@primitivedotdev/sdk 1.3.0 → 1.5.0

package/dist/{index-DR978rq5.d.ts → index-iZWfb98V.d.ts}

@@ -1,5 +1,5 @@
-import { N as WebhookEvent, j as ValidateEmailAuthResult, l as EmailAuth, u as EmailReceivedEvent } from "./types-yNU-Oiea.js";
-import { m as ReceivedEmail, u as WebhookValidationError } from "./errors-7E9sW9eX.js";
+import { I as WebhookEvent, P as ValidateEmailAuthResult, d as EmailAuth, f as EmailReceivedEvent } from "./types-QT2ss9ho.js";
+import { m as ReceivedEmail, u as WebhookValidationError } from "./errors-DyuAXctD.js";
 
 //#region src/validation.d.ts
 interface ValidationSuccess<T> {
@@ -281,8 +281,8 @@ declare const emailReceivedEventJsonSchema: {
         };
         readonly event: {
           readonly type: "string";
-          readonly const: "email.received";
-          readonly description: "Event type identifier. Always `\"email.received\"` for this event type.";
+          readonly enum: ["email.received", "email.bounced", "email.tls_report", "email.dmarc_report", "email.dmarc_failure"];
+          readonly description: "Event type identifier.\n\n- `email.received` - A normal inbound email.\n- `email.bounced` - A delivery status notification (DSN) reporting that a message delivery failed. Carries `email.analysis.bounce`.\n- `email.tls_report` - An SMTP TLS report (RFC 8460). Carries `email.analysis.tls_report`.\n- `email.dmarc_report` - A DMARC aggregate report (RFC 7489). Carries `email.analysis.dmarc_report`.\n- `email.dmarc_failure` - A DMARC failure (forensic) report.\n\nMachine-generated mail (bounces and the report types above) is delivered under its own event type rather than `email.received`, so an endpoint subscribed only to `email.received` receives just normal inbound mail. The payload shape is otherwise identical across event types; the type-specific details live under `email.analysis`.";
         };
         readonly version: {
           readonly $ref: "#/definitions/WebhookVersion";
@@ -768,9 +768,280 @@ declare const emailReceivedEventJsonSchema: {
           readonly $ref: "#/definitions/ForwardAnalysis";
           readonly description: "Forward detection and analysis results.\n\nOptional. Present when the email was processed by a forward-detection pipeline (always present in Primitive's managed service). When absent, forward detection was not performed on this email.";
         };
+        readonly bounce: {
+          readonly $ref: "#/definitions/BounceAnalysis";
+          readonly description: "Bounce (delivery status notification) analysis.\n\nPresent on `email.bounced` events: the parsed DSN reporting that a message you sent could not be delivered. Absent on all other event types.";
+        };
+        readonly tls_report: {
+          readonly $ref: "#/definitions/TlsReportAnalysis";
+          readonly description: "SMTP TLS report analysis (RFC 8460).\n\nPresent on `email.tls_report` events: a remote MTA's report of TLS negotiation results for mail sent to your domain. Absent on all other event types.";
+        };
+        readonly dmarc_report: {
+          readonly $ref: "#/definitions/DmarcReportAnalysis";
+          readonly description: "DMARC aggregate report analysis (RFC 7489).\n\nPresent on `email.dmarc_report` events: a receiver's periodic aggregate report of DMARC authentication results for your domain. Absent on all other event types.";
+        };
       };
       readonly description: "Email analysis and classification results.\n\nAll properties in this object are optional. Which fields are present depends on the analysis pipeline processing the email. Primitive's managed service populates all fields. Self-hosted or third-party deployments may include some, all, or none of these fields depending on their pipeline configuration.\n\nWhen a field is absent, it means that particular analysis was not performed, not that the analysis produced no results. For example, a missing `spamassassin` field means SpamAssassin was not run, not that the email scored 0.\n\nThese fields may be omitted from the payload entirely but must not be set to null.";
     };
+    readonly BounceAnalysis: {
+      readonly type: "object";
+      readonly properties: {
+        readonly is_bounce: {
+          readonly type: "boolean";
+          readonly const: true;
+          readonly description: "Always `true` on a parsed bounce.";
+        };
+        readonly kind: {
+          readonly type: "string";
+          readonly const: "dsn";
+          readonly description: "The machine-mail kind. Always `dsn` for a bounce.";
+        };
+        readonly type: {
+          readonly type: "string";
+          readonly enum: ["permanent", "transient", "undetermined"];
+          readonly description: "Whether the failure is permanent (hard bounce), transient (soft bounce, may be retried), or undetermined.";
+        };
+        readonly category: {
+          readonly type: "string";
+          readonly enum: ["mailbox_does_not_exist", "domain_does_not_exist", "domain_not_accepting_mail", "mailbox_full", "mailbox_inactive", "message_too_large", "content_rejected", "policy_blocked", "auth_failure", "relay_denied", "rate_limited", "network_error", "recipient_moved", "expired", "undetermined"];
+          readonly description: "Best-effort reason category for the failure.";
+        };
+        readonly classified_by: {
+          readonly type: "string";
+          readonly enum: ["status_code", "smtp_code", "pattern", "provider", "none"];
+          readonly description: "Which signal produced `category` (for transparency and debugging).";
+        };
+        readonly failed_recipient: {
+          readonly type: ["string", "null"];
+          readonly description: "The recipient address that failed, if the report identifies one.";
+        };
+        readonly smtp_code: {
+          readonly type: ["integer", "null"];
+          readonly description: "SMTP reply code (e.g. `550`), if reported.";
+        };
+        readonly status_code: {
+          readonly type: ["string", "null"];
+          readonly description: "Enhanced mail system status code (RFC 3463, e.g. `5.1.1`), if reported.";
+        };
+        readonly diagnostic_code: {
+          readonly type: ["string", "null"];
+          readonly description: "Raw diagnostic text from the reporting MTA, if present.";
+        };
+        readonly reported_by_mta: {
+          readonly type: ["string", "null"];
+          readonly description: "The MTA that generated the report, if identifiable.";
+        };
+        readonly original_message_id: {
+          readonly type: ["string", "null"];
+          readonly description: "Message-ID of the original message that bounced, if recoverable. Match this against the `message_id` of a message you sent to correlate the bounce.";
+        };
+        readonly reasons: {
+          readonly type: "array";
+          readonly items: {
+            readonly type: "string";
+          };
+          readonly description: "Human-readable reason strings extracted from the report.";
+        };
+      };
+      readonly required: ["is_bounce", "kind", "type", "category", "classified_by", "failed_recipient", "smtp_code", "status_code", "diagnostic_code", "reported_by_mta", "original_message_id", "reasons"];
+      readonly description: "Parsed delivery status notification (bounce). Present as `email.analysis.bounce` on `email.bounced` events.";
+    };
+    readonly TlsReportFailure: {
+      readonly type: "object";
+      readonly properties: {
+        readonly result_type: {
+          readonly type: ["string", "null"];
+          readonly description: "Failure result type (e.g. `certificate-expired`, `starttls-not-supported`).";
+        };
+        readonly count: {
+          readonly type: "integer";
+          readonly description: "Number of sessions that hit this failure.";
+        };
+        readonly sending_mta_ip: {
+          readonly type: ["string", "null"];
+        };
+        readonly receiving_mx_hostname: {
+          readonly type: ["string", "null"];
+        };
+      };
+      readonly required: ["result_type", "count", "sending_mta_ip", "receiving_mx_hostname"];
+    };
+    readonly TlsReportPolicy: {
+      readonly type: "object";
+      readonly properties: {
+        readonly policy_domain: {
+          readonly type: ["string", "null"];
+        };
+        readonly policy_type: {
+          readonly type: ["string", "null"];
+          readonly description: "Policy type the sessions were evaluated against (e.g. `sts`, `tlsa`, `no-policy-found`).";
+        };
+        readonly successful_sessions: {
+          readonly type: "integer";
+        };
+        readonly failed_sessions: {
+          readonly type: "integer";
+        };
+        readonly failures: {
+          readonly type: "array";
+          readonly items: {
+            readonly $ref: "#/definitions/TlsReportFailure";
+          };
+        };
+      };
+      readonly required: ["policy_domain", "policy_type", "successful_sessions", "failed_sessions", "failures"];
+    };
+    readonly TlsReportAnalysis: {
+      readonly type: "object";
+      readonly properties: {
+        readonly kind: {
+          readonly type: "string";
+          readonly const: "tls_report";
+        };
+        readonly organization: {
+          readonly type: ["string", "null"];
+          readonly description: "Reporting organization name.";
+        };
+        readonly report_id: {
+          readonly type: ["string", "null"];
+        };
+        readonly contact: {
+          readonly type: ["string", "null"];
+          readonly description: "Reporter contact, if provided.";
+        };
+        readonly date_range: {
+          readonly type: "object";
+          readonly properties: {
+            readonly start: {
+              readonly type: ["string", "null"];
+              readonly description: "ISO 8601 start of the reporting window.";
+            };
+            readonly end: {
+              readonly type: ["string", "null"];
+              readonly description: "ISO 8601 end of the reporting window.";
+            };
+          };
+          readonly required: ["start", "end"];
+        };
+        readonly total_successful_sessions: {
+          readonly type: "integer";
+        };
+        readonly total_failed_sessions: {
+          readonly type: "integer";
+        };
+        readonly policies: {
+          readonly type: "array";
+          readonly items: {
+            readonly $ref: "#/definitions/TlsReportPolicy";
+          };
+        };
+      };
+      readonly required: ["kind", "organization", "report_id", "contact", "date_range", "total_successful_sessions", "total_failed_sessions", "policies"];
+      readonly description: "Parsed SMTP TLS report (RFC 8460). Present as `email.analysis.tls_report` on `email.tls_report` events.";
+    };
+    readonly DmarcRecord: {
+      readonly type: "object";
+      readonly properties: {
+        readonly source_ip: {
+          readonly type: ["string", "null"];
+        };
+        readonly count: {
+          readonly type: "integer";
+        };
+        readonly disposition: {
+          readonly type: ["string", "null"];
+          readonly description: "Disposition applied by the receiver: `none`, `quarantine`, or `reject`.";
+        };
+        readonly dkim: {
+          readonly type: ["string", "null"];
+          readonly description: "DKIM alignment result: `pass` or `fail`.";
+        };
+        readonly spf: {
+          readonly type: ["string", "null"];
+          readonly description: "SPF alignment result: `pass` or `fail`.";
+        };
+        readonly header_from: {
+          readonly type: ["string", "null"];
+        };
+      };
+      readonly required: ["source_ip", "count", "disposition", "dkim", "spf", "header_from"];
+    };
+    readonly DmarcReportAnalysis: {
+      readonly type: "object";
+      readonly properties: {
+        readonly kind: {
+          readonly type: "string";
+          readonly const: "dmarc_report";
+        };
+        readonly organization: {
+          readonly type: ["string", "null"];
+        };
+        readonly report_id: {
+          readonly type: ["string", "null"];
+        };
+        readonly date_range: {
+          readonly type: "object";
+          readonly properties: {
+            readonly start: {
+              readonly type: ["string", "null"];
+              readonly description: "ISO 8601 start of the reporting window.";
+            };
+            readonly end: {
+              readonly type: ["string", "null"];
+              readonly description: "ISO 8601 end of the reporting window.";
+            };
+          };
+          readonly required: ["start", "end"];
+        };
+        readonly policy_published: {
+          readonly type: "object";
+          readonly properties: {
+            readonly domain: {
+              readonly type: ["string", "null"];
+            };
+            readonly p: {
+              readonly type: ["string", "null"];
+              readonly description: "Published domain policy: `none`, `quarantine`, or `reject`.";
+            };
+            readonly sp: {
+              readonly type: ["string", "null"];
+              readonly description: "Published subdomain policy.";
+            };
+            readonly pct: {
+              readonly type: ["integer", "null"];
+              readonly description: "Percentage of messages the policy is applied to.";
+            };
+            readonly adkim: {
+              readonly type: ["string", "null"];
+              readonly description: "DKIM alignment mode: `r` (relaxed) or `s` (strict).";
+            };
+            readonly aspf: {
+              readonly type: ["string", "null"];
+              readonly description: "SPF alignment mode: `r` (relaxed) or `s` (strict).";
+            };
+          };
+          readonly required: ["domain", "p", "sp", "pct", "adkim", "aspf"];
+        };
+        readonly total_count: {
+          readonly type: "integer";
+          readonly description: "Total messages covered by the report.";
+        };
+        readonly dkim_pass_count: {
+          readonly type: "integer";
+        };
+        readonly spf_pass_count: {
+          readonly type: "integer";
+        };
+        readonly records: {
+          readonly type: "array";
+          readonly items: {
+            readonly $ref: "#/definitions/DmarcRecord";
+          };
+        };
+      };
+      readonly required: ["kind", "organization", "report_id", "date_range", "policy_published", "total_count", "dkim_pass_count", "spf_pass_count", "records"];
+      readonly description: "Parsed DMARC aggregate report (RFC 7489). Present as `email.analysis.dmarc_report` on `email.dmarc_report` events.";
+    };
     readonly ForwardAnalysis: {
       readonly type: "object";
       readonly properties: {

package/dist/index.d.ts

@@ -1,187 +1,9 @@
-import { Jt as AgentAccountUpgradeHint, Mc as StartAgentClaimInput, Tn as CreateAgentClaimLinkInput, Xt as AgentClaimResult, Yt as AgentClaimLinkResult, Zo as PlanLimits, Zt as AgentClaimStartResult, a as ReplyInput, b as PrimitiveApiError, c as SendAttachment, d as SendThreadInput, f as client, i as PrimitiveClientOptions, l as SendInput, n as ForwardInput, p as createPrimitiveClient, qt as AgentAccountResult, r as PrimitiveClient, tu as VerifyAgentClaimInput, u as SendResult, yn as CreateAgentAccountInput } from "./index-X7RsDaVi.js";
-import { A as UnknownEvent, C as ParsedDataFailed, D as RawContentDownloadOnly, E as RawContent, M as WebhookAttachment, N as WebhookEvent, O as RawContentInline, S as ParsedDataComplete, T as ParsedStatus, _ as ForwardResultInline, a as DmarcPolicy, b as KnownWebhookEvent, c as EmailAnalysis, d as EventType, f as ForwardAnalysis, g as ForwardResultAttachmentSkipped, h as ForwardResultAttachmentAnalyzed, i as DkimSignature, j as ValidateEmailAuthResult, k as SpfResult, l as EmailAuth, m as ForwardResult, n as AuthVerdict, o as DmarcResult, p as ForwardOriginalSender, r as DkimResult, s as EmailAddress, t as AuthConfidence, u as EmailReceivedEvent, v as ForwardVerdict, w as ParsedError, x as ParsedData, y as ForwardVerification } from "./types-yNU-Oiea.js";
-import { _ as buildForwardSubject, a as RawEmailDecodeErrorCode, b as normalizeReceivedEmail, c as WebhookPayloadError, d as WebhookValidationErrorCode, f as WebhookVerificationError, g as ReceivedEmailThread, h as ReceivedEmailAddress, i as RawEmailDecodeError, l as WebhookPayloadErrorCode, m as ReceivedEmail, n as PrimitiveWebhookError, o as VERIFICATION_ERRORS, p as WebhookVerificationErrorCode, r as RAW_EMAIL_ERRORS, s as WebhookErrorCode, t as PAYLOAD_ERRORS, u as WebhookValidationError, v as buildReplySubject, x as parseHeaderAddress, y as formatAddress } from "./errors-7E9sW9eX.js";
-import { A as VerifyOptions, C as signStandardWebhooksPayload, D as PRIMITIVE_CONFIRMED_HEADER, E as LEGACY_SIGNATURE_HEADER, F as VerifyDownloadTokenResult, I as generateDownloadToken, L as verifyDownloadToken, M as verifyWebhookSignature, N as GenerateDownloadTokenOptions, O as PRIMITIVE_SIGNATURE_HEADER, P as VerifyDownloadTokenOptions, R as safeValidateEmailReceivedEvent, S as StandardWebhooksVerifyOptions, T as LEGACY_CONFIRMED_HEADER, _ as emailReceivedEventJsonSchema, a as confirmedHeaders, b as STANDARD_WEBHOOK_TIMESTAMP_HEADER, c as handleWebhook, d as isRawIncluded, f as parseWebhookEvent, g as validateEmailAuth, h as WEBHOOK_VERSION, i as WebhookHeaders, j as signWebhookPayload, k as SignResult, l as isDownloadExpired, m as verifyRawEmailDownload, n as HandleWebhookOptions, o as decodeRawEmail, p as receive, r as ReceiveRequestOptions, s as getDownloadTimeRemaining, t as DecodeRawEmailOptions, u as isEmailReceivedEvent, v as STANDARD_WEBHOOK_ID_HEADER, w as verifyStandardWebhooksSignature, x as StandardWebhooksSignResult, y as STANDARD_WEBHOOK_SIGNATURE_HEADER, z as validateEmailReceivedEvent } from "./index-DR978rq5.js";
-import { Address, Hex } from "viem";
+import { Ds as PlanLimits, Ln as CreateAgentClaimLinkInput, Lu as VerifyAgentClaimInput, O as PrimitiveApiError, Zt as Account, _ as SendThreadInput, a as ForwardInput, an as AgentAccountResult, b as createAgent, c as InboxStreamOptions, cn as AgentClaimResult, d as ReplyInput, g as SendResult, h as SendInput, i as CreatedAgent, jn as CreateAgentAccountInput, l as PrimitiveClient, ln as AgentClaimStartResult, m as SendAttachment, ml as StartAgentClaimInput, o as InboundEmail, on as AgentAccountUpgradeHint, r as CreateAgentOptions, s as InboxResource, sn as AgentClaimLinkResult, t as AccountResource, u as PrimitiveClientOptions, v as WaitForNextOptions, x as createPrimitiveClient, y as client } from "./index--2RzTxVl.js";
+import { A as RawContentInline, C as ParsedData, D as ParsedStatus, E as ParsedError, F as WebhookAttachment, I as WebhookEvent, M as TlsReportAnalysis, N as UnknownEvent, O as RawContent, P as ValidateEmailAuthResult, S as KnownWebhookEvent, T as ParsedDataFailed, _ as ForwardResultAttachmentAnalyzed, a as DkimSignature, b as ForwardVerdict, c as DmarcResult, d as EmailAuth, f as EmailReceivedEvent, g as ForwardResult, h as ForwardOriginalSender, i as DkimResult, j as SpfResult, k as RawContentDownloadOnly, l as EmailAddress, m as ForwardAnalysis, n as AuthVerdict, o as DmarcPolicy, p as EventType, r as BounceAnalysis, s as DmarcReportAnalysis, t as AuthConfidence, u as EmailAnalysis, v as ForwardResultAttachmentSkipped, w as ParsedDataComplete, x as ForwardVerification, y as ForwardResultInline } from "./types-QT2ss9ho.js";
+import { _ as buildForwardSubject, a as RawEmailDecodeErrorCode, b as normalizeReceivedEmail, c as WebhookPayloadError, d as WebhookValidationErrorCode, f as WebhookVerificationError, g as ReceivedEmailThread, h as ReceivedEmailAddress, i as RawEmailDecodeError, l as WebhookPayloadErrorCode, m as ReceivedEmail, n as PrimitiveWebhookError, o as VERIFICATION_ERRORS, p as WebhookVerificationErrorCode, r as RAW_EMAIL_ERRORS, s as WebhookErrorCode, t as PAYLOAD_ERRORS, u as WebhookValidationError, v as buildReplySubject, x as parseHeaderAddress, y as formatAddress } from "./errors-DyuAXctD.js";
+import { A as VerifyOptions, C as signStandardWebhooksPayload, D as PRIMITIVE_CONFIRMED_HEADER, E as LEGACY_SIGNATURE_HEADER, F as VerifyDownloadTokenResult, I as generateDownloadToken, L as verifyDownloadToken, M as verifyWebhookSignature, N as GenerateDownloadTokenOptions, O as PRIMITIVE_SIGNATURE_HEADER, P as VerifyDownloadTokenOptions, R as safeValidateEmailReceivedEvent, S as StandardWebhooksVerifyOptions, T as LEGACY_CONFIRMED_HEADER, _ as emailReceivedEventJsonSchema, a as confirmedHeaders, b as STANDARD_WEBHOOK_TIMESTAMP_HEADER, c as handleWebhook, d as isRawIncluded, f as parseWebhookEvent, g as validateEmailAuth, h as WEBHOOK_VERSION, i as WebhookHeaders, j as signWebhookPayload, k as SignResult, l as isDownloadExpired, m as verifyRawEmailDownload, n as HandleWebhookOptions, o as decodeRawEmail, p as receive, r as ReceiveRequestOptions, s as getDownloadTimeRemaining, t as DecodeRawEmailOptions, u as isEmailReceivedEvent, v as STANDARD_WEBHOOK_ID_HEADER, w as verifyStandardWebhooksSignature, x as StandardWebhooksSignResult, y as STANDARD_WEBHOOK_SIGNATURE_HEADER, z as validateEmailReceivedEvent } from "./index-iZWfb98V.js";
+import { NonceBinding, PayoutRegistrationMessageInput, TokenDomain, TransferAuthorization, X402Challenge, X402ChargeInput, X402Client, X402ClientOptions, X402Error, X402PaymentPayload, X402PaymentRequirements, X402PayoutAddress, X402Receipt, X402Signer, X402SpendPolicy, buildPayoutRegistrationMessage, createX402Client, deriveEip3009Nonce } from "./x402/index.js";
 
-//#region src/x402/sign.d.ts
-interface NonceBinding {
-  /** The interaction id, including its `@domain`. Lowercased before hashing. */
-  interactionId: string;
-  /** The challenge step id (a UUID). Lowercased before hashing. */
-  challengeStepId: string;
-  /** The challenger's per-challenge random nonce: 64 lowercase hex chars. */
-  challengeNonce: string;
-}
-/**
- * Derive the EIP-3009 nonce bound to a specific interaction step:
- *
- *   keccak256( utf8(lower(interaction_id)) || 0x00
- *            || utf8(lower(challenge_step_id)) || 0x00
- *            || hexdecode(challenge_nonce) )
- *
- * The `0x00` separators pin the field boundaries (undelimited concatenation of
- * variable-length strings is collision-ambiguous), and the challenge nonce is
- * decoded to its 32 raw bytes before hashing. The platform recomputes this and
- * rejects a mismatch.
- */
-declare function deriveEip3009Nonce(input: NonceBinding): Hex;
-/**
- * The EIP-3009 `TransferWithAuthorization` EIP-712 type. The field order and
- * types are part of the on-chain contract and MUST NOT change.
- */
-declare const TRANSFER_WITH_AUTHORIZATION_TYPES: {
-  readonly TransferWithAuthorization: readonly [{
-    readonly name: "from";
-    readonly type: "address";
-  }, {
-    readonly name: "to";
-    readonly type: "address";
-  }, {
-    readonly name: "value";
-    readonly type: "uint256";
-  }, {
-    readonly name: "validAfter";
-    readonly type: "uint256";
-  }, {
-    readonly name: "validBefore";
-    readonly type: "uint256";
-  }, {
-    readonly name: "nonce";
-    readonly type: "bytes32";
-  }];
-};
-/**
- * The token's EIP-712 domain. `name`/`version` MUST be the actual token's domain
- * params (Base mainnet USDC reports `name: "USD Coin"`, Base Sepolia `"USDC"`;
- * both `version: "2"`); they come from the challenge's payment requirements
- * `extra`. A wrong name/version produces a signature the verifier rejects.
- */
-interface TokenDomain {
-  name: string;
-  version: string;
-  chainId: number;
-  verifyingContract: Address;
-}
-interface TransferAuthorization {
-  from: Address;
-  to: Address;
-  /** Token base units (USDC has 6 decimals), as a bigint. */
-  value: bigint;
-  validAfter: bigint;
-  validBefore: bigint;
-  nonce: Hex;
-}
-interface TransferWithAuthorizationTypedData {
-  domain: {
-    name: string;
-    version: string;
-    chainId: number;
-    verifyingContract: Address;
-  };
-  types: typeof TRANSFER_WITH_AUTHORIZATION_TYPES;
-  primaryType: "TransferWithAuthorization";
-  message: TransferAuthorization;
-}
-/**
- * A customer-held signer. A viem `LocalAccount` satisfies this directly; any
- * key source (hardware wallet, injected provider) can be adapted. The key never
- * leaves the caller.
- */
-interface X402Signer {
-  address: Address;
-  signTypedData(typedData: TransferWithAuthorizationTypedData): Promise<Hex>;
-}
-/** The x402 wire payload (validated server-side against the x402 schema). */
-interface X402PaymentPayload {
-  x402Version: 1;
-  scheme: "exact";
-  network: string;
-  payload: {
-    signature: Hex;
-    authorization: {
-      from: Address;
-      to: Address;
-      value: string;
-      validAfter: string;
-      validBefore: string;
-      nonce: Hex;
-    };
-  };
-}
-//#endregion
-//#region src/x402/client.d.ts
-interface X402PaymentRequirements {
-  scheme: string;
-  network: string;
-  maxAmountRequired: string;
-  payTo: string;
-  asset: string;
-  extra: {
-    name: string;
-    version: string;
-  };
-}
-/** A request for payment, as returned by `charge()` / the platform. */
-interface X402Challenge {
-  id: string;
-  network: string;
-  amount: string;
-  pay_to: string;
-  nonce_binding: {
-    interaction_id: string;
-    challenge_step_id: string;
-    challenge_nonce: string;
-  };
-  payment_requirements: X402PaymentRequirements;
-  expires_at: string;
-}
-interface X402Receipt {
-  id: string;
-  status: string;
-  settle_tx: string | null;
-}
-interface X402ChargeInput {
-  /** Amount in token base units (USDC has 6 decimals, so "10000" = 0.01). */
-  amount: string;
-  /** Defaults to "base-sepolia". */
-  network?: string;
-  /** The org id allowed to pay this challenge (on-net binding). */
-  payerOrg?: string;
-  description?: string;
-  /** A URL identifying the thing being paid for. */
-  resource?: string;
-  /** Seconds until the challenge expires (default 1h). */
-  expiresIn?: number;
-}
-declare class X402Error extends Error {
-  readonly status: number;
-  readonly body: unknown;
-  constructor(message: string, status: number, body?: unknown);
-}
-interface X402ClientOptions {
-  /** API key. Defaults to `process.env.PRIMITIVE_API_KEY`. */
-  apiKey?: string;
-  /** API base URL. Defaults to the production host. */
-  baseUrl?: string;
-  /** Override the fetch implementation (e.g. for testing). */
-  fetch?: typeof fetch;
-}
-declare class X402Client {
-  #private;
-  constructor(options?: X402ClientOptions);
-  /** Request a payment (payee side). Returns the challenge to hand to the payer. */
-  charge(input: X402ChargeInput): Promise<X402Challenge>;
-  /**
-   * Pay a challenge (payer side). Derives the interaction-bound authorization,
-   * signs it locally with the caller's key, and submits it for settlement.
-   */
-  pay(challenge: X402Challenge, options: {
-    signer: X402Signer;
-  }): Promise<X402Receipt>;
-}
-declare function createX402Client(options?: X402ClientOptions): X402Client;
-//#endregion
 //#region src/index.d.ts
 declare const primitive: {
   client: typeof client;
@@ -189,4 +11,4 @@ declare const primitive: {
   x402: typeof createX402Client;
 };
 //#endregion
-export { type AgentAccountResult, type AgentAccountUpgradeHint, type AgentClaimLinkResult, type AgentClaimResult, type AgentClaimStartResult, AuthConfidence, AuthVerdict, type CreateAgentAccountInput, type CreateAgentClaimLinkInput, DecodeRawEmailOptions, DkimResult, DkimSignature, DmarcPolicy, DmarcResult, EmailAddress, EmailAnalysis, EmailAuth, EmailReceivedEvent, EventType, ForwardAnalysis, type ForwardInput, ForwardOriginalSender, ForwardResult, ForwardResultAttachmentAnalyzed, ForwardResultAttachmentSkipped, ForwardResultInline, ForwardVerdict, ForwardVerification, GenerateDownloadTokenOptions, HandleWebhookOptions, KnownWebhookEvent, LEGACY_CONFIRMED_HEADER, LEGACY_SIGNATURE_HEADER, type NonceBinding, PAYLOAD_ERRORS, PRIMITIVE_CONFIRMED_HEADER, PRIMITIVE_SIGNATURE_HEADER, ParsedData, ParsedDataComplete, ParsedDataFailed, ParsedError, ParsedStatus, type PlanLimits, PrimitiveApiError, PrimitiveClient, type PrimitiveClientOptions, PrimitiveWebhookError, RAW_EMAIL_ERRORS, RawContent, RawContentDownloadOnly, RawContentInline, RawEmailDecodeError, RawEmailDecodeErrorCode, ReceiveRequestOptions, ReceivedEmail, ReceivedEmailAddress, ReceivedEmailThread, type ReplyInput, STANDARD_WEBHOOK_ID_HEADER, STANDARD_WEBHOOK_SIGNATURE_HEADER, STANDARD_WEBHOOK_TIMESTAMP_HEADER, type SendAttachment, type SendInput, type SendResult, type SendThreadInput, SignResult, SpfResult, StandardWebhooksSignResult, StandardWebhooksVerifyOptions, type StartAgentClaimInput, type TokenDomain, type TransferAuthorization, UnknownEvent, VERIFICATION_ERRORS, ValidateEmailAuthResult, type VerifyAgentClaimInput, VerifyDownloadTokenOptions, VerifyDownloadTokenResult, VerifyOptions, WEBHOOK_VERSION, WebhookAttachment, WebhookErrorCode, WebhookEvent, WebhookHeaders, WebhookPayloadError, WebhookPayloadErrorCode, WebhookValidationError, WebhookValidationErrorCode, WebhookVerificationError, WebhookVerificationErrorCode, type X402Challenge, type X402ChargeInput, X402Client, type X402ClientOptions, X402Error, type X402PaymentPayload, type X402PaymentRequirements, type X402Receipt, type X402Signer, buildForwardSubject, buildReplySubject, client, confirmedHeaders, createPrimitiveClient, createX402Client, decodeRawEmail, primitive as default, deriveEip3009Nonce, emailReceivedEventJsonSchema, formatAddress, generateDownloadToken, getDownloadTimeRemaining, handleWebhook, isDownloadExpired, isEmailReceivedEvent, isRawIncluded, normalizeReceivedEmail, parseHeaderAddress, parseWebhookEvent, receive, safeValidateEmailReceivedEvent, signStandardWebhooksPayload, signWebhookPayload, validateEmailAuth, validateEmailReceivedEvent, verifyDownloadToken, verifyRawEmailDownload, verifyStandardWebhooksSignature, verifyWebhookSignature };
+export { type Account, AccountResource, type AgentAccountResult, type AgentAccountUpgradeHint, type AgentClaimLinkResult, type AgentClaimResult, type AgentClaimStartResult, AuthConfidence, AuthVerdict, BounceAnalysis, type CreateAgentAccountInput, type CreateAgentClaimLinkInput, type CreateAgentOptions, type CreatedAgent, DecodeRawEmailOptions, DkimResult, DkimSignature, DmarcPolicy, DmarcReportAnalysis, DmarcResult, EmailAddress, EmailAnalysis, EmailAuth, EmailReceivedEvent, EventType, ForwardAnalysis, type ForwardInput, ForwardOriginalSender, ForwardResult, ForwardResultAttachmentAnalyzed, ForwardResultAttachmentSkipped, ForwardResultInline, ForwardVerdict, ForwardVerification, GenerateDownloadTokenOptions, HandleWebhookOptions, type InboundEmail, InboxResource, type InboxStreamOptions, KnownWebhookEvent, LEGACY_CONFIRMED_HEADER, LEGACY_SIGNATURE_HEADER, type NonceBinding, PAYLOAD_ERRORS, PRIMITIVE_CONFIRMED_HEADER, PRIMITIVE_SIGNATURE_HEADER, ParsedData, ParsedDataComplete, ParsedDataFailed, ParsedError, ParsedStatus, type PayoutRegistrationMessageInput, type PlanLimits, PrimitiveApiError, PrimitiveClient, type PrimitiveClientOptions, PrimitiveWebhookError, RAW_EMAIL_ERRORS, RawContent, RawContentDownloadOnly, RawContentInline, RawEmailDecodeError, RawEmailDecodeErrorCode, ReceiveRequestOptions, ReceivedEmail, ReceivedEmailAddress, ReceivedEmailThread, type ReplyInput, STANDARD_WEBHOOK_ID_HEADER, STANDARD_WEBHOOK_SIGNATURE_HEADER, STANDARD_WEBHOOK_TIMESTAMP_HEADER, type SendAttachment, type SendInput, type SendResult, type SendThreadInput, SignResult, SpfResult, StandardWebhooksSignResult, StandardWebhooksVerifyOptions, type StartAgentClaimInput, TlsReportAnalysis, type TokenDomain, type TransferAuthorization, UnknownEvent, VERIFICATION_ERRORS, ValidateEmailAuthResult, type VerifyAgentClaimInput, VerifyDownloadTokenOptions, VerifyDownloadTokenResult, VerifyOptions, WEBHOOK_VERSION, type WaitForNextOptions, WebhookAttachment, WebhookErrorCode, WebhookEvent, WebhookHeaders, WebhookPayloadError, WebhookPayloadErrorCode, WebhookValidationError, WebhookValidationErrorCode, WebhookVerificationError, WebhookVerificationErrorCode, type X402Challenge, type X402ChargeInput, X402Client, type X402ClientOptions, X402Error, type X402PaymentPayload, type X402PaymentRequirements, type X402PayoutAddress, type X402Receipt, type X402Signer, type X402SpendPolicy, buildForwardSubject, buildPayoutRegistrationMessage, buildReplySubject, client, confirmedHeaders, createAgent, createPrimitiveClient, createX402Client, decodeRawEmail, primitive as default, deriveEip3009Nonce, emailReceivedEventJsonSchema, formatAddress, generateDownloadToken, getDownloadTimeRemaining, handleWebhook, isDownloadExpired, isEmailReceivedEvent, isRawIncluded, normalizeReceivedEmail, parseHeaderAddress, parseWebhookEvent, receive, safeValidateEmailReceivedEvent, signStandardWebhooksPayload, signWebhookPayload, validateEmailAuth, validateEmailReceivedEvent, verifyDownloadToken, verifyRawEmailDownload, verifyStandardWebhooksSignature, verifyWebhookSignature };