primcli 1.64.0 → 1.66.0

package/README.md

@@ -324,6 +324,23 @@ still goes out, and different replies to the same email are separate sends. To
 retry an uncertain send after the window, pass the key it reported with
 `--idempotency-key`.
 
+When a send is answered with an earlier one, nothing goes out and the stderr
+notice says which send answered it and why:
+
+| Why | Notice |
+|---|---|
+| The same content inside the five-minute window, with no key of your own | `Not sent: identical to <id> sent 42s ago (status delivered). Pass --idempotency-key with a new key to send again.` |
+| A key you passed that was already used | `Not sent: idempotency key <key> was already used for <id> sent 3h ago (status delivered). A key you pass never expires. Use a different key only for a different message.` |
+| A Function sending again for the email or event that invoked it | `Not sent: this Function already sent this message as <id> sent 2m ago (status delivered), for the same email or event that invoked it. A Function that runs again for one trigger sends once.` |
+| A reply with no key to an email that already has a reply | `Not sent: the email already has a reply, <id> sent 5m ago (status delivered). Pass an idempotency key to send another reply.` |
+
+The notice goes to stderr only, so stdout stays parseable. With `--json` it is
+the envelope's `outcome_message`, and `sent.idempotency` carries the same facts
+as fields (`key_source`, `original_sent_email_id`, `original_created_at`,
+`window_seconds`). The outcome is `already_sent` and the exit code is 0 in every
+case. An API response without the `idempotency` object gets the general notice,
+`Already sent: this exact message went out earlier (...). Nothing new was sent.`
+
 Without `--json`, `send` and `reply` keep printing the send record on stdout exactly
 as before and add a one-line stderr summary such as `Reply sent (queued for
 delivery, id X). Do not resend.` Before sending, `primitive reply` (and

package/dist/{api-command-C3XihKH7.js → api-command-T189Vupo.js}

@@ -1,4 +1,4 @@
-import { S as __exportAll, _ as WEBHOOK_EVENT_TYPES, g as SENT_EMAIL_EVENT_TYPES } from "./repeats-BL7ZC-_6-Dzangtkf.js";
+import { S as __exportAll, _ as WEBHOOK_EVENT_TYPES, g as SENT_EMAIL_EVENT_TYPES } from "./repeats-BL7ZC-_6-O_YE1_cO.js";
 import { C as resolveCliAuth, F as agentProfilesDirectory, G as createClient, H as requireDefaultLoginProfile, K as createConfig, N as agentProfileDirectory, R as loadConnectedAgentProfile, S as normalizeApiBaseUrl, T as saveSignupCredentials, W as PrimitiveApiClient, _ as deleteCliCredentials, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, i as loadCliConfig, j as AGENT_PROFILE_ENV, m as cliAccessTokenExpiresAt, p as acquireCliCredentialsLock, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname } from "./cli-config-DMszFbGn.js";
 import { h as writeMailJson, m as withMailLock, p as syncMailDirectory, u as privateMailPermissions } from "./shared-mail-files-MwlVE90c.js";
 import { Command, Errors, Flags } from "@oclif/core";
@@ -3894,22 +3894,93 @@ function withFlagSuggestion(error, valid) {
 //#region src/oclif/idempotent-replay-banner.ts
 /**
 * If `data` carries `idempotent_replay: true`, write a stderr notice
-* that the message already went out and nothing new was sent.
-* Otherwise no-op.
-*
-* The notice deliberately gives no advice on how to force a fresh
-* copy. Whoever sees a replay has already sent this message; telling
-* them to vary the content is an instruction to double-send.
+* that nothing new was sent and why. Otherwise no-op.
 */
 function writeIdempotentReplayBannerIfReplay(data, options) {
 	if (!isReplay(data)) return;
-	options.write(`${formatAlreadySentNotice(data)}\n`);
+	const { write, ...notice } = options;
+	write(`${formatAlreadySentNotice(data, notice)}\n`);
 }
 function isReplay(data) {
 	if (data === null || typeof data !== "object") return false;
 	return data.idempotent_replay === true;
 }
-function formatAlreadySentNotice(sent) {
+function nonEmptyString(value) {
+	return typeof value === "string" && value ? value : null;
+}
+/**
+* Read the API's `idempotency` object. Null when it is absent or names
+* a key source this CLI does not know, so the general notice is used
+* and nothing is claimed about a case it cannot describe.
+*/
+function readReplayDetail(sent, keyOrigin) {
+	const raw = sent.idempotency;
+	if (raw === null || typeof raw !== "object") return null;
+	const object = raw;
+	const source = object.key_source;
+	let kind;
+	if (sent.dedup_reason === "parent_already_replied") kind = "parent_already_replied";
+	else if (source === "auto_content" || source === "function_trigger") kind = source;
+	else if (source === "explicit") kind = keyOrigin === "cli_derived" ? "auto_content" : "explicit";
+	else return null;
+	return {
+		kind,
+		originalId: nonEmptyString(object.original_sent_email_id) ?? nonEmptyString(sent.id),
+		originalCreatedAt: nonEmptyString(object.original_created_at)
+	};
+}
+/** "12s ago", "4m ago", "3h ago", "9d ago"; null when the time is unusable. */
+function formatReplayAge(createdAt, now) {
+	if (createdAt === null) return null;
+	const created = Date.parse(createdAt);
+	if (Number.isNaN(created)) return null;
+	const seconds = Math.max(0, Math.round((now - created) / 1e3));
+	if (seconds < 120) return `${seconds}s ago`;
+	const minutes = Math.round(seconds / 60);
+	if (minutes < 120) return `${minutes}m ago`;
+	const hours = Math.round(minutes / 60);
+	if (hours < 48) return `${hours}h ago`;
+	return `${Math.round(hours / 24)}d ago`;
+}
+function statusSuffix(sent) {
+	const status = nonEmptyString(sent.status);
+	const deliveryStatus = nonEmptyString(sent.delivery_status);
+	const details = [];
+	if (status) details.push(`status ${status}`);
+	if (deliveryStatus && deliveryStatus !== status) details.push(`delivery status ${deliveryStatus}`);
+	return details.length > 0 ? ` (${details.join(", ")})` : "";
+}
+function formatSpecificNotice(sent, detail, options) {
+	const age = formatReplayAge(detail.originalCreatedAt, options.now ?? Date.now());
+	const when = age ? ` sent ${age}` : "";
+	const id = detail.originalId ?? "an earlier send";
+	const state = statusSuffix(sent);
+	const advise = options.advise !== false;
+	const keyHint = options.keyHint ?? "an idempotency key";
+	switch (detail.kind) {
+		case "auto_content": return `Not sent: identical to ${id}${when}${state}.${advise ? ` Pass ${keyHint} to send again.` : ""}`;
+		case "explicit": {
+			const key = nonEmptyString(sent.client_idempotency_key);
+			return `Not sent: ${key ? `idempotency key ${key}` : "this idempotency key"} was already used for ${id}${when}${state}. A key you pass never expires.${advise ? " Use a different key only for a different message." : ""}`;
+		}
+		case "function_trigger": return `Not sent: this Function already sent this message as ${id}${when}${state}, for the same email or event that invoked it. A Function that runs again for one trigger sends once.`;
+		case "parent_already_replied": return `Not sent: the email already has a reply, ${id}${when}${state}.${advise ? ` Pass ${keyHint} to send another reply.` : ""}`;
+	}
+}
+/**
+* The notice for a send that was answered with an existing send. Worded
+* from the API's `idempotency` object when the response carries one;
+* the general "already sent" notice otherwise.
+*
+* The advice never says to change the message. Whoever sees this has a
+* send on record already, and varying the content to get past it is how
+* a retry becomes a double send. Sending the same thing again on
+* purpose is a different request, and an idempotency key is how the API
+* is told so.
+*/
+function formatAlreadySentNotice(sent, options = {}) {
+	const detail = readReplayDetail(sent, options.keyOrigin ?? "caller");
+	if (detail) return formatSpecificNotice(sent, detail, options);
 	const details = [];
 	if (typeof sent.id === "string" && sent.id) details.push(`sent id ${sent.id}`);
 	const status = typeof sent.status === "string" && sent.status ? sent.status : null;
@@ -4378,7 +4449,10 @@ function reportSendCommandResult(params) {
 			errorPayload = { message: "The API returned no send record." };
 		} else {
 			outcome = successfulSendOutcome(sent);
-			outcomeMessage = outcome === "not_sent" || outcome === "uncertain" ? formatSendRecordFailureSummary(params.noun, outcome, sent) : outcome === "already_sent" ? formatAlreadySentNotice(sent) : formatSentSummary(params.noun, sent);
+			outcomeMessage = outcome === "not_sent" || outcome === "uncertain" ? formatSendRecordFailureSummary(params.noun, outcome, sent) : outcome === "already_sent" ? formatAlreadySentNotice(sent, {
+				keyOrigin: params.idempotencyKeyOrigin ?? "caller",
+				keyHint: "--idempotency-key with a new key"
+			}) : formatSentSummary(params.noun, sent);
 		}
 		if (!params.json) params.writeStderr(`${outcomeMessage}\n`);
 	}
@@ -5225,7 +5299,7 @@ function savedConnectedProfiles(configDir, exclude) {
 */
 async function otherProfiles(configDir, session, current) {
 	if (session) try {
-		const { connectedProfilesForSession } = await import("./machine-session-B3JznlvO.js").then((n) => n.s);
+		const { connectedProfilesForSession } = await import("./machine-session-CgEAzThT.js").then((n) => n.s);
 		return {
 			inSession: true,
 			profiles: connectedProfilesForSession(configDir, session, current)

package/dist/{machine-session-B3JznlvO.js → machine-session-CgEAzThT.js}

@@ -1,9 +1,9 @@
-import { S as __exportAll } from "./repeats-BL7ZC-_6-Dzangtkf.js";
+import { S as __exportAll } from "./repeats-BL7ZC-_6-O_YE1_cO.js";
 import { B as parseOwnerMemberAddress, F as agentProfilesDirectory, I as connectedAgentIdentity, L as connectedApiBaseUrl, M as AgentConnectionSetupError, N as agentProfileDirectory, P as agentProfileName, R as loadConnectedAgentProfile, U as saveConnectedAgentProfile, V as profileAlreadyConnectedMessage, W as PrimitiveApiClient, j as AGENT_PROFILE_ENV, x as loadCliCredentials, z as parseConnectedAgentProfile } from "./cli-config-DMszFbGn.js";
-import { Ct as cliInvocation, Jn as putAgentContactPolicy, Jt as refreshStoredCliCredentials, Pn as listDomains, Tt as defaultConnectionName, Vn as listSentEmails, Yn as putContact, an as deleteAgentContact, ar as sendEmail, jn as listContacts, kn as listAgentContacts, mn as getContact, nr as searchEmails, on as deleteContact, pn as getAgentContactPolicy, qn as putAgentContact, vn as getEmail } from "./api-command-C3XihKH7.js";
+import { Ct as cliInvocation, Jn as putAgentContactPolicy, Jt as refreshStoredCliCredentials, Pn as listDomains, Tt as defaultConnectionName, Vn as listSentEmails, Yn as putContact, an as deleteAgentContact, ar as sendEmail, jn as listContacts, kn as listAgentContacts, mn as getContact, nr as searchEmails, on as deleteContact, pn as getAgentContactPolicy, qn as putAgentContact, vn as getEmail } from "./api-command-T189Vupo.js";
 import { _ as acquireListenLock, c as mailTime, d as readMailJson, f as removeMailFile, g as ListenStateError, h as writeMailJson, i as mailId, l as privateMailDirectory, o as mailObject, r as mailAddress, s as mailString } from "./shared-mail-files-MwlVE90c.js";
-import { _ as detectAgentRuntime, a as NotificationRetryError, d as defaultSessionSocket, f as NativeSessionDisconnectedError, l as SESSION_UUID, t as notificationScope, u as connectNativeSession, v as installConnectSkill, x as readBundledConnectSkill } from "./notify-session-Bzcs3VBe.js";
-import { a as scopedChatSenderTrust } from "./scoped-chat-BW041zEY.js";
+import { _ as detectAgentRuntime, a as NotificationRetryError, d as defaultSessionSocket, f as NativeSessionDisconnectedError, l as SESSION_UUID, t as notificationScope, u as connectNativeSession, v as installConnectSkill, x as readBundledConnectSkill } from "./notify-session-CaG0vpjw.js";
+import { a as scopedChatSenderTrust } from "./scoped-chat-DKpjp27r.js";
 import { l as stopBackgroundListen, r as backgroundListenStatus } from "./listen-background--0peztKE.js";
 import { t as readSharedMailOwner } from "./shared-mail-watch-DtKpsgg8.js";
 import { accessSync, chmodSync, closeSync, constants, copyFileSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";

package/dist/{notify-session-Bzcs3VBe.js → notify-session-CaG0vpjw.js}

@@ -1,5 +1,5 @@
-import { b as parseWebhookEvent, c as classifySignalContent, v as isEmailReceivedEvent, y as isTrustedSender } from "./repeats-BL7ZC-_6-Dzangtkf.js";
-import { F as wakeReadCommand, P as skillFirstLine, Y as wakeInteractionSentence, dn as downloadEmailAttachmentPart } from "./api-command-C3XihKH7.js";
+import { b as parseWebhookEvent, c as classifySignalContent, v as isEmailReceivedEvent, y as isTrustedSender } from "./repeats-BL7ZC-_6-O_YE1_cO.js";
+import { F as wakeReadCommand, P as skillFirstLine, Y as wakeInteractionSentence, dn as downloadEmailAttachmentPart } from "./api-command-T189Vupo.js";
 import { _ as acquireListenLock, g as ListenStateError, y as listenIdentity } from "./shared-mail-files-MwlVE90c.js";
 import { closeSync, copyFileSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, opendirSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHash, randomUUID, scryptSync } from "node:crypto";

package/dist/oclif/auto-signal-worker.js

@@ -1,6 +1,6 @@
-import { A as readThreadContext, En as getSentEmail, Kt as createAuthenticatedCliApiClient } from "../api-command-C3XihKH7.js";
+import { A as readThreadContext, En as getSentEmail, Kt as createAuthenticatedCliApiClient } from "../api-command-T189Vupo.js";
 import { _ as acquireListenLock } from "../shared-mail-files-MwlVE90c.js";
-import { t as sendSignal } from "../signal-command-CgNIftzG.js";
+import { t as sendSignal } from "../signal-command-CztPfoRE.js";
 import { AUTO_SIGNAL_KIND_ENV, AUTO_WORKING_RENEW_MS, autoSignalsDisabled, clearWorkingSending, markWorkingSending, readAutoClaim, readWorkingLease, recordRenewer, stopWorkingLease, writeWorkingLease } from "./auto-signals.js";
 import { join } from "node:path";
 import { homedir } from "node:os";

package/dist/oclif/auto-signals.js

@@ -1,5 +1,5 @@
 import { d as readMailJson, h as writeMailJson, i as mailId, l as privateMailDirectory, r as mailAddress } from "../shared-mail-files-MwlVE90c.js";
-import { a as scopedChatSenderTrust, n as isPlainChatReply } from "../scoped-chat-BW041zEY.js";
+import { a as scopedChatSenderTrust, n as isPlainChatReply } from "../scoped-chat-DKpjp27r.js";
 import { existsSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { join } from "node:path";

package/dist/oclif/index.js

@@ -1,12 +1,12 @@
-import { a as REPEAT_IDLE_MAX_MINUTES, b as parseWebhookEvent, d as parseRepeatTick, f as preparePresenceAliveEmail, i as REPEAT_EVERY_MAX_MINUTES, l as parseInteractionEnvelope$1, m as repeatStopCommand, o as REPEAT_MAX_SENDS_MAX, p as prepareSignalEmail, s as buildRepeatStopBody, u as parsePresenceEnvelope, v as isEmailReceivedEvent, x as parseFromHeader } from "../repeats-BL7ZC-_6-Dzangtkf.js";
+import { a as REPEAT_IDLE_MAX_MINUTES, b as parseWebhookEvent, d as parseRepeatTick, f as preparePresenceAliveEmail, i as REPEAT_EVERY_MAX_MINUTES, l as parseInteractionEnvelope$1, m as repeatStopCommand, o as REPEAT_MAX_SENDS_MAX, p as prepareSignalEmail, s as buildRepeatStopBody, u as parsePresenceEnvelope, v as isEmailReceivedEvent, x as parseFromHeader } from "../repeats-BL7ZC-_6-O_YE1_cO.js";
 import { A as saveActiveChatState, C as resolveCliAuth, D as deleteChatState, E as chatStatePath, F as agentProfilesDirectory, H as requireDefaultLoginProfile, M as AgentConnectionSetupError, N as agentProfileDirectory, O as loadActiveChatState, P as agentProfileName, R as loadConnectedAgentProfile, T as saveSignupCredentials, W as PrimitiveApiClient, _ as deleteCliCredentials, a as normalizeCliEnvironmentName, b as hasStoredCliLogin, c as resolveConfigEnvironment, g as credentialsPath, h as credentialsLockPath, i as loadCliConfig, j as AGENT_PROFILE_ENV, k as loadChatConversationByLocalId, l as saveCliConfig, m as cliAccessTokenExpiresAt, n as deleteCliConfig, o as redactCliEnvironment, p as acquireCliCredentialsLock, r as emptyCliConfig, s as removeCliEnvironment, u as upsertCliEnvironment, v as deleteCliCredentialsLock, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname } from "../cli-config-DMszFbGn.js";
-import { $ as apiResultHttpStatus, $n as replyToEmail, $t as completeWebhookEvent, A as readThreadContext, An as listAgentNetworks, At as formatAlreadySentNotice, B as pendingMailPath, Bn as listRoutes, Bt as expectedAutomatedVerdicts, C as queryUsesAwaiting, Cn as getMemory, Cr as verifyAgentSignup, Ct as cliInvocation, D as displayAddress, Dn as getThread, Dt as identitySuggestions, E as describeWake, En as getSentEmail, Et as generatedAgentName, F as wakeReadCommand, Fn as listEmails, Ft as AUTOMATED_VALUES, G as interactionNextActions, Gn as pollCliLogin, H as recordPendingMail, Hn as listWakeAuthorizations, Ht as isAutomatedRejectedError, I as wakeRecipientField, In as listEndpoints, It as AutomatedFilterUnsupportedError, J as replyInteractionWarning, Jt as refreshStoredCliCredentials, K as readEmailInteraction, Kn as pullWebhookEvent, Kt as createAuthenticatedCliApiClient, L as wakeRelationship, Ln as listFunctionLogs, Lt as assertAutomatedVerdict, M as serverMuted, Mn as listDefaultNetworkAgents, Mt as withFlagSuggestion, N as serverRelationship, Nn as listDefaultNetworkMembers, Nt as AUTOMATED_FILTER_UNSUPPORTED_CODE, O as formatMailWakeLine, On as getWakeSchedule, Ot as loadSkillLine, Pn as listDomains, Pt as AUTOMATED_FLAG_DESCRIPTION, Q as SEND_OUTCOME_HELP, Qn as reorderRoutes, Qt as cliLogout, R as clearConsumedPendingMail, Rn as listFunctions, Rt as automatedRejectedError, S as isAwaitingRejectedError, Sn as getInboxStatus, Sr as verifyAgentClaim, T as bareAddress, Tn as getRepeatingSend, U as removePendingMail, Un as listWakeDispatches, Ut as queryUsesAutomated, V as readPendingMail, Vn as listSentEmails, Vt as hasAutomatedVerdict, W as interactionHumanLine, Wn as listWakeSchedules, Wt as ConnectedAgentKeyRequiredError, X as IDEMPOTENCY_KEY_FLAG_DESCRIPTION, Xn as redeemCreditCode, Xt as addDefaultNetworkMember, Yt as resolveCliApiRequestConfig, Z as MAX_SEND_WAIT_TIMEOUT_MS, Zn as removeDefaultNetworkMember, Zt as checkDefaultNetworkContactAdmission, _ as awaitingRejectedError, _n as getDefaultNetworkAgent, _r as updateFunction, _t as sendWaitClampNotice, a as extractErrorCode, ar as sendEmail, at as deriveSendIdempotencyKey, b as formatRepliesCell, bn as getFunctionRouting, br as updateWakeAuthorization, bt as successfulSendOutcome, c as readTextFileFlag, cn as deleteRoute, cr as setMemory, ct as formatDeletedEarlierSendNotice, d as writeErrorWithHints, dr as startAgentSignup, dt as formatSendFailureSummary, en as createEndpoint, er as resendAgentSignupVerification, et as assertValidIdempotencyKey, f as AWAITING_FLAG_DESCRIPTION, fn as getAccount, fr as startCliLogin, ft as formatSendRecordFailureSummary, g as assertAwaitingFilterRows, gn as getCreditBalance, gr as updateDefaultNetworkMember, gt as sendOutcomeExitCode, h as ReplyStateUnsupportedError, hn as getConversation, hr as unsetFunctionRoute, ht as sendIdentityFields, i as createOperationCommand, in as createWakeSchedule, ir as semanticSearch, it as classifySendError, j as sentInThread, jt as writeIdempotentReplayBannerIfReplay, k as latestOwnOutbound, kn as listAgentContacts, kt as currentMailSessionKey, l as runWithTiming, ln as deleteWakeAuthorization, lr as simulateRoute, lt as formatPriorRepliesCheckSkipped, m as REPLY_STATE_UNSUPPORTED_CODE, mr as testFunction, mt as reportSendCommandResult, n as API_ERROR_CODES, nn as createRoute, nr as searchEmails, nt as buildThrownSendFailureEnvelope, o as extractErrorPayload, or as setFunctionRoute, ot as excludeSignalReplies, p as AWAITING_VALUES, pn as getAgentContactPolicy, pr as stopRepeatFromEmail, pt as priorRepliesThatWentOut, q as replyExpectation, qt as createCliApiClient, r as TIME_FLAG_DESCRIPTION, rn as createWakeAuthorization, rr as searchMemories, rt as checkPriorReplies, s as formatErrorPayload, sn as deleteMemory, sr as setFunctionSecret, st as followUpCommandPrefix, t as API_BASE_URL_FLAG_DESCRIPTION, tn as createFunction, tr as runWakeSchedule, tt as buildFollowUpCommand, u as surfaceUnauthorizedHint, un as deleteWakeSchedule, ur as startAgentClaim, ut as formatPriorRepliesWarning, v as ensureSearchReportsReplyState, vn as getEmail, vr as updateRepeatingSend, vt as sentHistoryWindowStart, w as explainPendingMailNotFound, wn as getOrgRoutingTopology, wt as connectNextSteps, x as hasReplyState, xn as getFunctionTestRunTrace, xr as updateWakeSchedule, xt as thrownErrorExitCode, y as formatAwaitingCell, yn as getFunction, yr as updateRoute, yt as serializeErrorPayload, z as clearReadPendingMail, zn as listRepeatingSends, zt as ensureSearchReportsAutomated } from "../api-command-C3XihKH7.js";
+import { $ as apiResultHttpStatus, $n as replyToEmail, $t as completeWebhookEvent, A as readThreadContext, An as listAgentNetworks, At as formatAlreadySentNotice, B as pendingMailPath, Bn as listRoutes, Bt as expectedAutomatedVerdicts, C as queryUsesAwaiting, Cn as getMemory, Cr as verifyAgentSignup, Ct as cliInvocation, D as displayAddress, Dn as getThread, Dt as identitySuggestions, E as describeWake, En as getSentEmail, Et as generatedAgentName, F as wakeReadCommand, Fn as listEmails, Ft as AUTOMATED_VALUES, G as interactionNextActions, Gn as pollCliLogin, H as recordPendingMail, Hn as listWakeAuthorizations, Ht as isAutomatedRejectedError, I as wakeRecipientField, In as listEndpoints, It as AutomatedFilterUnsupportedError, J as replyInteractionWarning, Jt as refreshStoredCliCredentials, K as readEmailInteraction, Kn as pullWebhookEvent, Kt as createAuthenticatedCliApiClient, L as wakeRelationship, Ln as listFunctionLogs, Lt as assertAutomatedVerdict, M as serverMuted, Mn as listDefaultNetworkAgents, Mt as withFlagSuggestion, N as serverRelationship, Nn as listDefaultNetworkMembers, Nt as AUTOMATED_FILTER_UNSUPPORTED_CODE, O as formatMailWakeLine, On as getWakeSchedule, Ot as loadSkillLine, Pn as listDomains, Pt as AUTOMATED_FLAG_DESCRIPTION, Q as SEND_OUTCOME_HELP, Qn as reorderRoutes, Qt as cliLogout, R as clearConsumedPendingMail, Rn as listFunctions, Rt as automatedRejectedError, S as isAwaitingRejectedError, Sn as getInboxStatus, Sr as verifyAgentClaim, T as bareAddress, Tn as getRepeatingSend, U as removePendingMail, Un as listWakeDispatches, Ut as queryUsesAutomated, V as readPendingMail, Vn as listSentEmails, Vt as hasAutomatedVerdict, W as interactionHumanLine, Wn as listWakeSchedules, Wt as ConnectedAgentKeyRequiredError, X as IDEMPOTENCY_KEY_FLAG_DESCRIPTION, Xn as redeemCreditCode, Xt as addDefaultNetworkMember, Yt as resolveCliApiRequestConfig, Z as MAX_SEND_WAIT_TIMEOUT_MS, Zn as removeDefaultNetworkMember, Zt as checkDefaultNetworkContactAdmission, _ as awaitingRejectedError, _n as getDefaultNetworkAgent, _r as updateFunction, _t as sendWaitClampNotice, a as extractErrorCode, ar as sendEmail, at as deriveSendIdempotencyKey, b as formatRepliesCell, bn as getFunctionRouting, br as updateWakeAuthorization, bt as successfulSendOutcome, c as readTextFileFlag, cn as deleteRoute, cr as setMemory, ct as formatDeletedEarlierSendNotice, d as writeErrorWithHints, dr as startAgentSignup, dt as formatSendFailureSummary, en as createEndpoint, er as resendAgentSignupVerification, et as assertValidIdempotencyKey, f as AWAITING_FLAG_DESCRIPTION, fn as getAccount, fr as startCliLogin, ft as formatSendRecordFailureSummary, g as assertAwaitingFilterRows, gn as getCreditBalance, gr as updateDefaultNetworkMember, gt as sendOutcomeExitCode, h as ReplyStateUnsupportedError, hn as getConversation, hr as unsetFunctionRoute, ht as sendIdentityFields, i as createOperationCommand, in as createWakeSchedule, ir as semanticSearch, it as classifySendError, j as sentInThread, jt as writeIdempotentReplayBannerIfReplay, k as latestOwnOutbound, kn as listAgentContacts, kt as currentMailSessionKey, l as runWithTiming, ln as deleteWakeAuthorization, lr as simulateRoute, lt as formatPriorRepliesCheckSkipped, m as REPLY_STATE_UNSUPPORTED_CODE, mr as testFunction, mt as reportSendCommandResult, n as API_ERROR_CODES, nn as createRoute, nr as searchEmails, nt as buildThrownSendFailureEnvelope, o as extractErrorPayload, or as setFunctionRoute, ot as excludeSignalReplies, p as AWAITING_VALUES, pn as getAgentContactPolicy, pr as stopRepeatFromEmail, pt as priorRepliesThatWentOut, q as replyExpectation, qt as createCliApiClient, r as TIME_FLAG_DESCRIPTION, rn as createWakeAuthorization, rr as searchMemories, rt as checkPriorReplies, s as formatErrorPayload, sn as deleteMemory, sr as setFunctionSecret, st as followUpCommandPrefix, t as API_BASE_URL_FLAG_DESCRIPTION, tn as createFunction, tr as runWakeSchedule, tt as buildFollowUpCommand, u as surfaceUnauthorizedHint, un as deleteWakeSchedule, ur as startAgentClaim, ut as formatPriorRepliesWarning, v as ensureSearchReportsReplyState, vn as getEmail, vr as updateRepeatingSend, vt as sentHistoryWindowStart, w as explainPendingMailNotFound, wn as getOrgRoutingTopology, wt as connectNextSteps, x as hasReplyState, xn as getFunctionTestRunTrace, xr as updateWakeSchedule, xt as thrownErrorExitCode, y as formatAwaitingCell, yn as getFunction, yr as updateRoute, yt as serializeErrorPayload, z as clearReadPendingMail, zn as listRepeatingSends, zt as ensureSearchReportsAutomated } from "../api-command-T189Vupo.js";
 import { S as resolveListenSubscription, _ as acquireListenLock, a as mailLockBusy, c as mailTime, d as readMailJson, f as removeMailFile, g as ListenStateError, h as writeMailJson, i as mailId, l as privateMailDirectory, m as withMailLock, o as mailObject, u as privateMailPermissions, x as normalizeListenOrigin, y as listenIdentity } from "../shared-mail-files-MwlVE90c.js";
-import { _ as detectAgentRuntime, a as NotificationRetryError, b as installedVersion, c as readConversationStatusContent, d as defaultSessionSocket, f as NativeSessionDisconnectedError, g as connectSkillTarget, h as NotificationOutcomeUnknownError, i as notificationReceiptPage, l as SESSION_UUID$1, m as NativeSessionNotLoadedError, n as notificationSenders, o as isRoutineNotificationContent, p as NativeSessionError, r as openSessionNotifications, s as notificationPartReader, t as notificationScope, v as installConnectSkill, x as readBundledConnectSkill, y as installedConnectSkillFile } from "../notify-session-Bzcs3VBe.js";
-import { $ as boundSessionProfiles, A as AgentDisconnectError, B as runContactRequest, C as verificationReplySubmitted, D as createNotificationContactPolicy, E as NetworkAdmissionPendingError, F as addressNoteTarget, G as receiverStatusCommand, H as agentInvitationHash, I as runAddressNotesRequest, J as savedReceiver, K as refusalAfterReplacement, L as ContactsApiError, M as clearRevokedAddresses, N as disconnectAgent, O as evaluateContactPolicy, P as AddressNotesApiError, Q as recordHookMailCheck, R as contactAddress, S as externalReceivingState, T as NETWORK_ADMISSION_PENDING_RETRY_MS, U as connectAgent, V as agentConnectionStatus, W as readAgentInvitation, X as releaseRegistrationsForProfile, Y as MACHINE_RUNTIMES, Z as installClaudeWakeHook, _ as defaultAgentProfileName, _t as upsertManagedBlock, a as endSession, at as ephemeralCliReason, b as runAgentConnect, bt as refreshOwnerMemberAddressPeriodically, c as pendingSessionDisconnects, ct as inspectClaudeHooks, d as registerSession, dt as samePath, et as claudeConfigDir, f as retryPendingDisconnects, ft as writeClaudeSettings, g as connectWarnings, gt as readManagedFile, h as enrollmentResumes, ht as jsonIndentation, i as connectedProfilesForSession, it as ensureHookLauncher, j as claimOverRevokedSetup, k as canonicalContactSelector, l as psProcessInfo, lt as readClaudeSettings, m as enrollAgent, mt as inspectManagedBlock, n as OMP_MAIN, nt as describeSessionHookChange, o as headlessClaudeRun, ot as findOnPath, p as runDetached, pt as MachineFileError, q as saveConnectionName, r as agentConnectionState, rt as describeSessionHookItem, st as hasMachineSessionHooks, t as HOOK_END_GRACE_MS, tt as currentCliLocation, u as readClaudeHookInput, ut as repairClaudeHooks, v as invitationProfileName, vt as writeManagedFile, w as ContactPolicyReadRetryError, x as RECEIVER_MODES, xt as withOwnerMemberAddress, y as pollCheckCommand, yt as readHookLauncherWarning, z as contactAgentAddress } from "../machine-session-B3JznlvO.js";
-import { a as scopedChatSenderTrust, i as readBeforeDeadline, n as isPlainChatReply, o as presenceDisposition, r as isScopedChatReply, s as readPresenceProjection, t as isConnectedChatCredential } from "../scoped-chat-BW041zEY.js";
+import { _ as detectAgentRuntime, a as NotificationRetryError, b as installedVersion, c as readConversationStatusContent, d as defaultSessionSocket, f as NativeSessionDisconnectedError, g as connectSkillTarget, h as NotificationOutcomeUnknownError, i as notificationReceiptPage, l as SESSION_UUID$1, m as NativeSessionNotLoadedError, n as notificationSenders, o as isRoutineNotificationContent, p as NativeSessionError, r as openSessionNotifications, s as notificationPartReader, t as notificationScope, v as installConnectSkill, x as readBundledConnectSkill, y as installedConnectSkillFile } from "../notify-session-CaG0vpjw.js";
+import { $ as boundSessionProfiles, A as AgentDisconnectError, B as runContactRequest, C as verificationReplySubmitted, D as createNotificationContactPolicy, E as NetworkAdmissionPendingError, F as addressNoteTarget, G as receiverStatusCommand, H as agentInvitationHash, I as runAddressNotesRequest, J as savedReceiver, K as refusalAfterReplacement, L as ContactsApiError, M as clearRevokedAddresses, N as disconnectAgent, O as evaluateContactPolicy, P as AddressNotesApiError, Q as recordHookMailCheck, R as contactAddress, S as externalReceivingState, T as NETWORK_ADMISSION_PENDING_RETRY_MS, U as connectAgent, V as agentConnectionStatus, W as readAgentInvitation, X as releaseRegistrationsForProfile, Y as MACHINE_RUNTIMES, Z as installClaudeWakeHook, _ as defaultAgentProfileName, _t as upsertManagedBlock, a as endSession, at as ephemeralCliReason, b as runAgentConnect, bt as refreshOwnerMemberAddressPeriodically, c as pendingSessionDisconnects, ct as inspectClaudeHooks, d as registerSession, dt as samePath, et as claudeConfigDir, f as retryPendingDisconnects, ft as writeClaudeSettings, g as connectWarnings, gt as readManagedFile, h as enrollmentResumes, ht as jsonIndentation, i as connectedProfilesForSession, it as ensureHookLauncher, j as claimOverRevokedSetup, k as canonicalContactSelector, l as psProcessInfo, lt as readClaudeSettings, m as enrollAgent, mt as inspectManagedBlock, n as OMP_MAIN, nt as describeSessionHookChange, o as headlessClaudeRun, ot as findOnPath, p as runDetached, pt as MachineFileError, q as saveConnectionName, r as agentConnectionState, rt as describeSessionHookItem, st as hasMachineSessionHooks, t as HOOK_END_GRACE_MS, tt as currentCliLocation, u as readClaudeHookInput, ut as repairClaudeHooks, v as invitationProfileName, vt as writeManagedFile, w as ContactPolicyReadRetryError, x as RECEIVER_MODES, xt as withOwnerMemberAddress, y as pollCheckCommand, yt as readHookLauncherWarning, z as contactAgentAddress } from "../machine-session-CgEAzThT.js";
+import { a as scopedChatSenderTrust, i as readBeforeDeadline, n as isPlainChatReply, o as presenceDisposition, r as isScopedChatReply, s as readPresenceProjection, t as isConnectedChatCredential } from "../scoped-chat-DKpjp27r.js";
 import { c as startBackgroundListen, i as backgroundListenToken, l as stopBackgroundListen, o as runBackgroundListen, r as backgroundListenStatus, u as verifyBackgroundListenTarget } from "../listen-background--0peztKE.js";
-import { a as ensureSharedMailSubscription, c as isConnectedAgentKey, d as reserveSharedMailSubscription, f as followEmailConversation, g as EventReceiverError, h as EventConnection, i as sharedMailScope, l as createSharedMailWaiter, m as otherParticipants, n as reconcileChatSend, p as readConversationFollow, r as openSharedMailReceiver, s as AGENT_CONNECTION_REQUIRED_MESSAGE, t as sendSignal, u as openSharedMailStore } from "../signal-command-CgNIftzG.js";
+import { a as ensureSharedMailSubscription, c as isConnectedAgentKey, d as reserveSharedMailSubscription, f as followEmailConversation, g as EventReceiverError, h as EventConnection, i as sharedMailScope, l as createSharedMailWaiter, m as otherParticipants, n as reconcileChatSend, p as readConversationFollow, r as openSharedMailReceiver, s as AGENT_CONNECTION_REQUIRED_MESSAGE, t as sendSignal, u as openSharedMailStore } from "../signal-command-CztPfoRE.js";
 import { autoSignalEligible, dispatchAutoRead, dispatchAutoWorking, haltAutoWorking, isSentSignal, readWorkingLease, restoreAutoWorking } from "./auto-signals.js";
 import { t as guardJsonOutputCommands } from "../json-output-CEskSQJi.js";
 import { Args, Command, Errors, Flags, ux } from "@oclif/core";
@@ -1651,7 +1651,8 @@ const openapiDocument = {
 				},
 				"responses": {
 					"200": {
-						"description": "Outbound relay result",
+						"description": "Outbound relay result. When the request was answered with an\nexisting send instead of making a new one, the response carries\n`Idempotent-Replayed: true` and `data.idempotency`, and nothing\nwas sent for this request.\n",
+						"headers": { "Idempotent-Replayed": { "$ref": "#/components/headers/IdempotentReplayed" } },
 						"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
 							"type": "object",
 							"properties": { "data": { "$ref": "#/components/schemas/SendMailResult" } }
@@ -2575,7 +2576,8 @@ const openapiDocument = {
 			},
 			"responses": {
 				"200": {
-					"description": "Outbound relay result",
+					"description": "Outbound relay result. When the request was answered with an\nexisting send instead of making a new one, the response carries\n`Idempotent-Replayed: true` and `data.idempotency`, and nothing\nwas sent for this request.\n",
+					"headers": { "Idempotent-Replayed": { "$ref": "#/components/headers/IdempotentReplayed" } },
 					"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
 						"type": "object",
 						"properties": { "data": { "$ref": "#/components/schemas/SendMailResult" } }
@@ -8295,6 +8297,20 @@ const openapiDocument = {
 				}
 			}
 		},
+		"headers": {
+			"IdempotentReplayed": {
+				"description": "Set to `true` when the request was answered with an existing send\ninstead of making a new one. Absent on a request that sent. On a\nbatch it means at least one message replayed; see\n`Idempotent-Replayed-Count`.\n",
+				"schema": { "type": "string" },
+				"example": "true"
+			},
+			"IdempotentReplayedCount": {
+				"description": "Batch sends only: how many messages were answered with an existing\nsend instead of being sent. Absent when every message sent.\n",
+				"schema": {
+					"type": "integer",
+					"minimum": 1
+				}
+			}
+		},
 		"responses": {
 			"AttachmentPart": {
 				"description": "Original attachment bytes; never a JSON envelope or a base64 string",
@@ -11715,6 +11731,10 @@ const openapiDocument = {
 							}
 						},
 						"required": ["hostname", "via"]
+					},
+					"from_name": {
+						"type": ["string", "null"],
+						"description": "Display name from the `From:` header, decoded for display:\nRFC 2047 encoded words are decoded in their declared charset\nand folded lines are joined (e.g. `Dana Rúiz` for\n`=?UTF-8?Q?Dana_R=C3=BAiz?= <dana@example.com>`). Null when\nthe header carries no display name, and may be absent; treat\na missing value the same as null.\n\nFor display only: the sender chooses this name freely, so\nidentify the sender by `from_email`, never by this name.\n"
 					}
 				},
 				"required": [
@@ -11929,7 +11949,11 @@ const openapiDocument = {
 					},
 					"from_header": {
 						"type": ["string", "null"],
-						"description": "Raw `From:` header from the message body, including any\ndisplay name (e.g. `\"Alice Example\" <alice@example.com>`).\nUse this when you need the display name for rendering.\n\nFor the bare email address (display name stripped), use\n`from_email`.\n"
+						"description": "Raw `From:` header from the message body, including any\ndisplay name (e.g. `\"Alice Example\" <alice@example.com>`).\nThe display name in this raw value may be RFC 2047 encoded\n(`=?UTF-8?Q?...?=`); use `from_name` for the decoded name.\n\nFor the bare email address (display name stripped), use\n`from_email`.\n"
+					},
+					"from_name": {
+						"type": ["string", "null"],
+						"description": "Display name from the `From:` header, decoded for display:\nRFC 2047 encoded words are decoded in their declared charset\nand folded lines are joined (e.g. `Dana Rúiz` for\n`=?UTF-8?Q?Dana_R=C3=BAiz?= <dana@example.com>`). Null when\nthe header carries no display name, and may be absent; treat\na missing value the same as null.\n\nFor display only: the sender chooses this name freely, so\nidentify the sender by `from_email`, never by this name.\n"
 					},
 					"content_discarded_at": {
 						"type": ["string", "null"],
@@ -11938,7 +11962,7 @@ const openapiDocument = {
 					"content_discarded_by_delivery_id": { "type": ["string", "null"] },
 					"from_email": {
 						"type": "string",
-						"description": "Bare email address parsed from the `From:` header, with\ndisplay name stripped (e.g. `alice@example.com`). Falls\nback to `sender` (the SMTP envelope MAIL FROM) when the\n`From:` header cannot be parsed.\n\n**This is the canonical \"who sent this email\" field for\nmost use cases**, including comparing against allowlists,\nrouting replies, or displaying the sender to a user. Use\n`from_header` when you specifically need the display name,\nor `sender`/`smtp_mail_from` when you need the SMTP\nenvelope value (e.g. to follow a bounce).\n"
+						"description": "Bare email address parsed from the `From:` header, with\ndisplay name stripped (e.g. `alice@example.com`). Falls\nback to `sender` (the SMTP envelope MAIL FROM) when the\n`From:` header cannot be parsed.\n\n**This is the canonical \"who sent this email\" field for\nmost use cases**, including comparing against allowlists,\nrouting replies, or displaying the sender to a user. Use\n`from_name` when you need the display name, `from_header`\nfor the raw header, or `sender`/`smtp_mail_from` when you\nneed the SMTP envelope value (e.g. to follow a bounce).\n"
 					},
 					"to_email": {
 						"type": "string",
@@ -13749,6 +13773,46 @@ const openapiDocument = {
 					"reply_sent_email_id"
 				]
 			},
+			"SendMailIdempotencyReplay": {
+				"type": "object",
+				"description": "Present only when the request was answered with an existing send\ninstead of making a new one (`idempotent_replay: true`). Nothing\nwas sent for this request. Says how the idempotency key was\nderived and which send the request collapsed onto. On the replay\nof a stored failure the same object is under `error.details`.\n",
+				"properties": {
+					"replayed": {
+						"type": "boolean",
+						"description": "Always `true`. The object is absent on a request that made a send of its own."
+					},
+					"key_source": {
+						"type": "string",
+						"enum": [
+							"explicit",
+							"auto_content",
+							"function_trigger"
+						],
+						"description": "`explicit`: the request carried an `Idempotency-Key` header.\n`auto_content`: no header was sent, so the key was derived\nfrom the canonical request content (recipients included) and\na fixed 5-minute window; an identical send inside the same\nwindow was not sent again. `function_trigger`: no header on a\nsend made by a Function, so the key was derived from the\ncontent, the Function and the inbound email (or event) that\ninvoked it.\n"
+					},
+					"original_sent_email_id": {
+						"type": "string",
+						"format": "uuid",
+						"description": "The send this request collapsed onto. Same value as `id`."
+					},
+					"original_created_at": {
+						"type": ["string", "null"],
+						"format": "date-time",
+						"description": "When that send was created."
+					},
+					"window_seconds": {
+						"type": ["integer", "null"],
+						"description": "Length of the content window (300) when an `auto_content`\nkey matched on content. Null for `explicit` and\n`function_trigger` keys, which have no window, and for a\nkeyless reply matched because its parent already has a reply\n(`dedup_reason: parent_already_replied`).\n"
+					}
+				},
+				"required": [
+					"replayed",
+					"key_source",
+					"original_sent_email_id",
+					"original_created_at",
+					"window_seconds"
+				]
+			},
 			"SendMailResult": {
 				"type": "object",
 				"properties": {
@@ -13805,6 +13869,11 @@ const openapiDocument = {
 						"type": "boolean",
 						"description": "True when the response replays a previously-recorded send\nkeyed by `client_idempotency_key` (same key, same canonical\npayload). False on a fresh send and on gate-denied\nresponses. Lets callers branch on cache state without\ndiffing fields.\n"
 					},
+					"dedup_reason": {
+						"type": ["string", "null"],
+						"description": "Why the response was a replay; null or absent on a fresh\nsend. `content_hash_match`: the idempotency key matched an\nearlier send. `parent_already_replied`: a reply sent without\nan `Idempotency-Key` header was matched to the reply its\nparent email already has. Pass an `Idempotency-Key` to send\nanother reply to the same email.\n"
+					},
+					"idempotency": { "$ref": "#/components/schemas/SendMailIdempotencyReplay" },
 					"scheduled_at": {
 						"type": "string",
 						"format": "date-time",
@@ -23208,7 +23277,11 @@ const operationManifest = [
 				},
 				"from_header": {
 					"type": ["string", "null"],
-					"description": "Raw `From:` header from the message body, including any\ndisplay name (e.g. `\"Alice Example\" <alice@example.com>`).\nUse this when you need the display name for rendering.\n\nFor the bare email address (display name stripped), use\n`from_email`.\n"
+					"description": "Raw `From:` header from the message body, including any\ndisplay name (e.g. `\"Alice Example\" <alice@example.com>`).\nThe display name in this raw value may be RFC 2047 encoded\n(`=?UTF-8?Q?...?=`); use `from_name` for the decoded name.\n\nFor the bare email address (display name stripped), use\n`from_email`.\n"
+				},
+				"from_name": {
+					"type": ["string", "null"],
+					"description": "Display name from the `From:` header, decoded for display:\nRFC 2047 encoded words are decoded in their declared charset\nand folded lines are joined (e.g. `Dana Rúiz` for\n`=?UTF-8?Q?Dana_R=C3=BAiz?= <dana@example.com>`). Null when\nthe header carries no display name, and may be absent; treat\na missing value the same as null.\n\nFor display only: the sender chooses this name freely, so\nidentify the sender by `from_email`, never by this name.\n"
 				},
 				"content_discarded_at": {
 					"type": ["string", "null"],
@@ -23217,7 +23290,7 @@ const operationManifest = [
 				"content_discarded_by_delivery_id": { "type": ["string", "null"] },
 				"from_email": {
 					"type": "string",
-					"description": "Bare email address parsed from the `From:` header, with\ndisplay name stripped (e.g. `alice@example.com`). Falls\nback to `sender` (the SMTP envelope MAIL FROM) when the\n`From:` header cannot be parsed.\n\n**This is the canonical \"who sent this email\" field for\nmost use cases**, including comparing against allowlists,\nrouting replies, or displaying the sender to a user. Use\n`from_header` when you specifically need the display name,\nor `sender`/`smtp_mail_from` when you need the SMTP\nenvelope value (e.g. to follow a bounce).\n"
+					"description": "Bare email address parsed from the `From:` header, with\ndisplay name stripped (e.g. `alice@example.com`). Falls\nback to `sender` (the SMTP envelope MAIL FROM) when the\n`From:` header cannot be parsed.\n\n**This is the canonical \"who sent this email\" field for\nmost use cases**, including comparing against allowlists,\nrouting replies, or displaying the sender to a user. Use\n`from_name` when you need the display name, `from_header`\nfor the raw header, or `sender`/`smtp_mail_from` when you\nneed the SMTP envelope value (e.g. to follow a bounce).\n"
 				},
 				"to_email": {
 					"type": "string",
@@ -23972,6 +24045,10 @@ const operationManifest = [
 							}
 						},
 						"required": ["hostname", "via"]
+					},
+					"from_name": {
+						"type": ["string", "null"],
+						"description": "Display name from the `From:` header, decoded for display:\nRFC 2047 encoded words are decoded in their declared charset\nand folded lines are joined (e.g. `Dana Rúiz` for\n`=?UTF-8?Q?Dana_R=C3=BAiz?= <dana@example.com>`). Null when\nthe header carries no display name, and may be absent; treat\na missing value the same as null.\n\nFor display only: the sender chooses this name freely, so\nidentify the sender by `from_email`, never by this name.\n"
 					}
 				},
 				"required": [
@@ -24398,6 +24475,10 @@ const operationManifest = [
 							}
 						},
 						"required": ["hostname", "via"]
+					},
+					"from_name": {
+						"type": ["string", "null"],
+						"description": "Display name from the `From:` header, decoded for display:\nRFC 2047 encoded words are decoded in their declared charset\nand folded lines are joined (e.g. `Dana Rúiz` for\n`=?UTF-8?Q?Dana_R=C3=BAiz?= <dana@example.com>`). Null when\nthe header carries no display name, and may be absent; treat\na missing value the same as null.\n\nFor display only: the sender chooses this name freely, so\nidentify the sender by `from_email`, never by this name.\n"
 					}
 				},
 				"required": [
@@ -33074,6 +33155,50 @@ const operationManifest = [
 					"type": "boolean",
 					"description": "True when the response replays a previously-recorded send\nkeyed by `client_idempotency_key` (same key, same canonical\npayload). False on a fresh send and on gate-denied\nresponses. Lets callers branch on cache state without\ndiffing fields.\n"
 				},
+				"dedup_reason": {
+					"type": ["string", "null"],
+					"description": "Why the response was a replay; null or absent on a fresh\nsend. `content_hash_match`: the idempotency key matched an\nearlier send. `parent_already_replied`: a reply sent without\nan `Idempotency-Key` header was matched to the reply its\nparent email already has. Pass an `Idempotency-Key` to send\nanother reply to the same email.\n"
+				},
+				"idempotency": {
+					"type": "object",
+					"description": "Present only when the request was answered with an existing send\ninstead of making a new one (`idempotent_replay: true`). Nothing\nwas sent for this request. Says how the idempotency key was\nderived and which send the request collapsed onto. On the replay\nof a stored failure the same object is under `error.details`.\n",
+					"properties": {
+						"replayed": {
+							"type": "boolean",
+							"description": "Always `true`. The object is absent on a request that made a send of its own."
+						},
+						"key_source": {
+							"type": "string",
+							"enum": [
+								"explicit",
+								"auto_content",
+								"function_trigger"
+							],
+							"description": "`explicit`: the request carried an `Idempotency-Key` header.\n`auto_content`: no header was sent, so the key was derived\nfrom the canonical request content (recipients included) and\na fixed 5-minute window; an identical send inside the same\nwindow was not sent again. `function_trigger`: no header on a\nsend made by a Function, so the key was derived from the\ncontent, the Function and the inbound email (or event) that\ninvoked it.\n"
+						},
+						"original_sent_email_id": {
+							"type": "string",
+							"format": "uuid",
+							"description": "The send this request collapsed onto. Same value as `id`."
+						},
+						"original_created_at": {
+							"type": ["string", "null"],
+							"format": "date-time",
+							"description": "When that send was created."
+						},
+						"window_seconds": {
+							"type": ["integer", "null"],
+							"description": "Length of the content window (300) when an `auto_content`\nkey matched on content. Null for `explicit` and\n`function_trigger` keys, which have no window, and for a\nkeyless reply matched because its parent already has a reply\n(`dedup_reason: parent_already_replied`).\n"
+						}
+					},
+					"required": [
+						"replayed",
+						"key_source",
+						"original_sent_email_id",
+						"original_created_at",
+						"window_seconds"
+					]
+				},
 				"scheduled_at": {
 					"type": "string",
 					"format": "date-time",
@@ -33847,6 +33972,50 @@ const operationManifest = [
 					"type": "boolean",
 					"description": "True when the response replays a previously-recorded send\nkeyed by `client_idempotency_key` (same key, same canonical\npayload). False on a fresh send and on gate-denied\nresponses. Lets callers branch on cache state without\ndiffing fields.\n"
 				},
+				"dedup_reason": {
+					"type": ["string", "null"],
+					"description": "Why the response was a replay; null or absent on a fresh\nsend. `content_hash_match`: the idempotency key matched an\nearlier send. `parent_already_replied`: a reply sent without\nan `Idempotency-Key` header was matched to the reply its\nparent email already has. Pass an `Idempotency-Key` to send\nanother reply to the same email.\n"
+				},
+				"idempotency": {
+					"type": "object",
+					"description": "Present only when the request was answered with an existing send\ninstead of making a new one (`idempotent_replay: true`). Nothing\nwas sent for this request. Says how the idempotency key was\nderived and which send the request collapsed onto. On the replay\nof a stored failure the same object is under `error.details`.\n",
+					"properties": {
+						"replayed": {
+							"type": "boolean",
+							"description": "Always `true`. The object is absent on a request that made a send of its own."
+						},
+						"key_source": {
+							"type": "string",
+							"enum": [
+								"explicit",
+								"auto_content",
+								"function_trigger"
+							],
+							"description": "`explicit`: the request carried an `Idempotency-Key` header.\n`auto_content`: no header was sent, so the key was derived\nfrom the canonical request content (recipients included) and\na fixed 5-minute window; an identical send inside the same\nwindow was not sent again. `function_trigger`: no header on a\nsend made by a Function, so the key was derived from the\ncontent, the Function and the inbound email (or event) that\ninvoked it.\n"
+						},
+						"original_sent_email_id": {
+							"type": "string",
+							"format": "uuid",
+							"description": "The send this request collapsed onto. Same value as `id`."
+						},
+						"original_created_at": {
+							"type": ["string", "null"],
+							"format": "date-time",
+							"description": "When that send was created."
+						},
+						"window_seconds": {
+							"type": ["integer", "null"],
+							"description": "Length of the content window (300) when an `auto_content`\nkey matched on content. Null for `explicit` and\n`function_trigger` keys, which have no window, and for a\nkeyless reply matched because its parent already has a reply\n(`dedup_reason: parent_already_replied`).\n"
+						}
+					},
+					"required": [
+						"replayed",
+						"key_source",
+						"original_sent_email_id",
+						"original_created_at",
+						"window_seconds"
+					]
+				},
 				"scheduled_at": {
 					"type": "string",
 					"format": "date-time",
@@ -39641,6 +39810,10 @@ function chatFailureText(message) {
 function chatHeading(text) {
 	return chatColor("bold", text);
 }
+const CHAT_REPLAY_NOTICE = {
+	keyOrigin: "cli_derived",
+	advise: false
+};
 function chatNoticeText(message) {
 	return chatColor("yellow", message);
 }
@@ -39940,7 +40113,7 @@ function chatNoun(context) {
 	return context.parentReply === void 0 ? "Message" : "Reply";
 }
 function formatChatRepliedMessage(context, outcome) {
-	if (outcome === "already_sent") return `${formatAlreadySentNotice(context.sent)} Its existing reply from ${context.reply.from_email} is shown.`;
+	if (outcome === "already_sent") return `${formatAlreadySentNotice(context.sent, CHAT_REPLAY_NOTICE)} Its existing reply from ${context.reply.from_email} is shown.`;
 	return `${chatNoun(context)} sent (id ${context.sent.id}) and a reply arrived from ${context.reply.from_email}.`;
 }
 function buildChatJsonEnvelope(context, outcome = "replied") {
@@ -40004,7 +40177,7 @@ function formatChatAwaitingReplyMessage(context, options) {
 		const [next] = buildChatExistingReplyCommands(context, options.existingReplyId);
 		const status = options.waitError === void 0 ? "No reply to it yet." : `Loading its reply failed: ${options.waitError}.`;
 		const action = next.kind === "inspect_reply" ? "read the reply with" : next.kind === "inspect_inbox" ? "inspect the inbox with" : "wait with";
-		return `${formatAlreadySentNotice(context.sent)} ${status} Do NOT resend; ${action}: ${next.command}`;
+		return `${formatAlreadySentNotice(context.sent, CHAT_REPLAY_NOTICE)} ${status} Do NOT resend; ${action}: ${next.command}`;
 	}
 	const [wait] = buildChatRecoveryCommands(context);
 	const status = options.waitError === void 0 ? `No reply yet after ${context.timeoutSeconds}s.` : `Waiting for the reply failed: ${options.waitError}`;
@@ -40807,7 +40980,7 @@ var ChatCommand = class ChatCommand extends Command {
 				await connectedWait?.bind(sent.id);
 				if (flags.async) {
 					const outcome = sent.idempotent_replay ? "already_sent" : "sent";
-					const message = sent.idempotent_replay ? `${formatAlreadySentNotice(sent)} This conversation remains bound to this session; inspect it if the answer may have arrived already.` : `${chatNoun(baseContext)} sent (id ${sent.id}). This conversation is bound to this session for status and later replies. Keep its configured receiver active.`;
+					const message = sent.idempotent_replay ? `${formatAlreadySentNotice(sent, CHAT_REPLAY_NOTICE)} This conversation remains bound to this session; inspect it if the answer may have arrived already.` : `${chatNoun(baseContext)} sent (id ${sent.id}). This conversation is bound to this session for status and later replies. Keep its configured receiver active.`;
 					const result = {
 						outcome,
 						exit_code: sendOutcomeExitCode(outcome),
@@ -41006,7 +41179,7 @@ var ChatCommand = class ChatCommand extends Command {
 	}
 	reportReplied(context, outcome) {
 		this.chatProgress.outcomeReported = true;
-		if (outcome === "already_sent") process.stderr.write(`${chatNoticeText(formatAlreadySentNotice(context.sent))}\n`);
+		if (outcome === "already_sent") process.stderr.write(`${chatNoticeText(formatAlreadySentNotice(context.sent, CHAT_REPLAY_NOTICE))}\n`);
 		if (context.json) this.log(JSON.stringify(buildChatJsonEnvelope(context, outcome), null, 2));
 		else this.log(formatChatResponse(context));
 	}
@@ -44755,7 +44928,7 @@ const PRIMITIVE_TEAM_AUTHOR = {
 	url: "https://primitive.dev"
 };
 const SDK_VERSION_RANGE = "^2.0.0";
-const CLI_VERSION_RANGE = "^1.64.0";
+const CLI_VERSION_RANGE = "^1.66.0";
 const ESBUILD_VERSION_RANGE = "^0.27.0";
 function renderHandler() {
 	return `// env.PRIMITIVE_API_KEY, env.PRIMITIVE_WEBHOOK_SECRET, and
@@ -55141,9 +55314,12 @@ var PaymentsPayEmailCommand = class PaymentsPayEmailCommand extends Command {
 			}
 			const sent = result.data?.data ?? null;
 			const replayed = sent?.idempotent_replay === true;
-			if (replayed) writeIdempotentReplayBannerIfReplay(sent, { write: (chunk) => {
-				process.stderr.write(chunk);
-			} });
+			if (replayed) writeIdempotentReplayBannerIfReplay(sent, {
+				advise: false,
+				write: (chunk) => {
+					process.stderr.write(chunk);
+				}
+			});
 			let settlement = null;
 			if (flags["wait-settle"] && !replayed && payeeTo) {
 				process.stderr.write("Payment sent. Waiting for the x402 settlement interaction email (settlement is async)...\n");
@@ -56018,6 +56194,7 @@ var ReplyCommand = class ReplyCommand extends Command {
 			const outcome = reportSendCommandResult({
 				attemptStartedAtIso,
 				idempotencyKey,
+				idempotencyKeyOrigin: flags["idempotency-key"] === void 0 ? "cli_derived" : "caller",
 				extraEnvelopeFields: {
 					...priorRepliesEnvelopeFields(priorRepliesCheck),
 					...replyTargetEnvelopeFields(flags, this.replyTarget),
@@ -57144,6 +57321,7 @@ var SendCommand = class SendCommand extends Command {
 				attemptStartedAtIso,
 				...this.waitNotice ? { extraEnvelopeFields: { wait_notice: this.waitNotice } } : {},
 				idempotencyKey,
+				idempotencyKeyOrigin: flags["idempotency-key"] === void 0 ? "cli_derived" : "caller",
 				json: flags.json,
 				log: (line) => this.log(line),
 				noun: "Message",

package/dist/oclif/receiver-heal.js

@@ -1,6 +1,6 @@
 import { N as agentProfileDirectory, P as agentProfileName, R as loadConnectedAgentProfile, j as AGENT_PROFILE_ENV } from "../cli-config-DMszFbGn.js";
 import { d as readMailJson } from "../shared-mail-files-MwlVE90c.js";
-import { _ as detectAgentRuntime, l as SESSION_UUID, t as notificationScope } from "../notify-session-Bzcs3VBe.js";
+import { _ as detectAgentRuntime, l as SESSION_UUID, t as notificationScope } from "../notify-session-CaG0vpjw.js";
 import { a as claimBackgroundListenRestart, n as backgroundListenRestartable, r as backgroundListenStatus } from "../listen-background--0peztKE.js";
 import { join } from "node:path";
 import { spawn } from "node:child_process";

package/dist/{repeats-BL7ZC-_6-Dzangtkf.js → repeats-BL7ZC-_6-O_YE1_cO.js}

@@ -30,7 +30,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-//#region ../node_modules/.pnpm/nodemailer@10.0.15/node_modules/nodemailer/dist/esm/addressparser/index.js
+//#region ../node_modules/.pnpm/nodemailer@10.1.0/node_modules/nodemailer/dist/esm/addressparser/index.js
 /**
 * Restores the quoting of a local part that was read out of a quoted string.
 *
@@ -504,7 +504,11 @@ var Tokenizer = class {
 			this.operatorExpecting = this.operators[chr];
 			this.escaped = false;
 			return;
-		} else if (["\"", "'"].includes(this.operatorExpecting) && chr === "\\") {
+		} else if ([
+			"\"",
+			"'",
+			")"
+		].includes(this.operatorExpecting) && chr === "\\") {
 			this.escaped = true;
 			return;
 		}

package/dist/{scoped-chat-BW041zEY.js → scoped-chat-DKpjp27r.js}

@@ -1,4 +1,4 @@
-import { c as classifySignalContent, y as isTrustedSender } from "./repeats-BL7ZC-_6-Dzangtkf.js";
+import { c as classifySignalContent, y as isTrustedSender } from "./repeats-BL7ZC-_6-O_YE1_cO.js";
 //#region src/oclif/presence-provenance.ts
 function readPresenceProjection(detail) {
 	if (!detail || typeof detail !== "object") return null;

package/dist/{signal-command-CgNIftzG.js → signal-command-CztPfoRE.js}

@@ -1,7 +1,7 @@
-import { h as sendPreparedSignal, p as prepareSignalEmail } from "./repeats-BL7ZC-_6-Dzangtkf.js";
-import { T as bareAddress, Vn as listSentEmails, ar as sendEmail, bt as successfulSendOutcome, en as createEndpoint, it as classifySendError, o as extractErrorPayload, vn as getEmail } from "./api-command-C3XihKH7.js";
+import { h as sendPreparedSignal, p as prepareSignalEmail } from "./repeats-BL7ZC-_6-O_YE1_cO.js";
+import { T as bareAddress, Vn as listSentEmails, ar as sendEmail, bt as successfulSendOutcome, en as createEndpoint, it as classifySendError, o as extractErrorPayload, vn as getEmail } from "./api-command-T189Vupo.js";
 import { _ as acquireListenLock, b as listenProcessIdentity, c as mailTime, d as readMailJson, f as removeMailFile, h as writeMailJson, i as mailId, l as privateMailDirectory, m as withMailLock, n as invalidSharedMail, o as mailObject, p as syncMailDirectory, r as mailAddress, s as mailString, t as SharedMailStateError, v as compareListenProcessIdentity, y as listenIdentity } from "./shared-mail-files-MwlVE90c.js";
-import { a as scopedChatSenderTrust, i as readBeforeDeadline, n as isPlainChatReply } from "./scoped-chat-BW041zEY.js";
+import { a as scopedChatSenderTrust, i as readBeforeDeadline, n as isPlainChatReply } from "./scoped-chat-DKpjp27r.js";
 import { n as tryOwnSharedMail, r as waitForSharedMailChange, t as readSharedMailOwner } from "./shared-mail-watch-DtKpsgg8.js";
 import { recordSentSignal } from "./oclif/auto-signals.js";
 import { Errors } from "@oclif/core";
@@ -9,7 +9,7 @@ import { opendirSync } from "node:fs";
 import { createHash, randomUUID, scryptSync } from "node:crypto";
 import { dirname, join } from "node:path";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-//#region ../sdk-node/dist/api-BJZBEAbG.js
+//#region ../sdk-node/dist/api-UuhZ15CF.js
 const jsonBodySerializer = { bodySerializer: (body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value) };
 function createSseClient({ onRequest, onSseError, onSseEvent, responseTransformer, responseValidator, sseDefaultRetryDelay, sseMaxRetryAttempts, sseMaxRetryDelay, sseSleepFn, url, ...options }) {
 	let lastEventId;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "primcli",
-  "version": "1.64.0",
+  "version": "1.66.0",
   "description": "Official Primitive CLI: deploy Primitive Functions, send and inspect mail, manage endpoints, all from the terminal. Wraps the @primitivedotdev/sdk runtime client with one-shot commands.",
   "type": "module",
   "sideEffects": false,
@@ -189,8 +189,8 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@oclif/core": "^5.1.2",
-    "@oclif/plugin-autocomplete": "^4.0.2",
+    "@oclif/core": "^5.1.7",
+    "@oclif/plugin-autocomplete": "^4.0.4",
     "@oclif/plugin-help": "^7.0.2",
     "@oclif/plugin-warn-if-update-available": "^4.0.1",
     "viem": "^2.57.2",
@@ -203,11 +203,11 @@
     "@types/node": "^26.6.4",
     "@types/ws": "^8.18.2",
     "@vitest/coverage-v8": "^5.0.3",
-    "oclif": "^6.0.2",
+    "oclif": "^6.0.3",
     "tsdown": "^0.23.0",
     "tsx": "4.23.14",
     "typescript": "^5.7.2",
-    "vite": "^8.3.2",
+    "vite": "^8.3.4",
     "vitest": "^5.0.3"
   }
 }