@pidgeon-ai/sdk 1.21.0 → 1.23.0

package/CHANGELOG.md

@@ -7,6 +7,32 @@ the two would publish a release for every unrelated product deploy.
 Semver applies to **this package's own surface** — the exported names, the
 call shapes, the result shape — not to the API behind it.
 
+## 1.23.0 — rotating a key
+
+`keysRotate` (`POST /api-keys/{id}/rotate`) gives a key a new secret and
+keeps its id, so its scope, its ceiling, its expiry and every key it minted
+are unchanged and keep working. The old secret stops at once, or after
+`grace_period_seconds` (at most 86400). The answer carries the new `token`,
+once. Every key gains `rotated_at` and `previous_token_expires_at`. Additive.
+
+## 1.22.0 — typed data, and the declared sender
+
+Every send — `messagesSend`, `messagesReply`, `messagesReplyAll`,
+`messagesForward`, and `draftsCreate` and `draftsUpdate` for a draft sent or
+scheduled later — takes an optional `data: { schema, body }`: `schema` is an
+http or https URL naming what `body` is, and `body` is up to 64 KB of JSON.
+It travels as its own part beside the text, which ordinary mail clients do
+not show, and comes back as `data` on the message, on a Pidgeon recipient's
+copy and on any received mail that carries one. It is never mixed into
+`text`, and the Firewall does not read it as prose.
+
+Every message has `sender: { address, kind, on_behalf_of }`. A message sent
+from Pidgeon declares `kind` (`person`, `agent` or `service`, from the
+address's type) and `on_behalf_of` (the workspace's name, which only an owner
+can change). Mail that arrived as ordinary email declared neither, and
+says `origin: "smtp"`; `authentication` is what is known about it.
+`message.sent` carries `sender` too. Additive; nothing narrows.
+
 ## 1.21.0 — every send takes a key, and receipts
 
 `Idempotency-Key` is a declared header on every operation that honours it,

package/dist/index.cjs

@@ -85,6 +85,7 @@ __export(index_exports, {
   keysGet: () => keysGet,
   keysList: () => keysList,
   keysRevoke: () => keysRevoke,
+  keysRotate: () => keysRotate,
   keysUpdate: () => keysUpdate,
   labelsCreate: () => labelsCreate,
   labelsDelete: () => labelsDelete,
@@ -1383,6 +1384,15 @@ var keysUpdate = (options) => (options.client ?? client).patch({
     ...options.headers
   }
 });
+var keysRotate = (options) => (options.client ?? client).post({
+  security: [{ scheme: "bearer", type: "http" }],
+  url: "/api-keys/{id}/rotate",
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
+});
 var appPasswordsList = (options) => (options.client ?? client).get({
   security: [{ scheme: "bearer", type: "http" }],
   url: "/app-passwords",
@@ -1870,6 +1880,7 @@ function sleep(ms, signal) {
   keysGet,
   keysList,
   keysRevoke,
+  keysRotate,
   keysUpdate,
   labelsCreate,
   labelsDelete,