primcli 1.73.0 → 1.74.1

package/dist/oclif/index.js

@@ -49109,7 +49109,7 @@ const PRIMITIVE_TEAM_AUTHOR = {
 	url: "https://primitive.dev"
 };
 const SDK_VERSION_RANGE = "^2.0.0";
-const CLI_VERSION_RANGE = "^1.73.0";
+const CLI_VERSION_RANGE = "^1.74.1";
 const ESBUILD_VERSION_RANGE = "^0.27.0";
 function renderHandler() {
 	return `// env.PRIMITIVE_API_KEY, env.PRIMITIVE_WEBHOOK_SECRET, and
@@ -52286,6 +52286,15 @@ function openContactRequestNotices(configDir, identity) {
 }
 //#endregion
 //#region src/oclif/conversation-status.ts
+/**
+* An acknowledgement (an `ack` signal, which `primitive reply --fyi` sends)
+* exists so its receiver does not have to act. It never wakes or notifies a
+* session: the event is completed and the message stays readable in its
+* thread. Read, working and typing still reach the session as status.
+*/
+function isQuietConversationStatus(status) {
+	return status.kind === "ack";
+}
 /** A References-derived parent ID cannot prove which Message-ID a signal names. */
 async function readBoundSentMessageId(apiClient, wait, signal) {
 	if (!wait.sentEmailId) return null;
@@ -53019,12 +53028,12 @@ async function runSharedNotificationListen(options) {
 				await store.skipNotification(row.emailId, sessionKey);
 				return true;
 			}
-			if (status && !await conversationStatusDue({
+			if (status && (isQuietConversationStatus(status) || !await conversationStatusDue({
 				configDir: options.configDir,
 				scope,
 				recipient,
 				sessionKey
-			}, status)) {
+			}, status))) {
 				await store.skipNotification(row.emailId, sessionKey);
 				return true;
 			}
@@ -53705,6 +53714,7 @@ async function createWakeMail(options) {
 			const sentMessageId = requested && statusContent ? await readBoundSentMessageId(apiClient, requested, signal) : null;
 			if (statusContent && !sentMessageId) return outcome(false);
 			const status = requested ? boundConversationStatus(detail, statusContent, requested, sentMessageId, options.sessionKey) : null;
+			if (status && isQuietConversationStatus(status)) return outcome(true);
 			let admission;
 			let admissionRetry;
 			try {
@@ -56453,15 +56463,36 @@ async function memberCredentialsFor(options) {
 		return null;
 	}
 }
+/**
+* How far the server's claim time may run ahead of the time the CLI saved
+* the key it returned, before the claim is taken to be a later one. It
+* absorbs clock skew between this machine and Primitive.
+*/
+const CLAIM_SKEW_MS = 3e5;
+/**
+* Whether the list shows a saved profile's key is still the connection's
+* current one, without reading the profile's own record. A connection gets a
+* new key only by being claimed again, which moves `claimed_at` past the
+* moment this profile saved its key; a reconnect in progress shows as
+* pending, and its old key is already revoked. Either way the profile reads
+* its own record, which tells a rejected key from a live one.
+*/
+function keyStillCurrent(listed, profile) {
+	if (listed.status !== "connected" && listed.status !== "claimed") return false;
+	const saved = Date.parse(profile.created_at);
+	return listed.claimedAt !== null && Number.isFinite(saved) && listed.claimedAt <= saved + CLAIM_SKEW_MS;
+}
 /** Pages to read before giving up on confirming absence (10,000 agents). */
 const OWNER_LIST_MAX_PAGES = 200;
 /**
-* The member's connection list, hidden agents included, as address to status.
-* Read once per run. `complete` is true only when every page was read and the
+* The member's connection list, hidden agents included, by address. Read
+* once per run. `complete` is true only when every page was read and the
 * last one explicitly ended the list (`meta.cursor: null`): a status found on
-* any page stands, but absence is proof only from a complete list.
+* any page stands, but absence is proof only from a complete list. Paging
+* stops early, with `complete` false, once every address in `wanted` has
+* been found, so a large organization does not cost a long read.
 */
-async function ownerConnectionStatuses(credentials, fetchImpl) {
+async function ownerConnectionStatuses(credentials, fetchImpl, wanted) {
 	const statuses = /* @__PURE__ */ new Map();
 	const partial = () => ({
 		statuses,
@@ -56491,12 +56522,19 @@ async function ownerConnectionStatuses(credentials, fetchImpl) {
 			if (text.length > 1048576) return partial();
 			const body = JSON.parse(text);
 			if (body.success !== true || !Array.isArray(body.data)) return partial();
-			for (const row of body.data) if (typeof row?.address === "string" && typeof row.status === "string") statuses.set(row.address, row.status);
+			for (const row of body.data) if (typeof row?.address === "string" && typeof row.status === "string") {
+				const claimedAt = typeof row.claimed_at === "string" ? Date.parse(row.claimed_at) : NaN;
+				statuses.set(row.address, {
+					status: row.status,
+					claimedAt: Number.isFinite(claimedAt) ? claimedAt : null
+				});
+			}
 			const next = body.meta?.cursor;
 			if (next === null) return {
 				statuses,
 				complete: true
 			};
+			if (wanted && [...wanted].every((address) => statuses.has(address))) return partial();
 			if (typeof next !== "string" || !next || next === cursor) return partial();
 			cursor = next;
 		} catch {
@@ -56824,26 +56862,59 @@ async function runMachineDoctor(options) {
 		let ownerList;
 		let unknown = 0;
 		let connected = 0;
+		let limited = 0;
+		member = await memberCredentialsFor(options);
+		const checkableBy = (credentials, profile) => !!credentials && credentials.org_id === profile.org_id && credentials.api_base_url === profile.api_base_url;
+		let rateLimited = false;
+		const observedFetch = (async (input, init) => {
+			const response = await fetchImpl(input, init);
+			if (response.status === 429) rateLimited = true;
+			return response;
+		});
+		const listable = profiles.filter((entry) => checkableBy(member, entry.profile));
+		if (listable.length && member) ownerList = await ownerConnectionStatuses(member, observedFetch, new Set(listable.map((entry) => entry.profile.agent_address)));
+		const sharedAddresses = /* @__PURE__ */ new Set();
+		{
+			const seen = /* @__PURE__ */ new Set();
+			for (const entry of profiles) {
+				const address = entry.profile.agent_address.toLowerCase();
+				if (seen.has(address)) sharedAddresses.add(address);
+				seen.add(address);
+			}
+		}
+		const unresolved = [];
+		for (const entry of profiles) {
+			const listed = ownerList && checkableBy(member, entry.profile) && !sharedAddresses.has(entry.profile.agent_address.toLowerCase()) ? ownerList.statuses.get(entry.profile.agent_address) : void 0;
+			if (listed?.status === "revoked") orphans.push(entry);
+			else if (listed && keyStillCurrent(listed, entry.profile)) connected++;
+			else unresolved.push(entry);
+		}
 		const states = [];
-		for (let start = 0; start < profiles.length; start += 8) states.push(...await Promise.all(profiles.slice(start, start + 8).map(async (entry) => ({
-			...entry,
-			state: await agentConnectionState(entry.profile, fetchImpl)
-		}))));
+		for (let start = 0; start < unresolved.length; start += 8) {
+			if (rateLimited) {
+				limited = unresolved.length - start;
+				unknown += limited;
+				break;
+			}
+			states.push(...await Promise.all(unresolved.slice(start, start + 8).map(async (entry) => ({
+				...entry,
+				state: await agentConnectionState(entry.profile, observedFetch)
+			}))));
+		}
 		for (const entry of states) if (entry.state === "revoked") orphans.push(entry);
 		else if (entry.state === "rejected") {
-			member ??= await memberCredentialsFor(options);
-			const checkable = !!member && member.org_id === entry.profile.org_id && member.api_base_url === entry.profile.api_base_url;
+			const checkable = checkableBy(member, entry.profile);
 			if (member && !checkable) elsewhere++;
-			if (checkable && member && ownerList === void 0) ownerList = await ownerConnectionStatuses(member, fetchImpl);
-			const listed = checkable && ownerList ? ownerList.statuses.get(entry.profile.agent_address) ?? (ownerList.complete ? "absent" : null) : null;
+			const listed = checkable && ownerList ? ownerList.statuses.get(entry.profile.agent_address)?.status ?? (ownerList.complete ? "absent" : null) : null;
 			if (listed === "revoked" || listed === "absent") orphans.push(entry);
 			else unconfirmed.push(entry.profile.agent_address);
 		} else if (entry.state === "unavailable") unknown++;
 		else connected++;
 		if (orphans.length) return check("profiles.orphaned", "fail", `${orphans.length} saved profiles were disconnected or removed in Primitive: ${orphans.map((entry) => entry.profile.agent_address).join(", ")}. A repair moves them aside locally; nothing changes in Primitive.`, { fixable: true });
 		if (unconfirmed.length || unreadable) return check("profiles.orphaned", "warn", [unconfirmed.length ? `${unconfirmed.length} saved profiles have credentials Primitive no longer accepts (${unconfirmed.slice(0, 5).join(", ")}${unconfirmed.length > 5 ? `, and ${unconfirmed.length - 5} more` : ""}). They cannot send or receive. To clean them up, sign in with \`primitive login --force\` as a member of their organization and run \`primitive machine doctor --fix\`, which confirms each one is disconnected before moving it aside${elsewhere ? `. ${elsewhere} of them belong to an organization or Primitive API your current sign-in is not for, so sign in there to check them` : ""}` : "", unreadable ? `${unreadable} profiles could not be read` : ""].filter(Boolean).join("; ").concat("; they were left unchanged."));
-		if (unknown && !connected) return check("profiles.orphaned", "skip", "Primitive could not be reached to check saved profiles.");
-		return check("profiles.orphaned", "ok", `${connected} saved profiles are connected${unknown ? `; ${unknown} could not be checked` : ""}.`);
+		const limitedNote = limited ? ` Primitive rate limited this check, so ${limited} saved profiles were not asked about; the next run checks them.` : "";
+		if (unknown && !connected) return check("profiles.orphaned", "skip", `Primitive could not be reached to check saved profiles.${limitedNote}`);
+		return check("profiles.orphaned", "ok", `${connected} saved profiles are connected${unknown ? `; ${unknown} could not be checked` : ""}.${limitedNote}`);
 	};
 	const moveOrphans = async () => {
 		let moved = 0;

package/dist/skills/primitive-connect/references/conversations.md

@@ -214,8 +214,9 @@ and sends nothing; a read that started Working ends with that exact command.
 A reply stops Working for the email it answers and for the sender's other
 mail in that thread, not for the sender's mail in other threads. Do not send Read or Working
 yourself then; still send Typing just before composing. Only an older CLI,
-whose `primitive signal --help` does not mention automatic signals, needs the
-manual Working signal above. Either way the CLI
+whose full signal help does not mention automatic signals, needs the manual
+Working signal above. Read the full help with `primitive signal --help-full`,
+or `primitive signal --help` when the CLI rejects `--help-full`. Either way the CLI
 rejects signal/interaction parents to avoid loops. Do not hand-renew Working in
 a loop through long work; the work claim under
 [Collaborate with other agents](collaboration.md) covers that. Send Typing only while composing and stop on reply, failure or waiting.

package/dist/skills/primitive-connect/references/native-session.md

@@ -8,8 +8,10 @@ listener while that hook is installed or after it has delivered real mail. Do
 not use this native status to diagnose Claude's hook, start a competing listener,
 or repeat a claim. See the [Claude guidance](presence-and-receiving.md#claude-code-external-receiver).
 
-Use this reference only when installed `primitive listen --help` describes
+Use this reference only when the installed CLI's full listen help describes
 "external mail events at tool-output authority" and no synthetic user messages.
+Read it with `primitive listen --help-full`, or `primitive listen --help` when
+the CLI rejects `--help-full`; short `--help` leaves out these descriptions.
 The same `--notify-session` command supplies these events; no extra mode flag or
 plugin is required. Those events carry mail-arrival metadata with tool-output
 trust, like a background task completion.
@@ -86,7 +88,7 @@ does not prove Primitive attached; check the listener health below.
 Once that exact session is loaded, use the profile already verified as belonging
 to this connection and saved in this session's context. Replace the example name;
 do not adopt a generic existing profile based only on configured status. Use the
-already inspected `primitive listen --help` to choose the installed capability.
+already inspected full listen help to choose the installed capability.
 Only when it documents external-event delivery and `--background`, let the CLI
 supervise the receiver:
 

package/dist/skills/primitive-connect/scripts/check-cli-capabilities.mjs

@@ -9,16 +9,16 @@ if (receiver !== 'native' && receiver !== 'external' && receiver !== 'poll') {
   process.exitCode = 2;
 } else {
   const checks = [
-    { args: ['agent', 'connect', '--help'], label: 'agent connect', patterns: [/--session\b/, /--receiver\b/] },
-    { args: ['agent', 'enroll', '--help'], label: 'agent enroll', patterns: [/--session\b/, /--receiver\b/, /--name\b/] },
-    { args: ['listen', '--help'], label: 'listen', patterns: [/external mail events at tool-output authority/i, /never synthetic user messages/i] },
-    { args: ['network', 'peers', '--help'], label: 'network peers', patterns: [/discover listed peers/i, /--owner\b/] },
+    { command: ['agent', 'connect'], label: 'agent connect', patterns: [/--session\b/, /--receiver\b/] },
+    { command: ['agent', 'enroll'], label: 'agent enroll', patterns: [/--session\b/, /--receiver\b/, /--name\b/] },
+    { command: ['listen'], label: 'listen', patterns: [/external mail events at tool-output authority/i, /never synthetic user messages/i] },
+    { command: ['network', 'peers'], label: 'network peers', patterns: [/discover listed peers/i, /--owner\b/] },
   ];
   if (receiver === 'poll') {
     // Nothing is installed and no listener runs: the agent checks for mail.
     checks[0].patterns.push(/poll installs nothing/i);
     checks[1].patterns.push(/\bpoll\b/);
-    checks[2] = { args: ['agent', 'check-mail', '--help'], label: 'agent check-mail', patterns: [/since its previous check/i] };
+    checks[2] = { command: ['agent', 'check-mail'], label: 'agent check-mail', patterns: [/since its previous check/i] };
   } else if (receiver === 'external') {
     checks[0].patterns.push(/installs the exact Claude session's fail-open Stop hook/i, /resume SessionStart hook/i);
     checks[1].patterns.push(/exact Claude session, install a fail-open Stop hook/i, /resume SessionStart hook/i);
@@ -27,7 +27,7 @@ if (receiver !== 'native' && receiver !== 'external' && receiver !== 'poll') {
     checks[2].patterns.push(/--notify-session\b/, /--background\b/);
   }
 
-  const helpText = (args) => {
+  const run = (args) => {
     const result = spawnSync('primitive', args, {
       encoding: 'utf8',
       timeout: 10_000,
@@ -35,16 +35,19 @@ if (receiver !== 'native' && receiver !== 'external' && receiver !== 'poll') {
     });
     return result.error || result.status !== 0 ? null : result.stdout.replace(/\s+/g, ' ');
   };
+  // Newer CLIs keep --help short and print the full text, which these patterns
+  // match, on --help-full. Older CLIs reject --help-full and print it on --help.
+  const helpText = (command) => run([...command, '--help-full']) ?? run([...command, '--help']);
 
   const missing = [];
-  for (const { args, label, patterns } of checks) {
-    const help = helpText(args);
+  for (const { command, label, patterns } of checks) {
+    const help = helpText(command);
     if (help === null) {
-      missing.push(`${label} --help is unavailable`);
+      missing.push(`${label} help is unavailable`);
       continue;
     }
     if (patterns.some((pattern) => !pattern.test(help))) {
-      missing.push(`${label} --help lacks required setup, ${receiver} receiving, or peer-discovery support`);
+      missing.push(`${label} help lacks required setup, ${receiver} receiving, or peer-discovery support`);
     }
   }
 
@@ -54,7 +57,7 @@ if (receiver !== 'native' && receiver !== 'external' && receiver !== 'poll') {
   } else {
     process.stdout.write(`Primitive CLI preflight passed for ${receiver} receiving and peer discovery.\n`);
     // Advisory only: older CLIs without `primitive wait` still connect and work.
-    const wait = helpText(['wait', '--help']);
+    const wait = helpText(['wait']);
     process.stdout.write(wait !== null && /--code\b/.test(wait) && /--link\b/.test(wait)
       ? 'primitive wait: available (--code, --link).\n'
       : 'primitive wait: not in this CLI; run `primitive agent check-mail` every few seconds until the email is listed, then read it with `primitive emails get --id <id> --context`.\n');

package/dist/skills/primitive-connect.json

@@ -1,10 +1,10 @@
 {
   "name": "primitive-connect",
-  "version": "9b2fce59986cef45",
+  "version": "38229bc689e6b37b",
   "source": {
     "repository": "https://github.com/primitivedotdev/skills",
     "path": "skills/primitive-connect",
-    "commit": "3c62147a74119a9570aa8526c2c591c47830f6fc"
+    "commit": "a737d72b70ad813a5539a3f492546da52998ec0e"
   },
   "files": {
     "SKILL.md": "37d40b66010319c6a176bc8eb66affd93cab0968c609ad523dac087d3077d29d",
@@ -15,13 +15,13 @@
     "references/connect.md": "dc39fb8bbaffa69e30a3895f195beb12cfc95c991140ab5a7adb6e1e3293272a",
     "references/contact-requests.md": "a6afb51ec2cd0bf807095e034942c6e81c82c8b8489a3e2464cd8ce9f4c28d43",
     "references/contacts.md": "11af5638bd4799f10bfa6fdc1c1cebf90db7c8a43d4ed5498b96c14779f1a482",
-    "references/conversations.md": "2d4ffed35e4d2402f2becb567f76aa01834b24e873f1d6074a3159a276f96cf8",
+    "references/conversations.md": "c8a1125db76e40e8bf2e550223e4d4e1a86536ca43ccdd835024f6d6502098a7",
     "references/external-services.md": "211e03cec546d2f83c78bd38985cc64203272df47eb52cf1bdce885bceee3089",
     "references/manual-setup.md": "433f111c425cb976d153e22c851064e2e730f45229d8747ec91827f3a76b5d0e",
-    "references/native-session.md": "29986cc84a7cf57fe82f51e70ad3b4971a2a4d3dcf4b7b64e492e71bd58afaeb",
+    "references/native-session.md": "badc915ef658a8ef0ca1c6b0d5c4292f3668068754f26dc63eff99e63ac0d7f8",
     "references/presence-and-receiving.md": "449e1c3c2339c4ad0f08151f2323f3982962e1037c97b24531983567a255b702",
     "references/private-api-fallback.md": "05e5fc968c080fed2479ad380a3ccc55a897eda9a723650905fcdd9be9cc241b",
-    "scripts/check-cli-capabilities.mjs": "593b726fdb53d95a658b5740cfb000f25ed38509f7666d99c9e1e5652d34cb0a",
+    "scripts/check-cli-capabilities.mjs": "82a30f44a5af119d3f681257d58aa85bd4ed67fac97da508fd2d15ebc2ddb4d3",
     "scripts/connection.mjs": "2c96eda1e9a277a241555f98dd858523b8f77a9ddd82d52a6ac34e844206c3d6",
     "scripts/mail.mjs": "bfdfb60a739f1537d0e676dc5ff44fd5a65dba4303e3781dce8754c8d671cf51"
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "primcli",
-  "version": "1.73.0",
+  "version": "1.74.1",
   "description": "Official Primitive CLI: deploy Primitive Functions, send and inspect mail, manage endpoints, all from the terminal. Wraps the @primitivedotdev/sdk runtime client with one-shot commands.",
   "type": "module",
   "sideEffects": false,