@rapidmx/web-client 0.21.0 → 0.22.0

package/dist/apps/www/settings/read-receipts/index.js

@@ -5,9 +5,10 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 ///////////////////////////////////////////////////////////////////////////////
 import { pageTitle } from "../../../shared/navigation/pageTitle.js";
 import { useState } from "react";
-import { updateMailbox } from "@rapidmx/react-shared/mail/mailApi.js";
+import { updateMailbox } from "../../../../lib/mail/mailApi.js";
 import SettingsShell, { useSettingsShell } from "../../../shared/components/settings/layout/SettingsShell.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
+import { useApiClient } from "../../../../lib/util/apiClientContext.js";
+import Button from "../../../../lib/components/buttons/Button.js";
 import { notifyApiError } from "../../../shared/notifications/apiErrors.js";
 function SettingsReadReceiptsPage(props) {
     return (_jsx(SettingsShell, { ...props, active: "read-receipts", children: _jsx(ReadReceiptsContent, {}) }));
@@ -17,6 +18,7 @@ function ReadReceiptsContent() {
     // `SettingsShell` only ever renders its children once `mailboxes` has loaded and `mailboxUid` has
     // resolved to one of them — same established non-null pattern as `apps/www/settings/auto-reply/index.tsx`.
     const mailbox = mailboxes.find((mb) => mb.uid === mailboxUid);
+    const client = useApiClient();
     const [alwaysRequestReceiptInternal, setAlwaysRequestReceiptInternal] = useState(mailbox.alwaysRequestReceiptInternal ?? true);
     const [alwaysRequestReceiptFederated, setAlwaysRequestReceiptFederated] = useState(mailbox.alwaysRequestReceiptFederated ?? false);
     const [alwaysRequestReceiptExternal, setAlwaysRequestReceiptExternal] = useState(mailbox.alwaysRequestReceiptExternal ?? false);
@@ -41,7 +43,7 @@ function ReadReceiptsContent() {
                 autoSendReceiptsInternal,
                 autoSendReceiptsFederated,
                 autoSendReceiptsExternal,
-            });
+            }, client);
             setVersion(updated.version);
             setSaved(true);
         }

package/dist/apps/www/settings/sharing/index.d.ts

@@ -5,5 +5,5 @@ declare function SettingsSharingPage(props: SettingsSharingPageProps): React.JSX
 export default SettingsSharingPage;
 /** The tab's title: `Brand: Settings` (see `pageTitle()`). */
 export declare const title: (props: {
-    branding?: Pick<import("@rapidmx/react-shared/branding/brandingApi.js").Branding, "title" | "companyName"> | null;
+    branding?: Pick<import("../../../../lib/branding/brandingApi.js").Branding, "title" | "companyName"> | null;
 }) => string;

package/dist/apps/www/settings/sharing/index.js

@@ -5,14 +5,14 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 ///////////////////////////////////////////////////////////////////////////////
 import { pageTitle } from "../../../shared/navigation/pageTitle.js";
 import { useEffect, useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { listMailboxAccess, removeMailboxAccess, setMailboxAccess, } from "@rapidmx/react-shared/mail/mailboxAccessApi.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
+import { listMailboxAccess, removeMailboxAccess, setMailboxAccess, } from "../../../../lib/mail/mailboxAccessApi.js";
 import SettingsShell, { useSettingsShell } from "../../../shared/components/settings/layout/SettingsShell.js";
 import PrincipalPicker from "../../../shared/components/sharing/PrincipalPicker.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
-import { SkeletonList } from "@rapidmx/react-shared/components/feedback/Skeleton.js";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../lib/components/buttons/Button.js";
+import Modal from "../../../../lib/components/overlays/Modal.js";
+import { SkeletonList } from "../../../../lib/components/feedback/Skeleton.js";
 import { notifyApiError } from "../../../shared/notifications/apiErrors.js";
 const ROLE_LABELS = { viewer: "Can view", manager: "Can manage" };
 function SettingsSharingPage(props) {

package/dist/apps/www/settings/signatures/[uid].d.ts

@@ -9,5 +9,5 @@ declare function SignatureDetailPage(props: SignatureDetailPageProps): React.JSX
 export default SignatureDetailPage;
 /** The tab's title: `Brand: Settings` (see `pageTitle()`). */
 export declare const title: (props: {
-    branding?: Pick<import("@rapidmx/react-shared/branding/brandingApi.js").Branding, "title" | "companyName"> | null;
+    branding?: Pick<import("../../../../lib/branding/brandingApi.js").Branding, "title" | "companyName"> | null;
 }) => string;

package/dist/apps/www/settings/signatures/[uid].js

@@ -5,14 +5,14 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 ///////////////////////////////////////////////////////////////////////////////
 import { pageTitle } from "../../../shared/navigation/pageTitle.js";
 import { useEffect, useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { getMailSignature, listMailSignatures, updateMailSignature } from "@rapidmx/react-shared/mail/mailSignaturesApi.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
+import { getMailSignature, listMailSignatures, updateMailSignature } from "../../../../lib/mail/mailSignaturesApi.js";
 import { clearPreviousDefaults } from "./signatureDefaults.js";
 import SettingsShell, { useSettingsShell } from "../../../shared/components/settings/layout/SettingsShell.js";
 import RichTextEditor from "../../../shared/components/mail/compose/RichTextEditor.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import FormField from "@rapidmx/react-shared/components/forms/FormField.js";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../lib/components/buttons/Button.js";
+import FormField from "../../../../lib/components/forms/FormField.js";
 import { notifyApiError } from "../../../shared/notifications/apiErrors.js";
 const INPUT_CLASS = "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
 /** Signatures aren't backed by a draft/attachment record the way Compose's own inline images are — see

package/dist/apps/www/settings/signatures/index.d.ts

@@ -5,5 +5,5 @@ declare function SettingsSignaturesPage(props: SettingsSignaturesPageProps): Rea
 export default SettingsSignaturesPage;
 /** The tab's title: `Brand: Settings` (see `pageTitle()`). */
 export declare const title: (props: {
-    branding?: Pick<import("@rapidmx/react-shared/branding/brandingApi.js").Branding, "title" | "companyName"> | null;
+    branding?: Pick<import("../../../../lib/branding/brandingApi.js").Branding, "title" | "companyName"> | null;
 }) => string;

package/dist/apps/www/settings/signatures/index.js

@@ -5,11 +5,11 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 ///////////////////////////////////////////////////////////////////////////////
 import { pageTitle } from "../../../shared/navigation/pageTitle.js";
 import { useEffect, useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { listMailSignatures } from "@rapidmx/react-shared/mail/mailSignaturesApi.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
+import { listMailSignatures } from "../../../../lib/mail/mailSignaturesApi.js";
 import SettingsShell, { useSettingsShell } from "../../../shared/components/settings/layout/SettingsShell.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../lib/components/buttons/Button.js";
 function SettingsSignaturesPage(props) {
     return (_jsx(SettingsShell, { ...props, active: "signatures", children: _jsx(SignaturesContent, {}) }));
 }

package/dist/apps/www/settings/signatures/new/index.d.ts

@@ -5,5 +5,5 @@ declare function NewSignaturePage(props: NewSignaturePageProps): React.JSX.Eleme
 export default NewSignaturePage;
 /** The tab's title: `Brand: Settings` (see `pageTitle()`). */
 export declare const title: (props: {
-    branding?: Pick<import("@rapidmx/react-shared/branding/brandingApi.js").Branding, "title" | "companyName"> | null;
+    branding?: Pick<import("../../../../../lib/branding/brandingApi.js").Branding, "title" | "companyName"> | null;
 }) => string;

package/dist/apps/www/settings/signatures/new/index.js

@@ -6,13 +6,13 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { pageTitle } from "../../../../shared/navigation/pageTitle.js";
 import { useNavigate } from "../../../../shared/navigation/index.js";
 import { useState } from "react";
-import { createMailSignature, listMailSignatures } from "@rapidmx/react-shared/mail/mailSignaturesApi.js";
+import { createMailSignature, listMailSignatures } from "../../../../../lib/mail/mailSignaturesApi.js";
 import { clearPreviousDefaults } from "../signatureDefaults.js";
 import SettingsShell, { useSettingsShell } from "../../../../shared/components/settings/layout/SettingsShell.js";
 import RichTextEditor from "../../../../shared/components/mail/compose/RichTextEditor.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import FormField from "@rapidmx/react-shared/components/forms/FormField.js";
+import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../../lib/components/buttons/Button.js";
+import FormField from "../../../../../lib/components/forms/FormField.js";
 import { notifyApiError } from "../../../../shared/notifications/apiErrors.js";
 const INPUT_CLASS = "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
 function NewSignaturePage(props) {

package/dist/apps/www/settings/signatures/signatureDefaults.d.ts

@@ -1,4 +1,4 @@
-import { MailSignature } from "@rapidmx/react-shared/mail/mailSignaturesApi.js";
+import { MailSignature } from "../../../../lib/mail/mailSignaturesApi.js";
 /**
  * `MailSignature.isDefaultForNewMessages`/`isDefaultForReplyForward` are each meant to hold on at most
  * one signature per mailbox — enforced by convention, not a database constraint (see

package/dist/apps/www/settings/signatures/signatureDefaults.js

@@ -2,7 +2,7 @@
 // Copyright (C) 2026 Jean-Philippe Steinmetz
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
-import { updateMailSignature } from "@rapidmx/react-shared/mail/mailSignaturesApi.js";
+import { updateMailSignature } from "../../../../lib/mail/mailSignaturesApi.js";
 /**
  * `MailSignature.isDefaultForNewMessages`/`isDefaultForReplyForward` are each meant to hold on at most
  * one signature per mailbox — enforced by convention, not a database constraint (see

package/dist/apps/www/tasks/index.d.ts

@@ -4,5 +4,5 @@ declare function TasksPage(props: TasksShellProps): React.JSX.Element;
 export default TasksPage;
 /** The tab's title: `Brand: Tasks` (see `pageTitle()`). */
 export declare const title: (props: {
-    branding?: Pick<import("@rapidmx/react-shared/branding/brandingApi.js").Branding, "title" | "companyName"> | null;
+    branding?: Pick<import("../../../lib/branding/brandingApi.js").Branding, "title" | "companyName"> | null;
 }) => string;

package/dist/apps/www/tasks/index.js

@@ -6,15 +6,16 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { pageTitle } from "../../shared/navigation/pageTitle.js";
 import { useEffect, useMemo, useRef, useState } from "react";
 import { endOfWeek, isAfter, isBefore, isToday, parseISO, startOfDay } from "date-fns";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { createTask, deleteTask, listTasks, setTaskCompleted, setTaskMyDay, } from "@rapidmx/react-shared/tasks/tasksApi.js";
-import { listFlaggedMessages } from "@rapidmx/react-shared/mail/flaggedMessages.js";
+import { ApiRequestError } from "../../../lib/util/api.js";
+import { createTask, deleteTask, listTasks, setTaskCompleted, setTaskMyDay, } from "../../../lib/tasks/tasksApi.js";
+import { listFlaggedMessages } from "../../../lib/mail/flaggedMessages.js";
+import { useApiClient } from "../../../lib/util/apiClientContext.js";
 import TasksShell, { useTasksShell } from "../../shared/components/tasks/layout/TasksShell.js";
 import TasksSidebar from "../../shared/components/tasks/TasksSidebar.js";
 import TasksToolbar from "../../shared/components/tasks/TasksToolbar.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
+import Alert from "../../../lib/components/feedback/Alert.js";
+import Button from "../../../lib/components/buttons/Button.js";
+import Modal from "../../../lib/components/overlays/Modal.js";
 import { findWellKnownFolderUid } from "../../shared/mail/findWellKnownFolderUid.js";
 import { useWritableMailboxes } from "../../shared/components/mail/writableMailboxes.js";
 import { LIST_PAGE_SIZE, MAX_LIST_PAGES, listAllPages } from "../../shared/mail/listAllPages.js";
@@ -60,6 +61,7 @@ const PRIORITY_CLASS = {
 };
 function TasksContent() {
     const { folderUid, mailboxUid, userUid, mailboxes } = useTasksShell();
+    const client = useApiClient();
     // The quick-add form's Mailbox choices - view-only shares are left out (see writableMailboxes.ts).
     const writableMailboxes = useWritableMailboxes(mailboxes, userUid, mailboxUid);
     // The quick-add form's chosen mailbox - `undefined` means "the mailbox being viewed".
@@ -101,7 +103,7 @@ function TasksContent() {
         }
         setLoading(true);
         setError(null);
-        return listAllPages((page) => listTasks(folderUid, { limit: LIST_PAGE_SIZE, page }))
+        return listAllPages((page) => listTasks(folderUid, { limit: LIST_PAGE_SIZE, page }, client))
             .then((result) => {
             setTasks(result.items);
             setTruncated(result.truncated);
@@ -122,7 +124,7 @@ function TasksContent() {
         }
         setFlaggedLoading(true);
         setFlaggedError(null);
-        listFlaggedMessages(mailboxUid)
+        listFlaggedMessages(mailboxUid, client)
             .then(setFlaggedMessages)
             .catch((err) => setFlaggedError(err instanceof ApiRequestError ? err.message : "Could not load flagged email."))
             .finally(() => setFlaggedLoading(false));
@@ -140,7 +142,7 @@ function TasksContent() {
         const target = targetMailboxUid ?? mailboxUid;
         setCreating(true);
         try {
-            const targetFolderUid = target === mailboxUid ? folderUid : await findWellKnownFolderUid(target, "tasks");
+            const targetFolderUid = target === mailboxUid ? folderUid : await findWellKnownFolderUid(target, "tasks", client);
             if (!targetFolderUid) {
                 setCreateError("That mailbox has no Tasks folder.");
                 return;
@@ -152,7 +154,7 @@ function TasksContent() {
                 // The date input's "yyyy-MM-dd" is the user's *local* day - see `parseDueDate()`.
                 dueDate: dueDate ? parseDueDate(dueDate).toISOString() : undefined,
                 priority,
-            });
+            }, client);
             if (target === mailboxUid) {
                 setAddedElsewhere(null);
                 setTasks((prev) => [...prev, created]);
@@ -176,7 +178,7 @@ function TasksContent() {
         const nextCompleted = !task.completed;
         setTasks((prev) => prev.map((t) => (t.uid === task.uid ? { ...t, completed: nextCompleted } : t)));
         try {
-            const updated = await setTaskCompleted(task, nextCompleted);
+            const updated = await setTaskCompleted(task, nextCompleted, client);
             setTasks((prev) => prev.map((t) => (t.uid === task.uid ? updated : t)));
         }
         catch (err) {
@@ -186,7 +188,7 @@ function TasksContent() {
     }
     async function handleDelete(task) {
         try {
-            await deleteTask(task.uid, task.version);
+            await deleteTask(task.uid, task.version, client);
             setTasks((prev) => prev.filter((t) => t.uid !== task.uid));
         }
         catch (err) {
@@ -232,7 +234,7 @@ function TasksContent() {
     async function handleBulkComplete() {
         for (const task of checkedTasks) {
             try {
-                await setTaskCompleted(task, true);
+                await setTaskCompleted(task, true, client);
             }
             catch (err) {
                 notifyApiError(err, "Couldn't update some of the tasks");
@@ -244,7 +246,7 @@ function TasksContent() {
     async function handleBulkAddToMyDay() {
         for (const task of checkedTasks) {
             try {
-                await setTaskMyDay(task, true);
+                await setTaskMyDay(task, true, client);
             }
             catch (err) {
                 notifyApiError(err, "Couldn't update some of the tasks");
@@ -256,7 +258,7 @@ function TasksContent() {
     async function handleBulkDelete() {
         for (const task of checkedTasks) {
             try {
-                await deleteTask(task.uid, task.version);
+                await deleteTask(task.uid, task.version, client);
             }
             catch (err) {
                 notifyApiError(err, "Couldn't delete some of the tasks");

package/dist/lib/admin/auditLogApi.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Typed wrapper over `@rapidmx/restapi`'s `AuditLogEntry` route (`BaseAuditLogRoute`) — read-only: every
+ * write path (`create`/`update`/`delete`/`truncate`) unconditionally 403s, trusted callers included, so
+ * there is no write function here to mirror `domainsApi.ts`'s CRUD shape. The only writer is restapi's
+ * own server-internal `recordAuditLog()`.
+ */
+import { ApiClient } from "../util/api.js";
+import { ListParams } from "../util/apiQuery.js";
+export type { ListParams };
+export interface AuditLogEntry {
+    uid: string;
+    version: number;
+    dateCreated: string;
+    dateModified: string;
+    mailboxUid?: string;
+    actorUserUid?: string;
+    action: string;
+    targetType: string;
+    targetUid: string;
+    ip?: string;
+    details?: Record<string, unknown>;
+}
+export interface AuditLogFilters {
+    mailboxUid?: string;
+    actorUserUid?: string;
+    action?: string;
+    targetType?: string;
+}
+/** `client`, given below, is an explicit `ApiClient` from `createApiClient()` (e.g. one account of a multi-account
+ * app) to call instead of the default global `apiFetch()` - see `withClient()`'s own doc comment in `util/api.ts`.
+ * Omitted (the default), this behaves exactly as before. */
+export declare function listAuditLog(filters?: AuditLogFilters, params?: ListParams, client?: ApiClient): Promise<AuditLogEntry[]>;

package/dist/lib/admin/auditLogApi.js

@@ -0,0 +1,27 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+/**
+ * Typed wrapper over `@rapidmx/restapi`'s `AuditLogEntry` route (`BaseAuditLogRoute`) — read-only: every
+ * write path (`create`/`update`/`delete`/`truncate`) unconditionally 403s, trusted callers included, so
+ * there is no write function here to mirror `domainsApi.ts`'s CRUD shape. The only writer is restapi's
+ * own server-internal `recordAuditLog()`.
+ */
+import { withClient } from "../util/api.js";
+import { buildQuery } from "../util/apiQuery.js";
+/** `client`, given below, is an explicit `ApiClient` from `createApiClient()` (e.g. one account of a multi-account
+ * app) to call instead of the default global `apiFetch()` - see `withClient()`'s own doc comment in `util/api.ts`.
+ * Omitted (the default), this behaves exactly as before. */
+export function listAuditLog(filters = {}, params = {}, client) {
+    const extra = {};
+    if (filters.mailboxUid)
+        extra.mailboxUid = filters.mailboxUid;
+    if (filters.actorUserUid)
+        extra.actorUserUid = filters.actorUserUid;
+    if (filters.action)
+        extra.action = filters.action;
+    if (filters.targetType)
+        extra.targetType = filters.targetType;
+    return withClient(client, `/mail/audit-log?${buildQuery(params, extra)}`);
+}

package/dist/lib/admin/distributionListsApi.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Typed wrappers over `@rapidmx/restapi`'s `DistributionList` CRUD route (`BaseDistributionListRoute`) —
+ * trusted-role-only, no self-service creation or per-list delegated ownership (v1).
+ */
+import { ApiClient } from "../util/api.js";
+import { ListParams } from "../util/apiQuery.js";
+export type { ListParams };
+export interface DistributionList {
+    uid: string;
+    version: number;
+    dateCreated: string;
+    dateModified: string;
+    primarySmtpAddress: string;
+    aliasAddresses?: string[];
+    name: string;
+    description?: string;
+    /** Informational only — v1 has no delegated-ownership enforcement; list management is trusted-role-only. */
+    ownerUserUid?: string;
+    memberAddresses: string[];
+    restrictSenders?: boolean;
+}
+/** `client`, given by every function below, is an explicit `ApiClient` from `createApiClient()` (e.g. one
+ * account of a multi-account app) to call instead of the default global `apiFetch()` - see `withClient()`'s
+ * own doc comment in `util/api.ts`. Omitted (the default), every function here behaves exactly as before. */
+export declare function listDistributionLists(params?: ListParams, client?: ApiClient): Promise<DistributionList[]>;
+export declare function getDistributionList(uid: string, client?: ApiClient): Promise<DistributionList>;
+export interface CreateDistributionListInput {
+    primarySmtpAddress: string;
+    aliasAddresses?: string[];
+    name: string;
+    description?: string;
+    ownerUserUid?: string;
+    memberAddresses?: string[];
+    restrictSenders?: boolean;
+}
+export declare function createDistributionList(input: CreateDistributionListInput, client?: ApiClient): Promise<DistributionList>;
+export interface UpdateDistributionListInput {
+    uid: string;
+    version: number;
+    name?: string;
+    description?: string;
+    aliasAddresses?: string[];
+    memberAddresses?: string[];
+    restrictSenders?: boolean;
+}
+export declare function updateDistributionList(input: UpdateDistributionListInput, client?: ApiClient): Promise<DistributionList>;
+export declare function deleteDistributionList(uid: string, version: number, client?: ApiClient): Promise<void>;

package/dist/lib/admin/distributionListsApi.js

@@ -0,0 +1,34 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+/**
+ * Typed wrappers over `@rapidmx/restapi`'s `DistributionList` CRUD route (`BaseDistributionListRoute`) —
+ * trusted-role-only, no self-service creation or per-list delegated ownership (v1).
+ */
+import { withClient } from "../util/api.js";
+import { buildQuery } from "../util/apiQuery.js";
+/** `client`, given by every function below, is an explicit `ApiClient` from `createApiClient()` (e.g. one
+ * account of a multi-account app) to call instead of the default global `apiFetch()` - see `withClient()`'s
+ * own doc comment in `util/api.ts`. Omitted (the default), every function here behaves exactly as before. */
+export function listDistributionLists(params = {}, client) {
+    return withClient(client, `/mail/distribution-lists?${buildQuery(params)}`);
+}
+export function getDistributionList(uid, client) {
+    return withClient(client, `/mail/distribution-lists/${encodeURIComponent(uid)}`);
+}
+export function createDistributionList(input, client) {
+    return withClient(client, "/mail/distribution-lists", {
+        method: "POST",
+        body: JSON.stringify({ aliasAddresses: [], memberAddresses: [], ...input }),
+    });
+}
+export function updateDistributionList(input, client) {
+    return withClient(client, `/mail/distribution-lists/${encodeURIComponent(input.uid)}`, {
+        method: "PUT",
+        body: JSON.stringify(input),
+    });
+}
+export function deleteDistributionList(uid, version, client) {
+    return withClient(client, `/mail/distribution-lists/${encodeURIComponent(uid)}?version=${version}`, { method: "DELETE" });
+}

package/dist/lib/admin/domainsApi.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Typed wrappers over `@rapidmx/restapi`'s `Domain` CRUD + verification routes (`BaseDomainRoute`).
+ * Every route here is `@RequiresTrustedRole()` on the backend — admin-only, matching `mailApi.ts`'s other
+ * admin-scoped entities.
+ */
+import { ApiClient } from "../util/api.js";
+import { ListParams } from "../util/apiQuery.js";
+export type { ListParams };
+export interface Domain {
+    uid: string;
+    version: number;
+    dateCreated: string;
+    dateModified: string;
+    name: string;
+    enabled: boolean;
+    verified: boolean;
+    verificationToken: string;
+    verifiedAt?: string;
+    lastCheckedAt?: string;
+    dkimSelector?: string;
+    dkimPublicKey?: string;
+    dmarcPolicy?: "none" | "quarantine" | "reject";
+    dmarcReportEmail?: string;
+    /** When set, this domain is a pure alias of the domain named here - it has no mailboxes of its own; mail
+     * addressed to it is delivered to the matching mailbox on the domain it aliases instead. */
+    aliasOf?: string;
+}
+/** `client`, given by every function below, is an explicit `ApiClient` from `createApiClient()` (e.g. one
+ * account of a multi-account app) to call instead of the default global `apiFetch()` - see `withClient()`'s
+ * own doc comment in `util/api.ts`. Omitted (the default), every function here behaves exactly as before. */
+export declare function listDomains(params?: ListParams, client?: ApiClient): Promise<Domain[]>;
+export declare function getDomain(uid: string, client?: ApiClient): Promise<Domain>;
+export interface CreateDomainInput {
+    name: string;
+    enabled?: boolean;
+    dkimSelector?: string;
+    dkimPublicKey?: string;
+    dmarcPolicy?: "none" | "quarantine" | "reject";
+    dmarcReportEmail?: string;
+    aliasOf?: string;
+}
+export declare function createDomain(input: CreateDomainInput, client?: ApiClient): Promise<Domain>;
+export interface UpdateDomainInput {
+    uid: string;
+    version: number;
+    enabled?: boolean;
+    dkimSelector?: string;
+    dkimPublicKey?: string;
+    dmarcPolicy?: "none" | "quarantine" | "reject";
+    dmarcReportEmail?: string;
+    aliasOf?: string;
+}
+export declare function updateDomain(input: UpdateDomainInput, client?: ApiClient): Promise<Domain>;
+export declare function deleteDomain(uid: string, version: number, client?: ApiClient): Promise<void>;
+/** Triggers an immediate DNS ownership check rather than waiting for the next scheduled background pass.
+ * Idempotent on an already-verified domain; a still-unverified result is not an error (only
+ * `lastCheckedAt` advances) — always returns the domain's current state either way. */
+export declare function verifyDomain(uid: string, client?: ApiClient): Promise<Domain>;
+export type DnsRecordType = "ownership" | "mx" | "spf" | "dkim" | "dmarc" | "autodiscover_cname" | "autodiscover_srv";
+/** One mail-related DNS record this server recommends for a domain, live-checked against real DNS —
+ * purely diagnostic, never mutates anything (unlike `verifyDomain`). The two `autodiscover_*` types are only
+ * ever present while `@rapidmx/autodiscover-plugin` is active for this deployment. */
+export interface DnsRecordCheck {
+    type: DnsRecordType;
+    recordKind: "TXT" | "MX" | "CNAME" | "SRV";
+    recordName: string;
+    /** `false` when there isn't enough information yet to know what to recommend (no DKIM
+     * selector/key configured, for example) — `recommendedValue`/`found`/`matches` are meaningless then. */
+    configured: boolean;
+    recommendedValue?: string;
+    found: boolean;
+    matches: boolean;
+    actualValue?: string;
+}
+export declare function getDnsSetup(uid: string, client?: ApiClient): Promise<DnsRecordCheck[]>;

package/dist/lib/admin/domainsApi.js

@@ -0,0 +1,44 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+/**
+ * Typed wrappers over `@rapidmx/restapi`'s `Domain` CRUD + verification routes (`BaseDomainRoute`).
+ * Every route here is `@RequiresTrustedRole()` on the backend — admin-only, matching `mailApi.ts`'s other
+ * admin-scoped entities.
+ */
+import { withClient } from "../util/api.js";
+import { buildQuery } from "../util/apiQuery.js";
+/** `client`, given by every function below, is an explicit `ApiClient` from `createApiClient()` (e.g. one
+ * account of a multi-account app) to call instead of the default global `apiFetch()` - see `withClient()`'s
+ * own doc comment in `util/api.ts`. Omitted (the default), every function here behaves exactly as before. */
+export function listDomains(params = {}, client) {
+    return withClient(client, `/mail/domains?${buildQuery(params)}`);
+}
+export function getDomain(uid, client) {
+    return withClient(client, `/mail/domains/${encodeURIComponent(uid)}`);
+}
+export function createDomain(input, client) {
+    return withClient(client, "/mail/domains", {
+        method: "POST",
+        body: JSON.stringify({ enabled: true, ...input }),
+    });
+}
+export function updateDomain(input, client) {
+    return withClient(client, `/mail/domains/${encodeURIComponent(input.uid)}`, {
+        method: "PUT",
+        body: JSON.stringify(input),
+    });
+}
+export function deleteDomain(uid, version, client) {
+    return withClient(client, `/mail/domains/${encodeURIComponent(uid)}?version=${version}`, { method: "DELETE" });
+}
+/** Triggers an immediate DNS ownership check rather than waiting for the next scheduled background pass.
+ * Idempotent on an already-verified domain; a still-unverified result is not an error (only
+ * `lastCheckedAt` advances) — always returns the domain's current state either way. */
+export function verifyDomain(uid, client) {
+    return withClient(client, `/mail/domains/${encodeURIComponent(uid)}/verify`, { method: "POST" });
+}
+export function getDnsSetup(uid, client) {
+    return withClient(client, `/mail/domains/${encodeURIComponent(uid)}/dns-setup`);
+}