primcli 1.74.1 → 3.0.0-preview.1

package/dist/oclif/listen-supervisor.js

@@ -1 +1 @@
-export { s as runBackgroundListenSupervisor } from "../listen-background-cD6n8VYO.js";
+export { s as runBackgroundListenSupervisor } from "../listen-background-C0F9gNDD.js";

package/dist/oclif/proxy-auto-detect.js

@@ -1,6 +1,6 @@
-import { n as jsonOutputRequested } from "../json-output-Ce10AsSb.js";
+import { n as jsonOutputRequested } from "../json-output-BzSBR-KX.js";
 import { spawnSync } from "node:child_process";
-//#region src/oclif/proxy-auto-detect.ts
+// src/oclif/proxy-auto-detect.ts
 const PROXY_ENV_VARS = [
 	"HTTP_PROXY",
 	"HTTPS_PROXY",
@@ -68,5 +68,4 @@ function restartWithProxyEnvIfNeeded(options = {}) {
 	}
 	return exit(child.status ?? 1);
 }
-//#endregion
 export { _resetHintLatchForTest, restartWithProxyEnvIfNeeded };

package/dist/oclif/receiver-heal.js

@@ -1,11 +1,12 @@
-import { F as agentProfileName, M as AGENT_PROFILE_ENV, P as agentProfileDirectory, z as loadConnectedAgentProfile } from "../cli-config-C0Y_Ppol.js";
-import { d as readMailJson } from "../shared-mail-files-CZfm7E2k.js";
-import { _ as detectAgentRuntime, l as SESSION_UUID, t as notificationScope } from "../notify-session-DJAb9SGm.js";
-import { a as claimBackgroundListenRestart, n as backgroundListenRestartable, r as backgroundListenStatus } from "../listen-background-cD6n8VYO.js";
+import { N as agentProfileDirectory, P as agentProfileName, R as loadConnectedAgentProfile, j as AGENT_PROFILE_ENV } from "../cli-config-Ms_0vNjq.js";
+import { a as claimBackgroundListenRestart, n as backgroundListenRestartable, r as backgroundListenStatus } from "../listen-background-C0F9gNDD.js";
+import { d as SESSION_UUID, t as notificationScope } from "../notify-session-BN0JTPZ3.js";
+import { St as detectAgentRuntime } from "../api-command-ctHBqTL5.js";
+import { d as readMailJson } from "../shared-mail-files-BAQSGxxz.js";
 import { join } from "node:path";
 import { spawn } from "node:child_process";
 import { homedir } from "node:os";
-//#region src/oclif/receiver-heal.ts
+// src/oclif/receiver-heal.ts
 /** Set to 0 to turn off restarting a stopped receiver from ordinary commands. */
 const RECEIVER_HEAL_ENV = "PRIMITIVE_RECEIVER_HEAL";
 function activeConfigDir(env, home) {
@@ -88,5 +89,4 @@ function healSelectedReceiverQuietly() {
 		healSelectedReceiver();
 	} catch {}
 }
-//#endregion
 export { RECEIVER_HEAL_ENV, healSelectedReceiver, healSelectedReceiverQuietly };

package/dist/oclif/root-signup-hint.js

@@ -1,8 +1,8 @@
-import { S as normalizeApiBaseUrl, c as resolveConfigEnvironment, i as loadCliConfig } from "../cli-config-C0Y_Ppol.js";
+import { c as resolveConfigEnvironment, i as loadCliConfig, x as normalizeApiBaseUrl } from "../cli-config-Ms_0vNjq.js";
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";
-//#region src/oclif/root-signup-hint.ts
+// src/oclif/root-signup-hint.ts
 const CREDENTIALS_FILE = "credentials.json";
 const ROOT_AUTH_TIMEOUT_MS = 1e3;
 function activeConfigDir(env, home) {
@@ -19,7 +19,7 @@ function readRootCredentials(configDir) {
 	}
 	try {
 		const parsed = JSON.parse(raw);
-		if (parsed.auth_method !== "oauth") return null;
+		if (parsed.auth_method !== "oauth" && parsed.auth_method !== "user_grant") return null;
 		if (typeof parsed.access_token !== "string" || !parsed.access_token.trim()) return null;
 		const apiBaseUrl = parsed.api_base_url ?? parsed.api_base_url_1;
 		if (typeof apiBaseUrl !== "string" || !apiBaseUrl.trim()) return null;
@@ -134,5 +134,4 @@ async function writeRootAuthContextIfNeeded(options = {}) {
 	}
 	writeLoggedOutSignupHintIfNeeded(options);
 }
-//#endregion
 export { loggedOutSignupHint, rootSignedInSummary, shouldShowLoggedOutSignupHint, writeLoggedOutSignupHintIfNeeded, writeRootAuthContextIfNeeded };

package/dist/receiver.d.ts

@@ -0,0 +1,95 @@
+/** One page of `listAgentContacts` (`primitive agent contacts list`). */
+export type ContactPage = {
+  readonly data: readonly unknown[];
+  /** The cursor for the next page, or null on the last page. */
+  readonly cursor: string | null;
+};
+/**
+ * The `checkDefaultNetworkContactAdmission` result for one email
+ * (`primitive agent-networks check-default-network-contact-admission`).
+ */
+export type NetworkAdmission = {
+  readonly allowed: boolean;
+  readonly allowed_since: string | null;
+  readonly pending: boolean;
+  readonly member_policy_required: boolean;
+  readonly sender_relation?: "owner" | "member" | undefined;
+};
+/**
+ * Reads the policy from the API as the connected address. A reader that hits
+ * a temporary failure, such as a rate limit, a 5xx response or a dropped
+ * connection, throws `new WakePolicyError("policy_read_failed")`. Any other
+ * error from a reader makes the policy unavailable.
+ */
+export type WakePolicyOptions = {
+  /** The connected address that receives the mail. */
+  readonly recipient: string;
+  /**
+   * Admit first mail from unknown senders as `request` when the owner allows
+   * contact requests. Defaults to false.
+   */
+  readonly contactRequests?: boolean | undefined;
+  /** The `data` of `getAgentContactPolicy` for the recipient. */
+  readonly readContactPolicy: (signal: AbortSignal) => Promise<unknown>;
+  /** One page of the recipient's contacts, 100 rows at most. */
+  readonly readContactPage: (cursor: string | undefined, signal: AbortSignal) => Promise<ContactPage>;
+  /** The network admission decision for one exact email. */
+  readonly readNetworkAdmission: (emailId: string, sender: string, signal: AbortSignal) => Promise<NetworkAdmission>;
+};
+/** The facts of one received email, from the email detail. */
+export type InboundEmail = {
+  readonly emailId: string;
+  /** The authenticated sender address. Check it before admission. */
+  readonly sender: string;
+  readonly receivedAt: string;
+};
+/**
+ * `allowed` may wake the session. `request` is a first-contact request from
+ * an unknown sender: show it as a request, never as a task.
+ */
+export type WakeAdmission = (InboundEmail & {
+  readonly kind: "allowed";
+}) | (InboundEmail & {
+  readonly kind: "request";
+});
+/** `denied` must not wake the session. */
+export type WakeDecision = WakeAdmission | {
+  readonly kind: "denied";
+};
+/**
+ * Call synchronously immediately before you wake the session. It throws
+ * `WakePolicyError` with `permission_changed` when the permission it confirms
+ * was refreshed or is older than 30 seconds; recheck and try again.
+ */
+export type ConfirmWake = () => void;
+export type WakePolicy = {
+  /** Decide whether one email may wake the session. */
+  admit(email: InboundEmail, signal: AbortSignal): Promise<WakeDecision>;
+  /**
+   * Read the policy again for an admission from this policy's `admit`, right
+   * before dispatch. Throws `permission_changed` if the admission no longer
+   * holds.
+   */
+  recheck(admission: WakeAdmission, signal: AbortSignal): Promise<ConfirmWake>;
+};
+/**
+ * - `policy_read_failed`: a policy read failed temporarily. Retry later; the
+ *   policy paces repeated reads itself.
+ * - `network_admission_pending`: the server has not settled network admission
+ *   for this email. Retry in a few seconds.
+ * - `permission_changed`: permission changed or expired before dispatch.
+ *   Admit the email again.
+ * - `policy_unavailable`: the policy is invalid or access is lost. Do not
+ *   wake; retrying will not help until access is restored.
+ */
+export type WakePolicyErrorCode = "policy_read_failed" | "network_admission_pending" | "permission_changed" | "policy_unavailable";
+export declare class WakePolicyError extends Error {
+  readonly code: WakePolicyErrorCode;
+  /** Whether the same email may be admitted later without operator action. */
+  readonly retryable: boolean;
+  constructor(code: WakePolicyErrorCode, options?: {
+    cause?: unknown;
+  });
+}
+/** Create the contact admission policy for one connected address. */
+export declare function createWakePolicy(options: WakePolicyOptions): WakePolicy;