@workwae/sdk 0.1.0-alpha.1 → 0.1.0-alpha.3

package/contract/oauth-apps/models.d.ts

@@ -1,11 +1,5 @@
 import * as z from "zod";
-/** A Pub/Sub topic id as users.watch takes it: projects/<project id>/topics/<topic>. */
 export declare const PUBSUB_TOPIC_PATTERN: RegExp;
-/**
- * Gmail push for the accounts of a tenant Google app: users.watch publishes to `topic`, which
- * must be in the Cloud project of the app's OAuth client, and the tenant's push subscription
- * delivers to the app's gmailPushEndpoint with OIDC tokens issued for `serviceAccount`.
- */
 export declare const GmailPushSettings: z.ZodObject<{
     topic: z.ZodString;
     serviceAccount: z.ZodEmail;
@@ -26,6 +20,8 @@ export declare const OAuthApp: z.ZodObject<{
         china: "china";
     }>>;
     authority: z.ZodNullable<z.ZodString>;
+    useConnectDomain: z.ZodBoolean;
+    redirectUri: z.ZodURL;
     gmailPush: z.ZodNullable<z.ZodObject<{
         topic: z.ZodString;
         serviceAccount: z.ZodEmail;
@@ -50,6 +46,8 @@ export declare const OAuthAppList: z.ZodObject<{
             china: "china";
         }>>;
         authority: z.ZodNullable<z.ZodString>;
+        useConnectDomain: z.ZodBoolean;
+        redirectUri: z.ZodURL;
         gmailPush: z.ZodNullable<z.ZodObject<{
             topic: z.ZodString;
             serviceAccount: z.ZodEmail;
@@ -74,6 +72,7 @@ export declare const CreateOAuthApp: z.ZodObject<{
     clientId: z.ZodString;
     clientSecret: z.ZodString;
     authority: z.ZodOptional<z.ZodString>;
+    useConnectDomain: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type CreateOAuthApp = z.infer<typeof CreateOAuthApp>;
 export declare const UpdateOAuthApp: z.ZodObject<{
@@ -84,6 +83,7 @@ export declare const UpdateOAuthApp: z.ZodObject<{
         topic: z.ZodString;
         serviceAccount: z.ZodEmail;
     }, z.core.$strip>>>;
+    useConnectDomain: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type UpdateOAuthApp = z.infer<typeof UpdateOAuthApp>;
 export declare const OAuthAppIdInput: z.ZodObject<{

package/contract/oauth-apps/routes.d.ts

@@ -16,6 +16,8 @@ export declare const oauthApps: {
                 china: "china";
             }>>;
             authority: z.ZodNullable<z.ZodString>;
+            useConnectDomain: z.ZodBoolean;
+            redirectUri: z.ZodURL;
             gmailPush: z.ZodNullable<z.ZodObject<{
                 topic: z.ZodString;
                 serviceAccount: z.ZodEmail;
@@ -30,6 +32,8 @@ export declare const oauthApps: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -54,6 +58,7 @@ export declare const oauthApps: {
         clientId: z.ZodString;
         clientSecret: z.ZodString;
         authority: z.ZodOptional<z.ZodString>;
+        useConnectDomain: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>, z.ZodObject<{
         id: z.ZodUUID;
         provider: z.ZodEnum<{
@@ -69,6 +74,8 @@ export declare const oauthApps: {
             china: "china";
         }>>;
         authority: z.ZodNullable<z.ZodString>;
+        useConnectDomain: z.ZodBoolean;
+        redirectUri: z.ZodURL;
         gmailPush: z.ZodNullable<z.ZodObject<{
             topic: z.ZodString;
             serviceAccount: z.ZodEmail;
@@ -82,6 +89,8 @@ export declare const oauthApps: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -90,10 +99,20 @@ export declare const oauthApps: {
         readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
-    }>>, import("../errors.js").DeclaredErrors<{
-        readonly cloud_required: "provider is microsoft and no cloud is given.";
-        readonly not_microsoft: "cloud or authority is given for a Google app.";
-    }>>, Record<never, never>>;
+    }>>, {
+        cloud_required: {
+            status: 400;
+            message: string;
+        };
+        not_microsoft: {
+            status: 400;
+            message: string;
+        };
+        connect_domain_inactive: {
+            status: 409;
+            message: string;
+        };
+    }>, Record<never, never>>;
     update: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         appId: z.ZodUUID;
         name: z.ZodOptional<z.ZodString>;
@@ -103,6 +122,7 @@ export declare const oauthApps: {
             topic: z.ZodString;
             serviceAccount: z.ZodEmail;
         }, z.core.$strip>>>;
+        useConnectDomain: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>, z.ZodObject<{
         id: z.ZodUUID;
         provider: z.ZodEnum<{
@@ -118,6 +138,8 @@ export declare const oauthApps: {
             china: "china";
         }>>;
         authority: z.ZodNullable<z.ZodString>;
+        useConnectDomain: z.ZodBoolean;
+        redirectUri: z.ZodURL;
         gmailPush: z.ZodNullable<z.ZodObject<{
             topic: z.ZodString;
             serviceAccount: z.ZodEmail;
@@ -131,6 +153,8 @@ export declare const oauthApps: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -152,6 +176,10 @@ export declare const oauthApps: {
             status: 400;
             message: string;
         };
+        connect_domain_inactive: {
+            status: 409;
+            message: string;
+        };
         oauth_app_not_found: {
             status: 404;
             message: string;
@@ -166,6 +194,8 @@ export declare const oauthApps: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";

package/contract/org-connections/models.d.ts

@@ -4,8 +4,6 @@ export declare const OrgConnectionKind: z.ZodEnum<{
     microsoft_app: "microsoft_app";
 }>;
 export type OrgConnectionKind = z.infer<typeof OrgConnectionKind>;
-/** pending_consent: no Microsoft directory has consented yet. unverified: registered or changed
- * and not tested since. active / failing: the outcome of the last test or consent. */
 export declare const OrgConnectionStatus: z.ZodEnum<{
     active: "active";
     unverified: "unverified";
@@ -13,8 +11,6 @@ export declare const OrgConnectionStatus: z.ZodEnum<{
     pending_consent: "pending_consent";
 }>;
 export type OrgConnectionStatus = z.infer<typeof OrgConnectionStatus>;
-/** platform: the platform's Entra app for the cloud, authorized through admin consent.
- * client_secret / certificate: the tenant's own app registration. */
 export declare const MicrosoftAppCredential: z.ZodEnum<{
     platform: "platform";
     client_secret: "client_secret";
@@ -26,6 +22,7 @@ export declare const GoogleDelegation: z.ZodObject<{
     serviceAccountEmail: z.ZodString;
     directoryAdmin: z.ZodNullable<z.ZodString>;
     scopes: z.ZodArray<z.ZodString>;
+    groupsEnabled: z.ZodBoolean;
 }, z.core.$strip>;
 export type GoogleDelegation = z.infer<typeof GoogleDelegation>;
 export declare const GraphPermission: z.ZodObject<{
@@ -46,6 +43,8 @@ export declare const MicrosoftAppAccess: z.ZodObject<{
         certificate: "certificate";
     }>;
     directoryId: z.ZodNullable<z.ZodString>;
+    useConnectDomain: z.ZodBoolean;
+    redirectUri: z.ZodNullable<z.ZodString>;
     permissions: z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         isRequired: z.ZodBoolean;
@@ -73,6 +72,7 @@ export declare const OrgConnection: z.ZodObject<{
         serviceAccountEmail: z.ZodString;
         directoryAdmin: z.ZodNullable<z.ZodString>;
         scopes: z.ZodArray<z.ZodString>;
+        groupsEnabled: z.ZodBoolean;
     }, z.core.$strip>>;
     microsoft: z.ZodNullable<z.ZodObject<{
         cloud: z.ZodEnum<{
@@ -87,6 +87,8 @@ export declare const OrgConnection: z.ZodObject<{
             certificate: "certificate";
         }>;
         directoryId: z.ZodNullable<z.ZodString>;
+        useConnectDomain: z.ZodBoolean;
+        redirectUri: z.ZodNullable<z.ZodString>;
         permissions: z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             isRequired: z.ZodBoolean;
@@ -119,6 +121,7 @@ export declare const OrgConnectionList: z.ZodObject<{
             serviceAccountEmail: z.ZodString;
             directoryAdmin: z.ZodNullable<z.ZodString>;
             scopes: z.ZodArray<z.ZodString>;
+            groupsEnabled: z.ZodBoolean;
         }, z.core.$strip>>;
         microsoft: z.ZodNullable<z.ZodObject<{
             cloud: z.ZodEnum<{
@@ -133,6 +136,8 @@ export declare const OrgConnectionList: z.ZodObject<{
                 certificate: "certificate";
             }>;
             directoryId: z.ZodNullable<z.ZodString>;
+            useConnectDomain: z.ZodBoolean;
+            redirectUri: z.ZodNullable<z.ZodString>;
             permissions: z.ZodArray<z.ZodObject<{
                 name: z.ZodString;
                 isRequired: z.ZodBoolean;
@@ -144,48 +149,59 @@ export declare const OrgConnectionList: z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type OrgConnectionList = z.infer<typeof OrgConnectionList>;
-export declare const CreateOrgConnection: z.ZodDiscriminatedUnion<[z.ZodObject<{
-    kind: z.ZodLiteral<"google_delegation">;
-    name: z.ZodString;
-    serviceAccountKey: z.ZodString;
-    domain: z.ZodString;
-    calendarEnabled: z.ZodDefault<z.ZodBoolean>;
-    contactsEnabled: z.ZodDefault<z.ZodBoolean>;
-    directoryAdmin: z.ZodOptional<z.ZodEmail>;
-}, z.core.$strip>, z.ZodObject<{
-    kind: z.ZodLiteral<"microsoft_app">;
-    name: z.ZodString;
-    cloud: z.ZodDefault<z.ZodEnum<{
-        global: "global";
-        "gcc-high": "gcc-high";
-        dod: "dod";
-        china: "china";
-    }>>;
-    credential: z.ZodDiscriminatedUnion<[z.ZodObject<{
-        type: z.ZodLiteral<"platform">;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"client_secret">;
-        clientId: z.ZodString;
-        clientSecret: z.ZodString;
-    }, z.core.$strip>, z.ZodObject<{
-        type: z.ZodLiteral<"certificate">;
-        clientId: z.ZodString;
-        certificate: z.ZodString;
-        privateKey: z.ZodString;
-    }, z.core.$strip>], "type">;
-    directoryId: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>], "kind">;
+export declare const CreateOrgConnection: z.ZodDiscriminatedUnion<[
+    z.ZodObject<{
+        kind: z.ZodLiteral<"google_delegation">;
+        name: z.ZodString;
+        serviceAccountKey: z.ZodString;
+        domain: z.ZodString;
+        calendarEnabled: z.ZodDefault<z.ZodBoolean>;
+        contactsEnabled: z.ZodDefault<z.ZodBoolean>;
+        directoryAdmin: z.ZodOptional<z.ZodEmail>;
+        groupsEnabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>,
+    z.ZodObject<{
+        kind: z.ZodLiteral<"microsoft_app">;
+        name: z.ZodString;
+        cloud: z.ZodDefault<z.ZodEnum<{
+            global: "global";
+            "gcc-high": "gcc-high";
+            dod: "dod";
+            china: "china";
+        }>>;
+        credential: z.ZodDiscriminatedUnion<[
+            z.ZodObject<{
+                type: z.ZodLiteral<"platform">;
+            }, z.core.$strip>,
+            z.ZodObject<{
+                type: z.ZodLiteral<"client_secret">;
+                clientId: z.ZodString;
+                clientSecret: z.ZodString;
+            }, z.core.$strip>,
+            z.ZodObject<{
+                type: z.ZodLiteral<"certificate">;
+                clientId: z.ZodString;
+                certificate: z.ZodString;
+                privateKey: z.ZodString;
+            }, z.core.$strip>
+        ], "type">;
+        directoryId: z.ZodOptional<z.ZodString>;
+        useConnectDomain: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>
+], "kind">;
 export type CreateOrgConnection = z.infer<typeof CreateOrgConnection>;
 export declare const UpdateOrgConnection: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     serviceAccountKey: z.ZodOptional<z.ZodString>;
     calendarEnabled: z.ZodOptional<z.ZodBoolean>;
     contactsEnabled: z.ZodOptional<z.ZodBoolean>;
+    groupsEnabled: z.ZodOptional<z.ZodBoolean>;
     directoryAdmin: z.ZodOptional<z.ZodNullable<z.ZodEmail>>;
     clientSecret: z.ZodOptional<z.ZodString>;
     certificate: z.ZodOptional<z.ZodString>;
     privateKey: z.ZodOptional<z.ZodString>;
     directoryId: z.ZodOptional<z.ZodString>;
+    useConnectDomain: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type UpdateOrgConnection = z.infer<typeof UpdateOrgConnection>;
 export declare const OrgConnectionCheck: z.ZodObject<{
@@ -217,6 +233,7 @@ export declare const OrgConnectionTestResult: z.ZodObject<{
             serviceAccountEmail: z.ZodString;
             directoryAdmin: z.ZodNullable<z.ZodString>;
             scopes: z.ZodArray<z.ZodString>;
+            groupsEnabled: z.ZodBoolean;
         }, z.core.$strip>>;
         microsoft: z.ZodNullable<z.ZodObject<{
             cloud: z.ZodEnum<{
@@ -231,6 +248,8 @@ export declare const OrgConnectionTestResult: z.ZodObject<{
                 certificate: "certificate";
             }>;
             directoryId: z.ZodNullable<z.ZodString>;
+            useConnectDomain: z.ZodBoolean;
+            redirectUri: z.ZodNullable<z.ZodString>;
             permissions: z.ZodArray<z.ZodObject<{
                 name: z.ZodString;
                 isRequired: z.ZodBoolean;
@@ -284,24 +303,27 @@ export declare const AddMailboxesRequest: z.ZodObject<{
             full: "full";
         }>>;
         syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        mailEnabled: z.ZodOptional<z.ZodBoolean>;
         calendarEnabled: z.ZodOptional<z.ZodBoolean>;
         contactsEnabled: z.ZodOptional<z.ZodBoolean>;
         undoSendSeconds: z.ZodOptional<z.ZodNumber>;
         trackOpens: z.ZodOptional<z.ZodBoolean>;
         trackClicks: z.ZodOptional<z.ZodBoolean>;
         trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+        suppressionCheck: z.ZodOptional<z.ZodEnum<{
+            lists: "lists";
+            always: "always";
+        }>>;
+        sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type AddMailboxesRequest = z.infer<typeof AddMailboxesRequest>;
-/** created: a new account. exists: a live account for the mailbox was already there.
- * failed: see error. */
 export declare const AddedMailboxStatus: z.ZodEnum<{
     failed: "failed";
     created: "created";
     exists: "exists";
 }>;
 export type AddedMailboxStatus = z.infer<typeof AddedMailboxStatus>;
-/** Why one mailbox was not added: `reason` is the reason the API would refuse it with (REASONS). */
 export declare const AddedMailboxError: z.ZodObject<{
     reason: z.ZodString;
     message: z.ZodString;
@@ -321,7 +343,6 @@ export declare const AddedMailbox: z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type AddedMailbox = z.infer<typeof AddedMailbox>;
-/** One result per requested mailbox, in request order. */
 export declare const AddedMailboxList: z.ZodObject<{
     items: z.ZodArray<z.ZodObject<{
         email: z.ZodString;
@@ -372,12 +393,45 @@ export declare const OpenSharedMailboxRequest: z.ZodObject<{
             full: "full";
         }>>;
         syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        mailEnabled: z.ZodOptional<z.ZodBoolean>;
         calendarEnabled: z.ZodOptional<z.ZodBoolean>;
         contactsEnabled: z.ZodOptional<z.ZodBoolean>;
         undoSendSeconds: z.ZodOptional<z.ZodNumber>;
         trackOpens: z.ZodOptional<z.ZodBoolean>;
         trackClicks: z.ZodOptional<z.ZodBoolean>;
         trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+        suppressionCheck: z.ZodOptional<z.ZodEnum<{
+            lists: "lists";
+            always: "always";
+        }>>;
+        sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type OpenSharedMailboxRequest = z.infer<typeof OpenSharedMailboxRequest>;
+export declare const AddGroupRequest: z.ZodObject<{
+    email: z.ZodEmail;
+    relayEmail: z.ZodEmail;
+    displayName: z.ZodOptional<z.ZodString>;
+    externalRef: z.ZodOptional<z.ZodString>;
+    settings: z.ZodOptional<z.ZodObject<{
+        bodyStorage: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            cache: "cache";
+            full: "full";
+        }>>;
+        syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        mailEnabled: z.ZodOptional<z.ZodBoolean>;
+        calendarEnabled: z.ZodOptional<z.ZodBoolean>;
+        contactsEnabled: z.ZodOptional<z.ZodBoolean>;
+        undoSendSeconds: z.ZodOptional<z.ZodNumber>;
+        trackOpens: z.ZodOptional<z.ZodBoolean>;
+        trackClicks: z.ZodOptional<z.ZodBoolean>;
+        trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+        suppressionCheck: z.ZodOptional<z.ZodEnum<{
+            lists: "lists";
+            always: "always";
+        }>>;
+        sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AddGroupRequest = z.infer<typeof AddGroupRequest>;