deepline 0.1.66 → 0.1.69

package/dist/index.d.mts

@@ -990,6 +990,56 @@ interface DeletePlayResult {
     deletedBindingCount: number;
     deletedRunCount: number;
 }
+/** Owner-facing view of a play's public share page. */
+interface SharePageOwnerView {
+    shareSlug: string;
+    publishedRevisionId: string;
+    publishedVersion: number;
+    visibility: string;
+    seoIndexing: 'index' | 'noindex';
+    showAverageDeeplineCost: boolean;
+    showAverageLatency: boolean;
+    /** Stable public path, e.g. `/p/{shareSlug}`. */
+    publicPath: string;
+    /** Version-pinned canonical path, e.g. `/p/{shareSlug}/v/{version}`. */
+    canonicalPath: string;
+    createdAt: number;
+    updatedAt: number;
+}
+/** One row in the owner-facing revision picker for sharing. */
+interface SharePageRevisionOption {
+    revisionId: string;
+    version: number;
+    isLive: boolean;
+    isWorking: boolean;
+    isPublished: boolean;
+    hasMap: boolean;
+    hasCard: boolean;
+    createdAt: number;
+}
+/** Status payload from `GET/POST/PATCH /api/v2/plays/:name/share`. */
+interface SharePageStatus {
+    playName: string;
+    share: SharePageOwnerView | null;
+    publishedCopy: unknown | null;
+    revisions: SharePageRevisionOption[];
+    /** Present on publish responses when share-card generation was non-strict. */
+    warning?: string | null;
+}
+interface PublishSharePageRequest {
+    /** The revision to publish/repoint the public page to. */
+    revisionId: string;
+    /** Must be true — acknowledges the page is publicly viewable. */
+    acknowledgedUnlisted: true;
+    showAverageDeeplineCost?: boolean;
+    showAverageLatency?: boolean;
+    seoIndexing?: 'index' | 'noindex';
+}
+interface UpdateSharePageRequest {
+    showAverageDeeplineCost?: boolean;
+    showAverageLatency?: boolean;
+    seoIndexing?: 'index' | 'noindex';
+}
 
 interface PlayStagedFileRef {
     storageKind: 'r2';
@@ -1060,6 +1110,18 @@ type PlaySheetRowsResult = {
     customerDbUrl?: string;
     deltaCursor?: number;
 };
+type PlaySecretMetadata = {
+    _id: string;
+    orgId: string;
+    scope: 'org' | 'play';
+    playName?: string;
+    name: string;
+    status: string;
+    hasValue: boolean;
+    createdAt: number;
+    updatedAt: number;
+    lastUsedAt?: number;
+};
 type RunsNamespace = {
     get: (runId: string, options?: {
         full?: boolean;
@@ -1116,6 +1178,8 @@ declare class DeeplineClient {
     private playCloneEditStarter;
     private summarizePlayListItem;
     private summarizePlayDetail;
+    listSecrets(): Promise<PlaySecretMetadata[]>;
+    checkSecret(name: string): Promise<PlaySecretMetadata | null>;
     /**
      * List all available tools.
      *
@@ -1568,6 +1632,34 @@ declare class DeeplineClient {
      * bindings, and local run records. Deepline prebuilt plays are read-only.
      */
     deletePlay(name: string): Promise<DeletePlayResult>;
+    /**
+     * Current share status for a play: the public page (if any), the published
+     * copy, and the revision picker. Read-only.
+     */
+    getSharePage(name: string): Promise<SharePageStatus>;
+    /**
+     * Publish (or repoint) the play's public share page to a revision. Requires
+     * `acknowledgedUnlisted: true` — the page is publicly viewable. Org-admin only.
+     */
+    publishSharePage(name: string, request: PublishSharePageRequest): Promise<SharePageStatus>;
+    /**
+     * Update share-page settings (SEO indexing, credit-cost / latency display)
+     * without moving the published pointer. Org-admin only.
+     */
+    updateSharePage(name: string, request: UpdateSharePageRequest): Promise<SharePageStatus>;
+    /**
+     * Unshare: hard-delete the play's public page and its cards. Returns the
+     * fresh status (now `share: null`). Org-admin only. Idempotent — a no-op when
+     * the play was never published.
+     */
+    unpublishSharePage(name: string): Promise<SharePageStatus>;
+    /**
+     * Regenerate the LLM landing-page copy for a revision (defaults to the
+     * published one). Org-admin only.
+     */
+    regenerateSharePage(name: string, request?: {
+        revisionId?: string;
+    }): Promise<SharePageStatus>;
     /**
      * Run a play end-to-end: submit, stream until terminal, return result.
      *
@@ -1998,6 +2090,29 @@ type PlayBindings = {
         /** IANA timezone (e.g. `'America/New_York'`). Defaults to UTC. */
         timezone?: string;
     };
+    /**
+     * Customer-authored play secrets this play is allowed to use at runtime.
+     * Values are never bundled or exposed by the SDK; access them with
+     * `ctx.secrets.get("NAME")` and approved helpers such as
+     * `ctx.secrets.bearer(handle)`.
+     */
+    secrets?: readonly string[];
+};
+declare const SECRET_HANDLE_BRAND: unique symbol;
+type SecretHandle = {
+    readonly [SECRET_HANDLE_BRAND]: never;
+    readonly name: string;
+    toString(): string;
+    toJSON(): never;
+};
+type SecretAuth = {
+    readonly kind: 'bearer' | 'header';
+    readonly secret: SecretHandle;
+    readonly header?: string;
+};
+type SecretAwareRequestInit = Omit<RequestInit, 'headers'> & {
+    headers?: HeadersInit;
+    auth?: SecretAuth;
 };
 type LoosePlayObject = {
     [key: string]: LoosePlayObject;
@@ -2299,7 +2414,7 @@ interface DeeplinePlayRuntimeContext {
      * @param init - Fetch options.
      * @returns Recorded response.
      */
-    fetch(key: string, url: string | URL, init?: RequestInit, options?: {
+    fetch(key: string, url: string | URL, init?: SecretAwareRequestInit, options?: {
         staleAfterSeconds?: number;
     }): Promise<{
         ok: boolean;
@@ -2310,6 +2425,11 @@ interface DeeplinePlayRuntimeContext {
         bodyText: string;
         json: unknown | null;
     }>;
+    secrets: {
+        get(name: string): SecretHandle;
+        bearer(secret: SecretHandle): SecretAuth;
+        header(header: string, secret: SecretHandle): SecretAuth;
+    };
     runPlay<TOutput = unknown>(key: string, playRef: string | PlayReferenceLike, input: Record<string, unknown>, options: {
         description?: string;
         staleAfterSeconds?: number;

package/dist/index.d.ts

@@ -990,6 +990,56 @@ interface DeletePlayResult {
     deletedBindingCount: number;
     deletedRunCount: number;
 }
+/** Owner-facing view of a play's public share page. */
+interface SharePageOwnerView {
+    shareSlug: string;
+    publishedRevisionId: string;
+    publishedVersion: number;
+    visibility: string;
+    seoIndexing: 'index' | 'noindex';
+    showAverageDeeplineCost: boolean;
+    showAverageLatency: boolean;
+    /** Stable public path, e.g. `/p/{shareSlug}`. */
+    publicPath: string;
+    /** Version-pinned canonical path, e.g. `/p/{shareSlug}/v/{version}`. */
+    canonicalPath: string;
+    createdAt: number;
+    updatedAt: number;
+}
+/** One row in the owner-facing revision picker for sharing. */
+interface SharePageRevisionOption {
+    revisionId: string;
+    version: number;
+    isLive: boolean;
+    isWorking: boolean;
+    isPublished: boolean;
+    hasMap: boolean;
+    hasCard: boolean;
+    createdAt: number;
+}
+/** Status payload from `GET/POST/PATCH /api/v2/plays/:name/share`. */
+interface SharePageStatus {
+    playName: string;
+    share: SharePageOwnerView | null;
+    publishedCopy: unknown | null;
+    revisions: SharePageRevisionOption[];
+    /** Present on publish responses when share-card generation was non-strict. */
+    warning?: string | null;
+}
+interface PublishSharePageRequest {
+    /** The revision to publish/repoint the public page to. */
+    revisionId: string;
+    /** Must be true — acknowledges the page is publicly viewable. */
+    acknowledgedUnlisted: true;
+    showAverageDeeplineCost?: boolean;
+    showAverageLatency?: boolean;
+    seoIndexing?: 'index' | 'noindex';
+}
+interface UpdateSharePageRequest {
+    showAverageDeeplineCost?: boolean;
+    showAverageLatency?: boolean;
+    seoIndexing?: 'index' | 'noindex';
+}
 
 interface PlayStagedFileRef {
     storageKind: 'r2';
@@ -1060,6 +1110,18 @@ type PlaySheetRowsResult = {
     customerDbUrl?: string;
     deltaCursor?: number;
 };
+type PlaySecretMetadata = {
+    _id: string;
+    orgId: string;
+    scope: 'org' | 'play';
+    playName?: string;
+    name: string;
+    status: string;
+    hasValue: boolean;
+    createdAt: number;
+    updatedAt: number;
+    lastUsedAt?: number;
+};
 type RunsNamespace = {
     get: (runId: string, options?: {
         full?: boolean;
@@ -1116,6 +1178,8 @@ declare class DeeplineClient {
     private playCloneEditStarter;
     private summarizePlayListItem;
     private summarizePlayDetail;
+    listSecrets(): Promise<PlaySecretMetadata[]>;
+    checkSecret(name: string): Promise<PlaySecretMetadata | null>;
     /**
      * List all available tools.
      *
@@ -1568,6 +1632,34 @@ declare class DeeplineClient {
      * bindings, and local run records. Deepline prebuilt plays are read-only.
      */
     deletePlay(name: string): Promise<DeletePlayResult>;
+    /**
+     * Current share status for a play: the public page (if any), the published
+     * copy, and the revision picker. Read-only.
+     */
+    getSharePage(name: string): Promise<SharePageStatus>;
+    /**
+     * Publish (or repoint) the play's public share page to a revision. Requires
+     * `acknowledgedUnlisted: true` — the page is publicly viewable. Org-admin only.
+     */
+    publishSharePage(name: string, request: PublishSharePageRequest): Promise<SharePageStatus>;
+    /**
+     * Update share-page settings (SEO indexing, credit-cost / latency display)
+     * without moving the published pointer. Org-admin only.
+     */
+    updateSharePage(name: string, request: UpdateSharePageRequest): Promise<SharePageStatus>;
+    /**
+     * Unshare: hard-delete the play's public page and its cards. Returns the
+     * fresh status (now `share: null`). Org-admin only. Idempotent — a no-op when
+     * the play was never published.
+     */
+    unpublishSharePage(name: string): Promise<SharePageStatus>;
+    /**
+     * Regenerate the LLM landing-page copy for a revision (defaults to the
+     * published one). Org-admin only.
+     */
+    regenerateSharePage(name: string, request?: {
+        revisionId?: string;
+    }): Promise<SharePageStatus>;
     /**
      * Run a play end-to-end: submit, stream until terminal, return result.
      *
@@ -1998,6 +2090,29 @@ type PlayBindings = {
         /** IANA timezone (e.g. `'America/New_York'`). Defaults to UTC. */
         timezone?: string;
     };
+    /**
+     * Customer-authored play secrets this play is allowed to use at runtime.
+     * Values are never bundled or exposed by the SDK; access them with
+     * `ctx.secrets.get("NAME")` and approved helpers such as
+     * `ctx.secrets.bearer(handle)`.
+     */
+    secrets?: readonly string[];
+};
+declare const SECRET_HANDLE_BRAND: unique symbol;
+type SecretHandle = {
+    readonly [SECRET_HANDLE_BRAND]: never;
+    readonly name: string;
+    toString(): string;
+    toJSON(): never;
+};
+type SecretAuth = {
+    readonly kind: 'bearer' | 'header';
+    readonly secret: SecretHandle;
+    readonly header?: string;
+};
+type SecretAwareRequestInit = Omit<RequestInit, 'headers'> & {
+    headers?: HeadersInit;
+    auth?: SecretAuth;
 };
 type LoosePlayObject = {
     [key: string]: LoosePlayObject;
@@ -2299,7 +2414,7 @@ interface DeeplinePlayRuntimeContext {
      * @param init - Fetch options.
      * @returns Recorded response.
      */
-    fetch(key: string, url: string | URL, init?: RequestInit, options?: {
+    fetch(key: string, url: string | URL, init?: SecretAwareRequestInit, options?: {
         staleAfterSeconds?: number;
     }): Promise<{
         ok: boolean;
@@ -2310,6 +2425,11 @@ interface DeeplinePlayRuntimeContext {
         bodyText: string;
         json: unknown | null;
     }>;
+    secrets: {
+        get(name: string): SecretHandle;
+        bearer(secret: SecretHandle): SecretAuth;
+        header(header: string, secret: SecretHandle): SecretAuth;
+    };
     runPlay<TOutput = unknown>(key: string, playRef: string | PlayReferenceLike, input: Record<string, unknown>, options: {
         description?: string;
         staleAfterSeconds?: number;

package/dist/index.js

@@ -241,10 +241,10 @@ var import_node_path2 = require("path");
 
 // src/release.ts
 var SDK_RELEASE = {
-  version: "0.1.66",
+  version: "0.1.69",
   apiContract: "2026-05-play-bootstrap-dataset-summary",
   supportPolicy: {
-    latest: "0.1.66",
+    latest: "0.1.69",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53"
   }
@@ -495,6 +495,9 @@ var HttpClient = class {
       headers
     });
   }
+  async patch(path, body, headers) {
+    return this.request(path, { method: "PATCH", body, headers });
+  }
   /**
    * Send a DELETE request.
    *
@@ -835,6 +838,22 @@ var DeeplineClient = class {
     };
   }
   // ——————————————————————————————————————————————————————————
+  // Secrets
+  // ——————————————————————————————————————————————————————————
+  async listSecrets() {
+    const response = await this.http.get(
+      "/api/v2/secrets"
+    );
+    return Array.isArray(response.secrets) ? response.secrets : [];
+  }
+  async checkSecret(name) {
+    const normalized = name.trim().toUpperCase();
+    const secrets = await this.listSecrets();
+    return secrets.find(
+      (secret) => secret.name === normalized && secret.status === "active" && secret.hasValue
+    ) ?? null;
+  }
+  // ——————————————————————————————————————————————————————————
   // Tools
   // ——————————————————————————————————————————————————————————
   /**
@@ -1618,6 +1637,61 @@ var DeeplineClient = class {
     return this.http.delete(`/api/v2/plays/${encodedName}`);
   }
   // ——————————————————————————————————————————————————————————
+  // Plays — public share pages
+  // ——————————————————————————————————————————————————————————
+  /**
+   * Current share status for a play: the public page (if any), the published
+   * copy, and the revision picker. Read-only.
+   */
+  async getSharePage(name) {
+    const encodedName = encodeURIComponent(name);
+    return this.http.get(`/api/v2/plays/${encodedName}/share`);
+  }
+  /**
+   * Publish (or repoint) the play's public share page to a revision. Requires
+   * `acknowledgedUnlisted: true` — the page is publicly viewable. Org-admin only.
+   */
+  async publishSharePage(name, request) {
+    const encodedName = encodeURIComponent(name);
+    return this.http.post(
+      `/api/v2/plays/${encodedName}/share`,
+      request
+    );
+  }
+  /**
+   * Update share-page settings (SEO indexing, credit-cost / latency display)
+   * without moving the published pointer. Org-admin only.
+   */
+  async updateSharePage(name, request) {
+    const encodedName = encodeURIComponent(name);
+    return this.http.patch(
+      `/api/v2/plays/${encodedName}/share`,
+      request
+    );
+  }
+  /**
+   * Unshare: hard-delete the play's public page and its cards. Returns the
+   * fresh status (now `share: null`). Org-admin only. Idempotent — a no-op when
+   * the play was never published.
+   */
+  async unpublishSharePage(name) {
+    const encodedName = encodeURIComponent(name);
+    return this.http.delete(
+      `/api/v2/plays/${encodedName}/share`
+    );
+  }
+  /**
+   * Regenerate the LLM landing-page copy for a revision (defaults to the
+   * published one). Org-admin only.
+   */
+  async regenerateSharePage(name, request = {}) {
+    const encodedName = encodeURIComponent(name);
+    return this.http.post(
+      `/api/v2/plays/${encodedName}/share/regenerate`,
+      request
+    );
+  }
+  // ——————————————————————————————————————————————————————————
   // Plays — high-level orchestration
   // ——————————————————————————————————————————————————————————
   /**

package/dist/index.mjs

@@ -179,10 +179,10 @@ import { join as join2 } from "path";
 
 // src/release.ts
 var SDK_RELEASE = {
-  version: "0.1.66",
+  version: "0.1.69",
   apiContract: "2026-05-play-bootstrap-dataset-summary",
   supportPolicy: {
-    latest: "0.1.66",
+    latest: "0.1.69",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53"
   }
@@ -433,6 +433,9 @@ var HttpClient = class {
       headers
     });
   }
+  async patch(path, body, headers) {
+    return this.request(path, { method: "PATCH", body, headers });
+  }
   /**
    * Send a DELETE request.
    *
@@ -773,6 +776,22 @@ var DeeplineClient = class {
     };
   }
   // ——————————————————————————————————————————————————————————
+  // Secrets
+  // ——————————————————————————————————————————————————————————
+  async listSecrets() {
+    const response = await this.http.get(
+      "/api/v2/secrets"
+    );
+    return Array.isArray(response.secrets) ? response.secrets : [];
+  }
+  async checkSecret(name) {
+    const normalized = name.trim().toUpperCase();
+    const secrets = await this.listSecrets();
+    return secrets.find(
+      (secret) => secret.name === normalized && secret.status === "active" && secret.hasValue
+    ) ?? null;
+  }
+  // ——————————————————————————————————————————————————————————
   // Tools
   // ——————————————————————————————————————————————————————————
   /**
@@ -1556,6 +1575,61 @@ var DeeplineClient = class {
     return this.http.delete(`/api/v2/plays/${encodedName}`);
   }
   // ——————————————————————————————————————————————————————————
+  // Plays — public share pages
+  // ——————————————————————————————————————————————————————————
+  /**
+   * Current share status for a play: the public page (if any), the published
+   * copy, and the revision picker. Read-only.
+   */
+  async getSharePage(name) {
+    const encodedName = encodeURIComponent(name);
+    return this.http.get(`/api/v2/plays/${encodedName}/share`);
+  }
+  /**
+   * Publish (or repoint) the play's public share page to a revision. Requires
+   * `acknowledgedUnlisted: true` — the page is publicly viewable. Org-admin only.
+   */
+  async publishSharePage(name, request) {
+    const encodedName = encodeURIComponent(name);
+    return this.http.post(
+      `/api/v2/plays/${encodedName}/share`,
+      request
+    );
+  }
+  /**
+   * Update share-page settings (SEO indexing, credit-cost / latency display)
+   * without moving the published pointer. Org-admin only.
+   */
+  async updateSharePage(name, request) {
+    const encodedName = encodeURIComponent(name);
+    return this.http.patch(
+      `/api/v2/plays/${encodedName}/share`,
+      request
+    );
+  }
+  /**
+   * Unshare: hard-delete the play's public page and its cards. Returns the
+   * fresh status (now `share: null`). Org-admin only. Idempotent — a no-op when
+   * the play was never published.
+   */
+  async unpublishSharePage(name) {
+    const encodedName = encodeURIComponent(name);
+    return this.http.delete(
+      `/api/v2/plays/${encodedName}/share`
+    );
+  }
+  /**
+   * Regenerate the LLM landing-page copy for a revision (defaults to the
+   * published one). Org-admin only.
+   */
+  async regenerateSharePage(name, request = {}) {
+    const encodedName = encodeURIComponent(name);
+    return this.http.post(
+      `/api/v2/plays/${encodedName}/share/regenerate`,
+      request
+    );
+  }
+  // ——————————————————————————————————————————————————————————
   // Plays — high-level orchestration
   // ——————————————————————————————————————————————————————————
   /**