primcli 1.35.0 → 1.36.0

package/dist/oclif/index.js

@@ -3,7 +3,7 @@ import { S as resolveListenSubscription, _ as acquireListenLock, a as mailLockBu
 import { a as startBackgroundListen, n as backgroundListenToken, o as stopBackgroundListen, r as runBackgroundListen, s as verifyBackgroundListenTarget, t as backgroundListenStatus } from "../listen-background-D6UhIbkO.js";
 import { t as guardJsonOutputCommands } from "../json-output-KAIuP9rG.js";
 import { Args, Command, Errors, Flags, ux } from "@oclif/core";
-import { chmodSync, closeSync, constants, existsSync, fstatSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, opendirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, watch, writeFileSync } from "node:fs";
+import { chmodSync, closeSync, constants, copyFileSync, existsSync, fstatSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, opendirSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, symlinkSync, unlinkSync, watch, writeFileSync } from "node:fs";
 import { createHash, randomUUID, scryptSync } from "node:crypto";
 import path, { basename, dirname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
@@ -49915,8 +49915,8 @@ function preparePresenceAliveEmail(input, dependencies) {
 	});
 }
 const MAX_INTERACTION_BYTES = 65536;
-const UUID$5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-const WIRE_ID = new RegExp(`^${UUID$5.source.slice(1, -1)}@[^\\s@]+$`, "i");
+const UUID$6 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const WIRE_ID = new RegExp(`^${UUID$6.source.slice(1, -1)}@[^\\s@]+$`, "i");
 function scalarString(value) {
 	for (let i = 0; i < value.length; i++) {
 		const code = value.charCodeAt(i);
@@ -50027,7 +50027,7 @@ function envelope$1(value) {
 		"expires_at",
 		"payload"
 	].every((key) => Object.hasOwn(obj, key))) return invalid;
-	if (typeof obj.interaction_id !== "string" || !WIRE_ID.test(obj.interaction_id) || typeof obj.protocol !== "string" || !obj.protocol.trim() || typeof obj.protocol_version !== "number" || !Number.isSafeInteger(obj.protocol_version) || obj.protocol_version < 1 || typeof obj.step !== "string" || !obj.step.trim() || typeof obj.step_id !== "string" || !UUID$5.test(obj.step_id) || !(obj.prev_step_id === null || typeof obj.prev_step_id === "string" && UUID$5.test(obj.prev_step_id)) || !(obj.expires_at === null || typeof obj.expires_at === "string") || !Object.hasOwn(obj, "payload")) return invalid;
+	if (typeof obj.interaction_id !== "string" || !WIRE_ID.test(obj.interaction_id) || typeof obj.protocol !== "string" || !obj.protocol.trim() || typeof obj.protocol_version !== "number" || !Number.isSafeInteger(obj.protocol_version) || obj.protocol_version < 1 || typeof obj.step !== "string" || !obj.step.trim() || typeof obj.step_id !== "string" || !UUID$6.test(obj.step_id) || !(obj.prev_step_id === null || typeof obj.prev_step_id === "string" && UUID$6.test(obj.prev_step_id)) || !(obj.expires_at === null || typeof obj.expires_at === "string") || !Object.hasOwn(obj, "payload")) return invalid;
 	return {
 		status: "valid",
 		envelope: obj
@@ -51010,6 +51010,333 @@ async function connectAgent(params) {
 	}
 }
 //#endregion
+//#region src/oclif/contacts.ts
+var ContactsApiError = class extends Error {
+	directoryAvailable = false;
+	constructor(payload) {
+		super("Contact request failed.");
+		this.payload = payload;
+	}
+};
+function contactAddress(value) {
+	const address = value.trim().toLowerCase();
+	if (address.length > 254 || !/^[A-Za-z0-9.!#$%&'*+/=?^_`{|}~-]+@[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/.test(address)) throw new Error("Provide a bare contact email address.");
+	return address;
+}
+function contactAgentAddress(explicit, connected) {
+	if (!explicit && !connected) throw new Error("Pass --agent or select a connected agent profile.");
+	const address = contactAddress(explicit ?? connected ?? "");
+	if (connected && address !== contactAddress(connected)) throw new Error("This connected profile can manage only its own agent contacts.");
+	return address;
+}
+function version(value) {
+	if (!/^[a-f\d]{8}(?:-[a-f\d]{4}){3}-[a-f\d]{12}$/i.test(value)) throw new Error("The contact version must be the UUID returned by the API.");
+	return value;
+}
+async function response$1(pending) {
+	const result = await pending;
+	if (result.error !== void 0) throw new ContactsApiError(result.error);
+	if (result.data?.success !== true || result.data.data == null) throw new Error("The contacts API returned an incomplete response.");
+	return result.data;
+}
+function pageCursor(value) {
+	const cursor = value.meta?.cursor;
+	if (cursor === null) return null;
+	if (typeof cursor !== "string") throw new Error("The contacts API omitted pagination state; no write was attempted.");
+	return contactAddress(cursor);
+}
+async function membershipVersion(client, agent, address, signal) {
+	let cursor;
+	const seen = /* @__PURE__ */ new Set();
+	for (let page = 0; page < 1e3; page++) {
+		signal?.throwIfAborted();
+		const result = await response$1(listAgentContacts({
+			client,
+			path: { agent_address: agent },
+			query: {
+				limit: 100,
+				cursor
+			},
+			signal,
+			responseStyle: "fields"
+		}));
+		if (!Array.isArray(result.data)) throw new Error("The contacts API returned an invalid page.");
+		const next = pageCursor(result);
+		const found = result.data.find((row) => row.contact_address === address);
+		if (found) {
+			if (found.agent_address !== agent) throw new Error("The contacts API returned a different agent.");
+			return version(found.version);
+		}
+		if (next === null) throw new Error("Agent contact not found. Use agent contacts add to create it.");
+		if (seen.has(next)) throw new Error("Contact pagination repeated a cursor; no write was attempted.");
+		seen.add(next);
+		cursor = next;
+	}
+	throw new Error("Contact lookup exceeded its page limit; pass an explicit --if-version.");
+}
+/** Public generated operations only. Every mutation uses one explicit CAS condition. */
+async function runContactRequest(client, request) {
+	const { action, target, signal } = request;
+	signal?.throwIfAborted();
+	const address = action === "list" ? void 0 : contactAddress(request.address ?? "");
+	const agent = target === "agent" ? contactAgentAddress(request.agent) : void 0;
+	const limit = request.limit ?? 50;
+	if (!Number.isInteger(limit) || limit < 1 || limit > 100) throw new Error("--limit must be between 1 and 100.");
+	const cursor = request.cursor === void 0 ? void 0 : contactAddress(request.cursor);
+	if (request.name !== void 0 && request.clearName) throw new Error("Use either --name or --clear-name.");
+	if (request.purpose !== void 0 && request.clearPurpose) throw new Error("Use either --purpose or --clear-purpose.");
+	if (request.name !== void 0 && Array.from(request.name).length > 200) throw new Error("Contact names may contain at most 200 characters.");
+	if (request.purpose !== void 0 && Array.from(request.purpose).length > 2e3) throw new Error("Contact purposes may contain at most 2000 characters.");
+	const expected = request.ifVersion === void 0 ? void 0 : version(request.ifVersion);
+	if (action === "add" && expected) throw new Error("Add never overwrites an existing contact. Use update with --if-version.");
+	if (action === "list") {
+		const result = target === "directory" ? await response$1(listContacts({
+			client,
+			signal,
+			query: {
+				cursor,
+				limit
+			},
+			responseStyle: "fields"
+		})) : await response$1(listAgentContacts({
+			client,
+			signal,
+			path: { agent_address: agent ?? "" },
+			query: {
+				cursor,
+				limit
+			},
+			responseStyle: "fields"
+		}));
+		if (!Array.isArray(result.data)) throw new Error("The contacts API returned an invalid page.");
+		pageCursor(result);
+		return result;
+	}
+	if (!address) throw new Error("Provide a contact email address.");
+	if (target === "directory") {
+		const name = request.clearName ? null : request.name;
+		if (action === "update" && name === void 0) throw new Error("Pass --name or --clear-name to update the contact.");
+		if (action === "get" || (action === "update" || action === "remove") && !expected) {
+			const result = await response$1(getContact({
+				client,
+				signal,
+				path: { address },
+				responseStyle: "fields"
+			}));
+			if (result.data.address !== address) throw new Error("The contacts API returned a different contact.");
+			if (action === "get") return result.data;
+			request = {
+				...request,
+				ifVersion: version(result.data.version)
+			};
+		}
+		signal?.throwIfAborted();
+		if (action === "remove") return (await response$1(deleteContact({
+			client,
+			signal,
+			path: { address },
+			query: { if_version: version(request.ifVersion ?? "") },
+			responseStyle: "fields"
+		}))).data;
+		const result = await response$1(putContact({
+			client,
+			signal,
+			path: { address },
+			body: {
+				...action === "add" ? { if_absent: true } : { if_version: version(request.ifVersion ?? "") },
+				...name === void 0 ? {} : { display_name: name }
+			},
+			responseStyle: "fields"
+		}));
+		if (result.data.address !== address) throw new Error("The contacts API returned a different contact.");
+		return result.data;
+	}
+	if (!agent) throw new Error("Provide an agent address.");
+	if (action === "get") throw new Error("Use agent contacts list to inspect memberships.");
+	const purpose = request.clearPurpose ? null : request.purpose;
+	if (action === "update" && purpose === void 0 && request.notify === void 0) throw new Error("Pass --purpose, --clear-purpose, --notify or --no-notify.");
+	const path = {
+		agent_address: agent,
+		contact_address: address
+	};
+	if (action === "add") {
+		if ((await response$1(putContact({
+			client,
+			signal,
+			path: { address },
+			body: { if_absent: true },
+			responseStyle: "fields"
+		}))).data.address !== address) throw new Error("The contacts API returned a different contact.");
+	}
+	const ifVersion = action === "add" ? void 0 : expected ?? await membershipVersion(client, agent, address, signal);
+	if (action === "remove") {
+		signal?.throwIfAborted();
+		return (await response$1(deleteAgentContact({
+			client,
+			signal,
+			path,
+			query: { if_version: version(ifVersion ?? "") },
+			responseStyle: "fields"
+		}))).data;
+	}
+	try {
+		signal?.throwIfAborted();
+		const result = await response$1(putAgentContact({
+			client,
+			signal,
+			path,
+			body: {
+				...action === "add" ? { if_absent: true } : { if_version: version(ifVersion ?? "") },
+				...purpose === void 0 ? {} : { purpose },
+				...request.notify === void 0 ? {} : { notify: request.notify }
+			},
+			responseStyle: "fields"
+		}));
+		if (result.data.agent_address !== agent || result.data.contact_address !== address) throw new Error("The contacts API returned a different membership.");
+		return result.data;
+	} catch (error) {
+		if (action === "add") {
+			const failure = error instanceof ContactsApiError ? error : new ContactsApiError({
+				code: "contact_membership_unsaved",
+				message: error instanceof Error ? error.message : "Agent contact request failed."
+			});
+			failure.directoryAvailable = true;
+			throw failure;
+		}
+		throw error;
+	}
+}
+//#endregion
+//#region src/oclif/address-notes.ts
+var AddressNotesApiError = class extends Error {
+	constructor(payload, status) {
+		super("Address note request failed.");
+		this.payload = payload;
+		this.status = status;
+	}
+};
+const security$2 = [{
+	scheme: "bearer",
+	type: "http"
+}];
+function addressNoteName(value) {
+	if (!/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/.test(value)) throw new Error("Note name must start with a letter or digit and contain at most 128 letters, digits, underscores, dots, or hyphens.");
+	return value;
+}
+function addressNoteVersion(value) {
+	if (!/^[0-9]{1,19}$/.test(value)) throw new Error("Note version must be the decimal version returned by the API.");
+	return value;
+}
+function addressNoteTarget(explicit, connected, write) {
+	if (!explicit && !connected) throw new Error("Pass --address or select a connected agent profile.");
+	const address = contactAddress(explicit ?? connected ?? "");
+	if (write && connected && address !== contactAddress(connected)) throw new Error("This connected profile can write only its own address notes.");
+	return address;
+}
+function note(value, address, name) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("The address notes API returned an invalid note.");
+	const row = value;
+	if (row.address !== address || typeof row.name !== "string" || name !== void 0 && row.name !== name || row.visibility !== "private" && row.visibility !== "public" || typeof row.version !== "string" || !/^[0-9]{1,19}$/.test(row.version) || typeof row.created_at !== "string" || typeof row.updated_at !== "string" || !("value" in row)) throw new Error("The address notes API returned an invalid note.");
+	return row;
+}
+function envelope(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("The address notes API returned an invalid response.");
+	const row = value;
+	if (row.success !== true || !("data" in row)) throw new Error("The address notes API returned an incomplete response.");
+	return row;
+}
+async function result(pending) {
+	const response = await pending;
+	if (response.error !== void 0) throw new AddressNotesApiError(response.error, response.response?.status);
+	return envelope(response.data).data;
+}
+async function getNote(client, address, name, signal) {
+	return note(await result(client.get({
+		security: security$2,
+		url: "/address-notes/{address}/{name}",
+		path: {
+			address,
+			name
+		},
+		responseStyle: "fields",
+		...signal ? { signal } : {}
+	})), address, name);
+}
+async function runAddressNotesRequest(client, request) {
+	const address = contactAddress(request.address);
+	if (request.action === "list") {
+		const limit = request.limit ?? 50;
+		if (!Number.isInteger(limit) || limit < 1 || limit > 100) throw new Error("--limit must be between 1 and 100.");
+		const prefix = request.prefix;
+		if (prefix !== void 0 && !/^[A-Za-z0-9_.-]{0,128}$/.test(prefix)) throw new Error("--prefix may contain at most 128 letters, digits, underscores, dots, or hyphens.");
+		const cursor = request.cursor === void 0 ? void 0 : addressNoteName(request.cursor);
+		const response = await client.get({
+			security: security$2,
+			url: "/address-notes",
+			query: {
+				address,
+				prefix,
+				cursor,
+				limit
+			},
+			responseStyle: "fields"
+		});
+		if (response.error !== void 0) throw new AddressNotesApiError(response.error, response.response?.status);
+		const body = envelope(response.data);
+		if (!Array.isArray(body.data) || !body.meta || typeof body.meta !== "object" || Array.isArray(body.meta)) throw new Error("The address notes API returned an invalid page.");
+		const next = body.meta.cursor;
+		if (next !== null && (typeof next !== "string" || addressNoteName(next) !== next)) throw new Error("The address notes API omitted valid pagination state.");
+		return {
+			...body,
+			data: body.data.map((row) => note(row, address))
+		};
+	}
+	const name = addressNoteName(request.name ?? "");
+	if (request.action === "get") return getNote(client, address, name, request.signal);
+	if (request.ifAbsent && request.ifVersion !== void 0) throw new Error("Use either --if-absent or --if-version.");
+	const ifVersion = request.ifVersion === void 0 ? void 0 : addressNoteVersion(request.ifVersion);
+	if (request.action === "set") {
+		if (request.value === void 0) throw new Error("Provide a note value.");
+		let condition;
+		if (request.ifAbsent) condition = { if_absent: true };
+		else if (ifVersion) condition = { if_version: ifVersion };
+		else try {
+			condition = { if_version: (await getNote(client, address, name)).version };
+		} catch (error) {
+			if (!(error instanceof AddressNotesApiError) || error.status !== 404) throw error;
+			condition = { if_absent: true };
+		}
+		return note(await result(client.put({
+			security: security$2,
+			url: "/address-notes/{address}/{name}",
+			path: {
+				address,
+				name
+			},
+			body: {
+				value: request.value,
+				...condition,
+				...request.visibility ? { visibility: request.visibility } : {}
+			},
+			headers: { "Content-Type": "application/json" },
+			responseStyle: "fields"
+		})), address, name);
+	}
+	const version = ifVersion ?? (await getNote(client, address, name)).version;
+	const data = await result(client.delete({
+		security: security$2,
+		url: "/address-notes/{address}/{name}",
+		path: {
+			address,
+			name
+		},
+		query: { if_version: version },
+		responseStyle: "fields"
+	}));
+	if (!data || typeof data !== "object" || Array.isArray(data) || typeof data.deleted !== "boolean") throw new Error("The address notes API returned an invalid deletion response.");
+	return data;
+}
+//#endregion
 //#region src/oclif/agent-setup-read.ts
 function retryDelay(response, attempt, now) {
 	const raw = response?.headers.get("retry-after")?.trim();
@@ -51255,203 +51582,6 @@ function evaluateContactPolicy(options) {
 		source: "default"
 	};
 }
-//#endregion
-//#region src/oclif/contacts.ts
-var ContactsApiError = class extends Error {
-	directoryAvailable = false;
-	constructor(payload) {
-		super("Contact request failed.");
-		this.payload = payload;
-	}
-};
-function contactAddress(value) {
-	const address = value.trim().toLowerCase();
-	if (address.length > 254 || !/^[A-Za-z0-9.!#$%&'*+/=?^_`{|}~-]+@[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/.test(address)) throw new Error("Provide a bare contact email address.");
-	return address;
-}
-function contactAgentAddress(explicit, connected) {
-	if (!explicit && !connected) throw new Error("Pass --agent or select a connected agent profile.");
-	const address = contactAddress(explicit ?? connected ?? "");
-	if (connected && address !== contactAddress(connected)) throw new Error("This connected profile can manage only its own agent contacts.");
-	return address;
-}
-function version(value) {
-	if (!/^[a-f\d]{8}(?:-[a-f\d]{4}){3}-[a-f\d]{12}$/i.test(value)) throw new Error("The contact version must be the UUID returned by the API.");
-	return value;
-}
-async function response$1(pending) {
-	const result = await pending;
-	if (result.error !== void 0) throw new ContactsApiError(result.error);
-	if (result.data?.success !== true || result.data.data == null) throw new Error("The contacts API returned an incomplete response.");
-	return result.data;
-}
-function pageCursor(value) {
-	const cursor = value.meta?.cursor;
-	if (cursor === null) return null;
-	if (typeof cursor !== "string") throw new Error("The contacts API omitted pagination state; no write was attempted.");
-	return contactAddress(cursor);
-}
-async function membershipVersion(client, agent, address, signal) {
-	let cursor;
-	const seen = /* @__PURE__ */ new Set();
-	for (let page = 0; page < 1e3; page++) {
-		signal?.throwIfAborted();
-		const result = await response$1(listAgentContacts({
-			client,
-			path: { agent_address: agent },
-			query: {
-				limit: 100,
-				cursor
-			},
-			signal,
-			responseStyle: "fields"
-		}));
-		if (!Array.isArray(result.data)) throw new Error("The contacts API returned an invalid page.");
-		const next = pageCursor(result);
-		const found = result.data.find((row) => row.contact_address === address);
-		if (found) {
-			if (found.agent_address !== agent) throw new Error("The contacts API returned a different agent.");
-			return version(found.version);
-		}
-		if (next === null) throw new Error("Agent contact not found. Use agent contacts add to create it.");
-		if (seen.has(next)) throw new Error("Contact pagination repeated a cursor; no write was attempted.");
-		seen.add(next);
-		cursor = next;
-	}
-	throw new Error("Contact lookup exceeded its page limit; pass an explicit --if-version.");
-}
-/** Public generated operations only. Every mutation uses one explicit CAS condition. */
-async function runContactRequest(client, request) {
-	const { action, target, signal } = request;
-	signal?.throwIfAborted();
-	const address = action === "list" ? void 0 : contactAddress(request.address ?? "");
-	const agent = target === "agent" ? contactAgentAddress(request.agent) : void 0;
-	const limit = request.limit ?? 50;
-	if (!Number.isInteger(limit) || limit < 1 || limit > 100) throw new Error("--limit must be between 1 and 100.");
-	const cursor = request.cursor === void 0 ? void 0 : contactAddress(request.cursor);
-	if (request.name !== void 0 && request.clearName) throw new Error("Use either --name or --clear-name.");
-	if (request.purpose !== void 0 && request.clearPurpose) throw new Error("Use either --purpose or --clear-purpose.");
-	if (request.name !== void 0 && Array.from(request.name).length > 200) throw new Error("Contact names may contain at most 200 characters.");
-	if (request.purpose !== void 0 && Array.from(request.purpose).length > 2e3) throw new Error("Contact purposes may contain at most 2000 characters.");
-	const expected = request.ifVersion === void 0 ? void 0 : version(request.ifVersion);
-	if (action === "add" && expected) throw new Error("Add never overwrites an existing contact. Use update with --if-version.");
-	if (action === "list") {
-		const result = target === "directory" ? await response$1(listContacts({
-			client,
-			signal,
-			query: {
-				cursor,
-				limit
-			},
-			responseStyle: "fields"
-		})) : await response$1(listAgentContacts({
-			client,
-			signal,
-			path: { agent_address: agent ?? "" },
-			query: {
-				cursor,
-				limit
-			},
-			responseStyle: "fields"
-		}));
-		if (!Array.isArray(result.data)) throw new Error("The contacts API returned an invalid page.");
-		pageCursor(result);
-		return result;
-	}
-	if (!address) throw new Error("Provide a contact email address.");
-	if (target === "directory") {
-		const name = request.clearName ? null : request.name;
-		if (action === "update" && name === void 0) throw new Error("Pass --name or --clear-name to update the contact.");
-		if (action === "get" || (action === "update" || action === "remove") && !expected) {
-			const result = await response$1(getContact({
-				client,
-				signal,
-				path: { address },
-				responseStyle: "fields"
-			}));
-			if (result.data.address !== address) throw new Error("The contacts API returned a different contact.");
-			if (action === "get") return result.data;
-			request = {
-				...request,
-				ifVersion: version(result.data.version)
-			};
-		}
-		signal?.throwIfAborted();
-		if (action === "remove") return (await response$1(deleteContact({
-			client,
-			signal,
-			path: { address },
-			query: { if_version: version(request.ifVersion ?? "") },
-			responseStyle: "fields"
-		}))).data;
-		const result = await response$1(putContact({
-			client,
-			signal,
-			path: { address },
-			body: {
-				...action === "add" ? { if_absent: true } : { if_version: version(request.ifVersion ?? "") },
-				...name === void 0 ? {} : { display_name: name }
-			},
-			responseStyle: "fields"
-		}));
-		if (result.data.address !== address) throw new Error("The contacts API returned a different contact.");
-		return result.data;
-	}
-	if (!agent) throw new Error("Provide an agent address.");
-	if (action === "get") throw new Error("Use agent contacts list to inspect memberships.");
-	const purpose = request.clearPurpose ? null : request.purpose;
-	if (action === "update" && purpose === void 0 && request.notify === void 0) throw new Error("Pass --purpose, --clear-purpose, --notify or --no-notify.");
-	const path = {
-		agent_address: agent,
-		contact_address: address
-	};
-	if (action === "add") {
-		if ((await response$1(putContact({
-			client,
-			signal,
-			path: { address },
-			body: { if_absent: true },
-			responseStyle: "fields"
-		}))).data.address !== address) throw new Error("The contacts API returned a different contact.");
-	}
-	const ifVersion = action === "add" ? void 0 : expected ?? await membershipVersion(client, agent, address, signal);
-	if (action === "remove") {
-		signal?.throwIfAborted();
-		return (await response$1(deleteAgentContact({
-			client,
-			signal,
-			path,
-			query: { if_version: version(ifVersion ?? "") },
-			responseStyle: "fields"
-		}))).data;
-	}
-	try {
-		signal?.throwIfAborted();
-		const result = await response$1(putAgentContact({
-			client,
-			signal,
-			path,
-			body: {
-				...action === "add" ? { if_absent: true } : { if_version: version(ifVersion ?? "") },
-				...purpose === void 0 ? {} : { purpose },
-				...request.notify === void 0 ? {} : { notify: request.notify }
-			},
-			responseStyle: "fields"
-		}));
-		if (result.data.agent_address !== agent || result.data.contact_address !== address) throw new Error("The contacts API returned a different membership.");
-		return result.data;
-	} catch (error) {
-		if (action === "add") {
-			const failure = error instanceof ContactsApiError ? error : new ContactsApiError({
-				code: "contact_membership_unsaved",
-				message: error instanceof Error ? error.message : "Agent contact request failed."
-			});
-			failure.directoryAvailable = true;
-			throw failure;
-		}
-		throw error;
-	}
-}
 const CONTACT_POLICY_RETRY_MIN_MS = 1e3;
 const CONTACT_POLICY_RETRY_MAX_MS = 3e4;
 const NETWORK_ADMISSION_PENDING_RETRY_MS = 5e3;
@@ -51932,7 +52062,7 @@ async function enableOwner(context) {
 	await refresh();
 	return (await policy.admit(context.identity.ownerAddress, (/* @__PURE__ */ new Date()).toISOString(), context.signal))?.kind === "allowed" ? "enabled" : "silenced";
 }
-function defaults() {
+function defaults$1() {
 	return {
 		now: Date.now,
 		sleep: async (ms) => {
@@ -52022,7 +52152,7 @@ async function setupAgent(params) {
 	const timeoutMs = params.timeoutMs ?? 3e4;
 	if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 0 || timeoutMs > 12e4) throw fail("Setup timeout must be between zero and two minutes.");
 	const dependencies = {
-		...defaults(),
+		...defaults$1(),
 		...params.dependencies
 	};
 	if ((params.receiverMode ?? "native") === "native") try {
@@ -52147,11 +52277,537 @@ async function setupAgent(params) {
 	}
 }
 //#endregion
+//#region src/oclif/connect-skill.ts
+const CONNECT_SKILL_NAME = "primitive-connect";
+const UUID$5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/**
+* The runtime whose tool environment names this exact session. A session ID
+* that matches neither runtime's variable has no detectable runtime.
+*/
+function detectAgentRuntime(session, env = process.env) {
+	const wanted = session.toLowerCase();
+	const claude = env.CLAUDE_CODE_SESSION_ID?.trim().toLowerCase();
+	const codex = (env.CODEX_THREAD_ID?.trim() || env.CODEX_SESSION_ID?.trim())?.toLowerCase();
+	if (!UUID$5.test(wanted)) return null;
+	if (claude === wanted && codex !== wanted) return "claude";
+	if (codex === wanted && claude !== wanted) return "codex";
+	return null;
+}
+function connectSkillTarget(options) {
+	const env = options.env ?? process.env;
+	const cwd = resolve(options.cwd ?? process.cwd());
+	return join(options.runtime === "claude" ? options.project ? join(cwd, ".claude") : resolve(env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude")) : options.project ? join(cwd, ".agents") : resolve(env.CODEX_HOME || join(homedir(), ".codex")), "skills", CONNECT_SKILL_NAME);
+}
+/** Mirrors scripts/skill-files.mjs so installed and bundled versions compare equal. */
+function included(relativePath) {
+	if (relativePath.split("/").some((part) => part.startsWith(".") || part === "node_modules")) return false;
+	return !/\.test\.[cm]?[jt]s$/.test(relativePath);
+}
+function listFiles(root) {
+	const files = [];
+	const walk = (directory, prefix) => {
+		for (const entry of readdirSync(directory, { withFileTypes: true })) {
+			const relative = prefix ? `${prefix}/${entry.name}` : entry.name;
+			if (entry.isDirectory()) walk(join(directory, entry.name), relative);
+			else if (entry.isFile() && included(relative)) files.push(relative);
+		}
+	};
+	walk(root, "");
+	return files.sort();
+}
+function hashFiles(root, files = listFiles(root)) {
+	const hashes = {};
+	for (const file of files) hashes[file] = createHash("sha256").update(readFileSync(join(root, file))).digest("hex");
+	return hashes;
+}
+function connectSkillVersion(hashes) {
+	const digest = createHash("sha256");
+	for (const file of Object.keys(hashes).sort()) digest.update(`${file}\0${hashes[file]}\n`);
+	return digest.digest("hex").slice(0, 16);
+}
+/** Read the copy shipped in this CLI package and refuse one that does not match its manifest. */
+function readBundledConnectSkill(packageRoot) {
+	const skillsDir = join(packageRoot, "dist", "skills");
+	const directory = join(skillsDir, CONNECT_SKILL_NAME);
+	const manifest = JSON.parse(readFileSync(join(skillsDir, `${CONNECT_SKILL_NAME}.json`), "utf8"));
+	const expected = manifest.files && typeof manifest.files === "object" && !Array.isArray(manifest.files) ? manifest.files : null;
+	const actual = hashFiles(directory);
+	if (manifest.name !== "primitive-connect" || !expected || typeof manifest.version !== "string" || connectSkillVersion(actual) !== manifest.version || connectSkillVersion(expected) !== manifest.version) throw new Error("The bundled skill does not match its manifest.");
+	return {
+		directory,
+		version: manifest.version,
+		commit: typeof manifest.source?.commit === "string" ? manifest.source.commit : null,
+		files: actual
+	};
+}
+/** Two skill copies declare the same helper dependencies. */
+function sameDependencies(a, b) {
+	const digest = (path) => {
+		try {
+			return createHash("sha256").update(readFileSync(path)).digest("hex");
+		} catch {
+			return null;
+		}
+	};
+	return ["package.json", "package-lock.json"].every((file) => digest(join(a, file)) === digest(join(b, file)));
+}
+/** Leftovers younger than this may belong to a refresh still in progress. */
+const STALE_LEFTOVER_MS = 6e4;
+/**
+* A refresh moves the old copy aside just before moving the new one in. If a
+* process stopped between those renames, put the old copy back so the skill
+* path is never left empty, and remove abandoned staging and retired copies.
+*/
+function recoverInterruptedInstall(root, target) {
+	let entries;
+	try {
+		entries = readdirSync(root);
+	} catch {
+		return false;
+	}
+	const stale = (name) => {
+		try {
+			return Date.now() - lstatSync(join(root, name)).mtimeMs > STALE_LEFTOVER_MS;
+		} catch {
+			return false;
+		}
+	};
+	const retired = entries.filter((name) => name.startsWith(`.${CONNECT_SKILL_NAME}.retired-`)).filter(stale).sort((a, b) => lstatSync(join(root, b)).mtimeMs - lstatSync(join(root, a)).mtimeMs);
+	let recovered = false;
+	let missing = false;
+	try {
+		lstatSync(target);
+	} catch {
+		missing = true;
+	}
+	if (missing && retired[0]) try {
+		renameSync(join(root, retired[0]), target);
+		recovered = true;
+		retired.shift();
+	} catch {}
+	let realDirectory = false;
+	try {
+		realDirectory = lstatSync(target).isDirectory();
+	} catch {
+		realDirectory = false;
+	}
+	for (const name of retired) {
+		const deps = join(root, name, "node_modules");
+		if (realDirectory && existsSync(deps) && !existsSync(join(target, "node_modules")) && sameDependencies(join(root, name), target)) try {
+			renameSync(deps, join(target, "node_modules"));
+		} catch {}
+	}
+	for (const name of [...retired, ...entries.filter((entry) => entry.startsWith(`.${CONNECT_SKILL_NAME}.staging-`)).filter(stale)]) rmSync(join(root, name), {
+		recursive: true,
+		force: true
+	});
+	return recovered;
+}
+function declaresConnectSkill(directory) {
+	try {
+		const text = readFileSync(join(directory, "SKILL.md"), "utf8");
+		const frontmatter = /^---\r?\n([\s\S]*?)\r?\n---/.exec(text)?.[1] ?? "";
+		return /^name:\s*["']?primitive-connect["']?\s*$/m.test(frontmatter);
+	} catch {
+		return false;
+	}
+}
+function otherCopies(target) {
+	const root = dirname(target);
+	try {
+		return readdirSync(root, { withFileTypes: true }).filter((entry) => !entry.name.startsWith(".") && entry.name !== "primitive-connect" && (entry.isDirectory() || entry.isSymbolicLink())).map((entry) => join(root, entry.name)).filter(declaresConnectSkill).sort();
+	} catch {
+		return [];
+	}
+}
+function installedVersion(target) {
+	try {
+		if (!statSync(target).isDirectory()) return null;
+		return connectSkillVersion(hashFiles(target));
+	} catch {
+		return null;
+	}
+}
+/**
+* Install or refresh the bundled skill for one runtime. The same version is
+* left untouched. A different copy is replaced in one rename, never beside a
+* second directory, and a symlink is replaced without touching its target.
+*/
+function installConnectSkill(options) {
+	const target = connectSkillTarget(options);
+	const base = {
+		runtime: options.runtime,
+		path: target,
+		version: options.bundle.version
+	};
+	const copies = () => {
+		const found = otherCopies(target);
+		return found.length ? { otherCopies: found } : {};
+	};
+	const root = dirname(target);
+	const recovered = recoverInterruptedInstall(root, target);
+	let existing = null;
+	try {
+		existing = lstatSync(target);
+	} catch {
+		existing = null;
+	}
+	const previous = existing ? installedVersion(target) : null;
+	const link = existing?.isSymbolicLink() ? readlinkSync(target) : null;
+	const notes = {
+		...recovered ? { recovered: true } : {},
+		...link !== null ? { replacedLink: true } : {}
+	};
+	if (link === null && previous === options.bundle.version) return {
+		...base,
+		state: "unchanged",
+		...notes,
+		...copies()
+	};
+	const staging = join(root, `.${CONNECT_SKILL_NAME}.staging-${randomUUID()}`);
+	const retired = join(root, `.${CONNECT_SKILL_NAME}.retired-${randomUUID()}`);
+	try {
+		mkdirSync(root, { recursive: true });
+		for (const file of Object.keys(options.bundle.files)) {
+			mkdirSync(dirname(join(staging, file)), { recursive: true });
+			copyFileSync(join(options.bundle.directory, file), join(staging, file));
+		}
+		if (connectSkillVersion(hashFiles(staging)) !== options.bundle.version) throw new Error("Copied skill files do not match the bundle.");
+		let dependencies;
+		if (link === null && existing?.isDirectory() && existsSync(join(target, "node_modules"))) dependencies = sameDependencies(target, staging) ? "kept" : "reinstall_needed";
+		if (link !== null) unlinkSync(target);
+		else if (existing) renameSync(target, retired);
+		try {
+			renameSync(staging, target);
+		} catch (error) {
+			if (link !== null) symlinkSync(link, target);
+			else if (existing && existsSync(retired)) renameSync(retired, target);
+			throw error;
+		}
+		if (dependencies === "kept") try {
+			renameSync(join(retired, "node_modules"), join(target, "node_modules"));
+		} catch {
+			dependencies = "reinstall_needed";
+		}
+		rmSync(retired, {
+			recursive: true,
+			force: true
+		});
+		return {
+			...base,
+			state: existing ? "updated" : "installed",
+			...previous && previous !== options.bundle.version ? { previousVersion: previous } : {},
+			...dependencies ? { dependencies } : {},
+			...notes,
+			...copies()
+		};
+	} catch (error) {
+		rmSync(staging, {
+			recursive: true,
+			force: true
+		});
+		return {
+			...base,
+			state: "failed",
+			reason: error?.code ?? "skill_install_failed",
+			...notes,
+			...copies()
+		};
+	}
+}
+//#endregion
+//#region src/oclif/agent-connect-flow.ts
+/** What this CLI version can do in one `agent connect --session` call. */
+const AGENT_CONNECT_CAPABILITIES = [
+	"invitation_claim_from_stdin",
+	"verification_reply",
+	"native_background_receiver",
+	"claude_external_hooks",
+	"bundled_skill_install",
+	"agent_info_seed",
+	"resume"
+];
+const AGENT_INFO_NOTE = "AGENT_INFO";
+const MAX_NAME_LENGTH = 80;
+const MAX_INFO_LENGTH = 1e3;
+const MAIL_CHECK_WAIT_MS = 2e4;
+const PENDING_AGENT_INFO_FILE = "agent-info-pending.json";
+function readPendingAgentInfo(path) {
+	try {
+		const saved = readMailJson(path);
+		if (saved && typeof saved === "object" && !Array.isArray(saved) && saved.version === 1) {
+			const value = saved.value;
+			if (typeof value === "string" && value.length > 0) return value;
+		}
+	} catch {}
+	return null;
+}
+function savedReceiverMode(configDir, profileName) {
+	try {
+		const saved = readMailJson(join(agentProfileDirectory(configDir, profileName), "setup.json"));
+		if (!saved || typeof saved !== "object" || Array.isArray(saved)) return null;
+		return saved.receiverMode === "external" ? "external" : "native";
+	} catch {
+		return null;
+	}
+}
+/** Best effort: a lost pending note only means --name/--info must be passed again. */
+function savePendingAgentInfo(path, value) {
+	try {
+		writeMailJson(path, {
+			version: 1,
+			value
+		});
+	} catch {}
+}
+function clearPendingAgentInfo(path) {
+	try {
+		removeMailFile(path);
+	} catch {}
+}
+function defaultAgentProfileName(session) {
+	return `session-${session.toLowerCase()}`;
+}
+/** A short private role note; never a transcript or secret. */
+function agentInfoValue(name, info) {
+	const clean = (value, max, label) => {
+		if (value === void 0) return void 0;
+		const trimmed = value.trim();
+		if (!trimmed || trimmed.length > max || [...trimmed].some((character) => {
+			const code = character.charCodeAt(0);
+			return code < 32 && character !== "\n" || code === 127;
+		})) throw new AgentConnectionSetupError(`--${label} must be 1-${max} characters without control characters.`);
+		return trimmed;
+	};
+	const cleanName = clean(name, MAX_NAME_LENGTH, "name");
+	const cleanInfo = clean(info, MAX_INFO_LENGTH, "info");
+	if (cleanName && cleanInfo) return `${cleanName}: ${cleanInfo}`;
+	return cleanName ?? cleanInfo ?? null;
+}
+function defaults(options) {
+	return {
+		setupAgent,
+		installClaudeWakeHook,
+		installSkill(runtime) {
+			return installConnectSkill({
+				bundle: readBundledConnectSkill(options.packageRoot),
+				runtime,
+				project: options.project,
+				cwd: options.cwd,
+				env: options.env
+			});
+		},
+		async seedAgentInfo(profileName, value) {
+			const profile = loadConnectedAgentProfile(options.configDir, profileName);
+			if (!profile) return "failed";
+			const client = new PrimitiveApiClient({
+				apiKey: profile.api_key,
+				apiBaseUrl: profile.api_base_url
+			});
+			try {
+				await runAddressNotesRequest(client.client, {
+					action: "set",
+					address: profile.agent_address,
+					name: AGENT_INFO_NOTE,
+					value,
+					visibility: "private",
+					ifAbsent: true
+				});
+				return "created";
+			} catch (error) {
+				if (error instanceof AddressNotesApiError && error.status === 409) return "already_present";
+				return "failed";
+			}
+		},
+		async awaitMailCheck(profileName, since) {
+			const deadline = Date.now() + (options.mailCheckWaitMs ?? MAIL_CHECK_WAIT_MS);
+			for (;;) {
+				const status = agentConnectionStatus(options.configDir, profileName);
+				const at = status.status === "configured" ? status.receiving.lastSuccessfulMailCheckAt : null;
+				if (at && Date.parse(at) >= since) return {
+					state: "confirmed",
+					lastSuccessfulMailCheckAt: at
+				};
+				if (Date.now() >= deadline) return {
+					state: "pending",
+					lastSuccessfulMailCheckAt: null
+				};
+				await setTimeout$1(250);
+			}
+		}
+	};
+}
+/**
+* One call: self check, install the matching skill, claim and verify, start
+* receiving, seed AGENT_INFO, and report everything as one result. Every step
+* after the claim is safe to repeat with --resume.
+*/
+async function runAgentConnect(options) {
+	const env = options.env ?? process.env;
+	const dependencies = {
+		...defaults(options),
+		...Object.fromEntries(Object.entries(options.dependencies ?? {}).filter(([, value]) => value !== void 0))
+	};
+	if (!SESSION_UUID$1.test(options.session)) throw new AgentConnectionSetupError("--session requires the exact loaded session UUID.");
+	const runtime = detectAgentRuntime(options.session, env);
+	const profileName = agentProfileName(options.profileName ?? defaultAgentProfileName(options.session));
+	const receiver = options.receiver ?? (options.resume ? savedReceiverMode(options.configDir, profileName) : null) ?? (runtime === "claude" ? "external" : "native");
+	if (receiver === "external" && env.CLAUDE_CODE_SESSION_ID?.trim().toLowerCase() !== options.session.toLowerCase()) throw new AgentConnectionSetupError("External receiving requires this exact Claude session ID. No invitation was claimed.");
+	const agentInfo = agentInfoValue(options.name, options.info);
+	const skipped = [];
+	let skill;
+	if (options.skill === false) skill = {
+		state: "skipped",
+		runtime,
+		path: null,
+		version: null,
+		reason: "not_requested"
+	};
+	else if (!runtime) skill = {
+		state: "skipped",
+		runtime: null,
+		path: null,
+		version: null,
+		reason: "runtime_unknown"
+	};
+	else try {
+		skill = dependencies.installSkill(runtime);
+	} catch {
+		skill = {
+			state: "failed",
+			runtime,
+			path: null,
+			version: null,
+			reason: "bundled_skill_unavailable"
+		};
+	}
+	if (skill.state === "skipped" || skill.state === "failed") skipped.push({
+		step: "skill",
+		reason: skill.reason ?? skill.state
+	});
+	const startedAt = Date.now();
+	const result = await dependencies.setupAgent({
+		configDir: options.configDir,
+		profileName,
+		session: options.session,
+		receiverMode: receiver,
+		resume: options.resume,
+		contactRequests: options.contactRequests,
+		...options.resume ? {} : { invitation: await options.readInvitation() }
+	});
+	const verified = result.verification.state === "reply_submitted";
+	let externalHook = null;
+	if (receiver === "external") if (verified) externalHook = dependencies.installClaudeWakeHook({
+		cliPath: options.cliPath,
+		configDir: options.configDir,
+		profileName: result.identity.profileName,
+		agentAddress: result.identity.agentAddress,
+		sessionId: options.session,
+		env
+	});
+	else skipped.push({
+		step: "receiver",
+		reason: "pending_verification"
+	});
+	let mailCheck = null;
+	if (receiver === "native") if (result.receiving.state === "healthy") {
+		mailCheck = await dependencies.awaitMailCheck(profileName, startedAt);
+		if (mailCheck.state === "pending") skipped.push({
+			step: "mail_check",
+			reason: "not_yet_observed"
+		});
+	} else skipped.push({
+		step: "receiver",
+		reason: verified ? "not_ready" : "pending_verification"
+	});
+	const pendingPath = join(agentProfileDirectory(options.configDir, profileName), PENDING_AGENT_INFO_FILE);
+	const noteValue = agentInfo ?? readPendingAgentInfo(pendingPath);
+	let agentInfoState = "not_requested";
+	if (noteValue === null) skipped.push({
+		step: "agent_info",
+		reason: "not_requested"
+	});
+	else if (!verified) {
+		agentInfoState = "pending_verification";
+		savePendingAgentInfo(pendingPath, noteValue);
+		skipped.push({
+			step: "agent_info",
+			reason: "pending_verification"
+		});
+	} else {
+		agentInfoState = await dependencies.seedAgentInfo(profileName, noteValue);
+		if (agentInfoState === "failed") {
+			savePendingAgentInfo(pendingPath, noteValue);
+			skipped.push({
+				step: "agent_info",
+				reason: "failed"
+			});
+		} else clearPendingAgentInfo(pendingPath);
+		if (agentInfoState === "already_present") skipped.push({
+			step: "agent_info",
+			reason: "already_present"
+		});
+	}
+	const receiving = receiver === "external" ? {
+		...result.receiving,
+		mode: "external",
+		hook: externalHook
+	} : {
+		...result.receiving,
+		mode: "native",
+		mailCheck: mailCheck?.state ?? "not_started",
+		lastSuccessfulMailCheckAt: mailCheck?.lastSuccessfulMailCheckAt ?? null
+	};
+	const receiverReady = receiver === "external" ? externalHook === "installed_unverified" : result.receiving.state === "healthy";
+	const resumeCommand = [
+		options.invocation ?? "primitive",
+		"agent connect",
+		`--profile ${result.identity.profileName}`,
+		`--session ${options.session}`,
+		`--receiver ${receiver}`,
+		"--resume",
+		...options.contactRequests ? ["--contact-requests"] : [],
+		...options.skill === false ? ["--no-skill"] : [],
+		...options.project ? ["--project"] : [],
+		"--json"
+	].join(" ");
+	return {
+		status: verified && receiverReady ? "connected" : "pending",
+		address: result.identity.agentAddress,
+		orgId: result.identity.orgId,
+		ownerAddress: result.identity.ownerAddress,
+		profile: result.identity.profileName,
+		sessionId: options.session,
+		runtime,
+		cli: {
+			version: options.cliVersion,
+			capabilities: [...AGENT_CONNECT_CAPABILITIES]
+		},
+		skill,
+		verification: result.verification,
+		receiving,
+		...result.ownerNotifications ? { ownerNotifications: result.ownerNotifications } : {},
+		agentInfo: agentInfoState,
+		skipped,
+		selectProfile: `PRIMITIVE_AGENT_PROFILE=${result.identity.profileName}`,
+		resumeCommand,
+		guidance: result.guidance,
+		identity: result.identity,
+		externalHook
+	};
+}
+//#endregion
 //#region src/oclif/commands/agent-connect.ts
+/** npx runs the CLI from its cache; resume through npx too so the command works without a global install. */
+function invocation(entry) {
+	return entry && /[\\/]_npx[\\/]/.test(entry) ? "npx -y primitive@latest" : "primitive";
+}
 var AgentConnectCommand = class AgentConnectCommand extends Command {
-	static description = "Claim an owner's private setup invitation from piped stdin and save a separate connected-agent profile. Add --session to answer one authenticated setup challenge and enable owner notifications. The default receiver preflights and starts a native session listener; --receiver external requires the exact Claude session and installs a fail-open Stop hook and resume SessionStart hook after the verification reply. A real idle mail event must still verify wake. --resume continues saved progress without reading stdin or replaying a claim or uncertain verification send. Verification reply submission is separate from delivery and receiver health. Both official production (https://api.primitive.dev/v1) and staging (https://api.primitive-staging-1.com/v1) invitations pin their API origin. Never pass an invitation as a command argument. Select the saved identity with PRIMITIVE_AGENT_PROFILE. Use --status --json to inspect saved identity and local receiver health offline.";
+	static description = "Connect this coding session to Primitive in one call. With --session, the command checks this CLI's capabilities, installs or refreshes the matching primitive-connect skill for the detected runtime (Claude Code or Codex) from files bundled in this CLI, claims the owner's private setup invitation from piped stdin, answers one authenticated setup challenge, enables owner notifications, starts receiving, seeds a private AGENT_INFO note from --name and --info when absent, and prints one JSON result. The receiver defaults to external hooks in Claude Code and the native background listener elsewhere. Native receiving starts or reuses a supervised background listener and waits briefly for its first successful mail check; external receiving installs the exact Claude session's fail-open Stop hook and resume SessionStart hook after the verification reply; a real idle mail event must still verify wake. The profile defaults to session-<session>. --resume continues saved progress without reading stdin or replaying a claim or uncertain verification send. Verification reply submission is separate from delivery and receiver health. Both official production (https://api.primitive.dev/v1) and staging (https://api.primitive-staging-1.com/v1) invitations pin their API origin. Never pass an invitation as a command argument. Select the saved identity with PRIMITIVE_AGENT_PROFILE. Use --profile with --status --json to inspect saved identity and local receiver health offline.";
 	static summary = "Connect and verify an agent address";
 	static examples = [
+		"<%= config.bin %> agent connect --session \"$CODEX_THREAD_ID\" --name Research --info \"Reviews pull requests\" --json < private-invitation.txt",
+		"<%= config.bin %> agent connect --session \"$CLAUDE_CODE_SESSION_ID\" --contact-requests --json < private-invitation.txt",
 		"<%= config.bin %> agent connect --profile work --session 11111111-1111-4111-8111-111111111111 --contact-requests --json < private-invitation.txt",
 		"<%= config.bin %> agent connect --profile work --session 11111111-1111-4111-8111-111111111111 --contact-requests --resume --json",
 		"<%= config.bin %> agent connect --profile work --session 11111111-1111-4111-8111-111111111111 --receiver external --contact-requests --json < private-invitation.txt",
@@ -52160,16 +52816,13 @@ var AgentConnectCommand = class AgentConnectCommand extends Command {
 		"PRIMITIVE_AGENT_PROFILE=work <%= config.bin %> whoami --json"
 	];
 	static flags = {
-		profile: Flags.string({
-			required: true,
-			description: "Local agent profile name; existing OAuth login is preserved"
-		}),
+		profile: Flags.string({ description: "Local agent profile name; defaults to session-<session> with --session. Existing OAuth login is preserved" }),
 		session: Flags.string({
 			description: "Exact current session UUID; verify email and configure receiving after claiming",
 			exclusive: ["status"]
 		}),
 		receiver: Flags.string({
-			description: "Native starts a supported session receiver; external installs the exact Claude session's fail-open Stop hook and resume SessionStart hook",
+			description: "Native starts a supported session receiver; external installs the exact Claude session's fail-open Stop hook and resume SessionStart hook. Defaults to external in Claude Code and native elsewhere",
 			options: ["native", "external"],
 			dependsOn: ["session"]
 		}),
@@ -52183,6 +52836,23 @@ var AgentConnectCommand = class AgentConnectCommand extends Command {
 			dependsOn: ["session"],
 			exclusive: ["status"]
 		}),
+		name: Flags.string({
+			description: "Short agent name for a private AGENT_INFO note, written only when the note is absent",
+			dependsOn: ["session"]
+		}),
+		info: Flags.string({
+			description: "Short role and capability description for a private AGENT_INFO note, written only when the note is absent",
+			dependsOn: ["session"]
+		}),
+		skill: Flags.boolean({
+			description: "Install or refresh the primitive-connect skill bundled with this CLI for the detected runtime",
+			default: true,
+			allowNo: true
+		}),
+		project: Flags.boolean({
+			description: "Install the skill into this project (.claude/skills or .agents/skills) instead of the user skills folder",
+			dependsOn: ["session"]
+		}),
 		status: Flags.boolean({ description: "Read saved identity and local receiver health offline without reading stdin" }),
 		json: Flags.boolean({ description: "Print setup status and identity metadata, never the credential" })
 	};
@@ -52190,44 +52860,43 @@ var AgentConnectCommand = class AgentConnectCommand extends Command {
 		const { flags } = await this.parse(AgentConnectCommand);
 		try {
 			if (flags.status) {
+				if (!flags.profile) throw new AgentConnectionSetupError("Pass --profile with --status.");
 				const result = agentConnectionStatus(this.config.configDir, flags.profile);
 				if (flags.json) this.log(JSON.stringify(result));
 				else this.log(result.status === "configured" ? `Agent profile ${flags.profile} is configured for ${result.identity.agentAddress}. Local receiving: ${result.receiving.state}${result.receiving.reason ? ` (${result.receiving.reason})` : ""}.` : `Agent profile ${flags.profile} is not configured.`);
 				return;
 			}
 			if (flags.session) {
-				if (flags.receiver === "external" && process.env.CLAUDE_CODE_SESSION_ID !== flags.session) throw new AgentConnectionSetupError("External receiving requires this exact Claude session ID. No invitation was claimed.");
-				const result = await setupAgent({
+				const output = await runAgentConnect({
 					configDir: this.config.configDir,
-					profileName: flags.profile,
+					packageRoot: this.config.root,
+					cliVersion: this.config.version,
+					cliPath: process.argv[1] ?? "",
+					invocation: invocation(process.argv[1]),
 					session: flags.session,
-					receiverMode: flags.receiver,
+					profileName: flags.profile,
+					receiver: flags.receiver,
 					resume: flags.resume,
 					contactRequests: flags["contact-requests"],
-					...flags.resume ? {} : { invitation: await readAgentInvitation(process.stdin, process.stdin.isTTY) }
+					name: flags.name,
+					info: flags.info,
+					skill: flags.skill,
+					project: flags.project,
+					readInvitation: () => readAgentInvitation(process.stdin, process.stdin.isTTY)
 				});
-				const externalHook = flags.receiver === "external" && result.verification.state === "reply_submitted" ? installClaudeWakeHook({
-					cliPath: process.argv[1] ?? "",
-					configDir: this.config.configDir,
-					profileName: result.identity.profileName,
-					agentAddress: result.identity.agentAddress,
-					sessionId: flags.session
-				}) : null;
-				const output = {
-					...result,
-					externalHook
-				};
+				const external = output.receiving.mode === "external";
 				if (flags.json) this.log(JSON.stringify(output));
 				else {
-					this.log(`Agent ${result.identity.agentAddress}: verification ${result.verification.state}; receiving ${result.receiving.state}.`);
-					this.log(`Select it with PRIMITIVE_AGENT_PROFILE=${result.identity.profileName}.`);
-					if (result.ownerNotifications === "silenced") this.log("Owner notifications remain silenced by the existing preference or policy.");
-					if (result.receiving.state === "external_setup_required") this.log(externalHook === "installed_unverified" ? "External receive hook installed. Idle wake still needs a live mail check." : "External receive hook is unavailable. Pairing may complete, but this session will not wake automatically.");
-					if (result.receiving.state === "not_ready") this.log(`Resume: ${result.resumeCommand}`);
+					this.log(`Agent ${output.address}: verification ${output.verification.state}; receiving ${output.receiving.state}; skill ${output.skill.state}.`);
+					this.log(`Select it with ${output.selectProfile}.`);
+					if (output.ownerNotifications === "silenced") this.log("Owner notifications remain silenced by the existing preference or policy.");
+					if (external && output.verification.state === "reply_submitted") this.log(output.externalHook === "installed_unverified" ? "External receive hook installed. Idle wake still needs a live mail check." : "External receive hook is unavailable. Pairing may complete, but this session will not wake automatically.");
+					if (output.status !== "connected") this.log(`Resume: ${output.resumeCommand}`);
 				}
-				if (externalHook === "unavailable" || flags.receiver !== "external" && result.receiving.state !== "healthy" || result.verification.state !== "reply_submitted") process.exitCode = 2;
+				if (external && output.externalHook !== "installed_unverified" || !external && output.receiving.state !== "healthy" || output.verification.state !== "reply_submitted") process.exitCode = 2;
 				return;
 			}
+			if (!flags.profile) throw new AgentConnectionSetupError("Pass --session to connect this session, or --profile for a claim-only or status check.");
 			const result = await connectAgent({
 				configDir: this.config.configDir,
 				profileName: flags.profile,
@@ -52239,7 +52908,7 @@ var AgentConnectCommand = class AgentConnectCommand extends Command {
 				this.log(`Select it with PRIMITIVE_AGENT_PROFILE=${result.identity.profileName}.`);
 			}
 		} catch (error) {
-			throw new Errors.CLIError(error instanceof AgentConnectionSetupError ? error.message : flags.session ? `Setup paused. Preserve the private profile and run primitive agent connect --profile ${flags.profile} --session ${flags.session}${flags.receiver === "external" ? " --receiver external" : ""} --resume${flags["contact-requests"] ? " --contact-requests" : ""} --json. Do not manually resend verification or reclaim the invitation.` : "Agent setup did not complete. Preserve the private profile and request a fresh owner invitation if a claim may have been submitted.", { exit: 1 });
+			throw new Errors.CLIError(error instanceof AgentConnectionSetupError ? error.message : flags.session ? `Setup paused. Preserve the private profile and run ${invocation(process.argv[1])} agent connect --profile ${flags.profile ?? defaultAgentProfileName(flags.session)} --session ${flags.session}${flags.receiver ? ` --receiver ${flags.receiver}` : ""} --resume${flags["contact-requests"] ? " --contact-requests" : ""} --json. Do not manually resend verification or reclaim the invitation.` : "Agent setup did not complete. Preserve the private profile and request a fresh owner invitation if a claim may have been submitted.", { exit: 1 });
 		}
 	}
 };
@@ -53093,136 +53762,6 @@ var AgentEnrollCommand = class AgentEnrollCommand extends Command {
 	}
 };
 //#endregion
-//#region src/oclif/address-notes.ts
-var AddressNotesApiError = class extends Error {
-	constructor(payload, status) {
-		super("Address note request failed.");
-		this.payload = payload;
-		this.status = status;
-	}
-};
-const security$2 = [{
-	scheme: "bearer",
-	type: "http"
-}];
-function addressNoteName(value) {
-	if (!/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/.test(value)) throw new Error("Note name must start with a letter or digit and contain at most 128 letters, digits, underscores, dots, or hyphens.");
-	return value;
-}
-function addressNoteVersion(value) {
-	if (!/^[0-9]{1,19}$/.test(value)) throw new Error("Note version must be the decimal version returned by the API.");
-	return value;
-}
-function addressNoteTarget(explicit, connected, write) {
-	if (!explicit && !connected) throw new Error("Pass --address or select a connected agent profile.");
-	const address = contactAddress(explicit ?? connected ?? "");
-	if (write && connected && address !== contactAddress(connected)) throw new Error("This connected profile can write only its own address notes.");
-	return address;
-}
-function note(value, address, name) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("The address notes API returned an invalid note.");
-	const row = value;
-	if (row.address !== address || typeof row.name !== "string" || name !== void 0 && row.name !== name || row.visibility !== "private" && row.visibility !== "public" || typeof row.version !== "string" || !/^[0-9]{1,19}$/.test(row.version) || typeof row.created_at !== "string" || typeof row.updated_at !== "string" || !("value" in row)) throw new Error("The address notes API returned an invalid note.");
-	return row;
-}
-function envelope(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("The address notes API returned an invalid response.");
-	const row = value;
-	if (row.success !== true || !("data" in row)) throw new Error("The address notes API returned an incomplete response.");
-	return row;
-}
-async function result(pending) {
-	const response = await pending;
-	if (response.error !== void 0) throw new AddressNotesApiError(response.error, response.response?.status);
-	return envelope(response.data).data;
-}
-async function getNote(client, address, name, signal) {
-	return note(await result(client.get({
-		security: security$2,
-		url: "/address-notes/{address}/{name}",
-		path: {
-			address,
-			name
-		},
-		responseStyle: "fields",
-		...signal ? { signal } : {}
-	})), address, name);
-}
-async function runAddressNotesRequest(client, request) {
-	const address = contactAddress(request.address);
-	if (request.action === "list") {
-		const limit = request.limit ?? 50;
-		if (!Number.isInteger(limit) || limit < 1 || limit > 100) throw new Error("--limit must be between 1 and 100.");
-		const prefix = request.prefix;
-		if (prefix !== void 0 && !/^[A-Za-z0-9_.-]{0,128}$/.test(prefix)) throw new Error("--prefix may contain at most 128 letters, digits, underscores, dots, or hyphens.");
-		const cursor = request.cursor === void 0 ? void 0 : addressNoteName(request.cursor);
-		const response = await client.get({
-			security: security$2,
-			url: "/address-notes",
-			query: {
-				address,
-				prefix,
-				cursor,
-				limit
-			},
-			responseStyle: "fields"
-		});
-		if (response.error !== void 0) throw new AddressNotesApiError(response.error, response.response?.status);
-		const body = envelope(response.data);
-		if (!Array.isArray(body.data) || !body.meta || typeof body.meta !== "object" || Array.isArray(body.meta)) throw new Error("The address notes API returned an invalid page.");
-		const next = body.meta.cursor;
-		if (next !== null && (typeof next !== "string" || addressNoteName(next) !== next)) throw new Error("The address notes API omitted valid pagination state.");
-		return {
-			...body,
-			data: body.data.map((row) => note(row, address))
-		};
-	}
-	const name = addressNoteName(request.name ?? "");
-	if (request.action === "get") return getNote(client, address, name, request.signal);
-	if (request.ifAbsent && request.ifVersion !== void 0) throw new Error("Use either --if-absent or --if-version.");
-	const ifVersion = request.ifVersion === void 0 ? void 0 : addressNoteVersion(request.ifVersion);
-	if (request.action === "set") {
-		if (request.value === void 0) throw new Error("Provide a note value.");
-		let condition;
-		if (request.ifAbsent) condition = { if_absent: true };
-		else if (ifVersion) condition = { if_version: ifVersion };
-		else try {
-			condition = { if_version: (await getNote(client, address, name)).version };
-		} catch (error) {
-			if (!(error instanceof AddressNotesApiError) || error.status !== 404) throw error;
-			condition = { if_absent: true };
-		}
-		return note(await result(client.put({
-			security: security$2,
-			url: "/address-notes/{address}/{name}",
-			path: {
-				address,
-				name
-			},
-			body: {
-				value: request.value,
-				...condition,
-				...request.visibility ? { visibility: request.visibility } : {}
-			},
-			headers: { "Content-Type": "application/json" },
-			responseStyle: "fields"
-		})), address, name);
-	}
-	const version = ifVersion ?? (await getNote(client, address, name)).version;
-	const data = await result(client.delete({
-		security: security$2,
-		url: "/address-notes/{address}/{name}",
-		path: {
-			address,
-			name
-		},
-		query: { if_version: version },
-		responseStyle: "fields"
-	}));
-	if (!data || typeof data !== "object" || Array.isArray(data) || typeof data.deleted !== "boolean") throw new Error("The address notes API returned an invalid deletion response.");
-	return data;
-}
-//#endregion
 //#region src/oclif/commands/agent-notes.ts
 const commonFlags$2 = {
 	address: Flags.string({ description: "Address to target; writes by a connected profile can target only its own address" }),
@@ -61760,7 +62299,7 @@ const PRIMITIVE_TEAM_AUTHOR = {
 	url: "https://primitive.dev"
 };
 const SDK_VERSION_RANGE = "^1.34.0";
-const CLI_VERSION_RANGE = "^1.35.0";
+const CLI_VERSION_RANGE = "^1.36.0";
 const ESBUILD_VERSION_RANGE = "^0.27.0";
 function renderHandler() {
 	return `// env.PRIMITIVE_API_KEY, env.PRIMITIVE_WEBHOOK_SECRET, and