@marlinjai/mail-contract 0.17.0 → 0.19.0

package/dist/index.js

@@ -43,6 +43,7 @@ __export(index_exports, {
   AbTestState: () => AbTestState,
   AbVariant: () => AbVariant,
   AbWinnerRequest: () => AbWinnerRequest,
+  AcceptTerms: () => AcceptTerms,
   ApiKey: () => ApiKey,
   ApiKeyCreate: () => ApiKeyCreate,
   ApiKeyCreated: () => ApiKeyCreated,
@@ -214,6 +215,7 @@ __export(index_exports, {
   InviteListQuery: () => InviteListQuery,
   InviteStatus: () => InviteStatus,
   JsonValue: () => JsonValue,
+  LEGAL_TERMS_VERSION: () => LEGAL_TERMS_VERSION,
   LETTER_ONLY_MERGE_FIELDS: () => LETTER_ONLY_MERGE_FIELDS,
   LETTER_RECIPIENT_REFUSAL: () => LETTER_RECIPIENT_REFUSAL,
   LIST_UNSUBSCRIBE_POST_VALUE: () => LIST_UNSUBSCRIBE_POST_VALUE,
@@ -623,6 +625,7 @@ __export(index_exports, {
   sameJson: () => sameJson,
   sampleMergeValue: () => sampleMergeValue,
   saveDemotions: () => saveDemotions,
+  sendingDomainRecordFullName: () => sendingDomainRecordFullName,
   sendingRoutes: () => sendingRoutes,
   setInsertionBy: () => setInsertionBy,
   setInsertionFilled: () => setInsertionFilled,
@@ -804,7 +807,7 @@ var API_VERSION_PREFIX = "/v1";
 var HEALTH_PATH = "/healthz";
 
 // src/workspace.ts
-var import_zod11 = require("zod");
+var import_zod12 = require("zod");
 
 // src/automations.ts
 var import_zod10 = require("zod");
@@ -3436,16 +3439,23 @@ var EventListQuery = PageQuery.extend({
   contact_id: Id.optional()
 });
 
+// src/legal.ts
+var import_zod11 = require("zod");
+var LEGAL_TERMS_VERSION = "2026-10-23";
+var AcceptTerms = import_zod11.z.literal(LEGAL_TERMS_VERSION, {
+  errorMap: () => ({ message: `must be "${LEGAL_TERMS_VERSION}": accept the current terms of service and processing agreement` })
+});
+
 // src/workspace.ts
-var CompanyId = import_zod11.z.string().min(1).max(64);
+var CompanyId = import_zod12.z.string().min(1).max(64);
 var ASSET_POLICIES = ["any", "service_only"];
-var AssetPolicy = import_zod11.z.enum(ASSET_POLICIES);
+var AssetPolicy = import_zod12.z.enum(ASSET_POLICIES);
 var MAX_ALLOWED_ASSET_HOSTS = 20;
-var AssetHost = import_zod11.z.string().trim().toLowerCase().min(1).max(253).regex(/^(?=.{1,253}(?::\d{1,5})?$)[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)+(:\d{1,5})?$/, "a host name such as example.com");
-var MergeDefaults = import_zod11.z.record(MergeFieldName, MergeDefaultValue).refine((m) => Object.keys(m).length <= MAX_MERGE_DEFAULTS, `at most ${MAX_MERGE_DEFAULTS} merge defaults`).refine((m) => !Object.keys(m).some((k) => k in RESERVED_MERGE_FIELDS), {
+var AssetHost = import_zod12.z.string().trim().toLowerCase().min(1).max(253).regex(/^(?=.{1,253}(?::\d{1,5})?$)[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)+(:\d{1,5})?$/, "a host name such as example.com");
+var MergeDefaults = import_zod12.z.record(MergeFieldName, MergeDefaultValue).refine((m) => Object.keys(m).length <= MAX_MERGE_DEFAULTS, `at most ${MAX_MERGE_DEFAULTS} merge defaults`).refine((m) => !Object.keys(m).some((k) => k in RESERVED_MERGE_FIELDS), {
   message: `a reserved merge field (${Object.keys(RESERVED_MERGE_FIELDS).join(", ")}) cannot have a workspace default`
 });
-var WorkspaceSettings = import_zod11.z.object({
+var WorkspaceSettings = import_zod12.z.object({
   /**
    * The workspace's main language (a {@link LocaleTag}, e.g. "de"): the main
    * language of a new template, and of the hosted pages when nothing else
@@ -3458,9 +3468,9 @@ var WorkspaceSettings = import_zod11.z.object({
    * each; the hosted pages are offered in those of them they support (English,
    * German, French, Italian, Spanish). The service stores canonical casing.
    */
-  locales: import_zod11.z.array(LocaleTag).min(1).max(20).refine((l) => new Set(l.map((t) => t.toLowerCase())).size === l.length, "a language appears twice"),
+  locales: import_zod12.z.array(LocaleTag).min(1).max(20).refine((l) => new Set(l.map((t) => t.toLowerCase())).size === l.length, "a language appears twice"),
   /** Open and click tracking. Off by default, opt-in per workspace. */
-  tracking_enabled: import_zod11.z.boolean(),
+  tracking_enabled: import_zod12.z.boolean(),
   /** Where images, stylesheets and fonts in a mail may load from. `any` by default. */
   asset_policy: AssetPolicy,
   /**
@@ -3468,7 +3478,7 @@ var WorkspaceSettings = import_zod11.z.object({
    * the workspace's website, typically. Empty by default. Ignored under `any`,
    * which allows everything already.
    */
-  allowed_asset_hosts: import_zod11.z.array(AssetHost).max(MAX_ALLOWED_ASSET_HOSTS),
+  allowed_asset_hosts: import_zod12.z.array(AssetHost).max(MAX_ALLOWED_ASSET_HOSTS),
   /** Merge values every mail of the workspace can use (see `MergeDefaults`). Empty by default. */
   merge_defaults: MergeDefaults,
   /**
@@ -3477,10 +3487,10 @@ var WorkspaceSettings = import_zod11.z.object({
    */
   default_timezone: TimezoneName.nullable()
 });
-var Workspace = import_zod11.z.object({
+var Workspace = import_zod12.z.object({
   id: Id,
   slug: Slug,
-  name: import_zod11.z.string().min(1).max(120),
+  name: import_zod12.z.string().min(1).max(120),
   settings: WorkspaceSettings,
   /**
    * The auth-brain company (tenant) the workspace was created for, or null for
@@ -3491,13 +3501,13 @@ var Workspace = import_zod11.z.object({
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var WorkspaceCreate = import_zod11.z.object({
+var WorkspaceCreate = import_zod12.z.object({
   slug: Slug,
-  name: import_zod11.z.string().min(1).max(120),
+  name: import_zod12.z.string().min(1).max(120),
   settings: WorkspaceSettings.partial().optional(),
-  owner: import_zod11.z.object({
+  owner: import_zod12.z.object({
     email: Email,
-    name: import_zod11.z.string().max(200).nullable().optional()
+    name: import_zod12.z.string().max(200).nullable().optional()
   }),
   /**
    * The auth-brain company the workspace is created in. Required since 0.14.0:
@@ -3506,27 +3516,33 @@ var WorkspaceCreate = import_zod11.z.object({
    * invitation (`members.syncCompanyRole`). A workspace created before, without
    * one, keeps working and simply has no such inheritance.
    */
-  company_id: CompanyId
+  company_id: CompanyId,
+  /**
+   * The person creating the workspace accepts the terms of service and the
+   * processing agreement for its company, of this version (required since
+   * 0.19.0): the workspace processes recipients' data from its first contact.
+   */
+  accept_terms: AcceptTerms
 });
-var WorkspaceUpdate = import_zod11.z.object({
-  name: import_zod11.z.string().min(1).max(120),
+var WorkspaceUpdate = import_zod12.z.object({
+  name: import_zod12.z.string().min(1).max(120),
   settings: WorkspaceSettings.partial()
 }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var WorkspaceMove = import_zod11.z.object({ company_id: CompanyId });
+var WorkspaceMove = import_zod12.z.object({ company_id: CompanyId });
 var MEMBER_ROLES = ["owner", "admin", "editor", "viewer"];
-var MemberRole = import_zod11.z.enum(MEMBER_ROLES);
+var MemberRole = import_zod12.z.enum(MEMBER_ROLES);
 var WorkspaceMembership = Workspace.extend({ role: MemberRole });
 var MEMBER_SOURCES = ["invited", "company"];
-var MemberSource = import_zod11.z.enum(MEMBER_SOURCES);
+var MemberSource = import_zod12.z.enum(MEMBER_SOURCES);
 var COMPANY_GRANT_ROLES = ["owner", "admin"];
-var CompanyGrantRole = import_zod11.z.enum(COMPANY_GRANT_ROLES);
+var CompanyGrantRole = import_zod12.z.enum(COMPANY_GRANT_ROLES);
 var COMPANY_ROLE_MAX_AGE_HOURS = 24;
-var Member = import_zod11.z.object({
+var Member = import_zod12.z.object({
   id: Id,
   /** The person's auth-brain subject. */
-  subject: import_zod11.z.string().min(1).max(255),
+  subject: import_zod12.z.string().min(1).max(255),
   email: Email,
-  name: import_zod11.z.string().max(200).nullable(),
+  name: import_zod12.z.string().max(200).nullable(),
   /**
    * The role in force: the higher of the person's own role in the workspace
    * and the one a confirmed company role carries. For a `company` row that is
@@ -3553,48 +3569,48 @@ var Member = import_zod11.z.object({
    * false is one whose company role has not been confirmed within
    * `COMPANY_ROLE_MAX_AGE_HOURS`; it grants nothing and an admin may remove it.
    */
-  inherited: import_zod11.z.boolean().optional()
+  inherited: import_zod12.z.boolean().optional()
 });
 var MAX_SYNC_COMPANIES = 100;
-var MemberCompanySync = import_zod11.z.object({
+var MemberCompanySync = import_zod12.z.object({
   email: Email,
-  name: import_zod11.z.string().max(200).nullable().optional(),
-  companies: import_zod11.z.array(import_zod11.z.object({ company_id: CompanyId, role: CompanyGrantRole })).max(MAX_SYNC_COMPANIES).refine((list2) => new Set(list2.map((c) => c.company_id)).size === list2.length, "each company at most once")
+  name: import_zod12.z.string().max(200).nullable().optional(),
+  companies: import_zod12.z.array(import_zod12.z.object({ company_id: CompanyId, role: CompanyGrantRole })).max(MAX_SYNC_COMPANIES).refine((list2) => new Set(list2.map((c) => c.company_id)).size === list2.length, "each company at most once")
 });
-var MemberCompanySyncResult = import_zod11.z.object({
+var MemberCompanySyncResult = import_zod12.z.object({
   /** Workspaces in which the person now holds a company role they did not hold, or held differently, before this call. */
-  granted: import_zod11.z.array(Id),
+  granted: import_zod12.z.array(Id),
   /** Workspaces in which a company role was taken away by this call. */
-  revoked: import_zod11.z.array(Id),
+  revoked: import_zod12.z.array(Id),
   /** Workspaces in which the person's company role was already as stated. */
-  unchanged: import_zod11.z.array(Id)
+  unchanged: import_zod12.z.array(Id)
 });
-var MemberCreate = import_zod11.z.object({
-  subject: import_zod11.z.string().min(1).max(255),
+var MemberCreate = import_zod12.z.object({
+  subject: import_zod12.z.string().min(1).max(255),
   email: Email,
-  name: import_zod11.z.string().max(200).nullable().optional(),
+  name: import_zod12.z.string().max(200).nullable().optional(),
   role: MemberRole
 });
-var MemberUpdate = import_zod11.z.object({ role: MemberRole });
+var MemberUpdate = import_zod12.z.object({ role: MemberRole });
 var API_KEY_SCOPES = ["full", "read", "send"];
-var ApiKeyScope = import_zod11.z.enum(API_KEY_SCOPES);
-var ApiKey = import_zod11.z.object({
+var ApiKeyScope = import_zod12.z.enum(API_KEY_SCOPES);
+var ApiKey = import_zod12.z.object({
   id: Id,
-  name: import_zod11.z.string().min(1).max(120),
+  name: import_zod12.z.string().min(1).max(120),
   /** The first characters of the key, for recognising it in a list. */
-  prefix: import_zod11.z.string().min(4).max(32),
+  prefix: import_zod12.z.string().min(4).max(32),
   scope: ApiKeyScope,
   last_used_at: Timestamp.nullable(),
   revoked_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var ApiKeyCreate = import_zod11.z.object({
-  name: import_zod11.z.string().min(1).max(120),
+var ApiKeyCreate = import_zod12.z.object({
+  name: import_zod12.z.string().min(1).max(120),
   /** Omitted means `full`. */
   scope: ApiKeyScope.optional()
 });
-var ApiKeyCreated = import_zod11.z.object({
-  key: import_zod11.z.string().min(20),
+var ApiKeyCreated = import_zod12.z.object({
+  key: import_zod12.z.string().min(20),
   api_key: ApiKey
 });
 var AUDIT_ACTIONS = [
@@ -3618,6 +3634,7 @@ var AUDIT_ACTIONS = [
   "sending_domain.created",
   "sending_domain.updated",
   "sending_domain.checked",
+  "sending_domain.records_written",
   "sending_domain.deleted",
   "topic.created",
   "topic.updated",
@@ -3689,14 +3706,14 @@ var AUDIT_ACTIONS = [
   "automation.run_ended",
   "event.recorded"
 ];
-var AuditAction = import_zod11.z.enum(AUDIT_ACTIONS);
+var AuditAction = import_zod12.z.enum(AUDIT_ACTIONS);
 var TRUSTED_APPS = ["booking"];
-var TrustedApp = import_zod11.z.enum(TRUSTED_APPS);
-var AuditActor = import_zod11.z.discriminatedUnion("type", [
-  import_zod11.z.object({
-    type: import_zod11.z.literal("member"),
+var TrustedApp = import_zod12.z.enum(TRUSTED_APPS);
+var AuditActor = import_zod12.z.discriminatedUnion("type", [
+  import_zod12.z.object({
+    type: import_zod12.z.literal("member"),
     member_id: Id,
-    subject: import_zod11.z.string().min(1),
+    subject: import_zod12.z.string().min(1),
     /**
      * The application the person acted through, when it was not the dashboard:
      * the service set it from the service token the call carried, so it is
@@ -3704,26 +3721,26 @@ var AuditActor = import_zod11.z.discriminatedUnion("type", [
      */
     app: TrustedApp.optional()
   }),
-  import_zod11.z.object({
-    type: import_zod11.z.literal("api_key"),
+  import_zod12.z.object({
+    type: import_zod12.z.literal("api_key"),
     api_key_id: Id,
     /**
      * Who the client's application said it was acting for, from
      * `ON_BEHALF_OF_HEADER`: reported by that application, never verified.
      * Absent when the call carried no label.
      */
-    on_behalf_of: import_zod11.z.string().min(1).max(ON_BEHALF_OF_MAX_LENGTH).optional()
+    on_behalf_of: import_zod12.z.string().min(1).max(ON_BEHALF_OF_MAX_LENGTH).optional()
   }),
   /** The service itself (the worker, a bounce, the hosted unsubscribe page). */
-  import_zod11.z.object({ type: import_zod11.z.literal("system"), reason: import_zod11.z.string().min(1).max(200) })
+  import_zod12.z.object({ type: import_zod12.z.literal("system"), reason: import_zod12.z.string().min(1).max(200) })
 ]);
-var AuditEntry = import_zod11.z.object({
+var AuditEntry = import_zod12.z.object({
   id: Id,
   action: AuditAction,
   actor: AuditActor,
-  target_type: import_zod11.z.string().min(1).max(64),
+  target_type: import_zod12.z.string().min(1).max(64),
   target_id: Id.nullable(),
-  details: import_zod11.z.record(import_zod11.z.unknown()),
+  details: import_zod12.z.record(import_zod12.z.unknown()),
   created_at: Timestamp
 });
 var AuditQuery = PageQuery.extend({
@@ -3732,12 +3749,12 @@ var AuditQuery = PageQuery.extend({
 });
 
 // src/invites.ts
-var import_zod12 = require("zod");
+var import_zod13 = require("zod");
 var INVITE_STATUSES = ["pending", "accepted", "revoked", "expired"];
-var InviteStatus = import_zod12.z.enum(INVITE_STATUSES);
+var InviteStatus = import_zod13.z.enum(INVITE_STATUSES);
 var DEFAULT_INVITE_TTL_DAYS = 7;
 var MAX_INVITE_TTL_DAYS = 30;
-var Invite = import_zod12.z.object({
+var Invite = import_zod13.z.object({
   id: Id,
   /** Stored lowercased; only a person signed in with this address can accept. */
   email: Email,
@@ -3745,32 +3762,32 @@ var Invite = import_zod12.z.object({
   /** Derived from the timestamps below, never stored. */
   status: InviteStatus,
   /** The member who invited, while they are still one (null after they left). */
-  invited_by: import_zod12.z.object({ member_id: Id.nullable(), email: Email.nullable() }),
+  invited_by: import_zod13.z.object({ member_id: Id.nullable(), email: Email.nullable() }),
   expires_at: Timestamp,
   accepted_at: Timestamp.nullable(),
   revoked_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var InviteCreate = import_zod12.z.object({
+var InviteCreate = import_zod13.z.object({
   email: Email,
   role: MemberRole,
-  expires_in_days: import_zod12.z.number().int().min(1).max(MAX_INVITE_TTL_DAYS).optional()
+  expires_in_days: import_zod13.z.number().int().min(1).max(MAX_INVITE_TTL_DAYS).optional()
 });
-var InviteCreated = import_zod12.z.object({
+var InviteCreated = import_zod13.z.object({
   invite: Invite,
-  token: import_zod12.z.string().min(32).max(128)
+  token: import_zod13.z.string().min(32).max(128)
 });
 var InviteListQuery = PageQuery.extend({
   status: InviteStatus.optional()
 });
-var InviteAccept = import_zod12.z.object({
-  token: import_zod12.z.string().min(32).max(128),
+var InviteAccept = import_zod13.z.object({
+  token: import_zod13.z.string().min(32).max(128),
   email: Email,
-  name: import_zod12.z.string().max(200).nullable().optional()
+  name: import_zod13.z.string().max(200).nullable().optional()
 });
-var InviteAccepted = import_zod12.z.object({
+var InviteAccepted = import_zod13.z.object({
   workspace: WorkspaceMembership,
-  already_member: import_zod12.z.boolean()
+  already_member: import_zod13.z.boolean()
 });
 var INVITE_REFUSAL_REASONS = ["email_mismatch", "inviter_lacks_role", "expired", "revoked", "accepted"];
 
@@ -4400,13 +4417,13 @@ function renameInsertionEverywhere(drafts, from, rawTo) {
 }
 
 // src/providers.ts
-var import_zod13 = require("zod");
+var import_zod14 = require("zod");
 var PROVIDER_KINDS = ["smtp", "resend"];
-var ProviderKind = import_zod13.z.enum(PROVIDER_KINDS);
-var ProviderPolicy = import_zod13.z.object({
-  daily_recipient_budget: import_zod13.z.number().int().min(1).max(1e7),
-  min_interval_ms: import_zod13.z.number().int().min(0).max(36e5),
-  max_recipients_per_message: import_zod13.z.number().int().min(1).max(1e3)
+var ProviderKind = import_zod14.z.enum(PROVIDER_KINDS);
+var ProviderPolicy = import_zod14.z.object({
+  daily_recipient_budget: import_zod14.z.number().int().min(1).max(1e7),
+  min_interval_ms: import_zod14.z.number().int().min(0).max(36e5),
+  max_recipients_per_message: import_zod14.z.number().int().min(1).max(1e3)
 });
 var ICLOUD_SMTP_POLICY = {
   daily_recipient_budget: 800,
@@ -4414,17 +4431,17 @@ var ICLOUD_SMTP_POLICY = {
   max_recipients_per_message: 1
 };
 var SMTP_SECURITY = ["tls", "starttls"];
-var SmtpConfigBase = import_zod13.z.object({
-  host: import_zod13.z.string().min(1).max(255),
-  port: import_zod13.z.number().int().min(1).max(65535),
+var SmtpConfigBase = import_zod14.z.object({
+  host: import_zod14.z.string().min(1).max(255),
+  port: import_zod14.z.number().int().min(1).max(65535),
   /** `tls` connects encrypted (465), `starttls` upgrades (587). Never plaintext. */
-  security: import_zod13.z.enum(SMTP_SECURITY),
-  username: import_zod13.z.string().min(1).max(255)
+  security: import_zod14.z.enum(SMTP_SECURITY),
+  username: import_zod14.z.string().min(1).max(255)
 });
-var ResendConfigBase = import_zod13.z.object({});
-var ProviderRejections = import_zod13.z.object({
-  count: import_zod13.z.number().int().min(0),
-  last_error: import_zod13.z.string().nullable(),
+var ResendConfigBase = import_zod14.z.object({});
+var ProviderRejections = import_zod14.z.object({
+  count: import_zod14.z.number().int().min(0),
+  last_error: import_zod14.z.string().nullable(),
   last_at: Timestamp.nullable(),
   /**
    * The last time the bounce circuit breaker tripped on one of this provider's
@@ -4434,59 +4451,59 @@ var ProviderRejections = import_zod13.z.object({
    * run's bounce blocks were undone and the mailing paused. `sample` is the
    * reply that tripped it.
    */
-  anomaly: import_zod13.z.object({
+  anomaly: import_zod14.z.object({
     at: Timestamp,
     /** `mailing`: one mailing was paused. `provider`: 5 refusals in a row with the same reply across the provider's sends (test sends and one-recipient mailings included) within 24 hours. */
-    scope: import_zod13.z.enum(["mailing", "provider"]),
+    scope: import_zod14.z.enum(["mailing", "provider"]),
     /**
      * True while the provider-wide breaker is open: no bounce blocks through
      * this provider, test sends refused and mailings not started or resumed
      * (`provider_anomaly`), until an admin clears it (`providers.clearAnomaly`).
      */
-    blocking: import_zod13.z.boolean(),
+    blocking: import_zod14.z.boolean(),
     mailing_id: Id.nullable(),
-    reason: import_zod13.z.string(),
-    sample: import_zod13.z.string()
+    reason: import_zod14.z.string(),
+    sample: import_zod14.z.string()
   }).nullable()
 });
-var ProviderEvents = import_zod13.z.object({
-  status: import_zod13.z.enum(["active", "needs_secret"]),
-  source: import_zod13.z.enum(["automatic", "manual", "managed"]).nullable(),
-  url: import_zod13.z.string().url(),
-  error: import_zod13.z.string().nullable(),
+var ProviderEvents = import_zod14.z.object({
+  status: import_zod14.z.enum(["active", "needs_secret"]),
+  source: import_zod14.z.enum(["automatic", "manual", "managed"]).nullable(),
+  url: import_zod14.z.string().url(),
+  error: import_zod14.z.string().nullable(),
   /**
    * Events that named an email this provider never sent through the service
    * (another workspace or system sharing the Resend account): counted, never
    * acted on.
    */
-  unmatched: import_zod13.z.number().int().min(0)
+  unmatched: import_zod14.z.number().int().min(0)
 });
 var RESEND_EVENT_TYPES = ["email.bounced", "email.complained", "email.delivery_delayed"];
-var ResendSigningSecret = import_zod13.z.string().max(200).regex(/^whsec_[A-Za-z0-9+/]{16,}={0,2}$/, "must be the signing secret Resend shows, starting with whsec_");
-var ProviderEventsSecret = import_zod13.z.object({ signing_secret: ResendSigningSecret });
+var ResendSigningSecret = import_zod14.z.string().max(200).regex(/^whsec_[A-Za-z0-9+/]{16,}={0,2}$/, "must be the signing secret Resend shows, starting with whsec_");
+var ProviderEventsSecret = import_zod14.z.object({ signing_secret: ResendSigningSecret });
 var ProviderFields = {
-  name: import_zod13.z.string().min(1).max(120),
-  from_name: import_zod13.z.string().min(1).max(120),
+  name: import_zod14.z.string().min(1).max(120),
+  from_name: import_zod14.z.string().min(1).max(120),
   from_email: Email,
   reply_to: Email.nullable(),
   policy: ProviderPolicy
 };
-var Provider = import_zod13.z.discriminatedUnion("kind", [
-  import_zod13.z.object({
+var Provider = import_zod14.z.discriminatedUnion("kind", [
+  import_zod14.z.object({
     id: Id,
-    kind: import_zod13.z.literal("smtp"),
+    kind: import_zod14.z.literal("smtp"),
     config: SmtpConfigBase,
-    has_secret: import_zod13.z.boolean(),
+    has_secret: import_zod14.z.boolean(),
     ...ProviderFields,
     rejections: ProviderRejections,
     created_at: Timestamp,
     updated_at: Timestamp
   }),
-  import_zod13.z.object({
+  import_zod14.z.object({
     id: Id,
-    kind: import_zod13.z.literal("resend"),
+    kind: import_zod14.z.literal("resend"),
     config: ResendConfigBase,
-    has_secret: import_zod13.z.boolean(),
+    has_secret: import_zod14.z.boolean(),
     ...ProviderFields,
     rejections: ProviderRejections,
     events: ProviderEvents,
@@ -4494,31 +4511,31 @@ var Provider = import_zod13.z.discriminatedUnion("kind", [
     updated_at: Timestamp
   })
 ]);
-var ProviderCreate = import_zod13.z.discriminatedUnion("kind", [
-  import_zod13.z.object({
-    kind: import_zod13.z.literal("smtp"),
-    config: SmtpConfigBase.extend({ password: import_zod13.z.string().min(1).max(1024) }),
+var ProviderCreate = import_zod14.z.discriminatedUnion("kind", [
+  import_zod14.z.object({
+    kind: import_zod14.z.literal("smtp"),
+    config: SmtpConfigBase.extend({ password: import_zod14.z.string().min(1).max(1024) }),
     ...ProviderFields
   }),
-  import_zod13.z.object({
-    kind: import_zod13.z.literal("resend"),
-    config: ResendConfigBase.extend({ api_key: import_zod13.z.string().min(1).max(1024) }),
+  import_zod14.z.object({
+    kind: import_zod14.z.literal("resend"),
+    config: ResendConfigBase.extend({ api_key: import_zod14.z.string().min(1).max(1024) }),
     ...ProviderFields
   })
 ]);
-var ProviderUpdate = import_zod13.z.discriminatedUnion("kind", [
-  import_zod13.z.object({
-    kind: import_zod13.z.literal("smtp"),
-    config: SmtpConfigBase.extend({ password: import_zod13.z.string().min(1).max(1024).optional() }).partial().optional(),
+var ProviderUpdate = import_zod14.z.discriminatedUnion("kind", [
+  import_zod14.z.object({
+    kind: import_zod14.z.literal("smtp"),
+    config: SmtpConfigBase.extend({ password: import_zod14.z.string().min(1).max(1024).optional() }).partial().optional(),
     name: ProviderFields.name.optional(),
     from_name: ProviderFields.from_name.optional(),
     from_email: ProviderFields.from_email.optional(),
     reply_to: ProviderFields.reply_to.optional(),
     policy: ProviderPolicy.partial().optional()
   }),
-  import_zod13.z.object({
-    kind: import_zod13.z.literal("resend"),
-    config: ResendConfigBase.extend({ api_key: import_zod13.z.string().min(1).max(1024).optional() }).optional(),
+  import_zod14.z.object({
+    kind: import_zod14.z.literal("resend"),
+    config: ResendConfigBase.extend({ api_key: import_zod14.z.string().min(1).max(1024).optional() }).optional(),
     name: ProviderFields.name.optional(),
     from_name: ProviderFields.from_name.optional(),
     from_email: ProviderFields.from_email.optional(),
@@ -4526,98 +4543,109 @@ var ProviderUpdate = import_zod13.z.discriminatedUnion("kind", [
     policy: ProviderPolicy.partial().optional()
   })
 ]);
-var ProviderUsage = import_zod13.z.object({
+var ProviderUsage = import_zod14.z.object({
   provider_id: Id,
-  recipients_last_24h: import_zod13.z.number().int().min(0),
-  remaining_budget: import_zod13.z.number().int().min(0),
+  recipients_last_24h: import_zod14.z.number().int().min(0),
+  remaining_budget: import_zod14.z.number().int().min(0),
   /** When enough of the rolling window frees up to send again, if exhausted. */
   next_capacity_at: Timestamp.nullable()
 });
-var ProviderVerifyResult = import_zod13.z.object({
-  ok: import_zod13.z.boolean(),
-  error: import_zod13.z.string().nullable()
+var ProviderVerifyResult = import_zod14.z.object({
+  ok: import_zod14.z.boolean(),
+  error: import_zod14.z.string().nullable()
 });
 
 // src/sending-domains.ts
-var import_zod14 = require("zod");
+var import_zod15 = require("zod");
 var SENDING_DOMAIN_STATUSES = ["pending_dns", "verifying", "verified", "failed", "temporary_failure"];
-var SendingDomainStatus = import_zod14.z.enum(SENDING_DOMAIN_STATUSES);
+var SendingDomainStatus = import_zod15.z.enum(SENDING_DOMAIN_STATUSES);
 var SENDING_DOMAIN_DNS_MODES = ["manual", "managed"];
-var SendingDomainDnsMode = import_zod14.z.enum(SENDING_DOMAIN_DNS_MODES);
+var SendingDomainDnsMode = import_zod15.z.enum(SENDING_DOMAIN_DNS_MODES);
 var SENDING_DOMAIN_REGION = "eu-west-1";
-var SendingDomainName = import_zod14.z.string().trim().toLowerCase().max(253).regex(
+var SendingDomainName = import_zod15.z.string().trim().toLowerCase().max(253).regex(
   /^(?=.{1,253}$)(?!-)[a-z0-9-]{1,63}(?<!-)(\.(?!-)[a-z0-9-]{1,63}(?<!-))*\.[a-z]{2,63}$/,
   "must be a domain such as example.com, without https:// or an @"
 );
-var SendingDomainRecord = import_zod14.z.object({
-  record: import_zod14.z.string().max(40),
-  name: import_zod14.z.string().max(253),
-  type: import_zod14.z.string().max(10),
-  value: import_zod14.z.string().max(4096),
-  ttl: import_zod14.z.string().max(20),
-  status: import_zod14.z.string().max(40),
-  priority: import_zod14.z.number().int().min(0).max(65535).optional()
-});
-var SendingDomain = import_zod14.z.object({
+var SendingDomainRecord = import_zod15.z.object({
+  record: import_zod15.z.string().max(40),
+  name: import_zod15.z.string().max(253),
+  type: import_zod15.z.string().max(10),
+  value: import_zod15.z.string().max(4096),
+  ttl: import_zod15.z.string().max(20),
+  status: import_zod15.z.string().max(40),
+  priority: import_zod15.z.number().int().min(0).max(65535).optional()
+});
+function sendingDomainRecordFullName(domain, name) {
+  const d = domain.toLowerCase();
+  const n = name.toLowerCase().replace(/\.$/, "");
+  if (n === "@" || n === "") return d;
+  const labels = d.split(".");
+  for (let k = labels.length - 2; k >= 1; k--) {
+    const sub = labels.slice(0, k).join(".");
+    if (n === sub || n.endsWith(`.${sub}`)) return `${n}.${labels.slice(k).join(".")}`;
+  }
+  return `${n}.${d}`;
+}
+var SendingDomain = import_zod15.z.object({
   id: Id,
-  domain: import_zod14.z.string(),
-  from_name: import_zod14.z.string(),
+  domain: import_zod15.z.string(),
+  from_name: import_zod15.z.string(),
   from_email: Email,
   reply_to: Email.nullable(),
   status: SendingDomainStatus,
   dns_mode: SendingDomainDnsMode,
-  records: import_zod14.z.array(SendingDomainRecord),
+  records: import_zod15.z.array(SendingDomainRecord),
   provider_id: Id.nullable(),
   checked_at: Timestamp.nullable(),
   verified_at: Timestamp.nullable(),
-  last_error: import_zod14.z.string().nullable(),
+  last_error: import_zod15.z.string().nullable(),
   created_at: Timestamp,
   updated_at: Timestamp
 });
 var SenderFields = {
-  from_name: import_zod14.z.string().trim().min(1).max(120),
+  from_name: import_zod15.z.string().trim().min(1).max(120),
   from_email: Email,
   reply_to: Email.nullable().optional()
 };
 function senderOnDomain(input, ctx) {
   const at = input.from_email.lastIndexOf("@");
   if (at < 0 || input.from_email.slice(at + 1).toLowerCase() !== input.domain) {
-    ctx.addIssue({ code: import_zod14.z.ZodIssueCode.custom, path: ["from_email"], message: `must be an address on ${input.domain}` });
+    ctx.addIssue({ code: import_zod15.z.ZodIssueCode.custom, path: ["from_email"], message: `must be an address on ${input.domain}` });
   }
 }
-var SendingDomainCreate = import_zod14.z.object({ domain: SendingDomainName, ...SenderFields }).superRefine(senderOnDomain);
-var SendingDomainUpdate = import_zod14.z.object({ from_name: SenderFields.from_name.optional(), from_email: Email.optional(), reply_to: Email.nullable().optional() }).refine((v) => Object.keys(v).length > 0, "nothing to change");
+var SendingDomainCreate = import_zod15.z.object({ domain: SendingDomainName, ...SenderFields }).superRefine(senderOnDomain);
+var SendingDomainUpdate = import_zod15.z.object({ from_name: SenderFields.from_name.optional(), from_email: Email.optional(), reply_to: Email.nullable().optional() }).refine((v) => Object.keys(v).length > 0, "nothing to change");
 
 // src/contacts.ts
-var import_zod15 = require("zod");
-var Topic = import_zod15.z.object({
+var import_zod16 = require("zod");
+var Topic = import_zod16.z.object({
   id: Id,
   slug: Slug,
-  name: import_zod15.z.string().min(1).max(120),
+  name: import_zod16.z.string().min(1).max(120),
   /** Shown on the hosted preference page. */
-  description: import_zod15.z.string().max(1e3).nullable(),
+  description: import_zod16.z.string().max(1e3).nullable(),
   /** Translations of `name` and `description` per locale, for the hosted page. */
-  translations: import_zod15.z.record(
-    import_zod15.z.object({ name: import_zod15.z.string().min(1).max(120), description: import_zod15.z.string().max(1e3).nullable() })
+  translations: import_zod16.z.record(
+    import_zod16.z.object({ name: import_zod16.z.string().min(1).max(120), description: import_zod16.z.string().max(1e3).nullable() })
   ),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var TopicCreate = import_zod15.z.object({
+var TopicCreate = import_zod16.z.object({
   slug: Slug,
-  name: import_zod15.z.string().min(1).max(120),
-  description: import_zod15.z.string().max(1e3).optional(),
+  name: import_zod16.z.string().min(1).max(120),
+  description: import_zod16.z.string().max(1e3).optional(),
   translations: Topic.shape.translations.optional()
 });
 var TopicUpdate = TopicCreate.omit({ slug: true }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var Contact = import_zod15.z.object({
+var Contact = import_zod16.z.object({
   id: Id,
-  external_id: import_zod15.z.string().min(1).max(255).nullable(),
+  external_id: import_zod16.z.string().min(1).max(255).nullable(),
   /** Stored lowercased, unique per workspace. */
   email: Email,
-  first_name: import_zod15.z.string().max(200).nullable(),
-  last_name: import_zod15.z.string().max(200).nullable(),
-  locale: import_zod15.z.string().min(2).max(35).nullable(),
+  first_name: import_zod16.z.string().max(200).nullable(),
+  last_name: import_zod16.z.string().max(200).nullable(),
+  locale: import_zod16.z.string().min(2).max(35).nullable(),
   /**
    * The person's own time zone, an IANA name such as `Europe/Berlin` (A1).
    * Every wall clock an automation waits for is read in it, falling back to the
@@ -4625,65 +4653,65 @@ var Contact = import_zod15.z.object({
    */
   timezone: TimezoneName.nullable(),
   properties: Properties,
-  topics: import_zod15.z.array(Slug),
+  topics: import_zod16.z.array(Slug),
   /** The slugs of the contact's tags (S4). */
-  tags: import_zod15.z.array(Slug),
+  tags: import_zod16.z.array(Slug),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var ContactUpsert = import_zod15.z.object({
-  external_id: import_zod15.z.string().min(1).max(255).optional(),
+var ContactUpsert = import_zod16.z.object({
+  external_id: import_zod16.z.string().min(1).max(255).optional(),
   email: Email.optional(),
-  first_name: import_zod15.z.string().max(200).nullable().optional(),
-  last_name: import_zod15.z.string().max(200).nullable().optional(),
-  locale: import_zod15.z.string().min(2).max(35).nullable().optional(),
+  first_name: import_zod16.z.string().max(200).nullable().optional(),
+  last_name: import_zod16.z.string().max(200).nullable().optional(),
+  locale: import_zod16.z.string().min(2).max(35).nullable().optional(),
   timezone: TimezoneName.nullable().optional(),
   properties: Properties.optional(),
-  topics: import_zod15.z.array(Slug).max(100).optional()
+  topics: import_zod16.z.array(Slug).max(100).optional()
 }).refine((v) => v.external_id !== void 0 || v.email !== void 0, {
   message: "external_id or email is required",
   path: ["email"]
 });
-var ContactUpsertResult = import_zod15.z.object({
+var ContactUpsertResult = import_zod16.z.object({
   contact: Contact,
-  created: import_zod15.z.boolean()
+  created: import_zod16.z.boolean()
 });
 var ContactListQuery = PageQuery.extend({
-  email: import_zod15.z.string().min(1).max(254).optional(),
-  external_id: import_zod15.z.string().min(1).max(255).optional(),
+  email: import_zod16.z.string().min(1).max(254).optional(),
+  external_id: import_zod16.z.string().min(1).max(255).optional(),
   topic: Slug.optional()
 });
-var ContactErased = import_zod15.z.object({
-  ok: import_zod15.z.literal(true),
-  erased_messages: import_zod15.z.number().int().min(0),
-  erased_recipients: import_zod15.z.number().int().min(0),
-  suppressions_kept: import_zod15.z.number().int().min(0)
+var ContactErased = import_zod16.z.object({
+  ok: import_zod16.z.literal(true),
+  erased_messages: import_zod16.z.number().int().min(0),
+  erased_recipients: import_zod16.z.number().int().min(0),
+  suppressions_kept: import_zod16.z.number().int().min(0)
 });
 var SUPPRESSION_REASONS = ["unsubscribed", "bounced", "complained", "manual"];
-var SuppressionReason = import_zod15.z.enum(SUPPRESSION_REASONS);
-var Suppression = import_zod15.z.object({
+var SuppressionReason = import_zod16.z.enum(SUPPRESSION_REASONS);
+var Suppression = import_zod16.z.object({
   id: Id,
   email: Email,
   reason: SuppressionReason,
   topic: Slug.nullable(),
   source_message_id: Id.nullable(),
-  note: import_zod15.z.string().max(1e3).nullable(),
+  note: import_zod16.z.string().max(1e3).nullable(),
   created_at: Timestamp
 });
-var SuppressionCreate = import_zod15.z.object({
+var SuppressionCreate = import_zod16.z.object({
   email: Email,
-  reason: import_zod15.z.enum(["manual", "unsubscribed"]),
+  reason: import_zod16.z.enum(["manual", "unsubscribed"]),
   topic: Slug.nullable().optional(),
-  note: import_zod15.z.string().max(1e3).optional()
+  note: import_zod16.z.string().max(1e3).optional()
 });
 var SuppressionListQuery = PageQuery.extend({
-  email: import_zod15.z.string().min(1).max(254).optional(),
+  email: import_zod16.z.string().min(1).max(254).optional(),
   reason: SuppressionReason.optional(),
   topic: Slug.optional()
 });
 
 // src/webhooks.ts
-var import_zod16 = require("zod");
+var import_zod17 = require("zod");
 var WEBHOOK_EVENT_TYPES = [
   "message.sent",
   "message.failed",
@@ -4727,23 +4755,23 @@ var WEBHOOK_EVENT_TYPES = [
   "template.updated",
   "template.deleted"
 ];
-var WebhookEventType = import_zod16.z.enum(WEBHOOK_EVENT_TYPES);
-var MessageEventBase = import_zod16.z.object({
+var WebhookEventType = import_zod17.z.enum(WEBHOOK_EVENT_TYPES);
+var MessageEventBase = import_zod17.z.object({
   message_id: Id,
   mailing_id: Id.nullable(),
   mailing_metadata: MailingMetadata.nullable(),
   recipient_id: Id.nullable(),
   contact_id: Id.nullable(),
-  external_id: import_zod16.z.string().nullable(),
+  external_id: import_zod17.z.string().nullable(),
   email: Email,
-  subject: import_zod16.z.string(),
+  subject: import_zod17.z.string(),
   topic: Slug.nullable(),
-  provider_message_id: import_zod16.z.string().nullable(),
-  is_test: import_zod16.z.boolean()
+  provider_message_id: import_zod17.z.string().nullable(),
+  is_test: import_zod17.z.boolean()
 });
 var MessageSentData = MessageEventBase.extend({
   /** The final HTML as sent, so the client can archive it beside its own records. */
-  html: import_zod16.z.string(),
+  html: import_zod17.z.string(),
   sent_at: Timestamp,
   /**
    * The choice each insertion made (see `Message.insertions`); absent or null
@@ -4754,20 +4782,20 @@ var MessageSentData = MessageEventBase.extend({
   insertions: InsertionChoices.nullish()
 });
 var MessageFailedData = MessageEventBase.extend({
-  error: import_zod16.z.string(),
+  error: import_zod17.z.string(),
   /** False when the provider rejected permanently; the recipient will not be retried. */
-  retryable: import_zod16.z.boolean(),
+  retryable: import_zod17.z.boolean(),
   failed_at: Timestamp
 });
 var UNSUBSCRIBE_SOURCES = ["hosted_page", "one_click", "api", "dashboard", "signup_form"];
-var ContactUnsubscribedData = import_zod16.z.object({
+var ContactUnsubscribedData = import_zod17.z.object({
   contact_id: Id.nullable(),
-  external_id: import_zod16.z.string().nullable(),
+  external_id: import_zod17.z.string().nullable(),
   email: Email,
   /** The topic unsubscribed from; null means every topic. */
   topic: Slug.nullable(),
   mailing_id: Id.nullable(),
-  source: import_zod16.z.enum(UNSUBSCRIBE_SOURCES),
+  source: import_zod17.z.enum(UNSUBSCRIBE_SOURCES),
   unsubscribed_at: Timestamp
 });
 var ContactResubscribedData = ContactUnsubscribedData.omit({ unsubscribed_at: true }).extend({
@@ -4776,142 +4804,142 @@ var ContactResubscribedData = ContactUnsubscribedData.omit({ unsubscribed_at: tr
    * breaker undid a `bounced` block it judged false (a `contact.bounced` for the
    * same address and mailing went out before); `topic` is null.
    */
-  source: import_zod16.z.enum([...UNSUBSCRIBE_SOURCES, "bounce_reverted"]),
+  source: import_zod17.z.enum([...UNSUBSCRIBE_SOURCES, "bounce_reverted"]),
   resubscribed_at: Timestamp
 });
-var ContactBouncedData = import_zod16.z.object({
+var ContactBouncedData = import_zod17.z.object({
   contact_id: Id.nullable(),
-  external_id: import_zod16.z.string().nullable(),
+  external_id: import_zod17.z.string().nullable(),
   email: Email,
   /** `bounced` for a hard bounce, `complained` for a spam complaint. */
-  reason: import_zod16.z.enum(["bounced", "complained"]),
+  reason: import_zod17.z.enum(["bounced", "complained"]),
   message_id: Id.nullable(),
-  diagnostic: import_zod16.z.string().nullable(),
+  diagnostic: import_zod17.z.string().nullable(),
   bounced_at: Timestamp
 });
-var MailingFinishedData = import_zod16.z.object({
+var MailingFinishedData = import_zod17.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  status: import_zod16.z.enum(["sent", "partially_failed", "cancelled"]),
+  status: import_zod17.z.enum(["sent", "partially_failed", "cancelled"]),
   counts: MailingCounts,
   finished_at: Timestamp
 });
-var ContactSubscribedData = import_zod16.z.object({
+var ContactSubscribedData = import_zod17.z.object({
   contact_id: Id,
-  external_id: import_zod16.z.string().nullable(),
+  external_id: import_zod17.z.string().nullable(),
   email: Email,
-  topics: import_zod16.z.array(Slug),
-  source: import_zod16.z.enum(["signup_form", "api", "dashboard", "automation"]),
+  topics: import_zod17.z.array(Slug),
+  source: import_zod17.z.enum(["signup_form", "api", "dashboard", "automation"]),
   signup_form_id: Id.nullable(),
-  signup_form_version: import_zod16.z.number().int().min(1).nullable(),
+  signup_form_version: import_zod17.z.number().int().min(1).nullable(),
   subscribed_at: Timestamp
 });
-var ImportFinishedData = import_zod16.z.object({
+var ImportFinishedData = import_zod17.z.object({
   import_id: Id,
-  status: import_zod16.z.enum(["completed", "cancelled", "failed"]),
+  status: import_zod17.z.enum(["completed", "cancelled", "failed"]),
   result: ImportReport.nullable(),
-  error: import_zod16.z.string().nullable(),
+  error: import_zod17.z.string().nullable(),
   finished_at: Timestamp
 });
-var MailingScheduledData = import_zod16.z.object({
+var MailingScheduledData = import_zod17.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
   scheduled_at: Timestamp.nullable()
 });
-var MailingStartedData = import_zod16.z.object({
+var MailingStartedData = import_zod17.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  trigger: import_zod16.z.enum(["send", "schedule"]),
-  recipients: import_zod16.z.number().int().min(0),
+  trigger: import_zod17.z.enum(["send", "schedule"]),
+  recipients: import_zod17.z.number().int().min(0),
   started_at: Timestamp
 });
-var MailingScheduleFailedData = import_zod16.z.object({
+var MailingScheduleFailedData = import_zod17.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  code: import_zod16.z.string(),
-  message: import_zod16.z.string(),
+  code: import_zod17.z.string(),
+  message: import_zod17.z.string(),
   failed_at: Timestamp
 });
-var MailingAbWinnerSelectedData = import_zod16.z.object({
+var MailingAbWinnerSelectedData = import_zod17.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  winner: import_zod16.z.string(),
-  decided_by: import_zod16.z.enum(["metric", "manual"]),
-  variants: import_zod16.z.array(VariantAnalytics),
+  winner: import_zod17.z.string(),
+  decided_by: import_zod17.z.enum(["metric", "manual"]),
+  variants: import_zod17.z.array(VariantAnalytics),
   decided_at: Timestamp
 });
-var ContactTaggedData = import_zod16.z.object({
+var ContactTaggedData = import_zod17.z.object({
   contact_id: Id,
-  external_id: import_zod16.z.string().nullable(),
+  external_id: import_zod17.z.string().nullable(),
   email: Email,
   /** Only the tags the contact did not already have. */
-  tags: import_zod16.z.array(Slug).min(1),
-  source: import_zod16.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
+  tags: import_zod17.z.array(Slug).min(1),
+  source: import_zod17.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
   tagged_at: Timestamp
 });
-var ContactUpdatedData = import_zod16.z.object({
+var ContactUpdatedData = import_zod17.z.object({
   contact_id: Id,
-  external_id: import_zod16.z.string().nullable(),
+  external_id: import_zod17.z.string().nullable(),
   email: Email,
-  changed: import_zod16.z.array(import_zod16.z.string()).min(1),
+  changed: import_zod17.z.array(import_zod17.z.string()).min(1),
   properties: Properties,
-  source: import_zod16.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
+  source: import_zod17.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
   updated_at: Timestamp
 });
-var AutomationRunEventBase = import_zod16.z.object({
+var AutomationRunEventBase = import_zod17.z.object({
   automation_id: Id,
-  automation_name: import_zod16.z.string(),
+  automation_name: import_zod17.z.string(),
   run_id: Id,
-  version: import_zod16.z.number().int().min(1),
+  version: import_zod17.z.number().int().min(1),
   contact_id: Id,
-  external_id: import_zod16.z.string().nullable(),
+  external_id: import_zod17.z.string().nullable(),
   email: Email
 });
 var AutomationRunStartedData = AutomationRunEventBase.extend({
   /** What let them in: a trigger kind, or `manual` for an explicit enrolment. */
-  trigger_kind: import_zod16.z.string(),
+  trigger_kind: import_zod17.z.string(),
   entered_at: Timestamp
 });
 var AutomationRunCompletedData = AutomationRunEventBase.extend({
-  last_step_id: import_zod16.z.string().nullable(),
+  last_step_id: import_zod17.z.string().nullable(),
   completed_at: Timestamp
 });
 var AutomationRunExitedData = AutomationRunEventBase.extend({
   reason: AutomationEndReason,
-  step_id: import_zod16.z.string().nullable(),
+  step_id: import_zod17.z.string().nullable(),
   exited_at: Timestamp
 });
 var AutomationRunFailedData = AutomationRunEventBase.extend({
-  reason: import_zod16.z.string(),
-  step_id: import_zod16.z.string().nullable(),
+  reason: import_zod17.z.string(),
+  step_id: import_zod17.z.string().nullable(),
   failed_at: Timestamp
 });
 var AutomationWebhookData = AutomationRunEventBase.extend({
-  step_id: import_zod16.z.string(),
+  step_id: import_zod17.z.string(),
   /** The step's own label, when it was given one, so a receiver can branch on a name. */
-  step_label: import_zod16.z.string().nullable(),
+  step_label: import_zod17.z.string().nullable(),
   /** Whatever the step carries, verbatim. Null when it carries nothing. */
   payload: JsonValue.nullable(),
   fired_at: Timestamp
 });
-var TemplateEventBase = import_zod16.z.object({
+var TemplateEventBase = import_zod17.z.object({
   template_id: Id,
-  name: import_zod16.z.string().min(1).max(200),
-  version: import_zod16.z.number().int().min(1),
-  source: import_zod16.z.enum(["api", "dashboard", "mjml_import"])
+  name: import_zod17.z.string().min(1).max(200),
+  version: import_zod17.z.number().int().min(1),
+  source: import_zod17.z.enum(["api", "dashboard", "mjml_import"])
 });
 var TemplateCreatedData = TemplateEventBase.extend({ created_at: Timestamp });
-var TemplateUpdatedData = TemplateEventBase.extend({ archived: import_zod16.z.boolean(), updated_at: Timestamp });
+var TemplateUpdatedData = TemplateEventBase.extend({ archived: import_zod17.z.boolean(), updated_at: Timestamp });
 var TemplateDeletedData = TemplateEventBase.extend({ deleted_at: Timestamp });
-var envelope = (type, data) => import_zod16.z.object({
+var envelope = (type, data) => import_zod17.z.object({
   /** Unique per event: a receiver deduplicates on it (deliveries may repeat). */
   id: Id,
-  type: import_zod16.z.literal(type),
+  type: import_zod17.z.literal(type),
   created_at: Timestamp,
   workspace_id: Id,
   data
 });
-var WebhookEvent = import_zod16.z.discriminatedUnion("type", [
+var WebhookEvent = import_zod17.z.discriminatedUnion("type", [
   envelope("message.sent", MessageSentData),
   envelope("message.failed", MessageFailedData),
   envelope("contact.unsubscribed", ContactUnsubscribedData),
@@ -4935,16 +4963,16 @@ var WebhookEvent = import_zod16.z.discriminatedUnion("type", [
   envelope("template.updated", TemplateUpdatedData),
   envelope("template.deleted", TemplateDeletedData)
 ]);
-var WebhookEndpoint = import_zod16.z.object({
+var WebhookEndpoint = import_zod17.z.object({
   id: Id,
-  url: import_zod16.z.string().url(),
-  description: import_zod16.z.string().max(500).nullable(),
-  events: import_zod16.z.array(WebhookEventType).min(1),
-  enabled: import_zod16.z.boolean(),
+  url: import_zod17.z.string().url(),
+  description: import_zod17.z.string().max(500).nullable(),
+  events: import_zod17.z.array(WebhookEventType).min(1),
+  enabled: import_zod17.z.boolean(),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var WebhookUrl = import_zod16.z.string().url().refine((u) => {
+var WebhookUrl = import_zod17.z.string().url().refine((u) => {
   try {
     const url = new URL(u);
     if (url.protocol === "https:") return true;
@@ -4953,35 +4981,35 @@ var WebhookUrl = import_zod16.z.string().url().refine((u) => {
     return false;
   }
 }, "must be https (http only for localhost)");
-var WebhookEndpointCreate = import_zod16.z.object({
+var WebhookEndpointCreate = import_zod17.z.object({
   url: WebhookUrl,
-  description: import_zod16.z.string().max(500).optional(),
-  events: import_zod16.z.array(WebhookEventType).min(1),
-  enabled: import_zod16.z.boolean().optional()
+  description: import_zod17.z.string().max(500).optional(),
+  events: import_zod17.z.array(WebhookEventType).min(1),
+  enabled: import_zod17.z.boolean().optional()
 });
-var WebhookEndpointUpdate = import_zod16.z.object({
+var WebhookEndpointUpdate = import_zod17.z.object({
   url: WebhookUrl,
-  description: import_zod16.z.string().max(500).nullable(),
-  events: import_zod16.z.array(WebhookEventType).min(1),
-  enabled: import_zod16.z.boolean()
+  description: import_zod17.z.string().max(500).nullable(),
+  events: import_zod17.z.array(WebhookEventType).min(1),
+  enabled: import_zod17.z.boolean()
 }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var WebhookEndpointWithSecret = import_zod16.z.object({
+var WebhookEndpointWithSecret = import_zod17.z.object({
   endpoint: WebhookEndpoint,
-  secret: import_zod16.z.string().min(32)
+  secret: import_zod17.z.string().min(32)
 });
 var WEBHOOK_DELIVERY_STATUSES = ["pending", "succeeded", "failed"];
-var WebhookDeliveryStatus = import_zod16.z.enum(WEBHOOK_DELIVERY_STATUSES);
+var WebhookDeliveryStatus = import_zod17.z.enum(WEBHOOK_DELIVERY_STATUSES);
 var WEBHOOK_MAX_ATTEMPTS = 8;
 var WEBHOOK_RETRY_DELAYS_SECONDS = [30, 120, 600, 1800, 3600, 7200, 21600];
-var WebhookDelivery = import_zod16.z.object({
+var WebhookDelivery = import_zod17.z.object({
   id: Id,
   endpoint_id: Id,
   event_id: Id,
   event_type: WebhookEventType,
   status: WebhookDeliveryStatus,
-  attempts: import_zod16.z.number().int().min(0),
-  last_status_code: import_zod16.z.number().int().min(100).max(599).nullable(),
-  last_error: import_zod16.z.string().nullable(),
+  attempts: import_zod17.z.number().int().min(0),
+  last_status_code: import_zod17.z.number().int().min(100).max(599).nullable(),
+  last_error: import_zod17.z.string().nullable(),
   next_attempt_at: Timestamp.nullable(),
   delivered_at: Timestamp.nullable(),
   created_at: Timestamp
@@ -4990,7 +5018,7 @@ var WebhookDeliveryListQuery = PageQuery.extend({
   status: WebhookDeliveryStatus.optional(),
   event_type: WebhookEventType.optional()
 });
-var WebhookDeliveryParams = import_zod16.z.object({ id: Id, delivery_id: Id });
+var WebhookDeliveryParams = import_zod17.z.object({ id: Id, delivery_id: Id });
 
 // src/webhook-signing.ts
 var WEBHOOK_SIGNATURE_HEADER = "x-mail-signature";
@@ -5057,94 +5085,96 @@ async function verifyWebhook(input) {
 }
 
 // src/billing.ts
-var import_zod17 = require("zod");
+var import_zod18 = require("zod");
 var PLAN_IDS = ["free", "starter", "growth", "design_partner"];
-var PlanId = import_zod17.z.enum(PLAN_IDS);
-var PlanLimits = import_zod17.z.object({
-  monthly_messages: import_zod17.z.number().int().min(0).nullable(),
-  contacts: import_zod17.z.number().int().min(0).nullable(),
-  members: import_zod17.z.number().int().min(1).nullable(),
-  providers: import_zod17.z.number().int().min(1).nullable(),
-  webhook_endpoints: import_zod17.z.number().int().min(0).nullable(),
+var PlanId = import_zod18.z.enum(PLAN_IDS);
+var PlanLimits = import_zod18.z.object({
+  monthly_messages: import_zod18.z.number().int().min(0).nullable(),
+  contacts: import_zod18.z.number().int().min(0).nullable(),
+  members: import_zod18.z.number().int().min(1).nullable(),
+  providers: import_zod18.z.number().int().min(1).nullable(),
+  webhook_endpoints: import_zod18.z.number().int().min(0).nullable(),
   /** Automations that may be live (active or paused) at once (A1). */
-  active_automations: import_zod17.z.number().int().min(0).nullable(),
+  active_automations: import_zod18.z.number().int().min(0).nullable(),
   /** Steps one automation may hold. Null is the flow's own cap, not unlimited. */
-  automation_steps: import_zod17.z.number().int().min(1).nullable(),
+  automation_steps: import_zod18.z.number().int().min(1).nullable(),
   /** Own domains Lumitra Mail sends from (managed sending domains); 0 when the plan has none. */
-  sending_domains: import_zod17.z.number().int().min(0).nullable()
+  sending_domains: import_zod18.z.number().int().min(0).nullable()
 });
-var PlanFeatures = import_zod17.z.object({
+var PlanFeatures = import_zod18.z.object({
   /** A/B tests of subject and content on a mailing (S4). */
-  ab_testing: import_zod17.z.boolean(),
+  ab_testing: import_zod18.z.boolean(),
   /** Open and click tracking, still off until a workspace turns it on (`settings.tracking_enabled`). */
-  tracking: import_zod17.z.boolean(),
+  tracking: import_zod18.z.boolean(),
   /** Automations: flows a person walks through step by step (A1). */
-  automations: import_zod17.z.boolean()
+  automations: import_zod18.z.boolean()
 });
 var PLAN_FEATURES = ["ab_testing", "tracking", "automations"];
-var Plan = import_zod17.z.object({
+var Plan = import_zod18.z.object({
   id: PlanId,
-  name: import_zod17.z.string().min(1),
+  name: import_zod18.z.string().min(1),
   /** Price in the smallest currency unit per month; null for plans not sold. */
-  monthly_price_cents: import_zod17.z.number().int().min(0).nullable(),
-  currency: import_zod17.z.string().length(3),
+  monthly_price_cents: import_zod18.z.number().int().min(0).nullable(),
+  currency: import_zod18.z.string().length(3),
   limits: PlanLimits,
   features: PlanFeatures
 });
-var CatalogPlan = Plan.extend({ sellable: import_zod17.z.boolean() });
-var Subscription = import_zod17.z.object({
+var CatalogPlan = Plan.extend({ sellable: import_zod18.z.boolean() });
+var Subscription = import_zod18.z.object({
   workspace_id: Id,
   plan: PlanId,
-  status: import_zod17.z.enum(["active", "trialing", "past_due", "cancelled"]),
+  status: import_zod18.z.enum(["active", "trialing", "past_due", "cancelled"]),
   current_period_start: Timestamp,
   current_period_end: Timestamp,
-  cancel_at_period_end: import_zod17.z.boolean(),
+  cancel_at_period_end: import_zod18.z.boolean(),
   /**
    * A design partner outside billing (plan `design_partner`, no limits, no
    * checkout). Set only by an operator, never through the API.
    */
-  billing_exempt: import_zod17.z.boolean(),
+  billing_exempt: import_zod18.z.boolean(),
   /**
    * Own sending domains bought on top of the plan's included ones (the
    * add-on), each a monthly charge on the same subscription. 0 without the
    * add-on; the usage limit `sending_domains` is the plan's plus these.
    */
-  extra_sending_domains: import_zod17.z.number().int().min(0)
+  extra_sending_domains: import_zod18.z.number().int().min(0)
 });
-var BillingAddons = import_zod17.z.object({
-  sending_domain: import_zod17.z.object({
-    monthly_price_cents: import_zod17.z.number().int().min(0),
-    currency: import_zod17.z.string().length(3),
-    sellable: import_zod17.z.boolean()
+var BillingAddons = import_zod18.z.object({
+  sending_domain: import_zod18.z.object({
+    monthly_price_cents: import_zod18.z.number().int().min(0),
+    currency: import_zod18.z.string().length(3),
+    sellable: import_zod18.z.boolean()
   })
 });
 var MAX_EXTRA_SENDING_DOMAINS = 100;
-var ExtraSendingDomainsUpdate = import_zod17.z.object({ quantity: import_zod17.z.number().int().min(0).max(MAX_EXTRA_SENDING_DOMAINS) });
+var ExtraSendingDomainsUpdate = import_zod18.z.object({ quantity: import_zod18.z.number().int().min(0).max(MAX_EXTRA_SENDING_DOMAINS) });
 var USAGE_METRICS = ["messages", "contacts", "members", "providers", "webhook_endpoints", "active_automations", "sending_domains"];
-var UsageMetric = import_zod17.z.enum(USAGE_METRICS);
+var UsageMetric = import_zod18.z.enum(USAGE_METRICS);
 var USAGE_WARNING_RATIO = 0.8;
-var UsageWarning = import_zod17.z.object({
+var UsageWarning = import_zod18.z.object({
   metric: UsageMetric,
-  used: import_zod17.z.number().int().min(0),
-  limit: import_zod17.z.number().int().min(0),
+  used: import_zod18.z.number().int().min(0),
+  limit: import_zod18.z.number().int().min(0),
   /** `approaching`: at or above USAGE_WARNING_RATIO of the limit; `reached`: at or above the limit. */
-  level: import_zod17.z.enum(["approaching", "reached"])
+  level: import_zod18.z.enum(["approaching", "reached"])
 });
-var Usage = import_zod17.z.object({
+var Usage = import_zod18.z.object({
   plan: PlanId,
   period_start: Timestamp,
   period_end: Timestamp,
-  metrics: import_zod17.z.record(UsageMetric, import_zod17.z.object({ used: import_zod17.z.number().int().min(0), limit: import_zod17.z.number().int().min(0).nullable() })),
-  warnings: import_zod17.z.array(UsageWarning)
-});
-var CheckoutRequest = import_zod17.z.object({
-  plan: import_zod17.z.enum(["starter", "growth"]),
-  success_url: import_zod17.z.string().url(),
-  cancel_url: import_zod17.z.string().url()
-});
-var CheckoutSession = import_zod17.z.object({ url: import_zod17.z.string().url() });
-var PortalRequest = import_zod17.z.object({ return_url: import_zod17.z.string().url() });
-var PortalSession = import_zod17.z.object({ url: import_zod17.z.string().url() });
+  metrics: import_zod18.z.record(UsageMetric, import_zod18.z.object({ used: import_zod18.z.number().int().min(0), limit: import_zod18.z.number().int().min(0).nullable() })),
+  warnings: import_zod18.z.array(UsageWarning)
+});
+var CheckoutRequest = import_zod18.z.object({
+  plan: import_zod18.z.enum(["starter", "growth"]),
+  success_url: import_zod18.z.string().url(),
+  cancel_url: import_zod18.z.string().url(),
+  /** The buyer accepted the terms of service and the processing agreement of this version. */
+  accept_terms: AcceptTerms
+});
+var CheckoutSession = import_zod18.z.object({ url: import_zod18.z.string().url() });
+var PortalRequest = import_zod18.z.object({ return_url: import_zod18.z.string().url() });
+var PortalSession = import_zod18.z.object({ url: import_zod18.z.string().url() });
 var USAGE_WARNING_HEADER = "x-mail-usage-warning";
 function formatUsageWarningHeader(warnings) {
   if (warnings.length === 0) return null;
@@ -5164,7 +5194,7 @@ function parseUsageWarningHeader(value) {
 }
 
 // src/routes.ts
-var import_zod18 = require("zod");
+var import_zod19 = require("zod");
 var list = (item) => page(item);
 var foundationRoutes = {
   "workspaces.create": {
@@ -5410,7 +5440,7 @@ var templateRoutes = {
     path: "/v1/templates/:id/export",
     params: IdParams,
     query: TemplateExportQuery,
-    response: import_zod18.z.string(),
+    response: import_zod19.z.string(),
     responseType: "text",
     status: 200,
     access: "read",
@@ -5790,7 +5820,7 @@ var sendingRoutes = {
     path: "/v1/mailings/:id/export",
     params: IdParams,
     query: MailingExportQuery,
-    response: import_zod18.z.string(),
+    response: import_zod19.z.string(),
     responseType: "text",
     status: 200,
     access: "read",
@@ -6057,7 +6087,7 @@ var platformRoutes = {
   "contactProperties.list": {
     method: "GET",
     path: "/v1/contact-properties",
-    response: import_zod18.z.object({ data: import_zod18.z.array(ContactPropertyDefinition) }),
+    response: import_zod19.z.object({ data: import_zod19.z.array(ContactPropertyDefinition) }),
     status: 200,
     access: "read",
     phase: "S4"
@@ -6356,7 +6386,7 @@ var billingRoutes = {
   "billing.plans": {
     method: "GET",
     path: "/v1/billing/plans",
-    response: import_zod18.z.object({ data: import_zod18.z.array(CatalogPlan), addons: BillingAddons }),
+    response: import_zod19.z.object({ data: import_zod19.z.array(CatalogPlan), addons: BillingAddons }),
     status: 200,
     access: "read",
     phase: "S5"
@@ -6507,7 +6537,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/pause",
     params: IdParams,
-    body: import_zod18.z.object({}).strict(),
+    body: import_zod19.z.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -6517,7 +6547,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/resume",
     params: IdParams,
-    body: import_zod18.z.object({}).strict(),
+    body: import_zod19.z.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -6527,7 +6557,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/archive",
     params: IdParams,
-    body: import_zod18.z.object({}).strict(),
+    body: import_zod19.z.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -6708,6 +6738,7 @@ function matchRoute(method, pathname) {
   AbTestState,
   AbVariant,
   AbWinnerRequest,
+  AcceptTerms,
   ApiKey,
   ApiKeyCreate,
   ApiKeyCreated,
@@ -6879,6 +6910,7 @@ function matchRoute(method, pathname) {
   InviteListQuery,
   InviteStatus,
   JsonValue,
+  LEGAL_TERMS_VERSION,
   LETTER_ONLY_MERGE_FIELDS,
   LETTER_RECIPIENT_REFUSAL,
   LIST_UNSUBSCRIBE_POST_VALUE,
@@ -7288,6 +7320,7 @@ function matchRoute(method, pathname) {
   sameJson,
   sampleMergeValue,
   saveDemotions,
+  sendingDomainRecordFullName,
   sendingRoutes,
   setInsertionBy,
   setInsertionFilled,