primcli 1.75.0 → 3.0.0-preview.10

package/dist/oclif/listen-supervisor.js

@@ -1 +1 @@
-export { s as runBackgroundListenSupervisor } from "../listen-background-C0F9gNDD.js";
+export { l as runBackgroundListenSupervisor } from "../listen-background-DyBYca28.js";

package/dist/oclif/proxy-auto-detect.js

@@ -1,4 +1,4 @@
-import { n as jsonOutputRequested } from "../json-output-BzSBR-KX.js";
+import { r as jsonOutputRequested } from "../json-output-ch756TXV.js";
 import { spawnSync } from "node:child_process";
 // src/oclif/proxy-auto-detect.ts
 const PROXY_ENV_VARS = [

package/dist/oclif/receiver-heal.js

@@ -1,7 +1,7 @@
-import { F as agentProfileName, M as AGENT_PROFILE_ENV, P as agentProfileDirectory, z as loadConnectedAgentProfile } from "../cli-config-B80p0pLk.js";
-import { a as claimBackgroundListenRestart, n as backgroundListenRestartable, r as backgroundListenStatus } from "../listen-background-C0F9gNDD.js";
-import { l as SESSION_UUID, t as notificationScope } from "../notify-session-CbY4FYUt.js";
-import { xt as detectAgentRuntime } from "../api-command-rlS3eTlZ.js";
+import { N as agentProfileDirectory, P as agentProfileName, R as loadConnectedAgentProfile, j as AGENT_PROFILE_ENV } from "../cli-config-Ms_0vNjq.js";
+import { a as backgroundListenStatus, i as backgroundListenRestartable, s as claimBackgroundListenRestart, t as BACKGROUND_LISTEN_RELAUNCH_ENV } from "../listen-background-DyBYca28.js";
+import { d as SESSION_UUID, t as notificationScope } from "../notify-session-DN8tSfAi.js";
+import { Lt as detectAgentRuntime } from "../api-command-D0KHkqhA.js";
 import { d as readMailJson } from "../shared-mail-files-BAQSGxxz.js";
 import { join } from "node:path";
 import { spawn } from "node:child_process";
@@ -66,6 +66,7 @@ function healSelectedReceiver(options = {}) {
 		PRIMITIVE_CONFIG_DIR: configDir,
 		[RECEIVER_HEAL_ENV]: "0"
 	};
+	delete childEnv[BACKGROUND_LISTEN_RELAUNCH_ENV];
 	(options.spawnListener ?? spawnDetached)(listenArgv, childEnv);
 	return {
 		action: "restarting",

package/dist/oclif/root-signup-hint.js

@@ -1,4 +1,4 @@
-import { S as normalizeApiBaseUrl, c as resolveConfigEnvironment, i as loadCliConfig } from "../cli-config-B80p0pLk.js";
+import { c as resolveConfigEnvironment, i as loadCliConfig, x as normalizeApiBaseUrl } from "../cli-config-Ms_0vNjq.js";
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";
@@ -19,7 +19,7 @@ function readRootCredentials(configDir) {
 	}
 	try {
 		const parsed = JSON.parse(raw);
-		if (parsed.auth_method !== "oauth") return null;
+		if (parsed.auth_method !== "oauth" && parsed.auth_method !== "user_grant") return null;
 		if (typeof parsed.access_token !== "string" || !parsed.access_token.trim()) return null;
 		const apiBaseUrl = parsed.api_base_url ?? parsed.api_base_url_1;
 		if (typeof apiBaseUrl !== "string" || !apiBaseUrl.trim()) return null;
@@ -31,23 +31,23 @@ function readRootCredentials(configDir) {
 		return null;
 	}
 }
-function accountEndpoint(apiBaseUrl) {
-	return `${apiBaseUrl.replace(/\/+$/, "")}/account`;
+function whoamiEndpoint(apiBaseUrl) {
+	return `${apiBaseUrl.replace(/\/+$/, "")}/whoami`;
 }
-function parseRootAccount(payload) {
+function parseRootIdentity(payload) {
 	if (payload === null || typeof payload !== "object" || Array.isArray(payload)) return null;
 	const data = payload.data;
 	if (data === null || typeof data !== "object" || Array.isArray(data)) return null;
-	const account = data;
-	if (typeof account.email !== "string" || !account.email.trim()) return null;
-	if (typeof account.id !== "string" || !account.id.trim()) return null;
+	const identity = data;
+	if (typeof identity.org_id !== "string" || !identity.org_id.trim()) return null;
+	const member = identity.member_address;
 	return {
-		email: account.email,
-		id: account.id
+		memberAddress: member && typeof member.address === "string" && member.address.trim() ? member.address : null,
+		orgId: identity.org_id
 	};
 }
-function rootAuthLine(account) {
-	return `Signed in as ${account.email} (org ${account.id})\n\n`;
+function rootAuthLine(identity) {
+	return identity.memberAddress ? `Signed in as ${identity.memberAddress} (org ${identity.orgId})\n\n` : `Signed in (org ${identity.orgId})\n\n`;
 }
 function rootRequestConfig(configDir, env) {
 	const config = loadCliConfig(configDir);
@@ -60,11 +60,11 @@ function rootRequestConfig(configDir, env) {
 		headers: currentEnvironment?.config.headers
 	};
 }
-async function fetchRootAccount(params) {
+async function fetchRootIdentity(params) {
 	const controller = new AbortController();
 	const timer = setTimeout(() => controller.abort(), params.timeoutMs);
 	try {
-		const response = await params.fetch(accountEndpoint(params.apiBaseUrl), {
+		const response = await params.fetch(whoamiEndpoint(params.apiBaseUrl), {
 			headers: {
 				...params.headers ?? {},
 				accept: "application/json",
@@ -73,7 +73,7 @@ async function fetchRootAccount(params) {
 			signal: controller.signal
 		});
 		if (!response.ok) return null;
-		return parseRootAccount(await response.json().catch(() => null));
+		return parseRootIdentity(await response.json().catch(() => null));
 	} catch {
 		return null;
 	} finally {
@@ -95,14 +95,14 @@ async function rootSignedInSummary(options = {}) {
 	const stored = explicitApiKey ? null : readRootCredentials(configDir);
 	const apiKey = explicitApiKey || stored?.accessToken;
 	if (!apiKey) return null;
-	const account = await fetchRootAccount({
+	const identity = await fetchRootIdentity({
 		apiBaseUrl: stored?.apiBaseUrl ?? requestConfig.apiBaseUrl,
 		apiKey,
 		fetch: options.fetch ?? fetch,
 		headers: requestConfig.headers,
 		timeoutMs: options.timeoutMs ?? ROOT_AUTH_TIMEOUT_MS
 	});
-	return account ? rootAuthLine(account) : null;
+	return identity ? rootAuthLine(identity) : null;
 }
 function shouldShowLoggedOutSignupHint(options = {}) {
 	if ((options.argv ?? process.argv.slice(2)).length > 0) return false;

package/dist/receiver.d.ts

@@ -0,0 +1,95 @@
+/** One page of `listAgentContacts` (`primitive agent contacts list`). */
+export type ContactPage = {
+  readonly data: readonly unknown[];
+  /** The cursor for the next page, or null on the last page. */
+  readonly cursor: string | null;
+};
+/**
+ * The `checkDefaultNetworkContactAdmission` result for one email
+ * (`primitive agent-networks check-default-network-contact-admission`).
+ */
+export type NetworkAdmission = {
+  readonly allowed: boolean;
+  readonly allowed_since: string | null;
+  readonly pending: boolean;
+  readonly member_policy_required: boolean;
+  readonly sender_relation?: "owner" | "member" | undefined;
+};
+/**
+ * Reads the policy from the API as the connected address. A reader that hits
+ * a temporary failure, such as a rate limit, a 5xx response or a dropped
+ * connection, throws `new WakePolicyError("policy_read_failed")`. Any other
+ * error from a reader makes the policy unavailable.
+ */
+export type WakePolicyOptions = {
+  /** The connected address that receives the mail. */
+  readonly recipient: string;
+  /**
+   * Admit first mail from unknown senders as `request` when the owner allows
+   * contact requests. Defaults to false.
+   */
+  readonly contactRequests?: boolean | undefined;
+  /** The `data` of `getAgentContactPolicy` for the recipient. */
+  readonly readContactPolicy: (signal: AbortSignal) => Promise<unknown>;
+  /** One page of the recipient's contacts, 100 rows at most. */
+  readonly readContactPage: (cursor: string | undefined, signal: AbortSignal) => Promise<ContactPage>;
+  /** The network admission decision for one exact email. */
+  readonly readNetworkAdmission: (emailId: string, sender: string, signal: AbortSignal) => Promise<NetworkAdmission>;
+};
+/** The facts of one received email, from the email detail. */
+export type InboundEmail = {
+  readonly emailId: string;
+  /** The authenticated sender address. Check it before admission. */
+  readonly sender: string;
+  readonly receivedAt: string;
+};
+/**
+ * `allowed` may wake the session. `request` is a first-contact request from
+ * an unknown sender: show it as a request, never as a task.
+ */
+export type WakeAdmission = (InboundEmail & {
+  readonly kind: "allowed";
+}) | (InboundEmail & {
+  readonly kind: "request";
+});
+/** `denied` must not wake the session. */
+export type WakeDecision = WakeAdmission | {
+  readonly kind: "denied";
+};
+/**
+ * Call synchronously immediately before you wake the session. It throws
+ * `WakePolicyError` with `permission_changed` when the permission it confirms
+ * was refreshed or is older than 30 seconds; recheck and try again.
+ */
+export type ConfirmWake = () => void;
+export type WakePolicy = {
+  /** Decide whether one email may wake the session. */
+  admit(email: InboundEmail, signal: AbortSignal): Promise<WakeDecision>;
+  /**
+   * Read the policy again for an admission from this policy's `admit`, right
+   * before dispatch. Throws `permission_changed` if the admission no longer
+   * holds.
+   */
+  recheck(admission: WakeAdmission, signal: AbortSignal): Promise<ConfirmWake>;
+};
+/**
+ * - `policy_read_failed`: a policy read failed temporarily. Retry later; the
+ *   policy paces repeated reads itself.
+ * - `network_admission_pending`: the server has not settled network admission
+ *   for this email. Retry in a few seconds.
+ * - `permission_changed`: permission changed or expired before dispatch.
+ *   Admit the email again.
+ * - `policy_unavailable`: the policy is invalid or access is lost. Do not
+ *   wake; retrying will not help until access is restored.
+ */
+export type WakePolicyErrorCode = "policy_read_failed" | "network_admission_pending" | "permission_changed" | "policy_unavailable";
+export declare class WakePolicyError extends Error {
+  readonly code: WakePolicyErrorCode;
+  /** Whether the same email may be admitted later without operator action. */
+  readonly retryable: boolean;
+  constructor(code: WakePolicyErrorCode, options?: {
+    cause?: unknown;
+  });
+}
+/** Create the contact admission policy for one connected address. */
+export declare function createWakePolicy(options: WakePolicyOptions): WakePolicy;