agentmail 0.5.45 → 0.5.47

package/dist/esm/api/resources/domains/types/Domain.d.mts

@@ -4,17 +4,24 @@ export interface Domain {
     domainId: AgentMail.DomainId;
     domain: AgentMail.DomainName;
     status: AgentMail.Status;
-    /** Why the domain is not (yet) VERIFIED, when known. `dns_records_missing` / `dns_records_invalid` point at the DNS records. The `ses_*` values mean the records look right and sending-infrastructure validation has not converged: `ses_dkim_pending` / `ses_mail_from_pending` (still checking), `ses_dkim_temporary_failure` / `ses_mail_from_temporary_failure` (a transient error the infrastructure keeps retrying on its own — usually resolves without changes), `ses_dkim_failed` / `ses_mail_from_failed` (a terminal verdict; re-verify after fixing), `ses_dkim_not_started` / `ses_mail_from_not_started` (the attribute was never configured on the identity — re-verify to push it), and `ses_not_verified_for_sending`. Absent when VERIFIED. */
+    /** Why the domain is not (yet) VERIFIED, when known. `dns_records_missing` / `dns_records_invalid` point at the DNS records. The `ses_*` values mean the records look right and sending-infrastructure validation has not converged: `ses_dkim_pending` / `ses_mail_from_pending` (still checking), `ses_dkim_temporary_failure` / `ses_mail_from_temporary_failure` (a transient error the infrastructure keeps retrying on its own — usually resolves without changes), `ses_dkim_failed` / `ses_mail_from_failed` (a terminal verdict; re-verify after fixing), `ses_dkim_not_started` / `ses_mail_from_not_started` (the attribute was never configured on the identity — re-verify to push it), `ses_not_verified_for_sending`, and `tracking_certificate_failed` (the certificate for the open tracking `link.` subdomain was refused; fix CAA or DNS, then turn tracking off and back on). Absent when VERIFIED. */
     reason?: string;
     feedbackEnabled: AgentMail.FeedbackEnabled;
     /** Absent on domains created before this field existed; those receive email. */
     inboundEnabled?: AgentMail.InboundEnabled;
     subdomainsEnabled: AgentMail.SubdomainsEnabled;
     trackingEnabled: AgentMail.TrackingEnabled;
+    /** Present when `tracking_enabled` is true. */
+    trackingStatus?: AgentMail.TrackingStatus;
+    /** Why open tracking is not (yet) VERIFIED, when known. `dns_records_missing` / `dns_records_invalid` point at the `link.<domain>` CNAME. `caa_blocked` means the domain's CAA records leave Amazon out: add the `CAA` record listed in `records`, and AgentMail retries the certificate on its own within a few minutes. `certificate_failed` means the certificate was refused; fix the DNS, then turn tracking off and back on. Absent when `tracking_status` is VERIFIED. */
+    trackingReason?: string;
     /**
-     * A list of DNS records required to verify the domain. Includes the apex
-     * MX record unless `inbound_enabled` is false, and a wildcard MX record
-     * (`*.<domain>`) when `subdomains_enabled` is true.
+     * A list of DNS records for the domain. Includes the apex MX record unless
+     * `inbound_enabled` is false, and a wildcard MX record (`*.<domain>`) when
+     * `subdomains_enabled` is true. When `tracking_enabled` is true it also lists
+     * the `link.<domain>` CNAME and, if the domain's CAA records restrict
+     * issuance, a `CAA` record. Those two are for open tracking only: they
+     * feed `tracking_status` and do not affect `status`.
      */
     records: AgentMail.VerificationRecord[];
     clientId?: AgentMail.ClientId;

package/dist/esm/api/resources/domains/types/RecordType.d.mts

@@ -2,5 +2,6 @@ export declare const RecordType: {
     readonly Txt: "TXT";
     readonly Cname: "CNAME";
     readonly Mx: "MX";
+    readonly Caa: "CAA";
 };
 export type RecordType = (typeof RecordType)[keyof typeof RecordType];

package/dist/esm/api/resources/domains/types/RecordType.mjs

@@ -3,4 +3,5 @@ export const RecordType = {
     Txt: "TXT",
     Cname: "CNAME",
     Mx: "MX",
+    Caa: "CAA",
 };

package/dist/esm/api/resources/domains/types/TrackingEnabled.d.mts

@@ -1,6 +1,7 @@
 /**
- * Serve open tracking pixels from this domain. Adds a required `link.<domain>`
- * CNAME record to `records`, which must be published and verified before
- * `track_opens` can be used on a send.
+ * Serve open tracking pixels from this domain. Adds a `link.<domain>` CNAME
+ * record to `records`. Open tracking reports its readiness in `tracking_status`
+ * and never changes the domain's `status`. Sends with `track_opens` are accepted
+ * once `tracking_status` is `VERIFIED`.
  */
 export type TrackingEnabled = boolean;

package/dist/esm/api/resources/domains/types/TrackingStatus.d.mts

@@ -0,0 +1,10 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * Whether open tracking is ready on this domain, independent of the domain's
+ * `status`. `PENDING`: the `link.<domain>` CNAME is not published yet.
+ * `INVALID`: the CNAME is wrong, or the domain's CAA records do not allow
+ * Amazon to issue its certificate. `VERIFYING`: the certificate is being
+ * issued. `VERIFIED`: `track_opens` can be used. `FAILED`: the certificate was
+ * refused; turn tracking off and back on to request a new one.
+ */
+export type TrackingStatus = AgentMail.VerificationStatus;

package/dist/esm/api/resources/domains/types/TrackingStatus.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/domains/types/UpdateDomainRequest.d.mts

@@ -5,7 +5,8 @@ import type * as AgentMail from "../../../index.mjs";
  * unchanged; an empty body is rejected. Enabling `inbound_enabled` or
  * `subdomains_enabled` on a verified domain returns it to `PENDING` until the
  * newly required MX record (the apex MX, or the wildcard `*.<domain>`) is
- * published and verified.
+ * published and verified. Enabling `tracking_enabled` leaves `status` as it is
+ * and starts `tracking_status` at `PENDING`.
  */
 export interface UpdateDomainRequest {
     feedbackEnabled?: AgentMail.FeedbackEnabled;

package/dist/esm/api/resources/domains/types/VerificationRecord.d.mts

@@ -1,6 +1,6 @@
 import type * as AgentMail from "../../../index.mjs";
 export interface VerificationRecord {
-    /** The type of the DNS record. */
+    /** The type of the DNS record. A `CAA` record is listed only when open tracking is on and the domain's CAA records restrict which certificate authorities may issue for it: add it next to the existing CAA records, not in place of them. */
     type: AgentMail.RecordType;
     /** The name or host of the record. */
     name: string;

package/dist/esm/api/resources/domains/types/index.d.mts

@@ -13,6 +13,7 @@ export * from "./RecordType.mjs";
 export * from "./Status.mjs";
 export * from "./SubdomainsEnabled.mjs";
 export * from "./TrackingEnabled.mjs";
+export * from "./TrackingStatus.mjs";
 export * from "./UpdateDomainRequest.mjs";
 export * from "./VerificationRecord.mjs";
 export * from "./VerificationStatus.mjs";

package/dist/esm/api/resources/domains/types/index.mjs

@@ -13,6 +13,7 @@ export * from "./RecordType.mjs";
 export * from "./Status.mjs";
 export * from "./SubdomainsEnabled.mjs";
 export * from "./TrackingEnabled.mjs";
+export * from "./TrackingStatus.mjs";
 export * from "./UpdateDomainRequest.mjs";
 export * from "./VerificationRecord.mjs";
 export * from "./VerificationStatus.mjs";

package/dist/esm/api/resources/events/types/EventId.d.mts

@@ -1,4 +1,6 @@
 /**
- * ID of event.
+ * ID of the event. It is the same on every retry and redelivery of the event and on every webhook
+ * or WebSocket subscription that receives it, so use it to deduplicate. The format varies by event
+ * type; treat it as an opaque string.
  */
 export type EventId = string;

package/dist/esm/api/resources/events/types/EventType.d.mts

@@ -4,6 +4,8 @@ export declare const EventType: {
     readonly MessageReceivedBlocked: "message.received.blocked";
     readonly MessageReceivedUnauthenticated: "message.received.unauthenticated";
     readonly MessageSecurityCompleted: "message.security.completed";
+    readonly MessageSecurityReview: "message.security.review";
+    readonly MessageSecurityOverride: "message.security.override";
     readonly MessageSent: "message.sent";
     readonly MessageDelivered: "message.delivered";
     readonly MessageBounced: "message.bounced";

package/dist/esm/api/resources/events/types/EventType.mjs

@@ -5,6 +5,8 @@ export const EventType = {
     MessageReceivedBlocked: "message.received.blocked",
     MessageReceivedUnauthenticated: "message.received.unauthenticated",
     MessageSecurityCompleted: "message.security.completed",
+    MessageSecurityReview: "message.security.review",
+    MessageSecurityOverride: "message.security.override",
     MessageSent: "message.sent",
     MessageDelivered: "message.delivered",
     MessageBounced: "message.bounced",

package/dist/esm/api/resources/events/types/InboxIds.d.mts

@@ -1,4 +1,4 @@
 /**
- * Inboxes for which to send events. Maximum 10 per webhook.
+ * Inboxes for which to send events.
  */
 export type InboxIds = string[];

package/dist/esm/api/resources/events/types/MessageReceivedEvent.d.mts

@@ -6,6 +6,6 @@ export interface MessageReceivedEvent {
     type: "event";
     eventType: AgentMail.MessageReceivedEventType;
     eventId: AgentMail.EventId;
-    message: AgentMail.Message;
+    message: AgentMail.ReceivedMessage;
     thread: AgentMail.ThreadItem;
 }

package/dist/esm/api/resources/events/types/MessageSecurityCompletedEvent.d.mts

@@ -1,8 +1,9 @@
 import type * as AgentMail from "../../../index.mjs";
 /**
- * Agent Armor reached a verdict on a received message. Sent only for `complete` results: an `unavailable` result
- * sends no event. Sent once per message and inbox; `event_id` is stable, so use it to deduplicate. Not sent for
- * messages labeled `spam`, `blocked`, `unauthenticated`, or `trash`: read those through the API.
+ * Agent Armor reached a verdict on a received message. Sent only in monitor mode, and only for `complete` results:
+ * an `unavailable` result sends no event. Sent once per message and inbox; `event_id` is stable, so use it to
+ * deduplicate. Not sent for messages labeled `spam`, `blocked`, `unauthenticated`, or `trash`: read those through
+ * the API.
  */
 export interface MessageSecurityCompletedEvent {
     type: "event";

package/dist/esm/api/resources/events/types/MessageSecurityOverride.d.mts

@@ -0,0 +1,10 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * The message someone released, and the record of the release. Fetch the message for its content.
+ */
+export interface MessageSecurityOverride {
+    organizationId: AgentMail.OrganizationId;
+    inboxId: AgentMail.inboxes.InboxId;
+    messageId: AgentMail.MessageId;
+    manualOverride: AgentMail.AgentArmorManualOverride;
+}

package/dist/esm/api/resources/events/types/MessageSecurityOverride.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/events/types/MessageSecurityOverrideEvent.d.mts

@@ -0,0 +1,13 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * Someone released a message Agent Armor held for review. Its `message.received` is sent to your agents as well,
+ * and the two can arrive in either order.
+ * Sent once per message and inbox; `event_id` is stable. Not sent for messages labeled `spam`, `blocked`,
+ * `unauthenticated`, or `trash`.
+ */
+export interface MessageSecurityOverrideEvent {
+    type: "event";
+    eventType: "message.security.override";
+    eventId: AgentMail.EventId;
+    message: AgentMail.MessageSecurityOverride;
+}

package/dist/esm/api/resources/events/types/MessageSecurityOverrideEvent.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/events/types/MessageSecurityReviewEvent.d.mts

@@ -0,0 +1,13 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * In hold mode, Agent Armor held a received message for review: your agents are not sent its `message.received`
+ * until someone releases it. The message carries the `agent-armor-held` label until then. Sent once per message and
+ * inbox; `event_id` is stable. Not sent for messages labeled `spam`, `blocked`, `unauthenticated`, or `trash`: list
+ * held mail by the `agent-armor-held` label instead.
+ */
+export interface MessageSecurityReviewEvent {
+    type: "event";
+    eventType: "message.security.review";
+    eventId: AgentMail.EventId;
+    message: AgentMail.MessageSecurity;
+}

package/dist/esm/api/resources/events/types/MessageSecurityReviewEvent.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/events/types/PodIds.d.mts

@@ -1,4 +1,4 @@
 /**
- * Pods for which to send events. Maximum 10 per webhook.
+ * Pods for which to send events.
  */
 export type PodIds = string[];

package/dist/esm/api/resources/events/types/ReceivedMessage.d.mts

@@ -0,0 +1,18 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * The received message. The body (`text`, `html`, `extracted_text`, and `extracted_html`) is included
+ * inline only when it is small enough. Webhooks omit it when the stored body is larger than 64 KiB;
+ * WebSocket events also omit it when the serialized event would be larger than 30 KiB. When the body
+ * is omitted, `body_url` and `body_expires_at` are set instead.
+ */
+export interface ReceivedMessage extends AgentMail.Message {
+    /**
+     * Pre-signed URL that downloads the stored body as a JSON object including `text`, `html`,
+     * `extracted_text`, and `extracted_html`. Present only when the body is omitted from the event.
+     * Valid until `body_expires_at`, one hour after the event was built. The body stays available
+     * through the get message endpoint after the URL expires.
+     */
+    bodyUrl?: string;
+    /** Time at which `body_url` expires. Present only with `body_url`. */
+    bodyExpiresAt?: Date;
+}

package/dist/esm/api/resources/events/types/ReceivedMessage.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/events/types/index.d.mts

@@ -22,9 +22,13 @@ export * from "./MessageReceivedEventType.mjs";
 export * from "./MessageRejectedEvent.mjs";
 export * from "./MessageSecurity.mjs";
 export * from "./MessageSecurityCompletedEvent.mjs";
+export * from "./MessageSecurityOverride.mjs";
+export * from "./MessageSecurityOverrideEvent.mjs";
+export * from "./MessageSecurityReviewEvent.mjs";
 export * from "./MessageSentEvent.mjs";
 export * from "./Open.mjs";
 export * from "./PodIds.mjs";
+export * from "./ReceivedMessage.mjs";
 export * from "./Recipient.mjs";
 export * from "./Reject.mjs";
 export * from "./Send.mjs";

package/dist/esm/api/resources/events/types/index.mjs

@@ -22,9 +22,13 @@ export * from "./MessageReceivedEventType.mjs";
 export * from "./MessageRejectedEvent.mjs";
 export * from "./MessageSecurity.mjs";
 export * from "./MessageSecurityCompletedEvent.mjs";
+export * from "./MessageSecurityOverride.mjs";
+export * from "./MessageSecurityOverrideEvent.mjs";
+export * from "./MessageSecurityReviewEvent.mjs";
 export * from "./MessageSentEvent.mjs";
 export * from "./Open.mjs";
 export * from "./PodIds.mjs";
+export * from "./ReceivedMessage.mjs";
 export * from "./Recipient.mjs";
 export * from "./Reject.mjs";
 export * from "./Send.mjs";

package/dist/esm/api/resources/files/errors/FileForbiddenError.d.mts

@@ -0,0 +1,6 @@
+import type * as core from "../../../../core/index.mjs";
+import * as errors from "../../../../errors/index.mjs";
+import type * as AgentMail from "../../../index.mjs";
+export declare class FileForbiddenError extends errors.AgentMailError {
+    constructor(body: AgentMail.ErrorResponse, rawResponse?: core.RawResponse);
+}

package/dist/esm/api/resources/files/errors/FileForbiddenError.mjs

@@ -0,0 +1,17 @@
+// This file was auto-generated by Fern from our API Definition.
+import * as errors from "../../../../errors/index.mjs";
+export class FileForbiddenError extends errors.AgentMailError {
+    constructor(body, rawResponse) {
+        super({
+            message: "FileForbiddenError",
+            statusCode: 403,
+            body: body,
+            rawResponse: rawResponse,
+        });
+        Object.setPrototypeOf(this, new.target.prototype);
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, this.constructor);
+        }
+        this.name = this.constructor.name;
+    }
+}

package/dist/esm/api/resources/files/errors/index.d.mts

@@ -0,0 +1 @@
+export * from "./FileForbiddenError.mjs";

package/dist/esm/api/resources/files/errors/index.mjs

@@ -0,0 +1 @@
+export * from "./FileForbiddenError.mjs";

package/dist/esm/api/resources/files/exports.d.mts

@@ -0,0 +1 @@
+export * from "./index.mjs";

package/dist/esm/api/resources/files/exports.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export * from "./index.mjs";

package/dist/esm/api/resources/files/index.d.mts

@@ -0,0 +1,2 @@
+export * from "./errors/index.mjs";
+export * from "./types/index.mjs";

package/dist/esm/api/resources/files/index.mjs

@@ -0,0 +1,2 @@
+export * from "./errors/index.mjs";
+export * from "./types/index.mjs";

package/dist/esm/api/resources/files/types/CreateFileRequest.d.mts

@@ -0,0 +1,12 @@
+import type * as AgentMail from "../../../index.mjs";
+export interface CreateFileRequest {
+    path: AgentMail.FilePath;
+    size: AgentMail.FileSize;
+    sha256: AgentMail.FileSha256;
+    contentType?: AgentMail.FileContentType;
+    /**
+     * When the file expires, in the future. Rounded up to a whole second and returned in UTC. On a retry, send
+     * the `expires_at` the first response returned.
+     */
+    expiresAt?: AgentMail.FileExpiresAt;
+}

package/dist/esm/api/resources/files/types/CreateFileRequest.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/CreateFileResponse.d.mts

@@ -0,0 +1,7 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * The created file. A pending file carries `upload`; a create that returns an existing `ready` file does not.
+ */
+export interface CreateFileResponse extends AgentMail.File_ {
+    upload?: AgentMail.FileUpload;
+}

package/dist/esm/api/resources/files/types/CreateFileResponse.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/FileContentType.d.mts

@@ -0,0 +1,4 @@
+/**
+ * The file's MIME type, such as `application/pdf`. Defaults to `application/octet-stream`.
+ */
+export type FileContentType = string;

package/dist/esm/api/resources/files/types/FileContentType.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/FileExpiresAt.d.mts

@@ -0,0 +1,5 @@
+/**
+ * When the file expires. After it, the file is gone from get and list and its path is free; its bytes are
+ * deleted soon after. Absent for a file that never expires.
+ */
+export type FileExpiresAt = Date;

package/dist/esm/api/resources/files/types/FileExpiresAt.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/FileId.d.mts

@@ -0,0 +1,4 @@
+/**
+ * ID of the file. A UUID.
+ */
+export type FileId = string;

package/dist/esm/api/resources/files/types/FileId.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/FileItem.d.mts

@@ -0,0 +1,20 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * A file, as a list returns it.
+ */
+export interface FileItem {
+    fileId: AgentMail.FileId;
+    inboxId: AgentMail.inboxes.InboxId;
+    email: AgentMail.inboxes.Email;
+    path: AgentMail.FilePath;
+    name: AgentMail.FileName;
+    size: AgentMail.FileSize;
+    contentType: AgentMail.FileContentType;
+    sha256: AgentMail.FileSha256;
+    status: AgentMail.FileStatus;
+    /** When the file was created. */
+    createdAt: Date;
+    /** When the file last changed, such as when its upload was completed. */
+    updatedAt: Date;
+    expiresAt?: AgentMail.FileExpiresAt;
+}

package/dist/esm/api/resources/files/types/FileItem.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/FileName.d.mts

@@ -0,0 +1,4 @@
+/**
+ * The path's last segment. A download saves under this name.
+ */
+export type FileName = string;

package/dist/esm/api/resources/files/types/FileName.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/FilePath.d.mts

@@ -0,0 +1,7 @@
+/**
+ * Where the file lives in its inbox's drive, such as `reports/q3.pdf`. Unique within the inbox. Segments are
+ * separated by `/`, with no leading or trailing `/`, no empty, `.` or `..` segment, no `\` and no control or
+ * invisible characters. At most 1,024 bytes, and at most 255 bytes per segment. Stored in Unicode NFC, so two
+ * spellings of one name are one path. Case is kept.
+ */
+export type FilePath = string;

package/dist/esm/api/resources/files/types/FilePath.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/FileSha256.d.mts

@@ -0,0 +1,5 @@
+/**
+ * The base64 encoding of the file's 32-byte SHA-256 digest, as S3's `x-amz-checksum-sha256` takes it (44
+ * characters, ending in `=`). S3 refuses an upload whose bytes don't match.
+ */
+export type FileSha256 = string;

package/dist/esm/api/resources/files/types/FileSha256.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/FileSize.d.mts

@@ -0,0 +1,4 @@
+/**
+ * Size of the file in bytes. At most 104,857,600 (100 MiB).
+ */
+export type FileSize = number;

package/dist/esm/api/resources/files/types/FileSize.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/FileStatus.d.mts

@@ -0,0 +1,9 @@
+/**
+ * `pending` until its bytes are uploaded and the upload is completed, then `ready`. Only a `ready` file has a
+ * download URL. A pending file is deleted if it isn't completed within a day.
+ */
+export declare const FileStatus: {
+    readonly Pending: "pending";
+    readonly Ready: "ready";
+};
+export type FileStatus = (typeof FileStatus)[keyof typeof FileStatus];

package/dist/esm/api/resources/files/types/FileStatus.mjs

@@ -0,0 +1,9 @@
+// This file was auto-generated by Fern from our API Definition.
+/**
+ * `pending` until its bytes are uploaded and the upload is completed, then `ready`. Only a `ready` file has a
+ * download URL. A pending file is deleted if it isn't completed within a day.
+ */
+export const FileStatus = {
+    Pending: "pending",
+    Ready: "ready",
+};

package/dist/esm/api/resources/files/types/FileUpload.d.mts

@@ -0,0 +1,15 @@
+/**
+ * Where to upload a pending file's bytes: one HTTP `PUT` to `url` with exactly `headers` and the file's bytes as
+ * the body. Every header is signed, so S3 refuses the upload if any is missing or different, and refuses bytes
+ * whose size or SHA-256 doesn't match the file. Then call Complete File.
+ */
+export interface FileUpload {
+    /** Always `PUT`. */
+    method: "PUT";
+    /** The presigned S3 URL. No API key is needed to use it. */
+    url: string;
+    /** The headers to send with the `PUT`, exactly as given. */
+    headers: Record<string, string>;
+    /** When `url` stops working, at most an hour after it was issued. Send the identical create request again for a fresh one. */
+    expiresAt: Date;
+}

package/dist/esm/api/resources/files/types/FileUpload.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/File_.d.mts

@@ -0,0 +1,14 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * A file. A `ready` file returned to a caller with the `file_read` permission carries a signed `download_url`.
+ */
+export interface File_ extends AgentMail.FileItem {
+    /**
+     * A signed URL that downloads the file's bytes, named by `name`. No API key is needed to use it, so treat it
+     * as a secret. It works until `download_expires_at`, at most an hour, even after the file is deleted. Get the
+     * file again for a fresh one.
+     */
+    downloadUrl?: string;
+    /** When `download_url` stops working. Never after the file's own expiry. */
+    downloadExpiresAt?: Date;
+}

package/dist/esm/api/resources/files/types/File_.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/ListFilesResponse.d.mts

@@ -0,0 +1,8 @@
+import type * as AgentMail from "../../../index.mjs";
+export interface ListFilesResponse {
+    count: AgentMail.Count;
+    limit: AgentMail.Limit;
+    nextPageToken?: AgentMail.PageToken;
+    /** The inbox's files in path order. A list has no download URLs; get a file for one. */
+    files: AgentMail.FileItem[];
+}

package/dist/esm/api/resources/files/types/ListFilesResponse.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/files/types/index.d.mts

@@ -0,0 +1,14 @@
+export * from "./CreateFileRequest.mjs";
+export * from "./CreateFileResponse.mjs";
+export * from "./File_.mjs";
+export * from "./FileContentType.mjs";
+export * from "./FileExpiresAt.mjs";
+export * from "./FileId.mjs";
+export * from "./FileItem.mjs";
+export * from "./FileName.mjs";
+export * from "./FilePath.mjs";
+export * from "./FileSha256.mjs";
+export * from "./FileSize.mjs";
+export * from "./FileStatus.mjs";
+export * from "./FileUpload.mjs";
+export * from "./ListFilesResponse.mjs";

package/dist/esm/api/resources/files/types/index.mjs

@@ -0,0 +1,14 @@
+export * from "./CreateFileRequest.mjs";
+export * from "./CreateFileResponse.mjs";
+export * from "./File_.mjs";
+export * from "./FileContentType.mjs";
+export * from "./FileExpiresAt.mjs";
+export * from "./FileId.mjs";
+export * from "./FileItem.mjs";
+export * from "./FileName.mjs";
+export * from "./FilePath.mjs";
+export * from "./FileSha256.mjs";
+export * from "./FileSize.mjs";
+export * from "./FileStatus.mjs";
+export * from "./FileUpload.mjs";
+export * from "./ListFilesResponse.mjs";

package/dist/esm/api/resources/inboxes/client/Client.d.mts

@@ -7,6 +7,7 @@ import { ApiKeysClient } from "../resources/apiKeys/client/Client.mjs";
 import { CalendarClient } from "../resources/calendar/client/Client.mjs";
 import { DraftsClient } from "../resources/drafts/client/Client.mjs";
 import { EventsClient } from "../resources/events/client/Client.mjs";
+import { FilesClient } from "../resources/files/client/Client.mjs";
 import { ListsClient } from "../resources/lists/client/Client.mjs";
 import { MessagesClient } from "../resources/messages/client/Client.mjs";
 import { MetricsClient } from "../resources/metrics/client/Client.mjs";
@@ -29,6 +30,7 @@ export declare class InboxesClient {
     protected _apiKeys: ApiKeysClient | undefined;
     protected _accounts: AccountsClient | undefined;
     protected _calendar: CalendarClient | undefined;
+    protected _files: FilesClient | undefined;
     constructor(options?: InboxesClient.Options);
     get threads(): ThreadsClient;
     get messages(): MessagesClient;
@@ -40,6 +42,7 @@ export declare class InboxesClient {
     get apiKeys(): ApiKeysClient;
     get accounts(): AccountsClient;
     get calendar(): CalendarClient;
+    get files(): FilesClient;
     /**
      * **CLI:**
      * ```bash