sendblue 3.11.0 → 3.13.0

package/resources/verify/verifications.js

@@ -3,13 +3,64 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Verifications = void 0;
 const resource_1 = require("../../core/resource.js");
+const path_1 = require("../../internal/utils/path.js");
 /**
  * Sendblue Verify issuance and recovery state
  */
 class Verifications extends resource_1.APIResource {
+    /**
+     * Creates an inverted-OTP verification for the supplied E.164 phone number. The
+     * user must send the returned code from that exact phone number to the returned
+     * Sendblue destination number.
+     *
+     * Include `hosted` to create an origin-bound Hosted Verify widget session.
+     * Sendblue API credentials must remain on the customer's backend; only the
+     * returned `hosted` values may be sent to the browser. Twilio-compatible clients
+     * may alternatively send the API Key ID and API Secret Key with HTTP Basic
+     * authentication. Temporary bearer authentication is supported for account-scoped
+     * tokens; line-scoped temporary tokens cannot create account-wide Verifications.
+     *
+     * @example
+     * ```ts
+     * const verification =
+     *   await client.verify.verifications.create(
+     *     'SVE1CB97d8EBbDbaAae6d9B1ca0D1cFaAD',
+     *     { to: '+14155551212' },
+     *   );
+     * ```
+     */
+    create(serviceSid, body, options) {
+        return this._client.post((0, path_1.path) `/api/v2/verify/services/${serviceSid}/verifications`, { body, ...options });
+    }
+    /**
+     * Returns the authoritative status for one Verification owned by the authenticated
+     * account. Twilio-compatible clients may send the API Key ID and API Secret Key
+     * with HTTP Basic authentication. Temporary bearer authentication is supported for
+     * account-scoped tokens; line-scoped temporary tokens cannot retrieve account-wide
+     * Verification state.
+     *
+     * @example
+     * ```ts
+     * const verification =
+     *   await client.verify.verifications.retrieve(
+     *     'VRE1CB97d8EBbDbaAae6d9B1ca0D1cFaAD',
+     *     { service_sid: 'SVE1CB97d8EBbDbaAae6d9B1ca0D1cFaAD' },
+     *   );
+     * ```
+     */
+    retrieve(verificationSid, params, options) {
+        const { service_sid } = params;
+        return this._client.get((0, path_1.path) `/api/v2/verify/services/${service_sid}/verifications/${verificationSid}`, options);
+    }
     /**
      * Account-scoped verification state used to recover terminal Verify events after
      * an SSE gap.
+     *
+     * @example
+     * ```ts
+     * const verifications =
+     *   await client.verify.verifications.list();
+     * ```
      */
     list(query = {}, options) {
         return this._client.get('/api/v2/verify/verifications', { query, ...options });

package/resources/verify/verifications.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifications.js","sourceRoot":"","sources":["../../src/resources/verify/verifications.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,qDAAkD;AAIlD;;GAEG;AACH,MAAa,aAAc,SAAQ,sBAAW;IAC5C;;;OAGG;IACH,IAAI,CACF,QAAmD,EAAE,EACrD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;CACF;AAXD,sCAWC"}
+{"version":3,"file":"verifications.js","sourceRoot":"","sources":["../../src/resources/verify/verifications.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,qDAAkD;AAGlD,uDAAiD;AAEjD;;GAEG;AACH,MAAa,aAAc,SAAQ,sBAAW;IAC5C;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CACJ,UAAkB,EAClB,IAA8B,EAC9B,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,WAAI,EAAA,2BAA2B,UAAU,gBAAgB,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CACN,eAAuB,EACvB,MAAkC,EAClC,OAAwB;QAExB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CACrB,IAAA,WAAI,EAAA,2BAA2B,WAAW,kBAAkB,eAAe,EAAE,EAC7E,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,CACF,QAAmD,EAAE,EACrD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;CACF;AA1ED,sCA0EC"}

package/resources/verify/verifications.mjs

@@ -1,12 +1,63 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 import { APIResource } from "../../core/resource.mjs";
+import { path } from "../../internal/utils/path.mjs";
 /**
  * Sendblue Verify issuance and recovery state
  */
 export class Verifications extends APIResource {
+    /**
+     * Creates an inverted-OTP verification for the supplied E.164 phone number. The
+     * user must send the returned code from that exact phone number to the returned
+     * Sendblue destination number.
+     *
+     * Include `hosted` to create an origin-bound Hosted Verify widget session.
+     * Sendblue API credentials must remain on the customer's backend; only the
+     * returned `hosted` values may be sent to the browser. Twilio-compatible clients
+     * may alternatively send the API Key ID and API Secret Key with HTTP Basic
+     * authentication. Temporary bearer authentication is supported for account-scoped
+     * tokens; line-scoped temporary tokens cannot create account-wide Verifications.
+     *
+     * @example
+     * ```ts
+     * const verification =
+     *   await client.verify.verifications.create(
+     *     'SVE1CB97d8EBbDbaAae6d9B1ca0D1cFaAD',
+     *     { to: '+14155551212' },
+     *   );
+     * ```
+     */
+    create(serviceSid, body, options) {
+        return this._client.post(path `/api/v2/verify/services/${serviceSid}/verifications`, { body, ...options });
+    }
+    /**
+     * Returns the authoritative status for one Verification owned by the authenticated
+     * account. Twilio-compatible clients may send the API Key ID and API Secret Key
+     * with HTTP Basic authentication. Temporary bearer authentication is supported for
+     * account-scoped tokens; line-scoped temporary tokens cannot retrieve account-wide
+     * Verification state.
+     *
+     * @example
+     * ```ts
+     * const verification =
+     *   await client.verify.verifications.retrieve(
+     *     'VRE1CB97d8EBbDbaAae6d9B1ca0D1cFaAD',
+     *     { service_sid: 'SVE1CB97d8EBbDbaAae6d9B1ca0D1cFaAD' },
+     *   );
+     * ```
+     */
+    retrieve(verificationSid, params, options) {
+        const { service_sid } = params;
+        return this._client.get(path `/api/v2/verify/services/${service_sid}/verifications/${verificationSid}`, options);
+    }
     /**
      * Account-scoped verification state used to recover terminal Verify events after
      * an SSE gap.
+     *
+     * @example
+     * ```ts
+     * const verifications =
+     *   await client.verify.verifications.list();
+     * ```
      */
     list(query = {}, options) {
         return this._client.get('/api/v2/verify/verifications', { query, ...options });

package/resources/verify/verifications.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"verifications.mjs","sourceRoot":"","sources":["../../src/resources/verify/verifications.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,gCAA4B;AAIlD;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C;;;OAGG;IACH,IAAI,CACF,QAAmD,EAAE,EACrD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;CACF"}
+{"version":3,"file":"verifications.mjs","sourceRoot":"","sources":["../../src/resources/verify/verifications.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,gCAA4B;AAGlD,OAAO,EAAE,IAAI,EAAE,sCAAkC;AAEjD;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CACJ,UAAkB,EAClB,IAA8B,EAC9B,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,2BAA2B,UAAU,gBAAgB,EAAE,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CACN,eAAuB,EACvB,MAAkC,EAClC,OAAwB;QAExB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CACrB,IAAI,CAAA,2BAA2B,WAAW,kBAAkB,eAAe,EAAE,EAC7E,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,CACF,QAAmD,EAAE,EACrD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;CACF"}

package/resources/verify/verify.d.mts

@@ -1,10 +1,10 @@
 import { APIResource } from "../../core/resource.mjs";
 import * as VerificationsAPI from "./verifications.mjs";
-import { VerificationListParams, VerificationListResponse, VerificationState, Verifications } from "./verifications.mjs";
+import { DeliveryTarget, HostedVerification, VerificationCreateParams, VerificationCreateResponse, VerificationListParams, VerificationListResponse, VerificationRetrieveParams, VerificationRetrieveResponse, VerificationState, Verifications } from "./verifications.mjs";
 export declare class Verify extends APIResource {
     verifications: VerificationsAPI.Verifications;
 }
 export declare namespace Verify {
-    export { Verifications as Verifications, type VerificationState as VerificationState, type VerificationListResponse as VerificationListResponse, type VerificationListParams as VerificationListParams, };
+    export { Verifications as Verifications, type VerificationState as VerificationState, type DeliveryTarget as DeliveryTarget, type HostedVerification as HostedVerification, type VerificationCreateResponse as VerificationCreateResponse, type VerificationRetrieveResponse as VerificationRetrieveResponse, type VerificationListResponse as VerificationListResponse, type VerificationCreateParams as VerificationCreateParams, type VerificationRetrieveParams as VerificationRetrieveParams, type VerificationListParams as VerificationListParams, };
 }
 //# sourceMappingURL=verify.d.mts.map

package/resources/verify/verify.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.mts","sourceRoot":"","sources":["../../src/resources/verify/verify.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,gCAA4B;AAClD,OAAO,KAAK,gBAAgB,4BAAwB;AACpD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iBAAiB,EACjB,aAAa,EACd,4BAAwB;AAEzB,qBAAa,MAAO,SAAQ,WAAW;IACrC,aAAa,EAAE,gBAAgB,CAAC,aAAa,CAAoD;CAClG;AAID,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,OAAO,EACL,aAAa,IAAI,aAAa,EAC9B,KAAK,iBAAiB,IAAI,iBAAiB,EAC3C,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,sBAAsB,IAAI,sBAAsB,GACtD,CAAC;CACH"}
+{"version":3,"file":"verify.d.mts","sourceRoot":"","sources":["../../src/resources/verify/verify.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,gCAA4B;AAClD,OAAO,KAAK,gBAAgB,4BAAwB;AACpD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC5B,iBAAiB,EACjB,aAAa,EACd,4BAAwB;AAEzB,qBAAa,MAAO,SAAQ,WAAW;IACrC,aAAa,EAAE,gBAAgB,CAAC,aAAa,CAAoD;CAClG;AAID,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,OAAO,EACL,aAAa,IAAI,aAAa,EAC9B,KAAK,iBAAiB,IAAI,iBAAiB,EAC3C,KAAK,cAAc,IAAI,cAAc,EACrC,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,4BAA4B,IAAI,4BAA4B,EACjE,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,sBAAsB,IAAI,sBAAsB,GACtD,CAAC;CACH"}

package/resources/verify/verify.d.ts

@@ -1,10 +1,10 @@
 import { APIResource } from "../../core/resource.js";
 import * as VerificationsAPI from "./verifications.js";
-import { VerificationListParams, VerificationListResponse, VerificationState, Verifications } from "./verifications.js";
+import { DeliveryTarget, HostedVerification, VerificationCreateParams, VerificationCreateResponse, VerificationListParams, VerificationListResponse, VerificationRetrieveParams, VerificationRetrieveResponse, VerificationState, Verifications } from "./verifications.js";
 export declare class Verify extends APIResource {
     verifications: VerificationsAPI.Verifications;
 }
 export declare namespace Verify {
-    export { Verifications as Verifications, type VerificationState as VerificationState, type VerificationListResponse as VerificationListResponse, type VerificationListParams as VerificationListParams, };
+    export { Verifications as Verifications, type VerificationState as VerificationState, type DeliveryTarget as DeliveryTarget, type HostedVerification as HostedVerification, type VerificationCreateResponse as VerificationCreateResponse, type VerificationRetrieveResponse as VerificationRetrieveResponse, type VerificationListResponse as VerificationListResponse, type VerificationCreateParams as VerificationCreateParams, type VerificationRetrieveParams as VerificationRetrieveParams, type VerificationListParams as VerificationListParams, };
 }
 //# sourceMappingURL=verify.d.ts.map

package/resources/verify/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/resources/verify/verify.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,+BAA4B;AAClD,OAAO,KAAK,gBAAgB,2BAAwB;AACpD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,iBAAiB,EACjB,aAAa,EACd,2BAAwB;AAEzB,qBAAa,MAAO,SAAQ,WAAW;IACrC,aAAa,EAAE,gBAAgB,CAAC,aAAa,CAAoD;CAClG;AAID,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,OAAO,EACL,aAAa,IAAI,aAAa,EAC9B,KAAK,iBAAiB,IAAI,iBAAiB,EAC3C,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,sBAAsB,IAAI,sBAAsB,GACtD,CAAC;CACH"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/resources/verify/verify.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,+BAA4B;AAClD,OAAO,KAAK,gBAAgB,2BAAwB;AACpD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC5B,iBAAiB,EACjB,aAAa,EACd,2BAAwB;AAEzB,qBAAa,MAAO,SAAQ,WAAW;IACrC,aAAa,EAAE,gBAAgB,CAAC,aAAa,CAAoD;CAClG;AAID,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,OAAO,EACL,aAAa,IAAI,aAAa,EAC9B,KAAK,iBAAiB,IAAI,iBAAiB,EAC3C,KAAK,cAAc,IAAI,cAAc,EACrC,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,4BAA4B,IAAI,4BAA4B,EACjE,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,wBAAwB,IAAI,wBAAwB,EACzD,KAAK,0BAA0B,IAAI,0BAA0B,EAC7D,KAAK,sBAAsB,IAAI,sBAAsB,GACtD,CAAC;CACH"}

package/resources/verify/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/resources/verify/verify.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;;AAEtF,qDAAkD;AAClD,6EAAoD;AACpD,sDAKyB;AAEzB,MAAa,MAAO,SAAQ,sBAAW;IAAvC;;QACE,kBAAa,GAAmC,IAAI,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC;CAAA;AAFD,wBAEC;AAED,MAAM,CAAC,aAAa,GAAG,6BAAa,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/resources/verify/verify.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;;AAEtF,qDAAkD;AAClD,6EAAoD;AACpD,sDAWyB;AAEzB,MAAa,MAAO,SAAQ,sBAAW;IAAvC;;QACE,kBAAa,GAAmC,IAAI,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC;CAAA;AAFD,wBAEC;AAED,MAAM,CAAC,aAAa,GAAG,6BAAa,CAAC"}

package/resources/verify/verify.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"verify.mjs","sourceRoot":"","sources":["../../src/resources/verify/verify.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,gCAA4B;AAClD,OAAO,KAAK,gBAAgB,4BAAwB;AACpD,OAAO,EAIL,aAAa,GACd,4BAAwB;AAEzB,MAAM,OAAO,MAAO,SAAQ,WAAW;IAAvC;;QACE,kBAAa,GAAmC,IAAI,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC;CAAA;AAED,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC"}
+{"version":3,"file":"verify.mjs","sourceRoot":"","sources":["../../src/resources/verify/verify.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,gCAA4B;AAClD,OAAO,KAAK,gBAAgB,4BAAwB;AACpD,OAAO,EAUL,aAAa,GACd,4BAAwB;AAEzB,MAAM,OAAO,MAAO,SAAQ,WAAW;IAAvC;;QACE,kBAAa,GAAmC,IAAI,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC;CAAA;AAED,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC"}

package/src/client.ts

@@ -115,6 +115,12 @@ export interface ClientOptions {
    */
   apiSecret?: string | undefined;
 
+  /**
+   * Short-lived bearer token. Use this instead of `apiKey` and `apiSecret`
+   * when credentials are issued by a token broker such as Vercel Connect.
+   */
+  accessToken?: string | undefined;
+
   /**
    * Override the default base URL for the API, e.g., "https://api.example.com/v2/"
    *
@@ -188,8 +194,9 @@ export interface ClientOptions {
  * API Client for interfacing with the Sendblue API API.
  */
 export class SendblueAPI {
-  apiKey: string;
-  apiSecret: string;
+  apiKey: string | undefined;
+  apiSecret: string | undefined;
+  accessToken: string | undefined;
 
   baseURL: string;
   maxRetries: number;
@@ -216,27 +223,33 @@ export class SendblueAPI {
    * @param {HeadersLike} opts.defaultHeaders - Default headers to include with every request to the API.
    * @param {Record<string, string | undefined>} opts.defaultQuery - Default query parameters to include with every request to the API.
    */
-  constructor({
-    baseURL = readEnv('SENDBLUE_API_BASE_URL'),
-    apiKey = readEnv('SENDBLUE_API_API_KEY'),
-    apiSecret = readEnv('SENDBLUE_API_API_SECRET'),
-    ...opts
-  }: ClientOptions = {}) {
-    if (apiKey === undefined) {
+  constructor(input: ClientOptions = {}) {
+    const { baseURL = readEnv('SENDBLUE_API_BASE_URL'), accessToken, ...opts } = input;
+    // An explicitly supplied bearer token takes precedence over ambient
+    // key-pair environment variables. Explicitly combining either auth mode is
+    // still rejected because it is ambiguous and can leak permanent credentials.
+    const apiKey = accessToken === undefined ? input.apiKey ?? readEnv('SENDBLUE_API_API_KEY') : input.apiKey;
+    const apiSecret =
+      accessToken === undefined ? input.apiSecret ?? readEnv('SENDBLUE_API_API_SECRET') : input.apiSecret;
+    if (accessToken !== undefined && (apiKey !== undefined || apiSecret !== undefined)) {
+      throw new Errors.SendblueAPIError('accessToken cannot be combined with apiKey or apiSecret.');
+    }
+    if (accessToken === undefined && apiKey === undefined) {
       throw new Errors.SendblueAPIError(
-        "The SENDBLUE_API_API_KEY environment variable is missing or empty; either provide it, or instantiate the SendblueAPI client with an apiKey option, like new SendblueAPI({ apiKey: 'My API Key' }).",
+        'The SENDBLUE_API_API_KEY environment variable is missing or empty; provide apiKey and apiSecret, or instantiate the client with an accessToken.',
       );
     }
-    if (apiSecret === undefined) {
+    if (accessToken === undefined && apiSecret === undefined) {
       throw new Errors.SendblueAPIError(
-        "The SENDBLUE_API_API_SECRET environment variable is missing or empty; either provide it, or instantiate the SendblueAPI client with an apiSecret option, like new SendblueAPI({ apiSecret: 'My API Secret' }).",
+        'The SENDBLUE_API_API_SECRET environment variable is missing or empty; provide apiKey and apiSecret, or instantiate the client with an accessToken.',
       );
     }
 
     const options: ClientOptions = {
+      ...opts,
       apiKey,
       apiSecret,
-      ...opts,
+      accessToken,
       baseURL: baseURL || `https://api.sendblue.co`,
     };
 
@@ -271,6 +284,7 @@ export class SendblueAPI {
 
     this.apiKey = apiKey;
     this.apiSecret = apiSecret;
+    this.accessToken = accessToken;
   }
 
   /**
@@ -288,6 +302,7 @@ export class SendblueAPI {
       fetchOptions: this.fetchOptions,
       apiKey: this.apiKey,
       apiSecret: this.apiSecret,
+      accessToken: this.accessToken,
       ...options,
     });
     return client;
@@ -309,6 +324,9 @@ export class SendblueAPI {
   }
 
   protected async authHeaders(opts: FinalRequestOptions): Promise<NullableHeaders | undefined> {
+    if (this.accessToken !== undefined) {
+      return buildHeaders([{ Authorization: `Bearer ${this.accessToken}` }]);
+    }
     return buildHeaders([await this.apiKeyAuth(opts), await this.apiSecretAuth(opts)]);
   }
 

package/src/resources/v2/groups/groups.ts

@@ -0,0 +1,114 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../core/resource';
+import * as VerifyAPI from './verify/verify';
+import { Verify } from './verify/verify';
+import { APIPromise } from '../../../core/api-promise';
+import { RequestOptions } from '../../../internal/request-options';
+import { path } from '../../../internal/utils/path';
+
+/**
+ * Operations for group messaging (beta)
+ */
+export class Groups extends APIResource {
+  verify: VerifyAPI.Verify = new VerifyAPI.Verify(this._client);
+
+  /**
+   * Retrieve the current complete membership for a group owned by the authenticated
+   * account.
+   *
+   * @example
+   * ```ts
+   * const group = await client.v2.groups.retrieve(
+   *   'sb_group_608acc54-d0d7-4b41-8092-9ff6e1e70455',
+   * );
+   * ```
+   */
+  retrieve(groupID: string, options?: RequestOptions): APIPromise<GroupRetrieveResponse> {
+    return this._client.get(path`/api/v2/groups/${groupID}`, options);
+  }
+}
+
+export interface GroupRetrieveResponse {
+  data?: GroupRetrieveResponse.Data;
+
+  status?: string;
+}
+
+export namespace GroupRetrieveResponse {
+  export interface Data {
+    created_at?: string;
+
+    group_id?: string;
+
+    group_name?: string;
+
+    latest_comm_at?: string | null;
+
+    latest_message_id?: string | null;
+
+    /**
+     * Convenience list of resolved participant phone numbers. Participants with
+     * email-only handles remain in participants but are omitted here.
+     */
+    participant_numbers?: Array<string>;
+
+    participants?: Array<Data.Participant>;
+
+    updated_at?: string;
+
+    /**
+     * Worker-local iMessage group identifier when known
+     */
+    worker_group_id?: string | null;
+  }
+
+  export namespace Data {
+    export interface Participant {
+      /**
+       * Contact ID when this participant is linked to a contact
+       */
+      contact_id?: string | null;
+
+      /**
+       * Raw participant handle, usually an E.164 phone number but sometimes an iMessage
+       * email handle
+       */
+      handle?: string | null;
+
+      /**
+       * Contact or seat display name when available
+       */
+      name?: string | null;
+
+      /**
+       * Unique participant row identifier
+       */
+      participant_id?: string;
+
+      /**
+       * Resolved participant phone number, preferring the stored group phone handle and
+       * falling back to contact phone. Email handles remain available in handle.
+       */
+      phone?: string | null;
+
+      /**
+       * Seat ID when this participant is a team member
+       */
+      seat_id?: string | null;
+
+      /**
+       * Participant kind
+       */
+      type?: 'contact' | 'seat';
+    }
+  }
+}
+
+Groups.Verify = Verify;
+
+export declare namespace Groups {
+  export { type GroupRetrieveResponse as GroupRetrieveResponse };
+
+  export { Verify as Verify };
+}

package/src/resources/v2/groups/index.ts

@@ -0,0 +1,4 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export { Groups, type GroupRetrieveResponse } from './groups';
+export { Verify } from './verify/index';

package/src/resources/v2/groups/verify/index.ts

@@ -0,0 +1,4 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export { Services } from './services/index';
+export { Verify } from './verify';

package/src/resources/v2/groups/verify/services/index.ts

@@ -0,0 +1,10 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export { Services } from './services';
+export {
+  Verifications,
+  type VerificationCreateResponse,
+  type VerificationRetrieveResponse,
+  type VerificationCreateParams,
+  type VerificationRetrieveParams,
+} from './verifications';

package/src/resources/v2/groups/verify/services/services.ts

@@ -0,0 +1,27 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../../../core/resource';
+import * as VerificationsAPI from './verifications';
+import {
+  VerificationCreateParams,
+  VerificationCreateResponse,
+  VerificationRetrieveParams,
+  VerificationRetrieveResponse,
+  Verifications,
+} from './verifications';
+
+export class Services extends APIResource {
+  verifications: VerificationsAPI.Verifications = new VerificationsAPI.Verifications(this._client);
+}
+
+Services.Verifications = Verifications;
+
+export declare namespace Services {
+  export {
+    Verifications as Verifications,
+    type VerificationCreateResponse as VerificationCreateResponse,
+    type VerificationRetrieveResponse as VerificationRetrieveResponse,
+    type VerificationCreateParams as VerificationCreateParams,
+    type VerificationRetrieveParams as VerificationRetrieveParams,
+  };
+}

package/src/resources/v2/groups/verify/services/verifications.ts

@@ -0,0 +1,201 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import { APIResource } from '../../../../../core/resource';
+import * as VerificationsAPI from '../../../../verify/verifications';
+import { APIPromise } from '../../../../../core/api-promise';
+import { RequestOptions } from '../../../../../internal/request-options';
+import { path } from '../../../../../internal/utils/path';
+
+/**
+ * Sendblue Verify issuance and recovery state
+ */
+export class Verifications extends APIResource {
+  /**
+   * Creates an inverted-OTP verification for the supplied E.164 phone number. The
+   * user must send the returned code from that exact phone number to the returned
+   * Sendblue destination number.
+   *
+   * Include `hosted` to create an origin-bound Hosted Verify widget session.
+   * Sendblue API credentials must remain on the customer's backend; only the
+   * returned `hosted` values may be sent to the browser. Twilio-compatible clients
+   * may alternatively send the API Key ID and API Secret Key with HTTP Basic
+   * authentication. Temporary bearer authentication is supported for account-scoped
+   * tokens; line-scoped temporary tokens cannot create account-wide Verifications.
+   *
+   * @example
+   * ```ts
+   * const verification =
+   *   await client.v2.groups.verify.services.verifications.create(
+   *     'SVE1CB97d8EBbDbaAae6d9B1ca0D1cFaAD',
+   *     { to: '+14155551212' },
+   *   );
+   * ```
+   */
+  create(
+    serviceSid: string,
+    body: VerificationCreateParams,
+    options?: RequestOptions,
+  ): APIPromise<VerificationCreateResponse> {
+    return this._client.post(path`/api/v2/verify/services/${serviceSid}/verifications`, { body, ...options });
+  }
+
+  /**
+   * Returns the authoritative status for one Verification owned by the authenticated
+   * account. Twilio-compatible clients may send the API Key ID and API Secret Key
+   * with HTTP Basic authentication. Temporary bearer authentication is supported for
+   * account-scoped tokens; line-scoped temporary tokens cannot retrieve account-wide
+   * Verification state.
+   *
+   * @example
+   * ```ts
+   * const verification =
+   *   await client.v2.groups.verify.services.verifications.retrieve(
+   *     'VRE1CB97d8EBbDbaAae6d9B1ca0D1cFaAD',
+   *     { service_sid: 'SVE1CB97d8EBbDbaAae6d9B1ca0D1cFaAD' },
+   *   );
+   * ```
+   */
+  retrieve(
+    verificationSid: string,
+    params: VerificationRetrieveParams,
+    options?: RequestOptions,
+  ): APIPromise<VerificationRetrieveResponse> {
+    const { service_sid } = params;
+    return this._client.get(
+      path`/api/v2/verify/services/${service_sid}/verifications/${verificationSid}`,
+      options,
+    );
+  }
+}
+
+export interface VerificationCreateResponse {
+  account_sid: string;
+
+  channel: 'imessage';
+
+  date_created: string;
+
+  date_updated: string;
+
+  /**
+   * ISO timestamp when the Verification expires.
+   */
+  expires_at: string;
+
+  service_sid: string;
+
+  sid: string;
+
+  status: 'pending' | 'approved' | 'expired' | 'canceled';
+
+  /**
+   * Expected sender in E.164 format; older durable terminal records may return null.
+   */
+  to: string | null;
+
+  url: string;
+
+  /**
+   * Present while the Verification is pending.
+   */
+  delivery_target?: VerificationsAPI.DeliveryTarget;
+
+  /**
+   * Present only when hosted options were supplied during creation.
+   */
+  hosted?: VerificationsAPI.HostedVerification;
+}
+
+export interface VerificationRetrieveResponse {
+  account_sid: string;
+
+  channel: 'imessage';
+
+  date_created: string;
+
+  date_updated: string;
+
+  /**
+   * ISO timestamp when the Verification expires.
+   */
+  expires_at: string;
+
+  service_sid: string;
+
+  sid: string;
+
+  status: 'pending' | 'approved' | 'expired' | 'canceled';
+
+  /**
+   * Expected sender in E.164 format; older durable terminal records may return null.
+   */
+  to: string | null;
+
+  url: string;
+
+  /**
+   * Present while the Verification is pending.
+   */
+  delivery_target?: VerificationsAPI.DeliveryTarget;
+}
+
+export interface VerificationCreateParams {
+  /**
+   * E.164 phone number that must send the verification message.
+   */
+  to: string;
+
+  /**
+   * Options for an origin-bound Hosted Verify widget session. Nested keys are strict
+   * snake_case. `parent_origin` must be an exact HTTPS origin with a DNS hostname.
+   * `127.0.0.1` is also accepted, and HTTP is allowed only for `localhost` or
+   * `127.0.0.1` development origins. Wildcards and other IP literals are rejected
+   * because browsers cannot enforce them as exact CSP `frame-ancestors` sources.
+   */
+  hosted?: VerificationCreateParams.Hosted;
+}
+
+export namespace VerificationCreateParams {
+  /**
+   * Options for an origin-bound Hosted Verify widget session. Nested keys are strict
+   * snake_case. `parent_origin` must be an exact HTTPS origin with a DNS hostname.
+   * `127.0.0.1` is also accepted, and HTTP is allowed only for `localhost` or
+   * `127.0.0.1` development origins. Wildcards and other IP literals are rejected
+   * because browsers cannot enforce them as exact CSP `frame-ancestors` sources.
+   */
+  export interface Hosted {
+    /**
+     * Exact website origin allowed to embed the widget, with no path, query, or
+     * fragment.
+     */
+    parent_origin: string;
+
+    /**
+     * Six-digit hexadecimal accent color.
+     */
+    accent_color?: string;
+
+    /**
+     * Brand name displayed by the widget. Defaults to Sendblue.
+     */
+    brand_name?: string;
+
+    theme?: 'light' | 'dark' | 'auto';
+  }
+}
+
+export interface VerificationRetrieveParams {
+  /**
+   * Verify Service SID.
+   */
+  service_sid: string;
+}
+
+export declare namespace Verifications {
+  export {
+    type VerificationCreateResponse as VerificationCreateResponse,
+    type VerificationRetrieveResponse as VerificationRetrieveResponse,
+    type VerificationCreateParams as VerificationCreateParams,
+    type VerificationRetrieveParams as VerificationRetrieveParams,
+  };
+}

package/src/resources/v2/groups/verify/services.ts

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+export * from './services/index';