primcli 1.27.0 → 1.29.0

package/README.md

@@ -206,6 +206,24 @@ primitive memories get state --function <function-id>
 Values must be valid JSON. Strings must be quoted as JSON strings, so use
 `'"hello"'`, not `hello`.
 
+## Credits
+
+Redeem a credit code for your organization and check the credit balance.
+
+```bash
+primitive credits redeem LAUNCH50
+primitive credits balance
+primitive credits balance --json
+```
+
+`credits redeem` prints the credit added and its expiry. On a refusal it prints
+the server's message (for example an invalid or already redeemed code) and
+exits non-zero. Redeeming needs an organization owner or admin; with an API key,
+the key's creator must currently be an owner or admin. Each run sends a new
+Idempotency-Key; pass `--idempotency-key <key>` to retry the same redemption
+safely. On any failure the command prints the key it used to stderr, so you can
+run the same command again with `--idempotency-key <key>`.
+
 ## Recipient routing
 
 Bind a recipient address to a destination so inbound mail resolves to a single
@@ -317,3 +335,17 @@ timeout; Ctrl-C exits 130. Bare `primitive listen` prints one raw JSON event per
 line. Use `--transport poll` explicitly for HTTP polling. Accept or enqueue each
 event within 30 seconds. Closing preserves pending work, and retries can deliver
 an event more than once.
+
+### Connected-agent listeners
+
+Use the agent's existing connected-address credential with the same listener API.
+The server automatically restricts its private subscription to inbound email for
+that address. No owner credential, recipient filter, or relay is required. Names
+are isolated per credential. Revoking or replacing the credential removes its
+subscriptions and queued deliveries; reconnect with the new credential to start
+receiving new events.
+
+Address-scoped events contain parsed message content in `email.parsed`.
+`email.content.raw` and `email.content.download` are null. Signed download links,
+account routing metadata, and other SMTP envelope recipients are not exposed.
+Attachments can be fetched through the authenticated email attachment API.

package/dist/oclif/index.js

@@ -71,10 +71,11 @@ var sdk_gen_exports = /* @__PURE__ */ __exportAll({
 	downloadEmailAttachmentPart: () => downloadEmailAttachmentPart,
 	downloadRawEmail: () => downloadRawEmail,
 	downloadSentAttachmentPart: () => downloadSentAttachmentPart,
-	getAccount: () => getAccount$1,
+	getAccount: () => getAccount,
 	getAgent: () => getAgent,
 	getChallenge: () => getChallenge,
 	getConversation: () => getConversation,
+	getCreditBalance: () => getCreditBalance,
 	getEmail: () => getEmail,
 	getFunction: () => getFunction,
 	getFunctionRouting: () => getFunctionRouting,
@@ -118,6 +119,7 @@ var sdk_gen_exports = /* @__PURE__ */ __exportAll({
 	pollCliLogin: () => pollCliLogin,
 	publishAgent: () => publishAgent,
 	pullWebhookEvent: () => pullWebhookEvent$1,
+	redeemCreditCode: () => redeemCreditCode,
 	registerPayoutAddress: () => registerPayoutAddress,
 	removeAgentConnection: () => removeAgentConnection,
 	reorderRoutes: () => reorderRoutes,
@@ -411,7 +413,7 @@ const cliLogout = (options) => (options?.client ?? client).post({
 /**
 * Get account info
 */
-const getAccount$1 = (options) => (options?.client ?? client).get({
+const getAccount = (options) => (options?.client ?? client).get({
 	security: [{
 		scheme: "bearer",
 		type: "http"
@@ -493,6 +495,55 @@ const rotateWebhookSecret = (options) => (options?.client ?? client).post({
 	...options
 });
 /**
+* Redeem a credit code
+*
+* Redeem a credit code for the authenticated organization. The credit is
+* added to the organization prepaid credit and shows in
+* `GET /credits/balance` under `prepaid_credit`.
+*
+* Redeeming requires an organization owner or admin. An API key redeems
+* with the authority of the user who created it, based on that user's
+* current role; a key without that authority gets the same
+* `credit_code_invalid` refusal as an unknown code.
+*
+* The `Idempotency-Key` header is required. Retrying with the same key
+* and code returns the original grant with `replayed: true` and grants
+* nothing new; the same key with a different code is refused with
+* `idempotency_key_reused`. Every refusal carries a human-readable
+* `error.message` that can be shown to the user as is.
+*
+*/
+const redeemCreditCode = (options) => (options.client ?? client).post({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/credits/redeem",
+	...options,
+	headers: {
+		...options.body !== void 0 && { "Content-Type": "application/json" },
+		...options.headers
+	}
+});
+/**
+* Get credit balance
+*
+* Read the organization credit position. `prepaid_credit` is the prepaid
+* usage credit (paid top-ups, redeemed credit codes and granted credit)
+* that can still pay for usage. `budget` is the active agent spending
+* budget an operator funded for top-ups, or null when there is none.
+* Amounts are strings of integer micros (1 USD = 1000000 micros).
+*
+*/
+const getCreditBalance = (options) => (options?.client ?? client).get({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/credits/balance",
+	...options
+});
+/**
 * List all domains
 *
 * Returns all verified and unverified domains for your organization,
@@ -969,7 +1020,7 @@ const listEndpoints = (options) => (options?.client ?? client).get({
 * accepts the signature.
 *
 *
-* For local receiving, use kind=pull and a stable name, without url, function_id or domain_id. Named creation resumes the same active destination; omitted filters preserve its selection, while conflicting supplied configuration returns 409. New unfiltered destinations receive all subsequently ready eligible event types. Pull destinations do not occupy HTTP routing slots. Signing-secret setup and a test HTTP delivery are not required for pull receiving.
+* For local receiving, use kind=pull and a stable name, without url, function_id or domain_id. Named creation resumes the same active destination; omitted filters preserve its selection, while conflicting supplied configuration returns 409. New unfiltered destinations receive all subsequently ready eligible event types within their credential scope. Connected-agent credentials automatically create private subscriptions restricted to inbound email for their assigned address. Names are isolated per credential; revocation or replacement deletes its subscriptions. Address-scoped events contain parsed mail without raw MIME, signed download links, routing metadata, or sibling envelope recipients. Pull destinations do not occupy HTTP routing slots. Signing-secret setup and a test HTTP delivery are not required for pull receiving.
 */
 const createEndpoint = (options) => (options.client ?? client).post({
 	security: [{
@@ -2783,6 +2834,10 @@ const openapiDocument = {
 			"name": "Account",
 			"description": "Manage your account settings, storage, and webhook secret"
 		},
+		{
+			"name": "Credits",
+			"description": "Redeem credit codes and read the organization credit balance"
+		},
 		{
 			"name": "Domains",
 			"description": "Claim, verify, and manage email domains"
@@ -3387,6 +3442,129 @@ const openapiDocument = {
 				"429": { "$ref": "#/components/responses/RateLimited" }
 			}
 		} },
+		"/credits/redeem": { "post": {
+			"operationId": "redeemCreditCode",
+			"summary": "Redeem a credit code",
+			"description": "Redeem a credit code for the authenticated organization. The credit is\nadded to the organization prepaid credit and shows in\n`GET /credits/balance` under `prepaid_credit`.\n\nRedeeming requires an organization owner or admin. An API key redeems\nwith the authority of the user who created it, based on that user's\ncurrent role; a key without that authority gets the same\n`credit_code_invalid` refusal as an unknown code.\n\nThe `Idempotency-Key` header is required. Retrying with the same key\nand code returns the original grant with `replayed: true` and grants\nnothing new; the same key with a different code is refused with\n`idempotency_key_reused`. Every refusal carries a human-readable\n`error.message` that can be shown to the user as is.\n",
+			"tags": ["Credits"],
+			"parameters": [{
+				"name": "Idempotency-Key",
+				"in": "header",
+				"required": true,
+				"description": "Required client-supplied key: 1 to 200 printable ASCII\ncharacters, without spaces. Use a new key for each code you\nredeem and reuse it only to retry the same request.\n",
+				"schema": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 200,
+					"pattern": "^[\\x21-\\x7E]{1,200}$"
+				}
+			}],
+			"requestBody": {
+				"required": true,
+				"content": { "application/json": {
+					"schema": { "$ref": "#/components/schemas/RedeemCreditCodeInput" },
+					"example": { "code": "LAUNCH50" }
+				} }
+			},
+			"responses": {
+				"200": {
+					"description": "The code was redeemed, or this request replayed an earlier\nredemption with the same Idempotency-Key.\n",
+					"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+						"type": "object",
+						"properties": { "data": { "$ref": "#/components/schemas/CreditRedemption" } }
+					}] } } }
+				},
+				"400": {
+					"description": "`idempotency_key_required` means the Idempotency-Key header is\nmissing. `validation_error` means the header is empty, longer than\n200 characters or not printable non-space ASCII, or the body is\ninvalid.\n",
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "idempotency_key_required",
+								"message": "an Idempotency-Key header is required"
+							}
+						}
+					} }
+				},
+				"401": { "$ref": "#/components/responses/Unauthorized" },
+				"403": { "$ref": "#/components/responses/Forbidden" },
+				"409": {
+					"description": "The organization or user already redeemed this code, or already\nredeemed another code in the same exclusive group (a set of codes\nof which each organization or user may redeem only one).\n`error.code` is `credit_code_already_redeemed`.\n",
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "credit_code_already_redeemed",
+								"message": "Your organization has already redeemed this promotion."
+							}
+						}
+					} }
+				},
+				"422": {
+					"description": "The code cannot be redeemed. `credit_code_invalid` covers unknown,\nexpired and exhausted codes and callers without authority to\nredeem; `credit_code_not_eligible` means the organization does not\nmeet the promotion terms; `credit_code_balance_cap` means the\norganization already holds the most promotional credit it can;\n`idempotency_key_reused` means this Idempotency-Key already\nredeemed a different code.\n",
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "credit_code_invalid",
+								"message": "That code isn't valid or is no longer available."
+							}
+						}
+					} }
+				},
+				"429": {
+					"description": "Too many requests or redemption attempts. `error.code` is\n`rate_limited`. Wait for `Retry-After` when present. Like other\nrate-limited responses, it also carries the `ratelimit-limit`,\n`ratelimit-remaining`, `ratelimit-reset` and `ratelimit-policy`\nquota headers when the limiter reports them.\n",
+					"headers": { "Retry-After": {
+						"schema": { "type": "integer" },
+						"description": "Seconds to wait before retrying"
+					} },
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "rate_limited",
+								"message": "Rate limit exceeded. Try again shortly."
+							}
+						}
+					} }
+				},
+				"503": {
+					"description": "The code could not be redeemed right now. Retry later with the\nsame Idempotency-Key. `error.code` is `service_unavailable`.\n",
+					"content": { "application/json": {
+						"schema": { "$ref": "#/components/schemas/ErrorResponse" },
+						"example": {
+							"success": false,
+							"error": {
+								"code": "service_unavailable",
+								"message": "We couldn't redeem that code right now. Try again in a few minutes."
+							}
+						}
+					} }
+				}
+			}
+		} },
+		"/credits/balance": { "get": {
+			"operationId": "getCreditBalance",
+			"summary": "Get credit balance",
+			"description": "Read the organization credit position. `prepaid_credit` is the prepaid\nusage credit (paid top-ups, redeemed credit codes and granted credit)\nthat can still pay for usage. `budget` is the active agent spending\nbudget an operator funded for top-ups, or null when there is none.\nAmounts are strings of integer micros (1 USD = 1000000 micros).\n",
+			"tags": ["Credits"],
+			"responses": {
+				"200": {
+					"description": "The organization credit balance.",
+					"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+						"type": "object",
+						"properties": { "data": { "$ref": "#/components/schemas/CreditBalance" } }
+					}] } } }
+				},
+				"401": { "$ref": "#/components/responses/Unauthorized" },
+				"403": { "$ref": "#/components/responses/Forbidden" },
+				"429": { "$ref": "#/components/responses/RateLimited" }
+			}
+		} },
 		"/domains": {
 			"get": {
 				"operationId": "listDomains",
@@ -4221,7 +4399,7 @@ const openapiDocument = {
 			"post": {
 				"operationId": "createEndpoint",
 				"summary": "Create a webhook endpoint",
-				"description": "Creates a new webhook endpoint. If a deactivated endpoint\nwith the same URL and domain exists, it is reactivated\ninstead. Subject to plan limits on the number of active\nendpoints.\n\n**Signing is account-scoped, not per-endpoint.** This call\ndoes not return any signing material; every endpoint on the\naccount uses the same webhook secret, fetched via\n`GET /account/webhook-secret`. See the API-level \"Webhook\nsigning\" section for the full wire format (header name,\nsigned string, hash algo, secret format, tolerance) and a\nlanguage-agnostic verification recipe.\n\nAfter creating the endpoint, fire a test delivery against\nit via `POST /endpoints/{id}/test` to confirm your verifier\naccepts the signature.\n\n\nFor local receiving, use kind=pull and a stable name, without url, function_id or domain_id. Named creation resumes the same active destination; omitted filters preserve its selection, while conflicting supplied configuration returns 409. New unfiltered destinations receive all subsequently ready eligible event types. Pull destinations do not occupy HTTP routing slots. Signing-secret setup and a test HTTP delivery are not required for pull receiving.",
+				"description": "Creates a new webhook endpoint. If a deactivated endpoint\nwith the same URL and domain exists, it is reactivated\ninstead. Subject to plan limits on the number of active\nendpoints.\n\n**Signing is account-scoped, not per-endpoint.** This call\ndoes not return any signing material; every endpoint on the\naccount uses the same webhook secret, fetched via\n`GET /account/webhook-secret`. See the API-level \"Webhook\nsigning\" section for the full wire format (header name,\nsigned string, hash algo, secret format, tolerance) and a\nlanguage-agnostic verification recipe.\n\nAfter creating the endpoint, fire a test delivery against\nit via `POST /endpoints/{id}/test` to confirm your verifier\naccepts the signature.\n\n\nFor local receiving, use kind=pull and a stable name, without url, function_id or domain_id. Named creation resumes the same active destination; omitted filters preserve its selection, while conflicting supplied configuration returns 409. New unfiltered destinations receive all subsequently ready eligible event types within their credential scope. Connected-agent credentials automatically create private subscriptions restricted to inbound email for their assigned address. Names are isolated per credential; revocation or replacement deletes its subscriptions. Address-scoped events contain parsed mail without raw MIME, signed download links, routing metadata, or sibling envelope recipients. Pull destinations do not occupy HTTP routing slots. Signing-secret setup and a test HTTP delivery are not required for pull receiving.",
 				"tags": ["Endpoints"],
 				"requestBody": {
 					"required": true,
@@ -8075,7 +8253,15 @@ const openapiDocument = {
 									"event_content_unavailable",
 									"event_preparation_failed",
 									"subscription_unavailable",
-									"stale_delivery"
+									"stale_delivery",
+									"idempotency_key_required",
+									"idempotency_key_reused",
+									"credit_code_invalid",
+									"credit_code_already_redeemed",
+									"credit_code_not_eligible",
+									"credit_code_balance_cap",
+									"rate_limited",
+									"service_unavailable"
 								]
 							},
 							"message": { "type": "string" },
@@ -9041,6 +9227,148 @@ const openapiDocument = {
 				} },
 				"required": ["secret"]
 			},
+			"RedeemCreditCodeInput": {
+				"type": "object",
+				"additionalProperties": false,
+				"required": ["code"],
+				"properties": { "code": {
+					"type": "string",
+					"pattern": "^\\s*\\S(?:[\\s\\S]{0,254}\\S)?\\s*$",
+					"description": "The credit code to redeem. Surrounding whitespace is ignored; the\nrest must be 1 to 256 characters.\n"
+				} }
+			},
+			"CreditRedemption": {
+				"type": "object",
+				"additionalProperties": false,
+				"required": [
+					"redemption_id",
+					"amount_micros",
+					"currency",
+					"granted_at",
+					"expires_at",
+					"label",
+					"replayed",
+					"message"
+				],
+				"properties": {
+					"redemption_id": {
+						"type": "string",
+						"description": "Identifier of the redemption."
+					},
+					"amount_micros": {
+						"type": "string",
+						"pattern": "^[0-9]+$",
+						"description": "Credit granted, in micros of `currency` (1 USD = 1000000 micros)."
+					},
+					"currency": {
+						"type": "string",
+						"description": "Currency of the granted credit, for example `usd`."
+					},
+					"granted_at": {
+						"type": "string",
+						"format": "date-time",
+						"description": "When the credit was granted."
+					},
+					"expires_at": {
+						"type": ["string", "null"],
+						"format": "date-time",
+						"description": "When the granted credit expires, or null when it does not expire."
+					},
+					"label": {
+						"type": ["string", "null"],
+						"description": "Customer-facing label of the promotion, when it has one."
+					},
+					"replayed": {
+						"type": "boolean",
+						"description": "True when this Idempotency-Key already redeemed this code and the\noriginal grant is returned. No second grant is made.\n"
+					},
+					"message": {
+						"type": "string",
+						"description": "Human-readable summary of the grant, suitable to show as is."
+					}
+				}
+			},
+			"CreditBalance": {
+				"type": "object",
+				"required": ["budget"],
+				"properties": {
+					"budget": {
+						"description": "The active agent spending budget an operator funded for top-ups,\nor null when there is none.\n",
+						"type": ["object", "null"],
+						"additionalProperties": false,
+						"required": [
+							"currency",
+							"max_amount_micros",
+							"spent_micros",
+							"remaining_micros",
+							"per_topup_cap_micros",
+							"expires_at",
+							"status"
+						],
+						"properties": {
+							"currency": {
+								"type": "string",
+								"description": "Currency of the budget, for example `usd`."
+							},
+							"max_amount_micros": {
+								"type": "string",
+								"pattern": "^[0-9]+$",
+								"description": "Total allowance the operator funded, in micros."
+							},
+							"spent_micros": {
+								"type": "string",
+								"pattern": "^[0-9]+$",
+								"description": "How much of the allowance has been drawn down, in micros."
+							},
+							"remaining_micros": {
+								"type": "string",
+								"pattern": "^[0-9]+$",
+								"description": "`max_amount_micros - spent_micros`, floored at zero."
+							},
+							"per_topup_cap_micros": {
+								"type": ["string", "null"],
+								"pattern": "^[0-9]+$",
+								"description": "Largest single top-up allowed, in micros, or null for no per-top-up cap."
+							},
+							"expires_at": {
+								"type": ["string", "null"],
+								"format": "date-time",
+								"description": "When the allowance expires, or null for no expiry."
+							},
+							"status": {
+								"type": "string",
+								"description": "Budget status. An active budget reads `active`."
+							}
+						}
+					},
+					"prepaid_credit": {
+						"description": "Prepaid usage credit (top-ups, redeemed credit codes and granted\ncredit) that can still pay for usage, or null when there is none.\nOmitted when an exact figure cannot be given right now; the budget\nis still returned.\n",
+						"type": ["object", "null"],
+						"additionalProperties": false,
+						"required": [
+							"currency",
+							"remaining_micros",
+							"next_expires_at"
+						],
+						"properties": {
+							"currency": {
+								"type": "string",
+								"description": "Currency of the credit, which is the organization billing currency."
+							},
+							"remaining_micros": {
+								"type": "string",
+								"pattern": "^[0-9]+$",
+								"description": "What the credit can still pay for, in micros."
+							},
+							"next_expires_at": {
+								"type": ["string", "null"],
+								"format": "date-time",
+								"description": "Earliest expiry among credits with a balance, or null when none of them expires."
+							}
+						}
+					}
+				}
+			},
 			"InboxStatus": {
 				"type": "object",
 				"additionalProperties": false,
@@ -11644,6 +11972,10 @@ const openapiDocument = {
 			"Endpoint": {
 				"type": "object",
 				"properties": {
+					"recipient": {
+						"type": ["string", "null"],
+						"description": "Server-enforced recipient for an address-scoped pull subscription; null for account-wide receiving."
+					},
 					"receiver_capabilities": {
 						"type": "object",
 						"properties": {
@@ -15479,6 +15811,181 @@ const operationManifest = [
 		"tag": "CLI",
 		"tagCommand": "cli"
 	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "get-credit-balance",
+		"description": "Read the organization credit position. `prepaid_credit` is the prepaid\nusage credit (paid top-ups, redeemed credit codes and granted credit)\nthat can still pay for usage. `budget` is the active agent spending\nbudget an operator funded for top-ups, or null when there is none.\nAmounts are strings of integer micros (1 USD = 1000000 micros).\n",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "getCreditBalance",
+		"path": "/credits/balance",
+		"pathParams": [],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"required": ["budget"],
+			"properties": {
+				"budget": {
+					"description": "The active agent spending budget an operator funded for top-ups,\nor null when there is none.\n",
+					"type": ["object", "null"],
+					"additionalProperties": false,
+					"required": [
+						"currency",
+						"max_amount_micros",
+						"spent_micros",
+						"remaining_micros",
+						"per_topup_cap_micros",
+						"expires_at",
+						"status"
+					],
+					"properties": {
+						"currency": {
+							"type": "string",
+							"description": "Currency of the budget, for example `usd`."
+						},
+						"max_amount_micros": {
+							"type": "string",
+							"pattern": "^[0-9]+$",
+							"description": "Total allowance the operator funded, in micros."
+						},
+						"spent_micros": {
+							"type": "string",
+							"pattern": "^[0-9]+$",
+							"description": "How much of the allowance has been drawn down, in micros."
+						},
+						"remaining_micros": {
+							"type": "string",
+							"pattern": "^[0-9]+$",
+							"description": "`max_amount_micros - spent_micros`, floored at zero."
+						},
+						"per_topup_cap_micros": {
+							"type": ["string", "null"],
+							"pattern": "^[0-9]+$",
+							"description": "Largest single top-up allowed, in micros, or null for no per-top-up cap."
+						},
+						"expires_at": {
+							"type": ["string", "null"],
+							"format": "date-time",
+							"description": "When the allowance expires, or null for no expiry."
+						},
+						"status": {
+							"type": "string",
+							"description": "Budget status. An active budget reads `active`."
+						}
+					}
+				},
+				"prepaid_credit": {
+					"description": "Prepaid usage credit (top-ups, redeemed credit codes and granted\ncredit) that can still pay for usage, or null when there is none.\nOmitted when an exact figure cannot be given right now; the budget\nis still returned.\n",
+					"type": ["object", "null"],
+					"additionalProperties": false,
+					"required": [
+						"currency",
+						"remaining_micros",
+						"next_expires_at"
+					],
+					"properties": {
+						"currency": {
+							"type": "string",
+							"description": "Currency of the credit, which is the organization billing currency."
+						},
+						"remaining_micros": {
+							"type": "string",
+							"pattern": "^[0-9]+$",
+							"description": "What the credit can still pay for, in micros."
+						},
+						"next_expires_at": {
+							"type": ["string", "null"],
+							"format": "date-time",
+							"description": "Earliest expiry among credits with a balance, or null when none of them expires."
+						}
+					}
+				}
+			}
+		},
+		"sdkName": "getCreditBalance",
+		"summary": "Get credit balance",
+		"tag": "Credits",
+		"tagCommand": "credits"
+	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": true,
+		"command": "redeem-credit-code",
+		"description": "Redeem a credit code for the authenticated organization. The credit is\nadded to the organization prepaid credit and shows in\n`GET /credits/balance` under `prepaid_credit`.\n\nRedeeming requires an organization owner or admin. An API key redeems\nwith the authority of the user who created it, based on that user's\ncurrent role; a key without that authority gets the same\n`credit_code_invalid` refusal as an unknown code.\n\nThe `Idempotency-Key` header is required. Retrying with the same key\nand code returns the original grant with `replayed: true` and grants\nnothing new; the same key with a different code is refused with\n`idempotency_key_reused`. Every refusal carries a human-readable\n`error.message` that can be shown to the user as is.\n",
+		"hasJsonBody": true,
+		"method": "POST",
+		"operationId": "redeemCreditCode",
+		"path": "/credits/redeem",
+		"pathParams": [],
+		"queryParams": [],
+		"requestSchema": {
+			"type": "object",
+			"additionalProperties": false,
+			"required": ["code"],
+			"properties": { "code": {
+				"type": "string",
+				"pattern": "^\\s*\\S(?:[\\s\\S]{0,254}\\S)?\\s*$",
+				"description": "The credit code to redeem. Surrounding whitespace is ignored; the\nrest must be 1 to 256 characters.\n"
+			} }
+		},
+		"responseSchema": {
+			"type": "object",
+			"additionalProperties": false,
+			"required": [
+				"redemption_id",
+				"amount_micros",
+				"currency",
+				"granted_at",
+				"expires_at",
+				"label",
+				"replayed",
+				"message"
+			],
+			"properties": {
+				"redemption_id": {
+					"type": "string",
+					"description": "Identifier of the redemption."
+				},
+				"amount_micros": {
+					"type": "string",
+					"pattern": "^[0-9]+$",
+					"description": "Credit granted, in micros of `currency` (1 USD = 1000000 micros)."
+				},
+				"currency": {
+					"type": "string",
+					"description": "Currency of the granted credit, for example `usd`."
+				},
+				"granted_at": {
+					"type": "string",
+					"format": "date-time",
+					"description": "When the credit was granted."
+				},
+				"expires_at": {
+					"type": ["string", "null"],
+					"format": "date-time",
+					"description": "When the granted credit expires, or null when it does not expire."
+				},
+				"label": {
+					"type": ["string", "null"],
+					"description": "Customer-facing label of the promotion, when it has one."
+				},
+				"replayed": {
+					"type": "boolean",
+					"description": "True when this Idempotency-Key already redeemed this code and the\noriginal grant is returned. No second grant is made.\n"
+				},
+				"message": {
+					"type": "string",
+					"description": "Human-readable summary of the grant, suitable to show as is."
+				}
+			}
+		},
+		"sdkName": "redeemCreditCode",
+		"summary": "Redeem a credit code",
+		"tag": "Credits",
+		"tagCommand": "credits"
+	},
 	{
 		"binaryResponse": false,
 		"bodyRequired": true,
@@ -18072,7 +18579,7 @@ const operationManifest = [
 		"binaryResponse": false,
 		"bodyRequired": true,
 		"command": "create-endpoint",
-		"description": "Creates a new webhook endpoint. If a deactivated endpoint\nwith the same URL and domain exists, it is reactivated\ninstead. Subject to plan limits on the number of active\nendpoints.\n\n**Signing is account-scoped, not per-endpoint.** This call\ndoes not return any signing material; every endpoint on the\naccount uses the same webhook secret, fetched via\n`GET /account/webhook-secret`. See the API-level \"Webhook\nsigning\" section for the full wire format (header name,\nsigned string, hash algo, secret format, tolerance) and a\nlanguage-agnostic verification recipe.\n\nAfter creating the endpoint, fire a test delivery against\nit via `POST /endpoints/{id}/test` to confirm your verifier\naccepts the signature.\n\n\nFor local receiving, use kind=pull and a stable name, without url, function_id or domain_id. Named creation resumes the same active destination; omitted filters preserve its selection, while conflicting supplied configuration returns 409. New unfiltered destinations receive all subsequently ready eligible event types. Pull destinations do not occupy HTTP routing slots. Signing-secret setup and a test HTTP delivery are not required for pull receiving.",
+		"description": "Creates a new webhook endpoint. If a deactivated endpoint\nwith the same URL and domain exists, it is reactivated\ninstead. Subject to plan limits on the number of active\nendpoints.\n\n**Signing is account-scoped, not per-endpoint.** This call\ndoes not return any signing material; every endpoint on the\naccount uses the same webhook secret, fetched via\n`GET /account/webhook-secret`. See the API-level \"Webhook\nsigning\" section for the full wire format (header name,\nsigned string, hash algo, secret format, tolerance) and a\nlanguage-agnostic verification recipe.\n\nAfter creating the endpoint, fire a test delivery against\nit via `POST /endpoints/{id}/test` to confirm your verifier\naccepts the signature.\n\n\nFor local receiving, use kind=pull and a stable name, without url, function_id or domain_id. Named creation resumes the same active destination; omitted filters preserve its selection, while conflicting supplied configuration returns 409. New unfiltered destinations receive all subsequently ready eligible event types within their credential scope. Connected-agent credentials automatically create private subscriptions restricted to inbound email for their assigned address. Names are isolated per credential; revocation or replacement deletes its subscriptions. Address-scoped events contain parsed mail without raw MIME, signed download links, routing metadata, or sibling envelope recipients. Pull destinations do not occupy HTTP routing slots. Signing-secret setup and a test HTTP delivery are not required for pull receiving.",
 		"hasJsonBody": true,
 		"method": "POST",
 		"operationId": "createEndpoint",
@@ -18140,6 +18647,10 @@ const operationManifest = [
 		"responseSchema": {
 			"type": "object",
 			"properties": {
+				"recipient": {
+					"type": ["string", "null"],
+					"description": "Server-enforced recipient for an address-scoped pull subscription; null for account-wide receiving."
+				},
 				"receiver_capabilities": {
 					"type": "object",
 					"properties": {
@@ -18316,6 +18827,10 @@ const operationManifest = [
 			"items": {
 				"type": "object",
 				"properties": {
+					"recipient": {
+						"type": ["string", "null"],
+						"description": "Server-enforced recipient for an address-scoped pull subscription; null for account-wide receiving."
+					},
 					"receiver_capabilities": {
 						"type": "object",
 						"properties": {
@@ -18782,6 +19297,10 @@ const operationManifest = [
 		"responseSchema": {
 			"type": "object",
 			"properties": {
+				"recipient": {
+					"type": ["string", "null"],
+					"description": "Server-enforced recipient for an address-scoped pull subscription; null for account-wide receiving."
+				},
 				"receiver_capabilities": {
 					"type": "object",
 					"properties": {
@@ -30421,6 +30940,240 @@ var ConfigCommand = class extends ConfigListCommand {
 	static description = "Manage local Primitive CLI request environments for API endpoint overrides and request headers.";
 };
 //#endregion
+//#region src/oclif/commands/credits.ts
+const API_KEY_FLAG$1 = Flags.string({
+	description: "Primitive API key override (defaults to PRIMITIVE_API_KEY or saved OAuth login credentials)",
+	env: "PRIMITIVE_API_KEY"
+});
+const API_BASE_URL_FLAG$1 = Flags.string({
+	description: API_BASE_URL_FLAG_DESCRIPTION,
+	env: "PRIMITIVE_API_BASE_URL",
+	hidden: true
+});
+const MICROS_PER_UNIT = 1000000n;
+/**
+* Format an integer micros string as a currency amount. USD renders as
+* `$12.50`; other currencies as `12.50 EUR`. Two decimals are always shown,
+* and up to six when the amount has sub-cent precision. Input that is not a
+* non-negative integer string is returned unchanged with the currency code.
+*/
+function formatMicros(micros, currency) {
+	const code = currency.toUpperCase();
+	if (!/^[0-9]+$/.test(micros)) return `${micros} micros ${code}`.trim();
+	const value = BigInt(micros);
+	const whole = value / MICROS_PER_UNIT;
+	const fraction = (value % MICROS_PER_UNIT).toString().padStart(6, "0").replace(/0+$/, "").padEnd(2, "0");
+	const amount = `${whole.toLocaleString("en-US")}.${fraction}`;
+	return code === "USD" ? `$${amount}` : `${amount} ${code}`;
+}
+function formatExpiry(value) {
+	if (!value) return "never";
+	const date = new Date(value);
+	if (Number.isNaN(date.getTime())) return value;
+	return date.toISOString().slice(0, 10);
+}
+function formatRedemptionSummary(redemption) {
+	const lines = [redemption.replayed ? `Already redeemed with this idempotency key: ${formatMicros(redemption.amount_micros, redemption.currency)} in credit. No new credit was added.` : `Redeemed ${formatMicros(redemption.amount_micros, redemption.currency)} in credit.`, `Expires: ${formatExpiry(redemption.expires_at)}`];
+	if (redemption.label?.trim()) lines.push(`Promotion: ${redemption.label}`);
+	lines.push(`Redemption id: ${redemption.redemption_id}`);
+	return lines.join("\n");
+}
+function formatBalanceSummary(balance) {
+	const lines = [];
+	const prepaid = balance.prepaid_credit;
+	if (prepaid === void 0) lines.push("Prepaid credit: not available right now, try again shortly");
+	else if (prepaid === null) lines.push("Prepaid credit: none");
+	else {
+		const expiry = prepaid.next_expires_at ? `next expiry ${formatExpiry(prepaid.next_expires_at)}` : "no expiry";
+		lines.push(`Prepaid credit: ${formatMicros(prepaid.remaining_micros, prepaid.currency)} (${expiry})`);
+	}
+	const budget = balance.budget;
+	if (!budget) lines.push("Spending budget: none");
+	else {
+		const details = [`status ${budget.status}`];
+		if (budget.per_topup_cap_micros) details.push(`per top-up cap ${formatMicros(budget.per_topup_cap_micros, budget.currency)}`);
+		details.push(`expires ${formatExpiry(budget.expires_at)}`);
+		lines.push(`Spending budget: ${formatMicros(budget.remaining_micros, budget.currency)} of ${formatMicros(budget.max_amount_micros, budget.currency)} remaining (${details.join(", ")})`);
+	}
+	return lines.join("\n");
+}
+/**
+* Lines printed after a failed redemption so the user can retry without risk
+* of a second grant: reusing the same key and code returns the original grant
+* if the first attempt did land. No shell command is printed, since quoting
+* differs between shells.
+*/
+function formatRetryHint(idempotencyKey) {
+	return [`Idempotency-Key: ${idempotencyKey}`, `To retry this redemption safely, run the same command again with --idempotency-key ${idempotencyKey}.`].join("\n");
+}
+/**
+* Print a failed request. A server refusal (an error envelope with a
+* message) prints the message as the primary line, since the redeem route
+* writes it to be shown to the user; anything else falls back to the shared
+* error renderer. Always sets a non-zero exit code.
+*/
+function reportCreditsError(error, context, options) {
+	const payload = extractErrorPayload(error);
+	const body = payload;
+	if (!options.json && body && typeof body === "object" && typeof body.message === "string" && typeof body.code === "string" && body.code !== "unauthorized") {
+		process.stderr.write(`${options.prefix}: ${body.message}\n`);
+		process.stderr.write(`Error code: ${body.code}\n`);
+	} else writeErrorWithHints(payload);
+	surfaceUnauthorizedHint({
+		...context,
+		payload
+	});
+	process.exitCode = 1;
+}
+var CreditsRedeemCommand = class CreditsRedeemCommand extends Command {
+	static description = `Redeem a credit code for your organization.
+
+  Prints the credit added and when it expires. On a refusal (an invalid,
+  already redeemed or ineligible code, for example) the server's message is
+  printed and the command exits non-zero.
+
+  Redeeming needs an organization owner or admin. With an API key, the key's
+  creator must currently be an owner or admin.
+
+  The request carries an Idempotency-Key. One is generated for each run; pass
+  --idempotency-key to retry the same redemption safely, for example after a
+  network error. Retrying with the same key and code returns the original
+  grant and adds no second credit. On any failure the key in use is printed to
+  stderr so the same command can be rerun with --idempotency-key.`;
+	static summary = "Redeem a credit code";
+	static examples = [
+		"<%= config.bin %> credits redeem LAUNCH50",
+		"<%= config.bin %> credits redeem LAUNCH50 --idempotency-key redeem-launch50-1",
+		"<%= config.bin %> credits redeem LAUNCH50 --json"
+	];
+	static args = { code: Args.string({
+		description: "The credit code to redeem.",
+		required: true
+	}) };
+	static flags = {
+		"api-key": API_KEY_FLAG$1,
+		"api-base-url": API_BASE_URL_FLAG$1,
+		"idempotency-key": Flags.string({ description: "Idempotency key for the request, at most 200 characters. Defaults to a new random key per run; reuse a key only to retry the same code." }),
+		json: Flags.boolean({ description: "Print the full redemption JSON on success, or the error JSON on failure." }),
+		time: Flags.boolean({ description: TIME_FLAG_DESCRIPTION })
+	};
+	async run() {
+		const { args, flags } = await this.parse(CreditsRedeemCommand);
+		const code = args.code.trim();
+		if (!code) {
+			process.stderr.write("The credit code must not be empty.\n");
+			process.exitCode = 1;
+			return;
+		}
+		const idempotencyKey = flags["idempotency-key"]?.trim() || `cli-redeem-${randomUUID()}`;
+		if (idempotencyKey.length > 200) {
+			process.stderr.write("--idempotency-key must be at most 200 characters.\n");
+			process.exitCode = 1;
+			return;
+		}
+		if (!/^[\x21-\x7E]+$/.test(idempotencyKey)) {
+			process.stderr.write("--idempotency-key must contain only printable ASCII characters, without spaces.\n");
+			process.exitCode = 1;
+			return;
+		}
+		const { apiClient, auth, baseUrlOverridden } = await createAuthenticatedCliApiClient({
+			apiKey: flags["api-key"],
+			apiBaseUrl: flags["api-base-url"],
+			configDir: this.config.configDir
+		});
+		const writeRetryHint = () => process.stderr.write(`${formatRetryHint(idempotencyKey)}\n`);
+		await runWithTiming(flags.time, async () => {
+			let result;
+			try {
+				result = await redeemCreditCode({
+					client: apiClient.client,
+					body: { code },
+					headers: { "Idempotency-Key": idempotencyKey },
+					responseStyle: "fields"
+				});
+			} catch (error) {
+				writeRetryHint();
+				throw error;
+			}
+			if (result.error) {
+				reportCreditsError(result.error, {
+					auth,
+					baseUrlOverridden,
+					configDir: this.config.configDir
+				}, {
+					json: Boolean(flags.json),
+					prefix: `Could not redeem ${code}`
+				});
+				writeRetryHint();
+				return;
+			}
+			const redemption = result.data?.data;
+			if (!redemption) {
+				process.stderr.write("Server returned an empty redemption body.\n");
+				writeRetryHint();
+				process.exitCode = 1;
+				return;
+			}
+			if (flags.json) {
+				this.log(JSON.stringify(redemption, null, 2));
+				return;
+			}
+			this.log(formatRedemptionSummary(redemption));
+		});
+	}
+};
+var CreditsBalanceCommand = class CreditsBalanceCommand extends Command {
+	static description = `Show your organization's credit balance.
+
+  Prints the prepaid credit (top-ups, redeemed credit codes and granted
+  credit) that can still pay for usage, and the agent spending budget when an
+  operator has funded one. Pass --json for the raw response.`;
+	static summary = "Show the credit balance";
+	static examples = ["<%= config.bin %> credits balance", "<%= config.bin %> credits balance --json"];
+	static flags = {
+		"api-key": API_KEY_FLAG$1,
+		"api-base-url": API_BASE_URL_FLAG$1,
+		json: Flags.boolean({ description: "Print the full balance JSON response." }),
+		time: Flags.boolean({ description: TIME_FLAG_DESCRIPTION })
+	};
+	async run() {
+		const { flags } = await this.parse(CreditsBalanceCommand);
+		const { apiClient, auth, baseUrlOverridden } = await createAuthenticatedCliApiClient({
+			apiKey: flags["api-key"],
+			apiBaseUrl: flags["api-base-url"],
+			configDir: this.config.configDir
+		});
+		await runWithTiming(flags.time, async () => {
+			const result = await getCreditBalance({
+				client: apiClient.client,
+				responseStyle: "fields"
+			});
+			if (result.error) {
+				reportCreditsError(result.error, {
+					auth,
+					baseUrlOverridden,
+					configDir: this.config.configDir
+				}, {
+					json: Boolean(flags.json),
+					prefix: "Could not read the balance"
+				});
+				return;
+			}
+			const balance = result.data?.data;
+			if (!balance) {
+				process.stderr.write("Server returned an empty balance body.\n");
+				process.exitCode = 1;
+				return;
+			}
+			if (flags.json) {
+				this.log(JSON.stringify(balance, null, 2));
+				return;
+			}
+			this.log(formatBalanceSummary(balance));
+		});
+	}
+};
+//#endregion
 //#region src/oclif/commands/doctor.ts
 const MIN_NODE_MAJOR = 22;
 function renderRow({ label, outcome }) {
@@ -30524,7 +31277,7 @@ function checkApiKey(opts) {
 }
 async function checkAccount(client) {
 	try {
-		const result = await getAccount$1({
+		const result = await getAccount({
 			client: client.client,
 			responseStyle: "fields"
 		});
@@ -32303,8 +33056,8 @@ const PRIMITIVE_TEAM_AUTHOR = {
 	name: "Primitive Team",
 	url: "https://primitive.dev"
 };
-const SDK_VERSION_RANGE = "^1.27.0";
-const CLI_VERSION_RANGE = "^1.27.0";
+const SDK_VERSION_RANGE = "^1.29.0";
+const CLI_VERSION_RANGE = "^1.29.0";
 const ESBUILD_VERSION_RANGE = "^0.27.0";
 function renderHandler() {
 	return `// env.PRIMITIVE_API_KEY, env.PRIMITIVE_WEBHOOK_SECRET, and
@@ -34960,7 +35713,7 @@ async function pullFile(root, outPath, opts) {
 	return manifest;
 }
 //#endregion
-//#region ../sdk-node/dist/api-D4xf448r.js
+//#region ../sdk-node/dist/api-27BvnkVA.js
 const jsonBodySerializer = { bodySerializer: (body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value) };
 function createSseClient({ onRequest, onSseError, onSseEvent, responseTransformer, responseValidator, sseDefaultRetryDelay, sseMaxRetryAttempts, sseMaxRetryDelay, sseSleepFn, url, ...options }) {
 	let lastEventId;
@@ -35548,17 +36301,6 @@ const createClient = (config = {}) => {
 };
 const client$1 = createClient(createConfig({ baseUrl: "https://api.primitive.dev/v1" }));
 /**
-* Get account info
-*/
-const getAccount = (options) => (options?.client ?? client$1).get({
-	security: [{
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/account",
-	...options
-});
-/**
 * Receive a pending webhook event without a public endpoint
 *
 * Wait up to 30 seconds for one existing event. The body string preserves the exact webhook serialization; headers and canonical occurrence/type metadata travel alongside it. A fixed lease protects the attempt while a short handler accepts input. Retry may redeliver an occurrence: deduplicate event_id. Empty delivery means no offer now, not proof all input was delivered; inspect backlog and persistent gap_count/last_gap_reason. Queue retention is 24 hours and does not extend source-content retention. Disconnecting preserves pending work. Same named destination shares consumption; different destinations get independent copies.
@@ -35632,7 +36374,7 @@ function unwrap(result) {
 var EventConnection = class {
 	socket;
 	pending;
-	accountId;
+	origin;
 	touch;
 	constructor(client, endpointId, options = {}) {
 		this.client = client;
@@ -35648,15 +36390,9 @@ var EventConnection = class {
 	}
 	async open(signal) {
 		if (this.options.transport === "poll" || this.socket?.readyState === 1) return;
-		const account = unwrap(await getAccount({
-			client: this.client,
-			responseStyle: "fields",
-			throwOnError: false,
-			signal: AbortSignal.any([signal, AbortSignal.timeout(15e3)])
-		}));
-		if (!account.data?.id || this.accountId && account.data.id !== this.accountId) throw new EventReceiverError("The authenticated account changed; restart the receiver", "identity_changed", 403);
-		this.accountId = account.data.id;
 		const config = this.client.getConfig();
+		if (this.origin !== void 0 && this.origin !== config.baseUrl) throw new EventReceiverError("The API environment changed; restart the receiver", "identity_changed", 403);
+		this.origin = config.baseUrl;
 		const auth = typeof config.auth === "function" ? await config.auth({
 			type: "http",
 			scheme: "bearer"
@@ -36021,7 +36757,7 @@ function resolveListenSubscription(configDir, identity, explicit) {
 var ListenError = class extends Error {};
 var RequestFailure = class extends ListenError {
 	constructor(status, code, retryAfter) {
-		super(status === 401 || status === 403 ? "Listener authorization failed. Run primitive signin or check your API key and account permissions." : status === 409 && code === "subscription_conflict" ? "This subscription has different event filters. Omit --events to resume it, or use primitive listen --subscription new-subscription (add your --events selection)." : `Listener API request failed (HTTP ${status || "transport"}, ${code}).`);
+		super(code === "agent_connection_scope_forbidden" ? "This operation is outside the connected address grant. Use inbound email events and this credential’s own subscription." : status === 401 || status === 403 ? "Listener authorization failed. Run primitive signin or check your API key and account permissions." : status === 409 && code === "subscription_conflict" ? "This subscription has different event filters. Omit --events to resume it, or use primitive listen --subscription new-subscription (add your --events selection)." : `Listener API request failed (HTTP ${status || "transport"}, ${code}).`);
 		this.status = status;
 		this.code = code;
 		this.retryAfter = retryAfter;
@@ -36081,6 +36817,7 @@ async function runListen(options) {
 	let accountId;
 	let verifiedKey;
 	let verified = false;
+	let connectedCredential = false;
 	let confirmed = 0;
 	let release;
 	let stream;
@@ -36136,7 +36873,16 @@ async function runListen(options) {
 		if (origin !== void 0 && origin !== base) throw new ListenError("The API environment changed while listening. Restart the listener.");
 		origin = base;
 		if (!verified || auth.auth.apiKey !== verifiedKey) {
-			const account = await retry(() => getAccount$1({
+			if (auth.auth.apiKey?.startsWith("pconn_")) {
+				connectedCredential = true;
+				const identity = `connection:${scryptSync(auth.auth.apiKey, "primitive-listener-identity-v1", 32).toString("hex")}`;
+				if (accountId !== void 0 && accountId !== identity) throw new ListenError("The connected credential changed while listening. Restart the listener.");
+				accountId = identity;
+				verifiedKey = auth.auth.apiKey;
+				verified = true;
+				return auth.apiClient.client;
+			}
+			const account = await retry(() => getAccount({
 				client: auth.apiClient.client,
 				responseStyle: "fields",
 				signal: AbortSignal.any([signal, AbortSignal.timeout(3e4)])
@@ -36179,7 +36925,7 @@ async function runListen(options) {
 			stream = new EventConnection(streamClient, endpoint.id);
 		}
 		const selected = endpoint.rules?.event_types;
-		const selection = Array.isArray(selected) && selected.every((value) => typeof value === "string" && /^[a-zA-Z0-9_.-]+$/.test(value)) ? selected.join(", ") : "all events";
+		const selection = Array.isArray(selected) && selected.every((value) => typeof value === "string" && /^[a-zA-Z0-9_.-]+$/.test(value)) ? selected.join(", ") : endpoint.recipient ? `inbound email for ${JSON.stringify(endpoint.recipient)}` : "all events";
 		stderr.write(`Listening on subscription ${subscription.name} (${endpoint.id}); ${resumed ? "resumed" : "created"}, mode ${options.mode ?? "stdout"}, selection: ${selection}. Retention: 24 hours; handler limit: 30 seconds. Pending count follows the first poll. Ctrl-C disconnects; delete with primitive endpoints delete --id ${endpoint.id}.\n`);
 		let lastGap = -1;
 		let lastBacklog = -1;
@@ -36242,6 +36988,7 @@ async function runListen(options) {
 				delivery_id: delivery.delivery_id,
 				lease_token: delivery.lease_token
 			};
+			if ((connectedCredential || endpoint.recipient) && completion.mode === "http") completion.confirmed = false;
 			try {
 				const receipt = await retry(async () => {
 					if (stream) {
@@ -36280,7 +37027,7 @@ async function runListen(options) {
 //#region src/oclif/commands/listen.ts
 var ListenCommand = class ListenCommand extends Command {
 	static summary = "Receive webhook events locally without a public endpoint";
-	static description = "Subscribe once and reconnect using the same durable server queue. Use a short --exec hook to durably accept an event, --forward-to for a local webhook, or newline-delimited JSON on stdout.";
+	static description = "Subscribe once and reconnect using the same durable server queue. Connected-agent credentials automatically receive only their assigned address. Use a short --exec hook to durably accept an event, --forward-to for a local webhook, or newline-delimited JSON on stdout.";
 	static examples = [
 		"<%= config.bin %> listen",
 		"<%= config.bin %> listen --subscription my-agent --exec \"python3 accept.py\"",
@@ -36302,7 +37049,7 @@ var ListenCommand = class ListenCommand extends Command {
 			min: 1,
 			max: 2147483
 		}),
-		subscription: Flags.string({ description: "Stable subscription name. Defaults to a saved name for this account and API environment." }),
+		subscription: Flags.string({ description: "Stable subscription name. Defaults to a saved name for this credential scope and API environment." }),
 		exec: Flags.string({
 			description: "Short POSIX shell command accepting each complete event on stdin.",
 			exclusive: ["forward-to"]
@@ -36679,7 +37426,7 @@ async function checkExistingLogin(params) {
 		apiBaseUrl: probeApiBaseUrl,
 		headers: requestConfig.headers
 	});
-	const result = await (params.checkAccount ?? ((client) => getAccount$1({
+	const result = await (params.checkAccount ?? ((client) => getAccount({
 		client: client.client,
 		responseStyle: "fields"
 	})))(apiClient);
@@ -40318,7 +41065,7 @@ var PaymentsRegisterPayoutAddressCommand = class PaymentsRegisterPayoutAddressCo
 			configDir: this.config.configDir
 		});
 		await runWithTiming(flags.time, async () => {
-			const account = await getAccount$1({
+			const account = await getAccount({
 				client: apiClient.client,
 				responseStyle: "fields"
 			});
@@ -42511,7 +43258,7 @@ var WhoamiCommand = class WhoamiCommand extends Command {
 				apiBaseUrl: flags["api-base-url"],
 				configDir: this.config.configDir
 			});
-			const result = await getAccount$1({
+			const result = await getAccount({
 				client: apiClient.client,
 				responseStyle: "fields"
 			});
@@ -42868,6 +43615,8 @@ const CANONICAL_OPERATION_ALIASES = {
 };
 const DESCRIBE_OPERATION_ALIASES = {
 	...CANONICAL_OPERATION_ALIASES,
+	"credits:balance": "credits:get-credit-balance",
+	"credits:redeem": "credits:redeem-credit-code",
 	"domains:zone-file": "domains:download-domain-zone-file",
 	"functions:logs": "functions:list-function-logs",
 	"memories:delete": "memories:delete-memory",
@@ -42885,7 +43634,8 @@ const OVERRIDDEN_OPERATION_IDS = new Set([
 	"inbox:get-inbox-status",
 	"search:semantic-search",
 	"payments:register-payout-address",
-	"payments:pay-challenge"
+	"payments:pay-challenge",
+	"credits:redeem-credit-code"
 ]);
 const generatedCommands = Object.fromEntries(operationManifest.filter((operation) => !OVERRIDDEN_OPERATION_IDS.has(operationId(operation))).map((operation) => [operationId(operation), createOperationCommand(operation)]));
 const COMMANDS = {
@@ -42966,6 +43716,9 @@ const COMMANDS = {
 	"memories:get": MemoriesGetCommand,
 	"memories:delete": MemoriesDeleteCommand,
 	"memories:search": MemoriesSearchCommand,
+	"credits:redeem": CreditsRedeemCommand,
+	"credits:redeem-credit-code": CreditsRedeemCommand,
+	"credits:balance": CreditsBalanceCommand,
 	...Object.fromEntries(Object.entries(CANONICAL_OPERATION_ALIASES).map(([alias, target]) => {
 		const command = generatedCommands[target];
 		if (!command) throw new Error(`Missing generated command target for alias ${alias}`);

package/man/primitive.1

@@ -133,6 +133,12 @@ Read a durable memory by key.
 .B primitive memories search PREFIX
 List memories by key prefix.
 .TP
+.B primitive credits redeem CODE
+Redeem a credit code for your organization.
+.TP
+.B primitive credits balance
+Show the organization credit balance.
+.TP
 .B primitive list-operations
 Print the generated API operation manifest.
 .TP

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "primcli",
-  "version": "1.27.0",
+  "version": "1.29.0",
   "description": "Official Primitive CLI: deploy Primitive Functions, send and inspect mail, manage endpoints, all from the terminal. Wraps the @primitivedotdev/sdk runtime client with one-shot commands.",
   "type": "module",
   "sideEffects": false,
@@ -55,6 +55,9 @@
       "agent": {
         "description": "Agent signup and authentication API operations"
       },
+      "credits": {
+        "description": "Redeem credit codes and check the organization credit balance"
+      },
       "domains": {
         "description": "Claim, verify, manage email domains, and download DNS zone files"
       },