@primitivedotdev/sdk 0.26.1 → 0.27.0

package/dist/openapi/operations.generated.js

@@ -1,4626 +0,0 @@
-/**
- * Generated operation metadata for the Primitive API CLI and SDK tooling.
- *
- * AUTO-GENERATED - DO NOT EDIT
- * Run `pnpm generate:openapi` to regenerate.
- */
-export const operationManifest = [
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "get-account",
-        "description": null,
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "getAccount",
-        "path": "/account",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "email": {
-                    "type": "string"
-                },
-                "plan": {
-                    "type": "string"
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "onboarding_completed": {
-                    "type": "boolean"
-                },
-                "onboarding_step": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "stripe_subscription_status": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "subscription_current_period_end": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "subscription_cancel_at_period_end": {
-                    "type": [
-                        "boolean",
-                        "null"
-                    ]
-                },
-                "spam_threshold": {
-                    "type": [
-                        "number",
-                        "null"
-                    ],
-                    "minimum": 0,
-                    "maximum": 15
-                },
-                "discard_content_on_webhook_confirmed": {
-                    "type": "boolean"
-                },
-                "webhook_secret_rotated_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                }
-            },
-            "required": [
-                "id",
-                "email",
-                "plan",
-                "created_at",
-                "discard_content_on_webhook_confirmed"
-            ]
-        },
-        "sdkName": "getAccount",
-        "summary": "Get account info",
-        "tag": "Account",
-        "tagCommand": "account"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "get-storage-stats",
-        "description": null,
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "getStorageStats",
-        "path": "/account/storage",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "used_bytes": {
-                    "type": "integer",
-                    "description": "Total storage used in bytes"
-                },
-                "used_kb": {
-                    "type": "number",
-                    "description": "Total storage used in kilobytes (1 decimal)"
-                },
-                "used_mb": {
-                    "type": "number",
-                    "description": "Total storage used in megabytes (2 decimals)"
-                },
-                "quota_mb": {
-                    "type": "number",
-                    "description": "Storage quota in megabytes (based on plan)"
-                },
-                "percentage": {
-                    "type": "number",
-                    "description": "Percentage of quota used (1 decimal)"
-                },
-                "emails_count": {
-                    "type": "integer",
-                    "description": "Number of stored emails"
-                }
-            },
-            "required": [
-                "used_bytes",
-                "used_kb",
-                "used_mb",
-                "quota_mb",
-                "percentage",
-                "emails_count"
-            ]
-        },
-        "sdkName": "getStorageStats",
-        "summary": "Get storage usage",
-        "tag": "Account",
-        "tagCommand": "account"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "get-webhook-secret",
-        "description": "Returns the webhook signing secret for your account. If no\nsecret exists yet, one is generated automatically on first\naccess.\n\nSigning is account-scoped, not per-endpoint. Every webhook\ndelivery from any of your registered endpoints is signed\nwith this single secret. Rotate via\n`POST /account/webhook-secret/rotate`.\n\n**Secret format**: the returned string looks base64-shaped\n(e.g. `XNHBBW8VqoBjRfNs1tkZj11jTk...`) but is NOT base64.\nUse it AS-IS as a UTF-8 string when computing HMAC over a\ndelivery body. Base64-decoding before HMAC will silently\nproduce mismatched signatures.\n\nSee the API-level \"Webhook signing\" section for the full\nwire format (header name, signed string shape, hash algo,\ntolerance) including a language-agnostic verification\nrecipe.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "getWebhookSecret",
-        "path": "/account/webhook-secret",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "secret": {
-                    "type": "string",
-                    "description": "The webhook signing secret value"
-                }
-            },
-            "required": [
-                "secret"
-            ]
-        },
-        "sdkName": "getWebhookSecret",
-        "summary": "Get webhook signing secret",
-        "tag": "Account",
-        "tagCommand": "account"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "rotate-webhook-secret",
-        "description": "Generates a new webhook signing secret, replacing the current one.\nRate limited to once per 60 minutes.\n",
-        "hasJsonBody": false,
-        "method": "POST",
-        "operationId": "rotateWebhookSecret",
-        "path": "/account/webhook-secret/rotate",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "secret": {
-                    "type": "string",
-                    "description": "The webhook signing secret value"
-                }
-            },
-            "required": [
-                "secret"
-            ]
-        },
-        "sdkName": "rotateWebhookSecret",
-        "summary": "Rotate webhook signing secret",
-        "tag": "Account",
-        "tagCommand": "account"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "update-account",
-        "description": null,
-        "hasJsonBody": true,
-        "method": "PATCH",
-        "operationId": "updateAccount",
-        "path": "/account",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "spam_threshold": {
-                    "type": [
-                        "number",
-                        "null"
-                    ],
-                    "minimum": 0,
-                    "maximum": 15,
-                    "description": "Global spam score threshold (0-15). Emails scoring above this are rejected. Set to null to disable."
-                },
-                "discard_content_on_webhook_confirmed": {
-                    "type": "boolean",
-                    "description": "Whether to discard email content after the webhook endpoint confirms receipt."
-                }
-            },
-            "minProperties": 1
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "email": {
-                    "type": "string"
-                },
-                "plan": {
-                    "type": "string"
-                },
-                "spam_threshold": {
-                    "type": [
-                        "number",
-                        "null"
-                    ],
-                    "minimum": 0,
-                    "maximum": 15
-                },
-                "discard_content_on_webhook_confirmed": {
-                    "type": "boolean"
-                }
-            },
-            "required": [
-                "id",
-                "email",
-                "plan",
-                "discard_content_on_webhook_confirmed"
-            ]
-        },
-        "sdkName": "updateAccount",
-        "summary": "Update account settings",
-        "tag": "Account",
-        "tagCommand": "account"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "cli-logout",
-        "description": "Revokes the API key used to authenticate the request. CLI clients use\nthis endpoint during `primitive logout` before removing local credentials.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "cliLogout",
-        "path": "/cli/logout",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "key_id": {
-                    "type": "string",
-                    "format": "uuid",
-                    "description": "Optional key id guard; when provided it must match the authenticated API key"
-                }
-            }
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "revoked": {
-                    "type": "boolean",
-                    "const": true
-                },
-                "key_id": {
-                    "type": "string",
-                    "format": "uuid"
-                }
-            },
-            "required": [
-                "revoked",
-                "key_id"
-            ]
-        },
-        "sdkName": "cliLogout",
-        "summary": "Revoke the current CLI API key",
-        "tag": "CLI",
-        "tagCommand": "cli"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "poll-cli-login",
-        "description": "Polls a CLI login session until the browser approval either succeeds,\nis denied, expires, or is polled too quickly. The API key is generated\nonly after approval and is returned exactly once.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "pollCliLogin",
-        "path": "/cli/login/poll",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "device_code": {
-                    "type": "string",
-                    "minLength": 1
-                }
-            },
-            "required": [
-                "device_code"
-            ]
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "api_key": {
-                    "type": "string",
-                    "description": "Newly-created API key for CLI authentication"
-                },
-                "key_id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "key_prefix": {
-                    "type": "string"
-                },
-                "org_id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "org_name": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                }
-            },
-            "required": [
-                "api_key",
-                "key_id",
-                "key_prefix",
-                "org_id",
-                "org_name"
-            ]
-        },
-        "sdkName": "pollCliLogin",
-        "summary": "Poll CLI browser login",
-        "tag": "CLI",
-        "tagCommand": "cli"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "start-cli-login",
-        "description": "Starts a browser-assisted CLI login session. The response includes a\ndevice code for polling and a user code that the user approves in the\nbrowser. This endpoint does not require an API key.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "startCliLogin",
-        "path": "/cli/login/start",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "device_name": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 80,
-                    "description": "Human-readable device name shown during browser approval"
-                },
-                "metadata": {
-                    "type": "object",
-                    "additionalProperties": true,
-                    "description": "Optional client metadata stored with the login session; serialized JSON must be 2048 bytes or fewer"
-                }
-            }
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "device_code": {
-                    "type": "string",
-                    "description": "Opaque code used by the CLI to poll for approval"
-                },
-                "user_code": {
-                    "type": "string",
-                    "pattern": "^[BCDFGHJKLMNPQRSTVWXZ]{4}-[BCDFGHJKLMNPQRSTVWXZ]{4}$",
-                    "description": "Short code the user confirms in the browser"
-                },
-                "verification_uri": {
-                    "type": "string",
-                    "description": "Browser URL where the user approves the login"
-                },
-                "verification_uri_complete": {
-                    "type": "string",
-                    "description": "Browser URL with the user code prefilled"
-                },
-                "expires_in": {
-                    "type": "integer",
-                    "description": "Seconds until the login session expires"
-                },
-                "interval": {
-                    "type": "integer",
-                    "description": "Minimum seconds between poll requests"
-                }
-            },
-            "required": [
-                "device_code",
-                "user_code",
-                "verification_uri",
-                "verification_uri_complete",
-                "expires_in",
-                "interval"
-            ]
-        },
-        "sdkName": "startCliLogin",
-        "summary": "Start CLI browser login",
-        "tag": "CLI",
-        "tagCommand": "cli"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "add-domain",
-        "description": "Creates an unverified domain claim. You will receive a\n`verification_token` to add as a DNS TXT record before\ncalling the verify endpoint.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "addDomain",
-        "path": "/domains",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "domain": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 253,
-                    "description": "The domain name to claim (e.g. \"example.com\")"
-                }
-            },
-            "required": [
-                "domain"
-            ]
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "org_id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "domain": {
-                    "type": "string"
-                },
-                "verified": {
-                    "type": "boolean",
-                    "const": false
-                },
-                "verification_token": {
-                    "type": "string",
-                    "description": "Add this value as a TXT record to verify ownership"
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                }
-            },
-            "required": [
-                "id",
-                "org_id",
-                "domain",
-                "verified",
-                "verification_token",
-                "created_at"
-            ]
-        },
-        "sdkName": "addDomain",
-        "summary": "Claim a new domain",
-        "tag": "Domains",
-        "tagCommand": "domains"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "delete-domain",
-        "description": "Deletes a verified or unverified domain claim.",
-        "hasJsonBody": false,
-        "method": "DELETE",
-        "operationId": "deleteDomain",
-        "path": "/domains/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": null,
-        "sdkName": "deleteDomain",
-        "summary": "Delete a domain",
-        "tag": "Domains",
-        "tagCommand": "domains"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "list-domains",
-        "description": "Returns all verified and unverified domains for your organization,\nsorted by creation date (newest first). Each domain includes a\n`verified` boolean to distinguish between the two states.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "listDomains",
-        "path": "/domains",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "array",
-            "items": {
-                "description": "A domain can be either verified or unverified. Verified domains have\n`is_active` and `spam_threshold` fields. Unverified domains have a\n`verification_token` for DNS verification.\n",
-                "oneOf": [
-                    {
-                        "type": "object",
-                        "properties": {
-                            "id": {
-                                "type": "string",
-                                "format": "uuid"
-                            },
-                            "org_id": {
-                                "type": "string",
-                                "format": "uuid"
-                            },
-                            "domain": {
-                                "type": "string"
-                            },
-                            "verified": {
-                                "type": "boolean",
-                                "const": true
-                            },
-                            "is_active": {
-                                "type": "boolean"
-                            },
-                            "spam_threshold": {
-                                "type": [
-                                    "number",
-                                    "null"
-                                ],
-                                "minimum": 0,
-                                "maximum": 15
-                            },
-                            "verification_token": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ]
-                            },
-                            "created_at": {
-                                "type": "string",
-                                "format": "date-time"
-                            }
-                        },
-                        "required": [
-                            "id",
-                            "org_id",
-                            "domain",
-                            "verified",
-                            "is_active",
-                            "created_at"
-                        ]
-                    },
-                    {
-                        "type": "object",
-                        "properties": {
-                            "id": {
-                                "type": "string",
-                                "format": "uuid"
-                            },
-                            "org_id": {
-                                "type": "string",
-                                "format": "uuid"
-                            },
-                            "domain": {
-                                "type": "string"
-                            },
-                            "verified": {
-                                "type": "boolean",
-                                "const": false
-                            },
-                            "verification_token": {
-                                "type": "string",
-                                "description": "Add this value as a TXT record to verify ownership"
-                            },
-                            "created_at": {
-                                "type": "string",
-                                "format": "date-time"
-                            }
-                        },
-                        "required": [
-                            "id",
-                            "org_id",
-                            "domain",
-                            "verified",
-                            "verification_token",
-                            "created_at"
-                        ]
-                    }
-                ]
-            }
-        },
-        "sdkName": "listDomains",
-        "summary": "List all domains",
-        "tag": "Domains",
-        "tagCommand": "domains"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "update-domain",
-        "description": "Update a verified domain's settings. Only verified domains can be\nupdated. Per-domain spam thresholds require a Pro plan.\n",
-        "hasJsonBody": true,
-        "method": "PATCH",
-        "operationId": "updateDomain",
-        "path": "/domains/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "is_active": {
-                    "type": "boolean",
-                    "description": "Whether the domain accepts incoming emails"
-                },
-                "spam_threshold": {
-                    "type": [
-                        "number",
-                        "null"
-                    ],
-                    "minimum": 0,
-                    "maximum": 15,
-                    "description": "Per-domain spam threshold override (Pro plan required)"
-                }
-            },
-            "minProperties": 1
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "org_id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "domain": {
-                    "type": "string"
-                },
-                "verified": {
-                    "type": "boolean",
-                    "const": true
-                },
-                "is_active": {
-                    "type": "boolean"
-                },
-                "spam_threshold": {
-                    "type": [
-                        "number",
-                        "null"
-                    ],
-                    "minimum": 0,
-                    "maximum": 15
-                },
-                "verification_token": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                }
-            },
-            "required": [
-                "id",
-                "org_id",
-                "domain",
-                "verified",
-                "is_active",
-                "created_at"
-            ]
-        },
-        "sdkName": "updateDomain",
-        "summary": "Update domain settings",
-        "tag": "Domains",
-        "tagCommand": "domains"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "verify-domain",
-        "description": "Checks DNS records (MX and TXT) to verify domain ownership.\nOn success, the domain is promoted from unverified to verified.\nOn failure, returns which checks passed and which failed.\n",
-        "hasJsonBody": false,
-        "method": "POST",
-        "operationId": "verifyDomain",
-        "path": "/domains/{id}/verify",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "oneOf": [
-                {
-                    "type": "object",
-                    "properties": {
-                        "verified": {
-                            "type": "boolean",
-                            "const": true
-                        }
-                    },
-                    "required": [
-                        "verified"
-                    ]
-                },
-                {
-                    "type": "object",
-                    "properties": {
-                        "verified": {
-                            "type": "boolean",
-                            "const": false
-                        },
-                        "mxFound": {
-                            "type": "boolean",
-                            "description": "Whether MX records point to Primitive"
-                        },
-                        "txtFound": {
-                            "type": "boolean",
-                            "description": "Whether the TXT verification record was found"
-                        },
-                        "error": {
-                            "type": "string",
-                            "description": "Human-readable verification failure reason"
-                        }
-                    },
-                    "required": [
-                        "verified",
-                        "mxFound",
-                        "txtFound",
-                        "error"
-                    ]
-                }
-            ]
-        },
-        "sdkName": "verifyDomain",
-        "summary": "Verify domain ownership",
-        "tag": "Domains",
-        "tagCommand": "domains"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "delete-email",
-        "description": null,
-        "hasJsonBody": false,
-        "method": "DELETE",
-        "operationId": "deleteEmail",
-        "path": "/emails/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": null,
-        "sdkName": "deleteEmail",
-        "summary": "Delete an email",
-        "tag": "Emails",
-        "tagCommand": "emails"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "discard-email-content",
-        "description": "Permanently deletes the email's raw bytes, parsed body (text + HTML),\nand attachments while preserving metadata (sender, recipient,\nsubject, timestamps, hashes, attachment manifest) for audit logs.\nIdempotent: a second call returns success with\n`already_discarded: true` and does no work.\n\n**Gated** on the customer's discard-content opt-in (managed in the\ndashboard at Settings > Webhooks). When the toggle is off, this\nendpoint returns `403` with code `discard_not_enabled` and a\nmessage pointing the human at the dashboard. There is intentionally\nno API to flip this toggle. Opting in to a destructive,\nnon-reversible operation must be a deliberate human click in the\nUI.\n",
-        "hasJsonBody": false,
-        "method": "POST",
-        "operationId": "discardEmailContent",
-        "path": "/emails/{id}/discard-content",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "discarded": {
-                    "type": "boolean",
-                    "description": "Always `true` on a 2xx response. The content is either now\ndiscarded as a result of this call, or was already discarded\nbefore this call ran.\n"
-                },
-                "already_discarded": {
-                    "type": "boolean",
-                    "description": "`true` if the email's content was already discarded before\nthis call ran (no work was done). `false` if this call was\nthe one that performed the discard.\n"
-                }
-            },
-            "required": [
-                "discarded",
-                "already_discarded"
-            ]
-        },
-        "sdkName": "discardEmailContent",
-        "summary": "Discard email content",
-        "tag": "Emails",
-        "tagCommand": "emails"
-    },
-    {
-        "binaryResponse": true,
-        "bodyRequired": false,
-        "command": "download-attachments",
-        "description": "Downloads all attachments as a gzip-compressed tar archive.\nAuthenticates via a signed download token (provided in webhook\npayloads) or a valid session.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "downloadAttachments",
-        "path": "/emails/{id}/attachments.tar.gz",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [
-            {
-                "description": "Signed download token from webhook payload",
-                "enum": null,
-                "name": "token",
-                "required": false,
-                "type": "string"
-            }
-        ],
-        "requestSchema": null,
-        "responseSchema": null,
-        "sdkName": "downloadAttachments",
-        "summary": "Download email attachments",
-        "tag": "Emails",
-        "tagCommand": "emails"
-    },
-    {
-        "binaryResponse": true,
-        "bodyRequired": false,
-        "command": "download-raw-email",
-        "description": "Downloads the raw RFC 822 email file (.eml). Authenticates via\na signed download token (provided in webhook payloads) or a\nvalid session.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "downloadRawEmail",
-        "path": "/emails/{id}/raw",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [
-            {
-                "description": "Signed download token from webhook payload",
-                "enum": null,
-                "name": "token",
-                "required": false,
-                "type": "string"
-            }
-        ],
-        "requestSchema": null,
-        "responseSchema": null,
-        "sdkName": "downloadRawEmail",
-        "summary": "Download raw email",
-        "tag": "Emails",
-        "tagCommand": "emails"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "get-email",
-        "description": "Returns the full record for an inbound email received at one\nof your verified domains, including the parsed text and HTML\nbodies, threading metadata, SMTP envelope detail, webhook\ndelivery state, and a `replies` array for any outbound sends\nrecorded as replies to this inbound.\n\nFor listing inbound emails (with cursor pagination, status\nand date filters, and free-text search), use\n`/emails`. Outbound (sent) email records are NOT returned\nhere; use `/sent-emails/{id}` for those.\n\nThe response carries four sender-shaped fields whose\nmeanings overlap. `from_email` is the canonical \"who sent\nthis\" field for most use cases (parsed bare address from\nthe `From:` header, with a `sender` fallback). `from_header`\nis the raw header including any display name. `sender` and\n`smtp_mail_from` both carry the SMTP envelope MAIL FROM\n(return-path) and are equal by construction; `sender` is\nthe older field name retained for compatibility. See\n`primitive describe emails:get-email | jq '.responseSchema.properties'`\nfor per-field detail.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "getEmail",
-        "path": "/emails/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "message_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "domain_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "uuid"
-                },
-                "org_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "uuid"
-                },
-                "sender": {
-                    "type": "string",
-                    "description": "SMTP envelope sender (return-path) the inbound mail server\naccepted. Same value as `smtp_mail_from`; both fields exist\nso protocol-aware tooling can use whichever name it expects.\n\nFor most legitimate mail this equals `from_email`; for\nmailing lists, bounce handlers, and forwarders it is\ntypically the bounce-handling address rather than the\nhuman-visible sender.\n\n**For the canonical \"who sent this email\" value, use\n`from_email`.**\n"
-                },
-                "recipient": {
-                    "type": "string"
-                },
-                "subject": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "body_text": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "description": "Plain-text body parsed from the inbound MIME, matching the `email.parsed.body_text` field on the webhook payload. Null when the message had no text part or parsing failed."
-                },
-                "body_html": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "description": "HTML body parsed from the inbound MIME, matching the `email.parsed.body_html` field on the webhook payload. Null when the message had no HTML part or parsing failed."
-                },
-                "status": {
-                    "type": "string",
-                    "description": "Lifecycle status of an INBOUND email (a row in the `emails`\ntable). Distinct from `SentEmailStatus`, which describes\nthe OUTBOUND lifecycle (the `sent_emails` table) and uses\na different vocabulary because the lifecycles differ.\nPossible values:\n\n  - `pending`: the row was inserted at ingestion (mx_main)\n    and has not yet completed the spam / filter / auth\n    pipeline. Body and parsed fields are present; webhook\n    delivery is not yet scheduled. Most rows transition out\n    of `pending` within seconds.\n  - `accepted`: the inbound passed the policy gates and is\n    queued for webhook delivery. The `webhook_status` field\n    tracks the separate webhook-delivery lifecycle from\n    this point.\n  - `completed`: terminal success. Webhook delivery\n    attempted and acknowledged by every active endpoint, OR\n    no endpoints are configured, so the row is durably\n    archived.\n  - `rejected`: terminal failure at ingestion (spam, blocked\n    sender, filter rule, malformed). The body and metadata\n    are stored for auditing but no webhook fires and the\n    row is not repliable.\n\nSee also `webhook_status` (separate enum tracking the\nwebhook-delivery state machine) and `SentEmailStatus` (the\noutbound vocabulary).\n",
-                    "enum": [
-                        "pending",
-                        "accepted",
-                        "completed",
-                        "rejected"
-                    ]
-                },
-                "domain": {
-                    "type": "string"
-                },
-                "spam_score": {
-                    "type": [
-                        "number",
-                        "null"
-                    ]
-                },
-                "raw_size_bytes": {
-                    "type": [
-                        "integer",
-                        "null"
-                    ]
-                },
-                "raw_sha256": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "received_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "rejection_reason": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "webhook_status": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "description": "Webhook-delivery state for an inbound email. Tracks a\nSEPARATE lifecycle from the email's `status` field; the\nsame row carries both. Possible values:\n\n  - `pending`: ingestion is past `pending` (the email itself\n    is `accepted`) but the webhook fan-out has not yet\n    started for this row.\n  - `in_flight`: at least one delivery attempt is in flight.\n  - `fired`: terminal success. Every active endpoint\n    acknowledged the delivery (or accepted it after retries).\n  - `failed`: terminal partial-failure. At least one endpoint\n    exhausted its retry budget; some endpoints may still\n    have succeeded.\n  - `exhausted`: terminal failure. Every endpoint exhausted\n    its retry budget without success.\n  - `null`: no endpoints configured, so no webhook lifecycle\n    applies.\n\nNote that the value `pending` here does NOT mean the email\nis `pending`; it means the email is past ingestion but\nwebhook delivery has not yet begun. Two overlapping uses\nof the word `pending` for distinct lifecycle phases.\n",
-                    "enum": [
-                        "pending",
-                        "in_flight",
-                        "fired",
-                        "failed",
-                        "exhausted",
-                        null
-                    ]
-                },
-                "webhook_attempt_count": {
-                    "type": "integer"
-                },
-                "webhook_last_attempt_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "webhook_last_status_code": {
-                    "type": [
-                        "integer",
-                        "null"
-                    ]
-                },
-                "webhook_last_error": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "webhook_fired_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "smtp_helo": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "smtp_mail_from": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "description": "SMTP envelope MAIL FROM (return-path), as accepted by the\ninbound mail server. Same value as `sender`; both fields\nexist so protocol-aware tooling can use whichever name it\nexpects.\n\nFor the canonical \"who sent this email\" value (display name\nstripped, From-header preferred), use `from_email`.\n"
-                },
-                "smtp_rcpt_to": {
-                    "type": [
-                        "array",
-                        "null"
-                    ],
-                    "items": {
-                        "type": "string"
-                    }
-                },
-                "from_header": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "description": "Raw `From:` header from the message body, including any\ndisplay name (e.g. `\"Alice Example\" <alice@example.com>`).\nUse this when you need the display name for rendering.\n\nFor the bare email address (display name stripped), use\n`from_email`.\n"
-                },
-                "content_discarded_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "content_discarded_by_delivery_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "from_email": {
-                    "type": "string",
-                    "description": "Bare email address parsed from the `From:` header, with\ndisplay name stripped (e.g. `alice@example.com`). Falls\nback to `sender` (the SMTP envelope MAIL FROM) when the\n`From:` header cannot be parsed.\n\n**This is the canonical \"who sent this email\" field for\nmost use cases**, including comparing against allowlists,\nrouting replies, or displaying the sender to a user. Use\n`from_header` when you specifically need the display name,\nor `sender`/`smtp_mail_from` when you need the SMTP\nenvelope value (e.g. to follow a bounce).\n"
-                },
-                "to_email": {
-                    "type": "string",
-                    "description": "Parsed to address (same as recipient)"
-                },
-                "from_known_address": {
-                    "type": "boolean",
-                    "description": "True when the inbound's sender address has a matching grant\nin the org's known-send-addresses list. Advisory: a true\nvalue does not by itself guarantee that a reply will be\naccepted by send-mail's gates; the per-send check at send\ntime remains authoritative.\n"
-                },
-                "replies": {
-                    "type": "array",
-                    "description": "Sent emails recorded as replies to this inbound, in send\norder (ascending). Populated when a customer's send-mail\nrequest carries an `in_reply_to` Message-ID that matches\nthis inbound's `message_id` in the same org. Includes\nattempts that were gate-denied, so the array reflects every\nrecorded reply attempt regardless of outcome.\n",
-                    "items": {
-                        "type": "object",
-                        "properties": {
-                            "id": {
-                                "type": "string",
-                                "format": "uuid",
-                                "description": "Sent-email row id."
-                            },
-                            "status": {
-                                "type": "string",
-                                "description": "Lifecycle status of a sent_emails row. Possible values:\n\n  - `queued`: pre-call INSERT; the outbound agent has not\n    yet replied.\n  - `submitted_to_agent`: agent accepted; `queue_id` is set.\n  - `agent_failed`: agent rejected; `error_code` and\n    `error_message` carry the reason.\n  - `gate_denied`: a recipient-scope gate denied the send;\n    the agent was never called. The `gates` array carries\n    the denial detail. /send-mail returns 403 in this case\n    so callers see the denial synchronously; /sent-emails\n    additionally records the row for historical lookup,\n    which is when this status appears in a listing.\n  - `unknown`: terminal indeterminate; the on-box log\n    poller couldn't classify the receiver's response.\n  - `delivered` / `bounced` / `deferred` / `wait_timeout`:\n    terminal delivery outcomes (see DeliveryStatus).\n",
-                                "enum": [
-                                    "queued",
-                                    "submitted_to_agent",
-                                    "agent_failed",
-                                    "gate_denied",
-                                    "unknown",
-                                    "delivered",
-                                    "bounced",
-                                    "deferred",
-                                    "wait_timeout"
-                                ]
-                            },
-                            "to_address": {
-                                "type": "string",
-                                "description": "Recipient address as recorded on the sent_emails row."
-                            },
-                            "subject": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ]
-                            },
-                            "created_at": {
-                                "type": "string",
-                                "format": "date-time"
-                            },
-                            "queue_id": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ],
-                                "description": "Outbound relay queue identifier when available."
-                            }
-                        },
-                        "required": [
-                            "id",
-                            "status",
-                            "to_address",
-                            "created_at"
-                        ]
-                    }
-                }
-            },
-            "required": [
-                "id",
-                "sender",
-                "recipient",
-                "status",
-                "domain",
-                "created_at",
-                "received_at",
-                "webhook_attempt_count",
-                "from_email",
-                "to_email",
-                "replies"
-            ]
-        },
-        "sdkName": "getEmail",
-        "summary": "Get inbound email by id",
-        "tag": "Emails",
-        "tagCommand": "emails"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "list-emails",
-        "description": "Returns a paginated list of INBOUND emails received at your\nverified domains. Outbound messages sent via /send-mail are\nnot included; this endpoint is the inbox view, not a\nunified send/receive history.\n\nSupports filtering by domain, status, date range, and\nfree-text search across subject, sender, and recipient\nfields.\n\nFor a compact text-table summary of the most recent N\ninbounds (no filters, no cursor pagination), the CLI ships\n`primitive emails:latest` as a one-line-per-email shortcut.\nIt's TTY-aware so id columns are full UUIDs when piped, and\na `--json` flag returns the same envelope this endpoint\ndoes. Use whichever fits the call site.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "listEmails",
-        "path": "/emails",
-        "pathParams": [],
-        "queryParams": [
-            {
-                "description": "Pagination cursor from a previous response's `meta.cursor` field.\nFormat: `{ISO-datetime}|{id}`\n",
-                "enum": null,
-                "name": "cursor",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Number of results per page",
-                "enum": null,
-                "name": "limit",
-                "required": false,
-                "type": "integer"
-            },
-            {
-                "description": "Filter by domain ID",
-                "enum": null,
-                "name": "domain_id",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter inbound rows by lifecycle status. See `EmailStatus`\nfor what each value means. Note that the webhook delivery\nstate is a SEPARATE lifecycle on the same row; filter by\n`webhook_status` semantics is not currently supported on\nthis endpoint.\n",
-                "enum": null,
-                "name": "status",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Search subject, sender, and recipient (case-insensitive)",
-                "enum": null,
-                "name": "search",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter emails created on or after this timestamp",
-                "enum": null,
-                "name": "date_from",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter emails created on or before this timestamp",
-                "enum": null,
-                "name": "date_to",
-                "required": false,
-                "type": "string"
-            }
-        ],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "array",
-            "items": {
-                "type": "object",
-                "properties": {
-                    "id": {
-                        "type": "string",
-                        "format": "uuid"
-                    },
-                    "message_id": {
-                        "type": [
-                            "string",
-                            "null"
-                        ]
-                    },
-                    "domain_id": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "uuid"
-                    },
-                    "org_id": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "uuid"
-                    },
-                    "status": {
-                        "type": "string",
-                        "description": "Lifecycle status of an INBOUND email (a row in the `emails`\ntable). Distinct from `SentEmailStatus`, which describes\nthe OUTBOUND lifecycle (the `sent_emails` table) and uses\na different vocabulary because the lifecycles differ.\nPossible values:\n\n  - `pending`: the row was inserted at ingestion (mx_main)\n    and has not yet completed the spam / filter / auth\n    pipeline. Body and parsed fields are present; webhook\n    delivery is not yet scheduled. Most rows transition out\n    of `pending` within seconds.\n  - `accepted`: the inbound passed the policy gates and is\n    queued for webhook delivery. The `webhook_status` field\n    tracks the separate webhook-delivery lifecycle from\n    this point.\n  - `completed`: terminal success. Webhook delivery\n    attempted and acknowledged by every active endpoint, OR\n    no endpoints are configured, so the row is durably\n    archived.\n  - `rejected`: terminal failure at ingestion (spam, blocked\n    sender, filter rule, malformed). The body and metadata\n    are stored for auditing but no webhook fires and the\n    row is not repliable.\n\nSee also `webhook_status` (separate enum tracking the\nwebhook-delivery state machine) and `SentEmailStatus` (the\noutbound vocabulary).\n",
-                        "enum": [
-                            "pending",
-                            "accepted",
-                            "completed",
-                            "rejected"
-                        ]
-                    },
-                    "sender": {
-                        "type": "string",
-                        "description": "SMTP envelope sender (return-path) the inbound mail server\naccepted. For most legitimate mail this equals the bare\naddress in the From header; for mailing lists, bounce\nhandlers, and forwarders it is typically the bounce address\nrather than the human-visible sender.\n\nFor the parsed From-header value (with display name handling\nand a sender-fallback when the header is unparseable), GET\nthe email by id and use `from_email`.\n"
-                    },
-                    "recipient": {
-                        "type": "string"
-                    },
-                    "subject": {
-                        "type": [
-                            "string",
-                            "null"
-                        ]
-                    },
-                    "domain": {
-                        "type": "string"
-                    },
-                    "spam_score": {
-                        "type": [
-                            "number",
-                            "null"
-                        ]
-                    },
-                    "created_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    },
-                    "received_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    },
-                    "raw_size_bytes": {
-                        "type": [
-                            "integer",
-                            "null"
-                        ]
-                    },
-                    "webhook_status": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "Webhook-delivery state for an inbound email. Tracks a\nSEPARATE lifecycle from the email's `status` field; the\nsame row carries both. Possible values:\n\n  - `pending`: ingestion is past `pending` (the email itself\n    is `accepted`) but the webhook fan-out has not yet\n    started for this row.\n  - `in_flight`: at least one delivery attempt is in flight.\n  - `fired`: terminal success. Every active endpoint\n    acknowledged the delivery (or accepted it after retries).\n  - `failed`: terminal partial-failure. At least one endpoint\n    exhausted its retry budget; some endpoints may still\n    have succeeded.\n  - `exhausted`: terminal failure. Every endpoint exhausted\n    its retry budget without success.\n  - `null`: no endpoints configured, so no webhook lifecycle\n    applies.\n\nNote that the value `pending` here does NOT mean the email\nis `pending`; it means the email is past ingestion but\nwebhook delivery has not yet begun. Two overlapping uses\nof the word `pending` for distinct lifecycle phases.\n",
-                        "enum": [
-                            "pending",
-                            "in_flight",
-                            "fired",
-                            "failed",
-                            "exhausted",
-                            null
-                        ]
-                    },
-                    "webhook_attempt_count": {
-                        "type": "integer"
-                    }
-                },
-                "required": [
-                    "id",
-                    "status",
-                    "sender",
-                    "recipient",
-                    "domain",
-                    "created_at",
-                    "received_at",
-                    "webhook_attempt_count"
-                ]
-            }
-        },
-        "sdkName": "listEmails",
-        "summary": "List inbound emails",
-        "tag": "Emails",
-        "tagCommand": "emails"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "replay-email-webhooks",
-        "description": "Re-delivers the webhook payload for this email to all active\nendpoints matching the email's domain. Rate limited per-email\n(short cooldown between successive replays of the same email)\nand per-org (burst + sustained windows), sharing an org-wide\nbudget with delivery replays.\n",
-        "hasJsonBody": false,
-        "method": "POST",
-        "operationId": "replayEmailWebhooks",
-        "path": "/emails/{id}/replay",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "delivered": {
-                    "type": "integer",
-                    "description": "Number of successful deliveries"
-                },
-                "failed": {
-                    "type": "integer",
-                    "description": "Number of failed deliveries"
-                }
-            },
-            "required": [
-                "delivered",
-                "failed"
-            ]
-        },
-        "sdkName": "replayEmailWebhooks",
-        "summary": "Replay email webhooks",
-        "tag": "Emails",
-        "tagCommand": "emails"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "search-emails",
-        "description": "Searches inbound emails with structured filters and optional\nfull-text matching across parsed email fields. This endpoint is\noptimized for filtered inbox views and CLI polling workflows:\ncallers that only need new accepted mail can pass\n`sort=received_at_asc`, `snippet=false`, `include_facets=false`,\nand a `date_from` timestamp.\n\n`q`, `subject`, and `body` use the same English full-text index\nas the web inbox search. Structured filters such as `from`, `to`,\n`domain_id`, status, attachment presence, and spam score bounds\nare combined with the text query.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "searchEmails",
-        "path": "/emails/search",
-        "pathParams": [],
-        "queryParams": [
-            {
-                "description": "Full-text search DSL query.",
-                "enum": null,
-                "name": "q",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter by sender address or sender domain.",
-                "enum": null,
-                "name": "from",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter by recipient address or recipient domain.",
-                "enum": null,
-                "name": "to",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Full-text search restricted to the subject field.",
-                "enum": null,
-                "name": "subject",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Full-text search restricted to the parsed text body.",
-                "enum": null,
-                "name": "body",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter by domain ID.",
-                "enum": null,
-                "name": "domain_id",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter by inbound email lifecycle status.",
-                "enum": null,
-                "name": "status",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter emails received on or after this timestamp.",
-                "enum": null,
-                "name": "date_from",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter emails received on or before this timestamp.",
-                "enum": null,
-                "name": "date_to",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter by whether the email has one or more attachments.",
-                "enum": [
-                    "true",
-                    "false"
-                ],
-                "name": "has_attachment",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter to emails with spam score below this value.",
-                "enum": null,
-                "name": "spam_score_lt",
-                "required": false,
-                "type": "number"
-            },
-            {
-                "description": "Filter to emails with spam score greater than or equal to this value.",
-                "enum": null,
-                "name": "spam_score_gte",
-                "required": false,
-                "type": "number"
-            },
-            {
-                "description": "Sort mode. Defaults to relevance when a text query is present,\notherwise `received_at_desc`.\n",
-                "enum": [
-                    "relevance",
-                    "received_at_desc",
-                    "received_at_asc"
-                ],
-                "name": "sort",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Opaque pagination cursor from a previous search response.",
-                "enum": null,
-                "name": "cursor",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Number of results per page",
-                "enum": null,
-                "name": "limit",
-                "required": false,
-                "type": "integer"
-            },
-            {
-                "description": "Include subject/body highlight snippets when text search is active.",
-                "enum": [
-                    "true",
-                    "false"
-                ],
-                "name": "snippet",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Include facet counts for sender, domain, status, and attachment presence.",
-                "enum": [
-                    "true",
-                    "false"
-                ],
-                "name": "include_facets",
-                "required": false,
-                "type": "string"
-            }
-        ],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "array",
-            "items": {
-                "allOf": [
-                    {
-                        "type": "object",
-                        "properties": {
-                            "id": {
-                                "type": "string",
-                                "format": "uuid"
-                            },
-                            "message_id": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ]
-                            },
-                            "domain_id": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ],
-                                "format": "uuid"
-                            },
-                            "org_id": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ],
-                                "format": "uuid"
-                            },
-                            "status": {
-                                "type": "string",
-                                "description": "Lifecycle status of an INBOUND email (a row in the `emails`\ntable). Distinct from `SentEmailStatus`, which describes\nthe OUTBOUND lifecycle (the `sent_emails` table) and uses\na different vocabulary because the lifecycles differ.\nPossible values:\n\n  - `pending`: the row was inserted at ingestion (mx_main)\n    and has not yet completed the spam / filter / auth\n    pipeline. Body and parsed fields are present; webhook\n    delivery is not yet scheduled. Most rows transition out\n    of `pending` within seconds.\n  - `accepted`: the inbound passed the policy gates and is\n    queued for webhook delivery. The `webhook_status` field\n    tracks the separate webhook-delivery lifecycle from\n    this point.\n  - `completed`: terminal success. Webhook delivery\n    attempted and acknowledged by every active endpoint, OR\n    no endpoints are configured, so the row is durably\n    archived.\n  - `rejected`: terminal failure at ingestion (spam, blocked\n    sender, filter rule, malformed). The body and metadata\n    are stored for auditing but no webhook fires and the\n    row is not repliable.\n\nSee also `webhook_status` (separate enum tracking the\nwebhook-delivery state machine) and `SentEmailStatus` (the\noutbound vocabulary).\n",
-                                "enum": [
-                                    "pending",
-                                    "accepted",
-                                    "completed",
-                                    "rejected"
-                                ]
-                            },
-                            "sender": {
-                                "type": "string",
-                                "description": "SMTP envelope sender (return-path) the inbound mail server\naccepted. For most legitimate mail this equals the bare\naddress in the From header; for mailing lists, bounce\nhandlers, and forwarders it is typically the bounce address\nrather than the human-visible sender.\n\nFor the parsed From-header value (with display name handling\nand a sender-fallback when the header is unparseable), GET\nthe email by id and use `from_email`.\n"
-                            },
-                            "recipient": {
-                                "type": "string"
-                            },
-                            "subject": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ]
-                            },
-                            "domain": {
-                                "type": "string"
-                            },
-                            "spam_score": {
-                                "type": [
-                                    "number",
-                                    "null"
-                                ]
-                            },
-                            "created_at": {
-                                "type": "string",
-                                "format": "date-time"
-                            },
-                            "received_at": {
-                                "type": "string",
-                                "format": "date-time"
-                            },
-                            "raw_size_bytes": {
-                                "type": [
-                                    "integer",
-                                    "null"
-                                ]
-                            },
-                            "webhook_status": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ],
-                                "description": "Webhook-delivery state for an inbound email. Tracks a\nSEPARATE lifecycle from the email's `status` field; the\nsame row carries both. Possible values:\n\n  - `pending`: ingestion is past `pending` (the email itself\n    is `accepted`) but the webhook fan-out has not yet\n    started for this row.\n  - `in_flight`: at least one delivery attempt is in flight.\n  - `fired`: terminal success. Every active endpoint\n    acknowledged the delivery (or accepted it after retries).\n  - `failed`: terminal partial-failure. At least one endpoint\n    exhausted its retry budget; some endpoints may still\n    have succeeded.\n  - `exhausted`: terminal failure. Every endpoint exhausted\n    its retry budget without success.\n  - `null`: no endpoints configured, so no webhook lifecycle\n    applies.\n\nNote that the value `pending` here does NOT mean the email\nis `pending`; it means the email is past ingestion but\nwebhook delivery has not yet begun. Two overlapping uses\nof the word `pending` for distinct lifecycle phases.\n",
-                                "enum": [
-                                    "pending",
-                                    "in_flight",
-                                    "fired",
-                                    "failed",
-                                    "exhausted",
-                                    null
-                                ]
-                            },
-                            "webhook_attempt_count": {
-                                "type": "integer"
-                            }
-                        },
-                        "required": [
-                            "id",
-                            "status",
-                            "sender",
-                            "recipient",
-                            "domain",
-                            "created_at",
-                            "received_at",
-                            "webhook_attempt_count"
-                        ]
-                    },
-                    {
-                        "type": "object",
-                        "properties": {
-                            "attachment_count": {
-                                "type": "integer",
-                                "description": "Number of parsed attachments on the email."
-                            },
-                            "from_known_address": {
-                                "type": "boolean",
-                                "description": "Whether the parsed From address is known to this org from prior authenticated inbound mail."
-                            },
-                            "score": {
-                                "type": "number",
-                                "description": "Relevance score. Present only when sorting by relevance."
-                            },
-                            "highlights": {
-                                "type": "object",
-                                "properties": {
-                                    "subject": {
-                                        "type": "array",
-                                        "items": {
-                                            "type": "string"
-                                        },
-                                        "description": "Subject snippets with matching terms highlighted."
-                                    },
-                                    "body": {
-                                        "type": "array",
-                                        "items": {
-                                            "type": "string"
-                                        },
-                                        "description": "Body snippets with matching terms highlighted."
-                                    }
-                                },
-                                "required": [
-                                    "subject",
-                                    "body"
-                                ]
-                            }
-                        },
-                        "required": [
-                            "attachment_count",
-                            "from_known_address"
-                        ]
-                    }
-                ]
-            }
-        },
-        "sdkName": "searchEmails",
-        "summary": "Search inbound emails",
-        "tag": "Emails",
-        "tagCommand": "emails"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "create-endpoint",
-        "description": "Creates a new webhook endpoint. If a deactivated endpoint\nwith the same URL and domain exists, it is reactivated\ninstead. Subject to plan limits on the number of active\nendpoints.\n\n**Signing is account-scoped, not per-endpoint.** This call\ndoes not return any signing material; every endpoint on the\naccount uses the same webhook secret, fetched via\n`GET /account/webhook-secret`. See the API-level \"Webhook\nsigning\" section for the full wire format (header name,\nsigned string, hash algo, secret format, tolerance) and a\nlanguage-agnostic verification recipe.\n\nAfter creating the endpoint, fire a test delivery against\nit via `POST /endpoints/{id}/test` to confirm your verifier\naccepts the signature.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "createEndpoint",
-        "path": "/endpoints",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "url": {
-                    "type": "string",
-                    "minLength": 1,
-                    "description": "The webhook URL to deliver events to"
-                },
-                "enabled": {
-                    "type": "boolean",
-                    "default": true,
-                    "description": "Whether the endpoint is active"
-                },
-                "domain_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "uuid",
-                    "description": "Restrict to emails from a specific domain"
-                },
-                "rules": {
-                    "type": "object",
-                    "description": "Endpoint-specific filtering rules"
-                }
-            },
-            "required": [
-                "url"
-            ]
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "org_id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "url": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "enabled": {
-                    "type": "boolean"
-                },
-                "domain_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "uuid",
-                    "description": "Restrict this endpoint to emails from a specific domain"
-                },
-                "rules": {
-                    "type": "object",
-                    "description": "Endpoint-specific filtering rules"
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "updated_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "delivery_count": {
-                    "type": "integer",
-                    "description": "Total webhook deliveries attempted"
-                },
-                "success_count": {
-                    "type": "integer",
-                    "description": "Successful deliveries"
-                },
-                "failure_count": {
-                    "type": "integer",
-                    "description": "Failed deliveries"
-                },
-                "consecutive_fails": {
-                    "type": "integer",
-                    "description": "Current streak of consecutive failures"
-                },
-                "last_delivery_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "last_success_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "last_failure_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "deactivated_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                }
-            },
-            "required": [
-                "id",
-                "org_id",
-                "enabled",
-                "rules",
-                "created_at",
-                "updated_at",
-                "delivery_count",
-                "success_count",
-                "failure_count",
-                "consecutive_fails"
-            ]
-        },
-        "sdkName": "createEndpoint",
-        "summary": "Create a webhook endpoint",
-        "tag": "Endpoints",
-        "tagCommand": "endpoints"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "delete-endpoint",
-        "description": "Soft-deletes a webhook endpoint. The endpoint will no longer\nreceive webhook deliveries.\n",
-        "hasJsonBody": false,
-        "method": "DELETE",
-        "operationId": "deleteEndpoint",
-        "path": "/endpoints/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": null,
-        "sdkName": "deleteEndpoint",
-        "summary": "Delete a webhook endpoint",
-        "tag": "Endpoints",
-        "tagCommand": "endpoints"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "list-endpoints",
-        "description": "Returns all active (non-deleted) webhook endpoints.",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "listEndpoints",
-        "path": "/endpoints",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "array",
-            "items": {
-                "type": "object",
-                "properties": {
-                    "id": {
-                        "type": "string",
-                        "format": "uuid"
-                    },
-                    "org_id": {
-                        "type": "string",
-                        "format": "uuid"
-                    },
-                    "url": {
-                        "type": [
-                            "string",
-                            "null"
-                        ]
-                    },
-                    "enabled": {
-                        "type": "boolean"
-                    },
-                    "domain_id": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "uuid",
-                        "description": "Restrict this endpoint to emails from a specific domain"
-                    },
-                    "rules": {
-                        "type": "object",
-                        "description": "Endpoint-specific filtering rules"
-                    },
-                    "created_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    },
-                    "updated_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    },
-                    "delivery_count": {
-                        "type": "integer",
-                        "description": "Total webhook deliveries attempted"
-                    },
-                    "success_count": {
-                        "type": "integer",
-                        "description": "Successful deliveries"
-                    },
-                    "failure_count": {
-                        "type": "integer",
-                        "description": "Failed deliveries"
-                    },
-                    "consecutive_fails": {
-                        "type": "integer",
-                        "description": "Current streak of consecutive failures"
-                    },
-                    "last_delivery_at": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "date-time"
-                    },
-                    "last_success_at": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "date-time"
-                    },
-                    "last_failure_at": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "date-time"
-                    },
-                    "deactivated_at": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "date-time"
-                    }
-                },
-                "required": [
-                    "id",
-                    "org_id",
-                    "enabled",
-                    "rules",
-                    "created_at",
-                    "updated_at",
-                    "delivery_count",
-                    "success_count",
-                    "failure_count",
-                    "consecutive_fails"
-                ]
-            }
-        },
-        "sdkName": "listEndpoints",
-        "summary": "List webhook endpoints",
-        "tag": "Endpoints",
-        "tagCommand": "endpoints"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "test-endpoint",
-        "description": "Sends a sample `email.received` event to the endpoint. The request\nincludes SSRF protection (private IP rejection and DNS pinning).\nRate limited to 4 per minute and 30 per hour (non-exempt).\nSuccessful deliveries and verified-domain endpoints are exempt\nfrom the rate limit.\n",
-        "hasJsonBody": false,
-        "method": "POST",
-        "operationId": "testEndpoint",
-        "path": "/endpoints/{id}/test",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "status": {
-                    "type": "integer",
-                    "description": "HTTP status code returned by the endpoint"
-                },
-                "body": {
-                    "type": "string",
-                    "description": "Response body (truncated to 1000 characters)"
-                },
-                "signature": {
-                    "type": "string",
-                    "description": "The signature header value sent (if webhook secret is configured)"
-                }
-            },
-            "required": [
-                "status",
-                "body"
-            ]
-        },
-        "sdkName": "testEndpoint",
-        "summary": "Send a test webhook",
-        "tag": "Endpoints",
-        "tagCommand": "endpoints"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "update-endpoint",
-        "description": "Updates an active webhook endpoint. If the URL is changed, the old\nendpoint is deactivated and a new one is created (or an existing\ndeactivated endpoint with the new URL is reactivated).\n",
-        "hasJsonBody": true,
-        "method": "PATCH",
-        "operationId": "updateEndpoint",
-        "path": "/endpoints/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "url": {
-                    "type": "string",
-                    "minLength": 1,
-                    "description": "New webhook URL (triggers endpoint rotation)"
-                },
-                "enabled": {
-                    "type": "boolean"
-                },
-                "domain_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "uuid"
-                },
-                "rules": {
-                    "type": "object"
-                }
-            },
-            "minProperties": 1
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "org_id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "url": {
-                    "type": [
-                        "string",
-                        "null"
-                    ]
-                },
-                "enabled": {
-                    "type": "boolean"
-                },
-                "domain_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "uuid",
-                    "description": "Restrict this endpoint to emails from a specific domain"
-                },
-                "rules": {
-                    "type": "object",
-                    "description": "Endpoint-specific filtering rules"
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "updated_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "delivery_count": {
-                    "type": "integer",
-                    "description": "Total webhook deliveries attempted"
-                },
-                "success_count": {
-                    "type": "integer",
-                    "description": "Successful deliveries"
-                },
-                "failure_count": {
-                    "type": "integer",
-                    "description": "Failed deliveries"
-                },
-                "consecutive_fails": {
-                    "type": "integer",
-                    "description": "Current streak of consecutive failures"
-                },
-                "last_delivery_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "last_success_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "last_failure_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "deactivated_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                }
-            },
-            "required": [
-                "id",
-                "org_id",
-                "enabled",
-                "rules",
-                "created_at",
-                "updated_at",
-                "delivery_count",
-                "success_count",
-                "failure_count",
-                "consecutive_fails"
-            ]
-        },
-        "sdkName": "updateEndpoint",
-        "summary": "Update a webhook endpoint",
-        "tag": "Endpoints",
-        "tagCommand": "endpoints"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "create-filter",
-        "description": "Creates a new whitelist or blocklist filter. Per-domain filters\nrequire a Pro plan. Patterns are stored as lowercase.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "createFilter",
-        "path": "/filters",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "type": {
-                    "type": "string",
-                    "enum": [
-                        "whitelist",
-                        "blocklist"
-                    ]
-                },
-                "pattern": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 500,
-                    "description": "Email address or pattern to filter"
-                },
-                "domain_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "uuid",
-                    "description": "Restrict filter to a specific domain (Pro plan required)"
-                }
-            },
-            "required": [
-                "type",
-                "pattern"
-            ]
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "org_id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "domain_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "uuid",
-                    "description": "If set, filter applies only to this domain"
-                },
-                "type": {
-                    "type": "string",
-                    "enum": [
-                        "whitelist",
-                        "blocklist"
-                    ]
-                },
-                "pattern": {
-                    "type": "string",
-                    "description": "Email address or pattern to match (stored lowercase)"
-                },
-                "enabled": {
-                    "type": "boolean"
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                }
-            },
-            "required": [
-                "id",
-                "org_id",
-                "type",
-                "pattern",
-                "enabled",
-                "created_at"
-            ]
-        },
-        "sdkName": "createFilter",
-        "summary": "Create a filter rule",
-        "tag": "Filters",
-        "tagCommand": "filters"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "delete-filter",
-        "description": null,
-        "hasJsonBody": false,
-        "method": "DELETE",
-        "operationId": "deleteFilter",
-        "path": "/filters/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": null,
-        "sdkName": "deleteFilter",
-        "summary": "Delete a filter rule",
-        "tag": "Filters",
-        "tagCommand": "filters"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "list-filters",
-        "description": "Returns all whitelist and blocklist filter rules.",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "listFilters",
-        "path": "/filters",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "array",
-            "items": {
-                "type": "object",
-                "properties": {
-                    "id": {
-                        "type": "string",
-                        "format": "uuid"
-                    },
-                    "org_id": {
-                        "type": "string",
-                        "format": "uuid"
-                    },
-                    "domain_id": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "uuid",
-                        "description": "If set, filter applies only to this domain"
-                    },
-                    "type": {
-                        "type": "string",
-                        "enum": [
-                            "whitelist",
-                            "blocklist"
-                        ]
-                    },
-                    "pattern": {
-                        "type": "string",
-                        "description": "Email address or pattern to match (stored lowercase)"
-                    },
-                    "enabled": {
-                        "type": "boolean"
-                    },
-                    "created_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    }
-                },
-                "required": [
-                    "id",
-                    "org_id",
-                    "type",
-                    "pattern",
-                    "enabled",
-                    "created_at"
-                ]
-            }
-        },
-        "sdkName": "listFilters",
-        "summary": "List filter rules",
-        "tag": "Filters",
-        "tagCommand": "filters"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "update-filter",
-        "description": "Toggle a filter's enabled state.",
-        "hasJsonBody": true,
-        "method": "PATCH",
-        "operationId": "updateFilter",
-        "path": "/filters/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "enabled": {
-                    "type": "boolean"
-                }
-            },
-            "required": [
-                "enabled"
-            ]
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "org_id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "domain_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "uuid",
-                    "description": "If set, filter applies only to this domain"
-                },
-                "type": {
-                    "type": "string",
-                    "enum": [
-                        "whitelist",
-                        "blocklist"
-                    ]
-                },
-                "pattern": {
-                    "type": "string",
-                    "description": "Email address or pattern to match (stored lowercase)"
-                },
-                "enabled": {
-                    "type": "boolean"
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                }
-            },
-            "required": [
-                "id",
-                "org_id",
-                "type",
-                "pattern",
-                "enabled",
-                "created_at"
-            ]
-        },
-        "sdkName": "updateFilter",
-        "summary": "Update a filter rule",
-        "tag": "Filters",
-        "tagCommand": "filters"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "create-function",
-        "description": "Creates and deploys a new function. The handler must be a single\nESM module whose default export is an object with an async\n`fetch(request, env)` method (Workers-style). The gateway\nHMAC-verifies the POST against the org's webhook secret before\ninvoking the handler; the request body parses to an\n`email.received` event (see `EmailReceivedEvent` and the\nWebhook payload section for the full schema). Code is bundled\nbefore being uploaded; ship a single self-contained file rather\nthan relying on external imports.\n\n**Code limits.** `code` is capped at 1 MiB UTF-8. `sourceMap`\n(optional) is capped at 5 MiB UTF-8 and is stored only on the\nedge runtime side; it is not persisted in Primitive's database.\n\n**Auto-wiring.** On successful deploy, Primitive automatically\ncreates a webhook endpoint that delivers inbound mail to the\nfunction. There is nothing to configure on the Endpoints API\nfor this to work; the gateway URL returned here is for\nreference only and is not directly callable from outside.\n\n**Secrets.** New functions ship with the managed secrets\n(`PRIMITIVE_WEBHOOK_SECRET`, `PRIMITIVE_API_KEY`) already\nbound. Add user-set secrets via\n`POST /functions/{id}/secrets`; secret writes only land in the\nrunning handler on the next redeploy.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "createFunction",
-        "path": "/functions",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "name": {
-                    "type": "string",
-                    "pattern": "^[a-z0-9_-]{1,64}$",
-                    "description": "Slug-style name. Lowercase letters, digits, hyphens, and\nunderscores. 1 to 64 characters. Must be unique within the\norg; a 409 is returned on collision.\n"
-                },
-                "code": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 1048576,
-                    "description": "Bundled handler as a single ESM module. Up to 1 MiB UTF-8.\nMust export a default `{ async fetch(req, env, ctx) { ... } }`\nobject.\n"
-                },
-                "sourceMap": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 5242880,
-                    "description": "Optional source map for the bundle. Up to 5 MiB UTF-8.\nStored only on the runtime side (not in Primitive's\ndatabase) and used to symbolicate stack traces in the\nfunction's logs.\n"
-                }
-            },
-            "required": [
-                "name",
-                "code"
-            ]
-        },
-        "responseSchema": {
-            "type": "object",
-            "description": "Returned by POST /functions on a successful deploy.",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "name": {
-                    "type": "string"
-                },
-                "deploy_status": {
-                    "type": "string",
-                    "enum": [
-                        "pending",
-                        "deployed",
-                        "failed"
-                    ],
-                    "description": "Lifecycle state of the latest deploy attempt:\n  * `pending` — deploy in flight; the runtime has not yet\n    confirmed the new bundle is live.\n  * `deployed` — the running edge handler is the latest code.\n  * `failed` — the most recent deploy attempt failed; the\n    previously-live code (if any) is still running. The\n    `deploy_error` field carries the error message.\n"
-                },
-                "gateway_url": {
-                    "type": "string",
-                    "format": "uri"
-                }
-            },
-            "required": [
-                "id",
-                "name",
-                "deploy_status",
-                "gateway_url"
-            ]
-        },
-        "sdkName": "createFunction",
-        "summary": "Deploy a function",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "create-function-secret",
-        "description": "Idempotent insert-or-update keyed on `(function_id, key)`.\nReturns 201 the first time the key is set, 200 on subsequent\nupdates. Values are encrypted at rest and only become visible\nto the running handler on the next deploy (`PUT /functions/{id}`\nwith the existing code is sufficient to refresh bindings).\n\nKeys must match `^[A-Z_][A-Z0-9_]*$` (uppercase letters,\ndigits, underscores; first character is a letter or\nunderscore). Values are at most 4096 UTF-8 bytes. System-\nmanaged keys are reserved and rejected.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "createFunctionSecret",
-        "path": "/functions/{id}/secrets",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "description": "Body for POST /functions/{id}/secrets.",
-            "properties": {
-                "key": {
-                    "type": "string",
-                    "pattern": "^[A-Z_][A-Z0-9_]*$",
-                    "description": "Uppercase letters, digits, and underscores. Must start with\na letter or underscore. System-managed keys (e.g.\nPRIMITIVE_WEBHOOK_SECRET) are reserved.\n"
-                },
-                "value": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 4096,
-                    "description": "Secret value, up to 4096 UTF-8 bytes. Encrypted at rest.\nNever returned by any read endpoint.\n"
-                }
-            },
-            "required": [
-                "key",
-                "value"
-            ]
-        },
-        "responseSchema": {
-            "type": "object",
-            "description": "Returned by POST and PUT secret routes.",
-            "properties": {
-                "key": {
-                    "type": "string"
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "updated_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "created": {
-                    "type": "boolean",
-                    "description": "True if this call inserted a new row, false if it updated an existing one."
-                }
-            },
-            "required": [
-                "key",
-                "created_at",
-                "updated_at",
-                "created"
-            ]
-        },
-        "sdkName": "createFunctionSecret",
-        "summary": "Create or update a secret",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "delete-function",
-        "description": "Soft-deletes the function row, removes the script from the edge\nruntime, and deactivates the auto-wired webhook endpoint so no\nfurther inbound mail is delivered. Past deploy history,\ninvocations, and logs are retained.\n\nReturns 502 if the runtime delete fails partway; the function\nrow stays in place and the call is safe to retry until it\nsucceeds.\n",
-        "hasJsonBody": false,
-        "method": "DELETE",
-        "operationId": "deleteFunction",
-        "path": "/functions/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": null,
-        "sdkName": "deleteFunction",
-        "summary": "Delete a function",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "delete-function-secret",
-        "description": "Removes the secret. The binding stays live in the running\nhandler until the next deploy refreshes the binding set\n(`PUT /functions/{id}` with the existing code is sufficient).\nReturns 404 if the key did not exist. Managed system keys\ncannot be deleted.\n",
-        "hasJsonBody": false,
-        "method": "DELETE",
-        "operationId": "deleteFunctionSecret",
-        "path": "/functions/{id}/secrets/{key}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            },
-            {
-                "description": "Secret key. Must match `^[A-Z_][A-Z0-9_]*$`.",
-                "enum": null,
-                "name": "key",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": null,
-        "sdkName": "deleteFunctionSecret",
-        "summary": "Delete a secret",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "get-function",
-        "description": "Returns the full record for a function, including its current\nsource code and the deploy status / error from the most recent\ndeploy attempt.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "getFunction",
-        "path": "/functions/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "description": "Full function record returned by GET / PUT.",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "name": {
-                    "type": "string"
-                },
-                "code": {
-                    "type": "string",
-                    "description": "The bundled handler source. UTF-8 string up to 1 MiB. The\nsame value most recently passed as `code` to POST or PUT.\n"
-                },
-                "deploy_status": {
-                    "type": "string",
-                    "enum": [
-                        "pending",
-                        "deployed",
-                        "failed"
-                    ],
-                    "description": "Lifecycle state of the latest deploy attempt:\n  * `pending` — deploy in flight; the runtime has not yet\n    confirmed the new bundle is live.\n  * `deployed` — the running edge handler is the latest code.\n  * `failed` — the most recent deploy attempt failed; the\n    previously-live code (if any) is still running. The\n    `deploy_error` field carries the error message.\n"
-                },
-                "deploy_error": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "description": "Error message from the most recent failed deploy, or null\nafter a successful deploy. Surface this to users to explain\na `failed` status without polling.\n"
-                },
-                "deployed_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "gateway_url": {
-                    "type": "string",
-                    "format": "uri"
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "updated_at": {
-                    "type": "string",
-                    "format": "date-time"
-                }
-            },
-            "required": [
-                "id",
-                "name",
-                "code",
-                "deploy_status",
-                "gateway_url",
-                "created_at",
-                "updated_at"
-            ]
-        },
-        "sdkName": "getFunction",
-        "summary": "Get a function",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "list-function-logs",
-        "description": "Returns the most recent `function_logs` rows for the function,\nnewest first. Each row is a single `console.log` / `console.error`\ninvocation captured from the running handler.\n\nPage through history with the opaque `cursor` returned as\n`next_cursor`; pass it back as the `cursor` query param on the\nnext call. `next_cursor` is `null` when there are no further\nrows. The cursor format is an implementation detail and should\nnot be parsed by callers.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "listFunctionLogs",
-        "path": "/functions/{id}/logs",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [
-            {
-                "description": "Maximum number of rows to return. Clamped to 1..200; default\n50.\n",
-                "enum": null,
-                "name": "limit",
-                "required": false,
-                "type": "integer"
-            },
-            {
-                "description": "Opaque pagination cursor from a previous response's\n`next_cursor`. Omit on the first call.\n",
-                "enum": null,
-                "name": "cursor",
-                "required": false,
-                "type": "string"
-            }
-        ],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "items": {
-                    "type": "array",
-                    "items": {
-                        "type": "object",
-                        "description": "One row from GET /functions/{id}/logs. Represents a single\ncaptured log line emitted by the running handler (e.g. via\n`console.log` / `console.error`).\n",
-                        "properties": {
-                            "id": {
-                                "type": "string",
-                                "format": "uuid",
-                                "description": "Unique log row id (stable across pages)."
-                            },
-                            "function_id": {
-                                "type": "string",
-                                "format": "uuid",
-                                "description": "The function this log row belongs to."
-                            },
-                            "level": {
-                                "type": "string",
-                                "enum": [
-                                    "debug",
-                                    "log",
-                                    "info",
-                                    "warn",
-                                    "error"
-                                ],
-                                "description": "Severity. `log` is the runtime's default for unannotated\n`console.log` calls; the other levels match standard\n`console.*` methods.\n"
-                            },
-                            "message": {
-                                "type": "string",
-                                "description": "The textual message body. The runtime stringifies non-string\narguments before persisting, so this is always a plain\nstring.\n"
-                            },
-                            "ts": {
-                                "type": "string",
-                                "format": "date-time",
-                                "description": "When the handler emitted this line. Newest-first ordering\non this column drives pagination; clock is the runtime's,\nnot the gateway's.\n"
-                            },
-                            "metadata": {
-                                "type": [
-                                    "object",
-                                    "null"
-                                ],
-                                "additionalProperties": true,
-                                "description": "Optional structured payload the runtime attaches alongside\nthe message (e.g. extra args passed to `console.log`).\nShape is opaque; treat keys as untyped.\n"
-                            }
-                        },
-                        "required": [
-                            "id",
-                            "function_id",
-                            "level",
-                            "message",
-                            "ts"
-                        ]
-                    }
-                },
-                "next_cursor": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "description": "Pass back as `cursor` to fetch the next\npage. `null` when no further rows exist.\n"
-                }
-            },
-            "required": [
-                "items",
-                "next_cursor"
-            ]
-        },
-        "sdkName": "listFunctionLogs",
-        "summary": "List a function's execution logs",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "list-function-secrets",
-        "description": "Returns metadata for every secret bound to the function, with\nmanaged entries (provisioned by Primitive) listed first and\nuser-set entries listed alphabetically after. **Values are\nnever returned.** Secret writes are write-only.\n\nManaged entries (e.g. `PRIMITIVE_WEBHOOK_SECRET`,\n`PRIMITIVE_API_KEY`) carry a `description` instead of\n`created_at` / `updated_at`. They cannot be created, updated,\nor deleted via this API.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "listFunctionSecrets",
-        "path": "/functions/{id}/secrets",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "items": {
-                    "type": "array",
-                    "items": {
-                        "type": "object",
-                        "description": "One row from GET /functions/{id}/secrets. Discriminate on the\n`managed` field:\n  * `managed = true`  — system secret provisioned by Primitive.\n    `description` is set; `created_at` / `updated_at` are\n    null because the row is virtual (resolved at deploy time\n    from the managed registry, not stored in the secrets\n    table).\n  * `managed = false` — secret the user set via the API.\n    `created_at` / `updated_at` are set; `description` is\n    null.\n",
-                        "properties": {
-                            "key": {
-                                "type": "string"
-                            },
-                            "managed": {
-                                "type": "boolean",
-                                "description": "True for managed system secrets, false for user-set entries."
-                            },
-                            "description": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ],
-                                "description": "Set on managed entries only; null on user-set entries."
-                            },
-                            "created_at": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ],
-                                "format": "date-time",
-                                "description": "Set on user-set entries only; null on managed entries."
-                            },
-                            "updated_at": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ],
-                                "format": "date-time",
-                                "description": "Set on user-set entries only; null on managed entries."
-                            }
-                        },
-                        "required": [
-                            "key",
-                            "managed"
-                        ]
-                    }
-                }
-            },
-            "required": [
-                "items"
-            ]
-        },
-        "sdkName": "listFunctionSecrets",
-        "summary": "List a function's secrets",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "list-functions",
-        "description": "Returns every active (non-deleted) function in the org, newest\nfirst. Each entry carries the deploy status and the gateway URL\nthat the platform's webhook delivery loop posts to. To inspect\nthe source code or deploy errors, use `GET /functions/{id}`.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "listFunctions",
-        "path": "/functions",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "array",
-            "items": {
-                "type": "object",
-                "description": "One row from the function listing.",
-                "properties": {
-                    "id": {
-                        "type": "string",
-                        "format": "uuid",
-                        "description": "Function id, also the script name in the edge runtime."
-                    },
-                    "name": {
-                        "type": "string",
-                        "description": "Slug-style name set on creation. Stable; cannot be changed."
-                    },
-                    "deploy_status": {
-                        "type": "string",
-                        "enum": [
-                            "pending",
-                            "deployed",
-                            "failed"
-                        ],
-                        "description": "Lifecycle state of the latest deploy attempt:\n  * `pending` — deploy in flight; the runtime has not yet\n    confirmed the new bundle is live.\n  * `deployed` — the running edge handler is the latest code.\n  * `failed` — the most recent deploy attempt failed; the\n    previously-live code (if any) is still running. The\n    `deploy_error` field carries the error message.\n"
-                    },
-                    "deployed_at": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "date-time",
-                        "description": "Timestamp of the most recent successful deploy. Null until the first deploy succeeds."
-                    },
-                    "gateway_url": {
-                        "type": "string",
-                        "format": "uri",
-                        "description": "URL the platform's webhook delivery loop posts to in order\nto invoke the function. Reference only; not directly\ncallable from outside.\n"
-                    },
-                    "created_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    },
-                    "updated_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    }
-                },
-                "required": [
-                    "id",
-                    "name",
-                    "deploy_status",
-                    "gateway_url",
-                    "created_at",
-                    "updated_at"
-                ]
-            }
-        },
-        "sdkName": "listFunctions",
-        "summary": "List functions",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "set-function-secret",
-        "description": "Path-keyed companion to `POST /functions/{id}/secrets`.\nIdempotent: returns 201 the first time the key is set, 200 on\nsubsequent updates. Same validation rules and same write-only\nguarantees as the POST verb; the new value lands in the running\nhandler on the next deploy.\n",
-        "hasJsonBody": true,
-        "method": "PUT",
-        "operationId": "setFunctionSecret",
-        "path": "/functions/{id}/secrets/{key}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            },
-            {
-                "description": "Secret key. Must match `^[A-Z_][A-Z0-9_]*$`.",
-                "enum": null,
-                "name": "key",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "description": "Body for PUT /functions/{id}/secrets/{key}. Key comes from the path.",
-            "properties": {
-                "value": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 4096
-                }
-            },
-            "required": [
-                "value"
-            ]
-        },
-        "responseSchema": {
-            "type": "object",
-            "description": "Returned by POST and PUT secret routes.",
-            "properties": {
-                "key": {
-                    "type": "string"
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "updated_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "created": {
-                    "type": "boolean",
-                    "description": "True if this call inserted a new row, false if it updated an existing one."
-                }
-            },
-            "required": [
-                "key",
-                "created_at",
-                "updated_at",
-                "created"
-            ]
-        },
-        "sdkName": "setFunctionSecret",
-        "summary": "Set a secret by key",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "test-function",
-        "description": "Sends a real test email from a Primitive-controlled sender to a\nlocal-part on one of the org's verified inbound domains. By\ndefault the recipient is a synthetic\n`__primitive_function_test+<random>@<domain>` address that\nevery handler's catch-all routing receives identically; pass\n`local_part` to override and exercise routing logic that\nbranches on a specific recipient (the common pattern when one\nfunction handles multiple inboxes like `summarize@` and\n`action@`). The function fires through the normal MX delivery\npath, so reply / send-mail calls from inside the handler\nagainst the inbound's `email.id` work the same as in\nproduction. Returns immediately after the send is queued; the\ninvocation appears on the function's invocations list within a\nfew seconds.\n\nRequires that the function is currently `deployed`. Returns 422\nif the function is in `pending` or `failed` state, or if the\norg has no verified inbound domain to receive the test mail.\nReturns 400 if `local_part` is set to a value that does not\nmatch the local-part character set.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "testFunction",
-        "path": "/functions/{id}/test",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "properties": {
-                "local_part": {
-                    "type": "string",
-                    "description": "Override the synthetic local-part. When set, the\ntest email is sent to `<local_part>@<picked-domain>`\ninstead of the default\n`__primitive_function_test+<random>@<picked-domain>`.\nMust start with an alphanumeric and contain only\nletters, digits, dots, plus signs, hyphens, or\nunderscores; 1-64 characters total.\n",
-                    "minLength": 1,
-                    "maxLength": 64,
-                    "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$",
-                    "example": "summarize"
-                }
-            }
-        },
-        "responseSchema": {
-            "type": "object",
-            "description": "Metadata returned by POST /functions/{id}/test. The send is\nqueued; the actual invocation lands on the function's\ninvocations list a few seconds later as the inbound mail\ntraverses the MX path.\n",
-            "properties": {
-                "inbound_domain": {
-                    "type": "string",
-                    "description": "Verified inbound domain the test email was sent to."
-                },
-                "to": {
-                    "type": "string",
-                    "description": "Synthetic local-part plus inbound_domain. Visible in the org's inbox."
-                },
-                "from": {
-                    "type": "string",
-                    "description": "Primitive-controlled outbound sender used for the test."
-                },
-                "send_id": {
-                    "type": "string",
-                    "description": "Outbound message id from the underlying send. NOT the\ninbound email's id; the inbound id is created when the\nemail arrives via MX and lands on the function's\ninvocations list.\n"
-                },
-                "subject": {
-                    "type": "string",
-                    "description": "Subject placed on the test email so it can be located in the inbox."
-                },
-                "poll_since": {
-                    "type": "string",
-                    "format": "date-time",
-                    "description": "ISO timestamp suitable as a `since` lower bound when\npolling /emails for the inbound's arrival. Captured\nslightly before the send to absorb light clock skew.\n"
-                },
-                "watch_url": {
-                    "type": "string",
-                    "format": "uri",
-                    "description": "Function detail page where invocations show up live."
-                }
-            },
-            "required": [
-                "inbound_domain",
-                "to",
-                "from",
-                "send_id",
-                "subject",
-                "poll_since",
-                "watch_url"
-            ]
-        },
-        "sdkName": "testFunction",
-        "summary": "Send a test invocation",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "update-function",
-        "description": "Replaces the function's source code with the body's `code` and\ntriggers a redeploy. Same size limits as `POST /functions`.\nUse this verb to push secret writes into the running handler:\npassing the same `code` re-runs the deploy and refreshes the\nbinding set with the latest values from the secrets table.\n\nOn a 502 deploy failure, the previously-deployed code stays\nlive; the runtime never serves a half-built bundle. The\n`deploy_error` field on the returned record carries the error\nthat came back from the runtime so you can surface it to users\nwithout polling.\n",
-        "hasJsonBody": true,
-        "method": "PUT",
-        "operationId": "updateFunction",
-        "path": "/functions/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "code": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 1048576,
-                    "description": "New bundled handler. Same rules as CreateFunctionInput.code."
-                },
-                "sourceMap": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 5242880
-                }
-            },
-            "required": [
-                "code"
-            ]
-        },
-        "responseSchema": {
-            "type": "object",
-            "description": "Full function record returned by GET / PUT.",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "format": "uuid"
-                },
-                "name": {
-                    "type": "string"
-                },
-                "code": {
-                    "type": "string",
-                    "description": "The bundled handler source. UTF-8 string up to 1 MiB. The\nsame value most recently passed as `code` to POST or PUT.\n"
-                },
-                "deploy_status": {
-                    "type": "string",
-                    "enum": [
-                        "pending",
-                        "deployed",
-                        "failed"
-                    ],
-                    "description": "Lifecycle state of the latest deploy attempt:\n  * `pending` — deploy in flight; the runtime has not yet\n    confirmed the new bundle is live.\n  * `deployed` — the running edge handler is the latest code.\n  * `failed` — the most recent deploy attempt failed; the\n    previously-live code (if any) is still running. The\n    `deploy_error` field carries the error message.\n"
-                },
-                "deploy_error": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "description": "Error message from the most recent failed deploy, or null\nafter a successful deploy. Surface this to users to explain\na `failed` status without polling.\n"
-                },
-                "deployed_at": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "format": "date-time"
-                },
-                "gateway_url": {
-                    "type": "string",
-                    "format": "uri"
-                },
-                "created_at": {
-                    "type": "string",
-                    "format": "date-time"
-                },
-                "updated_at": {
-                    "type": "string",
-                    "format": "date-time"
-                }
-            },
-            "required": [
-                "id",
-                "name",
-                "code",
-                "deploy_status",
-                "gateway_url",
-                "created_at",
-                "updated_at"
-            ]
-        },
-        "sdkName": "updateFunction",
-        "summary": "Update and redeploy a function",
-        "tag": "Functions",
-        "tagCommand": "functions"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "get-send-permissions",
-        "description": "Returns a flat list of rules describing every recipient the\ncaller may send to. Each rule has a `type`, a kind-specific\npayload, and a human-readable `description`. If any rule\nmatches the recipient, /send-mail will accept the send under\nthe recipient-scope check.\n\nThe endpoint is the answer to \"where can I send\" without\nexposing internal entitlement names. Agents that don't\nrecognize a `type` can still read the `description` prose\nand act on it.\n\nRule kinds, ordered broadest-first so an agent can stop\nscanning at the first match:\n\n  1. `any_recipient` (one entry, only when the org can send\n     anywhere): every other rule below it is redundant.\n  2. `managed_zone` (always emitted, one per Primitive-managed\n     zone): sends to any address at *.primitive.email or\n     *.email.works always succeed; no entitlement required.\n  3. `your_domain` (one per active verified outbound domain\n     owned by the org): sends to that domain are approved.\n  4. `address` (one per address that has authenticated\n     inbound mail to the org, capped at `meta.address_cap`):\n     sends to that exact address are approved.\n\nThe list is informational, not an authorization check.\n/send-mail remains the source of truth on whether an\nindividual send will succeed (it also enforces the\nfrom-address and the `send_mail` entitlement, which are\nnot recipient-scope concerns and are not represented here).\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "getSendPermissions",
-        "path": "/send-permissions",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "array",
-            "items": {
-                "description": "One recipient-scope rule describing a destination the caller\nmay send to. Discriminated on `type`. Each rule carries a\nhuman-prose `description` field intended for display.\n\nRule kinds are stable within an SDK release. A response\ncontaining a `type` value not enumerated in this schema\nmeans the server is running a newer version than the SDK;\nupgrade the SDK to the release that matches the server's\nschema. Strict-parsing SDKs (Go, Python) will raise a\ndecode error in that case rather than silently dropping\nthe unknown rule, since silent drops would let an outbound\nagent reason from an incomplete view of its own permissions.\n",
-                "discriminator": {
-                    "propertyName": "type",
-                    "mapping": {
-                        "any_recipient": "#/components/schemas/SendPermissionAnyRecipient",
-                        "managed_zone": "#/components/schemas/SendPermissionManagedZone",
-                        "your_domain": "#/components/schemas/SendPermissionYourDomain",
-                        "address": "#/components/schemas/SendPermissionAddress"
-                    }
-                },
-                "oneOf": [
-                    {
-                        "type": "object",
-                        "description": "The caller can send to any recipient. When this rule is\npresent, every other rule in the response is redundant.\n",
-                        "properties": {
-                            "type": {
-                                "type": "string",
-                                "enum": [
-                                    "any_recipient"
-                                ]
-                            },
-                            "description": {
-                                "type": "string",
-                                "description": "Human-prose summary of the rule."
-                            }
-                        },
-                        "required": [
-                            "type",
-                            "description"
-                        ]
-                    },
-                    {
-                        "type": "object",
-                        "description": "The caller can send to any address at the named\nPrimitive-managed zone. Always emitted (no entitlement\nrequired) because Primitive owns the zone and every mailbox\nbelongs to a Primitive customer by construction.\n",
-                        "properties": {
-                            "type": {
-                                "type": "string",
-                                "enum": [
-                                    "managed_zone"
-                                ]
-                            },
-                            "zone": {
-                                "type": "string",
-                                "description": "The managed apex domain. Sends are accepted to any\naddress at the apex itself or any subdomain (e.g.\n`alice@primitive.email` and `alice@acme.primitive.email`\nboth match the `primitive.email` zone rule).\n"
-                            },
-                            "description": {
-                                "type": "string",
-                                "description": "Human-prose summary of the rule."
-                            }
-                        },
-                        "required": [
-                            "type",
-                            "zone",
-                            "description"
-                        ]
-                    },
-                    {
-                        "type": "object",
-                        "description": "The caller can send to any address at one of their own\nverified outbound domains. Emitted once per active row in\nthe org's `domains` table.\n",
-                        "properties": {
-                            "type": {
-                                "type": "string",
-                                "enum": [
-                                    "your_domain"
-                                ]
-                            },
-                            "domain": {
-                                "type": "string",
-                                "description": "A verified outbound domain owned by the caller's org."
-                            },
-                            "description": {
-                                "type": "string",
-                                "description": "Human-prose summary of the rule."
-                            }
-                        },
-                        "required": [
-                            "type",
-                            "domain",
-                            "description"
-                        ]
-                    },
-                    {
-                        "type": "object",
-                        "description": "The caller can send to a specific address that has\nauthenticated inbound mail to the org. Emitted once per row\nin the org's `known_send_addresses` table, capped at\n`meta.address_cap`.\n",
-                        "properties": {
-                            "type": {
-                                "type": "string",
-                                "enum": [
-                                    "address"
-                                ]
-                            },
-                            "address": {
-                                "type": "string",
-                                "description": "The bare email address this rule grants sends to."
-                            },
-                            "last_received_at": {
-                                "type": "string",
-                                "format": "date-time",
-                                "description": "Most recent inbound email from this address that\nauthenticated successfully (DMARC pass + DKIM/SPF\nalignment). Updated on each new authenticated receipt.\n"
-                            },
-                            "received_count": {
-                                "type": "integer",
-                                "description": "Total number of authenticated inbound emails from this\naddress. Increments only when `last_received_at` advances.\n"
-                            },
-                            "description": {
-                                "type": "string",
-                                "description": "Human-prose summary of the rule."
-                            }
-                        },
-                        "required": [
-                            "type",
-                            "address",
-                            "last_received_at",
-                            "received_count",
-                            "description"
-                        ]
-                    }
-                ]
-            }
-        },
-        "sdkName": "getSendPermissions",
-        "summary": "List send-permission rules",
-        "tag": "Sending",
-        "tagCommand": "sending"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "get-sent-email",
-        "description": "Returns the full sent-email record by id, including\n`body_text` and `body_html` (omitted from the listing\nendpoint to keep paginated responses small). Use this when\ndiagnosing a specific send, e.g. inspecting the receiver's\nSMTP response on a `bounced` row or pulling the gate\ndenial detail on a `gate_denied` row.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "getSentEmail",
-        "path": "/sent-emails/{id}",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "description": "Full sent-email record, including `body_text` and\n`body_html`. Returned by /sent-emails/{id}.\n",
-            "allOf": [
-                {
-                    "type": "object",
-                    "description": "List-row projection of a sent-email record. Drops\n`body_text` and `body_html` to keep paginated responses\nsmall; fetch /sent-emails/{id} for the full record with\nbodies.\n",
-                    "properties": {
-                        "id": {
-                            "type": "string",
-                            "format": "uuid"
-                        },
-                        "status": {
-                            "type": "string",
-                            "description": "Lifecycle status of a sent_emails row. Possible values:\n\n  - `queued`: pre-call INSERT; the outbound agent has not\n    yet replied.\n  - `submitted_to_agent`: agent accepted; `queue_id` is set.\n  - `agent_failed`: agent rejected; `error_code` and\n    `error_message` carry the reason.\n  - `gate_denied`: a recipient-scope gate denied the send;\n    the agent was never called. The `gates` array carries\n    the denial detail. /send-mail returns 403 in this case\n    so callers see the denial synchronously; /sent-emails\n    additionally records the row for historical lookup,\n    which is when this status appears in a listing.\n  - `unknown`: terminal indeterminate; the on-box log\n    poller couldn't classify the receiver's response.\n  - `delivered` / `bounced` / `deferred` / `wait_timeout`:\n    terminal delivery outcomes (see DeliveryStatus).\n",
-                            "enum": [
-                                "queued",
-                                "submitted_to_agent",
-                                "agent_failed",
-                                "gate_denied",
-                                "unknown",
-                                "delivered",
-                                "bounced",
-                                "deferred",
-                                "wait_timeout"
-                            ]
-                        },
-                        "status_changed_at": {
-                            "type": "string",
-                            "format": "date-time",
-                            "description": "Timestamp of the most recent status transition.\nPolling clients should treat `status='queued'` AND\n`status_changed_at` older than 5 minutes as\n\"stuck-queued\" (the post-tx UPDATE failed and the\nactual delivery state is recoverable from on-box logs\nvia `queue_id` when populated, or `request_id`).\n"
-                        },
-                        "created_at": {
-                            "type": "string",
-                            "format": "date-time"
-                        },
-                        "updated_at": {
-                            "type": "string",
-                            "format": "date-time"
-                        },
-                        "client_idempotency_key": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "Effective idempotency key used for this send. If the\ncaller passed the `Idempotency-Key` header, this is\nthat value; otherwise it's a server-derived hash of\nthe canonical request payload.\n"
-                        },
-                        "content_hash": {
-                            "type": "string",
-                            "description": "Stable hash of the canonical send payload."
-                        },
-                        "from_header": {
-                            "type": "string",
-                            "description": "Raw `From:` header as sent on the wire, including any\ndisplay name (e.g. `\"Acme Support\" <agent@acme.test>`).\n"
-                        },
-                        "from_address": {
-                            "type": "string",
-                            "description": "Bare email address parsed from `from_header`."
-                        },
-                        "to_header": {
-                            "type": "string",
-                            "description": "Raw `To:` header as sent on the wire, including any\ndisplay name.\n"
-                        },
-                        "to_address": {
-                            "type": "string",
-                            "description": "Bare email address parsed from `to_header`."
-                        },
-                        "subject": {
-                            "type": "string"
-                        },
-                        "body_size_bytes": {
-                            "type": "integer",
-                            "description": "Total UTF-8 byte length of `body_text` + `body_html`.\nSurfaced on the list endpoint so callers can see \"this\nrow has a 4MB body\" without fetching it.\n"
-                        },
-                        "content_discarded_at": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "format": "date-time",
-                            "description": "Timestamp at which the bodies were discarded by an\nentitlement-driven retention policy. Null when bodies\nare still present. The detail endpoint returns\nnull-valued `body_text`/`body_html` for discarded rows.\n"
-                        },
-                        "message_id": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "Wire-level Message-ID assigned to the outbound message\n(RFC 5322). Null on rows that never reached signing\n(queued, gate_denied, agent_failed before signing).\n"
-                        },
-                        "in_reply_to": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "Wire-level In-Reply-To header value, when this send\nwas a reply.\n"
-                        },
-                        "email_references": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "Wire-level References header value, when this send\nwas a reply.\n"
-                        },
-                        "in_reply_to_email_id": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "format": "uuid",
-                            "description": "Reference to the inbound `emails.id` that this send\nreplied to, when known. Populated when the caller used\n/emails/{id}/reply or when /send-mail's `in_reply_to`\nmatched a stored inbound message_id in the same org.\n"
-                        },
-                        "queue_id": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "Message identifier assigned by Primitive's outbound\nrelay once the agent accepts the message. Null on\nqueued, gate_denied, and agent_failed rows.\n"
-                        },
-                        "smtp_response_code": {
-                            "type": [
-                                "integer",
-                                "null"
-                            ],
-                            "description": "Receiver's 3-digit SMTP code (e.g. 250, 550, 451).\nPopulated on terminal delivery statuses; may be null\non a deferred where the agent never got an SMTP-level\nresponse (TCP refused, DNS failed, TLS handshake\nfailed). `smtp_response_text` still carries Postfix's\ndescriptive text in those cases.\n"
-                        },
-                        "smtp_response_text": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "Free-form text portion of the receiver's SMTP\nresponse. The most useful debugging signal on a\n`bounced` or `deferred` row.\n"
-                        },
-                        "smtp_enhanced_status_code": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "RFC 3463 enhanced status code (e.g. `5.1.1` for \"Bad\ndestination mailbox address\"). Distinct from\n`smtp_response_code`: the basic 3-digit code is coarse\n(550 = \"permanent failure\"), the enhanced code is\nfiner-grained.\n"
-                        },
-                        "dkim_selector": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "DKIM selector used to sign the outbound message.\nPublic DNS data; useful for diagnosing why a downstream\nverifier rejected the signature.\n"
-                        },
-                        "dkim_domain": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "DKIM signing domain."
-                        },
-                        "error_code": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "Stable public error code on `agent_failed` rows. The\nagent's internal codes are remapped to a stable public\ntaxonomy (see `publicAgentError` in the server) so this\nfield is safe to branch on across agent versions.\n"
-                        },
-                        "error_message": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "Free-form error message accompanying `error_code`."
-                        },
-                        "gates": {
-                            "type": [
-                                "array",
-                                "null"
-                            ],
-                            "items": {
-                                "type": "object",
-                                "properties": {
-                                    "name": {
-                                        "type": "string",
-                                        "enum": [
-                                            "send_to_confirmed_domains",
-                                            "send_to_known_addresses"
-                                        ],
-                                        "description": "Public recipient-scope gate name that denied the send."
-                                    },
-                                    "reason": {
-                                        "type": "string",
-                                        "enum": [
-                                            "domain_not_confirmed",
-                                            "recipient_unauthenticated",
-                                            "recipient_not_known"
-                                        ],
-                                        "description": "Stable machine-readable denial reason."
-                                    },
-                                    "message": {
-                                        "type": "string",
-                                        "description": "Human-readable explanation of the gate denial."
-                                    },
-                                    "subject": {
-                                        "type": "string",
-                                        "description": "Domain or address the gate evaluated."
-                                    },
-                                    "fix": {
-                                        "type": "object",
-                                        "properties": {
-                                            "action": {
-                                                "type": "string",
-                                                "enum": [
-                                                    "confirm_domain",
-                                                    "sender_must_fix_authentication",
-                                                    "wait_for_inbound"
-                                                ],
-                                                "description": "Suggested next action for the caller."
-                                            },
-                                            "subject": {
-                                                "type": "string",
-                                                "description": "Entity the action applies to."
-                                            }
-                                        },
-                                        "required": [
-                                            "action",
-                                            "subject"
-                                        ]
-                                    },
-                                    "docs_url": {
-                                        "type": "string",
-                                        "description": "Public docs URL with more context."
-                                    }
-                                },
-                                "required": [
-                                    "name",
-                                    "reason",
-                                    "message",
-                                    "subject"
-                                ]
-                            },
-                            "description": "Gate-denial detail on `gate_denied` rows. Mirrors the\nsynchronous /send-mail 403 contract so a caller's\nGateDenial handler is the same across live denies and\nhistorical lookups. Null on every other status.\n"
-                        },
-                        "request_id": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "Server-issued request identifier from the original\n/send-mail call. Surfaced as the `X-Request-Id`\nresponse header on the live send and recorded here\nfor support escalation.\n"
-                        }
-                    },
-                    "required": [
-                        "id",
-                        "status",
-                        "status_changed_at",
-                        "created_at",
-                        "updated_at",
-                        "content_hash",
-                        "from_header",
-                        "from_address",
-                        "to_header",
-                        "to_address",
-                        "subject",
-                        "body_size_bytes"
-                    ]
-                },
-                {
-                    "type": "object",
-                    "properties": {
-                        "body_text": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "Plain-text body sent on the wire. Null when the\nsend carried only an HTML body, or when bodies have\nbeen discarded post-send (`content_discarded_at`\nset).\n"
-                        },
-                        "body_html": {
-                            "type": [
-                                "string",
-                                "null"
-                            ],
-                            "description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
-                        }
-                    }
-                }
-            ]
-        },
-        "sdkName": "getSentEmail",
-        "summary": "Get a sent email by id",
-        "tag": "Sending",
-        "tagCommand": "sending"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "list-sent-emails",
-        "description": "Returns a paginated list of OUTBOUND emails the caller's\norg has sent via /send-mail (and /emails/{id}/reply, which\nforwards through /send-mail). Includes every recorded\nattempt, including gate-denied attempts that the agent\nnever called and rows still in `queued` state.\n\nFor inbound mail received at your verified domains, see\n/emails. There is no unified send/receive history endpoint;\nthe two surfaces are intentionally separate because the\nunderlying tables, statuses, and lifecycle differ.\n\nEmail bodies (`body_text`, `body_html`) are NOT included on\nlist rows so a 50-row page can't balloon into a multi-MB\nresponse when sends are near the 5MB body cap. Use\n/sent-emails/{id} to fetch a single row with bodies, or\ncross-reference by `client_idempotency_key` if the caller\nalready has the body locally.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "listSentEmails",
-        "path": "/sent-emails",
-        "pathParams": [],
-        "queryParams": [
-            {
-                "description": "Pagination cursor from a previous response's `meta.cursor` field.\nFormat: `{ISO-datetime}|{id}`\n",
-                "enum": null,
-                "name": "cursor",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Number of results per page",
-                "enum": null,
-                "name": "limit",
-                "required": false,
-                "type": "integer"
-            },
-            {
-                "description": "Filter to rows in this status. Useful for polling\nqueued rows that haven't transitioned, auditing\ngate-denied attempts, or listing only successful\ndeliveries.\n",
-                "enum": null,
-                "name": "status",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter to the row matching a specific server-issued\n`request_id`. The /send-mail response surfaces\n`request_id` on every send; this lookup lets the\ncaller find the historical row for a given live call\nwithout remembering its `id`.\n",
-                "enum": null,
-                "name": "request_id",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter to rows with the given `client_idempotency_key`.\nMultiple rows can share a key (a retry that hit the\nidempotent-replay path returns the same row, but a\nretry with a DIFFERENT canonical payload under the\nsame key is rejected by /send-mail before the row is\nwritten, so duplicates are bounded).\n",
-                "enum": null,
-                "name": "idempotency_key",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Inclusive lower bound on `created_at`.",
-                "enum": null,
-                "name": "date_from",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Inclusive upper bound on `created_at`.",
-                "enum": null,
-                "name": "date_to",
-                "required": false,
-                "type": "string"
-            }
-        ],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "array",
-            "items": {
-                "type": "object",
-                "description": "List-row projection of a sent-email record. Drops\n`body_text` and `body_html` to keep paginated responses\nsmall; fetch /sent-emails/{id} for the full record with\nbodies.\n",
-                "properties": {
-                    "id": {
-                        "type": "string",
-                        "format": "uuid"
-                    },
-                    "status": {
-                        "type": "string",
-                        "description": "Lifecycle status of a sent_emails row. Possible values:\n\n  - `queued`: pre-call INSERT; the outbound agent has not\n    yet replied.\n  - `submitted_to_agent`: agent accepted; `queue_id` is set.\n  - `agent_failed`: agent rejected; `error_code` and\n    `error_message` carry the reason.\n  - `gate_denied`: a recipient-scope gate denied the send;\n    the agent was never called. The `gates` array carries\n    the denial detail. /send-mail returns 403 in this case\n    so callers see the denial synchronously; /sent-emails\n    additionally records the row for historical lookup,\n    which is when this status appears in a listing.\n  - `unknown`: terminal indeterminate; the on-box log\n    poller couldn't classify the receiver's response.\n  - `delivered` / `bounced` / `deferred` / `wait_timeout`:\n    terminal delivery outcomes (see DeliveryStatus).\n",
-                        "enum": [
-                            "queued",
-                            "submitted_to_agent",
-                            "agent_failed",
-                            "gate_denied",
-                            "unknown",
-                            "delivered",
-                            "bounced",
-                            "deferred",
-                            "wait_timeout"
-                        ]
-                    },
-                    "status_changed_at": {
-                        "type": "string",
-                        "format": "date-time",
-                        "description": "Timestamp of the most recent status transition.\nPolling clients should treat `status='queued'` AND\n`status_changed_at` older than 5 minutes as\n\"stuck-queued\" (the post-tx UPDATE failed and the\nactual delivery state is recoverable from on-box logs\nvia `queue_id` when populated, or `request_id`).\n"
-                    },
-                    "created_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    },
-                    "updated_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    },
-                    "client_idempotency_key": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "Effective idempotency key used for this send. If the\ncaller passed the `Idempotency-Key` header, this is\nthat value; otherwise it's a server-derived hash of\nthe canonical request payload.\n"
-                    },
-                    "content_hash": {
-                        "type": "string",
-                        "description": "Stable hash of the canonical send payload."
-                    },
-                    "from_header": {
-                        "type": "string",
-                        "description": "Raw `From:` header as sent on the wire, including any\ndisplay name (e.g. `\"Acme Support\" <agent@acme.test>`).\n"
-                    },
-                    "from_address": {
-                        "type": "string",
-                        "description": "Bare email address parsed from `from_header`."
-                    },
-                    "to_header": {
-                        "type": "string",
-                        "description": "Raw `To:` header as sent on the wire, including any\ndisplay name.\n"
-                    },
-                    "to_address": {
-                        "type": "string",
-                        "description": "Bare email address parsed from `to_header`."
-                    },
-                    "subject": {
-                        "type": "string"
-                    },
-                    "body_size_bytes": {
-                        "type": "integer",
-                        "description": "Total UTF-8 byte length of `body_text` + `body_html`.\nSurfaced on the list endpoint so callers can see \"this\nrow has a 4MB body\" without fetching it.\n"
-                    },
-                    "content_discarded_at": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "date-time",
-                        "description": "Timestamp at which the bodies were discarded by an\nentitlement-driven retention policy. Null when bodies\nare still present. The detail endpoint returns\nnull-valued `body_text`/`body_html` for discarded rows.\n"
-                    },
-                    "message_id": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "Wire-level Message-ID assigned to the outbound message\n(RFC 5322). Null on rows that never reached signing\n(queued, gate_denied, agent_failed before signing).\n"
-                    },
-                    "in_reply_to": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "Wire-level In-Reply-To header value, when this send\nwas a reply.\n"
-                    },
-                    "email_references": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "Wire-level References header value, when this send\nwas a reply.\n"
-                    },
-                    "in_reply_to_email_id": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "format": "uuid",
-                        "description": "Reference to the inbound `emails.id` that this send\nreplied to, when known. Populated when the caller used\n/emails/{id}/reply or when /send-mail's `in_reply_to`\nmatched a stored inbound message_id in the same org.\n"
-                    },
-                    "queue_id": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "Message identifier assigned by Primitive's outbound\nrelay once the agent accepts the message. Null on\nqueued, gate_denied, and agent_failed rows.\n"
-                    },
-                    "smtp_response_code": {
-                        "type": [
-                            "integer",
-                            "null"
-                        ],
-                        "description": "Receiver's 3-digit SMTP code (e.g. 250, 550, 451).\nPopulated on terminal delivery statuses; may be null\non a deferred where the agent never got an SMTP-level\nresponse (TCP refused, DNS failed, TLS handshake\nfailed). `smtp_response_text` still carries Postfix's\ndescriptive text in those cases.\n"
-                    },
-                    "smtp_response_text": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "Free-form text portion of the receiver's SMTP\nresponse. The most useful debugging signal on a\n`bounced` or `deferred` row.\n"
-                    },
-                    "smtp_enhanced_status_code": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "RFC 3463 enhanced status code (e.g. `5.1.1` for \"Bad\ndestination mailbox address\"). Distinct from\n`smtp_response_code`: the basic 3-digit code is coarse\n(550 = \"permanent failure\"), the enhanced code is\nfiner-grained.\n"
-                    },
-                    "dkim_selector": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "DKIM selector used to sign the outbound message.\nPublic DNS data; useful for diagnosing why a downstream\nverifier rejected the signature.\n"
-                    },
-                    "dkim_domain": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "DKIM signing domain."
-                    },
-                    "error_code": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "Stable public error code on `agent_failed` rows. The\nagent's internal codes are remapped to a stable public\ntaxonomy (see `publicAgentError` in the server) so this\nfield is safe to branch on across agent versions.\n"
-                    },
-                    "error_message": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "Free-form error message accompanying `error_code`."
-                    },
-                    "gates": {
-                        "type": [
-                            "array",
-                            "null"
-                        ],
-                        "items": {
-                            "type": "object",
-                            "properties": {
-                                "name": {
-                                    "type": "string",
-                                    "enum": [
-                                        "send_to_confirmed_domains",
-                                        "send_to_known_addresses"
-                                    ],
-                                    "description": "Public recipient-scope gate name that denied the send."
-                                },
-                                "reason": {
-                                    "type": "string",
-                                    "enum": [
-                                        "domain_not_confirmed",
-                                        "recipient_unauthenticated",
-                                        "recipient_not_known"
-                                    ],
-                                    "description": "Stable machine-readable denial reason."
-                                },
-                                "message": {
-                                    "type": "string",
-                                    "description": "Human-readable explanation of the gate denial."
-                                },
-                                "subject": {
-                                    "type": "string",
-                                    "description": "Domain or address the gate evaluated."
-                                },
-                                "fix": {
-                                    "type": "object",
-                                    "properties": {
-                                        "action": {
-                                            "type": "string",
-                                            "enum": [
-                                                "confirm_domain",
-                                                "sender_must_fix_authentication",
-                                                "wait_for_inbound"
-                                            ],
-                                            "description": "Suggested next action for the caller."
-                                        },
-                                        "subject": {
-                                            "type": "string",
-                                            "description": "Entity the action applies to."
-                                        }
-                                    },
-                                    "required": [
-                                        "action",
-                                        "subject"
-                                    ]
-                                },
-                                "docs_url": {
-                                    "type": "string",
-                                    "description": "Public docs URL with more context."
-                                }
-                            },
-                            "required": [
-                                "name",
-                                "reason",
-                                "message",
-                                "subject"
-                            ]
-                        },
-                        "description": "Gate-denial detail on `gate_denied` rows. Mirrors the\nsynchronous /send-mail 403 contract so a caller's\nGateDenial handler is the same across live denies and\nhistorical lookups. Null on every other status.\n"
-                    },
-                    "request_id": {
-                        "type": [
-                            "string",
-                            "null"
-                        ],
-                        "description": "Server-issued request identifier from the original\n/send-mail call. Surfaced as the `X-Request-Id`\nresponse header on the live send and recorded here\nfor support escalation.\n"
-                    }
-                },
-                "required": [
-                    "id",
-                    "status",
-                    "status_changed_at",
-                    "created_at",
-                    "updated_at",
-                    "content_hash",
-                    "from_header",
-                    "from_address",
-                    "to_header",
-                    "to_address",
-                    "subject",
-                    "body_size_bytes"
-                ]
-            }
-        },
-        "sdkName": "listSentEmails",
-        "summary": "List outbound sent emails",
-        "tag": "Sending",
-        "tagCommand": "sending"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "reply-to-email",
-        "description": "Sends an outbound reply to the inbound email identified by `id`.\nThreading headers (`In-Reply-To`, `References`), recipient\nderivation (Reply-To, then From, then bare sender), and the\n`Re:` subject prefix are all derived server-side from the\nstored inbound row. The request body carries only the message\nbody and optional `wait` flag; passing any header or recipient\noverride is rejected by the schema (`additionalProperties:\nfalse`).\n\nForwards through the same gates as `/send-mail`: the response\nstatus, error envelope, and `idempotent_replay` flag mirror\nthe send-mail contract verbatim.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "replyToEmail",
-        "path": "/emails/{id}/reply",
-        "pathParams": [
-            {
-                "description": "Resource UUID",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "description": "Body shape for `/emails/{id}/reply`. Intentionally narrow:\nrecipients (`to`), subject, and threading headers\n(`in_reply_to`, `references`) are derived server-side from\nthe inbound row referenced by the path id and are rejected by\n`additionalProperties` if passed (returns 400).\n\n`from` IS allowed because of legitimate use cases (display-name\naddition, replying from a different verified outbound address,\nmulti-team triage). Send-mail's per-send `canSendFrom` gate\nvalidates the from-domain regardless, so the override carries\nno extra privilege.\n",
-            "properties": {
-                "body_text": {
-                    "type": "string",
-                    "description": "Plain-text reply body. At least one of body_text or body_html is required. The combined UTF-8 byte length of body_text and body_html must be at most 262144 bytes (same cap as send-mail)."
-                },
-                "body_html": {
-                    "type": "string",
-                    "description": "HTML reply body. At least one of body_text or body_html is required."
-                },
-                "from": {
-                    "type": "string",
-                    "minLength": 3,
-                    "maxLength": 998,
-                    "description": "Optional override for the reply's From header. Defaults to\nthe inbound's recipient. Use to add a display name (`\"Acme\nSupport\" <agent@company.com>`) or to reply from a different\nverified outbound address (e.g. multi-team routing where\nsupport@ triages to billing@). The from-domain must be a\nverified outbound domain for your org, same as send-mail.\n"
-                },
-                "wait": {
-                    "type": "boolean",
-                    "description": "When true, wait for the first downstream SMTP delivery outcome before returning, mirroring the send-mail `wait` semantics."
-                }
-            }
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "description": "Persisted sent-email attempt ID."
-                },
-                "status": {
-                    "type": "string",
-                    "description": "Lifecycle status of a sent_emails row. Possible values:\n\n  - `queued`: pre-call INSERT; the outbound agent has not\n    yet replied.\n  - `submitted_to_agent`: agent accepted; `queue_id` is set.\n  - `agent_failed`: agent rejected; `error_code` and\n    `error_message` carry the reason.\n  - `gate_denied`: a recipient-scope gate denied the send;\n    the agent was never called. The `gates` array carries\n    the denial detail. /send-mail returns 403 in this case\n    so callers see the denial synchronously; /sent-emails\n    additionally records the row for historical lookup,\n    which is when this status appears in a listing.\n  - `unknown`: terminal indeterminate; the on-box log\n    poller couldn't classify the receiver's response.\n  - `delivered` / `bounced` / `deferred` / `wait_timeout`:\n    terminal delivery outcomes (see DeliveryStatus).\n",
-                    "enum": [
-                        "queued",
-                        "submitted_to_agent",
-                        "agent_failed",
-                        "gate_denied",
-                        "unknown",
-                        "delivered",
-                        "bounced",
-                        "deferred",
-                        "wait_timeout"
-                    ]
-                },
-                "from": {
-                    "type": "string",
-                    "description": "Bare from-address actually written on the wire. Echoed\non every success branch so callers can confirm what\nwent out, particularly useful for the /emails/{id}/reply\npath where `from` is server-derived from the inbound's\nrecipient when the caller doesn't override.\n\nFor sends where the caller passed a from-header that\nincluded a display name (e.g. `\"Acme Support\" <support@acme.test>`),\nthis field is the parsed bare address (`support@acme.test`).\nThe display name was sent on the wire intact; this field\njust makes the address easy to compare against allowlists.\n"
-                },
-                "queue_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "description": "Message identifier assigned by Primitive's OUTBOUND relay\n(the box that signs your mail and submits it to the\nreceiving MTA). NOT the receiver's queue id.\n\nThe receiver may also report its own queue id in\n`smtp_response_text` (e.g. `\"250 2.0.0 Ok: queued as\n99D111927CDA\"` from a Postfix receiver). Those two ids\nrefer to different mail systems and are NOT comparable.\nTreat `queue_id` as Primitive-internal and the\nreceiver's id as remote-system-internal.\n\nNull on rows that never reached the relay (queued,\ngate_denied, agent_failed before signing).\n"
-                },
-                "accepted": {
-                    "type": "array",
-                    "items": {
-                        "type": "string"
-                    },
-                    "description": "Recipient addresses accepted by the relay."
-                },
-                "rejected": {
-                    "type": "array",
-                    "items": {
-                        "type": "string"
-                    },
-                    "description": "Recipient addresses rejected by the relay."
-                },
-                "client_idempotency_key": {
-                    "type": "string",
-                    "description": "Effective idempotency key used for this send."
-                },
-                "request_id": {
-                    "type": "string",
-                    "description": "Server-issued request identifier for support and tracing."
-                },
-                "content_hash": {
-                    "type": "string",
-                    "description": "Stable hash of the canonical send payload."
-                },
-                "delivery_status": {
-                    "type": "string",
-                    "description": "Narrower enum covering only the four terminal delivery\noutcomes returned to a synchronous `wait: true` send.\n\nOn the SendMailResult shape, `delivery_status` is always\nequal to `status` whenever both are present (i.e. on\nterminal-state replays and live wait=true responses).\nThe two fields exist so callers that want to type-narrow\non \"this is a delivery outcome\" can pattern-match against\nthe four-value enum without handling the broader\nSentEmailStatus value set (which also covers `queued`,\n`submitted_to_agent`, `agent_failed`, `gate_denied`,\n`unknown`).\n\nOn async-mode and pre-terminal responses, `delivery_status`\nis absent and only `status` is populated. Use `status` if\nyou want a single field that's always present.\n",
-                    "enum": [
-                        "delivered",
-                        "bounced",
-                        "deferred",
-                        "wait_timeout"
-                    ]
-                },
-                "smtp_response_code": {
-                    "type": [
-                        "integer",
-                        "null"
-                    ],
-                    "description": "SMTP response code from the first downstream delivery outcome when wait is true."
-                },
-                "smtp_response_text": {
-                    "type": "string",
-                    "description": "SMTP response text from the first downstream delivery outcome when wait is true."
-                },
-                "idempotent_replay": {
-                    "type": "boolean",
-                    "description": "True when the response replays a previously-recorded send\nkeyed by `client_idempotency_key` (same key, same canonical\npayload). False on a fresh send and on gate-denied\nresponses. Lets callers branch on cache state without\ndiffing fields.\n"
-                }
-            },
-            "required": [
-                "id",
-                "status",
-                "from",
-                "queue_id",
-                "accepted",
-                "rejected",
-                "client_idempotency_key",
-                "request_id",
-                "content_hash",
-                "idempotent_replay"
-            ]
-        },
-        "sdkName": "replyToEmail",
-        "summary": "Reply to an inbound email",
-        "tag": "Sending",
-        "tagCommand": "sending"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": true,
-        "command": "send-email",
-        "description": "Sends an outbound email through Primitive's outbound relay. By default\nthe request returns once the relay accepts the message for delivery.\nSet `wait: true` to wait for the first downstream SMTP delivery outcome.\n\n**Host routing.** /send-mail is served by the attachments-\nsupporting host (`https://api.primitive.dev/v1`) so the\nrequest body can carry inline attachments up to ~30 MiB raw.\nThe primary host (`https://www.primitive.dev/api/v1`) also\naccepts /send-mail for attachment-free sends; sends WITH\nattachments to the primary host return 413\n`attachments_unsupported_on_this_endpoint`. The typed SDKs\nroute /send-mail to the attachments host automatically.\n",
-        "hasJsonBody": true,
-        "method": "POST",
-        "operationId": "sendEmail",
-        "path": "/send-mail",
-        "pathParams": [],
-        "queryParams": [],
-        "requestSchema": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-                "from": {
-                    "type": "string",
-                    "minLength": 3,
-                    "maxLength": 998,
-                    "description": "RFC 5322 From header. The sender domain must be a verified outbound domain for your organization."
-                },
-                "to": {
-                    "type": "string",
-                    "minLength": 3,
-                    "maxLength": 320,
-                    "description": "Recipient address. Recipient eligibility depends on your account's outbound entitlements."
-                },
-                "subject": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 998,
-                    "description": "Subject line for the outbound message"
-                },
-                "body_text": {
-                    "type": "string",
-                    "description": "Plain-text message body. At least one of body_text or body_html is required. The combined UTF-8 byte length of body_text and body_html must be at most 262144 bytes."
-                },
-                "body_html": {
-                    "type": "string",
-                    "description": "HTML message body. At least one of body_text or body_html is required. The combined UTF-8 byte length of body_text and body_html must be at most 262144 bytes."
-                },
-                "in_reply_to": {
-                    "type": "string",
-                    "minLength": 1,
-                    "maxLength": 998,
-                    "pattern": "^[^\\x00-\\x1F\\x7F]+$",
-                    "description": "Message-ID of the direct parent email when sending a threaded reply."
-                },
-                "references": {
-                    "type": "array",
-                    "maxItems": 100,
-                    "description": "Full ordered message-id chain for the thread.",
-                    "items": {
-                        "type": "string",
-                        "minLength": 1,
-                        "maxLength": 998,
-                        "pattern": "^[^\\x00-\\x1F\\x7F]+$"
-                    }
-                },
-                "wait": {
-                    "type": "boolean",
-                    "description": "When true, wait for the first downstream SMTP delivery outcome before returning."
-                },
-                "wait_timeout_ms": {
-                    "type": "integer",
-                    "minimum": 1000,
-                    "maximum": 30000,
-                    "description": "Maximum time to wait for a delivery outcome when wait is true. Defaults to 30000."
-                }
-            },
-            "required": [
-                "from",
-                "to",
-                "subject"
-            ]
-        },
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "id": {
-                    "type": "string",
-                    "description": "Persisted sent-email attempt ID."
-                },
-                "status": {
-                    "type": "string",
-                    "description": "Lifecycle status of a sent_emails row. Possible values:\n\n  - `queued`: pre-call INSERT; the outbound agent has not\n    yet replied.\n  - `submitted_to_agent`: agent accepted; `queue_id` is set.\n  - `agent_failed`: agent rejected; `error_code` and\n    `error_message` carry the reason.\n  - `gate_denied`: a recipient-scope gate denied the send;\n    the agent was never called. The `gates` array carries\n    the denial detail. /send-mail returns 403 in this case\n    so callers see the denial synchronously; /sent-emails\n    additionally records the row for historical lookup,\n    which is when this status appears in a listing.\n  - `unknown`: terminal indeterminate; the on-box log\n    poller couldn't classify the receiver's response.\n  - `delivered` / `bounced` / `deferred` / `wait_timeout`:\n    terminal delivery outcomes (see DeliveryStatus).\n",
-                    "enum": [
-                        "queued",
-                        "submitted_to_agent",
-                        "agent_failed",
-                        "gate_denied",
-                        "unknown",
-                        "delivered",
-                        "bounced",
-                        "deferred",
-                        "wait_timeout"
-                    ]
-                },
-                "from": {
-                    "type": "string",
-                    "description": "Bare from-address actually written on the wire. Echoed\non every success branch so callers can confirm what\nwent out, particularly useful for the /emails/{id}/reply\npath where `from` is server-derived from the inbound's\nrecipient when the caller doesn't override.\n\nFor sends where the caller passed a from-header that\nincluded a display name (e.g. `\"Acme Support\" <support@acme.test>`),\nthis field is the parsed bare address (`support@acme.test`).\nThe display name was sent on the wire intact; this field\njust makes the address easy to compare against allowlists.\n"
-                },
-                "queue_id": {
-                    "type": [
-                        "string",
-                        "null"
-                    ],
-                    "description": "Message identifier assigned by Primitive's OUTBOUND relay\n(the box that signs your mail and submits it to the\nreceiving MTA). NOT the receiver's queue id.\n\nThe receiver may also report its own queue id in\n`smtp_response_text` (e.g. `\"250 2.0.0 Ok: queued as\n99D111927CDA\"` from a Postfix receiver). Those two ids\nrefer to different mail systems and are NOT comparable.\nTreat `queue_id` as Primitive-internal and the\nreceiver's id as remote-system-internal.\n\nNull on rows that never reached the relay (queued,\ngate_denied, agent_failed before signing).\n"
-                },
-                "accepted": {
-                    "type": "array",
-                    "items": {
-                        "type": "string"
-                    },
-                    "description": "Recipient addresses accepted by the relay."
-                },
-                "rejected": {
-                    "type": "array",
-                    "items": {
-                        "type": "string"
-                    },
-                    "description": "Recipient addresses rejected by the relay."
-                },
-                "client_idempotency_key": {
-                    "type": "string",
-                    "description": "Effective idempotency key used for this send."
-                },
-                "request_id": {
-                    "type": "string",
-                    "description": "Server-issued request identifier for support and tracing."
-                },
-                "content_hash": {
-                    "type": "string",
-                    "description": "Stable hash of the canonical send payload."
-                },
-                "delivery_status": {
-                    "type": "string",
-                    "description": "Narrower enum covering only the four terminal delivery\noutcomes returned to a synchronous `wait: true` send.\n\nOn the SendMailResult shape, `delivery_status` is always\nequal to `status` whenever both are present (i.e. on\nterminal-state replays and live wait=true responses).\nThe two fields exist so callers that want to type-narrow\non \"this is a delivery outcome\" can pattern-match against\nthe four-value enum without handling the broader\nSentEmailStatus value set (which also covers `queued`,\n`submitted_to_agent`, `agent_failed`, `gate_denied`,\n`unknown`).\n\nOn async-mode and pre-terminal responses, `delivery_status`\nis absent and only `status` is populated. Use `status` if\nyou want a single field that's always present.\n",
-                    "enum": [
-                        "delivered",
-                        "bounced",
-                        "deferred",
-                        "wait_timeout"
-                    ]
-                },
-                "smtp_response_code": {
-                    "type": [
-                        "integer",
-                        "null"
-                    ],
-                    "description": "SMTP response code from the first downstream delivery outcome when wait is true."
-                },
-                "smtp_response_text": {
-                    "type": "string",
-                    "description": "SMTP response text from the first downstream delivery outcome when wait is true."
-                },
-                "idempotent_replay": {
-                    "type": "boolean",
-                    "description": "True when the response replays a previously-recorded send\nkeyed by `client_idempotency_key` (same key, same canonical\npayload). False on a fresh send and on gate-denied\nresponses. Lets callers branch on cache state without\ndiffing fields.\n"
-                }
-            },
-            "required": [
-                "id",
-                "status",
-                "from",
-                "queue_id",
-                "accepted",
-                "rejected",
-                "client_idempotency_key",
-                "request_id",
-                "content_hash",
-                "idempotent_replay"
-            ]
-        },
-        "sdkName": "sendEmail",
-        "summary": "Send outbound email",
-        "tag": "Sending",
-        "tagCommand": "sending"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "list-deliveries",
-        "description": "Returns a paginated list of webhook delivery attempts. Each delivery\nincludes a nested `email` object with sender, recipient, and subject.\n",
-        "hasJsonBody": false,
-        "method": "GET",
-        "operationId": "listDeliveries",
-        "path": "/webhooks/deliveries",
-        "pathParams": [],
-        "queryParams": [
-            {
-                "description": "Pagination cursor from a previous response's `meta.cursor` field.\nFormat: `{ISO-datetime}|{id}`\n",
-                "enum": null,
-                "name": "cursor",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Number of results per page",
-                "enum": null,
-                "name": "limit",
-                "required": false,
-                "type": "integer"
-            },
-            {
-                "description": "Filter by email ID",
-                "enum": null,
-                "name": "email_id",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter by delivery status",
-                "enum": [
-                    "pending",
-                    "delivered",
-                    "header_confirmed",
-                    "failed"
-                ],
-                "name": "status",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter deliveries created on or after this timestamp",
-                "enum": null,
-                "name": "date_from",
-                "required": false,
-                "type": "string"
-            },
-            {
-                "description": "Filter deliveries created on or before this timestamp",
-                "enum": null,
-                "name": "date_to",
-                "required": false,
-                "type": "string"
-            }
-        ],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "array",
-            "items": {
-                "type": "object",
-                "properties": {
-                    "id": {
-                        "type": "string",
-                        "description": "Delivery ID (numeric string)"
-                    },
-                    "email_id": {
-                        "type": "string",
-                        "format": "uuid"
-                    },
-                    "org_id": {
-                        "type": "string",
-                        "format": "uuid"
-                    },
-                    "endpoint_id": {
-                        "type": "string",
-                        "format": "uuid"
-                    },
-                    "endpoint_url": {
-                        "type": "string"
-                    },
-                    "status": {
-                        "type": "string",
-                        "enum": [
-                            "pending",
-                            "delivered",
-                            "header_confirmed",
-                            "failed"
-                        ]
-                    },
-                    "attempt_count": {
-                        "type": "integer"
-                    },
-                    "duration_ms": {
-                        "type": [
-                            "integer",
-                            "null"
-                        ]
-                    },
-                    "last_error": {
-                        "type": [
-                            "string",
-                            "null"
-                        ]
-                    },
-                    "created_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    },
-                    "updated_at": {
-                        "type": "string",
-                        "format": "date-time"
-                    },
-                    "email": {
-                        "type": [
-                            "object",
-                            "null"
-                        ],
-                        "properties": {
-                            "sender": {
-                                "type": "string"
-                            },
-                            "recipient": {
-                                "type": "string"
-                            },
-                            "subject": {
-                                "type": [
-                                    "string",
-                                    "null"
-                                ]
-                            }
-                        },
-                        "required": [
-                            "sender",
-                            "recipient"
-                        ]
-                    }
-                },
-                "required": [
-                    "id",
-                    "email_id",
-                    "org_id",
-                    "endpoint_id",
-                    "endpoint_url",
-                    "status",
-                    "attempt_count",
-                    "created_at",
-                    "updated_at"
-                ]
-            }
-        },
-        "sdkName": "listDeliveries",
-        "summary": "List webhook deliveries",
-        "tag": "Webhook Deliveries",
-        "tagCommand": "webhook-deliveries"
-    },
-    {
-        "binaryResponse": false,
-        "bodyRequired": false,
-        "command": "replay-delivery",
-        "description": "Re-sends the stored webhook payload from a previous delivery attempt.\nIf the original endpoint is still active, it is targeted. If the\noriginal endpoint was deleted, the oldest active endpoint is used.\nDeactivated endpoints cannot be replayed to. Rate limited per-org,\nsharing an org-wide budget with email replays.\n",
-        "hasJsonBody": false,
-        "method": "POST",
-        "operationId": "replayDelivery",
-        "path": "/webhooks/deliveries/{id}/replay",
-        "pathParams": [
-            {
-                "description": "Delivery ID (numeric)",
-                "enum": null,
-                "name": "id",
-                "required": true,
-                "type": "string"
-            }
-        ],
-        "queryParams": [],
-        "requestSchema": null,
-        "responseSchema": {
-            "type": "object",
-            "properties": {
-                "delivered": {
-                    "type": "integer",
-                    "description": "Number of successful deliveries"
-                },
-                "failed": {
-                    "type": "integer",
-                    "description": "Number of failed deliveries"
-                }
-            },
-            "required": [
-                "delivered",
-                "failed"
-            ]
-        },
-        "sdkName": "replayDelivery",
-        "summary": "Replay a webhook delivery",
-        "tag": "Webhook Deliveries",
-        "tagCommand": "webhook-deliveries"
-    }
-];