@marlinjai/mail-contract 0.12.0 → 0.14.0

package/dist/index.js

@@ -107,10 +107,13 @@ __export(index_exports, {
   BILLING_NOT_CONFIGURED_REASON: () => BILLING_NOT_CONFIGURED_REASON,
   BoundedAutomationFilter: () => BoundedAutomationFilter,
   BoundedSegmentFilter: () => BoundedSegmentFilter,
+  COMPANY_GRANT_ROLES: () => COMPANY_GRANT_ROLES,
+  COMPANY_ROLE_MAX_AGE_HOURS: () => COMPANY_ROLE_MAX_AGE_HOURS,
   CONTACT_PROPERTY_TYPES: () => CONTACT_PROPERTY_TYPES,
   CatalogPlan: () => CatalogPlan,
   CheckoutRequest: () => CheckoutRequest,
   CheckoutSession: () => CheckoutSession,
+  CompanyGrantRole: () => CompanyGrantRole,
   CompanyId: () => CompanyId,
   CompileMessage: () => CompileMessage,
   CompileRequest: () => CompileRequest,
@@ -249,6 +252,7 @@ __export(index_exports, {
   MAX_STEPS: () => MAX_STEPS,
   MAX_STEP_VISITS: () => MAX_STEP_VISITS,
   MAX_SUBJECT_LENGTH: () => MAX_SUBJECT_LENGTH,
+  MAX_SYNC_COMPANIES: () => MAX_SYNC_COMPANIES,
   MAX_TEMPLATE_INPUTS: () => MAX_TEMPLATE_INPUTS,
   MAX_TEMPLATE_INPUTS_APP_LENGTH: () => MAX_TEMPLATE_INPUTS_APP_LENGTH,
   MAX_TEMPLATE_INPUTS_SEEN: () => MAX_TEMPLATE_INPUTS_SEEN,
@@ -259,6 +263,7 @@ __export(index_exports, {
   MAX_TEMPLATE_TRANSLATIONS: () => MAX_TEMPLATE_TRANSLATIONS,
   MAX_TRIGGERS: () => MAX_TRIGGERS,
   MEMBER_ROLES: () => MEMBER_ROLES,
+  MEMBER_SOURCES: () => MEMBER_SOURCES,
   MERGE_FIELD_PATTERN: () => MERGE_FIELD_PATTERN,
   MESSAGE_OUTCOMES: () => MESSAGE_OUTCOMES,
   MIN_SPLIT_BRANCHES: () => MIN_SPLIT_BRANCHES,
@@ -294,8 +299,11 @@ __export(index_exports, {
   MailingTestResult: () => MailingTestResult,
   MailingUpdate: () => MailingUpdate,
   Member: () => Member,
+  MemberCompanySync: () => MemberCompanySync,
+  MemberCompanySyncResult: () => MemberCompanySyncResult,
   MemberCreate: () => MemberCreate,
   MemberRole: () => MemberRole,
+  MemberSource: () => MemberSource,
   MemberUpdate: () => MemberUpdate,
   MergeDefaultValue: () => MergeDefaultValue,
   MergeDefaults: () => MergeDefaults,
@@ -396,6 +404,11 @@ __export(index_exports, {
   TEMPLATE_SORTS: () => TEMPLATE_SORTS,
   TEMPLATE_SORT_DEFAULT_ORDER: () => TEMPLATE_SORT_DEFAULT_ORDER,
   TERMINAL_MAILING_STATUSES: () => TERMINAL_MAILING_STATUSES,
+  TRANSACTIONAL_BLOCKING_REASONS: () => TRANSACTIONAL_BLOCKING_REASONS,
+  TRANSACTIONAL_NEEDS_LETTER_REFUSAL: () => TRANSACTIONAL_NEEDS_LETTER_REFUSAL,
+  TRANSACTIONAL_NEEDS_TEMPLATE_LOCALE_REFUSAL: () => TRANSACTIONAL_NEEDS_TEMPLATE_LOCALE_REFUSAL,
+  TRANSACTIONAL_NOT_ALLOWED_REFUSAL: () => TRANSACTIONAL_NOT_ALLOWED_REFUSAL,
+  TRANSACTIONAL_UNSUBSCRIBE_URL_REFUSAL: () => TRANSACTIONAL_UNSUBSCRIBE_URL_REFUSAL,
   TRUSTED_APPS: () => TRUSTED_APPS,
   TRUSTED_APP_OPERATIONS: () => TRUSTED_APP_OPERATIONS,
   Tag: () => Tag,
@@ -1794,6 +1807,17 @@ var Mailing = import_zod8.z.object({
    * the workspace's defaults, below the recipient's own. Empty by default.
    */
   merge: MailingMerge.default({}),
+  /**
+   * Where a reader's reply goes for this mailing, or null for the sending
+   * provider's own reply address (see `MailingContent.reply_to`).
+   */
+  reply_to: Email.nullable().default(null),
+  /**
+   * Whether this is a transactional letter (see `MailingCreate.transactional`
+   * and "Transactional letters" in the contract's documentation). False for
+   * every mailing made without the flag.
+   */
+  transactional: import_zod8.z.boolean().default(false),
   scheduled_at: Timestamp.nullable(),
   /** The A/B test on subject or content (S4), null when there is none. */
   ab_test: AbTestState.nullable(),
@@ -1818,22 +1842,46 @@ var MailingContent = {
   send_locale: LocaleTag.nullable().optional(),
   /**
    * Omitted or null makes the mailing a letter: one recipient at most, sent to
-   * anybody not blocked on every topic, with an unsubscribe link that offers
-   * every topic and no List-Unsubscribe headers. See "Letters" in the
+   * anybody not blocked on every topic, with an unsubscribe link and
+   * List-Unsubscribe headers that offer every topic. See "Letters" in the
    * contract's documentation.
    */
   topic: Slug.nullable().optional(),
   provider_id: Id,
   metadata: MailingMetadata.optional(),
   /** See `Mailing.merge`. `first_name` and `last_name` only on a letter (no topic). */
-  merge: MailingMerge.optional()
+  merge: MailingMerge.optional(),
+  /**
+   * The Reply-To of this mailing's messages: one address, in place of the
+   * sending provider's `reply_to`. Omitted or null keeps the provider's. The
+   * sender (From) is always the provider's, and so is the mailto alternative
+   * of the List-Unsubscribe header, since a request to leave belongs to the
+   * workspace and not to whoever a reply reaches.
+   */
+  reply_to: Email.nullable().optional()
 };
 var MailingCreate = import_zod8.z.object({
   ...MailingContent,
   subject: MailingContent.subject.optional(),
   document: TemplateDocument.optional(),
   template_id: Id.optional(),
-  template_locale: LocaleTag.optional()
+  template_locale: LocaleTag.optional(),
+  /**
+   * True makes the mailing a transactional letter: mail that answers
+   * something its one reader did and that they need whatever they chose
+   * about marketing (a booking's confirmation, its reminder, its
+   * cancellation). It needs no `{{unsubscribe_url}}`, carries no
+   * List-Unsubscribe headers and is not stopped by an unsubscribe; a hard
+   * bounce, a spam complaint and a block set by hand still stop it.
+   *
+   * Only a key that a trusted application created may set it (`forbidden`,
+   * `details.reason: "transactional_not_allowed"`), only on a letter
+   * (`validation_failed`, `"transactional_needs_letter"`), from a template
+   * only with `template_locale` (`"transactional_needs_template_locale"`),
+   * and it is fixed when the mailing is created. See "Transactional letters" in the
+   * contract's documentation.
+   */
+  transactional: import_zod8.z.boolean().optional()
 }).refine((v) => v.document === void 0 !== (v.template_id === void 0), {
   message: "exactly one of document or template_id",
   path: ["document"]
@@ -1860,6 +1908,8 @@ var MailingUpdate = import_zod8.z.object({
    * them.
    */
   merge: MailingMerge.optional(),
+  /** See `MailingContent.reply_to`. Null goes back to the provider's reply address. */
+  reply_to: Email.nullable().optional(),
   document: TemplateDocument.optional()
 }).refine((v) => Object.keys(v).length > 0, "at least one field");
 var MailingListQuery = PageQuery.extend({
@@ -1908,6 +1958,11 @@ var Recipient = import_zod8.z.object({
 var MAX_RECIPIENTS_PER_BATCH = 1e3;
 var MAX_LETTER_RECIPIENTS = 1;
 var LETTER_RECIPIENT_REFUSAL = "letter_has_one_recipient";
+var TRANSACTIONAL_NOT_ALLOWED_REFUSAL = "transactional_not_allowed";
+var TRANSACTIONAL_NEEDS_LETTER_REFUSAL = "transactional_needs_letter";
+var TRANSACTIONAL_NEEDS_TEMPLATE_LOCALE_REFUSAL = "transactional_needs_template_locale";
+var TRANSACTIONAL_UNSUBSCRIBE_URL_REFUSAL = "transactional_has_unsubscribe_url";
+var TRANSACTIONAL_BLOCKING_REASONS = ["bounced", "complained", "manual"];
 var RecipientInput = import_zod8.z.object({
   contact_id: Id.optional(),
   external_id: import_zod8.z.string().min(1).max(255).optional(),
@@ -3427,12 +3482,13 @@ var WorkspaceCreate = import_zod11.z.object({
     name: import_zod11.z.string().max(200).nullable().optional()
   }),
   /**
-   * The signed-in person's active auth-brain company. The dashboard always
-   * sends it, which is what links the workspace to auth-brain's company
-   * erasure; omitted, the workspace belongs to no company and no company
-   * erasure reaches it.
+   * The auth-brain company the workspace is created in. Required since 0.14.0:
+   * every new workspace belongs to a company, which is what links it to that
+   * company's erasure and lets the company's owners and admins in without an
+   * invitation (`members.syncCompanyRole`). A workspace created before, without
+   * one, keeps working and simply has no such inheritance.
    */
-  company_id: CompanyId.optional()
+  company_id: CompanyId
 });
 var WorkspaceUpdate = import_zod11.z.object({
   name: import_zod11.z.string().min(1).max(120),
@@ -3442,14 +3498,58 @@ var WorkspaceMove = import_zod11.z.object({ company_id: CompanyId });
 var MEMBER_ROLES = ["owner", "admin", "editor", "viewer"];
 var MemberRole = import_zod11.z.enum(MEMBER_ROLES);
 var WorkspaceMembership = Workspace.extend({ role: MemberRole });
+var MEMBER_SOURCES = ["invited", "company"];
+var MemberSource = import_zod11.z.enum(MEMBER_SOURCES);
+var COMPANY_GRANT_ROLES = ["owner", "admin"];
+var CompanyGrantRole = import_zod11.z.enum(COMPANY_GRANT_ROLES);
+var COMPANY_ROLE_MAX_AGE_HOURS = 24;
 var Member = import_zod11.z.object({
   id: Id,
   /** The person's auth-brain subject. */
   subject: import_zod11.z.string().min(1).max(255),
   email: Email,
   name: import_zod11.z.string().max(200).nullable(),
+  /**
+   * The role in force: the higher of the person's own role in the workspace
+   * and the one a confirmed company role carries. For a `company` row that is
+   * no longer confirmed, the role it would carry once confirmed again.
+   */
   role: MemberRole,
-  created_at: Timestamp
+  created_at: Timestamp,
+  /*
+   * The five fields below exist since 0.14.0 and are optional only so that a
+   * client built against this contract can still read a service that predates
+   * them: absent means an ordinary, invited member.
+   */
+  source: MemberSource.optional(),
+  /** The company role last reported for the person (`members.syncCompanyRole`), or null. */
+  company_role: CompanyGrantRole.nullable().optional(),
+  /** When the dashboard last confirmed `company_role`; null without one. */
+  company_checked_at: Timestamp.nullable().optional(),
+  /** The person's own role in the workspace; null for a `company` row. */
+  direct_role: MemberRole.nullable().optional(),
+  /**
+   * True while `role` is held only through a confirmed company role. Such a
+   * member cannot be changed or removed here (`inherited_from_company`): the
+   * role is managed in the shared login. A `company` row with `inherited`
+   * false is one whose company role has not been confirmed within
+   * `COMPANY_ROLE_MAX_AGE_HOURS`; it grants nothing and an admin may remove it.
+   */
+  inherited: import_zod11.z.boolean().optional()
+});
+var MAX_SYNC_COMPANIES = 100;
+var MemberCompanySync = import_zod11.z.object({
+  email: Email,
+  name: import_zod11.z.string().max(200).nullable().optional(),
+  companies: import_zod11.z.array(import_zod11.z.object({ company_id: CompanyId, role: CompanyGrantRole })).max(MAX_SYNC_COMPANIES).refine((list2) => new Set(list2.map((c) => c.company_id)).size === list2.length, "each company at most once")
+});
+var MemberCompanySyncResult = import_zod11.z.object({
+  /** Workspaces in which the person now holds a company role they did not hold, or held differently, before this call. */
+  granted: import_zod11.z.array(Id),
+  /** Workspaces in which a company role was taken away by this call. */
+  revoked: import_zod11.z.array(Id),
+  /** Workspaces in which the person's company role was already as stated. */
+  unchanged: import_zod11.z.array(Id)
 });
 var MemberCreate = import_zod11.z.object({
   subject: import_zod11.z.string().min(1).max(255),
@@ -5057,6 +5157,24 @@ var foundationRoutes = {
     access: "admin",
     phase: "S0"
   },
+  /**
+   * The dashboard states the signed-in person's owner and admin roles in
+   * companies, and the service brings the member lists in line (see
+   * `MemberCompanySync`). `dashboard` access: the dashboard's service token
+   * and the person's subject, no workspace. An API key is refused, and so is
+   * every trusted application: it is not in any `TRUSTED_APP_OPERATIONS` list
+   * and the handler refuses an application once more by itself.
+   */
+  "members.syncCompanyRole": {
+    method: "POST",
+    path: "/v1/members/company-sync",
+    body: MemberCompanySync,
+    response: MemberCompanySyncResult,
+    status: 200,
+    access: "dashboard",
+    phase: "S0",
+    statement: true
+  },
   "apiKeys.list": {
     method: "GET",
     path: "/v1/api-keys",
@@ -6360,7 +6478,7 @@ function trustedAppMayCall(app, id) {
   return TRUSTED_APP_OPERATIONS[app].includes(id);
 }
 function acceptsIdempotencyKey(route) {
-  return route.method !== "GET";
+  return route.method !== "GET" && route.statement !== true;
 }
 function buildPath(path, params = {}) {
   return path.replace(/:([a-z_]+)/g, (_, name) => {
@@ -6481,10 +6599,13 @@ function matchRoute(method, pathname) {
   BILLING_NOT_CONFIGURED_REASON,
   BoundedAutomationFilter,
   BoundedSegmentFilter,
+  COMPANY_GRANT_ROLES,
+  COMPANY_ROLE_MAX_AGE_HOURS,
   CONTACT_PROPERTY_TYPES,
   CatalogPlan,
   CheckoutRequest,
   CheckoutSession,
+  CompanyGrantRole,
   CompanyId,
   CompileMessage,
   CompileRequest,
@@ -6623,6 +6744,7 @@ function matchRoute(method, pathname) {
   MAX_STEPS,
   MAX_STEP_VISITS,
   MAX_SUBJECT_LENGTH,
+  MAX_SYNC_COMPANIES,
   MAX_TEMPLATE_INPUTS,
   MAX_TEMPLATE_INPUTS_APP_LENGTH,
   MAX_TEMPLATE_INPUTS_SEEN,
@@ -6633,6 +6755,7 @@ function matchRoute(method, pathname) {
   MAX_TEMPLATE_TRANSLATIONS,
   MAX_TRIGGERS,
   MEMBER_ROLES,
+  MEMBER_SOURCES,
   MERGE_FIELD_PATTERN,
   MESSAGE_OUTCOMES,
   MIN_SPLIT_BRANCHES,
@@ -6668,8 +6791,11 @@ function matchRoute(method, pathname) {
   MailingTestResult,
   MailingUpdate,
   Member,
+  MemberCompanySync,
+  MemberCompanySyncResult,
   MemberCreate,
   MemberRole,
+  MemberSource,
   MemberUpdate,
   MergeDefaultValue,
   MergeDefaults,
@@ -6770,6 +6896,11 @@ function matchRoute(method, pathname) {
   TEMPLATE_SORTS,
   TEMPLATE_SORT_DEFAULT_ORDER,
   TERMINAL_MAILING_STATUSES,
+  TRANSACTIONAL_BLOCKING_REASONS,
+  TRANSACTIONAL_NEEDS_LETTER_REFUSAL,
+  TRANSACTIONAL_NEEDS_TEMPLATE_LOCALE_REFUSAL,
+  TRANSACTIONAL_NOT_ALLOWED_REFUSAL,
+  TRANSACTIONAL_UNSUBSCRIBE_URL_REFUSAL,
   TRUSTED_APPS,
   TRUSTED_APP_OPERATIONS,
   Tag,

package/dist/index.mjs

@@ -1168,6 +1168,17 @@ var Mailing = z8.object({
    * the workspace's defaults, below the recipient's own. Empty by default.
    */
   merge: MailingMerge.default({}),
+  /**
+   * Where a reader's reply goes for this mailing, or null for the sending
+   * provider's own reply address (see `MailingContent.reply_to`).
+   */
+  reply_to: Email.nullable().default(null),
+  /**
+   * Whether this is a transactional letter (see `MailingCreate.transactional`
+   * and "Transactional letters" in the contract's documentation). False for
+   * every mailing made without the flag.
+   */
+  transactional: z8.boolean().default(false),
   scheduled_at: Timestamp.nullable(),
   /** The A/B test on subject or content (S4), null when there is none. */
   ab_test: AbTestState.nullable(),
@@ -1192,22 +1203,46 @@ var MailingContent = {
   send_locale: LocaleTag.nullable().optional(),
   /**
    * Omitted or null makes the mailing a letter: one recipient at most, sent to
-   * anybody not blocked on every topic, with an unsubscribe link that offers
-   * every topic and no List-Unsubscribe headers. See "Letters" in the
+   * anybody not blocked on every topic, with an unsubscribe link and
+   * List-Unsubscribe headers that offer every topic. See "Letters" in the
    * contract's documentation.
    */
   topic: Slug.nullable().optional(),
   provider_id: Id,
   metadata: MailingMetadata.optional(),
   /** See `Mailing.merge`. `first_name` and `last_name` only on a letter (no topic). */
-  merge: MailingMerge.optional()
+  merge: MailingMerge.optional(),
+  /**
+   * The Reply-To of this mailing's messages: one address, in place of the
+   * sending provider's `reply_to`. Omitted or null keeps the provider's. The
+   * sender (From) is always the provider's, and so is the mailto alternative
+   * of the List-Unsubscribe header, since a request to leave belongs to the
+   * workspace and not to whoever a reply reaches.
+   */
+  reply_to: Email.nullable().optional()
 };
 var MailingCreate = z8.object({
   ...MailingContent,
   subject: MailingContent.subject.optional(),
   document: TemplateDocument.optional(),
   template_id: Id.optional(),
-  template_locale: LocaleTag.optional()
+  template_locale: LocaleTag.optional(),
+  /**
+   * True makes the mailing a transactional letter: mail that answers
+   * something its one reader did and that they need whatever they chose
+   * about marketing (a booking's confirmation, its reminder, its
+   * cancellation). It needs no `{{unsubscribe_url}}`, carries no
+   * List-Unsubscribe headers and is not stopped by an unsubscribe; a hard
+   * bounce, a spam complaint and a block set by hand still stop it.
+   *
+   * Only a key that a trusted application created may set it (`forbidden`,
+   * `details.reason: "transactional_not_allowed"`), only on a letter
+   * (`validation_failed`, `"transactional_needs_letter"`), from a template
+   * only with `template_locale` (`"transactional_needs_template_locale"`),
+   * and it is fixed when the mailing is created. See "Transactional letters" in the
+   * contract's documentation.
+   */
+  transactional: z8.boolean().optional()
 }).refine((v) => v.document === void 0 !== (v.template_id === void 0), {
   message: "exactly one of document or template_id",
   path: ["document"]
@@ -1234,6 +1269,8 @@ var MailingUpdate = z8.object({
    * them.
    */
   merge: MailingMerge.optional(),
+  /** See `MailingContent.reply_to`. Null goes back to the provider's reply address. */
+  reply_to: Email.nullable().optional(),
   document: TemplateDocument.optional()
 }).refine((v) => Object.keys(v).length > 0, "at least one field");
 var MailingListQuery = PageQuery.extend({
@@ -1282,6 +1319,11 @@ var Recipient = z8.object({
 var MAX_RECIPIENTS_PER_BATCH = 1e3;
 var MAX_LETTER_RECIPIENTS = 1;
 var LETTER_RECIPIENT_REFUSAL = "letter_has_one_recipient";
+var TRANSACTIONAL_NOT_ALLOWED_REFUSAL = "transactional_not_allowed";
+var TRANSACTIONAL_NEEDS_LETTER_REFUSAL = "transactional_needs_letter";
+var TRANSACTIONAL_NEEDS_TEMPLATE_LOCALE_REFUSAL = "transactional_needs_template_locale";
+var TRANSACTIONAL_UNSUBSCRIBE_URL_REFUSAL = "transactional_has_unsubscribe_url";
+var TRANSACTIONAL_BLOCKING_REASONS = ["bounced", "complained", "manual"];
 var RecipientInput = z8.object({
   contact_id: Id.optional(),
   external_id: z8.string().min(1).max(255).optional(),
@@ -2801,12 +2843,13 @@ var WorkspaceCreate = z11.object({
     name: z11.string().max(200).nullable().optional()
   }),
   /**
-   * The signed-in person's active auth-brain company. The dashboard always
-   * sends it, which is what links the workspace to auth-brain's company
-   * erasure; omitted, the workspace belongs to no company and no company
-   * erasure reaches it.
+   * The auth-brain company the workspace is created in. Required since 0.14.0:
+   * every new workspace belongs to a company, which is what links it to that
+   * company's erasure and lets the company's owners and admins in without an
+   * invitation (`members.syncCompanyRole`). A workspace created before, without
+   * one, keeps working and simply has no such inheritance.
    */
-  company_id: CompanyId.optional()
+  company_id: CompanyId
 });
 var WorkspaceUpdate = z11.object({
   name: z11.string().min(1).max(120),
@@ -2816,14 +2859,58 @@ var WorkspaceMove = z11.object({ company_id: CompanyId });
 var MEMBER_ROLES = ["owner", "admin", "editor", "viewer"];
 var MemberRole = z11.enum(MEMBER_ROLES);
 var WorkspaceMembership = Workspace.extend({ role: MemberRole });
+var MEMBER_SOURCES = ["invited", "company"];
+var MemberSource = z11.enum(MEMBER_SOURCES);
+var COMPANY_GRANT_ROLES = ["owner", "admin"];
+var CompanyGrantRole = z11.enum(COMPANY_GRANT_ROLES);
+var COMPANY_ROLE_MAX_AGE_HOURS = 24;
 var Member = z11.object({
   id: Id,
   /** The person's auth-brain subject. */
   subject: z11.string().min(1).max(255),
   email: Email,
   name: z11.string().max(200).nullable(),
+  /**
+   * The role in force: the higher of the person's own role in the workspace
+   * and the one a confirmed company role carries. For a `company` row that is
+   * no longer confirmed, the role it would carry once confirmed again.
+   */
   role: MemberRole,
-  created_at: Timestamp
+  created_at: Timestamp,
+  /*
+   * The five fields below exist since 0.14.0 and are optional only so that a
+   * client built against this contract can still read a service that predates
+   * them: absent means an ordinary, invited member.
+   */
+  source: MemberSource.optional(),
+  /** The company role last reported for the person (`members.syncCompanyRole`), or null. */
+  company_role: CompanyGrantRole.nullable().optional(),
+  /** When the dashboard last confirmed `company_role`; null without one. */
+  company_checked_at: Timestamp.nullable().optional(),
+  /** The person's own role in the workspace; null for a `company` row. */
+  direct_role: MemberRole.nullable().optional(),
+  /**
+   * True while `role` is held only through a confirmed company role. Such a
+   * member cannot be changed or removed here (`inherited_from_company`): the
+   * role is managed in the shared login. A `company` row with `inherited`
+   * false is one whose company role has not been confirmed within
+   * `COMPANY_ROLE_MAX_AGE_HOURS`; it grants nothing and an admin may remove it.
+   */
+  inherited: z11.boolean().optional()
+});
+var MAX_SYNC_COMPANIES = 100;
+var MemberCompanySync = z11.object({
+  email: Email,
+  name: z11.string().max(200).nullable().optional(),
+  companies: z11.array(z11.object({ company_id: CompanyId, role: CompanyGrantRole })).max(MAX_SYNC_COMPANIES).refine((list2) => new Set(list2.map((c) => c.company_id)).size === list2.length, "each company at most once")
+});
+var MemberCompanySyncResult = z11.object({
+  /** Workspaces in which the person now holds a company role they did not hold, or held differently, before this call. */
+  granted: z11.array(Id),
+  /** Workspaces in which a company role was taken away by this call. */
+  revoked: z11.array(Id),
+  /** Workspaces in which the person's company role was already as stated. */
+  unchanged: z11.array(Id)
 });
 var MemberCreate = z11.object({
   subject: z11.string().min(1).max(255),
@@ -4431,6 +4518,24 @@ var foundationRoutes = {
     access: "admin",
     phase: "S0"
   },
+  /**
+   * The dashboard states the signed-in person's owner and admin roles in
+   * companies, and the service brings the member lists in line (see
+   * `MemberCompanySync`). `dashboard` access: the dashboard's service token
+   * and the person's subject, no workspace. An API key is refused, and so is
+   * every trusted application: it is not in any `TRUSTED_APP_OPERATIONS` list
+   * and the handler refuses an application once more by itself.
+   */
+  "members.syncCompanyRole": {
+    method: "POST",
+    path: "/v1/members/company-sync",
+    body: MemberCompanySync,
+    response: MemberCompanySyncResult,
+    status: 200,
+    access: "dashboard",
+    phase: "S0",
+    statement: true
+  },
   "apiKeys.list": {
     method: "GET",
     path: "/v1/api-keys",
@@ -5734,7 +5839,7 @@ function trustedAppMayCall(app, id) {
   return TRUSTED_APP_OPERATIONS[app].includes(id);
 }
 function acceptsIdempotencyKey(route) {
-  return route.method !== "GET";
+  return route.method !== "GET" && route.statement !== true;
 }
 function buildPath(path, params = {}) {
   return path.replace(/:([a-z_]+)/g, (_, name) => {
@@ -5854,10 +5959,13 @@ export {
   BILLING_NOT_CONFIGURED_REASON,
   BoundedAutomationFilter,
   BoundedSegmentFilter,
+  COMPANY_GRANT_ROLES,
+  COMPANY_ROLE_MAX_AGE_HOURS,
   CONTACT_PROPERTY_TYPES,
   CatalogPlan,
   CheckoutRequest,
   CheckoutSession,
+  CompanyGrantRole,
   CompanyId,
   CompileMessage,
   CompileRequest,
@@ -5996,6 +6104,7 @@ export {
   MAX_STEPS,
   MAX_STEP_VISITS,
   MAX_SUBJECT_LENGTH,
+  MAX_SYNC_COMPANIES,
   MAX_TEMPLATE_INPUTS,
   MAX_TEMPLATE_INPUTS_APP_LENGTH,
   MAX_TEMPLATE_INPUTS_SEEN,
@@ -6006,6 +6115,7 @@ export {
   MAX_TEMPLATE_TRANSLATIONS,
   MAX_TRIGGERS,
   MEMBER_ROLES,
+  MEMBER_SOURCES,
   MERGE_FIELD_PATTERN,
   MESSAGE_OUTCOMES,
   MIN_SPLIT_BRANCHES,
@@ -6041,8 +6151,11 @@ export {
   MailingTestResult,
   MailingUpdate,
   Member,
+  MemberCompanySync,
+  MemberCompanySyncResult,
   MemberCreate,
   MemberRole,
+  MemberSource,
   MemberUpdate,
   MergeDefaultValue,
   MergeDefaults,
@@ -6143,6 +6256,11 @@ export {
   TEMPLATE_SORTS,
   TEMPLATE_SORT_DEFAULT_ORDER,
   TERMINAL_MAILING_STATUSES,
+  TRANSACTIONAL_BLOCKING_REASONS,
+  TRANSACTIONAL_NEEDS_LETTER_REFUSAL,
+  TRANSACTIONAL_NEEDS_TEMPLATE_LOCALE_REFUSAL,
+  TRANSACTIONAL_NOT_ALLOWED_REFUSAL,
+  TRANSACTIONAL_UNSUBSCRIBE_URL_REFUSAL,
   TRUSTED_APPS,
   TRUSTED_APP_OPERATIONS,
   Tag,

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.12.0",
+  "version": "0.14.0",
   "description": "The v1 API contract of the mail service: zod schemas and types for every request, response, error and webhook, the route table, and webhook signing helpers",
   "license": "MIT",
   "repository": {