agentmail 0.5.46 → 0.5.48

package/dist/esm/api/resources/events/types/ReceivedMessage.d.mts

@@ -0,0 +1,18 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * The received message. The body (`text`, `html`, `extracted_text`, and `extracted_html`) is included
+ * inline only when it is small enough. Webhooks omit it when the stored body is larger than 64 KiB;
+ * WebSocket events also omit it when the serialized event would be larger than 30 KiB. When the body
+ * is omitted, `body_url` and `body_expires_at` are set instead.
+ */
+export interface ReceivedMessage extends AgentMail.Message {
+    /**
+     * Pre-signed URL that downloads the stored body as a JSON object including `text`, `html`,
+     * `extracted_text`, and `extracted_html`. Present only when the body is omitted from the event.
+     * Valid until `body_expires_at`, one hour after the event was built. The body stays available
+     * through the get message endpoint after the URL expires.
+     */
+    bodyUrl?: string;
+    /** Time at which `body_url` expires. Present only with `body_url`. */
+    bodyExpiresAt?: Date;
+}

package/dist/esm/api/resources/events/types/ReceivedMessage.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/events/types/index.d.mts

@@ -28,6 +28,7 @@ export * from "./MessageSecurityReviewEvent.mjs";
 export * from "./MessageSentEvent.mjs";
 export * from "./Open.mjs";
 export * from "./PodIds.mjs";
+export * from "./ReceivedMessage.mjs";
 export * from "./Recipient.mjs";
 export * from "./Reject.mjs";
 export * from "./Send.mjs";

package/dist/esm/api/resources/events/types/index.mjs

@@ -28,6 +28,7 @@ export * from "./MessageSecurityReviewEvent.mjs";
 export * from "./MessageSentEvent.mjs";
 export * from "./Open.mjs";
 export * from "./PodIds.mjs";
+export * from "./ReceivedMessage.mjs";
 export * from "./Recipient.mjs";
 export * from "./Reject.mjs";
 export * from "./Send.mjs";

package/dist/esm/api/resources/inboxes/client/Client.d.mts

@@ -117,7 +117,8 @@ export declare class InboxesClient {
      * ```
      *
      * To pause an inbox, set `status` to `paused`; set it back to `active` to
-     * resume. See [Pausing an inbox](/inboxes#pausing-an-inbox).
+     * resume. To pause it later, set `pause_at`. See
+     * [Pausing an inbox](/inboxes#pausing-an-inbox).
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.UpdateInboxRequest} request

package/dist/esm/api/resources/inboxes/client/Client.mjs

@@ -368,7 +368,8 @@ export class InboxesClient {
      * ```
      *
      * To pause an inbox, set `status` to `paused`; set it back to `active` to
-     * resume. See [Pausing an inbox](/inboxes#pausing-an-inbox).
+     * resume. To pause it later, set `pause_at`. See
+     * [Pausing an inbox](/inboxes#pausing-an-inbox).
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.UpdateInboxRequest} request

package/dist/esm/api/resources/inboxes/resources/calendar/client/Client.d.mts

@@ -17,9 +17,8 @@ export declare class CalendarClient {
      * created. Its `etag` (also the `ETag` response header) is the value to send in `If-Match` to
      * make an update conditional.
      *
-     * Requires the `calendar_read` permission. Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`)
-     * but not yet in EU production (`api.agentmail.eu`). Organizations that have not joined
-     * Labs receive a `403`.
+     * Requires the `calendar_read` permission. Calendar is available in US production
+     * (`api.agentmail.to`) but not yet in EU production (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.GetCalendarRequest} request
@@ -44,8 +43,8 @@ export declare class CalendarClient {
      * calendar's current `etag` in `If-Match`: a stale value returns `412`. Without `If-Match` the
      * update applies to the calendar as it is.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.UpdateCalendarRequestWrapper} request
@@ -77,8 +76,8 @@ export declare class CalendarClient {
      * The list is always read in the region that serves the request, so it can trail a change made
      * moments earlier by a few seconds. Requires the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.ListCalendarEventsRequest} request
@@ -115,8 +114,8 @@ export declare class CalendarClient {
      * moments earlier by a few seconds. Pass `consistency=primary` to read your own change right
      * away. Requires the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.GetCalendarAgendaRequest} request
@@ -158,8 +157,8 @@ export declare class CalendarClient {
      * The event's `etag` is the value to send in `If-Match` to make a later update or delete
      * conditional. Requires the `calendar_event_create` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CreateCalendarEventRequest} request
@@ -220,8 +219,8 @@ export declare class CalendarClient {
      * reads back as it ran, even if a later change to the series no longer produces it. Requires
      * the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id
@@ -269,8 +268,8 @@ export declare class CalendarClient {
      * send limits, charged before the change is saved; an over-limit request returns `429`
      * `rate_limit_exceeded` and changes nothing.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id
@@ -327,8 +326,8 @@ export declare class CalendarClient {
      * send limits, charged before the delete; an over-limit request returns `429`
      * `rate_limit_exceeded` and deletes nothing.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id
@@ -368,8 +367,8 @@ export declare class CalendarClient {
      * trail a change made moments earlier by a few seconds; pass `consistency=primary` to read
      * your own change right away. Requires the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {string} event_id - UUID of the recurring event.
@@ -407,8 +406,8 @@ export declare class CalendarClient {
      * charged before the response is saved; an over-limit request returns `429`
      * `rate_limit_exceeded` and changes nothing.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id

package/dist/esm/api/resources/inboxes/resources/calendar/client/Client.mjs

@@ -38,9 +38,8 @@ export class CalendarClient {
      * created. Its `etag` (also the `ETag` response header) is the value to send in `If-Match` to
      * make an update conditional.
      *
-     * Requires the `calendar_read` permission. Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`)
-     * but not yet in EU production (`api.agentmail.eu`). Organizations that have not joined
-     * Labs receive a `403`.
+     * Requires the `calendar_read` permission. Calendar is available in US production
+     * (`api.agentmail.to`) but not yet in EU production (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.GetCalendarRequest} request
@@ -141,8 +140,8 @@ export class CalendarClient {
      * calendar's current `etag` in `If-Match`: a stale value returns `412`. Without `If-Match` the
      * update applies to the calendar as it is.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.UpdateCalendarRequestWrapper} request
@@ -272,8 +271,8 @@ export class CalendarClient {
      * The list is always read in the region that serves the request, so it can trail a change made
      * moments earlier by a few seconds. Requires the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.ListCalendarEventsRequest} request
@@ -382,8 +381,8 @@ export class CalendarClient {
      * moments earlier by a few seconds. Pass `consistency=primary` to read your own change right
      * away. Requires the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.inboxes.GetCalendarAgendaRequest} request
@@ -516,8 +515,8 @@ export class CalendarClient {
      * The event's `etag` is the value to send in `If-Match` to make a later update or delete
      * conditional. Requires the `calendar_event_create` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CreateCalendarEventRequest} request
@@ -675,8 +674,8 @@ export class CalendarClient {
      * reads back as it ran, even if a later change to the series no longer produces it. Requires
      * the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id
@@ -808,8 +807,8 @@ export class CalendarClient {
      * send limits, charged before the change is saved; an over-limit request returns `429`
      * `rate_limit_exceeded` and changes nothing.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id
@@ -988,8 +987,8 @@ export class CalendarClient {
      * send limits, charged before the delete; an over-limit request returns `429`
      * `rate_limit_exceeded` and deletes nothing.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id
@@ -1138,8 +1137,8 @@ export class CalendarClient {
      * trail a change made moments earlier by a few seconds; pass `consistency=primary` to read
      * your own change right away. Requires the `calendar_event_read` permission.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {string} event_id - UUID of the recurring event.
@@ -1276,8 +1275,8 @@ export class CalendarClient {
      * charged before the response is saved; an over-limit request returns `429`
      * `rate_limit_exceeded` and changes nothing.
      *
-     * Calendar is in AgentMail Labs, available in US production (`api.agentmail.to`) but not yet
-     * in EU production (`api.agentmail.eu`). Organizations that have not joined Labs receive a `403`.
+     * Calendar is available in US production (`api.agentmail.to`) but not yet in EU production
+     * (`api.agentmail.eu`), which returns `403`.
      *
      * @param {AgentMail.inboxes.InboxId} inbox_id
      * @param {AgentMail.CalendarEventId} event_id

package/dist/esm/api/resources/inboxes/types/CreateInboxRequest.d.mts

@@ -12,6 +12,8 @@ export interface CreateInboxRequest {
     clientId?: AgentMail.inboxes.ClientId;
     /** Set `paused` to create the inbox paused. */
     status?: AgentMail.inboxes.InboxStatus;
+    /** Schedule the inbox to pause at this time, for example when a fixed term ends. */
+    pauseAt?: AgentMail.inboxes.PauseAt;
     /** Custom metadata to attach to the inbox. */
     metadata?: AgentMail.inboxes.Metadata;
 }

package/dist/esm/api/resources/inboxes/types/Inbox.d.mts

@@ -11,6 +11,11 @@ export interface Inbox {
      * receives normally.
      */
     status?: AgentMail.inboxes.InboxStatus;
+    /**
+     * When the inbox is scheduled to pause. Omitted when no pause is
+     * scheduled, and cleared once the pause happens.
+     */
+    pauseAt?: AgentMail.inboxes.PauseAt;
     /** Custom metadata attached to the inbox. */
     metadata?: AgentMail.inboxes.Metadata;
     /** Time at which inbox was last updated. */

package/dist/esm/api/resources/inboxes/types/PauseAt.d.mts

@@ -0,0 +1,7 @@
+/**
+ * When the inbox pauses itself. Within about five minutes after this time,
+ * the inbox becomes paused exactly as if `status` had been set to `paused`,
+ * and `pause_at` is cleared. Must be in the future; returned in UTC. A
+ * manual pause or resume does not change it.
+ */
+export type PauseAt = Date;

package/dist/esm/api/resources/inboxes/types/PauseAt.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/inboxes/types/UpdateInboxRequest.d.mts

@@ -7,13 +7,19 @@ export interface UpdateInboxRequest {
      * resume.
      */
     status?: AgentMail.inboxes.InboxStatus;
+    /**
+     * Schedule a pause, or move one already scheduled. Send null to cancel
+     * it. Only an organization- or pod-scoped API key can change it; an
+     * inbox-scoped key gets `403`.
+     */
+    pauseAt?: AgentMail.inboxes.PauseAt | null;
     /**
      * Metadata to merge into the inbox's existing metadata. Keys you include
      * are added or overwritten; keys you omit are left unchanged. To remove a
      * single key, send it with a null value. To clear all metadata, send
      * `metadata` as null. Sending an empty object is rejected; use null to
      * clear. Each update must include at least one of `display_name`,
-     * `status`, or `metadata`.
+     * `status`, `pause_at`, or `metadata`.
      */
     metadata?: AgentMail.inboxes.UpdateMetadata | null;
 }

package/dist/esm/api/resources/inboxes/types/index.d.mts

@@ -10,6 +10,7 @@ export * from "./InboxStatus.mjs";
 export * from "./ListInboxesResponse.mjs";
 export * from "./Metadata.mjs";
 export * from "./MetadataValue.mjs";
+export * from "./PauseAt.mjs";
 export * from "./SearchInboxesResponse.mjs";
 export * from "./UpdateInboxRequest.mjs";
 export * from "./UpdateMetadata.mjs";

package/dist/esm/api/resources/inboxes/types/index.mjs

@@ -10,6 +10,7 @@ export * from "./InboxStatus.mjs";
 export * from "./ListInboxesResponse.mjs";
 export * from "./Metadata.mjs";
 export * from "./MetadataValue.mjs";
+export * from "./PauseAt.mjs";
 export * from "./SearchInboxesResponse.mjs";
 export * from "./UpdateInboxRequest.mjs";
 export * from "./UpdateMetadata.mjs";

package/dist/esm/api/resources/messages/types/Message.d.mts

@@ -24,6 +24,7 @@ export interface Message {
     calendarEventId?: AgentMail.MessageCalendarEventId;
     references?: AgentMail.MessageReferences;
     headers?: AgentMail.MessageHeaders;
+    authenticationResults?: AgentMail.MessageAuthenticationResults;
     agentArmor?: AgentMail.AgentArmorResult;
     size: AgentMail.MessageSize;
     updatedAt: AgentMail.MessageUpdatedAt;

package/dist/esm/api/resources/messages/types/MessageAuthenticationDomain.d.mts

@@ -0,0 +1,5 @@
+/**
+ * The domain an authentication verdict is about, lowercase. Present only beside its verdict:
+ * when the verdict is withheld, so is the domain.
+ */
+export type MessageAuthenticationDomain = string;

package/dist/esm/api/resources/messages/types/MessageAuthenticationDomain.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/messages/types/MessageAuthenticationResults.d.mts

@@ -0,0 +1,56 @@
+import type * as AgentMail from "../../../index.mjs";
+/**
+ * Per-mechanism SPF, DKIM, and DMARC verdicts for a received message, each with the domain it
+ * is about, kept only where they speak for the sender's From identity. A verdict that could
+ * not be computed is absent, so the field can be `{}`. The field is absent on sent messages
+ * and on messages received before 2026-09-09; the `*_domain` and `arc_sealer` keys appear on
+ * messages received after they were introduced.
+ *
+ * The verdicts are the ones Amazon SES computed when the message reached AgentMail, with one
+ * exception. Forwarded mail fails DMARC at the receiving hop by construction. When AgentMail
+ * delivers a forwarded message as authenticated because a trusted forwarder (such as Google or
+ * Microsoft) sealed a valid ARC chain vouching for the original, the field reports the
+ * verdicts that forwarder recorded for the original message, and `arc_sealer` names it.
+ *
+ * - `spf` is about the envelope MAIL FROM (Return-Path) domain, named in `spf_domain`. It is
+ *   present only when that domain is aligned with the sender's domain (the From mailbox, or
+ *   the Sender header when From spans domains), meaning the two share an organizational
+ *   domain: `mail.example.com` is aligned with `example.com`. An unaligned SPF result is
+ *   withheld whatever its value.
+ * - `dkim` is the DKIM verdict, and `dkim_domain` the signing domain (the `d=` tag). On
+ *   directly received mail the domain is named only when every DKIM signature on the message
+ *   is from the same domain; a message signed by more than one domain (a sender and its email
+ *   provider, for instance) keeps the verdict and omits the domain. `dkim_domain` is the
+ *   signing domain as written, so compare it with the From domain before relying on it.
+ * - `dmarc` is the DMARC verdict for the From domain, named in `dmarc_domain`.
+ * - `dkim` and `dmarc` are withheld when the From list spans more than one domain or could not
+ *   be fully parsed.
+ * - On forwarded mail each sealed verdict is reported only when the domain the forwarder
+ *   recorded it for matches the message's current From domain. If the forwarder rewrote From,
+ *   or vouched for nothing, the field is `{}`.
+ *
+ * The `unauthenticated` label, not this field, is AgentMail's acceptance decision, and it uses
+ * a looser rule, so the two can disagree: a single-From message whose only pass is an
+ * unaligned envelope SPF is delivered without the label while this field shows no pass. Use
+ * the label to tell whether AgentMail accepted the message as legitimate, and this field to
+ * see which domain each mechanism authenticated. Do not reject mail on `dmarc: fail` alone.
+ */
+export interface MessageAuthenticationResults {
+    spf?: AgentMail.MessageAuthenticationVerdict;
+    dkim?: AgentMail.MessageAuthenticationVerdict;
+    dmarc?: AgentMail.MessageAuthenticationVerdict;
+    /** Envelope MAIL FROM domain the `spf` verdict is about (`smtp.mailfrom`). */
+    spfDomain?: AgentMail.MessageAuthenticationDomain;
+    /**
+     * Signing domain the `dkim` verdict is about (`header.d`). Present only when `dkim` is
+     * `pass` or `fail`.
+     */
+    dkimDomain?: AgentMail.MessageAuthenticationDomain;
+    /** From domain the `dmarc` verdict is about (`header.from`). */
+    dmarcDomain?: AgentMail.MessageAuthenticationDomain;
+    /**
+     * Domain of the trusted forwarder whose ARC seal the verdicts were taken from, such as
+     * `google.com`. Present only on forwarded mail, and only beside at least one verdict.
+     */
+    arcSealer?: AgentMail.MessageAuthenticationDomain;
+}

package/dist/esm/api/resources/messages/types/MessageAuthenticationResults.mjs

@@ -0,0 +1,2 @@
+// This file was auto-generated by Fern from our API Definition.
+export {};

package/dist/esm/api/resources/messages/types/MessageAuthenticationVerdict.d.mts

@@ -0,0 +1,16 @@
+/**
+ * Result of one email authentication mechanism, in the vocabulary of the
+ * `Authentication-Results` header (RFC 8601). `none` means there was nothing to evaluate
+ * (Amazon SES calls this GRAY): no SPF record for the envelope MAIL FROM domain, no DKIM
+ * signature to check, or no DMARC record for the From domain.
+ */
+export declare const MessageAuthenticationVerdict: {
+    readonly Pass: "pass";
+    readonly Fail: "fail";
+    readonly None: "none";
+    readonly Neutral: "neutral";
+    readonly Softfail: "softfail";
+    readonly Temperror: "temperror";
+    readonly Permerror: "permerror";
+};
+export type MessageAuthenticationVerdict = (typeof MessageAuthenticationVerdict)[keyof typeof MessageAuthenticationVerdict];

package/dist/esm/api/resources/messages/types/MessageAuthenticationVerdict.mjs

@@ -0,0 +1,16 @@
+// This file was auto-generated by Fern from our API Definition.
+/**
+ * Result of one email authentication mechanism, in the vocabulary of the
+ * `Authentication-Results` header (RFC 8601). `none` means there was nothing to evaluate
+ * (Amazon SES calls this GRAY): no SPF record for the envelope MAIL FROM domain, no DKIM
+ * signature to check, or no DMARC record for the From domain.
+ */
+export const MessageAuthenticationVerdict = {
+    Pass: "pass",
+    Fail: "fail",
+    None: "none",
+    Neutral: "neutral",
+    Softfail: "softfail",
+    Temperror: "temperror",
+    Permerror: "permerror",
+};

package/dist/esm/api/resources/messages/types/MessageCalendarEventId.d.mts

@@ -2,7 +2,8 @@
  * The calendar event this email's invitation was applied to: set when the email's calendar
  * invitation, update, cancellation or attendee reply changed the inbox's calendar, a few seconds
  * after the email arrives. For an email about one date of a recurring event, it is that date's
- * event ID. Absent on other emails, and on invitations that were not imported. Calendar is in
- * AgentMail Labs.
+ * event ID. Absent on other emails, and on invitations that were not imported. The
+ * `message.received` event for an email with a calendar attachment waits until this is set, at
+ * most 20 seconds, so it usually arrives with it. Calendar is available in US production.
  */
 export type MessageCalendarEventId = string;

package/dist/esm/api/resources/messages/types/MessageHeaders.d.mts

@@ -1,4 +1,7 @@
 /**
- * Headers in message.
+ * Headers in message. `Authentication-Results` is never included, on received or sent
+ * messages: the header is unsigned, so a sender can plant a forged copy. Read
+ * `authentication_results` for the verdicts instead. Get Raw Message still returns every copy
+ * of the header.
  */
 export type MessageHeaders = Record<string, string>;

package/dist/esm/api/resources/messages/types/MessageItem.d.mts

@@ -16,6 +16,7 @@ export interface MessageItem {
     calendarEventId?: AgentMail.MessageCalendarEventId;
     references?: AgentMail.MessageReferences;
     headers?: AgentMail.MessageHeaders;
+    authenticationResults?: AgentMail.MessageAuthenticationResults;
     agentArmor?: AgentMail.AgentArmorResult;
     size: AgentMail.MessageSize;
     updatedAt: AgentMail.MessageUpdatedAt;

package/dist/esm/api/resources/messages/types/index.d.mts

@@ -8,6 +8,9 @@ export * from "./BatchUpdateMessagesResponse.mjs";
 export * from "./ListMessagesResponse.mjs";
 export * from "./Message.mjs";
 export * from "./MessageAttachments.mjs";
+export * from "./MessageAuthenticationDomain.mjs";
+export * from "./MessageAuthenticationResults.mjs";
+export * from "./MessageAuthenticationVerdict.mjs";
 export * from "./MessageBcc.mjs";
 export * from "./MessageCalendarEventId.mjs";
 export * from "./MessageCc.mjs";

package/dist/esm/api/resources/messages/types/index.mjs

@@ -8,6 +8,9 @@ export * from "./BatchUpdateMessagesResponse.mjs";
 export * from "./ListMessagesResponse.mjs";
 export * from "./Message.mjs";
 export * from "./MessageAttachments.mjs";
+export * from "./MessageAuthenticationDomain.mjs";
+export * from "./MessageAuthenticationResults.mjs";
+export * from "./MessageAuthenticationVerdict.mjs";
 export * from "./MessageBcc.mjs";
 export * from "./MessageCalendarEventId.mjs";
 export * from "./MessageCc.mjs";

package/dist/esm/api/resources/metrics/client/Client.d.mts

@@ -54,10 +54,9 @@ export declare class MetricsClient {
      * `period` grid point, the bounced (or complained) messages over the
      * preceding `window` divided by the messages sent over the same window,
      * with the send count alongside so you can see the volume behind
-     * it. This is the number AgentMail's account moderation acts on: a
-     * warning at a 5% bounce rate and suspension at 10%, evaluated over a
-     * rolling 24 hours once at least 1,000 messages were sent in that
-     * window. Defaults to the rolling 24-hour rate sampled hourly over the
+     * it. AgentMail weighs bounce and complaint signals when deciding
+     * whether to suspend an account's sending, so keep both rates low.
+     * Defaults to the rolling 24-hour rate sampled hourly over the
      * last day; `start` must be within the last 90 days, `window` must be a
      * whole multiple of `period`, and the range plus window divided by
      * `period` must not exceed 1000 buckets.

package/dist/esm/api/resources/metrics/client/Client.mjs

@@ -203,10 +203,9 @@ export class MetricsClient {
      * `period` grid point, the bounced (or complained) messages over the
      * preceding `window` divided by the messages sent over the same window,
      * with the send count alongside so you can see the volume behind
-     * it. This is the number AgentMail's account moderation acts on: a
-     * warning at a 5% bounce rate and suspension at 10%, evaluated over a
-     * rolling 24 hours once at least 1,000 messages were sent in that
-     * window. Defaults to the rolling 24-hour rate sampled hourly over the
+     * it. AgentMail weighs bounce and complaint signals when deciding
+     * whether to suspend an account's sending, so keep both rates low.
+     * Defaults to the rolling 24-hour rate sampled hourly over the
      * last day; `start` must be within the last 90 days, `window` must be a
      * whole multiple of `period`, and the range plus window divided by
      * `period` must not exceed 1000 buckets.

package/dist/esm/api/resources/organizations/client/Client.d.mts

@@ -26,7 +26,7 @@ export declare class OrganizationsClient {
     get(requestOptions?: OrganizationsClient.RequestOptions): core.HttpResponsePromise<AgentMail.Organization>;
     private __get;
     /**
-     * Returns whether the organization is in [AgentMail Labs](https://docs.agentmail.to/calendar), which turns on features that are still in preview, such as calendar. Requires an organization-scoped API key.
+     * Returns whether the organization is in AgentMail Labs, which turns on features that are still in preview, such as [Agent Armor](https://docs.agentmail.to/agent-armor). Requires an organization-scoped API key.
      *
      * **CLI:**
      * ```bash

package/dist/esm/api/resources/organizations/client/Client.mjs

@@ -76,7 +76,7 @@ export class OrganizationsClient {
         });
     }
     /**
-     * Returns whether the organization is in [AgentMail Labs](https://docs.agentmail.to/calendar), which turns on features that are still in preview, such as calendar. Requires an organization-scoped API key.
+     * Returns whether the organization is in AgentMail Labs, which turns on features that are still in preview, such as [Agent Armor](https://docs.agentmail.to/agent-armor). Requires an organization-scoped API key.
      *
      * **CLI:**
      * ```bash

package/dist/esm/api/resources/organizations/types/Organization.d.mts

@@ -22,6 +22,18 @@ export interface Organization {
     authenticationId?: string;
     /** Authentication provider type. */
     authenticationType?: string;
+    /**
+     * Time at which the organization was suspended. Absent when it is not suspended. A suspended
+     * organization cannot send, but it still receives mail, its webhooks and WebSocket events still
+     * fire, and API reads keep working. See [account_suspended](https://docs.agentmail.to/errors#account_suspended).
+     */
+    suspendedAt?: Date;
+    /**
+     * Why the organization is suspended, in a short machine-readable form such as `message.bounced`
+     * or `message.complained`. Absent when it is not suspended. Email support@agentmail.cc to resolve
+     * a suspension.
+     */
+    suspendedReason?: string;
     /** Time at which organization was last updated. */
     updatedAt: Date;
     /** Time at which organization was created. */

package/dist/esm/api/resources/webhooks/types/CreatePodWebhookRequest.d.mts

@@ -5,5 +5,9 @@ import type * as AgentMail from "../../../index.mjs";
  * receive events for the whole pod.
  */
 export interface CreatePodWebhookRequest extends AgentMail.webhooks.CreateInboxWebhookRequest {
+    /**
+     * Inboxes for which to send events. A webhook can list at most 10 inboxes and pods combined;
+     * more returns `403` with `limit_exceeded`.
+     */
     inboxIds?: AgentMail.InboxIds;
 }