@agentcomms/resend 0.12.2 → 0.13.0

package/dist/cli.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-import { $ as installExitStatus, B as agentMarker, C as policyChange, D as sendPolicyOf, E as removeAccountChange, F as CHANNEL_SERVERS, H as approvalsOf, I as CommsError, J as commandPathOf, L as EXIT_CODES, N as checkNewName, O as showAccount, Q as gatedChangeAtTerminal, R as SEND_LOOKUP, S as policyApprovalRefusal, T as policyWanted, U as approveChangeAtTerminal, V as approvalKind, W as canPrompt, X as exemptFromUpdateGate, Y as escapeForDisplay, _ as runDoctor, a as revokeSendApproval, at as runCommand, b as listAccounts, c as downloadReceived, ct as serverPruneChange, d as listReceived, dt as truncateDisplay, et as openCore, f as listScheduled, ft as updateGateAtTerminal, g as showSentEmail, h as showReceived, i as prepareSend, it as renderPrune, k as ResendContext, l as getMetrics, lt as terminalUpdateHooks, m as listSuppressions, mt as writeResult, n as executeSend, nt as refuseUnclaimedApproval, o as sendStatus, ot as runUpdateCheckChild, p as listSentEmails, q as colorEnabled, r as finishSendApproval, rt as renderInstall, s as cancelScheduledChange, st as serverInstallChange, t as beginSendApproval, tt as paint, u as listDomains, v as addAccountChange, w as policyReport, x as modeOf, y as inspectKey, yt as VERSION, z as UPDATE_CHECK_CHILD_COMMAND } from "./send-BlDpMIlS.mjs";
+import { $ as inlineCommand, B as agentMarker, C as policyChange, D as sendPolicyOf, E as removeAccountChange, F as CHANNEL_SERVERS, H as approvalsOf, I as CommsError, J as commandPathOf, L as EXIT_CODES, N as checkNewName, O as showAccount, Q as gatedChangeAtTerminal, R as SEND_LOOKUP, S as policyApprovalRefusal, T as policyWanted, U as approveChangeAtTerminal, V as approvalKind, W as canPrompt, X as exemptFromUpdateGate, Y as escapeForDisplay, _ as runDoctor, a as revokeSendApproval, at as renderPrune, b as listAccounts, c as downloadReceived, ct as serverInstallChange, d as listReceived, dt as terminalUpdateHooks, et as installExitStatus, f as listScheduled, g as showSentEmail, gt as writeResult, h as showReceived, i as prepareSend, it as renderInstall, k as ResendContext, l as getMetrics, lt as serverPruneChange, m as listSuppressions, mt as updateGateAtTerminal, n as executeSend, nt as paint, o as sendStatus, ot as runCommand, p as listSentEmails, pt as truncateDisplay, q as colorEnabled, r as finishSendApproval, rt as refuseUnclaimedApproval, s as cancelScheduledChange, st as runUpdateCheckChild, t as beginSendApproval, tt as openCore, u as listDomains, ut as shellCommand, v as addAccountChange, w as policyReport, x as modeOf, xt as VERSION, y as inspectKey, z as UPDATE_CHECK_CHILD_COMMAND } from "./send-D2ZOWO_6.mjs";
 import path from "node:path";
-import fs from "node:fs";
 import { createInterface } from "node:readline/promises";
 import { stripVTControlCharacters } from "node:util";
+import fs from "node:fs";
 import childProcess from "node:child_process";
 import process$1 from "node:process";
 import { EventEmitter } from "node:events";
@@ -3040,12 +3040,12 @@ const KEY_SHAPE = /^re_[A-Za-z0-9_]{8,200}$/;
 async function readApiKey(env, streams, options) {
 	const marker = agentMarker(env);
 	if (marker) throw new CommsError("AUTH_REQUIRED", "a Resend API key is added by a person at their own terminal, not by an agent", {
-		hint: `Ask the user to run \`${options.command}\` in their own terminal. Never paste a key into a chat: the transcript keeps it.`,
+		hint: `Ask the user to run ${inlineCommand(options.command)} in their own terminal. Never paste a key into a chat: the transcript keeps it.`,
 		details: { marker }
 	});
 	let key = env["RESEND_API_KEY"]?.trim() ?? "";
 	if (key === "") {
-		if (!canPrompt(env, streams, { json: options.json })) throw new CommsError("AUTH_REQUIRED", "a Resend API key is needed, and there is no terminal to ask for it", { hint: `A person runs \`${options.command}\` in a terminal, which asks for the key without showing it, or sets ${KEY_ENV} for that one command.` });
+		if (!canPrompt(env, streams, { json: options.json })) throw new CommsError("AUTH_REQUIRED", "a Resend API key is needed, and there is no terminal to ask for it", { hint: `A person runs ${inlineCommand(options.command)} in a terminal, which asks for the key without showing it, or sets ${KEY_ENV} for that one command.` });
 		key = (await askHidden(streams, "Resend API key (https://resend.com/api-keys; it is not shown as you type): ")).trim();
 	}
 	if (!KEY_SHAPE.test(key)) throw new CommsError("BAD_DATA", "that does not look like a Resend API key (they start with re_)", { hint: "Nothing was stored. Copy the key again from the Resend dashboard." });
@@ -3115,7 +3115,8 @@ function renderPrepared(result) {
 	return `${result.preview}\n\nNext: ${escapeForDisplay(result.nextStep)}`;
 }
 function renderSent(result) {
-	return result.state === "scheduled" ? `Scheduled for ${result.scheduledAt ?? "?"} as ${result.resendId}, to ${truncateDisplay(result.to.join(", "), 200)}.` : `Sent as ${result.resendId}, to ${truncateDisplay(result.to.join(", "), 200)}.`;
+	const sent = result.state === "scheduled" ? `Scheduled for ${result.scheduledAt ?? "?"} as ${result.resendId}, to ${truncateDisplay(result.to.join(", "), 200)}.` : `Sent as ${result.resendId}, to ${truncateDisplay(result.to.join(", "), 200)}.`;
+	return result.note ? `${sent}\nNote: ${escapeForDisplay(result.note)}.` : sent;
 }
 function renderStatus(result) {
 	return `${result.approvalId}: ${escapeForDisplay(result.verdict)}`;
@@ -3144,6 +3145,7 @@ async function run(argv, deps = {}) {
 		stdin: process.stdin
 	};
 	const env = deps.env ?? process.env;
+	const platform = deps.platform ?? process.platform;
 	const program = new Command();
 	let exitCode = 0;
 	let ran = false;
@@ -3173,7 +3175,8 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 	};
 	const output = () => ({
 		json: globals().json,
-		color: globals().color
+		color: globals().color,
+		platform
 	});
 	let gated = null;
 	program.hook("preAction", async (_program, command) => {
@@ -3236,8 +3239,16 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 		"never"
 	])).option("--domain <domain>", "for a sending-only key restricted to one domain: that domain")).action(act(async (context, options, name, flags) => {
 		const mode = modeOf(flags.mode);
-		const command = `agent-resend account add ${name}${mode ? ` --mode ${mode}` : ""}${flags.send ? ` --send ${String(flags.send)}` : ""}${flags.domain ? ` --domain ${String(flags.domain)}` : ""}`;
-		checkNewName(await context.config(), name);
+		const command = shellCommand([
+			"agent-resend",
+			"account",
+			"add",
+			name,
+			...mode ? ["--mode", mode] : [],
+			...flags.send ? ["--send", String(flags.send)] : [],
+			...flags.domain ? ["--domain", String(flags.domain)] : []
+		], platform);
+		checkNewName(await context.config(), name, context.platform);
 		const key = await readApiKey(env, streams, {
 			json: options.json,
 			command
@@ -3261,7 +3272,12 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 		writeResult(result, output(), (data) => renderAccount(data, options.color), streams);
 	}));
 	approvalOption(account.command("remove <name>").description("forget an account and delete its key, once a person approves it")).action(act(async (context, _options, name, flags) => {
-		const removed = await changeAt(context, removeAccountChange(context, name), flags, `agent-resend account remove ${name}`);
+		const removed = await changeAt(context, removeAccountChange(context, name), flags, shellCommand([
+			"agent-resend",
+			"account",
+			"remove",
+			name
+		], platform));
 		writeResult(removed, output(), renderRemoved, streams);
 	}));
 	approvalOption(account.command("policy <name>").description("report how its sends and changes are approved, or set --send, --mode and --change; loosening is approved by a person").option("--send <policy>", "chat, confirm or never").option("--mode <mode>", "read or send").option("--change <policy>", "how a loosening of this account is approved: chat or confirm")).action(act(async (context, _options, name, flags) => {
@@ -3272,7 +3288,15 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 		});
 		const reporting = wanted.send === void 0 && wanted.mode === void 0 && wanted.change === void 0;
 		if (reporting) refuseUnclaimedApproval(flags.approval, policyApprovalRefusal("cli"));
-		const result = reporting ? await policyReport(context, name) : await changeAt(context, policyChange(context, name, wanted), flags, `agent-resend account policy ${name}${wanted.send ? ` --send ${wanted.send}` : ""}${wanted.mode ? ` --mode ${wanted.mode}` : ""}${wanted.change ? ` --change ${wanted.change}` : ""}`);
+		const result = reporting ? await policyReport(context, name) : await changeAt(context, policyChange(context, name, wanted), flags, shellCommand([
+			"agent-resend",
+			"account",
+			"policy",
+			name,
+			...wanted.send ? ["--send", wanted.send] : [],
+			...wanted.mode ? ["--mode", wanted.mode] : [],
+			...wanted.change ? ["--change", wanted.change] : []
+		], platform));
 		writeResult(result, output(), renderPolicy, streams);
 	}));
 	program.command("doctor").description("check what has to work, and say who enforces what — read-only is this package’s promise, not the key’s").option("--account <name>", "check only this account").option("--offline", "do not ask Resend anything", false).action(act(async (context, options, flags) => {
@@ -3373,21 +3397,37 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 		writeResult(result, output(), (data) => renderRead(data, options.color), streams);
 	}));
 	approvalOption(accountOption(scheduled.command("cancel <id>")).description("cancel a scheduled email; one this machine did not schedule is approved by a person first")).action(act(async (context, _options, id, flags) => {
-		const cancelled = await changeAt(context, cancelScheduledChange(context, String(flags.account), id), flags, `agent-resend scheduled cancel ${id} --account ${String(flags.account)}`);
+		const cancelled = await changeAt(context, cancelScheduledChange(context, String(flags.account), id), flags, shellCommand([
+			"agent-resend",
+			"scheduled",
+			"cancel",
+			id,
+			"--account",
+			String(flags.account)
+		], platform));
 		writeResult(cancelled, output(), renderCancelled, streams);
 	}));
 	program.command("approve <approvalId>").description("approve a send or a change at this terminal: read it, then type the code back").action(act(async (context, options, approvalId) => {
 		const marker = agentMarker(env);
 		if (marker) throw new CommsError("APPROVAL_REQUIRED", "only a person can approve a send or a change, not an agent", {
-			hint: `Ask the user to run \`agent-resend approve ${approvalId}\` in their own terminal.`,
+			hint: `Ask the user to run ${inlineCommand(shellCommand([
+				"agent-resend",
+				"approve",
+				approvalId
+			], context.platform))} in their own terminal.`,
 			details: { marker }
 		});
-		if (!canPrompt(env, streams, { json: options.json })) throw new CommsError("APPROVAL_REQUIRED", "approving needs an interactive terminal", { hint: `Run \`agent-resend approve ${approvalId}\` directly in a terminal.` });
+		if (!canPrompt(env, streams, { json: options.json })) throw new CommsError("APPROVAL_REQUIRED", "approving needs an interactive terminal", { hint: `Run ${inlineCommand(shellCommand([
+			"agent-resend",
+			"approve",
+			approvalId
+		], context.platform))} directly in a terminal.` });
 		const pending = await context.core.approvals.get(approvalId);
 		if (pending && approvalKind(pending) === "change") {
 			const outcome = await approveChangeAtTerminal(context.core, approvalId, env, {
 				json: options.json,
-				color: options.color
+				color: options.color,
+				platform: context.platform
 			}, streams);
 			streams.stdout.write(outcome.state === "approved" ? "Approved. This command approves; the change is applied by the command that prepared it.\n" : "Cancelled. Nothing was changed.\n");
 			return;
@@ -3405,7 +3445,7 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 	}));
 	const mcp = program.command("mcp").description("run the MCP server on stdio, for a coding agent to connect to").option("--account <name>", "pin the server to one account; every tool then acts on it and no other").action(async (flags) => {
 		ran = true;
-		const { startResendStdioServer } = await import("./stdio-entry-Cibag7m5.mjs");
+		const { startResendStdioServer } = await import("./stdio-entry-BCnq_EyF.mjs");
 		await startResendStdioServer({
 			...deps,
 			env,
@@ -3429,7 +3469,7 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 		const pinned = flags.account ?? mcp.opts().account;
 		const launcher = flags.launcher;
 		const name = flags.name;
-		const again = [
+		const again = shellCommand([
 			"agent-resend",
 			"mcp",
 			"install",
@@ -3440,7 +3480,7 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 			...launcher !== void 0 ? ["--launcher", launcher] : [],
 			...flags.verify === false ? ["--no-verify"] : [],
 			...flags.force === true ? ["--force"] : []
-		].join(" ");
+		], platform);
 		const result = await changeAt(context, serverInstallChange(context.core, env, {
 			channel: "resend",
 			client: flags.client,
@@ -3460,7 +3500,12 @@ is out: update first, or put it off (agentcomms update, agentcomms update --late
 			channel: "resend",
 			dryRun: flags.dryRun === true,
 			includePrinted: flags.includePrinted === true
-		}, RESEND_MCP), flags, `agent-resend mcp prune${flags.includePrinted === true ? " --include-printed" : ""}`);
+		}, RESEND_MCP), flags, shellCommand([
+			"agent-resend",
+			"mcp",
+			"prune",
+			...flags.includePrinted === true ? ["--include-printed"] : []
+		], platform));
 		writeResult(result, output(), () => renderPrune(result, options.color), streams);
 	}));
 	program.command(`${UPDATE_CHECK_CHILD_COMMAND} <claimedAt>`, { hidden: true }).description("internal: finish the day's update check a command handed on").action(act(async (context, _options, claimedAt) => {

package/dist/{coerce-BscjcmYU.mjs → coerce-CqGigABD.mjs}

@@ -1,4 +1,4 @@
-import { D as _coercedNumber, O as _isoDate, k as _isoDateTime, n as ZodISODateTime, r as ZodNumber, t as ZodISODate } from "./schemas-DiGKNDNq.mjs";
+import { D as _coercedNumber, r as ZodNumber } from "./iso-USuVU_sk.mjs";
 //#region ../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/compat.js
 /** @deprecated Use the raw string literal codes instead, e.g. "invalid_type". */
 const ZodIssueCode = {
@@ -18,17 +18,9 @@ const ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/iso.js
-function datetime(params) {
-	return _isoDateTime(ZodISODateTime, params);
-}
-function date(params) {
-	return _isoDate(ZodISODate, params);
-}
-//#endregion
 //#region ../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/coerce.js
 function number(params) {
 	return _coercedNumber(ZodNumber, params);
 }
 //#endregion
-export { ZodIssueCode as i, date as n, datetime as r, number as t };
+export { ZodIssueCode as n, number as t };

package/dist/{dist-COPefvtq-D67MoOnB.mjs → dist-COPefvtq-COGS2a-K.mjs}

@@ -1,4 +1,4 @@
-import { A as stampErrorBrands, C as mergeCapabilities, D as runInputRequiredFlow, E as resolveInputRequiredDriverConfig, M as ListChangedOptionsBaseSchema, N as SERVER_INFO_META_KEY, O as scanXMcpHeaderDeclarations, P as SUBSCRIPTION_ID_META_KEY, S as legacyProtocolVersions, T as parseSchema, _ as isJSONRPCErrorResponse, b as isModernProtocolVersion, c as SdkErrorCode, d as __commonJSMin, f as __toESM, g as declaredDialect, h as codecForVersion, i as ProtocolErrorCode, j as DiscoverResultSchema, l as SdkHttpError, m as buildMcpParamHeaders, n as Protocol, o as SUPPORTED_MODERN_PROTOCOL_VERSIONS, p as brandedHasInstance, r as ProtocolError, s as SdkError, t as MODERN_WIRE_REVISION, u as UnsupportedProtocolVersionError, v as isJSONRPCRequest, w as modernProtocolVersions, x as isSpecType, y as isJSONRPCResultResponse } from "./src-D_zzAWoS-BhK0GFdq-XAvBzdGB.mjs";
+import { A as stampErrorBrands, C as mergeCapabilities, D as runInputRequiredFlow, E as resolveInputRequiredDriverConfig, M as ListChangedOptionsBaseSchema, N as SERVER_INFO_META_KEY, O as scanXMcpHeaderDeclarations, P as SUBSCRIPTION_ID_META_KEY, S as legacyProtocolVersions, T as parseSchema, _ as isJSONRPCErrorResponse, b as isModernProtocolVersion, c as SdkErrorCode, d as __commonJSMin, f as __toESM, g as declaredDialect, h as codecForVersion, i as ProtocolErrorCode, j as DiscoverResultSchema, l as SdkHttpError, m as buildMcpParamHeaders, n as Protocol, o as SUPPORTED_MODERN_PROTOCOL_VERSIONS, p as brandedHasInstance, r as ProtocolError, s as SdkError, t as MODERN_WIRE_REVISION, u as UnsupportedProtocolVersionError, v as isJSONRPCRequest, w as modernProtocolVersions, x as isSpecType, y as isJSONRPCResultResponse } from "./src-D_zzAWoS-BhK0GFdq-oo-8IJem.mjs";
 //#region ../core/dist/dist-COPefvtq.mjs
 var require_code$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });

package/dist/index.d.mts

@@ -11509,7 +11509,7 @@ type RegisteredPrompt = {
   remove(): void;
 };
 //#endregion
-//#region ../core/dist/change-flow-C4tw0Usg.d.mts
+//#region ../core/dist/change-flow-DxZfblwU.d.mts
 type SendPolicy = "chat" | "confirm" | "never";
 /**
  * How a loosening of the configuration is approved: `chat` — the person says yes in the conversation and the agent
@@ -11528,6 +11528,14 @@ interface ClientConfig {
   projectId?: string | undefined;
   secretRef: string;
   addedAt: string;
+  /**
+   * The organisation profile that made this row and owns it (design 2026-10-02 §D4) — absent on a row a person
+   * registered, or one a profile adopted. A row carrying it is the profile's to change: `org update` and `org remove`
+   * change it, and `client add --replace` and `client remove` refuse it while its organisation has a record.
+   *
+   * Additive: client rows are loose, so a release that does not know the key keeps it through its writes.
+   */
+  organisation?: string | undefined;
 }
 interface InboxConfig {
   /** Immutable id (`ibx_` + 16 base32 characters). Secrets and all state are keyed by it; the alias is a label. */
@@ -11653,6 +11661,34 @@ interface AccountConfig {
    * had chosen another port followed them to a sign-in that failed on the way back.
    */
   redirectPort?: number | undefined;
+  /** The organisation profile whose Slack app created this account. Absent for a person's own app. */
+  organisation?: string | undefined;
+  /** Which app in that profile issued the account's current credential. */
+  profileApp?: "read" | "send" | undefined;
+}
+type PendingRevocationStatus = "pending" | "revoked" | "expired";
+/** One bearer token in a superseded rotating bundle, tracked independently from its pair. */
+interface PendingRevocationTokenState {
+  status: PendingRevocationStatus;
+  /** The fixed absolute time after which the old token is known to be unusable. */
+  deadline: string;
+}
+/**
+ * A superseded credential kept until each token in it is conclusively revoked or expired.
+ *
+ * `store` belongs to the entry rather than being inferred from `secrets.store`: an older release can move the root
+ * store without knowing to move this bundle, and cleanup must still find the only copy that exists.
+ */
+interface PendingRevocation {
+  ref: string;
+  store: StoreKind;
+  platform: string;
+  workspace: string;
+  createdAt: string;
+  tokens: {
+    access: PendingRevocationTokenState;
+    refresh?: PendingRevocationTokenState | undefined;
+  };
 }
 interface ConfigBody {
   /**
@@ -11666,6 +11702,8 @@ interface ConfigBody {
   inboxes: Record<string, InboxConfig>;
   /** Non-mail accounts. Absent in every config written before this key existed, hence the default. */
   accounts: Record<string, AccountConfig>;
+  /** Superseded rotating credentials which still need conclusive per-token cleanup. */
+  pendingRevocations?: PendingRevocation[] | undefined;
   defaults: Defaults;
 }
 interface ConfigV1 extends ConfigBody {
@@ -11687,11 +11725,74 @@ interface FormerNames {
   inboxes: Record<string, FormerName>;
   accounts: Record<string, FormerName>;
 }
+/** Who an organisation's Google client is for, as its administrator states it (design 2026-10-02 §D2). */
+type OrganisationServes = "any" | {
+  domains: string[];
+};
+/**
+ * One Google client an organisation profile brought here: a *generation* (design 2026-10-02 §D4).
+ *
+ * `owned` — the profile made the client row `name` (`rgc-1`), which carries `organisation`, and its secret is the
+ * profile's to rewrite. `adopted` — the row was already here under a name a person chose (they ran `client add` with
+ * the organisation's file), and stays theirs: no `org` command changes or removes it. `serves` is per generation,
+ * because it is a fact about one client, not about the organisation.
+ */
+interface OrganisationGeneration {
+  name: string;
+  clientId: string;
+  projectId?: string | undefined;
+  ownership: "owned" | "adopted";
+  serves: OrganisationServes;
+  addedAt: string;
+}
+interface OrganisationSlackApp {
+  clientId: string;
+  appId?: string | undefined;
+}
+/**
+ * What this machine records of one organisation profile: never its bytes and never its secret — where it was read
+ * from, the SHA-256 of what was read and when, the generations of its Google client, and its Slack apps.
+ */
+interface OrganisationRecord {
+  label: string;
+  /** Read again, from this absolute path, by every `org update`. `file` is the one kind version 1 knows (§D3). */
+  source: {
+    kind: string;
+    path: string;
+  };
+  sha256: string;
+  readAt: string;
+  addedAt: string;
+  /** Whether the member asked for this organisation's client to serve addresses outside it too (§D6). */
+  forOtherAddresses: boolean;
+  /** `active` names the generation new mailboxes get — none once a profile stops naming a Google client. */
+  gmail?: {
+    active: string | null;
+    generations: OrganisationGeneration[];
+  } | undefined;
+  slack?: {
+    workspace: string;
+    workspaceName: string;
+    redirectPort: number;
+    apps: {
+      read?: OrganisationSlackApp | undefined;
+      send?: OrganisationSlackApp | undefined;
+    };
+  } | undefined;
+}
 interface ConfigV2 extends ConfigBody {
   version: 2;
   formerNames: FormerNames;
+  /**
+   * The organisation profiles added here, by organisation word (design 2026-10-02 §D4). Absent reads as none, and
+   * stays absent until the first `org add`: a key the schema filled in would be written into every file by the next
+   * unrelated change.
+   */
+  organisations?: Record<string, OrganisationRecord> | undefined;
 }
 type Config$1 = ConfigV1 | ConfigV2;
+/** The committed config returned by an update; process-only commit metadata is deliberately stored out of band. */
+type ConfigUpdateResult = Config$1;
 declare class ConfigStore {
   #private;
   readonly path: string;
@@ -11704,7 +11805,8 @@ declare class ConfigStore {
    */
   update(mutator: (config: Config$1) => Config$1 | Promise<Config$1>, options?: {
     consent?: LooseningConsent;
-  }): Promise<Config$1>;
+    signal?: AbortSignal | undefined;
+  }): Promise<ConfigUpdateResult>;
   /**
    * The one way a version-1 config becomes version 2.
    *
@@ -11863,6 +11965,16 @@ interface ChangeBinding {
   settings?: SettingChange[] | undefined;
   /** What it does outside the configuration, in words: a sign-in, a registration, files removed. */
   effects: string[];
+  /**
+   * What the call that prepared it already did at once, because it never waits for an approval — a narrowing beside
+   * the change (design 2026-10-02 §D8). Not what approving does: the preview lists these apart, and its header says
+   * the rest is what waits. A field of its own rather than words in `effects`, so no text a change carries — a label
+   * a profile chose, say — can make a preview claim something was done.
+   *
+   * Bound when present, so a record cannot gain one it was not prepared with; absent reads as none, and leaves the
+   * digest of every other change exactly what it was.
+   */
+  doneAtOnce?: string[] | undefined;
 }
 /**
  * Exactly which download a question was asked for, stored on the record so the answer can be held to it.
@@ -11997,6 +12109,8 @@ interface LiveDraft {
 }
 /** What the product making a claim tells the store about itself. */
 interface ClaimOptions {
+  /** The shell syntax used by any approval command this refusal prints. */
+  platform?: NodeJS.Platform | undefined;
   /**
    * What the caller is told when the send is waiting for a person: which command approves it, and what to run after.
    *
@@ -12029,7 +12143,7 @@ declare class ApprovalStore {
   create(input: CreateApprovalInput): Promise<ApprovalRecord>;
   get(approvalId: string): Promise<ApprovalRecord | null>;
   /** Issues a new challenge to show a human; only its hash is kept. */
-  issueChallenge(approvalId: string, kind?: ApprovalKind): Promise<string>;
+  issueChallenge(approvalId: string, kind?: ApprovalKind, platform?: NodeJS.Platform): Promise<string>;
   /**
    * A human approved through a confirm channel by typing the issued challenge. The draft must still be exactly what the
    * record was prepared for; otherwise the record is voided, because the human would be approving content the record
@@ -12038,7 +12152,7 @@ declare class ApprovalStore {
    * A change is approved the same way, with `kind: 'change'` and its digest standing in for the draft (see
    * `createChange`), so a person's typed code means one thing whichever kind of approval it is typed for.
    */
-  approve(approvalId: string, via: ApprovalChannel, live: LiveDraft, answer: string, kind?: ApprovalKind): Promise<ApprovalRecord>;
+  approve(approvalId: string, via: ApprovalChannel, live: LiveDraft, answer: string, kind?: ApprovalKind, platform?: NodeJS.Platform): Promise<ApprovalRecord>;
   /**
    * Claims the record for sending, once. Non-consuming refusals (not yet approved) leave the record untouched so the
    * human can still approve it; integrity failures (other inbox or account, edited or changed draft, different
@@ -12092,7 +12206,7 @@ declare class ApprovalStore {
    *
    * Only a pending question can be answered, and only once: a second answer is refused, not taken over the first.
    */
-  answerDownload(approvalId: string, via: ApprovalChannel, answer: RecordedSaveAnswer): Promise<ApprovalRecord & {
+  answerDownload(approvalId: string, via: ApprovalChannel, answer: RecordedSaveAnswer, platform?: NodeJS.Platform): Promise<ApprovalRecord & {
     download: DownloadBinding;
   }>;
   /**
@@ -12118,6 +12232,7 @@ declare class ApprovalStore {
     policy?: ChangePolicy | undefined;
     pendingHint?: string | undefined;
     signal?: AbortSignal | undefined;
+    platform?: NodeJS.Platform | undefined;
   }): Promise<ApprovalRecord & {
     download: DownloadBinding;
   }>;
@@ -12429,6 +12544,8 @@ interface ResendContextOptions {
   core?: Core | undefined;
   env?: NodeJS.ProcessEnv | undefined;
   now?: (() => Date) | undefined;
+  /** The shell syntax used for commands an operation returns or prints. */
+  platform?: NodeJS.Platform | undefined;
   surface?: "cli" | "mcp" | undefined;
   /** The inner fetch every request goes through, always inside the guard. Injected so a test never reaches Resend. */
   fetch?: FetchLike | undefined;

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { _t as RESEND_DOWNLOAD_ORIGIN, gt as RESEND_API_ORIGIN, ht as REFUSED, vt as ROUTES, yt as VERSION } from "./send-BlDpMIlS.mjs";
-import { t as createResendMcpServer } from "./server-B-ubuD7Z.mjs";
+import { _t as REFUSED, bt as ROUTES, vt as RESEND_API_ORIGIN, xt as VERSION, yt as RESEND_DOWNLOAD_ORIGIN } from "./send-D2ZOWO_6.mjs";
+import { t as createResendMcpServer } from "./server-CLjdcZDg.mjs";
 //#region src/index.ts
 /**
 * The library entry of `@agentcomms/resend`.

package/dist/{schemas-DiGKNDNq.mjs → iso-USuVU_sk.mjs}

@@ -1013,7 +1013,7 @@ const dateSource = `(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468
 function anchor(source) {
 	return new RegExp(`^${source}$`);
 }
-const date = /*@__PURE__*/ anchor(dateSource);
+const date$1 = /*@__PURE__*/ anchor(dateSource);
 function timeSource(args) {
 	const hhmm = `(?:[01]\\d|2[0-3]):[0-5]\\d`;
 	return typeof args.precision === "number" ? args.precision === -1 ? `${hhmm}` : args.precision === 0 ? `${hhmm}:[0-5]\\d` : `${hhmm}:[0-5]\\d\\.\\d{${args.precision}}` : args.seconds ? `${hhmm}:[0-5]\\d(?:\\.\\d+)?` : `${hhmm}(?::[0-5]\\d(?:\\.\\d+)?)?`;
@@ -1021,7 +1021,7 @@ function timeSource(args) {
 function time(args) {
 	return new RegExp(`^${timeSource(args)}$`);
 }
-function datetime(args) {
+function datetime$1(args) {
 	const opts = ["Z"];
 	if (args.offset) opts.push(`([+-](?:[01]\\d|2[0-3]):[0-5]\\d)`);
 	const qualified = `${timeSource({
@@ -1672,11 +1672,11 @@ const $ZodKSUID = /*@__PURE__*/ $constructor("$ZodKSUID", (inst, def) => {
 	$ZodStringFormat.init(inst, def);
 });
 const $ZodISODateTime = /*@__PURE__*/ $constructor("$ZodISODateTime", (inst, def) => {
-	def.pattern ?? (def.pattern = datetime(def));
+	def.pattern ?? (def.pattern = datetime$1(def));
 	$ZodStringFormat.init(inst, def);
 });
 const $ZodISODate = /*@__PURE__*/ $constructor("$ZodISODate", (inst, def) => {
-	def.pattern ?? (def.pattern = date);
+	def.pattern ?? (def.pattern = date$1);
 	$ZodStringFormat.init(inst, def);
 });
 const $ZodISOTime = /*@__PURE__*/ $constructor("$ZodISOTime", (inst, def) => {
@@ -5882,4 +5882,12 @@ function preprocess(fn, schema) {
 	});
 }
 //#endregion
-export { NEVER as A, unknown as C, _coercedNumber as D, toJSONSchema as E, _isoDate as O, union as S, safeParse as T, optional as _, _null as a, strictObject as b, boolean as c, intersection as d, lazy as f, object as g, number as h, _enum as i, _isoDateTime as k, discriminatedUnion as l, looseObject as m, ZodISODateTime as n, any as o, literal as p, ZodNumber as r, array as s, ZodISODate as t, email as u, preprocess as v, url as w, string as x, record as y };
+//#region ../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/iso.js
+function datetime(params) {
+	return /* @__PURE__ */ _isoDateTime(ZodISODateTime, params);
+}
+function date(params) {
+	return /* @__PURE__ */ _isoDate(ZodISODate, params);
+}
+//#endregion
+export { unknown as C, _coercedNumber as D, toJSONSchema as E, NEVER as O, union as S, safeParse as T, optional as _, _null as a, strictObject as b, boolean as c, intersection as d, lazy as f, object as g, number as h, _enum as i, discriminatedUnion as l, looseObject as m, datetime as n, any as o, literal as p, ZodNumber as r, array as s, date as t, email as u, preprocess as v, url as w, string as x, record as y };

package/dist/{mcp-DXXb3Vv3-Co5BzjYe.mjs → mcp-DXXb3Vv3-kCxsVLO4.mjs}

@@ -1,5 +1,5 @@
-import { A as NEVER, C as unknown, E as toJSONSchema, S as union, T as safeParse, _ as optional, a as _null, c as boolean, d as intersection, f as lazy, g as object, h as number, i as _enum, l as discriminatedUnion, m as looseObject, o as any, p as literal, s as array, u as email, v as preprocess, w as url, x as string, y as record } from "./schemas-DiGKNDNq.mjs";
-import { i as ZodIssueCode, n as date, r as datetime, t as number$1 } from "./coerce-BscjcmYU.mjs";
+import { C as unknown, E as toJSONSchema, O as NEVER, S as union, T as safeParse, _ as optional, a as _null, c as boolean, d as intersection, f as lazy, g as object, h as number, i as _enum, l as discriminatedUnion, m as looseObject, n as datetime, o as any, p as literal, s as array, t as date, u as email, v as preprocess, w as url, x as string, y as record } from "./iso-USuVU_sk.mjs";
+import { n as ZodIssueCode, t as number$1 } from "./coerce-CqGigABD.mjs";
 import process$1 from "node:process";
 //#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/chunk-Br0eD_fh.mjs
 var __create = Object.create;