@primitivedotdev/sdk 1.23.0 → 1.24.0

package/dist/{operations.generated-COaLBzbH.js → operations.generated-CG4ftbsn.js}

@@ -1240,6 +1240,100 @@ const openapiDocument = {
 				}
 			}
 		},
+		"/emails/{id}/attachments/{part_index}": {
+			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }, { "$ref": "#/components/parameters/AttachmentPartIndex" }],
+			"get": {
+				"operationId": "downloadEmailAttachmentPart",
+				"summary": "Download one inbound email attachment",
+				"description": "Pending service release. This contract does not establish live availability.\nDownloads the original bytes of one ordinary email attachment, selected by\nits metadata `part_index`, not its position in an attachments array. Refresh\nthe email detail after `attachment_changed` before choosing an index again.\nUses bearer authentication only; signed raw-email download tokens are not accepted.\nA paired-agent credential may read only a message addressed to its claimed address.\nFunction credentials are denied. Other bearer credentials retain their\nexisting email access boundaries. This endpoint serves email bytes only.\n",
+				"tags": ["Emails"],
+				"security": [{ "BearerAuth": [] }],
+				"responses": {
+					"200": { "$ref": "#/components/responses/AttachmentPart" },
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": {
+						"description": "Missing or inaccessible message, or missing attachment part",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"409": {
+						"description": "attachment_changed; refresh email detail before selecting a part again",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"410": {
+						"description": "content_discarded; the original content is no longer available",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"413": {
+						"description": "attachment_limit_exceeded; the attachment exceeds download limits",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"502": {
+						"description": "attachment_integrity_failed; stored content failed integrity validation",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"503": {
+						"description": "attachment_not_ready or attachment_storage_unavailable; retry after the indicated delay",
+						"headers": { "Retry-After": {
+							"description": "Delay in seconds before retrying this read",
+							"schema": {
+								"type": "integer",
+								"minimum": 0
+							}
+						} },
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					}
+				}
+			}
+		},
+		"/sent-emails/{id}/attachments/{part_index}": {
+			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }, { "$ref": "#/components/parameters/AttachmentPartIndex" }],
+			"get": {
+				"operationId": "downloadSentAttachmentPart",
+				"summary": "Download one sent email attachment",
+				"description": "Pending service release. This contract does not establish live availability.\nDownloads the original bytes of one ordinary email attachment, selected by\nits metadata `part_index`, not its position in an attachments array. Refresh\nthe email detail after `attachment_changed` before choosing an index again.\nUses bearer authentication only; signed raw-email download tokens are not accepted.\nA paired-agent credential may read only mail sent from its claimed address.\nReceiving a copy does not authorize downloading another sender's sent content.\nFunction credentials are denied. Other bearer credentials retain their\nexisting email access boundaries. This endpoint serves email bytes only.\n",
+				"tags": ["Sending"],
+				"security": [{ "BearerAuth": [] }],
+				"responses": {
+					"200": { "$ref": "#/components/responses/AttachmentPart" },
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": {
+						"description": "Missing or inaccessible message, or missing attachment part",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"409": {
+						"description": "attachment_changed; refresh email detail before selecting a part again",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"410": {
+						"description": "content_discarded; the original content is no longer available",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"413": {
+						"description": "attachment_limit_exceeded; the attachment exceeds download limits",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"502": {
+						"description": "attachment_integrity_failed; stored content failed integrity validation",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"503": {
+						"description": "attachment_not_ready or attachment_storage_unavailable; retry after the indicated delay",
+						"headers": { "Retry-After": {
+							"description": "Delay in seconds before retrying this read",
+							"schema": {
+								"type": "integer",
+								"minimum": 0
+							}
+						} },
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					}
+				}
+			}
+		},
 		"/emails/{id}/reply": {
 			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }],
 			"post": {
@@ -3923,6 +4017,18 @@ const openapiDocument = {
 			}
 		},
 		"parameters": {
+			"AttachmentPartIndex": {
+				"name": "part_index",
+				"in": "path",
+				"required": true,
+				"description": "The attachment metadata `part_index`, not its offset in the attachments array",
+				"schema": {
+					"type": "integer",
+					"format": "int32",
+					"minimum": 0,
+					"maximum": 2147483647
+				}
+			},
 			"ResourceId": {
 				"name": "id",
 				"in": "path",
@@ -3993,6 +4099,33 @@ const openapiDocument = {
 			}
 		},
 		"responses": {
+			"AttachmentPart": {
+				"description": "Original attachment bytes; never a JSON envelope or a base64 string",
+				"content": { "application/octet-stream": { "schema": {
+					"type": "string",
+					"format": "binary"
+				} } },
+				"headers": {
+					"X-Content-SHA256": {
+						"description": "SHA-256 hex digest of the original bytes",
+						"schema": {
+							"type": "string",
+							"pattern": "^[a-fA-F0-9]{64}$"
+						}
+					},
+					"Content-Disposition": {
+						"description": "Safe attachment disposition with a sanitized filename",
+						"schema": { "type": "string" }
+					},
+					"Cache-Control": {
+						"description": "Attachment responses are private and must not be stored by caches",
+						"schema": {
+							"type": "string",
+							"example": "private, no-store"
+						}
+					}
+				}
+			},
 			"PullContentGone": {
 				"description": "Queued content is no longer available",
 				"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
@@ -5011,6 +5144,12 @@ const openapiDocument = {
 									"conflict",
 									"mx_conflict",
 									"not_scheduled",
+									"attachment_changed",
+									"content_discarded",
+									"attachment_limit_exceeded",
+									"attachment_integrity_failed",
+									"attachment_not_ready",
+									"attachment_storage_unavailable",
 									"outbound_disabled",
 									"cannot_send_from_domain",
 									"recipient_not_allowed",
@@ -7820,6 +7959,53 @@ const openapiDocument = {
 						"body_html": {
 							"type": ["string", "null"],
 							"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+						},
+						"attachments": {
+							"type": "array",
+							"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+							"items": {
+								"type": "object",
+								"description": "Metadata for one submitted inline attachment.",
+								"additionalProperties": true,
+								"properties": {
+									"filename": { "type": ["string", "null"] },
+									"content_type": { "type": "string" },
+									"size_bytes": {
+										"type": "integer",
+										"minimum": 0,
+										"maximum": 9007199254740991
+									},
+									"sha256": { "type": "string" },
+									"part_index": {
+										"type": "integer",
+										"minimum": 0,
+										"maximum": 9007199254740991
+									},
+									"tar_path": { "type": "string" }
+								},
+								"required": [
+									"filename",
+									"content_type",
+									"size_bytes",
+									"sha256",
+									"part_index",
+									"tar_path"
+								]
+							}
+						},
+						"attachments_size_bytes": {
+							"type": "integer",
+							"minimum": 0,
+							"maximum": 9007199254740991,
+							"description": "Original decoded attachment byte total accepted for this send, not the compressed archive size. It may exceed the retained inline total after offloading."
+						},
+						"attachments_complete": {
+							"type": "boolean",
+							"description": "Whether attachments enumerates the complete original submitted attachment set, including zero-byte and inline CID parts. True requires no submitted payload-reference, offloaded, or visibility-filtered attachment to be omitted, retained content, and a published archive when the attachment inventory is nonempty. False or absent provides no completeness proof, including for legacy or discarded content. This field grants no download access and has no interaction semantics."
+						},
+						"attachments_download_available": {
+							"type": "boolean",
+							"description": "Whether an inline attachment archive has been successfully retained and is available for download. Download authorization is checked separately; address-bound agent connection keys cannot download archives."
 						}
 					}
 				}]
@@ -13609,6 +13795,38 @@ const operationManifest = [
 		"tag": "Emails",
 		"tagCommand": "emails"
 	},
+	{
+		"binaryResponse": true,
+		"bodyRequired": false,
+		"command": "download-email-attachment-part",
+		"description": "Pending service release. This contract does not establish live availability.\nDownloads the original bytes of one ordinary email attachment, selected by\nits metadata `part_index`, not its position in an attachments array. Refresh\nthe email detail after `attachment_changed` before choosing an index again.\nUses bearer authentication only; signed raw-email download tokens are not accepted.\nA paired-agent credential may read only a message addressed to its claimed address.\nFunction credentials are denied. Other bearer credentials retain their\nexisting email access boundaries. This endpoint serves email bytes only.\n",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "downloadEmailAttachmentPart",
+		"path": "/emails/{id}/attachments/{part_index}",
+		"pathParams": [{
+			"description": "Resource UUID",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}, {
+			"description": "The attachment metadata `part_index`, not its offset in the attachments array",
+			"enum": null,
+			"maximum": 2147483647,
+			"minimum": 0,
+			"name": "part_index",
+			"required": true,
+			"type": "integer"
+		}],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": null,
+		"sdkName": "downloadEmailAttachmentPart",
+		"summary": "Download one inbound email attachment",
+		"tag": "Emails",
+		"tagCommand": "emails"
+	},
 	{
 		"binaryResponse": true,
 		"bodyRequired": false,
@@ -21095,6 +21313,53 @@ const operationManifest = [
 					"body_html": {
 						"type": ["string", "null"],
 						"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+					},
+					"attachments": {
+						"type": "array",
+						"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+						"items": {
+							"type": "object",
+							"description": "Metadata for one submitted inline attachment.",
+							"additionalProperties": true,
+							"properties": {
+								"filename": { "type": ["string", "null"] },
+								"content_type": { "type": "string" },
+								"size_bytes": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"sha256": { "type": "string" },
+								"part_index": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"tar_path": { "type": "string" }
+							},
+							"required": [
+								"filename",
+								"content_type",
+								"size_bytes",
+								"sha256",
+								"part_index",
+								"tar_path"
+							]
+						}
+					},
+					"attachments_size_bytes": {
+						"type": "integer",
+						"minimum": 0,
+						"maximum": 9007199254740991,
+						"description": "Original decoded attachment byte total accepted for this send, not the compressed archive size. It may exceed the retained inline total after offloading."
+					},
+					"attachments_complete": {
+						"type": "boolean",
+						"description": "Whether attachments enumerates the complete original submitted attachment set, including zero-byte and inline CID parts. True requires no submitted payload-reference, offloaded, or visibility-filtered attachment to be omitted, retained content, and a published archive when the attachment inventory is nonempty. False or absent provides no completeness proof, including for legacy or discarded content. This field grants no download access and has no interaction semantics."
+					},
+					"attachments_download_available": {
+						"type": "boolean",
+						"description": "Whether an inline attachment archive has been successfully retained and is available for download. Download authorization is checked separately; address-bound agent connection keys cannot download archives."
 					}
 				}
 			}]
@@ -21104,6 +21369,38 @@ const operationManifest = [
 		"tag": "Sending",
 		"tagCommand": "sending"
 	},
+	{
+		"binaryResponse": true,
+		"bodyRequired": false,
+		"command": "download-sent-attachment-part",
+		"description": "Pending service release. This contract does not establish live availability.\nDownloads the original bytes of one ordinary email attachment, selected by\nits metadata `part_index`, not its position in an attachments array. Refresh\nthe email detail after `attachment_changed` before choosing an index again.\nUses bearer authentication only; signed raw-email download tokens are not accepted.\nA paired-agent credential may read only mail sent from its claimed address.\nReceiving a copy does not authorize downloading another sender's sent content.\nFunction credentials are denied. Other bearer credentials retain their\nexisting email access boundaries. This endpoint serves email bytes only.\n",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "downloadSentAttachmentPart",
+		"path": "/sent-emails/{id}/attachments/{part_index}",
+		"pathParams": [{
+			"description": "Resource UUID",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}, {
+			"description": "The attachment metadata `part_index`, not its offset in the attachments array",
+			"enum": null,
+			"maximum": 2147483647,
+			"minimum": 0,
+			"name": "part_index",
+			"required": true,
+			"type": "integer"
+		}],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": null,
+		"sdkName": "downloadSentAttachmentPart",
+		"summary": "Download one sent email attachment",
+		"tag": "Sending",
+		"tagCommand": "sending"
+	},
 	{
 		"binaryResponse": false,
 		"bodyRequired": false,
@@ -21572,6 +21869,53 @@ const operationManifest = [
 					"body_html": {
 						"type": ["string", "null"],
 						"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+					},
+					"attachments": {
+						"type": "array",
+						"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+						"items": {
+							"type": "object",
+							"description": "Metadata for one submitted inline attachment.",
+							"additionalProperties": true,
+							"properties": {
+								"filename": { "type": ["string", "null"] },
+								"content_type": { "type": "string" },
+								"size_bytes": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"sha256": { "type": "string" },
+								"part_index": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"tar_path": { "type": "string" }
+							},
+							"required": [
+								"filename",
+								"content_type",
+								"size_bytes",
+								"sha256",
+								"part_index",
+								"tar_path"
+							]
+						}
+					},
+					"attachments_size_bytes": {
+						"type": "integer",
+						"minimum": 0,
+						"maximum": 9007199254740991,
+						"description": "Original decoded attachment byte total accepted for this send, not the compressed archive size. It may exceed the retained inline total after offloading."
+					},
+					"attachments_complete": {
+						"type": "boolean",
+						"description": "Whether attachments enumerates the complete original submitted attachment set, including zero-byte and inline CID parts. True requires no submitted payload-reference, offloaded, or visibility-filtered attachment to be omitted, retained content, and a published archive when the attachment inventory is nonempty. False or absent provides no completeness proof, including for legacy or discarded content. This field grants no download access and has no interaction semantics."
+					},
+					"attachments_download_available": {
+						"type": "boolean",
+						"description": "Whether an inline attachment archive has been successfully retained and is available for download. Download authorization is checked separately; address-bound agent connection keys cannot download archives."
 					}
 				}
 			}]
@@ -22296,6 +22640,53 @@ const operationManifest = [
 					"body_html": {
 						"type": ["string", "null"],
 						"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+					},
+					"attachments": {
+						"type": "array",
+						"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+						"items": {
+							"type": "object",
+							"description": "Metadata for one submitted inline attachment.",
+							"additionalProperties": true,
+							"properties": {
+								"filename": { "type": ["string", "null"] },
+								"content_type": { "type": "string" },
+								"size_bytes": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"sha256": { "type": "string" },
+								"part_index": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"tar_path": { "type": "string" }
+							},
+							"required": [
+								"filename",
+								"content_type",
+								"size_bytes",
+								"sha256",
+								"part_index",
+								"tar_path"
+							]
+						}
+					},
+					"attachments_size_bytes": {
+						"type": "integer",
+						"minimum": 0,
+						"maximum": 9007199254740991,
+						"description": "Original decoded attachment byte total accepted for this send, not the compressed archive size. It may exceed the retained inline total after offloading."
+					},
+					"attachments_complete": {
+						"type": "boolean",
+						"description": "Whether attachments enumerates the complete original submitted attachment set, including zero-byte and inline CID parts. True requires no submitted payload-reference, offloaded, or visibility-filtered attachment to be omitted, retained content, and a published archive when the attachment inventory is nonempty. False or absent provides no completeness proof, including for legacy or discarded content. This field grants no download access and has no interaction semantics."
+					},
+					"attachments_download_available": {
+						"type": "boolean",
+						"description": "Whether an inline attachment archive has been successfully retained and is available for download. Download authorization is checked separately; address-bound agent connection keys cannot download archives."
 					}
 				}
 			}]

package/dist/parser/address.d.ts

@@ -1,2 +1,2 @@
-import { a as parseFromHeader, i as ValidatedAddress, n as ParseFromHeaderResult, o as parseFromHeaderLoose, r as ParsedAddress, t as ParseFromHeaderFailureReason } from "../address-parser-CJqzx713.js";
+import { a as parseFromHeader, i as ValidatedAddress, n as ParseFromHeaderResult, o as parseFromHeaderLoose, r as ParsedAddress, t as ParseFromHeaderFailureReason } from "../address-parser-B7L4E0zP.js";
 export { type ParseFromHeaderFailureReason, type ParseFromHeaderResult, type ParsedAddress, type ValidatedAddress, parseFromHeader, parseFromHeaderLoose };

package/dist/parser/index.d.ts

@@ -1,5 +1,5 @@
 import { I as WebhookAttachment, l as EmailAddress, w as ParsedDataComplete } from "../types-DcXtFARL.js";
-import { a as parseFromHeader, i as ValidatedAddress, n as ParseFromHeaderResult, o as parseFromHeaderLoose, r as ParsedAddress, t as ParseFromHeaderFailureReason } from "../address-parser-CJqzx713.js";
+import { a as parseFromHeader, i as ValidatedAddress, n as ParseFromHeaderResult, o as parseFromHeaderLoose, r as ParsedAddress, t as ParseFromHeaderFailureReason } from "../address-parser-B7L4E0zP.js";
 
 //#region src/parser/attachment-parser.d.ts
 interface ParsedAttachment {

package/dist/payloads/index.js

@@ -1,2 +1,2 @@
-import { a as pushFile, i as pushBytes, n as fetchManifest, r as pullFile, t as encodeManifest } from "../payloads-CQtSsUT6.js";
+import { a as pushFile, i as pushBytes, n as fetchManifest, r as pullFile, t as encodeManifest } from "../payloads-BfJAtqW9.js";
 export { encodeManifest, fetchManifest, pullFile, pushBytes, pushFile };

package/dist/{payloads-CQtSsUT6.js → payloads-BfJAtqW9.js}

@@ -33,7 +33,9 @@ const MANIFEST_VERSION = 1;
 const CHUNK_KDF_INFO = "payloads-chunk";
 const OBJECT_ID_BYTES = 16;
 const CEK_BYTES = 32;
-const subtle = globalThis.crypto.subtle;
+function subtle() {
+	return globalThis.crypto.subtle;
+}
 const textEncoder = new TextEncoder();
 function randomBytes(length) {
 	const out = new Uint8Array(length);
@@ -53,7 +55,7 @@ function fromHex(hex) {
 	return out;
 }
 async function contentHash(bytes) {
-	return new Uint8Array(await subtle.digest("SHA-256", bytes));
+	return new Uint8Array(await subtle().digest("SHA-256", bytes));
 }
 async function contentHashHex(bytes) {
 	return toHex(await contentHash(bytes));
@@ -77,9 +79,9 @@ async function merkleRoot(leafHashesHex) {
 	return toHex(level[0]);
 }
 async function deriveChunkKey(cek, index) {
-	const baseKey = await subtle.importKey("raw", cek, "HKDF", false, ["deriveKey"]);
+	const baseKey = await subtle().importKey("raw", cek, "HKDF", false, ["deriveKey"]);
 	const info = textEncoder.encode(`${CHUNK_KDF_INFO}:${index}`);
-	return subtle.deriveKey({
+	return subtle().deriveKey({
 		name: "HKDF",
 		hash: "SHA-256",
 		salt: new Uint8Array(32),
@@ -102,7 +104,7 @@ function chunkAad(objectId, index) {
 }
 async function encryptChunk(cek, objectId, index, plaintext) {
 	const key = await deriveChunkKey(cek, index);
-	const ct = await subtle.encrypt({
+	const ct = await subtle().encrypt({
 		name: "AES-GCM",
 		iv: chunkNonce(index),
 		additionalData: chunkAad(objectId, index)
@@ -111,7 +113,7 @@ async function encryptChunk(cek, objectId, index, plaintext) {
 }
 async function decryptChunk(cek, objectId, index, ciphertext) {
 	const key = await deriveChunkKey(cek, index);
-	const pt = await subtle.decrypt({
+	const pt = await subtle().decrypt({
 		name: "AES-GCM",
 		iv: chunkNonce(index),
 		additionalData: chunkAad(objectId, index)