primcli 1.47.0 → 1.48.0

package/README.md

@@ -167,11 +167,11 @@ is complete.
 
 Use `primitive signin` or `primitive login` for existing accounts. With no email, both use browser approval; `primitive signin browser` and `primitive login browser` are the explicit browser forms.
 
-Use `primitive signin <email> --signup-code <code> --accept-terms`, then `primitive signin confirm <email> <code>` for email-code sign-in. `primitive login <email>` and `primitive otp <email>` support the same email-code flow with matching `confirm` and `resend` subcommands.
+Use `primitive signin <email> --accept-terms`, then `primitive signin confirm <email> <code>` for email-code sign-in. `primitive login <email>` and `primitive otp <email>` support the same email-code flow with matching `confirm` and `resend` subcommands.
 
 Use `primitive logout --force` to remove local CLI credentials, pending email-code auth state, and stale credential locks without contacting Primitive. This is the recovery command when an interrupted auth command leaves the CLI saying another credential operation is already in progress.
 
-Use `primitive signup <email>` for new account creation, then `primitive signup confirm <email> <code>` with the emailed verification code. Non-interactive signup is available with `--accept-terms` (pass `--signup-code <code>` too if you have one).
+Use `primitive signup <email>` for new account creation, then `primitive signup confirm <email> <code>` with the emailed verification code. Non-interactive signup is available with `--accept-terms`.
 
 ## Reply state and the agent loop
 

package/dist/{api-command-C1JvJqV0.js → api-command-DzQ8KxD9.js}

@@ -211,9 +211,8 @@ const pollCliLogin = (options) => (options.client ?? client).post({
 /**
 * Start CLI account signup
 *
-* Starts a terminal-native CLI signup. `signup_code` is optional;
-* omit it to sign up without one. The API creates a pending signup
-* session, sends an email verification code, and returns an opaque
+* Starts a terminal-native CLI signup. The API creates a pending
+* signup session, sends an email verification code, and returns an opaque
 * signup token used by the resend and verify steps. This endpoint
 * does not require an API key.
 *
@@ -245,11 +244,9 @@ const resendCliSignupVerification = (options) => (options.client ?? client).post
 * Verify CLI signup and create OAuth session
 *
 * Verifies the email code for a CLI signup session and creates the
-* account. When the session was started with a `signup_code`, the
-* reserved code is redeemed; sessions started without a code skip
-* the redemption step. Either way an org-scoped OAuth CLI session
-* is created and the token set is returned exactly once. This
-* endpoint does not require an API key.
+* account. An org-scoped OAuth CLI session is created and the
+* token set is returned exactly once. This endpoint does not
+* require an API key.
 *
 */
 const verifyCliSignup = (options) => (options.client ?? client).post({
@@ -263,9 +260,8 @@ const verifyCliSignup = (options) => (options.client ?? client).post({
 /**
 * Start agent account signup
 *
-* Starts an agent-native signup session. `signup_code` is optional;
-* omit it to sign up without one. The API creates a pending signup
-* session, sends an email verification code, and returns an opaque
+* Starts an agent-native signup session. The API creates a pending
+* signup session, sends an email verification code, and returns an opaque
 * signup token used by the resend and verify steps. This endpoint
 * does not require an API key.
 *
@@ -297,14 +293,10 @@ const resendAgentSignupVerification = (options) => (options.client ?? client).po
 * Verify agent signup and create OAuth tokens
 *
 * Verifies the email code for an agent signup session and creates
-* the account when needed. When the session was started with a
-* `signup_code`, the reserved code is redeemed; sessions started
-* without a code skip the redemption step. An org-scoped OAuth
-* session for CLI authentication is minted and the raw tokens are
-* returned exactly once. For existing users, the optional `org_id`
-* selects which accessible workspace should receive the new
-* session (no signup-code redemption is performed for existing
-* users regardless of how the session was started).
+* the account when needed. An org-scoped OAuth session for CLI
+* authentication is minted and the raw tokens are returned exactly
+* once. For existing users, the optional `org_id` selects which
+* accessible workspace should receive the new session.
 *
 */
 const verifyAgentSignup = (options) => (options.client ?? client).post({
@@ -4891,7 +4883,7 @@ function savedConnectedProfiles(configDir, exclude) {
 */
 async function otherProfiles(configDir, session, current) {
 	if (session) try {
-		const { connectedProfilesForSession } = await import("./machine-session-Dr5W2fHb.js").then((n) => n.s);
+		const { connectedProfilesForSession } = await import("./machine-session-BaJ1Xmdm.js").then((n) => n.s);
 		return {
 			inSession: true,
 			profiles: connectedProfilesForSession(configDir, session, current)
@@ -5564,7 +5556,7 @@ const OPERATION_HINTS = {
 	getMemory: "Tip: prefer `primitive memories get <key> [--function <function-id>]` for the common read path.",
 	deleteMemory: "Tip: prefer `primitive memories delete <key> [--function <function-id>]` for the common delete path.",
 	searchMemories: "Tip: prefer `primitive memories search [prefix] [--metadata-only] [--function <function-id>]` for the common search path.",
-	startAgentSignup: "Tip: pass --terms-accepted, and optionally --signup-code <code> if you have one. Capture the signup_token from the response and feed it to `primitive agent verify-agent-signup --signup-token <token> --verification-code <6-digit-code>` (the verify flag accepts --code as an alias). The high-level `primitive signup <email>` command walks an interactive user through both steps with friendlier prompts.",
+	startAgentSignup: "Tip: pass --terms-accepted. Capture the signup_token from the response and feed it to `primitive agent verify-agent-signup --signup-token <token> --verification-code <6-digit-code>` (the verify flag accepts --code as an alias). The high-level `primitive signup <email>` command walks an interactive user through both steps with friendlier prompts.",
 	verifyAgentSignup: "Tip: pass --verification-code <code> (or --code; both work). The response carries OAuth tokens but not your assigned inbox domain; run `primitive domains list` (or `primitive whoami`) after success to see the managed *.primitive.email address that routes to this account."
 };
 const OPERATION_FLAG_ALIASES = { verifyAgentSignup: { verification_code: ["code"] } };

package/dist/{connect-skill-CH2pq436.js → connect-skill-DHPc9dVN.js}

@@ -1,4 +1,4 @@
-import { P as wakeReadCommand, Zt as downloadEmailAttachmentPart, q as wakeInteractionSentence } from "./api-command-C1JvJqV0.js";
+import { P as wakeReadCommand, Zt as downloadEmailAttachmentPart, q as wakeInteractionSentence } from "./api-command-DzQ8KxD9.js";
 import { _ as acquireListenLock, g as ListenStateError, y as listenIdentity } from "./shared-mail-files-SPPcis9g.js";
 import { _ as isTrustedSender, c as classifySignalContent, g as isEmailReceivedEvent, v as parseWebhookEvent } from "./repeats-D2xtLium-DdiJECLI.js";
 import { closeSync, copyFileSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, opendirSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";

package/dist/{machine-session-Dr5W2fHb.js → machine-session-BaJ1Xmdm.js}

@@ -1,8 +1,8 @@
 import { n as __exportAll } from "./rolldown-runtime-CNZpIYwj.js";
 import { B as parseOwnerMemberAddress, F as agentProfilesDirectory, I as connectedAgentIdentity, L as connectedApiBaseUrl, M as AgentConnectionSetupError, N as agentProfileDirectory, P as agentProfileName, R as loadConnectedAgentProfile, U as saveConnectedAgentProfile, V as profileAlreadyConnectedMessage, W as PrimitiveApiClient, j as AGENT_PROFILE_ENV, x as loadCliCredentials, z as parseConnectedAgentProfile } from "./cli-config-DGrZCUfw.js";
-import { $t as getAgentContactPolicy, Dn as listSentEmails, Fn as putContact, Gn as sendEmail, Gt as deleteAgentContact, Hn as searchEmails, Kt as deleteContact, Nn as putAgentContact, Pn as putAgentContactPolicy, Pt as refreshStoredCliCredentials, _n as listContacts, bn as listDomains, en as getContact, hn as listAgentContacts, in as getEmail } from "./api-command-C1JvJqV0.js";
+import { $t as getAgentContactPolicy, Dn as listSentEmails, Fn as putContact, Gn as sendEmail, Gt as deleteAgentContact, Hn as searchEmails, Kt as deleteContact, Nn as putAgentContact, Pn as putAgentContactPolicy, Pt as refreshStoredCliCredentials, _n as listContacts, bn as listDomains, en as getContact, hn as listAgentContacts, in as getEmail } from "./api-command-DzQ8KxD9.js";
 import { _ as acquireListenLock, c as mailTime, d as readMailJson, f as removeMailFile, g as ListenStateError, h as writeMailJson, i as mailId, l as privateMailDirectory, o as mailObject, r as mailAddress, s as mailString } from "./shared-mail-files-SPPcis9g.js";
-import { a as readBundledConnectSkill, h as connectNativeSession, m as SESSION_UUID, n as detectAgentRuntime, o as notificationScope, r as installConnectSkill, u as NotificationRetryError } from "./connect-skill-CH2pq436.js";
+import { a as readBundledConnectSkill, h as connectNativeSession, m as SESSION_UUID, n as detectAgentRuntime, o as notificationScope, r as installConnectSkill, u as NotificationRetryError } from "./connect-skill-DHPc9dVN.js";
 import { l as stopBackgroundListen, r as backgroundListenStatus } from "./listen-background-CyLc8VBn.js";
 import { t as readSharedMailOwner } from "./shared-mail-watch-BUfUaq6j.js";
 import { a as scopedChatSenderTrust } from "./scoped-chat-DhxtuNXs.js";

package/dist/oclif/auto-signal-worker.js

@@ -1,6 +1,6 @@
-import { A as readThreadContext, Mt as createAuthenticatedCliApiClient, fn as getSentEmail } from "../api-command-C1JvJqV0.js";
+import { A as readThreadContext, Mt as createAuthenticatedCliApiClient, fn as getSentEmail } from "../api-command-DzQ8KxD9.js";
 import { _ as acquireListenLock } from "../shared-mail-files-SPPcis9g.js";
-import { t as sendSignal } from "../signal-command-Dbyqyas9.js";
+import { t as sendSignal } from "../signal-command-BbeV2Nd8.js";
 import { AUTO_SIGNAL_KIND_ENV, AUTO_WORKING_RENEW_MS, autoSignalsDisabled, clearWorkingSending, markWorkingSending, readAutoClaim, readWorkingLease, recordRenewer, stopWorkingLease, writeWorkingLease } from "./auto-signals.js";
 import { join } from "node:path";
 import { homedir } from "node:os";

package/dist/oclif/index.js

@@ -1,11 +1,11 @@
 import { A as saveActiveChatState, C as resolveCliAuth, D as deleteChatState, E as chatStatePath, F as agentProfilesDirectory, H as requireDefaultLoginProfile, M as AgentConnectionSetupError, N as agentProfileDirectory, O as loadActiveChatState, P as agentProfileName, R as loadConnectedAgentProfile, T as saveSignupCredentials, W as PrimitiveApiClient, _ as deleteCliCredentials, a as normalizeCliEnvironmentName, b as hasStoredCliLogin, c as resolveConfigEnvironment, g as credentialsPath, h as credentialsLockPath, i as loadCliConfig, j as AGENT_PROFILE_ENV, k as loadChatConversationByLocalId, l as saveCliConfig, m as cliAccessTokenExpiresAt, n as deleteCliConfig, o as redactCliEnvironment, p as acquireCliCredentialsLock, r as emptyCliConfig, s as removeCliEnvironment, u as upsertCliEnvironment, v as deleteCliCredentialsLock, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname } from "../cli-config-DGrZCUfw.js";
-import { $ as buildThrownSendFailureEnvelope, $n as stopRepeatFromEmail, $t as getAgentContactPolicy, A as readThreadContext, An as listWakeSchedules, At as queryUsesAutomated, B as recordPendingMail, Bn as resendAgentSignupVerification, Bt as createEndpoint, C as queryUsesAwaiting, Cn as listFunctionLogs, Ct as AutomatedFilterUnsupportedError, D as displayAddress, Dn as listSentEmails, Dt as expectedAutomatedVerdicts, E as describeWake, En as listRoutes, Et as ensureSearchReportsAutomated, F as wakeRecipientField, Ft as resolveCliApiRequestConfig, G as replyExpectation, Gn as sendEmail, H as interactionHumanLine, Hn as searchEmails, Ht as createRoute, I as wakeRelationship, In as redeemCreditCode, It as addDefaultNetworkMember, J as IDEMPOTENCY_KEY_FLAG_DESCRIPTION, Jn as setMemory, Jt as deleteRoute, K as replyInteractionWarning, Kn as setFunctionRoute, L as clearReadPendingMail, Ln as removeDefaultNetworkMember, Lt as checkDefaultNetworkContactAdmission, M as serverMuted, Mn as pullWebhookEvent, Mt as createAuthenticatedCliApiClient, N as serverRelationship, Nt as createCliApiClient, O as formatWakeContext, On as listWakeAuthorizations, Ot as hasAutomatedVerdict, P as wakeReadCommand, Pt as refreshStoredCliCredentials, Q as buildFollowUpCommand, Qn as startCliLogin, Qt as getAccount, R as pendingMailPath, Rn as reorderRoutes, Rt as cliLogout, S as isAwaitingRejectedError, Sn as listEndpoints, St as AUTOMATED_VALUES, T as bareAddress, Tn as listRepeatingSends, Tt as automatedRejectedError, U as interactionNextActions, Un as searchMemories, Ut as createWakeAuthorization, V as removePendingMail, Vn as runWakeSchedule, Vt as createFunction, W as readEmailInteraction, Wn as semanticSearch, Wt as createWakeSchedule, X as apiResultHttpStatus, Xn as startAgentClaim, Xt as deleteWakeSchedule, Y as SEND_OUTCOME_HELP, Yn as simulateRoute, Yt as deleteWakeAuthorization, Z as assertValidIdempotencyKey, Zn as startAgentSignup, _ as awaitingRejectedError, _t as formatAlreadySentNotice, a as extractErrorCode, an as getFunction, ar as updateRoute, at as formatPriorRepliesWarning, b as formatRepliesCell, bn as listDomains, bt as AUTOMATED_FILTER_UNSUPPORTED_CODE, c as readTextFileFlag, cn as getInboxStatus, cr as verifyAgentClaim, ct as priorRepliesThatWentOut, d as writeErrorWithHints, dn as getRepeatingSend, dt as sendOutcomeExitCode, er as testFunction, et as checkPriorReplies, f as AWAITING_FLAG_DESCRIPTION, fn as getSentEmail, ft as sentHistoryWindowStart, g as assertAwaitingFilterRows, gn as listAgentNetworks, gt as currentMailSessionKey, h as ReplyStateUnsupportedError, hn as listAgentContacts, ht as thrownErrorExitCode, i as createOperationCommand, in as getEmail, ir as updateRepeatingSend, it as formatPriorRepliesCheckSkipped, j as sentInThread, jn as pollCliLogin, k as latestOwnOutbound, kn as listWakeDispatches, kt as isAutomatedRejectedError, l as runWithTiming, ln as getMemory, lr as verifyAgentSignup, lt as reportSendCommandResult, m as REPLY_STATE_UNSUPPORTED_CODE, mn as getWakeSchedule, mt as successfulSendOutcome, n as API_ERROR_CODES, nn as getCreditBalance, nr as updateDefaultNetworkMember, nt as deriveSendIdempotencyKey, o as extractErrorPayload, on as getFunctionRouting, or as updateWakeAuthorization, ot as formatSendFailureSummary, p as AWAITING_VALUES, pn as getThread, pt as serializeErrorPayload, q as wakeInteractionSentence, qn as setFunctionSecret, qt as deleteMemory, r as TIME_FLAG_DESCRIPTION, rn as getDefaultNetworkAgent, rr as updateFunction, rt as formatDeletedEarlierSendNotice, s as formatErrorPayload, sn as getFunctionTestRunTrace, sr as updateWakeSchedule, st as formatSendRecordFailureSummary, t as API_BASE_URL_FLAG_DESCRIPTION, tn as getConversation, tr as unsetFunctionRoute, tt as classifySendError, u as surfaceUnauthorizedHint, un as getOrgRoutingTopology, ut as sendIdentityFields, v as ensureSearchReportsReplyState, vn as listDefaultNetworkAgents, vt as writeIdempotentReplayBannerIfReplay, w as explainPendingMailNotFound, wn as listFunctions, wt as assertAutomatedVerdict, x as hasReplyState, xn as listEmails, xt as AUTOMATED_FLAG_DESCRIPTION, y as formatAwaitingCell, yn as listDefaultNetworkMembers, yt as withFlagSuggestion, z as readPendingMail, zn as replyToEmail, zt as completeWebhookEvent } from "../api-command-C1JvJqV0.js";
+import { $ as buildThrownSendFailureEnvelope, $n as stopRepeatFromEmail, $t as getAgentContactPolicy, A as readThreadContext, An as listWakeSchedules, At as queryUsesAutomated, B as recordPendingMail, Bn as resendAgentSignupVerification, Bt as createEndpoint, C as queryUsesAwaiting, Cn as listFunctionLogs, Ct as AutomatedFilterUnsupportedError, D as displayAddress, Dn as listSentEmails, Dt as expectedAutomatedVerdicts, E as describeWake, En as listRoutes, Et as ensureSearchReportsAutomated, F as wakeRecipientField, Ft as resolveCliApiRequestConfig, G as replyExpectation, Gn as sendEmail, H as interactionHumanLine, Hn as searchEmails, Ht as createRoute, I as wakeRelationship, In as redeemCreditCode, It as addDefaultNetworkMember, J as IDEMPOTENCY_KEY_FLAG_DESCRIPTION, Jn as setMemory, Jt as deleteRoute, K as replyInteractionWarning, Kn as setFunctionRoute, L as clearReadPendingMail, Ln as removeDefaultNetworkMember, Lt as checkDefaultNetworkContactAdmission, M as serverMuted, Mn as pullWebhookEvent, Mt as createAuthenticatedCliApiClient, N as serverRelationship, Nt as createCliApiClient, O as formatWakeContext, On as listWakeAuthorizations, Ot as hasAutomatedVerdict, P as wakeReadCommand, Pt as refreshStoredCliCredentials, Q as buildFollowUpCommand, Qn as startCliLogin, Qt as getAccount, R as pendingMailPath, Rn as reorderRoutes, Rt as cliLogout, S as isAwaitingRejectedError, Sn as listEndpoints, St as AUTOMATED_VALUES, T as bareAddress, Tn as listRepeatingSends, Tt as automatedRejectedError, U as interactionNextActions, Un as searchMemories, Ut as createWakeAuthorization, V as removePendingMail, Vn as runWakeSchedule, Vt as createFunction, W as readEmailInteraction, Wn as semanticSearch, Wt as createWakeSchedule, X as apiResultHttpStatus, Xn as startAgentClaim, Xt as deleteWakeSchedule, Y as SEND_OUTCOME_HELP, Yn as simulateRoute, Yt as deleteWakeAuthorization, Z as assertValidIdempotencyKey, Zn as startAgentSignup, _ as awaitingRejectedError, _t as formatAlreadySentNotice, a as extractErrorCode, an as getFunction, ar as updateRoute, at as formatPriorRepliesWarning, b as formatRepliesCell, bn as listDomains, bt as AUTOMATED_FILTER_UNSUPPORTED_CODE, c as readTextFileFlag, cn as getInboxStatus, cr as verifyAgentClaim, ct as priorRepliesThatWentOut, d as writeErrorWithHints, dn as getRepeatingSend, dt as sendOutcomeExitCode, er as testFunction, et as checkPriorReplies, f as AWAITING_FLAG_DESCRIPTION, fn as getSentEmail, ft as sentHistoryWindowStart, g as assertAwaitingFilterRows, gn as listAgentNetworks, gt as currentMailSessionKey, h as ReplyStateUnsupportedError, hn as listAgentContacts, ht as thrownErrorExitCode, i as createOperationCommand, in as getEmail, ir as updateRepeatingSend, it as formatPriorRepliesCheckSkipped, j as sentInThread, jn as pollCliLogin, k as latestOwnOutbound, kn as listWakeDispatches, kt as isAutomatedRejectedError, l as runWithTiming, ln as getMemory, lr as verifyAgentSignup, lt as reportSendCommandResult, m as REPLY_STATE_UNSUPPORTED_CODE, mn as getWakeSchedule, mt as successfulSendOutcome, n as API_ERROR_CODES, nn as getCreditBalance, nr as updateDefaultNetworkMember, nt as deriveSendIdempotencyKey, o as extractErrorPayload, on as getFunctionRouting, or as updateWakeAuthorization, ot as formatSendFailureSummary, p as AWAITING_VALUES, pn as getThread, pt as serializeErrorPayload, q as wakeInteractionSentence, qn as setFunctionSecret, qt as deleteMemory, r as TIME_FLAG_DESCRIPTION, rn as getDefaultNetworkAgent, rr as updateFunction, rt as formatDeletedEarlierSendNotice, s as formatErrorPayload, sn as getFunctionTestRunTrace, sr as updateWakeSchedule, st as formatSendRecordFailureSummary, t as API_BASE_URL_FLAG_DESCRIPTION, tn as getConversation, tr as unsetFunctionRoute, tt as classifySendError, u as surfaceUnauthorizedHint, un as getOrgRoutingTopology, ut as sendIdentityFields, v as ensureSearchReportsReplyState, vn as listDefaultNetworkAgents, vt as writeIdempotentReplayBannerIfReplay, w as explainPendingMailNotFound, wn as listFunctions, wt as assertAutomatedVerdict, x as hasReplyState, xn as listEmails, xt as AUTOMATED_FLAG_DESCRIPTION, y as formatAwaitingCell, yn as listDefaultNetworkMembers, yt as withFlagSuggestion, z as readPendingMail, zn as replyToEmail, zt as completeWebhookEvent } from "../api-command-DzQ8KxD9.js";
 import { S as resolveListenSubscription, _ as acquireListenLock, a as mailLockBusy, c as mailTime, d as readMailJson, f as removeMailFile, g as ListenStateError, h as writeMailJson, i as mailId, l as privateMailDirectory, m as withMailLock, o as mailObject, u as privateMailPermissions, x as normalizeListenOrigin, y as listenIdentity } from "../shared-mail-files-SPPcis9g.js";
-import { $ as describeSessionHookItem, A as NetworkAdmissionPendingError, B as runContactRequest, C as pollCheckCommand, D as verificationReplySubmitted, E as RECEIVER_MODES, F as addressNoteTarget, G as receiverStatusCommand, H as agentInvitationHash, I as runAddressNotesRequest, J as recordHookMailCheck, K as savedReceiver, L as ContactsApiError, M as evaluateContactPolicy, N as canonicalContactSelector, O as ContactPolicyReadRetryError, P as AddressNotesApiError, Q as describeSessionHookChange, R as contactAddress, S as invitationProfileName, T as withOwnerMemberAddress, U as connectAgent, V as agentConnectionStatus, W as readAgentInvitation, X as claudeConfigDir, Y as boundSessionProfiles, Z as currentCliLocation, _ as disconnectAgent, a as endSession, at as samePath, b as identitySuggestions, c as pendingSessionDisconnects, ct as inspectManagedBlock, d as registerSession, dt as upsertManagedBlock, et as ephemeralCliReason, f as retryPendingDisconnects, ft as writeManagedFile, g as AgentDisconnectError, h as enrollmentResumes, i as connectedProfilesForSession, it as repairClaudeHooks, j as createNotificationContactPolicy, k as NETWORK_ADMISSION_PENDING_RETRY_MS, l as psProcessInfo, lt as jsonIndentation, m as enrollAgent, n as OMP_MAIN, nt as inspectClaudeHooks, o as headlessClaudeRun, ot as writeClaudeSettings, p as runDetached, q as installClaudeWakeHook, r as agentConnectionState, rt as readClaudeSettings, st as MachineFileError, t as MACHINE_RUNTIMES, tt as findOnPath, u as readClaudeHookInput, ut as readManagedFile, v as cliInvocation, w as runAgentConnect, x as defaultAgentProfileName, y as generatedAgentName, z as contactAgentAddress } from "../machine-session-Dr5W2fHb.js";
-import { _ as NativeSessionDisconnectedError, a as readBundledConnectSkill, b as NotificationOutcomeUnknownError, c as openSessionNotifications, d as isRoutineNotificationContent, f as notificationPartReader, g as defaultSessionSocket, i as installedVersion, l as notificationReceiptPage, m as SESSION_UUID$1, o as notificationScope, p as readConversationStatusContent, r as installConnectSkill, s as notificationSenders, t as connectSkillTarget, u as NotificationRetryError, v as NativeSessionError, y as NativeSessionNotLoadedError } from "../connect-skill-CH2pq436.js";
+import { $ as describeSessionHookItem, A as NetworkAdmissionPendingError, B as runContactRequest, C as pollCheckCommand, D as verificationReplySubmitted, E as RECEIVER_MODES, F as addressNoteTarget, G as receiverStatusCommand, H as agentInvitationHash, I as runAddressNotesRequest, J as recordHookMailCheck, K as savedReceiver, L as ContactsApiError, M as evaluateContactPolicy, N as canonicalContactSelector, O as ContactPolicyReadRetryError, P as AddressNotesApiError, Q as describeSessionHookChange, R as contactAddress, S as invitationProfileName, T as withOwnerMemberAddress, U as connectAgent, V as agentConnectionStatus, W as readAgentInvitation, X as claudeConfigDir, Y as boundSessionProfiles, Z as currentCliLocation, _ as disconnectAgent, a as endSession, at as samePath, b as identitySuggestions, c as pendingSessionDisconnects, ct as inspectManagedBlock, d as registerSession, dt as upsertManagedBlock, et as ephemeralCliReason, f as retryPendingDisconnects, ft as writeManagedFile, g as AgentDisconnectError, h as enrollmentResumes, i as connectedProfilesForSession, it as repairClaudeHooks, j as createNotificationContactPolicy, k as NETWORK_ADMISSION_PENDING_RETRY_MS, l as psProcessInfo, lt as jsonIndentation, m as enrollAgent, n as OMP_MAIN, nt as inspectClaudeHooks, o as headlessClaudeRun, ot as writeClaudeSettings, p as runDetached, q as installClaudeWakeHook, r as agentConnectionState, rt as readClaudeSettings, st as MachineFileError, t as MACHINE_RUNTIMES, tt as findOnPath, u as readClaudeHookInput, ut as readManagedFile, v as cliInvocation, w as runAgentConnect, x as defaultAgentProfileName, y as generatedAgentName, z as contactAgentAddress } from "../machine-session-BaJ1Xmdm.js";
+import { _ as NativeSessionDisconnectedError, a as readBundledConnectSkill, b as NotificationOutcomeUnknownError, c as openSessionNotifications, d as isRoutineNotificationContent, f as notificationPartReader, g as defaultSessionSocket, i as installedVersion, l as notificationReceiptPage, m as SESSION_UUID$1, o as notificationScope, p as readConversationStatusContent, r as installConnectSkill, s as notificationSenders, t as connectSkillTarget, u as NotificationRetryError, v as NativeSessionError, y as NativeSessionNotLoadedError } from "../connect-skill-DHPc9dVN.js";
 import { c as startBackgroundListen, i as backgroundListenToken, l as stopBackgroundListen, o as runBackgroundListen, r as backgroundListenStatus, u as verifyBackgroundListenTarget } from "../listen-background-CyLc8VBn.js";
 import { a as REPEAT_IDLE_MAX_MINUTES, d as parseRepeatTick, f as preparePresenceAliveEmail, g as isEmailReceivedEvent, i as REPEAT_EVERY_MAX_MINUTES, l as parseInteractionEnvelope$1, m as repeatStopCommand, o as REPEAT_MAX_SENDS_MAX, p as prepareSignalEmail, s as buildRepeatStopBody, u as parsePresenceEnvelope, v as parseWebhookEvent, y as parseFromHeader } from "../repeats-D2xtLium-DdiJECLI.js";
-import { a as ensureSharedMailSubscription, c as reserveSharedMailSubscription, d as otherParticipants, f as EventConnection, h as pushFile, i as sharedMailScope, l as followEmailConversation, m as pullFile, n as reconcileChatSend, o as createSharedMailWaiter, p as EventReceiverError, r as openSharedMailReceiver, s as openSharedMailStore, t as sendSignal, u as readConversationFollow } from "../signal-command-Dbyqyas9.js";
+import { a as ensureSharedMailSubscription, c as reserveSharedMailSubscription, d as otherParticipants, f as EventConnection, h as pushFile, i as sharedMailScope, l as followEmailConversation, m as pullFile, n as reconcileChatSend, o as createSharedMailWaiter, p as EventReceiverError, r as openSharedMailReceiver, s as openSharedMailStore, t as sendSignal, u as readConversationFollow } from "../signal-command-BbeV2Nd8.js";
 import { a as scopedChatSenderTrust, i as readBeforeDeadline, n as isPlainChatReply, o as presenceDisposition, r as isScopedChatReply, s as readPresenceProjection, t as isConnectedChatCredential } from "../scoped-chat-DhxtuNXs.js";
 import { autoSignalEligible, dispatchAutoRead, dispatchAutoWorking, haltAutoWorking, restoreAutoWorking } from "./auto-signals.js";
 import { t as guardJsonOutputCommands } from "../json-output-Cf-GFeff.js";
@@ -272,7 +272,7 @@ const openapiDocument = {
 		"/cli/signup/start": { "post": {
 			"operationId": "startCliSignup",
 			"summary": "Start CLI account signup",
-			"description": "Starts a terminal-native CLI signup. `signup_code` is optional;\nomit it to sign up without one. The API creates a pending signup\nsession, sends an email verification code, and returns an opaque\nsignup token used by the resend and verify steps. This endpoint\ndoes not require an API key.\n",
+			"description": "Starts a terminal-native CLI signup. The API creates a pending\nsignup session, sends an email verification code, and returns an opaque\nsignup token used by the resend and verify steps. This endpoint\ndoes not require an API key.\n",
 			"tags": ["CLI"],
 			"security": [],
 			"requestBody": {
@@ -334,7 +334,7 @@ const openapiDocument = {
 		"/cli/signup/verify": { "post": {
 			"operationId": "verifyCliSignup",
 			"summary": "Verify CLI signup and create OAuth session",
-			"description": "Verifies the email code for a CLI signup session and creates the\naccount. When the session was started with a `signup_code`, the\nreserved code is redeemed; sessions started without a code skip\nthe redemption step. Either way an org-scoped OAuth CLI session\nis created and the token set is returned exactly once. This\nendpoint does not require an API key.\n",
+			"description": "Verifies the email code for a CLI signup session and creates the\naccount. An org-scoped OAuth CLI session is created and the\ntoken set is returned exactly once. This endpoint does not\nrequire an API key.\n",
 			"tags": ["CLI"],
 			"security": [],
 			"requestBody": {
@@ -354,7 +354,7 @@ const openapiDocument = {
 					}] } } }
 				},
 				"400": {
-					"description": "Invalid request, invalid verification code, expired token, invalid signup code, rejected password, or account creation failure",
+					"description": "Invalid request, invalid verification code, expired token, rejected password, or account creation failure",
 					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
 				},
 				"429": { "$ref": "#/components/responses/RateLimited" }
@@ -363,7 +363,7 @@ const openapiDocument = {
 		"/agent/signup/start": { "post": {
 			"operationId": "startAgentSignup",
 			"summary": "Start agent account signup",
-			"description": "Starts an agent-native signup session. `signup_code` is optional;\nomit it to sign up without one. The API creates a pending signup\nsession, sends an email verification code, and returns an opaque\nsignup token used by the resend and verify steps. This endpoint\ndoes not require an API key.\n",
+			"description": "Starts an agent-native signup session. The API creates a pending\nsignup session, sends an email verification code, and returns an opaque\nsignup token used by the resend and verify steps. This endpoint\ndoes not require an API key.\n",
 			"tags": ["Agent"],
 			"security": [],
 			"requestBody": {
@@ -425,7 +425,7 @@ const openapiDocument = {
 		"/agent/signup/verify": { "post": {
 			"operationId": "verifyAgentSignup",
 			"summary": "Verify agent signup and create OAuth tokens",
-			"description": "Verifies the email code for an agent signup session and creates\nthe account when needed. When the session was started with a\n`signup_code`, the reserved code is redeemed; sessions started\nwithout a code skip the redemption step. An org-scoped OAuth\nsession for CLI authentication is minted and the raw tokens are\nreturned exactly once. For existing users, the optional `org_id`\nselects which accessible workspace should receive the new\nsession (no signup-code redemption is performed for existing\nusers regardless of how the session was started).\n",
+			"description": "Verifies the email code for an agent signup session and creates\nthe account when needed. An org-scoped OAuth session for CLI\nauthentication is minted and the raw tokens are returned exactly\nonce. For existing users, the optional `org_id` selects which\naccessible workspace should receive the new session.\n",
 			"tags": ["Agent"],
 			"security": [],
 			"requestBody": {
@@ -445,7 +445,7 @@ const openapiDocument = {
 					}] } } }
 				},
 				"400": {
-					"description": "Invalid request, invalid verification code, expired token, invalid signup code, or account creation failure",
+					"description": "Invalid request, invalid verification code, expired token, or account creation failure",
 					"content": { "application/json": { "schema": { "$ref": "#/components/schemas/ErrorResponse" } } }
 				},
 				"403": { "$ref": "#/components/responses/Forbidden" },
@@ -9765,7 +9765,6 @@ const openapiDocument = {
 									"access_denied",
 									"expired_token",
 									"invalid_device_code",
-									"invalid_signup_code",
 									"invalid_signup_token",
 									"invalid_verification_code",
 									"email_delivery_failed",
@@ -10070,12 +10069,6 @@ const openapiDocument = {
 						"format": "email",
 						"maxLength": 254
 					},
-					"signup_code": {
-						"type": "string",
-						"minLength": 1,
-						"maxLength": 128,
-						"description": "Optional signup code. Omit if you do not have one."
-					},
 					"terms_accepted": {
 						"type": "boolean",
 						"const": true,
@@ -10255,12 +10248,6 @@ const openapiDocument = {
 						"format": "email",
 						"maxLength": 254
 					},
-					"signup_code": {
-						"type": "string",
-						"minLength": 1,
-						"maxLength": 128,
-						"description": "Optional signup code. Omit if you do not have one."
-					},
 					"terms_accepted": {
 						"type": "boolean",
 						"const": true,
@@ -17470,7 +17457,7 @@ const operationManifest = [
 		"binaryResponse": false,
 		"bodyRequired": true,
 		"command": "start-agent-signup",
-		"description": "Starts an agent-native signup session. `signup_code` is optional;\nomit it to sign up without one. The API creates a pending signup\nsession, sends an email verification code, and returns an opaque\nsignup token used by the resend and verify steps. This endpoint\ndoes not require an API key.\n",
+		"description": "Starts an agent-native signup session. The API creates a pending\nsignup session, sends an email verification code, and returns an opaque\nsignup token used by the resend and verify steps. This endpoint\ndoes not require an API key.\n",
 		"hasJsonBody": true,
 		"method": "POST",
 		"operationId": "startAgentSignup",
@@ -17486,12 +17473,6 @@ const operationManifest = [
 					"format": "email",
 					"maxLength": 254
 				},
-				"signup_code": {
-					"type": "string",
-					"minLength": 1,
-					"maxLength": 128,
-					"description": "Optional signup code. Omit if you do not have one."
-				},
 				"terms_accepted": {
 					"type": "boolean",
 					"const": true,
@@ -17626,7 +17607,7 @@ const operationManifest = [
 		"binaryResponse": false,
 		"bodyRequired": true,
 		"command": "verify-agent-signup",
-		"description": "Verifies the email code for an agent signup session and creates\nthe account when needed. When the session was started with a\n`signup_code`, the reserved code is redeemed; sessions started\nwithout a code skip the redemption step. An org-scoped OAuth\nsession for CLI authentication is minted and the raw tokens are\nreturned exactly once. For existing users, the optional `org_id`\nselects which accessible workspace should receive the new\nsession (no signup-code redemption is performed for existing\nusers regardless of how the session was started).\n",
+		"description": "Verifies the email code for an agent signup session and creates\nthe account when needed. An org-scoped OAuth session for CLI\nauthentication is minted and the raw tokens are returned exactly\nonce. For existing users, the optional `org_id` selects which\naccessible workspace should receive the new session.\n",
 		"hasJsonBody": true,
 		"method": "POST",
 		"operationId": "verifyAgentSignup",
@@ -19817,7 +19798,7 @@ const operationManifest = [
 		"binaryResponse": false,
 		"bodyRequired": true,
 		"command": "start-cli-signup",
-		"description": "Starts a terminal-native CLI signup. `signup_code` is optional;\nomit it to sign up without one. The API creates a pending signup\nsession, sends an email verification code, and returns an opaque\nsignup token used by the resend and verify steps. This endpoint\ndoes not require an API key.\n",
+		"description": "Starts a terminal-native CLI signup. The API creates a pending\nsignup session, sends an email verification code, and returns an opaque\nsignup token used by the resend and verify steps. This endpoint\ndoes not require an API key.\n",
 		"hasJsonBody": true,
 		"method": "POST",
 		"operationId": "startCliSignup",
@@ -19833,12 +19814,6 @@ const operationManifest = [
 					"format": "email",
 					"maxLength": 254
 				},
-				"signup_code": {
-					"type": "string",
-					"minLength": 1,
-					"maxLength": 128,
-					"description": "Optional signup code. Omit if you do not have one."
-				},
 				"terms_accepted": {
 					"type": "boolean",
 					"const": true,
@@ -19899,7 +19874,7 @@ const operationManifest = [
 		"binaryResponse": false,
 		"bodyRequired": true,
 		"command": "verify-cli-signup",
-		"description": "Verifies the email code for a CLI signup session and creates the\naccount. When the session was started with a `signup_code`, the\nreserved code is redeemed; sessions started without a code skip\nthe redemption step. Either way an org-scoped OAuth CLI session\nis created and the token set is returned exactly once. This\nendpoint does not require an API key.\n",
+		"description": "Verifies the email code for a CLI signup session and creates the\naccount. An org-scoped OAuth CLI session is created and the\ntoken set is returned exactly once. This endpoint does not\nrequire an API key.\n",
 		"hasJsonBody": true,
 		"method": "POST",
 		"operationId": "verifyCliSignup",
@@ -43341,8 +43316,8 @@ const PRIMITIVE_TEAM_AUTHOR = {
 	name: "Primitive Team",
 	url: "https://primitive.dev"
 };
-const SDK_VERSION_RANGE = "^1.34.0";
-const CLI_VERSION_RANGE = "^1.47.0";
+const SDK_VERSION_RANGE = "^1.35.0";
+const CLI_VERSION_RANGE = "^1.48.0";
 const ESBUILD_VERSION_RANGE = "^0.27.0";
 function renderHandler() {
 	return `// env.PRIMITIVE_API_KEY, env.PRIMITIVE_WEBHOOK_SECRET, and
@@ -48969,8 +48944,7 @@ const DEFAULT_SIGNUP_COMMAND_COPY = {
 	actionGerund: "creating a new account",
 	confirmCommand: (email) => `signup confirm ${email} <code>`,
 	resendCommand: (email) => `signup resend ${email}`,
-	startCommand: (email) => `signup ${email}`,
-	codeRequired: false
+	startCommand: (email) => `signup ${email}`
 };
 function cliError$2(message) {
 	return new Errors.CLIError(message, { exit: 1 });
@@ -49252,16 +49226,12 @@ async function startSignup(params) {
 	}
 	if (params.flags.force) deletePendingAgentSignup(params.configDir);
 	const confirmTermsFn = params.deps.confirmTerms ?? confirmTerms;
-	const promptRequiredFn = params.deps.promptRequired ?? promptRequired;
 	const startFn = params.deps.startAgentSignup ?? startAgentSignup;
-	const rawSignupCode = params.flags["signup-code"];
-	const signupCode = (rawSignupCode && rawSignupCode.trim().length > 0 ? rawSignupCode : void 0) ?? (copy.codeRequired ? await promptRequiredFn("Signup code: ") : void 0);
 	if (!params.flags["accept-terms"]) await confirmTermsFn();
 	const started = await startFn({
 		body: {
 			device_name: params.flags["device-name"] ?? hostname(),
 			email: params.email,
-			...signupCode ? { signup_code: signupCode } : {},
 			terms_accepted: true
 		},
 		client: params.apiClient.client,
@@ -49489,10 +49459,6 @@ function commonStartFlags() {
 		force: Flags.boolean({
 			char: "f",
 			description: "Replace saved credentials or pending signup state when needed"
-		}),
-		"signup-code": Flags.string({
-			description: "Optional signup code. Omit if you do not have one.",
-			env: "PRIMITIVE_SIGNUP_CODE"
 		})
 	};
 }
@@ -49506,7 +49472,6 @@ var SignupCommand = class SignupCommand extends Command {
 	static examples = [
 		"<%= config.bin %> signup user@example.com",
 		"<%= config.bin %> signup user@example.com --accept-terms",
-		"<%= config.bin %> signup user@example.com --signup-code invite-code --accept-terms",
 		"<%= config.bin %> signup confirm user@example.com 123456"
 	];
 	static flags = commonStartFlags();
@@ -55823,40 +55788,35 @@ const SIGNIN_OTP_COPY = {
 	actionGerund: "signing in",
 	confirmCommand: (email) => `signin otp confirm ${email} <code>`,
 	resendCommand: (email) => `signin otp resend ${email}`,
-	startCommand: (email) => `signin otp ${email}`,
-	codeRequired: true
+	startCommand: (email) => `signin otp ${email}`
 };
 const SIGNIN_EMAIL_COPY = {
 	actionNoun: "sign-in",
 	actionGerund: "signing in",
 	confirmCommand: (email) => `signin confirm ${email} <code>`,
 	resendCommand: (email) => `signin resend ${email}`,
-	startCommand: (email) => `signin ${email}`,
-	codeRequired: true
+	startCommand: (email) => `signin ${email}`
 };
 const LOGIN_EMAIL_COPY = {
 	actionNoun: "login",
 	actionGerund: "logging in",
 	confirmCommand: (email) => `login confirm ${email} <code>`,
 	resendCommand: (email) => `login resend ${email}`,
-	startCommand: (email) => `login ${email}`,
-	codeRequired: true
+	startCommand: (email) => `login ${email}`
 };
 const LOGIN_OTP_COPY = {
 	actionNoun: "login",
 	actionGerund: "logging in",
 	confirmCommand: (email) => `login otp confirm ${email} <code>`,
 	resendCommand: (email) => `login otp resend ${email}`,
-	startCommand: (email) => `login otp ${email}`,
-	codeRequired: true
+	startCommand: (email) => `login otp ${email}`
 };
 const OTP_COPY = {
 	actionNoun: "email-code auth",
 	actionGerund: "authenticating",
 	confirmCommand: (email) => `otp confirm ${email} <code>`,
 	resendCommand: (email) => `otp resend ${email}`,
-	startCommand: (email) => `otp ${email}`,
-	codeRequired: true
+	startCommand: (email) => `otp ${email}`
 };
 function acquireCredentialsLock(configDir) {
 	try {
@@ -55877,10 +55837,6 @@ function commonOtpStartFlags() {
 		force: Flags.boolean({
 			char: "f",
 			description: "Replace saved credentials or pending email-code auth state when needed"
-		}),
-		"signup-code": Flags.string({
-			description: "Signup code required to start email-code sign-in",
-			env: "PRIMITIVE_SIGNUP_CODE"
 		})
 	};
 }
@@ -55891,15 +55847,15 @@ var SigninCommand = class extends LoginCommand$1 {
 	}) };
 	static description = `Sign in or log in to an existing Primitive account and save an org-scoped OAuth session locally.
 
-Run \`primitive signin <email> --signup-code <code> --accept-terms\` for email-code sign-in, then \`primitive signin confirm <email> <code>\`. Run \`primitive signin\` with no email to use browser approval; \`primitive signin browser\` is the explicit browser form. \`primitive login\` supports the same flows with login-shaped commands. \`primitive otp <email>\` is the shortest email-code auth form. For new account creation, use \`primitive signup <email>\`.`;
+Run \`primitive signin <email> --accept-terms\` for email-code sign-in, then \`primitive signin confirm <email> <code>\`. Run \`primitive signin\` with no email to use browser approval; \`primitive signin browser\` is the explicit browser form. \`primitive login\` supports the same flows with login-shaped commands. \`primitive otp <email>\` is the shortest email-code auth form. For new account creation, use \`primitive signup <email>\`.`;
 	static summary = "Sign in to an existing account";
 	static examples = [
 		"<%= config.bin %> signin",
 		"<%= config.bin %> signin browser",
 		"<%= config.bin %> signin --no-browser",
-		"<%= config.bin %> signin user@example.com --signup-code invite-code --accept-terms",
+		"<%= config.bin %> signin user@example.com --accept-terms",
 		"<%= config.bin %> signin confirm user@example.com 123456",
-		"<%= config.bin %> signin otp user@example.com --signup-code invite-code --accept-terms",
+		"<%= config.bin %> signin otp user@example.com --accept-terms",
 		"<%= config.bin %> signin otp confirm user@example.com 123456"
 	];
 	static flags = {
@@ -55914,7 +55870,7 @@ Run \`primitive signin <email> --signup-code <code> --accept-terms\` for email-c
 		const commandClass = this.constructor;
 		const { args, flags } = await this.parse(commandClass);
 		if (!args.email) {
-			if (flags["signup-code"] || flags["accept-terms"]) throw cliError(`Email-code auth needs an email address. Run \`primitive ${this.emailCodeCopy().startCommand("<email>")} --signup-code <code> --accept-terms\`.`);
+			if (flags["accept-terms"]) throw cliError(`Email-code auth needs an email address. Run \`primitive ${this.emailCodeCopy().startCommand("<email>")} --accept-terms\`.`);
 			await this.runBrowserLogin(flags, this.retryCommand());
 			return;
 		}
@@ -55941,15 +55897,15 @@ var LoginCommand = class extends SigninCommand {
 	static args = SigninCommand.args;
 	static description = `Log in or sign in to an existing Primitive account and save an org-scoped OAuth session locally.
 
-Run \`primitive login <email> --signup-code <code> --accept-terms\` for email-code login, then \`primitive login confirm <email> <code>\`. Run \`primitive login\` with no email to use browser approval; \`primitive login browser\` is the explicit browser form. \`primitive signin\` supports the same flows with signin-shaped commands. \`primitive otp <email>\` is the shortest email-code auth form. For new account creation, use \`primitive signup <email>\`.`;
+Run \`primitive login <email> --accept-terms\` for email-code login, then \`primitive login confirm <email> <code>\`. Run \`primitive login\` with no email to use browser approval; \`primitive login browser\` is the explicit browser form. \`primitive signin\` supports the same flows with signin-shaped commands. \`primitive otp <email>\` is the shortest email-code auth form. For new account creation, use \`primitive signup <email>\`.`;
 	static summary = "Log in to an existing account";
 	static examples = [
 		"<%= config.bin %> login",
 		"<%= config.bin %> login browser",
 		"<%= config.bin %> login --no-browser",
-		"<%= config.bin %> login user@example.com --signup-code invite-code --accept-terms",
+		"<%= config.bin %> login user@example.com --accept-terms",
 		"<%= config.bin %> login confirm user@example.com 123456",
-		"<%= config.bin %> login otp user@example.com --signup-code invite-code --accept-terms",
+		"<%= config.bin %> login otp user@example.com --accept-terms",
 		"<%= config.bin %> login otp confirm user@example.com 123456"
 	];
 	static flags = SigninCommand.flags;
@@ -55991,9 +55947,9 @@ var SigninOtpCommand = class extends Command {
 		description: "Email address to sign in with",
 		required: false
 	}) };
-	static description = "Start email-code sign-in using Primitive's signup/auth OTP flow, send a verification code, and save the pending token locally. Requires a signup code.";
+	static description = "Start email-code sign-in using Primitive's signup/auth OTP flow, send a verification code, and save the pending token locally.";
 	static summary = "Start OTP sign-in";
-	static examples = ["<%= config.bin %> signin otp user@example.com --signup-code invite-code --accept-terms", "<%= config.bin %> signin otp confirm user@example.com 123456"];
+	static examples = ["<%= config.bin %> signin otp user@example.com --accept-terms", "<%= config.bin %> signin otp confirm user@example.com 123456"];
 	static flags = commonOtpStartFlags();
 	async run() {
 		const commandClass = this.constructor;
@@ -56016,9 +55972,9 @@ var SigninOtpCommand = class extends Command {
 };
 var LoginOtpCommand = class extends SigninOtpCommand {
 	static args = SigninOtpCommand.args;
-	static description = "Start email-code login using Primitive's signup/auth OTP flow, send a verification code, and save the pending token locally. Requires a signup code.";
+	static description = "Start email-code login using Primitive's signup/auth OTP flow, send a verification code, and save the pending token locally.";
 	static summary = "Start OTP login";
-	static examples = ["<%= config.bin %> login otp user@example.com --signup-code invite-code --accept-terms", "<%= config.bin %> login otp confirm user@example.com 123456"];
+	static examples = ["<%= config.bin %> login otp user@example.com --accept-terms", "<%= config.bin %> login otp confirm user@example.com 123456"];
 	static flags = SigninOtpCommand.flags;
 	emailCodeCopy() {
 		return LOGIN_OTP_COPY;
@@ -56026,9 +55982,9 @@ var LoginOtpCommand = class extends SigninOtpCommand {
 };
 var OtpCommand = class extends SigninOtpCommand {
 	static args = SigninOtpCommand.args;
-	static description = "Start email-code authentication, send a verification code, and save the pending token locally. Requires a signup code.";
+	static description = "Start email-code authentication, send a verification code, and save the pending token locally.";
 	static summary = "Start email-code auth";
-	static examples = ["<%= config.bin %> otp user@example.com --signup-code invite-code --accept-terms", "<%= config.bin %> otp confirm user@example.com 123456"];
+	static examples = ["<%= config.bin %> otp user@example.com --accept-terms", "<%= config.bin %> otp confirm user@example.com 123456"];
 	static flags = SigninOtpCommand.flags;
 	emailCodeCopy() {
 		return OTP_COPY;

package/dist/oclif/receiver-heal.js

@@ -1,6 +1,6 @@
 import { N as agentProfileDirectory, P as agentProfileName, R as loadConnectedAgentProfile, j as AGENT_PROFILE_ENV } from "../cli-config-DGrZCUfw.js";
 import { d as readMailJson } from "../shared-mail-files-SPPcis9g.js";
-import { m as SESSION_UUID, n as detectAgentRuntime, o as notificationScope } from "../connect-skill-CH2pq436.js";
+import { m as SESSION_UUID, n as detectAgentRuntime, o as notificationScope } from "../connect-skill-DHPc9dVN.js";
 import { a as claimBackgroundListenRestart, n as backgroundListenRestartable, r as backgroundListenStatus } from "../listen-background-CyLc8VBn.js";
 import { join } from "node:path";
 import { spawn } from "node:child_process";

package/dist/oclif/root-signup-hint.js

@@ -115,7 +115,6 @@ function loggedOutSignupHint() {
 		"  You or your user don't have an account yet?",
 		"  Run `primitive signup <email> --accept-terms`",
 		"  to create an account and get started.",
-		"  Add `--signup-code <code>` if you have one.",
 		""
 	].join("\n");
 }

package/dist/{signal-command-Dbyqyas9.js → signal-command-BbeV2Nd8.js}

@@ -1,4 +1,4 @@
-import { Bt as createEndpoint, Dn as listSentEmails, Gn as sendEmail, T as bareAddress, in as getEmail, mt as successfulSendOutcome, o as extractErrorPayload, tt as classifySendError } from "./api-command-C1JvJqV0.js";
+import { Bt as createEndpoint, Dn as listSentEmails, Gn as sendEmail, T as bareAddress, in as getEmail, mt as successfulSendOutcome, o as extractErrorPayload, tt as classifySendError } from "./api-command-DzQ8KxD9.js";
 import { _ as acquireListenLock, b as listenProcessIdentity, c as mailTime, d as readMailJson, f as removeMailFile, h as writeMailJson, i as mailId, l as privateMailDirectory, m as withMailLock, n as invalidSharedMail, o as mailObject, p as syncMailDirectory, r as mailAddress, s as mailString, t as SharedMailStateError, v as compareListenProcessIdentity, y as listenIdentity } from "./shared-mail-files-SPPcis9g.js";
 import { h as sendPreparedSignal, p as prepareSignalEmail } from "./repeats-D2xtLium-DdiJECLI.js";
 import { n as tryOwnSharedMail, r as waitForSharedMailChange, t as readSharedMailOwner } from "./shared-mail-watch-BUfUaq6j.js";
@@ -334,7 +334,7 @@ async function pullFile(root, outPath, opts) {
 	return manifest;
 }
 //#endregion
-//#region ../sdk-node/dist/api-DhmH89R-.js
+//#region ../sdk-node/dist/api-DhHWJdMM.js
 const jsonBodySerializer = { bodySerializer: (body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value) };
 function createSseClient({ onRequest, onSseError, onSseEvent, responseTransformer, responseValidator, sseDefaultRetryDelay, sseMaxRetryAttempts, sseMaxRetryDelay, sseSleepFn, url, ...options }) {
 	let lastEventId;

package/man/primitive.1

@@ -169,7 +169,7 @@ or
 .BR PRIMITIVE_API_KEY .
 .PP
 Run
-.B primitive signin EMAIL --signup-code CODE --accept-terms
+.B primitive signin EMAIL --accept-terms
 to start email-code sign-in, then run
 .B primitive signin confirm EMAIL CODE
 with the emailed verification code.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "primcli",
-  "version": "1.47.0",
+  "version": "1.48.0",
   "description": "Official Primitive CLI: deploy Primitive Functions, send and inspect mail, manage endpoints, all from the terminal. Wraps the @primitivedotdev/sdk runtime client with one-shot commands.",
   "type": "module",
   "sideEffects": false,