@pidgeon-ai/sdk 1.28.0 → 1.29.0

package/CHANGELOG.md

@@ -7,6 +7,15 @@ the two would publish a release for every unrelated product deploy.
 Semver applies to **this package's own surface** — the exported names, the
 call shapes, the result shape — not to the API behind it.
 
+## 1.29.0 — The signed-sender records
+
+Every domain's DNS records (`domainsGet`, `domainsCreate`, `domainsVerify`)
+gain two optional ones: `signing`, a TXT at `_post`, and `signing_host`, a
+CNAME at `post`. With both connected, mail from the domain carries a
+signature receivers can check against the domain's published keys. Every
+record gains `optional`, true for these two; they have their own `status`
+and never count towards whether the domain is configured. Additive.
+
 ## 1.28.0 — DNS hosts for subdomains, and why a record is waiting
 
 Every DNS record (`domainsGet`, `domainsCreate`, `domainsVerify`) gains

package/dist/index.d.cts

@@ -1302,7 +1302,7 @@ type DomainDetail = {
         priority: number | null;
         status: 'connected' | 'waiting' | 'incorrect' | 'not_required';
         /**
-         * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
+         * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour), or on its certificate (`signing_host`; usually ten minutes). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
          */
         state: 'connected' | 'published' | 'missing' | 'wrong_value' | 'wrong_name' | 'not_required' | null;
         found: string | null;
@@ -1310,6 +1310,10 @@ type DomainDetail = {
          * Where `found` was read, when that was not `fqdn`.
          */
         found_at: string | null;
+        /**
+         * Not needed for mail: `signing` and `signing_host`, which let receivers check a signed sender from this domain. Its own `status`; never counted towards whether the domain is configured.
+         */
+        optional: boolean;
         description: string;
         checked_at: string | null;
     }>;
@@ -1338,7 +1342,7 @@ type DnsRecord = {
     priority: number | null;
     status: 'connected' | 'waiting' | 'incorrect' | 'not_required';
     /**
-     * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
+     * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour), or on its certificate (`signing_host`; usually ten minutes). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
      */
     state: 'connected' | 'published' | 'missing' | 'wrong_value' | 'wrong_name' | 'not_required' | null;
     found: string | null;
@@ -1346,6 +1350,10 @@ type DnsRecord = {
      * Where `found` was read, when that was not `fqdn`.
      */
     found_at: string | null;
+    /**
+     * Not needed for mail: `signing` and `signing_host`, which let receivers check a signed sender from this domain. Its own `status`; never counted towards whether the domain is configured.
+     */
+    optional: boolean;
     description: string;
     checked_at: string | null;
 };
@@ -1376,7 +1384,7 @@ type Verification = {
         priority: number | null;
         status: 'connected' | 'waiting' | 'incorrect' | 'not_required';
         /**
-         * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
+         * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour), or on its certificate (`signing_host`; usually ten minutes). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
          */
         state: 'connected' | 'published' | 'missing' | 'wrong_value' | 'wrong_name' | 'not_required' | null;
         found: string | null;
@@ -1384,6 +1392,10 @@ type Verification = {
          * Where `found` was read, when that was not `fqdn`.
          */
         found_at: string | null;
+        /**
+         * Not needed for mail: `signing` and `signing_host`, which let receivers check a signed sender from this domain. Its own `status`; never counted towards whether the domain is configured.
+         */
+        optional: boolean;
         description: string;
         checked_at: string | null;
     }>;

package/dist/index.d.ts

@@ -1302,7 +1302,7 @@ type DomainDetail = {
         priority: number | null;
         status: 'connected' | 'waiting' | 'incorrect' | 'not_required';
         /**
-         * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
+         * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour), or on its certificate (`signing_host`; usually ten minutes). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
          */
         state: 'connected' | 'published' | 'missing' | 'wrong_value' | 'wrong_name' | 'not_required' | null;
         found: string | null;
@@ -1310,6 +1310,10 @@ type DomainDetail = {
          * Where `found` was read, when that was not `fqdn`.
          */
         found_at: string | null;
+        /**
+         * Not needed for mail: `signing` and `signing_host`, which let receivers check a signed sender from this domain. Its own `status`; never counted towards whether the domain is configured.
+         */
+        optional: boolean;
         description: string;
         checked_at: string | null;
     }>;
@@ -1338,7 +1342,7 @@ type DnsRecord = {
     priority: number | null;
     status: 'connected' | 'waiting' | 'incorrect' | 'not_required';
     /**
-     * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
+     * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour), or on its certificate (`signing_host`; usually ten minutes). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
      */
     state: 'connected' | 'published' | 'missing' | 'wrong_value' | 'wrong_name' | 'not_required' | null;
     found: string | null;
@@ -1346,6 +1350,10 @@ type DnsRecord = {
      * Where `found` was read, when that was not `fqdn`.
      */
     found_at: string | null;
+    /**
+     * Not needed for mail: `signing` and `signing_host`, which let receivers check a signed sender from this domain. Its own `status`; never counted towards whether the domain is configured.
+     */
+    optional: boolean;
     description: string;
     checked_at: string | null;
 };
@@ -1376,7 +1384,7 @@ type Verification = {
         priority: number | null;
         status: 'connected' | 'waiting' | 'incorrect' | 'not_required';
         /**
-         * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
+         * Why `status` is what it is. `published`: correct in public DNS, waiting on the mail provider to confirm (DKIM; usually under an hour), or on its certificate (`signing_host`; usually ten minutes). `wrong_name`: our value is at `found_at` instead, often the zone typed twice. Null before the first check.
          */
         state: 'connected' | 'published' | 'missing' | 'wrong_value' | 'wrong_name' | 'not_required' | null;
         found: string | null;
@@ -1384,6 +1392,10 @@ type Verification = {
          * Where `found` was read, when that was not `fqdn`.
          */
         found_at: string | null;
+        /**
+         * Not needed for mail: `signing` and `signing_host`, which let receivers check a signed sender from this domain. Its own `status`; never counted towards whether the domain is configured.
+         */
+        optional: boolean;
         description: string;
         checked_at: string | null;
     }>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pidgeon-ai/sdk",
-  "version": "1.28.0",
+  "version": "1.29.0",
   "description": "Email inboxes for AI agents — TypeScript SDK for Pidgeon: create addresses, send, receive and reply.",
   "keywords": [
     "email",