@pidgeon-ai/sdk 1.30.0 → 1.31.0

package/CHANGELOG.md

@@ -7,6 +7,14 @@ the two would publish a release for every unrelated product deploy.
 Semver applies to **this package's own surface** — the exported names, the
 call shapes, the result shape — not to the API behind it.
 
+## 1.31.0 — `receive_policy`
+
+Every address carries `receive_policy`: `open` (anyone, the default) or
+`list`, which accepts only senders with an `inbox` receive rule on mail that
+passes DMARC and refuses everybody else before anything is stored.
+`identitiesUpdate` sets it; `identitiesReceiveRulesList` and
+`identitiesReceiveRulesCreate` return it beside the rules. Additive.
+
 ## 1.30.0 — `authentication.signature`
 
 A message carries `authentication.signature`: `pass` when it came from

package/dist/index.d.cts

@@ -425,6 +425,10 @@ type Identity = {
      * Who it may write to: open, reply_only (somebody who wrote to it first), or list.
      */
     send_policy: string;
+    /**
+     * Who may write to it: open, or list (only senders with an inbox rule, on mail that passes DMARC).
+     */
+    receive_policy: string;
     /**
      * Your own opaque grouping for this address. Never parsed here.
      */
@@ -1718,6 +1722,10 @@ type TenantSuspended = {
 };
 type ReceiveRules = {
     identity_id: string;
+    /**
+     * open, or list: only senders with an inbox rule, on mail that passes DMARC.
+     */
+    receive_policy: string;
     rules: Array<{
         id: string;
         /**
@@ -1893,6 +1901,10 @@ type PodCreated = {
          * Who it may write to: open, reply_only (somebody who wrote to it first), or list.
          */
         send_policy: string;
+        /**
+         * Who may write to it: open, or list (only senders with an inbox rule, on mail that passes DMARC).
+         */
+        receive_policy: string;
         /**
          * Your own opaque grouping for this address. Never parsed here.
          */
@@ -2512,6 +2524,10 @@ type IdentitiesUpdateData = {
          * Who it may write to. `reply_only` makes an address structurally unable to start a conversation with a stranger.
          */
         send_policy?: 'open' | 'reply_only' | 'list';
+        /**
+         * Who may write to it. `list` accepts only senders with an `inbox` receive rule whose mail passes DMARC, and refuses everybody else before anything is stored. A key with admin on the address may tighten it; loosening needs its owner.
+         */
+        receive_policy?: 'open' | 'list';
         /**
          * Your own opaque grouping — a customer id, whatever your side calls it. Never parsed here.
          */

package/dist/index.d.ts

@@ -425,6 +425,10 @@ type Identity = {
      * Who it may write to: open, reply_only (somebody who wrote to it first), or list.
      */
     send_policy: string;
+    /**
+     * Who may write to it: open, or list (only senders with an inbox rule, on mail that passes DMARC).
+     */
+    receive_policy: string;
     /**
      * Your own opaque grouping for this address. Never parsed here.
      */
@@ -1718,6 +1722,10 @@ type TenantSuspended = {
 };
 type ReceiveRules = {
     identity_id: string;
+    /**
+     * open, or list: only senders with an inbox rule, on mail that passes DMARC.
+     */
+    receive_policy: string;
     rules: Array<{
         id: string;
         /**
@@ -1893,6 +1901,10 @@ type PodCreated = {
          * Who it may write to: open, reply_only (somebody who wrote to it first), or list.
          */
         send_policy: string;
+        /**
+         * Who may write to it: open, or list (only senders with an inbox rule, on mail that passes DMARC).
+         */
+        receive_policy: string;
         /**
          * Your own opaque grouping for this address. Never parsed here.
          */
@@ -2512,6 +2524,10 @@ type IdentitiesUpdateData = {
          * Who it may write to. `reply_only` makes an address structurally unable to start a conversation with a stranger.
          */
         send_policy?: 'open' | 'reply_only' | 'list';
+        /**
+         * Who may write to it. `list` accepts only senders with an `inbox` receive rule whose mail passes DMARC, and refuses everybody else before anything is stored. A key with admin on the address may tighten it; loosening needs its owner.
+         */
+        receive_policy?: 'open' | 'list';
         /**
          * Your own opaque grouping — a customer id, whatever your side calls it. Never parsed here.
          */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pidgeon-ai/sdk",
-  "version": "1.30.0",
+  "version": "1.31.0",
   "description": "Email inboxes for AI agents — TypeScript SDK for Pidgeon: create addresses, send, receive and reply.",
   "keywords": [
     "email",