primcli 1.24.0 → 1.25.0

package/README.md

@@ -156,6 +156,7 @@ primitive chat reply "See attached" --attachment ./report.pdf
 primitive emails list
 primitive emails get --id <inbound-email-id>
 primitive sent list
+primitive sent delete --id <sent-email-id>
 primitive domains list
 primitive functions templates
 primitive functions init my-fn --template email-reply
@@ -167,6 +168,24 @@ primitive deliveries replay --id <delivery-id>
 
 Generated API commands remain available for compatibility and full schema parity, for example `primitive emails:list-emails` and `primitive sending:reply-to-email`.
 
+## Remove mailbox history
+
+`primitive sent delete --id <sent-email-id>` removes sender history and owned
+attachments. It does not recall delivery or delete recipient copies. Cancel
+scheduled sends before deleting them. A 409 means the record is not currently
+eligible; a 500 or 503 may mean some files were removed already, so retry the same
+DELETE. Repeating a completed deletion succeeds.
+
+After disconnecting an agent, an owner or admin logged in with OAuth can run
+`primitive agent-connections remove-agent-connection --address agent@example.com`.
+This removes the revoked connection record while preserving mail, notes and the
+external runtime. Active connections return 409; missing records return 404.
+Organization API keys cannot remove connections.
+
+Send and reply can return HTTP 410 `sent_email_deleted` when a prior send was
+deleted. Its occupied idempotency key or automatic reply suppression stays reserved.
+Do not generate a new key or send again to bypass this refusal.
+
 ## Primitive Memories
 
 Memories are durable JSON key-value records scoped to your org by default. Use

package/dist/oclif/index.js

@@ -62,6 +62,7 @@ var sdk_gen_exports = /* @__PURE__ */ __exportAll({
 	deleteOrgSecret: () => deleteOrgSecret,
 	deleteRegistry: () => deleteRegistry,
 	deleteRoute: () => deleteRoute,
+	deleteSentEmail: () => deleteSentEmail,
 	deleteWakeAuthorization: () => deleteWakeAuthorization,
 	deleteWakeSchedule: () => deleteWakeSchedule,
 	discardEmailContent: () => discardEmailContent,
@@ -118,6 +119,7 @@ var sdk_gen_exports = /* @__PURE__ */ __exportAll({
 	publishAgent: () => publishAgent,
 	pullWebhookEvent: () => pullWebhookEvent,
 	registerPayoutAddress: () => registerPayoutAddress,
+	removeAgentConnection: () => removeAgentConnection,
 	reorderRoutes: () => reorderRoutes,
 	replayDelivery: () => replayDelivery,
 	replayEmailWebhooks: () => replayEmailWebhooks,
@@ -1627,6 +1629,29 @@ const listSentEmails = (options) => (options?.client ?? client).get({
 	...options
 });
 /**
+* Delete a sent email
+*
+* Permanently deletes sender mailbox history and its owned attachment archive
+* and transient payload. Allows delivered, bounced, agent_failed, gate_denied,
+* canceled, deferred and wait_timeout; other states return 409. Cancel scheduled
+* sends first. This does not recall or cancel delivery already admitted.
+* Recipient copies, received replies and independent audit records are preserved.
+* Occupied idempotency keys and delivered-reply deduplication remain reserved.
+* Keys already released by cancellation, gate denial or a never-attempted failure
+* remain reusable. Repeating a completed deletion succeeds; unknown or foreign
+* IDs return 404. Organization API keys, sessions and OAuth are supported;
+* Function and connected-agent credentials are denied.
+*
+*/
+const deleteSentEmail = (options) => (options.client ?? client).delete({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/sent-emails/{id}",
+	...options
+});
+/**
 * Get a sent email by id
 *
 * Returns the full sent-email record by id, including
@@ -1676,6 +1701,26 @@ const rescheduleSentEmail = (options) => (options.client ?? client).patch({
 	}
 });
 /**
+* Remove a revoked agent connection
+*
+* Permanently removes a revoked connection record. Requires an organization
+* owner or admin session or OAuth token; organization API keys are denied.
+* Disconnect first using DELETE /agent-connections/{address}. An active
+* connection returns 409 connection_not_revoked. Missing or already removed
+* records return 404. Mail, address notes, domains and external runtimes are
+* preserved. The same address can be paired again with a new invitation;
+* old credentials and invitations remain invalid.
+*
+*/
+const removeAgentConnection = (options) => (options.client ?? client).post({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/agent-connections/{address}/remove",
+	...options
+});
+/**
 * Cancel a scheduled send
 *
 * Cancels a STILL-SCHEDULED send (status `scheduled`), moving it
@@ -2722,6 +2767,10 @@ const openapiDocument = {
 	}],
 	"security": [{ "BearerAuth": [] }],
 	"tags": [
+		{
+			"name": "Agent Connections",
+			"description": "Manage address-bound connections to external agent runtimes."
+		},
 		{
 			"name": "CLI",
 			"description": "Browser-assisted CLI authentication"
@@ -4057,6 +4106,10 @@ const openapiDocument = {
 					"401": { "$ref": "#/components/responses/Unauthorized" },
 					"403": { "$ref": "#/components/responses/Forbidden" },
 					"404": { "$ref": "#/components/responses/NotFound" },
+					"410": {
+						"description": "The prior send was deleted. Its idempotency key or automatic reply suppression remains reserved, so this request will not send another message. Do not retry with a new key to bypass this refusal.",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
 					"422": {
 						"description": "Inbound is not repliable: the row exists but lacks a\n`message_id` (no thread anchor) or a `recipient` (cannot\nderive the From address).\n",
 						"content": { "application/json": {
@@ -4949,6 +5002,10 @@ const openapiDocument = {
 				"400": { "$ref": "#/components/responses/ValidationError" },
 				"401": { "$ref": "#/components/responses/Unauthorized" },
 				"403": { "$ref": "#/components/responses/Forbidden" },
+				"410": {
+					"description": "The prior send was deleted. Its idempotency key or automatic reply suppression remains reserved, so this request will not send another message. Do not retry with a new key to bypass this refusal.",
+					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+				},
 				"429": { "$ref": "#/components/responses/RateLimited" },
 				"500": { "$ref": "#/components/responses/InternalError" },
 				"502": { "$ref": "#/components/responses/BadGateway" },
@@ -5071,6 +5128,50 @@ const openapiDocument = {
 			}
 		} },
 		"/sent-emails/{id}": {
+			"delete": {
+				"operationId": "deleteSentEmail",
+				"summary": "Delete a sent email",
+				"description": "Permanently deletes sender mailbox history and its owned attachment archive\nand transient payload. Allows delivered, bounced, agent_failed, gate_denied,\ncanceled, deferred and wait_timeout; other states return 409. Cancel scheduled\nsends first. This does not recall or cancel delivery already admitted.\nRecipient copies, received replies and independent audit records are preserved.\nOccupied idempotency keys and delivered-reply deduplication remain reserved.\nKeys already released by cancellation, gate denial or a never-attempted failure\nremain reusable. Repeating a completed deletion succeeds; unknown or foreign\nIDs return 404. Organization API keys, sessions and OAuth are supported;\nFunction and connected-agent credentials are denied.\n",
+				"tags": ["Sending"],
+				"parameters": [{ "$ref": "#/components/parameters/ResourceId" }],
+				"responses": {
+					"200": {
+						"description": "Deletion completed",
+						"content": { "application/json": { "schema": {
+							"type": "object",
+							"required": ["success", "data"],
+							"properties": {
+								"success": {
+									"type": "boolean",
+									"const": true
+								},
+								"data": {
+									"type": "object",
+									"required": ["deleted"],
+									"properties": { "deleted": {
+										"type": "boolean",
+										"const": true
+									} }
+								}
+							}
+						} } }
+					},
+					"400": { "$ref": "#/components/responses/ValidationError" },
+					"401": { "$ref": "#/components/responses/Unauthorized" },
+					"403": { "$ref": "#/components/responses/Forbidden" },
+					"404": { "$ref": "#/components/responses/NotFound" },
+					"409": { "$ref": "#/components/responses/Conflict" },
+					"429": { "$ref": "#/components/responses/RateLimited" },
+					"500": {
+						"description": "Database failure. Files may already be removed while the message record and cleanup references remain. Retry the same DELETE; failure does not restore files.",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					},
+					"503": {
+						"description": "Storage cleanup failed. Some files may already be removed; the message record and cleanup references remain for an idempotent retry. Failure does not restore files.",
+						"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
+					}
+				}
+			},
 			"get": {
 				"operationId": "getSentEmail",
 				"summary": "Get a sent email by id",
@@ -5131,6 +5232,52 @@ const openapiDocument = {
 				}
 			}
 		},
+		"/agent-connections/{address}/remove": { "post": {
+			"operationId": "removeAgentConnection",
+			"summary": "Remove a revoked agent connection",
+			"description": "Permanently removes a revoked connection record. Requires an organization\nowner or admin session or OAuth token; organization API keys are denied.\nDisconnect first using DELETE /agent-connections/{address}. An active\nconnection returns 409 connection_not_revoked. Missing or already removed\nrecords return 404. Mail, address notes, domains and external runtimes are\npreserved. The same address can be paired again with a new invitation;\nold credentials and invitations remain invalid.\n",
+			"tags": ["Agent Connections"],
+			"parameters": [{
+				"name": "address",
+				"in": "path",
+				"required": true,
+				"description": "The email address identifying the revoked connection.",
+				"schema": {
+					"type": "string",
+					"format": "email",
+					"maxLength": 254
+				}
+			}],
+			"responses": {
+				"200": {
+					"description": "Deletion completed",
+					"content": { "application/json": { "schema": {
+						"type": "object",
+						"required": ["success", "data"],
+						"properties": {
+							"success": {
+								"type": "boolean",
+								"const": true
+							},
+							"data": {
+								"type": "object",
+								"required": ["deleted"],
+								"properties": { "deleted": {
+									"type": "boolean",
+									"const": true
+								} }
+							}
+						}
+					} } }
+				},
+				"400": { "$ref": "#/components/responses/ValidationError" },
+				"401": { "$ref": "#/components/responses/Unauthorized" },
+				"403": { "$ref": "#/components/responses/Forbidden" },
+				"404": { "$ref": "#/components/responses/NotFound" },
+				"409": { "$ref": "#/components/responses/Conflict" },
+				"429": { "$ref": "#/components/responses/RateLimited" }
+			}
+		} },
 		"/sent-emails/{id}/cancel": {
 			"parameters": [{ "$ref": "#/components/parameters/ResourceId" }],
 			"post": {
@@ -7837,6 +7984,11 @@ const openapiDocument = {
 									"conflict",
 									"mx_conflict",
 									"not_scheduled",
+									"sent_email_deleted",
+									"sent_email_not_settled",
+									"sent_email_changed",
+									"sent_email_cleanup_failed",
+									"connection_not_revoked",
 									"attachment_changed",
 									"content_discarded",
 									"attachment_limit_exceeded",
@@ -14751,6 +14903,47 @@ const operationManifest = [
 		"tag": "Agent",
 		"tagCommand": "agent"
 	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "remove-agent-connection",
+		"description": "Permanently removes a revoked connection record. Requires an organization\nowner or admin session or OAuth token; organization API keys are denied.\nDisconnect first using DELETE /agent-connections/{address}. An active\nconnection returns 409 connection_not_revoked. Missing or already removed\nrecords return 404. Mail, address notes, domains and external runtimes are\npreserved. The same address can be paired again with a new invitation;\nold credentials and invitations remain invalid.\n",
+		"hasJsonBody": false,
+		"method": "POST",
+		"operationId": "removeAgentConnection",
+		"path": "/agent-connections/{address}/remove",
+		"pathParams": [{
+			"description": "The email address identifying the revoked connection.",
+			"enum": null,
+			"name": "address",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"required": ["success", "data"],
+			"properties": {
+				"success": {
+					"type": "boolean",
+					"const": true
+				},
+				"data": {
+					"type": "object",
+					"required": ["deleted"],
+					"properties": { "deleted": {
+						"type": "boolean",
+						"const": true
+					} }
+				}
+			}
+		},
+		"sdkName": "removeAgentConnection",
+		"summary": "Remove a revoked agent connection",
+		"tag": "Agent Connections",
+		"tagCommand": "agent-connections"
+	},
 	{
 		"binaryResponse": false,
 		"bodyRequired": false,
@@ -24062,6 +24255,47 @@ const operationManifest = [
 		"tag": "Sending",
 		"tagCommand": "sending"
 	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "delete-sent-email",
+		"description": "Permanently deletes sender mailbox history and its owned attachment archive\nand transient payload. Allows delivered, bounced, agent_failed, gate_denied,\ncanceled, deferred and wait_timeout; other states return 409. Cancel scheduled\nsends first. This does not recall or cancel delivery already admitted.\nRecipient copies, received replies and independent audit records are preserved.\nOccupied idempotency keys and delivered-reply deduplication remain reserved.\nKeys already released by cancellation, gate denial or a never-attempted failure\nremain reusable. Repeating a completed deletion succeeds; unknown or foreign\nIDs return 404. Organization API keys, sessions and OAuth are supported;\nFunction and connected-agent credentials are denied.\n",
+		"hasJsonBody": false,
+		"method": "DELETE",
+		"operationId": "deleteSentEmail",
+		"path": "/sent-emails/{id}",
+		"pathParams": [{
+			"description": "Resource UUID",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"required": ["success", "data"],
+			"properties": {
+				"success": {
+					"type": "boolean",
+					"const": true
+				},
+				"data": {
+					"type": "object",
+					"required": ["deleted"],
+					"properties": { "deleted": {
+						"type": "boolean",
+						"const": true
+					} }
+				}
+			}
+		},
+		"sdkName": "deleteSentEmail",
+		"summary": "Delete a sent email",
+		"tag": "Sending",
+		"tagCommand": "sending"
+	},
 	{
 		"binaryResponse": true,
 		"bodyRequired": false,
@@ -31837,8 +32071,8 @@ const PRIMITIVE_TEAM_AUTHOR = {
 	name: "Primitive Team",
 	url: "https://primitive.dev"
 };
-const SDK_VERSION_RANGE = "^1.24.0";
-const CLI_VERSION_RANGE = "^1.24.0";
+const SDK_VERSION_RANGE = "^1.25.0";
+const CLI_VERSION_RANGE = "^1.25.0";
 const ESBUILD_VERSION_RANGE = "^0.27.0";
 function renderHandler() {
 	return `// env.PRIMITIVE_API_KEY, env.PRIMITIVE_WEBHOOK_SECRET, and
@@ -41496,6 +41730,7 @@ const CANONICAL_OPERATION_ALIASES = {
 	"sending:permissions": "sending:get-send-permissions",
 	"sending:reply": "sending:reply-to-email",
 	"sending:send": "sending:send-email",
+	"sent:delete": "sending:delete-sent-email",
 	"sent:get": "sending:get-sent-email",
 	"sent:list": "sending:list-sent-emails",
 	"threads:get": "threads:get-thread",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "primcli",
-  "version": "1.24.0",
+  "version": "1.25.0",
   "description": "Official Primitive CLI: deploy Primitive Functions, send and inspect mail, manage endpoints, all from the terminal. Wraps the @primitivedotdev/sdk runtime client with one-shot commands.",
   "type": "module",
   "sideEffects": false,
@@ -49,6 +49,9 @@
       "account": {
         "description": "Manage your account settings, storage, and webhook secret"
       },
+      "agent-connections": {
+        "description": "Remove revoked agent connections with an organization owner or admin login. This preserves mail and does not stop the external runtime."
+      },
       "agent": {
         "description": "Agent signup and authentication API operations"
       },
@@ -81,7 +84,7 @@
         "description": "Authenticate with an emailed one-time code"
       },
       "sent": {
-        "description": "Short aliases for outbound sent-email history: `primitive sent list` and `primitive sent get`."
+        "description": "Short aliases for outbound sent-email history: `primitive sent list`, `primitive sent get`, and `primitive sent delete --id <id>`. Deleting sender history does not recall delivery."
       },
       "threads": {
         "description": "Inspect conversation threads spanning received and sent emails. Prefer `primitive threads get --id <thread-id>`; generated API name `primitive threads get-thread --id <thread-id>` remains available."