@workwae/sdk 0.1.0-alpha.1 → 0.1.0-alpha.2

package/contract/connect/models.d.ts

@@ -1,11 +1,11 @@
 import * as z from "zod";
-/** How an OAuth-connected mailbox is read: the provider's API, or IMAP and SMTP with XOAUTH2. */
 export declare const MailAccess: z.ZodEnum<{
     imap: "imap";
     api: "api";
 }>;
 export type MailAccess = z.infer<typeof MailAccess>;
 export declare const ConnectOptions: z.ZodObject<{
+    mailEnabled: z.ZodOptional<z.ZodBoolean>;
     calendarEnabled: z.ZodOptional<z.ZodBoolean>;
     contactsEnabled: z.ZodOptional<z.ZodBoolean>;
     bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -20,26 +20,18 @@ export declare const ConnectOptions: z.ZodObject<{
     sharedMailboxesEnabled: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ConnectOptions = z.infer<typeof ConnectOptions>;
-/** What a hosted connect page offers: an OAuth sign-in, or the IMAP/SMTP form. */
 export declare const ConnectProvider: z.ZodEnum<{
     google: "google";
     microsoft: "microsoft";
     imap: "imap";
 }>;
 export type ConnectProvider = z.infer<typeof ConnectProvider>;
-/** Where a hosted session (account or meeting connect) stands. */
 export declare const ConnectSessionStatus: z.ZodEnum<{
     pending: "pending";
     completed: "completed";
     failed: "failed";
 }>;
 export type ConnectSessionStatus = z.infer<typeof ConnectSessionStatus>;
-/**
- * Why a connect flow failed: the `error` a connect redirect carries (status=error, OAuth and
- * meeting sign-ins, administrator consent, the hosted IMAP form's plan and billing failures) and
- * a failed session's `error`. Not an API reason: these travel in redirect URLs. Every code an
- * OAuth failure carries is one (the API checks this where they flow into a redirect).
- */
 export declare const ConnectErrorCode: z.ZodEnum<{
     session_used: "session_used";
     session_expired: "session_expired";
@@ -52,6 +44,7 @@ export declare const ConnectErrorCode: z.ZodEnum<{
     unsupported_provider: "unsupported_provider";
     token_exchange_failed: "token_exchange_failed";
     invalid_client: "invalid_client";
+    interaction_required: "interaction_required";
     invalid_grant: "invalid_grant";
     missing_refresh_token: "missing_refresh_token";
     scope_denied: "scope_denied";
@@ -82,7 +75,10 @@ export declare const ConnectErrorCode: z.ZodEnum<{
     org_connection_not_found: "org_connection_not_found";
     org_connection_secret_unreadable: "org_connection_secret_unreadable";
     plan_limit_accounts: "plan_limit_accounts";
+    plan_required: "plan_required";
+    spend_cap_reached: "spend_cap_reached";
     plan_module_unavailable: "plan_module_unavailable";
+    connect_grants_nothing: "connect_grants_nothing";
     billing_past_due: "billing_past_due";
     internal_error: "internal_error";
 }>;
@@ -106,11 +102,15 @@ export declare const ConnectSessionPublic: z.ZodObject<{
         failed: "failed";
     }>;
     reauthEmail: z.ZodNullable<z.ZodString>;
+    modules: z.ZodObject<{
+        mail: z.ZodBoolean;
+        calendar: z.ZodBoolean;
+        contacts: z.ZodBoolean;
+    }, z.core.$strip>;
     loginHint: z.ZodNullable<z.ZodString>;
     expiresAt: z.ZodPreprocess<z.ZodDate, Date>;
 }, z.core.$strip>;
 export type ConnectSessionPublic = z.infer<typeof ConnectSessionPublic>;
-/** A hosted connect session as its creator sees it: where it stands, and what it connected. */
 export declare const ConnectSession: z.ZodObject<{
     id: z.ZodUUID;
     status: z.ZodEnum<{
@@ -130,6 +130,7 @@ export declare const ConnectSession: z.ZodObject<{
         unsupported_provider: "unsupported_provider";
         token_exchange_failed: "token_exchange_failed";
         invalid_client: "invalid_client";
+        interaction_required: "interaction_required";
         invalid_grant: "invalid_grant";
         missing_refresh_token: "missing_refresh_token";
         scope_denied: "scope_denied";
@@ -160,19 +161,24 @@ export declare const ConnectSession: z.ZodObject<{
         org_connection_not_found: "org_connection_not_found";
         org_connection_secret_unreadable: "org_connection_secret_unreadable";
         plan_limit_accounts: "plan_limit_accounts";
+        plan_required: "plan_required";
+        spend_cap_reached: "spend_cap_reached";
         plan_module_unavailable: "plan_module_unavailable";
+        connect_grants_nothing: "connect_grants_nothing";
         billing_past_due: "billing_past_due";
         internal_error: "internal_error";
     }>>;
     accountId: z.ZodNullable<z.ZodUUID>;
     email: z.ZodNullable<z.ZodString>;
+    mcpKeyId: z.ZodNullable<z.ZodUUID>;
+    mcpKeySkipped: z.ZodNullable<z.ZodEnum<{
+        mcp_key_limit: "mcp_key_limit";
+    }>>;
     expiresAt: z.ZodPreprocess<z.ZodDate, Date>;
     createdAt: z.ZodPreprocess<z.ZodDate, Date>;
 }, z.core.$strip>;
 export type ConnectSession = z.infer<typeof ConnectSession>;
-/** The `state` a redirect flow echoes back. */
 export declare const RedirectState: z.ZodString;
-/** How long a hosted session stays usable. */
 export declare const SessionTtlSeconds: z.ZodDefault<z.ZodNumber>;
 export declare const CreateConnectSession: z.ZodObject<{
     redirectUri: z.ZodOptional<z.ZodURL>;
@@ -196,6 +202,7 @@ export declare const CreateConnectSession: z.ZodObject<{
     state: z.ZodOptional<z.ZodString>;
     accountId: z.ZodOptional<z.ZodUUID>;
     options: z.ZodOptional<z.ZodObject<{
+        mailEnabled: z.ZodOptional<z.ZodBoolean>;
         calendarEnabled: z.ZodOptional<z.ZodBoolean>;
         contactsEnabled: z.ZodOptional<z.ZodBoolean>;
         bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -209,10 +216,17 @@ export declare const CreateConnectSession: z.ZodObject<{
         }>>;
         sharedMailboxesEnabled: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
+    mcp: z.ZodOptional<z.ZodObject<{
+        scopes: z.ZodArray<z.ZodEnum<{
+            read: "read";
+            write: "write";
+            send: "send";
+        }>>;
+        name: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>>;
     ttlSeconds: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>;
 export type CreateConnectSession = z.infer<typeof CreateConnectSession>;
-/** A hosted session's page, to send its owner to. */
 export declare const SessionLink: z.ZodObject<{
     id: z.ZodUUID;
     url: z.ZodURL;
@@ -240,6 +254,7 @@ export declare const StartOAuthRequest: z.ZodObject<{
     state: z.ZodOptional<z.ZodString>;
     accountId: z.ZodOptional<z.ZodUUID>;
     options: z.ZodOptional<z.ZodObject<{
+        mailEnabled: z.ZodOptional<z.ZodBoolean>;
         calendarEnabled: z.ZodOptional<z.ZodBoolean>;
         contactsEnabled: z.ZodOptional<z.ZodBoolean>;
         bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -255,17 +270,14 @@ export declare const StartOAuthRequest: z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type StartOAuthRequest = z.infer<typeof StartOAuthRequest>;
-/** Where to send the user to start the headless OAuth flow. */
 export declare const OAuthAuthorization: z.ZodObject<{
     authorizeUrl: z.ZodURL;
 }, z.core.$strip>;
 export type OAuthAuthorization = z.infer<typeof OAuthAuthorization>;
-/** A hosted page's session, by the token in its URL. */
 export declare const SessionTokenInput: z.ZodObject<{
     token: z.ZodString;
 }, z.core.$strip>;
 export type SessionTokenInput = z.infer<typeof SessionTokenInput>;
-/** Where the hosted page sends the browser next (the tenant's redirectUri). */
 export declare const HostedImapResult: z.ZodObject<{
     redirectUrl: z.ZodURL;
 }, z.core.$strip>;

package/contract/connect/routes.d.ts

@@ -1,5 +1,4 @@
 export declare const connectSessions: {
-    /** Hosted flow: returns a link to the hosted connect page. */
     create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         redirectUri: import("zod").ZodOptional<import("zod").ZodURL>;
         providers: import("zod").ZodDefault<import("zod").ZodArray<import("zod").ZodEnum<{
@@ -22,6 +21,7 @@ export declare const connectSessions: {
         state: import("zod").ZodOptional<import("zod").ZodString>;
         accountId: import("zod").ZodOptional<import("zod").ZodUUID>;
         options: import("zod").ZodOptional<import("zod").ZodObject<{
+            mailEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             calendarEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             contactsEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             bodyStorage: import("zod").ZodOptional<import("zod").ZodEnum<{
@@ -35,6 +35,14 @@ export declare const connectSessions: {
             }>>;
             sharedMailboxesEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
         }, import("zod/v4/core").$strip>>;
+        mcp: import("zod").ZodOptional<import("zod").ZodObject<{
+            scopes: import("zod").ZodArray<import("zod").ZodEnum<{
+                read: "read";
+                write: "write";
+                send: "send";
+            }>>;
+            name: import("zod").ZodDefault<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
         ttlSeconds: import("zod").ZodDefault<import("zod").ZodNumber>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         id: import("zod").ZodUUID;
@@ -47,6 +55,8 @@ export declare const connectSessions: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -72,10 +82,15 @@ export declare const connectSessions: {
             status: 400;
             message: string;
         };
-        plan_limit_storage: {
+        mcp_key_limit: {
+            status: 409;
+            message: string;
+        };
+        plan_module_unavailable: {
             status: 403;
             message: string;
         };
+        plan_limit_storage: import("../errors.js").DeclaredError<"plan_limit_storage">;
         storage_unavailable: {
             status: 400;
             message: string;
@@ -119,6 +134,7 @@ export declare const connectSessions: {
             unsupported_provider: "unsupported_provider";
             token_exchange_failed: "token_exchange_failed";
             invalid_client: "invalid_client";
+            interaction_required: "interaction_required";
             invalid_grant: "invalid_grant";
             missing_refresh_token: "missing_refresh_token";
             scope_denied: "scope_denied";
@@ -149,12 +165,19 @@ export declare const connectSessions: {
             org_connection_not_found: "org_connection_not_found";
             org_connection_secret_unreadable: "org_connection_secret_unreadable";
             plan_limit_accounts: "plan_limit_accounts";
+            plan_required: "plan_required";
+            spend_cap_reached: "spend_cap_reached";
             plan_module_unavailable: "plan_module_unavailable";
+            connect_grants_nothing: "connect_grants_nothing";
             billing_past_due: "billing_past_due";
             internal_error: "internal_error";
         }>>;
         accountId: import("zod").ZodNullable<import("zod").ZodUUID>;
         email: import("zod").ZodNullable<import("zod").ZodString>;
+        mcpKeyId: import("zod").ZodNullable<import("zod").ZodUUID>;
+        mcpKeySkipped: import("zod").ZodNullable<import("zod").ZodEnum<{
+            mcp_key_limit: "mcp_key_limit";
+        }>>;
         expiresAt: import("zod").ZodPreprocess<import("zod").ZodDate, Date>;
         createdAt: import("zod").ZodPreprocess<import("zod").ZodDate, Date>;
     }, import("zod/v4/core").$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
@@ -164,6 +187,8 @@ export declare const connectSessions: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -176,7 +201,6 @@ export declare const connectSessions: {
         readonly connect_session_not_found: "No session has this id (or token).";
     }>>, Record<never, never>>;
 };
-/** Headless flow: the URL to send the user to (see the description). */
 export declare const oauthAuthorizations: {
     create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         provider: import("zod").ZodEnum<{
@@ -195,6 +219,7 @@ export declare const oauthAuthorizations: {
         state: import("zod").ZodOptional<import("zod").ZodString>;
         accountId: import("zod").ZodOptional<import("zod").ZodUUID>;
         options: import("zod").ZodOptional<import("zod").ZodObject<{
+            mailEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             calendarEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             contactsEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             bodyStorage: import("zod").ZodOptional<import("zod").ZodEnum<{
@@ -217,6 +242,8 @@ export declare const oauthAuthorizations: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -234,6 +261,10 @@ export declare const oauthAuthorizations: {
             status: 400;
             message: string;
         };
+        connect_grants_nothing: {
+            status: 400;
+            message: string;
+        };
         provider_not_configured: {
             status: 400;
             message: string;
@@ -254,10 +285,7 @@ export declare const oauthAuthorizations: {
             status: 403;
             message: string;
         };
-        plan_limit_storage: {
-            status: 403;
-            message: string;
-        };
+        plan_limit_storage: import("../errors.js").DeclaredError<"plan_limit_storage">;
         storage_unavailable: {
             status: 400;
             message: string;
@@ -303,6 +331,11 @@ export declare const hostedConnectSessions: {
             failed: "failed";
         }>;
         reauthEmail: import("zod").ZodNullable<import("zod").ZodString>;
+        modules: import("zod").ZodObject<{
+            mail: import("zod").ZodBoolean;
+            calendar: import("zod").ZodBoolean;
+            contacts: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>;
         loginHint: import("zod").ZodNullable<import("zod").ZodString>;
         expiresAt: import("zod").ZodPreprocess<import("zod").ZodDate, Date>;
     }, import("zod/v4/core").$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
@@ -312,6 +345,8 @@ export declare const hostedConnectSessions: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -365,6 +400,8 @@ export declare const hostedConnectSessions: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -494,6 +531,8 @@ export declare const hostedConnectSessions: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";

package/contract/contacts/models.d.ts

@@ -5,7 +5,6 @@ export declare const ContactEmailType: z.ZodEnum<{
     other: "other";
 }>;
 export type ContactEmailType = z.infer<typeof ContactEmailType>;
-/** Microsoft 365 contacts have mobile, home and work numbers only. */
 export declare const ContactPhoneType: z.ZodEnum<{
     home: "home";
     work: "work";
@@ -13,7 +12,6 @@ export declare const ContactPhoneType: z.ZodEnum<{
     mobile: "mobile";
 }>;
 export type ContactPhoneType = z.infer<typeof ContactPhoneType>;
-/** type is null where the provider keeps none (Microsoft 365 addresses). */
 export declare const ContactEmail: z.ZodObject<{
     address: z.ZodString;
     type: z.ZodNullable<z.ZodEnum<{
@@ -33,7 +31,6 @@ export declare const ContactPhone: z.ZodObject<{
     }>>;
 }, z.core.$strip>;
 export type ContactPhone = z.infer<typeof ContactPhone>;
-/** A Microsoft 365 contact folder. Google accounts have none (their contacts carry folderId null). */
 export declare const ContactFolder: z.ZodObject<{
     id: z.ZodUUID;
     name: z.ZodString;
@@ -119,8 +116,6 @@ export declare const ContactPage: z.ZodObject<{
     nextCursor: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
 export type ContactPage = z.infer<typeof ContactPage>;
-/** A contact field a contact.updated event names as changed; `photo` is the photo itself (GET
- * .../photo), which can change while hasPhoto stays true. */
 export declare const ContactChangedField: z.ZodEnum<{
     displayName: "displayName";
     folderId: "folderId";
@@ -158,8 +153,6 @@ export declare const ContactPhoneInput: z.ZodObject<{
     }>>;
 }, z.core.$strip>;
 export type ContactPhoneInput = z.infer<typeof ContactPhoneInput>;
-/** A new contact needs at least a name, an organization, an address or a number, so it can be
- * found again (400 otherwise). */
 export declare const CreateContact: z.ZodObject<{
     folderId: z.ZodOptional<z.ZodUUID>;
     displayName: z.ZodOptional<z.ZodString>;
@@ -191,8 +184,6 @@ export declare const CreateContact: z.ZodObject<{
     notes: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type CreateContact = z.infer<typeof CreateContact>;
-/** create's input: the account, and a contact with a name, an organization, an email address or
- * a phone number (contact_unidentifiable). */
 export declare const CreateContactInput: z.ZodObject<{
     accountId: z.ZodUUID;
     folderId: z.ZodOptional<z.ZodUUID>;
@@ -224,7 +215,6 @@ export declare const CreateContactInput: z.ZodObject<{
     birthday: z.ZodOptional<z.ZodString>;
     notes: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-/** Fields present change (null clears); absent fields stay. emails and phones replace the list. */
 export declare const UpdateContact: z.ZodObject<{
     displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     givenName: z.ZodOptional<z.ZodNullable<z.ZodString>>;

package/contract/contacts/routes.d.ts

@@ -15,6 +15,8 @@ export declare const contactFolders: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -87,6 +89,8 @@ export declare const contacts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -159,6 +163,8 @@ export declare const contacts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -195,6 +201,8 @@ export declare const contacts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -334,6 +342,8 @@ export declare const contacts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -481,6 +491,8 @@ export declare const contacts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -565,6 +577,8 @@ export declare const contacts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";

package/contract/email-validation/models.d.ts

@@ -0,0 +1,119 @@
+import * as z from "zod";
+export declare const Reachability: z.ZodEnum<{
+    unknown: "unknown";
+    safe: "safe";
+    risky: "risky";
+    invalid: "invalid";
+}>;
+export type Reachability = z.infer<typeof Reachability>;
+export declare const CreateEmailValidation: z.ZodObject<{
+    addresses: z.ZodArray<z.ZodEmail>;
+    suppressInvalid: z.ZodDefault<z.ZodBoolean>;
+    refresh: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type CreateEmailValidation = z.infer<typeof CreateEmailValidation>;
+export declare const EmailValidationResult: z.ZodObject<{
+    address: z.ZodString;
+    reachability: z.ZodEnum<{
+        unknown: "unknown";
+        safe: "safe";
+        risky: "risky";
+        invalid: "invalid";
+    }>;
+    validSyntax: z.ZodBoolean;
+    domainAcceptsMail: z.ZodNullable<z.ZodBoolean>;
+    deliverable: z.ZodNullable<z.ZodBoolean>;
+    disabled: z.ZodNullable<z.ZodBoolean>;
+    fullInbox: z.ZodNullable<z.ZodBoolean>;
+    catchAll: z.ZodNullable<z.ZodBoolean>;
+    disposable: z.ZodNullable<z.ZodBoolean>;
+    roleAccount: z.ZodNullable<z.ZodBoolean>;
+    suppressed: z.ZodBoolean;
+    cached: z.ZodBoolean;
+    checkedAt: z.ZodPreprocess<z.ZodDate, Date>;
+}, z.core.$strip>;
+export type EmailValidationResult = z.infer<typeof EmailValidationResult>;
+export declare const EmailValidation: z.ZodObject<{
+    results: z.ZodArray<z.ZodObject<{
+        address: z.ZodString;
+        reachability: z.ZodEnum<{
+            unknown: "unknown";
+            safe: "safe";
+            risky: "risky";
+            invalid: "invalid";
+        }>;
+        validSyntax: z.ZodBoolean;
+        domainAcceptsMail: z.ZodNullable<z.ZodBoolean>;
+        deliverable: z.ZodNullable<z.ZodBoolean>;
+        disabled: z.ZodNullable<z.ZodBoolean>;
+        fullInbox: z.ZodNullable<z.ZodBoolean>;
+        catchAll: z.ZodNullable<z.ZodBoolean>;
+        disposable: z.ZodNullable<z.ZodBoolean>;
+        roleAccount: z.ZodNullable<z.ZodBoolean>;
+        suppressed: z.ZodBoolean;
+        cached: z.ZodBoolean;
+        checkedAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type EmailValidation = z.infer<typeof EmailValidation>;
+export declare const EmailValidationRecord: z.ZodObject<{
+    address: z.ZodString;
+    reachability: z.ZodEnum<{
+        unknown: "unknown";
+        safe: "safe";
+        risky: "risky";
+        invalid: "invalid";
+    }>;
+    validSyntax: z.ZodBoolean;
+    domainAcceptsMail: z.ZodNullable<z.ZodBoolean>;
+    deliverable: z.ZodNullable<z.ZodBoolean>;
+    disabled: z.ZodNullable<z.ZodBoolean>;
+    fullInbox: z.ZodNullable<z.ZodBoolean>;
+    catchAll: z.ZodNullable<z.ZodBoolean>;
+    disposable: z.ZodNullable<z.ZodBoolean>;
+    roleAccount: z.ZodNullable<z.ZodBoolean>;
+    suppressed: z.ZodBoolean;
+    cached: z.ZodBoolean;
+    checkedAt: z.ZodPreprocess<z.ZodDate, Date>;
+    id: z.ZodUUID;
+    createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+}, z.core.$strip>;
+export type EmailValidationRecord = z.infer<typeof EmailValidationRecord>;
+export declare const EmailValidationRecordPage: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        address: z.ZodString;
+        reachability: z.ZodEnum<{
+            unknown: "unknown";
+            safe: "safe";
+            risky: "risky";
+            invalid: "invalid";
+        }>;
+        validSyntax: z.ZodBoolean;
+        domainAcceptsMail: z.ZodNullable<z.ZodBoolean>;
+        deliverable: z.ZodNullable<z.ZodBoolean>;
+        disabled: z.ZodNullable<z.ZodBoolean>;
+        fullInbox: z.ZodNullable<z.ZodBoolean>;
+        catchAll: z.ZodNullable<z.ZodBoolean>;
+        disposable: z.ZodNullable<z.ZodBoolean>;
+        roleAccount: z.ZodNullable<z.ZodBoolean>;
+        suppressed: z.ZodBoolean;
+        cached: z.ZodBoolean;
+        checkedAt: z.ZodPreprocess<z.ZodDate, Date>;
+        id: z.ZodUUID;
+        createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type EmailValidationRecordPage = z.infer<typeof EmailValidationRecordPage>;
+export declare const ListEmailValidationsQuery: z.ZodObject<{
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    cursor: z.ZodOptional<z.ZodString>;
+    address: z.ZodOptional<z.ZodString>;
+    reachability: z.ZodOptional<z.ZodEnum<{
+        unknown: "unknown";
+        safe: "safe";
+        risky: "risky";
+        invalid: "invalid";
+    }>>;
+}, z.core.$strip>;
+export type ListEmailValidationsQuery = z.infer<typeof ListEmailValidationsQuery>;