deepline 0.3.479 → 0.3.481

package/dist/cli/{chunk-27GSBTWD.js → chunk-6VKDKATO.js}

@@ -2,7 +2,7 @@
 
 
 
-var _chunkLXYDN5FEjs = require('./chunk-LXYDN5FE.js');
+var _chunk6WWBVWFQjs = require('./chunk-6WWBVWFQ.js');
 
 
 
@@ -22,14 +22,14 @@ var _chunkLXYDN5FEjs = require('./chunk-LXYDN5FE.js');
 
 
 
-var _chunk3SGA53DXjs = require('./chunk-3SGA53DX.js');
+var _chunkVBDR2DP6js = require('./chunk-VBDR2DP6.js');
 
 
 
 
 
 
-var _chunk33O2JGHEjs = require('./chunk-33O2JGHE.js');
+var _chunkWF5QE2IWjs = require('./chunk-WF5QE2IW.js');
 
 
 var _chunkDIAWYWT5js = require('./chunk-DIAWYWT5.js');
@@ -50,6 +50,7 @@ var EXIT_SERVER = 5;
 var EXIT_WORKSPACE_MISMATCH = 6;
 var AUTH_HTTP_TIMEOUT_MS = 1e4;
 var AUTH_REGISTER_HTTP_TIMEOUT_MS = 3e4;
+var APPROVAL_LINK_REPORT_TIMEOUT_MS = 750;
 function statusBannerLine(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
   const banner = value;
@@ -59,7 +60,7 @@ function statusBannerLine(value) {
   return `Service notice: ${banner.message}`;
 }
 function envFilePath(baseUrl) {
-  return _chunk3SGA53DXjs.hostEnvFilePath.call(void 0, baseUrl);
+  return _chunkVBDR2DP6js.hostEnvFilePath.call(void 0, baseUrl);
 }
 function normalizeAuthScope(value) {
   if (!value || value === "global") return "global";
@@ -72,7 +73,7 @@ function parseAuthScope(args) {
 }
 function pendingClaimPath(baseUrl, scope) {
   if (scope === "folder") {
-    const target = _chunk3SGA53DXjs.resolveProjectPinTarget.call(void 0, );
+    const target = _chunkVBDR2DP6js.resolveProjectPinTarget.call(void 0, );
     if (!target.ok) {
       throw new Error(
         `Cowork project folder is ambiguous. Candidate folders: ${target.candidates.join(
@@ -82,10 +83,10 @@ function pendingClaimPath(baseUrl, scope) {
     }
     return _path.join.call(void 0, target.dir, ".deepline", "setup", "pending-auth.json");
   }
-  return `${_chunk3SGA53DXjs.hostConfigDirPath.call(void 0, baseUrl)}/pending-auth.json`;
+  return `${_chunkVBDR2DP6js.hostConfigDirPath.call(void 0, baseUrl)}/pending-auth.json`;
 }
 function legacyPendingClaimTokenPath(baseUrl) {
-  return `${_chunk3SGA53DXjs.hostConfigDirPath.call(void 0, baseUrl)}/pending-claim-token`;
+  return `${_chunkVBDR2DP6js.hostConfigDirPath.call(void 0, baseUrl)}/pending-claim-token`;
 }
 function savePendingClaim(baseUrl, claim) {
   const filePath = pendingClaimPath(baseUrl, claim.scope);
@@ -140,6 +141,8 @@ function readPendingAuthClaim(baseUrl, scope) {
       claimToken,
       claimUrl: typeof parsed.claimUrl === "string" && parsed.claimUrl.trim() ? parsed.claimUrl.trim() : `${baseUrl}/api/v2/auth/cli/claim/${encodeURIComponent(claimToken)}`,
       orgName: typeof parsed.orgName === "string" ? parsed.orgName.trim() : void 0,
+      ...parsed.approvalLinkReporting === true ? { approvalLinkReporting: true } : {},
+      ...typeof parsed.signupWorkspaceId === "string" ? { signupWorkspaceId: parsed.signupWorkspaceId } : {},
       // The record's own scope, when it has one. `register` writes this field
       // precisely so a resume can learn where the credential belongs; reading
       // back the caller's argument instead made it decorative, and a record
@@ -187,21 +190,21 @@ function parseRegisterWaitMode(args) {
 function shouldWaitForRegisterClaim(mode) {
   if (mode === "yes") return true;
   if (mode === "no") return false;
-  return _chunk33O2JGHEjs.detectAgentRuntime.call(void 0, ) !== "claude_cowork";
+  return _chunkWF5QE2IWjs.detectAgentRuntime.call(void 0, ) !== "claude_cowork";
 }
 function saveEnvValues(values, baseUrl, scope) {
   const filtered = {
-    ...values[_chunk3SGA53DXjs.HOST_URL_ENV] ? { [_chunk3SGA53DXjs.HOST_URL_ENV]: values[_chunk3SGA53DXjs.HOST_URL_ENV] } : {},
-    ...values[_chunk3SGA53DXjs.API_KEY_ENV] ? { [_chunk3SGA53DXjs.API_KEY_ENV]: values[_chunk3SGA53DXjs.API_KEY_ENV] } : {},
-    ...values[_chunk3SGA53DXjs.ACTIVE_ORG_ID_ENV] ? { [_chunk3SGA53DXjs.ACTIVE_ORG_ID_ENV]: values[_chunk3SGA53DXjs.ACTIVE_ORG_ID_ENV] } : {},
-    ...Object.prototype.hasOwnProperty.call(values, _chunk3SGA53DXjs.ACTIVE_ORG_NAME_ENV) ? { [_chunk3SGA53DXjs.ACTIVE_ORG_NAME_ENV]: values[_chunk3SGA53DXjs.ACTIVE_ORG_NAME_ENV] } : {},
+    ...values[_chunkVBDR2DP6js.HOST_URL_ENV] ? { [_chunkVBDR2DP6js.HOST_URL_ENV]: values[_chunkVBDR2DP6js.HOST_URL_ENV] } : {},
+    ...values[_chunkVBDR2DP6js.API_KEY_ENV] ? { [_chunkVBDR2DP6js.API_KEY_ENV]: values[_chunkVBDR2DP6js.API_KEY_ENV] } : {},
+    ...values[_chunkVBDR2DP6js.ACTIVE_ORG_ID_ENV] ? { [_chunkVBDR2DP6js.ACTIVE_ORG_ID_ENV]: values[_chunkVBDR2DP6js.ACTIVE_ORG_ID_ENV] } : {},
+    ...Object.prototype.hasOwnProperty.call(values, _chunkVBDR2DP6js.ACTIVE_ORG_NAME_ENV) ? { [_chunkVBDR2DP6js.ACTIVE_ORG_NAME_ENV]: values[_chunkVBDR2DP6js.ACTIVE_ORG_NAME_ENV] } : {},
     // An explicit empty list must reach the store: it clears a stale line.
-    ...Object.prototype.hasOwnProperty.call(values, _chunk3SGA53DXjs.FEATURES_ENV) ? { [_chunk3SGA53DXjs.FEATURES_ENV]: values[_chunk3SGA53DXjs.FEATURES_ENV] } : {}
+    ...Object.prototype.hasOwnProperty.call(values, _chunkVBDR2DP6js.FEATURES_ENV) ? { [_chunkVBDR2DP6js.FEATURES_ENV]: values[_chunkVBDR2DP6js.FEATURES_ENV] } : {}
   };
   if (scope === "folder") {
-    _chunk3SGA53DXjs.saveProjectDeeplineEnvValues.call(void 0, filtered);
+    _chunkVBDR2DP6js.saveProjectDeeplineEnvValues.call(void 0, filtered);
   } else {
-    _chunk3SGA53DXjs.saveHostEnvValues.call(void 0, baseUrl, filtered);
+    _chunkVBDR2DP6js.saveHostEnvValues.call(void 0, baseUrl, filtered);
   }
 }
 function activeOrgEnvValues(data) {
@@ -209,21 +212,21 @@ function activeOrgEnvValues(data) {
   if (!orgId) return {};
   const orgName = typeof data.org_name === "string" ? data.org_name.trim() : "";
   return {
-    [_chunk3SGA53DXjs.ACTIVE_ORG_ID_ENV]: orgId,
-    [_chunk3SGA53DXjs.ACTIVE_ORG_NAME_ENV]: orgName,
-    ..._chunk3SGA53DXjs.featureEnvValues.call(void 0, data)
+    [_chunkVBDR2DP6js.ACTIVE_ORG_ID_ENV]: orgId,
+    [_chunkVBDR2DP6js.ACTIVE_ORG_NAME_ENV]: orgName,
+    ..._chunkVBDR2DP6js.featureEnvValues.call(void 0, data)
   };
 }
 async function httpJson(method, url, apiKey, body, timeoutMs = AUTH_HTTP_TIMEOUT_MS) {
   const headers = {
     "Content-Type": "application/json",
-    "User-Agent": `deepline-ts-sdk/${_chunk33O2JGHEjs.SDK_VERSION}`,
+    "User-Agent": `deepline-ts-sdk/${_chunkWF5QE2IWjs.SDK_VERSION}`,
     "X-Deepline-Client-Family": "sdk",
     "X-Deepline-CLI-Family": "sdk",
-    "X-Deepline-Agent-Runtime": _chunk33O2JGHEjs.detectAgentRuntime.call(void 0, ),
-    "X-Deepline-CLI-Version": _chunk33O2JGHEjs.SDK_VERSION,
-    "X-Deepline-SDK-Version": _chunk33O2JGHEjs.SDK_VERSION,
-    "X-Deepline-API-Contract": _chunk33O2JGHEjs.SDK_API_CONTRACT
+    "X-Deepline-Agent-Runtime": _chunkWF5QE2IWjs.detectAgentRuntime.call(void 0, ),
+    "X-Deepline-CLI-Version": _chunkWF5QE2IWjs.SDK_VERSION,
+    "X-Deepline-SDK-Version": _chunkWF5QE2IWjs.SDK_VERSION,
+    "X-Deepline-API-Contract": _chunkWF5QE2IWjs.SDK_API_CONTRACT
   };
   if (apiKey) headers["Authorization"] = `Bearer ${apiKey}`;
   const bypassToken = _optionalChain([process, 'access', _7 => _7.env, 'access', _8 => _8.VERCEL_PROTECTION_BYPASS_TOKEN, 'optionalAccess', _9 => _9.trim, 'call', _10 => _10()]);
@@ -262,10 +265,10 @@ async function httpJson(method, url, apiKey, body, timeoutMs = AUTH_HTTP_TIMEOUT
   if (failure.name === "AbortError" || failure.name === "TimeoutError") {
     throw failure;
   }
-  const causeCode = _chunk33O2JGHEjs.networkCauseCode.call(void 0, failure);
+  const causeCode = _chunkWF5QE2IWjs.networkCauseCode.call(void 0, failure);
   throw Object.assign(
     new (0, _chunkDIAWYWT5js.DeeplineError)(
-      _chunk33O2JGHEjs.connectionFailureMessage.call(void 0, new URL(url).origin, failure),
+      _chunkWF5QE2IWjs.connectionFailureMessage.call(void 0, new URL(url).origin, failure),
       void 0,
       "NETWORK_ERROR",
       causeCode ? { causeCode } : void 0
@@ -282,7 +285,7 @@ async function readStatusBanner(baseUrl) {
   return _optionalChain([response, 'optionalAccess', _11 => _11.status]) === 200 ? _nullishCoalesce(response.data.banner, () => ( null)) : null;
 }
 async function reportSetupCompleted(input) {
-  const apiKey = input.authScope === "folder" ? _chunk3SGA53DXjs.resolveProjectApiKeyForBaseUrl.call(void 0, input.baseUrl) : _chunk3SGA53DXjs.resolveGlobalApiKeyForBaseUrl.call(void 0, input.baseUrl);
+  const apiKey = input.authScope === "folder" ? _chunkVBDR2DP6js.resolveProjectApiKeyForBaseUrl.call(void 0, input.baseUrl) : _chunkVBDR2DP6js.resolveGlobalApiKeyForBaseUrl.call(void 0, input.baseUrl);
   if (!apiKey) return;
   try {
     await httpJson(
@@ -378,8 +381,24 @@ async function printClaimSuccessBanner(baseUrl, apiKey, statusData) {
     console.log(`  \u2022 Signed in with organization: ${statusData.org_name}`);
   }
 }
-async function handleRegister(args) {
-  const baseUrl = _chunk3SGA53DXjs.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
+async function reportApprovalLinkShown(baseUrl, claim, mode) {
+  try {
+    await httpJson(
+      "POST",
+      `${baseUrl}/api/v2/auth/cli/status`,
+      null,
+      {
+        claim_token: claim.claimToken,
+        approval_link_shown: mode,
+        ...claim.signupWorkspaceId ? { signup_workspace_id: claim.signupWorkspaceId } : {}
+      },
+      APPROVAL_LINK_REPORT_TIMEOUT_MS
+    );
+  } catch (e8) {
+  }
+}
+async function handleRegister(args, options) {
+  const baseUrl = _chunkVBDR2DP6js.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
   let orgName = "";
   let orgId = "";
   let agentName = "";
@@ -403,7 +422,7 @@ async function handleRegister(args) {
   if (!agentName) {
     try {
       agentName = _os.hostname.call(void 0, ) || "Deepline CLI (TS)";
-    } catch (e8) {
+    } catch (e9) {
       agentName = "Deepline CLI (TS)";
     }
   }
@@ -425,28 +444,39 @@ async function handleRegister(args) {
   }
   const claimUrl = String(data.claim_url || "");
   const claimToken = String(data.claim_token || "");
+  const signupWorkspaceId = _optionalChain([process, 'access', _12 => _12.env, 'access', _13 => _13.DEEPLINE_SIGNUP_WORKSPACE_ID, 'optionalAccess', _14 => _14.trim, 'call', _15 => _15()]);
+  const pendingClaim = {
+    claimToken,
+    claimUrl,
+    scope: authScope,
+    ...orgName ? { orgName } : {},
+    ...data.approval_link_reporting === true ? { approvalLinkReporting: true } : {},
+    ...signupWorkspaceId ? { signupWorkspaceId } : {}
+  };
   if (claimToken) {
-    savePendingClaim(baseUrl, {
-      claimToken,
-      claimUrl,
-      scope: authScope,
-      ...orgName ? { orgName } : {}
-    });
+    savePendingClaim(baseUrl, pendingClaim);
     saveEnvValues(
       {
-        [_chunk3SGA53DXjs.HOST_URL_ENV]: baseUrl
+        [_chunkVBDR2DP6js.HOST_URL_ENV]: baseUrl
       },
       baseUrl,
       authScope
     );
   }
   if (claimUrl) {
-    const shouldOpen = waitMode !== "no" && _chunk33O2JGHEjs.detectAgentRuntime.call(void 0, ) !== "claude_cowork";
+    const shouldOpen = waitMode !== "no" && _chunkWF5QE2IWjs.detectAgentRuntime.call(void 0, ) !== "claude_cowork";
     console.log(
       shouldOpen ? "  Opening approval page in your browser." : "  Open this approval page in your browser:"
     );
     console.log(`  ${claimUrl}`);
-    if (shouldOpen) _chunkLXYDN5FEjs.openInBrowser.call(void 0, claimUrl);
+    if (shouldOpen) _chunk6WWBVWFQjs.openInBrowser.call(void 0, claimUrl);
+    if (claimToken && pendingClaim.approvalLinkReporting && !_optionalChain([options, 'optionalAccess', _16 => _16.deferApprovalLinkReport])) {
+      await reportApprovalLinkShown(
+        baseUrl,
+        pendingClaim,
+        shouldOpen ? "auto" : "manual"
+      );
+    }
   }
   if (data.cli_message) {
     console.log(String(data.cli_message));
@@ -489,8 +519,8 @@ async function handleRegister(args) {
       if (apiKey) {
         saveEnvValues(
           {
-            [_chunk3SGA53DXjs.HOST_URL_ENV]: baseUrl,
-            [_chunk3SGA53DXjs.API_KEY_ENV]: apiKey,
+            [_chunkVBDR2DP6js.HOST_URL_ENV]: baseUrl,
+            [_chunkVBDR2DP6js.API_KEY_ENV]: apiKey,
             ...activeOrgEnvValues(statusData)
           },
           baseUrl,
@@ -512,7 +542,7 @@ async function handleRegister(args) {
   }
 }
 async function handleWait(args) {
-  const baseUrl = _chunk3SGA53DXjs.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
+  const baseUrl = _chunkVBDR2DP6js.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
   let timeoutSeconds = 300;
   let requestedScope;
   if (args.includes("--auth-scope")) {
@@ -534,9 +564,9 @@ async function handleWait(args) {
   const resumed = resolvePendingAuthClaimForResume(baseUrl, requestedScope);
   const pendingClaim = resumed.claim;
   const authScope = resumed.scope;
-  const claimToken = _nullishCoalesce(_optionalChain([pendingClaim, 'optionalAccess', _12 => _12.claimToken]), () => ( ""));
+  const claimToken = _nullishCoalesce(_optionalChain([pendingClaim, 'optionalAccess', _17 => _17.claimToken]), () => ( ""));
   if (!pendingClaim) {
-    const scopedApiKey = authScope === "folder" ? _chunk3SGA53DXjs.resolveProjectApiKeyForBaseUrl.call(void 0, baseUrl) : _chunk3SGA53DXjs.resolveGlobalApiKeyForBaseUrl.call(void 0, baseUrl);
+    const scopedApiKey = authScope === "folder" ? _chunkVBDR2DP6js.resolveProjectApiKeyForBaseUrl.call(void 0, baseUrl) : _chunkVBDR2DP6js.resolveGlobalApiKeyForBaseUrl.call(void 0, baseUrl);
     if (scopedApiKey) {
       console.log("Already connected.");
       return EXIT_OK;
@@ -579,8 +609,8 @@ async function handleWait(args) {
       if (apiKey) {
         saveEnvValues(
           {
-            [_chunk3SGA53DXjs.HOST_URL_ENV]: baseUrl,
-            [_chunk3SGA53DXjs.API_KEY_ENV]: apiKey,
+            [_chunkVBDR2DP6js.HOST_URL_ENV]: baseUrl,
+            [_chunkVBDR2DP6js.API_KEY_ENV]: apiKey,
             ...activeOrgEnvValues(data)
           },
           baseUrl,
@@ -604,8 +634,8 @@ async function handleWait(args) {
   return EXIT_AUTH;
 }
 async function authStatusLine(timeoutMs = 3e3) {
-  const baseUrl = _chunk3SGA53DXjs.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
-  const apiKey = _chunk3SGA53DXjs.resolveApiKeyForBaseUrl.call(void 0, baseUrl);
+  const baseUrl = _chunkVBDR2DP6js.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
+  const apiKey = _chunkVBDR2DP6js.resolveApiKeyForBaseUrl.call(void 0, baseUrl);
   if (!apiKey) return `Auth: not connected (${baseUrl})`;
   try {
     const { status, data } = await httpJson(
@@ -623,14 +653,14 @@ async function authStatusLine(timeoutMs = 3e3) {
     }
     const workspace = typeof data.org_name === "string" && data.org_name.trim() ? data.org_name.trim() : "(unnamed)";
     return `Auth: connected to workspace ${workspace} (${baseUrl})`;
-  } catch (e9) {
+  } catch (e10) {
     return `Auth: API key found, not verified (${baseUrl} unreachable)`;
   }
 }
 async function handleStatus(args) {
-  const baseUrl = _chunk3SGA53DXjs.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
+  const baseUrl = _chunkVBDR2DP6js.autoDetectBaseUrl.call(void 0, ).replace(/\/$/, "");
   const reveal = args.includes("--reveal");
-  const jsonOutput = _chunkLXYDN5FEjs.argsWantJson.call(void 0, args);
+  const jsonOutput = _chunk6WWBVWFQjs.argsWantJson.call(void 0, args);
   const hasExplicitAuthScope = args.includes("--auth-scope");
   let authScope = null;
   if (hasExplicitAuthScope) {
@@ -663,7 +693,7 @@ async function handleStatus(args) {
       const bannerLine = statusBannerLine(hostStatusPayload.status_banner);
       if (bannerLine) hostLines.push(bannerLine);
     }
-  } catch (e10) {
+  } catch (e11) {
     hostStatusPayload = {
       host: baseUrl,
       hostStatus: "unreachable",
@@ -671,14 +701,14 @@ async function handleStatus(args) {
     };
     hostLines.push(`Host: ${baseUrl} (unreachable)`);
   }
-  const apiKey = authScope === "folder" ? _chunk3SGA53DXjs.resolveProjectApiKeyForBaseUrl.call(void 0, baseUrl) : authScope === "global" ? _chunk3SGA53DXjs.resolveGlobalApiKeyForBaseUrl.call(void 0, baseUrl) : _chunk3SGA53DXjs.resolveApiKeyForBaseUrl.call(void 0, baseUrl);
+  const apiKey = authScope === "folder" ? _chunkVBDR2DP6js.resolveProjectApiKeyForBaseUrl.call(void 0, baseUrl) : authScope === "global" ? _chunkVBDR2DP6js.resolveGlobalApiKeyForBaseUrl.call(void 0, baseUrl) : _chunkVBDR2DP6js.resolveApiKeyForBaseUrl.call(void 0, baseUrl);
   if (!apiKey) {
     const { claim: pendingClaim } = resolvePendingAuthClaimForResume(
       baseUrl,
       _nullishCoalesce(authScope, () => ( void 0))
     );
     if (pendingClaim) {
-      _chunkLXYDN5FEjs.printCommandEnvelope.call(void 0, 
+      _chunk6WWBVWFQjs.printCommandEnvelope.call(void 0, 
         {
           ..._nullishCoalesce(hostStatusPayload, () => ( { host: baseUrl })),
           status: "pending",
@@ -699,7 +729,7 @@ async function handleStatus(args) {
       );
       return EXIT_OK;
     }
-    _chunkLXYDN5FEjs.printCommandEnvelope.call(void 0, 
+    _chunk6WWBVWFQjs.printCommandEnvelope.call(void 0, 
       {
         ..._nullishCoalesce(hostStatusPayload, () => ( { host: baseUrl })),
         status: "not connected",
@@ -732,7 +762,7 @@ async function handleStatus(args) {
     }
   );
   if (status === 401 || status === 403) {
-    _chunkLXYDN5FEjs.printCommandEnvelope.call(void 0, 
+    _chunk6WWBVWFQjs.printCommandEnvelope.call(void 0, 
       {
         ..._nullishCoalesce(hostStatusPayload, () => ( { host: baseUrl })),
         status: "unauthorized",
@@ -759,7 +789,7 @@ async function handleStatus(args) {
     console.error(`Auth status error (status ${status}).`);
     return EXIT_SERVER;
   }
-  const resolvedAuthScope = _nullishCoalesce(authScope, () => ( (_chunk3SGA53DXjs.getResolvedProjectAuthSource.call(void 0, baseUrl, apiKey) ? "folder" : "global")));
+  const resolvedAuthScope = _nullishCoalesce(authScope, () => ( (_chunkVBDR2DP6js.getResolvedProjectAuthSource.call(void 0, baseUrl, apiKey) ? "folder" : "global")));
   clearSatisfiedPendingClaim(
     baseUrl,
     resolvedAuthScope,
@@ -787,28 +817,28 @@ async function handleStatus(args) {
     if (apiKeyResp) {
       saveEnvValues(
         {
-          [_chunk3SGA53DXjs.HOST_URL_ENV]: baseUrl,
-          [_chunk3SGA53DXjs.API_KEY_ENV]: apiKeyResp,
+          [_chunkVBDR2DP6js.HOST_URL_ENV]: baseUrl,
+          [_chunkVBDR2DP6js.API_KEY_ENV]: apiKeyResp,
           ...activeOrgEnvValues(data)
         },
         baseUrl,
         resolvedAuthScope
       );
       if (resolvedAuthScope === "folder") {
-        const target = _chunk3SGA53DXjs.resolveProjectPinTarget.call(void 0, );
+        const target = _chunkVBDR2DP6js.resolveProjectPinTarget.call(void 0, );
         savedApiKeyPath = target.ok ? _path.join.call(void 0, target.dir, ".env.deepline") : null;
       } else {
         savedApiKeyPath = envFilePath(baseUrl);
       }
     }
-  } else if (resolvedAuthScope === "folder" || _chunk3SGA53DXjs.storedHostApiKey.call(void 0, baseUrl) === apiKey) {
-    saveEnvValues(_chunk3SGA53DXjs.featureEnvValues.call(void 0, data), baseUrl, resolvedAuthScope);
+  } else if (resolvedAuthScope === "folder" || _chunkVBDR2DP6js.storedHostApiKey.call(void 0, baseUrl) === apiKey) {
+    saveEnvValues(_chunkVBDR2DP6js.featureEnvValues.call(void 0, data), baseUrl, resolvedAuthScope);
   }
-  _chunkLXYDN5FEjs.printCommandEnvelope.call(void 0, 
+  _chunk6WWBVWFQjs.printCommandEnvelope.call(void 0, 
     {
       ...payload,
-      ..._chunk33O2JGHEjs.detectAgentRuntime.call(void 0, ) !== "unknown" ? {
-        command_context: _chunk3SGA53DXjs.resolveCliCommandContext.call(void 0, 
+      ..._chunkWF5QE2IWjs.detectAgentRuntime.call(void 0, ) !== "unknown" ? {
+        command_context: _chunkVBDR2DP6js.resolveCliCommandContext.call(void 0, 
           { baseUrl, apiKey },
           resolvedAuthScope
         )
@@ -967,4 +997,5 @@ Examples:
 
 
 
-exports.EXIT_WORKSPACE_MISMATCH = EXIT_WORKSPACE_MISMATCH; exports.statusBannerLine = statusBannerLine; exports.resolvePendingAuthClaimForResume = resolvePendingAuthClaimForResume; exports.readPendingAuthClaim = readPendingAuthClaim; exports.clearPendingClaim = clearPendingClaim; exports.clearSatisfiedPendingClaim = clearSatisfiedPendingClaim; exports.httpJson = httpJson; exports.readStatusBanner = readStatusBanner; exports.reportSetupCompleted = reportSetupCompleted; exports.handleRegister = handleRegister; exports.handleWait = handleWait; exports.authStatusLine = authStatusLine; exports.handleStatus = handleStatus; exports.registerAuthCommands = registerAuthCommands;
+
+exports.EXIT_WORKSPACE_MISMATCH = EXIT_WORKSPACE_MISMATCH; exports.statusBannerLine = statusBannerLine; exports.resolvePendingAuthClaimForResume = resolvePendingAuthClaimForResume; exports.readPendingAuthClaim = readPendingAuthClaim; exports.clearPendingClaim = clearPendingClaim; exports.clearSatisfiedPendingClaim = clearSatisfiedPendingClaim; exports.httpJson = httpJson; exports.readStatusBanner = readStatusBanner; exports.reportSetupCompleted = reportSetupCompleted; exports.reportApprovalLinkShown = reportApprovalLinkShown; exports.handleRegister = handleRegister; exports.handleWait = handleWait; exports.authStatusLine = authStatusLine; exports.handleStatus = handleStatus; exports.registerAuthCommands = registerAuthCommands;

package/dist/cli/{chunk-LXYDN5FE.js → chunk-6WWBVWFQ.js}

@@ -2,10 +2,10 @@
 
 
 
-var _chunk3SGA53DXjs = require('./chunk-3SGA53DX.js');
+var _chunkVBDR2DP6js = require('./chunk-VBDR2DP6.js');
 
 
-var _chunk33O2JGHEjs = require('./chunk-33O2JGHE.js');
+var _chunkWF5QE2IWjs = require('./chunk-WF5QE2IW.js');
 
 
 
@@ -290,8 +290,8 @@ var BROWSER_OPEN_COOLDOWN_MS = 3e4;
 var SAME_URL_BROWSER_OPEN_COOLDOWN_MS = 5 * 6e4;
 var defaultBrowserCommandRunner = childProcess;
 function getAuthedHttpClient() {
-  const config = _chunk3SGA53DXjs.resolveConfig.call(void 0, );
-  return { config, http: new (0, _chunk3SGA53DXjs.HttpClient)(config) };
+  const config = _chunkVBDR2DP6js.resolveConfig.call(void 0, );
+  return { config, http: new (0, _chunkVBDR2DP6js.HttpClient)(config) };
 }
 function stableOsUserId() {
   try {
@@ -631,7 +631,7 @@ function collectLocalEnvInfo() {
     os: `${process.platform} ${process.arch}`,
     node_version: process.version,
     home_dir: homeDir,
-    agent_runtime: _chunk33O2JGHEjs.detectAgentRuntime.call(void 0, )
+    agent_runtime: _chunkWF5QE2IWjs.detectAgentRuntime.call(void 0, )
   };
   const env = process.env;
   const optional = {
@@ -878,9 +878,9 @@ function markdownTableFromRows(rows, preferredColumns = []) {
 }
 function withAgentCommandContext(value) {
   const valueRecord = value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
-  return _chunk33O2JGHEjs.detectAgentRuntime.call(void 0, ) !== "unknown" && valueRecord && !Object.prototype.hasOwnProperty.call(valueRecord, "command_context") ? {
+  return _chunkWF5QE2IWjs.detectAgentRuntime.call(void 0, ) !== "unknown" && valueRecord && !Object.prototype.hasOwnProperty.call(valueRecord, "command_context") ? {
     ...valueRecord,
-    command_context: _chunk3SGA53DXjs.resolveCliCommandContext.call(void 0, )
+    command_context: _chunkVBDR2DP6js.resolveCliCommandContext.call(void 0, )
   } : value;
 }
 function printJson(value, fields) {

package/dist/cli/{chunk-JNFNNJ75.mjs → chunk-6ZMUAASO.mjs}

@@ -11,20 +11,20 @@ import {
   skillsInstallLeasePath,
   skillsSourceUrl,
   syncSdkSkillsIfNeeded
-} from "./chunk-K5RRY7DJ.mjs";
+} from "./chunk-EPZSX7FZ.mjs";
 import {
   printCommandEnvelope
-} from "./chunk-YC2QBF2W.mjs";
+} from "./chunk-C7UIUKW6.mjs";
 import {
   autoDetectBaseUrl,
   ensureProjectPrivatePathsIgnored,
   resolveProjectPinTarget,
   sdkCliStateDirPath
-} from "./chunk-O5BUFQ2P.mjs";
+} from "./chunk-VRAOWHXJ.mjs";
 import {
   SDK_VERSION,
   detectAgentRuntime
-} from "./chunk-XDFARN7U.mjs";
+} from "./chunk-PDJS6LFI.mjs";
 
 // src/cli/commands/skills.ts
 import { spawn } from "child_process";

package/dist/cli/{chunk-6C3QY5JS.mjs → chunk-75LUK4E5.mjs}

@@ -1,6 +1,6 @@
 import {
   resolveShellSpawn
-} from "./chunk-K5RRY7DJ.mjs";
+} from "./chunk-EPZSX7FZ.mjs";
 
 // src/cli/npm-script-policy.ts
 import { spawnSync } from "child_process";

package/dist/cli/{chunk-JKUFOP7M.mjs → chunk-7VVC4RZX.mjs}

@@ -6,7 +6,7 @@ import {
 import {
   csvSafeJsonString,
   csvStringFromRows
-} from "./chunk-YC2QBF2W.mjs";
+} from "./chunk-C7UIUKW6.mjs";
 
 // src/cli/describe-options.ts
 function addDescribeOptions(command, options = {}) {

package/dist/cli/{chunk-N7E25EU2.mjs → chunk-ASQJUUGB.mjs}

@@ -4,20 +4,20 @@ import {
   resolveUpdatePlan,
   runAutomaticUpdatePlan,
   shouldRunCliAutoUpdate
-} from "./chunk-PUOKABQF.mjs";
+} from "./chunk-S5WXSC3P.mjs";
 import {
   isCiEnvironment
-} from "./chunk-K5RRY7DJ.mjs";
+} from "./chunk-EPZSX7FZ.mjs";
 import {
   addJsonNotice,
   isJsonOutputMode
-} from "./chunk-YC2QBF2W.mjs";
+} from "./chunk-C7UIUKW6.mjs";
 import {
   resolveApiKeyForBaseUrl
-} from "./chunk-O5BUFQ2P.mjs";
+} from "./chunk-VRAOWHXJ.mjs";
 import {
   SDK_VERSION
-} from "./chunk-XDFARN7U.mjs";
+} from "./chunk-PDJS6LFI.mjs";
 
 // src/cli/compatibility-catalog.ts
 var readers = /* @__PURE__ */ new WeakMap();

package/dist/cli/{chunk-FKEZ5DIJ.mjs → chunk-BJ5UFTWL.mjs}

@@ -6,6 +6,7 @@ import {
 } from "./chunk-L2VKAASU.mjs";
 import {
   CLI_PLAY_RUN_START_STREAM_PATH,
+  CLI_PLAY_RUN_SUPPORTED_HEADER,
   CliPlayAdmissionUnsupportedError,
   PLAY_RUN_START_STREAM_PATH,
   decodePlayRunPublicStatus,
@@ -13,9 +14,10 @@ import {
   isTerminalPlayRunLifecycleStatus,
   mintStagedPlayFileUploads,
   preparePlayRunAdmission,
+  readPlayRunAdmissionCapability,
   stagePlayFiles,
   startPlayRun
-} from "./chunk-NELMCOWK.mjs";
+} from "./chunk-HNRELVCS.mjs";
 import {
   describePlayDetail,
   describePlayListItem
@@ -26,7 +28,7 @@ import {
   RETAINED_PIPELINE_RECEIVERS_HEADER,
   RUNTIME_ENVIRONMENT_TOKEN_HEADER,
   SDK_API_MAJOR
-} from "./chunk-XDFARN7U.mjs";
+} from "./chunk-PDJS6LFI.mjs";
 import {
   CustomerDbQueryOutcomeUnknownError
 } from "./chunk-4QF2K7TM.mjs";
@@ -3905,7 +3907,7 @@ var DeeplineClient = class _DeeplineClient {
   /**
    * Re-establish this workspace's tenant storage contract: role/DB connect
    * grants plus materialized table grants. Org-admin only. Use when a run fails
-   * with WORKSPACE_STORAGE_NOT_READY.
+   * with `WORKSPACE_STORAGE_NOT_READY`.
    */
   async repairIngestionStorage(input) {
     return this.http.post(
@@ -3966,7 +3968,10 @@ var DeeplineClient = class _DeeplineClient {
     const prepared = await preparePlayRunAdmission(
       this.http,
       resolved.request,
-      options?.onSubmission
+      options?.onSubmission,
+      {
+        ...options && Object.hasOwn(options, "admissionCapability") ? { admissionCapability: options.admissionCapability } : {}
+      }
     );
     const bodyJson = JSON.stringify(prepared.body);
     const headers = runtimeSelectionHeaders(resolved.runtime, this.environment);
@@ -3985,23 +3990,31 @@ var DeeplineClient = class _DeeplineClient {
         if (submitted) {
           await preparePlayRunAdmission(
             http,
-            JSON.parse(bodyJson)
+            JSON.parse(bodyJson),
+            void 0,
+            { signal: streamOptions?.signal }
           );
         }
         submitted = true;
         const streamPath = options?.cliAdmission ? CLI_PLAY_RUN_START_STREAM_PATH : PLAY_RUN_START_STREAM_PATH;
+        let cliAdmissionSupported = false;
         try {
           for await (const event of http.streamSse(streamPath, {
             method: "POST",
             body: JSON.parse(bodyJson),
             headers,
             signal: streamOptions?.signal,
-            exactUrlOnly: true
+            exactUrlOnly: true,
+            ...options?.cliAdmission ? {
+              onResponse: (response) => {
+                cliAdmissionSupported = response.headers.get(CLI_PLAY_RUN_SUPPORTED_HEADER) === "true";
+              }
+            } : {}
           })) {
             if (event.scope === "play") yield event;
           }
         } catch (error) {
-          if (options?.cliAdmission && error instanceof DeeplineError && (error.statusCode === 404 || error.statusCode === 405)) {
+          if (options?.cliAdmission && !cliAdmissionSupported && error instanceof DeeplineError && (error.statusCode === 404 || error.statusCode === 405)) {
             throw new CliPlayAdmissionUnsupportedError(error.statusCode);
           }
           throw error;
@@ -4009,6 +4022,14 @@ var DeeplineClient = class _DeeplineClient {
       }
     };
   }
+  /**
+   * Internal CLI helper. Reads the server's admission contract before local
+   * preparation so the network round trip can overlap with compilation.
+   * @internal
+   */
+  async prefetchPlayRunAdmissionCapability() {
+    return readPlayRunAdmissionCapability(this.http);
+  }
   /**
    * Submit a play run through the legacy event response.
    *

package/dist/cli/{chunk-W4HIOBQQ.js → chunk-BJMEXKZY.js}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
 
-var _chunkLXYDN5FEjs = require('./chunk-LXYDN5FE.js');
+var _chunk6WWBVWFQjs = require('./chunk-6WWBVWFQ.js');
 
 // src/cli/maintenance-policy.ts
 var _commander = require('commander');
@@ -33,7 +33,7 @@ function recordCliTrace(event) {
     sinceStartMs: now - cliTraceStartedAt,
     ...event
   };
-  _chunkLXYDN5FEjs.writeRawStderr.call(void 0, `[cli-trace] ${JSON.stringify(payload)}
+  _chunk6WWBVWFQjs.writeRawStderr.call(void 0, `[cli-trace] ${JSON.stringify(payload)}
 `);
 }
 async function traceCliSpan(phase, fields, run) {

package/dist/cli/{chunk-YC2QBF2W.mjs → chunk-C7UIUKW6.mjs}

@@ -2,10 +2,10 @@ import {
   HttpClient,
   resolveCliCommandContext,
   resolveConfig
-} from "./chunk-O5BUFQ2P.mjs";
+} from "./chunk-VRAOWHXJ.mjs";
 import {
   detectAgentRuntime
-} from "./chunk-XDFARN7U.mjs";
+} from "./chunk-PDJS6LFI.mjs";
 import {
   DeeplineError,
   serializeToolExecutionFailure