@curviate/cli 0.15.1 → 0.16.0

package/CHANGELOG.md

@@ -6,6 +6,70 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 Versioning follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html):
 a new command or flag is a minor; a breaking command/flag/exit-code change is a major; a fix is a patch.
 
+## [0.16.0] - 2026-07-17
+
+A minor release adding the `inboxes` command group. No breaking changes,
+built against `@curviate/sdk` 0.16.0.
+
+### Added
+
+- **New `inboxes` command group (Beta), the reply-as-a-page workflow.**
+  `inboxes list [--kind personal|company] [--company-id <id>]` discovers the
+  account's personal inbox plus, when the company product is attached, one
+  entry per company page (id like `COMPANY_83734124_PRIMARY`), a flat,
+  non-paginated read (rejects `--all`). `inboxes chats <inbox_id> [--limit]
+  [--cursor] [--all]` lists a single inbox's conversations, cursor-paginated
+  like every other list command. Every returned chat id is send-ready: reply
+  with the existing `message send <chat_id> "<text>"`. A company inbox's
+  chat id (e.g. `COMPANY_83734124_2-…`) sends AS THE PAGE, no separate flag
+  needed. Company inboxes are reply-only and cannot start a new conversation.
+  Distinct from the existing `inbox` command group (a friendlier front door
+  to the account's own message-thread inbox: `messaging.listChats`/`getChat`/
+  `markChatRead`/`messages`). `inboxes` (plural) wraps the newer
+  inbox-*discovery* resource, so both groups coexist without a naming
+  collision.
+- **`PREMIUM_CONFLICT` and `REAUTH_REQUIRED` mapped to exit code 8**
+  (account/connection state) in the error to exit table, the two new SDK
+  error codes surfacing from `account link`'s underlying `auth.intent` call:
+  a seat resolving to both individual-Premium tiers at once, and a
+  scope-changing reconnect attempted with a cookie instead of credentials.
+- **`message send` names the acting identity on a company-page reply.**
+  When the response's `sent_as.kind` is `"company"`, the default output
+  (not just `--verbose --json`) now prints `Sent as <name> (company page)`
+  to stderr right after the send (the data itself was already on the
+  response; this makes it visible without inspecting raw JSON). A personal
+  send prints nothing new.
+- **`message send --preview` echoes the acting identity for a `COMPANY_`
+  chat id.** Prints `Will send as a company page` to stderr, derived purely
+  from the chat id's own prefix so `--preview` still makes zero network
+  calls. A personal chat id prints nothing new.
+- **`--limit` on `inbox list`, `inbox messages`, and `inboxes chats` is now
+  validated client-side against the server's accepted range (1-25).** A
+  value outside that range now exits 2 with `error: --limit must be
+  between 1 and 25 (default 20); got <value>.` before any network call,
+  instead of round-tripping to the server for the same 400. `--help` on
+  all three now states the range explicitly.
+
+## [0.15.2] - 2026-07-12
+
+A patch release fixing an interactive-terminal hang on `account link`.
+
+### Fixed
+
+- **`account link --password-stdin` / `--li-at-stdin` no longer hang on an
+  interactive terminal.** These flags previously read stdin to EOF, which a
+  human paste + Enter never produces on a TTY — the command hung
+  indefinitely and the pasted secret echoed on-screen. The read is now
+  mode-aware: piped/redirected stdin (non-TTY) is unchanged (read to EOF,
+  trimmed); an interactive TTY now prints a single cue line, then reads one
+  no-echo line — paste + Enter resolves immediately, including a paste whose
+  clipboard content ends in a trailing newline. An empty line still falls
+  through to the normal resolution order (env var, then the password
+  prompt / `li_at` fail-fast).
+- **`--preview` never blocks on a terminal read.** Under `--preview`, the
+  interactive stdin read is suppressed entirely, matching every other
+  preview-mode command.
+
 ## [0.15.1] - 2026-07-11
 
 A patch release of agent-experience (AX) and developer-experience (DX)

package/dist/{account-FM473HEK.js → account-ZDIZAXVI.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-U7Y4EXHT.js";
 import {
   readlineSync
-} from "./chunk-MKXA2LAR.js";
+} from "./chunk-H4KV7MIN.js";
 import {
   AUTH_NEEDED
-} from "./chunk-ZE7QGR3F.js";
+} from "./chunk-M6UDWFHX.js";
 import {
   buildPreviewOutput
 } from "./chunk-R3VLWLVV.js";
@@ -37,16 +37,33 @@ import {
 import { defineCommand } from "citty";
 
 // src/lib/credential-resolve.ts
+var STDIN_TTY_CUE = "Reading secret from stdin (paste + Enter): ";
+function defaultReadSingleLine() {
+  return readlineSync("", { mask: true });
+}
 async function resolveSecret(params) {
   if (params.flagValue !== void 0 && params.flagValue !== "") {
     return params.flagValue;
   }
   if (params.stdinRequested) {
-    const reader = params.readStdin ?? defaultReadStdin;
-    const raw = await reader();
-    const trimmed = raw.trim();
-    if (trimmed !== "") {
-      return trimmed;
+    if (params.isTTY) {
+      const stdinReadAllowed = params.allowInteractiveStdinRead ?? params.allowInteractive;
+      if (stdinReadAllowed !== false) {
+        params.out.stderr.write(STDIN_TTY_CUE);
+        const reader = params.readSingleLine ?? defaultReadSingleLine;
+        const raw = await reader(STDIN_TTY_CUE);
+        const trimmed = raw.trim();
+        if (trimmed !== "") {
+          return trimmed;
+        }
+      }
+    } else {
+      const reader = params.readStdin ?? defaultReadStdin;
+      const raw = await reader();
+      const trimmed = raw.trim();
+      if (trimmed !== "") {
+        return trimmed;
+      }
     }
   }
   const envValue = process.env[params.envVar];
@@ -204,7 +221,7 @@ function resolveOutputOpts(flags) {
 async function handleError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }
@@ -262,12 +279,20 @@ async function buildAuthBody(flags, ctx) {
       flagValue: flags.password,
       stdinRequested: flags["password-stdin"],
       envVar: "CURVIATE_LINKEDIN_PASSWORD",
+      isTTY: ctx.isTTY,
       readStdin: ctx.readStdin,
+      readSingleLine: ctx.readSingleLine,
       required: true,
-      // The interactive prompt/fail-fast only engages once --email is present
-      // (nothing meaningful to prompt toward yet otherwise) — and never
-      // under --preview (a client-side render must not prompt or exit).
+      // The masked-prompt/fail-fast tiers (3/4) only engage once --email is
+      // present (nothing meaningful to prompt toward yet otherwise) — and
+      // never under --preview (a client-side render must not prompt or
+      // exit).
       allowInteractive: !ctx.previewMode && Boolean(flags.email),
+      // Tier-1b's own gate is preview-only, deliberately NOT email-gated: a
+      // user who passed --password-stdin on a TTY gets the read regardless
+      // of --email — an email-less body still fails downstream validation,
+      // as expected, rather than the flag being silently ignored.
+      allowInteractiveStdinRead: !ctx.previewMode,
       failMessage: "no password \u2014 pass --password, --password-stdin, or set CURVIATE_LINKEDIN_PASSWORD",
       prompt: { isTTY: ctx.isTTY, readline: ctx.readline, promptText: "LinkedIn password: " },
       out: ctx.out
@@ -284,7 +309,9 @@ async function buildAuthBody(flags, ctx) {
       flagValue: flags["li-at"],
       stdinRequested: flags["li-at-stdin"],
       envVar: "CURVIATE_LINKEDIN_LI_AT",
+      isTTY: ctx.isTTY,
       readStdin: ctx.readStdin,
+      readSingleLine: ctx.readSingleLine,
       required: true,
       allowInteractive: !ctx.previewMode,
       failMessage: "no li_at \u2014 pass --li-at, --li-at-stdin, or set CURVIATE_LINKEDIN_LI_AT",
@@ -330,6 +357,13 @@ function resolveCredentialIO(io) {
     isOutputTTY: io.isOutputTTY ?? (process.stdout.isTTY ?? false),
     readline: io.readline ?? readlineSync,
     readStdin: io.readStdin ?? defaultReadStdin,
+    // Always the masked, no-echo raw-mode branch — never a bare readlineSync
+    // pass-through, which would default mask to false and echo the secret.
+    // Prompt is deliberately EMPTY, not `cue`: credential-resolve.ts already
+    // wrote STDIN_TTY_CUE to out.stderr before calling this reader, and
+    // readlineSync itself writes its `prompt` argument to stderr too — the
+    // cue text would otherwise print twice on a real terminal.
+    readSingleLine: io.readSingleLine ?? (() => readlineSync("", { mask: true })),
     sleep: io.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms))),
     now: io.now ?? (() => Date.now()),
     open: io.open ?? defaultOpen
@@ -464,6 +498,7 @@ async function runAccountLink(client, flags, out, io = {}) {
     isTTY: resolvedIo.isTTY,
     readline: resolvedIo.readline,
     readStdin: resolvedIo.readStdin,
+    readSingleLine: resolvedIo.readSingleLine,
     previewMode: flags.preview ?? false
   });
   const body = {

package/dist/chunk-H4KV7MIN.js

@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+
+// src/lib/readline.ts
+import { createInterface } from "readline";
+async function readlineSync(prompt, opts = {}) {
+  const stdin = opts.stdin ?? process.stdin;
+  return new Promise((resolve, reject) => {
+    process.stderr.write(prompt);
+    if (opts.mask && typeof stdin.setRawMode === "function") {
+      stdin.setRawMode(true);
+      stdin.resume();
+      stdin.setEncoding("utf8");
+      let input = "";
+      const onData = (chunk) => {
+        for (let i = 0; i < chunk.length; i++) {
+          const char = chunk[i];
+          if (char === "\r" || char === "\n") {
+            stdin.setRawMode?.(false);
+            stdin.pause();
+            stdin.removeListener("data", onData);
+            process.stderr.write("\n");
+            resolve(input);
+            return;
+          } else if (char === "") {
+            stdin.setRawMode?.(false);
+            stdin.pause();
+            stdin.removeListener("data", onData);
+            reject(new Error("Interrupted."));
+            return;
+          } else if (char === "\x7F" || char === "\b") {
+            input = input.slice(0, -1);
+          } else {
+            input += char;
+          }
+        }
+      };
+      stdin.on("data", onData);
+    } else {
+      const rl = createInterface({
+        input: stdin,
+        output: void 0,
+        // suppress default echo (prompt already on stderr)
+        terminal: false
+      });
+      rl.once("line", (line) => {
+        rl.close();
+        resolve(line.trim());
+      });
+      rl.once("error", reject);
+      rl.once("close", () => resolve(""));
+    }
+  });
+}
+
+export {
+  readlineSync
+};

package/dist/{chunk-ZE7QGR3F.js → chunk-M6UDWFHX.js}

@@ -34,6 +34,8 @@ var EXIT_CODE_MAP = {
   ACCOUNT_ALREADY_LINKED: 8,
   LINKEDIN_OPERATION_NOT_SUPPORTED: 8,
   CONNECTION_REQUEST_CONFLICT: 8,
+  PREMIUM_CONFLICT: 8,
+  REAUTH_REQUIRED: 8,
   // Checkpoint flow (9)
   CHECKPOINT_NOT_FOUND: 9,
   CHECKPOINT_EXPIRED: 9,

package/dist/cli.js

@@ -250,24 +250,25 @@ var main = defineCommand({
   // Subcommand registry — names and descriptions are static for help rendering;
   // the handler implementation is loaded lazily on first invocation.
   subCommands: {
-    login: () => import("./login-MFB45PVZ.js").then((m) => m.loginCommand),
+    login: () => import("./login-GDLWR542.js").then((m) => m.loginCommand),
     config: () => import("./config-P5CPF5WC.js").then((m) => m.configCommand),
     // ---------------------------------------------------------------------------
     // Noun groups — lazy-loaded on first invocation.
     // ---------------------------------------------------------------------------
-    profile: () => import("./profile-57RJEL7H.js").then((m) => m.profileCommand),
-    company: () => import("./company-IYTMW64G.js").then((m) => m.companyCommand),
-    job: () => import("./job-YARGTHUY.js").then((m) => m.jobCommand),
-    connect: () => import("./connect-TTJHMBUP.js").then((m) => m.connectCommand),
-    search: () => import("./search-RD4TXNV7.js").then((m) => m.searchCommand),
-    inbox: () => import("./inbox-EOOGJ3ZN.js").then((m) => m.inboxCommand),
-    message: () => import("./message-2DLIQIE6.js").then((m) => m.messageCommand),
-    post: () => import("./post-GRIJ7X52.js").then((m) => m.postCommand),
-    comment: () => import("./comment-NCDXERSI.js").then((m) => m.commentCommand),
-    account: () => import("./account-FM473HEK.js").then((m) => m.accountCommand),
-    webhook: () => import("./webhook-CEP7SGP5.js").then((m) => m.webhookCommand),
-    "sales-nav": () => import("./sales-nav-NUMEYOEO.js").then((m) => m.salesNavCommand),
-    recruiter: () => import("./recruiter-CTYH7AYG.js").then((m) => m.recruiterCommand)
+    profile: () => import("./profile-JUTGTPES.js").then((m) => m.profileCommand),
+    company: () => import("./company-XU7TZ66L.js").then((m) => m.companyCommand),
+    job: () => import("./job-QLSGNDGW.js").then((m) => m.jobCommand),
+    connect: () => import("./connect-7OWBNGHU.js").then((m) => m.connectCommand),
+    search: () => import("./search-5U5U5MTT.js").then((m) => m.searchCommand),
+    inbox: () => import("./inbox-VVRQ7SOX.js").then((m) => m.inboxCommand),
+    inboxes: () => import("./inboxes-MTPWLP5F.js").then((m) => m.inboxesCommand),
+    message: () => import("./message-IKKOI6CZ.js").then((m) => m.messageCommand),
+    post: () => import("./post-DH4RDYKZ.js").then((m) => m.postCommand),
+    comment: () => import("./comment-COJY6HQP.js").then((m) => m.commentCommand),
+    account: () => import("./account-ZDIZAXVI.js").then((m) => m.accountCommand),
+    webhook: () => import("./webhook-UWIOVWVV.js").then((m) => m.webhookCommand),
+    "sales-nav": () => import("./sales-nav-NUCYJ4S3.js").then((m) => m.salesNavCommand),
+    recruiter: () => import("./recruiter-WEZZVZN3.js").then((m) => m.recruiterCommand)
   },
   async run() {
     const { runMain } = await import("citty");

package/dist/{comment-NCDXERSI.js → comment-COJY6HQP.js}

@@ -70,7 +70,7 @@ function buildListQuery(flags) {
 async function handleSdkError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }

package/dist/{company-IYTMW64G.js → company-XU7TZ66L.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
+import {
+  resolveIdentifier
+} from "./chunk-DMQZEPQE.js";
 import {
   slimCompany,
   slimSearchJobs,
   slimSearchPeople,
   slimSearchPosts
 } from "./chunk-45KHSWCV.js";
-import {
-  resolveIdentifier
-} from "./chunk-DMQZEPQE.js";
 import {
   pageDelayFromFlags,
   streamAll
@@ -61,7 +61,7 @@ async function resolveCompanyId(ns, raw) {
 async function handleSdkError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }

package/dist/{connect-TTJHMBUP.js → connect-7OWBNGHU.js}

@@ -2,15 +2,15 @@
 import {
   buildPreviewOutput
 } from "./chunk-R3VLWLVV.js";
+import {
+  resolveIdentifier
+} from "./chunk-DMQZEPQE.js";
 import {
   slimInviteReceived,
   slimInviteReceivedItem,
   slimInviteSent,
   slimInviteSentItem
 } from "./chunk-45KHSWCV.js";
-import {
-  resolveIdentifier
-} from "./chunk-DMQZEPQE.js";
 import {
   pageDelayFromFlags,
   streamAll
@@ -82,7 +82,7 @@ async function runConnectSend(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -120,7 +120,7 @@ async function runConnectSent(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -158,7 +158,7 @@ async function runConnectReceived(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -187,7 +187,7 @@ async function runConnectAccept(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -216,7 +216,7 @@ async function runConnectDecline(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -245,7 +245,7 @@ async function runConnectCancel(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }

package/dist/{exit-codes-SL3GQF7W.js → exit-codes-63JE5GM5.js}

@@ -3,7 +3,7 @@ import {
   AUTH_NEEDED,
   EXIT_CODE_MAP,
   getExitCode
-} from "./chunk-ZE7QGR3F.js";
+} from "./chunk-M6UDWFHX.js";
 export {
   AUTH_NEEDED,
   EXIT_CODE_MAP,

package/dist/{inbox-EOOGJ3ZN.js → inbox-VVRQ7SOX.js}

@@ -71,10 +71,20 @@ function validateIsoZTimestamp(value, flagName, out) {
     process.exit(2);
   }
 }
+function validateLimitRange(raw, out) {
+  if (raw === void 0) return;
+  const n = Number(raw);
+  if (!Number.isFinite(n)) return;
+  if (n < 1 || n > 25) {
+    out.stderr.write(`error: --limit must be between 1 and 25 (default 20); got ${raw}.
+`);
+    process.exit(2);
+  }
+}
 async function handleSdkError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }
@@ -89,6 +99,7 @@ async function runInboxList(client, flags, out) {
   const all = flags.all ?? false;
   const maxPages = flags["max-pages"] ? parseInt(flags["max-pages"], 10) : 100;
   const params = buildPaginationParams(flags);
+  validateLimitRange(flags.limit, out);
   if (flags.unread !== void 0) {
     params.unread = flags.unread;
   }
@@ -151,6 +162,7 @@ async function runInboxMessages(client, flags, out) {
   const all = flags.all ?? false;
   const maxPages = flags["max-pages"] ? parseInt(flags["max-pages"], 10) : 100;
   const params = buildPaginationParams(flags);
+  validateLimitRange(flags.limit, out);
   if (flags.before !== void 0) {
     validateIsoZTimestamp(flags.before, "before", out);
     params.before = flags.before;
@@ -181,6 +193,7 @@ var inboxListCommand = defineCommand({
   meta: { name: "list", description: "List inbox chats." },
   args: {
     ...GLOBAL_FLAGS,
+    limit: { type: "string", description: "Number of items to return per page (1-25, default 20)." },
     unread: {
       type: "boolean",
       description: "Show unread chats only (--no-unread for read-only; omit for all)."
@@ -259,6 +272,7 @@ var inboxMessagesCommand = defineCommand({
   meta: { name: "messages", description: "List messages in a chat. A very recent send/delete may take a few minutes to appear or clear here (LinkedIn-side indexing); `message get <chat_id> <message_id>` reflects it immediately." },
   args: {
     ...GLOBAL_FLAGS,
+    limit: { type: "string", description: "Number of items to return per page (1-25, default 20)." },
     chatId: { type: "positional", description: "Chat ID." },
     before: {
       type: "string",

package/dist/inboxes-MTPWLP5F.js

@@ -0,0 +1,199 @@
+#!/usr/bin/env node
+import {
+  pageDelayFromFlags,
+  streamAll
+} from "./chunk-EEMJDJ4W.js";
+import {
+  createClient,
+  renderError,
+  renderSuccess,
+  renderUnexpectedError,
+  resolveEffectiveConfig
+} from "./chunk-M33MI53G.js";
+import {
+  GLOBAL_FLAGS,
+  READ_SINGLE_FLAGS
+} from "./chunk-TMU3CSPR.js";
+
+// src/commands/inboxes.ts
+import { defineCommand } from "citty";
+function buildOutputStreams() {
+  return {
+    stdout: { write: (s) => process.stdout.write(s) },
+    stderr: { write: (s) => process.stderr.write(s) }
+  };
+}
+function requireAccount(account, out) {
+  if (!account) {
+    out.stderr.write("error: --account is required for this command. Set it via --account, CURVIATE_ACCOUNT, or `curviate config set-account`.\n");
+    process.exit(2);
+  }
+  return account;
+}
+function rejectPreviewOnRead(preview, out) {
+  if (preview) {
+    out.stderr.write("error: --preview is only valid on write commands (mutations). Reads just run.\n");
+    process.exit(2);
+  }
+}
+function rejectAllOnNonPaginated(all, out) {
+  if (all) {
+    out.stderr.write("error: --all is not supported on non-paginated commands.\n");
+    process.exit(2);
+  }
+}
+function resolveOutputOpts(flags) {
+  return {
+    json: (flags.json ?? false) || !process.stdout.isTTY,
+    isTTY: process.stdout.isTTY ?? false,
+    fields: flags.fields,
+    verbose: flags.verbose ?? false
+  };
+}
+async function handleSdkError(err, outOpts, out) {
+  const { CurviateError } = await import("@curviate/sdk");
+  if (err instanceof CurviateError) {
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
+    renderError(err, outOpts, out);
+    process.exit(getExitCode(err.code));
+  }
+  renderUnexpectedError(err, out);
+  process.exit(1);
+}
+function validateLimitRange(raw, out) {
+  if (raw === void 0) return;
+  const n = Number(raw);
+  if (!Number.isFinite(n)) return;
+  if (n < 1 || n > 25) {
+    out.stderr.write(`error: --limit must be between 1 and 25 (default 20); got ${raw}.
+`);
+    process.exit(2);
+  }
+}
+async function runInboxesList(client, flags, out) {
+  rejectPreviewOnRead(flags.preview, out);
+  rejectAllOnNonPaginated(flags.all, out);
+  const accountId = requireAccount(flags.account, out);
+  const ns = client.account(accountId);
+  const outOpts = resolveOutputOpts(flags);
+  const params = {};
+  if (flags.kind) params["kind"] = flags.kind;
+  if (flags["company-id"]) params["company_id"] = flags["company-id"];
+  try {
+    const result = await ns.inboxes.list(params);
+    renderSuccess(result, outOpts, out);
+  } catch (err) {
+    await handleSdkError(err, outOpts, out);
+  }
+}
+async function runInboxesChats(client, flags, out) {
+  rejectPreviewOnRead(flags.preview, out);
+  const accountId = requireAccount(flags.account, out);
+  const inboxId = flags.inboxId ?? "";
+  const ns = client.account(accountId);
+  const outOpts = resolveOutputOpts(flags);
+  const all = flags.all ?? false;
+  const maxPages = flags["max-pages"] ? parseInt(flags["max-pages"], 10) : 100;
+  validateLimitRange(flags.limit, out);
+  const params = {};
+  if (flags.limit) params["limit"] = parseInt(flags.limit, 10);
+  if (flags.cursor) params["cursor"] = flags.cursor;
+  try {
+    if (all) {
+      const fn = (p) => ns.inboxes.listChats(inboxId, p);
+      for await (const item of streamAll(fn, params, {
+        maxPages,
+        out,
+        pageDelayMs: pageDelayFromFlags(flags)
+      })) {
+        out.stdout.write(JSON.stringify(item) + "\n");
+      }
+    } else {
+      const result = await ns.inboxes.listChats(inboxId, params);
+      renderSuccess(result, outOpts, out);
+    }
+  } catch (err) {
+    await handleSdkError(err, outOpts, out);
+  }
+}
+var inboxesListCommand = defineCommand({
+  meta: { name: "list", description: "Discover the account's inboxes (personal + company pages)." },
+  args: {
+    // Single-object-shaped read: READ_SINGLE_FLAGS omits pagination flags
+    // (this response carries no cursor — every inbox comes back in one call).
+    ...READ_SINGLE_FLAGS,
+    kind: {
+      type: "string",
+      description: "Filter to only personal or only company inboxes: personal | company. Omit to list both."
+    },
+    "company-id": {
+      type: "string",
+      description: "Filter to the one company inbox correlated to this managed-company id (e.g. 112013061)."
+    }
+  },
+  async run({ args }) {
+    const flags = args;
+    const cfg = await resolveEffectiveConfig({
+      apiKey: flags["api-key"],
+      baseUrl: flags["base-url"],
+      timeout: flags.timeout,
+      account: flags.account,
+      profile: flags.profile
+    });
+    if (!cfg.apiKey) {
+      process.stderr.write("error: no API key \u2014 run `curviate login` or pass --api-key.\n");
+      process.exit(3);
+    }
+    const client = createClient({ apiKey: cfg.apiKey, baseUrl: cfg.baseUrl, timeout: cfg.timeout });
+    const out = buildOutputStreams();
+    await runInboxesList(client, { ...flags, account: flags.account ?? cfg.account }, out);
+  }
+});
+var inboxesChatsCommand = defineCommand({
+  meta: {
+    name: "chats",
+    description: "List an inbox's conversations. Each chat id is send-ready: reply with `message send <chat_id> \"<text>\"`. A company inbox's chat id (e.g. COMPANY_83734124_2-\u2026) sends AS THE PAGE, no separate flag needed. Company inboxes are reply-only and cannot start a new conversation."
+  },
+  args: {
+    ...GLOBAL_FLAGS,
+    limit: { type: "string", description: "Number of items to return per page (1-25, default 20)." },
+    inboxId: { type: "positional", description: "Inbox id from `inboxes list` (e.g. CLASSIC_PRIMARY or COMPANY_83734124_PRIMARY)." }
+  },
+  async run({ args }) {
+    const flags = args;
+    const cfg = await resolveEffectiveConfig({
+      apiKey: flags["api-key"],
+      baseUrl: flags["base-url"],
+      timeout: flags.timeout,
+      account: flags.account,
+      profile: flags.profile
+    });
+    if (!cfg.apiKey) {
+      process.stderr.write("error: no API key \u2014 run `curviate login` or pass --api-key.\n");
+      process.exit(3);
+    }
+    const client = createClient({ apiKey: cfg.apiKey, baseUrl: cfg.baseUrl, timeout: cfg.timeout });
+    const out = buildOutputStreams();
+    await runInboxesChats(client, { ...flags, account: flags.account ?? cfg.account }, out);
+  }
+});
+var inboxesCommand = defineCommand({
+  meta: {
+    name: "inboxes",
+    description: "Discover LinkedIn inboxes (personal + company pages) and list their conversations. Beta. See also: `inbox` (the account's own message-thread inbox), `message send` (reply to a chat)."
+  },
+  subCommands: {
+    list: inboxesListCommand,
+    chats: inboxesChatsCommand
+  },
+  async run() {
+    process.stderr.write(
+      "Usage: curviate inboxes <subcommand>\n  list [--kind personal|company] [--company-id <id>]\n  chats <inbox_id> [--limit] [--cursor] [--all]\n"
+    );
+  }
+});
+export {
+  inboxesCommand,
+  runInboxesChats,
+  runInboxesList
+};

package/dist/{job-YARGTHUY.js → job-QLSGNDGW.js}

@@ -6,12 +6,12 @@ import {
 import {
   buildPreviewOutput
 } from "./chunk-R3VLWLVV.js";
-import {
-  slimJob
-} from "./chunk-45KHSWCV.js";
 import {
   resolveJobIdentifier
 } from "./chunk-DMQZEPQE.js";
+import {
+  slimJob
+} from "./chunk-45KHSWCV.js";
 import {
   DEFAULT_PAGE_DELAY_MS,
   ndjsonModeNotice,
@@ -98,7 +98,7 @@ function requireEnum(value, allowed, flag, out) {
 async function handleSdkError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }

package/dist/{login-MFB45PVZ.js → login-GDLWR542.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   readlineSync
-} from "./chunk-MKXA2LAR.js";
+} from "./chunk-H4KV7MIN.js";
 import {
   GLOBAL_FLAGS,
   writeProfile

package/dist/{message-2DLIQIE6.js → message-IKKOI6CZ.js}

@@ -73,13 +73,23 @@ var MEMBER_PROVIDER_ID_RE = /^A[CDE][A-Za-z0-9_-]{4,}$/;
 async function handleSdkError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }
   renderUnexpectedError(err, out);
   process.exit(1);
 }
+function sentAsNotice(sentAs) {
+  if (!sentAs || typeof sentAs !== "object") return null;
+  const s = sentAs;
+  if (s.kind !== "company") return null;
+  return s.name ? `Sent as ${s.name} (company page)
+` : "Sent as a company page\n";
+}
+function willSendAsNotice(chatId) {
+  return chatId.startsWith("COMPANY_") ? "Will send as a company page\n" : null;
+}
 async function runMessageNew(client, flags, out, _readStdin) {
   const accountId = requireAccount(flags.account, out);
   const rawTo = flags.to ?? "";
@@ -168,6 +178,8 @@ async function runMessageSend(client, flags, out, _readStdin) {
       }))
     });
     out.stdout.write(JSON.stringify(preview) + "\n");
+    const willSendAs = willSendAsNotice(chatId);
+    if (willSendAs) out.stderr.write(willSendAs);
     return;
   }
   const attachmentPayloads = attachBuffers.map((buf, i) => toAttachmentPayload(attachPaths[i], buf));
@@ -180,6 +192,8 @@ async function runMessageSend(client, flags, out, _readStdin) {
   try {
     const result = await ns.messaging.sendMessage(chatId, body);
     renderSuccess(result, outOpts, out);
+    const notice = sentAsNotice(result?.["sent_as"]);
+    if (notice) out.stderr.write(notice);
   } catch (err) {
     await handleSdkError(err, outOpts, out);
   }
@@ -572,11 +586,17 @@ var messageInMailCommand = defineCommand({
   }
 });
 var messageSendCommand = defineCommand({
-  meta: { name: "send", description: "Send a message to an existing chat." },
+  meta: {
+    name: "send",
+    description: 'Send a message to an existing chat. Pass a COMPANY_ chat id (from `inboxes chats`) to send as that company page instead of yourself, no separate flag needed. The output shows the acting identity: a company-page send prints "Sent as <name> (company page)", a personal send prints nothing new. See also: `inboxes chats` (discover a COMPANY_ chat id) and the Reply as a company page guide.'
+  },
   args: {
     // Write command: WRITE_FLAGS omits pagination/projection flags
     ...WRITE_FLAGS,
-    chatId: { type: "positional", description: "Chat ID or LinkedIn messaging thread URL." },
+    chatId: {
+      type: "positional",
+      description: "Chat ID or LinkedIn messaging thread URL. A COMPANY_ chat id sends as the company page; any other chat id sends as the connected member."
+    },
     text: { type: "positional", description: "Message text. Pass - to read from stdin (e.g. via heredoc or pipe)." },
     attach: { type: "string", description: "File to attach (repeatable)." }
   },
@@ -623,11 +643,18 @@ var messageInMailBalanceCommand = defineCommand({
   }
 });
 var messageCommand = defineCommand({
-  meta: { name: "message", description: "Send and manage LinkedIn messages." },
+  meta: {
+    name: "message",
+    description: "Send and manage LinkedIn messages. A COMPANY_ chat id (from `inboxes chats`) sends as that company page instead of yourself; see `message send --help`."
+  },
   args: {
     // Write command (message send): WRITE_FLAGS omits pagination/projection flags
     ...WRITE_FLAGS,
-    chatId: { type: "positional", description: "Chat ID to send a message to.", required: false },
+    chatId: {
+      type: "positional",
+      description: "Chat ID to send a message to. A COMPANY_ chat id sends as the company page.",
+      required: false
+    },
     text: { type: "positional", description: "Message text. Pass - to read from stdin.", required: false },
     attach: { type: "string", description: "File to attach (repeatable)." }
   },

package/dist/{post-GRIJ7X52.js → post-DH4RDYKZ.js}

@@ -79,7 +79,7 @@ function normalizeAttachPaths(attach) {
 async function handleSdkError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }

package/dist/{profile-57RJEL7H.js → profile-JUTGTPES.js}

@@ -11,13 +11,13 @@ import {
 import {
   buildPreviewOutput
 } from "./chunk-R3VLWLVV.js";
+import {
+  resolveIdentifier
+} from "./chunk-DMQZEPQE.js";
 import {
   slimProfile,
   slimProfileMe
 } from "./chunk-45KHSWCV.js";
-import {
-  resolveIdentifier
-} from "./chunk-DMQZEPQE.js";
 import {
   pageDelayFromFlags,
   streamAll
@@ -189,7 +189,7 @@ async function runProfileMe(client, flags, out) {
     } catch (err) {
       const { CurviateError } = await import("@curviate/sdk");
       if (err instanceof CurviateError) {
-        const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+        const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
         renderError(err, outOpts, out);
         process.exit(getExitCode(err.code));
       }
@@ -215,7 +215,7 @@ async function runProfileMe(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -341,7 +341,7 @@ async function runProfileGet(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -378,7 +378,7 @@ async function runProfileRelations(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -418,7 +418,7 @@ async function runProfileEndorse(client, flags, out) {
 async function handleSdkError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }

package/dist/{recruiter-CTYH7AYG.js → recruiter-WEZZVZN3.js}

@@ -16,13 +16,13 @@ import {
 import {
   buildPreviewOutput
 } from "./chunk-R3VLWLVV.js";
-import {
-  slimJob
-} from "./chunk-45KHSWCV.js";
 import {
   resolveIdentifier,
   resolveJobIdentifier
 } from "./chunk-DMQZEPQE.js";
+import {
+  slimJob
+} from "./chunk-45KHSWCV.js";
 import {
   pageDelayFromFlags,
   streamAll
@@ -78,7 +78,7 @@ function normalizeAttachPaths(attach) {
 async function handleSdkError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }

package/dist/{sales-nav-NUMEYOEO.js → sales-nav-NUCYJ4S3.js}

@@ -68,7 +68,7 @@ function normalizeAttachPaths(attach) {
 async function handleSdkError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }

package/dist/{search-RD4TXNV7.js → search-5U5U5MTT.js}

@@ -220,7 +220,7 @@ async function runSearchPeople(client, flags, out, readers = DEFAULT_FILTER_READ
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -261,7 +261,7 @@ async function runSearchCompanies(client, flags, out, readers = DEFAULT_FILTER_R
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -302,7 +302,7 @@ async function runSearchPosts(client, flags, out, readers = DEFAULT_FILTER_READE
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -343,7 +343,7 @@ async function runSearchJobs(client, flags, out, readers = DEFAULT_FILTER_READER
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -376,7 +376,7 @@ async function runSearchParameters(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }
@@ -413,7 +413,7 @@ async function runSearchFromUrl(client, flags, out) {
   } catch (err) {
     const { CurviateError } = await import("@curviate/sdk");
     if (err instanceof CurviateError) {
-      const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+      const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
       renderError(err, outOpts, out);
       process.exit(getExitCode(err.code));
     }

package/dist/{webhook-CEP7SGP5.js → webhook-UWIOVWVV.js}

@@ -48,7 +48,7 @@ function resolveOutputOpts(flags) {
 async function handleError(err, outOpts, out) {
   const { CurviateError } = await import("@curviate/sdk");
   if (err instanceof CurviateError) {
-    const { getExitCode } = await import("./exit-codes-SL3GQF7W.js");
+    const { getExitCode } = await import("./exit-codes-63JE5GM5.js");
     renderError(err, outOpts, out);
     process.exit(getExitCode(err.code));
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@curviate/cli",
-  "version": "0.15.1",
+  "version": "0.16.0",
   "private": false,
   "description": "Official command-line interface for the Curviate API.",
   "license": "MIT",
@@ -41,7 +41,7 @@
     "clean": "rm -rf dist *.tsbuildinfo"
   },
   "dependencies": {
-    "@curviate/sdk": "^0.15.0",
+    "@curviate/sdk": "^0.16.0",
     "citty": "^0.1.6",
     "open": "^10.1.0"
   },

package/dist/chunk-MKXA2LAR.js

@@ -1,51 +0,0 @@
-#!/usr/bin/env node
-
-// src/lib/readline.ts
-import { createInterface } from "readline";
-async function readlineSync(prompt, opts = {}) {
-  return new Promise((resolve, reject) => {
-    process.stderr.write(prompt);
-    if (opts.mask && typeof process.stdin.setRawMode === "function") {
-      process.stdin.setRawMode(true);
-      process.stdin.resume();
-      process.stdin.setEncoding("utf8");
-      let input = "";
-      const onData = (char) => {
-        if (char === "\r" || char === "\n") {
-          process.stdin.setRawMode(false);
-          process.stdin.pause();
-          process.stdin.removeListener("data", onData);
-          process.stderr.write("\n");
-          resolve(input);
-        } else if (char === "") {
-          process.stdin.setRawMode(false);
-          process.stdin.pause();
-          process.stdin.removeListener("data", onData);
-          reject(new Error("Interrupted."));
-        } else if (char === "\x7F" || char === "\b") {
-          input = input.slice(0, -1);
-        } else {
-          input += char;
-        }
-      };
-      process.stdin.on("data", onData);
-    } else {
-      const rl = createInterface({
-        input: process.stdin,
-        output: void 0,
-        // suppress default echo (prompt already on stderr)
-        terminal: false
-      });
-      rl.once("line", (line) => {
-        rl.close();
-        resolve(line.trim());
-      });
-      rl.once("error", reject);
-      rl.once("close", () => resolve(""));
-    }
-  });
-}
-
-export {
-  readlineSync
-};