agentmail 0.5.30 → 0.5.32

package/dist/cjs/BaseClient.js

@@ -43,8 +43,8 @@ function normalizeClientOptions(options) {
     const headers = (0, headers_js_1.mergeHeaders)({
         "X-Fern-Language": "JavaScript",
         "X-Fern-SDK-Name": "agentmail",
-        "X-Fern-SDK-Version": "0.5.30",
-        "User-Agent": "agentmail/0.5.30",
+        "X-Fern-SDK-Version": "0.5.32",
+        "User-Agent": "agentmail/0.5.32",
         "X-Fern-Runtime": core.RUNTIME.type,
         "X-Fern-Runtime-Version": core.RUNTIME.version,
     }, options === null || options === void 0 ? void 0 : options.headers);

package/dist/cjs/api/resources/agent/client/Client.d.ts

@@ -15,6 +15,8 @@ export declare class AgentClient {
      *
      * A 6-digit OTP is sent to the human's email for verification.
      *
+     * `human_email` is optional. Without it, the inbox can receive email but cannot send to anyone until a human is attached with the attach human endpoint. There is also no way to recover the API key, so store it durably. Calling sign-up again without `human_email` creates a new organization, which needs a different `username`: the original username stays with the lost organization's inbox.
+     *
      * This endpoint is idempotent. Calling it again with the same `human_email` will rotate the API key and resend the OTP if expired.
      *
      * The returned API key has limited permissions until the organization is verified via the verify endpoint.
@@ -31,18 +33,46 @@ export declare class AgentClient {
      *
      * @example
      *     await client.agent.signUp({
-     *         humanEmail: "human_email",
      *         username: "username"
      *     })
      */
     signUp(request: AgentMail.AgentSignupRequest, requestOptions?: AgentClient.RequestOptions): core.HttpResponsePromise<AgentMail.AgentSignupResponse>;
     private __signUp;
+    /**
+     * Attach a human to an unverified agent organization. A 6-digit OTP is sent to the human's email, which you then submit to the verify endpoint.
+     *
+     * Use it after signing up without a `human_email`. Once the human is attached, the organization can send email to that human only, and verification lifts the remaining restrictions. For up to 5 minutes after attaching, sends to the human can still be rejected with a `429` daily send limit error while the API key's cached limits catch up. Wait and retry.
+     *
+     * Calling it again with the same `human_email` does not rotate the API key. It resends the OTP if it was never delivered, or issues a new one if it expired. While the current OTP is still valid, calling it again keeps that OTP and its attempt count. If all 10 attempts are used up, wait until the OTP expires, 24 hours after it was issued, then call it again for a new one.
+     *
+     * Calling it with a different `human_email` replaces the attached human and sends the new human an OTP. An organization can replace its human at most 2 times.
+     *
+     * Only available until the organization is verified.
+     *
+     * **CLI:**
+     * ```bash
+     * agentmail agent attach-human --human-email user@example.com
+     * ```
+     *
+     * @param {AgentMail.AgentAttachHumanRequest} request
+     * @param {AgentClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.ValidationError}
+     * @throws {@link AgentMail.ConflictError}
+     *
+     * @example
+     *     await client.agent.attachHuman({
+     *         humanEmail: "human_email"
+     *     })
+     */
+    attachHuman(request: AgentMail.AgentAttachHumanRequest, requestOptions?: AgentClient.RequestOptions): core.HttpResponsePromise<AgentMail.AgentAttachHumanResponse>;
+    private __attachHuman;
     /**
      * Verify an agent organization using the 6-digit OTP sent to the human's email during sign-up.
      *
      * On success, the organization is upgraded from `agent_unverified` to `agent_verified`, the send allowlist is removed, and free plan entitlements are applied.
      *
-     * The OTP expires after 24 hours and allows a maximum of 10 attempts. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
+     * The OTP expires after 24 hours and allows a maximum of 10 attempts. If the OTP expired, call the attach human endpoint with the same `human_email` to get a new one without rotating the API key. Once all 10 attempts are used, even the correct OTP is rejected, and attach human keeps returning the same OTP until it expires, so wait for it to expire before asking for a new one. An organization that signed up without a `human_email` has no OTP until a human is attached. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
      *
      * **CLI:**
      * ```bash

package/dist/cjs/api/resources/agent/client/Client.js

@@ -61,6 +61,8 @@ class AgentClient {
      *
      * A 6-digit OTP is sent to the human's email for verification.
      *
+     * `human_email` is optional. Without it, the inbox can receive email but cannot send to anyone until a human is attached with the attach human endpoint. There is also no way to recover the API key, so store it durably. Calling sign-up again without `human_email` creates a new organization, which needs a different `username`: the original username stays with the lost organization's inbox.
+     *
      * This endpoint is idempotent. Calling it again with the same `human_email` will rotate the API key and resend the OTP if expired.
      *
      * The returned API key has limited permissions until the organization is verified via the verify endpoint.
@@ -77,7 +79,6 @@ class AgentClient {
      *
      * @example
      *     await client.agent.signUp({
-     *         humanEmail: "human_email",
      *         username: "username"
      *     })
      */
@@ -139,12 +140,106 @@ class AgentClient {
             return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "POST", "/v0/agent/sign-up");
         });
     }
+    /**
+     * Attach a human to an unverified agent organization. A 6-digit OTP is sent to the human's email, which you then submit to the verify endpoint.
+     *
+     * Use it after signing up without a `human_email`. Once the human is attached, the organization can send email to that human only, and verification lifts the remaining restrictions. For up to 5 minutes after attaching, sends to the human can still be rejected with a `429` daily send limit error while the API key's cached limits catch up. Wait and retry.
+     *
+     * Calling it again with the same `human_email` does not rotate the API key. It resends the OTP if it was never delivered, or issues a new one if it expired. While the current OTP is still valid, calling it again keeps that OTP and its attempt count. If all 10 attempts are used up, wait until the OTP expires, 24 hours after it was issued, then call it again for a new one.
+     *
+     * Calling it with a different `human_email` replaces the attached human and sends the new human an OTP. An organization can replace its human at most 2 times.
+     *
+     * Only available until the organization is verified.
+     *
+     * **CLI:**
+     * ```bash
+     * agentmail agent attach-human --human-email user@example.com
+     * ```
+     *
+     * @param {AgentMail.AgentAttachHumanRequest} request
+     * @param {AgentClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.ValidationError}
+     * @throws {@link AgentMail.ConflictError}
+     *
+     * @example
+     *     await client.agent.attachHuman({
+     *         humanEmail: "human_email"
+     *     })
+     */
+    attachHuman(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__attachHuman(request, requestOptions));
+    }
+    __attachHuman(request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, "/v0/agent/human"),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                requestType: "json",
+                body: serializers.AgentAttachHumanRequest.jsonOrThrow(request, {
+                    unrecognizedObjectKeys: "strip",
+                    omitUndefined: true,
+                }),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: serializers.AgentAttachHumanResponse.parseOrThrow(_response.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }),
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 400:
+                        throw new AgentMail.ValidationError(serializers.ValidationErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    case 409:
+                        throw new AgentMail.ConflictError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    default:
+                        throw new errors.AgentMailError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "POST", "/v0/agent/human");
+        });
+    }
     /**
      * Verify an agent organization using the 6-digit OTP sent to the human's email during sign-up.
      *
      * On success, the organization is upgraded from `agent_unverified` to `agent_verified`, the send allowlist is removed, and free plan entitlements are applied.
      *
-     * The OTP expires after 24 hours and allows a maximum of 10 attempts. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
+     * The OTP expires after 24 hours and allows a maximum of 10 attempts. If the OTP expired, call the attach human endpoint with the same `human_email` to get a new one without rotating the API key. Once all 10 attempts are used, even the correct OTP is rejected, and attach human keeps returning the same OTP until it expires, so wait for it to expire before asking for a new one. An organization that signed up without a `human_email` has no OTP until a human is attached. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
      *
      * **CLI:**
      * ```bash

package/dist/cjs/api/resources/agent/types/AgentAttachHumanRequest.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Request body to attach a human to an agent organization.
+ */
+export interface AgentAttachHumanRequest {
+    /** Email address of the human who owns the agent. A 6-digit OTP will be sent to this address. */
+    humanEmail: string;
+}

package/dist/cjs/api/resources/agent/types/AgentAttachHumanRequest.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/api/resources/agent/types/AgentAttachHumanResponse.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Response after attaching a human to an agent organization.
+ */
+export interface AgentAttachHumanResponse {
+    /** Email address of the attached human. */
+    humanEmail: string;
+    /** Next steps for the agent, in plain text. */
+    instructions: string;
+}

package/dist/cjs/api/resources/agent/types/AgentAttachHumanResponse.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/api/resources/agent/types/AgentSignupRequest.d.ts

@@ -2,8 +2,11 @@
  * Request body to sign up an agent.
  */
 export interface AgentSignupRequest {
-    /** Email address of the human who owns the agent. A 6-digit OTP will be sent to this address. */
-    humanEmail: string;
+    /**
+     * Email address of the human who owns the agent. A 6-digit OTP will be sent to this address.
+     * Omit it to get a receive-only inbox: it can receive email but cannot send until a human is attached with the attach human endpoint.
+     */
+    humanEmail?: string;
     /** Username for the auto-created inbox (e.g. "my-agent" creates my-agent@agentmail.to). */
     username: string;
     /**

package/dist/cjs/api/resources/agent/types/index.d.ts

@@ -1,3 +1,5 @@
+export * from "./AgentAttachHumanRequest.js";
+export * from "./AgentAttachHumanResponse.js";
 export * from "./AgentSignupRequest.js";
 export * from "./AgentSignupResponse.js";
 export * from "./AgentVerifyRequest.js";

package/dist/cjs/api/resources/agent/types/index.js

@@ -14,6 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./AgentAttachHumanRequest.js"), exports);
+__exportStar(require("./AgentAttachHumanResponse.js"), exports);
 __exportStar(require("./AgentSignupRequest.js"), exports);
 __exportStar(require("./AgentSignupResponse.js"), exports);
 __exportStar(require("./AgentVerifyRequest.js"), exports);

package/dist/cjs/api/resources/apiKeys/types/ApiKeyPermissions.d.ts

@@ -87,6 +87,8 @@ export interface ApiKeyPermissions {
     podRead?: boolean;
     /** Create pods. */
     podCreate?: boolean;
+    /** Update pods. */
+    podUpdate?: boolean;
     /** Delete pods. */
     podDelete?: boolean;
 }

package/dist/cjs/api/resources/apiKeys/types/CreateApiKeyResponse.d.ts

@@ -9,4 +9,5 @@ export interface CreateApiKeyResponse {
     inboxId?: AgentMail.InboxScopeId;
     permissions?: AgentMail.ApiKeyPermissions;
     createdAt: AgentMail.CreatedAt;
+    expiresAt?: AgentMail.ExpiresAt;
 }

package/dist/cjs/api/resources/apiKeys/types/CreateBearerApiKeyRequest.d.ts

@@ -1,3 +1,11 @@
 import type * as AgentMail from "../../../index.js";
+/**
+ * `expires_at` must be in the future and is immutable once the key exists.
+ * Omitted, the new key inherits the authenticating key's expiry, and never
+ * expires only when that key never does. A key cannot create one that
+ * outlives it: an `expires_at` later than the authenticating key's own
+ * returns `403`.
+ */
 export interface CreateBearerApiKeyRequest extends AgentMail.ApiKeyMutableFields {
+    expiresAt?: AgentMail.ExpiresAt;
 }

package/dist/cjs/serialization/resources/agent/types/AgentAttachHumanRequest.d.ts

@@ -0,0 +1,9 @@
+import type * as AgentMail from "../../../../api/index.js";
+import * as core from "../../../../core/index.js";
+import type * as serializers from "../../../index.js";
+export declare const AgentAttachHumanRequest: core.serialization.ObjectSchema<serializers.AgentAttachHumanRequest.Raw, AgentMail.AgentAttachHumanRequest>;
+export declare namespace AgentAttachHumanRequest {
+    interface Raw {
+        human_email: string;
+    }
+}

package/dist/cjs/serialization/resources/agent/types/AgentAttachHumanRequest.js

@@ -0,0 +1,41 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentAttachHumanRequest = void 0;
+const core = __importStar(require("../../../../core/index.js"));
+exports.AgentAttachHumanRequest = core.serialization.object({
+    humanEmail: core.serialization.property("human_email", core.serialization.string()),
+});

package/dist/cjs/serialization/resources/agent/types/AgentAttachHumanResponse.d.ts

@@ -0,0 +1,10 @@
+import type * as AgentMail from "../../../../api/index.js";
+import * as core from "../../../../core/index.js";
+import type * as serializers from "../../../index.js";
+export declare const AgentAttachHumanResponse: core.serialization.ObjectSchema<serializers.AgentAttachHumanResponse.Raw, AgentMail.AgentAttachHumanResponse>;
+export declare namespace AgentAttachHumanResponse {
+    interface Raw {
+        human_email: string;
+        instructions: string;
+    }
+}

package/dist/cjs/serialization/resources/agent/types/AgentAttachHumanResponse.js

@@ -0,0 +1,42 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentAttachHumanResponse = void 0;
+const core = __importStar(require("../../../../core/index.js"));
+exports.AgentAttachHumanResponse = core.serialization.object({
+    humanEmail: core.serialization.property("human_email", core.serialization.string()),
+    instructions: core.serialization.string(),
+});

package/dist/cjs/serialization/resources/agent/types/AgentSignupRequest.d.ts

@@ -4,7 +4,7 @@ import type * as serializers from "../../../index.js";
 export declare const AgentSignupRequest: core.serialization.ObjectSchema<serializers.AgentSignupRequest.Raw, AgentMail.AgentSignupRequest>;
 export declare namespace AgentSignupRequest {
     interface Raw {
-        human_email: string;
+        human_email?: string | null;
         username: string;
         source?: string | null;
         referrer?: string | null;

package/dist/cjs/serialization/resources/agent/types/AgentSignupRequest.js

@@ -37,7 +37,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AgentSignupRequest = void 0;
 const core = __importStar(require("../../../../core/index.js"));
 exports.AgentSignupRequest = core.serialization.object({
-    humanEmail: core.serialization.property("human_email", core.serialization.string()),
+    humanEmail: core.serialization.property("human_email", core.serialization.string().optional()),
     username: core.serialization.string(),
     source: core.serialization.string().optional(),
     referrer: core.serialization.string().optional(),

package/dist/cjs/serialization/resources/agent/types/index.d.ts

@@ -1,3 +1,5 @@
+export * from "./AgentAttachHumanRequest.js";
+export * from "./AgentAttachHumanResponse.js";
 export * from "./AgentSignupRequest.js";
 export * from "./AgentSignupResponse.js";
 export * from "./AgentVerifyRequest.js";

package/dist/cjs/serialization/resources/agent/types/index.js

@@ -14,6 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./AgentAttachHumanRequest.js"), exports);
+__exportStar(require("./AgentAttachHumanResponse.js"), exports);
 __exportStar(require("./AgentSignupRequest.js"), exports);
 __exportStar(require("./AgentSignupResponse.js"), exports);
 __exportStar(require("./AgentVerifyRequest.js"), exports);

package/dist/cjs/serialization/resources/apiKeys/types/ApiKeyPermissions.d.ts

@@ -42,6 +42,7 @@ export declare namespace ApiKeyPermissions {
         account_update?: boolean | null;
         pod_read?: boolean | null;
         pod_create?: boolean | null;
+        pod_update?: boolean | null;
         pod_delete?: boolean | null;
     }
 }

package/dist/cjs/serialization/resources/apiKeys/types/ApiKeyPermissions.js

@@ -75,5 +75,6 @@ exports.ApiKeyPermissions = core.serialization.object({
     accountUpdate: core.serialization.property("account_update", core.serialization.boolean().optional()),
     podRead: core.serialization.property("pod_read", core.serialization.boolean().optional()),
     podCreate: core.serialization.property("pod_create", core.serialization.boolean().optional()),
+    podUpdate: core.serialization.property("pod_update", core.serialization.boolean().optional()),
     podDelete: core.serialization.property("pod_delete", core.serialization.boolean().optional()),
 });

package/dist/cjs/serialization/resources/apiKeys/types/CreateApiKeyResponse.d.ts

@@ -4,6 +4,7 @@ import type * as serializers from "../../../index.js";
 import { ApiKeyId } from "./ApiKeyId.js";
 import { ApiKeyPermissions } from "./ApiKeyPermissions.js";
 import { CreatedAt } from "./CreatedAt.js";
+import { ExpiresAt } from "./ExpiresAt.js";
 import { InboxScopeId } from "./InboxScopeId.js";
 import { Name } from "./Name.js";
 import { PodScopeId } from "./PodScopeId.js";
@@ -19,5 +20,6 @@ export declare namespace CreateApiKeyResponse {
         inbox_id?: InboxScopeId.Raw | null;
         permissions?: ApiKeyPermissions.Raw | null;
         created_at: CreatedAt.Raw;
+        expires_at?: ExpiresAt.Raw | null;
     }
 }

package/dist/cjs/serialization/resources/apiKeys/types/CreateApiKeyResponse.js

@@ -39,6 +39,7 @@ const core = __importStar(require("../../../../core/index.js"));
 const ApiKeyId_js_1 = require("./ApiKeyId.js");
 const ApiKeyPermissions_js_1 = require("./ApiKeyPermissions.js");
 const CreatedAt_js_1 = require("./CreatedAt.js");
+const ExpiresAt_js_1 = require("./ExpiresAt.js");
 const InboxScopeId_js_1 = require("./InboxScopeId.js");
 const Name_js_1 = require("./Name.js");
 const PodScopeId_js_1 = require("./PodScopeId.js");
@@ -52,4 +53,5 @@ exports.CreateApiKeyResponse = core.serialization.object({
     inboxId: core.serialization.property("inbox_id", InboxScopeId_js_1.InboxScopeId.optional()),
     permissions: ApiKeyPermissions_js_1.ApiKeyPermissions.optional(),
     createdAt: core.serialization.property("created_at", CreatedAt_js_1.CreatedAt),
+    expiresAt: core.serialization.property("expires_at", ExpiresAt_js_1.ExpiresAt.optional()),
 });

package/dist/cjs/serialization/resources/apiKeys/types/CreateBearerApiKeyRequest.d.ts

@@ -2,8 +2,10 @@ import type * as AgentMail from "../../../../api/index.js";
 import * as core from "../../../../core/index.js";
 import type * as serializers from "../../../index.js";
 import { ApiKeyMutableFields } from "./ApiKeyMutableFields.js";
+import { ExpiresAt } from "./ExpiresAt.js";
 export declare const CreateBearerApiKeyRequest: core.serialization.ObjectSchema<serializers.CreateBearerApiKeyRequest.Raw, AgentMail.CreateBearerApiKeyRequest>;
 export declare namespace CreateBearerApiKeyRequest {
     interface Raw extends ApiKeyMutableFields.Raw {
+        expires_at?: ExpiresAt.Raw | null;
     }
 }

package/dist/cjs/serialization/resources/apiKeys/types/CreateBearerApiKeyRequest.js

@@ -37,4 +37,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CreateBearerApiKeyRequest = void 0;
 const core = __importStar(require("../../../../core/index.js"));
 const ApiKeyMutableFields_js_1 = require("./ApiKeyMutableFields.js");
-exports.CreateBearerApiKeyRequest = core.serialization.object({}).extend(ApiKeyMutableFields_js_1.ApiKeyMutableFields);
+const ExpiresAt_js_1 = require("./ExpiresAt.js");
+exports.CreateBearerApiKeyRequest = core.serialization
+    .object({
+    expiresAt: core.serialization.property("expires_at", ExpiresAt_js_1.ExpiresAt.optional()),
+})
+    .extend(ApiKeyMutableFields_js_1.ApiKeyMutableFields);

package/dist/cjs/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "0.5.30";
+export declare const SDK_VERSION = "0.5.32";

package/dist/cjs/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SDK_VERSION = void 0;
-exports.SDK_VERSION = "0.5.30";
+exports.SDK_VERSION = "0.5.32";

package/dist/esm/BaseClient.mjs

@@ -6,8 +6,8 @@ export function normalizeClientOptions(options) {
     const headers = mergeHeaders({
         "X-Fern-Language": "JavaScript",
         "X-Fern-SDK-Name": "agentmail",
-        "X-Fern-SDK-Version": "0.5.30",
-        "User-Agent": "agentmail/0.5.30",
+        "X-Fern-SDK-Version": "0.5.32",
+        "User-Agent": "agentmail/0.5.32",
         "X-Fern-Runtime": core.RUNTIME.type,
         "X-Fern-Runtime-Version": core.RUNTIME.version,
     }, options === null || options === void 0 ? void 0 : options.headers);

package/dist/esm/api/resources/agent/client/Client.d.mts

@@ -15,6 +15,8 @@ export declare class AgentClient {
      *
      * A 6-digit OTP is sent to the human's email for verification.
      *
+     * `human_email` is optional. Without it, the inbox can receive email but cannot send to anyone until a human is attached with the attach human endpoint. There is also no way to recover the API key, so store it durably. Calling sign-up again without `human_email` creates a new organization, which needs a different `username`: the original username stays with the lost organization's inbox.
+     *
      * This endpoint is idempotent. Calling it again with the same `human_email` will rotate the API key and resend the OTP if expired.
      *
      * The returned API key has limited permissions until the organization is verified via the verify endpoint.
@@ -31,18 +33,46 @@ export declare class AgentClient {
      *
      * @example
      *     await client.agent.signUp({
-     *         humanEmail: "human_email",
      *         username: "username"
      *     })
      */
     signUp(request: AgentMail.AgentSignupRequest, requestOptions?: AgentClient.RequestOptions): core.HttpResponsePromise<AgentMail.AgentSignupResponse>;
     private __signUp;
+    /**
+     * Attach a human to an unverified agent organization. A 6-digit OTP is sent to the human's email, which you then submit to the verify endpoint.
+     *
+     * Use it after signing up without a `human_email`. Once the human is attached, the organization can send email to that human only, and verification lifts the remaining restrictions. For up to 5 minutes after attaching, sends to the human can still be rejected with a `429` daily send limit error while the API key's cached limits catch up. Wait and retry.
+     *
+     * Calling it again with the same `human_email` does not rotate the API key. It resends the OTP if it was never delivered, or issues a new one if it expired. While the current OTP is still valid, calling it again keeps that OTP and its attempt count. If all 10 attempts are used up, wait until the OTP expires, 24 hours after it was issued, then call it again for a new one.
+     *
+     * Calling it with a different `human_email` replaces the attached human and sends the new human an OTP. An organization can replace its human at most 2 times.
+     *
+     * Only available until the organization is verified.
+     *
+     * **CLI:**
+     * ```bash
+     * agentmail agent attach-human --human-email user@example.com
+     * ```
+     *
+     * @param {AgentMail.AgentAttachHumanRequest} request
+     * @param {AgentClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.ValidationError}
+     * @throws {@link AgentMail.ConflictError}
+     *
+     * @example
+     *     await client.agent.attachHuman({
+     *         humanEmail: "human_email"
+     *     })
+     */
+    attachHuman(request: AgentMail.AgentAttachHumanRequest, requestOptions?: AgentClient.RequestOptions): core.HttpResponsePromise<AgentMail.AgentAttachHumanResponse>;
+    private __attachHuman;
     /**
      * Verify an agent organization using the 6-digit OTP sent to the human's email during sign-up.
      *
      * On success, the organization is upgraded from `agent_unverified` to `agent_verified`, the send allowlist is removed, and free plan entitlements are applied.
      *
-     * The OTP expires after 24 hours and allows a maximum of 10 attempts. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
+     * The OTP expires after 24 hours and allows a maximum of 10 attempts. If the OTP expired, call the attach human endpoint with the same `human_email` to get a new one without rotating the API key. Once all 10 attempts are used, even the correct OTP is rejected, and attach human keeps returning the same OTP until it expires, so wait for it to expire before asking for a new one. An organization that signed up without a `human_email` has no OTP until a human is attached. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
      *
      * **CLI:**
      * ```bash

package/dist/esm/api/resources/agent/client/Client.mjs

@@ -25,6 +25,8 @@ export class AgentClient {
      *
      * A 6-digit OTP is sent to the human's email for verification.
      *
+     * `human_email` is optional. Without it, the inbox can receive email but cannot send to anyone until a human is attached with the attach human endpoint. There is also no way to recover the API key, so store it durably. Calling sign-up again without `human_email` creates a new organization, which needs a different `username`: the original username stays with the lost organization's inbox.
+     *
      * This endpoint is idempotent. Calling it again with the same `human_email` will rotate the API key and resend the OTP if expired.
      *
      * The returned API key has limited permissions until the organization is verified via the verify endpoint.
@@ -41,7 +43,6 @@ export class AgentClient {
      *
      * @example
      *     await client.agent.signUp({
-     *         humanEmail: "human_email",
      *         username: "username"
      *     })
      */
@@ -103,12 +104,106 @@ export class AgentClient {
             return handleNonStatusCodeError(_response.error, _response.rawResponse, "POST", "/v0/agent/sign-up");
         });
     }
+    /**
+     * Attach a human to an unverified agent organization. A 6-digit OTP is sent to the human's email, which you then submit to the verify endpoint.
+     *
+     * Use it after signing up without a `human_email`. Once the human is attached, the organization can send email to that human only, and verification lifts the remaining restrictions. For up to 5 minutes after attaching, sends to the human can still be rejected with a `429` daily send limit error while the API key's cached limits catch up. Wait and retry.
+     *
+     * Calling it again with the same `human_email` does not rotate the API key. It resends the OTP if it was never delivered, or issues a new one if it expired. While the current OTP is still valid, calling it again keeps that OTP and its attempt count. If all 10 attempts are used up, wait until the OTP expires, 24 hours after it was issued, then call it again for a new one.
+     *
+     * Calling it with a different `human_email` replaces the attached human and sends the new human an OTP. An organization can replace its human at most 2 times.
+     *
+     * Only available until the organization is verified.
+     *
+     * **CLI:**
+     * ```bash
+     * agentmail agent attach-human --human-email user@example.com
+     * ```
+     *
+     * @param {AgentMail.AgentAttachHumanRequest} request
+     * @param {AgentClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.ValidationError}
+     * @throws {@link AgentMail.ConflictError}
+     *
+     * @example
+     *     await client.agent.attachHuman({
+     *         humanEmail: "human_email"
+     *     })
+     */
+    attachHuman(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__attachHuman(request, requestOptions));
+    }
+    __attachHuman(request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = mergeHeaders(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, "/v0/agent/human"),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                requestType: "json",
+                body: serializers.AgentAttachHumanRequest.jsonOrThrow(request, {
+                    unrecognizedObjectKeys: "strip",
+                    omitUndefined: true,
+                }),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: serializers.AgentAttachHumanResponse.parseOrThrow(_response.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }),
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 400:
+                        throw new AgentMail.ValidationError(serializers.ValidationErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    case 409:
+                        throw new AgentMail.ConflictError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    default:
+                        throw new errors.AgentMailError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return handleNonStatusCodeError(_response.error, _response.rawResponse, "POST", "/v0/agent/human");
+        });
+    }
     /**
      * Verify an agent organization using the 6-digit OTP sent to the human's email during sign-up.
      *
      * On success, the organization is upgraded from `agent_unverified` to `agent_verified`, the send allowlist is removed, and free plan entitlements are applied.
      *
-     * The OTP expires after 24 hours and allows a maximum of 10 attempts. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
+     * The OTP expires after 24 hours and allows a maximum of 10 attempts. If the OTP expired, call the attach human endpoint with the same `human_email` to get a new one without rotating the API key. Once all 10 attempts are used, even the correct OTP is rejected, and attach human keeps returning the same OTP until it expires, so wait for it to expire before asking for a new one. An organization that signed up without a `human_email` has no OTP until a human is attached. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
      *
      * **CLI:**
      * ```bash

package/dist/esm/api/resources/agent/types/AgentAttachHumanRequest.d.mts

@@ -0,0 +1,7 @@
+/**
+ * Request body to attach a human to an agent organization.
+ */
+export interface AgentAttachHumanRequest {
+    /** Email address of the human who owns the agent. A 6-digit OTP will be sent to this address. */
+    humanEmail: string;
+}

package/dist/esm/api/resources/agent/types/AgentAttachHumanRequest.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/agent/types/AgentAttachHumanResponse.d.mts

@@ -0,0 +1,9 @@
+/**
+ * Response after attaching a human to an agent organization.
+ */
+export interface AgentAttachHumanResponse {
+    /** Email address of the attached human. */
+    humanEmail: string;
+    /** Next steps for the agent, in plain text. */
+    instructions: string;
+}

package/dist/esm/api/resources/agent/types/AgentAttachHumanResponse.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/agent/types/AgentSignupRequest.d.mts

@@ -2,8 +2,11 @@
  * Request body to sign up an agent.
  */
 export interface AgentSignupRequest {
-    /** Email address of the human who owns the agent. A 6-digit OTP will be sent to this address. */
-    humanEmail: string;
+    /**
+     * Email address of the human who owns the agent. A 6-digit OTP will be sent to this address.
+     * Omit it to get a receive-only inbox: it can receive email but cannot send until a human is attached with the attach human endpoint.
+     */
+    humanEmail?: string;
     /** Username for the auto-created inbox (e.g. "my-agent" creates my-agent@agentmail.to). */
     username: string;
     /**

package/dist/esm/api/resources/agent/types/index.d.mts

@@ -1,3 +1,5 @@
+export * from "./AgentAttachHumanRequest.mjs";
+export * from "./AgentAttachHumanResponse.mjs";
 export * from "./AgentSignupRequest.mjs";
 export * from "./AgentSignupResponse.mjs";
 export * from "./AgentVerifyRequest.mjs";

package/dist/esm/api/resources/agent/types/index.mjs

@@ -1,3 +1,5 @@
+export * from "./AgentAttachHumanRequest.mjs";
+export * from "./AgentAttachHumanResponse.mjs";
 export * from "./AgentSignupRequest.mjs";
 export * from "./AgentSignupResponse.mjs";
 export * from "./AgentVerifyRequest.mjs";

package/dist/esm/api/resources/apiKeys/types/ApiKeyPermissions.d.mts

@@ -87,6 +87,8 @@ export interface ApiKeyPermissions {
     podRead?: boolean;
     /** Create pods. */
     podCreate?: boolean;
+    /** Update pods. */
+    podUpdate?: boolean;
     /** Delete pods. */
     podDelete?: boolean;
 }

package/dist/esm/api/resources/apiKeys/types/CreateApiKeyResponse.d.mts

@@ -9,4 +9,5 @@ export interface CreateApiKeyResponse {
     inboxId?: AgentMail.InboxScopeId;
     permissions?: AgentMail.ApiKeyPermissions;
     createdAt: AgentMail.CreatedAt;
+    expiresAt?: AgentMail.ExpiresAt;
 }

package/dist/esm/api/resources/apiKeys/types/CreateBearerApiKeyRequest.d.mts

@@ -1,3 +1,11 @@
 import type * as AgentMail from "../../../index.mjs";
+/**
+ * `expires_at` must be in the future and is immutable once the key exists.
+ * Omitted, the new key inherits the authenticating key's expiry, and never
+ * expires only when that key never does. A key cannot create one that
+ * outlives it: an `expires_at` later than the authenticating key's own
+ * returns `403`.
+ */
 export interface CreateBearerApiKeyRequest extends AgentMail.ApiKeyMutableFields {
+    expiresAt?: AgentMail.ExpiresAt;
 }

package/dist/esm/serialization/resources/agent/types/AgentAttachHumanRequest.d.mts

@@ -0,0 +1,9 @@
+import type * as AgentMail from "../../../../api/index.mjs";
+import * as core from "../../../../core/index.mjs";
+import type * as serializers from "../../../index.mjs";
+export declare const AgentAttachHumanRequest: core.serialization.ObjectSchema<serializers.AgentAttachHumanRequest.Raw, AgentMail.AgentAttachHumanRequest>;
+export declare namespace AgentAttachHumanRequest {
+    interface Raw {
+        human_email: string;
+    }
+}

package/dist/esm/serialization/resources/agent/types/AgentAttachHumanRequest.mjs

@@ -0,0 +1,5 @@
+// This file was auto-generated by Fern from our API Definition.
+import * as core from "../../../../core/index.mjs";
+export const AgentAttachHumanRequest = core.serialization.object({
+    humanEmail: core.serialization.property("human_email", core.serialization.string()),
+});

package/dist/esm/serialization/resources/agent/types/AgentAttachHumanResponse.d.mts

@@ -0,0 +1,10 @@
+import type * as AgentMail from "../../../../api/index.mjs";
+import * as core from "../../../../core/index.mjs";
+import type * as serializers from "../../../index.mjs";
+export declare const AgentAttachHumanResponse: core.serialization.ObjectSchema<serializers.AgentAttachHumanResponse.Raw, AgentMail.AgentAttachHumanResponse>;
+export declare namespace AgentAttachHumanResponse {
+    interface Raw {
+        human_email: string;
+        instructions: string;
+    }
+}

package/dist/esm/serialization/resources/agent/types/AgentAttachHumanResponse.mjs

@@ -0,0 +1,6 @@
+// This file was auto-generated by Fern from our API Definition.
+import * as core from "../../../../core/index.mjs";
+export const AgentAttachHumanResponse = core.serialization.object({
+    humanEmail: core.serialization.property("human_email", core.serialization.string()),
+    instructions: core.serialization.string(),
+});

package/dist/esm/serialization/resources/agent/types/AgentSignupRequest.d.mts

@@ -4,7 +4,7 @@ import type * as serializers from "../../../index.mjs";
 export declare const AgentSignupRequest: core.serialization.ObjectSchema<serializers.AgentSignupRequest.Raw, AgentMail.AgentSignupRequest>;
 export declare namespace AgentSignupRequest {
     interface Raw {
-        human_email: string;
+        human_email?: string | null;
         username: string;
         source?: string | null;
         referrer?: string | null;

package/dist/esm/serialization/resources/agent/types/AgentSignupRequest.mjs

@@ -1,7 +1,7 @@
 // This file was auto-generated by Fern from our API Definition.
 import * as core from "../../../../core/index.mjs";
 export const AgentSignupRequest = core.serialization.object({
-    humanEmail: core.serialization.property("human_email", core.serialization.string()),
+    humanEmail: core.serialization.property("human_email", core.serialization.string().optional()),
     username: core.serialization.string(),
     source: core.serialization.string().optional(),
     referrer: core.serialization.string().optional(),

package/dist/esm/serialization/resources/agent/types/index.d.mts

@@ -1,3 +1,5 @@
+export * from "./AgentAttachHumanRequest.mjs";
+export * from "./AgentAttachHumanResponse.mjs";
 export * from "./AgentSignupRequest.mjs";
 export * from "./AgentSignupResponse.mjs";
 export * from "./AgentVerifyRequest.mjs";

package/dist/esm/serialization/resources/agent/types/index.mjs

@@ -1,3 +1,5 @@
+export * from "./AgentAttachHumanRequest.mjs";
+export * from "./AgentAttachHumanResponse.mjs";
 export * from "./AgentSignupRequest.mjs";
 export * from "./AgentSignupResponse.mjs";
 export * from "./AgentVerifyRequest.mjs";

package/dist/esm/serialization/resources/apiKeys/types/ApiKeyPermissions.d.mts

@@ -42,6 +42,7 @@ export declare namespace ApiKeyPermissions {
         account_update?: boolean | null;
         pod_read?: boolean | null;
         pod_create?: boolean | null;
+        pod_update?: boolean | null;
         pod_delete?: boolean | null;
     }
 }

package/dist/esm/serialization/resources/apiKeys/types/ApiKeyPermissions.mjs

@@ -39,5 +39,6 @@ export const ApiKeyPermissions = core.serialization.object({
     accountUpdate: core.serialization.property("account_update", core.serialization.boolean().optional()),
     podRead: core.serialization.property("pod_read", core.serialization.boolean().optional()),
     podCreate: core.serialization.property("pod_create", core.serialization.boolean().optional()),
+    podUpdate: core.serialization.property("pod_update", core.serialization.boolean().optional()),
     podDelete: core.serialization.property("pod_delete", core.serialization.boolean().optional()),
 });

package/dist/esm/serialization/resources/apiKeys/types/CreateApiKeyResponse.d.mts

@@ -4,6 +4,7 @@ import type * as serializers from "../../../index.mjs";
 import { ApiKeyId } from "./ApiKeyId.mjs";
 import { ApiKeyPermissions } from "./ApiKeyPermissions.mjs";
 import { CreatedAt } from "./CreatedAt.mjs";
+import { ExpiresAt } from "./ExpiresAt.mjs";
 import { InboxScopeId } from "./InboxScopeId.mjs";
 import { Name } from "./Name.mjs";
 import { PodScopeId } from "./PodScopeId.mjs";
@@ -19,5 +20,6 @@ export declare namespace CreateApiKeyResponse {
         inbox_id?: InboxScopeId.Raw | null;
         permissions?: ApiKeyPermissions.Raw | null;
         created_at: CreatedAt.Raw;
+        expires_at?: ExpiresAt.Raw | null;
     }
 }

package/dist/esm/serialization/resources/apiKeys/types/CreateApiKeyResponse.mjs

@@ -3,6 +3,7 @@ import * as core from "../../../../core/index.mjs";
 import { ApiKeyId } from "./ApiKeyId.mjs";
 import { ApiKeyPermissions } from "./ApiKeyPermissions.mjs";
 import { CreatedAt } from "./CreatedAt.mjs";
+import { ExpiresAt } from "./ExpiresAt.mjs";
 import { InboxScopeId } from "./InboxScopeId.mjs";
 import { Name } from "./Name.mjs";
 import { PodScopeId } from "./PodScopeId.mjs";
@@ -16,4 +17,5 @@ export const CreateApiKeyResponse = core.serialization.object({
     inboxId: core.serialization.property("inbox_id", InboxScopeId.optional()),
     permissions: ApiKeyPermissions.optional(),
     createdAt: core.serialization.property("created_at", CreatedAt),
+    expiresAt: core.serialization.property("expires_at", ExpiresAt.optional()),
 });

package/dist/esm/serialization/resources/apiKeys/types/CreateBearerApiKeyRequest.d.mts

@@ -2,8 +2,10 @@ import type * as AgentMail from "../../../../api/index.mjs";
 import * as core from "../../../../core/index.mjs";
 import type * as serializers from "../../../index.mjs";
 import { ApiKeyMutableFields } from "./ApiKeyMutableFields.mjs";
+import { ExpiresAt } from "./ExpiresAt.mjs";
 export declare const CreateBearerApiKeyRequest: core.serialization.ObjectSchema<serializers.CreateBearerApiKeyRequest.Raw, AgentMail.CreateBearerApiKeyRequest>;
 export declare namespace CreateBearerApiKeyRequest {
     interface Raw extends ApiKeyMutableFields.Raw {
+        expires_at?: ExpiresAt.Raw | null;
     }
 }

package/dist/esm/serialization/resources/apiKeys/types/CreateBearerApiKeyRequest.mjs

@@ -1,4 +1,9 @@
 // This file was auto-generated by Fern from our API Definition.
 import * as core from "../../../../core/index.mjs";
 import { ApiKeyMutableFields } from "./ApiKeyMutableFields.mjs";
-export const CreateBearerApiKeyRequest = core.serialization.object({}).extend(ApiKeyMutableFields);
+import { ExpiresAt } from "./ExpiresAt.mjs";
+export const CreateBearerApiKeyRequest = core.serialization
+    .object({
+    expiresAt: core.serialization.property("expires_at", ExpiresAt.optional()),
+})
+    .extend(ApiKeyMutableFields);

package/dist/esm/version.d.mts

@@ -1 +1 @@
-export declare const SDK_VERSION = "0.5.30";
+export declare const SDK_VERSION = "0.5.32";

package/dist/esm/version.mjs

@@ -1 +1 @@
-export const SDK_VERSION = "0.5.30";
+export const SDK_VERSION = "0.5.32";

package/dist/llms.txt

@@ -31,7 +31,7 @@
 - [OpenClaw](https://docs.agentmail.to/integrations/openclaw.md): Install AgentMail as an official OpenClaw plugin with one command. Your agent gets its own inbox plus an allowlisted email channel it can be reached at.
 - [Grok Bot](https://docs.agentmail.to/integrations/grokbot.md): AgentMail's Grok Bot, Grok Build, and Grok API integration
 - [Replit](https://docs.agentmail.to/integrations/replit.md): AgentMail's Replit integration
-- [Vercel](https://docs.agentmail.to/integrations/vercel.md): Provision AgentMail from the Vercel Marketplace and authenticate your Vercel functions with OIDC resource tokens or the provisioned API key
+- [Vercel](https://docs.agentmail.to/integrations/vercel.md): Provision AgentMail from the Vercel Marketplace and authenticate your Vercel functions with the provisioned API key
 - [x402](https://docs.agentmail.to/integrations/x402.md): AgentMail's x402 integration for HTTP-native payments
 - [MPP](https://docs.agentmail.to/integrations/mpp.md): AgentMail's MPP integration for machine-to-machine payments via Stripe
 - [Integrate LiveKit Agents](https://docs.agentmail.to/integrate-livekit-agents.md): A step-by-step guide to integrate with the LiveKit Agents SDK.
@@ -39,6 +39,7 @@
 - [AgentID Sign-In](https://docs.agentmail.to/agentid-sign-in.md): Connect an inbox to a provider, authorize a pending AgentID sign-in, and manage sign-in keys with the AgentMail API and CLI.
 - [AgentID Public-Key Authentication](https://docs.agentmail.to/agentid-public-key-authentication.md): Register a public P-256 key, choose its scope and permissions, and manage it through the current AgentMail API Keys endpoints.
 - [Guide: Sending & Receiving Email](https://docs.agentmail.to/sending-receiving-email.md): A step-by-step guide to the practical workflow of sending initial emails and handling replies to have a full conversation.
+- [Reply & Attachment Extraction](https://docs.agentmail.to/reply-extraction.md): AgentMail strips quoted history and boilerplate from every message into extracted_text and extracted_html, and extracts plain text from PDF, Word, Excel, and text attachments. No Talon or reply-parsing library required.
 - [IMAP & SMTP](https://docs.agentmail.to/imap-smtp.md): Configure IMAP and SMTP to access your AgentMail inboxes using email clients or programmatic access.
 - [Guide: Multi-Tenancy](https://docs.agentmail.to/multi-tenancy.md): How to use pods, scoped API keys, and webhook filtering to build multi-tenant email on AgentMail.
 - [Using Custom Domains](https://docs.agentmail.to/custom-domains.md): A step-by-step guide to configuring your custom domain with AgentMail for enhanced branding and trust.
@@ -59,10 +60,10 @@
 - [Live AgentMail Examples](https://docs.agentmail.to/documentation/examples/live-agent-mail-examples.md)
 - [Frequently Asked Questions (FAQ)](https://docs.agentmail.to/faq.md): Find answers to common questions about AgentMail, from core concepts to best practices and security.
 - [Error Reference](https://docs.agentmail.to/errors.md): Every AgentMail API error code, what it means, and how to fix it.
-- [Email Reply Extraction with Talon](https://docs.agentmail.to/talon-reply-extraction.md): Learn how to use Talon to extract new content from email replies, removing quoted text with 93.8% accuracy.
 - [Join the AgentMail Community](https://docs.agentmail.to/community.md): Connect with the AgentMail team and developers, share what you're building, and get support.
 - [Support](https://docs.agentmail.to/support.md): Get help with AgentMail through our support channels.
 - [Understanding Email Authentication (SPF, DKIM, DMARC)](https://docs.agentmail.to/email-protocols.md): Learn why we ask for DNS records and what SPF, DKIM, and DMARC are.
+- [24-hour Message Expiry](https://docs.agentmail.to/message-expiry.md): Optional 24-hour message access expiry for your organization. Contact us about early access.
 - [SOC 2 Compliance](https://docs.agentmail.to/documentation/resources/security-privacy/soc-2-compliance.md): AgentMail's completed 2025 SOC 2 Type II audit and 2026 annual audit underway with A-LIGN.
 - [Spam & Virus Detection](https://docs.agentmail.to/spam-virus-detection.md): How AgentMail automatically scans incoming emails for spam and viruses.
 - [API Welcome](https://docs.agentmail.to/api-reference.md): Quick overview of the AgentMail SDK
@@ -98,6 +99,7 @@
 ## API Docs
 
 - API Reference > Agent [Sign Up](https://docs.agentmail.to/api-reference/agent/sign-up.md)
+- API Reference > Agent [Attach Human](https://docs.agentmail.to/api-reference/agent/attach-human.md)
 - API Reference > Agent [Verify](https://docs.agentmail.to/api-reference/agent/verify.md)
 - API Reference > Inboxes [List Inboxes](https://docs.agentmail.to/api-reference/inboxes/list.md)
 - API Reference > Inboxes [Search Inboxes](https://docs.agentmail.to/api-reference/inboxes/search.md)
@@ -145,6 +147,7 @@
 - API Reference > Inboxes > Lists [Delete List Entry](https://docs.agentmail.to/api-reference/inboxes/lists/delete.md)
 - API Reference > Inboxes > Metrics [Query Events](https://docs.agentmail.to/api-reference/inboxes/metrics/query-events.md)
 - API Reference > Inboxes > Metrics [Query Usage](https://docs.agentmail.to/api-reference/inboxes/metrics/query-usage.md)
+- API Reference > Inboxes > Metrics [Query Rates](https://docs.agentmail.to/api-reference/inboxes/metrics/query-rates.md)
 - API Reference > Inboxes > Events [List Inbox Events](https://docs.agentmail.to/api-reference/inboxes/events/list.md)
 - API Reference > Inboxes > API Keys [List API Keys](https://docs.agentmail.to/api-reference/inboxes/api-keys/list.md)
 - API Reference > Inboxes > API Keys [Create API Key](https://docs.agentmail.to/api-reference/inboxes/api-keys/create.md)
@@ -191,6 +194,7 @@
 - API Reference > Lists [Delete List Entry](https://docs.agentmail.to/api-reference/lists/delete.md)
 - API Reference > Metrics [Query Events](https://docs.agentmail.to/api-reference/metrics/query-events.md)
 - API Reference > Metrics [Query Usage](https://docs.agentmail.to/api-reference/metrics/query-usage.md)
+- API Reference > Metrics [Query Rates](https://docs.agentmail.to/api-reference/metrics/query-rates.md)
 - API Reference > API Keys [List API Keys](https://docs.agentmail.to/api-reference/api-keys/list.md)
 - API Reference > API Keys [Get API Key](https://docs.agentmail.to/api-reference/api-keys/get.md)
 - API Reference > API Keys [Create API Key](https://docs.agentmail.to/api-reference/api-keys/create.md)
@@ -243,6 +247,7 @@
 - API Reference > Pods > Lists [Delete List Entry](https://docs.agentmail.to/api-reference/pods/lists/delete.md)
 - API Reference > Pods > Metrics [Query Events](https://docs.agentmail.to/api-reference/pods/metrics/query-events.md)
 - API Reference > Pods > Metrics [Query Usage](https://docs.agentmail.to/api-reference/pods/metrics/query-usage.md)
+- API Reference > Pods > Metrics [Query Rates](https://docs.agentmail.to/api-reference/pods/metrics/query-rates.md)
 - API Reference > Pods > API Keys [List API Keys](https://docs.agentmail.to/api-reference/pods/api-keys/list.md)
 - API Reference > Pods > API Keys [Create API Key](https://docs.agentmail.to/api-reference/pods/api-keys/create.md)
 - API Reference > Pods > API Keys [Update API Key](https://docs.agentmail.to/api-reference/pods/api-keys/update.md)

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "agentmail",
-    "version": "0.5.30",
+    "version": "0.5.32",
     "private": false,
     "repository": {
         "type": "git",
@@ -412,7 +412,7 @@
         "lint:fix": "biome lint --fix --unsafe --skip-parse-errors --no-errors-on-unmatched --max-diagnostics=none",
         "check": "biome check --skip-parse-errors --no-errors-on-unmatched --max-diagnostics=none",
         "check:fix": "biome check --fix --unsafe --skip-parse-errors --no-errors-on-unmatched --max-diagnostics=none",
-        "build": "npm run build:cjs && npm run build:esm && node -e \"const https=require('https'),fs=require('fs');const download=(f)=>new Promise((res,rej)=>https.get('https://docs.agentmail.to/'+f,r=>r.pipe(fs.createWriteStream('dist/'+f)).on('finish',res).on('error',rej)));Promise.all(['llms.txt','llms-full.txt'].map(download)).catch(e=>{console.error(e);process.exit(1)});\"",
+        "build": "npm run build:cjs && npm run build:esm && node -e \"const https=require('https'),fs=require('fs');const download=(f)=>new Promise((res,rej)=>https.get('https://docs.agentmail.to/'+f,r=>r.statusCode===200?r.pipe(fs.createWriteStream('dist/'+f)).on('finish',res).on('error',rej):rej(new Error(f+': HTTP '+r.statusCode))).on('error',rej));Promise.all(['llms.txt'].map(download)).catch(e=>{console.error(e);process.exit(1)});\"",
         "build:cjs": "tsc --project ./tsconfig.cjs.json",
         "build:esm": "tsc --project ./tsconfig.esm.json && node scripts/rename-to-esm-files.js dist/esm",
         "test": "vitest",

package/reference.md

@@ -1464,6 +1464,8 @@ Create a new agent organization with an inbox and API key. This endpoint is for
 
 A 6-digit OTP is sent to the human's email for verification.
 
+`human_email` is optional. Without it, the inbox can receive email but cannot send to anyone until a human is attached with the attach human endpoint. There is also no way to recover the API key, so store it durably. Calling sign-up again without `human_email` creates a new organization, which needs a different `username`: the original username stays with the lost organization's inbox.
+
 This endpoint is idempotent. Calling it again with the same `human_email` will rotate the API key and resend the OTP if expired.
 
 The returned API key has limited permissions until the organization is verified via the verify endpoint.
@@ -1487,7 +1489,6 @@ agentmail agent sign-up --human-email user@example.com --username my-agent
 
 ```typescript
 await client.agent.signUp({
-    humanEmail: "human_email",
     username: "username"
 });
 
@@ -1521,6 +1522,84 @@ await client.agent.signUp({
 </dl>
 
 
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.agent.<a href="/src/api/resources/agent/client/Client.ts">attachHuman</a>({ ...params }) -> AgentMail.AgentAttachHumanResponse</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Attach a human to an unverified agent organization. A 6-digit OTP is sent to the human's email, which you then submit to the verify endpoint.
+
+Use it after signing up without a `human_email`. Once the human is attached, the organization can send email to that human only, and verification lifts the remaining restrictions. For up to 5 minutes after attaching, sends to the human can still be rejected with a `429` daily send limit error while the API key's cached limits catch up. Wait and retry.
+
+Calling it again with the same `human_email` does not rotate the API key. It resends the OTP if it was never delivered, or issues a new one if it expired. While the current OTP is still valid, calling it again keeps that OTP and its attempt count. If all 10 attempts are used up, wait until the OTP expires, 24 hours after it was issued, then call it again for a new one.
+
+Calling it with a different `human_email` replaces the attached human and sends the new human an OTP. An organization can replace its human at most 2 times.
+
+Only available until the organization is verified.
+
+**CLI:**
+```bash
+agentmail agent attach-human --human-email user@example.com
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```typescript
+await client.agent.attachHuman({
+    humanEmail: "human_email"
+});
+
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**request:** `AgentMail.AgentAttachHumanRequest` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**requestOptions:** `AgentClient.RequestOptions` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
 </dd>
 </dl>
 </details>
@@ -1541,7 +1620,7 @@ Verify an agent organization using the 6-digit OTP sent to the human's email dur
 
 On success, the organization is upgraded from `agent_unverified` to `agent_verified`, the send allowlist is removed, and free plan entitlements are applied.
 
-The OTP expires after 24 hours and allows a maximum of 10 attempts. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
+The OTP expires after 24 hours and allows a maximum of 10 attempts. If the OTP expired, call the attach human endpoint with the same `human_email` to get a new one without rotating the API key. Once all 10 attempts are used, even the correct OTP is rejected, and attach human keeps returning the same OTP until it expires, so wait for it to expire before asking for a new one. An organization that signed up without a `human_email` has no OTP until a human is attached. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
 
 **CLI:**
 ```bash