@workwae/sdk 0.1.0-alpha.1 → 0.1.0-alpha.3

package/contract/connect/models.d.ts

@@ -1,11 +1,11 @@
 import * as z from "zod";
-/** How an OAuth-connected mailbox is read: the provider's API, or IMAP and SMTP with XOAUTH2. */
 export declare const MailAccess: z.ZodEnum<{
     imap: "imap";
     api: "api";
 }>;
 export type MailAccess = z.infer<typeof MailAccess>;
 export declare const ConnectOptions: z.ZodObject<{
+    mailEnabled: z.ZodOptional<z.ZodBoolean>;
     calendarEnabled: z.ZodOptional<z.ZodBoolean>;
     contactsEnabled: z.ZodOptional<z.ZodBoolean>;
     bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -20,26 +20,18 @@ export declare const ConnectOptions: z.ZodObject<{
     sharedMailboxesEnabled: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ConnectOptions = z.infer<typeof ConnectOptions>;
-/** What a hosted connect page offers: an OAuth sign-in, or the IMAP/SMTP form. */
 export declare const ConnectProvider: z.ZodEnum<{
     google: "google";
     microsoft: "microsoft";
     imap: "imap";
 }>;
 export type ConnectProvider = z.infer<typeof ConnectProvider>;
-/** Where a hosted session (account or meeting connect) stands. */
 export declare const ConnectSessionStatus: z.ZodEnum<{
     pending: "pending";
     completed: "completed";
     failed: "failed";
 }>;
 export type ConnectSessionStatus = z.infer<typeof ConnectSessionStatus>;
-/**
- * Why a connect flow failed: the `error` a connect redirect carries (status=error, OAuth and
- * meeting sign-ins, administrator consent, the hosted IMAP form's plan and billing failures) and
- * a failed session's `error`. Not an API reason: these travel in redirect URLs. Every code an
- * OAuth failure carries is one (the API checks this where they flow into a redirect).
- */
 export declare const ConnectErrorCode: z.ZodEnum<{
     session_used: "session_used";
     session_expired: "session_expired";
@@ -52,6 +44,7 @@ export declare const ConnectErrorCode: z.ZodEnum<{
     unsupported_provider: "unsupported_provider";
     token_exchange_failed: "token_exchange_failed";
     invalid_client: "invalid_client";
+    interaction_required: "interaction_required";
     invalid_grant: "invalid_grant";
     missing_refresh_token: "missing_refresh_token";
     scope_denied: "scope_denied";
@@ -70,6 +63,7 @@ export declare const ConnectErrorCode: z.ZodEnum<{
     unknown_meeting_app: "unknown_meeting_app";
     meeting_app_mismatch: "meeting_app_mismatch";
     meeting_app_secret_unreadable: "meeting_app_secret_unreadable";
+    connect_domain_inactive: "connect_domain_inactive";
     consent_failed: "consent_failed";
     consent_required: "consent_required";
     consent_revoked: "consent_revoked";
@@ -82,7 +76,10 @@ export declare const ConnectErrorCode: z.ZodEnum<{
     org_connection_not_found: "org_connection_not_found";
     org_connection_secret_unreadable: "org_connection_secret_unreadable";
     plan_limit_accounts: "plan_limit_accounts";
+    plan_required: "plan_required";
+    spend_cap_reached: "spend_cap_reached";
     plan_module_unavailable: "plan_module_unavailable";
+    connect_grants_nothing: "connect_grants_nothing";
     billing_past_due: "billing_past_due";
     internal_error: "internal_error";
 }>;
@@ -106,11 +103,15 @@ export declare const ConnectSessionPublic: z.ZodObject<{
         failed: "failed";
     }>;
     reauthEmail: z.ZodNullable<z.ZodString>;
+    modules: z.ZodObject<{
+        mail: z.ZodBoolean;
+        calendar: z.ZodBoolean;
+        contacts: z.ZodBoolean;
+    }, z.core.$strip>;
     loginHint: z.ZodNullable<z.ZodString>;
     expiresAt: z.ZodPreprocess<z.ZodDate, Date>;
 }, z.core.$strip>;
 export type ConnectSessionPublic = z.infer<typeof ConnectSessionPublic>;
-/** A hosted connect session as its creator sees it: where it stands, and what it connected. */
 export declare const ConnectSession: z.ZodObject<{
     id: z.ZodUUID;
     status: z.ZodEnum<{
@@ -130,6 +131,7 @@ export declare const ConnectSession: z.ZodObject<{
         unsupported_provider: "unsupported_provider";
         token_exchange_failed: "token_exchange_failed";
         invalid_client: "invalid_client";
+        interaction_required: "interaction_required";
         invalid_grant: "invalid_grant";
         missing_refresh_token: "missing_refresh_token";
         scope_denied: "scope_denied";
@@ -148,6 +150,7 @@ export declare const ConnectSession: z.ZodObject<{
         unknown_meeting_app: "unknown_meeting_app";
         meeting_app_mismatch: "meeting_app_mismatch";
         meeting_app_secret_unreadable: "meeting_app_secret_unreadable";
+        connect_domain_inactive: "connect_domain_inactive";
         consent_failed: "consent_failed";
         consent_required: "consent_required";
         consent_revoked: "consent_revoked";
@@ -160,19 +163,24 @@ export declare const ConnectSession: z.ZodObject<{
         org_connection_not_found: "org_connection_not_found";
         org_connection_secret_unreadable: "org_connection_secret_unreadable";
         plan_limit_accounts: "plan_limit_accounts";
+        plan_required: "plan_required";
+        spend_cap_reached: "spend_cap_reached";
         plan_module_unavailable: "plan_module_unavailable";
+        connect_grants_nothing: "connect_grants_nothing";
         billing_past_due: "billing_past_due";
         internal_error: "internal_error";
     }>>;
     accountId: z.ZodNullable<z.ZodUUID>;
     email: z.ZodNullable<z.ZodString>;
+    mcpKeyId: z.ZodNullable<z.ZodUUID>;
+    mcpKeySkipped: z.ZodNullable<z.ZodEnum<{
+        mcp_key_limit: "mcp_key_limit";
+    }>>;
     expiresAt: z.ZodPreprocess<z.ZodDate, Date>;
     createdAt: z.ZodPreprocess<z.ZodDate, Date>;
 }, z.core.$strip>;
 export type ConnectSession = z.infer<typeof ConnectSession>;
-/** The `state` a redirect flow echoes back. */
 export declare const RedirectState: z.ZodString;
-/** How long a hosted session stays usable. */
 export declare const SessionTtlSeconds: z.ZodDefault<z.ZodNumber>;
 export declare const CreateConnectSession: z.ZodObject<{
     redirectUri: z.ZodOptional<z.ZodURL>;
@@ -196,6 +204,7 @@ export declare const CreateConnectSession: z.ZodObject<{
     state: z.ZodOptional<z.ZodString>;
     accountId: z.ZodOptional<z.ZodUUID>;
     options: z.ZodOptional<z.ZodObject<{
+        mailEnabled: z.ZodOptional<z.ZodBoolean>;
         calendarEnabled: z.ZodOptional<z.ZodBoolean>;
         contactsEnabled: z.ZodOptional<z.ZodBoolean>;
         bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -209,10 +218,17 @@ export declare const CreateConnectSession: z.ZodObject<{
         }>>;
         sharedMailboxesEnabled: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
+    mcp: z.ZodOptional<z.ZodObject<{
+        scopes: z.ZodArray<z.ZodEnum<{
+            read: "read";
+            write: "write";
+            send: "send";
+        }>>;
+        name: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>>;
     ttlSeconds: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>;
 export type CreateConnectSession = z.infer<typeof CreateConnectSession>;
-/** A hosted session's page, to send its owner to. */
 export declare const SessionLink: z.ZodObject<{
     id: z.ZodUUID;
     url: z.ZodURL;
@@ -240,6 +256,7 @@ export declare const StartOAuthRequest: z.ZodObject<{
     state: z.ZodOptional<z.ZodString>;
     accountId: z.ZodOptional<z.ZodUUID>;
     options: z.ZodOptional<z.ZodObject<{
+        mailEnabled: z.ZodOptional<z.ZodBoolean>;
         calendarEnabled: z.ZodOptional<z.ZodBoolean>;
         contactsEnabled: z.ZodOptional<z.ZodBoolean>;
         bodyStorage: z.ZodOptional<z.ZodEnum<{
@@ -255,17 +272,14 @@ export declare const StartOAuthRequest: z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type StartOAuthRequest = z.infer<typeof StartOAuthRequest>;
-/** Where to send the user to start the headless OAuth flow. */
 export declare const OAuthAuthorization: z.ZodObject<{
     authorizeUrl: z.ZodURL;
 }, z.core.$strip>;
 export type OAuthAuthorization = z.infer<typeof OAuthAuthorization>;
-/** A hosted page's session, by the token in its URL. */
 export declare const SessionTokenInput: z.ZodObject<{
     token: z.ZodString;
 }, z.core.$strip>;
 export type SessionTokenInput = z.infer<typeof SessionTokenInput>;
-/** Where the hosted page sends the browser next (the tenant's redirectUri). */
 export declare const HostedImapResult: z.ZodObject<{
     redirectUrl: z.ZodURL;
 }, z.core.$strip>;

package/contract/connect/routes.d.ts

@@ -1,5 +1,4 @@
 export declare const connectSessions: {
-    /** Hosted flow: returns a link to the hosted connect page. */
     create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         redirectUri: import("zod").ZodOptional<import("zod").ZodURL>;
         providers: import("zod").ZodDefault<import("zod").ZodArray<import("zod").ZodEnum<{
@@ -22,6 +21,7 @@ export declare const connectSessions: {
         state: import("zod").ZodOptional<import("zod").ZodString>;
         accountId: import("zod").ZodOptional<import("zod").ZodUUID>;
         options: import("zod").ZodOptional<import("zod").ZodObject<{
+            mailEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             calendarEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             contactsEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             bodyStorage: import("zod").ZodOptional<import("zod").ZodEnum<{
@@ -35,6 +35,14 @@ export declare const connectSessions: {
             }>>;
             sharedMailboxesEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
         }, import("zod/v4/core").$strip>>;
+        mcp: import("zod").ZodOptional<import("zod").ZodObject<{
+            scopes: import("zod").ZodArray<import("zod").ZodEnum<{
+                read: "read";
+                write: "write";
+                send: "send";
+            }>>;
+            name: import("zod").ZodDefault<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
         ttlSeconds: import("zod").ZodDefault<import("zod").ZodNumber>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         id: import("zod").ZodUUID;
@@ -47,6 +55,8 @@ export declare const connectSessions: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -72,10 +82,15 @@ export declare const connectSessions: {
             status: 400;
             message: string;
         };
-        plan_limit_storage: {
+        mcp_key_limit: {
+            status: 409;
+            message: string;
+        };
+        plan_module_unavailable: {
             status: 403;
             message: string;
         };
+        plan_limit_storage: import("../errors.js").DeclaredError<"plan_limit_storage">;
         storage_unavailable: {
             status: 400;
             message: string;
@@ -119,6 +134,7 @@ export declare const connectSessions: {
             unsupported_provider: "unsupported_provider";
             token_exchange_failed: "token_exchange_failed";
             invalid_client: "invalid_client";
+            interaction_required: "interaction_required";
             invalid_grant: "invalid_grant";
             missing_refresh_token: "missing_refresh_token";
             scope_denied: "scope_denied";
@@ -137,6 +153,7 @@ export declare const connectSessions: {
             unknown_meeting_app: "unknown_meeting_app";
             meeting_app_mismatch: "meeting_app_mismatch";
             meeting_app_secret_unreadable: "meeting_app_secret_unreadable";
+            connect_domain_inactive: "connect_domain_inactive";
             consent_failed: "consent_failed";
             consent_required: "consent_required";
             consent_revoked: "consent_revoked";
@@ -149,12 +166,19 @@ export declare const connectSessions: {
             org_connection_not_found: "org_connection_not_found";
             org_connection_secret_unreadable: "org_connection_secret_unreadable";
             plan_limit_accounts: "plan_limit_accounts";
+            plan_required: "plan_required";
+            spend_cap_reached: "spend_cap_reached";
             plan_module_unavailable: "plan_module_unavailable";
+            connect_grants_nothing: "connect_grants_nothing";
             billing_past_due: "billing_past_due";
             internal_error: "internal_error";
         }>>;
         accountId: import("zod").ZodNullable<import("zod").ZodUUID>;
         email: import("zod").ZodNullable<import("zod").ZodString>;
+        mcpKeyId: import("zod").ZodNullable<import("zod").ZodUUID>;
+        mcpKeySkipped: import("zod").ZodNullable<import("zod").ZodEnum<{
+            mcp_key_limit: "mcp_key_limit";
+        }>>;
         expiresAt: import("zod").ZodPreprocess<import("zod").ZodDate, Date>;
         createdAt: import("zod").ZodPreprocess<import("zod").ZodDate, Date>;
     }, import("zod/v4/core").$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
@@ -164,6 +188,8 @@ export declare const connectSessions: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -176,7 +202,6 @@ export declare const connectSessions: {
         readonly connect_session_not_found: "No session has this id (or token).";
     }>>, Record<never, never>>;
 };
-/** Headless flow: the URL to send the user to (see the description). */
 export declare const oauthAuthorizations: {
     create: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         provider: import("zod").ZodEnum<{
@@ -195,6 +220,7 @@ export declare const oauthAuthorizations: {
         state: import("zod").ZodOptional<import("zod").ZodString>;
         accountId: import("zod").ZodOptional<import("zod").ZodUUID>;
         options: import("zod").ZodOptional<import("zod").ZodObject<{
+            mailEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             calendarEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             contactsEnabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
             bodyStorage: import("zod").ZodOptional<import("zod").ZodEnum<{
@@ -217,6 +243,8 @@ export declare const oauthAuthorizations: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -234,6 +262,14 @@ export declare const oauthAuthorizations: {
             status: 400;
             message: string;
         };
+        connect_domain_inactive: {
+            status: 409;
+            message: string;
+        };
+        connect_grants_nothing: {
+            status: 400;
+            message: string;
+        };
         provider_not_configured: {
             status: 400;
             message: string;
@@ -254,10 +290,7 @@ export declare const oauthAuthorizations: {
             status: 403;
             message: string;
         };
-        plan_limit_storage: {
-            status: 403;
-            message: string;
-        };
+        plan_limit_storage: import("../errors.js").DeclaredError<"plan_limit_storage">;
         storage_unavailable: {
             status: 400;
             message: string;
@@ -303,6 +336,11 @@ export declare const hostedConnectSessions: {
             failed: "failed";
         }>;
         reauthEmail: import("zod").ZodNullable<import("zod").ZodString>;
+        modules: import("zod").ZodObject<{
+            mail: import("zod").ZodBoolean;
+            calendar: import("zod").ZodBoolean;
+            contacts: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>;
         loginHint: import("zod").ZodNullable<import("zod").ZodString>;
         expiresAt: import("zod").ZodPreprocess<import("zod").ZodDate, Date>;
     }, import("zod/v4/core").$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
@@ -312,6 +350,8 @@ export declare const hostedConnectSessions: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -365,6 +405,8 @@ export declare const hostedConnectSessions: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";
@@ -494,6 +536,8 @@ export declare const hostedConnectSessions: {
         readonly missing_scope: "The API key lacks the scope the operation needs.";
         readonly role_forbidden: "The member's role does not allow the operation.";
         readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
         readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
         readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
         readonly overloaded: "The API is shedding load; retry after Retry-After.";

package/contract/connect-domain/models.d.ts

@@ -0,0 +1,41 @@
+import * as z from "zod";
+export declare const ConnectDomainHostname: z.ZodString;
+export type ConnectDomainHostname = z.infer<typeof ConnectDomainHostname>;
+export declare const ConnectDomainStatus: z.ZodEnum<{
+    active: "active";
+    pending: "pending";
+    failed: "failed";
+}>;
+export type ConnectDomainStatus = z.infer<typeof ConnectDomainStatus>;
+export declare const ConnectDomainRecord: z.ZodObject<{
+    type: z.ZodString;
+    name: z.ZodString;
+    value: z.ZodString;
+}, z.core.$strip>;
+export type ConnectDomainRecord = z.infer<typeof ConnectDomainRecord>;
+export declare const ConnectDomain: z.ZodObject<{
+    hostname: z.ZodString;
+    status: z.ZodEnum<{
+        active: "active";
+        pending: "pending";
+        failed: "failed";
+    }>;
+    records: z.ZodArray<z.ZodObject<{
+        type: z.ZodString;
+        name: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strip>>;
+    ownership: z.ZodObject<{
+        type: z.ZodString;
+        name: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strip>;
+    error: z.ZodNullable<z.ZodString>;
+    activatedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
+    createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+}, z.core.$strip>;
+export type ConnectDomain = z.infer<typeof ConnectDomain>;
+export declare const SetConnectDomain: z.ZodObject<{
+    hostname: z.ZodString;
+}, z.core.$strip>;
+export type SetConnectDomain = z.infer<typeof SetConnectDomain>;

package/contract/connect-domain/routes.d.ts

@@ -0,0 +1,197 @@
+import * as z from "zod";
+export declare const connectDomain: {
+    get: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+        hostname: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            pending: "pending";
+            failed: "failed";
+        }>;
+        records: z.ZodArray<z.ZodObject<{
+            type: z.ZodString;
+            name: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+        ownership: z.ZodObject<{
+            type: z.ZodString;
+            name: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>;
+        error: z.ZodNullable<z.ZodString>;
+        activatedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
+        createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
+        readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
+        readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
+        readonly missing_scope: "The API key lacks the scope the operation needs.";
+        readonly role_forbidden: "The member's role does not allow the operation.";
+        readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
+        readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
+        readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
+        readonly overloaded: "The API is shedding load; retry after Retry-After.";
+        readonly payload_too_large: "The request body is larger than the API accepts.";
+        readonly internal_error: "An unexpected failure on our side.";
+        readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
+        readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
+        readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, {
+        connect_domain_not_found: {
+            status: 404;
+            message: string;
+        };
+        connect_domain_unavailable: {
+            status: 400;
+            message: string;
+        };
+    }>, Record<never, never>>;
+    set: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        hostname: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        hostname: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            pending: "pending";
+            failed: "failed";
+        }>;
+        records: z.ZodArray<z.ZodObject<{
+            type: z.ZodString;
+            name: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+        ownership: z.ZodObject<{
+            type: z.ZodString;
+            name: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>;
+        error: z.ZodNullable<z.ZodString>;
+        activatedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
+        createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
+        readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
+        readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
+        readonly missing_scope: "The API key lacks the scope the operation needs.";
+        readonly role_forbidden: "The member's role does not allow the operation.";
+        readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
+        readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
+        readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
+        readonly overloaded: "The API is shedding load; retry after Retry-After.";
+        readonly payload_too_large: "The request body is larger than the API accepts.";
+        readonly internal_error: "An unexpected failure on our side.";
+        readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
+        readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
+        readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, {
+        connect_domain_not_allowed: {
+            status: 400;
+            message: string;
+        };
+        connect_domain_taken: {
+            status: 409;
+            message: string;
+        };
+        connect_domain_in_use: {
+            status: 409;
+            message: string;
+        };
+        connect_domain_edge_unavailable: {
+            status: 502;
+            message: string;
+        };
+        connect_domain_unavailable: {
+            status: 400;
+            message: string;
+        };
+    }>, Record<never, never>>;
+    delete: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodVoid, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
+        readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
+        readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
+        readonly missing_scope: "The API key lacks the scope the operation needs.";
+        readonly role_forbidden: "The member's role does not allow the operation.";
+        readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
+        readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
+        readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
+        readonly overloaded: "The API is shedding load; retry after Retry-After.";
+        readonly payload_too_large: "The request body is larger than the API accepts.";
+        readonly internal_error: "An unexpected failure on our side.";
+        readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
+        readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
+        readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, {
+        connect_domain_in_use: {
+            status: 409;
+            message: string;
+        };
+        connect_domain_edge_unavailable: {
+            status: 502;
+            message: string;
+        };
+        connect_domain_not_found: {
+            status: 404;
+            message: string;
+        };
+        connect_domain_unavailable: {
+            status: 400;
+            message: string;
+        };
+    }>, Record<never, never>>;
+    refresh: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+        hostname: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            pending: "pending";
+            failed: "failed";
+        }>;
+        records: z.ZodArray<z.ZodObject<{
+            type: z.ZodString;
+            name: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+        ownership: z.ZodObject<{
+            type: z.ZodString;
+            name: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>;
+        error: z.ZodNullable<z.ZodString>;
+        activatedAt: z.ZodNullable<z.ZodPreprocess<z.ZodDate, Date>>;
+        createdAt: z.ZodPreprocess<z.ZodDate, Date>;
+    }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<import("@orpc/contract").MergedErrorMap<Record<never, never>, import("../errors.js").DeclaredErrors<{
+        readonly invalid_input: "The request does not match the operation's input schema (a malformed body included); data.issues names each problem.";
+        readonly unauthenticated: "No usable credential: none was sent, or it is malformed, unknown, revoked or an expired account token.";
+        readonly api_key_expired: "The API key is past its expiry (or the grace of the rotation that replaced it).";
+        readonly missing_scope: "The API key lacks the scope the operation needs.";
+        readonly role_forbidden: "The member's role does not allow the operation.";
+        readonly account_token_forbidden: "An account token called an operation account tokens cannot call.";
+        readonly account_scope_forbidden: "A credential limited to specific accounts called an operation that reaches beyond them.";
+        readonly mcp_only_key: "An MCP-only key (minted for an end user's MCP client) was used outside the MCP server.";
+        readonly rate_limited: "The tenant used up its plan's request rate; Retry-After says when the window ends.";
+        readonly too_many_requests: "The credential has too many requests in flight at once; retry after Retry-After.";
+        readonly overloaded: "The API is shedding load; retry after Retry-After.";
+        readonly payload_too_large: "The request body is larger than the API accepts.";
+        readonly internal_error: "An unexpected failure on our side.";
+        readonly invalid_idempotency_key: "POST only: the Idempotency-Key header is not 1 to 255 printable ASCII characters.";
+        readonly idempotency_key_reused: "POST only: the Idempotency-Key was used in the last 24 hours with another method, path or body.";
+        readonly idempotency_key_in_progress: "POST only: the request first sent with this Idempotency-Key has not been answered yet.";
+    }>>, {
+        connect_domain_edge_unavailable: {
+            status: 502;
+            message: string;
+        };
+        connect_domain_not_found: {
+            status: 404;
+            message: string;
+        };
+        connect_domain_unavailable: {
+            status: 400;
+            message: string;
+        };
+    }>, Record<never, never>>;
+};

package/contract/contacts/models.d.ts

@@ -5,7 +5,6 @@ export declare const ContactEmailType: z.ZodEnum<{
     other: "other";
 }>;
 export type ContactEmailType = z.infer<typeof ContactEmailType>;
-/** Microsoft 365 contacts have mobile, home and work numbers only. */
 export declare const ContactPhoneType: z.ZodEnum<{
     home: "home";
     work: "work";
@@ -13,7 +12,6 @@ export declare const ContactPhoneType: z.ZodEnum<{
     mobile: "mobile";
 }>;
 export type ContactPhoneType = z.infer<typeof ContactPhoneType>;
-/** type is null where the provider keeps none (Microsoft 365 addresses). */
 export declare const ContactEmail: z.ZodObject<{
     address: z.ZodString;
     type: z.ZodNullable<z.ZodEnum<{
@@ -33,7 +31,6 @@ export declare const ContactPhone: z.ZodObject<{
     }>>;
 }, z.core.$strip>;
 export type ContactPhone = z.infer<typeof ContactPhone>;
-/** A Microsoft 365 contact folder. Google accounts have none (their contacts carry folderId null). */
 export declare const ContactFolder: z.ZodObject<{
     id: z.ZodUUID;
     name: z.ZodString;
@@ -119,8 +116,6 @@ export declare const ContactPage: z.ZodObject<{
     nextCursor: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
 export type ContactPage = z.infer<typeof ContactPage>;
-/** A contact field a contact.updated event names as changed; `photo` is the photo itself (GET
- * .../photo), which can change while hasPhoto stays true. */
 export declare const ContactChangedField: z.ZodEnum<{
     displayName: "displayName";
     folderId: "folderId";
@@ -158,8 +153,6 @@ export declare const ContactPhoneInput: z.ZodObject<{
     }>>;
 }, z.core.$strip>;
 export type ContactPhoneInput = z.infer<typeof ContactPhoneInput>;
-/** A new contact needs at least a name, an organization, an address or a number, so it can be
- * found again (400 otherwise). */
 export declare const CreateContact: z.ZodObject<{
     folderId: z.ZodOptional<z.ZodUUID>;
     displayName: z.ZodOptional<z.ZodString>;
@@ -191,8 +184,6 @@ export declare const CreateContact: z.ZodObject<{
     notes: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type CreateContact = z.infer<typeof CreateContact>;
-/** create's input: the account, and a contact with a name, an organization, an email address or
- * a phone number (contact_unidentifiable). */
 export declare const CreateContactInput: z.ZodObject<{
     accountId: z.ZodUUID;
     folderId: z.ZodOptional<z.ZodUUID>;
@@ -224,7 +215,6 @@ export declare const CreateContactInput: z.ZodObject<{
     birthday: z.ZodOptional<z.ZodString>;
     notes: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-/** Fields present change (null clears); absent fields stay. emails and phones replace the list. */
 export declare const UpdateContact: z.ZodObject<{
     displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     givenName: z.ZodOptional<z.ZodNullable<z.ZodString>>;