deepline 0.3.477 → 0.3.479

package/dist/cli/{billing-EOPUJ4JI.mjs → billing-DT4JT4QN.mjs}

@@ -1,10 +1,13 @@
+import {
+  PLAY_SANDBOX_SIZE_INPUTS
+} from "./chunk-7I4B6V2S.mjs";
 import {
   DeeplineClient
-} from "./chunk-SG2SZQ4K.mjs";
+} from "./chunk-RJVUILW4.mjs";
 import {
   iterateCursorPages,
   requireBillingIdempotencyKey
-} from "./chunk-JS4UO6G4.mjs";
+} from "./chunk-FKEZ5DIJ.mjs";
 import "./chunk-L2VKAASU.mjs";
 import "./chunk-NELMCOWK.mjs";
 import "./chunk-S3A4IXBQ.mjs";
@@ -15,9 +18,9 @@ import {
   openInBrowser,
   printCommandEnvelope,
   shouldEmitJson
-} from "./chunk-QODW5ILA.mjs";
-import "./chunk-YZA5UJXM.mjs";
-import "./chunk-LJYTYNQZ.mjs";
+} from "./chunk-YC2QBF2W.mjs";
+import "./chunk-O5BUFQ2P.mjs";
+import "./chunk-XDFARN7U.mjs";
 import {
   AuthError,
   ConfigError
@@ -26,7 +29,7 @@ import "./chunk-DLIRSHV6.mjs";
 import {
   DeeplineError
 } from "./chunk-HBL4PM5Q.mjs";
-import "./chunk-PQQNMMWM.mjs";
+import "./chunk-27PXHD2P.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";
 
@@ -476,6 +479,17 @@ async function handleUsageEvents(options) {
   );
 }
 async function handleUsage(options) {
+  if (options.events && options.recentOnly) {
+    reportBillingFailure(
+      {
+        exitCode: 2,
+        code: "CONFLICTING_USAGE_FILTERS",
+        message: "--recent-only cannot be combined with --events."
+      },
+      options
+    );
+    return;
+  }
   if (options.events) return handleUsageEvents(options);
   const { http } = getAuthedHttpClient();
   const params = new URLSearchParams();
@@ -505,6 +519,7 @@ async function handleUsage(options) {
     }
     params.set("request_id", requestId);
   } else {
+    if (options.recentOnly) params.set("recent_only", "true");
     if (options.limit) params.set("recent_limit", options.limit);
     if (options.offset) params.set("recent_offset", options.offset);
     if (options.cursor) params.set("recent_cursor", options.cursor);
@@ -536,18 +551,20 @@ async function handleUsage(options) {
   const recent = payload.recent ?? {};
   const last30Usage = usage.last_30_days_usage_credits ?? usage.month_spent_credits;
   const temporaryHolds = Number(usage.temporary_hold_credits ?? 0);
-  const nextPage = typeof recent.next_cursor === "string" && recent.next_cursor.length > 0 ? `deepline billing usage --cursor ${quoteShellArgument(recent.next_cursor)}${options.limit ? ` --limit ${options.limit}` : ""}${options.runId ? ` --run-id ${quoteShellArgument(options.runId)}` : ""}` : null;
+  const nextPage = typeof recent.next_cursor === "string" && recent.next_cursor.length > 0 ? `deepline billing usage${options.recentOnly ? " --recent-only" : ""} --cursor ${quoteShellArgument(recent.next_cursor)}${options.limit ? ` --limit ${options.limit}` : ""}${options.runId ? ` --run-id ${quoteShellArgument(options.runId)}` : ""}` : null;
   const recentLines = recentUsageLines(
     Array.isArray(recent.entries) ? recent.entries : []
   );
   const matchingActivity = typeof recent.total === "number" && Number.isFinite(recent.total) && recent.total >= 0 && typeof recent.total_is_exact === "boolean" ? recent.total_is_exact ? `Matching activity: ${recent.total}` : typeof recent.total_lower_bound === "number" && Number.isFinite(recent.total_lower_bound) && recent.total_lower_bound >= 0 ? `Matching activity: at least ${recent.total_lower_bound}` : `Matching activity: count not exact (reported ${recent.total})` : null;
   const lines = options.requestId ? [`Charge lookup: ${options.requestId}`, ...recentLines] : [
-    `Balance: ${payload.balance ?? "(unknown)"}`,
-    `Last 30 days usage: ${last30Usage ?? "(unknown)"}`,
-    ...Number.isFinite(temporaryHolds) && temporaryHolds > 0 ? [`Temporary holds: ${temporaryHolds}`] : [],
-    `Monthly usage cap: ${quota.enabled ? quota.monthly_credits_limit ?? "(unknown)" : "off"}`,
-    ...options.runId && recent.run_id ? [
-      `Run spend: ${(payload.run ?? {}).spent_credits ?? "(unknown)"} Deepline Credits`
+    ...!options.recentOnly ? [
+      `Balance: ${payload.balance ?? "(unknown)"}`,
+      `Last 30 days usage: ${last30Usage ?? "(unknown)"}`,
+      ...Number.isFinite(temporaryHolds) && temporaryHolds > 0 ? [`Temporary holds: ${temporaryHolds}`] : [],
+      `Monthly usage cap: ${quota.enabled ? quota.monthly_credits_limit ?? "(unknown)" : "off"}`,
+      ...options.runId && recent.run_id ? [
+        `Run spend: ${(payload.run ?? {}).spent_credits ?? "(unknown)"} Deepline Credits`
+      ] : []
     ] : [],
     ...matchingActivity ? [matchingActivity] : [],
     ...recentLines,
@@ -1595,7 +1612,7 @@ Examples:
     "--sandbox-timeout <duration>",
     "Runtime timeout, such as 30m or 2h"
   ).addOption(
-    new Option("--sandbox-size <size>", "Runtime memory profile").choices(["standard", "large", "xlarge"]).default("standard")
+    new Option("--sandbox-size <size>", "Runtime memory profile").choices([...PLAY_SANDBOX_SIZE_INPUTS]).default("standard")
   ).option("--quantity <sessions>", "Number of sandbox sessions", "1").option("--json", "Emit the bounded component quotation as JSON").action(
     async (options) => {
       const quantity = Number(options.quantity);
@@ -1660,6 +1677,9 @@ Examples:
   ).option(
     "--events",
     "Read a raw usage-event page instead of the billing summary"
+  ).option(
+    "--recent-only",
+    "Read recent billing activity without spend totals"
   ).option("--limit <n>", "Page size (1\u2013500 with --events)").option("--offset <n>", "Recent-call offset").option(
     "--cursor <cursor>",
     "Recent-call cursor from the previous response"

package/dist/cli/{chunk-CH4VMDB5.js → chunk-27GSBTWD.js}

@@ -2,7 +2,7 @@
 
 
 
-var _chunkM2UL4ZS5js = require('./chunk-M2UL4ZS5.js');
+var _chunkLXYDN5FEjs = require('./chunk-LXYDN5FE.js');
 
 
 
@@ -22,12 +22,17 @@ var _chunkM2UL4ZS5js = require('./chunk-M2UL4ZS5.js');
 
 
 
-var _chunkNC52JG66js = require('./chunk-NC52JG66.js');
+var _chunk3SGA53DXjs = require('./chunk-3SGA53DX.js');
 
 
 
 
-var _chunkACDXGOXEjs = require('./chunk-ACDXGOXE.js');
+
+
+var _chunk33O2JGHEjs = require('./chunk-33O2JGHE.js');
+
+
+var _chunkDIAWYWT5js = require('./chunk-DIAWYWT5.js');
 
 // src/cli/commands/auth.ts
 
@@ -54,7 +59,7 @@ function statusBannerLine(value) {
   return `Service notice: ${banner.message}`;
 }
 function envFilePath(baseUrl) {
-  return _chunkNC52JG66js.hostEnvFilePath.call(void 0, baseUrl);
+  return _chunk3SGA53DXjs.hostEnvFilePath.call(void 0, baseUrl);
 }
 function normalizeAuthScope(value) {
   if (!value || value === "global") return "global";
@@ -67,7 +72,7 @@ function parseAuthScope(args) {
 }
 function pendingClaimPath(baseUrl, scope) {
   if (scope === "folder") {
-    const target = _chunkNC52JG66js.resolveProjectPinTarget.call(void 0, );
+    const target = _chunk3SGA53DXjs.resolveProjectPinTarget.call(void 0, );
     if (!target.ok) {
       throw new Error(
         `Cowork project folder is ambiguous. Candidate folders: ${target.candidates.join(
@@ -77,10 +82,10 @@ function pendingClaimPath(baseUrl, scope) {
     }
     return _path.join.call(void 0, target.dir, ".deepline", "setup", "pending-auth.json");
   }
-  return `${_chunkNC52JG66js.hostConfigDirPath.call(void 0, baseUrl)}/pending-auth.json`;
+  return `${_chunk3SGA53DXjs.hostConfigDirPath.call(void 0, baseUrl)}/pending-auth.json`;
 }
 function legacyPendingClaimTokenPath(baseUrl) {
-  return `${_chunkNC52JG66js.hostConfigDirPath.call(void 0, baseUrl)}/pending-claim-token`;
+  return `${_chunk3SGA53DXjs.hostConfigDirPath.call(void 0, baseUrl)}/pending-claim-token`;
 }
 function savePendingClaim(baseUrl, claim) {
   const filePath = pendingClaimPath(baseUrl, claim.scope);
@@ -182,21 +187,21 @@ function parseRegisterWaitMode(args) {
 function shouldWaitForRegisterClaim(mode) {
   if (mode === "yes") return true;
   if (mode === "no") return false;
-  return _chunkACDXGOXEjs.detectAgentRuntime.call(void 0, ) !== "claude_cowork";
+  return _chunk33O2JGHEjs.detectAgentRuntime.call(void 0, ) !== "claude_cowork";
 }
 function saveEnvValues(values, baseUrl, scope) {
   const filtered = {
-    ...values[_chunkNC52JG66js.HOST_URL_ENV] ? { [_chunkNC52JG66js.HOST_URL_ENV]: values[_chunkNC52JG66js.HOST_URL_ENV] } : {},
-    ...values[_chunkNC52JG66js.API_KEY_ENV] ? { [_chunkNC52JG66js.API_KEY_ENV]: values[_chunkNC52JG66js.API_KEY_ENV] } : {},
-    ...values[_chunkNC52JG66js.ACTIVE_ORG_ID_ENV] ? { [_chunkNC52JG66js.ACTIVE_ORG_ID_ENV]: values[_chunkNC52JG66js.ACTIVE_ORG_ID_ENV] } : {},
-    ...Object.prototype.hasOwnProperty.call(values, _chunkNC52JG66js.ACTIVE_ORG_NAME_ENV) ? { [_chunkNC52JG66js.ACTIVE_ORG_NAME_ENV]: values[_chunkNC52JG66js.ACTIVE_ORG_NAME_ENV] } : {},
+    ...values[_chunk3SGA53DXjs.HOST_URL_ENV] ? { [_chunk3SGA53DXjs.HOST_URL_ENV]: values[_chunk3SGA53DXjs.HOST_URL_ENV] } : {},
+    ...values[_chunk3SGA53DXjs.API_KEY_ENV] ? { [_chunk3SGA53DXjs.API_KEY_ENV]: values[_chunk3SGA53DXjs.API_KEY_ENV] } : {},
+    ...values[_chunk3SGA53DXjs.ACTIVE_ORG_ID_ENV] ? { [_chunk3SGA53DXjs.ACTIVE_ORG_ID_ENV]: values[_chunk3SGA53DXjs.ACTIVE_ORG_ID_ENV] } : {},
+    ...Object.prototype.hasOwnProperty.call(values, _chunk3SGA53DXjs.ACTIVE_ORG_NAME_ENV) ? { [_chunk3SGA53DXjs.ACTIVE_ORG_NAME_ENV]: values[_chunk3SGA53DXjs.ACTIVE_ORG_NAME_ENV] } : {},
     // An explicit empty list must reach the store: it clears a stale line.
-    ...Object.prototype.hasOwnProperty.call(values, _chunkNC52JG66js.FEATURES_ENV) ? { [_chunkNC52JG66js.FEATURES_ENV]: values[_chunkNC52JG66js.FEATURES_ENV] } : {}
+    ...Object.prototype.hasOwnProperty.call(values, _chunk3SGA53DXjs.FEATURES_ENV) ? { [_chunk3SGA53DXjs.FEATURES_ENV]: values[_chunk3SGA53DXjs.FEATURES_ENV] } : {}
   };
   if (scope === "folder") {
-    _chunkNC52JG66js.saveProjectDeeplineEnvValues.call(void 0, filtered);
+    _chunk3SGA53DXjs.saveProjectDeeplineEnvValues.call(void 0, filtered);
   } else {
-    _chunkNC52JG66js.saveHostEnvValues.call(void 0, baseUrl, filtered);
+    _chunk3SGA53DXjs.saveHostEnvValues.call(void 0, baseUrl, filtered);
   }
 }
 function activeOrgEnvValues(data) {
@@ -204,21 +209,21 @@ function activeOrgEnvValues(data) {
   if (!orgId) return {};
   const orgName = typeof data.org_name === "string" ? data.org_name.trim() : "";
   return {
-    [_chunkNC52JG66js.ACTIVE_ORG_ID_ENV]: orgId,
-    [_chunkNC52JG66js.ACTIVE_ORG_NAME_ENV]: orgName,
-    ..._chunkNC52JG66js.featureEnvValues.call(void 0, data)
+    [_chunk3SGA53DXjs.ACTIVE_ORG_ID_ENV]: orgId,
+    [_chunk3SGA53DXjs.ACTIVE_ORG_NAME_ENV]: orgName,
+    ..._chunk3SGA53DXjs.featureEnvValues.call(void 0, data)
   };
 }
 async function httpJson(method, url, apiKey, body, timeoutMs = AUTH_HTTP_TIMEOUT_MS) {
   const headers = {
     "Content-Type": "application/json",
-    "User-Agent": `deepline-ts-sdk/${_chunkACDXGOXEjs.SDK_VERSION}`,
+    "User-Agent": `deepline-ts-sdk/${_chunk33O2JGHEjs.SDK_VERSION}`,
     "X-Deepline-Client-Family": "sdk",
     "X-Deepline-CLI-Family": "sdk",
-    "X-Deepline-Agent-Runtime": _chunkACDXGOXEjs.detectAgentRuntime.call(void 0, ),
-    "X-Deepline-CLI-Version": _chunkACDXGOXEjs.SDK_VERSION,
-    "X-Deepline-SDK-Version": _chunkACDXGOXEjs.SDK_VERSION,
-    "X-Deepline-API-Contract": _chunkACDXGOXEjs.SDK_API_CONTRACT
+    "X-Deepline-Agent-Runtime": _chunk33O2JGHEjs.detectAgentRuntime.call(void 0, ),
+    "X-Deepline-CLI-Version": _chunk33O2JGHEjs.SDK_VERSION,
+    "X-Deepline-SDK-Version": _chunk33O2JGHEjs.SDK_VERSION,
+    "X-Deepline-API-Contract": _chunk33O2JGHEjs.SDK_API_CONTRACT
   };
   if (apiKey) headers["Authorization"] = `Bearer ${apiKey}`;
   const bypassToken = _optionalChain([process, 'access', _7 => _7.env, 'access', _8 => _8.VERCEL_PROTECTION_BYPASS_TOKEN, 'optionalAccess', _9 => _9.trim, 'call', _10 => _10()]);
@@ -253,7 +258,20 @@ async function httpJson(method, url, apiKey, body, timeoutMs = AUTH_HTTP_TIMEOUT
       clearTimeout(timeout);
     }
   }
-  throw lastError instanceof Error ? lastError : new Error(String(lastError));
+  const failure = lastError instanceof Error ? lastError : new Error(String(lastError));
+  if (failure.name === "AbortError" || failure.name === "TimeoutError") {
+    throw failure;
+  }
+  const causeCode = _chunk33O2JGHEjs.networkCauseCode.call(void 0, failure);
+  throw Object.assign(
+    new (0, _chunkDIAWYWT5js.DeeplineError)(
+      _chunk33O2JGHEjs.connectionFailureMessage.call(void 0, new URL(url).origin, failure),
+      void 0,
+      "NETWORK_ERROR",
+      causeCode ? { causeCode } : void 0
+    ),
+    { cause: failure }
+  );
 }
 async function readStatusBanner(baseUrl) {
   const response = await httpJson(
@@ -264,7 +282,7 @@ async function readStatusBanner(baseUrl) {
   return _optionalChain([response, 'optionalAccess', _11 => _11.status]) === 200 ? _nullishCoalesce(response.data.banner, () => ( null)) : null;
 }
 async function reportSetupCompleted(input) {
-  const apiKey = input.authScope === "folder" ? _chunkNC52JG66js.resolveProjectApiKeyForBaseUrl.call(void 0, input.baseUrl) : _chunkNC52JG66js.resolveGlobalApiKeyForBaseUrl.call(void 0, input.baseUrl);
+  const apiKey = input.authScope === "folder" ? _chunk3SGA53DXjs.resolveProjectApiKeyForBaseUrl.call(void 0, input.baseUrl) : _chunk3SGA53DXjs.resolveGlobalApiKeyForBaseUrl.call(void 0, input.baseUrl);
   if (!apiKey) return;
   try {
     await httpJson(
@@ -361,7 +379,7 @@ async function printClaimSuccessBanner(baseUrl, apiKey, statusData) {
   }
 }
 async function handleRegister(args) {
-  const baseUrl = _chunkNC52JG66js.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
+  const baseUrl = _chunk3SGA53DXjs.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
   let orgName = "";
   let orgId = "";
   let agentName = "";
@@ -416,19 +434,19 @@ async function handleRegister(args) {
     });
     saveEnvValues(
       {
-        [_chunkNC52JG66js.HOST_URL_ENV]: baseUrl
+        [_chunk3SGA53DXjs.HOST_URL_ENV]: baseUrl
       },
       baseUrl,
       authScope
     );
   }
   if (claimUrl) {
-    const shouldOpen = waitMode !== "no" && _chunkACDXGOXEjs.detectAgentRuntime.call(void 0, ) !== "claude_cowork";
+    const shouldOpen = waitMode !== "no" && _chunk33O2JGHEjs.detectAgentRuntime.call(void 0, ) !== "claude_cowork";
     console.log(
       shouldOpen ? "  Opening approval page in your browser." : "  Open this approval page in your browser:"
     );
     console.log(`  ${claimUrl}`);
-    if (shouldOpen) _chunkM2UL4ZS5js.openInBrowser.call(void 0, claimUrl);
+    if (shouldOpen) _chunkLXYDN5FEjs.openInBrowser.call(void 0, claimUrl);
   }
   if (data.cli_message) {
     console.log(String(data.cli_message));
@@ -471,8 +489,8 @@ async function handleRegister(args) {
       if (apiKey) {
         saveEnvValues(
           {
-            [_chunkNC52JG66js.HOST_URL_ENV]: baseUrl,
-            [_chunkNC52JG66js.API_KEY_ENV]: apiKey,
+            [_chunk3SGA53DXjs.HOST_URL_ENV]: baseUrl,
+            [_chunk3SGA53DXjs.API_KEY_ENV]: apiKey,
             ...activeOrgEnvValues(statusData)
           },
           baseUrl,
@@ -494,7 +512,7 @@ async function handleRegister(args) {
   }
 }
 async function handleWait(args) {
-  const baseUrl = _chunkNC52JG66js.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
+  const baseUrl = _chunk3SGA53DXjs.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
   let timeoutSeconds = 300;
   let requestedScope;
   if (args.includes("--auth-scope")) {
@@ -518,7 +536,7 @@ async function handleWait(args) {
   const authScope = resumed.scope;
   const claimToken = _nullishCoalesce(_optionalChain([pendingClaim, 'optionalAccess', _12 => _12.claimToken]), () => ( ""));
   if (!pendingClaim) {
-    const scopedApiKey = authScope === "folder" ? _chunkNC52JG66js.resolveProjectApiKeyForBaseUrl.call(void 0, baseUrl) : _chunkNC52JG66js.resolveGlobalApiKeyForBaseUrl.call(void 0, baseUrl);
+    const scopedApiKey = authScope === "folder" ? _chunk3SGA53DXjs.resolveProjectApiKeyForBaseUrl.call(void 0, baseUrl) : _chunk3SGA53DXjs.resolveGlobalApiKeyForBaseUrl.call(void 0, baseUrl);
     if (scopedApiKey) {
       console.log("Already connected.");
       return EXIT_OK;
@@ -561,8 +579,8 @@ async function handleWait(args) {
       if (apiKey) {
         saveEnvValues(
           {
-            [_chunkNC52JG66js.HOST_URL_ENV]: baseUrl,
-            [_chunkNC52JG66js.API_KEY_ENV]: apiKey,
+            [_chunk3SGA53DXjs.HOST_URL_ENV]: baseUrl,
+            [_chunk3SGA53DXjs.API_KEY_ENV]: apiKey,
             ...activeOrgEnvValues(data)
           },
           baseUrl,
@@ -586,8 +604,8 @@ async function handleWait(args) {
   return EXIT_AUTH;
 }
 async function authStatusLine(timeoutMs = 3e3) {
-  const baseUrl = _chunkNC52JG66js.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
-  const apiKey = _chunkNC52JG66js.resolveApiKeyForBaseUrl.call(void 0, baseUrl);
+  const baseUrl = _chunk3SGA53DXjs.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
+  const apiKey = _chunk3SGA53DXjs.resolveApiKeyForBaseUrl.call(void 0, baseUrl);
   if (!apiKey) return `Auth: not connected (${baseUrl})`;
   try {
     const { status, data } = await httpJson(
@@ -610,9 +628,9 @@ async function authStatusLine(timeoutMs = 3e3) {
   }
 }
 async function handleStatus(args) {
-  const baseUrl = _chunkNC52JG66js.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
+  const baseUrl = _chunk3SGA53DXjs.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
   const reveal = args.includes("--reveal");
-  const jsonOutput = _chunkM2UL4ZS5js.argsWantJson.call(void 0, args);
+  const jsonOutput = _chunkLXYDN5FEjs.argsWantJson.call(void 0, args);
   const hasExplicitAuthScope = args.includes("--auth-scope");
   let authScope = null;
   if (hasExplicitAuthScope) {
@@ -653,14 +671,14 @@ async function handleStatus(args) {
     };
     hostLines.push(`Host: ${baseUrl} (unreachable)`);
   }
-  const apiKey = authScope === "folder" ? _chunkNC52JG66js.resolveProjectApiKeyForBaseUrl.call(void 0, baseUrl) : authScope === "global" ? _chunkNC52JG66js.resolveGlobalApiKeyForBaseUrl.call(void 0, baseUrl) : _chunkNC52JG66js.resolveApiKeyForBaseUrl.call(void 0, baseUrl);
+  const apiKey = authScope === "folder" ? _chunk3SGA53DXjs.resolveProjectApiKeyForBaseUrl.call(void 0, baseUrl) : authScope === "global" ? _chunk3SGA53DXjs.resolveGlobalApiKeyForBaseUrl.call(void 0, baseUrl) : _chunk3SGA53DXjs.resolveApiKeyForBaseUrl.call(void 0, baseUrl);
   if (!apiKey) {
     const { claim: pendingClaim } = resolvePendingAuthClaimForResume(
       baseUrl,
       _nullishCoalesce(authScope, () => ( void 0))
     );
     if (pendingClaim) {
-      _chunkM2UL4ZS5js.printCommandEnvelope.call(void 0, 
+      _chunkLXYDN5FEjs.printCommandEnvelope.call(void 0, 
         {
           ..._nullishCoalesce(hostStatusPayload, () => ( { host: baseUrl })),
           status: "pending",
@@ -681,7 +699,7 @@ async function handleStatus(args) {
       );
       return EXIT_OK;
     }
-    _chunkM2UL4ZS5js.printCommandEnvelope.call(void 0, 
+    _chunkLXYDN5FEjs.printCommandEnvelope.call(void 0, 
       {
         ..._nullishCoalesce(hostStatusPayload, () => ( { host: baseUrl })),
         status: "not connected",
@@ -714,7 +732,7 @@ async function handleStatus(args) {
     }
   );
   if (status === 401 || status === 403) {
-    _chunkM2UL4ZS5js.printCommandEnvelope.call(void 0, 
+    _chunkLXYDN5FEjs.printCommandEnvelope.call(void 0, 
       {
         ..._nullishCoalesce(hostStatusPayload, () => ( { host: baseUrl })),
         status: "unauthorized",
@@ -741,7 +759,7 @@ async function handleStatus(args) {
     console.error(`Auth status error (status ${status}).`);
     return EXIT_SERVER;
   }
-  const resolvedAuthScope = _nullishCoalesce(authScope, () => ( (_chunkNC52JG66js.getResolvedProjectAuthSource.call(void 0, baseUrl, apiKey) ? "folder" : "global")));
+  const resolvedAuthScope = _nullishCoalesce(authScope, () => ( (_chunk3SGA53DXjs.getResolvedProjectAuthSource.call(void 0, baseUrl, apiKey) ? "folder" : "global")));
   clearSatisfiedPendingClaim(
     baseUrl,
     resolvedAuthScope,
@@ -769,28 +787,28 @@ async function handleStatus(args) {
     if (apiKeyResp) {
       saveEnvValues(
         {
-          [_chunkNC52JG66js.HOST_URL_ENV]: baseUrl,
-          [_chunkNC52JG66js.API_KEY_ENV]: apiKeyResp,
+          [_chunk3SGA53DXjs.HOST_URL_ENV]: baseUrl,
+          [_chunk3SGA53DXjs.API_KEY_ENV]: apiKeyResp,
           ...activeOrgEnvValues(data)
         },
         baseUrl,
         resolvedAuthScope
       );
       if (resolvedAuthScope === "folder") {
-        const target = _chunkNC52JG66js.resolveProjectPinTarget.call(void 0, );
+        const target = _chunk3SGA53DXjs.resolveProjectPinTarget.call(void 0, );
         savedApiKeyPath = target.ok ? _path.join.call(void 0, target.dir, ".env.deepline") : null;
       } else {
         savedApiKeyPath = envFilePath(baseUrl);
       }
     }
-  } else if (resolvedAuthScope === "folder" || _chunkNC52JG66js.storedHostApiKey.call(void 0, baseUrl) === apiKey) {
-    saveEnvValues(_chunkNC52JG66js.featureEnvValues.call(void 0, data), baseUrl, resolvedAuthScope);
+  } else if (resolvedAuthScope === "folder" || _chunk3SGA53DXjs.storedHostApiKey.call(void 0, baseUrl) === apiKey) {
+    saveEnvValues(_chunk3SGA53DXjs.featureEnvValues.call(void 0, data), baseUrl, resolvedAuthScope);
   }
-  _chunkM2UL4ZS5js.printCommandEnvelope.call(void 0, 
+  _chunkLXYDN5FEjs.printCommandEnvelope.call(void 0, 
     {
       ...payload,
-      ..._chunkACDXGOXEjs.detectAgentRuntime.call(void 0, ) !== "unknown" ? {
-        command_context: _chunkNC52JG66js.resolveCliCommandContext.call(void 0, 
+      ..._chunk33O2JGHEjs.detectAgentRuntime.call(void 0, ) !== "unknown" ? {
+        command_context: _chunk3SGA53DXjs.resolveCliCommandContext.call(void 0, 
           { baseUrl, apiKey },
           resolvedAuthScope
         )

package/dist/cli/{chunk-PQQNMMWM.mjs → chunk-27PXHD2P.mjs}

@@ -49,7 +49,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.477",
+  version: "0.3.479",
   updateSummary: {
     introducedIn: "0.3.90",
     summary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release."

package/dist/cli/{chunk-ACDXGOXE.js → chunk-33O2JGHE.js}

@@ -16,12 +16,12 @@ var _chunkXNYIZMNQjs = require('./chunk-XNYIZMNQ.js');
 var _chunkDIAWYWT5js = require('./chunk-DIAWYWT5.js');
 
 
-var _chunk6KKDIISCjs = require('./chunk-6KKDIISC.js');
+var _chunkGQCH6Y7Wjs = require('./chunk-GQCH6Y7W.js');
 
 // src/version.ts
-var SDK_VERSION = _chunk6KKDIISCjs.SDK_RELEASE.version;
-var SDK_API_MAJOR = _chunk6KKDIISCjs.SDK_RELEASE.contracts.api.currentMajor;
-var SDK_API_CONTRACT = _nullishCoalesce(_chunk6KKDIISCjs.SDK_RELEASE.contracts.api.legacyWireIds[0], () => ( `api-v${SDK_API_MAJOR}`));
+var SDK_VERSION = _chunkGQCH6Y7Wjs.SDK_RELEASE.version;
+var SDK_API_MAJOR = _chunkGQCH6Y7Wjs.SDK_RELEASE.contracts.api.currentMajor;
+var SDK_API_CONTRACT = _nullishCoalesce(_chunkGQCH6Y7Wjs.SDK_RELEASE.contracts.api.legacyWireIds[0], () => ( `api-v${SDK_API_MAJOR}`));
 
 // src/agent-runtime.ts
 var _os = require('os');
@@ -208,11 +208,61 @@ function mapNetworkError(baseUrl, error, targetLabel) {
       code: "NETWORK_ABORTED"
     };
   }
+  const causeCode = networkCauseCode(error);
   return {
-    message: _optionalChain([error, 'optionalAccess', _78 => _78.message]) ? `Unable to connect to ${baseUrl}. ${error.message}` : `Unable to connect to ${baseUrl}. Is the computer able to access the url?`,
-    code: "NETWORK_ERROR"
+    message: connectionFailureMessage(baseUrl, error),
+    code: "NETWORK_ERROR",
+    ...causeCode ? { details: { causeCode } } : {}
   };
 }
+var BLOCKED_EGRESS_CAUSE_CODES = /* @__PURE__ */ new Set([
+  "EPERM",
+  "EACCES",
+  "ENOTFOUND",
+  "EAI_AGAIN",
+  "ENETUNREACH",
+  "EHOSTUNREACH",
+  "ETIMEDOUT",
+  "UND_ERR_CONNECT_TIMEOUT"
+]);
+function networkCauseCode(error) {
+  const seen = /* @__PURE__ */ new Set();
+  const queue = [error];
+  while (queue.length > 0) {
+    const current = queue.shift();
+    if (!current || typeof current !== "object" || seen.has(current)) continue;
+    seen.add(current);
+    const record = current;
+    if (typeof record.code === "string" && /^[A-Z][A-Z0-9_]+$/.test(record.code))
+      return record.code;
+    queue.push(record.cause);
+    if (Array.isArray(record.errors)) queue.push(...record.errors);
+  }
+  return void 0;
+}
+function isLoopbackHost(hostname) {
+  return hostname === "localhost" || hostname === "[::1]" || hostname.startsWith("127.") || hostname.endsWith(".localhost");
+}
+function connectionFailureMessage(baseUrl, error) {
+  if (!_optionalChain([error, 'optionalAccess', _78 => _78.message])) {
+    return `Unable to connect to ${baseUrl}. Is the computer able to access the url?`;
+  }
+  const causeCode = networkCauseCode(error);
+  let hostname = "";
+  try {
+    hostname = new URL(baseUrl).hostname;
+  } catch (e) {
+  }
+  const blocked = hostname !== "" && !isLoopbackHost(hostname) && causeCode !== void 0 && (BLOCKED_EGRESS_CAUSE_CODES.has(causeCode) || causeCode === "ECONNREFUSED");
+  const causeMessage = error.cause instanceof Error ? error.cause.message.slice(0, 200) : "";
+  const cause = _nullishCoalesce(causeCode, () => ( causeMessage));
+  return [
+    `Unable to connect to ${baseUrl}. ${error.message}${cause && !error.message.includes(cause) ? ` (${cause})` : ""}.`,
+    ...blocked ? [
+      `A sandbox, firewall, or proxy may be blocking ${hostname}; allow outbound HTTPS to it and retry.`
+    ] : []
+  ].join(" ");
+}
 function describeRequestTarget(path) {
   const toolExecuteMatch = path.match(
     /^\/api\/v2\/integrations\/([^/?#]+)\/execute(?:[/?#]|$)/
@@ -227,7 +277,7 @@ function networkDiagnosticUrl(value) {
     const url = new URL(value);
     if (url.protocol !== "https:" && url.protocol !== "http:") return void 0;
     return `${url.origin}${url.pathname}`;
-  } catch (e) {
+  } catch (e2) {
     return void 0;
   }
 }
@@ -260,7 +310,7 @@ var HttpClient = class {
       return this.cleanDiagnosticHeader(
         _optionalChain([this, 'access', _79 => _79.readLocalSkillsVersion, 'optionalCall', _80 => _80(this.config.baseUrl)])
       );
-    } catch (e2) {
+    } catch (e3) {
       return null;
     }
   }
@@ -766,7 +816,7 @@ var HttpClient = class {
 function parseResponseBody(body) {
   try {
     return JSON.parse(body);
-  } catch (e3) {
+  } catch (e4) {
     return body;
   }
 }
@@ -836,7 +886,7 @@ function buildCandidateUrls(url) {
       candidates.push(loopback.toString());
     }
     return [...new Set(candidates)];
-  } catch (e4) {
+  } catch (e5) {
     return [url];
   }
 }
@@ -917,4 +967,6 @@ ${COWORK_NETWORK_HINT}`;
 
 
 
-exports.ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER = ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER; exports.SDK_VERSION = SDK_VERSION; exports.SDK_API_MAJOR = SDK_API_MAJOR; exports.SDK_API_CONTRACT = SDK_API_CONTRACT; exports.COORDINATOR_INTERNAL_TOKEN_HEADER = COORDINATOR_INTERNAL_TOKEN_HEADER; exports.RUNTIME_ENVIRONMENT_TOKEN_HEADER = RUNTIME_ENVIRONMENT_TOKEN_HEADER; exports.RETAINED_PIPELINE_RECEIVERS_HEADER = RETAINED_PIPELINE_RECEIVERS_HEADER; exports.agentSessionIdFromEnvironment = agentSessionIdFromEnvironment; exports.detectAgentRuntime = detectAgentRuntime; exports.deploymentProtectionHeaders = deploymentProtectionHeaders; exports.fetchWithDeploymentProtection = fetchWithDeploymentProtection; exports.HttpClient = HttpClient;
+
+
+exports.ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER = ATOMIC_TOOL_EXECUTE_SUPPORTED_HEADER; exports.SDK_VERSION = SDK_VERSION; exports.SDK_API_MAJOR = SDK_API_MAJOR; exports.SDK_API_CONTRACT = SDK_API_CONTRACT; exports.COORDINATOR_INTERNAL_TOKEN_HEADER = COORDINATOR_INTERNAL_TOKEN_HEADER; exports.RUNTIME_ENVIRONMENT_TOKEN_HEADER = RUNTIME_ENVIRONMENT_TOKEN_HEADER; exports.RETAINED_PIPELINE_RECEIVERS_HEADER = RETAINED_PIPELINE_RECEIVERS_HEADER; exports.agentSessionIdFromEnvironment = agentSessionIdFromEnvironment; exports.detectAgentRuntime = detectAgentRuntime; exports.deploymentProtectionHeaders = deploymentProtectionHeaders; exports.fetchWithDeploymentProtection = fetchWithDeploymentProtection; exports.networkCauseCode = networkCauseCode; exports.connectionFailureMessage = connectionFailureMessage; exports.HttpClient = HttpClient;

package/dist/cli/{chunk-255O6APS.js → chunk-3GIM7XRH.js}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunk4RAENEAXjs = require('./chunk-4RAENEAX.js');
+var _chunkOVFCPV24js = require('./chunk-OVFCPV24.js');
 
 // src/cli/npm-script-policy.ts
 var _child_process = require('child_process');
@@ -13,7 +13,7 @@ function npmSupportsAllowScripts(version) {
 }
 function readNpmVersion(env) {
   try {
-    const plan = _chunk4RAENEAXjs.resolveShellSpawn.call(void 0, "npm", ["--version"], process.platform, env);
+    const plan = _chunkOVFCPV24js.resolveShellSpawn.call(void 0, "npm", ["--version"], process.platform, env);
     const result = _child_process.spawnSync.call(void 0, plan.command, plan.args, {
       encoding: "utf8",
       env,

package/dist/cli/{chunk-6IJJCRE5.mjs → chunk-3PHOAUU4.mjs}

@@ -2,7 +2,7 @@ import {
   argsWantJson,
   openInBrowser,
   printCommandEnvelope
-} from "./chunk-QODW5ILA.mjs";
+} from "./chunk-YC2QBF2W.mjs";
 import {
   ACTIVE_ORG_ID_ENV,
   ACTIVE_ORG_NAME_ENV,
@@ -22,12 +22,17 @@ import {
   saveHostEnvValues,
   saveProjectDeeplineEnvValues,
   storedHostApiKey
-} from "./chunk-YZA5UJXM.mjs";
+} from "./chunk-O5BUFQ2P.mjs";
 import {
   SDK_API_CONTRACT,
   SDK_VERSION,
-  detectAgentRuntime
-} from "./chunk-LJYTYNQZ.mjs";
+  connectionFailureMessage,
+  detectAgentRuntime,
+  networkCauseCode
+} from "./chunk-XDFARN7U.mjs";
+import {
+  DeeplineError
+} from "./chunk-HBL4PM5Q.mjs";
 
 // src/cli/commands/auth.ts
 import {
@@ -253,7 +258,20 @@ async function httpJson(method, url, apiKey, body, timeoutMs = AUTH_HTTP_TIMEOUT
       clearTimeout(timeout);
     }
   }
-  throw lastError instanceof Error ? lastError : new Error(String(lastError));
+  const failure = lastError instanceof Error ? lastError : new Error(String(lastError));
+  if (failure.name === "AbortError" || failure.name === "TimeoutError") {
+    throw failure;
+  }
+  const causeCode = networkCauseCode(failure);
+  throw Object.assign(
+    new DeeplineError(
+      connectionFailureMessage(new URL(url).origin, failure),
+      void 0,
+      "NETWORK_ERROR",
+      causeCode ? { causeCode } : void 0
+    ),
+    { cause: failure }
+  );
 }
 async function readStatusBanner(baseUrl) {
   const response = await httpJson(