deepline 0.1.182 → 0.1.184

package/dist/bundling-sources/shared_libs/plays/static-pipeline.ts

@@ -1022,8 +1022,13 @@ export function compileSheetContract(pipeline: PlayStaticPipeline): {
   contract: PlaySheetContract | null;
   errors: string[];
 } {
-  const errors = [...(pipeline.sheetContractErrors ?? [])];
-  const tableNamespace = pipeline.tableNamespace?.trim();
+  const errors = Array.isArray(pipeline.sheetContractErrors)
+    ? [...pipeline.sheetContractErrors]
+    : [];
+  const tableNamespace =
+    typeof pipeline.tableNamespace === 'string'
+      ? pipeline.tableNamespace.trim()
+      : '';
   if (!tableNamespace) {
     return {
       contract: null,
@@ -1032,6 +1037,34 @@ export function compileSheetContract(pipeline: PlayStaticPipeline): {
   }
 
   const columns: PlaySheetColumnContract[] = [];
+  const inputFields = Array.isArray(pipeline.inputFields)
+    ? pipeline.inputFields.filter((field): field is string => {
+        if (typeof field === 'string') return true;
+        errors.push('Sheet contract ignored a non-string input field.');
+        return false;
+      })
+    : [];
+  const rowKeyFields = Array.isArray(pipeline.rowKeyFields)
+    ? pipeline.rowKeyFields.filter((field): field is string => {
+        if (typeof field === 'string') return true;
+        errors.push('Sheet contract ignored a non-string row key field.');
+        return false;
+      })
+    : [];
+  const fields = Array.isArray(pipeline.fields)
+    ? pipeline.fields.filter((field): field is string => {
+        if (typeof field === 'string') return true;
+        errors.push('Sheet contract ignored a non-string output field.');
+        return false;
+      })
+    : [];
+  const substeps = Array.isArray(pipeline.substeps) ? pipeline.substeps : [];
+  if (!Array.isArray(pipeline.fields)) {
+    errors.push('Sheet contract could not read static output fields.');
+  }
+  if (!Array.isArray(pipeline.substeps)) {
+    errors.push('Sheet contract could not read static substeps.');
+  }
 
   const addColumn = (column: Omit<PlaySheetColumnContract, 'sqlName'>) => {
     if (!column.id.trim()) {
@@ -1052,8 +1085,7 @@ export function compileSheetContract(pipeline: PlayStaticPipeline): {
     });
   };
 
-  const inputFields = pipeline.inputFields?.length ? pipeline.inputFields : [];
-  const rowKeyFieldSet = new Set(pipeline.rowKeyFields ?? []);
+  const rowKeyFieldSet = new Set(rowKeyFields);
   for (const inputField of inputFields) {
     addColumn({
       id: inputField,
@@ -1063,7 +1095,7 @@ export function compileSheetContract(pipeline: PlayStaticPipeline): {
     });
   }
 
-  for (const field of pipeline.fields) {
+  for (const field of fields) {
     addColumn({ id: field, source: 'datasetColumn', field });
   }
 
@@ -1186,7 +1218,7 @@ export function compileSheetContract(pipeline: PlayStaticPipeline): {
     }
   };
 
-  for (const substep of pipeline.substeps) {
+  for (const substep of substeps) {
     processSubstep(substep);
   }
 

package/dist/bundling-sources/shared_libs/security/safe-outbound-fetch.ts

@@ -42,6 +42,12 @@ const TRANSPORT_OWNED_REQUEST_HEADERS = new Set([
   'x-forwarded-host',
   'x-forwarded-proto',
 ]);
+const CROSS_ORIGIN_REDIRECT_SAFE_HEADERS = new Set([
+  'accept',
+  'accept-language',
+  'content-language',
+  'content-type',
+]);
 
 function cloneHeaders(headers: RequestInit['headers']): Headers {
   return new Headers(headers);
@@ -57,6 +63,18 @@ function removeTransportOwnedHeaders(headers: Headers): void {
   }
 }
 
+function removeUnsafeCrossOriginRedirectHeaders(headers: Headers): void {
+  const namesToDelete: string[] = [];
+  for (const [name] of headers) {
+    if (!CROSS_ORIGIN_REDIRECT_SAFE_HEADERS.has(name.toLowerCase())) {
+      namesToDelete.push(name);
+    }
+  }
+  for (const name of namesToDelete) {
+    headers.delete(name);
+  }
+}
+
 function withContentLength(
   body: Buffer | string | undefined,
   headers: Headers,
@@ -222,14 +240,11 @@ function createRequest(
         response.on('error', reject);
         response.on('end', () => {
           resolve(
-            new Response(
-              noBodyResponse ? null : Buffer.concat(chunks),
-              {
-                status,
-                statusText: response.statusMessage,
-                headers: response.headers as HeadersInit,
-              },
-            ),
+            new Response(noBodyResponse ? null : Buffer.concat(chunks), {
+              status,
+              statusText: response.statusMessage,
+              headers: response.headers as HeadersInit,
+            }),
           );
         });
       },
@@ -248,7 +263,6 @@ function initForRedirect(
   from: URL,
   to: URL,
   status: number,
-  sensitiveHeaders: Iterable<string>,
 ): RequestInit {
   const headers = cloneHeaders(init.headers);
   let method = String(init.method ?? 'GET').toUpperCase();
@@ -265,12 +279,7 @@ function initForRedirect(
   }
 
   if (from.origin !== to.origin) {
-    deleteHeader(headers, 'authorization');
-    deleteHeader(headers, 'cookie');
-    deleteHeader(headers, 'proxy-authorization');
-    for (const header of sensitiveHeaders) {
-      deleteHeader(headers, header);
-    }
+    removeUnsafeCrossOriginRedirectHeaders(headers);
   }
 
   return {
@@ -290,7 +299,6 @@ export async function safeOutboundFetch(
   const redirectMode = init.redirect ?? 'follow';
   const maxRedirects = options.maxRedirects ?? 10;
   const maxResponseBytes = options.maxResponseBytes;
-  const sensitiveHeaders = options.sensitiveHeaders ?? [];
   const validateUrl = options.validateUrl;
   let currentUrl = assertPublicHttpUrl(input);
   let currentInit: RequestInit = { ...init, redirect: 'manual' };
@@ -348,7 +356,6 @@ export async function safeOutboundFetch(
       currentUrl,
       nextUrl,
       response.status,
-      sensitiveHeaders,
     );
     currentUrl = nextUrl;
   }

package/dist/cli/index.js

@@ -623,10 +623,10 @@ var SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: "0.1.182",
+  version: "0.1.184",
   apiContract: "2026-06-dataset-handle-results-hard-cutover",
   supportPolicy: {
-    latest: "0.1.182",
+    latest: "0.1.184",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -784,6 +784,10 @@ var WORKER_CALLBACK_URL_OVERRIDE_HEADER = "x-deepline-worker-callback-url";
 var RUNTIME_SCHEDULER_SCHEMA_OVERRIDE_HEADER = "x-deepline-runtime-scheduler-schema";
 var SYNTHETIC_RUN_HEADER = "x-deepline-synthetic-run";
 
+// ../shared_libs/play-runtime/test-runtime-seams.ts
+var PLAY_RUNTIME_TEST_FAULT_HEADER = "x-deepline-test-fault";
+var MAX_RUNTIME_TEST_POLICY_MS = 10 * 6e4;
+
 // src/http.ts
 var MAX_DIAGNOSTIC_HEADER_LENGTH = 120;
 var COWORK_NETWORK_HINT = "Claude Cowork appears to be running Deepline in a network-restricted sandbox. In Claude Desktop, open Settings > Capabilities, turn on Allow network egress, and set Domain allowlist to All domains for the Cowork session.";
@@ -898,12 +902,9 @@ var HttpClient = class {
       headers["x-deepline-play-artifact-r2-prefix"] = playArtifactR2Prefix;
     }
     const coordinatorUrl = typeof process !== "undefined" ? process.env?.DEEPLINE_COORDINATOR_URL : void 0;
+    const coordinatorInternalToken = typeof process !== "undefined" ? process.env?.DEEPLINE_INTERNAL_TOKEN : void 0;
     if (coordinatorUrl?.trim()) {
       headers[COORDINATOR_URL_OVERRIDE_HEADER] = coordinatorUrl.trim();
-      const coordinatorInternalToken = typeof process !== "undefined" ? process.env?.DEEPLINE_INTERNAL_TOKEN : void 0;
-      if (coordinatorInternalToken?.trim()) {
-        headers[COORDINATOR_INTERNAL_TOKEN_HEADER] = coordinatorInternalToken.trim();
-      }
     }
     const workerCallbackUrl = typeof process !== "undefined" ? process.env?.DEEPLINE_WORKER_CALLBACK_URL : void 0;
     if (workerCallbackUrl?.trim()) {
@@ -917,6 +918,13 @@ var HttpClient = class {
     if (syntheticRun && syntheticRun.trim() && syntheticRun.trim() !== "0") {
       headers[SYNTHETIC_RUN_HEADER] = "1";
     }
+    const runtimeTestFault = typeof process !== "undefined" ? process.env?.DEEPLINE_TEST_RUNTIME_FAULT : void 0;
+    if (runtimeTestFault?.trim()) {
+      headers[PLAY_RUNTIME_TEST_FAULT_HEADER] = runtimeTestFault.trim();
+    }
+    if (coordinatorInternalToken?.trim() && (coordinatorUrl?.trim() || workerCallbackUrl?.trim() || runtimeTestFault?.trim())) {
+      headers[COORDINATOR_INTERNAL_TOKEN_HEADER] = coordinatorInternalToken.trim();
+    }
     return headers;
   }
   /**
@@ -1330,6 +1338,20 @@ function resolveTimingWindow(input2) {
   };
 }
 
+// ../shared_libs/play-runtime/run-terminal-source.ts
+var PLAY_RUN_LEDGER_EVENT_SOURCES = [
+  "worker",
+  "temporal",
+  "convex",
+  "coordinator",
+  "system"
+];
+function normalizePlayRunLedgerTerminalSource(value) {
+  return PLAY_RUN_LEDGER_EVENT_SOURCES.includes(
+    value
+  ) ? value : null;
+}
+
 // ../shared_libs/play-runtime/run-ledger.ts
 var LOG_TAIL_LIMIT = 100;
 function isRecord(value) {
@@ -1466,7 +1488,8 @@ function normalizePlayRunLedgerSnapshot(value, fallback) {
     ),
     resultTableNamespace: optionalNullableString(value.resultTableNamespace),
     resultSummary: value.resultSummary,
-    result: value.result
+    result: value.result,
+    terminalSource: normalizePlayRunLedgerTerminalSource(value.terminalSource)
   };
 }
 function normalizeStepStatus(value) {
@@ -2191,6 +2214,33 @@ function resolvePlayRunIntegrationMode(request) {
     request.integrationMode ?? process.env.DEEPLINE_EVAL_INTEGRATION_MODE
   );
 }
+function normalizeTestPolicyOverrides(value, source) {
+  if (value && typeof value === "object" && !Array.isArray(value)) {
+    return value;
+  }
+  throw new DeeplineError(
+    `${source} must be a JSON object.`,
+    void 0,
+    "INVALID_TEST_POLICY_OVERRIDES"
+  );
+}
+function parseEnvTestPolicyOverrides() {
+  const raw = typeof process !== "undefined" ? process.env?.DEEPLINE_TEST_POLICY_OVERRIDES : void 0;
+  const trimmed = raw?.trim();
+  if (!trimmed) return void 0;
+  let parsed;
+  try {
+    parsed = JSON.parse(trimmed);
+  } catch (error) {
+    const detail = error instanceof Error ? ` ${error.message}` : "";
+    throw new DeeplineError(
+      `DEEPLINE_TEST_POLICY_OVERRIDES must be valid JSON.${detail}`,
+      void 0,
+      "INVALID_TEST_POLICY_OVERRIDES"
+    );
+  }
+  return normalizeTestPolicyOverrides(parsed, "DEEPLINE_TEST_POLICY_OVERRIDES");
+}
 function sleep2(ms) {
   return new Promise((resolve14) => setTimeout(resolve14, ms));
 }
@@ -2833,6 +2883,7 @@ var DeeplineClient = class {
    */
   async startPlayRun(request) {
     const integrationMode = resolvePlayRunIntegrationMode(request);
+    const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
     const response = await this.http.post(
       "/api/v2/plays/run",
@@ -2860,7 +2911,8 @@ var DeeplineClient = class {
         // defaults to workers_edge; tests and runtime probes that want a
         // different profile pass `request.profile` explicitly.
         ...request.profile ? { profile: request.profile } : {},
-        ...integrationMode ? { integrationMode } : {}
+        ...integrationMode ? { integrationMode } : {},
+        ...testPolicyOverrides ? { testPolicyOverrides } : {}
       }
     );
     return normalizePlayRunStart(response);
@@ -2878,6 +2930,7 @@ var DeeplineClient = class {
    */
   async *startPlayRunStream(request, options) {
     const integrationMode = resolvePlayRunIntegrationMode(request);
+    const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
     const body = {
       ...request.name ? { name: request.name } : {},
@@ -2900,7 +2953,8 @@ var DeeplineClient = class {
       ...forceToolRefresh ? { forceToolRefresh: true } : {},
       ...typeof request.waitForCompletionMs === "number" ? { waitForCompletionMs: request.waitForCompletionMs } : {},
       ...request.profile ? { profile: request.profile } : {},
-      ...integrationMode ? { integrationMode } : {}
+      ...integrationMode ? { integrationMode } : {},
+      ...testPolicyOverrides ? { testPolicyOverrides } : {}
     };
     for await (const event of this.http.streamSse(
       "/api/v2/plays/run?stream=true",
@@ -9892,9 +9946,9 @@ var PLAY_RUNTIME_PROVIDERS = {
     id: PLAY_RUNTIME_PROVIDER_IDS.hatchet,
     scheduler: PLAY_SCHEDULER_BACKENDS.hatchet,
     runner: PLAY_RUNTIME_BACKENDS.daytona,
-    dedup: PLAY_DEDUP_BACKENDS.durableObject,
+    dedup: PLAY_DEDUP_BACKENDS.inMemory,
     artifactKind: PLAY_ARTIFACT_KINDS.cjsNode20,
-    label: "Hatchet scheduler + one-shot Daytona runner + DO dedup"
+    label: "Hatchet scheduler + one-shot Daytona runner + receipt-backed in-process dedup"
   },
   local: {
     id: PLAY_RUNTIME_PROVIDER_IDS.local,
@@ -13719,7 +13773,7 @@ async function handleFileBackedRun(options) {
     ...Object.keys(runtimeInput).length > 0 ? { input: runtimeInput } : {},
     ...stagedFileInputs.inputFile ? { inputFile: stagedFileInputs.inputFile } : {},
     ...stagedFileInputs.packagedFiles.length ? { packagedFiles: stagedFileInputs.packagedFiles } : {},
-    ...options.force ? { force: true, forceToolRefresh: true } : {},
+    ...options.force ? { force: true } : {},
     ...options.profile ? { profile: options.profile } : {},
     ...integrationMode ? { integrationMode } : {}
   };
@@ -13878,7 +13932,7 @@ async function handleNamedRun(options) {
     ...Object.keys(runtimeInput).length > 0 ? { input: runtimeInput } : {},
     ...stagedFileInputs.inputFile ? { inputFile: stagedFileInputs.inputFile } : {},
     ...stagedFileInputs.packagedFiles.length ? { packagedFiles: stagedFileInputs.packagedFiles } : {},
-    ...options.force ? { force: true, forceToolRefresh: true } : {},
+    ...options.force ? { force: true } : {},
     ...options.profile ? { profile: options.profile } : {},
     ...integrationMode ? { integrationMode } : {}
   };
@@ -15065,7 +15119,7 @@ Notes:
   The play page opens in your browser as soon as the run starts; use --no-open
   to only print the URL.
   Concurrent runs for the same play are allowed.
-  --force bypasses durable dataset/tool cache reuse for this run.
+  --force starts a fresh run graph without refreshing completed provider calls.
   It does not cancel active sibling runs.
   This command starts cloud work and may spend Deepline credits through tool calls.
 
@@ -15117,7 +15171,7 @@ Examples:
   ).option("--watch", "Compatibility alias; run waits by default").option("--wait", "Compatibility alias; run waits by default").option("--no-wait", "Start the run and return immediately").option(
     "--logs",
     "When output is non-interactive, stream play logs to stderr while waiting"
-  ).option("--tail-timeout-ms <ms>", "Timeout while watching the run stream").option("--force", "Bypass durable dataset/tool cache reuse").option("--no-open", "Print the play page URL without opening a browser").option("--json", "Emit JSON output").option("--full", "Debug only: with --json, emit the raw status payload").addHelpText(
+  ).option("--tail-timeout-ms <ms>", "Timeout while watching the run stream").option("--force", "Start a fresh run graph").option("--no-open", "Print the play page URL without opening a browser").option("--json", "Emit JSON output").option("--full", "Debug only: with --json, emit the raw status payload").addHelpText(
     "afterAll",
     `
 Pass-through input flags:
@@ -22467,7 +22521,7 @@ async function readHiddenLine(prompt, streams = {}) {
       if (typeof inputStream.setRawMode === "function") {
         inputStream.setRawMode(previousRawMode);
       }
-      if (wasPaused) {
+      if (wasPaused || inputStream === import_node_process.stdin) {
         inputStream.pause();
       }
     };
@@ -25600,10 +25654,15 @@ async function syncSdkSkillsIfNeeded(baseUrl, options = {}) {
 }
 
 // src/cli/commands/update.ts
-var NPM_SDK_INSTALL_COMMON_FLAGS = ["--no-audit", "--no-fund"];
+var NPM_SDK_INSTALL_COMMON_FLAGS = [
+  "--no-audit",
+  "--no-fund",
+  "--include=optional"
+];
 var NPM_SDK_GLOBAL_INSTALL_FLAGS = [
   "--no-audit",
   "--no-fund",
+  "--include=optional",
   "--allow-scripts=esbuild"
 ];
 var NPM_SDK_SIDECAR_PACKAGE_JSON = `${JSON.stringify(

package/dist/cli/index.mjs

@@ -608,10 +608,10 @@ var SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: "0.1.182",
+  version: "0.1.184",
   apiContract: "2026-06-dataset-handle-results-hard-cutover",
   supportPolicy: {
-    latest: "0.1.182",
+    latest: "0.1.184",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -769,6 +769,10 @@ var WORKER_CALLBACK_URL_OVERRIDE_HEADER = "x-deepline-worker-callback-url";
 var RUNTIME_SCHEDULER_SCHEMA_OVERRIDE_HEADER = "x-deepline-runtime-scheduler-schema";
 var SYNTHETIC_RUN_HEADER = "x-deepline-synthetic-run";
 
+// ../shared_libs/play-runtime/test-runtime-seams.ts
+var PLAY_RUNTIME_TEST_FAULT_HEADER = "x-deepline-test-fault";
+var MAX_RUNTIME_TEST_POLICY_MS = 10 * 6e4;
+
 // src/http.ts
 var MAX_DIAGNOSTIC_HEADER_LENGTH = 120;
 var COWORK_NETWORK_HINT = "Claude Cowork appears to be running Deepline in a network-restricted sandbox. In Claude Desktop, open Settings > Capabilities, turn on Allow network egress, and set Domain allowlist to All domains for the Cowork session.";
@@ -883,12 +887,9 @@ var HttpClient = class {
       headers["x-deepline-play-artifact-r2-prefix"] = playArtifactR2Prefix;
     }
     const coordinatorUrl = typeof process !== "undefined" ? process.env?.DEEPLINE_COORDINATOR_URL : void 0;
+    const coordinatorInternalToken = typeof process !== "undefined" ? process.env?.DEEPLINE_INTERNAL_TOKEN : void 0;
     if (coordinatorUrl?.trim()) {
       headers[COORDINATOR_URL_OVERRIDE_HEADER] = coordinatorUrl.trim();
-      const coordinatorInternalToken = typeof process !== "undefined" ? process.env?.DEEPLINE_INTERNAL_TOKEN : void 0;
-      if (coordinatorInternalToken?.trim()) {
-        headers[COORDINATOR_INTERNAL_TOKEN_HEADER] = coordinatorInternalToken.trim();
-      }
     }
     const workerCallbackUrl = typeof process !== "undefined" ? process.env?.DEEPLINE_WORKER_CALLBACK_URL : void 0;
     if (workerCallbackUrl?.trim()) {
@@ -902,6 +903,13 @@ var HttpClient = class {
     if (syntheticRun && syntheticRun.trim() && syntheticRun.trim() !== "0") {
       headers[SYNTHETIC_RUN_HEADER] = "1";
     }
+    const runtimeTestFault = typeof process !== "undefined" ? process.env?.DEEPLINE_TEST_RUNTIME_FAULT : void 0;
+    if (runtimeTestFault?.trim()) {
+      headers[PLAY_RUNTIME_TEST_FAULT_HEADER] = runtimeTestFault.trim();
+    }
+    if (coordinatorInternalToken?.trim() && (coordinatorUrl?.trim() || workerCallbackUrl?.trim() || runtimeTestFault?.trim())) {
+      headers[COORDINATOR_INTERNAL_TOKEN_HEADER] = coordinatorInternalToken.trim();
+    }
     return headers;
   }
   /**
@@ -1315,6 +1323,20 @@ function resolveTimingWindow(input2) {
   };
 }
 
+// ../shared_libs/play-runtime/run-terminal-source.ts
+var PLAY_RUN_LEDGER_EVENT_SOURCES = [
+  "worker",
+  "temporal",
+  "convex",
+  "coordinator",
+  "system"
+];
+function normalizePlayRunLedgerTerminalSource(value) {
+  return PLAY_RUN_LEDGER_EVENT_SOURCES.includes(
+    value
+  ) ? value : null;
+}
+
 // ../shared_libs/play-runtime/run-ledger.ts
 var LOG_TAIL_LIMIT = 100;
 function isRecord(value) {
@@ -1451,7 +1473,8 @@ function normalizePlayRunLedgerSnapshot(value, fallback) {
     ),
     resultTableNamespace: optionalNullableString(value.resultTableNamespace),
     resultSummary: value.resultSummary,
-    result: value.result
+    result: value.result,
+    terminalSource: normalizePlayRunLedgerTerminalSource(value.terminalSource)
   };
 }
 function normalizeStepStatus(value) {
@@ -2176,6 +2199,33 @@ function resolvePlayRunIntegrationMode(request) {
     request.integrationMode ?? process.env.DEEPLINE_EVAL_INTEGRATION_MODE
   );
 }
+function normalizeTestPolicyOverrides(value, source) {
+  if (value && typeof value === "object" && !Array.isArray(value)) {
+    return value;
+  }
+  throw new DeeplineError(
+    `${source} must be a JSON object.`,
+    void 0,
+    "INVALID_TEST_POLICY_OVERRIDES"
+  );
+}
+function parseEnvTestPolicyOverrides() {
+  const raw = typeof process !== "undefined" ? process.env?.DEEPLINE_TEST_POLICY_OVERRIDES : void 0;
+  const trimmed = raw?.trim();
+  if (!trimmed) return void 0;
+  let parsed;
+  try {
+    parsed = JSON.parse(trimmed);
+  } catch (error) {
+    const detail = error instanceof Error ? ` ${error.message}` : "";
+    throw new DeeplineError(
+      `DEEPLINE_TEST_POLICY_OVERRIDES must be valid JSON.${detail}`,
+      void 0,
+      "INVALID_TEST_POLICY_OVERRIDES"
+    );
+  }
+  return normalizeTestPolicyOverrides(parsed, "DEEPLINE_TEST_POLICY_OVERRIDES");
+}
 function sleep2(ms) {
   return new Promise((resolve14) => setTimeout(resolve14, ms));
 }
@@ -2818,6 +2868,7 @@ var DeeplineClient = class {
    */
   async startPlayRun(request) {
     const integrationMode = resolvePlayRunIntegrationMode(request);
+    const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
     const response = await this.http.post(
       "/api/v2/plays/run",
@@ -2845,7 +2896,8 @@ var DeeplineClient = class {
         // defaults to workers_edge; tests and runtime probes that want a
         // different profile pass `request.profile` explicitly.
         ...request.profile ? { profile: request.profile } : {},
-        ...integrationMode ? { integrationMode } : {}
+        ...integrationMode ? { integrationMode } : {},
+        ...testPolicyOverrides ? { testPolicyOverrides } : {}
       }
     );
     return normalizePlayRunStart(response);
@@ -2863,6 +2915,7 @@ var DeeplineClient = class {
    */
   async *startPlayRunStream(request, options) {
     const integrationMode = resolvePlayRunIntegrationMode(request);
+    const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
     const body = {
       ...request.name ? { name: request.name } : {},
@@ -2885,7 +2938,8 @@ var DeeplineClient = class {
       ...forceToolRefresh ? { forceToolRefresh: true } : {},
       ...typeof request.waitForCompletionMs === "number" ? { waitForCompletionMs: request.waitForCompletionMs } : {},
       ...request.profile ? { profile: request.profile } : {},
-      ...integrationMode ? { integrationMode } : {}
+      ...integrationMode ? { integrationMode } : {},
+      ...testPolicyOverrides ? { testPolicyOverrides } : {}
     };
     for await (const event of this.http.streamSse(
       "/api/v2/plays/run?stream=true",
@@ -9919,9 +9973,9 @@ var PLAY_RUNTIME_PROVIDERS = {
     id: PLAY_RUNTIME_PROVIDER_IDS.hatchet,
     scheduler: PLAY_SCHEDULER_BACKENDS.hatchet,
     runner: PLAY_RUNTIME_BACKENDS.daytona,
-    dedup: PLAY_DEDUP_BACKENDS.durableObject,
+    dedup: PLAY_DEDUP_BACKENDS.inMemory,
     artifactKind: PLAY_ARTIFACT_KINDS.cjsNode20,
-    label: "Hatchet scheduler + one-shot Daytona runner + DO dedup"
+    label: "Hatchet scheduler + one-shot Daytona runner + receipt-backed in-process dedup"
   },
   local: {
     id: PLAY_RUNTIME_PROVIDER_IDS.local,
@@ -13746,7 +13800,7 @@ async function handleFileBackedRun(options) {
     ...Object.keys(runtimeInput).length > 0 ? { input: runtimeInput } : {},
     ...stagedFileInputs.inputFile ? { inputFile: stagedFileInputs.inputFile } : {},
     ...stagedFileInputs.packagedFiles.length ? { packagedFiles: stagedFileInputs.packagedFiles } : {},
-    ...options.force ? { force: true, forceToolRefresh: true } : {},
+    ...options.force ? { force: true } : {},
     ...options.profile ? { profile: options.profile } : {},
     ...integrationMode ? { integrationMode } : {}
   };
@@ -13905,7 +13959,7 @@ async function handleNamedRun(options) {
     ...Object.keys(runtimeInput).length > 0 ? { input: runtimeInput } : {},
     ...stagedFileInputs.inputFile ? { inputFile: stagedFileInputs.inputFile } : {},
     ...stagedFileInputs.packagedFiles.length ? { packagedFiles: stagedFileInputs.packagedFiles } : {},
-    ...options.force ? { force: true, forceToolRefresh: true } : {},
+    ...options.force ? { force: true } : {},
     ...options.profile ? { profile: options.profile } : {},
     ...integrationMode ? { integrationMode } : {}
   };
@@ -15092,7 +15146,7 @@ Notes:
   The play page opens in your browser as soon as the run starts; use --no-open
   to only print the URL.
   Concurrent runs for the same play are allowed.
-  --force bypasses durable dataset/tool cache reuse for this run.
+  --force starts a fresh run graph without refreshing completed provider calls.
   It does not cancel active sibling runs.
   This command starts cloud work and may spend Deepline credits through tool calls.
 
@@ -15144,7 +15198,7 @@ Examples:
   ).option("--watch", "Compatibility alias; run waits by default").option("--wait", "Compatibility alias; run waits by default").option("--no-wait", "Start the run and return immediately").option(
     "--logs",
     "When output is non-interactive, stream play logs to stderr while waiting"
-  ).option("--tail-timeout-ms <ms>", "Timeout while watching the run stream").option("--force", "Bypass durable dataset/tool cache reuse").option("--no-open", "Print the play page URL without opening a browser").option("--json", "Emit JSON output").option("--full", "Debug only: with --json, emit the raw status payload").addHelpText(
+  ).option("--tail-timeout-ms <ms>", "Timeout while watching the run stream").option("--force", "Start a fresh run graph").option("--no-open", "Print the play page URL without opening a browser").option("--json", "Emit JSON output").option("--full", "Debug only: with --json, emit the raw status payload").addHelpText(
     "afterAll",
     `
 Pass-through input flags:
@@ -22501,7 +22555,7 @@ async function readHiddenLine(prompt, streams = {}) {
       if (typeof inputStream.setRawMode === "function") {
         inputStream.setRawMode(previousRawMode);
       }
-      if (wasPaused) {
+      if (wasPaused || inputStream === input) {
         inputStream.pause();
       }
     };
@@ -25655,10 +25709,15 @@ async function syncSdkSkillsIfNeeded(baseUrl, options = {}) {
 }
 
 // src/cli/commands/update.ts
-var NPM_SDK_INSTALL_COMMON_FLAGS = ["--no-audit", "--no-fund"];
+var NPM_SDK_INSTALL_COMMON_FLAGS = [
+  "--no-audit",
+  "--no-fund",
+  "--include=optional"
+];
 var NPM_SDK_GLOBAL_INSTALL_FLAGS = [
   "--no-audit",
   "--no-fund",
+  "--include=optional",
   "--allow-scripts=esbuild"
 ];
 var NPM_SDK_SIDECAR_PACKAGE_JSON = `${JSON.stringify(

package/dist/index.d.mts

@@ -952,6 +952,8 @@ interface StartPlayRunRequest {
     profile?: string;
     /** Optional per-run provider execution mode for eval/smoke runs. */
     integrationMode?: 'live' | 'eval_stub' | 'fixture';
+    /** Internal/dev-only runtime policy overrides for black-box durability tests. */
+    testPolicyOverrides?: Record<string, unknown>;
 }
 /**
  * Request body for making a play revision live.

package/dist/index.d.ts

@@ -952,6 +952,8 @@ interface StartPlayRunRequest {
     profile?: string;
     /** Optional per-run provider execution mode for eval/smoke runs. */
     integrationMode?: 'live' | 'eval_stub' | 'fixture';
+    /** Internal/dev-only runtime policy overrides for black-box durability tests. */
+    testPolicyOverrides?: Record<string, unknown>;
 }
 /**
  * Request body for making a play revision live.