primcli 1.44.0 → 1.45.0

package/dist/oclif/index.js

@@ -13069,6 +13069,38 @@ const openapiDocument = {
 						"attachments_download_available": {
 							"type": "boolean",
 							"description": "Whether an inline attachment archive has been successfully retained and is available for download. Download authorization is checked separately; address-bound agent connection keys cannot download archives."
+						},
+						"to_addresses": {
+							"type": ["array", "null"],
+							"items": { "type": "string" },
+							"description": "Every normalized To recipient of the send. Always populated on\nnew sends (a single-recipient send carries a one-element array);\nnull only on records that predate this field. `to_address` keeps\ncarrying the first recipient.\n"
+						},
+						"cc": {
+							"type": ["array", "null"],
+							"items": { "type": "string" },
+							"description": "Normalized Cc address list. Null when the send had no Cc\nrecipients.\n"
+						},
+						"bcc": {
+							"type": ["array", "null"],
+							"items": { "type": "string" },
+							"description": "Normalized Bcc address list, surfaced on the sending\norganization's own record. Bcc recipients are never written\ninto the transmitted message. Null when the send had no Bcc\nrecipients. Also null when the request uses an address-bound\nagent connection key whose address is not the sender, because\nBcc is withheld from recipients.\n"
+						},
+						"reply_to": {
+							"type": ["array", "null"],
+							"items": { "type": "string" },
+							"description": "Normalized Reply-To address list. Null when the send had none.\n"
+						},
+						"tags": {
+							"type": ["array", "null"],
+							"description": "Customer metadata tags stored verbatim at send time. Null when\nthe send had none. Also null when the request uses an\naddress-bound agent connection key whose address is not the\nsender, because tags are withheld from recipients.\n",
+							"items": {
+								"type": "object",
+								"properties": {
+									"name": { "type": "string" },
+									"value": { "type": "string" }
+								},
+								"required": ["name", "value"]
+							}
 						}
 					}
 				}],
@@ -31319,6 +31351,38 @@ const operationManifest = [
 					"attachments_download_available": {
 						"type": "boolean",
 						"description": "Whether an inline attachment archive has been successfully retained and is available for download. Download authorization is checked separately; address-bound agent connection keys cannot download archives."
+					},
+					"to_addresses": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Every normalized To recipient of the send. Always populated on\nnew sends (a single-recipient send carries a one-element array);\nnull only on records that predate this field. `to_address` keeps\ncarrying the first recipient.\n"
+					},
+					"cc": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Cc address list. Null when the send had no Cc\nrecipients.\n"
+					},
+					"bcc": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Bcc address list, surfaced on the sending\norganization's own record. Bcc recipients are never written\ninto the transmitted message. Null when the send had no Bcc\nrecipients. Also null when the request uses an address-bound\nagent connection key whose address is not the sender, because\nBcc is withheld from recipients.\n"
+					},
+					"reply_to": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Reply-To address list. Null when the send had none.\n"
+					},
+					"tags": {
+						"type": ["array", "null"],
+						"description": "Customer metadata tags stored verbatim at send time. Null when\nthe send had none. Also null when the request uses an\naddress-bound agent connection key whose address is not the\nsender, because tags are withheld from recipients.\n",
+						"items": {
+							"type": "object",
+							"properties": {
+								"name": { "type": "string" },
+								"value": { "type": "string" }
+							},
+							"required": ["name", "value"]
+						}
 					}
 				}
 			}],
@@ -32022,6 +32086,38 @@ const operationManifest = [
 					"attachments_download_available": {
 						"type": "boolean",
 						"description": "Whether an inline attachment archive has been successfully retained and is available for download. Download authorization is checked separately; address-bound agent connection keys cannot download archives."
+					},
+					"to_addresses": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Every normalized To recipient of the send. Always populated on\nnew sends (a single-recipient send carries a one-element array);\nnull only on records that predate this field. `to_address` keeps\ncarrying the first recipient.\n"
+					},
+					"cc": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Cc address list. Null when the send had no Cc\nrecipients.\n"
+					},
+					"bcc": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Bcc address list, surfaced on the sending\norganization's own record. Bcc recipients are never written\ninto the transmitted message. Null when the send had no Bcc\nrecipients. Also null when the request uses an address-bound\nagent connection key whose address is not the sender, because\nBcc is withheld from recipients.\n"
+					},
+					"reply_to": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Reply-To address list. Null when the send had none.\n"
+					},
+					"tags": {
+						"type": ["array", "null"],
+						"description": "Customer metadata tags stored verbatim at send time. Null when\nthe send had none. Also null when the request uses an\naddress-bound agent connection key whose address is not the\nsender, because tags are withheld from recipients.\n",
+						"items": {
+							"type": "object",
+							"properties": {
+								"name": { "type": "string" },
+								"value": { "type": "string" }
+							},
+							"required": ["name", "value"]
+						}
 					}
 				}
 			}],
@@ -33009,6 +33105,38 @@ const operationManifest = [
 					"attachments_download_available": {
 						"type": "boolean",
 						"description": "Whether an inline attachment archive has been successfully retained and is available for download. Download authorization is checked separately; address-bound agent connection keys cannot download archives."
+					},
+					"to_addresses": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Every normalized To recipient of the send. Always populated on\nnew sends (a single-recipient send carries a one-element array);\nnull only on records that predate this field. `to_address` keeps\ncarrying the first recipient.\n"
+					},
+					"cc": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Cc address list. Null when the send had no Cc\nrecipients.\n"
+					},
+					"bcc": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Bcc address list, surfaced on the sending\norganization's own record. Bcc recipients are never written\ninto the transmitted message. Null when the send had no Bcc\nrecipients. Also null when the request uses an address-bound\nagent connection key whose address is not the sender, because\nBcc is withheld from recipients.\n"
+					},
+					"reply_to": {
+						"type": ["array", "null"],
+						"items": { "type": "string" },
+						"description": "Normalized Reply-To address list. Null when the send had none.\n"
+					},
+					"tags": {
+						"type": ["array", "null"],
+						"description": "Customer metadata tags stored verbatim at send time. Null when\nthe send had none. Also null when the request uses an\naddress-bound agent connection key whose address is not the\nsender, because tags are withheld from recipients.\n",
+						"items": {
+							"type": "object",
+							"properties": {
+								"name": { "type": "string" },
+								"value": { "type": "string" }
+							},
+							"required": ["name", "value"]
+						}
 					}
 				}
 			}],
@@ -35849,7 +35977,13 @@ function boundKey(item) {
 * session a second address. A profile that still has any receive hook for
 * the session, or the only profile bound to a session, is restored as usual.
 */
-function heldSessionProfiles(hooks, bound, restore) {
+/**
+* For each session, the connected profiles it receives as through the
+* per-session receive hooks in `hooks`, keyed like `boundKey`. A hook for a
+* disconnected or removed profile is stale (machine doctor removes it), so
+* the session does not receive through it.
+*/
+function receivingProfilesBySession(hooks, always) {
 	const receiving = /* @__PURE__ */ new Map();
 	for (const event of SESSION_EVENTS) {
 		const entries = hooks[event];
@@ -35859,18 +35993,42 @@ function heldSessionProfiles(hooks, bound, restore) {
 			for (const hook of entry.hooks) {
 				const parsed = parseSessionHook(hook);
 				if (!parsed?.profile || !parsed.session) continue;
-				if (!existsSync(parsed.configDir) || !profileStillConnected(parsed.configDir, parsed.profile)) continue;
 				const session = parsed.session.toLowerCase();
-				const profiles = receiving.get(session) ?? /* @__PURE__ */ new Set();
-				profiles.add([
+				const key = [
 					resolve(parsed.configDir),
 					parsed.profile,
 					session
-				].join("\0"));
+				].join("\0");
+				if (key !== always && (!existsSync(parsed.configDir) || !profileStillConnected(parsed.configDir, parsed.profile))) continue;
+				const profiles = receiving.get(session) ?? /* @__PURE__ */ new Set();
+				profiles.add(key);
 				receiving.set(session, profiles);
 			}
 		}
 	}
+	return receiving;
+}
+/**
+* The other connected profiles a session already receives as, when `target`
+* itself has no receive hook for it. Adding `target`'s hooks then would give
+* the session a second address; an empty list means it would not (the
+* session receives as nobody else, or `target` already has hooks there and
+* only needs them repaired). Uses the same rule as machine doctor, so an
+* automatic install never binds a profile doctor would leave alone.
+*/
+function otherSessionReceivers(hooks, target) {
+	const session = target.session.toLowerCase();
+	const own = [
+		resolve(target.configDir),
+		target.profile,
+		session
+	].join("\0");
+	const present = receivingProfilesBySession(hooks, own).get(session) ?? /* @__PURE__ */ new Set();
+	if (present.has(own)) return [];
+	return [...present].map((other) => other.split("\0")[1] ?? "").sort();
+}
+function heldSessionProfiles(hooks, bound, restore) {
+	const receiving = receivingProfilesBySession(hooks);
 	const held = /* @__PURE__ */ new Map();
 	for (const item of bound) {
 		const key = boundKey(item);
@@ -36272,11 +36430,18 @@ function installClaudeWakeHook(options) {
 		const agentAddress = mailAddress(options.agentAddress);
 		if (!SESSION_UUID$1.test(options.sessionId)) return "unavailable";
 		const sessionId = options.sessionId.toLowerCase();
-		return editClaudeSettings(resolve((options.env ?? process.env).CLAUDE_CONFIG_DIR || join(homedir(), ".claude")), (settings) => {
+		const claudeDir = resolve((options.env ?? process.env).CLAUDE_CONFIG_DIR || join(homedir(), ".claude"));
+		let held = false;
+		if (!editClaudeSettings(claudeDir, (settings) => {
 			const hooks = settings.hooks ?? {};
 			if (!record$3(hooks)) throw new Error("Invalid hook settings");
 			for (const event of WAKE_EVENTS) if (!Array.isArray(hooks[event] ?? [])) throw new Error(`Invalid ${event} hooks`);
 			if (!Array.isArray(hooks[PENDING_EVENT] ?? [])) throw new Error(`Invalid ${PENDING_EVENT} hooks`);
+			held = options.yieldToOtherProfiles === true && otherSessionReceivers(hooks, {
+				configDir,
+				profile: profileName,
+				session: sessionId
+			}).length > 0;
 			const hook = {
 				type: "command",
 				command: process.execPath,
@@ -36320,19 +36485,26 @@ function installClaudeWakeHook(options) {
 				}
 			};
 			const nextHooks = { ...hooks };
-			for (const event of WAKE_EVENTS) nextHooks[event] = [...(hooks[event] ?? []).flatMap((entry) => {
-				if (!record$3(entry) || !Array.isArray(entry.hooks)) return [entry];
-				const siblings = entry.hooks.filter((candidate) => !isOwnHook(candidate));
-				if (siblings.length === entry.hooks.length) return [entry];
-				return siblings.length ? [{
-					...entry,
-					hooks: siblings
-				}] : [];
-			}), event === "SessionStart" ? {
-				matcher: "resume",
-				hooks: [hook]
-			} : { hooks: [hook] }];
-			nextHooks[PENDING_EVENT] = [...(hooks[PENDING_EVENT] ?? []).flatMap((entry) => {
+			for (const event of WAKE_EVENTS) {
+				const entries = hooks[event];
+				const retained = (entries ?? []).flatMap((entry) => {
+					if (!record$3(entry) || !Array.isArray(entry.hooks)) return [entry];
+					const siblings = entry.hooks.filter((candidate) => !isOwnHook(candidate));
+					if (siblings.length === entry.hooks.length) return [entry];
+					return siblings.length ? [{
+						...entry,
+						hooks: siblings
+					}] : [];
+				});
+				if (held) {
+					if (entries) nextHooks[event] = retained;
+				} else nextHooks[event] = [...retained, event === "SessionStart" ? {
+					matcher: "resume",
+					hooks: [hook]
+				} : { hooks: [hook] }];
+			}
+			const pendingEntries = hooks[PENDING_EVENT];
+			const pendingRetained = (pendingEntries ?? []).flatMap((entry) => {
 				if (!record$3(entry) || !Array.isArray(entry.hooks)) return [entry];
 				const siblings = entry.hooks.filter((candidate) => !isOwnPendingHook(candidate));
 				if (siblings.length === entry.hooks.length) return [entry];
@@ -36340,12 +36512,17 @@ function installClaudeWakeHook(options) {
 					...entry,
 					hooks: siblings
 				}] : [];
-			}), { hooks: [pendingHook] }];
+			});
+			if (held) {
+				if (pendingEntries) nextHooks[PENDING_EVENT] = pendingRetained;
+			} else nextHooks[PENDING_EVENT] = [...pendingRetained, { hooks: [pendingHook] }];
+			if (held && JSON.stringify(nextHooks) === JSON.stringify(hooks)) return null;
 			return {
 				...settings,
 				hooks: nextHooks
 			};
-		}) ? "installed_unverified" : "unavailable";
+		})) return "unavailable";
+		return held ? "held_for_other_profile" : "installed_unverified";
 	} catch {
 		return "unavailable";
 	}
@@ -39356,6 +39533,7 @@ function withDefined(defaults, overrides) {
 		...Object.fromEntries(Object.entries(overrides ?? {}).filter(([, value]) => value !== void 0))
 	};
 }
+const HELD_DETAIL = "This session already receives as another connected profile, so this profile's receive hooks were not added. Run `primitive machine doctor --fix --profile <profile>` to bind it deliberately.";
 const ENDED_DETAIL = "This session ended, so its agent was disconnected. A new address is never created for the same session.";
 const ENDED_PENDING_DETAIL = "This session ended, but disconnecting its agent has not been confirmed yet; `primitive machine doctor --fix` retries it.";
 /**
@@ -39474,14 +39652,19 @@ async function registerSession(options) {
 				agentInfo: seeded
 			} : current);
 		};
-		const installHook = (profile) => runtime !== "claude" || receiverMode(agentProfileDirectory(options.configDir, profileName)) !== "external" || deps.installClaudeHook({
-			cliPath: options.cliPath,
-			configDir: options.configDir,
-			profileName,
-			agentAddress: profile.agent_address,
-			sessionId,
-			env
-		}) === "installed_unverified";
+		const claudeHook = (agentAddress) => {
+			const outcome = deps.installClaudeHook({
+				cliPath: options.cliPath,
+				configDir: options.configDir,
+				profileName,
+				agentAddress,
+				sessionId,
+				env,
+				yieldToOtherProfiles: true
+			});
+			return outcome === "installed_unverified" ? "installed" : outcome === "held_for_other_profile" ? "held" : "failed";
+		};
+		const installHook = (profile) => runtime !== "claude" || receiverMode(agentProfileDirectory(options.configDir, profileName)) !== "external" ? "installed" : claudeHook(profile.agent_address);
 		const existing = loadConnectedAgentProfile(options.configDir, profileName);
 		if (existing) {
 			record = await updateSessionRecord(options.configDir, sessionId, (current) => current ?? newRecord("existing", existing.agent_address));
@@ -39515,7 +39698,7 @@ async function registerSession(options) {
 					...withAddress,
 					receiving: RECEIVING[runtime],
 					status: "already_registered",
-					detail: hooked ? "This session is already connected." : "This session is already connected, but its receive hook could not be installed. Run `primitive machine doctor`."
+					detail: hooked === "installed" ? "This session is already connected." : hooked === "held" ? HELD_DETAIL : "This session is already connected, but its receive hook could not be installed. Run `primitive machine doctor`."
 				};
 			}
 		} else if (record?.address && record.createdBy === "session-register" && !enrollmentAddress(options.configDir, profileName).exists || record?.createdBy === "existing") return {
@@ -39576,15 +39759,8 @@ async function registerSession(options) {
 		const address = result.identity.agentAddress;
 		const submitted = verificationReplySubmitted(result.verification.state);
 		const status = result.connection.status;
-		let hooked = true;
-		if (runtime === "claude" && submitted && status !== "owner_inactive") hooked = deps.installClaudeHook({
-			cliPath: options.cliPath,
-			configDir: options.configDir,
-			profileName,
-			agentAddress: address,
-			sessionId,
-			env
-		}) === "installed_unverified";
+		let hooked = "installed";
+		if (runtime === "claude" && submitted && status !== "owner_inactive") hooked = claudeHook(address);
 		if (status === "connected") await finishAgentInfo();
 		const withAddress = {
 			...known,
@@ -39594,7 +39770,7 @@ async function registerSession(options) {
 		if (status === "connected") return {
 			...withAddress,
 			status: "registered",
-			detail: hooked ? `Connected as ${address}.` : `Connected as ${address}, but the receive hook could not be installed. Run \`primitive machine doctor\`.`
+			detail: hooked === "installed" ? `Connected as ${address}.` : hooked === "held" ? `Connected as ${address}. ${HELD_DETAIL}` : `Connected as ${address}, but the receive hook could not be installed. Run \`primitive machine doctor\`.`
 		};
 		if (status === "revoked" || status === "owner_inactive") return {
 			...withAddress,
@@ -47338,7 +47514,7 @@ const PRIMITIVE_TEAM_AUTHOR = {
 	url: "https://primitive.dev"
 };
 const SDK_VERSION_RANGE = "^1.34.0";
-const CLI_VERSION_RANGE = "^1.44.0";
+const CLI_VERSION_RANGE = "^1.45.0";
 const ESBUILD_VERSION_RANGE = "^0.27.0";
 function renderHandler() {
 	return `// env.PRIMITIVE_API_KEY, env.PRIMITIVE_WEBHOOK_SECRET, and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "primcli",
-  "version": "1.44.0",
+  "version": "1.45.0",
   "description": "Official Primitive CLI: deploy Primitive Functions, send and inspect mail, manage endpoints, all from the terminal. Wraps the @primitivedotdev/sdk runtime client with one-shot commands.",
   "type": "module",
   "sideEffects": false,