@primitivedotdev/sdk 0.20.0 → 0.22.0

package/oclif.manifest.json

@@ -87,10 +87,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -178,10 +188,11 @@
         "<%= config.bin %> login --force"
       ],
       "flags": {
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -225,10 +236,11 @@
         "<%= config.bin %> logout"
       ],
       "flags": {
-        "base-url": {
-          "description": "Override the API base URL used for key revocation",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -261,10 +273,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -291,10 +313,10 @@
       "args": {},
       "description": "Print the N most recent inbound emails as a one-line-per-row text table. Designed for quick triage and visual scanning. For programmatic access, use `primitive emails:list-emails` (full JSON envelope, cursor pagination, filters) or pass `--json` here for the same raw shape without pagination/filters.\n\n  ID display is TTY-aware. When STDOUT is a terminal, the table truncates each row's id to the first 8 characters for readability. When STDOUT is piped or redirected (the row stream is being consumed by another command), the full UUID is printed so the id can be fed straight back into `emails:get-email`, `emails:delete-email`, etc. without a separate `--json` round-trip.\n\n  Output streams: the column header line is written to STDERR so the row data on STDOUT stays grep/awk-friendly. `--json` writes everything (including the envelope) to STDOUT and is equivalent to running `emails:list-emails --limit N` for the same N.",
       "examples": [
-        "<%= config.bin %> emails:latest",
-        "<%= config.bin %> emails:latest --limit 25",
-        "<%= config.bin %> emails:latest | head -1 | awk '{print $1}'  # full UUID since piped",
-        "<%= config.bin %> emails:latest --json | jq '.data[0].id'"
+        "<%= config.bin %> emails latest",
+        "<%= config.bin %> emails latest --limit 25",
+        "<%= config.bin %> emails latest | head -1 | awk '{print $1}'  # full UUID since piped",
+        "<%= config.bin %> emails latest --json | jq '.data[0].id'"
       ],
       "flags": {
         "api-key": {
@@ -305,10 +327,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -344,6 +376,339 @@
       "summary": "Show the most recent inbound emails as a compact table",
       "enableJsonFlag": false
     },
+    "emails:watch": {
+      "aliases": [],
+      "args": {},
+      "description": "Poll for new inbound emails and print matching messages as they arrive.",
+      "examples": [
+        "<%= config.bin %> emails watch --to support@example.com",
+        "<%= config.bin %> emails watch --subject verify --seconds 300",
+        "<%= config.bin %> emails watch --number 20 --jsonl"
+      ],
+      "flags": {
+        "api-key": {
+          "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
+          "env": "PRIMITIVE_API_KEY",
+          "name": "api-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "body": {
+          "description": "Full-text body filter",
+          "name": "body",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "domain": {
+          "description": "Filter by inbound email domain",
+          "name": "domain",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "domain-id": {
+          "description": "Filter by domain UUID",
+          "name": "domain-id",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "from": {
+          "description": "Filter by sender address or domain",
+          "name": "from",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "has-attachment": {
+          "description": "Only show emails with one or more attachments",
+          "name": "has-attachment",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "include-existing": {
+          "description": "Start from existing matching emails instead of only new arrivals",
+          "name": "include-existing",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "interval": {
+          "description": "Seconds to wait between empty polls",
+          "name": "interval",
+          "default": 2,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "jsonl": {
+          "description": "Print each email as one JSON object per line",
+          "name": "jsonl",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "number": {
+          "description": "Exit after printing this many matching emails",
+          "name": "number",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-size": {
+          "description": "Emails to fetch per poll (1-100)",
+          "name": "page-size",
+          "default": 50,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "q": {
+          "description": "Full-text search DSL query",
+          "name": "q",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "seconds": {
+          "description": "Exit after this many seconds",
+          "name": "seconds",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "since": {
+          "description": "Only show emails received on or after this date/time",
+          "name": "since",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "spam-score-gte": {
+          "description": "Only show emails with spam score greater than or equal to this value",
+          "name": "spam-score-gte",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "spam-score-lt": {
+          "description": "Only show emails with spam score below this value",
+          "name": "spam-score-lt",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "subject": {
+          "description": "Full-text subject filter",
+          "name": "subject",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "to": {
+          "description": "Filter by recipient address or domain",
+          "name": "to",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "emails:watch",
+      "pluginAlias": "@primitivedotdev/sdk",
+      "pluginName": "@primitivedotdev/sdk",
+      "pluginType": "core",
+      "strict": true,
+      "summary": "Watch inbound emails with filters",
+      "enableJsonFlag": false
+    },
+    "emails:wait": {
+      "aliases": [],
+      "args": {},
+      "description": "Poll until matching inbound emails arrive, printing each match as it is found.",
+      "examples": [
+        "<%= config.bin %> emails wait --to test@example.com",
+        "<%= config.bin %> emails wait --subject verify --number 5 --timeout 120",
+        "<%= config.bin %> emails wait --q 'domain:example.com' --table"
+      ],
+      "flags": {
+        "api-key": {
+          "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
+          "env": "PRIMITIVE_API_KEY",
+          "name": "api-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "body": {
+          "description": "Full-text body filter",
+          "name": "body",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "domain": {
+          "description": "Filter by inbound email domain",
+          "name": "domain",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "domain-id": {
+          "description": "Filter by domain UUID",
+          "name": "domain-id",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "from": {
+          "description": "Filter by sender address or domain",
+          "name": "from",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "has-attachment": {
+          "description": "Only match emails with one or more attachments",
+          "name": "has-attachment",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "include-existing": {
+          "description": "Start from existing matching emails instead of only new arrivals",
+          "name": "include-existing",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "interval": {
+          "description": "Seconds to wait between empty polls",
+          "name": "interval",
+          "default": 2,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "number": {
+          "char": "n",
+          "description": "Exit successfully after this many matching emails",
+          "name": "number",
+          "default": 1,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-size": {
+          "description": "Emails to fetch per poll (1-100)",
+          "name": "page-size",
+          "default": 50,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "q": {
+          "description": "Full-text search DSL query",
+          "name": "q",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "since": {
+          "description": "Only match emails received on or after this date/time",
+          "name": "since",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "spam-score-gte": {
+          "description": "Only match emails with spam score greater than or equal to this value",
+          "name": "spam-score-gte",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "spam-score-lt": {
+          "description": "Only match emails with spam score below this value",
+          "name": "spam-score-lt",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "subject": {
+          "description": "Full-text subject filter",
+          "name": "subject",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "table": {
+          "description": "Print a human-readable table instead of JSONL",
+          "name": "table",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "timeout": {
+          "description": "Seconds to wait before exiting nonzero; 0 waits forever",
+          "name": "timeout",
+          "default": 300,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "to": {
+          "description": "Filter by recipient address or domain",
+          "name": "to",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "emails:wait",
+      "pluginAlias": "@primitivedotdev/sdk",
+      "pluginName": "@primitivedotdev/sdk",
+      "pluginType": "core",
+      "strict": true,
+      "summary": "Wait for matching inbound emails",
+      "enableJsonFlag": false
+    },
     "functions:deploy": {
       "aliases": [],
       "args": {},
@@ -361,10 +726,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -426,10 +801,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -474,6 +859,88 @@
       "summary": "Redeploy a function from a bundled handler file",
       "enableJsonFlag": false
     },
+    "functions:set-secret": {
+      "aliases": [],
+      "args": {},
+      "description": "Write a function secret and optionally redeploy so the new value lands in the running handler. Agent-grade shortcut for functions:set-function-secret + functions:redeploy.\n\n  Without --redeploy this is a plain secret upsert: the value is\n  encrypted at rest but is NOT visible to the running handler until\n  the next deploy. Pass --redeploy to re-run the deploy with the\n  function's current code in the same call, which refreshes the\n  binding set with the value you just wrote.\n\n  Keys must match `^[A-Z_][A-Z0-9_]*$` (uppercase letters, digits,\n  underscores; first character is a letter or underscore). System-\n  managed keys are reserved and rejected.",
+      "examples": [
+        "<%= config.bin %> functions:set-secret --id <fn-id> --key API_TOKEN --value abc123",
+        "<%= config.bin %> functions:set-secret --id <fn-id> --key API_TOKEN --value abc123 --redeploy"
+      ],
+      "flags": {
+        "api-key": {
+          "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
+          "env": "PRIMITIVE_API_KEY",
+          "name": "api-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "id": {
+          "description": "Function id (UUID). The function must already exist.",
+          "name": "id",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "key": {
+          "description": "Secret key. Uppercase letters, digits, underscores; must start with a letter or underscore. System-managed keys are reserved.",
+          "name": "key",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "value": {
+          "description": "Secret value (up to 4096 UTF-8 bytes). Encrypted at rest.",
+          "name": "value",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "redeploy": {
+          "description": "Also redeploy the function with its current code so the new value lands in the running handler. Without this, the secret is written but not visible to the handler until the next deploy. Note: source maps are stored only on the runtime side and getFunction does not return them, so this redeploy drops any previously-uploaded source map. If preserving stack-trace symbolication matters, use `functions:redeploy --file <bundle.js> --source-map-file <bundle.js.map>` instead.",
+          "name": "redeploy",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "time": {
+          "description": "Print the wall-clock duration of this command to stderr after it completes (e.g. `[time: 1.34s]`). Useful for measuring `--wait` send latency, comparing CLI overhead, or capturing timing in scripts.",
+          "name": "time",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "functions:set-secret",
+      "pluginAlias": "@primitivedotdev/sdk",
+      "pluginName": "@primitivedotdev/sdk",
+      "pluginType": "core",
+      "strict": true,
+      "summary": "Write a function secret (optionally redeploying to push it live)",
+      "enableJsonFlag": false
+    },
     "account:get-account": {
       "aliases": [],
       "args": {},
@@ -487,10 +954,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -525,10 +1002,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -563,10 +1050,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -601,10 +1098,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -639,10 +1146,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -704,10 +1221,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -763,10 +1290,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -822,10 +1359,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -881,10 +1428,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -940,10 +1497,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -986,10 +1553,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1024,10 +1601,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1097,10 +1684,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1143,10 +1740,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1189,10 +1796,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1235,10 +1852,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1296,10 +1923,91 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "time": {
+          "description": "Print the wall-clock duration of this command to stderr after it completes (e.g. `[time: 1.34s]`). Useful for measuring `--wait` send latency, comparing CLI overhead, or capturing timing in scripts.",
+          "name": "time",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "id": {
+          "description": "Resource UUID",
+          "name": "id",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "token": {
+          "description": "Signed download token from webhook payload",
+          "name": "token",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "output": {
+          "description": "Write binary response bytes to a file",
+          "name": "output",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "emails:download-raw-email",
+      "pluginAlias": "@primitivedotdev/sdk",
+      "pluginName": "@primitivedotdev/sdk",
+      "pluginType": "core",
+      "strict": true,
+      "summary": "Download raw email",
+      "enableJsonFlag": false
+    },
+    "emails:get-email": {
+      "aliases": [],
+      "args": {},
+      "description": "Returns the full record for an inbound email received at one\nof your verified domains, including the parsed text and HTML\nbodies, threading metadata, SMTP envelope detail, webhook\ndelivery state, and a `replies` array for any outbound sends\nrecorded as replies to this inbound.\n\nFor listing inbound emails (with cursor pagination, status\nand date filters, and free-text search), use\n`/emails`. Outbound (sent) email records are NOT returned\nhere; use `/sent-emails/{id}` for those.\n\nThe response carries four sender-shaped fields whose\nmeanings overlap. `from_email` is the canonical \"who sent\nthis\" field for most use cases (parsed bare address from\nthe `From:` header, with a `sender` fallback). `from_header`\nis the raw header including any display name. `sender` and\n`smtp_mail_from` both carry the SMTP envelope MAIL FROM\n(return-path) and are equal by construction; `sender` is\nthe older field name retained for compatibility. See\n`primitive describe emails:get-email | jq '.responseSchema.properties'`\nfor per-field detail.\n",
+      "flags": {
+        "api-key": {
+          "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
+          "env": "PRIMITIVE_API_KEY",
+          "name": "api-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1317,18 +2025,107 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "emails:get-email",
+      "pluginAlias": "@primitivedotdev/sdk",
+      "pluginName": "@primitivedotdev/sdk",
+      "pluginType": "core",
+      "strict": true,
+      "summary": "Get inbound email by id",
+      "enableJsonFlag": false
+    },
+    "emails:list-emails": {
+      "aliases": [],
+      "args": {},
+      "description": "Returns a paginated list of INBOUND emails received at your\nverified domains. Outbound messages sent via /send-mail are\nnot included; this endpoint is the inbox view, not a\nunified send/receive history.\n\nSupports filtering by domain, status, date range, and\nfree-text search across subject, sender, and recipient\nfields.\n\nFor a compact text-table summary of the most recent N\ninbounds (no filters, no cursor pagination), the CLI ships\n`primitive emails:latest` as a one-line-per-email shortcut.\nIt's TTY-aware so id columns are full UUIDs when piped, and\na `--json` flag returns the same envelope this endpoint\ndoes. Use whichever fits the call site.\n",
+      "flags": {
+        "api-key": {
+          "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
+          "env": "PRIMITIVE_API_KEY",
+          "name": "api-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "time": {
+          "description": "Print the wall-clock duration of this command to stderr after it completes (e.g. `[time: 1.34s]`). Useful for measuring `--wait` send latency, comparing CLI overhead, or capturing timing in scripts.",
+          "name": "time",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cursor": {
+          "description": "Pagination cursor from a previous response's `meta.cursor` field.\nFormat: `{ISO-datetime}|{id}`\n",
+          "name": "cursor",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "limit": {
+          "description": "Number of results per page",
+          "name": "limit",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "domain-id": {
+          "description": "Filter by domain ID",
+          "name": "domain-id",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "status": {
+          "description": "Filter inbound rows by lifecycle status. See `EmailStatus`\nfor what each value means. Note that the webhook delivery\nstate is a SEPARATE lifecycle on the same row; filter by\n`webhook_status` semantics is not currently supported on\nthis endpoint.\n",
+          "name": "status",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "search": {
+          "description": "Search subject, sender, and recipient (case-insensitive)",
+          "name": "search",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         },
-        "token": {
-          "description": "Signed download token from webhook payload",
-          "name": "token",
+        "date-from": {
+          "description": "Filter emails created on or after this timestamp",
+          "name": "date-from",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "output": {
-          "description": "Write binary response bytes to a file",
-          "name": "output",
+        "date-to": {
+          "description": "Filter emails created on or before this timestamp",
+          "name": "date-to",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1336,18 +2133,18 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "emails:download-raw-email",
+      "id": "emails:list-emails",
       "pluginAlias": "@primitivedotdev/sdk",
       "pluginName": "@primitivedotdev/sdk",
       "pluginType": "core",
       "strict": true,
-      "summary": "Download raw email",
+      "summary": "List inbound emails",
       "enableJsonFlag": false
     },
-    "emails:get-email": {
+    "emails:replay-email-webhooks": {
       "aliases": [],
       "args": {},
-      "description": "Returns the full record for an inbound email received at one\nof your verified domains, including the parsed text and HTML\nbodies, threading metadata, SMTP envelope detail, webhook\ndelivery state, and a `replies` array for any outbound sends\nrecorded as replies to this inbound.\n\nFor listing inbound emails (with cursor pagination, status\nand date filters, and free-text search), use\n`/emails`. Outbound (sent) email records are NOT returned\nhere; use `/sent-emails/{id}` for those.\n\nThe response carries four sender-shaped fields whose\nmeanings overlap. `from_email` is the canonical \"who sent\nthis\" field for most use cases (parsed bare address from\nthe `From:` header, with a `sender` fallback). `from_header`\nis the raw header including any display name. `sender` and\n`smtp_mail_from` both carry the SMTP envelope MAIL FROM\n(return-path) and are equal by construction; `sender` is\nthe older field name retained for compatibility. See\n`primitive describe emails:get-email | jq '.responseSchema.properties'`\nfor per-field detail.\n",
+      "description": "Re-delivers the webhook payload for this email to all active\nendpoints matching the email's domain. Rate limited per-email\n(short cooldown between successive replays of the same email)\nand per-org (burst + sustained windows), sharing an org-wide\nbudget with delivery replays.\n",
       "flags": {
         "api-key": {
           "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
@@ -1357,10 +2154,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1382,18 +2189,18 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "emails:get-email",
+      "id": "emails:replay-email-webhooks",
       "pluginAlias": "@primitivedotdev/sdk",
       "pluginName": "@primitivedotdev/sdk",
       "pluginType": "core",
       "strict": true,
-      "summary": "Get inbound email by id",
+      "summary": "Replay email webhooks",
       "enableJsonFlag": false
     },
-    "emails:list-emails": {
+    "emails:search-emails": {
       "aliases": [],
       "args": {},
-      "description": "Returns a paginated list of INBOUND emails received at your\nverified domains. Outbound messages sent via /send-mail are\nnot included; this endpoint is the inbox view, not a\nunified send/receive history.\n\nSupports filtering by domain, status, date range, and\nfree-text search across subject, sender, and recipient\nfields.\n\nFor a compact text-table summary of the most recent N\ninbounds (no filters, no cursor pagination), the CLI ships\n`primitive emails:latest` as a one-line-per-email shortcut.\nIt's TTY-aware so id columns are full UUIDs when piped, and\na `--json` flag returns the same envelope this endpoint\ndoes. Use whichever fits the call site.\n",
+      "description": "Searches inbound emails with structured filters and optional\nfull-text matching across parsed email fields. This endpoint is\noptimized for filtered inbox views and CLI polling workflows:\ncallers that only need new accepted mail can pass\n`sort=received_at_asc`, `snippet=false`, `include_facets=false`,\nand a `date_from` timestamp.\n\n`q`, `subject`, and `body` use the same English full-text index\nas the web inbox search. Structured filters such as `from`, `to`,\n`domain_id`, status, attachment presence, and spam score bounds\nare combined with the text query.\n",
       "flags": {
         "api-key": {
           "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
@@ -1403,10 +2210,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1417,48 +2234,64 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "cursor": {
-          "description": "Pagination cursor from a previous response's `meta.cursor` field.\nFormat: `{ISO-datetime}|{id}`\n",
-          "name": "cursor",
+        "q": {
+          "description": "Full-text search DSL query.",
+          "name": "q",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "limit": {
-          "description": "Number of results per page",
-          "name": "limit",
+        "from": {
+          "description": "Filter by sender address or sender domain.",
+          "name": "from",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "domain-id": {
-          "description": "Filter by domain ID",
-          "name": "domain-id",
+        "to": {
+          "description": "Filter by recipient address or recipient domain.",
+          "name": "to",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "status": {
-          "description": "Filter inbound rows by lifecycle status. See `EmailStatus`\nfor what each value means. Note that the webhook delivery\nstate is a SEPARATE lifecycle on the same row; filter by\n`webhook_status` semantics is not currently supported on\nthis endpoint.\n",
-          "name": "status",
+        "subject": {
+          "description": "Full-text search restricted to the subject field.",
+          "name": "subject",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "search": {
-          "description": "Search subject, sender, and recipient (case-insensitive)",
-          "name": "search",
+        "body": {
+          "description": "Full-text search restricted to the parsed text body.",
+          "name": "body",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "domain-id": {
+          "description": "Filter by domain ID.",
+          "name": "domain-id",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "status": {
+          "description": "Filter by inbound email lifecycle status.",
+          "name": "status",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
         "date-from": {
-          "description": "Filter emails created on or after this timestamp",
+          "description": "Filter emails received on or after this timestamp.",
           "name": "date-from",
           "required": false,
           "hasDynamicHelp": false,
@@ -1466,68 +2299,103 @@
           "type": "option"
         },
         "date-to": {
-          "description": "Filter emails created on or before this timestamp",
+          "description": "Filter emails received on or before this timestamp.",
           "name": "date-to",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "emails:list-emails",
-      "pluginAlias": "@primitivedotdev/sdk",
-      "pluginName": "@primitivedotdev/sdk",
-      "pluginType": "core",
-      "strict": true,
-      "summary": "List inbound emails",
-      "enableJsonFlag": false
-    },
-    "emails:replay-email-webhooks": {
-      "aliases": [],
-      "args": {},
-      "description": "Re-delivers the webhook payload for this email to all active\nendpoints matching the email's domain. Rate limited per-email\n(short cooldown between successive replays of the same email)\nand per-org (burst + sustained windows), sharing an org-wide\nbudget with delivery replays.\n",
-      "flags": {
-        "api-key": {
-          "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
-          "env": "PRIMITIVE_API_KEY",
-          "name": "api-key",
+        },
+        "has-attachment": {
+          "description": "Filter by whether the email has one or more attachments.",
+          "name": "has-attachment",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
+          "options": [
+            "true",
+            "false"
+          ],
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "spam-score-lt": {
+          "description": "Filter to emails with spam score below this value.",
+          "name": "spam-score-lt",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "time": {
-          "description": "Print the wall-clock duration of this command to stderr after it completes (e.g. `[time: 1.34s]`). Useful for measuring `--wait` send latency, comparing CLI overhead, or capturing timing in scripts.",
-          "name": "time",
-          "allowNo": false,
-          "type": "boolean"
+        "spam-score-gte": {
+          "description": "Filter to emails with spam score greater than or equal to this value.",
+          "name": "spam-score-gte",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         },
-        "id": {
-          "description": "Resource UUID",
-          "name": "id",
-          "required": true,
+        "sort": {
+          "description": "Sort mode. Defaults to relevance when a text query is present,\notherwise `received_at_desc`.\n",
+          "name": "sort",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "relevance",
+            "received_at_desc",
+            "received_at_asc"
+          ],
+          "type": "option"
+        },
+        "cursor": {
+          "description": "Opaque pagination cursor from a previous search response.",
+          "name": "cursor",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "limit": {
+          "description": "Number of results per page",
+          "name": "limit",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "snippet": {
+          "description": "Include subject/body highlight snippets when text search is active.",
+          "name": "snippet",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "true",
+            "false"
+          ],
+          "type": "option"
+        },
+        "include-facets": {
+          "description": "Include facet counts for sender, domain, status, and attachment presence.",
+          "name": "include-facets",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "true",
+            "false"
+          ],
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "emails:replay-email-webhooks",
+      "id": "emails:search-emails",
       "pluginAlias": "@primitivedotdev/sdk",
       "pluginName": "@primitivedotdev/sdk",
       "pluginType": "core",
       "strict": true,
-      "summary": "Replay email webhooks",
+      "summary": "Search inbound emails",
       "enableJsonFlag": false
     },
     "endpoints:create-endpoint": {
@@ -1543,10 +2411,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1615,10 +2493,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1661,10 +2549,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1699,10 +2597,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1745,10 +2653,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1825,10 +2743,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1902,10 +2830,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1948,10 +2886,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1986,10 +2934,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2042,7 +3000,7 @@
     "functions:create-function": {
       "aliases": [],
       "args": {},
-      "description": "Creates and deploys a new function. The handler must be a single\nESM module that exports a default async function receiving the\n`email.received` event (see the Webhook payload section for the\nfull schema). Code is bundled before being uploaded; ship a\nsingle self-contained file rather than relying on external\nimports.\n\n**Code limits.** `code` is capped at 1 MiB UTF-8. `sourceMap`\n(optional) is capped at 5 MiB UTF-8 and is stored only on the\nedge runtime side; it is not persisted in Primitive's database.\n\n**Auto-wiring.** On successful deploy, Primitive automatically\ncreates a webhook endpoint that delivers inbound mail to the\nfunction. There is nothing to configure on the Endpoints API\nfor this to work; the gateway URL returned here is for\nreference only and is not directly callable from outside.\n\n**Secrets.** New functions ship with the managed secrets\n(`PRIMITIVE_WEBHOOK_SECRET`, `PRIMITIVE_API_KEY`) already\nbound. Add user-set secrets via\n`POST /functions/{id}/secrets`; secret writes only land in the\nrunning handler on the next redeploy.\n",
+      "description": "Creates and deploys a new function. The handler must be a single\nESM module that exports a default async function receiving the\n`email.received` event (see the Webhook payload section for the\nfull schema). Code is bundled before being uploaded; ship a\nsingle self-contained file rather than relying on external\nimports.\n\n**Code limits.** `code` is capped at 1 MiB UTF-8. `sourceMap`\n(optional) is capped at 5 MiB UTF-8 and is stored only on the\nedge runtime side; it is not persisted in Primitive's database.\n\n**Auto-wiring.** On successful deploy, Primitive automatically\ncreates a webhook endpoint that delivers inbound mail to the\nfunction. There is nothing to configure on the Endpoints API\nfor this to work; the gateway URL returned here is for\nreference only and is not directly callable from outside.\n\n**Secrets.** New functions ship with the managed secrets\n(`PRIMITIVE_WEBHOOK_SECRET`, `PRIMITIVE_API_KEY`) already\nbound. Add user-set secrets via\n`POST /functions/{id}/secrets`; secret writes only land in the\nrunning handler on the next redeploy.\n\n\nTip: prefer `primitive functions:deploy --name <name> --file <bundle>` for file-input ergonomics. This raw command exists for callers passing JSON.",
       "flags": {
         "api-key": {
           "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
@@ -2052,10 +3010,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2115,7 +3083,7 @@
     "functions:create-function-secret": {
       "aliases": [],
       "args": {},
-      "description": "Idempotent insert-or-update keyed on `(function_id, key)`.\nReturns 201 the first time the key is set, 200 on subsequent\nupdates. Values are encrypted at rest and only become visible\nto the running handler on the next deploy (`PUT /functions/{id}`\nwith the existing code is sufficient to refresh bindings).\n\nKeys must match `^[A-Z_][A-Z0-9_]*$` (uppercase letters,\ndigits, underscores; first character is a letter or\nunderscore). Values are at most 4096 UTF-8 bytes. System-\nmanaged keys are reserved and rejected.\n",
+      "description": "Idempotent insert-or-update keyed on `(function_id, key)`.\nReturns 201 the first time the key is set, 200 on subsequent\nupdates. Values are encrypted at rest and only become visible\nto the running handler on the next deploy (`PUT /functions/{id}`\nwith the existing code is sufficient to refresh bindings).\n\nKeys must match `^[A-Z_][A-Z0-9_]*$` (uppercase letters,\ndigits, underscores; first character is a letter or\nunderscore). Values are at most 4096 UTF-8 bytes. System-\nmanaged keys are reserved and rejected.\n\n\nTip: prefer `primitive functions:set-secret --id <id> --key <KEY> --value <value> [--redeploy]` for secret writes that also push the binding live. This raw command exists for callers passing JSON.",
       "flags": {
         "api-key": {
           "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
@@ -2125,10 +3093,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2199,10 +3177,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2245,10 +3233,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2299,10 +3297,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2345,10 +3353,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2391,10 +3409,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2419,7 +3447,7 @@
     "functions:set-function-secret": {
       "aliases": [],
       "args": {},
-      "description": "Path-keyed companion to `POST /functions/{id}/secrets`.\nIdempotent: returns 201 the first time the key is set, 200 on\nsubsequent updates. Same validation rules and same write-only\nguarantees as the POST verb; the new value lands in the running\nhandler on the next deploy.\n",
+      "description": "Path-keyed companion to `POST /functions/{id}/secrets`.\nIdempotent: returns 201 the first time the key is set, 200 on\nsubsequent updates. Same validation rules and same write-only\nguarantees as the POST verb; the new value lands in the running\nhandler on the next deploy.\n\n\nTip: prefer `primitive functions:set-secret --id <id> --key <KEY> --value <value> [--redeploy]` for secret writes that also push the binding live. This raw command exists for callers passing JSON.",
       "flags": {
         "api-key": {
           "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
@@ -2429,10 +3457,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2504,10 +3542,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2540,7 +3588,7 @@
     "functions:update-function": {
       "aliases": [],
       "args": {},
-      "description": "Replaces the function's source code with the body's `code` and\ntriggers a redeploy. Same size limits as `POST /functions`.\nUse this verb to push secret writes into the running handler:\npassing the same `code` re-runs the deploy and refreshes the\nbinding set with the latest values from the secrets table.\n\nOn a 502 deploy failure, the previously-deployed code stays\nlive; the runtime never serves a half-built bundle. The\n`deploy_error` field on the returned record carries the error\nthat came back from the runtime so you can surface it to users\nwithout polling.\n",
+      "description": "Replaces the function's source code with the body's `code` and\ntriggers a redeploy. Same size limits as `POST /functions`.\nUse this verb to push secret writes into the running handler:\npassing the same `code` re-runs the deploy and refreshes the\nbinding set with the latest values from the secrets table.\n\nOn a 502 deploy failure, the previously-deployed code stays\nlive; the runtime never serves a half-built bundle. The\n`deploy_error` field on the returned record carries the error\nthat came back from the runtime so you can surface it to users\nwithout polling.\n\n\nTip: prefer `primitive functions:redeploy --id <id> --file <bundle>` for file-input ergonomics. This raw command exists for callers passing JSON.",
       "flags": {
         "api-key": {
           "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
@@ -2550,10 +3598,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2624,10 +3682,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2662,10 +3730,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2708,10 +3786,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2802,10 +3890,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2879,7 +3977,7 @@
     "sending:send-email": {
       "aliases": [],
       "args": {},
-      "description": "Sends an outbound email through Primitive's outbound relay. By default\nthe request returns once the relay accepts the message for delivery.\nSet `wait: true` to wait for the first downstream SMTP delivery outcome.\n\n\nBody fields requiring --raw-body JSON (these are not exposed as flags):\n   references  array<string>  Full ordered message-id chain for the thread.\n(* = required. Scalar body fields are exposed as individual --flag-name flags; see FLAGS above.)",
+      "description": "Sends an outbound email through Primitive's outbound relay. By default\nthe request returns once the relay accepts the message for delivery.\nSet `wait: true` to wait for the first downstream SMTP delivery outcome.\n\n**Host routing.** /send-mail is served by the attachments-\nsupporting host (`https://api.primitive.dev/v1`) so the\nrequest body can carry inline attachments up to ~30 MiB raw.\nThe primary host (`https://www.primitive.dev/api/v1`) also\naccepts /send-mail for attachment-free sends; sends WITH\nattachments to the primary host return 413\n`attachments_unsupported_on_this_endpoint`. The typed SDKs\nroute /send-mail to the attachments host automatically.\n\n\nBody fields requiring --raw-body JSON (these are not exposed as flags):\n   references  array<string>  Full ordered message-id chain for the thread.\n(* = required. Scalar body fields are exposed as individual --flag-name flags; see FLAGS above.)",
       "flags": {
         "api-key": {
           "description": "Primitive API key (defaults to PRIMITIVE_API_KEY or saved `primitive login` credentials)",
@@ -2889,10 +3987,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -2996,10 +4104,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -3088,10 +4206,20 @@
           "multiple": false,
           "type": "option"
         },
-        "base-url": {
-          "description": "API base URL (defaults to PRIMITIVE_API_URL or production)",
-          "env": "PRIMITIVE_API_URL",
-          "name": "base-url",
+        "api-base-url-1": {
+          "description": "Override the primary API base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_1",
+          "hidden": true,
+          "name": "api-base-url-1",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "api-base-url-2": {
+          "description": "Override the attachments-supporting send host base URL. Internal testing only; not documented to customers.",
+          "env": "PRIMITIVE_API_BASE_URL_2",
+          "hidden": true,
+          "name": "api-base-url-2",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -3122,5 +4250,5 @@
       "enableJsonFlag": false
     }
   },
-  "version": "0.20.0"
+  "version": "0.22.0"
 }