primcli 1.71.0 → 1.72.0

package/README.md

@@ -142,6 +142,49 @@ primitive inbox next
 
 Run `primitive --help` for the full command list. Per-command help (`primitive functions deploy --help`) carries enough detail that an agent can compose any operation without leaving the terminal.
 
+## Verification codes and sign-in links
+
+Your address works for signing up and logging in to other services. After you
+enter it, wait for the email and take what you need from it:
+
+```bash
+# Sign up with your address, then:
+primitive wait --from github.com --code      # prints 482913
+primitive wait --from vercel.com --link      # prints the sign-in link
+primitive wait --subject "verify" --timeout 90s
+primitive wait --from stripe.com --code --json
+```
+
+`primitive wait` waits for the next email to the identity the CLI resolves (a
+connected agent profile's own address, or any inbound mail for a member login)
+and prints it: sender, subject, time, the start of its text and its ID, ready
+for `primitive reply --id <id>`. Only mail that arrives after the command starts
+matches; `--include-existing` also lets one of the newest 50 emails match, for
+a code that arrived before you started waiting.
+
+- `--from` takes an address or a bare domain; `github.com` matches any sender at
+  it or its subdomains. It narrows the wait; it does not authenticate the sender.
+- `--subject` matches text in the subject; `--thread <id>` and
+  `--reply-to <sent-email-id>` narrow to a conversation.
+- `--timeout` takes `90s`, `5m`, `1h` or plain seconds (default `5m`, `0` waits
+  forever).
+- `--code` prints only the one-time code, preferring numbers next to words like
+  code, verification or passcode and ignoring years, phone numbers, prices and
+  order numbers. A code split as `123 456` prints as `123456`.
+- `--link` prints only the most likely verify, confirm, sign-in, magic or reset
+  link, skipping unsubscribe, privacy, help and social links and removing an
+  obvious click-tracking wrapper.
+- `--json` prints one object: `id`, `thread_id`, `from`, `to`, `subject`,
+  `received_at`, `text` and, when asked, `code` and `link`.
+
+| Exit | Meaning |
+|---|---|
+| 0 | A matching email arrived and was printed. |
+| 1 | Error (API failure or authentication). |
+| 2 | Invalid flags or arguments. |
+| 5 | No matching email before `--timeout`. |
+| 6 | The email arrived without a code (`--code`) or link (`--link`); its ID is on stderr. |
+
 ## Waiting with connected credentials
 
 After sending, wait for the existing send's reply without sending again:
@@ -157,8 +200,9 @@ default, so fast replies are not missed; use `--since <timestamp>` to narrow the
 window. They require an authenticated peer and the exact outbound parent.
 Interaction attachments remain pending with inspection guidance. JSONL includes
 matching email details, or use `--table` for compact output and `--number N` for
-multiple replies. Timeout exits 1; repeat the same wait to recover without
-resending. Connected waits share one local address event receiver and recover
+multiple replies. `--json` prints the same JSONL and reports a timeout or error
+as one final JSON line with `error` and `exit_code`. Timeout exits 1; repeat
+the same wait to recover without resending. Connected waits share one local address event receiver and recover
 through exact-parent search, without scanning inbox history. Additional content
 filters on this command require organization credentials.
 
@@ -538,6 +582,31 @@ The sender sees the stop in the thread. `primitive emails get --id <email-id>
 --context` marks a repeating message with its cadence and, when the recipient may
 stop it, the exact stop command.
 
+## Custom headers and scheduled sends
+
+`send` and `reply` take `--header "Name: value"` (or `Name=value`), repeatable
+once per name. The CLI checks only the shape and refuses a duplicate name; the
+server decides which names are allowed and says why in a `validation_error`.
+
+```bash
+primitive send --to alice@example.com --body "Spring sale" --header "X-Campaign-Id: spring-sale" --header "Auto-Submitted=auto-generated"
+primitive reply --id <email-id> --body "Ticket updated." --header "X-Ticket-Id: 4821"
+```
+
+`send --scheduled-at <time>` records the send with status `scheduled` and sends it
+at that time. The time needs `Z` or a numeric UTC offset. It cannot be combined
+with `--wait`, `--attachment`, `--fyi` or `--if-latest-message-id`. The summary
+says the message is scheduled and how to cancel it, and the `--json` envelope
+adds a `cancel_scheduled_send` follow-up command.
+
+```bash
+primitive send --to alice@example.com --body "Reminder: standup" --scheduled-at 2026-10-09T17:00:00Z --idempotency-key standup-2026-10-09
+primitive sent cancel --idempotency-key standup-2026-10-09
+```
+
+Generated operation commands also expose the request headers the spec declares,
+for example `primitive sending send-email --idempotency-key <key>`.
+
 ## Recipient routing
 
 Bind a recipient address to a destination so inbound mail resolves to a single
@@ -1061,6 +1130,50 @@ stops running. Claude reports the same SessionEnd for a restart, a switch to
 another session and a real exit, so the hook waits five minutes first, and a
 start of the same session within that time cancels the end.
 
+#### Session agent identity in Claude Code
+
+Claude Code gives SessionStart hooks a file named by `CLAUDE_ENV_FILE` and
+runs it before every later Bash command in the session. Once the session's
+profile is saved and connected (on the first start, on resume, or for a
+session whose agent already exists), the SessionStart hook appends two lines
+to it:
+
+```sh
+export PRIMITIVE_AGENT_PROFILE=session-<session id>
+export PRIMITIVE_AGENT_ADDRESS=<the agent's email address>
+```
+
+So every `primitive` command in the session, and any tool that runs
+`primitive`, acts as the session's agent without a prefix, and `send` and
+`reply` send from the agent's address without `--from`. Registration that
+finishes after the hook returns still writes the lines, and later commands
+pick them up. Nothing is written for a session that already sets
+`PRIMITIVE_AGENT_PROFILE` (including to an empty value), when the file already
+assigns either variable, while setup is still pending, while another connected
+profile is bound to or receives for the session, or for a profile that is not
+saved, so a session is never pointed at a profile that does not exist.
+
+`PRIMITIVE_AGENT_ADDRESS` is for other tools in the session that need the
+agent's email address without running the CLI. It is set only together with
+`PRIMITIVE_AGENT_PROFILE` and always names that profile's address.
+`primitive whoami` prints the address alone on its first line, offline, and
+`primitive whoami --json` adds `address`, `profile` and `source`
+(`session_hook` for the session's own exported agent, `env` for any other
+`PRIMITIVE_AGENT_PROFILE`).
+
+Commands that manage the member login (`login`, `logout`, `signup`,
+`agent enroll`, and the other commands that refuse a selected profile) still
+refuse. To run any command as the member login from inside such a session,
+put an empty `PRIMITIVE_AGENT_PROFILE=` in front of it, or run it under
+`env -u PRIMITIVE_AGENT_PROFILE`:
+
+```sh
+PRIMITIVE_AGENT_PROFILE= primitive whoami
+```
+
+Codex hooks have no equivalent of `CLAUDE_ENV_FILE`, so Codex sessions still
+select their profile with `PRIMITIVE_AGENT_PROFILE` on each command.
+
 An agent that `session-register` created is disconnected only when its session
 has not started again for 30 days, by `machine doctor --fix` or the next
 `session-register` on the machine, and only while the session's profile still

package/dist/{api-command-B8C3jr7A.js → api-command-BrwPbyPP.js}

@@ -1,5 +1,5 @@
 import { S as __exportAll, _ as WEBHOOK_EVENT_TYPES, g as SENT_EMAIL_EVENT_TYPES } from "./repeats-BL7ZC-_6-CKMKBlx7.js";
-import { C as resolveCliAuth, F as agentProfilesDirectory, G as createClient, H as requireDefaultLoginProfile, K as createConfig, N as agentProfileDirectory, R as loadConnectedAgentProfile, S as normalizeApiBaseUrl, T as saveSignupCredentials, W as PrimitiveApiClient, _ as deleteCliCredentials, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, i as loadCliConfig, j as AGENT_PROFILE_ENV, m as cliAccessTokenExpiresAt, p as acquireCliCredentialsLock, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname } from "./cli-config-DMszFbGn.js";
+import { C as resolveCliAuth, G as PrimitiveApiClient, I as agentProfilesDirectory, K as createClient, M as AGENT_PROFILE_ENV, P as agentProfileDirectory, S as normalizeApiBaseUrl, T as saveSignupCredentials, U as requireDefaultLoginProfile, _ as deleteCliCredentials, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, i as loadCliConfig, m as cliAccessTokenExpiresAt, p as acquireCliCredentialsLock, q as createConfig, w as saveCliCredentials, x as loadCliCredentials, y as detectPrimitiveKeyEnvMisname, z as loadConnectedAgentProfile } from "./cli-config--YTRdJ3t.js";
 import { h as writeMailJson, m as withMailLock, p as syncMailDirectory, u as privateMailPermissions } from "./shared-mail-files-MwlVE90c.js";
 import { Command, Errors, Flags } from "@oclif/core";
 import { existsSync, lstatSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
@@ -4365,6 +4365,16 @@ function describeSentStatus(status) {
 function formatSentSummary(noun, sent) {
 	return `${noun} sent (${describeSentStatus(sent.status)}, id ${sent.id}). Do not resend.`;
 }
+/**
+* Summary for a send the API accepted with status `scheduled`: nothing
+* has gone out yet, and it can still be canceled.
+*/
+function formatScheduledSummary(noun, sent, idempotencyKey) {
+	const when = sent.scheduled_at ? ` for ${sent.scheduled_at}` : "";
+	const verb = sent.idempotent_replay === true ? "already scheduled" : "scheduled";
+	const byKey = idempotencyKey ? ` or \`primitive sent cancel --idempotency-key ${shellQuote(idempotencyKey)}\`` : "";
+	return `${noun} ${verb}${when} (id ${sent.id}). Nothing has gone out yet. Do not resend. To cancel it before then, run \`primitive sent cancel --id ${sent.id}\`${byKey}.`;
+}
 function formatSendFailureSummary(noun, outcome, httpStatus) {
 	if (outcome === "not_sent") return `${noun} not sent: ${httpStatus === void 0 ? "the request failed before sending" : `the API rejected the request (HTTP ${httpStatus})`}. Nothing went out; fix the problem before retrying.`;
 	return `${noun} send outcome uncertain (${httpStatus === void 0 ? "no response from the API" : `HTTP ${httpStatus}`}): it may or may not have gone out. Do not resend blindly; check sent history first.`;
@@ -4582,8 +4592,9 @@ function sendIdentityFields(params) {
 	};
 }
 /**
-* Commands that inspect an existing send. None of them send again:
-* a caller that follows them after a failure cannot double-send.
+* Commands that inspect an existing send, or cancel one still
+* scheduled. None of them send again: a caller that follows them after
+* a failure cannot double-send.
 */
 function buildSendCommandFollowUps(params) {
 	const commands = [];
@@ -4594,13 +4605,22 @@ function buildSendCommandFollowUps(params) {
 		"--idempotency-key",
 		params.idempotencyKey
 	]));
-	if (params.sentId !== null) commands.push(buildFollowUpCommand("inspect_sent_email", "Inspect the send and its delivery status", [
-		"primitive",
-		"sent",
-		"get",
-		"--id",
-		params.sentId
-	]));
+	if (params.sentId !== null) {
+		commands.push(buildFollowUpCommand("inspect_sent_email", "Inspect the send and its delivery status", [
+			"primitive",
+			"sent",
+			"get",
+			"--id",
+			params.sentId
+		]));
+		if (params.scheduled === true) commands.push(buildFollowUpCommand("cancel_scheduled_send", "Cancel this scheduled send before it goes out", [
+			"primitive",
+			"sent",
+			"cancel",
+			"--id",
+			params.sentId
+		]));
+	}
 	if (params.outcome === "uncertain") commands.push(buildFollowUpCommand("list_recent_sent_emails", "Check sent history for this attempt before retrying", [
 		"primitive",
 		"sent",
@@ -4639,7 +4659,7 @@ function reportSendCommandResult(params) {
 			errorPayload = { message: "The API returned no send record." };
 		} else {
 			outcome = successfulSendOutcome(sent);
-			outcomeMessage = outcome === "not_sent" || outcome === "uncertain" ? formatSendRecordFailureSummary(params.noun, outcome, sent) : outcome === "already_sent" ? formatAlreadySentNotice(sent, {
+			outcomeMessage = outcome === "not_sent" || outcome === "uncertain" ? formatSendRecordFailureSummary(params.noun, outcome, sent) : sent.status === "scheduled" ? formatScheduledSummary(params.noun, sent, params.idempotencyKey ?? sent.client_idempotency_key) : outcome === "already_sent" ? formatAlreadySentNotice(sent, {
 				keyOrigin: params.idempotencyKeyOrigin ?? "caller",
 				keyHint: "--idempotency-key with a new key"
 			}) : formatSentSummary(params.noun, sent);
@@ -4662,6 +4682,7 @@ function reportSendCommandResult(params) {
 				attemptStartedAtIso: params.attemptStartedAtIso,
 				idempotencyKey: params.idempotencyKey,
 				outcome,
+				scheduled: sent?.status === "scheduled",
 				sentId: sent?.id ?? null
 			}),
 			...params.extraEnvelopeFields
@@ -5551,7 +5572,7 @@ function savedConnectedProfiles(configDir, exclude) {
 */
 async function otherProfiles(configDir, session, current) {
 	if (session) try {
-		const { connectedProfilesForSession } = await import("./machine-session-BrTXqxK9.js").then((n) => n.s);
+		const { connectedProfilesForSession } = await import("./machine-session-Be6j29GE.js").then((n) => n.s);
 		return {
 			inSession: true,
 			profiles: connectedProfilesForSession(configDir, session, current)
@@ -5818,6 +5839,42 @@ const API_ERROR_CODES = {
 function flagName(parameterName) {
 	return parameterName.replace(/_/g, "-");
 }
+/**
+* Flag name for a request header an operation declares, such as
+* `--idempotency-key` for `Idempotency-Key`.
+*/
+function headerFlagName(headerName) {
+	return headerName.toLowerCase().replace(/_/g, "-");
+}
+/**
+* True when `text` holds an ASCII control character. Header values
+* travel on the wire as given, so one (a line break above all) could
+* never be sent and is refused before the request.
+*/
+function hasControlCharacter(text) {
+	for (let index = 0; index < text.length; index += 1) {
+		const code = text.charCodeAt(index);
+		if (code < 32 || code === 127) return true;
+	}
+	return false;
+}
+/**
+* Read the declared-header flags the caller passed into a header map
+* keyed by the header name the spec declares. Only flags `buildFlags`
+* registered for a header are read.
+*/
+function collectHeaderFlags(parsedFlags, headerFlagToName) {
+	const headers = {};
+	for (const [flag, header] of headerFlagToName) {
+		const value = parsedFlags[flag];
+		if (value === void 0) continue;
+		const text = String(value);
+		if (text.trim() === "") throw new Errors.CLIError(`--${flag} must not be empty.`, { exit: 2 });
+		if (hasControlCharacter(text)) throw new Errors.CLIError(`--${flag} must not contain control characters such as line breaks.`, { exit: 2 });
+		headers[header] = text;
+	}
+	return headers;
+}
 function flagDescription(parameter) {
 	return parameter.description ?? parameter.name;
 }
@@ -6166,6 +6223,14 @@ function buildFlags(operation) {
 			bodyFieldFlagToProperty.set(name, extra.property);
 		}
 	}
+	const headerFlagToName = /* @__PURE__ */ new Map();
+	for (const parameter of operation.headerParams) {
+		const name = headerFlagName(parameter.name);
+		if (RESERVED_FLAG_NAMES.has(name)) continue;
+		if (flags[name] !== void 0) continue;
+		flags[name] = flagForParameter(parameter);
+		headerFlagToName.set(name, parameter.name);
+	}
 	if (EVENT_TYPES_FLAG_OPERATIONS.has(operation.sdkName)) flags["event-types"] = Flags.string({
 		description: EVENT_TYPES_FLAG_DESCRIPTION,
 		multiple: true
@@ -6178,7 +6243,8 @@ function buildFlags(operation) {
 	});
 	return {
 		flags,
-		bodyFieldFlagToProperty
+		bodyFieldFlagToProperty,
+		headerFlagToName
 	};
 }
 function collectBodyFieldFlags(parsedFlags, bodyFieldFlagToProperty) {
@@ -6273,7 +6339,7 @@ const OPERATION_SUCCESS_HOOKS = { verifyAgentSignup: ({ envelope, configDir, api
 	writeStderr("Credentials saved to the CLI config; `primitive whoami` will work on the next call.\n");
 } };
 function createOperationCommand(operation) {
-	const { flags, bodyFieldFlagToProperty } = buildFlags(operation);
+	const { flags, bodyFieldFlagToProperty, headerFlagToName } = buildFlags(operation);
 	const baseDescription = operation.description !== null && operation.description !== void 0 ? canonicalizeCliReferences(operation.description) : `${operation.method} ${operation.path}`;
 	const schemaSummary = operation.hasJsonBody ? renderRequestSchemaSummary(operation.requestSchema) : null;
 	const hint = OPERATION_HINTS[operation.sdkName];
@@ -6289,6 +6355,7 @@ function createOperationCommand(operation) {
 				throw withFlagSuggestion(error, flagNames);
 			});
 			const parsedFlags = flags;
+			const headers = collectHeaderFlags(parsedFlags, headerFlagToName);
 			if ([
 				"startAgentSignup",
 				"verifyAgentSignup",
@@ -6336,6 +6403,7 @@ function createOperationCommand(operation) {
 				const callOperation = () => operationFn({
 					body,
 					client: apiClient.client,
+					...Object.keys(headers).length > 0 ? { headers } : {},
 					parseAs: operation.binaryResponse ? "blob" : "auto",
 					path: collectValues(operation.pathParams, parsedFlags),
 					query,
@@ -6475,4 +6543,4 @@ function canonicalizeCliReferences(description) {
 	return description.replaceAll("`primitive emails:latest`", "`primitive emails latest`").replaceAll("`primitive describe emails:get-email | jq '.responseSchema.properties'`", "`primitive describe emails:get | jq '.responseSchema.properties'`");
 }
 //#endregion
-export { apiResultHttpStatus as $, listWakeAuthorizations as $n, addDefaultNetworkMember as $t, readThreadContext as A, getFunctionTestRunTrace as An, updateRoute as Ar, formatAlreadySentNotice as At, pendingMailPath as B, listContacts as Bn, expectedAutomatedVerdicts as Bt, queryUsesAwaiting as C, getContact as Cn, startCliLogin as Cr, cliInvocation as Ct, displayAddress as D, getEmail as Dn, updateDefaultNetworkMember as Dr, identitySuggestions as Dt, describeWake as E, getDefaultNetworkAgent as En, unsetFunctionRoute as Er, generatedAgentName as Et, wakeReadCommand as F, getSentEmail as Fn, AUTOMATED_VALUES as Ft, interactionNextActions as G, listEmails as Gn, ATTACHMENT_WAIT_MAX_MS as Gt, recordPendingMail as H, listDefaultNetworkMembers as Hn, isAutomatedRejectedError as Ht, wakeRecipientField as I, getThread as In, AutomatedFilterUnsupportedError as It, replyInteractionWarning as J, listFunctions as Jn, SAVED_CLI_OAUTH_SESSION_EXPIRED_MESSAGE as Jt, readEmailInteraction as K, listEndpoints as Kn, withAttachmentWait as Kt, wakeRelationship as L, getWakeSchedule as Ln, assertAutomatedVerdict as Lt, serverMuted as M, getMemory as Mn, updateWakeSchedule as Mr, withFlagSuggestion as Mt, serverRelationship as N, getOrgRoutingTopology as Nn, verifyAgentClaim as Nr, AUTOMATED_FILTER_UNSUPPORTED_CODE as Nt, formatMailWakeLine as O, getFunction as On, updateFunction as Or, loadSkillLine as Ot, skillFirstLine as P, getRepeatingSend as Pn, verifyAgentSignup as Pr, AUTOMATED_FLAG_DESCRIPTION as Pt, SEND_OUTCOME_HELP as Q, listSentEmails as Qn, resolveCliApiRequestConfig as Qt, clearConsumedPendingMail as R, listAgentContacts as Rn, automatedRejectedError as Rt, isAwaitingRejectedError as S, getAgentContactPolicy as Sn, startAgentSignup as Sr, DEFAULT_ENROLL_NAME as St, bareAddress$1 as T, getCreditBalance as Tn, testFunction as Tr, defaultConnectionName as Tt, removePendingMail as U, listDomains as Un, queryUsesAutomated as Ut, readPendingMail as V, listDefaultNetworkAgents as Vn, hasAutomatedVerdict as Vt, interactionHumanLine as W, listEmailAttachmentArchiveMembers as Wn, ATTACHMENT_WAIT_FLAG_DESCRIPTION as Wt, IDEMPOTENCY_KEY_FLAG_DESCRIPTION as X, listRoutes as Xn, createCliApiClient as Xt, wakeInteractionSentence as Y, listRepeatingSends as Yn, createAuthenticatedCliApiClient as Yt, MAX_SEND_WAIT_TIMEOUT_MS as Z, listSentAttachmentArchiveMembers as Zn, refreshStoredCliCredentials as Zt, awaitingRejectedError as _, downloadEmailAttachmentByFilename as _n, setFunctionRoute as _r, sendWaitClampNotice as _t, extractErrorCode as a, createEndpoint as an, putAgentContactPolicy as ar, deriveSendIdempotencyKey as at, formatRepliesCell as b, downloadSentAttachmentByFilename as bn, simulateRoute as br, successfulSendOutcome as bt, readTextFileFlag as c, createWakeAuthorization as cn, removeDefaultNetworkMember as cr, formatDeletedEarlierSendNotice as ct, writeErrorWithHints as d, deleteContact as dn, resendAgentSignupVerification as dr, formatSendFailureSummary as dt, cancelSentEmail as en, listWakeDispatches as er, assertValidIdempotencyKey as et, AWAITING_FLAG_DESCRIPTION as f, deleteMemory as fn, runWakeSchedule as fr, formatSendRecordFailureSummary as ft, assertAwaitingFilterRows as g, downloadEmailAttachmentArchiveMember as gn, sendEmail as gr, sendOutcomeExitCode as gt, ReplyStateUnsupportedError as h, deleteWakeSchedule as hn, semanticSearch as hr, sendIdentityFields as ht, createOperationCommand as i, completeWebhookEvent as in, putAgentContact as ir, classifySendError as it, sentInThread as j, getInboxStatus as jn, updateWakeAuthorization as jr, writeIdempotentReplayBannerIfReplay as jt, latestOwnOutbound as k, getFunctionRouting as kn, updateRepeatingSend as kr, currentMailSessionKey as kt, runWithTiming as l, createWakeSchedule as ln, reorderRoutes as lr, formatPriorRepliesCheckSkipped as lt, REPLY_STATE_UNSUPPORTED_CODE as m, deleteWakeAuthorization as mn, searchMemories as mr, reportSendCommandResult as mt, API_ERROR_CODES as n, checkDefaultNetworkContactAdmission as nn, pollCliLogin as nr, buildThrownSendFailureEnvelope as nt, extractErrorPayload as o, createFunction as on, putContact as or, excludeSignalReplies as ot, AWAITING_VALUES as p, deleteRoute as pn, searchEmails as pr, priorRepliesThatWentOut as pt, replyExpectation as q, listFunctionLogs as qn, ConnectedAgentKeyRequiredError as qt, TIME_FLAG_DESCRIPTION as r, cliLogout as rn, pullWebhookEvent as rr, checkPriorReplies as rt, formatErrorPayload as s, createRoute as sn, redeemCreditCode as sr, followUpCommandPrefix as st, API_BASE_URL_FLAG_DESCRIPTION as t, cancelSentEmailByIdempotencyKey as tn, listWakeSchedules as tr, buildFollowUpCommand as tt, surfaceUnauthorizedHint as u, deleteAgentContact as un, replyToEmail as ur, formatPriorRepliesWarning as ut, ensureSearchReportsReplyState as v, downloadEmailAttachmentPart as vn, setFunctionSecret as vr, sentHistoryWindowStart as vt, explainPendingMailNotFound as w, getConversation as wn, stopRepeatFromEmail as wr, connectNextSteps as wt, hasReplyState as x, getAccount as xn, startAgentClaim as xr, thrownErrorExitCode as xt, formatAwaitingCell as y, downloadSentAttachmentArchiveMember as yn, setMemory as yr, serializeErrorPayload as yt, clearReadPendingMail as z, listAgentNetworks as zn, ensureSearchReportsAutomated as zt };
+export { MAX_SEND_WAIT_TIMEOUT_MS as $, listSentAttachmentArchiveMembers as $n, refreshStoredCliCredentials as $t, formatMailWakeLine as A, getFunction as An, updateFunction as Ar, loadSkillLine as At, clearConsumedPendingMail as B, listAgentContacts as Bn, automatedRejectedError as Bt, hasReplyState as C, getAccount as Cn, startAgentClaim as Cr, thrownErrorExitCode as Ct, bareAddress$1 as D, getCreditBalance as Dn, testFunction as Dr, defaultConnectionName as Dt, explainPendingMailNotFound as E, getConversation as En, stopRepeatFromEmail as Er, connectNextSteps as Et, serverRelationship as F, getOrgRoutingTopology as Fn, verifyAgentClaim as Fr, AUTOMATED_FILTER_UNSUPPORTED_CODE as Ft, removePendingMail as G, listDomains as Gn, queryUsesAutomated as Gt, pendingMailPath as H, listContacts as Hn, expectedAutomatedVerdicts as Ht, skillFirstLine as I, getRepeatingSend as In, verifyAgentSignup as Ir, AUTOMATED_FLAG_DESCRIPTION as It, readEmailInteraction as J, listEndpoints as Jn, withAttachmentWait as Jt, interactionHumanLine as K, listEmailAttachmentArchiveMembers as Kn, ATTACHMENT_WAIT_FLAG_DESCRIPTION as Kt, wakeReadCommand as L, getSentEmail as Ln, AUTOMATED_VALUES as Lt, readThreadContext as M, getFunctionTestRunTrace as Mn, updateRoute as Mr, formatAlreadySentNotice as Mt, sentInThread as N, getInboxStatus as Nn, updateWakeAuthorization as Nr, writeIdempotentReplayBannerIfReplay as Nt, describeWake as O, getDefaultNetworkAgent as On, unsetFunctionRoute as Or, generatedAgentName as Ot, serverMuted as P, getMemory as Pn, updateWakeSchedule as Pr, withFlagSuggestion as Pt, IDEMPOTENCY_KEY_FLAG_DESCRIPTION as Q, listRoutes as Qn, createCliApiClient as Qt, wakeRecipientField as R, getThread as Rn, AutomatedFilterUnsupportedError as Rt, formatRepliesCell as S, downloadSentAttachmentByFilename as Sn, simulateRoute as Sr, successfulSendOutcome as St, queryUsesAwaiting as T, getContact as Tn, startCliLogin as Tr, cliInvocation as Tt, readPendingMail as U, listDefaultNetworkAgents as Un, hasAutomatedVerdict as Ut, clearReadPendingMail as V, listAgentNetworks as Vn, ensureSearchReportsAutomated as Vt, recordPendingMail as W, listDefaultNetworkMembers as Wn, isAutomatedRejectedError as Wt, replyInteractionWarning as X, listFunctions as Xn, SAVED_CLI_OAUTH_SESSION_EXPIRED_MESSAGE as Xt, replyExpectation as Y, listFunctionLogs as Yn, ConnectedAgentKeyRequiredError as Yt, wakeInteractionSentence as Z, listRepeatingSends as Zn, createAuthenticatedCliApiClient as Zt, ReplyStateUnsupportedError as _, deleteWakeSchedule as _n, semanticSearch as _r, sendIdentityFields as _t, extractErrorCode as a, cliLogout as an, pullWebhookEvent as ar, checkPriorReplies as at, ensureSearchReportsReplyState as b, downloadEmailAttachmentPart as bn, setFunctionSecret as br, sentHistoryWindowStart as bt, hasControlCharacter as c, createFunction as cn, putContact as cr, excludeSignalReplies as ct, runWithTiming as d, createWakeSchedule as dn, reorderRoutes as dr, formatPriorRepliesCheckSkipped as dt, resolveCliApiRequestConfig as en, listSentEmails as er, SEND_OUTCOME_HELP as et, surfaceUnauthorizedHint as f, deleteAgentContact as fn, replyToEmail as fr, formatPriorRepliesWarning as ft, REPLY_STATE_UNSUPPORTED_CODE as g, deleteWakeAuthorization as gn, searchMemories as gr, reportSendCommandResult as gt, AWAITING_VALUES as h, deleteRoute as hn, searchEmails as hr, priorRepliesThatWentOut as ht, createOperationCommand as i, checkDefaultNetworkContactAdmission as in, pollCliLogin as ir, buildThrownSendFailureEnvelope as it, latestOwnOutbound as j, getFunctionRouting as jn, updateRepeatingSend as jr, currentMailSessionKey as jt, displayAddress as k, getEmail as kn, updateDefaultNetworkMember as kr, identitySuggestions as kt, headerFlagName as l, createRoute as ln, redeemCreditCode as lr, followUpCommandPrefix as lt, AWAITING_FLAG_DESCRIPTION as m, deleteMemory as mn, runWakeSchedule as mr, formatSendRecordFailureSummary as mt, API_ERROR_CODES as n, cancelSentEmail as nn, listWakeDispatches as nr, assertValidIdempotencyKey as nt, extractErrorPayload as o, completeWebhookEvent as on, putAgentContact as or, classifySendError as ot, writeErrorWithHints as p, deleteContact as pn, resendAgentSignupVerification as pr, formatSendFailureSummary as pt, interactionNextActions as q, listEmails as qn, ATTACHMENT_WAIT_MAX_MS as qt, TIME_FLAG_DESCRIPTION as r, cancelSentEmailByIdempotencyKey as rn, listWakeSchedules as rr, buildFollowUpCommand as rt, formatErrorPayload as s, createEndpoint as sn, putAgentContactPolicy as sr, deriveSendIdempotencyKey as st, API_BASE_URL_FLAG_DESCRIPTION as t, addDefaultNetworkMember as tn, listWakeAuthorizations as tr, apiResultHttpStatus as tt, readTextFileFlag as u, createWakeAuthorization as un, removeDefaultNetworkMember as ur, formatDeletedEarlierSendNotice as ut, assertAwaitingFilterRows as v, downloadEmailAttachmentArchiveMember as vn, sendEmail as vr, sendOutcomeExitCode as vt, isAwaitingRejectedError as w, getAgentContactPolicy as wn, startAgentSignup as wr, DEFAULT_ENROLL_NAME as wt, formatAwaitingCell as x, downloadSentAttachmentArchiveMember as xn, setMemory as xr, serializeErrorPayload as xt, awaitingRejectedError as y, downloadEmailAttachmentByFilename as yn, setFunctionRoute as yr, sendWaitClampNotice as yt, wakeRelationship as z, getWakeSchedule as zn, assertAutomatedVerdict as zt };

package/dist/{cli-config-DMszFbGn.js → cli-config--YTRdJ3t.js}

@@ -636,6 +636,17 @@ var PrimitiveApiClient = class {
 //#endregion
 //#region src/oclif/connected-agent-profile.ts
 const AGENT_PROFILE_ENV = "PRIMITIVE_AGENT_PROFILE";
+/**
+* The selected agent's email address, exported next to AGENT_PROFILE_ENV for
+* a registered session so other tools can read it without running the CLI.
+*/
+const AGENT_ADDRESS_ENV = "PRIMITIVE_AGENT_ADDRESS";
+/**
+* One sentence telling a session whose agent is selected how to run a command
+* as the member login instead. An empty PRIMITIVE_AGENT_PROFILE selects no
+* profile everywhere in the CLI.
+*/
+const MEMBER_LOGIN_OPT_OUT = "rerun the same command with `PRIMITIVE_AGENT_PROFILE=` in front of it (or under `env -u PRIMITIVE_AGENT_PROFILE`) to run it as the member login";
 function parsePresenceProfile(value, owner) {
 	const row = mailObject(value, [
 		"protocol",
@@ -661,7 +672,7 @@ function supportedPresenceProfile(value, owner) {
 }
 var AgentConnectionSetupError = class extends Error {};
 function requireDefaultLoginProfile() {
-	if (process.env["PRIMITIVE_AGENT_PROFILE"]?.trim()) throw new AgentConnectionSetupError("This command manages the default OAuth login. Unset PRIMITIVE_AGENT_PROFILE before using it; the connected-agent profile is unchanged.");
+	if (process.env["PRIMITIVE_AGENT_PROFILE"]?.trim()) throw new AgentConnectionSetupError(`This command manages the member login, so it does not run as the agent selected by PRIMITIVE_AGENT_PROFILE; ${MEMBER_LOGIN_OPT_OUT}, and the agent profile is unchanged.`);
 }
 function agentProfileName(value) {
 	if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,62}$/.test(value)) throw new AgentConnectionSetupError("Agent profile must start with a letter or number and contain only letters, numbers, dots, underscores or hyphens (at most 63 characters).");
@@ -1282,8 +1293,8 @@ function resolveCliAuth(params) {
 	const profileName = (params.env ?? process.env)["PRIMITIVE_AGENT_PROFILE"]?.trim() || void 0;
 	if (profileName !== void 0) {
 		const profile = loadConnectedAgentProfile(params.configDir, profileName);
-		if (!profile) throw new AgentConnectionSetupError("Selected agent profile is not configured. No fallback login will be used.");
-		if (apiKey && apiKey !== profile.api_key || params.apiBaseUrl !== void 0 && apiBaseUrl !== profile.api_base_url) throw new AgentConnectionSetupError("Explicit credentials or API origin conflict with the selected agent profile.");
+		if (!profile) throw new AgentConnectionSetupError(`Agent profile ${profileName} selected by PRIMITIVE_AGENT_PROFILE is not saved on this machine, so no login is used; run \`primitive agent status --profile ${profileName}\` to see what happened to it, or ${MEMBER_LOGIN_OPT_OUT}.`);
+		if (apiKey && apiKey !== profile.api_key || params.apiBaseUrl !== void 0 && apiBaseUrl !== profile.api_base_url) throw new AgentConnectionSetupError(`An explicit API key or API origin conflicts with agent profile ${profileName} selected by PRIMITIVE_AGENT_PROFILE; drop the override to act as that agent, or rerun the same command with \`PRIMITIVE_AGENT_PROFILE=\` in front of it to use the override.`);
 		return {
 			apiKey: profile.api_key,
 			apiBaseUrl: profile.api_base_url,
@@ -1492,4 +1503,4 @@ function redactCliEnvironment(environment) {
 	};
 }
 //#endregion
-export { saveActiveChatState as A, parseOwnerMemberAddress as B, resolveCliAuth as C, deleteChatState as D, chatStatePath as E, agentProfilesDirectory as F, createClient as G, requireDefaultLoginProfile as H, connectedAgentIdentity as I, createConfig as K, connectedApiBaseUrl as L, AgentConnectionSetupError as M, agentProfileDirectory as N, loadActiveChatState as O, agentProfileName as P, loadConnectedAgentProfile as R, normalizeApiBaseUrl as S, saveSignupCredentials as T, saveConnectedAgentProfile as U, profileAlreadyConnectedMessage as V, PrimitiveApiClient as W, deleteCliCredentials as _, normalizeCliEnvironmentName as a, hasStoredCliLogin as b, resolveConfigEnvironment as c, validateCliHeaderName as d, validateCliHeaderValue as f, credentialsPath as g, credentialsLockPath as h, loadCliConfig as i, AGENT_PROFILE_ENV as j, loadChatConversationByLocalId as k, saveCliConfig as l, cliAccessTokenExpiresAt as m, deleteCliConfig as n, redactCliEnvironment as o, acquireCliCredentialsLock as p, emptyCliConfig as r, removeCliEnvironment as s, DEFAULT_ENVIRONMENT as t, upsertCliEnvironment as u, deleteCliCredentialsLock as v, saveCliCredentials as w, loadCliCredentials as x, detectPrimitiveKeyEnvMisname as y, parseConnectedAgentProfile as z };
+export { saveActiveChatState as A, parseConnectedAgentProfile as B, resolveCliAuth as C, deleteChatState as D, chatStatePath as E, agentProfileName as F, PrimitiveApiClient as G, profileAlreadyConnectedMessage as H, agentProfilesDirectory as I, createClient as K, connectedAgentIdentity as L, AGENT_PROFILE_ENV as M, AgentConnectionSetupError as N, loadActiveChatState as O, agentProfileDirectory as P, connectedApiBaseUrl as R, normalizeApiBaseUrl as S, saveSignupCredentials as T, requireDefaultLoginProfile as U, parseOwnerMemberAddress as V, saveConnectedAgentProfile as W, deleteCliCredentials as _, normalizeCliEnvironmentName as a, hasStoredCliLogin as b, resolveConfigEnvironment as c, validateCliHeaderName as d, validateCliHeaderValue as f, credentialsPath as g, credentialsLockPath as h, loadCliConfig as i, AGENT_ADDRESS_ENV as j, loadChatConversationByLocalId as k, saveCliConfig as l, cliAccessTokenExpiresAt as m, deleteCliConfig as n, redactCliEnvironment as o, acquireCliCredentialsLock as p, createConfig as q, emptyCliConfig as r, removeCliEnvironment as s, DEFAULT_ENVIRONMENT as t, upsertCliEnvironment as u, deleteCliCredentialsLock as v, saveCliCredentials as w, loadCliCredentials as x, detectPrimitiveKeyEnvMisname as y, loadConnectedAgentProfile as z };

package/dist/{json-output-CEskSQJi.js → json-output-Ce10AsSb.js}

@@ -17,7 +17,10 @@ import { format } from "node:util";
 * - A command whose `--json` output is a bare JSON array keeps that
 *   documented shape on success; its stderr notices are dropped.
 *
-* Commands that stream several documents (`listen`) are not guarded.
+* Commands that stream several documents (`listen`, `emails wait`) are
+* not guarded. `emails wait` uses `runStreamingJson` instead: one JSON
+* line per result on stdout, and on failure one more JSON line carrying
+* `error` and `exit_code`.
 */
 const GUARDED = Symbol.for("primitive.cli.jsonOutputGuard");
 /** True when `--json` appears before any `--` separator. */
@@ -235,7 +238,72 @@ function guardJsonOutput(cls) {
 	};
 }
 /** Command ids whose `--json` streams several documents over time. */
-const STREAMING_JSON_COMMAND_IDS = /* @__PURE__ */ new Set(["listen"]);
+const STREAMING_JSON_COMMAND_IDS = /* @__PURE__ */ new Set(["emails:wait", "listen"]);
+/**
+* Run the body of a command whose `--json` output is newline-delimited
+* JSON, one line per result, written to stdout as each result is found.
+*
+* stdout stays live. Everything the body writes to stderr is held back,
+* so a caller reading `2>&1` still gets only JSON lines. On success the
+* held lines are dropped. On failure one more line is printed on stdout:
+* an object with `error`, `exit_code` and, when there were any, the held
+* lines as `warnings`, built the same way as a guarded command's error
+* document. `failure` may supply a more specific `error` body and extra
+* top-level fields. The exit code is unchanged.
+*/
+async function runStreamingJson(body, failure) {
+	const stderr = [];
+	const originalStderrWrite = process.stderr.write;
+	const originalConsole = {
+		debug: console.debug,
+		error: console.error,
+		warn: console.warn
+	};
+	const toStderr = (...args) => {
+		stderr.push(`${format(...args)}\n`);
+	};
+	process.stderr.write = capturingWrite(stderr);
+	console.debug = toStderr;
+	console.error = toStderr;
+	console.warn = toStderr;
+	let thrown;
+	try {
+		await body();
+	} catch (error) {
+		thrown = { error };
+	} finally {
+		process.stderr.write = originalStderrWrite;
+		console.debug = originalConsole.debug;
+		console.error = originalConsole.error;
+		console.warn = originalConsole.warn;
+	}
+	const exitCode = thrown ? isExitSignal(thrown.error) ? errorExitCode(thrown.error) ?? 0 : errorExitCode(thrown.error) ?? 1 : typeof process.exitCode === "number" ? process.exitCode : 0;
+	if (exitCode !== 0) {
+		const document = composeJsonDocument({
+			exitCode,
+			stderr,
+			stdout: "",
+			thrown
+		});
+		const specific = failure?.();
+		const line = specific ? {
+			...document,
+			...specific.fields,
+			error: specific.error
+		} : document;
+		const message = line.error?.message;
+		if (Array.isArray(line.warnings)) {
+			const warnings = line.warnings.filter((warning) => warning !== message);
+			if (warnings.length > 0) line.warnings = warnings;
+			else delete line.warnings;
+		}
+		process.stdout.write(`${JSON.stringify(line)}\n`);
+	}
+	if (thrown) {
+		if (thrown.error !== null && typeof thrown.error === "object") thrown.error.skipOclifErrorHandling = true;
+		throw thrown.error;
+	}
+}
 /**
 * Guard every command in `commands` that accepts `--json`, except the
 * streaming ones. Called once by the command registry.
@@ -251,4 +319,4 @@ function guardJsonOutputCommands(commands) {
 	}
 }
 //#endregion
-export { jsonOutputRequested as n, guardJsonOutputCommands as t };
+export { jsonOutputRequested as n, runStreamingJson as r, guardJsonOutputCommands as t };

package/dist/{machine-session-BrTXqxK9.js → machine-session-Be6j29GE.js}

@@ -1,8 +1,8 @@
 import { S as __exportAll } from "./repeats-BL7ZC-_6-CKMKBlx7.js";
-import { B as parseOwnerMemberAddress, F as agentProfilesDirectory, I as connectedAgentIdentity, L as connectedApiBaseUrl, M as AgentConnectionSetupError, N as agentProfileDirectory, P as agentProfileName, R as loadConnectedAgentProfile, U as saveConnectedAgentProfile, V as profileAlreadyConnectedMessage, W as PrimitiveApiClient, j as AGENT_PROFILE_ENV, x as loadCliCredentials, z as parseConnectedAgentProfile } from "./cli-config-DMszFbGn.js";
-import { Bn as listContacts, Cn as getContact, Ct as cliInvocation, Dn as getEmail, Qn as listSentEmails, Rn as listAgentContacts, Sn as getAgentContactPolicy, Tt as defaultConnectionName, Un as listDomains, Zt as refreshStoredCliCredentials, ar as putAgentContactPolicy, dn as deleteContact, gr as sendEmail, ir as putAgentContact, or as putContact, pr as searchEmails, un as deleteAgentContact } from "./api-command-B8C3jr7A.js";
+import { B as parseConnectedAgentProfile, F as agentProfileName, G as PrimitiveApiClient, H as profileAlreadyConnectedMessage, I as agentProfilesDirectory, L as connectedAgentIdentity, M as AGENT_PROFILE_ENV, N as AgentConnectionSetupError, P as agentProfileDirectory, R as connectedApiBaseUrl, V as parseOwnerMemberAddress, W as saveConnectedAgentProfile, x as loadCliCredentials, z as loadConnectedAgentProfile } from "./cli-config--YTRdJ3t.js";
+import { $t as refreshStoredCliCredentials, Bn as listAgentContacts, Dt as defaultConnectionName, Gn as listDomains, Hn as listContacts, Tn as getContact, Tt as cliInvocation, cr as putContact, er as listSentEmails, fn as deleteAgentContact, hr as searchEmails, kn as getEmail, or as putAgentContact, pn as deleteContact, sr as putAgentContactPolicy, vr as sendEmail, wn as getAgentContactPolicy } from "./api-command-BrwPbyPP.js";
 import { _ as acquireListenLock, c as mailTime, d as readMailJson, f as removeMailFile, g as ListenStateError, h as writeMailJson, i as mailId, l as privateMailDirectory, o as mailObject, r as mailAddress, s as mailString } from "./shared-mail-files-MwlVE90c.js";
-import { _ as detectAgentRuntime, a as NotificationRetryError, d as defaultSessionSocket, f as NativeSessionDisconnectedError, l as SESSION_UUID, t as notificationScope, u as connectNativeSession, v as installConnectSkill, x as readBundledConnectSkill } from "./notify-session-JbFGcjiM.js";
+import { _ as detectAgentRuntime, a as NotificationRetryError, d as defaultSessionSocket, f as NativeSessionDisconnectedError, l as SESSION_UUID, t as notificationScope, u as connectNativeSession, v as installConnectSkill, x as readBundledConnectSkill } from "./notify-session-Byt5sPWW.js";
 import { a as scopedChatSenderTrust } from "./scoped-chat-DTFkP360.js";
 import { l as stopBackgroundListen, r as backgroundListenStatus } from "./listen-background--0peztKE.js";
 import { t as readSharedMailOwner } from "./shared-mail-watch-DtKpsgg8.js";
@@ -4724,7 +4724,7 @@ async function enrollAgent(params) {
 	const receiverMode = params.receiverMode ?? "native";
 	const contactRequests = Boolean(params.contactRequests);
 	const env = params.env ?? process.env;
-	if (env["PRIMITIVE_AGENT_PROFILE"]?.trim() || env.PRIMITIVE_API_KEY?.trim() || env.PRIMITIVE_KEY?.trim()) throw refuse("Enrollment requires the saved member OAuth login. Unset agent-profile and API-key environment overrides.");
+	if (env["PRIMITIVE_AGENT_PROFILE"]?.trim() || env.PRIMITIVE_API_KEY?.trim() || env.PRIMITIVE_KEY?.trim()) throw refuse("Enrollment uses only the saved member login; rerun it under `env -u PRIMITIVE_AGENT_PROFILE -u PRIMITIVE_API_KEY -u PRIMITIVE_KEY` so no agent profile or API key override applies.");
 	const saved = loadCliCredentials(params.configDir);
 	if (!saved) throw refuse("Sign in with `primitive signin` as a member of this organization first.");
 	const apiBaseUrl = connectedApiBaseUrl(saved.api_base_url);
@@ -5588,6 +5588,7 @@ async function registerSession(options) {
 					receiving: RECEIVING[runtime],
 					status: "already_registered",
 					...resumeNote,
+					...hooked === "held" ? { receiverHeld: true } : {},
 					detail: hooked === "installed" ? "This session is already connected." : hooked === "held" ? HELD_DETAIL : "This session is already connected, but its receive hook could not be installed. Run `primitive machine doctor`."
 				};
 			}
@@ -5672,6 +5673,7 @@ async function registerSession(options) {
 			name,
 			nameIsDefault: name === record.name,
 			...resumeNote,
+			...hooked === "held" ? { receiverHeld: true } : {},
 			detail: hooked === "installed" ? `Connected as ${address}.` : hooked === "held" ? `Connected as ${address}. ${HELD_DETAIL}` : `Connected as ${address}, but the receive hook could not be installed. Run \`primitive machine doctor\`.`
 		};
 		if (status === "revoked" || status === "owner_inactive") return {

package/dist/{notify-session-JbFGcjiM.js → notify-session-Byt5sPWW.js}

@@ -1,5 +1,5 @@
 import { b as parseWebhookEvent, c as classifySignalContent, v as isEmailReceivedEvent, y as isTrustedSender } from "./repeats-BL7ZC-_6-CKMKBlx7.js";
-import { F as wakeReadCommand, P as skillFirstLine, Y as wakeInteractionSentence, vn as downloadEmailAttachmentPart } from "./api-command-B8C3jr7A.js";
+import { I as skillFirstLine, L as wakeReadCommand, Z as wakeInteractionSentence, bn as downloadEmailAttachmentPart } from "./api-command-BrwPbyPP.js";
 import { _ as acquireListenLock, g as ListenStateError, y as listenIdentity } from "./shared-mail-files-MwlVE90c.js";
 import { closeSync, copyFileSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, opendirSync, readFileSync, readdirSync, readlinkSync, renameSync, rmSync, statSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHash, randomUUID, scryptSync } from "node:crypto";

package/dist/oclif/auto-signal-worker.js

@@ -1,6 +1,6 @@
-import { A as readThreadContext, Fn as getSentEmail, Yt as createAuthenticatedCliApiClient } from "../api-command-B8C3jr7A.js";
+import { Ln as getSentEmail, M as readThreadContext, Zt as createAuthenticatedCliApiClient } from "../api-command-BrwPbyPP.js";
 import { _ as acquireListenLock } from "../shared-mail-files-MwlVE90c.js";
-import { t as sendSignal } from "../signal-command-B2TZ8n9c.js";
+import { t as sendSignal } from "../signal-command-DeEEZPbQ.js";
 import { AUTO_SIGNAL_KIND_ENV, AUTO_WORKING_RENEW_MS, autoSignalsDisabled, clearWorkingSending, markWorkingSending, readAutoClaim, readWorkingLease, recordRenewer, stopWorkingLease, writeWorkingLease } from "./auto-signals.js";
 import { join } from "node:path";
 import { homedir } from "node:os";