agentmail 0.5.20 → 0.5.22

package/dist/esm/api/resources/accounts/types/Account.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/accounts/types/AccountId.d.mts

@@ -0,0 +1,4 @@
+/**
+ * ID of account.
+ */
+export type AccountId = string;

package/dist/esm/api/resources/accounts/types/AccountId.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/accounts/types/ListAccountsResponse.d.mts

@@ -0,0 +1,7 @@
+import type * as AgentMail from "../../../index.mjs";
+export interface ListAccountsResponse {
+    count: AgentMail.Count;
+    limit: AgentMail.Limit;
+    nextPageToken?: AgentMail.PageToken;
+    accounts: AgentMail.Account[];
+}

package/dist/esm/api/resources/accounts/types/ListAccountsResponse.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/accounts/types/ProviderId.d.mts

@@ -0,0 +1,4 @@
+/**
+ * ID of provider.
+ */
+export type ProviderId = string;

package/dist/esm/api/resources/accounts/types/ProviderId.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/accounts/types/index.d.mts

@@ -0,0 +1,4 @@
+export * from "./Account.mjs";
+export * from "./AccountId.mjs";
+export * from "./ListAccountsResponse.mjs";
+export * from "./ProviderId.mjs";

package/dist/esm/api/resources/accounts/types/index.mjs

@@ -0,0 +1,4 @@
+export * from "./Account.mjs";
+export * from "./AccountId.mjs";
+export * from "./ListAccountsResponse.mjs";
+export * from "./ProviderId.mjs";

package/dist/esm/api/resources/apiKeys/client/Client.d.mts

@@ -150,4 +150,82 @@ export declare class ApiKeysClient {
      */
     revokeAllAgentIdSignInKeys(request: AgentMail.RevokeAllAgentIdSignInKeysRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.RevokeAllAgentIdSignInKeysResponse>;
     private __revokeAllAgentIdSignInKeys;
+    /**
+     * List active browser credentials visible to the caller's scope. Requires `api_key_read`.
+     *
+     * @param {AgentMail.ListBrowserCredentialsRequest} request
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.apiKeys.listBrowserCredentials()
+     */
+    listBrowserCredentials(request?: AgentMail.ListBrowserCredentialsRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.ListBrowserCredentialsResponse>;
+    private __listBrowserCredentials;
+    /**
+     * List owner-facing browser credential and consent lifecycle events. Requires `api_key_read`.
+     *
+     * @param {AgentMail.ListBrowserCredentialEventsRequest} request
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     *
+     * @example
+     *     await client.apiKeys.listBrowserCredentialEvents()
+     */
+    listBrowserCredentialEvents(request?: AgentMail.ListBrowserCredentialEventsRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.ListBrowserLifecycleEventsResponse>;
+    private __listBrowserCredentialEvents;
+    /**
+     * Permanently revoke one active browser credential. Requires `api_key_delete`.
+     *
+     * @param {string} credential_id
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     *
+     * @example
+     *     await client.apiKeys.deleteBrowserCredential("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32")
+     */
+    deleteBrowserCredential(credential_id: string, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<void>;
+    private __deleteBrowserCredential;
+    /**
+     * Cancel one pending, unexpired browser enrollment intent. Requires `api_key_delete`.
+     *
+     * @param {string} enrollment_id
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     *
+     * @example
+     *     await client.apiKeys.cancelBrowserEnrollment("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32")
+     */
+    cancelBrowserEnrollment(enrollment_id: string, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<void>;
+    private __cancelBrowserEnrollment;
+    /**
+     * List remembered AgentID client approvals for one live inbox. Requires `api_key_read`.
+     *
+     * @param {AgentMail.ListBrowserConsentsRequest} request
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     *
+     * @example
+     *     await client.apiKeys.listBrowserConsents({
+     *         inboxId: "inbox_id"
+     *     })
+     */
+    listBrowserConsents(request: AgentMail.ListBrowserConsentsRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.ListBrowserConsentsResponse>;
+    private __listBrowserConsents;
+    /**
+     * Revoke one remembered AgentID client approval. Requires `api_key_delete`.
+     *
+     * @param {string} consent_id
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     *
+     * @example
+     *     await client.apiKeys.deleteBrowserConsent("consent_id")
+     */
+    deleteBrowserConsent(consent_id: string, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<void>;
+    private __deleteBrowserConsent;
 }

package/dist/esm/api/resources/apiKeys/client/Client.mjs

@@ -583,4 +583,366 @@ export class ApiKeysClient {
             return handleNonStatusCodeError(_response.error, _response.rawResponse, "POST", "/v0/api-keys/public-keys/agentid-sign-in/revoke-all");
         });
     }
+    /**
+     * List active browser credentials visible to the caller's scope. Requires `api_key_read`.
+     *
+     * @param {AgentMail.ListBrowserCredentialsRequest} request
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @example
+     *     await client.apiKeys.listBrowserCredentials()
+     */
+    listBrowserCredentials(request = {}, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__listBrowserCredentials(request, requestOptions));
+    }
+    __listBrowserCredentials() {
+        return __awaiter(this, arguments, void 0, function* (request = {}, requestOptions) {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const { limit, pageToken } = request;
+            const _queryParams = {
+                limit,
+                page_token: pageToken,
+            };
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, "/v0/api-keys/browser-credentials"),
+                method: "GET",
+                headers: _headers,
+                queryParameters: Object.assign(Object.assign({}, _queryParams), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: serializers.ListBrowserCredentialsResponse.parseOrThrow(_response.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }),
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                throw new errors.AgentMailError({
+                    statusCode: _response.error.statusCode,
+                    body: _response.error.body,
+                    rawResponse: _response.rawResponse,
+                });
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/v0/api-keys/browser-credentials");
+        });
+    }
+    /**
+     * List owner-facing browser credential and consent lifecycle events. Requires `api_key_read`.
+     *
+     * @param {AgentMail.ListBrowserCredentialEventsRequest} request
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     *
+     * @example
+     *     await client.apiKeys.listBrowserCredentialEvents()
+     */
+    listBrowserCredentialEvents(request = {}, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__listBrowserCredentialEvents(request, requestOptions));
+    }
+    __listBrowserCredentialEvents() {
+        return __awaiter(this, arguments, void 0, function* (request = {}, requestOptions) {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const { limit, pageToken } = request;
+            const _queryParams = {
+                limit,
+                page_token: pageToken,
+            };
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, "/v0/api-keys/browser-credentials/events"),
+                method: "GET",
+                headers: _headers,
+                queryParameters: Object.assign(Object.assign({}, _queryParams), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: serializers.ListBrowserLifecycleEventsResponse.parseOrThrow(_response.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }),
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 404:
+                        throw new AgentMail.NotFoundError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    default:
+                        throw new errors.AgentMailError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/v0/api-keys/browser-credentials/events");
+        });
+    }
+    /**
+     * Permanently revoke one active browser credential. Requires `api_key_delete`.
+     *
+     * @param {string} credential_id
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     *
+     * @example
+     *     await client.apiKeys.deleteBrowserCredential("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32")
+     */
+    deleteBrowserCredential(credential_id, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__deleteBrowserCredential(credential_id, requestOptions));
+    }
+    __deleteBrowserCredential(credential_id, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, `/v0/api-keys/browser-credentials/${core.url.encodePathParam(credential_id)}`),
+                method: "DELETE",
+                headers: _headers,
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return { data: undefined, rawResponse: _response.rawResponse };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 404:
+                        throw new AgentMail.NotFoundError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    default:
+                        throw new errors.AgentMailError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "DELETE", "/v0/api-keys/browser-credentials/{credential_id}");
+        });
+    }
+    /**
+     * Cancel one pending, unexpired browser enrollment intent. Requires `api_key_delete`.
+     *
+     * @param {string} enrollment_id
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     *
+     * @example
+     *     await client.apiKeys.cancelBrowserEnrollment("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32")
+     */
+    cancelBrowserEnrollment(enrollment_id, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__cancelBrowserEnrollment(enrollment_id, requestOptions));
+    }
+    __cancelBrowserEnrollment(enrollment_id, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, `/v0/api-keys/browser-credentials/enrollments/${core.url.encodePathParam(enrollment_id)}`),
+                method: "DELETE",
+                headers: _headers,
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return { data: undefined, rawResponse: _response.rawResponse };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 404:
+                        throw new AgentMail.NotFoundError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    default:
+                        throw new errors.AgentMailError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "DELETE", "/v0/api-keys/browser-credentials/enrollments/{enrollment_id}");
+        });
+    }
+    /**
+     * List remembered AgentID client approvals for one live inbox. Requires `api_key_read`.
+     *
+     * @param {AgentMail.ListBrowserConsentsRequest} request
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     *
+     * @example
+     *     await client.apiKeys.listBrowserConsents({
+     *         inboxId: "inbox_id"
+     *     })
+     */
+    listBrowserConsents(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__listBrowserConsents(request, requestOptions));
+    }
+    __listBrowserConsents(request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const { inboxId, limit, pageToken } = request;
+            const _queryParams = {
+                inbox_id: inboxId,
+                limit,
+                page_token: pageToken,
+            };
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, "/v0/api-keys/browser-consents"),
+                method: "GET",
+                headers: _headers,
+                queryParameters: Object.assign(Object.assign({}, _queryParams), requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: serializers.ListBrowserConsentsResponse.parseOrThrow(_response.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }),
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 404:
+                        throw new AgentMail.NotFoundError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    default:
+                        throw new errors.AgentMailError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/v0/api-keys/browser-consents");
+        });
+    }
+    /**
+     * Revoke one remembered AgentID client approval. Requires `api_key_delete`.
+     *
+     * @param {string} consent_id
+     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.NotFoundError}
+     *
+     * @example
+     *     await client.apiKeys.deleteBrowserConsent("consent_id")
+     */
+    deleteBrowserConsent(consent_id, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__deleteBrowserConsent(consent_id, requestOptions));
+    }
+    __deleteBrowserConsent(consent_id, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, `/v0/api-keys/browser-consents/${core.url.encodePathParam(consent_id)}`),
+                method: "DELETE",
+                headers: _headers,
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return { data: undefined, rawResponse: _response.rawResponse };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 404:
+                        throw new AgentMail.NotFoundError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    default:
+                        throw new errors.AgentMailError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "DELETE", "/v0/api-keys/browser-consents/{consent_id}");
+        });
+    }
 }

package/dist/esm/api/resources/apiKeys/client/requests/ListBrowserConsentsRequest.d.mts

@@ -0,0 +1,12 @@
+import type * as AgentMail from "../../../../index.mjs";
+/**
+ * @example
+ *     {
+ *         inboxId: "inbox_id"
+ *     }
+ */
+export interface ListBrowserConsentsRequest {
+    inboxId: string;
+    limit?: AgentMail.BrowserAuthorizationListLimit;
+    pageToken?: AgentMail.PageToken;
+}

package/dist/esm/api/resources/apiKeys/client/requests/ListBrowserConsentsRequest.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/apiKeys/client/requests/ListBrowserCredentialEventsRequest.d.mts

@@ -0,0 +1,9 @@
+import type * as AgentMail from "../../../../index.mjs";
+/**
+ * @example
+ *     {}
+ */
+export interface ListBrowserCredentialEventsRequest {
+    limit?: AgentMail.BrowserAuthorizationListLimit;
+    pageToken?: AgentMail.PageToken;
+}

package/dist/esm/api/resources/apiKeys/client/requests/ListBrowserCredentialEventsRequest.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/apiKeys/client/requests/ListBrowserCredentialsRequest.d.mts

@@ -0,0 +1,9 @@
+import type * as AgentMail from "../../../../index.mjs";
+/**
+ * @example
+ *     {}
+ */
+export interface ListBrowserCredentialsRequest {
+    limit?: AgentMail.BrowserAuthorizationListLimit;
+    pageToken?: AgentMail.PageToken;
+}

package/dist/esm/api/resources/apiKeys/client/requests/ListBrowserCredentialsRequest.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/apiKeys/client/requests/index.d.mts

@@ -1,3 +1,6 @@
 export type { ListApiKeysRequest } from "./ListApiKeysRequest.mjs";
+export type { ListBrowserConsentsRequest } from "./ListBrowserConsentsRequest.mjs";
+export type { ListBrowserCredentialEventsRequest } from "./ListBrowserCredentialEventsRequest.mjs";
+export type { ListBrowserCredentialsRequest } from "./ListBrowserCredentialsRequest.mjs";
 export type { ListPublicKeysRequest } from "./ListPublicKeysRequest.mjs";
 export type { RevokeAllAgentIdSignInKeysRequest } from "./RevokeAllAgentIdSignInKeysRequest.mjs";

package/dist/esm/api/resources/apiKeys/types/BrowserAuthorizationListLimit.d.mts

@@ -0,0 +1 @@
+export type BrowserAuthorizationListLimit = number;

package/dist/esm/api/resources/apiKeys/types/BrowserAuthorizationListLimit.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/apiKeys/types/BrowserConsent.d.mts

@@ -0,0 +1,16 @@
+/**
+ * Remembered approval for one closed AgentID client and inbox.
+ */
+export interface BrowserConsent {
+    consentId: string;
+    inboxId: string;
+    clientType: "closed";
+    clientId: string;
+    /** Registered client URL, when one is available. */
+    clientUrl?: string;
+    /** At least one non-empty scope approved for this client. */
+    approvedScopes: string[];
+    createdAt: Date;
+    updatedAt: Date;
+    expiresAt: Date;
+}

package/dist/esm/api/resources/apiKeys/types/BrowserConsent.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/apiKeys/types/BrowserConsentLifecycleEvent.d.mts

@@ -0,0 +1,13 @@
+import type * as AgentMail from "../../../index.mjs";
+export interface BrowserConsentLifecycleEvent {
+    type: AgentMail.BrowserConsentLifecycleEventType;
+    traceId: string;
+    eventId: string;
+    occurredAt: Date;
+    organizationId: string;
+    podId: string;
+    actor: AgentMail.BrowserLifecycleActor;
+    consentId: string;
+    clientType: "closed";
+    clientId: string;
+}

package/dist/esm/api/resources/apiKeys/types/BrowserConsentLifecycleEvent.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/apiKeys/types/BrowserConsentLifecycleEventType.d.mts

@@ -0,0 +1,7 @@
+export declare const BrowserConsentLifecycleEventType: {
+    readonly BrowserConsentCreated: "browser_consent_created";
+    readonly BrowserConsentUpdated: "browser_consent_updated";
+    readonly BrowserConsentReused: "browser_consent_reused";
+    readonly BrowserConsentRevoked: "browser_consent_revoked";
+};
+export type BrowserConsentLifecycleEventType = (typeof BrowserConsentLifecycleEventType)[keyof typeof BrowserConsentLifecycleEventType];

package/dist/esm/api/resources/apiKeys/types/BrowserConsentLifecycleEventType.mjs

@@ -0,0 +1,7 @@
+// This file was auto-generated by Fern from our API Definition.
+export const BrowserConsentLifecycleEventType = {
+    BrowserConsentCreated: "browser_consent_created",
+    BrowserConsentUpdated: "browser_consent_updated",
+    BrowserConsentReused: "browser_consent_reused",
+    BrowserConsentRevoked: "browser_consent_revoked",
+};

package/dist/esm/api/resources/apiKeys/types/BrowserCredential.d.mts

@@ -0,0 +1,14 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * Owner-facing metadata for an active browser credential. Private key material never leaves the browser.
+ */
+export interface BrowserCredential {
+    credentialId: string;
+    publicKeyFingerprintPrefix: string;
+    organizationId: string;
+    podId: string;
+    inboxId: string;
+    createdBy: AgentMail.BrowserCredentialCreator;
+    createdAt: Date;
+    expiresAt: Date;
+}

package/dist/esm/api/resources/apiKeys/types/BrowserCredential.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};