@primitivedotdev/sdk 1.27.0 → 1.29.0

package/dist/{trust-DBOnyTHV.js → trust-m3dNPmWL.js}

@@ -138,13 +138,16 @@ const schema12 = {
 				},
 				"content": {
 					"type": "object",
+					"if": { "properties": { "raw": { "type": "null" } } },
+					"then": { "properties": { "download": { "type": "null" } } },
+					"else": { "properties": { "download": { "type": "object" } } },
 					"properties": {
 						"raw": {
-							"$ref": "#/definitions/RawContent",
-							"description": "Raw email in RFC 5322 format. May be inline (base64) or download-only depending on size."
+							"anyOf": [{ "$ref": "#/definitions/RawContent" }, { "type": "null" }],
+							"description": "Raw MIME is null for address-scoped listeners. Use email.parsed for message content."
 						},
 						"download": {
-							"type": "object",
+							"type": ["object", "null"],
 							"properties": {
 								"url": {
 									"type": "string",
@@ -159,7 +162,7 @@ const schema12 = {
 								}
 							},
 							"required": ["url", "expires_at"],
-							"description": "Download information for the raw email. Always present, even if raw content is inline."
+							"description": "Raw download information. Null for address-scoped listeners, which do not receive bearer download links."
 						}
 					},
 					"required": ["raw", "download"],
@@ -7801,33 +7804,111 @@ function validate11(data, { instancePath = "", parentData, parentDataProperty, r
 				}
 				if (data14.content !== void 0) {
 					let data29 = data14.content;
+					const _errs63 = errors;
+					let valid10 = true;
+					const _errs64 = errors;
+					if (data29 && typeof data29 == "object" && !Array.isArray(data29)) {
+						if (data29.raw !== void 0) {
+							if (data29.raw !== null) {
+								const err65 = {};
+								if (vErrors === null) vErrors = [err65];
+								else vErrors.push(err65);
+								errors++;
+							}
+						}
+					}
+					var _valid0 = _errs64 === errors;
+					errors = _errs63;
+					if (vErrors !== null) if (_errs63) vErrors.length = _errs63;
+					else vErrors = null;
+					let ifClause0;
+					if (_valid0) {
+						const _errs67 = errors;
+						if (data29 && typeof data29 == "object" && !Array.isArray(data29)) {
+							if (data29.download !== void 0) {
+								if (data29.download !== null) {
+									const err66 = {
+										instancePath: instancePath + "/email/content/download",
+										schemaPath: "#/properties/email/properties/content/then/properties/download/type",
+										keyword: "type",
+										params: { type: "null" },
+										message: "must be null"
+									};
+									if (vErrors === null) vErrors = [err66];
+									else vErrors.push(err66);
+									errors++;
+								}
+							}
+						}
+						var _valid0 = _errs67 === errors;
+						valid10 = _valid0;
+						ifClause0 = "then";
+					} else {
+						const _errs70 = errors;
+						if (data29 && typeof data29 == "object" && !Array.isArray(data29)) {
+							if (data29.download !== void 0) {
+								let data32 = data29.download;
+								if (!(data32 && typeof data32 == "object" && !Array.isArray(data32))) {
+									const err67 = {
+										instancePath: instancePath + "/email/content/download",
+										schemaPath: "#/properties/email/properties/content/else/properties/download/type",
+										keyword: "type",
+										params: { type: "object" },
+										message: "must be object"
+									};
+									if (vErrors === null) vErrors = [err67];
+									else vErrors.push(err67);
+									errors++;
+								}
+							}
+						}
+						var _valid0 = _errs70 === errors;
+						valid10 = _valid0;
+						ifClause0 = "else";
+					}
+					if (!valid10) {
+						const err68 = {
+							instancePath: instancePath + "/email/content",
+							schemaPath: "#/properties/email/properties/content/if",
+							keyword: "if",
+							params: { failingKeyword: ifClause0 },
+							message: "must match \"" + ifClause0 + "\" schema"
+						};
+						if (vErrors === null) vErrors = [err68];
+						else vErrors.push(err68);
+						errors++;
+					}
 					if (data29 && typeof data29 == "object" && !Array.isArray(data29)) {
 						if (data29.raw === void 0) {
-							const err65 = {
+							const err69 = {
 								instancePath: instancePath + "/email/content",
 								schemaPath: "#/properties/email/properties/content/required",
 								keyword: "required",
 								params: { missingProperty: "raw" },
 								message: "must have required property 'raw'"
 							};
-							if (vErrors === null) vErrors = [err65];
-							else vErrors.push(err65);
+							if (vErrors === null) vErrors = [err69];
+							else vErrors.push(err69);
 							errors++;
 						}
 						if (data29.download === void 0) {
-							const err66 = {
+							const err70 = {
 								instancePath: instancePath + "/email/content",
 								schemaPath: "#/properties/email/properties/content/required",
 								keyword: "required",
 								params: { missingProperty: "download" },
 								message: "must have required property 'download'"
 							};
-							if (vErrors === null) vErrors = [err66];
-							else vErrors.push(err66);
+							if (vErrors === null) vErrors = [err70];
+							else vErrors.push(err70);
 							errors++;
 						}
 						if (data29.raw !== void 0) {
-							if (!validate12(data29.raw, {
+							let data33 = data29.raw;
+							const _errs74 = errors;
+							let valid15 = false;
+							const _errs75 = errors;
+							if (!validate12(data33, {
 								instancePath: instancePath + "/email/content/raw",
 								parentData: data29,
 								parentDataProperty: "raw",
@@ -7836,125 +7917,161 @@ function validate11(data, { instancePath = "", parentData, parentDataProperty, r
 								vErrors = vErrors === null ? validate12.errors : vErrors.concat(validate12.errors);
 								errors = vErrors.length;
 							}
+							var _valid1 = _errs75 === errors;
+							valid15 = valid15 || _valid1;
+							if (!valid15) {
+								const _errs76 = errors;
+								if (data33 !== null) {
+									const err71 = {
+										instancePath: instancePath + "/email/content/raw",
+										schemaPath: "#/properties/email/properties/content/properties/raw/anyOf/1/type",
+										keyword: "type",
+										params: { type: "null" },
+										message: "must be null"
+									};
+									if (vErrors === null) vErrors = [err71];
+									else vErrors.push(err71);
+									errors++;
+								}
+								var _valid1 = _errs76 === errors;
+								valid15 = valid15 || _valid1;
+							}
+							if (!valid15) {
+								const err72 = {
+									instancePath: instancePath + "/email/content/raw",
+									schemaPath: "#/properties/email/properties/content/properties/raw/anyOf",
+									keyword: "anyOf",
+									params: {},
+									message: "must match a schema in anyOf"
+								};
+								if (vErrors === null) vErrors = [err72];
+								else vErrors.push(err72);
+								errors++;
+							} else {
+								errors = _errs74;
+								if (vErrors !== null) if (_errs74) vErrors.length = _errs74;
+								else vErrors = null;
+							}
 						}
 						if (data29.download !== void 0) {
-							let data31 = data29.download;
-							if (data31 && typeof data31 == "object" && !Array.isArray(data31)) {
-								if (data31.url === void 0) {
-									const err67 = {
+							let data34 = data29.download;
+							if (!(data34 && typeof data34 == "object" && !Array.isArray(data34)) && data34 !== null) {
+								const err73 = {
+									instancePath: instancePath + "/email/content/download",
+									schemaPath: "#/properties/email/properties/content/properties/download/type",
+									keyword: "type",
+									params: { type: schema12.properties.email.properties.content.properties.download.type },
+									message: "must be object,null"
+								};
+								if (vErrors === null) vErrors = [err73];
+								else vErrors.push(err73);
+								errors++;
+							}
+							if (data34 && typeof data34 == "object" && !Array.isArray(data34)) {
+								if (data34.url === void 0) {
+									const err74 = {
 										instancePath: instancePath + "/email/content/download",
 										schemaPath: "#/properties/email/properties/content/properties/download/required",
 										keyword: "required",
 										params: { missingProperty: "url" },
 										message: "must have required property 'url'"
 									};
-									if (vErrors === null) vErrors = [err67];
-									else vErrors.push(err67);
+									if (vErrors === null) vErrors = [err74];
+									else vErrors.push(err74);
 									errors++;
 								}
-								if (data31.expires_at === void 0) {
-									const err68 = {
+								if (data34.expires_at === void 0) {
+									const err75 = {
 										instancePath: instancePath + "/email/content/download",
 										schemaPath: "#/properties/email/properties/content/properties/download/required",
 										keyword: "required",
 										params: { missingProperty: "expires_at" },
 										message: "must have required property 'expires_at'"
 									};
-									if (vErrors === null) vErrors = [err68];
-									else vErrors.push(err68);
+									if (vErrors === null) vErrors = [err75];
+									else vErrors.push(err75);
 									errors++;
 								}
-								if (data31.url !== void 0) {
-									let data32 = data31.url;
-									if (typeof data32 === "string") {
-										if (!pattern4.test(data32)) {
-											const err69 = {
+								if (data34.url !== void 0) {
+									let data35 = data34.url;
+									if (typeof data35 === "string") {
+										if (!pattern4.test(data35)) {
+											const err76 = {
 												instancePath: instancePath + "/email/content/download/url",
 												schemaPath: "#/properties/email/properties/content/properties/download/properties/url/pattern",
 												keyword: "pattern",
 												params: { pattern: "^https?://" },
 												message: "must match pattern \"^https?://\""
 											};
-											if (vErrors === null) vErrors = [err69];
-											else vErrors.push(err69);
+											if (vErrors === null) vErrors = [err76];
+											else vErrors.push(err76);
 											errors++;
 										}
-										if (!formats4.test(data32)) {
-											const err70 = {
+										if (!formats4.test(data35)) {
+											const err77 = {
 												instancePath: instancePath + "/email/content/download/url",
 												schemaPath: "#/properties/email/properties/content/properties/download/properties/url/format",
 												keyword: "format",
 												params: { format: "uri" },
 												message: "must match format \"uri\""
 											};
-											if (vErrors === null) vErrors = [err70];
-											else vErrors.push(err70);
+											if (vErrors === null) vErrors = [err77];
+											else vErrors.push(err77);
 											errors++;
 										}
 									} else {
-										const err71 = {
+										const err78 = {
 											instancePath: instancePath + "/email/content/download/url",
 											schemaPath: "#/properties/email/properties/content/properties/download/properties/url/type",
 											keyword: "type",
 											params: { type: "string" },
 											message: "must be string"
 										};
-										if (vErrors === null) vErrors = [err71];
-										else vErrors.push(err71);
+										if (vErrors === null) vErrors = [err78];
+										else vErrors.push(err78);
 										errors++;
 									}
 								}
-								if (data31.expires_at !== void 0) {
-									let data33 = data31.expires_at;
-									if (typeof data33 === "string") {
-										if (!formats0.test(data33)) {
-											const err72 = {
+								if (data34.expires_at !== void 0) {
+									let data36 = data34.expires_at;
+									if (typeof data36 === "string") {
+										if (!formats0.test(data36)) {
+											const err79 = {
 												instancePath: instancePath + "/email/content/download/expires_at",
 												schemaPath: "#/properties/email/properties/content/properties/download/properties/expires_at/format",
 												keyword: "format",
 												params: { format: "date-time" },
 												message: "must match format \"date-time\""
 											};
-											if (vErrors === null) vErrors = [err72];
-											else vErrors.push(err72);
+											if (vErrors === null) vErrors = [err79];
+											else vErrors.push(err79);
 											errors++;
 										}
 									} else {
-										const err73 = {
+										const err80 = {
 											instancePath: instancePath + "/email/content/download/expires_at",
 											schemaPath: "#/properties/email/properties/content/properties/download/properties/expires_at/type",
 											keyword: "type",
 											params: { type: "string" },
 											message: "must be string"
 										};
-										if (vErrors === null) vErrors = [err73];
-										else vErrors.push(err73);
+										if (vErrors === null) vErrors = [err80];
+										else vErrors.push(err80);
 										errors++;
 									}
 								}
-							} else {
-								const err74 = {
-									instancePath: instancePath + "/email/content/download",
-									schemaPath: "#/properties/email/properties/content/properties/download/type",
-									keyword: "type",
-									params: { type: "object" },
-									message: "must be object"
-								};
-								if (vErrors === null) vErrors = [err74];
-								else vErrors.push(err74);
-								errors++;
 							}
 						}
 					} else {
-						const err75 = {
+						const err81 = {
 							instancePath: instancePath + "/email/content",
 							schemaPath: "#/properties/email/properties/content/type",
 							keyword: "type",
 							params: { type: "object" },
 							message: "must be object"
 						};
-						if (vErrors === null) vErrors = [err75];
-						else vErrors.push(err75);
+						if (vErrors === null) vErrors = [err81];
+						else vErrors.push(err81);
 						errors++;
 					}
 				}
@@ -7992,28 +8109,28 @@ function validate11(data, { instancePath = "", parentData, parentDataProperty, r
 					}
 				}
 			} else {
-				const err76 = {
+				const err82 = {
 					instancePath: instancePath + "/email",
 					schemaPath: "#/properties/email/type",
 					keyword: "type",
 					params: { type: "object" },
 					message: "must be object"
 				};
-				if (vErrors === null) vErrors = [err76];
-				else vErrors.push(err76);
+				if (vErrors === null) vErrors = [err82];
+				else vErrors.push(err82);
 				errors++;
 			}
 		}
 	} else {
-		const err77 = {
+		const err83 = {
 			instancePath,
 			schemaPath: "#/type",
 			keyword: "type",
 			params: { type: "object" },
 			message: "must be object"
 		};
-		if (vErrors === null) vErrors = [err77];
-		else vErrors.push(err77);
+		if (vErrors === null) vErrors = [err83];
+		else vErrors.push(err83);
 		errors++;
 	}
 	validate11.errors = vErrors;
@@ -8105,6 +8222,10 @@ const PAYLOAD_ERRORS = {
 * Use these for documentation, dashboards, and i18n.
 */
 const RAW_EMAIL_ERRORS = {
+	UNAVAILABLE: {
+		message: "Raw email content is unavailable for this credential",
+		suggestion: "Use event.email.parsed for message content. This credential cannot download raw email."
+	},
 	NOT_INCLUDED: {
 		message: "Raw email content not included inline",
 		suggestion: "Use the download URL at event.email.content.download.url to fetch the raw email."

package/dist/{types-DcXtFARL.d.ts → types-Rn4qu5Q7.d.ts}

@@ -5,6 +5,13 @@
  * AUTO-GENERATED - DO NOT EDIT
  * Run `pnpm generate:types` to regenerate.
  */
+/**
+ * Raw email content - a discriminated union on `included`.
+ *
+ * This interface was referenced by `EmailReceivedEvent`'s JSON-Schema
+ * via the `definition` "RawContent".
+ */
+type RawContent$1 = (RawContentInline$1 | RawContentDownloadOnly$1);
 /**
  * Result for a single forwarded email detected in the message.
  *
@@ -130,13 +137,13 @@ interface EmailReceivedEvent$1 {
      */
     content: {
       /**
-       * Raw email in RFC 5322 format. May be inline (base64) or download-only depending on size.
+       * Raw MIME is null for address-scoped listeners. Use email.parsed for message content.
        */
-      raw: (RawContentInline$1 | RawContentDownloadOnly$1);
+      raw: (RawContent$1 | null);
       /**
-       * Download information for the raw email. Always present, even if raw content is inline.
+       * Raw download information. Null for address-scoped listeners, which do not receive bearer download links.
        */
-      download: {
+      download: ({
         /**
          * URL to download the raw email as-is in RFC 5322 format. Managed Primitive always issues HTTPS. Self-host deployments may issue HTTP URLs that resolve inside the operator's network (e.g. `http://localhost:4001/...`). Receivers that want to refuse plaintext downloads should check the scheme explicitly.
          */
@@ -145,7 +152,7 @@ interface EmailReceivedEvent$1 {
          * ISO 8601 timestamp (UTC) when this URL expires. Download before this time or the URL will return 403.
          */
         expires_at: string;
-      };
+      } | null);
     };
     /**
      * Parsed email content (body text, HTML, attachments). Check `status` to determine if parsing succeeded.

package/dist/webhook/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as isPaymentFailedEvent, A as RawContentInline, B as InteractionEvent, C as ParsedData, D as ParsedStatus, E as ParsedError, F as ValidateEmailAuthResult, G as PaymentFailedEvent, H as InteractionX402Suffix, I as WebhookAttachment, J as WebhookEventType, K as PaymentSettledEvent, L as WebhookEvent, M as SpfResult, N as TlsReportAnalysis, O as RawContent, P as UnknownEvent, Q as isPaymentEvent, R as EMAIL_EVENT_TYPES, S as KnownWebhookEvent, T as ParsedDataFailed, U as PAYMENT_EVENT_TYPES, V as InteractionX402Event, W as PaymentEvent, X as isInteractionX402Event, Y as isEmailReceivedEvent, Z as isKnownWebhookEventType, _ as ForwardResultAttachmentAnalyzed, a as DkimSignature, b as ForwardVerdict, c as DmarcResult, d as EmailAuth, et as isPaymentSettledEvent, f as EmailReceivedEvent, g as ForwardResult, h as ForwardOriginalSender, i as DkimResult, j as RoutingDecision, k as RawContentDownloadOnly, l as EmailAddress, m as ForwardAnalysis, n as AuthVerdict, o as DmarcPolicy, p as EventType, q as WEBHOOK_EVENT_TYPES, r as BounceAnalysis, s as DmarcReportAnalysis, t as AuthConfidence, u as EmailAnalysis, v as ForwardResultAttachmentSkipped, w as ParsedDataComplete, x as ForwardVerification, y as ForwardResultInline, z as INTERACTION_EVENT_TYPES } from "../types-DcXtFARL.js";
-import { C as buildReplySubject, E as parseHeaderAddress, S as buildForwardSubject, T as normalizeReceivedEmail, _ as isTrustedSender, a as RawEmailDecodeErrorCode, b as ReceivedEmailAddress, c as WebhookPayloadError, d as WebhookValidationErrorCode, f as WebhookVerificationError, g as TrustedSenderResult, h as TrustedSenderOptions, i as RawEmailDecodeError, l as WebhookPayloadErrorCode, m as TrustReason, n as PrimitiveWebhookError, o as VERIFICATION_ERRORS, p as WebhookVerificationErrorCode, r as RAW_EMAIL_ERRORS, s as WebhookErrorCode, t as PAYLOAD_ERRORS, u as WebhookValidationError, v as validateEmailAuth, w as formatAddress, x as ReceivedEmailThread, y as ReceivedEmail } from "../errors-CCJX3I_T.js";
-import { A as SignResult, B as validateEmailReceivedEvent, C as StandardWebhooksVerifyOptions, D as LEGACY_SIGNATURE_HEADER, E as LEGACY_CONFIRMED_HEADER, F as VerifyDownloadTokenOptions, I as VerifyDownloadTokenResult, L as generateDownloadToken, M as signWebhookPayload, N as verifyWebhookSignature, O as PRIMITIVE_CONFIRMED_HEADER, P as GenerateDownloadTokenOptions, R as verifyDownloadToken, S as StandardWebhooksSignResult, T as verifyStandardWebhooksSignature, _ as WEBHOOK_VERSION, a as WebhookHeaders, b as STANDARD_WEBHOOK_SIGNATURE_HEADER, c as getDownloadTimeRemaining, d as handleWebhookEvent, f as isDownloadExpired, g as parseWebhookEvent, h as verifyRawEmailDownload, i as WEBHOOK_EVENT_HEADER, j as VerifyOptions, k as PRIMITIVE_SIGNATURE_HEADER, l as getEventHeader, m as receive, n as HandleWebhookOptions, o as confirmedHeaders, p as isRawIncluded, r as ReceiveRequestOptions, s as decodeRawEmail, t as DecodeRawEmailOptions, u as handleWebhook, v as emailReceivedEventJsonSchema, w as signStandardWebhooksPayload, x as STANDARD_WEBHOOK_TIMESTAMP_HEADER, y as STANDARD_WEBHOOK_ID_HEADER, z as safeValidateEmailReceivedEvent } from "../index-DCLGz6IH.js";
+import { $ as isPaymentFailedEvent, A as RawContentInline, B as InteractionEvent, C as ParsedData, D as ParsedStatus, E as ParsedError, F as ValidateEmailAuthResult, G as PaymentFailedEvent, H as InteractionX402Suffix, I as WebhookAttachment, J as WebhookEventType, K as PaymentSettledEvent, L as WebhookEvent, M as SpfResult, N as TlsReportAnalysis, O as RawContent, P as UnknownEvent, Q as isPaymentEvent, R as EMAIL_EVENT_TYPES, S as KnownWebhookEvent, T as ParsedDataFailed, U as PAYMENT_EVENT_TYPES, V as InteractionX402Event, W as PaymentEvent, X as isInteractionX402Event, Y as isEmailReceivedEvent, Z as isKnownWebhookEventType, _ as ForwardResultAttachmentAnalyzed, a as DkimSignature, b as ForwardVerdict, c as DmarcResult, d as EmailAuth, et as isPaymentSettledEvent, f as EmailReceivedEvent, g as ForwardResult, h as ForwardOriginalSender, i as DkimResult, j as RoutingDecision, k as RawContentDownloadOnly, l as EmailAddress, m as ForwardAnalysis, n as AuthVerdict, o as DmarcPolicy, p as EventType, q as WEBHOOK_EVENT_TYPES, r as BounceAnalysis, s as DmarcReportAnalysis, t as AuthConfidence, u as EmailAnalysis, v as ForwardResultAttachmentSkipped, w as ParsedDataComplete, x as ForwardVerification, y as ForwardResultInline, z as INTERACTION_EVENT_TYPES } from "../types-Rn4qu5Q7.js";
+import { C as buildReplySubject, E as parseHeaderAddress, S as buildForwardSubject, T as normalizeReceivedEmail, _ as isTrustedSender, a as RawEmailDecodeErrorCode, b as ReceivedEmailAddress, c as WebhookPayloadError, d as WebhookValidationErrorCode, f as WebhookVerificationError, g as TrustedSenderResult, h as TrustedSenderOptions, i as RawEmailDecodeError, l as WebhookPayloadErrorCode, m as TrustReason, n as PrimitiveWebhookError, o as VERIFICATION_ERRORS, p as WebhookVerificationErrorCode, r as RAW_EMAIL_ERRORS, s as WebhookErrorCode, t as PAYLOAD_ERRORS, u as WebhookValidationError, v as validateEmailAuth, w as formatAddress, x as ReceivedEmailThread, y as ReceivedEmail } from "../errors-Li0PXZXa.js";
+import { A as SignResult, B as validateEmailReceivedEvent, C as StandardWebhooksVerifyOptions, D as LEGACY_SIGNATURE_HEADER, E as LEGACY_CONFIRMED_HEADER, F as VerifyDownloadTokenOptions, I as VerifyDownloadTokenResult, L as generateDownloadToken, M as signWebhookPayload, N as verifyWebhookSignature, O as PRIMITIVE_CONFIRMED_HEADER, P as GenerateDownloadTokenOptions, R as verifyDownloadToken, S as StandardWebhooksSignResult, T as verifyStandardWebhooksSignature, _ as WEBHOOK_VERSION, a as WebhookHeaders, b as STANDARD_WEBHOOK_SIGNATURE_HEADER, c as getDownloadTimeRemaining, d as handleWebhookEvent, f as isDownloadExpired, g as parseWebhookEvent, h as verifyRawEmailDownload, i as WEBHOOK_EVENT_HEADER, j as VerifyOptions, k as PRIMITIVE_SIGNATURE_HEADER, l as getEventHeader, m as receive, n as HandleWebhookOptions, o as confirmedHeaders, p as isRawIncluded, r as ReceiveRequestOptions, s as decodeRawEmail, t as DecodeRawEmailOptions, u as handleWebhook, v as emailReceivedEventJsonSchema, w as signStandardWebhooksPayload, x as STANDARD_WEBHOOK_TIMESTAMP_HEADER, y as STANDARD_WEBHOOK_ID_HEADER, z as safeValidateEmailReceivedEvent } from "../index-BxPkB7GU.js";
 export { AuthConfidence, AuthVerdict, BounceAnalysis, DecodeRawEmailOptions, DkimResult, DkimSignature, DmarcPolicy, DmarcReportAnalysis, DmarcResult, EMAIL_EVENT_TYPES, EmailAddress, EmailAnalysis, EmailAuth, EmailReceivedEvent, EventType, ForwardAnalysis, ForwardOriginalSender, ForwardResult, ForwardResultAttachmentAnalyzed, ForwardResultAttachmentSkipped, ForwardResultInline, ForwardVerdict, ForwardVerification, GenerateDownloadTokenOptions, HandleWebhookOptions, INTERACTION_EVENT_TYPES, InteractionEvent, InteractionX402Event, InteractionX402Suffix, KnownWebhookEvent, LEGACY_CONFIRMED_HEADER, LEGACY_SIGNATURE_HEADER, PAYLOAD_ERRORS, PAYMENT_EVENT_TYPES, PRIMITIVE_CONFIRMED_HEADER, PRIMITIVE_SIGNATURE_HEADER, ParsedData, ParsedDataComplete, ParsedDataFailed, ParsedError, ParsedStatus, PaymentEvent, PaymentFailedEvent, PaymentSettledEvent, PrimitiveWebhookError, RAW_EMAIL_ERRORS, RawContent, RawContentDownloadOnly, RawContentInline, RawEmailDecodeError, RawEmailDecodeErrorCode, ReceiveRequestOptions, ReceivedEmail, ReceivedEmailAddress, ReceivedEmailThread, RoutingDecision, STANDARD_WEBHOOK_ID_HEADER, STANDARD_WEBHOOK_SIGNATURE_HEADER, STANDARD_WEBHOOK_TIMESTAMP_HEADER, SignResult, SpfResult, StandardWebhooksSignResult, StandardWebhooksVerifyOptions, TlsReportAnalysis, TrustReason, TrustedSenderOptions, TrustedSenderResult, UnknownEvent, VERIFICATION_ERRORS, ValidateEmailAuthResult, VerifyDownloadTokenOptions, VerifyDownloadTokenResult, VerifyOptions, WEBHOOK_EVENT_HEADER, WEBHOOK_EVENT_TYPES, WEBHOOK_VERSION, WebhookAttachment, WebhookErrorCode, WebhookEvent, WebhookEventType, WebhookHeaders, WebhookPayloadError, WebhookPayloadErrorCode, WebhookValidationError, WebhookValidationErrorCode, WebhookVerificationError, WebhookVerificationErrorCode, buildForwardSubject, buildReplySubject, confirmedHeaders, decodeRawEmail, emailReceivedEventJsonSchema, formatAddress, generateDownloadToken, getDownloadTimeRemaining, getEventHeader, handleWebhook, handleWebhookEvent, isDownloadExpired, isEmailReceivedEvent, isInteractionX402Event, isKnownWebhookEventType, isPaymentEvent, isPaymentFailedEvent, isPaymentSettledEvent, isRawIncluded, isTrustedSender, normalizeReceivedEmail, parseHeaderAddress, parseWebhookEvent, receive, safeValidateEmailReceivedEvent, signStandardWebhooksPayload, signWebhookPayload, validateEmailAuth, validateEmailReceivedEvent, verifyDownloadToken, verifyRawEmailDownload, verifyStandardWebhooksSignature, verifyWebhookSignature };

package/dist/webhook/index.js

@@ -1,3 +1,3 @@
-import { A as PAYLOAD_ERRORS, C as isInteractionX402Event, D as isPaymentSettledEvent, E as isPaymentFailedEvent, F as WebhookPayloadError, I as WebhookValidationError, L as WebhookVerificationError, M as RAW_EMAIL_ERRORS, N as RawEmailDecodeError, O as safeValidateEmailReceivedEvent, P as VERIFICATION_ERRORS, S as isEmailReceivedEvent, T as isPaymentEvent, _ as parseWebhookEvent, a as DkimResult, b as PAYMENT_EVENT_TYPES, c as EventType, d as SpfResult, f as buildForwardSubject, g as parseHeaderAddress, h as normalizeReceivedEmail, i as AuthVerdict, j as PrimitiveWebhookError, k as validateEmailReceivedEvent, l as ForwardVerdict, m as formatAddress, n as validateEmailAuth, o as DmarcPolicy, p as buildReplySubject, r as AuthConfidence, s as DmarcResult, t as isTrustedSender, u as ParsedStatus, v as EMAIL_EVENT_TYPES, w as isKnownWebhookEventType, x as WEBHOOK_EVENT_TYPES, y as INTERACTION_EVENT_TYPES } from "../trust-DBOnyTHV.js";
-import { C as signWebhookPayload, E as verifyDownloadToken, S as PRIMITIVE_SIGNATURE_HEADER, T as generateDownloadToken, _ as signStandardWebhooksPayload, a as getEventHeader, b as LEGACY_SIGNATURE_HEADER, c as isDownloadExpired, d as verifyRawEmailDownload, f as WEBHOOK_VERSION, g as STANDARD_WEBHOOK_TIMESTAMP_HEADER, h as STANDARD_WEBHOOK_SIGNATURE_HEADER, i as getDownloadTimeRemaining, l as isRawIncluded, m as STANDARD_WEBHOOK_ID_HEADER, n as confirmedHeaders, o as handleWebhook, p as emailReceivedEventJsonSchema, r as decodeRawEmail, s as handleWebhookEvent, t as WEBHOOK_EVENT_HEADER, u as receive, v as verifyStandardWebhooksSignature, w as verifyWebhookSignature, x as PRIMITIVE_CONFIRMED_HEADER, y as LEGACY_CONFIRMED_HEADER } from "../webhook-B72YFapb.js";
+import { A as PAYLOAD_ERRORS, C as isInteractionX402Event, D as isPaymentSettledEvent, E as isPaymentFailedEvent, F as WebhookPayloadError, I as WebhookValidationError, L as WebhookVerificationError, M as RAW_EMAIL_ERRORS, N as RawEmailDecodeError, O as safeValidateEmailReceivedEvent, P as VERIFICATION_ERRORS, S as isEmailReceivedEvent, T as isPaymentEvent, _ as parseWebhookEvent, a as DkimResult, b as PAYMENT_EVENT_TYPES, c as EventType, d as SpfResult, f as buildForwardSubject, g as parseHeaderAddress, h as normalizeReceivedEmail, i as AuthVerdict, j as PrimitiveWebhookError, k as validateEmailReceivedEvent, l as ForwardVerdict, m as formatAddress, n as validateEmailAuth, o as DmarcPolicy, p as buildReplySubject, r as AuthConfidence, s as DmarcResult, t as isTrustedSender, u as ParsedStatus, v as EMAIL_EVENT_TYPES, w as isKnownWebhookEventType, x as WEBHOOK_EVENT_TYPES, y as INTERACTION_EVENT_TYPES } from "../trust-m3dNPmWL.js";
+import { C as signWebhookPayload, E as verifyDownloadToken, S as PRIMITIVE_SIGNATURE_HEADER, T as generateDownloadToken, _ as signStandardWebhooksPayload, a as getEventHeader, b as LEGACY_SIGNATURE_HEADER, c as isDownloadExpired, d as verifyRawEmailDownload, f as WEBHOOK_VERSION, g as STANDARD_WEBHOOK_TIMESTAMP_HEADER, h as STANDARD_WEBHOOK_SIGNATURE_HEADER, i as getDownloadTimeRemaining, l as isRawIncluded, m as STANDARD_WEBHOOK_ID_HEADER, n as confirmedHeaders, o as handleWebhook, p as emailReceivedEventJsonSchema, r as decodeRawEmail, s as handleWebhookEvent, t as WEBHOOK_EVENT_HEADER, u as receive, v as verifyStandardWebhooksSignature, w as verifyWebhookSignature, x as PRIMITIVE_CONFIRMED_HEADER, y as LEGACY_CONFIRMED_HEADER } from "../webhook-DArt1Ipq.js";
 export { AuthConfidence, AuthVerdict, DkimResult, DmarcPolicy, DmarcResult, EMAIL_EVENT_TYPES, EventType, ForwardVerdict, INTERACTION_EVENT_TYPES, LEGACY_CONFIRMED_HEADER, LEGACY_SIGNATURE_HEADER, PAYLOAD_ERRORS, PAYMENT_EVENT_TYPES, PRIMITIVE_CONFIRMED_HEADER, PRIMITIVE_SIGNATURE_HEADER, ParsedStatus, PrimitiveWebhookError, RAW_EMAIL_ERRORS, RawEmailDecodeError, STANDARD_WEBHOOK_ID_HEADER, STANDARD_WEBHOOK_SIGNATURE_HEADER, STANDARD_WEBHOOK_TIMESTAMP_HEADER, SpfResult, VERIFICATION_ERRORS, WEBHOOK_EVENT_HEADER, WEBHOOK_EVENT_TYPES, WEBHOOK_VERSION, WebhookPayloadError, WebhookValidationError, WebhookVerificationError, buildForwardSubject, buildReplySubject, confirmedHeaders, decodeRawEmail, emailReceivedEventJsonSchema, formatAddress, generateDownloadToken, getDownloadTimeRemaining, getEventHeader, handleWebhook, handleWebhookEvent, isDownloadExpired, isEmailReceivedEvent, isInteractionX402Event, isKnownWebhookEventType, isPaymentEvent, isPaymentFailedEvent, isPaymentSettledEvent, isRawIncluded, isTrustedSender, normalizeReceivedEmail, parseHeaderAddress, parseWebhookEvent, receive, safeValidateEmailReceivedEvent, signStandardWebhooksPayload, signWebhookPayload, validateEmailAuth, validateEmailReceivedEvent, verifyDownloadToken, verifyRawEmailDownload, verifyStandardWebhooksSignature, verifyWebhookSignature };

package/dist/{webhook-B72YFapb.js → webhook-DArt1Ipq.js}

@@ -1,4 +1,4 @@
-import { F as WebhookPayloadError, L as WebhookVerificationError, N as RawEmailDecodeError, _ as parseWebhookEvent, h as normalizeReceivedEmail, k as validateEmailReceivedEvent } from "./trust-DBOnyTHV.js";
+import { F as WebhookPayloadError, L as WebhookVerificationError, N as RawEmailDecodeError, _ as parseWebhookEvent, h as normalizeReceivedEmail, k as validateEmailReceivedEvent } from "./trust-m3dNPmWL.js";
 import { createHash, createHmac, timingSafeEqual } from "node:crypto";
 //#region src/webhook/download-tokens.ts
 /**
@@ -574,13 +574,16 @@ const emailReceivedEventJsonSchema = {
 						},
 						"content": {
 							"type": "object",
+							"if": { "properties": { "raw": { "type": "null" } } },
+							"then": { "properties": { "download": { "type": "null" } } },
+							"else": { "properties": { "download": { "type": "object" } } },
 							"properties": {
 								"raw": {
-									"$ref": "#/definitions/RawContent",
-									"description": "Raw email in RFC 5322 format. May be inline (base64) or download-only depending on size."
+									"anyOf": [{ "$ref": "#/definitions/RawContent" }, { "type": "null" }],
+									"description": "Raw MIME is null for address-scoped listeners. Use email.parsed for message content."
 								},
 								"download": {
-									"type": "object",
+									"type": ["object", "null"],
 									"properties": {
 										"url": {
 											"type": "string",
@@ -595,7 +598,7 @@ const emailReceivedEventJsonSchema = {
 										}
 									},
 									"required": ["url", "expires_at"],
-									"description": "Download information for the raw email. Always present, even if raw content is inline."
+									"description": "Raw download information. Null for address-scoped listeners, which do not receive bearer download links."
 								}
 							},
 							"required": ["raw", "download"],
@@ -2007,12 +2010,13 @@ function confirmedHeaders() {
 * ```typescript
 * if (isDownloadExpired(event)) {
 *   console.log("Download URL has expired, cannot fetch raw email");
-* } else {
+* } else if (event.email.content.download) {
 *   const response = await fetch(event.email.content.download.url);
 * }
 * ```
 */
 function isDownloadExpired(event, now = Date.now()) {
+	if (event.email.content.download === null) return true;
 	return now >= new Date(event.email.content.download.expires_at).getTime();
 }
 /**
@@ -2032,6 +2036,7 @@ function isDownloadExpired(event, now = Date.now()) {
 * ```
 */
 function getDownloadTimeRemaining(event, now = Date.now()) {
+	if (event.email.content.download === null) return 0;
 	const expiresAt = new Date(event.email.content.download.expires_at).getTime();
 	return Math.max(0, expiresAt - now);
 }
@@ -2041,24 +2046,24 @@ function getDownloadTimeRemaining(event, now = Date.now()) {
 * Use this to check before calling `decodeRawEmail()` to avoid try/catch.
 *
 * @param event - The webhook event
-* @returns true if raw content is included inline, false if download required
+* @returns true if raw content is included inline, false if download is required or raw content is unavailable
 *
 * @example
 * ```typescript
 * if (isRawIncluded(event)) {
 *   const rawEmail = decodeRawEmail(event);
-* } else {
+* } else if (event.email.content.download) {
 *   const response = await fetch(event.email.content.download.url);
 * }
 * ```
 */
 function isRawIncluded(event) {
-	return event.email.content.raw.included;
+	return event.email.content.raw?.included ?? false;
 }
 /**
 * Decode the raw email content from an EmailReceivedEvent.
 *
-* Throws if the raw content is not included inline (i.e., must be downloaded).
+* Throws if raw content requires downloading or is unavailable for this credential.
 * By default, verifies the SHA-256 hash matches after decoding.
 *
 * NOTE: This function assumes a well-formed event from `handleWebhook()`.
@@ -2087,7 +2092,8 @@ function isRawIncluded(event) {
 function decodeRawEmail(event, options = {}) {
 	const { verify = true } = options;
 	const raw = event.email.content.raw;
-	if (!raw.included) throw new RawEmailDecodeError("NOT_INCLUDED", `Raw email not included inline (size: ${raw.size_bytes} bytes, threshold: ${raw.max_inline_bytes} bytes). Download from: ${event.email.content.download.url}`);
+	if (raw === null) throw new RawEmailDecodeError("UNAVAILABLE", "Raw email is unavailable for address-scoped events. Use email.parsed.");
+	if (!raw.included) throw new RawEmailDecodeError("NOT_INCLUDED", `Raw email not included inline (size: ${raw.size_bytes} bytes, threshold: ${raw.max_inline_bytes} bytes). Download from: ${event.email.content.download?.url ?? "unavailable"}`);
 	if (!BASE64_PATTERN.test(raw.data)) throw new RawEmailDecodeError("INVALID_BASE64", "Raw email data is not valid base64. The raw email data may be malformed.");
 	const decoded = Buffer.from(raw.data, "base64");
 	if (verify) {
@@ -2124,6 +2130,7 @@ function decodeRawEmail(event, options = {}) {
 function verifyRawEmailDownload(downloaded, event) {
 	const buffer = Buffer.isBuffer(downloaded) ? downloaded : Buffer.from(downloaded);
 	const hash = createHash("sha256").update(buffer).digest("hex");
+	if (event.email.content.raw === null) throw new RawEmailDecodeError("UNAVAILABLE", "Raw email is unavailable for address-scoped events. Use email.parsed.");
 	const expected = event.email.content.raw.sha256;
 	if (hash !== expected.toLowerCase()) throw new RawEmailDecodeError("HASH_MISMATCH", `SHA-256 hash mismatch. Expected: ${expected}, got: ${hash}. The downloaded content may be corrupted.`);
 	return buffer;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@primitivedotdev/sdk",
-  "version": "1.27.0",
+  "version": "1.29.0",
   "description": "Official Primitive Node.js SDK: webhook, api, openapi, contract, and parser runtime modules.",
   "type": "module",
   "module": "./dist/index.js",