primcli 1.35.0 → 1.37.0

package/README.md

@@ -440,6 +440,44 @@ Idempotency-Key; pass `--idempotency-key <key>` to retry the same redemption
 safely. On any failure the command prints the key it used to stderr, so you can
 run the same command again with `--idempotency-key <key>`.
 
+## Repeating sends
+
+Add `--repeat-every <minutes>` to `send` or `reply` to send the message now and
+then again on that cadence in the same thread. The recipient must be an address
+in your own organization, and a repeating send needs exactly one `--to` and no
+cc, bcc, attachments or `--fyi`. Send it with a member login or an organization API key;
+connected-agent credentials can stop repeats they receive but cannot create or
+manage them.
+
+```bash
+primitive send --to agent@example.com --body-file prompt.txt --repeat-every 60
+primitive reply --id <email-id> --body "Any progress?" --repeat-every 30 --only-if-idle 15
+primitive send --to agent@example.com --body "Status?" --repeat-every 60 --max-sends 8 --until 2026-10-09T17:00:00Z --no-recipient-stop
+```
+
+`--only-if-idle 15` skips a repeat while the recipient has sent mail in the last
+15 minutes. By default the recipient may stop the repeat; `--no-recipient-stop`
+keeps stopping to you. The send result names the repeat id.
+
+```bash
+primitive repeats list --to agent@example.com
+primitive repeats get <repeat-id>
+primitive repeats pause <repeat-id>
+primitive repeats resume <repeat-id>
+primitive repeats cancel <repeat-id>
+```
+
+The recipient stops a repeat when it is no longer needed by passing the repeat
+id from the message footer, or the id of any received message of it:
+
+```bash
+primitive repeat stop --id <email-id> --reason "The report is finished"
+```
+
+The sender sees the stop in the thread. `primitive emails get --id <email-id>
+--brief` marks a repeating message with its cadence and, when the recipient may
+stop it, the exact stop command.
+
 ## Recipient routing
 
 Bind a recipient address to a destination so inbound mail resolves to a single
@@ -594,9 +632,21 @@ from historical receipts; a stale heartbeat is not healthy. `--stop` requests a
 stop from only that instance and preserves mail, subscriptions and receipts.
 Foreground listeners started by this version also report health, but still share
 their calling process's lifetime. Receivers from older versions are untracked.
-Failed receivers include a fixed `failureCode`; private error contents are never
-stored. Preserve unknown notification receipts and inspect the exact session
-before retrying.
+Failed receivers include a fixed `failureCode` (for example `disk-full` or
+`crashed`) and a `detail` sentence; private error contents are never stored.
+Preserve unknown notification receipts and inspect the exact session before
+retrying.
+
+A supervisor restarts the receiver after every unexpected exit, with backoff
+that settles at one attempt every five minutes rather than giving up. A full or
+failing disk does not stop it: missed heartbeats show as `stale` until writes
+succeed again. If the supervisor itself dies, its receiver starts a
+replacement. If both are gone, the next `primitive` command run from the same
+session (with `PRIMITIVE_AGENT_PROFILE` selecting the connected profile) starts
+the receiver again in the background, at most once a minute. A receiver held
+for an unknown notification outcome or a changed connection, or stopped with
+`--stop` or `agent disconnect`, is never restarted this way. Set
+`PRIMITIVE_RECEIVER_HEAL=0` to turn this off.
 
 Background receivers reconnect after a known transport interruption. A previously
 verified session may temporarily be unloaded while its terminal reconnects; the
@@ -787,17 +837,30 @@ rules, uses a conditional write, and reads the policy back before reporting
 pauses enrollment without overwriting the policy; rerun this exact session
 after reviewing it.
 
-With a supported native session, one command handles the private claim, email
-verification and receiving. Pipe the invitation from the Primitive app to stdin:
+One command connects a Claude Code or Codex session from an owner's invitation.
+It checks this CLI's capabilities, installs or refreshes the matching
+primitive-connect skill from files bundled in this package, claims the
+invitation from stdin, answers the email challenge, starts receiving and prints
+one JSON result:
 
 ```sh
-primitive agent connect --profile work --session <session-uuid> --contact-requests --json < private-invitation.txt
+npx -y primitive@latest agent connect --session "$CODEX_THREAD_ID" --name Research --info "Reviews pull requests" --contact-requests --json < private-invitation.txt
 ```
 
-Omit `--contact-requests` when owner policy disables request intake. Resume the
-same setup without the invitation using its returned `resumeCommand`; keep the
-same session, profile and intake choice. Select the saved profile for later
-commands with `PRIMITIVE_AGENT_PROFILE=work`.
+The receiver defaults to the exact Claude session's hooks in Claude Code and to
+the supervised native background listener elsewhere; native receiving waits
+briefly for the listener's first mail check. The profile defaults to
+`session-<session>`. The skill goes to `~/.claude/skills` or
+`$CODEX_HOME/skills` (`--project` uses `.claude/skills` or `.agents/skills` in
+the current directory; `--no-skill` skips it), and is left untouched when the
+same version is already installed. `--name` and `--info` seed a private
+`AGENT_INFO` note only when none exists. Omit `--contact-requests` when owner
+policy disables request intake. The result's `skipped` list names each step not
+done and why. Resume the same setup without the invitation using its returned
+`resumeCommand`; `--resume` reuses the saved receiver and contact-request
+choices when those options are omitted, and refuses only an option that
+conflicts with them, naming it. Select the saved profile for later commands with the result's
+`selectProfile`.
 
 Verification submission and delivery are separate from receiver health. A queued
 verification reply is accepted for delivery. Do not claim again or resend because

package/bin/run.js

@@ -27,6 +27,43 @@ if (
 // process.env inside this process is too late for built-in fetch.
 restartWithProxyEnvIfNeeded();
 
+// A detached automatic signal worker: no command, no output.
+if (process.env.PRIMITIVE_AUTO_SIGNAL_WORKER === "1") {
+  const { runAutoSignalWorker } = await import(
+    "../dist/oclif/auto-signal-worker.js"
+  );
+  await runAutoSignalWorker();
+  process.exit(0);
+}
+
+// Bring back a connected session's native receiver if it died without being
+// stopped. Detached and best effort: it never delays or changes this command.
+const { healSelectedReceiverQuietly } = await import(
+  "../dist/oclif/receiver-heal.js"
+);
+healSelectedReceiverQuietly();
+
+// Keep an automatic working signal alive in runtimes that end background
+// processes between tool calls. Silent, and skipped when nothing is active.
+{
+  const { existsSync } = await import("node:fs");
+  const { homedir } = await import("node:os");
+  const { join } = await import("node:path");
+  const configDir =
+    process.env.PRIMITIVE_CONFIG_DIR ||
+    join(process.env.XDG_CONFIG_HOME || join(homedir(), ".config"), "primitive");
+  if (existsSync(join(configDir, "auto-signals"))) {
+    try {
+      const { resumeAutoWorking } = await import(
+        "../dist/oclif/auto-signals.js"
+      );
+      resumeAutoWorking(configDir);
+    } catch {
+      // Automatic signals never affect the command being run.
+    }
+  }
+}
+
 const { writeRootAuthContextIfNeeded } = await import(
   "../dist/oclif/root-signup-hint.js"
 );