primcli 3.0.0-preview.2 → 3.0.0-preview.4

package/dist/{scoped-chat-TJlyUTi7.js → scoped-chat-B-J3sdNS.js}

@@ -1,4 +1,4 @@
-import { b as retryTransient, c as classifySignalContent, q as isTrustedSender } from "./repeats-Dj_o6c-X-BzXj5ICh.js";
+import { J as isTrustedSender, b as retryTransient, c as classifySignalContent } from "./repeats-Dj_o6c-X-BwGkVE7e.js";
 // src/oclif/presence-provenance.ts
 function readPresenceProjection(detail) {
 	if (!detail || typeof detail !== "object") return null;

package/dist/{signal-command-BO93dM2Q.js → signal-command-DEArW9g5.js}

@@ -1,15 +1,15 @@
-import { Lt as getEmail, Rn as sendEmail, _ as describeApiFailure, _n as listSentEmails, h as sendPreparedSignal, p as prepareSignalEmail, pt as createEndpoint } from "./repeats-Dj_o6c-X-BzXj5ICh.js";
-import { X as classifySendError, ft as successfulSendOutcome, g as bareAddress, o as extractErrorPayload } from "./api-command-B37DPKFA.js";
+import { Rt as getEmail, Vn as sendEmail, _ as describeApiFailure, bn as listSentEmails, h as sendPreparedSignal, mt as createEndpoint, p as prepareSignalEmail } from "./repeats-Dj_o6c-X-BwGkVE7e.js";
+import { A as bareAddress, Et as successfulSendOutcome, s as extractErrorPayload, ut as classifySendError } from "./api-command-BFfgKPTp.js";
 import { recordSentSignal } from "./oclif/auto-signals.js";
 import { _ as acquireListenLock, c as mailTime, d as readMailJson, f as removeMailFile, h as writeMailJson, i as mailId, l as privateMailDirectory, m as withMailLock, n as invalidSharedMail, o as mailObject, p as syncMailDirectory, r as mailAddress, s as mailString, t as SharedMailStateError, v as compareListenProcessIdentity, x as listenProcessIdentity, y as listenIdentity } from "./shared-mail-files-BAQSGxxz.js";
-import { i as readApiBeforeDeadline, n as isPlainChatReply, o as scopedChatSenderTrust } from "./scoped-chat-TJlyUTi7.js";
+import { i as readApiBeforeDeadline, n as isPlainChatReply, o as scopedChatSenderTrust } from "./scoped-chat-B-J3sdNS.js";
 import { n as tryOwnSharedMail, r as waitForSharedMailChange, t as readSharedMailOwner } from "./shared-mail-watch-BAPMsFNv.js";
 import { Errors } from "@oclif/core";
 import { opendirSync } from "node:fs";
 import { createHash, randomUUID, scryptSync } from "node:crypto";
 import { dirname, join } from "node:path";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-// ../sdk-node/dist/api-DWJSxvRV.js
+// ../sdk-node/dist/api-C6sQm1_c.js
 const jsonBodySerializer = { bodySerializer: (body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value) };
 function createSseClient({ onRequest, onSseError, onSseEvent, responseTransformer, responseValidator, sseDefaultRetryDelay, sseMaxRetryAttempts, sseMaxRetryDelay, sseSleepFn, url, ...options }) {
 	let lastEventId;

package/man/primitive.1

@@ -214,9 +214,10 @@ to see API keys and their permissions; neither shows a secret.
 .B rotate
 and
 .B update
-need your approval in the browser: the command prints the approval link and
-waits for the one-time token the page shows. A new secret is printed once and
-never saved.
+run directly. If your organization requires approval, the command prints the
+approval link and waits for the one-time token the page shows, or takes it with
+.BR --step-up-token .
+A new secret is printed once and never saved.
 .B primitive keys revoke ID
 revokes a key.
 .B primitive whoami --check PERMISSION

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "primcli",
-  "version": "3.0.0-preview.2",
+  "version": "3.0.0-preview.4",
   "publishConfig": {
     "tag": "preview"
   },
@@ -42,6 +42,9 @@
       "identifier": "COMMANDS"
     },
     "dirname": "primitive",
+    "hooks": {
+      "command_not_found": "./dist/oclif/command-not-found.js"
+    },
     "plugins": [
       "@oclif/plugin-help",
       "@oclif/plugin-autocomplete",
@@ -92,7 +95,7 @@
         "description": "Check inbound email setup and readiness, and work through mail awaiting your reply. Prefer `primitive inbox setup` for a guided setup path, `primitive inbox status` for the readiness table, and `primitive inbox next` for the oldest email awaiting your reply."
       },
       "emails": {
-        "description": "List, inspect, and wait for received emails. Prefer task aliases like `primitive emails list`, `primitive emails get`, `primitive emails latest`, `primitive emails wait`, and `primitive emails watch`; generated API names remain available for compatibility."
+        "description": "List, inspect, and wait for received emails, and see what the classifier read from one. Prefer task aliases like `primitive emails list`, `primitive emails get`, `primitive emails latest`, `primitive emails facts`, `primitive emails wait`, and `primitive emails watch`; generated API names remain available for compatibility."
       },
       "search": {
         "description": "Cross-corpus semantic search. Prefer `primitive search <query>` for lexical inbound search and `primitive semantic-search <query>` for meaning-aware ranking across inbound and outbound.",
@@ -144,10 +147,10 @@
         "description": "Global secrets shared across every function. Use `primitive org secrets list|set|remove`. Changes land in a function on its next redeploy; a function secret of the same name overrides the global."
       },
       "keys": {
-        "description": "Organization API keys: list and show them (metadata only, never secrets), create, rotate and change them after you approve each request in your browser, and revoke them."
+        "description": "Organization API keys: list and show them (metadata only, never secrets), create, rotate and change them (with browser approval where your organization requires it), and revoke them."
       },
       "roles": {
-        "description": "Read roles, groups, mailbox access and the access mode. Use `primitive roles list|groups|mailbox-access|access-mode`; generated API names remain available."
+        "description": "Read roles, members, groups, mailbox access and the access mode. Use `primitive roles list|members|groups|mailbox-access|access-mode`; generated API names remain available."
       },
       "projects": {
         "description": "Organization people, shared projects and project invitations"
@@ -164,6 +167,9 @@
       "organization-settings": {
         "description": "Your connected apps and CLI logins, the organization's connected apps, name, logo, search settings and billing"
       },
+      "members": {
+        "description": "List the organization's members and their roles. Use `primitive members list` (the same as `primitive roles members`)."
+      },
       "roles-and-members": {
         "description": "Roles, member roles and removal, the mailbox access mode, break-glass, transfers and suspensions, and leaving the organization"
       },