shipmail 0.5.9 → 0.6.0

package/README.md

@@ -89,7 +89,6 @@ const shipmail = new ShipmailClient({
   timeout: 30_000,
   fetch: customFetch,
   defaultHeaders: { "x-app-name": "my-app" },
-  organizationId: "00000000-0000-4000-8000-000000000123",
 });
 ```
 
@@ -101,7 +100,6 @@ const shipmail = new ShipmailClient({
 | `timeout`        | `number`                 | `30_000`                     | Per-request timeout in ms.                                          |
 | `fetch`          | `typeof fetch`           | `globalThis.fetch`           | Custom fetch implementation.                                        |
 | `defaultHeaders` | `Record<string, string>` | `{}`                         | Headers added to every request.                                     |
-| `organizationId` | `string`                 | none                         | Delegated child organization for approved infrastructure calls.     |
 
 ## Domains
 
@@ -393,6 +391,10 @@ org.reputation_warning
 org.sending_throttled
 org.sending_suspended
 org.reputation_recovered
+reply.overdue
+conversation.needs_action
+calendar.event_starting
+booking.created
 ```
 
 ## Suppressions
@@ -507,50 +509,6 @@ sanitized inline HTML. Use `<p>` and `<br>` for line breaks. Allowed tags are
 Concurrent newsletter updates can throw `ConflictError` (409). Fetch the latest
 newsletter, merge your changes, and retry the update.
 
-## Partner beta
-
-Approved partner accounts can create isolated operator-owned organizations and read consolidated
-usage:
-
-```ts
-const child = await shipmail.partner.createOrganization(
-  {
-    name: "Operator",
-    external_reference: "operator_123",
-    owner_email: "owner@example.com",
-    mailbox_limit: 3,
-    data_classification: "internal_test",
-  },
-  { idempotencyKey: "operator-123" },
-);
-
-const delegated = new ShipmailClient({
-  apiKey: process.env.SHIPMAIL_API_KEY!,
-  organizationId: child.organization_id,
-});
-
-await delegated.domains.list();
-await delegated.mailboxes.create({
-  domain_id: "dom_...",
-  address: "support",
-  generate_password: true,
-});
-const grants = await shipmail.partner.listMailboxCredentialGrants();
-const credential = await shipmail.partner.consumeMailboxCredentialGrant(grants.data[0]!.id, {
-  name: "Embedded webmail",
-});
-await shipmail.partner.usage();
-```
-
-Use a separate client for delegated infrastructure. Partner target context is not accepted by
-message, thread, calendar, contacts, export, suppression, billing, or password endpoints. The beta
-requires Shipmail approval and externally owned domains. Delegated mailbox creation must use
-`generate_password: true`; the generated primary password is never returned to the partner.
-The operator creates a one-time credential grant. Consuming it requires the exact
-`partner:mailbox_credentials:issue` scope and returns the app-password secret once. App-password
-creation and grant consumption do not accept idempotency keys because their plaintext response must
-never be cached.
-
 ## Status
 
 ```ts
@@ -641,7 +599,6 @@ type MethodOptions = {
   signal?: AbortSignal;
   headers?: Record<string, string>;
   idempotencyKey?: string;
-  organizationId?: string;
 };
 ```
 

package/dist/api-key-scopes.cjs

@@ -34,15 +34,10 @@ var API_KEY_SCOPES = [
   "webhooks:read",
   "webhooks:write",
   "suppressions:read",
-  "suppressions:write",
-  "partner:organizations:read",
-  "partner:organizations:write",
-  "partner:organizations:access",
-  "partner:mailbox_credentials:issue",
-  "partner:usage:read"
+  "suppressions:write"
 ];
 var API_KEY_SCOPE_DESCRIPTIONS = {
-  "*": "All non-partner API endpoints in this organization.",
+  "*": "All API endpoints in this organization.",
   "audiences:read": "List and retrieve newsletter audiences and their subscribers.",
   "audiences:write": "Create audiences and add, update, or remove their subscribers.",
   "automations:read": "List and retrieve assistant automations.",
@@ -55,9 +50,9 @@ var API_KEY_SCOPE_DESCRIPTIONS = {
   "domains:write": "Create, update, and delete domains.",
   "mailboxes:read": "List and retrieve mailboxes.",
   "mailboxes:export": "Create and download mailbox content exports.",
-  "mailboxes:write": "Create, update, suspend, resume, and delete mailboxes.",
+  "mailboxes:write": "Create, update, suspend, resume, and delete mailboxes. Does not include setting mailbox passwords.",
   "mailbox_credentials:read": "List revocable app passwords for allowed mailboxes.",
-  "mailbox_credentials:write": "Create and revoke app passwords for allowed mailboxes.",
+  "mailbox_credentials:write": "Set primary mailbox passwords and create and revoke app passwords for allowed mailboxes.",
   "mailbox_forwarding:read": "List forwarding destinations for allowed mailboxes.",
   "mailbox_forwarding:write": "Create and remove forwarding destinations for allowed mailboxes.",
   "mailbox_rules:read": "List deterministic server-side rules for allowed mailboxes.",
@@ -74,19 +69,13 @@ var API_KEY_SCOPE_DESCRIPTIONS = {
   "webhooks:read": "List webhooks, retrieve webhooks, and list deliveries.",
   "webhooks:write": "Create, update, delete, test, and rotate webhooks.",
   "suppressions:read": "List suppressed recipient addresses.",
-  "suppressions:write": "Remove addresses from the suppression list.",
-  "partner:organizations:read": "List and retrieve this partner's child organizations.",
-  "partner:organizations:write": "Create and manage this partner's child organizations.",
-  "partner:organizations:access": "Act on an active child using the delegated organization header.",
-  "partner:mailbox_credentials:issue": "List and consume operator-approved grants for embedded-webmail credentials.",
-  "partner:usage:read": "Read consolidated child and mailbox usage for this partner."
+  "suppressions:write": "Remove addresses from the suppression list."
 };
 function isApiKeyScope(value) {
   return API_KEY_SCOPES.some((scope) => scope === value);
 }
 function apiKeyScopesGrant(grantedScopes, requiredScope) {
   if (requiredScope === "public") return true;
-  if (requiredScope.startsWith("partner:")) return grantedScopes.includes(requiredScope);
   return grantedScopes.includes("*") || grantedScopes.includes(requiredScope);
 }
 

package/dist/api-key-scopes.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/api-key-scopes.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB;AAAA,EAC5B,GAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA,0BAAA;AAAA,EACA,2BAAA;AAAA,EACA,yBAAA;AAAA,EACA,0BAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,4BAAA;AAAA,EACA,6BAAA;AAAA,EACA,8BAAA;AAAA,EACA,mCAAA;AAAA,EACA;AACF;AAIO,IAAM,0BAAA,GAAoE;AAAA,EAC/E,GAAA,EAAK,qDAAA;AAAA,EACL,gBAAA,EAAkB,+DAAA;AAAA,EAClB,iBAAA,EAAmB,gEAAA;AAAA,EACnB,kBAAA,EAAoB,0CAAA;AAAA,EACpB,mBAAA,EAAqB,yDAAA;AAAA,EACrB,oBAAA,EAAsB,kCAAA;AAAA,EACtB,qBAAA,EAAuB,2CAAA;AAAA,EACvB,eAAA,EAAiB,0DAAA;AAAA,EACjB,gBAAA,EAAkB,6CAAA;AAAA,EAClB,cAAA,EAAgB,qCAAA;AAAA,EAChB,eAAA,EAAiB,qCAAA;AAAA,EACjB,gBAAA,EAAkB,8BAAA;AAAA,EAClB,kBAAA,EAAoB,8CAAA;AAAA,EACpB,iBAAA,EAAmB,wDAAA;AAAA,EACnB,0BAAA,EAA4B,qDAAA;AAAA,EAC5B,2BAAA,EAA6B,wDAAA;AAAA,EAC7B,yBAAA,EAA2B,qDAAA;AAAA,EAC3B,0BAAA,EAA4B,kEAAA;AAAA,EAC5B,oBAAA,EAAsB,6DAAA;AAAA,EACtB,qBAAA,EAAuB,wEAAA;AAAA,EACvB,cAAA,EAAgB,yCAAA;AAAA,EAChB,eAAA,EAAiB,6BAAA;AAAA,EACjB,gBAAA,EAAkB,oDAAA;AAAA,EAClB,cAAA,EAAgB,gEAAA;AAAA,EAChB,gBAAA,EAAkB,+EAAA;AAAA,EAClB,eAAA,EAAiB,oDAAA;AAAA,EACjB,kBAAA,EAAoB,oDAAA;AAAA,EACpB,mBAAA,EAAqB,iEAAA;AAAA,EACrB,cAAA,EAAgB,4CAAA;AAAA,EAChB,eAAA,EAAiB,wDAAA;AAAA,EACjB,gBAAA,EAAkB,oDAAA;AAAA,EAClB,mBAAA,EAAqB,sCAAA;AAAA,EACrB,oBAAA,EAAsB,6CAAA;AAAA,EACtB,4BAAA,EAA8B,uDAAA;AAAA,EAC9B,6BAAA,EAA+B,uDAAA;AAAA,EAC/B,8BAAA,EAAgC,iEAAA;AAAA,EAChC,mCAAA,EACE,6EAAA;AAAA,EACF,oBAAA,EAAsB;AACxB;AAEO,SAAS,cAAc,KAAA,EAAqC;AACjE,EAAA,OAAO,cAAA,CAAe,IAAA,CAAK,CAAC,KAAA,KAAU,UAAU,KAAK,CAAA;AACvD;AAEO,SAAS,iBAAA,CACd,eACA,aAAA,EACS;AACT,EAAA,IAAI,aAAA,KAAkB,UAAU,OAAO,IAAA;AACvC,EAAA,IAAI,cAAc,UAAA,CAAW,UAAU,GAAG,OAAO,aAAA,CAAc,SAAS,aAAa,CAAA;AACrF,EAAA,OAAO,cAAc,QAAA,CAAS,GAAG,CAAA,IAAK,aAAA,CAAc,SAAS,aAAa,CAAA;AAC5E","file":"api-key-scopes.cjs","sourcesContent":["export const API_KEY_SCOPES = [\n  \"*\",\n  \"audiences:read\",\n  \"audiences:write\",\n  \"automations:read\",\n  \"automations:write\",\n  \"booking_pages:read\",\n  \"booking_pages:write\",\n  \"calendar:read\",\n  \"calendar:write\",\n  \"domains:read\",\n  \"domains:write\",\n  \"mailboxes:read\",\n  \"mailboxes:export\",\n  \"mailboxes:write\",\n  \"mailbox_credentials:read\",\n  \"mailbox_credentials:write\",\n  \"mailbox_forwarding:read\",\n  \"mailbox_forwarding:write\",\n  \"mailbox_rules:read\",\n  \"mailbox_rules:write\",\n  \"members:read\",\n  \"messages:read\",\n  \"messages:write\",\n  \"drafts:write\",\n  \"drafts:compose\",\n  \"messages:send\",\n  \"newsletters:read\",\n  \"newsletters:write\",\n  \"threads:read\",\n  \"webhooks:read\",\n  \"webhooks:write\",\n  \"suppressions:read\",\n  \"suppressions:write\",\n  \"partner:organizations:read\",\n  \"partner:organizations:write\",\n  \"partner:organizations:access\",\n  \"partner:mailbox_credentials:issue\",\n  \"partner:usage:read\",\n] as const;\n\nexport type ApiKeyScope = (typeof API_KEY_SCOPES)[number];\n\nexport const API_KEY_SCOPE_DESCRIPTIONS: Readonly<Record<ApiKeyScope, string>> = {\n  \"*\": \"All non-partner API endpoints in this organization.\",\n  \"audiences:read\": \"List and retrieve newsletter audiences and their subscribers.\",\n  \"audiences:write\": \"Create audiences and add, update, or remove their subscribers.\",\n  \"automations:read\": \"List and retrieve assistant automations.\",\n  \"automations:write\": \"Create, update, and manually run assistant automations.\",\n  \"booking_pages:read\": \"List and retrieve booking pages.\",\n  \"booking_pages:write\": \"Create, update, and delete booking pages.\",\n  \"calendar:read\": \"List and retrieve calendar events and open availability.\",\n  \"calendar:write\": \"Create, update, and delete calendar events.\",\n  \"domains:read\": \"List, retrieve, and verify domains.\",\n  \"domains:write\": \"Create, update, and delete domains.\",\n  \"mailboxes:read\": \"List and retrieve mailboxes.\",\n  \"mailboxes:export\": \"Create and download mailbox content exports.\",\n  \"mailboxes:write\": \"Create, update, suspend, resume, and delete mailboxes.\",\n  \"mailbox_credentials:read\": \"List revocable app passwords for allowed mailboxes.\",\n  \"mailbox_credentials:write\": \"Create and revoke app passwords for allowed mailboxes.\",\n  \"mailbox_forwarding:read\": \"List forwarding destinations for allowed mailboxes.\",\n  \"mailbox_forwarding:write\": \"Create and remove forwarding destinations for allowed mailboxes.\",\n  \"mailbox_rules:read\": \"List deterministic server-side rules for allowed mailboxes.\",\n  \"mailbox_rules:write\": \"Create, replace, and remove deterministic rules for allowed mailboxes.\",\n  \"members:read\": \"List and retrieve organization members.\",\n  \"messages:read\": \"List and retrieve messages.\",\n  \"messages:write\": \"Update, move, delete, and inject sandbox messages.\",\n  \"drafts:write\": \"Create agent-safe reply drafts with server-derived recipients.\",\n  \"drafts:compose\": \"Save new-message drafts to a mailbox's Drafts folder for review. Cannot send.\",\n  \"messages:send\": \"Send messages, replies, and approved reply drafts.\",\n  \"newsletters:read\": \"List and retrieve newsletter drafts and campaigns.\",\n  \"newsletters:write\": \"Create, update, test, schedule, cancel, and resume newsletters.\",\n  \"threads:read\": \"List threads and retrieve thread messages.\",\n  \"webhooks:read\": \"List webhooks, retrieve webhooks, and list deliveries.\",\n  \"webhooks:write\": \"Create, update, delete, test, and rotate webhooks.\",\n  \"suppressions:read\": \"List suppressed recipient addresses.\",\n  \"suppressions:write\": \"Remove addresses from the suppression list.\",\n  \"partner:organizations:read\": \"List and retrieve this partner's child organizations.\",\n  \"partner:organizations:write\": \"Create and manage this partner's child organizations.\",\n  \"partner:organizations:access\": \"Act on an active child using the delegated organization header.\",\n  \"partner:mailbox_credentials:issue\":\n    \"List and consume operator-approved grants for embedded-webmail credentials.\",\n  \"partner:usage:read\": \"Read consolidated child and mailbox usage for this partner.\",\n};\n\nexport function isApiKeyScope(value: string): value is ApiKeyScope {\n  return API_KEY_SCOPES.some((scope) => scope === value);\n}\n\nexport function apiKeyScopesGrant(\n  grantedScopes: readonly string[],\n  requiredScope: ApiKeyScope | \"public\",\n): boolean {\n  if (requiredScope === \"public\") return true;\n  if (requiredScope.startsWith(\"partner:\")) return grantedScopes.includes(requiredScope);\n  return grantedScopes.includes(\"*\") || grantedScopes.includes(requiredScope);\n}\n"]}
+{"version":3,"sources":["../src/api-key-scopes.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB;AAAA,EAC5B,GAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA,0BAAA;AAAA,EACA,2BAAA;AAAA,EACA,yBAAA;AAAA,EACA,0BAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA;AACF;AAIO,IAAM,0BAAA,GAAoE;AAAA,EAC/E,GAAA,EAAK,yCAAA;AAAA,EACL,gBAAA,EAAkB,+DAAA;AAAA,EAClB,iBAAA,EAAmB,gEAAA;AAAA,EACnB,kBAAA,EAAoB,0CAAA;AAAA,EACpB,mBAAA,EAAqB,yDAAA;AAAA,EACrB,oBAAA,EAAsB,kCAAA;AAAA,EACtB,qBAAA,EAAuB,2CAAA;AAAA,EACvB,eAAA,EAAiB,0DAAA;AAAA,EACjB,gBAAA,EAAkB,6CAAA;AAAA,EAClB,cAAA,EAAgB,qCAAA;AAAA,EAChB,eAAA,EAAiB,qCAAA;AAAA,EACjB,gBAAA,EAAkB,8BAAA;AAAA,EAClB,kBAAA,EAAoB,8CAAA;AAAA,EACpB,iBAAA,EACE,oGAAA;AAAA,EACF,0BAAA,EAA4B,qDAAA;AAAA,EAC5B,2BAAA,EACE,0FAAA;AAAA,EACF,yBAAA,EAA2B,qDAAA;AAAA,EAC3B,0BAAA,EAA4B,kEAAA;AAAA,EAC5B,oBAAA,EAAsB,6DAAA;AAAA,EACtB,qBAAA,EAAuB,wEAAA;AAAA,EACvB,cAAA,EAAgB,yCAAA;AAAA,EAChB,eAAA,EAAiB,6BAAA;AAAA,EACjB,gBAAA,EAAkB,oDAAA;AAAA,EAClB,cAAA,EAAgB,gEAAA;AAAA,EAChB,gBAAA,EAAkB,+EAAA;AAAA,EAClB,eAAA,EAAiB,oDAAA;AAAA,EACjB,kBAAA,EAAoB,oDAAA;AAAA,EACpB,mBAAA,EAAqB,iEAAA;AAAA,EACrB,cAAA,EAAgB,4CAAA;AAAA,EAChB,eAAA,EAAiB,wDAAA;AAAA,EACjB,gBAAA,EAAkB,oDAAA;AAAA,EAClB,mBAAA,EAAqB,sCAAA;AAAA,EACrB,oBAAA,EAAsB;AACxB;AAEO,SAAS,cAAc,KAAA,EAAqC;AACjE,EAAA,OAAO,cAAA,CAAe,IAAA,CAAK,CAAC,KAAA,KAAU,UAAU,KAAK,CAAA;AACvD;AAEO,SAAS,iBAAA,CACd,eACA,aAAA,EACS;AACT,EAAA,IAAI,aAAA,KAAkB,UAAU,OAAO,IAAA;AACvC,EAAA,OAAO,cAAc,QAAA,CAAS,GAAG,CAAA,IAAK,aAAA,CAAc,SAAS,aAAa,CAAA;AAC5E","file":"api-key-scopes.cjs","sourcesContent":["export const API_KEY_SCOPES = [\n  \"*\",\n  \"audiences:read\",\n  \"audiences:write\",\n  \"automations:read\",\n  \"automations:write\",\n  \"booking_pages:read\",\n  \"booking_pages:write\",\n  \"calendar:read\",\n  \"calendar:write\",\n  \"domains:read\",\n  \"domains:write\",\n  \"mailboxes:read\",\n  \"mailboxes:export\",\n  \"mailboxes:write\",\n  \"mailbox_credentials:read\",\n  \"mailbox_credentials:write\",\n  \"mailbox_forwarding:read\",\n  \"mailbox_forwarding:write\",\n  \"mailbox_rules:read\",\n  \"mailbox_rules:write\",\n  \"members:read\",\n  \"messages:read\",\n  \"messages:write\",\n  \"drafts:write\",\n  \"drafts:compose\",\n  \"messages:send\",\n  \"newsletters:read\",\n  \"newsletters:write\",\n  \"threads:read\",\n  \"webhooks:read\",\n  \"webhooks:write\",\n  \"suppressions:read\",\n  \"suppressions:write\",\n] as const;\n\nexport type ApiKeyScope = (typeof API_KEY_SCOPES)[number];\n\nexport const API_KEY_SCOPE_DESCRIPTIONS: Readonly<Record<ApiKeyScope, string>> = {\n  \"*\": \"All API endpoints in this organization.\",\n  \"audiences:read\": \"List and retrieve newsletter audiences and their subscribers.\",\n  \"audiences:write\": \"Create audiences and add, update, or remove their subscribers.\",\n  \"automations:read\": \"List and retrieve assistant automations.\",\n  \"automations:write\": \"Create, update, and manually run assistant automations.\",\n  \"booking_pages:read\": \"List and retrieve booking pages.\",\n  \"booking_pages:write\": \"Create, update, and delete booking pages.\",\n  \"calendar:read\": \"List and retrieve calendar events and open availability.\",\n  \"calendar:write\": \"Create, update, and delete calendar events.\",\n  \"domains:read\": \"List, retrieve, and verify domains.\",\n  \"domains:write\": \"Create, update, and delete domains.\",\n  \"mailboxes:read\": \"List and retrieve mailboxes.\",\n  \"mailboxes:export\": \"Create and download mailbox content exports.\",\n  \"mailboxes:write\":\n    \"Create, update, suspend, resume, and delete mailboxes. Does not include setting mailbox passwords.\",\n  \"mailbox_credentials:read\": \"List revocable app passwords for allowed mailboxes.\",\n  \"mailbox_credentials:write\":\n    \"Set primary mailbox passwords and create and revoke app passwords for allowed mailboxes.\",\n  \"mailbox_forwarding:read\": \"List forwarding destinations for allowed mailboxes.\",\n  \"mailbox_forwarding:write\": \"Create and remove forwarding destinations for allowed mailboxes.\",\n  \"mailbox_rules:read\": \"List deterministic server-side rules for allowed mailboxes.\",\n  \"mailbox_rules:write\": \"Create, replace, and remove deterministic rules for allowed mailboxes.\",\n  \"members:read\": \"List and retrieve organization members.\",\n  \"messages:read\": \"List and retrieve messages.\",\n  \"messages:write\": \"Update, move, delete, and inject sandbox messages.\",\n  \"drafts:write\": \"Create agent-safe reply drafts with server-derived recipients.\",\n  \"drafts:compose\": \"Save new-message drafts to a mailbox's Drafts folder for review. Cannot send.\",\n  \"messages:send\": \"Send messages, replies, and approved reply drafts.\",\n  \"newsletters:read\": \"List and retrieve newsletter drafts and campaigns.\",\n  \"newsletters:write\": \"Create, update, test, schedule, cancel, and resume newsletters.\",\n  \"threads:read\": \"List threads and retrieve thread messages.\",\n  \"webhooks:read\": \"List webhooks, retrieve webhooks, and list deliveries.\",\n  \"webhooks:write\": \"Create, update, delete, test, and rotate webhooks.\",\n  \"suppressions:read\": \"List suppressed recipient addresses.\",\n  \"suppressions:write\": \"Remove addresses from the suppression list.\",\n};\n\nexport function isApiKeyScope(value: string): value is ApiKeyScope {\n  return API_KEY_SCOPES.some((scope) => scope === value);\n}\n\nexport function apiKeyScopesGrant(\n  grantedScopes: readonly string[],\n  requiredScope: ApiKeyScope | \"public\",\n): boolean {\n  if (requiredScope === \"public\") return true;\n  return grantedScopes.includes(\"*\") || grantedScopes.includes(requiredScope);\n}\n"]}

package/dist/api-key-scopes.d.cts

@@ -1,4 +1,4 @@
-declare const API_KEY_SCOPES: readonly ["*", "audiences:read", "audiences:write", "automations:read", "automations:write", "booking_pages:read", "booking_pages:write", "calendar:read", "calendar:write", "domains:read", "domains:write", "mailboxes:read", "mailboxes:export", "mailboxes:write", "mailbox_credentials:read", "mailbox_credentials:write", "mailbox_forwarding:read", "mailbox_forwarding:write", "mailbox_rules:read", "mailbox_rules:write", "members:read", "messages:read", "messages:write", "drafts:write", "drafts:compose", "messages:send", "newsletters:read", "newsletters:write", "threads:read", "webhooks:read", "webhooks:write", "suppressions:read", "suppressions:write", "partner:organizations:read", "partner:organizations:write", "partner:organizations:access", "partner:mailbox_credentials:issue", "partner:usage:read"];
+declare const API_KEY_SCOPES: readonly ["*", "audiences:read", "audiences:write", "automations:read", "automations:write", "booking_pages:read", "booking_pages:write", "calendar:read", "calendar:write", "domains:read", "domains:write", "mailboxes:read", "mailboxes:export", "mailboxes:write", "mailbox_credentials:read", "mailbox_credentials:write", "mailbox_forwarding:read", "mailbox_forwarding:write", "mailbox_rules:read", "mailbox_rules:write", "members:read", "messages:read", "messages:write", "drafts:write", "drafts:compose", "messages:send", "newsletters:read", "newsletters:write", "threads:read", "webhooks:read", "webhooks:write", "suppressions:read", "suppressions:write"];
 type ApiKeyScope = (typeof API_KEY_SCOPES)[number];
 declare const API_KEY_SCOPE_DESCRIPTIONS: Readonly<Record<ApiKeyScope, string>>;
 declare function isApiKeyScope(value: string): value is ApiKeyScope;

package/dist/api-key-scopes.d.ts

@@ -1,4 +1,4 @@
-declare const API_KEY_SCOPES: readonly ["*", "audiences:read", "audiences:write", "automations:read", "automations:write", "booking_pages:read", "booking_pages:write", "calendar:read", "calendar:write", "domains:read", "domains:write", "mailboxes:read", "mailboxes:export", "mailboxes:write", "mailbox_credentials:read", "mailbox_credentials:write", "mailbox_forwarding:read", "mailbox_forwarding:write", "mailbox_rules:read", "mailbox_rules:write", "members:read", "messages:read", "messages:write", "drafts:write", "drafts:compose", "messages:send", "newsletters:read", "newsletters:write", "threads:read", "webhooks:read", "webhooks:write", "suppressions:read", "suppressions:write", "partner:organizations:read", "partner:organizations:write", "partner:organizations:access", "partner:mailbox_credentials:issue", "partner:usage:read"];
+declare const API_KEY_SCOPES: readonly ["*", "audiences:read", "audiences:write", "automations:read", "automations:write", "booking_pages:read", "booking_pages:write", "calendar:read", "calendar:write", "domains:read", "domains:write", "mailboxes:read", "mailboxes:export", "mailboxes:write", "mailbox_credentials:read", "mailbox_credentials:write", "mailbox_forwarding:read", "mailbox_forwarding:write", "mailbox_rules:read", "mailbox_rules:write", "members:read", "messages:read", "messages:write", "drafts:write", "drafts:compose", "messages:send", "newsletters:read", "newsletters:write", "threads:read", "webhooks:read", "webhooks:write", "suppressions:read", "suppressions:write"];
 type ApiKeyScope = (typeof API_KEY_SCOPES)[number];
 declare const API_KEY_SCOPE_DESCRIPTIONS: Readonly<Record<ApiKeyScope, string>>;
 declare function isApiKeyScope(value: string): value is ApiKeyScope;

package/dist/api-key-scopes.js

@@ -32,15 +32,10 @@ var API_KEY_SCOPES = [
   "webhooks:read",
   "webhooks:write",
   "suppressions:read",
-  "suppressions:write",
-  "partner:organizations:read",
-  "partner:organizations:write",
-  "partner:organizations:access",
-  "partner:mailbox_credentials:issue",
-  "partner:usage:read"
+  "suppressions:write"
 ];
 var API_KEY_SCOPE_DESCRIPTIONS = {
-  "*": "All non-partner API endpoints in this organization.",
+  "*": "All API endpoints in this organization.",
   "audiences:read": "List and retrieve newsletter audiences and their subscribers.",
   "audiences:write": "Create audiences and add, update, or remove their subscribers.",
   "automations:read": "List and retrieve assistant automations.",
@@ -53,9 +48,9 @@ var API_KEY_SCOPE_DESCRIPTIONS = {
   "domains:write": "Create, update, and delete domains.",
   "mailboxes:read": "List and retrieve mailboxes.",
   "mailboxes:export": "Create and download mailbox content exports.",
-  "mailboxes:write": "Create, update, suspend, resume, and delete mailboxes.",
+  "mailboxes:write": "Create, update, suspend, resume, and delete mailboxes. Does not include setting mailbox passwords.",
   "mailbox_credentials:read": "List revocable app passwords for allowed mailboxes.",
-  "mailbox_credentials:write": "Create and revoke app passwords for allowed mailboxes.",
+  "mailbox_credentials:write": "Set primary mailbox passwords and create and revoke app passwords for allowed mailboxes.",
   "mailbox_forwarding:read": "List forwarding destinations for allowed mailboxes.",
   "mailbox_forwarding:write": "Create and remove forwarding destinations for allowed mailboxes.",
   "mailbox_rules:read": "List deterministic server-side rules for allowed mailboxes.",
@@ -72,19 +67,13 @@ var API_KEY_SCOPE_DESCRIPTIONS = {
   "webhooks:read": "List webhooks, retrieve webhooks, and list deliveries.",
   "webhooks:write": "Create, update, delete, test, and rotate webhooks.",
   "suppressions:read": "List suppressed recipient addresses.",
-  "suppressions:write": "Remove addresses from the suppression list.",
-  "partner:organizations:read": "List and retrieve this partner's child organizations.",
-  "partner:organizations:write": "Create and manage this partner's child organizations.",
-  "partner:organizations:access": "Act on an active child using the delegated organization header.",
-  "partner:mailbox_credentials:issue": "List and consume operator-approved grants for embedded-webmail credentials.",
-  "partner:usage:read": "Read consolidated child and mailbox usage for this partner."
+  "suppressions:write": "Remove addresses from the suppression list."
 };
 function isApiKeyScope(value) {
   return API_KEY_SCOPES.some((scope) => scope === value);
 }
 function apiKeyScopesGrant(grantedScopes, requiredScope) {
   if (requiredScope === "public") return true;
-  if (requiredScope.startsWith("partner:")) return grantedScopes.includes(requiredScope);
   return grantedScopes.includes("*") || grantedScopes.includes(requiredScope);
 }
 

package/dist/api-key-scopes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/api-key-scopes.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB;AAAA,EAC5B,GAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA,0BAAA;AAAA,EACA,2BAAA;AAAA,EACA,yBAAA;AAAA,EACA,0BAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,4BAAA;AAAA,EACA,6BAAA;AAAA,EACA,8BAAA;AAAA,EACA,mCAAA;AAAA,EACA;AACF;AAIO,IAAM,0BAAA,GAAoE;AAAA,EAC/E,GAAA,EAAK,qDAAA;AAAA,EACL,gBAAA,EAAkB,+DAAA;AAAA,EAClB,iBAAA,EAAmB,gEAAA;AAAA,EACnB,kBAAA,EAAoB,0CAAA;AAAA,EACpB,mBAAA,EAAqB,yDAAA;AAAA,EACrB,oBAAA,EAAsB,kCAAA;AAAA,EACtB,qBAAA,EAAuB,2CAAA;AAAA,EACvB,eAAA,EAAiB,0DAAA;AAAA,EACjB,gBAAA,EAAkB,6CAAA;AAAA,EAClB,cAAA,EAAgB,qCAAA;AAAA,EAChB,eAAA,EAAiB,qCAAA;AAAA,EACjB,gBAAA,EAAkB,8BAAA;AAAA,EAClB,kBAAA,EAAoB,8CAAA;AAAA,EACpB,iBAAA,EAAmB,wDAAA;AAAA,EACnB,0BAAA,EAA4B,qDAAA;AAAA,EAC5B,2BAAA,EAA6B,wDAAA;AAAA,EAC7B,yBAAA,EAA2B,qDAAA;AAAA,EAC3B,0BAAA,EAA4B,kEAAA;AAAA,EAC5B,oBAAA,EAAsB,6DAAA;AAAA,EACtB,qBAAA,EAAuB,wEAAA;AAAA,EACvB,cAAA,EAAgB,yCAAA;AAAA,EAChB,eAAA,EAAiB,6BAAA;AAAA,EACjB,gBAAA,EAAkB,oDAAA;AAAA,EAClB,cAAA,EAAgB,gEAAA;AAAA,EAChB,gBAAA,EAAkB,+EAAA;AAAA,EAClB,eAAA,EAAiB,oDAAA;AAAA,EACjB,kBAAA,EAAoB,oDAAA;AAAA,EACpB,mBAAA,EAAqB,iEAAA;AAAA,EACrB,cAAA,EAAgB,4CAAA;AAAA,EAChB,eAAA,EAAiB,wDAAA;AAAA,EACjB,gBAAA,EAAkB,oDAAA;AAAA,EAClB,mBAAA,EAAqB,sCAAA;AAAA,EACrB,oBAAA,EAAsB,6CAAA;AAAA,EACtB,4BAAA,EAA8B,uDAAA;AAAA,EAC9B,6BAAA,EAA+B,uDAAA;AAAA,EAC/B,8BAAA,EAAgC,iEAAA;AAAA,EAChC,mCAAA,EACE,6EAAA;AAAA,EACF,oBAAA,EAAsB;AACxB;AAEO,SAAS,cAAc,KAAA,EAAqC;AACjE,EAAA,OAAO,cAAA,CAAe,IAAA,CAAK,CAAC,KAAA,KAAU,UAAU,KAAK,CAAA;AACvD;AAEO,SAAS,iBAAA,CACd,eACA,aAAA,EACS;AACT,EAAA,IAAI,aAAA,KAAkB,UAAU,OAAO,IAAA;AACvC,EAAA,IAAI,cAAc,UAAA,CAAW,UAAU,GAAG,OAAO,aAAA,CAAc,SAAS,aAAa,CAAA;AACrF,EAAA,OAAO,cAAc,QAAA,CAAS,GAAG,CAAA,IAAK,aAAA,CAAc,SAAS,aAAa,CAAA;AAC5E","file":"api-key-scopes.js","sourcesContent":["export const API_KEY_SCOPES = [\n  \"*\",\n  \"audiences:read\",\n  \"audiences:write\",\n  \"automations:read\",\n  \"automations:write\",\n  \"booking_pages:read\",\n  \"booking_pages:write\",\n  \"calendar:read\",\n  \"calendar:write\",\n  \"domains:read\",\n  \"domains:write\",\n  \"mailboxes:read\",\n  \"mailboxes:export\",\n  \"mailboxes:write\",\n  \"mailbox_credentials:read\",\n  \"mailbox_credentials:write\",\n  \"mailbox_forwarding:read\",\n  \"mailbox_forwarding:write\",\n  \"mailbox_rules:read\",\n  \"mailbox_rules:write\",\n  \"members:read\",\n  \"messages:read\",\n  \"messages:write\",\n  \"drafts:write\",\n  \"drafts:compose\",\n  \"messages:send\",\n  \"newsletters:read\",\n  \"newsletters:write\",\n  \"threads:read\",\n  \"webhooks:read\",\n  \"webhooks:write\",\n  \"suppressions:read\",\n  \"suppressions:write\",\n  \"partner:organizations:read\",\n  \"partner:organizations:write\",\n  \"partner:organizations:access\",\n  \"partner:mailbox_credentials:issue\",\n  \"partner:usage:read\",\n] as const;\n\nexport type ApiKeyScope = (typeof API_KEY_SCOPES)[number];\n\nexport const API_KEY_SCOPE_DESCRIPTIONS: Readonly<Record<ApiKeyScope, string>> = {\n  \"*\": \"All non-partner API endpoints in this organization.\",\n  \"audiences:read\": \"List and retrieve newsletter audiences and their subscribers.\",\n  \"audiences:write\": \"Create audiences and add, update, or remove their subscribers.\",\n  \"automations:read\": \"List and retrieve assistant automations.\",\n  \"automations:write\": \"Create, update, and manually run assistant automations.\",\n  \"booking_pages:read\": \"List and retrieve booking pages.\",\n  \"booking_pages:write\": \"Create, update, and delete booking pages.\",\n  \"calendar:read\": \"List and retrieve calendar events and open availability.\",\n  \"calendar:write\": \"Create, update, and delete calendar events.\",\n  \"domains:read\": \"List, retrieve, and verify domains.\",\n  \"domains:write\": \"Create, update, and delete domains.\",\n  \"mailboxes:read\": \"List and retrieve mailboxes.\",\n  \"mailboxes:export\": \"Create and download mailbox content exports.\",\n  \"mailboxes:write\": \"Create, update, suspend, resume, and delete mailboxes.\",\n  \"mailbox_credentials:read\": \"List revocable app passwords for allowed mailboxes.\",\n  \"mailbox_credentials:write\": \"Create and revoke app passwords for allowed mailboxes.\",\n  \"mailbox_forwarding:read\": \"List forwarding destinations for allowed mailboxes.\",\n  \"mailbox_forwarding:write\": \"Create and remove forwarding destinations for allowed mailboxes.\",\n  \"mailbox_rules:read\": \"List deterministic server-side rules for allowed mailboxes.\",\n  \"mailbox_rules:write\": \"Create, replace, and remove deterministic rules for allowed mailboxes.\",\n  \"members:read\": \"List and retrieve organization members.\",\n  \"messages:read\": \"List and retrieve messages.\",\n  \"messages:write\": \"Update, move, delete, and inject sandbox messages.\",\n  \"drafts:write\": \"Create agent-safe reply drafts with server-derived recipients.\",\n  \"drafts:compose\": \"Save new-message drafts to a mailbox's Drafts folder for review. Cannot send.\",\n  \"messages:send\": \"Send messages, replies, and approved reply drafts.\",\n  \"newsletters:read\": \"List and retrieve newsletter drafts and campaigns.\",\n  \"newsletters:write\": \"Create, update, test, schedule, cancel, and resume newsletters.\",\n  \"threads:read\": \"List threads and retrieve thread messages.\",\n  \"webhooks:read\": \"List webhooks, retrieve webhooks, and list deliveries.\",\n  \"webhooks:write\": \"Create, update, delete, test, and rotate webhooks.\",\n  \"suppressions:read\": \"List suppressed recipient addresses.\",\n  \"suppressions:write\": \"Remove addresses from the suppression list.\",\n  \"partner:organizations:read\": \"List and retrieve this partner's child organizations.\",\n  \"partner:organizations:write\": \"Create and manage this partner's child organizations.\",\n  \"partner:organizations:access\": \"Act on an active child using the delegated organization header.\",\n  \"partner:mailbox_credentials:issue\":\n    \"List and consume operator-approved grants for embedded-webmail credentials.\",\n  \"partner:usage:read\": \"Read consolidated child and mailbox usage for this partner.\",\n};\n\nexport function isApiKeyScope(value: string): value is ApiKeyScope {\n  return API_KEY_SCOPES.some((scope) => scope === value);\n}\n\nexport function apiKeyScopesGrant(\n  grantedScopes: readonly string[],\n  requiredScope: ApiKeyScope | \"public\",\n): boolean {\n  if (requiredScope === \"public\") return true;\n  if (requiredScope.startsWith(\"partner:\")) return grantedScopes.includes(requiredScope);\n  return grantedScopes.includes(\"*\") || grantedScopes.includes(requiredScope);\n}\n"]}
+{"version":3,"sources":["../src/api-key-scopes.ts"],"names":[],"mappings":";AAAO,IAAM,cAAA,GAAiB;AAAA,EAC5B,GAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA,0BAAA;AAAA,EACA,2BAAA;AAAA,EACA,yBAAA;AAAA,EACA,0BAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA;AACF;AAIO,IAAM,0BAAA,GAAoE;AAAA,EAC/E,GAAA,EAAK,yCAAA;AAAA,EACL,gBAAA,EAAkB,+DAAA;AAAA,EAClB,iBAAA,EAAmB,gEAAA;AAAA,EACnB,kBAAA,EAAoB,0CAAA;AAAA,EACpB,mBAAA,EAAqB,yDAAA;AAAA,EACrB,oBAAA,EAAsB,kCAAA;AAAA,EACtB,qBAAA,EAAuB,2CAAA;AAAA,EACvB,eAAA,EAAiB,0DAAA;AAAA,EACjB,gBAAA,EAAkB,6CAAA;AAAA,EAClB,cAAA,EAAgB,qCAAA;AAAA,EAChB,eAAA,EAAiB,qCAAA;AAAA,EACjB,gBAAA,EAAkB,8BAAA;AAAA,EAClB,kBAAA,EAAoB,8CAAA;AAAA,EACpB,iBAAA,EACE,oGAAA;AAAA,EACF,0BAAA,EAA4B,qDAAA;AAAA,EAC5B,2BAAA,EACE,0FAAA;AAAA,EACF,yBAAA,EAA2B,qDAAA;AAAA,EAC3B,0BAAA,EAA4B,kEAAA;AAAA,EAC5B,oBAAA,EAAsB,6DAAA;AAAA,EACtB,qBAAA,EAAuB,wEAAA;AAAA,EACvB,cAAA,EAAgB,yCAAA;AAAA,EAChB,eAAA,EAAiB,6BAAA;AAAA,EACjB,gBAAA,EAAkB,oDAAA;AAAA,EAClB,cAAA,EAAgB,gEAAA;AAAA,EAChB,gBAAA,EAAkB,+EAAA;AAAA,EAClB,eAAA,EAAiB,oDAAA;AAAA,EACjB,kBAAA,EAAoB,oDAAA;AAAA,EACpB,mBAAA,EAAqB,iEAAA;AAAA,EACrB,cAAA,EAAgB,4CAAA;AAAA,EAChB,eAAA,EAAiB,wDAAA;AAAA,EACjB,gBAAA,EAAkB,oDAAA;AAAA,EAClB,mBAAA,EAAqB,sCAAA;AAAA,EACrB,oBAAA,EAAsB;AACxB;AAEO,SAAS,cAAc,KAAA,EAAqC;AACjE,EAAA,OAAO,cAAA,CAAe,IAAA,CAAK,CAAC,KAAA,KAAU,UAAU,KAAK,CAAA;AACvD;AAEO,SAAS,iBAAA,CACd,eACA,aAAA,EACS;AACT,EAAA,IAAI,aAAA,KAAkB,UAAU,OAAO,IAAA;AACvC,EAAA,OAAO,cAAc,QAAA,CAAS,GAAG,CAAA,IAAK,aAAA,CAAc,SAAS,aAAa,CAAA;AAC5E","file":"api-key-scopes.js","sourcesContent":["export const API_KEY_SCOPES = [\n  \"*\",\n  \"audiences:read\",\n  \"audiences:write\",\n  \"automations:read\",\n  \"automations:write\",\n  \"booking_pages:read\",\n  \"booking_pages:write\",\n  \"calendar:read\",\n  \"calendar:write\",\n  \"domains:read\",\n  \"domains:write\",\n  \"mailboxes:read\",\n  \"mailboxes:export\",\n  \"mailboxes:write\",\n  \"mailbox_credentials:read\",\n  \"mailbox_credentials:write\",\n  \"mailbox_forwarding:read\",\n  \"mailbox_forwarding:write\",\n  \"mailbox_rules:read\",\n  \"mailbox_rules:write\",\n  \"members:read\",\n  \"messages:read\",\n  \"messages:write\",\n  \"drafts:write\",\n  \"drafts:compose\",\n  \"messages:send\",\n  \"newsletters:read\",\n  \"newsletters:write\",\n  \"threads:read\",\n  \"webhooks:read\",\n  \"webhooks:write\",\n  \"suppressions:read\",\n  \"suppressions:write\",\n] as const;\n\nexport type ApiKeyScope = (typeof API_KEY_SCOPES)[number];\n\nexport const API_KEY_SCOPE_DESCRIPTIONS: Readonly<Record<ApiKeyScope, string>> = {\n  \"*\": \"All API endpoints in this organization.\",\n  \"audiences:read\": \"List and retrieve newsletter audiences and their subscribers.\",\n  \"audiences:write\": \"Create audiences and add, update, or remove their subscribers.\",\n  \"automations:read\": \"List and retrieve assistant automations.\",\n  \"automations:write\": \"Create, update, and manually run assistant automations.\",\n  \"booking_pages:read\": \"List and retrieve booking pages.\",\n  \"booking_pages:write\": \"Create, update, and delete booking pages.\",\n  \"calendar:read\": \"List and retrieve calendar events and open availability.\",\n  \"calendar:write\": \"Create, update, and delete calendar events.\",\n  \"domains:read\": \"List, retrieve, and verify domains.\",\n  \"domains:write\": \"Create, update, and delete domains.\",\n  \"mailboxes:read\": \"List and retrieve mailboxes.\",\n  \"mailboxes:export\": \"Create and download mailbox content exports.\",\n  \"mailboxes:write\":\n    \"Create, update, suspend, resume, and delete mailboxes. Does not include setting mailbox passwords.\",\n  \"mailbox_credentials:read\": \"List revocable app passwords for allowed mailboxes.\",\n  \"mailbox_credentials:write\":\n    \"Set primary mailbox passwords and create and revoke app passwords for allowed mailboxes.\",\n  \"mailbox_forwarding:read\": \"List forwarding destinations for allowed mailboxes.\",\n  \"mailbox_forwarding:write\": \"Create and remove forwarding destinations for allowed mailboxes.\",\n  \"mailbox_rules:read\": \"List deterministic server-side rules for allowed mailboxes.\",\n  \"mailbox_rules:write\": \"Create, replace, and remove deterministic rules for allowed mailboxes.\",\n  \"members:read\": \"List and retrieve organization members.\",\n  \"messages:read\": \"List and retrieve messages.\",\n  \"messages:write\": \"Update, move, delete, and inject sandbox messages.\",\n  \"drafts:write\": \"Create agent-safe reply drafts with server-derived recipients.\",\n  \"drafts:compose\": \"Save new-message drafts to a mailbox's Drafts folder for review. Cannot send.\",\n  \"messages:send\": \"Send messages, replies, and approved reply drafts.\",\n  \"newsletters:read\": \"List and retrieve newsletter drafts and campaigns.\",\n  \"newsletters:write\": \"Create, update, test, schedule, cancel, and resume newsletters.\",\n  \"threads:read\": \"List threads and retrieve thread messages.\",\n  \"webhooks:read\": \"List webhooks, retrieve webhooks, and list deliveries.\",\n  \"webhooks:write\": \"Create, update, delete, test, and rotate webhooks.\",\n  \"suppressions:read\": \"List suppressed recipient addresses.\",\n  \"suppressions:write\": \"Remove addresses from the suppression list.\",\n};\n\nexport function isApiKeyScope(value: string): value is ApiKeyScope {\n  return API_KEY_SCOPES.some((scope) => scope === value);\n}\n\nexport function apiKeyScopesGrant(\n  grantedScopes: readonly string[],\n  requiredScope: ApiKeyScope | \"public\",\n): boolean {\n  if (requiredScope === \"public\") return true;\n  return grantedScopes.includes(\"*\") || grantedScopes.includes(requiredScope);\n}\n"]}

package/dist/index.cjs

@@ -36,15 +36,10 @@ var API_KEY_SCOPES = [
   "webhooks:read",
   "webhooks:write",
   "suppressions:read",
-  "suppressions:write",
-  "partner:organizations:read",
-  "partner:organizations:write",
-  "partner:organizations:access",
-  "partner:mailbox_credentials:issue",
-  "partner:usage:read"
+  "suppressions:write"
 ];
 var API_KEY_SCOPE_DESCRIPTIONS = {
-  "*": "All non-partner API endpoints in this organization.",
+  "*": "All API endpoints in this organization.",
   "audiences:read": "List and retrieve newsletter audiences and their subscribers.",
   "audiences:write": "Create audiences and add, update, or remove their subscribers.",
   "automations:read": "List and retrieve assistant automations.",
@@ -57,9 +52,9 @@ var API_KEY_SCOPE_DESCRIPTIONS = {
   "domains:write": "Create, update, and delete domains.",
   "mailboxes:read": "List and retrieve mailboxes.",
   "mailboxes:export": "Create and download mailbox content exports.",
-  "mailboxes:write": "Create, update, suspend, resume, and delete mailboxes.",
+  "mailboxes:write": "Create, update, suspend, resume, and delete mailboxes. Does not include setting mailbox passwords.",
   "mailbox_credentials:read": "List revocable app passwords for allowed mailboxes.",
-  "mailbox_credentials:write": "Create and revoke app passwords for allowed mailboxes.",
+  "mailbox_credentials:write": "Set primary mailbox passwords and create and revoke app passwords for allowed mailboxes.",
   "mailbox_forwarding:read": "List forwarding destinations for allowed mailboxes.",
   "mailbox_forwarding:write": "Create and remove forwarding destinations for allowed mailboxes.",
   "mailbox_rules:read": "List deterministic server-side rules for allowed mailboxes.",
@@ -76,19 +71,13 @@ var API_KEY_SCOPE_DESCRIPTIONS = {
   "webhooks:read": "List webhooks, retrieve webhooks, and list deliveries.",
   "webhooks:write": "Create, update, delete, test, and rotate webhooks.",
   "suppressions:read": "List suppressed recipient addresses.",
-  "suppressions:write": "Remove addresses from the suppression list.",
-  "partner:organizations:read": "List and retrieve this partner's child organizations.",
-  "partner:organizations:write": "Create and manage this partner's child organizations.",
-  "partner:organizations:access": "Act on an active child using the delegated organization header.",
-  "partner:mailbox_credentials:issue": "List and consume operator-approved grants for embedded-webmail credentials.",
-  "partner:usage:read": "Read consolidated child and mailbox usage for this partner."
+  "suppressions:write": "Remove addresses from the suppression list."
 };
 function isApiKeyScope(value) {
   return API_KEY_SCOPES.some((scope) => scope === value);
 }
 function apiKeyScopesGrant(grantedScopes, requiredScope) {
   if (requiredScope === "public") return true;
-  if (requiredScope.startsWith("partner:")) return grantedScopes.includes(requiredScope);
   return grantedScopes.includes("*") || grantedScopes.includes(requiredScope);
 }
 
@@ -1381,87 +1370,6 @@ var Newsletters = class extends ApiResource {
   }
 };
 
-// src/resources/partner.ts
-var Partner = class extends ApiResource {
-  listOrganizations(options) {
-    return this.client.request({
-      method: "GET",
-      path: "/partner/organizations",
-      methodOptions: options
-    });
-  }
-  createOrganization(params, options) {
-    return this.client.request({
-      method: "POST",
-      path: "/partner/organizations",
-      body: params,
-      methodOptions: options
-    });
-  }
-  getOrganization(id, options) {
-    return this.client.request({
-      method: "GET",
-      path: `/partner/organizations/${encodeURIComponent(id)}`,
-      methodOptions: options
-    });
-  }
-  updateOrganization(id, params, options) {
-    return this.client.request({
-      method: "PATCH",
-      path: `/partner/organizations/${encodeURIComponent(id)}`,
-      body: params,
-      methodOptions: options
-    });
-  }
-  resendOwnershipInvitation(id, params = {}, options) {
-    return this.client.request({
-      method: "POST",
-      path: `/partner/organizations/${encodeURIComponent(id)}/ownership-invitations`,
-      body: params,
-      methodOptions: options
-    });
-  }
-  suspendOrganization(id, options) {
-    return this.client.request({
-      method: "POST",
-      path: `/partner/organizations/${encodeURIComponent(id)}/suspend`,
-      methodOptions: options
-    });
-  }
-  resumeOrganization(id, options) {
-    return this.client.request({
-      method: "POST",
-      path: `/partner/organizations/${encodeURIComponent(id)}/resume`,
-      methodOptions: options
-    });
-  }
-  offboardOrganization(id, options) {
-    return this.client.request({
-      method: "DELETE",
-      path: `/partner/organizations/${encodeURIComponent(id)}`,
-      methodOptions: options
-    });
-  }
-  listMailboxCredentialGrants(options) {
-    return this.client.request({
-      method: "GET",
-      path: "/partner/mailbox-credential-grants",
-      methodOptions: options
-    });
-  }
-  consumeMailboxCredentialGrant(grantId, params = {}, options) {
-    return this.client.request({
-      method: "POST",
-      path: `/partner/mailbox-credential-grants/${encodeURIComponent(grantId)}/consume`,
-      body: params,
-      methodOptions: options
-    });
-  }
-  usage(options) {
-    return this.client.request({ method: "GET", path: "/partner/usage", methodOptions: options });
-  }
-};
-
 // src/resources/reply-scans.ts
 var ReplyScans = class extends ApiResource {
   create(params, options) {
@@ -1710,7 +1618,7 @@ var Webhooks = class extends ApiResource {
 };
 
 // src/version.ts
-var VERSION = "0.5.9";
+var VERSION = "0.6.0";
 
 // src/client.ts
 var DEFAULT_BASE_URL = "https://shipmail.to/api/v1";
@@ -1762,7 +1670,6 @@ var ShipmailClient = class {
       this.timeout = DEFAULT_TIMEOUT;
       this.fetchFn = globalThis.fetch;
       this.defaultHeaders = {};
-      this.organizationId = void 0;
     } else {
       this.apiKey = config.apiKey;
       this.baseUrl = config.baseUrl ?? DEFAULT_BASE_URL;
@@ -1770,7 +1677,6 @@ var ShipmailClient = class {
       this.timeout = config.timeout ?? DEFAULT_TIMEOUT;
       this.fetchFn = config.fetch ?? globalThis.fetch;
       this.defaultHeaders = config.defaultHeaders ? { ...config.defaultHeaders } : {};
-      this.organizationId = config.organizationId;
     }
     if (!Number.isSafeInteger(this.maxRetries) || this.maxRetries < 0) {
       throw new RangeError("maxRetries must be a non-negative safe integer");
@@ -1785,7 +1691,6 @@ var ShipmailClient = class {
     this.members = new Members(this);
     this.messages = new Messages(this);
     this.newsletters = new Newsletters(this);
-    this.partner = new Partner(this);
     this.replyScans = new ReplyScans(this);
     this.scheduledMessages = new ScheduledMessages(this);
     this.suppressions = new Suppressions(this);
@@ -1832,10 +1737,6 @@ var ShipmailClient = class {
         if (methodOpts?.idempotencyKey) {
           headers["Idempotency-Key"] = methodOpts.idempotencyKey;
         }
-        const targetOrganizationId = methodOpts?.organizationId ?? this.organizationId;
-        if (targetOrganizationId) {
-          headers["X-Shipmail-Organization-Id"] = targetOrganizationId;
-        }
         let body = null;
         if (options.rawBody !== void 0) {
           headers["Content-Type"] = options.contentType ?? "application/octet-stream";
@@ -1921,7 +1822,11 @@ var WEBHOOK_EVENT_TYPES = [
   "org.reputation_warning",
   "org.sending_throttled",
   "org.sending_suspended",
-  "org.reputation_recovered"
+  "org.reputation_recovered",
+  "reply.overdue",
+  "conversation.needs_action",
+  "calendar.event_starting",
+  "booking.created"
 ];
 var WEBHOOK_DELIVERY_EVENT_TYPES = ["webhook.test", ...WEBHOOK_EVENT_TYPES];
 var DOMAIN_STATUSES = ["pending", "verifying", "verified", "degraded", "failed"];