@extrovert.dev/sdk 0.1.0-pre.4 → 0.1.0-pre.5

package/README.md

@@ -30,7 +30,7 @@ for a stable release:
 npm install @extrovert.dev/sdk@next
 ```
 
-Pin `@extrovert.dev/sdk@0.1.0-pre.4` when a dogfood test needs a reproducible contract snapshot.
+Pin `@extrovert.dev/sdk@0.1.0-pre.5` when a dogfood test needs a reproducible contract snapshot.
 Requires Node 18+ for global `fetch` and Web Crypto.
 
 ## Build and use from source
@@ -442,7 +442,7 @@ a wire protocol (there is no `/v1/contract` endpoint).
 ```ts
 import { CONTRACT_VERSION, CONTRACT_MANIFEST } from "@extrovert.dev/sdk";
 
-CONTRACT_VERSION;            // "0.1.0-pre.4" — provisional, pre-1.0; pin it
+CONTRACT_VERSION;            // "0.1.0-pre.5" — provisional, pre-1.0; pin it
 CONTRACT_MANIFEST.stability; // "provisional"
 CONTRACT_MANIFEST.core_shapes; // ["ReviewIntent","ReviewFeedback","DiffJson","Rule","ReviewEvent"]
 ```
@@ -463,7 +463,7 @@ page and the agent skills (`extrovert-send-email`, `extrovert-writing-rules`).
 The Review-Loop shapes are an **open, documented contract — versioned *with* this SDK** (not a wire
 protocol; there is no `/v1/contract` endpoint). Three guarantees:
 
-- **One version, everywhere.** `CONTRACT_VERSION` is **`0.1.0-pre.4`**, reconciled across the SDK package
+- **One version, everywhere.** `CONTRACT_VERSION` is **`0.1.0-pre.5`**, reconciled across the SDK package
   version, the MCP server, and the OpenAPI `info.version`. Pin it; pin `CONTRACT_MANIFEST` for the
   exact shape set you built against.
 - **Named, documented types.** The five canonical shapes — `ReviewIntent`, `ReviewFeedback`,
@@ -494,7 +494,7 @@ EXTROVERT_API_BASE_URL=mock npx tsx examples/wait-for-otp.ts
 
 ## Status
 
-> **Note.** This source SDK tracks the `/v1` contract at `CONTRACT_VERSION` `0.1.0-pre.4` — a
+> **Note.** This source SDK tracks the `/v1` contract at `CONTRACT_VERSION` `0.1.0-pre.5` — a
 > deliberate **prerelease**, pre-1.0, expect additive change. The offline `mock` transport models the
 > live server closely enough to reproduce a 422 `intent_required` and a queued review, so build and
 > test against it before you have a key. Install from the `next` tag until a stable release is cut.

package/dist/index.cjs

@@ -268,7 +268,7 @@ var CURRENT_API_VERSION = "2026-06-23";
 var API_VERSION_HEADER = "Extrovert-Version";
 
 // src/http.ts
-var SDK_VERSION = "0.1.0-pre.4";
+var SDK_VERSION = "0.1.0-pre.5";
 function buildUrl(baseUrl, path, query) {
   const base = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
   const rel = path.startsWith("/") ? path : `/${path}`;
@@ -625,6 +625,23 @@ function decodeMockCursor(cursor) {
     return 0;
   }
 }
+function mailboxQuickstart(address) {
+  return {
+    inbox: address,
+    list_mail: {
+      tool: "read_messages",
+      arguments: { inbox: address, limit: 20, unread_only: false }
+    },
+    read_message: {
+      tool: "get_message",
+      arguments: { id: "<message_id from read_messages>", format: "text", variant: "extracted" }
+    },
+    wait_for_mail: {
+      tool: "wait_for_email",
+      arguments: { inbox: address, since_now: true }
+    }
+  };
+}
 var SHARED_SUBDOMAIN = "smtp.extrovert.dev";
 var MOCK_ORG_ID = "org_mock";
 var MOCK_PROJECT_ID = "prj_mock";
@@ -935,7 +952,7 @@ var MockBackend = class {
     const customerId = existing?.customerId ?? `cus_pn_signup_${rid("c").slice(2)}`;
     const agentId = existing?.agentId ?? rid("agt");
     const address = existing?.address ?? `${req.username ?? randomHandle()}@smtp.extrovert.dev`;
-    const otp = String(Math.floor(1e5 + Math.random() * 9e5));
+    const otp = "492013";
     this.state.signupByEmail.set(email, { customerId, agentId, address, otp, verified: false });
     return {
       customer_id: customerId,
@@ -960,8 +977,10 @@ var MockBackend = class {
           agent_key: `pk_agent_${s.agentId.slice(4)}_${rid("sk").slice(3)}`,
           key_prefix: `pk_agent_${s.agentId.slice(4, 8)}`,
           scopes: ["mailbox:create", "mailbox:read", "mailbox:send"],
+          address: s.address,
           verified: true,
-          message: "Verified. Use the new agent_key (full scopes)."
+          message: "Verified. The inbox is ready; use read_messages, then get_message with a returned message id.",
+          mailbox_quickstart: mailboxQuickstart(s.address)
         };
       }
     }
@@ -4983,6 +5002,8 @@ var ExtrovertClient = class _ExtrovertClient {
   /**
    * Confirm the emailed signup code and receive a NEW full-scope agent key (shown
    * once). Must be called with the limited key from {@link signUp} as the bearer.
+   * The result repeats the ready inbox address and includes MCP-first list/read/wait
+   * calls; SDK callers can pass `address` directly to `inboxes` and `messages`.
    */
   verify(req, signal) {
     return this.transport.verify(req, signal);
@@ -5150,7 +5171,7 @@ async function signWebhook(secret, body, timestampSeconds) {
 }
 
 // src/contract.ts
-var CONTRACT_VERSION = "0.1.0-pre.4";
+var CONTRACT_VERSION = "0.1.0-pre.5";
 var CONTRACT_MANIFEST = {
   name: "extrovert.review-loop",
   version: CONTRACT_VERSION,