deepline 0.3.409 → 0.3.411

package/dist/cli/{chunk-FERRDNMO.js → chunk-AD47BXN2.js}

@@ -9,13 +9,13 @@ var _chunkBQR6UN3Cjs = require('./chunk-BQR6UN3C.js');
 var _chunkZM2YPJQJjs = require('./chunk-ZM2YPJQJ.js');
 
 
+var _chunkJ33TSWO5js = require('./chunk-J33TSWO5.js');
 
 
 
-var _chunkNA4T3B62js = require('./chunk-NA4T3B62.js');
 
 
-var _chunkZ4VNJOF7js = require('./chunk-Z4VNJOF7.js');
+var _chunkNA4T3B62js = require('./chunk-NA4T3B62.js');
 
 // ../plays/field-catalog.ts
 var value = (description) => ({ type: "string", description });
@@ -240,8 +240,8 @@ function toolContractJsonForDescribe(tool, requestedToolId, authoringContractEdi
     arrayField(toolExecutionResult, "extractedLists", "extracted_lists")
   ).map((entry) => ({
     ...entry,
-    returnType: _chunkZ4VNJOF7js.playToolListGetterMode.call(void 0, authoringContractEdition) === "array" ? "Array" : "PlayDataset",
-    rowsExpression: _chunkZ4VNJOF7js.playToolListGetterMode.call(void 0, authoringContractEdition) === "array" ? entry.expression : `await ${entry.expression}.materialize()`
+    returnType: _chunkJ33TSWO5js.playToolListGetterMode.call(void 0, authoringContractEdition) === "array" ? "Array" : "PlayDataset",
+    rowsExpression: _chunkJ33TSWO5js.playToolListGetterMode.call(void 0, authoringContractEdition) === "array" ? entry.expression : `await ${entry.expression}.materialize()`
   }));
   const extractedValues = extractionContractEntries(
     arrayField(toolExecutionResult, "extractedValues", "extracted_values")
@@ -618,7 +618,7 @@ function usageGuidanceWithAccessDefaults(usageGuidance) {
       extractedLists: {
         ...recordField(existingAccess, "extractedLists"),
         expression: "toolExecutionResult.extractedLists.<name>.get()",
-        meaning: _chunkZ4VNJOF7js.playToolListGetterMode.call(void 0, ) === "array" ? "Returns an ordinary array from this response. Use array methods directly or pass it to ctx.dataset to persist row work. Lazy or incomplete lists throw; use readList for an explicit dataset read. It does not fetch provider pages." : "Returns a PlayDataset, not a JavaScript array. Pass the handle to ctx.dataset, use first(), async iteration, or await handle.materialize() for the complete current list within the memory cap. materialize(n) and peek(n) return a prefix; none fetch additional provider pages. A missing getter is not an empty list."
+        meaning: _chunkJ33TSWO5js.playToolListGetterMode.call(void 0, ) === "array" ? "Returns an ordinary array from this response. Use array methods directly or pass it to ctx.dataset to persist row work. Lazy or incomplete lists throw; use readList for an explicit dataset read. It does not fetch provider pages." : "Returns a PlayDataset, not a JavaScript array. Pass the handle to ctx.dataset, use first(), async iteration, or await handle.materialize() for the complete current list within the memory cap. materialize(n) and peek(n) return a prefix; none fetch additional provider pages. A missing getter is not an empty list."
       },
       rawToolResponse: {
         expression: "toolExecutionResult.toolResponse.rawV2",

package/dist/cli/{chunk-J6DCKJNM.mjs → chunk-BJV3VSKE.mjs}

@@ -1,6 +1,18 @@
 import {
   writeRawStderr
-} from "./chunk-JRAVVJ3T.mjs";
+} from "./chunk-XJD6LZCO.mjs";
+
+// src/cli/maintenance-policy.ts
+import { InvalidArgumentError } from "commander";
+function parseCliMaintenancePolicy(value) {
+  if (value === "configured" || value === "off") return value;
+  throw new InvalidArgumentError(
+    "Maintenance policy must be configured or off."
+  );
+}
+function resolveCliMaintenancePolicy(input) {
+  return input.dryRun ? "off" : input.maintenance ?? "configured";
+}
 
 // src/cli/trace.ts
 var cliTraceStartedAt = Date.now();
@@ -51,6 +63,9 @@ async function traceCliSpan(phase, fields, run) {
 }
 
 export {
+  parseCliMaintenancePolicy,
+  resolveCliMaintenancePolicy,
+  isCliTraceEnabled,
   recordCliTrace,
   traceCliSpan
 };

package/dist/cli/{chunk-S6R3OX7B.js → chunk-E4CABWXL.js}

@@ -1,4 +1,4 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// ../plays/artifact-types.ts
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// ../plays/artifact-types.ts
 var PLAY_ARTIFACT_KINDS = {
   cjsNode20: "cjs_node20"
 };
@@ -28,9 +28,26 @@ var PLAY_BACKEND_DESCRIPTORS = {
 };
 
 // ../plays/tool-response-contract.ts
+var V2_TOOL_RESPONSE_CONTRACT = "v2-tool-response";
 var RAW_V2_TOOL_RESPONSE_CONTRACT = "raw-v2";
 var RAW_V2_TOOL_RESPONSE_RECEIPT_REVISION = "raw-v2-receipt-v1";
 var TOOL_RESPONSE_RECEIPT_REVISION_PATTERN = /^[A-Za-z0-9](?:[A-Za-z0-9._-]{0,63})$/;
+function isToolResponseContract(value) {
+  return value === V2_TOOL_RESPONSE_CONTRACT || value === RAW_V2_TOOL_RESPONSE_CONTRACT;
+}
+function declaredToolResponseContract(value) {
+  if (value == null) return void 0;
+  if (isToolResponseContract(value)) return value;
+  throw new UnsupportedToolResponseContractError(value);
+}
+var UnsupportedToolResponseContractError = class extends Error {
+  constructor(value) {
+    super(
+      `Unsupported tool response contract ${String(value)}. Supported contracts: ${V2_TOOL_RESPONSE_CONTRACT}, ${RAW_V2_TOOL_RESPONSE_CONTRACT}.`
+    );
+    this.name = "UnsupportedToolResponseContractError";
+  }
+};
 var InvalidToolResponseReceiptRevisionError = class extends Error {
   constructor(value) {
     super(
@@ -46,6 +63,9 @@ function normalizeToolResponseReceiptRevision(value) {
   }
   throw new InvalidToolResponseReceiptRevisionError(value);
 }
+function normalizeToolResponseContract(value) {
+  return _nullishCoalesce(declaredToolResponseContract(value), () => ( V2_TOOL_RESPONSE_CONTRACT));
+}
 function legacyRawFromToolResponseRawV2(rawV2, view, responseMeta) {
   const legacyRaw = view === "data" && rawV2 && typeof rawV2 === "object" && !Array.isArray(rawV2) ? rawV2.data : rawV2;
   const deeplineBilling = _optionalChain([responseMeta, 'optionalAccess', _ => _.deepline_billing]);
@@ -73,4 +93,7 @@ function providerMetaFromToolResponseRawV2(rawV2, view) {
 
 
 
-exports.RAW_V2_TOOL_RESPONSE_CONTRACT = RAW_V2_TOOL_RESPONSE_CONTRACT; exports.RAW_V2_TOOL_RESPONSE_RECEIPT_REVISION = RAW_V2_TOOL_RESPONSE_RECEIPT_REVISION; exports.normalizeToolResponseReceiptRevision = normalizeToolResponseReceiptRevision; exports.legacyRawFromToolResponseRawV2 = legacyRawFromToolResponseRawV2; exports.providerMetaFromToolResponseRawV2 = providerMetaFromToolResponseRawV2; exports.PLAY_ARTIFACT_KINDS = PLAY_ARTIFACT_KINDS; exports.PLAY_RUNTIME_BACKENDS = PLAY_RUNTIME_BACKENDS;
+
+
+
+exports.RAW_V2_TOOL_RESPONSE_CONTRACT = RAW_V2_TOOL_RESPONSE_CONTRACT; exports.RAW_V2_TOOL_RESPONSE_RECEIPT_REVISION = RAW_V2_TOOL_RESPONSE_RECEIPT_REVISION; exports.UnsupportedToolResponseContractError = UnsupportedToolResponseContractError; exports.InvalidToolResponseReceiptRevisionError = InvalidToolResponseReceiptRevisionError; exports.normalizeToolResponseReceiptRevision = normalizeToolResponseReceiptRevision; exports.normalizeToolResponseContract = normalizeToolResponseContract; exports.legacyRawFromToolResponseRawV2 = legacyRawFromToolResponseRawV2; exports.providerMetaFromToolResponseRawV2 = providerMetaFromToolResponseRawV2; exports.PLAY_ARTIFACT_KINDS = PLAY_ARTIFACT_KINDS; exports.PLAY_RUNTIME_BACKENDS = PLAY_RUNTIME_BACKENDS;

package/dist/cli/{chunk-NXGCO4JB.mjs → chunk-E4IXDAZI.mjs}

@@ -8,6 +8,10 @@ var PROVIDER_TRANSIENT_ERROR_BRAND = Symbol.for(
 );
 var LEGACY_TOOL_EXECUTION_ERROR_SCHEMA_VERSION = 0;
 var TOOL_EXECUTION_ERROR_SCHEMA_VERSION = 1;
+var SUPPORTED_TOOL_EXECUTION_ERROR_SCHEMA_VERSIONS = [
+  LEGACY_TOOL_EXECUTION_ERROR_SCHEMA_VERSION,
+  TOOL_EXECUTION_ERROR_SCHEMA_VERSION
+];
 var TOOL_EXECUTION_ERROR_SCHEMA_HEADER = "x-deepline-tool-error-schema";
 var MAX_IDENTIFIER_LENGTH = 200;
 var MAX_CODE_LENGTH = 160;
@@ -329,6 +333,7 @@ function deserializeToolExecutionFailure(message, value, acceptedSchemaVersion)
 
 export {
   TOOL_EXECUTION_ERROR_SCHEMA_VERSION,
+  SUPPORTED_TOOL_EXECUTION_ERROR_SCHEMA_VERSIONS,
   TOOL_EXECUTION_ERROR_SCHEMA_HEADER,
   DeeplineError,
   ToolExecutionError,

package/dist/cli/{chunk-BEVLCKXG.mjs → chunk-E4KBNNNB.mjs}

@@ -1,6 +1,6 @@
 import {
   resolveShellSpawn
-} from "./chunk-IT3XBJQR.mjs";
+} from "./chunk-IR3AKJAY.mjs";
 
 // src/cli/npm-script-policy.ts
 import { spawnSync } from "child_process";

package/dist/cli/{chunk-2PRO2JTX.mjs → chunk-E52TKKVI.mjs}

@@ -3,7 +3,7 @@ import {
   ConfigError,
   RateLimitError,
   ToolRateLimitError
-} from "./chunk-YHPYUZZX.mjs";
+} from "./chunk-MAMVGOSC.mjs";
 import {
   apiErrorCodeFromResponse,
   apiErrorMessage
@@ -14,10 +14,10 @@ import {
   ToolExecutionError,
   deserializeToolExecutionFailure,
   serializeToolExecutionFailure
-} from "./chunk-NXGCO4JB.mjs";
+} from "./chunk-E4IXDAZI.mjs";
 import {
   SDK_RELEASE
-} from "./chunk-TQNHMWUR.mjs";
+} from "./chunk-OGSXENOF.mjs";
 
 // src/config.ts
 import {
@@ -682,8 +682,13 @@ var AGENT_SESSION_ID_VARIABLES = [
   "CODEX_SESSION_ID",
   "CODEX_THREAD_ID"
 ];
-function agentSessionIdFromEnvironment(env = process.env) {
-  for (const variable of AGENT_SESSION_ID_VARIABLES) {
+function agentSessionIdFromEnvironment(env = process.env, agentRuntime) {
+  const detectedRuntime = normalizeAgentRuntime(
+    agentRuntime ?? env.DEEPLINE_AGENT_RUNTIME
+  );
+  const runtime = (detectedRuntime === "unknown" ? null : detectedRuntime) ?? (env.CODEX_SESSION_ID?.trim() || env.CODEX_THREAD_ID?.trim() ? "codex" : null);
+  const variables = runtime === "codex" ? ["CODEX_SESSION_ID", "CODEX_THREAD_ID"] : runtime === "claude_code" || runtime === "claude_cowork" ? ["CLAUDE_CODE_SESSION_ID"] : runtime === null ? AGENT_SESSION_ID_VARIABLES : [];
+  for (const variable of variables) {
     const sessionId = env[variable]?.trim();
     if (sessionId) return sessionId;
   }
@@ -878,285 +883,24 @@ var ABSURD_RELEASE_OVERRIDE_HEADER = "x-deepline-absurd-release";
 var PREFERRED_RECEIPT_GATEWAY_MACHINE_ID_HEADER = "x-deepline-preferred-receipt-gateway-machine-id";
 var SYNTHETIC_RUN_HEADER = "x-deepline-synthetic-run";
 
-// ../play-runtime/runtime-incident-drills.ts
-var RUNTIME_TEST_FAULT_IDS = [
-  "receipt_complete_write_fail",
-  "receipt_fail_write_fail",
-  "worker_receipt_complete_write_fail",
-  "invocation_response_delivery_abort",
-  "execution_upstream_response_loss",
-  "receipt_gateway_hold_ms",
-  "receipt_claim_query_hold_once_ms",
-  "receipt_claim_response_timeout",
-  "modal_sandbox_create_resource_exhausted",
-  "runtime_sheet_page_tail_hold_ms"
-];
-var LOCAL_TOPOLOGY = ["local_daytona"];
-var LOCAL_AND_PREVIEW_TOPOLOGIES = [
-  "local_daytona",
-  "preview_fly",
-  "preview_direct_modal"
-];
-var MODAL_PREVIEW_TOPOLOGY = ["preview_direct_modal"];
-var RUNTIME_INCIDENT_DRILL_CATALOG = [
-  {
-    id: "local_worker_process_outage",
-    description: "Interrupt the scheduler worker in the selected non-production runtime topology.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "process",
-      component: "worker",
-      modes: ["pause", "crash"]
-    },
-    expected: {
-      outcome: "The same logical run stays durable through the worker outage and completes after the selected topology recovers.",
-      safetyFacts: ["same_logical_run", "no_false_success"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "local-component-outage-recovery-e2e"
-    }
-  },
-  {
-    id: "local_gateway_process_outage",
-    description: "Interrupt the receipt gateway in the selected non-production runtime topology.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "process",
-      component: "gateway",
-      modes: ["pause", "crash"]
-    },
-    expected: {
-      outcome: "In-flight work recovers only at a safe receipt boundary and the same logical run completes after the gateway recovers.",
-      safetyFacts: [
-        "same_logical_run",
-        "no_false_success",
-        "bounded_provider_execution"
-      ]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "local-component-outage-recovery-e2e"
-    }
-  },
-  {
-    id: "local_runtime_process_outage",
-    description: "Interrupt both runtime components in the selected non-production topology.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: { kind: "process", component: "all", modes: ["pause", "crash"] },
-    expected: {
-      outcome: "Durable work waits through the combined outage; it never becomes a false success or creates a second logical run.",
-      safetyFacts: ["same_logical_run", "no_false_success"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "local-component-outage-recovery-e2e"
-    }
-  },
-  {
-    id: "receipt_complete_write_fail",
-    description: "Fail the next durable receipt-completion write.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The failed run is loud, and a later bounded recovery may repeat the affected provider operation if its prior completion was not durable.",
-      safetyFacts: ["retry_or_explicit_recovery", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "receipt-persist-failure-run-fatal-e2e"
-    }
-  },
-  {
-    id: "receipt_fail_write_fail",
-    description: "Fail the next durable receipt-failure write.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The failure is loud; recovery remains bounded and may repeat an operation whose prior outcome was not durably recorded.",
-      safetyFacts: ["retry_or_explicit_recovery", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "focused_regression",
-      target: "tests/lib/plays/runtime-test-fault-registry.test.ts"
-    }
-  },
-  {
-    id: "worker_receipt_complete_write_fail",
-    description: "Fail the worker-side receipt-completion write once.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The worker reports the persistence failure loudly; bounded recovery may repeat work whose completion was not durable.",
-      safetyFacts: ["retry_or_explicit_recovery", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "focused_regression",
-      target: "tests/lib/plays/runtime-test-fault-registry.test.ts"
-    }
-  },
-  {
-    id: "invocation_response_delivery_abort",
-    description: "Abort one receipt-gateway response after invocation delivery.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same logical run completes through terminal-cache replay; any provider retry is governed by its separate operation policy.",
-      safetyFacts: ["same_logical_run", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "invocation-delivery-replay-e2e"
-    }
-  },
-  {
-    id: "execution_upstream_response_loss",
-    description: "Lose the first response of each keyed execution after the upstream app durably stores it.",
-    topologies: ["preview_fly"],
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same invocation recovers the stored response without repeating provider work or customer charges, and every row retains its usable result.",
-      safetyFacts: [
-        "same_logical_run",
-        "bounded_provider_execution",
-        "all_rows_settle_once",
-        "no_false_success"
-      ]
-    },
-    verification: {
-      kind: "preview_black_box",
-      target: "101-agent-heavy-gateway-load-e2e"
-    }
-  },
-  {
-    id: "receipt_gateway_hold_ms",
-    description: "Hold one checked-out receipt-gateway scheduler client.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 500,
-      valueMeaning: "milliseconds"
-    },
-    expected: {
-      outcome: "The request is delayed inside the real gateway pool and either completes within its deadline or follows bounded transport recovery.",
-      safetyFacts: ["bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "agent-heavy-gateway-load-e2e"
-    }
-  },
-  {
-    id: "receipt_claim_query_hold_once_ms",
-    description: "Hold one physical receipt-claim query.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 500,
-      valueMeaning: "milliseconds"
-    },
-    expected: {
-      outcome: "The checked-out claim either completes or times out through bounded recovery; an ambiguous outcome may be retried within its budget.",
-      safetyFacts: ["bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "receipt-claim-deadline-recovery-e2e"
-    }
-  },
-  {
-    id: "receipt_claim_response_timeout",
-    description: "Report one fully received receipt-claim response as timed out.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same logical run completes by replaying the committed receipt response or uses bounded recovery if that response is unavailable.",
-      safetyFacts: ["same_logical_run", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "receipt-ambiguous-response-recovery-e2e"
-    }
-  },
-  {
-    id: "modal_sandbox_create_resource_exhausted",
-    description: "Make Modal sandbox creation return RESOURCE_EXHAUSTED before user code.",
-    topologies: MODAL_PREVIEW_TOPOLOGY,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same logical run enters bounded pre-code defer/recovery and later retries sandbox startup; no user code or provider call precedes the retry.",
-      safetyFacts: [
-        "same_logical_run",
-        "no_user_code_before_recovery",
-        "bounded_provider_execution"
-      ]
-    },
-    verification: {
-      kind: "preview_black_box",
-      target: "modal-sandbox-recovery-e2e"
-    }
-  },
-  {
-    id: "runtime_sheet_page_tail_hold_ms",
-    description: "Hold one runtime-sheet tail-page operation.",
-    topologies: LOCAL_TOPOLOGY,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 500,
-      valueMeaning: "milliseconds"
-    },
-    expected: {
-      outcome: "Page-tail work stays pending during the bounded hold, then completes without losing or duplicating rows.",
-      safetyFacts: ["all_rows_settle_once"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "page-tail-sheet-write-hold-e2e"
-    }
-  }
-];
-function isRuntimeTestFaultDrill(drill) {
-  return drill.control.kind === "runtime_test_fault" && RUNTIME_TEST_FAULT_IDS.some((faultId) => faultId === drill.id);
-}
-function runtimeTestFaultDrills() {
-  return RUNTIME_INCIDENT_DRILL_CATALOG.filter(isRuntimeTestFaultDrill);
-}
-
 // ../play-runtime/test-runtime-seams.ts
 var PLAY_RUNTIME_TEST_FAULT_HEADER = "x-deepline-test-fault";
-var SUPPORTED_RUNTIME_TEST_FAULTS = new Set(
-  runtimeTestFaultDrills().map(({ id }) => id)
-);
 var MAX_RUNTIME_TEST_POLICY_MS = 10 * 6e4;
 
+// ../integration-contracts/execute-retry-contract.ts
+var EXECUTE_RETRY_POLICY_HEADER = "x-deepline-execute-retry-policy";
+var EXECUTE_RETRY_POLICY_VERSION = 1;
+function parseExecuteRetryPolicy(value) {
+  if (value === `v${EXECUTE_RETRY_POLICY_VERSION}:transient-http-safe`) {
+    return "transient-http-safe";
+  }
+  if (value === `v${EXECUTE_RETRY_POLICY_VERSION}:transient-http-unsafe`) {
+    return "transient-http-unsafe";
+  }
+  return null;
+}
+var ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER = "x-deepline-atomic-tool-supported";
+
 // src/http.ts
 var MAX_DIAGNOSTIC_HEADER_LENGTH = 120;
 var COWORK_NETWORK_HINT = "Claude Cowork appears to be running Deepline in a network-restricted sandbox. In Claude Desktop, open Settings > Capabilities, turn on Allow network egress, and set Domain allowlist to All domains for the Cowork session.";
@@ -1377,7 +1121,7 @@ var HttpClient = class {
     const candidateUrls = options?.exactUrlOnly ? [url] : buildCandidateUrls(url);
     let retryAfterDelayMs = null;
     let totalRetryWaitMs = 0;
-    const maxRetries = options?.maxRetries ?? this.config.maxRetries;
+    let maxRetries = options?.maxRetries ?? this.config.maxRetries;
     requestAttempts: for (let attempt = 0; attempt <= maxRetries; attempt++) {
       if (options?.signal?.aborted) {
         lastError = requestCancelledError(options.signal);
@@ -1445,6 +1189,12 @@ var HttpClient = class {
             httpStatus: response.status,
             body: parsed
           });
+          const responseRetryAllowed = options?.retryFromExecutePolicy !== true || parseExecuteRetryPolicy(
+            response.headers.get(EXECUTE_RETRY_POLICY_HEADER)
+          ) === "transient-http-safe";
+          if (options?.retryFromExecutePolicy === true && responseRetryAllowed && options.executePolicyMaxRetries !== void 0) {
+            maxRetries = options.executePolicyMaxRetries;
+          }
           const structuredToolError = options?.toolId && !response.ok ? deserializeToolExecutionFailure(
             apiErrorMessage(parsed, response.status),
             isRecord(parsed) ? parsed.tool_error : null,
@@ -1458,7 +1208,7 @@ var HttpClient = class {
                 ...failure,
                 retryAfterMs: failure.retryAfterMs ?? Math.max(0, retryAfter)
               });
-              if (attempt < maxRetries) {
+              if (responseRetryAllowed && attempt < maxRetries) {
                 retryAfterDelayMs = retryAfter;
                 break;
               }
@@ -1477,7 +1227,7 @@ var HttpClient = class {
             }
             const retryAfter = parseRetryAfter(response);
             lastError = new RateLimitError(retryAfter);
-            if (attempt < maxRetries) {
+            if (responseRetryAllowed && attempt < maxRetries) {
               retryAfterDelayMs = retryAfter;
               break;
             }
@@ -1487,7 +1237,7 @@ var HttpClient = class {
             throw new AuthError(apiErrorMessage(parsed, response.status));
           }
           if (!response.ok) {
-            const retryableApiError = options?.retryApiErrors === true && isRetryableApiErrorResponse(response.status);
+            const retryableApiError = options?.retryApiErrors === true && responseRetryAllowed && isRetryableApiErrorResponse(response.status);
             const htmlError = detectHtmlErrorBody(
               body,
               response.headers.get("content-type")
@@ -1554,6 +1304,7 @@ var HttpClient = class {
             timeoutMs,
             timedOut: requestTimedOut
           });
+          if (options?.retryFromExecutePolicy) break requestAttempts;
         } finally {
           clearTimeout(timeoutId);
           options?.signal?.removeEventListener("abort", abortRequest);
@@ -1935,6 +1686,7 @@ export {
   getActiveProjectAuthSource,
   resolveCliAuthProvenance,
   resolveCliCommandContext,
+  ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER,
   SDK_VERSION,
   SDK_API_MAJOR,
   SDK_API_CONTRACT,

package/dist/cli/chunk-FR2ILQ4G.mjs

@@ -0,0 +1,8 @@
+// ../plays/tool-list-getter-mode.ts
+function playToolListGetterMode(edition = void 0) {
+  return edition === void 0 || edition >= 10 ? "array" : "dataset";
+}
+
+export {
+  playToolListGetterMode
+};