primcli 3.0.0-preview.5 → 3.0.0-preview.6

package/dist/oclif/listen-supervisor.js

@@ -1 +1 @@
-export { s as runBackgroundListenSupervisor } from "../listen-background-C0F9gNDD.js";
+export { l as runBackgroundListenSupervisor } from "../listen-background-DyBYca28.js";

package/dist/oclif/receiver-heal.js

@@ -1,7 +1,7 @@
 import { N as agentProfileDirectory, P as agentProfileName, R as loadConnectedAgentProfile, j as AGENT_PROFILE_ENV } from "../cli-config-Ms_0vNjq.js";
-import { a as claimBackgroundListenRestart, n as backgroundListenRestartable, r as backgroundListenStatus } from "../listen-background-C0F9gNDD.js";
-import { d as SESSION_UUID, t as notificationScope } from "../notify-session-o9hEtJ_c.js";
-import { It as detectAgentRuntime } from "../api-command-DIo8Rg0w.js";
+import { a as backgroundListenStatus, i as backgroundListenRestartable, s as claimBackgroundListenRestart, t as BACKGROUND_LISTEN_RELAUNCH_ENV } from "../listen-background-DyBYca28.js";
+import { d as SESSION_UUID, t as notificationScope } from "../notify-session-DTyg-sfS.js";
+import { It as detectAgentRuntime } from "../api-command-CRjIK1QL.js";
 import { d as readMailJson } from "../shared-mail-files-BAQSGxxz.js";
 import { join } from "node:path";
 import { spawn } from "node:child_process";
@@ -66,6 +66,7 @@ function healSelectedReceiver(options = {}) {
 		PRIMITIVE_CONFIG_DIR: configDir,
 		[RECEIVER_HEAL_ENV]: "0"
 	};
+	delete childEnv[BACKGROUND_LISTEN_RELAUNCH_ENV];
 	(options.spawnListener ?? spawnDetached)(listenArgv, childEnv);
 	return {
 		action: "restarting",

package/dist/oclif/root-signup-hint.js

@@ -31,23 +31,23 @@ function readRootCredentials(configDir) {
 		return null;
 	}
 }
-function accountEndpoint(apiBaseUrl) {
-	return `${apiBaseUrl.replace(/\/+$/, "")}/account`;
+function whoamiEndpoint(apiBaseUrl) {
+	return `${apiBaseUrl.replace(/\/+$/, "")}/whoami`;
 }
-function parseRootAccount(payload) {
+function parseRootIdentity(payload) {
 	if (payload === null || typeof payload !== "object" || Array.isArray(payload)) return null;
 	const data = payload.data;
 	if (data === null || typeof data !== "object" || Array.isArray(data)) return null;
-	const account = data;
-	if (typeof account.email !== "string" || !account.email.trim()) return null;
-	if (typeof account.id !== "string" || !account.id.trim()) return null;
+	const identity = data;
+	if (typeof identity.org_id !== "string" || !identity.org_id.trim()) return null;
+	const member = identity.member_address;
 	return {
-		email: account.email,
-		id: account.id
+		memberAddress: member && typeof member.address === "string" && member.address.trim() ? member.address : null,
+		orgId: identity.org_id
 	};
 }
-function rootAuthLine(account) {
-	return `Signed in as ${account.email} (org ${account.id})\n\n`;
+function rootAuthLine(identity) {
+	return identity.memberAddress ? `Signed in as ${identity.memberAddress} (org ${identity.orgId})\n\n` : `Signed in (org ${identity.orgId})\n\n`;
 }
 function rootRequestConfig(configDir, env) {
 	const config = loadCliConfig(configDir);
@@ -60,11 +60,11 @@ function rootRequestConfig(configDir, env) {
 		headers: currentEnvironment?.config.headers
 	};
 }
-async function fetchRootAccount(params) {
+async function fetchRootIdentity(params) {
 	const controller = new AbortController();
 	const timer = setTimeout(() => controller.abort(), params.timeoutMs);
 	try {
-		const response = await params.fetch(accountEndpoint(params.apiBaseUrl), {
+		const response = await params.fetch(whoamiEndpoint(params.apiBaseUrl), {
 			headers: {
 				...params.headers ?? {},
 				accept: "application/json",
@@ -73,7 +73,7 @@ async function fetchRootAccount(params) {
 			signal: controller.signal
 		});
 		if (!response.ok) return null;
-		return parseRootAccount(await response.json().catch(() => null));
+		return parseRootIdentity(await response.json().catch(() => null));
 	} catch {
 		return null;
 	} finally {
@@ -95,14 +95,14 @@ async function rootSignedInSummary(options = {}) {
 	const stored = explicitApiKey ? null : readRootCredentials(configDir);
 	const apiKey = explicitApiKey || stored?.accessToken;
 	if (!apiKey) return null;
-	const account = await fetchRootAccount({
+	const identity = await fetchRootIdentity({
 		apiBaseUrl: stored?.apiBaseUrl ?? requestConfig.apiBaseUrl,
 		apiKey,
 		fetch: options.fetch ?? fetch,
 		headers: requestConfig.headers,
 		timeoutMs: options.timeoutMs ?? ROOT_AUTH_TIMEOUT_MS
 	});
-	return account ? rootAuthLine(account) : null;
+	return identity ? rootAuthLine(identity) : null;
 }
 function shouldShowLoggedOutSignupHint(options = {}) {
 	if ((options.argv ?? process.argv.slice(2)).length > 0) return false;

package/dist/{repeats-Dj_o6c-X-Ix28GRRc.js → repeats-Dj_o6c-X-CP0h4alF.js}

@@ -1217,9 +1217,7 @@ const listEndpoints = (options) => (options?.client ?? client).get({
 /**
 * Create a webhook endpoint
 *
-* Creates a new webhook endpoint. If a deactivated endpoint
-* with the same URL and domain exists, it is reactivated
-* instead. Subject to plan limits on the number of active
+* Creates a new webhook endpoint. A URL can have one endpoint per domain, route targets included (unlike the one default destination per domain), and endpoints with no domain_id count as one domain. A disabled endpoint still holds its URL; a deleted one does not. A create at a URL another endpoint has on the same domain is refused (400). A deleted endpoint's URL can be used again: the create makes a new endpoint, with a new id, and the deleted one stays as it was. Subject to plan limits on the number of active
 * endpoints.
 *
 * **Signing.** A webhook is signed with the organization's webhook secret (`GET /account/webhook-secret`) unless it has its own. A webhook made as a person's own, or by an API key limited to some mailboxes, a third-party app or an agent delegate for itself, is made with its own secret: the response carries it once as `signing_secret`, and `GET /endpoints/{id}/signing-secret` returns it afterwards. Other webhooks, those a person who can read every mailbox makes among them, sign with the organization's secret until given their own. `signed_with` on the endpoint says which secret signs it. See the API-level "Webhook
@@ -1268,7 +1266,7 @@ const deleteEndpoint = (options) => (options.client ?? client).delete({
 /**
 * Get an endpoint
 *
-* One endpoint, as GET /endpoints shows it, to a caller who would see it there. Any other id, a deleted endpoint's included, answers 404.
+* One endpoint, as GET /endpoints shows it, to a caller who would see it there. Any other id, a deleted endpoint's included, answers 404. For a webhook, delivery says whether it is being sent received mail at all, why not, and how much rule-granted mail is held while its owner cannot act.
 */
 const getEndpoint = (options) => (options.client ?? client).get({
 	security: [{
@@ -1281,10 +1279,12 @@ const getEndpoint = (options) => (options.client ?? client).get({
 /**
 * Update a webhook endpoint
 *
-* Updates an active webhook endpoint. Changing the URL keeps the endpoint: its id, recipient routes, signing secret, delivery history and any deliveries still owed to it stay with it, and owed deliveries go to the new URL. Another active endpoint at the new URL is refused.
+* Updates an active webhook endpoint. Changing the URL keeps the endpoint: its id, recipient routes, signing secret, delivery history and any deliveries still owed to it stay with it, and owed deliveries go to the new URL. A URL can have one endpoint per domain, route targets included (unlike the one default destination per domain), and endpoints with no domain_id count as one domain. A disabled endpoint still holds its URL; a deleted one does not. A change onto a URL another endpoint has on the same domain is refused (400), and a move onto a domain where another endpoint has this URL is refused (409).
 *
 *
 * Pull destinations cannot be assigned a URL, function or recipient-routing domain. Existing endpoint deletion disconnects the destination; creating a new destination does not backfill historical events.
+*
+* Giving a webhook the organization does not own to a different key (owner_key_id), or a key's webhook back to the organization (owner_key_id null), turns it off unless the request also sets enabled: its URL was chosen under its previous owner. It then reads enabled false with disabled_reason owner_changed, and turning it on or giving it a new URL starts it again. A key that carries on for the owning key through rotation (its successor, at any depth up to 16 rotations) is not a different key: the webhook stays as it was, with the same signing secret. That does not hold when the owning key was made from a key a transfer moved or rotated away, or from one that has since been deleted: no successor carries on for it. The answer's warnings name each such change (turned_off_owner_changed, turned_on_new_url), so a client can say so.
 */
 const updateEndpoint = (options) => (options.client ?? client).patch({
 	security: [{
@@ -1341,6 +1341,8 @@ const completeWebhookEvent = (options) => (options.client ?? client).post({
 * Successful deliveries and verified-domain endpoints are exempt
 * from the rate limit.
 *
+*
+* The test is sent whether or not real mail would be. reachable says whether the endpoint answered it with a 2xx; delivery says, apart from that, whether real email.received events would be sent to the endpoint by its own conditions (on, not held, an owner that can receive mail, subscribed to the event), with every reason it would not be. A 200 from the test alone does not mean mail arrives.
 */
 const testEndpoint = (options) => (options.client ?? client).post({
 	security: [{
@@ -1374,6 +1376,8 @@ const testEndpoint = (options) => (options.client ?? client).post({
 * delivered as if unfiltered), so `rules_valid: false` exposes a
 * misconfiguration that is otherwise silent.
 *
+*
+* would_deliver also covers the endpoint's own delivery conditions for this email (delivery): it is on, neither it nor the email's route is held, its owner may receive this email, and it subscribes to the event. Which endpoint routing sends the email to is decided separately: POST /routes/simulate answers that. A 503 means those conditions could not be read just now; retry.
 */
 const testEndpointRules = (options) => (options.client ?? client).post({
 	security: [{
@@ -3053,7 +3057,7 @@ const putAgentContactPolicy = (options) => (options.client ?? client).put({
 /**
 * Get current caller identity
 *
-* Current authenticated identity. member_address is null for machine credentials or an unavailable member address.
+* Current authenticated identity. member_address is null for machine credentials or an unavailable member address. email (your own sign-in email) and role_name (your role as the members list labels it) are set only when you are signed in as yourself, in the dashboard or with your own Primitive CLI or app login, and are null for API keys, Functions, connected agents, agent signup logins and other apps acting for you.
 */
 const whoami = (options) => (options?.client ?? client).get({
 	security: [{
@@ -3593,9 +3597,9 @@ const getWebhookDeliveryStats = (options) => (options?.client ?? client).get({
 	...options
 });
 /**
-* List what you created
+* List what you created, or what you were asked
 *
-* The objects the caller created, newest first, each with where it stands now, including ones since disabled, deleted or revoked where the object keeps a row: Functions, endpoints, Function triggers, pull subscriptions, recipient routes, filters, wake schedules, repeating sends and scheduled sends. An API key, an app or an agent sees what it created itself; a webhook given to an API key lists under that key. A person (a dashboard session, or their own Primitive CLI or app login) sees what they created through any credential of theirs, each item naming it, and also their API keys, personal agents, email rules and rule requests. Each kind is listed only if the caller could list it through that kind's own route; a kind it could not is named in withheld, with no count. Ids, names and states only: never a webhook URL or mail content. Needs activity:read_self.
+* The objects the caller created, newest first, each with where it stands now, including ones since disabled, deleted or revoked where the object keeps a row: Functions, endpoints, Function triggers, pull subscriptions, recipient routes, filters, wake schedules, repeating sends and scheduled sends. An API key, an app or an agent sees what it created itself; a webhook given to an API key lists under that key. A person (a dashboard session, or their own Primitive CLI or app login) sees what they created through any credential of theirs, each item naming it, and also their API keys, personal agents, email rules and rule requests. Each kind is listed only if the caller could list it through that kind's own route; a kind it could not is named in withheld, with no count. Ids, names and states only: never a webhook URL or mail content. Needs activity:read_self. With relation=asked it lists instead what other members asked of the person, open or answered: the rule requests made to them, under their current membership, each naming the member who asked in created_through. A key, an app or an agent has none, and gets email_rule_request in withheld.
 */
 const listActivityObjects = (options) => (options?.client ?? client).get({
 	security: [{
@@ -3702,7 +3706,7 @@ const createEmailRule = (options) => (options.client ?? client).post({
 /**
 * Delete a rule
 *
-* Deletes a rule with its versions, its decisions and the access it granted. The author, or a caller who reads the whole organization's mail, may delete it; while it is shared with another member, only the author or someone who manages members from the dashboard. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.
+* Deletes a rule with its versions, its decisions and the access it granted. A rule that was ever shared with another member keeps the record of its share: the share ends with end_reason rule_deleted, and the member who shared can still list what it handed over, while the rule is no longer shown and reads nothing. The answer lists the shares the delete ended (ended_shares) and the keys, not revoked, that still list the rule, which now read nothing through it: those you may read as key metadata by id, name and prefix (keys), and how many others (other_keys). keys and other_keys are left out when the keys could not be read. The author, or a caller who reads the whole organization's mail, may delete it; while it is shared with another member, only the author or someone who manages members from the dashboard. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.
 */
 const deleteEmailRule = (options) => (options.client ?? client).delete({
 	security: [{
@@ -3823,7 +3827,7 @@ const listEmailRuleRequests = (options) => (options?.client ?? client).get({
 /**
 * Ask a member for a rule
 *
-* Asks another member of the organization for a rule over their own mail, from a compile response or a tree you wrote. Name them by user id, or by their member mailbox address, or by their verified work email if you can list members (at most 30 lookups by address an hour). Nothing is evaluated and nothing is shared until they accept, and they may change the rule first; they see the request and can preview what it matches in their own mail. You may have at most 5 pending requests to one member and 50 in all. If you can list members (members:read), the answer also says whether they can accept it under their role (target_can_accept), and if not, why (target_warning); the request is sent either way. To find out before asking, use POST /v1/email-rule-requests/target-check. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.
+* Asks another member of the organization for a rule over their own mail, from a compile response or a tree you wrote. Name them by user id, or by their member mailbox address, or by their verified work email if you can list members (at most 30 lookups by address an hour). Nothing is evaluated and nothing is shared until they accept, and they may change the rule first; they see the request and can preview what it matches in their own mail. A message (up to 500 characters) tells them why you are asking; they see it with the request, and it cannot be changed later. You may have at most 5 pending requests to one member and 50 in all. If you can list members (members:read), the answer also says whether they can accept it under their role (target_can_accept), and if not, why (target_warning); the request is sent either way. To find out before asking, use POST /v1/email-rule-requests/target-check. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.
 */
 const createEmailRuleRequest = (options) => (options.client ?? client).post({
 	security: [{
@@ -3870,7 +3874,7 @@ const deleteEmailRuleRequest = (options) => (options.client ?? client).delete({
 /**
 * Read a rule request
 *
-* A rule request: the rule as proposed, who made it and to whom, and whether each of them is still a member. A request is visible to the member who made it, the member it was made to, and the organization's owners and admins. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.
+* A rule request: the rule as proposed, who made it and to whom, and whether each of them is still a member. A request is visible to the member who made it, the member it was made to, and the organization's owners and admins. If you are the member asked, you can try the rule as proposed before answering: pass the request's tree to POST /v1/email-rules/test to test it on mail you have received. A test on mail already received shows only what has arrived. To see what the rule would do with an email that has not, such as one you would never want shared, pass the request's tree to POST /v1/email-rules/test-sample (testEmailRuleOnSample; in the Primitive CLI, primitive email-rules test-email-rule-on-sample --body-file sample.json) with an email you make up. Nothing is stored, and it needs no access beyond testing a rule of your own. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.
 */
 const getEmailRuleRequest = (options) => (options.client ?? client).get({
 	security: [{
@@ -3883,7 +3887,7 @@ const getEmailRuleRequest = (options) => (options.client ?? client).get({
 /**
 * Decline a rule request
 *
-* Declines a pending request made to you. Nothing is written but the decision. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.
+* Declines a pending request made to you. Nothing is written but the decision and, if you give one, its reason (reason, up to 500 characters), which the member who asked sees with the request. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.
 */
 const declineEmailRuleRequest = (options) => (options.client ?? client).post({
 	security: [{
@@ -3891,7 +3895,11 @@ const declineEmailRuleRequest = (options) => (options.client ?? client).post({
 		type: "http"
 	}],
 	url: "/email-rule-requests/{id}/decline",
-	...options
+	...options,
+	headers: {
+		...options.body !== void 0 && { "Content-Type": "application/json" },
+		...options.headers
+	}
 });
 /**
 * Withdraw a rule request
@@ -3909,7 +3917,7 @@ const withdrawEmailRuleRequest = (options) => (options.client ?? client).post({
 /**
 * Accept a rule request
 *
-* Writes the rule as yours, over your own mailboxes only, turns it on, and shares what it matches from now on with the member who asked. Send no body to accept it as asked, or change it first with english and tree together (and an explanation, or the server writes one). Because this gives your mail to someone else, it is limited to the dashboard and the Primitive CLI: other OAuth apps and agent tokens are refused. Also needs mail:share_own (sharing your own mail through email rules, which only shows it and never sends): a role without it is refused, whether or not it can send. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.
+* Writes the rule as yours, over your own mailboxes only, turns it on, and shares what it matches from now on with the member who asked. Send no body to accept it as asked, or change it first with english and tree together (and an explanation, or the server writes one). Because this gives your mail to someone else, it is limited to the dashboard and the Primitive CLI: other OAuth apps and agent tokens are refused. Before accepting, test it on your mail: pass the request's tree to POST /v1/email-rules/test. A test on mail already received shows only what has arrived. To see what the rule would do with an email that has not, such as one you would never want shared, pass the request's tree to POST /v1/email-rules/test-sample (testEmailRuleOnSample; in the Primitive CLI, primitive email-rules test-email-rule-on-sample --body-file sample.json) with an email you make up. Nothing is stored, and it needs no access beyond testing a rule of your own. Accepting also needs mail:share_own (sharing your own mail through email rules, which only shows it and never sends): a role without it is refused, whether or not it can send. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.
 */
 const acceptEmailRuleRequest = (options) => (options.client ?? client).post({
 	security: [{
@@ -4809,7 +4817,7 @@ const updateGroup = (options) => (options.client ?? client).patch({
 /**
 * List every credential
 *
-* Every credential that can act in the organization: API keys, Function keys, agent connection keys, connected apps (OAuth), agent delegates and, where enabled, CLI logins. Secrets are never returned. A key's grant.mail_scope.depth is raw only when it holds mail.raw:read and its scope lists an address or a domain, otherwise content. Filter with kind. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
+* Every credential that can act in the organization: API keys, Function keys, agent connection keys, connected apps (OAuth), agent delegates and, where enabled, CLI logins. Secrets are never returned. A key's grant.mail_scope.depth is raw only when it holds mail.raw:read and its scope lists an address or a domain, otherwise content. A rule the key lists that reads nothing any more (a deleted rule, or a share that ended) is listed under grant.mail_scope.ended_rules, each with its id and reason (rule_deleted or share_ended), and not under rules. Filter with kind. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
 *
 * Person only: a dashboard session. The person's role must hold credentials:read. API keys, agent connection keys and agents are refused.
 */
@@ -4824,7 +4832,7 @@ const listCredentials = (options) => (options?.client ?? client).get({
 /**
 * Revoke a credential
 *
-* Revoke one credential by kind and id. A Function key is rotated, never revoked (409 rotate_instead). An API key is revoked only by a person whose own access covers the key's access (an owner covers every key); otherwise 403 grant_forbidden, details.reason target_not_covered. What the credential set up keeps working and is listed in standing_objects for review. The person's own Primitive CLI login revokes an API key (kind org_key) as the person, with no step-up unless the organization's credential policy sets cli_writes_require_approval (then it takes a keys.create step-up); every other kind (a connected key named as org_key included, 403 grant_forbidden target_not_covered), and every other app even with a step-up, is refused outside the dashboard (403). Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
+* Revoke one credential by kind and id. A Function key is rotated, never revoked (409 rotate_instead). An API key is revoked only by a person whose own access covers the key's access (an owner covers every key); otherwise 403 grant_forbidden, details.reason target_not_covered. What the credential set up or owns is listed in standing_objects for review, and for an API key also what it carries on for the keys it was rotated from. An organization-owned object (org_owned true) keeps working; any other keeps working only while someone can still act for it, such as a key of the same rotation that still works, or whoever it was given to, except that a block filter an app made keeps blocking, within the reach the app had, unless the person revoking chose to stop it. An API key (kind org_key or connected_key) that is already revoked, and whose record is kept, answers 200 with already_revoked true and revoked 0, to a caller who could have revoked it; anyone else gets the answer they would get for a key that does not exist. The person's own Primitive CLI login revokes an API key (kind org_key) as the person, with no step-up unless the organization's credential policy sets cli_writes_require_approval (then it takes a keys.create step-up); every other kind (a connected key named as org_key included, 403 grant_forbidden target_not_covered), and every other app even with a step-up, is refused outside the dashboard (403). Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
 *
 * Person only: a dashboard session or the person's own Primitive CLI token; no other OAuth app. The person's role must hold keys:manage. API keys, agent connection keys and agents are refused.
 */
@@ -4926,7 +4934,7 @@ const getKeyBuilder = (options) => (options?.client ?? client).get({
 /**
 * List API keys
 *
-* Key metadata, never a secret: name, prefix, grant, creator, last use, expiry, suspension and whether each key works now (status). A grant's mail_scope.depth is raw only when the key holds mail.raw:read and its scope lists an address or a domain, otherwise content. The person needs access to the whole organization's mail. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
+* Key metadata, never a secret: name, prefix, grant, creator, last use, expiry, suspension and whether each key works now (status). Revoked keys are left out unless include_revoked is true, which lists them too with status revoked, revoked_at and revoked_by, under the same access rules as keys that work. A grant's mail_scope.depth is raw only when the key holds mail.raw:read and its scope lists an address or a domain, otherwise content. A rule the key lists that reads nothing any more (a deleted rule, or a share that ended) is listed under grant.mail_scope.ended_rules, each with its id and reason (rule_deleted or share_ended), and not under rules. The person needs access to the whole organization's mail. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
 *
 * Person only: a dashboard session or the person's own Primitive CLI token; no other OAuth app. The person's role must hold keys:read. API keys, agent connection keys and agents are refused.
 */
@@ -4960,7 +4968,7 @@ const createKey = (options) => (options.client ?? client).post({
 /**
 * Rotate an API key
 *
-* Mint a successor with a new id and the same name, grant, expiry and conditions, and return its secret once. The old key keeps working for overlap_seconds, then stops: 24 hours when overlap_seconds is omitted, at most 7 days, never past its own expires_at, and at once with 0 (which is how to rotate a key whose secret leaked). previous_key_expires_at says when the old key stops. The person rotating must cover the key's access (403 grant_forbidden, details.reason target_not_covered), and a key an owner holds is rotated by an owner only (403 forbidden, details.reason owner_key_rotation), since rotating hands over the new secret. The person's own Primitive CLI login needs no step-up (it acts as the person, held to the same rules) unless the organization's credential policy sets cli_writes_require_approval; the Primitive app's token is refused, even with one. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
+* Mint a successor with a new id and the same name, grant, expiry and conditions, and return its secret once. The old key keeps working for overlap_seconds, then stops: 24 hours when overlap_seconds is omitted, at most 7 days, never past its own expires_at, and at once with 0 (which is how to rotate a key whose secret leaked). previous_key_expires_at says when the old key stops. Rotating does not extend a key: the successor keeps the old expiry unless expires_at gives it a new one. That needs keys:manage (403 forbidden otherwise), is held to the credential policy (400 when past its maximum lifetime, with the latest expiry it allows now in the message), and someone limited to their own keys can only keep or bring it forward (403 grant_forbidden, details.reason own_key_tighten_only); the old key then never outlives the new one. The person rotating must cover the key's access (403 grant_forbidden, details.reason target_not_covered), and a key an owner holds is rotated by an owner only (403 forbidden, details.reason owner_key_rotation), since rotating hands over the new secret. The person's own Primitive CLI login needs no step-up (it acts as the person, held to the same rules) unless the organization's credential policy sets cli_writes_require_approval; the Primitive app's token is refused, even with one. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
 *
 * Person only: a dashboard session, the person's own Primitive CLI login with no step-up (unless the organization's credential policy sets cli_writes_require_approval), or the person's own OAuth token with a step-up token for purpose `keys.create` in the Primitive-Step-Up header. Without one any other OAuth token is answered 403 step_up_required, whose details carry the dashboard URL that issues it (or 403 grant_forbidden when the person's role, or the client, could not do it anyway). The person's role must hold keys:manage. API keys and agent connection keys are refused. An agent acting for the person is refused unless it carries a step-up token the person issued in the dashboard.
 */
@@ -4979,7 +4987,7 @@ const rotateKey = (options) => (options.client ?? client).post({
 /**
 * Get an API key
 *
-* One key's metadata, never its secret, with whether it works now (status). Its grant's mail_scope.depth is raw only when the key holds mail.raw:read and its scope lists an address or a domain, otherwise content. The person needs access to the whole organization's mail. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
+* One key's metadata, never its secret, with whether it works now (status). A revoked key whose record is kept is answered too, with status revoked, revoked_at and revoked_by, under the same access rules as a key that works: one the caller may not read is 404, revoked or not. Its grant's mail_scope.depth is raw only when the key holds mail.raw:read and its scope lists an address or a domain, otherwise content. A rule the key lists that reads nothing any more (a deleted rule, or a share that ended) is listed under grant.mail_scope.ended_rules, each with its id and reason (rule_deleted or share_ended), and not under rules. The person needs access to the whole organization's mail. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
 *
 * Person only: a dashboard session or the person's own Primitive CLI token; no other OAuth app. The person's role must hold keys:read. API keys, agent connection keys and agents are refused.
 */
@@ -4994,7 +5002,7 @@ const getKey = (options) => (options.client ?? client).get({
 /**
 * Change an API key
 *
-* Rename a key, change its expiry, its grant or its conditions, or suspend it. Any change needs the person's own access to cover the key's access now (an owner covers every key); otherwise 403 grant_forbidden, details.reason target_not_covered. A grant change is a new version of the key and is held to the same rules as creating one (a custom grant that does not say which mail it reaches is refused with details.reason mail_scope_required), so it takes the same step-up. The person's own Primitive CLI login needs no step-up (it acts as the person, held to the same rules) unless the organization's credential policy sets cli_writes_require_approval; the Primitive app's token is refused, even with one. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
+* Rename a key, change its expiry, its grant or its conditions, or suspend it. A later expires_at extends the key, which is how to keep a key working past its expiry (rotating keeps it, unless the rotation gives the new key an expires_at): it is held to the credential policy (400 when past its maximum lifetime, with the latest expiry it allows now in the message), and like any loosening needs the person to be allowed to create a key with the key's access. An expired key's expiry cannot be changed (409 conflict, details.reason key_expired); make a new key instead. Any change needs the person's own access to cover the key's access now (an owner covers every key); otherwise 403 grant_forbidden, details.reason target_not_covered. A grant change is a new version of the key and is held to the same rules as creating one (a custom grant that does not say which mail it reaches is refused with details.reason mail_scope_required), so it takes the same step-up. It replaces the whole grant: send expected_grant_ref (grant.ref from GET /v1/keys/{id}) to have it refused (409 conflict, details.reason grant_changed) if the grant changed since that read; a grant change sent without it answers grant_unguarded: true. On a key limited to selected resources (grant.resources), a grant change must drop the limits on purpose with a custom grant and grant.resources {}; one that leaves them out is refused (409 conflict, details.reason key_has_resource_limits) and nothing changes. The person's own Primitive CLI login needs no step-up (it acts as the person, held to the same rules) unless the organization's credential policy sets cli_writes_require_approval; the Primitive app's token is refused, even with one. Needs the organization's credential features to be enabled; while they are not, this answers 404 feature_disabled, with details.feature naming the feature. Contact Primitive to turn them on.
 *
 * Person only: a dashboard session, the person's own Primitive CLI login with no step-up (unless the organization's credential policy sets cli_writes_require_approval), or the person's own OAuth token with a step-up token for purpose `keys.create` in the Primitive-Step-Up header. Without one any other OAuth token is answered 403 step_up_required, whose details carry the dashboard URL that issues it (or 403 grant_forbidden when the person's role, or the client, could not do it anyway). The person's role must hold keys:manage. API keys and agent connection keys are refused. An agent acting for the person is refused unless it carries a step-up token the person issued in the dashboard.
 */
@@ -7044,7 +7052,7 @@ function parseFromHeader(header) {
 		value: { address: address.toLowerCase() }
 	};
 }
-// ../sdk-node/dist/understanding-CNZLYYam.js
+// ../sdk-node/dist/understanding-CpocTa4f.js
 /**
 * AUTO-GENERATED - DO NOT EDIT
 * Run `pnpm generate:validator` to regenerate.
@@ -23881,13 +23889,27 @@ const INTERACTION_EVENT_TYPES = [
 	"interaction.ack.requested"
 ];
 /**
+* The rule request events (subject = a request one member made to another for
+* an email rule over the other's own mail). Each goes to the person who did
+* not act: `created` and `withdrawn` to the member asked, `accepted` and
+* `declined` to the member who asked. They are opt-in, and only a webhook that
+* person made for them receives them.
+*/
+const EMAIL_RULE_REQUEST_EVENT_TYPES = [
+	"email_rule_request.created",
+	"email_rule_request.accepted",
+	"email_rule_request.declined",
+	"email_rule_request.withdrawn"
+];
+/**
 * The full enumerated catalog of every current webhook event type: the five
-* email.*, the four opt-in sent_email.*, and every
-* interaction.<protocol>.<suffix>.
+* email.*, the four opt-in sent_email.*, the four opt-in
+* email_rule_request.*, and every interaction.<protocol>.<suffix>.
 */
 const WEBHOOK_EVENT_TYPES = [
 	...EMAIL_EVENT_TYPES,
 	...SENT_EMAIL_EVENT_TYPES,
+	...EMAIL_RULE_REQUEST_EVENT_TYPES,
 	...INTERACTION_EVENT_TYPES
 ];
 const WEBHOOK_EVENT_TYPE_SET = new Set(WEBHOOK_EVENT_TYPES);
@@ -24426,7 +24448,6 @@ function ensureSearchReportsReplyState(apiClient) {
 	}
 	return probe;
 }
-// src/oclif/commands/emails-poll.ts
 function quoteDslValue(value) {
 	if (/^[^\s"]+$/.test(value)) return value;
 	return `"${value.replace(/\\/g, "\\\\").replace(/"/g, "\\\"")}"`;
@@ -24483,7 +24504,7 @@ function buildEmailSearchQuery(params) {
 		include_facets: "false",
 		limit: params.pageSize,
 		snippet: "false",
-		sort: "received_at_asc"
+		sort: params.order ?? "received_at_asc"
 	};
 	const q = combineQ(params.filters.q, params.filters.domain);
 	if (q) query.q = q;
@@ -24500,6 +24521,7 @@ function buildEmailSearchQuery(params) {
 	if (params.filters.to) query.to = params.filters.to;
 	if (params.since) query.date_from = params.since;
 	if (params.cursor) query.cursor = params.cursor;
+	if (params.count === false) query.count = "false";
 	return query;
 }
 function encodeReceivedAtSearchCursor(email) {
@@ -24527,12 +24549,126 @@ function collectNewAcceptedEmails(rows, seenIds) {
 	}
 	return fresh;
 }
+/**
+* How long after arriving an email may become readable and still be reported
+* by an idle poll's re-read; how often a re-read comes; and the most pages, of
+* MAX_EMAIL_POLL_PAGE_SIZE each, one re-read reads.
+*/
+const LATE_MAIL_WINDOW_MS = 6e5;
+const LATE_MAIL_REREAD_MS = 15e3;
+/** How far a re-read reads back at most, however long re-reads have been cut short, unless its interval needs more. */
+const LATE_MAIL_MAX_LOOKBACK_MS = 36e5;
+/** Read back this much further, as this clock may run ahead of the server's. */
+const LATE_MAIL_CLOCK_SLACK_MS = 6e4;
+/**
+* Mail received from `from` (LATE_MAIL_WINDOW_MS ago when not given, and
+* never before `since`), oldest first. Pages come in order of when an email
+* was received, but an email can become readable to this credential after one
+* received later: it was accepted more slowly, held while its sender was
+* checked, or granted to a key by an email rule once classified. By then the
+* cursor is past its place, so an idle poll re-reads recent mail and keeps
+* only rows it has not seen. It reads newest first, where late mail mostly
+* is, so a busy stretch that holds more than the pages read loses its oldest
+* part rather than its newest. Best effort: a page that fails ends the
+* re-read with what it has, and the poll goes on; so does reaching
+* `deadline`. `cutShort` says it did not reach as far back as it would have:
+* a page failed, the deadline came, or a search the server stopped early for
+* time returned short pages up to the page limit. `failed` is the page that
+* failed, so the caller can wait as long as the server asked (Retry-After).
+*/
+async function fetchRecentEmails(params) {
+	const fetchPage = params.fetchPage ?? fetchEmailSearchPage;
+	const now = params.now ?? Date.now();
+	const sinceMs = params.since ? Date.parse(params.since) : NaN;
+	const wanted = params.from ?? now - 6e5;
+	const from = Number.isNaN(sinceMs) ? wanted : Math.max(wanted, sinceMs);
+	const newestFirst = [];
+	const result = (cutShort) => ({
+		rows: newestFirst.reverse(),
+		cutShort
+	});
+	let cursor = null;
+	for (let pages = 0; pages < 3; pages += 1) {
+		if (params.deadline !== void 0 && params.deadline !== null && Date.now() >= params.deadline) return result(true);
+		let page;
+		try {
+			page = await fetchPage({
+				apiClient: params.apiClient,
+				count: false,
+				cursor,
+				filters: params.filters,
+				order: "received_at_desc",
+				pageSize: 100,
+				since: new Date(from).toISOString()
+			});
+		} catch {
+			return result(true);
+		}
+		if (!page.ok) return {
+			...result(true),
+			failed: page
+		};
+		newestFirst.push(...page.rows);
+		if (!page.more || !page.cursor) return result(false);
+		cursor = page.cursor;
+	}
+	return result(newestFirst.length < 300);
+}
+/**
+* An idle poll's re-reads of recent mail (fetchRecentEmails), made once the
+* poll's cursor has passed some mail, with `start` when the poll that first
+* moved it was made.
+*
+* One is due an interval after `start`, as until then the poll has read the
+* same mail itself, and then an interval after the last one ended, so a slow
+* re-read is not followed straight away by another. The interval is
+* LATE_MAIL_REREAD_MS, or LATE_MAIL_REREAD_POLLS poll intervals when that is
+* longer. A re-read is made only on a poll that brought nothing new once it
+* is due, so a wait that ends before the next one is made does not report
+* mail that became readable since the last. `deadline` stops a re-read's
+* paging (fetchRecentEmails).
+*
+* Each re-read reads from LATE_MAIL_WINDOW_MS (and LATE_MAIL_CLOCK_SLACK_MS)
+* before the last one that was not cut short began (before `start`, at
+* first), so an email that becomes readable within LATE_MAIL_WINDOW_MS of
+* arriving is read however far apart re-reads come. That holds while it is
+* among the most one re-read reads, and while a re-read that is not cut short
+* comes within the look-back limit (LATE_MAIL_MAX_LOOKBACK_MS, or more for a
+* long interval) less LATE_MAIL_WINDOW_MS of it becoming readable.
+*/
+function lateMailReread(options) {
+	const { pollIntervalMs, deadline, start } = options;
+	const intervalMs = Math.max(LATE_MAIL_REREAD_MS, 3 * pollIntervalMs);
+	const maxLookBackMs = Math.max(LATE_MAIL_MAX_LOOKBACK_MS, LATE_MAIL_WINDOW_MS + 2 * intervalMs);
+	let covered = start;
+	let ended = start;
+	return {
+		due: (now = Date.now()) => now - ended >= intervalMs,
+		read: async (params) => {
+			const begun = Date.now();
+			const { rows, cutShort, failed } = await fetchRecentEmails({
+				...params,
+				deadline,
+				from: Math.max(covered - LATE_MAIL_WINDOW_MS, begun - maxLookBackMs) - LATE_MAIL_CLOCK_SLACK_MS,
+				now: begun
+			});
+			if (!cutShort) covered = begun;
+			ended = Date.now();
+			return {
+				rows,
+				failed
+			};
+		}
+	};
+}
 async function fetchEmailSearchPage(params) {
 	const result = await searchEmails({
 		client: params.apiClient.client,
 		query: buildEmailSearchQuery({
+			count: params.count,
 			cursor: params.cursor,
 			filters: params.filters,
+			order: params.order,
 			pageSize: params.pageSize,
 			since: params.since
 		}),
@@ -24562,6 +24698,7 @@ async function fetchEmailSearchPage(params) {
 	return {
 		ok: true,
 		cursor: envelope?.meta.cursor ?? cursorFromRows(rows),
+		more: Boolean(envelope?.meta.cursor),
 		rows
 	};
 }
@@ -24656,6 +24793,16 @@ async function pauseForTransientFailure(failure, attempt, options) {
 	return deadline === null || Date.now() < deadline;
 }
 /**
+* After a failed read the caller does not retry, wait as long as the server
+* asked (Retry-After), if it did, before the caller's next request. False when
+* the deadline came first.
+*/
+async function waitOutRetryAfter(result, options) {
+	const failure = transientFailure(result);
+	if (failure?.retryAfterMs === void 0) return true;
+	return pauseForTransientFailure(failure, 0, options);
+}
+/**
 * Run an idempotent read, retrying transient failures until the deadline.
 * Resolves the first result that is not transient, or null when the
 * deadline passes first (or the read itself resolved null).
@@ -25498,4 +25645,4 @@ function repeatStopCommand(emailId) {
 	if (!UUID.test(emailId)) throw new TypeError("emailId must be an email UUID");
 	return `primitive repeat stop --id ${emailId.toLowerCase()}`;
 }
-export { AUTOMATED_VALUES as $, stopRepeatFromEmail as $n, getWakeSchedule as $t, sinceFromFlags as A, putAgentContact as An, downloadSentAttachmentArchiveMember as At, formatRepliesCell as B, runWakeSchedule as Bn, getFunction as Bt, SINCE_VALUE_HELP as C, listSentAttachmentArchiveMembers as Cn, deleteMemory as Ct, fetchEmailSearchPage as D, listWakeSchedules as Dn, downloadEmailAttachmentArchiveMember as Dt, encodeReceivedAtSearchCursor as E, listWakeDispatches as En, deleteWakeSchedule as Et, ReplyStateUnsupportedError as F, reorderRoutes as Fn, getContact as Ft, SENT_EMAIL_EVENT_TYPES as G, sendEmail as Gn, getMemory as Gt, isAwaitingRejectedError as H, searchEmails as Hn, getFunctionTestRunTrace as Ht, assertAwaitingFilterRows as I, replyToEmail as In, getConversation as It, isTrustedSender as J, setMemory as Jn, getOwnGrant as Jt, WEBHOOK_EVENT_TYPES as K, setFunctionRoute as Kn, getOrgRoutingTopology as Kt, awaitingRejectedError as L, resendAgentSignupVerification as Ln, getCreditBalance as Lt, AWAITING_FLAG_DESCRIPTION as M, putContact as Mn, getAccessMode as Mt, AWAITING_VALUES as N, redeemCreditCode as Nn, getAccount as Nt, filtersFromFlags as O, pollCliLogin as On, downloadEmailAttachmentByFilename as Ot, REPLY_STATE_UNSUPPORTED_CODE as P, removeDefaultNetworkMember as Pn, getAgentContactPolicy as Pt, AUTOMATED_FLAG_DESCRIPTION as Q, startCliLogin as Qn, getThread as Qt, ensureSearchReportsReplyState as R, revokeCredential as Rn, getDefaultNetworkAgent as Rt, transientFailure as S, listRoutes as Sn, deleteContact as St, cursorFromAcceptedRows as T, listWakeAuthorizations as Tn, deleteWakeAuthorization as Tt, queryUsesAwaiting as U, searchMemories as Un, getInboxStatus as Ut, hasReplyState as V, sdk_gen_exports as Vn, getFunctionRouting as Vt, replyStateSurfaceForOperation as W, semanticSearch as Wn, getKey as Wt, parseFromHeader as X, startAgentClaim as Xn, getSendFrom as Xt, parseWebhookEvent as Y, simulateRoute as Yn, getRepeatingSend as Yt, AUTOMATED_FILTER_UNSUPPORTED_CODE as Z, startAgentSignup as Zn, getSentEmail as Zt, describeApiFailure as _, listKeys as _n, createKey as _t, REPEAT_IDLE_MAX_MINUTES as a, listAgentNetworks as an, updateRepeatingSend as ar, expectedAutomatedVerdicts as at, retryTransient as b, listRepeatingSends as bn, createWakeSchedule as bt, classifySignalContent as c, listDefaultNetworkMembers as cn, updateWakeSchedule as cr, addDefaultNetworkMember as ct, parseRepeatTick as d, listEmailRuleResults as dn, whoami as dr, checkDefaultNetworkContactAdmission as dt, inviteAgentConnection as en, testFunction as er, AutomatedFilterUnsupportedError as et, preparePresenceAliveEmail as f, listEmails as fn, __exportAll as fr, checkSendability as ft, WaitDeadlineReached as g, listGroups as gn, createFunction as gt, sendPreparedSignal as h, listFunctions as hn, createEndpoint as ht, REPEAT_EVERY_MAX_MINUTES as i, listAgentContacts as in, updateKey as ir, ensureSearchReportsAutomated as it, sleep as j, putAgentContactPolicy as jn, downloadSentAttachmentByFilename as jt, quoteDslValue as k, pullWebhookEvent as kn, downloadEmailAttachmentPart as kt, parseInteractionEnvelope as l, listDomains as ln, verifyAgentClaim as lr, cancelSentEmail as lt, repeatStopCommand as m, listFunctionLogs as mn, completeWebhookEvent as mt, MAX_PRESENCE_ENVELOPE_BYTES as n, listActivityObjects as nn, updateDefaultNetworkMember as nr, automatedRejectedError as nt, REPEAT_MAX_SENDS_MAX as o, listContacts as on, updateRoute as or, hasAutomatedVerdict as ot, prepareSignalEmail as p, listEndpoints as pn, cliLogout as pt, isEmailReceivedEvent as q, setFunctionSecret as qn, getOutboundStatus as qt, PRESENCE_PROBE_TEXT as r, listAgentConnections as rn, updateFunction as rr, automatedSurfaceForOperation as rt, buildRepeatStopBody as s, listDefaultNetworkAgents as sn, updateWakeAuthorization as sr, isAutomatedRejectedError as st, MAX_INTERACTION_BYTES as t, leaveOrganization as tn, unsetFunctionRoute as tr, assertAutomatedVerdict as tt, parsePresenceEnvelope as u, listEmailAttachmentArchiveMembers as un, verifyAgentSignup as ur, cancelSentEmailByIdempotencyKey as ut, parseRetryAfter as v, listMailboxAccess as vn, createRoute as vt, collectNewAcceptedEmails as w, listSentEmails as wn, deleteRoute as wt, retryingOperation as x, listRoles as xn, deleteAgentContact as xt, pauseForTransientFailure as y, listOrganizationPeople as yn, createWakeAuthorization as yt, formatAwaitingCell as z, rotateKey as zn, getEmail as zt };
+export { parseFromHeader as $, startAgentClaim as $n, getSendFrom as $t, lateMailReread as A, listWakeSchedules as An, downloadEmailAttachmentArchiveMember as At, ensureSearchReportsReplyState as B, resendAgentSignupVerification as Bn, getCreditBalance as Bt, waitOutRetryAfter as C, listRepeatingSends as Cn, createWakeSchedule as Ct, encodeReceivedAtSearchCursor as D, listSentEmails as Dn, deleteRoute as Dt, cursorFromAcceptedRows as E, listSentAttachmentArchiveMembers as En, deleteMemory as Et, AWAITING_VALUES as F, putContact as Fn, getAccessMode as Ft, queryUsesAwaiting as G, searchEmails as Gn, getFunctionTestRunTrace as Gt, formatRepliesCell as H, rotateKey as Hn, getEmail as Ht, REPLY_STATE_UNSUPPORTED_CODE as I, redeemCreditCode as In, getAccount as It, SENT_EMAIL_EVENT_TYPES as J, sendEmail as Jn, getMemory as Jt, replyStateSurfaceForOperation as K, searchMemories as Kn, getInboxStatus as Kt, ReplyStateUnsupportedError as L, removeDefaultNetworkMember as Ln, getAgentContactPolicy as Lt, sinceFromFlags as M, pullWebhookEvent as Mn, downloadEmailAttachmentPart as Mt, sleep as N, putAgentContact as Nn, downloadSentAttachmentArchiveMember as Nt, fetchEmailSearchPage as O, listWakeAuthorizations as On, deleteWakeAuthorization as Ot, AWAITING_FLAG_DESCRIPTION as P, putAgentContactPolicy as Pn, downloadSentAttachmentByFilename as Pt, parseWebhookEvent as Q, simulateRoute as Qn, getRepeatingSend as Qt, assertAwaitingFilterRows as R, reorderRoutes as Rn, getContact as Rt, transientFailure as S, listOrganizationPeople as Sn, createWakeAuthorization as St, collectNewAcceptedEmails as T, listRoutes as Tn, deleteContact as Tt, hasReplyState as U, runWakeSchedule as Un, getFunction as Ut, formatAwaitingCell as V, revokeCredential as Vn, getDefaultNetworkAgent as Vt, isAwaitingRejectedError as W, sdk_gen_exports as Wn, getFunctionRouting as Wt, isEmailReceivedEvent as X, setFunctionSecret as Xn, getOutboundStatus as Xt, WEBHOOK_EVENT_TYPES as Y, setFunctionRoute as Yn, getOrgRoutingTopology as Yt, isTrustedSender as Z, setMemory as Zn, getOwnGrant as Zt, describeApiFailure as _, listFunctionLogs as _n, completeWebhookEvent as _t, REPEAT_IDLE_MAX_MINUTES as a, listActivityObjects as an, updateDefaultNetworkMember as ar, automatedRejectedError as at, retryTransient as b, listKeys as bn, createKey as bt, classifySignalContent as c, listAgentNetworks as cn, updateRepeatingSend as cr, expectedAutomatedVerdicts as ct, parseRepeatTick as d, listDefaultNetworkMembers as dn, updateWakeSchedule as dr, addDefaultNetworkMember as dt, getSentEmail as en, startAgentSignup as er, AUTOMATED_FILTER_UNSUPPORTED_CODE as et, preparePresenceAliveEmail as f, listDomains as fn, verifyAgentClaim as fr, cancelSentEmail as ft, WaitDeadlineReached as g, listEndpoints as gn, cliLogout as gt, sendPreparedSignal as h, listEmails as hn, __exportAll as hr, checkSendability as ht, REPEAT_EVERY_MAX_MINUTES as i, leaveOrganization as in, unsetFunctionRoute as ir, assertAutomatedVerdict as it, quoteDslValue as j, pollCliLogin as jn, downloadEmailAttachmentByFilename as jt, filtersFromFlags as k, listWakeDispatches as kn, deleteWakeSchedule as kt, parseInteractionEnvelope as l, listContacts as ln, updateRoute as lr, hasAutomatedVerdict as lt, repeatStopCommand as m, listEmailRuleResults as mn, whoami as mr, checkDefaultNetworkContactAdmission as mt, MAX_PRESENCE_ENVELOPE_BYTES as n, getWakeSchedule as nn, stopRepeatFromEmail as nr, AUTOMATED_VALUES as nt, REPEAT_MAX_SENDS_MAX as o, listAgentConnections as on, updateFunction as or, automatedSurfaceForOperation as ot, prepareSignalEmail as p, listEmailAttachmentArchiveMembers as pn, verifyAgentSignup as pr, cancelSentEmailByIdempotencyKey as pt, EMAIL_RULE_REQUEST_EVENT_TYPES as q, semanticSearch as qn, getKey as qt, PRESENCE_PROBE_TEXT as r, inviteAgentConnection as rn, testFunction as rr, AutomatedFilterUnsupportedError as rt, buildRepeatStopBody as s, listAgentContacts as sn, updateKey as sr, ensureSearchReportsAutomated as st, MAX_INTERACTION_BYTES as t, getThread as tn, startCliLogin as tr, AUTOMATED_FLAG_DESCRIPTION as tt, parsePresenceEnvelope as u, listDefaultNetworkAgents as un, updateWakeAuthorization as ur, isAutomatedRejectedError as ut, parseRetryAfter as v, listFunctions as vn, createEndpoint as vt, SINCE_VALUE_HELP as w, listRoles as wn, deleteAgentContact as wt, retryingOperation as x, listMailboxAccess as xn, createRoute as xt, pauseForTransientFailure as y, listGroups as yn, createFunction as yt, awaitingRejectedError as z, replyToEmail as zn, getConversation as zt };

package/dist/{scoped-chat-DcymzGgB.js → scoped-chat-CvqdlWuX.js}

@@ -1,4 +1,4 @@
-import { J as isTrustedSender, b as retryTransient, c as classifySignalContent } from "./repeats-Dj_o6c-X-Ix28GRRc.js";
+import { Z as isTrustedSender, b as retryTransient, c as classifySignalContent } from "./repeats-Dj_o6c-X-CP0h4alF.js";
 // src/oclif/presence-provenance.ts
 function readPresenceProjection(detail) {
 	if (!detail || typeof detail !== "object") return null;

package/dist/{signal-command-CRGoKO4A.js → signal-command-CPxRPbHK.js}

@@ -1,15 +1,15 @@
-import { Gn as sendEmail, _ as describeApiFailure, h as sendPreparedSignal, ht as createEndpoint, p as prepareSignalEmail, wn as listSentEmails, zt as getEmail } from "./repeats-Dj_o6c-X-Ix28GRRc.js";
-import { A as bareAddress, Et as successfulSendOutcome, s as extractErrorPayload, ut as classifySendError } from "./api-command-DIo8Rg0w.js";
+import { Dn as listSentEmails, Ht as getEmail, Jn as sendEmail, _ as describeApiFailure, h as sendPreparedSignal, p as prepareSignalEmail, vt as createEndpoint } from "./repeats-Dj_o6c-X-CP0h4alF.js";
+import { A as bareAddress, Et as successfulSendOutcome, s as extractErrorPayload, ut as classifySendError } from "./api-command-CRjIK1QL.js";
 import { recordSentSignal } from "./oclif/auto-signals.js";
 import { _ as acquireListenLock, c as mailTime, d as readMailJson, f as removeMailFile, h as writeMailJson, i as mailId, l as privateMailDirectory, m as withMailLock, n as invalidSharedMail, o as mailObject, p as syncMailDirectory, r as mailAddress, s as mailString, t as SharedMailStateError, v as compareListenProcessIdentity, x as listenProcessIdentity, y as listenIdentity } from "./shared-mail-files-BAQSGxxz.js";
-import { i as readApiBeforeDeadline, n as isPlainChatReply, o as scopedChatSenderTrust } from "./scoped-chat-DcymzGgB.js";
+import { i as readApiBeforeDeadline, n as isPlainChatReply, o as scopedChatSenderTrust } from "./scoped-chat-CvqdlWuX.js";
 import { n as tryOwnSharedMail, r as waitForSharedMailChange, t as readSharedMailOwner } from "./shared-mail-watch-BAPMsFNv.js";
 import { Errors } from "@oclif/core";
 import { opendirSync } from "node:fs";
 import { createHash, randomUUID, scryptSync } from "node:crypto";
 import { dirname, join } from "node:path";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
-// ../sdk-node/dist/api-N3Qu4JMc.js
+// ../sdk-node/dist/api-ieEDLXSB.js
 const jsonBodySerializer = { bodySerializer: (body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value) };
 function createSseClient({ onRequest, onSseError, onSseEvent, responseTransformer, responseValidator, sseDefaultRetryDelay, sseMaxRetryAttempts, sseMaxRetryDelay, sseSleepFn, url, ...options }) {
 	let lastEventId;

package/man/primitive.1

@@ -218,6 +218,11 @@ run directly. If your organization requires approval, the command prints the
 approval link and waits for the one-time token the page shows, or takes it with
 .BR --step-up-token .
 A new secret is printed once and never saved.
+.B primitive keys update ID --expires-at TIME
+extends a key before it expires; rotating keeps its expiry unless
+.B rotate
+is given
+.BR --expires-at .
 .B primitive keys revoke ID
 revokes a key.
 .B primitive whoami --check PERMISSION
@@ -232,7 +237,8 @@ signed in with
 can leave; API keys are refused. The only owner of an organization cannot leave
 it. If the server asks for a dashboard confirmation, open the page it names and
 paste the token at the prompt, or pass it with --step-up-token. Refusals from
-the server are printed as returned.
+the server are printed as returned. Without a terminal and without --yes, it
+exits 2 before anything is sent.
 .PP
 Run
 .B primitive whoami