@sendfn/admin 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,773 @@
+export * from "./types.js";
+export * from "./capability.js";
+export * from "./adapter.js";
+export * from "./client.js";
+export * from "./domain-service.js";
+import type { AdminCapabilityAdapter } from "@superfunctions/admin";
+import { sendFnAdminCapability } from "./capability.js";
+import type { SendFnDomainAdminServiceOptions } from "./types.js";
+/** Creates a complete adapter directly from a project-owned public SendFn client. */
+export declare function createSendFnDomainAdminAdapter(options: SendFnDomainAdminServiceOptions): AdminCapabilityAdapter<typeof sendFnAdminCapability>;
+export declare const adminCapability: {
+    readonly schemaVersion: "1.0";
+    readonly id: "sendfn";
+    readonly displayName: "SendFn";
+    readonly version: "1.0.0";
+    readonly description: "Project-scoped operator capabilities backed by the public SendFn client.";
+    readonly category: "communication";
+    readonly availability: "required-product";
+    readonly scopeLevels: readonly ["installation", "workspace", "project", "environment"];
+    readonly dependencies: readonly [];
+    readonly resources: readonly [{
+        readonly id: "templates";
+        readonly label: "Templates";
+        readonly description: "Inspect and register SendFn email templates.";
+        readonly icon: "sendfn:templates";
+        readonly risk: "standard";
+        readonly minimumScope: "project";
+        readonly idField: "id";
+        readonly displayFields: readonly ["id", "name", "subject"];
+        readonly searchableFields: readonly ["id", "name", "subject"];
+        readonly filterableFields: readonly [];
+        readonly sortableFields: readonly ["id", "name"];
+        readonly sensitiveFields: readonly [];
+    }, {
+        readonly id: "messages";
+        readonly label: "Messages";
+        readonly description: "Send email, SMS, WhatsApp, and push communications through configured SendFn providers.";
+        readonly icon: "sendfn:messages";
+        readonly risk: "sensitive";
+        readonly minimumScope: "project";
+        readonly idField: "id";
+        readonly displayFields: readonly ["id", "provider", "status", "createdAt"];
+        readonly searchableFields: readonly ["id", "userId", "providerMessageId"];
+        readonly filterableFields: readonly ["status", "provider"];
+        readonly sortableFields: readonly ["createdAt", "updatedAt"];
+        readonly sensitiveFields: readonly ["to", "message", "body", "html", "text", "deviceTokens"];
+    }, {
+        readonly id: "deliveries";
+        readonly label: "Delivery Events";
+        readonly description: "Query persisted SendFn delivery and engagement events.";
+        readonly icon: "sendfn:deliveries";
+        readonly risk: "sensitive";
+        readonly minimumScope: "project";
+        readonly idField: "id";
+        readonly displayFields: readonly ["id", "referenceType", "eventType", "provider", "eventTimestamp"];
+        readonly searchableFields: readonly ["id", "referenceId", "providerMessageId", "userId"];
+        readonly filterableFields: readonly ["referenceType", "eventType", "provider", "startAt", "endAt"];
+        readonly sortableFields: readonly ["eventTimestamp"];
+        readonly sensitiveFields: readonly ["recipientEmail", "recipientPhone", "deviceToken"];
+    }, {
+        readonly id: "suppressions";
+        readonly label: "Suppressions";
+        readonly description: "Inspect and manage SendFn email suppressions and unsubscribes.";
+        readonly icon: "sendfn:suppressions";
+        readonly risk: "sensitive";
+        readonly minimumScope: "project";
+        readonly idField: "email";
+        readonly displayFields: readonly ["email", "reason", "source", "suppressedAt"];
+        readonly searchableFields: readonly ["email", "source"];
+        readonly filterableFields: readonly ["reason", "source"];
+        readonly sortableFields: readonly ["email", "suppressedAt"];
+        readonly sensitiveFields: readonly [];
+    }, {
+        readonly id: "device-tokens";
+        readonly label: "Device Tokens";
+        readonly description: "Inspect and manage SendFn push-notification device registrations.";
+        readonly icon: "sendfn:device-tokens";
+        readonly risk: "sensitive";
+        readonly minimumScope: "project";
+        readonly idField: "id";
+        readonly displayFields: readonly ["id", "userId", "platform", "isActive", "lastUsedAt"];
+        readonly searchableFields: readonly ["id", "userId"];
+        readonly filterableFields: readonly ["platform", "isActive"];
+        readonly sortableFields: readonly ["lastUsedAt", "updatedAt"];
+        readonly sensitiveFields: readonly ["token"];
+    }];
+    readonly navigation: readonly [{
+        readonly id: "sendfn";
+        readonly label: "SendFn";
+        readonly path: "/modules/sendfn";
+        readonly icon: "sendfn";
+        readonly description: "Operate project-owned communications.";
+        readonly order: 100;
+    }];
+    readonly operations: readonly [{
+        readonly id: "sendfn.templates.list";
+        readonly title: "List templates";
+        readonly description: "List templates registered in the project-owned SendFn client.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "GET";
+            readonly path: "/resources/templates";
+        };
+        readonly permission: "sendfn.templates.read";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "read";
+            readonly idempotent: true;
+            readonly requiresConfirmation: false;
+            readonly audit: "optional";
+        };
+        readonly mcp: {
+            readonly readOnlyHint: true;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "templates";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.templates.get";
+        readonly title: "Get template";
+        readonly description: "Get one template from the project-owned SendFn registry.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "GET";
+            readonly path: "/resources/templates/:id";
+        };
+        readonly permission: "sendfn.templates.read";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "read";
+            readonly idempotent: true;
+            readonly requiresConfirmation: false;
+            readonly audit: "optional";
+        };
+        readonly mcp: {
+            readonly readOnlyHint: true;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "templates";
+            readonly idInput: "id";
+        };
+    }, {
+        readonly id: "sendfn.templates.register";
+        readonly title: "Register template";
+        readonly description: "Register or replace a SendFn template in the project-owned registry.";
+        readonly inputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly template: import("@superfunctions/admin").AdminObjectSchema;
+            };
+            readonly required: readonly ["template"];
+            readonly additionalProperties: false;
+        };
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/templates/actions/register";
+        };
+        readonly permission: "sendfn.templates.write";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "write";
+            readonly idempotent: true;
+            readonly requiresConfirmation: false;
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["html", "text", "metadata"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "templates";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.deliveries.list";
+        readonly title: "List delivery events";
+        readonly description: "Query delivery and engagement events through SendFn's public event API.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "GET";
+            readonly path: "/resources/deliveries";
+        };
+        readonly permission: "sendfn.deliveries.read";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "read";
+            readonly idempotent: true;
+            readonly requiresConfirmation: false;
+            readonly audit: "required";
+        };
+        readonly mcp: {
+            readonly readOnlyHint: true;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "deliveries";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.messages.send-email";
+        readonly title: "Send email";
+        readonly description: "Send one email through the configured SendFn email provider.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/messages/actions/send-email";
+        };
+        readonly permission: "sendfn.messages.send";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "write";
+            readonly idempotent: true;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "high";
+                readonly method: "explicit";
+                readonly reason: "Email delivery contacts an external recipient.";
+                readonly maxAgeSeconds: 300;
+            };
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["to", "cc", "bcc", "html", "text", "attachments", "templateData", "headers", "metadata"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "messages";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.messages.send-email-bulk";
+        readonly title: "Send bulk email";
+        readonly description: "Send an explicitly confirmed collection of emails through SendFn.";
+        readonly inputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly messages: {
+                    readonly type: "array";
+                    readonly items: import("@superfunctions/admin").AdminObjectSchema;
+                    readonly minItems: 1;
+                    readonly maxItems: 1000;
+                };
+            };
+            readonly required: readonly ["messages"];
+            readonly additionalProperties: false;
+        };
+        readonly outputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly items: {
+                    readonly type: "array";
+                    readonly items: import("@superfunctions/admin").AdminObjectSchema;
+                };
+            };
+            readonly required: readonly ["items"];
+            readonly additionalProperties: false;
+        };
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/messages/actions/send-email-bulk";
+        };
+        readonly permission: "sendfn.messages.send-bulk";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "write";
+            readonly idempotent: true;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "high";
+                readonly method: "mfa";
+                readonly reason: "Bulk email can contact many external recipients.";
+                readonly maxAgeSeconds: 300;
+            };
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["to", "cc", "bcc", "html", "text", "attachments", "templateData", "headers", "metadata"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "messages";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.messages.send-sms";
+        readonly title: "Send SMS";
+        readonly description: "Send one SMS through the configured SendFn SMS provider.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/messages/actions/send-sms";
+        };
+        readonly permission: "sendfn.messages.send";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "write";
+            readonly idempotent: false;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "high";
+                readonly method: "explicit";
+                readonly reason: "SMS delivery contacts an external recipient.";
+                readonly maxAgeSeconds: 300;
+            };
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["to", "message", "metadata"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: false;
+            readonly idempotentHint: false;
+        };
+        readonly target: {
+            readonly resource: "messages";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.messages.send-whatsapp";
+        readonly title: "Send WhatsApp message";
+        readonly description: "Send one WhatsApp message through the configured SendFn provider.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/messages/actions/send-whatsapp";
+        };
+        readonly permission: "sendfn.messages.send";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "write";
+            readonly idempotent: false;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "high";
+                readonly method: "explicit";
+                readonly reason: "WhatsApp delivery contacts an external recipient.";
+                readonly maxAgeSeconds: 300;
+            };
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["to", "message", "metadata"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: false;
+            readonly idempotentHint: false;
+        };
+        readonly target: {
+            readonly resource: "messages";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.messages.send-push";
+        readonly title: "Send push notification";
+        readonly description: "Send one push notification through configured SendFn platform providers.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/messages/actions/send-push";
+        };
+        readonly permission: "sendfn.messages.send";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "write";
+            readonly idempotent: false;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "high";
+                readonly method: "explicit";
+                readonly reason: "Push delivery notifies an external user device.";
+                readonly maxAgeSeconds: 300;
+            };
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["userId", "body", "data", "metadata"];
+            readonly outputFields: readonly ["deviceTokens"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: false;
+            readonly idempotentHint: false;
+        };
+        readonly target: {
+            readonly resource: "messages";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.messages.send-push-bulk";
+        readonly title: "Send bulk push notifications";
+        readonly description: "Send an explicitly confirmed collection of push notifications through SendFn.";
+        readonly inputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly messages: {
+                    readonly type: "array";
+                    readonly items: import("@superfunctions/admin").AdminObjectSchema;
+                    readonly minItems: 1;
+                    readonly maxItems: 1000;
+                };
+            };
+            readonly required: readonly ["messages"];
+            readonly additionalProperties: false;
+        };
+        readonly outputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly items: {
+                    readonly type: "array";
+                    readonly items: import("@superfunctions/admin").AdminObjectSchema;
+                };
+            };
+            readonly required: readonly ["items"];
+            readonly additionalProperties: false;
+        };
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/messages/actions/send-push-bulk";
+        };
+        readonly permission: "sendfn.messages.send-bulk";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "write";
+            readonly idempotent: false;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "high";
+                readonly method: "mfa";
+                readonly reason: "Bulk push can notify many users.";
+                readonly maxAgeSeconds: 300;
+            };
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["userId", "body", "data", "metadata"];
+            readonly outputFields: readonly ["deviceTokens"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: false;
+            readonly idempotentHint: false;
+        };
+        readonly target: {
+            readonly resource: "messages";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.suppressions.list";
+        readonly title: "List suppressions";
+        readonly description: "List suppressions through SendFn's public export API.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "GET";
+            readonly path: "/resources/suppressions";
+        };
+        readonly permission: "sendfn.suppressions.read";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "read";
+            readonly idempotent: true;
+            readonly requiresConfirmation: false;
+            readonly audit: "required";
+        };
+        readonly mcp: {
+            readonly readOnlyHint: true;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "suppressions";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.suppressions.get";
+        readonly title: "Check suppression";
+        readonly description: "Check whether one email address is suppressed in SendFn.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "GET";
+            readonly path: "/resources/suppressions/:email";
+        };
+        readonly permission: "sendfn.suppressions.read";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "read";
+            readonly idempotent: true;
+            readonly requiresConfirmation: false;
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["email"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: true;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "suppressions";
+            readonly idInput: "email";
+        };
+    }, {
+        readonly id: "sendfn.suppressions.add";
+        readonly title: "Add suppression";
+        readonly description: "Add an email address to SendFn's suppression list.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/suppressions/actions/add";
+        };
+        readonly permission: "sendfn.suppressions.write";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "write";
+            readonly idempotent: true;
+            readonly requiresConfirmation: false;
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["email", "metadata"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "suppressions";
+            readonly idInput: "email";
+        };
+    }, {
+        readonly id: "sendfn.suppressions.remove";
+        readonly title: "Remove suppression";
+        readonly description: "Remove one suppression after recent-auth confirmation, allowing future delivery.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/suppressions/actions/remove";
+        };
+        readonly permission: "sendfn.suppressions.remove";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "destructive";
+            readonly idempotent: true;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "high";
+                readonly method: "recent-auth";
+                readonly reason: "Removing a suppression allows future contact to the address.";
+                readonly maxAgeSeconds: 300;
+            };
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["email"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: true;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "suppressions";
+            readonly idInput: "email";
+        };
+    }, {
+        readonly id: "sendfn.device-tokens.list";
+        readonly title: "List device tokens";
+        readonly description: "List active device registrations for one SendFn user.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "GET";
+            readonly path: "/resources/device-tokens";
+        };
+        readonly permission: "sendfn.device-tokens.read";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "read";
+            readonly idempotent: true;
+            readonly requiresConfirmation: false;
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly outputFields: readonly ["token"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: true;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "device-tokens";
+            readonly collection: true;
+        };
+    }, {
+        readonly id: "sendfn.device-tokens.register";
+        readonly title: "Register device token";
+        readonly description: "Register or reactivate a SendFn device token.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/device-tokens/actions/register";
+        };
+        readonly permission: "sendfn.device-tokens.write";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "write";
+            readonly idempotent: true;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "high";
+                readonly method: "recent-auth";
+                readonly reason: "Registering a device credential authorizes future external push delivery.";
+                readonly maxAgeSeconds: 300;
+            };
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["token", "deviceInfo"];
+            readonly outputFields: readonly ["token"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: false;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "device-tokens";
+            readonly idInput: "token";
+        };
+    }, {
+        readonly id: "sendfn.device-tokens.deactivate";
+        readonly title: "Deactivate device token";
+        readonly description: "Deactivate one device token after explicit confirmation.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/device-tokens/actions/deactivate";
+        };
+        readonly permission: "sendfn.device-tokens.deactivate";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "destructive";
+            readonly idempotent: true;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "high";
+                readonly method: "recent-auth";
+                readonly reason: "Deactivation stops push delivery to the device.";
+            };
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["token"];
+            readonly outputFields: readonly ["deactivatedToken"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: true;
+            readonly idempotentHint: true;
+        };
+        readonly target: {
+            readonly resource: "device-tokens";
+            readonly idInput: "token";
+        };
+    }, {
+        readonly id: "sendfn.device-tokens.refresh";
+        readonly title: "Refresh device token";
+        readonly description: "Replace an active SendFn device token with a new token.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/device-tokens/actions/refresh";
+        };
+        readonly permission: "sendfn.device-tokens.write";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "write";
+            readonly idempotent: false;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "critical";
+                readonly method: "mfa";
+                readonly reason: "Refreshing replaces an active device delivery credential.";
+                readonly maxAgeSeconds: 300;
+            };
+            readonly audit: "required";
+        };
+        readonly redaction: {
+            readonly inputFields: readonly ["oldToken", "newToken"];
+            readonly outputFields: readonly ["token"];
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: false;
+            readonly idempotentHint: false;
+        };
+        readonly target: {
+            readonly resource: "device-tokens";
+            readonly idInput: "oldToken";
+        };
+    }, {
+        readonly id: "sendfn.device-tokens.cleanup";
+        readonly title: "Clean up inactive devices";
+        readonly description: "Permanently remove inactive device tokens older than a confirmed cutoff.";
+        readonly inputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly outputSchema: import("@superfunctions/admin").AdminObjectSchema;
+        readonly route: {
+            readonly method: "POST";
+            readonly path: "/resources/device-tokens/actions/cleanup";
+        };
+        readonly permission: "sendfn.device-tokens.cleanup";
+        readonly minimumScope: "project";
+        readonly safety: {
+            readonly classification: "destructive";
+            readonly idempotent: false;
+            readonly requiresConfirmation: true;
+            readonly confirmation: {
+                readonly risk: "high";
+                readonly method: "recent-auth";
+                readonly reason: "Cleanup permanently deletes inactive device registrations.";
+                readonly maxAgeSeconds: 300;
+            };
+            readonly audit: "required";
+        };
+        readonly mcp: {
+            readonly readOnlyHint: false;
+            readonly destructiveHint: true;
+            readonly idempotentHint: false;
+        };
+        readonly target: {
+            readonly resource: "device-tokens";
+            readonly idInput: "olderThan";
+        };
+    }];
+};
+//# sourceMappingURL=index.d.ts.map