TW-5374 Add missing admin API resources

CHANGELOG.md

@@ -3,15 +3,22 @@
 ## [Unreleased]
 
 ### Added
+* Application administration updates
+  - `Applications.update()` for `PATCH /v3/applications`
+  - Application updates support sparse branding fields and `callback_uris`, including callback URI IDs for preserving existing callback URIs
+  - Redirect URI updates use `PATCH /v3/applications/redirect-uris/{id}`
+  - Manage Domains admin CRUD and verification endpoints on `client.domains()` via `/v3/admin/domains`; these support `ServiceAccountSigner` for Nylas Service Account request-signing auth without Bearer auth, canonical signed wire bodies, manually signed headers in `RequestOverrides.headers`, base64-encoded PEM service-account keys, and request-only verification types
+  - `Workspaces` resource via `client.workspaces()`: CRUD, paginated listing with `limit` and `page_token`, `autoGroup`, `manualAssign`, `default`, `policyId`, explicit `clearPolicyId`, and `ruleIds`; `CreateWorkspaceRequest` validates that `domain` is present when `autoGroup` is true; `WorkspaceAutoGroupRequest.invalidAlso` includes invalid grants in auto-grouping when enabled
 * Transactional email support via `Domains.sendTransactionalEmail()`
   - `SendTransactionalEmailRequest` model (and fluent `Builder`) for composing transactional messages from a verified domain — supports `to`, `from`, `cc`, `bcc`, `reply_to`, `subject`, `body`, `send_at`, `reply_to_message_id`, `tracking_options`, `use_draft`, `custom_headers`, and `is_plaintext`
   - `NylasClient.domains()` accessor returning the new `Domains` resource
   - Automatic multipart/form-data upload when the total attachment size exceeds the JSON limit
   - Examples: `TransactionalEmailExample.java` and `KotlinTransactionalEmailExample.kt`
 * Administration API — Policies, Rules, and Lists (app-level, `nylas` provider only)
   - `Policies` resource via `client.policies()`: full CRUD (`list`, `find`, `create`, `update`, `destroy`) with `CreatePolicyRequest` / `UpdatePolicyRequest` and supporting models (`Policy`, `PolicyLimits`, `PolicyOptions`, `PolicySpamDetection`)
-  - `Rules` resource via `client.rules()`: full CRUD with `CreateRuleRequest` / `UpdateRuleRequest` and supporting models (`Rule`, `RuleAction`, `RuleActionType`, `RuleCondition`, `RuleConditionOperator`, `RuleMatch`, `RuleMatchOperator`, `RuleTrigger`)
+  - `Rules` resource via `client.rules()`: full CRUD plus `listEvaluations` for grant rule-evaluation audit records; handles the nested `/v3/rules` list envelope returned by the API
   - `NylasLists` resource via `client.lists()`: full CRUD plus `listItems`, `addItems`, and `removeItems` for managing list contents; `NylasList`, `NylasListItem`, `NylasListType`, `ListItemsRequest` models
+  - `NylasLists.create()` for `POST /v3/lists` with `CreateNylasListRequest` (`name`, `type`, and optional `description`)
 
 ## [v2.16.1] - Release 2026-05-21
 

src/main/kotlin/com/nylas/NylasClient.kt

@@ -183,6 +183,12 @@ open class NylasClient(
    */
   open fun rules(): Rules = Rules(this)
 
+  /**
+   * Access the Workspaces API
+   * @return The Workspaces API
+   */
+  open fun workspaces(): Workspaces = Workspaces(this)
+
   /**
    * Access the Lists API
    * @return The Lists API
@@ -355,8 +361,10 @@ open class NylasClient(
     val builder = Request.Builder().url(url.build())
 
     // Override the API key if it is provided in the override
-    val apiKey = overrides?.apiKey ?: this.apiKey
-    builder.addHeader(HttpHeaders.AUTHORIZATION.headerName, "Bearer $apiKey")
+    if (overrides?.omitAuthorization != true) {
+      val apiKey = overrides?.apiKey ?: this.apiKey
+      builder.addHeader(HttpHeaders.AUTHORIZATION.headerName, "Bearer $apiKey")
+    }
 
     // Add additional headers
     if (overrides?.headers != null) {

src/main/kotlin/com/nylas/interceptors/HttpLoggingInterceptor.kt

@@ -118,7 +118,7 @@ class HttpLoggingInterceptor : Interceptor {
       for (i in 0 until headers.size) {
         val name = headers.name(i)
         var value = headers.value(i)
-        if (!isLogAuthHeader && "Authorization" == name) {
+        if ((!isLogAuthHeader && "Authorization" == name) || shouldRedactHeader(name)) {
           value = "<not logged>"
         }
         headersLog.append("  ").append(name).append(": ").append(value).append("\n")
@@ -166,5 +166,9 @@ class HttpLoggingInterceptor : Interceptor {
     private val requestLogs = LoggerFactory.getLogger("com.nylas.http.Summary")
     private val headersLogs = LoggerFactory.getLogger("com.nylas.http.Headers")
     private val bodyLogs = LoggerFactory.getLogger("com.nylas.http.Body")
+
+    internal fun shouldRedactHeader(name: String): Boolean {
+      return "X-Nylas-Signature".equals(name, ignoreCase = true)
+    }
   }
 }

src/main/kotlin/com/nylas/models/CreateDomainRequest.kt

@@ -0,0 +1,13 @@
+package com.nylas.models
+
+import com.squareup.moshi.Json
+
+/**
+ * Class representation of a Nylas create domain request.
+ */
+data class CreateDomainRequest(
+  @Json(name = "name")
+  val name: String,
+  @Json(name = "domain_address")
+  val domainAddress: String,
+)

src/main/kotlin/com/nylas/models/CreateNylasListRequest.kt

@@ -7,7 +7,7 @@ import com.squareup.moshi.Json
  */
 data class CreateNylasListRequest(
   /**
-   * Name of the list (1–256 characters).
+   * Name of the list.
    */
   @Json(name = "name")
   val name: String,

src/main/kotlin/com/nylas/models/CreateWorkspaceRequest.kt

@@ -0,0 +1,38 @@
+package com.nylas.models
+
+import com.squareup.moshi.Json
+
+/**
+ * Class representation of a Nylas create workspace request.
+ */
+data class CreateWorkspaceRequest(
+  @Json(name = "name")
+  val name: String,
+  @Json(name = "domain")
+  val domain: String? = null,
+  @Json(name = "auto_group")
+  val autoGroup: Boolean? = null,
+  @Json(name = "policy_id")
+  val policyId: String? = null,
+  @Json(name = "rule_ids")
+  val ruleIds: List<String>? = null,
+) {
+  init {
+    require(autoGroup != true || !domain.isNullOrBlank()) {
+      "domain is required when autoGroup is true"
+    }
+  }
+
+  data class Builder(private val name: String) {
+    private var domain: String? = null
+    private var autoGroup: Boolean? = null
+    private var policyId: String? = null
+    private var ruleIds: List<String>? = null
+
+    fun domain(domain: String?) = apply { this.domain = domain }
+    fun autoGroup(autoGroup: Boolean?) = apply { this.autoGroup = autoGroup }
+    fun policyId(policyId: String?) = apply { this.policyId = policyId }
+    fun ruleIds(ruleIds: List<String>?) = apply { this.ruleIds = ruleIds }
+    fun build() = CreateWorkspaceRequest(name, domain, autoGroup, policyId, ruleIds)
+  }
+}

src/main/kotlin/com/nylas/models/Domain.kt

@@ -0,0 +1,39 @@
+package com.nylas.models
+
+import com.squareup.moshi.Json
+
+/**
+ * Class representation of a Nylas managed email domain.
+ */
+data class Domain(
+  @Json(name = "id")
+  val id: String? = null,
+  @Json(name = "name")
+  val name: String? = null,
+  @Json(name = "domain_address")
+  val domainAddress: String? = null,
+  @Json(name = "organization_id")
+  val organizationId: String? = null,
+  @Json(name = "branded")
+  val branded: Boolean? = null,
+  @Json(name = "region")
+  val region: String? = null,
+  @Json(name = "verified_ownership")
+  val verifiedOwnership: Boolean? = null,
+  @Json(name = "verified_mx")
+  val verifiedMx: Boolean? = null,
+  @Json(name = "verified_spf")
+  val verifiedSpf: Boolean? = null,
+  @Json(name = "verified_feedback")
+  val verifiedFeedback: Boolean? = null,
+  @Json(name = "verified_dkim")
+  val verifiedDkim: Boolean? = null,
+  @Json(name = "verified_dmarc")
+  val verifiedDmarc: Boolean? = null,
+  @Json(name = "verified_arc")
+  val verifiedArc: Boolean? = null,
+  @Json(name = "created_at")
+  val createdAt: Long? = null,
+  @Json(name = "updated_at")
+  val updatedAt: Long? = null,
+)

src/main/kotlin/com/nylas/models/DomainVerification.kt

@@ -0,0 +1,123 @@
+package com.nylas.models
+
+import com.squareup.moshi.Json
+
+/**
+ * DNS verification types accepted by the Manage Domains API.
+ */
+enum class DomainVerificationType {
+  @Json(name = "ownership")
+  OWNERSHIP,
+
+  @Json(name = "mx")
+  MX,
+
+  @Json(name = "spf")
+  SPF,
+
+  @Json(name = "dkim")
+  DKIM,
+
+  @Json(name = "feedback")
+  FEEDBACK,
+
+  @Json(name = "dmarc")
+  DMARC,
+
+  @Json(name = "arc")
+  ARC,
+}
+
+/**
+ * DNS verification types accepted by Manage Domains verification requests.
+ */
+enum class DomainVerificationRequestType {
+  @Json(name = "ownership")
+  OWNERSHIP,
+
+  @Json(name = "mx")
+  MX,
+
+  @Json(name = "spf")
+  SPF,
+
+  @Json(name = "dkim")
+  DKIM,
+
+  @Json(name = "feedback")
+  FEEDBACK,
+}
+
+/**
+ * Status values returned by domain DNS verification attempts.
+ */
+enum class DomainVerificationStatus {
+  @Json(name = "pending")
+  PENDING,
+
+  @Json(name = "done")
+  DONE,
+
+  @Json(name = "failed")
+  FAILED,
+}
+
+/**
+ * Class representation of a domain DNS verification request.
+ */
+data class DomainVerificationRequest(
+  @Json(name = "type")
+  val type: DomainVerificationRequestType,
+  @Json(name = "options")
+  val options: Map<String, Any>? = null,
+) {
+  /**
+   * Builder for [DomainVerificationRequest].
+   */
+  data class Builder(private val type: DomainVerificationRequestType) {
+    private var options: Map<String, Any>? = null
+
+    /**
+     * Set verification options.
+     * @param options Verification options.
+     * @return This builder.
+     */
+    fun options(options: Map<String, Any>?) = apply { this.options = options }
+
+    /**
+     * Build the [DomainVerificationRequest].
+     * @return The built [DomainVerificationRequest].
+     */
+    fun build() = DomainVerificationRequest(type, options)
+  }
+}
+
+/**
+ * Class representation of a verification attempt returned by the API.
+ */
+data class DomainVerificationAttempt(
+  @Json(name = "type")
+  val type: DomainVerificationType? = null,
+  @Json(name = "options")
+  val options: Map<String, Any>? = null,
+)
+
+/**
+ * Class representation of a domain verification result.
+ */
+data class DomainVerificationResult(
+  @Json(name = "domain_id")
+  val domainId: String? = null,
+  @Json(name = "attempt")
+  val attempt: DomainVerificationAttempt? = null,
+  @Json(name = "status")
+  val status: DomainVerificationStatus? = null,
+  @Json(name = "created_at")
+  val createdAt: Long? = null,
+  @Json(name = "expires_at")
+  val expiresAt: Long? = null,
+  @Json(name = "details")
+  val details: Map<String, Any>? = null,
+  @Json(name = "message")
+  val message: String? = null,
+)

src/main/kotlin/com/nylas/models/ListDomainsQueryParams.kt

@@ -0,0 +1,22 @@
+package com.nylas.models
+
+import com.squareup.moshi.Json
+
+/**
+ * Class representation of the query parameters for listing domains.
+ */
+data class ListDomainsQueryParams(
+  @Json(name = "limit")
+  val limit: Int? = null,
+  @Json(name = "page_token")
+  val pageToken: String? = null,
+) : IQueryParams {
+  class Builder {
+    private var limit: Int? = null
+    private var pageToken: String? = null
+
+    fun limit(limit: Int?) = apply { this.limit = limit }
+    fun pageToken(pageToken: String?) = apply { this.pageToken = pageToken }
+    fun build() = ListDomainsQueryParams(limit, pageToken)
+  }
+}

src/main/kotlin/com/nylas/models/ListRuleEvaluationsQueryParams.kt

@@ -0,0 +1,22 @@
+package com.nylas.models
+
+import com.squareup.moshi.Json
+
+/**
+ * Class representation of the query parameters for listing rule evaluations.
+ */
+data class ListRuleEvaluationsQueryParams(
+  @Json(name = "limit")
+  val limit: Int? = null,
+  @Json(name = "page_token")
+  val pageToken: String? = null,
+) : IQueryParams {
+  class Builder {
+    private var limit: Int? = null
+    private var pageToken: String? = null
+
+    fun limit(limit: Int?) = apply { this.limit = limit }
+    fun pageToken(pageToken: String?) = apply { this.pageToken = pageToken }
+    fun build() = ListRuleEvaluationsQueryParams(limit, pageToken)
+  }
+}

src/main/kotlin/com/nylas/models/ListWorkspacesQueryParams.kt

@@ -0,0 +1,47 @@
+package com.nylas.models
+
+import com.squareup.moshi.Json
+
+/**
+ * Class representation of the query parameters for listing workspaces.
+ */
+data class ListWorkspacesQueryParams(
+  /**
+   * The maximum number of objects to return.
+   */
+  @Json(name = "limit")
+  val limit: Int? = null,
+  /**
+   * Cursor for pagination. Pass the value of [ListResponse.nextCursor] to get the next page.
+   */
+  @Json(name = "page_token")
+  val pageToken: String? = null,
+) : IQueryParams {
+  /**
+   * Builder for [ListWorkspacesQueryParams].
+   */
+  class Builder {
+    private var limit: Int? = null
+    private var pageToken: String? = null
+
+    /**
+     * Set the maximum number of objects to return.
+     * @param limit The maximum number of objects to return.
+     * @return The builder.
+     */
+    fun limit(limit: Int) = apply { this.limit = limit }
+
+    /**
+     * Set the pagination cursor.
+     * @param pageToken Cursor for pagination. Pass the value of [ListResponse.nextCursor].
+     * @return The builder.
+     */
+    fun pageToken(pageToken: String) = apply { this.pageToken = pageToken }
+
+    /**
+     * Build the [ListWorkspacesQueryParams].
+     * @return A [ListWorkspacesQueryParams] with the provided values.
+     */
+    fun build() = ListWorkspacesQueryParams(limit, pageToken)
+  }
+}