agentmail 0.5.45 → 0.5.47

package/dist/cjs/api/resources/inboxes/resources/files/exports.js

@@ -0,0 +1,21 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FilesClient = void 0;
+var Client_js_1 = require("./client/Client.js");
+Object.defineProperty(exports, "FilesClient", { enumerable: true, get: function () { return Client_js_1.FilesClient; } });
+__exportStar(require("./client/index.js"), exports);

package/dist/cjs/api/resources/inboxes/resources/files/index.d.ts

@@ -0,0 +1 @@
+export * from "./client/index.js";

package/dist/cjs/api/resources/inboxes/resources/files/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./client/index.js"), exports);

package/dist/cjs/api/resources/inboxes/resources/index.d.ts

@@ -8,6 +8,8 @@ export * from "./drafts/client/requests/index.js";
 export * as drafts from "./drafts/index.js";
 export * from "./events/client/requests/index.js";
 export * as events from "./events/index.js";
+export * from "./files/client/requests/index.js";
+export * as files from "./files/index.js";
 export * from "./lists/client/requests/index.js";
 export * as lists from "./lists/index.js";
 export * from "./messages/client/requests/index.js";

package/dist/cjs/api/resources/inboxes/resources/index.js

@@ -36,7 +36,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.webhooks = exports.threads = exports.metrics = exports.messages = exports.lists = exports.events = exports.drafts = exports.calendar = exports.apiKeys = exports.accounts = void 0;
+exports.webhooks = exports.threads = exports.metrics = exports.messages = exports.lists = exports.files = exports.events = exports.drafts = exports.calendar = exports.apiKeys = exports.accounts = void 0;
 __exportStar(require("./accounts/client/requests/index.js"), exports);
 exports.accounts = __importStar(require("./accounts/index.js"));
 __exportStar(require("./apiKeys/client/requests/index.js"), exports);
@@ -47,6 +47,8 @@ __exportStar(require("./drafts/client/requests/index.js"), exports);
 exports.drafts = __importStar(require("./drafts/index.js"));
 __exportStar(require("./events/client/requests/index.js"), exports);
 exports.events = __importStar(require("./events/index.js"));
+__exportStar(require("./files/client/requests/index.js"), exports);
+exports.files = __importStar(require("./files/index.js"));
 __exportStar(require("./lists/client/requests/index.js"), exports);
 exports.lists = __importStar(require("./lists/index.js"));
 __exportStar(require("./messages/client/requests/index.js"), exports);

package/dist/cjs/api/resources/inboxes/resources/messages/client/Client.d.ts

@@ -94,6 +94,34 @@ export declare class MessagesClient {
      */
     createAgentArmorFeedback(inbox_id: AgentMail.inboxes.InboxId, message_id: AgentMail.MessageId, request: AgentMail.CreateAgentArmorFeedbackRequest, requestOptions?: MessagesClient.RequestOptions): core.HttpResponsePromise<AgentMail.AgentArmorFeedback>;
     private __createAgentArmorFeedback;
+    /**
+     * @beta This endpoint is in pre-release and may change.
+     *
+     * Release a message Agent Armor held for review in hold mode: your agents are sent its `message.received`
+     * event, `message.security.override` is sent too, in either order, and its `agent-armor-held` label is removed.
+     * Only a message whose verdict is `review` and that is still held can be released; anything else answers `409`.
+     * Repeating a release with the same reason and the same API key returns the first release; any other repeat
+     * answers `409`.
+     *
+     * Requires the opt-in `agent_armor_release` permission and permission to read the message. An organization
+     * admin can also release from the console.
+     *
+     * @param {AgentMail.inboxes.InboxId} inbox_id
+     * @param {AgentMail.MessageId} message_id
+     * @param {AgentMail.ReleaseAgentArmorMessageRequest} request
+     * @param {MessagesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.ValidationError}
+     * @throws {@link AgentMail.NotFoundError}
+     * @throws {@link AgentMail.ConflictError}
+     *
+     * @example
+     *     await client.inboxes.messages.releaseAgentArmorMessage("inbox_id", "message_id", {
+     *         reason: "reason"
+     *     })
+     */
+    releaseAgentArmorMessage(inbox_id: AgentMail.inboxes.InboxId, message_id: AgentMail.MessageId, request: AgentMail.ReleaseAgentArmorMessageRequest, requestOptions?: MessagesClient.RequestOptions): core.HttpResponsePromise<AgentMail.ReleaseAgentArmorMessageResponse>;
+    private __releaseAgentArmorMessage;
     /**
      * Fetch metadata for up to 500 messages in one request. Missing or
      * restricted IDs are silently omitted; compare `count` against `limit`

package/dist/cjs/api/resources/inboxes/resources/messages/client/Client.js

@@ -410,6 +410,107 @@ class MessagesClient {
             return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "POST", "/v0/inboxes/{inbox_id}/messages/{message_id}/agent-armor/feedback");
         });
     }
+    /**
+     * @beta This endpoint is in pre-release and may change.
+     *
+     * Release a message Agent Armor held for review in hold mode: your agents are sent its `message.received`
+     * event, `message.security.override` is sent too, in either order, and its `agent-armor-held` label is removed.
+     * Only a message whose verdict is `review` and that is still held can be released; anything else answers `409`.
+     * Repeating a release with the same reason and the same API key returns the first release; any other repeat
+     * answers `409`.
+     *
+     * Requires the opt-in `agent_armor_release` permission and permission to read the message. An organization
+     * admin can also release from the console.
+     *
+     * @param {AgentMail.inboxes.InboxId} inbox_id
+     * @param {AgentMail.MessageId} message_id
+     * @param {AgentMail.ReleaseAgentArmorMessageRequest} request
+     * @param {MessagesClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link AgentMail.ValidationError}
+     * @throws {@link AgentMail.NotFoundError}
+     * @throws {@link AgentMail.ConflictError}
+     *
+     * @example
+     *     await client.inboxes.messages.releaseAgentArmorMessage("inbox_id", "message_id", {
+     *         reason: "reason"
+     *     })
+     */
+    releaseAgentArmorMessage(inbox_id, message_id, request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__releaseAgentArmorMessage(inbox_id, message_id, request, requestOptions));
+    }
+    __releaseAgentArmorMessage(inbox_id, message_id, request, requestOptions) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+            const _authRequest = yield this._options.authProvider.getAuthRequest();
+            const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, (_a = this._options) === null || _a === void 0 ? void 0 : _a.headers, requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.headers);
+            const _response = yield core.fetcher({
+                url: core.url.join((_b = (yield core.Supplier.get(this._options.baseUrl))) !== null && _b !== void 0 ? _b : ((_c = (yield core.Supplier.get(this._options.environment))) !== null && _c !== void 0 ? _c : environments.AgentMailEnvironment.Prod)
+                    .http, `/v0/inboxes/${core.url.encodePathParam(serializers.inboxes.InboxId.jsonOrThrow(inbox_id, { omitUndefined: true }))}/messages/${core.url.encodePathParam(serializers.MessageId.jsonOrThrow(message_id, { omitUndefined: true }))}/agent-armor/release`),
+                method: "POST",
+                headers: _headers,
+                contentType: "application/json",
+                queryParameters: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.queryParams,
+                requestType: "json",
+                body: serializers.ReleaseAgentArmorMessageRequest.jsonOrThrow(request, {
+                    unrecognizedObjectKeys: "strip",
+                    omitUndefined: true,
+                }),
+                timeoutMs: ((_f = (_d = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.timeoutInSeconds) !== null && _d !== void 0 ? _d : (_e = this._options) === null || _e === void 0 ? void 0 : _e.timeoutInSeconds) !== null && _f !== void 0 ? _f : 60) * 1000,
+                maxRetries: (_g = requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.maxRetries) !== null && _g !== void 0 ? _g : (_h = this._options) === null || _h === void 0 ? void 0 : _h.maxRetries,
+                abortSignal: requestOptions === null || requestOptions === void 0 ? void 0 : requestOptions.abortSignal,
+                fetchFn: (_j = this._options) === null || _j === void 0 ? void 0 : _j.fetch,
+                logging: this._options.logging,
+            });
+            if (_response.ok) {
+                return {
+                    data: serializers.ReleaseAgentArmorMessageResponse.parseOrThrow(_response.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }),
+                    rawResponse: _response.rawResponse,
+                };
+            }
+            if (_response.error.reason === "status-code") {
+                switch (_response.error.statusCode) {
+                    case 400:
+                        throw new AgentMail.ValidationError(serializers.ValidationErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    case 404:
+                        throw new AgentMail.NotFoundError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    case 409:
+                        throw new AgentMail.ConflictError(serializers.ErrorResponse.parseOrThrow(_response.error.body, {
+                            unrecognizedObjectKeys: "passthrough",
+                            allowUnrecognizedUnionMembers: true,
+                            allowUnrecognizedEnumValues: true,
+                            skipValidation: true,
+                            breadcrumbsPrefix: ["response"],
+                        }), _response.rawResponse);
+                    default:
+                        throw new errors.AgentMailError({
+                            statusCode: _response.error.statusCode,
+                            body: _response.error.body,
+                            rawResponse: _response.rawResponse,
+                        });
+                }
+            }
+            return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "POST", "/v0/inboxes/{inbox_id}/messages/{message_id}/agent-armor/release");
+        });
+    }
     /**
      * Fetch metadata for up to 500 messages in one request. Missing or
      * restricted IDs are silently omitted; compare `count` against `limit`

package/dist/cjs/api/resources/index.d.ts

@@ -27,6 +27,9 @@ export * as drafts from "./drafts/index.js";
 export * from "./drafts/types/index.js";
 export * as events from "./events/index.js";
 export * from "./events/types/index.js";
+export * from "./files/errors/index.js";
+export * as files from "./files/index.js";
+export * from "./files/types/index.js";
 export * as inboxEvents from "./inboxEvents/index.js";
 export * from "./inboxEvents/types/index.js";
 export * as inboxes from "./inboxes/index.js";

package/dist/cjs/api/resources/index.js

@@ -36,7 +36,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.websockets = exports.webhooks = exports.threads = exports.pods = exports.organizations = exports.metrics = exports.messages = exports.lists = exports.inboxes = exports.inboxEvents = exports.events = exports.drafts = exports.domains = exports.calendar = exports.auth = exports.attachments = exports.apps = exports.apiKeys = exports.agentArmor = exports.agent = exports.accounts = void 0;
+exports.websockets = exports.webhooks = exports.threads = exports.pods = exports.organizations = exports.metrics = exports.messages = exports.lists = exports.inboxes = exports.inboxEvents = exports.files = exports.events = exports.drafts = exports.domains = exports.calendar = exports.auth = exports.attachments = exports.apps = exports.apiKeys = exports.agentArmor = exports.agent = exports.accounts = void 0;
 __exportStar(require("./accounts/client/requests/index.js"), exports);
 exports.accounts = __importStar(require("./accounts/index.js"));
 __exportStar(require("./accounts/types/index.js"), exports);
@@ -66,6 +66,9 @@ exports.drafts = __importStar(require("./drafts/index.js"));
 __exportStar(require("./drafts/types/index.js"), exports);
 exports.events = __importStar(require("./events/index.js"));
 __exportStar(require("./events/types/index.js"), exports);
+__exportStar(require("./files/errors/index.js"), exports);
+exports.files = __importStar(require("./files/index.js"));
+__exportStar(require("./files/types/index.js"), exports);
 exports.inboxEvents = __importStar(require("./inboxEvents/index.js"));
 __exportStar(require("./inboxEvents/types/index.js"), exports);
 exports.inboxes = __importStar(require("./inboxes/index.js"));

package/dist/cjs/api/resources/messages/types/Message.d.ts

@@ -24,6 +24,7 @@ export interface Message {
     calendarEventId?: AgentMail.MessageCalendarEventId;
     references?: AgentMail.MessageReferences;
     headers?: AgentMail.MessageHeaders;
+    authenticationResults?: AgentMail.MessageAuthenticationResults;
     agentArmor?: AgentMail.AgentArmorResult;
     size: AgentMail.MessageSize;
     updatedAt: AgentMail.MessageUpdatedAt;

package/dist/cjs/api/resources/messages/types/MessageAuthenticationDomain.d.ts

@@ -0,0 +1,5 @@
+/**
+ * The domain an authentication verdict is about, lowercase. Present only beside its verdict:
+ * when the verdict is withheld, so is the domain.
+ */
+export type MessageAuthenticationDomain = string;

package/dist/cjs/api/resources/messages/types/MessageAuthenticationDomain.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/api/resources/messages/types/MessageAuthenticationResults.d.ts

@@ -0,0 +1,56 @@
+import type * as AgentMail from "../../../index.js";
+/**
+ * Per-mechanism SPF, DKIM, and DMARC verdicts for a received message, each with the domain it
+ * is about, kept only where they speak for the sender's From identity. A verdict that could
+ * not be computed is absent, so the field can be `{}`. The field is absent on sent messages
+ * and on messages received before 2026-09-09; the `*_domain` and `arc_sealer` keys appear on
+ * messages received after they were introduced.
+ *
+ * The verdicts are the ones Amazon SES computed when the message reached AgentMail, with one
+ * exception. Forwarded mail fails DMARC at the receiving hop by construction. When AgentMail
+ * delivers a forwarded message as authenticated because a trusted forwarder (such as Google or
+ * Microsoft) sealed a valid ARC chain vouching for the original, the field reports the
+ * verdicts that forwarder recorded for the original message, and `arc_sealer` names it.
+ *
+ * - `spf` is about the envelope MAIL FROM (Return-Path) domain, named in `spf_domain`. It is
+ *   present only when that domain is aligned with the sender's domain (the From mailbox, or
+ *   the Sender header when From spans domains), meaning the two share an organizational
+ *   domain: `mail.example.com` is aligned with `example.com`. An unaligned SPF result is
+ *   withheld whatever its value.
+ * - `dkim` is the DKIM verdict, and `dkim_domain` the signing domain (the `d=` tag). On
+ *   directly received mail the domain is named only when every DKIM signature on the message
+ *   is from the same domain; a message signed by more than one domain (a sender and its email
+ *   provider, for instance) keeps the verdict and omits the domain. `dkim_domain` is the
+ *   signing domain as written, so compare it with the From domain before relying on it.
+ * - `dmarc` is the DMARC verdict for the From domain, named in `dmarc_domain`.
+ * - `dkim` and `dmarc` are withheld when the From list spans more than one domain or could not
+ *   be fully parsed.
+ * - On forwarded mail each sealed verdict is reported only when the domain the forwarder
+ *   recorded it for matches the message's current From domain. If the forwarder rewrote From,
+ *   or vouched for nothing, the field is `{}`.
+ *
+ * The `unauthenticated` label, not this field, is AgentMail's acceptance decision, and it uses
+ * a looser rule, so the two can disagree: a single-From message whose only pass is an
+ * unaligned envelope SPF is delivered without the label while this field shows no pass. Use
+ * the label to tell whether AgentMail accepted the message as legitimate, and this field to
+ * see which domain each mechanism authenticated. Do not reject mail on `dmarc: fail` alone.
+ */
+export interface MessageAuthenticationResults {
+    spf?: AgentMail.MessageAuthenticationVerdict;
+    dkim?: AgentMail.MessageAuthenticationVerdict;
+    dmarc?: AgentMail.MessageAuthenticationVerdict;
+    /** Envelope MAIL FROM domain the `spf` verdict is about (`smtp.mailfrom`). */
+    spfDomain?: AgentMail.MessageAuthenticationDomain;
+    /**
+     * Signing domain the `dkim` verdict is about (`header.d`). Present only when `dkim` is
+     * `pass` or `fail`.
+     */
+    dkimDomain?: AgentMail.MessageAuthenticationDomain;
+    /** From domain the `dmarc` verdict is about (`header.from`). */
+    dmarcDomain?: AgentMail.MessageAuthenticationDomain;
+    /**
+     * Domain of the trusted forwarder whose ARC seal the verdicts were taken from, such as
+     * `google.com`. Present only on forwarded mail, and only beside at least one verdict.
+     */
+    arcSealer?: AgentMail.MessageAuthenticationDomain;
+}

package/dist/cjs/api/resources/messages/types/MessageAuthenticationResults.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/api/resources/messages/types/MessageAuthenticationVerdict.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Result of one email authentication mechanism, in the vocabulary of the
+ * `Authentication-Results` header (RFC 8601). `none` means there was nothing to evaluate
+ * (Amazon SES calls this GRAY): no SPF record for the envelope MAIL FROM domain, no DKIM
+ * signature to check, or no DMARC record for the From domain.
+ */
+export declare const MessageAuthenticationVerdict: {
+    readonly Pass: "pass";
+    readonly Fail: "fail";
+    readonly None: "none";
+    readonly Neutral: "neutral";
+    readonly Softfail: "softfail";
+    readonly Temperror: "temperror";
+    readonly Permerror: "permerror";
+};
+export type MessageAuthenticationVerdict = (typeof MessageAuthenticationVerdict)[keyof typeof MessageAuthenticationVerdict];

package/dist/cjs/api/resources/messages/types/MessageAuthenticationVerdict.js

@@ -0,0 +1,19 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MessageAuthenticationVerdict = void 0;
+/**
+ * Result of one email authentication mechanism, in the vocabulary of the
+ * `Authentication-Results` header (RFC 8601). `none` means there was nothing to evaluate
+ * (Amazon SES calls this GRAY): no SPF record for the envelope MAIL FROM domain, no DKIM
+ * signature to check, or no DMARC record for the From domain.
+ */
+exports.MessageAuthenticationVerdict = {
+    Pass: "pass",
+    Fail: "fail",
+    None: "none",
+    Neutral: "neutral",
+    Softfail: "softfail",
+    Temperror: "temperror",
+    Permerror: "permerror",
+};

package/dist/cjs/api/resources/messages/types/MessageCalendarEventId.d.ts

@@ -2,7 +2,8 @@
  * The calendar event this email's invitation was applied to: set when the email's calendar
  * invitation, update, cancellation or attendee reply changed the inbox's calendar, a few seconds
  * after the email arrives. For an email about one date of a recurring event, it is that date's
- * event ID. Absent on other emails, and on invitations that were not imported. Calendar is in
- * AgentMail Labs.
+ * event ID. Absent on other emails, and on invitations that were not imported. The
+ * `message.received` event for an email with a calendar attachment waits until this is set, at
+ * most 20 seconds, so it usually arrives with it. Calendar is available in US production.
  */
 export type MessageCalendarEventId = string;

package/dist/cjs/api/resources/messages/types/MessageHeaders.d.ts

@@ -1,4 +1,7 @@
 /**
- * Headers in message.
+ * Headers in message. `Authentication-Results` is never included, on received or sent
+ * messages: the header is unsigned, so a sender can plant a forged copy. Read
+ * `authentication_results` for the verdicts instead. Get Raw Message still returns every copy
+ * of the header.
  */
 export type MessageHeaders = Record<string, string>;

package/dist/cjs/api/resources/messages/types/MessageItem.d.ts

@@ -16,6 +16,7 @@ export interface MessageItem {
     calendarEventId?: AgentMail.MessageCalendarEventId;
     references?: AgentMail.MessageReferences;
     headers?: AgentMail.MessageHeaders;
+    authenticationResults?: AgentMail.MessageAuthenticationResults;
     agentArmor?: AgentMail.AgentArmorResult;
     size: AgentMail.MessageSize;
     updatedAt: AgentMail.MessageUpdatedAt;

package/dist/cjs/api/resources/messages/types/index.d.ts

@@ -8,6 +8,9 @@ export * from "./BatchUpdateMessagesResponse.js";
 export * from "./ListMessagesResponse.js";
 export * from "./Message.js";
 export * from "./MessageAttachments.js";
+export * from "./MessageAuthenticationDomain.js";
+export * from "./MessageAuthenticationResults.js";
+export * from "./MessageAuthenticationVerdict.js";
 export * from "./MessageBcc.js";
 export * from "./MessageCalendarEventId.js";
 export * from "./MessageCc.js";

package/dist/cjs/api/resources/messages/types/index.js

@@ -24,6 +24,9 @@ __exportStar(require("./BatchUpdateMessagesResponse.js"), exports);
 __exportStar(require("./ListMessagesResponse.js"), exports);
 __exportStar(require("./Message.js"), exports);
 __exportStar(require("./MessageAttachments.js"), exports);
+__exportStar(require("./MessageAuthenticationDomain.js"), exports);
+__exportStar(require("./MessageAuthenticationResults.js"), exports);
+__exportStar(require("./MessageAuthenticationVerdict.js"), exports);
 __exportStar(require("./MessageBcc.js"), exports);
 __exportStar(require("./MessageCalendarEventId.js"), exports);
 __exportStar(require("./MessageCc.js"), exports);

package/dist/cjs/api/resources/metrics/client/Client.d.ts

@@ -54,10 +54,9 @@ export declare class MetricsClient {
      * `period` grid point, the bounced (or complained) messages over the
      * preceding `window` divided by the messages sent over the same window,
      * with the send count alongside so you can see the volume behind
-     * it. This is the number AgentMail's account moderation acts on: a
-     * warning at a 5% bounce rate and suspension at 10%, evaluated over a
-     * rolling 24 hours once at least 1,000 messages were sent in that
-     * window. Defaults to the rolling 24-hour rate sampled hourly over the
+     * it. AgentMail weighs bounce and complaint signals when deciding
+     * whether to suspend an account's sending, so keep both rates low.
+     * Defaults to the rolling 24-hour rate sampled hourly over the
      * last day; `start` must be within the last 90 days, `window` must be a
      * whole multiple of `period`, and the range plus window divided by
      * `period` must not exceed 1000 buckets.

package/dist/cjs/api/resources/metrics/client/Client.js

@@ -239,10 +239,9 @@ class MetricsClient {
      * `period` grid point, the bounced (or complained) messages over the
      * preceding `window` divided by the messages sent over the same window,
      * with the send count alongside so you can see the volume behind
-     * it. This is the number AgentMail's account moderation acts on: a
-     * warning at a 5% bounce rate and suspension at 10%, evaluated over a
-     * rolling 24 hours once at least 1,000 messages were sent in that
-     * window. Defaults to the rolling 24-hour rate sampled hourly over the
+     * it. AgentMail weighs bounce and complaint signals when deciding
+     * whether to suspend an account's sending, so keep both rates low.
+     * Defaults to the rolling 24-hour rate sampled hourly over the
      * last day; `start` must be within the last 90 days, `window` must be a
      * whole multiple of `period`, and the range plus window divided by
      * `period` must not exceed 1000 buckets.

package/dist/cjs/api/resources/organizations/client/Client.d.ts

@@ -26,7 +26,7 @@ export declare class OrganizationsClient {
     get(requestOptions?: OrganizationsClient.RequestOptions): core.HttpResponsePromise<AgentMail.Organization>;
     private __get;
     /**
-     * Returns whether the organization is in [AgentMail Labs](https://docs.agentmail.to/calendar), which turns on features that are still in preview, such as calendar. Requires an organization-scoped API key.
+     * Returns whether the organization is in AgentMail Labs, which turns on features that are still in preview, such as [Agent Armor](https://docs.agentmail.to/agent-armor). Requires an organization-scoped API key.
      *
      * **CLI:**
      * ```bash

package/dist/cjs/api/resources/organizations/client/Client.js

@@ -112,7 +112,7 @@ class OrganizationsClient {
         });
     }
     /**
-     * Returns whether the organization is in [AgentMail Labs](https://docs.agentmail.to/calendar), which turns on features that are still in preview, such as calendar. Requires an organization-scoped API key.
+     * Returns whether the organization is in AgentMail Labs, which turns on features that are still in preview, such as [Agent Armor](https://docs.agentmail.to/agent-armor). Requires an organization-scoped API key.
      *
      * **CLI:**
      * ```bash

package/dist/cjs/api/resources/organizations/types/Organization.d.ts

@@ -22,6 +22,18 @@ export interface Organization {
     authenticationId?: string;
     /** Authentication provider type. */
     authenticationType?: string;
+    /**
+     * Time at which the organization was suspended. Absent when it is not suspended. A suspended
+     * organization cannot send, but it still receives mail, its webhooks and WebSocket events still
+     * fire, and API reads keep working. See [account_suspended](https://docs.agentmail.to/errors#account_suspended).
+     */
+    suspendedAt?: Date;
+    /**
+     * Why the organization is suspended, in a short machine-readable form such as `message.bounced`
+     * or `message.complained`. Absent when it is not suspended. Email support@agentmail.cc to resolve
+     * a suspension.
+     */
+    suspendedReason?: string;
     /** Time at which organization was last updated. */
     updatedAt: Date;
     /** Time at which organization was created. */

package/dist/cjs/api/resources/webhooks/types/CreatePodWebhookRequest.d.ts

@@ -5,5 +5,9 @@ import type * as AgentMail from "../../../index.js";
  * receive events for the whole pod.
  */
 export interface CreatePodWebhookRequest extends AgentMail.webhooks.CreateInboxWebhookRequest {
+    /**
+     * Inboxes for which to send events. A webhook can list at most 10 inboxes and pods combined;
+     * more returns `403` with `limit_exceeded`.
+     */
     inboxIds?: AgentMail.InboxIds;
 }

package/dist/cjs/api/resources/webhooks/types/CreateWebhookEventTypes.d.ts

@@ -1,7 +1,8 @@
 import type * as AgentMail from "../../../index.js";
 /**
- * Full list of event types this webhook should receive. At least one type is required. Send every type you
- * want in this array (not incremental). See [Webhooks overview](https://docs.agentmail.to/webhooks-overview)
+ * Full list of event types this webhook should receive. Required: omitting it or sending an empty array
+ * returns a `400`, and there is no "all events" default. Send every type you want in this array (not
+ * incremental). See [Webhooks overview](https://docs.agentmail.to/webhooks-overview)
  * for spam, blocked, and unauthenticated events and required permissions.
  */
 export type CreateWebhookEventTypes = AgentMail.EventTypes;

package/dist/cjs/api/resources/webhooks/types/CreateWebhookRequest.d.ts

@@ -1,8 +1,9 @@
 import type * as AgentMail from "../../../index.js";
 export interface CreateWebhookRequest extends AgentMail.webhooks.CreatePodWebhookRequest {
     /**
-     * Pods for which to send events. Maximum 10 per webhook. The webhook receives an event that matches
-     * any listed pod or inbox, so a listed pod already covers every inbox in it.
+     * Pods for which to send events. A webhook can list at most 10 pods and inboxes combined; more returns
+     * `403` with `limit_exceeded`. The webhook receives an event that matches any listed pod or inbox, so a
+     * listed pod already covers every inbox in it.
      */
     podIds?: AgentMail.PodIds;
 }

package/dist/cjs/api/resources/webhooks/types/UpdateInboxWebhookRequest.d.ts

@@ -7,10 +7,12 @@ export interface UpdateInboxWebhookRequest {
     eventTypes?: AgentMail.webhooks.UpdateWebhookEventTypes;
     /**
      * Set to true to re-enable a webhook that was disabled after repeated failed deliveries, or false
-     * to disable it. Events that occurred while the webhook was disabled are not redelivered.
-     * Re-enabling a webhook subscribed to `message.received.spam`, `message.received.blocked`, or
-     * `message.received.unauthenticated` (or to every event type, with no filter) requires the
-     * matching label permissions on the API key.
+     * to disable it. AgentMail does not notify you when a webhook is disabled automatically; check this
+     * field when you get or list webhooks. Events that occurred while the webhook was disabled are not
+     * redelivered. Re-enabling requires the read permission for every restricted event type the webhook
+     * subscribes to: `label_spam_read`, `label_blocked_read`, or `label_unauthenticated_read` for the
+     * received variants, `message_read` for `message.security.*`, and `calendar_event_read` for
+     * `calendar.event.*`. A webhook with no event type filter is checked against all of them.
      */
     enabled?: boolean;
 }

package/dist/cjs/api/resources/webhooks/types/UpdatePodWebhookRequest.d.ts

@@ -7,7 +7,8 @@ export interface UpdatePodWebhookRequest extends AgentMail.webhooks.UpdateInboxW
     /**
      * Inbox IDs to subscribe to the webhook. This only adds to what the webhook receives: on a webhook
      * that covers its whole pod, it changes nothing. To receive only specific inboxes, create a webhook
-     * with `inbox_ids` instead.
+     * with `inbox_ids` instead. The webhook can list at most 10 inboxes and pods combined after the
+     * update.
      */
     addInboxIds?: AgentMail.InboxIds;
     /** Inbox IDs to unsubscribe from the webhook. */

package/dist/cjs/api/resources/webhooks/types/UpdateWebhookEventTypes.d.ts

@@ -3,8 +3,8 @@ import type * as AgentMail from "../../../index.js";
  * When you send a non-empty list, it replaces the webhook's subscribed event types in full (the same
  * "set the list" behavior as create). It is not a merge or diff: include every event type you want after
  * the update. Sending a one-element array means the webhook will only receive that one type afterward.
- * Omit this field or send an empty array to leave event types unchanged. Clearing all types with an empty
- * list is not supported. Subscribing to `message.received.spam`, `message.received.blocked`, or
+ * Omit this field to leave event types unchanged. An empty array is rejected with a `400`: a webhook
+ * always has at least one event type. Subscribing to `message.received.spam`, `message.received.blocked`, or
  * `message.received.unauthenticated` requires the matching label permission on the API key.
  */
 export type UpdateWebhookEventTypes = AgentMail.EventTypes;

package/dist/cjs/api/resources/webhooks/types/UpdateWebhookRequest.d.ts

@@ -1,6 +1,9 @@
 import type * as AgentMail from "../../../index.js";
 export interface UpdateWebhookRequest extends AgentMail.webhooks.UpdatePodWebhookRequest {
-    /** Pod IDs to subscribe to the webhook. */
+    /**
+     * Pod IDs to subscribe to the webhook. The webhook can list at most 10 pods and inboxes combined
+     * after the update.
+     */
     addPodIds?: AgentMail.PodIds;
     /** Pod IDs to unsubscribe from the webhook. */
     removePodIds?: AgentMail.PodIds;

package/dist/cjs/api/resources/webhooks/types/Webhook.d.ts

@@ -18,7 +18,11 @@ export interface Webhook {
     inboxId?: string;
     /** Secret for webhook signature verification. */
     secret: string;
-    /** Webhook is enabled. */
+    /**
+     * Whether the webhook is enabled. It becomes false when you disable it, and also when deliveries to
+     * the URL have failed for 5 days, in which case AgentMail sends no notification. Re-enable it with
+     * update and `enabled` set to true.
+     */
     enabled: boolean;
     /** Time at which webhook was last updated. */
     updatedAt: Date;

package/dist/cjs/api/resources/websockets/client/Socket.d.ts

@@ -4,7 +4,7 @@ export declare namespace WebsocketsSocket {
     interface Args {
         socket: core.ReconnectingWebSocket;
     }
-    type Response = AgentMail.Subscribed | AgentMail.MessageReceivedEvent | AgentMail.MessageSecurityCompletedEvent | AgentMail.MessageSentEvent | AgentMail.MessageDeliveredEvent | AgentMail.MessageBouncedEvent | AgentMail.MessageComplainedEvent | AgentMail.MessageRejectedEvent | AgentMail.MessageOpenedEvent | AgentMail.DomainVerifiedEvent | AgentMail.CalendarEventCreatedEvent | AgentMail.CalendarEventUpdatedEvent | AgentMail.CalendarEventDeletedEvent | AgentMail.CalendarEventRespondedEvent | AgentMail.CalendarEventStartingEvent | AgentMail.CalendarEventEndingEvent | AgentMail.Error_;
+    type Response = AgentMail.Subscribed | AgentMail.MessageReceivedEvent | AgentMail.MessageSecurityCompletedEvent | AgentMail.MessageSecurityReviewEvent | AgentMail.MessageSecurityOverrideEvent | AgentMail.MessageSentEvent | AgentMail.MessageDeliveredEvent | AgentMail.MessageBouncedEvent | AgentMail.MessageComplainedEvent | AgentMail.MessageRejectedEvent | AgentMail.MessageOpenedEvent | AgentMail.DomainVerifiedEvent | AgentMail.CalendarEventCreatedEvent | AgentMail.CalendarEventUpdatedEvent | AgentMail.CalendarEventDeletedEvent | AgentMail.CalendarEventRespondedEvent | AgentMail.CalendarEventStartingEvent | AgentMail.CalendarEventEndingEvent | AgentMail.Error_;
     type EventHandlers = {
         open?: () => void;
         message?: (message: Response) => void;