@trydreamstate/cli 1.3.6 → 1.3.8

package/dist/commands/knowledge.js

@@ -0,0 +1,6 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runKnowledgeCommand = exports.parseKnowledgeCommand = exports.KNOWLEDGE_USAGE = exports.KNOWLEDGE_VERBS = void 0;
+const genericPack_1 = require("./genericPack");
+_a = (0, genericPack_1.packSurface)('knowledge'), exports.KNOWLEDGE_VERBS = _a.verbs, exports.KNOWLEDGE_USAGE = _a.usage, exports.parseKnowledgeCommand = _a.parse, exports.runKnowledgeCommand = _a.run;

package/dist/commands/shared.d.ts

@@ -1,5 +1,7 @@
 import { type CliCommand } from '../index';
 import { type GatedRunContext } from '../gatedRun';
+/** First-class CLI pack groups. sequences and workflows also carry the shared authoring kind. */
+export type PackName = 'sequences' | 'workflows' | 'knowledge' | 'unibox' | 'tables';
 export interface PackVerbSpec {
     verb: string;
     capabilityId: string;
@@ -18,7 +20,7 @@ export interface PackVerbSpec {
     /** Local-only route; `init` accepts --name and --file without an API schema. */
     local?: 'init';
 }
-export declare function buildPackParser(pack: 'sequences' | 'workflows', kind: 'sequence' | 'workflow', specs: PackVerbSpec[], usage: string): (argv: string[]) => CliCommand;
+export declare function buildPackParser(pack: PackName, kind: 'sequence' | 'workflow' | undefined, specs: PackVerbSpec[], usage: string): (argv: string[]) => CliCommand;
 /**
  * A starter document written to disk, so authoring can begin from a file the way the
  * rest of this pack now accepts one. It writes nothing to the workspace and calls no

package/dist/commands/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/commands/shared.ts"],"names":[],"mappings":"AAKA,OAAO,EAAc,KAAK,UAAU,EAAiC,MAAM,UAAU,CAAC;AAEtF,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAS7E,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACnC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAClE,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA4CD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,WAAW,GAAC,WAAW,EAAE,IAAI,EAAE,UAAU,GAAC,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,GAC/F,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,UAAU,CAsFhC;AAGD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKjG;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,UAAU,GAAG,UAAU,EAC7B,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,CAAC,cAAc,GAC5B,IAAI,CAuBN;AAYD,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,CAAC,cAAc,GAC5B,OAAO,CAAC,IAAI,CAAC,CAoDf;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,CAK3E"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/commands/shared.ts"],"names":[],"mappings":"AAKA,OAAO,EAAc,KAAK,UAAU,EAAiC,MAAM,UAAU,CAAC;AAEtF,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAS7E,iGAAiG;AACjG,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAErF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACnC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IAClE,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA4CD,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,GAAC,UAAU,GAAC,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,GAC1F,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,UAAU,CAsFhC;AAGD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKjG;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,UAAU,GAAG,UAAU,EAC7B,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,CAAC,cAAc,GAC5B,IAAI,CAuBN;AAYD,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,CAAC,cAAc,GAC5B,OAAO,CAAC,IAAI,CAAC,CA6Df;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,CAK3E"}

package/dist/commands/shared.js

@@ -132,7 +132,7 @@ function buildPackParser(pack, kind, specs, usage) {
         // family-specific capabilities have strict schemas that do not declare it,
         // so injecting it everywhere made every one of those verbs fail validation
         // with an unrecognized key before it reached the server's real work.
-        if (spec.capabilityId.startsWith('workflow.automations.'))
+        if (kind !== undefined && spec.capabilityId.startsWith('workflow.automations.'))
             input.kind = kind;
         // No default mode. A mutating verb run with no mode used to be rewritten to dry_run
         // silently, where `tools run` sends none and lets the server answer mode_required
@@ -238,10 +238,7 @@ async function runPackCommand(context, command, stdout) {
     const outcome = await (0, gatedRun_1.runGated)(context, {
         capabilityId: command.capabilityId,
         body: {
-            params: {
-                ...command.input,
-                ...(command.maxLiveSends === undefined ? {} : { max_live_sends: command.maxLiveSends }),
-            },
+            params: command.input,
             ...(command.mode ? { mode: command.mode } : {}),
             ...(maxCredits === undefined ? {} : { max_credits: maxCredits }),
             ...(command.approved ? { approved: true } : {}),
@@ -254,6 +251,18 @@ async function runPackCommand(context, command, stdout) {
         waitTimeout: command.waitTimeout,
         ...(command.noWait ? { noWait: true } : {}),
         coerceParams: true,
+        // max_live_sends is a capability param, not a door control. It belongs in
+        // params only where the live schema declares it; sequence lifecycle and
+        // enrollment capabilities (for example sequence.sequences.activate_audience)
+        // have a strict, cap-free schema, so injecting it there was refused before
+        // the request left the CLI.
+        ...(command.maxLiveSends === undefined ? {} : { adjustParams: (params, capability) => {
+                const schema = capability?.input_json_schema;
+                const properties = schema && typeof schema === 'object' ? schema.properties : null;
+                return properties && typeof properties === 'object' && Object.prototype.hasOwnProperty.call(properties, 'max_live_sends')
+                    ? { ...params, max_live_sends: command.maxLiveSends }
+                    : params;
+            } }),
     });
     const result = outcome.value;
     if (outcome.timedOut)

package/dist/commands/tables.d.ts

@@ -0,0 +1,2 @@
+export declare const TABLES_VERBS: import("./shared").PackVerbSpec[], TABLES_USAGE: string, parseTablesCommand: (argv: string[]) => import("..").CliCommand, runTablesCommand: (context: import("../gatedRun").GatedRunContext | undefined, command: import("..").CliCommand, stdout: NodeJS.WritableStream) => Promise<void>;
+//# sourceMappingURL=tables.d.ts.map

package/dist/commands/tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.d.ts","sourceRoot":"","sources":["../../src/commands/tables.ts"],"names":[],"mappings":"AAEA,eAAO,MACE,YAAY,qCACZ,YAAY,UACZ,kBAAkB,+CACpB,gBAAgB,gJACE,CAAC"}

package/dist/commands/tables.js

@@ -0,0 +1,6 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runTablesCommand = exports.parseTablesCommand = exports.TABLES_USAGE = exports.TABLES_VERBS = void 0;
+const genericPack_1 = require("./genericPack");
+_a = (0, genericPack_1.packSurface)('tables'), exports.TABLES_VERBS = _a.verbs, exports.TABLES_USAGE = _a.usage, exports.parseTablesCommand = _a.parse, exports.runTablesCommand = _a.run;

package/dist/commands/unibox.d.ts

@@ -0,0 +1,2 @@
+export declare const UNIBOX_VERBS: import("./shared").PackVerbSpec[], UNIBOX_USAGE: string, parseUniboxCommand: (argv: string[]) => import("..").CliCommand, runUniboxCommand: (context: import("../gatedRun").GatedRunContext | undefined, command: import("..").CliCommand, stdout: NodeJS.WritableStream) => Promise<void>;
+//# sourceMappingURL=unibox.d.ts.map

package/dist/commands/unibox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unibox.d.ts","sourceRoot":"","sources":["../../src/commands/unibox.ts"],"names":[],"mappings":"AAEA,eAAO,MACE,YAAY,qCACZ,YAAY,UACZ,kBAAkB,+CACpB,gBAAgB,gJACE,CAAC"}

package/dist/commands/unibox.js

@@ -0,0 +1,6 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runUniboxCommand = exports.parseUniboxCommand = exports.UNIBOX_USAGE = exports.UNIBOX_VERBS = void 0;
+const genericPack_1 = require("./genericPack");
+_a = (0, genericPack_1.packSurface)('unibox'), exports.UNIBOX_VERBS = _a.verbs, exports.UNIBOX_USAGE = _a.usage, exports.parseUniboxCommand = _a.parse, exports.runUniboxCommand = _a.run;

package/dist/gatedRun.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gatedRun.d.ts","sourceRoot":"","sources":["../src/gatedRun.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAA0B,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEnF,OAAO,EAA4F,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAoBnJ,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIvD;AAUD,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAKjF;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAKrI;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAKzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAazF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAMrE;AA0HD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzH;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,qGAAqG;IACrG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AASD,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAmMvG;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAEpE;AAED,mGAAmG;AACnG,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAGlB"}
+{"version":3,"file":"gatedRun.d.ts","sourceRoot":"","sources":["../src/gatedRun.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAA0B,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEnF,OAAO,EAA4F,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAoBnJ,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIvD;AAUD,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAKjF;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAKrI;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAKzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAazF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAMrE;AAqLD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzH;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,qGAAqG;IACrG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AASD,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAoOvG;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAEpE;AAED,mGAAmG;AACnG,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAGlB"}

package/dist/gatedRun.js

@@ -121,7 +121,19 @@ function planFingerprint(body) {
         delete params[key];
     return (0, node_crypto_1.createHash)('sha256').update((0, idempotency_1.stableJson)({ params, max_credits: body.max_credits ?? null })).digest('hex');
 }
-/** The quote a dry run returned, wherever the envelope nests its outputs. */
+function creditsPhrase(estimate) {
+    if (!estimate)
+        return null;
+    const { minimum_credits: minimum, maximum_credits: maximum, expected_credits: expected } = estimate;
+    if (typeof minimum === 'number' && typeof maximum === 'number' && minimum !== maximum)
+        return `${minimum}..${maximum} credits`;
+    if (typeof minimum !== 'number' && typeof maximum === 'number')
+        return `up to ${maximum} credits`;
+    if (typeof expected === 'number')
+        return `${expected} credits`;
+    return typeof maximum === 'number' ? `${maximum} credits` : null;
+}
+/** The quote a supported rehearsal returned, wherever the envelope nests its outputs. */
 function quoteFromResult(value, depth = 0) {
     if (!value || typeof value !== 'object' || depth > 6)
         return null;
@@ -135,10 +147,14 @@ function quoteFromResult(value, depth = 0) {
     }
     const entry = value;
     if (typeof entry.quote_hash === 'string' && runContract_1.QUOTE_HASH_PATTERN.test(entry.quote_hash)) {
-        const estimate = entry.estimate && typeof entry.estimate === 'object' ? entry.estimate : null;
+        const estimate = record(entry.credit_estimate) ?? record(entry.estimate);
+        const affected = record(entry.affected_count);
+        const rows = affected?.rows ?? affected?.row_or_recipient_count;
         return {
             quote_hash: entry.quote_hash,
             maximum_credits: typeof estimate?.maximum_credits === 'number' ? estimate.maximum_credits : null,
+            rows: typeof rows === 'number' ? rows : null,
+            credits: creditsPhrase(estimate),
         };
     }
     for (const key of ['data', 'run', 'outputs', 'steps']) {
@@ -148,19 +164,20 @@ function quoteFromResult(value, depth = 0) {
     }
     return null;
 }
-function quotePriced(capabilityId, body, quote) {
+function quotePriced(capabilityId, body, price, rehearsal = 'dry_run') {
     const params = body.params && typeof body.params === 'object' ? body.params : {};
-    const rows = typeof params.max_rows === 'number' ? `${params.max_rows} rows` : 'rows not stated';
-    const credits = quote.maximum_credits === null ? 'credits not stated' : `up to ${quote.maximum_credits} credits`;
-    return `Dry run of ${capabilityId} priced: ${rows}, ${credits}.`;
+    const rowCount = price.rows ?? (typeof params.max_rows === 'number' ? params.max_rows : null);
+    const rows = rowCount === null ? 'rows not stated' : `${rowCount} rows`;
+    const credits = price.credits ?? 'credits not stated';
+    const name = rehearsal === 'smoke_test' ? 'Smoke test' : rehearsal === 'dry_run' ? 'Dry run' : 'Rehearsal';
+    return `${name} of ${capabilityId} priced: ${rows}, ${credits}.`;
 }
-/** A known price of 0 spends nothing. An unknown price or a positive price is sent only after the caller passes the approval flag. */
-function spendNeedsApproval(maximum, approved) {
-    if (approved)
-        return false;
-    if (maximum === 0)
-        return false;
-    return true;
+function rehearsalMode(fetched) {
+    const contract = record(capabilityRecord(fetched)?.execution_mode_contract);
+    const supported = Array.isArray(contract?.supported_modes) ? contract.supported_modes : [];
+    if (supported.includes('dry_run'))
+        return 'dry_run';
+    return supported.includes('smoke_test') ? 'smoke_test' : null;
 }
 const CREDENTIALS_REQUIRED_SENTENCE = 'A connected credential is required before this run can continue.';
 function readinessRecord(value) {
@@ -246,6 +263,41 @@ function readinessRefusal(value) {
     const code = credentials ? 'credentials_required' : codes[0] ?? 'not_ready';
     return new client_1.CliError(sentence, code, 409, { retryable: false });
 }
+const UNSUCCESSFUL_TERMINAL_RUN_STATUSES = new Set(['failed', 'completed_with_errors', 'partially_completed']);
+/**
+ * A runs.get HTTP 200 says read succeeded, not that durable work succeeded.
+ * Keep the terminal receipt in error details so callers can inspect or resume
+ * without treating a failed run as a successful CLI command.
+ */
+function terminalRunOutcomeRefusal(value) {
+    const root = readinessRecord(value);
+    const data = readinessRecord(root?.data) ?? root;
+    const run = readinessRecord(data?.run);
+    const status = typeof run?.status === 'string' ? run.status : null;
+    if (!run || !status || !UNSUCCESSFUL_TERMINAL_RUN_STATUSES.has(status))
+        return null;
+    const runId = typeof run.run_id === 'string' ? run.run_id : typeof run.id === 'string' ? run.id : null;
+    const stepErrors = Array.isArray(run.steps)
+        ? run.steps.flatMap((step) => {
+            const record = readinessRecord(step);
+            return [readinessRecord(record?.error), readinessRecord(record?.user_error)];
+        })
+        : [];
+    const typedError = [readinessRecord(run.error), readinessRecord(run.user_error), ...stepErrors]
+        .find((error) => typeof error?.code === 'string' && typeof error.message === 'string');
+    const typedDetails = readinessRecord(typedError?.details);
+    const details = {
+        ...(typedDetails ?? {}),
+        ...(typedError?.details !== undefined && !typedDetails ? { run_error_details: typedError.details } : {}),
+        ...(runId ? { run_id: runId } : {}),
+        status,
+    };
+    return new client_1.CliError(typeof typedError?.message === 'string' ? typedError.message : `Run${runId ? ` ${runId}` : ''} ended with status ${status}.`, typeof typedError?.code === 'string' ? typedError.code : 'run_failed', typeof typedError?.http_status === 'number' ? typedError.http_status : 409, {
+        details,
+        retryable: typeof typedError?.retryable === 'boolean' ? typedError.retryable : false,
+        ...(typedError?.repair !== undefined ? { repair: typedError.repair } : {}),
+    });
+}
 /** Adds the idempotency key to the printed meta, so a user can see which key to re-run with. */
 function withIdempotencyMeta(value, key) {
     const envelope = record(value);
@@ -288,10 +340,10 @@ async function runGated(context, input) {
         if (params)
             body.params = params;
     }
-    // A paid live run needs the quote_hash of a dry run of the same input,
-    // and a quote is bound to the turn that asked for it. So a turn is reused
-    // only while a quote is pending, together with the quote its dry run
-    // returned, and forgotten once the paid run is admitted.
+    // A quote-bound live run needs the quote_hash of a supported rehearsal of
+    // the same input, and the quote is bound to the turn that asked for it. So a
+    // turn is reused only while a quote is pending, together with that quote,
+    // and forgotten once the live run is admitted.
     const explicitKey = parameterIdempotencyKey(body) ?? input.idempotencyKey;
     const fingerprint = planFingerprint(body);
     const cached = input.turnToken
@@ -305,7 +357,7 @@ async function runGated(context, input) {
     const inlineFromCache = !input.turnToken && !pending && !explicitKey && cachedPosture?.inlineRead === true;
     if (!input.turnToken && !pending && !inlineFromCache)
         await contract();
-    const posture = fetched ? (0, capabilityPosture_1.postureFromContract)(fetched) : cachedPosture;
+    let posture = fetched ? (0, capabilityPosture_1.postureFromContract)(fetched) : cachedPosture;
     if (fetched && posture)
         (0, registryManifest_1.rememberPosture)(capabilityId, posture);
     const refusal = fetched ? cliSurfaceRefusal(capabilityId, fetched) : null;
@@ -319,11 +371,13 @@ async function runGated(context, input) {
     let quoteHash = explicitQuote
         ? body.quote_hash
         : live ? cached?.quote_hash ?? undefined : undefined;
-    // null means the price was not stated (or the flag named a hash with no ceiling).
-    let quotedMaximum = !explicitQuote && cached?.quote_hash ? cached.maximum_credits : undefined;
-    let ranDryRun = false;
+    // The price of the quote in hand. A cached quote prices this input only when it
+    // is the quote named (explicit --quote-hash) or the quote this input was dry run for.
+    let quotedPrice = cached?.quote_hash && (!explicitQuote || cached.quote_hash === body.quote_hash)
+        ? { quote_hash: cached.quote_hash, maximum_credits: cached.maximum_credits, rows: cached.rows ?? null, credits: cached.credits ?? null }
+        : null;
+    let ranRehearsal = false;
     let sentKey = null;
-    const approvalRequired = () => new client_1.CliError('This run spends credits. Rerun the same command with --approved.', 'approval_required', 409, { retryable: false, repair: { kind: 'ask_user', hint: 'Rerun the same command with --approved.' } });
     const requestBody = () => ({
         ...body,
         ...(turnToken ? { tool_turn_token: turnToken } : {}),
@@ -353,23 +407,48 @@ async function runGated(context, input) {
         sentKey = await keyFor(sent);
         return client.runCapability(capabilityId, sent, sentKey);
     };
+    let retriedCapabilityDigestStale = false;
+    const refreshCapabilityAfterDigestStale = async () => {
+        retriedCapabilityDigestStale = true;
+        // A stale refusal is terminal for the original logical attempt. A new
+        // contract starts a fresh generated key, while a caller-supplied key keeps
+        // its explicit replay semantics.
+        if (attemptIdentity) {
+            await (0, idempotency_1.finishIdempotencyAttempt)(idempotencyPath, attemptIdentity);
+            attemptIdentity = null;
+        }
+        if (!input.turnToken) {
+            await (0, turnCache_1.forgetTurnToken)(context.turnsPath, context.baseUrl, context.turnKey, capabilityId, warnTurnCache);
+        }
+        fetched = await client.getTool(capabilityId);
+        posture = (0, capabilityPosture_1.postureFromContract)(fetched);
+        (0, registryManifest_1.rememberPosture)(capabilityId, posture);
+        const refreshedTurnToken = optionalToolTurnToken(fetched);
+        turnToken = refreshedTurnToken;
+        // A cached quote is bound to the stale turn. An explicitly supplied quote
+        // remains caller intent and the server decides whether it is still valid.
+        if (!explicitQuote) {
+            quoteHash = undefined;
+            quotedPrice = null;
+        }
+    };
     let result;
     try {
         try {
             if (live && quoteHash) {
-                const maximum = explicitQuote ? null : quotedMaximum ?? null;
-                if (spendNeedsApproval(maximum, body.approved === true)) {
-                    stderr.write(`${quotePriced(capabilityId, body, { quote_hash: quoteHash, maximum_credits: maximum })}\n`);
-                    throw approvalRequired();
-                }
-                if (body.approved === true || maximum === 0) {
-                    stderr.write(`${quotePriced(capabilityId, body, { quote_hash: quoteHash, maximum_credits: maximum })}\nRunning live on that quote.\n`);
-                }
+                // The shared gateway owns per-call paid, external-effect and recurring
+                // consent. A positive quote alone does not require human approval.
+                // Forward only caller-supplied approval; preserve every server refusal.
+                stderr.write(`${quotePriced(capabilityId, body, quotedPrice ?? { rows: null, credits: null }, rehearsalMode(fetched))}\nRunning live on that quote.\n`);
             }
             result = await run();
         }
         catch (error) {
-            if (!input.turnToken && code(error) === 'capability_not_fetched') {
+            if (code(error) === 'capability_digest_stale') {
+                await refreshCapabilityAfterDigestStale();
+                result = await run();
+            }
+            else if (!input.turnToken && code(error) === 'capability_not_fetched') {
                 // Capability posture can change between tools get and run. Refresh it
                 // once rather than maintaining a client-side list of token-free reads.
                 fetched = await client.getTool(capabilityId);
@@ -380,17 +459,18 @@ async function runGated(context, input) {
                 result = await run();
             }
             else if (live && code(error) === 'quote_required' && !quoteHash && turnToken) {
-                // A live paid run with no quote behind it. The refusal's own quote is
-                // only a price and is never replayed, so price the same input with a
-                // real dry run (free, never calls a paid provider), show the person
-                // its rows and cost, and run live on that quote. Above the size or
-                // dollar threshold the server still refuses until --approved.
-                const dry = await client.runCapability(capabilityId, {
+                // A live quote is minted by the capability's advertised rehearsal.
+                // Most capabilities use dry_run; activation intentionally has only
+                // smoke_test and live, so never invent an unsupported dry_run mode.
+                const rehearsal = rehearsalMode(fetched);
+                if (!rehearsal)
+                    throw error;
+                const rehearsalResult = await client.runCapability(capabilityId, {
                     ...body,
-                    mode: 'dry_run',
+                    mode: rehearsal,
                     tool_turn_token: turnToken,
                 }, null);
-                const quote = quoteFromResult(dry);
+                const quote = quoteFromResult(rehearsalResult);
                 if (!quote)
                     throw error;
                 // The no-quote call was definitively refused before execution. Its
@@ -399,13 +479,11 @@ async function runGated(context, input) {
                     await (0, idempotency_1.finishIdempotencyAttempt)(idempotencyPath, attemptIdentity);
                     attemptIdentity = null;
                 }
-                ranDryRun = true;
+                ranRehearsal = true;
                 quoteHash = quote.quote_hash;
-                quotedMaximum = quote.maximum_credits;
-                stderr.write(`${quotePriced(capabilityId, body, quote)}\n`);
-                await (0, turnCache_1.rememberTurnToken)(context.turnsPath, context.baseUrl, context.turnKey, capabilityId, turnToken, Date.now(), warnTurnCache, { quote_hash: quote.quote_hash, fingerprint, maximum_credits: quote.maximum_credits });
-                if (spendNeedsApproval(quote.maximum_credits, body.approved === true))
-                    throw approvalRequired();
+                quotedPrice = quote;
+                stderr.write(`${quotePriced(capabilityId, body, quote, rehearsal)}\n`);
+                await (0, turnCache_1.rememberTurnToken)(context.turnsPath, context.baseUrl, context.turnKey, capabilityId, turnToken, Date.now(), warnTurnCache, { quote_hash: quote.quote_hash, fingerprint, maximum_credits: quote.maximum_credits, rows: quote.rows, credits: quote.credits });
                 stderr.write('Running live on that quote.\n');
                 result = await run();
             }
@@ -421,19 +499,22 @@ async function runGated(context, input) {
             if (code(error) === 'approval_required') {
                 stderr.write('This run needs a person\'s approval. Show them the rows and cost above; when they agree, rerun the same command with --approved.\n');
             }
-            await (0, turnCache_1.rememberTurnToken)(context.turnsPath, context.baseUrl, context.turnKey, capabilityId, turnToken, Date.now(), warnTurnCache, quoteHash ? { quote_hash: quoteHash, fingerprint, ...(quotedMaximum !== undefined ? { maximum_credits: quotedMaximum } : {}) } : undefined);
+            await (0, turnCache_1.rememberTurnToken)(context.turnsPath, context.baseUrl, context.turnKey, capabilityId, turnToken, Date.now(), warnTurnCache, quoteHash ? { quote_hash: quoteHash, fingerprint, maximum_credits: quotedPrice?.maximum_credits ?? null, rows: quotedPrice?.rows ?? null, credits: quotedPrice?.credits ?? null } : undefined);
         }
         // Only an unknown or transient result may resume an attempt. A server
         // refusal with retryable:false is terminal and must receive a new key.
-        const transient = error instanceof client_1.CliError && (error.code === 'request_timeout' || error.code === 'network_error' || error.retryable === true || error.status >= 500);
+        // A response body that cannot be parsed is an unknown-effect outcome: the
+        // server may have admitted the write before its reply was damaged. Keep the
+        // generated key so the unchanged retry can replay that exact attempt.
+        const transient = error instanceof client_1.CliError && (error.code === 'request_timeout' || error.code === 'network_error' || error.code === 'invalid_response' || error.retryable === true || error.status >= 500);
         if (attemptIdentity && !transient)
             await (0, idempotency_1.finishIdempotencyAttempt)(idempotencyPath, attemptIdentity);
         throw error;
     }
     if (!input.turnToken) {
-        if (body.mode === 'dry_run' && turnToken) {
+        if ((body.mode === 'dry_run' || body.mode === 'smoke_test') && turnToken) {
             const quote = quoteFromResult(result);
-            await (0, turnCache_1.rememberTurnToken)(context.turnsPath, context.baseUrl, context.turnKey, capabilityId, turnToken, Date.now(), warnTurnCache, quote ? { quote_hash: quote.quote_hash, fingerprint, maximum_credits: quote.maximum_credits } : undefined);
+            await (0, turnCache_1.rememberTurnToken)(context.turnsPath, context.baseUrl, context.turnKey, capabilityId, turnToken, Date.now(), warnTurnCache, quote ? { quote_hash: quote.quote_hash, fingerprint, maximum_credits: quote.maximum_credits, rows: quote.rows, credits: quote.credits } : undefined);
         }
     }
     let timedOut = false;
@@ -442,23 +523,33 @@ async function runGated(context, input) {
         result = waited.value;
         timedOut = waited.timedOut;
     }
+    let outcomeRefusal = refusalFromRunResult(result);
+    if (!retriedCapabilityDigestStale && code(outcomeRefusal) === 'capability_digest_stale') {
+        await refreshCapabilityAfterDigestStale();
+        result = await run();
+        if (!input.noWait && !posture?.returnsRunId) {
+            const waited = await (0, runWait_1.waitForRun)(client, result, input.waitTimeout, context.sleep);
+            result = waited.value;
+            timedOut = waited.timedOut;
+        }
+        outcomeRefusal = refusalFromRunResult(result);
+    }
     // A timeout still owns the quote and the idempotency key. Forgetting the
     // turn here made the rerun hash a body with no quote_hash and start a second run.
-    if (!input.turnToken && body.mode !== 'dry_run' && (pending || ranDryRun) && !timedOut) {
+    if (!input.turnToken && body.mode !== 'dry_run' && body.mode !== 'smoke_test' && (pending || ranRehearsal) && !timedOut) {
         await (0, turnCache_1.forgetTurnToken)(context.turnsPath, context.baseUrl, context.turnKey, capabilityId, warnTurnCache);
     }
     // A run still active after waiting has unknown outcome; retain its key for
     // the read-back/retry rule. A terminal response completes this attempt.
     if (attemptIdentity && !timedOut)
         await (0, idempotency_1.finishIdempotencyAttempt)(idempotencyPath, attemptIdentity);
-    const blocked = readinessRefusal(result);
-    if (blocked)
-        throw blocked;
+    if (outcomeRefusal)
+        throw outcomeRefusal;
     return { value: withIdempotencyMeta(result, explicitKey ? null : sentKey), timedOut, idempotencyKey: sentKey, turnToken: turnToken ?? null };
 }
 /** Blocker refusal for a run envelope that did not go through runGated (runs wait). */
 function refusalFromRunResult(value) {
-    return readinessRefusal(value);
+    return readinessRefusal(value) ?? terminalRunOutcomeRefusal(value);
 }
 /** A read the CLI needs before it can form a write, run through the same gate as any other run. */
 async function readCapability(context, capabilityId, params, waitTimeout) {