agentmail 0.5.20 → 0.5.21

package/dist/esm/api/resources/apiKeys/types/CreateBrowserEnrollmentRequest.d.mts

@@ -0,0 +1,9 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * Attach a browser enrollment intent to one pending AgentID authorization
+ * transaction. The inbox is selected by the trusted path parameter, not an
+ * AgentID `login_hint`.
+ */
+export interface CreateBrowserEnrollmentRequest {
+    transactionJti: AgentMail.BrowserEnrollmentTransactionJti;
+}

package/dist/esm/api/resources/apiKeys/types/CreateBrowserEnrollmentRequest.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/apiKeys/types/ListBrowserConsentsResponse.d.mts

@@ -0,0 +1,7 @@
+import type * as AgentMail from "../../../index.mjs";
+export interface ListBrowserConsentsResponse {
+    count: AgentMail.Count;
+    limit: AgentMail.BrowserAuthorizationListLimit;
+    nextPageToken?: AgentMail.PageToken;
+    consents: AgentMail.BrowserConsent[];
+}

package/dist/esm/api/resources/apiKeys/types/ListBrowserConsentsResponse.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/apiKeys/types/ListBrowserCredentialsResponse.d.mts

@@ -0,0 +1,7 @@
+import type * as AgentMail from "../../../index.mjs";
+export interface ListBrowserCredentialsResponse {
+    count: AgentMail.Count;
+    limit: AgentMail.BrowserAuthorizationListLimit;
+    nextPageToken?: AgentMail.PageToken;
+    credentials: AgentMail.BrowserCredential[];
+}

package/dist/esm/api/resources/apiKeys/types/ListBrowserCredentialsResponse.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/apiKeys/types/ListBrowserLifecycleEventsResponse.d.mts

@@ -0,0 +1,7 @@
+import type * as AgentMail from "../../../index.mjs";
+export interface ListBrowserLifecycleEventsResponse {
+    count: AgentMail.Count;
+    limit: AgentMail.BrowserAuthorizationListLimit;
+    nextPageToken?: AgentMail.PageToken;
+    events: AgentMail.BrowserLifecycleEvent[];
+}

package/dist/esm/api/resources/apiKeys/types/ListBrowserLifecycleEventsResponse.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/apiKeys/types/index.d.mts

@@ -1,12 +1,30 @@
 export * from "./ApiKey.mjs";
 export * from "./ApiKeyId.mjs";
 export * from "./ApiKeyPermissions.mjs";
+export * from "./BrowserAuthorizationListLimit.mjs";
+export * from "./BrowserConsent.mjs";
+export * from "./BrowserConsentLifecycleEvent.mjs";
+export * from "./BrowserConsentLifecycleEventType.mjs";
+export * from "./BrowserCredential.mjs";
+export * from "./BrowserCredentialCreator.mjs";
+export * from "./BrowserEnrollmentAccepted.mjs";
+export * from "./BrowserEnrollmentLifecycleEvent.mjs";
+export * from "./BrowserEnrollmentLifecycleEventType.mjs";
+export * from "./BrowserEnrollmentTransactionJti.mjs";
+export * from "./BrowserLifecycleActor.mjs";
+export * from "./BrowserLifecycleApiKeyActor.mjs";
+export * from "./BrowserLifecycleCredentialActor.mjs";
+export * from "./BrowserLifecycleEvent.mjs";
 export * from "./CreateApiKeyRequest.mjs";
 export * from "./CreateApiKeyResponse.mjs";
+export * from "./CreateBrowserEnrollmentRequest.mjs";
 export * from "./CreatedAt.mjs";
 export * from "./CreatePublicKeyRequest.mjs";
 export * from "./InboxPublicKeyScope.mjs";
 export * from "./ListApiKeysResponse.mjs";
+export * from "./ListBrowserConsentsResponse.mjs";
+export * from "./ListBrowserCredentialsResponse.mjs";
+export * from "./ListBrowserLifecycleEventsResponse.mjs";
 export * from "./ListPublicKeysResponse.mjs";
 export * from "./Name.mjs";
 export * from "./OrganizationPublicKeyScope.mjs";

package/dist/esm/api/resources/apiKeys/types/index.mjs

@@ -1,12 +1,30 @@
 export * from "./ApiKey.mjs";
 export * from "./ApiKeyId.mjs";
 export * from "./ApiKeyPermissions.mjs";
+export * from "./BrowserAuthorizationListLimit.mjs";
+export * from "./BrowserConsent.mjs";
+export * from "./BrowserConsentLifecycleEvent.mjs";
+export * from "./BrowserConsentLifecycleEventType.mjs";
+export * from "./BrowserCredential.mjs";
+export * from "./BrowserCredentialCreator.mjs";
+export * from "./BrowserEnrollmentAccepted.mjs";
+export * from "./BrowserEnrollmentLifecycleEvent.mjs";
+export * from "./BrowserEnrollmentLifecycleEventType.mjs";
+export * from "./BrowserEnrollmentTransactionJti.mjs";
+export * from "./BrowserLifecycleActor.mjs";
+export * from "./BrowserLifecycleApiKeyActor.mjs";
+export * from "./BrowserLifecycleCredentialActor.mjs";
+export * from "./BrowserLifecycleEvent.mjs";
 export * from "./CreateApiKeyRequest.mjs";
 export * from "./CreateApiKeyResponse.mjs";
+export * from "./CreateBrowserEnrollmentRequest.mjs";
 export * from "./CreatedAt.mjs";
 export * from "./CreatePublicKeyRequest.mjs";
 export * from "./InboxPublicKeyScope.mjs";
 export * from "./ListApiKeysResponse.mjs";
+export * from "./ListBrowserConsentsResponse.mjs";
+export * from "./ListBrowserCredentialsResponse.mjs";
+export * from "./ListBrowserLifecycleEventsResponse.mjs";
 export * from "./ListPublicKeysResponse.mjs";
 export * from "./Name.mjs";
 export * from "./OrganizationPublicKeyScope.mjs";

package/dist/esm/api/resources/attachments/types/SendAttachment.d.mts

@@ -1,11 +1,18 @@
 import type * as AgentMail from "../../../index.mjs";
+/**
+ * Provide either `content` or `url` for each attachment.
+ */
 export interface SendAttachment {
     filename?: AgentMail.AttachmentFilename;
     contentType?: AgentMail.AttachmentContentType;
     contentDisposition?: AgentMail.AttachmentContentDisposition;
     contentId?: AgentMail.AttachmentContentId;
-    /** Base64 encoded content of attachment. */
+    /** Base64 encoded content of the attachment. The entire request, including the message body and all attachments, is limited to 6 MB. */
     content?: string;
-    /** URL to the attachment. */
+    /**
+     * URL that AgentMail can download without custom authentication headers or cookies.
+     * Redirects and pre-signed URLs are supported, and the final response must be a
+     * successful 2xx response. Keep URL-backed attachments around 30 MB total per message.
+     */
     url?: string;
 }

package/dist/esm/api/resources/domains/client/Client.d.mts

@@ -111,10 +111,27 @@ export declare class DomainsClient {
      * @param {DomainsClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @throws {@link AgentMail.NotFoundError}
+     * @throws {@link AgentMail.ConflictError}
+     * @throws {@link AgentMail.UnprocessableError}
      *
      * @example
      *     await client.domains.verify("domain_id")
      */
     verify(domain_id: AgentMail.DomainId, requestOptions?: DomainsClient.RequestOptions): core.HttpResponsePromise<void>;
     private __verify;
+    /**
+     * Build a one-click DNS setup link for the domain via the Domain Connect standard. When the domain's DNS provider supports Domain Connect and carries the AgentMail template, the response contains a signed URL: opening it lets the domain owner approve the required DNS records at their provider, which writes them automatically — no copy-paste. When the provider does not support it, `supported` is `false` and the domain's `records` should be added manually instead.
+     *
+     * @param {AgentMail.DomainId} domain_id
+     * @param {DomainsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     * @throws {@link AgentMail.ConflictError}
+     * @throws {@link AgentMail.UnprocessableError}
+     *
+     * @example
+     *     await client.domains.getSetupLink("domain_id")
+     */
+    getSetupLink(domain_id: AgentMail.DomainId, requestOptions?: DomainsClient.RequestOptions): core.HttpResponsePromise<AgentMail.GetSetupLinkResponse>;
+    private __getSetupLink;
 }

package/dist/esm/api/resources/domains/client/Client.mjs

@@ -417,6 +417,8 @@ export class DomainsClient {
      * @param {DomainsClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @throws {@link AgentMail.NotFoundError}
+     * @throws {@link AgentMail.ConflictError}
+     * @throws {@link AgentMail.UnprocessableError}
      *
      * @example
      *     await client.domains.verify("domain_id")
@@ -454,6 +456,22 @@ export class DomainsClient {
                             skipValidation: true,
                             breadcrumbsPrefix: ["response"],
                         }), _response.rawResponse);
+                    case 409:
+                        throw new AgentMail.ConflictError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    case 422:
+                        throw new AgentMail.UnprocessableError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
                     default:
                         throw new errors.AgentMailError({
                             statusCode: _response.error.statusCode,
@@ -465,4 +483,86 @@ export class DomainsClient {
             return handleNonStatusCodeError(_response.error, _response.rawResponse, "POST", "/v0/domains/{domain_id}/verify");
         });
     }
+    /**
+     * Build a one-click DNS setup link for the domain via the Domain Connect standard. When the domain's DNS provider supports Domain Connect and carries the AgentMail template, the response contains a signed URL: opening it lets the domain owner approve the required DNS records at their provider, which writes them automatically — no copy-paste. When the provider does not support it, `supported` is `false` and the domain's `records` should be added manually instead.
+     *
+     * @param {AgentMail.DomainId} domain_id
+     * @param {DomainsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     * @throws {@link AgentMail.ConflictError}
+     * @throws {@link AgentMail.UnprocessableError}
+     *
+     * @example
+     *     await client.domains.getSetupLink("domain_id")
+     */
+    getSetupLink(domain_id, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__getSetupLink(domain_id, requestOptions));
+    }
+    __getSetupLink(domain_id, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, `/v0/domains/${core.url.encodePathParam(serializers.DomainId.jsonOrThrow(domain_id, { omitUndefined: true }))}/setup-link`),
+                method: "GET",
+                headers: _headers,
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: serializers.GetSetupLinkResponse.parseOrThrow(_response.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }),
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 404:
+                        throw new AgentMail.NotFoundError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    case 409:
+                        throw new AgentMail.ConflictError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    case 422:
+                        throw new AgentMail.UnprocessableError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    default:
+                        throw new errors.AgentMailError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/v0/domains/{domain_id}/setup-link");
+        });
+    }
 }

package/dist/esm/api/resources/domains/types/Domain.d.mts

@@ -4,6 +4,8 @@ export interface Domain {
     domainId: AgentMail.DomainId;
     domain: AgentMail.DomainName;
     status: AgentMail.Status;
+    /** Why the domain is not (yet) VERIFIED, when known. `dns_records_missing` / `dns_records_invalid` point at the DNS records. The `ses_*` values mean the records look right and sending-infrastructure validation has not converged: `ses_dkim_pending` / `ses_mail_from_pending` (still checking), `ses_dkim_temporary_failure` / `ses_mail_from_temporary_failure` (a transient error the infrastructure keeps retrying on its own — usually resolves without changes), `ses_dkim_failed` / `ses_mail_from_failed` (a terminal verdict; re-verify after fixing), `ses_dkim_not_started` / `ses_mail_from_not_started` (the attribute was never configured on the identity — re-verify to push it), and `ses_not_verified_for_sending`. Absent when VERIFIED. */
+    reason?: string;
     feedbackEnabled: AgentMail.FeedbackEnabled;
     subdomainsEnabled: AgentMail.SubdomainsEnabled;
     trackingEnabled: AgentMail.TrackingEnabled;

package/dist/esm/api/resources/domains/types/GetSetupLinkResponse.d.mts

@@ -0,0 +1,16 @@
+export interface GetSetupLinkResponse {
+    /** Whether one-click setup is available for this domain. `false` means the domain's DNS provider does not support Domain Connect (or does not carry the AgentMail template yet) — add the domain's `records` manually instead. */
+    supported: boolean;
+    /** Display name of the domain's DNS provider, for the setup button label. */
+    providerName?: string;
+    /** The signed Domain Connect apply URL. Open it in a browser: the domain owner signs in at their DNS provider, reviews the records, and approves — the provider writes them. */
+    url?: string;
+    /** Suggested popup width from the provider, in pixels. */
+    width?: number;
+    /** Suggested popup height from the provider, in pixels. */
+    height?: number;
+    /** Opaque value echoed back on the provider's redirect. Store it before opening the URL and compare on return to tie the redirect to this request. */
+    state?: string;
+    /** Set when the domain currently has another email provider's MX records (for example Google Workspace). Applying the template would replace them — warn before proceeding. */
+    conflictingProvider?: string;
+}

package/dist/esm/api/resources/domains/types/GetSetupLinkResponse.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/domains/types/VerificationRecord.d.mts

@@ -10,4 +10,6 @@ export interface VerificationRecord {
     status: AgentMail.RecordStatus;
     /** The priority of the MX record. */
     priority?: number;
+    /** Why the record is INVALID, when known. `duplicate_records` means the expected value is present but extra records coexist at the same name; `value_mismatch` means a record exists but does not match the expected value. */
+    reason?: string;
 }

package/dist/esm/api/resources/domains/types/index.d.mts

@@ -5,6 +5,7 @@ export * from "./DomainId.mjs";
 export * from "./DomainItem.mjs";
 export * from "./DomainName.mjs";
 export * from "./FeedbackEnabled.mjs";
+export * from "./GetSetupLinkResponse.mjs";
 export * from "./ListDomainsResponse.mjs";
 export * from "./RecordStatus.mjs";
 export * from "./RecordType.mjs";

package/dist/esm/api/resources/domains/types/index.mjs

@@ -5,6 +5,7 @@ export * from "./DomainId.mjs";
 export * from "./DomainItem.mjs";
 export * from "./DomainName.mjs";
 export * from "./FeedbackEnabled.mjs";
+export * from "./GetSetupLinkResponse.mjs";
 export * from "./ListDomainsResponse.mjs";
 export * from "./RecordStatus.mjs";
 export * from "./RecordType.mjs";

package/dist/esm/api/resources/inboxes/client/Client.d.mts

@@ -3,6 +3,7 @@ import { type NormalizedClientOptionsWithAuth } from "../../../../BaseClient.mjs
 import * as core from "../../../../core/index.mjs";
 import * as AgentMail from "../../../index.mjs";
 import { ApiKeysClient } from "../resources/apiKeys/client/Client.mjs";
+import { BrowserCredentialsClient } from "../resources/browserCredentials/client/Client.mjs";
 import { DraftsClient } from "../resources/drafts/client/Client.mjs";
 import { EventsClient } from "../resources/events/client/Client.mjs";
 import { ListsClient } from "../resources/lists/client/Client.mjs";
@@ -20,6 +21,7 @@ export declare class InboxesClient {
     protected _threads: ThreadsClient | undefined;
     protected _messages: MessagesClient | undefined;
     protected _drafts: DraftsClient | undefined;
+    protected _browserCredentials: BrowserCredentialsClient | undefined;
     protected _webhooks: WebhooksClient | undefined;
     protected _lists: ListsClient | undefined;
     protected _metrics: MetricsClient | undefined;
@@ -29,6 +31,7 @@ export declare class InboxesClient {
     get threads(): ThreadsClient;
     get messages(): MessagesClient;
     get drafts(): DraftsClient;
+    get browserCredentials(): BrowserCredentialsClient;
     get webhooks(): WebhooksClient;
     get lists(): ListsClient;
     get metrics(): MetricsClient;

package/dist/esm/api/resources/inboxes/client/Client.mjs

@@ -17,6 +17,7 @@ import * as errors from "../../../../errors/index.mjs";
 import * as serializers from "../../../../serialization/index.mjs";
 import * as AgentMail from "../../../index.mjs";
 import { ApiKeysClient } from "../resources/apiKeys/client/Client.mjs";
+import { BrowserCredentialsClient } from "../resources/browserCredentials/client/Client.mjs";
 import { DraftsClient } from "../resources/drafts/client/Client.mjs";
 import { EventsClient } from "../resources/events/client/Client.mjs";
 import { ListsClient } from "../resources/lists/client/Client.mjs";
@@ -40,6 +41,10 @@ export class InboxesClient {
         var _a;
         return ((_a = this._drafts) !== null && _a !== void 0 ? _a : (this._drafts = new DraftsClient(this._options)));
     }
+    get browserCredentials() {
+        var _a;
+        return ((_a = this._browserCredentials) !== null && _a !== void 0 ? _a : (this._browserCredentials = new BrowserCredentialsClient(this._options)));
+    }
     get webhooks() {
         var _a;
         return ((_a = this._webhooks) !== null && _a !== void 0 ? _a : (this._webhooks = new WebhooksClient(this._options)));

package/dist/esm/api/resources/inboxes/resources/apiKeys/client/Client.d.mts

@@ -13,7 +13,7 @@ export declare class ApiKeysClient {
     /**
      * **CLI:**
      * ```bash
-     * agentmail inboxes:api-keys list --inbox-id <inbox_id>
+     * agentmail inboxes api-keys list --inbox-id <inbox_id>
      * ```
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
@@ -30,7 +30,7 @@ export declare class ApiKeysClient {
     /**
      * **CLI:**
      * ```bash
-     * agentmail inboxes:api-keys create --inbox-id <inbox_id> --name "My Key"
+     * agentmail inboxes api-keys create --inbox-id <inbox_id> --name "My Key"
      * ```
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
@@ -48,7 +48,7 @@ export declare class ApiKeysClient {
     /**
      * **CLI:**
      * ```bash
-     * agentmail inboxes:api-keys delete --inbox-id <inbox_id> --api-key-id <api_key_id>
+     * agentmail inboxes api-keys delete --inbox-id <inbox_id> --api-key-id <api_key_id>
      * ```
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id

package/dist/esm/api/resources/inboxes/resources/apiKeys/client/Client.mjs

@@ -23,7 +23,7 @@ export class ApiKeysClient {
     /**
      * **CLI:**
      * ```bash
-     * agentmail inboxes:api-keys list --inbox-id <inbox_id>
+     * agentmail inboxes api-keys list --inbox-id <inbox_id>
      * ```
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
@@ -96,7 +96,7 @@ export class ApiKeysClient {
     /**
      * **CLI:**
      * ```bash
-     * agentmail inboxes:api-keys create --inbox-id <inbox_id> --name "My Key"
+     * agentmail inboxes api-keys create --inbox-id <inbox_id> --name "My Key"
      * ```
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
@@ -179,7 +179,7 @@ export class ApiKeysClient {
     /**
      * **CLI:**
      * ```bash
-     * agentmail inboxes:api-keys delete --inbox-id <inbox_id> --api-key-id <api_key_id>
+     * agentmail inboxes api-keys delete --inbox-id <inbox_id> --api-key-id <api_key_id>
      * ```
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id

package/dist/esm/api/resources/inboxes/resources/browserCredentials/client/Client.d.mts

@@ -0,0 +1,55 @@
+import type { BaseClientOptions, BaseRequestOptions } from "../../../../../../BaseClient.mjs";
+import { type NormalizedClientOptionsWithAuth } from "../../../../../../BaseClient.mjs";
+import * as core from "../../../../../../core/index.mjs";
+import * as AgentMail from "../../../../../index.mjs";
+export declare namespace BrowserCredentialsClient {
+    type Options = BaseClientOptions;
+    interface RequestOptions extends BaseRequestOptions {
+    }
+}
+export declare class BrowserCredentialsClient {
+    protected readonly _options: NormalizedClientOptionsWithAuth<BrowserCredentialsClient.Options>;
+    constructor(options?: BrowserCredentialsClient.Options);
+    /**
+     * Attach a browser enrollment intent to the inbox. Requires
+     * `api_key_create`. Before submitting `transaction_jti`, independently
+     * verify that the browser page's final origin is exactly
+     * `https://auth.agentid.com`.
+     *
+     * This endpoint is available to every organization using US production.
+     * It is not available in EU production.
+     *
+     * Select `inbox_id` from trusted AgentMail configuration. An AgentID
+     * `login_hint` is not authoritative for selecting the inbox; when the
+     * transaction includes one, it must match the path inbox.
+     *
+     * **AgentMail API keys are sent only to `https://api.agentmail.to`; AgentID never requests them.**
+     *
+     * A new intent returns `202`; an idempotent retry for the same pending
+     * transaction, inbox, and bearer key returns `200` with the same receipt.
+     * An intent lasts at most five minutes. An activated credential lasts at
+     * most 30 days and cannot outlive its authorizing bearer API key.
+     *
+     * Creation is limited to 20 intents per bearer API key per hour, 100 per
+     * organization per hour, and five live unused intents per bearer API key.
+     * Browser activation is separately limited to 20 activations per
+     * authorizing bearer API key per UTC day. Either kind of limit can return
+     * `429`; honor the `Retry-After` header. Cancelling an enrollment releases
+     * its live-intent slot but does not reset the daily activation counter.
+     *
+     * @param {AgentMail.inboxes.InboxId} inbox_id
+     * @param {AgentMail.CreateBrowserEnrollmentRequest} request
+     * @param {BrowserCredentialsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.ValidationError}
+     * @throws {@link AgentMail.NotFoundError}
+     * @throws {@link AgentMail.ConflictError}
+     *
+     * @example
+     *     await client.inboxes.browserCredentials.createEnrollment("inbox_id", {
+     *         transactionJti: "blackcurrant.........."
+     *     })
+     */
+    createEnrollment(inbox_id: AgentMail.inboxes.InboxId, request: AgentMail.CreateBrowserEnrollmentRequest, requestOptions?: BrowserCredentialsClient.RequestOptions): core.HttpResponsePromise<AgentMail.BrowserEnrollmentAccepted>;
+    private __createEnrollment;
+}

package/dist/esm/api/resources/inboxes/resources/browserCredentials/client/Client.mjs

@@ -0,0 +1,138 @@
+// This file was auto-generated by Fern from our API Definition.
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { normalizeClientOptionsWithAuth } from "../../../../../../BaseClient.mjs";
+import { mergeHeaders } from "../../../../../../core/headers.mjs";
+import * as core from "../../../../../../core/index.mjs";
+import * as environments from "../../../../../../environments.mjs";
+import { handleNonStatusCodeError } from "../../../../../../errors/handleNonStatusCodeError.mjs";
+import * as errors from "../../../../../../errors/index.mjs";
+import * as serializers from "../../../../../../serialization/index.mjs";
+import * as AgentMail from "../../../../../index.mjs";
+export class BrowserCredentialsClient {
+    constructor(options = {}) {
+        this._options = normalizeClientOptionsWithAuth(options);
+    }
+    /**
+     * Attach a browser enrollment intent to the inbox. Requires
+     * `api_key_create`. Before submitting `transaction_jti`, independently
+     * verify that the browser page's final origin is exactly
+     * `https://auth.agentid.com`.
+     *
+     * This endpoint is available to every organization using US production.
+     * It is not available in EU production.
+     *
+     * Select `inbox_id` from trusted AgentMail configuration. An AgentID
+     * `login_hint` is not authoritative for selecting the inbox; when the
+     * transaction includes one, it must match the path inbox.
+     *
+     * **AgentMail API keys are sent only to `https://api.agentmail.to`; AgentID never requests them.**
+     *
+     * A new intent returns `202`; an idempotent retry for the same pending
+     * transaction, inbox, and bearer key returns `200` with the same receipt.
+     * An intent lasts at most five minutes. An activated credential lasts at
+     * most 30 days and cannot outlive its authorizing bearer API key.
+     *
+     * Creation is limited to 20 intents per bearer API key per hour, 100 per
+     * organization per hour, and five live unused intents per bearer API key.
+     * Browser activation is separately limited to 20 activations per
+     * authorizing bearer API key per UTC day. Either kind of limit can return
+     * `429`; honor the `Retry-After` header. Cancelling an enrollment releases
+     * its live-intent slot but does not reset the daily activation counter.
+     *
+     * @param {AgentMail.inboxes.InboxId} inbox_id
+     * @param {AgentMail.CreateBrowserEnrollmentRequest} request
+     * @param {BrowserCredentialsClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.ValidationError}
+     * @throws {@link AgentMail.NotFoundError}
+     * @throws {@link AgentMail.ConflictError}
+     *
+     * @example
+     *     await client.inboxes.browserCredentials.createEnrollment("inbox_id", {
+     *         transactionJti: "blackcurrant.........."
+     *     })
+     */
+    createEnrollment(inbox_id, request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__createEnrollment(inbox_id, request, requestOptions));
+    }
+    __createEnrollment(inbox_id, request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, `/v0/inboxes/${core.url.encodePathParam(serializers.inboxes.InboxId.jsonOrThrow(inbox_id, { omitUndefined: true }))}/browser-credentials/enrollments`),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                requestType: "json",
+                body: serializers.CreateBrowserEnrollmentRequest.jsonOrThrow(request, {
+                    unrecognizedObjectKeys: "strip",
+                    omitUndefined: true,
+                }),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: serializers.BrowserEnrollmentAccepted.parseOrThrow(_response.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }),
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 400:
+                        throw new AgentMail.ValidationError(serializers.ValidationErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    case 404:
+                        throw new AgentMail.NotFoundError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    case 409:
+                        throw new AgentMail.ConflictError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    default:
+                        throw new errors.AgentMailError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "POST", "/v0/inboxes/{inbox_id}/browser-credentials/enrollments");
+        });
+    }
+}