@workwae/sdk 0.1.0-alpha.1 → 0.1.0-alpha.2

package/contract/org-connections/routes.d.ts

@@ -22,6 +22,7 @@ export declare const orgConnections: {
                 serviceAccountEmail: z.ZodString;
                 directoryAdmin: z.ZodNullable<z.ZodString>;
                 scopes: z.ZodArray<z.ZodString>;
+                groupsEnabled: z.ZodBoolean;
             }, z.core.$strip>>;
             microsoft: z.ZodNullable<z.ZodObject<{
                 cloud: z.ZodEnum<{
@@ -52,6 +53,8 @@ export declare const orgConnections: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -61,37 +64,45 @@ export declare const orgConnections: {
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
     }>>, Record<never, never>>;
-    create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        kind: z.ZodLiteral<"google_delegation">;
-        name: z.ZodString;
-        serviceAccountKey: z.ZodString;
-        domain: z.ZodString;
-        calendarEnabled: z.ZodDefault<z.ZodBoolean>;
-        contactsEnabled: z.ZodDefault<z.ZodBoolean>;
-        directoryAdmin: z.ZodOptional<z.ZodEmail>;
-    }, z.core.$strip>, z.ZodObject<{
-        kind: z.ZodLiteral<"microsoft_app">;
-        name: z.ZodString;
-        cloud: z.ZodDefault<z.ZodEnum<{
-            global: "global";
-            "gcc-high": "gcc-high";
-            dod: "dod";
-            china: "china";
-        }>>;
-        credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
-            type: z.ZodLiteral<"platform">;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"client_secret">;
-            clientId: z.ZodString;
-            clientSecret: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            type: z.ZodLiteral<"certificate">;
-            clientId: z.ZodString;
-            certificate: z.ZodString;
-            privateKey: z.ZodString;
-        }, z.core.$strip>], "type">;
-        directoryId: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>], "kind">, z.ZodObject<{
+    create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodDiscriminatedUnion<[
+        z.ZodObject<{
+            kind: z.ZodLiteral<"google_delegation">;
+            name: z.ZodString;
+            serviceAccountKey: z.ZodString;
+            domain: z.ZodString;
+            calendarEnabled: z.ZodDefault<z.ZodBoolean>;
+            contactsEnabled: z.ZodDefault<z.ZodBoolean>;
+            directoryAdmin: z.ZodOptional<z.ZodEmail>;
+            groupsEnabled: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>,
+        z.ZodObject<{
+            kind: z.ZodLiteral<"microsoft_app">;
+            name: z.ZodString;
+            cloud: z.ZodDefault<z.ZodEnum<{
+                global: "global";
+                "gcc-high": "gcc-high";
+                dod: "dod";
+                china: "china";
+            }>>;
+            credential: z.ZodDiscriminatedUnion<[
+                z.ZodObject<{
+                    type: z.ZodLiteral<"platform">;
+                }, z.core.$strip>,
+                z.ZodObject<{
+                    type: z.ZodLiteral<"client_secret">;
+                    clientId: z.ZodString;
+                    clientSecret: z.ZodString;
+                }, z.core.$strip>,
+                z.ZodObject<{
+                    type: z.ZodLiteral<"certificate">;
+                    clientId: z.ZodString;
+                    certificate: z.ZodString;
+                    privateKey: z.ZodString;
+                }, z.core.$strip>
+            ], "type">;
+            directoryId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>
+    ], "kind">, z.ZodObject<{
         id: z.ZodUUID;
         kind: z.ZodEnum<{
             google_delegation: "google_delegation";
@@ -112,6 +123,7 @@ export declare const orgConnections: {
             serviceAccountEmail: z.ZodString;
             directoryAdmin: z.ZodNullable<z.ZodString>;
             scopes: z.ZodArray<z.ZodString>;
+            groupsEnabled: z.ZodBoolean;
         }, z.core.$strip>>;
         microsoft: z.ZodNullable<z.ZodObject<{
             cloud: z.ZodEnum<{
@@ -141,6 +153,8 @@ export declare const orgConnections: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -190,6 +204,7 @@ export declare const orgConnections: {
             serviceAccountEmail: z.ZodString;
             directoryAdmin: z.ZodNullable<z.ZodString>;
             scopes: z.ZodArray<z.ZodString>;
+            groupsEnabled: z.ZodBoolean;
         }, z.core.$strip>>;
         microsoft: z.ZodNullable<z.ZodObject<{
             cloud: z.ZodEnum<{
@@ -219,6 +234,8 @@ export declare const orgConnections: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -236,6 +253,7 @@ export declare const orgConnections: {
         serviceAccountKey: z.ZodOptional<z.ZodString>;
         calendarEnabled: z.ZodOptional<z.ZodBoolean>;
         contactsEnabled: z.ZodOptional<z.ZodBoolean>;
+        groupsEnabled: z.ZodOptional<z.ZodBoolean>;
         directoryAdmin: z.ZodOptional<z.ZodNullable<z.ZodEmail>>;
         clientSecret: z.ZodOptional<z.ZodString>;
         certificate: z.ZodOptional<z.ZodString>;
@@ -262,6 +280,7 @@ export declare const orgConnections: {
             serviceAccountEmail: z.ZodString;
             directoryAdmin: z.ZodNullable<z.ZodString>;
             scopes: z.ZodArray<z.ZodString>;
+            groupsEnabled: z.ZodBoolean;
         }, z.core.$strip>>;
         microsoft: z.ZodNullable<z.ZodObject<{
             cloud: z.ZodEnum<{
@@ -291,6 +310,8 @@ export declare const orgConnections: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -330,6 +351,8 @@ export declare const orgConnections: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -361,6 +384,8 @@ export declare const orgConnections: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -416,6 +441,7 @@ export declare const orgConnections: {
                 serviceAccountEmail: z.ZodString;
                 directoryAdmin: z.ZodNullable<z.ZodString>;
                 scopes: z.ZodArray<z.ZodString>;
+                groupsEnabled: z.ZodBoolean;
             }, z.core.$strip>>;
             microsoft: z.ZodNullable<z.ZodObject<{
                 cloud: z.ZodEnum<{
@@ -452,6 +478,8 @@ export declare const orgConnections: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -494,6 +522,8 @@ export declare const orgConnections: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -550,12 +580,18 @@ export declare const orgConnections: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         items: z.ZodArray<z.ZodObject<{
@@ -578,6 +614,8 @@ export declare const orgConnections: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -591,10 +629,7 @@ export declare const orgConnections: {
             status: 402;
             message: string;
         };
-        plan_limit_storage: {
-            status: 403;
-            message: string;
-        };
+        plan_limit_storage: import("../errors.js").DeclaredError<"plan_limit_storage">;
         storage_unavailable: {
             status: 400;
             message: string;
@@ -608,6 +643,230 @@ export declare const orgConnections: {
             message: string;
         };
     }>, Record<never, never>>;
+    addGroup: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        connectionId: z.ZodUUID;
+        email: z.ZodEmail;
+        relayEmail: z.ZodEmail;
+        displayName: z.ZodOptional<z.ZodString>;
+        externalRef: z.ZodOptional<z.ZodString>;
+        settings: z.ZodOptional<z.ZodObject<{
+            bodyStorage: z.ZodOptional<z.ZodEnum<{
+                none: "none";
+                cache: "cache";
+                full: "full";
+            }>>;
+            syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
+            calendarEnabled: z.ZodOptional<z.ZodBoolean>;
+            contactsEnabled: z.ZodOptional<z.ZodBoolean>;
+            undoSendSeconds: z.ZodOptional<z.ZodNumber>;
+            trackOpens: z.ZodOptional<z.ZodBoolean>;
+            trackClicks: z.ZodOptional<z.ZodBoolean>;
+            trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodUUID;
+        externalRef: z.ZodNullable<z.ZodString>;
+        provider: z.ZodEnum<{
+            gmail: "gmail";
+            graph: "graph";
+            imap: "imap";
+        }>;
+        email: z.ZodString;
+        displayName: z.ZodNullable<z.ZodString>;
+        oauthAppId: z.ZodNullable<z.ZodUUID>;
+        cloud: z.ZodNullable<z.ZodEnum<{
+            global: "global";
+            "gcc-high": "gcc-high";
+            dod: "dod";
+            china: "china";
+        }>>;
+        status: z.ZodEnum<{
+            active: "active";
+            paused: "paused";
+            reauth_required: "reauth_required";
+            disabled: "disabled";
+        }>;
+        statusReason: z.ZodNullable<z.ZodString>;
+        settings: z.ZodObject<{
+            bodyStorage: z.ZodEnum<{
+                none: "none";
+                cache: "cache";
+                full: "full";
+            }>;
+            syncWindowDays: z.ZodNullable<z.ZodNumber>;
+            mailEnabled: z.ZodBoolean;
+            calendarEnabled: z.ZodBoolean;
+            contactsEnabled: z.ZodBoolean;
+            undoSendSeconds: z.ZodNumber;
+            trackOpens: z.ZodBoolean;
+            trackClicks: z.ZodBoolean;
+            trackingHoneypot: z.ZodBoolean;
+            suppressionCheck: z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>;
+            sendsPerMinute: z.ZodNullable<z.ZodNumber>;
+        }, z.core.$strip>;
+        settingsOverride: z.ZodObject<{
+            bodyStorage: z.ZodOptional<z.ZodEnum<{
+                none: "none";
+                cache: "cache";
+                full: "full";
+            }>>;
+            syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
+            calendarEnabled: z.ZodOptional<z.ZodBoolean>;
+            contactsEnabled: z.ZodOptional<z.ZodBoolean>;
+            undoSendSeconds: z.ZodOptional<z.ZodNumber>;
+            trackOpens: z.ZodOptional<z.ZodBoolean>;
+            trackClicks: z.ZodOptional<z.ZodBoolean>;
+            trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        }, z.core.$strip>;
+        runtime: z.ZodNullable<z.ZodObject<{
+            state: z.ZodEnum<{
+                error: "error";
+                pending: "pending";
+                connecting: "connecting";
+                connected: "connected";
+                stopped: "stopped";
+            }>;
+            detail: z.ZodNullable<z.ZodString>;
+            ownerInstanceId: z.ZodNullable<z.ZodUUID>;
+            updatedAt: z.ZodPreprocess<z.ZodDate, Date>;
+        }, z.core.$strip>>;
+        imap: z.ZodNullable<z.ZodObject<{
+            imap: z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodNumber;
+                security: z.ZodEnum<{
+                    none: "none";
+                    tls: "tls";
+                    starttls: "starttls";
+                }>;
+                user: z.ZodString;
+            }, z.core.$strip>;
+            smtp: z.ZodNullable<z.ZodObject<{
+                host: z.ZodString;
+                port: z.ZodNumber;
+                security: z.ZodEnum<{
+                    none: "none";
+                    tls: "tls";
+                    starttls: "starttls";
+                }>;
+                user: z.ZodString;
+            }, z.core.$strip>>;
+            auth: z.ZodEnum<{
+                google: "google";
+                microsoft: "microsoft";
+                password: "password";
+            }>;
+            appendSent: z.ZodBoolean;
+            dav: z.ZodNullable<z.ZodObject<{
+                calendarUrl: z.ZodNullable<z.ZodString>;
+                contactsUrl: z.ZodNullable<z.ZodString>;
+                user: z.ZodString;
+                auth: z.ZodEnum<{
+                    imap_password: "imap_password";
+                    dav_password: "dav_password";
+                }>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        auth: z.ZodObject<{
+            method: z.ZodEnum<{
+                password: "password";
+                oauth: "oauth";
+                google_delegation: "google_delegation";
+                microsoft_app: "microsoft_app";
+                shared_mailbox: "shared_mailbox";
+                google_group: "google_group";
+            }>;
+            orgConnectionId: z.ZodNullable<z.ZodUUID>;
+            delegateAccountId: z.ZodNullable<z.ZodUUID>;
+            relayEmail: z.ZodNullable<z.ZodEmail>;
+        }, z.core.$strip>;
+        initializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
+        calendarInitializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
+        contactsInitializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
+        createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+        updatedAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
+        readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
+        readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
+        readonly missing_scope: "The API key lacks the scope the operation needs.";
+        readonly role_forbidden: "The member's role does not allow the operation.";
+        readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
+        readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
+        readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
+        readonly overloaded: "The API is shedding load; retry after Retry-After.";
+        readonly payload_too_large: "The request body is larger than the API accepts.";
+        readonly internal_error: "An unexpected failure on our side.";
+        readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
+        readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
+        readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, {
+        account_exists: {
+            status: 409;
+            message: string;
+        };
+        scope_missing: {
+            status: 400;
+            message: string;
+        };
+        group_unsupported: {
+            status: 400;
+            message: string;
+        };
+        group_relay_inaccessible: {
+            status: 422;
+            message: string;
+        };
+        group_alias_unverified: {
+            status: 409;
+            message: string;
+        };
+        provider_unavailable: {
+            status: 502;
+            message: string;
+        };
+        provider_throttled: {
+            status: 429;
+            message: string;
+        };
+        billing_past_due: {
+            status: 402;
+            message: string;
+        };
+        plan_limit_accounts: import("../errors.js").DeclaredError<"plan_limit_accounts">;
+        plan_required: import("../errors.js").DeclaredError<"plan_required">;
+        spend_cap_reached: import("../errors.js").DeclaredError<"spend_cap_reached">;
+        plan_limit_storage: import("../errors.js").DeclaredError<"plan_limit_storage">;
+        storage_unavailable: {
+            status: 400;
+            message: string;
+        };
+        plan_module_unavailable: {
+            status: 403;
+            message: string;
+        };
+        org_connection_not_found: {
+            status: 404;
+            message: string;
+        };
+    }>, Record<never, never>>;
 };
 export declare const sharedMailboxes: {
     create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
@@ -622,12 +881,18 @@ export declare const sharedMailboxes: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         id: z.ZodUUID;
@@ -660,12 +925,18 @@ export declare const sharedMailboxes: {
                 full: "full";
             }>;
             syncWindowDays: z.ZodNullable<z.ZodNumber>;
+            mailEnabled: z.ZodBoolean;
             calendarEnabled: z.ZodBoolean;
             contactsEnabled: z.ZodBoolean;
             undoSendSeconds: z.ZodNumber;
             trackOpens: z.ZodBoolean;
             trackClicks: z.ZodBoolean;
             trackingHoneypot: z.ZodBoolean;
+            suppressionCheck: z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>;
+            sendsPerMinute: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strip>;
         settingsOverride: z.ZodObject<{
             bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -674,12 +945,18 @@ export declare const sharedMailboxes: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>;
         runtime: z.ZodNullable<z.ZodObject<{
             state: z.ZodEnum<{
@@ -737,9 +1014,11 @@ export declare const sharedMailboxes: {
                 google_delegation: "google_delegation";
                 microsoft_app: "microsoft_app";
                 shared_mailbox: "shared_mailbox";
+                google_group: "google_group";
             }>;
             orgConnectionId: z.ZodNullable<z.ZodUUID>;
             delegateAccountId: z.ZodNullable<z.ZodUUID>;
+            relayEmail: z.ZodNullable<z.ZodEmail>;
         }, z.core.$strip>;
         initializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
         calendarInitializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
@@ -753,6 +1032,8 @@ export declare const sharedMailboxes: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -810,14 +1091,10 @@ export declare const sharedMailboxes: {
             status: 402;
             message: string;
         };
-        plan_limit_accounts: {
-            status: 403;
-            message: string;
-        };
-        plan_limit_storage: {
-            status: 403;
-            message: string;
-        };
+        plan_limit_accounts: import("../errors.js").DeclaredError<"plan_limit_accounts">;
+        plan_required: import("../errors.js").DeclaredError<"plan_required">;
+        spend_cap_reached: import("../errors.js").DeclaredError<"spend_cap_reached">;
+        plan_limit_storage: import("../errors.js").DeclaredError<"plan_limit_storage">;
         storage_unavailable: {
             status: 400;
             message: string;

package/contract/plans/credit-packs.d.ts

@@ -0,0 +1,30 @@
+import * as z from "zod";
+export interface PackTerms {
+    credits: number;
+    amount: number;
+}
+export declare const PlanCreditPack: z.ZodObject<{
+    credits: z.ZodNumber;
+    amount: z.ZodNumber;
+}, z.core.$strip>;
+export type PlanCreditPack = z.infer<typeof PlanCreditPack>;
+export declare const PlanCreditPacks: z.ZodArray<z.ZodObject<{
+    credits: z.ZodNumber;
+    amount: z.ZodNumber;
+}, z.core.$strip>>;
+export interface CreditPackProblem {
+    index: number;
+    field: "credits" | "amount";
+    message: string;
+}
+export declare function creditPackProblems(packs: readonly PackTerms[]): CreditPackProblem[];
+export interface PackLine<P extends PackTerms> {
+    pack: P;
+    count: number;
+}
+export interface PackPurchase<P extends PackTerms> {
+    lines: PackLine<P>[];
+    credits: number;
+    amount: number;
+}
+export declare function cheapestPurchase<P extends PackTerms>(ladder: readonly P[], credits: number): PackPurchase<P> | null;