@keystrokehq/resend 0.0.1

package/README.md

@@ -0,0 +1,184 @@
+# @keystrokehq/resend
+
+Resend integration for Keystroke workflows — transactional email, broadcasts, contacts, segments, templates, domains, and Svix-signed webhook triggers.
+
+## Overview
+
+This package wraps the [Resend](https://resend.com) v1 REST API and exposes:
+
+- **66 operations** across 12 resource domains.
+- **17 direct-binding webhook trigger helpers** (11 email, 3 domain, 3 contact) with Svix v1 signature verification.
+- An idempotent `ensureResendWebhook` helper that registers a webhook endpoint, reconciles its event subscription, and returns the per-endpoint signing secret.
+
+No runtime dependency on the official `resend` npm package — the client is a thin wrapper over the shared `createJsonRestClient` helper from `@keystrokehq/integration-authoring`, and the Svix verifier is hand-rolled on top of Node's `crypto` module. See [`IMPLEMENTATION_NOTES.md`](./IMPLEMENTATION_NOTES.md) § 3 for the SDK rejection rationale.
+
+## Installation
+
+```bash
+pnpm add @keystrokehq/resend
+```
+
+## Credentials
+
+The public connection is manual API-key auth.
+
+Required:
+
+- `RESEND_API_KEY` — an API key from your Resend dashboard (`re_…`).
+
+Optional:
+
+- `RESEND_WEBHOOK_SIGNING_SECRETS` — a map of `{ webhookId: whsec_… }`. Populate it automatically via `ensureResendWebhook` (see below) before binding webhook triggers.
+
+There is no OAuth flow and no Keystroke-owned shared client secret. API keys are team-scoped — one Keystroke connection = one Resend team.
+
+## Quickstart
+
+Import the connection and two helpers you'll use most:
+
+```ts
+import { resend, type ResendCredentials } from '@keystrokehq/resend/connection';
+import { sendEmail } from '@keystrokehq/resend/emails';
+import { triggers } from '@keystrokehq/resend/triggers';
+```
+
+### Send a transactional email
+
+`sendEmail` is a Keystroke operation. Drop it into a workflow step that has the Resend connection attached; the workflow runtime hands it typed credentials.
+
+```ts
+import { sendEmail } from '@keystrokehq/resend/emails';
+
+sendEmail({
+  id: 'welcome_email',
+  // Keystroke wires input at workflow-compile time; the shape below is
+  // the validated input of sendEmail.
+  input: {
+    from: 'Acme <onboarding@acme.example>',
+    to: ['delivered@resend.dev'],
+    subject: 'Welcome to Acme',
+    html: '<p>Glad you are here.</p>',
+    // Optional; forwarded as the Idempotency-Key header (24h TTL).
+    idempotency_key: 'welcome-2026-04-20',
+  },
+});
+```
+
+### Subscribe to delivery events
+
+All Resend webhooks go through one signed HTTPS POST channel. Bind one helper per event type:
+
+```ts
+import { triggers } from '@keystrokehq/resend/triggers';
+
+const onBounce = triggers.emailBounced({
+  name: 'Resend bounce handler',
+});
+```
+
+`triggers.emailOpened` filters out Apple Mail Privacy Protection cache-opens (`data.is_machine_opened === true`) by default — if you want those too, pass a custom `filter` in the binding options.
+
+### Wire the webhook endpoint
+
+Before a trigger binding can verify payloads it needs the per-endpoint `whsec_…` signing secret on the credential set. Run this once per environment:
+
+```ts
+import { ensureResendWebhook } from '@keystrokehq/resend/triggers';
+
+const result = await ensureResendWebhook({
+  credentials,
+  endpointUrl: 'https://workflows.example.com/hooks/resend',
+  events: ['email.delivered', 'email.bounced', 'email.complained'],
+});
+// result.webhookId, result.signingSecret, result.created, result.updated
+```
+
+Then persist `result.signingSecret` under `credentials.RESEND_WEBHOOK_SIGNING_SECRETS[result.webhookId]`. The trigger verifier iterates every secret in that map, which also handles rotation: add a new webhook, store its secret alongside the old one, and remove the old webhook once you've cut over.
+
+## Resource domains
+
+Every endpoint on the public Resend v1 API is wrapped.
+
+| Subpath | Endpoints covered |
+|---------|-------------------|
+| `@keystrokehq/resend/emails` | `POST /emails`, `POST /emails/batch`, `GET /emails`, `GET /emails/{id}`, `PATCH /emails/{id}`, `POST /emails/{id}/cancel`, `GET /emails/{id}/attachments`, `GET /emails/{id}/attachments/{id}` |
+| `@keystrokehq/resend/emails-receiving` | `GET /emails/receiving`, `GET /emails/receiving/{id}`, `GET /emails/receiving/{id}/attachments`, `GET /emails/receiving/{id}/attachments/{id}` |
+| `@keystrokehq/resend/templates` | CRUD + duplicate + publish |
+| `@keystrokehq/resend/broadcasts` | CRUD + send |
+| `@keystrokehq/resend/contacts` | CRUD + segment-membership + topic-subscriptions |
+| `@keystrokehq/resend/contact-properties` | CRUD |
+| `@keystrokehq/resend/segments` | CRUD + list-contacts (no update — segments are filter-defined) |
+| `@keystrokehq/resend/topics` | CRUD |
+| `@keystrokehq/resend/domains` | CRUD + verify |
+| `@keystrokehq/resend/api-keys` | Create, list, delete (no get/update on the Resend API) |
+| `@keystrokehq/resend/webhooks` | CRUD (endpoint CRUD — for direct-binding triggers use `/triggers`) |
+| `@keystrokehq/resend/logs` | List, retrieve (plan-gated) |
+
+### Support-surface imports
+
+Use these when you need to wire secondary pieces (raw client, schema types, event constants, verification helpers):
+
+- `@keystrokehq/resend/connection` — `resend`, `ResendCredentials`, `resendAuthSchema`.
+- `@keystrokehq/resend/client` — `createResendClient`, `ResendClient`, `RESEND_BASE_URL`, `RESEND_USER_AGENT`.
+- `@keystrokehq/resend/schemas` — list envelope, pagination, region / TLS / permission enums.
+- `@keystrokehq/resend/events` — event name constants and payload schemas.
+- `@keystrokehq/resend/verification` — `verifyResendWebhookRequest`, `parseResendWebhookBody`, Svix header constants.
+
+### Hidden surfaces (do not import from application code)
+
+`@keystrokehq/resend/_official` and `@keystrokehq/resend/_runtime` exist for `@keystrokehq/official-integration-catalog`. End users should not import them.
+
+## Safety model
+
+Writes and deletes are marked `needsApproval: true`. Read-only list/retrieve operations are not. Callers can override either way per-operation, but the defaults reflect Resend's destructive-action surface.
+
+## Webhook verification (standalone)
+
+If you want to verify a Resend webhook outside the Keystroke trigger runtime:
+
+```ts
+import {
+  verifyResendWebhookRequest,
+  parseResendWebhookBody,
+} from '@keystrokehq/resend/verification';
+import { resendWebhookEventSchema } from '@keystrokehq/resend/events';
+
+function handle(request: {
+  rawBody: string;
+  headers: Record<string, string | string[] | undefined>;
+}) {
+  const verified = verifyResendWebhookRequest({
+    rawBody: request.rawBody,
+    headers: request.headers,
+    signingSecret: process.env.RESEND_WEBHOOK_SECRET ?? '',
+  });
+  if (!verified.ok) {
+    return { status: 401 as const, reason: verified.reason };
+  }
+
+  const body = parseResendWebhookBody(request.rawBody);
+  const event = resendWebhookEventSchema.parse(body);
+  return { status: 200 as const, event };
+}
+```
+
+## Caveats
+
+- **User-Agent is mandatory.** The Resend API returns HTTP 403 with error code 1010 if no `User-Agent` is attached. The client sets one automatically.
+- **Rate limit.** Default is 5 requests/second per team. Retries are not automatic — callers should implement backoff, or forward an `Idempotency-Key` on `sendEmail`/`sendBatchEmails` so retries are safe.
+- **Apple Mail Privacy Protection.** `triggers.emailOpened` silently drops `is_machine_opened: true` events. Override the `filter` to opt in.
+- **React rendering is not server-side.** The official SDK's `react` body field is intentionally not accepted — render React Email components to HTML upstream and pass the string via `html`.
+- **CSV imports do not emit `contact.created`.** Documented limitation. If you need that signal, poll `listContacts` with cursor persistence.
+- **Signing-secret rotation.** Resend does not expose in-place rotation. Cut over by creating a second webhook, storing its new secret alongside the old one in `RESEND_WEBHOOK_SIGNING_SECRETS`, and deleting the old endpoint once traffic has flipped. The trigger verifier iterates every secret in the map.
+
+## References
+
+- API docs index: <https://resend.com/docs/api-reference/introduction>
+- Webhook event types: <https://resend.com/docs/dashboard/webhooks/event-types>
+- Webhook verification: <https://resend.com/docs/webhooks/verify-webhooks-requests>
+- Pagination: <https://resend.com/docs/api-reference/pagination>
+- OpenAPI spec: <https://github.com/resend/resend-openapi>
+
+## License
+
+MIT

package/dist/_official/index.d.mts

@@ -0,0 +1,2 @@
+import { a as resendOfficialIntegration, i as resendBundle } from "../integration-ClH0F7x-.mjs";
+export { resendBundle, resendOfficialIntegration };

package/dist/_official/index.mjs

@@ -0,0 +1,3 @@
+import { i as resendOfficialIntegration, r as resendBundle } from "../integration-BR1nTAnU.mjs";
+
+export { resendBundle, resendOfficialIntegration };

package/dist/_runtime/index.d.mts

@@ -0,0 +1 @@
+export { };

package/dist/_runtime/index.mjs

@@ -0,0 +1 @@
+export {  };

package/dist/api-keys.d.mts

@@ -0,0 +1,67 @@
+import { z } from "zod";
+import * as _keystrokehq_core_credential_set0 from "@keystrokehq/core/credential-set";
+import * as _keystrokehq_core0 from "@keystrokehq/core";
+
+//#region src/api-keys.d.ts
+declare const apiKeySummarySchema: z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+  created_at: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+declare const apiKeyCreatedSchema: z.ZodObject<{
+  id: z.ZodString;
+  token: z.ZodString;
+}, z.core.$loose>;
+declare const createApiKey: _keystrokehq_core0.Operation<z.ZodObject<{
+  name: z.ZodString;
+  permission: z.ZodDefault<z.ZodEnum<{
+    full_access: "full_access";
+    sending_access: "sending_access";
+  }>>;
+  domain_id: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  token: z.ZodString;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"resend", z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const listApiKeys: _keystrokehq_core0.Operation<z.ZodObject<{
+  limit: z.ZodOptional<z.ZodNumber>;
+  after: z.ZodOptional<z.ZodString>;
+  before: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  object: z.ZodLiteral<"list">;
+  has_more: z.ZodBoolean;
+  data: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    created_at: z.ZodOptional<z.ZodString>;
+  }, z.core.$loose>>;
+}, z.core.$strip>, readonly [_keystrokehq_core0.CredentialSet<"resend", z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const deleteApiKey: _keystrokehq_core0.Operation<z.ZodObject<{
+  id: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  object: z.ZodOptional<z.ZodLiteral<"api_key">>;
+  id: z.ZodString;
+  deleted: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"resend", z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+type ResendApiKeySummary = z.infer<typeof apiKeySummarySchema>;
+type ResendApiKeyCreated = z.infer<typeof apiKeyCreatedSchema>;
+//#endregion
+export { ResendApiKeyCreated, ResendApiKeySummary, createApiKey, deleteApiKey, listApiKeys };

package/dist/api-keys.mjs

@@ -0,0 +1,90 @@
+import { createResendClient } from "./client.mjs";
+import { paginationQuerySchema, resendApiKeyPermissionSchema, resendListEnvelope } from "./schemas.mjs";
+import { t as resendOperation } from "./factory-B3VyPRsL.mjs";
+import { z } from "zod";
+
+//#region src/api-keys.ts
+/**
+* resend/api-keys.ts
+*
+* Operations backing the Resend `/api-keys` endpoints.
+* PLAN.md § 6.4: 3 operations (create, list, delete).
+*
+* Resend's API does not expose GET-by-id or PATCH for API keys today,
+* so those are intentionally absent rather than faked.
+*
+* Permission tiers (verified against
+* <https://resend.com/docs/api-reference/api-keys/create-api-key>):
+*
+* - `full_access`  — every endpoint
+* - `sending_access` — send emails only; optionally pinned to one
+*   `domain_id`
+*
+* PLAN.md § 6.4 initially speculated a third `sending_only` tier;
+* that is not a distinct tier — it is `sending_access` + `domain_id`.
+* See IMPLEMENTATION_NOTES.md § 7 correction #2.
+*/
+const apiKeySummarySchema = z.object({
+	id: z.string(),
+	name: z.string().optional(),
+	created_at: z.string().optional()
+}).passthrough();
+const apiKeyCreatedSchema = z.object({
+	id: z.string(),
+	token: z.string()
+}).passthrough();
+const listApiKeysResponseSchema = resendListEnvelope(apiKeySummarySchema);
+const createApiKey = resendOperation({
+	id: "create_resend_api_key",
+	name: "Create Resend API Key",
+	description: "Create a new API key. The cleartext token is returned once — store it immediately; Resend cannot retrieve it again.",
+	input: z.object({
+		name: z.string().min(1).max(50),
+		permission: resendApiKeyPermissionSchema.default("full_access"),
+		domain_id: z.string().min(1).optional().describe("When set with permission=sending_access, restricts the key to sending from a single verified domain.")
+	}),
+	output: apiKeyCreatedSchema,
+	needsApproval: true,
+	run: async (input, credentials) => {
+		return createResendClient(credentials).request({
+			method: "POST",
+			path: "/api-keys",
+			body: input
+		});
+	}
+});
+const listApiKeys = resendOperation({
+	id: "list_resend_api_keys",
+	name: "List Resend API Keys",
+	description: "List API keys for the authenticated team.",
+	input: paginationQuerySchema,
+	output: listApiKeysResponseSchema,
+	run: async (input, credentials) => {
+		return createResendClient(credentials).request({
+			method: "GET",
+			path: "/api-keys",
+			query: input
+		});
+	}
+});
+const deleteApiKey = resendOperation({
+	id: "delete_resend_api_key",
+	name: "Delete Resend API Key",
+	description: "Delete (revoke) an API key.",
+	input: z.object({ id: z.string().min(1) }),
+	output: z.object({
+		object: z.literal("api_key").optional(),
+		id: z.string(),
+		deleted: z.boolean().optional()
+	}).passthrough(),
+	needsApproval: true,
+	run: async (input, credentials) => {
+		return createResendClient(credentials).request({
+			method: "DELETE",
+			path: `/api-keys/${encodeURIComponent(input.id)}`
+		});
+	}
+});
+
+//#endregion
+export { createApiKey, deleteApiKey, listApiKeys };

package/dist/broadcasts.d.mts

@@ -0,0 +1,238 @@
+import { z } from "zod";
+import * as _keystrokehq_core_credential_set0 from "@keystrokehq/core/credential-set";
+import * as _keystrokehq_core0 from "@keystrokehq/core";
+
+//#region src/broadcasts.d.ts
+declare const broadcastSummarySchema: z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+  status: z.ZodOptional<z.ZodUnion<[z.ZodEnum<{
+    sending: "sending";
+    draft: "draft";
+    scheduled: "scheduled";
+    queued: "queued";
+    sent: "sent";
+    cancelled: "cancelled";
+    failed: "failed";
+  }>, z.ZodString]>>;
+  audience_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  segment_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  created_at: z.ZodOptional<z.ZodString>;
+  updated_at: z.ZodOptional<z.ZodString>;
+  scheduled_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  sent_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+}, z.core.$loose>;
+declare const broadcastDetailSchema: z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+  status: z.ZodOptional<z.ZodUnion<[z.ZodEnum<{
+    sending: "sending";
+    draft: "draft";
+    scheduled: "scheduled";
+    queued: "queued";
+    sent: "sent";
+    cancelled: "cancelled";
+    failed: "failed";
+  }>, z.ZodString]>>;
+  audience_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  segment_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  created_at: z.ZodOptional<z.ZodString>;
+  updated_at: z.ZodOptional<z.ZodString>;
+  scheduled_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  sent_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  from: z.ZodOptional<z.ZodString>;
+  subject: z.ZodOptional<z.ZodString>;
+  reply_to: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+  preview_text: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  html: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  text: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+}, z.core.$loose>;
+declare const createBroadcast: _keystrokehq_core0.Operation<z.ZodObject<{
+  name: z.ZodOptional<z.ZodString>;
+  from: z.ZodOptional<z.ZodString>;
+  subject: z.ZodOptional<z.ZodString>;
+  reply_to: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+  preview_text: z.ZodOptional<z.ZodString>;
+  html: z.ZodOptional<z.ZodString>;
+  text: z.ZodOptional<z.ZodString>;
+  template: z.ZodOptional<z.ZodObject<{
+    id: z.ZodString;
+    variables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+  }, z.core.$strip>>;
+  audience_id: z.ZodOptional<z.ZodString>;
+  segment_id: z.ZodOptional<z.ZodString>;
+  scheduled_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+  status: z.ZodOptional<z.ZodUnion<[z.ZodEnum<{
+    sending: "sending";
+    draft: "draft";
+    scheduled: "scheduled";
+    queued: "queued";
+    sent: "sent";
+    cancelled: "cancelled";
+    failed: "failed";
+  }>, z.ZodString]>>;
+  audience_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  segment_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  created_at: z.ZodOptional<z.ZodString>;
+  updated_at: z.ZodOptional<z.ZodString>;
+  scheduled_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  sent_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  from: z.ZodOptional<z.ZodString>;
+  subject: z.ZodOptional<z.ZodString>;
+  reply_to: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+  preview_text: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  html: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  text: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"resend", z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const listBroadcasts: _keystrokehq_core0.Operation<z.ZodObject<{
+  limit: z.ZodOptional<z.ZodNumber>;
+  after: z.ZodOptional<z.ZodString>;
+  before: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  object: z.ZodLiteral<"list">;
+  has_more: z.ZodBoolean;
+  data: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodUnion<[z.ZodEnum<{
+      sending: "sending";
+      draft: "draft";
+      scheduled: "scheduled";
+      queued: "queued";
+      sent: "sent";
+      cancelled: "cancelled";
+      failed: "failed";
+    }>, z.ZodString]>>;
+    audience_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    segment_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    created_at: z.ZodOptional<z.ZodString>;
+    updated_at: z.ZodOptional<z.ZodString>;
+    scheduled_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    sent_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  }, z.core.$loose>>;
+}, z.core.$strip>, readonly [_keystrokehq_core0.CredentialSet<"resend", z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const retrieveBroadcast: _keystrokehq_core0.Operation<z.ZodObject<{
+  id: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+  status: z.ZodOptional<z.ZodUnion<[z.ZodEnum<{
+    sending: "sending";
+    draft: "draft";
+    scheduled: "scheduled";
+    queued: "queued";
+    sent: "sent";
+    cancelled: "cancelled";
+    failed: "failed";
+  }>, z.ZodString]>>;
+  audience_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  segment_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  created_at: z.ZodOptional<z.ZodString>;
+  updated_at: z.ZodOptional<z.ZodString>;
+  scheduled_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  sent_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  from: z.ZodOptional<z.ZodString>;
+  subject: z.ZodOptional<z.ZodString>;
+  reply_to: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+  preview_text: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  html: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  text: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"resend", z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const updateBroadcast: _keystrokehq_core0.Operation<z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+  from: z.ZodOptional<z.ZodString>;
+  subject: z.ZodOptional<z.ZodString>;
+  reply_to: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+  preview_text: z.ZodOptional<z.ZodString>;
+  html: z.ZodOptional<z.ZodString>;
+  text: z.ZodOptional<z.ZodString>;
+  template: z.ZodOptional<z.ZodObject<{
+    id: z.ZodString;
+    variables: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+  }, z.core.$strip>>;
+  segment_id: z.ZodOptional<z.ZodString>;
+  audience_id: z.ZodOptional<z.ZodString>;
+  scheduled_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+  status: z.ZodOptional<z.ZodUnion<[z.ZodEnum<{
+    sending: "sending";
+    draft: "draft";
+    scheduled: "scheduled";
+    queued: "queued";
+    sent: "sent";
+    cancelled: "cancelled";
+    failed: "failed";
+  }>, z.ZodString]>>;
+  audience_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  segment_id: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  created_at: z.ZodOptional<z.ZodString>;
+  updated_at: z.ZodOptional<z.ZodString>;
+  scheduled_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  sent_at: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  from: z.ZodOptional<z.ZodString>;
+  subject: z.ZodOptional<z.ZodString>;
+  reply_to: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+  preview_text: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  html: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+  text: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"resend", z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const sendBroadcast: _keystrokehq_core0.Operation<z.ZodObject<{
+  id: z.ZodString;
+  scheduled_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  object: z.ZodOptional<z.ZodLiteral<"broadcast">>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"resend", z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const deleteBroadcast: _keystrokehq_core0.Operation<z.ZodObject<{
+  id: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  object: z.ZodOptional<z.ZodLiteral<"broadcast">>;
+  id: z.ZodString;
+  deleted: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"resend", z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  RESEND_API_KEY: z.ZodString;
+  RESEND_WEBHOOK_SIGNING_SECRETS: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+type ResendBroadcastSummary = z.infer<typeof broadcastSummarySchema>;
+type ResendBroadcastDetail = z.infer<typeof broadcastDetailSchema>;
+//#endregion
+export { ResendBroadcastDetail, ResendBroadcastSummary, createBroadcast, deleteBroadcast, listBroadcasts, retrieveBroadcast, sendBroadcast, updateBroadcast };