primcli 1.29.0 → 1.31.0

package/dist/{cli-config-BKso8oJu.js → cli-config-BvflSzQe.js}

@@ -1,7 +1,9 @@
 import { Errors } from "@oclif/core";
-import { chmodSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
-import { randomUUID } from "node:crypto";
-import { join } from "node:path";
+import { chmodSync, closeSync, fsyncSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { createHash, randomUUID } from "node:crypto";
+import { dirname, join, win32 } from "node:path";
+import { setTimeout as setTimeout$1 } from "node:timers/promises";
+import { execFileSync } from "node:child_process";
 //#region ../packages/api-core/src/api/core/bodySerializer.gen.ts
 const jsonBodySerializer = { bodySerializer: (body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value) };
 //#endregion
@@ -636,6 +638,430 @@ var PrimitiveApiClient = class {
 	}
 };
 //#endregion
+//#region src/oclif/listen-state.ts
+var ListenStateError = class extends Error {};
+function normalizeListenOrigin(value) {
+	const url = new URL(value);
+	if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.search || url.hash) throw new ListenStateError("The API base URL must be an HTTP(S) URL without credentials, query, or fragment.");
+	return `${url.origin}${url.pathname.replace(/\/+$/, "")}`;
+}
+function listenIdentity(origin, accountId) {
+	return createHash("sha256").update(JSON.stringify([normalizeListenOrigin(origin), accountId])).digest("hex");
+}
+function privateDirectory(path) {
+	mkdirSync(path, {
+		recursive: true,
+		mode: 448
+	});
+	if (!lstatSync(path).isDirectory() || lstatSync(path).isSymbolicLink()) throw new ListenStateError("Listener state must be a private directory.");
+	chmodSync(path, 448);
+}
+function processAlive(pid) {
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (error) {
+		return error.code !== "ESRCH";
+	}
+}
+function listenProcessIdentity(pid) {
+	if (!Number.isSafeInteger(pid) || pid < 1) return null;
+	try {
+		if (process.platform === "linux") {
+			const boot = readFileSync("/proc/sys/kernel/random/boot_id", "utf8").trim();
+			const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+			const end = stat.lastIndexOf(")");
+			const started = stat.slice(end + 1).trim().split(/\s+/)[19];
+			if (!/^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/.test(boot) || !stat.startsWith(`${pid} (`) || end < 0 || !started || !/^\d+$/.test(started)) return null;
+			return `linux:${boot}:${started}`;
+		}
+		if (process.platform === "darwin") {
+			const options = {
+				encoding: "utf8",
+				timeout: 1e3,
+				maxBuffer: 4096,
+				stdio: [
+					"ignore",
+					"pipe",
+					"ignore"
+				],
+				env: {
+					LC_ALL: "C",
+					TZ: "UTC",
+					PATH: "/usr/bin:/bin:/usr/sbin:/sbin"
+				}
+			};
+			const boot = execFileSync("/usr/sbin/sysctl", ["-n", "kern.boottime"], options);
+			const bootMatch = /\{\s*sec\s*=\s*(\d+),\s*usec\s*=\s*(\d+)\s*\}/.exec(boot);
+			const started = execFileSync("/bin/ps", [
+				"-p",
+				String(pid),
+				"-o",
+				"lstart="
+			], options).trim().replace(/\s+/g, " ");
+			if (!bootMatch || !/^[A-Z][a-z]{2} [A-Z][a-z]{2} \d{1,2} \d{2}:\d{2}:\d{2} \d{4}$/.test(started)) return null;
+			return `darwin:${bootMatch[1]}:${bootMatch[2]}:${started}`;
+		}
+		if (process.platform === "win32") {
+			const root = process.env.SystemRoot;
+			if (!root || !win32.isAbsolute(root)) return null;
+			const started = execFileSync(win32.join(root, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"), [
+				"-NoLogo",
+				"-NoProfile",
+				"-NonInteractive",
+				"-Command",
+				`$ErrorActionPreference='Stop'; (Get-Process -Id ${pid} -ErrorAction Stop).StartTime.ToUniversalTime().Ticks.ToString([System.Globalization.CultureInfo]::InvariantCulture)`
+			], {
+				encoding: "utf8",
+				timeout: 2e3,
+				maxBuffer: 4096,
+				windowsHide: true,
+				stdio: [
+					"ignore",
+					"pipe",
+					"ignore"
+				]
+			}).trim();
+			return /^\d{1,20}$/.test(started) ? `win32:${started}` : null;
+		}
+	} catch {}
+	return null;
+}
+function ownerIdentity(path) {
+	try {
+		const stat = lstatSync(path);
+		if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 1024) return null;
+		const saved = JSON.parse(readFileSync(path, "utf8"));
+		if (!saved || typeof saved !== "object" || !("version" in saved) || saved.version !== 1 || !("identity" in saved) || typeof saved.identity !== "string") return null;
+		return /^(?:linux:[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}:\d+|darwin:\d+:\d+:[A-Z][a-z]{2} [A-Z][a-z]{2} \d{1,2} \d{2}:\d{2}:\d{2} \d{4}|win32:\d{1,20})$/.test(saved.identity) ? saved.identity : null;
+	} catch {
+		return null;
+	}
+}
+function removeOwner(path, owner) {
+	try {
+		unlinkSync(join(path, owner));
+	} catch (error) {
+		if (error.code !== "ENOENT") throw error;
+	}
+	try {
+		rmdirSync(path);
+	} catch (error) {
+		if (![
+			"ENOENT",
+			"ENOTEMPTY",
+			"EEXIST"
+		].includes(error.code ?? "")) throw error;
+	}
+}
+function acquireListenLock(directory, scope) {
+	privateDirectory(directory);
+	const path = join(directory, `${createHash("sha256").update(scope).digest("hex")}.lock`);
+	const owner = `${process.pid}-${randomUUID()}`;
+	const candidate = mkdtempSync(join(directory, ".claim-"));
+	chmodSync(candidate, 448);
+	writeFileSync(join(candidate, owner), JSON.stringify({
+		version: 1,
+		identity: listenProcessIdentity(process.pid)
+	}), {
+		mode: 384,
+		flag: "wx"
+	});
+	let installed = false;
+	try {
+		for (let attempt = 0; attempt < 8; attempt++) {
+			try {
+				renameSync(candidate, path);
+				installed = true;
+				break;
+			} catch (error) {
+				if (!["EEXIST", "ENOTEMPTY"].includes(error.code ?? "")) throw error;
+			}
+			let entries;
+			try {
+				entries = readdirSync(path);
+			} catch (error) {
+				if (error.code === "ENOENT") continue;
+				throw error;
+			}
+			if (entries.length === 0) continue;
+			const match = entries.length === 1 ? /^(\d+)-[a-f0-9-]{36}$/.exec(entries[0] ?? "") : null;
+			const pid = match ? Number(match[1]) : null;
+			let stale = pid !== null && !processAlive(pid);
+			if (!stale && pid !== null) {
+				const saved = ownerIdentity(join(path, entries[0] ?? ""));
+				const current = saved === null ? null : listenProcessIdentity(pid);
+				stale = saved !== null && current !== null && saved !== current;
+			}
+			if (!stale) throw new ListenStateError("Another listener is using this subscription, or its owner cannot be verified. Stop the original listener before reconnecting. To use a separate subscription instead, run: primitive listen --subscription local-" + randomUUID());
+			removeOwner(path, entries[0] ?? "");
+		}
+		if (!installed) throw new ListenStateError("Subscription lock changed concurrently. Retry the command.");
+	} finally {
+		if (!installed) removeOwner(candidate, owner);
+	}
+	let released = false;
+	return () => {
+		if (!released) {
+			released = true;
+			removeOwner(path, owner);
+		}
+	};
+}
+function resolveListenSubscription(configDir, identity, explicit) {
+	const directory = join(configDir, "listen", identity);
+	privateDirectory(directory);
+	let name = explicit;
+	if (name === void 0) {
+		const unlock = acquireListenLock(directory, "default-name");
+		try {
+			const file = join(directory, "default.json");
+			try {
+				if (!lstatSync(file).isFile() || lstatSync(file).isSymbolicLink()) throw new ListenStateError("Invalid listener identity file.");
+				const saved = JSON.parse(readFileSync(file, "utf8"));
+				if (typeof saved.name !== "string" || !/^local-[a-f0-9-]{36}$/.test(saved.name)) throw new ListenStateError("Invalid listener identity file.");
+				name = saved.name;
+			} catch (error) {
+				if (error.code !== "ENOENT") throw error;
+				name = `local-${randomUUID()}`;
+				const temporary = join(directory, `.state-${randomUUID()}`);
+				const fd = openSync(temporary, "wx", 384);
+				try {
+					writeFileSync(fd, `${JSON.stringify({ name })}\n`);
+					fsyncSync(fd);
+				} finally {
+					closeSync(fd);
+				}
+				renameSync(temporary, file);
+			}
+			if (process.platform !== "win32") for (const path of [
+				directory,
+				join(configDir, "listen"),
+				configDir
+			]) {
+				const directoryFd = openSync(path, "r");
+				try {
+					fsyncSync(directoryFd);
+				} finally {
+					closeSync(directoryFd);
+				}
+			}
+		} finally {
+			unlock();
+		}
+	}
+	if (!name || name.length > 64 || !/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/.test(name)) throw new ListenStateError("Use a subscription name of 1–64 letters, digits, underscores, or hyphens.");
+	return {
+		name,
+		release: acquireListenLock(directory, `subscription:${name}`)
+	};
+}
+//#endregion
+//#region src/oclif/shared-mail-files.ts
+var SharedMailStateError = class extends ListenStateError {};
+const invalidSharedMail = () => new SharedMailStateError("Shared mail state is invalid or inconsistent. Preserve it before retrying to avoid duplicate delivery.");
+function privateMailPermissions(info, platform = process.platform) {
+	return platform === "win32" || info.uid === process.getuid?.() && (info.mode & 63) === 0;
+}
+function privateMailDirectory(path, create = false) {
+	if (create) {
+		const created = mkdirSync(path, {
+			recursive: true,
+			mode: 448
+		});
+		if (created !== void 0) {
+			let current = path;
+			for (;;) {
+				syncMailDirectory(current);
+				syncMailDirectory(dirname(current));
+				if (current === created) break;
+				current = dirname(current);
+			}
+		}
+	}
+	const stat = lstatSync(path);
+	if (!stat.isDirectory() || !privateMailPermissions(stat)) throw invalidSharedMail();
+}
+function syncMailDirectory(path, platform = process.platform) {
+	if (platform === "win32") return;
+	const fd = openSync(path, "r");
+	try {
+		fsyncSync(fd);
+	} finally {
+		closeSync(fd);
+	}
+}
+function readMailJson(path, maxBytes = 16384) {
+	try {
+		const info = lstatSync(path);
+		if (!info.isFile() || !privateMailPermissions(info) || info.size > maxBytes) throw invalidSharedMail();
+		const value = JSON.parse(readFileSync(path, "utf8"));
+		if (value === null) throw invalidSharedMail();
+		return value;
+	} catch (error) {
+		if (error.code === "ENOENT") return null;
+		throw invalidSharedMail();
+	}
+}
+function writeMailJson(path, value) {
+	privateMailDirectory(dirname(path), true);
+	const temporary = join(dirname(path), `.write-${randomUUID()}`);
+	try {
+		const fd = openSync(temporary, "wx", 384);
+		try {
+			writeFileSync(fd, `${JSON.stringify(value)}\n`);
+			fsyncSync(fd);
+		} finally {
+			closeSync(fd);
+		}
+		renameSync(temporary, path);
+		syncMailDirectory(dirname(path));
+	} finally {
+		try {
+			unlinkSync(temporary);
+		} catch {}
+	}
+}
+function removeMailFile(path) {
+	try {
+		unlinkSync(path);
+	} catch (error) {
+		if (error.code !== "ENOENT") throw error;
+	}
+	syncMailDirectory(dirname(path));
+}
+function mailLockBusy(error) {
+	return error instanceof ListenStateError && /^(Another listener|Subscription lock changed)/.test(error.message);
+}
+async function withMailLock(directory, action, signal) {
+	const deadline = performance.now() + 5e3;
+	for (;;) {
+		signal?.throwIfAborted();
+		let release;
+		try {
+			release = acquireListenLock(directory, "shared-mail-state");
+		} catch (error) {
+			if (!mailLockBusy(error) || performance.now() >= deadline) throw error;
+			await setTimeout$1(25, void 0, { signal });
+			continue;
+		}
+		try {
+			signal?.throwIfAborted();
+			return action();
+		} finally {
+			release();
+		}
+	}
+}
+function mailObject(value, keys) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw invalidSharedMail();
+	const result = value;
+	if (Object.keys(result).length !== keys.length || keys.some((key) => !Object.hasOwn(result, key))) throw invalidSharedMail();
+	return result;
+}
+function mailId(value) {
+	if (typeof value !== "string" || !/^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/i.test(value)) throw invalidSharedMail();
+	return value.toLowerCase();
+}
+function mailString(value, max = 256) {
+	if (typeof value !== "string" || !value || value.length > max || Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127)) throw invalidSharedMail();
+	return value;
+}
+function mailAddress(value) {
+	const address = mailString(value, 254).toLowerCase();
+	if (!/^[^\s<>@]+@[^\s<>@]+\.[^\s<>@]+$/.test(address)) throw invalidSharedMail();
+	return address;
+}
+function mailTime(value) {
+	const time = mailString(value, 40);
+	if (!Number.isFinite(Date.parse(time))) throw invalidSharedMail();
+	return new Date(time).toISOString();
+}
+//#endregion
+//#region src/oclif/connected-agent-profile.ts
+const AGENT_PROFILE_ENV = "PRIMITIVE_AGENT_PROFILE";
+var AgentConnectionSetupError = class extends Error {};
+function requireDefaultLoginProfile() {
+	if (process.env["PRIMITIVE_AGENT_PROFILE"]?.trim()) throw new AgentConnectionSetupError("This command manages the default OAuth login. Unset PRIMITIVE_AGENT_PROFILE before using it; the connected-agent profile is unchanged.");
+}
+function agentProfileName(value) {
+	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,62}$/.test(value)) throw new AgentConnectionSetupError("Agent profile must start with a letter or number and contain only letters, numbers, dots, underscores or hyphens (at most 63 characters).");
+	return value;
+}
+function connectedApiBaseUrl(value) {
+	if (value !== "https://api.primitive.dev/v1" && value !== "https://api.primitive-staging-1.com/v1") throw new AgentConnectionSetupError("Agent setup requires an official Primitive API origin.");
+	return value;
+}
+function agentProfilesDirectory(configDir) {
+	return join(configDir, "agent-connections");
+}
+function agentProfileDirectory(configDir, profileName) {
+	return join(agentProfilesDirectory(configDir), "profiles", agentProfileName(profileName));
+}
+function profilePath(configDir, profileName) {
+	return join(agentProfileDirectory(configDir, profileName), "connection.json");
+}
+function parseConnectedAgentProfile(value) {
+	try {
+		const row = mailObject(value, [
+			"version",
+			"auth_method",
+			"api_key",
+			"api_base_url",
+			"org_id",
+			"agent_address",
+			"owner_address",
+			"invitation_hash",
+			"created_at"
+		]);
+		const apiKey = mailString(row.api_key, 4096);
+		const invitationHash = mailString(row.invitation_hash, 64);
+		if (row.version !== 1 || row.auth_method !== "agent_connection" || !apiKey.startsWith("pconn_") || /\s/.test(apiKey) || !/^[a-f0-9]{64}$/.test(invitationHash)) throw new Error();
+		return {
+			version: 1,
+			auth_method: "agent_connection",
+			api_key: apiKey,
+			api_base_url: connectedApiBaseUrl(row.api_base_url),
+			org_id: mailId(row.org_id),
+			agent_address: mailAddress(row.agent_address),
+			owner_address: mailAddress(row.owner_address),
+			invitation_hash: invitationHash,
+			created_at: mailTime(row.created_at)
+		};
+	} catch {
+		throw new AgentConnectionSetupError("Saved agent profile is invalid. Preserve its private files and request a fresh setup invitation.");
+	}
+}
+function loadConnectedAgentProfile(configDir, profileName) {
+	agentProfileName(profileName);
+	try {
+		privateMailDirectory(agentProfilesDirectory(configDir));
+		privateMailDirectory(join(agentProfilesDirectory(configDir), "profiles"));
+		privateMailDirectory(agentProfileDirectory(configDir, profileName));
+		const value = readMailJson(profilePath(configDir, profileName));
+		return value === null ? null : parseConnectedAgentProfile(value);
+	} catch (error) {
+		if (error.code === "ENOENT") return null;
+		throw new AgentConnectionSetupError("Cannot read the private agent profile. Check its ownership and permissions without exposing its contents.");
+	}
+}
+function saveConnectedAgentProfile(configDir, profileName, profile) {
+	const validated = parseConnectedAgentProfile(profile);
+	privateMailDirectory(agentProfilesDirectory(configDir), true);
+	privateMailDirectory(join(agentProfilesDirectory(configDir), "profiles"), true);
+	privateMailDirectory(agentProfileDirectory(configDir, profileName), true);
+	writeMailJson(profilePath(configDir, profileName), validated);
+}
+function connectedAgentIdentity(profileName, profile) {
+	return {
+		profileName,
+		orgId: profile.org_id,
+		agentAddress: profile.agent_address,
+		ownerAddress: profile.owner_address,
+		apiBaseUrl: profile.api_base_url
+	};
+}
+//#endregion
 //#region src/oclif/chat-state.ts
 const CHAT_STATE_FILE = "chat-state.json";
 const CHAT_STATE_VERSION = 2;
@@ -655,11 +1081,11 @@ function nonNegativeInteger(value) {
 function parseLocalId(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0 && value <= Number.MAX_SAFE_INTEGER ? value : null;
 }
-function chatStatePath(configDir) {
-	return join(configDir, CHAT_STATE_FILE);
+function chatStatePath(configDir, profileName = process.env["PRIMITIVE_AGENT_PROFILE"]?.trim() || null) {
+	return join(profileName ? agentProfileDirectory(configDir, profileName) : configDir, CHAT_STATE_FILE);
 }
 function deleteChatState(configDir) {
-	rmSync(chatStatePath(configDir), { force: true });
+	rmSync(chatStatePath(configDir, null), { force: true });
 }
 function chatConversationState(params) {
 	return {
@@ -755,12 +1181,13 @@ function loadChatConversationByLocalId(configDir, localId) {
 	return loadChatState(configDir)?.conversations.find((conversation) => conversation.local_id === localId) ?? null;
 }
 function saveChatState(configDir, state) {
-	mkdirSync(configDir, {
+	const path = chatStatePath(configDir);
+	const directory = dirname(path);
+	mkdirSync(directory, {
 		mode: 448,
 		recursive: true
 	});
-	const path = chatStatePath(configDir);
-	const tempPath = join(configDir, `${CHAT_STATE_FILE}.${process.pid}.${randomUUID()}.tmp`);
+	const tempPath = join(directory, `${CHAT_STATE_FILE}.${process.pid}.${randomUUID()}.tmp`);
 	try {
 		writeFileSync(tempPath, `${JSON.stringify(state, null, 2)}\n`, { mode: 384 });
 		renameSync(tempPath, path);
@@ -863,7 +1290,7 @@ function credentialsPath(configDir) {
 function credentialsLockPath(configDir) {
 	return join(configDir, CREDENTIALS_LOCK_DIR);
 }
-function normalize(url, fallback) {
+function normalize$1(url, fallback) {
 	const trimmed = url?.trim();
 	if (!trimmed) return fallback;
 	return trimmed.replace(/\/+$/, "");
@@ -889,7 +1316,7 @@ function canonicalizeKnownApiBaseUrl(url) {
 	return url;
 }
 function normalizeApiBaseUrl(url) {
-	return canonicalizeKnownApiBaseUrl(normalize(url, DEFAULT_API_BASE_URL));
+	return canonicalizeKnownApiBaseUrl(normalize$1(url, DEFAULT_API_BASE_URL));
 }
 function cliAccessTokenExpiresAt(expiresInSeconds, now = Date.now) {
 	return new Date(now() + expiresInSeconds * 1e3).toISOString();
@@ -920,6 +1347,7 @@ function loadCliCredentials(configDir) {
 	}
 }
 function saveCliCredentials(configDir, credentials) {
+	requireDefaultLoginProfile();
 	mkdirSync(configDir, {
 		mode: 448,
 		recursive: true
@@ -937,10 +1365,12 @@ function saveCliCredentials(configDir, credentials) {
 	}
 }
 function deleteCliCredentials(configDir) {
+	requireDefaultLoginProfile();
 	rmSync(credentialsPath(configDir), { force: true });
 	deleteChatState(configDir);
 }
 function saveSignupCredentials(params) {
+	requireDefaultLoginProfile();
 	deleteChatState(params.configDir);
 	saveCliCredentials(params.configDir, {
 		access_token: params.signup.access_token,
@@ -1051,6 +1481,7 @@ function credentialsLockInProgressMessage(lockPath) {
 	return `Another Primitive CLI credential operation is already in progress. Wait for it to finish, then retry. If no Primitive auth command is still running, run \`primitive logout --force\` to clear local CLI auth state and remove ${lockPath}.`;
 }
 function acquireCliCredentialsLock(configDir, options = {}) {
+	requireDefaultLoginProfile();
 	mkdirSync(configDir, {
 		mode: 448,
 		recursive: true
@@ -1133,6 +1564,19 @@ function hasStoredCliLogin(configDir) {
 function resolveCliAuth(params) {
 	const apiKey = params.apiKey?.trim();
 	const apiBaseUrl = normalizeApiBaseUrl(params.apiBaseUrl);
+	const profileName = (params.env ?? process.env)["PRIMITIVE_AGENT_PROFILE"]?.trim() || void 0;
+	if (profileName !== void 0) {
+		const profile = loadConnectedAgentProfile(params.configDir, profileName);
+		if (!profile) throw new AgentConnectionSetupError("Selected agent profile is not configured. No fallback login will be used.");
+		if (apiKey && apiKey !== profile.api_key || params.apiBaseUrl !== void 0 && apiBaseUrl !== profile.api_base_url) throw new AgentConnectionSetupError("Explicit credentials or API origin conflict with the selected agent profile.");
+		return {
+			apiKey: profile.api_key,
+			apiBaseUrl: profile.api_base_url,
+			credentials: null,
+			connectedAgent: connectedAgentIdentity(profileName, profile),
+			source: "connected-profile"
+		};
+	}
 	if (apiKey) return {
 		apiKey,
 		apiBaseUrl,
@@ -1333,4 +1777,4 @@ function redactCliEnvironment(environment) {
 	};
 }
 //#endregion
-export { saveActiveChatState as A, resolveCliAuth as C, deleteChatState as D, chatStatePath as E, createClient as M, createConfig as N, loadActiveChatState as O, normalizeApiBaseUrl as S, saveSignupCredentials as T, deleteCliCredentials as _, normalizeCliEnvironmentName as a, hasStoredCliLogin as b, resolveConfigEnvironment as c, validateCliHeaderName as d, validateCliHeaderValue as f, credentialsPath as g, credentialsLockPath as h, loadCliConfig as i, PrimitiveApiClient as j, loadChatConversationByLocalId as k, saveCliConfig as l, cliAccessTokenExpiresAt as m, deleteCliConfig as n, redactCliEnvironment as o, acquireCliCredentialsLock as p, emptyCliConfig as r, removeCliEnvironment as s, DEFAULT_ENVIRONMENT as t, upsertCliEnvironment as u, deleteCliCredentialsLock as v, saveCliCredentials as w, loadCliCredentials as x, detectPrimitiveKeyEnvMisname as y };
+export { syncMailDirectory as $, saveActiveChatState as A, requireDefaultLoginProfile as B, resolveCliAuth as C, deleteChatState as D, chatStatePath as E, agentProfilesDirectory as F, mailId as G, SharedMailStateError as H, connectedAgentIdentity as I, mailString as J, mailLockBusy as K, connectedApiBaseUrl as L, AgentConnectionSetupError as M, agentProfileDirectory as N, loadActiveChatState as O, agentProfileName as P, removeMailFile as Q, loadConnectedAgentProfile as R, normalizeApiBaseUrl as S, saveSignupCredentials as T, invalidSharedMail as U, saveConnectedAgentProfile as V, mailAddress as W, privateMailDirectory as X, mailTime as Y, readMailJson as Z, deleteCliCredentials as _, normalizeCliEnvironmentName as a, listenProcessIdentity as at, hasStoredCliLogin as b, resolveConfigEnvironment as c, PrimitiveApiClient as ct, validateCliHeaderName as d, withMailLock as et, validateCliHeaderValue as f, credentialsPath as g, credentialsLockPath as h, loadCliConfig as i, listenIdentity as it, AGENT_PROFILE_ENV as j, loadChatConversationByLocalId as k, saveCliConfig as l, createClient as lt, cliAccessTokenExpiresAt as m, deleteCliConfig as n, ListenStateError as nt, redactCliEnvironment as o, normalizeListenOrigin as ot, acquireCliCredentialsLock as p, mailObject as q, emptyCliConfig as r, acquireListenLock as rt, removeCliEnvironment as s, resolveListenSubscription as st, DEFAULT_ENVIRONMENT as t, writeMailJson as tt, upsertCliEnvironment as u, createConfig as ut, deleteCliCredentialsLock as v, saveCliCredentials as w, loadCliCredentials as x, detectPrimitiveKeyEnvMisname as y, parseConnectedAgentProfile as z };