@pidgeon-ai/sdk 1.9.0 → 1.12.0

package/CHANGELOG.md

@@ -9,6 +9,34 @@ call shapes, the result shape — not to the API behind it.
 
 ## Unreleased
 
+## 1.12.0 — Pidgeon Firewall
+
+Every inbound `Message` carries `firewall`: a `verdict` (`clean` or
+`suspicious`) and the `signals` that produced it — hidden text, instructions
+addressed to an AI, impersonated chat turns, directives buried in quoted
+history, look-alike senders, display-name spoofing, and requests to send
+secrets out — each with where it fired and a sentence quoting it.
+`message.received` carries the verdict and the signal kinds. Observe-only:
+nothing is held or changed. Read it before acting on what a message asks.
+
+## 1.11.0 — a key for one pod
+
+`apiKeysCreate` takes `pod_id` in place of `identity_ids`: the key reaches
+every address in that pod, including ones added later, and may create,
+verify and remove that pod's domains — the key a platform hands one of its
+customers. Only a key over the whole account (or an owner, in the dashboard)
+can mint one. Every key now reports `pod_id`, null for keys that are not
+pod keys.
+
+## 1.10.0 — events over a WebSocket
+
+`GET /v1/events/socket` is the event log over a WebSocket, with the same
+filters and `after` cursor as the stream. The generated `eventsSocket` can
+only show you the contract — open it with a WebSocket client
+(`new WebSocket('wss://pidgeon.ai/api/v1/events/socket')`) and send
+`{"type":"auth","api_key":…}` first if you cannot set a header. The
+protocol is in the reference.
+
 ## 1.9.0 — export over the API
 
 **`exportMail`** (`GET /v1/export`) streams every message the key can read as

package/dist/index.cjs

@@ -62,6 +62,7 @@ __export(index_exports, {
   draftsUpdate: () => draftsUpdate,
   eventsGet: () => eventsGet,
   eventsList: () => eventsList,
+  eventsSocket: () => eventsSocket,
   eventsStream: () => eventsStream,
   exportMail: () => exportMail,
   identitiesAccessCreate: () => identitiesAccessCreate,
@@ -1420,6 +1421,11 @@ var eventsList = (options) => (options?.client ?? client).get({
   url: "/events",
   ...options
 });
+var eventsSocket = (options) => (options?.client ?? client).get({
+  security: [{ scheme: "bearer", type: "http" }],
+  url: "/events/socket",
+  ...options
+});
 var eventsStream = (options) => (options?.client ?? client).sse.get({
   security: [{ scheme: "bearer", type: "http" }],
   url: "/events/stream",
@@ -1835,6 +1841,7 @@ function sleep(ms, signal) {
   draftsUpdate,
   eventsGet,
   eventsList,
+  eventsSocket,
   eventsStream,
   exportMail,
   identitiesAccessCreate,