@pidgeon-ai/sdk 1.29.0 → 1.31.0

package/CHANGELOG.md

@@ -7,6 +7,20 @@ the two would publish a release for every unrelated product deploy.
 Semver applies to **this package's own surface** — the exported names, the
 call shapes, the result shape — not to the API behind it.
 
+## 1.31.0 — `receive_policy`
+
+Every address carries `receive_policy`: `open` (anyone, the default) or
+`list`, which accepts only senders with an `inbox` receive rule on mail that
+passes DMARC and refuses everybody else before anything is stored.
+`identitiesUpdate` sets it; `identitiesReceiveRulesList` and
+`identitiesReceiveRulesCreate` return it beside the rules. Additive.
+
+## 1.30.0 — `authentication.signature`
+
+A message carries `authentication.signature`: `pass` when it came from
+another Pidgeon address directly and its signed sender verified against the
+sending domain's key, null otherwise. Additive.
+
 ## 1.29.0 — The signed-sender records
 
 Every domain's DNS records (`domainsGet`, `domainsCreate`, `domainsVerify`)

package/dist/index.d.cts

@@ -425,6 +425,10 @@ type Identity = {
      * Who it may write to: open, reply_only (somebody who wrote to it first), or list.
      */
     send_policy: string;
+    /**
+     * Who may write to it: open, or list (only senders with an inbox rule, on mail that passes DMARC).
+     */
+    receive_policy: string;
     /**
      * Your own opaque grouping for this address. Never parsed here.
      */
@@ -489,12 +493,16 @@ type Message = {
         [key: string]: string;
     };
     /**
-     * What the receiving transport said about the sending domain. Null means it did not report, not that the check failed — normal on outbound, and on inbound it is the difference between unknown and forged.
+     * What the receiving transport said about the sending domain. Null means it did not report, not that the check failed — normal on outbound, and on inbound it is the difference between unknown and forged. A `From:` is the sending domain's own word when `dmarc` or `signature` is `pass`.
      */
     authentication: {
         spf: string | null;
         dkim: string | null;
         dmarc: string | null;
+        /**
+         * `pass` when the message came from another Pidgeon address directly, and its signed sender verified against the sending domain's published key. Null on mail that came through SMTP, which DMARC speaks for instead.
+         */
+        signature: string | null;
     };
     /**
      * Who this message says it is from. A Pidgeon sender declares it on every message it sends; mail from ordinary email has only the address.
@@ -705,12 +713,16 @@ type AwaitedMessage = {
             [key: string]: string;
         };
         /**
-         * What the receiving transport said about the sending domain. Null means it did not report, not that the check failed — normal on outbound, and on inbound it is the difference between unknown and forged.
+         * What the receiving transport said about the sending domain. Null means it did not report, not that the check failed — normal on outbound, and on inbound it is the difference between unknown and forged. A `From:` is the sending domain's own word when `dmarc` or `signature` is `pass`.
          */
         authentication: {
             spf: string | null;
             dkim: string | null;
             dmarc: string | null;
+            /**
+             * `pass` when the message came from another Pidgeon address directly, and its signed sender verified against the sending domain's published key. Null on mail that came through SMTP, which DMARC speaks for instead.
+             */
+            signature: string | null;
         };
         /**
          * Who this message says it is from. A Pidgeon sender declares it on every message it sends; mail from ordinary email has only the address.
@@ -1710,6 +1722,10 @@ type TenantSuspended = {
 };
 type ReceiveRules = {
     identity_id: string;
+    /**
+     * open, or list: only senders with an inbox rule, on mail that passes DMARC.
+     */
+    receive_policy: string;
     rules: Array<{
         id: string;
         /**
@@ -1885,6 +1901,10 @@ type PodCreated = {
          * Who it may write to: open, reply_only (somebody who wrote to it first), or list.
          */
         send_policy: string;
+        /**
+         * Who may write to it: open, or list (only senders with an inbox rule, on mail that passes DMARC).
+         */
+        receive_policy: string;
         /**
          * Your own opaque grouping for this address. Never parsed here.
          */
@@ -2504,6 +2524,10 @@ type IdentitiesUpdateData = {
          * Who it may write to. `reply_only` makes an address structurally unable to start a conversation with a stranger.
          */
         send_policy?: 'open' | 'reply_only' | 'list';
+        /**
+         * Who may write to it. `list` accepts only senders with an `inbox` receive rule whose mail passes DMARC, and refuses everybody else before anything is stored. A key with admin on the address may tighten it; loosening needs its owner.
+         */
+        receive_policy?: 'open' | 'list';
         /**
          * Your own opaque grouping — a customer id, whatever your side calls it. Never parsed here.
          */

package/dist/index.d.ts

@@ -425,6 +425,10 @@ type Identity = {
      * Who it may write to: open, reply_only (somebody who wrote to it first), or list.
      */
     send_policy: string;
+    /**
+     * Who may write to it: open, or list (only senders with an inbox rule, on mail that passes DMARC).
+     */
+    receive_policy: string;
     /**
      * Your own opaque grouping for this address. Never parsed here.
      */
@@ -489,12 +493,16 @@ type Message = {
         [key: string]: string;
     };
     /**
-     * What the receiving transport said about the sending domain. Null means it did not report, not that the check failed — normal on outbound, and on inbound it is the difference between unknown and forged.
+     * What the receiving transport said about the sending domain. Null means it did not report, not that the check failed — normal on outbound, and on inbound it is the difference between unknown and forged. A `From:` is the sending domain's own word when `dmarc` or `signature` is `pass`.
      */
     authentication: {
         spf: string | null;
         dkim: string | null;
         dmarc: string | null;
+        /**
+         * `pass` when the message came from another Pidgeon address directly, and its signed sender verified against the sending domain's published key. Null on mail that came through SMTP, which DMARC speaks for instead.
+         */
+        signature: string | null;
     };
     /**
      * Who this message says it is from. A Pidgeon sender declares it on every message it sends; mail from ordinary email has only the address.
@@ -705,12 +713,16 @@ type AwaitedMessage = {
             [key: string]: string;
         };
         /**
-         * What the receiving transport said about the sending domain. Null means it did not report, not that the check failed — normal on outbound, and on inbound it is the difference between unknown and forged.
+         * What the receiving transport said about the sending domain. Null means it did not report, not that the check failed — normal on outbound, and on inbound it is the difference between unknown and forged. A `From:` is the sending domain's own word when `dmarc` or `signature` is `pass`.
          */
         authentication: {
             spf: string | null;
             dkim: string | null;
             dmarc: string | null;
+            /**
+             * `pass` when the message came from another Pidgeon address directly, and its signed sender verified against the sending domain's published key. Null on mail that came through SMTP, which DMARC speaks for instead.
+             */
+            signature: string | null;
         };
         /**
          * Who this message says it is from. A Pidgeon sender declares it on every message it sends; mail from ordinary email has only the address.
@@ -1710,6 +1722,10 @@ type TenantSuspended = {
 };
 type ReceiveRules = {
     identity_id: string;
+    /**
+     * open, or list: only senders with an inbox rule, on mail that passes DMARC.
+     */
+    receive_policy: string;
     rules: Array<{
         id: string;
         /**
@@ -1885,6 +1901,10 @@ type PodCreated = {
          * Who it may write to: open, reply_only (somebody who wrote to it first), or list.
          */
         send_policy: string;
+        /**
+         * Who may write to it: open, or list (only senders with an inbox rule, on mail that passes DMARC).
+         */
+        receive_policy: string;
         /**
          * Your own opaque grouping for this address. Never parsed here.
          */
@@ -2504,6 +2524,10 @@ type IdentitiesUpdateData = {
          * Who it may write to. `reply_only` makes an address structurally unable to start a conversation with a stranger.
          */
         send_policy?: 'open' | 'reply_only' | 'list';
+        /**
+         * Who may write to it. `list` accepts only senders with an `inbox` receive rule whose mail passes DMARC, and refuses everybody else before anything is stored. A key with admin on the address may tighten it; loosening needs its owner.
+         */
+        receive_policy?: 'open' | 'list';
         /**
          * Your own opaque grouping — a customer id, whatever your side calls it. Never parsed here.
          */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pidgeon-ai/sdk",
-  "version": "1.29.0",
+  "version": "1.31.0",
   "description": "Email inboxes for AI agents — TypeScript SDK for Pidgeon: create addresses, send, receive and reply.",
   "keywords": [
     "email",