@apilift/cli 1.5.5 → 1.5.6-dev.1792431466.96ed48a06d2c8cb1e147eada2a56b2e5f4f8cb92

package/dist/apilift.js

@@ -30696,6 +30696,10 @@ var init_drafts = __esm({
         const row = this.state.db.prepare("SELECT state,response_path,response_digest FROM discovery_request_attempt WHERE draft_id=? AND fingerprint=?").get(draftId, fingerprint2);
         return row ? { state: row.state, responsePath: row.response_path, responseDigest: row.response_digest } : null;
       }
+      hasDispatchedRequestAttempt(draftId) {
+        this.requestAttempts();
+        return Boolean(this.state.db.prepare("SELECT 1 FROM discovery_request_attempt WHERE draft_id=? AND state!='client-rejected' LIMIT 1").get(draftId));
+      }
       saveRequestAttempt(draftId, fingerprint2, state, responsePath, responseDigest) {
         this.requestAttempts();
         this.state.db.prepare("INSERT INTO discovery_request_attempt (draft_id,fingerprint,state,response_path,response_digest) VALUES (?,?,?,?,?) ON CONFLICT(draft_id,fingerprint) DO UPDATE SET state=excluded.state,response_path=CASE WHEN excluded.state='possibly-dispatched' AND excluded.response_path IS NULL THEN NULL ELSE COALESCE(excluded.response_path,discovery_request_attempt.response_path) END,response_digest=CASE WHEN excluded.state='possibly-dispatched' AND excluded.response_path IS NULL THEN NULL ELSE COALESCE(excluded.response_digest,discovery_request_attempt.response_digest) END").run(draftId, fingerprint2, state, responsePath ?? null, responseDigest ?? null);
@@ -34699,6 +34703,15 @@ Abandon removal: ${command4(invocation, "discover discard")}
     release();
   }
 }
+function primaryInputSchema(schema) {
+  if (typeof schema === "boolean" || !schema.properties) return schema;
+  return { ...schema, properties: Object.fromEntries(Object.entries(schema.properties).map(([name, property]) => {
+    if (typeof property !== "object" || property === null) return [name, property];
+    const input2 = { ...property };
+    delete input2["x-source"];
+    return [name, input2];
+  })) };
+}
 async function verificationIdentity(api, checked) {
   const kind = backendKind(checked.draft.kind), definition2 = checked.definition;
   const executable = await executableHash(kind, checked.draft.name, definition2);
@@ -34717,8 +34730,9 @@ async function verificationIdentity(api, checked) {
     }
     const closure = await closureHash(executable, deps);
     const fingerprint3 = await hashJson({ executable, closure, inputs: checked.envelope?.verification?.inputs ?? {} });
-    const primary = await hashJson({ appId: checked.draft.appId, name: checked.draft.name, effect: "effect" in action ? action.effect : null, request: "request" in action ? action.request : null, inputs: "inputs" in action ? action.inputs ? semanticSchema(action.inputs) : null : null, generated: "generated" in action ? action.generated ?? null : null, samples: checked.envelope?.verification?.inputs ?? {}, deps });
-    return { executable, closure, fingerprint: fingerprint3, primary };
+    const primaryIdentity = { appId: checked.draft.appId, name: checked.draft.name, effect: "effect" in action ? action.effect : null, request: "request" in action ? action.request : null, inputs: "inputs" in action ? action.inputs ? semanticSchema(action.inputs) : null : null, generated: "generated" in action ? action.generated ?? null : null, samples: checked.envelope?.verification?.inputs ?? {}, deps };
+    const primary = await hashJson({ ...primaryIdentity, inputs: primaryIdentity.inputs === null ? null : primaryInputSchema(primaryIdentity.inputs) });
+    return { executable, closure, fingerprint: fingerprint3, primary, legacyPrimary: await hashJson(primaryIdentity) };
   }
   const fingerprint2 = await hashJson({ executable, inputs: checked.envelope?.verification?.inputs ?? {} });
   return { executable, fingerprint: fingerprint2 };
@@ -34912,15 +34926,16 @@ async function verifyDraft(invocation, api, state, store, session, fetcher, root
   const write = Boolean(action && "effect" in action && action.effect !== "read");
   const proofOnly = invocation.flags.includes("proof-only");
   if (proofOnly && !write) return fail5("--proof-only requires a mutation draft with a saved successful primary response. No app request was sent.\n");
-  const primaryFingerprint = await hashJson({ primary: "primary" in identity2 ? identity2.primary : identity2.fingerprint, browserTab: transport.mode === "browser" ? envelope.capture?.tab || state.browserTab(session.id, draft.appId) || null : null, credential: state.useSession(session.id, draft.appId)?.credentials[action && "transport" in action ? action.transport : draft.name] ?? null });
-  const previous = store.requestAttempt(draft.id, primaryFingerprint);
+  const primaryContext = { browserTab: transport.mode === "browser" ? envelope.capture?.tab || state.browserTab(session.id, draft.appId) || null : null, credential: state.useSession(session.id, draft.appId)?.credentials[action && "transport" in action ? action.transport : draft.name] ?? null };
+  const primaryFingerprint = await hashJson({ primary: "primary" in identity2 ? identity2.primary : identity2.fingerprint, ...primaryContext });
+  const previous = store.requestAttempt(draft.id, primaryFingerprint) ?? ("legacyPrimary" in identity2 ? store.requestAttempt(draft.id, await hashJson({ primary: identity2.legacyPrimary, ...primaryContext })) : null);
   const legacy = store.attempt(draft.id);
   const proofCommand = command4(invocation, "discover run --proof-only");
   const evidence = store.evidence(draft.id);
   if (write && !proofOnly && evidence?.fingerprint === identity2.fingerprint && (previous?.state === "success" || legacy?.fingerprint === identity2.fingerprint && legacy.state === "success")) return ok4(`This configured mutation was already tested successfully. Saved output: ${evidence.resultPath}
 Review it and publish; no app request was sent.
 `);
-  if (write && !proofOnly && (previous && previous.state !== "client-rejected" || !previous && legacy && legacy.state !== "client-rejected")) return fail5(`This mutation was already sent or may have reached the app. Do not repeat it. ${previous?.responsePath ? `Inspect the saved response: ${previous.responsePath}. After repairing response/proof, check without repeating the write: ${proofCommand}` : "No reusable response is available; inspect the app through an authorized read before choosing another test."}
+  if (write && !proofOnly && (store.hasDispatchedRequestAttempt(draft.id) || legacy && legacy.state !== "client-rejected")) return fail5(`This mutation was already sent or may have reached the app. Do not repeat it. ${previous?.responsePath ? `Inspect the saved response: ${previous.responsePath}. After repairing response/proof, check without repeating the write: ${proofCommand}` : "No saved response matches the current contract. Restore the original test definition for proof-only recovery, or inspect the app through an authorized read."}
 `, 12);
   let primaryEvidence;
   if (proofOnly) {
@@ -34962,7 +34977,7 @@ ${responsePath ? `Saved primary response and test inputs: ${responsePath}
 ` : ""}`, executed.exitCode, executed.dispatched);
   }
   withBaselines(root, (baselines) => baselines.finishPreparation(session.id, draft.appSlug, draft.appId, transport.mode));
-  if (write) store.saveRequestAttempt(draft.id, primaryFingerprint, "success");
+  if (write) store.saveRequestAttempt(draft.id, primaryFingerprint, "success", proofOnly ? previous?.responsePath ?? void 0 : void 0, proofOnly ? previous?.responseDigest ?? void 0 : void 0);
   const resultPath = store.artifactPath(draft.id, "verification.json");
   writeFileSync8(resultPath, `${JSON.stringify(executed.output, null, 2)}
 `, { flag: "wx", mode: 384 });

package/dist/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "apilift",
-  "version": "1.5.5",
+  "version": "1.5.6-dev.1792431466.96ed48a06d2c8cb1e147eada2a56b2e5f4f8cb92",
   "description": "Use logged-in apps and discover missing actions with Apilift.",
   "author": {
     "name": "Apilift"

package/dist/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "apilift",
-  "version": "1.5.5",
+  "version": "1.5.6-dev.1792431466.96ed48a06d2c8cb1e147eada2a56b2e5f4f8cb92",
   "description": "Use logged-in apps and discover missing actions with Apilift.",
   "author": {
     "name": "Apilift"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apilift/cli",
-  "version": "1.5.5",
+  "version": "1.5.6-dev.1792431466.96ed48a06d2c8cb1e147eada2a56b2e5f4f8cb92",
   "private": false,
   "type": "module",
   "bin": {
@@ -36,7 +36,7 @@
   "engines": {
     "node": ">=24.16.0 <27"
   },
-  "gitHead": "37eceded937e76934ee957dae4e8ea4e72935825",
+  "gitHead": "96ed48a06d2c8cb1e147eada2a56b2e5f4f8cb92",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/egor-sergeev/apilift.git",