@marlinjai/mail-contract 0.17.0 → 0.19.0

package/dist/index.mjs

@@ -151,7 +151,7 @@ var API_VERSION_PREFIX = "/v1";
 var HEALTH_PATH = "/healthz";
 
 // src/workspace.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 
 // src/automations.ts
 import { z as z10 } from "zod";
@@ -2783,16 +2783,23 @@ var EventListQuery = PageQuery.extend({
   contact_id: Id.optional()
 });
 
+// src/legal.ts
+import { z as z11 } from "zod";
+var LEGAL_TERMS_VERSION = "2026-10-23";
+var AcceptTerms = z11.literal(LEGAL_TERMS_VERSION, {
+  errorMap: () => ({ message: `must be "${LEGAL_TERMS_VERSION}": accept the current terms of service and processing agreement` })
+});
+
 // src/workspace.ts
-var CompanyId = z11.string().min(1).max(64);
+var CompanyId = z12.string().min(1).max(64);
 var ASSET_POLICIES = ["any", "service_only"];
-var AssetPolicy = z11.enum(ASSET_POLICIES);
+var AssetPolicy = z12.enum(ASSET_POLICIES);
 var MAX_ALLOWED_ASSET_HOSTS = 20;
-var AssetHost = z11.string().trim().toLowerCase().min(1).max(253).regex(/^(?=.{1,253}(?::\d{1,5})?$)[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)+(:\d{1,5})?$/, "a host name such as example.com");
-var MergeDefaults = z11.record(MergeFieldName, MergeDefaultValue).refine((m) => Object.keys(m).length <= MAX_MERGE_DEFAULTS, `at most ${MAX_MERGE_DEFAULTS} merge defaults`).refine((m) => !Object.keys(m).some((k) => k in RESERVED_MERGE_FIELDS), {
+var AssetHost = z12.string().trim().toLowerCase().min(1).max(253).regex(/^(?=.{1,253}(?::\d{1,5})?$)[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)+(:\d{1,5})?$/, "a host name such as example.com");
+var MergeDefaults = z12.record(MergeFieldName, MergeDefaultValue).refine((m) => Object.keys(m).length <= MAX_MERGE_DEFAULTS, `at most ${MAX_MERGE_DEFAULTS} merge defaults`).refine((m) => !Object.keys(m).some((k) => k in RESERVED_MERGE_FIELDS), {
   message: `a reserved merge field (${Object.keys(RESERVED_MERGE_FIELDS).join(", ")}) cannot have a workspace default`
 });
-var WorkspaceSettings = z11.object({
+var WorkspaceSettings = z12.object({
   /**
    * The workspace's main language (a {@link LocaleTag}, e.g. "de"): the main
    * language of a new template, and of the hosted pages when nothing else
@@ -2805,9 +2812,9 @@ var WorkspaceSettings = z11.object({
    * each; the hosted pages are offered in those of them they support (English,
    * German, French, Italian, Spanish). The service stores canonical casing.
    */
-  locales: z11.array(LocaleTag).min(1).max(20).refine((l) => new Set(l.map((t) => t.toLowerCase())).size === l.length, "a language appears twice"),
+  locales: z12.array(LocaleTag).min(1).max(20).refine((l) => new Set(l.map((t) => t.toLowerCase())).size === l.length, "a language appears twice"),
   /** Open and click tracking. Off by default, opt-in per workspace. */
-  tracking_enabled: z11.boolean(),
+  tracking_enabled: z12.boolean(),
   /** Where images, stylesheets and fonts in a mail may load from. `any` by default. */
   asset_policy: AssetPolicy,
   /**
@@ -2815,7 +2822,7 @@ var WorkspaceSettings = z11.object({
    * the workspace's website, typically. Empty by default. Ignored under `any`,
    * which allows everything already.
    */
-  allowed_asset_hosts: z11.array(AssetHost).max(MAX_ALLOWED_ASSET_HOSTS),
+  allowed_asset_hosts: z12.array(AssetHost).max(MAX_ALLOWED_ASSET_HOSTS),
   /** Merge values every mail of the workspace can use (see `MergeDefaults`). Empty by default. */
   merge_defaults: MergeDefaults,
   /**
@@ -2824,10 +2831,10 @@ var WorkspaceSettings = z11.object({
    */
   default_timezone: TimezoneName.nullable()
 });
-var Workspace = z11.object({
+var Workspace = z12.object({
   id: Id,
   slug: Slug,
-  name: z11.string().min(1).max(120),
+  name: z12.string().min(1).max(120),
   settings: WorkspaceSettings,
   /**
    * The auth-brain company (tenant) the workspace was created for, or null for
@@ -2838,13 +2845,13 @@ var Workspace = z11.object({
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var WorkspaceCreate = z11.object({
+var WorkspaceCreate = z12.object({
   slug: Slug,
-  name: z11.string().min(1).max(120),
+  name: z12.string().min(1).max(120),
   settings: WorkspaceSettings.partial().optional(),
-  owner: z11.object({
+  owner: z12.object({
     email: Email,
-    name: z11.string().max(200).nullable().optional()
+    name: z12.string().max(200).nullable().optional()
   }),
   /**
    * The auth-brain company the workspace is created in. Required since 0.14.0:
@@ -2853,27 +2860,33 @@ var WorkspaceCreate = z11.object({
    * invitation (`members.syncCompanyRole`). A workspace created before, without
    * one, keeps working and simply has no such inheritance.
    */
-  company_id: CompanyId
+  company_id: CompanyId,
+  /**
+   * The person creating the workspace accepts the terms of service and the
+   * processing agreement for its company, of this version (required since
+   * 0.19.0): the workspace processes recipients' data from its first contact.
+   */
+  accept_terms: AcceptTerms
 });
-var WorkspaceUpdate = z11.object({
-  name: z11.string().min(1).max(120),
+var WorkspaceUpdate = z12.object({
+  name: z12.string().min(1).max(120),
   settings: WorkspaceSettings.partial()
 }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var WorkspaceMove = z11.object({ company_id: CompanyId });
+var WorkspaceMove = z12.object({ company_id: CompanyId });
 var MEMBER_ROLES = ["owner", "admin", "editor", "viewer"];
-var MemberRole = z11.enum(MEMBER_ROLES);
+var MemberRole = z12.enum(MEMBER_ROLES);
 var WorkspaceMembership = Workspace.extend({ role: MemberRole });
 var MEMBER_SOURCES = ["invited", "company"];
-var MemberSource = z11.enum(MEMBER_SOURCES);
+var MemberSource = z12.enum(MEMBER_SOURCES);
 var COMPANY_GRANT_ROLES = ["owner", "admin"];
-var CompanyGrantRole = z11.enum(COMPANY_GRANT_ROLES);
+var CompanyGrantRole = z12.enum(COMPANY_GRANT_ROLES);
 var COMPANY_ROLE_MAX_AGE_HOURS = 24;
-var Member = z11.object({
+var Member = z12.object({
   id: Id,
   /** The person's auth-brain subject. */
-  subject: z11.string().min(1).max(255),
+  subject: z12.string().min(1).max(255),
   email: Email,
-  name: z11.string().max(200).nullable(),
+  name: z12.string().max(200).nullable(),
   /**
    * The role in force: the higher of the person's own role in the workspace
    * and the one a confirmed company role carries. For a `company` row that is
@@ -2900,48 +2913,48 @@ var Member = z11.object({
    * false is one whose company role has not been confirmed within
    * `COMPANY_ROLE_MAX_AGE_HOURS`; it grants nothing and an admin may remove it.
    */
-  inherited: z11.boolean().optional()
+  inherited: z12.boolean().optional()
 });
 var MAX_SYNC_COMPANIES = 100;
-var MemberCompanySync = z11.object({
+var MemberCompanySync = z12.object({
   email: Email,
-  name: z11.string().max(200).nullable().optional(),
-  companies: z11.array(z11.object({ company_id: CompanyId, role: CompanyGrantRole })).max(MAX_SYNC_COMPANIES).refine((list2) => new Set(list2.map((c) => c.company_id)).size === list2.length, "each company at most once")
+  name: z12.string().max(200).nullable().optional(),
+  companies: z12.array(z12.object({ company_id: CompanyId, role: CompanyGrantRole })).max(MAX_SYNC_COMPANIES).refine((list2) => new Set(list2.map((c) => c.company_id)).size === list2.length, "each company at most once")
 });
-var MemberCompanySyncResult = z11.object({
+var MemberCompanySyncResult = z12.object({
   /** Workspaces in which the person now holds a company role they did not hold, or held differently, before this call. */
-  granted: z11.array(Id),
+  granted: z12.array(Id),
   /** Workspaces in which a company role was taken away by this call. */
-  revoked: z11.array(Id),
+  revoked: z12.array(Id),
   /** Workspaces in which the person's company role was already as stated. */
-  unchanged: z11.array(Id)
+  unchanged: z12.array(Id)
 });
-var MemberCreate = z11.object({
-  subject: z11.string().min(1).max(255),
+var MemberCreate = z12.object({
+  subject: z12.string().min(1).max(255),
   email: Email,
-  name: z11.string().max(200).nullable().optional(),
+  name: z12.string().max(200).nullable().optional(),
   role: MemberRole
 });
-var MemberUpdate = z11.object({ role: MemberRole });
+var MemberUpdate = z12.object({ role: MemberRole });
 var API_KEY_SCOPES = ["full", "read", "send"];
-var ApiKeyScope = z11.enum(API_KEY_SCOPES);
-var ApiKey = z11.object({
+var ApiKeyScope = z12.enum(API_KEY_SCOPES);
+var ApiKey = z12.object({
   id: Id,
-  name: z11.string().min(1).max(120),
+  name: z12.string().min(1).max(120),
   /** The first characters of the key, for recognising it in a list. */
-  prefix: z11.string().min(4).max(32),
+  prefix: z12.string().min(4).max(32),
   scope: ApiKeyScope,
   last_used_at: Timestamp.nullable(),
   revoked_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var ApiKeyCreate = z11.object({
-  name: z11.string().min(1).max(120),
+var ApiKeyCreate = z12.object({
+  name: z12.string().min(1).max(120),
   /** Omitted means `full`. */
   scope: ApiKeyScope.optional()
 });
-var ApiKeyCreated = z11.object({
-  key: z11.string().min(20),
+var ApiKeyCreated = z12.object({
+  key: z12.string().min(20),
   api_key: ApiKey
 });
 var AUDIT_ACTIONS = [
@@ -2965,6 +2978,7 @@ var AUDIT_ACTIONS = [
   "sending_domain.created",
   "sending_domain.updated",
   "sending_domain.checked",
+  "sending_domain.records_written",
   "sending_domain.deleted",
   "topic.created",
   "topic.updated",
@@ -3036,14 +3050,14 @@ var AUDIT_ACTIONS = [
   "automation.run_ended",
   "event.recorded"
 ];
-var AuditAction = z11.enum(AUDIT_ACTIONS);
+var AuditAction = z12.enum(AUDIT_ACTIONS);
 var TRUSTED_APPS = ["booking"];
-var TrustedApp = z11.enum(TRUSTED_APPS);
-var AuditActor = z11.discriminatedUnion("type", [
-  z11.object({
-    type: z11.literal("member"),
+var TrustedApp = z12.enum(TRUSTED_APPS);
+var AuditActor = z12.discriminatedUnion("type", [
+  z12.object({
+    type: z12.literal("member"),
     member_id: Id,
-    subject: z11.string().min(1),
+    subject: z12.string().min(1),
     /**
      * The application the person acted through, when it was not the dashboard:
      * the service set it from the service token the call carried, so it is
@@ -3051,26 +3065,26 @@ var AuditActor = z11.discriminatedUnion("type", [
      */
     app: TrustedApp.optional()
   }),
-  z11.object({
-    type: z11.literal("api_key"),
+  z12.object({
+    type: z12.literal("api_key"),
     api_key_id: Id,
     /**
      * Who the client's application said it was acting for, from
      * `ON_BEHALF_OF_HEADER`: reported by that application, never verified.
      * Absent when the call carried no label.
      */
-    on_behalf_of: z11.string().min(1).max(ON_BEHALF_OF_MAX_LENGTH).optional()
+    on_behalf_of: z12.string().min(1).max(ON_BEHALF_OF_MAX_LENGTH).optional()
   }),
   /** The service itself (the worker, a bounce, the hosted unsubscribe page). */
-  z11.object({ type: z11.literal("system"), reason: z11.string().min(1).max(200) })
+  z12.object({ type: z12.literal("system"), reason: z12.string().min(1).max(200) })
 ]);
-var AuditEntry = z11.object({
+var AuditEntry = z12.object({
   id: Id,
   action: AuditAction,
   actor: AuditActor,
-  target_type: z11.string().min(1).max(64),
+  target_type: z12.string().min(1).max(64),
   target_id: Id.nullable(),
-  details: z11.record(z11.unknown()),
+  details: z12.record(z12.unknown()),
   created_at: Timestamp
 });
 var AuditQuery = PageQuery.extend({
@@ -3079,12 +3093,12 @@ var AuditQuery = PageQuery.extend({
 });
 
 // src/invites.ts
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 var INVITE_STATUSES = ["pending", "accepted", "revoked", "expired"];
-var InviteStatus = z12.enum(INVITE_STATUSES);
+var InviteStatus = z13.enum(INVITE_STATUSES);
 var DEFAULT_INVITE_TTL_DAYS = 7;
 var MAX_INVITE_TTL_DAYS = 30;
-var Invite = z12.object({
+var Invite = z13.object({
   id: Id,
   /** Stored lowercased; only a person signed in with this address can accept. */
   email: Email,
@@ -3092,32 +3106,32 @@ var Invite = z12.object({
   /** Derived from the timestamps below, never stored. */
   status: InviteStatus,
   /** The member who invited, while they are still one (null after they left). */
-  invited_by: z12.object({ member_id: Id.nullable(), email: Email.nullable() }),
+  invited_by: z13.object({ member_id: Id.nullable(), email: Email.nullable() }),
   expires_at: Timestamp,
   accepted_at: Timestamp.nullable(),
   revoked_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var InviteCreate = z12.object({
+var InviteCreate = z13.object({
   email: Email,
   role: MemberRole,
-  expires_in_days: z12.number().int().min(1).max(MAX_INVITE_TTL_DAYS).optional()
+  expires_in_days: z13.number().int().min(1).max(MAX_INVITE_TTL_DAYS).optional()
 });
-var InviteCreated = z12.object({
+var InviteCreated = z13.object({
   invite: Invite,
-  token: z12.string().min(32).max(128)
+  token: z13.string().min(32).max(128)
 });
 var InviteListQuery = PageQuery.extend({
   status: InviteStatus.optional()
 });
-var InviteAccept = z12.object({
-  token: z12.string().min(32).max(128),
+var InviteAccept = z13.object({
+  token: z13.string().min(32).max(128),
   email: Email,
-  name: z12.string().max(200).nullable().optional()
+  name: z13.string().max(200).nullable().optional()
 });
-var InviteAccepted = z12.object({
+var InviteAccepted = z13.object({
   workspace: WorkspaceMembership,
-  already_member: z12.boolean()
+  already_member: z13.boolean()
 });
 var INVITE_REFUSAL_REASONS = ["email_mismatch", "inviter_lacks_role", "expired", "revoked", "accepted"];
 
@@ -3747,13 +3761,13 @@ function renameInsertionEverywhere(drafts, from, rawTo) {
 }
 
 // src/providers.ts
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 var PROVIDER_KINDS = ["smtp", "resend"];
-var ProviderKind = z13.enum(PROVIDER_KINDS);
-var ProviderPolicy = z13.object({
-  daily_recipient_budget: z13.number().int().min(1).max(1e7),
-  min_interval_ms: z13.number().int().min(0).max(36e5),
-  max_recipients_per_message: z13.number().int().min(1).max(1e3)
+var ProviderKind = z14.enum(PROVIDER_KINDS);
+var ProviderPolicy = z14.object({
+  daily_recipient_budget: z14.number().int().min(1).max(1e7),
+  min_interval_ms: z14.number().int().min(0).max(36e5),
+  max_recipients_per_message: z14.number().int().min(1).max(1e3)
 });
 var ICLOUD_SMTP_POLICY = {
   daily_recipient_budget: 800,
@@ -3761,17 +3775,17 @@ var ICLOUD_SMTP_POLICY = {
   max_recipients_per_message: 1
 };
 var SMTP_SECURITY = ["tls", "starttls"];
-var SmtpConfigBase = z13.object({
-  host: z13.string().min(1).max(255),
-  port: z13.number().int().min(1).max(65535),
+var SmtpConfigBase = z14.object({
+  host: z14.string().min(1).max(255),
+  port: z14.number().int().min(1).max(65535),
   /** `tls` connects encrypted (465), `starttls` upgrades (587). Never plaintext. */
-  security: z13.enum(SMTP_SECURITY),
-  username: z13.string().min(1).max(255)
+  security: z14.enum(SMTP_SECURITY),
+  username: z14.string().min(1).max(255)
 });
-var ResendConfigBase = z13.object({});
-var ProviderRejections = z13.object({
-  count: z13.number().int().min(0),
-  last_error: z13.string().nullable(),
+var ResendConfigBase = z14.object({});
+var ProviderRejections = z14.object({
+  count: z14.number().int().min(0),
+  last_error: z14.string().nullable(),
   last_at: Timestamp.nullable(),
   /**
    * The last time the bounce circuit breaker tripped on one of this provider's
@@ -3781,59 +3795,59 @@ var ProviderRejections = z13.object({
    * run's bounce blocks were undone and the mailing paused. `sample` is the
    * reply that tripped it.
    */
-  anomaly: z13.object({
+  anomaly: z14.object({
     at: Timestamp,
     /** `mailing`: one mailing was paused. `provider`: 5 refusals in a row with the same reply across the provider's sends (test sends and one-recipient mailings included) within 24 hours. */
-    scope: z13.enum(["mailing", "provider"]),
+    scope: z14.enum(["mailing", "provider"]),
     /**
      * True while the provider-wide breaker is open: no bounce blocks through
      * this provider, test sends refused and mailings not started or resumed
      * (`provider_anomaly`), until an admin clears it (`providers.clearAnomaly`).
      */
-    blocking: z13.boolean(),
+    blocking: z14.boolean(),
     mailing_id: Id.nullable(),
-    reason: z13.string(),
-    sample: z13.string()
+    reason: z14.string(),
+    sample: z14.string()
   }).nullable()
 });
-var ProviderEvents = z13.object({
-  status: z13.enum(["active", "needs_secret"]),
-  source: z13.enum(["automatic", "manual", "managed"]).nullable(),
-  url: z13.string().url(),
-  error: z13.string().nullable(),
+var ProviderEvents = z14.object({
+  status: z14.enum(["active", "needs_secret"]),
+  source: z14.enum(["automatic", "manual", "managed"]).nullable(),
+  url: z14.string().url(),
+  error: z14.string().nullable(),
   /**
    * Events that named an email this provider never sent through the service
    * (another workspace or system sharing the Resend account): counted, never
    * acted on.
    */
-  unmatched: z13.number().int().min(0)
+  unmatched: z14.number().int().min(0)
 });
 var RESEND_EVENT_TYPES = ["email.bounced", "email.complained", "email.delivery_delayed"];
-var ResendSigningSecret = z13.string().max(200).regex(/^whsec_[A-Za-z0-9+/]{16,}={0,2}$/, "must be the signing secret Resend shows, starting with whsec_");
-var ProviderEventsSecret = z13.object({ signing_secret: ResendSigningSecret });
+var ResendSigningSecret = z14.string().max(200).regex(/^whsec_[A-Za-z0-9+/]{16,}={0,2}$/, "must be the signing secret Resend shows, starting with whsec_");
+var ProviderEventsSecret = z14.object({ signing_secret: ResendSigningSecret });
 var ProviderFields = {
-  name: z13.string().min(1).max(120),
-  from_name: z13.string().min(1).max(120),
+  name: z14.string().min(1).max(120),
+  from_name: z14.string().min(1).max(120),
   from_email: Email,
   reply_to: Email.nullable(),
   policy: ProviderPolicy
 };
-var Provider = z13.discriminatedUnion("kind", [
-  z13.object({
+var Provider = z14.discriminatedUnion("kind", [
+  z14.object({
     id: Id,
-    kind: z13.literal("smtp"),
+    kind: z14.literal("smtp"),
     config: SmtpConfigBase,
-    has_secret: z13.boolean(),
+    has_secret: z14.boolean(),
     ...ProviderFields,
     rejections: ProviderRejections,
     created_at: Timestamp,
     updated_at: Timestamp
   }),
-  z13.object({
+  z14.object({
     id: Id,
-    kind: z13.literal("resend"),
+    kind: z14.literal("resend"),
     config: ResendConfigBase,
-    has_secret: z13.boolean(),
+    has_secret: z14.boolean(),
     ...ProviderFields,
     rejections: ProviderRejections,
     events: ProviderEvents,
@@ -3841,31 +3855,31 @@ var Provider = z13.discriminatedUnion("kind", [
     updated_at: Timestamp
   })
 ]);
-var ProviderCreate = z13.discriminatedUnion("kind", [
-  z13.object({
-    kind: z13.literal("smtp"),
-    config: SmtpConfigBase.extend({ password: z13.string().min(1).max(1024) }),
+var ProviderCreate = z14.discriminatedUnion("kind", [
+  z14.object({
+    kind: z14.literal("smtp"),
+    config: SmtpConfigBase.extend({ password: z14.string().min(1).max(1024) }),
     ...ProviderFields
   }),
-  z13.object({
-    kind: z13.literal("resend"),
-    config: ResendConfigBase.extend({ api_key: z13.string().min(1).max(1024) }),
+  z14.object({
+    kind: z14.literal("resend"),
+    config: ResendConfigBase.extend({ api_key: z14.string().min(1).max(1024) }),
     ...ProviderFields
   })
 ]);
-var ProviderUpdate = z13.discriminatedUnion("kind", [
-  z13.object({
-    kind: z13.literal("smtp"),
-    config: SmtpConfigBase.extend({ password: z13.string().min(1).max(1024).optional() }).partial().optional(),
+var ProviderUpdate = z14.discriminatedUnion("kind", [
+  z14.object({
+    kind: z14.literal("smtp"),
+    config: SmtpConfigBase.extend({ password: z14.string().min(1).max(1024).optional() }).partial().optional(),
     name: ProviderFields.name.optional(),
     from_name: ProviderFields.from_name.optional(),
     from_email: ProviderFields.from_email.optional(),
     reply_to: ProviderFields.reply_to.optional(),
     policy: ProviderPolicy.partial().optional()
   }),
-  z13.object({
-    kind: z13.literal("resend"),
-    config: ResendConfigBase.extend({ api_key: z13.string().min(1).max(1024).optional() }).optional(),
+  z14.object({
+    kind: z14.literal("resend"),
+    config: ResendConfigBase.extend({ api_key: z14.string().min(1).max(1024).optional() }).optional(),
     name: ProviderFields.name.optional(),
     from_name: ProviderFields.from_name.optional(),
     from_email: ProviderFields.from_email.optional(),
@@ -3873,98 +3887,109 @@ var ProviderUpdate = z13.discriminatedUnion("kind", [
     policy: ProviderPolicy.partial().optional()
   })
 ]);
-var ProviderUsage = z13.object({
+var ProviderUsage = z14.object({
   provider_id: Id,
-  recipients_last_24h: z13.number().int().min(0),
-  remaining_budget: z13.number().int().min(0),
+  recipients_last_24h: z14.number().int().min(0),
+  remaining_budget: z14.number().int().min(0),
   /** When enough of the rolling window frees up to send again, if exhausted. */
   next_capacity_at: Timestamp.nullable()
 });
-var ProviderVerifyResult = z13.object({
-  ok: z13.boolean(),
-  error: z13.string().nullable()
+var ProviderVerifyResult = z14.object({
+  ok: z14.boolean(),
+  error: z14.string().nullable()
 });
 
 // src/sending-domains.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 var SENDING_DOMAIN_STATUSES = ["pending_dns", "verifying", "verified", "failed", "temporary_failure"];
-var SendingDomainStatus = z14.enum(SENDING_DOMAIN_STATUSES);
+var SendingDomainStatus = z15.enum(SENDING_DOMAIN_STATUSES);
 var SENDING_DOMAIN_DNS_MODES = ["manual", "managed"];
-var SendingDomainDnsMode = z14.enum(SENDING_DOMAIN_DNS_MODES);
+var SendingDomainDnsMode = z15.enum(SENDING_DOMAIN_DNS_MODES);
 var SENDING_DOMAIN_REGION = "eu-west-1";
-var SendingDomainName = z14.string().trim().toLowerCase().max(253).regex(
+var SendingDomainName = z15.string().trim().toLowerCase().max(253).regex(
   /^(?=.{1,253}$)(?!-)[a-z0-9-]{1,63}(?<!-)(\.(?!-)[a-z0-9-]{1,63}(?<!-))*\.[a-z]{2,63}$/,
   "must be a domain such as example.com, without https:// or an @"
 );
-var SendingDomainRecord = z14.object({
-  record: z14.string().max(40),
-  name: z14.string().max(253),
-  type: z14.string().max(10),
-  value: z14.string().max(4096),
-  ttl: z14.string().max(20),
-  status: z14.string().max(40),
-  priority: z14.number().int().min(0).max(65535).optional()
-});
-var SendingDomain = z14.object({
+var SendingDomainRecord = z15.object({
+  record: z15.string().max(40),
+  name: z15.string().max(253),
+  type: z15.string().max(10),
+  value: z15.string().max(4096),
+  ttl: z15.string().max(20),
+  status: z15.string().max(40),
+  priority: z15.number().int().min(0).max(65535).optional()
+});
+function sendingDomainRecordFullName(domain, name) {
+  const d = domain.toLowerCase();
+  const n = name.toLowerCase().replace(/\.$/, "");
+  if (n === "@" || n === "") return d;
+  const labels = d.split(".");
+  for (let k = labels.length - 2; k >= 1; k--) {
+    const sub = labels.slice(0, k).join(".");
+    if (n === sub || n.endsWith(`.${sub}`)) return `${n}.${labels.slice(k).join(".")}`;
+  }
+  return `${n}.${d}`;
+}
+var SendingDomain = z15.object({
   id: Id,
-  domain: z14.string(),
-  from_name: z14.string(),
+  domain: z15.string(),
+  from_name: z15.string(),
   from_email: Email,
   reply_to: Email.nullable(),
   status: SendingDomainStatus,
   dns_mode: SendingDomainDnsMode,
-  records: z14.array(SendingDomainRecord),
+  records: z15.array(SendingDomainRecord),
   provider_id: Id.nullable(),
   checked_at: Timestamp.nullable(),
   verified_at: Timestamp.nullable(),
-  last_error: z14.string().nullable(),
+  last_error: z15.string().nullable(),
   created_at: Timestamp,
   updated_at: Timestamp
 });
 var SenderFields = {
-  from_name: z14.string().trim().min(1).max(120),
+  from_name: z15.string().trim().min(1).max(120),
   from_email: Email,
   reply_to: Email.nullable().optional()
 };
 function senderOnDomain(input, ctx) {
   const at = input.from_email.lastIndexOf("@");
   if (at < 0 || input.from_email.slice(at + 1).toLowerCase() !== input.domain) {
-    ctx.addIssue({ code: z14.ZodIssueCode.custom, path: ["from_email"], message: `must be an address on ${input.domain}` });
+    ctx.addIssue({ code: z15.ZodIssueCode.custom, path: ["from_email"], message: `must be an address on ${input.domain}` });
   }
 }
-var SendingDomainCreate = z14.object({ domain: SendingDomainName, ...SenderFields }).superRefine(senderOnDomain);
-var SendingDomainUpdate = z14.object({ from_name: SenderFields.from_name.optional(), from_email: Email.optional(), reply_to: Email.nullable().optional() }).refine((v) => Object.keys(v).length > 0, "nothing to change");
+var SendingDomainCreate = z15.object({ domain: SendingDomainName, ...SenderFields }).superRefine(senderOnDomain);
+var SendingDomainUpdate = z15.object({ from_name: SenderFields.from_name.optional(), from_email: Email.optional(), reply_to: Email.nullable().optional() }).refine((v) => Object.keys(v).length > 0, "nothing to change");
 
 // src/contacts.ts
-import { z as z15 } from "zod";
-var Topic = z15.object({
+import { z as z16 } from "zod";
+var Topic = z16.object({
   id: Id,
   slug: Slug,
-  name: z15.string().min(1).max(120),
+  name: z16.string().min(1).max(120),
   /** Shown on the hosted preference page. */
-  description: z15.string().max(1e3).nullable(),
+  description: z16.string().max(1e3).nullable(),
   /** Translations of `name` and `description` per locale, for the hosted page. */
-  translations: z15.record(
-    z15.object({ name: z15.string().min(1).max(120), description: z15.string().max(1e3).nullable() })
+  translations: z16.record(
+    z16.object({ name: z16.string().min(1).max(120), description: z16.string().max(1e3).nullable() })
   ),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var TopicCreate = z15.object({
+var TopicCreate = z16.object({
   slug: Slug,
-  name: z15.string().min(1).max(120),
-  description: z15.string().max(1e3).optional(),
+  name: z16.string().min(1).max(120),
+  description: z16.string().max(1e3).optional(),
   translations: Topic.shape.translations.optional()
 });
 var TopicUpdate = TopicCreate.omit({ slug: true }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var Contact = z15.object({
+var Contact = z16.object({
   id: Id,
-  external_id: z15.string().min(1).max(255).nullable(),
+  external_id: z16.string().min(1).max(255).nullable(),
   /** Stored lowercased, unique per workspace. */
   email: Email,
-  first_name: z15.string().max(200).nullable(),
-  last_name: z15.string().max(200).nullable(),
-  locale: z15.string().min(2).max(35).nullable(),
+  first_name: z16.string().max(200).nullable(),
+  last_name: z16.string().max(200).nullable(),
+  locale: z16.string().min(2).max(35).nullable(),
   /**
    * The person's own time zone, an IANA name such as `Europe/Berlin` (A1).
    * Every wall clock an automation waits for is read in it, falling back to the
@@ -3972,65 +3997,65 @@ var Contact = z15.object({
    */
   timezone: TimezoneName.nullable(),
   properties: Properties,
-  topics: z15.array(Slug),
+  topics: z16.array(Slug),
   /** The slugs of the contact's tags (S4). */
-  tags: z15.array(Slug),
+  tags: z16.array(Slug),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var ContactUpsert = z15.object({
-  external_id: z15.string().min(1).max(255).optional(),
+var ContactUpsert = z16.object({
+  external_id: z16.string().min(1).max(255).optional(),
   email: Email.optional(),
-  first_name: z15.string().max(200).nullable().optional(),
-  last_name: z15.string().max(200).nullable().optional(),
-  locale: z15.string().min(2).max(35).nullable().optional(),
+  first_name: z16.string().max(200).nullable().optional(),
+  last_name: z16.string().max(200).nullable().optional(),
+  locale: z16.string().min(2).max(35).nullable().optional(),
   timezone: TimezoneName.nullable().optional(),
   properties: Properties.optional(),
-  topics: z15.array(Slug).max(100).optional()
+  topics: z16.array(Slug).max(100).optional()
 }).refine((v) => v.external_id !== void 0 || v.email !== void 0, {
   message: "external_id or email is required",
   path: ["email"]
 });
-var ContactUpsertResult = z15.object({
+var ContactUpsertResult = z16.object({
   contact: Contact,
-  created: z15.boolean()
+  created: z16.boolean()
 });
 var ContactListQuery = PageQuery.extend({
-  email: z15.string().min(1).max(254).optional(),
-  external_id: z15.string().min(1).max(255).optional(),
+  email: z16.string().min(1).max(254).optional(),
+  external_id: z16.string().min(1).max(255).optional(),
   topic: Slug.optional()
 });
-var ContactErased = z15.object({
-  ok: z15.literal(true),
-  erased_messages: z15.number().int().min(0),
-  erased_recipients: z15.number().int().min(0),
-  suppressions_kept: z15.number().int().min(0)
+var ContactErased = z16.object({
+  ok: z16.literal(true),
+  erased_messages: z16.number().int().min(0),
+  erased_recipients: z16.number().int().min(0),
+  suppressions_kept: z16.number().int().min(0)
 });
 var SUPPRESSION_REASONS = ["unsubscribed", "bounced", "complained", "manual"];
-var SuppressionReason = z15.enum(SUPPRESSION_REASONS);
-var Suppression = z15.object({
+var SuppressionReason = z16.enum(SUPPRESSION_REASONS);
+var Suppression = z16.object({
   id: Id,
   email: Email,
   reason: SuppressionReason,
   topic: Slug.nullable(),
   source_message_id: Id.nullable(),
-  note: z15.string().max(1e3).nullable(),
+  note: z16.string().max(1e3).nullable(),
   created_at: Timestamp
 });
-var SuppressionCreate = z15.object({
+var SuppressionCreate = z16.object({
   email: Email,
-  reason: z15.enum(["manual", "unsubscribed"]),
+  reason: z16.enum(["manual", "unsubscribed"]),
   topic: Slug.nullable().optional(),
-  note: z15.string().max(1e3).optional()
+  note: z16.string().max(1e3).optional()
 });
 var SuppressionListQuery = PageQuery.extend({
-  email: z15.string().min(1).max(254).optional(),
+  email: z16.string().min(1).max(254).optional(),
   reason: SuppressionReason.optional(),
   topic: Slug.optional()
 });
 
 // src/webhooks.ts
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 var WEBHOOK_EVENT_TYPES = [
   "message.sent",
   "message.failed",
@@ -4074,23 +4099,23 @@ var WEBHOOK_EVENT_TYPES = [
   "template.updated",
   "template.deleted"
 ];
-var WebhookEventType = z16.enum(WEBHOOK_EVENT_TYPES);
-var MessageEventBase = z16.object({
+var WebhookEventType = z17.enum(WEBHOOK_EVENT_TYPES);
+var MessageEventBase = z17.object({
   message_id: Id,
   mailing_id: Id.nullable(),
   mailing_metadata: MailingMetadata.nullable(),
   recipient_id: Id.nullable(),
   contact_id: Id.nullable(),
-  external_id: z16.string().nullable(),
+  external_id: z17.string().nullable(),
   email: Email,
-  subject: z16.string(),
+  subject: z17.string(),
   topic: Slug.nullable(),
-  provider_message_id: z16.string().nullable(),
-  is_test: z16.boolean()
+  provider_message_id: z17.string().nullable(),
+  is_test: z17.boolean()
 });
 var MessageSentData = MessageEventBase.extend({
   /** The final HTML as sent, so the client can archive it beside its own records. */
-  html: z16.string(),
+  html: z17.string(),
   sent_at: Timestamp,
   /**
    * The choice each insertion made (see `Message.insertions`); absent or null
@@ -4101,20 +4126,20 @@ var MessageSentData = MessageEventBase.extend({
   insertions: InsertionChoices.nullish()
 });
 var MessageFailedData = MessageEventBase.extend({
-  error: z16.string(),
+  error: z17.string(),
   /** False when the provider rejected permanently; the recipient will not be retried. */
-  retryable: z16.boolean(),
+  retryable: z17.boolean(),
   failed_at: Timestamp
 });
 var UNSUBSCRIBE_SOURCES = ["hosted_page", "one_click", "api", "dashboard", "signup_form"];
-var ContactUnsubscribedData = z16.object({
+var ContactUnsubscribedData = z17.object({
   contact_id: Id.nullable(),
-  external_id: z16.string().nullable(),
+  external_id: z17.string().nullable(),
   email: Email,
   /** The topic unsubscribed from; null means every topic. */
   topic: Slug.nullable(),
   mailing_id: Id.nullable(),
-  source: z16.enum(UNSUBSCRIBE_SOURCES),
+  source: z17.enum(UNSUBSCRIBE_SOURCES),
   unsubscribed_at: Timestamp
 });
 var ContactResubscribedData = ContactUnsubscribedData.omit({ unsubscribed_at: true }).extend({
@@ -4123,142 +4148,142 @@ var ContactResubscribedData = ContactUnsubscribedData.omit({ unsubscribed_at: tr
    * breaker undid a `bounced` block it judged false (a `contact.bounced` for the
    * same address and mailing went out before); `topic` is null.
    */
-  source: z16.enum([...UNSUBSCRIBE_SOURCES, "bounce_reverted"]),
+  source: z17.enum([...UNSUBSCRIBE_SOURCES, "bounce_reverted"]),
   resubscribed_at: Timestamp
 });
-var ContactBouncedData = z16.object({
+var ContactBouncedData = z17.object({
   contact_id: Id.nullable(),
-  external_id: z16.string().nullable(),
+  external_id: z17.string().nullable(),
   email: Email,
   /** `bounced` for a hard bounce, `complained` for a spam complaint. */
-  reason: z16.enum(["bounced", "complained"]),
+  reason: z17.enum(["bounced", "complained"]),
   message_id: Id.nullable(),
-  diagnostic: z16.string().nullable(),
+  diagnostic: z17.string().nullable(),
   bounced_at: Timestamp
 });
-var MailingFinishedData = z16.object({
+var MailingFinishedData = z17.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  status: z16.enum(["sent", "partially_failed", "cancelled"]),
+  status: z17.enum(["sent", "partially_failed", "cancelled"]),
   counts: MailingCounts,
   finished_at: Timestamp
 });
-var ContactSubscribedData = z16.object({
+var ContactSubscribedData = z17.object({
   contact_id: Id,
-  external_id: z16.string().nullable(),
+  external_id: z17.string().nullable(),
   email: Email,
-  topics: z16.array(Slug),
-  source: z16.enum(["signup_form", "api", "dashboard", "automation"]),
+  topics: z17.array(Slug),
+  source: z17.enum(["signup_form", "api", "dashboard", "automation"]),
   signup_form_id: Id.nullable(),
-  signup_form_version: z16.number().int().min(1).nullable(),
+  signup_form_version: z17.number().int().min(1).nullable(),
   subscribed_at: Timestamp
 });
-var ImportFinishedData = z16.object({
+var ImportFinishedData = z17.object({
   import_id: Id,
-  status: z16.enum(["completed", "cancelled", "failed"]),
+  status: z17.enum(["completed", "cancelled", "failed"]),
   result: ImportReport.nullable(),
-  error: z16.string().nullable(),
+  error: z17.string().nullable(),
   finished_at: Timestamp
 });
-var MailingScheduledData = z16.object({
+var MailingScheduledData = z17.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
   scheduled_at: Timestamp.nullable()
 });
-var MailingStartedData = z16.object({
+var MailingStartedData = z17.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  trigger: z16.enum(["send", "schedule"]),
-  recipients: z16.number().int().min(0),
+  trigger: z17.enum(["send", "schedule"]),
+  recipients: z17.number().int().min(0),
   started_at: Timestamp
 });
-var MailingScheduleFailedData = z16.object({
+var MailingScheduleFailedData = z17.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  code: z16.string(),
-  message: z16.string(),
+  code: z17.string(),
+  message: z17.string(),
   failed_at: Timestamp
 });
-var MailingAbWinnerSelectedData = z16.object({
+var MailingAbWinnerSelectedData = z17.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  winner: z16.string(),
-  decided_by: z16.enum(["metric", "manual"]),
-  variants: z16.array(VariantAnalytics),
+  winner: z17.string(),
+  decided_by: z17.enum(["metric", "manual"]),
+  variants: z17.array(VariantAnalytics),
   decided_at: Timestamp
 });
-var ContactTaggedData = z16.object({
+var ContactTaggedData = z17.object({
   contact_id: Id,
-  external_id: z16.string().nullable(),
+  external_id: z17.string().nullable(),
   email: Email,
   /** Only the tags the contact did not already have. */
-  tags: z16.array(Slug).min(1),
-  source: z16.enum(["api", "dashboard", "signup_form", "import", "automation"]),
+  tags: z17.array(Slug).min(1),
+  source: z17.enum(["api", "dashboard", "signup_form", "import", "automation"]),
   tagged_at: Timestamp
 });
-var ContactUpdatedData = z16.object({
+var ContactUpdatedData = z17.object({
   contact_id: Id,
-  external_id: z16.string().nullable(),
+  external_id: z17.string().nullable(),
   email: Email,
-  changed: z16.array(z16.string()).min(1),
+  changed: z17.array(z17.string()).min(1),
   properties: Properties,
-  source: z16.enum(["api", "dashboard", "signup_form", "import", "automation"]),
+  source: z17.enum(["api", "dashboard", "signup_form", "import", "automation"]),
   updated_at: Timestamp
 });
-var AutomationRunEventBase = z16.object({
+var AutomationRunEventBase = z17.object({
   automation_id: Id,
-  automation_name: z16.string(),
+  automation_name: z17.string(),
   run_id: Id,
-  version: z16.number().int().min(1),
+  version: z17.number().int().min(1),
   contact_id: Id,
-  external_id: z16.string().nullable(),
+  external_id: z17.string().nullable(),
   email: Email
 });
 var AutomationRunStartedData = AutomationRunEventBase.extend({
   /** What let them in: a trigger kind, or `manual` for an explicit enrolment. */
-  trigger_kind: z16.string(),
+  trigger_kind: z17.string(),
   entered_at: Timestamp
 });
 var AutomationRunCompletedData = AutomationRunEventBase.extend({
-  last_step_id: z16.string().nullable(),
+  last_step_id: z17.string().nullable(),
   completed_at: Timestamp
 });
 var AutomationRunExitedData = AutomationRunEventBase.extend({
   reason: AutomationEndReason,
-  step_id: z16.string().nullable(),
+  step_id: z17.string().nullable(),
   exited_at: Timestamp
 });
 var AutomationRunFailedData = AutomationRunEventBase.extend({
-  reason: z16.string(),
-  step_id: z16.string().nullable(),
+  reason: z17.string(),
+  step_id: z17.string().nullable(),
   failed_at: Timestamp
 });
 var AutomationWebhookData = AutomationRunEventBase.extend({
-  step_id: z16.string(),
+  step_id: z17.string(),
   /** The step's own label, when it was given one, so a receiver can branch on a name. */
-  step_label: z16.string().nullable(),
+  step_label: z17.string().nullable(),
   /** Whatever the step carries, verbatim. Null when it carries nothing. */
   payload: JsonValue.nullable(),
   fired_at: Timestamp
 });
-var TemplateEventBase = z16.object({
+var TemplateEventBase = z17.object({
   template_id: Id,
-  name: z16.string().min(1).max(200),
-  version: z16.number().int().min(1),
-  source: z16.enum(["api", "dashboard", "mjml_import"])
+  name: z17.string().min(1).max(200),
+  version: z17.number().int().min(1),
+  source: z17.enum(["api", "dashboard", "mjml_import"])
 });
 var TemplateCreatedData = TemplateEventBase.extend({ created_at: Timestamp });
-var TemplateUpdatedData = TemplateEventBase.extend({ archived: z16.boolean(), updated_at: Timestamp });
+var TemplateUpdatedData = TemplateEventBase.extend({ archived: z17.boolean(), updated_at: Timestamp });
 var TemplateDeletedData = TemplateEventBase.extend({ deleted_at: Timestamp });
-var envelope = (type, data) => z16.object({
+var envelope = (type, data) => z17.object({
   /** Unique per event: a receiver deduplicates on it (deliveries may repeat). */
   id: Id,
-  type: z16.literal(type),
+  type: z17.literal(type),
   created_at: Timestamp,
   workspace_id: Id,
   data
 });
-var WebhookEvent = z16.discriminatedUnion("type", [
+var WebhookEvent = z17.discriminatedUnion("type", [
   envelope("message.sent", MessageSentData),
   envelope("message.failed", MessageFailedData),
   envelope("contact.unsubscribed", ContactUnsubscribedData),
@@ -4282,16 +4307,16 @@ var WebhookEvent = z16.discriminatedUnion("type", [
   envelope("template.updated", TemplateUpdatedData),
   envelope("template.deleted", TemplateDeletedData)
 ]);
-var WebhookEndpoint = z16.object({
+var WebhookEndpoint = z17.object({
   id: Id,
-  url: z16.string().url(),
-  description: z16.string().max(500).nullable(),
-  events: z16.array(WebhookEventType).min(1),
-  enabled: z16.boolean(),
+  url: z17.string().url(),
+  description: z17.string().max(500).nullable(),
+  events: z17.array(WebhookEventType).min(1),
+  enabled: z17.boolean(),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var WebhookUrl = z16.string().url().refine((u) => {
+var WebhookUrl = z17.string().url().refine((u) => {
   try {
     const url = new URL(u);
     if (url.protocol === "https:") return true;
@@ -4300,35 +4325,35 @@ var WebhookUrl = z16.string().url().refine((u) => {
     return false;
   }
 }, "must be https (http only for localhost)");
-var WebhookEndpointCreate = z16.object({
+var WebhookEndpointCreate = z17.object({
   url: WebhookUrl,
-  description: z16.string().max(500).optional(),
-  events: z16.array(WebhookEventType).min(1),
-  enabled: z16.boolean().optional()
+  description: z17.string().max(500).optional(),
+  events: z17.array(WebhookEventType).min(1),
+  enabled: z17.boolean().optional()
 });
-var WebhookEndpointUpdate = z16.object({
+var WebhookEndpointUpdate = z17.object({
   url: WebhookUrl,
-  description: z16.string().max(500).nullable(),
-  events: z16.array(WebhookEventType).min(1),
-  enabled: z16.boolean()
+  description: z17.string().max(500).nullable(),
+  events: z17.array(WebhookEventType).min(1),
+  enabled: z17.boolean()
 }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var WebhookEndpointWithSecret = z16.object({
+var WebhookEndpointWithSecret = z17.object({
   endpoint: WebhookEndpoint,
-  secret: z16.string().min(32)
+  secret: z17.string().min(32)
 });
 var WEBHOOK_DELIVERY_STATUSES = ["pending", "succeeded", "failed"];
-var WebhookDeliveryStatus = z16.enum(WEBHOOK_DELIVERY_STATUSES);
+var WebhookDeliveryStatus = z17.enum(WEBHOOK_DELIVERY_STATUSES);
 var WEBHOOK_MAX_ATTEMPTS = 8;
 var WEBHOOK_RETRY_DELAYS_SECONDS = [30, 120, 600, 1800, 3600, 7200, 21600];
-var WebhookDelivery = z16.object({
+var WebhookDelivery = z17.object({
   id: Id,
   endpoint_id: Id,
   event_id: Id,
   event_type: WebhookEventType,
   status: WebhookDeliveryStatus,
-  attempts: z16.number().int().min(0),
-  last_status_code: z16.number().int().min(100).max(599).nullable(),
-  last_error: z16.string().nullable(),
+  attempts: z17.number().int().min(0),
+  last_status_code: z17.number().int().min(100).max(599).nullable(),
+  last_error: z17.string().nullable(),
   next_attempt_at: Timestamp.nullable(),
   delivered_at: Timestamp.nullable(),
   created_at: Timestamp
@@ -4337,7 +4362,7 @@ var WebhookDeliveryListQuery = PageQuery.extend({
   status: WebhookDeliveryStatus.optional(),
   event_type: WebhookEventType.optional()
 });
-var WebhookDeliveryParams = z16.object({ id: Id, delivery_id: Id });
+var WebhookDeliveryParams = z17.object({ id: Id, delivery_id: Id });
 
 // src/webhook-signing.ts
 var WEBHOOK_SIGNATURE_HEADER = "x-mail-signature";
@@ -4404,94 +4429,96 @@ async function verifyWebhook(input) {
 }
 
 // src/billing.ts
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 var PLAN_IDS = ["free", "starter", "growth", "design_partner"];
-var PlanId = z17.enum(PLAN_IDS);
-var PlanLimits = z17.object({
-  monthly_messages: z17.number().int().min(0).nullable(),
-  contacts: z17.number().int().min(0).nullable(),
-  members: z17.number().int().min(1).nullable(),
-  providers: z17.number().int().min(1).nullable(),
-  webhook_endpoints: z17.number().int().min(0).nullable(),
+var PlanId = z18.enum(PLAN_IDS);
+var PlanLimits = z18.object({
+  monthly_messages: z18.number().int().min(0).nullable(),
+  contacts: z18.number().int().min(0).nullable(),
+  members: z18.number().int().min(1).nullable(),
+  providers: z18.number().int().min(1).nullable(),
+  webhook_endpoints: z18.number().int().min(0).nullable(),
   /** Automations that may be live (active or paused) at once (A1). */
-  active_automations: z17.number().int().min(0).nullable(),
+  active_automations: z18.number().int().min(0).nullable(),
   /** Steps one automation may hold. Null is the flow's own cap, not unlimited. */
-  automation_steps: z17.number().int().min(1).nullable(),
+  automation_steps: z18.number().int().min(1).nullable(),
   /** Own domains Lumitra Mail sends from (managed sending domains); 0 when the plan has none. */
-  sending_domains: z17.number().int().min(0).nullable()
+  sending_domains: z18.number().int().min(0).nullable()
 });
-var PlanFeatures = z17.object({
+var PlanFeatures = z18.object({
   /** A/B tests of subject and content on a mailing (S4). */
-  ab_testing: z17.boolean(),
+  ab_testing: z18.boolean(),
   /** Open and click tracking, still off until a workspace turns it on (`settings.tracking_enabled`). */
-  tracking: z17.boolean(),
+  tracking: z18.boolean(),
   /** Automations: flows a person walks through step by step (A1). */
-  automations: z17.boolean()
+  automations: z18.boolean()
 });
 var PLAN_FEATURES = ["ab_testing", "tracking", "automations"];
-var Plan = z17.object({
+var Plan = z18.object({
   id: PlanId,
-  name: z17.string().min(1),
+  name: z18.string().min(1),
   /** Price in the smallest currency unit per month; null for plans not sold. */
-  monthly_price_cents: z17.number().int().min(0).nullable(),
-  currency: z17.string().length(3),
+  monthly_price_cents: z18.number().int().min(0).nullable(),
+  currency: z18.string().length(3),
   limits: PlanLimits,
   features: PlanFeatures
 });
-var CatalogPlan = Plan.extend({ sellable: z17.boolean() });
-var Subscription = z17.object({
+var CatalogPlan = Plan.extend({ sellable: z18.boolean() });
+var Subscription = z18.object({
   workspace_id: Id,
   plan: PlanId,
-  status: z17.enum(["active", "trialing", "past_due", "cancelled"]),
+  status: z18.enum(["active", "trialing", "past_due", "cancelled"]),
   current_period_start: Timestamp,
   current_period_end: Timestamp,
-  cancel_at_period_end: z17.boolean(),
+  cancel_at_period_end: z18.boolean(),
   /**
    * A design partner outside billing (plan `design_partner`, no limits, no
    * checkout). Set only by an operator, never through the API.
    */
-  billing_exempt: z17.boolean(),
+  billing_exempt: z18.boolean(),
   /**
    * Own sending domains bought on top of the plan's included ones (the
    * add-on), each a monthly charge on the same subscription. 0 without the
    * add-on; the usage limit `sending_domains` is the plan's plus these.
    */
-  extra_sending_domains: z17.number().int().min(0)
+  extra_sending_domains: z18.number().int().min(0)
 });
-var BillingAddons = z17.object({
-  sending_domain: z17.object({
-    monthly_price_cents: z17.number().int().min(0),
-    currency: z17.string().length(3),
-    sellable: z17.boolean()
+var BillingAddons = z18.object({
+  sending_domain: z18.object({
+    monthly_price_cents: z18.number().int().min(0),
+    currency: z18.string().length(3),
+    sellable: z18.boolean()
   })
 });
 var MAX_EXTRA_SENDING_DOMAINS = 100;
-var ExtraSendingDomainsUpdate = z17.object({ quantity: z17.number().int().min(0).max(MAX_EXTRA_SENDING_DOMAINS) });
+var ExtraSendingDomainsUpdate = z18.object({ quantity: z18.number().int().min(0).max(MAX_EXTRA_SENDING_DOMAINS) });
 var USAGE_METRICS = ["messages", "contacts", "members", "providers", "webhook_endpoints", "active_automations", "sending_domains"];
-var UsageMetric = z17.enum(USAGE_METRICS);
+var UsageMetric = z18.enum(USAGE_METRICS);
 var USAGE_WARNING_RATIO = 0.8;
-var UsageWarning = z17.object({
+var UsageWarning = z18.object({
   metric: UsageMetric,
-  used: z17.number().int().min(0),
-  limit: z17.number().int().min(0),
+  used: z18.number().int().min(0),
+  limit: z18.number().int().min(0),
   /** `approaching`: at or above USAGE_WARNING_RATIO of the limit; `reached`: at or above the limit. */
-  level: z17.enum(["approaching", "reached"])
+  level: z18.enum(["approaching", "reached"])
 });
-var Usage = z17.object({
+var Usage = z18.object({
   plan: PlanId,
   period_start: Timestamp,
   period_end: Timestamp,
-  metrics: z17.record(UsageMetric, z17.object({ used: z17.number().int().min(0), limit: z17.number().int().min(0).nullable() })),
-  warnings: z17.array(UsageWarning)
-});
-var CheckoutRequest = z17.object({
-  plan: z17.enum(["starter", "growth"]),
-  success_url: z17.string().url(),
-  cancel_url: z17.string().url()
-});
-var CheckoutSession = z17.object({ url: z17.string().url() });
-var PortalRequest = z17.object({ return_url: z17.string().url() });
-var PortalSession = z17.object({ url: z17.string().url() });
+  metrics: z18.record(UsageMetric, z18.object({ used: z18.number().int().min(0), limit: z18.number().int().min(0).nullable() })),
+  warnings: z18.array(UsageWarning)
+});
+var CheckoutRequest = z18.object({
+  plan: z18.enum(["starter", "growth"]),
+  success_url: z18.string().url(),
+  cancel_url: z18.string().url(),
+  /** The buyer accepted the terms of service and the processing agreement of this version. */
+  accept_terms: AcceptTerms
+});
+var CheckoutSession = z18.object({ url: z18.string().url() });
+var PortalRequest = z18.object({ return_url: z18.string().url() });
+var PortalSession = z18.object({ url: z18.string().url() });
 var USAGE_WARNING_HEADER = "x-mail-usage-warning";
 function formatUsageWarningHeader(warnings) {
   if (warnings.length === 0) return null;
@@ -4511,7 +4538,7 @@ function parseUsageWarningHeader(value) {
 }
 
 // src/routes.ts
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 var list = (item) => page(item);
 var foundationRoutes = {
   "workspaces.create": {
@@ -4757,7 +4784,7 @@ var templateRoutes = {
     path: "/v1/templates/:id/export",
     params: IdParams,
     query: TemplateExportQuery,
-    response: z18.string(),
+    response: z19.string(),
     responseType: "text",
     status: 200,
     access: "read",
@@ -5137,7 +5164,7 @@ var sendingRoutes = {
     path: "/v1/mailings/:id/export",
     params: IdParams,
     query: MailingExportQuery,
-    response: z18.string(),
+    response: z19.string(),
     responseType: "text",
     status: 200,
     access: "read",
@@ -5404,7 +5431,7 @@ var platformRoutes = {
   "contactProperties.list": {
     method: "GET",
     path: "/v1/contact-properties",
-    response: z18.object({ data: z18.array(ContactPropertyDefinition) }),
+    response: z19.object({ data: z19.array(ContactPropertyDefinition) }),
     status: 200,
     access: "read",
     phase: "S4"
@@ -5703,7 +5730,7 @@ var billingRoutes = {
   "billing.plans": {
     method: "GET",
     path: "/v1/billing/plans",
-    response: z18.object({ data: z18.array(CatalogPlan), addons: BillingAddons }),
+    response: z19.object({ data: z19.array(CatalogPlan), addons: BillingAddons }),
     status: 200,
     access: "read",
     phase: "S5"
@@ -5854,7 +5881,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/pause",
     params: IdParams,
-    body: z18.object({}).strict(),
+    body: z19.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -5864,7 +5891,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/resume",
     params: IdParams,
-    body: z18.object({}).strict(),
+    body: z19.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -5874,7 +5901,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/archive",
     params: IdParams,
-    body: z18.object({}).strict(),
+    body: z19.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -6054,6 +6081,7 @@ export {
   AbTestState,
   AbVariant,
   AbWinnerRequest,
+  AcceptTerms,
   ApiKey,
   ApiKeyCreate,
   ApiKeyCreated,
@@ -6225,6 +6253,7 @@ export {
   InviteListQuery,
   InviteStatus,
   JsonValue,
+  LEGAL_TERMS_VERSION,
   LETTER_ONLY_MERGE_FIELDS,
   LETTER_RECIPIENT_REFUSAL,
   LIST_UNSUBSCRIBE_POST_VALUE,
@@ -6634,6 +6663,7 @@ export {
   sameJson,
   sampleMergeValue,
   saveDemotions,
+  sendingDomainRecordFullName,
   sendingRoutes,
   setInsertionBy,
   setInsertionFilled,