mailchannels-sdk 1.0.0 → 1.2.0

package/dist/mailchannels.mjs

@@ -2,7 +2,7 @@ import { $fetch } from "ofetch";
 import { subtle } from "node:crypto";
 import { Buffer } from "node:buffer";
 import mime from "mime";
-var version = "1.0.0";
+var version = "1.2.0";
 var MailChannelsClient = class MailChannelsClient {
 	static DEFAULT_BASE_URL = "https://api.mailchannels.net";
 	static DEFAULT_TIMEOUT = 12e4;
@@ -79,21 +79,26 @@ const STATUS_ERROR_TYPE_MAP = {
 	[429]: "rate_limit_error",
 	[500]: "internal_server_error"
 };
-const createError = (message, statusCode = null, type) => {
+const createError = (message, statusCode = null, type, response = null) => {
 	return {
 		message,
 		statusCode,
-		type
+		type,
+		response
 	};
 };
 const getStatusError = (response, errors = {}) => {
 	const statusText = errors[response.status] || "Unknown error.";
 	const payload = response._data ?? response.data;
 	let details;
+	let errorResponse = null;
 	if (typeof payload === "string") details = payload;
-	else if (payload?.message) details = payload.message;
-	else if (Array.isArray(payload?.errors) && payload.errors?.length) details = payload.errors.join(", ");
-	return createError(details ? `${statusText} ${details}` : statusText, response.status ?? null, STATUS_ERROR_TYPE_MAP[response.status] || "api_error");
+	else if (typeof payload === "object" && payload !== null) {
+		if (typeof payload.message === "string") details = payload.message;
+		else if (Array.isArray(payload.errors) && payload.errors.length) details = payload.errors.join(", ");
+		errorResponse = payload;
+	}
+	return createError(details ? `${statusText} ${details}` : statusText, response.status ?? null, STATUS_ERROR_TYPE_MAP[response.status] || "api_error", errorResponse);
 };
 const getResultError = (e, fallback) => {
 	return createError(e instanceof Error ? e.message : fallback, null, "application_error");
@@ -107,6 +112,12 @@ const validatePagination = (pagination = {}) => {
 	if (typeof offset === "number" && offset < 0) return createValidationError("Offset must be greater than or equal to 0.");
 	return null;
 };
+const CUSTOM_TRACKING_NAME_PATTERN = /^[a-z0-9-]+$/;
+const validateCustomTrackingName = (name) => {
+	if (!name || name.length < 1 || name.length > 64) return createValidationError("The custom tracking domain name must be between 1 and 64 characters.");
+	if (!CUSTOM_TRACKING_NAME_PATTERN.test(name)) return createValidationError("The custom tracking domain name must match ^[a-z0-9-]+$");
+	return null;
+};
 const clean = (data) => {
 	if (Array.isArray(data)) {
 		const result = [];
@@ -160,7 +171,7 @@ const parseArrayRecipients = (recipients) => {
 	return filtered.length > 0 ? filtered : void 0;
 };
 const stripPemHeaders = (pem) => pem.replace(/-----[^-]+-----|\s|#.*$/gm, "");
-const RESERVED_HEADER_NAMES = new Set([
+const RESERVED_HEADER_NAMES = /* @__PURE__ */ new Set([
 	"authentication-results",
 	"bcc",
 	"cc",
@@ -305,6 +316,18 @@ const buildSendPayload = async (options) => {
 			return getRecipientCount(personalization.to) + getRecipientCount(personalization.cc) + getRecipientCount(personalization.bcc) !== 1;
 		})) return "Non-transactional messages must have exactly one recipient per personalization.";
 	}
+	if (options.tracking?.click?.customDomainName !== void 0) {
+		const clickCustomTrackingNameError = validateCustomTrackingName(options.tracking.click.customDomainName);
+		if (clickCustomTrackingNameError) return `Invalid click tracking: ${clickCustomTrackingNameError.message}`;
+	}
+	if (options.tracking?.open?.customDomainName !== void 0) {
+		const openCustomTrackingNameError = validateCustomTrackingName(options.tracking.open.customDomainName);
+		if (openCustomTrackingNameError) return `Invalid open tracking: ${openCustomTrackingNameError.message}`;
+	}
+	if (options.unsubscribe?.customDomainName !== void 0) {
+		const unsubscribeCustomTrackingNameError = validateCustomTrackingName(options.unsubscribe.customDomainName);
+		if (unsubscribeCustomTrackingNameError) return `Invalid unsubscribe settings: ${unsubscribeCustomTrackingNameError.message}`;
+	}
 	const content = [];
 	const template_type = options.template?.type;
 	if (text) content.push({
@@ -335,11 +358,18 @@ const buildSendPayload = async (options) => {
 		from: parsedFrom,
 		subject: options.subject,
 		content,
-		tracking_settings: options.tracking ? {
-			click_tracking: options.tracking.click ? { enable: options.tracking.click.enable } : void 0,
-			open_tracking: options.tracking.open ? { enable: options.tracking.open.enable } : void 0
-		} : void 0,
-		transactional: options.transactional
+		tracking_settings: options.tracking && {
+			click_tracking: options.tracking.click && {
+				custom_domain_name: options.tracking.click.customDomainName,
+				enable: options.tracking.click.enable
+			},
+			open_tracking: options.tracking.open && {
+				custom_domain_name: options.tracking.open.customDomainName,
+				enable: options.tracking.open.enable
+			}
+		},
+		transactional: options.transactional,
+		unsubscribe_settings: options.unsubscribe && { custom_domain_name: options.unsubscribe.customDomainName }
 	};
 };
 var Emails = class {
@@ -424,80 +454,6 @@ const mapDkimKey = (key) => ({
 	status: key.status,
 	statusModifiedAt: key.status_modified_at
 });
-var Domains = class {
-	mailchannels;
-	dkim;
-	constructor(mailchannels) {
-		this.mailchannels = mailchannels;
-		this.dkim = new DomainsDkim(mailchannels);
-	}
-	async check(domain, options) {
-		let error = null;
-		if (!domain) {
-			error = createValidationError("No domain provided.");
-			return {
-				data: null,
-				error
-			};
-		}
-		const dkimOptions = options?.dkim ? Array.isArray(options.dkim) ? options.dkim : [options.dkim] : void 0;
-		if (dkimOptions && dkimOptions.length > 10) {
-			error = createValidationError("A maximum of 10 DKIM settings can be provided.");
-			return {
-				data: null,
-				error
-			};
-		}
-		if (dkimOptions?.find(({ privateKey, selector }) => privateKey && !selector)) {
-			error = createValidationError("DKIM settings with a privateKey must also include a selector.");
-			return {
-				data: null,
-				error
-			};
-		}
-		const payload = {
-			dkim_settings: dkimOptions?.map((dkim) => ({
-				dkim_domain: dkim.domain,
-				dkim_private_key: dkim.privateKey ? stripPemHeaders(dkim.privateKey) : void 0,
-				dkim_selector: dkim.selector
-			})),
-			domain,
-			sender_id: options?.senderId
-		};
-		const response = await this.mailchannels.post("/tx/v1/check-domain", {
-			body: payload,
-			onResponseError: async ({ response }) => {
-				error = getStatusError(response, {
-					[400]: "Bad Request.",
-					[403]: "User does not have access to this feature."
-				});
-			}
-		}).catch((e) => {
-			error ||= getResultError(e, "Failed to check domain.");
-			return null;
-		});
-		if (!response) return {
-			data: null,
-			error
-		};
-		return {
-			data: clean({
-				dkim: response.check_results.dkim.map((dkimResults) => ({
-					domain: dkimResults.dkim_domain,
-					keyStatus: dkimResults.dkim_key_status,
-					selector: dkimResults.dkim_selector,
-					reason: dkimResults.reason,
-					verdict: dkimResults.verdict
-				})),
-				domainLockdown: response.check_results.domain_lockdown,
-				senderDomain: response.check_results.sender_domain,
-				spf: response.check_results.spf,
-				references: response.references
-			}),
-			error: null
-		};
-	}
-};
 var DomainsDkim = class {
 	mailchannels;
 	constructor(mailchannels) {
@@ -524,7 +480,7 @@ var DomainsDkim = class {
 			key_length: options.length,
 			selector: options.selector
 		};
-		const response = await this.mailchannels.post(`/tx/v1/domains/${domain}/dkim-keys`, {
+		const response = await this.mailchannels.post(`/tx/v1/domains/${encodeURIComponent(domain)}/dkim-keys`, {
 			body: payload,
 			onResponseError: async ({ response }) => {
 				error = getStatusError(response, {
@@ -576,7 +532,7 @@ var DomainsDkim = class {
 			limit: options?.limit,
 			include_dns_record: options?.includeDnsRecord
 		};
-		const response = await this.mailchannels.get(`/tx/v1/domains/${domain}/dkim-keys`, {
+		const response = await this.mailchannels.get(`/tx/v1/domains/${encodeURIComponent(domain)}/dkim-keys`, {
 			query: payload,
 			onResponseError: async ({ response }) => {
 				error = getStatusError(response, { [400]: "Bad Request." });
@@ -611,7 +567,7 @@ var DomainsDkim = class {
 			};
 		}
 		const payload = { status: options.status };
-		await this.mailchannels.patch(`/tx/v1/domains/${domain}/dkim-keys/${options.selector}`, {
+		await this.mailchannels.patch(`/tx/v1/domains/${encodeURIComponent(domain)}/dkim-keys/${encodeURIComponent(options.selector)}`, {
 			body: payload,
 			onResponseError: async ({ response }) => {
 				error = getStatusError(response, {
@@ -651,7 +607,7 @@ var DomainsDkim = class {
 			};
 		}
 		const payload = { new_key: { selector: options.newKey.selector } };
-		const response = await this.mailchannels.post(`/tx/v1/domains/${domain}/dkim-keys/${selector}/rotate`, {
+		const response = await this.mailchannels.post(`/tx/v1/domains/${encodeURIComponent(domain)}/dkim-keys/${encodeURIComponent(selector)}/rotate`, {
 			body: payload,
 			onResponseError: async ({ response }) => {
 				error = getStatusError(response, {
@@ -677,118 +633,33 @@ var DomainsDkim = class {
 		};
 	}
 };
-const HMAC_SHA256 = {
-	name: "HMAC",
-	hash: "SHA-256"
-};
-const ED25519 = {
-	name: "Ed25519",
-	namedCurve: "Ed25519"
-};
-const encoder = new TextEncoder();
-const HEADER_CONTENT_DIGEST = "content-digest";
-const HEADER_SIGNATURE = "signature";
-const HEADER_SIGNATURE_INPUT = "signature-input";
-const signingKeyCache = /* @__PURE__ */ new Map();
-const validateContentDigest = async (header, body) => {
-	const match = header.match(/^(.*?)=:(.*?):$/);
-	if (!match) return false;
-	const [, algorithm, hash] = match;
-	if (!algorithm || !hash) return false;
-	const normalizedAlgorithm = algorithm.replace("-", "").toLowerCase();
-	if (!["sha256"].includes(normalizedAlgorithm)) return false;
-	const signatureBuffer = await subtle.digest(HMAC_SHA256.hash, encoder.encode(body));
-	return Buffer.from(signatureBuffer).toString("base64") === hash;
-};
-const extractSignature = (signatureHeader) => {
-	const signatureMatch = signatureHeader.match(/sig_\d+=:([^:]+):/);
-	return signatureMatch && signatureMatch[1] ? signatureMatch[1] : null;
-};
-const extractInputValues = (header) => {
-	const match = header.match(/^(\w+)=\(([^)]+)\);created=(\d+);alg="([^"]+)";keyid="([^"]+)"$/);
-	if (!match) return null;
-	return {
-		name: match[1],
-		timestamp: Number.parseInt(match[3], 10),
-		algorithm: match[4],
-		keyId: match[5]
-	};
-};
-async function isValidWebhook(options) {
-	const { payload, headers, cache = true } = options;
-	const contentDigest = headers[HEADER_CONTENT_DIGEST];
-	const messageSignature = headers[HEADER_SIGNATURE];
-	const signatureInput = headers[HEADER_SIGNATURE_INPUT];
-	if (!payload || !contentDigest || !messageSignature || !signatureInput || !await validateContentDigest(contentDigest, payload)) return false;
-	const signature = extractSignature(messageSignature);
-	if (!signature) return false;
-	const values = extractInputValues(signatureInput);
-	if (!values) return false;
-	if (Math.floor(Date.now() / 1e3) - values.timestamp > 300) return false;
-	const signingString = `"content-digest": ${contentDigest}
-"@signature-params": ("content-digest");created=${values.timestamp};alg="${values.algorithm}";keyid="${values.keyId}"`;
-	let publicKey = options.publicKey;
-	if (!publicKey && values.keyId) {
-		if (cache) publicKey = signingKeyCache.get(values.keyId);
-		if (!publicKey) {
-			const publicKeyResponse = await $fetch("/tx/v1/webhook/public-key", {
-				baseURL: "https://api.mailchannels.net",
-				query: { id: values.keyId }
-			}).catch(() => null);
-			if (!publicKeyResponse) return false;
-			publicKey = publicKeyResponse.key;
-			if (cache && publicKey) signingKeyCache.set(values.keyId, publicKey);
-		}
-	}
-	if (!publicKey) return false;
-	publicKey = stripPemHeaders(publicKey);
-	const encoding = "base64";
-	const format = "spki";
-	const publicKeyBuffer = Buffer.from(publicKey, encoding);
-	const webhookSignatureBuffer = Buffer.from(signature, encoding);
-	const key = await subtle.importKey(format, publicKeyBuffer, ED25519, false, ["verify"]);
-	return subtle.verify(ED25519.name, key, webhookSignatureBuffer, encoder.encode(signingString));
-}
-var Webhooks = class Webhooks {
+var DomainsCustomTracking = class DomainsCustomTracking {
 	mailchannels;
+	static SCOPE_VALUES = /* @__PURE__ */ new Set([
+		"click",
+		"open",
+		"unsubscribe"
+	]);
 	constructor(mailchannels) {
 		this.mailchannels = mailchannels;
 	}
-	async create(endpoint) {
+	async list(options) {
 		let error = null;
-		if (!endpoint) {
-			error = createValidationError("No endpoint provided.");
-			return {
-				success: false,
-				error
-			};
-		}
-		if (endpoint.length > 8e3) {
-			error = createValidationError("The endpoint exceeds the maximum length of 8000 characters.");
-			return {
-				success: false,
-				error
-			};
-		}
-		await this.mailchannels.post("/tx/v1/webhook", {
-			query: { endpoint },
-			onResponseError: async ({ response }) => {
-				error = getStatusError(response, { [409]: `Endpoint '${endpoint}' is already enrolled to receive notifications.` });
-			}
-		}).catch((e) => {
-			error ||= getResultError(e, "Failed to create webhook.");
+		error = validatePagination({
+			...options,
+			max: 1e3
 		});
-		return {
-			success: !error,
+		if (error) return {
+			data: null,
 			error
 		};
-	}
-	async list() {
-		let error = null;
-		const response = await this.mailchannels.get("/tx/v1/webhook", { onResponseError: async ({ response }) => {
-			error = getStatusError(response);
-		} }).catch((e) => {
-			error ||= getResultError(e, "Failed to fetch webhooks.");
+		const response = await this.mailchannels.get("/tx/v1/custom-tracking-domains", {
+			query: options,
+			onResponseError: async ({ response }) => {
+				error = getStatusError(response, { [400]: "Bad Request." });
+			}
+		}).catch((e) => {
+			error ||= getResultError(e, "Failed to fetch custom tracking domains.");
 			return null;
 		});
 		if (!response) return {
@@ -796,68 +667,489 @@ var Webhooks = class Webhooks {
 			error
 		};
 		return {
-			data: clean(response.map((webhooks) => ({ webhook: webhooks.webhook }))),
+			data: clean({
+				customTrackingDomains: response.custom_tracking_domains.map((d) => ({
+					name: d.name,
+					hostname: d.hostname,
+					scope: d.scope,
+					status: d.status,
+					createdAt: d.created_at
+				})),
+				total: response.total
+			}),
 			error: null
 		};
 	}
-	async deleteAll() {
+	async create(name, hostname, scope) {
 		let error = null;
-		await this.mailchannels.delete("/tx/v1/webhook", { onResponseError: async ({ response }) => {
-			error = getStatusError(response);
-		} }).catch((e) => {
-			error ||= getResultError(e, "Failed to delete webhooks.");
-		});
-		return {
-			success: !error,
+		error = validateCustomTrackingName(name);
+		if (error) return {
+			data: null,
 			error
 		};
-	}
-	async getSigningKey(id) {
-		let error = null;
-		const response = await this.mailchannels.get("/tx/v1/webhook/public-key", {
-			query: { id },
+		if (!hostname) {
+			error = createValidationError("Hostname is required.");
+			return {
+				data: null,
+				error
+			};
+		}
+		if (!scope || !DomainsCustomTracking.SCOPE_VALUES.has(scope)) {
+			error = createValidationError("Scope must be one of 'click', 'open', or 'unsubscribe'.");
+			return {
+				data: null,
+				error
+			};
+		}
+		const payload = {
+			name,
+			hostname,
+			scope
+		};
+		let statusCode = null;
+		const response = await this.mailchannels.post("/tx/v1/custom-tracking-domains", {
+			body: payload,
+			onResponse: async ({ response }) => {
+				statusCode = response.status;
+			},
 			onResponseError: async ({ response }) => {
 				error = getStatusError(response, {
-					[400]: "Bad Request.",
-					[404]: `The key '${id}' is not found.`
+					[400]: "Invalid request body.",
+					[403]: "No permission to register this domain.",
+					[409]: "A domain with the same name already exists, or the hostname and scope combination is already registered.",
+					[422]: "DNS verification incomplete. Either the TXT ownership record has not propagated yet or the hostname CNAME does not point to the required target."
 				});
 			}
 		}).catch((e) => {
-			error ||= getResultError(e, "Failed to get signing key.");
+			error ||= getResultError(e, "Failed to create custom tracking domain.");
 			return null;
 		});
 		if (!response) return {
 			data: null,
 			error
 		};
+		if (statusCode === 202) {
+			const dnsSetupRequiredResponse = response;
+			return {
+				data: clean({
+					dnsSetupRequired: true,
+					token: dnsSetupRequiredResponse.token,
+					txtRecordName: dnsSetupRequiredResponse.txt_record_name,
+					txtRecordValue: dnsSetupRequiredResponse.txt_record_value,
+					instructions: dnsSetupRequiredResponse.instructions
+				}),
+				error: null
+			};
+		}
+		const createResponse = response;
 		return {
 			data: clean({
-				id: response.id,
-				key: response.key
+				dnsSetupRequired: false,
+				name: createResponse.name,
+				hostname: createResponse.hostname,
+				scope: createResponse.scope,
+				status: createResponse.status,
+				createdAt: createResponse.created_at
 			}),
 			error: null
 		};
 	}
-	async validate(requestId) {
+	async update(hostname, scope, options) {
 		let error = null;
-		if (requestId && requestId.length > 28) {
-			error = createValidationError("The request id should not exceed 28 characters.");
+		if (!hostname) {
+			error = createValidationError("Hostname is required.");
 			return {
 				data: null,
 				error
 			};
 		}
-		const response = await this.mailchannels.post("/tx/v1/webhook/validate", {
-			body: { request_id: requestId },
-			onResponseError: async ({ response }) => {
-				error = getStatusError(response, {
-					[400]: "Bad Request.",
-					[404]: "No webhooks found for the account."
-				});
-			}
-		}).catch((e) => {
-			error ||= getResultError(e, "Failed to validate webhooks.");
-			return null;
+		if (!scope || !DomainsCustomTracking.SCOPE_VALUES.has(scope)) {
+			error = createValidationError("Scope must be one of 'click', 'open', or 'unsubscribe'.");
+			return {
+				data: null,
+				error
+			};
+		}
+		if (options.name !== void 0) {
+			error = validateCustomTrackingName(options.name);
+			if (error) return {
+				data: null,
+				error
+			};
+		}
+		if (options.name === void 0 && options.status === void 0) {
+			error = createValidationError("At least one of 'name' or 'status' must be provided.");
+			return {
+				data: null,
+				error
+			};
+		}
+		const payload = {
+			name: options.name,
+			status: options.status
+		};
+		let statusCode = null;
+		const response = await this.mailchannels.patch(`/tx/v1/custom-tracking-domains/${encodeURIComponent(hostname)}/${encodeURIComponent(scope)}`, {
+			body: payload,
+			onResponse: async ({ response }) => {
+				statusCode = response.status;
+			},
+			onResponseError: async ({ response }) => {
+				error = getStatusError(response, {
+					[400]: "Bad Request.",
+					[403]: "No permission to update this domain.",
+					[404]: `Custom tracking domain for hostname '${hostname}' and scope '${scope}' not found.`,
+					[409]: "Name already used by another domain.",
+					[422]: "DNS verification incomplete. Either the TXT ownership record has not propagated yet or the hostname CNAME does not point to the required target."
+				});
+			}
+		}).catch((e) => {
+			error ||= getResultError(e, "Failed to update custom tracking domain.");
+			return null;
+		});
+		if (!response) return {
+			data: null,
+			error
+		};
+		if (statusCode === 202) {
+			const dnsSetupRequiredResponse = response;
+			return {
+				data: clean({
+					dnsSetupRequired: true,
+					token: dnsSetupRequiredResponse.token,
+					txtRecordName: dnsSetupRequiredResponse.txt_record_name,
+					txtRecordValue: dnsSetupRequiredResponse.txt_record_value,
+					instructions: dnsSetupRequiredResponse.instructions
+				}),
+				error: null
+			};
+		}
+		const updateResponse = response;
+		return {
+			data: clean({
+				dnsSetupRequired: false,
+				name: updateResponse.name,
+				hostname: updateResponse.hostname,
+				scope: updateResponse.scope,
+				status: updateResponse.status,
+				createdAt: updateResponse.created_at
+			}),
+			error: null
+		};
+	}
+	async delete(hostname, scope) {
+		let error = null;
+		if (!hostname) {
+			error = createValidationError("Hostname is required.");
+			return {
+				success: false,
+				error
+			};
+		}
+		if (!scope || !DomainsCustomTracking.SCOPE_VALUES.has(scope)) {
+			error = createValidationError("Scope must be one of 'click', 'open', or 'unsubscribe'.");
+			return {
+				success: false,
+				error
+			};
+		}
+		await this.mailchannels.delete(`/tx/v1/custom-tracking-domains/${encodeURIComponent(hostname)}/${encodeURIComponent(scope)}`, { onResponseError: async ({ response }) => {
+			error = getStatusError(response, { [400]: "Invalid hostname or scope value" });
+		} }).catch((e) => {
+			error ||= getResultError(e, "Failed to delete custom tracking domain.");
+		});
+		return {
+			success: !error,
+			error
+		};
+	}
+};
+var Domains = class {
+	mailchannels;
+	dkim;
+	customTracking;
+	constructor(mailchannels) {
+		this.mailchannels = mailchannels;
+		this.dkim = new DomainsDkim(mailchannels);
+		this.customTracking = new DomainsCustomTracking(mailchannels);
+	}
+	async check(domain, options) {
+		let error = null;
+		if (!domain) {
+			error = createValidationError("No domain provided.");
+			return {
+				data: null,
+				error
+			};
+		}
+		const dkimOptions = options?.dkim ? Array.isArray(options.dkim) ? options.dkim : [options.dkim] : void 0;
+		if (dkimOptions && dkimOptions.length > 10) {
+			error = createValidationError("A maximum of 10 DKIM settings can be provided.");
+			return {
+				data: null,
+				error
+			};
+		}
+		if (dkimOptions?.find(({ privateKey, selector }) => privateKey && !selector)) {
+			error = createValidationError("DKIM settings with a privateKey must also include a selector.");
+			return {
+				data: null,
+				error
+			};
+		}
+		const payload = {
+			dkim_settings: dkimOptions?.map((dkim) => ({
+				dkim_domain: dkim.domain,
+				dkim_private_key: dkim.privateKey ? stripPemHeaders(dkim.privateKey) : void 0,
+				dkim_selector: dkim.selector
+			})),
+			domain,
+			sender_id: options?.senderId
+		};
+		const response = await this.mailchannels.post("/tx/v1/check-domain", {
+			body: payload,
+			onResponseError: async ({ response }) => {
+				error = getStatusError(response, {
+					[400]: "Bad Request.",
+					[403]: "User does not have access to this feature."
+				});
+			}
+		}).catch((e) => {
+			error ||= getResultError(e, "Failed to check domain.");
+			return null;
+		});
+		if (!response) return {
+			data: null,
+			error
+		};
+		return {
+			data: clean({
+				dkim: response.check_results.dkim.map((dkimResults) => ({
+					domain: dkimResults.dkim_domain,
+					keyStatus: dkimResults.dkim_key_status,
+					selector: dkimResults.dkim_selector,
+					reason: dkimResults.reason,
+					verdict: dkimResults.verdict
+				})),
+				domainLockdown: response.check_results.domain_lockdown,
+				senderDomain: response.check_results.sender_domain,
+				spf: response.check_results.spf,
+				references: response.references
+			}),
+			error: null
+		};
+	}
+};
+const HMAC_SHA256 = {
+	name: "HMAC",
+	hash: "SHA-256"
+};
+const ED25519 = {
+	name: "Ed25519",
+	namedCurve: "Ed25519"
+};
+const encoder = new TextEncoder();
+const HEADER_CONTENT_DIGEST = "content-digest";
+const HEADER_SIGNATURE = "signature";
+const HEADER_SIGNATURE_INPUT = "signature-input";
+const signingKeyCache = /* @__PURE__ */ new Map();
+const validateContentDigest = async (header, body) => {
+	const match = header.match(/^(.*?)=:(.*?):$/);
+	if (!match) return false;
+	const [, algorithm, hash] = match;
+	if (!algorithm || !hash) return false;
+	const normalizedAlgorithm = algorithm.replace("-", "").toLowerCase();
+	if (!["sha256"].includes(normalizedAlgorithm)) return false;
+	const signatureBuffer = await subtle.digest(HMAC_SHA256.hash, encoder.encode(body));
+	return Buffer.from(signatureBuffer).toString("base64") === hash;
+};
+const extractSignature = (signatureHeader) => {
+	const signatureMatch = signatureHeader.match(/sig_\d+=:([^:]+):/);
+	return signatureMatch && signatureMatch[1] ? signatureMatch[1] : null;
+};
+const extractInputValues = (header) => {
+	const match = header.match(/^(\w+)=\(([^)]+)\);created=(\d+);alg="([^"]+)";keyid="([^"]+)"$/);
+	if (!match) return null;
+	return {
+		name: match[1],
+		timestamp: Number.parseInt(match[3], 10),
+		algorithm: match[4],
+		keyId: match[5]
+	};
+};
+async function isValidWebhook(options) {
+	const { payload, headers, cache = true } = options;
+	const contentDigest = headers[HEADER_CONTENT_DIGEST];
+	const messageSignature = headers[HEADER_SIGNATURE];
+	const signatureInput = headers[HEADER_SIGNATURE_INPUT];
+	if (!payload || !contentDigest || !messageSignature || !signatureInput || !await validateContentDigest(contentDigest, payload)) return false;
+	const signature = extractSignature(messageSignature);
+	if (!signature) return false;
+	const values = extractInputValues(signatureInput);
+	if (!values) return false;
+	if (Math.floor(Date.now() / 1e3) - values.timestamp > 300) return false;
+	const signingString = `"content-digest": ${contentDigest}
+"@signature-params": ("content-digest");created=${values.timestamp};alg="${values.algorithm}";keyid="${values.keyId}"`;
+	let publicKey = options.publicKey;
+	if (!publicKey && values.keyId) {
+		if (cache) publicKey = signingKeyCache.get(values.keyId);
+		if (!publicKey) {
+			const publicKeyResponse = await $fetch("/tx/v1/webhook/public-key", {
+				baseURL: "https://api.mailchannels.net",
+				query: { id: values.keyId }
+			}).catch(() => null);
+			if (!publicKeyResponse) return false;
+			publicKey = publicKeyResponse.key;
+			if (cache && publicKey) signingKeyCache.set(values.keyId, publicKey);
+		}
+	}
+	if (!publicKey) return false;
+	publicKey = stripPemHeaders(publicKey);
+	const encoding = "base64";
+	const format = "spki";
+	const publicKeyBuffer = Buffer.from(publicKey, encoding);
+	const webhookSignatureBuffer = Buffer.from(signature, encoding);
+	const key = await subtle.importKey(format, publicKeyBuffer, ED25519, false, ["verify"]);
+	return subtle.verify(ED25519.name, key, webhookSignatureBuffer, encoder.encode(signingString));
+}
+const ISO_DATE_REGEX = /^\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:?\d{2})$/;
+const ISO_DATE_ONLY_REGEX = /^\d{4}-\d{2}-\d{2}$/;
+const formatDateInput = (value) => {
+	if (value instanceof Date) {
+		if (Number.isNaN(value.getTime())) return null;
+		return value.toISOString();
+	}
+	if (typeof value === "string") {
+		if (!ISO_DATE_REGEX.test(value) && !ISO_DATE_ONLY_REGEX.test(value) || Number.isNaN(Date.parse(value))) return null;
+		if (ISO_DATE_REGEX.test(value)) return new Date(value).toISOString();
+	}
+	return value;
+};
+const parseDateInputs = (options) => {
+	const dates = {};
+	const keys = Object.keys(options);
+	for (const key of keys) {
+		const formatted = formatDateInput(options?.[key]);
+		if (formatted === null) return {
+			dates: null,
+			error: createValidationError(`The '${key}' value is not a valid date.`)
+		};
+		dates[key] = formatted;
+	}
+	return {
+		dates,
+		error: null
+	};
+};
+var Webhooks = class Webhooks {
+	mailchannels;
+	constructor(mailchannels) {
+		this.mailchannels = mailchannels;
+	}
+	async create(endpoint) {
+		let error = null;
+		if (!endpoint) {
+			error = createValidationError("No endpoint provided.");
+			return {
+				success: false,
+				error
+			};
+		}
+		if (endpoint.length > 8e3) {
+			error = createValidationError("The endpoint exceeds the maximum length of 8000 characters.");
+			return {
+				success: false,
+				error
+			};
+		}
+		await this.mailchannels.post("/tx/v1/webhook", {
+			query: { endpoint },
+			onResponseError: async ({ response }) => {
+				error = getStatusError(response, { [409]: `Endpoint '${endpoint}' is already enrolled to receive notifications.` });
+			}
+		}).catch((e) => {
+			error ||= getResultError(e, "Failed to create webhook.");
+		});
+		return {
+			success: !error,
+			error
+		};
+	}
+	async list() {
+		let error = null;
+		const response = await this.mailchannels.get("/tx/v1/webhook", { onResponseError: async ({ response }) => {
+			error = getStatusError(response);
+		} }).catch((e) => {
+			error ||= getResultError(e, "Failed to fetch webhooks.");
+			return null;
+		});
+		if (!response) return {
+			data: null,
+			error
+		};
+		return {
+			data: clean(response.map((webhooks) => ({ webhook: webhooks.webhook }))),
+			error: null
+		};
+	}
+	async deleteAll() {
+		let error = null;
+		await this.mailchannels.delete("/tx/v1/webhook", { onResponseError: async ({ response }) => {
+			error = getStatusError(response);
+		} }).catch((e) => {
+			error ||= getResultError(e, "Failed to delete webhooks.");
+		});
+		return {
+			success: !error,
+			error
+		};
+	}
+	async getSigningKey(id) {
+		let error = null;
+		const response = await this.mailchannels.get("/tx/v1/webhook/public-key", {
+			query: { id },
+			onResponseError: async ({ response }) => {
+				error = getStatusError(response, {
+					[400]: "Bad Request.",
+					[404]: `The key '${id}' is not found.`
+				});
+			}
+		}).catch((e) => {
+			error ||= getResultError(e, "Failed to get signing key.");
+			return null;
+		});
+		if (!response) return {
+			data: null,
+			error
+		};
+		return {
+			data: clean({
+				id: response.id,
+				key: response.key
+			}),
+			error: null
+		};
+	}
+	async validate(requestId) {
+		let error = null;
+		if (requestId && requestId.length > 28) {
+			error = createValidationError("The request id should not exceed 28 characters.");
+			return {
+				data: null,
+				error
+			};
+		}
+		const response = await this.mailchannels.post("/tx/v1/webhook/validate", {
+			body: { request_id: requestId },
+			onResponseError: async ({ response }) => {
+				error = getStatusError(response, {
+					[400]: "Bad Request.",
+					[404]: "No webhooks found for the account."
+				});
+			}
+		}).catch((e) => {
+			error ||= getResultError(e, "Failed to validate webhooks.");
+			return null;
 		});
 		if (!response) return {
 			data: null,
@@ -936,17 +1228,17 @@ var Webhooks = class Webhooks {
 			data: null,
 			error: createValidationError("Status filters must be unique.")
 		};
-		if (options?.createdAfter && Number.isNaN(Date.parse(options.createdAfter))) return {
-			data: null,
-			error: createValidationError("createdAfter must be a valid date string.")
-		};
-		if (options?.createdBefore && Number.isNaN(Date.parse(options.createdBefore))) return {
+		const { dates, error: dateError } = parseDateInputs({
+			createdAfter: options?.createdAfter,
+			createdBefore: options?.createdBefore
+		});
+		if (!dates || dateError) return {
 			data: null,
-			error: createValidationError("createdBefore must be a valid date string.")
+			error: dateError
 		};
-		if (options?.createdAfter && options?.createdBefore) {
-			const createdAfter = Date.parse(options.createdAfter);
-			const createdBefore = Date.parse(options.createdBefore);
+		if (dates.createdAfter && dates.createdBefore) {
+			const createdAfter = Date.parse(dates.createdAfter);
+			const createdBefore = Date.parse(dates.createdBefore);
 			const maxRangeMs = 744 * 60 * 60 * 1e3;
 			if (createdBefore <= createdAfter) return {
 				data: null,
@@ -959,8 +1251,8 @@ var Webhooks = class Webhooks {
 		}
 		const response = await this.mailchannels.get("/tx/v1/webhook-batch", {
 			query: {
-				created_after: options?.createdAfter,
-				created_before: options?.createdBefore,
+				created_after: dates.createdAfter,
+				created_before: dates.createdBefore,
 				statuses: options?.statuses,
 				webhook: options?.webhook,
 				limit: options?.limit,
@@ -972,200 +1264,60 @@ var Webhooks = class Webhooks {
 		}).catch((e) => {
 			error ||= getResultError(e, "Failed to fetch webhook batches.");
 			return null;
-		});
-		if (!response) return {
-			data: null,
-			error
-		};
-		return {
-			data: clean(response.webhook_batches.map((batch) => ({
-				batchId: batch.batch_id,
-				createdAt: batch.created_at,
-				customerHandle: batch.customer_handle,
-				duration: batch.duration,
-				eventCount: batch.event_count,
-				status: batch.status,
-				statusCode: batch.status_code,
-				webhook: batch.webhook
-			}))),
-			error: null
-		};
-	}
-	async resendBatch(batchId) {
-		let error = null;
-		const response = await this.mailchannels.post(`/tx/v1/webhook-batch/${batchId}/resend`, { onResponseError: async ({ response }) => {
-			error = getStatusError(response, {
-				[400]: "Bad Request. The batch ID is invalid.",
-				[404]: `The batch '${batchId}' is not found for the customer.`
-			});
-		} }).catch((e) => {
-			error ||= getResultError(e, "Failed to resend webhook batch.");
-			return null;
-		});
-		if (!response) return {
-			data: null,
-			error
-		};
-		return {
-			data: clean({
-				batchId: response.batch_id,
-				customerHandle: response.customer_handle,
-				webhook: response.webhook,
-				createdAt: response.created_at,
-				eventCount: response.event_count,
-				duration: response.duration_in_ms,
-				statusCode: response.status_code
-			}),
-			error: null
-		};
-	}
-};
-var SubAccounts = class SubAccounts {
-	mailchannels;
-	static COMPANY_PATTERN = /^.{3,128}$/;
-	static HANDLE_PATTERN = /^[a-z0-9]{3,128}$/;
-	constructor(mailchannels) {
-		this.mailchannels = mailchannels;
-	}
-	async create(companyName, handle) {
-		let error = null;
-		if (!SubAccounts.COMPANY_PATTERN.test(companyName)) {
-			error = createValidationError("Invalid company name. Company name must be between 3 and 128 characters.");
-			return {
-				data: null,
-				error
-			};
-		}
-		if (handle) {
-			if (!SubAccounts.HANDLE_PATTERN.test(handle)) {
-				error = createValidationError("Invalid handle. Sub-account handle must be between 3 and 128 characters and contain only lowercase letters and numbers.");
-				return {
-					data: null,
-					error
-				};
-			}
-		}
-		const response = await this.mailchannels.post("/tx/v1/sub-account", {
-			body: {
-				company_name: companyName,
-				handle
-			},
-			onResponseError: async ({ response }) => {
-				error = getStatusError(response, {
-					[403]: "The parent account does not have permission to create sub-accounts.",
-					[409]: `Sub-account with handle '${handle}' already exists.`
-				});
-			}
-		}).catch((e) => {
-			error ||= getResultError(e, "Failed to create sub-account.");
-			return null;
-		});
-		if (!response) return {
-			data: null,
-			error
-		};
-		return {
-			data: clean({
-				companyName: response.company_name,
-				enabled: response.enabled,
-				handle: response.handle
-			}),
-			error: null
-		};
-	}
-	async list(options) {
-		let error = null;
-		error = validatePagination({
-			...options,
-			max: 1e3
-		});
-		if (error) return {
-			data: null,
-			error
-		};
-		const response = await this.mailchannels.get("/tx/v1/sub-account", {
-			query: options,
-			onResponseError: async ({ response }) => {
-				error = getStatusError(response);
-			}
-		}).catch((e) => {
-			error ||= getResultError(e, "Failed to fetch sub-accounts.");
-			return null;
-		});
-		if (!response) return {
-			data: null,
-			error
-		};
-		return {
-			data: clean(response.map((account) => ({
-				companyName: account.company_name,
-				enabled: account.enabled,
-				handle: account.handle
-			}))),
-			error: null
-		};
-	}
-	async delete(handle) {
-		let error = null;
-		if (!handle) {
-			error = createValidationError("No handle provided.");
-			return {
-				success: false,
-				error
-			};
-		}
-		await this.mailchannels.delete(`/tx/v1/sub-account/${handle}`, { onResponseError: async ({ response }) => {
-			error = getStatusError(response);
-		} }).catch((e) => {
-			error ||= getResultError(e, "Failed to delete sub-account.");
-		});
-		return {
-			success: !error,
+		});
+		if (!response) return {
+			data: null,
 			error
 		};
-	}
-	async suspend(handle) {
-		let error = null;
-		if (!handle) {
-			error = createValidationError("No handle provided.");
-			return {
-				success: false,
-				error
-			};
-		}
-		await this.mailchannels.post(`/tx/v1/sub-account/${handle}/suspend`, { onResponseError: async ({ response }) => {
-			error = getStatusError(response, { [404]: `The specified sub-account '${handle}' does not exist.` });
-		} }).catch((e) => {
-			error ||= getResultError(e, "Failed to suspend sub-account.");
-		});
 		return {
-			success: !error,
-			error
+			data: clean(response.webhook_batches.map((batch) => ({
+				batchId: batch.batch_id,
+				createdAt: batch.created_at,
+				customerHandle: batch.customer_handle,
+				duration: batch.duration,
+				eventCount: batch.event_count,
+				status: batch.status,
+				statusCode: batch.status_code,
+				webhook: batch.webhook
+			}))),
+			error: null
 		};
 	}
-	async activate(handle) {
+	async resendBatch(batchId) {
 		let error = null;
-		if (!handle) {
-			error = createValidationError("No handle provided.");
-			return {
-				success: false,
-				error
-			};
-		}
-		await this.mailchannels.post(`/tx/v1/sub-account/${handle}/activate`, { onResponseError: async ({ response }) => {
+		const response = await this.mailchannels.post(`/tx/v1/webhook-batch/${encodeURIComponent(batchId)}/resend`, { onResponseError: async ({ response }) => {
 			error = getStatusError(response, {
-				[403]: "The parent account does not have permission to activate the sub-account.",
-				[404]: `The specified sub-account '${handle}' does not exist.`
+				[400]: "Bad Request. The batch ID is invalid.",
+				[404]: `The batch '${batchId}' is not found for the customer.`
 			});
 		} }).catch((e) => {
-			error ||= getResultError(e, "Failed to activate sub-account.");
+			error ||= getResultError(e, "Failed to resend webhook batch.");
+			return null;
 		});
-		return {
-			success: !error,
+		if (!response) return {
+			data: null,
 			error
 		};
+		return {
+			data: clean({
+				batchId: response.batch_id,
+				customerHandle: response.customer_handle,
+				webhook: response.webhook,
+				createdAt: response.created_at,
+				eventCount: response.event_count,
+				duration: response.duration_in_ms,
+				statusCode: response.status_code
+			}),
+			error: null
+		};
+	}
+};
+var SubAccountsApiKeys = class {
+	mailchannels;
+	constructor(mailchannels) {
+		this.mailchannels = mailchannels;
 	}
-	async createApiKey(handle) {
+	async create(handle) {
 		let error = null;
 		if (!handle) {
 			error = createValidationError("No handle provided.");
@@ -1174,7 +1326,7 @@ var SubAccounts = class SubAccounts {
 				error
 			};
 		}
-		const response = await this.mailchannels.post(`/tx/v1/sub-account/${handle}/api-key`, { onResponseError: async ({ response }) => {
+		const response = await this.mailchannels.post(`/tx/v1/sub-account/${encodeURIComponent(handle)}/api-key`, { onResponseError: async ({ response }) => {
 			error = getStatusError(response, {
 				[403]: "You can't create API keys for this sub-account.",
 				[404]: `Sub-account with handle '${handle}' not found.`,
@@ -1193,7 +1345,7 @@ var SubAccounts = class SubAccounts {
 			error: null
 		};
 	}
-	async listApiKeys(handle, options) {
+	async list(handle, options) {
 		let error = null;
 		if (!handle) {
 			error = createValidationError("No handle provided.");
@@ -1210,9 +1362,12 @@ var SubAccounts = class SubAccounts {
 			data: null,
 			error
 		};
-		const response = await this.mailchannels.get(`/tx/v1/sub-account/${handle}/api-key`, { onResponseError: async ({ response }) => {
-			error = getStatusError(response, { [404]: `Sub-account with handle '${handle}' not found.` });
-		} }).catch((e) => {
+		const response = await this.mailchannels.get(`/tx/v1/sub-account/${encodeURIComponent(handle)}/api-key`, {
+			query: options,
+			onResponseError: async ({ response }) => {
+				error = getStatusError(response, { [404]: `Sub-account with handle '${handle}' not found.` });
+			}
+		}).catch((e) => {
 			error ||= getResultError(e, "Failed to fetch sub-account API keys.");
 			return null;
 		});
@@ -1228,7 +1383,7 @@ var SubAccounts = class SubAccounts {
 			error: null
 		};
 	}
-	async deleteApiKey(handle, id) {
+	async delete(handle, id) {
 		let error = null;
 		if (!handle) {
 			error = createValidationError("No handle provided.");
@@ -1237,7 +1392,7 @@ var SubAccounts = class SubAccounts {
 				error
 			};
 		}
-		await this.mailchannels.delete(`/tx/v1/sub-account/${handle}/api-key/${id}`, { onResponseError: async ({ response }) => {
+		await this.mailchannels.delete(`/tx/v1/sub-account/${encodeURIComponent(handle)}/api-key/${encodeURIComponent(id)}`, { onResponseError: async ({ response }) => {
 			error = getStatusError(response, { [400]: "Missing or invalid API key ID." });
 		} }).catch((e) => {
 			error ||= getResultError(e, "Failed to delete sub-account API key.");
@@ -1247,7 +1402,13 @@ var SubAccounts = class SubAccounts {
 			error
 		};
 	}
-	async createSmtpPassword(handle) {
+};
+var SubAccountsSmtpPasswords = class {
+	mailchannels;
+	constructor(mailchannels) {
+		this.mailchannels = mailchannels;
+	}
+	async create(handle) {
 		let error = null;
 		if (!handle) {
 			error = createValidationError("No handle provided.");
@@ -1256,7 +1417,7 @@ var SubAccounts = class SubAccounts {
 				error
 			};
 		}
-		const response = await this.mailchannels.post(`/tx/v1/sub-account/${handle}/smtp-password`, { onResponseError: async ({ response }) => {
+		const response = await this.mailchannels.post(`/tx/v1/sub-account/${encodeURIComponent(handle)}/smtp-password`, { onResponseError: async ({ response }) => {
 			error = getStatusError(response, {
 				[403]: "You can't create SMTP passwords for this sub-account.",
 				[404]: `Sub-account with handle '${handle}' not found.`,
@@ -1279,7 +1440,7 @@ var SubAccounts = class SubAccounts {
 			error: null
 		};
 	}
-	async listSmtpPasswords(handle) {
+	async list(handle) {
 		let error = null;
 		if (!handle) {
 			error = createValidationError("No handle provided.");
@@ -1288,7 +1449,7 @@ var SubAccounts = class SubAccounts {
 				error
 			};
 		}
-		const response = await this.mailchannels.get(`/tx/v1/sub-account/${handle}/smtp-password`, { onResponseError: async ({ response }) => {
+		const response = await this.mailchannels.get(`/tx/v1/sub-account/${encodeURIComponent(handle)}/smtp-password`, { onResponseError: async ({ response }) => {
 			error = getStatusError(response, { [404]: `Sub-account with handle '${handle}' not found.` });
 		} }).catch((e) => {
 			error ||= getResultError(e, "Failed to fetch sub-account SMTP passwords.");
@@ -1307,7 +1468,7 @@ var SubAccounts = class SubAccounts {
 			error: null
 		};
 	}
-	async deleteSmtpPassword(handle, id) {
+	async delete(handle, id) {
 		let error = null;
 		if (!handle) {
 			error = createValidationError("No handle provided.");
@@ -1316,7 +1477,7 @@ var SubAccounts = class SubAccounts {
 				error
 			};
 		}
-		await this.mailchannels.delete(`/tx/v1/sub-account/${handle}/smtp-password/${id}`, { onResponseError: async ({ response }) => {
+		await this.mailchannels.delete(`/tx/v1/sub-account/${encodeURIComponent(handle)}/smtp-password/${encodeURIComponent(id)}`, { onResponseError: async ({ response }) => {
 			error = getStatusError(response, { [400]: "Missing or invalid SMTP password ID." });
 		} }).catch((e) => {
 			error ||= getResultError(e, "Failed to delete sub-account SMTP password.");
@@ -1326,7 +1487,13 @@ var SubAccounts = class SubAccounts {
 			error
 		};
 	}
-	async getLimit(handle) {
+};
+var SubAccountsLimits = class {
+	mailchannels;
+	constructor(mailchannels) {
+		this.mailchannels = mailchannels;
+	}
+	async get(handle) {
 		let error = null;
 		if (!handle) {
 			error = createValidationError("No handle provided.");
@@ -1335,7 +1502,7 @@ var SubAccounts = class SubAccounts {
 				error
 			};
 		}
-		const response = await this.mailchannels.get(`/tx/v1/sub-account/${handle}/limit`, { onResponseError: async ({ response }) => {
+		const response = await this.mailchannels.get(`/tx/v1/sub-account/${encodeURIComponent(handle)}/limit`, { onResponseError: async ({ response }) => {
 			error = getStatusError(response, { [404]: `Sub-account with handle '${handle}' not found.` });
 		} }).catch((e) => {
 			error ||= getResultError(e, "Failed to fetch sub-account limit.");
@@ -1350,7 +1517,7 @@ var SubAccounts = class SubAccounts {
 			error: null
 		};
 	}
-	async setLimit(handle, limit) {
+	async set(handle, options) {
 		let error = null;
 		if (!handle) {
 			error = createValidationError("No handle provided.");
@@ -1359,15 +1526,15 @@ var SubAccounts = class SubAccounts {
 				error
 			};
 		}
-		if (limit.sends < 0) {
+		if (options.sends < 0) {
 			error = createValidationError("The sends value must be at least 0.");
 			return {
 				success: false,
 				error
 			};
 		}
-		await this.mailchannels.put(`/tx/v1/sub-account/${handle}/limit`, {
-			body: limit,
+		await this.mailchannels.put(`/tx/v1/sub-account/${encodeURIComponent(handle)}/limit`, {
+			body: options,
 			onResponseError: async ({ response }) => {
 				error = getStatusError(response, {
 					[400]: "Bad Request.",
@@ -1382,7 +1549,7 @@ var SubAccounts = class SubAccounts {
 			error
 		};
 	}
-	async deleteLimit(handle) {
+	async delete(handle) {
 		let error = null;
 		if (!handle) {
 			error = createValidationError("No handle provided.");
@@ -1391,7 +1558,7 @@ var SubAccounts = class SubAccounts {
 				error
 			};
 		}
-		await this.mailchannels.delete(`/tx/v1/sub-account/${handle}/limit`, { onResponseError: async ({ response }) => {
+		await this.mailchannels.delete(`/tx/v1/sub-account/${encodeURIComponent(handle)}/limit`, { onResponseError: async ({ response }) => {
 			error = getStatusError(response, { [404]: `Sub-account with handle '${handle}' not found.` });
 		} }).catch((e) => {
 			error ||= getResultError(e, "Failed to delete sub-account limit.");
@@ -1401,6 +1568,158 @@ var SubAccounts = class SubAccounts {
 			error
 		};
 	}
+};
+var SubAccounts = class SubAccounts {
+	mailchannels;
+	static COMPANY_PATTERN = /^.{3,128}$/;
+	static HANDLE_PATTERN = /^[a-z0-9]{3,128}$/;
+	apiKeys;
+	smtpPasswords;
+	limits;
+	constructor(mailchannels) {
+		this.mailchannels = mailchannels;
+		this.apiKeys = new SubAccountsApiKeys(mailchannels);
+		this.smtpPasswords = new SubAccountsSmtpPasswords(mailchannels);
+		this.limits = new SubAccountsLimits(mailchannels);
+	}
+	async create(companyName, handle) {
+		let error = null;
+		if (!SubAccounts.COMPANY_PATTERN.test(companyName)) {
+			error = createValidationError("Invalid company name. Company name must be between 3 and 128 characters.");
+			return {
+				data: null,
+				error
+			};
+		}
+		if (handle) {
+			if (!SubAccounts.HANDLE_PATTERN.test(handle)) {
+				error = createValidationError("Invalid handle. Sub-account handle must be between 3 and 128 characters and contain only lowercase letters and numbers.");
+				return {
+					data: null,
+					error
+				};
+			}
+		}
+		const response = await this.mailchannels.post("/tx/v1/sub-account", {
+			body: {
+				company_name: companyName,
+				handle
+			},
+			onResponseError: async ({ response }) => {
+				error = getStatusError(response, {
+					[403]: "The parent account does not have permission to create sub-accounts.",
+					[409]: `Sub-account with handle '${handle}' already exists.`
+				});
+			}
+		}).catch((e) => {
+			error ||= getResultError(e, "Failed to create sub-account.");
+			return null;
+		});
+		if (!response) return {
+			data: null,
+			error
+		};
+		return {
+			data: clean({
+				companyName: response.company_name,
+				enabled: response.enabled,
+				handle: response.handle
+			}),
+			error: null
+		};
+	}
+	async list(options) {
+		let error = null;
+		error = validatePagination({
+			...options,
+			max: 1e3
+		});
+		if (error) return {
+			data: null,
+			error
+		};
+		const response = await this.mailchannels.get("/tx/v1/sub-account", {
+			query: options,
+			onResponseError: async ({ response }) => {
+				error = getStatusError(response);
+			}
+		}).catch((e) => {
+			error ||= getResultError(e, "Failed to fetch sub-accounts.");
+			return null;
+		});
+		if (!response) return {
+			data: null,
+			error
+		};
+		return {
+			data: clean(response.map((account) => ({
+				companyName: account.company_name,
+				enabled: account.enabled,
+				handle: account.handle
+			}))),
+			error: null
+		};
+	}
+	async delete(handle) {
+		let error = null;
+		if (!handle) {
+			error = createValidationError("No handle provided.");
+			return {
+				success: false,
+				error
+			};
+		}
+		await this.mailchannels.delete(`/tx/v1/sub-account/${encodeURIComponent(handle)}`, { onResponseError: async ({ response }) => {
+			error = getStatusError(response);
+		} }).catch((e) => {
+			error ||= getResultError(e, "Failed to delete sub-account.");
+		});
+		return {
+			success: !error,
+			error
+		};
+	}
+	async suspend(handle) {
+		let error = null;
+		if (!handle) {
+			error = createValidationError("No handle provided.");
+			return {
+				success: false,
+				error
+			};
+		}
+		await this.mailchannels.post(`/tx/v1/sub-account/${encodeURIComponent(handle)}/suspend`, { onResponseError: async ({ response }) => {
+			error = getStatusError(response, { [404]: `The specified sub-account '${handle}' does not exist.` });
+		} }).catch((e) => {
+			error ||= getResultError(e, "Failed to suspend sub-account.");
+		});
+		return {
+			success: !error,
+			error
+		};
+	}
+	async activate(handle) {
+		let error = null;
+		if (!handle) {
+			error = createValidationError("No handle provided.");
+			return {
+				success: false,
+				error
+			};
+		}
+		await this.mailchannels.post(`/tx/v1/sub-account/${encodeURIComponent(handle)}/activate`, { onResponseError: async ({ response }) => {
+			error = getStatusError(response, {
+				[403]: "The parent account does not have permission to activate the sub-account.",
+				[404]: `The specified sub-account '${handle}' does not exist.`
+			});
+		} }).catch((e) => {
+			error ||= getResultError(e, "Failed to activate sub-account.");
+		});
+		return {
+			success: !error,
+			error
+		};
+	}
 	async getUsage(handle) {
 		let error = null;
 		if (!handle) {
@@ -1410,7 +1729,7 @@ var SubAccounts = class SubAccounts {
 				error
 			};
 		}
-		const response = await this.mailchannels.get(`/tx/v1/sub-account/${handle}/usage`, { onResponseError: async ({ response }) => {
+		const response = await this.mailchannels.get(`/tx/v1/sub-account/${encodeURIComponent(handle)}/usage`, { onResponseError: async ({ response }) => {
 			error = getStatusError(response, { [404]: `Sub-account with handle '${handle}' not found.` });
 		} }).catch((e) => {
 			error ||= getResultError(e, "Failed to fetch sub-account usage.");
@@ -1429,6 +1748,33 @@ var SubAccounts = class SubAccounts {
 			error: null
 		};
 	}
+	createApiKey(...args) {
+		return this.apiKeys.create(...args);
+	}
+	listApiKeys(...args) {
+		return this.apiKeys.list(...args);
+	}
+	deleteApiKey(...args) {
+		return this.apiKeys.delete(...args);
+	}
+	createSmtpPassword(...args) {
+		return this.smtpPasswords.create(...args);
+	}
+	listSmtpPasswords(...args) {
+		return this.smtpPasswords.list(...args);
+	}
+	deleteSmtpPassword(...args) {
+		return this.smtpPasswords.delete(...args);
+	}
+	setLimit(...args) {
+		return this.limits.set(...args);
+	}
+	getLimit(...args) {
+		return this.limits.get(...args);
+	}
+	deleteLimit(...args) {
+		return this.limits.delete(...args);
+	}
 };
 const mapBucket = (bucket) => {
 	return {
@@ -1443,10 +1789,18 @@ var Metrics = class {
 	}
 	async engagement(options) {
 		let error = null;
+		const { dates, error: dateError } = parseDateInputs({
+			startTime: options?.startTime,
+			endTime: options?.endTime
+		});
+		if (!dates || dateError) return {
+			data: null,
+			error: dateError
+		};
 		const response = await this.mailchannels.get("/tx/v1/metrics/engagement", {
 			query: {
-				start_time: options?.startTime,
-				end_time: options?.endTime,
+				start_time: dates.startTime,
+				end_time: dates.endTime,
 				campaign_id: options?.campaignId,
 				interval: options?.interval
 			},
@@ -1467,24 +1821,40 @@ var Metrics = class {
 					click: response.buckets.click.map(mapBucket),
 					clickTrackingDelivered: response.buckets.click_tracking_delivered.map(mapBucket),
 					open: response.buckets.open.map(mapBucket),
-					openTrackingDelivered: response.buckets.open_tracking_delivered.map(mapBucket)
+					openTrackingDelivered: response.buckets.open_tracking_delivered.map(mapBucket),
+					uniqueClick: response.buckets.unique_click?.map(mapBucket),
+					uniqueClickTrackingDelivered: response.buckets.unique_click_tracking_delivered?.map(mapBucket),
+					uniqueOpen: response.buckets.unique_open?.map(mapBucket),
+					uniqueOpenTrackingDelivered: response.buckets.unique_open_tracking_delivered?.map(mapBucket)
 				},
 				click: response.click,
 				clickTrackingDelivered: response.click_tracking_delivered,
 				endTime: response.end_time,
 				open: response.open,
 				openTrackingDelivered: response.open_tracking_delivered,
-				startTime: response.start_time
+				startTime: response.start_time,
+				uniqueClick: response.unique_click,
+				uniqueClickTrackingDelivered: response.unique_click_tracking_delivered,
+				uniqueOpen: response.unique_open,
+				uniqueOpenTrackingDelivered: response.unique_open_tracking_delivered
 			}),
 			error: null
 		};
 	}
 	async performance(options) {
 		let error = null;
+		const { dates, error: dateError } = parseDateInputs({
+			startTime: options?.startTime,
+			endTime: options?.endTime
+		});
+		if (!dates || dateError) return {
+			data: null,
+			error: dateError
+		};
 		const response = await this.mailchannels.get("/tx/v1/metrics/performance", {
 			query: {
-				start_time: options?.startTime,
-				end_time: options?.endTime,
+				start_time: dates.startTime,
+				end_time: dates.endTime,
 				campaign_id: options?.campaignId,
 				interval: options?.interval
 			},
@@ -1502,8 +1872,10 @@ var Metrics = class {
 		return {
 			data: clean({
 				bounced: response.bounced,
+				complained: response.complained,
 				buckets: {
 					bounced: response.buckets.bounced.map(mapBucket),
+					complained: response.buckets.complained.map(mapBucket),
 					delivered: response.buckets.delivered.map(mapBucket),
 					processed: response.buckets.processed.map(mapBucket)
 				},
@@ -1517,10 +1889,18 @@ var Metrics = class {
 	}
 	async recipientBehaviour(options) {
 		let error = null;
+		const { dates, error: dateError } = parseDateInputs({
+			startTime: options?.startTime,
+			endTime: options?.endTime
+		});
+		if (!dates || dateError) return {
+			data: null,
+			error: dateError
+		};
 		const response = await this.mailchannels.get("/tx/v1/metrics/recipient-behaviour", {
 			query: {
-				start_time: options?.startTime,
-				end_time: options?.endTime,
+				start_time: dates.startTime,
+				end_time: dates.endTime,
 				campaign_id: options?.campaignId,
 				interval: options?.interval
 			},
@@ -1551,10 +1931,18 @@ var Metrics = class {
 	}
 	async volume(options) {
 		let error = null;
+		const { dates, error: dateError } = parseDateInputs({
+			startTime: options?.startTime,
+			endTime: options?.endTime
+		});
+		if (!dates || dateError) return {
+			data: null,
+			error: dateError
+		};
 		const response = await this.mailchannels.get("/tx/v1/metrics/volume", {
 			query: {
-				start_time: options?.startTime,
-				end_time: options?.endTime,
+				start_time: dates.startTime,
+				end_time: dates.endTime,
 				campaign_id: options?.campaignId,
 				interval: options?.interval
 			},
@@ -1608,6 +1996,14 @@ var Metrics = class {
 	}
 	async senders(type, options) {
 		let error = null;
+		const { dates, error: dateError } = parseDateInputs({
+			startTime: options?.startTime,
+			endTime: options?.endTime
+		});
+		if (!dates || dateError) return {
+			data: null,
+			error: dateError
+		};
 		error = validatePagination({
 			...options,
 			max: 1e3
@@ -1616,10 +2012,10 @@ var Metrics = class {
 			data: null,
 			error
 		};
-		const response = await this.mailchannels.get(`/tx/v1/metrics/senders/${type}`, {
+		const response = await this.mailchannels.get(`/tx/v1/metrics/senders/${encodeURIComponent(type)}`, {
 			query: {
-				start_time: options?.startTime,
-				end_time: options?.endTime,
+				start_time: dates.startTime,
+				end_time: dates.endTime,
 				limit: options?.limit,
 				offset: options?.offset,
 				sort_order: options?.sortOrder
@@ -1690,7 +2086,7 @@ var Suppressions = class {
 	}
 	async delete(recipient, source) {
 		let error = null;
-		await this.mailchannels.delete(`/tx/v1/suppression-list/recipients/${recipient}`, {
+		await this.mailchannels.delete(`/tx/v1/suppression-list/recipients/${encodeURIComponent(recipient)}`, {
 			query: { source },
 			onResponseError: async ({ response }) => {
 				error = getStatusError(response, { [400]: "Bad Request." });
@@ -1712,6 +2108,14 @@ var Suppressions = class {
 				error
 			};
 		}
+		const { dates, error: dateError } = parseDateInputs({
+			createdBefore: options?.createdBefore,
+			createdAfter: options?.createdAfter
+		});
+		if (!dates || dateError) return {
+			data: null,
+			error: dateError
+		};
 		error = validatePagination({
 			...options,
 			max: 1e3
@@ -1723,8 +2127,8 @@ var Suppressions = class {
 		const payload = {
 			recipient: options?.recipient,
 			source: options?.source,
-			created_before: options?.createdBefore,
-			created_after: options?.createdAfter,
+			created_before: dates.createdBefore,
+			created_after: dates.createdAfter,
 			limit: options?.limit,
 			offset: options?.offset
 		};