primcli 1.42.0 → 1.43.0

package/dist/{interaction-actions-D5o_frTT.js → api-command-CpW39SQw.js}

@@ -1,8 +1,10 @@
-import { b as __exportAll } from "./repeats-CoK0tpCK-Bx7nmyRi.js";
-import { C as resolveCliAuth, G as createConfig, S as normalizeApiBaseUrl, T as saveSignupCredentials, U as PrimitiveApiClient, V as requireDefaultLoginProfile, W as createClient, _ as deleteCliCredentials, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, i as loadCliConfig, m as cliAccessTokenExpiresAt, p as acquireCliCredentialsLock, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname } from "./cli-config-BoZ1lMUQ.js";
+import { b as __exportAll } from "./repeats-D2xtLium-Dv34tqei.js";
+import { C as resolveCliAuth, F as agentProfilesDirectory, G as createClient, H as requireDefaultLoginProfile, K as createConfig, N as agentProfileDirectory, R as loadConnectedAgentProfile, S as normalizeApiBaseUrl, T as saveSignupCredentials, W as PrimitiveApiClient, _ as deleteCliCredentials, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, i as loadCliConfig, m as cliAccessTokenExpiresAt, p as acquireCliCredentialsLock, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname } from "./cli-config-DGrZCUfw.js";
+import { h as writeMailJson, m as withMailLock, p as syncMailDirectory, u as privateMailPermissions } from "./shared-mail-files-SPPcis9g.js";
 import { Command, Errors, Flags } from "@oclif/core";
-import { readFileSync, writeFileSync } from "node:fs";
+import { lstatSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHash } from "node:crypto";
+import { join } from "node:path";
 //#region ../packages/api-core/src/api/client.gen.ts
 const client = createClient(createConfig({ baseUrl: "https://api.primitive.dev/v1" }));
 //#endregion
@@ -3747,1361 +3749,1810 @@ function formatAlreadySentNotice(sent) {
 	return `Already sent: this exact message went out earlier${details.length > 0 ? ` (${details.join(", ")})` : ""}. Nothing new was sent.`;
 }
 //#endregion
-//#region src/oclif/reply-state.ts
-const AWAITING_VALUES = ["you", "them"];
-const AWAITING_FLAG_DESCRIPTION = "Only emails whose reply state is this value: `you` = waiting on your reply (the thread's latest message is inbound), `them` = you replied last. Queued and scheduled replies count as replied. Delivered mail only: rejected mail is never returned. Fails if the server does not report reply state yet.";
-const REPLY_STATE_UNSUPPORTED_CODE = "reply_state_unsupported";
-/** True when a search DSL query uses the `awaiting:` term. */
-function queryUsesAwaiting(q) {
-	return typeof q === "string" && /(^|[\s(])-?awaiting:/i.test(q);
+//#region src/oclif/mail-session.ts
+/** Runtime-provided identity only. Never guess a session from history or cwd. */
+function currentMailSessionKey(env = process.env) {
+	const codex = env.CODEX_THREAD_ID ?? env.CODEX_SESSION_ID;
+	const claude = env.CLAUDE_CODE_SESSION_ID;
+	if (codex && claude) return null;
+	const value = codex ?? claude;
+	return value && /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(value) ? `${codex ? "codex" : "claude"}:${value.toLowerCase()}` : null;
 }
-var ReplyStateUnsupportedError = class extends Error {
-	code = REPLY_STATE_UNSUPPORTED_CODE;
-	constructor(detail) {
-		super(`The server does not support reply state yet: ${detail} Nothing was treated as awaiting your reply. Upgrade to a server that returns \`awaiting\` and \`reply_count\`, or run without reply-state options.`);
-		this.name = "ReplyStateUnsupportedError";
-	}
-};
-/**
-* The server's reply-state support could not be established (a probe
-* failed). Reported like ReplyStateUnsupportedError so callers never
-* read an unverified empty answer as "nothing matched".
-*/
-var ReplyStateUnverifiedError = class extends ReplyStateUnsupportedError {
-	constructor(detail) {
-		super(detail);
-		this.message = `Could not verify that the server supports reply state: ${detail} Nothing was treated as matching. Retry the command.`;
-		this.name = "ReplyStateUnverifiedError";
-		this.code = "reply_state_unverified";
-	}
+//#endregion
+//#region src/oclif/send-outcome.ts
+const SEND_OUTCOME_EXIT_CODES = {
+	replied: 0,
+	sent: 0,
+	already_sent: 0,
+	not_sent: 1,
+	sent_awaiting_reply: 3,
+	uncertain: 4
 };
-function hasReplyState(row) {
-	if (row === null || typeof row !== "object") return false;
-	const candidate = row;
-	return (candidate.awaiting === "you" || candidate.awaiting === "them") && typeof candidate.reply_count === "number" && (candidate.last_replied_at === null || typeof candidate.last_replied_at === "string");
+const DEFINITIVE_SEND_REJECTION_STATUSES = [
+	400,
+	401,
+	402,
+	403,
+	404,
+	413,
+	422,
+	429
+];
+const SEND_OUTCOME_HELP = `Outcomes and exit codes, shared by chat, chat reply, send and reply (JSON output carries the name as "outcome"):
+  - exit 0 replied: chat only. The message was sent and a reply arrived.
+  - exit 0 sent: accepted for delivery. A queued status counts as sent.
+  - exit 0 already_sent: an identical earlier send exists (or was deleted: HTTP 410 sent_email_deleted). Nothing new went out. Do not resend.
+  - exit 1 not_sent: the API rejected the request (HTTP 400, 401, 402, 403, 404, 413, 422 or 429), the command failed before sending, or the send record has status agent_failed, gate_denied or canceled. Nothing went out.
+  - exit 2: invalid flags or arguments. Nothing went out.
+  - exit 3 sent_awaiting_reply: chat only. Sent, but no reply before the timeout. Wait; do not resend.
+  - exit 4 uncertain: transport error, conflict, server error, or a send record with status unknown. It may or may not have gone out. Reconcile with primitive sent get --idempotency-key <key> (the key is in the --json envelope) before retrying.`;
+function sendOutcomeExitCode(outcome) {
+	return SEND_OUTCOME_EXIT_CODES[outcome];
 }
-/**
-* Throw unless every row carries reply state. An empty page proves
-* nothing either way; callers that asked for reply state follow an
-* empty search page with ensureSearchReportsReplyState(). `surface` names the
-* response for the error, e.g. "GET /emails".
-*/
-function assertReplyState(rows, surface) {
-	const missing = rows.filter((row) => !hasReplyState(row)).length;
-	if (missing > 0) throw new ReplyStateUnsupportedError(`${surface} returned ${missing} of ${rows.length} email${rows.length === 1 ? "" : "s"} without the \`awaiting\` and \`reply_count\` fields.`);
+function sendFailureOutcome(httpStatus) {
+	return httpStatus !== void 0 && DEFINITIVE_SEND_REJECTION_STATUSES.includes(httpStatus) ? "not_sent" : "uncertain";
 }
-const AWAITING_REJECTED_UNSUPPORTED_CODE = "awaiting_rejected_unsupported";
+const SENT_EMAIL_DELETED_CODE = "sent_email_deleted";
+function errorPayloadCode(payload) {
+	if (payload === null || typeof payload !== "object") return void 0;
+	const code = payload.code;
+	return typeof code === "string" ? code : void 0;
+}
+function isDeletedEarlierSend(httpStatus, errorPayload) {
+	return httpStatus === 410 && errorPayloadCode(errorPayload) === SENT_EMAIL_DELETED_CODE;
+}
+/** Classify an API error from a send request. */
+function classifySendError(httpStatus, errorPayload) {
+	return isDeletedEarlierSend(httpStatus, errorPayload) ? "already_sent" : sendFailureOutcome(httpStatus);
+}
+function formatDeletedEarlierSendNotice() {
+	return "Already sent: an earlier send matching this request went out and its record was later deleted, so the API refused this one (HTTP 410 sent_email_deleted). Nothing new was sent. Do not resend or change the idempotency key to get around this.";
+}
+/** Read the HTTP status from a `responseStyle: "fields"` API result. */
+function apiResultHttpStatus(result) {
+	if (result === null || typeof result !== "object") return void 0;
+	if (!("response" in result)) return void 0;
+	const response = result.response;
+	return typeof response?.status === "number" ? response.status : void 0;
+}
+const SEND_STATUSES_THAT_DID_NOT_GO_OUT = new Set([
+	"agent_failed",
+	"canceled",
+	"gate_denied"
+]);
+const SEND_STATUSES_WITH_UNKNOWN_OUTCOME = new Set(["unknown"]);
 /**
-* The `awaiting` filter matches delivered mail only: a rejected email
-* (for example refused over the storage limit) was never delivered, so it
-* awaits no one. A server that returns one through the filter predates
-* that, and an agent would be handed mail nobody can answer.
+* Classify a send record the API returned with a 2xx. A 2xx alone does
+* not mean a message went out: the record's status can show the
+* attempt was rejected or that its result is indeterminate. The same
+* holds for an idempotent replay, which returns the earlier attempt's
+* record as it stands.
 */
-var AwaitingIncludesRejectedError = class extends ReplyStateUnsupportedError {
-	constructor(detail) {
-		super(detail);
-		this.message = `The server's \`awaiting\` filter does not exclude undelivered mail yet: ${detail} Upgrade to a server whose \`awaiting\` filter matches delivered mail only.`;
-		this.name = "AwaitingIncludesRejectedError";
-		this.code = AWAITING_REJECTED_UNSUPPORTED_CODE;
-	}
-};
+function successfulSendOutcome(sent) {
+	if (SEND_STATUSES_THAT_DID_NOT_GO_OUT.has(sent.status)) return "not_sent";
+	if (SEND_STATUSES_WITH_UNKNOWN_OUTCOME.has(sent.status)) return "uncertain";
+	return sent.idempotent_replay === true ? "already_sent" : "sent";
+}
 /**
-* For rows returned BY an `awaiting` filter (not the unfiltered probe):
-* every row carries reply state, and none has status `rejected`.
+* Summary for a 2xx send record whose status shows it did not go out
+* (`not_sent`) or that its result is indeterminate (`uncertain`).
 */
-function assertAwaitingFilterRows(rows, surface) {
-	assertReplyState(rows, surface);
-	const rejected = rows.filter((row) => row !== null && typeof row === "object" && row.status === "rejected").length;
-	if (rejected > 0) throw new AwaitingIncludesRejectedError(`${surface} returned ${rejected} email${rejected === 1 ? "" : "s"} with status \`rejected\`.`);
+function formatSendRecordFailureSummary(noun, outcome, sent) {
+	const record = sent.idempotent_replay === true ? `the earlier identical attempt (sent id ${sent.id}) has status ${sent.status}` : `the send record (id ${sent.id}) has status ${sent.status}`;
+	if (outcome === "not_sent") return `${noun} not sent: ${record}. Nothing went out; fix the problem before retrying.`;
+	return `${noun} send outcome uncertain: ${record}. It may or may not have gone out. Do not resend blindly; check sent history first.`;
 }
-function errorBody(payload) {
-	if (payload === null || typeof payload !== "object") return {};
-	const inner = payload.error;
-	return inner !== null && typeof inner === "object" ? inner : payload;
+function describeSentStatus(status) {
+	if (status === "queued") return "queued for delivery";
+	if (status === "delivered") return "delivered";
+	return `status ${status}`;
 }
-/**
-* True when an API error is an older server rejecting the `awaiting`
-* query parameter or the `awaiting:` search term as unknown. A current
-* server accepts both, and the CLI only ever sends valid values.
-*/
-function isAwaitingRejectedError(payload) {
-	const body = errorBody(payload);
-	if (body.code !== "validation_error") return false;
-	const message = typeof body.message === "string" ? body.message : JSON.stringify(payload);
-	return /awaiting/i.test(message) && /unrecogni[sz]ed|unknown/i.test(message);
+function formatSentSummary(noun, sent) {
+	return `${noun} sent (${describeSentStatus(sent.status)}, id ${sent.id}). Do not resend.`;
 }
-function awaitingRejectedError(surface) {
-	return new ReplyStateUnsupportedError(`${surface} rejected the \`awaiting\` filter as unknown.`);
+function formatSendFailureSummary(noun, outcome, httpStatus) {
+	if (outcome === "not_sent") return `${noun} not sent: ${httpStatus === void 0 ? "the request failed before sending" : `the API rejected the request (HTTP ${httpStatus})`}. Nothing went out; fix the problem before retrying.`;
+	return `${noun} send outcome uncertain (${httpStatus === void 0 ? "no response from the API" : `HTTP ${httpStatus}`}): it may or may not have gone out. Do not resend blindly; check sent history first.`;
 }
-/** Short column value for tables: "you", "them", or "-" when absent. */
-function formatAwaitingCell(row) {
-	if (!hasReplyState(row)) return "-";
-	return row.awaiting;
+function priorRepliesThatWentOut(replies, options = {}) {
+	return (replies ?? []).filter((reply) => !SEND_STATUSES_THAT_DID_NOT_GO_OUT.has(reply.status) && reply.id !== options.excludeSentId);
 }
-/** Reply count for tables, or "-" when the server did not report it. */
-function formatRepliesCell(row) {
-	if (!hasReplyState(row)) return "-";
-	return String(row.reply_count);
+function formatPriorRepliesWarning(prior) {
+	const latest = prior.at(-1);
+	if (!latest) return null;
+	return `This email already has ${prior.length === 1 ? "1 outgoing email" : `${prior.length} outgoing emails`}, most recently at ${latest.created_at} (sent id ${latest.id}). These may include activity updates and do not prove a completed answer. Sending this reply.`;
 }
-const REPLY_STATE_SURFACES = {
-	listEmails: "GET /emails",
-	searchEmails: "GET /emails/search"
-};
-/**
-* For the generated `emails list` / `emails search` commands: the
-* surface name when this call asked for reply state (an `awaiting`
-* parameter or an `awaiting:` search term), else null.
-*/
-function replyStateSurfaceForOperation(sdkName, query) {
-	const surface = REPLY_STATE_SURFACES[sdkName];
-	if (!surface || !query) return null;
-	const q = typeof query.q === "string" ? query.q : void 0;
-	return query.awaiting !== void 0 || queryUsesAwaiting(q) ? surface : null;
+function formatPriorRepliesCheckSkipped(emailId, reason) {
+	return `Could not check whether you already replied to email ${emailId} (${reason}). Prior-reply check skipped; sending the reply anyway.`;
 }
-const searchSupportProbes = /* @__PURE__ */ new WeakMap();
 /**
-* GET /emails/search ignores unknown parameters, so an empty page for
-* `awaiting=...` does not show that the server applied the filter.
-* Read one unfiltered row: if it lacks reply state the server does not
-* support it and this throws ReplyStateUnsupportedError. No rows at all
-* means the mailbox is empty, so the empty answer stands.
+* Look up the inbound email and report replies to it that already
+* went out. Never throws: the check is advisory and must not block a
+* send, so every failure comes back as `skipped` with a reason the
+* caller surfaces.
 */
-function ensureSearchReportsReplyState(apiClient) {
-	const key = apiClient;
-	let probe = searchSupportProbes.get(key);
-	if (!probe) {
-		probe = (async () => {
-			const result = await searchEmails({
-				client: apiClient.client,
-				query: {
-					limit: 1,
-					include_facets: "false",
-					snippet: "false"
-				},
-				responseStyle: "fields"
-			});
-			if (result.error) throw new ReplyStateUnverifiedError("the empty result could not be checked: reading one unfiltered row from GET /emails/search failed.");
-			const rows = result.data?.data;
-			assertReplyState(rows ?? [], "GET /emails/search");
-		})();
-		searchSupportProbes.set(key, probe);
-		probe.catch(() => {
-			if (searchSupportProbes.get(key) === probe) searchSupportProbes.delete(key);
+async function checkPriorReplies(params) {
+	try {
+		const result = await getEmail({
+			client: params.client,
+			path: { id: params.emailId },
+			responseStyle: "fields"
 		});
+		if (result.error) {
+			const status = apiResultHttpStatus(result);
+			return {
+				status: "skipped",
+				reason: status === void 0 ? "the email lookup failed" : `the email lookup returned HTTP ${status}`
+			};
+		}
+		const envelope = result.data;
+		const detail = envelope?.data ?? envelope;
+		if (!detail || !Array.isArray(detail.replies)) return {
+			status: "skipped",
+			reason: "the email lookup returned no reply history"
+		};
+		return {
+			status: "checked",
+			prior: priorRepliesThatWentOut(detail.replies),
+			detail
+		};
+	} catch (error) {
+		return {
+			status: "skipped",
+			reason: `the email lookup failed: ${error instanceof Error ? error.message : String(error)}`
+		};
 	}
-	return probe;
 }
-//#endregion
-//#region src/oclif/api-command.ts
-const API_ERROR_CODES = {
-	accessDenied: "access_denied",
-	authorizationPending: "authorization_pending",
-	expiredToken: "expired_token",
-	invalidDeviceCode: "invalid_device_code",
-	notFound: "not_found",
-	slowDown: "slow_down",
-	unauthorized: "unauthorized"
-};
-function flagName(parameterName) {
-	return parameterName.replace(/_/g, "-");
+function shellQuote(value) {
+	if (/^[A-Za-z0-9_./:@%+=,-]+$/.test(value)) return value;
+	return `'${value.replaceAll("'", "'\\''")}'`;
 }
-function flagDescription(parameter) {
-	return parameter.description ?? parameter.name;
+function commandFromArgv(argv) {
+	return argv.map(shellQuote).join(" ");
 }
-const numberFlag = Flags.custom({ async parse(input, _context, options) {
-	const trimmed = input.trim();
-	if (trimmed === "") throw new Errors.CLIError(`Expected a number but received: ${input}`);
-	const value = Number(trimmed);
-	if (!Number.isFinite(value)) throw new Errors.CLIError(`Expected a number but received: ${input}`);
-	if (options.min !== void 0 && value < options.min) throw new Errors.CLIError(`Expected a number greater than or equal to ${options.min} but received: ${input}`);
-	if (options.max !== void 0 && value > options.max) throw new Errors.CLIError(`Expected a number less than or equal to ${options.max} but received: ${input}`);
-	return value;
-} });
-function numericFlagOptions(parameter) {
+function buildFollowUpCommand(kind, description, argv, options = {}) {
+	const requiresMessage = options.requiresMessage ?? false;
 	return {
-		...typeof parameter.default === "number" ? { default: parameter.default } : {},
-		...typeof parameter.maximum === "number" ? { max: parameter.maximum } : {},
-		...typeof parameter.minimum === "number" ? { min: parameter.minimum } : {}
-	};
-}
-function extractBodyFields(schema) {
-	if (!schema || typeof schema !== "object") return [];
-	const properties = schema.properties;
-	if (!properties || typeof properties !== "object") return [];
-	const requiredArr = Array.isArray(schema.required) ? schema.required.filter((k) => typeof k === "string") : [];
-	const required = new Set(requiredArr);
-	const fields = [];
-	for (const [name, raw] of Object.entries(properties)) {
-		const propSchema = raw && typeof raw === "object" ? raw : {};
-		const t = propSchema.type;
-		let displayType = "any";
-		let kind = "complex";
-		if (typeof t === "string") {
-			displayType = t;
-			if (t === "string") kind = "string";
-			else if (t === "integer") kind = "integer";
-			else if (t === "number") kind = "number";
-			else if (t === "boolean") kind = "boolean";
-			else if (t === "array") {
-				const items = propSchema.items;
-				if (items && typeof items === "object") {
-					const itemType = items.type;
-					if (typeof itemType === "string") displayType = `array<${itemType}>`;
-				}
-				kind = "complex";
-			} else kind = "complex";
-		} else if (Array.isArray(t)) {
-			const nonNull = t.filter((s) => s !== "null");
-			if (nonNull.length === 1) {
-				const single = nonNull[0];
-				displayType = `${single}?`;
-				if (single === "string") kind = "string";
-				else if (single === "integer") kind = "integer";
-				else if (single === "number") kind = "number";
-				else if (single === "boolean") kind = "boolean";
-				else kind = "complex";
-			} else {
-				displayType = nonNull.join("|");
-				kind = "complex";
-			}
-		}
-		const description = typeof propSchema.description === "string" ? propSchema.description.split(/\n\s*\n/)[0].replace(/\s*\n\s*/g, " ").trim() : "";
-		const enumRaw = propSchema.enum;
-		const enumValues = kind === "string" && Array.isArray(enumRaw) ? enumRaw.filter((e) => typeof e === "string") : void 0;
-		fields.push({
-			name,
-			description,
-			required: required.has(name),
-			displayType,
-			kind,
-			...enumValues && enumValues.length > 0 ? { enumValues } : {},
-			...typeof propSchema.maximum === "number" ? { maximum: propSchema.maximum } : {},
-			...typeof propSchema.minimum === "number" ? { minimum: propSchema.minimum } : {}
-		});
-	}
-	return fields.sort((a, b) => {
-		if (a.required !== b.required) return a.required ? -1 : 1;
-		return a.name.localeCompare(b.name);
-	});
-}
-/**
-* Render a "Body fields" summary for the per-command help.
-*
-* Most scalar fields are exposed as individual `--flag` flags,
-* which oclif auto-renders in the FLAGS section above. To avoid
-* duplicating that, the summary here only documents fields that
-* MUST go through `--raw-body` (complex types: arrays, objects,
-* mixed-non-nullable). When an operation has only scalars, the
-* summary is omitted entirely and oclif's FLAGS section is the
-* full story.
-*
-* For operations with mixed scalar and complex fields, we also
-* include a short header pointing the agent at the flag form so
-* the natural reading is "use the flags above; --raw-body for
-* the leftovers below."
-*/
-function renderRequestSchemaSummary(schema) {
-	const fields = extractBodyFields(schema);
-	if (fields.length === 0) return null;
-	const complex = fields.filter((f) => f.kind === "complex");
-	if (complex.length === 0) return null;
-	const nameWidth = Math.min(24, Math.max(...complex.map((f) => f.name.length)));
-	const descMax = 78;
-	const lines = ["Body fields requiring --raw-body JSON (these are not exposed as flags):"];
-	for (const f of complex) {
-		const marker = f.required ? " *" : "  ";
-		const padName = f.name.padEnd(nameWidth);
-		const trimmedDesc = f.description.length > descMax ? `${f.description.slice(0, descMax - 3)}...` : f.description;
-		const desc = trimmedDesc ? `  ${trimmedDesc}` : "";
-		lines.push(`${marker} ${padName}  ${f.displayType}${desc}`);
-	}
-	lines.push("(* = required. Scalar body fields are exposed as individual --flag-name flags; see FLAGS above.)");
-	return lines.join("\n");
-}
-function flagForParameter(parameter) {
-	const common = {
-		description: flagDescription(parameter),
-		required: parameter.required
+		argv,
+		description,
+		command: commandFromArgv(argv),
+		kind,
+		placeholders: requiresMessage ? [{
+			description: "Replace with the message body before running.",
+			token: "<message>"
+		}] : [],
+		requires_message: requiresMessage
 	};
-	if (parameter.type === "boolean") return Flags.boolean(common);
-	if (parameter.type === "integer") return Flags.integer({
-		...common,
-		...numericFlagOptions(parameter)
-	});
-	if (parameter.type === "number") return numberFlag({
-		...common,
-		...numericFlagOptions(parameter)
-	});
-	if (parameter.enum && parameter.enum.length > 0) return Flags.string({
-		...common,
-		options: parameter.enum
-	});
-	return Flags.string(common);
-}
-function coerceParameterValue(parameter, value) {
-	if (value === void 0) return;
-	if (parameter.type === "number") {
-		if (typeof value === "number") return value;
-		const parsed = Number(value);
-		if (Number.isNaN(parsed)) throw new Errors.CLIError(`Invalid number for --${parameter.name}: ${value}`);
-		return parsed;
-	}
-	if (typeof value === "boolean" || typeof value === "number" || typeof value === "string") return value;
-	throw new Errors.CLIError(`Unsupported flag value for --${parameter.name}`);
-}
-function cliError(message) {
-	return new Errors.CLIError(message, { exit: 1 });
 }
-function parseJson(source, flagLabel) {
-	try {
-		return JSON.parse(source);
-	} catch (error) {
-		throw cliError(`${flagLabel} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
-	}
+const SENT_HISTORY_CLOCK_SKEW_MS = 300 * 1e3;
+function sentHistoryWindowStart(attemptStartedAtIso) {
+	const started = Date.parse(attemptStartedAtIso);
+	if (!Number.isFinite(started)) return attemptStartedAtIso;
+	return new Date(started - SENT_HISTORY_CLOCK_SKEW_MS).toISOString();
 }
-function readJsonBody(flags) {
-	const bodyFile = flags["body-file"];
-	const rawBody = flags["raw-body"];
-	if (bodyFile && rawBody) throw cliError("Use either --raw-body or --body-file, not both");
-	if (typeof bodyFile === "string") {
-		let contents;
-		try {
-			contents = readFileSync(bodyFile, "utf8");
-		} catch (error) {
-			throw cliError(`Could not read --body-file ${bodyFile}: ${error instanceof Error ? error.message : String(error)}`);
-		}
-		return parseJson(contents, `--body-file ${bodyFile}`);
-	}
-	if (typeof rawBody === "string") return parseJson(rawBody, "--raw-body");
+/** Header rule for Idempotency-Key: 1 to 255 printable ASCII characters. */
+const IDEMPOTENCY_KEY_PATTERN = /^[\x21-\x7E]{1,255}$/;
+const IDEMPOTENCY_KEY_FLAG_DESCRIPTION = "Idempotency key for this send (1 to 255 printable ASCII characters). Retrying with the same key returns the original send instead of sending twice. Defaults to a key derived from the request content and the current five-minute window, so an identical retry within that window is deduplicated and a deliberate repeat later still sends. To retry an uncertain send after that, pass the key it reported. Look a send up later with `primitive sent get --idempotency-key <key>`.";
+function assertValidIdempotencyKey(key) {
+	if (!IDEMPOTENCY_KEY_PATTERN.test(key)) throw new Errors.CLIError("--idempotency-key must be 1 to 255 printable ASCII characters with no spaces.", { exit: 2 });
+	return key;
 }
-function readTextFileFlag(path, flagLabel) {
-	try {
-		return readFileSync(path, "utf8");
-	} catch (error) {
-		throw cliError(`Could not read ${flagLabel} ${path}: ${error instanceof Error ? error.message : String(error)}`);
-	}
+const NON_CONTENT_SEND_FIELDS = new Set(["wait", "wait_timeout_ms"]);
+function canonicalJson(value) {
+	if (Array.isArray(value)) return `[${value.map((item) => canonicalJson(item ?? null)).join(",")}]`;
+	if (value !== null && typeof value === "object") return `{${Object.entries(value).filter(([, item]) => item !== void 0).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, item]) => `${JSON.stringify(key)}:${canonicalJson(item)}`).join(",")}}`;
+	return JSON.stringify(value ?? null);
 }
-function extractErrorPayload(raw) {
-	if (raw && typeof raw === "object" && !(raw instanceof Error) && "error" in raw) {
-		const inner = raw.error;
-		if (inner !== null && inner !== void 0) return inner;
-	}
-	return raw;
+/**
+* How long a derived key stays the same. It matches the window the API
+* uses for the key it derives itself when a request carries none, so an
+* identical send repeated inside this window is deduplicated and a
+* deliberate repeat later (a digest, a heartbeat, the same short reply
+* on another day) still goes out, exactly as without a key. An explicit
+* --idempotency-key never expires.
+*/
+const DERIVED_IDEMPOTENCY_WINDOW_MS = 300 * 1e3;
+/**
+* The idempotency key a send uses when the caller passes none. It is a
+* hash of what is sent (and, for a reply, of the email replied to) and
+* of the current five-minute window, so dedup matches what the API did
+* before the CLI sent a key, while the CLI knows the key before the
+* request starts. That lets an uncertain outcome still report the key to
+* reconcile with, and to retry under with --idempotency-key.
+*/
+function deriveSendIdempotencyKey(kind, request, now = Date.now()) {
+	const content = Object.fromEntries(Object.entries(request).filter(([key]) => !NON_CONTENT_SEND_FIELDS.has(key)));
+	return `primitive-${kind}-${createHash("sha256").update(canonicalJson(content)).update(`:t${Math.floor(now / DERIVED_IDEMPOTENCY_WINDOW_MS)}`).digest("hex")}`;
 }
-function extractCauseDetails(cause) {
-	const details = {};
-	let code;
-	if (!cause || typeof cause !== "object") return { details };
-	for (const [key, value] of Object.entries(cause)) if (typeof value === "string" || typeof value === "number") {
-		details[key] = value;
-		if (key === "code" && typeof value === "string") code = value;
-	}
+/**
+* Identity fields every send, reply and chat `--json` envelope carries,
+* whatever the outcome. `sent_email_id` is null until a send record is
+* known; `idempotency_key` is known before the request starts, so an
+* uncertain outcome can be reconciled with
+* `primitive sent get --idempotency-key <key>`.
+*/
+function sendIdentityFields(params) {
 	return {
-		code,
-		details
+		sent_email_id: params.sent?.id ?? null,
+		idempotency_key: params.idempotencyKey ?? params.sent?.client_idempotency_key ?? null
 	};
 }
-function formatErrorPayload(payload) {
-	if (payload instanceof Error) {
-		const { code, details } = extractCauseDetails(payload.cause);
-		const body = {
-			code: code ?? "client_error",
-			message: payload.message || payload.name || String(payload)
-		};
-		if (Object.keys(details).length > 0) body.cause = details;
-		return JSON.stringify(body, null, 2);
-	}
-	return JSON.stringify(payload, null, 2);
+/**
+* Commands that inspect an existing send. None of them send again:
+* a caller that follows them after a failure cannot double-send.
+*/
+function buildSendCommandFollowUps(params) {
+	const commands = [];
+	if (params.sentId === null && params.outcome === "uncertain" && params.idempotencyKey) commands.push(buildFollowUpCommand("find_sent_email_by_idempotency_key", "Look up this attempt by its idempotency key before retrying", [
+		"primitive",
+		"sent",
+		"get",
+		"--idempotency-key",
+		params.idempotencyKey
+	]));
+	if (params.sentId !== null) commands.push(buildFollowUpCommand("inspect_sent_email", "Inspect the send and its delivery status", [
+		"primitive",
+		"sent",
+		"get",
+		"--id",
+		params.sentId
+	]));
+	if (params.outcome === "uncertain") commands.push(buildFollowUpCommand("list_recent_sent_emails", "Check sent history for this attempt before retrying", [
+		"primitive",
+		"sent",
+		"list",
+		"--date-from",
+		sentHistoryWindowStart(params.attemptStartedAtIso)
+	]));
+	return commands;
 }
-function extractErrorCode(payload) {
-	if (payload instanceof Error) {
-		const { code } = extractCauseDetails(payload.cause);
-		return code;
-	}
-	if (payload && typeof payload === "object") {
-		const inner = payload.error;
-		if (inner && typeof inner === "object" && typeof inner.code === "string") return inner.code;
-		const direct = payload.code;
-		if (typeof direct === "string") return direct;
+/**
+* Classify a `send` / `reply` API result, write the stderr summary,
+* and print stdout. Without `--json` stdout stays exactly what these
+* commands always printed (the SendMailResult, or `null`), so
+* existing `| jq` pipelines keep working; the outcome is on stderr
+* and in the exit code. With `--json` stdout is always an envelope,
+* whatever the outcome, and the summary is only its outcome_message.
+*/
+function reportSendCommandResult(params) {
+	const httpStatus = apiResultHttpStatus(params.result);
+	let outcome;
+	let outcomeMessage;
+	let sent = null;
+	let errorPayload = null;
+	if (params.result.error) {
+		errorPayload = extractErrorPayload(params.result.error);
+		params.onApiError(errorPayload);
+		const failure = classifySendError(httpStatus, errorPayload);
+		outcome = failure;
+		outcomeMessage = failure === "already_sent" ? formatDeletedEarlierSendNotice() : formatSendFailureSummary(params.noun, failure, httpStatus);
+		if (!params.json) params.writeStderr(`${outcomeMessage}\n`);
+	} else {
+		sent = params.result.data?.data ?? null;
+		if (sent === null) {
+			outcome = "uncertain";
+			outcomeMessage = `${params.noun} send outcome uncertain: the API accepted the request but returned no send record. Do not resend blindly; check sent history first.`;
+			errorPayload = { message: "The API returned no send record." };
+		} else {
+			outcome = successfulSendOutcome(sent);
+			outcomeMessage = outcome === "not_sent" || outcome === "uncertain" ? formatSendRecordFailureSummary(params.noun, outcome, sent) : outcome === "already_sent" ? formatAlreadySentNotice(sent) : formatSentSummary(params.noun, sent);
+		}
+		if (!params.json) params.writeStderr(`${outcomeMessage}\n`);
 	}
+	if (params.json) {
+		const envelope = {
+			outcome,
+			exit_code: sendOutcomeExitCode(outcome),
+			outcome_message: outcomeMessage,
+			...sendIdentityFields({
+				idempotencyKey: params.idempotencyKey,
+				sent
+			}),
+			sent,
+			http_status: httpStatus ?? null,
+			error: serializeErrorPayload(errorPayload),
+			follow_up_commands: buildSendCommandFollowUps({
+				attemptStartedAtIso: params.attemptStartedAtIso,
+				idempotencyKey: params.idempotencyKey,
+				outcome,
+				sentId: sent?.id ?? null
+			}),
+			...params.extraEnvelopeFields
+		};
+		params.log(JSON.stringify(envelope, null, 2));
+	} else if (!params.result.error) params.log(JSON.stringify(sent, null, 2));
+	return outcome;
 }
-const ERROR_CODE_HINTS = { [API_ERROR_CODES.unauthorized]: "Hint: run `primitive signin`, pass --api-key explicitly, or set PRIMITIVE_API_KEY in your environment. `primitive whoami` is the fastest way to verify auth is live." };
-const NETWORK_ERROR_HINTS = {
-	ENETUNREACH: "Hint: the network is unreachable. If you're behind a proxy and set HTTP(S)_PROXY, re-run with NODE_USE_ENV_PROXY=1 (Node 22+ ignores those env vars by default). `primitive doctor` reports the local environment in one shot.",
-	ECONNREFUSED: "Hint: the server refused the connection. Check that your firewall allows egress to *.primitive.dev, that your PRIMITIVE_API_BASE_URL_* overrides (if any) point at a reachable host, and re-run with NODE_USE_ENV_PROXY=1 if you're behind a proxy. `primitive doctor` reports the local environment in one shot.",
-	ETIMEDOUT: "Hint: the connection timed out. Check egress rules and proxy configuration; if you're behind a proxy, re-run with NODE_USE_ENV_PROXY=1 and HTTPS_PROXY set. `primitive doctor` reports the local environment in one shot.",
-	EAI_AGAIN: "Hint: DNS lookup failed. Check /etc/resolv.conf inside containers, and try `curl -v https://api.primitive.dev/v1/account` to confirm the host resolves. `primitive doctor` reports the local environment in one shot."
-};
-function writeErrorWithHints(payload) {
-	process.stderr.write(`${formatErrorPayload(payload)}\n`);
-	const code = extractErrorCode(payload);
-	if (!code) return;
-	if (code in ERROR_CODE_HINTS) {
-		const hint = ERROR_CODE_HINTS[code];
-		process.stderr.write(`${hint}\n`);
-		return;
-	}
-	if (code in NETWORK_ERROR_HINTS) process.stderr.write(`${NETWORK_ERROR_HINTS[code]}\n`);
+/** JSON-safe form of an API error payload; `Error` objects stringify to `{}`. */
+function serializeErrorPayload(payload) {
+	if (!(payload instanceof Error)) return payload ?? null;
+	const serialized = {
+		name: payload.name,
+		message: payload.message
+	};
+	const cause = payload.cause;
+	if (cause && typeof cause.code === "string") serialized.code = cause.code;
+	return serialized;
 }
 /**
-* Surface a user-facing hint when a request comes back unauthorized.
-*
-* Deliberately does NOT mutate the saved credentials.json. Auto-
-* deleting on any 401 made transient rejections look like permanent
-* credential failures and forced unnecessary re-login cycles; we
-* surface a hint and let the user decide whether to re-authenticate.
-*
-* The one legitimate auto-delete case lives in `primitive login`'s
-* `checkExistingLogin`: the user has explicitly asked to log in,
-* existing credentials are probed, and if they fail we clean up
-* before minting a new key. That path calls `deleteCliCredentials`
-* directly rather than going through this function.
+* Envelope for a `send` / `reply` that threw instead of returning an
+* API result. Printed in --json mode so stdout carries an envelope for
+* every outcome. Before the request starts (bad input, missing auth,
+* unreadable attachment) nothing went out; after it starts the
+* outcome is unknown.
 */
-function surfaceUnauthorizedHint(params) {
-	if (extractErrorCode(params.payload) !== API_ERROR_CODES.unauthorized || params.auth.source !== "stored") return;
-	if (params.baseUrlOverridden && params.auth.credentials !== null && params.auth.apiBaseUrl !== params.auth.credentials.api_base_url) {
-		process.stderr.write("Saved Primitive CLI credentials were rejected by the overridden API base URL. The saved credential is preserved; unset PRIMITIVE_API_BASE_URL, run `primitive config reset` to clear configured URL overrides, or run `primitive logout` to remove the stored credential.\n");
-		return;
-	}
-	process.stderr.write("Your saved Primitive CLI OAuth session was rejected. If the command was working a moment ago, please retry; brief retries often clear transient rejections. If it keeps failing, run `primitive logout && primitive signin` to mint a fresh session.\n");
-}
-function formatElapsed(ms) {
-	const seconds = ms / 1e3;
-	if (seconds < 60) return `${seconds.toFixed(2)}s`;
-	const minutes = Math.floor(seconds / 60);
-	return `${minutes}m ${(seconds - minutes * 60).toFixed(2)}s`;
+function buildThrownSendFailureEnvelope(params) {
+	const message = params.error instanceof Error ? params.error.message : String(params.error);
+	const outcome = params.requestStarted ? "uncertain" : "not_sent";
+	return {
+		outcome,
+		exit_code: params.requestStarted ? sendOutcomeExitCode("uncertain") : thrownErrorExitCode(params.error),
+		outcome_message: formatSendFailureSummary(params.noun, outcome, void 0),
+		...sendIdentityFields({
+			idempotencyKey: params.idempotencyKey,
+			sent: null
+		}),
+		sent: null,
+		http_status: null,
+		error: { message },
+		follow_up_commands: params.requestStarted && params.attemptStartedAtIso ? buildSendCommandFollowUps({
+			attemptStartedAtIso: params.attemptStartedAtIso,
+			idempotencyKey: params.idempotencyKey,
+			outcome,
+			sentId: null
+		}) : [],
+		...params.extraEnvelopeFields
+	};
 }
-async function runWithTiming(enabled, fn) {
-	if (!enabled) return fn();
-	const start = Date.now();
-	try {
-		return await fn();
-	} finally {
-		process.stderr.write(`[time: ${formatElapsed(Date.now() - start)}]\n`);
-	}
+/** Exit code oclif will use for a thrown error (2 for usage errors). */
+function thrownErrorExitCode(error) {
+	const exit = error?.oclif?.exit;
+	return typeof exit === "number" ? exit : 1;
 }
-const TIME_FLAG_DESCRIPTION = "Print the wall-clock duration of this command to stderr after it completes (e.g. `[time: 1.34s]`). Useful for measuring `--wait` send latency, comparing CLI overhead, or capturing timing in scripts.";
-const API_BASE_URL_FLAG_DESCRIPTION = "Override the API base URL. Internal testing only; not documented to customers.";
-const RESERVED_FLAG_NAMES = new Set([
-	"api-key",
-	"api-base-url",
-	"raw-body",
-	"body-file",
-	"envelope",
-	"output"
+//#endregion
+//#region src/oclif/interaction-actions.ts
+const HINTS = new Set([
+	"status",
+	"card",
+	"none",
+	"pending"
 ]);
-function bodyFieldFlag(field, aliases) {
-	const common = {
-		description: field.description || field.name,
-		...aliases && aliases.length > 0 ? { aliases } : {}
-	};
-	if (field.kind === "boolean") return Flags.boolean({
-		...common,
-		allowNo: true
-	});
-	if (field.kind === "integer") return Flags.integer({
-		...common,
-		...numericFlagOptions(field)
-	});
-	if (field.kind === "number") return numberFlag({
-		...common,
-		...numericFlagOptions(field)
-	});
-	if (field.enumValues) return Flags.string({
-		...common,
-		options: field.enumValues
-	});
-	return Flags.string(common);
+/** A printable `<protocol>/<version>`; anything else is treated as unknown. */
+const KIND = /^[a-z][a-z0-9._-]{0,63}\/[1-9][0-9]{0,3}$/;
+const UUID$2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function record$1(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
-function buildFlags(operation) {
-	const flags = {
-		"api-key": Flags.string({
-			description: "Primitive API key override (defaults to PRIMITIVE_API_KEY or saved OAuth login credentials)",
-			env: "PRIMITIVE_API_KEY"
-		}),
-		"api-base-url": Flags.string({
-			description: "Override the API base URL. Internal testing only; not documented to customers.",
-			env: "PRIMITIVE_API_BASE_URL",
-			hidden: true
-		}),
-		time: Flags.boolean({ description: TIME_FLAG_DESCRIPTION })
-	};
-	if (!operation.binaryResponse) {
-		flags.json = Flags.boolean({ description: "Print exactly one JSON document on stdout, on success and on failure, and nothing on stderr. Stdout keeps its usual shape: the data payload, or with --envelope the full response envelope (data plus meta, including meta.cursor, and empty-result hints in summary). The next-cursor line is not printed; use --envelope to page. A failure prints the error with exit_code. Without --json, the cursor and notices go to stderr." });
-		flags.envelope = Flags.boolean({ description: "Print the full response envelope, including pagination metadata such as meta.cursor. Defaults to printing only the data payload for backward compatibility." });
-	}
-	for (const parameter of [...operation.pathParams, ...operation.queryParams]) flags[flagName(parameter.name)] = flagForParameter(parameter);
-	const bodyFieldFlagToProperty = /* @__PURE__ */ new Map();
-	if (operation.hasJsonBody) {
-		flags["raw-body"] = Flags.string({ description: "Full request body as raw JSON. Escape hatch for nested or complex fields (e.g. arrays); prefer per-field flags (e.g. --to, --from, --body-text) when available." });
-		flags["body-file"] = Flags.string({ description: "Path to a JSON file used as the request body. Same role as --raw-body for callers passing a saved payload." });
-		const bodyFields = extractBodyFields(operation.requestSchema);
-		const aliasesForOperation = OPERATION_FLAG_ALIASES[operation.sdkName];
-		for (const field of bodyFields) {
-			if (field.kind === "complex") continue;
-			const name = flagName(field.name);
-			if (RESERVED_FLAG_NAMES.has(name)) continue;
-			if (flags[name] !== void 0) continue;
-			flags[name] = bodyFieldFlag(field, aliasesForOperation?.[field.name]);
-			bodyFieldFlagToProperty.set(name, field.name);
-		}
+function categoryOf(hint, kind, fyi, candidate) {
+	if (hint === "pending") return candidate ? "pending" : "ordinary";
+	if (hint === "card") switch (kind) {
+		case "x402.payment/1": return "payment";
+		case "primitive.contact/1": return "contact";
+		case "repeat.tick/1": return "repeat";
+		case "repeat.stop/1": return "repeat_stopped";
+		default: return "unsupported";
 	}
-	if (operation.binaryResponse) flags.output = Flags.string({ description: "Write binary response bytes to a file" });
-	if (ATTACHMENT_WAIT_OPERATIONS.has(operation.sdkName)) flags.wait = Flags.boolean({
-		allowNo: true,
-		default: true,
-		description: ATTACHMENT_WAIT_FLAG_DESCRIPTION
-	});
+	if (fyi) return "fyi";
+	if (hint === "status") return "signal";
+	return "ordinary";
+}
+function replyExpectation(category) {
+	switch (category) {
+		case "fyi":
+		case "signal":
+		case "repeat_stopped": return "no_reply";
+		case "payment":
+		case "contact": return "answer_with_command";
+		case "repeat": return "repeat";
+		case "unsupported": return "unsupported";
+		case "pending": return "read_again";
+		default: return "reply";
+	}
+}
+/**
+* The server's interaction facts for an email read, or null when the server
+* did not report `interaction_hint` (an older server). An unfamiliar hint is
+* treated as `none`, as the API documents.
+*/
+function readEmailInteraction(detail) {
+	const row = record$1(detail);
+	if (!row || typeof row.interaction_hint !== "string") return null;
+	const hint = HINTS.has(row.interaction_hint) ? row.interaction_hint : "none";
+	const rawKind = row.interaction_kind;
+	const kind = (hint === "card" || hint === "status") && typeof rawKind === "string" && KIND.test(rawKind) ? rawKind : null;
+	const fyi = row.fyi === true || record$1(row.collaboration)?.fyi === true;
+	const category = categoryOf(hint, kind, fyi, row.interaction_candidate === true);
+	const expectation = replyExpectation(category);
 	return {
-		flags,
-		bodyFieldFlagToProperty
+		hint,
+		kind,
+		fyi,
+		category,
+		plain_reply_completes: expectation === "reply" || expectation === "repeat",
+		no_reply_needed: expectation === "no_reply"
 	};
 }
-function collectBodyFieldFlags(parsedFlags, bodyFieldFlagToProperty) {
-	const result = {};
-	for (const [flag, property] of bodyFieldFlagToProperty) {
-		const value = parsedFlags[flag];
-		if (value === void 0) continue;
-		result[property] = value;
-	}
-	return result;
+function replyAction(bin, id) {
+	return buildFollowUpCommand("reply", "Reply to the sender", [
+		bin,
+		"reply",
+		"--id",
+		id,
+		"--body",
+		"<message>"
+	], { requiresMessage: true });
 }
-function collectValues(parameters, flags) {
-	const values = {};
-	for (const parameter of parameters) {
-		const value = coerceParameterValue(parameter, flags[flagName(parameter.name)]);
-		if (value !== void 0) values[parameter.name] = value;
+/**
+* The commands that answer an email, best first. Empty when the email needs
+* no reply or this CLI cannot answer it. `repeatStoppable: false` (the
+* repeat's own part says only the sender can stop it) leaves out the stop.
+*/
+function interactionNextActions(interaction, emailId, options = {}) {
+	const bin = options.bin ?? "primitive";
+	if (!UUID$2.test(emailId)) return [];
+	const id = emailId.toLowerCase();
+	switch (interaction?.category ?? "ordinary") {
+		case "ordinary": return [replyAction(bin, id)];
+		case "payment": return [buildFollowUpCommand("inspect_payment", "Show the payment request's terms before paying", [
+			bin,
+			"payments",
+			"challenge-from-email",
+			"--id",
+			id
+		]), buildFollowUpCommand("pay", "Pay the payment request (signs with your wallet key and sends the payment)", [
+			bin,
+			"payments",
+			"pay-email",
+			"--in-reply-to",
+			id
+		])];
+		case "contact": return [buildFollowUpCommand("accept_contact", "Accept the contact request, if the owner's policy allows it", [
+			bin,
+			"contacts",
+			"accept",
+			"--id",
+			id
+		])];
+		case "repeat": {
+			const actions = [replyAction(bin, id)];
+			if (options.repeatStoppable !== false) actions.push(buildFollowUpCommand("stop_repeat", "Stop the repeating message once its goal is met", [
+				bin,
+				"repeat",
+				"stop",
+				"--id",
+				id
+			]));
+			return actions;
+		}
+		case "pending": return [buildFollowUpCommand("read_again", "Read the email again once the server has finished checking it", [
+			bin,
+			"emails",
+			"get",
+			"--id",
+			id,
+			"--brief"
+		])];
+		default: return [];
 	}
-	return values;
-}
-function operationOutputPayload(envelope, includeEnvelope) {
-	return includeEnvelope ? envelope ?? null : envelope?.data ?? null;
 }
 /**
-* The `--json` document for a generated command: the full response
-* envelope, so pagination metadata travels with the data, plus any
-* notes the command would otherwise print on stderr.
+* One human line naming how to answer the email, or null for ordinary mail
+* (and older servers), where `primitive reply` is the answer. Contains only
+* server-decided values and fixed text, never anything the sender wrote.
 */
-function operationJsonDocument(envelope, summary = []) {
-	const document = envelope !== null && typeof envelope === "object" ? { ...envelope } : { data: null };
-	if (summary.length > 0) document.summary = summary.join("\n");
-	return document;
+function interactionHumanLine(interaction, actions) {
+	if (!interaction) return null;
+	const command = (kind) => actions.find((action) => action.kind === kind)?.command;
+	const kind = interaction.kind ?? "unknown kind";
+	switch (interaction.category) {
+		case "fyi": return "Informational (fyi): no reply needed, not even another fyi.";
+		case "signal": return `Status signal (${kind}): no reply needed.`;
+		case "repeat_stopped": return `Notice that a repeating message stopped (${kind}): no reply needed.`;
+		case "payment": {
+			const inspect = command("inspect_payment");
+			const pay = command("pay");
+			return inspect && pay ? `Payment interaction (${kind}). If it requests payment, review it with ${inspect} and pay with ${pay}. A plain reply does not pay or decline it.` : null;
+		}
+		case "contact": {
+			const accept = command("accept_contact");
+			return accept ? `Contact interaction (${kind}). If it is a contact request, accept it under the owner's policy with ${accept}. A plain reply does not accept it.` : null;
+		}
+		case "repeat": {
+			const stop = command("stop_repeat");
+			return stop ? `Repeating message (${kind}). Reply if it asks for an answer; stop it once its goal is met with ${stop}.` : `Repeating message (${kind}). Reply if it asks for an answer; only the sender can stop it.`;
+		}
+		case "unsupported": return `Interaction (${kind}) that this CLI cannot answer. A plain reply does not complete it.`;
+		case "pending": {
+			const again = command("read_again");
+			return again ? `Primitive has not finished checking this email for an interaction. Read it again before answering: ${again}` : null;
+		}
+		default: return null;
+	}
 }
-function isIncompleteDomainVerification(operation, envelope) {
-	if (operation.sdkName !== "verifyDomain") return false;
-	const data = envelope?.data;
-	if (!data || typeof data !== "object") return false;
-	return data.verified === false;
+/** The label a wake notice carries: the interaction kind, `fyi`, or null. */
+function wakeInteractionLabel(detail) {
+	const interaction = readEmailInteraction(detail);
+	if (!interaction) return null;
+	if (interaction.hint === "card") return interaction.kind ?? "unknown";
+	if (interaction.fyi) return "fyi";
+	return null;
 }
-function writeIncompleteDomainVerificationHint() {
-	process.stderr.write("Domain verification is incomplete. Add or fix the DNS records shown above, or run `primitive domains zone-file --id <domain-id>` to download the complete zone file, then retry `primitive domains verify --id <domain-id>`.\n");
+/** The category a wake label stands for, or null for an invalid label. */
+function wakeLabelCategory(label) {
+	if (!isWakeInteractionLabel(label)) return null;
+	if (label === "fyi") return "fyi";
+	return categoryOf("card", label === "unknown" ? null : label, false, false);
 }
-const OPERATION_HINTS = {
-	addDomain: "Tip: after this returns a domain id, run `primitive domains zone-file --id <domain-id> --output <domain>.zone` when the user wants an importable DNS zone file.",
-	verifyDomain: "Tip: if DNS is still missing, run `primitive domains zone-file --id <domain-id> --output <domain>.zone` to give the user an importable DNS zone file.",
-	downloadDomainZoneFile: "Tip: prefer `primitive domains zone-file --id <domain-id> --output <domain>.zone` for CLI-friendly file output.",
-	getInboxStatus: "Tip: prefer `primitive inbox status` for a compact readiness summary and next-step commands.",
-	getSendPermissions: "Tip: this command answers where you may send mail to. To find usable sender domains for --from, run `primitive domains list` or `primitive inbox status` and use an address at an active verified domain.",
-	sendEmail: "Tip: prefer `primitive send --to <address> --body <text> --attachment <file>` for file attachments. This raw command exists for callers passing JSON.",
-	createFunction: "Tip: prefer `primitive functions deploy --name <name> --file <bundle>` for file-input ergonomics. This raw command exists for callers passing JSON.",
-	updateFunction: "Tip: prefer `primitive functions redeploy --id <id> --file <bundle>` for file-input ergonomics. This raw command exists for callers passing JSON.",
-	createFunctionSecret: "Tip: prefer `primitive functions set-secret --id <id> --key <KEY> --value <value> [--redeploy]` for secret writes that also push the binding live. This raw command exists for callers passing JSON.",
-	setFunctionSecret: "Tip: prefer `primitive functions set-secret --id <id> --key <KEY> --value <value> [--redeploy]` for secret writes that also push the binding live. This raw command exists for callers passing JSON.",
-	setMemory: "Tip: prefer `primitive memories set <key> <json-value> [--function <function-id>]` for JSON value parsing and scope flags. This raw command exists for callers passing full request JSON.",
-	getMemory: "Tip: prefer `primitive memories get <key> [--function <function-id>]` for the common read path.",
-	deleteMemory: "Tip: prefer `primitive memories delete <key> [--function <function-id>]` for the common delete path.",
-	searchMemories: "Tip: prefer `primitive memories search [prefix] [--metadata-only] [--function <function-id>]` for the common search path.",
-	startAgentSignup: "Tip: pass --terms-accepted, and optionally --signup-code <code> if you have one. Capture the signup_token from the response and feed it to `primitive agent verify-agent-signup --signup-token <token> --verification-code <6-digit-code>` (the verify flag accepts --code as an alias). The high-level `primitive signup <email>` command walks an interactive user through both steps with friendlier prompts.",
-	verifyAgentSignup: "Tip: pass --verification-code <code> (or --code; both work). The response carries OAuth tokens but not your assigned inbox domain; run `primitive domains list` (or `primitive whoami`) after success to see the managed *.primitive.email address that routes to this account."
+/**
+* The fixed wake sentences, keyed by reply expectation. The Claude hook
+* scripts in bin/ carry copies (they run standalone); a test keeps them equal.
+*/
+const WAKE_SENTENCES = {
+	reply: "",
+	read_again: "",
+	no_reply: " It needs no reply.",
+	answer_with_command: " It is an interaction a plain reply does not complete; the brief names the command that answers it.",
+	repeat: " It is a repeating message; the brief says how to answer it and whether you can stop it.",
+	unsupported: " It is an interaction this CLI cannot answer; a plain reply does not complete it."
 };
-const OPERATION_FLAG_ALIASES = { verifyAgentSignup: { verification_code: ["code"] } };
-const OPERATION_SUCCESS_HOOKS = { verifyAgentSignup: ({ envelope, configDir, apiBaseUrl, writeStderr }) => {
-	const data = envelope?.data;
-	if (!data?.access_token || !data?.refresh_token) return;
-	saveSignupCredentials({
-		apiBaseUrl,
-		configDir,
-		signup: data
-	});
-	writeStderr("Credentials saved to the CLI config; `primitive whoami` will work on the next call.\n");
-} };
-function createOperationCommand(operation) {
-	const { flags, bodyFieldFlagToProperty } = buildFlags(operation);
-	const baseDescription = operation.description !== null && operation.description !== void 0 ? canonicalizeCliReferences(operation.description) : `${operation.method} ${operation.path}`;
-	const schemaSummary = operation.hasJsonBody ? renderRequestSchemaSummary(operation.requestSchema) : null;
-	const hint = OPERATION_HINTS[operation.sdkName];
-	const descriptionWithSchema = schemaSummary ? `${baseDescription}\n\n${schemaSummary}` : baseDescription;
-	const fullDescription = hint ? `${descriptionWithSchema}\n\n${hint}` : descriptionWithSchema;
-	class OperationCommand extends Command {
-		static description = fullDescription;
-		static flags = flags;
-		static summary = operation.summary ?? `${operation.method} ${operation.path}`;
-		async run() {
-			const { flags } = await this.parse(OperationCommand);
-			const parsedFlags = flags;
-			if ([
-				"startAgentSignup",
-				"verifyAgentSignup",
-				"resendAgentSignupVerification"
-			].includes(operation.operationId)) requireDefaultLoginProfile();
-			await runWithTiming(parsedFlags.time === true, async () => {
-				const { apiClient, auth, baseUrlOverridden } = await createAuthenticatedCliApiClient({
-					apiKey: typeof parsedFlags["api-key"] === "string" ? parsedFlags["api-key"] : void 0,
-					apiBaseUrl: typeof parsedFlags["api-base-url"] === "string" ? parsedFlags["api-base-url"] : void 0,
-					configDir: this.config.configDir
-				});
-				let body;
-				if (operation.hasJsonBody) {
-					const explicit = readJsonBody(parsedFlags);
-					const overrides = collectBodyFieldFlags(parsedFlags, bodyFieldFlagToProperty);
-					if (Object.keys(overrides).length > 0) if (explicit === void 0) body = overrides;
-					else if (explicit !== null && typeof explicit === "object" && !Array.isArray(explicit)) body = {
-						...explicit,
-						...overrides
-					};
-					else {
-						const explicitKind = explicit === null ? "null" : Array.isArray(explicit) ? "array" : typeof explicit;
-						const overrideFlags = Object.keys(overrides).map((p) => `--${flagName(p)}`).join(", ");
-						throw new Errors.CLIError(`--raw-body must be a JSON object when also passing per-field flags (got ${explicitKind}); supplied per-field flags: ${overrideFlags}. Either drop --raw-body and rely on the per-field flags, or move every field into the JSON --raw-body and drop the flags.`);
-					}
-					else body = explicit;
-				}
-				if (operation.bodyRequired && body === void 0) throw new Errors.CLIError(`Operation ${operation.operationId} requires a body. Pass each field as a --flag (see --help) or supply JSON via --raw-body / --body-file.`);
-				const operationFn = sdk_gen_exports[operation.sdkName];
-				const query = collectValues(operation.queryParams, parsedFlags);
-				const replyStateSurface = replyStateSurfaceForOperation(operation.sdkName, query);
-				const automatedSurface = automatedSurfaceForOperation(operation.sdkName, query);
-				const callOperation = () => operationFn({
-					body,
-					client: apiClient.client,
-					parseAs: operation.binaryResponse ? "blob" : "auto",
-					path: collectValues(operation.pathParams, parsedFlags),
-					query,
-					responseStyle: "fields"
-				});
-				const result = ATTACHMENT_WAIT_OPERATIONS.has(operation.sdkName) ? await withAttachmentWait(callOperation, {
-					wait: parsedFlags.wait !== false,
-					errorCode: (error) => extractErrorCode(extractErrorPayload(error)),
-					onFirstWait: () => {
-						process.stderr.write(`Attachment content is not ready yet; waiting up to ${ATTACHMENT_WAIT_MAX_MS / 1e3}s. Pass --no-wait to return immediately.\n`);
-					}
-				}) : await callOperation();
-				if (result.error) {
-					const errorPayload = extractErrorPayload(result.error);
-					writeErrorWithHints(errorPayload);
-					if (replyStateSurface && isAwaitingRejectedError(errorPayload)) process.stderr.write(`${awaitingRejectedError(replyStateSurface).message}\n`);
-					if (automatedSurface && isAutomatedRejectedError(errorPayload)) process.stderr.write(`${automatedRejectedError(automatedSurface).message}\n`);
-					surfaceUnauthorizedHint({
-						auth,
-						baseUrlOverridden,
-						configDir: this.config.configDir,
-						payload: errorPayload
-					});
-					const listClient = apiClient.client;
-					const listEndpointsFn = () => listEndpoints({
-						client: listClient,
-						responseStyle: "fields"
-					});
-					await maybeWriteFunctionEndpointRedirect({
-						sdkName: operation.sdkName,
-						errorCode: extractErrorCode(errorPayload),
-						endpointId: typeof parsedFlags.id === "string" ? parsedFlags.id : void 0,
-						listEndpoints: listEndpointsFn,
-						writeStderr: (chunk) => {
-							process.stderr.write(chunk);
-						}
-					});
-					process.exitCode = 1;
-					return;
-				}
-				if (operation.binaryResponse) {
-					const blob = result.data;
-					const bytes = Buffer.from(await blob.arrayBuffer());
-					const output = parsedFlags.output;
-					if (typeof output === "string") {
-						writeFileSync(output, bytes);
-						return;
-					}
-					process.stdout.write(bytes);
-					return;
-				}
-				const envelope = result.data;
-				if (replyStateSurface) try {
-					const rows = Array.isArray(envelope?.data) ? envelope.data : [];
-					assertAwaitingFilterRows(rows, replyStateSurface);
-					if (rows.length === 0 && operation.sdkName === "searchEmails") await ensureSearchReportsReplyState(apiClient);
-				} catch (error) {
-					if (!(error instanceof ReplyStateUnsupportedError)) throw error;
-					process.stderr.write(`${error.message}\n`);
-					process.exitCode = 1;
-					return;
-				}
-				if (automatedSurface) try {
-					const rows = Array.isArray(envelope?.data) ? envelope.data : [];
-					assertAutomatedVerdict(rows, automatedSurface, expectedAutomatedVerdicts(query?.automated === "true" ? true : query?.automated === "false" ? false : void 0, typeof query?.q === "string" ? query.q : void 0));
-					if (rows.length === 0 && operation.sdkName === "searchEmails") await ensureSearchReportsAutomated(apiClient);
-				} catch (error) {
-					if (!(error instanceof AutomatedFilterUnsupportedError)) throw error;
-					process.stderr.write(`${error.message}\n`);
-					process.exitCode = 1;
-					return;
-				}
-				const jsonOutput = parsedFlags.json === true;
-				const withEnvelope = parsedFlags.envelope === true;
-				const cursor = envelope?.meta?.cursor;
-				if (cursor && !jsonOutput) process.stderr.write(`next cursor: ${cursor}\n`);
-				const summary = [];
-				if (Array.isArray(envelope?.data) && envelope.data.length === 0) {
-					const hint = EMPTY_RESULT_HINTS[operation.sdkName];
-					if (hint && jsonOutput) {
-						if (withEnvelope) summary.push(hint);
-					} else if (hint) process.stderr.write(`${hint}\n`);
-				}
-				writeIdempotentReplayBannerIfReplay(envelope?.data, { write: (chunk) => {
-					process.stderr.write(chunk);
-				} });
-				const successHook = OPERATION_SUCCESS_HOOKS[operation.sdkName];
-				if (successHook) try {
-					successHook({
-						envelope,
-						configDir: this.config.configDir,
-						apiBaseUrl: auth.apiBaseUrl,
-						writeStderr: (chunk) => {
-							process.stderr.write(chunk);
-						}
-					});
-				} catch (hookError) {
-					const detail = hookError instanceof Error ? hookError.message : String(hookError);
-					process.stderr.write(`Warning: ${operation.sdkName} succeeded but its post-success hook threw (${detail}). The response below is still valid; act on it manually.\n`);
-				}
-				this.log(JSON.stringify(jsonOutput && withEnvelope ? operationJsonDocument(envelope, summary) : operationOutputPayload(envelope, withEnvelope), null, 2));
-				if (isIncompleteDomainVerification(operation, envelope)) {
-					writeIncompleteDomainVerificationHint();
-					process.exitCode = 1;
-				}
-			});
-		}
-	}
-	return OperationCommand;
-}
-const EMPTY_RESULT_HINTS = {
-	listDeliveries: "(no results) No webhook deliveries logged yet. If you have an endpoint configured but expected to see test fires here: test deliveries from `primitive endpoints test` are NOT logged in this list, they're synchronous and visible only in the test-endpoint command's response. Real deliveries are logged when an inbound `email.received` event fans out to your endpoints. If you have no endpoints, run `primitive endpoints list` to check.",
-	listEndpoints: "(no results) No webhook endpoints configured. Add one with `primitive endpoints create --url <your-url>`.",
-	listEmails: "(no results) No inbound emails received yet on this account. Send one to a verified domain to populate this list. For a compact view, prefer `primitive emails latest`.",
-	listDomains: "(no results) No domains on this account. Add one with `primitive domains add --domain <yourdomain.example>`.",
-	listFilters: "(no results) No filter rules configured.",
-	listFunctions: "(no results) No Functions configured yet. Start with `primitive functions templates`, then `primitive functions init --template <template>` and `primitive functions deploy --name <name> --file <bundle>`."
-};
-function canonicalizeCliReferences(description) {
-	return description.replaceAll("`primitive emails:latest`", "`primitive emails latest`").replaceAll("`primitive describe emails:get-email | jq '.responseSchema.properties'`", "`primitive describe emails:get | jq '.responseSchema.properties'`");
+/**
+* The sentence a wake line adds after its read command for an interaction
+* label: empty for ordinary mail and for anything that is not a valid label.
+*/
+function wakeInteractionSentence(label) {
+	const category = wakeLabelCategory(label);
+	return category ? WAKE_SENTENCES[replyExpectation(category)] : "";
 }
-//#endregion
-//#region src/oclif/send-outcome.ts
-const SEND_OUTCOME_EXIT_CODES = {
-	replied: 0,
-	sent: 0,
-	already_sent: 0,
-	not_sent: 1,
-	sent_awaiting_reply: 3,
-	uncertain: 4
-};
-const DEFINITIVE_SEND_REJECTION_STATUSES = [
-	400,
-	401,
-	402,
-	403,
-	404,
-	413,
-	422,
-	429
-];
-const SEND_OUTCOME_HELP = `Outcomes and exit codes, shared by chat, chat reply, send and reply (JSON output carries the name as "outcome"):
-  - exit 0 replied: chat only. The message was sent and a reply arrived.
-  - exit 0 sent: accepted for delivery. A queued status counts as sent.
-  - exit 0 already_sent: an identical earlier send exists (or was deleted: HTTP 410 sent_email_deleted). Nothing new went out. Do not resend.
-  - exit 1 not_sent: the API rejected the request (HTTP 400, 401, 402, 403, 404, 413, 422 or 429), the command failed before sending, or the send record has status agent_failed, gate_denied or canceled. Nothing went out.
-  - exit 2: invalid flags or arguments. Nothing went out.
-  - exit 3 sent_awaiting_reply: chat only. Sent, but no reply before the timeout. Wait; do not resend.
-  - exit 4 uncertain: transport error, conflict, server error, or a send record with status unknown. It may or may not have gone out. Reconcile with primitive sent get --idempotency-key <key> (the key is in the --json envelope) before retrying.`;
-function sendOutcomeExitCode(outcome) {
-	return SEND_OUTCOME_EXIT_CODES[outcome];
+/** Accepts only labels `wakeInteractionLabel` can produce. */
+function isWakeInteractionLabel(value) {
+	return typeof value === "string" && (value === "fyi" || value === "unknown" || KIND.test(value));
 }
-function sendFailureOutcome(httpStatus) {
-	return httpStatus !== void 0 && DEFINITIVE_SEND_REJECTION_STATUSES.includes(httpStatus) ? "not_sent" : "uncertain";
+/**
+* Warning for a plain (prose) reply to `detail`, or null when a plain reply
+* is a fine answer. Never refuses: the caller still sends.
+*/
+function replyInteractionWarning(detail, emailId) {
+	const interaction = readEmailInteraction(detail);
+	if (!interaction || !UUID$2.test(emailId)) return null;
+	const id = emailId.toLowerCase();
+	const kind = interaction.kind;
+	const label = kind ?? "unknown kind";
+	const base = {
+		email_id: id,
+		kind,
+		category: interaction.category
+	};
+	const expected = interactionNextActions(interaction, id);
+	const commandFor = (actionKind) => expected.find((action) => action.kind === actionKind)?.command;
+	const expectation = replyExpectation(interaction.category);
+	if (expectation === "reply" || expectation === "repeat") return null;
+	switch (interaction.category) {
+		case "payment": return {
+			...base,
+			code: "interaction_not_answered",
+			message: `Warning: email ${id} is a payment interaction (${label}). A plain reply does not pay or decline it; sending anyway. To pay: ${commandFor("pay")}`,
+			expected
+		};
+		case "contact": return {
+			...base,
+			code: "interaction_not_answered",
+			message: `Warning: email ${id} is a contact interaction (${label}). A plain reply does not accept it; sending anyway. To accept: ${commandFor("accept_contact")}`,
+			expected
+		};
+		case "unsupported": return {
+			...base,
+			code: "interaction_not_answered",
+			message: `Warning: email ${id} is an interaction (${label}) that this CLI cannot answer. A plain reply does not complete it; sending anyway.`,
+			expected
+		};
+		case "fyi": return {
+			...base,
+			code: "reply_not_needed",
+			message: `Warning: email ${id} is informational (fyi) and needs no reply; sending anyway.`,
+			expected
+		};
+		case "signal": return {
+			...base,
+			code: "reply_not_needed",
+			message: `Warning: email ${id} is a status signal (${label}) and needs no reply; sending anyway.`,
+			expected
+		};
+		case "repeat_stopped": return {
+			...base,
+			code: "reply_not_needed",
+			message: `Warning: email ${id} is a notice that a repeating message stopped (${label}) and needs no reply; sending anyway.`,
+			expected
+		};
+		default: return null;
+	}
 }
-const SENT_EMAIL_DELETED_CODE = "sent_email_deleted";
-function errorPayloadCode(payload) {
-	if (payload === null || typeof payload !== "object") return void 0;
-	const code = payload.code;
-	return typeof code === "string" ? code : void 0;
+const UUID$1 = /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/;
+const FILE = /^pending-mail-([0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12})\.json$/;
+function sessionId(value) {
+	const id = value.toLowerCase();
+	if (!UUID$1.test(id)) throw new Error("A pending mail session must be a UUID.");
+	return id;
 }
-function isDeletedEarlierSend(httpStatus, errorPayload) {
-	return httpStatus === 410 && errorPayloadCode(errorPayload) === SENT_EMAIL_DELETED_CODE;
+function pendingMailPath(configDir, profileName, session) {
+	return join(agentProfileDirectory(configDir, profileName), `pending-mail-${sessionId(session)}.json`);
 }
-/** Classify an API error from a send request. */
-function classifySendError(httpStatus, errorPayload) {
-	return isDeletedEarlierSend(httpStatus, errorPayload) ? "already_sent" : sendFailureOutcome(httpStatus);
+function lockDirectory(configDir, profileName) {
+	return join(agentProfileDirectory(configDir, profileName), ".pending-mail-lock");
 }
-function formatDeletedEarlierSendNotice() {
-	return "Already sent: an earlier send matching this request went out and its record was later deleted, so the API refused this one (HTTP 410 sent_email_deleted). Nothing new was sent. Do not resend or change the idempotency key to get around this.";
-}
-/** Read the HTTP status from a `responseStyle: "fields"` API result. */
-function apiResultHttpStatus(result) {
-	if (result === null || typeof result !== "object") return void 0;
-	if (!("response" in result)) return void 0;
-	const response = result.response;
-	return typeof response?.status === "number" ? response.status : void 0;
-}
-const SEND_STATUSES_THAT_DID_NOT_GO_OUT = new Set([
-	"agent_failed",
-	"canceled",
-	"gate_denied"
-]);
-const SEND_STATUSES_WITH_UNKNOWN_OUTCOME = new Set(["unknown"]);
-/**
-* Classify a send record the API returned with a 2xx. A 2xx alone does
-* not mean a message went out: the record's status can show the
-* attempt was rejected or that its result is indeterminate. The same
-* holds for an idempotent replay, which returns the earlier attempt's
-* record as it stands.
-*/
-function successfulSendOutcome(sent) {
-	if (SEND_STATUSES_THAT_DID_NOT_GO_OUT.has(sent.status)) return "not_sent";
-	if (SEND_STATUSES_WITH_UNKNOWN_OUTCOME.has(sent.status)) return "uncertain";
-	return sent.idempotent_replay === true ? "already_sent" : "sent";
+function notice(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+	const row = value;
+	const kind = row.kind ?? "mail";
+	if (kind !== "mail" && kind !== "status" || (kind === "status" ? typeof row.ref_sent_email_id !== "string" || !UUID$1.test(row.ref_sent_email_id) : row.ref_sent_email_id !== void 0) || typeof row.email_id !== "string" || !UUID$1.test(row.email_id) || typeof row.received_at !== "string" || !Number.isFinite(Date.parse(row.received_at)) || typeof row.sender !== "string" || row.sender.length > 254 || !/^[^\s<>@"]+@[^\s<>@"]+\.[^\s<>@"]+$/.test(row.sender) || !(row.thread_id === null || typeof row.thread_id === "string" && UUID$1.test(row.thread_id)) || typeof row.in_thread !== "boolean" || !(row.newer === null || typeof row.newer === "number" && Number.isSafeInteger(row.newer) && row.newer >= 0)) return null;
+	return {
+		kind,
+		email_id: row.email_id,
+		received_at: row.received_at,
+		sender: row.sender,
+		thread_id: row.thread_id,
+		in_thread: row.in_thread,
+		newer: row.newer,
+		...kind === "status" ? { ref_sent_email_id: row.ref_sent_email_id } : {},
+		...kind === "mail" && isWakeInteractionLabel(row.interaction) ? { interaction: row.interaction } : {},
+		...kind === "mail" && typeof row.not_found_reads === "number" && Number.isSafeInteger(row.not_found_reads) && row.not_found_reads > 0 ? { not_found_reads: row.not_found_reads } : {}
+	};
 }
 /**
-* Summary for a 2xx send record whose status shows it did not go out
-* (`not_sent`) or that its result is indeterminate (`uncertain`).
+* Read one session's notices without taking the lock. Writers replace the
+* file atomically, so a reader sees a whole old or new file, never a partial
+* one. A corrupt or foreign file reads as empty; only a writer holding the
+* lock (`repair`) sets it aside with a `.corrupt-<time>` suffix.
 */
-function formatSendRecordFailureSummary(noun, outcome, sent) {
-	const record = sent.idempotent_replay === true ? `the earlier identical attempt (sent id ${sent.id}) has status ${sent.status}` : `the send record (id ${sent.id}) has status ${sent.status}`;
-	if (outcome === "not_sent") return `${noun} not sent: ${record}. Nothing went out; fix the problem before retrying.`;
-	return `${noun} send outcome uncertain: ${record}. It may or may not have gone out. Do not resend blindly; check sent history first.`;
+function readPendingMail(configDir, profileName, session, repair = false) {
+	const path = pendingMailPath(configDir, profileName, session);
+	let text;
+	try {
+		const info = lstatSync(path);
+		if (!info.isFile() || !privateMailPermissions(info)) throw new Error();
+		text = readFileSync(path, "utf8");
+	} catch (error) {
+		if (error.code === "ENOENT") return [];
+		return repair ? setAside(path) : [];
+	}
+	try {
+		const value = JSON.parse(text);
+		if (value?.version !== 1 || value.session_id !== sessionId(session) || !Array.isArray(value.notices)) throw new Error();
+		const notices = value.notices.map(notice);
+		if (notices.some((row) => row === null)) throw new Error();
+		return notices;
+	} catch {
+		return repair ? setAside(path) : [];
+	}
 }
-function describeSentStatus(status) {
-	if (status === "queued") return "queued for delivery";
-	if (status === "delivered") return "delivered";
-	return `status ${status}`;
+function setAside(path) {
+	try {
+		renameSync(path, `${path}.corrupt-${Date.now()}`);
+	} catch {}
+	return [];
 }
-function formatSentSummary(noun, sent) {
-	return `${noun} sent (${describeSentStatus(sent.status)}, id ${sent.id}). Do not resend.`;
+function write(configDir, profileName, session, notices) {
+	const path = pendingMailPath(configDir, profileName, session);
+	if (notices.length === 0) {
+		try {
+			unlinkSync(path);
+			syncMailDirectory(agentProfileDirectory(configDir, profileName));
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+		}
+		return;
+	}
+	writeMailJson(path, {
+		version: 1,
+		session_id: sessionId(session),
+		notices
+	});
 }
-function formatSendFailureSummary(noun, outcome, httpStatus) {
-	if (outcome === "not_sent") return `${noun} not sent: ${httpStatus === void 0 ? "the request failed before sending" : `the API rejected the request (HTTP ${httpStatus})`}. Nothing went out; fix the problem before retrying.`;
-	return `${noun} send outcome uncertain (${httpStatus === void 0 ? "no response from the API" : `HTTP ${httpStatus}`}): it may or may not have gone out. Do not resend blindly; check sent history first.`;
+/**
+* The notice list is full of unread mail. Nothing is dropped: the caller
+* leaves the event unacknowledged, so the mail stays queued and is
+* recorded once the session reads some of its notices.
+*/
+var PendingMailFullError = class extends Error {
+	constructor() {
+		super(`This session already has 50 unread pending notices. Read some with primitive emails get --id <id>; newer mail stays queued until then.`);
+	}
+};
+/**
+* Add or refresh one notice, deduplicated by email id. Unread mail is never
+* evicted: a mail notice past PENDING_MAIL_LIMIT fails with
+* PendingMailFullError. A status notice always fits, using the headroom
+* above that cap and replacing the oldest status notice when it is full.
+*/
+async function recordPendingMail(configDir, profileName, session, value) {
+	const row = notice({
+		...value,
+		email_id: value.email_id.toLowerCase(),
+		...value.ref_sent_email_id ? { ref_sent_email_id: value.ref_sent_email_id.toLowerCase() } : {}
+	});
+	if (!row) throw new Error("Pending mail notice is invalid.");
+	return withMailLock(lockDirectory(configDir, profileName), () => {
+		const next = [...readPendingMail(configDir, profileName, session, true).filter((existing) => existing.email_id !== row.email_id), row];
+		if (row.kind !== "status" && next.filter((existing) => existing.kind !== "status").length > 50) throw new PendingMailFullError();
+		while (next.length > 60) {
+			const status = next.findIndex((existing) => existing !== row && existing.kind === "status");
+			if (status === -1) throw new PendingMailFullError();
+			next.splice(status, 1);
+		}
+		write(configDir, profileName, session, next);
+		return next;
+	});
 }
-function priorRepliesThatWentOut(replies, options = {}) {
-	return (replies ?? []).filter((reply) => !SEND_STATUSES_THAT_DID_NOT_GO_OUT.has(reply.status) && reply.id !== options.excludeSentId);
+/** Remove exact email ids from one session's notices; deletes the file when empty. */
+async function removePendingMail(configDir, profileName, session, emailIds) {
+	const remove = new Set(emailIds.map((id) => id.toLowerCase()));
+	return withMailLock(lockDirectory(configDir, profileName), () => {
+		const current = readPendingMail(configDir, profileName, session, true);
+		const next = current.filter((row) => !remove.has(row.email_id));
+		if (next.length !== current.length) write(configDir, profileName, session, next);
+		return next;
+	});
 }
-function formatPriorRepliesWarning(prior) {
-	const latest = prior.at(-1);
-	if (!latest) return null;
-	return `This email already has ${prior.length === 1 ? "1 outgoing email" : `${prior.length} outgoing emails`}, most recently at ${latest.created_at} (sent id ${latest.id}). These may include activity updates and do not prove a completed answer. Sending this reply.`;
+/** Session ids that currently have a pending-mail file in the profile. */
+function pendingMailSessions(configDir, profileName) {
+	try {
+		return readdirSync(agentProfileDirectory(configDir, profileName)).map((name) => FILE.exec(name)?.[1]).filter((id) => id !== void 0);
+	} catch {
+		return [];
+	}
 }
-function formatPriorRepliesCheckSkipped(emailId, reason) {
-	return `Could not check whether you already replied to email ${emailId} (${reason}). Prior-reply check skipped; sending the reply anyway.`;
+/**
+* Clear one email after a session read it, from that session's file only.
+* A read with no known runtime session (a terminal or script) clears
+* nothing: it is not evidence that any session has seen the email, and each
+* session keeps its notice until it reads the email itself.
+*/
+async function clearReadPendingMail(configDir, profileName, session, emailId) {
+	if (!session) return;
+	const sessions = pendingMailSessions(configDir, profileName).filter((id) => id === sessionId(session));
+	for (const id of sessions) await removePendingMail(configDir, profileName, id, [emailId]);
 }
 /**
-* Look up the inbound email and report replies to it that already
-* went out. Never throws: the check is advisory and must not block a
-* send, so every failure comes back as `skipped` with a reason the
-* caller surfaces.
+* Record that this profile read one of its own pending emails and the API
+* answered not_found. At PENDING_NOT_FOUND_LIMIT consecutive misses the
+* notice is removed. A successful read removes the notice outright, so the
+* count never spans a success.
 */
-async function checkPriorReplies(params) {
-	try {
-		const result = await getEmail({
-			client: params.client,
-			path: { id: params.emailId },
-			responseStyle: "fields"
-		});
-		if (result.error) {
-			const status = apiResultHttpStatus(result);
+async function recordPendingNotFoundRead(configDir, profileName, session, emailId, limit = 3) {
+	const id = emailId.toLowerCase();
+	return withMailLock(lockDirectory(configDir, profileName), () => {
+		const current = readPendingMail(configDir, profileName, session, true);
+		const index = current.findIndex((row) => row.kind === "mail" && row.email_id === id);
+		const row = current[index];
+		if (!row) return { kind: "absent" };
+		const reads = (row.not_found_reads ?? 0) + 1;
+		if (reads >= limit) {
+			write(configDir, profileName, session, current.filter((_, at) => at !== index));
 			return {
-				status: "skipped",
-				reason: status === void 0 ? "the email lookup failed" : `the email lookup returned HTTP ${status}`
+				kind: "dropped",
+				reads
 			};
 		}
-		const envelope = result.data;
-		const detail = envelope?.data ?? envelope;
-		if (!detail || !Array.isArray(detail.replies)) return {
-			status: "skipped",
-			reason: "the email lookup returned no reply history"
+		const next = [...current];
+		next[index] = {
+			...row,
+			not_found_reads: reads
 		};
+		write(configDir, profileName, session, next);
 		return {
-			status: "checked",
-			prior: priorRepliesThatWentOut(detail.replies),
-			detail
+			kind: "counted",
+			reads
 		};
-	} catch (error) {
+	});
+}
+/**
+* Profiles in this config directory that hold a pending mail notice for
+* the email in the given session. A session can carry several connected
+* profiles, each with its own notices.
+*/
+function pendingMailProfiles(configDir, session, emailId) {
+	const id = emailId.toLowerCase();
+	let names;
+	try {
+		names = readdirSync(join(agentProfilesDirectory(configDir), "profiles"));
+	} catch {
+		return [];
+	}
+	return names.filter((name) => {
+		try {
+			return readPendingMail(configDir, name, session).some((row) => row.kind === "mail" && row.email_id === id);
+		} catch {
+			return false;
+		}
+	}).sort();
+}
+//#endregion
+//#region src/oclif/wake-context.ts
+const security = [{
+	scheme: "bearer",
+	type: "http"
+}];
+const UUID = /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i;
+const WAKE_ADDRESS = /^[a-z0-9._%+-]{1,64}@[a-z0-9.-]{1,253}$/;
+const WAKE_RECIPIENT = /^[a-z0-9.!#$%&'*+/=?^_`{|}~-]{1,64}@[a-z0-9.-]{1,253}$/;
+const afterUnsupported = /* @__PURE__ */ new WeakSet();
+/** The bare lowercase address in `Name <addr>` or `addr` form. */
+function bareAddress(value) {
+	if (typeof value !== "string") return null;
+	const address = (/<([^<>\s]+@[^<>\s]+)>\s*$/.exec(value)?.[1] ?? value).trim().toLowerCase();
+	return /^[^\s<>@]+@[^\s<>@]+$/.test(address) ? address : null;
+}
+function record(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function newerRows(value) {
+	if (!Array.isArray(value)) return void 0;
+	const rows = [];
+	for (const item of value.slice(-20)) {
+		const row = record(item);
+		const from = bareAddress(row?.from);
+		if (!row || typeof row.id !== "string" || !UUID.test(row.id) || !from || typeof row.received_at !== "string" || !Number.isFinite(Date.parse(row.received_at))) return void 0;
+		rows.push({
+			id: row.id.toLowerCase(),
+			from,
+			received_at: row.received_at
+		});
+	}
+	return rows;
+}
+/**
+* Read one thread, asking for mail newer than `afterEmailId`. The newer-mail
+* fields are feature-detected: an API that does not return them yields a
+* context without `newerInboundCount`. Returns null when the thread cannot be
+* read; callers treat that as "unknown", never as an error.
+*/
+async function readThreadContext(client, threadId, afterEmailId, signal) {
+	if (!UUID.test(threadId)) return null;
+	const bounded = AbortSignal.any([signal, AbortSignal.timeout(5e3)]);
+	const read = (after) => client.get({
+		security,
+		url: "/threads/{id}",
+		path: { id: threadId },
+		...after ? { query: { after } } : {},
+		signal: bounded,
+		responseStyle: "fields"
+	});
+	try {
+		const askAfter = afterEmailId !== void 0 && UUID.test(afterEmailId) && !afterUnsupported.has(client);
+		let result = await read(askAfter ? afterEmailId : void 0);
+		if (askAfter && result.response?.status === 400) {
+			afterUnsupported.add(client);
+			result = await read();
+		}
+		if (result.error !== void 0) return null;
+		const body = record(result.data);
+		const data = record(body?.data);
+		if (body?.success !== true || !data || !Array.isArray(data.messages)) return null;
+		const messages = data.messages.filter((message) => Boolean(record(message)) && typeof message.id === "string" && ["inbound", "outbound"].includes(message.direction));
+		const count = data.newer_inbound_count;
+		const newerInboundCount = typeof count === "number" && Number.isSafeInteger(count) && count >= 0 ? count : void 0;
+		const newerInbound = newerInboundCount === void 0 ? void 0 : newerRows(data.newer_inbound);
 		return {
-			status: "skipped",
-			reason: `the email lookup failed: ${error instanceof Error ? error.message : String(error)}`
+			threadId: threadId.toLowerCase(),
+			messages,
+			truncated: typeof data.message_count === "number" && data.message_count > messages.length,
+			...newerInboundCount === void 0 ? {} : { newerInboundCount },
+			...newerInbound === void 0 ? {} : { newerInbound }
 		};
+	} catch {
+		signal.throwIfAborted();
+		return null;
 	}
 }
-function shellQuote(value) {
-	if (/^[A-Za-z0-9_./:@%+=,-]+$/.test(value)) return value;
-	return `'${value.replaceAll("'", "'\\''")}'`;
-}
-function commandFromArgv(argv) {
-	return argv.map(shellQuote).join(" ");
+/** Whether `self` has an outbound message in the thread; undefined if unknowable. */
+function sentInThread(context, self) {
+	if (!context) return void 0;
+	const address = self.toLowerCase();
+	if (context.messages.some((message) => message.direction === "outbound" && bareAddress(message.from) === address)) return true;
+	return context.truncated ? void 0 : false;
 }
-function buildFollowUpCommand(kind, description, argv, options = {}) {
-	const requiresMessage = options.requiresMessage ?? false;
-	return {
-		argv,
-		description,
-		command: commandFromArgv(argv),
-		kind,
-		placeholders: requiresMessage ? [{
-			description: "Replace with the message body before running.",
-			token: "<message>"
-		}] : [],
-		requires_message: requiresMessage
-	};
+/** The latest outbound message from `self` in the thread, if listed. */
+function latestOwnOutbound(context, self) {
+	const address = self.toLowerCase();
+	return [...context?.messages ?? []].reverse().find((message) => message.direction === "outbound" && bareAddress(message.from) === address);
 }
-const SENT_HISTORY_CLOCK_SKEW_MS = 300 * 1e3;
-function sentHistoryWindowStart(attemptStartedAtIso) {
-	const started = Date.parse(attemptStartedAtIso);
-	if (!Number.isFinite(started)) return attemptStartedAtIso;
-	return new Date(started - SENT_HISTORY_CLOCK_SKEW_MS).toISOString();
+function hasAttachments(detail) {
+	return (detail.parsed?.attachments?.length ?? 0) > 0;
 }
-/** Header rule for Idempotency-Key: 1 to 255 printable ASCII characters. */
-const IDEMPOTENCY_KEY_PATTERN = /^[\x21-\x7E]{1,255}$/;
-const IDEMPOTENCY_KEY_FLAG_DESCRIPTION = "Idempotency key for this send (1 to 255 printable ASCII characters). Retrying with the same key returns the original send instead of sending twice. Defaults to a key derived from the request content and the current five-minute window, so an identical retry within that window is deduplicated and a deliberate repeat later still sends. To retry an uncertain send after that, pass the key it reported. Look a send up later with `primitive sent get --idempotency-key <key>`.";
-function assertValidIdempotencyKey(key) {
-	if (!IDEMPOTENCY_KEY_PATTERN.test(key)) throw new Errors.CLIError("--idempotency-key must be 1 to 255 printable ASCII characters with no spaces.", { exit: 2 });
-	return key;
+/**
+* Map server-provided sender facts to one relationship label. The owner and
+* member labels come only from server admission; `agent` from the server's
+* connected-agent verification or network admission; `contact` from an
+* explicit contact allowance.
+*/
+function wakeRelationship(input) {
+	if (input.senderRelation) return input.senderRelation;
+	if (input.connectedAgentVerified || input.network) return "agent";
+	if (input.contact) return "contact";
+	return "other";
 }
-const NON_CONTENT_SEND_FIELDS = new Set(["wait", "wait_timeout_ms"]);
-function canonicalJson(value) {
-	if (Array.isArray(value)) return `[${value.map((item) => canonicalJson(item ?? null)).join(",")}]`;
-	if (value !== null && typeof value === "object") return `{${Object.entries(value).filter(([, item]) => item !== void 0).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, item]) => `${JSON.stringify(key)}:${canonicalJson(item)}`).join(",")}}`;
-	return JSON.stringify(value ?? null);
+const SERVER_RELATIONSHIPS = {
+	owner: "owner",
+	org_agent: "agent",
+	member: "member",
+	contact: "contact",
+	other: "other"
+};
+/** The `collaboration` object of an email read, when the server sends one. */
+function collaborationOf(detail) {
+	return record(record(detail)?.collaboration);
 }
 /**
-* How long a derived key stays the same. It matches the window the API
-* uses for the key it derives itself when a request carries none, so an
-* identical send repeated inside this window is deduplicated and a
-* deliberate repeat later (a digest, a heartbeat, the same short reply
-* on another day) still goes out, exactly as without a key. An explicit
-* --idempotency-key never expires.
+* The sender relationship the server computed for this email
+* (`collaboration.sender_relationship`), mapped to the CLI's labels:
+* `org_agent` reads as `agent`. When present it is authoritative, `other`
+* included, so a stale local classification cannot override it. Returns
+* undefined only for an older server that sends no such field, or an
+* unrecognized value; the caller then keeps its own derivation.
 */
-const DERIVED_IDEMPOTENCY_WINDOW_MS = 300 * 1e3;
+function serverRelationship(detail) {
+	const value = collaborationOf(detail)?.sender_relationship;
+	return typeof value === "string" && Object.hasOwn(SERVER_RELATIONSHIPS, value) ? SERVER_RELATIONSHIPS[value] : void 0;
+}
 /**
-* The idempotency key a send uses when the caller passes none. It is a
-* hash of what is sent (and, for a reply, of the email replied to) and
-* of the current five-minute window, so dedup matches what the API did
-* before the CLI sent a key, while the CLI knows the key before the
-* request starts. That lets an uncertain outcome still report the key to
-* reconcile with, and to retry under with --idempotency-key.
+* True when the server reports this email's thread as muted for the
+* receiving address (`collaboration.muted`, or `muted` on the email). An
+* older server sends neither and nothing is muted by it.
 */
-function deriveSendIdempotencyKey(kind, request, now = Date.now()) {
-	const content = Object.fromEntries(Object.entries(request).filter(([key]) => !NON_CONTENT_SEND_FIELDS.has(key)));
-	return `primitive-${kind}-${createHash("sha256").update(canonicalJson(content)).update(`:t${Math.floor(now / DERIVED_IDEMPOTENCY_WINDOW_MS)}`).digest("hex")}`;
+function serverMuted(detail) {
+	return collaborationOf(detail)?.muted === true || record(detail)?.muted === true;
 }
 /**
-* Identity fields every send, reply and chat `--json` envelope carries,
-* whatever the outcome. `sent_email_id` is null until a send record is
-* known; `idempotency_key` is known before the request starts, so an
-* uncertain outcome can be reconciled with
-* `primitive sent get --idempotency-key <key>`.
+* An address fit to print as trusted metadata, or `unavailable`. The
+* sender's address is parsed from a header the sender wrote, so anything
+* outside a plain charset (quotes, spaces, line breaks) is withheld.
 */
-function sendIdentityFields(params) {
+function displayAddress(value) {
+	return WAKE_ADDRESS.test(value) ? value : "unavailable";
+}
+/** The metadata clause of a wake line. Addresses outside a plain charset are withheld. */
+function formatWakeContext(context) {
+	const sender = displayAddress(context.sender);
+	const thread = context.threadId && UUID.test(context.threadId) ? context.threadId.toLowerCase() : "none";
+	const newer = context.newer !== void 0 && Number.isSafeInteger(context.newer) && context.newer >= 0 ? ` newer=${Math.min(context.newer, 9999)}` : "";
+	const interaction = isWakeInteractionLabel(context.interaction) ? ` interaction=${context.interaction}` : "";
+	return `from=${sender} relationship=${context.relationship} thread=${thread} in_thread=${context.inThread ? "yes" : "no"} attachments=${context.attachments ? "yes" : "no"}${newer}${interaction}`;
+}
+/** Build a wake context, reading the thread once. Never throws for API failures. */
+async function describeWake(input) {
+	const { detail } = input;
+	const threadId = typeof detail.thread_id === "string" && UUID.test(detail.thread_id) ? detail.thread_id.toLowerCase() : null;
+	const thread = threadId ? await readThreadContext(input.client, threadId, detail.id, input.signal) : null;
+	const interaction = wakeInteractionLabel(detail);
 	return {
-		sent_email_id: params.sent?.id ?? null,
-		idempotency_key: params.idempotencyKey ?? params.sent?.client_idempotency_key ?? null
+		sender: detail.from_email.trim().toLowerCase(),
+		relationship: serverRelationship(detail) ?? input.relationship,
+		threadId,
+		inThread: input.localInThread || sentInThread(thread, input.self) === true,
+		attachments: hasAttachments(detail),
+		...thread?.newerInboundCount === void 0 ? {} : { newer: thread.newerInboundCount },
+		...interaction ? { interaction } : {}
 	};
 }
+const WAKE_PROFILE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,62}$/;
 /**
-* Commands that inspect an existing send. None of them send again:
-* a caller that follows them after a failure cannot double-send.
+* ` to=<address>` naming the address that received a wake, or empty when the
+* address is unknown or outside the plain character set the hook accepts.
+* One session can have several connected profiles, each receiving for its
+* own address, so the wake says which one this mail arrived at.
 */
-function buildSendCommandFollowUps(params) {
-	const commands = [];
-	if (params.sentId === null && params.outcome === "uncertain" && params.idempotencyKey) commands.push(buildFollowUpCommand("find_sent_email_by_idempotency_key", "Look up this attempt by its idempotency key before retrying", [
-		"primitive",
-		"sent",
-		"get",
-		"--idempotency-key",
-		params.idempotencyKey
-	]));
-	if (params.sentId !== null) commands.push(buildFollowUpCommand("inspect_sent_email", "Inspect the send and its delivery status", [
-		"primitive",
-		"sent",
-		"get",
-		"--id",
-		params.sentId
-	]));
-	if (params.outcome === "uncertain") commands.push(buildFollowUpCommand("list_recent_sent_emails", "Check sent history for this attempt before retrying", [
-		"primitive",
-		"sent",
-		"list",
-		"--date-from",
-		sentHistoryWindowStart(params.attemptStartedAtIso)
-	]));
-	return commands;
+function wakeRecipientField(address) {
+	const value = typeof address === "string" ? address.toLowerCase() : "";
+	return WAKE_RECIPIENT.test(value) ? ` to=${value}` : "";
 }
 /**
-* Classify a `send` / `reply` API result, write the stderr summary,
-* and print stdout. Without `--json` stdout stays exactly what these
-* commands always printed (the SendMailResult, or `null`), so
-* existing `| jq` pipelines keep working; the outcome is on stderr
-* and in the exit code. With `--json` stdout is always an envelope,
-* whatever the outcome, and the summary is only its outcome_message.
+* The read command a wake suggests. It selects the receiving profile
+* explicitly: the email is visible only to that profile, and its pending
+* notice clears only when that profile reads it, so a copy-pasted command
+* run under another profile would report not_found.
 */
-function reportSendCommandResult(params) {
-	const httpStatus = apiResultHttpStatus(params.result);
-	let outcome;
-	let outcomeMessage;
-	let sent = null;
-	let errorPayload = null;
-	if (params.result.error) {
-		errorPayload = extractErrorPayload(params.result.error);
-		params.onApiError(errorPayload);
-		const failure = classifySendError(httpStatus, errorPayload);
-		outcome = failure;
-		outcomeMessage = failure === "already_sent" ? formatDeletedEarlierSendNotice() : formatSendFailureSummary(params.noun, failure, httpStatus);
-		if (!params.json) params.writeStderr(`${outcomeMessage}\n`);
-	} else {
-		sent = params.result.data?.data ?? null;
-		if (sent === null) {
-			outcome = "uncertain";
-			outcomeMessage = `${params.noun} send outcome uncertain: the API accepted the request but returned no send record. Do not resend blindly; check sent history first.`;
-			errorPayload = { message: "The API returned no send record." };
-		} else {
-			outcome = successfulSendOutcome(sent);
-			outcomeMessage = outcome === "not_sent" || outcome === "uncertain" ? formatSendRecordFailureSummary(params.noun, outcome, sent) : outcome === "already_sent" ? formatAlreadySentNotice(sent) : formatSentSummary(params.noun, sent);
-		}
-		if (!params.json) params.writeStderr(`${outcomeMessage}\n`);
-	}
-	if (params.json) {
-		const envelope = {
-			outcome,
-			exit_code: sendOutcomeExitCode(outcome),
-			outcome_message: outcomeMessage,
-			...sendIdentityFields({
-				idempotencyKey: params.idempotencyKey,
-				sent
-			}),
-			sent,
-			http_status: httpStatus ?? null,
-			error: serializeErrorPayload(errorPayload),
-			follow_up_commands: buildSendCommandFollowUps({
-				attemptStartedAtIso: params.attemptStartedAtIso,
-				idempotencyKey: params.idempotencyKey,
-				outcome,
-				sentId: sent?.id ?? null
-			}),
-			...params.extraEnvelopeFields
-		};
-		params.log(JSON.stringify(envelope, null, 2));
-	} else if (!params.result.error) params.log(JSON.stringify(sent, null, 2));
-	return outcome;
+function wakeReadCommand(emailId, profileName) {
+	return `${profileName && WAKE_PROFILE.test(profileName) ? `PRIMITIVE_AGENT_PROFILE=${profileName} ` : ""}primitive emails get --id ${emailId} --brief`;
 }
-/** JSON-safe form of an API error payload; `Error` objects stringify to `{}`. */
-function serializeErrorPayload(payload) {
-	if (!(payload instanceof Error)) return payload ?? null;
-	const serialized = {
-		name: payload.name,
-		message: payload.message
-	};
-	const cause = payload.cause;
-	if (cause && typeof cause.code === "string") serialized.code = cause.code;
-	return serialized;
+//#endregion
+//#region src/oclif/pending-mail-miss.ts
+function currentProfile(configDir) {
+	try {
+		return resolveCliAuth({ configDir }).connectedAgent?.profileName ?? null;
+	} catch {
+		return null;
+	}
+}
+function profileAddress(configDir, profileName) {
+	try {
+		return wakeRecipientField(loadConnectedAgentProfile(configDir, profileName)?.agent_address).replace(/^ to=/, "");
+	} catch {
+		return "";
+	}
 }
 /**
-* Envelope for a `send` / `reply` that threw instead of returning an
-* API result. Printed in --json mode so stdout carries an envelope for
-* every outcome. Before the request starts (bad input, missing auth,
-* unreadable attachment) nothing went out; after it starts the
-* outcome is unknown.
+* Explain a not_found read of an email this session was told about. One
+* session can carry several connected profiles, each receiving its own
+* address, and an email is visible only to the profile that received it.
+*
+* - When the email is a pending notice for another profile in this session,
+*   print one line naming that profile and the command that reads it, so
+*   the miss is not mistaken for a message that does not exist.
+* - When it is a pending notice for the current profile, count the miss and
+*   drop the notice after consecutive misses, with a line saying why, so an
+*   email that was deleted or is no longer visible stops being announced.
+*
+* Writes only to stderr and never throws; the read already failed.
 */
-function buildThrownSendFailureEnvelope(params) {
-	const message = params.error instanceof Error ? params.error.message : String(params.error);
-	const outcome = params.requestStarted ? "uncertain" : "not_sent";
-	return {
-		outcome,
-		exit_code: params.requestStarted ? sendOutcomeExitCode("uncertain") : thrownErrorExitCode(params.error),
-		outcome_message: formatSendFailureSummary(params.noun, outcome, void 0),
-		...sendIdentityFields({
-			idempotencyKey: params.idempotencyKey,
-			sent: null
-		}),
-		sent: null,
-		http_status: null,
-		error: { message },
-		follow_up_commands: params.requestStarted && params.attemptStartedAtIso ? buildSendCommandFollowUps({
-			attemptStartedAtIso: params.attemptStartedAtIso,
-			idempotencyKey: params.idempotencyKey,
-			outcome,
-			sentId: null
-		}) : [],
-		...params.extraEnvelopeFields
-	};
-}
-/** Exit code oclif will use for a thrown error (2 for usage errors). */
-function thrownErrorExitCode(error) {
-	const exit = error?.oclif?.exit;
-	return typeof exit === "number" ? exit : 1;
+async function explainPendingMailNotFound(configDir, emailId, write = (line) => {
+	process.stderr.write(line);
+}) {
+	try {
+		const runtime = currentMailSessionKey();
+		if (!runtime) return;
+		const session = runtime.slice(runtime.indexOf(":") + 1);
+		const id = emailId.toLowerCase();
+		const holders = pendingMailProfiles(configDir, session, id);
+		if (holders.length === 0) return;
+		const current = currentProfile(configDir);
+		for (const profile of holders) {
+			if (profile === current) continue;
+			const address = profileAddress(configDir, profile);
+			write(`Email ${id} is a pending notice for profile ${profile}${address ? ` (${address})` : ""}, not the profile this command used. Read it with ${wakeReadCommand(id, profile)}.\n`);
+		}
+		if (!current || !holders.includes(current)) return;
+		const outcome = await recordPendingNotFoundRead(configDir, current, session, id);
+		if (outcome.kind === "dropped") write(`Dropped the pending notice for ${id} from profile ${current} after ${outcome.reads} consecutive not_found reads; the email is no longer visible to this profile.\n`);
+	} catch {}
 }
 //#endregion
-//#region src/oclif/interaction-actions.ts
-const HINTS = new Set([
-	"status",
-	"card",
-	"none",
-	"pending"
-]);
-/** A printable `<protocol>/<version>`; anything else is treated as unknown. */
-const KIND = /^[a-z][a-z0-9._-]{0,63}\/[1-9][0-9]{0,3}$/;
-const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function record(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+//#region src/oclif/reply-state.ts
+const AWAITING_VALUES = ["you", "them"];
+const AWAITING_FLAG_DESCRIPTION = "Only emails whose reply state is this value: `you` = waiting on your reply (the thread's latest message is inbound), `them` = you replied last. Queued and scheduled replies count as replied. Delivered mail only: rejected mail is never returned. Fails if the server does not report reply state yet.";
+const REPLY_STATE_UNSUPPORTED_CODE = "reply_state_unsupported";
+/** True when a search DSL query uses the `awaiting:` term. */
+function queryUsesAwaiting(q) {
+	return typeof q === "string" && /(^|[\s(])-?awaiting:/i.test(q);
 }
-function categoryOf(hint, kind, fyi, candidate) {
-	if (hint === "pending") return candidate ? "pending" : "ordinary";
-	if (hint === "card") switch (kind) {
-		case "x402.payment/1": return "payment";
-		case "primitive.contact/1": return "contact";
-		case "repeat.tick/1": return "repeat";
-		case "repeat.stop/1": return "repeat_stopped";
-		default: return "unsupported";
+var ReplyStateUnsupportedError = class extends Error {
+	code = REPLY_STATE_UNSUPPORTED_CODE;
+	constructor(detail) {
+		super(`The server does not support reply state yet: ${detail} Nothing was treated as awaiting your reply. Upgrade to a server that returns \`awaiting\` and \`reply_count\`, or run without reply-state options.`);
+		this.name = "ReplyStateUnsupportedError";
 	}
-	if (fyi) return "fyi";
-	if (hint === "status") return "signal";
-	return "ordinary";
-}
-function replyExpectation(category) {
-	switch (category) {
-		case "fyi":
-		case "signal":
-		case "repeat_stopped": return "no_reply";
-		case "payment":
-		case "contact": return "answer_with_command";
-		case "repeat": return "repeat";
-		case "unsupported": return "unsupported";
-		case "pending": return "read_again";
-		default: return "reply";
+};
+/**
+* The server's reply-state support could not be established (a probe
+* failed). Reported like ReplyStateUnsupportedError so callers never
+* read an unverified empty answer as "nothing matched".
+*/
+var ReplyStateUnverifiedError = class extends ReplyStateUnsupportedError {
+	constructor(detail) {
+		super(detail);
+		this.message = `Could not verify that the server supports reply state: ${detail} Nothing was treated as matching. Retry the command.`;
+		this.name = "ReplyStateUnverifiedError";
+		this.code = "reply_state_unverified";
 	}
+};
+function hasReplyState(row) {
+	if (row === null || typeof row !== "object") return false;
+	const candidate = row;
+	return (candidate.awaiting === "you" || candidate.awaiting === "them") && typeof candidate.reply_count === "number" && (candidate.last_replied_at === null || typeof candidate.last_replied_at === "string");
 }
 /**
-* The server's interaction facts for an email read, or null when the server
-* did not report `interaction_hint` (an older server). An unfamiliar hint is
-* treated as `none`, as the API documents.
+* Throw unless every row carries reply state. An empty page proves
+* nothing either way; callers that asked for reply state follow an
+* empty search page with ensureSearchReportsReplyState(). `surface` names the
+* response for the error, e.g. "GET /emails".
 */
-function readEmailInteraction(detail) {
-	const row = record(detail);
-	if (!row || typeof row.interaction_hint !== "string") return null;
-	const hint = HINTS.has(row.interaction_hint) ? row.interaction_hint : "none";
-	const rawKind = row.interaction_kind;
-	const kind = (hint === "card" || hint === "status") && typeof rawKind === "string" && KIND.test(rawKind) ? rawKind : null;
-	const fyi = row.fyi === true || record(row.collaboration)?.fyi === true;
-	const category = categoryOf(hint, kind, fyi, row.interaction_candidate === true);
-	const expectation = replyExpectation(category);
-	return {
-		hint,
-		kind,
-		fyi,
-		category,
-		plain_reply_completes: expectation === "reply" || expectation === "repeat",
-		no_reply_needed: expectation === "no_reply"
-	};
-}
-function replyAction(bin, id) {
-	return buildFollowUpCommand("reply", "Reply to the sender", [
-		bin,
-		"reply",
-		"--id",
-		id,
-		"--body",
-		"<message>"
-	], { requiresMessage: true });
+function assertReplyState(rows, surface) {
+	const missing = rows.filter((row) => !hasReplyState(row)).length;
+	if (missing > 0) throw new ReplyStateUnsupportedError(`${surface} returned ${missing} of ${rows.length} email${rows.length === 1 ? "" : "s"} without the \`awaiting\` and \`reply_count\` fields.`);
 }
+const AWAITING_REJECTED_UNSUPPORTED_CODE = "awaiting_rejected_unsupported";
 /**
-* The commands that answer an email, best first. Empty when the email needs
-* no reply or this CLI cannot answer it. `repeatStoppable: false` (the
-* repeat's own part says only the sender can stop it) leaves out the stop.
+* The `awaiting` filter matches delivered mail only: a rejected email
+* (for example refused over the storage limit) was never delivered, so it
+* awaits no one. A server that returns one through the filter predates
+* that, and an agent would be handed mail nobody can answer.
 */
-function interactionNextActions(interaction, emailId, options = {}) {
-	const bin = options.bin ?? "primitive";
-	if (!UUID.test(emailId)) return [];
-	const id = emailId.toLowerCase();
-	switch (interaction?.category ?? "ordinary") {
-		case "ordinary": return [replyAction(bin, id)];
-		case "payment": return [buildFollowUpCommand("inspect_payment", "Show the payment request's terms before paying", [
-			bin,
-			"payments",
-			"challenge-from-email",
-			"--id",
-			id
-		]), buildFollowUpCommand("pay", "Pay the payment request (signs with your wallet key and sends the payment)", [
-			bin,
-			"payments",
-			"pay-email",
-			"--in-reply-to",
-			id
-		])];
-		case "contact": return [buildFollowUpCommand("accept_contact", "Accept the contact request, if the owner's policy allows it", [
-			bin,
-			"contacts",
-			"accept",
-			"--id",
-			id
-		])];
-		case "repeat": {
-			const actions = [replyAction(bin, id)];
-			if (options.repeatStoppable !== false) actions.push(buildFollowUpCommand("stop_repeat", "Stop the repeating message once its goal is met", [
-				bin,
-				"repeat",
-				"stop",
-				"--id",
-				id
-			]));
-			return actions;
-		}
-		case "pending": return [buildFollowUpCommand("read_again", "Read the email again once the server has finished checking it", [
-			bin,
-			"emails",
-			"get",
-			"--id",
-			id,
-			"--brief"
-		])];
-		default: return [];
+var AwaitingIncludesRejectedError = class extends ReplyStateUnsupportedError {
+	constructor(detail) {
+		super(detail);
+		this.message = `The server's \`awaiting\` filter does not exclude undelivered mail yet: ${detail} Upgrade to a server whose \`awaiting\` filter matches delivered mail only.`;
+		this.name = "AwaitingIncludesRejectedError";
+		this.code = AWAITING_REJECTED_UNSUPPORTED_CODE;
 	}
+};
+/**
+* For rows returned BY an `awaiting` filter (not the unfiltered probe):
+* every row carries reply state, and none has status `rejected`.
+*/
+function assertAwaitingFilterRows(rows, surface) {
+	assertReplyState(rows, surface);
+	const rejected = rows.filter((row) => row !== null && typeof row === "object" && row.status === "rejected").length;
+	if (rejected > 0) throw new AwaitingIncludesRejectedError(`${surface} returned ${rejected} email${rejected === 1 ? "" : "s"} with status \`rejected\`.`);
+}
+function errorBody(payload) {
+	if (payload === null || typeof payload !== "object") return {};
+	const inner = payload.error;
+	return inner !== null && typeof inner === "object" ? inner : payload;
 }
 /**
-* One human line naming how to answer the email, or null for ordinary mail
-* (and older servers), where `primitive reply` is the answer. Contains only
-* server-decided values and fixed text, never anything the sender wrote.
+* True when an API error is an older server rejecting the `awaiting`
+* query parameter or the `awaiting:` search term as unknown. A current
+* server accepts both, and the CLI only ever sends valid values.
 */
-function interactionHumanLine(interaction, actions) {
-	if (!interaction) return null;
-	const command = (kind) => actions.find((action) => action.kind === kind)?.command;
-	const kind = interaction.kind ?? "unknown kind";
-	switch (interaction.category) {
-		case "fyi": return "Informational (fyi): no reply needed, not even another fyi.";
-		case "signal": return `Status signal (${kind}): no reply needed.`;
-		case "repeat_stopped": return `Notice that a repeating message stopped (${kind}): no reply needed.`;
-		case "payment": {
-			const inspect = command("inspect_payment");
-			const pay = command("pay");
-			return inspect && pay ? `Payment interaction (${kind}). If it requests payment, review it with ${inspect} and pay with ${pay}. A plain reply does not pay or decline it.` : null;
-		}
-		case "contact": {
-			const accept = command("accept_contact");
-			return accept ? `Contact interaction (${kind}). If it is a contact request, accept it under the owner's policy with ${accept}. A plain reply does not accept it.` : null;
-		}
-		case "repeat": {
-			const stop = command("stop_repeat");
-			return stop ? `Repeating message (${kind}). Reply if it asks for an answer; stop it once its goal is met with ${stop}.` : `Repeating message (${kind}). Reply if it asks for an answer; only the sender can stop it.`;
-		}
-		case "unsupported": return `Interaction (${kind}) that this CLI cannot answer. A plain reply does not complete it.`;
-		case "pending": {
-			const again = command("read_again");
-			return again ? `Primitive has not finished checking this email for an interaction. Read it again before answering: ${again}` : null;
-		}
-		default: return null;
-	}
+function isAwaitingRejectedError(payload) {
+	const body = errorBody(payload);
+	if (body.code !== "validation_error") return false;
+	const message = typeof body.message === "string" ? body.message : JSON.stringify(payload);
+	return /awaiting/i.test(message) && /unrecogni[sz]ed|unknown/i.test(message);
 }
-/** The label a wake notice carries: the interaction kind, `fyi`, or null. */
-function wakeInteractionLabel(detail) {
-	const interaction = readEmailInteraction(detail);
-	if (!interaction) return null;
-	if (interaction.hint === "card") return interaction.kind ?? "unknown";
-	if (interaction.fyi) return "fyi";
-	return null;
+function awaitingRejectedError(surface) {
+	return new ReplyStateUnsupportedError(`${surface} rejected the \`awaiting\` filter as unknown.`);
 }
-/** The category a wake label stands for, or null for an invalid label. */
-function wakeLabelCategory(label) {
-	if (!isWakeInteractionLabel(label)) return null;
-	if (label === "fyi") return "fyi";
-	return categoryOf("card", label === "unknown" ? null : label, false, false);
+/** Short column value for tables: "you", "them", or "-" when absent. */
+function formatAwaitingCell(row) {
+	if (!hasReplyState(row)) return "-";
+	return row.awaiting;
+}
+/** Reply count for tables, or "-" when the server did not report it. */
+function formatRepliesCell(row) {
+	if (!hasReplyState(row)) return "-";
+	return String(row.reply_count);
 }
+const REPLY_STATE_SURFACES = {
+	listEmails: "GET /emails",
+	searchEmails: "GET /emails/search"
+};
 /**
-* The fixed wake sentences, keyed by reply expectation. The Claude hook
-* scripts in bin/ carry copies (they run standalone); a test keeps them equal.
+* For the generated `emails list` / `emails search` commands: the
+* surface name when this call asked for reply state (an `awaiting`
+* parameter or an `awaiting:` search term), else null.
 */
-const WAKE_SENTENCES = {
-	reply: "",
-	read_again: "",
-	no_reply: " It needs no reply.",
-	answer_with_command: " It is an interaction a plain reply does not complete; the brief names the command that answers it.",
-	repeat: " It is a repeating message; the brief says how to answer it and whether you can stop it.",
-	unsupported: " It is an interaction this CLI cannot answer; a plain reply does not complete it."
-};
+function replyStateSurfaceForOperation(sdkName, query) {
+	const surface = REPLY_STATE_SURFACES[sdkName];
+	if (!surface || !query) return null;
+	const q = typeof query.q === "string" ? query.q : void 0;
+	return query.awaiting !== void 0 || queryUsesAwaiting(q) ? surface : null;
+}
+const searchSupportProbes = /* @__PURE__ */ new WeakMap();
 /**
-* The sentence a wake line adds after its read command for an interaction
-* label: empty for ordinary mail and for anything that is not a valid label.
+* GET /emails/search ignores unknown parameters, so an empty page for
+* `awaiting=...` does not show that the server applied the filter.
+* Read one unfiltered row: if it lacks reply state the server does not
+* support it and this throws ReplyStateUnsupportedError. No rows at all
+* means the mailbox is empty, so the empty answer stands.
 */
-function wakeInteractionSentence(label) {
-	const category = wakeLabelCategory(label);
-	return category ? WAKE_SENTENCES[replyExpectation(category)] : "";
+function ensureSearchReportsReplyState(apiClient) {
+	const key = apiClient;
+	let probe = searchSupportProbes.get(key);
+	if (!probe) {
+		probe = (async () => {
+			const result = await searchEmails({
+				client: apiClient.client,
+				query: {
+					limit: 1,
+					include_facets: "false",
+					snippet: "false"
+				},
+				responseStyle: "fields"
+			});
+			if (result.error) throw new ReplyStateUnverifiedError("the empty result could not be checked: reading one unfiltered row from GET /emails/search failed.");
+			const rows = result.data?.data;
+			assertReplyState(rows ?? [], "GET /emails/search");
+		})();
+		searchSupportProbes.set(key, probe);
+		probe.catch(() => {
+			if (searchSupportProbes.get(key) === probe) searchSupportProbes.delete(key);
+		});
+	}
+	return probe;
 }
-/** Accepts only labels `wakeInteractionLabel` can produce. */
-function isWakeInteractionLabel(value) {
-	return typeof value === "string" && (value === "fyi" || value === "unknown" || KIND.test(value));
+//#endregion
+//#region src/oclif/api-command.ts
+const API_ERROR_CODES = {
+	accessDenied: "access_denied",
+	authorizationPending: "authorization_pending",
+	expiredToken: "expired_token",
+	invalidDeviceCode: "invalid_device_code",
+	notFound: "not_found",
+	slowDown: "slow_down",
+	unauthorized: "unauthorized"
+};
+function flagName(parameterName) {
+	return parameterName.replace(/_/g, "-");
+}
+function flagDescription(parameter) {
+	return parameter.description ?? parameter.name;
+}
+const numberFlag = Flags.custom({ async parse(input, _context, options) {
+	const trimmed = input.trim();
+	if (trimmed === "") throw new Errors.CLIError(`Expected a number but received: ${input}`);
+	const value = Number(trimmed);
+	if (!Number.isFinite(value)) throw new Errors.CLIError(`Expected a number but received: ${input}`);
+	if (options.min !== void 0 && value < options.min) throw new Errors.CLIError(`Expected a number greater than or equal to ${options.min} but received: ${input}`);
+	if (options.max !== void 0 && value > options.max) throw new Errors.CLIError(`Expected a number less than or equal to ${options.max} but received: ${input}`);
+	return value;
+} });
+function numericFlagOptions(parameter) {
+	return {
+		...typeof parameter.default === "number" ? { default: parameter.default } : {},
+		...typeof parameter.maximum === "number" ? { max: parameter.maximum } : {},
+		...typeof parameter.minimum === "number" ? { min: parameter.minimum } : {}
+	};
+}
+function extractBodyFields(schema) {
+	if (!schema || typeof schema !== "object") return [];
+	const properties = schema.properties;
+	if (!properties || typeof properties !== "object") return [];
+	const requiredArr = Array.isArray(schema.required) ? schema.required.filter((k) => typeof k === "string") : [];
+	const required = new Set(requiredArr);
+	const fields = [];
+	for (const [name, raw] of Object.entries(properties)) {
+		const propSchema = raw && typeof raw === "object" ? raw : {};
+		const t = propSchema.type;
+		let displayType = "any";
+		let kind = "complex";
+		if (typeof t === "string") {
+			displayType = t;
+			if (t === "string") kind = "string";
+			else if (t === "integer") kind = "integer";
+			else if (t === "number") kind = "number";
+			else if (t === "boolean") kind = "boolean";
+			else if (t === "array") {
+				const items = propSchema.items;
+				if (items && typeof items === "object") {
+					const itemType = items.type;
+					if (typeof itemType === "string") displayType = `array<${itemType}>`;
+				}
+				kind = "complex";
+			} else kind = "complex";
+		} else if (Array.isArray(t)) {
+			const nonNull = t.filter((s) => s !== "null");
+			if (nonNull.length === 1) {
+				const single = nonNull[0];
+				displayType = `${single}?`;
+				if (single === "string") kind = "string";
+				else if (single === "integer") kind = "integer";
+				else if (single === "number") kind = "number";
+				else if (single === "boolean") kind = "boolean";
+				else kind = "complex";
+			} else {
+				displayType = nonNull.join("|");
+				kind = "complex";
+			}
+		}
+		const description = typeof propSchema.description === "string" ? propSchema.description.split(/\n\s*\n/)[0].replace(/\s*\n\s*/g, " ").trim() : "";
+		const enumRaw = propSchema.enum;
+		const enumValues = kind === "string" && Array.isArray(enumRaw) ? enumRaw.filter((e) => typeof e === "string") : void 0;
+		fields.push({
+			name,
+			description,
+			required: required.has(name),
+			displayType,
+			kind,
+			...enumValues && enumValues.length > 0 ? { enumValues } : {},
+			...typeof propSchema.maximum === "number" ? { maximum: propSchema.maximum } : {},
+			...typeof propSchema.minimum === "number" ? { minimum: propSchema.minimum } : {}
+		});
+	}
+	return fields.sort((a, b) => {
+		if (a.required !== b.required) return a.required ? -1 : 1;
+		return a.name.localeCompare(b.name);
+	});
 }
 /**
-* Warning for a plain (prose) reply to `detail`, or null when a plain reply
-* is a fine answer. Never refuses: the caller still sends.
+* Render a "Body fields" summary for the per-command help.
+*
+* Most scalar fields are exposed as individual `--flag` flags,
+* which oclif auto-renders in the FLAGS section above. To avoid
+* duplicating that, the summary here only documents fields that
+* MUST go through `--raw-body` (complex types: arrays, objects,
+* mixed-non-nullable). When an operation has only scalars, the
+* summary is omitted entirely and oclif's FLAGS section is the
+* full story.
+*
+* For operations with mixed scalar and complex fields, we also
+* include a short header pointing the agent at the flag form so
+* the natural reading is "use the flags above; --raw-body for
+* the leftovers below."
 */
-function replyInteractionWarning(detail, emailId) {
-	const interaction = readEmailInteraction(detail);
-	if (!interaction || !UUID.test(emailId)) return null;
-	const id = emailId.toLowerCase();
-	const kind = interaction.kind;
-	const label = kind ?? "unknown kind";
-	const base = {
-		email_id: id,
-		kind,
-		category: interaction.category
+function renderRequestSchemaSummary(schema) {
+	const fields = extractBodyFields(schema);
+	if (fields.length === 0) return null;
+	const complex = fields.filter((f) => f.kind === "complex");
+	if (complex.length === 0) return null;
+	const nameWidth = Math.min(24, Math.max(...complex.map((f) => f.name.length)));
+	const descMax = 78;
+	const lines = ["Body fields requiring --raw-body JSON (these are not exposed as flags):"];
+	for (const f of complex) {
+		const marker = f.required ? " *" : "  ";
+		const padName = f.name.padEnd(nameWidth);
+		const trimmedDesc = f.description.length > descMax ? `${f.description.slice(0, descMax - 3)}...` : f.description;
+		const desc = trimmedDesc ? `  ${trimmedDesc}` : "";
+		lines.push(`${marker} ${padName}  ${f.displayType}${desc}`);
+	}
+	lines.push("(* = required. Scalar body fields are exposed as individual --flag-name flags; see FLAGS above.)");
+	return lines.join("\n");
+}
+function flagForParameter(parameter) {
+	const common = {
+		description: flagDescription(parameter),
+		required: parameter.required
 	};
-	const expected = interactionNextActions(interaction, id);
-	const commandFor = (actionKind) => expected.find((action) => action.kind === actionKind)?.command;
-	const expectation = replyExpectation(interaction.category);
-	if (expectation === "reply" || expectation === "repeat") return null;
-	switch (interaction.category) {
-		case "payment": return {
-			...base,
-			code: "interaction_not_answered",
-			message: `Warning: email ${id} is a payment interaction (${label}). A plain reply does not pay or decline it; sending anyway. To pay: ${commandFor("pay")}`,
-			expected
-		};
-		case "contact": return {
-			...base,
-			code: "interaction_not_answered",
-			message: `Warning: email ${id} is a contact interaction (${label}). A plain reply does not accept it; sending anyway. To accept: ${commandFor("accept_contact")}`,
-			expected
-		};
-		case "unsupported": return {
-			...base,
-			code: "interaction_not_answered",
-			message: `Warning: email ${id} is an interaction (${label}) that this CLI cannot answer. A plain reply does not complete it; sending anyway.`,
-			expected
-		};
-		case "fyi": return {
-			...base,
-			code: "reply_not_needed",
-			message: `Warning: email ${id} is informational (fyi) and needs no reply; sending anyway.`,
-			expected
-		};
-		case "signal": return {
-			...base,
-			code: "reply_not_needed",
-			message: `Warning: email ${id} is a status signal (${label}) and needs no reply; sending anyway.`,
-			expected
-		};
-		case "repeat_stopped": return {
-			...base,
-			code: "reply_not_needed",
-			message: `Warning: email ${id} is a notice that a repeating message stopped (${label}) and needs no reply; sending anyway.`,
-			expected
+	if (parameter.type === "boolean") return Flags.boolean(common);
+	if (parameter.type === "integer") return Flags.integer({
+		...common,
+		...numericFlagOptions(parameter)
+	});
+	if (parameter.type === "number") return numberFlag({
+		...common,
+		...numericFlagOptions(parameter)
+	});
+	if (parameter.enum && parameter.enum.length > 0) return Flags.string({
+		...common,
+		options: parameter.enum
+	});
+	return Flags.string(common);
+}
+function coerceParameterValue(parameter, value) {
+	if (value === void 0) return;
+	if (parameter.type === "number") {
+		if (typeof value === "number") return value;
+		const parsed = Number(value);
+		if (Number.isNaN(parsed)) throw new Errors.CLIError(`Invalid number for --${parameter.name}: ${value}`);
+		return parsed;
+	}
+	if (typeof value === "boolean" || typeof value === "number" || typeof value === "string") return value;
+	throw new Errors.CLIError(`Unsupported flag value for --${parameter.name}`);
+}
+function cliError(message) {
+	return new Errors.CLIError(message, { exit: 1 });
+}
+function parseJson(source, flagLabel) {
+	try {
+		return JSON.parse(source);
+	} catch (error) {
+		throw cliError(`${flagLabel} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+	}
+}
+function readJsonBody(flags) {
+	const bodyFile = flags["body-file"];
+	const rawBody = flags["raw-body"];
+	if (bodyFile && rawBody) throw cliError("Use either --raw-body or --body-file, not both");
+	if (typeof bodyFile === "string") {
+		let contents;
+		try {
+			contents = readFileSync(bodyFile, "utf8");
+		} catch (error) {
+			throw cliError(`Could not read --body-file ${bodyFile}: ${error instanceof Error ? error.message : String(error)}`);
+		}
+		return parseJson(contents, `--body-file ${bodyFile}`);
+	}
+	if (typeof rawBody === "string") return parseJson(rawBody, "--raw-body");
+}
+function readTextFileFlag(path, flagLabel) {
+	try {
+		return readFileSync(path, "utf8");
+	} catch (error) {
+		throw cliError(`Could not read ${flagLabel} ${path}: ${error instanceof Error ? error.message : String(error)}`);
+	}
+}
+function extractErrorPayload(raw) {
+	if (raw && typeof raw === "object" && !(raw instanceof Error) && "error" in raw) {
+		const inner = raw.error;
+		if (inner !== null && inner !== void 0) return inner;
+	}
+	return raw;
+}
+function extractCauseDetails(cause) {
+	const details = {};
+	let code;
+	if (!cause || typeof cause !== "object") return { details };
+	for (const [key, value] of Object.entries(cause)) if (typeof value === "string" || typeof value === "number") {
+		details[key] = value;
+		if (key === "code" && typeof value === "string") code = value;
+	}
+	return {
+		code,
+		details
+	};
+}
+function formatErrorPayload(payload) {
+	if (payload instanceof Error) {
+		const { code, details } = extractCauseDetails(payload.cause);
+		const body = {
+			code: code ?? "client_error",
+			message: payload.message || payload.name || String(payload)
 		};
-		default: return null;
+		if (Object.keys(details).length > 0) body.cause = details;
+		return JSON.stringify(body, null, 2);
 	}
+	return JSON.stringify(payload, null, 2);
+}
+function extractErrorCode(payload) {
+	if (payload instanceof Error) {
+		const { code } = extractCauseDetails(payload.cause);
+		return code;
+	}
+	if (payload && typeof payload === "object") {
+		const inner = payload.error;
+		if (inner && typeof inner === "object" && typeof inner.code === "string") return inner.code;
+		const direct = payload.code;
+		if (typeof direct === "string") return direct;
+	}
+}
+const ERROR_CODE_HINTS = { [API_ERROR_CODES.unauthorized]: "Hint: run `primitive signin`, pass --api-key explicitly, or set PRIMITIVE_API_KEY in your environment. `primitive whoami` is the fastest way to verify auth is live." };
+const NETWORK_ERROR_HINTS = {
+	ENETUNREACH: "Hint: the network is unreachable. If you're behind a proxy and set HTTP(S)_PROXY, re-run with NODE_USE_ENV_PROXY=1 (Node 22+ ignores those env vars by default). `primitive doctor` reports the local environment in one shot.",
+	ECONNREFUSED: "Hint: the server refused the connection. Check that your firewall allows egress to *.primitive.dev, that your PRIMITIVE_API_BASE_URL_* overrides (if any) point at a reachable host, and re-run with NODE_USE_ENV_PROXY=1 if you're behind a proxy. `primitive doctor` reports the local environment in one shot.",
+	ETIMEDOUT: "Hint: the connection timed out. Check egress rules and proxy configuration; if you're behind a proxy, re-run with NODE_USE_ENV_PROXY=1 and HTTPS_PROXY set. `primitive doctor` reports the local environment in one shot.",
+	EAI_AGAIN: "Hint: DNS lookup failed. Check /etc/resolv.conf inside containers, and try `curl -v https://api.primitive.dev/v1/account` to confirm the host resolves. `primitive doctor` reports the local environment in one shot."
+};
+function writeErrorWithHints(payload) {
+	process.stderr.write(`${formatErrorPayload(payload)}\n`);
+	const code = extractErrorCode(payload);
+	if (!code) return;
+	if (code in ERROR_CODE_HINTS) {
+		const hint = ERROR_CODE_HINTS[code];
+		process.stderr.write(`${hint}\n`);
+		return;
+	}
+	if (code in NETWORK_ERROR_HINTS) process.stderr.write(`${NETWORK_ERROR_HINTS[code]}\n`);
+}
+/**
+* Surface a user-facing hint when a request comes back unauthorized.
+*
+* Deliberately does NOT mutate the saved credentials.json. Auto-
+* deleting on any 401 made transient rejections look like permanent
+* credential failures and forced unnecessary re-login cycles; we
+* surface a hint and let the user decide whether to re-authenticate.
+*
+* The one legitimate auto-delete case lives in `primitive login`'s
+* `checkExistingLogin`: the user has explicitly asked to log in,
+* existing credentials are probed, and if they fail we clean up
+* before minting a new key. That path calls `deleteCliCredentials`
+* directly rather than going through this function.
+*/
+function surfaceUnauthorizedHint(params) {
+	if (extractErrorCode(params.payload) !== API_ERROR_CODES.unauthorized || params.auth.source !== "stored") return;
+	if (params.baseUrlOverridden && params.auth.credentials !== null && params.auth.apiBaseUrl !== params.auth.credentials.api_base_url) {
+		process.stderr.write("Saved Primitive CLI credentials were rejected by the overridden API base URL. The saved credential is preserved; unset PRIMITIVE_API_BASE_URL, run `primitive config reset` to clear configured URL overrides, or run `primitive logout` to remove the stored credential.\n");
+		return;
+	}
+	process.stderr.write("Your saved Primitive CLI OAuth session was rejected. If the command was working a moment ago, please retry; brief retries often clear transient rejections. If it keeps failing, run `primitive logout && primitive signin` to mint a fresh session.\n");
+}
+function formatElapsed(ms) {
+	const seconds = ms / 1e3;
+	if (seconds < 60) return `${seconds.toFixed(2)}s`;
+	const minutes = Math.floor(seconds / 60);
+	return `${minutes}m ${(seconds - minutes * 60).toFixed(2)}s`;
+}
+async function runWithTiming(enabled, fn) {
+	if (!enabled) return fn();
+	const start = Date.now();
+	try {
+		return await fn();
+	} finally {
+		process.stderr.write(`[time: ${formatElapsed(Date.now() - start)}]\n`);
+	}
+}
+const TIME_FLAG_DESCRIPTION = "Print the wall-clock duration of this command to stderr after it completes (e.g. `[time: 1.34s]`). Useful for measuring `--wait` send latency, comparing CLI overhead, or capturing timing in scripts.";
+const API_BASE_URL_FLAG_DESCRIPTION = "Override the API base URL. Internal testing only; not documented to customers.";
+const RESERVED_FLAG_NAMES = new Set([
+	"api-key",
+	"api-base-url",
+	"raw-body",
+	"body-file",
+	"envelope",
+	"output"
+]);
+function bodyFieldFlag(field, aliases) {
+	const common = {
+		description: field.description || field.name,
+		...aliases && aliases.length > 0 ? { aliases } : {}
+	};
+	if (field.kind === "boolean") return Flags.boolean({
+		...common,
+		allowNo: true
+	});
+	if (field.kind === "integer") return Flags.integer({
+		...common,
+		...numericFlagOptions(field)
+	});
+	if (field.kind === "number") return numberFlag({
+		...common,
+		...numericFlagOptions(field)
+	});
+	if (field.enumValues) return Flags.string({
+		...common,
+		options: field.enumValues
+	});
+	return Flags.string(common);
+}
+function buildFlags(operation) {
+	const flags = {
+		"api-key": Flags.string({
+			description: "Primitive API key override (defaults to PRIMITIVE_API_KEY or saved OAuth login credentials)",
+			env: "PRIMITIVE_API_KEY"
+		}),
+		"api-base-url": Flags.string({
+			description: "Override the API base URL. Internal testing only; not documented to customers.",
+			env: "PRIMITIVE_API_BASE_URL",
+			hidden: true
+		}),
+		time: Flags.boolean({ description: TIME_FLAG_DESCRIPTION })
+	};
+	if (!operation.binaryResponse) {
+		flags.json = Flags.boolean({ description: "Print exactly one JSON document on stdout, on success and on failure, and nothing on stderr. Stdout keeps its usual shape: the data payload, or with --envelope the full response envelope (data plus meta, including meta.cursor, and empty-result hints in summary). The next-cursor line is not printed; use --envelope to page. A failure prints the error with exit_code. Without --json, the cursor and notices go to stderr." });
+		flags.envelope = Flags.boolean({ description: "Print the full response envelope, including pagination metadata such as meta.cursor. Defaults to printing only the data payload for backward compatibility." });
+	}
+	for (const parameter of [...operation.pathParams, ...operation.queryParams]) flags[flagName(parameter.name)] = flagForParameter(parameter);
+	const bodyFieldFlagToProperty = /* @__PURE__ */ new Map();
+	if (operation.hasJsonBody) {
+		flags["raw-body"] = Flags.string({ description: "Full request body as raw JSON. Escape hatch for nested or complex fields (e.g. arrays); prefer per-field flags (e.g. --to, --from, --body-text) when available." });
+		flags["body-file"] = Flags.string({ description: "Path to a JSON file used as the request body. Same role as --raw-body for callers passing a saved payload." });
+		const bodyFields = extractBodyFields(operation.requestSchema);
+		const aliasesForOperation = OPERATION_FLAG_ALIASES[operation.sdkName];
+		for (const field of bodyFields) {
+			if (field.kind === "complex") continue;
+			const name = flagName(field.name);
+			if (RESERVED_FLAG_NAMES.has(name)) continue;
+			if (flags[name] !== void 0) continue;
+			flags[name] = bodyFieldFlag(field, aliasesForOperation?.[field.name]);
+			bodyFieldFlagToProperty.set(name, field.name);
+		}
+	}
+	if (operation.binaryResponse) flags.output = Flags.string({ description: "Write binary response bytes to a file" });
+	if (ATTACHMENT_WAIT_OPERATIONS.has(operation.sdkName)) flags.wait = Flags.boolean({
+		allowNo: true,
+		default: true,
+		description: ATTACHMENT_WAIT_FLAG_DESCRIPTION
+	});
+	return {
+		flags,
+		bodyFieldFlagToProperty
+	};
+}
+function collectBodyFieldFlags(parsedFlags, bodyFieldFlagToProperty) {
+	const result = {};
+	for (const [flag, property] of bodyFieldFlagToProperty) {
+		const value = parsedFlags[flag];
+		if (value === void 0) continue;
+		result[property] = value;
+	}
+	return result;
+}
+function collectValues(parameters, flags) {
+	const values = {};
+	for (const parameter of parameters) {
+		const value = coerceParameterValue(parameter, flags[flagName(parameter.name)]);
+		if (value !== void 0) values[parameter.name] = value;
+	}
+	return values;
+}
+function operationOutputPayload(envelope, includeEnvelope) {
+	return includeEnvelope ? envelope ?? null : envelope?.data ?? null;
+}
+/**
+* The `--json` document for a generated command: the full response
+* envelope, so pagination metadata travels with the data, plus any
+* notes the command would otherwise print on stderr.
+*/
+function operationJsonDocument(envelope, summary = []) {
+	const document = envelope !== null && typeof envelope === "object" ? { ...envelope } : { data: null };
+	if (summary.length > 0) document.summary = summary.join("\n");
+	return document;
+}
+function isIncompleteDomainVerification(operation, envelope) {
+	if (operation.sdkName !== "verifyDomain") return false;
+	const data = envelope?.data;
+	if (!data || typeof data !== "object") return false;
+	return data.verified === false;
+}
+function writeIncompleteDomainVerificationHint() {
+	process.stderr.write("Domain verification is incomplete. Add or fix the DNS records shown above, or run `primitive domains zone-file --id <domain-id>` to download the complete zone file, then retry `primitive domains verify --id <domain-id>`.\n");
+}
+const OPERATION_HINTS = {
+	addDomain: "Tip: after this returns a domain id, run `primitive domains zone-file --id <domain-id> --output <domain>.zone` when the user wants an importable DNS zone file.",
+	verifyDomain: "Tip: if DNS is still missing, run `primitive domains zone-file --id <domain-id> --output <domain>.zone` to give the user an importable DNS zone file.",
+	downloadDomainZoneFile: "Tip: prefer `primitive domains zone-file --id <domain-id> --output <domain>.zone` for CLI-friendly file output.",
+	getInboxStatus: "Tip: prefer `primitive inbox status` for a compact readiness summary and next-step commands.",
+	getSendPermissions: "Tip: this command answers where you may send mail to. To find usable sender domains for --from, run `primitive domains list` or `primitive inbox status` and use an address at an active verified domain.",
+	sendEmail: "Tip: prefer `primitive send --to <address> --body <text> --attachment <file>` for file attachments. This raw command exists for callers passing JSON.",
+	createFunction: "Tip: prefer `primitive functions deploy --name <name> --file <bundle>` for file-input ergonomics. This raw command exists for callers passing JSON.",
+	updateFunction: "Tip: prefer `primitive functions redeploy --id <id> --file <bundle>` for file-input ergonomics. This raw command exists for callers passing JSON.",
+	createFunctionSecret: "Tip: prefer `primitive functions set-secret --id <id> --key <KEY> --value <value> [--redeploy]` for secret writes that also push the binding live. This raw command exists for callers passing JSON.",
+	setFunctionSecret: "Tip: prefer `primitive functions set-secret --id <id> --key <KEY> --value <value> [--redeploy]` for secret writes that also push the binding live. This raw command exists for callers passing JSON.",
+	setMemory: "Tip: prefer `primitive memories set <key> <json-value> [--function <function-id>]` for JSON value parsing and scope flags. This raw command exists for callers passing full request JSON.",
+	getMemory: "Tip: prefer `primitive memories get <key> [--function <function-id>]` for the common read path.",
+	deleteMemory: "Tip: prefer `primitive memories delete <key> [--function <function-id>]` for the common delete path.",
+	searchMemories: "Tip: prefer `primitive memories search [prefix] [--metadata-only] [--function <function-id>]` for the common search path.",
+	startAgentSignup: "Tip: pass --terms-accepted, and optionally --signup-code <code> if you have one. Capture the signup_token from the response and feed it to `primitive agent verify-agent-signup --signup-token <token> --verification-code <6-digit-code>` (the verify flag accepts --code as an alias). The high-level `primitive signup <email>` command walks an interactive user through both steps with friendlier prompts.",
+	verifyAgentSignup: "Tip: pass --verification-code <code> (or --code; both work). The response carries OAuth tokens but not your assigned inbox domain; run `primitive domains list` (or `primitive whoami`) after success to see the managed *.primitive.email address that routes to this account."
+};
+const OPERATION_FLAG_ALIASES = { verifyAgentSignup: { verification_code: ["code"] } };
+const OPERATION_SUCCESS_HOOKS = { verifyAgentSignup: ({ envelope, configDir, apiBaseUrl, writeStderr }) => {
+	const data = envelope?.data;
+	if (!data?.access_token || !data?.refresh_token) return;
+	saveSignupCredentials({
+		apiBaseUrl,
+		configDir,
+		signup: data
+	});
+	writeStderr("Credentials saved to the CLI config; `primitive whoami` will work on the next call.\n");
+} };
+function createOperationCommand(operation) {
+	const { flags, bodyFieldFlagToProperty } = buildFlags(operation);
+	const baseDescription = operation.description !== null && operation.description !== void 0 ? canonicalizeCliReferences(operation.description) : `${operation.method} ${operation.path}`;
+	const schemaSummary = operation.hasJsonBody ? renderRequestSchemaSummary(operation.requestSchema) : null;
+	const hint = OPERATION_HINTS[operation.sdkName];
+	const descriptionWithSchema = schemaSummary ? `${baseDescription}\n\n${schemaSummary}` : baseDescription;
+	const fullDescription = hint ? `${descriptionWithSchema}\n\n${hint}` : descriptionWithSchema;
+	class OperationCommand extends Command {
+		static description = fullDescription;
+		static flags = flags;
+		static summary = operation.summary ?? `${operation.method} ${operation.path}`;
+		async run() {
+			const { flags } = await this.parse(OperationCommand);
+			const parsedFlags = flags;
+			if ([
+				"startAgentSignup",
+				"verifyAgentSignup",
+				"resendAgentSignupVerification"
+			].includes(operation.operationId)) requireDefaultLoginProfile();
+			await runWithTiming(parsedFlags.time === true, async () => {
+				const { apiClient, auth, baseUrlOverridden } = await createAuthenticatedCliApiClient({
+					apiKey: typeof parsedFlags["api-key"] === "string" ? parsedFlags["api-key"] : void 0,
+					apiBaseUrl: typeof parsedFlags["api-base-url"] === "string" ? parsedFlags["api-base-url"] : void 0,
+					configDir: this.config.configDir
+				});
+				let body;
+				if (operation.hasJsonBody) {
+					const explicit = readJsonBody(parsedFlags);
+					const overrides = collectBodyFieldFlags(parsedFlags, bodyFieldFlagToProperty);
+					if (Object.keys(overrides).length > 0) if (explicit === void 0) body = overrides;
+					else if (explicit !== null && typeof explicit === "object" && !Array.isArray(explicit)) body = {
+						...explicit,
+						...overrides
+					};
+					else {
+						const explicitKind = explicit === null ? "null" : Array.isArray(explicit) ? "array" : typeof explicit;
+						const overrideFlags = Object.keys(overrides).map((p) => `--${flagName(p)}`).join(", ");
+						throw new Errors.CLIError(`--raw-body must be a JSON object when also passing per-field flags (got ${explicitKind}); supplied per-field flags: ${overrideFlags}. Either drop --raw-body and rely on the per-field flags, or move every field into the JSON --raw-body and drop the flags.`);
+					}
+					else body = explicit;
+				}
+				if (operation.bodyRequired && body === void 0) throw new Errors.CLIError(`Operation ${operation.operationId} requires a body. Pass each field as a --flag (see --help) or supply JSON via --raw-body / --body-file.`);
+				const operationFn = sdk_gen_exports[operation.sdkName];
+				const query = collectValues(operation.queryParams, parsedFlags);
+				const replyStateSurface = replyStateSurfaceForOperation(operation.sdkName, query);
+				const automatedSurface = automatedSurfaceForOperation(operation.sdkName, query);
+				const callOperation = () => operationFn({
+					body,
+					client: apiClient.client,
+					parseAs: operation.binaryResponse ? "blob" : "auto",
+					path: collectValues(operation.pathParams, parsedFlags),
+					query,
+					responseStyle: "fields"
+				});
+				const result = ATTACHMENT_WAIT_OPERATIONS.has(operation.sdkName) ? await withAttachmentWait(callOperation, {
+					wait: parsedFlags.wait !== false,
+					errorCode: (error) => extractErrorCode(extractErrorPayload(error)),
+					onFirstWait: () => {
+						process.stderr.write(`Attachment content is not ready yet; waiting up to ${ATTACHMENT_WAIT_MAX_MS / 1e3}s. Pass --no-wait to return immediately.\n`);
+					}
+				}) : await callOperation();
+				if (result.error) {
+					const errorPayload = extractErrorPayload(result.error);
+					writeErrorWithHints(errorPayload);
+					if (replyStateSurface && isAwaitingRejectedError(errorPayload)) process.stderr.write(`${awaitingRejectedError(replyStateSurface).message}\n`);
+					if (automatedSurface && isAutomatedRejectedError(errorPayload)) process.stderr.write(`${automatedRejectedError(automatedSurface).message}\n`);
+					surfaceUnauthorizedHint({
+						auth,
+						baseUrlOverridden,
+						configDir: this.config.configDir,
+						payload: errorPayload
+					});
+					const listClient = apiClient.client;
+					const listEndpointsFn = () => listEndpoints({
+						client: listClient,
+						responseStyle: "fields"
+					});
+					await maybeWriteFunctionEndpointRedirect({
+						sdkName: operation.sdkName,
+						errorCode: extractErrorCode(errorPayload),
+						endpointId: typeof parsedFlags.id === "string" ? parsedFlags.id : void 0,
+						listEndpoints: listEndpointsFn,
+						writeStderr: (chunk) => {
+							process.stderr.write(chunk);
+						}
+					});
+					if (operation.sdkName === "getEmail" && extractErrorCode(errorPayload) === "not_found" && typeof parsedFlags.id === "string") await explainPendingMailNotFound(this.config.configDir, parsedFlags.id);
+					process.exitCode = 1;
+					return;
+				}
+				if (operation.binaryResponse) {
+					const blob = result.data;
+					const bytes = Buffer.from(await blob.arrayBuffer());
+					const output = parsedFlags.output;
+					if (typeof output === "string") {
+						writeFileSync(output, bytes);
+						return;
+					}
+					process.stdout.write(bytes);
+					return;
+				}
+				const envelope = result.data;
+				if (replyStateSurface) try {
+					const rows = Array.isArray(envelope?.data) ? envelope.data : [];
+					assertAwaitingFilterRows(rows, replyStateSurface);
+					if (rows.length === 0 && operation.sdkName === "searchEmails") await ensureSearchReportsReplyState(apiClient);
+				} catch (error) {
+					if (!(error instanceof ReplyStateUnsupportedError)) throw error;
+					process.stderr.write(`${error.message}\n`);
+					process.exitCode = 1;
+					return;
+				}
+				if (automatedSurface) try {
+					const rows = Array.isArray(envelope?.data) ? envelope.data : [];
+					assertAutomatedVerdict(rows, automatedSurface, expectedAutomatedVerdicts(query?.automated === "true" ? true : query?.automated === "false" ? false : void 0, typeof query?.q === "string" ? query.q : void 0));
+					if (rows.length === 0 && operation.sdkName === "searchEmails") await ensureSearchReportsAutomated(apiClient);
+				} catch (error) {
+					if (!(error instanceof AutomatedFilterUnsupportedError)) throw error;
+					process.stderr.write(`${error.message}\n`);
+					process.exitCode = 1;
+					return;
+				}
+				const jsonOutput = parsedFlags.json === true;
+				const withEnvelope = parsedFlags.envelope === true;
+				const cursor = envelope?.meta?.cursor;
+				if (cursor && !jsonOutput) process.stderr.write(`next cursor: ${cursor}\n`);
+				const summary = [];
+				if (Array.isArray(envelope?.data) && envelope.data.length === 0) {
+					const hint = EMPTY_RESULT_HINTS[operation.sdkName];
+					if (hint && jsonOutput) {
+						if (withEnvelope) summary.push(hint);
+					} else if (hint) process.stderr.write(`${hint}\n`);
+				}
+				writeIdempotentReplayBannerIfReplay(envelope?.data, { write: (chunk) => {
+					process.stderr.write(chunk);
+				} });
+				const successHook = OPERATION_SUCCESS_HOOKS[operation.sdkName];
+				if (successHook) try {
+					successHook({
+						envelope,
+						configDir: this.config.configDir,
+						apiBaseUrl: auth.apiBaseUrl,
+						writeStderr: (chunk) => {
+							process.stderr.write(chunk);
+						}
+					});
+				} catch (hookError) {
+					const detail = hookError instanceof Error ? hookError.message : String(hookError);
+					process.stderr.write(`Warning: ${operation.sdkName} succeeded but its post-success hook threw (${detail}). The response below is still valid; act on it manually.\n`);
+				}
+				this.log(JSON.stringify(jsonOutput && withEnvelope ? operationJsonDocument(envelope, summary) : operationOutputPayload(envelope, withEnvelope), null, 2));
+				if (isIncompleteDomainVerification(operation, envelope)) {
+					writeIncompleteDomainVerificationHint();
+					process.exitCode = 1;
+				}
+			});
+		}
+	}
+	return OperationCommand;
+}
+const EMPTY_RESULT_HINTS = {
+	listDeliveries: "(no results) No webhook deliveries logged yet. If you have an endpoint configured but expected to see test fires here: test deliveries from `primitive endpoints test` are NOT logged in this list, they're synchronous and visible only in the test-endpoint command's response. Real deliveries are logged when an inbound `email.received` event fans out to your endpoints. If you have no endpoints, run `primitive endpoints list` to check.",
+	listEndpoints: "(no results) No webhook endpoints configured. Add one with `primitive endpoints create --url <your-url>`.",
+	listEmails: "(no results) No inbound emails received yet on this account. Send one to a verified domain to populate this list. For a compact view, prefer `primitive emails latest`.",
+	listDomains: "(no results) No domains on this account. Add one with `primitive domains add --domain <yourdomain.example>`.",
+	listFilters: "(no results) No filter rules configured.",
+	listFunctions: "(no results) No Functions configured yet. Start with `primitive functions templates`, then `primitive functions init --template <template>` and `primitive functions deploy --name <name> --file <bundle>`."
+};
+function canonicalizeCliReferences(description) {
+	return description.replaceAll("`primitive emails:latest`", "`primitive emails latest`").replaceAll("`primitive describe emails:get-email | jq '.responseSchema.properties'`", "`primitive describe emails:get | jq '.responseSchema.properties'`");
 }
 //#endregion
-export { queryUsesAwaiting as $, listContacts as $t, thrownErrorExitCode as A, setMemory as An, deleteRoute as At, surfaceUnauthorizedHint as B, updateRepeatingSend as Bn, getEmail as Bt, priorRepliesThatWentOut as C, runWakeSchedule as Cn, createFunction as Ct, sentHistoryWindowStart as D, sendEmail as Dn, deleteAgentContact as Dt, sendOutcomeExitCode as E, semanticSearch as En, createWakeSchedule as Et, extractErrorCode as F, stopRepeatFromEmail as Fn, getAgentContactPolicy as Ft, ReplyStateUnsupportedError as G, verifyAgentSignup as Gn, getMemory as Gt, AWAITING_FLAG_DESCRIPTION as H, updateWakeAuthorization as Hn, getFunctionRouting as Ht, extractErrorPayload as I, testFunction as In, getContact as It, ensureSearchReportsReplyState as J, getSentEmail as Jt, assertAwaitingFilterRows as K, getOrgRoutingTopology as Kt, formatErrorPayload as L, unsetFunctionRoute as Ln, getConversation as Lt, API_ERROR_CODES as M, startAgentClaim as Mn, deleteWakeSchedule as Mt, TIME_FLAG_DESCRIPTION as N, startAgentSignup as Nn, downloadEmailAttachmentPart as Nt, serializeErrorPayload as O, setFunctionRoute as On, deleteContact as Ot, createOperationCommand as P, startCliLogin as Pn, getAccount as Pt, isAwaitingRejectedError as Q, listAgentNetworks as Qt, readTextFileFlag as R, updateDefaultNetworkMember as Rn, getCreditBalance as Rt, formatSendRecordFailureSummary as S, resendAgentSignupVerification as Sn, createEndpoint as St, sendIdentityFields as T, searchMemories as Tn, createWakeAuthorization as Tt, AWAITING_VALUES as U, updateWakeSchedule as Un, getFunctionTestRunTrace as Ut, writeErrorWithHints as V, updateRoute as Vn, getFunction as Vt, REPLY_STATE_UNSUPPORTED_CODE as W, verifyAgentClaim as Wn, getInboxStatus as Wt, formatRepliesCell as X, getWakeSchedule as Xt, formatAwaitingCell as Y, getThread as Yt, hasReplyState as Z, listAgentContacts as Zt, deriveSendIdempotencyKey as _, putContact as _n, resolveCliApiRequestConfig as _t, replyExpectation as a, listFunctionLogs as an, AutomatedFilterUnsupportedError as at, formatPriorRepliesWarning as b, reorderRoutes as bn, cliLogout as bt, wakeInteractionSentence as c, listRoutes as cn, ensureSearchReportsAutomated as ct, apiResultHttpStatus as d, listWakeDispatches as dn, isAutomatedRejectedError as dt, listDefaultNetworkAgents as en, formatAlreadySentNotice as et, assertValidIdempotencyKey as f, listWakeSchedules as fn, queryUsesAutomated as ft, classifySendError as g, putAgentContactPolicy as gn, refreshStoredCliCredentials as gt, checkPriorReplies as h, putAgentContact as hn, createCliApiClient as ht, readEmailInteraction as i, listEndpoints as in, AUTOMATED_VALUES as it, API_BASE_URL_FLAG_DESCRIPTION as j, simulateRoute as jn, deleteWakeAuthorization as jt, successfulSendOutcome as k, setFunctionSecret as kn, deleteMemory as kt, IDEMPOTENCY_KEY_FLAG_DESCRIPTION as l, listSentEmails as ln, expectedAutomatedVerdicts as lt, buildThrownSendFailureEnvelope as m, pullWebhookEvent as mn, createAuthenticatedCliApiClient as mt, interactionNextActions as n, listDomains as nn, AUTOMATED_FILTER_UNSUPPORTED_CODE as nt, replyInteractionWarning as o, listFunctions as on, assertAutomatedVerdict as ot, buildFollowUpCommand as p, pollCliLogin as pn, SAVED_CLI_OAUTH_SESSION_EXPIRED_MESSAGE as pt, awaitingRejectedError as q, getRepeatingSend as qt, isWakeInteractionLabel as r, listEmails as rn, AUTOMATED_FLAG_DESCRIPTION as rt, wakeInteractionLabel as s, listRepeatingSends as sn, automatedRejectedError as st, interactionHumanLine as t, listDefaultNetworkMembers as tn, writeIdempotentReplayBannerIfReplay as tt, SEND_OUTCOME_HELP as u, listWakeAuthorizations as un, hasAutomatedVerdict as ut, formatDeletedEarlierSendNotice as v, redeemCreditCode as vn, addDefaultNetworkMember as vt, reportSendCommandResult as w, searchEmails as wn, createRoute as wt, formatSendFailureSummary as x, replyToEmail as xn, completeWebhookEvent as xt, formatPriorRepliesCheckSkipped as y, removeDefaultNetworkMember as yn, checkDefaultNetworkContactAdmission as yt, runWithTiming as z, updateFunction as zn, getDefaultNetworkAgent as zt };
+export { buildThrownSendFailureEnvelope as $, testFunction as $n, getContact as $t, readThreadContext as A, pollCliLogin as An, SAVED_CLI_OAUTH_SESSION_EXPIRED_MESSAGE as At, recordPendingMail as B, runWakeSchedule as Bn, createFunction as Bt, queryUsesAwaiting as C, listFunctions as Cn, assertAutomatedVerdict as Ct, displayAddress as D, listWakeAuthorizations as Dn, hasAutomatedVerdict as Dt, describeWake as E, listSentEmails as En, expectedAutomatedVerdicts as Et, wakeRecipientField as F, redeemCreditCode as Fn, addDefaultNetworkMember as Ft, replyExpectation as G, setFunctionRoute as Gn, deleteContact as Gt, interactionHumanLine as H, searchMemories as Hn, createWakeAuthorization as Ht, wakeRelationship as I, removeDefaultNetworkMember as In, checkDefaultNetworkContactAdmission as It, IDEMPOTENCY_KEY_FLAG_DESCRIPTION as J, simulateRoute as Jn, deleteWakeAuthorization as Jt, replyInteractionWarning as K, setFunctionSecret as Kn, deleteMemory as Kt, clearReadPendingMail as L, reorderRoutes as Ln, cliLogout as Lt, serverMuted as M, putAgentContact as Mn, createCliApiClient as Mt, serverRelationship as N, putAgentContactPolicy as Nn, refreshStoredCliCredentials as Nt, formatWakeContext as O, listWakeDispatches as On, isAutomatedRejectedError as Ot, wakeReadCommand as P, putContact as Pn, resolveCliApiRequestConfig as Pt, buildFollowUpCommand as Q, stopRepeatFromEmail as Qn, getAgentContactPolicy as Qt, pendingMailPath as R, replyToEmail as Rn, completeWebhookEvent as Rt, isAwaitingRejectedError as S, listFunctionLogs as Sn, AutomatedFilterUnsupportedError as St, bareAddress as T, listRoutes as Tn, ensureSearchReportsAutomated as Tt, interactionNextActions as U, semanticSearch as Un, createWakeSchedule as Ut, removePendingMail as V, searchEmails as Vn, createRoute as Vt, readEmailInteraction as W, sendEmail as Wn, deleteAgentContact as Wt, apiResultHttpStatus as X, startAgentSignup as Xn, downloadEmailAttachmentPart as Xt, SEND_OUTCOME_HELP as Y, startAgentClaim as Yn, deleteWakeSchedule as Yt, assertValidIdempotencyKey as Z, startCliLogin as Zn, getAccount as Zt, awaitingRejectedError as _, listDefaultNetworkAgents as _n, formatAlreadySentNotice as _t, extractErrorCode as a, getFunctionRouting as an, updateWakeAuthorization as ar, formatPriorRepliesWarning as at, formatRepliesCell as b, listEmails as bn, AUTOMATED_FLAG_DESCRIPTION as bt, readTextFileFlag as c, getMemory as cn, verifyAgentSignup as cr, priorRepliesThatWentOut as ct, writeErrorWithHints as d, getSentEmail as dn, sendOutcomeExitCode as dt, getConversation as en, unsetFunctionRoute as er, checkPriorReplies as et, AWAITING_FLAG_DESCRIPTION as f, getThread as fn, sentHistoryWindowStart as ft, assertAwaitingFilterRows as g, listContacts as gn, currentMailSessionKey as gt, ReplyStateUnsupportedError as h, listAgentNetworks as hn, thrownErrorExitCode as ht, createOperationCommand as i, getFunction as in, updateRoute as ir, formatPriorRepliesCheckSkipped as it, sentInThread as j, pullWebhookEvent as jn, createAuthenticatedCliApiClient as jt, latestOwnOutbound as k, listWakeSchedules as kn, queryUsesAutomated as kt, runWithTiming as l, getOrgRoutingTopology as ln, reportSendCommandResult as lt, REPLY_STATE_UNSUPPORTED_CODE as m, listAgentContacts as mn, successfulSendOutcome as mt, API_ERROR_CODES as n, getDefaultNetworkAgent as nn, updateFunction as nr, deriveSendIdempotencyKey as nt, extractErrorPayload as o, getFunctionTestRunTrace as on, updateWakeSchedule as or, formatSendFailureSummary as ot, AWAITING_VALUES as p, getWakeSchedule as pn, serializeErrorPayload as pt, wakeInteractionSentence as q, setMemory as qn, deleteRoute as qt, TIME_FLAG_DESCRIPTION as r, getEmail as rn, updateRepeatingSend as rr, formatDeletedEarlierSendNotice as rt, formatErrorPayload as s, getInboxStatus as sn, verifyAgentClaim as sr, formatSendRecordFailureSummary as st, API_BASE_URL_FLAG_DESCRIPTION as t, getCreditBalance as tn, updateDefaultNetworkMember as tr, classifySendError as tt, surfaceUnauthorizedHint as u, getRepeatingSend as un, sendIdentityFields as ut, ensureSearchReportsReplyState as v, listDefaultNetworkMembers as vn, writeIdempotentReplayBannerIfReplay as vt, explainPendingMailNotFound as w, listRepeatingSends as wn, automatedRejectedError as wt, hasReplyState as x, listEndpoints as xn, AUTOMATED_VALUES as xt, formatAwaitingCell as y, listDomains as yn, AUTOMATED_FILTER_UNSUPPORTED_CODE as yt, readPendingMail as z, resendAgentSignupVerification as zn, createEndpoint as zt };