@plune-ai/cli 0.23.0 → 0.24.0

package/README.md

@@ -119,7 +119,7 @@ the last resort, used only when `PLUNE_TOKEN` is set nowhere else. Nothing write
 | `plune init` | Scaffold `plune.yaml`, a sample dataset, and `.env.example`. Flags: `--yes` (non-interactive), `--force`. |
 | `plune login` | Save a [Plune platform](https://plune.ai/platform) API token so `sync` and `ingest` can reach it. The token is **checked against the API before it is saved**, so a wrong one fails here rather than two commands later. Get one at `https://beta.plune.ai` → Account → API tokens. Flags: `--token <token>` (omit to paste it or pipe it via stdin), `--skip-verify` (save without checking, for offline setup). In CI, skip this step: every platform command reads `PLUNE_TOKEN` from the environment first, and the saved login only when it is not set. |
 | `plune logout` | Remove the saved token. |
-| `plune sync` | Upload the latest local run to the platform. Flags: `--file <path>` to send a specific run JSON, `--fail-on-failures` to read the run's summary back once after the upload and exit with [the gate](#a-release-gate---fail-on-failures)'s code. |
+| `plune sync` | Upload the latest local run to the platform. Flags: `--file <path>` to send a specific run JSON, `--fail-on-failures` to read the run's summary back once after the upload and exit with [the gate](#a-release-gate---fail-on-failures)'s code. Each upload carries an `Idempotency-Key` (SHA-256 of the body), so sending the same run again returns the same run rather than creating a second one. |
 | `plune run import <file>` | Turn a **JUnit XML** or **Playwright JSON** report, or an **Allure `allure-results` folder**, into a run in Plune. Needs no provider key — nothing is generated. Flags: `--format junit\|playwright-json\|allure` (detected from the file when omitted; a folder is Allure), `--key <externalKey>` to land several reports in one run (with `PLUNE_SHARED_RUN=1` — see below), `--create` to offer unmatched tests to the review queue, `--fail-on-missing-attachments` to exit 1 when a file a JUnit report names with `[[ATTACHMENT\|path]]`, or an Allure result names as a `source`, is not there (the results are sent either way), `--upload-concurrency <n>` for files uploaded at once ([1 to 32, default 4](#many-screenshots-upload-concurrency-and-retries)), `--fail-on-failures` to exit with [the gate](#a-release-gate---fail-on-failures)'s code on the summary the platform froze when this import finished the run. |
 | `plune run start` | Open a platform run — or join the one already carrying `--key` — and print its id. Flags: `--key <externalKey>` (generated when absent), `--json` for one machine-readable line. |
 | `plune run finish <id>` | Close a platform run. This is what the reporter tells you to do for a run it had to leave open. Flags: `--terminate` to record it as cut short, `--reason <text>`, `--fail-on-failures` to exit with [the gate](#a-release-gate---fail-on-failures)'s code on the summary the platform froze. |

package/dist/cli.cjs

@@ -4086,12 +4086,18 @@ async function handleSync(deps = {}) {
   const run = readRun(cwd, deps.file);
   const doFetch = deps.fetchImpl ?? fetch;
   const endpoint = `${apiUrl}/v1/runs`;
+  const payload = JSON.stringify(run);
+  const idempotencyKey = (0, import_node_crypto4.createHash)("sha256").update(payload).digest("hex");
   let res;
   try {
     res = await doFetch(endpoint, {
       method: "POST",
-      headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
-      body: JSON.stringify(run)
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${token}`,
+        "idempotency-key": idempotencyKey
+      },
+      body: payload
     });
   } catch {
     throw new SyncNetworkError(apiUrl);
@@ -4127,11 +4133,12 @@ function reportSyncFailure(err, write) {
   }
   return null;
 }
-var fs8, path9, NotLoggedInError, TokenRejectedError, SyncFileError, SyncNetworkError, SyncHttpError;
+var import_node_crypto4, fs8, path9, NotLoggedInError, TokenRejectedError, SyncFileError, SyncNetworkError, SyncHttpError;
 var init_sync = __esm({
   "src/cli/commands/sync.ts"() {
     "use strict";
     init_cjs_shims();
+    import_node_crypto4 = require("crypto");
     fs8 = __toESM(require("fs"), 1);
     path9 = __toESM(require("path"), 1);
     init_run_result_schema();
@@ -5363,7 +5370,10 @@ function describe(result, apiUrl) {
     );
   }
   if (result.offered > 0) {
-    lines.push(`${result.offered} unknown test(s) offered to the review queue.`);
+    const source = result.format === "playwright-json" ? "playwright" : result.format;
+    lines.push(
+      `${result.offered} unknown test(s) offered to the review queue. They wait there for a decision and do not count on the run until approved. To skip review for this source, add \`${source}\` under Settings \u2192 Trusted sources.`
+    );
   } else if (result.unresolved > 0 && result.created === 0 && !result.offering) {
     lines.push("Nothing was offered to the review queue \u2014 pass --create to propose the unmatched tests.");
   } else if (result.unresolved > 0 && result.created === 0 && result.unoffered === 0) {

package/dist/index.cjs

@@ -1610,6 +1610,7 @@ async function handleRun(options, depsFactory) {
 }
 
 // src/cli/commands/sync.ts
+var import_node_crypto2 = require("crypto");
 var fs6 = __toESM(require("fs"), 1);
 var path5 = __toESM(require("path"), 1);
 
@@ -1794,12 +1795,18 @@ async function handleSync(deps = {}) {
   const run = readRun(cwd, deps.file);
   const doFetch = deps.fetchImpl ?? fetch;
   const endpoint = `${apiUrl}/v1/runs`;
+  const payload = JSON.stringify(run);
+  const idempotencyKey = (0, import_node_crypto2.createHash)("sha256").update(payload).digest("hex");
   let res;
   try {
     res = await doFetch(endpoint, {
       method: "POST",
-      headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
-      body: JSON.stringify(run)
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${token}`,
+        "idempotency-key": idempotencyKey
+      },
+      body: payload
     });
   } catch {
     throw new SyncNetworkError(apiUrl);

package/dist/index.js

@@ -1554,6 +1554,7 @@ async function handleRun(options, depsFactory) {
 }
 
 // src/cli/commands/sync.ts
+import { createHash as createHash2 } from "crypto";
 import * as fs6 from "fs";
 import * as path5 from "path";
 
@@ -1738,12 +1739,18 @@ async function handleSync(deps = {}) {
   const run = readRun(cwd, deps.file);
   const doFetch = deps.fetchImpl ?? fetch;
   const endpoint = `${apiUrl}/v1/runs`;
+  const payload = JSON.stringify(run);
+  const idempotencyKey = createHash2("sha256").update(payload).digest("hex");
   let res;
   try {
     res = await doFetch(endpoint, {
       method: "POST",
-      headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
-      body: JSON.stringify(run)
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${token}`,
+        "idempotency-key": idempotencyKey
+      },
+      body: payload
     });
   } catch {
     throw new SyncNetworkError(apiUrl);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plune-ai/cli",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "description": "AI-powered assertion testing for LLM apps — write assertions, run them against any provider, get a pass/fail report (local, CI, or diff).",
   "keywords": [
     "ai",