primcli 3.0.0-preview.6 → 3.0.0-preview.7

package/dist/{api-command-CRjIK1QL.js → api-command-BXYpylbG.js}

@@ -1,6 +1,7 @@
-import { B as ensureSearchReportsReplyState, Ht as getEmail, J as SENT_EMAIL_EVENT_TYPES, K as replyStateSurfaceForOperation, L as ReplyStateUnsupportedError, R as assertAwaitingFilterRows, W as isAwaitingRejectedError, Wn as sdk_gen_exports, Y as WEBHOOK_EVENT_TYPES, Zt as getOwnGrant, at as automatedRejectedError, ct as expectedAutomatedVerdicts, gn as listEndpoints, it as assertAutomatedVerdict, ot as automatedSurfaceForOperation, q as EMAIL_RULE_REQUEST_EVENT_TYPES, rt as AutomatedFilterUnsupportedError, st as ensureSearchReportsAutomated, tn as getThread, ut as isAutomatedRejectedError, v as parseRetryAfter, z as awaitingRejectedError } from "./repeats-Dj_o6c-X-CP0h4alF.js";
+import { B as ensureSearchReportsReplyState, Ht as getEmail, J as SENT_EMAIL_EVENT_TYPES, K as replyStateSurfaceForOperation, L as ReplyStateUnsupportedError, R as assertAwaitingFilterRows, W as isAwaitingRejectedError, Wn as sdk_gen_exports, Y as WEBHOOK_EVENT_TYPES, Zt as getOwnGrant, at as automatedRejectedError, ct as expectedAutomatedVerdicts, gn as listEndpoints, it as assertAutomatedVerdict, ot as automatedSurfaceForOperation, q as EMAIL_RULE_REQUEST_EVENT_TYPES, rt as AutomatedFilterUnsupportedError, st as ensureSearchReportsAutomated, tn as getThread, ut as isAutomatedRejectedError, v as parseRetryAfter, z as awaitingRejectedError } from "./repeats-Dj_o6c-X-C6tOKAqk.js";
 import { C as saveCliCredentials, F as agentProfilesDirectory, H as requireDefaultLoginProfile, N as agentProfileDirectory, R as loadConnectedAgentProfile, S as resolveCliAuth, W as PrimitiveApiClient, _ as deleteCliCredentials, b as loadCliCredentials, c as resolveConfigEnvironment, d as validateCliHeaderName, f as validateCliHeaderValue, i as loadCliConfig, j as AGENT_PROFILE_ENV, m as cliAccessTokenExpiresAt, p as acquireCliCredentialsLock, w as saveSignupCredentials, x as normalizeApiBaseUrl, y as detectPrimitiveKeyEnvMisname } from "./cli-config-Ms_0vNjq.js";
 import "./oclif/global-org-flag.js";
+import { a as thrownErrorBody } from "./json-output-ch756TXV.js";
 import { d as readMailJson, h as writeMailJson, m as withMailLock, p as syncMailDirectory, u as privateMailPermissions } from "./shared-mail-files-BAQSGxxz.js";
 import { Args, Command, Errors, Flags } from "@oclif/core";
 import { existsSync, lstatSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
@@ -13014,6 +13015,25 @@ const operationManifest = [
 					"type": "string",
 					"minLength": 1,
 					"maxLength": 64
+				},
+				"breadth": {
+					"description": "Ignored (the compile answer's breadth).",
+					"anyOf": [{
+						"type": "object",
+						"properties": {
+							"checked": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Classified emails the conditions were decided for: of the newest 200 from the last 30 days in your own mailboxes (for a grant rule, those you may share), the ones you can still read."
+							},
+							"matched": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Of those, how many they hold for (for a do-not-share rule, one they cannot decide counts)."
+							}
+						},
+						"required": ["checked", "matched"]
+					}, { "type": "null" }]
 				}
 			},
 			"additionalProperties": false
@@ -13244,10 +13264,37 @@ const operationManifest = [
 							"type": ["integer", "null"],
 							"exclusiveMinimum": 0
 						},
+						"revision": {
+							"description": "Moves on by one with every update. Send it as if_revision.",
+							"type": "integer",
+							"exclusiveMinimum": 0
+						},
 						"author_user_id": {
 							"type": "string",
 							"format": "uuid"
 						},
+						"author": {
+							"type": "object",
+							"properties": {
+								"user_id": {
+									"type": "string",
+									"format": "uuid"
+								},
+								"name": {
+									"description": "Their name; null unless you can list members or this is you, and when they have none set.",
+									"type": ["string", "null"]
+								},
+								"email": {
+									"description": "Sign-in email; null unless you can list member emails or this is you.",
+									"type": ["string", "null"]
+								}
+							},
+							"required": [
+								"user_id",
+								"name",
+								"email"
+							]
+						},
 						"is_author": {
 							"type": "boolean",
 							"description": "Whether you are its author, in your current membership. Only its author edits it; others who see it may only disable or delete it (while shared, only if they manage members)."
@@ -13260,91 +13307,94 @@ const operationManifest = [
 							"type": "string",
 							"format": "date-time"
 						},
-						"current": { "anyOf": [{
-							"type": "object",
-							"properties": {
-								"version": {
-									"type": "integer",
-									"exclusiveMinimum": 0
-								},
-								"english": { "type": "string" },
-								"tree": {
-									"type": "object",
-									"properties": {
-										"version": {
-											"type": "number",
-											"const": 1
-										},
-										"vocabulary": {
-											"type": "string",
-											"description": "Vocabulary version, such as v1."
-										},
-										"when": {
-											"type": "object",
-											"propertyNames": { "type": "string" },
-											"additionalProperties": {},
-											"description": "A condition {column, op, value?, min_confidence?} (see GET /email-rules/vocabulary) or {all: [...]}, {any: [...]}, {not: ...}."
-										},
-										"questions": {
-											"type": "array",
-											"items": { "type": "string" },
-											"description": "Yes/no questions asked once the conditions match; all must be yes."
-										}
+						"current": {
+							"description": "Its current version: its text (english, tree, explanation, assumptions, warnings) and who compiled it. current_version is its number. GET /email-rules lists rules without it.",
+							"anyOf": [{
+								"type": "object",
+								"properties": {
+									"version": {
+										"type": "integer",
+										"exclusiveMinimum": 0
 									},
-									"required": [
-										"version",
-										"vocabulary",
-										"when",
-										"questions"
-									]
-								},
-								"explanation": { "type": "string" },
-								"assumptions": {
-									"type": "array",
-									"items": { "type": "string" }
-								},
-								"warnings": {
-									"type": "array",
-									"items": { "type": "string" }
-								},
-								"compiled_by": {
-									"type": "string",
-									"description": "Who produced the tree, as stated when saved (not verified), such as rule-compiler-v1 or member."
-								},
-								"vocabulary": { "type": "string" },
-								"created_at": {
-									"type": "string",
-									"format": "date-time"
-								},
-								"sql": {
-									"description": "Present only when include_sql was true.",
-									"type": "object",
-									"properties": {
-										"expression": {
-											"type": "string",
-											"description": "A parameterized boolean expression over one row per email."
+									"english": { "type": "string" },
+									"tree": {
+										"type": "object",
+										"properties": {
+											"version": {
+												"type": "number",
+												"const": 1
+											},
+											"vocabulary": {
+												"type": "string",
+												"description": "Vocabulary version, such as v1."
+											},
+											"when": {
+												"type": "object",
+												"propertyNames": { "type": "string" },
+												"additionalProperties": {},
+												"description": "A condition {column, op, value?, min_confidence?} (see GET /email-rules/vocabulary) or {all: [...]}, {any: [...]}, {not: ...}."
+											},
+											"questions": {
+												"type": "array",
+												"items": { "type": "string" },
+												"description": "Yes/no questions asked once the conditions match; all must be yes."
+											}
 										},
-										"params": {
-											"type": "array",
-											"items": {},
-											"description": "The values bound to $1, $2 and so on."
-										}
+										"required": [
+											"version",
+											"vocabulary",
+											"when",
+											"questions"
+										]
 									},
-									"required": ["expression", "params"]
-								}
-							},
-							"required": [
-								"version",
-								"english",
-								"tree",
-								"explanation",
-								"assumptions",
-								"warnings",
-								"compiled_by",
-								"vocabulary",
-								"created_at"
-							]
-						}, { "type": "null" }] }
+									"explanation": { "type": "string" },
+									"assumptions": {
+										"type": "array",
+										"items": { "type": "string" }
+									},
+									"warnings": {
+										"type": "array",
+										"items": { "type": "string" }
+									},
+									"compiled_by": {
+										"type": "string",
+										"description": "Who produced the tree, as stated when saved (not verified), such as rule-compiler-v1 or member."
+									},
+									"vocabulary": { "type": "string" },
+									"created_at": {
+										"type": "string",
+										"format": "date-time"
+									},
+									"sql": {
+										"description": "Present only when include_sql was true.",
+										"type": "object",
+										"properties": {
+											"expression": {
+												"type": "string",
+												"description": "A parameterized boolean expression over one row per email."
+											},
+											"params": {
+												"type": "array",
+												"items": {},
+												"description": "The values bound to $1, $2 and so on."
+											}
+										},
+										"required": ["expression", "params"]
+									}
+								},
+								"required": [
+									"version",
+									"english",
+									"tree",
+									"explanation",
+									"assumptions",
+									"warnings",
+									"compiled_by",
+									"vocabulary",
+									"created_at"
+								]
+							}, { "type": "null" }]
+						}
 					},
 					"required": [
 						"id",
@@ -13613,7 +13663,7 @@ const operationManifest = [
 		"binaryResponse": false,
 		"bodyRequired": true,
 		"command": "compile-email-rule",
-		"description": "Turns a plain-English description of which received emails to match into a rule tree over the published column contract, with a plain-English explanation of what it matches, the assumptions made, and warnings for anything the columns cannot express. Where the columns fall short the rule may carry up to three yes/no questions, asked about an email only after its conditions match. Nothing is saved. A rule with no questions has its conditions counted, read only, over the caller's recent classified mail (what a test of it covers by default), so a warning can say when it matches nearly all of it. The SQL the rule renders to is returned only when include_sql is true. kind do_not_share compiles a do-not-share rule for recall: conditions only as narrow as the description says, the judgement of what it describes put into questions, and with nothing a column decides for certain, conditions that hold for every email. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.",
+		"description": "Turns a plain-English description of which received emails to match into a rule tree over the published column contract, with a plain-English explanation of what it matches, the assumptions made, and warnings for anything the columns cannot express. Where the columns fall short the rule may carry up to three yes/no questions, asked about an email only after its conditions match. Nothing is saved. A rule with no questions has its conditions counted, read only, over the caller's recent classified mail (what a test of it covers by default): breadth is that count, and a warning says when it matches nearly all of it. The SQL the rule renders to is returned only when include_sql is true. kind do_not_share compiles a do-not-share rule for recall: conditions only as narrow as the description says, the judgement of what it describes put into questions, and with nothing a column decides for certain, conditions that hold for every email. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.",
 		"hasJsonBody": true,
 		"method": "POST",
 		"operationId": "compileEmailRule",
@@ -13686,7 +13736,7 @@ const operationManifest = [
 				},
 				"explanation": {
 					"type": "string",
-					"description": "What the rule matches, in plain English."
+					"description": "What the rule matches, in plain English: only which emails, not what it grants or shares, which follows from its state, its scope and the keys, webhooks and people it reaches. The compiler leaves out a sentence that plainly says what the rule hands over."
 				},
 				"assumptions": {
 					"type": "array",
@@ -13702,6 +13752,25 @@ const operationManifest = [
 					"type": "string",
 					"description": "An opaque name for the version of the rule compiler that produced the rule, such as rule-compiler-v1. Send it back as compiled_by when you save the rule."
 				},
+				"breadth": {
+					"description": "How many of your recent emails its conditions hold for, counted over your own mailboxes whatever scope you save it with, warning or not. Null when not counted in full: a rule with questions, headers-only access, no test of it possible as you, or a count that failed or ran out of time. Writes ignore it, so a compile answer (without include_sql) can be sent back unchanged.",
+					"anyOf": [{
+						"type": "object",
+						"properties": {
+							"checked": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Classified emails the conditions were decided for: of the newest 200 from the last 30 days in your own mailboxes (for a grant rule, those you may share), the ones you can still read."
+							},
+							"matched": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Of those, how many they hold for (for a do-not-share rule, one they cannot decide counts)."
+							}
+						},
+						"required": ["checked", "matched"]
+					}, { "type": "null" }]
+				},
 				"sql": {
 					"description": "Present only when include_sql was true.",
 					"type": "object",
@@ -13897,6 +13966,25 @@ const operationManifest = [
 					"type": "string",
 					"minLength": 1,
 					"maxLength": 64
+				},
+				"breadth": {
+					"description": "Ignored (the compile answer's breadth).",
+					"anyOf": [{
+						"type": "object",
+						"properties": {
+							"checked": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Classified emails the conditions were decided for: of the newest 200 from the last 30 days in your own mailboxes (for a grant rule, those you may share), the ones you can still read."
+							},
+							"matched": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Of those, how many they hold for (for a do-not-share rule, one they cannot decide counts)."
+							}
+						},
+						"required": ["checked", "matched"]
+					}, { "type": "null" }]
 				}
 			},
 			"required": [
@@ -13957,10 +14045,37 @@ const operationManifest = [
 					"type": ["integer", "null"],
 					"exclusiveMinimum": 0
 				},
+				"revision": {
+					"description": "Moves on by one with every update. Send it as if_revision.",
+					"type": "integer",
+					"exclusiveMinimum": 0
+				},
 				"author_user_id": {
 					"type": "string",
 					"format": "uuid"
 				},
+				"author": {
+					"type": "object",
+					"properties": {
+						"user_id": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"name": {
+							"description": "Their name; null unless you can list members or this is you, and when they have none set.",
+							"type": ["string", "null"]
+						},
+						"email": {
+							"description": "Sign-in email; null unless you can list member emails or this is you.",
+							"type": ["string", "null"]
+						}
+					},
+					"required": [
+						"user_id",
+						"name",
+						"email"
+					]
+				},
 				"is_author": {
 					"type": "boolean",
 					"description": "Whether you are its author, in your current membership. Only its author edits it; others who see it may only disable or delete it (while shared, only if they manage members)."
@@ -13973,91 +14088,94 @@ const operationManifest = [
 					"type": "string",
 					"format": "date-time"
 				},
-				"current": { "anyOf": [{
-					"type": "object",
-					"properties": {
-						"version": {
-							"type": "integer",
-							"exclusiveMinimum": 0
-						},
-						"english": { "type": "string" },
-						"tree": {
-							"type": "object",
-							"properties": {
-								"version": {
-									"type": "number",
-									"const": 1
-								},
-								"vocabulary": {
-									"type": "string",
-									"description": "Vocabulary version, such as v1."
-								},
-								"when": {
-									"type": "object",
-									"propertyNames": { "type": "string" },
-									"additionalProperties": {},
-									"description": "A condition {column, op, value?, min_confidence?} (see GET /email-rules/vocabulary) or {all: [...]}, {any: [...]}, {not: ...}."
-								},
-								"questions": {
-									"type": "array",
-									"items": { "type": "string" },
-									"description": "Yes/no questions asked once the conditions match; all must be yes."
-								}
+				"current": {
+					"description": "Its current version: its text (english, tree, explanation, assumptions, warnings) and who compiled it. current_version is its number. GET /email-rules lists rules without it.",
+					"anyOf": [{
+						"type": "object",
+						"properties": {
+							"version": {
+								"type": "integer",
+								"exclusiveMinimum": 0
 							},
-							"required": [
-								"version",
-								"vocabulary",
-								"when",
-								"questions"
-							]
-						},
-						"explanation": { "type": "string" },
-						"assumptions": {
-							"type": "array",
-							"items": { "type": "string" }
-						},
-						"warnings": {
-							"type": "array",
-							"items": { "type": "string" }
-						},
-						"compiled_by": {
-							"type": "string",
-							"description": "Who produced the tree, as stated when saved (not verified), such as rule-compiler-v1 or member."
-						},
-						"vocabulary": { "type": "string" },
-						"created_at": {
-							"type": "string",
-							"format": "date-time"
-						},
-						"sql": {
-							"description": "Present only when include_sql was true.",
-							"type": "object",
-							"properties": {
-								"expression": {
-									"type": "string",
-									"description": "A parameterized boolean expression over one row per email."
+							"english": { "type": "string" },
+							"tree": {
+								"type": "object",
+								"properties": {
+									"version": {
+										"type": "number",
+										"const": 1
+									},
+									"vocabulary": {
+										"type": "string",
+										"description": "Vocabulary version, such as v1."
+									},
+									"when": {
+										"type": "object",
+										"propertyNames": { "type": "string" },
+										"additionalProperties": {},
+										"description": "A condition {column, op, value?, min_confidence?} (see GET /email-rules/vocabulary) or {all: [...]}, {any: [...]}, {not: ...}."
+									},
+									"questions": {
+										"type": "array",
+										"items": { "type": "string" },
+										"description": "Yes/no questions asked once the conditions match; all must be yes."
+									}
 								},
-								"params": {
-									"type": "array",
-									"items": {},
-									"description": "The values bound to $1, $2 and so on."
-								}
+								"required": [
+									"version",
+									"vocabulary",
+									"when",
+									"questions"
+								]
 							},
-							"required": ["expression", "params"]
-						}
-					},
-					"required": [
-						"version",
-						"english",
-						"tree",
-						"explanation",
-						"assumptions",
-						"warnings",
-						"compiled_by",
-						"vocabulary",
-						"created_at"
-					]
-				}, { "type": "null" }] },
+							"explanation": { "type": "string" },
+							"assumptions": {
+								"type": "array",
+								"items": { "type": "string" }
+							},
+							"warnings": {
+								"type": "array",
+								"items": { "type": "string" }
+							},
+							"compiled_by": {
+								"type": "string",
+								"description": "Who produced the tree, as stated when saved (not verified), such as rule-compiler-v1 or member."
+							},
+							"vocabulary": { "type": "string" },
+							"created_at": {
+								"type": "string",
+								"format": "date-time"
+							},
+							"sql": {
+								"description": "Present only when include_sql was true.",
+								"type": "object",
+								"properties": {
+									"expression": {
+										"type": "string",
+										"description": "A parameterized boolean expression over one row per email."
+									},
+									"params": {
+										"type": "array",
+										"items": {},
+										"description": "The values bound to $1, $2 and so on."
+									}
+								},
+								"required": ["expression", "params"]
+							}
+						},
+						"required": [
+							"version",
+							"english",
+							"tree",
+							"explanation",
+							"assumptions",
+							"warnings",
+							"compiled_by",
+							"vocabulary",
+							"created_at"
+						]
+					}, { "type": "null" }]
+				},
 				"scope_warnings": {
 					"description": "Names in scope_selection that match nothing this organization receives mail at (a typo, or an inbox not yet in use). Present only when there are some.",
 					"type": "array",
@@ -14089,7 +14207,7 @@ const operationManifest = [
 					}
 				},
 				"expectations_check": {
-					"description": "After a write that saved a version or changed its expectations, if it has some: them, judged on that version from stored classifications without asking its questions. Undecided: one that needs answers not yet kept for that version, is unclassified, skipped or not reached, or that its author does not read. Absent when it could not be judged (the rule changed again, its author cannot be resolved, your access shows headers only, it could not finish in time, or the check failed). Test by rule_id for the rest.",
+					"description": "After a write that saved a version or changed its expectations, if it has some: them, judged on that version from stored classifications without asking its questions. Undecided: one that needs answers not yet kept for that version, is unclassified, skipped or not reached, or that its author does not read. Absent when it could not be judged (the rule changed again, its author cannot be resolved, your access shows headers only, it could not finish in time, or the check failed). Test by rule_id for the rest. With if_expectations_pass, the judgment made before the save, which passed.",
 					"type": "object",
 					"properties": {
 						"version": {
@@ -14117,6 +14235,10 @@ const operationManifest = [
 								"type": "string",
 								"format": "uuid"
 							}
+						},
+						"note": {
+							"description": "On an update that saved a version that did not pass: that it was saved anyway, is current, and whether it is live.",
+							"type": "string"
 						}
 					},
 					"required": [
@@ -14125,6 +14247,41 @@ const operationManifest = [
 						"failed",
 						"undecided"
 					]
+				},
+				"restored_from": {
+					"description": "When this write saved an earlier version again (restore_version): which, and that the scope is not part of a version.",
+					"type": "object",
+					"properties": {
+						"version": {
+							"type": "integer",
+							"exclusiveMinimum": 0
+						},
+						"note": { "type": "string" }
+					},
+					"required": ["version", "note"]
+				},
+				"affects": {
+					"description": "After an update that saved a version: API keys listing the rule, the webhooks they own, and shares this write ended. The rule keeps its state. Absent if not read.",
+					"type": "object",
+					"properties": {
+						"keys": {
+							"type": "integer",
+							"minimum": 0
+						},
+						"endpoints": {
+							"type": "integer",
+							"minimum": 0
+						},
+						"shares_ended": {
+							"type": "integer",
+							"minimum": 0
+						}
+					},
+					"required": [
+						"keys",
+						"endpoints",
+						"shares_ended"
+					]
 				}
 			},
 			"required": [
@@ -14258,6 +14415,25 @@ const operationManifest = [
 					"type": "string",
 					"minLength": 1,
 					"maxLength": 64
+				},
+				"breadth": {
+					"description": "Ignored (the compile answer's breadth).",
+					"anyOf": [{
+						"type": "object",
+						"properties": {
+							"checked": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Classified emails the conditions were decided for: of the newest 200 from the last 30 days in your own mailboxes (for a grant rule, those you may share), the ones you can still read."
+							},
+							"matched": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Of those, how many they hold for (for a do-not-share rule, one they cannot decide counts)."
+							}
+						},
+						"required": ["checked", "matched"]
+					}, { "type": "null" }]
 				}
 			},
 			"required": [
@@ -14796,7 +14972,7 @@ const operationManifest = [
 		"binaryResponse": false,
 		"bodyRequired": false,
 		"command": "get-email-rule",
-		"description": "A rule, its scope (evaluation_scope, and scope_selection for a selected rule), its current version and its saved expectations. What the scope comes to for its author now is GET /email-rules/{id}/scope. The SQL the version renders to is included only when include_sql is true. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.",
+		"description": "A rule, its scope (evaluation_scope, and scope_selection for a selected rule), its current version and its saved expectations. The current version's text (english, tree, explanation, assumptions, warnings) is under current, and current_version is its number. What the scope comes to for its author now is GET /email-rules/{id}/scope. The SQL the version renders to is included only when include_sql is true. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.",
 		"hasJsonBody": false,
 		"method": "GET",
 		"operationId": "getEmailRule",
@@ -14870,10 +15046,37 @@ const operationManifest = [
 					"type": ["integer", "null"],
 					"exclusiveMinimum": 0
 				},
+				"revision": {
+					"description": "Moves on by one with every update. Send it as if_revision.",
+					"type": "integer",
+					"exclusiveMinimum": 0
+				},
 				"author_user_id": {
 					"type": "string",
 					"format": "uuid"
 				},
+				"author": {
+					"type": "object",
+					"properties": {
+						"user_id": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"name": {
+							"description": "Their name; null unless you can list members or this is you, and when they have none set.",
+							"type": ["string", "null"]
+						},
+						"email": {
+							"description": "Sign-in email; null unless you can list member emails or this is you.",
+							"type": ["string", "null"]
+						}
+					},
+					"required": [
+						"user_id",
+						"name",
+						"email"
+					]
+				},
 				"is_author": {
 					"type": "boolean",
 					"description": "Whether you are its author, in your current membership. Only its author edits it; others who see it may only disable or delete it (while shared, only if they manage members)."
@@ -14886,91 +15089,94 @@ const operationManifest = [
 					"type": "string",
 					"format": "date-time"
 				},
-				"current": { "anyOf": [{
-					"type": "object",
-					"properties": {
-						"version": {
-							"type": "integer",
-							"exclusiveMinimum": 0
-						},
-						"english": { "type": "string" },
-						"tree": {
-							"type": "object",
-							"properties": {
-								"version": {
-									"type": "number",
-									"const": 1
-								},
-								"vocabulary": {
-									"type": "string",
-									"description": "Vocabulary version, such as v1."
-								},
-								"when": {
-									"type": "object",
-									"propertyNames": { "type": "string" },
-									"additionalProperties": {},
-									"description": "A condition {column, op, value?, min_confidence?} (see GET /email-rules/vocabulary) or {all: [...]}, {any: [...]}, {not: ...}."
-								},
-								"questions": {
-									"type": "array",
-									"items": { "type": "string" },
-									"description": "Yes/no questions asked once the conditions match; all must be yes."
-								}
+				"current": {
+					"description": "Its current version: its text (english, tree, explanation, assumptions, warnings) and who compiled it. current_version is its number. GET /email-rules lists rules without it.",
+					"anyOf": [{
+						"type": "object",
+						"properties": {
+							"version": {
+								"type": "integer",
+								"exclusiveMinimum": 0
 							},
-							"required": [
-								"version",
-								"vocabulary",
-								"when",
-								"questions"
-							]
-						},
-						"explanation": { "type": "string" },
-						"assumptions": {
-							"type": "array",
-							"items": { "type": "string" }
-						},
-						"warnings": {
-							"type": "array",
-							"items": { "type": "string" }
-						},
-						"compiled_by": {
-							"type": "string",
-							"description": "Who produced the tree, as stated when saved (not verified), such as rule-compiler-v1 or member."
-						},
-						"vocabulary": { "type": "string" },
-						"created_at": {
-							"type": "string",
-							"format": "date-time"
-						},
-						"sql": {
-							"description": "Present only when include_sql was true.",
-							"type": "object",
-							"properties": {
-								"expression": {
-									"type": "string",
-									"description": "A parameterized boolean expression over one row per email."
+							"english": { "type": "string" },
+							"tree": {
+								"type": "object",
+								"properties": {
+									"version": {
+										"type": "number",
+										"const": 1
+									},
+									"vocabulary": {
+										"type": "string",
+										"description": "Vocabulary version, such as v1."
+									},
+									"when": {
+										"type": "object",
+										"propertyNames": { "type": "string" },
+										"additionalProperties": {},
+										"description": "A condition {column, op, value?, min_confidence?} (see GET /email-rules/vocabulary) or {all: [...]}, {any: [...]}, {not: ...}."
+									},
+									"questions": {
+										"type": "array",
+										"items": { "type": "string" },
+										"description": "Yes/no questions asked once the conditions match; all must be yes."
+									}
 								},
-								"params": {
-									"type": "array",
-									"items": {},
-									"description": "The values bound to $1, $2 and so on."
-								}
+								"required": [
+									"version",
+									"vocabulary",
+									"when",
+									"questions"
+								]
 							},
-							"required": ["expression", "params"]
-						}
-					},
-					"required": [
-						"version",
-						"english",
-						"tree",
-						"explanation",
-						"assumptions",
-						"warnings",
-						"compiled_by",
-						"vocabulary",
-						"created_at"
-					]
-				}, { "type": "null" }] },
+							"explanation": { "type": "string" },
+							"assumptions": {
+								"type": "array",
+								"items": { "type": "string" }
+							},
+							"warnings": {
+								"type": "array",
+								"items": { "type": "string" }
+							},
+							"compiled_by": {
+								"type": "string",
+								"description": "Who produced the tree, as stated when saved (not verified), such as rule-compiler-v1 or member."
+							},
+							"vocabulary": { "type": "string" },
+							"created_at": {
+								"type": "string",
+								"format": "date-time"
+							},
+							"sql": {
+								"description": "Present only when include_sql was true.",
+								"type": "object",
+								"properties": {
+									"expression": {
+										"type": "string",
+										"description": "A parameterized boolean expression over one row per email."
+									},
+									"params": {
+										"type": "array",
+										"items": {},
+										"description": "The values bound to $1, $2 and so on."
+									}
+								},
+								"required": ["expression", "params"]
+							}
+						},
+						"required": [
+							"version",
+							"english",
+							"tree",
+							"explanation",
+							"assumptions",
+							"warnings",
+							"compiled_by",
+							"vocabulary",
+							"created_at"
+						]
+					}, { "type": "null" }]
+				},
 				"expectations": {
 					"description": "Its saved expectations, each list by email id.",
 					"type": "object",
@@ -17144,7 +17350,7 @@ const operationManifest = [
 		"binaryResponse": false,
 		"bodyRequired": false,
 		"command": "list-email-rules",
-		"description": "The rules the caller can see, newest first: their own, or every member's rules for a caller who reads the whole organization's mail. Each carries its scope (evaluation_scope, and scope_selection for a selected rule). With matched_email_id, only the rules that matched that email. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.",
+		"description": "The rules the caller can see, newest first: their own, or every member's rules for a caller who reads the whole organization's mail. Each carries its scope (evaluation_scope, and scope_selection for a selected rule) and current_version, but not the version's text: read that under current from GET /email-rules/{id}. With matched_email_id, only the rules that matched that email. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.",
 		"hasJsonBody": false,
 		"method": "GET",
 		"operationId": "listEmailRules",
@@ -17233,10 +17439,37 @@ const operationManifest = [
 						"type": ["integer", "null"],
 						"exclusiveMinimum": 0
 					},
+					"revision": {
+						"description": "Moves on by one with every update. Send it as if_revision.",
+						"type": "integer",
+						"exclusiveMinimum": 0
+					},
 					"author_user_id": {
 						"type": "string",
 						"format": "uuid"
 					},
+					"author": {
+						"type": "object",
+						"properties": {
+							"user_id": {
+								"type": "string",
+								"format": "uuid"
+							},
+							"name": {
+								"description": "Their name; null unless you can list members or this is you, and when they have none set.",
+								"type": ["string", "null"]
+							},
+							"email": {
+								"description": "Sign-in email; null unless you can list member emails or this is you.",
+								"type": ["string", "null"]
+							}
+						},
+						"required": [
+							"user_id",
+							"name",
+							"email"
+						]
+					},
 					"is_author": {
 						"type": "boolean",
 						"description": "Whether you are its author, in your current membership. Only its author edits it; others who see it may only disable or delete it (while shared, only if they manage members)."
@@ -18437,7 +18670,7 @@ const operationManifest = [
 		"binaryResponse": false,
 		"bodyRequired": true,
 		"command": "update-email-rule",
-		"description": "Renames the rule, saves a new version (english and tree together, with an explanation or one the server writes; earlier versions stay), changes its state (draft is off; observe; active), whose mail it runs over (evaluation_scope, with scope_selection when selected) or its saved expectations (each saved version and new set is judged in expectations_check). Anyone but its author who sees it may only disable it (state draft), and while it is shared only if they manage members from the dashboard. Without evaluation_scope the scope stays; a scope change saves a new version with the same conditions, and what was granted stays. A shared rule keeps its scope; a kind never changes. Send if_version, the current_version you read, so a write never replaces a version saved since. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.",
+		"description": "Renames the rule, saves a new version (english and tree together, with an explanation or one the server writes; earlier versions stay) or an earlier one again (restore_version), changes its state (draft is off; observe; active), whose mail it runs over (evaluation_scope, with scope_selection when selected) or its saved expectations (each saved version and new set is judged in expectations_check). Anyone but its author who sees it may only disable it (state draft), and while it is shared only if they manage members from the dashboard. Without evaluation_scope the scope stays; a scope change saves a new version with the same conditions, and what was granted stays. A shared rule keeps its scope; a kind never changes. A saved version takes effect at once (an active rule stays active); affects counts what it reaches. Send if_version, the current_version you read, so a write never replaces a version saved since, or if_revision to refuse it after any update. Without if_expectations_pass a version is saved even when its expectations_check fails. Needs mail:read, a member's own credential with their full access (not an API key, agent key or narrowed token), and the email rules feature.",
 		"hasJsonBody": true,
 		"method": "PATCH",
 		"operationId": "updateEmailRule",
@@ -18539,6 +18772,25 @@ const operationManifest = [
 					"minLength": 1,
 					"maxLength": 64
 				},
+				"breadth": {
+					"description": "Ignored (the compile answer's breadth).",
+					"anyOf": [{
+						"type": "object",
+						"properties": {
+							"checked": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Classified emails the conditions were decided for: of the newest 200 from the last 30 days in your own mailboxes (for a grant rule, those you may share), the ones you can still read."
+							},
+							"matched": {
+								"type": "integer",
+								"minimum": 0,
+								"description": "Of those, how many they hold for (for a do-not-share rule, one they cannot decide counts)."
+							}
+						},
+						"required": ["checked", "matched"]
+					}, { "type": "null" }]
+				},
 				"evaluation_scope": {
 					"type": "string",
 					"enum": [
@@ -18576,7 +18828,7 @@ const operationManifest = [
 					"description": "For a selected rule: inboxes, and domains (each address at them the author reads); each one you can read."
 				},
 				"if_version": {
-					"description": "The current_version you read. If the rule's now differs, nothing changes: 409 email_rule_conflict, details.reason version_moved and details.current_version. Send it with a new version so a concurrent edit is never replaced unseen. It guards versions only: a change to expectations alone saves none.",
+					"description": "The current_version you read: if it has moved, nothing is saved (409 email_rule_conflict, version_moved). It guards versions only; if_revision guards every update.",
 					"type": "integer",
 					"minimum": 1
 				},
@@ -18602,6 +18854,22 @@ const operationManifest = [
 					},
 					"additionalProperties": false,
 					"description": "Replaces its saved expectations (author only); null removes them."
+				},
+				"if_revision": {
+					"description": "The revision you read: if the rule was updated since, nothing is saved (409 email_rule_conflict, revision_moved).",
+					"type": "integer",
+					"minimum": 1,
+					"maximum": 2147483647
+				},
+				"if_expectations_pass": {
+					"description": "true: judge the rule as this write leaves it (new tree, restored version, new scope, or the version it activates) against the expectations it leaves, as POST /email-rules/test would, before saving; it can take as long as a test. Failed: 409 expectations_failed; undecided: 409 expectations_undecided (both with details.expectations_check); none to judge: 400 no_expectations. Refused writes save nothing; a pass saves unless the rule moved meanwhile (409 email_rule_conflict). Only writes that save a version or activate the rule are judged.",
+					"type": "boolean"
+				},
+				"restore_version": {
+					"description": "Save version n again as the next version (author only): its english, tree, explanation, assumptions, warnings and compiled_by. A version carries no scope: the rule keeps its own unless evaluation_scope is sent. 404 version_not_found; 400 already_current or version_not_renderable. Not with a version's own fields.",
+					"type": "integer",
+					"minimum": 1,
+					"maximum": 2147483647
 				}
 			},
 			"additionalProperties": false
@@ -18657,10 +18925,37 @@ const operationManifest = [
 					"type": ["integer", "null"],
 					"exclusiveMinimum": 0
 				},
+				"revision": {
+					"description": "Moves on by one with every update. Send it as if_revision.",
+					"type": "integer",
+					"exclusiveMinimum": 0
+				},
 				"author_user_id": {
 					"type": "string",
 					"format": "uuid"
 				},
+				"author": {
+					"type": "object",
+					"properties": {
+						"user_id": {
+							"type": "string",
+							"format": "uuid"
+						},
+						"name": {
+							"description": "Their name; null unless you can list members or this is you, and when they have none set.",
+							"type": ["string", "null"]
+						},
+						"email": {
+							"description": "Sign-in email; null unless you can list member emails or this is you.",
+							"type": ["string", "null"]
+						}
+					},
+					"required": [
+						"user_id",
+						"name",
+						"email"
+					]
+				},
 				"is_author": {
 					"type": "boolean",
 					"description": "Whether you are its author, in your current membership. Only its author edits it; others who see it may only disable or delete it (while shared, only if they manage members)."
@@ -18673,91 +18968,94 @@ const operationManifest = [
 					"type": "string",
 					"format": "date-time"
 				},
-				"current": { "anyOf": [{
-					"type": "object",
-					"properties": {
-						"version": {
-							"type": "integer",
-							"exclusiveMinimum": 0
-						},
-						"english": { "type": "string" },
-						"tree": {
-							"type": "object",
-							"properties": {
-								"version": {
-									"type": "number",
-									"const": 1
-								},
-								"vocabulary": {
-									"type": "string",
-									"description": "Vocabulary version, such as v1."
-								},
-								"when": {
-									"type": "object",
-									"propertyNames": { "type": "string" },
-									"additionalProperties": {},
-									"description": "A condition {column, op, value?, min_confidence?} (see GET /email-rules/vocabulary) or {all: [...]}, {any: [...]}, {not: ...}."
-								},
-								"questions": {
-									"type": "array",
-									"items": { "type": "string" },
-									"description": "Yes/no questions asked once the conditions match; all must be yes."
-								}
+				"current": {
+					"description": "Its current version: its text (english, tree, explanation, assumptions, warnings) and who compiled it. current_version is its number. GET /email-rules lists rules without it.",
+					"anyOf": [{
+						"type": "object",
+						"properties": {
+							"version": {
+								"type": "integer",
+								"exclusiveMinimum": 0
 							},
-							"required": [
-								"version",
-								"vocabulary",
-								"when",
-								"questions"
-							]
-						},
-						"explanation": { "type": "string" },
-						"assumptions": {
-							"type": "array",
-							"items": { "type": "string" }
-						},
-						"warnings": {
-							"type": "array",
-							"items": { "type": "string" }
-						},
-						"compiled_by": {
-							"type": "string",
-							"description": "Who produced the tree, as stated when saved (not verified), such as rule-compiler-v1 or member."
-						},
-						"vocabulary": { "type": "string" },
-						"created_at": {
-							"type": "string",
-							"format": "date-time"
-						},
-						"sql": {
-							"description": "Present only when include_sql was true.",
-							"type": "object",
-							"properties": {
-								"expression": {
-									"type": "string",
-									"description": "A parameterized boolean expression over one row per email."
+							"english": { "type": "string" },
+							"tree": {
+								"type": "object",
+								"properties": {
+									"version": {
+										"type": "number",
+										"const": 1
+									},
+									"vocabulary": {
+										"type": "string",
+										"description": "Vocabulary version, such as v1."
+									},
+									"when": {
+										"type": "object",
+										"propertyNames": { "type": "string" },
+										"additionalProperties": {},
+										"description": "A condition {column, op, value?, min_confidence?} (see GET /email-rules/vocabulary) or {all: [...]}, {any: [...]}, {not: ...}."
+									},
+									"questions": {
+										"type": "array",
+										"items": { "type": "string" },
+										"description": "Yes/no questions asked once the conditions match; all must be yes."
+									}
 								},
-								"params": {
-									"type": "array",
-									"items": {},
-									"description": "The values bound to $1, $2 and so on."
-								}
+								"required": [
+									"version",
+									"vocabulary",
+									"when",
+									"questions"
+								]
 							},
-							"required": ["expression", "params"]
-						}
-					},
-					"required": [
-						"version",
-						"english",
-						"tree",
-						"explanation",
-						"assumptions",
-						"warnings",
-						"compiled_by",
-						"vocabulary",
-						"created_at"
-					]
-				}, { "type": "null" }] },
+							"explanation": { "type": "string" },
+							"assumptions": {
+								"type": "array",
+								"items": { "type": "string" }
+							},
+							"warnings": {
+								"type": "array",
+								"items": { "type": "string" }
+							},
+							"compiled_by": {
+								"type": "string",
+								"description": "Who produced the tree, as stated when saved (not verified), such as rule-compiler-v1 or member."
+							},
+							"vocabulary": { "type": "string" },
+							"created_at": {
+								"type": "string",
+								"format": "date-time"
+							},
+							"sql": {
+								"description": "Present only when include_sql was true.",
+								"type": "object",
+								"properties": {
+									"expression": {
+										"type": "string",
+										"description": "A parameterized boolean expression over one row per email."
+									},
+									"params": {
+										"type": "array",
+										"items": {},
+										"description": "The values bound to $1, $2 and so on."
+									}
+								},
+								"required": ["expression", "params"]
+							}
+						},
+						"required": [
+							"version",
+							"english",
+							"tree",
+							"explanation",
+							"assumptions",
+							"warnings",
+							"compiled_by",
+							"vocabulary",
+							"created_at"
+						]
+					}, { "type": "null" }]
+				},
 				"scope_warnings": {
 					"description": "Names in scope_selection that match nothing this organization receives mail at (a typo, or an inbox not yet in use). Present only when there are some.",
 					"type": "array",
@@ -18789,7 +19087,7 @@ const operationManifest = [
 					}
 				},
 				"expectations_check": {
-					"description": "After a write that saved a version or changed its expectations, if it has some: them, judged on that version from stored classifications without asking its questions. Undecided: one that needs answers not yet kept for that version, is unclassified, skipped or not reached, or that its author does not read. Absent when it could not be judged (the rule changed again, its author cannot be resolved, your access shows headers only, it could not finish in time, or the check failed). Test by rule_id for the rest.",
+					"description": "After a write that saved a version or changed its expectations, if it has some: them, judged on that version from stored classifications without asking its questions. Undecided: one that needs answers not yet kept for that version, is unclassified, skipped or not reached, or that its author does not read. Absent when it could not be judged (the rule changed again, its author cannot be resolved, your access shows headers only, it could not finish in time, or the check failed). Test by rule_id for the rest. With if_expectations_pass, the judgment made before the save, which passed.",
 					"type": "object",
 					"properties": {
 						"version": {
@@ -18817,6 +19115,10 @@ const operationManifest = [
 								"type": "string",
 								"format": "uuid"
 							}
+						},
+						"note": {
+							"description": "On an update that saved a version that did not pass: that it was saved anyway, is current, and whether it is live.",
+							"type": "string"
 						}
 					},
 					"required": [
@@ -18825,6 +19127,41 @@ const operationManifest = [
 						"failed",
 						"undecided"
 					]
+				},
+				"restored_from": {
+					"description": "When this write saved an earlier version again (restore_version): which, and that the scope is not part of a version.",
+					"type": "object",
+					"properties": {
+						"version": {
+							"type": "integer",
+							"exclusiveMinimum": 0
+						},
+						"note": { "type": "string" }
+					},
+					"required": ["version", "note"]
+				},
+				"affects": {
+					"description": "After an update that saved a version: API keys listing the rule, the webhooks they own, and shares this write ended. The rule keeps its state. Absent if not read.",
+					"type": "object",
+					"properties": {
+						"keys": {
+							"type": "integer",
+							"minimum": 0
+						},
+						"endpoints": {
+							"type": "integer",
+							"minimum": 0
+						},
+						"shares_ended": {
+							"type": "integer",
+							"minimum": 0
+						}
+					},
+					"required": [
+						"keys",
+						"endpoints",
+						"shares_ended"
+					]
 				}
 			},
 			"required": [
@@ -46372,11 +46709,11 @@ const operationManifest = [
 					"description": "Whether this is the latest attempt of its delivery: the one recorded last, where a record of no attempt (a rule skip or a held send, attempt_count 0) is latest only when no attempt was made. A retry is recorded as a new attempt with its own id and attempt_count (not always higher than the one before), so an earlier attempt never changes: follow the latest one, or read attempts on any of them."
 				},
 				"retry_scheduled": {
-					"description": "Whether an automatic retry will try this delivery again. A retry is a delivery pass for the email: it sends again to the endpoint the email's routing resolves then (its recorded route, or the current endpoint for its domain), unless the email already reached it, deciding it afresh (its rules, its owner's access, whether it is still on), so true promises a pass, not a delivery to this endpoint. Null on every attempt of a delivery retried or settled on a schedule of its own, which this does not report: a held one (its release settles it, including the attempts it makes itself), a pull attempt, a rule-granted one, and a sent email's or other event's delivery. On the latest attempt that failed, is pending or was skipped in a way still owed, of an email that was not rejected and still has its content, to an endpoint that is still on, takes the event, has an owner the pass would deliver to (a revoked or suspended key, or an owner that may not receive the message, reads false) and has not received the email by another delivery: null while a delivery pass for the email is running (whether another follows is decided when it ends), true when the email has another automatic pass to come (a scheduled retry, the reclaim of a pass that stopped, or the recovery of a first pass that did not finish), and false otherwise. False on every other attempt, including every attempt a later one followed: no automatic retry of the email's delivery will try it again, which does not mean nothing else ever will.",
+					"description": "Whether an automatic retry will try this delivery again. A retry is a delivery pass for the email: it sends again to the endpoint the email's routing resolves then (its recorded route, or the current endpoint for its domain), unless the email already reached it, deciding it afresh (its rules, its owner's access, whether it is still on), so true promises a pass, not a delivery to this endpoint. A rule-granted delivery is retried on a schedule of its own, to the same endpoint, deciding it afresh: on its latest attempt true while another attempt is to come (the delivery's next_attempt_at says when); null while an attempt is under way (read it again shortly), while it waits on an owner who cannot receive mail or on a held endpoint (checked again hourly, and sent once that clears), when it is past its 7-day limit, or when that could not be read just now; and false otherwise, including once the endpoint is off or already has the email. Null on every attempt of a delivery retried or settled on a schedule of its own that this does not report: a held one (its release settles it, including the attempts it makes itself), a pull attempt, and a sent email's or other event's delivery. On the latest attempt that failed, is pending or was skipped in a way still owed, of an email that was not rejected and still has its content, to an endpoint that is still on, takes the event, has an owner the pass would deliver to (a revoked or suspended key, or an owner that may not receive the message, reads false) and has not received the email by another delivery: null while a delivery pass for the email is running (whether another follows is decided when it ends), true when the email has another automatic pass to come (a scheduled retry, the reclaim of a pass that stopped, or the recovery of a first pass that did not finish), and false otherwise. False on every other attempt, including every attempt a later one followed: no automatic retry of the email's delivery will try it again, which does not mean nothing else ever will.",
 					"type": ["boolean", "null"]
 				},
 				"next_attempt_at": {
-					"description": "When the next automatic retry of this delivery is due. Not reported: always null. Whether one is coming is retry_scheduled.",
+					"description": "When the next automatic attempt of a rule-granted delivery is due: set on its latest attempt while retry_scheduled is true. The attempt runs at the first retry pass at or after this time (one runs every few minutes), so a time already past means it is due now. Null otherwise, and on every delivery that is not rule-granted, whose retries are passes for the email with no time reported (whether one is coming is retry_scheduled).",
 					"type": ["string", "null"]
 				},
 				"attempts": {
@@ -46406,7 +46743,7 @@ const operationManifest = [
 								"type": ["string", "null"]
 							},
 							"retry_scheduled": {
-								"description": "Whether an automatic retry will try this delivery again. A retry is a delivery pass for the email: it sends again to the endpoint the email's routing resolves then (its recorded route, or the current endpoint for its domain), unless the email already reached it, deciding it afresh (its rules, its owner's access, whether it is still on), so true promises a pass, not a delivery to this endpoint. Null on every attempt of a delivery retried or settled on a schedule of its own, which this does not report: a held one (its release settles it, including the attempts it makes itself), a pull attempt, a rule-granted one, and a sent email's or other event's delivery. On the latest attempt that failed, is pending or was skipped in a way still owed, of an email that was not rejected and still has its content, to an endpoint that is still on, takes the event, has an owner the pass would deliver to (a revoked or suspended key, or an owner that may not receive the message, reads false) and has not received the email by another delivery: null while a delivery pass for the email is running (whether another follows is decided when it ends), true when the email has another automatic pass to come (a scheduled retry, the reclaim of a pass that stopped, or the recovery of a first pass that did not finish), and false otherwise. False on every other attempt, including every attempt a later one followed: no automatic retry of the email's delivery will try it again, which does not mean nothing else ever will.",
+								"description": "Whether an automatic retry will try this delivery again. A retry is a delivery pass for the email: it sends again to the endpoint the email's routing resolves then (its recorded route, or the current endpoint for its domain), unless the email already reached it, deciding it afresh (its rules, its owner's access, whether it is still on), so true promises a pass, not a delivery to this endpoint. A rule-granted delivery is retried on a schedule of its own, to the same endpoint, deciding it afresh: on its latest attempt true while another attempt is to come (the delivery's next_attempt_at says when); null while an attempt is under way (read it again shortly), while it waits on an owner who cannot receive mail or on a held endpoint (checked again hourly, and sent once that clears), when it is past its 7-day limit, or when that could not be read just now; and false otherwise, including once the endpoint is off or already has the email. Null on every attempt of a delivery retried or settled on a schedule of its own that this does not report: a held one (its release settles it, including the attempts it makes itself), a pull attempt, and a sent email's or other event's delivery. On the latest attempt that failed, is pending or was skipped in a way still owed, of an email that was not rejected and still has its content, to an endpoint that is still on, takes the event, has an owner the pass would deliver to (a revoked or suspended key, or an owner that may not receive the message, reads false) and has not received the email by another delivery: null while a delivery pass for the email is running (whether another follows is decided when it ends), true when the email has another automatic pass to come (a scheduled retry, the reclaim of a pass that stopped, or the recovery of a first pass that did not finish), and false otherwise. False on every other attempt, including every attempt a later one followed: no automatic retry of the email's delivery will try it again, which does not mean nothing else ever will.",
 								"type": ["boolean", "null"]
 							}
 						},
@@ -46620,12 +46957,12 @@ const operationManifest = [
 					},
 					"retry_scheduled": {
 						"type": ["boolean", "null"],
-						"description": "Whether an automatic retry will try this delivery again. A retry is a delivery pass for the email: it sends again to the endpoint the email's routing resolves then (its recorded route, or the current endpoint for its domain), unless the email already reached it, deciding it afresh (its rules, its owner's access, whether it is still on), so true promises a pass, not a delivery to this endpoint. Null on every attempt of a delivery retried or settled on a schedule of its own, which this does not report: a held one (its release settles it, including the attempts it makes itself), a pull attempt, a rule-granted one, and a sent email's or other event's delivery. On the latest attempt that failed, is pending or was skipped in a way still owed, of an email that was not rejected and still has its content, to an endpoint that is still on, takes the event, has an owner the pass would deliver to (a revoked or suspended key, or an owner that may not receive the message, reads false) and has not received the email by another delivery: null while a delivery pass for the email is running (whether another follows is decided when it ends), true when the email has another automatic pass to come (a scheduled retry, the reclaim of a pass that stopped, or the recovery of a first pass that did not finish), and false otherwise. False on every other attempt, including every attempt a later one followed: no automatic retry of the email's delivery will try it again, which does not mean nothing else ever will."
+						"description": "Whether an automatic retry will try this delivery again. A retry is a delivery pass for the email: it sends again to the endpoint the email's routing resolves then (its recorded route, or the current endpoint for its domain), unless the email already reached it, deciding it afresh (its rules, its owner's access, whether it is still on), so true promises a pass, not a delivery to this endpoint. A rule-granted delivery is retried on a schedule of its own, to the same endpoint, deciding it afresh: on its latest attempt true while another attempt is to come (the delivery's next_attempt_at says when); null while an attempt is under way (read it again shortly), while it waits on an owner who cannot receive mail or on a held endpoint (checked again hourly, and sent once that clears), when it is past its 7-day limit, or when that could not be read just now; and false otherwise, including once the endpoint is off or already has the email. Null on every attempt of a delivery retried or settled on a schedule of its own that this does not report: a held one (its release settles it, including the attempts it makes itself), a pull attempt, and a sent email's or other event's delivery. On the latest attempt that failed, is pending or was skipped in a way still owed, of an email that was not rejected and still has its content, to an endpoint that is still on, takes the event, has an owner the pass would deliver to (a revoked or suspended key, or an owner that may not receive the message, reads false) and has not received the email by another delivery: null while a delivery pass for the email is running (whether another follows is decided when it ends), true when the email has another automatic pass to come (a scheduled retry, the reclaim of a pass that stopped, or the recovery of a first pass that did not finish), and false otherwise. False on every other attempt, including every attempt a later one followed: no automatic retry of the email's delivery will try it again, which does not mean nothing else ever will."
 					},
 					"next_attempt_at": {
 						"type": ["string", "null"],
 						"format": "date-time",
-						"description": "When the next automatic retry of this delivery is due. Not reported: always null. Whether one is coming is retry_scheduled."
+						"description": "When the next automatic attempt of a rule-granted delivery is due: set on its latest attempt while retry_scheduled is true. The attempt runs at the first retry pass at or after this time (one runs every few minutes), so a time already past means it is due now. Null otherwise, and on every delivery that is not rule-granted, whose retries are passes for the email with no time reported (whether one is coming is retry_scheduled)."
 					}
 				},
 				"required": [
@@ -48218,7 +48555,8 @@ function expectationsCheckLine(check, ruleId) {
 	else if (undecided.length > 0) parts.push("none failed");
 	if (undecided.length > 0) parts.push(`${undecided.length} undecided (${undecided.join(", ")})`);
 	const rest = undecided.length > 0 ? ` To decide the rest, run \`primitive email-rules test-email-rule --rule-id ${ruleId}\`.` : "";
-	return `Expectations on ${on}: ${parts.length > 0 ? parts.join(", ") : "not passed"}.${rest}`;
+	const note = typeof check.note === "string" && check.note.trim() ? ` ${check.note.trim()}` : "";
+	return `Expectations on ${on}: ${parts.length > 0 ? parts.join(", ") : "not passed"}.${rest}${note}`;
 }
 /** The flag that makes a rule write's exit code follow its expectations_check. */
 const FAIL_ON_EXPECTATIONS_FLAG = "fail-on-expectations";
@@ -48230,7 +48568,7 @@ const FAIL_ON_EXPECTATIONS_FLAG = "fail-on-expectations";
 * `passed` as false or as null when nothing failed and something is
 * undecided; any other check that did not pass exits 1.
 */
-function writtenExpectationsOutcome(check, sentExpectations, ruleId) {
+function writtenExpectationsOutcome(check, sentExpectations, ruleId, saved = "") {
 	const test = `\`primitive email-rules test-email-rule --rule-id ${ruleId}\``;
 	if (!isRecord(check)) {
 		if (!sentExpectations) return {};
@@ -48238,7 +48576,7 @@ function writtenExpectationsOutcome(check, sentExpectations, ruleId) {
 			exitCode: 3,
 			error: {
 				code: "expectations_unchecked",
-				message: `The expectations this write sent were not checked on it. Test them with ${test}.`
+				message: `${saved}The expectations this write sent were not checked on it. Test them with ${test}.`
 			}
 		};
 	}
@@ -48248,25 +48586,61 @@ function writtenExpectationsOutcome(check, sentExpectations, ruleId) {
 		exitCode: 1,
 		error: {
 			code: "expectations_failed",
-			message: `${plural$1(failed.length, "expectation", "expectations")} failed on this write: ${failed.join(", ")}.`
+			message: `${saved}${plural$1(failed.length, "expectation", "expectations")} failed on this write: ${failed.join(", ")}.`
 		}
 	};
 	if (undecided.length > 0) return {
 		exitCode: 3,
 		error: {
 			code: "expectations_undecided",
-			message: `${plural$1(undecided.length, "expectation is", "expectations are")} undecided on this write, which judges them without classifying mail or asking the rule's questions: ${undecided.join(", ")}. Test them with ${test}.`
+			message: `${saved}${plural$1(undecided.length, "expectation is", "expectations are")} undecided on this write, which judges them without classifying mail or asking the rule's questions: ${undecided.join(", ")}. Test them with ${test}.`
 		}
 	};
 	if (check.passed !== true) return {
 		exitCode: 1,
 		error: {
 			code: "expectations_failed",
-			message: "The write's expectations check did not pass."
+			message: `${saved}The write's expectations check did not pass.`
 		}
 	};
 	return {};
 }
+/**
+* update-email-rule's post-save outcome says the write was saved: the server
+* judges a write before saving only when it saves a version or turns the
+* rule active, and refuses with these same codes, saving nothing.
+*/
+const SAVED_UNJUDGED = "The write was saved: the server judges a write before saving only when it saves a version or turns the rule active, so not this one. ";
+/** What a restore_version write saved, as its answer says. */
+function restoredLine(restored, currentVersion) {
+	if (!isRecord(restored) || typeof restored.version !== "number") return void 0;
+	const note = typeof restored.note === "string" && restored.note.trim() ? ` ${restored.note.trim()}` : "";
+	const as = typeof currentVersion === "number" ? `as version ${currentVersion}, now current` : "as the current version";
+	return `Saved version ${restored.version} again ${as}.${note}`;
+}
+/**
+* Who an update that saved a version reaches, as its answer counts them: the
+* keys listing the rule, the webhooks those keys own, and the shares the
+* write ended.
+*/
+function affectsLine(affects) {
+	if (!isRecord(affects)) return void 0;
+	const count = (value) => typeof value === "number" && Number.isFinite(value) ? value : void 0;
+	const keys = count(affects.keys);
+	const endpoints = count(affects.endpoints);
+	const shares = count(affects.shares_ended);
+	if (keys === void 0 || endpoints === void 0 || shares === void 0) return void 0;
+	return `This version reaches ${plural$1(keys, "API key", "API keys")} listing the rule and ${plural$1(endpoints, "webhook", "webhooks")} those keys own; it ended ${plural$1(shares, "share", "shares")}. The rule keeps its state.`;
+}
+/** The rule's author, by name and email where the answer gives them. */
+function authorLine(author) {
+	if (!isRecord(author) || typeof author.user_id !== "string") return void 0;
+	const name = typeof author.name === "string" && author.name.trim() ? author.name.trim() : null;
+	const email = typeof author.email === "string" && author.email.trim() ? author.email.trim() : null;
+	if (name && email) return `Author: ${name} <${email}>`;
+	if (name || email) return `Author: ${name ?? email}`;
+	return `Author: user ${author.user_id} (name and email not shown to you)`;
+}
 /** The stderr report of a rule written by create-email-rule or update-email-rule. */
 function writtenEmailRuleReport(data, request) {
 	if (!isRecord(data)) return { lines: [] };
@@ -48274,6 +48648,10 @@ function writtenEmailRuleReport(data, request) {
 	const ruleId = typeof rule.id === "string" ? rule.id : "<rule-id>";
 	const lines = scopeWarningLines(rule.scope_warnings);
 	if (rule.kind === "do_not_share") lines.unshift(`This rule blocks sharing (kind do_not_share): while it is active, no rule shares an email it matches.${typeof rule.state === "string" && rule.state !== "active" ? " It blocks nothing until it is active." : ""}`);
+	const restored = restoredLine(rule.restored_from, rule.current_version);
+	if (restored) lines.push(restored);
+	const reach = affectsLine(rule.affects);
+	if (reach) lines.push(reach);
 	const sentExpectations = isRecord(request.body) && isRecord(request.body.expectations);
 	const checked = expectationsCheckLine(rule.expectations_check, ruleId);
 	if (checked) lines.push(checked);
@@ -48281,9 +48659,13 @@ function writtenEmailRuleReport(data, request) {
 	if (request.flags?.["fail-on-expectations"] !== true) return { lines };
 	return {
 		lines,
-		...writtenExpectationsOutcome(rule.expectations_check, sentExpectations, ruleId)
+		...writtenExpectationsOutcome(rule.expectations_check, sentExpectations, ruleId, isUpdate(request) ? SAVED_UNJUDGED : "")
 	};
 }
+/** Whether a rule write is an update: it names the rule in its path. */
+function isUpdate(request) {
+	return typeof request.path?.id === "string";
+}
 /**
 * A rule write's exit code when its report cannot be built, under
 * --fail-on-expectations: 1 for a check that is there and did not pass, and 3
@@ -48350,9 +48732,93 @@ function versionMovedHint(payload, ruleId) {
 	const read = `Read it again with \`primitive email-rules get-email-rule ${id}\` and reapply your change to what it shows`;
 	return current === void 0 ? `Hint: the rule's version is not the if_version you sent, so nothing was saved, and the answer did not give its current version. ${read}.` : `Hint: the rule's current version is ${current}, not the if_version you sent, so nothing was saved. ${read}, then retry with --if-version ${current}.`;
 }
-/** A write's --fail-on-expectations, the same on create and update. */
+/** The read-again advice every conflict ends with. */
+function readAgain(id) {
+	return `Read it again with \`primitive email-rules get-email-rule ${id}\` and send the write again`;
+}
+/**
+* The hint for update-email-rule's refusals: an email_rule_conflict by its
+* details.reason (version_moved, revision_moved, expectations_moved,
+* rule_changed), and the expectations guard's expectations_failed,
+* expectations_undecided and no_expectations. Nothing was saved in any of
+* them.
+*/
+function updateEmailRuleErrorHint(code, payload, ruleId, body) {
+	const id = typeof ruleId === "string" && ruleId ? ruleId : "<rule-id>";
+	const details = errorDetails(payload);
+	const guarded = isRecord(body) && body.if_expectations_pass === true;
+	if (code === "email_rule_conflict") switch (details.reason) {
+		case "version_moved": return versionMovedHint(payload, ruleId);
+		case "revision_moved": {
+			const current = typeof details.current_revision === "number" ? details.current_revision : void 0;
+			return current === void 0 ? `Hint: the rule was updated since the if_revision you sent, so nothing was saved. ${readAgain(id)} with --if-revision set to its revision.` : `Hint: the rule is now at revision ${current}, not the if_revision you sent, so nothing was saved. ${readAgain(id)}, reapplying your change to what it shows, with --if-revision ${current}.`;
+		}
+		case "expectations_moved": return `Hint: the rule's saved expectations changed while this write was checked against them, so nothing was saved. ${readAgain(id)}.`;
+		case "rule_changed": return guarded ? `Hint: the rule changed after this write was judged against its expectations and before it was saved, so saving it would have gone unchecked; nothing was saved. ${readAgain(id)}.` : `Hint: the rule changed while this write was being saved, so nothing was saved. ${readAgain(id)}.`;
+		default: return;
+	}
+	if (code === "expectations_failed" || code === "expectations_undecided") {
+		const check = isRecord(details.expectations_check) ? details.expectations_check : {};
+		const failed = Array.isArray(check.failed) ? check.failed : [];
+		const undecided = Array.isArray(check.undecided) ? check.undecided : [];
+		const parts = [...failed.length > 0 ? [`failed: ${failed.join(", ")}`] : [], ...undecided.length > 0 ? [`undecided: ${undecided.join(", ")}`] : []];
+		return `Hint: the rule, as this write would leave it, was judged against its expectations before saving (if_expectations_pass), and nothing was saved.${parts.length > 0 ? ` Expectations ${parts.join("; ")}.` : ""}${code === "expectations_failed" ? "" : ` ${UNDECIDED_NEXT_STEP[String(details.reason)] ?? UNDECIDED_NEXT_STEP.none}`} The command exits ${updateEmailRuleErrorExitCode(payload) ?? 1}.`;
+	}
+	if (code === "no_expectations") return "Hint: nothing was saved. Give the rule expectations with --expectations-file (in this write or before it), or send the write without if_expectations_pass (--fail-on-expectations or --if-expectations-pass).";
+}
+/** What to do about an undecided judgment, by details.reason ("none": no reason given). */
+const UNDECIDED_NEXT_STEP = {
+	none: "Some could not be decided yet (mail not classified yet, or a question not answered yet); send the write again later.",
+	deadline: "The judgment ran out of time; send the write again.",
+	error: "The judgment could not finish; send the write again.",
+	client_gone: "The request ended before the write was saved; send it again.",
+	author_unresolvable: "The rule cannot run as its author over the mail it would cover (details.author_reason), so sending the write again will not decide them."
+};
+/**
+* update-email-rule's exit code for the expectations guard's refusals: 1 when
+* one failed, or when they cannot be decided by trying again (the rule cannot
+* run as its author); 3 when trying again later can decide them.
+*/
+function updateEmailRuleErrorExitCode(payload) {
+	const code = isRecord(payload) ? payload.code : void 0;
+	if (code === "expectations_failed") return 1;
+	if (code !== "expectations_undecided") return void 0;
+	return errorDetails(payload).reason === "author_unresolvable" ? 1 : 3;
+}
+/** The stderr report of compile-email-rule: how many recent emails it holds for. */
+function compileEmailRuleReport(data) {
+	if (!isRecord(data)) return { lines: [] };
+	const breadth = data.breadth;
+	if (!isRecord(breadth) || typeof breadth.checked !== "number" || typeof breadth.matched !== "number") return { lines: [] };
+	return { lines: [`Breadth: its conditions hold for ${breadth.matched} of ${plural$1(breadth.checked, "recent email", "recent emails")} checked in your own mailboxes, whatever scope you save it with.`] };
+}
+/** The stderr report of get-email-rule: who wrote it, and its revision. */
+function getEmailRuleReport(data) {
+	if (!isRecord(data)) return { lines: [] };
+	const lines = [];
+	const author = authorLine(data.author);
+	if (author) lines.push(author);
+	if (typeof data.revision === "number") lines.push(`Revision ${data.revision}: pass --if-revision ${data.revision} to update-email-rule so a change made since is never replaced unseen.`);
+	return { lines };
+}
+/** create-email-rule's --fail-on-expectations: the exit code follows the check made after saving. */
 const FAIL_ON_EXPECTATIONS_HELP = "Exit 1 when an expectation in the answer's expectations_check failed, and 3 when none failed but one is undecided or the expectations this write sent were not checked (test the rule to decide). Without it the command exits 0 whatever the check says.";
+/** update-email-rule's --fail-on-expectations: the server refuses the write. */
+const UPDATE_FAIL_ON_EXPECTATIONS_HELP = "Refuse the write unless the rule, as this write would leave it, passes its expectations. It sends if_expectations_pass (over any in --body-file or --raw-body), so the server judges a new version, a restored one, a new scope or turning the rule active before saving, and saves nothing when one failed (exit 1), one is undecided (exit 3, or 1 when the rule cannot run as its author) or the rule has none (exit 1). It can take as long as a test of the rule; the command waits for it. Judging needs a credential that reads the mail's content. A write the server does not judge (one changing only expectations, say) is saved, and the exit code then follows the answer's expectations_check, as on create. With --json, a refused write's document holds the API's error alone; a saved write's holds the rule.";
 const EXPECTATION_FLAG_NOTE = "Replaces any expect in --body-file or --raw-body. The answer reports them in expectations (passed, counts, results) and the exit code follows it; see --help-full.";
+/**
+* update-email-rule's --fail-on-expectations sends if_expectations_pass, over
+* any in the body. Asking for it while turning it off is refused.
+*/
+function expectationsGuardBodyFields(flags) {
+	if (flags["fail-on-expectations"] !== true) return [];
+	if (flags["if-expectations-pass"] === false) throw usageError("--fail-on-expectations asks the server to judge the write before saving it; it cannot be combined with --no-if-expectations-pass.");
+	return [{
+		flag: `--${FAIL_ON_EXPECTATIONS_FLAG}`,
+		property: "if_expectations_pass",
+		value: true
+	}];
+}
 const EMAIL_RULE_OPERATION_EXTENSIONS = {
 	testEmailRule: {
 		flags: {
@@ -48392,13 +48858,22 @@ const EMAIL_RULE_OPERATION_EXTENSIONS = {
 	updateEmailRule: {
 		flags: {
 			"expectations-file": Flags.string({ description: "A JSON file holding the emails the rule must match and must not, such as {\"match\": [\"<email-id>\"], \"no_match\": [\"<email-id>\"]}, replacing its saved expectations; a file holding null removes them. Sets expectations, over any in --body-file or --raw-body; the answer judges them in expectations_check (passed, decided, failed, undecided); the report test-email-rule answers with is named expectations instead." }),
-			[FAIL_ON_EXPECTATIONS_FLAG]: Flags.boolean({ description: FAIL_ON_EXPECTATIONS_HELP })
+			[FAIL_ON_EXPECTATIONS_FLAG]: Flags.boolean({ description: UPDATE_FAIL_ON_EXPECTATIONS_HELP })
 		},
-		bodyFields: expectationsBodyFields(true),
+		bodyFields: (flags) => [...expectationsBodyFields(true)(flags), ...expectationsGuardBodyFields(flags)],
 		bodyProperties: ["expectations"],
+		errorExitCode: updateEmailRuleErrorExitCode,
 		fallbackExitCode: writtenFallbackExitCode,
 		report: writtenEmailRuleReport
 	},
+	compileEmailRule: {
+		flags: {},
+		report: compileEmailRuleReport
+	},
+	getEmailRule: {
+		flags: {},
+		report: getEmailRuleReport
+	},
 	getEmailRuleScope: {
 		flags: {},
 		report: emailRuleScopeReport
@@ -49625,7 +50100,6 @@ function serializeErrorPayload(payload) {
 * outcome is unknown.
 */
 function buildThrownSendFailureEnvelope(params) {
-	const message = params.error instanceof Error ? params.error.message : String(params.error);
 	const outcome = params.requestStarted ? "uncertain" : "not_sent";
 	return {
 		outcome,
@@ -49637,7 +50111,7 @@ function buildThrownSendFailureEnvelope(params) {
 		}),
 		sent: null,
 		http_status: null,
-		error: { message },
+		error: thrownErrorBody(params.error),
 		follow_up_commands: params.requestStarted && params.attemptStartedAtIso ? buildSendCommandFollowUps({
 			attemptStartedAtIso: params.attemptStartedAtIso,
 			idempotencyKey: params.idempotencyKey,
@@ -50530,7 +51004,7 @@ function savedConnectedProfiles(configDir, exclude) {
 */
 async function otherProfiles(configDir, session, current) {
 	if (session) try {
-		const { connectedProfilesForSession } = await import("./machine-session-3H-rNH8v.js").then((n) => n.s);
+		const { connectedProfilesForSession } = await import("./machine-session-YQWxPePp.js").then((n) => n.s);
 		return {
 			inSession: true,
 			profiles: connectedProfilesForSession(configDir, session, current)
@@ -51637,7 +52111,7 @@ const OPERATION_ERROR_HINTS = {
 	inviteOrganizationMember: (code, body, payload) => inviteRefusalHint(code, body, payload),
 	createEndpoint: (code, body, payload) => createEndpointRuleRequestHint(code, body, payload),
 	updateEndpoint: (code, body, payload) => updateEndpointRuleRequestHint(code, body, payload),
-	updateEmailRule: (code, _body, payload, path) => code === "email_rule_conflict" ? versionMovedHint(payload, path?.id) : void 0,
+	updateEmailRule: (code, body, payload, path) => updateEmailRuleErrorHint(code, payload, path?.id, body),
 	verifyDomain: (code, _body, payload) => code === "dns_verification_failed" ? domainVerificationFailedHint(payload) : void 0,
 	addDomain: (code, body) => {
 		if (code === "mail_relay_unavailable") return MAIL_RELAY_UNAVAILABLE_MESSAGE;
@@ -51867,7 +52341,7 @@ function createOperationCommand(operation) {
 						}
 					});
 					if (operation.sdkName === "getEmail" && extractErrorCode(errorPayload) === "not_found" && typeof parsedFlags.id === "string") await explainPendingMailNotFound(this.config.configDir, parsedFlags.id);
-					process.exitCode = 1;
+					process.exitCode = extension?.errorExitCode?.(errorPayload) || 1;
 					return;
 				}
 				if (operation.binaryResponse) {
@@ -52005,4 +52479,4 @@ const EMPTY_RESULT_HINTS = {
 function canonicalizeCliReferences(description) {
 	return description.replaceAll("`primitive emails:latest`", "`primitive emails latest`").replaceAll("`primitive describe emails:get-email | jq '.responseSchema.properties'`", "`primitive describe emails:get | jq '.responseSchema.properties'`");
 }
-export { replyExpectation as $, createCliApiClient as $t, bareAddress$1 as A, connectNextSteps as At, wakeReadCommand as B, withFlagSuggestion as Bt, terminalApprovalIo as C, sendWaitClampNotice as Ct, listenForCopyHotkey as D, thrownErrorExitCode as Dt, formatBrowserLoginInstructions as E, successfulSendOutcome as Et, readThreadContext as F, currentMailSessionKey as Ft, clearReadPendingMail as G, isEmailId as Gt, wakeRelationship as H, readCallerMailFor as Ht, sentInThread as I, detectAgentRuntime as It, recordPendingMail as J, ATTACHMENT_WAIT_MAX_MS as Jt, pendingMailPath as K, noFactsMessage as Kt, serverMuted as L, detectRuntimeSession as Lt, displayAddress as M, generatedAgentName as Mt, formatMailWakeLine as N, identitySuggestions as Nt, openBrowser as O, DEFAULT_ENROLL_NAME as Ot, latestOwnOutbound as P, loadSkillLine as Pt, readEmailInteraction as Q, createAuthenticatedCliApiClient as Qt, serverRelationship as R, runtimeSessionVariableList as Rt, promptLine as S, sendOutcomeExitCode as St, canOfferCopyHotkey as T, serializeErrorPayload as Tt, claimPendingMail as U, classificationFactLines as Ut, wakeRecipientField as V, emptyEmailListHint as Vt, clearConsumedPendingMail as W, classificationOf as Wt, interactionHumanLine as X, ConnectedAgentKeyRequiredError as Xt, removePendingMail as Y, withAttachmentWait as Yt, interactionNextActions as Z, SAVED_CLI_OAUTH_SESSION_EXPIRED_MESSAGE as Zt, writeErrorWithHints as _, formatSendFailureSummary as _t, createOperationCommand as a, RESTRICTED_ROLE_NOTE as an, apiResultHttpStatus as at, STEP_UP_TOKEN_FLAG_DESCRIPTION as b, reportSendCommandResult as bt, formatErrorPayload as c, isBuiltInRoleKey as cn, buildThrownSendFailureEnvelope as ct, isGrantRefusal as d, roleKeyText as dn, deriveSendIdempotencyKey as dt, refreshStoredCliCredentials as en, replyInteractionWarning as et, parameterFlagName as f, switchCurrentOrg as fn, excludeSignalReplies as ft, takesStepUp as g, operationManifest as gn, formatPriorRepliesWarning as gt, surfaceUnauthorizedHint as h, setKnownCommands as hn, formatPriorRepliesCheckSkipped as ht, TIME_FLAG_DESCRIPTION as i, CliOrgRefusedError as in, SEND_OUTCOME_HELP as it, describeWake as j, defaultConnectionName as jt, explainPendingMailNotFound as k, cliInvocation as kt, hasControlCharacter as l, revokeUserLogin as ln, checkPriorReplies as lt, runWithTiming as m, sanitizeForTerminal as mn, formatDeletedEarlierSendNotice as mt, API_ERROR_CODES as n, resolveCliApiRequestConfig as nn, IDEMPOTENCY_KEY_FLAG_DESCRIPTION as nt, extractErrorCode as o, credentialsFromUserLogin as on, assertValidIdempotencyKey as ot, readTextFileFlag as p, routeWarningLines as pn, followUpCommandPrefix as pt, readPendingMail as q, ATTACHMENT_WAIT_FLAG_DESCRIPTION as qt, OPERATION_PATH_FLAGS as r, selectedOrgFromEnv as rn, MAX_SEND_WAIT_TIMEOUT_MS as rt, extractErrorPayload as s, fetchCliOrgs as sn, buildFollowUpCommand as st, API_BASE_URL_FLAG_DESCRIPTION as t, refuseOrgSelectionForProfile as tn, wakeInteractionSentence as tt, headerFlagName as u, roleKeyLabel as un, classifySendError as ut, BROWSER_FLAG_DESCRIPTION as v, formatSendRecordFailureSummary as vt, withApproval as w, sentHistoryWindowStart as wt, approveThenRerunHint as x, sendIdentityFields as xt, STEP_UP_HEADER as y, priorRepliesThatWentOut as yt, skillFirstLine as z, formatAlreadySentNotice as zt };
+export { readEmailInteraction as $, SAVED_CLI_OAUTH_SESSION_EXPIRED_MESSAGE as $t, explainPendingMailNotFound as A, cliInvocation as At, skillFirstLine as B, formatAlreadySentNotice as Bt, promptLine as C, sendOutcomeExitCode as Ct, formatBrowserLoginInstructions as D, successfulSendOutcome as Dt, canOfferCopyHotkey as E, serializeErrorPayload as Et, latestOwnOutbound as F, loadSkillLine as Ft, clearConsumedPendingMail as G, classificationFactLines as Gt, wakeRecipientField as H, emptyEmailListHint as Ht, readThreadContext as I, currentMailSessionKey as It, readPendingMail as J, noFactsMessage as Jt, clearReadPendingMail as K, classificationOf as Kt, sentInThread as L, detectAgentRuntime as Lt, describeWake as M, defaultConnectionName as Mt, displayAddress as N, generatedAgentName as Nt, listenForCopyHotkey as O, thrownErrorExitCode as Ot, formatMailWakeLine as P, identitySuggestions as Pt, interactionNextActions as Q, ConnectedAgentKeyRequiredError as Qt, serverMuted as R, detectRuntimeSession as Rt, approveThenRerunHint as S, sendIdentityFields as St, withApproval as T, sentHistoryWindowStart as Tt, wakeRelationship as U, mailReach as Ut, wakeReadCommand as V, withFlagSuggestion as Vt, claimPendingMail as W, readCallerMailFor as Wt, removePendingMail as X, ATTACHMENT_WAIT_MAX_MS as Xt, recordPendingMail as Y, ATTACHMENT_WAIT_FLAG_DESCRIPTION as Yt, interactionHumanLine as Z, withAttachmentWait as Zt, takesStepUp as _, setKnownCommands as _n, formatPriorRepliesWarning as _t, createOperationCommand as a, selectedOrgFromEnv as an, SEND_OUTCOME_HELP as at, STEP_UP_HEADER as b, priorRepliesThatWentOut as bt, formatErrorPayload as c, credentialsFromUserLogin as cn, buildFollowUpCommand as ct, isGrantRefusal as d, revokeUserLogin as dn, classifySendError as dt, createAuthenticatedCliApiClient as en, replyExpectation as et, parameterFlagName as f, roleKeyLabel as fn, deriveSendIdempotencyKey as ft, surfaceUnauthorizedHint as g, sanitizeForTerminal as gn, formatPriorRepliesCheckSkipped as gt, runWithTiming as h, routeWarningLines as hn, formatDeletedEarlierSendNotice as ht, TIME_FLAG_DESCRIPTION as i, resolveCliApiRequestConfig as in, MAX_SEND_WAIT_TIMEOUT_MS as it, bareAddress$1 as j, connectNextSteps as jt, openBrowser as k, DEFAULT_ENROLL_NAME as kt, hasControlCharacter as l, fetchCliOrgs as ln, buildThrownSendFailureEnvelope as lt, refusalDetails as m, switchCurrentOrg as mn, followUpCommandPrefix as mt, API_ERROR_CODES as n, refreshStoredCliCredentials as nn, wakeInteractionSentence as nt, extractErrorCode as o, CliOrgRefusedError as on, apiResultHttpStatus as ot, readTextFileFlag as p, roleKeyText as pn, excludeSignalReplies as pt, pendingMailPath as q, isEmailId as qt, OPERATION_PATH_FLAGS as r, refuseOrgSelectionForProfile as rn, IDEMPOTENCY_KEY_FLAG_DESCRIPTION as rt, extractErrorPayload as s, RESTRICTED_ROLE_NOTE as sn, assertValidIdempotencyKey as st, API_BASE_URL_FLAG_DESCRIPTION as t, createCliApiClient as tn, replyInteractionWarning as tt, headerFlagName as u, isBuiltInRoleKey as un, checkPriorReplies as ut, writeErrorWithHints as v, operationManifest as vn, formatSendFailureSummary as vt, terminalApprovalIo as w, sendWaitClampNotice as wt, STEP_UP_TOKEN_FLAG_DESCRIPTION as x, reportSendCommandResult as xt, BROWSER_FLAG_DESCRIPTION as y, formatSendRecordFailureSummary as yt, serverRelationship as z, runtimeSessionVariableList as zt };