@agentcomms/resend 0.12.1 → 0.12.3

package/dist/cli.mjs

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { $ as installExitStatus, B as agentMarker, C as policyChange, D as sendPolicyOf, E as removeAccountChange, F as CHANNEL_SERVERS, H as approvalsOf, I as CommsError, J as commandPathOf, L as EXIT_CODES, N as checkNewName, O as showAccount, Q as gatedChangeAtTerminal, R as SEND_LOOKUP, S as policyApprovalRefusal, T as policyWanted, U as approveChangeAtTerminal, V as approvalKind, W as canPrompt, X as exemptFromUpdateGate, Y as escapeForDisplay, _ as runDoctor, a as revokeSendApproval, at as runCommand, b as listAccounts, c as downloadReceived, ct as serverPruneChange, d as listReceived, dt as truncateDisplay, et as openCore, f as listScheduled, ft as updateGateAtTerminal, g as showSentEmail, h as showReceived, i as prepareSend, it as renderPrune, k as ResendContext, l as getMetrics, lt as terminalUpdateHooks, m as listSuppressions, mt as writeResult, n as executeSend, nt as refuseUnclaimedApproval, o as sendStatus, ot as runUpdateCheckChild, p as listSentEmails, q as colorEnabled, r as finishSendApproval, rt as renderInstall, s as cancelScheduledChange, st as serverInstallChange, t as beginSendApproval, tt as paint, u as listDomains, v as addAccountChange, w as policyReport, x as modeOf, y as inspectKey, yt as VERSION, z as UPDATE_CHECK_CHILD_COMMAND } from "./send-W8SmlF7p.mjs";
+import { $ as inlineCommand, B as agentMarker, C as policyChange, D as sendPolicyOf, E as removeAccountChange, F as CHANNEL_SERVERS, H as approvalsOf, I as CommsError, J as commandPathOf, L as EXIT_CODES, N as checkNewName, O as showAccount, Q as gatedChangeAtTerminal, R as SEND_LOOKUP, S as policyApprovalRefusal, T as policyWanted, U as approveChangeAtTerminal, V as approvalKind, W as canPrompt, X as exemptFromUpdateGate, Y as escapeForDisplay, _ as runDoctor, a as revokeSendApproval, at as renderPrune, b as listAccounts, c as downloadReceived, ct as serverInstallChange, d as listReceived, dt as terminalUpdateHooks, et as installExitStatus, f as listScheduled, g as showSentEmail, gt as writeResult, h as showReceived, i as prepareSend, it as renderInstall, k as ResendContext, l as getMetrics, lt as serverPruneChange, m as listSuppressions, mt as updateGateAtTerminal, n as executeSend, nt as paint, o as sendStatus, ot as runCommand, p as listSentEmails, pt as truncateDisplay, q as colorEnabled, r as finishSendApproval, rt as refuseUnclaimedApproval, s as cancelScheduledChange, st as runUpdateCheckChild, t as beginSendApproval, tt as openCore, u as listDomains, ut as shellCommand, v as addAccountChange, w as policyReport, x as modeOf, xt as VERSION, y as inspectKey, z as UPDATE_CHECK_CHILD_COMMAND } from "./send-BedjeO_M.mjs";
 import path from "node:path";
-import fs from "node:fs";
-import childProcess from "node:child_process";
 import { createInterface } from "node:readline/promises";
 import { stripVTControlCharacters } from "node:util";
+import fs from "node:fs";
+import childProcess from "node:child_process";
 import process$1 from "node:process";
 import { EventEmitter } from "node:events";
 import { Writable } from "node:stream";
@@ -3040,12 +3040,12 @@ const KEY_SHAPE = /^re_[A-Za-z0-9_]{8,200}$/;
 async function readApiKey(env, streams, options) {
 	const marker = agentMarker(env);
 	if (marker) throw new CommsError("AUTH_REQUIRED", "a Resend API key is added by a person at their own terminal, not by an agent", {
-		hint: `Ask the user to run \`${options.command}\` in their own terminal. Never paste a key into a chat: the transcript keeps it.`,
+		hint: `Ask the user to run ${inlineCommand(options.command)} in their own terminal. Never paste a key into a chat: the transcript keeps it.`,
 		details: { marker }
 	});
 	let key = env["RESEND_API_KEY"]?.trim() ?? "";
 	if (key === "") {
-		if (!canPrompt(env, streams, { json: options.json })) throw new CommsError("AUTH_REQUIRED", "a Resend API key is needed, and there is no terminal to ask for it", { hint: `A person runs \`${options.command}\` in a terminal, which asks for the key without showing it, or sets ${KEY_ENV} for that one command.` });
+		if (!canPrompt(env, streams, { json: options.json })) throw new CommsError("AUTH_REQUIRED", "a Resend API key is needed, and there is no terminal to ask for it", { hint: `A person runs ${inlineCommand(options.command)} in a terminal, which asks for the key without showing it, or sets ${KEY_ENV} for that one command.` });
 		key = (await askHidden(streams, "Resend API key (https://resend.com/api-keys; it is not shown as you type): ")).trim();
 	}
 	if (!KEY_SHAPE.test(key)) throw new CommsError("BAD_DATA", "that does not look like a Resend API key (they start with re_)", { hint: "Nothing was stored. Copy the key again from the Resend dashboard." });
@@ -3115,7 +3115,8 @@ function renderPrepared(result) {
 	return `${result.preview}\n\nNext: ${escapeForDisplay(result.nextStep)}`;
 }
 function renderSent(result) {
-	return result.state === "scheduled" ? `Scheduled for ${result.scheduledAt ?? "?"} as ${result.resendId}, to ${truncateDisplay(result.to.join(", "), 200)}.` : `Sent as ${result.resendId}, to ${truncateDisplay(result.to.join(", "), 200)}.`;
+	const sent = result.state === "scheduled" ? `Scheduled for ${result.scheduledAt ?? "?"} as ${result.resendId}, to ${truncateDisplay(result.to.join(", "), 200)}.` : `Sent as ${result.resendId}, to ${truncateDisplay(result.to.join(", "), 200)}.`;
+	return result.note ? `${sent}\nNote: ${escapeForDisplay(result.note)}.` : sent;
 }
 function renderStatus(result) {
 	return `${result.approvalId}: ${escapeForDisplay(result.verdict)}`;
@@ -3144,6 +3145,7 @@ async function run(argv, deps = {}) {
 		stdin: process.stdin
 	};
 	const env = deps.env ?? process.env;
+	const platform = deps.platform ?? process.platform;
 	const program = new Command();
 	let exitCode = 0;
 	let ran = false;
@@ -3173,7 +3175,8 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 	};
 	const output = () => ({
 		json: globals().json,
-		color: globals().color
+		color: globals().color,
+		platform
 	});
 	let gated = null;
 	program.hook("preAction", async (_program, command) => {
@@ -3236,8 +3239,16 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 		"never"
 	])).option("--domain <domain>", "for a sending-only key restricted to one domain: that domain")).action(act(async (context, options, name, flags) => {
 		const mode = modeOf(flags.mode);
-		const command = `agent-resend account add ${name}${mode ? ` --mode ${mode}` : ""}${flags.send ? ` --send ${String(flags.send)}` : ""}${flags.domain ? ` --domain ${String(flags.domain)}` : ""}`;
-		checkNewName(await context.config(), name);
+		const command = shellCommand([
+			"agent-resend",
+			"account",
+			"add",
+			name,
+			...mode ? ["--mode", mode] : [],
+			...flags.send ? ["--send", String(flags.send)] : [],
+			...flags.domain ? ["--domain", String(flags.domain)] : []
+		], platform);
+		checkNewName(await context.config(), name, context.platform);
 		const key = await readApiKey(env, streams, {
 			json: options.json,
 			command
@@ -3261,7 +3272,12 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 		writeResult(result, output(), (data) => renderAccount(data, options.color), streams);
 	}));
 	approvalOption(account.command("remove <name>").description("forget an account and delete its key, once a person approves it")).action(act(async (context, _options, name, flags) => {
-		const removed = await changeAt(context, removeAccountChange(context, name), flags, `agent-resend account remove ${name}`);
+		const removed = await changeAt(context, removeAccountChange(context, name), flags, shellCommand([
+			"agent-resend",
+			"account",
+			"remove",
+			name
+		], platform));
 		writeResult(removed, output(), renderRemoved, streams);
 	}));
 	approvalOption(account.command("policy <name>").description("report how its sends and changes are approved, or set --send, --mode and --change; loosening is approved by a person").option("--send <policy>", "chat, confirm or never").option("--mode <mode>", "read or send").option("--change <policy>", "how a loosening of this account is approved: chat or confirm")).action(act(async (context, _options, name, flags) => {
@@ -3272,7 +3288,15 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 		});
 		const reporting = wanted.send === void 0 && wanted.mode === void 0 && wanted.change === void 0;
 		if (reporting) refuseUnclaimedApproval(flags.approval, policyApprovalRefusal("cli"));
-		const result = reporting ? await policyReport(context, name) : await changeAt(context, policyChange(context, name, wanted), flags, `agent-resend account policy ${name}${wanted.send ? ` --send ${wanted.send}` : ""}${wanted.mode ? ` --mode ${wanted.mode}` : ""}${wanted.change ? ` --change ${wanted.change}` : ""}`);
+		const result = reporting ? await policyReport(context, name) : await changeAt(context, policyChange(context, name, wanted), flags, shellCommand([
+			"agent-resend",
+			"account",
+			"policy",
+			name,
+			...wanted.send ? ["--send", wanted.send] : [],
+			...wanted.mode ? ["--mode", wanted.mode] : [],
+			...wanted.change ? ["--change", wanted.change] : []
+		], platform));
 		writeResult(result, output(), renderPolicy, streams);
 	}));
 	program.command("doctor").description("check what has to work, and say who enforces what — read-only is this package’s promise, not the key’s").option("--account <name>", "check only this account").option("--offline", "do not ask Resend anything", false).action(act(async (context, options, flags) => {
@@ -3373,21 +3397,37 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 		writeResult(result, output(), (data) => renderRead(data, options.color), streams);
 	}));
 	approvalOption(accountOption(scheduled.command("cancel <id>")).description("cancel a scheduled email; one this machine did not schedule is approved by a person first")).action(act(async (context, _options, id, flags) => {
-		const cancelled = await changeAt(context, cancelScheduledChange(context, String(flags.account), id), flags, `agent-resend scheduled cancel ${id} --account ${String(flags.account)}`);
+		const cancelled = await changeAt(context, cancelScheduledChange(context, String(flags.account), id), flags, shellCommand([
+			"agent-resend",
+			"scheduled",
+			"cancel",
+			id,
+			"--account",
+			String(flags.account)
+		], platform));
 		writeResult(cancelled, output(), renderCancelled, streams);
 	}));
 	program.command("approve <approvalId>").description("approve a send or a change at this terminal: read it, then type the code back").action(act(async (context, options, approvalId) => {
 		const marker = agentMarker(env);
 		if (marker) throw new CommsError("APPROVAL_REQUIRED", "only a person can approve a send or a change, not an agent", {
-			hint: `Ask the user to run \`agent-resend approve ${approvalId}\` in their own terminal.`,
+			hint: `Ask the user to run ${inlineCommand(shellCommand([
+				"agent-resend",
+				"approve",
+				approvalId
+			], context.platform))} in their own terminal.`,
 			details: { marker }
 		});
-		if (!canPrompt(env, streams, { json: options.json })) throw new CommsError("APPROVAL_REQUIRED", "approving needs an interactive terminal", { hint: `Run \`agent-resend approve ${approvalId}\` directly in a terminal.` });
+		if (!canPrompt(env, streams, { json: options.json })) throw new CommsError("APPROVAL_REQUIRED", "approving needs an interactive terminal", { hint: `Run ${inlineCommand(shellCommand([
+			"agent-resend",
+			"approve",
+			approvalId
+		], context.platform))} directly in a terminal.` });
 		const pending = await context.core.approvals.get(approvalId);
 		if (pending && approvalKind(pending) === "change") {
 			const outcome = await approveChangeAtTerminal(context.core, approvalId, env, {
 				json: options.json,
-				color: options.color
+				color: options.color,
+				platform: context.platform
 			}, streams);
 			streams.stdout.write(outcome.state === "approved" ? "Approved. This command approves; the change is applied by the command that prepared it.\n" : "Cancelled. Nothing was changed.\n");
 			return;
@@ -3405,7 +3445,7 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 	}));
 	const mcp = program.command("mcp").description("run the MCP server on stdio, for a coding agent to connect to").option("--account <name>", "pin the server to one account; every tool then acts on it and no other").action(async (flags) => {
 		ran = true;
-		const { startResendStdioServer } = await import("./stdio-entry-h_wAVp9z.mjs");
+		const { startResendStdioServer } = await import("./stdio-entry-QIUMjquj.mjs");
 		await startResendStdioServer({
 			...deps,
 			env,
@@ -3429,7 +3469,7 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 		const pinned = flags.account ?? mcp.opts().account;
 		const launcher = flags.launcher;
 		const name = flags.name;
-		const again = [
+		const again = shellCommand([
 			"agent-resend",
 			"mcp",
 			"install",
@@ -3440,7 +3480,7 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 			...launcher !== void 0 ? ["--launcher", launcher] : [],
 			...flags.verify === false ? ["--no-verify"] : [],
 			...flags.force === true ? ["--force"] : []
-		].join(" ");
+		], platform);
 		const result = await changeAt(context, serverInstallChange(context.core, env, {
 			channel: "resend",
 			client: flags.client,
@@ -3460,7 +3500,12 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 			channel: "resend",
 			dryRun: flags.dryRun === true,
 			includePrinted: flags.includePrinted === true
-		}, RESEND_MCP), flags, `agent-resend mcp prune${flags.includePrinted === true ? " --include-printed" : ""}`);
+		}, RESEND_MCP), flags, shellCommand([
+			"agent-resend",
+			"mcp",
+			"prune",
+			...flags.includePrinted === true ? ["--include-printed"] : []
+		], platform));
 		writeResult(result, output(), () => renderPrune(result, options.color), streams);
 	}));
 	program.command(`${UPDATE_CHECK_CHILD_COMMAND} <claimedAt>`, { hidden: true }).description("internal: finish the day's update check a command handed on").action(act(async (context, _options, claimedAt) => {

package/dist/index.d.mts

@@ -11509,7 +11509,7 @@ type RegisteredPrompt = {
   remove(): void;
 };
 //#endregion
-//#region ../core/dist/index.d.mts
+//#region ../core/dist/change-flow-BcrEyoig.d.mts
 type SendPolicy = "chat" | "confirm" | "never";
 /**
  * How a loosening of the configuration is approved: `chat` — the person says yes in the conversation and the agent
@@ -11997,6 +11997,8 @@ interface LiveDraft {
 }
 /** What the product making a claim tells the store about itself. */
 interface ClaimOptions {
+  /** The shell syntax used by any approval command this refusal prints. */
+  platform?: NodeJS.Platform | undefined;
   /**
    * What the caller is told when the send is waiting for a person: which command approves it, and what to run after.
    *
@@ -12006,6 +12008,17 @@ interface ClaimOptions {
    * names no product at all rather than the wrong one.
    */
   pendingHint?: string | undefined;
+  /**
+   * The caller's cancellation — an MCP request's signal — asked under the record's lock, immediately before the claim
+   * would change the record.
+   *
+   * A claim can wait: for the lock, while another process holds it. A caller that looked at its signal before calling
+   * and found it clear could be cancelled during that wait, and the claim then went through all the same, spending an
+   * approval on a call nobody was waiting for any more — whose outcome its caller then had to record as a failure,
+   * since a claim cannot be put back. Asked here, a cancellation that lands before the record changes leaves it exactly
+   * as it was, for the same call made again; one that lands after is the caller's to handle, as it always was.
+   */
+  signal?: AbortSignal | undefined;
 }
 declare class ApprovalStore {
   #private;
@@ -12018,7 +12031,7 @@ declare class ApprovalStore {
   create(input: CreateApprovalInput): Promise<ApprovalRecord>;
   get(approvalId: string): Promise<ApprovalRecord | null>;
   /** Issues a new challenge to show a human; only its hash is kept. */
-  issueChallenge(approvalId: string, kind?: ApprovalKind): Promise<string>;
+  issueChallenge(approvalId: string, kind?: ApprovalKind, platform?: NodeJS.Platform): Promise<string>;
   /**
    * A human approved through a confirm channel by typing the issued challenge. The draft must still be exactly what the
    * record was prepared for; otherwise the record is voided, because the human would be approving content the record
@@ -12027,7 +12040,7 @@ declare class ApprovalStore {
    * A change is approved the same way, with `kind: 'change'` and its digest standing in for the draft (see
    * `createChange`), so a person's typed code means one thing whichever kind of approval it is typed for.
    */
-  approve(approvalId: string, via: ApprovalChannel, live: LiveDraft, answer: string, kind?: ApprovalKind): Promise<ApprovalRecord>;
+  approve(approvalId: string, via: ApprovalChannel, live: LiveDraft, answer: string, kind?: ApprovalKind, platform?: NodeJS.Platform): Promise<ApprovalRecord>;
   /**
    * Claims the record for sending, once. Non-consuming refusals (not yet approved) leave the record untouched so the
    * human can still approve it; integrity failures (other inbox or account, edited or changed draft, different
@@ -12081,7 +12094,7 @@ declare class ApprovalStore {
    *
    * Only a pending question can be answered, and only once: a second answer is refused, not taken over the first.
    */
-  answerDownload(approvalId: string, via: ApprovalChannel, answer: RecordedSaveAnswer): Promise<ApprovalRecord & {
+  answerDownload(approvalId: string, via: ApprovalChannel, answer: RecordedSaveAnswer, platform?: NodeJS.Platform): Promise<ApprovalRecord & {
     download: DownloadBinding;
   }>;
   /**
@@ -12099,10 +12112,15 @@ declare class ApprovalStore {
    * gave it in the conversation. Under `confirm`, only a question the person answered at a terminal or in a trusted
    * form can be claimed; a pending one is refused, and left as it is, so they can still answer it. One used, voided or
    * expired is refused as an approval in that state is.
+   *
+   * `options.signal` is the download's cancellation, asked under the lock as a send's is (`ClaimOptions.signal`): a
+   * download cancelled while this waited saves nothing and leaves the question open, the answer still unused.
    */
   claimForDownload(approvalId: string, live: DownloadRequest, options?: {
     policy?: ChangePolicy | undefined;
     pendingHint?: string | undefined;
+    signal?: AbortSignal | undefined;
+    platform?: NodeJS.Platform | undefined;
   }): Promise<ApprovalRecord & {
     download: DownloadBinding;
   }>;
@@ -12398,6 +12416,10 @@ interface ThrottleOptions {
   sleep?: (ms: number) => Promise<void>;
   /** Tests shorten this; nothing a person or an agent passes can. */
   intervalMs?: number;
+  /** How long one holder of the lock may keep everyone else waiting. Tests shorten this too. */
+  lockTimeoutMs?: number;
+  /** How long a request may wait for the lock in all: `LOCK_MAX_WAIT_MS`. Tests shorten this too. */
+  lockMaxWaitMs?: number;
 }
 //#endregion
 //#region src/context.d.ts
@@ -12410,6 +12432,8 @@ interface ResendContextOptions {
   core?: Core | undefined;
   env?: NodeJS.ProcessEnv | undefined;
   now?: (() => Date) | undefined;
+  /** The shell syntax used for commands an operation returns or prints. */
+  platform?: NodeJS.Platform | undefined;
   surface?: "cli" | "mcp" | undefined;
   /** The inner fetch every request goes through, always inside the guard. Injected so a test never reaches Resend. */
   fetch?: FetchLike | undefined;

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { _t as RESEND_DOWNLOAD_ORIGIN, gt as RESEND_API_ORIGIN, ht as REFUSED, vt as ROUTES, yt as VERSION } from "./send-W8SmlF7p.mjs";
-import { t as createResendMcpServer } from "./server-ElSFoKeD.mjs";
+import { _t as REFUSED, bt as ROUTES, vt as RESEND_API_ORIGIN, xt as VERSION, yt as RESEND_DOWNLOAD_ORIGIN } from "./send-BedjeO_M.mjs";
+import { t as createResendMcpServer } from "./server-Bq2OYONI.mjs";
 //#region src/index.ts
 /**
 * The library entry of `@agentcomms/resend`.