feat(api): api update

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 20
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cas-parser/cas-parser-5c6cdb8b7a2c0ba449927687bc378823ac947b26b7c2e6c379ae14668b73979a.yml
-openapi_spec_hash: 6bc024b866f01da53e2cfd6e404157c7
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cas-parser/cas-parser-4d179917b01ea51a3325e7b37ecbbb60d0ba8f60381fe715ff3ec31284ca8042.yml
+openapi_spec_hash: d027d37bd7051aa8c05fe1820c05b316
 config_hash: 5509bb7a961ae2e79114b24c381606d4

packages/mcp-server/src/local-docs-search.ts

@@ -566,13 +566,14 @@ const EMBEDDED_METHODS: MethodEntry[] = [
     httpMethod: 'post',
     summary: 'Connect Email Provider (Initiate OAuth)',
     description:
-      "Initiate OAuth flow to connect user's email inbox.\n\nReturns an `oauth_url` that you should redirect the user to. After authorization,\nthey are redirected back to your `redirect_uri` with the following query parameters:\n\n**On success:**\n- `inbox_token` - Encrypted token to store client-side\n- `email` - Email address of the connected account\n- `state` - Your original state parameter (for CSRF verification)\n\n**On error:**\n- `error` - Error code (e.g., `access_denied`, `token_exchange_failed`)\n- `state` - Your original state parameter\n\n**Store the `inbox_token` client-side** and use it for all subsequent inbox API calls.\n",
+      "Initiate OAuth flow to connect user's email inbox.\n\nReturns an `oauth_url` that you should redirect the user to. After authorization,\nthey are redirected back to your `redirect_uri` with the following query parameters:\n\n**On success:**\n- `inbox_token` - Encrypted token to store client-side\n- `email` - Email address of the connected account\n- `state` - Your original state parameter (for CSRF verification)\n\n**On error:**\n- `error` - Error code (e.g., `access_denied`, `token_exchange_failed`)\n- `state` - Your original state parameter\n\n**Store the `inbox_token` client-side** and use it for all subsequent inbox API calls.\nThe token is long-lived (it stores an encrypted refresh token), so a single OAuth\nconnect gives ongoing access to both historical and future CAS statements in the\nuser's inbox. Reuse the same token until the user revokes access via\n`/v4/inbox/disconnect` or their provider's account settings.\n",
     stainlessPath: '(resource) inbox > (method) connect_email',
     qualified: 'client.inbox.connectEmail',
-    params: ['redirect_uri: string;', "provider?: 'gmail' | 'outlook';", 'state?: string;'],
-    response: "{ expires_in?: number; oauth_url?: string; provider?: 'gmail' | 'outlook'; status?: string; }",
+    params: ['redirect_uri: string;', "provider?: 'gmail' | 'outlook' | 'zoho';", 'state?: string;'],
+    response:
+      "{ expires_in?: number; oauth_url?: string; provider?: 'gmail' | 'outlook' | 'zoho'; status?: string; }",
     markdown:
-      "## connect_email\n\n`client.inbox.connectEmail(redirect_uri: string, provider?: 'gmail' | 'outlook', state?: string): { expires_in?: number; oauth_url?: string; provider?: 'gmail' | 'outlook'; status?: string; }`\n\n**post** `/v4/inbox/connect`\n\nInitiate OAuth flow to connect user's email inbox.\n\nReturns an `oauth_url` that you should redirect the user to. After authorization,\nthey are redirected back to your `redirect_uri` with the following query parameters:\n\n**On success:**\n- `inbox_token` - Encrypted token to store client-side\n- `email` - Email address of the connected account\n- `state` - Your original state parameter (for CSRF verification)\n\n**On error:**\n- `error` - Error code (e.g., `access_denied`, `token_exchange_failed`)\n- `state` - Your original state parameter\n\n**Store the `inbox_token` client-side** and use it for all subsequent inbox API calls.\n\n\n### Parameters\n\n- `redirect_uri: string`\n  Your callback URL to receive the inbox_token (must be http or https)\n\n- `provider?: 'gmail' | 'outlook'`\n  Mail provider to connect. Defaults to `gmail`.\n\n- `gmail` - Google accounts\n- `outlook` - Microsoft accounts\n\nAny value other than `outlook` is treated as `gmail`. The\nresolved provider is returned in the response.\n\n- `state?: string`\n  State parameter for CSRF protection (returned in redirect)\n\n### Returns\n\n- `{ expires_in?: number; oauth_url?: string; provider?: 'gmail' | 'outlook'; status?: string; }`\n\n  - `expires_in?: number`\n  - `oauth_url?: string`\n  - `provider?: 'gmail' | 'outlook'`\n  - `status?: string`\n\n### Example\n\n```typescript\nimport CasParser from 'cas-parser-node';\n\nconst client = new CasParser();\n\nconst response = await client.inbox.connectEmail({ redirect_uri: 'https://yourapp.com/oauth-callback' });\n\nconsole.log(response);\n```",
+      "## connect_email\n\n`client.inbox.connectEmail(redirect_uri: string, provider?: 'gmail' | 'outlook' | 'zoho', state?: string): { expires_in?: number; oauth_url?: string; provider?: 'gmail' | 'outlook' | 'zoho'; status?: string; }`\n\n**post** `/v4/inbox/connect`\n\nInitiate OAuth flow to connect user's email inbox.\n\nReturns an `oauth_url` that you should redirect the user to. After authorization,\nthey are redirected back to your `redirect_uri` with the following query parameters:\n\n**On success:**\n- `inbox_token` - Encrypted token to store client-side\n- `email` - Email address of the connected account\n- `state` - Your original state parameter (for CSRF verification)\n\n**On error:**\n- `error` - Error code (e.g., `access_denied`, `token_exchange_failed`)\n- `state` - Your original state parameter\n\n**Store the `inbox_token` client-side** and use it for all subsequent inbox API calls.\nThe token is long-lived (it stores an encrypted refresh token), so a single OAuth\nconnect gives ongoing access to both historical and future CAS statements in the\nuser's inbox. Reuse the same token until the user revokes access via\n`/v4/inbox/disconnect` or their provider's account settings.\n\n\n### Parameters\n\n- `redirect_uri: string`\n  Your callback URL to receive the inbox_token (must be http or https)\n\n- `provider?: 'gmail' | 'outlook' | 'zoho'`\n  Mail provider to connect. Defaults to `gmail`.\n\n- `gmail` - Google accounts: `@gmail.com` and Google\n  Workspace domains.\n- `outlook` - personal Microsoft accounts: `@outlook.com`,\n  `@hotmail.com`, `@live.com`, `@msn.com` and localised\n  variants (`@hotmail.co.uk`, `@live.in`, `@hotmail.fr`).\n  Any other address registered as a personal Microsoft\n  account also works, including custom domains.\n- `zoho` - Zoho Mail accounts, including custom domains\n  hosted on Zoho.\n\nAny unrecognised value is treated as `gmail`. The resolved\nprovider is returned in the response.\n\n- `state?: string`\n  State parameter for CSRF protection (returned in redirect)\n\n### Returns\n\n- `{ expires_in?: number; oauth_url?: string; provider?: 'gmail' | 'outlook' | 'zoho'; status?: string; }`\n\n  - `expires_in?: number`\n  - `oauth_url?: string`\n  - `provider?: 'gmail' | 'outlook' | 'zoho'`\n  - `status?: string`\n\n### Example\n\n```typescript\nimport CasParser from 'cas-parser-node';\n\nconst client = new CasParser();\n\nconst response = await client.inbox.connectEmail({ redirect_uri: 'https://yourapp.com/oauth-callback' });\n\nconsole.log(response);\n```",
     perLanguage: {
       typescript: {
         method: 'client.inbox.connectEmail',

src/client.ts

@@ -822,7 +822,14 @@ export class CasParser {
   /**
    * Endpoints for importing CAS files directly from user email inboxes.
    *
-   * **Supported Providers:** Gmail (more coming soon)
+   * **Supported Providers:**
+   *
+   * - **Gmail** (`gmail`, default) — `@gmail.com` and Google Workspace domains
+   * - **Microsoft** (`outlook`) — personal Microsoft accounts: `@outlook.com`,
+   *   `@hotmail.com`, `@live.com`, `@msn.com`, and localised variants such as
+   *   `@hotmail.co.uk`, `@live.in`, `@hotmail.fr`. Any other address registered
+   *   as a personal Microsoft account also works, including custom domains.
+   * - **Zoho Mail** (`zoho`) — Zoho-hosted mailboxes, including custom domains
    *
    * **How it works:**
    * 1. Call `POST /v4/inbox/connect` to get an OAuth URL

src/resources/inbox.ts

@@ -8,7 +8,14 @@ import { RequestOptions } from '../internal/request-options';
 /**
  * Endpoints for importing CAS files directly from user email inboxes.
  *
- * **Supported Providers:** Gmail (more coming soon)
+ * **Supported Providers:**
+ *
+ * - **Gmail** (`gmail`, default) — `@gmail.com` and Google Workspace domains
+ * - **Microsoft** (`outlook`) — personal Microsoft accounts: `@outlook.com`,
+ *   `@hotmail.com`, `@live.com`, `@msn.com`, and localised variants such as
+ *   `@hotmail.co.uk`, `@live.in`, `@hotmail.fr`. Any other address registered
+ *   as a personal Microsoft account also works, including custom domains.
+ * - **Zoho Mail** (`zoho`) — Zoho-hosted mailboxes, including custom domains
  *
  * **How it works:**
  * 1. Call `POST /v4/inbox/connect` to get an OAuth URL
@@ -66,7 +73,10 @@ export class Inbox extends APIResource {
    * - `state` - Your original state parameter
    *
    * **Store the `inbox_token` client-side** and use it for all subsequent inbox API
-   * calls.
+   * calls. The token is long-lived (it stores an encrypted refresh token), so a
+   * single OAuth connect gives ongoing access to both historical and future CAS
+   * statements in the user's inbox. Reuse the same token until the user revokes
+   * access via `/v4/inbox/disconnect` or their provider's account settings.
    *
    * @example
    * ```ts
@@ -169,7 +179,7 @@ export interface InboxConnectEmailResponse {
   /**
    * The provider this OAuth URL was generated for
    */
-  provider?: 'gmail' | 'outlook';
+  provider?: 'gmail' | 'outlook' | 'zoho';
 
   status?: string;
 }
@@ -204,7 +214,7 @@ export namespace InboxListCasFilesResponse {
     /**
      * URL expiration time in seconds. Defaults vary by source:
      *
-     * - Gmail Inbox Import: 86400 (24h)
+     * - Email Inbox Import (Gmail, Outlook, Zoho): 86400 (24h)
      * - Inbound Email with `callback_url` set: 172800 (48h)
      * - Inbound Email without `callback_url`: aligned with the session TTL (~30 min)
      */
@@ -264,13 +274,17 @@ export interface InboxConnectEmailParams {
   /**
    * Mail provider to connect. Defaults to `gmail`.
    *
-   * - `gmail` - Google accounts
-   * - `outlook` - Microsoft accounts
+   * - `gmail` - Google accounts: `@gmail.com` and Google Workspace domains.
+   * - `outlook` - personal Microsoft accounts: `@outlook.com`, `@hotmail.com`,
+   *   `@live.com`, `@msn.com` and localised variants (`@hotmail.co.uk`, `@live.in`,
+   *   `@hotmail.fr`). Any other address registered as a personal Microsoft account
+   *   also works, including custom domains.
+   * - `zoho` - Zoho Mail accounts, including custom domains hosted on Zoho.
    *
-   * Any value other than `outlook` is treated as `gmail`. The resolved provider is
-   * returned in the response.
+   * Any unrecognised value is treated as `gmail`. The resolved provider is returned
+   * in the response.
    */
-  provider?: 'gmail' | 'outlook';
+  provider?: 'gmail' | 'outlook' | 'zoho';
 
   /**
    * State parameter for CSRF protection (returned in redirect)