shipmail 0.1.33 → 0.2.0

package/README.md

@@ -144,6 +144,12 @@ const forwarding = await shipmail.mailboxes.createForwarding("mbx_...", {
 });
 const forwardingList = await shipmail.mailboxes.listForwarding("mbx_...");
 await shipmail.mailboxes.deleteForwarding("mbx_...", forwarding.id);
+const appPassword = await shipmail.mailboxes.createAppPassword("mbx_...", {
+  name: "Desktop mail",
+  expires_at: "2026-10-01T00:00:00Z",
+});
+const appPasswords = await shipmail.mailboxes.listAppPasswords("mbx_...");
+await shipmail.mailboxes.revokeAppPassword("mbx_...", appPassword.id);
 const folders = await shipmail.mailboxes.listFolders("mbx_...");
 const folder = await shipmail.mailboxes.createFolder("mbx_...", {
   name: "VIP",
@@ -379,6 +385,10 @@ await delegated.mailboxes.create({
   address: "support",
   generate_password: true,
 });
+const grants = await shipmail.partner.listMailboxCredentialGrants();
+const credential = await shipmail.partner.consumeMailboxCredentialGrant(grants.data[0]!.id, {
+  name: "Embedded webmail",
+});
 await shipmail.partner.usage();
 ```
 
@@ -386,6 +396,10 @@ Use a separate client for delegated infrastructure. Partner target context is no
 message, thread, calendar, contacts, export, suppression, billing, or password endpoints. The beta
 requires Shipmail approval and externally owned domains. Delegated mailbox creation must use
 `generate_password: true`; the generated primary password is never returned to the partner.
+The operator creates a one-time credential grant. Consuming it requires the exact
+`partner:mailbox_credentials:issue` scope and returns the app-password secret once. App-password
+creation and grant consumption do not accept idempotency keys because their plaintext response must
+never be cached.
 
 ## Status
 

package/dist/index.cjs

@@ -681,6 +681,28 @@ var Mailboxes = class extends ApiResource {
       methodOptions: options
     });
   }
+  listAppPasswords(id, options) {
+    return this.client.request({
+      method: "GET",
+      path: `/mailboxes/${encodeURIComponent(id)}/app-passwords`,
+      methodOptions: options
+    });
+  }
+  createAppPassword(id, params, options) {
+    return this.client.request({
+      method: "POST",
+      path: `/mailboxes/${encodeURIComponent(id)}/app-passwords`,
+      body: params,
+      methodOptions: options
+    });
+  }
+  revokeAppPassword(id, appPasswordId, options) {
+    return this.client.request({
+      method: "DELETE",
+      path: `/mailboxes/${encodeURIComponent(id)}/app-passwords/${encodeURIComponent(appPasswordId)}`,
+      methodOptions: options
+    });
+  }
   getRules(id, options) {
     return this.client.request({
       method: "GET",
@@ -1039,6 +1061,21 @@ var Partner = class extends ApiResource {
       methodOptions: options
     });
   }
+  listMailboxCredentialGrants(options) {
+    return this.client.request({
+      method: "GET",
+      path: "/partner/mailbox-credential-grants",
+      methodOptions: options
+    });
+  }
+  consumeMailboxCredentialGrant(grantId, params = {}, options) {
+    return this.client.request({
+      method: "POST",
+      path: `/partner/mailbox-credential-grants/${encodeURIComponent(grantId)}/consume`,
+      body: params,
+      methodOptions: options
+    });
+  }
   usage(options) {
     return this.client.request({ method: "GET", path: "/partner/usage", methodOptions: options });
   }
@@ -1226,7 +1263,7 @@ var Webhooks = class extends ApiResource {
 };
 
 // src/version.ts
-var VERSION = "0.1.33";
+var VERSION = "0.2.0";
 
 // src/client.ts
 var DEFAULT_BASE_URL = "https://shipmail.to/api/v1";