agentmail 0.5.46 → 0.5.47

package/dist/esm/api/resources/inboxes/resources/calendar/client/Client.mjs

@@ -38,9 +38,8 @@ export class CalendarClient {
      * created. Its `etag` (also the `ETag` response header) is the value to send in `If-Match` to
      * make an update conditional.
      *
-     * Requires the `calendar_read` permission. Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`)
-     * but not yet in EU production (`api.agentmail.eu`). Organizations that have not joined
-     * Labs receive a `403`.
+     * Requires the `calendar_read` permission. Calendar is available in US production
+     * (`api.agentmail.to`) but not yet in EU production (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.GetCalendarRequest} request
@@ -141,8 +140,8 @@ export class CalendarClient {
      * calendar's current `etag` in `If-Match`: a stale value returns `412`. Without `If-Match` the
      * update applies to the calendar as it is.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.UpdateCalendarRequestWrapper} request
@@ -272,8 +271,8 @@ export class CalendarClient {
      * The list is always read in the region that serves the request, so it can trail a change made
      * moments earlier by a few seconds. Requires the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.ListCalendarEventsRequest} request
@@ -382,8 +381,8 @@ export class CalendarClient {
      * moments earlier by a few seconds. Pass `consistency=primary` to read your own change right
      * away. Requires the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.GetCalendarAgendaRequest} request
@@ -516,8 +515,8 @@ export class CalendarClient {
      * The event's `etag` is the value to send in `If-Match` to make a later update or delete
      * conditional. Requires the `calendar_event_create` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CreateCalendarEventRequest} request
@@ -675,8 +674,8 @@ export class CalendarClient {
      * reads back as it ran, even if a later change to the series no longer produces it. Requires
      * the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id
@@ -808,8 +807,8 @@ export class CalendarClient {
      * send limits, charged before the change is saved; an over-limit request returns `429`
      * `rate_limit_exceeded` and changes nothing.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id
@@ -988,8 +987,8 @@ export class CalendarClient {
      * send limits, charged before the delete; an over-limit request returns `429`
      * `rate_limit_exceeded` and deletes nothing.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id
@@ -1138,8 +1137,8 @@ export class CalendarClient {
      * trail a change made moments earlier by a few seconds; pass `consistency=primary` to read
      * your own change right away. Requires the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {string} event_id - UUID of the recurring event.
@@ -1276,8 +1275,8 @@ export class CalendarClient {
      * charged before the response is saved; an over-limit request returns `429`
      * `rate_limit_exceeded` and changes nothing.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id

package/dist/esm/api/resources/messages/types/Message.d.mts

@@ -24,6 +24,7 @@ export interface Message {
     calendarEventId?: AgentMail.MessageCalendarEventId;
     references?: AgentMail.MessageReferences;
     headers?: AgentMail.MessageHeaders;
+    authenticationResults?: AgentMail.MessageAuthenticationResults;
     agentArmor?: AgentMail.AgentArmorResult;
     size: AgentMail.MessageSize;
     updatedAt: AgentMail.MessageUpdatedAt;

package/dist/esm/api/resources/messages/types/MessageAuthenticationDomain.d.mts

@@ -0,0 +1,5 @@
+/**
+ * The domain an authentication verdict is about, lowercase. Present only beside its verdict:
+ * when the verdict is withheld, so is the domain.
+ */
+export type MessageAuthenticationDomain = string;

package/dist/esm/api/resources/messages/types/MessageAuthenticationDomain.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/messages/types/MessageAuthenticationResults.d.mts

@@ -0,0 +1,56 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * Per-mechanism SPF, DKIM, and DMARC verdicts for a received message, each with the domain it
+ * is about, kept only where they speak for the sender's From identity. A verdict that could
+ * not be computed is absent, so the field can be `{}`. The field is absent on sent messages
+ * and on messages received before 2026-09-09; the `*_domain` and `arc_sealer` keys appear on
+ * messages received after they were introduced.
+ *
+ * The verdicts are the ones Amazon SES computed when the message reached AgentMail, with one
+ * exception. Forwarded mail fails DMARC at the receiving hop by construction. When AgentMail
+ * delivers a forwarded message as authenticated because a trusted forwarder (such as Google or
+ * Microsoft) sealed a valid ARC chain vouching for the original, the field reports the
+ * verdicts that forwarder recorded for the original message, and `arc_sealer` names it.
+ *
+ * - `spf` is about the envelope MAIL FROM (Return-Path) domain, named in `spf_domain`. It is
+ *   present only when that domain is aligned with the sender's domain (the From mailbox, or
+ *   the Sender header when From spans domains), meaning the two share an organizational
+ *   domain: `mail.example.com` is aligned with `example.com`. An unaligned SPF result is
+ *   withheld whatever its value.
+ * - `dkim` is the DKIM verdict, and `dkim_domain` the signing domain (the `d=` tag). On
+ *   directly received mail the domain is named only when every DKIM signature on the message
+ *   is from the same domain; a message signed by more than one domain (a sender and its email
+ *   provider, for instance) keeps the verdict and omits the domain. `dkim_domain` is the
+ *   signing domain as written, so compare it with the From domain before relying on it.
+ * - `dmarc` is the DMARC verdict for the From domain, named in `dmarc_domain`.
+ * - `dkim` and `dmarc` are withheld when the From list spans more than one domain or could not
+ *   be fully parsed.
+ * - On forwarded mail each sealed verdict is reported only when the domain the forwarder
+ *   recorded it for matches the message's current From domain. If the forwarder rewrote From,
+ *   or vouched for nothing, the field is `{}`.
+ *
+ * The `unauthenticated` label, not this field, is AgentMail's acceptance decision, and it uses
+ * a looser rule, so the two can disagree: a single-From message whose only pass is an
+ * unaligned envelope SPF is delivered without the label while this field shows no pass. Use
+ * the label to tell whether AgentMail accepted the message as legitimate, and this field to
+ * see which domain each mechanism authenticated. Do not reject mail on `dmarc: fail` alone.
+ */
+export interface MessageAuthenticationResults {
+    spf?: AgentMail.MessageAuthenticationVerdict;
+    dkim?: AgentMail.MessageAuthenticationVerdict;
+    dmarc?: AgentMail.MessageAuthenticationVerdict;
+    /** Envelope MAIL FROM domain the `spf` verdict is about (`smtp.mailfrom`). */
+    spfDomain?: AgentMail.MessageAuthenticationDomain;
+    /**
+     * Signing domain the `dkim` verdict is about (`header.d`). Present only when `dkim` is
+     * `pass` or `fail`.
+     */
+    dkimDomain?: AgentMail.MessageAuthenticationDomain;
+    /** From domain the `dmarc` verdict is about (`header.from`). */
+    dmarcDomain?: AgentMail.MessageAuthenticationDomain;
+    /**
+     * Domain of the trusted forwarder whose ARC seal the verdicts were taken from, such as
+     * `google.com`. Present only on forwarded mail, and only beside at least one verdict.
+     */
+    arcSealer?: AgentMail.MessageAuthenticationDomain;
+}

package/dist/esm/api/resources/messages/types/MessageAuthenticationResults.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/messages/types/MessageAuthenticationVerdict.d.mts

@@ -0,0 +1,16 @@
+/**
+ * Result of one email authentication mechanism, in the vocabulary of the
+ * `Authentication-Results` header (RFC 8601). `none` means there was nothing to evaluate
+ * (Amazon SES calls this GRAY): no SPF record for the envelope MAIL FROM domain, no DKIM
+ * signature to check, or no DMARC record for the From domain.
+ */
+export declare const MessageAuthenticationVerdict: {
+    readonly Pass: "pass";
+    readonly Fail: "fail";
+    readonly None: "none";
+    readonly Neutral: "neutral";
+    readonly Softfail: "softfail";
+    readonly Temperror: "temperror";
+    readonly Permerror: "permerror";
+};
+export type MessageAuthenticationVerdict = (typeof MessageAuthenticationVerdict)[keyof typeof MessageAuthenticationVerdict];

package/dist/esm/api/resources/messages/types/MessageAuthenticationVerdict.mjs

@@ -0,0 +1,16 @@
+// This file was auto-generated by Fern from our API Definition.
+/**
+ * Result of one email authentication mechanism, in the vocabulary of the
+ * `Authentication-Results` header (RFC 8601). `none` means there was nothing to evaluate
+ * (Amazon SES calls this GRAY): no SPF record for the envelope MAIL FROM domain, no DKIM
+ * signature to check, or no DMARC record for the From domain.
+ */
+export const MessageAuthenticationVerdict = {
+    Pass: "pass",
+    Fail: "fail",
+    None: "none",
+    Neutral: "neutral",
+    Softfail: "softfail",
+    Temperror: "temperror",
+    Permerror: "permerror",
+};

package/dist/esm/api/resources/messages/types/MessageCalendarEventId.d.mts

@@ -2,7 +2,8 @@
  * The calendar event this email's invitation was applied to: set when the email's calendar
  * invitation, update, cancellation or attendee reply changed the inbox's calendar, a few seconds
  * after the email arrives. For an email about one date of a recurring event, it is that date's
- * event ID. Absent on other emails, and on invitations that were not imported. Calendar is in
- * AgentMail Labs.
+ * event ID. Absent on other emails, and on invitations that were not imported. The
+ * `message.received` event for an email with a calendar attachment waits until this is set, at
+ * most 20 seconds, so it usually arrives with it. Calendar is available in US production.
  */
 export type MessageCalendarEventId = string;

package/dist/esm/api/resources/messages/types/MessageHeaders.d.mts

@@ -1,4 +1,7 @@
 /**
- * Headers in message.
+ * Headers in message. `Authentication-Results` is never included, on received or sent
+ * messages: the header is unsigned, so a sender can plant a forged copy. Read
+ * `authentication_results` for the verdicts instead. Get Raw Message still returns every copy
+ * of the header.
  */
 export type MessageHeaders = Record<string, string>;

package/dist/esm/api/resources/messages/types/MessageItem.d.mts

@@ -16,6 +16,7 @@ export interface MessageItem {
     calendarEventId?: AgentMail.MessageCalendarEventId;
     references?: AgentMail.MessageReferences;
     headers?: AgentMail.MessageHeaders;
+    authenticationResults?: AgentMail.MessageAuthenticationResults;
     agentArmor?: AgentMail.AgentArmorResult;
     size: AgentMail.MessageSize;
     updatedAt: AgentMail.MessageUpdatedAt;

package/dist/esm/api/resources/messages/types/index.d.mts

@@ -8,6 +8,9 @@ export * from "./BatchUpdateMessagesResponse.mjs";
 export * from "./ListMessagesResponse.mjs";
 export * from "./Message.mjs";
 export * from "./MessageAttachments.mjs";
+export * from "./MessageAuthenticationDomain.mjs";
+export * from "./MessageAuthenticationResults.mjs";
+export * from "./MessageAuthenticationVerdict.mjs";
 export * from "./MessageBcc.mjs";
 export * from "./MessageCalendarEventId.mjs";
 export * from "./MessageCc.mjs";

package/dist/esm/api/resources/messages/types/index.mjs

@@ -8,6 +8,9 @@ export * from "./BatchUpdateMessagesResponse.mjs";
 export * from "./ListMessagesResponse.mjs";
 export * from "./Message.mjs";
 export * from "./MessageAttachments.mjs";
+export * from "./MessageAuthenticationDomain.mjs";
+export * from "./MessageAuthenticationResults.mjs";
+export * from "./MessageAuthenticationVerdict.mjs";
 export * from "./MessageBcc.mjs";
 export * from "./MessageCalendarEventId.mjs";
 export * from "./MessageCc.mjs";

package/dist/esm/api/resources/metrics/client/Client.d.mts

@@ -54,10 +54,9 @@ export declare class MetricsClient {
      * `period` grid point, the bounced (or complained) messages over the
      * preceding `window` divided by the messages sent over the same window,
      * with the send count alongside so you can see the volume behind
-     * it. This is the number AgentMail's account moderation acts on: a
-     * warning at a 5% bounce rate and suspension at 10%, evaluated over a
-     * rolling 24 hours once at least 1,000 messages were sent in that
-     * window. Defaults to the rolling 24-hour rate sampled hourly over the
+     * it. AgentMail weighs bounce and complaint signals when deciding
+     * whether to suspend an account's sending, so keep both rates low.
+     * Defaults to the rolling 24-hour rate sampled hourly over the
      * last day; `start` must be within the last 90 days, `window` must be a
      * whole multiple of `period`, and the range plus window divided by
      * `period` must not exceed 1000 buckets.

package/dist/esm/api/resources/metrics/client/Client.mjs

@@ -203,10 +203,9 @@ export class MetricsClient {
      * `period` grid point, the bounced (or complained) messages over the
      * preceding `window` divided by the messages sent over the same window,
      * with the send count alongside so you can see the volume behind
-     * it. This is the number AgentMail's account moderation acts on: a
-     * warning at a 5% bounce rate and suspension at 10%, evaluated over a
-     * rolling 24 hours once at least 1,000 messages were sent in that
-     * window. Defaults to the rolling 24-hour rate sampled hourly over the
+     * it. AgentMail weighs bounce and complaint signals when deciding
+     * whether to suspend an account's sending, so keep both rates low.
+     * Defaults to the rolling 24-hour rate sampled hourly over the
      * last day; `start` must be within the last 90 days, `window` must be a
      * whole multiple of `period`, and the range plus window divided by
      * `period` must not exceed 1000 buckets.

package/dist/esm/api/resources/organizations/client/Client.d.mts

@@ -26,7 +26,7 @@ export declare class OrganizationsClient {
     get(requestOptions?: OrganizationsClient.RequestOptions): core.HttpResponsePromise<AgentMail.Organization>;
     private __get;
     /**
-     * Returns whether the organization is in [AgentMail Labs](https://docs.agentmail.to/calendar), which turns on features that are still in preview, such as calendar. Requires an organization-scoped API key.
+     * Returns whether the organization is in AgentMail Labs, which turns on features that are still in preview, such as [Agent Armor](https://docs.agentmail.to/agent-armor). Requires an organization-scoped API key.
      *
      * **CLI:**
      * ```bash

package/dist/esm/api/resources/organizations/client/Client.mjs

@@ -76,7 +76,7 @@ export class OrganizationsClient {
         });
     }
     /**
-     * Returns whether the organization is in [AgentMail Labs](https://docs.agentmail.to/calendar), which turns on features that are still in preview, such as calendar. Requires an organization-scoped API key.
+     * Returns whether the organization is in AgentMail Labs, which turns on features that are still in preview, such as [Agent Armor](https://docs.agentmail.to/agent-armor). Requires an organization-scoped API key.
      *
      * **CLI:**
      * ```bash

package/dist/esm/api/resources/organizations/types/Organization.d.mts

@@ -22,6 +22,18 @@ export interface Organization {
     authenticationId?: string;
     /** Authentication provider type. */
     authenticationType?: string;
+    /**
+     * Time at which the organization was suspended. Absent when it is not suspended. A suspended
+     * organization cannot send, but it still receives mail, its webhooks and WebSocket events still
+     * fire, and API reads keep working. See [account_suspended](https://docs.agentmail.to/errors#account_suspended).
+     */
+    suspendedAt?: Date;
+    /**
+     * Why the organization is suspended, in a short machine-readable form such as `message.bounced`
+     * or `message.complained`. Absent when it is not suspended. Email support@agentmail.cc to resolve
+     * a suspension.
+     */
+    suspendedReason?: string;
     /** Time at which organization was last updated. */
     updatedAt: Date;
     /** Time at which organization was created. */

package/dist/esm/api/resources/webhooks/types/CreatePodWebhookRequest.d.mts

@@ -5,5 +5,9 @@ import type * as AgentMail from "../../../index.mjs";
  * receive events for the whole pod.
  */
 export interface CreatePodWebhookRequest extends AgentMail.webhooks.CreateInboxWebhookRequest {
+    /**
+     * Inboxes for which to send events. A webhook can list at most 10 inboxes and pods combined;
+     * more returns `403` with `limit_exceeded`.
+     */
     inboxIds?: AgentMail.InboxIds;
 }

package/dist/esm/api/resources/webhooks/types/CreateWebhookEventTypes.d.mts

@@ -1,7 +1,8 @@
 import type * as AgentMail from "../../../index.mjs";
 /**
- * Full list of event types this webhook should receive. At least one type is required. Send every type you
- * want in this array (not incremental). See [Webhooks overview](https://docs.agentmail.to/webhooks-overview)
+ * Full list of event types this webhook should receive. Required: omitting it or sending an empty array
+ * returns a `400`, and there is no "all events" default. Send every type you want in this array (not
+ * incremental). See [Webhooks overview](https://docs.agentmail.to/webhooks-overview)
  * for spam, blocked, and unauthenticated events and required permissions.
  */
 export type CreateWebhookEventTypes = AgentMail.EventTypes;

package/dist/esm/api/resources/webhooks/types/CreateWebhookRequest.d.mts

@@ -1,8 +1,9 @@
 import type * as AgentMail from "../../../index.mjs";
 export interface CreateWebhookRequest extends AgentMail.webhooks.CreatePodWebhookRequest {
     /**
-     * Pods for which to send events. Maximum 10 per webhook. The webhook receives an event that matches
-     * any listed pod or inbox, so a listed pod already covers every inbox in it.
+     * Pods for which to send events. A webhook can list at most 10 pods and inboxes combined; more returns
+     * `403` with `limit_exceeded`. The webhook receives an event that matches any listed pod or inbox, so a
+     * listed pod already covers every inbox in it.
      */
     podIds?: AgentMail.PodIds;
 }

package/dist/esm/api/resources/webhooks/types/UpdateInboxWebhookRequest.d.mts

@@ -7,10 +7,12 @@ export interface UpdateInboxWebhookRequest {
     eventTypes?: AgentMail.webhooks.UpdateWebhookEventTypes;
     /**
      * Set to true to re-enable a webhook that was disabled after repeated failed deliveries, or false
-     * to disable it. Events that occurred while the webhook was disabled are not redelivered.
-     * Re-enabling a webhook subscribed to `message.received.spam`, `message.received.blocked`, or
-     * `message.received.unauthenticated` (or to every event type, with no filter) requires the
-     * matching label permissions on the API key.
+     * to disable it. AgentMail does not notify you when a webhook is disabled automatically; check this
+     * field when you get or list webhooks. Events that occurred while the webhook was disabled are not
+     * redelivered. Re-enabling requires the read permission for every restricted event type the webhook
+     * subscribes to: `label_spam_read`, `label_blocked_read`, or `label_unauthenticated_read` for the
+     * received variants, `message_read` for `message.security.*`, and `calendar_event_read` for
+     * `calendar.event.*`. A webhook with no event type filter is checked against all of them.
      */
     enabled?: boolean;
 }

package/dist/esm/api/resources/webhooks/types/UpdatePodWebhookRequest.d.mts

@@ -7,7 +7,8 @@ export interface UpdatePodWebhookRequest extends AgentMail.webhooks.UpdateInboxW
     /**
      * Inbox IDs to subscribe to the webhook. This only adds to what the webhook receives: on a webhook
      * that covers its whole pod, it changes nothing. To receive only specific inboxes, create a webhook
-     * with `inbox_ids` instead.
+     * with `inbox_ids` instead. The webhook can list at most 10 inboxes and pods combined after the
+     * update.
      */
     addInboxIds?: AgentMail.InboxIds;
     /** Inbox IDs to unsubscribe from the webhook. */

package/dist/esm/api/resources/webhooks/types/UpdateWebhookEventTypes.d.mts

@@ -3,8 +3,8 @@ import type * as AgentMail from "../../../index.mjs";
  * When you send a non-empty list, it replaces the webhook's subscribed event types in full (the same
  * "set the list" behavior as create). It is not a merge or diff: include every event type you want after
  * the update. Sending a one-element array means the webhook will only receive that one type afterward.
- * Omit this field or send an empty array to leave event types unchanged. Clearing all types with an empty
- * list is not supported. Subscribing to `message.received.spam`, `message.received.blocked`, or
+ * Omit this field to leave event types unchanged. An empty array is rejected with a `400`: a webhook
+ * always has at least one event type. Subscribing to `message.received.spam`, `message.received.blocked`, or
  * `message.received.unauthenticated` requires the matching label permission on the API key.
  */
 export type UpdateWebhookEventTypes = AgentMail.EventTypes;

package/dist/esm/api/resources/webhooks/types/UpdateWebhookRequest.d.mts

@@ -1,6 +1,9 @@
 import type * as AgentMail from "../../../index.mjs";
 export interface UpdateWebhookRequest extends AgentMail.webhooks.UpdatePodWebhookRequest {
-    /** Pod IDs to subscribe to the webhook. */
+    /**
+     * Pod IDs to subscribe to the webhook. The webhook can list at most 10 pods and inboxes combined
+     * after the update.
+     */
     addPodIds?: AgentMail.PodIds;
     /** Pod IDs to unsubscribe from the webhook. */
     removePodIds?: AgentMail.PodIds;

package/dist/esm/api/resources/webhooks/types/Webhook.d.mts

@@ -18,7 +18,11 @@ export interface Webhook {
     inboxId?: string;
     /** Secret for webhook signature verification. */
     secret: string;
-    /** Webhook is enabled. */
+    /**
+     * Whether the webhook is enabled. It becomes false when you disable it, and also when deliveries to
+     * the URL have failed for 5 days, in which case AgentMail sends no notification. Re-enable it with
+     * update and `enabled` set to true.
+     */
     enabled: boolean;
     /** Time at which webhook was last updated. */
     updatedAt: Date;

package/dist/esm/serialization/resources/domains/types/Domain.d.mts

@@ -10,6 +10,7 @@ import { InboundEnabled } from "./InboundEnabled.mjs";
 import { Status } from "./Status.mjs";
 import { SubdomainsEnabled } from "./SubdomainsEnabled.mjs";
 import { TrackingEnabled } from "./TrackingEnabled.mjs";
+import { TrackingStatus } from "./TrackingStatus.mjs";
 import { VerificationRecord } from "./VerificationRecord.mjs";
 export declare const Domain: core.serialization.ObjectSchema<serializers.Domain.Raw, AgentMail.Domain>;
 export declare namespace Domain {
@@ -23,6 +24,8 @@ export declare namespace Domain {
         inbound_enabled?: InboundEnabled.Raw | null;
         subdomains_enabled: SubdomainsEnabled.Raw;
         tracking_enabled: TrackingEnabled.Raw;
+        tracking_status?: TrackingStatus.Raw | null;
+        tracking_reason?: string | null;
         records: VerificationRecord.Raw[];
         client_id?: ClientId.Raw | null;
         updated_at: string;

package/dist/esm/serialization/resources/domains/types/Domain.mjs

@@ -9,6 +9,7 @@ import { InboundEnabled } from "./InboundEnabled.mjs";
 import { Status } from "./Status.mjs";
 import { SubdomainsEnabled } from "./SubdomainsEnabled.mjs";
 import { TrackingEnabled } from "./TrackingEnabled.mjs";
+import { TrackingStatus } from "./TrackingStatus.mjs";
 import { VerificationRecord } from "./VerificationRecord.mjs";
 export const Domain = core.serialization.object({
     podId: core.serialization.property("pod_id", PodId.optional()),
@@ -20,6 +21,8 @@ export const Domain = core.serialization.object({
     inboundEnabled: core.serialization.property("inbound_enabled", InboundEnabled.optional()),
     subdomainsEnabled: core.serialization.property("subdomains_enabled", SubdomainsEnabled),
     trackingEnabled: core.serialization.property("tracking_enabled", TrackingEnabled),
+    trackingStatus: core.serialization.property("tracking_status", TrackingStatus.optional()),
+    trackingReason: core.serialization.property("tracking_reason", core.serialization.string().optional()),
     records: core.serialization.list(VerificationRecord),
     clientId: core.serialization.property("client_id", ClientId.optional()),
     updatedAt: core.serialization.property("updated_at", core.serialization.date()),

package/dist/esm/serialization/resources/domains/types/RecordType.d.mts

@@ -3,5 +3,5 @@ import * as core from "../../../../core/index.mjs";
 import type * as serializers from "../../../index.mjs";
 export declare const RecordType: core.serialization.Schema<serializers.RecordType.Raw, AgentMail.RecordType>;
 export declare namespace RecordType {
-    type Raw = "TXT" | "CNAME" | "MX";
+    type Raw = "TXT" | "CNAME" | "MX" | "CAA";
 }

package/dist/esm/serialization/resources/domains/types/RecordType.mjs

@@ -1,3 +1,3 @@
 // This file was auto-generated by Fern from our API Definition.
 import * as core from "../../../../core/index.mjs";
-export const RecordType = core.serialization.enum_(["TXT", "CNAME", "MX"]);
+export const RecordType = core.serialization.enum_(["TXT", "CNAME", "MX", "CAA"]);

package/dist/esm/serialization/resources/domains/types/TrackingStatus.d.mts

@@ -0,0 +1,8 @@
+import type * as AgentMail from "../../../../api/index.mjs";
+import type * as core from "../../../../core/index.mjs";
+import type * as serializers from "../../../index.mjs";
+import { VerificationStatus } from "./VerificationStatus.mjs";
+export declare const TrackingStatus: core.serialization.Schema<serializers.TrackingStatus.Raw, AgentMail.TrackingStatus>;
+export declare namespace TrackingStatus {
+    type Raw = VerificationStatus.Raw;
+}

package/dist/esm/serialization/resources/domains/types/TrackingStatus.mjs

@@ -0,0 +1,3 @@
+// This file was auto-generated by Fern from our API Definition.
+import { VerificationStatus } from "./VerificationStatus.mjs";
+export const TrackingStatus = VerificationStatus;

package/dist/esm/serialization/resources/domains/types/index.d.mts

@@ -13,6 +13,7 @@ export * from "./RecordType.mjs";
 export * from "./Status.mjs";
 export * from "./SubdomainsEnabled.mjs";
 export * from "./TrackingEnabled.mjs";
+export * from "./TrackingStatus.mjs";
 export * from "./UpdateDomainRequest.mjs";
 export * from "./VerificationRecord.mjs";
 export * from "./VerificationStatus.mjs";

package/dist/esm/serialization/resources/domains/types/index.mjs

@@ -13,6 +13,7 @@ export * from "./RecordType.mjs";
 export * from "./Status.mjs";
 export * from "./SubdomainsEnabled.mjs";
 export * from "./TrackingEnabled.mjs";
+export * from "./TrackingStatus.mjs";
 export * from "./UpdateDomainRequest.mjs";
 export * from "./VerificationRecord.mjs";
 export * from "./VerificationStatus.mjs";

package/dist/esm/serialization/resources/events/types/MessageReceivedEvent.d.mts

@@ -1,17 +1,17 @@
 import type * as AgentMail from "../../../../api/index.mjs";
 import * as core from "../../../../core/index.mjs";
 import type * as serializers from "../../../index.mjs";
-import { Message } from "../../messages/types/Message.mjs";
 import { ThreadItem } from "../../threads/types/ThreadItem.mjs";
 import { EventId } from "./EventId.mjs";
 import { MessageReceivedEventType } from "./MessageReceivedEventType.mjs";
+import { ReceivedMessage } from "./ReceivedMessage.mjs";
 export declare const MessageReceivedEvent: core.serialization.ObjectSchema<serializers.MessageReceivedEvent.Raw, AgentMail.MessageReceivedEvent>;
 export declare namespace MessageReceivedEvent {
     interface Raw {
         type: "event";
         event_type: MessageReceivedEventType.Raw;
         event_id: EventId.Raw;
-        message: Message.Raw;
+        message: ReceivedMessage.Raw;
         thread: ThreadItem.Raw;
     }
 }

package/dist/esm/serialization/resources/events/types/MessageReceivedEvent.mjs

@@ -1,13 +1,13 @@
 // This file was auto-generated by Fern from our API Definition.
 import * as core from "../../../../core/index.mjs";
-import { Message } from "../../messages/types/Message.mjs";
 import { ThreadItem } from "../../threads/types/ThreadItem.mjs";
 import { EventId } from "./EventId.mjs";
 import { MessageReceivedEventType } from "./MessageReceivedEventType.mjs";
+import { ReceivedMessage } from "./ReceivedMessage.mjs";
 export const MessageReceivedEvent = core.serialization.object({
     type: core.serialization.stringLiteral("event"),
     eventType: core.serialization.property("event_type", MessageReceivedEventType),
     eventId: core.serialization.property("event_id", EventId),
-    message: Message,
+    message: ReceivedMessage,
     thread: ThreadItem,
 });

package/dist/esm/serialization/resources/events/types/ReceivedMessage.d.mts

@@ -0,0 +1,11 @@
+import type * as AgentMail from "../../../../api/index.mjs";
+import * as core from "../../../../core/index.mjs";
+import type * as serializers from "../../../index.mjs";
+import { Message } from "../../messages/types/Message.mjs";
+export declare const ReceivedMessage: core.serialization.ObjectSchema<serializers.ReceivedMessage.Raw, AgentMail.ReceivedMessage>;
+export declare namespace ReceivedMessage {
+    interface Raw extends Message.Raw {
+        body_url?: string | null;
+        body_expires_at?: string | null;
+    }
+}

package/dist/esm/serialization/resources/events/types/ReceivedMessage.mjs

@@ -0,0 +1,9 @@
+// This file was auto-generated by Fern from our API Definition.
+import * as core from "../../../../core/index.mjs";
+import { Message } from "../../messages/types/Message.mjs";
+export const ReceivedMessage = core.serialization
+    .object({
+    bodyUrl: core.serialization.property("body_url", core.serialization.string().optional()),
+    bodyExpiresAt: core.serialization.property("body_expires_at", core.serialization.date().optional()),
+})
+    .extend(Message);

package/dist/esm/serialization/resources/events/types/index.d.mts

@@ -28,6 +28,7 @@ export * from "./MessageSecurityReviewEvent.mjs";
 export * from "./MessageSentEvent.mjs";
 export * from "./Open.mjs";
 export * from "./PodIds.mjs";
+export * from "./ReceivedMessage.mjs";
 export * from "./Recipient.mjs";
 export * from "./Reject.mjs";
 export * from "./Send.mjs";