deepline 0.3.329 → 0.3.331

package/dist/bundling-sources/sdk/src/billing-idempotency.ts

@@ -0,0 +1,24 @@
+import { DeeplineError } from './errors.js';
+
+export function requireBillingIdempotencyKey(value: string): string {
+  const normalized = value.trim();
+  let valid =
+    normalized.length > 0 && normalized.length <= 200 && normalized === value;
+  if (valid) {
+    try {
+      valid =
+        new Headers({ 'Idempotency-Key': value }).get('Idempotency-Key') ===
+        value;
+    } catch {
+      valid = false;
+    }
+  }
+  if (!valid) {
+    throw new DeeplineError(
+      'Billing idempotencyKey must contain 1–200 characters with no leading or trailing whitespace and be valid HTTP header text.',
+      undefined,
+      'INVALID_BILLING_IDEMPOTENCY_KEY',
+    );
+  }
+  return value;
+}

package/dist/bundling-sources/sdk/src/client.ts

@@ -51,6 +51,7 @@ import { playInputExampleArgs } from './plays/input-example.js';
  */
 import { resolveConfig } from './config.js';
 import { DeeplineError } from './errors.js';
+import { requireBillingIdempotencyKey as requireTargetBillingIdempotencyKey } from './billing-idempotency.js';
 import {
   planCustomerDbQuery,
   queryCustomerDatabase,
@@ -2560,22 +2561,6 @@ export type BillingNamespace = {
   }) => Promise<{ url: string }>;
 };
 
-function requireTargetBillingIdempotencyKey(value: string): string {
-  const normalized = value.trim();
-  if (
-    normalized.length === 0 ||
-    normalized.length > 200 ||
-    normalized !== value
-  ) {
-    throw new DeeplineError(
-      'Billing idempotencyKey must contain 1–200 characters with no leading or trailing whitespace.',
-      undefined,
-      'INVALID_BILLING_IDEMPOTENCY_KEY',
-    );
-  }
-  return normalized;
-}
-
 function isRecord(value: unknown): value is Record<string, unknown> {
   return Boolean(value && typeof value === 'object' && !Array.isArray(value));
 }
@@ -6275,15 +6260,21 @@ export class DeeplineClient {
     credits: number;
     idempotencyKey?: string;
   }): Promise<BillingTopUpResult> {
+    const idempotencyKey =
+      options.idempotencyKey === undefined
+        ? undefined
+        : requireTargetBillingIdempotencyKey(options.idempotencyKey);
     return this.http.post<BillingTopUpResult>(
       '/api/v2/billing/top-up',
       {
         credits: options.credits,
-        ...(options.idempotencyKey
-          ? { idempotency_key: options.idempotencyKey }
+        ...(idempotencyKey !== undefined
+          ? { idempotency_key: idempotencyKey }
           : {}),
       },
-      undefined,
+      idempotencyKey === undefined
+        ? undefined
+        : { 'Idempotency-Key': idempotencyKey },
       // The idempotency key makes a retry at the product layer safe, but the
       // CLI should not hide ambiguous local delivery failures behind implicit
       // transport retries for a payment mutation.
@@ -6300,15 +6291,24 @@ export class DeeplineClient {
     credits: number;
     idempotencyKey?: string;
   }): Promise<BillingTopUpReceipt> {
+    const idempotencyKey =
+      options.idempotencyKey === undefined
+        ? undefined
+        : requireTargetBillingIdempotencyKey(options.idempotencyKey);
     return this.http.post<BillingTopUpReceipt>(
       '/api/v2/billing/top-up',
       {
         credits: options.credits,
-        ...(options.idempotencyKey
-          ? { idempotency_key: options.idempotencyKey }
+        ...(idempotencyKey !== undefined
+          ? { idempotency_key: idempotencyKey }
+          : {}),
+      },
+      {
+        'x-deepline-top-up-receipt': 'operation-v1',
+        ...(idempotencyKey !== undefined
+          ? { 'Idempotency-Key': idempotencyKey }
           : {}),
       },
-      { 'x-deepline-top-up-receipt': 'operation-v1' },
       { maxRetries: 0, exactUrlOnly: true },
     );
   }

package/dist/bundling-sources/sdk/src/release.ts

@@ -200,7 +200,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.329',
+  version: '0.3.331',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/shared_libs/security/safe-outbound-fetch.ts

@@ -110,6 +110,15 @@ async function prepareBody(init: RequestInit): Promise<PreparedBody> {
     }
     return withContentLength(body.toString(), headers);
   }
+  if (typeof FormData !== 'undefined' && body instanceof FormData) {
+    const encoded = new Response(body);
+    const contentType = encoded.headers.get('content-type');
+    if (!contentType) {
+      throw new TypeError('Multipart encoding did not produce a content type.');
+    }
+    headers.set('content-type', contentType);
+    return withContentLength(Buffer.from(await encoded.arrayBuffer()), headers);
+  }
   if (body instanceof ArrayBuffer) {
     return withContentLength(Buffer.from(body), headers);
   }
@@ -124,7 +133,7 @@ async function prepareBody(init: RequestInit): Promise<PreparedBody> {
   }
 
   throw new TypeError(
-    'safeOutboundFetch does not support streaming or multipart request bodies.',
+    'safeOutboundFetch does not support streaming request bodies.',
   );
 }
 

package/dist/cli/{auth-MFFVOITR.mjs → auth-TVTO43JD.mjs}

@@ -9,11 +9,11 @@ import {
   registerAuthCommands,
   reportSetupCompleted,
   resolvePendingAuthClaimForResume
-} from "./chunk-MFQQINUY.mjs";
-import "./chunk-EROOAI5G.mjs";
-import "./chunk-FK7PW6BP.mjs";
+} from "./chunk-CKAZY2JT.mjs";
+import "./chunk-DU72PAVF.mjs";
+import "./chunk-VEP3POWB.mjs";
 import "./chunk-DLIRSHV6.mjs";
-import "./chunk-GCNER3HV.mjs";
+import "./chunk-RI57LHLC.mjs";
 import "./chunk-NXGCO4JB.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";

package/dist/cli/auth-YYTF3NO4.js

@@ -0,0 +1,31 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+var _chunkT7E5KIPEjs = require('./chunk-T7E5KIPE.js');
+require('./chunk-XZG75ELG.js');
+require('./chunk-3AQ3L2NX.js');
+require('./chunk-XNYIZMNQ.js');
+require('./chunk-LFV2A7GB.js');
+require('./chunk-7P5AA3SN.js');
+require('./chunk-OG64RBAC.js');
+require('./chunk-COGTRVWW.js');
+
+
+
+
+
+
+
+
+
+
+
+exports.EXIT_WORKSPACE_MISMATCH = _chunkT7E5KIPEjs.EXIT_WORKSPACE_MISMATCH; exports.clearPendingClaim = _chunkT7E5KIPEjs.clearPendingClaim; exports.clearSatisfiedPendingClaim = _chunkT7E5KIPEjs.clearSatisfiedPendingClaim; exports.handleRegister = _chunkT7E5KIPEjs.handleRegister; exports.handleStatus = _chunkT7E5KIPEjs.handleStatus; exports.handleWait = _chunkT7E5KIPEjs.handleWait; exports.readPendingAuthClaim = _chunkT7E5KIPEjs.readPendingAuthClaim; exports.registerAuthCommands = _chunkT7E5KIPEjs.registerAuthCommands; exports.reportSetupCompleted = _chunkT7E5KIPEjs.reportSetupCompleted; exports.resolvePendingAuthClaimForResume = _chunkT7E5KIPEjs.resolvePendingAuthClaimForResume;

package/dist/cli/{billing-LRBHWLIQ.mjs → billing-FBZ5CCU7.mjs}

@@ -1,7 +1,8 @@
 import {
   DeeplineClient,
-  iterateCursorPages
-} from "./chunk-OZGU7P2S.mjs";
+  iterateCursorPages,
+  requireBillingIdempotencyKey
+} from "./chunk-QEI6SNAT.mjs";
 import "./chunk-CBVIJSHF.mjs";
 import {
   createTimestampedName,
@@ -9,13 +10,13 @@ import {
   openInBrowser,
   printCommandEnvelope,
   shouldEmitJson
-} from "./chunk-EROOAI5G.mjs";
+} from "./chunk-DU72PAVF.mjs";
 import {
   AuthError,
   ConfigError
-} from "./chunk-FK7PW6BP.mjs";
+} from "./chunk-VEP3POWB.mjs";
 import "./chunk-DLIRSHV6.mjs";
-import "./chunk-GCNER3HV.mjs";
+import "./chunk-RI57LHLC.mjs";
 import "./chunk-6IKARAYD.mjs";
 import {
   DeeplineError
@@ -89,11 +90,7 @@ function parseTopUpCredits(raw) {
   return parsed;
 }
 function topUpIdempotencyKey(raw) {
-  if (typeof raw === "string") {
-    const trimmed = raw.trim();
-    if (trimmed) return trimmed.slice(0, 120);
-  }
-  return `cli_topup:${Date.now()}:${randomUUID()}`;
+  return raw === void 0 ? `cli_topup:${Date.now()}:${randomUUID()}` : requireBillingIdempotencyKey(raw);
 }
 function targetBillingIdempotencyKey(raw) {
   return typeof raw === "string" ? raw : `cli_target_billing:${Date.now()}:${randomUUID()}`;
@@ -362,14 +359,21 @@ async function handleBalance(options) {
     lines.push(`If the user approves, run: ${recovery.top_up_command}`);
     lines.push(`If checkout is required, run: ${recovery.checkout_command}`);
   }
-  const text = [lines[0], ...options.verbose ? detail : [], ...lines.slice(1)];
+  const text = [
+    lines[0],
+    ...options.verbose ? detail : [],
+    ...lines.slice(1)
+  ];
   printCommandEnvelope(
     {
       ...payload,
       ...recovery ? { recovery } : {},
       render: {
         sections: [
-          { title: "billing balance", lines: [lines[0], ...detail, ...lines.slice(1)] }
+          {
+            title: "billing balance",
+            lines: [lines[0], ...detail, ...lines.slice(1)]
+          }
         ]
       }
     },
@@ -961,7 +965,21 @@ async function handleTopUp(creditsRaw, options) {
     );
     return;
   }
-  const idempotencyKey = topUpIdempotencyKey(options.idempotencyKey);
+  let idempotencyKey;
+  try {
+    idempotencyKey = topUpIdempotencyKey(options.idempotencyKey);
+  } catch (error) {
+    if (!(error instanceof DeeplineError)) throw error;
+    reportBillingFailure(
+      {
+        exitCode: 2,
+        code: "INVALID_BILLING_IDEMPOTENCY_KEY",
+        message: "--idempotency-key must contain 1\u2013200 characters with no leading or trailing whitespace and be valid HTTP header text."
+      },
+      options
+    );
+    return;
+  }
   if (options.dryRun) {
     printCommandEnvelope(
       {
@@ -972,6 +990,7 @@ async function handleTopUp(creditsRaw, options) {
         planned_request: {
           method: "POST",
           path: BILLING_TOP_UP_PATH,
+          headers: { "Idempotency-Key": idempotencyKey },
           body: { credits, idempotency_key: idempotencyKey }
         },
         render: {
@@ -1567,6 +1586,9 @@ Notes:
   workspace, then adding purchased Deepline credits. If no saved payment method
   is available, use the checkout command printed in the error response.
   --dry-run prints the planned request and idempotency key without charging.
+  Earlier CLI versions truncated supplied keys over 120 characters. To recover
+  an earlier attempt, reuse the effective key printed in its original output
+  or retry command.
 
 Examples:
   deepline billing top-up 1000
@@ -1576,7 +1598,7 @@ Examples:
 `
   ).argument("<credits>", "Positive integer Deepline credit amount").option(
     "--idempotency-key <key>",
-    "Stable retry key for the same intended top-up"
+    "Stable retry key for the same intended top-up (1\u2013200 characters, no padding, valid HTTP header text)"
   ).option("--dry-run", "Print the planned top-up without charging").option("--compact", "Keep only high-signal fields in JSON output").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleTopUp);
   billing.command("buy").description("Buy credits through the target billing contract.").argument("<credits>", "Positive integer Deepline credit amount").option("--idempotency-key <key>", "Stable retry key").option("--json", "Emit JSON output").action(handleBuyCredits);
   billing.command("top-up-recover").description(