@agentisend/sdk-node 0.1.0

package/README.md

@@ -0,0 +1,97 @@
+<img src="https://agentisend.com/brand/lockup-horizontal-light.png#gh-light-mode-only" alt="AgentiSend" width="200" />
+<img src="https://agentisend.com/brand/lockup-horizontal-dark.png#gh-dark-mode-only" alt="AgentiSend" width="200" />
+
+# @agentisend/sdk-node
+
+Typed Node client for the [AgentiSend](https://agentisend.com) API. Node 20 or newer,
+ESM, no runtime dependencies.
+
+```bash
+npm install @agentisend/sdk-node
+```
+
+## Send
+
+```js
+import { AgentiSend } from '@agentisend/sdk-node';
+
+const agentisend = new AgentiSend(process.env.AGENTISEND_API_KEY);
+const { id } = await agentisend.emails.send({
+  from: 'you@yourdomain.com',
+  to: 'someone@example.com',
+  subject: 'Hello from AgentiSend',
+  text: 'Ten minutes, start to sent.',
+});
+console.log(id);
+```
+
+That block is executed against a running API server on every build of this
+repository, so a snippet that stops working fails the build rather than your
+first send.
+
+Every mutating call takes an idempotency key. Pass one whenever a retry is
+possible: `agentisend.emails.send(payload, { idempotencyKey: idempotencyKey('welcome-email', 'user_123') })`.
+The same key with the same body replays the first response instead of sending twice.
+
+Errors throw `AgentiSendError`, which carries `code`, `message`, `fix` and
+`docsUrl`. `fix` names what to do and which endpoint to call; on a 429 the
+error also carries `retryAfterSeconds`.
+
+## Coming from Resend
+
+`@agentisend/sdk-node/compat-resend` exports a `Resend` class with every method
+the Resend SDK has and its `{ data, error }` return shape, so the migration is
+the import line:
+
+```js
+import { Resend } from '@agentisend/sdk-node/compat-resend';
+
+const resend = new Resend(process.env.AGENTISEND_API_KEY);
+const { data, error } = await resend.emails.send({ from, to, subject, html });
+```
+
+Where AgentiSend is stricter than Resend, the shim warns on stderr instead of
+changing what it does.
+
+## CLI
+
+The package installs an `agentisend` binary.
+
+```bash
+npx @agentisend/sdk-node emails send --to someone@example.com \
+  --from you@yourdomain.com --subject Hi --text "Sent from the CLI"
+```
+
+| Command | What it does |
+|---|---|
+| `emails send` / `get` / `list` / `cancel` | The send path from a shell. |
+| `emails explain <id>` | Everything that happened to one message, in order. |
+| `domains list` / `verify` | Sending domains and a re-check of their DNS. |
+| `webhooks listen --forward-to <url>` | Verify deliveries locally and forward the raw bytes to your app. |
+| `receiving listen` | The same, for inbound mail. |
+| `limits kill` / `resume` | Stop a key sending, and undo it. |
+| `trust standing` | This account's standing and the reasons behind it. |
+| `doctor` | Check the key, the domains and the DNS in one pass. |
+| `profile list` / `use` / `set` | Named key and base-URL profiles. |
+| `completions <shell>` | bash, zsh or fish. |
+
+`AGENTISEND_API_KEY` is read from the environment. Piped or redirected output is
+JSON; a terminal gets the table.
+
+## Verifying webhooks
+
+`@agentisend/sdk-node/webhook-signing` is the same implementation that signs the
+delivery, so a signature that verifies here verified on the wire.
+
+```js
+import { verifyWebhookSignature, SIGNATURE_HEADER } from '@agentisend/sdk-node/webhook-signing';
+
+const ok = verifyWebhookSignature(secret, req.headers[SIGNATURE_HEADER], rawBody);
+```
+
+Pass the raw request body, byte for byte. Re-serialising parsed JSON changes the
+bytes and therefore the HMAC.
+
+## Docs
+
+[agentisend.com/docs](https://agentisend.com/docs). Problems: hello@agentisend.com.

package/dist/cli/args.d.ts

@@ -0,0 +1,24 @@
+/**
+ * M4.16 — one argument parser for every command.
+ *
+ * Deliberately small and deliberately strict about one thing: an unknown flag
+ * is an ERROR. The old parser ignored them "so the CLI stays scriptable",
+ * which means `--idempotency-key` typed as `--idempotency_key` sent the email
+ * twice and said nothing. Silence is not scriptability.
+ */
+export interface ParsedArgs {
+    /** Positional words, in order: `webhooks listen` → ['webhooks', 'listen']. */
+    positional: string[];
+    /** Repeated flags keep every value; a bare flag records ''. */
+    flags: Map<string, string[]>;
+}
+export declare class UsageError extends Error {
+    readonly fix: string;
+    constructor(message: string, fix: string);
+}
+export declare function parseArgs(argv: string[], known?: Set<string>): ParsedArgs;
+export declare function flag(args: ParsedArgs, name: string): string | undefined;
+export declare function flagAll(args: ParsedArgs, name: string): string[];
+export declare function has(args: ParsedArgs, name: string): boolean;
+/** Comma-or-repetition, because both are what people actually type. */
+export declare function list(args: ParsedArgs, name: string): string[];

package/dist/cli/args.js

@@ -0,0 +1,71 @@
+export class UsageError extends Error {
+    fix;
+    constructor(message, fix) {
+        super(message);
+        this.name = 'UsageError';
+        this.fix = fix;
+    }
+}
+/** Flags that never take a value. Everything else consumes the next token. */
+const BOOLEAN_FLAGS = new Set([
+    'json',
+    'help',
+    'version',
+    'no-color',
+    'verify-only',
+    'follow',
+    'once',
+]);
+export function parseArgs(argv, known) {
+    const positional = [];
+    const flags = new Map();
+    for (let i = 0; i < argv.length; i++) {
+        const token = argv[i];
+        if (!token.startsWith('--')) {
+            positional.push(token);
+            continue;
+        }
+        const body = token.slice(2);
+        const eq = body.indexOf('=');
+        const name = eq === -1 ? body : body.slice(0, eq);
+        if (known && !known.has(name)) {
+            throw new UsageError(`Unknown option --${name}.`, 'Run the command with --help to see what it accepts. Nothing was sent.');
+        }
+        let value;
+        if (eq !== -1)
+            value = body.slice(eq + 1);
+        else if (BOOLEAN_FLAGS.has(name))
+            value = '';
+        else {
+            const next = argv[i + 1];
+            if (next === undefined || next.startsWith('--')) {
+                throw new UsageError(`--${name} needs a value.`, `Pass it as --${name} <value>.`);
+            }
+            value = next;
+            i++;
+        }
+        const existing = flags.get(name);
+        if (existing)
+            existing.push(value);
+        else
+            flags.set(name, [value]);
+    }
+    return { positional, flags };
+}
+export function flag(args, name) {
+    return args.flags.get(name)?.[0];
+}
+export function flagAll(args, name) {
+    return args.flags.get(name) ?? [];
+}
+export function has(args, name) {
+    return args.flags.has(name);
+}
+/** Comma-or-repetition, because both are what people actually type. */
+export function list(args, name) {
+    return flagAll(args, name)
+        .flatMap((value) => value.split(','))
+        .map((value) => value.trim())
+        .filter((value) => value.length > 0);
+}
+//# sourceMappingURL=args.js.map

package/dist/cli/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,GAAG,CAAS;IACrB,YAAY,OAAe,EAAE,GAAW;QACtC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,MAAM;IACN,MAAM;IACN,SAAS;IACT,UAAU;IACV,aAAa;IACb,QAAQ;IACR,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,UAAU,SAAS,CAAC,IAAc,EAAE,KAAmB;IAC3D,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,UAAU,CAClB,oBAAoB,IAAI,GAAG,EAC3B,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,KAAa,CAAC;QAClB,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;aACrC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,KAAK,GAAG,EAAE,CAAC;aACxC,CAAC;YACJ,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,iBAAiB,EAAE,gBAAgB,IAAI,WAAW,CAAC,CAAC;YACpF,CAAC;YACD,KAAK,GAAG,IAAI,CAAC;YACb,CAAC,EAAE,CAAC;QACN,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAC9B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAgB,EAAE,IAAY;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAgB,EAAE,IAAY;IACpD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAE,IAAY;IAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,IAAI,CAAC,IAAgB,EAAE,IAAY;IACjD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;SACvB,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/cli/commands.d.ts

@@ -0,0 +1,29 @@
+/**
+ * M4.16 — the command surface, as data.
+ *
+ * One table drives the help text, the shell completions and the flag
+ * validation. Three hand-maintained lists is how a CLI ends up completing a
+ * flag it no longer accepts, and the person typing it trusts the completion
+ * more than the docs.
+ */
+export interface CommandSpec {
+    /** e.g. "emails send" */
+    name: string;
+    summary: string;
+    /** Flags this command accepts, without the leading dashes. */
+    flags: string[];
+}
+/** Flags every command takes. */
+export declare const GLOBAL_FLAGS: string[];
+export declare const COMMANDS: CommandSpec[];
+export declare function flagsFor(command: string): Set<string>;
+export declare function helpText(): string;
+declare const SHELLS: readonly ["bash", "zsh", "fish"];
+export type CompletionShell = (typeof SHELLS)[number];
+export declare function isShell(value: string): value is CompletionShell;
+/**
+ * Completions generated from the same table — a completion that offers a flag
+ * the command rejects is worse than none, because it is trusted.
+ */
+export declare function completionScript(shell: CompletionShell): string;
+export {};

package/dist/cli/commands.js

@@ -0,0 +1,147 @@
+/** Flags every command takes. */
+export const GLOBAL_FLAGS = ['json', 'help', 'version', 'profile', 'api-key', 'base-url'];
+export const COMMANDS = [
+    {
+        name: 'emails send',
+        summary: 'Send one email. Use - with --text-file/--html-file to read the body from stdin.',
+        flags: [
+            'from',
+            'to',
+            'cc',
+            'bcc',
+            'reply-to',
+            'subject',
+            'html',
+            'text',
+            'html-file',
+            'text-file',
+            'tag',
+            'scheduled-at',
+            'idempotency-key',
+        ],
+    },
+    { name: 'emails get', summary: 'Fetch one message by id.', flags: [] },
+    { name: 'emails list', summary: 'List messages, newest first.', flags: ['status', 'limit', 'to'] },
+    { name: 'emails cancel', summary: 'Cancel a scheduled or queued message.', flags: [] },
+    {
+        name: 'emails explain',
+        summary: 'Why a message ended the way it did, with the fix as callable steps.',
+        flags: [],
+    },
+    { name: 'domains list', summary: 'List sending domains and their status.', flags: [] },
+    { name: 'domains verify', summary: 'Re-check a domain\'s DNS records.', flags: [] },
+    {
+        name: 'webhooks listen',
+        summary: 'Verify deliveries locally and forward them to your app with the same headers and bytes.',
+        flags: ['secret', 'forward-to', 'port', 'verify-only'],
+    },
+    {
+        name: 'receiving listen',
+        summary: 'Stream inbound messages as NDJSON, one JSON object per line.',
+        flags: ['interval', 'limit', 'to', 'once'],
+    },
+    { name: 'limits kill', summary: 'Stop a key sending, immediately.', flags: ['reason'] },
+    {
+        name: 'limits resume',
+        // W4.1: the command stays, because the refusal is the useful answer — it
+        // names who can. An API key is refused here however it is scoped.
+        summary: 'Undo a kill switch. A person signed in to the console does this; a key is refused.',
+        flags: [],
+    },
+    { name: 'trust standing', summary: 'This account\'s standing and the reasons behind it.', flags: [] },
+    {
+        name: 'doctor',
+        summary: 'Check credentials, reachability, kill switch, budget, domains and standing.',
+        flags: [],
+    },
+    { name: 'profile list', summary: 'Show configured profiles and which is current.', flags: [] },
+    { name: 'profile use', summary: 'Switch the current profile.', flags: [] },
+    {
+        name: 'profile set',
+        summary: 'Create or update a profile. The key is stored 0600 and never printed back.',
+        flags: ['api-key', 'base-url'],
+    },
+    { name: 'completions', summary: 'Print a completion script for bash, zsh or fish.', flags: [] },
+];
+export function flagsFor(command) {
+    const spec = COMMANDS.find((entry) => entry.name === command);
+    return new Set([...GLOBAL_FLAGS, ...(spec?.flags ?? [])]);
+}
+export function helpText() {
+    const width = Math.max(...COMMANDS.map((entry) => entry.name.length));
+    return [
+        'agentisend — the AgentiSend CLI.',
+        '',
+        'Usage: agentisend <command> [options]',
+        '',
+        'Commands:',
+        ...COMMANDS.map((entry) => `  ${entry.name.padEnd(width)}  ${entry.summary}`),
+        '',
+        'Global options:',
+        '  --json           Print JSON. On by default when stdout is not a terminal.',
+        '  --profile <name> Use a saved profile instead of the current one.',
+        '  --api-key <key>  Use this key for one command.',
+        '  --base-url <url> Point at a different API.',
+        '',
+        'Credentials: --api-key, then AGENTISEND_API_KEY, then the profile.',
+    ].join('\n');
+}
+const SHELLS = ['bash', 'zsh', 'fish'];
+export function isShell(value) {
+    return SHELLS.includes(value);
+}
+/**
+ * Completions generated from the same table — a completion that offers a flag
+ * the command rejects is worse than none, because it is trusted.
+ */
+export function completionScript(shell) {
+    const groups = [...new Set(COMMANDS.map((entry) => entry.name.split(' ')[0]))];
+    const subcommands = new Map();
+    for (const entry of COMMANDS) {
+        const [group, sub] = entry.name.split(' ');
+        if (sub)
+            subcommands.set(group, [...(subcommands.get(group) ?? []), sub]);
+    }
+    const allFlags = [...new Set([...GLOBAL_FLAGS, ...COMMANDS.flatMap((entry) => entry.flags)])]
+        .map((name) => `--${name}`)
+        .join(' ');
+    if (shell === 'fish') {
+        return [
+            '# agentisend completions (fish). Add with: agentisend completions fish | source',
+            ...groups.map((group) => `complete -c agentisend -n "__fish_use_subcommand" -a "${group}"`),
+            ...[...subcommands.entries()].map(([group, subs]) => `complete -c agentisend -n "__fish_seen_subcommand_from ${group}" -a "${subs.join(' ')}"`),
+            ...allFlags
+                .split(' ')
+                .map((flag) => `complete -c agentisend -l "${flag.slice(2)}"`),
+            '',
+        ].join('\n');
+    }
+    const caseArms = [...subcommands.entries()]
+        .map(([group, subs]) => `      ${group}) words="${subs.join(' ')}" ;;`)
+        .join('\n');
+    return [
+        `# agentisend completions (${shell}). Add with: agentisend completions ${shell} >> ~/.${shell}rc`,
+        shell === 'zsh' ? 'autoload -U +X bashcompinit && bashcompinit' : '',
+        '_agentisend_complete() {',
+        '  local cur prev words',
+        '  cur="${COMP_WORDS[COMP_CWORD]}"',
+        '  prev="${COMP_WORDS[COMP_CWORD-1]}"',
+        `  words="${groups.join(' ')}"`,
+        '  if [ "$COMP_CWORD" -gt 1 ]; then',
+        '    case "${COMP_WORDS[1]}" in',
+        caseArms,
+        `      *) words="${allFlags}" ;;`,
+        '    esac',
+        '  fi',
+        '  case "$cur" in',
+        `    -*) words="${allFlags}" ;;`,
+        '  esac',
+        '  COMPREPLY=( $(compgen -W "$words" -- "$cur") )',
+        '}',
+        'complete -F _agentisend_complete agentisend',
+        '',
+    ]
+        .filter((line) => line !== '')
+        .join('\n');
+}
+//# sourceMappingURL=commands.js.map

package/dist/cli/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAgBA,iCAAiC;AACjC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAE1F,MAAM,CAAC,MAAM,QAAQ,GAAkB;IACrC;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,iFAAiF;QAC1F,KAAK,EAAE;YACL,MAAM;YACN,IAAI;YACJ,IAAI;YACJ,KAAK;YACL,UAAU;YACV,SAAS;YACT,MAAM;YACN,MAAM;YACN,WAAW;YACX,WAAW;YACX,KAAK;YACL,cAAc;YACd,iBAAiB;SAClB;KACF;IACD,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,EAAE;IACtE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,8BAA8B,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;IAClG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,uCAAuC,EAAE,KAAK,EAAE,EAAE,EAAE;IACtF;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,qEAAqE;QAC9E,KAAK,EAAE,EAAE;KACV;IACD,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,wCAAwC,EAAE,KAAK,EAAE,EAAE,EAAE;IACtF,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mCAAmC,EAAE,KAAK,EAAE,EAAE,EAAE;IACnF;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EACL,yFAAyF;QAC3F,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC;KACvD;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,8DAA8D;QACvE,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC;KAC3C;IACD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kCAAkC,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE;IACvF;QACE,IAAI,EAAE,eAAe;QACrB,yEAAyE;QACzE,kEAAkE;QAClE,OAAO,EAAE,oFAAoF;QAC7F,KAAK,EAAE,EAAE;KACV;IACD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,qDAAqD,EAAE,KAAK,EAAE,EAAE,EAAE;IACrG;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,6EAA6E;QACtF,KAAK,EAAE,EAAE;KACV;IACD,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,gDAAgD,EAAE,KAAK,EAAE,EAAE,EAAE;IAC9F,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,6BAA6B,EAAE,KAAK,EAAE,EAAE,EAAE;IAC1E;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,4EAA4E;QACrF,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;KAC/B;IACD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kDAAkD,EAAE,KAAK,EAAE,EAAE,EAAE;CAChG,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAC9D,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,OAAO;QACL,kCAAkC;QAClC,EAAE;QACF,uCAAuC;QACvC,EAAE;QACF,WAAW;QACX,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7E,EAAE;QACF,iBAAiB;QACjB,6EAA6E;QAC7E,oEAAoE;QACpE,kDAAkD;QAClD,8CAA8C;QAC9C,EAAE;QACF,oEAAoE;KACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAGhD,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,OAAQ,MAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,GAAG;YAAE,WAAW,CAAC,GAAG,CAAC,KAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,KAAM,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC1F,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO;YACL,iFAAiF;YACjF,GAAG,MAAM,CAAC,GAAG,CACX,CAAC,KAAK,EAAE,EAAE,CAAC,yDAAyD,KAAK,GAAG,CAC7E;YACD,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAC/B,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAChB,0DAA0D,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAC5F;YACD,GAAG,QAAQ;iBACR,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;YAChE,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,SAAS,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO;QACL,6BAA6B,KAAK,uCAAuC,KAAK,UAAU,KAAK,IAAI;QACjG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,EAAE;QACpE,0BAA0B;QAC1B,wBAAwB;QACxB,mCAAmC;QACnC,sCAAsC;QACtC,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAC/B,oCAAoC;QACpC,gCAAgC;QAChC,QAAQ;QACR,mBAAmB,QAAQ,MAAM;QACjC,UAAU;QACV,MAAM;QACN,kBAAkB;QAClB,kBAAkB,QAAQ,MAAM;QAChC,QAAQ;QACR,kDAAkD;QAClD,GAAG;QACH,6CAA6C;QAC7C,EAAE;KACH;SACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/cli/config.d.ts

@@ -0,0 +1,31 @@
+export interface Profile {
+    api_key: string;
+    base_url?: string;
+}
+export interface CliConfig {
+    current: string;
+    profiles: Record<string, Profile>;
+}
+export declare function configPath(env?: NodeJS.ProcessEnv): string;
+export declare function readConfig(path?: string): CliConfig;
+export declare function writeConfig(config: CliConfig, path?: string): void;
+export interface ResolvedCredentials {
+    apiKey: string | null;
+    baseUrl: string | undefined;
+    /** Where the key came from, for `doctor` to say. */
+    source: 'flag' | 'env' | 'profile' | 'none';
+    profile: string;
+}
+/**
+ * Precedence: an explicit flag, then the environment, then the named profile.
+ * Explicit beats ambient, always — the whole point of typing it.
+ */
+export declare function resolveCredentials(input: {
+    apiKeyFlag?: string | undefined;
+    baseUrlFlag?: string | undefined;
+    profileFlag?: string | undefined;
+    env?: NodeJS.ProcessEnv;
+    config?: CliConfig;
+}): ResolvedCredentials;
+/** Never print a key. The prefix is enough to tell two keys apart. */
+export declare function keyPreview(apiKey: string): string;

package/dist/cli/config.js

@@ -0,0 +1,73 @@
+/**
+ * M4.16 — profiles.
+ *
+ * One machine, several accounts: a test account, a customer's, production.
+ * The failure this prevents is the obvious one — sending live mail because the
+ * environment still had last week's key in it. A profile names the key AND the
+ * base URL together, so switching is one word and cannot half-apply.
+ *
+ * Keys are stored in a file the CLI creates with 0600, and never printed back:
+ * `profile show` prints the prefix only.
+ */
+import { chmodSync, mkdirSync, readFileSync, writeFileSync, existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+const EMPTY = { current: 'default', profiles: {} };
+export function configPath(env = process.env) {
+    const override = env['AGENTISEND_CONFIG'];
+    if (override)
+        return override;
+    return join(env['AGENTISEND_CONFIG_HOME'] ?? homedir(), '.agentisend', 'config.json');
+}
+export function readConfig(path = configPath()) {
+    if (!existsSync(path))
+        return { ...EMPTY, profiles: {} };
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf8'));
+        return {
+            current: parsed.current ?? 'default',
+            profiles: parsed.profiles ?? {},
+        };
+    }
+    catch {
+        // A corrupt config must not make the CLI unusable — it makes it
+        // unconfigured, which `doctor` can then explain.
+        return { ...EMPTY, profiles: {} };
+    }
+}
+export function writeConfig(config, path = configPath()) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(config, null, 2)}\n`, { mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // Some filesystems refuse chmod; the file is still written with the mode
+        // above where the platform honours it.
+    }
+}
+/**
+ * Precedence: an explicit flag, then the environment, then the named profile.
+ * Explicit beats ambient, always — the whole point of typing it.
+ */
+export function resolveCredentials(input) {
+    const env = input.env ?? process.env;
+    const config = input.config ?? readConfig(configPath(env));
+    const name = input.profileFlag ?? env['AGENTISEND_PROFILE'] ?? config.current;
+    const profile = config.profiles[name];
+    const baseUrl = input.baseUrlFlag ?? env['AGENTISEND_BASE_URL'] ?? profile?.base_url;
+    if (input.apiKeyFlag)
+        return { apiKey: input.apiKeyFlag, baseUrl, source: 'flag', profile: name };
+    const fromEnv = env['AGENTISEND_API_KEY'];
+    if (fromEnv)
+        return { apiKey: fromEnv, baseUrl, source: 'env', profile: name };
+    if (profile?.api_key) {
+        return { apiKey: profile.api_key, baseUrl, source: 'profile', profile: name };
+    }
+    return { apiKey: null, baseUrl, source: 'none', profile: name };
+}
+/** Never print a key. The prefix is enough to tell two keys apart. */
+export function keyPreview(apiKey) {
+    return `${apiKey.slice(0, 11)}…`;
+}
+//# sourceMappingURL=config.js.map

package/dist/cli/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAY1C,MAAM,KAAK,GAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAE9D,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC1C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,OAAO,EAAE,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAI,GAAG,UAAU,EAAE;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAuB,CAAC;QAC5E,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,SAAS;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;SAChC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,iDAAiD;QACjD,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAiB,EAAE,IAAI,GAAG,UAAU,EAAE;IAChE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,uCAAuC;IACzC,CAAC;AACH,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAMlC;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;IAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,qBAAqB,CAAC,IAAI,OAAO,EAAE,QAAQ,CAAC;IAErF,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClG,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC1C,IAAI,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/E,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;AACnC,CAAC"}

package/dist/cli/doctor.d.ts

@@ -0,0 +1,36 @@
+/**
+ * M4.16 — `agentisend doctor`.
+ *
+ * The command you run when something is wrong and you do not yet know what.
+ * It answers, in order, the questions that actually block a first send: is
+ * there a key, does it reach the API, is it paused, is there budget left, is
+ * any domain verified. Each check reports pass/fail AND what to do — a
+ * diagnostic that says "domains: 0" and nothing else has told you the symptom
+ * you already knew.
+ *
+ * It makes only read calls. `doctor` must be safe to run on production while
+ * panicking.
+ */
+import type { AgentiSend } from '../client.js';
+export interface DoctorCheck {
+    name: string;
+    ok: boolean;
+    detail: string;
+    fix?: string;
+}
+export interface DoctorReport {
+    ok: boolean;
+    base_url: string;
+    profile: string;
+    key_source: string;
+    checks: DoctorCheck[];
+}
+export interface DoctorInput {
+    client: AgentiSend | null;
+    baseUrl: string;
+    profile: string;
+    keySource: string;
+    configPath: string;
+}
+export declare function runDoctor(input: DoctorInput): Promise<DoctorReport>;
+export declare function renderDoctor(report: DoctorReport): string;