deepline 0.3.409 → 0.3.411

package/dist/cli/{chunk-FJCIUF34.js → chunk-OZSC6CEW.js}

@@ -3,7 +3,7 @@
 
 
 
-var _chunkQ2E4E4FJjs = require('./chunk-Q2E4E4FJ.js');
+var _chunkNPBJI7REjs = require('./chunk-NPBJI7RE.js');
 
 
 
@@ -14,10 +14,10 @@ var _chunkXNYIZMNQjs = require('./chunk-XNYIZMNQ.js');
 
 
 
-var _chunk7P5AA3SNjs = require('./chunk-7P5AA3SN.js');
+var _chunkPPDBRJRWjs = require('./chunk-PPDBRJRW.js');
 
 
-var _chunkDEC3JECCjs = require('./chunk-DEC3JECC.js');
+var _chunkRMINBDYYjs = require('./chunk-RMINBDYY.js');
 
 // src/config.ts
 
@@ -378,7 +378,7 @@ function resolveBaseUrlOnly(options) {
     _optionalChain([options, 'optionalAccess', _32 => _32.baseUrl, 'optionalAccess', _33 => _33.trim, 'call', _34 => _34()]) || autoDetectBaseUrl()
   );
   if (!baseUrl) {
-    throw new (0, _chunkQ2E4E4FJjs.ConfigError)(
+    throw new (0, _chunkNPBJI7REjs.ConfigError)(
       `Invalid ${HOST_URL_ENV}. Expected an http(s) URL such as https://code.deepline.com.`
     );
   }
@@ -389,13 +389,13 @@ function resolveConfig(options) {
     _optionalChain([options, 'optionalAccess', _35 => _35.baseUrl, 'optionalAccess', _36 => _36.trim, 'call', _37 => _37()]) || autoDetectBaseUrl()
   );
   if (!baseUrl) {
-    throw new (0, _chunkQ2E4E4FJjs.ConfigError)(
+    throw new (0, _chunkNPBJI7REjs.ConfigError)(
       `Invalid ${HOST_URL_ENV}. Expected an http(s) URL such as https://code.deepline.com.`
     );
   }
   const apiKey = resolveApiKeyForBaseUrl(baseUrl, _optionalChain([options, 'optionalAccess', _38 => _38.apiKey]));
   if (!apiKey) {
-    throw new (0, _chunkQ2E4E4FJjs.ConfigError)(
+    throw new (0, _chunkNPBJI7REjs.ConfigError)(
       `No API key found. Set ${API_KEY_ENV}, add it to .env.deepline, or run: deepline auth register`
     );
   }
@@ -498,7 +498,7 @@ function findNearestGitCommonDir(startDir) {
 function saveProjectDeeplineEnvValues(values, startDir = process.cwd()) {
   const target = resolveProjectPinTarget(startDir);
   if (!target.ok) {
-    throw new (0, _chunkQ2E4E4FJjs.ConfigError)(
+    throw new (0, _chunkNPBJI7REjs.ConfigError)(
       `Cowork project folder is ambiguous. Candidate folders: ${target.candidates.join(
         ", "
       )}. Set CLAUDE_PROJECT_DIR or cd into the intended project folder before running this command.`
@@ -649,9 +649,9 @@ function resolveCliCommandContext(inputConfig, requestedScope) {
 }
 
 // src/version.ts
-var SDK_VERSION = _chunkDEC3JECCjs.SDK_RELEASE.version;
-var SDK_API_MAJOR = _chunkDEC3JECCjs.SDK_RELEASE.contracts.api.currentMajor;
-var SDK_API_CONTRACT = _nullishCoalesce(_chunkDEC3JECCjs.SDK_RELEASE.contracts.api.legacyWireIds[0], () => ( `api-v${SDK_API_MAJOR}`));
+var SDK_VERSION = _chunkRMINBDYYjs.SDK_RELEASE.version;
+var SDK_API_MAJOR = _chunkRMINBDYYjs.SDK_RELEASE.contracts.api.currentMajor;
+var SDK_API_CONTRACT = _nullishCoalesce(_chunkRMINBDYYjs.SDK_RELEASE.contracts.api.legacyWireIds[0], () => ( `api-v${SDK_API_MAJOR}`));
 
 // src/agent-runtime.ts
 
@@ -682,9 +682,14 @@ var AGENT_SESSION_ID_VARIABLES = [
   "CODEX_SESSION_ID",
   "CODEX_THREAD_ID"
 ];
-function agentSessionIdFromEnvironment(env = process.env) {
-  for (const variable of AGENT_SESSION_ID_VARIABLES) {
-    const sessionId = _optionalChain([env, 'access', _67 => _67[variable], 'optionalAccess', _68 => _68.trim, 'call', _69 => _69()]);
+function agentSessionIdFromEnvironment(env = process.env, agentRuntime) {
+  const detectedRuntime = normalizeAgentRuntime(
+    _nullishCoalesce(agentRuntime, () => ( env.DEEPLINE_AGENT_RUNTIME))
+  );
+  const runtime = _nullishCoalesce((detectedRuntime === "unknown" ? null : detectedRuntime), () => ( (_optionalChain([env, 'access', _67 => _67.CODEX_SESSION_ID, 'optionalAccess', _68 => _68.trim, 'call', _69 => _69()]) || _optionalChain([env, 'access', _70 => _70.CODEX_THREAD_ID, 'optionalAccess', _71 => _71.trim, 'call', _72 => _72()]) ? "codex" : null)));
+  const variables = runtime === "codex" ? ["CODEX_SESSION_ID", "CODEX_THREAD_ID"] : runtime === "claude_code" || runtime === "claude_cowork" ? ["CLAUDE_CODE_SESSION_ID"] : runtime === null ? AGENT_SESSION_ID_VARIABLES : [];
+  for (const variable of variables) {
+    const sessionId = _optionalChain([env, 'access', _73 => _73[variable], 'optionalAccess', _74 => _74.trim, 'call', _75 => _75()]);
     if (sessionId) return sessionId;
   }
   return null;
@@ -692,9 +697,9 @@ function agentSessionIdFromEnvironment(env = process.env) {
 function isCoworkLikeSandbox2() {
   const pluginMode = truthyEnv("DEEPLINE_PLUGIN_MODE");
   const claudeRemote = truthyEnv("CLAUDE_CODE_REMOTE");
-  const projectDir = Boolean(_optionalChain([process, 'access', _70 => _70.env, 'access', _71 => _71.CLAUDE_PROJECT_DIR, 'optionalAccess', _72 => _72.trim, 'call', _73 => _73()]));
-  const pluginRoot = Boolean(_optionalChain([process, 'access', _74 => _74.env, 'access', _75 => _75.DEEPLINE_PLUGIN_ROOT, 'optionalAccess', _76 => _76.trim, 'call', _77 => _77()]));
-  const home = _optionalChain([process, 'access', _78 => _78.env, 'access', _79 => _79.HOME, 'optionalAccess', _80 => _80.trim, 'call', _81 => _81()]) || _os.homedir.call(void 0, );
+  const projectDir = Boolean(_optionalChain([process, 'access', _76 => _76.env, 'access', _77 => _77.CLAUDE_PROJECT_DIR, 'optionalAccess', _78 => _78.trim, 'call', _79 => _79()]));
+  const pluginRoot = Boolean(_optionalChain([process, 'access', _80 => _80.env, 'access', _81 => _81.DEEPLINE_PLUGIN_ROOT, 'optionalAccess', _82 => _82.trim, 'call', _83 => _83()]));
+  const home = _optionalChain([process, 'access', _84 => _84.env, 'access', _85 => _85.HOME, 'optionalAccess', _86 => _86.trim, 'call', _87 => _87()]) || _os.homedir.call(void 0, );
   const sessionHome = home === "/sessions" || home.startsWith("/sessions/");
   return claudeRemote || sessionHome || (pluginMode || pluginRoot) && projectDir;
 }
@@ -702,22 +707,22 @@ function detectAgentRuntime(options = {}) {
   const env = _nullishCoalesce(options.env, () => ( process.env));
   const explicit = normalizeAgentRuntime(env.DEEPLINE_AGENT_RUNTIME);
   if (explicit) return explicit;
-  if (_optionalChain([env, 'access', _82 => _82.CODEX_THREAD_ID, 'optionalAccess', _83 => _83.trim, 'call', _84 => _84()])) return "codex";
+  if (_optionalChain([env, 'access', _88 => _88.CODEX_THREAD_ID, 'optionalAccess', _89 => _89.trim, 'call', _90 => _90()])) return "codex";
   if (options.detectCowork !== false && isCoworkLikeSandbox2()) {
     return "claude_cowork";
   }
-  if (_optionalChain([env, 'access', _85 => _85.CLAUDECODE, 'optionalAccess', _86 => _86.trim, 'call', _87 => _87()]) === "1") return "claude_code";
-  if (_optionalChain([env, 'access', _88 => _88.CLINE_ACTIVE, 'optionalAccess', _89 => _89.trim, 'call', _90 => _90(), 'access', _91 => _91.toLowerCase, 'call', _92 => _92()]) === "true") return "cline";
-  if (_optionalChain([env, 'access', _93 => _93.CURSOR_TRACE_ID, 'optionalAccess', _94 => _94.trim, 'call', _95 => _95()]) || _optionalChain([env, 'access', _96 => _96.CURSOR_AGENT, 'optionalAccess', _97 => _97.trim, 'call', _98 => _98()])) {
+  if (_optionalChain([env, 'access', _91 => _91.CLAUDECODE, 'optionalAccess', _92 => _92.trim, 'call', _93 => _93()]) === "1") return "claude_code";
+  if (_optionalChain([env, 'access', _94 => _94.CLINE_ACTIVE, 'optionalAccess', _95 => _95.trim, 'call', _96 => _96(), 'access', _97 => _97.toLowerCase, 'call', _98 => _98()]) === "true") return "cline";
+  if (_optionalChain([env, 'access', _99 => _99.CURSOR_TRACE_ID, 'optionalAccess', _100 => _100.trim, 'call', _101 => _101()]) || _optionalChain([env, 'access', _102 => _102.CURSOR_AGENT, 'optionalAccess', _103 => _103.trim, 'call', _104 => _104()])) {
     return "cursor";
   }
-  if (_optionalChain([env, 'access', _99 => _99.WINDSURF, 'optionalAccess', _100 => _100.trim, 'call', _101 => _101()]) || _optionalChain([env, 'access', _102 => _102.CASCADE, 'optionalAccess', _103 => _103.trim, 'call', _104 => _104()])) {
+  if (_optionalChain([env, 'access', _105 => _105.WINDSURF, 'optionalAccess', _106 => _106.trim, 'call', _107 => _107()]) || _optionalChain([env, 'access', _108 => _108.CASCADE, 'optionalAccess', _109 => _109.trim, 'call', _110 => _110()])) {
     return "windsurf";
   }
-  if (_optionalChain([env, 'access', _105 => _105.ANTIGRAVITY, 'optionalAccess', _106 => _106.trim, 'call', _107 => _107()]) || _optionalChain([env, 'access', _108 => _108.ANTIGRAVITY_CLI, 'optionalAccess', _109 => _109.trim, 'call', _110 => _110()]) || _optionalChain([env, 'access', _111 => _111.ANTIGRAVITY_AGENT, 'optionalAccess', _112 => _112.trim, 'call', _113 => _113()]) || _optionalChain([env, 'access', _114 => _114.ANTIGRAVITY_WORKSPACE, 'optionalAccess', _115 => _115.trim, 'call', _116 => _116()])) {
+  if (_optionalChain([env, 'access', _111 => _111.ANTIGRAVITY, 'optionalAccess', _112 => _112.trim, 'call', _113 => _113()]) || _optionalChain([env, 'access', _114 => _114.ANTIGRAVITY_CLI, 'optionalAccess', _115 => _115.trim, 'call', _116 => _116()]) || _optionalChain([env, 'access', _117 => _117.ANTIGRAVITY_AGENT, 'optionalAccess', _118 => _118.trim, 'call', _119 => _119()]) || _optionalChain([env, 'access', _120 => _120.ANTIGRAVITY_WORKSPACE, 'optionalAccess', _121 => _121.trim, 'call', _122 => _122()])) {
     return "antigravity";
   }
-  if (_optionalChain([env, 'access', _117 => _117.GEMINI_CLI, 'optionalAccess', _118 => _118.trim, 'call', _119 => _119()]) || _optionalChain([env, 'access', _120 => _120.GEMINI_CLI_VERSION, 'optionalAccess', _121 => _121.trim, 'call', _122 => _122()]) || _optionalChain([env, 'access', _123 => _123.GEMINI_SANDBOX, 'optionalAccess', _124 => _124.trim, 'call', _125 => _125()]) || _optionalChain([env, 'access', _126 => _126.GEMINI_CONFIG_DIR, 'optionalAccess', _127 => _127.trim, 'call', _128 => _128()])) {
+  if (_optionalChain([env, 'access', _123 => _123.GEMINI_CLI, 'optionalAccess', _124 => _124.trim, 'call', _125 => _125()]) || _optionalChain([env, 'access', _126 => _126.GEMINI_CLI_VERSION, 'optionalAccess', _127 => _127.trim, 'call', _128 => _128()]) || _optionalChain([env, 'access', _129 => _129.GEMINI_SANDBOX, 'optionalAccess', _130 => _130.trim, 'call', _131 => _131()]) || _optionalChain([env, 'access', _132 => _132.GEMINI_CONFIG_DIR, 'optionalAccess', _133 => _133.trim, 'call', _134 => _134()])) {
     return "gemini";
   }
   return _nullishCoalesce(options.defaultRuntime, () => ( "unknown"));
@@ -727,11 +732,11 @@ function detectAgentRuntime(options = {}) {
 
 
 function activePluginSkillsDir() {
-  const pluginMode = _optionalChain([process, 'access', _129 => _129.env, 'access', _130 => _130.DEEPLINE_PLUGIN_MODE, 'optionalAccess', _131 => _131.trim, 'call', _132 => _132(), 'access', _133 => _133.toLowerCase, 'call', _134 => _134()]);
+  const pluginMode = _optionalChain([process, 'access', _135 => _135.env, 'access', _136 => _136.DEEPLINE_PLUGIN_MODE, 'optionalAccess', _137 => _137.trim, 'call', _138 => _138(), 'access', _139 => _139.toLowerCase, 'call', _140 => _140()]);
   if (pluginMode !== "true" && pluginMode !== "1" && pluginMode !== "yes" && pluginMode !== "on") {
     return "";
   }
-  const dir = _nullishCoalesce(_optionalChain([process, 'access', _135 => _135.env, 'access', _136 => _136.DEEPLINE_PLUGIN_SKILLS_DIR, 'optionalAccess', _137 => _137.trim, 'call', _138 => _138()]), () => ( ""));
+  const dir = _nullishCoalesce(_optionalChain([process, 'access', _141 => _141.env, 'access', _142 => _142.DEEPLINE_PLUGIN_SKILLS_DIR, 'optionalAccess', _143 => _143.trim, 'call', _144 => _144()]), () => ( ""));
   return dir && _fs.existsSync.call(void 0, dir) ? dir : "";
 }
 function hasActivePluginSkills() {
@@ -860,7 +865,7 @@ var fetchWithDeploymentProtection = (input, init) => {
   const headers = new Headers(
     input instanceof Request ? input.headers : void 0
   );
-  new Headers(_optionalChain([init, 'optionalAccess', _139 => _139.headers])).forEach((value, name) => headers.set(name, value));
+  new Headers(_optionalChain([init, 'optionalAccess', _145 => _145.headers])).forEach((value, name) => headers.set(name, value));
   for (const [name, value] of Object.entries(deploymentProtectionHeaders())) {
     headers.set(name, value);
   }
@@ -878,285 +883,24 @@ var ABSURD_RELEASE_OVERRIDE_HEADER = "x-deepline-absurd-release";
 var PREFERRED_RECEIPT_GATEWAY_MACHINE_ID_HEADER = "x-deepline-preferred-receipt-gateway-machine-id";
 var SYNTHETIC_RUN_HEADER = "x-deepline-synthetic-run";
 
-// ../play-runtime/runtime-incident-drills.ts
-var RUNTIME_TEST_FAULT_IDS = [
-  "receipt_complete_write_fail",
-  "receipt_fail_write_fail",
-  "worker_receipt_complete_write_fail",
-  "invocation_response_delivery_abort",
-  "execution_upstream_response_loss",
-  "receipt_gateway_hold_ms",
-  "receipt_claim_query_hold_once_ms",
-  "receipt_claim_response_timeout",
-  "modal_sandbox_create_resource_exhausted",
-  "runtime_sheet_page_tail_hold_ms"
-];
-var LOCAL_TOPOLOGY = ["local_daytona"];
-var LOCAL_AND_PREVIEW_TOPOLOGIES = [
-  "local_daytona",
-  "preview_fly",
-  "preview_direct_modal"
-];
-var MODAL_PREVIEW_TOPOLOGY = ["preview_direct_modal"];
-var RUNTIME_INCIDENT_DRILL_CATALOG = [
-  {
-    id: "local_worker_process_outage",
-    description: "Interrupt the scheduler worker in the selected non-production runtime topology.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "process",
-      component: "worker",
-      modes: ["pause", "crash"]
-    },
-    expected: {
-      outcome: "The same logical run stays durable through the worker outage and completes after the selected topology recovers.",
-      safetyFacts: ["same_logical_run", "no_false_success"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "local-component-outage-recovery-e2e"
-    }
-  },
-  {
-    id: "local_gateway_process_outage",
-    description: "Interrupt the receipt gateway in the selected non-production runtime topology.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "process",
-      component: "gateway",
-      modes: ["pause", "crash"]
-    },
-    expected: {
-      outcome: "In-flight work recovers only at a safe receipt boundary and the same logical run completes after the gateway recovers.",
-      safetyFacts: [
-        "same_logical_run",
-        "no_false_success",
-        "bounded_provider_execution"
-      ]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "local-component-outage-recovery-e2e"
-    }
-  },
-  {
-    id: "local_runtime_process_outage",
-    description: "Interrupt both runtime components in the selected non-production topology.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: { kind: "process", component: "all", modes: ["pause", "crash"] },
-    expected: {
-      outcome: "Durable work waits through the combined outage; it never becomes a false success or creates a second logical run.",
-      safetyFacts: ["same_logical_run", "no_false_success"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "local-component-outage-recovery-e2e"
-    }
-  },
-  {
-    id: "receipt_complete_write_fail",
-    description: "Fail the next durable receipt-completion write.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The failed run is loud, and a later bounded recovery may repeat the affected provider operation if its prior completion was not durable.",
-      safetyFacts: ["retry_or_explicit_recovery", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "receipt-persist-failure-run-fatal-e2e"
-    }
-  },
-  {
-    id: "receipt_fail_write_fail",
-    description: "Fail the next durable receipt-failure write.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The failure is loud; recovery remains bounded and may repeat an operation whose prior outcome was not durably recorded.",
-      safetyFacts: ["retry_or_explicit_recovery", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "focused_regression",
-      target: "tests/lib/plays/runtime-test-fault-registry.test.ts"
-    }
-  },
-  {
-    id: "worker_receipt_complete_write_fail",
-    description: "Fail the worker-side receipt-completion write once.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The worker reports the persistence failure loudly; bounded recovery may repeat work whose completion was not durable.",
-      safetyFacts: ["retry_or_explicit_recovery", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "focused_regression",
-      target: "tests/lib/plays/runtime-test-fault-registry.test.ts"
-    }
-  },
-  {
-    id: "invocation_response_delivery_abort",
-    description: "Abort one receipt-gateway response after invocation delivery.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same logical run completes through terminal-cache replay; any provider retry is governed by its separate operation policy.",
-      safetyFacts: ["same_logical_run", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "invocation-delivery-replay-e2e"
-    }
-  },
-  {
-    id: "execution_upstream_response_loss",
-    description: "Lose the first response of each keyed execution after the upstream app durably stores it.",
-    topologies: ["preview_fly"],
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same invocation recovers the stored response without repeating provider work or customer charges, and every row retains its usable result.",
-      safetyFacts: [
-        "same_logical_run",
-        "bounded_provider_execution",
-        "all_rows_settle_once",
-        "no_false_success"
-      ]
-    },
-    verification: {
-      kind: "preview_black_box",
-      target: "101-agent-heavy-gateway-load-e2e"
-    }
-  },
-  {
-    id: "receipt_gateway_hold_ms",
-    description: "Hold one checked-out receipt-gateway scheduler client.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 500,
-      valueMeaning: "milliseconds"
-    },
-    expected: {
-      outcome: "The request is delayed inside the real gateway pool and either completes within its deadline or follows bounded transport recovery.",
-      safetyFacts: ["bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "agent-heavy-gateway-load-e2e"
-    }
-  },
-  {
-    id: "receipt_claim_query_hold_once_ms",
-    description: "Hold one physical receipt-claim query.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 500,
-      valueMeaning: "milliseconds"
-    },
-    expected: {
-      outcome: "The checked-out claim either completes or times out through bounded recovery; an ambiguous outcome may be retried within its budget.",
-      safetyFacts: ["bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "receipt-claim-deadline-recovery-e2e"
-    }
-  },
-  {
-    id: "receipt_claim_response_timeout",
-    description: "Report one fully received receipt-claim response as timed out.",
-    topologies: LOCAL_AND_PREVIEW_TOPOLOGIES,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same logical run completes by replaying the committed receipt response or uses bounded recovery if that response is unavailable.",
-      safetyFacts: ["same_logical_run", "bounded_provider_execution"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "receipt-ambiguous-response-recovery-e2e"
-    }
-  },
-  {
-    id: "modal_sandbox_create_resource_exhausted",
-    description: "Make Modal sandbox creation return RESOURCE_EXHAUSTED before user code.",
-    topologies: MODAL_PREVIEW_TOPOLOGY,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 1,
-      valueMeaning: "occurrence"
-    },
-    expected: {
-      outcome: "The same logical run enters bounded pre-code defer/recovery and later retries sandbox startup; no user code or provider call precedes the retry.",
-      safetyFacts: [
-        "same_logical_run",
-        "no_user_code_before_recovery",
-        "bounded_provider_execution"
-      ]
-    },
-    verification: {
-      kind: "preview_black_box",
-      target: "modal-sandbox-recovery-e2e"
-    }
-  },
-  {
-    id: "runtime_sheet_page_tail_hold_ms",
-    description: "Hold one runtime-sheet tail-page operation.",
-    topologies: LOCAL_TOPOLOGY,
-    control: {
-      kind: "runtime_test_fault",
-      defaultValue: 500,
-      valueMeaning: "milliseconds"
-    },
-    expected: {
-      outcome: "Page-tail work stays pending during the bounded hold, then completes without losing or duplicating rows.",
-      safetyFacts: ["all_rows_settle_once"]
-    },
-    verification: {
-      kind: "local_black_box",
-      target: "page-tail-sheet-write-hold-e2e"
-    }
-  }
-];
-function isRuntimeTestFaultDrill(drill) {
-  return drill.control.kind === "runtime_test_fault" && RUNTIME_TEST_FAULT_IDS.some((faultId) => faultId === drill.id);
-}
-function runtimeTestFaultDrills() {
-  return RUNTIME_INCIDENT_DRILL_CATALOG.filter(isRuntimeTestFaultDrill);
-}
-
 // ../play-runtime/test-runtime-seams.ts
 var PLAY_RUNTIME_TEST_FAULT_HEADER = "x-deepline-test-fault";
-var SUPPORTED_RUNTIME_TEST_FAULTS = new Set(
-  runtimeTestFaultDrills().map(({ id }) => id)
-);
 var MAX_RUNTIME_TEST_POLICY_MS = 10 * 6e4;
 
+// ../integration-contracts/execute-retry-contract.ts
+var EXECUTE_RETRY_POLICY_HEADER = "x-deepline-execute-retry-policy";
+var EXECUTE_RETRY_POLICY_VERSION = 1;
+function parseExecuteRetryPolicy(value) {
+  if (value === `v${EXECUTE_RETRY_POLICY_VERSION}:transient-http-safe`) {
+    return "transient-http-safe";
+  }
+  if (value === `v${EXECUTE_RETRY_POLICY_VERSION}:transient-http-unsafe`) {
+    return "transient-http-unsafe";
+  }
+  return null;
+}
+var ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER = "x-deepline-atomic-tool-supported";
+
 // src/http.ts
 var MAX_DIAGNOSTIC_HEADER_LENGTH = 120;
 var COWORK_NETWORK_HINT = "Claude Cowork appears to be running Deepline in a network-restricted sandbox. In Claude Desktop, open Settings > Capabilities, turn on Allow network egress, and set Domain allowlist to All domains for the Cowork session.";
@@ -1207,7 +951,7 @@ function withErrorCause(error, cause) {
 }
 function mapNetworkError(baseUrl, error, targetLabel) {
   const tagged = error;
-  const timeoutMs = _optionalChain([tagged, 'optionalAccess', _140 => _140[REQUEST_TIMEOUT_MARKER]]);
+  const timeoutMs = _optionalChain([tagged, 'optionalAccess', _146 => _146[REQUEST_TIMEOUT_MARKER]]);
   if (typeof timeoutMs === "number") {
     return {
       message: `Request to ${targetLabel} timed out after ${timeoutMs}ms while waiting for a response.`,
@@ -1215,14 +959,14 @@ function mapNetworkError(baseUrl, error, targetLabel) {
       details: { timeoutMs, target: targetLabel }
     };
   }
-  if (_optionalChain([tagged, 'optionalAccess', _141 => _141[REQUEST_ABORT_MARKER]])) {
+  if (_optionalChain([tagged, 'optionalAccess', _147 => _147[REQUEST_ABORT_MARKER]])) {
     return {
       message: `Request to ${targetLabel} was aborted before it completed.`,
       code: "NETWORK_ABORTED"
     };
   }
   return {
-    message: _optionalChain([error, 'optionalAccess', _142 => _142.message]) ? `Unable to connect to ${baseUrl}. ${error.message}` : `Unable to connect to ${baseUrl}. Is the computer able to access the url?`,
+    message: _optionalChain([error, 'optionalAccess', _148 => _148.message]) ? `Unable to connect to ${baseUrl}. ${error.message}` : `Unable to connect to ${baseUrl}. Is the computer able to access the url?`,
     code: "NETWORK_ERROR"
   };
 }
@@ -1308,15 +1052,15 @@ var HttpClient = class {
     const coordinatorInternalToken = env.DEEPLINE_INTERNAL_TOKEN;
     const absurdReleaseOverride = env.DEEPLINE_ABSURD_RELEASE;
     const preferredReceiptGatewayMachineId = env.DEEPLINE_PREFERRED_RECEIPT_GATEWAY_MACHINE_ID;
-    if (_optionalChain([coordinatorUrl, 'optionalAccess', _143 => _143.trim, 'call', _144 => _144()])) {
+    if (_optionalChain([coordinatorUrl, 'optionalAccess', _149 => _149.trim, 'call', _150 => _150()])) {
       headers[COORDINATOR_URL_OVERRIDE_HEADER] = coordinatorUrl.trim();
     }
     const workerCallbackUrl = env.DEEPLINE_WORKER_CALLBACK_URL;
-    if (_optionalChain([workerCallbackUrl, 'optionalAccess', _145 => _145.trim, 'call', _146 => _146()])) {
+    if (_optionalChain([workerCallbackUrl, 'optionalAccess', _151 => _151.trim, 'call', _152 => _152()])) {
       headers[WORKER_CALLBACK_URL_OVERRIDE_HEADER] = workerCallbackUrl.trim();
     }
     const runtimeSchedulerSchema = env.DEEPLINE_RUNTIME_SCHEDULER_SCHEMA;
-    if (_optionalChain([runtimeSchedulerSchema, 'optionalAccess', _147 => _147.trim, 'call', _148 => _148()])) {
+    if (_optionalChain([runtimeSchedulerSchema, 'optionalAccess', _153 => _153.trim, 'call', _154 => _154()])) {
       headers[RUNTIME_SCHEDULER_SCHEMA_OVERRIDE_HEADER] = runtimeSchedulerSchema.trim();
     }
     const syntheticRun = env.DEEPLINE_SYNTHETIC_RUN;
@@ -1324,21 +1068,21 @@ var HttpClient = class {
       headers[SYNTHETIC_RUN_HEADER] = "1";
     }
     const runtimeTestFault = env.DEEPLINE_TEST_RUNTIME_FAULT;
-    if (_optionalChain([runtimeTestFault, 'optionalAccess', _149 => _149.trim, 'call', _150 => _150()])) {
+    if (_optionalChain([runtimeTestFault, 'optionalAccess', _155 => _155.trim, 'call', _156 => _156()])) {
       headers[PLAY_RUNTIME_TEST_FAULT_HEADER] = runtimeTestFault.trim();
     }
-    const retainedReceivers = _optionalChain([env, 'access', _151 => _151.DEEPLINE_RUNTIME_RETAINED_PIPELINE_RECEIVERS, 'optionalAccess', _152 => _152.trim, 'call', _153 => _153()]);
-    if (retainedReceivers && _optionalChain([coordinatorInternalToken, 'optionalAccess', _154 => _154.trim, 'call', _155 => _155()])) {
+    const retainedReceivers = _optionalChain([env, 'access', _157 => _157.DEEPLINE_RUNTIME_RETAINED_PIPELINE_RECEIVERS, 'optionalAccess', _158 => _158.trim, 'call', _159 => _159()]);
+    if (retainedReceivers && _optionalChain([coordinatorInternalToken, 'optionalAccess', _160 => _160.trim, 'call', _161 => _161()])) {
       headers[RETAINED_PIPELINE_RECEIVERS_HEADER] = retainedReceivers;
       headers[COORDINATOR_INTERNAL_TOKEN_HEADER] = coordinatorInternalToken.trim();
     }
-    if (_optionalChain([absurdReleaseOverride, 'optionalAccess', _156 => _156.trim, 'call', _157 => _157()]) && _optionalChain([coordinatorInternalToken, 'optionalAccess', _158 => _158.trim, 'call', _159 => _159()])) {
+    if (_optionalChain([absurdReleaseOverride, 'optionalAccess', _162 => _162.trim, 'call', _163 => _163()]) && _optionalChain([coordinatorInternalToken, 'optionalAccess', _164 => _164.trim, 'call', _165 => _165()])) {
       headers[ABSURD_RELEASE_OVERRIDE_HEADER] = absurdReleaseOverride.trim();
     }
-    if (_optionalChain([preferredReceiptGatewayMachineId, 'optionalAccess', _160 => _160.trim, 'call', _161 => _161()]) && _optionalChain([coordinatorInternalToken, 'optionalAccess', _162 => _162.trim, 'call', _163 => _163()])) {
+    if (_optionalChain([preferredReceiptGatewayMachineId, 'optionalAccess', _166 => _166.trim, 'call', _167 => _167()]) && _optionalChain([coordinatorInternalToken, 'optionalAccess', _168 => _168.trim, 'call', _169 => _169()])) {
       headers[PREFERRED_RECEIPT_GATEWAY_MACHINE_ID_HEADER] = preferredReceiptGatewayMachineId.trim();
     }
-    if (_optionalChain([coordinatorInternalToken, 'optionalAccess', _164 => _164.trim, 'call', _165 => _165()]) && (_optionalChain([coordinatorUrl, 'optionalAccess', _166 => _166.trim, 'call', _167 => _167()]) || _optionalChain([workerCallbackUrl, 'optionalAccess', _168 => _168.trim, 'call', _169 => _169()]) || _optionalChain([runtimeTestFault, 'optionalAccess', _170 => _170.trim, 'call', _171 => _171()]) || _optionalChain([absurdReleaseOverride, 'optionalAccess', _172 => _172.trim, 'call', _173 => _173()]) || _optionalChain([preferredReceiptGatewayMachineId, 'optionalAccess', _174 => _174.trim, 'call', _175 => _175()]))) {
+    if (_optionalChain([coordinatorInternalToken, 'optionalAccess', _170 => _170.trim, 'call', _171 => _171()]) && (_optionalChain([coordinatorUrl, 'optionalAccess', _172 => _172.trim, 'call', _173 => _173()]) || _optionalChain([workerCallbackUrl, 'optionalAccess', _174 => _174.trim, 'call', _175 => _175()]) || _optionalChain([runtimeTestFault, 'optionalAccess', _176 => _176.trim, 'call', _177 => _177()]) || _optionalChain([absurdReleaseOverride, 'optionalAccess', _178 => _178.trim, 'call', _179 => _179()]) || _optionalChain([preferredReceiptGatewayMachineId, 'optionalAccess', _180 => _180.trim, 'call', _181 => _181()]))) {
       headers[COORDINATOR_INTERNAL_TOKEN_HEADER] = coordinatorInternalToken.trim();
     }
     return applyExplicitHeaders(
@@ -1363,23 +1107,23 @@ var HttpClient = class {
   async request(path, options) {
     const baseUrl = this.config.baseUrl;
     const url = `${baseUrl}${path}`;
-    const method = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _176 => _176.method]), () => ( "GET"));
+    const method = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _182 => _182.method]), () => ( "GET"));
     const requestStartedAt = Date.now();
     let fetchAttempts = 0;
     let lastRequestUrl = url;
     let networkFailedAt;
     let networkPhase = "before_request";
-    const headers = this.authHeaders(_optionalChain([options, 'optionalAccess', _177 => _177.headers]));
-    if (_optionalChain([options, 'optionalAccess', _178 => _178.body]) !== void 0) {
+    const headers = this.authHeaders(_optionalChain([options, 'optionalAccess', _183 => _183.headers]));
+    if (_optionalChain([options, 'optionalAccess', _184 => _184.body]) !== void 0) {
       applyExplicitHeaders(headers, { "Content-Type": "application/json" });
     }
     let lastError = null;
-    const candidateUrls = _optionalChain([options, 'optionalAccess', _179 => _179.exactUrlOnly]) ? [url] : buildCandidateUrls(url);
+    const candidateUrls = _optionalChain([options, 'optionalAccess', _185 => _185.exactUrlOnly]) ? [url] : buildCandidateUrls(url);
     let retryAfterDelayMs = null;
     let totalRetryWaitMs = 0;
-    const maxRetries = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _180 => _180.maxRetries]), () => ( this.config.maxRetries));
+    let maxRetries = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _186 => _186.maxRetries]), () => ( this.config.maxRetries));
     requestAttempts: for (let attempt = 0; attempt <= maxRetries; attempt++) {
-      if (_optionalChain([options, 'optionalAccess', _181 => _181.signal, 'optionalAccess', _182 => _182.aborted])) {
+      if (_optionalChain([options, 'optionalAccess', _187 => _187.signal, 'optionalAccess', _188 => _188.aborted])) {
         lastError = requestCancelledError(options.signal);
         networkFailedAt = Date.now();
         break;
@@ -1394,7 +1138,7 @@ var HttpClient = class {
         totalRetryWaitMs += delayMs;
         networkPhase = "retry_wait";
         try {
-          await sleep(delayMs, _optionalChain([options, 'optionalAccess', _183 => _183.signal]));
+          await sleep(delayMs, _optionalChain([options, 'optionalAccess', _189 => _189.signal]));
         } catch (error) {
           lastError = error instanceof Error ? error : new Error(String(error));
           networkFailedAt = Date.now();
@@ -1402,25 +1146,25 @@ var HttpClient = class {
         }
       }
       for (const candidateUrl of candidateUrls) {
-        if (_optionalChain([options, 'optionalAccess', _184 => _184.signal, 'optionalAccess', _185 => _185.aborted])) {
+        if (_optionalChain([options, 'optionalAccess', _190 => _190.signal, 'optionalAccess', _191 => _191.aborted])) {
           lastError = requestCancelledError(options.signal);
           networkFailedAt = Date.now();
           break requestAttempts;
         }
         const controller = new AbortController();
-        const timeoutMs = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _186 => _186.timeout]), () => ( this.config.timeout));
+        const timeoutMs = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _192 => _192.timeout]), () => ( this.config.timeout));
         let requestTimedOut = false;
         const timeoutId = setTimeout(() => {
           requestTimedOut = true;
           controller.abort();
         }, timeoutMs);
         const abortRequest = () => controller.abort();
-        _optionalChain([options, 'optionalAccess', _187 => _187.signal, 'optionalAccess', _188 => _188.addEventListener, 'call', _189 => _189("abort", abortRequest, {
+        _optionalChain([options, 'optionalAccess', _193 => _193.signal, 'optionalAccess', _194 => _194.addEventListener, 'call', _195 => _195("abort", abortRequest, {
           once: true
         })]);
         networkPhase = "before_request";
         try {
-          const requestBody = _optionalChain([options, 'optionalAccess', _190 => _190.formData]) !== void 0 ? typeof options.formData === "function" ? options.formData() : options.formData : _optionalChain([options, 'optionalAccess', _191 => _191.body]) !== void 0 ? JSON.stringify(options.body) : void 0;
+          const requestBody = _optionalChain([options, 'optionalAccess', _196 => _196.formData]) !== void 0 ? typeof options.formData === "function" ? options.formData() : options.formData : _optionalChain([options, 'optionalAccess', _197 => _197.body]) !== void 0 ? JSON.stringify(options.body) : void 0;
           fetchAttempts += 1;
           lastRequestUrl = candidateUrl;
           networkPhase = "awaiting_headers";
@@ -1431,8 +1175,8 @@ var HttpClient = class {
             signal: controller.signal
           });
           networkPhase = "reading_body";
-          _optionalChain([options, 'optionalAccess', _192 => _192.onResponse, 'optionalCall', _193 => _193(response)]);
-          if (response.status === 404 && _optionalChain([options, 'optionalAccess', _194 => _194.allowNotFound])) {
+          _optionalChain([options, 'optionalAccess', _198 => _198.onResponse, 'optionalCall', _199 => _199(response)]);
+          if (response.status === 404 && _optionalChain([options, 'optionalAccess', _200 => _200.allowNotFound])) {
             clearTimeout(timeoutId);
             return null;
           }
@@ -1440,25 +1184,31 @@ var HttpClient = class {
           const receivedAtMs = Date.now();
           clearTimeout(timeoutId);
           const parsed = parseResponseBody(body);
-          _optionalChain([options, 'optionalAccess', _195 => _195.onResponseBody, 'optionalCall', _196 => _196({
+          _optionalChain([options, 'optionalAccess', _201 => _201.onResponseBody, 'optionalCall', _202 => _202({
             receivedAtMs,
             httpStatus: response.status,
             body: parsed
           })]);
-          const structuredToolError = _optionalChain([options, 'optionalAccess', _197 => _197.toolId]) && !response.ok ? _chunk7P5AA3SNjs.deserializeToolExecutionFailure.call(void 0, 
+          const responseRetryAllowed = _optionalChain([options, 'optionalAccess', _203 => _203.retryFromExecutePolicy]) !== true || parseExecuteRetryPolicy(
+            response.headers.get(EXECUTE_RETRY_POLICY_HEADER)
+          ) === "transient-http-safe";
+          if (_optionalChain([options, 'optionalAccess', _204 => _204.retryFromExecutePolicy]) === true && responseRetryAllowed && options.executePolicyMaxRetries !== void 0) {
+            maxRetries = options.executePolicyMaxRetries;
+          }
+          const structuredToolError = _optionalChain([options, 'optionalAccess', _205 => _205.toolId]) && !response.ok ? _chunkPPDBRJRWjs.deserializeToolExecutionFailure.call(void 0, 
             _chunkXNYIZMNQjs.apiErrorMessage.call(void 0, parsed, response.status),
             isRecord(parsed) ? parsed.tool_error : null,
-            _chunk7P5AA3SNjs.TOOL_EXECUTION_ERROR_SCHEMA_VERSION
+            _chunkPPDBRJRWjs.TOOL_EXECUTION_ERROR_SCHEMA_VERSION
           ) : null;
           if (structuredToolError) {
             if (response.status === 429) {
               const retryAfter = parseRetryAfter(response);
-              const failure = _chunk7P5AA3SNjs.serializeToolExecutionFailure.call(void 0, structuredToolError);
-              lastError = failure === null ? structuredToolError : new (0, _chunkQ2E4E4FJjs.ToolRateLimitError)(structuredToolError.message, {
+              const failure = _chunkPPDBRJRWjs.serializeToolExecutionFailure.call(void 0, structuredToolError);
+              lastError = failure === null ? structuredToolError : new (0, _chunkNPBJI7REjs.ToolRateLimitError)(structuredToolError.message, {
                 ...failure,
                 retryAfterMs: _nullishCoalesce(failure.retryAfterMs, () => ( Math.max(0, retryAfter)))
               });
-              if (attempt < maxRetries) {
+              if (responseRetryAllowed && attempt < maxRetries) {
                 retryAfterDelayMs = retryAfter;
                 break;
               }
@@ -1467,8 +1217,8 @@ var HttpClient = class {
             throw structuredToolError;
           }
           if (response.status === 429) {
-            if (_optionalChain([options, 'optionalAccess', _198 => _198.preserveRateLimitResponse]) && isMonitorRateLimitEnvelope(parsed)) {
-              throw new (0, _chunk7P5AA3SNjs.DeeplineError)(
+            if (_optionalChain([options, 'optionalAccess', _206 => _206.preserveRateLimitResponse]) && isMonitorRateLimitEnvelope(parsed)) {
+              throw new (0, _chunkPPDBRJRWjs.DeeplineError)(
                 _chunkXNYIZMNQjs.apiErrorMessage.call(void 0, parsed, response.status),
                 response.status,
                 _chunkXNYIZMNQjs.apiErrorCodeFromResponse.call(void 0, parsed),
@@ -1476,24 +1226,24 @@ var HttpClient = class {
               );
             }
             const retryAfter = parseRetryAfter(response);
-            lastError = new (0, _chunkQ2E4E4FJjs.RateLimitError)(retryAfter);
-            if (attempt < maxRetries) {
+            lastError = new (0, _chunkNPBJI7REjs.RateLimitError)(retryAfter);
+            if (responseRetryAllowed && attempt < maxRetries) {
               retryAfterDelayMs = retryAfter;
               break;
             }
             throw lastError;
           }
           if (response.status === 401 && !isProviderOriginatedHttpError(parsed)) {
-            throw new (0, _chunkQ2E4E4FJjs.AuthError)(_chunkXNYIZMNQjs.apiErrorMessage.call(void 0, parsed, response.status));
+            throw new (0, _chunkNPBJI7REjs.AuthError)(_chunkXNYIZMNQjs.apiErrorMessage.call(void 0, parsed, response.status));
           }
           if (!response.ok) {
-            const retryableApiError = _optionalChain([options, 'optionalAccess', _199 => _199.retryApiErrors]) === true && isRetryableApiErrorResponse(response.status);
+            const retryableApiError = _optionalChain([options, 'optionalAccess', _207 => _207.retryApiErrors]) === true && responseRetryAllowed && isRetryableApiErrorResponse(response.status);
             const htmlError = detectHtmlErrorBody(
               body,
               response.headers.get("content-type")
             );
             if (htmlError) {
-              lastError = new (0, _chunk7P5AA3SNjs.DeeplineError)(
+              lastError = new (0, _chunkPPDBRJRWjs.DeeplineError)(
                 htmlError.message(response.status),
                 response.status,
                 "API_ERROR",
@@ -1512,7 +1262,7 @@ var HttpClient = class {
             const errorValue = typeof parsed === "object" && parsed && "error" in parsed ? parsed.error : void 0;
             const msg = typeof errorValue === "string" ? errorValue : errorValue && typeof errorValue === "object" && "message" in errorValue && typeof errorValue.message === "string" ? errorValue.message : typeof parsed === "object" && parsed && "message" in parsed && typeof parsed.message === "string" ? parsed.message : `HTTP ${response.status}`;
             const apiErrorCode = _chunkXNYIZMNQjs.apiErrorCodeFromResponse.call(void 0, parsed);
-            lastError = new (0, _chunk7P5AA3SNjs.DeeplineError)(msg, response.status, apiErrorCode, {
+            lastError = new (0, _chunkPPDBRJRWjs.DeeplineError)(msg, response.status, apiErrorCode, {
               response: parsed
             });
             if (retryableApiError && attempt < maxRetries) {
@@ -1527,7 +1277,7 @@ var HttpClient = class {
               response.headers.get("content-type")
             );
             if (interstitial) {
-              throw new (0, _chunk7P5AA3SNjs.DeeplineError)(
+              throw new (0, _chunkPPDBRJRWjs.DeeplineError)(
                 `${this.config.baseUrl} returned a deployment-protection page instead of JSON. Set VERCEL_PROTECTION_BYPASS_TOKEN, or run \`vercel login\` if the CLI session expired.`,
                 response.status,
                 "DEPLOYMENT_PROTECTED",
@@ -1539,14 +1289,14 @@ var HttpClient = class {
         } catch (error) {
           clearTimeout(timeoutId);
           networkFailedAt = Date.now();
-          if (_optionalChain([options, 'optionalAccess', _200 => _200.signal, 'optionalAccess', _201 => _201.aborted])) {
+          if (_optionalChain([options, 'optionalAccess', _208 => _208.signal, 'optionalAccess', _209 => _209.aborted])) {
             lastError = requestCancelledError(options.signal);
             break requestAttempts;
           }
-          if (error instanceof _chunkQ2E4E4FJjs.AuthError || error instanceof _chunk7P5AA3SNjs.DeeplineError) {
+          if (error instanceof _chunkNPBJI7REjs.AuthError || error instanceof _chunkPPDBRJRWjs.DeeplineError) {
             throw error;
           }
-          if (error instanceof _chunkQ2E4E4FJjs.RateLimitError) {
+          if (error instanceof _chunkNPBJI7REjs.RateLimitError) {
             lastError = error;
             break;
           }
@@ -1554,14 +1304,15 @@ var HttpClient = class {
             timeoutMs,
             timedOut: requestTimedOut
           });
+          if (_optionalChain([options, 'optionalAccess', _210 => _210.retryFromExecutePolicy])) break requestAttempts;
         } finally {
           clearTimeout(timeoutId);
-          _optionalChain([options, 'optionalAccess', _202 => _202.signal, 'optionalAccess', _203 => _203.removeEventListener, 'call', _204 => _204("abort", abortRequest)]);
+          _optionalChain([options, 'optionalAccess', _211 => _211.signal, 'optionalAccess', _212 => _212.removeEventListener, 'call', _213 => _213("abort", abortRequest)]);
         }
       }
       if (attempt < maxRetries) continue;
     }
-    if (lastError instanceof _chunk7P5AA3SNjs.DeeplineError) {
+    if (lastError instanceof _chunkPPDBRJRWjs.DeeplineError) {
       throw lastError;
     }
     const mappedNetworkError = mapNetworkError(
@@ -1583,10 +1334,10 @@ var HttpClient = class {
         phase: networkPhase
       }
     };
-    if (_optionalChain([options, 'optionalAccess', _205 => _205.toolId])) {
+    if (_optionalChain([options, 'optionalAccess', _214 => _214.toolId])) {
       const code = mappedNetworkError.code;
       throw withErrorCause(
-        new (0, _chunk7P5AA3SNjs.ToolExecutionError)(
+        new (0, _chunkPPDBRJRWjs.ToolExecutionError)(
           withCoworkNetworkHint(mappedNetworkError.message),
           {
             toolId: options.toolId,
@@ -1611,7 +1362,7 @@ var HttpClient = class {
       );
     }
     throw withErrorCause(
-      new (0, _chunk7P5AA3SNjs.DeeplineError)(
+      new (0, _chunkPPDBRJRWjs.DeeplineError)(
         withCoworkNetworkHint(mappedNetworkError.message),
         void 0,
         mappedNetworkError.code,
@@ -1635,36 +1386,36 @@ var HttpClient = class {
   }
   async *streamSse(path, options) {
     const url = `${this.config.baseUrl}${path}`;
-    const method = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _206 => _206.method]), () => ( "GET"));
+    const method = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _215 => _215.method]), () => ( "GET"));
     const headers = this.authHeaders({
       Accept: "text/event-stream",
-      ..._optionalChain([options, 'optionalAccess', _207 => _207.headers])
+      ..._optionalChain([options, 'optionalAccess', _216 => _216.headers])
     });
-    if (_optionalChain([options, 'optionalAccess', _208 => _208.body]) !== void 0) {
+    if (_optionalChain([options, 'optionalAccess', _217 => _217.body]) !== void 0) {
       applyExplicitHeaders(headers, { "Content-Type": "application/json" });
     }
     let lastError = null;
-    const candidateUrls = _optionalChain([options, 'optionalAccess', _209 => _209.exactUrlOnly]) ? [url] : buildCandidateUrls(url);
+    const candidateUrls = _optionalChain([options, 'optionalAccess', _218 => _218.exactUrlOnly]) ? [url] : buildCandidateUrls(url);
     for (const candidateUrl of candidateUrls) {
       try {
         const response = await fetch(candidateUrl, {
           method,
           headers,
-          body: _optionalChain([options, 'optionalAccess', _210 => _210.body]) !== void 0 ? JSON.stringify(options.body) : void 0,
-          signal: _optionalChain([options, 'optionalAccess', _211 => _211.signal])
+          body: _optionalChain([options, 'optionalAccess', _219 => _219.body]) !== void 0 ? JSON.stringify(options.body) : void 0,
+          signal: _optionalChain([options, 'optionalAccess', _220 => _220.signal])
         });
         if (!response.ok) {
           const body = await response.text();
           const parsed = parseResponseBody(body);
           if (response.status === 401 && !isProviderOriginatedHttpError(parsed)) {
-            throw new (0, _chunkQ2E4E4FJjs.AuthError)(_chunkXNYIZMNQjs.apiErrorMessage.call(void 0, parsed, response.status));
+            throw new (0, _chunkNPBJI7REjs.AuthError)(_chunkXNYIZMNQjs.apiErrorMessage.call(void 0, parsed, response.status));
           }
           const htmlError = detectHtmlErrorBody(
             body,
             response.headers.get("content-type")
           );
           if (htmlError) {
-            throw new (0, _chunk7P5AA3SNjs.DeeplineError)(
+            throw new (0, _chunkPPDBRJRWjs.DeeplineError)(
               htmlError.message(response.status),
               response.status,
               "API_ERROR",
@@ -1675,7 +1426,7 @@ var HttpClient = class {
               }
             );
           }
-          throw new (0, _chunk7P5AA3SNjs.DeeplineError)(
+          throw new (0, _chunkPPDBRJRWjs.DeeplineError)(
             _chunkXNYIZMNQjs.apiErrorMessage.call(void 0, parsed, response.status),
             response.status,
             _chunkXNYIZMNQjs.apiErrorCodeFromResponse.call(void 0, parsed),
@@ -1683,17 +1434,17 @@ var HttpClient = class {
           );
         }
         if (!response.body) {
-          throw new (0, _chunk7P5AA3SNjs.DeeplineError)("SSE response did not include a body.");
+          throw new (0, _chunkPPDBRJRWjs.DeeplineError)("SSE response did not include a body.");
         }
         yield* decodeSseStream(response.body);
         return;
       } catch (error) {
-        if (error instanceof _chunkQ2E4E4FJjs.AuthError || error instanceof _chunk7P5AA3SNjs.DeeplineError) {
+        if (error instanceof _chunkNPBJI7REjs.AuthError || error instanceof _chunkPPDBRJRWjs.DeeplineError) {
           throw error;
         }
         const normalized = error instanceof Error ? error : new Error(String(error));
-        if (isAbortLikeError(normalized) && _optionalChain([options, 'optionalAccess', _212 => _212.signal, 'optionalAccess', _213 => _213.aborted])) {
-          throw new (0, _chunk7P5AA3SNjs.DeeplineError)(
+        if (isAbortLikeError(normalized) && _optionalChain([options, 'optionalAccess', _221 => _221.signal, 'optionalAccess', _222 => _222.aborted])) {
+          throw new (0, _chunkPPDBRJRWjs.DeeplineError)(
             `Stream from ${this.config.baseUrl} was aborted by the caller.`,
             void 0,
             "ABORTED"
@@ -1703,7 +1454,7 @@ var HttpClient = class {
       }
     }
     if (lastError && isAbortLikeError(lastError)) {
-      throw new (0, _chunk7P5AA3SNjs.DeeplineError)(
+      throw new (0, _chunkPPDBRJRWjs.DeeplineError)(
         withCoworkNetworkHint(
           `Unable to stream from ${this.config.baseUrl}. The remote stream was interrupted.`
         ),
@@ -1711,9 +1462,9 @@ var HttpClient = class {
         "PLAY_STREAM_NETWORK_ABORTED"
       );
     }
-    throw new (0, _chunk7P5AA3SNjs.DeeplineError)(
+    throw new (0, _chunkPPDBRJRWjs.DeeplineError)(
       withCoworkNetworkHint(
-        _optionalChain([lastError, 'optionalAccess', _214 => _214.message]) ? `Unable to stream from ${this.config.baseUrl}. ${lastError.message}` : `Unable to stream from ${this.config.baseUrl}.`
+        _optionalChain([lastError, 'optionalAccess', _223 => _223.message]) ? `Unable to stream from ${this.config.baseUrl}. ${lastError.message}` : `Unable to stream from ${this.config.baseUrl}.`
       )
     );
   }
@@ -1775,15 +1526,15 @@ function parseResponseBody(body) {
 }
 function isProviderOriginatedHttpError(parsed) {
   const response = asRecord(parsed);
-  const error = asRecord(_optionalChain([response, 'optionalAccess', _215 => _215.error]));
-  const failureOrigin = _nullishCoalesce(_optionalChain([error, 'optionalAccess', _216 => _216.failure_origin]), () => ( _optionalChain([response, 'optionalAccess', _217 => _217.failure_origin])));
-  const code = _nullishCoalesce(_optionalChain([error, 'optionalAccess', _218 => _218.code]), () => ( _optionalChain([response, 'optionalAccess', _219 => _219.code])));
+  const error = asRecord(_optionalChain([response, 'optionalAccess', _224 => _224.error]));
+  const failureOrigin = _nullishCoalesce(_optionalChain([error, 'optionalAccess', _225 => _225.failure_origin]), () => ( _optionalChain([response, 'optionalAccess', _226 => _226.failure_origin])));
+  const code = _nullishCoalesce(_optionalChain([error, 'optionalAccess', _227 => _227.code]), () => ( _optionalChain([response, 'optionalAccess', _228 => _228.code])));
   return failureOrigin === "provider" || code === "UPSTREAM_BLOCKED";
 }
 function isMonitorRateLimitEnvelope(parsed) {
   const response = asRecord(parsed);
-  const error = asRecord(_optionalChain([response, 'optionalAccess', _220 => _220.error]));
-  return _optionalChain([error, 'optionalAccess', _221 => _221.code]) === "monitor_upstream_rate_limited" && typeof error.message === "string";
+  const error = asRecord(_optionalChain([response, 'optionalAccess', _229 => _229.error]));
+  return _optionalChain([error, 'optionalAccess', _230 => _230.code]) === "monitor_upstream_rate_limited" && typeof error.message === "string";
 }
 function asRecord(value) {
   return typeof value === "object" && value !== null ? value : null;
@@ -1799,7 +1550,7 @@ function detectHtmlErrorBody(body, contentType) {
     return null;
   }
   const titleMatch = trimmed.match(/<title[^>]*>([\s\S]*?)<\/title>/i);
-  const title = _optionalChain([titleMatch, 'optionalAccess', _222 => _222[1], 'optionalAccess', _223 => _223.replace, 'call', _224 => _224(/\s+/g, " "), 'access', _225 => _225.trim, 'call', _226 => _226()]) || void 0;
+  const title = _optionalChain([titleMatch, 'optionalAccess', _231 => _231[1], 'optionalAccess', _232 => _232.replace, 'call', _233 => _233(/\s+/g, " "), 'access', _234 => _234.trim, 'call', _235 => _235()]) || void 0;
   const workerThrewException = /worker threw exception/i.test(trimmed);
   return {
     title,
@@ -1883,20 +1634,20 @@ function decodeSseFrame(frame) {
 }
 function sleep(ms, signal) {
   return new Promise((resolve2, reject) => {
-    if (_optionalChain([signal, 'optionalAccess', _227 => _227.aborted])) {
+    if (_optionalChain([signal, 'optionalAccess', _236 => _236.aborted])) {
       reject(requestCancelledError(signal));
       return;
     }
     const timeoutId = setTimeout(() => {
-      _optionalChain([signal, 'optionalAccess', _228 => _228.removeEventListener, 'call', _229 => _229("abort", abort)]);
+      _optionalChain([signal, 'optionalAccess', _237 => _237.removeEventListener, 'call', _238 => _238("abort", abort)]);
       resolve2();
     }, ms);
     const abort = () => {
       clearTimeout(timeoutId);
-      _optionalChain([signal, 'optionalAccess', _230 => _230.removeEventListener, 'call', _231 => _231("abort", abort)]);
+      _optionalChain([signal, 'optionalAccess', _239 => _239.removeEventListener, 'call', _240 => _240("abort", abort)]);
       reject(requestCancelledError(signal));
     };
-    _optionalChain([signal, 'optionalAccess', _232 => _232.addEventListener, 'call', _233 => _233("abort", abort, { once: true })]);
+    _optionalChain([signal, 'optionalAccess', _241 => _241.addEventListener, 'call', _242 => _242("abort", abort, { once: true })]);
   });
 }
 function withCoworkNetworkHint(message) {
@@ -1953,4 +1704,5 @@ ${COWORK_NETWORK_HINT}`;
 
 
 
-exports.HOST_URL_ENV = HOST_URL_ENV; exports.API_KEY_ENV = API_KEY_ENV; exports.ACTIVE_ORG_ID_ENV = ACTIVE_ORG_ID_ENV; exports.ACTIVE_ORG_NAME_ENV = ACTIVE_ORG_NAME_ENV; exports.FEATURES_ENV = FEATURES_ENV; exports.PROD_URL = PROD_URL; exports.featureEnvValues = featureEnvValues; exports.storedHostApiKey = storedHostApiKey; exports.storedHostFeatures = storedHostFeatures; exports.baseUrlSlug = baseUrlSlug; exports.sdkCliStateDirPath = sdkCliStateDirPath; exports.hostConfigDirPath = hostConfigDirPath; exports.hostEnvFilePath = hostEnvFilePath; exports.saveHostEnvValues = saveHostEnvValues; exports.autoDetectBaseUrl = autoDetectBaseUrl; exports.resolveApiKeyForBaseUrl = resolveApiKeyForBaseUrl; exports.resolveProjectApiKeyForBaseUrl = resolveProjectApiKeyForBaseUrl; exports.resolveGlobalApiKeyForBaseUrl = resolveGlobalApiKeyForBaseUrl; exports.getResolvedProjectAuthSource = getResolvedProjectAuthSource; exports.resolveBaseUrlOnly = resolveBaseUrlOnly; exports.resolveConfig = resolveConfig; exports.ensureProjectPrivatePathsIgnored = ensureProjectPrivatePathsIgnored; exports.saveProjectDeeplineEnvValues = saveProjectDeeplineEnvValues; exports.resolveProjectPinTarget = resolveProjectPinTarget; exports.getActiveProjectAuthSource = getActiveProjectAuthSource; exports.resolveCliAuthProvenance = resolveCliAuthProvenance; exports.resolveCliCommandContext = resolveCliCommandContext; exports.SDK_VERSION = SDK_VERSION; exports.SDK_API_MAJOR = SDK_API_MAJOR; exports.SDK_API_CONTRACT = SDK_API_CONTRACT; exports.agentSessionIdFromEnvironment = agentSessionIdFromEnvironment; exports.detectAgentRuntime = detectAgentRuntime; exports.hasActivePluginSkills = hasActivePluginSkills; exports.KNOWN_SKILL_AGENTS = KNOWN_SKILL_AGENTS; exports.DEFAULT_SKILL_AGENTS = DEFAULT_SKILL_AGENTS; exports.skillsAgentPathSegment = skillsAgentPathSegment; exports.resolveAutoSyncSkillAgents = resolveAutoSyncSkillAgents; exports.readSdkSkillsLocalVersion = readSdkSkillsLocalVersion; exports.writeSdkSkillsLocalVersion = writeSdkSkillsLocalVersion; exports.deploymentProtectionHeaders = deploymentProtectionHeaders; exports.fetchWithDeploymentProtection = fetchWithDeploymentProtection; exports.COORDINATOR_INTERNAL_TOKEN_HEADER = COORDINATOR_INTERNAL_TOKEN_HEADER; exports.RUNTIME_ENVIRONMENT_TOKEN_HEADER = RUNTIME_ENVIRONMENT_TOKEN_HEADER; exports.RETAINED_PIPELINE_RECEIVERS_HEADER = RETAINED_PIPELINE_RECEIVERS_HEADER; exports.HttpClient = HttpClient;
+
+exports.HOST_URL_ENV = HOST_URL_ENV; exports.API_KEY_ENV = API_KEY_ENV; exports.ACTIVE_ORG_ID_ENV = ACTIVE_ORG_ID_ENV; exports.ACTIVE_ORG_NAME_ENV = ACTIVE_ORG_NAME_ENV; exports.FEATURES_ENV = FEATURES_ENV; exports.PROD_URL = PROD_URL; exports.featureEnvValues = featureEnvValues; exports.storedHostApiKey = storedHostApiKey; exports.storedHostFeatures = storedHostFeatures; exports.baseUrlSlug = baseUrlSlug; exports.sdkCliStateDirPath = sdkCliStateDirPath; exports.hostConfigDirPath = hostConfigDirPath; exports.hostEnvFilePath = hostEnvFilePath; exports.saveHostEnvValues = saveHostEnvValues; exports.autoDetectBaseUrl = autoDetectBaseUrl; exports.resolveApiKeyForBaseUrl = resolveApiKeyForBaseUrl; exports.resolveProjectApiKeyForBaseUrl = resolveProjectApiKeyForBaseUrl; exports.resolveGlobalApiKeyForBaseUrl = resolveGlobalApiKeyForBaseUrl; exports.getResolvedProjectAuthSource = getResolvedProjectAuthSource; exports.resolveBaseUrlOnly = resolveBaseUrlOnly; exports.resolveConfig = resolveConfig; exports.ensureProjectPrivatePathsIgnored = ensureProjectPrivatePathsIgnored; exports.saveProjectDeeplineEnvValues = saveProjectDeeplineEnvValues; exports.resolveProjectPinTarget = resolveProjectPinTarget; exports.getActiveProjectAuthSource = getActiveProjectAuthSource; exports.resolveCliAuthProvenance = resolveCliAuthProvenance; exports.resolveCliCommandContext = resolveCliCommandContext; exports.ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER = ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER; exports.SDK_VERSION = SDK_VERSION; exports.SDK_API_MAJOR = SDK_API_MAJOR; exports.SDK_API_CONTRACT = SDK_API_CONTRACT; exports.agentSessionIdFromEnvironment = agentSessionIdFromEnvironment; exports.detectAgentRuntime = detectAgentRuntime; exports.hasActivePluginSkills = hasActivePluginSkills; exports.KNOWN_SKILL_AGENTS = KNOWN_SKILL_AGENTS; exports.DEFAULT_SKILL_AGENTS = DEFAULT_SKILL_AGENTS; exports.skillsAgentPathSegment = skillsAgentPathSegment; exports.resolveAutoSyncSkillAgents = resolveAutoSyncSkillAgents; exports.readSdkSkillsLocalVersion = readSdkSkillsLocalVersion; exports.writeSdkSkillsLocalVersion = writeSdkSkillsLocalVersion; exports.deploymentProtectionHeaders = deploymentProtectionHeaders; exports.fetchWithDeploymentProtection = fetchWithDeploymentProtection; exports.COORDINATOR_INTERNAL_TOKEN_HEADER = COORDINATOR_INTERNAL_TOKEN_HEADER; exports.RUNTIME_ENVIRONMENT_TOKEN_HEADER = RUNTIME_ENVIRONMENT_TOKEN_HEADER; exports.RETAINED_PIPELINE_RECEIVERS_HEADER = RETAINED_PIPELINE_RECEIVERS_HEADER; exports.HttpClient = HttpClient;