groundmail 0.24.0 → 0.25.0

package/README.md

@@ -25,6 +25,20 @@ const email = await tx.emails.send({
 console.log(email.id, email.status)
 ```
 
+## Azure managed identity (no API key)
+
+On Azure, authenticate with the workload's managed identity instead of a key. Pass a token provider; the client caches the token until shortly before it expires and asks for a new one after a 401:
+
+```ts
+import { DefaultAzureCredential } from '@azure/identity'
+import { Groundmail } from 'groundmail'
+
+const credential = new DefaultAzureCredential()
+const client = new Groundmail({ getToken: () => credential.getToken('api://<your-app-id>/.default') })
+```
+
+`getToken` may return a string or `{ token, expiresOnTimestamp }`. Register the identity in the dashboard first: https://docs.groundmail.dev/authentication/azure-managed-identity
+
 ## Testing
 
 Use a test key (`gm_test_…`, create one with `tx.apiKeys.create({ test: true })` or in the

package/dist/authjs.d.ts

@@ -1,4 +1,4 @@
-import { G as Groundmail } from './client-DkpJ9AT0.js';
+import { G as Groundmail } from './client-NSj8n5sB.js';
 
 /** Subset of Auth.js theme used for the default magic-link email. */
 type AuthjsTheme = {

package/dist/authjs.js

@@ -1,7 +1,7 @@
 import {
   DEFAULT_API_BASE_URL,
   Groundmail
-} from "./chunk-TTRMVR6T.js";
+} from "./chunk-NQWM7F3N.js";
 
 // src/authjs.ts
 function escapeHtml(value) {

package/dist/better-auth.d.ts

@@ -1,4 +1,4 @@
-import { S as SendEmailResult, G as Groundmail } from './client-DkpJ9AT0.js';
+import { S as SendEmailResult, G as Groundmail } from './client-NSj8n5sB.js';
 
 type BetterAuthEmailUser = {
     email: string;

package/dist/better-auth.js

@@ -1,7 +1,7 @@
 import {
   DEFAULT_API_BASE_URL,
   Groundmail
-} from "./chunk-TTRMVR6T.js";
+} from "./chunk-NQWM7F3N.js";
 
 // src/better-auth.ts
 function linkHtml(label, url) {

package/dist/{chunk-TTRMVR6T.js → chunk-NQWM7F3N.js}

@@ -1559,12 +1559,24 @@ var WebhooksResource = class {
 
 // src/client.ts
 var DEFAULT_API_BASE_URL = "https://api.groundmail.dev";
-var Groundmail = class {
-  constructor(apiKey, options = {}) {
-    this.apiKey = apiKey;
-    this.options = options;
-    if (!apiKey?.startsWith("gm_")) {
-      throw new Error("Groundmail API key must start with gm_");
+var _Groundmail = class _Groundmail {
+  constructor(apiKeyOrOptions, options = {}) {
+    this.cachedToken = null;
+    if (apiKeyOrOptions && typeof apiKeyOrOptions === "object") {
+      if (typeof apiKeyOrOptions.getToken !== "function") {
+        throw new Error("Groundmail: pass an API key (gm_\u2026) or { getToken } to authenticate");
+      }
+      const { getToken, ...rest } = apiKeyOrOptions;
+      this.apiKey = null;
+      this.getToken = getToken;
+      this.options = rest;
+    } else {
+      if (!apiKeyOrOptions?.startsWith("gm_")) {
+        throw new Error("Groundmail API key must start with gm_");
+      }
+      this.apiKey = apiKeyOrOptions;
+      this.getToken = null;
+      this.options = options;
     }
     this.domains = new DomainsResource(this);
     this.emails = new EmailsResource(this);
@@ -1598,12 +1610,35 @@ var Groundmail = class {
   get fetchImpl() {
     return this.options.fetch || fetch;
   }
+  async bearer(forceRefresh = false) {
+    if (this.apiKey) return this.apiKey;
+    if (!forceRefresh && this.cachedToken && Date.now() < this.cachedToken.refreshAt) {
+      return this.cachedToken.token;
+    }
+    const value = await this.getToken();
+    const { token, expiresAt } = normalizeAccessToken(value);
+    if (!token) throw new Error("Groundmail: getToken() returned no token");
+    const fallback = Date.now() + _Groundmail.TOKEN_DEFAULT_TTL_MS;
+    const refreshAt = expiresAt ? expiresAt - _Groundmail.TOKEN_REFRESH_SKEW_MS : fallback;
+    this.cachedToken = { token, refreshAt };
+    return token;
+  }
+  /** Send with the current credential; with a token provider, retry once with a fresh token after a 401. */
+  async authorizedFetch(url, init, extraHeaders) {
+    const send = async (forceRefresh) => this.fetchImpl(url, {
+      ...init,
+      headers: { Authorization: `Bearer ${await this.bearer(forceRefresh)}`, ...extraHeaders, ...init.headers || {} }
+    });
+    const response = await send(false);
+    if (response.status === 401 && this.getToken) {
+      this.cachedToken = null;
+      return send(true);
+    }
+    return response;
+  }
   /** GET a text body (CSV downloads). Errors are JSON, like every other route. */
   async requestText(path) {
-    const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
-      method: "GET",
-      headers: { Authorization: `Bearer ${this.apiKey}` }
-    });
+    const response = await this.authorizedFetch(`${this.baseUrl}${path}`, { method: "GET" }, {});
     if (!response.ok) {
       const body = await response.json().catch(() => ({}));
       throw GroundmailError.fromResponse(response.status, body);
@@ -1611,14 +1646,7 @@ var Groundmail = class {
     return response.text();
   }
   async request(path, init) {
-    const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
-      ...init,
-      headers: {
-        Authorization: `Bearer ${this.apiKey}`,
-        "Content-Type": "application/json",
-        ...init.headers || {}
-      }
-    });
+    const response = await this.authorizedFetch(`${this.baseUrl}${path}`, init, { "Content-Type": "application/json" });
     const body = await response.json().catch(() => ({}));
     if (!response.ok) {
       throw GroundmailError.fromResponse(response.status, body);
@@ -1626,6 +1654,33 @@ var Groundmail = class {
     return body;
   }
 };
+/** Two minutes of slack so a token never expires in flight. */
+_Groundmail.TOKEN_REFRESH_SKEW_MS = 2 * 60 * 1e3;
+/** Tokens with no known expiry are reused this long at most. */
+_Groundmail.TOKEN_DEFAULT_TTL_MS = 5 * 60 * 1e3;
+var Groundmail = _Groundmail;
+function normalizeAccessToken(value) {
+  if (!value) return { token: "", expiresAt: null };
+  if (typeof value === "string") return { token: value, expiresAt: jwtExpiry(value) };
+  const token = typeof value.token === "string" ? value.token : "";
+  let expiresAt = null;
+  if (typeof value.expiresOnTimestamp === "number") expiresAt = value.expiresOnTimestamp;
+  else if (value.expiresOn instanceof Date) expiresAt = value.expiresOn.getTime();
+  else if (typeof value.expiresOn === "number") expiresAt = value.expiresOn < 1e12 ? value.expiresOn * 1e3 : value.expiresOn;
+  return { token, expiresAt: expiresAt ?? jwtExpiry(token) };
+}
+function jwtExpiry(token) {
+  const part = token.split(".")[1];
+  if (!part) return null;
+  try {
+    const base64 = part.replace(/-/g, "+").replace(/_/g, "/");
+    const json = typeof atob === "function" ? atob(base64.padEnd(base64.length + (4 - base64.length % 4) % 4, "=")) : "";
+    const exp = JSON.parse(json).exp;
+    return typeof exp === "number" ? exp * 1e3 : null;
+  } catch {
+    return null;
+  }
+}
 
 export {
   GroundmailError,
@@ -1636,5 +1691,6 @@ export {
   buildSignatureHeader,
   verifyWebhookSignature,
   DEFAULT_API_BASE_URL,
-  Groundmail
+  Groundmail,
+  normalizeAccessToken
 };

package/dist/clerk.d.ts

@@ -1,4 +1,4 @@
-import { G as Groundmail, S as SendEmailResult } from './client-DkpJ9AT0.js';
+import { G as Groundmail, S as SendEmailResult } from './client-NSj8n5sB.js';
 
 /**
  * Subset of Clerk `email.created` webhook `data` used for delivery.

package/dist/clerk.js

@@ -1,7 +1,7 @@
 import {
   DEFAULT_API_BASE_URL,
   Groundmail
-} from "./chunk-TTRMVR6T.js";
+} from "./chunk-NQWM7F3N.js";
 
 // src/clerk.ts
 function resolveApiKey(options) {

package/dist/{client-DkpJ9AT0.d.ts → client-NSj8n5sB.d.ts}

@@ -840,10 +840,31 @@ type UpdateTemplateParams = {
     /** Move it to this folder (created when missing); `null` or `''` takes it out of any folder. */
     folder?: string | null;
 };
+/**
+ * What a token provider may return: the token itself, or an object with the
+ * token and when it expires (the `AccessToken` shape `@azure/identity`'s
+ * `credential.getToken()` returns, so it can be passed straight through).
+ */
+type GroundmailAccessToken = string | {
+    token: string;
+    expiresOnTimestamp?: number;
+    expiresOn?: Date | number;
+};
+/**
+ * Returns a Bearer token for each request, instead of a fixed API key. Use it
+ * for keyless auth from Azure (a managed identity's Microsoft Entra token):
+ * `getToken: () => credential.getToken('api://…/.default')`. The SDK caches the
+ * token until two minutes before it expires and asks again after a 401.
+ */
+type GroundmailTokenProvider = () => GroundmailAccessToken | null | undefined | Promise<GroundmailAccessToken | null | undefined>;
 type GroundmailOptions = {
     baseUrl?: string;
     fetch?: typeof fetch;
 };
+/** `new Groundmail({ getToken })`: authenticate with a token provider instead of an API key. */
+type GroundmailTokenOptions = GroundmailOptions & {
+    getToken: GroundmailTokenProvider;
+};
 type DomainStatus = 'pending' | 'verified' | 'failed';
 type DomainTlsMode = 'opportunistic' | 'enforced';
 type DomainDmarcAnalysis = {
@@ -1718,8 +1739,6 @@ declare class WebhooksResource {
 
 declare const DEFAULT_API_BASE_URL = "https://api.groundmail.dev";
 declare class Groundmail {
-    private readonly apiKey;
-    private readonly options;
     readonly domains: DomainsResource;
     readonly emails: EmailsResource;
     readonly receivedEmails: ReceivedEmailsResource;
@@ -1737,7 +1756,16 @@ declare class Groundmail {
     readonly migrations: MigrationsResource;
     /** DMARC monitoring per domain: report address, sources, pass rates and readiness. */
     readonly dmarc: DmarcResource;
+    private readonly apiKey;
+    private readonly options;
+    private readonly getToken;
+    private cachedToken;
+    /**
+     * `new Groundmail('gm_…')` with an API key, or `new Groundmail({ getToken })`
+     * with a token provider (for example an Azure managed identity; no key).
+     */
     constructor(apiKey: string, options?: GroundmailOptions);
+    constructor(options: GroundmailTokenOptions);
     /**
      * Check one address with Groundmail validation before you accept it (for
      * example on a signup form): syntax, mail server, disposable and role
@@ -1746,9 +1774,21 @@ declare class Groundmail {
     validate(email: string): Promise<ValidateEmailResult>;
     get baseUrl(): string;
     get fetchImpl(): typeof fetch;
+    /** Two minutes of slack so a token never expires in flight. */
+    private static readonly TOKEN_REFRESH_SKEW_MS;
+    /** Tokens with no known expiry are reused this long at most. */
+    private static readonly TOKEN_DEFAULT_TTL_MS;
+    private bearer;
+    /** Send with the current credential; with a token provider, retry once with a fresh token after a 401. */
+    private authorizedFetch;
     /** GET a text body (CSV downloads). Errors are JSON, like every other route. */
     requestText(path: string): Promise<string>;
     request<T>(path: string, init: RequestInit): Promise<T>;
 }
+/** A token provider's result → the token and its expiry (ms since epoch), if known. */
+declare function normalizeAccessToken(value: GroundmailAccessToken | null | undefined): {
+    token: string;
+    expiresAt: number | null;
+};
 
-export { type DmarcStatus as $, type ApiErrorBody as A, type BatchSendEmailResult as B, type CategoryOptOut as C, type DnsRecord as D, type CreateDomainResult as E, type CreateMigrationParams as F, Groundmail as G, type CreateSuppressionParams as H, type CreateTemplateParams as I, type CreateTenantParams as J, type CreateWebhookParams as K, DEFAULT_API_BASE_URL as L, type DailyRampLimitErrorDetails as M, type DeleteTenantResult as N, type DeliverabilityBucket as O, type DeliverabilityDomainInsight as P, type DeliverabilityInsightsResult as Q, type DeliverabilityMailServerRelay as R, type SendEmailResult as S, type DeliverabilityWindow as T, type DmarcDailyPoint as U, type DmarcMonitoring as V, type DmarcMonitoringDisabled as W, type DmarcReadiness as X, type DmarcReadinessVerdict as Y, type DmarcSource as Z, type DmarcSourceStatus as _, type ApiErrorCode as a, type Suppression as a$, type DnsProviderName as a0, type Domain as a1, type DomainBimiAnalysis as a2, type DomainDetailResult as a3, type DomainDmarcAnalysis as a4, type DomainDnsAnalysis as a5, type DomainStatus as a6, type DomainTlsMode as a7, type DomainTrackingDns as a8, type DomainTrackingStatus as a9, type ListTemplatesParams as aA, type ListTemplatesResult as aB, type ListTenantDomainsResult as aC, type ListTenantsParams as aD, type ListTenantsResult as aE, type MailServerSigningStatus as aF, type MailStream as aG, type Migration as aH, type MigrationDnsChange as aI, type MigrationDnsPlan as aJ, type MigrationDomainItem as aK, type MigrationItemStatus as aL, type MigrationProvider as aM, type MigrationResource as aN, type MigrationSummary as aO, type MigrationTemplateItem as aP, type MigrationTotals as aQ, type MigrationWebhookItem as aR, type ReceivedEmail as aS, type ReceivedEmailAttachment as aT, type ReceivedEmailAttachmentMeta as aU, type RemoteApplyDnsCredentials as aV, type RemoveCategoryOptOutOptions as aW, type RunMigrationOptions as aX, type SendEmailParams as aY, type StreamDeliverability as aZ, type SuppressedErrorDetails as a_, type EmailListItem as aa, type EmailWebhookEventPayload as ab, type EmailWebhookEventType as ac, type EnableDmarcParams as ad, type EnableDmarcResult as ae, type EnrollmentSkip as af, type EventRecord as ag, type GroundmailOptions as ah, type HeldBackErrorDetails as ai, type HeldBackReason as aj, type HeldBackRecipient as ak, type ListApiKeysParams as al, type ListApiKeysResult as am, type ListAutomationRunsParams as an, type ListAutomationRunsResult as ao, type ListAutomationsResult as ap, type ListCategoryOptOutsParams as aq, type ListCategoryOptOutsResult as ar, type ListDomainsParams as as, type ListDomainsResult as at, type ListEmailsParams as au, type ListEmailsResult as av, type ListReceivedEmailsParams as aw, type ListReceivedEmailsResult as ax, type ListSuppressionsParams as ay, type ListSuppressionsResult as az, type ApiKey as b, type Template as b0, type TemplateFormat as b1, type TemplateLintWarning as b2, type TemplateStarter as b3, type TemplateStatus as b4, type TemplateVersion as b5, type Tenant as b6, type TenantPauseSource as b7, type TenantRamp as b8, type TenantStats as b9, type TenantStatsResult as ba, type TenantStatus as bb, type TenantStreamPolicy as bc, type TestEmailWebhookParams as bd, type TestEmailWebhookResult as be, type TriggerEventParams as bf, type TriggerEventResult as bg, type TwilioIntegrationResponse as bh, type TwilioIntegrationStatus as bi, type UpdateAutomationParams as bj, type UpdateDomainParams as bk, type UpdateEmailParams as bl, type UpdateTemplateParams as bm, type UpdateTenantParams as bn, type UpdateWebhookParams as bo, type ValidateEmailResult as bp, type ValidationReason as bq, type ValidationVerdict as br, type VerifyDomainResult as bs, type WebhookEmailTag as bt, type WebhookEndpoint as bu, type WebhookEndpointWithSecret as bv, type WebhookEventType as bw, mergeMigrations as bx, type ApiKeyScope as c, type ApplyDnsParams as d, type ApplyDnsRecordResult as e, type ApplyDnsResult as f, type Asset as g, type Automation as h, type AutomationResult as i, type AutomationRun as j, type AutomationRunResponse as k, type AutomationRunStatus as l, type AutomationRunStep as m, type AutomationRunStepStatus as n, type AutomationStatus as o, type AutomationStep as p, type AutomationTrigger as q, type BounceType as r, type CategoryOptOutCategory as s, type CategoryUnsubscribedErrorDetails as t, type ConnectTwilioParams as u, type ContactWebhookEventPayload as v, type CreateApiKeyParams as w, type CreateApiKeyResult as x, type CreateAutomationParams as y, type CreateDomainParams as z };
+export { type DmarcStatus as $, type ApiErrorBody as A, type BatchSendEmailResult as B, type CategoryOptOut as C, type DnsRecord as D, type CreateDomainResult as E, type CreateMigrationParams as F, Groundmail as G, type CreateSuppressionParams as H, type CreateTemplateParams as I, type CreateTenantParams as J, type CreateWebhookParams as K, DEFAULT_API_BASE_URL as L, type DailyRampLimitErrorDetails as M, type DeleteTenantResult as N, type DeliverabilityBucket as O, type DeliverabilityDomainInsight as P, type DeliverabilityInsightsResult as Q, type DeliverabilityMailServerRelay as R, type SendEmailResult as S, type DeliverabilityWindow as T, type DmarcDailyPoint as U, type DmarcMonitoring as V, type DmarcMonitoringDisabled as W, type DmarcReadiness as X, type DmarcReadinessVerdict as Y, type DmarcSource as Z, type DmarcSourceStatus as _, type ApiErrorCode as a, type SendEmailParams as a$, type DnsProviderName as a0, type Domain as a1, type DomainBimiAnalysis as a2, type DomainDetailResult as a3, type DomainDmarcAnalysis as a4, type DomainDnsAnalysis as a5, type DomainStatus as a6, type DomainTlsMode as a7, type DomainTrackingDns as a8, type DomainTrackingStatus as a9, type ListReceivedEmailsResult as aA, type ListSuppressionsParams as aB, type ListSuppressionsResult as aC, type ListTemplatesParams as aD, type ListTemplatesResult as aE, type ListTenantDomainsResult as aF, type ListTenantsParams as aG, type ListTenantsResult as aH, type MailServerSigningStatus as aI, type MailStream as aJ, type Migration as aK, type MigrationDnsChange as aL, type MigrationDnsPlan as aM, type MigrationDomainItem as aN, type MigrationItemStatus as aO, type MigrationProvider as aP, type MigrationResource as aQ, type MigrationSummary as aR, type MigrationTemplateItem as aS, type MigrationTotals as aT, type MigrationWebhookItem as aU, type ReceivedEmail as aV, type ReceivedEmailAttachment as aW, type ReceivedEmailAttachmentMeta as aX, type RemoteApplyDnsCredentials as aY, type RemoveCategoryOptOutOptions as aZ, type RunMigrationOptions as a_, type EmailListItem as aa, type EmailWebhookEventPayload as ab, type EmailWebhookEventType as ac, type EnableDmarcParams as ad, type EnableDmarcResult as ae, type EnrollmentSkip as af, type EventRecord as ag, type GroundmailAccessToken as ah, type GroundmailOptions as ai, type GroundmailTokenOptions as aj, type GroundmailTokenProvider as ak, type HeldBackErrorDetails as al, type HeldBackReason as am, type HeldBackRecipient as an, type ListApiKeysParams as ao, type ListApiKeysResult as ap, type ListAutomationRunsParams as aq, type ListAutomationRunsResult as ar, type ListAutomationsResult as as, type ListCategoryOptOutsParams as at, type ListCategoryOptOutsResult as au, type ListDomainsParams as av, type ListDomainsResult as aw, type ListEmailsParams as ax, type ListEmailsResult as ay, type ListReceivedEmailsParams as az, type ApiKey as b, type StreamDeliverability as b0, type SuppressedErrorDetails as b1, type Suppression as b2, type Template as b3, type TemplateFormat as b4, type TemplateLintWarning as b5, type TemplateStarter as b6, type TemplateStatus as b7, type TemplateVersion as b8, type Tenant as b9, mergeMigrations as bA, normalizeAccessToken as bB, type TenantPauseSource as ba, type TenantRamp as bb, type TenantStats as bc, type TenantStatsResult as bd, type TenantStatus as be, type TenantStreamPolicy as bf, type TestEmailWebhookParams as bg, type TestEmailWebhookResult as bh, type TriggerEventParams as bi, type TriggerEventResult as bj, type TwilioIntegrationResponse as bk, type TwilioIntegrationStatus as bl, type UpdateAutomationParams as bm, type UpdateDomainParams as bn, type UpdateEmailParams as bo, type UpdateTemplateParams as bp, type UpdateTenantParams as bq, type UpdateWebhookParams as br, type ValidateEmailResult as bs, type ValidationReason as bt, type ValidationVerdict as bu, type VerifyDomainResult as bv, type WebhookEmailTag as bw, type WebhookEndpoint as bx, type WebhookEndpointWithSecret as by, type WebhookEventType as bz, type ApiKeyScope as c, type ApplyDnsParams as d, type ApplyDnsRecordResult as e, type ApplyDnsResult as f, type Asset as g, type Automation as h, type AutomationResult as i, type AutomationRun as j, type AutomationRunResponse as k, type AutomationRunStatus as l, type AutomationRunStep as m, type AutomationRunStepStatus as n, type AutomationStatus as o, type AutomationStep as p, type AutomationTrigger as q, type BounceType as r, type CategoryOptOutCategory as s, type CategoryUnsubscribedErrorDetails as t, type ConnectTwilioParams as u, type ContactWebhookEventPayload as v, type CreateApiKeyParams as w, type CreateApiKeyResult as x, type CreateAutomationParams as y, type CreateDomainParams as z };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { A as ApiErrorBody, D as DnsRecord } from './client-DkpJ9AT0.js';
-export { a as ApiErrorCode, b as ApiKey, c as ApiKeyScope, d as ApplyDnsParams, e as ApplyDnsRecordResult, f as ApplyDnsResult, g as Asset, h as Automation, i as AutomationResult, j as AutomationRun, k as AutomationRunResponse, l as AutomationRunStatus, m as AutomationRunStep, n as AutomationRunStepStatus, o as AutomationStatus, p as AutomationStep, q as AutomationTrigger, B as BatchSendEmailResult, r as BounceType, C as CategoryOptOut, s as CategoryOptOutCategory, t as CategoryUnsubscribedErrorDetails, u as ConnectTwilioParams, v as ContactWebhookEventPayload, w as CreateApiKeyParams, x as CreateApiKeyResult, y as CreateAutomationParams, z as CreateDomainParams, E as CreateDomainResult, F as CreateMigrationParams, H as CreateSuppressionParams, I as CreateTemplateParams, J as CreateTenantParams, K as CreateWebhookParams, L as DEFAULT_API_BASE_URL, M as DailyRampLimitErrorDetails, N as DeleteTenantResult, O as DeliverabilityBucket, P as DeliverabilityDomainInsight, Q as DeliverabilityInsightsResult, R as DeliverabilityMailServerRelay, T as DeliverabilityWindow, U as DmarcDailyPoint, V as DmarcMonitoring, W as DmarcMonitoringDisabled, X as DmarcReadiness, Y as DmarcReadinessVerdict, Z as DmarcSource, _ as DmarcSourceStatus, $ as DmarcStatus, a0 as DnsProviderName, a1 as Domain, a2 as DomainBimiAnalysis, a3 as DomainDetailResult, a4 as DomainDmarcAnalysis, a5 as DomainDnsAnalysis, a6 as DomainStatus, a7 as DomainTlsMode, a8 as DomainTrackingDns, a9 as DomainTrackingStatus, aa as EmailListItem, ab as EmailWebhookEventPayload, ac as EmailWebhookEventType, ad as EnableDmarcParams, ae as EnableDmarcResult, af as EnrollmentSkip, ag as EventRecord, G as Groundmail, ah as GroundmailOptions, ai as HeldBackErrorDetails, aj as HeldBackReason, ak as HeldBackRecipient, al as ListApiKeysParams, am as ListApiKeysResult, an as ListAutomationRunsParams, ao as ListAutomationRunsResult, ap as ListAutomationsResult, aq as ListCategoryOptOutsParams, ar as ListCategoryOptOutsResult, as as ListDomainsParams, at as ListDomainsResult, au as ListEmailsParams, av as ListEmailsResult, aw as ListReceivedEmailsParams, ax as ListReceivedEmailsResult, ay as ListSuppressionsParams, az as ListSuppressionsResult, aA as ListTemplatesParams, aB as ListTemplatesResult, aC as ListTenantDomainsResult, aD as ListTenantsParams, aE as ListTenantsResult, aF as MailServerSigningStatus, aG as MailStream, aH as Migration, aI as MigrationDnsChange, aJ as MigrationDnsPlan, aK as MigrationDomainItem, aL as MigrationItemStatus, aM as MigrationProvider, aN as MigrationResource, aO as MigrationSummary, aP as MigrationTemplateItem, aQ as MigrationTotals, aR as MigrationWebhookItem, aS as ReceivedEmail, aT as ReceivedEmailAttachment, aU as ReceivedEmailAttachmentMeta, aV as RemoteApplyDnsCredentials, aW as RemoveCategoryOptOutOptions, aX as RunMigrationOptions, aY as SendEmailParams, S as SendEmailResult, aZ as StreamDeliverability, a_ as SuppressedErrorDetails, a$ as Suppression, b0 as Template, b1 as TemplateFormat, b2 as TemplateLintWarning, b3 as TemplateStarter, b4 as TemplateStatus, b5 as TemplateVersion, b6 as Tenant, b7 as TenantPauseSource, b8 as TenantRamp, b9 as TenantStats, ba as TenantStatsResult, bb as TenantStatus, bc as TenantStreamPolicy, bd as TestEmailWebhookParams, be as TestEmailWebhookResult, bf as TriggerEventParams, bg as TriggerEventResult, bh as TwilioIntegrationResponse, bi as TwilioIntegrationStatus, bj as UpdateAutomationParams, bk as UpdateDomainParams, bl as UpdateEmailParams, bm as UpdateTemplateParams, bn as UpdateTenantParams, bo as UpdateWebhookParams, bp as ValidateEmailResult, bq as ValidationReason, br as ValidationVerdict, bs as VerifyDomainResult, bt as WebhookEmailTag, bu as WebhookEndpoint, bv as WebhookEndpointWithSecret, bw as WebhookEventType, bx as mergeMigrations } from './client-DkpJ9AT0.js';
+import { A as ApiErrorBody, D as DnsRecord } from './client-NSj8n5sB.js';
+export { a as ApiErrorCode, b as ApiKey, c as ApiKeyScope, d as ApplyDnsParams, e as ApplyDnsRecordResult, f as ApplyDnsResult, g as Asset, h as Automation, i as AutomationResult, j as AutomationRun, k as AutomationRunResponse, l as AutomationRunStatus, m as AutomationRunStep, n as AutomationRunStepStatus, o as AutomationStatus, p as AutomationStep, q as AutomationTrigger, B as BatchSendEmailResult, r as BounceType, C as CategoryOptOut, s as CategoryOptOutCategory, t as CategoryUnsubscribedErrorDetails, u as ConnectTwilioParams, v as ContactWebhookEventPayload, w as CreateApiKeyParams, x as CreateApiKeyResult, y as CreateAutomationParams, z as CreateDomainParams, E as CreateDomainResult, F as CreateMigrationParams, H as CreateSuppressionParams, I as CreateTemplateParams, J as CreateTenantParams, K as CreateWebhookParams, L as DEFAULT_API_BASE_URL, M as DailyRampLimitErrorDetails, N as DeleteTenantResult, O as DeliverabilityBucket, P as DeliverabilityDomainInsight, Q as DeliverabilityInsightsResult, R as DeliverabilityMailServerRelay, T as DeliverabilityWindow, U as DmarcDailyPoint, V as DmarcMonitoring, W as DmarcMonitoringDisabled, X as DmarcReadiness, Y as DmarcReadinessVerdict, Z as DmarcSource, _ as DmarcSourceStatus, $ as DmarcStatus, a0 as DnsProviderName, a1 as Domain, a2 as DomainBimiAnalysis, a3 as DomainDetailResult, a4 as DomainDmarcAnalysis, a5 as DomainDnsAnalysis, a6 as DomainStatus, a7 as DomainTlsMode, a8 as DomainTrackingDns, a9 as DomainTrackingStatus, aa as EmailListItem, ab as EmailWebhookEventPayload, ac as EmailWebhookEventType, ad as EnableDmarcParams, ae as EnableDmarcResult, af as EnrollmentSkip, ag as EventRecord, G as Groundmail, ah as GroundmailAccessToken, ai as GroundmailOptions, aj as GroundmailTokenOptions, ak as GroundmailTokenProvider, al as HeldBackErrorDetails, am as HeldBackReason, an as HeldBackRecipient, ao as ListApiKeysParams, ap as ListApiKeysResult, aq as ListAutomationRunsParams, ar as ListAutomationRunsResult, as as ListAutomationsResult, at as ListCategoryOptOutsParams, au as ListCategoryOptOutsResult, av as ListDomainsParams, aw as ListDomainsResult, ax as ListEmailsParams, ay as ListEmailsResult, az as ListReceivedEmailsParams, aA as ListReceivedEmailsResult, aB as ListSuppressionsParams, aC as ListSuppressionsResult, aD as ListTemplatesParams, aE as ListTemplatesResult, aF as ListTenantDomainsResult, aG as ListTenantsParams, aH as ListTenantsResult, aI as MailServerSigningStatus, aJ as MailStream, aK as Migration, aL as MigrationDnsChange, aM as MigrationDnsPlan, aN as MigrationDomainItem, aO as MigrationItemStatus, aP as MigrationProvider, aQ as MigrationResource, aR as MigrationSummary, aS as MigrationTemplateItem, aT as MigrationTotals, aU as MigrationWebhookItem, aV as ReceivedEmail, aW as ReceivedEmailAttachment, aX as ReceivedEmailAttachmentMeta, aY as RemoteApplyDnsCredentials, aZ as RemoveCategoryOptOutOptions, a_ as RunMigrationOptions, a$ as SendEmailParams, S as SendEmailResult, b0 as StreamDeliverability, b1 as SuppressedErrorDetails, b2 as Suppression, b3 as Template, b4 as TemplateFormat, b5 as TemplateLintWarning, b6 as TemplateStarter, b7 as TemplateStatus, b8 as TemplateVersion, b9 as Tenant, ba as TenantPauseSource, bb as TenantRamp, bc as TenantStats, bd as TenantStatsResult, be as TenantStatus, bf as TenantStreamPolicy, bg as TestEmailWebhookParams, bh as TestEmailWebhookResult, bi as TriggerEventParams, bj as TriggerEventResult, bk as TwilioIntegrationResponse, bl as TwilioIntegrationStatus, bm as UpdateAutomationParams, bn as UpdateDomainParams, bo as UpdateEmailParams, bp as UpdateTemplateParams, bq as UpdateTenantParams, br as UpdateWebhookParams, bs as ValidateEmailResult, bt as ValidationReason, bu as ValidationVerdict, bv as VerifyDomainResult, bw as WebhookEmailTag, bx as WebhookEndpoint, by as WebhookEndpointWithSecret, bz as WebhookEventType, bA as mergeMigrations, bB as normalizeAccessToken } from './client-NSj8n5sB.js';
 
 type GroundmailErrorOptions = {
     code?: string;

package/dist/index.js

@@ -6,9 +6,10 @@ import {
   buildSignatureHeader,
   mergeMigrations,
   mergeSpfInclude,
+  normalizeAccessToken,
   signWebhookPayload,
   verifyWebhookSignature
-} from "./chunk-TTRMVR6T.js";
+} from "./chunk-NQWM7F3N.js";
 
 // src/simulator.ts
 var SIMULATOR_DOMAIN = "simulator.groundmail.dev";
@@ -42,6 +43,7 @@ export {
   isTestApiKey,
   mergeMigrations,
   mergeSpfInclude,
+  normalizeAccessToken,
   signWebhookPayload,
   simulatorAddress,
   verifyWebhookSignature

package/dist/payload.d.ts

@@ -1,4 +1,4 @@
-import { G as Groundmail } from './client-DkpJ9AT0.js';
+import { G as Groundmail } from './client-NSj8n5sB.js';
 
 /**
  * Minimal Payload `SendEmailOptions` / address shapes used by this adapter.

package/dist/payload.js

@@ -1,7 +1,7 @@
 import {
   DEFAULT_API_BASE_URL,
   Groundmail
-} from "./chunk-TTRMVR6T.js";
+} from "./chunk-NQWM7F3N.js";
 
 // src/payload.ts
 function resolveApiKey(args) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "groundmail",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "description": "Groundmail transactional email API client",
   "license": "MIT",
   "type": "module",
@@ -89,7 +89,7 @@
     "prepublishOnly": "npm run build && npm run build:nodemailer-bridge"
   },
   "dependencies": {
-    "groundmail-nodemailer": "0.15.10"
+    "groundmail-nodemailer": "0.15.11"
   },
   "devDependencies": {
     "@types/nodemailer": "^8.0.1",