert.dev`. A within-project email alias for {@link Inbox.id}. */
+    /** Full address, e.g. `agent7@extrovertmail.com`. A within-project email alias for {@link Inbox.id}. */
     address: string;
     username: string;
     domain: string;
@@ -273,10 +278,17 @@ interface Inbox {
     status: InboxStatus;
     /** Onboarding mode of the domain this inbox lives on. */
     onboarding_mode: OnboardingMode;
-    /** Agent that owns this inbox, if minted by an agent key. */
+    /** Agent that owns this inbox, if created by an agent key. */
     agent_id: string | null;
     /** Effective enforced rolling-24-hour recipient cap for this inbox. */
     daily_send_limit: number;
+    /**
+     * Whether raw protocol SMTP is currently allowed. It defaults to false, is
+     * controlled by a human per inbox, and is effective only while the inbox has a
+     * paid entitlement. Exported credentials do not imply this is true. API, SDK,
+     * and MCP sends remain governed by the Review Loop regardless of this value.
+     */
+    direct_smtp_enabled: boolean;
     /**
      * Inbound webhook registered for this inbox, if any. The wire field is
      * `webhook_url` (the server returns `webhook_url`, never `inbound_webhook_url`);
@@ -285,7 +297,7 @@ interface Inbox {
     webhook_url?: string | null;
     /**
      * Arbitrary key-value metadata stored on the inbox (AgentMail parity). Always an
-     * object — `{}` when none is set, never null. Values are string, number, or
+     * object: `{}` when none is set, never null. Values are string, number, or
      * boolean. Project-scoped: an agent key only reads/mutates metadata for inboxes in
      * its bound project.
      */
@@ -375,7 +387,7 @@ interface AttachmentInput {
  * A stored message in an inbox (read shape). Mirrors the canonical Go wire shape
  * (`messageResponse`): `id` is the opaque, inbox-resolvable id; `inbox` is the
  * owning address; `seen` is the native IMAP \Seen read state (Extrovert has no
- * Gmail-style labels — read/unread is the \Seen flag); `folder` is the IMAP
+ * Gmail-style labels: read/unread is the \Seen flag); `folder` is the IMAP
  * mailbox; `date` is the raw `Date` header.
  */
 interface Message {
@@ -387,6 +399,8 @@ interface Message {
     from: EmailAddress;
     to: EmailAddress[];
     cc?: EmailAddress[];
+    /** Reply-To addresses parsed from the source message. */
+    reply_to?: EmailAddress[];
     subject: string;
     /** Decoded text/plain MIME alternative; null when absent and never derived from HTML. */
     text: string | null;
@@ -398,6 +412,10 @@ interface Message {
     extracted_html?: string | null;
     /** RFC 5322 `Message-ID` header value. */
     message_id: string;
+    /** Source RFC 5322 parent Message-ID, when present. */
+    in_reply_to?: string;
+    /** Source RFC 5322 References chain, when present. */
+    references?: string;
     /** IMAP folder the message lives in (e.g. `INBOX`, `Junk`). */
     folder?: string;
     /** Whether the message has been read (native IMAP \Seen flag). */
@@ -433,7 +451,7 @@ interface SearchMessagesParams {
     offset?: number;
     cursor?: string;
 }
-/** Request body for `PATCH /v1/inboxes/{addr}/messages/{id}` — read-state toggle. */
+/** Request body for `PATCH /v1/inboxes/{addr}/messages/{id}`: read-state toggle. */
 interface MarkReadRequest {
     /** true to set the \Seen flag (read), false to clear it (unread). */
     read: boolean;
@@ -490,7 +508,7 @@ interface SendRequest {
     /** Override the `Reply-To` header. */
     reply_to?: string;
     /**
-     * Idempotency key — a replay with the same key returns the first response
+     * Idempotency key: a replay with the same key returns the first response
      * instead of sending a second message.
      *
      * Sent as the `Idempotency-Key` HEADER and STRIPPED from the JSON body: the
@@ -527,7 +545,7 @@ interface SendRequest {
  * Request body for the canonical thread-aware reply,
  * `POST /v1/inboxes/{addr}/reply`. Exactly one of `thread_id` / `message_id`
  * selects the parent; the server derives `to` (original participants), the
- * `Re:`-prefixed subject, and the `In-Reply-To` / `References` headers — you do
+ * `Re:`-prefixed subject, and the `In-Reply-To` / `References` headers: you do
  * NOT pass `to`. Set `reply_all` to reply to every thread recipient.
  */
 interface ReplyRequest {
@@ -535,6 +553,12 @@ interface ReplyRequest {
     thread_id?: string;
     /** Reply to this specific message. One of thread_id / message_id. */
     message_id?: string;
+    /**
+     * Optional optimistic stale-context guard for a thread reply. Use the
+     * `last_message_id` from the thread you read; a 409 means the thread advanced.
+     * This detects stale context at submission, but is not an atomic send lock.
+     */
+    expected_last_message_id?: string;
     /** At least one of `text` / `html` is required. */
     text?: string;
     html?: string;
@@ -544,7 +568,7 @@ interface ReplyRequest {
     reply_to?: string;
     /** Reply to all thread recipients, not just the original sender. */
     reply_all?: boolean;
-    /** See {@link SendRequest.idempotency_key} — sent as a header, never in the body. */
+    /** See {@link SendRequest.idempotency_key}: sent as a header, never in the body. */
     idempotency_key?: string;
     headers?: Record<string, string>;
     /** Files to attach (base64). Emitted as a multipart/mixed message. */
@@ -566,7 +590,7 @@ interface ReplyRequest {
  * A forward is governed by the SAME review policy as a send, and for a stronger
  * reason: it is an outbound message to arbitrary NEW recipients that quotes an
  * entire inbound thread. Leaving it outside the policy would have made forward
- * the documented bypass — and a worse one than a bare send, because it
+ * the documented bypass: and a worse one than a bare send, because it
  * exfiltrates a received conversation.
  */
 interface ForwardRequest {
@@ -593,7 +617,7 @@ interface ForwardRequest {
     /** Agent-supplied confidence (0..1); see {@link SendRequest.category_confidence}. */
     category_confidence?: number;
     composition_token?: string;
-    /** See {@link SendRequest.idempotency_key} — sent as a header, never in the body. */
+    /** See {@link SendRequest.idempotency_key}: sent as a header, never in the body. */
     idempotency_key?: string;
 }
 /**
@@ -603,8 +627,8 @@ interface ForwardRequest {
  * Its shape differs per verb, which is why almost every field is optional and
  * this type is NOT the whole story (see {@link SendOutcome}):
  *
- *  - `send`          → `{status:"sent", message_id, review_id}` — **no `thread_id`**.
- *  - `reply`/`forward` → `{message_id, thread_id, review_id}` — no `status`.
+ *  - `send`          → `{status:"sent", message_id, review_id}`: **no `thread_id`**.
+ *  - `reply`/`forward` → `{message_id, thread_id, review_id}`: no `status`.
  *
  * `thread_id` was declared REQUIRED here for a long time while the send path
  * never returned one, so `res.thread_id` typechecked and was `undefined` at
@@ -619,7 +643,7 @@ interface SendResult {
     kind?: undefined;
     /** Extrovert message id of the sent outbound message. */
     message_id: string;
-    /** Thread id — present on reply/forward; ABSENT on the direct-send response. */
+    /** Thread id: present on reply/forward; ABSENT on the direct-send response. */
     thread_id?: string;
     /**
      * Opaque review id (rr_…) of the review row that governed this send. Every
@@ -637,16 +661,16 @@ interface SendResult {
  * Every shape `inbox.send()` / `.reply()` / `.forward()` / `.submitForReview()`
  * can return, discriminated by `kind`.
  *
- * There are three, because the resolved review policy — not the caller — decides
+ * There are three, because the resolved review policy: not the caller: decides
  * what happens to an outbound message:
  *
- *  - {@link QueuedForReviewResult} (`kind:"queued_for_review"`, 202) — parked for
+ *  - {@link QueuedForReviewResult} (`kind:"queued_for_review"`, 202): parked for
  *    a human. **Nothing has been delivered yet.** Monitor
  *    `reviewEvents.wait({review_id})` until a `sent` or `send_failed` event
  *    arrives.
- *  - {@link SentResult} (`kind:"sent"`, 200) — delivered immediately, returned to
+ *  - {@link SentResult} (`kind:"sent"`, 200): delivered immediately, returned to
  *    callers that opted into the review loop by passing mode/intent/category_id.
- *  - {@link SendResult} (no `kind`, 202) — the legacy immediate-send body for a
+ *  - {@link SendResult} (no `kind`, 202): the legacy immediate-send body for a
  *    caller that mentioned none of those fields.
  *
  * Under the default `require_review` policy a send WITHOUT an `intent` does not
@@ -658,15 +682,15 @@ type SendOutcome = SendResult | SentResult | QueuedForReviewResult;
 /** Per-send agent assertion (D3/D6). The resolved policy may downgrade `direct`. */
 type ReviewMode = "review" | "direct";
 /**
- * The account/inbox review policy — the AUTHORITY on what happens to an outbound
+ * The account/inbox review policy: the AUTHORITY on what happens to an outbound
  * message. There is no way for a caller to opt out of it.
  *
- *  - `require_review` — the default for every account. A send WITHOUT an `intent`
+ *  - `require_review`: the default for every account. A send WITHOUT an `intent`
  *    is rejected 422 `intent_required` (nothing sent, nothing queued); a send
  *    WITH one is queued for a human (202 `queued_for_review`).
- *  - `allow_direct` — a bare send (no mode/intent/category_id) is delivered
+ *  - `allow_direct`: a bare send (no mode/intent/category_id) is delivered
  *    immediately. Supplying an intent, or `mode: "review"`, still queues it.
- *  - `auto_send_graduated` — a categorized message that clears the graduation
+ *  - `auto_send_graduated`: a categorized message that clears the graduation
  *    gates auto-sends; everything else is queued.
  *
  * Read {@link Inbox.effective_review_policy} once before your first send rather
@@ -685,7 +709,7 @@ interface ReviewIntent {
         urgency?: string;
     };
 }
-/** A review request (rr_…) — the pre-send record under the Review Loop. */
+/** A review request (rr_…): the pre-send record under the Review Loop. */
 interface Review {
     id: string;
     state: ReviewState;
@@ -718,8 +742,8 @@ interface Review {
      * `failed`**.
      *
      * `failed` is included deliberately even though it is not in the formal
-     * terminal set: nothing in the product can move a failed review — the console
-     * cannot re-approve it — so a flag that said `false` there would invite an
+     * terminal set: nothing in the product can move a failed review: the console
+     * cannot re-approve it: so a flag that said `false` there would invite an
      * agent to wait forever on a row nobody will ever touch.
      *
      * An agent that lost its event cursor (a crash, a fresh process) reads this
@@ -733,7 +757,7 @@ interface Review {
     send_error?: string;
     /**
      * How the message was released, once sent: `human_reviewed`,
-     * `reviewer_approved`, `graduated_auto` or `agent_direct` — without a turns
+     * `reviewer_approved`, `graduated_auto` or `agent_direct`: without a turns
      * fetch.
      */
     send_path?: string;
@@ -775,7 +799,7 @@ interface ReviewFeedbackComment {
  * The human's assembled feedback for a review (spec §11), returned by
  * `reviews.feedback(id)`: the unified + structured diff of the human edit, the human
  * comments / rejection feedback, the decision, and the rules born from this review
- * (rule_ ids whose source_review_id is this review). $0 LLM — pure assembly.
+ * (rule_ ids whose source_review_id is this review). $0 LLM: pure assembly.
  */
 interface ReviewFeedback {
     review_id: string;
@@ -792,7 +816,7 @@ interface PostReviewChatRequest {
 }
 /**
  * Body for posting a new agent draft under a parent_revision CAS (spec §5.2; M5,
- * D17). parent_revision is the PRIMARY CAS — it must equal the draft's current
+ * D17). parent_revision is the PRIMARY CAS: it must equal the draft's current
  * revision, else 409 STALE with NO mutation. version is OPTIONAL belt-and-suspenders.
  */
 interface SubmitRevisionRequest {
@@ -801,7 +825,7 @@ interface SubmitRevisionRequest {
     subject?: string;
     /**
      * The redrafted plain-text body. Canonical, matching `text` on send / reply /
-     * forward — the same concept should not have two names in the one flow an
+     * forward: the same concept should not have two names in the one flow an
      * agent runs most.
      */
     text?: string;
@@ -854,7 +878,7 @@ type ReviewEventReason =
  * cancel, so compose and submit a NEW message rather than retrying this one.
  */
  | "send_failed"
-/** Withdrawn — by you, by a human, or as the close-out of a failed send. */
+/** Withdrawn: by you, by a human, or as the close-out of a failed send. */
  | "cancelled"
 /**
  * You were front-run: the review reached a terminal state while you were
@@ -862,9 +886,9 @@ type ReviewEventReason =
  * `cancel_review` answered 409 `terminal`. STOP retrying that review.
  */
  | "front_run_next"
-/** RESERVED — never emitted. Terminal success is `sent`. */
+/** RESERVED: never emitted. Terminal success is `sent`. */
  | "approved"
-/** RESERVED — no production producer (the D13 staleness detector is unbuilt). */
+/** RESERVED: no production producer (the D13 staleness detector is unbuilt). */
  | "staleness";
 /**
  * One durable review nudge (ndg_…) drained from the AUTHORITATIVE liveness queue
@@ -880,12 +904,12 @@ interface ReviewEvent {
     payload?: Record<string, unknown>;
     created_at: IsoTimestamp;
 }
-/** The agent's per-(agent, review) ack frontier — its strict-FIFO position. */
+/** The agent's per-(agent, review) ack frontier: its strict-FIFO position. */
 interface ReviewEventCursor {
     review_id: string;
     last_acked_seq: number;
 }
-/** Drain result for list/wait — un-acked events in FIFO seq order + cursors. */
+/** Drain result for list/wait: un-acked events in FIFO seq order + cursors. */
 interface ReviewEventsResult {
     events: ReviewEvent[];
     cursors?: ReviewEventCursor[];
@@ -901,7 +925,7 @@ interface ListReviewEventsParams {
  * A category (cat_…) in the Review Loop registry (D9/D10). `name` + `description`
  * are skill-style metadata the agent fuzzy-matches against; nothing keys on the
  * name (renames never break a reference). Categories are CUSTOMER-scoped and
- * agent-attributed — the deliberate cross-agent-404 exception. Opaque ids only.
+ * agent-attributed: the deliberate cross-agent-404 exception. Opaque ids only.
  */
 interface Category {
     id: string;
@@ -930,13 +954,13 @@ interface ProposeCategoryRequest {
     /** Defaults to org_shared server-side. */
     scope?: "org_shared" | "agent_private";
 }
-/** Rename / re-describe a category — metadata only (spec §5.5; D10). */
+/** Rename / re-describe a category: metadata only (spec §5.5; D10). */
 interface UpdateCategoryRequest {
     name?: string;
     description?: string;
 }
 /**
- * The account-wide default risk dial (Review Loop, D4/D12) — the values a per-
+ * The account-wide default risk dial (Review Loop, D4/D12): the values a per-
  * category null override inherits. The single user-configurable brand-risk lever.
  */
 interface AccountRiskDial {
@@ -974,7 +998,7 @@ interface CategoryRiskDial {
 }
 /**
  * The effective risk dial (Review Loop, agent plane; D4/D12): the account default
- * plus every category's overrides. Read-only for agents — flipping the dial is a
+ * plus every category's overrides. Read-only for agents: flipping the dial is a
  * console (human) action (D16).
  */
 interface RiskDial {
@@ -1027,7 +1051,7 @@ type ReviewerAction = "approve" | "edit" | "reject" | "escalate";
  * The REVIEWER's read-only decision surface for a review (BYO review-agent plane;
  * D5/§9), returned by `reviews.decisionContext(id)`: the intent + current draft + the
  * append-only thread + the two-circuit-breaker budget. `force_to_human` is true when
- * EITHER breaker has tripped — the reviewer's next reject would be FORCED to the human
+ * EITHER breaker has tripped: the reviewer's next reject would be FORCED to the human
  * regardless of intent (the human is the only terminal authority, D17).
  */
 interface ReviewDecisionContext {
@@ -1051,7 +1075,7 @@ interface ReviewDecisionContext {
 /**
  * Body for a reviewer decision (`reviews.decide(id, req)`; reviewer_decide, D5/§9).
  * `action` is approve|edit|reject|escalate. `revision`/`version` are the optimistic CAS
- * — a mismatch is a 409 STALE with NO mutation (the human always wins, D17). subject/
+ *: a mismatch is a 409 STALE with NO mutation (the human always wins, D17). subject/
  * body carry the edited content for the edit action; feedback is the reviewer's note.
  */
 interface ReviewerDecisionRequest {
@@ -1068,8 +1092,8 @@ interface ReviewerDecisionRequest {
     feedback?: string;
 }
 /**
- * The outcome of a reviewer decision (D5/§9). `kind=sent` when the platform ACS-sent
- * with the COMPOSER's creds (approve/edit — the reviewer NEVER holds mailbox:send);
+ * The outcome of a reviewer decision (D5/§9). `kind=sent` when the platform sent
+ * with the COMPOSER's creds (approve/edit: the reviewer NEVER holds mailbox:send);
  * `kind=sent_to_human` when the draft returned to the human queue (reject/escalate, or
  * a reject FORCED to the human by a circuit breaker, with `forced_by_breaker` naming it).
  */
@@ -1085,7 +1109,7 @@ interface ReviewerDecisionResult {
 /**
  * The D19/§8 backlog-reconciliation snapshot for a category (agent-readable, $0-LLM).
  * Counts the QUEUED drafts that are stale vs current-enough against the current
- * category rules-version + house-style version (a pure integer compare). Read-only —
+ * category rules-version + house-style version (a pure integer compare). Read-only :
  * the agent READS the picture; the human / hooks TRIGGER the actual sweep.
  */
 interface ScanBacklogStatus {
@@ -1108,7 +1132,7 @@ interface PacingItem {
     state: "behind_cursor" | "in_window_fresh" | "in_window_redrafting" | "ahead";
 }
 /**
- * The demand-driven pacing snapshot for a category (agent-readable, $0-LLM — M7 Slice
+ * The demand-driven pacing snapshot for a category (agent-readable, $0-LLM: M7 Slice
  * B/§8): the human review cursor, the effective window/ceiling/interval, the queued
  * count, and each queued draft's in-window/redrafting/behind-cursor classification.
  * Read-only; the cursor advances from the human's console approve/reject/edit actions.
@@ -1121,7 +1145,7 @@ interface CategoryPacingState {
     cursor_advanced_count: number;
     /** Effective freshness window (default org_settings.lookahead_window=3). */
     lookahead_window: number;
-    /** HARD per-nudge fan-out ceiling (default 10) — one nudge can never fan to 500. */
+    /** HARD per-nudge fan-out ceiling (default 10): one nudge can never fan to 500. */
     rework_batch_max: number;
     /** Per-agent token-bucket interval that coalesces feedback storms (default 5000). */
     nudge_min_interval_ms: number;
@@ -1202,11 +1226,11 @@ interface RuleSnapshot extends Page<Rule> {
 /**
  * Save / edit a writing rule (append-only by supersession; spec §5.4; D11).
  *
- * Layering (org/project): an agent-plane save is ALWAYS project-layer — the saved
+ * Layering (org/project): an agent-plane save is ALWAYS project-layer: the saved
  * rule's `rule_layer` is `project`, bound to the calling key's project. There is no
  * settable `rule_layer` here: an agent cannot create org-layer / house-style
  * (`rule_layer="org"`) rules in v1; authoring org rules is a console/admin action.
- * (`scope: "general"` still means a house-style rule WITHIN the project layer —
+ * (`scope: "general"` still means a house-style rule WITHIN the project layer :
  * `scope` is the category axis, `rule_layer` is the ownership axis.)
  */
 interface SaveRuleRequest {
@@ -1229,7 +1253,7 @@ interface SaveRuleRequest {
     /**
      * D8 retro-propagation HUMAN OPT-IN (default false). When true, a NEW category rule
      * that could apply to pending siblings enqueues ONE propagate_general_rule nudge
-     * (siblings + suggested_batch) so the agent redrafts a FEW at a time — never the
+     * (siblings + suggested_batch) so the agent redrafts a FEW at a time: never the
      * whole queue. Set only after the human said "apply to N pending?".
      */
     propagate_to_pending?: boolean;
@@ -1286,7 +1310,7 @@ interface SentResult {
     };
     /**
      * The review row that governed this send (ADDITIVE). Present on every send the
-     * service routed, i.e. all of them — it is the handle that makes a post-crash
+     * service routed, i.e. all of them: it is the handle that makes a post-crash
      * `reviews.get(id)` possible on the direct path too.
      */
     review?: {
@@ -1306,14 +1330,20 @@ interface Thread {
     /** Owning inbox address. */
     inbox_id: string;
     subject: string;
-    /** Distinct participant address strings across the thread. */
+    /** List/search summaries use the latest envelope; thread detail may include the full conversation set. */
     participants: string[];
     message_count: number;
     last_message_at: IsoTimestamp;
     /** Most-recent-message preview snippet. */
     snippet: string;
+    /** Whether the latest message is unread. */
+    unread?: boolean;
+    /** Whether the newest message has one or more attachments. */
+    last_message_has_attachments?: boolean;
+    /** Opaque message id for optimistic reply freshness checks. */
+    last_message_id?: string;
 }
-/** A thread plus its messages (oldest-first) — `GET /v1/inboxes/{addr}/threads/{id}`. */
+/** A thread plus its messages (oldest-first): `GET /v1/inboxes/{addr}/threads/{id}`. */
 interface ThreadDetail extends Thread {
     messages: Message[];
 }
@@ -1485,7 +1515,7 @@ interface SuppressionEntry {
 /**
  * The result of a pre-check (`GET /v1/suppressions?recipient=…`): whether the
  * caller's OWN org suppresses the recipient, plus the matching org rows. Reflects
- * only the caller's org state — never a global/shared/cross-tenant opt-out.
+ * only the caller's org state: never a global/shared/cross-tenant opt-out.
  */
 interface SuppressionPrecheck {
     recipient: string;
@@ -1504,7 +1534,7 @@ interface ListSuppressionsParams {
     /** Opaque cursor from a previous page's `next_cursor`. */
     cursor?: string;
 }
-/** One DNS record the customer must set (manual mode) or that we serve (ns_delegated). */
+/** One nameserver record the customer must publish for delegated setup. */
 interface DomainRecord {
     name: string;
     type: string;
@@ -1518,40 +1548,43 @@ type DomainScope = "org" | "project";
 /**
  * Request body for `POST /v1/domains`. Onboards/adds a domain for the customer.
  *
- * Permissions: every mode needs the `domain:manage` scope (the route gate); `mode:
- * "purchased"` spends money at the registrar and therefore ADDITIONALLY requires the
- * explicit, default-off `domain:purchase` scope (and is capped by the org/project
- * purchased-domain plan limit, enforced before any registrar spend). `manual` and
- * `ns_delegated` need `domain:manage` only.
+ * Requires the `domain:manage` scope. This request only adds a delegated inbox
+ * domain the customer controls; it cannot register one.
+ * New registrations use the separate commerce quote/request workflow.
  */
 interface OnboardDomainRequest {
     domain: string;
     /**
-     * Onboarding path. Defaults to `ns_delegated` server-side when omitted. `purchased`
-     * additionally requires the `domain:purchase` scope.
+     * Onboarding path. Defaults to `ns_delegated` server-side when omitted.
      */
-    mode?: OnboardingMode;
-    /** A-record IP served at a delegated zone's apex (ns_delegated only). */
-    mail_host_ip?: string;
+    mode?: "ns_delegated";
     /**
      * Domain visibility. Defaults to `org` (org-shared, usable by every project in the
      * org). `project` binds the domain to the key's OWN bound project (never
-     * client-selected) so it is only visible/mintable from that project. A
+     * client-selected) so it is only visible/creatable from that project. A
      * legacy/unscoped key (no bound project) falls back to `org`.
      */
     scope?: DomainScope;
     /**
-     * Optional assertion that must match the key's bound project — NEVER a selector.
+     * Optional assertion that must match the key's bound project: NEVER a selector.
      * A mismatch is a 403. The binding is always derived from the key.
      */
     project_id?: string;
 }
 /**
  * The agent-facing view of one onboarded domain (mirrors the Go `domainResponse`).
- * `records` (and `delegation_ns` for ns_delegated) are present on get / onboard /
- * verify and empty on list reads and for shared/purchased modes.
+ * `delegation_ns` is present on get / onboard / verify for delegated domains and
+ * empty on list reads. `records` remains for legacy response compatibility.
  */
 interface Domain {
+    /** Authoritative outcome. Absent only when talking to an older server; never infer readiness from DKIM. */
+    readiness?: DomainReadiness;
+    /** Customer DNS health, independent of mail provisioning readiness. */
+    delegation?: {
+        status: "pending" | "confirmed" | "rechecking" | "check_delayed" | "action_required";
+        checked_at?: string;
+        confirmed_at?: string;
+    };
     id: string;
     domain: string;
     mode: OnboardingMode;
@@ -1566,10 +1599,48 @@ interface Domain {
     /** Human-facing copy for what the customer must do next. */
     instruction?: string;
 }
+interface DomainStatusEvent {
+    id: string;
+    type: string;
+    domain: string;
+    summary: string;
+    data: {
+        domain: string;
+        readiness: DomainReadiness;
+    };
+    created_at: string;
+}
+interface DomainStatusEventPage {
+    items: DomainStatusEvent[];
+    next_cursor: string;
+    has_more: boolean;
+    poll_after_seconds: number;
+}
+interface DomainReadiness {
+    status: "waiting_for_dns" | "checking" | "setting_up" | "ready" | "action_required" | "needs_attention";
+    label: string;
+    summary: string;
+    reason: string;
+    action_required_by: "customer" | "extrovert" | "none";
+    next_action: "check_dns_entries" | "restore_dns" | "wait" | "create_inbox" | "use_inbox" | "ask_owner_to_create_inbox";
+    /** Domain configuration only; creating an inbox still requires permission and available plan capacity. */
+    ready_for_inboxes: boolean;
+    checked_at?: IsoTimestamp;
+    next_check_at?: IsoTimestamp;
+    poll_after_seconds: number;
+    /** Omitted without inbox-read permission. Counts never imply organization-wide visibility for an agent. */
+    inboxes?: {
+        scope: "agent" | "project" | "organization";
+        total: number;
+        ready: number;
+        setting_up: number;
+        needs_attention: number;
+    };
+}
 /**
  * Result of an ACCEPTED domain offboard (`DELETE /v1/domains/{domain}` → HTTP 202).
- * Teardown — reaping the outbound provider senders + routing rows, then scrubbing
- * the DNS zone/records and the domain row — runs as an async job. Poll `status_url`
+ * Teardown: reaping the outbound provider senders + routing rows, then scrubbing
+ * the DNS zone/records and the domain row: runs as an async job. Poll `status_url`
  * (`GET /v1/jobs/{job_id}`, via {@link Job} / `client.getJob(job_id)`) until
  * `status` is terminal (succeeded/failed/cancelled); the domain is ACCEPTED for
  * offboard, not yet fully torn down when this returns.
@@ -1594,6 +1665,95 @@ interface Job {
     updated_at: IsoTimestamp;
     finished_at?: IsoTimestamp;
 }
+/** One exact reason a commerce request cannot advance automatically. */
+interface CommerceBlocker {
+    code: string;
+    message: string;
+    scope?: "org" | "project" | "agent" | string;
+    limit_id?: string;
+    used_cents?: number;
+    reserved_cents?: number;
+    limit_cents?: number;
+    requested_cents?: number;
+    used_count?: number;
+    reserved_count?: number;
+    limit_count?: number;
+    reset_at?: IsoTimestamp;
+    manage_url?: string;
+}
+/** Request body for the non-spending domain quote endpoint. */
+interface QuoteDomainRequest {
+    domain: string;
+}
+/** Current, expiring domain registration quote. Quoting never purchases. */
+interface DomainQuote {
+    object: "domain_quote";
+    domain: string;
+    available: boolean;
+    currency: string;
+    quote_cents: number;
+    renewal_cents: number;
+    premium: boolean;
+    quote_expires_at: IsoTimestamp;
+    required_plan?: string;
+    required_plan_price_cents?: number;
+    blockers: CommerceBlocker[];
+}
+type CommerceRequestKind = "domain_purchase" | "plan_change";
+interface RequestDomainPurchaseRequest {
+    domain: string;
+    /** Stable retry identity; sent as the `Idempotency-Key` header, not in the JSON body. */
+    idempotency_key: string;
+    scope?: DomainScope;
+    rationale?: string;
+    auto_renew?: boolean;
+}
+interface RequestPlanChangeRequest {
+    target_plan: "free" | "developer" | "startup";
+    /** Stable retry identity; sent as the `Idempotency-Key` header, not in the JSON body. */
+    idempotency_key: string;
+    rationale?: string;
+}
+interface ListCommerceRequestsParams {
+    limit?: number;
+    page?: string;
+}
+/** Durable poll shape for an agent-initiated financial request. */
+interface CommerceRequest {
+    object: "commerce_request";
+    id: string;
+    project_id?: string;
+    agent_id?: string;
+    kind: CommerceRequestKind;
+    state: string;
+    domain?: string;
+    domain_scope?: DomainScope;
+    target_plan?: string;
+    current_plan?: string;
+    rationale?: string;
+    currency: string;
+    quote_cents: number;
+    renewal_cents: number;
+    approved_max_cents?: number;
+    quote_expires_at?: IsoTimestamp;
+    auto_renew: boolean;
+    required_plan?: string;
+    required_plan_price_cents?: number;
+    blocker_code?: string;
+    blockers: CommerceBlocker[];
+    approval_url?: string;
+    payment_action_url?: string;
+    external_job_id?: string;
+    effective_at?: IsoTimestamp;
+    notification_state?: string;
+    notification_last_error?: string;
+    agent_next_action: string;
+    retry_safe: boolean;
+    poll_after_seconds: number;
+    version: number;
+    created_at: IsoTimestamp;
+    updated_at: IsoTimestamp;
+}
 /**
  * One event from the SSE stream (`GET /v1/inboxes/{addr}/stream` or `GET
  * /v1/events`). It is the SAME envelope a webhook delivers, so a stream consumer
@@ -1630,12 +1790,12 @@ interface StreamOptions {
 interface SignUpRequest {
     /** Human email that receives the one-time verification code. */
     human_email: string;
-    /** Desired local-part for the first inbox (optional; auto-generated when omitted). */
+    /** Desired local part on `free.extrovertmail.com`. It must normalize to at least 5 characters and cannot use a reserved name. */
     username?: string;
 }
 /**
  * Response from `POST /v1/agent/sign-up`. The `agent_key` is a LIMITED-scope key
- * (read-only) that expires with the emailed code. Successful verification revokes
+ * (verification-only, with no inbox read or send permission) that expires with the emailed code. Successful verification revokes
  * it and returns a replacement full-scope key. The OTP itself is never returned.
  */
 interface SignUpResponse {
@@ -1645,7 +1805,7 @@ interface SignUpResponse {
     agent_key: string;
     key_prefix: string;
     scopes: Scope[];
-    /** The first inbox minted for the agent. */
+    /** The first inbox created for the agent. */
     address: string;
     verified: boolean;
     /** Where the verification code was sent. */
@@ -1694,14 +1854,28 @@ interface VerifyResponse {
     org_claim_token?: string;
 }
 /**
- * Response from `GET /v1/auth/me` — the verified principal behind the key.
+ * Response from `GET /v1/auth/me`: the verified principal behind the key.
  *
  * `org_id`/`project_id` are the FIXED org/project the key is bound to (resolved from
  * the stored key, never client input). There is NO mutable project selector for a
- * scoped key — `whoami` is the canonical project-visibility surface; project
+ * scoped key: `whoami` is the canonical project-visibility surface; project
  * selection happens when the human/admin issues the enrollment token or agent key.
  */
 interface WhoAmI {
+    connection_status?: "connected";
+    summary?: string;
+    agent_name?: string;
+    organization_name?: string;
+    project_name?: string;
+    /** Granted permissions, not a guarantee of plan capacity or review approval. */
+    capabilities?: {
+        read_domain_status: boolean;
+        connect_owned_domains: boolean;
+        create_inboxes: boolean;
+        read_inboxes: boolean;
+        submit_mail_for_review: boolean;
+        request_purchases: boolean;
+    };
     customer_id: string;
     /**
      * The fixed org the key is bound to. Optional to match the OpenAPI contract: a
@@ -1723,7 +1897,7 @@ interface WhoAmI {
  *
  * Every redesign collection endpoint (the canonical `x.projects.inboxes.*` chain
  * and beyond) returns {@link List}: `{ object: "list", data, has_more, next_cursor }`.
- * `next_cursor` is OPAQUE — treat it as a token and pass it back verbatim as
+ * `next_cursor` is OPAQUE - treat it as a token and pass it back verbatim as
  * `?cursor` to fetch the next page. {@link ListPage} wraps a raw {@link List} with
  * ergonomic iteration (`for await … of`) and a `nextPage()` cursor walker so callers
  * never thread cursors by hand.
@@ -1773,7 +1947,7 @@ declare class ListPage<T> implements AsyncIterable<T> {
     readonly object: "list";
     constructor(raw: List<T>, fetcher: PageFetcher<T>);
     /**
-     * Fetch the next page. Throws if there is none — guard with {@link hasMore}.
+     * Fetch the next page. Throws if there is none - guard with {@link hasMore}.
      */
     nextPage(signal?: AbortSignal): Promise<ListPage<T>>;
     /**
@@ -1849,12 +2023,25 @@ interface Transport {
     precheckSuppression(recipient: string, signal?: AbortSignal): Promise<SuppressionPrecheck>;
     listSuppressions(params: ListSuppressionsParams, signal?: AbortSignal): Promise<Page<SuppressionEntry>>;
     revokeSuppression(id: string, reason: string, signal?: AbortSignal): Promise<SuppressionEntry>;
-    listDomains(signal?: AbortSignal): Promise<Page<Domain>>;
+    listDomains(signal?: AbortSignal, params?: {
+        page?: string;
+        limit?: number;
+    }): Promise<Page<Domain>>;
+    listDomainEvents(domain: string, params: {
+        after?: string;
+        limit?: number;
+    }, signal?: AbortSignal): Promise<DomainStatusEventPage>;
     getDomain(domain: string, signal?: AbortSignal): Promise<Domain>;
     onboardDomain(req: OnboardDomainRequest, signal?: AbortSignal): Promise<Domain>;
     verifyDomain(domain: string, signal?: AbortSignal): Promise<Domain>;
     offboardDomain(domain: string, signal?: AbortSignal): Promise<DomainOffboard>;
     getJob(jobId: string, signal?: AbortSignal): Promise<Job>;
+    quoteDomain(req: QuoteDomainRequest, signal?: AbortSignal): Promise<DomainQuote>;
+    requestDomainPurchase(req: RequestDomainPurchaseRequest, signal?: AbortSignal): Promise<CommerceRequest>;
+    requestPlanChange(req: RequestPlanChangeRequest, signal?: AbortSignal): Promise<CommerceRequest>;
+    getCommerceRequest(requestId: string, signal?: AbortSignal): Promise<CommerceRequest>;
+    cancelCommerceRequest(requestId: string, signal?: AbortSignal): Promise<CommerceRequest>;
+    listCommerceRequests(params: ListCommerceRequestsParams, signal?: AbortSignal): Promise<Page<CommerceRequest>>;
     submitForReview(address: string, req: SendRequest, signal?: AbortSignal): Promise<SendOutcome>;
     submitReplyForReview(address: string, req: ReplyRequest, signal?: AbortSignal): Promise<SendOutcome>;
     listReviews(params: ListReviewsParams, signal?: AbortSignal): Promise<Page<Review>>;
@@ -1903,7 +2090,7 @@ interface Transport {
  *
  * The mock honors the same request/response models as the real API and reproduces the few behaviors
  * the SDK ergonomics depend on (enrollment cap, idempotency on `client_id`, wait_for_email returning
- * an OTP). It is intentionally simple — not a full server — and never reaches the network.
+ * an OTP). It is intentionally simple - not a full server - and never reaches the network.
  */
 
 /**
@@ -1931,7 +2118,7 @@ declare class MockBackend {
      * Normalize an inbox ref (opaque id OR address alias) to the canonical address the
      * mock keys its message/thread/contact maps on. The SDK now routes inbox ops by the
      * canonical opaque `id` when it holds a full record (matching the contract's
-     * canonical-key semantics), so the mock must resolve an id back to its address —
+     * canonical-key semantics), so the mock must resolve an id back to its address  -
      * both key `state.inboxes` (same object), `state.messages` keys by address only.
      * Unknown refs pass through unchanged so the existing not-found paths still fire.
      */
@@ -1961,8 +2148,8 @@ declare class MockBackend {
     forward(address: string, messageId: string, req: ForwardRequest): SendOutcome;
     /**
      * Submit a new message for review (mock). Rides the SAME endpoint as `send` on
-     * the real server, so it is literally the same call here: the resolved policy —
-     * not which SDK method you picked — decides whether the message is queued
+     * the real server, so it is literally the same call here: the resolved policy  -
+     * not which SDK method you picked - decides whether the message is queued
      * (`kind:"queued_for_review"`) or delivered.
      */
     submitForReview(address: string, req: SendRequest): SendOutcome;
@@ -1983,9 +2170,9 @@ declare class MockBackend {
     private setReviewState;
     /** Mark a review delivered on an auto-send path and emit its terminal `sent` nudge. */
     private markReviewAutoSent;
-    /** Raw delivery for a send — no policy, only reachable from submitOutbound. */
+    /** Raw delivery for a send - no policy, only reachable from submitOutbound. */
     private deliverSend;
-    /** Raw delivery for a reply — no policy, only reachable from submitOutbound. */
+    /** Raw delivery for a reply - no policy, only reachable from submitOutbound. */
     private deliverReply;
     /** Append the outbound message and shape the legacy send result. */
     private deliverRaw;
@@ -2049,7 +2236,7 @@ declare class MockBackend {
     reviewerDecide(reviewId: string, req: ReviewerDecisionRequest): ReviewerDecisionResult | undefined;
     /**
      * Browse the registry (mock), newest-first, excluding merged/soft-deleted. `match`
-     * is a pure lexical filter (every token must appear in name+description) — NO LLM,
+     * is a pure lexical filter (every token must appear in name+description) - NO LLM,
      * mirroring the server.
      */
     listCategories(params?: ListCategoriesParams): Page<Category>;
@@ -2057,14 +2244,14 @@ declare class MockBackend {
     getCategory(categoryId: string): Category | undefined;
     /** Propose a category (mock): stands immediately, author_kind=agent (D9). */
     proposeCategory(req: ProposeCategoryRequest): Category;
-    /** Rename / re-describe a category (mock) — metadata only (D10). */
+    /** Rename / re-describe a category (mock) - metadata only (D10). */
     updateCategory(categoryId: string, req: UpdateCategoryRequest): Category | undefined;
     /** The mock account-default risk dial (mirrors the server defaults). */
     private accountDial;
     /**
      * Read the effective risk dial (mock): the account default + every category with an
      * inherited (null override) effective dial. The mock category carries no overrides,
-     * so every category inherits — effective == account.
+     * so every category inherits - effective == account.
      */
     getRiskDial(): RiskDial;
     private nextGraduationState;
@@ -2076,19 +2263,19 @@ declare class MockBackend {
     getGraduationStatus(categoryId: string): GraduationStatus | undefined;
     /**
      * Propose graduating a category (mock): returns the current gate status without
-     * changing the category state (D16 — an agent can never flip the bit).
+     * changing the category state (D16 - an agent can never flip the bit).
      */
     proposeGraduation(categoryId: string, _req: ProposeGraduationRequest): GraduationStatus | undefined;
     /**
      * Read the D19/§8 backlog-reconciliation status (mock): counts the QUEUED drafts in a
      * category that are stale vs current-enough against the current rules-version. The
      * mock has no per-draft composed_* stamps on its Review fixtures, so every queued
-     * draft reads as current-enough (composed 0 vs current 0) — the contract shape is
+     * draft reads as current-enough (composed 0 vs current 0) - the contract shape is
      * exercised; the integer-compare logic is covered by the Go tests.
      */
     getScanBacklogStatus(categoryId: string): ScanBacklogStatus | undefined;
     /**
-     * Read the demand-driven pacing state (mock — M7 Slice B/§8): the cursor + effective
+     * Read the demand-driven pacing state (mock - M7 Slice B/§8): the cursor + effective
      * window/ceiling/interval + each queued draft's classification. The mock has no cursor
      * (nothing reviewed) and no composed_* stamps, so every queued draft reads in-window-
      * fresh until the window fills, then ahead; the contract shape is exercised (the
@@ -2097,17 +2284,17 @@ declare class MockBackend {
     getCategoryPacingState(categoryId: string): CategoryPacingState | undefined;
     /** rank a rule for the §7 ladder (mock mirror of the server's deterministic order). */
     private ruleRank;
-    /** Get the ORDERED active rule set (mock) — §7 ladder + category-before-general. */
+    /** Get the ORDERED active rule set (mock) - §7 ladder + category-before-general. */
     getRules(params?: GetRulesParams): RuleSnapshot;
-    /** Save / edit a rule (mock) — append-only by supersession (D11). */
+    /** Save / edit a rule (mock) - append-only by supersession (D11). */
     saveRule(req: SaveRuleRequest): Rule;
     /** Promote a rule between layers (mock, via supersession), or undefined when unknown. */
     promoteRule(ruleId: string, toScope: "general" | "category"): Rule | undefined;
-    /** Retire a rule (mock) — soft delete, or undefined when unknown. */
+    /** Retire a rule (mock) - soft delete, or undefined when unknown. */
     retireRule(ruleId: string): Rule | undefined;
     /** Read the rule/category change audit log (mock). */
     getRuleAudit(params?: GetRuleAuditParams): Page<RuleAuditEntry>;
-    /** Undo a rule change (mock) — restore the prior version; idempotent (re-undo 409). */
+    /** Undo a rule change (mock) - restore the prior version; idempotent (re-undo 409). */
     undoRuleChange(udoId: string): Rule;
     /** recordRuleAudit appends one change/undo audit row (mock). */
     private recordRuleAudit;
@@ -2124,7 +2311,7 @@ declare class MockBackend {
      */
     private enqueueTerminalNudge;
     /**
-     * Enqueue `front_run_next` — the signal that the review reached a terminal state
+     * Enqueue `front_run_next` - the signal that the review reached a terminal state
      * while the agent was still trying to act on it.
      *
      * Deduped on (review, terminal state, parent revision) so a retry loop hitting
@@ -2142,8 +2329,8 @@ declare class MockBackend {
     }): Review | undefined;
     /**
      * Mock-only: mirror an approved draft whose delivery then FAILED at the provider.
-     * This is the case the composing agent was previously never told about — the
-     * console showed the error and the agent's queue stayed silent — so the loop test
+     * This is the case the composing agent was previously never told about - the
+     * console showed the error and the agent's queue stayed silent - so the loop test
      * that matters most drives this path.
      */
     simulateSendFailed(reviewId: string, error?: string): Review | undefined;
@@ -2171,7 +2358,7 @@ declare class MockBackend {
     listReviewEvents(params?: ListReviewEventsParams): ReviewEventsResult;
     /**
      * Long-poll for a review event (mock). Offline there is nothing to wait FOR, so it
-     * returns the immediate drain (empty when caught up) — the server's "empty on
+     * returns the immediate drain (empty when caught up) - the server's "empty on
      * timeout" contract.
      */
     waitForReviewEvent(params?: WaitForReviewEventParams): ReviewEventsResult;
@@ -2194,9 +2381,10 @@ declare class MockBackend {
     getMessageRaw(messageId: string): string;
     /** Full-text search scoped to one inbox. */
     searchMessages(address: string, params: SearchMessagesParams): Page<Message>;
-    listThreads(address: string): Page<Thread>;
+    listThreads(address: string, params?: ListThreadsParams): Page<Thread>;
     /** Thread-level search (subject / snippet / participant substring). */
     searchThreads(address: string, params: SearchMessagesParams): Page<Thread>;
+    private paginateThreads;
     /** Fetch one thread (with messages, oldest-first) by id under an inbox. */
     getThread(address: string, threadId: string): ThreadDetail;
     /**
@@ -2251,7 +2439,7 @@ declare class MockBackend {
     listContactLists(address: string): Page<ContactListEntry> | undefined;
     /** Delete a contact-list entry by id; returns false when it was not found. */
     deleteContactListEntry(_address: string, entryId: string): boolean;
-    /** Onboard a domain, mirroring the server's per-mode record set + status. Idempotent on the name. */
+    /** Add a delegated domain and return only the customer-published nameservers. */
     onboardDomain(req: OnboardDomainRequest): Domain;
     /** List onboarded domains (records omitted on the summary, mirroring the server). */
     listDomains(): Page<Domain>;
@@ -2268,6 +2456,12 @@ declare class MockBackend {
     offboardDomain(domain: string): boolean;
     /** Get one async job's poll status; undefined when the id is unknown. */
     getJob(jobId: string): Job | undefined;
+    quoteDomain(req: QuoteDomainRequest): DomainQuote;
+    requestDomainPurchase(req: RequestDomainPurchaseRequest): CommerceRequest;
+    requestPlanChange(req: RequestPlanChangeRequest): CommerceRequest;
+    getCommerceRequest(requestId: string): CommerceRequest | undefined;
+    cancelCommerceRequest(requestId: string): CommerceRequest | undefined;
+    listCommerceRequests(params?: ListCommerceRequestsParams): Page<CommerceRequest>;
     /**
      * Pre-check whether the caller's org suppresses a recipient (mirrors
      * `GET /v1/suppressions?recipient=…`). Returns `{recipient, suppressed, rows}`
@@ -2285,7 +2479,7 @@ declare class MockBackend {
     /**
      * Reject the WHOLE send if ANY recipient has an active org-scope suppression,
      * naming exactly the suppressed addresses (never the scope/origin) so the caller
-     * can drop them and retry — mirroring the live `recipient_suppressed` (422) path.
+     * can drop them and retry - mirroring the live `recipient_suppressed` (422) path.
      */
     private enforceSuppression;
     /**
@@ -2296,19 +2490,25 @@ declare class MockBackend {
     private enforceSendPolicy;
 }
 
+interface DomainWaitResult {
+    domain: Domain;
+    outcome: "ready" | "action_required" | "needs_attention" | "timed_out" | "status_unavailable";
+    resume_after_seconds: number;
+}
+
 /**
  * Key-tier awareness (redesign §3.1).
  *
  * An agent key encodes its CEILING tier in its raw prefix. The SDK never trusts
- * client input for scope — the tier is derived from the key the caller already
+ * client input for scope - the tier is derived from the key the caller already
  * holds, purely as a client-side hint so an app can branch (e.g. an org-tier key
  * MUST pick a project breadth on a list; a project/inbox key may use the bare
  * sugar). The server remains the source of truth; this is advisory only.
  *
  * Prefix scheme (the secret tail is unchanged across tiers):
- *   - `pk_agent_org_…`   → {@link KeyTier.Org}      (admin/console mint only)
+ *   - `pk_agent_org_…`   → {@link KeyTier.Org}      (admin/console issuance only)
  *   - `pk_agent_proj_…`  → {@link KeyTier.Project}  (enrollment redeem + console)
- *   - `pk_agent_inbox_…` → {@link KeyTier.Inbox}    (admin/console mint only)
+ *   - `pk_agent_inbox_…` → {@link KeyTier.Inbox}    (admin/console issuance only)
  *   - legacy `pk_agent_…` (no tier segment) → {@link KeyTier.Project}
  */
 /** The ceiling tier encoded in an agent key's prefix. */
@@ -2316,7 +2516,7 @@ type KeyTier = "org" | "project" | "inbox" | "unknown";
 /**
  * Derive the {@link KeyTier} from a raw agent key by peeking the segment after the
  * `pk_agent_` head. A legacy bare `pk_agent_…` key (no tier segment) maps to
- * `"project"` — exactly today's behavior. A non-agent credential (enrollment
+ * `"project"` - exactly today's behavior. A non-agent credential (enrollment
  * token, Clerk session, empty) returns `"unknown"`.
  */
 declare function parseKeyTier(apiKey: string | undefined): KeyTier;
@@ -2334,7 +2534,7 @@ declare function tierAllowsOrgWildcard(tier: KeyTier): boolean;
 declare function tierNeedsExplicitBreadth(tier: KeyTier): boolean;
 
 /**
- * InboxHandle — an ergonomic, bound handle to a single inbox.
+ * InboxHandle: an ergonomic, bound handle to a single inbox.
  *
  * Returned by `extrovert.inboxes.create(...)` and `extrovert.inbox(address)`, it scopes every operation
  * to one address so agent code reads naturally: `inbox.send(...)`, `inbox.waitForEmail(...)`. This
@@ -2348,7 +2548,7 @@ interface InboxHandleOptions {
 declare class InboxHandle {
     private readonly transport;
     private readonly options;
-    /** The canonical address, e.g. `agent7@smtp.extrovert.dev`. */
+    /** The canonical address, e.g. `agent7@extrovertmail.com`. */
     readonly address: string;
     /** The full inbox record this handle was created from (absent when constructed by address). */
     readonly record: Inbox | undefined;
@@ -2394,8 +2594,8 @@ declare class InboxHandle {
      * Returns a three-way {@link SendOutcome}: `kind:"queued_for_review"` means a
      * human has to approve it and NOTHING has been delivered yet; anything else was
      * delivered. Under the default `require_review` policy a call WITHOUT an
-     * `intent` raises `IntentRequiredError` (422) instead — nothing sent, nothing
-     * queued — so pass one, or read `inbox.record.effective_review_policy` first.
+     * `intent` raises `IntentRequiredError` (422) instead: nothing sent, nothing
+     * queued: so pass one, or read `inbox.record.effective_review_policy` first.
      */
     send(req: SendRequest, signal?: AbortSignal): Promise<SendOutcome>;
     /**
@@ -2403,14 +2603,14 @@ declare class InboxHandle {
      * the latest message) or `message_id` (reply to that message); the server
      * derives To / Subject / In-Reply-To / References. Set `reply_all` to reply to
      * every thread recipient. Returns the same three-way {@link SendOutcome} as
-     * {@link send} — a reply is governed by the review policy too.
+     * {@link send}: a reply is governed by the review policy too.
      */
     reply(req: ReplyRequest, signal?: AbortSignal): Promise<SendOutcome>;
     /**
      * Forward a message in this inbox to new recipients, preserving the original.
      *
      * A forward is an outbound message to arbitrary NEW recipients that quotes an
-     * inbound thread, so it is governed by the review policy exactly like a send —
+     * inbound thread, so it is governed by the review policy exactly like a send :
      * same {@link SendOutcome} union, same `intent` requirement.
      */
     forward(messageId: string, req: ForwardRequest, signal?: AbortSignal): Promise<SendOutcome>;
@@ -2511,7 +2711,7 @@ declare class InboxHandle {
 }
 
 /**
- * `extrovert.projects` — the CANONICAL project-scoped resource chain (redesign §4).
+ * `extrovert.projects`: the CANONICAL project-scoped resource chain (redesign §4).
  *
  * Scope lives in the KEY; a broad (org-tier) key narrows to one project by PATH.
  * The headline chain is `x.projects.inboxes.*`, mirroring
@@ -2526,7 +2726,7 @@ declare class InboxHandle {
  *
  * Operations are keyed by the OPAQUE `inbox_id` (the inbox's email address is also
  * accepted as a within-project alias). `projectId` may be `"-"` for the org-wide
- * wildcard — only an org-tier key may use it (others get 403 `forbidden_scope`).
+ * wildcard: only an org-tier key may use it (others get 403 `forbidden_scope`).
  *
  * The bare `x.inboxes.*` / `x.inbox(address)` surface is curl-style sugar that
  * resolves to the key's default project; this chain is the contract-canonical one.
@@ -2538,7 +2738,7 @@ interface ProjectsContext {
     handleOptions: InboxHandleOptions;
 }
 /**
- * `x.projects.inboxes` — create / list / get / update / delete inboxes, plus the
+ * `x.projects.inboxes`: create / list / get / update / delete inboxes, plus the
  * send / reply / message / thread / wait operations, all scoped to one project (or
  * the `-` org wildcard for an org-tier key). List returns a {@link ListPage} that
  * auto-paginates over the opaque-cursor {@link import("../pagination.js").List} envelope.
@@ -2574,8 +2774,8 @@ declare class ProjectInboxes {
      * Returns a three-way {@link SendOutcome}: `kind:"queued_for_review"` means a
      * human has to approve it and NOTHING has been delivered yet; anything else was
      * delivered. Under the default `require_review` policy a call WITHOUT an
-     * `intent` raises `IntentRequiredError` (422) instead — nothing sent, nothing
-     * queued — so pass one, or read `inbox.record.effective_review_policy` first.
+     * `intent` raises `IntentRequiredError` (422) instead: nothing sent, nothing
+     * queued: so pass one, or read `inbox.record.effective_review_policy` first.
      */
     send(projectId: string, inboxId: string, req: SendRequest, signal?: AbortSignal): Promise<SendOutcome>;
     /** Reply within a thread from an inbox in `projectId`. See {@link send} on the return union. */
@@ -2610,14 +2810,14 @@ declare class ProjectInboxes {
      *
      * The frozen contract project-prefixes ONLY the inbox collection/item/credentials
      * routes (`/v1/projects/{project_id}/inboxes[/{inbox_id}][/credentials]`); the
-     * send/reply/forward/message/thread/wait sub-ops have NO project-prefixed path —
+     * send/reply/forward/message/thread/wait sub-ops have NO project-prefixed path :
      * they address the inbox by its opaque id directly (`/v1/inboxes/{inbox_id}/…`),
      * where the project is implicit in (and enforced by) the inbox id server-side.
      *
      * So for these sub-ops `projectId` cannot be carried on the URL and is NOT a URL
      * selector. The adversarial review flagged that silently discarding it makes the
      * signature misleading. CHOICE: keep the arg (dropping it would break the chain's
-     * symmetry with create/list/get/update/delete — the more disruptive option) but
+     * symmetry with create/list/get/update/delete: the more disruptive option) but
      * VALIDATE it rather than ignore it. We reject the two client mistakes we can catch
      * without a round-trip:
      *   - a blank / whitespace-only `projectId` (a required selector everywhere else in
@@ -2629,12 +2829,12 @@ declare class ProjectInboxes {
     private ref;
 }
 /**
- * `extrovert.projects` — the canonical project-scoped resource namespace. Today it
+ * `extrovert.projects`: the canonical project-scoped resource namespace. Today it
  * exposes the `inboxes` chain (`x.projects.inboxes.*`); future project-scoped
  * resources (domains, agents) hang off the same namespace.
  */
 declare class Projects {
-    /** `x.projects.inboxes.*` — the canonical inbox chain. */
+    /** `x.projects.inboxes.*`: the canonical inbox chain. */
     readonly inboxes: ProjectInboxes;
     constructor(ctx: ProjectsContext);
 }
@@ -2655,25 +2855,26 @@ interface ResourceContext {
      */
     keyTier: KeyTier;
 }
-/** `extrovert.inboxes` — create, list, get, update, delete inboxes. */
+/** `extrovert.inboxes`: create, list, get, update, delete inboxes. */
 declare class Inboxes {
     private readonly ctx;
     constructor(ctx: ResourceContext);
     /**
-     * Create an inbox. The default path mints an address on a pre-verified shared subdomain of
-     * `smtp.extrovert.dev`, so it returns a live, send-and-receive-capable inbox in one call.
+     * Create an inbox. The default path creates an address on `extrovertmail.com`
+     * for paid accounts or `free.extrovertmail.com` for free signups, so it returns
+     * a live inbox in one call.
      *
      * Pass `metadata` to attach arbitrary key-value data, and `client_id` for idempotent creation
      * (re-calling with the same id returns the same inbox, with its metadata replayed verbatim).
      */
     create(req?: CreateInboxRequest, signal?: AbortSignal): Promise<InboxHandle>;
     /**
-     * List inboxes visible to the calling key (the bare curl-sugar surface — resolves
+     * List inboxes visible to the calling key (the bare curl-sugar surface: resolves
      * to the key's default project). An org-tier key has no single default project, so
      * the bare list is ambiguous: fail fast client-side with a BreadthRequiredError that
      * names the next call, matching the MCP surface, instead of round-tripping to a 400.
      * Use `extrovert.projects.inboxes.list("<project_id>")` or `"-"` (org subtree) for
-     * an org key. The check is advisory — the server stays authoritative.
+     * an org key. The check is advisory: the server stays authoritative.
      */
     list(params?: ListInboxesParams, signal?: AbortSignal): Promise<Page<Inbox>>;
     /** Fetch a single inbox and return an ergonomic handle bound to it. */
@@ -2694,7 +2895,7 @@ declare class Inboxes {
     delete(address: string, signal?: AbortSignal): Promise<void>;
 }
 /**
- * `extrovert.messages` — read a message, fetch its raw bytes, mark it read.
+ * `extrovert.messages`: read a message, fetch its raw bytes, mark it read.
  *
  * Reply and forward are inbox-scoped (the server resolves the parent and derives
  * recipients), so they live on the {@link InboxHandle} (`inbox.reply(...)`,
@@ -2739,21 +2940,27 @@ declare class Messages {
     getAttachment(inbox: string, messageId: string, attachmentId: string, signal?: AbortSignal): Promise<AttachmentDownload>;
 }
 /**
- * `extrovert.threads` — fetch a conversation thread (with its messages) by id,
- * scoped to its owning inbox.
+ * `extrovert.threads`: list, search, read, reply to, and delete conversations,
+ * scoped to their owning inbox.
  */
 declare class Threads {
     private readonly ctx;
     constructor(ctx: ResourceContext);
+    /** List conversations newest-active first. Pass `next_cursor` back as `cursor` for the next page. */
+    list(inbox: string, params?: ListThreadsParams, signal?: AbortSignal): Promise<Page<Thread>>;
+    /** Search thread subjects, snippets, and participants. Cursor pagination matches {@link list}. */
+    search(inbox: string, params: SearchMessagesParams, signal?: AbortSignal): Promise<Page<Thread>>;
     /** Fetch one thread (+ its messages, oldest-first) by id under its owning inbox address. */
     get(inbox: string, threadId: string, signal?: AbortSignal): Promise<ThreadDetail>;
+    /** Reply in a thread; recipients and RFC reply headers are derived server-side. */
+    reply(inbox: string, req: ReplyRequest, signal?: AbortSignal): Promise<SendOutcome>;
     /**
      * Delete an entire thread (every message): move to Trash (default) or
      * permanently remove when `expunge` is true. `inbox` is the owning address.
      */
     delete(inbox: string, threadId: string, expunge?: boolean, signal?: AbortSignal): Promise<DeleteResult>;
 }
-/** `extrovert.webhooks` — register / list / get / update / delete HMAC-signed inbound webhooks. */
+/** `extrovert.webhooks`: register / list / get / update / delete HMAC-signed inbound webhooks. */
 declare class Webhooks {
     private readonly ctx;
     constructor(ctx: ResourceContext);
@@ -2774,7 +2981,7 @@ declare class Webhooks {
     delete(webhookId: string, signal?: AbortSignal): Promise<void>;
 }
 /**
- * `extrovert.contactLists` — per-inbox allow/block lists of addresses/domains.
+ * `extrovert.contactLists`: per-inbox allow/block lists of addresses/domains.
  * A `block` entry rejects a send to a matching recipient; once an `allow` entry
  * exists for an inbox, sends from it are restricted to matching recipients
  * (allowlist mode). Entries are addressable by their opaque id (`lst_…`).
@@ -2790,12 +2997,12 @@ declare class ContactLists {
     delete(inbox: string, entryId: string, signal?: AbortSignal): Promise<void>;
 }
 /**
- * `extrovert.suppressions` — recipient opt-outs (list-unsubscribe). A recipient
+ * `extrovert.suppressions`: recipient opt-outs (list-unsubscribe). A recipient
  * that has unsubscribed cannot be mailed by this org: a send to them is rejected
  * with `recipient_suppressed` ({@link RecipientSuppressedError}). Use `precheck`
  * before composing to skip a would-be-rejected recipient, `list` to browse the
  * org's opt-outs, and `revoke` (reason required, audit-logged) to re-enable a
- * recipient. All reads/writes are scoped to the caller's OWN org — a
+ * recipient. All reads/writes are scoped to the caller's OWN org: a
  * platform-global or shared-domain opt-out is never surfaced here.
  */
 declare class Suppressions {
@@ -2803,7 +3010,7 @@ declare class Suppressions {
     constructor(ctx: ResourceContext);
     /**
      * Pre-check whether the caller's org already suppresses a recipient, BEFORE
-     * composing. `suppressed: true` means a send to them would be rejected — skip
+     * composing. `suppressed: true` means a send to them would be rejected: skip
      * that recipient. Returns the matching org rows too (never a global/shared row).
      */
     precheck(recipient: string, signal?: AbortSignal): Promise<SuppressionPrecheck>;
@@ -2817,25 +3024,36 @@ declare class Suppressions {
     revoke(id: string, reason: string, signal?: AbortSignal): Promise<SuppressionEntry>;
 }
 /**
- * `extrovert.domains` — the customer's domains (privileged; the agent key must
- * carry the `domain:manage` scope). Onboard (shared | ns_delegated | manual |
- * purchased), read status + the DNS records to set inline, trigger/refresh
- * verification, and offboard. `mode: "purchased"` spends money at the registrar and
- * ADDITIONALLY requires the explicit, default-off `domain:purchase` scope (and is
- * capped by the org/project purchased-domain plan limit). Set `scope: "project"` to
- * bind the domain to the key's project; it defaults to `org` (org-shared).
+ * `extrovert.domains`: read with domain:read or domain:manage; changes require
+ * domain:manage. Add delegated inbox domains the customer
+ * controls, read status + nameserver records inline, trigger/refresh
+ * verification, and offboard. New registrations use `extrovert.commerce`: quote
+ * first, create a request, then poll its status. Set `scope: "project"` to bind a
+ * customer-controlled domain to the key's project; it defaults to `org`.
  */
 declare class Domains {
     private readonly ctx;
     constructor(ctx: ResourceContext);
     /** List the customer's onboarded domains and their status. */
-    list(signal?: AbortSignal): Promise<Page<Domain>>;
-    /** Get one domain's detail + verification status + the DNS records to set, inline. */
+    list(paramsOrSignal?: {
+        page?: string;
+        limit?: number;
+    } | AbortSignal, signal?: AbortSignal): Promise<Page<Domain>>;
+    /** Get one domain's detail, verification status, and nameserver records. */
     get(domain: string, signal?: AbortSignal): Promise<Domain>;
-    /**
-     * Onboard (add) a domain. `mode` defaults to ns_delegated. `mode: "purchased"`
-     * requires the `domain:purchase` scope (in addition to `domain:manage`). Returns
-     * the record set / NS instruction.
+    /** Wait up to 50 seconds, then return an explicit resumable outcome. No DNS writes. */
+    wait(domain: string, options?: {
+        timeout_seconds?: number;
+        signal?: AbortSignal;
+    }): Promise<DomainWaitResult>;
+    /** Resume durable updates for this domain using the previous next_cursor as after. */
+    events(domain: string, params?: {
+        after?: string;
+        limit?: number;
+    }, signal?: AbortSignal): Promise<DomainStatusEventPage>;
+    /**
+     * Add a delegated inbox domain the customer controls. Returns the nameserver
+     * records to publish and never spends money.
      */
     onboard(req: OnboardDomainRequest, signal?: AbortSignal): Promise<Domain>;
     /** Trigger or refresh verification for a domain; returns its (possibly advanced) status. */
@@ -2849,7 +3067,29 @@ declare class Domains {
     offboard(domain: string, signal?: AbortSignal): Promise<DomainOffboard>;
 }
 /**
- * `extrovert.reviews` — the Review Loop (HITL) agent-plane reads. A sending agent
+ * `extrovert.commerce`: quote, request, cancel, and poll financial operations. Agents
+ * can never approve a request through this resource; approval is a human console
+ * action. Every create requires a stable idempotency key.
+ */
+declare class Commerce {
+    private readonly ctx;
+    constructor(ctx: ResourceContext);
+    private requireIdempotencyKey;
+    /** Quote a domain without purchasing, reserving, or approving it. */
+    quoteDomain(req: QuoteDomainRequest, signal?: AbortSignal): Promise<DomainQuote>;
+    /** Create a durable domain-purchase request for human approval. */
+    requestDomainPurchase(req: RequestDomainPurchaseRequest, signal?: AbortSignal): Promise<CommerceRequest>;
+    /** Create a durable plan-upgrade or downgrade request for human approval. */
+    requestPlanChange(req: RequestPlanChangeRequest, signal?: AbortSignal): Promise<CommerceRequest>;
+    /** Poll one request's exact blockers, approval URL, and next-action guidance. */
+    get(requestId: string, signal?: AbortSignal): Promise<CommerceRequest>;
+    /** Withdraw this agent's request while its durable state still permits cancellation. */
+    cancel(requestId: string, signal?: AbortSignal): Promise<CommerceRequest>;
+    /** List visible commerce requests using the API's opaque page token. */
+    list(params?: ListCommerceRequestsParams, signal?: AbortSignal): Promise<Page<CommerceRequest>>;
+}
+/**
+ * `extrovert.reviews`: the Review Loop (HITL) agent-plane reads. A sending agent
  * monitors its submissions in the human-review queue: list/get a review request and
  * read its append-only thread of turns (intent, drafts, human comments/edits/
  * decisions, captured diffs). Submitting FOR review rides `inbox.send` /
@@ -2859,7 +3099,7 @@ declare class Domains {
 declare class Reviews {
     private readonly ctx;
     /**
-     * `extrovert.reviews.events` — the Review Loop (HITL) realtime plane: drain,
+     * `extrovert.reviews.events`: the Review Loop (HITL) realtime plane: drain,
      * long-poll, and ack the durable nudge queue (the AUTHORITATIVE liveness source;
      * SSE/webhook are best-effort fast paths on top of it).
      */
@@ -2874,20 +3114,20 @@ declare class Reviews {
     /**
      * Get the human's assembled feedback (M5): the diff + comments + decision + the
      * rules born from this review. Read it after a rejected/edited nudge to learn what
-     * the human wanted. $0 LLM — pure assembly on our side.
+     * the human wanted. $0 LLM: pure assembly on our side.
      */
     feedback(reviewId: string, signal?: AbortSignal): Promise<ReviewFeedback>;
     /**
      * Post a chat turn on a review's thread (M5): an agent question to the human
      * reviewer; flips in_review -> chatting on the first turn. Idempotent on the
-     * optional `idempotencyKey` (the `Idempotency-Key` header). $0 LLM — you compose it.
+     * optional `idempotencyKey` (the `Idempotency-Key` header). $0 LLM: you compose it.
      */
     chat(reviewId: string, req: PostReviewChatRequest, idempotencyKey?: string, signal?: AbortSignal): Promise<Review>;
     /**
      * Post a new agent draft under a parent_revision CAS (M5; D17). parent_revision
      * must equal the draft's current revision, else a 409 STALE with NO mutation (the
-     * human always wins — re-read, re-apply, retry). On success the draft is re-rendered
-     * in place (revision++) and returns to needs_review. $0 LLM — you compose the redraft.
+     * human always wins: re-read, re-apply, retry). On success the draft is re-rendered
+     * in place (revision++) and returns to needs_review. $0 LLM: you compose the redraft.
      */
     revise(reviewId: string, req: SubmitRevisionRequest, signal?: AbortSignal): Promise<Review>;
     /**
@@ -2900,9 +3140,9 @@ declare class Reviews {
      * assert "I reviewed this against rules vX and no change is needed", advancing the
      * draft's composed_* versions with no new draft, no revision bump, no nudge. A
      * born-stale draft re-stamped to the current version becomes current-enough and
-     * releasable on the next reconciliation sweep — the cheap counterpart to revise().
+     * releasable on the next reconciliation sweep: the cheap counterpart to revise().
      * against_version above the category's current rules-version is 400; a terminal draft
-     * 409s. $0 LLM — you judged.
+     * 409s. $0 LLM: you judged.
      */
     restamp(reviewId: string, req: RestampReviewRequest, signal?: AbortSignal): Promise<Review>;
     /**
@@ -2917,22 +3157,22 @@ declare class Reviews {
     decisionContext(reviewId: string, signal?: AbortSignal): Promise<ReviewDecisionContext>;
     /**
      * Submit a reviewer decision (M8 Slice B; reviewer_decide, D5/§9). approve/edit → the
-     * PLATFORM ACS-sends with the COMPOSER's credentials (the reviewer NEVER holds
-     * mailbox:send on an inbox it doesn't own — the credential boundary); reject → back to
+     * PLATFORM sends with the COMPOSER's credentials (the reviewer NEVER holds
+     * mailbox:send on an inbox it doesn't own: the credential boundary); reject → back to
      * the composer (needs_review, hop_count++); escalate → the human queue. revision/
-     * version are the CAS (409 STALE on mismatch, NO mutation — the human always wins,
+     * version are the CAS (409 STALE on mismatch, NO mutation: the human always wins,
      * D17). The two circuit breakers (hop_count ≥ max_hops, or the hard review_deadline)
-     * FORCE a reject to the human regardless of intent — `forced_by_breaker` names it. $0
-     * LLM — you judged; we route, send, and enforce the breakers.
+     * FORCE a reject to the human regardless of intent: `forced_by_breaker` names it. $0
+     * LLM: you judged; we route, send, and enforce the breakers.
      */
     decide(reviewId: string, req: ReviewerDecisionRequest, signal?: AbortSignal): Promise<ReviewerDecisionResult>;
 }
 /**
- * `extrovert.reviews.events` — drain / long-poll / ack the durable review nudge
+ * `extrovert.reviews.events`: drain / long-poll / ack the durable review nudge
  * queue (spec §5.9). `list` is a non-blocking, side-effect-free drain of the next
  * un-acked nudges in FIFO seq order (strict per review); `wait` long-polls
  * (~25–55s) for the next one; `ack` advances the per-(agent, review) cursor
- * monotonically (idempotent — re-acking an older seq is a no-op).
+ * monotonically (idempotent: re-acking an older seq is a no-op).
  */
 declare class ReviewEvents {
     private readonly ctx;
@@ -2945,10 +3185,10 @@ declare class ReviewEvents {
     ack(req: AckReviewEventRequest, signal?: AbortSignal): Promise<AckReviewEventResult>;
 }
 /**
- * `extrovert.categories` — the Review Loop category registry (D9/D10). Browse and
+ * `extrovert.categories`: the Review Loop category registry (D9/D10). Browse and
  * MATCH an existing category before composing (like a skills registry), or propose
  * a new one. Categories are CUSTOMER-scoped and agent-attributed (the deliberate
- * cross-agent-404 exception); identity is opaque cat_ ids — nothing keys on the
+ * cross-agent-404 exception); identity is opaque cat_ ids: nothing keys on the
  * name, so renames never break a reference. `match` is a pure lexical filter (NO
  * LLM on our side); the agent does the semantic matching. Merging / deleting a
  * category is a human (console) action, not exposed here (D17).
@@ -2962,12 +3202,12 @@ declare class Categories {
     get(categoryId: string, signal?: AbortSignal): Promise<Category>;
     /** Propose a new category; it stands immediately and writes a create audit row. */
     propose(req: ProposeCategoryRequest, signal?: AbortSignal): Promise<Category>;
-    /** Rename / re-describe a category — metadata only (D10). */
+    /** Rename / re-describe a category: metadata only (D10). */
     update(categoryId: string, req: UpdateCategoryRequest, signal?: AbortSignal): Promise<Category>;
     /**
      * Read the effective risk dial (D4/D12): the account default + every category's
      * overrides (each with its resolved effective value; null override = inherit).
-     * Read-only — agents read but NEVER flip the dial; setting it is a human (console)
+     * Read-only: agents read but NEVER flip the dial; setting it is a human (console)
      * action (D16).
      */
     riskDial(signal?: AbortSignal): Promise<RiskDial>;
@@ -2979,14 +3219,14 @@ declare class Categories {
     graduationStatus(categoryId: string, signal?: AbortSignal): Promise<GraduationStatus>;
     /**
      * Propose graduating a category (D16/D6): RECORDS the request (durable evidence) and
-     * returns the current gate status. It does NOT change the category state — flipping
+     * returns the current gate status. It does NOT change the category state: flipping
      * the bit is a human (console) action; an agent only proposes.
      */
     proposeGraduation(categoryId: string, req?: ProposeGraduationRequest, signal?: AbortSignal): Promise<GraduationStatus>;
     /**
      * Read the D19/§8 backlog-reconciliation status: how many of the category's QUEUED
      * drafts are stale vs current-enough against the current rules-version (a pure
-     * integer compare, $0 LLM). Read-only — you READ the picture; the human (console
+     * integer compare, $0 LLM). Read-only: you READ the picture; the human (console
      * scan-backlog) or the graduate/rule-change hooks TRIGGER the actual reconciliation
      * sweep that releases current-enough drafts and nudges stale ones to redraft.
      */
@@ -3002,14 +3242,14 @@ declare class Categories {
     pacingState(categoryId: string, signal?: AbortSignal): Promise<CategoryPacingState>;
 }
 /**
- * `extrovert.rules` — the Review Loop writing-rule store + house-style + the §7
+ * `extrovert.rules`: the Review Loop writing-rule store + house-style + the §7
  * precedence ladder + audit/undo (D2/D11). ANY agent in the customer may write,
- * edit, promote, retire, and undo rules (the deliberate cross-agent exception — the
+ * edit, promote, retire, and undo rules (the deliberate cross-agent exception: the
  * shared house-style is the whole pitch). `get()` returns the ORDERED active rule
  * set with the precedence ladder applied SERVER-SIDE (NO LLM on our side); the agent
  * reconciles the list semantically. Rules are append-only by supersession; undo
  * restores the prior version as a forward 'restore' supersession. Identity is opaque
- * rule_/rln_/udo_ ids — nothing keys on a name.
+ * rule_/rln_/udo_ ids: nothing keys on a name.
  */
 declare class Rules {
     private readonly ctx;
@@ -3020,21 +3260,21 @@ declare class Rules {
      * Save / edit a rule (append-only by supersession; D11). An agent-plane save is
      * ALWAYS project-layer: the saved rule's `rule_layer` is `project`, bound to the
      * key's project. Agents cannot author org-layer / house-style (`rule_layer:"org"`)
-     * rules in v1 — that is a console/admin action.
+     * rules in v1: that is a console/admin action.
      */
     save(req: SaveRuleRequest, signal?: AbortSignal): Promise<Rule>;
     /** Promote a rule between the category and general/house-style layers. */
     promote(ruleId: string, toScope: "general" | "category", signal?: AbortSignal): Promise<Rule>;
-    /** Retire a rule — soft delete; the history survives as training data. */
+    /** Retire a rule: soft delete; the history survives as training data. */
     retire(ruleId: string, signal?: AbortSignal): Promise<Rule>;
     /** Read the rule/category change audit log (the safety net, D11). */
     audit(params?: GetRuleAuditParams, signal?: AbortSignal): Promise<Page<RuleAuditEntry>>;
-    /** Undo a rule change by its audit-row id (udo_…) — restore the prior version. */
+    /** Undo a rule change by its audit-row id (udo_…): restore the prior version. */
     undo(udoId: string, signal?: AbortSignal): Promise<Rule>;
 }
 
 /**
- * ExtrovertClient — the entry point.
+ * ExtrovertClient - the entry point.
  *
  * ```ts
  * import { Extrovert } from "@extrovert.dev/sdk";
@@ -3085,28 +3325,30 @@ interface ExtrovertClientOptions {
     mockBackend?: MockBackend;
 }
 declare class ExtrovertClient {
-    /** `extrovert.inboxes` — create / list / get / update / delete inboxes. */
+    /** `extrovert.inboxes` - create / list / get / update / delete inboxes. */
     readonly inboxes: Inboxes;
-    /** `extrovert.messages` — read a message, reply to it (threaded). */
+    /** `extrovert.messages` - read a message, reply to it (threaded). */
     readonly messages: Messages;
-    /** `extrovert.threads` — fetch a conversation thread. */
+    /** `extrovert.threads` - fetch a conversation thread. */
     readonly threads: Threads;
-    /** `extrovert.webhooks` — register HMAC-signed inbound webhooks. */
+    /** `extrovert.webhooks` - register HMAC-signed inbound webhooks. */
     readonly webhooks: Webhooks;
-    /** `extrovert.contactLists` — per-inbox allow/block lists of addresses/domains. */
+    /** `extrovert.contactLists` - per-inbox allow/block lists of addresses/domains. */
     readonly contactLists: ContactLists;
-    /** `extrovert.suppressions` — recipient opt-outs (list-unsubscribe); precheck/list/revoke. */
+    /** `extrovert.suppressions` - recipient opt-outs (list-unsubscribe); precheck/list/revoke. */
     readonly suppressions: Suppressions;
-    /** `extrovert.domains` — the customer's domains (privileged; domain:manage scope). */
+    /** `extrovert.domains` - domain readiness and setup (domain:read or domain:manage to read; domain:manage to change). */
     readonly domains: Domains;
-    /** `extrovert.reviews` — the Review Loop (HITL) agent-plane reads. */
+    /** `extrovert.commerce` - quote/request/cancel/poll financial actions; no agent approval methods. */
+    readonly commerce: Commerce;
+    /** `extrovert.reviews` - the Review Loop (HITL) agent-plane reads. */
     readonly reviews: Reviews;
-    /** `extrovert.categories` — the Review Loop category registry (browse/propose/curate). */
+    /** `extrovert.categories` - the Review Loop category registry (browse/propose/curate). */
     readonly categories: Categories;
-    /** `extrovert.rules` — the Review Loop writing-rule store + house-style + audit/undo. */
+    /** `extrovert.rules` - the Review Loop writing-rule store + house-style + audit/undo. */
     readonly rules: Rules;
     /**
-     * `extrovert.projects` — the CANONICAL project-scoped chain. The headline is
+     * `extrovert.projects` - the CANONICAL project-scoped chain. The headline is
      * `extrovert.projects.inboxes.*` (create/list/get/update/delete/send/...), keyed by
      * the opaque `inbox_id` and scoped to a `{project_id}` path (or `-` for the org
      * wildcard on an org-tier key). The bare `extrovert.inboxes` surface is curl sugar
@@ -3122,7 +3364,7 @@ declare class ExtrovertClient {
     readonly apiVersion: string;
     /**
      * The CEILING tier derived from the configured agent key prefix (`org` | `project`
-     * | `inbox` | `unknown`). Advisory client-side hint only — the server is the source
+     * | `inbox` | `unknown`). Advisory client-side hint only - the server is the source
      * of truth. Lets an app branch (e.g. require a project pick for an org-tier key).
      */
     readonly keyTier: KeyTier;
@@ -3130,18 +3372,20 @@ declare class ExtrovertClient {
     private readonly handleOptions;
     constructor(options?: ExtrovertClientOptions);
     /**
-     * Redeem an enrollment token (`pk_enroll_...`) and mint a scoped agent key.
+     * Redeem an enrollment token (`pk_enroll_...`) and issue a scoped agent key.
      *
      * Idempotent on `agent_handle`: redeeming twice with the same handle returns the same agent.
-     * Returns the raw `EnrollResponse` — to immediately use the minted key, prefer
+     * Returns the raw `EnrollResponse` - to immediately use the issued key, prefer
      * {@link ExtrovertClient.enrolled}.
      */
     enroll(req: EnrollRequest, signal?: AbortSignal): Promise<EnrollResponse>;
     /**
-     * Grab a free account in one unauthenticated call (Slice E). Provisions a tenant
-     * + a first inbox and returns a LIMITED-scope (read-only) agent key; a one-time
-     * code is emailed to `human_email`. Call {@link verify} with the code to unlock
-     * full scopes. Idempotent on `human_email`: re-calling rotates the key + resends.
+     * Request a free account in one unauthenticated call. When free signup is
+     * enabled, this provisions a tenant plus a first inbox and returns a
+     * verification-only agent key. That key can only call {@link verify}; it cannot
+     * read or send mail. A one-time code is emailed to `human_email`. Call
+     * {@link verify} with the code to activate the account and receive full scopes.
+     * Idempotent on `human_email`: re-calling rotates the key and resends the code.
      * When free signup is paused, this throws an `ApiError` with status 403 and
      * code `signup_disabled` without creating account state.
      */
@@ -3158,15 +3402,15 @@ declare class ExtrovertClient {
     /** Introspect the principal behind the current key (`GET /v1/auth/me`). */
     whoami(signal?: AbortSignal): Promise<WhoAmI>;
     /**
-     * Poll the status of an async job (`GET /v1/jobs/{job_id}`) — currently only
+     * Poll the status of an async job (`GET /v1/jobs/{job_id}`) - currently only
      * the domain-offboard teardown started by {@link Domains.offboard} enqueues
      * one. `status` is terminal on succeeded/failed/cancelled; keep polling
      * otherwise. An unknown or foreign job id is a {@link NotFoundError}.
      */
     getJob(jobId: string, signal?: AbortSignal): Promise<Job>;
     /**
-     * Redeem an enrollment token and return a *new* client already authenticated with the minted
-     * agent key — the natural "redeem then act" flow for an agent.
+     * Redeem an enrollment token and return a *new* client already authenticated with the issued
+     * agent key - the natural "redeem then act" flow for an agent.
      *
      * ```ts
      * const bootstrap = new Extrovert({ apiKey: enrollmentToken });
@@ -3182,7 +3426,7 @@ declare class ExtrovertClient {
         enrollment: EnrollResponse;
     }>;
     /**
-     * Get an ergonomic handle to an existing inbox by address — without an extra round-trip. Use this
+     * Get an ergonomic handle to an existing inbox by address - without an extra round-trip. Use this
      * when you already know the address (e.g. from a previous create) and want to send/wait/reply.
      * Call {@link InboxHandle.refresh} to load the full record.
      */
@@ -3225,7 +3469,7 @@ declare class ExtrovertClient {
  */
 /**
  * The CLOSED problem code enum (mirrors `components.schemas.Problem.code` in the
- * frozen OpenAPI). Adding a member is a contract change — keep it in lockstep with
+ * frozen OpenAPI). Adding a member is a contract change - keep it in lockstep with
  * the Go `ProblemCode` enum.
  */
 type ProblemCode = "bad_request" | "unauthorized" | "forbidden_scope" | "not_found" | "conflict" | "idempotency_conflict" | "breadth_required" | "quota_exceeded" | "rate_limited" | "domain_not_allowed" | "recipient_blocked" | "recipient_suppressed" | "not_configured" | "domain_unavailable" | "internal" | "intent_required" | "wrong_state" | "terminal" | "stale" | "born_stale" | "send_needs_reconciliation" | "graduation_locked" | "maturity_gate_unmet" | "scope_taken" | "unavailable";
@@ -3238,11 +3482,11 @@ declare const PROBLEM_CODES: readonly ProblemCode[];
  * compare-and-set (`stale`) and a redraft built against an older rule high-water
  * (`born_stale`) describe a situation a retry can fix, and each only a bounded
  * number of times (re-read, re-apply on top of the other party's change,
- * resubmit). `wrong_state` means the verb is wrong, not the timing — read the
+ * resubmit). `wrong_state` means the verb is wrong, not the timing - read the
  * `allowed_action` hints and pick another one. `terminal` means the review is
  * finished forever; a `front_run_next` nudge is already waiting on the queue
  * with the outcome. `send_needs_reconciliation` means a delivery attempt is
- * unconfirmed — resending is precisely how a message goes out twice.
+ * unconfirmed - resending is precisely how a message goes out twice.
  *
  * `intent_required` is listed false because retrying the SAME bytes fails
  * identically: the fix is to ADD an `intent` and send a different request. The
@@ -3347,38 +3591,38 @@ declare class ApiError extends Error {
     /** True for 5xx responses (server errors that may succeed on retry). */
     get isServerError(): boolean;
 }
-/** 401 — the agent key / enrollment token was missing, malformed, expired, or revoked. */
+/** 401 - the agent key / enrollment token was missing, malformed, expired, or revoked. */
 declare class AuthenticationError extends ApiError {
 }
-/** 403 — authenticated, but the key's scopes don't permit this action (capability denied). */
+/** 403 - authenticated, but the key's scopes don't permit this action (capability denied). */
 declare class PermissionError extends ApiError {
 }
 /**
- * 403 `forbidden_scope` — the call is outside the key's CEILING (e.g. a non-org key
- * on the org-wide wildcard, or a mint that would escalate). A redesign-specific
+ * 403 `forbidden_scope` - the call is outside the key's CEILING (e.g. a non-org key
+ * on the org-wide wildcard, or an issuance that would escalate). A redesign-specific
  * subclass of {@link PermissionError} so existing `instanceof PermissionError`
  * branches keep working.
  */
 declare class ForbiddenScopeError extends PermissionError {
 }
 /**
- * 400 `breadth_required` — an org-tier key/operator issued a bare list that needs a
+ * 400 `breadth_required` - an org-tier key/operator issued a bare list that needs a
  * breadth pick; the problem `errors`/`detail` name the next call
  * (`/v1/projects/{id}/inboxes` or `/v1/projects/-/inboxes`).
  */
 declare class BreadthRequiredError extends ApiError {
 }
-/** 404 — the inbox, message, thread, or webhook does not exist (or isn't visible to this tenant). */
+/** 404 - the inbox, message, thread, or webhook does not exist (or isn't visible to this tenant). */
 declare class NotFoundError extends ApiError {
 }
-/** 409 — a conflicting state, e.g. an enrollment token that already minted its max of N inboxes. */
+/** 409 - a conflicting state, e.g. an enrollment token that already created its maximum number of inboxes. */
 declare class ConflictError extends ApiError {
 }
-/** 422 — the request body failed validation; see `body.error.details`. */
+/** 422 - the request body failed validation; see `body.error.details`. */
 declare class ValidationError extends ApiError {
 }
 /**
- * 422 `recipient_suppressed` — a send/reply/forward was rejected because one or
+ * 422 `recipient_suppressed` - a send/reply/forward was rejected because one or
  * more recipients have opted out (list-unsubscribe / suppression). The whole send
  * is rejected (never a silent partial drop). {@link suppressedRecipients} lists the
  * exact addresses to drop; retry the send without them. The scope/origin of the
@@ -3386,12 +3630,12 @@ declare class ValidationError extends ApiError {
  * existing `instanceof ValidationError` branches keep working.
  */
 declare class RecipientSuppressedError extends ValidationError {
-    /** The recipient addresses that are suppressed — drop these and retry. */
+    /** The recipient addresses that are suppressed - drop these and retry. */
     readonly suppressedRecipients: string[];
     constructor(args: ConstructorParameters<typeof ApiError>[0]);
 }
 /**
- * 422 `intent_required` — the inbox's resolved review policy requires a human to
+ * 422 `intent_required` - the inbox's resolved review policy requires a human to
  * see this message before it goes out, and the request carried no `intent`.
  *
  * **Nothing was sent and nothing was queued.** The server checks this before it
@@ -3400,7 +3644,7 @@ declare class RecipientSuppressedError extends ValidationError {
  * splice in, and the human-readable remediation (the full recipe, including how
  * to monitor the resulting review) is on `.message` / `.problem.detail`.
  *
- * Under `require_review` — the default for every account — this is the FIRST
+ * Under `require_review` - the default for every account - this is the FIRST
  * thing most agents hit. Read `effective_review_policy` on
  * `GET /v1/inboxes/{id}` once at start-up and compose an intent up front instead
  * of learning the policy by being refused. A subclass of {@link ValidationError}
@@ -3409,7 +3653,7 @@ declare class RecipientSuppressedError extends ValidationError {
 declare class IntentRequiredError extends ValidationError {
     /** The resolved review policy, e.g. `require_review`. */
     readonly policy: string | undefined;
-    /** Where the policy came from — a per-inbox override or the account default. */
+    /** Where the policy came from - a per-inbox override or the account default. */
     readonly policySource: string | undefined;
     /** Literal JSON to merge into the original request body, then retry once. */
     readonly retryWith: string | undefined;
@@ -3427,7 +3671,7 @@ declare class IntentRequiredError extends ValidationError {
 declare class ReviewConflictError extends ConflictError {
     /** The review's CURRENT state (`needs_review`, `approved`, `sent`, …). */
     readonly currentState: string | undefined;
-    /** The current revision — pass it as `parent_revision` on a legal retry. */
+    /** The current revision - pass it as `parent_revision` on a legal retry. */
     readonly currentRevision: number | undefined;
     /** The current row version (the optional belt-and-braces CAS). */
     readonly currentVersion: number | undefined;
@@ -3436,13 +3680,13 @@ declare class ReviewConflictError extends ConflictError {
     constructor(args: ConstructorParameters<typeof ApiError>[0]);
     /**
      * Whether retrying the same call could ever succeed. False for every subclass
-     * except {@link StaleError} and {@link BornStaleError} — and true there only
+     * except {@link StaleError} and {@link BornStaleError} - and true there only
      * after re-reading and re-applying on top of the other party's change.
      */
     get isRetryable(): boolean;
 }
 /**
- * 409 `stale` — the `(revision[, version])` you named is no longer current
+ * 409 `stale` - the `(revision[, version])` you named is no longer current
  * because a human or reviewer moved the draft. **Nothing was mutated.**
  *
  * The one genuinely retryable conflict, and bounded (≤3): re-read the draft and
@@ -3455,7 +3699,7 @@ declare class StaleError extends ReviewConflictError {
     get isRetryable(): boolean;
 }
 /**
- * 409 `wrong_state` — this VERB is illegal from the review's current state, but
+ * 409 `wrong_state` - this VERB is illegal from the review's current state, but
  * the draft is still live.
  *
  * **Never retry the same verb**; the timing is not the problem, the choice of
@@ -3464,7 +3708,7 @@ declare class StaleError extends ReviewConflictError {
 declare class WrongStateError extends ReviewConflictError {
 }
 /**
- * 409 `terminal` — the review has already finished (sent / auto_sent /
+ * 409 `terminal` - the review has already finished (sent / auto_sent /
  * cancelled). Nothing will EVER succeed on it.
  *
  * **Stop.** A `front_run_next` review event is waiting on the durable queue with
@@ -3478,12 +3722,12 @@ declare class TerminalError extends ReviewConflictError {
     constructor(args: ConstructorParameters<typeof ApiError>[0]);
 }
 /**
- * 409 `born_stale` — the redraft was composed against an OLDER writing-rule
+ * 409 `born_stale` - the redraft was composed against an OLDER writing-rule
  * high-water than the one now in force. **Nothing was mutated** and the composer
  * has been re-nudged.
  *
  * Retryable at most once per rule high-water: re-read the rules, re-apply them,
- * resubmit — or `restamp_review` when re-reading shows nothing genuinely needed
+ * resubmit - or `restamp_review` when re-reading shows nothing genuinely needed
  * to change. Restamping when the body DID need to change makes the draft lie to
  * the born-stale accounting, so do it only for a true no-op.
  */
@@ -3491,7 +3735,7 @@ declare class BornStaleError extends ReviewConflictError {
     get isRetryable(): boolean;
 }
 /**
- * 409 `send_needs_reconciliation` — a delivery attempt reached (or may have
+ * 409 `send_needs_reconciliation` - a delivery attempt reached (or may have
  * reached) the mail provider and the process died before recording the outcome,
  * so the review is parked for recover-by-Message-ID.
  *
@@ -3502,17 +3746,17 @@ declare class BornStaleError extends ReviewConflictError {
 declare class SendNeedsReconciliationError extends ReviewConflictError {
 }
 /**
- * 409 `idempotency_conflict` — the same `Idempotency-Key` was replayed with a
+ * 409 `idempotency_conflict` - the same `Idempotency-Key` was replayed with a
  * DIFFERENT request body within the same scope. The replay key is a hash of the
  * raw bytes, so "same message, different spelling" counts as different.
  *
  * A caller bug, not a race: do not retry under that key. Either send the byte-
- * identical body, or mint a new key for the genuinely new message.
+ * identical body, or use a new key for the genuinely new message.
  */
 declare class IdempotencyConflictError extends ConflictError {
 }
 /**
- * 503 `unavailable` — a dependency could not be read, so the request was failed
+ * 503 `unavailable` - a dependency could not be read, so the request was failed
  * CLOSED rather than served on a guess. On the send path this specifically means
  * the account's review policy was unreadable: relaying unsupervised mail for a
  * customer whose stated policy we could not see is the failure that would be
@@ -3528,7 +3772,7 @@ declare class UnavailableError extends ApiError {
         retryAfter?: number;
     });
 }
-/** 402 — payment required (x402 test-mode). `paymentRequired` holds the raw challenge header. */
+/** 402 - payment required (x402 test-mode). `paymentRequired` holds the raw challenge header. */
 declare class PaymentRequiredError extends ApiError {
     /** The raw `PAYMENT-REQUIRED` header challenge to sign + retry (EIP-3009, Base Sepolia). */
     readonly paymentRequired: string | undefined;
@@ -3536,7 +3780,7 @@ declare class PaymentRequiredError extends ApiError {
         paymentRequired?: string;
     });
 }
-/** 429 — rate limited. `retryAfter` is the server's hint in seconds, when provided. */
+/** 429 - rate limited. `retryAfter` is the server's hint in seconds, when provided. */
 declare class RateLimitError extends ApiError {
     /** Seconds to wait before retrying, parsed from the `Retry-After` header. */
     readonly retryAfter: number | undefined;
@@ -3554,7 +3798,7 @@ declare class TimeoutError extends ApiError {
 }
 
 /**
- * Narrowing helpers for {@link SendOutcome} — the three shapes a send can answer.
+ * Narrowing helpers for {@link SendOutcome} - the three shapes a send can answer.
  *
  * `inbox.send()` used to be typed as one struct with a REQUIRED `thread_id`, which
  * the direct-send response has never carried. The type checked; the value was
@@ -3565,7 +3809,7 @@ declare class TimeoutError extends ApiError {
  * has been delivered**. A human has to approve it first, and the delivery outcome
  * arrives later as a `sent` / `send_failed` review event. Code that treats every
  * 2xx from `send()` as "the mail went out" is wrong under the default
- * `require_review` policy — which is every account that has not changed it.
+ * `require_review` policy - which is every account that has not changed it.
  */
 
 /**
@@ -3575,14 +3819,14 @@ declare class TimeoutError extends ApiError {
  */
 declare function isQueuedForReview(res: SendOutcome): res is QueuedForReviewResult;
 /**
- * True when the message was delivered immediately — either the review-loop
+ * True when the message was delivered immediately - either the review-loop
  * `{kind:"sent"}` body or the legacy body a bare send gets under `allow_direct`.
  */
 declare function isSentImmediately(res: SendOutcome): res is SendResult | SentResult;
 /**
  * The delivered message id, or `undefined` when the message was queued instead.
  *
- * `undefined` here is NOT an error — it is the normal answer under
+ * `undefined` here is NOT an error - it is the normal answer under
  * `require_review`. Pair it with {@link reviewIdOf} to follow the message to its
  * outcome.
  */
@@ -3690,7 +3934,7 @@ declare function verifyWebhookSignature(options: VerifyWebhookOptions): Promise<
  */
 declare function parseWebhook(options: VerifyWebhookOptions): Promise<WebhookPayload | null>;
 /**
- * Produce the canonical `X-Extrovert-Signature` header value for a body — the exact format the Go
+ * Produce the canonical `X-Extrovert-Signature` header value for a body - the exact format the Go
  * delivery engine emits: `t=<unix>,v1=<hex hmac-sha256("<t>.<rawbody>")>`. Mainly useful for tests
  * and self-hosted senders; the platform signs deliveries server-side. The Go `SignWebhook` and this
  * helper are pinned to the same fixed conformance vector across languages.
@@ -3701,7 +3945,7 @@ declare function signWebhook(secret: string, body: string, timestampSeconds: num
  * The Extrovert Review-Loop **open contract** (HITL D14, spec §11).
  *
  * This module is the single, documented, *versioned* publication of the stable
- * agent-facing JSON shapes that the Review Loop exposes — the shapes agents and
+ * agent-facing JSON shapes that the Review Loop exposes - the shapes agents and
  * third-party harnesses code against. It does **not** redesign any types: it
  * re-exports the canonical models built across M1–M8 (see `./models`) under one
  * named contract surface, stamps a {@link CONTRACT_VERSION}, and publishes a
@@ -3711,7 +3955,7 @@ declare function signWebhook(secret: string, body: string, timestampSeconds: num
  * ## This is a contract, NOT a protocol (D14)
  *
  * Per resolved decision **D14**, the open surface is published **now** as an open,
- * documented **skill + SDK contract** — explicitly **not** a wire protocol and
+ * documented **skill + SDK contract** - explicitly **not** a wire protocol and
  * **not** a standalone `/v1/contract` endpoint. The contract is exactly: these SDK
  * types + the agent skills (`extrovert-send-email`, `extrovert-writing-rules`) + the
  * docs, **versioned with the SDK** (this package). Formal protocol
@@ -3719,7 +3963,7 @@ declare function signWebhook(secret: string, body: string, timestampSeconds: num
  *
  * ## Provisional, pre-1.0 (0.x)
  *
- * {@link CONTRACT_VERSION} is **`0.1.0-pre.6`** — a deliberately **provisional**, pre-1.0
+ * {@link CONTRACT_VERSION} is **`0.1.0-pre.7`** - a deliberately **provisional**, pre-1.0
  * contract. It is open and documented, but it MAY still evolve before 1.0: there
  * are no external users yet, and the **D20 shared-pool auto-send governor** is a
  * hard prerequisite before onboarding external users. Pin the version; expect
@@ -3729,11 +3973,11 @@ declare function signWebhook(secret: string, body: string, timestampSeconds: num
  *
  * Every shape keys on **opaque, typed ids** (`rr_`, `turn_`, `cat_`, `rule_`,
  * `rln_`, `ndg_`, …) and never on names. Names/descriptions are mutable display
- * metadata; renaming never breaks a reference. $0-LLM on our side — the contract
+ * metadata; renaming never breaks a reference. $0-LLM on our side - the contract
  * is pure deterministic JSON; all judgment lives in the agent skills.
  *
  * The canonical example payloads for the §11 core shapes (Intent, ReviewFeedback,
- * DiffJson, Rule, Nudge) are the conformance golden fixtures — see
+ * DiffJson, Rule, Nudge) are the conformance golden fixtures - see
  * `golang/internal/extrovertapi/testdata/contract/` and the SDK
  * `contract.test.ts` (both assert these examples parse/validate without loss).
  *
@@ -3776,24 +4020,24 @@ interface DiffJson {
 /**
  * The published version of the Extrovert Review-Loop open contract (D14).
  *
- * **`0.1.0-pre.6` — PROVISIONAL, pre-1.0.** Versioned *with the SDK* (this package's
+ * **`0.1.0-pre.7` - PROVISIONAL, pre-1.0.** Versioned *with the SDK* (this package's
  * `package.json` version) and aligned to the openapi `info.version`. Open and
  * documented, but MAY still evolve before 1.0 (no external users yet; the D20
  * shared-pool governor is required before external users). Pin it.
  */
-declare const CONTRACT_VERSION: "0.1.0-pre.6";
+declare const CONTRACT_VERSION: "0.1.0-pre.7";
 /** The stability posture of a published contract version. */
 type ContractStability = "provisional" | "stable";
 /**
- * The machine-readable manifest of the open contract (D14) — what a harness pins.
+ * The machine-readable manifest of the open contract (D14) - what a harness pins.
  *
  * It enumerates the canonical §11 **core** shapes and the **full** M1–M8 surface
  * by name, stamps {@link CONTRACT_VERSION}, and marks the {@link ContractStability}
  * posture so a consumer can reason about evolution risk. It carries no runtime
- * behavior (M9 adds none — types + a version + a test + docs) and no LLM.
+ * behavior (M9 adds none - types + a version + a test + docs) and no LLM.
  */
 interface ContractManifest {
-    /** Stable contract name (NOT a protocol name — D14). */
+    /** Stable contract name (NOT a protocol name - D14). */
     readonly name: "extrovert.review-loop";
     /** The published contract version (== {@link CONTRACT_VERSION}). */
     readonly version: string;
@@ -3803,7 +4047,7 @@ interface ContractManifest {
      */
     readonly stability: ContractStability;
     /**
-     * D14: this is an SDK + skill contract, versioned WITH the SDK — never a wire
+     * D14: this is an SDK + skill contract, versioned WITH the SDK - never a wire
      * protocol or a standalone protocol endpoint.
      */
     readonly kind: "sdk+skill-contract";
@@ -3813,15 +4057,15 @@ interface ContractManifest {
     readonly core_shapes: readonly string[];
     /** The full published M1–M8 agent-facing contract surface (one 0.x contract; no tiering). */
     readonly shapes: readonly string[];
-    /** The agent skills that are part of the contract (D14 — "skill + SDK"). */
+    /** The agent skills that are part of the contract (D14 - "skill + SDK"). */
     readonly skills: readonly string[];
 }
 /**
  * The published manifest instance. Frozen so a harness can compare it
  * structurally. The `core_shapes` are the five §11 canonical shapes; `shapes` is
  * the full provisional-0.x surface. Keep this list in sync with the re-exports
- * above — the `contract.test.ts` drift test asserts every named shape resolves.
+ * above - the `contract.test.ts` drift test asserts every named shape resolves.
  */
 declare const CONTRACT_MANIFEST: ContractManifest;
 
-export { API_VERSION_HEADER, type AccountRiskDial, type AckReviewEventEntry, type AckReviewEventRequest, type AckReviewEventResult, type AddContactListRequest, type Agent, type AgentStatus, ApiError, type ApiErrorBody, type Attachment, type AttachmentDownload, type AttachmentInput, AuthenticationError, type BatchUpdateMessagesRequest, type BatchUpdateResult, BornStaleError, BreadthRequiredError, CONTRACT_MANIFEST, CONTRACT_VERSION, CURRENT_API_VERSION, Categories, type Category, type CategoryPacingState, type CategoryRiskDial, ConflictError, ConnectionError, type ContactListDirection, type ContactListEntry, type ContactListKind, ContactLists, type ContractManifest, type ContractStability, type CreateInboxRequest, type Cursor, DEFAULT_BASE_URL, type DeleteResult, type DiffHunk, type DiffJson, type Domain, type DomainOffboard, type DomainRecord, type DomainScope, Domains, type EffectiveRiskDial, type EmailAddress, type EnrollRequest, type EnrollResponse, type ExtractedCredentials, ExtrovertClient as Extrovert, ExtrovertClient, type ExtrovertClientOptions, ForbiddenScopeError, type ForwardRequest, type GetInboxParams, type GetRuleAuditParams, type GetRulesParams, type GraduationStatus, IdempotencyConflictError, type Inbox, type InboxCredentials, InboxHandle, type InboxInclude, type InboxMetadata, type InboxMetadataPatch, type InboxMetadataValue, type InboxStatus, Inboxes, IntentRequiredError, type IsoTimestamp, type Job, type KeyTier, type List, type ListCategoriesParams, type ListInboxesParams, type ListMessagesParams, ListPage, type ListParams, type ListReviewEventsParams, type ListReviewsParams, type ListSuppressionsParams, type ListThreadsParams, MOCK_BASE_URL, type MailFolder, type MailboxQuickstart, type MailboxQuickstartCall, type MarkReadRequest, type Message, type MessageDirection, Messages, MockBackend, NotFoundError, type OnboardDomainRequest, type OnboardingMode, PROBLEM_CODES, type PacingItem, type Page, type PageFetcher, PaymentRequiredError, PermissionError, type PostReviewChatRequest, type Problem, type ProblemCode, type ProblemField, type ProjectInboxListParams, ProjectInboxes, Projects, type ProposeCategoryRequest, type ProposeGraduationRequest, type QueuedForReviewResult, REVIEW_PROBLEM_RETRYABLE, RateLimitError, RecipientSuppressedError, type RegisterWebhookRequest, type ReplyRequest, type RestampReviewRequest, type Review, ReviewConflictError, type ReviewDecisionContext, type ReviewEvent, type ReviewEventCursor, type ReviewEventReason, ReviewEvents, type ReviewEventsResult, type ReviewFeedback, type ReviewFeedbackComment, type ReviewInclude, type ReviewIntent, type ReviewMode, type ReviewPolicy, type ReviewState, type ReviewTurn, type ReviewerAction, type ReviewerDecisionRequest, type ReviewerDecisionResult, Reviews, type RiskDial, type Rule, type RuleAuditEntry, type RuleLayer, type RuleSnapshot, Rules, SDK_VERSION, type SaveRuleRequest, type ScanBacklogStatus, type Scope, type SearchMessagesParams, SendNeedsReconciliationError, type SendOutcome, type SendRequest, type SendResult, type SentResult, type SignUpRequest, type SignUpResponse, StaleError, type StreamEvent, type StreamOptions, type SubmitForReviewResult, type SubmitRevisionRequest, type SuppressionEntry, type SuppressionPrecheck, type SuppressionScope, type SuppressionSource, Suppressions, TerminalError, type Thread, type ThreadDetail, Threads, TimeoutError, UnavailableError, type UpdateCategoryRequest, type UpdateInboxRequest, type UpdateWebhookRequest, ValidationError, type VerifyRequest, type VerifyResponse, type VerifyWebhookOptions, type WaitForEmailRequest, type WaitForEmailResult, type WaitForReviewEventParams, type Webhook, type WebhookEvent, type WebhookPayload, Webhooks, type WhoAmI, WrongStateError, extractCredentials, extractLink, extractOtp, isProblemCode, isQueuedForReview, isSentImmediately, listPage, parseKeyTier, parseProblem, parseWebhook, reviewIdOf, sentMessageIdOf, serializeInclude, signWebhook, threadIdOf, tierAllowsOrgWildcard, tierNeedsExplicitBreadth, verifyWebhookSignature };
+export { API_VERSION_HEADER, type AccountRiskDial, type AckReviewEventEntry, type AckReviewEventRequest, type AckReviewEventResult, type AddContactListRequest, type Agent, type AgentStatus, ApiError, type ApiErrorBody, type Attachment, type AttachmentDownload, type AttachmentInput, AuthenticationError, type BatchUpdateMessagesRequest, type BatchUpdateResult, BornStaleError, BreadthRequiredError, CONTRACT_MANIFEST, CONTRACT_VERSION, CURRENT_API_VERSION, Categories, type Category, type CategoryPacingState, type CategoryRiskDial, Commerce, type CommerceBlocker, type CommerceRequest, type CommerceRequestKind, ConflictError, ConnectionError, type ContactListDirection, type ContactListEntry, type ContactListKind, ContactLists, type ContractManifest, type ContractStability, type CreateInboxRequest, type Cursor, DEFAULT_BASE_URL, type DeleteResult, type DiffHunk, type DiffJson, type Domain, type DomainOffboard, type DomainQuote, type DomainReadiness, type DomainRecord, type DomainScope, type DomainStatusEvent, type DomainStatusEventPage, type DomainWaitResult, Domains, type EffectiveRiskDial, type EmailAddress, type EnrollRequest, type EnrollResponse, type ExtractedCredentials, ExtrovertClient as Extrovert, ExtrovertClient, type ExtrovertClientOptions, ForbiddenScopeError, type ForwardRequest, type GetInboxParams, type GetRuleAuditParams, type GetRulesParams, type GraduationStatus, IdempotencyConflictError, type Inbox, type InboxCredentials, InboxHandle, type InboxInclude, type InboxMetadata, type InboxMetadataPatch, type InboxMetadataValue, type InboxStatus, Inboxes, IntentRequiredError, type IsoTimestamp, type Job, type KeyTier, type List, type ListCategoriesParams, type ListCommerceRequestsParams, type ListInboxesParams, type ListMessagesParams, ListPage, type ListParams, type ListReviewEventsParams, type ListReviewsParams, type ListSuppressionsParams, type ListThreadsParams, MOCK_BASE_URL, type MailFolder, type MailboxQuickstart, type MailboxQuickstartCall, type MarkReadRequest, type Message, type MessageDirection, Messages, MockBackend, NotFoundError, type OnboardDomainRequest, type OnboardingMode, PROBLEM_CODES, type PacingItem, type Page, type PageFetcher, PaymentRequiredError, PermissionError, type PostReviewChatRequest, type Problem, type ProblemCode, type ProblemField, type ProjectInboxListParams, ProjectInboxes, Projects, type ProposeCategoryRequest, type ProposeGraduationRequest, type QueuedForReviewResult, type QuoteDomainRequest, REVIEW_PROBLEM_RETRYABLE, RateLimitError, RecipientSuppressedError, type RegisterWebhookRequest, type ReplyRequest, type RequestDomainPurchaseRequest, type RequestPlanChangeRequest, type RestampReviewRequest, type Review, ReviewConflictError, type ReviewDecisionContext, type ReviewEvent, type ReviewEventCursor, type ReviewEventReason, ReviewEvents, type ReviewEventsResult, type ReviewFeedback, type ReviewFeedbackComment, type ReviewInclude, type ReviewIntent, type ReviewMode, type ReviewPolicy, type ReviewState, type ReviewTurn, type ReviewerAction, type ReviewerDecisionRequest, type ReviewerDecisionResult, Reviews, type RiskDial, type Rule, type RuleAuditEntry, type RuleLayer, type RuleSnapshot, Rules, SDK_VERSION, type SaveRuleRequest, type ScanBacklogStatus, type Scope, type SearchMessagesParams, SendNeedsReconciliationError, type SendOutcome, type SendRequest, type SendResult, type SentResult, type SignUpRequest, type SignUpResponse, StaleError, type StreamEvent, type StreamOptions, type SubmitForReviewResult, type SubmitRevisionRequest, type SuppressionEntry, type SuppressionPrecheck, type SuppressionScope, type SuppressionSource, Suppressions, TerminalError, type Thread, type ThreadDetail, Threads, TimeoutError, UnavailableError, type UpdateCategoryRequest, type UpdateInboxRequest, type UpdateWebhookRequest, ValidationError, type VerifyRequest, type VerifyResponse, type VerifyWebhookOptions, type WaitForEmailRequest, type WaitForEmailResult, type WaitForReviewEventParams, type Webhook, type WebhookEvent, type WebhookPayload, Webhooks, type WhoAmI, WrongStateError, extractCredentials, extractLink, extractOtp, isProblemCode, isQueuedForReview, isSentImmediately, listPage, parseKeyTier, parseProblem, parseWebhook, reviewIdOf, sentMessageIdOf, serializeInclude, signWebhook, threadIdOf, tierAllowsOrgWildcard, tierNeedsExplicitBreadth, verifyWebhookSignature };