@primitivedotdev/sdk 0.17.0 → 0.19.0

package/dist/openapi/openapi.generated.js

@@ -31,6 +31,10 @@ export const openapiDocument = {
         }
     ],
     "tags": [
+        {
+            "name": "CLI",
+            "description": "Browser-assisted CLI authentication"
+        },
         {
             "name": "Account",
             "description": "Manage your account settings, storage, and webhook secret"
@@ -61,6 +65,251 @@ export const openapiDocument = {
         }
     ],
     "paths": {
+        "/cli/login/start": {
+            "post": {
+                "operationId": "startCliLogin",
+                "summary": "Start CLI browser login",
+                "description": "Starts a browser-assisted CLI login session. The response includes a\ndevice code for polling and a user code that the user approves in the\nbrowser. This endpoint does not require an API key.\n",
+                "tags": [
+                    "CLI"
+                ],
+                "security": [],
+                "requestBody": {
+                    "required": false,
+                    "content": {
+                        "application/json": {
+                            "schema": {
+                                "$ref": "#/components/schemas/StartCliLoginInput"
+                            }
+                        }
+                    }
+                },
+                "responses": {
+                    "201": {
+                        "description": "CLI login session created",
+                        "headers": {
+                            "Cache-Control": {
+                                "schema": {
+                                    "type": "string"
+                                },
+                                "description": "Always `no-store`"
+                            }
+                        },
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "allOf": [
+                                        {
+                                            "$ref": "#/components/schemas/SuccessEnvelope"
+                                        },
+                                        {
+                                            "type": "object",
+                                            "properties": {
+                                                "data": {
+                                                    "$ref": "#/components/schemas/CliLoginStartResult"
+                                                }
+                                            }
+                                        }
+                                    ]
+                                }
+                            }
+                        }
+                    },
+                    "400": {
+                        "$ref": "#/components/responses/ValidationError"
+                    },
+                    "429": {
+                        "$ref": "#/components/responses/RateLimited"
+                    }
+                }
+            }
+        },
+        "/cli/login/poll": {
+            "post": {
+                "operationId": "pollCliLogin",
+                "summary": "Poll CLI browser login",
+                "description": "Polls a CLI login session until the browser approval either succeeds,\nis denied, expires, or is polled too quickly. The API key is generated\nonly after approval and is returned exactly once.\n",
+                "tags": [
+                    "CLI"
+                ],
+                "security": [],
+                "requestBody": {
+                    "required": true,
+                    "content": {
+                        "application/json": {
+                            "schema": {
+                                "$ref": "#/components/schemas/PollCliLoginInput"
+                            }
+                        }
+                    }
+                },
+                "responses": {
+                    "200": {
+                        "description": "CLI login approved and API key created",
+                        "headers": {
+                            "Cache-Control": {
+                                "schema": {
+                                    "type": "string"
+                                },
+                                "description": "Always `no-store`"
+                            }
+                        },
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "allOf": [
+                                        {
+                                            "$ref": "#/components/schemas/SuccessEnvelope"
+                                        },
+                                        {
+                                            "type": "object",
+                                            "properties": {
+                                                "data": {
+                                                    "$ref": "#/components/schemas/CliLoginPollResult"
+                                                }
+                                            }
+                                        }
+                                    ]
+                                }
+                            }
+                        }
+                    },
+                    "400": {
+                        "description": "Invalid request, pending authorization, slow polling, expired token, or invalid device code",
+                        "headers": {
+                            "Retry-After": {
+                                "schema": {
+                                    "type": "integer"
+                                },
+                                "description": "Seconds to wait before polling again when the error code is `slow_down`"
+                            }
+                        },
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/ErrorResponse"
+                                },
+                                "examples": {
+                                    "authorization_pending": {
+                                        "summary": "Awaiting browser approval",
+                                        "value": {
+                                            "success": false,
+                                            "error": {
+                                                "code": "authorization_pending",
+                                                "message": "CLI login is still pending browser approval"
+                                            }
+                                        }
+                                    },
+                                    "expired_token": {
+                                        "summary": "Login session expired",
+                                        "value": {
+                                            "success": false,
+                                            "error": {
+                                                "code": "expired_token",
+                                                "message": "CLI login code expired; run primitive login again"
+                                            }
+                                        }
+                                    },
+                                    "invalid_device_code": {
+                                        "summary": "Unknown device code",
+                                        "value": {
+                                            "success": false,
+                                            "error": {
+                                                "code": "invalid_device_code",
+                                                "message": "Invalid CLI login device code"
+                                            }
+                                        }
+                                    },
+                                    "slow_down": {
+                                        "summary": "Polling too quickly",
+                                        "value": {
+                                            "success": false,
+                                            "error": {
+                                                "code": "slow_down",
+                                                "message": "Polling too quickly; slow down and retry later"
+                                            }
+                                        }
+                                    }
+                                }
+                            }
+                        }
+                    },
+                    "403": {
+                        "description": "CLI login was denied in the browser",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/ErrorResponse"
+                                },
+                                "example": {
+                                    "success": false,
+                                    "error": {
+                                        "code": "access_denied",
+                                        "message": "CLI login was denied in the browser"
+                                    }
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+        },
+        "/cli/logout": {
+            "post": {
+                "operationId": "cliLogout",
+                "summary": "Revoke the current CLI API key",
+                "description": "Revokes the API key used to authenticate the request. CLI clients use\nthis endpoint during `primitive logout` before removing local credentials.\n",
+                "tags": [
+                    "CLI"
+                ],
+                "requestBody": {
+                    "required": false,
+                    "content": {
+                        "application/json": {
+                            "schema": {
+                                "$ref": "#/components/schemas/CliLogoutInput"
+                            }
+                        }
+                    }
+                },
+                "responses": {
+                    "200": {
+                        "description": "CLI API key revoked",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "allOf": [
+                                        {
+                                            "$ref": "#/components/schemas/SuccessEnvelope"
+                                        },
+                                        {
+                                            "type": "object",
+                                            "properties": {
+                                                "data": {
+                                                    "$ref": "#/components/schemas/CliLogoutResult"
+                                                }
+                                            }
+                                        }
+                                    ]
+                                }
+                            }
+                        }
+                    },
+                    "400": {
+                        "$ref": "#/components/responses/ValidationError"
+                    },
+                    "401": {
+                        "$ref": "#/components/responses/Unauthorized"
+                    },
+                    "403": {
+                        "$ref": "#/components/responses/Forbidden"
+                    },
+                    "404": {
+                        "$ref": "#/components/responses/NotFound"
+                    }
+                }
+            }
+        },
         "/account": {
             "get": {
                 "operationId": "getAccount",
@@ -987,7 +1236,7 @@ export const openapiDocument = {
             "post": {
                 "operationId": "discardEmailContent",
                 "summary": "Discard email content",
-                "description": "Permanently deletes the email's raw bytes, parsed body (text + HTML),\nand attachments while preserving metadata (sender, recipient,\nsubject, timestamps, hashes, attachment manifest) for audit logs.\nIdempotent: a second call returns success with\n`already_discarded: true` and does no work.\n\n**Gated** on the customer's discard-content opt-in (managed in the\ndashboard at Settings > Webhooks). When the toggle is off, this\nendpoint returns `403` with code `discard_not_enabled` and a\nmessage pointing the human at the dashboard. There is intentionally\nno API to flip this toggle — opting in to a destructive,\nnon-reversible operation must be a deliberate human click in the\nUI.\n",
+                "description": "Permanently deletes the email's raw bytes, parsed body (text + HTML),\nand attachments while preserving metadata (sender, recipient,\nsubject, timestamps, hashes, attachment manifest) for audit logs.\nIdempotent: a second call returns success with\n`already_discarded: true` and does no work.\n\n**Gated** on the customer's discard-content opt-in (managed in the\ndashboard at Settings > Webhooks). When the toggle is off, this\nendpoint returns `403` with code `discard_not_enabled` and a\nmessage pointing the human at the dashboard. There is intentionally\nno API to flip this toggle. Opting in to a destructive,\nnon-reversible operation must be a deliberate human click in the\nUI.\n",
                 "tags": [
                     "Emails"
                 ],
@@ -2157,7 +2406,12 @@ export const openapiDocument = {
                                     "outbound_response_malformed",
                                     "outbound_relay_failed",
                                     "discard_not_enabled",
-                                    "inbound_not_repliable"
+                                    "inbound_not_repliable",
+                                    "authorization_pending",
+                                    "slow_down",
+                                    "access_denied",
+                                    "expired_token",
+                                    "invalid_device_code"
                                 ]
                             },
                             "message": {
@@ -2295,6 +2549,135 @@ export const openapiDocument = {
                     "subject"
                 ]
             },
+            "StartCliLoginInput": {
+                "type": "object",
+                "additionalProperties": false,
+                "properties": {
+                    "device_name": {
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 80,
+                        "description": "Human-readable device name shown during browser approval"
+                    },
+                    "metadata": {
+                        "type": "object",
+                        "additionalProperties": true,
+                        "description": "Optional client metadata stored with the login session; serialized JSON must be 2048 bytes or fewer"
+                    }
+                }
+            },
+            "CliLoginStartResult": {
+                "type": "object",
+                "properties": {
+                    "device_code": {
+                        "type": "string",
+                        "description": "Opaque code used by the CLI to poll for approval"
+                    },
+                    "user_code": {
+                        "type": "string",
+                        "pattern": "^[BCDFGHJKLMNPQRSTVWXZ]{4}-[BCDFGHJKLMNPQRSTVWXZ]{4}$",
+                        "description": "Short code the user confirms in the browser"
+                    },
+                    "verification_uri": {
+                        "type": "string",
+                        "description": "Browser URL where the user approves the login"
+                    },
+                    "verification_uri_complete": {
+                        "type": "string",
+                        "description": "Browser URL with the user code prefilled"
+                    },
+                    "expires_in": {
+                        "type": "integer",
+                        "description": "Seconds until the login session expires"
+                    },
+                    "interval": {
+                        "type": "integer",
+                        "description": "Minimum seconds between poll requests"
+                    }
+                },
+                "required": [
+                    "device_code",
+                    "user_code",
+                    "verification_uri",
+                    "verification_uri_complete",
+                    "expires_in",
+                    "interval"
+                ]
+            },
+            "PollCliLoginInput": {
+                "type": "object",
+                "additionalProperties": false,
+                "properties": {
+                    "device_code": {
+                        "type": "string",
+                        "minLength": 1
+                    }
+                },
+                "required": [
+                    "device_code"
+                ]
+            },
+            "CliLoginPollResult": {
+                "type": "object",
+                "properties": {
+                    "api_key": {
+                        "type": "string",
+                        "description": "Newly-created API key for CLI authentication"
+                    },
+                    "key_id": {
+                        "type": "string",
+                        "format": "uuid"
+                    },
+                    "key_prefix": {
+                        "type": "string"
+                    },
+                    "org_id": {
+                        "type": "string",
+                        "format": "uuid"
+                    },
+                    "org_name": {
+                        "type": [
+                            "string",
+                            "null"
+                        ]
+                    }
+                },
+                "required": [
+                    "api_key",
+                    "key_id",
+                    "key_prefix",
+                    "org_id",
+                    "org_name"
+                ]
+            },
+            "CliLogoutInput": {
+                "type": "object",
+                "additionalProperties": false,
+                "properties": {
+                    "key_id": {
+                        "type": "string",
+                        "format": "uuid",
+                        "description": "Optional key id guard; when provided it must match the authenticated API key"
+                    }
+                }
+            },
+            "CliLogoutResult": {
+                "type": "object",
+                "properties": {
+                    "revoked": {
+                        "type": "boolean",
+                        "const": true
+                    },
+                    "key_id": {
+                        "type": "string",
+                        "format": "uuid"
+                    }
+                },
+                "required": [
+                    "revoked",
+                    "key_id"
+                ]
+            },
             "Account": {
                 "type": "object",
                 "properties": {

package/dist/openapi/operations.generated.js

@@ -274,6 +274,183 @@ export const operationManifest = [
         "tag": "Account",
         "tagCommand": "account"
     },
+    {
+        "binaryResponse": false,
+        "bodyRequired": false,
+        "command": "cli-logout",
+        "description": "Revokes the API key used to authenticate the request. CLI clients use\nthis endpoint during `primitive logout` before removing local credentials.\n",
+        "hasJsonBody": true,
+        "method": "POST",
+        "operationId": "cliLogout",
+        "path": "/cli/logout",
+        "pathParams": [],
+        "queryParams": [],
+        "requestSchema": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+                "key_id": {
+                    "type": "string",
+                    "format": "uuid",
+                    "description": "Optional key id guard; when provided it must match the authenticated API key"
+                }
+            }
+        },
+        "responseSchema": {
+            "type": "object",
+            "properties": {
+                "revoked": {
+                    "type": "boolean",
+                    "const": true
+                },
+                "key_id": {
+                    "type": "string",
+                    "format": "uuid"
+                }
+            },
+            "required": [
+                "revoked",
+                "key_id"
+            ]
+        },
+        "sdkName": "cliLogout",
+        "summary": "Revoke the current CLI API key",
+        "tag": "CLI",
+        "tagCommand": "cli"
+    },
+    {
+        "binaryResponse": false,
+        "bodyRequired": true,
+        "command": "poll-cli-login",
+        "description": "Polls a CLI login session until the browser approval either succeeds,\nis denied, expires, or is polled too quickly. The API key is generated\nonly after approval and is returned exactly once.\n",
+        "hasJsonBody": true,
+        "method": "POST",
+        "operationId": "pollCliLogin",
+        "path": "/cli/login/poll",
+        "pathParams": [],
+        "queryParams": [],
+        "requestSchema": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+                "device_code": {
+                    "type": "string",
+                    "minLength": 1
+                }
+            },
+            "required": [
+                "device_code"
+            ]
+        },
+        "responseSchema": {
+            "type": "object",
+            "properties": {
+                "api_key": {
+                    "type": "string",
+                    "description": "Newly-created API key for CLI authentication"
+                },
+                "key_id": {
+                    "type": "string",
+                    "format": "uuid"
+                },
+                "key_prefix": {
+                    "type": "string"
+                },
+                "org_id": {
+                    "type": "string",
+                    "format": "uuid"
+                },
+                "org_name": {
+                    "type": [
+                        "string",
+                        "null"
+                    ]
+                }
+            },
+            "required": [
+                "api_key",
+                "key_id",
+                "key_prefix",
+                "org_id",
+                "org_name"
+            ]
+        },
+        "sdkName": "pollCliLogin",
+        "summary": "Poll CLI browser login",
+        "tag": "CLI",
+        "tagCommand": "cli"
+    },
+    {
+        "binaryResponse": false,
+        "bodyRequired": false,
+        "command": "start-cli-login",
+        "description": "Starts a browser-assisted CLI login session. The response includes a\ndevice code for polling and a user code that the user approves in the\nbrowser. This endpoint does not require an API key.\n",
+        "hasJsonBody": true,
+        "method": "POST",
+        "operationId": "startCliLogin",
+        "path": "/cli/login/start",
+        "pathParams": [],
+        "queryParams": [],
+        "requestSchema": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+                "device_name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 80,
+                    "description": "Human-readable device name shown during browser approval"
+                },
+                "metadata": {
+                    "type": "object",
+                    "additionalProperties": true,
+                    "description": "Optional client metadata stored with the login session; serialized JSON must be 2048 bytes or fewer"
+                }
+            }
+        },
+        "responseSchema": {
+            "type": "object",
+            "properties": {
+                "device_code": {
+                    "type": "string",
+                    "description": "Opaque code used by the CLI to poll for approval"
+                },
+                "user_code": {
+                    "type": "string",
+                    "pattern": "^[BCDFGHJKLMNPQRSTVWXZ]{4}-[BCDFGHJKLMNPQRSTVWXZ]{4}$",
+                    "description": "Short code the user confirms in the browser"
+                },
+                "verification_uri": {
+                    "type": "string",
+                    "description": "Browser URL where the user approves the login"
+                },
+                "verification_uri_complete": {
+                    "type": "string",
+                    "description": "Browser URL with the user code prefilled"
+                },
+                "expires_in": {
+                    "type": "integer",
+                    "description": "Seconds until the login session expires"
+                },
+                "interval": {
+                    "type": "integer",
+                    "description": "Minimum seconds between poll requests"
+                }
+            },
+            "required": [
+                "device_code",
+                "user_code",
+                "verification_uri",
+                "verification_uri_complete",
+                "expires_in",
+                "interval"
+            ]
+        },
+        "sdkName": "startCliLogin",
+        "summary": "Start CLI browser login",
+        "tag": "CLI",
+        "tagCommand": "cli"
+    },
     {
         "binaryResponse": false,
         "bodyRequired": true,
@@ -668,7 +845,7 @@ export const operationManifest = [
         "binaryResponse": false,
         "bodyRequired": false,
         "command": "discard-email-content",
-        "description": "Permanently deletes the email's raw bytes, parsed body (text + HTML),\nand attachments while preserving metadata (sender, recipient,\nsubject, timestamps, hashes, attachment manifest) for audit logs.\nIdempotent: a second call returns success with\n`already_discarded: true` and does no work.\n\n**Gated** on the customer's discard-content opt-in (managed in the\ndashboard at Settings > Webhooks). When the toggle is off, this\nendpoint returns `403` with code `discard_not_enabled` and a\nmessage pointing the human at the dashboard. There is intentionally\nno API to flip this toggle — opting in to a destructive,\nnon-reversible operation must be a deliberate human click in the\nUI.\n",
+        "description": "Permanently deletes the email's raw bytes, parsed body (text + HTML),\nand attachments while preserving metadata (sender, recipient,\nsubject, timestamps, hashes, attachment manifest) for audit logs.\nIdempotent: a second call returns success with\n`already_discarded: true` and does no work.\n\n**Gated** on the customer's discard-content opt-in (managed in the\ndashboard at Settings > Webhooks). When the toggle is off, this\nendpoint returns `403` with code `discard_not_enabled` and a\nmessage pointing the human at the dashboard. There is intentionally\nno API to flip this toggle. Opting in to a destructive,\nnon-reversible operation must be a deliberate human click in the\nUI.\n",
         "hasJsonBody": false,
         "method": "POST",
         "operationId": "discardEmailContent",

package/dist/webhook/index.d.ts

@@ -1,4 +1,4 @@
 import { A as UnknownEvent, C as ParsedDataFailed, D as RawContentDownloadOnly, E as RawContent, M as WebhookAttachment, N as WebhookEvent, O as RawContentInline, S as ParsedDataComplete, T as ParsedStatus, _ as ForwardResultInline, a as DmarcPolicy, b as KnownWebhookEvent, c as EmailAnalysis, d as EventType, f as ForwardAnalysis, g as ForwardResultAttachmentSkipped, h as ForwardResultAttachmentAnalyzed, i as DkimSignature, j as ValidateEmailAuthResult, k as SpfResult, l as EmailAuth, m as ForwardResult, n as AuthVerdict, o as DmarcResult, p as ForwardOriginalSender, r as DkimResult, s as EmailAddress, t as AuthConfidence, u as EmailReceivedEvent, v as ForwardVerdict, w as ParsedError, x as ParsedData, y as ForwardVerification } from "../types-9vXGZjPd.js";
 import { a as buildReplySubject, c as parseHeaderAddress, i as buildForwardSubject, n as ReceivedEmailAddress, o as formatAddress, r as ReceivedEmailThread, s as normalizeReceivedEmail, t as ReceivedEmail } from "../received-email-DNjpq_Wt.js";
-import { A as VerifyOptions, B as PAYLOAD_ERRORS, C as signStandardWebhooksPayload, D as PRIMITIVE_CONFIRMED_HEADER, E as LEGACY_SIGNATURE_HEADER, F as VerifyDownloadTokenResult, G as VERIFICATION_ERRORS, H as RAW_EMAIL_ERRORS, I as generateDownloadToken, J as WebhookPayloadErrorCode, K as WebhookErrorCode, L as verifyDownloadToken, M as verifyWebhookSignature, N as GenerateDownloadTokenOptions, O as PRIMITIVE_SIGNATURE_HEADER, P as VerifyDownloadTokenOptions, Q as WebhookVerificationErrorCode, R as safeValidateEmailReceivedEvent, S as StandardWebhooksVerifyOptions, T as LEGACY_CONFIRMED_HEADER, U as RawEmailDecodeError, V as PrimitiveWebhookError, W as RawEmailDecodeErrorCode, X as WebhookValidationErrorCode, Y as WebhookValidationError, Z as WebhookVerificationError, _ as emailReceivedEventJsonSchema, a as confirmedHeaders, b as STANDARD_WEBHOOK_TIMESTAMP_HEADER, c as handleWebhook, d as isRawIncluded, f as parseWebhookEvent, g as validateEmailAuth, h as WEBHOOK_VERSION, i as WebhookHeaders, j as signWebhookPayload, k as SignResult, l as isDownloadExpired, m as verifyRawEmailDownload, n as HandleWebhookOptions, o as decodeRawEmail, p as receive, q as WebhookPayloadError, r as ReceiveRequestOptions, s as getDownloadTimeRemaining, t as DecodeRawEmailOptions, u as isEmailReceivedEvent, v as STANDARD_WEBHOOK_ID_HEADER, w as verifyStandardWebhooksSignature, x as StandardWebhooksSignResult, y as STANDARD_WEBHOOK_SIGNATURE_HEADER, z as validateEmailReceivedEvent } from "../index-CbEivn3S.js";
+import { A as VerifyOptions, B as PAYLOAD_ERRORS, C as signStandardWebhooksPayload, D as PRIMITIVE_CONFIRMED_HEADER, E as LEGACY_SIGNATURE_HEADER, F as VerifyDownloadTokenResult, G as VERIFICATION_ERRORS, H as RAW_EMAIL_ERRORS, I as generateDownloadToken, J as WebhookPayloadErrorCode, K as WebhookErrorCode, L as verifyDownloadToken, M as verifyWebhookSignature, N as GenerateDownloadTokenOptions, O as PRIMITIVE_SIGNATURE_HEADER, P as VerifyDownloadTokenOptions, Q as WebhookVerificationErrorCode, R as safeValidateEmailReceivedEvent, S as StandardWebhooksVerifyOptions, T as LEGACY_CONFIRMED_HEADER, U as RawEmailDecodeError, V as PrimitiveWebhookError, W as RawEmailDecodeErrorCode, X as WebhookValidationErrorCode, Y as WebhookValidationError, Z as WebhookVerificationError, _ as emailReceivedEventJsonSchema, a as confirmedHeaders, b as STANDARD_WEBHOOK_TIMESTAMP_HEADER, c as handleWebhook, d as isRawIncluded, f as parseWebhookEvent, g as validateEmailAuth, h as WEBHOOK_VERSION, i as WebhookHeaders, j as signWebhookPayload, k as SignResult, l as isDownloadExpired, m as verifyRawEmailDownload, n as HandleWebhookOptions, o as decodeRawEmail, p as receive, q as WebhookPayloadError, r as ReceiveRequestOptions, s as getDownloadTimeRemaining, t as DecodeRawEmailOptions, u as isEmailReceivedEvent, v as STANDARD_WEBHOOK_ID_HEADER, w as verifyStandardWebhooksSignature, x as StandardWebhooksSignResult, y as STANDARD_WEBHOOK_SIGNATURE_HEADER, z as validateEmailReceivedEvent } from "../index-CDlwyxdp.js";
 export { AuthConfidence, AuthVerdict, DecodeRawEmailOptions, DkimResult, DkimSignature, DmarcPolicy, DmarcResult, EmailAddress, EmailAnalysis, EmailAuth, EmailReceivedEvent, EventType, ForwardAnalysis, ForwardOriginalSender, ForwardResult, ForwardResultAttachmentAnalyzed, ForwardResultAttachmentSkipped, ForwardResultInline, ForwardVerdict, ForwardVerification, GenerateDownloadTokenOptions, HandleWebhookOptions, KnownWebhookEvent, LEGACY_CONFIRMED_HEADER, LEGACY_SIGNATURE_HEADER, PAYLOAD_ERRORS, PRIMITIVE_CONFIRMED_HEADER, PRIMITIVE_SIGNATURE_HEADER, ParsedData, ParsedDataComplete, ParsedDataFailed, ParsedError, ParsedStatus, PrimitiveWebhookError, RAW_EMAIL_ERRORS, RawContent, RawContentDownloadOnly, RawContentInline, RawEmailDecodeError, RawEmailDecodeErrorCode, ReceiveRequestOptions, ReceivedEmail, ReceivedEmailAddress, ReceivedEmailThread, STANDARD_WEBHOOK_ID_HEADER, STANDARD_WEBHOOK_SIGNATURE_HEADER, STANDARD_WEBHOOK_TIMESTAMP_HEADER, SignResult, SpfResult, StandardWebhooksSignResult, StandardWebhooksVerifyOptions, UnknownEvent, VERIFICATION_ERRORS, ValidateEmailAuthResult, VerifyDownloadTokenOptions, VerifyDownloadTokenResult, VerifyOptions, WEBHOOK_VERSION, WebhookAttachment, WebhookErrorCode, WebhookEvent, WebhookHeaders, WebhookPayloadError, WebhookPayloadErrorCode, WebhookValidationError, WebhookValidationErrorCode, WebhookVerificationError, WebhookVerificationErrorCode, buildForwardSubject, buildReplySubject, confirmedHeaders, decodeRawEmail, emailReceivedEventJsonSchema, formatAddress, generateDownloadToken, getDownloadTimeRemaining, handleWebhook, isDownloadExpired, isEmailReceivedEvent, isRawIncluded, normalizeReceivedEmail, parseHeaderAddress, parseWebhookEvent, receive, safeValidateEmailReceivedEvent, signStandardWebhooksPayload, signWebhookPayload, validateEmailAuth, validateEmailReceivedEvent, verifyDownloadToken, verifyRawEmailDownload, verifyStandardWebhooksSignature, verifyWebhookSignature };

package/dist/webhook/index.js

@@ -1,3 +1,3 @@
 import { a as parseHeaderAddress, i as normalizeReceivedEmail, n as buildReplySubject, r as formatAddress, t as buildForwardSubject } from "../received-email-D6tKtWwW.js";
-import { A as PRIMITIVE_CONFIRMED_HEADER, B as RAW_EMAIL_ERRORS, C as STANDARD_WEBHOOK_ID_HEADER, D as verifyStandardWebhooksSignature, E as signStandardWebhooksPayload, F as verifyDownloadToken, G as WebhookVerificationError, H as VERIFICATION_ERRORS, I as safeValidateEmailReceivedEvent, L as validateEmailReceivedEvent, M as signWebhookPayload, N as verifyWebhookSignature, O as LEGACY_CONFIRMED_HEADER, P as generateDownloadToken, R as PAYLOAD_ERRORS, S as emailReceivedEventJsonSchema, T as STANDARD_WEBHOOK_TIMESTAMP_HEADER, U as WebhookPayloadError, V as RawEmailDecodeError, W as WebhookValidationError, _ as DmarcResult, a as isDownloadExpired, b as ParsedStatus, c as parseWebhookEvent, d as WEBHOOK_VERSION, f as validateEmailAuth, g as DmarcPolicy, h as DkimResult, i as handleWebhook, j as PRIMITIVE_SIGNATURE_HEADER, k as LEGACY_SIGNATURE_HEADER, l as receive, m as AuthVerdict, n as decodeRawEmail, o as isEmailReceivedEvent, p as AuthConfidence, r as getDownloadTimeRemaining, s as isRawIncluded, t as confirmedHeaders, u as verifyRawEmailDownload, v as EventType, w as STANDARD_WEBHOOK_SIGNATURE_HEADER, x as SpfResult, y as ForwardVerdict, z as PrimitiveWebhookError } from "../webhook-zkN4wUTs.js";
+import { A as PRIMITIVE_CONFIRMED_HEADER, B as RAW_EMAIL_ERRORS, C as STANDARD_WEBHOOK_ID_HEADER, D as verifyStandardWebhooksSignature, E as signStandardWebhooksPayload, F as verifyDownloadToken, G as WebhookVerificationError, H as VERIFICATION_ERRORS, I as safeValidateEmailReceivedEvent, L as validateEmailReceivedEvent, M as signWebhookPayload, N as verifyWebhookSignature, O as LEGACY_CONFIRMED_HEADER, P as generateDownloadToken, R as PAYLOAD_ERRORS, S as emailReceivedEventJsonSchema, T as STANDARD_WEBHOOK_TIMESTAMP_HEADER, U as WebhookPayloadError, V as RawEmailDecodeError, W as WebhookValidationError, _ as DmarcResult, a as isDownloadExpired, b as ParsedStatus, c as parseWebhookEvent, d as WEBHOOK_VERSION, f as validateEmailAuth, g as DmarcPolicy, h as DkimResult, i as handleWebhook, j as PRIMITIVE_SIGNATURE_HEADER, k as LEGACY_SIGNATURE_HEADER, l as receive, m as AuthVerdict, n as decodeRawEmail, o as isEmailReceivedEvent, p as AuthConfidence, r as getDownloadTimeRemaining, s as isRawIncluded, t as confirmedHeaders, u as verifyRawEmailDownload, v as EventType, w as STANDARD_WEBHOOK_SIGNATURE_HEADER, x as SpfResult, y as ForwardVerdict, z as PrimitiveWebhookError } from "../webhook-rUjGV6Zu.js";
 export { AuthConfidence, AuthVerdict, DkimResult, DmarcPolicy, DmarcResult, EventType, ForwardVerdict, LEGACY_CONFIRMED_HEADER, LEGACY_SIGNATURE_HEADER, PAYLOAD_ERRORS, PRIMITIVE_CONFIRMED_HEADER, PRIMITIVE_SIGNATURE_HEADER, ParsedStatus, PrimitiveWebhookError, RAW_EMAIL_ERRORS, RawEmailDecodeError, STANDARD_WEBHOOK_ID_HEADER, STANDARD_WEBHOOK_SIGNATURE_HEADER, STANDARD_WEBHOOK_TIMESTAMP_HEADER, SpfResult, VERIFICATION_ERRORS, WEBHOOK_VERSION, WebhookPayloadError, WebhookValidationError, WebhookVerificationError, buildForwardSubject, buildReplySubject, confirmedHeaders, decodeRawEmail, emailReceivedEventJsonSchema, formatAddress, generateDownloadToken, getDownloadTimeRemaining, handleWebhook, isDownloadExpired, isEmailReceivedEvent, isRawIncluded, normalizeReceivedEmail, parseHeaderAddress, parseWebhookEvent, receive, safeValidateEmailReceivedEvent, signStandardWebhooksPayload, signWebhookPayload, validateEmailAuth, validateEmailReceivedEvent, verifyDownloadToken, verifyRawEmailDownload, verifyStandardWebhooksSignature, verifyWebhookSignature };

package/dist/{webhook-zkN4wUTs.js → webhook-rUjGV6Zu.js}

@@ -6045,10 +6045,10 @@ function safeValidateEmailReceivedEvent(input) {
 * specific email's raw bytes or attachment bundle from a per-deployment
 * download endpoint. It binds:
 *
-* - `email_id` — the specific email the token authorizes.
-* - `aud` — a caller-chosen audience label (e.g. the resource kind being
+* - `email_id`: the specific email the token authorizes.
+* - `aud`: a caller-chosen audience label (e.g. the resource kind being
 *   downloaded). Tokens minted for one audience will not verify under another.
-* - `exp` — an absolute expiration time (unix seconds).
+* - `exp`: an absolute expiration time (unix seconds).
 *
 * Format: `<base64url(payload)>.<base64url(signature)>` where `signature`
 * is HMAC-SHA256 over the base64url-encoded payload using the shared secret.
@@ -6087,7 +6087,7 @@ function generateDownloadToken(params) {
 * Verify a signed download token.
 *
 * Returns a discriminated-union result. The function never throws for
-* verification failures — only malformed inputs at the crypto layer would
+* verification failures. Only malformed inputs at the crypto layer would
 * surface. Callers should check `result.valid` and log `result.error`.
 *
 * @param params - Verification inputs.