@workwae/sdk 0.1.0-alpha.1 → 0.1.0-alpha.3

package/contract/accounts/routes.d.ts

@@ -1,20 +1,16 @@
 import * as z from "zod";
-/** What checking a password account's mail servers refuses (IMAP and SMTP, before storing). */
 export declare const MAIL_SETTINGS_CHECK: import("../errors.js").DeclaredErrors<{
     readonly login_failed: "A server (IMAP, SMTP, CalDAV or CardDAV) refuses the login.";
     readonly server_not_allowed: "A server resolves to a private or loopback address.";
     readonly plaintext_not_allowed: "A server is named with security none (a plaintext login).";
 }>;
-/** A new password account whose servers were left out. */
 export declare const AUTODISCOVERY_FAILED: import("../errors.js").DeclaredErrors<{
     readonly autodiscovery_failed: "imap was left out and autodiscovery found no IMAP server for the address.";
 }>;
-/** What resolving and checking DAV settings refuses. */
 export declare const DAV_SETTINGS_CHECK: import("../errors.js").DeclaredErrors<{
     readonly dav_discovery_failed: "Neither a CalDAV nor a CardDAV server was found or answered.";
     readonly not_dav_server: "A named CalDAV or CardDAV URL is no DAV server (it answers 404, 403, or not as one).";
 }>;
-/** What resolving the OAuth client of a sign-in or refresh refuses. */
 export declare const OAUTH_CLIENT: import("../errors.js").DeclaredErrors<{
     readonly unknown_oauth_app: "oauthAppId names no OAuth app of the tenant.";
     readonly oauth_app_mismatch: "The OAuth app is for the other provider.";
@@ -67,12 +63,18 @@ export declare const accounts: {
                     full: "full";
                 }>;
                 syncWindowDays: z.ZodNullable<z.ZodNumber>;
+                mailEnabled: z.ZodBoolean;
                 calendarEnabled: z.ZodBoolean;
                 contactsEnabled: z.ZodBoolean;
                 undoSendSeconds: z.ZodNumber;
                 trackOpens: z.ZodBoolean;
                 trackClicks: z.ZodBoolean;
                 trackingHoneypot: z.ZodBoolean;
+                suppressionCheck: z.ZodEnum<{
+                    lists: "lists";
+                    always: "always";
+                }>;
+                sendsPerMinute: z.ZodNullable<z.ZodNumber>;
             }, z.core.$strip>;
             settingsOverride: z.ZodObject<{
                 bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -81,12 +83,18 @@ export declare const accounts: {
                     full: "full";
                 }>>;
                 syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+                mailEnabled: z.ZodOptional<z.ZodBoolean>;
                 calendarEnabled: z.ZodOptional<z.ZodBoolean>;
                 contactsEnabled: z.ZodOptional<z.ZodBoolean>;
                 undoSendSeconds: z.ZodOptional<z.ZodNumber>;
                 trackOpens: z.ZodOptional<z.ZodBoolean>;
                 trackClicks: z.ZodOptional<z.ZodBoolean>;
                 trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+                suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                    lists: "lists";
+                    always: "always";
+                }>>;
+                sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
             }, z.core.$strip>;
             runtime: z.ZodNullable<z.ZodObject<{
                 state: z.ZodEnum<{
@@ -144,9 +152,11 @@ export declare const accounts: {
                     google_delegation: "google_delegation";
                     microsoft_app: "microsoft_app";
                     shared_mailbox: "shared_mailbox";
+                    google_group: "google_group";
                 }>;
                 orgConnectionId: z.ZodNullable<z.ZodUUID>;
                 delegateAccountId: z.ZodNullable<z.ZodUUID>;
+                relayEmail: z.ZodNullable<z.ZodEmail>;
             }, z.core.$strip>;
             initializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
             calendarInitializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
@@ -162,6 +172,8 @@ export declare const accounts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -206,12 +218,18 @@ export declare const accounts: {
                 full: "full";
             }>;
             syncWindowDays: z.ZodNullable<z.ZodNumber>;
+            mailEnabled: z.ZodBoolean;
             calendarEnabled: z.ZodBoolean;
             contactsEnabled: z.ZodBoolean;
             undoSendSeconds: z.ZodNumber;
             trackOpens: z.ZodBoolean;
             trackClicks: z.ZodBoolean;
             trackingHoneypot: z.ZodBoolean;
+            suppressionCheck: z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>;
+            sendsPerMinute: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strip>;
         settingsOverride: z.ZodObject<{
             bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -220,12 +238,18 @@ export declare const accounts: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>;
         runtime: z.ZodNullable<z.ZodObject<{
             state: z.ZodEnum<{
@@ -283,9 +307,11 @@ export declare const accounts: {
                 google_delegation: "google_delegation";
                 microsoft_app: "microsoft_app";
                 shared_mailbox: "shared_mailbox";
+                google_group: "google_group";
             }>;
             orgConnectionId: z.ZodNullable<z.ZodUUID>;
             delegateAccountId: z.ZodNullable<z.ZodUUID>;
+            relayEmail: z.ZodNullable<z.ZodEmail>;
         }, z.core.$strip>;
         initializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
         calendarInitializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
@@ -299,6 +325,8 @@ export declare const accounts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -310,7 +338,6 @@ export declare const accounts: {
     }>>, import("../errors.js").DeclaredErrors<{
         readonly account_not_found: "The account does not exist, or the caller is an account token for another account.";
     }>>, Record<never, never>>;
-    /** Headless connect with tokens the tenant already holds (typically from its own OAuth app). */
     create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         provider: z.ZodEnum<{
             google: "google";
@@ -332,12 +359,18 @@ export declare const accounts: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>>;
         sharedMailboxesEnabled: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>, z.ZodObject<{
@@ -371,12 +404,18 @@ export declare const accounts: {
                 full: "full";
             }>;
             syncWindowDays: z.ZodNullable<z.ZodNumber>;
+            mailEnabled: z.ZodBoolean;
             calendarEnabled: z.ZodBoolean;
             contactsEnabled: z.ZodBoolean;
             undoSendSeconds: z.ZodNumber;
             trackOpens: z.ZodBoolean;
             trackClicks: z.ZodBoolean;
             trackingHoneypot: z.ZodBoolean;
+            suppressionCheck: z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>;
+            sendsPerMinute: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strip>;
         settingsOverride: z.ZodObject<{
             bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -385,12 +424,18 @@ export declare const accounts: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>;
         runtime: z.ZodNullable<z.ZodObject<{
             state: z.ZodEnum<{
@@ -448,9 +493,11 @@ export declare const accounts: {
                 google_delegation: "google_delegation";
                 microsoft_app: "microsoft_app";
                 shared_mailbox: "shared_mailbox";
+                google_group: "google_group";
             }>;
             orgConnectionId: z.ZodNullable<z.ZodUUID>;
             delegateAccountId: z.ZodNullable<z.ZodUUID>;
+            relayEmail: z.ZodNullable<z.ZodEmail>;
         }, z.core.$strip>;
         initializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
         calendarInitializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
@@ -464,6 +511,8 @@ export declare const accounts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -489,6 +538,10 @@ export declare const accounts: {
             status: 400;
             message: string;
         };
+        interaction_required: {
+            status: 400;
+            message: string;
+        };
         invalid_grant: {
             status: 400;
             message: string;
@@ -525,18 +578,14 @@ export declare const accounts: {
             status: 402;
             message: string;
         };
-        plan_limit_accounts: {
-            status: 403;
-            message: string;
-        };
+        plan_limit_accounts: import("../errors.js").DeclaredError<"plan_limit_accounts">;
+        plan_required: import("../errors.js").DeclaredError<"plan_required">;
+        spend_cap_reached: import("../errors.js").DeclaredError<"spend_cap_reached">;
         plan_module_unavailable: {
             status: 403;
             message: string;
         };
-        plan_limit_storage: {
-            status: 403;
-            message: string;
-        };
+        plan_limit_storage: import("../errors.js").DeclaredError<"plan_limit_storage">;
         storage_unavailable: {
             status: 400;
             message: string;
@@ -556,12 +605,18 @@ export declare const accounts: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         id: z.ZodUUID;
@@ -594,12 +649,18 @@ export declare const accounts: {
                 full: "full";
             }>;
             syncWindowDays: z.ZodNullable<z.ZodNumber>;
+            mailEnabled: z.ZodBoolean;
             calendarEnabled: z.ZodBoolean;
             contactsEnabled: z.ZodBoolean;
             undoSendSeconds: z.ZodNumber;
             trackOpens: z.ZodBoolean;
             trackClicks: z.ZodBoolean;
             trackingHoneypot: z.ZodBoolean;
+            suppressionCheck: z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>;
+            sendsPerMinute: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strip>;
         settingsOverride: z.ZodObject<{
             bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -608,12 +669,18 @@ export declare const accounts: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>;
         runtime: z.ZodNullable<z.ZodObject<{
             state: z.ZodEnum<{
@@ -671,9 +738,11 @@ export declare const accounts: {
                 google_delegation: "google_delegation";
                 microsoft_app: "microsoft_app";
                 shared_mailbox: "shared_mailbox";
+                google_group: "google_group";
             }>;
             orgConnectionId: z.ZodNullable<z.ZodUUID>;
             delegateAccountId: z.ZodNullable<z.ZodUUID>;
+            relayEmail: z.ZodNullable<z.ZodEmail>;
         }, z.core.$strip>;
         initializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
         calendarInitializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
@@ -687,6 +756,8 @@ export declare const accounts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -704,14 +775,14 @@ export declare const accounts: {
             status: 409;
             message: string;
         };
-        plan_limit_storage: {
-            status: 403;
-            message: string;
-        };
+        plan_limit_storage: import("../errors.js").DeclaredError<"plan_limit_storage">;
         storage_unavailable: {
             status: 400;
             message: string;
         };
+        plan_limit_accounts: import("../errors.js").DeclaredError<"plan_limit_accounts">;
+        plan_required: import("../errors.js").DeclaredError<"plan_required">;
+        spend_cap_reached: import("../errors.js").DeclaredError<"spend_cap_reached">;
         account_not_found: {
             status: 404;
             message: string;
@@ -722,10 +793,13 @@ export declare const accounts: {
             accountId: z.ZodUUID;
         }, z.core.$strip>;
         query: z.ZodObject<{
-            purge: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodEnum<{
-                true: "true";
-                false: "false";
-            }>]>, z.ZodTransform<boolean, boolean | "true" | "false">>>;
+            purge: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [
+                z.ZodBoolean,
+                z.ZodEnum<{
+                    true: "true";
+                    false: "false";
+                }>
+            ]>, z.ZodTransform<boolean, boolean | "true" | "false">>>;
         }, z.core.$strip>;
     }, z.core.$strip>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
         readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
@@ -734,6 +808,8 @@ export declare const accounts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -745,7 +821,51 @@ export declare const accounts: {
     }>>, import("../errors.js").DeclaredErrors<{
         readonly account_not_found: "The account does not exist, or (without purge) is already deleted.";
     }>>, Record<never, never>>;
-    /** Short-lived token limited to one account, for a tenant's own frontend. */
+    sync: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        accountId: z.ZodUUID;
+        kinds: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            mail: "mail";
+            calendar: "calendar";
+            contacts: "contacts";
+        }>>>;
+    }, z.core.$strip>, z.ZodObject<{
+        kinds: z.ZodArray<z.ZodEnum<{
+            mail: "mail";
+            calendar: "calendar";
+            contacts: "contacts";
+        }>>;
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
+        readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
+        readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
+        readonly missing_scope: "The API key lacks the scope the operation needs.";
+        readonly role_forbidden: "The member's role does not allow the operation.";
+        readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
+        readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
+        readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
+        readonly overloaded: "The API is shedding load; retry after Retry-After.";
+        readonly payload_too_large: "The request body is larger than the API accepts.";
+        readonly internal_error: "An unexpected failure on our side.";
+        readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
+        readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
+        readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, {
+        account_disabled: {
+            status: 409;
+            message: string;
+        };
+        account_reauth_required: {
+            status: 409;
+            message: string;
+        };
+        sync_kinds_disabled: import("../errors.js").DeclaredError<"sync_kinds_disabled">;
+        account_not_found: {
+            status: 404;
+            message: string;
+        };
+    }>, Record<never, never>>;
     mintToken: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         accountId: z.ZodUUID;
         ttlSeconds: z.ZodDefault<z.ZodNumber>;
@@ -759,6 +879,8 @@ export declare const accounts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -812,12 +934,18 @@ export declare const imapAccounts: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         id: z.ZodUUID;
@@ -850,12 +978,18 @@ export declare const imapAccounts: {
                 full: "full";
             }>;
             syncWindowDays: z.ZodNullable<z.ZodNumber>;
+            mailEnabled: z.ZodBoolean;
             calendarEnabled: z.ZodBoolean;
             contactsEnabled: z.ZodBoolean;
             undoSendSeconds: z.ZodNumber;
             trackOpens: z.ZodBoolean;
             trackClicks: z.ZodBoolean;
             trackingHoneypot: z.ZodBoolean;
+            suppressionCheck: z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>;
+            sendsPerMinute: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strip>;
         settingsOverride: z.ZodObject<{
             bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -864,12 +998,18 @@ export declare const imapAccounts: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>;
         runtime: z.ZodNullable<z.ZodObject<{
             state: z.ZodEnum<{
@@ -927,9 +1067,11 @@ export declare const imapAccounts: {
                 google_delegation: "google_delegation";
                 microsoft_app: "microsoft_app";
                 shared_mailbox: "shared_mailbox";
+                google_group: "google_group";
             }>;
             orgConnectionId: z.ZodNullable<z.ZodUUID>;
             delegateAccountId: z.ZodNullable<z.ZodUUID>;
+            relayEmail: z.ZodNullable<z.ZodEmail>;
         }, z.core.$strip>;
         initializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
         calendarInitializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
@@ -943,6 +1085,8 @@ export declare const imapAccounts: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -952,18 +1096,18 @@ export declare const imapAccounts: {
         readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
     }>>, {
-        billing_past_due: {
-            status: 402;
-            message: string;
-        };
-        plan_limit_accounts: {
+        plan_module_unavailable: {
             status: 403;
             message: string;
         };
-        plan_limit_storage: {
-            status: 403;
+        billing_past_due: {
+            status: 402;
             message: string;
         };
+        plan_limit_accounts: import("../errors.js").DeclaredError<"plan_limit_accounts">;
+        plan_required: import("../errors.js").DeclaredError<"plan_required">;
+        spend_cap_reached: import("../errors.js").DeclaredError<"spend_cap_reached">;
+        plan_limit_storage: import("../errors.js").DeclaredError<"plan_limit_storage">;
         storage_unavailable: {
             status: 400;
             message: string;
@@ -1065,12 +1209,18 @@ export declare const imapSettings: {
                 full: "full";
             }>;
             syncWindowDays: z.ZodNullable<z.ZodNumber>;
+            mailEnabled: z.ZodBoolean;
             calendarEnabled: z.ZodBoolean;
             contactsEnabled: z.ZodBoolean;
             undoSendSeconds: z.ZodNumber;
             trackOpens: z.ZodBoolean;
             trackClicks: z.ZodBoolean;
             trackingHoneypot: z.ZodBoolean;
+            suppressionCheck: z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>;
+            sendsPerMinute: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strip>;
         settingsOverride: z.ZodObject<{
             bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -1079,12 +1229,18 @@ export declare const imapSettings: {
                 full: "full";
             }>>;
             syncWindowDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            mailEnabled: z.ZodOptional<z.ZodBoolean>;
             calendarEnabled: z.ZodOptional<z.ZodBoolean>;
             contactsEnabled: z.ZodOptional<z.ZodBoolean>;
             undoSendSeconds: z.ZodOptional<z.ZodNumber>;
             trackOpens: z.ZodOptional<z.ZodBoolean>;
             trackClicks: z.ZodOptional<z.ZodBoolean>;
             trackingHoneypot: z.ZodOptional<z.ZodBoolean>;
+            suppressionCheck: z.ZodOptional<z.ZodEnum<{
+                lists: "lists";
+                always: "always";
+            }>>;
+            sendsPerMinute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>;
         runtime: z.ZodNullable<z.ZodObject<{
             state: z.ZodEnum<{
@@ -1142,9 +1298,11 @@ export declare const imapSettings: {
                 google_delegation: "google_delegation";
                 microsoft_app: "microsoft_app";
                 shared_mailbox: "shared_mailbox";
+                google_group: "google_group";
             }>;
             orgConnectionId: z.ZodNullable<z.ZodUUID>;
             delegateAccountId: z.ZodNullable<z.ZodUUID>;
+            relayEmail: z.ZodNullable<z.ZodEmail>;
         }, z.core.$strip>;
         initializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
         calendarInitializedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
@@ -1158,6 +1316,8 @@ export declare const imapSettings: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -1304,6 +1464,8 @@ export declare const autoconfig: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";

package/contract/ai/models.d.ts

@@ -23,7 +23,6 @@ export declare const CreateAiDraft: z.ZodObject<{
     }>;
 }, z.core.$strip>;
 export type CreateAiDraft = z.infer<typeof CreateAiDraft>;
-/** Email text for a person to edit; nothing is sent or saved. */
 export declare const AiDraft: z.ZodObject<{
     text: z.ZodString;
 }, z.core.$strip>;

package/contract/ai/routes.d.ts

@@ -19,6 +19,8 @@ export declare const ai: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -29,6 +31,10 @@ export declare const ai: {
         readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
     }>>, {
         unknown_account: import("../errors.js").DeclaredError<"unknown_account">;
+        mail_disabled: {
+            status: 409;
+            message: string;
+        };
         provider_not_found: {
             status: 404;
             message: string;
@@ -81,6 +87,9 @@ export declare const ai: {
             status: 409;
             message: string;
         };
+        plan_required: import("../errors.js").DeclaredError<"plan_required">;
+        spend_cap_reached: import("../errors.js").DeclaredError<"spend_cap_reached">;
+        plan_limit_ai: import("../errors.js").DeclaredError<"plan_limit_ai">;
         plan_module_unavailable: {
             status: 403;
             message: string;