primcli 1.70.0 → 1.72.0

package/dist/{api-command-C58Oh38I.js → api-command-BrwPbyPP.js}

@@ -1,5 +1,5 @@
-import { S as __exportAll, _ as WEBHOOK_EVENT_TYPES, g as SENT_EMAIL_EVENT_TYPES } from "./repeats-BL7ZC-_6-BZ-MphTV.js";
-import { C as resolveCliAuth, F as agentProfilesDirectory, G as createClient, H as requireDefaultLoginProfile, K as createConfig, N as agentProfileDirectory, R as loadConnectedAgentProfile, S as normalizeApiBaseUrl, T as saveSignupCredentials, W as PrimitiveApiClient, _ as deleteCliCredentials, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, i as loadCliConfig, j as AGENT_PROFILE_ENV, m as cliAccessTokenExpiresAt, p as acquireCliCredentialsLock, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname } from "./cli-config-DMszFbGn.js";
+import { S as __exportAll, _ as WEBHOOK_EVENT_TYPES, g as SENT_EMAIL_EVENT_TYPES } from "./repeats-BL7ZC-_6-CKMKBlx7.js";
+import { C as resolveCliAuth, G as PrimitiveApiClient, I as agentProfilesDirectory, K as createClient, M as AGENT_PROFILE_ENV, P as agentProfileDirectory, S as normalizeApiBaseUrl, T as saveSignupCredentials, U as requireDefaultLoginProfile, _ as deleteCliCredentials, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, i as loadCliConfig, m as cliAccessTokenExpiresAt, p as acquireCliCredentialsLock, q as createConfig, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname, z as loadConnectedAgentProfile } from "./cli-config--YTRdJ3t.js";
 import { h as writeMailJson, m as withMailLock, p as syncMailDirectory, u as privateMailPermissions } from "./shared-mail-files-MwlVE90c.js";
 import { Command, Errors, Flags } from "@oclif/core";
 import { existsSync, lstatSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
@@ -15,6 +15,7 @@ var sdk_gen_exports = /* @__PURE__ */ __exportAll({
 	agentConnectionSetup: () => agentConnectionSetup,
 	awaitReply: () => awaitReply,
 	cancelSentEmail: () => cancelSentEmail,
+	cancelSentEmailByIdempotencyKey: () => cancelSentEmailByIdempotencyKey,
 	checkDefaultNetworkContactAdmission: () => checkDefaultNetworkContactAdmission,
 	checkDomainDns: () => checkDomainDns,
 	claimAgentConnection: () => claimAgentConnection,
@@ -55,8 +56,12 @@ var sdk_gen_exports = /* @__PURE__ */ __exportAll({
 	discardEmailContent: () => discardEmailContent,
 	downloadAttachments: () => downloadAttachments,
 	downloadDomainZoneFile: () => downloadDomainZoneFile,
+	downloadEmailAttachmentArchiveMember: () => downloadEmailAttachmentArchiveMember,
+	downloadEmailAttachmentByFilename: () => downloadEmailAttachmentByFilename,
 	downloadEmailAttachmentPart: () => downloadEmailAttachmentPart,
 	downloadRawEmail: () => downloadRawEmail,
+	downloadSentAttachmentArchiveMember: () => downloadSentAttachmentArchiveMember,
+	downloadSentAttachmentByFilename: () => downloadSentAttachmentByFilename,
 	downloadSentAttachmentPart: () => downloadSentAttachmentPart,
 	getAccount: () => getAccount,
 	getAgent: () => getAgent,
@@ -91,12 +96,14 @@ var sdk_gen_exports = /* @__PURE__ */ __exportAll({
 	listAgentConnections: () => listAgentConnections,
 	listAgentContacts: () => listAgentContacts,
 	listAgentNetworks: () => listAgentNetworks,
+	listChanges: () => listChanges,
 	listContacts: () => listContacts,
 	listDeclinedPayments: () => listDeclinedPayments,
 	listDefaultNetworkAgents: () => listDefaultNetworkAgents,
 	listDefaultNetworkMembers: () => listDefaultNetworkMembers,
 	listDeliveries: () => listDeliveries,
 	listDomains: () => listDomains,
+	listEmailAttachmentArchiveMembers: () => listEmailAttachmentArchiveMembers,
 	listEmails: () => listEmails,
 	listEndpoints: () => listEndpoints,
 	listFilters: () => listFilters,
@@ -110,6 +117,7 @@ var sdk_gen_exports = /* @__PURE__ */ __exportAll({
 	listRegistryRequests: () => listRegistryRequests,
 	listRepeatingSends: () => listRepeatingSends,
 	listRoutes: () => listRoutes,
+	listSentAttachmentArchiveMembers: () => listSentAttachmentArchiveMembers,
 	listSentEmails: () => listSentEmails,
 	listTemplates: () => listTemplates,
 	listWakeAuthorizations: () => listWakeAuthorizations,
@@ -887,6 +895,45 @@ const downloadEmailAttachmentPart = (options) => (options.client ?? client).get(
 	...options
 });
 /**
+* Download one received email attachment by filename
+*
+* Returns the same bytes as downloadEmailAttachmentPart, selecting the attachment by its exact filename. The path form `/emails/{id}/attachments/{filename}` also works for any name that is not digits only, which that form reads as a part_index. When several attachments share the filename the response is 409 attachment_name_ambiguous with every matching part_index, and nothing is returned. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail received at its own address. Function credentials are not supported. Discarded content is unavailable.
+*/
+const downloadEmailAttachmentByFilename = (options) => (options.client ?? client).get({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/emails/{id}/attachments",
+	...options
+});
+/**
+* List the files inside a received zip or tar attachment
+*
+* Lists the regular files inside a zip, tar or tar.gz attachment with each one's path, decoded size and SHA-256. The format is detected from the content. Unsafe paths refuse the whole archive, and resource limits bound the work (see the 413 and 422 responses). Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail received at its own address. Function credentials are not supported. Discarded content is unavailable.
+*/
+const listEmailAttachmentArchiveMembers = (options) => (options.client ?? client).get({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/emails/{id}/attachments/{attachment}/members",
+	...options
+});
+/**
+* Download one file from inside a received zip or tar attachment
+*
+* Returns the decoded bytes of one regular file inside a zip, tar or tar.gz attachment, by its listed path. The archive's structure, every member path and every limit are checked as for the listing, but only the requested file is decoded and verified (its zip CRC-32, and X-Content-SHA256 of the bytes returned); list the archive to have every file decoded. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail received at its own address. Function credentials are not supported. Discarded content is unavailable.
+*/
+const downloadEmailAttachmentArchiveMember = (options) => (options.client ?? client).get({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/emails/{id}/attachments/{attachment}/members/{path}",
+	...options
+});
+/**
 * Download one sent email attachment
 *
 * Pending service release. This contract does not establish live availability.
@@ -909,6 +956,45 @@ const downloadSentAttachmentPart = (options) => (options.client ?? client).get({
 	...options
 });
 /**
+* Download one sent email attachment by filename
+*
+* Returns the same bytes as downloadSentAttachmentPart, selecting the attachment by its exact filename. The path form `/sent-emails/{id}/attachments/{filename}` also works for any name that is not digits only, which that form reads as a part_index. When several attachments share the filename the response is 409 attachment_name_ambiguous with every matching part_index, and nothing is returned. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail sent from its own address. Function credentials are not supported. Discarded content is unavailable.
+*/
+const downloadSentAttachmentByFilename = (options) => (options.client ?? client).get({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/sent-emails/{id}/attachments",
+	...options
+});
+/**
+* List the files inside a sent zip or tar attachment
+*
+* Lists the regular files inside a zip, tar or tar.gz attachment with each one's path, decoded size and SHA-256. The format is detected from the content. Unsafe paths refuse the whole archive, and resource limits bound the work (see the 413 and 422 responses). Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail sent from its own address. Function credentials are not supported. Discarded content is unavailable.
+*/
+const listSentAttachmentArchiveMembers = (options) => (options.client ?? client).get({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/sent-emails/{id}/attachments/{attachment}/members",
+	...options
+});
+/**
+* Download one file from inside a sent zip or tar attachment
+*
+* Returns the decoded bytes of one regular file inside a zip, tar or tar.gz attachment, by its listed path. The archive's structure, every member path and every limit are checked as for the listing, but only the requested file is decoded and verified (its zip CRC-32, and X-Content-SHA256 of the bytes returned); list the archive to have every file decoded. Authenticate with an organization API key, an authorized organization OAuth token, or an address-bound agent connection key. A connected agent reads only mail sent from its own address. Function credentials are not supported. Discarded content is unavailable.
+*/
+const downloadSentAttachmentArchiveMember = (options) => (options.client ?? client).get({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/sent-emails/{id}/attachments/{attachment}/members/{path}",
+	...options
+});
+/**
 * Stop the repeat behind a received message
 *
 * Called by the recipient of a repeating send: the connected agent's own
@@ -1990,6 +2076,42 @@ const agentConnectionSetup = (options) => (options?.client ?? client).get({
 	...options
 });
 /**
+* Long-poll what changed
+*
+* One feed of small invalidations (ids and kinds) for everything an app keeps a snapshot of: inbound mail, sent mail, the member's conversation read state, the agent directory and presence, and the credential's own access. Non-consumptive and replayable: any number of devices can read the same cursor independently.
+*
+* Start with `since=start` (or no `since`): it returns an empty page whose `next_cursor` is a baseline. Take it BEFORE the initial list reads; every change that commits after it is delivered, including ones those reads already reflect. Then call with `since=<next_cursor>&wait=20` in a loop. Changes come oldest first in commit order, at least once: a write that commits late is never skipped, because positions are assigned at commit.
+*
+* Every change is scoped to what this credential's full reads would show: a connected agent sees only its own mail, its own sends and sends it provably received; mail held for sender authentication is announced only when released; read state reaches only the member it belongs to; agent changes reach members and agents allowed to view the network; organization API keys receive no agent changes. Function credentials cannot call this.
+*
+* Changes are kept 7 days. A cursor answers 410 `cursor_expired` only when changes after it were pruned (an idle cursor stays valid); rebuild the snapshots from `since=start`.
+*/
+const listChanges = (options) => (options?.client ?? client).get({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/changes",
+	...options
+});
+/**
+* Cancel a scheduled send by idempotency key
+*
+* Cancels the still-scheduled send created with this `Idempotency-Key` (matched exactly), as `POST /sent-emails/{id}/cancel` does, and releases the key. 404 `not_found`: no send this credential can act on was created with the key. 409 `not_scheduled`: the send holding the key is no longer scheduled; `error.details` names its `sent_email_id` and `status` (`canceled` if already canceled). Pass `created_before` on a retry so it cannot reach a newer send that reused the released key. A connected agent can cancel any scheduled send from its own address, whoever created it, and no other.
+*/
+const cancelSentEmailByIdempotencyKey = (options) => (options.client ?? client).post({
+	security: [{
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/sent-emails/cancel",
+	...options,
+	headers: {
+		...options.body !== void 0 && { "Content-Type": "application/json" },
+		...options.headers
+	}
+});
+/**
 * Cancel a scheduled send
 *
 * Cancels a STILL-SCHEDULED send (status `scheduled`), moving it
@@ -3517,7 +3639,13 @@ async function createAuthenticatedCliApiClient(params) {
 const ATTACHMENT_WAIT_OPERATIONS = /* @__PURE__ */ new Set([
 	"downloadAttachments",
 	"downloadEmailAttachmentPart",
-	"downloadSentAttachmentPart"
+	"downloadSentAttachmentPart",
+	"downloadEmailAttachmentByFilename",
+	"downloadSentAttachmentByFilename",
+	"downloadEmailAttachmentArchiveMember",
+	"downloadSentAttachmentArchiveMember",
+	"listEmailAttachmentArchiveMembers",
+	"listSentAttachmentArchiveMembers"
 ]);
 /** Longest a download command waits for attachment content, in total. */
 const ATTACHMENT_WAIT_MAX_MS = 6e4;
@@ -3891,6 +4019,63 @@ function withFlagSuggestion(error, valid) {
 	return error;
 }
 //#endregion
+//#region src/oclif/from-verified-filter.ts
+/**
+* The `from_verified` filter on GET /emails and GET /emails/search: the
+* `from_verified=true|false` parameter (`--from-verified`) and the
+* `from_verified:` search term.
+*
+* `from_verified` says whether the From domain was authenticated when the
+* email arrived. A filter on it is a trust decision, so a server that does
+* not apply it must fail loudly: rows returned for `--from-verified true`
+* that do not all carry `from_verified: true` are refused instead of being
+* printed as if they were authenticated mail.
+*/
+const FROM_VERIFIED_FILTER_UNSUPPORTED_CODE = "from_verified_filter_unsupported";
+var FromVerifiedFilterUnsupportedError = class extends Error {
+	code = FROM_VERIFIED_FILTER_UNSUPPORTED_CODE;
+	constructor(detail) {
+		super(`The server did not apply the \`from_verified\` filter: ${detail} Nothing was printed. Upgrade to a server that returns \`from_verified\`, or drop the filter.`);
+		this.name = "FromVerifiedFilterUnsupportedError";
+	}
+};
+const FROM_VERIFIED_SURFACES = {
+	listEmails: "GET /emails",
+	searchEmails: "GET /emails/search"
+};
+const TERM = /(?:^|\s)from_verified:("?)(true|false)\1(?=\s|$)/gi;
+const PHRASE = /(^|\s)(?:(?!from_verified:)[A-Za-z_][\w.-]*:)?"(?:[^"\\]|\\.)*"/gi;
+/** The `from_verified:` values a search query asks for, in order. */
+function fromVerifiedTermsInQuery(q) {
+	if (typeof q !== "string") return [];
+	return [...q.replace(PHRASE, "$1 ").matchAll(TERM)].map((match) => match[2]?.toLowerCase() === "true");
+}
+/**
+* For the generated `emails list` / `emails search` commands: the surface
+* name and the values every row must have when this call filtered on
+* `from_verified`, else null.
+*/
+function fromVerifiedExpectation(sdkName, query) {
+	const surface = FROM_VERIFIED_SURFACES[sdkName];
+	if (!surface || !query) return null;
+	const expected = fromVerifiedTermsInQuery(typeof query.q === "string" ? query.q : void 0);
+	if (query.from_verified === "true") expected.push(true);
+	if (query.from_verified === "false") expected.push(false);
+	return expected.length > 0 ? {
+		surface,
+		expected
+	} : null;
+}
+/** Throw unless every row carries `from_verified` with every expected value. */
+function assertFromVerifiedRows(rows, expectation) {
+	const wrong = rows.filter((row) => {
+		if (row === null || typeof row !== "object") return true;
+		const value = row.from_verified;
+		return typeof value !== "boolean" || expectation.expected.some((expected) => expected !== value);
+	}).length;
+	if (wrong > 0) throw new FromVerifiedFilterUnsupportedError(`${expectation.surface} returned ${wrong} of ${rows.length} email${rows.length === 1 ? "" : "s"} without the requested \`from_verified\` value.`);
+}
+//#endregion
 //#region src/oclif/idempotent-replay-banner.ts
 /**
 * If `data` carries `idempotent_replay: true`, write a stderr notice
@@ -4107,7 +4292,7 @@ const SEND_OUTCOME_HELP = `Outcomes and exit codes, shared by chat, chat reply,
   - exit 0 replied: chat only. The message was sent and a reply arrived.
   - exit 0 sent: accepted for delivery. A queued status counts as sent.
   - exit 0 already_sent: an identical earlier send exists (or was deleted: HTTP 410 sent_email_deleted). Nothing new went out. Do not resend.
-  - exit 1 not_sent: the API rejected the request (HTTP 400, 401, 402, 403, 404, 413, 422 or 429), the command failed before sending, or the send record has status agent_failed, gate_denied or canceled. Nothing went out.
+  - exit 1 not_sent: the API rejected the request (HTTP 400, 401, 402, 403, 404, 413, 422 or 429, or, from --if-latest-message-id, 409 latest_message_mismatch, 422 latest_message_thread_unresolved or 503 thread_busy), the command failed before sending, or the send record has status agent_failed, gate_denied or canceled. Nothing went out.
   - exit 2: invalid flags or arguments. Nothing went out.
   - exit 3 sent_awaiting_reply: chat only. Sent, but no reply before the timeout. Wait; do not resend.
   - exit 4 uncertain: transport error, conflict, server error, or a send record with status unknown. It may or may not have gone out. Reconcile with primitive sent get --idempotency-key <key> (the key is in the --json envelope) before retrying.`;
@@ -4118,6 +4303,8 @@ function sendFailureOutcome(httpStatus) {
 	return httpStatus !== void 0 && DEFINITIVE_SEND_REJECTION_STATUSES.includes(httpStatus) ? "not_sent" : "uncertain";
 }
 const SENT_EMAIL_DELETED_CODE = "sent_email_deleted";
+const LATEST_MESSAGE_MISMATCH_CODE = "latest_message_mismatch";
+const THREAD_BUSY_CODE = "thread_busy";
 function errorPayloadCode(payload) {
 	if (payload === null || typeof payload !== "object") return void 0;
 	const code = payload.code;
@@ -4128,7 +4315,10 @@ function isDeletedEarlierSend(httpStatus, errorPayload) {
 }
 /** Classify an API error from a send request. */
 function classifySendError(httpStatus, errorPayload) {
-	return isDeletedEarlierSend(httpStatus, errorPayload) ? "already_sent" : sendFailureOutcome(httpStatus);
+	if (isDeletedEarlierSend(httpStatus, errorPayload)) return "already_sent";
+	if (httpStatus === 409 && errorPayloadCode(errorPayload) === LATEST_MESSAGE_MISMATCH_CODE) return "not_sent";
+	if (httpStatus === 503 && errorPayloadCode(errorPayload) === THREAD_BUSY_CODE) return "not_sent";
+	return sendFailureOutcome(httpStatus);
 }
 function formatDeletedEarlierSendNotice() {
 	return "Already sent: an earlier send matching this request went out and its record was later deleted, so the API refused this one (HTTP 410 sent_email_deleted). Nothing new was sent. Do not resend or change the idempotency key to get around this.";
@@ -4175,6 +4365,16 @@ function describeSentStatus(status) {
 function formatSentSummary(noun, sent) {
 	return `${noun} sent (${describeSentStatus(sent.status)}, id ${sent.id}). Do not resend.`;
 }
+/**
+* Summary for a send the API accepted with status `scheduled`: nothing
+* has gone out yet, and it can still be canceled.
+*/
+function formatScheduledSummary(noun, sent, idempotencyKey) {
+	const when = sent.scheduled_at ? ` for ${sent.scheduled_at}` : "";
+	const verb = sent.idempotent_replay === true ? "already scheduled" : "scheduled";
+	const byKey = idempotencyKey ? ` or \`primitive sent cancel --idempotency-key ${shellQuote(idempotencyKey)}\`` : "";
+	return `${noun} ${verb}${when} (id ${sent.id}). Nothing has gone out yet. Do not resend. To cancel it before then, run \`primitive sent cancel --id ${sent.id}\`${byKey}.`;
+}
 function formatSendFailureSummary(noun, outcome, httpStatus) {
 	if (outcome === "not_sent") return `${noun} not sent: ${httpStatus === void 0 ? "the request failed before sending" : `the API rejected the request (HTTP ${httpStatus})`}. Nothing went out; fix the problem before retrying.`;
 	return `${noun} send outcome uncertain (${httpStatus === void 0 ? "no response from the API" : `HTTP ${httpStatus}`}): it may or may not have gone out. Do not resend blindly; check sent history first.`;
@@ -4392,8 +4592,9 @@ function sendIdentityFields(params) {
 	};
 }
 /**
-* Commands that inspect an existing send. None of them send again:
-* a caller that follows them after a failure cannot double-send.
+* Commands that inspect an existing send, or cancel one still
+* scheduled. None of them send again: a caller that follows them after
+* a failure cannot double-send.
 */
 function buildSendCommandFollowUps(params) {
 	const commands = [];
@@ -4404,13 +4605,22 @@ function buildSendCommandFollowUps(params) {
 		"--idempotency-key",
 		params.idempotencyKey
 	]));
-	if (params.sentId !== null) commands.push(buildFollowUpCommand("inspect_sent_email", "Inspect the send and its delivery status", [
-		"primitive",
-		"sent",
-		"get",
-		"--id",
-		params.sentId
-	]));
+	if (params.sentId !== null) {
+		commands.push(buildFollowUpCommand("inspect_sent_email", "Inspect the send and its delivery status", [
+			"primitive",
+			"sent",
+			"get",
+			"--id",
+			params.sentId
+		]));
+		if (params.scheduled === true) commands.push(buildFollowUpCommand("cancel_scheduled_send", "Cancel this scheduled send before it goes out", [
+			"primitive",
+			"sent",
+			"cancel",
+			"--id",
+			params.sentId
+		]));
+	}
 	if (params.outcome === "uncertain") commands.push(buildFollowUpCommand("list_recent_sent_emails", "Check sent history for this attempt before retrying", [
 		"primitive",
 		"sent",
@@ -4449,7 +4659,7 @@ function reportSendCommandResult(params) {
 			errorPayload = { message: "The API returned no send record." };
 		} else {
 			outcome = successfulSendOutcome(sent);
-			outcomeMessage = outcome === "not_sent" || outcome === "uncertain" ? formatSendRecordFailureSummary(params.noun, outcome, sent) : outcome === "already_sent" ? formatAlreadySentNotice(sent, {
+			outcomeMessage = outcome === "not_sent" || outcome === "uncertain" ? formatSendRecordFailureSummary(params.noun, outcome, sent) : sent.status === "scheduled" ? formatScheduledSummary(params.noun, sent, params.idempotencyKey ?? sent.client_idempotency_key) : outcome === "already_sent" ? formatAlreadySentNotice(sent, {
 				keyOrigin: params.idempotencyKeyOrigin ?? "caller",
 				keyHint: "--idempotency-key with a new key"
 			}) : formatSentSummary(params.noun, sent);
@@ -4472,6 +4682,7 @@ function reportSendCommandResult(params) {
 				attemptStartedAtIso: params.attemptStartedAtIso,
 				idempotencyKey: params.idempotencyKey,
 				outcome,
+				scheduled: sent?.status === "scheduled",
 				sentId: sent?.id ?? null
 			}),
 			...params.extraEnvelopeFields
@@ -5361,7 +5572,7 @@ function savedConnectedProfiles(configDir, exclude) {
 */
 async function otherProfiles(configDir, session, current) {
 	if (session) try {
-		const { connectedProfilesForSession } = await import("./machine-session-CKmn5bvB.js").then((n) => n.s);
+		const { connectedProfilesForSession } = await import("./machine-session-Be6j29GE.js").then((n) => n.s);
 		return {
 			inSession: true,
 			profiles: connectedProfilesForSession(configDir, session, current)
@@ -5628,6 +5839,42 @@ const API_ERROR_CODES = {
 function flagName(parameterName) {
 	return parameterName.replace(/_/g, "-");
 }
+/**
+* Flag name for a request header an operation declares, such as
+* `--idempotency-key` for `Idempotency-Key`.
+*/
+function headerFlagName(headerName) {
+	return headerName.toLowerCase().replace(/_/g, "-");
+}
+/**
+* True when `text` holds an ASCII control character. Header values
+* travel on the wire as given, so one (a line break above all) could
+* never be sent and is refused before the request.
+*/
+function hasControlCharacter(text) {
+	for (let index = 0; index < text.length; index += 1) {
+		const code = text.charCodeAt(index);
+		if (code < 32 || code === 127) return true;
+	}
+	return false;
+}
+/**
+* Read the declared-header flags the caller passed into a header map
+* keyed by the header name the spec declares. Only flags `buildFlags`
+* registered for a header are read.
+*/
+function collectHeaderFlags(parsedFlags, headerFlagToName) {
+	const headers = {};
+	for (const [flag, header] of headerFlagToName) {
+		const value = parsedFlags[flag];
+		if (value === void 0) continue;
+		const text = String(value);
+		if (text.trim() === "") throw new Errors.CLIError(`--${flag} must not be empty.`, { exit: 2 });
+		if (hasControlCharacter(text)) throw new Errors.CLIError(`--${flag} must not contain control characters such as line breaks.`, { exit: 2 });
+		headers[header] = text;
+	}
+	return headers;
+}
 function flagDescription(parameter) {
 	return parameter.description ?? parameter.name;
 }
@@ -5976,6 +6223,14 @@ function buildFlags(operation) {
 			bodyFieldFlagToProperty.set(name, extra.property);
 		}
 	}
+	const headerFlagToName = /* @__PURE__ */ new Map();
+	for (const parameter of operation.headerParams) {
+		const name = headerFlagName(parameter.name);
+		if (RESERVED_FLAG_NAMES.has(name)) continue;
+		if (flags[name] !== void 0) continue;
+		flags[name] = flagForParameter(parameter);
+		headerFlagToName.set(name, parameter.name);
+	}
 	if (EVENT_TYPES_FLAG_OPERATIONS.has(operation.sdkName)) flags["event-types"] = Flags.string({
 		description: EVENT_TYPES_FLAG_DESCRIPTION,
 		multiple: true
@@ -5988,7 +6243,8 @@ function buildFlags(operation) {
 	});
 	return {
 		flags,
-		bodyFieldFlagToProperty
+		bodyFieldFlagToProperty,
+		headerFlagToName
 	};
 }
 function collectBodyFieldFlags(parsedFlags, bodyFieldFlagToProperty) {
@@ -6083,7 +6339,7 @@ const OPERATION_SUCCESS_HOOKS = { verifyAgentSignup: ({ envelope, configDir, api
 	writeStderr("Credentials saved to the CLI config; `primitive whoami` will work on the next call.\n");
 } };
 function createOperationCommand(operation) {
-	const { flags, bodyFieldFlagToProperty } = buildFlags(operation);
+	const { flags, bodyFieldFlagToProperty, headerFlagToName } = buildFlags(operation);
 	const baseDescription = operation.description !== null && operation.description !== void 0 ? canonicalizeCliReferences(operation.description) : `${operation.method} ${operation.path}`;
 	const schemaSummary = operation.hasJsonBody ? renderRequestSchemaSummary(operation.requestSchema) : null;
 	const hint = OPERATION_HINTS[operation.sdkName];
@@ -6099,6 +6355,7 @@ function createOperationCommand(operation) {
 				throw withFlagSuggestion(error, flagNames);
 			});
 			const parsedFlags = flags;
+			const headers = collectHeaderFlags(parsedFlags, headerFlagToName);
 			if ([
 				"startAgentSignup",
 				"verifyAgentSignup",
@@ -6142,9 +6399,11 @@ function createOperationCommand(operation) {
 				const query = collectValues(operation.queryParams, parsedFlags);
 				const replyStateSurface = replyStateSurfaceForOperation(operation.sdkName, query);
 				const automatedSurface = automatedSurfaceForOperation(operation.sdkName, query);
+				const fromVerified = fromVerifiedExpectation(operation.sdkName, query);
 				const callOperation = () => operationFn({
 					body,
 					client: apiClient.client,
+					...Object.keys(headers).length > 0 ? { headers } : {},
 					parseAs: operation.binaryResponse ? "blob" : "auto",
 					path: collectValues(operation.pathParams, parsedFlags),
 					query,
@@ -6220,6 +6479,14 @@ function createOperationCommand(operation) {
 					process.exitCode = 1;
 					return;
 				}
+				if (fromVerified) try {
+					assertFromVerifiedRows(Array.isArray(envelope?.data) ? envelope.data : [], fromVerified);
+				} catch (error) {
+					if (!(error instanceof FromVerifiedFilterUnsupportedError)) throw error;
+					process.stderr.write(`${error.message}\n`);
+					process.exitCode = 1;
+					return;
+				}
 				const jsonOutput = parsedFlags.json === true;
 				const withEnvelope = parsedFlags.envelope === true;
 				const cursor = envelope?.meta?.cursor;
@@ -6276,4 +6543,4 @@ function canonicalizeCliReferences(description) {
 	return description.replaceAll("`primitive emails:latest`", "`primitive emails latest`").replaceAll("`primitive describe emails:get-email | jq '.responseSchema.properties'`", "`primitive describe emails:get | jq '.responseSchema.properties'`");
 }
 //#endregion
-export { apiResultHttpStatus as $, replyToEmail as $n, completeWebhookEvent as $t, readThreadContext as A, listAgentNetworks as An, formatAlreadySentNotice as At, pendingMailPath as B, listRoutes as Bn, expectedAutomatedVerdicts as Bt, queryUsesAwaiting as C, getMemory as Cn, verifyAgentSignup as Cr, cliInvocation as Ct, displayAddress as D, getThread as Dn, identitySuggestions as Dt, describeWake as E, getSentEmail as En, generatedAgentName as Et, wakeReadCommand as F, listEmails as Fn, AUTOMATED_VALUES as Ft, interactionNextActions as G, pollCliLogin as Gn, SAVED_CLI_OAUTH_SESSION_EXPIRED_MESSAGE as Gt, recordPendingMail as H, listWakeAuthorizations as Hn, isAutomatedRejectedError as Ht, wakeRecipientField as I, listEndpoints as In, AutomatedFilterUnsupportedError as It, replyInteractionWarning as J, putAgentContactPolicy as Jn, refreshStoredCliCredentials as Jt, readEmailInteraction as K, pullWebhookEvent as Kn, createAuthenticatedCliApiClient as Kt, wakeRelationship as L, listFunctionLogs as Ln, assertAutomatedVerdict as Lt, serverMuted as M, listDefaultNetworkAgents as Mn, withFlagSuggestion as Mt, serverRelationship as N, listDefaultNetworkMembers as Nn, AUTOMATED_FILTER_UNSUPPORTED_CODE as Nt, formatMailWakeLine as O, getWakeSchedule as On, loadSkillLine as Ot, skillFirstLine as P, listDomains as Pn, AUTOMATED_FLAG_DESCRIPTION as Pt, SEND_OUTCOME_HELP as Q, reorderRoutes as Qn, cliLogout as Qt, clearConsumedPendingMail as R, listFunctions as Rn, automatedRejectedError as Rt, isAwaitingRejectedError as S, getInboxStatus as Sn, verifyAgentClaim as Sr, DEFAULT_ENROLL_NAME as St, bareAddress$1 as T, getRepeatingSend as Tn, defaultConnectionName as Tt, removePendingMail as U, listWakeDispatches as Un, queryUsesAutomated as Ut, readPendingMail as V, listSentEmails as Vn, hasAutomatedVerdict as Vt, interactionHumanLine as W, listWakeSchedules as Wn, ConnectedAgentKeyRequiredError as Wt, IDEMPOTENCY_KEY_FLAG_DESCRIPTION as X, redeemCreditCode as Xn, addDefaultNetworkMember as Xt, wakeInteractionSentence as Y, putContact as Yn, resolveCliApiRequestConfig as Yt, MAX_SEND_WAIT_TIMEOUT_MS as Z, removeDefaultNetworkMember as Zn, checkDefaultNetworkContactAdmission as Zt, awaitingRejectedError as _, getDefaultNetworkAgent as _n, updateFunction as _r, sendWaitClampNotice as _t, extractErrorCode as a, deleteAgentContact as an, sendEmail as ar, deriveSendIdempotencyKey as at, formatRepliesCell as b, getFunctionRouting as bn, updateWakeAuthorization as br, successfulSendOutcome as bt, readTextFileFlag as c, deleteRoute as cn, setMemory as cr, formatDeletedEarlierSendNotice as ct, writeErrorWithHints as d, downloadEmailAttachmentPart as dn, startAgentSignup as dr, formatSendFailureSummary as dt, createEndpoint as en, resendAgentSignupVerification as er, assertValidIdempotencyKey as et, AWAITING_FLAG_DESCRIPTION as f, getAccount as fn, startCliLogin as fr, formatSendRecordFailureSummary as ft, assertAwaitingFilterRows as g, getCreditBalance as gn, updateDefaultNetworkMember as gr, sendOutcomeExitCode as gt, ReplyStateUnsupportedError as h, getConversation as hn, unsetFunctionRoute as hr, sendIdentityFields as ht, createOperationCommand as i, createWakeSchedule as in, semanticSearch as ir, classifySendError as it, sentInThread as j, listContacts as jn, writeIdempotentReplayBannerIfReplay as jt, latestOwnOutbound as k, listAgentContacts as kn, currentMailSessionKey as kt, runWithTiming as l, deleteWakeAuthorization as ln, simulateRoute as lr, formatPriorRepliesCheckSkipped as lt, REPLY_STATE_UNSUPPORTED_CODE as m, getContact as mn, testFunction as mr, reportSendCommandResult as mt, API_ERROR_CODES as n, createRoute as nn, searchEmails as nr, buildThrownSendFailureEnvelope as nt, extractErrorPayload as o, deleteContact as on, setFunctionRoute as or, excludeSignalReplies as ot, AWAITING_VALUES as p, getAgentContactPolicy as pn, stopRepeatFromEmail as pr, priorRepliesThatWentOut as pt, replyExpectation as q, putAgentContact as qn, createCliApiClient as qt, TIME_FLAG_DESCRIPTION as r, createWakeAuthorization as rn, searchMemories as rr, checkPriorReplies as rt, formatErrorPayload as s, deleteMemory as sn, setFunctionSecret as sr, followUpCommandPrefix as st, API_BASE_URL_FLAG_DESCRIPTION as t, createFunction as tn, runWakeSchedule as tr, buildFollowUpCommand as tt, surfaceUnauthorizedHint as u, deleteWakeSchedule as un, startAgentClaim as ur, formatPriorRepliesWarning as ut, ensureSearchReportsReplyState as v, getEmail as vn, updateRepeatingSend as vr, sentHistoryWindowStart as vt, explainPendingMailNotFound as w, getOrgRoutingTopology as wn, connectNextSteps as wt, hasReplyState as x, getFunctionTestRunTrace as xn, updateWakeSchedule as xr, thrownErrorExitCode as xt, formatAwaitingCell as y, getFunction as yn, updateRoute as yr, serializeErrorPayload as yt, clearReadPendingMail as z, listRepeatingSends as zn, ensureSearchReportsAutomated as zt };
+export { MAX_SEND_WAIT_TIMEOUT_MS as $, listSentAttachmentArchiveMembers as $n, refreshStoredCliCredentials as $t, formatMailWakeLine as A, getFunction as An, updateFunction as Ar, loadSkillLine as At, clearConsumedPendingMail as B, listAgentContacts as Bn, automatedRejectedError as Bt, hasReplyState as C, getAccount as Cn, startAgentClaim as Cr, thrownErrorExitCode as Ct, bareAddress$1 as D, getCreditBalance as Dn, testFunction as Dr, defaultConnectionName as Dt, explainPendingMailNotFound as E, getConversation as En, stopRepeatFromEmail as Er, connectNextSteps as Et, serverRelationship as F, getOrgRoutingTopology as Fn, verifyAgentClaim as Fr, AUTOMATED_FILTER_UNSUPPORTED_CODE as Ft, removePendingMail as G, listDomains as Gn, queryUsesAutomated as Gt, pendingMailPath as H, listContacts as Hn, expectedAutomatedVerdicts as Ht, skillFirstLine as I, getRepeatingSend as In, verifyAgentSignup as Ir, AUTOMATED_FLAG_DESCRIPTION as It, readEmailInteraction as J, listEndpoints as Jn, withAttachmentWait as Jt, interactionHumanLine as K, listEmailAttachmentArchiveMembers as Kn, ATTACHMENT_WAIT_FLAG_DESCRIPTION as Kt, wakeReadCommand as L, getSentEmail as Ln, AUTOMATED_VALUES as Lt, readThreadContext as M, getFunctionTestRunTrace as Mn, updateRoute as Mr, formatAlreadySentNotice as Mt, sentInThread as N, getInboxStatus as Nn, updateWakeAuthorization as Nr, writeIdempotentReplayBannerIfReplay as Nt, describeWake as O, getDefaultNetworkAgent as On, unsetFunctionRoute as Or, generatedAgentName as Ot, serverMuted as P, getMemory as Pn, updateWakeSchedule as Pr, withFlagSuggestion as Pt, IDEMPOTENCY_KEY_FLAG_DESCRIPTION as Q, listRoutes as Qn, createCliApiClient as Qt, wakeRecipientField as R, getThread as Rn, AutomatedFilterUnsupportedError as Rt, formatRepliesCell as S, downloadSentAttachmentByFilename as Sn, simulateRoute as Sr, successfulSendOutcome as St, queryUsesAwaiting as T, getContact as Tn, startCliLogin as Tr, cliInvocation as Tt, readPendingMail as U, listDefaultNetworkAgents as Un, hasAutomatedVerdict as Ut, clearReadPendingMail as V, listAgentNetworks as Vn, ensureSearchReportsAutomated as Vt, recordPendingMail as W, listDefaultNetworkMembers as Wn, isAutomatedRejectedError as Wt, replyInteractionWarning as X, listFunctions as Xn, SAVED_CLI_OAUTH_SESSION_EXPIRED_MESSAGE as Xt, replyExpectation as Y, listFunctionLogs as Yn, ConnectedAgentKeyRequiredError as Yt, wakeInteractionSentence as Z, listRepeatingSends as Zn, createAuthenticatedCliApiClient as Zt, ReplyStateUnsupportedError as _, deleteWakeSchedule as _n, semanticSearch as _r, sendIdentityFields as _t, extractErrorCode as a, cliLogout as an, pullWebhookEvent as ar, checkPriorReplies as at, ensureSearchReportsReplyState as b, downloadEmailAttachmentPart as bn, setFunctionSecret as br, sentHistoryWindowStart as bt, hasControlCharacter as c, createFunction as cn, putContact as cr, excludeSignalReplies as ct, runWithTiming as d, createWakeSchedule as dn, reorderRoutes as dr, formatPriorRepliesCheckSkipped as dt, resolveCliApiRequestConfig as en, listSentEmails as er, SEND_OUTCOME_HELP as et, surfaceUnauthorizedHint as f, deleteAgentContact as fn, replyToEmail as fr, formatPriorRepliesWarning as ft, REPLY_STATE_UNSUPPORTED_CODE as g, deleteWakeAuthorization as gn, searchMemories as gr, reportSendCommandResult as gt, AWAITING_VALUES as h, deleteRoute as hn, searchEmails as hr, priorRepliesThatWentOut as ht, createOperationCommand as i, checkDefaultNetworkContactAdmission as in, pollCliLogin as ir, buildThrownSendFailureEnvelope as it, latestOwnOutbound as j, getFunctionRouting as jn, updateRepeatingSend as jr, currentMailSessionKey as jt, displayAddress as k, getEmail as kn, updateDefaultNetworkMember as kr, identitySuggestions as kt, headerFlagName as l, createRoute as ln, redeemCreditCode as lr, followUpCommandPrefix as lt, AWAITING_FLAG_DESCRIPTION as m, deleteMemory as mn, runWakeSchedule as mr, formatSendRecordFailureSummary as mt, API_ERROR_CODES as n, cancelSentEmail as nn, listWakeDispatches as nr, assertValidIdempotencyKey as nt, extractErrorPayload as o, completeWebhookEvent as on, putAgentContact as or, classifySendError as ot, writeErrorWithHints as p, deleteContact as pn, resendAgentSignupVerification as pr, formatSendFailureSummary as pt, interactionNextActions as q, listEmails as qn, ATTACHMENT_WAIT_MAX_MS as qt, TIME_FLAG_DESCRIPTION as r, cancelSentEmailByIdempotencyKey as rn, listWakeSchedules as rr, buildFollowUpCommand as rt, formatErrorPayload as s, createEndpoint as sn, putAgentContactPolicy as sr, deriveSendIdempotencyKey as st, API_BASE_URL_FLAG_DESCRIPTION as t, addDefaultNetworkMember as tn, listWakeAuthorizations as tr, apiResultHttpStatus as tt, readTextFileFlag as u, createWakeAuthorization as un, removeDefaultNetworkMember as ur, formatDeletedEarlierSendNotice as ut, assertAwaitingFilterRows as v, downloadEmailAttachmentArchiveMember as vn, sendEmail as vr, sendOutcomeExitCode as vt, isAwaitingRejectedError as w, getAgentContactPolicy as wn, startAgentSignup as wr, DEFAULT_ENROLL_NAME as wt, formatAwaitingCell as x, downloadSentAttachmentArchiveMember as xn, setMemory as xr, serializeErrorPayload as xt, awaitingRejectedError as y, downloadEmailAttachmentByFilename as yn, setFunctionRoute as yr, sendWaitClampNotice as yt, wakeRelationship as z, getWakeSchedule as zn, assertAutomatedVerdict as zt };

package/dist/{cli-config-DMszFbGn.js → cli-config--YTRdJ3t.js}

@@ -636,6 +636,17 @@ var PrimitiveApiClient = class {
 //#endregion
 //#region src/oclif/connected-agent-profile.ts
 const AGENT_PROFILE_ENV = "PRIMITIVE_AGENT_PROFILE";
+/**
+* The selected agent's email address, exported next to AGENT_PROFILE_ENV for
+* a registered session so other tools can read it without running the CLI.
+*/
+const AGENT_ADDRESS_ENV = "PRIMITIVE_AGENT_ADDRESS";
+/**
+* One sentence telling a session whose agent is selected how to run a command
+* as the member login instead. An empty PRIMITIVE_AGENT_PROFILE selects no
+* profile everywhere in the CLI.
+*/
+const MEMBER_LOGIN_OPT_OUT = "rerun the same command with `PRIMITIVE_AGENT_PROFILE=` in front of it (or under `env -u PRIMITIVE_AGENT_PROFILE`) to run it as the member login";
 function parsePresenceProfile(value, owner) {
 	const row = mailObject(value, [
 		"protocol",
@@ -661,7 +672,7 @@ function supportedPresenceProfile(value, owner) {
 }
 var AgentConnectionSetupError = class extends Error {};
 function requireDefaultLoginProfile() {
-	if (process.env["PRIMITIVE_AGENT_PROFILE"]?.trim()) throw new AgentConnectionSetupError("This command manages the default OAuth login. Unset PRIMITIVE_AGENT_PROFILE before using it; the connected-agent profile is unchanged.");
+	if (process.env["PRIMITIVE_AGENT_PROFILE"]?.trim()) throw new AgentConnectionSetupError(`This command manages the member login, so it does not run as the agent selected by PRIMITIVE_AGENT_PROFILE; ${MEMBER_LOGIN_OPT_OUT}, and the agent profile is unchanged.`);
 }
 function agentProfileName(value) {
 	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,62}$/.test(value)) throw new AgentConnectionSetupError("Agent profile must start with a letter or number and contain only letters, numbers, dots, underscores or hyphens (at most 63 characters).");
@@ -1282,8 +1293,8 @@ function resolveCliAuth(params) {
 	const profileName = (params.env ?? process.env)["PRIMITIVE_AGENT_PROFILE"]?.trim() || void 0;
 	if (profileName !== void 0) {
 		const profile = loadConnectedAgentProfile(params.configDir, profileName);
-		if (!profile) throw new AgentConnectionSetupError("Selected agent profile is not configured. No fallback login will be used.");
-		if (apiKey && apiKey !== profile.api_key || params.apiBaseUrl !== void 0 && apiBaseUrl !== profile.api_base_url) throw new AgentConnectionSetupError("Explicit credentials or API origin conflict with the selected agent profile.");
+		if (!profile) throw new AgentConnectionSetupError(`Agent profile ${profileName} selected by PRIMITIVE_AGENT_PROFILE is not saved on this machine, so no login is used; run \`primitive agent status --profile ${profileName}\` to see what happened to it, or ${MEMBER_LOGIN_OPT_OUT}.`);
+		if (apiKey && apiKey !== profile.api_key || params.apiBaseUrl !== void 0 && apiBaseUrl !== profile.api_base_url) throw new AgentConnectionSetupError(`An explicit API key or API origin conflicts with agent profile ${profileName} selected by PRIMITIVE_AGENT_PROFILE; drop the override to act as that agent, or rerun the same command with \`PRIMITIVE_AGENT_PROFILE=\` in front of it to use the override.`);
 		return {
 			apiKey: profile.api_key,
 			apiBaseUrl: profile.api_base_url,
@@ -1492,4 +1503,4 @@ function redactCliEnvironment(environment) {
 	};
 }
 //#endregion
-export { saveActiveChatState as A, parseOwnerMemberAddress as B, resolveCliAuth as C, deleteChatState as D, chatStatePath as E, agentProfilesDirectory as F, createClient as G, requireDefaultLoginProfile as H, connectedAgentIdentity as I, createConfig as K, connectedApiBaseUrl as L, AgentConnectionSetupError as M, agentProfileDirectory as N, loadActiveChatState as O, agentProfileName as P, loadConnectedAgentProfile as R, normalizeApiBaseUrl as S, saveSignupCredentials as T, saveConnectedAgentProfile as U, profileAlreadyConnectedMessage as V, PrimitiveApiClient as W, deleteCliCredentials as _, normalizeCliEnvironmentName as a, hasStoredCliLogin as b, resolveConfigEnvironment as c, validateCliHeaderName as d, validateCliHeaderValue as f, credentialsPath as g, credentialsLockPath as h, loadCliConfig as i, AGENT_PROFILE_ENV as j, loadChatConversationByLocalId as k, saveCliConfig as l, cliAccessTokenExpiresAt as m, deleteCliConfig as n, redactCliEnvironment as o, acquireCliCredentialsLock as p, emptyCliConfig as r, removeCliEnvironment as s, DEFAULT_ENVIRONMENT as t, upsertCliEnvironment as u, deleteCliCredentialsLock as v, saveCliCredentials as w, loadCliCredentials as x, detectPrimitiveKeyEnvMisname as y, parseConnectedAgentProfile as z };
+export { saveActiveChatState as A, parseConnectedAgentProfile as B, resolveCliAuth as C, deleteChatState as D, chatStatePath as E, agentProfileName as F, PrimitiveApiClient as G, profileAlreadyConnectedMessage as H, agentProfilesDirectory as I, createClient as K, connectedAgentIdentity as L, AGENT_PROFILE_ENV as M, AgentConnectionSetupError as N, loadActiveChatState as O, agentProfileDirectory as P, connectedApiBaseUrl as R, normalizeApiBaseUrl as S, saveSignupCredentials as T, requireDefaultLoginProfile as U, parseOwnerMemberAddress as V, saveConnectedAgentProfile as W, deleteCliCredentials as _, normalizeCliEnvironmentName as a, hasStoredCliLogin as b, resolveConfigEnvironment as c, validateCliHeaderName as d, validateCliHeaderValue as f, credentialsPath as g, credentialsLockPath as h, loadCliConfig as i, AGENT_ADDRESS_ENV as j, loadChatConversationByLocalId as k, saveCliConfig as l, cliAccessTokenExpiresAt as m, deleteCliConfig as n, redactCliEnvironment as o, acquireCliCredentialsLock as p, createConfig as q, emptyCliConfig as r, removeCliEnvironment as s, DEFAULT_ENVIRONMENT as t, upsertCliEnvironment as u, deleteCliCredentialsLock as v, saveCliCredentials as w, loadCliCredentials as x, detectPrimitiveKeyEnvMisname as y, loadConnectedAgentProfile as z };