@workwae/sdk 0.1.0-alpha.1 → 0.1.0-alpha.2

package/contract/suppressions/routes.d.ts

@@ -13,16 +13,19 @@ export declare const suppressions: {
                 reply: z.ZodNumber;
                 complaint: z.ZodNumber;
                 inactive: z.ZodNumber;
+                invalid: z.ZodNumber;
             }, z.core.$strip>;
             createdAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
         }, z.core.$strip>>;
-    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -31,6 +34,8 @@ export declare const suppressions: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, Record<never, never>>;
     create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         id: z.ZodString;
@@ -48,15 +53,18 @@ export declare const suppressions: {
             reply: z.ZodNumber;
             complaint: z.ZodNumber;
             inactive: z.ZodNumber;
+            invalid: z.ZodNumber;
         }, z.core.$strip>;
         createdAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
-    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -65,6 +73,8 @@ export declare const suppressions: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, import("../errors.js").DeclaredErrors<{
         readonly suppression_list_exists: "A list with that id exists.";
     }>>, Record<never, never>>;
@@ -84,15 +94,18 @@ export declare const suppressions: {
             reply: z.ZodNumber;
             complaint: z.ZodNumber;
             inactive: z.ZodNumber;
+            invalid: z.ZodNumber;
         }, z.core.$strip>;
         createdAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
-    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -101,6 +114,8 @@ export declare const suppressions: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, import("../errors.js").DeclaredErrors<{
         readonly suppression_list_not_found: "The list does not exist (the global list has none to change).";
     }>>, Record<never, never>>;
@@ -109,18 +124,23 @@ export declare const suppressions: {
             listId: z.ZodString;
         }, z.core.$strip>;
         query: z.ZodObject<{
-            withEntries: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodEnum<{
-                true: "true";
-                false: "false";
-            }>]>, z.ZodTransform<boolean, boolean | "true" | "false">>>;
+            withEntries: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [
+                z.ZodBoolean,
+                z.ZodEnum<{
+                    true: "true";
+                    false: "false";
+                }>
+            ]>, z.ZodTransform<boolean, boolean | "true" | "false">>>;
         }, z.core.$strip>;
-    }, z.core.$strip>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -129,6 +149,8 @@ export declare const suppressions: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, {
         suppression_list_not_empty: {
             status: 409;
@@ -147,6 +169,7 @@ export declare const suppressions: {
             address: z.ZodOptional<z.ZodString>;
             source: z.ZodOptional<z.ZodEnum<{
                 api: "api";
+                invalid: "invalid";
                 bounce: "bounce";
                 unsubscribe: "unsubscribe";
                 reply: "reply";
@@ -158,6 +181,7 @@ export declare const suppressions: {
                 address: z.ZodString;
                 source: z.ZodEnum<{
                     api: "api";
+                    invalid: "invalid";
                     bounce: "bounce";
                     unsubscribe: "unsubscribe";
                     reply: "reply";
@@ -168,13 +192,15 @@ export declare const suppressions: {
                 createdAt: z.ZodPreprocess<z.ZodDate, Date>;
             }, z.core.$strip>>;
             nextCursor: z.ZodNullable<z.ZodString>;
-        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
             readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
             readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
             readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
             readonly missing_scope: "The API key lacks the scope the operation needs.";
             readonly role_forbidden: "The member's role does not allow the operation.";
             readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+            readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+            readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
             readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
             readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
             readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -183,6 +209,8 @@ export declare const suppressions: {
             readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
             readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
             readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+        }>>, import("../errors.js").DeclaredErrors<{
+            readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
         }>>, import("../errors.js").DeclaredErrors<{
             readonly invalid_cursor: "The cursor is not one this list issued.";
         }>>, Record<never, never>>;
@@ -193,13 +221,15 @@ export declare const suppressions: {
         }, z.core.$strip>, z.ZodObject<{
             added: z.ZodNumber;
             alreadyListed: z.ZodNumber;
-        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
             readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
             readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
             readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
             readonly missing_scope: "The API key lacks the scope the operation needs.";
             readonly role_forbidden: "The member's role does not allow the operation.";
             readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+            readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+            readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
             readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
             readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
             readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -208,17 +238,21 @@ export declare const suppressions: {
             readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
             readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
             readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+        }>>, import("../errors.js").DeclaredErrors<{
+            readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
         }>>, Record<never, never>>;
         remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             listId: z.ZodString;
             address: z.ZodString;
-        }, z.core.$strip>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        }, z.core.$strip>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
             readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
             readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
             readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
             readonly missing_scope: "The API key lacks the scope the operation needs.";
             readonly role_forbidden: "The member's role does not allow the operation.";
             readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+            readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+            readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
             readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
             readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
             readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -227,6 +261,8 @@ export declare const suppressions: {
             readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
             readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
             readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+        }>>, import("../errors.js").DeclaredErrors<{
+            readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
         }>>, import("../errors.js").DeclaredErrors<{
             readonly suppression_entry_not_found: "The address is not on the list.";
         }>>, Record<never, never>>;
@@ -254,13 +290,15 @@ export declare const suppressionReviews: {
             createdAt: z.ZodPreprocess<z.ZodDate, Date>;
         }, z.core.$strip>>;
         nextCursor: z.ZodNullable<z.ZodString>;
-    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -269,6 +307,8 @@ export declare const suppressionReviews: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, import("../errors.js").DeclaredErrors<{
         readonly invalid_cursor: "The cursor is not one this list issued.";
     }>>, Record<never, never>>;
@@ -276,13 +316,15 @@ export declare const suppressionReviews: {
         reviewId: z.ZodUUID;
     }, z.core.$strip>, z.ZodObject<{
         added: z.ZodBoolean;
-    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -291,18 +333,22 @@ export declare const suppressionReviews: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, import("../errors.js").DeclaredErrors<{
         readonly suppression_review_not_found: "The review does not exist.";
     }>>, Record<never, never>>;
     dismiss: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         reviewId: z.ZodUUID;
-    }, z.core.$strip>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -311,6 +357,8 @@ export declare const suppressionReviews: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, import("../errors.js").DeclaredErrors<{
         readonly suppression_review_not_found: "The review does not exist.";
     }>>, Record<never, never>>;

package/contract/templates/models.d.ts

@@ -1,22 +1,14 @@
 import * as z from "zod";
-/** handlebars: written as Handlebars (API, board, EmailEngine import). react-email: compiled from
- * a react-email component and uploaded by `workwae templates push`; the next push overwrites it.
- * Both render the same way. */
 export declare const TemplateSource: z.ZodEnum<{
     handlebars: "handlebars";
     "react-email": "react-email";
 }>;
 export type TemplateSource = z.infer<typeof TemplateSource>;
-/** What the html field holds. markdown: Markdown, converted to HTML after Handlebars renders it;
- * `{{...}}` values are escaped for HTML and Markdown first, so params add text, never markup. Raw
- * HTML the author writes in the Markdown stays, as do `{{{...}}}` values. Without text, the plain
- * text part is the rendered Markdown without the author's tags, its values as given. */
 export declare const TemplateFormat: z.ZodEnum<{
     markdown: "markdown";
     html: "html";
 }>;
 export type TemplateFormat = z.infer<typeof TemplateFormat>;
-/** The content fields Handlebars compiles and renders, which a template error names. */
 export declare const TemplateField: z.ZodEnum<{
     text: "text";
     subject: "subject";
@@ -24,8 +16,6 @@ export declare const TemplateField: z.ZodEnum<{
     previewText: "previewText";
 }>;
 export type TemplateField = z.infer<typeof TemplateField>;
-/** The rendered fields of a template, as Handlebars source. subject and text render without HTML
- * escaping; html and previewText escape `{{...}}` and leave `{{{...}}}` raw. */
 export declare const TemplateFields: z.ZodObject<{
     subject: z.ZodNullable<z.ZodString>;
     html: z.ZodNullable<z.ZodString>;
@@ -90,9 +80,6 @@ export declare const TemplateSummaryPage: z.ZodObject<{
     nextCursor: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
 export type TemplateSummaryPage = z.infer<typeof TemplateSummaryPage>;
-/** Values for `{{params.*}}`; `{{account.email}}` and `{{account.name}}` are the sending account's.
- * A send naming a listId also gets `{{rcpt.unsubscribeUrl}}`, `{{rcpt.address}}` and
- * `{{rcpt.name}}` (empty strings otherwise). At most MAX_RENDER_PARAMS_BYTES as JSON. */
 export declare const RenderParams: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 export type RenderParams = z.infer<typeof RenderParams>;
 export declare const RenderedTemplate: z.ZodObject<{
@@ -152,7 +139,6 @@ export declare const UpdateTemplate: z.ZodObject<{
     externalRef: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.core.$strip>;
 export type UpdateTemplate = z.infer<typeof UpdateTemplate>;
-/** A stored template (templateId) or inline fields, not both: a template replaces them all. */
 export declare const RenderTemplateRequest: z.ZodObject<{
     templateId: z.ZodOptional<z.ZodUUID>;
     accountId: z.ZodOptional<z.ZodUUID>;

package/contract/templates/routes.d.ts

@@ -22,13 +22,15 @@ export declare const templates: {
             updatedAt: z.ZodPreprocess<z.ZodDate, Date>;
         }, z.core.$strip>>;
         nextCursor: z.ZodNullable<z.ZodString>;
-    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -37,6 +39,8 @@ export declare const templates: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, import("../errors.js").DeclaredErrors<{
         readonly invalid_cursor: "The cursor is not one this list issued.";
     }>>, Record<never, never>>;
@@ -62,13 +66,15 @@ export declare const templates: {
             markdown: "markdown";
             html: "html";
         }>;
-    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -77,6 +83,8 @@ export declare const templates: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, import("../errors.js").DeclaredErrors<{
         readonly template_not_found: "The template does not exist.";
     }>>, Record<never, never>>;
@@ -117,13 +125,15 @@ export declare const templates: {
             markdown: "markdown";
             html: "html";
         }>;
-    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -132,6 +142,8 @@ export declare const templates: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, {
         template_name_taken: {
             status: 409;
@@ -177,13 +189,15 @@ export declare const templates: {
             markdown: "markdown";
             html: "html";
         }>;
-    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -192,6 +206,8 @@ export declare const templates: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, {
         template_name_taken: {
             status: 409;
@@ -205,13 +221,15 @@ export declare const templates: {
     }>, Record<never, never>>;
     delete: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         templateId: z.ZodUUID;
-    }, z.core.$strip>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -220,6 +238,8 @@ export declare const templates: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, import("../errors.js").DeclaredErrors<{
         readonly template_not_found: "The template does not exist.";
     }>>, Record<never, never>>;
@@ -242,13 +262,15 @@ export declare const templateRenders: {
         html: z.ZodNullable<z.ZodString>;
         text: z.ZodNullable<z.ZodString>;
         previewText: z.ZodNullable<z.ZodString>;
-    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
         readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
         readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -257,6 +279,8 @@ export declare const templateRenders: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, import("../errors.js").DeclaredErrors<{
+        readonly plan_module_unavailable: `The tenant's plan does not include ${string}.`;
     }>>, {
         template_and_inline_fields: {
             status: 400;

package/contract/threads/models.d.ts

@@ -1,8 +1,4 @@
 import * as z from "zod";
-/**
- * A conversation: the indexed messages sharing a threadId (Gmail thread, Microsoft conversation,
- * IMAP server thread or References root). Messages without a threadId belong to no thread.
- */
 export declare const ThreadSummary: z.ZodObject<{
     id: z.ZodString;
     subject: z.ZodNullable<z.ZodString>;
@@ -98,7 +94,6 @@ export declare const ThreadSummaryPage: z.ZodObject<{
     nextCursor: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
 export type ThreadSummaryPage = z.infer<typeof ThreadSummaryPage>;
-/** A message's threadId, percent-encoded in the path (IMAP thread ids can contain "/"). */
 export declare const ThreadIdInput: z.ZodObject<{
     accountId: z.ZodUUID;
     threadId: z.ZodString;