@pidgeon-ai/sdk 1.26.0 → 1.27.0

package/CHANGELOG.md

@@ -7,6 +7,14 @@ the two would publish a release for every unrelated product deploy.
 Semver applies to **this package's own surface** — the exported names, the
 call shapes, the result shape — not to the API behind it.
 
+## 1.27.0 — a key that drafts and never sends
+
+`keysCreate` takes `access: 'draft'`, between `read` and `send`: the key
+reads, searches, labels, archives, trashes, updates and hands off threads,
+and creates, updates and deletes drafts. Every send, reply, forward, draft
+send, schedule, calendar write and app password answers `403`. `access` on a
+key, `me` and mailbox access can now be `'draft'`. Additive.
+
 ## 1.26.0 — provisioning and teardown by pod
 
 `podsCreate` takes `address` (the same fields as `identitiesCreate`) and `key`

package/dist/index.d.cts

@@ -1369,7 +1369,7 @@ type ApiKey = {
     /**
      * The highest rung on any address. Composed with the grant; lower wins.
      */
-    access: 'read' | 'send' | 'admin';
+    access: 'read' | 'draft' | 'send' | 'admin';
     created_by_key_id: string | null;
     last_used_at: string | null;
     revoked_at: string | null;
@@ -1402,7 +1402,7 @@ type ApiKeyCreated = {
     /**
      * The highest rung on any address. Composed with the grant; lower wins.
      */
-    access: 'read' | 'send' | 'admin';
+    access: 'read' | 'draft' | 'send' | 'admin';
     created_by_key_id: string | null;
     last_used_at: string | null;
     revoked_at: string | null;
@@ -1465,7 +1465,7 @@ type Me = {
         /**
          * The highest rung this key reaches on any address. Composed with the grant on the address itself — the lower of the two wins — so this is a ceiling, not a promise.
          */
-        access: 'read' | 'send' | 'admin';
+        access: 'read' | 'draft' | 'send' | 'admin';
         /**
          * True when it reaches every address the workspace owns, including ones created after it. False when it reaches a fixed list.
          */
@@ -1610,7 +1610,10 @@ type MailboxAccess = {
          * For showing a person. A renamed key changes it; never match on it.
          */
         label: string;
-        access: 'read' | 'send' | 'admin';
+        /**
+         * What this principal can do here. A key shows the lower of its ceiling and the grant.
+         */
+        access: 'read' | 'draft' | 'send' | 'admin';
     }>;
     /**
      * Whether this credential may change any of the above.
@@ -1825,7 +1828,7 @@ type PodCreated = {
         /**
          * The highest rung on any address. Composed with the grant; lower wins.
          */
-        access: 'read' | 'send' | 'admin';
+        access: 'read' | 'draft' | 'send' | 'admin';
         created_by_key_id: string | null;
         last_used_at: string | null;
         revoked_at: string | null;
@@ -3105,7 +3108,7 @@ type PodsCreateData = {
          */
         key?: {
             name?: string;
-            access?: 'read' | 'send' | 'admin';
+            access?: 'read' | 'draft' | 'send' | 'admin';
             expires_at?: string | null;
             /**
              * Mint a test-mode key (`pgn_test_`) for the pod instead of a live one.
@@ -5840,7 +5843,7 @@ type KeysCreateData = {
         /**
          * What a key may do. Give an agent the narrowest one that works.
          */
-        access?: 'read' | 'send' | 'admin';
+        access?: 'read' | 'draft' | 'send' | 'admin';
         /**
          * When it stops accepting mail. Expiry suspends; it never deletes, so the correspondence survives.
          */

package/dist/index.d.ts

@@ -1369,7 +1369,7 @@ type ApiKey = {
     /**
      * The highest rung on any address. Composed with the grant; lower wins.
      */
-    access: 'read' | 'send' | 'admin';
+    access: 'read' | 'draft' | 'send' | 'admin';
     created_by_key_id: string | null;
     last_used_at: string | null;
     revoked_at: string | null;
@@ -1402,7 +1402,7 @@ type ApiKeyCreated = {
     /**
      * The highest rung on any address. Composed with the grant; lower wins.
      */
-    access: 'read' | 'send' | 'admin';
+    access: 'read' | 'draft' | 'send' | 'admin';
     created_by_key_id: string | null;
     last_used_at: string | null;
     revoked_at: string | null;
@@ -1465,7 +1465,7 @@ type Me = {
         /**
          * The highest rung this key reaches on any address. Composed with the grant on the address itself — the lower of the two wins — so this is a ceiling, not a promise.
          */
-        access: 'read' | 'send' | 'admin';
+        access: 'read' | 'draft' | 'send' | 'admin';
         /**
          * True when it reaches every address the workspace owns, including ones created after it. False when it reaches a fixed list.
          */
@@ -1610,7 +1610,10 @@ type MailboxAccess = {
          * For showing a person. A renamed key changes it; never match on it.
          */
         label: string;
-        access: 'read' | 'send' | 'admin';
+        /**
+         * What this principal can do here. A key shows the lower of its ceiling and the grant.
+         */
+        access: 'read' | 'draft' | 'send' | 'admin';
     }>;
     /**
      * Whether this credential may change any of the above.
@@ -1825,7 +1828,7 @@ type PodCreated = {
         /**
          * The highest rung on any address. Composed with the grant; lower wins.
          */
-        access: 'read' | 'send' | 'admin';
+        access: 'read' | 'draft' | 'send' | 'admin';
         created_by_key_id: string | null;
         last_used_at: string | null;
         revoked_at: string | null;
@@ -3105,7 +3108,7 @@ type PodsCreateData = {
          */
         key?: {
             name?: string;
-            access?: 'read' | 'send' | 'admin';
+            access?: 'read' | 'draft' | 'send' | 'admin';
             expires_at?: string | null;
             /**
              * Mint a test-mode key (`pgn_test_`) for the pod instead of a live one.
@@ -5840,7 +5843,7 @@ type KeysCreateData = {
         /**
          * What a key may do. Give an agent the narrowest one that works.
          */
-        access?: 'read' | 'send' | 'admin';
+        access?: 'read' | 'draft' | 'send' | 'admin';
         /**
          * When it stops accepting mail. Expiry suspends; it never deletes, so the correspondence survives.
          */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pidgeon-ai/sdk",
-  "version": "1.26.0",
+  "version": "1.27.0",
   "description": "Email inboxes for AI agents — TypeScript SDK for Pidgeon: create addresses, send, receive and reply.",
   "keywords": [
     "email",