deepspace 0.19.5 → 0.21.0

package/dist/cli.js

@@ -530,7 +530,7 @@ import { readFileSync as readFileSync2, existsSync, mkdirSync } from "fs";
 import { join } from "path";
 import { homedir } from "os";
 
-// src/cli/jwt.ts
+// src/shared/jwt.ts
 function decodeJwtPayload(token) {
   const payloadSegment = token.split(".")[1];
   if (!payloadSegment) {
@@ -2677,11 +2677,15 @@ Free it with \`${killCmd}\`, or start on another port: \`deepspace dev start --p
     }
     const url = `http://${host === DEFAULT_DEV_HOST ? "localhost" : host}:${port}`;
     say("Starting dev server...\n");
-    const vite = spawn2("npx", ["vite", "--port", String(port), "--strictPort", "--host", host], {
-      cwd: appDir,
-      stdio: "inherit",
-      env: wranglerViteEnv(process.env, wranglerConfig, { DEEPSPACE_PORT: String(port) })
-    });
+    const vite = spawn2(
+      "npx",
+      ["vite", "--port", String(port), "--strictPort", "--host", host, "--clearScreen", "false"],
+      {
+        cwd: appDir,
+        stdio: "inherit",
+        env: wranglerViteEnv(process.env, wranglerConfig, { DEEPSPACE_PORT: String(port) })
+      }
+    );
     const readiness = new AbortController();
     if (args.json) {
       void waitForPortListening(port, host, READINESS_TIMEOUT_MS, readiness.signal).then((ready) => {
@@ -3195,7 +3199,7 @@ async function syncTestAccountStore() {
 // src/cli/commands/test.ts
 var DEPLOY_URL2 = process.env.DEEPSPACE_DEPLOY_URL ?? PLATFORM_URLS.deploy;
 var PLAYWRIGHT_OUTPUT_DIR = ".deepspace/test-results";
-function playwrightTestArgs(testFiles) {
+function playwrightTestArgs(testFiles, flags = {}) {
   return [
     "playwright",
     "test",
@@ -3203,6 +3207,9 @@ function playwrightTestArgs(testFiles) {
     "tests/playwright.config.ts",
     "--output",
     PLAYWRIGHT_OUTPUT_DIR,
+    ...flags.grep ? ["--grep", flags.grep] : [],
+    ...flags.project ? ["--project", flags.project] : [],
+    ...flags.headed ? ["--headed"] : [],
     ...testFiles
   ];
 }
@@ -3223,6 +3230,21 @@ var test_default = defineDeepspaceCommand({
       description: `Port for vite/webServer (default ${DEFAULT_PORT}, or $DEEPSPACE_PORT)`,
       required: false
     },
+    grep: {
+      type: "string",
+      description: "Only run Playwright tests matching this pattern (forwarded to --grep)",
+      required: false
+    },
+    project: {
+      type: "string",
+      description: "Playwright project to run (forwarded to --project)",
+      required: false
+    },
+    headed: {
+      type: "boolean",
+      description: "Run Playwright browsers headed (forwarded to --headed)",
+      default: false
+    },
     env: {
       type: "string",
       alias: "e",
@@ -3237,6 +3259,11 @@ var test_default = defineDeepspaceCommand({
     preflightNodeVersion("test run");
     const suite = args.suite ?? "default";
     const wranglerEnv = typeof args.env === "string" && args.env.trim() ? args.env.trim() : void 0;
+    const forwarded = {
+      grep: typeof args.grep === "string" && args.grep ? args.grep : void 0,
+      project: typeof args.project === "string" && args.project ? args.project : void 0,
+      headed: Boolean(args.headed)
+    };
     const start = resolve9(".");
     const appDir = findAppDir(start);
     if (!appDir) {
@@ -3293,32 +3320,36 @@ var test_default = defineDeepspaceCommand({
     let exitCode = 0;
     switch (suite) {
       case "smoke":
-        exitCode = runPlaywright(appDir, ["tests/smoke.spec.ts"], port, wranglerEnv);
+        exitCode = runPlaywright(appDir, ["tests/smoke.spec.ts"], port, wranglerEnv, forwarded);
         break;
       case "api":
-        exitCode = runPlaywright(appDir, ["tests/api.spec.ts"], port, wranglerEnv);
+        exitCode = runPlaywright(appDir, ["tests/api.spec.ts"], port, wranglerEnv, forwarded);
         break;
       case "e2e":
-        exitCode = runPlaywright(appDir, [], port, wranglerEnv);
+        exitCode = runPlaywright(appDir, [], port, wranglerEnv, forwarded);
         break;
       case "unit":
+        if (forwarded.grep || forwarded.project || forwarded.headed) {
+          console.error("note: --grep/--project/--headed apply to Playwright suites and are ignored by `unit`");
+        }
         exitCode = runVitest(appDir);
         break;
       case "all":
         exitCode = runVitest(appDir);
-        if (exitCode === 0) exitCode = runPlaywright(appDir, [], port, wranglerEnv);
+        if (exitCode === 0) exitCode = runPlaywright(appDir, [], port, wranglerEnv, forwarded);
         break;
       case "default":
         exitCode = runPlaywright(
           appDir,
           ["tests/smoke.spec.ts", "tests/api.spec.ts"],
           port,
-          wranglerEnv
+          wranglerEnv,
+          forwarded
         );
         break;
       default:
         if (suite.endsWith(".spec.ts")) {
-          exitCode = runPlaywright(appDir, [suite], port, wranglerEnv);
+          exitCode = runPlaywright(appDir, [suite], port, wranglerEnv, forwarded);
         } else {
           throw new Refusal(
             `Unknown test suite: ${suite}
@@ -3335,7 +3366,7 @@ Available: smoke, api, e2e, unit, all`,
     return { data: { suite, port, appDir, wranglerEnv: wranglerEnv ?? null } };
   }
 });
-function runPlaywright(appDir, testFiles, port, wranglerEnv) {
+function runPlaywright(appDir, testFiles, port, wranglerEnv, flags) {
   let wranglerConfig;
   try {
     wranglerConfig = prepareWranglerEnvConfig(appDir, wranglerEnv);
@@ -3344,7 +3375,7 @@ function runPlaywright(appDir, testFiles, port, wranglerEnv) {
     return 1;
   }
   try {
-    const result = spawnSync4("npx", playwrightTestArgs(testFiles), {
+    const result = spawnSync4("npx", playwrightTestArgs(testFiles, flags), {
       cwd: appDir,
       stdio: "inherit",
       env: wranglerViteEnv(process.env, wranglerConfig, {
@@ -3453,7 +3484,7 @@ var create = defineDeepspaceCommand({
     await ensureToken();
     const email = args.email;
     const password = args.password;
-    const name = args.name;
+    const name = args.name ?? email.split("@")[0];
     const label = args.label;
     let account;
     try {
@@ -3477,6 +3508,7 @@ var create = defineDeepspaceCommand({
       console.log(`Created test account:`);
       console.log(`  ID:       ${account.id}`);
       console.log(`  Email:    ${account.email}`);
+      console.log(`  Selector: ${name}`);
       console.log(`  Password: ${password}`);
       console.log(`  UserID:   ${account.userId}`);
       if (account.label) console.log(`  Label:    ${account.label}`);
@@ -3487,6 +3519,7 @@ Saved to ${TEST_ACCOUNTS_PATH}`);
       data: {
         id: account.id,
         email: account.email,
+        name,
         // The password is already echoed on the human path and stored 0600 in
         // ACCOUNTS_PATH — withholding it from --json would only force scripts
         // to parse the file themselves.
@@ -3504,6 +3537,18 @@ var list = defineDeepspaceCommand({
     name: "list",
     description: "List your test accounts"
   },
+  args: {
+    usable: {
+      type: "boolean",
+      description: "Only accounts with locally saved credentials (usable by the users() fixture)",
+      default: false
+    },
+    reveal: {
+      type: "boolean",
+      description: "Print locally saved passwords instead of masking them",
+      default: false
+    }
+  },
   async run({ args }) {
     await ensureToken();
     let remote;
@@ -3512,42 +3557,47 @@ var list = defineDeepspaceCommand({
     } catch (err) {
       throw new Refusal(`Failed: ${err.message}`, "test_accounts_list_failed");
     }
-    const local = loadAllTestAccounts();
-    const localByEmail = new Map(local.map((a) => [a.email, a]));
-    if (remote.length === 0) {
+    const localByEmail = new Map(loadAllTestAccounts().map((a) => [a.email, a]));
+    const accounts = remote.map((a) => {
+      const stored = localByEmail.get(a.email);
+      return {
+        id: a.id,
+        email: a.email,
+        userId: a.userId,
+        label: a.label,
+        createdAt: a.createdAt,
+        name: stored?.name ?? null,
+        password: stored?.password ?? null,
+        usableByFixture: Boolean(stored?.password)
+      };
+    }).filter((a) => !args.usable || a.usableByFixture);
+    if (accounts.length === 0) {
       if (!args.json) {
         console.log(
-          "No test accounts. Create one with: deepspace test accounts create --email <email> --password <password>"
+          remote.length > 0 ? `No test accounts with locally saved credentials (${remote.length} remote-only). Recreate them with: deepspace test accounts create --email <email> --password <password>` : "No test accounts. Create one with: deepspace test accounts create --email <email> --password <password>"
         );
       }
       return { data: { accounts: [], count: 0, limit: 10 } };
     }
     if (!args.json) {
-      console.log(`Test accounts (${remote.length}/10):
+      console.log(`Test accounts (${remote.length}/10${args.usable ? ", usable only" : ""}):
 `);
-      for (const a of remote) {
-        const stored = localByEmail.get(a.email);
+      for (const a of accounts) {
         const date = new Date(a.createdAt).toLocaleDateString();
         console.log(`  ${a.email}${a.label ? ` (${a.label})` : ""}`);
         console.log(`    ID: ${a.id}  UserID: ${a.userId}  Created: ${date}`);
-        if (stored?.password) {
-          console.log(`    Password: ${stored.password}`);
+        console.log(`    Selector: ${a.name ?? "(none)"}`);
+        if (a.usableByFixture) {
+          console.log(`    Password: ${args.reveal ? a.password : "(saved locally)"}`);
         } else {
-          console.log(`    Password: (not saved locally)`);
+          console.log(`    Password: (not saved locally \u2014 not usable by the users() fixture)`);
         }
       }
     }
     return {
       data: {
-        accounts: remote.map((a) => ({
-          id: a.id,
-          email: a.email,
-          userId: a.userId,
-          label: a.label,
-          createdAt: a.createdAt,
-          password: localByEmail.get(a.email)?.password ?? null
-        })),
-        count: remote.length,
+        accounts,
+        count: accounts.length,
         limit: 10
       }
     };
@@ -3799,13 +3849,13 @@ var MAX_UPLOAD_REQUEST_BYTES = 25 * 1024 * 1024;
 var UPLOAD_PART_BYTES = 20 * 1024 * 1024;
 var MAX_UPLOAD_PARTS = Math.ceil(MAX_APP_FILE_BYTES / UPLOAD_PART_BYTES);
 var MAX_BASE64_UPLOAD_BYTES = Math.floor(MAX_UPLOAD_REQUEST_BYTES * 3 / 4);
-function planUploadParts(totalBytes, partSize) {
+function planUploadParts(totalBytes) {
   const parts = [];
-  for (let start = 0; start < totalBytes; start += partSize) {
+  for (let start = 0; start < totalBytes; start += UPLOAD_PART_BYTES) {
     parts.push({
       partNumber: parts.length + 1,
       start,
-      end: Math.min(start + partSize, totalBytes)
+      end: Math.min(start + UPLOAD_PART_BYTES, totalBytes)
     });
   }
   return parts;
@@ -3820,20 +3870,6 @@ var ACCOUNT_STORAGE_LIMIT_BYTES = {
 };
 var REPO_STORE_LIMIT_BYTES = 256 * 1024 * 1024;
 var MAX_DEPLOY_ASSET_FILE_BYTES = 25 * 1024 * 1024;
-var DANGEROUS_MIME_TYPES = /* @__PURE__ */ new Set([
-  "text/html",
-  "application/xhtml+xml",
-  "image/svg+xml",
-  "application/xml",
-  "text/xml",
-  "application/javascript",
-  "text/javascript",
-  "application/ecmascript",
-  "text/ecmascript"
-]);
-function activeContentMessage(mimeType) {
-  return `${mimeType} is not accepted: the files API serves your app's own origin, so stored HTML/SVG/JavaScript would execute there with your users' sessions. Ship it as a build asset under \`public/\` instead, where it is served as part of your app rather than as user-uploaded content.`;
-}
 function formatBytes(bytes) {
   if (bytes >= 1024 * 1024 * 1024) return `${(bytes / (1024 * 1024 * 1024)).toFixed(1)} GiB`;
   if (bytes >= 1024 * 1024) return `${(bytes / (1024 * 1024)).toFixed(1)} MiB`;
@@ -4431,6 +4467,7 @@ async function buildDeployBundle(options) {
   if (lintFindings && lintFindings.length > 0) {
     p6.log.warn(formatSchemaLintFindings(lintFindings).join("\n"));
   }
+  const buildStarted = Date.now();
   spinner2.start("Building...");
   let preparedWranglerConfig;
   try {
@@ -4453,7 +4490,7 @@ async function buildDeployBundle(options) {
   } finally {
     preparedWranglerConfig?.cleanup();
   }
-  spinner2.stop("Built");
+  spinner2.stop(`Built (${Math.round((Date.now() - buildStarted) / 1e3)}s)`);
   const deployConfigPath = join15(appDir, ".wrangler", "deploy", "config.json");
   if (!existsSync14(deployConfigPath)) {
     output.die(
@@ -4615,6 +4652,51 @@ import * as p7 from "@clack/prompts";
 import { existsSync as existsSync15 } from "fs";
 import { join as join16 } from "path";
 import { pathToFileURL as pathToFileURL2 } from "url";
+
+// src/shared/api-error.ts
+var SLUG_RE = /^[a-z0-9]+(?:[_.-][a-z0-9]+)*$/;
+var HUMAN_MESSAGES = {
+  owner_connect_not_ready: "This app isn't ready to accept payments yet \u2014 the app owner needs to finish payment setup.",
+  invalid_json: "The request body was not valid JSON.",
+  invalid_body: "The request body is invalid.",
+  invalid_product_id: "Invalid product id.",
+  duplicate_product_id: "Duplicate product id.",
+  unknown_product: "Unknown product.",
+  too_many_products: "Too many products declared.",
+  invalid_amount: "Invalid amount.",
+  invalid_name: "Invalid product name.",
+  invalid_description: "Invalid product description.",
+  unsupported_currency: "Unsupported currency.",
+  unknown_app: "Unknown app.",
+  not_app_owner: "Only the app owner (or a collaborator) can do this.",
+  invalid_return_url: "Invalid return URL.",
+  invalid_cancel_url: "Invalid cancel URL.",
+  unknown_plan: "Unknown subscription plan.",
+  unknown_price: "No price is configured for that billing interval.",
+  no_subscription: "No subscription found for this account."
+};
+function normalizeApiError(status3, body) {
+  const payload = body !== null && typeof body === "object" ? body : {};
+  const rawError = typeof payload.error === "string" ? payload.error : void 0;
+  const message = typeof payload.message === "string" ? payload.message : void 0;
+  const humanError = rawError !== void 0 && !SLUG_RE.test(rawError) ? rawError : void 0;
+  const code = rawError !== void 0 && SLUG_RE.test(rawError) ? rawError : typeof payload.code === "string" && SLUG_RE.test(payload.code) ? payload.code : void 0;
+  const details = {};
+  for (const [key, value] of Object.entries(payload)) {
+    if (key === "success" || key === "error" || key === "message" || key === "issues" || key === "code")
+      continue;
+    details[key] = value;
+  }
+  return {
+    error: message ?? humanError ?? (code !== void 0 ? HUMAN_MESSAGES[code] : void 0) ?? rawError ?? `Request failed (${status3})`,
+    ...code !== void 0 ? { code } : {},
+    status: status3,
+    ...Object.keys(details).length > 0 ? { details } : {},
+    ...Array.isArray(payload.issues) ? { issues: payload.issues } : {}
+  };
+}
+
+// src/cli/commands/deploy/commerce.ts
 var API_URL2 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
 function errorMessage2(error) {
   return error instanceof Error ? error.message : String(error);
@@ -4688,7 +4770,7 @@ Stripe will keep charging them until you cancel. Cancel at the end of their curr
         });
         const body = await response.json().catch(() => ({}));
         if (!response.ok || !body.success) {
-          lastError = body.error ?? `HTTP ${response.status}`;
+          lastError = normalizeApiError(response.status, body).error;
           spinner2.stop(`Cancel failed for ${change.slug}: ${lastError}`);
           stopped = true;
           break;
@@ -4746,7 +4828,7 @@ async function syncSubscriptionPlans(appDir, appName, token, nonInteractive) {
     if (!response.ok || !body.ok) {
       spinner2.stop("Plan sync skipped");
       p7.log.warn(
-        `Plan sync failed: ${body.error ?? `HTTP ${response.status}`}${body.hint ? ` \u2014 ${body.hint}` : ""}`
+        `Plan sync failed: ${normalizeApiError(response.status, body).error}${body.hint ? ` \u2014 ${body.hint}` : ""}`
       );
       return;
     }
@@ -4804,7 +4886,7 @@ async function syncOneTimeProducts(appDir, appName, token) {
     }
     spinner2?.stop("Product sync skipped");
     p7.log.warn(
-      `Product sync failed: ${body.error ?? `HTTP ${response.status}`}${body.details ? ` \u2014 ${JSON.stringify(body.details)}` : ""}`
+      `Product sync failed: ${normalizeApiError(response.status, body).error}${body.details ? ` \u2014 ${JSON.stringify(body.details)}` : ""}`
     );
   } catch (error) {
     spinner2?.stop("Product sync skipped");
@@ -5672,7 +5754,7 @@ function detachedHeadRefusal() {
 var CLOUDFLARE_DEPLOY_ERROR_HINT = "Deployment reached the DeepSpace deploy worker, but Cloudflare's deployment control-plane API failed. This is often caused by a Cloudflare Dashboard/API incident or Workers for Platforms entitlement outage. Already deployed apps should keep serving; wait for Cloudflare to recover and retry.";
 var DEPLOY_SERVICE_LIMIT_HINT = "The DeepSpace deploy service hit a resource limit processing this deploy (the deploy worker was terminated before it could answer). This is a DeepSpace-side failure, not a Cloudflare incident \u2014 your app was not changed. Retry; if it keeps happening, report the app id and asset count.";
 var REQUIRED_ASSET_TRANSPORT = "content-addressed-v1";
-var UPLOAD_CONCURRENCY = 4;
+var UPLOAD_CONCURRENCY = 16;
 async function deployBuiltBundle(options) {
   const {
     deployUrl,
@@ -5761,15 +5843,19 @@ async function deployBuiltBundle(options) {
     form.append("deployKey", repository.deployKey);
     return form;
   };
-  const postCommit = async () => postWithRetry(
-    `${deployUrl}/api/deploy/${appId}`,
-    () => ({
-      method: "POST",
-      headers: { Authorization: `Bearer ${token}` },
-      body: makeForm()
-    }),
-    { retryServerErrors: false }
-  );
+  let commitStarted = Date.now();
+  const postCommit = async () => {
+    commitStarted = Date.now();
+    return postWithRetry(
+      `${deployUrl}/api/deploy/${appId}`,
+      () => ({
+        method: "POST",
+        headers: { Authorization: `Bearer ${token}` },
+        body: makeForm()
+      }),
+      { retryServerErrors: false, attempts: 2, timeoutMs: 24e4 }
+    );
+  };
   let response;
   try {
     response = await postCommit();
@@ -5816,6 +5902,7 @@ async function deployBuiltBundle(options) {
       body.code
     );
   }
+  p10.log.info(`Platform commit: ${Math.round((Date.now() - commitStarted) / 1e3)}s`);
   if (body.onBehalfOfOwner) {
     p10.log.warn("This release is attributed to the app's owner, not to your account.");
   }
@@ -5934,8 +6021,12 @@ async function uploadDeployAssets(options) {
       spinner2.message(`Uploading assets \u2014 ${uploaded}/${total}...`);
     }
   };
+  const uploadStarted = Date.now();
   try {
     await Promise.all(Array.from({ length: Math.min(UPLOAD_CONCURRENCY, missing.length) }, worker));
+    p10.log.info(
+      `Uploaded ${total} file(s) in ${Math.round((Date.now() - uploadStarted) / 1e3)}s`
+    );
   } catch (error) {
     spinner2.stop("Deploy failed");
     if (error instanceof AssetUploadError) {
@@ -5981,13 +6072,14 @@ function errorMessage4(error) {
 }
 async function postWithRetry(url, makeInit, {
   attempts = 4,
-  retryServerErrors = true
+  retryServerErrors = true,
+  timeoutMs = 6e4
 } = {}) {
   let lastResponse;
   let lastError;
   for (let attempt = 1; attempt <= attempts; attempt++) {
     try {
-      const response = await fetch(url, makeInit());
+      const response = await fetch(url, { ...makeInit(), signal: AbortSignal.timeout(timeoutMs) });
       const transient = retryServerErrors && (response.status >= 500 || response.status === 408 || response.status === 429);
       if (!transient) return response;
       lastResponse = response;
@@ -6232,6 +6324,7 @@ var deploy_default = defineCommand3({
       spinner: spinner2
     });
     let serving = "unverifiable";
+    const edgeWaitStarted = Date.now();
     if (body.url) {
       spinner2.message("Waiting for the edge to serve this release...");
       serving = await waitForLiveRelease(body.url, body.releaseStamp, 9e4);
@@ -6261,7 +6354,9 @@ var deploy_default = defineCommand3({
         return;
       }
     }
-    spinner2.stop("Deployed!");
+    spinner2.stop(
+      `Deployed! (edge confirmed in ${Math.round((Date.now() - edgeWaitStarted) / 1e3)}s)`
+    );
     p12.log.success(`Live at: ${body.url}`);
     await syncCommerce(appDir, appId, token, output.nonInteractive);
     if (output.json) {
@@ -6522,7 +6617,10 @@ var undeploy_default = defineDeepspaceCommand({
           }
         );
       }
-      throw new Refusal(body.error ?? `Undeploy error (${res.status})`, "undeploy_failed");
+      throw new Refusal(
+        body.error ?? `Undeploy error (${res.status})`,
+        body.code ?? "undeploy_failed"
+      );
     }
     s?.stop("Removed");
     const hosts = body.releasedHosts ?? [];
@@ -8491,9 +8589,6 @@ async function uploadAppFile(baseUrl, token, appId, localPath, key, onProgress)
     throw new ApiError(oversizeMessage(size), 0, "too_large", path);
   }
   const declaredType = contentTypeFor(localPath);
-  if (DANGEROUS_MIME_TYPES.has(declaredType)) {
-    throw new ApiError(activeContentMessage(declaredType), 0, "active_content", path);
-  }
   if (size > UPLOAD_PART_BYTES) {
     return uploadInParts(baseUrl, token, appId, localPath, key, size, onProgress);
   }
@@ -8514,24 +8609,35 @@ function isRetryable(err) {
 async function uploadInParts(baseUrl, token, appId, localPath, key, size, onProgress) {
   const contentType = contentTypeFor(localPath);
   const initPath = filesPath(appId, `/multipart?key=${encodeKeyPath(key)}`);
-  const session = await readJson(
-    await request(baseUrl, token, initPath, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ name: basename3(localPath), mimeType: contentType, size })
-    }),
-    initPath
-  );
-  const query = `uploadKey=${encodeKeyPath(session.uploadKey)}&uploadId=${encodeURIComponent(session.uploadId)}`;
-  if (!Number.isSafeInteger(session.partSize) || session.partSize < 1) {
+  const requestId = randomUUID2();
+  const initBody = JSON.stringify({
+    requestId,
+    name: basename3(localPath),
+    mimeType: contentType,
+    size
+  });
+  const sendInit = () => request(baseUrl, token, initPath, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: initBody
+  }).then((response) => readJson(response, initPath));
+  let session;
+  try {
+    session = await sendInit();
+  } catch (error) {
+    if (!isRetryable(error)) throw error;
+    session = await sendInit();
+  }
+  const query = `uploadKey=${encodeKeyPath(session.uploadKey)}&uploadId=${encodeURIComponent(session.uploadId)}&reservationId=${encodeURIComponent(session.reservationId)}`;
+  if (!session.uploadId || !session.uploadKey || !session.reservationId || session.partSize !== UPLOAD_PART_BYTES) {
     throw new ApiError(
-      `The platform advertised an unusable part size (${session.partSize}).`,
+      `The platform returned an unusable part size or multipart session (${session.partSize}).`,
       0,
       "invalid_response",
       initPath
     );
   }
-  const plan = planUploadParts(size, session.partSize);
+  const plan = planUploadParts(size);
   const file = await openAsBlob(localPath, { type: contentType });
   const uploaded = [];
   try {
@@ -9211,7 +9317,9 @@ async function runList(args) {
         for (const ep of endpoints) {
           const pad = ep.endpoint.padEnd(widest);
           const cost = formatCurrency(ep.billing.baseCost, ep.billing.currency);
-          console.log(`  ${pad}  ${ep.billing.model.padEnd(12)} ${cost}`);
+          const oauth = ep.requiresOAuth ? " [oauth]" : "";
+          console.log(`  ${pad}  ${ep.billing.model.padEnd(12)} ${cost}${oauth}`);
+          if (ep.description) console.log(`    ${ep.description}`);
         }
         console.log();
       }
@@ -9240,9 +9348,15 @@ async function runInfo(args) {
   }
   if (!args.json) {
     console.log(`${integration}/${endpoint}`);
+    if (info2.description) console.log(`  ${info2.description}`);
     console.log(
       `  billing: ${formatCurrency(info2.billing.baseCost, info2.billing.currency)} ${billingUnit(info2.billing.model)}`
     );
+    if (info2.requiresOAuth) {
+      console.log(
+        "  Requires OAuth: without a connected account, a call succeeds with data { requiresOAuth: true, authUrl } \u2014 open the authUrl, then retry."
+      );
+    }
     console.log();
     console.log("Input schema:");
     console.log(
@@ -9251,6 +9365,11 @@ async function runInfo(args) {
     console.log();
     console.log("Example body:");
     console.log(info2.example ? JSON.stringify(info2.example, null, 2) : "  (no example available)");
+    if (info2.outputSchema) {
+      console.log();
+      console.log("Output schema:");
+      console.log(JSON.stringify(info2.outputSchema, null, 2));
+    }
   }
   return { data: info2 };
 }
@@ -9331,17 +9450,19 @@ async function runInvoke(args) {
     }
     return { data: payload };
   }
-  const errMsg = payload.error ?? `Request failed (${res.status})`;
-  const lines = [`${integration}/${endpoint} (${res.status}, ${elapsed}ms): ${errMsg}`];
-  if (Array.isArray(payload.issues)) {
-    for (const issue of payload.issues) {
+  const norm = normalizeApiError(res.status, payload);
+  const lines = [`${integration}/${endpoint} (${res.status}, ${elapsed}ms): ${norm.error}`];
+  if (norm.issues) {
+    for (const issue of norm.issues) {
       const path = issue.path?.length ? issue.path.join(".") : "(root)";
       lines.push(`  - ${path}: ${issue.message}`);
     }
   }
-  const code = typeof payload.code === "string" ? payload.code : "integration_call_failed";
+  const code = norm.code ?? "integration_call_failed";
   const rest = { ...payload };
   delete rest.error;
+  delete rest.message;
+  delete rest.code;
   throw new Refusal(lines.join("\n"), code, {
     ...res.status === 401 ? { action: cliAction("deepspace", "auth", "login") } : {},
     extra: rest
@@ -12587,7 +12708,7 @@ function conflictMarkerFiles(diffCheckOutput) {
 function pullAfterLandAction(primaryDir, intoBranch, landedOid) {
   if (currentBranch(primaryDir) !== intoBranch) return null;
   if (resolveCommit(primaryDir, "HEAD") === landedOid) return null;
-  return { cwd: primaryDir, argv: ["deepspace", "pull"] };
+  return executableAction({ cwd: primaryDir, argv: ["deepspace", "pull"] });
 }
 function landResumeArgv(args) {
   const argv = ["deepspace", "workspace", "land"];
@@ -12868,6 +12989,7 @@ var landWorkspaceCommand = defineDeepspaceCommand({
     }
     spinner2?.stop(`Landed ${id} into ${intoBranch} at ${landedOid.slice(0, 10)}.`);
     const primaryDir = primaryAppDir(appDir);
+    const action = pullAfterLandAction(primaryDir, intoBranch, landedOid);
     const cleanup = keepWorktree ? null : cleanupWorkspaceLocal(appDir, id, intoBranch, { expectedBranchOid: landedOid });
     const inOwnWorktree = !cleanup && inOwnLinkedWorktree(appDir, id);
     const retainedWorktree = cleanup?.worktreeRetained ?? (keepWorktree || inOwnWorktree ? appDir : null);
@@ -12901,7 +13023,6 @@ var landWorkspaceCommand = defineDeepspaceCommand({
         { actionRequired: true, action: action2, extra: data }
       );
     }
-    const action = pullAfterLandAction(primaryDir, intoBranch, landedOid);
     return { data, ...action ? { action } : {} };
   }
 });
@@ -13628,7 +13749,7 @@ import { join as join23, resolve as resolve20 } from "path";
 // package.json
 var package_default = {
   name: "deepspace",
-  version: "0.19.5",
+  version: "0.21.0",
   engines: {
     node: ">=22.15.0 <23 || >=24 <25 || >=26 <27"
   },
@@ -13661,6 +13782,10 @@ var package_default = {
       types: "./dist/testing.d.ts",
       import: "./dist/testing.js"
     },
+    "./testing/mcp": {
+      types: "./dist/testing-mcp.d.ts",
+      import: "./dist/testing-mcp.js"
+    },
     "./documentation": {
       types: "./dist/documentation.d.ts",
       import: "./dist/documentation.js"