primcli 1.70.0 → 1.71.0

package/dist/oclif/index.js

@@ -1,12 +1,12 @@
-import { a as REPEAT_IDLE_MAX_MINUTES, b as parseWebhookEvent, d as parseRepeatTick, f as preparePresenceAliveEmail, i as REPEAT_EVERY_MAX_MINUTES, l as parseInteractionEnvelope$1, m as repeatStopCommand, o as REPEAT_MAX_SENDS_MAX, p as prepareSignalEmail, s as buildRepeatStopBody, u as parsePresenceEnvelope, v as isEmailReceivedEvent, x as parseFromHeader } from "../repeats-BL7ZC-_6-BZ-MphTV.js";
+import { a as REPEAT_IDLE_MAX_MINUTES, b as parseWebhookEvent, d as parseRepeatTick, f as preparePresenceAliveEmail, i as REPEAT_EVERY_MAX_MINUTES, l as parseInteractionEnvelope$1, m as repeatStopCommand, o as REPEAT_MAX_SENDS_MAX, p as prepareSignalEmail, s as buildRepeatStopBody, u as parsePresenceEnvelope, v as isEmailReceivedEvent, x as parseFromHeader } from "../repeats-BL7ZC-_6-CKMKBlx7.js";
 import { A as saveActiveChatState, C as resolveCliAuth, D as deleteChatState, E as chatStatePath, F as agentProfilesDirectory, H as requireDefaultLoginProfile, M as AgentConnectionSetupError, N as agentProfileDirectory, O as loadActiveChatState, P as agentProfileName, R as loadConnectedAgentProfile, T as saveSignupCredentials, W as PrimitiveApiClient, _ as deleteCliCredentials, a as normalizeCliEnvironmentName, b as hasStoredCliLogin, c as resolveConfigEnvironment, g as credentialsPath, h as credentialsLockPath, i as loadCliConfig, j as AGENT_PROFILE_ENV, k as loadChatConversationByLocalId, l as saveCliConfig, m as cliAccessTokenExpiresAt, n as deleteCliConfig, o as redactCliEnvironment, p as acquireCliCredentialsLock, r as emptyCliConfig, s as removeCliEnvironment, u as upsertCliEnvironment, v as deleteCliCredentialsLock, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname } from "../cli-config-DMszFbGn.js";
-import { $ as apiResultHttpStatus, $n as replyToEmail, $t as completeWebhookEvent, A as readThreadContext, An as listAgentNetworks, At as formatAlreadySentNotice, B as pendingMailPath, Bn as listRoutes, Bt as expectedAutomatedVerdicts, C as queryUsesAwaiting, Cn as getMemory, Cr as verifyAgentSignup, Ct as cliInvocation, D as displayAddress, Dn as getThread, Dt as identitySuggestions, E as describeWake, En as getSentEmail, Et as generatedAgentName, F as wakeReadCommand, Fn as listEmails, Ft as AUTOMATED_VALUES, G as interactionNextActions, Gn as pollCliLogin, H as recordPendingMail, Hn as listWakeAuthorizations, Ht as isAutomatedRejectedError, I as wakeRecipientField, In as listEndpoints, It as AutomatedFilterUnsupportedError, J as replyInteractionWarning, Jt as refreshStoredCliCredentials, K as readEmailInteraction, Kn as pullWebhookEvent, Kt as createAuthenticatedCliApiClient, L as wakeRelationship, Ln as listFunctionLogs, Lt as assertAutomatedVerdict, M as serverMuted, Mn as listDefaultNetworkAgents, Mt as withFlagSuggestion, N as serverRelationship, Nn as listDefaultNetworkMembers, Nt as AUTOMATED_FILTER_UNSUPPORTED_CODE, O as formatMailWakeLine, On as getWakeSchedule, Ot as loadSkillLine, Pn as listDomains, Pt as AUTOMATED_FLAG_DESCRIPTION, Q as SEND_OUTCOME_HELP, Qn as reorderRoutes, Qt as cliLogout, R as clearConsumedPendingMail, Rn as listFunctions, Rt as automatedRejectedError, S as isAwaitingRejectedError, Sn as getInboxStatus, Sr as verifyAgentClaim, T as bareAddress, Tn as getRepeatingSend, U as removePendingMail, Un as listWakeDispatches, Ut as queryUsesAutomated, V as readPendingMail, Vn as listSentEmails, Vt as hasAutomatedVerdict, W as interactionHumanLine, Wn as listWakeSchedules, Wt as ConnectedAgentKeyRequiredError, X as IDEMPOTENCY_KEY_FLAG_DESCRIPTION, Xn as redeemCreditCode, Xt as addDefaultNetworkMember, Yt as resolveCliApiRequestConfig, Z as MAX_SEND_WAIT_TIMEOUT_MS, Zn as removeDefaultNetworkMember, Zt as checkDefaultNetworkContactAdmission, _ as awaitingRejectedError, _n as getDefaultNetworkAgent, _r as updateFunction, _t as sendWaitClampNotice, a as extractErrorCode, ar as sendEmail, at as deriveSendIdempotencyKey, b as formatRepliesCell, bn as getFunctionRouting, br as updateWakeAuthorization, bt as successfulSendOutcome, c as readTextFileFlag, cn as deleteRoute, cr as setMemory, ct as formatDeletedEarlierSendNotice, d as writeErrorWithHints, dr as startAgentSignup, dt as formatSendFailureSummary, en as createEndpoint, er as resendAgentSignupVerification, et as assertValidIdempotencyKey, f as AWAITING_FLAG_DESCRIPTION, fn as getAccount, fr as startCliLogin, ft as formatSendRecordFailureSummary, g as assertAwaitingFilterRows, gn as getCreditBalance, gr as updateDefaultNetworkMember, gt as sendOutcomeExitCode, h as ReplyStateUnsupportedError, hn as getConversation, hr as unsetFunctionRoute, ht as sendIdentityFields, i as createOperationCommand, in as createWakeSchedule, ir as semanticSearch, it as classifySendError, j as sentInThread, jt as writeIdempotentReplayBannerIfReplay, k as latestOwnOutbound, kn as listAgentContacts, kt as currentMailSessionKey, l as runWithTiming, ln as deleteWakeAuthorization, lr as simulateRoute, lt as formatPriorRepliesCheckSkipped, m as REPLY_STATE_UNSUPPORTED_CODE, mr as testFunction, mt as reportSendCommandResult, n as API_ERROR_CODES, nn as createRoute, nr as searchEmails, nt as buildThrownSendFailureEnvelope, o as extractErrorPayload, or as setFunctionRoute, ot as excludeSignalReplies, p as AWAITING_VALUES, pn as getAgentContactPolicy, pr as stopRepeatFromEmail, pt as priorRepliesThatWentOut, q as replyExpectation, qt as createCliApiClient, r as TIME_FLAG_DESCRIPTION, rn as createWakeAuthorization, rr as searchMemories, rt as checkPriorReplies, s as formatErrorPayload, sn as deleteMemory, sr as setFunctionSecret, st as followUpCommandPrefix, t as API_BASE_URL_FLAG_DESCRIPTION, tn as createFunction, tr as runWakeSchedule, tt as buildFollowUpCommand, u as surfaceUnauthorizedHint, un as deleteWakeSchedule, ur as startAgentClaim, ut as formatPriorRepliesWarning, v as ensureSearchReportsReplyState, vn as getEmail, vr as updateRepeatingSend, vt as sentHistoryWindowStart, w as explainPendingMailNotFound, wn as getOrgRoutingTopology, wt as connectNextSteps, x as hasReplyState, xn as getFunctionTestRunTrace, xr as updateWakeSchedule, xt as thrownErrorExitCode, y as formatAwaitingCell, yn as getFunction, yr as updateRoute, yt as serializeErrorPayload, z as clearReadPendingMail, zn as listRepeatingSends, zt as ensureSearchReportsAutomated } from "../api-command-C58Oh38I.js";
+import { $ as apiResultHttpStatus, $n as listWakeAuthorizations, $t as addDefaultNetworkMember, A as readThreadContext, An as getFunctionTestRunTrace, Ar as updateRoute, At as formatAlreadySentNotice, B as pendingMailPath, Bt as expectedAutomatedVerdicts, C as queryUsesAwaiting, Cr as startCliLogin, Ct as cliInvocation, D as displayAddress, Dn as getEmail, Dr as updateDefaultNetworkMember, Dt as identitySuggestions, E as describeWake, En as getDefaultNetworkAgent, Er as unsetFunctionRoute, Et as generatedAgentName, F as wakeReadCommand, Fn as getSentEmail, Ft as AUTOMATED_VALUES, G as interactionNextActions, Gn as listEmails, Gt as ATTACHMENT_WAIT_MAX_MS, H as recordPendingMail, Hn as listDefaultNetworkMembers, Ht as isAutomatedRejectedError, I as wakeRecipientField, In as getThread, It as AutomatedFilterUnsupportedError, J as replyInteractionWarning, Jn as listFunctions, K as readEmailInteraction, Kn as listEndpoints, Kt as withAttachmentWait, L as wakeRelationship, Ln as getWakeSchedule, Lt as assertAutomatedVerdict, M as serverMuted, Mn as getMemory, Mr as updateWakeSchedule, Mt as withFlagSuggestion, N as serverRelationship, Nn as getOrgRoutingTopology, Nr as verifyAgentClaim, Nt as AUTOMATED_FILTER_UNSUPPORTED_CODE, O as formatMailWakeLine, On as getFunction, Or as updateFunction, Ot as loadSkillLine, Pn as getRepeatingSend, Pr as verifyAgentSignup, Pt as AUTOMATED_FLAG_DESCRIPTION, Q as SEND_OUTCOME_HELP, Qn as listSentEmails, Qt as resolveCliApiRequestConfig, R as clearConsumedPendingMail, Rn as listAgentContacts, Rt as automatedRejectedError, S as isAwaitingRejectedError, Sn as getAgentContactPolicy, Sr as startAgentSignup, T as bareAddress, Tn as getCreditBalance, Tr as testFunction, U as removePendingMail, Un as listDomains, Ut as queryUsesAutomated, V as readPendingMail, Vn as listDefaultNetworkAgents, Vt as hasAutomatedVerdict, W as interactionHumanLine, Wn as listEmailAttachmentArchiveMembers, Wt as ATTACHMENT_WAIT_FLAG_DESCRIPTION, X as IDEMPOTENCY_KEY_FLAG_DESCRIPTION, Xn as listRoutes, Xt as createCliApiClient, Yn as listRepeatingSends, Yt as createAuthenticatedCliApiClient, Z as MAX_SEND_WAIT_TIMEOUT_MS, Zn as listSentAttachmentArchiveMembers, Zt as refreshStoredCliCredentials, _ as awaitingRejectedError, _n as downloadEmailAttachmentByFilename, _r as setFunctionRoute, _t as sendWaitClampNotice, a as extractErrorCode, an as createEndpoint, at as deriveSendIdempotencyKey, b as formatRepliesCell, bn as downloadSentAttachmentByFilename, br as simulateRoute, bt as successfulSendOutcome, c as readTextFileFlag, cn as createWakeAuthorization, cr as removeDefaultNetworkMember, ct as formatDeletedEarlierSendNotice, d as writeErrorWithHints, dr as resendAgentSignupVerification, dt as formatSendFailureSummary, en as cancelSentEmail, er as listWakeDispatches, et as assertValidIdempotencyKey, f as AWAITING_FLAG_DESCRIPTION, fn as deleteMemory, fr as runWakeSchedule, ft as formatSendRecordFailureSummary, g as assertAwaitingFilterRows, gn as downloadEmailAttachmentArchiveMember, gr as sendEmail, gt as sendOutcomeExitCode, h as ReplyStateUnsupportedError, hn as deleteWakeSchedule, hr as semanticSearch, ht as sendIdentityFields, i as createOperationCommand, in as completeWebhookEvent, it as classifySendError, j as sentInThread, jn as getInboxStatus, jr as updateWakeAuthorization, jt as writeIdempotentReplayBannerIfReplay, k as latestOwnOutbound, kn as getFunctionRouting, kr as updateRepeatingSend, kt as currentMailSessionKey, l as runWithTiming, ln as createWakeSchedule, lr as reorderRoutes, lt as formatPriorRepliesCheckSkipped, m as REPLY_STATE_UNSUPPORTED_CODE, mn as deleteWakeAuthorization, mr as searchMemories, mt as reportSendCommandResult, n as API_ERROR_CODES, nn as checkDefaultNetworkContactAdmission, nr as pollCliLogin, nt as buildThrownSendFailureEnvelope, o as extractErrorPayload, on as createFunction, ot as excludeSignalReplies, p as AWAITING_VALUES, pn as deleteRoute, pr as searchEmails, pt as priorRepliesThatWentOut, q as replyExpectation, qn as listFunctionLogs, qt as ConnectedAgentKeyRequiredError, r as TIME_FLAG_DESCRIPTION, rn as cliLogout, rr as pullWebhookEvent, rt as checkPriorReplies, s as formatErrorPayload, sn as createRoute, sr as redeemCreditCode, st as followUpCommandPrefix, t as API_BASE_URL_FLAG_DESCRIPTION, tn as cancelSentEmailByIdempotencyKey, tr as listWakeSchedules, tt as buildFollowUpCommand, u as surfaceUnauthorizedHint, ur as replyToEmail, ut as formatPriorRepliesWarning, v as ensureSearchReportsReplyState, vr as setFunctionSecret, vt as sentHistoryWindowStart, w as explainPendingMailNotFound, wn as getConversation, wr as stopRepeatFromEmail, wt as connectNextSteps, x as hasReplyState, xn as getAccount, xr as startAgentClaim, xt as thrownErrorExitCode, y as formatAwaitingCell, yn as downloadSentAttachmentArchiveMember, yr as setMemory, yt as serializeErrorPayload, z as clearReadPendingMail, zn as listAgentNetworks, zt as ensureSearchReportsAutomated } from "../api-command-B8C3jr7A.js";
 import { S as resolveListenSubscription, _ as acquireListenLock, a as mailLockBusy, c as mailTime, d as readMailJson, f as removeMailFile, g as ListenStateError, h as writeMailJson, i as mailId, l as privateMailDirectory, m as withMailLock, o as mailObject, u as privateMailPermissions, x as normalizeListenOrigin, y as listenIdentity } from "../shared-mail-files-MwlVE90c.js";
-import { _ as detectAgentRuntime, a as NotificationRetryError, b as installedVersion, c as readConversationStatusContent, d as defaultSessionSocket, f as NativeSessionDisconnectedError, g as connectSkillTarget, h as NotificationOutcomeUnknownError, i as notificationReceiptPage, l as SESSION_UUID$1, m as NativeSessionNotLoadedError, n as notificationSenders, o as isRoutineNotificationContent, p as NativeSessionError, r as openSessionNotifications, s as notificationPartReader, t as notificationScope, v as installConnectSkill, x as readBundledConnectSkill, y as installedConnectSkillFile } from "../notify-session-CVZtEboh.js";
-import { $ as installClaudeWakeHook, A as evaluateContactPolicy, B as contactAddress, C as RECEIVER_MODES, Ct as withOwnerMemberAddress, D as NETWORK_ADMISSION_PENDING_RETRY_MS, E as ContactPolicyReadRetryError, F as disconnectAgent, G as connectAgent, H as runContactRequest, I as AddressNotesApiError, J as refusalAfterReplacement, K as readAgentInvitation, L as addressNoteTarget, M as AgentDisconnectError, N as claimOverRevokedSetup, O as NetworkAdmissionPendingError, P as clearRevokedAddresses, Q as releaseRegistrationsForProfile, R as runAddressNotesRequest, S as runAgentConnect, St as refreshOwnerMemberAddressPeriodically, T as verificationReplySubmitted, U as agentConnectionStatus, V as contactAgentAddress, W as agentInvitationHash, X as savedReceiver, Y as saveConnectionName, Z as MACHINE_RUNTIMES, _ as enrollmentResumes, _t as jsonIndentation, a as endSession, at as describeSessionHookItem, b as invitationProfileName, bt as writeManagedFile, c as pendingSessionDisconnects, ct as findOnPath, d as registerSession, dt as readClaudeSettings, et as recordHookMailCheck, f as retryPendingDisconnects, ft as repairClaudeHooks, g as enrollAgent, gt as inspectManagedBlock, h as staleSessionAgents, ht as MachineFileError, i as connectedProfilesForSession, it as describeSessionHookChange, j as canonicalContactSelector, k as createNotificationContactPolicy, l as psProcessInfo, lt as hasMachineSessionHooks, m as runDetached, mt as writeClaudeSettings, n as OMP_MAIN, nt as claudeConfigDir, o as headlessClaudeRun, ot as ensureHookLauncher, p as revokeStaleSessionAgents, pt as samePath, q as receiverStatusCommand, r as agentConnectionState, rt as currentCliLocation, st as ephemeralCliReason, t as HOOK_END_GRACE_MS, tt as boundSessionProfiles, u as readClaudeHookInput, ut as inspectClaudeHooks, v as connectWarnings, vt as readManagedFile, w as externalReceivingState, x as pollCheckCommand, xt as readHookLauncherWarning, y as defaultAgentProfileName, yt as upsertManagedBlock, z as ContactsApiError } from "../machine-session-CKmn5bvB.js";
-import { a as scopedChatSenderTrust, i as readBeforeDeadline, n as isPlainChatReply, o as presenceDisposition, r as isScopedChatReply, s as readPresenceProjection, t as isConnectedChatCredential } from "../scoped-chat-Dsark9hm.js";
+import { _ as detectAgentRuntime, a as NotificationRetryError, b as installedVersion, c as readConversationStatusContent, d as defaultSessionSocket, f as NativeSessionDisconnectedError, g as connectSkillTarget, h as NotificationOutcomeUnknownError, i as notificationReceiptPage, l as SESSION_UUID$1, m as NativeSessionNotLoadedError, n as notificationSenders, o as isRoutineNotificationContent, p as NativeSessionError, r as openSessionNotifications, s as notificationPartReader, t as notificationScope, v as installConnectSkill, x as readBundledConnectSkill, y as installedConnectSkillFile } from "../notify-session-JbFGcjiM.js";
+import { $ as installClaudeWakeHook, A as evaluateContactPolicy, B as contactAddress, C as RECEIVER_MODES, Ct as withOwnerMemberAddress, D as NETWORK_ADMISSION_PENDING_RETRY_MS, E as ContactPolicyReadRetryError, F as disconnectAgent, G as connectAgent, H as runContactRequest, I as AddressNotesApiError, J as refusalAfterReplacement, K as readAgentInvitation, L as addressNoteTarget, M as AgentDisconnectError, N as claimOverRevokedSetup, O as NetworkAdmissionPendingError, P as clearRevokedAddresses, Q as releaseRegistrationsForProfile, R as runAddressNotesRequest, S as runAgentConnect, St as refreshOwnerMemberAddressPeriodically, T as verificationReplySubmitted, U as agentConnectionStatus, V as contactAgentAddress, W as agentInvitationHash, X as savedReceiver, Y as saveConnectionName, Z as MACHINE_RUNTIMES, _ as enrollmentResumes, _t as jsonIndentation, a as endSession, at as describeSessionHookItem, b as invitationProfileName, bt as writeManagedFile, c as pendingSessionDisconnects, ct as findOnPath, d as registerSession, dt as readClaudeSettings, et as recordHookMailCheck, f as retryPendingDisconnects, ft as repairClaudeHooks, g as enrollAgent, gt as inspectManagedBlock, h as staleSessionAgents, ht as MachineFileError, i as connectedProfilesForSession, it as describeSessionHookChange, j as canonicalContactSelector, k as createNotificationContactPolicy, l as psProcessInfo, lt as hasMachineSessionHooks, m as runDetached, mt as writeClaudeSettings, n as OMP_MAIN, nt as claudeConfigDir, o as headlessClaudeRun, ot as ensureHookLauncher, p as revokeStaleSessionAgents, pt as samePath, q as receiverStatusCommand, r as agentConnectionState, rt as currentCliLocation, st as ephemeralCliReason, t as HOOK_END_GRACE_MS, tt as boundSessionProfiles, u as readClaudeHookInput, ut as inspectClaudeHooks, v as connectWarnings, vt as readManagedFile, w as externalReceivingState, x as pollCheckCommand, xt as readHookLauncherWarning, y as defaultAgentProfileName, yt as upsertManagedBlock, z as ContactsApiError } from "../machine-session-BrTXqxK9.js";
+import { a as scopedChatSenderTrust, i as readBeforeDeadline, n as isPlainChatReply, o as presenceDisposition, r as isScopedChatReply, s as readPresenceProjection, t as isConnectedChatCredential } from "../scoped-chat-DTFkP360.js";
 import { c as startBackgroundListen, i as backgroundListenToken, l as stopBackgroundListen, o as runBackgroundListen, r as backgroundListenStatus, u as verifyBackgroundListenTarget } from "../listen-background--0peztKE.js";
-import { a as ensureSharedMailSubscription, c as isConnectedAgentKey, d as reserveSharedMailSubscription, f as followEmailConversation, g as EventReceiverError, h as EventConnection, i as sharedMailScope, l as createSharedMailWaiter, m as otherParticipants, n as reconcileChatSend, p as readConversationFollow, r as openSharedMailReceiver, s as AGENT_CONNECTION_REQUIRED_MESSAGE, t as sendSignal, u as openSharedMailStore } from "../signal-command-Dy_oub7_.js";
+import { a as ensureSharedMailSubscription, c as isConnectedAgentKey, d as reserveSharedMailSubscription, f as followEmailConversation, g as EventReceiverError, h as EventConnection, i as sharedMailScope, l as createSharedMailWaiter, m as otherParticipants, n as reconcileChatSend, p as readConversationFollow, r as openSharedMailReceiver, s as AGENT_CONNECTION_REQUIRED_MESSAGE, t as sendSignal, u as openSharedMailStore } from "../signal-command-B2TZ8n9c.js";
 import { autoSignalEligible, dispatchAutoRead, dispatchAutoWorking, haltAutoWorking, isSentSignal, readWorkingLease, restoreAutoWorking } from "./auto-signals.js";
 import { t as guardJsonOutputCommands } from "../json-output-CEskSQJi.js";
 import { Args, Command, Errors, Flags, ux } from "@oclif/core";
@@ -104,6 +104,10 @@ const openapiDocument = {
 			"name": "Threads",
 			"description": "Conversation threads spanning received and sent emails"
 		},
+		{
+			"name": "Changes",
+			"description": "One replayable feed of what changed, to keep local snapshots current"
+		},
 		{
 			"name": "Endpoints",
 			"description": "Manage webhook endpoints that receive email events"
@@ -1120,6 +1124,16 @@ const openapiDocument = {
 					},
 					"description": "Only return emails whose `automated` has this value.\n`awaiting=you&automated=false` lists mail from people that is\nwaiting on your reply. Combines with every other filter and with\nboth `cursor` and `since`. An inbound email is `automated` when any of these holds, decided once\nwhen it arrives: `null_envelope_sender` (an empty MAIL FROM, a bounce);\n`no_identifiable_sender` (no address in the envelope or From);\n`own_address` (a sender address is exactly one of the addresses the\nmail was delivered to; sharing a domain with the recipient is not\nenough, so a colleague or another agent in the organization is not\nautomated);\n`mailer_daemon` (mailer-daemon@ or postmaster@ on any domain);\n`auto_submitted` (Auto-Submitted with any keyword but `no`, an\nempty one included);\n`precedence` (Precedence bulk, list, junk or auto_reply);\n`list_unsubscribe` (List-Unsubscribe present); `list_id` (List-Id\npresent); `auto_response_suppress` (X-Auto-Response-Suppress asks\nfor no automatic reply: All, OOF or AutoReply);\n`failed_recipients` (X-Failed-Recipients present, a bounce);\n`report` (a delivery, feedback or disposition report). Mail\nPrimitive's own automatic responders decline to answer is always\n`automated`. The header rules only see headers captured at ingest, so\nolder mail may lack them. This is loop and noise protection, not\nsender authentication.\n"
 				},
+				{
+					"name": "from_verified",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "string",
+						"enum": ["true", "false"]
+					},
+					"description": "Only return emails whose `from_verified` (the From domain was authenticated on arrival; see the field) has this value. Combines with every other filter and with both `cursor` and `since`."
+				},
 				{
 					"name": "recipient",
 					"in": "query",
@@ -1140,6 +1154,17 @@ const openapiDocument = {
 						"enum": ["true", "false"]
 					},
 					"description": "With `true`, leave out emails whose `fyi` is true. Combines with every other filter and with both `cursor` and `since`."
+				},
+				{
+					"name": "include",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "string",
+						"maxLength": 200,
+						"example": "body_text,headers"
+					},
+					"description": "Extra parts on every row, comma-separated: `body_text`, `body_html`, `headers`, `attachments`. Reads a page of messages in one request instead of one detail read per row. Parts are withheld where the detail read withholds them. Each body field is cut to 64 KiB per row and a response carries at most 2048 KiB of body text, in page order; a cut or omitted body is named in `truncated_fields`. Unknown values are a `validation_error`."
 				}
 			],
 			"responses": {
@@ -1170,7 +1195,7 @@ const openapiDocument = {
 						"type": "string",
 						"maxLength": 500
 					},
-					"description": "Full-text search DSL query. Supports `awaiting:you` and `awaiting:them` to filter on reply state (see the `awaiting` field; delivered mail only, never `rejected`). Supports `automated:true` and `automated:false` to filter on the `automated` field. Terms are separated by spaces and every term must match. A term is a word, a `\"quoted phrase\"`, or a `field:value` filter (`from:`, `to:`, `subject:`, `body:`, `has:attachment`, `before:`, `after:`, `domain:`, `status:`, `awaiting:`, `automated:`). An upper-case `OR` between two text terms (words, phrases, `subject:` and `body:` terms) accepts either, and binds tighter than the implicit AND: `acme invoice OR receipt` is `acme` and either `invoice` or `receipt`. `OR` cannot join the other filters, and there is no `NOT` and no parentheses. A query that uses an unsupported operator, an unknown field, an unterminated quote, or only stop words is a `validation_error` that says what to change; it is never silently reinterpreted. Alternatives chain (`invoice OR receipt OR \"past due\"`), and each one counts toward the limit of 32 terms. These are rejected with a 400 `validation_error`: `OR` next to a filter (`from:a@example.com OR from:b@example.com`; run one search per value instead); an `OR` with no term on one side (a leading, trailing or doubled `OR`); an upper-case `NOT` (a search cannot exclude a term); and an alternative with no searchable word once stop words are removed (`the OR invoice`). Only upper case is an operator: to search for the word `OR` or `NOT` itself, write it in lower case or in double quotes (`\"OR\"`). With `prefix=true`, a trailing `OR` or `NOT` is read as a word still being typed. To search for text that contains a colon, such as a URL, put it in double quotes."
+					"description": "Full-text search DSL query. Supports `awaiting:you` and `awaiting:them` to filter on reply state (see the `awaiting` field; delivered mail only, never `rejected`). Supports `automated:true` and `automated:false` to filter on the `automated` field. Terms are separated by spaces and every term must match. A term is a word, a `\"quoted phrase\"`, or a `field:value` filter (`from:`, `to:`, `subject:`, `body:`, `has:attachment`, `before:`, `after:`, `domain:`, `status:`, `awaiting:`, `automated:`, `header:`, `has-header:`). An upper-case `OR` between two text terms (words, phrases, `subject:` and `body:` terms) accepts either, and binds tighter than the implicit AND: `acme invoice OR receipt` is `acme` and either `invoice` or `receipt`. `OR` cannot join the other filters, and there is no `NOT` and no parentheses. A query that uses an unsupported operator, an unknown field, an unterminated quote, or only stop words is a `validation_error` that says what to change; it is never silently reinterpreted. Alternatives chain (`invoice OR receipt OR \"past due\"`), and each one counts toward the limit of 32 terms. These are rejected with a 400 `validation_error`: `OR` next to a filter (`from:a@example.com OR from:b@example.com`; run one search per value instead); an `OR` with no term on one side (a leading, trailing or doubled `OR`); an upper-case `NOT` (a search cannot exclude a term); and an alternative with no searchable word once stop words are removed (`the OR invoice`). Only upper case is an operator: to search for the word `OR` or `NOT` itself, write it in lower case or in double quotes (`\"OR\"`). With `prefix=true`, a trailing `OR` or `NOT` is read as a word still being typed. To search for text that contains a colon, such as a URL, put it in double quotes. Supports `from_verified:true` and `from_verified:false` to filter on the `from_verified` field. `header:Name=Value` matches mail whose header `Name` has exactly `Value` (name and value case-insensitive, the whole value, quote the term for a value with spaces: `header:\"List-Id=Team news <news.example.com>\"`); `has-header:Name` matches mail that carries header `Name` with any value. Neither can be an `OR` alternative. Header filters read a stored copy of each message's headers: for received mail every header except trace and signature headers (`Received`, `DKIM-Signature`, `ARC-*`, `Authentication-Results` and similar) and credential-like names (a word such as `auth`, `token`, `key`, `secret`, `cookie`, `session`, `bearer`, `jwt` or `hmac`, including joined forms such as `AuthToken` or `SessionId`), at most 100 headers and 16 KiB per message, each value cut to 1024 bytes; for sent mail the `headers` the request set. A filter on a header that is never stored is a `validation_error`. Mail stored before header search was available has no stored headers and is not matched."
 				},
 				{
 					"name": "from",
@@ -1291,6 +1316,16 @@ const openapiDocument = {
 					},
 					"description": "Only return emails whose `automated` has this value. Also\navailable in `q` as `automated:true` or `automated:false`. An inbound email is `automated` when any of these holds, decided once\nwhen it arrives: `null_envelope_sender` (an empty MAIL FROM, a bounce);\n`no_identifiable_sender` (no address in the envelope or From);\n`own_address` (a sender address is exactly one of the addresses the\nmail was delivered to; sharing a domain with the recipient is not\nenough, so a colleague or another agent in the organization is not\nautomated);\n`mailer_daemon` (mailer-daemon@ or postmaster@ on any domain);\n`auto_submitted` (Auto-Submitted with any keyword but `no`, an\nempty one included);\n`precedence` (Precedence bulk, list, junk or auto_reply);\n`list_unsubscribe` (List-Unsubscribe present); `list_id` (List-Id\npresent); `auto_response_suppress` (X-Auto-Response-Suppress asks\nfor no automatic reply: All, OOF or AutoReply);\n`failed_recipients` (X-Failed-Recipients present, a bounce);\n`report` (a delivery, feedback or disposition report). Mail\nPrimitive's own automatic responders decline to answer is always\n`automated`. The header rules only see headers captured at ingest, so\nolder mail may lack them. This is loop and noise protection, not\nsender authentication.\n"
 				},
+				{
+					"name": "from_verified",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "string",
+						"enum": ["true", "false"]
+					},
+					"description": "Only return emails whose `from_verified` (the From domain was authenticated on arrival; see the field) has this value. Also available in `q` as `from_verified:true` or `from_verified:false`."
+				},
 				{
 					"name": "sort",
 					"in": "query",
@@ -1365,6 +1400,32 @@ const openapiDocument = {
 						"default": "true"
 					},
 					"description": "When `false`, the total match count is not computed and `meta.total`\nis null (`meta.total_capped` is false). Use `meta.cursor` to tell\nwhether another page exists. Skipping the count makes a broad query,\nsuch as a one-letter prefix, cheaper to serve. Defaults to `true`.\n"
+				},
+				{
+					"name": "direction",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "string",
+						"enum": [
+							"inbound",
+							"outbound",
+							"any"
+						],
+						"default": "inbound"
+					},
+					"description": "Which mail to search: `inbound` (mail received by the organization, the default), `outbound` (mail it sent) or `any` (both, merged in date order). Each result carries `direction`. When sent mail is included, results are in date order only (`sort=relevance` is a `validation_error`), filters that describe received mail only (`status`, `spam_score_lt`, `spam_score_gte`, `awaiting`, `automated`, `reply_to_sent_email_id`, `from_verified`, and `status:`, `awaiting:`, `automated:`, `from_verified:` in `q`) are a `validation_error`, as is `include`, and `facets` are not computed. `meta.total` is computed on the first page only and is null on later pages. A `meta.cursor` continues the direction it was issued for: using it with another `direction` is a `validation_error`. Text search over sent mail (`q`, `subject` or `body`) answers 503 `sent_mail_search_unavailable` in an environment where sent-mail search is not enabled. An agent connection searches only the mail its own address sent. On a sent result, `received_at` is when the message was accepted for sending, `recipient` is its first To address, and fields that describe receiving (`spam_score`, `raw_size_bytes`, `webhook_status`) are null, as is `from_verified` (sent mail has no From-authentication verdict). A sent result carries its sending status (`queued`, `delivered`, `bounced` and so on) in `delivery_status`; its `status` stays in the received-mail vocabulary as the nearest reading of it: `pending` (queued, scheduled, deferred), `accepted` (handed off, outcome not confirmed), `completed` (delivered) or `rejected` (not delivered: failed, denied, bounced or canceled)."
+				},
+				{
+					"name": "include",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "string",
+						"maxLength": 200,
+						"example": "body_text,headers"
+					},
+					"description": "Extra parts on every row, comma-separated: `body_text`, `body_html`, `headers`, `attachments`. Reads a page of messages in one request instead of one detail read per row. Parts are withheld where the detail read withholds them. Each body field is cut to 64 KiB per row and a response carries at most 2048 KiB of body text, in page order; a cut or omitted body is named in `truncated_fields`. Unknown values are a `validation_error`."
 				}
 			],
 			"responses": {
@@ -1386,6 +1447,10 @@ const openapiDocument = {
 				"400": { "$ref": "#/components/responses/ValidationError" },
 				"401": { "$ref": "#/components/responses/Unauthorized" },
 				"404": { "$ref": "#/components/responses/NotFound" },
+				"503": {
+					"description": "Sent-mail text search is not enabled in this environment (`sent_mail_search_unavailable`). Returned only for text terms (`q`, `subject` or `body`) with `direction=outbound` or `direction=any`; retry with `direction=inbound`, or without text terms.",
+					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+				},
 				"504": {
 					"description": "Search query timed out",
 					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
@@ -1551,6 +1616,145 @@ const openapiDocument = {
 				}
 			}
 		},
+		"/emails/{id}/attachments": {
+			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }],
+			"get": {
+				"parameters": [{ "$ref": "#/components/parameters/AttachmentFilename" }],
+				"operationId": "downloadEmailAttachmentByFilename",
+				"summary": "Download one received email attachment by filename",
+				"description": "Returns the same bytes as downloadEmailAttachmentPart, selecting the attachment by its exact filename. The path form `/emails/{id}/attachments/{filename}` also works for any name that is not digits only, which that form reads as a part_index. When several attachments share the filename the response is 409 attachment_name_ambiguous with every matching part_index, and nothing is returned. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail received at its own address. Function credentials are not supported. Discarded content is unavailable.",
+				"tags": ["Emails"],
+				"security": [{ "BearerAuth": [] }],
+				"responses": {
+					"200": { "$ref": "#/components/responses/AttachmentPart" },
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": {
+						"description": "Missing or inaccessible message, or no attachment with this filename",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"409": { "$ref": "#/components/responses/AttachmentNameAmbiguous" },
+					"410": {
+						"description": "content_discarded; the original content is no longer available",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"413": {
+						"description": "attachment_limit_exceeded; the attachment exceeds download limits",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"502": {
+						"description": "attachment_integrity_failed; stored content failed integrity validation",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"503": {
+						"description": "attachment_not_ready or attachment_storage_unavailable; retry after the indicated delay",
+						"headers": { "Retry-After": {
+							"description": "Delay in seconds before retrying this read",
+							"schema": {
+								"type": "integer",
+								"minimum": 0
+							}
+						} },
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					}
+				}
+			}
+		},
+		"/emails/{id}/attachments/{attachment}/members": {
+			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }, { "$ref": "#/components/parameters/AttachmentSelector" }],
+			"get": {
+				"operationId": "listEmailAttachmentArchiveMembers",
+				"summary": "List the files inside a received zip or tar attachment",
+				"description": "Lists the regular files inside a zip, tar or tar.gz attachment with each one's path, decoded size and SHA-256. The format is detected from the content. Unsafe paths refuse the whole archive, and resource limits bound the work (see the 413 and 422 responses). Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail received at its own address. Function credentials are not supported. Discarded content is unavailable.",
+				"tags": ["Emails"],
+				"security": [{ "BearerAuth": [] }],
+				"responses": {
+					"200": {
+						"description": "Files inside the archive",
+						"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+							"type": "object",
+							"properties": { "data": { "$ref": "#/components/schemas/ArchiveMembers" } }
+						}] } } }
+					},
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": {
+						"description": "Missing or inaccessible message, or no such attachment",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"409": { "$ref": "#/components/responses/AttachmentNameAmbiguous" },
+					"410": {
+						"description": "content_discarded; the original content is no longer available",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"413": { "$ref": "#/components/responses/ArchiveLimitExceeded" },
+					"422": { "$ref": "#/components/responses/ArchiveUnprocessable" },
+					"502": {
+						"description": "attachment_integrity_failed; stored content failed integrity validation",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"503": {
+						"description": "attachment_not_ready, attachment_storage_unavailable or archive_busy; retry after the indicated delay. archive_busy means this server is already reading as many archives as it allows at once; nothing is wrong with the archive.",
+						"headers": { "Retry-After": {
+							"description": "Delay in seconds before retrying this read",
+							"schema": {
+								"type": "integer",
+								"minimum": 0
+							}
+						} },
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					}
+				}
+			}
+		},
+		"/emails/{id}/attachments/{attachment}/members/{path}": {
+			"parameters": [
+				{ "$ref": "#/components/parameters/ResourceId" },
+				{ "$ref": "#/components/parameters/AttachmentSelector" },
+				{ "$ref": "#/components/parameters/ArchiveMemberPath" }
+			],
+			"get": {
+				"operationId": "downloadEmailAttachmentArchiveMember",
+				"summary": "Download one file from inside a received zip or tar attachment",
+				"description": "Returns the decoded bytes of one regular file inside a zip, tar or tar.gz attachment, by its listed path. The archive's structure, every member path and every limit are checked as for the listing, but only the requested file is decoded and verified (its zip CRC-32, and X-Content-SHA256 of the bytes returned); list the archive to have every file decoded. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail received at its own address. Function credentials are not supported. Discarded content is unavailable.",
+				"tags": ["Emails"],
+				"security": [{ "BearerAuth": [] }],
+				"responses": {
+					"200": { "$ref": "#/components/responses/AttachmentPart" },
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": {
+						"description": "Missing or inaccessible message, no such attachment, or no regular file at this path",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"409": { "$ref": "#/components/responses/AttachmentNameAmbiguous" },
+					"410": {
+						"description": "content_discarded; the original content is no longer available",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"413": { "$ref": "#/components/responses/ArchiveLimitExceeded" },
+					"422": { "$ref": "#/components/responses/ArchiveUnprocessable" },
+					"502": {
+						"description": "attachment_integrity_failed; stored content failed integrity validation",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"503": {
+						"description": "attachment_not_ready, attachment_storage_unavailable or archive_busy; retry after the indicated delay. archive_busy means this server is already reading as many archives as it allows at once; nothing is wrong with the archive.",
+						"headers": { "Retry-After": {
+							"description": "Delay in seconds before retrying this read",
+							"schema": {
+								"type": "integer",
+								"minimum": 0
+							}
+						} },
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					}
+				}
+			}
+		},
 		"/sent-emails/{id}/attachments/{part_index}": {
 			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }, { "$ref": "#/components/parameters/AttachmentPartIndex" }],
 			"get": {
@@ -1598,6 +1802,145 @@ const openapiDocument = {
 				}
 			}
 		},
+		"/sent-emails/{id}/attachments": {
+			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }],
+			"get": {
+				"parameters": [{ "$ref": "#/components/parameters/AttachmentFilename" }],
+				"operationId": "downloadSentAttachmentByFilename",
+				"summary": "Download one sent email attachment by filename",
+				"description": "Returns the same bytes as downloadSentAttachmentPart, selecting the attachment by its exact filename. The path form `/sent-emails/{id}/attachments/{filename}` also works for any name that is not digits only, which that form reads as a part_index. When several attachments share the filename the response is 409 attachment_name_ambiguous with every matching part_index, and nothing is returned. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail sent from its own address. Function credentials are not supported. Discarded content is unavailable.",
+				"tags": ["Sending"],
+				"security": [{ "BearerAuth": [] }],
+				"responses": {
+					"200": { "$ref": "#/components/responses/AttachmentPart" },
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": {
+						"description": "Missing or inaccessible message, or no attachment with this filename",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"409": { "$ref": "#/components/responses/AttachmentNameAmbiguous" },
+					"410": {
+						"description": "content_discarded; the original content is no longer available",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"413": {
+						"description": "attachment_limit_exceeded; the attachment exceeds download limits",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"502": {
+						"description": "attachment_integrity_failed; stored content failed integrity validation",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"503": {
+						"description": "attachment_not_ready or attachment_storage_unavailable; retry after the indicated delay",
+						"headers": { "Retry-After": {
+							"description": "Delay in seconds before retrying this read",
+							"schema": {
+								"type": "integer",
+								"minimum": 0
+							}
+						} },
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					}
+				}
+			}
+		},
+		"/sent-emails/{id}/attachments/{attachment}/members": {
+			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }, { "$ref": "#/components/parameters/AttachmentSelector" }],
+			"get": {
+				"operationId": "listSentAttachmentArchiveMembers",
+				"summary": "List the files inside a sent zip or tar attachment",
+				"description": "Lists the regular files inside a zip, tar or tar.gz attachment with each one's path, decoded size and SHA-256. The format is detected from the content. Unsafe paths refuse the whole archive, and resource limits bound the work (see the 413 and 422 responses). Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail sent from its own address. Function credentials are not supported. Discarded content is unavailable.",
+				"tags": ["Sending"],
+				"security": [{ "BearerAuth": [] }],
+				"responses": {
+					"200": {
+						"description": "Files inside the archive",
+						"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+							"type": "object",
+							"properties": { "data": { "$ref": "#/components/schemas/ArchiveMembers" } }
+						}] } } }
+					},
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": {
+						"description": "Missing or inaccessible message, or no such attachment",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"409": { "$ref": "#/components/responses/AttachmentNameAmbiguous" },
+					"410": {
+						"description": "content_discarded; the original content is no longer available",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"413": { "$ref": "#/components/responses/ArchiveLimitExceeded" },
+					"422": { "$ref": "#/components/responses/ArchiveUnprocessable" },
+					"502": {
+						"description": "attachment_integrity_failed; stored content failed integrity validation",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"503": {
+						"description": "attachment_not_ready, attachment_storage_unavailable or archive_busy; retry after the indicated delay. archive_busy means this server is already reading as many archives as it allows at once; nothing is wrong with the archive.",
+						"headers": { "Retry-After": {
+							"description": "Delay in seconds before retrying this read",
+							"schema": {
+								"type": "integer",
+								"minimum": 0
+							}
+						} },
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					}
+				}
+			}
+		},
+		"/sent-emails/{id}/attachments/{attachment}/members/{path}": {
+			"parameters": [
+				{ "$ref": "#/components/parameters/ResourceId" },
+				{ "$ref": "#/components/parameters/AttachmentSelector" },
+				{ "$ref": "#/components/parameters/ArchiveMemberPath" }
+			],
+			"get": {
+				"operationId": "downloadSentAttachmentArchiveMember",
+				"summary": "Download one file from inside a sent zip or tar attachment",
+				"description": "Returns the decoded bytes of one regular file inside a zip, tar or tar.gz attachment, by its listed path. The archive's structure, every member path and every limit are checked as for the listing, but only the requested file is decoded and verified (its zip CRC-32, and X-Content-SHA256 of the bytes returned); list the archive to have every file decoded. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail sent from its own address. Function credentials are not supported. Discarded content is unavailable.",
+				"tags": ["Sending"],
+				"security": [{ "BearerAuth": [] }],
+				"responses": {
+					"200": { "$ref": "#/components/responses/AttachmentPart" },
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": {
+						"description": "Missing or inaccessible message, no such attachment, or no regular file at this path",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"409": { "$ref": "#/components/responses/AttachmentNameAmbiguous" },
+					"410": {
+						"description": "content_discarded; the original content is no longer available",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"413": { "$ref": "#/components/responses/ArchiveLimitExceeded" },
+					"422": { "$ref": "#/components/responses/ArchiveUnprocessable" },
+					"502": {
+						"description": "attachment_integrity_failed; stored content failed integrity validation",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"503": {
+						"description": "attachment_not_ready, attachment_storage_unavailable or archive_busy; retry after the indicated delay. archive_busy means this server is already reading as many archives as it allows at once; nothing is wrong with the archive.",
+						"headers": { "Retry-After": {
+							"description": "Delay in seconds before retrying this read",
+							"schema": {
+								"type": "integer",
+								"minimum": 0
+							}
+						} },
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					}
+				}
+			}
+		},
 		"/emails/{id}/repeat-stop": {
 			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }],
 			"post": {
@@ -1662,12 +2005,16 @@ const openapiDocument = {
 					"401": { "$ref": "#/components/responses/Unauthorized" },
 					"403": { "$ref": "#/components/responses/Forbidden" },
 					"404": { "$ref": "#/components/responses/NotFound" },
+					"409": {
+						"description": "latest_message_mismatch; if_latest_message_id is no longer the newest message in the thread. Nothing was sent. error.details carries latest_message_id (null when the thread has no message visible to this credential), latest_message_at and thread_id.",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
 					"410": {
 						"description": "The prior send was deleted. Its idempotency key or automatic reply suppression remains reserved, so this request will not send another message. Do not retry with a new key to bypass this refusal.",
 						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
 					},
 					"422": {
-						"description": "Inbound is not repliable: the row exists but lacks a\n`message_id` (no thread anchor) or a `recipient` (cannot\nderive the From address).\n",
+						"description": "Inbound is not repliable: the row exists but lacks a\n`message_id` (no thread anchor) or a `recipient` (cannot\nderive the From address). Or latest_message_thread_unresolved:\nif_latest_message_id was given but in_reply_to resolves to no single\nthread this credential can check; nothing was sent, and the same\nrequest will not succeed on retry.\n",
 						"content": { "application/json": {
 							"schema": { "$ref": "#/components/schemas/ErrorResponse" },
 							"example": {
@@ -2586,10 +2933,18 @@ const openapiDocument = {
 				"400": { "$ref": "#/components/responses/ValidationError" },
 				"401": { "$ref": "#/components/responses/Unauthorized" },
 				"403": { "$ref": "#/components/responses/Forbidden" },
+				"409": {
+					"description": "latest_message_mismatch; if_latest_message_id is no longer the newest message in the thread. Nothing was sent. error.details carries latest_message_id (null when the thread has no message visible to this credential), latest_message_at and thread_id.",
+					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+				},
 				"410": {
 					"description": "The prior send was deleted. Its idempotency key or automatic reply suppression remains reserved, so this request will not send another message. Do not retry with a new key to bypass this refusal.",
 					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
 				},
+				"422": {
+					"description": "latest_message_thread_unresolved; if_latest_message_id was given but in_reply_to resolves to no single thread this credential can check. Nothing was sent, and the same request will not succeed on retry. error.details.thread_id is null.",
+					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+				},
 				"429": { "$ref": "#/components/responses/RateLimited" },
 				"500": { "$ref": "#/components/responses/InternalError" },
 				"502": { "$ref": "#/components/responses/BadGateway" },
@@ -2795,6 +3150,28 @@ const openapiDocument = {
 						"maxLength": 320
 					},
 					"description": "Exact case-insensitive sender mailbox filter. Returns\nonly sends whose from address equals this value; it is\nnot a substring match, so a partial mailbox matches\nnothing. Use `q` to search sender text loosely.\nCombines with every other filter, and unlike `q` it is\nserved by every deployment.\n"
+				},
+				{
+					"name": "header",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 1200
+					},
+					"description": "Return only sends that set this header: `Name=Value` matches that exact value, `Name` alone any value. Name and value compare case-insensitively; the value is trimmed and matched whole, not as a substring, and only the first `=` separates the two. Matches only the `headers` the send request set. History pages only: with `since` or `wait` it is a `validation_error`, as is a name that is never stored (trace, signature or credential-like). Sends made before header search was available are not matched."
+				},
+				{
+					"name": "include",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "string",
+						"maxLength": 200,
+						"example": "body_text,headers"
+					},
+					"description": "Extra parts on every row, comma-separated: `body_text`, `body_html`, `headers`, `attachments`. Reads a page of messages in one request instead of one detail read per row. Parts are withheld where the detail read withholds them. Each body field is cut to 64 KiB per row and a response carries at most 2048 KiB of body text, in page order; a cut or omitted body is named in `truncated_fields`. Unknown values are a `validation_error`."
 				}
 			],
 			"responses": {
@@ -4782,6 +5159,222 @@ const openapiDocument = {
 				}
 			}
 		} },
+		"/changes": { "get": {
+			"operationId": "listChanges",
+			"summary": "Long-poll what changed",
+			"description": "One feed of small invalidations (ids and kinds) for everything an app keeps a snapshot of: inbound mail, sent mail, the member's conversation read state, the agent directory and presence, and the credential's own access. Non-consumptive and replayable: any number of devices can read the same cursor independently.\n\nStart with `since=start` (or no `since`): it returns an empty page whose `next_cursor` is a baseline. Take it BEFORE the initial list reads; every change that commits after it is delivered, including ones those reads already reflect. Then call with `since=<next_cursor>&wait=20` in a loop. Changes come oldest first in commit order, at least once: a write that commits late is never skipped, because positions are assigned at commit.\n\nEvery change is scoped to what this credential's full reads would show: a connected agent sees only its own mail, its own sends and sends it provably received; mail held for sender authentication is announced only when released; read state reaches only the member it belongs to; agent changes reach members and agents allowed to view the network; organization API keys receive no agent changes. Function credentials cannot call this.\n\nChanges are kept 7 days. A cursor answers 410 `cursor_expired` only when changes after it were pruned (an idle cursor stays valid); rebuild the snapshots from `since=start`.",
+			"tags": ["Changes"],
+			"security": [{ "BearerAuth": [] }],
+			"parameters": [
+				{
+					"name": "since",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 512
+					},
+					"description": "`start` (the default) for a baseline, otherwise the previous `next_cursor`, unchanged."
+				},
+				{
+					"name": "wait",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "integer",
+						"minimum": 0,
+						"maximum": 25,
+						"default": 0
+					},
+					"description": "Seconds to hold a caught-up request open. It returns as soon as a change this credential can see commits, else an empty page at the deadline. Ignored for a baseline request."
+				},
+				{
+					"name": "limit",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "integer",
+						"minimum": 1,
+						"maximum": 100,
+						"default": 100
+					},
+					"description": "Maximum changes in one page."
+				},
+				{
+					"name": "expand",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "string",
+						"enum": ["message"]
+					},
+					"description": "`message` adds `message` to every change: the current list row of the message a message change names, so a reader needs no follow-up read. Ignored for a baseline request."
+				},
+				{
+					"name": "address",
+					"in": "query",
+					"required": false,
+					"schema": {
+						"type": "string",
+						"minLength": 1
+					},
+					"description": "Up to 20 email addresses, comma-separated (or the parameter repeated). Keeps only the message changes whose message is to or from one of them, matched case-insensitively. Inbound mail matches on the address it was delivered to, the envelope sender and the From header address; sent mail on the From address and the To and Cc addresses, and Bcc only for a credential that can read the sender side. Deletions, thread, agent and access changes are never filtered, because a deleted message's addresses can no longer be read: ignore a deletion for an id you do not hold. The cursor still moves past every change the filter drops, so a filtered page can be empty with a new cursor."
+				}
+			],
+			"responses": {
+				"200": {
+					"description": "A page of changes",
+					"headers": { "Cache-Control": { "schema": {
+						"type": "string",
+						"const": "no-store"
+					} } },
+					"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+						"type": "object",
+						"properties": { "data": { "$ref": "#/components/schemas/ChangePage" } }
+					}] } } }
+				},
+				"400": {
+					"description": "`validation_error` for a bad parameter, or `invalid_cursor` for a cursor that is malformed or belongs to another organization. Rebuild from `since=start`.",
+					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+				},
+				"401": {
+					"description": "Invalid or missing API key",
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "unauthorized",
+								"message": "Invalid or missing API key"
+							}
+						}
+					} },
+					"headers": {}
+				},
+				"410": {
+					"description": "`cursor_expired`: changes after this cursor were pruned. `error.details.retention_seconds` is the window. Rebuild the snapshots from `since=start`.",
+					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+				},
+				"429": {
+					"description": "Rate limit exceeded. The `ratelimit-*` headers describe the limiter that rejected this request, with its own limit and window, not the API budget that successful responses report. A limiter that reports only a wait sends `Retry-After` alone.",
+					"headers": { "Retry-After": {
+						"schema": { "type": "integer" },
+						"description": "Seconds to wait before retrying"
+					} },
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "rate_limit_exceeded",
+								"message": "Rate limit exceeded"
+							}
+						}
+					} }
+				}
+			}
+		} },
+		"/sent-emails/cancel": { "post": {
+			"operationId": "cancelSentEmailByIdempotencyKey",
+			"summary": "Cancel a scheduled send by idempotency key",
+			"description": "Cancels the still-scheduled send created with this `Idempotency-Key` (matched exactly), as `POST /sent-emails/{id}/cancel` does, and releases the key. 404 `not_found`: no send this credential can act on was created with the key. 409 `not_scheduled`: the send holding the key is no longer scheduled; `error.details` names its `sent_email_id` and `status` (`canceled` if already canceled). Pass `created_before` on a retry so it cannot reach a newer send that reused the released key. A connected agent can cancel any scheduled send from its own address, whoever created it, and no other.",
+			"tags": ["Sending"],
+			"security": [{ "BearerAuth": [] }],
+			"requestBody": {
+				"required": true,
+				"content": { "application/json": { "schema": {
+					"type": "object",
+					"additionalProperties": false,
+					"required": ["idempotency_key"],
+					"properties": {
+						"idempotency_key": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 255,
+							"pattern": "^[\\x21-\\x7e]+$",
+							"description": "The `Idempotency-Key` the send was created with."
+						},
+						"created_before": {
+							"type": "string",
+							"format": "date-time",
+							"description": "Only consider sends created at or before this instant, such as when you first asked to cancel."
+						}
+					}
+				} } }
+			},
+			"responses": {
+				"200": {
+					"description": "Canceled sent-email detail",
+					"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+						"type": "object",
+						"properties": { "data": { "$ref": "#/components/schemas/SentEmailDetail" } }
+					}] } } },
+					"headers": {}
+				},
+				"400": {
+					"description": "Invalid request parameters",
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "validation_error",
+								"message": "Invalid domain format"
+							}
+						}
+					} }
+				},
+				"401": {
+					"description": "Invalid or missing API key",
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "unauthorized",
+								"message": "Invalid or missing API key"
+							}
+						}
+					} },
+					"headers": {}
+				},
+				"404": {
+					"description": "Resource not found",
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "not_found",
+								"message": "Resource not found"
+							}
+						}
+					} }
+				},
+				"409": {
+					"description": "`not_scheduled`: `error.details` carries the `sent_email_id` and current `status` of the send holding the key.",
+					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+				},
+				"429": {
+					"description": "Rate limit exceeded. The `ratelimit-*` headers describe the limiter that rejected this request, with its own limit and window, not the API budget that successful responses report. A limiter that reports only a wait sends `Retry-After` alone.",
+					"headers": { "Retry-After": {
+						"schema": { "type": "integer" },
+						"description": "Seconds to wait before retrying"
+					} },
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "rate_limit_exceeded",
+								"message": "Rate limit exceeded"
+							}
+						}
+					} }
+				}
+			}
+		} },
 		"/sent-emails/{id}/cancel": {
 			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }],
 			"post": {
@@ -8171,6 +8764,39 @@ const openapiDocument = {
 			}
 		},
 		"parameters": {
+			"AttachmentFilename": {
+				"name": "filename",
+				"in": "query",
+				"required": true,
+				"description": "The attachment's exact filename from its metadata. Any name, digits only included. No other query parameter is accepted.",
+				"schema": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 1024
+				}
+			},
+			"AttachmentSelector": {
+				"name": "attachment",
+				"in": "path",
+				"required": true,
+				"description": "The attachment, by its exact part_index when the value is digits only, otherwise by its exact filename (case-sensitive, compared after Unicode NFC normalization). A digits-only value always selects that part_index, even when another attachment has that name; read such a name with ?filename=.",
+				"schema": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 1024
+				}
+			},
+			"ArchiveMemberPath": {
+				"name": "path",
+				"in": "path",
+				"required": true,
+				"description": "The member path exactly as listed, percent-encoded as one path segment (slashes as %2F).",
+				"schema": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 1024
+				}
+			},
 			"AgentNetworkAddress": {
 				"name": "address",
 				"in": "path",
@@ -8312,6 +8938,18 @@ const openapiDocument = {
 			}
 		},
 		"responses": {
+			"AttachmentNameAmbiguous": {
+				"description": "attachment_name_ambiguous; more than one attachment has this filename, or a digits-only path value matches no part_index but is the name of an attachment. error.details.part_indexes lists every match, so fetch by part_index or by ?filename=. Or attachment_changed; attachment metadata changed during the read.",
+				"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+			},
+			"ArchiveLimitExceeded": {
+				"description": "archive_limit_exceeded, or attachment_limit_exceeded for the attachment itself. Limits: at most 1000 entries of any kind (files, directories and links all count); each file at most 31457280 bytes decoded; all files together (for tar.gz, the whole decoded tar stream) at most 33554432 bytes; a compression ratio above 100:1 is refused once decoded output passes 1048576 bytes; member paths at most 1024 UTF-8 bytes.",
+				"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+			},
+			"ArchiveUnprocessable": {
+				"description": "attachment_not_archive, archive_unsafe_path, archive_invalid or archive_unsupported. An archive with an absolute, drive-letter, backslash, control-character, Unicode format or separator character (bidirectional controls included), empty, \".\" or \"..\" path segment is refused whole (archive_unsafe_path) rather than listed without the entry. Any symbolic or hard link is refused the same way, wherever it points. Paths that differ only by letter case or Unicode normalization count as duplicates. Duplicate paths, overlapping zip data, a zip local header whose name or method disagrees with the central directory, and truncated or corrupt structures are archive_invalid; encryption, zip64, multi-volume archives, compression other than stored or deflate, sparse tar files, and device or other special files are archive_unsupported.",
+				"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+			},
 			"AttachmentPart": {
 				"description": "Original attachment bytes; never a JSON envelope or a base64 string",
 				"content": { "application/octet-stream": { "schema": {
@@ -8559,6 +9197,109 @@ const openapiDocument = {
 			}
 		},
 		"schemas": {
+			"IncludedMessageHeaders": {
+				"type": "object",
+				"description": "Stored addressing and threading headers. A member is null when absent or withheld.",
+				"properties": {
+					"from": { "type": ["string", "null"] },
+					"to": {
+						"type": ["array", "null"],
+						"items": { "type": "string" }
+					},
+					"cc": {
+						"type": ["array", "null"],
+						"items": { "type": "string" }
+					},
+					"bcc": {
+						"type": ["array", "null"],
+						"items": { "type": "string" }
+					},
+					"reply_to": {
+						"type": ["array", "null"],
+						"items": { "type": "string" }
+					},
+					"in_reply_to": {
+						"type": ["array", "null"],
+						"items": { "type": "string" }
+					},
+					"references": {
+						"type": ["array", "null"],
+						"items": { "type": "string" }
+					},
+					"automation": {
+						"type": ["object", "null"],
+						"additionalProperties": { "type": "string" },
+						"description": "Received mail only."
+					}
+				},
+				"required": [
+					"from",
+					"to",
+					"cc",
+					"bcc",
+					"reply_to",
+					"in_reply_to",
+					"references",
+					"automation"
+				]
+			},
+			"ArchiveMember": {
+				"type": "object",
+				"required": [
+					"path",
+					"size_bytes",
+					"sha256"
+				],
+				"properties": {
+					"path": {
+						"type": "string",
+						"description": "Member path inside the archive, relative, with \"/\" separators and no leading \"./\"."
+					},
+					"size_bytes": {
+						"type": "integer",
+						"minimum": 0,
+						"description": "Decoded size in bytes."
+					},
+					"sha256": {
+						"type": "string",
+						"pattern": "^[0-9a-f]{64}$",
+						"description": "SHA-256 of the decoded bytes."
+					}
+				}
+			},
+			"ArchiveMembers": {
+				"type": "object",
+				"required": [
+					"part_index",
+					"filename",
+					"format",
+					"members"
+				],
+				"properties": {
+					"part_index": {
+						"type": "integer",
+						"minimum": 0,
+						"description": "The attachment the listing is of."
+					},
+					"filename": {
+						"type": ["string", "null"],
+						"description": "That attachment's filename."
+					},
+					"format": {
+						"type": "string",
+						"enum": [
+							"zip",
+							"tar",
+							"tar.gz"
+						]
+					},
+					"members": {
+						"type": "array",
+						"description": "Regular files in archive order.",
+						"items": { "$ref": "#/components/schemas/ArchiveMember" }
+					}
+				}
+			},
 			"ContactPolicyRuleInput": {
 				"type": "object",
 				"additionalProperties": false,
@@ -9919,7 +10660,20 @@ const openapiDocument = {
 									"agent_connection_scope_forbidden",
 									"address_note_conflict",
 									"address_not_controlled",
-									"contact_conflict"
+									"contact_conflict",
+									"sent_mail_search_unavailable",
+									"latest_message_mismatch",
+									"latest_message_thread_unresolved",
+									"thread_busy",
+									"attachment_name_ambiguous",
+									"archive_limit_exceeded",
+									"archive_unsafe_path",
+									"archive_invalid",
+									"archive_unsupported",
+									"attachment_not_archive",
+									"archive_busy",
+									"invalid_cursor",
+									"cursor_expired"
 								]
 							},
 							"message": { "type": "string" },
@@ -11592,6 +12346,142 @@ const openapiDocument = {
 					"scopes"
 				]
 			},
+			"Change": {
+				"type": "object",
+				"additionalProperties": false,
+				"description": "One invalidation: what changed, by id, never its content. Every field is present; fields that do not apply to the kind are null. Apply idempotently: a change can repeat.",
+				"required": [
+					"kind",
+					"email_id",
+					"sent_email_id",
+					"thread_id",
+					"status",
+					"agent_address",
+					"reason",
+					"changed_at"
+				],
+				"properties": {
+					"kind": {
+						"type": "string",
+						"enum": [
+							"email.visible",
+							"email.updated",
+							"email.deleted",
+							"sent_email.created",
+							"sent_email.updated",
+							"sent_email.deleted",
+							"thread.read_state_changed",
+							"thread.mute_changed",
+							"agent.changed",
+							"access.changed"
+						],
+						"description": "`email.visible`: an inbound email became visible to this credential (arrived, or its sender-authentication hold was released). `email.updated`: something a list row or conversation shows changed. `email.deleted`: gone, or withdrawn from view. `sent_email.created` / `sent_email.updated`: a send appeared or changed; `status` is its current status, and several changes between two reads collapse into one entry. Created is a hint (first committed after the cursor): treat both as upsert, including `sent_email.updated` for an id you have not seen. `sent_email.deleted`: the send was deleted. `thread.read_state_changed`: the signed-in member's read cursor for `thread_id` moved, on any device. `thread.mute_changed`: `thread_id` was muted or unmuted for an address this credential reads, which changes the `muted` flag and `exclude_muted` results of its mail. `agent.changed`: an agent in the directory changed (connected, disconnected, renamed, hidden, listed, presence extended, receiver live). `access.changed`: this credential's own access changed; rebuild every snapshot from `since=start`."
+					},
+					"email_id": {
+						"type": ["string", "null"],
+						"format": "uuid",
+						"description": "email.* kinds."
+					},
+					"sent_email_id": {
+						"type": ["string", "null"],
+						"format": "uuid",
+						"description": "sent_email.* kinds."
+					},
+					"thread_id": {
+						"type": ["string", "null"],
+						"format": "uuid",
+						"description": "The conversation, when known. Null for a connected agent reading a send, or its deletion, that it received but did not send, matching what GET /sent-emails withholds. Inbound mail is announced when it becomes visible, which can be before its conversation is resolved, so `email.visible` can carry null; resolving or changing the conversation is always announced afterwards as `email.updated` with the `thread_id`."
+					},
+					"status": {
+						"type": ["string", "null"],
+						"description": "sent_email.created and sent_email.updated: the send's current status."
+					},
+					"agent_address": {
+						"type": ["string", "null"],
+						"description": "agent.changed: the agent's address."
+					},
+					"reason": {
+						"type": ["string", "null"],
+						"enum": [
+							"membership",
+							"agent_connection",
+							null
+						],
+						"description": "access.changed: `membership` (the member's role or membership) or `agent_connection` (this agent connection's status, owner or generation)."
+					},
+					"changed_at": {
+						"type": "string",
+						"format": "date-time",
+						"description": "The commit position in microsecond UTC form. Orders the feed; not a business timestamp."
+					},
+					"message": {
+						"oneOf": [{ "$ref": "#/components/schemas/ChangeMessage" }, { "type": "null" }],
+						"description": "Present only when the request sets `expand=message`. For `email.visible`, `email.updated`, `sent_email.created`, `sent_email.updated`: the message as it reads at the time of this response (not at the time of the change), exactly as the list endpoints return it, marked by `direction`. Null for every other kind, and when the message is no longer readable by this credential (deleted, or withdrawn from view after the change)."
+					}
+				}
+			},
+			"ChangePage": {
+				"type": "object",
+				"additionalProperties": false,
+				"required": [
+					"changes",
+					"next_cursor",
+					"has_more",
+					"baseline"
+				],
+				"properties": {
+					"changes": {
+						"type": "array",
+						"items": { "$ref": "#/components/schemas/Change" },
+						"description": "Oldest first, in commit order."
+					},
+					"next_cursor": {
+						"type": "string",
+						"description": "Always present. Send it unchanged as `since` next time, and store it only after applying the page. It is exactly the `since` you sent when nothing at all happened after it; it moves past changes this credential cannot see, so the page can be empty with a new cursor."
+					},
+					"has_more": {
+						"type": "boolean",
+						"description": "More changes are already pending: call again at once, without waiting."
+					},
+					"baseline": {
+						"type": "boolean",
+						"description": "True only for a `since=start` request, whose page is always empty."
+					}
+				}
+			},
+			"ChangeMessage": {
+				"description": "A message inlined by `expand=message`. `direction` `inbound` is a GET /emails row; `outbound` is a GET /sent-emails row.",
+				"oneOf": [{ "$ref": "#/components/schemas/ChangeInboundMessage" }, { "$ref": "#/components/schemas/ChangeOutboundMessage" }],
+				"discriminator": {
+					"propertyName": "direction",
+					"mapping": {
+						"inbound": "#/components/schemas/ChangeInboundMessage",
+						"outbound": "#/components/schemas/ChangeOutboundMessage"
+					}
+				}
+			},
+			"ChangeInboundMessage": {
+				"description": "An inbound message inlined by `expand=message`, as GET /emails returns it.",
+				"allOf": [{ "$ref": "#/components/schemas/EmailSummary" }, {
+					"type": "object",
+					"required": ["direction"],
+					"properties": { "direction": {
+						"type": "string",
+						"enum": ["inbound"]
+					} }
+				}]
+			},
+			"ChangeOutboundMessage": {
+				"description": "A sent message inlined by `expand=message`, as GET /sent-emails returns it.",
+				"allOf": [{ "$ref": "#/components/schemas/SentEmailSummary" }, {
+					"type": "object",
+					"required": ["direction"],
+					"properties": { "direction": {
+						"type": "string",
+						"enum": ["outbound"]
+					} }
+				}]
+			},
 			"EmailSummary": {
 				"type": "object",
 				"properties": {
@@ -11669,6 +12559,14 @@ const openapiDocument = {
 						"items": { "type": "string" },
 						"description": "Why `automated` is true, in rule order; empty when it is false.\nCurrent values: `null_envelope_sender`, `no_identifiable_sender`,\n`own_address`, `mailer_daemon`, `auto_submitted`, `precedence`,\n`list_unsubscribe`, `list_id`, `auto_response_suppress`,\n`failed_recipients`, `report`. Treat an unfamiliar value as a\nreason added after your client was built.\n"
 					},
+					"from_verified": {
+						"type": ["boolean", "null"],
+						"description": "True when the From header address, `from_header_email`, passed DMARC for its domain on arrival (aligned SPF or DKIM); decided once, at receipt. It is about the From header, never the envelope: `sender`, the `from` parameter and `from:` term, and the change feed's `address` match the envelope sender, which can differ. It proves the domain, not the mailbox. False with no From header address, when authentication failed or was not attempted (a delivery between Primitive mailboxes counts only when it passed DMARC too), and for mail stored before the verdict was recorded. Null on sent rows in search results. Not a spam or safety judgement."
+					},
+					"from_header_email": {
+						"type": ["string", "null"],
+						"description": "The From header address, lowercased, that `from_verified` is about; null when the message had none. Unlike `sender` it is never the envelope address."
+					},
 					"repeat": {
 						"type": ["object", "null"],
 						"description": "Set when Primitive sent this message as part of a repeating send. Resolved from Primitive's own records, never from the message content. Null on every other message and on servers that predate repeating sends.",
@@ -11735,6 +12633,38 @@ const openapiDocument = {
 					"from_name": {
 						"type": ["string", "null"],
 						"description": "Display name from the `From:` header, decoded for display:\nRFC 2047 encoded words are decoded in their declared charset\nand folded lines are joined (e.g. `Dana Rúiz` for\n`=?UTF-8?Q?Dana_R=C3=BAiz?= <dana@example.com>`). Null when\nthe header carries no display name, and may be absent; treat\na missing value the same as null.\n\nFor display only: the sender chooses this name freely, so\nidentify the sender by `from_email`, never by this name.\n"
+					},
+					"body_text": {
+						"type": ["string", "null"],
+						"description": "With `include=body_text`: the plain-text body, cut as `truncated_fields` says."
+					},
+					"body_html": {
+						"type": ["string", "null"],
+						"description": "With `include=body_html`: the HTML body, cut as `truncated_fields` says."
+					},
+					"headers": {
+						"anyOf": [{ "$ref": "#/components/schemas/IncludedMessageHeaders" }, { "type": "null" }],
+						"description": "With `include=headers`: stored addressing and threading headers."
+					},
+					"attachments": {
+						"type": "array",
+						"items": {
+							"type": "object",
+							"additionalProperties": true
+						},
+						"description": "With `include=attachments`: attachment metadata as the detail read reports it. Never the bytes."
+					},
+					"truncated": {
+						"type": "boolean",
+						"description": "With `include`: true when a body on this row was cut or left out."
+					},
+					"truncated_fields": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"enum": ["body_text", "body_html"]
+						},
+						"description": "With `include`: the body fields on this row that were cut or left out."
 					}
 				},
 				"required": [
@@ -11793,8 +12723,9 @@ const openapiDocument = {
 					"direction": {
 						"type": "string",
 						"enum": ["inbound", "outbound"],
-						"description": "Which side of the conversation the result is on: `inbound` for mail received by the organization, `outbound` for mail it sent. This endpoint currently returns received mail only, so every result is `inbound`."
-					}
+						"description": "Which side of the conversation the result is on: `inbound` for mail received by the organization, `outbound` for mail it sent. Only `direction=outbound` or `direction=any` returns `outbound` results. Treat an unfamiliar value as one added after your client was built. An `outbound` result also carries `delivery_status`."
+					},
+					"delivery_status": { "$ref": "#/components/schemas/SentEmailStatus" }
 				},
 				"required": [
 					"attachment_count",
@@ -11830,6 +12761,14 @@ const openapiDocument = {
 							"received_at_asc"
 						],
 						"description": "Sort mode used for the result page."
+					},
+					"total_unavailable": {
+						"type": "boolean",
+						"description": "Present and `true` when a count was requested but did not fit the search time budget. The page in `data` and `meta.cursor` are still returned (the page may itself be partial, see `partial`); only `meta.total` is missing (null). Retry with narrower filters, or use `count=false` and `meta.cursor`."
+					},
+					"partial": {
+						"type": "boolean",
+						"description": "Present and `true` when the page stopped at the search time bound before it filled. This happens when the filters reject most of what the text matches, for example a one-letter `prefix` search with a `from` that matches little or nothing. `data` then holds fewer than `limit` results, possibly none, and `meta.cursor` continues the search after the last email examined. Every result returned is correct and in order; keep following `meta.cursor` until it is null to read the rest. A page shorter than `limit` is therefore not the end of the results: only a null `meta.cursor` is."
 					}
 				},
 				"required": [
@@ -12035,6 +12974,14 @@ const openapiDocument = {
 						"items": { "type": "string" },
 						"description": "Why `automated` is true, in rule order; empty when it is false.\nCurrent values: `null_envelope_sender`, `no_identifiable_sender`,\n`own_address`, `mailer_daemon`, `auto_submitted`, `precedence`,\n`list_unsubscribe`, `list_id`, `auto_response_suppress`,\n`failed_recipients`, `report`. Treat an unfamiliar value as a\nreason added after your client was built.\n"
 					},
+					"from_verified": {
+						"type": "boolean",
+						"description": "Whether the From header domain was authenticated when the message arrived. See EmailSummary.from_verified."
+					},
+					"from_header_email": {
+						"type": ["string", "null"],
+						"description": "The From header address, lowercased, that `from_verified` is about; null when the message had none. Unlike `sender` it is never the envelope address."
+					},
 					"repeat": {
 						"type": ["object", "null"],
 						"description": "Set when Primitive sent this message as part of a repeating send. Resolved from Primitive's own records, never from the message content. Null on every other message and on servers that predate repeating sends.",
@@ -12493,6 +13440,11 @@ const openapiDocument = {
 					"cursor": {
 						"type": "string",
 						"description": "Present only on a `since` read: the position to send as\n`since` on the next read. An opaque string: send it back\nverbatim and do not parse it or build one.\n"
+					},
+					"latest_message_id": {
+						"type": ["string", "null"],
+						"format": "uuid",
+						"description": "The id to pass as `if_latest_message_id` when replying in this\nconversation: the message that joined the thread last among\nthose this credential can read, by the rule a conditional send\nchecks. It can differ from the last message in `messages`, which\nis ordered by timestamp, when mail joined the thread after a\nnewer-timestamped message. Present on a full read and a window\nread of a threaded conversation; null when no message in the\nthread is visible; absent on a `since` delta.\n"
 					}
 				},
 				"required": [
@@ -12747,6 +13699,32 @@ const openapiDocument = {
 						"type": "string",
 						"format": "date-time",
 						"description": "Optional future execution time (ISO 8601). When set, the\nsend is recorded with status `scheduled` and executed at\nthe requested time instead of immediately. Must be in the\nfuture and at most 30 days out. Incompatible with `wait`\n(a scheduled send resolves after this request completes)\nand with `attachments` / `payload_attachments` (not yet\nsupported on scheduled sends). Reschedule via PATCH\n/sent-emails/{id}; cancel via /sent-emails/{id}/cancel.\nAccepts `Z` or a numeric UTC offset\n(`2026-10-09T17:00:00Z`, `2026-10-09T13:00:00-04:00`); an\noffset is converted to UTC, so the stored and echoed value\nis UTC. A time with no zone, or a bare date, is rejected.\n"
+					},
+					"headers": {
+						"type": "object",
+						"maxProperties": 25,
+						"propertyNames": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 64,
+							"pattern": "^[A-Za-z0-9]+(-[A-Za-z0-9]+)*$"
+						},
+						"additionalProperties": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 200,
+							"pattern": "^[\\x20-\\x7E]+$"
+						},
+						"description": "Extra headers, as `{ \"Name\": \"value\" }`, at most 25. A name is one of `Auto-Submitted`, `Precedence`, `X-Auto-Response-Suppress`, `X-Primitive-Interaction`, `X-Primitive-Interaction-Ref`, or a custom `X-` name of letters, digits and hyphens that is not credential-like (a word such as `auth`, `token`, `key`, `secret`, `session` or `bearer`, joined forms included) and not in a reserved family: X-Primitive*, X-Original-*, X-Originating-*, X-Forwarded-*, X-Received*, X-Authenticated*, X-Envelope-*, X-Delivered-To, X-Apparently-To, X-Failed-Recipients, X-Loop, X-Priority, X-MSMail-*, X-MS-*, X-Microsoft-*, X-Forefront-*, X-Exchange-*, X-Google-*, X-GM-*, X-Apple-*, X-Yahoo-*, X-YMail-*, X-AOL-*, X-Spam*, X-Virus-*, X-Proofpoint-*, X-Barracuda-*, X-Rspamd-*, X-Mimecast-*, X-IronPort-*, X-Sophos-*, X-Report-Abuse*, X-CSA-*. Names compare case-insensitively (`_` and `.` count as `-` for families); a repeated or any other name is a `validation_error`. Values: 1 to 200 printable ASCII characters. Custom headers are sent as spelled, are not DKIM-signed, and can be searched with `header` on `GET /sent-emails`.",
+						"example": {
+							"X-Campaign-Id": "spring-sale",
+							"Auto-Submitted": "auto-generated"
+						}
+					},
+					"if_latest_message_id": {
+						"type": "string",
+						"format": "uuid",
+						"description": "Send only if this message id is still the newest message in the thread this send joins, as this credential can see it. Newest means the message that joined the thread last, in the order messages were attached to it, not by timestamp: a message accepted earlier but attached later is newer. Messages stored before join order was recorded count as older than every message that has one, and among themselves sort by timestamp (received_at for mail received, created_at for mail sent), ties going to the larger id. Pass latest_message_id from GET /emails/{id}/conversation: it is read by the same rule, whereas the last message listed there is ordered by timestamp and can differ when mail joined the thread late. An organization credential sees every message in the thread; a mailbox-scoped agent connection key sees only mail received at its address and mail sent from it. Mail awaiting sender authentication never counts. Otherwise nothing is sent and the response is 409 latest_message_mismatch with error.details.latest_message_id, latest_message_at and thread_id. If in_reply_to resolves to no single thread this credential can check, the response is 422 latest_message_thread_unresolved; that does not change on retry. If the thread stays locked by another writer for longer than the send waits, the response is 503 thread_busy with Retry-After; nothing was sent and the same request can be retried. Checked inside the send transaction under a lock on the thread, so two sends conditioned on the same id cannot both go out. The value is part of the request a replay is matched on: a replay of an already accepted request with the same idempotency key, or the identical request within the automatic deduplication window, returns the original result without checking again, and a request that differs only in if_latest_message_id is not a replay. On /send-mail it requires in_reply_to; it cannot be combined with scheduled_at or repeat, because it is checked when the request is accepted."
 					}
 				},
 				"required": [
@@ -12970,6 +13948,63 @@ const openapiDocument = {
 							"user_id",
 							"name"
 						]
+					},
+					"body_text": {
+						"type": ["string", "null"],
+						"description": "Plain-text body sent on the wire. Null when the\nsend carried only an HTML body, or when bodies have\nbeen discarded post-send (`content_discarded_at`\nset).\n"
+					},
+					"body_html": {
+						"type": ["string", "null"],
+						"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+					},
+					"headers": {
+						"anyOf": [{ "$ref": "#/components/schemas/IncludedMessageHeaders" }, { "type": "null" }],
+						"description": "With `include=headers`: stored addressing and threading headers."
+					},
+					"attachments": {
+						"type": "array",
+						"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+						"items": {
+							"type": "object",
+							"description": "Metadata for one submitted inline attachment.",
+							"additionalProperties": true,
+							"properties": {
+								"filename": { "type": ["string", "null"] },
+								"content_type": { "type": "string" },
+								"size_bytes": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"sha256": { "type": "string" },
+								"part_index": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"tar_path": { "type": "string" }
+							},
+							"required": [
+								"filename",
+								"content_type",
+								"size_bytes",
+								"sha256",
+								"part_index",
+								"tar_path"
+							]
+						}
+					},
+					"truncated": {
+						"type": "boolean",
+						"description": "With `include`: true when a body on this row was cut or left out."
+					},
+					"truncated_fields": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"enum": ["body_text", "body_html"]
+						},
+						"description": "With `include`: the body fields on this row that were cut or left out."
 					}
 				},
 				"required": [
@@ -13556,7 +14591,33 @@ const openapiDocument = {
 						"description": "Inline attachments for this reply. Use https://api.primitive.dev/v1 for replies with attachments. Combined raw decoded attachment bytes must be at most 31457280.",
 						"items": { "$ref": "#/components/schemas/SendMailAttachment" }
 					},
-					"repeat": { "$ref": "#/components/schemas/RepeatInput" }
+					"repeat": { "$ref": "#/components/schemas/RepeatInput" },
+					"headers": {
+						"type": "object",
+						"maxProperties": 25,
+						"propertyNames": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 64,
+							"pattern": "^[A-Za-z0-9]+(-[A-Za-z0-9]+)*$"
+						},
+						"additionalProperties": {
+							"type": "string",
+							"minLength": 1,
+							"maxLength": 200,
+							"pattern": "^[\\x20-\\x7E]+$"
+						},
+						"description": "Extra headers, as `{ \"Name\": \"value\" }`, at most 25. A name is one of `Auto-Submitted`, `Precedence`, `X-Auto-Response-Suppress`, `X-Primitive-Interaction`, `X-Primitive-Interaction-Ref`, or a custom `X-` name of letters, digits and hyphens that is not credential-like (a word such as `auth`, `token`, `key`, `secret`, `session` or `bearer`, joined forms included) and not in a reserved family: X-Primitive*, X-Original-*, X-Originating-*, X-Forwarded-*, X-Received*, X-Authenticated*, X-Envelope-*, X-Delivered-To, X-Apparently-To, X-Failed-Recipients, X-Loop, X-Priority, X-MSMail-*, X-MS-*, X-Microsoft-*, X-Forefront-*, X-Exchange-*, X-Google-*, X-GM-*, X-Apple-*, X-Yahoo-*, X-YMail-*, X-AOL-*, X-Spam*, X-Virus-*, X-Proofpoint-*, X-Barracuda-*, X-Rspamd-*, X-Mimecast-*, X-IronPort-*, X-Sophos-*, X-Report-Abuse*, X-CSA-*. Names compare case-insensitively (`_` and `.` count as `-` for families); a repeated or any other name is a `validation_error`. Values: 1 to 200 printable ASCII characters. Custom headers are sent as spelled, are not DKIM-signed, and can be searched with `header` on `GET /sent-emails`.",
+						"example": {
+							"X-Campaign-Id": "spring-sale",
+							"Auto-Submitted": "auto-generated"
+						}
+					},
+					"if_latest_message_id": {
+						"type": "string",
+						"format": "uuid",
+						"description": "Send only if this message id is still the newest message in the thread this send joins, as this credential can see it. Newest means the message that joined the thread last, in the order messages were attached to it, not by timestamp: a message accepted earlier but attached later is newer. Messages stored before join order was recorded count as older than every message that has one, and among themselves sort by timestamp (received_at for mail received, created_at for mail sent), ties going to the larger id. Pass latest_message_id from GET /emails/{id}/conversation: it is read by the same rule, whereas the last message listed there is ordered by timestamp and can differ when mail joined the thread late. An organization credential sees every message in the thread; a mailbox-scoped agent connection key sees only mail received at its address and mail sent from it. Mail awaiting sender authentication never counts. Otherwise nothing is sent and the response is 409 latest_message_mismatch with error.details.latest_message_id, latest_message_at and thread_id. If in_reply_to resolves to no single thread this credential can check, the response is 422 latest_message_thread_unresolved; that does not change on retry. If the thread stays locked by another writer for longer than the send waits, the response is 503 thread_busy with Retry-After; nothing was sent and the same request can be retried. Checked inside the send transaction under a lock on the thread, so two sends conditioned on the same id cannot both go out. The value is part of the request a replay is matched on: a replay of an already accepted request with the same idempotency key, or the identical request within the automatic deduplication window, returns the original result without checking again, and a request that differs only in if_latest_message_id is not a replay. On /send-mail it requires in_reply_to; it cannot be combined with scheduled_at or repeat, because it is checked when the request is accepted."
+					}
 				}
 			},
 			"RepeatInput": {
@@ -19828,6 +20889,855 @@ const operationManifest = [
 		"tag": "Agent Networks",
 		"tagCommand": "agent-networks"
 	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "list-changes",
+		"description": "One feed of small invalidations (ids and kinds) for everything an app keeps a snapshot of: inbound mail, sent mail, the member's conversation read state, the agent directory and presence, and the credential's own access. Non-consumptive and replayable: any number of devices can read the same cursor independently.\n\nStart with `since=start` (or no `since`): it returns an empty page whose `next_cursor` is a baseline. Take it BEFORE the initial list reads; every change that commits after it is delivered, including ones those reads already reflect. Then call with `since=<next_cursor>&wait=20` in a loop. Changes come oldest first in commit order, at least once: a write that commits late is never skipped, because positions are assigned at commit.\n\nEvery change is scoped to what this credential's full reads would show: a connected agent sees only its own mail, its own sends and sends it provably received; mail held for sender authentication is announced only when released; read state reaches only the member it belongs to; agent changes reach members and agents allowed to view the network; organization API keys receive no agent changes. Function credentials cannot call this.\n\nChanges are kept 7 days. A cursor answers 410 `cursor_expired` only when changes after it were pruned (an idle cursor stays valid); rebuild the snapshots from `since=start`.",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "listChanges",
+		"path": "/changes",
+		"pathParams": [],
+		"queryParams": [
+			{
+				"description": "`start` (the default) for a baseline, otherwise the previous `next_cursor`, unchanged.",
+				"enum": null,
+				"name": "since",
+				"required": false,
+				"type": "string"
+			},
+			{
+				"default": 0,
+				"description": "Seconds to hold a caught-up request open. It returns as soon as a change this credential can see commits, else an empty page at the deadline. Ignored for a baseline request.",
+				"enum": null,
+				"maximum": 25,
+				"minimum": 0,
+				"name": "wait",
+				"required": false,
+				"type": "integer"
+			},
+			{
+				"default": 100,
+				"description": "Maximum changes in one page.",
+				"enum": null,
+				"maximum": 100,
+				"minimum": 1,
+				"name": "limit",
+				"required": false,
+				"type": "integer"
+			},
+			{
+				"description": "`message` adds `message` to every change: the current list row of the message a message change names, so a reader needs no follow-up read. Ignored for a baseline request.",
+				"enum": ["message"],
+				"name": "expand",
+				"required": false,
+				"type": "string"
+			},
+			{
+				"description": "Up to 20 email addresses, comma-separated (or the parameter repeated). Keeps only the message changes whose message is to or from one of them, matched case-insensitively. Inbound mail matches on the address it was delivered to, the envelope sender and the From header address; sent mail on the From address and the To and Cc addresses, and Bcc only for a credential that can read the sender side. Deletions, thread, agent and access changes are never filtered, because a deleted message's addresses can no longer be read: ignore a deletion for an id you do not hold. The cursor still moves past every change the filter drops, so a filtered page can be empty with a new cursor.",
+				"enum": null,
+				"name": "address",
+				"required": false,
+				"type": "string"
+			}
+		],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"additionalProperties": false,
+			"required": [
+				"changes",
+				"next_cursor",
+				"has_more",
+				"baseline"
+			],
+			"properties": {
+				"changes": {
+					"type": "array",
+					"items": {
+						"type": "object",
+						"additionalProperties": false,
+						"description": "One invalidation: what changed, by id, never its content. Every field is present; fields that do not apply to the kind are null. Apply idempotently: a change can repeat.",
+						"required": [
+							"kind",
+							"email_id",
+							"sent_email_id",
+							"thread_id",
+							"status",
+							"agent_address",
+							"reason",
+							"changed_at"
+						],
+						"properties": {
+							"kind": {
+								"type": "string",
+								"enum": [
+									"email.visible",
+									"email.updated",
+									"email.deleted",
+									"sent_email.created",
+									"sent_email.updated",
+									"sent_email.deleted",
+									"thread.read_state_changed",
+									"thread.mute_changed",
+									"agent.changed",
+									"access.changed"
+								],
+								"description": "`email.visible`: an inbound email became visible to this credential (arrived, or its sender-authentication hold was released). `email.updated`: something a list row or conversation shows changed. `email.deleted`: gone, or withdrawn from view. `sent_email.created` / `sent_email.updated`: a send appeared or changed; `status` is its current status, and several changes between two reads collapse into one entry. Created is a hint (first committed after the cursor): treat both as upsert, including `sent_email.updated` for an id you have not seen. `sent_email.deleted`: the send was deleted. `thread.read_state_changed`: the signed-in member's read cursor for `thread_id` moved, on any device. `thread.mute_changed`: `thread_id` was muted or unmuted for an address this credential reads, which changes the `muted` flag and `exclude_muted` results of its mail. `agent.changed`: an agent in the directory changed (connected, disconnected, renamed, hidden, listed, presence extended, receiver live). `access.changed`: this credential's own access changed; rebuild every snapshot from `since=start`."
+							},
+							"email_id": {
+								"type": ["string", "null"],
+								"format": "uuid",
+								"description": "email.* kinds."
+							},
+							"sent_email_id": {
+								"type": ["string", "null"],
+								"format": "uuid",
+								"description": "sent_email.* kinds."
+							},
+							"thread_id": {
+								"type": ["string", "null"],
+								"format": "uuid",
+								"description": "The conversation, when known. Null for a connected agent reading a send, or its deletion, that it received but did not send, matching what GET /sent-emails withholds. Inbound mail is announced when it becomes visible, which can be before its conversation is resolved, so `email.visible` can carry null; resolving or changing the conversation is always announced afterwards as `email.updated` with the `thread_id`."
+							},
+							"status": {
+								"type": ["string", "null"],
+								"description": "sent_email.created and sent_email.updated: the send's current status."
+							},
+							"agent_address": {
+								"type": ["string", "null"],
+								"description": "agent.changed: the agent's address."
+							},
+							"reason": {
+								"type": ["string", "null"],
+								"enum": [
+									"membership",
+									"agent_connection",
+									null
+								],
+								"description": "access.changed: `membership` (the member's role or membership) or `agent_connection` (this agent connection's status, owner or generation)."
+							},
+							"changed_at": {
+								"type": "string",
+								"format": "date-time",
+								"description": "The commit position in microsecond UTC form. Orders the feed; not a business timestamp."
+							},
+							"message": {
+								"oneOf": [{
+									"description": "A message inlined by `expand=message`. `direction` `inbound` is a GET /emails row; `outbound` is a GET /sent-emails row.",
+									"oneOf": [{
+										"description": "An inbound message inlined by `expand=message`, as GET /emails returns it.",
+										"allOf": [{
+											"type": "object",
+											"properties": {
+												"id": {
+													"type": "string",
+													"format": "uuid"
+												},
+												"message_id": { "type": ["string", "null"] },
+												"domain_id": {
+													"type": ["string", "null"],
+													"format": "uuid"
+												},
+												"org_id": {
+													"type": ["string", "null"],
+													"format": "uuid"
+												},
+												"status": {
+													"type": "string",
+													"description": "Lifecycle status of an INBOUND email (a row in the `emails`\ntable). Distinct from `SentEmailStatus`, which describes\nthe OUTBOUND lifecycle (the `sent_emails` table) and uses\na different vocabulary because the lifecycles differ.\nPossible values:\n\n  - `pending`: the row was inserted at ingestion (mx_main)\n    and has not yet completed the spam / filter / auth\n    pipeline. Body and parsed fields are present; webhook\n    delivery is not yet scheduled. Most rows transition out\n    of `pending` within seconds.\n  - `accepted`: the inbound passed the policy gates and is\n    queued for webhook delivery. The `webhook_status` field\n    tracks the separate webhook-delivery lifecycle from\n    this point.\n  - `completed`: terminal success. Webhook delivery\n    attempted and acknowledged by every active endpoint, OR\n    no endpoints are configured, so the row is durably\n    archived.\n  - `rejected`: terminal failure at ingestion (spam, blocked\n    sender, filter rule, malformed). The body and metadata\n    are stored for auditing but no webhook fires and the\n    row is not repliable.\n\nSee also `webhook_status` (separate enum tracking the\nwebhook-delivery state machine) and `SentEmailStatus` (the\noutbound vocabulary).\n",
+													"enum": [
+														"pending",
+														"accepted",
+														"completed",
+														"rejected"
+													]
+												},
+												"sender": {
+													"type": "string",
+													"description": "SMTP envelope sender (return-path) the inbound mail server\naccepted. For most legitimate mail this equals the bare\naddress in the From header; for mailing lists, bounce\nhandlers, and forwarders it is typically the bounce address\nrather than the human-visible sender.\n\nFor the parsed From-header value (with display name handling\nand a sender-fallback when the header is unparseable), GET\nthe email by id and use `from_email`.\n"
+												},
+												"recipient": { "type": "string" },
+												"subject": { "type": ["string", "null"] },
+												"domain": { "type": "string" },
+												"spam_score": { "type": ["number", "null"] },
+												"created_at": {
+													"type": "string",
+													"format": "date-time"
+												},
+												"received_at": {
+													"type": "string",
+													"format": "date-time"
+												},
+												"raw_size_bytes": { "type": ["integer", "null"] },
+												"webhook_status": {
+													"type": ["string", "null"],
+													"description": "Webhook-delivery state for an inbound email. Tracks a\nSEPARATE lifecycle from the email's `status` field; the\nsame row carries both. Possible values:\n\n  - `pending`: ingestion is past `pending` (the email itself\n    is `accepted`) but the webhook fan-out has not yet\n    started for this row.\n  - `in_flight`: at least one delivery attempt is in flight.\n  - `fired`: terminal success. Every active endpoint\n    acknowledged the delivery (or accepted it after retries).\n  - `failed`: terminal partial-failure. At least one endpoint\n    exhausted its retry budget; some endpoints may still\n    have succeeded.\n  - `exhausted`: terminal failure. Every endpoint exhausted\n    its retry budget without success.\n  - `null`: no endpoints configured, so no webhook lifecycle\n    applies.\n\nNote that the value `pending` here does NOT mean the email\nis `pending`; it means the email is past ingestion but\nwebhook delivery has not yet begun. Two overlapping uses\nof the word `pending` for distinct lifecycle phases.\n",
+													"enum": [
+														"pending",
+														"in_flight",
+														"fired",
+														"failed",
+														"exhausted",
+														null
+													]
+												},
+												"webhook_attempt_count": { "type": "integer" },
+												"thread_id": {
+													"type": ["string", "null"],
+													"format": "uuid",
+													"description": "Conversation thread this message belongs to. Fetch\n`/threads/{thread_id}` for the full ordered thread. NULL on\nmessages received before threading was enabled.\n"
+												},
+												"presence_control": { "anyOf": [{
+													"type": "object",
+													"properties": {
+														"status": {
+															"type": "string",
+															"enum": [
+																"verified",
+																"pending",
+																"rejected"
+															]
+														},
+														"valid_for_ms": {
+															"type": "integer",
+															"minimum": 0,
+															"maximum": 6e5
+														}
+													},
+													"required": ["status", "valid_for_ms"],
+													"additionalProperties": false
+												}, { "type": "null" }] },
+												"automation_headers": {
+													"type": ["object", "null"],
+													"description": "What the message declared about being automated, verbatim:\n`List-Unsubscribe` (RFC 2369/8058), `List-Id` (RFC 2919),\n`Precedence`, and `Auto-Submitted` (RFC 3834). Null or absent when the message\ndeclared none, and on messages received before these headers\nwere captured, so a null value is not evidence that a person\nsent the message.\n",
+													"properties": {
+														"list_unsubscribe": { "type": "string" },
+														"list_id": { "type": "string" },
+														"precedence": { "type": "string" },
+														"auto_submitted": { "type": "string" }
+													},
+													"additionalProperties": true
+												},
+												"reply_count": {
+													"type": "integer",
+													"minimum": 0,
+													"description": "Number of replies recorded against this email: sends whose\n`in_reply_to_email_id` is this email, the same linkage that populates\n`EmailDetail.replies`, excluding sends that never went out (status\n`gate_denied`, `agent_failed`, `canceled`). Queued and scheduled\nreplies count. Under an agent connection, only the replies that agent\ncan see in `EmailDetail.replies`. Unlike `awaiting`, this counts\nreplies to this one email, not to the thread.\n"
+												},
+												"last_replied_at": {
+													"type": ["string", "null"],
+													"format": "date-time",
+													"description": "`created_at` of the latest reply counted in `reply_count`, or\nnull when `reply_count` is 0.\n"
+												},
+												"awaiting": {
+													"type": "string",
+													"enum": ["you", "them"],
+													"description": "Whose turn it is in this email's conversation. A send counts as a\nreply unless its status is `gate_denied`, `agent_failed`, `canceled`\n(queued and scheduled replies count: they are committed to go). For\nan email with a `thread_id`: `them` when the thread's latest counted\noutbound send (by send `created_at`, including any counted reply to\nthis email itself) is at or after the thread's latest inbound message\n(by `received_at`); otherwise `you`. For an email with no\n`thread_id`: `them` when it has at least one counted reply\n(`reply_count > 0` for an API key), otherwise `you`. It is a\nthread-level fact: every email in a thread carries the same value, and\nit reflects sends made by any credential in the organization,\nincluding other agent connections. It changes without a new inbound\nmessage, for example when a reply is sent, a queued reply fails, a\nscheduled reply is canceled, or a message is deleted, and is always\ncurrent when read.\n"
+												},
+												"automated": {
+													"type": "boolean",
+													"description": "Whether the message was sent by a machine rather than a person.\nAn inbound email is `automated` when any of these holds, decided once\nwhen it arrives: `null_envelope_sender` (an empty MAIL FROM, a bounce);\n`no_identifiable_sender` (no address in the envelope or From);\n`own_address` (a sender address is exactly one of the addresses the\nmail was delivered to; sharing a domain with the recipient is not\nenough, so a colleague or another agent in the organization is not\nautomated);\n`mailer_daemon` (mailer-daemon@ or postmaster@ on any domain);\n`auto_submitted` (Auto-Submitted with any keyword but `no`, an\nempty one included);\n`precedence` (Precedence bulk, list, junk or auto_reply);\n`list_unsubscribe` (List-Unsubscribe present); `list_id` (List-Id\npresent); `auto_response_suppress` (X-Auto-Response-Suppress asks\nfor no automatic reply: All, OOF or AutoReply);\n`failed_recipients` (X-Failed-Recipients present, a bounce);\n`report` (a delivery, feedback or disposition report). Mail\nPrimitive's own automatic responders decline to answer is always\n`automated`. The header rules only see headers captured at ingest, so\nolder mail may lack them. This is loop and noise protection, not\nsender authentication.\n"
+												},
+												"automated_reasons": {
+													"type": "array",
+													"items": { "type": "string" },
+													"description": "Why `automated` is true, in rule order; empty when it is false.\nCurrent values: `null_envelope_sender`, `no_identifiable_sender`,\n`own_address`, `mailer_daemon`, `auto_submitted`, `precedence`,\n`list_unsubscribe`, `list_id`, `auto_response_suppress`,\n`failed_recipients`, `report`. Treat an unfamiliar value as a\nreason added after your client was built.\n"
+												},
+												"from_verified": {
+													"type": ["boolean", "null"],
+													"description": "True when the From header address, `from_header_email`, passed DMARC for its domain on arrival (aligned SPF or DKIM); decided once, at receipt. It is about the From header, never the envelope: `sender`, the `from` parameter and `from:` term, and the change feed's `address` match the envelope sender, which can differ. It proves the domain, not the mailbox. False with no From header address, when authentication failed or was not attempted (a delivery between Primitive mailboxes counts only when it passed DMARC too), and for mail stored before the verdict was recorded. Null on sent rows in search results. Not a spam or safety judgement."
+												},
+												"from_header_email": {
+													"type": ["string", "null"],
+													"description": "The From header address, lowercased, that `from_verified` is about; null when the message had none. Unlike `sender` it is never the envelope address."
+												},
+												"repeat": {
+													"type": ["object", "null"],
+													"description": "Set when Primitive sent this message as part of a repeating send. Resolved from Primitive's own records, never from the message content. Null on every other message and on servers that predate repeating sends.",
+													"properties": {
+														"repeat_id": {
+															"type": "string",
+															"format": "uuid"
+														},
+														"sequence": {
+															"type": "integer",
+															"minimum": 1
+														}
+													},
+													"required": ["repeat_id", "sequence"]
+												},
+												"sender_member": {
+													"type": ["object", "null"],
+													"description": "Verified human authorship, projected only within the member organization. Historical attribution is not current sending or owner authority.",
+													"properties": {
+														"address": {
+															"type": "string",
+															"format": "email"
+														},
+														"user_id": { "type": "string" },
+														"name": { "type": ["string", "null"] }
+													},
+													"required": [
+														"address",
+														"user_id",
+														"name"
+													]
+												},
+												"fyi": {
+													"type": "boolean",
+													"description": "True when the email is an informational signal (an acknowledgement, read, working or typing signal) and nothing else, so it needs no answer, not even another informational reply. Never true for mail from the reader's owner. Older servers omit it.\n"
+												},
+												"interaction_hint": {
+													"type": "string",
+													"description": "How to place this email in a timeline without downloading it: `status`, `card`, `none` or `pending`. Not declared as a closed enum so that a value added later does not fail decoding. Decided once by the server from the message's authoritative `interaction.json` part, and only when a passing DKIM signature covering From and Content-Type authenticates the From that wrote it; the `X-Primitive-Interaction` header is never used, so an unsigned or forged message is always `none`. `status`: a pure status signal (`read`, `working`, `typing`, or an `ack` in the strict signal shape), shown as a property of the message it is about rather than as a row. `card`: an interaction that renders as its own timeline item (for example `ack-request`, `x402.payment`, `wake.dispatch`, `primitive.contact`, `repeat.tick`, `repeat.stop`). `none`: ordinary mail, including any interaction kind not listed. `pending`: the email has not finished processing; read it again later. Email processed before the field existed is `none`. Treat an unfamiliar value as `none`. Older servers omit it.\n"
+												},
+												"interaction_kind": {
+													"type": ["string", "null"],
+													"description": "The `<protocol>/<version>` that `interaction_hint` was decided from (for example `repeat.tick/1` or `read/1`) when `interaction_hint` is `status` or `card`; null otherwise.\n"
+												},
+												"interaction_candidate": {
+													"type": "boolean",
+													"description": "UNVERIFIED early signal for the `pending` window: true when the raw message carries an `X-Primitive-Interaction` header or a MIME part named `interaction.json`, recorded before any signature is checked. Use it only to decide, while `interaction_hint` is `pending`, whether to show a placeholder instead of the raw text. It is never evidence of an interaction: anyone can set that header or name a part that way, so it must not grant trust or select an interaction kind. Ignore it once `interaction_hint` is anything other than `pending`.\n"
+												},
+												"relay": {
+													"type": ["object", "null"],
+													"description": "Set when the message reached Primitive through a Primitive mail relay. Null for other mail. The field may be absent; treat a missing value the same as null.",
+													"properties": {
+														"hostname": {
+															"type": "string",
+															"description": "The relay hostname the domain's MX record points at."
+														},
+														"via": {
+															"type": "string",
+															"description": "How the message arrived. Currently always `mail_relay`. Treat an unfamiliar value as one added after your client was built."
+														}
+													},
+													"required": ["hostname", "via"]
+												},
+												"from_name": {
+													"type": ["string", "null"],
+													"description": "Display name from the `From:` header, decoded for display:\nRFC 2047 encoded words are decoded in their declared charset\nand folded lines are joined (e.g. `Dana Rúiz` for\n`=?UTF-8?Q?Dana_R=C3=BAiz?= <dana@example.com>`). Null when\nthe header carries no display name, and may be absent; treat\na missing value the same as null.\n\nFor display only: the sender chooses this name freely, so\nidentify the sender by `from_email`, never by this name.\n"
+												},
+												"body_text": {
+													"type": ["string", "null"],
+													"description": "With `include=body_text`: the plain-text body, cut as `truncated_fields` says."
+												},
+												"body_html": {
+													"type": ["string", "null"],
+													"description": "With `include=body_html`: the HTML body, cut as `truncated_fields` says."
+												},
+												"headers": {
+													"anyOf": [{
+														"type": "object",
+														"description": "Stored addressing and threading headers. A member is null when absent or withheld.",
+														"properties": {
+															"from": { "type": ["string", "null"] },
+															"to": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"cc": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"bcc": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"reply_to": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"in_reply_to": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"references": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"automation": {
+																"type": ["object", "null"],
+																"additionalProperties": { "type": "string" },
+																"description": "Received mail only."
+															}
+														},
+														"required": [
+															"from",
+															"to",
+															"cc",
+															"bcc",
+															"reply_to",
+															"in_reply_to",
+															"references",
+															"automation"
+														]
+													}, { "type": "null" }],
+													"description": "With `include=headers`: stored addressing and threading headers."
+												},
+												"attachments": {
+													"type": "array",
+													"items": {
+														"type": "object",
+														"additionalProperties": true
+													},
+													"description": "With `include=attachments`: attachment metadata as the detail read reports it. Never the bytes."
+												},
+												"truncated": {
+													"type": "boolean",
+													"description": "With `include`: true when a body on this row was cut or left out."
+												},
+												"truncated_fields": {
+													"type": "array",
+													"items": {
+														"type": "string",
+														"enum": ["body_text", "body_html"]
+													},
+													"description": "With `include`: the body fields on this row that were cut or left out."
+												}
+											},
+											"required": [
+												"id",
+												"status",
+												"sender",
+												"recipient",
+												"domain",
+												"created_at",
+												"received_at",
+												"webhook_attempt_count",
+												"reply_count",
+												"last_replied_at",
+												"awaiting",
+												"automated",
+												"automated_reasons"
+											]
+										}, {
+											"type": "object",
+											"required": ["direction"],
+											"properties": { "direction": {
+												"type": "string",
+												"enum": ["inbound"]
+											} }
+										}]
+									}, {
+										"description": "A sent message inlined by `expand=message`, as GET /sent-emails returns it.",
+										"allOf": [{
+											"type": "object",
+											"description": "List-row projection of a sent-email record. Drops\n`body_text` and `body_html` to keep paginated responses\nsmall; fetch /sent-emails/{id} for the full record with\nbodies.\n",
+											"properties": {
+												"id": {
+													"type": "string",
+													"format": "uuid"
+												},
+												"status": {
+													"type": "string",
+													"description": "Lifecycle status of a sent_emails row. Possible values:\n\n  - `queued`: pre-call INSERT; the outbound agent has not\n    yet replied.\n  - `submitted_to_agent`: agent accepted; `queue_id` is set.\n  - `agent_failed`: agent rejected; `error_code` and\n    `error_message` carry the reason.\n  - `gate_denied`: a recipient-scope gate denied the send;\n    the agent was never called. The `gates` array carries\n    the denial detail. /send-mail returns 403 in this case\n    so callers see the denial synchronously; /sent-emails\n    additionally records the row for historical lookup,\n    which is when this status appears in a listing.\n  - `unknown`: terminal indeterminate; the on-box log\n    poller couldn't classify the receiver's response.\n  - `delivered` / `bounced` / `deferred` / `wait_timeout`:\n    terminal delivery outcomes (see DeliveryStatus).\n  - `scheduled`: created with a future `scheduled_at` and\n    not yet executed; `scheduled_at` carries the pending\n    execution time. Reschedulable via PATCH\n    /sent-emails/{id} and cancelable via\n    /sent-emails/{id}/cancel while in this status.\n  - `canceled`: terminal; a scheduled send canceled before\n    execution. `canceled_at` carries the cancellation time\n    and nothing was dispatched.\n",
+													"enum": [
+														"queued",
+														"submitted_to_agent",
+														"agent_failed",
+														"gate_denied",
+														"unknown",
+														"delivered",
+														"bounced",
+														"deferred",
+														"wait_timeout",
+														"scheduled",
+														"canceled"
+													]
+												},
+												"status_changed_at": {
+													"type": "string",
+													"format": "date-time",
+													"description": "Timestamp of the most recent status transition.\nPolling clients should treat `status='queued'` AND\n`status_changed_at` older than 5 minutes as\n\"stuck-queued\" (the post-tx UPDATE failed and the\nactual delivery state is recoverable from on-box logs\nvia `queue_id` when populated, or `request_id`).\n"
+												},
+												"created_at": {
+													"type": "string",
+													"format": "date-time"
+												},
+												"updated_at": {
+													"type": "string",
+													"format": "date-time"
+												},
+												"client_idempotency_key": {
+													"type": ["string", "null"],
+													"description": "Effective idempotency key used for this send. If the\ncaller passed the `Idempotency-Key` header, this is\nthat value; otherwise it's a server-derived hash of\nthe canonical request payload.\n"
+												},
+												"content_hash": {
+													"type": "string",
+													"description": "Stable hash of the canonical send payload."
+												},
+												"from_header": {
+													"type": "string",
+													"description": "Raw `From:` header as sent on the wire, including any\ndisplay name (e.g. `\"Acme Support\" <agent@acme.test>`).\n"
+												},
+												"from_address": {
+													"type": "string",
+													"description": "Bare email address parsed from `from_header`."
+												},
+												"to_header": {
+													"type": "string",
+													"description": "Raw `To:` header as sent on the wire, including any\ndisplay name.\n"
+												},
+												"to_address": {
+													"type": "string",
+													"description": "Bare email address parsed from `to_header`."
+												},
+												"recipient_count": {
+													"type": ["integer", "null"],
+													"minimum": 0,
+													"description": "Every recipient of the send, To, Cc and Bcc together, each address counted once: the size of `to_addresses`, `cc` and `bcc` combined without duplicates. On a mail relay send `bcc` lists every hidden recipient. Null when the request uses an address-bound agent connection key whose address is not the sender, because the count would reveal Bcc recipients. The `sent_email` object of the `sent_email.*` webhook events carries the same field."
+												},
+												"subject": { "type": "string" },
+												"body_size_bytes": {
+													"type": "integer",
+													"description": "Total UTF-8 byte length of `body_text` + `body_html`.\nSurfaced on the list endpoint so callers can see \"this\nrow has a 4MB body\" without fetching it.\n"
+												},
+												"content_discarded_at": {
+													"type": ["string", "null"],
+													"format": "date-time",
+													"description": "Timestamp at which the bodies were discarded by an\nentitlement-driven retention policy. Null when bodies\nare still present. The detail endpoint returns\nnull-valued `body_text`/`body_html` for discarded rows.\n"
+												},
+												"message_id": {
+													"type": ["string", "null"],
+													"description": "Wire-level Message-ID assigned to the outbound message\n(RFC 5322). Null on rows that never reached signing\n(queued, gate_denied, agent_failed before signing).\n"
+												},
+												"in_reply_to": {
+													"type": ["string", "null"],
+													"description": "Wire-level In-Reply-To header value, when this send\nwas a reply.\n"
+												},
+												"email_references": {
+													"type": ["string", "null"],
+													"description": "Wire-level References header value, when this send\nwas a reply.\n"
+												},
+												"in_reply_to_email_id": {
+													"type": ["string", "null"],
+													"format": "uuid",
+													"description": "Reference to the inbound `emails.id` that this send\nreplied to, when known. Populated when the caller used\n/emails/{id}/reply or when /send-mail's `in_reply_to`\nmatched a stored inbound message_id in the same org.\n"
+												},
+												"thread_id": {
+													"type": ["string", "null"],
+													"format": "uuid",
+													"description": "Conversation thread this send belongs to. A reply inherits\nthe thread of the inbound it answers; a fresh send starts a\nnew thread. Fetch `/threads/{thread_id}` for the full\nordered thread (inbound + outbound interleaved). NULL on\ngate-denied sends and on sends created before threading was\nenabled.\n"
+												},
+												"queue_id": {
+													"type": ["string", "null"],
+													"description": "Message identifier assigned by Primitive's outbound\nrelay once the agent accepts the message. Null on\nqueued, gate_denied, and agent_failed rows.\n"
+												},
+												"smtp_response_code": {
+													"type": ["integer", "null"],
+													"description": "Receiver's 3-digit SMTP code (e.g. 250, 550, 451).\nPopulated on terminal delivery statuses; may be null\non a deferred where the agent never got an SMTP-level\nresponse (TCP refused, DNS failed, TLS handshake\nfailed). `smtp_response_text` still carries Postfix's\ndescriptive text in those cases.\n"
+												},
+												"smtp_response_text": {
+													"type": ["string", "null"],
+													"description": "Free-form text portion of the receiver's SMTP\nresponse. The most useful debugging signal on a\n`bounced` or `deferred` row.\n"
+												},
+												"smtp_enhanced_status_code": {
+													"type": ["string", "null"],
+													"description": "RFC 3463 enhanced status code (e.g. `5.1.1` for \"Bad\ndestination mailbox address\"). Distinct from\n`smtp_response_code`: the basic 3-digit code is coarse\n(550 = \"permanent failure\"), the enhanced code is\nfiner-grained.\n"
+												},
+												"dkim_selector": {
+													"type": ["string", "null"],
+													"description": "DKIM selector used to sign the outbound message.\nPublic DNS data; useful for diagnosing why a downstream\nverifier rejected the signature.\n"
+												},
+												"dkim_domain": {
+													"type": ["string", "null"],
+													"description": "DKIM signing domain."
+												},
+												"error_code": {
+													"type": ["string", "null"],
+													"description": "Stable public error code on `agent_failed` rows. The\nagent's internal codes are remapped to a stable public\ntaxonomy (see `publicAgentError` in the server) so this\nfield is safe to branch on across agent versions.\n"
+												},
+												"error_message": {
+													"type": ["string", "null"],
+													"description": "Free-form error message accompanying `error_code`."
+												},
+												"gates": {
+													"type": ["array", "null"],
+													"items": {
+														"type": "object",
+														"properties": {
+															"name": {
+																"type": "string",
+																"enum": ["send_to_confirmed_domains", "send_to_known_addresses"],
+																"description": "Public recipient-scope gate name that denied the send."
+															},
+															"reason": {
+																"type": "string",
+																"enum": [
+																	"domain_not_confirmed",
+																	"recipient_unauthenticated",
+																	"recipient_not_known"
+																],
+																"description": "Stable machine-readable denial reason."
+															},
+															"message": {
+																"type": "string",
+																"description": "Human-readable explanation of the gate denial."
+															},
+															"subject": {
+																"type": "string",
+																"description": "Domain or address the gate evaluated."
+															},
+															"fix": {
+																"type": "object",
+																"properties": {
+																	"action": {
+																		"type": "string",
+																		"enum": [
+																			"confirm_domain",
+																			"sender_must_fix_authentication",
+																			"wait_for_inbound"
+																		],
+																		"description": "Suggested next action for the caller."
+																	},
+																	"subject": {
+																		"type": "string",
+																		"description": "Entity the action applies to."
+																	}
+																},
+																"required": ["action", "subject"]
+															},
+															"docs_url": {
+																"type": "string",
+																"description": "Public docs URL with more context."
+															}
+														},
+														"required": [
+															"name",
+															"reason",
+															"message",
+															"subject"
+														]
+													},
+													"description": "Gate-denial detail on `gate_denied` rows. Mirrors the\nsynchronous /send-mail 403 contract so a caller's\nGateDenial handler is the same across live denies and\nhistorical lookups. Null on every other status.\n"
+												},
+												"request_id": {
+													"type": ["string", "null"],
+													"description": "Server-issued request identifier from the original\n/send-mail call. Surfaced as the `X-Request-Id`\nresponse header on the live send and recorded here\nfor support escalation.\n"
+												},
+												"scheduled_at": {
+													"type": ["string", "null"],
+													"format": "date-time",
+													"description": "Requested execution time for a scheduled send. Kept\nafter execution as the historical schedule; null on\nordinary immediate sends.\n"
+												},
+												"canceled_at": {
+													"type": ["string", "null"],
+													"format": "date-time",
+													"description": "When a scheduled send was canceled. Null unless the row\nreached the `canceled` status.\n"
+												},
+												"presence_control": { "anyOf": [{
+													"type": "object",
+													"properties": {
+														"status": {
+															"type": "string",
+															"enum": [
+																"verified",
+																"pending",
+																"rejected"
+															]
+														},
+														"valid_for_ms": {
+															"type": "integer",
+															"minimum": 0,
+															"maximum": 6e5
+														}
+													},
+													"required": ["status", "valid_for_ms"],
+													"additionalProperties": false
+												}, { "type": "null" }] },
+												"repeat": {
+													"type": ["object", "null"],
+													"description": "Set when Primitive sent this message as part of a repeating send. Resolved from Primitive's own records, never from the message content. Null on every other message and on servers that predate repeating sends.",
+													"properties": {
+														"repeat_id": {
+															"type": "string",
+															"format": "uuid"
+														},
+														"sequence": {
+															"type": "integer",
+															"minimum": 1
+														}
+													},
+													"required": ["repeat_id", "sequence"]
+												},
+												"sender_member": {
+													"type": ["object", "null"],
+													"description": "Verified human authorship, projected only within the member organization. Historical attribution is not current sending or owner authority.",
+													"properties": {
+														"address": {
+															"type": "string",
+															"format": "email"
+														},
+														"user_id": { "type": "string" },
+														"name": { "type": ["string", "null"] }
+													},
+													"required": [
+														"address",
+														"user_id",
+														"name"
+													]
+												},
+												"body_text": {
+													"type": ["string", "null"],
+													"description": "Plain-text body sent on the wire. Null when the\nsend carried only an HTML body, or when bodies have\nbeen discarded post-send (`content_discarded_at`\nset).\n"
+												},
+												"body_html": {
+													"type": ["string", "null"],
+													"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+												},
+												"headers": {
+													"anyOf": [{
+														"type": "object",
+														"description": "Stored addressing and threading headers. A member is null when absent or withheld.",
+														"properties": {
+															"from": { "type": ["string", "null"] },
+															"to": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"cc": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"bcc": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"reply_to": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"in_reply_to": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"references": {
+																"type": ["array", "null"],
+																"items": { "type": "string" }
+															},
+															"automation": {
+																"type": ["object", "null"],
+																"additionalProperties": { "type": "string" },
+																"description": "Received mail only."
+															}
+														},
+														"required": [
+															"from",
+															"to",
+															"cc",
+															"bcc",
+															"reply_to",
+															"in_reply_to",
+															"references",
+															"automation"
+														]
+													}, { "type": "null" }],
+													"description": "With `include=headers`: stored addressing and threading headers."
+												},
+												"attachments": {
+													"type": "array",
+													"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+													"items": {
+														"type": "object",
+														"description": "Metadata for one submitted inline attachment.",
+														"additionalProperties": true,
+														"properties": {
+															"filename": { "type": ["string", "null"] },
+															"content_type": { "type": "string" },
+															"size_bytes": {
+																"type": "integer",
+																"minimum": 0,
+																"maximum": 9007199254740991
+															},
+															"sha256": { "type": "string" },
+															"part_index": {
+																"type": "integer",
+																"minimum": 0,
+																"maximum": 9007199254740991
+															},
+															"tar_path": { "type": "string" }
+														},
+														"required": [
+															"filename",
+															"content_type",
+															"size_bytes",
+															"sha256",
+															"part_index",
+															"tar_path"
+														]
+													}
+												},
+												"truncated": {
+													"type": "boolean",
+													"description": "With `include`: true when a body on this row was cut or left out."
+												},
+												"truncated_fields": {
+													"type": "array",
+													"items": {
+														"type": "string",
+														"enum": ["body_text", "body_html"]
+													},
+													"description": "With `include`: the body fields on this row that were cut or left out."
+												}
+											},
+											"required": [
+												"id",
+												"status",
+												"status_changed_at",
+												"created_at",
+												"updated_at",
+												"content_hash",
+												"from_header",
+												"from_address",
+												"to_header",
+												"to_address",
+												"subject",
+												"body_size_bytes"
+											]
+										}, {
+											"type": "object",
+											"required": ["direction"],
+											"properties": { "direction": {
+												"type": "string",
+												"enum": ["outbound"]
+											} }
+										}]
+									}],
+									"discriminator": {
+										"propertyName": "direction",
+										"mapping": {
+											"inbound": "#/components/schemas/ChangeInboundMessage",
+											"outbound": "#/components/schemas/ChangeOutboundMessage"
+										}
+									}
+								}, { "type": "null" }],
+								"description": "Present only when the request sets `expand=message`. For `email.visible`, `email.updated`, `sent_email.created`, `sent_email.updated`: the message as it reads at the time of this response (not at the time of the change), exactly as the list endpoints return it, marked by `direction`. Null for every other kind, and when the message is no longer readable by this credential (deleted, or withdrawn from view after the change)."
+							}
+						}
+					},
+					"description": "Oldest first, in commit order."
+				},
+				"next_cursor": {
+					"type": "string",
+					"description": "Always present. Send it unchanged as `since` next time, and store it only after applying the page. It is exactly the `since` you sent when nothing at all happened after it; it moves past changes this credential cannot see, so the page can be empty with a new cursor."
+				},
+				"has_more": {
+					"type": "boolean",
+					"description": "More changes are already pending: call again at once, without waiting."
+				},
+				"baseline": {
+					"type": "boolean",
+					"description": "True only for a `since=start` request, whose page is always empty."
+				}
+			}
+		},
+		"sdkName": "listChanges",
+		"summary": "Long-poll what changed",
+		"tag": "Changes",
+		"tagCommand": "changes"
+	},
 	{
 		"binaryResponse": false,
 		"bodyRequired": false,
@@ -22929,6 +24839,76 @@ const operationManifest = [
 		"tag": "Emails",
 		"tagCommand": "emails"
 	},
+	{
+		"binaryResponse": true,
+		"bodyRequired": false,
+		"command": "download-email-attachment-archive-member",
+		"description": "Returns the decoded bytes of one regular file inside a zip, tar or tar.gz attachment, by its listed path. The archive's structure, every member path and every limit are checked as for the listing, but only the requested file is decoded and verified (its zip CRC-32, and X-Content-SHA256 of the bytes returned); list the archive to have every file decoded. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail received at its own address. Function credentials are not supported. Discarded content is unavailable.",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "downloadEmailAttachmentArchiveMember",
+		"path": "/emails/{id}/attachments/{attachment}/members/{path}",
+		"pathParams": [
+			{
+				"description": "Resource UUID",
+				"enum": null,
+				"name": "id",
+				"required": true,
+				"type": "string"
+			},
+			{
+				"description": "The attachment, by its exact part_index when the value is digits only, otherwise by its exact filename (case-sensitive, compared after Unicode NFC normalization). A digits-only value always selects that part_index, even when another attachment has that name; read such a name with ?filename=.",
+				"enum": null,
+				"name": "attachment",
+				"required": true,
+				"type": "string"
+			},
+			{
+				"description": "The member path exactly as listed, percent-encoded as one path segment (slashes as %2F).",
+				"enum": null,
+				"name": "path",
+				"required": true,
+				"type": "string"
+			}
+		],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": null,
+		"sdkName": "downloadEmailAttachmentArchiveMember",
+		"summary": "Download one file from inside a received zip or tar attachment",
+		"tag": "Emails",
+		"tagCommand": "emails"
+	},
+	{
+		"binaryResponse": true,
+		"bodyRequired": false,
+		"command": "download-email-attachment-by-filename",
+		"description": "Returns the same bytes as downloadEmailAttachmentPart, selecting the attachment by its exact filename. The path form `/emails/{id}/attachments/{filename}` also works for any name that is not digits only, which that form reads as a part_index. When several attachments share the filename the response is 409 attachment_name_ambiguous with every matching part_index, and nothing is returned. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail received at its own address. Function credentials are not supported. Discarded content is unavailable.",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "downloadEmailAttachmentByFilename",
+		"path": "/emails/{id}/attachments",
+		"pathParams": [{
+			"description": "Resource UUID",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [{
+			"description": "The attachment's exact filename from its metadata. Any name, digits only included. No other query parameter is accepted.",
+			"enum": null,
+			"name": "filename",
+			"required": true,
+			"type": "string"
+		}],
+		"requestSchema": null,
+		"responseSchema": null,
+		"sdkName": "downloadEmailAttachmentByFilename",
+		"summary": "Download one received email attachment by filename",
+		"tag": "Emails",
+		"tagCommand": "emails"
+	},
 	{
 		"binaryResponse": true,
 		"bodyRequired": false,
@@ -23158,6 +25138,11 @@ const operationManifest = [
 				"cursor": {
 					"type": "string",
 					"description": "Present only on a `since` read: the position to send as\n`since` on the next read. An opaque string: send it back\nverbatim and do not parse it or build one.\n"
+				},
+				"latest_message_id": {
+					"type": ["string", "null"],
+					"format": "uuid",
+					"description": "The id to pass as `if_latest_message_id` when replying in this\nconversation: the message that joined the thread last among\nthose this credential can read, by the rule a conditional send\nchecks. It can differ from the last message in `messages`, which\nis ordered by timestamp, when mail joined the thread after a\nnewer-timestamped message. Present on a full read and a window\nread of a threaded conversation; null when no message in the\nthread is visible; absent on a `since` delta.\n"
 				}
 			},
 			"required": [
@@ -23626,6 +25611,14 @@ const operationManifest = [
 					"items": { "type": "string" },
 					"description": "Why `automated` is true, in rule order; empty when it is false.\nCurrent values: `null_envelope_sender`, `no_identifiable_sender`,\n`own_address`, `mailer_daemon`, `auto_submitted`, `precedence`,\n`list_unsubscribe`, `list_id`, `auto_response_suppress`,\n`failed_recipients`, `report`. Treat an unfamiliar value as a\nreason added after your client was built.\n"
 				},
+				"from_verified": {
+					"type": "boolean",
+					"description": "Whether the From header domain was authenticated when the message arrived. See EmailSummary.from_verified."
+				},
+				"from_header_email": {
+					"type": ["string", "null"],
+					"description": "The From header address, lowercased, that `from_verified` is about; null when the message had none. Unlike `sender` it is never the envelope address."
+				},
 				"repeat": {
 					"type": ["object", "null"],
 					"description": "Set when Primitive sent this message as part of a repeating send. Resolved from Primitive's own records, never from the message content. Null on every other message and on servers that predate repeating sends.",
@@ -23756,6 +25749,91 @@ const operationManifest = [
 		"tag": "Emails",
 		"tagCommand": "emails"
 	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "list-email-attachment-archive-members",
+		"description": "Lists the regular files inside a zip, tar or tar.gz attachment with each one's path, decoded size and SHA-256. The format is detected from the content. Unsafe paths refuse the whole archive, and resource limits bound the work (see the 413 and 422 responses). Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail received at its own address. Function credentials are not supported. Discarded content is unavailable.",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "listEmailAttachmentArchiveMembers",
+		"path": "/emails/{id}/attachments/{attachment}/members",
+		"pathParams": [{
+			"description": "Resource UUID",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}, {
+			"description": "The attachment, by its exact part_index when the value is digits only, otherwise by its exact filename (case-sensitive, compared after Unicode NFC normalization). A digits-only value always selects that part_index, even when another attachment has that name; read such a name with ?filename=.",
+			"enum": null,
+			"name": "attachment",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"required": [
+				"part_index",
+				"filename",
+				"format",
+				"members"
+			],
+			"properties": {
+				"part_index": {
+					"type": "integer",
+					"minimum": 0,
+					"description": "The attachment the listing is of."
+				},
+				"filename": {
+					"type": ["string", "null"],
+					"description": "That attachment's filename."
+				},
+				"format": {
+					"type": "string",
+					"enum": [
+						"zip",
+						"tar",
+						"tar.gz"
+					]
+				},
+				"members": {
+					"type": "array",
+					"description": "Regular files in archive order.",
+					"items": {
+						"type": "object",
+						"required": [
+							"path",
+							"size_bytes",
+							"sha256"
+						],
+						"properties": {
+							"path": {
+								"type": "string",
+								"description": "Member path inside the archive, relative, with \"/\" separators and no leading \"./\"."
+							},
+							"size_bytes": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Decoded size in bytes."
+							},
+							"sha256": {
+								"type": "string",
+								"pattern": "^[0-9a-f]{64}$",
+								"description": "SHA-256 of the decoded bytes."
+							}
+						}
+					}
+				}
+			}
+		},
+		"sdkName": "listEmailAttachmentArchiveMembers",
+		"summary": "List the files inside a received zip or tar attachment",
+		"tag": "Emails",
+		"tagCommand": "emails"
+	},
 	{
 		"binaryResponse": false,
 		"bodyRequired": false,
@@ -23849,6 +25927,13 @@ const operationManifest = [
 				"required": false,
 				"type": "string"
 			},
+			{
+				"description": "Only return emails whose `from_verified` (the From domain was authenticated on arrival; see the field) has this value. Combines with every other filter and with both `cursor` and `since`.",
+				"enum": ["true", "false"],
+				"name": "from_verified",
+				"required": false,
+				"type": "string"
+			},
 			{
 				"description": "Exact case-insensitive delivered recipient mailbox, applied before pagination. Combines with existing filters and cursors; does not search message text.",
 				"enum": null,
@@ -23862,6 +25947,13 @@ const operationManifest = [
 				"name": "exclude_fyi",
 				"required": false,
 				"type": "string"
+			},
+			{
+				"description": "Extra parts on every row, comma-separated: `body_text`, `body_html`, `headers`, `attachments`. Reads a page of messages in one request instead of one detail read per row. Parts are withheld where the detail read withholds them. Each body field is cut to 64 KiB per row and a response carries at most 2048 KiB of body text, in page order; a cut or omitted body is named in `truncated_fields`. Unknown values are a `validation_error`.",
+				"enum": null,
+				"name": "include",
+				"required": false,
+				"type": "string"
 			}
 		],
 		"requestSchema": null,
@@ -23983,6 +26075,14 @@ const operationManifest = [
 						"items": { "type": "string" },
 						"description": "Why `automated` is true, in rule order; empty when it is false.\nCurrent values: `null_envelope_sender`, `no_identifiable_sender`,\n`own_address`, `mailer_daemon`, `auto_submitted`, `precedence`,\n`list_unsubscribe`, `list_id`, `auto_response_suppress`,\n`failed_recipients`, `report`. Treat an unfamiliar value as a\nreason added after your client was built.\n"
 					},
+					"from_verified": {
+						"type": ["boolean", "null"],
+						"description": "True when the From header address, `from_header_email`, passed DMARC for its domain on arrival (aligned SPF or DKIM); decided once, at receipt. It is about the From header, never the envelope: `sender`, the `from` parameter and `from:` term, and the change feed's `address` match the envelope sender, which can differ. It proves the domain, not the mailbox. False with no From header address, when authentication failed or was not attempted (a delivery between Primitive mailboxes counts only when it passed DMARC too), and for mail stored before the verdict was recorded. Null on sent rows in search results. Not a spam or safety judgement."
+					},
+					"from_header_email": {
+						"type": ["string", "null"],
+						"description": "The From header address, lowercased, that `from_verified` is about; null when the message had none. Unlike `sender` it is never the envelope address."
+					},
 					"repeat": {
 						"type": ["object", "null"],
 						"description": "Set when Primitive sent this message as part of a repeating send. Resolved from Primitive's own records, never from the message content. Null on every other message and on servers that predate repeating sends.",
@@ -24049,6 +26149,83 @@ const operationManifest = [
 					"from_name": {
 						"type": ["string", "null"],
 						"description": "Display name from the `From:` header, decoded for display:\nRFC 2047 encoded words are decoded in their declared charset\nand folded lines are joined (e.g. `Dana Rúiz` for\n`=?UTF-8?Q?Dana_R=C3=BAiz?= <dana@example.com>`). Null when\nthe header carries no display name, and may be absent; treat\na missing value the same as null.\n\nFor display only: the sender chooses this name freely, so\nidentify the sender by `from_email`, never by this name.\n"
+					},
+					"body_text": {
+						"type": ["string", "null"],
+						"description": "With `include=body_text`: the plain-text body, cut as `truncated_fields` says."
+					},
+					"body_html": {
+						"type": ["string", "null"],
+						"description": "With `include=body_html`: the HTML body, cut as `truncated_fields` says."
+					},
+					"headers": {
+						"anyOf": [{
+							"type": "object",
+							"description": "Stored addressing and threading headers. A member is null when absent or withheld.",
+							"properties": {
+								"from": { "type": ["string", "null"] },
+								"to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"cc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"bcc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"in_reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"references": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"automation": {
+									"type": ["object", "null"],
+									"additionalProperties": { "type": "string" },
+									"description": "Received mail only."
+								}
+							},
+							"required": [
+								"from",
+								"to",
+								"cc",
+								"bcc",
+								"reply_to",
+								"in_reply_to",
+								"references",
+								"automation"
+							]
+						}, { "type": "null" }],
+						"description": "With `include=headers`: stored addressing and threading headers."
+					},
+					"attachments": {
+						"type": "array",
+						"items": {
+							"type": "object",
+							"additionalProperties": true
+						},
+						"description": "With `include=attachments`: attachment metadata as the detail read reports it. Never the bytes."
+					},
+					"truncated": {
+						"type": "boolean",
+						"description": "With `include`: true when a body on this row was cut or left out."
+					},
+					"truncated_fields": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"enum": ["body_text", "body_html"]
+						},
+						"description": "With `include`: the body fields on this row that were cut or left out."
 					}
 				},
 				"required": [
@@ -24122,7 +26299,7 @@ const operationManifest = [
 		"pathParams": [],
 		"queryParams": [
 			{
-				"description": "Full-text search DSL query. Supports `awaiting:you` and `awaiting:them` to filter on reply state (see the `awaiting` field; delivered mail only, never `rejected`). Supports `automated:true` and `automated:false` to filter on the `automated` field. Terms are separated by spaces and every term must match. A term is a word, a `\"quoted phrase\"`, or a `field:value` filter (`from:`, `to:`, `subject:`, `body:`, `has:attachment`, `before:`, `after:`, `domain:`, `status:`, `awaiting:`, `automated:`). An upper-case `OR` between two text terms (words, phrases, `subject:` and `body:` terms) accepts either, and binds tighter than the implicit AND: `acme invoice OR receipt` is `acme` and either `invoice` or `receipt`. `OR` cannot join the other filters, and there is no `NOT` and no parentheses. A query that uses an unsupported operator, an unknown field, an unterminated quote, or only stop words is a `validation_error` that says what to change; it is never silently reinterpreted. Alternatives chain (`invoice OR receipt OR \"past due\"`), and each one counts toward the limit of 32 terms. These are rejected with a 400 `validation_error`: `OR` next to a filter (`from:a@example.com OR from:b@example.com`; run one search per value instead); an `OR` with no term on one side (a leading, trailing or doubled `OR`); an upper-case `NOT` (a search cannot exclude a term); and an alternative with no searchable word once stop words are removed (`the OR invoice`). Only upper case is an operator: to search for the word `OR` or `NOT` itself, write it in lower case or in double quotes (`\"OR\"`). With `prefix=true`, a trailing `OR` or `NOT` is read as a word still being typed. To search for text that contains a colon, such as a URL, put it in double quotes.",
+				"description": "Full-text search DSL query. Supports `awaiting:you` and `awaiting:them` to filter on reply state (see the `awaiting` field; delivered mail only, never `rejected`). Supports `automated:true` and `automated:false` to filter on the `automated` field. Terms are separated by spaces and every term must match. A term is a word, a `\"quoted phrase\"`, or a `field:value` filter (`from:`, `to:`, `subject:`, `body:`, `has:attachment`, `before:`, `after:`, `domain:`, `status:`, `awaiting:`, `automated:`, `header:`, `has-header:`). An upper-case `OR` between two text terms (words, phrases, `subject:` and `body:` terms) accepts either, and binds tighter than the implicit AND: `acme invoice OR receipt` is `acme` and either `invoice` or `receipt`. `OR` cannot join the other filters, and there is no `NOT` and no parentheses. A query that uses an unsupported operator, an unknown field, an unterminated quote, or only stop words is a `validation_error` that says what to change; it is never silently reinterpreted. Alternatives chain (`invoice OR receipt OR \"past due\"`), and each one counts toward the limit of 32 terms. These are rejected with a 400 `validation_error`: `OR` next to a filter (`from:a@example.com OR from:b@example.com`; run one search per value instead); an `OR` with no term on one side (a leading, trailing or doubled `OR`); an upper-case `NOT` (a search cannot exclude a term); and an alternative with no searchable word once stop words are removed (`the OR invoice`). Only upper case is an operator: to search for the word `OR` or `NOT` itself, write it in lower case or in double quotes (`\"OR\"`). With `prefix=true`, a trailing `OR` or `NOT` is read as a word still being typed. To search for text that contains a colon, such as a URL, put it in double quotes. Supports `from_verified:true` and `from_verified:false` to filter on the `from_verified` field. `header:Name=Value` matches mail whose header `Name` has exactly `Value` (name and value case-insensitive, the whole value, quote the term for a value with spaces: `header:\"List-Id=Team news <news.example.com>\"`); `has-header:Name` matches mail that carries header `Name` with any value. Neither can be an `OR` alternative. Header filters read a stored copy of each message's headers: for received mail every header except trace and signature headers (`Received`, `DKIM-Signature`, `ARC-*`, `Authentication-Results` and similar) and credential-like names (a word such as `auth`, `token`, `key`, `secret`, `cookie`, `session`, `bearer`, `jwt` or `hmac`, including joined forms such as `AuthToken` or `SessionId`), at most 100 headers and 16 KiB per message, each value cut to 1024 bytes; for sent mail the `headers` the request set. A filter on a header that is never stored is a `validation_error`. Mail stored before header search was available has no stored headers and is not matched.",
 				"enum": null,
 				"name": "q",
 				"required": false,
@@ -24226,6 +26403,13 @@ const operationManifest = [
 				"required": false,
 				"type": "string"
 			},
+			{
+				"description": "Only return emails whose `from_verified` (the From domain was authenticated on arrival; see the field) has this value. Also available in `q` as `from_verified:true` or `from_verified:false`.",
+				"enum": ["true", "false"],
+				"name": "from_verified",
+				"required": false,
+				"type": "string"
+			},
 			{
 				"description": "Sort mode. Defaults to relevance when a text query is present,\notherwise `received_at_desc`.\n",
 				"enum": [
@@ -24292,6 +26476,25 @@ const operationManifest = [
 				"name": "count",
 				"required": false,
 				"type": "string"
+			},
+			{
+				"default": "inbound",
+				"description": "Which mail to search: `inbound` (mail received by the organization, the default), `outbound` (mail it sent) or `any` (both, merged in date order). Each result carries `direction`. When sent mail is included, results are in date order only (`sort=relevance` is a `validation_error`), filters that describe received mail only (`status`, `spam_score_lt`, `spam_score_gte`, `awaiting`, `automated`, `reply_to_sent_email_id`, `from_verified`, and `status:`, `awaiting:`, `automated:`, `from_verified:` in `q`) are a `validation_error`, as is `include`, and `facets` are not computed. `meta.total` is computed on the first page only and is null on later pages. A `meta.cursor` continues the direction it was issued for: using it with another `direction` is a `validation_error`. Text search over sent mail (`q`, `subject` or `body`) answers 503 `sent_mail_search_unavailable` in an environment where sent-mail search is not enabled. An agent connection searches only the mail its own address sent. On a sent result, `received_at` is when the message was accepted for sending, `recipient` is its first To address, and fields that describe receiving (`spam_score`, `raw_size_bytes`, `webhook_status`) are null, as is `from_verified` (sent mail has no From-authentication verdict). A sent result carries its sending status (`queued`, `delivered`, `bounced` and so on) in `delivery_status`; its `status` stays in the received-mail vocabulary as the nearest reading of it: `pending` (queued, scheduled, deferred), `accepted` (handed off, outcome not confirmed), `completed` (delivered) or `rejected` (not delivered: failed, denied, bounced or canceled).",
+				"enum": [
+					"inbound",
+					"outbound",
+					"any"
+				],
+				"name": "direction",
+				"required": false,
+				"type": "string"
+			},
+			{
+				"description": "Extra parts on every row, comma-separated: `body_text`, `body_html`, `headers`, `attachments`. Reads a page of messages in one request instead of one detail read per row. Parts are withheld where the detail read withholds them. Each body field is cut to 64 KiB per row and a response carries at most 2048 KiB of body text, in page order; a cut or omitted body is named in `truncated_fields`. Unknown values are a `validation_error`.",
+				"enum": null,
+				"name": "include",
+				"required": false,
+				"type": "string"
 			}
 		],
 		"requestSchema": null,
@@ -24413,6 +26616,14 @@ const operationManifest = [
 						"items": { "type": "string" },
 						"description": "Why `automated` is true, in rule order; empty when it is false.\nCurrent values: `null_envelope_sender`, `no_identifiable_sender`,\n`own_address`, `mailer_daemon`, `auto_submitted`, `precedence`,\n`list_unsubscribe`, `list_id`, `auto_response_suppress`,\n`failed_recipients`, `report`. Treat an unfamiliar value as a\nreason added after your client was built.\n"
 					},
+					"from_verified": {
+						"type": ["boolean", "null"],
+						"description": "True when the From header address, `from_header_email`, passed DMARC for its domain on arrival (aligned SPF or DKIM); decided once, at receipt. It is about the From header, never the envelope: `sender`, the `from` parameter and `from:` term, and the change feed's `address` match the envelope sender, which can differ. It proves the domain, not the mailbox. False with no From header address, when authentication failed or was not attempted (a delivery between Primitive mailboxes counts only when it passed DMARC too), and for mail stored before the verdict was recorded. Null on sent rows in search results. Not a spam or safety judgement."
+					},
+					"from_header_email": {
+						"type": ["string", "null"],
+						"description": "The From header address, lowercased, that `from_verified` is about; null when the message had none. Unlike `sender` it is never the envelope address."
+					},
 					"repeat": {
 						"type": ["object", "null"],
 						"description": "Set when Primitive sent this message as part of a repeating send. Resolved from Primitive's own records, never from the message content. Null on every other message and on servers that predate repeating sends.",
@@ -24479,6 +26690,83 @@ const operationManifest = [
 					"from_name": {
 						"type": ["string", "null"],
 						"description": "Display name from the `From:` header, decoded for display:\nRFC 2047 encoded words are decoded in their declared charset\nand folded lines are joined (e.g. `Dana Rúiz` for\n`=?UTF-8?Q?Dana_R=C3=BAiz?= <dana@example.com>`). Null when\nthe header carries no display name, and may be absent; treat\na missing value the same as null.\n\nFor display only: the sender chooses this name freely, so\nidentify the sender by `from_email`, never by this name.\n"
+					},
+					"body_text": {
+						"type": ["string", "null"],
+						"description": "With `include=body_text`: the plain-text body, cut as `truncated_fields` says."
+					},
+					"body_html": {
+						"type": ["string", "null"],
+						"description": "With `include=body_html`: the HTML body, cut as `truncated_fields` says."
+					},
+					"headers": {
+						"anyOf": [{
+							"type": "object",
+							"description": "Stored addressing and threading headers. A member is null when absent or withheld.",
+							"properties": {
+								"from": { "type": ["string", "null"] },
+								"to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"cc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"bcc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"in_reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"references": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"automation": {
+									"type": ["object", "null"],
+									"additionalProperties": { "type": "string" },
+									"description": "Received mail only."
+								}
+							},
+							"required": [
+								"from",
+								"to",
+								"cc",
+								"bcc",
+								"reply_to",
+								"in_reply_to",
+								"references",
+								"automation"
+							]
+						}, { "type": "null" }],
+						"description": "With `include=headers`: stored addressing and threading headers."
+					},
+					"attachments": {
+						"type": "array",
+						"items": {
+							"type": "object",
+							"additionalProperties": true
+						},
+						"description": "With `include=attachments`: attachment metadata as the detail read reports it. Never the bytes."
+					},
+					"truncated": {
+						"type": "boolean",
+						"description": "With `include`: true when a body on this row was cut or left out."
+					},
+					"truncated_fields": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"enum": ["body_text", "body_html"]
+						},
+						"description": "With `include`: the body fields on this row that were cut or left out."
 					}
 				},
 				"required": [
@@ -24535,7 +26823,24 @@ const operationManifest = [
 					"direction": {
 						"type": "string",
 						"enum": ["inbound", "outbound"],
-						"description": "Which side of the conversation the result is on: `inbound` for mail received by the organization, `outbound` for mail it sent. This endpoint currently returns received mail only, so every result is `inbound`."
+						"description": "Which side of the conversation the result is on: `inbound` for mail received by the organization, `outbound` for mail it sent. Only `direction=outbound` or `direction=any` returns `outbound` results. Treat an unfamiliar value as one added after your client was built. An `outbound` result also carries `delivery_status`."
+					},
+					"delivery_status": {
+						"type": "string",
+						"description": "Lifecycle status of a sent_emails row. Possible values:\n\n  - `queued`: pre-call INSERT; the outbound agent has not\n    yet replied.\n  - `submitted_to_agent`: agent accepted; `queue_id` is set.\n  - `agent_failed`: agent rejected; `error_code` and\n    `error_message` carry the reason.\n  - `gate_denied`: a recipient-scope gate denied the send;\n    the agent was never called. The `gates` array carries\n    the denial detail. /send-mail returns 403 in this case\n    so callers see the denial synchronously; /sent-emails\n    additionally records the row for historical lookup,\n    which is when this status appears in a listing.\n  - `unknown`: terminal indeterminate; the on-box log\n    poller couldn't classify the receiver's response.\n  - `delivered` / `bounced` / `deferred` / `wait_timeout`:\n    terminal delivery outcomes (see DeliveryStatus).\n  - `scheduled`: created with a future `scheduled_at` and\n    not yet executed; `scheduled_at` carries the pending\n    execution time. Reschedulable via PATCH\n    /sent-emails/{id} and cancelable via\n    /sent-emails/{id}/cancel while in this status.\n  - `canceled`: terminal; a scheduled send canceled before\n    execution. `canceled_at` carries the cancellation time\n    and nothing was dispatched.\n",
+						"enum": [
+							"queued",
+							"submitted_to_agent",
+							"agent_failed",
+							"gate_denied",
+							"unknown",
+							"delivered",
+							"bounced",
+							"deferred",
+							"wait_timeout",
+							"scheduled",
+							"canceled"
+						]
 					}
 				},
 				"required": [
@@ -31695,25 +34000,127 @@ const operationManifest = [
 							"user_id",
 							"name"
 						]
-					}
-				},
-				"required": [
-					"id",
-					"status",
-					"status_changed_at",
-					"created_at",
-					"updated_at",
-					"content_hash",
-					"from_header",
-					"from_address",
-					"to_header",
-					"to_address",
-					"subject",
-					"body_size_bytes"
-				]
-			}, {
-				"type": "object",
-				"properties": {
+					},
+					"body_text": {
+						"type": ["string", "null"],
+						"description": "Plain-text body sent on the wire. Null when the\nsend carried only an HTML body, or when bodies have\nbeen discarded post-send (`content_discarded_at`\nset).\n"
+					},
+					"body_html": {
+						"type": ["string", "null"],
+						"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+					},
+					"headers": {
+						"anyOf": [{
+							"type": "object",
+							"description": "Stored addressing and threading headers. A member is null when absent or withheld.",
+							"properties": {
+								"from": { "type": ["string", "null"] },
+								"to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"cc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"bcc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"in_reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"references": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"automation": {
+									"type": ["object", "null"],
+									"additionalProperties": { "type": "string" },
+									"description": "Received mail only."
+								}
+							},
+							"required": [
+								"from",
+								"to",
+								"cc",
+								"bcc",
+								"reply_to",
+								"in_reply_to",
+								"references",
+								"automation"
+							]
+						}, { "type": "null" }],
+						"description": "With `include=headers`: stored addressing and threading headers."
+					},
+					"attachments": {
+						"type": "array",
+						"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+						"items": {
+							"type": "object",
+							"description": "Metadata for one submitted inline attachment.",
+							"additionalProperties": true,
+							"properties": {
+								"filename": { "type": ["string", "null"] },
+								"content_type": { "type": "string" },
+								"size_bytes": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"sha256": { "type": "string" },
+								"part_index": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"tar_path": { "type": "string" }
+							},
+							"required": [
+								"filename",
+								"content_type",
+								"size_bytes",
+								"sha256",
+								"part_index",
+								"tar_path"
+							]
+						}
+					},
+					"truncated": {
+						"type": "boolean",
+						"description": "With `include`: true when a body on this row was cut or left out."
+					},
+					"truncated_fields": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"enum": ["body_text", "body_html"]
+						},
+						"description": "With `include`: the body fields on this row that were cut or left out."
+					}
+				},
+				"required": [
+					"id",
+					"status",
+					"status_changed_at",
+					"created_at",
+					"updated_at",
+					"content_hash",
+					"from_header",
+					"from_address",
+					"to_header",
+					"to_address",
+					"subject",
+					"body_size_bytes"
+				]
+			}, {
+				"type": "object",
+				"properties": {
 					"body_text": {
 						"type": ["string", "null"],
 						"description": "Plain-text body sent on the wire. Null when the\nsend carried only an HTML body, or when bodies have\nbeen discarded post-send (`content_discarded_at`\nset).\n"
@@ -31863,6 +34270,564 @@ const operationManifest = [
 		"tag": "Sending",
 		"tagCommand": "sending"
 	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": true,
+		"command": "cancel-sent-email-by-idempotency-key",
+		"description": "Cancels the still-scheduled send created with this `Idempotency-Key` (matched exactly), as `POST /sent-emails/{id}/cancel` does, and releases the key. 404 `not_found`: no send this credential can act on was created with the key. 409 `not_scheduled`: the send holding the key is no longer scheduled; `error.details` names its `sent_email_id` and `status` (`canceled` if already canceled). Pass `created_before` on a retry so it cannot reach a newer send that reused the released key. A connected agent can cancel any scheduled send from its own address, whoever created it, and no other.",
+		"hasJsonBody": true,
+		"method": "POST",
+		"operationId": "cancelSentEmailByIdempotencyKey",
+		"path": "/sent-emails/cancel",
+		"pathParams": [],
+		"queryParams": [],
+		"requestSchema": {
+			"type": "object",
+			"additionalProperties": false,
+			"required": ["idempotency_key"],
+			"properties": {
+				"idempotency_key": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 255,
+					"pattern": "^[\\x21-\\x7e]+$",
+					"description": "The `Idempotency-Key` the send was created with."
+				},
+				"created_before": {
+					"type": "string",
+					"format": "date-time",
+					"description": "Only consider sends created at or before this instant, such as when you first asked to cancel."
+				}
+			}
+		},
+		"responseSchema": {
+			"description": "Full sent-email record, including `body_text` and\n`body_html`. Returned by /sent-emails/{id}.\n",
+			"allOf": [{
+				"type": "object",
+				"description": "List-row projection of a sent-email record. Drops\n`body_text` and `body_html` to keep paginated responses\nsmall; fetch /sent-emails/{id} for the full record with\nbodies.\n",
+				"properties": {
+					"id": {
+						"type": "string",
+						"format": "uuid"
+					},
+					"status": {
+						"type": "string",
+						"description": "Lifecycle status of a sent_emails row. Possible values:\n\n  - `queued`: pre-call INSERT; the outbound agent has not\n    yet replied.\n  - `submitted_to_agent`: agent accepted; `queue_id` is set.\n  - `agent_failed`: agent rejected; `error_code` and\n    `error_message` carry the reason.\n  - `gate_denied`: a recipient-scope gate denied the send;\n    the agent was never called. The `gates` array carries\n    the denial detail. /send-mail returns 403 in this case\n    so callers see the denial synchronously; /sent-emails\n    additionally records the row for historical lookup,\n    which is when this status appears in a listing.\n  - `unknown`: terminal indeterminate; the on-box log\n    poller couldn't classify the receiver's response.\n  - `delivered` / `bounced` / `deferred` / `wait_timeout`:\n    terminal delivery outcomes (see DeliveryStatus).\n  - `scheduled`: created with a future `scheduled_at` and\n    not yet executed; `scheduled_at` carries the pending\n    execution time. Reschedulable via PATCH\n    /sent-emails/{id} and cancelable via\n    /sent-emails/{id}/cancel while in this status.\n  - `canceled`: terminal; a scheduled send canceled before\n    execution. `canceled_at` carries the cancellation time\n    and nothing was dispatched.\n",
+						"enum": [
+							"queued",
+							"submitted_to_agent",
+							"agent_failed",
+							"gate_denied",
+							"unknown",
+							"delivered",
+							"bounced",
+							"deferred",
+							"wait_timeout",
+							"scheduled",
+							"canceled"
+						]
+					},
+					"status_changed_at": {
+						"type": "string",
+						"format": "date-time",
+						"description": "Timestamp of the most recent status transition.\nPolling clients should treat `status='queued'` AND\n`status_changed_at` older than 5 minutes as\n\"stuck-queued\" (the post-tx UPDATE failed and the\nactual delivery state is recoverable from on-box logs\nvia `queue_id` when populated, or `request_id`).\n"
+					},
+					"created_at": {
+						"type": "string",
+						"format": "date-time"
+					},
+					"updated_at": {
+						"type": "string",
+						"format": "date-time"
+					},
+					"client_idempotency_key": {
+						"type": ["string", "null"],
+						"description": "Effective idempotency key used for this send. If the\ncaller passed the `Idempotency-Key` header, this is\nthat value; otherwise it's a server-derived hash of\nthe canonical request payload.\n"
+					},
+					"content_hash": {
+						"type": "string",
+						"description": "Stable hash of the canonical send payload."
+					},
+					"from_header": {
+						"type": "string",
+						"description": "Raw `From:` header as sent on the wire, including any\ndisplay name (e.g. `\"Acme Support\" <agent@acme.test>`).\n"
+					},
+					"from_address": {
+						"type": "string",
+						"description": "Bare email address parsed from `from_header`."
+					},
+					"to_header": {
+						"type": "string",
+						"description": "Raw `To:` header as sent on the wire, including any\ndisplay name.\n"
+					},
+					"to_address": {
+						"type": "string",
+						"description": "Bare email address parsed from `to_header`."
+					},
+					"recipient_count": {
+						"type": ["integer", "null"],
+						"minimum": 0,
+						"description": "Every recipient of the send, To, Cc and Bcc together, each address counted once: the size of `to_addresses`, `cc` and `bcc` combined without duplicates. On a mail relay send `bcc` lists every hidden recipient. Null when the request uses an address-bound agent connection key whose address is not the sender, because the count would reveal Bcc recipients. The `sent_email` object of the `sent_email.*` webhook events carries the same field."
+					},
+					"subject": { "type": "string" },
+					"body_size_bytes": {
+						"type": "integer",
+						"description": "Total UTF-8 byte length of `body_text` + `body_html`.\nSurfaced on the list endpoint so callers can see \"this\nrow has a 4MB body\" without fetching it.\n"
+					},
+					"content_discarded_at": {
+						"type": ["string", "null"],
+						"format": "date-time",
+						"description": "Timestamp at which the bodies were discarded by an\nentitlement-driven retention policy. Null when bodies\nare still present. The detail endpoint returns\nnull-valued `body_text`/`body_html` for discarded rows.\n"
+					},
+					"message_id": {
+						"type": ["string", "null"],
+						"description": "Wire-level Message-ID assigned to the outbound message\n(RFC 5322). Null on rows that never reached signing\n(queued, gate_denied, agent_failed before signing).\n"
+					},
+					"in_reply_to": {
+						"type": ["string", "null"],
+						"description": "Wire-level In-Reply-To header value, when this send\nwas a reply.\n"
+					},
+					"email_references": {
+						"type": ["string", "null"],
+						"description": "Wire-level References header value, when this send\nwas a reply.\n"
+					},
+					"in_reply_to_email_id": {
+						"type": ["string", "null"],
+						"format": "uuid",
+						"description": "Reference to the inbound `emails.id` that this send\nreplied to, when known. Populated when the caller used\n/emails/{id}/reply or when /send-mail's `in_reply_to`\nmatched a stored inbound message_id in the same org.\n"
+					},
+					"thread_id": {
+						"type": ["string", "null"],
+						"format": "uuid",
+						"description": "Conversation thread this send belongs to. A reply inherits\nthe thread of the inbound it answers; a fresh send starts a\nnew thread. Fetch `/threads/{thread_id}` for the full\nordered thread (inbound + outbound interleaved). NULL on\ngate-denied sends and on sends created before threading was\nenabled.\n"
+					},
+					"queue_id": {
+						"type": ["string", "null"],
+						"description": "Message identifier assigned by Primitive's outbound\nrelay once the agent accepts the message. Null on\nqueued, gate_denied, and agent_failed rows.\n"
+					},
+					"smtp_response_code": {
+						"type": ["integer", "null"],
+						"description": "Receiver's 3-digit SMTP code (e.g. 250, 550, 451).\nPopulated on terminal delivery statuses; may be null\non a deferred where the agent never got an SMTP-level\nresponse (TCP refused, DNS failed, TLS handshake\nfailed). `smtp_response_text` still carries Postfix's\ndescriptive text in those cases.\n"
+					},
+					"smtp_response_text": {
+						"type": ["string", "null"],
+						"description": "Free-form text portion of the receiver's SMTP\nresponse. The most useful debugging signal on a\n`bounced` or `deferred` row.\n"
+					},
+					"smtp_enhanced_status_code": {
+						"type": ["string", "null"],
+						"description": "RFC 3463 enhanced status code (e.g. `5.1.1` for \"Bad\ndestination mailbox address\"). Distinct from\n`smtp_response_code`: the basic 3-digit code is coarse\n(550 = \"permanent failure\"), the enhanced code is\nfiner-grained.\n"
+					},
+					"dkim_selector": {
+						"type": ["string", "null"],
+						"description": "DKIM selector used to sign the outbound message.\nPublic DNS data; useful for diagnosing why a downstream\nverifier rejected the signature.\n"
+					},
+					"dkim_domain": {
+						"type": ["string", "null"],
+						"description": "DKIM signing domain."
+					},
+					"error_code": {
+						"type": ["string", "null"],
+						"description": "Stable public error code on `agent_failed` rows. The\nagent's internal codes are remapped to a stable public\ntaxonomy (see `publicAgentError` in the server) so this\nfield is safe to branch on across agent versions.\n"
+					},
+					"error_message": {
+						"type": ["string", "null"],
+						"description": "Free-form error message accompanying `error_code`."
+					},
+					"gates": {
+						"type": ["array", "null"],
+						"items": {
+							"type": "object",
+							"properties": {
+								"name": {
+									"type": "string",
+									"enum": ["send_to_confirmed_domains", "send_to_known_addresses"],
+									"description": "Public recipient-scope gate name that denied the send."
+								},
+								"reason": {
+									"type": "string",
+									"enum": [
+										"domain_not_confirmed",
+										"recipient_unauthenticated",
+										"recipient_not_known"
+									],
+									"description": "Stable machine-readable denial reason."
+								},
+								"message": {
+									"type": "string",
+									"description": "Human-readable explanation of the gate denial."
+								},
+								"subject": {
+									"type": "string",
+									"description": "Domain or address the gate evaluated."
+								},
+								"fix": {
+									"type": "object",
+									"properties": {
+										"action": {
+											"type": "string",
+											"enum": [
+												"confirm_domain",
+												"sender_must_fix_authentication",
+												"wait_for_inbound"
+											],
+											"description": "Suggested next action for the caller."
+										},
+										"subject": {
+											"type": "string",
+											"description": "Entity the action applies to."
+										}
+									},
+									"required": ["action", "subject"]
+								},
+								"docs_url": {
+									"type": "string",
+									"description": "Public docs URL with more context."
+								}
+							},
+							"required": [
+								"name",
+								"reason",
+								"message",
+								"subject"
+							]
+						},
+						"description": "Gate-denial detail on `gate_denied` rows. Mirrors the\nsynchronous /send-mail 403 contract so a caller's\nGateDenial handler is the same across live denies and\nhistorical lookups. Null on every other status.\n"
+					},
+					"request_id": {
+						"type": ["string", "null"],
+						"description": "Server-issued request identifier from the original\n/send-mail call. Surfaced as the `X-Request-Id`\nresponse header on the live send and recorded here\nfor support escalation.\n"
+					},
+					"scheduled_at": {
+						"type": ["string", "null"],
+						"format": "date-time",
+						"description": "Requested execution time for a scheduled send. Kept\nafter execution as the historical schedule; null on\nordinary immediate sends.\n"
+					},
+					"canceled_at": {
+						"type": ["string", "null"],
+						"format": "date-time",
+						"description": "When a scheduled send was canceled. Null unless the row\nreached the `canceled` status.\n"
+					},
+					"presence_control": { "anyOf": [{
+						"type": "object",
+						"properties": {
+							"status": {
+								"type": "string",
+								"enum": [
+									"verified",
+									"pending",
+									"rejected"
+								]
+							},
+							"valid_for_ms": {
+								"type": "integer",
+								"minimum": 0,
+								"maximum": 6e5
+							}
+						},
+						"required": ["status", "valid_for_ms"],
+						"additionalProperties": false
+					}, { "type": "null" }] },
+					"repeat": {
+						"type": ["object", "null"],
+						"description": "Set when Primitive sent this message as part of a repeating send. Resolved from Primitive's own records, never from the message content. Null on every other message and on servers that predate repeating sends.",
+						"properties": {
+							"repeat_id": {
+								"type": "string",
+								"format": "uuid"
+							},
+							"sequence": {
+								"type": "integer",
+								"minimum": 1
+							}
+						},
+						"required": ["repeat_id", "sequence"]
+					},
+					"sender_member": {
+						"type": ["object", "null"],
+						"description": "Verified human authorship, projected only within the member organization. Historical attribution is not current sending or owner authority.",
+						"properties": {
+							"address": {
+								"type": "string",
+								"format": "email"
+							},
+							"user_id": { "type": "string" },
+							"name": { "type": ["string", "null"] }
+						},
+						"required": [
+							"address",
+							"user_id",
+							"name"
+						]
+					},
+					"body_text": {
+						"type": ["string", "null"],
+						"description": "Plain-text body sent on the wire. Null when the\nsend carried only an HTML body, or when bodies have\nbeen discarded post-send (`content_discarded_at`\nset).\n"
+					},
+					"body_html": {
+						"type": ["string", "null"],
+						"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+					},
+					"headers": {
+						"anyOf": [{
+							"type": "object",
+							"description": "Stored addressing and threading headers. A member is null when absent or withheld.",
+							"properties": {
+								"from": { "type": ["string", "null"] },
+								"to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"cc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"bcc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"in_reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"references": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"automation": {
+									"type": ["object", "null"],
+									"additionalProperties": { "type": "string" },
+									"description": "Received mail only."
+								}
+							},
+							"required": [
+								"from",
+								"to",
+								"cc",
+								"bcc",
+								"reply_to",
+								"in_reply_to",
+								"references",
+								"automation"
+							]
+						}, { "type": "null" }],
+						"description": "With `include=headers`: stored addressing and threading headers."
+					},
+					"attachments": {
+						"type": "array",
+						"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+						"items": {
+							"type": "object",
+							"description": "Metadata for one submitted inline attachment.",
+							"additionalProperties": true,
+							"properties": {
+								"filename": { "type": ["string", "null"] },
+								"content_type": { "type": "string" },
+								"size_bytes": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"sha256": { "type": "string" },
+								"part_index": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"tar_path": { "type": "string" }
+							},
+							"required": [
+								"filename",
+								"content_type",
+								"size_bytes",
+								"sha256",
+								"part_index",
+								"tar_path"
+							]
+						}
+					},
+					"truncated": {
+						"type": "boolean",
+						"description": "With `include`: true when a body on this row was cut or left out."
+					},
+					"truncated_fields": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"enum": ["body_text", "body_html"]
+						},
+						"description": "With `include`: the body fields on this row that were cut or left out."
+					}
+				},
+				"required": [
+					"id",
+					"status",
+					"status_changed_at",
+					"created_at",
+					"updated_at",
+					"content_hash",
+					"from_header",
+					"from_address",
+					"to_header",
+					"to_address",
+					"subject",
+					"body_size_bytes"
+				]
+			}, {
+				"type": "object",
+				"properties": {
+					"body_text": {
+						"type": ["string", "null"],
+						"description": "Plain-text body sent on the wire. Null when the\nsend carried only an HTML body, or when bodies have\nbeen discarded post-send (`content_discarded_at`\nset).\n"
+					},
+					"body_html": {
+						"type": ["string", "null"],
+						"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+					},
+					"attachments": {
+						"type": "array",
+						"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+						"items": {
+							"type": "object",
+							"description": "Metadata for one submitted inline attachment.",
+							"additionalProperties": true,
+							"properties": {
+								"filename": { "type": ["string", "null"] },
+								"content_type": { "type": "string" },
+								"size_bytes": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"sha256": { "type": "string" },
+								"part_index": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"tar_path": { "type": "string" }
+							},
+							"required": [
+								"filename",
+								"content_type",
+								"size_bytes",
+								"sha256",
+								"part_index",
+								"tar_path"
+							]
+						}
+					},
+					"attachments_size_bytes": {
+						"type": "integer",
+						"minimum": 0,
+						"maximum": 9007199254740991,
+						"description": "Original decoded attachment byte total accepted for this send, not the compressed archive size. It may exceed the retained inline total after offloading."
+					},
+					"attachments_complete": {
+						"type": "boolean",
+						"description": "Whether attachments enumerates the complete original submitted attachment set, including zero-byte and inline CID parts. True requires no submitted payload-reference, offloaded, or visibility-filtered attachment to be omitted, retained content, and a published archive when the attachment inventory is nonempty. False or absent provides no completeness proof, including for legacy or discarded content. This field grants no download access and has no interaction semantics."
+					},
+					"attachments_download_available": {
+						"type": "boolean",
+						"description": "Whether an inline attachment archive has been successfully retained and is available for download. Download authorization is checked separately; address-bound agent connection keys cannot download archives."
+					},
+					"to_addresses": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Every normalized To recipient of the send. Always populated on\nnew sends (a single-recipient send carries a one-element array);\nnull only on records that predate this field. `to_address` keeps\ncarrying the first recipient.\n"
+					},
+					"cc": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Cc address list. Null when the send had no Cc\nrecipients.\n"
+					},
+					"bcc": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Bcc address list, surfaced on the sending\norganization's own record. Bcc recipients are never written\ninto the transmitted message. Null when the send had no Bcc\nrecipients. Also null when the request uses an address-bound\nagent connection key whose address is not the sender, because\nBcc is withheld from recipients.\n"
+					},
+					"reply_to": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Reply-To address list. Null when the send had none.\n"
+					},
+					"tags": {
+						"type": ["array", "null"],
+						"description": "Customer metadata tags stored verbatim at send time. Null when\nthe send had none. Also null when the request uses an\naddress-bound agent connection key whose address is not the\nsender, because tags are withheld from recipients.\n",
+						"items": {
+							"type": "object",
+							"properties": {
+								"name": { "type": "string" },
+								"value": { "type": "string" }
+							},
+							"required": ["name", "value"]
+						}
+					}
+				}
+			}],
+			"properties": {
+				"presence_control": { "anyOf": [{
+					"type": "object",
+					"properties": {
+						"status": {
+							"type": "string",
+							"enum": [
+								"verified",
+								"pending",
+								"rejected"
+							]
+						},
+						"valid_for_ms": {
+							"type": "integer",
+							"minimum": 0,
+							"maximum": 6e5
+						}
+					},
+					"required": ["status", "valid_for_ms"],
+					"additionalProperties": false
+				}, { "type": "null" }] },
+				"repeat": {
+					"type": ["object", "null"],
+					"description": "Set when Primitive sent this message as part of a repeating send. Resolved from Primitive's own records, never from the message content. Null on every other message and on servers that predate repeating sends.",
+					"properties": {
+						"repeat_id": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"sequence": {
+							"type": "integer",
+							"minimum": 1
+						}
+					},
+					"required": ["repeat_id", "sequence"]
+				},
+				"sender_member": {
+					"type": ["object", "null"],
+					"description": "Verified human authorship, projected only within the member organization. Historical attribution is not current sending or owner authority.",
+					"properties": {
+						"address": {
+							"type": "string",
+							"format": "email"
+						},
+						"user_id": { "type": "string" },
+						"name": { "type": ["string", "null"] }
+					},
+					"required": [
+						"address",
+						"user_id",
+						"name"
+					]
+				}
+			}
+		},
+		"sdkName": "cancelSentEmailByIdempotencyKey",
+		"summary": "Cancel a scheduled send by idempotency key",
+		"tag": "Sending",
+		"tagCommand": "sending"
+	},
 	{
 		"binaryResponse": false,
 		"bodyRequired": false,
@@ -31904,6 +34869,76 @@ const operationManifest = [
 		"tag": "Sending",
 		"tagCommand": "sending"
 	},
+	{
+		"binaryResponse": true,
+		"bodyRequired": false,
+		"command": "download-sent-attachment-archive-member",
+		"description": "Returns the decoded bytes of one regular file inside a zip, tar or tar.gz attachment, by its listed path. The archive's structure, every member path and every limit are checked as for the listing, but only the requested file is decoded and verified (its zip CRC-32, and X-Content-SHA256 of the bytes returned); list the archive to have every file decoded. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail sent from its own address. Function credentials are not supported. Discarded content is unavailable.",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "downloadSentAttachmentArchiveMember",
+		"path": "/sent-emails/{id}/attachments/{attachment}/members/{path}",
+		"pathParams": [
+			{
+				"description": "Resource UUID",
+				"enum": null,
+				"name": "id",
+				"required": true,
+				"type": "string"
+			},
+			{
+				"description": "The attachment, by its exact part_index when the value is digits only, otherwise by its exact filename (case-sensitive, compared after Unicode NFC normalization). A digits-only value always selects that part_index, even when another attachment has that name; read such a name with ?filename=.",
+				"enum": null,
+				"name": "attachment",
+				"required": true,
+				"type": "string"
+			},
+			{
+				"description": "The member path exactly as listed, percent-encoded as one path segment (slashes as %2F).",
+				"enum": null,
+				"name": "path",
+				"required": true,
+				"type": "string"
+			}
+		],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": null,
+		"sdkName": "downloadSentAttachmentArchiveMember",
+		"summary": "Download one file from inside a sent zip or tar attachment",
+		"tag": "Sending",
+		"tagCommand": "sending"
+	},
+	{
+		"binaryResponse": true,
+		"bodyRequired": false,
+		"command": "download-sent-attachment-by-filename",
+		"description": "Returns the same bytes as downloadSentAttachmentPart, selecting the attachment by its exact filename. The path form `/sent-emails/{id}/attachments/{filename}` also works for any name that is not digits only, which that form reads as a part_index. When several attachments share the filename the response is 409 attachment_name_ambiguous with every matching part_index, and nothing is returned. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail sent from its own address. Function credentials are not supported. Discarded content is unavailable.",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "downloadSentAttachmentByFilename",
+		"path": "/sent-emails/{id}/attachments",
+		"pathParams": [{
+			"description": "Resource UUID",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [{
+			"description": "The attachment's exact filename from its metadata. Any name, digits only included. No other query parameter is accepted.",
+			"enum": null,
+			"name": "filename",
+			"required": true,
+			"type": "string"
+		}],
+		"requestSchema": null,
+		"responseSchema": null,
+		"sdkName": "downloadSentAttachmentByFilename",
+		"summary": "Download one sent email attachment by filename",
+		"tag": "Sending",
+		"tagCommand": "sending"
+	},
 	{
 		"binaryResponse": true,
 		"bodyRequired": false,
@@ -32435,6 +35470,108 @@ const operationManifest = [
 							"user_id",
 							"name"
 						]
+					},
+					"body_text": {
+						"type": ["string", "null"],
+						"description": "Plain-text body sent on the wire. Null when the\nsend carried only an HTML body, or when bodies have\nbeen discarded post-send (`content_discarded_at`\nset).\n"
+					},
+					"body_html": {
+						"type": ["string", "null"],
+						"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+					},
+					"headers": {
+						"anyOf": [{
+							"type": "object",
+							"description": "Stored addressing and threading headers. A member is null when absent or withheld.",
+							"properties": {
+								"from": { "type": ["string", "null"] },
+								"to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"cc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"bcc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"in_reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"references": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"automation": {
+									"type": ["object", "null"],
+									"additionalProperties": { "type": "string" },
+									"description": "Received mail only."
+								}
+							},
+							"required": [
+								"from",
+								"to",
+								"cc",
+								"bcc",
+								"reply_to",
+								"in_reply_to",
+								"references",
+								"automation"
+							]
+						}, { "type": "null" }],
+						"description": "With `include=headers`: stored addressing and threading headers."
+					},
+					"attachments": {
+						"type": "array",
+						"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+						"items": {
+							"type": "object",
+							"description": "Metadata for one submitted inline attachment.",
+							"additionalProperties": true,
+							"properties": {
+								"filename": { "type": ["string", "null"] },
+								"content_type": { "type": "string" },
+								"size_bytes": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"sha256": { "type": "string" },
+								"part_index": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"tar_path": { "type": "string" }
+							},
+							"required": [
+								"filename",
+								"content_type",
+								"size_bytes",
+								"sha256",
+								"part_index",
+								"tar_path"
+							]
+						}
+					},
+					"truncated": {
+						"type": "boolean",
+						"description": "With `include`: true when a body on this row was cut or left out."
+					},
+					"truncated_fields": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"enum": ["body_text", "body_html"]
+						},
+						"description": "With `include`: the body fields on this row that were cut or left out."
 					}
 				},
 				"required": [
@@ -32603,6 +35740,91 @@ const operationManifest = [
 		"tag": "Sending",
 		"tagCommand": "sending"
 	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "list-sent-attachment-archive-members",
+		"description": "Lists the regular files inside a zip, tar or tar.gz attachment with each one's path, decoded size and SHA-256. The format is detected from the content. Unsafe paths refuse the whole archive, and resource limits bound the work (see the 413 and 422 responses). Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail sent from its own address. Function credentials are not supported. Discarded content is unavailable.",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "listSentAttachmentArchiveMembers",
+		"path": "/sent-emails/{id}/attachments/{attachment}/members",
+		"pathParams": [{
+			"description": "Resource UUID",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}, {
+			"description": "The attachment, by its exact part_index when the value is digits only, otherwise by its exact filename (case-sensitive, compared after Unicode NFC normalization). A digits-only value always selects that part_index, even when another attachment has that name; read such a name with ?filename=.",
+			"enum": null,
+			"name": "attachment",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"required": [
+				"part_index",
+				"filename",
+				"format",
+				"members"
+			],
+			"properties": {
+				"part_index": {
+					"type": "integer",
+					"minimum": 0,
+					"description": "The attachment the listing is of."
+				},
+				"filename": {
+					"type": ["string", "null"],
+					"description": "That attachment's filename."
+				},
+				"format": {
+					"type": "string",
+					"enum": [
+						"zip",
+						"tar",
+						"tar.gz"
+					]
+				},
+				"members": {
+					"type": "array",
+					"description": "Regular files in archive order.",
+					"items": {
+						"type": "object",
+						"required": [
+							"path",
+							"size_bytes",
+							"sha256"
+						],
+						"properties": {
+							"path": {
+								"type": "string",
+								"description": "Member path inside the archive, relative, with \"/\" separators and no leading \"./\"."
+							},
+							"size_bytes": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Decoded size in bytes."
+							},
+							"sha256": {
+								"type": "string",
+								"pattern": "^[0-9a-f]{64}$",
+								"description": "SHA-256 of the decoded bytes."
+							}
+						}
+					}
+				}
+			}
+		},
+		"sdkName": "listSentAttachmentArchiveMembers",
+		"summary": "List the files inside a sent zip or tar attachment",
+		"tag": "Sending",
+		"tagCommand": "sending"
+	},
 	{
 		"binaryResponse": false,
 		"bodyRequired": false,
@@ -32679,6 +35901,20 @@ const operationManifest = [
 				"name": "from",
 				"required": false,
 				"type": "string"
+			},
+			{
+				"description": "Return only sends that set this header: `Name=Value` matches that exact value, `Name` alone any value. Name and value compare case-insensitively; the value is trimmed and matched whole, not as a substring, and only the first `=` separates the two. Matches only the `headers` the send request set. History pages only: with `since` or `wait` it is a `validation_error`, as is a name that is never stored (trace, signature or credential-like). Sends made before header search was available are not matched.",
+				"enum": null,
+				"name": "header",
+				"required": false,
+				"type": "string"
+			},
+			{
+				"description": "Extra parts on every row, comma-separated: `body_text`, `body_html`, `headers`, `attachments`. Reads a page of messages in one request instead of one detail read per row. Parts are withheld where the detail read withholds them. Each body field is cut to 64 KiB per row and a response carries at most 2048 KiB of body text, in page order; a cut or omitted body is named in `truncated_fields`. Unknown values are a `validation_error`.",
+				"enum": null,
+				"name": "include",
+				"required": false,
+				"type": "string"
 			}
 		],
 		"requestSchema": null,
@@ -32940,6 +36176,108 @@ const operationManifest = [
 							"user_id",
 							"name"
 						]
+					},
+					"body_text": {
+						"type": ["string", "null"],
+						"description": "Plain-text body sent on the wire. Null when the\nsend carried only an HTML body, or when bodies have\nbeen discarded post-send (`content_discarded_at`\nset).\n"
+					},
+					"body_html": {
+						"type": ["string", "null"],
+						"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+					},
+					"headers": {
+						"anyOf": [{
+							"type": "object",
+							"description": "Stored addressing and threading headers. A member is null when absent or withheld.",
+							"properties": {
+								"from": { "type": ["string", "null"] },
+								"to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"cc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"bcc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"in_reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"references": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"automation": {
+									"type": ["object", "null"],
+									"additionalProperties": { "type": "string" },
+									"description": "Received mail only."
+								}
+							},
+							"required": [
+								"from",
+								"to",
+								"cc",
+								"bcc",
+								"reply_to",
+								"in_reply_to",
+								"references",
+								"automation"
+							]
+						}, { "type": "null" }],
+						"description": "With `include=headers`: stored addressing and threading headers."
+					},
+					"attachments": {
+						"type": "array",
+						"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+						"items": {
+							"type": "object",
+							"description": "Metadata for one submitted inline attachment.",
+							"additionalProperties": true,
+							"properties": {
+								"filename": { "type": ["string", "null"] },
+								"content_type": { "type": "string" },
+								"size_bytes": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"sha256": { "type": "string" },
+								"part_index": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"tar_path": { "type": "string" }
+							},
+							"required": [
+								"filename",
+								"content_type",
+								"size_bytes",
+								"sha256",
+								"part_index",
+								"tar_path"
+							]
+						}
+					},
+					"truncated": {
+						"type": "boolean",
+						"description": "With `include`: true when a body on this row was cut or left out."
+					},
+					"truncated_fields": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"enum": ["body_text", "body_html"]
+						},
+						"description": "With `include`: the body fields on this row that were cut or left out."
 					}
 				},
 				"required": [
@@ -33071,6 +36409,32 @@ const operationManifest = [
 						}
 					},
 					"required": ["every_minutes"]
+				},
+				"headers": {
+					"type": "object",
+					"maxProperties": 25,
+					"propertyNames": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 64,
+						"pattern": "^[A-Za-z0-9]+(-[A-Za-z0-9]+)*$"
+					},
+					"additionalProperties": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 200,
+						"pattern": "^[\\x20-\\x7E]+$"
+					},
+					"description": "Extra headers, as `{ \"Name\": \"value\" }`, at most 25. A name is one of `Auto-Submitted`, `Precedence`, `X-Auto-Response-Suppress`, `X-Primitive-Interaction`, `X-Primitive-Interaction-Ref`, or a custom `X-` name of letters, digits and hyphens that is not credential-like (a word such as `auth`, `token`, `key`, `secret`, `session` or `bearer`, joined forms included) and not in a reserved family: X-Primitive*, X-Original-*, X-Originating-*, X-Forwarded-*, X-Received*, X-Authenticated*, X-Envelope-*, X-Delivered-To, X-Apparently-To, X-Failed-Recipients, X-Loop, X-Priority, X-MSMail-*, X-MS-*, X-Microsoft-*, X-Forefront-*, X-Exchange-*, X-Google-*, X-GM-*, X-Apple-*, X-Yahoo-*, X-YMail-*, X-AOL-*, X-Spam*, X-Virus-*, X-Proofpoint-*, X-Barracuda-*, X-Rspamd-*, X-Mimecast-*, X-IronPort-*, X-Sophos-*, X-Report-Abuse*, X-CSA-*. Names compare case-insensitively (`_` and `.` count as `-` for families); a repeated or any other name is a `validation_error`. Values: 1 to 200 printable ASCII characters. Custom headers are sent as spelled, are not DKIM-signed, and can be searched with `header` on `GET /sent-emails`.",
+					"example": {
+						"X-Campaign-Id": "spring-sale",
+						"Auto-Submitted": "auto-generated"
+					}
+				},
+				"if_latest_message_id": {
+					"type": "string",
+					"format": "uuid",
+					"description": "Send only if this message id is still the newest message in the thread this send joins, as this credential can see it. Newest means the message that joined the thread last, in the order messages were attached to it, not by timestamp: a message accepted earlier but attached later is newer. Messages stored before join order was recorded count as older than every message that has one, and among themselves sort by timestamp (received_at for mail received, created_at for mail sent), ties going to the larger id. Pass latest_message_id from GET /emails/{id}/conversation: it is read by the same rule, whereas the last message listed there is ordered by timestamp and can differ when mail joined the thread late. An organization credential sees every message in the thread; a mailbox-scoped agent connection key sees only mail received at its address and mail sent from it. Mail awaiting sender authentication never counts. Otherwise nothing is sent and the response is 409 latest_message_mismatch with error.details.latest_message_id, latest_message_at and thread_id. If in_reply_to resolves to no single thread this credential can check, the response is 422 latest_message_thread_unresolved; that does not change on retry. If the thread stays locked by another writer for longer than the send waits, the response is 503 thread_busy with Retry-After; nothing was sent and the same request can be retried. Checked inside the send transaction under a lock on the thread, so two sends conditioned on the same id cannot both go out. The value is part of the request a replay is matched on: a replay of an already accepted request with the same idempotency key, or the identical request within the automatic deduplication window, returns the original result without checking again, and a request that differs only in if_latest_message_id is not a replay. On /send-mail it requires in_reply_to; it cannot be combined with scheduled_at or repeat, because it is checked when the request is accepted."
 				}
 			}
 		},
@@ -33508,6 +36872,108 @@ const operationManifest = [
 							"user_id",
 							"name"
 						]
+					},
+					"body_text": {
+						"type": ["string", "null"],
+						"description": "Plain-text body sent on the wire. Null when the\nsend carried only an HTML body, or when bodies have\nbeen discarded post-send (`content_discarded_at`\nset).\n"
+					},
+					"body_html": {
+						"type": ["string", "null"],
+						"description": "HTML body sent on the wire. Null when the send\ncarried only a plain-text body, or when bodies\nhave been discarded post-send.\n"
+					},
+					"headers": {
+						"anyOf": [{
+							"type": "object",
+							"description": "Stored addressing and threading headers. A member is null when absent or withheld.",
+							"properties": {
+								"from": { "type": ["string", "null"] },
+								"to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"cc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"bcc": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"in_reply_to": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"references": {
+									"type": ["array", "null"],
+									"items": { "type": "string" }
+								},
+								"automation": {
+									"type": ["object", "null"],
+									"additionalProperties": { "type": "string" },
+									"description": "Received mail only."
+								}
+							},
+							"required": [
+								"from",
+								"to",
+								"cc",
+								"bcc",
+								"reply_to",
+								"in_reply_to",
+								"references",
+								"automation"
+							]
+						}, { "type": "null" }],
+						"description": "With `include=headers`: stored addressing and threading headers."
+					},
+					"attachments": {
+						"type": "array",
+						"description": "Metadata for submitted inline attachments; download availability is reported separately. Metadata may exist when the archive is unavailable, and legacy sends may have no metadata. Offloaded payload files are not included in the inline archive.",
+						"items": {
+							"type": "object",
+							"description": "Metadata for one submitted inline attachment.",
+							"additionalProperties": true,
+							"properties": {
+								"filename": { "type": ["string", "null"] },
+								"content_type": { "type": "string" },
+								"size_bytes": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"sha256": { "type": "string" },
+								"part_index": {
+									"type": "integer",
+									"minimum": 0,
+									"maximum": 9007199254740991
+								},
+								"tar_path": { "type": "string" }
+							},
+							"required": [
+								"filename",
+								"content_type",
+								"size_bytes",
+								"sha256",
+								"part_index",
+								"tar_path"
+							]
+						}
+					},
+					"truncated": {
+						"type": "boolean",
+						"description": "With `include`: true when a body on this row was cut or left out."
+					},
+					"truncated_fields": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"enum": ["body_text", "body_html"]
+						},
+						"description": "With `include`: the body fields on this row that were cut or left out."
 					}
 				},
 				"required": [
@@ -33883,6 +37349,32 @@ const operationManifest = [
 					"type": "string",
 					"format": "date-time",
 					"description": "Optional future execution time (ISO 8601). When set, the\nsend is recorded with status `scheduled` and executed at\nthe requested time instead of immediately. Must be in the\nfuture and at most 30 days out. Incompatible with `wait`\n(a scheduled send resolves after this request completes)\nand with `attachments` / `payload_attachments` (not yet\nsupported on scheduled sends). Reschedule via PATCH\n/sent-emails/{id}; cancel via /sent-emails/{id}/cancel.\nAccepts `Z` or a numeric UTC offset\n(`2026-10-09T17:00:00Z`, `2026-10-09T13:00:00-04:00`); an\noffset is converted to UTC, so the stored and echoed value\nis UTC. A time with no zone, or a bare date, is rejected.\n"
+				},
+				"headers": {
+					"type": "object",
+					"maxProperties": 25,
+					"propertyNames": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 64,
+						"pattern": "^[A-Za-z0-9]+(-[A-Za-z0-9]+)*$"
+					},
+					"additionalProperties": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 200,
+						"pattern": "^[\\x20-\\x7E]+$"
+					},
+					"description": "Extra headers, as `{ \"Name\": \"value\" }`, at most 25. A name is one of `Auto-Submitted`, `Precedence`, `X-Auto-Response-Suppress`, `X-Primitive-Interaction`, `X-Primitive-Interaction-Ref`, or a custom `X-` name of letters, digits and hyphens that is not credential-like (a word such as `auth`, `token`, `key`, `secret`, `session` or `bearer`, joined forms included) and not in a reserved family: X-Primitive*, X-Original-*, X-Originating-*, X-Forwarded-*, X-Received*, X-Authenticated*, X-Envelope-*, X-Delivered-To, X-Apparently-To, X-Failed-Recipients, X-Loop, X-Priority, X-MSMail-*, X-MS-*, X-Microsoft-*, X-Forefront-*, X-Exchange-*, X-Google-*, X-GM-*, X-Apple-*, X-Yahoo-*, X-YMail-*, X-AOL-*, X-Spam*, X-Virus-*, X-Proofpoint-*, X-Barracuda-*, X-Rspamd-*, X-Mimecast-*, X-IronPort-*, X-Sophos-*, X-Report-Abuse*, X-CSA-*. Names compare case-insensitively (`_` and `.` count as `-` for families); a repeated or any other name is a `validation_error`. Values: 1 to 200 printable ASCII characters. Custom headers are sent as spelled, are not DKIM-signed, and can be searched with `header` on `GET /sent-emails`.",
+					"example": {
+						"X-Campaign-Id": "spring-sale",
+						"Auto-Submitted": "auto-generated"
+					}
+				},
+				"if_latest_message_id": {
+					"type": "string",
+					"format": "uuid",
+					"description": "Send only if this message id is still the newest message in the thread this send joins, as this credential can see it. Newest means the message that joined the thread last, in the order messages were attached to it, not by timestamp: a message accepted earlier but attached later is newer. Messages stored before join order was recorded count as older than every message that has one, and among themselves sort by timestamp (received_at for mail received, created_at for mail sent), ties going to the larger id. Pass latest_message_id from GET /emails/{id}/conversation: it is read by the same rule, whereas the last message listed there is ordered by timestamp and can differ when mail joined the thread late. An organization credential sees every message in the thread; a mailbox-scoped agent connection key sees only mail received at its address and mail sent from it. Mail awaiting sender authentication never counts. Otherwise nothing is sent and the response is 409 latest_message_mismatch with error.details.latest_message_id, latest_message_at and thread_id. If in_reply_to resolves to no single thread this credential can check, the response is 422 latest_message_thread_unresolved; that does not change on retry. If the thread stays locked by another writer for longer than the send waits, the response is 503 thread_busy with Retry-After; nothing was sent and the same request can be retried. Checked inside the send transaction under a lock on the thread, so two sends conditioned on the same id cannot both go out. The value is part of the request a replay is matched on: a replay of an already accepted request with the same idempotency key, or the identical request within the automatic deduplication window, returns the original result without checking again, and a request that differs only in if_latest_message_id is not a replay. On /send-mail it requires in_reply_to; it cannot be combined with scheduled_at or repeat, because it is checked when the request is accepted."
 				}
 			},
 			"required": [
@@ -42534,14 +46026,199 @@ var DomainsZoneFileCommand = class DomainsZoneFileCommand extends Command {
 	}
 };
 //#endregion
+//#region src/oclif/commands/emails-attachment.ts
+const sharedFlags = {
+	sent: Flags.boolean({ description: "Read an email you sent (a sent email id) instead of one you received." }),
+	output: Flags.string({
+		char: "o",
+		description: "Write the bytes to this file instead of stdout. Nothing else is written to stdout."
+	}),
+	wait: Flags.boolean({
+		description: ATTACHMENT_WAIT_FLAG_DESCRIPTION,
+		default: true,
+		allowNo: true
+	}),
+	"api-key": Flags.string({
+		description: "Primitive API key override (defaults to PRIMITIVE_API_KEY or saved OAuth login credentials)",
+		env: "PRIMITIVE_API_KEY"
+	}),
+	"api-base-url": Flags.string({
+		description: API_BASE_URL_FLAG_DESCRIPTION,
+		env: "PRIMITIVE_API_BASE_URL",
+		hidden: true
+	}),
+	time: Flags.boolean({ description: TIME_FLAG_DESCRIPTION })
+};
+/** Retries attachment_not_ready unless --no-wait, with the note on stderr. */
+function waitFor(call, wait) {
+	return withAttachmentWait(call, {
+		wait,
+		errorCode: (error) => extractErrorCode(extractErrorPayload(error)),
+		onFirstWait: () => {
+			process.stderr.write(`Attachment content is not ready yet; waiting up to ${ATTACHMENT_WAIT_MAX_MS / 1e3}s. Pass --no-wait to return immediately.\n`);
+		}
+	});
+}
+/** Writes downloaded bytes to --output or stdout. */
+async function writeBytes(data, output) {
+	const bytes = Buffer.from(await data.arrayBuffer());
+	if (output) writeFileSync(output, bytes);
+	else process.stdout.write(bytes);
+}
+function reportFailure(command, context, error) {
+	const payload = extractErrorPayload(error);
+	writeErrorWithHints(payload);
+	surfaceUnauthorizedHint({
+		auth: context.auth,
+		baseUrlOverridden: context.baseUrlOverridden,
+		configDir: command.config.configDir,
+		payload
+	});
+	process.exitCode = 1;
+}
+var EmailsAttachmentCommand = class EmailsAttachmentCommand extends Command {
+	static summary = "Download one attachment by its filename";
+	static description = `Download one attachment of an email by its exact filename, without looking up its part_index first.
+
+  The filename is matched exactly (case-sensitive, after Unicode NFC
+  normalization) against the attachment names in the email's metadata.
+  Any name works, including one made only of digits. When two or more
+  attachments share the name, nothing is downloaded and the command
+  exits 1 with error code attachment_name_ambiguous; error.details
+  lists every matching part_index, and
+  \`primitive emails download-email-attachment-part --id <id> --part-index <n>\`
+  fetches one of them.
+
+  stdout carries only the attachment bytes, unless --output names a file.
+  With --sent, <id> is a sent email id and the attachment is one you sent.`;
+	static examples = ["<%= config.bin %> emails attachment <email-id> report.pdf --output report.pdf", "<%= config.bin %> emails attachment <sent-email-id> invoice.csv --sent > invoice.csv"];
+	static args = {
+		id: Args.string({
+			description: "Email id",
+			required: true
+		}),
+		filename: Args.string({
+			description: "Exact attachment filename",
+			required: true
+		})
+	};
+	static flags = sharedFlags;
+	async run() {
+		const { args, flags } = await this.parse(EmailsAttachmentCommand);
+		const context = await createAuthenticatedCliApiClient({
+			configDir: this.config.configDir,
+			apiKey: flags["api-key"],
+			apiBaseUrl: flags["api-base-url"]
+		});
+		await runWithTiming(flags.time, async () => {
+			const options = {
+				client: context.apiClient.client,
+				path: { id: args.id },
+				query: { filename: args.filename },
+				parseAs: "blob"
+			};
+			const result = await waitFor(() => flags.sent ? downloadSentAttachmentByFilename(options) : downloadEmailAttachmentByFilename(options), flags.wait);
+			if (result.error) {
+				reportFailure(this, context, result.error);
+				return;
+			}
+			await writeBytes(result.data, flags.output);
+		});
+	}
+};
+var EmailsAttachmentMembersCommand = class EmailsAttachmentMembersCommand extends Command {
+	static summary = "List the files inside a zip or tar attachment, or fetch one";
+	static description = `List the files inside a zip, tar or tar.gz attachment, or download one of them with --member.
+
+  <attachment> is the attachment's part_index when it is only digits,
+  otherwise its exact filename. The listing prints JSON: the attachment's
+  part_index and filename, the archive format, and members, each with
+  path, size_bytes and sha256. Directories and links are not listed.
+
+  With --member <path>, the command downloads that one file instead, by
+  the path the listing reports. stdout then carries only its bytes,
+  unless --output names a file.
+
+  The server refuses archives that are not zip or tar, that hold an
+  unsafe path (absolute, "..", backslashes and similar), or that exceed
+  its size, entry-count or compression-ratio limits. Each refusal exits 1
+  with its error code, for example archive_unsafe_path or
+  archive_limit_exceeded.`;
+	static examples = [
+		"<%= config.bin %> emails attachment-members <email-id> logs.zip",
+		"<%= config.bin %> emails attachment-members <email-id> 0 --member logs/run.txt --output run.txt",
+		"<%= config.bin %> emails attachment-members <sent-email-id> bundle.tar.gz --sent"
+	];
+	static args = {
+		id: Args.string({
+			description: "Email id",
+			required: true
+		}),
+		attachment: Args.string({
+			description: "The attachment: its part_index when only digits, otherwise its exact filename",
+			required: true
+		})
+	};
+	static flags = {
+		...sharedFlags,
+		member: Flags.string({ description: "Download the file at this path inside the archive, as the listing reports it." })
+	};
+	async run() {
+		const { args, flags } = await this.parse(EmailsAttachmentMembersCommand);
+		const context = await createAuthenticatedCliApiClient({
+			configDir: this.config.configDir,
+			apiKey: flags["api-key"],
+			apiBaseUrl: flags["api-base-url"]
+		});
+		await runWithTiming(flags.time, async () => {
+			const client = context.apiClient.client;
+			const member = flags.member;
+			if (member !== void 0) {
+				const options = {
+					client,
+					path: {
+						id: args.id,
+						attachment: args.attachment,
+						path: member
+					},
+					parseAs: "blob"
+				};
+				const result = await waitFor(() => flags.sent ? downloadSentAttachmentArchiveMember(options) : downloadEmailAttachmentArchiveMember(options), flags.wait);
+				if (result.error) {
+					reportFailure(this, context, result.error);
+					return;
+				}
+				await writeBytes(result.data, flags.output);
+				return;
+			}
+			const options = {
+				client,
+				path: {
+					id: args.id,
+					attachment: args.attachment
+				}
+			};
+			const result = await waitFor(() => flags.sent ? listSentAttachmentArchiveMembers(options) : listEmailAttachmentArchiveMembers(options), flags.wait);
+			if (result.error) {
+				reportFailure(this, context, result.error);
+				return;
+			}
+			const listing = result.data?.data;
+			const text = `${JSON.stringify(listing, null, 2)}\n`;
+			if (flags.output) writeFileSync(flags.output, text);
+			else process.stdout.write(text);
+		});
+	}
+};
+//#endregion
 //#region src/oclif/repeat-message.ts
-const UUID$4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const UUID$5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 /** The server-verified repeat marker on an email read, if any. */
 function repeatMarker(detail) {
 	const marker = detail && typeof detail === "object" ? detail.repeat : void 0;
 	if (!marker || typeof marker !== "object") return null;
 	const { repeat_id, sequence } = marker;
-	return typeof repeat_id === "string" && UUID$4.test(repeat_id) && typeof sequence === "number" && Number.isSafeInteger(sequence) && sequence >= 1 ? {
+	return typeof repeat_id === "string" && UUID$5.test(repeat_id) && typeof sequence === "number" && Number.isSafeInteger(sequence) && sequence >= 1 ? {
 		repeat_id: repeat_id.toLowerCase(),
 		sequence
 	} : null;
@@ -44956,7 +48633,7 @@ const PRIMITIVE_TEAM_AUTHOR = {
 	url: "https://primitive.dev"
 };
 const SDK_VERSION_RANGE = "^2.0.0";
-const CLI_VERSION_RANGE = "^1.70.0";
+const CLI_VERSION_RANGE = "^1.71.0";
 const ESBUILD_VERSION_RANGE = "^0.27.0";
 function renderHandler() {
 	return `// env.PRIMITIVE_API_KEY, env.PRIMITIVE_WEBHOOK_SECRET, and
@@ -44969,8 +48646,9 @@ function renderHandler() {
 // including Web Crypto signature verification.
 import {
   createPrimitiveClient,
-  normalizeReceivedEmail,
+  getThread,
   PRIMITIVE_SIGNATURE_HEADER,
+  replyToEmail,
   type EmailReceivedEvent,
   verifyWebhookSignature,
   WebhookVerificationError,
@@ -44982,7 +48660,7 @@ interface Env {
   PRIMITIVE_WEBHOOK_SECRET: string;
 }
 
-// Optional loop-protection knob. client.reply() server-defaults the
+// Optional loop-protection knob. The reply endpoint server-defaults the
 // outbound from-address from the inbound recipient, so most handlers
 // do not need to fill this in. Add any extra addresses your handler
 // sends from if you later switch to client.send or a custom domain.
@@ -45047,17 +48725,11 @@ function inboundRecipientDomains(event: EmailReceivedEvent): Set<string> {
 // empty) is treated as a loop terminator: better to drop one ambiguous
 // message than to reply blindly and loop on a bounce.
 //
-// Extend this helper if you need stricter detection. Common additions
-// not implemented here today:
-//   - Honor RFC 3834 auto-response headers: skip when an
-//     auto-submitted header is anything other than "no", or when a
-//     list-unsubscribe / precedence: bulk header is present. The
-//     EmailReceivedEvent.email.headers shape does not currently surface
-//     these, so detection requires either a parsed-headers field on
-//     the event or a parse of the raw RFC 822 body.
-//   - Track Message-ID / In-Reply-To chains to break ping-pong loops
-//     between two cooperating handlers on different domains.
-//   - Rate-limit replies per sender per hour as a safety net.
+// Mail that declares itself automated (RFC 3834 Auto-Submitted,
+// Precedence, List-* and similar headers) and ping-pong between two
+// automated responders are handled separately, by automatedReasons and
+// replyCapReached below. Extend this helper if you need stricter
+// detection, for example a per-sender hourly reply limit.
 //
 // Loop protection is NOT sender authentication. The address matching
 // here is deliberately loose (it exists to avoid replying to our own
@@ -45108,6 +48780,114 @@ export function isLoop(event: EmailReceivedEvent): boolean {
   return false;
 }
 
+// Agent-to-agent loop protection. isLoop above stops bounces and
+// self-mail. These stop two automated responders (two copies of this
+// handler, or this handler and another agent) from answering each
+// other forever:
+//   - every reply is sent with Auto-Submitted: auto-replied (RFC 3834)
+//     and X-Auto-Response-Suppress: All, so a responder that honours
+//     them, including another copy of this handler, does not answer;
+//   - mail the platform marks automated is skipped (automatedReasons);
+//   - at most MAX_REPLIES_PER_THREAD replies from this handler's
+//     address per thread, and none once the thread is MAX_THREAD_DEPTH
+//     messages deep (replyCapReached), which holds even against a peer
+//     that strips the headers above;
+//   - one reply per inbound Message-ID (replyIdempotencyKey).
+// Raise the caps only if you are sure a peer can never answer you back.
+const MAX_REPLIES_PER_THREAD = 5;
+const MAX_THREAD_DEPTH = 20;
+const THREAD_LOOKUP_TIMEOUT_MS = 5000;
+const AUTO_REPLY_HEADERS = {
+  "Auto-Submitted": "auto-replied",
+  "X-Auto-Response-Suppress": "All",
+};
+
+// The platform's verdict on whether a machine sent this email, decided
+// when it arrived: the same value GET /v1/emails/{id} returns as
+// \`automated\`. It covers bounces, auto-replies, and mailing list or
+// newsletter mail; a handler that answers the sender should not answer
+// a list. Returns the reasons, or null when a person sent it. Read
+// loosely so this compiles against SDK releases that predate the typed
+// field; events without it fall through to isLoop alone.
+export function automatedReasons(event: EmailReceivedEvent): string[] | null {
+  const email = event.email as {
+    automated?: unknown;
+    automated_reasons?: unknown;
+  };
+  if (email.automated !== true) return null;
+  const reasons = Array.isArray(email.automated_reasons)
+    ? email.automated_reasons.filter(
+        (reason): reason is string => typeof reason === "string",
+      )
+    : [];
+  return reasons.length > 0 ? reasons : ["automated"];
+}
+
+function ownAddresses(event: EmailReceivedEvent): Set<string> {
+  return new Set([
+    ...event.email.smtp.rcpt_to.flatMap(extractEmailAddresses),
+    ...EXTRA_SELF_ADDRESSES.map((address) => address.toLowerCase()),
+  ]);
+}
+
+// Returns why this handler must not reply again in this thread, or
+// null. The thread lookup counts this handler's own earlier replies; if
+// it fails or times out, the References depth check still bounds the
+// thread. The thread view lists only the most recent messages, so a
+// thread longer than what came back counts as capped.
+export async function replyCapReached(
+  client: ReturnType<typeof createPrimitiveClient>,
+  event: EmailReceivedEvent,
+): Promise<string | null> {
+  const parsed = event.email.parsed as { references?: unknown };
+  const depth = Array.isArray(parsed.references) ? parsed.references.length : 0;
+  if (depth >= MAX_THREAD_DEPTH) return "thread_depth_cap";
+
+  const threadId = event.email.thread_id;
+  if (!threadId) return null;
+  try {
+    const result = await getThread({
+      client: client.client,
+      path: { id: threadId },
+      signal: AbortSignal.timeout(THREAD_LOOKUP_TIMEOUT_MS),
+    });
+    const thread = result.data?.data;
+    const messages = thread?.messages ?? [];
+    if ((thread?.message_count ?? 0) > messages.length) {
+      return "thread_reply_cap";
+    }
+    const own = ownAddresses(event);
+    const replies = messages.filter(
+      (message) =>
+        message.direction === "outbound" &&
+        extractEmailAddresses(message.from).some((address) => own.has(address)),
+    ).length;
+    return replies >= MAX_REPLIES_PER_THREAD ? "thread_reply_cap" : null;
+  } catch (threadError) {
+    console.error("thread lookup failed:", threadError);
+    return null;
+  }
+}
+
+// One reply per inbound message per replying address, however many
+// times or through whichever relay it is delivered.
+export async function replyIdempotencyKey(
+  event: EmailReceivedEvent,
+): Promise<string> {
+  const source = [
+    event.email.smtp.rcpt_to[0],
+    event.email.headers.message_id ?? event.email.id,
+  ].join("\\n");
+  const digest = await crypto.subtle.digest(
+    "SHA-256",
+    new TextEncoder().encode(source),
+  );
+  const hex = Array.from(new Uint8Array(digest), (byte) =>
+    byte.toString(16).padStart(2, "0"),
+  ).join("");
+  return \`reply:\${hex}\`;
+}
+
 export default {
   async fetch(
     req: Request,
@@ -45146,11 +48926,19 @@ export default {
       if (isLoop(event)) {
         return Response.json({ ok: true, skipped: "loop" });
       }
+      const automated = automatedReasons(event);
+      if (automated) {
+        return Response.json({ ok: true, skipped: "automated", reasons: automated });
+      }
 
       const client = createPrimitiveClient({
         apiKey: env.PRIMITIVE_API_KEY,
         apiBaseUrl: env.PRIMITIVE_API_BASE_URL,
       });
+      const capped = await replyCapReached(client, event);
+      if (capped) {
+        return Response.json({ ok: true, skipped: capped });
+      }
 
       // To add an LLM or another API, store its key as a Function secret.
       // Example:
@@ -45159,7 +48947,7 @@ export default {
 
       // Recipient gate
       // https://www.primitive.dev/docs/sending#who-you-can-send-to
-      // Even via client.reply, sends to the original sender are
+      // Even via the reply endpoint, sends to the original sender are
       // subject to the recipient gate. New accounts can send to
       // Primitive-managed domains, verified domains, addresses that
       // have authenticated to you, and other org-member signup emails.
@@ -45171,23 +48959,42 @@ export default {
       // Recipient routing: a single function can handle multiple inbound
       // addresses by branching on event.email.headers.to. For example,
       // route "support@" to a ticketing flow and "sales@" to a lead
-      // capture flow before calling client.reply.
+      // capture flow before replying.
 
-      // client.reply routes through POST /v1/emails/{id}/reply
-      // (NOT /send-mail) so the server derives recipients, the
-      // \`Re: <parent>\` subject, threading headers, and the
-      // in_reply_to_email_id foreign key automatically. The FK is
-      // what populates the inbound's \`replies\` array on
-      // GET /emails/{id}; without it, \`primitive functions:test-function
-      // --show-sends\` would report no outbound emails for this handler
-      // because the join would miss. Use client.send only when you
-      // need to send to a different address than the inbound sender,
-      // and pass \`in_reply_to\` explicitly to preserve correlation.
-      const reply = await client.reply(normalizeReceivedEmail(event), {
-        text: "Got your message.",
+      // replyToEmail calls POST /v1/emails/{id}/reply (NOT /send-mail)
+      // so the server derives recipients, the \`Re: <parent>\` subject,
+      // threading headers, and the in_reply_to_email_id foreign key
+      // automatically. The FK is what populates the inbound's
+      // \`replies\` array on GET /emails/{id}; without it,
+      // \`primitive functions:test-function --show-sends\` would report
+      // no outbound emails for this handler because the join would
+      // miss. It is used instead of client.reply because the reply
+      // carries AUTO_REPLY_HEADERS (the endpoint accepts Auto-Submitted,
+      // X-Auto-Response-Suppress and Precedence). Use client.send only
+      // when you need to send to a different address than the inbound
+      // sender, and pass \`in_reply_to\` explicitly to preserve
+      // correlation.
+      const replyBody = {
+        body_text: "Got your message.",
+        headers: AUTO_REPLY_HEADERS,
+      };
+      const result = await replyToEmail({
+        client: client.client,
+        path: { id: event.email.id },
+        body: replyBody,
+        headers: { "Idempotency-Key": await replyIdempotencyKey(event) },
       });
+      if (result.error) {
+        // A refused send (a rate limit included) is final: answer 2xx
+        // so the delivery queue does not re-invoke this handler.
+        return Response.json({
+          ok: false,
+          status: result.response?.status ?? null,
+          error: result.error,
+        });
+      }
 
-      return Response.json({ ok: true, reply });
+      return Response.json({ ok: true, reply: result.data?.data ?? null });
     } catch (err) {
       // Return 2xx so the webhook delivery loop does not retry a bug
       // it cannot fix. The function-invocation row still records the
@@ -48888,7 +52695,7 @@ function failure(result, now) {
 	const retryAfter = retry ? /^\d+$/.test(retry) ? Number(retry) * 1e3 : Date.parse(retry) - now : 0;
 	return new RequestFailure(result.response?.status ?? 0, code, Number.isFinite(retryAfter) ? Math.max(0, retryAfter) : 0);
 }
-const UUID$3 = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i;
+const UUID$4 = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i;
 function validDelivery(value) {
 	if (!value || typeof value !== "object") return false;
 	const d = value;
@@ -48896,7 +52703,7 @@ function validDelivery(value) {
 		"queue_id",
 		"event_id",
 		"delivery_id"
-	].every((key) => typeof d[key] === "string" && UUID$3.test(d[key])) && [
+	].every((key) => typeof d[key] === "string" && UUID$4.test(d[key])) && [
 		"event_type",
 		"lease_token",
 		"body"
@@ -50340,7 +54147,7 @@ var ListenInitCommand = class ListenInitCommand extends Command {
 };
 //#endregion
 //#region src/oclif/commands/listen-pending.ts
-const UUID$2 = /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i;
+const UUID$3 = /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i;
 var ListenPendingCommand = class ListenPendingCommand extends Command {
 	static summary = "List mail a session's wake listener accepted but not yet read";
 	static description = `Prints the durable pending notices for one Claude Code session of the selected connected profile. A notice is written before its wake event is acknowledged and is removed when the session reads that exact email with \`primitive emails get --id <id>\`. Notices carry only server-derived metadata (sender, thread, whether this profile sent in the thread, newer-mail count), never subject or body. Status notices (kind status) name a peer signal on a message this session sent and have nothing to read; clear them with --clear after delivering them. Unread mail notices are never dropped: at 50 notices the list reports full and newer mail stays queued, unacknowledged, until some are read. Reading never takes the writer lock, so it works while a listener holds it.`;
@@ -50360,9 +54167,9 @@ var ListenPendingCommand = class ListenPendingCommand extends Command {
 		if (!profileName) this.error("Pending notices belong to a connected agent profile. Set PRIMITIVE_AGENT_PROFILE.");
 		const runtime = currentMailSessionKey();
 		const session = flags.session ?? (runtime?.startsWith("claude:") ? runtime.slice(7) : void 0);
-		if (!session || !UUID$2.test(session)) this.error("Pass --session with the Claude Code session UUID.");
+		if (!session || !UUID$3.test(session)) this.error("Pass --session with the Claude Code session UUID.");
 		const clear = flags.clear ?? [];
-		if (clear.some((id) => !UUID$2.test(id))) this.error("--clear takes exact email UUIDs.");
+		if (clear.some((id) => !UUID$3.test(id))) this.error("--clear takes exact email UUIDs.");
 		const notices = clear.length ? await removePendingMail(this.config.configDir, profileName, session, clear) : readPendingMail(this.config.configDir, profileName, session);
 		this.log(JSON.stringify({
 			session_id: session.toLowerCase(),
@@ -55754,7 +59561,7 @@ const ID_ARG = Args.string({
 	description: "Repeat id (UUID), as returned by send or reply",
 	required: true
 });
-const UUID$1 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const UUID$2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 const STATUSES = [
 	"active",
 	"paused",
@@ -55828,7 +59635,7 @@ var RepeatStopCommand = class RepeatStopCommand extends Command {
 	};
 	async run() {
 		const { flags } = await this.parse(RepeatStopCommand);
-		if (!UUID$1.test(flags.id)) this.error("--id must be a repeat id or email id (UUID).", { exit: 2 });
+		if (!UUID$2.test(flags.id)) this.error("--id must be a repeat id or email id (UUID).", { exit: 2 });
 		let body;
 		try {
 			body = buildRepeatStopBody({ reason: flags.reason });
@@ -56238,6 +60045,7 @@ var ReplyCommand = class ReplyCommand extends Command {
 			description: "Attach a file to the reply. Repeat --attachment to attach multiple files.",
 			multiple: true
 		}),
+		"if-latest-message-id": Flags.string({ description: "Send only if this message id is still the newest message in the thread, as your credential sees it (received or sent, in the order messages joined the thread). Otherwise nothing is sent and the command exits 1 with error code latest_message_mismatch and the current newest id in error.details.latest_message_id. Pass latest_message_id from `primitive emails conversation`. Cannot be combined with a repeat." }),
 		wait: Flags.boolean({ description: "Block until the receiving MTA returns an outcome. Without --wait, the call returns once Primitive has accepted the reply for delivery." }),
 		"idempotency-key": Flags.string({ description: IDEMPOTENCY_KEY_FLAG_DESCRIPTION }),
 		json: Flags.boolean({ description: "Emit one outcome envelope { outcome, exit_code, outcome_message, sent_email_id, idempotency_key, sent, http_status, error, follow_up_commands, prior_replies, prior_replies_check } on stdout for every outcome, including failures, with nothing on stderr. Without --json, stdout is the send record as before." }),
@@ -56353,12 +60161,14 @@ var ReplyCommand = class ReplyCommand extends Command {
 				fyi: true,
 				...bodies.body !== void 0 ? { body_text: bodies.body.trimEnd() } : {},
 				...flags.from !== void 0 ? { from: flags.from } : {},
-				in_reply_to_email_id: emailId
+				in_reply_to_email_id: emailId,
+				...flags["if-latest-message-id"] !== void 0 ? { if_latest_message_id: flags["if-latest-message-id"] } : {}
 			} : {
 				...plainContent,
 				...flags.from !== void 0 ? { from: flags.from } : {},
 				...flags.all ? { reply_all: true } : {},
 				...repeat !== void 0 ? { repeat } : {},
+				...flags["if-latest-message-id"] !== void 0 ? { if_latest_message_id: flags["if-latest-message-id"] } : {},
 				in_reply_to_email_id: emailId
 			});
 			this.idempotencyKey = idempotencyKey;
@@ -56385,7 +60195,8 @@ var ReplyCommand = class ReplyCommand extends Command {
 				...flags.from !== void 0 ? { from: flags.from } : {},
 				...flags.wait !== void 0 ? { wait: flags.wait } : {},
 				...flags.all ? { reply_all: true } : {},
-				...repeat !== void 0 ? { repeat } : {}
+				...repeat !== void 0 ? { repeat } : {},
+				...flags["if-latest-message-id"] !== void 0 ? { if_latest_message_id: flags["if-latest-message-id"] } : {}
 			};
 			const halted = await haltAutoWorking(this.config.configDir, {
 				emailIds: [emailId],
@@ -57386,6 +61197,10 @@ var SendCommand = class SendCommand extends Command {
 			multiple: true
 		}),
 		"in-reply-to": Flags.string({ description: "Message-Id of the parent email when threading a reply on the wire. For replying to an inbound message you received, prefer `primitive reply --id <inbound-id>`." }),
+		"if-latest-message-id": Flags.string({
+			description: "Send only if this message id is still the newest message in the thread, as your credential sees it (received or sent, in the order messages joined the thread). Otherwise nothing is sent and the command exits 1 with error code latest_message_mismatch and the current newest id in error.details.latest_message_id. Pass latest_message_id from `primitive emails conversation`. Cannot be combined with a repeat. Requires --in-reply-to, which names the thread.",
+			dependsOn: ["in-reply-to"]
+		}),
 		fyi: Flags.boolean({
 			description: `${FYI_FLAG_DESCRIPTION} Requires --in-reply-to, the Message-Id being acknowledged.`,
 			dependsOn: ["in-reply-to"],
@@ -57488,6 +61303,7 @@ var SendCommand = class SendCommand extends Command {
 			if (this.waitNotice && !flags.json) process.stderr.write(`${this.waitNotice}\n`);
 			const threading = {
 				...flags["in-reply-to"] !== void 0 ? { in_reply_to: flags["in-reply-to"] } : {},
+				...flags["if-latest-message-id"] !== void 0 ? { if_latest_message_id: flags["if-latest-message-id"] } : {},
 				...flags.wait !== void 0 ? { wait: flags.wait } : {},
 				...waitTimeoutMs !== void 0 ? { wait_timeout_ms: waitTimeoutMs } : {},
 				...repeat !== void 0 ? { repeat } : {}
@@ -57564,6 +61380,92 @@ var SendCommand = class SendCommand extends Command {
 	}
 };
 //#endregion
+//#region src/oclif/commands/sent-cancel.ts
+const UUID$1 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Shown when the send exists but has left `scheduled`. */
+const NOT_SCHEDULED_HINT = "Only a send that is still scheduled can be canceled. `error.details.status` is where it is now; a send already handed to delivery cannot be recalled.";
+/** One line for terminal output. */
+function formatCanceledSend(send) {
+	const parts = [`Canceled ${send.id}`];
+	if (send.scheduled_at) parts.push(`(was scheduled for ${send.scheduled_at})`);
+	if (send.client_idempotency_key) parts.push(`Idempotency-Key ${send.client_idempotency_key} is free to use again.`);
+	return parts.join(" ");
+}
+const ISO_INSTANT_WITH_ZONE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/i;
+var SentCancelCommand = class SentCancelCommand extends Command {
+	static summary = "Cancel a scheduled send";
+	static description = "Cancel a send that is still scheduled, by its id or by the Idempotency-Key you sent it with. Nothing is sent, the record is kept with status `canceled`, and the key is released so it can schedule a new send. A send the scheduler has already picked up, or one already sent, canceled or failed, cannot be canceled and the command exits 1 with its current status. A connected agent can cancel only its own sends.";
+	static examples = ["<%= config.bin %> sent cancel --idempotency-key order-42", "<%= config.bin %> sent cancel --id 7f9c24e8-3b1a-4b6e-9c11-0d5f8a2e6c3d --json"];
+	static flags = {
+		"api-key": Flags.string({
+			description: "Primitive API key override (defaults to PRIMITIVE_API_KEY or saved OAuth login credentials)",
+			env: "PRIMITIVE_API_KEY"
+		}),
+		"api-base-url": Flags.string({
+			description: API_BASE_URL_FLAG_DESCRIPTION,
+			env: "PRIMITIVE_API_BASE_URL",
+			hidden: true
+		}),
+		id: Flags.string({
+			description: "The sent email id (UUID) returned when it was scheduled",
+			exactlyOne: ["id", "idempotency-key"]
+		}),
+		"idempotency-key": Flags.string({
+			description: "The Idempotency-Key the send was created with, matched exactly",
+			exactlyOne: ["id", "idempotency-key"]
+		}),
+		"created-before": Flags.string({
+			description: "With --idempotency-key: only consider sends created at or before this ISO 8601 time, such as when you first tried to cancel, so a retry never reaches a newer send that reused the key",
+			dependsOn: ["idempotency-key"]
+		}),
+		json: Flags.boolean({ description: "Print the API result as JSON" }),
+		time: Flags.boolean({ description: TIME_FLAG_DESCRIPTION })
+	};
+	async run() {
+		const { flags } = await this.parse(SentCancelCommand);
+		if (flags.id !== void 0 && !UUID$1.test(flags.id)) this.error("--id must be a sent email id (UUID).", { exit: 2 });
+		const key = flags["idempotency-key"]?.trim();
+		if (key !== void 0 && key.length === 0) this.error("--idempotency-key must not be empty.", { exit: 2 });
+		const createdBefore = flags["created-before"];
+		if (createdBefore !== void 0 && (!ISO_INSTANT_WITH_ZONE.test(createdBefore) || Number.isNaN(Date.parse(createdBefore)))) this.error("--created-before must be an ISO 8601 time with a time zone, such as 2026-10-20T14:00:00Z.", { exit: 2 });
+		const { apiClient, auth, baseUrlOverridden } = await createAuthenticatedCliApiClient({
+			apiKey: flags["api-key"],
+			apiBaseUrl: flags["api-base-url"],
+			configDir: this.config.configDir
+		});
+		await runWithTiming(flags.time === true, async () => {
+			const client = apiClient.client;
+			const result = key !== void 0 ? await cancelSentEmailByIdempotencyKey({
+				body: {
+					idempotency_key: key,
+					...createdBefore ? { created_before: createdBefore } : {}
+				},
+				client,
+				responseStyle: "fields"
+			}) : await cancelSentEmail({
+				client,
+				path: { id: flags.id },
+				responseStyle: "fields"
+			});
+			const send = result.data?.data;
+			if (result.error || send === void 0) {
+				const payload = extractErrorPayload(result.error);
+				writeErrorWithHints(payload);
+				if (extractErrorCode(payload) === "not_scheduled") process.stderr.write(`${NOT_SCHEDULED_HINT}\n`);
+				surfaceUnauthorizedHint({
+					auth,
+					baseUrlOverridden,
+					configDir: this.config.configDir,
+					payload
+				});
+				process.exitCode = 1;
+				return;
+			}
+			this.log(flags.json ? JSON.stringify(send, null, 2) : formatCanceledSend(send));
+		});
+	}
+};
+//#endregion
 //#region src/oclif/commands/sent-get.ts
 const IDEMPOTENCY_LOOKUP_LIMIT = 10;
 function idempotencyKeyNotFoundError(key) {
@@ -59322,6 +63224,7 @@ const CANONICAL_OPERATION_ALIASES = {
 	"account:show": "account:get-account",
 	"account:storage": "account:get-storage-stats",
 	"account:webhook-secret": "account:get-webhook-secret",
+	"changes:list": "changes:list-changes",
 	"agent:claim": "agent:start-agent-claim",
 	"agent:claim-link": "agent:create-agent-claim-link",
 	"agent:claim-verify": "agent:verify-agent-claim",
@@ -59486,6 +63389,8 @@ const COMMANDS = {
 	doctor: DoctorCommand,
 	"machine:doctor": MachineDoctorCommand,
 	"emails:latest": EmailsLatestCommand,
+	"emails:attachment": EmailsAttachmentCommand,
+	"emails:attachment-members": EmailsAttachmentMembersCommand,
 	"emails:watch": EmailsWatchCommand,
 	"emails:wait": EmailsWaitCommand,
 	search: SearchCommand,
@@ -59533,6 +63438,7 @@ const COMMANDS = {
 	"credits:redeem-credit-code": CreditsRedeemCommand,
 	"credits:balance": CreditsBalanceCommand,
 	"sent:get": SentGetCommand,
+	"sent:cancel": SentCancelCommand,
 	...Object.fromEntries(Object.entries(CANONICAL_OPERATION_ALIASES).map(([alias, target]) => {
 		const command = generatedCommands[target];
 		if (!command) throw new Error(`Missing generated command target for alias ${alias}`);