deepline 0.3.409 → 0.3.410

package/dist/cli/{chunk-WYQO2CBS.mjs → chunk-QL22Y56M.mjs}

@@ -1,17 +1,19 @@
 import {
   npmSupportsAllowScripts,
   readNpmVersion
-} from "./chunk-BEVLCKXG.mjs";
+} from "./chunk-JNXJZ577.mjs";
 import {
-  resolveShellSpawn,
   runSkillsCommand
-} from "./chunk-IT3XBJQR.mjs";
+} from "./chunk-T44IIOT6.mjs";
+import {
+  resolveShellSpawn
+} from "./chunk-XIHWSXSV.mjs";
 import {
   printCommandEnvelope
-} from "./chunk-JRAVVJ3T.mjs";
+} from "./chunk-5V5Y37BC.mjs";
 import {
   autoDetectBaseUrl
-} from "./chunk-2PRO2JTX.mjs";
+} from "./chunk-RFB25DSQ.mjs";
 
 // src/cli/commands/update.ts
 import { spawn, spawnSync } from "child_process";
@@ -26,6 +28,7 @@ import {
   writeFileSync as writeFileSync2
 } from "fs";
 import { homedir as homedir2 } from "os";
+import { setTimeout as delay } from "timers/promises";
 import {
   basename,
   dirname as dirname2,
@@ -210,6 +213,9 @@ import {
 import { homedir } from "os";
 import { dirname, join as join2 } from "path";
 var UPDATE_PREFERENCES_SCHEMA_VERSION = 1;
+function defaultHomeDir() {
+  return process.env.HOME?.trim() || homedir();
+}
 var CLI_UPDATE_MESSAGES = [
   {
     id: "auto-update-default-v1",
@@ -236,7 +242,7 @@ function unreadablePreferences(path, error) {
     acknowledgedMessages: CLI_UPDATE_MESSAGES.map(({ id }) => id)
   };
 }
-function cliUpdatePreferencesPath(homeDir = homedir()) {
+function cliUpdatePreferencesPath(homeDir = defaultHomeDir()) {
   return join2(
     homeDir,
     ".local",
@@ -245,7 +251,7 @@ function cliUpdatePreferencesPath(homeDir = homedir()) {
     "update-preferences.json"
   );
 }
-function readCliUpdatePreferences(homeDir = homedir()) {
+function readCliUpdatePreferences(homeDir = defaultHomeDir()) {
   const path = cliUpdatePreferencesPath(homeDir);
   if (!existsSync2(path)) return defaultPreferences();
   try {
@@ -262,7 +268,7 @@ function readCliUpdatePreferences(homeDir = homedir()) {
     return unreadablePreferences(path, error);
   }
 }
-function writeCliUpdatePreferences(preferences, homeDir = homedir()) {
+function writeCliUpdatePreferences(preferences, homeDir = defaultHomeDir()) {
   const path = cliUpdatePreferencesPath(homeDir);
   const tempPath = `${path}.${process.pid}.tmp`;
   mkdirSync(dirname(path), { recursive: true });
@@ -277,7 +283,7 @@ function writeCliUpdatePreferences(preferences, homeDir = homedir()) {
     rmSync(tempPath, { force: true });
   }
 }
-function setCliAutoUpdateEnabled(enabled, homeDir = homedir()) {
+function setCliAutoUpdateEnabled(enabled, homeDir = defaultHomeDir()) {
   const current = readCliUpdatePreferences(homeDir);
   const next = {
     ...current,
@@ -287,7 +293,7 @@ function setCliAutoUpdateEnabled(enabled, homeDir = homedir()) {
   writeCliUpdatePreferences(next, homeDir);
   return next;
 }
-function setCliPinnedVersion(version, homeDir = homedir()) {
+function setCliPinnedVersion(version, homeDir = defaultHomeDir()) {
   const next = {
     ...readCliUpdatePreferences(homeDir),
     pinnedVersion: version
@@ -295,14 +301,14 @@ function setCliPinnedVersion(version, homeDir = homedir()) {
   writeCliUpdatePreferences(next, homeDir);
   return next;
 }
-function clearCliPinnedVersion(homeDir = homedir()) {
+function clearCliPinnedVersion(homeDir = defaultHomeDir()) {
   const current = readCliUpdatePreferences(homeDir);
   if (current.pinnedVersion === null) return current;
   const next = { ...current, pinnedVersion: null };
   writeCliUpdatePreferences(next, homeDir);
   return next;
 }
-function shouldRunCliAutoUpdate(homeDir = homedir()) {
+function shouldRunCliAutoUpdate(homeDir = defaultHomeDir()) {
   const preferences = readCliUpdatePreferences(homeDir);
   return preferences.autoUpdateEnabled && preferences.pinnedVersion === null;
 }
@@ -489,7 +495,12 @@ function normalizedNpmPrefix(value) {
 }
 function resolveNpmGlobalPrefix(env) {
   try {
-    const plan = resolveShellSpawn("npm", ["prefix", "-g"], process.platform, env);
+    const plan = resolveShellSpawn(
+      "npm",
+      ["prefix", "-g"],
+      process.platform,
+      env
+    );
     const result = spawnSync(plan.command, plan.args, {
       encoding: "utf8",
       env,
@@ -636,24 +647,126 @@ function matchingAutoUpdateFailure(plan) {
   return marker;
 }
 async function runAutomaticUpdatePlan(plan) {
-  const previousFailure = matchingAutoUpdateFailure(plan);
-  if (previousFailure) {
+  try {
+    const installation = resolveUpdateInstallation(plan);
+    return await withUpdateLock(installation?.directory ?? null, async () => {
+      const previousFailure = matchingAutoUpdateFailure(plan);
+      if (previousFailure) {
+        process.stderr.write(
+          [
+            "Skipping Deepline SDK/CLI auto-update because this same update already failed on this machine.",
+            `Fix Node/npm native package installation issues, then run: ${previousFailure.manualCommand}`,
+            "Common causes include broken esbuild installs, node-gyp build toolchain errors, npm cache corruption, or registry/network failures.",
+            ""
+          ].join("\n")
+        );
+        return {
+          status: "skipped_previous_failure",
+          exitCode: previousFailure.exitCode || 1,
+          previousFailure
+        };
+      }
+      const targetVersion = autoUpdatePackageSpec(plan).match(
+        /^deepline@(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)$/
+      )?.[1];
+      const installedVersion = installedUpdateVersion(installation);
+      if (targetVersion && parseSemver(installedVersion) && compareUpdateVersions(installedVersion, targetVersion) >= 0) {
+        return { status: "updated", exitCode: 0 };
+      }
+      const exitCode = await applyUpdatePlan(plan);
+      return exitCode === 0 ? { status: "updated", exitCode: 0 } : { status: "failed", exitCode };
+    });
+  } catch (error) {
     process.stderr.write(
-      [
-        "Skipping Deepline SDK/CLI auto-update because this same update already failed on this machine.",
-        `Fix Node/npm native package installation issues, then run: ${previousFailure.manualCommand}`,
-        "Common causes include broken esbuild installs, node-gyp build toolchain errors, npm cache corruption, or registry/network failures.",
-        ""
-      ].join("\n")
+      `Could not complete the automatic Deepline CLI update: ${error instanceof Error ? error.message : String(error)}
+`
     );
-    return {
-      status: "skipped_previous_failure",
-      exitCode: previousFailure.exitCode || 1,
-      previousFailure
-    };
+    return { status: "failed", exitCode: 1 };
+  }
+}
+function parseSemver(version) {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/.exec(
+    version.trim()
+  );
+  if (!match) return null;
+  return {
+    major: Number(match[1]),
+    minor: Number(match[2]),
+    patch: Number(match[3]),
+    prerelease: match[4] ?? ""
+  };
+}
+function compareUpdateVersions(left, right) {
+  const a = parseSemver(left);
+  const b = parseSemver(right);
+  if (!a || !b) return left.localeCompare(right);
+  for (const key of ["major", "minor", "patch"]) {
+    if (a[key] !== b[key]) return a[key] > b[key] ? 1 : -1;
+  }
+  if (a.prerelease === b.prerelease) return 0;
+  if (!a.prerelease) return 1;
+  if (!b.prerelease) return -1;
+  return a.prerelease.localeCompare(b.prerelease);
+}
+function resolveUpdateInstallation(plan) {
+  if (plan.kind === "source" || plan.kind === "homebrew") return null;
+  const prefixIndex = plan.kind === "npm-global" ? plan.args.indexOf("--prefix") : -1;
+  const directory = plan.kind === "python-sidecar" ? plan.stateDir : plan.installPrefix ?? (prefixIndex >= 0 ? plan.args[prefixIndex + 1] : void 0) ?? resolveNpmGlobalPrefix(process.env);
+  if (!directory)
+    throw new Error("Cannot determine the npm global installation to lock.");
+  return {
+    kind: plan.kind,
+    directory: normalizedNpmPrefix(directory) ?? resolve2(directory)
+  };
+}
+function installedUpdateVersion(installation) {
+  if (!installation) return "";
+  const { kind, directory } = installation;
+  if (kind === "python-sidecar") {
+    try {
+      const version = safeVersionSegment(
+        readFileSync3(join3(directory, ".version"), "utf8")
+      );
+      return !version || sidecarStructureFailure(join3(directory, "versions", version)) ? "" : version;
+    } catch {
+      return "";
+    }
+  }
+  return installedPackageVersion(
+    process.platform === "win32" ? directory : join3(directory, "lib")
+  );
+}
+async function withUpdateLock(installationDirectory, action) {
+  if (!installationDirectory) return action();
+  mkdirSync2(installationDirectory, { recursive: true });
+  const lockPath = join3(installationDirectory, ".deepline-update.lock");
+  const deadline = Date.now() + 12e4;
+  let waiting = false;
+  for (; ; ) {
+    try {
+      mkdirSync2(lockPath, { mode: 448 });
+      break;
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
+      if (Date.now() >= deadline) {
+        throw new Error(
+          `Timed out waiting for the Deepline CLI update lock at ${lockPath}. Check for an active installer before removing a lock left by an interrupted update.`
+        );
+      }
+      if (!waiting) {
+        process.stderr.write(
+          "Another Deepline CLI update is in progress; waiting for it to finish.\n"
+        );
+        waiting = true;
+      }
+      await delay(100);
+    }
+  }
+  try {
+    return await action();
+  } finally {
+    rmSync2(lockPath, { recursive: true });
   }
-  const exitCode = await runUpdatePlan(plan);
-  return exitCode === 0 ? { status: "updated", exitCode: 0 } : { status: "failed", exitCode };
 }
 function safeVersionSegment(value) {
   const normalized = value.trim();
@@ -1014,6 +1127,13 @@ async function runPythonSidecarUpdatePlan(plan) {
   return 0;
 }
 async function runUpdatePlan(plan) {
+  const installation = resolveUpdateInstallation(plan);
+  return withUpdateLock(
+    installation?.directory ?? null,
+    () => applyUpdatePlan(plan)
+  );
+}
+async function applyUpdatePlan(plan) {
   let exitCode = 1;
   if (plan.kind === "npm-global") {
     exitCode = await runNpmInstallWithRegistryFallback({
@@ -1246,6 +1366,7 @@ export {
   canAutomaticallyApplyUpdatePlan,
   resolveUpdatePlan,
   runAutomaticUpdatePlan,
+  compareUpdateVersions,
   runUpdatePlan,
   publishedVersionSupportsPin,
   runUpdateCommand,

package/dist/cli/{chunk-2PRO2JTX.mjs → chunk-RFB25DSQ.mjs}

@@ -3,7 +3,7 @@ import {
   ConfigError,
   RateLimitError,
   ToolRateLimitError
-} from "./chunk-YHPYUZZX.mjs";
+} from "./chunk-MAMVGOSC.mjs";
 import {
   apiErrorCodeFromResponse,
   apiErrorMessage
@@ -14,10 +14,10 @@ import {
   ToolExecutionError,
   deserializeToolExecutionFailure,
   serializeToolExecutionFailure
-} from "./chunk-NXGCO4JB.mjs";
+} from "./chunk-E4IXDAZI.mjs";
 import {
   SDK_RELEASE
-} from "./chunk-TQNHMWUR.mjs";
+} from "./chunk-2YR7BIIC.mjs";
 
 // src/config.ts
 import {
@@ -682,8 +682,13 @@ var AGENT_SESSION_ID_VARIABLES = [
   "CODEX_SESSION_ID",
   "CODEX_THREAD_ID"
 ];
-function agentSessionIdFromEnvironment(env = process.env) {
-  for (const variable of AGENT_SESSION_ID_VARIABLES) {
+function agentSessionIdFromEnvironment(env = process.env, agentRuntime) {
+  const detectedRuntime = normalizeAgentRuntime(
+    agentRuntime ?? env.DEEPLINE_AGENT_RUNTIME
+  );
+  const runtime = (detectedRuntime === "unknown" ? null : detectedRuntime) ?? (env.CODEX_SESSION_ID?.trim() || env.CODEX_THREAD_ID?.trim() ? "codex" : null);
+  const variables = runtime === "codex" ? ["CODEX_SESSION_ID", "CODEX_THREAD_ID"] : runtime === "claude_code" || runtime === "claude_cowork" ? ["CLAUDE_CODE_SESSION_ID"] : runtime === null ? AGENT_SESSION_ID_VARIABLES : [];
+  for (const variable of variables) {
     const sessionId = env[variable]?.trim();
     if (sessionId) return sessionId;
   }
@@ -878,285 +883,24 @@ var ABSURD_RELEASE_OVERRIDE_HEADER = "x-deepline-absurd-release";
 var PREFERRED_RECEIPT_GATEWAY_MACHINE_ID_HEADER = "x-deepline-preferred-receipt-gateway-machine-id";
 var SYNTHETIC_RUN_HEADER = "x-deepline-synthetic-run";
 
-// ../play-runtime/runtime-incident-drills.ts
-var RUNTIME_TEST_FAULT_IDS = [
-  "receipt_complete_write_fail",
-  "receipt_fail_write_fail",
-  "worker_receipt_complete_write_fail",
-  "invocation_response_delivery_abort",
-  "execution_upstream_response_loss",
-  "receipt_gateway_hold_ms",
-  "receipt_claim_query_hold_once_ms",
-  "receipt_claim_response_timeout",
-  "modal_sandbox_create_resource_exhausted",
-  "runtime_sheet_page_tail_hold_ms"
-];
-var LOCAL_TOPOLOGY = ["local_daytona"];
-var LOCAL_AND_PREVIEW_TOPOLOGIES = [
-  "local_daytona",
-  "preview_fly",
-  "preview_direct_modal"
-];
-var MODAL_PREVIEW_TOPOLOGY = ["preview_direct_modal"];
-var RUNTIME_INCIDENT_DRILL_CATALOG = [
-  {
-    id: "local_worker_process_outage",
-    description: "Interrupt the scheduler worker in the selected non-production runtime topology.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "process",
-      component: "worker",
-      modes: ["pause", "crash"]
-    },
-    expected: {
-      outcome: "The same logical run stays durable through the worker outage and completes after the selected topology recovers.",
-      safetyFacts: ["same_logical_run", "no_false_success"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "local-component-outage-recovery-e2e"
-    }
-  },
-  {
-    id: "local_gateway_process_outage",
-    description: "Interrupt the receipt gateway in the selected non-production runtime topology.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "process",
-      component: "gateway",
-      modes: ["pause", "crash"]
-    },
-    expected: {
-      outcome: "In-flight work recovers only at a safe receipt boundary and the same logical run completes after the gateway recovers.",
-      safetyFacts: [
-        "same_logical_run",
-        "no_false_success",
-        "bounded_provider_execution"
-      ]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "local-component-outage-recovery-e2e"
-    }
-  },
-  {
-    id: "local_runtime_process_outage",
-    description: "Interrupt both runtime components in the selected non-production topology.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: { kind: "process", component: "all", modes: ["pause", "crash"] },
-    expected: {
-      outcome: "Durable work waits through the combined outage; it never becomes a false success or creates a second logical run.",
-      safetyFacts: ["same_logical_run", "no_false_success"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "local-component-outage-recovery-e2e"
-    }
-  },
-  {
-    id: "receipt_complete_write_fail",
-    description: "Fail the next durable receipt-completion write.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The failed run is loud, and a later bounded recovery may repeat the affected provider operation if its prior completion was not durable.",
-      safetyFacts: ["retry_or_explicit_recovery", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "receipt-persist-failure-run-fatal-e2e"
-    }
-  },
-  {
-    id: "receipt_fail_write_fail",
-    description: "Fail the next durable receipt-failure write.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The failure is loud; recovery remains bounded and may repeat an operation whose prior outcome was not durably recorded.",
-      safetyFacts: ["retry_or_explicit_recovery", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "focused_regression",
-      target: "tests/lib/plays/runtime-test-fault-registry.test.ts"
-    }
-  },
-  {
-    id: "worker_receipt_complete_write_fail",
-    description: "Fail the worker-side receipt-completion write once.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The worker reports the persistence failure loudly; bounded recovery may repeat work whose completion was not durable.",
-      safetyFacts: ["retry_or_explicit_recovery", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "focused_regression",
-      target: "tests/lib/plays/runtime-test-fault-registry.test.ts"
-    }
-  },
-  {
-    id: "invocation_response_delivery_abort",
-    description: "Abort one receipt-gateway response after invocation delivery.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same logical run completes through terminal-cache replay; any provider retry is governed by its separate operation policy.",
-      safetyFacts: ["same_logical_run", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "invocation-delivery-replay-e2e"
-    }
-  },
-  {
-    id: "execution_upstream_response_loss",
-    description: "Lose the first response of each keyed execution after the upstream app durably stores it.",
-    topologies: ["preview_fly"],
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same invocation recovers the stored response without repeating provider work or customer charges, and every row retains its usable result.",
-      safetyFacts: [
-        "same_logical_run",
-        "bounded_provider_execution",
-        "all_rows_settle_once",
-        "no_false_success"
-      ]
-    },
-    verification: {
-      kind: "preview_black_box",
-      target: "101-agent-heavy-gateway-load-e2e"
-    }
-  },
-  {
-    id: "receipt_gateway_hold_ms",
-    description: "Hold one checked-out receipt-gateway scheduler client.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 500,
-      valueMeaning: "milliseconds"
-    },
-    expected: {
-      outcome: "The request is delayed inside the real gateway pool and either completes within its deadline or follows bounded transport recovery.",
-      safetyFacts: ["bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "agent-heavy-gateway-load-e2e"
-    }
-  },
-  {
-    id: "receipt_claim_query_hold_once_ms",
-    description: "Hold one physical receipt-claim query.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 500,
-      valueMeaning: "milliseconds"
-    },
-    expected: {
-      outcome: "The checked-out claim either completes or times out through bounded recovery; an ambiguous outcome may be retried within its budget.",
-      safetyFacts: ["bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "receipt-claim-deadline-recovery-e2e"
-    }
-  },
-  {
-    id: "receipt_claim_response_timeout",
-    description: "Report one fully received receipt-claim response as timed out.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same logical run completes by replaying the committed receipt response or uses bounded recovery if that response is unavailable.",
-      safetyFacts: ["same_logical_run", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "receipt-ambiguous-response-recovery-e2e"
-    }
-  },
-  {
-    id: "modal_sandbox_create_resource_exhausted",
-    description: "Make Modal sandbox creation return RESOURCE_EXHAUSTED before user code.",
-    topologies: MODAL_PREVIEW_TOPOLOGY,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same logical run enters bounded pre-code defer/recovery and later retries sandbox startup; no user code or provider call precedes the retry.",
-      safetyFacts: [
-        "same_logical_run",
-        "no_user_code_before_recovery",
-        "bounded_provider_execution"
-      ]
-    },
-    verification: {
-      kind: "preview_black_box",
-      target: "modal-sandbox-recovery-e2e"
-    }
-  },
-  {
-    id: "runtime_sheet_page_tail_hold_ms",
-    description: "Hold one runtime-sheet tail-page operation.",
-    topologies: LOCAL_TOPOLOGY,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 500,
-      valueMeaning: "milliseconds"
-    },
-    expected: {
-      outcome: "Page-tail work stays pending during the bounded hold, then completes without losing or duplicating rows.",
-      safetyFacts: ["all_rows_settle_once"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "page-tail-sheet-write-hold-e2e"
-    }
-  }
-];
-function isRuntimeTestFaultDrill(drill) {
-  return drill.control.kind === "runtime_test_fault" && RUNTIME_TEST_FAULT_IDS.some((faultId) => faultId === drill.id);
-}
-function runtimeTestFaultDrills() {
-  return RUNTIME_INCIDENT_DRILL_CATALOG.filter(isRuntimeTestFaultDrill);
-}
-
 // ../play-runtime/test-runtime-seams.ts
 var PLAY_RUNTIME_TEST_FAULT_HEADER = "x-deepline-test-fault";
-var SUPPORTED_RUNTIME_TEST_FAULTS = new Set(
-  runtimeTestFaultDrills().map(({ id }) => id)
-);
 var MAX_RUNTIME_TEST_POLICY_MS = 10 * 6e4;
 
+// ../integration-contracts/execute-retry-contract.ts
+var EXECUTE_RETRY_POLICY_HEADER = "x-deepline-execute-retry-policy";
+var EXECUTE_RETRY_POLICY_VERSION = 1;
+function parseExecuteRetryPolicy(value) {
+  if (value === `v${EXECUTE_RETRY_POLICY_VERSION}:transient-http-safe`) {
+    return "transient-http-safe";
+  }
+  if (value === `v${EXECUTE_RETRY_POLICY_VERSION}:transient-http-unsafe`) {
+    return "transient-http-unsafe";
+  }
+  return null;
+}
+var ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER = "x-deepline-atomic-tool-supported";
+
 // src/http.ts
 var MAX_DIAGNOSTIC_HEADER_LENGTH = 120;
 var COWORK_NETWORK_HINT = "Claude Cowork appears to be running Deepline in a network-restricted sandbox. In Claude Desktop, open Settings > Capabilities, turn on Allow network egress, and set Domain allowlist to All domains for the Cowork session.";
@@ -1377,7 +1121,7 @@ var HttpClient = class {
     const candidateUrls = options?.exactUrlOnly ? [url] : buildCandidateUrls(url);
     let retryAfterDelayMs = null;
     let totalRetryWaitMs = 0;
-    const maxRetries = options?.maxRetries ?? this.config.maxRetries;
+    let maxRetries = options?.maxRetries ?? this.config.maxRetries;
     requestAttempts: for (let attempt = 0; attempt <= maxRetries; attempt++) {
       if (options?.signal?.aborted) {
         lastError = requestCancelledError(options.signal);
@@ -1445,6 +1189,12 @@ var HttpClient = class {
             httpStatus: response.status,
             body: parsed
           });
+          const responseRetryAllowed = options?.retryFromExecutePolicy !== true || parseExecuteRetryPolicy(
+            response.headers.get(EXECUTE_RETRY_POLICY_HEADER)
+          ) === "transient-http-safe";
+          if (options?.retryFromExecutePolicy === true && responseRetryAllowed && options.executePolicyMaxRetries !== void 0) {
+            maxRetries = options.executePolicyMaxRetries;
+          }
           const structuredToolError = options?.toolId && !response.ok ? deserializeToolExecutionFailure(
             apiErrorMessage(parsed, response.status),
             isRecord(parsed) ? parsed.tool_error : null,
@@ -1458,7 +1208,7 @@ var HttpClient = class {
                 ...failure,
                 retryAfterMs: failure.retryAfterMs ?? Math.max(0, retryAfter)
               });
-              if (attempt < maxRetries) {
+              if (responseRetryAllowed && attempt < maxRetries) {
                 retryAfterDelayMs = retryAfter;
                 break;
               }
@@ -1477,7 +1227,7 @@ var HttpClient = class {
             }
             const retryAfter = parseRetryAfter(response);
             lastError = new RateLimitError(retryAfter);
-            if (attempt < maxRetries) {
+            if (responseRetryAllowed && attempt < maxRetries) {
               retryAfterDelayMs = retryAfter;
               break;
             }
@@ -1487,7 +1237,7 @@ var HttpClient = class {
             throw new AuthError(apiErrorMessage(parsed, response.status));
           }
           if (!response.ok) {
-            const retryableApiError = options?.retryApiErrors === true && isRetryableApiErrorResponse(response.status);
+            const retryableApiError = options?.retryApiErrors === true && responseRetryAllowed && isRetryableApiErrorResponse(response.status);
             const htmlError = detectHtmlErrorBody(
               body,
               response.headers.get("content-type")
@@ -1554,6 +1304,7 @@ var HttpClient = class {
             timeoutMs,
             timedOut: requestTimedOut
           });
+          if (options?.retryFromExecutePolicy) break requestAttempts;
         } finally {
           clearTimeout(timeoutId);
           options?.signal?.removeEventListener("abort", abortRequest);
@@ -1935,6 +1686,7 @@ export {
   getActiveProjectAuthSource,
   resolveCliAuthProvenance,
   resolveCliCommandContext,
+  ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER,
   SDK_VERSION,
   SDK_API_MAJOR,
   SDK_API_CONTRACT,