agentmail 0.5.23 → 0.5.25

package/dist/cjs/serialization/resources/apiKeys/types/index.js

@@ -14,42 +14,33 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./AcceptDisclosure.js"), exports);
 __exportStar(require("./ApiKey.js"), exports);
+__exportStar(require("./ApiKeyCreator.js"), exports);
 __exportStar(require("./ApiKeyId.js"), exports);
+__exportStar(require("./ApiKeyMutableFields.js"), exports);
 __exportStar(require("./ApiKeyPermissions.js"), exports);
-__exportStar(require("./BrowserAuthorizationListLimit.js"), exports);
-__exportStar(require("./BrowserConsent.js"), exports);
-__exportStar(require("./BrowserConsentLifecycleEvent.js"), exports);
-__exportStar(require("./BrowserConsentLifecycleEventType.js"), exports);
-__exportStar(require("./BrowserCredential.js"), exports);
-__exportStar(require("./BrowserCredentialCreator.js"), exports);
-__exportStar(require("./BrowserEnrollmentAccepted.js"), exports);
-__exportStar(require("./BrowserEnrollmentLifecycleEvent.js"), exports);
-__exportStar(require("./BrowserEnrollmentLifecycleEventType.js"), exports);
-__exportStar(require("./BrowserEnrollmentTransactionJti.js"), exports);
-__exportStar(require("./BrowserLifecycleActor.js"), exports);
-__exportStar(require("./BrowserLifecycleApiKeyActor.js"), exports);
-__exportStar(require("./BrowserLifecycleCredentialActor.js"), exports);
-__exportStar(require("./BrowserLifecycleEvent.js"), exports);
+__exportStar(require("./ApiKeyType.js"), exports);
+__exportStar(require("./AuthToken.js"), exports);
+__exportStar(require("./BearerApiKey.js"), exports);
 __exportStar(require("./CreateApiKeyRequest.js"), exports);
 __exportStar(require("./CreateApiKeyResponse.js"), exports);
-__exportStar(require("./CreateBrowserEnrollmentRequest.js"), exports);
+__exportStar(require("./CreateApiKeyResult.js"), exports);
+__exportStar(require("./CreateBearerApiKeyRequest.js"), exports);
 __exportStar(require("./CreatedAt.js"), exports);
 __exportStar(require("./CreatePublicKeyRequest.js"), exports);
-__exportStar(require("./InboxPublicKeyScope.js"), exports);
+__exportStar(require("./ExpiresAt.js"), exports);
+__exportStar(require("./InboxScopeId.js"), exports);
 __exportStar(require("./ListApiKeysResponse.js"), exports);
-__exportStar(require("./ListBrowserConsentsResponse.js"), exports);
-__exportStar(require("./ListBrowserCredentialsResponse.js"), exports);
-__exportStar(require("./ListBrowserLifecycleEventsResponse.js"), exports);
-__exportStar(require("./ListPublicKeysResponse.js"), exports);
 __exportStar(require("./Name.js"), exports);
-__exportStar(require("./OrganizationPublicKeyScope.js"), exports);
-__exportStar(require("./PodPublicKeyScope.js"), exports);
+__exportStar(require("./PodScopeId.js"), exports);
 __exportStar(require("./Prefix.js"), exports);
 __exportStar(require("./PublicJwk.js"), exports);
 __exportStar(require("./PublicJwkCoordinate.js"), exports);
+__exportStar(require("./PublicKeyClientId.js"), exports);
 __exportStar(require("./PublicKeyCredential.js"), exports);
 __exportStar(require("./PublicKeyMaterial.js"), exports);
-__exportStar(require("./PublicKeyScope.js"), exports);
-__exportStar(require("./RevokeAllAgentIdSignInKeysResponse.js"), exports);
-__exportStar(require("./UpdatePublicKeyNameRequest.js"), exports);
+__exportStar(require("./PublicKeyStatus.js"), exports);
+__exportStar(require("./UpdateApiKeyRequest.js"), exports);
+__exportStar(require("./UpdatedAt.js"), exports);
+__exportStar(require("./UsedAt.js"), exports);

package/dist/cjs/serialization/resources/inboxes/types/AuthorizeInboxRequest.d.ts

@@ -0,0 +1,12 @@
+import type * as AgentMail from "../../../../api/index.js";
+import * as core from "../../../../core/index.js";
+import type * as serializers from "../../../index.js";
+import { AcceptDisclosure } from "../../apiKeys/types/AcceptDisclosure.js";
+import { AuthToken } from "../../apiKeys/types/AuthToken.js";
+export declare const AuthorizeInboxRequest: core.serialization.ObjectSchema<serializers.inboxes.AuthorizeInboxRequest.Raw, AgentMail.inboxes.AuthorizeInboxRequest>;
+export declare namespace AuthorizeInboxRequest {
+    interface Raw {
+        auth_token: AuthToken.Raw;
+        accept_disclosure?: AcceptDisclosure.Raw | null;
+    }
+}

package/dist/cjs/serialization/resources/{apiKeys/types/BrowserLifecycleCredentialActor.js → inboxes/types/AuthorizeInboxRequest.js}

@@ -34,9 +34,11 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BrowserLifecycleCredentialActor = void 0;
+exports.AuthorizeInboxRequest = void 0;
 const core = __importStar(require("../../../../core/index.js"));
-exports.BrowserLifecycleCredentialActor = core.serialization.object({
-    credentialId: core.serialization.property("credential_id", core.serialization.string()),
-    authorizingApiKeyId: core.serialization.property("authorizing_api_key_id", core.serialization.string()),
+const AcceptDisclosure_js_1 = require("../../apiKeys/types/AcceptDisclosure.js");
+const AuthToken_js_1 = require("../../apiKeys/types/AuthToken.js");
+exports.AuthorizeInboxRequest = core.serialization.object({
+    authToken: core.serialization.property("auth_token", AuthToken_js_1.AuthToken),
+    acceptDisclosure: core.serialization.property("accept_disclosure", AcceptDisclosure_js_1.AcceptDisclosure.optional()),
 });

package/dist/cjs/serialization/resources/inboxes/types/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./AuthorizeInboxRequest.js";
 export * from "./ClientId.js";
 export * from "./CreateInboxRequest.js";
 export * from "./DisplayName.js";

package/dist/cjs/serialization/resources/inboxes/types/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./AuthorizeInboxRequest.js"), exports);
 __exportStar(require("./ClientId.js"), exports);
 __exportStar(require("./CreateInboxRequest.js"), exports);
 __exportStar(require("./DisplayName.js"), exports);

package/dist/cjs/serialization/resources/providers/types/ConnectAccepted.d.ts

@@ -0,0 +1,14 @@
+import type * as AgentMail from "../../../../api/index.js";
+import * as core from "../../../../core/index.js";
+import type * as serializers from "../../../index.js";
+import { ApiKeyId } from "../../apiKeys/types/ApiKeyId.js";
+import { ExpiresAt } from "../../apiKeys/types/ExpiresAt.js";
+import { MagicUrl } from "./MagicUrl.js";
+export declare const ConnectAccepted: core.serialization.ObjectSchema<serializers.ConnectAccepted.Raw, AgentMail.ConnectAccepted>;
+export declare namespace ConnectAccepted {
+    interface Raw {
+        api_key_id: ApiKeyId.Raw;
+        magic_url: MagicUrl.Raw;
+        expires_at: ExpiresAt.Raw;
+    }
+}

package/dist/cjs/serialization/resources/{apiKeys/types/BrowserEnrollmentAccepted.js → providers/types/ConnectAccepted.js}

@@ -34,10 +34,13 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BrowserEnrollmentAccepted = void 0;
+exports.ConnectAccepted = void 0;
 const core = __importStar(require("../../../../core/index.js"));
-exports.BrowserEnrollmentAccepted = core.serialization.object({
-    status: core.serialization.stringLiteral("pending"),
-    enrollmentId: core.serialization.property("enrollment_id", core.serialization.string()),
-    expiresAt: core.serialization.property("expires_at", core.serialization.number()),
+const ApiKeyId_js_1 = require("../../apiKeys/types/ApiKeyId.js");
+const ExpiresAt_js_1 = require("../../apiKeys/types/ExpiresAt.js");
+const MagicUrl_js_1 = require("./MagicUrl.js");
+exports.ConnectAccepted = core.serialization.object({
+    apiKeyId: core.serialization.property("api_key_id", ApiKeyId_js_1.ApiKeyId),
+    magicUrl: core.serialization.property("magic_url", MagicUrl_js_1.MagicUrl),
+    expiresAt: core.serialization.property("expires_at", ExpiresAt_js_1.ExpiresAt),
 });

package/dist/cjs/serialization/resources/providers/types/ConnectInboxId.d.ts

@@ -0,0 +1,8 @@
+import type * as AgentMail from "../../../../api/index.js";
+import type * as core from "../../../../core/index.js";
+import type * as serializers from "../../../index.js";
+import { InboxId } from "../../inboxes/types/InboxId.js";
+export declare const ConnectInboxId: core.serialization.Schema<serializers.ConnectInboxId.Raw, AgentMail.ConnectInboxId>;
+export declare namespace ConnectInboxId {
+    type Raw = InboxId.Raw;
+}

package/dist/cjs/serialization/resources/providers/types/ConnectInboxId.js

@@ -0,0 +1,6 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectInboxId = void 0;
+const InboxId_js_1 = require("../../inboxes/types/InboxId.js");
+exports.ConnectInboxId = InboxId_js_1.InboxId;

package/dist/cjs/serialization/resources/providers/types/ConnectProviderBody.d.ts

@@ -1,11 +1,12 @@
 import type * as AgentMail from "../../../../api/index.js";
 import * as core from "../../../../core/index.js";
 import type * as serializers from "../../../index.js";
-import { InboxId } from "../../inboxes/types/InboxId.js";
+import { AcceptDisclosure } from "../../apiKeys/types/AcceptDisclosure.js";
+import { ConnectInboxId } from "./ConnectInboxId.js";
 export declare const ConnectProviderBody: core.serialization.ObjectSchema<serializers.ConnectProviderBody.Raw, AgentMail.ConnectProviderBody>;
 export declare namespace ConnectProviderBody {
     interface Raw {
-        inbox_id?: InboxId.Raw | null;
-        authorize?: boolean | null;
+        inbox_id?: ConnectInboxId.Raw | null;
+        accept_disclosure?: AcceptDisclosure.Raw | null;
     }
 }

package/dist/cjs/serialization/resources/providers/types/ConnectProviderBody.js

@@ -36,8 +36,9 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ConnectProviderBody = void 0;
 const core = __importStar(require("../../../../core/index.js"));
-const InboxId_js_1 = require("../../inboxes/types/InboxId.js");
+const AcceptDisclosure_js_1 = require("../../apiKeys/types/AcceptDisclosure.js");
+const ConnectInboxId_js_1 = require("./ConnectInboxId.js");
 exports.ConnectProviderBody = core.serialization.object({
-    inboxId: core.serialization.property("inbox_id", InboxId_js_1.InboxId.optional()),
-    authorize: core.serialization.boolean().optional(),
+    inboxId: core.serialization.property("inbox_id", ConnectInboxId_js_1.ConnectInboxId.optional()),
+    acceptDisclosure: core.serialization.property("accept_disclosure", AcceptDisclosure_js_1.AcceptDisclosure.optional()),
 });

package/dist/cjs/serialization/resources/providers/types/MagicUrl.d.ts

@@ -0,0 +1,7 @@
+import type * as AgentMail from "../../../../api/index.js";
+import * as core from "../../../../core/index.js";
+import type * as serializers from "../../../index.js";
+export declare const MagicUrl: core.serialization.Schema<serializers.MagicUrl.Raw, AgentMail.MagicUrl>;
+export declare namespace MagicUrl {
+    type Raw = string;
+}

package/dist/cjs/serialization/resources/providers/types/MagicUrl.js

@@ -0,0 +1,39 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MagicUrl = void 0;
+const core = __importStar(require("../../../../core/index.js"));
+exports.MagicUrl = core.serialization.string();

package/dist/cjs/serialization/resources/providers/types/index.d.ts

@@ -1,6 +1,8 @@
-export * from "./ConnectProviderAccepted.js";
+export * from "./ConnectAccepted.js";
+export * from "./ConnectInboxId.js";
 export * from "./ConnectProviderBody.js";
 export * from "./ListProviderAccountsResponse.js";
 export * from "./ListProvidersResponse.js";
+export * from "./MagicUrl.js";
 export * from "./Provider.js";
 export * from "./SearchProvidersResponse.js";

package/dist/cjs/serialization/resources/providers/types/index.js

@@ -14,9 +14,11 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./ConnectProviderAccepted.js"), exports);
+__exportStar(require("./ConnectAccepted.js"), exports);
+__exportStar(require("./ConnectInboxId.js"), exports);
 __exportStar(require("./ConnectProviderBody.js"), exports);
 __exportStar(require("./ListProviderAccountsResponse.js"), exports);
 __exportStar(require("./ListProvidersResponse.js"), exports);
+__exportStar(require("./MagicUrl.js"), exports);
 __exportStar(require("./Provider.js"), exports);
 __exportStar(require("./SearchProvidersResponse.js"), exports);

package/dist/cjs/serialization/resources/threads/types/Thread.d.ts

@@ -1,6 +1,9 @@
 import type * as AgentMail from "../../../../api/index.js";
 import * as core from "../../../../core/index.js";
 import type * as serializers from "../../../index.js";
+import { Count } from "../../../types/Count.js";
+import { Limit } from "../../../types/Limit.js";
+import { PageToken } from "../../../types/PageToken.js";
 import { InboxId } from "../../inboxes/types/InboxId.js";
 import { Message } from "../../messages/types/Message.js";
 import { ThreadAttachments } from "./ThreadAttachments.js";
@@ -37,6 +40,9 @@ export declare namespace Thread {
         size: ThreadSize.Raw;
         updated_at: ThreadUpdatedAt.Raw;
         created_at: ThreadCreatedAt.Raw;
+        count: Count.Raw;
+        limit?: Limit.Raw | null;
+        next_page_token?: PageToken.Raw | null;
         messages: Message.Raw[];
     }
 }

package/dist/cjs/serialization/resources/threads/types/Thread.js

@@ -36,6 +36,9 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Thread = void 0;
 const core = __importStar(require("../../../../core/index.js"));
+const Count_js_1 = require("../../../types/Count.js");
+const Limit_js_1 = require("../../../types/Limit.js");
+const PageToken_js_1 = require("../../../types/PageToken.js");
 const InboxId_js_1 = require("../../inboxes/types/InboxId.js");
 const Message_js_1 = require("../../messages/types/Message.js");
 const ThreadAttachments_js_1 = require("./ThreadAttachments.js");
@@ -70,5 +73,8 @@ exports.Thread = core.serialization.object({
     size: ThreadSize_js_1.ThreadSize,
     updatedAt: core.serialization.property("updated_at", ThreadUpdatedAt_js_1.ThreadUpdatedAt),
     createdAt: core.serialization.property("created_at", ThreadCreatedAt_js_1.ThreadCreatedAt),
+    count: Count_js_1.Count,
+    limit: Limit_js_1.Limit.optional(),
+    nextPageToken: core.serialization.property("next_page_token", PageToken_js_1.PageToken.optional()),
     messages: core.serialization.list(Message_js_1.Message),
 });

package/dist/cjs/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "0.5.23";
+export declare const SDK_VERSION = "0.5.25";

package/dist/cjs/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SDK_VERSION = void 0;
-exports.SDK_VERSION = "0.5.23";
+exports.SDK_VERSION = "0.5.25";

package/dist/esm/BaseClient.mjs

@@ -6,8 +6,8 @@ export function normalizeClientOptions(options) {
     const headers = mergeHeaders({
         "X-Fern-Language": "JavaScript",
         "X-Fern-SDK-Name": "agentmail",
-        "X-Fern-SDK-Version": "0.5.23",
-        "User-Agent": "agentmail/0.5.23",
+        "X-Fern-SDK-Version": "0.5.25",
+        "User-Agent": "agentmail/0.5.25",
         "X-Fern-Runtime": core.RUNTIME.type,
         "X-Fern-Runtime-Version": core.RUNTIME.version,
     }, options === null || options === void 0 ? void 0 : options.headers);

package/dist/esm/api/resources/apiKeys/client/Client.d.mts

@@ -11,6 +11,10 @@ export declare class ApiKeysClient {
     protected readonly _options: NormalizedClientOptionsWithAuth<ApiKeysClient.Options>;
     constructor(options?: ApiKeysClient.Options);
     /**
+     * Lists every credential, newest first. Filter one family with `type`.
+     * Page to token exhaustion: a page can be empty and still carry a
+     * `next_page_token`.
+     *
      * **CLI:**
      * ```bash
      * agentmail api-keys list
@@ -25,26 +29,8 @@ export declare class ApiKeysClient {
     list(request?: AgentMail.ListApiKeysRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.ListApiKeysResponse>;
     private __list;
     /**
-     * **CLI:**
-     * ```bash
-     * agentmail api-keys create --name "My Key"
-     * ```
-     *
-     * @param {AgentMail.CreateApiKeyRequest} request
-     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @throws {@link AgentMail.ValidationError}
-     *
-     * @example
-     *     await client.apiKeys.create({})
-     */
-    create(request: AgentMail.CreateApiKeyRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.CreateApiKeyResponse>;
-    private __create;
-    /**
-     * **CLI:**
-     * ```bash
-     * agentmail api-keys delete --api-key-id <api_key_id>
-     * ```
+     * Returns one credential of any family. Public keys also resolve by
+     * `client_id`. Poll a sign-in key until `status` is `active`.
      *
      * @param {AgentMail.ApiKeyId} api_key_id
      * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -52,180 +38,64 @@ export declare class ApiKeysClient {
      * @throws {@link AgentMail.NotFoundError}
      *
      * @example
-     *     await client.apiKeys.delete("api_key_id")
+     *     await client.apiKeys.get("api_key_id")
      */
-    delete(api_key_id: AgentMail.ApiKeyId, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<void>;
-    private __delete;
+    get(api_key_id: AgentMail.ApiKeyId, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.ApiKey>;
+    private __get;
     /**
-     * List only public-key credentials visible to the bearer caller's scope.
-     * Bearer credentials are never returned, even though both credential types
-     * share storage and pagination indexes. Requires `api_key_read`.
-     *
-     * @param {AgentMail.ListPublicKeysRequest} request
-     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
+     * Creates a bearer key, or registers a public key when the body carries
+     * `public_key`. The route selects the scope. Bearer secrets are returned once.
      *
-     * @example
-     *     await client.apiKeys.listPublicKeys()
-     */
-    listPublicKeys(request?: AgentMail.ListPublicKeysRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.ListPublicKeysResponse>;
-    private __listPublicKeys;
-    /**
-     * Register a public P-256 JWK using an existing AgentMail bearer API key
-     * with `api_key_create`. Re-registering the same JWK creates a new
-     * credential ID; it does not replace or recover an earlier credential.
-     * The private key must never be sent to AgentMail.
+     * **CLI:**
+     * ```bash
+     * agentmail api-keys create --name "My Key"
+     * ```
      *
-     * @param {AgentMail.CreatePublicKeyRequest} request
+     * @param {AgentMail.CreateApiKeyRequest} request
      * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @throws {@link AgentMail.ValidationError}
      * @throws {@link AgentMail.ConflictError}
      *
      * @example
-     *     await client.apiKeys.createPublicKey({
-     *         publicKey: {
-     *             kty: "EC",
-     *             crv: "P-256",
-     *             x: "blackcurrant...............................",
-     *             y: "blackcurrant..............................."
-     *         }
-     *     })
-     */
-    createPublicKey(request: AgentMail.CreatePublicKeyRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.PublicKeyCredential>;
-    private __createPublicKey;
-    /**
-     * Rename the credential. All security-relevant fields are immutable.
-     * Requires `api_key_update`.
-     *
-     * @param {string} api_key_id - Public-key credential ID returned by registration.
-     * @param {AgentMail.UpdatePublicKeyNameRequest} request
-     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @throws {@link AgentMail.ValidationError}
-     * @throws {@link AgentMail.NotFoundError}
-     *
-     * @example
-     *     await client.apiKeys.updatePublicKeyName("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32", {
-     *         name: "x"
-     *     })
-     */
-    updatePublicKeyName(api_key_id: string, request: AgentMail.UpdatePublicKeyNameRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.PublicKeyCredential>;
-    private __updatePublicKeyName;
-    /**
-     * Permanently revoke one public-key credential. This hard-deletes the
-     * credential; repeating the request returns not found. Requires
-     * `api_key_delete`.
-     *
-     * @param {string} api_key_id - Public-key credential ID returned by registration.
-     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @throws {@link AgentMail.NotFoundError}
-     *
-     * @example
-     *     await client.apiKeys.revokePublicKey("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32")
+     *     await client.apiKeys.create({})
      */
-    revokePublicKey(api_key_id: string, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<void>;
-    private __revokePublicKey;
+    create(request: AgentMail.CreateApiKeyRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.CreateApiKeyResult>;
+    private __create;
     /**
-     * Invalidate every current public-key credential in the caller's
-     * organization by advancing its AgentID key generation. The caller must be
-     * organization-scoped and either have `api_key_delete` or, for a verified
-     * self-serve agent organization, use an unrestricted unmanaged bearer
-     * credential. No request body is accepted.
+     * Renames a credential or changes its permissions. Public keys also resolve
+     * by `client_id`; a sign-in key accepts only `provider_connect` and
+     * `provider_share_owner`.
      *
-     * `Idempotency-Key` is required and must be a UUID. Reusing the same UUID
-     * returns the original permanent receipt without advancing the generation
-     * again. A new UUID performs a new generation advance.
-     *
-     * @param {AgentMail.RevokeAllAgentIdSignInKeysRequest} request
+     * @param {AgentMail.ApiKeyId} api_key_id
+     * @param {AgentMail.UpdateApiKeyRequest} request
      * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @throws {@link AgentMail.ValidationError}
-     * @throws {@link AgentMail.ConflictError}
-     *
-     * @example
-     *     await client.apiKeys.revokeAllAgentIdSignInKeys({
-     *         idempotencyKey: "Idempotency-Key"
-     *     })
-     */
-    revokeAllAgentIdSignInKeys(request: AgentMail.RevokeAllAgentIdSignInKeysRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.RevokeAllAgentIdSignInKeysResponse>;
-    private __revokeAllAgentIdSignInKeys;
-    /**
-     * List active browser credentials visible to the caller's scope. Requires `api_key_read`.
-     *
-     * @param {AgentMail.ListBrowserCredentialsRequest} request
-     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @example
-     *     await client.apiKeys.listBrowserCredentials()
-     */
-    listBrowserCredentials(request?: AgentMail.ListBrowserCredentialsRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.ListBrowserCredentialsResponse>;
-    private __listBrowserCredentials;
-    /**
-     * List owner-facing browser credential and consent lifecycle events. Requires `api_key_read`.
-     *
-     * @param {AgentMail.ListBrowserCredentialEventsRequest} request
-     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
      * @throws {@link AgentMail.NotFoundError}
      *
      * @example
-     *     await client.apiKeys.listBrowserCredentialEvents()
+     *     await client.apiKeys.update("api_key_id", {})
      */
-    listBrowserCredentialEvents(request?: AgentMail.ListBrowserCredentialEventsRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.ListBrowserLifecycleEventsResponse>;
-    private __listBrowserCredentialEvents;
+    update(api_key_id: AgentMail.ApiKeyId, request: AgentMail.UpdateApiKeyRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.ApiKey>;
+    private __update;
     /**
-     * Permanently revoke one active browser credential. Requires `api_key_delete`.
-     *
-     * @param {string} credential_id
-     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @throws {@link AgentMail.NotFoundError}
+     * Deletes one credential of any family. A pending sign-in key is
+     * cancelled; an active one is revoked. Public keys also resolve by `client_id`.
      *
-     * @example
-     *     await client.apiKeys.deleteBrowserCredential("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32")
-     */
-    deleteBrowserCredential(credential_id: string, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<void>;
-    private __deleteBrowserCredential;
-    /**
-     * Cancel one pending, unexpired browser enrollment intent. Requires `api_key_delete`.
-     *
-     * @param {string} enrollment_id
-     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @throws {@link AgentMail.NotFoundError}
-     *
-     * @example
-     *     await client.apiKeys.cancelBrowserEnrollment("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32")
-     */
-    cancelBrowserEnrollment(enrollment_id: string, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<void>;
-    private __cancelBrowserEnrollment;
-    /**
-     * List remembered AgentID client approvals for one live inbox. Requires `api_key_read`.
-     *
-     * @param {AgentMail.ListBrowserConsentsRequest} request
-     * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
-     *
-     * @throws {@link AgentMail.NotFoundError}
-     *
-     * @example
-     *     await client.apiKeys.listBrowserConsents({
-     *         inboxId: "inbox_id"
-     *     })
-     */
-    listBrowserConsents(request: AgentMail.ListBrowserConsentsRequest, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<AgentMail.ListBrowserConsentsResponse>;
-    private __listBrowserConsents;
-    /**
-     * Revoke one remembered AgentID client approval. Requires `api_key_delete`.
+     * **CLI:**
+     * ```bash
+     * agentmail api-keys delete --api-key-id <api_key_id>
+     * ```
      *
-     * @param {string} consent_id
+     * @param {AgentMail.ApiKeyId} api_key_id
      * @param {ApiKeysClient.RequestOptions} requestOptions - Request-specific configuration.
      *
      * @throws {@link AgentMail.NotFoundError}
      *
      * @example
-     *     await client.apiKeys.deleteBrowserConsent("consent_id")
+     *     await client.apiKeys.delete("api_key_id")
      */
-    deleteBrowserConsent(consent_id: string, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<void>;
-    private __deleteBrowserConsent;
+    delete(api_key_id: AgentMail.ApiKeyId, requestOptions?: ApiKeysClient.RequestOptions): core.HttpResponsePromise<void>;
+    private __delete;
 }