@primitivedotdev/cli 0.33.0 → 0.34.0

package/dist/oclif/index.js

@@ -1,3 +1,4 @@
+import { A as createClient, C as saveCliCredentials, D as loadChatConversationByLocalId, E as loadActiveChatState, O as saveActiveChatState, S as resolveCliAuth, T as deleteChatState, _ as deleteCliCredentials, a as normalizeCliEnvironmentName, b as normalizeApiBaseUrl1, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, g as credentialsPath, h as credentialsLockPath, i as loadCliConfig, j as createConfig, k as PrimitiveApiClient, l as saveCliConfig, m as cliAccessTokenExpiresAt, n as deleteCliConfig, o as redactCliEnvironment, p as acquireCliCredentialsLock, r as emptyCliConfig, s as removeCliEnvironment, u as upsertCliEnvironment, v as deleteCliCredentialsLock, w as chatStatePath, x as normalizeApiBaseUrl2, y as loadCliCredentials } from "../cli-config-D9nB6fOW.js";
 import { Args, Command, Errors, Flags } from "@oclif/core";
 import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
@@ -18,614 +19,6 @@ var __exportAll = (all, no_symbols) => {
 	return target;
 };
 //#endregion
-//#region ../packages/api-core/src/api/core/bodySerializer.gen.ts
-const jsonBodySerializer = { bodySerializer: (body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value) };
-//#endregion
-//#region ../packages/api-core/src/api/core/serverSentEvents.gen.ts
-function createSseClient({ onRequest, onSseError, onSseEvent, responseTransformer, responseValidator, sseDefaultRetryDelay, sseMaxRetryAttempts, sseMaxRetryDelay, sseSleepFn, url, ...options }) {
-	let lastEventId;
-	const sleep = sseSleepFn ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-	const createStream = async function* () {
-		let retryDelay = sseDefaultRetryDelay ?? 3e3;
-		let attempt = 0;
-		const signal = options.signal ?? new AbortController().signal;
-		while (true) {
-			if (signal.aborted) break;
-			attempt++;
-			const headers = options.headers instanceof Headers ? options.headers : new Headers(options.headers);
-			if (lastEventId !== void 0) headers.set("Last-Event-ID", lastEventId);
-			try {
-				const requestInit = {
-					redirect: "follow",
-					...options,
-					body: options.serializedBody,
-					headers,
-					signal
-				};
-				let request = new Request(url, requestInit);
-				if (onRequest) request = await onRequest(url, requestInit);
-				const response = await (options.fetch ?? globalThis.fetch)(request);
-				if (!response.ok) throw new Error(`SSE failed: ${response.status} ${response.statusText}`);
-				if (!response.body) throw new Error("No body in SSE response");
-				const reader = response.body.pipeThrough(new TextDecoderStream()).getReader();
-				let buffer = "";
-				const abortHandler = () => {
-					try {
-						reader.cancel();
-					} catch {}
-				};
-				signal.addEventListener("abort", abortHandler);
-				try {
-					while (true) {
-						const { done, value } = await reader.read();
-						if (done) break;
-						buffer += value;
-						buffer = buffer.replace(/\r\n?/g, "\n");
-						const chunks = buffer.split("\n\n");
-						buffer = chunks.pop() ?? "";
-						for (const chunk of chunks) {
-							const lines = chunk.split("\n");
-							const dataLines = [];
-							let eventName;
-							for (const line of lines) if (line.startsWith("data:")) dataLines.push(line.replace(/^data:\s*/, ""));
-							else if (line.startsWith("event:")) eventName = line.replace(/^event:\s*/, "");
-							else if (line.startsWith("id:")) lastEventId = line.replace(/^id:\s*/, "");
-							else if (line.startsWith("retry:")) {
-								const parsed = Number.parseInt(line.replace(/^retry:\s*/, ""), 10);
-								if (!Number.isNaN(parsed)) retryDelay = parsed;
-							}
-							let data;
-							let parsedJson = false;
-							if (dataLines.length) {
-								const rawData = dataLines.join("\n");
-								try {
-									data = JSON.parse(rawData);
-									parsedJson = true;
-								} catch {
-									data = rawData;
-								}
-							}
-							if (parsedJson) {
-								if (responseValidator) await responseValidator(data);
-								if (responseTransformer) data = await responseTransformer(data);
-							}
-							onSseEvent?.({
-								data,
-								event: eventName,
-								id: lastEventId,
-								retry: retryDelay
-							});
-							if (dataLines.length) yield data;
-						}
-					}
-				} finally {
-					signal.removeEventListener("abort", abortHandler);
-					reader.releaseLock();
-				}
-				break;
-			} catch (error) {
-				onSseError?.(error);
-				if (sseMaxRetryAttempts !== void 0 && attempt >= sseMaxRetryAttempts) break;
-				await sleep(Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 3e4));
-			}
-		}
-	};
-	return { stream: createStream() };
-}
-//#endregion
-//#region ../packages/api-core/src/api/core/pathSerializer.gen.ts
-const separatorArrayExplode = (style) => {
-	switch (style) {
-		case "label": return ".";
-		case "matrix": return ";";
-		case "simple": return ",";
-		default: return "&";
-	}
-};
-const separatorArrayNoExplode = (style) => {
-	switch (style) {
-		case "form": return ",";
-		case "pipeDelimited": return "|";
-		case "spaceDelimited": return "%20";
-		default: return ",";
-	}
-};
-const separatorObjectExplode = (style) => {
-	switch (style) {
-		case "label": return ".";
-		case "matrix": return ";";
-		case "simple": return ",";
-		default: return "&";
-	}
-};
-const serializeArrayParam = ({ allowReserved, explode, name, style, value }) => {
-	if (!explode) {
-		const joinedValues = (allowReserved ? value : value.map((v) => encodeURIComponent(v))).join(separatorArrayNoExplode(style));
-		switch (style) {
-			case "label": return `.${joinedValues}`;
-			case "matrix": return `;${name}=${joinedValues}`;
-			case "simple": return joinedValues;
-			default: return `${name}=${joinedValues}`;
-		}
-	}
-	const separator = separatorArrayExplode(style);
-	const joinedValues = value.map((v) => {
-		if (style === "label" || style === "simple") return allowReserved ? v : encodeURIComponent(v);
-		return serializePrimitiveParam({
-			allowReserved,
-			name,
-			value: v
-		});
-	}).join(separator);
-	return style === "label" || style === "matrix" ? separator + joinedValues : joinedValues;
-};
-const serializePrimitiveParam = ({ allowReserved, name, value }) => {
-	if (value === void 0 || value === null) return "";
-	if (typeof value === "object") throw new Error("Deeply-nested arrays/objects aren’t supported. Provide your own `querySerializer()` to handle these.");
-	return `${name}=${allowReserved ? value : encodeURIComponent(value)}`;
-};
-const serializeObjectParam = ({ allowReserved, explode, name, style, value, valueOnly }) => {
-	if (value instanceof Date) return valueOnly ? value.toISOString() : `${name}=${value.toISOString()}`;
-	if (style !== "deepObject" && !explode) {
-		let values = [];
-		Object.entries(value).forEach(([key, v]) => {
-			values = [
-				...values,
-				key,
-				allowReserved ? v : encodeURIComponent(v)
-			];
-		});
-		const joinedValues = values.join(",");
-		switch (style) {
-			case "form": return `${name}=${joinedValues}`;
-			case "label": return `.${joinedValues}`;
-			case "matrix": return `;${name}=${joinedValues}`;
-			default: return joinedValues;
-		}
-	}
-	const separator = separatorObjectExplode(style);
-	const joinedValues = Object.entries(value).map(([key, v]) => serializePrimitiveParam({
-		allowReserved,
-		name: style === "deepObject" ? `${name}[${key}]` : key,
-		value: v
-	})).join(separator);
-	return style === "label" || style === "matrix" ? separator + joinedValues : joinedValues;
-};
-//#endregion
-//#region ../packages/api-core/src/api/core/utils.gen.ts
-const PATH_PARAM_RE = /\{[^{}]+\}/g;
-const defaultPathSerializer = ({ path, url: _url }) => {
-	let url = _url;
-	const matches = _url.match(PATH_PARAM_RE);
-	if (matches) for (const match of matches) {
-		let explode = false;
-		let name = match.substring(1, match.length - 1);
-		let style = "simple";
-		if (name.endsWith("*")) {
-			explode = true;
-			name = name.substring(0, name.length - 1);
-		}
-		if (name.startsWith(".")) {
-			name = name.substring(1);
-			style = "label";
-		} else if (name.startsWith(";")) {
-			name = name.substring(1);
-			style = "matrix";
-		}
-		const value = path[name];
-		if (value === void 0 || value === null) continue;
-		if (Array.isArray(value)) {
-			url = url.replace(match, serializeArrayParam({
-				explode,
-				name,
-				style,
-				value
-			}));
-			continue;
-		}
-		if (typeof value === "object") {
-			url = url.replace(match, serializeObjectParam({
-				explode,
-				name,
-				style,
-				value,
-				valueOnly: true
-			}));
-			continue;
-		}
-		if (style === "matrix") {
-			url = url.replace(match, `;${serializePrimitiveParam({
-				name,
-				value
-			})}`);
-			continue;
-		}
-		const replaceValue = encodeURIComponent(style === "label" ? `.${value}` : value);
-		url = url.replace(match, replaceValue);
-	}
-	return url;
-};
-const getUrl = ({ baseUrl, path, query, querySerializer, url: _url }) => {
-	const pathUrl = _url.startsWith("/") ? _url : `/${_url}`;
-	let url = (baseUrl ?? "") + pathUrl;
-	if (path) url = defaultPathSerializer({
-		path,
-		url
-	});
-	let search = query ? querySerializer(query) : "";
-	if (search.startsWith("?")) search = search.substring(1);
-	if (search) url += `?${search}`;
-	return url;
-};
-function getValidRequestBody(options) {
-	const hasBody = options.body !== void 0;
-	if (hasBody && options.bodySerializer) {
-		if ("serializedBody" in options) return options.serializedBody !== void 0 && options.serializedBody !== "" ? options.serializedBody : null;
-		return options.body !== "" ? options.body : null;
-	}
-	if (hasBody) return options.body;
-}
-//#endregion
-//#region ../packages/api-core/src/api/core/auth.gen.ts
-const getAuthToken = async (auth, callback) => {
-	const token = typeof callback === "function" ? await callback(auth) : callback;
-	if (!token) return;
-	if (auth.scheme === "bearer") return `Bearer ${token}`;
-	if (auth.scheme === "basic") return `Basic ${btoa(token)}`;
-	return token;
-};
-//#endregion
-//#region ../packages/api-core/src/api/client/utils.gen.ts
-const createQuerySerializer = ({ parameters = {}, ...args } = {}) => {
-	const querySerializer = (queryParams) => {
-		const search = [];
-		if (queryParams && typeof queryParams === "object") for (const name in queryParams) {
-			const value = queryParams[name];
-			if (value === void 0 || value === null) continue;
-			const options = parameters[name] || args;
-			if (Array.isArray(value)) {
-				const serializedArray = serializeArrayParam({
-					allowReserved: options.allowReserved,
-					explode: true,
-					name,
-					style: "form",
-					value,
-					...options.array
-				});
-				if (serializedArray) search.push(serializedArray);
-			} else if (typeof value === "object") {
-				const serializedObject = serializeObjectParam({
-					allowReserved: options.allowReserved,
-					explode: true,
-					name,
-					style: "deepObject",
-					value,
-					...options.object
-				});
-				if (serializedObject) search.push(serializedObject);
-			} else {
-				const serializedPrimitive = serializePrimitiveParam({
-					allowReserved: options.allowReserved,
-					name,
-					value
-				});
-				if (serializedPrimitive) search.push(serializedPrimitive);
-			}
-		}
-		return search.join("&");
-	};
-	return querySerializer;
-};
-/**
-* Infers parseAs value from provided Content-Type header.
-*/
-const getParseAs = (contentType) => {
-	if (!contentType) return "stream";
-	const cleanContent = contentType.split(";")[0]?.trim();
-	if (!cleanContent) return;
-	if (cleanContent.startsWith("application/json") || cleanContent.endsWith("+json")) return "json";
-	if (cleanContent === "multipart/form-data") return "formData";
-	if ([
-		"application/",
-		"audio/",
-		"image/",
-		"video/"
-	].some((type) => cleanContent.startsWith(type))) return "blob";
-	if (cleanContent.startsWith("text/")) return "text";
-};
-const checkForExistence = (options, name) => {
-	if (!name) return false;
-	if (options.headers.has(name) || options.query?.[name] || options.headers.get("Cookie")?.includes(`${name}=`)) return true;
-	return false;
-};
-const setAuthParams = async ({ security, ...options }) => {
-	for (const auth of security) {
-		if (checkForExistence(options, auth.name)) continue;
-		const token = await getAuthToken(auth, options.auth);
-		if (!token) continue;
-		const name = auth.name ?? "Authorization";
-		switch (auth.in) {
-			case "query":
-				if (!options.query) options.query = {};
-				options.query[name] = token;
-				break;
-			case "cookie":
-				options.headers.append("Cookie", `${name}=${token}`);
-				break;
-			default:
-				options.headers.set(name, token);
-				break;
-		}
-	}
-};
-const buildUrl = (options) => getUrl({
-	baseUrl: options.baseUrl,
-	path: options.path,
-	query: options.query,
-	querySerializer: typeof options.querySerializer === "function" ? options.querySerializer : createQuerySerializer(options.querySerializer),
-	url: options.url
-});
-const mergeConfigs = (a, b) => {
-	const config = {
-		...a,
-		...b
-	};
-	if (config.baseUrl?.endsWith("/")) config.baseUrl = config.baseUrl.substring(0, config.baseUrl.length - 1);
-	config.headers = mergeHeaders$1(a.headers, b.headers);
-	return config;
-};
-const headersEntries = (headers) => {
-	const entries = [];
-	headers.forEach((value, key) => {
-		entries.push([key, value]);
-	});
-	return entries;
-};
-const mergeHeaders$1 = (...headers) => {
-	const mergedHeaders = new Headers();
-	for (const header of headers) {
-		if (!header) continue;
-		const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);
-		for (const [key, value] of iterator) if (value === null) mergedHeaders.delete(key);
-		else if (Array.isArray(value)) for (const v of value) mergedHeaders.append(key, v);
-		else if (value !== void 0) mergedHeaders.set(key, typeof value === "object" ? JSON.stringify(value) : value);
-	}
-	return mergedHeaders;
-};
-var Interceptors = class {
-	fns = [];
-	clear() {
-		this.fns = [];
-	}
-	eject(id) {
-		const index = this.getInterceptorIndex(id);
-		if (this.fns[index]) this.fns[index] = null;
-	}
-	exists(id) {
-		const index = this.getInterceptorIndex(id);
-		return Boolean(this.fns[index]);
-	}
-	getInterceptorIndex(id) {
-		if (typeof id === "number") return this.fns[id] ? id : -1;
-		return this.fns.indexOf(id);
-	}
-	update(id, fn) {
-		const index = this.getInterceptorIndex(id);
-		if (this.fns[index]) {
-			this.fns[index] = fn;
-			return id;
-		}
-		return false;
-	}
-	use(fn) {
-		this.fns.push(fn);
-		return this.fns.length - 1;
-	}
-};
-const createInterceptors = () => ({
-	error: new Interceptors(),
-	request: new Interceptors(),
-	response: new Interceptors()
-});
-const defaultQuerySerializer = createQuerySerializer({
-	allowReserved: false,
-	array: {
-		explode: true,
-		style: "form"
-	},
-	object: {
-		explode: true,
-		style: "deepObject"
-	}
-});
-const defaultHeaders = { "Content-Type": "application/json" };
-const createConfig = (override = {}) => ({
-	...jsonBodySerializer,
-	headers: defaultHeaders,
-	parseAs: "auto",
-	querySerializer: defaultQuerySerializer,
-	...override
-});
-//#endregion
-//#region ../packages/api-core/src/api/client/client.gen.ts
-const createClient = (config = {}) => {
-	let _config = mergeConfigs(createConfig(), config);
-	const getConfig = () => ({ ..._config });
-	const setConfig = (config) => {
-		_config = mergeConfigs(_config, config);
-		return getConfig();
-	};
-	const interceptors = createInterceptors();
-	const beforeRequest = async (options) => {
-		const opts = {
-			..._config,
-			...options,
-			fetch: options.fetch ?? _config.fetch ?? globalThis.fetch,
-			headers: mergeHeaders$1(_config.headers, options.headers),
-			serializedBody: void 0
-		};
-		if (opts.security) await setAuthParams({
-			...opts,
-			security: opts.security
-		});
-		if (opts.requestValidator) await opts.requestValidator(opts);
-		if (opts.body !== void 0 && opts.bodySerializer) opts.serializedBody = opts.bodySerializer(opts.body);
-		if (opts.body === void 0 || opts.serializedBody === "") opts.headers.delete("Content-Type");
-		const resolvedOpts = opts;
-		return {
-			opts: resolvedOpts,
-			url: buildUrl(resolvedOpts)
-		};
-	};
-	const request = async (options) => {
-		const { opts, url } = await beforeRequest(options);
-		const requestInit = {
-			redirect: "follow",
-			...opts,
-			body: getValidRequestBody(opts)
-		};
-		let request = new Request(url, requestInit);
-		for (const fn of interceptors.request.fns) if (fn) request = await fn(request, opts);
-		const _fetch = opts.fetch;
-		let response;
-		try {
-			response = await _fetch(request);
-		} catch (error) {
-			let finalError = error;
-			for (const fn of interceptors.error.fns) if (fn) finalError = await fn(error, void 0, request, opts);
-			finalError = finalError || {};
-			if (opts.throwOnError) throw finalError;
-			return opts.responseStyle === "data" ? void 0 : {
-				error: finalError,
-				request,
-				response: void 0
-			};
-		}
-		for (const fn of interceptors.response.fns) if (fn) response = await fn(response, request, opts);
-		const result = {
-			request,
-			response
-		};
-		if (response.ok) {
-			const parseAs = (opts.parseAs === "auto" ? getParseAs(response.headers.get("Content-Type")) : opts.parseAs) ?? "json";
-			if (response.status === 204 || response.headers.get("Content-Length") === "0") {
-				let emptyData;
-				switch (parseAs) {
-					case "arrayBuffer":
-					case "blob":
-					case "text":
-						emptyData = await response[parseAs]();
-						break;
-					case "formData":
-						emptyData = new FormData();
-						break;
-					case "stream":
-						emptyData = response.body;
-						break;
-					default:
-						emptyData = {};
-						break;
-				}
-				return opts.responseStyle === "data" ? emptyData : {
-					data: emptyData,
-					...result
-				};
-			}
-			let data;
-			switch (parseAs) {
-				case "arrayBuffer":
-				case "blob":
-				case "formData":
-				case "text":
-					data = await response[parseAs]();
-					break;
-				case "json": {
-					const text = await response.text();
-					data = text ? JSON.parse(text) : {};
-					break;
-				}
-				case "stream": return opts.responseStyle === "data" ? response.body : {
-					data: response.body,
-					...result
-				};
-			}
-			if (parseAs === "json") {
-				if (opts.responseValidator) await opts.responseValidator(data);
-				if (opts.responseTransformer) data = await opts.responseTransformer(data);
-			}
-			return opts.responseStyle === "data" ? data : {
-				data,
-				...result
-			};
-		}
-		const textError = await response.text();
-		let jsonError;
-		try {
-			jsonError = JSON.parse(textError);
-		} catch {}
-		const error = jsonError ?? textError;
-		let finalError = error;
-		for (const fn of interceptors.error.fns) if (fn) finalError = await fn(error, response, request, opts);
-		finalError = finalError || {};
-		if (opts.throwOnError) throw finalError;
-		return opts.responseStyle === "data" ? void 0 : {
-			error: finalError,
-			...result
-		};
-	};
-	const makeMethodFn = (method) => (options) => request({
-		...options,
-		method
-	});
-	const makeSseFn = (method) => async (options) => {
-		const { opts, url } = await beforeRequest(options);
-		return createSseClient({
-			...opts,
-			body: opts.body,
-			headers: opts.headers,
-			method,
-			onRequest: async (url, init) => {
-				let request = new Request(url, init);
-				for (const fn of interceptors.request.fns) if (fn) request = await fn(request, opts);
-				return request;
-			},
-			serializedBody: getValidRequestBody(opts),
-			url
-		});
-	};
-	const _buildUrl = (options) => buildUrl({
-		..._config,
-		...options
-	});
-	return {
-		buildUrl: _buildUrl,
-		connect: makeMethodFn("CONNECT"),
-		delete: makeMethodFn("DELETE"),
-		get: makeMethodFn("GET"),
-		getConfig,
-		head: makeMethodFn("HEAD"),
-		interceptors,
-		options: makeMethodFn("OPTIONS"),
-		patch: makeMethodFn("PATCH"),
-		post: makeMethodFn("POST"),
-		put: makeMethodFn("PUT"),
-		request,
-		setConfig,
-		sse: {
-			connect: makeSseFn("CONNECT"),
-			delete: makeSseFn("DELETE"),
-			get: makeSseFn("GET"),
-			head: makeSseFn("HEAD"),
-			options: makeSseFn("OPTIONS"),
-			patch: makeSseFn("PATCH"),
-			post: makeSseFn("POST"),
-			put: makeSseFn("PUT"),
-			trace: makeSseFn("TRACE")
-		},
-		trace: makeMethodFn("TRACE")
-	};
-};
-//#endregion
 //#region ../packages/api-core/src/api/client.gen.ts
 const client = createClient(createConfig({ baseUrl: "https://www.primitive.dev/api/v1" }));
 //#endregion
@@ -648,6 +41,7 @@ var sdk_gen_exports = /* @__PURE__ */ __exportAll({
 	downloadDomainZoneFile: () => downloadDomainZoneFile,
 	downloadRawEmail: () => downloadRawEmail,
 	getAccount: () => getAccount,
+	getConversation: () => getConversation,
 	getEmail: () => getEmail,
 	getFunction: () => getFunction,
 	getFunctionTestRunTrace: () => getFunctionTestRunTrace,
@@ -1267,6 +661,37 @@ const discardEmailContent = (options) => (options.client ?? client).post({
 	...options
 });
 /**
+* Get the conversation an email belongs to
+*
+* Returns the full conversation the given inbound email belongs
+* to, as ordered, ready-to-prompt turns WITH bodies. It resolves
+* the thread from the email and returns every message oldest-first,
+* so an agent that received an email can pass `messages` straight
+* to a chat model in one call instead of walking `/threads/{id}`
+* plus `/emails/{id}` and `/sent-emails/{id}` per message.
+*
+* Each message carries a `direction` (`inbound` | `outbound`) and a
+* derived `role`: `inbound` -> `user`, `outbound` -> `assistant`
+* (your own prior replies). The role mapping assumes the caller
+* owns the outbound side, which is the agent-reply case this exists
+* for. If the email has no thread yet (a brand-new message), the
+* conversation is just that one message as a single user turn.
+*
+* The message list is capped; check `truncated` to detect when
+* older messages were omitted. Consecutive same-role turns are not
+* merged here; that normalization is model-specific and left to the
+* caller.
+*
+*/
+const getConversation = (options) => (options.client ?? client).get({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/emails/{id}/conversation",
+	...options
+});
+/**
 * List webhook endpoints
 *
 * Returns all active (non-deleted) webhook endpoints.
@@ -3026,6 +2451,27 @@ const openapiDocument = {
 				}
 			}
 		},
+		"/emails/{id}/conversation": {
+			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }],
+			"get": {
+				"operationId": "getConversation",
+				"summary": "Get the conversation an email belongs to",
+				"description": "Returns the full conversation the given inbound email belongs\nto, as ordered, ready-to-prompt turns WITH bodies. It resolves\nthe thread from the email and returns every message oldest-first,\nso an agent that received an email can pass `messages` straight\nto a chat model in one call instead of walking `/threads/{id}`\nplus `/emails/{id}` and `/sent-emails/{id}` per message.\n\nEach message carries a `direction` (`inbound` | `outbound`) and a\nderived `role`: `inbound` -> `user`, `outbound` -> `assistant`\n(your own prior replies). The role mapping assumes the caller\nowns the outbound side, which is the agent-reply case this exists\nfor. If the email has no thread yet (a brand-new message), the\nconversation is just that one message as a single user turn.\n\nThe message list is capped; check `truncated` to detect when\nolder messages were omitted. Consecutive same-role turns are not\nmerged here; that normalization is model-specific and left to the\ncaller.\n",
+				"tags": ["Emails"],
+				"responses": {
+					"200": {
+						"description": "Conversation",
+						"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+							"type": "object",
+							"properties": { "data": { "$ref": "#/components/schemas/Conversation" } }
+						}] } } }
+					},
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"404": { "$ref": "#/components/responses/NotFound" }
+				}
+			}
+		},
 		"/endpoints": {
 			"get": {
 				"operationId": "listEndpoints",
@@ -5864,6 +5310,78 @@ const openapiDocument = {
 				},
 				"required": ["direction", "id"]
 			},
+			"Conversation": {
+				"type": "object",
+				"description": "The full conversation an inbound email belongs to, as ordered,\nready-to-prompt turns with bodies. Resolves the thread from the\nemail and returns every message oldest-first, so an agent that\nreceived an email can pass `messages` straight to a chat model in\none call.\n",
+				"properties": {
+					"thread_id": {
+						"type": ["string", "null"],
+						"format": "uuid",
+						"description": "The thread this email belongs to, or null when the email\nisn't threaded yet (the conversation is then just this one\nmessage).\n"
+					},
+					"subject": {
+						"type": ["string", "null"],
+						"description": "Normalized thread subject (Re/Fwd prefixes stripped), or the\nemail's own subject when it isn't threaded.\n"
+					},
+					"message_count": {
+						"type": "integer",
+						"description": "Total messages in the thread. `messages` is capped, so\n`truncated` is true (and this can exceed `messages.length`)\nwhen older messages were omitted.\n"
+					},
+					"truncated": {
+						"type": "boolean",
+						"description": "True when `messages` omits part of the conversation because\nthe thread exceeds the per-call cap.\n"
+					},
+					"messages": {
+						"type": "array",
+						"items": { "$ref": "#/components/schemas/ConversationMessage" }
+					}
+				},
+				"required": [
+					"thread_id",
+					"message_count",
+					"truncated",
+					"messages"
+				]
+			},
+			"ConversationMessage": {
+				"type": "object",
+				"description": "One message in the conversation, with its body and a chat role.",
+				"properties": {
+					"role": {
+						"type": "string",
+						"enum": ["user", "assistant"],
+						"description": "Chat role derived from `direction`: `user` for inbound\n(received) messages, `assistant` for outbound (your own prior\nreplies). Lets `messages` be passed directly to a chat model.\n"
+					},
+					"direction": {
+						"type": "string",
+						"enum": ["inbound", "outbound"],
+						"description": "`inbound` for a received email (`/emails/{id}`), `outbound`\nfor a send (`/sent-emails/{id}`).\n"
+					},
+					"id": {
+						"type": "string",
+						"format": "uuid"
+					},
+					"message_id": { "type": ["string", "null"] },
+					"from": { "type": ["string", "null"] },
+					"to": { "type": ["string", "null"] },
+					"subject": { "type": ["string", "null"] },
+					"text": {
+						"type": "string",
+						"description": "Plain-text body. Empty string when the message has no text\npart or its content was discarded by retention.\n"
+					},
+					"timestamp": {
+						"type": ["string", "null"],
+						"format": "date-time",
+						"description": "received_at for inbound, created_at for outbound."
+					}
+				},
+				"required": [
+					"role",
+					"direction",
+					"id",
+					"text"
+				]
+			},
 			"SendMailAttachment": {
 				"type": "object",
 				"additionalProperties": false,
@@ -9023,12 +8541,12 @@ const operationManifest = [
 	{
 		"binaryResponse": false,
 		"bodyRequired": false,
-		"command": "get-email",
-		"description": "Returns the full record for an inbound email received at one\nof your verified domains, including the parsed text and HTML\nbodies, threading metadata, SMTP envelope detail, webhook\ndelivery state, and a `replies` array for any outbound sends\nrecorded as replies to this inbound.\n\nFor listing inbound emails (with cursor pagination, status\nand date filters, and free-text search), use\n`/emails`. Outbound (sent) email records are NOT returned\nhere; use `/sent-emails/{id}` for those.\n\nThe response carries four sender-shaped fields whose\nmeanings overlap. `from_email` is the canonical \"who sent\nthis\" field for most use cases (parsed bare address from\nthe `From:` header, with a `sender` fallback). `from_header`\nis the raw header including any display name. `sender` and\n`smtp_mail_from` both carry the SMTP envelope MAIL FROM\n(return-path) and are equal by construction; `sender` is\nthe older field name retained for compatibility. See\n`primitive describe emails:get-email | jq '.responseSchema.properties'`\nfor per-field detail.\n",
+		"command": "get-conversation",
+		"description": "Returns the full conversation the given inbound email belongs\nto, as ordered, ready-to-prompt turns WITH bodies. It resolves\nthe thread from the email and returns every message oldest-first,\nso an agent that received an email can pass `messages` straight\nto a chat model in one call instead of walking `/threads/{id}`\nplus `/emails/{id}` and `/sent-emails/{id}` per message.\n\nEach message carries a `direction` (`inbound` | `outbound`) and a\nderived `role`: `inbound` -> `user`, `outbound` -> `assistant`\n(your own prior replies). The role mapping assumes the caller\nowns the outbound side, which is the agent-reply case this exists\nfor. If the email has no thread yet (a brand-new message), the\nconversation is just that one message as a single user turn.\n\nThe message list is capped; check `truncated` to detect when\nolder messages were omitted. Consecutive same-role turns are not\nmerged here; that normalization is model-specific and left to the\ncaller.\n",
 		"hasJsonBody": false,
 		"method": "GET",
-		"operationId": "getEmail",
-		"path": "/emails/{id}",
+		"operationId": "getConversation",
+		"path": "/emails/{id}/conversation",
 		"pathParams": [{
 			"description": "Resource UUID",
 			"enum": null,
@@ -9040,45 +8558,139 @@ const operationManifest = [
 		"requestSchema": null,
 		"responseSchema": {
 			"type": "object",
+			"description": "The full conversation an inbound email belongs to, as ordered,\nready-to-prompt turns with bodies. Resolves the thread from the\nemail and returns every message oldest-first, so an agent that\nreceived an email can pass `messages` straight to a chat model in\none call.\n",
 			"properties": {
-				"id": {
-					"type": "string",
-					"format": "uuid"
-				},
-				"message_id": { "type": ["string", "null"] },
-				"domain_id": {
-					"type": ["string", "null"],
-					"format": "uuid"
-				},
-				"org_id": {
+				"thread_id": {
 					"type": ["string", "null"],
-					"format": "uuid"
-				},
-				"sender": {
-					"type": "string",
-					"description": "SMTP envelope sender (return-path) the inbound mail server\naccepted. Same value as `smtp_mail_from`; both fields exist\nso protocol-aware tooling can use whichever name it expects.\n\nFor most legitimate mail this equals `from_email`; for\nmailing lists, bounce handlers, and forwarders it is\ntypically the bounce-handling address rather than the\nhuman-visible sender.\n\n**For the canonical \"who sent this email\" value, use\n`from_email`.**\n"
+					"format": "uuid",
+					"description": "The thread this email belongs to, or null when the email\nisn't threaded yet (the conversation is then just this one\nmessage).\n"
 				},
-				"recipient": { "type": "string" },
-				"subject": { "type": ["string", "null"] },
-				"body_text": {
+				"subject": {
 					"type": ["string", "null"],
-					"description": "Plain-text body parsed from the inbound MIME, matching the `email.parsed.body_text` field on the webhook payload. Null when the message had no text part or parsing failed."
+					"description": "Normalized thread subject (Re/Fwd prefixes stripped), or the\nemail's own subject when it isn't threaded.\n"
 				},
-				"body_html": {
-					"type": ["string", "null"],
-					"description": "HTML body parsed from the inbound MIME, matching the `email.parsed.body_html` field on the webhook payload. Null when the message had no HTML part or parsing failed."
+				"message_count": {
+					"type": "integer",
+					"description": "Total messages in the thread. `messages` is capped, so\n`truncated` is true (and this can exceed `messages.length`)\nwhen older messages were omitted.\n"
 				},
-				"status": {
-					"type": "string",
-					"description": "Lifecycle status of an INBOUND email (a row in the `emails`\ntable). Distinct from `SentEmailStatus`, which describes\nthe OUTBOUND lifecycle (the `sent_emails` table) and uses\na different vocabulary because the lifecycles differ.\nPossible values:\n\n  - `pending`: the row was inserted at ingestion (mx_main)\n    and has not yet completed the spam / filter / auth\n    pipeline. Body and parsed fields are present; webhook\n    delivery is not yet scheduled. Most rows transition out\n    of `pending` within seconds.\n  - `accepted`: the inbound passed the policy gates and is\n    queued for webhook delivery. The `webhook_status` field\n    tracks the separate webhook-delivery lifecycle from\n    this point.\n  - `completed`: terminal success. Webhook delivery\n    attempted and acknowledged by every active endpoint, OR\n    no endpoints are configured, so the row is durably\n    archived.\n  - `rejected`: terminal failure at ingestion (spam, blocked\n    sender, filter rule, malformed). The body and metadata\n    are stored for auditing but no webhook fires and the\n    row is not repliable.\n\nSee also `webhook_status` (separate enum tracking the\nwebhook-delivery state machine) and `SentEmailStatus` (the\noutbound vocabulary).\n",
-					"enum": [
-						"pending",
-						"accepted",
-						"completed",
-						"rejected"
-					]
+				"truncated": {
+					"type": "boolean",
+					"description": "True when `messages` omits part of the conversation because\nthe thread exceeds the per-call cap.\n"
 				},
-				"domain": { "type": "string" },
+				"messages": {
+					"type": "array",
+					"items": {
+						"type": "object",
+						"description": "One message in the conversation, with its body and a chat role.",
+						"properties": {
+							"role": {
+								"type": "string",
+								"enum": ["user", "assistant"],
+								"description": "Chat role derived from `direction`: `user` for inbound\n(received) messages, `assistant` for outbound (your own prior\nreplies). Lets `messages` be passed directly to a chat model.\n"
+							},
+							"direction": {
+								"type": "string",
+								"enum": ["inbound", "outbound"],
+								"description": "`inbound` for a received email (`/emails/{id}`), `outbound`\nfor a send (`/sent-emails/{id}`).\n"
+							},
+							"id": {
+								"type": "string",
+								"format": "uuid"
+							},
+							"message_id": { "type": ["string", "null"] },
+							"from": { "type": ["string", "null"] },
+							"to": { "type": ["string", "null"] },
+							"subject": { "type": ["string", "null"] },
+							"text": {
+								"type": "string",
+								"description": "Plain-text body. Empty string when the message has no text\npart or its content was discarded by retention.\n"
+							},
+							"timestamp": {
+								"type": ["string", "null"],
+								"format": "date-time",
+								"description": "received_at for inbound, created_at for outbound."
+							}
+						},
+						"required": [
+							"role",
+							"direction",
+							"id",
+							"text"
+						]
+					}
+				}
+			},
+			"required": [
+				"thread_id",
+				"message_count",
+				"truncated",
+				"messages"
+			]
+		},
+		"sdkName": "getConversation",
+		"summary": "Get the conversation an email belongs to",
+		"tag": "Emails",
+		"tagCommand": "emails"
+	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "get-email",
+		"description": "Returns the full record for an inbound email received at one\nof your verified domains, including the parsed text and HTML\nbodies, threading metadata, SMTP envelope detail, webhook\ndelivery state, and a `replies` array for any outbound sends\nrecorded as replies to this inbound.\n\nFor listing inbound emails (with cursor pagination, status\nand date filters, and free-text search), use\n`/emails`. Outbound (sent) email records are NOT returned\nhere; use `/sent-emails/{id}` for those.\n\nThe response carries four sender-shaped fields whose\nmeanings overlap. `from_email` is the canonical \"who sent\nthis\" field for most use cases (parsed bare address from\nthe `From:` header, with a `sender` fallback). `from_header`\nis the raw header including any display name. `sender` and\n`smtp_mail_from` both carry the SMTP envelope MAIL FROM\n(return-path) and are equal by construction; `sender` is\nthe older field name retained for compatibility. See\n`primitive describe emails:get-email | jq '.responseSchema.properties'`\nfor per-field detail.\n",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "getEmail",
+		"path": "/emails/{id}",
+		"pathParams": [{
+			"description": "Resource UUID",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"properties": {
+				"id": {
+					"type": "string",
+					"format": "uuid"
+				},
+				"message_id": { "type": ["string", "null"] },
+				"domain_id": {
+					"type": ["string", "null"],
+					"format": "uuid"
+				},
+				"org_id": {
+					"type": ["string", "null"],
+					"format": "uuid"
+				},
+				"sender": {
+					"type": "string",
+					"description": "SMTP envelope sender (return-path) the inbound mail server\naccepted. Same value as `smtp_mail_from`; both fields exist\nso protocol-aware tooling can use whichever name it expects.\n\nFor most legitimate mail this equals `from_email`; for\nmailing lists, bounce handlers, and forwarders it is\ntypically the bounce-handling address rather than the\nhuman-visible sender.\n\n**For the canonical \"who sent this email\" value, use\n`from_email`.**\n"
+				},
+				"recipient": { "type": "string" },
+				"subject": { "type": ["string", "null"] },
+				"body_text": {
+					"type": ["string", "null"],
+					"description": "Plain-text body parsed from the inbound MIME, matching the `email.parsed.body_text` field on the webhook payload. Null when the message had no text part or parsing failed."
+				},
+				"body_html": {
+					"type": ["string", "null"],
+					"description": "HTML body parsed from the inbound MIME, matching the `email.parsed.body_html` field on the webhook payload. Null when the message had no HTML part or parsing failed."
+				},
+				"status": {
+					"type": "string",
+					"description": "Lifecycle status of an INBOUND email (a row in the `emails`\ntable). Distinct from `SentEmailStatus`, which describes\nthe OUTBOUND lifecycle (the `sent_emails` table) and uses\na different vocabulary because the lifecycles differ.\nPossible values:\n\n  - `pending`: the row was inserted at ingestion (mx_main)\n    and has not yet completed the spam / filter / auth\n    pipeline. Body and parsed fields are present; webhook\n    delivery is not yet scheduled. Most rows transition out\n    of `pending` within seconds.\n  - `accepted`: the inbound passed the policy gates and is\n    queued for webhook delivery. The `webhook_status` field\n    tracks the separate webhook-delivery lifecycle from\n    this point.\n  - `completed`: terminal success. Webhook delivery\n    attempted and acknowledged by every active endpoint, OR\n    no endpoints are configured, so the row is durably\n    archived.\n  - `rejected`: terminal failure at ingestion (spam, blocked\n    sender, filter rule, malformed). The body and metadata\n    are stored for auditing but no webhook fires and the\n    row is not repliable.\n\nSee also `webhook_status` (separate enum tracking the\nwebhook-delivery state machine) and `SentEmailStatus` (the\noutbound vocabulary).\n",
+					"enum": [
+						"pending",
+						"accepted",
+						"completed",
+						"rejected"
+					]
+				},
+				"domain": { "type": "string" },
 				"spam_score": { "type": ["number", "null"] },
 				"raw_size_bytes": { "type": ["integer", "null"] },
 				"raw_sha256": { "type": ["string", "null"] },
@@ -13093,532 +12705,6 @@ const operationManifest = [
 	}
 ];
 //#endregion
-//#region ../packages/api-core/src/client.ts
-/**
-* Host-aware Primitive API client and shared error type.
-*
-* Lives in api-core (instead of sdk-node) so the CLI can build a
-* configured request client without taking a dependency on sdk-node.
-* The higher-level `PrimitiveClient` (with `.send`, `.reply`,
-* `.forward`) still lives in sdk-node because it needs the
-* `ReceivedEmail` type from the webhook parsing surface.
-*/
-const DEFAULT_API_BASE_URL_1 = "https://www.primitive.dev/api/v1";
-const DEFAULT_API_BASE_URL_2 = "https://api.primitive.dev/v1";
-function createDefaultAuth(apiKey) {
-	return (security) => {
-		if (security.type === "http" && security.scheme === "bearer") return apiKey;
-	};
-}
-var PrimitiveApiClient = class {
-	/**
-	* Generated client targeting the primary API host (apiBaseUrl1). Use
-	* this when passing `client: ...` to a generated operation function
-	* for every endpoint EXCEPT /send-mail. The hand-written
-	* PrimitiveClient.send / .reply / .forward methods on the subclass
-	* route /send-mail to the host-2 client internally.
-	*/
-	client;
-	/**
-	* @internal Generated client targeting the attachments-supporting
-	* send host (apiBaseUrl2). Used by PrimitiveClient.send() under the
-	* hood. Exposed for the CLI's hand-rolled send command, which calls
-	* the generated sendEmail directly; not part of the publicly-
-	* documented SDK surface. Customer code should call .send() on the
-	* subclass instead.
-	*/
-	_sendClient;
-	constructor(options = {}) {
-		const { apiKey, auth, apiBaseUrl1 = DEFAULT_API_BASE_URL_1, apiBaseUrl2 = DEFAULT_API_BASE_URL_2, ...config } = options;
-		const resolvedAuth = auth ?? createDefaultAuth(apiKey);
-		this.client = createClient(createConfig({
-			...config,
-			auth: resolvedAuth,
-			baseUrl: apiBaseUrl1
-		}));
-		this._sendClient = createClient(createConfig({
-			...config,
-			auth: resolvedAuth,
-			baseUrl: apiBaseUrl2
-		}));
-	}
-	getConfig() {
-		return this.client.getConfig();
-	}
-	setConfig(config) {
-		return this.client.setConfig(config);
-	}
-};
-//#endregion
-//#region src/oclif/auth.ts
-const CREDENTIALS_FILE = "credentials.json";
-const CREDENTIALS_LOCK_DIR = "credentials.lock";
-const CREDENTIALS_LOCK_OWNER_FILE = "owner.json";
-const CREDENTIALS_LOCK_STALE_MS = 1800 * 1e3;
-const MALFORMED_CREDENTIALS_HINT = "Run `primitive logout` and then `primitive signin`.";
-const CREDENTIALS_LOCK_CLEANUP_SIGNALS = [
-	"SIGINT",
-	"SIGTERM",
-	"SIGHUP"
-];
-function isRecord$2(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function requireString(value, key) {
-	const raw = value[key];
-	if (typeof raw !== "string" || raw.trim().length === 0) throw new Error(`Stored Primitive CLI credentials are malformed: ${key} must be a non-empty string. ${MALFORMED_CREDENTIALS_HINT}`);
-	return raw;
-}
-/**
-* Sentinel returned by parseCredentials when the on-disk credentials were
-* written by an API-key-based CLI. The caller treats this as "not logged in"
-* after clearing the local file. The backing API key is intentionally not
-* revoked; API keys still work when passed explicitly via --api-key/env.
-*/
-var LegacyApiKeyCredentialFormatError = class extends Error {
-	constructor() {
-		super("legacy_api_key_credential_format");
-		this.name = "LegacyApiKeyCredentialFormatError";
-	}
-};
-function parseCredentials(raw) {
-	if (!isRecord$2(raw)) throw new Error(`Stored Primitive CLI credentials are malformed: expected a JSON object. ${MALFORMED_CREDENTIALS_HINT}`);
-	if (raw.auth_method !== "oauth") {
-		if (typeof raw.api_key === "string" || typeof raw.key_id === "string" || typeof raw.base_url === "string") throw new LegacyApiKeyCredentialFormatError();
-		throw new Error(`Stored Primitive CLI credentials are malformed: auth_method must be oauth. ${MALFORMED_CREDENTIALS_HINT}`);
-	}
-	const orgName = raw.org_name;
-	if (orgName !== null && typeof orgName !== "string") throw new Error(`Stored Primitive CLI credentials are malformed: org_name must be a string or null. ${MALFORMED_CREDENTIALS_HINT}`);
-	if (requireString(raw, "token_type") !== "Bearer") throw new Error(`Stored Primitive CLI credentials are malformed: token_type must be Bearer. ${MALFORMED_CREDENTIALS_HINT}`);
-	return {
-		auth_method: "oauth",
-		access_token: requireString(raw, "access_token"),
-		refresh_token: requireString(raw, "refresh_token"),
-		token_type: "Bearer",
-		expires_at: requireString(raw, "expires_at"),
-		oauth_grant_id: requireString(raw, "oauth_grant_id"),
-		oauth_client_id: requireString(raw, "oauth_client_id"),
-		org_id: requireString(raw, "org_id"),
-		org_name: orgName,
-		api_base_url_1: requireString(raw, "api_base_url_1"),
-		created_at: requireString(raw, "created_at")
-	};
-}
-function credentialsPath(configDir) {
-	return join(configDir, CREDENTIALS_FILE);
-}
-function credentialsLockPath(configDir) {
-	return join(configDir, CREDENTIALS_LOCK_DIR);
-}
-function normalize(url, fallback) {
-	const trimmed = url?.trim();
-	if (!trimmed) return fallback;
-	return trimmed.replace(/\/+$/, "");
-}
-function normalizeApiBaseUrl1(url) {
-	return normalize(url, DEFAULT_API_BASE_URL_1);
-}
-function normalizeApiBaseUrl2(url) {
-	return normalize(url, DEFAULT_API_BASE_URL_2);
-}
-function cliAccessTokenExpiresAt(expiresInSeconds, now = Date.now) {
-	return new Date(now() + expiresInSeconds * 1e3).toISOString();
-}
-function loadCliCredentials(configDir) {
-	const path = credentialsPath(configDir);
-	let contents;
-	try {
-		contents = readFileSync(path, "utf8");
-	} catch (error) {
-		if (error && typeof error === "object" && error.code === "ENOENT") return null;
-		const detail = error instanceof Error ? error.message : String(error);
-		throw new Error(`Could not read Primitive CLI credentials: ${detail}`);
-	}
-	try {
-		return parseCredentials(JSON.parse(contents));
-	} catch (error) {
-		if (error instanceof LegacyApiKeyCredentialFormatError) {
-			try {
-				rmSync(path, { force: true });
-			} catch {}
-			process.stderr.write("Removed local Primitive CLI API-key login state. API keys are still valid when passed explicitly, but saved CLI auth now uses OAuth. Run `primitive signin` to create an OAuth session. No API key was revoked.\n");
-			return null;
-		}
-		if (error instanceof SyntaxError) throw new Error("Stored Primitive CLI credentials are not valid JSON. Run `primitive logout` and then `primitive signin`.");
-		throw error;
-	}
-}
-function saveCliCredentials(configDir, credentials) {
-	mkdirSync(configDir, {
-		mode: 448,
-		recursive: true
-	});
-	const path = credentialsPath(configDir);
-	const tempPath = join(configDir, `${CREDENTIALS_FILE}.${process.pid}.${randomUUID()}.tmp`);
-	try {
-		writeFileSync(tempPath, `${JSON.stringify(credentials, null, 2)}\n`, { mode: 384 });
-		chmodSync(tempPath, 384);
-		renameSync(tempPath, path);
-		chmodSync(path, 384);
-	} catch (error) {
-		rmSync(tempPath, { force: true });
-		throw error;
-	}
-}
-function deleteCliCredentials(configDir) {
-	rmSync(credentialsPath(configDir), { force: true });
-}
-function deleteCliCredentialsLock(configDir) {
-	rmSync(credentialsLockPath(configDir), {
-		force: true,
-		recursive: true
-	});
-}
-function errorCode(error) {
-	return error && typeof error === "object" ? error.code : void 0;
-}
-function removeStaleCliCredentialsLock(lockPath, staleMs, now) {
-	try {
-		const stats = statSync(lockPath);
-		if (now() - stats.mtimeMs < staleMs) return false;
-	} catch (error) {
-		if (errorCode(error) === "ENOENT") return true;
-		throw error;
-	}
-	rmSync(lockPath, {
-		force: true,
-		recursive: true
-	});
-	return true;
-}
-function readCliCredentialsLockOwner(lockPath) {
-	let raw;
-	try {
-		raw = readFileSync(join(lockPath, CREDENTIALS_LOCK_OWNER_FILE), "utf8");
-	} catch (error) {
-		if (errorCode(error) === "ENOENT") return null;
-		throw error;
-	}
-	try {
-		const pid = JSON.parse(raw)?.pid;
-		return Number.isInteger(pid) && pid > 0 ? { pid } : null;
-	} catch {
-		return null;
-	}
-}
-function processIsRunning(pid) {
-	try {
-		process.kill(pid, 0);
-		return true;
-	} catch (error) {
-		if (errorCode(error) === "ESRCH") return false;
-		return true;
-	}
-}
-function removeRecoverableCliCredentialsLock(params) {
-	const owner = readCliCredentialsLockOwner(params.lockPath);
-	if (owner && params.isRunning(owner.pid)) return false;
-	if (owner) {
-		rmSync(params.lockPath, {
-			force: true,
-			recursive: true
-		});
-		return true;
-	}
-	return removeStaleCliCredentialsLock(params.lockPath, params.staleMs, params.now);
-}
-function writeCliCredentialsLockOwner(lockPath) {
-	const ownerPath = join(lockPath, CREDENTIALS_LOCK_OWNER_FILE);
-	writeFileSync(ownerPath, `${JSON.stringify({
-		created_at: (/* @__PURE__ */ new Date()).toISOString(),
-		pid: process.pid
-	})}\n`, { mode: 384 });
-	chmodSync(ownerPath, 384);
-}
-function installCredentialsLockSignalCleanup(lockPath) {
-	let active = true;
-	const listeners = CREDENTIALS_LOCK_CLEANUP_SIGNALS.map((signal) => {
-		const listener = () => {
-			if (!active) return;
-			active = false;
-			rmSync(lockPath, {
-				force: true,
-				recursive: true
-			});
-			process.exit(signal === "SIGINT" ? 130 : signal === "SIGTERM" ? 143 : 129);
-		};
-		process.once(signal, listener);
-		return {
-			listener,
-			signal
-		};
-	});
-	return () => {
-		if (!active) return;
-		active = false;
-		for (const { listener, signal } of listeners) process.removeListener(signal, listener);
-	};
-}
-function credentialsLockInProgressMessage(lockPath) {
-	return `Another Primitive CLI credential operation is already in progress. Wait for it to finish, then retry. If no Primitive auth command is still running, run \`primitive logout --force\` to clear local CLI auth state and remove ${lockPath}.`;
-}
-function acquireCliCredentialsLock(configDir, options = {}) {
-	mkdirSync(configDir, {
-		mode: 448,
-		recursive: true
-	});
-	const lockPath = credentialsLockPath(configDir);
-	const installSignalHandlers = options.installSignalHandlers ?? true;
-	const isRunning = options.isProcessRunning ?? processIsRunning;
-	const now = options.now ?? Date.now;
-	const staleMs = options.staleMs ?? CREDENTIALS_LOCK_STALE_MS;
-	let acquired = false;
-	for (let attempt = 0; attempt < 2; attempt += 1) try {
-		mkdirSync(lockPath, { mode: 448 });
-		acquired = true;
-		break;
-	} catch (error) {
-		if (errorCode(error) !== "EEXIST") throw error;
-		if (removeRecoverableCliCredentialsLock({
-			isRunning,
-			lockPath,
-			now,
-			staleMs
-		})) continue;
-		throw new Error(credentialsLockInProgressMessage(lockPath));
-	}
-	if (!acquired) throw new Error(credentialsLockInProgressMessage(lockPath));
-	try {
-		writeCliCredentialsLockOwner(lockPath);
-	} catch (error) {
-		rmSync(lockPath, {
-			force: true,
-			recursive: true
-		});
-		throw error;
-	}
-	const removeSignalCleanup = installSignalHandlers ? installCredentialsLockSignalCleanup(lockPath) : () => void 0;
-	let released = false;
-	return () => {
-		if (released) return;
-		released = true;
-		removeSignalCleanup();
-		rmSync(lockPath, {
-			force: true,
-			recursive: true
-		});
-	};
-}
-function resolveCliAuth(params) {
-	const apiKey = params.apiKey?.trim();
-	const apiBaseUrl2 = normalizeApiBaseUrl2(params.apiBaseUrl2);
-	if (apiKey) return {
-		apiKey,
-		apiBaseUrl1: normalizeApiBaseUrl1(params.apiBaseUrl1),
-		apiBaseUrl2,
-		credentials: null,
-		source: "flag-or-env"
-	};
-	const credentials = loadCliCredentials(params.configDir);
-	if (credentials) return {
-		apiKey: credentials.access_token,
-		apiBaseUrl1: credentials.api_base_url_1,
-		apiBaseUrl2,
-		credentials,
-		source: "stored"
-	};
-	return {
-		apiKey: void 0,
-		apiBaseUrl1: normalizeApiBaseUrl1(params.apiBaseUrl1),
-		apiBaseUrl2,
-		credentials: null,
-		source: "none"
-	};
-}
-//#endregion
-//#region src/oclif/cli-config.ts
-const CONFIG_FILE = "config.json";
-const CONFIG_VERSION = 1;
-const DEFAULT_ENVIRONMENT = "default";
-function cliConfigPath(configDir) {
-	return join(configDir, CONFIG_FILE);
-}
-function cliConfigError(message) {
-	return new Errors.CLIError(`${message} Run \`primitive config reset\` to clear the local CLI config.`, { exit: 1 });
-}
-function isRecord$1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function normalizeCliEnvironmentName(name) {
-	const trimmed = name?.trim();
-	if (!trimmed) throw new Errors.CLIError("Environment name must be a non-empty string.", { exit: 1 });
-	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,62}$/.test(trimmed)) throw new Errors.CLIError("Environment name must start with a letter or number and may only contain letters, numbers, '.', '_', or '-'.", { exit: 1 });
-	return trimmed;
-}
-function validateCliHeaderName(name) {
-	const trimmed = name.trim();
-	if (!trimmed) throw new Errors.CLIError("Header name must be a non-empty string.", { exit: 1 });
-	if (!/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/.test(trimmed)) throw new Errors.CLIError(`Invalid header name: ${name}`, { exit: 1 });
-	if (trimmed.toLowerCase() === "authorization") throw new Errors.CLIError("The Authorization header is managed by PRIMITIVE_API_KEY or saved OAuth CLI credentials.", { exit: 1 });
-	return trimmed;
-}
-function validateCliHeaderValue(value, name) {
-	if (value.length === 0) throw new Errors.CLIError(`Header ${name} value must not be empty.`, { exit: 1 });
-	if (/[\r\n\0]/.test(value)) throw new Errors.CLIError(`Header ${name} value must not contain CR, LF, or NUL characters.`, { exit: 1 });
-	return value;
-}
-function parseHeaderAssignment(assignment) {
-	const separator = assignment.indexOf("=");
-	if (separator <= 0) throw new Errors.CLIError("Header values must use name=value syntax, for example `x-custom=secret`.", { exit: 1 });
-	const name = validateCliHeaderName(assignment.slice(0, separator));
-	return [name, validateCliHeaderValue(assignment.slice(separator + 1), name)];
-}
-function parseHeaders(raw, context) {
-	if (raw === void 0) return {};
-	if (!isRecord$1(raw)) throw cliConfigError(`${context} headers must be a JSON object.`);
-	const headers = {};
-	for (const [rawName, rawValue] of Object.entries(raw)) {
-		const name = validateCliHeaderName(rawName);
-		if (typeof rawValue !== "string") throw cliConfigError(`${context} header ${name} must be a string.`);
-		headers[name] = validateCliHeaderValue(rawValue, name);
-	}
-	return headers;
-}
-function parseEnvironmentConfig(raw, context) {
-	if (!isRecord$1(raw)) throw cliConfigError(`${context} must be a JSON object.`);
-	const env = {};
-	if (raw.api_base_url_1 !== void 0) {
-		if (typeof raw.api_base_url_1 !== "string") throw cliConfigError(`${context}.api_base_url_1 must be a string.`);
-		env.api_base_url_1 = normalizeApiBaseUrl1(raw.api_base_url_1);
-	}
-	if (raw.api_base_url_2 !== void 0) {
-		if (typeof raw.api_base_url_2 !== "string") throw cliConfigError(`${context}.api_base_url_2 must be a string.`);
-		env.api_base_url_2 = normalizeApiBaseUrl2(raw.api_base_url_2);
-	}
-	const headers = parseHeaders(raw.headers, context);
-	if (Object.keys(headers).length > 0) env.headers = headers;
-	return env;
-}
-function parseStoredCliConfig(raw) {
-	if (!isRecord$1(raw)) throw cliConfigError("Primitive CLI config must be a JSON object.");
-	if (raw.version !== CONFIG_VERSION) throw cliConfigError(`Primitive CLI config version must be ${CONFIG_VERSION}.`);
-	const currentRaw = raw.current_environment;
-	const current_environment = currentRaw === null || currentRaw === void 0 ? null : typeof currentRaw === "string" ? normalizeCliEnvironmentName(currentRaw) : (() => {
-		throw cliConfigError("Primitive CLI config current_environment must be a string or null.");
-	})();
-	if (!isRecord$1(raw.environments)) throw cliConfigError("Primitive CLI config environments must be an object.");
-	const environments = {};
-	for (const [rawName, rawEnv] of Object.entries(raw.environments)) {
-		const name = normalizeCliEnvironmentName(rawName);
-		environments[name] = parseEnvironmentConfig(rawEnv, `Primitive CLI config environment ${name}`);
-	}
-	if (current_environment && !environments[current_environment]) throw cliConfigError(`Primitive CLI config current environment ${current_environment} does not exist.`);
-	return {
-		version: CONFIG_VERSION,
-		current_environment,
-		environments
-	};
-}
-function emptyCliConfig() {
-	return {
-		version: CONFIG_VERSION,
-		current_environment: null,
-		environments: {}
-	};
-}
-function loadCliConfig(configDir) {
-	const path = cliConfigPath(configDir);
-	let contents;
-	try {
-		contents = readFileSync(path, "utf8");
-	} catch (error) {
-		if (error && typeof error === "object" && error.code === "ENOENT") return null;
-		throw cliConfigError(`Could not read Primitive CLI config: ${error instanceof Error ? error.message : String(error)}.`);
-	}
-	try {
-		return parseStoredCliConfig(JSON.parse(contents));
-	} catch (error) {
-		if (error instanceof SyntaxError) throw cliConfigError("Primitive CLI config is not valid JSON.");
-		throw error;
-	}
-}
-function saveCliConfig(configDir, config) {
-	mkdirSync(configDir, {
-		mode: 448,
-		recursive: true
-	});
-	const path = cliConfigPath(configDir);
-	const tempPath = join(configDir, `${CONFIG_FILE}.${process.pid}.${randomUUID()}.tmp`);
-	try {
-		writeFileSync(tempPath, `${JSON.stringify(config, null, 2)}\n`, { mode: 384 });
-		renameSync(tempPath, path);
-	} catch (error) {
-		rmSync(tempPath, { force: true });
-		throw error;
-	}
-}
-function deleteCliConfig(configDir) {
-	rmSync(cliConfigPath(configDir), { force: true });
-}
-function resolveConfigEnvironment(config) {
-	if (!config) return null;
-	const current = config.current_environment;
-	if (current) {
-		const environment = config.environments[current];
-		return environment ? {
-			name: current,
-			config: environment
-		} : null;
-	}
-	const defaultEnvironment = config.environments[DEFAULT_ENVIRONMENT];
-	return defaultEnvironment ? {
-		name: DEFAULT_ENVIRONMENT,
-		config: defaultEnvironment
-	} : null;
-}
-function upsertCliEnvironment(params) {
-	const name = normalizeCliEnvironmentName(params.environmentName ?? "default");
-	const existing = params.config.environments[name] ?? {};
-	const nextHeaders = { ...existing.headers ?? {} };
-	for (const assignment of params.headers ?? []) {
-		const [headerName, value] = parseHeaderAssignment(assignment);
-		nextHeaders[headerName] = value;
-	}
-	for (const rawName of params.unsetHeaders ?? []) delete nextHeaders[validateCliHeaderName(rawName)];
-	const nextEnvironment = {
-		...existing,
-		...params.apiBaseUrl1 !== void 0 ? { api_base_url_1: normalizeApiBaseUrl1(params.apiBaseUrl1) } : {},
-		...params.apiBaseUrl2 !== void 0 ? { api_base_url_2: normalizeApiBaseUrl2(params.apiBaseUrl2) } : {},
-		...Object.keys(nextHeaders).length > 0 ? { headers: nextHeaders } : {}
-	};
-	if (Object.keys(nextHeaders).length === 0) delete nextEnvironment.headers;
-	return {
-		...params.config,
-		current_environment: params.use === false ? params.config.current_environment : name,
-		environments: {
-			...params.config.environments,
-			[name]: nextEnvironment
-		}
-	};
-}
-function removeCliEnvironment(config, environmentName) {
-	const name = normalizeCliEnvironmentName(environmentName);
-	const environments = { ...config.environments };
-	delete environments[name];
-	return {
-		...config,
-		current_environment: config.current_environment === name ? null : config.current_environment,
-		environments
-	};
-}
-function redactCliEnvironment(environment) {
-	const headers = environment.headers && Object.keys(environment.headers).length > 0 ? Object.fromEntries(Object.keys(environment.headers).map((name) => [name, "***"])) : void 0;
-	return {
-		...environment,
-		...headers ? { headers } : {}
-	};
-}
-//#endregion
 //#region src/oclif/api-client.ts
 const API_HEADERS_ENV = "PRIMITIVE_API_HEADERS";
 const OAUTH_REFRESH_SKEW_MS = 60 * 1e3;
@@ -14535,15 +13621,11 @@ async function fetchEmailSearchPage(params) {
 function sleep$1(ms) {
 	return new Promise((resolve) => setTimeout(resolve, ms));
 }
-//#endregion
-//#region src/oclif/commands/chat.ts
-const DEFAULT_CHAT_TIMEOUT_SECONDS = 120;
-const DEFAULT_STRICT_PHASE_SECONDS = 60;
 function cliError$6(message) {
 	return new Errors.CLIError(message, { exit: 1 });
 }
-async function readStdinToString() {
-	if (process.stdin.isTTY) throw cliError$6("No message provided. Pass the message as the second positional argument or pipe it via stdin.");
+async function readStdinToString(missingMessage = "No message provided. Pass the message as the second positional argument or pipe it via stdin.") {
+	if (process.stdin.isTTY) throw cliError$6(missingMessage);
 	const chunks = [];
 	for await (const chunk of process.stdin) chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
 	return Buffer.concat(chunks).toString("utf8");
@@ -14655,6 +13737,11 @@ function shellQuote(value) {
 function commandFromArgv(argv) {
 	return argv.map(shellQuote).join(" ");
 }
+function parseLocalChatIdArg(value) {
+	if (value === void 0 || !/^(0|[1-9]\d*)$/.test(value)) return null;
+	const parsed = Number(value);
+	return Number.isSafeInteger(parsed) ? parsed : null;
+}
 function resolveChatResponseBody(reply) {
 	if (reply.body_text && reply.body_text.length > 0) return {
 		body: reply.body_text,
@@ -14709,10 +13796,35 @@ function buildCommand(kind, description, argv, options = {}) {
 		requires_message: requiresMessage
 	};
 }
+function shouldPreferStrictContinuation(context) {
+	const hasCustomStrictPhase = context.strictPhaseSeconds !== 60;
+	return context.strictOnly || context.matchStrategy === "strict" && !hasCustomStrictPhase;
+}
 function buildChatFollowUpCommands(context) {
 	const commands = [];
-	const hasCustomStrictPhase = context.strictPhaseSeconds !== DEFAULT_STRICT_PHASE_SECONDS;
-	const shouldPreferStrictContinuation = context.strictOnly || context.matchStrategy === "strict" && !hasCustomStrictPhase;
+	const hasCustomStrictPhase = context.strictPhaseSeconds !== 60;
+	const preferStrictContinuation = shouldPreferStrictContinuation(context);
+	if (context.localChatId !== void 0) {
+		const localContinueParts = [
+			"primitive",
+			"chat",
+			"reply",
+			String(context.localChatId),
+			"<message>"
+		];
+		if (context.json) localContinueParts.push("--json");
+		if (context.quiet) localContinueParts.push("--quiet");
+		commands.push(buildCommand("continue_chat", "Continue this chat", localContinueParts, { requiresMessage: true }));
+		const activeContinueParts = [
+			"primitive",
+			"chat",
+			"reply",
+			"<message>"
+		];
+		if (context.json) activeContinueParts.push("--json");
+		if (context.quiet) activeContinueParts.push("--quiet");
+		commands.push(buildCommand("continue_active_chat", "Continue the active chat", activeContinueParts, { requiresMessage: true }));
+	}
 	const continueParts = [
 		"primitive",
 		"chat",
@@ -14728,9 +13840,9 @@ function buildChatFollowUpCommands(context) {
 	];
 	if (context.json) continueParts.push("--json");
 	if (context.quiet) continueParts.push("--quiet");
-	if (shouldPreferStrictContinuation) continueParts.push("--strict-only");
+	if (preferStrictContinuation) continueParts.push("--strict-only");
 	else if (hasCustomStrictPhase) continueParts.push("--strict-phase-seconds", String(context.strictPhaseSeconds));
-	commands.push(buildCommand("continue_chat", "Continue this chat", continueParts, { requiresMessage: true }));
+	commands.push(buildCommand(context.localChatId === void 0 ? "continue_chat" : "continue_chat_explicit", context.localChatId === void 0 ? "Continue this chat" : "Continue this chat explicitly", continueParts, { requiresMessage: true }));
 	commands.push(buildCommand("reply_direct", "Reply directly to the inbound email", [
 		"primitive",
 		"reply",
@@ -14804,6 +13916,7 @@ function buildChatJsonEnvelope(context) {
 	return {
 		sent: context.sent,
 		reply: context.reply,
+		local_chat_id: context.localChatId ?? null,
 		response_body: responseBody.body,
 		response_body_format: responseBody.format,
 		match: {
@@ -14814,6 +13927,25 @@ function buildChatJsonEnvelope(context) {
 		follow_up_commands: buildChatFollowUpCommands(context)
 	};
 }
+function persistActiveChat(params) {
+	try {
+		return saveActiveChatState(params.configDir, {
+			from: params.context.from,
+			last_reply_email_id: params.context.reply.id,
+			last_reply_received_at: params.context.reply.received_at,
+			last_sent_email_id: params.context.sent.id,
+			recipient: params.context.recipient,
+			strict_only: shouldPreferStrictContinuation(params.context),
+			strict_phase_seconds: params.context.strictPhaseSeconds,
+			thread_id: params.context.reply.thread_id ?? null,
+			timeout_seconds: params.context.timeoutSeconds
+		}, { preferredLocalId: params.preferredLocalId }).local_id;
+	} catch (error) {
+		const detail = error instanceof Error ? error.message : String(error);
+		params.writeWarning?.(`Warning: could not save local chat state: ${detail}\n`);
+		return null;
+	}
+}
 function formatChatResponse(context) {
 	const accepted = context.sent.accepted.join(", ") || context.recipient;
 	const responseBody = resolveChatResponseBody(context.reply);
@@ -14837,6 +13969,7 @@ function formatChatResponse(context) {
 	];
 	if (context.reply.reply_to_sent_email_id) lines.push(`  Reply to sent email id: ${context.reply.reply_to_sent_email_id}`);
 	if (context.reply.message_id) lines.push(`  Message-Id: ${context.reply.message_id}`);
+	if (context.localChatId !== void 0) lines.push(`  Local chat id: ${context.localChatId}`);
 	lines.push("", "Helpful follow-up commands", "  Replace <message> before running commands that include it.", "  Commands are templates; use --json for parse-safe output.", "  When shown, --strict-only prefers timing out over matching the wrong reply.");
 	for (const { description, command } of buildChatFollowUpCommands(context)) lines.push(`  ${description}:`, `    ${command}`);
 	lines.push("", `Response body (${responseBody.format}; use --json for parsing)`, "----- BEGIN RESPONSE -----", responseBody.body || "(empty response)", "----- END RESPONSE -----");
@@ -14926,6 +14059,8 @@ var ChatCommand = class ChatCommand extends Command {
   --reply-to-email-id <inbound-email-id>. Reply mode uses Primitive's
   reply endpoint, so the reply subject and threading headers are
   derived from the inbound email instead of copied into CLI flags.
+  Successful chat turns also save an active local chat, so the next
+  follow-up can be sent with \`primitive chat reply '<message>'\`.
 
   --json emits a structured envelope with both sides of the exchange,
   a direct response_body field, match details, and follow-up command
@@ -14945,6 +14080,7 @@ var ChatCommand = class ChatCommand extends Command {
 	static examples = [
 		"<%= config.bin %> chat help@agent.acme.dev 'how do I rotate my API key?'",
 		"cat error.log | <%= config.bin %> chat help@agent.acme.dev",
+		"<%= config.bin %> chat reply 'one more thing'",
 		"<%= config.bin %> chat help@agent.acme.dev --reply 'one more thing'",
 		"<%= config.bin %> chat help@agent.acme.dev --reply 'one more thing' --reply-to-email-id <inbound-email-id>",
 		"<%= config.bin %> chat help@agent.acme.dev 'follow up question' --json",
@@ -14980,15 +14116,20 @@ var ChatCommand = class ChatCommand extends Command {
 		reply: Flags.string({ description: "Reply body. Continues the latest inbound email from the recipient to your sender address; pass --reply-to-email-id for an exact thread." }),
 		"reply-to-email-id": Flags.string({ description: "Inbound email id to continue exactly. Uses Primitive's reply endpoint, so recipient, subject, and threading headers are derived from the inbound email." }),
 		"in-reply-to": Flags.string({ description: "Raw Message-Id of the parent email to thread a new send against. Prefer --reply-to-email-id with --reply when continuing an inbound email stored by Primitive." }),
+		"chat-local-id": Flags.integer({
+			description: "Local chat id to update after this command succeeds. Internal plumbing for `primitive chat reply`.",
+			hidden: true,
+			min: 0
+		}),
 		json: Flags.boolean({ description: "Emit a structured JSON envelope { sent, reply, response_body, response_body_format, match, follow_up_commands } on stdout instead of the human-readable transcript." }),
 		quiet: Flags.boolean({ description: "Suppress stderr progress updates while sending and waiting. Errors and recovery commands are still written to stderr." }),
 		timeout: Flags.integer({
-			default: DEFAULT_CHAT_TIMEOUT_SECONDS,
+			default: 120,
 			description: "Seconds to wait for a reply before exiting non-zero; 0 waits forever.",
 			min: 0
 		}),
 		"strict-phase-seconds": Flags.integer({
-			default: DEFAULT_STRICT_PHASE_SECONDS,
+			default: 60,
 			description: "Seconds to wait in strict-threading mode (filter by reply_to_sent_email_id) before falling back to time-window matching. Set to the full --timeout to disable the fallback; --strict-only is the explicit way to do that.",
 			min: 1
 		}),
@@ -15172,16 +14313,133 @@ var ChatCommand = class ChatCommand extends Command {
 				return;
 			}
 			progress?.succeed(`Reply received from ${replyResult.reply.from_email}`);
-			const outputContext = {
+			let outputContext = {
 				...baseContext,
 				matchStrategy: replyResult.matchStrategy,
 				reply: replyResult.reply
 			};
+			const localChatId = persistActiveChat({
+				configDir: this.config.configDir,
+				context: outputContext,
+				preferredLocalId: flags["chat-local-id"],
+				writeWarning: (message) => process.stderr.write(message)
+			});
+			if (localChatId !== null) outputContext = {
+				...outputContext,
+				localChatId
+			};
 			if (flags.json) this.log(JSON.stringify(buildChatJsonEnvelope(outputContext), null, 2));
 			else this.log(formatChatResponse(outputContext));
 		});
 	}
 };
+var ChatReplyCommand = class ChatReplyCommand extends Command {
+	static description = `Reply in the active chat.
+
+  A successful \`primitive chat <email> <message>\` saves the latest
+  inbound reply as a local chat and makes it active. Use
+  \`primitive chat reply <message>\` for the active chat, or
+  \`primitive chat reply <local-id> <message>\` / \`--id <local-id>\`
+  for a specific local chat. The command uses Primitive's real reply
+  endpoint against the stored inbound email id, so the recipient,
+  subject, and threading headers are derived server-side from the
+  thread.
+
+  If no chat is open, start one with \`primitive chat <email> '<message>'\`.
+  For explicit control, use \`primitive chat <email> --reply '<message>'
+  --reply-to-email-id <inbound-email-id>\`.`;
+	static summary = "Reply in the active chat";
+	static examples = [
+		"<%= config.bin %> chat reply 'one more thing'",
+		"<%= config.bin %> chat reply 0 'one more thing'",
+		"<%= config.bin %> chat reply --id 0 'one more thing'",
+		"cat follow-up.txt | <%= config.bin %> chat reply"
+	];
+	static args = {
+		idOrMessage: Args.string({ description: "Reply body, or a local chat id when followed by a separate message." }),
+		message: Args.string({ description: "Reply body when the first positional argument is an id." })
+	};
+	static flags = {
+		"api-key": Flags.string({
+			description: "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive signin` credentials)",
+			env: "PRIMITIVE_API_KEY"
+		}),
+		"api-base-url-1": Flags.string({
+			description: "Override the primary API base URL. Internal testing only; not documented to customers.",
+			env: "PRIMITIVE_API_BASE_URL_1",
+			hidden: true
+		}),
+		"api-base-url-2": Flags.string({
+			description: "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+			env: "PRIMITIVE_API_BASE_URL_2",
+			hidden: true
+		}),
+		id: Flags.integer({
+			description: "Local chat id to reply in. Omit to use the most recent active chat.",
+			min: 0
+		}),
+		json: Flags.boolean({ description: "Emit a structured JSON envelope { sent, reply, response_body, response_body_format, match, follow_up_commands } on stdout instead of the human-readable transcript." }),
+		quiet: Flags.boolean({ description: "Suppress stderr progress updates while sending and waiting. Errors and recovery commands are still written to stderr." }),
+		timeout: Flags.integer({
+			description: "Seconds to wait for a reply before exiting non-zero. Defaults to the active chat's last timeout.",
+			min: 0
+		}),
+		"strict-phase-seconds": Flags.integer({
+			description: "Seconds to wait in strict-threading mode before falling back. Defaults to the active chat's last setting.",
+			min: 1
+		}),
+		"strict-only": Flags.boolean({ description: "Disable the time-window fallback. If the active chat was saved from a strict match, this is already the default." }),
+		interval: Flags.integer({
+			description: "Seconds between polls while waiting for the reply.",
+			min: 1
+		}),
+		"page-size": Flags.integer({
+			description: "Inbound emails to fetch per poll while waiting (1-100). Internal tuning knob.",
+			max: 100,
+			min: 1,
+			hidden: true
+		}),
+		time: Flags.boolean({ description: TIME_FLAG_DESCRIPTION })
+	};
+	async run() {
+		const { args, flags } = await this.parse(ChatReplyCommand);
+		const positionalLocalId = flags.id === void 0 && args.message !== void 0 ? parseLocalChatIdArg(args.idOrMessage) : void 0;
+		if (flags.id === void 0 && args.message !== void 0 && positionalLocalId === null) throw cliError$6("When passing two positional arguments to `primitive chat reply`, the first must be a local chat id. Use `primitive chat reply '<message>'` for the active chat or `primitive chat reply --id <id> '<message>'` for a specific chat.");
+		if (flags.id !== void 0 && args.message !== void 0) throw cliError$6("With --id, pass the reply body as a single positional argument or pipe it via stdin.");
+		const localId = flags.id ?? (typeof positionalLocalId === "number" ? positionalLocalId : void 0);
+		const state = localId === void 0 ? loadActiveChatState(this.config.configDir) : loadChatConversationByLocalId(this.config.configDir, localId);
+		if (!state) throw cliError$6(localId === void 0 ? "No open chat. Start one with `primitive chat <email> '<message>'`." : `No local chat ${localId}. Start one with \`primitive chat <email> '<message>'\` or omit --id to use the active chat.`);
+		const message = args.message !== void 0 ? args.message : args.idOrMessage !== void 0 && args.idOrMessage !== "" ? args.idOrMessage : await readStdinToString("No reply body provided. Pass the reply body as a positional argument or pipe it via stdin.");
+		if (!message.trim()) throw cliError$6("Reply body is empty.");
+		const argv = [
+			state.recipient,
+			"--reply",
+			message,
+			"--from",
+			state.from,
+			"--reply-to-email-id",
+			state.last_reply_email_id,
+			"--timeout",
+			String(flags.timeout ?? state.timeout_seconds),
+			"--strict-phase-seconds",
+			String(flags["strict-phase-seconds"] ?? state.strict_phase_seconds),
+			"--interval",
+			String(flags.interval ?? 2),
+			"--page-size",
+			String(flags["page-size"] ?? 50),
+			"--chat-local-id",
+			String(state.local_id)
+		];
+		if (flags["api-key"] !== void 0) argv.push("--api-key", flags["api-key"]);
+		if (flags["api-base-url-1"] !== void 0) argv.push("--api-base-url-1", flags["api-base-url-1"]);
+		if (flags["api-base-url-2"] !== void 0) argv.push("--api-base-url-2", flags["api-base-url-2"]);
+		if (flags.json) argv.push("--json");
+		if (flags.quiet) argv.push("--quiet");
+		if (state.strict_only || flags["strict-only"]) argv.push("--strict-only");
+		if (flags.time) argv.push("--time");
+		await ChatCommand.run(argv, { root: this.config.root });
+	}
+};
 async function waitForReply(params) {
 	const notice = params.notice ?? ((message) => {
 		process.stderr.write(`${message}\n`);
@@ -17186,8 +16444,8 @@ const PRIMITIVE_TEAM_AUTHOR = {
 	name: "Primitive Team",
 	url: "https://primitive.dev"
 };
-const SDK_VERSION_RANGE = "^0.33.0";
-const CLI_VERSION_RANGE = "^0.33.0";
+const SDK_VERSION_RANGE = "^0.34.0";
+const CLI_VERSION_RANGE = "^0.34.0";
 const ESBUILD_VERSION_RANGE = "^0.27.0";
 function renderHandler() {
 	return `// env.PRIMITIVE_API_KEY, env.PRIMITIVE_WEBHOOK_SECRET, and
@@ -18904,6 +18162,7 @@ var LoginCommand$1 = class extends Command {
 			if (polled.data) {
 				const login = unwrapData$2(polled.data);
 				if (!login) throw cliError$3("Primitive API returned an empty CLI poll response.");
+				deleteChatState(this.config.configDir);
 				saveCliCredentials(this.config.configDir, {
 					access_token: login.access_token,
 					api_base_url_1: apiBaseUrl1,
@@ -19125,6 +18384,7 @@ async function checkExistingCredentials(params) {
 	throw cliError$2(`Already logged in${existing.org_name ? ` for ${existing.org_name}` : ""}. Run \`primitive logout\` before ${copy.actionGerund}.`);
 }
 function saveSignupCredentials(params) {
+	deleteChatState(params.configDir);
 	saveCliCredentials(params.configDir, {
 		access_token: params.signup.access_token,
 		api_base_url_1: params.apiBaseUrl1,
@@ -19606,6 +18866,7 @@ function runForceLogout(params) {
 	const lockPath = credentialsLockPath(params.configDir);
 	const removed = [
 		existsSync(localCredentialsPath) ? "local Primitive CLI credentials" : null,
+		existsSync(chatStatePath(params.configDir)) ? "local chat reply state" : null,
 		existsSync(pendingPath) ? "pending email-code auth state" : null,
 		existsSync(lockPath) ? "credential lock" : null
 	].filter((value) => value !== null);
@@ -20659,6 +19920,7 @@ const CANONICAL_OPERATION_ALIASES = {
 	"domains:list": "domains:list-domains",
 	"domains:update": "domains:update-domain",
 	"domains:verify": "domains:verify-domain",
+	"emails:conversation": "emails:get-conversation",
 	"emails:delete": "emails:delete-email",
 	"emails:discard-content": "emails:discard-email-content",
 	"emails:download-raw": "emails:download-raw-email",
@@ -20718,6 +19980,7 @@ const COMMANDS = {
 	send: SendCommand,
 	reply: ReplyCommand,
 	chat: ChatCommand,
+	"chat:reply": ChatReplyCommand,
 	login: LoginCommand,
 	"login:browser": LoginBrowserCommand,
 	"login:confirm": LoginConfirmCommand,