npm - @marlinjai/mail-contract - Versions diffs - 0.11.0 → 0.12.0 - Mend

@marlinjai/mail-contract 0.11.0 → 0.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist/index.d.mts CHANGED Viewed

@@ -890,18 +890,41 @@ type ApiKeyCreated = z.infer<typeof ApiKeyCreated>;
 declare const AUDIT_ACTIONS: readonly ["workspace.created", "workspace.updated", "workspace.company_changed", "member.added", "member.role_changed", "member.removed", "member.invited", "invite.revoked", "api_key.created", "api_key.revoked", "provider.created", "provider.updated", "provider.deleted", "provider.events_registered", "provider.events_secret_set", "provider.bounces_halted", "provider.anomaly_cleared", "topic.created", "topic.updated", "topic.deleted", "template.created", "template.updated", "template.deleted", "template.inputs_declared", "saved_section.created", "saved_section.updated", "saved_section.deleted", "asset.uploaded", "asset.imported", "contact.erased", "suppression.created", "suppression.deleted", "mailing.created", "mailing.sent", "mailing.paused", "mailing.resumed", "mailing.cancelled", "mailing.retried", "webhook.created", "webhook.updated", "webhook.deleted", "webhook.secret_rotated", "webhook.redelivered", "contact.unsubscribed", "tag.created", "tag.deleted", "tag.assigned", "tag.unassigned", "contact_property.created", "contact_property.deleted", "segment.created", "segment.updated", "segment.deleted", "signup_form.created", "signup_form.updated", "signup_form.deleted", "contact.subscribed", "import.created", "import.mapped", "import.committed", "import.cancelled", "import.finished", "mailing.scheduled", "mailing.unscheduled", "mailing.schedule_failed", "mailing.ab_test_updated", "mailing.ab_winner_selected", "tracking.updated", "billing.checkout_started", "billing.subscription_changed", "billing.exemption_changed", "automation.created", "automation.updated", "automation.published", "automation.paused", "automation.resumed", "automation.archived", "automation.deleted", "automation.duplicated", "automation.enrolled", "automation.run_ended", "event.recorded"];
 declare const AuditAction: z.ZodEnum<["workspace.created", "workspace.updated", "workspace.company_changed", "member.added", "member.role_changed", "member.removed", "member.invited", "invite.revoked", "api_key.created", "api_key.revoked", "provider.created", "provider.updated", "provider.deleted", "provider.events_registered", "provider.events_secret_set", "provider.bounces_halted", "provider.anomaly_cleared", "topic.created", "topic.updated", "topic.deleted", "template.created", "template.updated", "template.deleted", "template.inputs_declared", "saved_section.created", "saved_section.updated", "saved_section.deleted", "asset.uploaded", "asset.imported", "contact.erased", "suppression.created", "suppression.deleted", "mailing.created", "mailing.sent", "mailing.paused", "mailing.resumed", "mailing.cancelled", "mailing.retried", "webhook.created", "webhook.updated", "webhook.deleted", "webhook.secret_rotated", "webhook.redelivered", "contact.unsubscribed", "tag.created", "tag.deleted", "tag.assigned", "tag.unassigned", "contact_property.created", "contact_property.deleted", "segment.created", "segment.updated", "segment.deleted", "signup_form.created", "signup_form.updated", "signup_form.deleted", "contact.subscribed", "import.created", "import.mapped", "import.committed", "import.cancelled", "import.finished", "mailing.scheduled", "mailing.unscheduled", "mailing.schedule_failed", "mailing.ab_test_updated", "mailing.ab_winner_selected", "tracking.updated", "billing.checkout_started", "billing.subscription_changed", "billing.exemption_changed", "automation.created", "automation.updated", "automation.published", "automation.paused", "automation.resumed", "automation.archived", "automation.deleted", "automation.duplicated", "automation.enrolled", "automation.run_ended", "event.recorded"]>;
 type AuditAction = z.infer<typeof AuditAction>;
+/**
+ * The applications, besides the dashboard, that may act for a signed-in person:
+ * each holds a service token of its own and sends the person's auth-brain
+ * subject with it, exactly as the dashboard does, and the service checks that
+ * person's membership and role on every call. Unlike the dashboard, such an
+ * application reaches only the few operations its purpose needs
+ * (`TRUSTED_APP_OPERATIONS`, in routes.ts).
+ *
+ * - `booking`: Lumitra Booking, which connects a host's booking pages to one
+ *   of the person's workspaces (it lists them, reads the providers, creates a
+ *   `send` key for itself and revokes that key again).
+ */
+declare const TRUSTED_APPS: readonly ["booking"];
+declare const TrustedApp: z.ZodEnum<["booking"]>;
+type TrustedApp = z.infer<typeof TrustedApp>;
 declare const AuditActor: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<"member">;
     member_id: z.ZodString;
     subject: z.ZodString;
+    /**
+     * The application the person acted through, when it was not the dashboard:
+     * the service set it from the service token the call carried, so it is
+     * verified, unlike a key's `on_behalf_of`. Absent for the dashboard.
+     */
+    app: z.ZodOptional<z.ZodEnum<["booking"]>>;
 }, "strip", z.ZodTypeAny, {
     type: "member";
     subject: string;
     member_id: string;
+    app?: "booking" | undefined;
 }, {
     type: "member";
     subject: string;
     member_id: string;
+    app?: "booking" | undefined;
 }>, z.ZodObject<{
     type: z.ZodLiteral<"api_key">;
     api_key_id: z.ZodString;
@@ -937,14 +960,22 @@ declare const AuditEntry: z.ZodObject<{
         type: z.ZodLiteral<"member">;
         member_id: z.ZodString;
         subject: z.ZodString;
+        /**
+         * The application the person acted through, when it was not the dashboard:
+         * the service set it from the service token the call carried, so it is
+         * verified, unlike a key's `on_behalf_of`. Absent for the dashboard.
+         */
+        app: z.ZodOptional<z.ZodEnum<["booking"]>>;
     }, "strip", z.ZodTypeAny, {
         type: "member";
         subject: string;
         member_id: string;
+        app?: "booking" | undefined;
     }, {
         type: "member";
         subject: string;
         member_id: string;
+        app?: "booking" | undefined;
     }>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         api_key_id: z.ZodString;
@@ -985,6 +1016,7 @@ declare const AuditEntry: z.ZodObject<{
         type: "member";
         subject: string;
         member_id: string;
+        app?: "booking" | undefined;
     } | {
         type: "api_key";
         api_key_id: string;
@@ -1004,6 +1036,7 @@ declare const AuditEntry: z.ZodObject<{
         type: "member";
         subject: string;
         member_id: string;
+        app?: "booking" | undefined;
     } | {
         type: "api_key";
         api_key_id: string;
@@ -29742,14 +29775,17 @@ declare const foundationRoutes: {
                     type: z.ZodLiteral<"member">;
                     member_id: z.ZodString;
                     subject: z.ZodString;
+                    app: z.ZodOptional<z.ZodEnum<["booking"]>>;
                 }, "strip", z.ZodTypeAny, {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 }, {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 }>, z.ZodObject<{
                     type: z.ZodLiteral<"api_key">;
                     api_key_id: z.ZodString;
@@ -29785,6 +29821,7 @@ declare const foundationRoutes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -29804,6 +29841,7 @@ declare const foundationRoutes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -29826,6 +29864,7 @@ declare const foundationRoutes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -29848,6 +29887,7 @@ declare const foundationRoutes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -106783,14 +106823,17 @@ declare const routes: {
                     type: z.ZodLiteral<"member">;
                     member_id: z.ZodString;
                     subject: z.ZodString;
+                    app: z.ZodOptional<z.ZodEnum<["booking"]>>;
                 }, "strip", z.ZodTypeAny, {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 }, {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 }>, z.ZodObject<{
                     type: z.ZodLiteral<"api_key">;
                     api_key_id: z.ZodString;
@@ -106826,6 +106869,7 @@ declare const routes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -106845,6 +106889,7 @@ declare const routes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -106867,6 +106912,7 @@ declare const routes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -106889,6 +106935,7 @@ declare const routes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -106909,6 +106956,31 @@ declare const routes: {
 };
 type Routes = typeof routes;
 type OperationId = keyof Routes;
+/**
+ * What an application other than the dashboard may reach when it acts for a
+ * signed-in person with its own service token (`TRUSTED_APPS`). Everything not
+ * listed is refused with `forbidden` before any handler runs, whatever the
+ * person's role: the list is the whole of the trust the application is given.
+ * The person's membership and role are still checked on every call, as for the
+ * dashboard.
+ *
+ * `booking` (Lumitra Booking) connects a host's booking pages to a workspace:
+ * - `workspaces.list`: the workspaces the person belongs to, to choose from,
+ *   each with the person's role and the languages it writes in;
+ * - `workspace.update`: adding languages, and nothing else (the service
+ *   refuses any other field from this application), since the booking mails
+ *   are written in three;
+ * - `providers.list`: the sending accounts to choose from;
+ * - `apiKeys.create`: its own key, scope `send` only;
+ * - `apiKeys.revoke`: a key it created itself, and no other.
+ * Sending, and installing its templates, happen with that key, not with the
+ * service token.
+ */
+declare const TRUSTED_APP_OPERATIONS: {
+    readonly booking: readonly ["workspaces.list", "workspace.update", "providers.list", "apiKeys.create", "apiKeys.revoke"];
+};
+/** Whether a trusted application may call an operation at all. */
+declare function trustedAppMayCall(app: TrustedApp, id: OperationId): boolean;
 type Infer<T> = T extends z.ZodTypeAny ? z.infer<T> : undefined;
 type RouteParams<K extends OperationId> = Routes[K] extends {
     params: infer P;
@@ -106940,4 +107012,4 @@ declare function matchRoute(method: HttpMethod, pathname: string): {
     params: Record<string, string>;
 } | null;
-export { AB_TEST_STATUSES, AB_WINNER_METRICS, API_KEY_SCOPES, API_VERSION_PREFIX, ASSET_CONTENT_TYPES, ASSET_POLICIES, ASSET_UPLOAD_FIELD, AUDIT_ACTIONS, AUTHORIZATION_HEADER, AUTOMATION_DATE_TRIGGER_KINDS, AUTOMATION_END_REASONS, AUTOMATION_ENTRY_REFUSALS, AUTOMATION_FILTER_FIELD_OPERATORS, AUTOMATION_FILTER_FIELD_PATTERN, AUTOMATION_ISSUE_CODES, AUTOMATION_STATUSES, AUTOMATION_STEP_KINDS, AUTOMATION_TRIGGER_KINDS, AUTOMATION_WAIT_REASONS, AbTestConfig, AbTestState, AbVariant, AbWinnerRequest, ApiKey, ApiKeyCreate, ApiKeyCreated, ApiKeyScope, Asset, AssetContentType, AssetHost, AssetImport, AssetPolicy, AuditAction, AuditActor, AuditEntry, AuditQuery, Automation, AutomationCounts, AutomationCreate, type AutomationDateTriggerKind, AutomationDuplicateRequest, AutomationEndReason, AutomationEnrollRequest, AutomationEnrollResult, AutomationEnrollment, AutomationEntryRefusal, AutomationExitRunRequest, AutomationFilter, AutomationFilterCondition, AutomationFilterField, AutomationFlow, AutomationIssue, AutomationIssueCode, AutomationJourney, AutomationListQuery, AutomationPublishMove, AutomationPublishRequest, AutomationPublishResult, AutomationReport, AutomationRun, AutomationRunCompletedData, AutomationRunExitedData, AutomationRunFailedData, AutomationRunListQuery, AutomationRunParams, AutomationRunStartedData, AutomationRunStatus, AutomationSettings, AutomationStatus, AutomationStep, AutomationStepExecution, AutomationStepKind, AutomationStepParams, AutomationStepReport, AutomationSummary, AutomationTestEmailRequest, AutomationTrigger, AutomationTriggerKind, AutomationUpdate, AutomationValidateRequest, AutomationValidation, AutomationWaitReason, AutomationWebhookData, AutomationWithFlow, BEARER_PREFIX, BILLING_NOT_CONFIGURED_REASON, BoundedAutomationFilter, BoundedSegmentFilter, CONTACT_PROPERTY_TYPES, CatalogPlan, CheckoutRequest, CheckoutSession, CompanyId, CompileMessage, CompileRequest, CompileResult, ConditionStep, Contact, ContactAutomationListQuery, ContactAutomationRun, ContactBouncedData, ContactErased, ContactListQuery, ContactPropertyDefinition, ContactPropertyKey, ContactPropertyParams, ContactPropertyType, ContactResubscribedData, ContactSubscribedData, ContactTaggedData, ContactUnsubscribedData, ContactUpdatedData, ContactUpsert, ContactUpsertResult, DATE_PASSED_ANSWERS, DEFAULT_INVITE_TTL_DAYS, DEFAULT_PAGE_LIMIT, DOCUMENT_SCHEMA_VERSIONS, DateOnly, DatePassedAnswer, DelayStep, DocumentSchemaVersion, type DraftInsertionProblem, EDITABLE_MAILING_STATUSES, ERROR_CODES, ERROR_STATUS, EXPORT_CONTENT_TYPES, EXPORT_FORMATS, EXPORT_WARNINGS_HEADER, EXPORT_WARNING_COUNT_HEADER, type EditableLanguage, Email, EmailStep, EmailStepLanguage, ErrorBody, type ErrorCode, ErrorCodeSchema, Event, EventCreate, EventListQuery, EventName, ExportFormat, FILTER_FIELD_OPERATORS, FILTER_OPERATORS, FilterCondition, FilterField, type FilterLeafProblem, FilterOperator, GotoStep, HEALTH_PATH, HOSTED_PAGE_LOCALES, type HttpMethod, ICLOUD_SMTP_POLICY, IDEMPOTENCY_KEY_HEADER, IDEMPOTENCY_KEY_MAX_LENGTH, IDEMPOTENCY_KEY_RETENTION_HOURS, IMPORT_FILE_FIELD, IMPORT_ROW_OUTCOMES, IMPORT_SKIP_REASONS, IMPORT_STATUSES, IMPORT_TERMINAL_STATUSES, INSERTION_PROBLEM_REASONS, INSERTION_TEXT_SLOTS, INVITE_REFUSAL_REASONS, INVITE_STATUSES, Id, IdParams, ImportColumnMapping, ImportCommitRequest, ImportFinishedData, ImportJob, ImportMappingRequest, ImportReport, ImportRow, ImportRowListQuery, ImportRowOutcome, ImportSkipReason, ImportStatus, ImportWarning, ImportedAsset, Insertion, InsertionChoice, InsertionChoiceKey, type InsertionChoiceMade, InsertionChoices, type InsertionEdit, InsertionName, type InsertionProblem, type InsertionProblemReason, InsertionText, Insertions, Invite, InviteAccept, InviteAccepted, InviteCreate, InviteCreated, InviteListQuery, type InviteRefusalReason, InviteStatus, JsonValue, LETTER_ONLY_MERGE_FIELDS, LETTER_RECIPIENT_REFUSAL, LIST_UNSUBSCRIBE_POST_VALUE, LOCALE_TAG_PATTERN, type LanguageDrafts, type LanguageTab, LocaleTag, MAILING_ACTIONS, MAILING_KINDS, MAILING_STATUSES, MAILING_TRANSITIONS, MAX_ALLOWED_ASSET_HOSTS, MAX_ASSET_BYTES, MAX_DELAY_SECONDS, MAX_DOCUMENT_BYTES, MAX_ENGAGEMENT_DAYS, MAX_EXPORT_WARNINGS_HEADER_LENGTH, MAX_FILTER_DEPTH, MAX_IMPORTED_REMOTE_IMAGES, MAX_IMPORT_BYTES, MAX_IMPORT_ROWS, MAX_IMPORT_URL_LENGTH, MAX_INSERTIONS, MAX_INSERTION_CHOICES, MAX_INSERTION_TEXT_LENGTH, MAX_INVITE_TTL_DAYS, MAX_IN_LIST, MAX_LETTER_RECIPIENTS, MAX_MERGE_DEFAULTS, MAX_MERGE_DEFAULT_LENGTH, MAX_MJML_DEPTH, MAX_MJML_ELEMENTS, MAX_MJML_IMPORT_BYTES, MAX_PAGE_LIMIT, MAX_PREHEADER_LENGTH, MAX_RECIPIENTS_PER_BATCH, MAX_RE_ENTRY_COOLDOWN_SECONDS, MAX_SAVED_SECTIONS, MAX_SPLIT_BRANCHES, MAX_STEPS, MAX_STEP_VISITS, MAX_SUBJECT_LENGTH, MAX_TEMPLATE_INPUTS, MAX_TEMPLATE_INPUTS_APP_LENGTH, MAX_TEMPLATE_INPUTS_SEEN, MAX_TEMPLATE_INPUT_EXAMPLE_LENGTH, MAX_TEMPLATE_INPUT_LABEL_LENGTH, MAX_TEMPLATE_INPUT_NOTE_LENGTH, MAX_TEMPLATE_INPUT_VALUES, MAX_TEMPLATE_TRANSLATIONS, MAX_TRIGGERS, MEMBER_ROLES, MERGE_FIELD_PATTERN, MESSAGE_OUTCOMES, MIN_SPLIT_BRANCHES, MJML_IMPORT_REFUSALS, Mailing, MailingAbWinnerSelectedData, MailingAction, MailingActionRequest, MailingAnalytics, MailingAudienceFromSegment, MailingCounts, MailingCreate, MailingExportQuery, MailingFinishedData, MailingKind, MailingLanguage, MailingLanguageReport, MailingLanguageStatus, MailingListQuery, MailingMerge, MailingMetadata, MailingResolveRequest, MailingResolveResult, MailingRetryFailedRequest, MailingScheduleFailedData, MailingScheduleRequest, MailingScheduledData, MailingSendRequest, MailingStartedData, MailingStatus, MailingSummary, MailingTestRequest, MailingTestResult, MailingUpdate, Member, MemberCreate, MemberRole, MemberUpdate, MergeDefaultValue, MergeDefaults, MergeFieldName, type MergeFieldUse, type MergeValue, Message, MessageFailedData, MessageListQuery, MessageOutcome, MessageSentData, MessageSummary, MessageValues, type MissingInsertionText, type MjmlImportRefusal, NAME_ON_BROADCAST_REFUSAL, NotifyRecipients, NotifyStep, ON_BEHALF_OF_HEADER, ON_BEHALF_OF_MAX_LENGTH, OffsetDays, Ok, type OperationId, PLAN_FEATURES, PLAN_IDS, PREVIEW_EMPTY, PREVIEW_FILLED, PROVIDER_KINDS, type Page, PageQuery, type Personalization, type Phase, Plan, type PlanFeature, PlanFeatures, PlanId, PlanLimits, PortalRequest, PortalSession, type PreviewControl, Properties, Provider, ProviderCreate, ProviderEvents, ProviderEventsSecret, ProviderKind, ProviderPolicy, ProviderRejections, ProviderUpdate, ProviderUsage, ProviderVerifyResult, QuietHours, RECIPIENT_REJECTIONS, RECIPIENT_STATUSES, REQUEST_ID_HEADER, RESEND_EVENT_TYPES, RESERVED_MERGE_FIELDS, RESOLVE_PROBLEMS, RESOLVE_REJECTIONS, RETRYABLE_ERRORS, RETRY_AFTER_HEADER, RE_ENTRY_MODES, ReEntryMode, Recipient, RecipientBatch, RecipientBatchResult, RecipientInput, RecipientListQuery, RecipientStatus, RemoteImage, type RenamedPlacement, ResendSigningSecret, type ReservedMergeField, ResolveProblem, ResolvedRecipient, ResolvedValue, type RouteAccess, type RouteBody, type RouteDef, type RouteParams, type RouteQuery, type RouteResponse, type Routes, SERVICE_FILLED_MERGE_FIELDS, SIGNUP_FORM_FIELDS, SKIP_REASONS, SMTP_SECURITY, SUBJECT_HEADER, SUPPRESSION_REASONS, type SaveDemotion, SavedSection, SavedSectionBody, SavedSectionCreate, SavedSectionUpdate, Segment, SegmentCreate, SegmentFilter, SegmentPreview, SegmentPreviewRequest, SignupForm, SignupFormCreate, SignupFormEmbed, SignupFormTranslation, SignupSubmission, SkipReason, Slug, SplitBranchKey, SplitStep, StepId, type StepTarget, Subscription, Suppression, SuppressionCreate, SuppressionListQuery, SuppressionReason, TEMPLATE_INPUT_KINDS, TEMPLATE_INPUT_PROBLEM_REASONS, TEMPLATE_LANGUAGE_STATUSES, TEMPLATE_SORTS, TEMPLATE_SORT_DEFAULT_ORDER, TERMINAL_MAILING_STATUSES, Tag, TagAssignment, TagCreate, Template, TemplateCompileRequest, TemplateCreate, TemplateCreatedData, TemplateDeleteQuery, TemplateDeletedData, TemplateDocument, TemplateExportQuery, TemplateImport, TemplateImportPreview, TemplateImportPreviewRequest, TemplateImportResult, TemplateInput, type TemplateInputKind, TemplateInputMap, TemplateInputName, type TemplateInputProblem, type TemplateInputProblemReason, TemplateInputSeen, TemplateInputSource, TemplateInputValue, TemplateInputs, TemplateInputsDeclaration, TemplateInputsDeclared, TemplateInputsSeen, TemplateLanguageStatus, TemplateListQuery, TemplatePreheader, type TemplateSort, TemplateSubject, TemplateSummary, TemplateTranslation, TemplateTranslations, TemplateUpdate, TemplateUpdatedData, TemplateVersion, TemplateVersionParams, TimeOfDay, Timestamp, TimezoneName, Topic, TopicCreate, TopicUpdate, TrackingSettings, TranslationInsertion, TranslationInsertions, UNSUBSCRIBE_PATH_PREFIX, UNSUBSCRIBE_SOURCES, USAGE_METRICS, USAGE_WARNING_HEADER, USAGE_WARNING_RATIO, UnfilledLink, type UnsubscribeToken, type UnsubscribeTokenClaims, Usage, UsageMetric, UsageWarning, type UsageWarningHeaderEntry, VALUE_LAYERS, type ValidationContext, ValidationIssue, ValueLayer, type ValueSources, VariantAnalytics, type VerifyWebhookInput, WEBHOOK_DELIVERY_STATUSES, WEBHOOK_EVENT_ID_HEADER, WEBHOOK_EVENT_TYPES, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_RETRY_DELAYS_SECONDS, WEBHOOK_SECRET_PREFIX, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_SIGNATURE_VERSION, WEBHOOK_TIMESTAMP_HEADER, WEBHOOK_TOLERANCE_SECONDS, WORKSPACE_HEADER, WebhookDelivery, WebhookDeliveryListQuery, WebhookDeliveryParams, WebhookDeliveryStatus, WebhookEndpoint, WebhookEndpointCreate, WebhookEndpointUpdate, WebhookEndpointWithSecret, WebhookEvent, type WebhookEventOf, WebhookEventType, WebhookStep, WebhookUrl, type WebhookVerifyFailure, type WebhookVerifyResult, Weekday, Workspace, WorkspaceCreate, WorkspaceMembership, WorkspaceMove, WorkspaceSettings, WorkspaceUpdate, acceptsIdempotencyKey, addInsertion, addInsertionChoice, addLanguageDraft, alignTranslationInsertions, alwaysWaits, automationFilterFamily, automationRoutes, billingRoutes, buildPath, buildTemplatePatch, canTransition, canonicalLocale, choiceKeyProblem, chooseInsertion, cycles, defaultPreviewPick, defaultSettings, demoteForSave, demotedBySave, describeMissingTexts, draftDocument, draftInsertionProblems, draftsDirty, draftsFromTemplate, draftsPatch, editInsertionText, editLanguageDraft, editMainInsertionText, editMainInsertions, effectivePreviewPicks, emptyFlow, emptyLinkValues, errorBody, escapeMergeHtml, exportFilename, filterConditions, filterDepth, filterFieldFamily, filterLeafProblem, findMergeFields, formatExportWarningsHeader, formatUsageWarningHeader, foundationRoutes, insertionByProblem, insertionChoices, insertionCoverage, insertionInputs, insertionNameProblem, insertionProblems, insertionRefusalHint, insertionSlotLabel, insertionTextSlots, insertionTokens, insertionValue, inviteRoutes, isDayEntirelyPast, isPublishable, isRetryableError, keepLanguageDocument, languageInsertions, languageName, languageTabs, letterOnlyValues, linkTokens, mainInsertionText, matchLocale, matchRoute, missingInsertionTexts, missingRequiredMergeFields, normalizeChoiceKey, nowSeconds, operationsWithAccess, ownEntry, page, parseExportWarningsHeader, parseUsageWarningHeader, personalizeHtml, personalizeText, placementProblems, platformRoutes, previewControls, previewInsertions, previewPersonalization, primaryLanguage, printedFields, rawMergeValue, reachable, readyWithoutInsertions, readyWithoutSubject, rebaseDrafts, removeInsertion, removeInsertionChoice, removeLanguageDraft, renameInsertion, renameInsertionChecked, renameInsertionChoice, renameInsertionChoiceChecked, renameInsertionEverywhere, renameInsertionPlacements, renameTokenInDocument, renameTokenInText, resolveInsertions, resolveValue, restorePatch, routes, sameJson, sampleMergeValue, saveDemotions, sendingRoutes, setInsertionBy, setInsertionFilled, setLanguageStatus, signWebhook, statusForError, stepTargets, storedTemplateLine, stronglyConnected, templateInputDrift, templateInputProblems, templateRoutes, testGroupSize, tightLoops, timingSafeEqualString, translationInsertionProblems, translationTextFromInput, triggerKey, unknownRefusedInsertions, unplacedInsertions, validateAutomation, valueNames, valuesRead, verifyWebhook };
+export { AB_TEST_STATUSES, AB_WINNER_METRICS, API_KEY_SCOPES, API_VERSION_PREFIX, ASSET_CONTENT_TYPES, ASSET_POLICIES, ASSET_UPLOAD_FIELD, AUDIT_ACTIONS, AUTHORIZATION_HEADER, AUTOMATION_DATE_TRIGGER_KINDS, AUTOMATION_END_REASONS, AUTOMATION_ENTRY_REFUSALS, AUTOMATION_FILTER_FIELD_OPERATORS, AUTOMATION_FILTER_FIELD_PATTERN, AUTOMATION_ISSUE_CODES, AUTOMATION_STATUSES, AUTOMATION_STEP_KINDS, AUTOMATION_TRIGGER_KINDS, AUTOMATION_WAIT_REASONS, AbTestConfig, AbTestState, AbVariant, AbWinnerRequest, ApiKey, ApiKeyCreate, ApiKeyCreated, ApiKeyScope, Asset, AssetContentType, AssetHost, AssetImport, AssetPolicy, AuditAction, AuditActor, AuditEntry, AuditQuery, Automation, AutomationCounts, AutomationCreate, type AutomationDateTriggerKind, AutomationDuplicateRequest, AutomationEndReason, AutomationEnrollRequest, AutomationEnrollResult, AutomationEnrollment, AutomationEntryRefusal, AutomationExitRunRequest, AutomationFilter, AutomationFilterCondition, AutomationFilterField, AutomationFlow, AutomationIssue, AutomationIssueCode, AutomationJourney, AutomationListQuery, AutomationPublishMove, AutomationPublishRequest, AutomationPublishResult, AutomationReport, AutomationRun, AutomationRunCompletedData, AutomationRunExitedData, AutomationRunFailedData, AutomationRunListQuery, AutomationRunParams, AutomationRunStartedData, AutomationRunStatus, AutomationSettings, AutomationStatus, AutomationStep, AutomationStepExecution, AutomationStepKind, AutomationStepParams, AutomationStepReport, AutomationSummary, AutomationTestEmailRequest, AutomationTrigger, AutomationTriggerKind, AutomationUpdate, AutomationValidateRequest, AutomationValidation, AutomationWaitReason, AutomationWebhookData, AutomationWithFlow, BEARER_PREFIX, BILLING_NOT_CONFIGURED_REASON, BoundedAutomationFilter, BoundedSegmentFilter, CONTACT_PROPERTY_TYPES, CatalogPlan, CheckoutRequest, CheckoutSession, CompanyId, CompileMessage, CompileRequest, CompileResult, ConditionStep, Contact, ContactAutomationListQuery, ContactAutomationRun, ContactBouncedData, ContactErased, ContactListQuery, ContactPropertyDefinition, ContactPropertyKey, ContactPropertyParams, ContactPropertyType, ContactResubscribedData, ContactSubscribedData, ContactTaggedData, ContactUnsubscribedData, ContactUpdatedData, ContactUpsert, ContactUpsertResult, DATE_PASSED_ANSWERS, DEFAULT_INVITE_TTL_DAYS, DEFAULT_PAGE_LIMIT, DOCUMENT_SCHEMA_VERSIONS, DateOnly, DatePassedAnswer, DelayStep, DocumentSchemaVersion, type DraftInsertionProblem, EDITABLE_MAILING_STATUSES, ERROR_CODES, ERROR_STATUS, EXPORT_CONTENT_TYPES, EXPORT_FORMATS, EXPORT_WARNINGS_HEADER, EXPORT_WARNING_COUNT_HEADER, type EditableLanguage, Email, EmailStep, EmailStepLanguage, ErrorBody, type ErrorCode, ErrorCodeSchema, Event, EventCreate, EventListQuery, EventName, ExportFormat, FILTER_FIELD_OPERATORS, FILTER_OPERATORS, FilterCondition, FilterField, type FilterLeafProblem, FilterOperator, GotoStep, HEALTH_PATH, HOSTED_PAGE_LOCALES, type HttpMethod, ICLOUD_SMTP_POLICY, IDEMPOTENCY_KEY_HEADER, IDEMPOTENCY_KEY_MAX_LENGTH, IDEMPOTENCY_KEY_RETENTION_HOURS, IMPORT_FILE_FIELD, IMPORT_ROW_OUTCOMES, IMPORT_SKIP_REASONS, IMPORT_STATUSES, IMPORT_TERMINAL_STATUSES, INSERTION_PROBLEM_REASONS, INSERTION_TEXT_SLOTS, INVITE_REFUSAL_REASONS, INVITE_STATUSES, Id, IdParams, ImportColumnMapping, ImportCommitRequest, ImportFinishedData, ImportJob, ImportMappingRequest, ImportReport, ImportRow, ImportRowListQuery, ImportRowOutcome, ImportSkipReason, ImportStatus, ImportWarning, ImportedAsset, Insertion, InsertionChoice, InsertionChoiceKey, type InsertionChoiceMade, InsertionChoices, type InsertionEdit, InsertionName, type InsertionProblem, type InsertionProblemReason, InsertionText, Insertions, Invite, InviteAccept, InviteAccepted, InviteCreate, InviteCreated, InviteListQuery, type InviteRefusalReason, InviteStatus, JsonValue, LETTER_ONLY_MERGE_FIELDS, LETTER_RECIPIENT_REFUSAL, LIST_UNSUBSCRIBE_POST_VALUE, LOCALE_TAG_PATTERN, type LanguageDrafts, type LanguageTab, LocaleTag, MAILING_ACTIONS, MAILING_KINDS, MAILING_STATUSES, MAILING_TRANSITIONS, MAX_ALLOWED_ASSET_HOSTS, MAX_ASSET_BYTES, MAX_DELAY_SECONDS, MAX_DOCUMENT_BYTES, MAX_ENGAGEMENT_DAYS, MAX_EXPORT_WARNINGS_HEADER_LENGTH, MAX_FILTER_DEPTH, MAX_IMPORTED_REMOTE_IMAGES, MAX_IMPORT_BYTES, MAX_IMPORT_ROWS, MAX_IMPORT_URL_LENGTH, MAX_INSERTIONS, MAX_INSERTION_CHOICES, MAX_INSERTION_TEXT_LENGTH, MAX_INVITE_TTL_DAYS, MAX_IN_LIST, MAX_LETTER_RECIPIENTS, MAX_MERGE_DEFAULTS, MAX_MERGE_DEFAULT_LENGTH, MAX_MJML_DEPTH, MAX_MJML_ELEMENTS, MAX_MJML_IMPORT_BYTES, MAX_PAGE_LIMIT, MAX_PREHEADER_LENGTH, MAX_RECIPIENTS_PER_BATCH, MAX_RE_ENTRY_COOLDOWN_SECONDS, MAX_SAVED_SECTIONS, MAX_SPLIT_BRANCHES, MAX_STEPS, MAX_STEP_VISITS, MAX_SUBJECT_LENGTH, MAX_TEMPLATE_INPUTS, MAX_TEMPLATE_INPUTS_APP_LENGTH, MAX_TEMPLATE_INPUTS_SEEN, MAX_TEMPLATE_INPUT_EXAMPLE_LENGTH, MAX_TEMPLATE_INPUT_LABEL_LENGTH, MAX_TEMPLATE_INPUT_NOTE_LENGTH, MAX_TEMPLATE_INPUT_VALUES, MAX_TEMPLATE_TRANSLATIONS, MAX_TRIGGERS, MEMBER_ROLES, MERGE_FIELD_PATTERN, MESSAGE_OUTCOMES, MIN_SPLIT_BRANCHES, MJML_IMPORT_REFUSALS, Mailing, MailingAbWinnerSelectedData, MailingAction, MailingActionRequest, MailingAnalytics, MailingAudienceFromSegment, MailingCounts, MailingCreate, MailingExportQuery, MailingFinishedData, MailingKind, MailingLanguage, MailingLanguageReport, MailingLanguageStatus, MailingListQuery, MailingMerge, MailingMetadata, MailingResolveRequest, MailingResolveResult, MailingRetryFailedRequest, MailingScheduleFailedData, MailingScheduleRequest, MailingScheduledData, MailingSendRequest, MailingStartedData, MailingStatus, MailingSummary, MailingTestRequest, MailingTestResult, MailingUpdate, Member, MemberCreate, MemberRole, MemberUpdate, MergeDefaultValue, MergeDefaults, MergeFieldName, type MergeFieldUse, type MergeValue, Message, MessageFailedData, MessageListQuery, MessageOutcome, MessageSentData, MessageSummary, MessageValues, type MissingInsertionText, type MjmlImportRefusal, NAME_ON_BROADCAST_REFUSAL, NotifyRecipients, NotifyStep, ON_BEHALF_OF_HEADER, ON_BEHALF_OF_MAX_LENGTH, OffsetDays, Ok, type OperationId, PLAN_FEATURES, PLAN_IDS, PREVIEW_EMPTY, PREVIEW_FILLED, PROVIDER_KINDS, type Page, PageQuery, type Personalization, type Phase, Plan, type PlanFeature, PlanFeatures, PlanId, PlanLimits, PortalRequest, PortalSession, type PreviewControl, Properties, Provider, ProviderCreate, ProviderEvents, ProviderEventsSecret, ProviderKind, ProviderPolicy, ProviderRejections, ProviderUpdate, ProviderUsage, ProviderVerifyResult, QuietHours, RECIPIENT_REJECTIONS, RECIPIENT_STATUSES, REQUEST_ID_HEADER, RESEND_EVENT_TYPES, RESERVED_MERGE_FIELDS, RESOLVE_PROBLEMS, RESOLVE_REJECTIONS, RETRYABLE_ERRORS, RETRY_AFTER_HEADER, RE_ENTRY_MODES, ReEntryMode, Recipient, RecipientBatch, RecipientBatchResult, RecipientInput, RecipientListQuery, RecipientStatus, RemoteImage, type RenamedPlacement, ResendSigningSecret, type ReservedMergeField, ResolveProblem, ResolvedRecipient, ResolvedValue, type RouteAccess, type RouteBody, type RouteDef, type RouteParams, type RouteQuery, type RouteResponse, type Routes, SERVICE_FILLED_MERGE_FIELDS, SIGNUP_FORM_FIELDS, SKIP_REASONS, SMTP_SECURITY, SUBJECT_HEADER, SUPPRESSION_REASONS, type SaveDemotion, SavedSection, SavedSectionBody, SavedSectionCreate, SavedSectionUpdate, Segment, SegmentCreate, SegmentFilter, SegmentPreview, SegmentPreviewRequest, SignupForm, SignupFormCreate, SignupFormEmbed, SignupFormTranslation, SignupSubmission, SkipReason, Slug, SplitBranchKey, SplitStep, StepId, type StepTarget, Subscription, Suppression, SuppressionCreate, SuppressionListQuery, SuppressionReason, TEMPLATE_INPUT_KINDS, TEMPLATE_INPUT_PROBLEM_REASONS, TEMPLATE_LANGUAGE_STATUSES, TEMPLATE_SORTS, TEMPLATE_SORT_DEFAULT_ORDER, TERMINAL_MAILING_STATUSES, TRUSTED_APPS, TRUSTED_APP_OPERATIONS, Tag, TagAssignment, TagCreate, Template, TemplateCompileRequest, TemplateCreate, TemplateCreatedData, TemplateDeleteQuery, TemplateDeletedData, TemplateDocument, TemplateExportQuery, TemplateImport, TemplateImportPreview, TemplateImportPreviewRequest, TemplateImportResult, TemplateInput, type TemplateInputKind, TemplateInputMap, TemplateInputName, type TemplateInputProblem, type TemplateInputProblemReason, TemplateInputSeen, TemplateInputSource, TemplateInputValue, TemplateInputs, TemplateInputsDeclaration, TemplateInputsDeclared, TemplateInputsSeen, TemplateLanguageStatus, TemplateListQuery, TemplatePreheader, type TemplateSort, TemplateSubject, TemplateSummary, TemplateTranslation, TemplateTranslations, TemplateUpdate, TemplateUpdatedData, TemplateVersion, TemplateVersionParams, TimeOfDay, Timestamp, TimezoneName, Topic, TopicCreate, TopicUpdate, TrackingSettings, TranslationInsertion, TranslationInsertions, TrustedApp, UNSUBSCRIBE_PATH_PREFIX, UNSUBSCRIBE_SOURCES, USAGE_METRICS, USAGE_WARNING_HEADER, USAGE_WARNING_RATIO, UnfilledLink, type UnsubscribeToken, type UnsubscribeTokenClaims, Usage, UsageMetric, UsageWarning, type UsageWarningHeaderEntry, VALUE_LAYERS, type ValidationContext, ValidationIssue, ValueLayer, type ValueSources, VariantAnalytics, type VerifyWebhookInput, WEBHOOK_DELIVERY_STATUSES, WEBHOOK_EVENT_ID_HEADER, WEBHOOK_EVENT_TYPES, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_RETRY_DELAYS_SECONDS, WEBHOOK_SECRET_PREFIX, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_SIGNATURE_VERSION, WEBHOOK_TIMESTAMP_HEADER, WEBHOOK_TOLERANCE_SECONDS, WORKSPACE_HEADER, WebhookDelivery, WebhookDeliveryListQuery, WebhookDeliveryParams, WebhookDeliveryStatus, WebhookEndpoint, WebhookEndpointCreate, WebhookEndpointUpdate, WebhookEndpointWithSecret, WebhookEvent, type WebhookEventOf, WebhookEventType, WebhookStep, WebhookUrl, type WebhookVerifyFailure, type WebhookVerifyResult, Weekday, Workspace, WorkspaceCreate, WorkspaceMembership, WorkspaceMove, WorkspaceSettings, WorkspaceUpdate, acceptsIdempotencyKey, addInsertion, addInsertionChoice, addLanguageDraft, alignTranslationInsertions, alwaysWaits, automationFilterFamily, automationRoutes, billingRoutes, buildPath, buildTemplatePatch, canTransition, canonicalLocale, choiceKeyProblem, chooseInsertion, cycles, defaultPreviewPick, defaultSettings, demoteForSave, demotedBySave, describeMissingTexts, draftDocument, draftInsertionProblems, draftsDirty, draftsFromTemplate, draftsPatch, editInsertionText, editLanguageDraft, editMainInsertionText, editMainInsertions, effectivePreviewPicks, emptyFlow, emptyLinkValues, errorBody, escapeMergeHtml, exportFilename, filterConditions, filterDepth, filterFieldFamily, filterLeafProblem, findMergeFields, formatExportWarningsHeader, formatUsageWarningHeader, foundationRoutes, insertionByProblem, insertionChoices, insertionCoverage, insertionInputs, insertionNameProblem, insertionProblems, insertionRefusalHint, insertionSlotLabel, insertionTextSlots, insertionTokens, insertionValue, inviteRoutes, isDayEntirelyPast, isPublishable, isRetryableError, keepLanguageDocument, languageInsertions, languageName, languageTabs, letterOnlyValues, linkTokens, mainInsertionText, matchLocale, matchRoute, missingInsertionTexts, missingRequiredMergeFields, normalizeChoiceKey, nowSeconds, operationsWithAccess, ownEntry, page, parseExportWarningsHeader, parseUsageWarningHeader, personalizeHtml, personalizeText, placementProblems, platformRoutes, previewControls, previewInsertions, previewPersonalization, primaryLanguage, printedFields, rawMergeValue, reachable, readyWithoutInsertions, readyWithoutSubject, rebaseDrafts, removeInsertion, removeInsertionChoice, removeLanguageDraft, renameInsertion, renameInsertionChecked, renameInsertionChoice, renameInsertionChoiceChecked, renameInsertionEverywhere, renameInsertionPlacements, renameTokenInDocument, renameTokenInText, resolveInsertions, resolveValue, restorePatch, routes, sameJson, sampleMergeValue, saveDemotions, sendingRoutes, setInsertionBy, setInsertionFilled, setLanguageStatus, signWebhook, statusForError, stepTargets, storedTemplateLine, stronglyConnected, templateInputDrift, templateInputProblems, templateRoutes, testGroupSize, tightLoops, timingSafeEqualString, translationInsertionProblems, translationTextFromInput, triggerKey, trustedAppMayCall, unknownRefusedInsertions, unplacedInsertions, validateAutomation, valueNames, valuesRead, verifyWebhook };

package/dist/index.d.ts CHANGED Viewed

@@ -890,18 +890,41 @@ type ApiKeyCreated = z.infer<typeof ApiKeyCreated>;
 declare const AUDIT_ACTIONS: readonly ["workspace.created", "workspace.updated", "workspace.company_changed", "member.added", "member.role_changed", "member.removed", "member.invited", "invite.revoked", "api_key.created", "api_key.revoked", "provider.created", "provider.updated", "provider.deleted", "provider.events_registered", "provider.events_secret_set", "provider.bounces_halted", "provider.anomaly_cleared", "topic.created", "topic.updated", "topic.deleted", "template.created", "template.updated", "template.deleted", "template.inputs_declared", "saved_section.created", "saved_section.updated", "saved_section.deleted", "asset.uploaded", "asset.imported", "contact.erased", "suppression.created", "suppression.deleted", "mailing.created", "mailing.sent", "mailing.paused", "mailing.resumed", "mailing.cancelled", "mailing.retried", "webhook.created", "webhook.updated", "webhook.deleted", "webhook.secret_rotated", "webhook.redelivered", "contact.unsubscribed", "tag.created", "tag.deleted", "tag.assigned", "tag.unassigned", "contact_property.created", "contact_property.deleted", "segment.created", "segment.updated", "segment.deleted", "signup_form.created", "signup_form.updated", "signup_form.deleted", "contact.subscribed", "import.created", "import.mapped", "import.committed", "import.cancelled", "import.finished", "mailing.scheduled", "mailing.unscheduled", "mailing.schedule_failed", "mailing.ab_test_updated", "mailing.ab_winner_selected", "tracking.updated", "billing.checkout_started", "billing.subscription_changed", "billing.exemption_changed", "automation.created", "automation.updated", "automation.published", "automation.paused", "automation.resumed", "automation.archived", "automation.deleted", "automation.duplicated", "automation.enrolled", "automation.run_ended", "event.recorded"];
 declare const AuditAction: z.ZodEnum<["workspace.created", "workspace.updated", "workspace.company_changed", "member.added", "member.role_changed", "member.removed", "member.invited", "invite.revoked", "api_key.created", "api_key.revoked", "provider.created", "provider.updated", "provider.deleted", "provider.events_registered", "provider.events_secret_set", "provider.bounces_halted", "provider.anomaly_cleared", "topic.created", "topic.updated", "topic.deleted", "template.created", "template.updated", "template.deleted", "template.inputs_declared", "saved_section.created", "saved_section.updated", "saved_section.deleted", "asset.uploaded", "asset.imported", "contact.erased", "suppression.created", "suppression.deleted", "mailing.created", "mailing.sent", "mailing.paused", "mailing.resumed", "mailing.cancelled", "mailing.retried", "webhook.created", "webhook.updated", "webhook.deleted", "webhook.secret_rotated", "webhook.redelivered", "contact.unsubscribed", "tag.created", "tag.deleted", "tag.assigned", "tag.unassigned", "contact_property.created", "contact_property.deleted", "segment.created", "segment.updated", "segment.deleted", "signup_form.created", "signup_form.updated", "signup_form.deleted", "contact.subscribed", "import.created", "import.mapped", "import.committed", "import.cancelled", "import.finished", "mailing.scheduled", "mailing.unscheduled", "mailing.schedule_failed", "mailing.ab_test_updated", "mailing.ab_winner_selected", "tracking.updated", "billing.checkout_started", "billing.subscription_changed", "billing.exemption_changed", "automation.created", "automation.updated", "automation.published", "automation.paused", "automation.resumed", "automation.archived", "automation.deleted", "automation.duplicated", "automation.enrolled", "automation.run_ended", "event.recorded"]>;
 type AuditAction = z.infer<typeof AuditAction>;
+/**
+ * The applications, besides the dashboard, that may act for a signed-in person:
+ * each holds a service token of its own and sends the person's auth-brain
+ * subject with it, exactly as the dashboard does, and the service checks that
+ * person's membership and role on every call. Unlike the dashboard, such an
+ * application reaches only the few operations its purpose needs
+ * (`TRUSTED_APP_OPERATIONS`, in routes.ts).
+ *
+ * - `booking`: Lumitra Booking, which connects a host's booking pages to one
+ *   of the person's workspaces (it lists them, reads the providers, creates a
+ *   `send` key for itself and revokes that key again).
+ */
+declare const TRUSTED_APPS: readonly ["booking"];
+declare const TrustedApp: z.ZodEnum<["booking"]>;
+type TrustedApp = z.infer<typeof TrustedApp>;
 declare const AuditActor: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<"member">;
     member_id: z.ZodString;
     subject: z.ZodString;
+    /**
+     * The application the person acted through, when it was not the dashboard:
+     * the service set it from the service token the call carried, so it is
+     * verified, unlike a key's `on_behalf_of`. Absent for the dashboard.
+     */
+    app: z.ZodOptional<z.ZodEnum<["booking"]>>;
 }, "strip", z.ZodTypeAny, {
     type: "member";
     subject: string;
     member_id: string;
+    app?: "booking" | undefined;
 }, {
     type: "member";
     subject: string;
     member_id: string;
+    app?: "booking" | undefined;
 }>, z.ZodObject<{
     type: z.ZodLiteral<"api_key">;
     api_key_id: z.ZodString;
@@ -937,14 +960,22 @@ declare const AuditEntry: z.ZodObject<{
         type: z.ZodLiteral<"member">;
         member_id: z.ZodString;
         subject: z.ZodString;
+        /**
+         * The application the person acted through, when it was not the dashboard:
+         * the service set it from the service token the call carried, so it is
+         * verified, unlike a key's `on_behalf_of`. Absent for the dashboard.
+         */
+        app: z.ZodOptional<z.ZodEnum<["booking"]>>;
     }, "strip", z.ZodTypeAny, {
         type: "member";
         subject: string;
         member_id: string;
+        app?: "booking" | undefined;
     }, {
         type: "member";
         subject: string;
         member_id: string;
+        app?: "booking" | undefined;
     }>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         api_key_id: z.ZodString;
@@ -985,6 +1016,7 @@ declare const AuditEntry: z.ZodObject<{
         type: "member";
         subject: string;
         member_id: string;
+        app?: "booking" | undefined;
     } | {
         type: "api_key";
         api_key_id: string;
@@ -1004,6 +1036,7 @@ declare const AuditEntry: z.ZodObject<{
         type: "member";
         subject: string;
         member_id: string;
+        app?: "booking" | undefined;
     } | {
         type: "api_key";
         api_key_id: string;
@@ -29742,14 +29775,17 @@ declare const foundationRoutes: {
                     type: z.ZodLiteral<"member">;
                     member_id: z.ZodString;
                     subject: z.ZodString;
+                    app: z.ZodOptional<z.ZodEnum<["booking"]>>;
                 }, "strip", z.ZodTypeAny, {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 }, {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 }>, z.ZodObject<{
                     type: z.ZodLiteral<"api_key">;
                     api_key_id: z.ZodString;
@@ -29785,6 +29821,7 @@ declare const foundationRoutes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -29804,6 +29841,7 @@ declare const foundationRoutes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -29826,6 +29864,7 @@ declare const foundationRoutes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -29848,6 +29887,7 @@ declare const foundationRoutes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -106783,14 +106823,17 @@ declare const routes: {
                     type: z.ZodLiteral<"member">;
                     member_id: z.ZodString;
                     subject: z.ZodString;
+                    app: z.ZodOptional<z.ZodEnum<["booking"]>>;
                 }, "strip", z.ZodTypeAny, {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 }, {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 }>, z.ZodObject<{
                     type: z.ZodLiteral<"api_key">;
                     api_key_id: z.ZodString;
@@ -106826,6 +106869,7 @@ declare const routes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -106845,6 +106889,7 @@ declare const routes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -106867,6 +106912,7 @@ declare const routes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -106889,6 +106935,7 @@ declare const routes: {
                     type: "member";
                     subject: string;
                     member_id: string;
+                    app?: "booking" | undefined;
                 } | {
                     type: "api_key";
                     api_key_id: string;
@@ -106909,6 +106956,31 @@ declare const routes: {
 };
 type Routes = typeof routes;
 type OperationId = keyof Routes;
+/**
+ * What an application other than the dashboard may reach when it acts for a
+ * signed-in person with its own service token (`TRUSTED_APPS`). Everything not
+ * listed is refused with `forbidden` before any handler runs, whatever the
+ * person's role: the list is the whole of the trust the application is given.
+ * The person's membership and role are still checked on every call, as for the
+ * dashboard.
+ *
+ * `booking` (Lumitra Booking) connects a host's booking pages to a workspace:
+ * - `workspaces.list`: the workspaces the person belongs to, to choose from,
+ *   each with the person's role and the languages it writes in;
+ * - `workspace.update`: adding languages, and nothing else (the service
+ *   refuses any other field from this application), since the booking mails
+ *   are written in three;
+ * - `providers.list`: the sending accounts to choose from;
+ * - `apiKeys.create`: its own key, scope `send` only;
+ * - `apiKeys.revoke`: a key it created itself, and no other.
+ * Sending, and installing its templates, happen with that key, not with the
+ * service token.
+ */
+declare const TRUSTED_APP_OPERATIONS: {
+    readonly booking: readonly ["workspaces.list", "workspace.update", "providers.list", "apiKeys.create", "apiKeys.revoke"];
+};
+/** Whether a trusted application may call an operation at all. */
+declare function trustedAppMayCall(app: TrustedApp, id: OperationId): boolean;
 type Infer<T> = T extends z.ZodTypeAny ? z.infer<T> : undefined;
 type RouteParams<K extends OperationId> = Routes[K] extends {
     params: infer P;
@@ -106940,4 +107012,4 @@ declare function matchRoute(method: HttpMethod, pathname: string): {
     params: Record<string, string>;
 } | null;
-export { AB_TEST_STATUSES, AB_WINNER_METRICS, API_KEY_SCOPES, API_VERSION_PREFIX, ASSET_CONTENT_TYPES, ASSET_POLICIES, ASSET_UPLOAD_FIELD, AUDIT_ACTIONS, AUTHORIZATION_HEADER, AUTOMATION_DATE_TRIGGER_KINDS, AUTOMATION_END_REASONS, AUTOMATION_ENTRY_REFUSALS, AUTOMATION_FILTER_FIELD_OPERATORS, AUTOMATION_FILTER_FIELD_PATTERN, AUTOMATION_ISSUE_CODES, AUTOMATION_STATUSES, AUTOMATION_STEP_KINDS, AUTOMATION_TRIGGER_KINDS, AUTOMATION_WAIT_REASONS, AbTestConfig, AbTestState, AbVariant, AbWinnerRequest, ApiKey, ApiKeyCreate, ApiKeyCreated, ApiKeyScope, Asset, AssetContentType, AssetHost, AssetImport, AssetPolicy, AuditAction, AuditActor, AuditEntry, AuditQuery, Automation, AutomationCounts, AutomationCreate, type AutomationDateTriggerKind, AutomationDuplicateRequest, AutomationEndReason, AutomationEnrollRequest, AutomationEnrollResult, AutomationEnrollment, AutomationEntryRefusal, AutomationExitRunRequest, AutomationFilter, AutomationFilterCondition, AutomationFilterField, AutomationFlow, AutomationIssue, AutomationIssueCode, AutomationJourney, AutomationListQuery, AutomationPublishMove, AutomationPublishRequest, AutomationPublishResult, AutomationReport, AutomationRun, AutomationRunCompletedData, AutomationRunExitedData, AutomationRunFailedData, AutomationRunListQuery, AutomationRunParams, AutomationRunStartedData, AutomationRunStatus, AutomationSettings, AutomationStatus, AutomationStep, AutomationStepExecution, AutomationStepKind, AutomationStepParams, AutomationStepReport, AutomationSummary, AutomationTestEmailRequest, AutomationTrigger, AutomationTriggerKind, AutomationUpdate, AutomationValidateRequest, AutomationValidation, AutomationWaitReason, AutomationWebhookData, AutomationWithFlow, BEARER_PREFIX, BILLING_NOT_CONFIGURED_REASON, BoundedAutomationFilter, BoundedSegmentFilter, CONTACT_PROPERTY_TYPES, CatalogPlan, CheckoutRequest, CheckoutSession, CompanyId, CompileMessage, CompileRequest, CompileResult, ConditionStep, Contact, ContactAutomationListQuery, ContactAutomationRun, ContactBouncedData, ContactErased, ContactListQuery, ContactPropertyDefinition, ContactPropertyKey, ContactPropertyParams, ContactPropertyType, ContactResubscribedData, ContactSubscribedData, ContactTaggedData, ContactUnsubscribedData, ContactUpdatedData, ContactUpsert, ContactUpsertResult, DATE_PASSED_ANSWERS, DEFAULT_INVITE_TTL_DAYS, DEFAULT_PAGE_LIMIT, DOCUMENT_SCHEMA_VERSIONS, DateOnly, DatePassedAnswer, DelayStep, DocumentSchemaVersion, type DraftInsertionProblem, EDITABLE_MAILING_STATUSES, ERROR_CODES, ERROR_STATUS, EXPORT_CONTENT_TYPES, EXPORT_FORMATS, EXPORT_WARNINGS_HEADER, EXPORT_WARNING_COUNT_HEADER, type EditableLanguage, Email, EmailStep, EmailStepLanguage, ErrorBody, type ErrorCode, ErrorCodeSchema, Event, EventCreate, EventListQuery, EventName, ExportFormat, FILTER_FIELD_OPERATORS, FILTER_OPERATORS, FilterCondition, FilterField, type FilterLeafProblem, FilterOperator, GotoStep, HEALTH_PATH, HOSTED_PAGE_LOCALES, type HttpMethod, ICLOUD_SMTP_POLICY, IDEMPOTENCY_KEY_HEADER, IDEMPOTENCY_KEY_MAX_LENGTH, IDEMPOTENCY_KEY_RETENTION_HOURS, IMPORT_FILE_FIELD, IMPORT_ROW_OUTCOMES, IMPORT_SKIP_REASONS, IMPORT_STATUSES, IMPORT_TERMINAL_STATUSES, INSERTION_PROBLEM_REASONS, INSERTION_TEXT_SLOTS, INVITE_REFUSAL_REASONS, INVITE_STATUSES, Id, IdParams, ImportColumnMapping, ImportCommitRequest, ImportFinishedData, ImportJob, ImportMappingRequest, ImportReport, ImportRow, ImportRowListQuery, ImportRowOutcome, ImportSkipReason, ImportStatus, ImportWarning, ImportedAsset, Insertion, InsertionChoice, InsertionChoiceKey, type InsertionChoiceMade, InsertionChoices, type InsertionEdit, InsertionName, type InsertionProblem, type InsertionProblemReason, InsertionText, Insertions, Invite, InviteAccept, InviteAccepted, InviteCreate, InviteCreated, InviteListQuery, type InviteRefusalReason, InviteStatus, JsonValue, LETTER_ONLY_MERGE_FIELDS, LETTER_RECIPIENT_REFUSAL, LIST_UNSUBSCRIBE_POST_VALUE, LOCALE_TAG_PATTERN, type LanguageDrafts, type LanguageTab, LocaleTag, MAILING_ACTIONS, MAILING_KINDS, MAILING_STATUSES, MAILING_TRANSITIONS, MAX_ALLOWED_ASSET_HOSTS, MAX_ASSET_BYTES, MAX_DELAY_SECONDS, MAX_DOCUMENT_BYTES, MAX_ENGAGEMENT_DAYS, MAX_EXPORT_WARNINGS_HEADER_LENGTH, MAX_FILTER_DEPTH, MAX_IMPORTED_REMOTE_IMAGES, MAX_IMPORT_BYTES, MAX_IMPORT_ROWS, MAX_IMPORT_URL_LENGTH, MAX_INSERTIONS, MAX_INSERTION_CHOICES, MAX_INSERTION_TEXT_LENGTH, MAX_INVITE_TTL_DAYS, MAX_IN_LIST, MAX_LETTER_RECIPIENTS, MAX_MERGE_DEFAULTS, MAX_MERGE_DEFAULT_LENGTH, MAX_MJML_DEPTH, MAX_MJML_ELEMENTS, MAX_MJML_IMPORT_BYTES, MAX_PAGE_LIMIT, MAX_PREHEADER_LENGTH, MAX_RECIPIENTS_PER_BATCH, MAX_RE_ENTRY_COOLDOWN_SECONDS, MAX_SAVED_SECTIONS, MAX_SPLIT_BRANCHES, MAX_STEPS, MAX_STEP_VISITS, MAX_SUBJECT_LENGTH, MAX_TEMPLATE_INPUTS, MAX_TEMPLATE_INPUTS_APP_LENGTH, MAX_TEMPLATE_INPUTS_SEEN, MAX_TEMPLATE_INPUT_EXAMPLE_LENGTH, MAX_TEMPLATE_INPUT_LABEL_LENGTH, MAX_TEMPLATE_INPUT_NOTE_LENGTH, MAX_TEMPLATE_INPUT_VALUES, MAX_TEMPLATE_TRANSLATIONS, MAX_TRIGGERS, MEMBER_ROLES, MERGE_FIELD_PATTERN, MESSAGE_OUTCOMES, MIN_SPLIT_BRANCHES, MJML_IMPORT_REFUSALS, Mailing, MailingAbWinnerSelectedData, MailingAction, MailingActionRequest, MailingAnalytics, MailingAudienceFromSegment, MailingCounts, MailingCreate, MailingExportQuery, MailingFinishedData, MailingKind, MailingLanguage, MailingLanguageReport, MailingLanguageStatus, MailingListQuery, MailingMerge, MailingMetadata, MailingResolveRequest, MailingResolveResult, MailingRetryFailedRequest, MailingScheduleFailedData, MailingScheduleRequest, MailingScheduledData, MailingSendRequest, MailingStartedData, MailingStatus, MailingSummary, MailingTestRequest, MailingTestResult, MailingUpdate, Member, MemberCreate, MemberRole, MemberUpdate, MergeDefaultValue, MergeDefaults, MergeFieldName, type MergeFieldUse, type MergeValue, Message, MessageFailedData, MessageListQuery, MessageOutcome, MessageSentData, MessageSummary, MessageValues, type MissingInsertionText, type MjmlImportRefusal, NAME_ON_BROADCAST_REFUSAL, NotifyRecipients, NotifyStep, ON_BEHALF_OF_HEADER, ON_BEHALF_OF_MAX_LENGTH, OffsetDays, Ok, type OperationId, PLAN_FEATURES, PLAN_IDS, PREVIEW_EMPTY, PREVIEW_FILLED, PROVIDER_KINDS, type Page, PageQuery, type Personalization, type Phase, Plan, type PlanFeature, PlanFeatures, PlanId, PlanLimits, PortalRequest, PortalSession, type PreviewControl, Properties, Provider, ProviderCreate, ProviderEvents, ProviderEventsSecret, ProviderKind, ProviderPolicy, ProviderRejections, ProviderUpdate, ProviderUsage, ProviderVerifyResult, QuietHours, RECIPIENT_REJECTIONS, RECIPIENT_STATUSES, REQUEST_ID_HEADER, RESEND_EVENT_TYPES, RESERVED_MERGE_FIELDS, RESOLVE_PROBLEMS, RESOLVE_REJECTIONS, RETRYABLE_ERRORS, RETRY_AFTER_HEADER, RE_ENTRY_MODES, ReEntryMode, Recipient, RecipientBatch, RecipientBatchResult, RecipientInput, RecipientListQuery, RecipientStatus, RemoteImage, type RenamedPlacement, ResendSigningSecret, type ReservedMergeField, ResolveProblem, ResolvedRecipient, ResolvedValue, type RouteAccess, type RouteBody, type RouteDef, type RouteParams, type RouteQuery, type RouteResponse, type Routes, SERVICE_FILLED_MERGE_FIELDS, SIGNUP_FORM_FIELDS, SKIP_REASONS, SMTP_SECURITY, SUBJECT_HEADER, SUPPRESSION_REASONS, type SaveDemotion, SavedSection, SavedSectionBody, SavedSectionCreate, SavedSectionUpdate, Segment, SegmentCreate, SegmentFilter, SegmentPreview, SegmentPreviewRequest, SignupForm, SignupFormCreate, SignupFormEmbed, SignupFormTranslation, SignupSubmission, SkipReason, Slug, SplitBranchKey, SplitStep, StepId, type StepTarget, Subscription, Suppression, SuppressionCreate, SuppressionListQuery, SuppressionReason, TEMPLATE_INPUT_KINDS, TEMPLATE_INPUT_PROBLEM_REASONS, TEMPLATE_LANGUAGE_STATUSES, TEMPLATE_SORTS, TEMPLATE_SORT_DEFAULT_ORDER, TERMINAL_MAILING_STATUSES, Tag, TagAssignment, TagCreate, Template, TemplateCompileRequest, TemplateCreate, TemplateCreatedData, TemplateDeleteQuery, TemplateDeletedData, TemplateDocument, TemplateExportQuery, TemplateImport, TemplateImportPreview, TemplateImportPreviewRequest, TemplateImportResult, TemplateInput, type TemplateInputKind, TemplateInputMap, TemplateInputName, type TemplateInputProblem, type TemplateInputProblemReason, TemplateInputSeen, TemplateInputSource, TemplateInputValue, TemplateInputs, TemplateInputsDeclaration, TemplateInputsDeclared, TemplateInputsSeen, TemplateLanguageStatus, TemplateListQuery, TemplatePreheader, type TemplateSort, TemplateSubject, TemplateSummary, TemplateTranslation, TemplateTranslations, TemplateUpdate, TemplateUpdatedData, TemplateVersion, TemplateVersionParams, TimeOfDay, Timestamp, TimezoneName, Topic, TopicCreate, TopicUpdate, TrackingSettings, TranslationInsertion, TranslationInsertions, UNSUBSCRIBE_PATH_PREFIX, UNSUBSCRIBE_SOURCES, USAGE_METRICS, USAGE_WARNING_HEADER, USAGE_WARNING_RATIO, UnfilledLink, type UnsubscribeToken, type UnsubscribeTokenClaims, Usage, UsageMetric, UsageWarning, type UsageWarningHeaderEntry, VALUE_LAYERS, type ValidationContext, ValidationIssue, ValueLayer, type ValueSources, VariantAnalytics, type VerifyWebhookInput, WEBHOOK_DELIVERY_STATUSES, WEBHOOK_EVENT_ID_HEADER, WEBHOOK_EVENT_TYPES, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_RETRY_DELAYS_SECONDS, WEBHOOK_SECRET_PREFIX, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_SIGNATURE_VERSION, WEBHOOK_TIMESTAMP_HEADER, WEBHOOK_TOLERANCE_SECONDS, WORKSPACE_HEADER, WebhookDelivery, WebhookDeliveryListQuery, WebhookDeliveryParams, WebhookDeliveryStatus, WebhookEndpoint, WebhookEndpointCreate, WebhookEndpointUpdate, WebhookEndpointWithSecret, WebhookEvent, type WebhookEventOf, WebhookEventType, WebhookStep, WebhookUrl, type WebhookVerifyFailure, type WebhookVerifyResult, Weekday, Workspace, WorkspaceCreate, WorkspaceMembership, WorkspaceMove, WorkspaceSettings, WorkspaceUpdate, acceptsIdempotencyKey, addInsertion, addInsertionChoice, addLanguageDraft, alignTranslationInsertions, alwaysWaits, automationFilterFamily, automationRoutes, billingRoutes, buildPath, buildTemplatePatch, canTransition, canonicalLocale, choiceKeyProblem, chooseInsertion, cycles, defaultPreviewPick, defaultSettings, demoteForSave, demotedBySave, describeMissingTexts, draftDocument, draftInsertionProblems, draftsDirty, draftsFromTemplate, draftsPatch, editInsertionText, editLanguageDraft, editMainInsertionText, editMainInsertions, effectivePreviewPicks, emptyFlow, emptyLinkValues, errorBody, escapeMergeHtml, exportFilename, filterConditions, filterDepth, filterFieldFamily, filterLeafProblem, findMergeFields, formatExportWarningsHeader, formatUsageWarningHeader, foundationRoutes, insertionByProblem, insertionChoices, insertionCoverage, insertionInputs, insertionNameProblem, insertionProblems, insertionRefusalHint, insertionSlotLabel, insertionTextSlots, insertionTokens, insertionValue, inviteRoutes, isDayEntirelyPast, isPublishable, isRetryableError, keepLanguageDocument, languageInsertions, languageName, languageTabs, letterOnlyValues, linkTokens, mainInsertionText, matchLocale, matchRoute, missingInsertionTexts, missingRequiredMergeFields, normalizeChoiceKey, nowSeconds, operationsWithAccess, ownEntry, page, parseExportWarningsHeader, parseUsageWarningHeader, personalizeHtml, personalizeText, placementProblems, platformRoutes, previewControls, previewInsertions, previewPersonalization, primaryLanguage, printedFields, rawMergeValue, reachable, readyWithoutInsertions, readyWithoutSubject, rebaseDrafts, removeInsertion, removeInsertionChoice, removeLanguageDraft, renameInsertion, renameInsertionChecked, renameInsertionChoice, renameInsertionChoiceChecked, renameInsertionEverywhere, renameInsertionPlacements, renameTokenInDocument, renameTokenInText, resolveInsertions, resolveValue, restorePatch, routes, sameJson, sampleMergeValue, saveDemotions, sendingRoutes, setInsertionBy, setInsertionFilled, setLanguageStatus, signWebhook, statusForError, stepTargets, storedTemplateLine, stronglyConnected, templateInputDrift, templateInputProblems, templateRoutes, testGroupSize, tightLoops, timingSafeEqualString, translationInsertionProblems, translationTextFromInput, triggerKey, unknownRefusedInsertions, unplacedInsertions, validateAutomation, valueNames, valuesRead, verifyWebhook };
+export { AB_TEST_STATUSES, AB_WINNER_METRICS, API_KEY_SCOPES, API_VERSION_PREFIX, ASSET_CONTENT_TYPES, ASSET_POLICIES, ASSET_UPLOAD_FIELD, AUDIT_ACTIONS, AUTHORIZATION_HEADER, AUTOMATION_DATE_TRIGGER_KINDS, AUTOMATION_END_REASONS, AUTOMATION_ENTRY_REFUSALS, AUTOMATION_FILTER_FIELD_OPERATORS, AUTOMATION_FILTER_FIELD_PATTERN, AUTOMATION_ISSUE_CODES, AUTOMATION_STATUSES, AUTOMATION_STEP_KINDS, AUTOMATION_TRIGGER_KINDS, AUTOMATION_WAIT_REASONS, AbTestConfig, AbTestState, AbVariant, AbWinnerRequest, ApiKey, ApiKeyCreate, ApiKeyCreated, ApiKeyScope, Asset, AssetContentType, AssetHost, AssetImport, AssetPolicy, AuditAction, AuditActor, AuditEntry, AuditQuery, Automation, AutomationCounts, AutomationCreate, type AutomationDateTriggerKind, AutomationDuplicateRequest, AutomationEndReason, AutomationEnrollRequest, AutomationEnrollResult, AutomationEnrollment, AutomationEntryRefusal, AutomationExitRunRequest, AutomationFilter, AutomationFilterCondition, AutomationFilterField, AutomationFlow, AutomationIssue, AutomationIssueCode, AutomationJourney, AutomationListQuery, AutomationPublishMove, AutomationPublishRequest, AutomationPublishResult, AutomationReport, AutomationRun, AutomationRunCompletedData, AutomationRunExitedData, AutomationRunFailedData, AutomationRunListQuery, AutomationRunParams, AutomationRunStartedData, AutomationRunStatus, AutomationSettings, AutomationStatus, AutomationStep, AutomationStepExecution, AutomationStepKind, AutomationStepParams, AutomationStepReport, AutomationSummary, AutomationTestEmailRequest, AutomationTrigger, AutomationTriggerKind, AutomationUpdate, AutomationValidateRequest, AutomationValidation, AutomationWaitReason, AutomationWebhookData, AutomationWithFlow, BEARER_PREFIX, BILLING_NOT_CONFIGURED_REASON, BoundedAutomationFilter, BoundedSegmentFilter, CONTACT_PROPERTY_TYPES, CatalogPlan, CheckoutRequest, CheckoutSession, CompanyId, CompileMessage, CompileRequest, CompileResult, ConditionStep, Contact, ContactAutomationListQuery, ContactAutomationRun, ContactBouncedData, ContactErased, ContactListQuery, ContactPropertyDefinition, ContactPropertyKey, ContactPropertyParams, ContactPropertyType, ContactResubscribedData, ContactSubscribedData, ContactTaggedData, ContactUnsubscribedData, ContactUpdatedData, ContactUpsert, ContactUpsertResult, DATE_PASSED_ANSWERS, DEFAULT_INVITE_TTL_DAYS, DEFAULT_PAGE_LIMIT, DOCUMENT_SCHEMA_VERSIONS, DateOnly, DatePassedAnswer, DelayStep, DocumentSchemaVersion, type DraftInsertionProblem, EDITABLE_MAILING_STATUSES, ERROR_CODES, ERROR_STATUS, EXPORT_CONTENT_TYPES, EXPORT_FORMATS, EXPORT_WARNINGS_HEADER, EXPORT_WARNING_COUNT_HEADER, type EditableLanguage, Email, EmailStep, EmailStepLanguage, ErrorBody, type ErrorCode, ErrorCodeSchema, Event, EventCreate, EventListQuery, EventName, ExportFormat, FILTER_FIELD_OPERATORS, FILTER_OPERATORS, FilterCondition, FilterField, type FilterLeafProblem, FilterOperator, GotoStep, HEALTH_PATH, HOSTED_PAGE_LOCALES, type HttpMethod, ICLOUD_SMTP_POLICY, IDEMPOTENCY_KEY_HEADER, IDEMPOTENCY_KEY_MAX_LENGTH, IDEMPOTENCY_KEY_RETENTION_HOURS, IMPORT_FILE_FIELD, IMPORT_ROW_OUTCOMES, IMPORT_SKIP_REASONS, IMPORT_STATUSES, IMPORT_TERMINAL_STATUSES, INSERTION_PROBLEM_REASONS, INSERTION_TEXT_SLOTS, INVITE_REFUSAL_REASONS, INVITE_STATUSES, Id, IdParams, ImportColumnMapping, ImportCommitRequest, ImportFinishedData, ImportJob, ImportMappingRequest, ImportReport, ImportRow, ImportRowListQuery, ImportRowOutcome, ImportSkipReason, ImportStatus, ImportWarning, ImportedAsset, Insertion, InsertionChoice, InsertionChoiceKey, type InsertionChoiceMade, InsertionChoices, type InsertionEdit, InsertionName, type InsertionProblem, type InsertionProblemReason, InsertionText, Insertions, Invite, InviteAccept, InviteAccepted, InviteCreate, InviteCreated, InviteListQuery, type InviteRefusalReason, InviteStatus, JsonValue, LETTER_ONLY_MERGE_FIELDS, LETTER_RECIPIENT_REFUSAL, LIST_UNSUBSCRIBE_POST_VALUE, LOCALE_TAG_PATTERN, type LanguageDrafts, type LanguageTab, LocaleTag, MAILING_ACTIONS, MAILING_KINDS, MAILING_STATUSES, MAILING_TRANSITIONS, MAX_ALLOWED_ASSET_HOSTS, MAX_ASSET_BYTES, MAX_DELAY_SECONDS, MAX_DOCUMENT_BYTES, MAX_ENGAGEMENT_DAYS, MAX_EXPORT_WARNINGS_HEADER_LENGTH, MAX_FILTER_DEPTH, MAX_IMPORTED_REMOTE_IMAGES, MAX_IMPORT_BYTES, MAX_IMPORT_ROWS, MAX_IMPORT_URL_LENGTH, MAX_INSERTIONS, MAX_INSERTION_CHOICES, MAX_INSERTION_TEXT_LENGTH, MAX_INVITE_TTL_DAYS, MAX_IN_LIST, MAX_LETTER_RECIPIENTS, MAX_MERGE_DEFAULTS, MAX_MERGE_DEFAULT_LENGTH, MAX_MJML_DEPTH, MAX_MJML_ELEMENTS, MAX_MJML_IMPORT_BYTES, MAX_PAGE_LIMIT, MAX_PREHEADER_LENGTH, MAX_RECIPIENTS_PER_BATCH, MAX_RE_ENTRY_COOLDOWN_SECONDS, MAX_SAVED_SECTIONS, MAX_SPLIT_BRANCHES, MAX_STEPS, MAX_STEP_VISITS, MAX_SUBJECT_LENGTH, MAX_TEMPLATE_INPUTS, MAX_TEMPLATE_INPUTS_APP_LENGTH, MAX_TEMPLATE_INPUTS_SEEN, MAX_TEMPLATE_INPUT_EXAMPLE_LENGTH, MAX_TEMPLATE_INPUT_LABEL_LENGTH, MAX_TEMPLATE_INPUT_NOTE_LENGTH, MAX_TEMPLATE_INPUT_VALUES, MAX_TEMPLATE_TRANSLATIONS, MAX_TRIGGERS, MEMBER_ROLES, MERGE_FIELD_PATTERN, MESSAGE_OUTCOMES, MIN_SPLIT_BRANCHES, MJML_IMPORT_REFUSALS, Mailing, MailingAbWinnerSelectedData, MailingAction, MailingActionRequest, MailingAnalytics, MailingAudienceFromSegment, MailingCounts, MailingCreate, MailingExportQuery, MailingFinishedData, MailingKind, MailingLanguage, MailingLanguageReport, MailingLanguageStatus, MailingListQuery, MailingMerge, MailingMetadata, MailingResolveRequest, MailingResolveResult, MailingRetryFailedRequest, MailingScheduleFailedData, MailingScheduleRequest, MailingScheduledData, MailingSendRequest, MailingStartedData, MailingStatus, MailingSummary, MailingTestRequest, MailingTestResult, MailingUpdate, Member, MemberCreate, MemberRole, MemberUpdate, MergeDefaultValue, MergeDefaults, MergeFieldName, type MergeFieldUse, type MergeValue, Message, MessageFailedData, MessageListQuery, MessageOutcome, MessageSentData, MessageSummary, MessageValues, type MissingInsertionText, type MjmlImportRefusal, NAME_ON_BROADCAST_REFUSAL, NotifyRecipients, NotifyStep, ON_BEHALF_OF_HEADER, ON_BEHALF_OF_MAX_LENGTH, OffsetDays, Ok, type OperationId, PLAN_FEATURES, PLAN_IDS, PREVIEW_EMPTY, PREVIEW_FILLED, PROVIDER_KINDS, type Page, PageQuery, type Personalization, type Phase, Plan, type PlanFeature, PlanFeatures, PlanId, PlanLimits, PortalRequest, PortalSession, type PreviewControl, Properties, Provider, ProviderCreate, ProviderEvents, ProviderEventsSecret, ProviderKind, ProviderPolicy, ProviderRejections, ProviderUpdate, ProviderUsage, ProviderVerifyResult, QuietHours, RECIPIENT_REJECTIONS, RECIPIENT_STATUSES, REQUEST_ID_HEADER, RESEND_EVENT_TYPES, RESERVED_MERGE_FIELDS, RESOLVE_PROBLEMS, RESOLVE_REJECTIONS, RETRYABLE_ERRORS, RETRY_AFTER_HEADER, RE_ENTRY_MODES, ReEntryMode, Recipient, RecipientBatch, RecipientBatchResult, RecipientInput, RecipientListQuery, RecipientStatus, RemoteImage, type RenamedPlacement, ResendSigningSecret, type ReservedMergeField, ResolveProblem, ResolvedRecipient, ResolvedValue, type RouteAccess, type RouteBody, type RouteDef, type RouteParams, type RouteQuery, type RouteResponse, type Routes, SERVICE_FILLED_MERGE_FIELDS, SIGNUP_FORM_FIELDS, SKIP_REASONS, SMTP_SECURITY, SUBJECT_HEADER, SUPPRESSION_REASONS, type SaveDemotion, SavedSection, SavedSectionBody, SavedSectionCreate, SavedSectionUpdate, Segment, SegmentCreate, SegmentFilter, SegmentPreview, SegmentPreviewRequest, SignupForm, SignupFormCreate, SignupFormEmbed, SignupFormTranslation, SignupSubmission, SkipReason, Slug, SplitBranchKey, SplitStep, StepId, type StepTarget, Subscription, Suppression, SuppressionCreate, SuppressionListQuery, SuppressionReason, TEMPLATE_INPUT_KINDS, TEMPLATE_INPUT_PROBLEM_REASONS, TEMPLATE_LANGUAGE_STATUSES, TEMPLATE_SORTS, TEMPLATE_SORT_DEFAULT_ORDER, TERMINAL_MAILING_STATUSES, TRUSTED_APPS, TRUSTED_APP_OPERATIONS, Tag, TagAssignment, TagCreate, Template, TemplateCompileRequest, TemplateCreate, TemplateCreatedData, TemplateDeleteQuery, TemplateDeletedData, TemplateDocument, TemplateExportQuery, TemplateImport, TemplateImportPreview, TemplateImportPreviewRequest, TemplateImportResult, TemplateInput, type TemplateInputKind, TemplateInputMap, TemplateInputName, type TemplateInputProblem, type TemplateInputProblemReason, TemplateInputSeen, TemplateInputSource, TemplateInputValue, TemplateInputs, TemplateInputsDeclaration, TemplateInputsDeclared, TemplateInputsSeen, TemplateLanguageStatus, TemplateListQuery, TemplatePreheader, type TemplateSort, TemplateSubject, TemplateSummary, TemplateTranslation, TemplateTranslations, TemplateUpdate, TemplateUpdatedData, TemplateVersion, TemplateVersionParams, TimeOfDay, Timestamp, TimezoneName, Topic, TopicCreate, TopicUpdate, TrackingSettings, TranslationInsertion, TranslationInsertions, TrustedApp, UNSUBSCRIBE_PATH_PREFIX, UNSUBSCRIBE_SOURCES, USAGE_METRICS, USAGE_WARNING_HEADER, USAGE_WARNING_RATIO, UnfilledLink, type UnsubscribeToken, type UnsubscribeTokenClaims, Usage, UsageMetric, UsageWarning, type UsageWarningHeaderEntry, VALUE_LAYERS, type ValidationContext, ValidationIssue, ValueLayer, type ValueSources, VariantAnalytics, type VerifyWebhookInput, WEBHOOK_DELIVERY_STATUSES, WEBHOOK_EVENT_ID_HEADER, WEBHOOK_EVENT_TYPES, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_RETRY_DELAYS_SECONDS, WEBHOOK_SECRET_PREFIX, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_SIGNATURE_VERSION, WEBHOOK_TIMESTAMP_HEADER, WEBHOOK_TOLERANCE_SECONDS, WORKSPACE_HEADER, WebhookDelivery, WebhookDeliveryListQuery, WebhookDeliveryParams, WebhookDeliveryStatus, WebhookEndpoint, WebhookEndpointCreate, WebhookEndpointUpdate, WebhookEndpointWithSecret, WebhookEvent, type WebhookEventOf, WebhookEventType, WebhookStep, WebhookUrl, type WebhookVerifyFailure, type WebhookVerifyResult, Weekday, Workspace, WorkspaceCreate, WorkspaceMembership, WorkspaceMove, WorkspaceSettings, WorkspaceUpdate, acceptsIdempotencyKey, addInsertion, addInsertionChoice, addLanguageDraft, alignTranslationInsertions, alwaysWaits, automationFilterFamily, automationRoutes, billingRoutes, buildPath, buildTemplatePatch, canTransition, canonicalLocale, choiceKeyProblem, chooseInsertion, cycles, defaultPreviewPick, defaultSettings, demoteForSave, demotedBySave, describeMissingTexts, draftDocument, draftInsertionProblems, draftsDirty, draftsFromTemplate, draftsPatch, editInsertionText, editLanguageDraft, editMainInsertionText, editMainInsertions, effectivePreviewPicks, emptyFlow, emptyLinkValues, errorBody, escapeMergeHtml, exportFilename, filterConditions, filterDepth, filterFieldFamily, filterLeafProblem, findMergeFields, formatExportWarningsHeader, formatUsageWarningHeader, foundationRoutes, insertionByProblem, insertionChoices, insertionCoverage, insertionInputs, insertionNameProblem, insertionProblems, insertionRefusalHint, insertionSlotLabel, insertionTextSlots, insertionTokens, insertionValue, inviteRoutes, isDayEntirelyPast, isPublishable, isRetryableError, keepLanguageDocument, languageInsertions, languageName, languageTabs, letterOnlyValues, linkTokens, mainInsertionText, matchLocale, matchRoute, missingInsertionTexts, missingRequiredMergeFields, normalizeChoiceKey, nowSeconds, operationsWithAccess, ownEntry, page, parseExportWarningsHeader, parseUsageWarningHeader, personalizeHtml, personalizeText, placementProblems, platformRoutes, previewControls, previewInsertions, previewPersonalization, primaryLanguage, printedFields, rawMergeValue, reachable, readyWithoutInsertions, readyWithoutSubject, rebaseDrafts, removeInsertion, removeInsertionChoice, removeLanguageDraft, renameInsertion, renameInsertionChecked, renameInsertionChoice, renameInsertionChoiceChecked, renameInsertionEverywhere, renameInsertionPlacements, renameTokenInDocument, renameTokenInText, resolveInsertions, resolveValue, restorePatch, routes, sameJson, sampleMergeValue, saveDemotions, sendingRoutes, setInsertionBy, setInsertionFilled, setLanguageStatus, signWebhook, statusForError, stepTargets, storedTemplateLine, stronglyConnected, templateInputDrift, templateInputProblems, templateRoutes, testGroupSize, tightLoops, timingSafeEqualString, translationInsertionProblems, translationTextFromInput, triggerKey, trustedAppMayCall, unknownRefusedInsertions, unplacedInsertions, validateAutomation, valueNames, valuesRead, verifyWebhook };

package/dist/index.js CHANGED Viewed

@@ -396,6 +396,8 @@ __export(index_exports, {
   TEMPLATE_SORTS: () => TEMPLATE_SORTS,
   TEMPLATE_SORT_DEFAULT_ORDER: () => TEMPLATE_SORT_DEFAULT_ORDER,
   TERMINAL_MAILING_STATUSES: () => TERMINAL_MAILING_STATUSES,
+  TRUSTED_APPS: () => TRUSTED_APPS,
+  TRUSTED_APP_OPERATIONS: () => TRUSTED_APP_OPERATIONS,
   Tag: () => Tag,
   TagAssignment: () => TagAssignment,
   TagCreate: () => TagCreate,
@@ -441,6 +443,7 @@ __export(index_exports, {
   TrackingSettings: () => TrackingSettings,
   TranslationInsertion: () => TranslationInsertion,
   TranslationInsertions: () => TranslationInsertions,
+  TrustedApp: () => TrustedApp,
   UNSUBSCRIBE_PATH_PREFIX: () => UNSUBSCRIBE_PATH_PREFIX,
   UNSUBSCRIBE_SOURCES: () => UNSUBSCRIBE_SOURCES,
   USAGE_METRICS: () => USAGE_METRICS,
@@ -611,6 +614,7 @@ __export(index_exports, {
   translationInsertionProblems: () => translationInsertionProblems,
   translationTextFromInput: () => translationTextFromInput,
   triggerKey: () => triggerKey,
+  trustedAppMayCall: () => trustedAppMayCall,
   unknownRefusedInsertions: () => unknownRefusedInsertions,
   unplacedInsertions: () => unplacedInsertions,
   validateAutomation: () => validateAutomation,
@@ -3562,8 +3566,20 @@ var AUDIT_ACTIONS = [
   "event.recorded"
 ];
 var AuditAction = import_zod11.z.enum(AUDIT_ACTIONS);
+var TRUSTED_APPS = ["booking"];
+var TrustedApp = import_zod11.z.enum(TRUSTED_APPS);
 var AuditActor = import_zod11.z.discriminatedUnion("type", [
-  import_zod11.z.object({ type: import_zod11.z.literal("member"), member_id: Id, subject: import_zod11.z.string().min(1) }),
+  import_zod11.z.object({
+    type: import_zod11.z.literal("member"),
+    member_id: Id,
+    subject: import_zod11.z.string().min(1),
+    /**
+     * The application the person acted through, when it was not the dashboard:
+     * the service set it from the service token the call carried, so it is
+     * verified, unlike a key's `on_behalf_of`. Absent for the dashboard.
+     */
+    app: TrustedApp.optional()
+  }),
   import_zod11.z.object({
     type: import_zod11.z.literal("api_key"),
     api_key_id: Id,
@@ -6337,6 +6353,12 @@ var routes = {
   ...billingRoutes,
   ...automationRoutes
 };
+var TRUSTED_APP_OPERATIONS = {
+  booking: ["workspaces.list", "workspace.update", "providers.list", "apiKeys.create", "apiKeys.revoke"]
+};
+function trustedAppMayCall(app, id) {
+  return TRUSTED_APP_OPERATIONS[app].includes(id);
+}
 function acceptsIdempotencyKey(route) {
   return route.method !== "GET";
 }
@@ -6748,6 +6770,8 @@ function matchRoute(method, pathname) {
   TEMPLATE_SORTS,
   TEMPLATE_SORT_DEFAULT_ORDER,
   TERMINAL_MAILING_STATUSES,
+  TRUSTED_APPS,
+  TRUSTED_APP_OPERATIONS,
   Tag,
   TagAssignment,
   TagCreate,
@@ -6793,6 +6817,7 @@ function matchRoute(method, pathname) {
   TrackingSettings,
   TranslationInsertion,
   TranslationInsertions,
+  TrustedApp,
   UNSUBSCRIBE_PATH_PREFIX,
   UNSUBSCRIBE_SOURCES,
   USAGE_METRICS,
@@ -6963,6 +6988,7 @@ function matchRoute(method, pathname) {
   translationInsertionProblems,
   translationTextFromInput,
   triggerKey,
+  trustedAppMayCall,
   unknownRefusedInsertions,
   unplacedInsertions,
   validateAutomation,

package/dist/index.mjs CHANGED Viewed

@@ -2940,8 +2940,20 @@ var AUDIT_ACTIONS = [
   "event.recorded"
 ];
 var AuditAction = z11.enum(AUDIT_ACTIONS);
+var TRUSTED_APPS = ["booking"];
+var TrustedApp = z11.enum(TRUSTED_APPS);
 var AuditActor = z11.discriminatedUnion("type", [
-  z11.object({ type: z11.literal("member"), member_id: Id, subject: z11.string().min(1) }),
+  z11.object({
+    type: z11.literal("member"),
+    member_id: Id,
+    subject: z11.string().min(1),
+    /**
+     * The application the person acted through, when it was not the dashboard:
+     * the service set it from the service token the call carried, so it is
+     * verified, unlike a key's `on_behalf_of`. Absent for the dashboard.
+     */
+    app: TrustedApp.optional()
+  }),
   z11.object({
     type: z11.literal("api_key"),
     api_key_id: Id,
@@ -5715,6 +5727,12 @@ var routes = {
   ...billingRoutes,
   ...automationRoutes
 };
+var TRUSTED_APP_OPERATIONS = {
+  booking: ["workspaces.list", "workspace.update", "providers.list", "apiKeys.create", "apiKeys.revoke"]
+};
+function trustedAppMayCall(app, id) {
+  return TRUSTED_APP_OPERATIONS[app].includes(id);
+}
 function acceptsIdempotencyKey(route) {
   return route.method !== "GET";
 }
@@ -6125,6 +6143,8 @@ export {
   TEMPLATE_SORTS,
   TEMPLATE_SORT_DEFAULT_ORDER,
   TERMINAL_MAILING_STATUSES,
+  TRUSTED_APPS,
+  TRUSTED_APP_OPERATIONS,
   Tag,
   TagAssignment,
   TagCreate,
@@ -6170,6 +6190,7 @@ export {
   TrackingSettings,
   TranslationInsertion,
   TranslationInsertions,
+  TrustedApp,
   UNSUBSCRIBE_PATH_PREFIX,
   UNSUBSCRIBE_SOURCES,
   USAGE_METRICS,
@@ -6340,6 +6361,7 @@ export {
   translationInsertionProblems,
   translationTextFromInput,
   triggerKey,
+  trustedAppMayCall,
   unknownRefusedInsertions,
   unplacedInsertions,
   validateAutomation,

package/package.json CHANGED Viewed

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "The v1 API contract of the mail service: zod schemas and types for every request, response, error and webhook, the route table, and webhook signing helpers",
   "license": "MIT",
   "repository": {