@sendora/sdk 1.1.0 → 2.1.0

package/README.md

@@ -1,8 +1,7 @@
 # @sendora/sdk
 
 The official TypeScript SDK for [Sendora](https://sendora.se), transactional
-email delivery hosted in Sweden. Zero dependencies. Runs on Node 20.19 or
-newer and on any runtime with `fetch` and WebCrypto: Bun, Deno, Cloudflare
+email delivery. Zero dependencies. Runs on Node 20.19 or newer and on any runtime with `fetch` and WebCrypto: Bun, Deno, Cloudflare
 Workers. ESM only; CommonJS projects on Node 20.19 or 22.12 and newer load it
 with `require`.
 
@@ -10,9 +9,13 @@ with `require`.
 npm install @sendora/sdk
 ```
 
-The token is a secret. Create it in the dashboard, keep it on the server,
-and never ship it to a browser. The client throws at construction when the
-token is missing, so build it at startup.
+Two clients, two kinds of key. `Sendora` takes a server key (`sk_…`) and
+does everything inside one server: sending, the log, streams,
+suppressions, tokens and webhooks. `SendoraAccount` takes an account key
+(`ak_…`) and manages the account: its servers, their keys and its sending
+domains. Both keys are secrets: keep them on the server and never ship
+them to a browser. Either client throws at construction when its key is
+missing, so build it at startup.
 
 ```ts
 import { Sendora } from '@sendora/sdk';
@@ -69,11 +72,31 @@ for (const result of results) {
 
 ## Messages
 
-| Call                                   | Answers                                                                     |
-| -------------------------------------- | --------------------------------------------------------------------------- |
-| `sendora.messages.get(messageId)`      | The message with its recipients, its attachments described and its timeline |
-| `sendora.messages.search(filters?)`    | `{ messages, next }`, one page newest first                                 |
-| `sendora.messages.searchAll(filters?)` | Every match, page by page, for `for await`                                  |
+| Call                                                         | Answers                                                                           |
+| ------------------------------------------------------------ | --------------------------------------------------------------------------------- |
+| `sendora.messages.get(messageId)`                            | The message with its recipients, its attachments described and its timeline       |
+| `sendora.messages.search(filters?)`                          | `{ messages, next }`, one page newest first                                       |
+| `sendora.messages.searchAll(filters?)`                       | Every match, page by page, for `for await`                                        |
+| `sendora.inbound.get(inboundMessageId)`                      | A received message: envelope, parties, headers, text, HTML, attachments described |
+| `sendora.inbound.search(filters?)`                           | `{ messages, next }` of received mail, newest first                               |
+| `sendora.inbound.searchAll(filters?)`                        | Every received match, page by page, for `for await`                               |
+| `sendora.inbound.raw(inboundMessageId)`                      | The raw message as bytes, `message/rfc822`                                        |
+| `sendora.inbound.attachment(inboundMessageId, attachmentId)` | An attachment's bytes                                                             |
+
+A stream can also receive on a domain of yours: every address on it,
+whatever the local part, lands on the stream. Claim it with the stream
+id, add the two records the answer gives, an MX that names Sendora and a
+TXT record that proves the claim, and mail is accepted once both are
+seen. A stream holds one domain, and the first account to verify a name
+holds it.
+
+| Call                                                  | Answers                                                                      |
+| ----------------------------------------------------- | ---------------------------------------------------------------------------- |
+| `sendora.inboundDomains.create({ streamId, domain })` | The domain with `mx` and `txt` to add                                        |
+| `sendora.inboundDomains.list()`                       | `{ domains }` of the server                                                  |
+| `sendora.inboundDomains.get(inboundDomainId)`         | One domain with the state of its records                                     |
+| `sendora.inboundDomains.verify(inboundDomainId)`      | The domain plus `check` per record: `ok`, `missing`, `mismatch`, `dns_error` |
+| `sendora.inboundDomains.delete(inboundDomainId)`      | Nothing; mail to it is refused from then on                                  |
 
 Filters: `recipient`, `streamId`, `tag`, `status` (`queued`, `delivered`,
 `deferred`, `bounced`, `expired`), `from` and `to` as `Date` or ISO 8601,
@@ -169,20 +192,25 @@ await sendora.suppressions.delete({ address: 'anna@example.com' });
 
 ## Tokens
 
-Every token of a server has the same rights; the value is shown once, when
-it is created.
+The server's own keys, from its own key. Every key of a server has the
+same rights; the value is shown once, when it is created; a server holds
+up to two live keys, and a third is `token_limit`. The account key
+manages the same keys under `account.servers.tokens`.
 
-| Call                              | Answers                                                |
-| --------------------------------- | ------------------------------------------------------ |
-| `sendora.tokens.create({ name })` | The token with its `token` value, once                 |
-| `sendora.tokens.list()`           | `{ tokens }`, revoked ones included                    |
-| `sendora.tokens.get(tokenId)`     | One token, without its value                           |
-| `sendora.tokens.revoke(tokenId)`  | Nothing; the last live token is refused (`last_token`) |
+| Call                              | Answers                                              |
+| --------------------------------- | ---------------------------------------------------- |
+| `sendora.tokens.create({ name })` | The token with its `token` value, once               |
+| `sendora.tokens.list()`           | `{ tokens }`, revoked ones included                  |
+| `sendora.tokens.get(tokenId)`     | One token, without its value                         |
+| `sendora.tokens.revoke(tokenId)`  | Nothing; the last live key is refused (`last_token`) |
 
 ## Webhooks
 
 An https URL of yours that Sendora posts events to as they happen, signed
-with a secret shown once at creation.
+with a secret shown once at creation. A webhook holds up to two live
+secrets, so a new one can be rolled in beside the old one: every delivery
+is then signed with each, the newest first, and the old secret is deleted
+once your receiver has switched.
 
 | Call                                                     | Answers                                          |
 | -------------------------------------------------------- | ------------------------------------------------ |
@@ -193,6 +221,8 @@ with a secret shown once at creation.
 | `sendora.webhooks.deliveries(webhookId, { status? })`    | `{ deliveries, next }`, newest first             |
 | `sendora.webhooks.deliveriesAll(webhookId, { status? })` | Every delivery, for `for await`                  |
 | `sendora.webhooks.replay(webhookId, deliveryId)`         | The delivery, queued again                       |
+| `sendora.webhooks.createSecret(webhookId)`               | A second secret with its `secret` value, once    |
+| `sendora.webhooks.deleteSecret(webhookId, secretId)`     | Nothing; the last live secret is refused         |
 | `sendora.webhooks.receive(request, secret)`              | The verified, typed event from a Fetch `Request` |
 
 Events: `delivered`, `bounced`, `deferred`, `spam_complaint` and
@@ -246,31 +276,72 @@ const event = await verifyWebhook({
 });
 ```
 
-The signature is `Sendora-Signature: t=<unix seconds>,v1=<hex>`, an
-HMAC-SHA256 with your secret over `<t>.<raw body>`, compared in constant
-time through WebCrypto. A signature older than five minutes is refused
+The signature is `Sendora-Signature: t=<unix seconds>,v1=<hex>[,v1=<hex>]`,
+one `v1` per live secret of the webhook, each an HMAC-SHA256 with that
+secret over `<t>.<raw body>`, compared in constant time through WebCrypto;
+the one your secret produces is enough. To roll a secret, create the new
+one with `webhooks.createSecret`, move your receiver to it while both
+sign every delivery, then delete the old one. A signature older than five minutes is refused
 (`stale_signature`; `toleranceSeconds` changes the limit), a wrong one
 throws `invalid_signature`.
 
-## Domains
+## The account: servers, their keys and domains
+
+An account key (`ak_…`) manages the account and never sends. An
+administrator creates one in the dashboard under Account › API keys; the
+account holds up to two live ones. `SendoraAccount` takes the same
+options as `Sendora`.
+
+```ts
+import { Sendora, SendoraAccount } from '@sendora/sdk';
+
+const account = new SendoraAccount({ token: process.env.SENDORA_ACCOUNT_TOKEN });
+
+const server = await account.servers.create({ name: 'Fakturering' });
+const sendora = new Sendora({ token: server.token.token });
+```
+
+A server is created with its default transactional stream and its first
+key, whose value is in the answer this once. A server holds up to two
+live keys and never falls below one, so rotation is create the new key,
+switch to it, revoke the old one.
+
+| Call                                                | Answers                                                                            |
+| --------------------------------------------------- | ---------------------------------------------------------------------------------- |
+| `account.servers.create({ name })`                  | The server with its first key as `token`, once; a taken name is `server_exists`    |
+| `account.servers.list()`                            | `{ servers }`, oldest first                                                        |
+| `account.servers.get(serverId)`                     | One server                                                                         |
+| `account.servers.update(serverId, { name })`        | The renamed server                                                                 |
+| `account.servers.delete(serverId)`                  | Nothing; `server_in_flight` while its messages are still being delivered           |
+| `account.servers.tokens.create(serverId, { name })` | The key with its `token` value, once; a third live key is `token_limit` with `max` |
+| `account.servers.tokens.list(serverId)`             | `{ tokens }`, revoked ones included                                                |
+| `account.servers.tokens.get(serverId, tokenId)`     | One key, without its value                                                         |
+| `account.servers.tokens.revoke(serverId, tokenId)`  | Nothing; the last live key is refused (`last_token`)                               |
+
+```ts
+const { token } = await account.servers.tokens.create(serverId, { name: 'Fakturasystemet' });
+```
 
 Sending domains belong to the account, and every server sends from them.
 A domain sends once both DNS records are seen.
 
 | Call                                 | Answers                                                                      |
 | ------------------------------------ | ---------------------------------------------------------------------------- |
-| `sendora.domains.create({ domain })` | The domain with `returnPath` (CNAME) and `dkim` (TXT) to add                 |
-| `sendora.domains.list()`             | `{ domains }`                                                                |
-| `sendora.domains.get(domainId)`      | One domain with the state of its records                                     |
-| `sendora.domains.verify(domainId)`   | The domain plus `check` per record: `ok`, `missing`, `mismatch`, `dns_error` |
-| `sendora.domains.delete(domainId)`   | Nothing; mail from it is refused from then on                                |
+| `account.domains.create({ domain })` | The domain with `returnPath` (CNAME) and `dkim` (TXT) to add                 |
+| `account.domains.list()`             | `{ domains }`                                                                |
+| `account.domains.get(domainId)`      | One domain with the state of its records                                     |
+| `account.domains.verify(domainId)`   | The domain plus `check` per record: `ok`, `missing`, `mismatch`, `dns_error` |
+| `account.domains.delete(domainId)`   | Nothing; mail from it is refused from then on                                |
 
 ```ts
-const domain = await sendora.domains.create({ domain: 'example.se' });
+const domain = await account.domains.create({ domain: 'example.se' });
 console.log(`${domain.returnPath.type} ${domain.returnPath.host} -> ${domain.returnPath.value}`);
 console.log(`${domain.dkim.type} ${domain.dkim.host} -> ${domain.dkim.value}`);
 ```
 
+A key of the wrong kind answers `wrong_token_kind`: a server key on the
+account's routes, or an account key on a server's.
+
 ## Errors
 
 Every failed call throws `SendoraError`. Narrow on `code`:
@@ -298,48 +369,58 @@ try {
 }
 ```
 
-| Code                              | Status | Meaning                                                                   |
-| --------------------------------- | ------ | ------------------------------------------------------------------------- |
-| `invalid_request`                 | 400    | A field is wrong; `issues` says which.                                    |
-| `idempotency_key_required`        | 400    | A batch was sent without a key.                                           |
-| `unauthorized`                    | 401    | The token is missing, malformed or revoked.                               |
-| `payment_required`                | 402    | The account has no active subscription.                                   |
-| `tenant_paused`                   | 403    | Sendora has paused the account.                                           |
-| `tenant_not_active`               | 403    | The account is not approved to send, or not active for an inbound stream. |
-| `spam_complaint_locked`           | 403    | Only support can lift a spam-complaint suppression.                       |
-| `unsubscribe_locked`              | 403    | Only support can lift a recipient's own unsubscribe.                      |
-| `not_found`                       | 404    | No such id on this server, or no such suppressed address.                 |
-| `domain_exists`                   | 409    | The account already has the domain; `existingId` names it.                |
-| `webhook_exists`                  | 409    | The server already has a webhook for that URL; `existingId` names it.     |
-| `stream_exists`                   | 409    | The server already has a stream with that name; `existingId` names it.    |
-| `inbound_stream_exists`           | 409    | The server already has a live inbound stream; `existingId` names it.      |
-| `default_stream`                  | 409    | The default stream cannot be archived.                                    |
-| `last_token`                      | 409    | The only live token cannot be revoked.                                    |
-| `request_too_large`               | 413    | The body exceeds 10 MB.                                                   |
-| `from_domain_not_verified`        | 422    | The From domain is not a verified sending domain.                         |
-| `stream_not_found`                | 422    | `streamId` names no stream of this server.                                |
-| `stream_archived`                 | 422    | The stream is archived and takes no new messages.                         |
-| `stream_paused`                   | 422    | Sendora paused the stream after complaints; support resumes it.           |
-| `stream_not_sendable`             | 422    | An inbound stream receives mail; it takes no messages and has no list.    |
-| `stream_not_broadcast`            | 422    | A broadcast goes on a broadcast stream; this one is transactional.        |
-| `substitution_missing`            | 422    | The content names a `{{ key }}` a message does not give.                  |
-| `broadcast_not_open`              | 409    | The broadcast is completed or cancelled; nothing is left to cancel.       |
-| `broadcast_not_enabled`           | 422    | Broadcast is not enabled for the account: no broadcast stream, no send.   |
-| `unsubscribe_placeholder_missing` | 422    | A broadcast message lacks `{{ unsubscribe_url }}` in a part.              |
-| `list_unsubscribe_reserved`       | 422    | Sendora writes List-Unsubscribe on broadcast streams; leave it out.       |
-| `recipient_suppressed`            | 422    | Recipients on the suppression list; `suppressed` lists them.              |
-| `idempotency_key_mismatch`        | 422    | The key was used before with a different body.                            |
-| `rate_limited`                    | 429    | Per-minute limit; `retryAfter`, `scope`, `limit`.                         |
-| `monthly_cap_reached`             | 429    | The monthly cap is used up; `scope`, `cap`, `used`, `resetsAt`.           |
-| `sending_disabled`                | 503    | Sending is paused for everyone; `retryAfter`.                             |
-| `connection_failed`               | none   | The request never reached the API; `cause` holds the failure.             |
-| `timeout`                         | none   | No answer within `timeoutMs`.                                             |
-| `unexpected_response`             | any    | An answer without a JSON error body, such as from a proxy.                |
-| `invalid_signature`               | none   | A webhook's signature is missing, malformed or wrong.                     |
-| `stale_signature`                 | none   | A webhook's signature is older than the tolerance.                        |
+| Code                              | Status | Meaning                                                                                              |
+| --------------------------------- | ------ | ---------------------------------------------------------------------------------------------------- |
+| `invalid_request`                 | 400    | A field is wrong; `issues` says which.                                                               |
+| `idempotency_key_required`        | 400    | A batch was sent without a key.                                                                      |
+| `unauthorized`                    | 401    | The key is missing, malformed or revoked.                                                            |
+| `wrong_token_kind`                | 403    | A server key where an account key is needed, or the reverse; `message` names the kind.               |
+| `payment_required`                | 402    | The account has no active subscription.                                                              |
+| `tenant_paused`                   | 403    | Sendora has paused the account.                                                                      |
+| `tenant_not_active`               | 403    | The account is not approved to send, or not active for an inbound stream.                            |
+| `spam_complaint_locked`           | 403    | Only support can lift a spam-complaint suppression.                                                  |
+| `unsubscribe_locked`              | 403    | Only support can lift a recipient's own unsubscribe.                                                 |
+| `not_found`                       | 404    | No such id on this server, or no such suppressed address.                                            |
+| `domain_exists`                   | 409    | The account already has the domain; `existingId` names it.                                           |
+| `domain_reserved`                 | 400    | The name is Sendora's own; no account can receive on it.                                             |
+| `inbound_domain_exists`           | 409    | The stream already has a domain (`existingId` names it), or another account holds the name verified. |
+| `webhook_exists`                  | 409    | The server already has a webhook for that URL; `existingId` names it.                                |
+| `stream_exists`                   | 409    | The server already has a stream with that name; `existingId` names it.                               |
+| `inbound_stream_exists`           | 409    | The server already has a live inbound stream; `existingId` names it.                                 |
+| `default_stream`                  | 409    | The default stream cannot be archived.                                                               |
+| `last_token`                      | 409    | The only live key cannot be revoked.                                                                 |
+| `last_secret`                     | 409    | The only live secret of a webhook cannot be deleted.                                                 |
+| `secret_limit`                    | 409    | The webhook already holds two live secrets; `max` says how many.                                     |
+| `token_limit`                     | 409    | The server or the account already holds two live keys; `max` says how many.                          |
+| `server_exists`                   | 409    | The account already has a server with that name.                                                     |
+| `server_limit`                    | 409    | The account has as many servers as it may; `max` says how many.                                      |
+| `server_reserved`                 | 409    | The server sends Sendora's own sign-in mail and cannot be renamed or removed.                        |
+| `server_in_flight`                | 409    | Messages of the server are still being delivered; delete it later.                                   |
+| `request_too_large`               | 413    | The body exceeds 10 MB.                                                                              |
+| `from_domain_not_verified`        | 422    | The From domain is not a verified sending domain.                                                    |
+| `stream_not_found`                | 422    | `streamId` names no stream of this server.                                                           |
+| `stream_archived`                 | 422    | The stream is archived and takes no new messages.                                                    |
+| `stream_paused`                   | 422    | Sendora paused the stream after complaints; support resumes it.                                      |
+| `stream_not_sendable`             | 422    | An inbound stream receives mail; it takes no messages and has no list.                               |
+| `stream_not_broadcast`            | 422    | A broadcast goes on a broadcast stream; this one is transactional.                                   |
+| `substitution_missing`            | 422    | The content names a `{{ key }}` a message does not give.                                             |
+| `broadcast_not_open`              | 409    | The broadcast is completed or cancelled; nothing is left to cancel.                                  |
+| `broadcast_not_enabled`           | 422    | Broadcast is not enabled for the account: no broadcast stream, no send.                              |
+| `unsubscribe_placeholder_missing` | 422    | A broadcast message lacks `{{ unsubscribe_url }}` in a part.                                         |
+| `list_unsubscribe_reserved`       | 422    | Sendora writes List-Unsubscribe on broadcast streams; leave it out.                                  |
+| `recipient_suppressed`            | 422    | Recipients on the suppression list; `suppressed` lists them.                                         |
+| `idempotency_key_mismatch`        | 422    | The key was used before with a different body.                                                       |
+| `rate_limited`                    | 429    | Per-minute limit; `retryAfter`, `scope`, `limit`.                                                    |
+| `monthly_cap_reached`             | 429    | The monthly cap is used up; `scope`, `cap`, `used`, `resetsAt`.                                      |
+| `sending_disabled`                | 503    | Sending is paused for everyone; `retryAfter`.                                                        |
+| `connection_failed`               | none   | The request never reached the API; `cause` holds the failure.                                        |
+| `timeout`                         | none   | No answer within `timeoutMs`.                                                                        |
+| `unexpected_response`             | any    | An answer without a JSON error body, such as from a proxy.                                           |
+| `invalid_signature`               | none   | A webhook's signature is missing, malformed or wrong.                                                |
+| `stale_signature`                 | none   | A webhook's signature is older than the tolerance.                                                   |
 
 `error.retryable` is true when waiting and calling again could succeed.
-Neither the token nor a request body is ever part of an error.
+Neither the key nor a request body is ever part of an error.
 
 ## Retries
 
@@ -347,7 +428,8 @@ Lost connections, timeouts, `rate_limited`, `sending_disabled` and server
 errors are retried with jittered backoff, twice by default, honouring
 `retryAfter` when it fits within five seconds of waiting in all. A longer
 `retryAfter` is thrown at once for you to schedule. A request that creates
-something (`tokens.create`, `webhooks.create`, `domains.create`, `replay`)
+something (`servers.create`, `servers.tokens.create`, `tokens.create`,
+`webhooks.create`, `webhooks.createSecret`, `domains.create`, `replay`)
 is repeated only after a `rate_limited` or `sending_disabled` answer, never
 after a lost connection, so nothing is created twice. Nothing else is
 retried. `new Sendora({ maxRetries: 0 })` turns retries off; `timeoutMs`

package/dist/account.d.ts

@@ -0,0 +1,30 @@
+import { DomainsResource } from './domains.ts';
+import { type ClientOptions } from './options.ts';
+import { ServersResource } from './servers.ts';
+export interface SendoraAccountOptions extends ClientOptions {
+    /**
+     * An account key (`ak_…`), created by an administrator in the dashboard.
+     * It manages the account and never sends. Keep it on the server; never
+     * ship it to a browser. `undefined`, as an unset environment variable
+     * gives, throws at construction rather than at the first call.
+     */
+    token: string | undefined;
+}
+/**
+ * The account client: the servers, each server's keys and the sending
+ * domains, under an account key. Sending, the log, streams, suppressions
+ * and webhooks belong to a server and to `Sendora` with a server key.
+ *
+ * @example
+ * import { Sendora, SendoraAccount } from '@sendora/sdk';
+ *
+ * const account = new SendoraAccount({ token: process.env.SENDORA_ACCOUNT_TOKEN });
+ * const server = await account.servers.create({ name: 'Fakturering' });
+ * const sendora = new Sendora({ token: server.token.token });
+ */
+export declare class SendoraAccount {
+    readonly servers: ServersResource;
+    readonly domains: DomainsResource;
+    constructor(options: SendoraAccountOptions);
+}
+//# sourceMappingURL=account.d.ts.map

package/dist/account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../src/account.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,WAAW,qBAAsB,SAAQ,aAAa;IAC1D;;;;;OAKG;IACH,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,cAAc;IACzB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;gBAEtB,OAAO,EAAE,qBAAqB;CAS3C"}

package/dist/account.js

@@ -0,0 +1,25 @@
+import { DomainsResource } from "./domains.js";
+import { transportFor } from "./options.js";
+import { ServersResource } from "./servers.js";
+/**
+ * The account client: the servers, each server's keys and the sending
+ * domains, under an account key. Sending, the log, streams, suppressions
+ * and webhooks belong to a server and to `Sendora` with a server key.
+ *
+ * @example
+ * import { Sendora, SendoraAccount } from '@sendora/sdk';
+ *
+ * const account = new SendoraAccount({ token: process.env.SENDORA_ACCOUNT_TOKEN });
+ * const server = await account.servers.create({ name: 'Fakturering' });
+ * const sendora = new Sendora({ token: server.token.token });
+ */
+export class SendoraAccount {
+    servers;
+    domains;
+    constructor(options) {
+        const transport = transportFor(options.token, options, 'SendoraAccount needs an account key (ak_…); an administrator creates one in the dashboard.');
+        this.servers = new ServersResource(transport);
+        this.domains = new DomainsResource(transport);
+    }
+}
+//# sourceMappingURL=account.js.map

package/dist/account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../src/account.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAY/C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,cAAc;IAChB,OAAO,CAAkB;IACzB,OAAO,CAAkB;IAElC,YAAY,OAA8B;QACxC,MAAM,SAAS,GAAG,YAAY,CAC5B,OAAO,CAAC,KAAK,EACb,OAAO,EACP,4FAA4F,CAC7F,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/client.d.ts

@@ -1,30 +1,26 @@
-import { DomainsResource } from './domains.ts';
 import { BroadcastsResource } from './broadcasts.ts';
 import { EmailResource } from './email.ts';
+import { InboundResource } from './inbound.ts';
+import { InboundDomainsResource } from './inbound-domains.ts';
 import { MessagesResource } from './messages.ts';
+import { type ClientOptions } from './options.ts';
 import { StreamsResource } from './streams.ts';
 import { SuppressionsResource } from './suppressions.ts';
 import { TokensResource } from './tokens.ts';
 import { WebhooksResource } from './webhooks.ts';
-export declare const DEFAULT_BASE_URL = "https://api.sendora.se";
-export interface SendoraOptions {
+export interface SendoraOptions extends ClientOptions {
     /**
-     * A server's API token, created in the dashboard. Keep it on the server;
-     * never ship it to a browser. `undefined`, as an unset environment
-     * variable gives, throws at construction rather than at the first call.
+     * A server key (`sk_…`), answered once when the server is created or a
+     * key is added to it. Keep it on the server; never ship it to a browser.
+     * `undefined`, as an unset environment variable gives, throws at
+     * construction rather than at the first call.
      */
     token: string | undefined;
-    /** The API's origin; https://api.sendora.se unless you test against another. */
-    baseUrl?: string | undefined;
-    /** The fetch to use; the global one unless you need a proxy or a fake. */
-    fetch?: typeof fetch | undefined;
-    /** How long one attempt may take; 30 seconds by default. */
-    timeoutMs?: number | undefined;
-    /** How many times a failed call is repeated when repeating is safe; 2 by default, 0 turns retries off. */
-    maxRetries?: number | undefined;
 }
 /**
- * The client. One instance per server token; every resource hangs off it.
+ * The server client. One instance per server key; every resource of the
+ * server hangs off it. The account's servers and sending domains are
+ * `SendoraAccount` with an account key.
  *
  * @example
  * import { Sendora } from '@sendora/sdk';
@@ -41,11 +37,12 @@ export declare class Sendora {
     readonly email: EmailResource;
     readonly broadcasts: BroadcastsResource;
     readonly messages: MessagesResource;
+    readonly inbound: InboundResource;
+    readonly inboundDomains: InboundDomainsResource;
     readonly streams: StreamsResource;
     readonly suppressions: SuppressionsResource;
     readonly tokens: TokensResource;
     readonly webhooks: WebhooksResource;
-    readonly domains: DomainsResource;
     constructor(options: SendoraOptions);
 }
 //# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AAGzD,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;IACjC,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,0GAA0G;IAC1G,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,OAAO;IAClB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;gBAEtB,OAAO,EAAE,cAAc;CA+BpC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD;;;;;OAKG;IACH,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,OAAO;IAClB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;gBAExB,OAAO,EAAE,cAAc;CAgBpC"}

package/dist/client.js

@@ -1,18 +1,17 @@
-import { DomainsResource } from "./domains.js";
 import { BroadcastsResource } from "./broadcasts.js";
 import { EmailResource } from "./email.js";
+import { InboundResource } from "./inbound.js";
+import { InboundDomainsResource } from "./inbound-domains.js";
 import { MessagesResource } from "./messages.js";
-import { DEFAULT_MAX_RETRIES } from "./retry.js";
+import { transportFor } from "./options.js";
 import { StreamsResource } from "./streams.js";
 import { SuppressionsResource } from "./suppressions.js";
 import { TokensResource } from "./tokens.js";
-import { Transport } from "./transport.js";
-import { SDK_VERSION } from "./version.js";
 import { WebhooksResource } from "./webhooks.js";
-export const DEFAULT_BASE_URL = 'https://api.sendora.se';
-const DEFAULT_TIMEOUT_MS = 30_000;
 /**
- * The client. One instance per server token; every resource hangs off it.
+ * The server client. One instance per server key; every resource of the
+ * server hangs off it. The account's servers and sending domains are
+ * `SendoraAccount` with an account key.
  *
  * @example
  * import { Sendora } from '@sendora/sdk';
@@ -29,41 +28,23 @@ export class Sendora {
     email;
     broadcasts;
     messages;
+    inbound;
+    inboundDomains;
     streams;
     suppressions;
     tokens;
     webhooks;
-    domains;
     constructor(options) {
-        if (options.token === undefined || options.token.trim() === '') {
-            throw new TypeError('Sendora needs a server API token; create one in the dashboard.');
-        }
-        const baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;
-        new URL(baseUrl);
-        const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-        if (!(timeoutMs > 0)) {
-            throw new TypeError('timeoutMs must be a positive number of milliseconds.');
-        }
-        const maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES;
-        if (!Number.isInteger(maxRetries) || maxRetries < 0) {
-            throw new TypeError('maxRetries must be a whole number of zero or more.');
-        }
-        const transport = new Transport({
-            baseUrl,
-            token: options.token,
-            fetch: options.fetch ?? fetch,
-            timeoutMs,
-            maxRetries,
-            userAgent: `sendora-sdk/${SDK_VERSION}`,
-        });
+        const transport = transportFor(options.token, options, 'Sendora needs a server key (sk_…); it is shown once when the server or the key is created.');
         this.email = new EmailResource(transport);
         this.broadcasts = new BroadcastsResource(transport);
         this.messages = new MessagesResource(transport);
+        this.inbound = new InboundResource(transport);
+        this.inboundDomains = new InboundDomainsResource(transport);
         this.streams = new StreamsResource(transport);
         this.suppressions = new SuppressionsResource(transport);
         this.tokens = new TokensResource(transport);
         this.webhooks = new WebhooksResource(transport);
-        this.domains = new DomainsResource(transport);
     }
 }
 //# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AACzD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAmBlC;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,OAAO;IACT,KAAK,CAAgB;IACrB,UAAU,CAAqB;IAC/B,QAAQ,CAAmB;IAC3B,OAAO,CAAkB;IACzB,YAAY,CAAuB;IACnC,MAAM,CAAiB;IACvB,QAAQ,CAAmB;IAC3B,OAAO,CAAkB;IAElC,YAAY,OAAuB;QACjC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC/D,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;QACpD,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QAC1D,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC;YAC9B,OAAO;YACP,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;YAC7B,SAAS;YACT,UAAU;YACV,SAAS,EAAE,eAAe,WAAW,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAYjD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,OAAO;IACT,KAAK,CAAgB;IACrB,UAAU,CAAqB;IAC/B,QAAQ,CAAmB;IAC3B,OAAO,CAAkB;IACzB,cAAc,CAAyB;IACvC,OAAO,CAAkB;IACzB,YAAY,CAAuB;IACnC,MAAM,CAAiB;IACvB,QAAQ,CAAmB;IAEpC,YAAY,OAAuB;QACjC,MAAM,SAAS,GAAG,YAAY,CAC5B,OAAO,CAAC,KAAK,EACb,OAAO,EACP,4FAA4F,CAC7F,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/domains.d.ts

@@ -1,6 +1,6 @@
 import type { Transport } from './transport.ts';
 import type { CreateDomainRequest, DomainList, RequestOptions, SendingDomain, VerifiedDomain } from './types.ts';
-/** The account's sending domains and the two DNS records each one needs. Any server's token manages them. */
+/** The account's sending domains and the two DNS records each one needs, managed with the account key; every server sends from them. */
 export declare class DomainsResource {
     #private;
     constructor(transport: Transport);

package/dist/domains.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../src/domains.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EACV,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,aAAa,EACb,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,6GAA6G;AAC7G,qBAAa,eAAe;;gBAGd,SAAS,EAAE,SAAS;IAIhC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAU1F,2CAA2C;IAC3C,IAAI,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,UAAU,CAAC;IASvD,uDAAuD;IACvD,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAS3E;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAS/E,yFAAyF;IACzF,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;CAQtE"}
+{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../src/domains.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EACV,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,aAAa,EACb,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,wIAAwI;AACxI,qBAAa,eAAe;;gBAGd,SAAS,EAAE,SAAS;IAIhC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAU1F,2CAA2C;IAC3C,IAAI,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,UAAU,CAAC;IASvD,uDAAuD;IACvD,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;IAS3E;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAS/E,yFAAyF;IACzF,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;CAQtE"}

package/dist/domains.js

@@ -1,4 +1,4 @@
-/** The account's sending domains and the two DNS records each one needs. Any server's token manages them. */
+/** The account's sending domains and the two DNS records each one needs, managed with the account key; every server sends from them. */
 export class DomainsResource {
     #transport;
     constructor(transport) {

package/dist/domains.js.map

@@ -1 +1 @@
-{"version":3,"file":"domains.js","sourceRoot":"","sources":["../src/domains.ts"],"names":[],"mappings":"AASA,6GAA6G;AAC7G,MAAM,OAAO,eAAe;IACjB,UAAU,CAAY;IAE/B,YAAY,SAAoB;QAC9B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,OAA4B,EAAE,UAA0B,EAAE;QAC/D,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAgB;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC,UAA0B,EAAE;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAa;YACzC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,uDAAuD;IACvD,GAAG,CAAC,QAAgB,EAAE,UAA0B,EAAE;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAgB;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe,kBAAkB,CAAC,QAAQ,CAAC,EAAE;YACnD,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,QAAgB,EAAE,UAA0B,EAAE;QACnD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAiB;YAC7C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe,kBAAkB,CAAC,QAAQ,CAAC,SAAS;YAC1D,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,yFAAyF;IACzF,MAAM,CAAC,QAAgB,EAAE,UAA0B,EAAE;QACnD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAY;YACxC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,eAAe,kBAAkB,CAAC,QAAQ,CAAC,EAAE;YACnD,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../src/domains.ts"],"names":[],"mappings":"AASA,wIAAwI;AACxI,MAAM,OAAO,eAAe;IACjB,UAAU,CAAY;IAE/B,YAAY,SAAoB;QAC9B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,OAA4B,EAAE,UAA0B,EAAE;QAC/D,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAgB;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC,UAA0B,EAAE;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAa;YACzC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,uDAAuD;IACvD,GAAG,CAAC,QAAgB,EAAE,UAA0B,EAAE;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAgB;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe,kBAAkB,CAAC,QAAQ,CAAC,EAAE;YACnD,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,QAAgB,EAAE,UAA0B,EAAE;QACnD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAiB;YAC7C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe,kBAAkB,CAAC,QAAQ,CAAC,SAAS;YAC1D,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,yFAAyF;IACzF,MAAM,CAAC,QAAgB,EAAE,UAA0B,EAAE;QACnD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAY;YACxC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,eAAe,kBAAkB,CAAC,QAAQ,CAAC,EAAE;YACnD,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/error.d.ts

@@ -1,6 +1,6 @@
 import type { LimitScope, SuppressedRecipient, ValidationIssue } from './types.ts';
-/** Every code the API answers, the three the SDK raises when it never got a proper answer, and the two of the webhook verifier. */
-export type SendoraErrorCode = 'invalid_request' | 'unauthorized' | 'payment_required' | 'tenant_paused' | 'tenant_not_active' | 'spam_complaint_locked' | 'unsubscribe_locked' | 'not_found' | 'domain_exists' | 'webhook_exists' | 'stream_exists' | 'inbound_stream_exists' | 'default_stream' | 'last_token' | 'request_too_large' | 'from_domain_not_verified' | 'stream_not_found' | 'stream_archived' | 'stream_paused' | 'stream_not_sendable' | 'stream_not_broadcast' | 'broadcast_not_enabled' | 'broadcast_not_open' | 'substitution_missing' | 'unsubscribe_placeholder_missing' | 'list_unsubscribe_reserved' | 'recipient_suppressed' | 'idempotency_key_mismatch' | 'idempotency_key_required' | 'rate_limited' | 'monthly_cap_reached' | 'sending_disabled' | 'connection_failed' | 'timeout' | 'unexpected_response' | 'invalid_signature' | 'stale_signature';
+/** Every code the API answers, under either kind of key, the three the SDK raises when it never got a proper answer, and the two of the webhook verifier. */
+export type SendoraErrorCode = 'invalid_request' | 'unauthorized' | 'wrong_token_kind' | 'payment_required' | 'tenant_paused' | 'tenant_not_active' | 'spam_complaint_locked' | 'unsubscribe_locked' | 'not_found' | 'domain_exists' | 'domain_reserved' | 'inbound_domain_exists' | 'webhook_exists' | 'stream_exists' | 'inbound_stream_exists' | 'default_stream' | 'last_token' | 'token_limit' | 'last_secret' | 'secret_limit' | 'server_exists' | 'server_limit' | 'server_reserved' | 'server_in_flight' | 'request_too_large' | 'from_domain_not_verified' | 'stream_not_found' | 'stream_archived' | 'stream_paused' | 'stream_not_sendable' | 'stream_not_broadcast' | 'broadcast_not_enabled' | 'broadcast_not_open' | 'substitution_missing' | 'unsubscribe_placeholder_missing' | 'list_unsubscribe_reserved' | 'content_expired' | 'content_unreadable' | 'recipient_suppressed' | 'idempotency_key_mismatch' | 'idempotency_key_required' | 'rate_limited' | 'monthly_cap_reached' | 'sending_disabled' | 'connection_failed' | 'timeout' | 'unexpected_response' | 'invalid_signature' | 'stale_signature';
 export interface SendoraErrorFields {
     code: SendoraErrorCode;
     message: string;
@@ -11,6 +11,7 @@ export interface SendoraErrorFields {
     cap?: number | null;
     used?: number | null;
     resetsAt?: string | null;
+    max?: number | null;
     issues?: ValidationIssue[];
     suppressed?: SuppressedRecipient[];
     streamId?: string | null;
@@ -49,13 +50,15 @@ export declare class SendoraError extends Error {
     readonly used: number | null;
     /** When the month counter resets, on monthly_cap_reached. */
     readonly resetsAt: string | null;
+    /** Live keys the server or the account may hold, on token_limit; servers the account may have, on server_limit; live secrets a webhook may hold, on secret_limit. */
+    readonly max: number | null;
     /** One entry per invalid field, on invalid_request. */
     readonly issues: ValidationIssue[];
     /** The recipients the server refused, on recipient_suppressed. */
     readonly suppressed: SuppressedRecipient[];
     /** The stream whose suppression list refused the send, on recipient_suppressed. */
     readonly streamId: string | null;
-    /** The id of the domain, webhook or stream that already exists, on domain_exists, webhook_exists and stream_exists. */
+    /** The id of the domain, webhook or stream that already exists, on domain_exists, webhook_exists, stream_exists, inbound_stream_exists and, when the stream already has a domain, inbound_domain_exists. */
     readonly existingId: string | null;
     constructor(fields: SendoraErrorFields);
     /** True when waiting and calling again could succeed: a rate limit, sending paused for everyone, a lost connection, a timeout, or a server-side failure. */