primcli 1.54.0 → 1.55.1

package/dist/{api-command-C_Fn9Zef.js → api-command-0FiEAuQi.js}

@@ -1,6 +1,6 @@
-import { n as __exportAll } from "./rolldown-runtime-CNZpIYwj.js";
-import { C as resolveCliAuth, F as agentProfilesDirectory, G as createClient, H as requireDefaultLoginProfile, K as createConfig, N as agentProfileDirectory, R as loadConnectedAgentProfile, S as normalizeApiBaseUrl, T as saveSignupCredentials, W as PrimitiveApiClient, _ as deleteCliCredentials, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, i as loadCliConfig, j as AGENT_PROFILE_ENV, m as cliAccessTokenExpiresAt, p as acquireCliCredentialsLock, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname } from "./cli-config-DGrZCUfw.js";
-import { h as writeMailJson, m as withMailLock, p as syncMailDirectory, u as privateMailPermissions } from "./shared-mail-files-SPPcis9g.js";
+import { b as __exportAll } from "./repeats-x4QM2yoG-De3MV3st.js";
+import { C as resolveCliAuth, F as agentProfilesDirectory, G as createClient, H as requireDefaultLoginProfile, K as createConfig, N as agentProfileDirectory, R as loadConnectedAgentProfile, S as normalizeApiBaseUrl, T as saveSignupCredentials, W as PrimitiveApiClient, _ as deleteCliCredentials, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, i as loadCliConfig, j as AGENT_PROFILE_ENV, m as cliAccessTokenExpiresAt, p as acquireCliCredentialsLock, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname } from "./cli-config-DMszFbGn.js";
+import { h as writeMailJson, m as withMailLock, p as syncMailDirectory, u as privateMailPermissions } from "./shared-mail-files-MwlVE90c.js";
 import { Command, Errors, Flags } from "@oclif/core";
 import { existsSync, lstatSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHash } from "node:crypto";
@@ -3296,7 +3296,7 @@ const provisionMemberAddress = (options) => (options.client ?? client).put({
 //#endregion
 //#region src/oclif/api-client.ts
 const API_HEADERS_ENV = "PRIMITIVE_API_HEADERS";
-const OAUTH_REFRESH_SKEW_MS = 60 * 1e3;
+const OAUTH_REFRESH_SKEW_MS = 6e4;
 const SAVED_CLI_OAUTH_SESSION_EXPIRED_MESSAGE = "Saved Primitive CLI OAuth session expired or was revoked. Run `primitive signin` to authenticate again.";
 function mergeHeaders(...headers) {
 	const merged = {};
@@ -3337,7 +3337,8 @@ function resolveCliApiRequestConfig(params) {
 			environmentName: null
 		};
 	}
-	const currentEnvironment = resolveConfigEnvironment(loadCliConfig(params.configDir));
+	const cliConfig = loadCliConfig(params.configDir);
+	const currentEnvironment = resolveConfigEnvironment(cliConfig);
 	const configuredApiBaseUrl = currentEnvironment?.config.api_base_url;
 	if (currentEnvironment !== null && currentEnvironment.name !== "default" && params.apiBaseUrl === void 0 && configuredApiBaseUrl === void 0) throw new Errors.CLIError(`The active Primitive CLI environment \`${currentEnvironment.name}\` does not specify an api_base_url. Set one with \`primitive config set --environment ${currentEnvironment.name} --api-base-url https://...\`, or switch to a different environment with \`primitive config use <name>\`. Refusing to fall back to the production default for a non-default environment.`, { exit: 1 });
 	const apiBaseUrl = params.apiBaseUrl !== void 0 ? normalizeApiBaseUrl(params.apiBaseUrl) : configuredApiBaseUrl;
@@ -3487,7 +3488,7 @@ async function createAuthenticatedCliApiClient(params) {
 //#endregion
 //#region src/oclif/attachment-wait.ts
 /** Generated download commands that wait for attachment content by default. */
-const ATTACHMENT_WAIT_OPERATIONS = new Set([
+const ATTACHMENT_WAIT_OPERATIONS = /* @__PURE__ */ new Set([
 	"downloadAttachments",
 	"downloadEmailAttachmentPart",
 	"downloadSentAttachmentPart"
@@ -3732,7 +3733,7 @@ async function maybeWriteFunctionEndpointRedirect(inputs) {
 * closest valid flag to that message so the fix is on the first line.
 */
 /** Common names for a free-text query, mapped onto the `q` flag. */
-const FREE_TEXT_ALIASES = new Set([
+const FREE_TEXT_ALIASES = /* @__PURE__ */ new Set([
 	"query",
 	"search",
 	"text",
@@ -3871,7 +3872,7 @@ function loadSkillLine(skillFile) {
 /** One short clause saying how this session will receive mail. */
 function receivingOutcome(receiving) {
 	if (receiving.mode === "poll") return "nothing wakes this session for new mail, so it checks at the start of each turn and after sending";
-	if (receiving.mode === "external") return receiving.state === "hooks_installed" ? "new mail wakes this session through its installed hooks, confirmed by the first real delivery" : "receiving is not set up yet, so new mail will not wake this session";
+	if (receiving.mode === "external") return receiving.state === "hooks_installed" ? "its installed hooks should wake this session for new mail, which stays unconfirmed until the first real delivery arrives" : "receiving is not set up yet, so new mail will not wake this session";
 	return receiving.state === "healthy" ? "a background listener receives new mail for this session" : "receiving is not ready yet, so new mail may not reach this session";
 }
 /**
@@ -3969,12 +3970,12 @@ function apiResultHttpStatus(result) {
 	const response = result.response;
 	return typeof response?.status === "number" ? response.status : void 0;
 }
-const SEND_STATUSES_THAT_DID_NOT_GO_OUT = new Set([
+const SEND_STATUSES_THAT_DID_NOT_GO_OUT = /* @__PURE__ */ new Set([
 	"agent_failed",
 	"canceled",
 	"gate_denied"
 ]);
-const SEND_STATUSES_WITH_UNKNOWN_OUTCOME = new Set(["unknown"]);
+const SEND_STATUSES_WITH_UNKNOWN_OUTCOME = /* @__PURE__ */ new Set(["unknown"]);
 /**
 * Classify a send record the API returned with a 2xx. A 2xx alone does
 * not mean a message went out: the record's status can show the
@@ -4161,11 +4162,11 @@ function buildFollowUpCommand(kind, description, argv, options = {}, invocation
 		requires_message: requiresMessage
 	};
 }
-const SENT_HISTORY_CLOCK_SKEW_MS = 300 * 1e3;
+const SENT_HISTORY_CLOCK_SKEW_MS = 3e5;
 function sentHistoryWindowStart(attemptStartedAtIso) {
 	const started = Date.parse(attemptStartedAtIso);
 	if (!Number.isFinite(started)) return attemptStartedAtIso;
-	return new Date(started - SENT_HISTORY_CLOCK_SKEW_MS).toISOString();
+	return (/* @__PURE__ */ new Date(started - SENT_HISTORY_CLOCK_SKEW_MS)).toISOString();
 }
 /** Header rule for Idempotency-Key: 1 to 255 printable ASCII characters. */
 const IDEMPOTENCY_KEY_PATTERN = /^[\x21-\x7E]{1,255}$/;
@@ -4180,7 +4181,7 @@ const MAX_SEND_WAIT_TIMEOUT_MS = 3e4;
 function sendWaitClampNotice(requestedMs) {
 	return `--wait-timeout-ms ${requestedMs} is longer than the ${MAX_SEND_WAIT_TIMEOUT_MS}ms the server allows, so the delivery wait uses ${MAX_SEND_WAIT_TIMEOUT_MS}ms. --wait covers delivery only; to wait for a reply, run \`primitive emails wait --reply-to-sent-email-id <sent id> --from <recipient> --timeout ${Math.ceil(requestedMs / 1e3)}\` after this send.`;
 }
-const NON_CONTENT_SEND_FIELDS = new Set(["wait", "wait_timeout_ms"]);
+const NON_CONTENT_SEND_FIELDS = /* @__PURE__ */ new Set(["wait", "wait_timeout_ms"]);
 function canonicalJson(value) {
 	if (Array.isArray(value)) return `[${value.map((item) => canonicalJson(item ?? null)).join(",")}]`;
 	if (value !== null && typeof value === "object") return `{${Object.entries(value).filter(([, item]) => item !== void 0).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, item]) => `${JSON.stringify(key)}:${canonicalJson(item)}`).join(",")}}`;
@@ -4194,7 +4195,7 @@ function canonicalJson(value) {
 * on another day) still goes out, exactly as without a key. An explicit
 * --idempotency-key never expires.
 */
-const DERIVED_IDEMPOTENCY_WINDOW_MS = 300 * 1e3;
+const DERIVED_IDEMPOTENCY_WINDOW_MS = 3e5;
 /**
 * The idempotency key a send uses when the caller passes none. It is a
 * hash of what is sent (and, for a reply, of the email replied to) and
@@ -4354,7 +4355,7 @@ function thrownErrorExitCode(error) {
 }
 //#endregion
 //#region src/oclif/interaction-actions.ts
-const HINTS = new Set([
+const HINTS = /* @__PURE__ */ new Set([
 	"status",
 	"card",
 	"none",
@@ -5125,7 +5126,7 @@ function savedConnectedProfiles(configDir, exclude) {
 */
 async function otherProfiles(configDir, session, current) {
 	if (session) try {
-		const { connectedProfilesForSession } = await import("./machine-session-Do3mw2_w.js").then((n) => n.s);
+		const { connectedProfilesForSession } = await import("./machine-session-CufQfBvp.js").then((n) => n.s);
 		return {
 			inSession: true,
 			profiles: connectedProfilesForSession(configDir, session, current)
@@ -5498,7 +5499,7 @@ function renderRequestSchemaSummary(schema) {
 	for (const f of complex) {
 		const marker = f.required ? " *" : "  ";
 		const padName = f.name.padEnd(nameWidth);
-		const trimmedDesc = f.description.length > descMax ? `${f.description.slice(0, descMax - 3)}...` : f.description;
+		const trimmedDesc = f.description.length > descMax ? `${f.description.slice(0, 75)}...` : f.description;
 		const desc = trimmedDesc ? `  ${trimmedDesc}` : "";
 		lines.push(`${marker} ${padName}  ${f.displayType}${desc}`);
 	}
@@ -5669,7 +5670,7 @@ async function runWithTiming(enabled, fn) {
 }
 const TIME_FLAG_DESCRIPTION = "Print the wall-clock duration of this command to stderr after it completes (e.g. `[time: 1.34s]`). Useful for measuring `--wait` send latency, comparing CLI overhead, or capturing timing in scripts.";
 const API_BASE_URL_FLAG_DESCRIPTION = "Override the API base URL. Internal testing only; not documented to customers.";
-const RESERVED_FLAG_NAMES = new Set([
+const RESERVED_FLAG_NAMES = /* @__PURE__ */ new Set([
 	"api-key",
 	"api-base-url",
 	"raw-body",
@@ -5844,17 +5845,18 @@ function createOperationCommand(operation) {
 				if (operation.hasJsonBody) {
 					const explicit = readJsonBody(parsedFlags);
 					const overrides = collectBodyFieldFlags(parsedFlags, bodyFieldFlagToProperty);
-					if (Object.keys(overrides).length > 0) if (explicit === void 0) body = overrides;
-					else if (explicit !== null && typeof explicit === "object" && !Array.isArray(explicit)) body = {
-						...explicit,
-						...overrides
-					};
-					else {
-						const explicitKind = explicit === null ? "null" : Array.isArray(explicit) ? "array" : typeof explicit;
-						const overrideFlags = Object.keys(overrides).map((p) => `--${flagName(p)}`).join(", ");
-						throw new Errors.CLIError(`--raw-body must be a JSON object when also passing per-field flags (got ${explicitKind}); supplied per-field flags: ${overrideFlags}. Either drop --raw-body and rely on the per-field flags, or move every field into the JSON --raw-body and drop the flags.`);
-					}
-					else body = explicit;
+					if (Object.keys(overrides).length > 0) {
+						if (explicit === void 0) body = overrides;
+						else if (explicit !== null && typeof explicit === "object" && !Array.isArray(explicit)) body = {
+							...explicit,
+							...overrides
+						};
+						else {
+							const explicitKind = explicit === null ? "null" : Array.isArray(explicit) ? "array" : typeof explicit;
+							const overrideFlags = Object.keys(overrides).map((p) => `--${flagName(p)}`).join(", ");
+							throw new Errors.CLIError(`--raw-body must be a JSON object when also passing per-field flags (got ${explicitKind}); supplied per-field flags: ${overrideFlags}. Either drop --raw-body and rely on the per-field flags, or move every field into the JSON --raw-body and drop the flags.`);
+						}
+					} else body = explicit;
 				}
 				if (operation.bodyRequired && body === void 0) throw new Errors.CLIError(`Operation ${operation.operationId} requires a body. Pass each field as a --flag (see --help) or supply JSON via --raw-body / --body-file.`);
 				const operationFn = sdk_gen_exports[operation.sdkName];

package/dist/{cli-config-DGrZCUfw.js → cli-config-DMszFbGn.js}

@@ -1,4 +1,4 @@
-import { c as mailTime, d as readMailJson, h as writeMailJson, i as mailId, l as privateMailDirectory, o as mailObject, r as mailAddress, s as mailString } from "./shared-mail-files-SPPcis9g.js";
+import { c as mailTime, d as readMailJson, h as writeMailJson, i as mailId, l as privateMailDirectory, o as mailObject, r as mailAddress, s as mailString } from "./shared-mail-files-MwlVE90c.js";
 import { Errors } from "@oclif/core";
 import { chmodSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
@@ -91,7 +91,8 @@ function createSseClient({ onRequest, onSseError, onSseEvent, responseTransforme
 			} catch (error) {
 				onSseError?.(error);
 				if (sseMaxRetryAttempts !== void 0 && attempt >= sseMaxRetryAttempts) break;
-				await sleep(Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 3e4));
+				const backoff = Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 3e4);
+				await sleep(backoff);
 			}
 		}
 	};
@@ -337,9 +338,7 @@ async function setAuthParams(options) {
 			case "cookie":
 				options.headers.append("Cookie", `${name}=${token}`);
 				break;
-			default:
-				options.headers.set(name, token);
-				break;
+			default: options.headers.set(name, token);
 		}
 	}
 }
@@ -496,9 +495,7 @@ const createClient = (config = {}) => {
 						case "stream":
 							emptyData = response.body;
 							break;
-						default:
-							emptyData = {};
-							break;
+						default: emptyData = {};
 					}
 					return opts.responseStyle === "data" ? emptyData : {
 						data: emptyData,
@@ -947,7 +944,7 @@ function saveActiveChatState(configDir, input, options = {}) {
 const CREDENTIALS_FILE = "credentials.json";
 const CREDENTIALS_LOCK_DIR = "credentials.lock";
 const CREDENTIALS_LOCK_OWNER_FILE = "owner.json";
-const CREDENTIALS_LOCK_STALE_MS = 1800 * 1e3;
+const CREDENTIALS_LOCK_STALE_MS = 18e5;
 const MALFORMED_CREDENTIALS_HINT = "Run `primitive logout` and then `primitive signin`.";
 const CREDENTIALS_LOCK_CLEANUP_SIGNALS = [
 	"SIGINT",

package/dist/{json-output-Cf-GFeff.js → json-output-CEskSQJi.js}

@@ -235,7 +235,7 @@ function guardJsonOutput(cls) {
 	};
 }
 /** Command ids whose `--json` streams several documents over time. */
-const STREAMING_JSON_COMMAND_IDS = new Set(["listen"]);
+const STREAMING_JSON_COMMAND_IDS = /* @__PURE__ */ new Set(["listen"]);
 /**
 * Guard every command in `commands` that accepts `--json`, except the
 * streaming ones. Called once by the command registry.

package/dist/{listen-background-CMfxkeVP.js → listen-background--0peztKE.js}

@@ -1,4 +1,4 @@
-import { _ as acquireListenLock, a as mailLockBusy, b as listenProcessIdentity, d as readMailJson, f as removeMailFile, g as ListenStateError, h as writeMailJson, i as mailId, l as privateMailDirectory, o as mailObject, s as mailString, v as compareListenProcessIdentity } from "./shared-mail-files-SPPcis9g.js";
+import { _ as acquireListenLock, a as mailLockBusy, b as listenProcessIdentity, d as readMailJson, f as removeMailFile, g as ListenStateError, h as writeMailJson, i as mailId, l as privateMailDirectory, o as mailObject, s as mailString, v as compareListenProcessIdentity } from "./shared-mail-files-MwlVE90c.js";
 import { lstatSync, realpathSync } from "node:fs";
 import { createHash, randomUUID } from "node:crypto";
 import { join } from "node:path";
@@ -11,10 +11,10 @@ const SUPERVISOR_ENV = "PRIMITIVE_LISTEN_SUPERVISOR";
 const SUPERVISOR_ARGV_ENV = "PRIMITIVE_LISTEN_SUPERVISOR_ARGV";
 const SUPERVISOR_WORKER_ENV = "PRIMITIVE_LISTEN_SUPERVISOR_WORKER";
 const STALE_AFTER_MS = 15e3;
-const RESTART_WINDOW_MS = 10 * 6e4;
-const HEALTHY_RESET_MS = 10 * 6e4;
+const RESTART_WINDOW_MS = 6e5;
+const HEALTHY_RESET_MS = 6e5;
 const MAX_FAILURES = 5;
-const RESTART_COOLDOWN_MS = 5 * 6e4;
+const RESTART_COOLDOWN_MS = 3e5;
 const phases = [
 	"starting",
 	"receiving",
@@ -46,8 +46,8 @@ function savedFailureCode(value) {
 	if (value === null || value === void 0) return null;
 	return knownFailureCode(value) ?? "unrecognized";
 }
-const DISK_FULL_ERRORS = new Set(["ENOSPC", "EDQUOT"]);
-const STORAGE_ERRORS = new Set([
+const DISK_FULL_ERRORS = /* @__PURE__ */ new Set(["ENOSPC", "EDQUOT"]);
+const STORAGE_ERRORS = /* @__PURE__ */ new Set([
 	"EIO",
 	"EROFS",
 	"EMFILE",
@@ -112,7 +112,8 @@ function configurationFingerprint(value) {
 function verifyBackgroundListenTarget(target, env = process.env) {
 	if (backgroundListenToken(env) === null) return;
 	try {
-		const expected = mailObject(JSON.parse(env["PRIMITIVE_LISTEN_BACKGROUND_TARGET"] ?? ""), [
+		const value = JSON.parse(env["PRIMITIVE_LISTEN_BACKGROUND_TARGET"] ?? "");
+		const expected = mailObject(value, [
 			"scope",
 			"threadId",
 			"configDir",

package/dist/{machine-session-Do3mw2_w.js → machine-session-CufQfBvp.js}

@@ -1,11 +1,11 @@
-import { n as __exportAll } from "./rolldown-runtime-CNZpIYwj.js";
-import { B as parseOwnerMemberAddress, F as agentProfilesDirectory, I as connectedAgentIdentity, L as connectedApiBaseUrl, M as AgentConnectionSetupError, N as agentProfileDirectory, P as agentProfileName, R as loadConnectedAgentProfile, U as saveConnectedAgentProfile, V as profileAlreadyConnectedMessage, W as PrimitiveApiClient, j as AGENT_PROFILE_ENV, x as loadCliCredentials, z as parseConnectedAgentProfile } from "./cli-config-DGrZCUfw.js";
-import { An as listContacts, Bn as listSentEmails, Jn as putContact, Kn as putAgentContact, Nn as listDomains, On as listAgentContacts, Tt as defaultConnectionName, _n as getEmail, an as deleteContact, fn as getAgentContactPolicy, in as deleteAgentContact, ir as sendEmail, pn as getContact, qn as putAgentContactPolicy, qt as refreshStoredCliCredentials, tr as searchEmails } from "./api-command-C_Fn9Zef.js";
-import { _ as acquireListenLock, c as mailTime, d as readMailJson, f as removeMailFile, g as ListenStateError, h as writeMailJson, i as mailId, l as privateMailDirectory, o as mailObject, r as mailAddress, s as mailString } from "./shared-mail-files-SPPcis9g.js";
-import { _ as detectAgentRuntime, a as NotificationRetryError, d as defaultSessionSocket, f as NativeSessionDisconnectedError, l as SESSION_UUID, t as notificationScope, u as connectNativeSession, v as installConnectSkill, x as readBundledConnectSkill } from "./notify-session-DhV0DLAA.js";
-import { a as scopedChatSenderTrust } from "./scoped-chat-BrLq4dXH.js";
-import { l as stopBackgroundListen, r as backgroundListenStatus } from "./listen-background-CMfxkeVP.js";
-import { t as readSharedMailOwner } from "./shared-mail-watch-CWhpfJ0N.js";
+import { b as __exportAll } from "./repeats-x4QM2yoG-De3MV3st.js";
+import { B as parseOwnerMemberAddress, F as agentProfilesDirectory, I as connectedAgentIdentity, L as connectedApiBaseUrl, M as AgentConnectionSetupError, N as agentProfileDirectory, P as agentProfileName, R as loadConnectedAgentProfile, U as saveConnectedAgentProfile, V as profileAlreadyConnectedMessage, W as PrimitiveApiClient, j as AGENT_PROFILE_ENV, x as loadCliCredentials, z as parseConnectedAgentProfile } from "./cli-config-DMszFbGn.js";
+import { An as listContacts, Bn as listSentEmails, Jn as putContact, Kn as putAgentContact, Nn as listDomains, On as listAgentContacts, Tt as defaultConnectionName, _n as getEmail, an as deleteContact, fn as getAgentContactPolicy, in as deleteAgentContact, ir as sendEmail, pn as getContact, qn as putAgentContactPolicy, qt as refreshStoredCliCredentials, tr as searchEmails } from "./api-command-0FiEAuQi.js";
+import { _ as acquireListenLock, c as mailTime, d as readMailJson, f as removeMailFile, g as ListenStateError, h as writeMailJson, i as mailId, l as privateMailDirectory, o as mailObject, r as mailAddress, s as mailString } from "./shared-mail-files-MwlVE90c.js";
+import { _ as detectAgentRuntime, a as NotificationRetryError, d as defaultSessionSocket, f as NativeSessionDisconnectedError, l as SESSION_UUID, t as notificationScope, u as connectNativeSession, v as installConnectSkill, x as readBundledConnectSkill } from "./notify-session-BGzeKcQO.js";
+import { a as scopedChatSenderTrust } from "./scoped-chat-C7cpIxVS.js";
+import { l as stopBackgroundListen, r as backgroundListenStatus } from "./listen-background--0peztKE.js";
+import { t as readSharedMailOwner } from "./shared-mail-watch-DtKpsgg8.js";
 import { accessSync, chmodSync, closeSync, constants, copyFileSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHash, randomUUID } from "node:crypto";
 import { basename, delimiter, dirname, isAbsolute, join, resolve } from "node:path";
@@ -16,7 +16,7 @@ import { promisify } from "node:util";
 import { createConnection } from "node:net";
 //#region src/oclif/owner-member-address.ts
 const REFRESH_TIMEOUT_MS = 5e3;
-const MAX_RESPONSE_BYTES$1 = 64 * 1024;
+const MAX_RESPONSE_BYTES$1 = 65536;
 /** Reads at most MAX_RESPONSE_BYTES, stopping as soon as the body exceeds it. */
 async function boundedText(response) {
 	const reader = response.body?.getReader();
@@ -1326,8 +1326,6 @@ const LOCK_WAIT = new Int32Array(new SharedArrayBuffer(4));
 function record$1(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-/** Clock skew tolerated for a record written slightly in the future. */
-const RECORD_CLOCK_SKEW_MS = 6e4;
 function hookMailCheckPath(configDir, profileName, sessionId) {
 	return join(agentProfileDirectory(configDir, profileName), `pending-mail-${sessionId}.mail-check.json`);
 }
@@ -1362,7 +1360,8 @@ function claudeWakeHookStatus(options) {
 		if (!SESSION_UUID.test(options.sessionId)) return unavailable;
 		const sessionId = options.sessionId.toLowerCase();
 		const env = options.env ?? process.env;
-		const read = readManagedFile(join(resolve(env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude")), "settings.json"));
+		const claudeDir = resolve(env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude"));
+		const read = readManagedFile(join(claudeDir, "settings.json"));
 		if (read.state !== "present") return unavailable;
 		const settings = JSON.parse(read.text);
 		if (!record$1(settings) || !record$1(settings.hooks)) return unavailable;
@@ -1385,7 +1384,7 @@ function claudeWakeHookStatus(options) {
 		const recent = (at) => {
 			if (at === null) return false;
 			const age = now - Date.parse(at);
-			return age >= -RECORD_CLOCK_SKEW_MS && age <= 6e5;
+			return age >= -6e4 && age <= 6e5;
 		};
 		return {
 			installed,
@@ -1574,7 +1573,8 @@ function uninstallClaudeWakeHook(options) {
 		const agentAddress = mailAddress(options.agentAddress);
 		if (!SESSION_UUID.test(options.sessionId)) return false;
 		const sessionId = options.sessionId.toLowerCase();
-		const claudeDir = resolve((options.env ?? process.env).CLAUDE_CONFIG_DIR || join(homedir(), ".claude"));
+		const env = options.env ?? process.env;
+		const claudeDir = resolve(env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude"));
 		if (!existsSync(join(claudeDir, "settings.json"))) return true;
 		return editClaudeSettings(claudeDir, (settings) => {
 			const hooks = settings.hooks ?? {};
@@ -1611,7 +1611,8 @@ function uninstallClaudeWakeHook(options) {
 					hooks: siblings
 				}] : [];
 			});
-			nextHooks[PENDING_EVENT] = (hooks[PENDING_EVENT] ?? []).flatMap((entry) => {
+			const pendingEntries = hooks[PENDING_EVENT];
+			nextHooks[PENDING_EVENT] = (pendingEntries ?? []).flatMap((entry) => {
 				if (!record$1(entry) || !Array.isArray(entry.hooks)) return [entry];
 				const siblings = entry.hooks.filter((candidate) => !isOwnPendingHook(candidate));
 				if (siblings.length === entry.hooks.length) return [entry];
@@ -1644,6 +1645,7 @@ const INVITATION_INVALID = "Primitive rejected this invitation as invalid. Ask t
 * is safe to discard every local trace of the attempt.
 */
 var AgentInvitationRejectedError = class extends AgentConnectionSetupError {
+	reason;
 	constructor(message, reason) {
 		super(message);
 		this.reason = reason;
@@ -1800,7 +1802,8 @@ function agentConnectionStatus(configDir, profileName, env = process.env) {
 			scope,
 			threadId: session
 		});
-		const mailOwner = readSharedMailOwner({ directory: join(configDir, "shared-mail", createHash("sha256").update(scope).digest("hex")) });
+		const sharedDirectory = join(configDir, "shared-mail", createHash("sha256").update(scope).digest("hex"));
+		const mailOwner = readSharedMailOwner({ directory: sharedDirectory });
 		return {
 			mode,
 			sessionId: session,
@@ -2034,6 +2037,7 @@ async function connectAgent(params) {
 //#endregion
 //#region src/oclif/contacts.ts
 var ContactsApiError = class extends Error {
+	payload;
 	directoryAvailable = false;
 	constructor(payload) {
 		super("Contact request failed.");
@@ -2231,6 +2235,8 @@ async function runContactRequest(client, request) {
 //#endregion
 //#region src/oclif/address-notes.ts
 var AddressNotesApiError = class extends Error {
+	payload;
+	status;
 	constructor(payload, status) {
 		super("Address note request failed.");
 		this.payload = payload;
@@ -2821,7 +2827,7 @@ const RECEIVER_MODES = [
 	"external",
 	"poll"
 ];
-const RECEIPT_STATUSES = new Set([
+const RECEIPT_STATUSES = /* @__PURE__ */ new Set([
 	"queued",
 	"submitted_to_agent",
 	"agent_failed",
@@ -3236,7 +3242,7 @@ async function setupAgent(params) {
 					session: params.session ?? null,
 					receiverMode: params.receiverMode ?? "native",
 					invitationHash: hash,
-					since: (/* @__PURE__ */ new Date(dependencies.now() - 15 * 6e4)).toISOString(),
+					since: (/* @__PURE__ */ new Date(dependencies.now() - 9e5)).toISOString(),
 					contactRequests: Boolean(params.contactRequests),
 					phase: "waiting",
 					challenge: null,
@@ -3514,8 +3520,9 @@ function defaults(options) {
 		codexVersion: installedCodexVersion,
 		installClaudeWakeHook,
 		installSkill(runtime) {
+			const bundle = readBundledConnectSkill(options.packageRoot);
 			return installConnectSkill({
-				bundle: readBundledConnectSkill(options.packageRoot),
+				bundle,
 				runtime,
 				project: options.project,
 				cwd: options.cwd,
@@ -3664,29 +3671,33 @@ async function runAgentConnect(options) {
 	};
 	const warnings = connectWarnings(options.configDir, result.identity.profileName);
 	let externalHook = null;
-	if (receiver === "external") if (verified) externalHook = dependencies.installClaudeWakeHook({
-		cliPath: options.cliPath,
-		configDir: options.configDir,
-		profileName: result.identity.profileName,
-		agentAddress: result.identity.agentAddress,
-		sessionId: session ?? "",
-		env
-	});
-	else skipped.push({
-		step: "receiver",
-		reason: "pending_verification"
-	});
+	if (receiver === "external") {
+		if (verified) externalHook = dependencies.installClaudeWakeHook({
+			cliPath: options.cliPath,
+			configDir: options.configDir,
+			profileName: result.identity.profileName,
+			agentAddress: result.identity.agentAddress,
+			sessionId: session ?? "",
+			env
+		});
+		else skipped.push({
+			step: "receiver",
+			reason: "pending_verification"
+		});
+	}
 	let mailCheck = null;
-	if (receiver === "native") if (result.receiving.state === "healthy") {
-		mailCheck = await dependencies.awaitMailCheck(profileName, startedAt);
-		if (mailCheck.state === "pending") skipped.push({
-			step: "mail_check",
-			reason: "not_yet_observed"
+	if (receiver === "native") {
+		if (result.receiving.state === "healthy") {
+			mailCheck = await dependencies.awaitMailCheck(profileName, startedAt);
+			if (mailCheck.state === "pending") skipped.push({
+				step: "mail_check",
+				reason: "not_yet_observed"
+			});
+		} else skipped.push({
+			step: "receiver",
+			reason: verified ? "not_ready" : "pending_verification"
 		});
-	} else skipped.push({
-		step: "receiver",
-		reason: verified ? "not_ready" : "pending_verification"
-	});
+	}
 	const pendingPath = join(agentProfileDirectory(options.configDir, profileName), PENDING_AGENT_INFO_FILE);
 	const noteValue = agentInfo ?? readPendingAgentInfo(pendingPath);
 	let agentInfoState = "not_requested";
@@ -4109,7 +4120,7 @@ async function enableAgentContactRequests(options) {
 		return "unavailable";
 	}
 	const after = await readPolicy();
-	if (!after || after.agent_policy.allow_contact_requests !== true || after.allow_contact_requests !== true || !after.contact_request_since || !after.contact_request_generation || JSON.stringify(policyRuleInputs(after.agent_policy.rules)) !== JSON.stringify(rules)) return "unavailable";
+	if (after?.agent_policy.allow_contact_requests !== true || after.allow_contact_requests !== true || !after.contact_request_since || !after.contact_request_generation || JSON.stringify(policyRuleInputs(after.agent_policy.rules)) !== JSON.stringify(rules)) return "unavailable";
 	return "enabled";
 }
 async function readOwnerConnection(enrollment, params, deadline, listed) {
@@ -4175,7 +4186,7 @@ async function confirmOwnerConnection(enrollment, params, listed) {
 		last = await readOwnerConnection(enrollment, params, deadline, listed);
 		if (last === "connected" || last === "revoked" || last === "owner_inactive") return last;
 		const remaining = deadline - Date.now();
-		if (remaining <= 0 || attempt === CONFIRMATION_MAX_ATTEMPTS - 1) break;
+		if (remaining <= 0 || attempt === 39) break;
 		await (params.confirmationSleep ?? ((milliseconds) => setTimeout$1(milliseconds)))(Math.min(3e3, remaining));
 	}
 	return last;
@@ -4580,7 +4591,7 @@ function runtimeSessionId(runtime, env, configDir, ompSession = ompProcessSessio
 * not sessions a person works in, so they get no address. Any other or
 * missing value is treated as interactive.
 */
-const HEADLESS_CLAUDE_ENTRYPOINTS = new Set([
+const HEADLESS_CLAUDE_ENTRYPOINTS = /* @__PURE__ */ new Set([
 	"sdk-cli",
 	"sdk-ts",
 	"sdk-py",
@@ -4715,7 +4726,7 @@ function profilesBoundToSession(configDir, sessionId, ownProfile, mode) {
 function connectedProfilesForSession(configDir, session, exclude) {
 	const sessionId = session.trim().toLowerCase();
 	if (!SESSION_UUID.test(sessionId)) return [];
-	const candidates = new Set([`session-${sessionId}`]);
+	const candidates = /* @__PURE__ */ new Set([`session-${sessionId}`]);
 	const record = readSessionRecord(configDir, sessionId);
 	if (record) candidates.add(record.profile);
 	try {
@@ -4781,7 +4792,7 @@ async function revokeWithMemberLogin(configDir, address, fetchImpl = fetch) {
 	}
 }
 /** Enrollment saves its state before any request, so a quiet record this old created nothing. */
-const ENROLLMENT_SETTLED_MS = 10 * 6e4;
+const ENROLLMENT_SETTLED_MS = 6e5;
 async function disconnectSessionAgent(configDir, record, deps, env, fetchImpl, enrollmentSettled = false) {
 	try {
 		if (loadConnectedAgentProfile(configDir, record.profile)) {
@@ -5128,7 +5139,7 @@ async function endSession(options) {
 		let managed = false;
 		let alreadyDone = false;
 		const record = await updateSessionRecord(options.configDir, sessionId, (current) => {
-			if (!current || current.createdBy !== "session-register") return current;
+			if (current?.createdBy !== "session-register") return current;
 			managed = true;
 			if (current.endedAt && current.disconnect === "done") {
 				alreadyDone = true;

package/dist/{notify-session-DhV0DLAA.js → notify-session-BGzeKcQO.js}

@@ -1,6 +1,6 @@
-import { F as wakeReadCommand, P as skillFirstLine, Y as wakeInteractionSentence, un as downloadEmailAttachmentPart } from "./api-command-C_Fn9Zef.js";
-import { _ as acquireListenLock, g as ListenStateError, y as listenIdentity } from "./shared-mail-files-SPPcis9g.js";
-import { _ as isTrustedSender, c as classifySignalContent, g as isEmailReceivedEvent, v as parseWebhookEvent } from "./repeats-D2xtLium-DmtVD6ol.js";
+import { _ as isTrustedSender, c as classifySignalContent, g as isEmailReceivedEvent, v as parseWebhookEvent } from "./repeats-x4QM2yoG-De3MV3st.js";
+import { F as wakeReadCommand, P as skillFirstLine, Y as wakeInteractionSentence, un as downloadEmailAttachmentPart } from "./api-command-0FiEAuQi.js";
+import { _ as acquireListenLock, g as ListenStateError, y as listenIdentity } from "./shared-mail-files-MwlVE90c.js";
 import { closeSync, copyFileSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, opendirSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHash, randomUUID, scryptSync } from "node:crypto";
 import { dirname, isAbsolute, join, normalize, resolve } from "node:path";
@@ -27,7 +27,8 @@ function detectAgentRuntime(session, env = process.env) {
 function connectSkillTarget(options) {
 	const env = options.env ?? process.env;
 	const cwd = resolve(options.cwd ?? process.cwd());
-	return join(options.runtime === "claude" ? options.project ? join(cwd, ".claude") : resolve(env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude")) : options.project ? join(cwd, ".agents") : resolve(env.CODEX_HOME || join(homedir(), ".codex")), "skills", CONNECT_SKILL_NAME);
+	const root = options.runtime === "claude" ? options.project ? join(cwd, ".claude") : resolve(env.CLAUDE_CONFIG_DIR || join(homedir(), ".claude")) : options.project ? join(cwd, ".agents") : resolve(env.CODEX_HOME || join(homedir(), ".codex"));
+	return join(root, "skills", CONNECT_SKILL_NAME);
 }
 /** A path printed into agent instructions stays on one line. */
 function printablePath(value) {
@@ -290,6 +291,7 @@ function installConnectSkill(options) {
 //#endregion
 //#region src/oclif/notify-session-errors.ts
 var NativeSessionError = class extends ListenStateError {
+	submitted;
 	constructor(message, submitted = false) {
 		super(message);
 		this.submitted = submitted;
@@ -399,7 +401,7 @@ async function connectNativeSession(options) {
 	}
 	options.signal.throwIfAborted();
 	const socket = new WebSocket(`ws+unix://${identity.targetPath}:/`, {
-		maxPayload: 8 * 1024 * 1024,
+		maxPayload: 8388608,
 		handshakeTimeout: timeoutMs,
 		followRedirects: false
 	});
@@ -555,7 +557,7 @@ async function connectNativeSession(options) {
 			}
 			beforeDispatch();
 			try {
-				const turn = record(record(await request("turn/start", {
+				const result = record(await request("turn/start", {
 					threadId: options.threadId,
 					input: [],
 					toolOutput: {
@@ -563,7 +565,8 @@ async function connectNativeSession(options) {
 						namespace: "primitive",
 						output: text
 					}
-				})).turn);
+				}));
+				const turn = record(result.turn);
 				if (typeof turn.id !== "string" || turn.id.length === 0 || !Array.isArray(turn.items) || typeof turn.status !== "string" || ![
 					"completed",
 					"interrupted",
@@ -716,7 +719,8 @@ function index(value) {
 	};
 }
 function stateDirectory(configDir, scope, threadId) {
-	return join(configDir, "session-notifications", createHash("sha256").update(JSON.stringify([scope, uuid(threadId)])).digest("hex"));
+	const key = createHash("sha256").update(JSON.stringify([scope, uuid(threadId)])).digest("hex");
+	return join(configDir, "session-notifications", key);
 }
 function privateDirectory(path) {
 	const info = lstatSync(path);

package/dist/oclif/auto-signal-worker.js

@@ -1,6 +1,6 @@
-import { A as readThreadContext, Gt as createAuthenticatedCliApiClient, Tn as getSentEmail } from "../api-command-C_Fn9Zef.js";
-import { _ as acquireListenLock } from "../shared-mail-files-SPPcis9g.js";
-import { t as sendSignal } from "../signal-command-CqfODMCp.js";
+import { A as readThreadContext, Gt as createAuthenticatedCliApiClient, Tn as getSentEmail } from "../api-command-0FiEAuQi.js";
+import { _ as acquireListenLock } from "../shared-mail-files-MwlVE90c.js";
+import { t as sendSignal } from "../signal-command-COQff2Vq.js";
 import { AUTO_SIGNAL_KIND_ENV, AUTO_WORKING_RENEW_MS, autoSignalsDisabled, clearWorkingSending, markWorkingSending, readAutoClaim, readWorkingLease, recordRenewer, stopWorkingLease, writeWorkingLease } from "./auto-signals.js";
 import { join } from "node:path";
 import { homedir } from "node:os";