deepline 0.1.203 → 0.1.205

package/dist/bundling-sources/sdk/src/release.ts

@@ -106,10 +106,10 @@ export const SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: '0.1.203',
+  version: '0.1.205',
   apiContract: '2026-06-dataset-handle-results-hard-cutover',
   supportPolicy: {
-    latest: '0.1.203',
+    latest: '0.1.205',
     minimumSupported: '0.1.53',
     deprecatedBelow: '0.1.53',
     commandMinimumSupported: [

package/dist/bundling-sources/shared_libs/play-runtime/app-runtime-api.ts

@@ -325,6 +325,9 @@ export type WorkerRuntimeApiContext = {
 };
 
 const APP_RUNTIME_API_RETRY_DELAYS_MS = [100, 250, 500, 1_000] as const;
+const APP_RUNTIME_API_RECEIPT_RETRY_DELAYS_MS = [
+  250, 500, 1_000, 2_000, 4_000, 8_000, 12_000,
+] as const;
 const APP_RUNTIME_API_APPEND_RETRY_DELAYS_MS = [
   100, 250, 500, 1_000, 2_000, 4_000, 8_000,
 ] as const;
@@ -485,9 +488,33 @@ function isRetryableAppRuntimeAction(
   );
 }
 
+function isRuntimeStepReceiptAction(
+  action: RuntimeApiRequest['action'],
+): boolean {
+  return (
+    action === 'get_runtime_step_receipt' ||
+    action === 'get_runtime_step_receipts' ||
+    action === 'heartbeat_runtime_step_receipts' ||
+    action === 'claim_runtime_step_receipt' ||
+    action === 'claim_runtime_step_receipts' ||
+    action === 'mark_runtime_step_receipt_running' ||
+    action === 'mark_runtime_step_receipts_running' ||
+    action === 'mark_runtime_step_receipts_queued' ||
+    action === 'complete_runtime_step_receipt' ||
+    action === 'complete_runtime_step_receipts' ||
+    action === 'fail_runtime_step_receipt' ||
+    action === 'fail_runtime_step_receipts' ||
+    action === 'release_runtime_step_receipt' ||
+    action === 'skip_runtime_step_receipt'
+  );
+}
+
 function appRuntimeRetryDelaysForAction(
   action: RuntimeApiRequest['action'],
 ): readonly number[] {
+  if (isRuntimeStepReceiptAction(action)) {
+    return APP_RUNTIME_API_RECEIPT_RETRY_DELAYS_MS;
+  }
   return action === 'append_run_events'
     ? APP_RUNTIME_API_APPEND_RETRY_DELAYS_MS
     : APP_RUNTIME_API_RETRY_DELAYS_MS;
@@ -586,7 +613,11 @@ async function postAppRuntimeApi<TResponse>(
         await sleep(appRuntimeRetryDelayMs(body.action, attempt));
         continue;
       }
-      throw error;
+      const message = error instanceof Error ? error.message : String(error);
+      throw new Error(
+        `App runtime API ${body.action} failed before receiving a response from ${resolveAppRuntimeApiUrl(context)} after ${attempt}/${maxAttempts} attempts: ${message}`,
+        { cause: error },
+      );
     }
     if (response.ok) {
       return (await response.json()) as TResponse;

package/dist/bundling-sources/shared_libs/play-runtime/runner-backends/backends/daytona-lifecycle.ts

@@ -82,7 +82,8 @@ export function validateDaytonaExecutionContext(
  * CUSTOMER code in PRODUCTION never runs with unrestricted egress — the
  * production worker must provision `DEEPLINE_DAYTONA_NETWORK_ALLOW_LIST`
  * (comma-separated CIDRs, per the Daytona `networkAllowList` contract) and
- * every prod sandbox is created `networkBlockAll: true` + that allow-list.
+ * every prod sandbox is created with that allow-list, which Daytona treats as
+ * "block all egress except these CIDRs".
  *
  * "Production" here is the RUN'S topology, not the build flag: a run whose
  * scheduler schema is isolated (per-PR preview CI, per-worktree dev — see
@@ -97,12 +98,43 @@ export function validateDaytonaExecutionContext(
  * An explicitly provisioned allow-list is always honored (preview included),
  * so a future preview fleet with enumerable egress can opt in to full parity.
  */
+/**
+ * Keep only IPv4 CIDR entries from a comma-separated allow-list. Daytona's
+ * `networkAllowList` is IPv4-only; an IPv6 entry fails every sandbox create.
+ * Returns null when nothing valid remains so the production guard below still
+ * fires loudly rather than sending an empty list.
+ */
+export function filterIpv4CidrAllowList(raw: string | null): string | null {
+  if (!raw) return raw;
+  const entries = raw
+    .split(',')
+    .map((entry) => entry.trim())
+    .filter(Boolean);
+  const ipv4 = entries.filter((entry) => !entry.includes(':'));
+  const dropped = entries.filter((entry) => entry.includes(':'));
+  if (dropped.length > 0) {
+    console.warn(
+      `[daytona] dropping ${dropped.length} non-IPv4 CIDR(s) from ` +
+        `${DAYTONA_NETWORK_ALLOW_LIST_ENV} (Daytona networkAllowList is ` +
+        `IPv4-only): ${dropped.join(', ')}`,
+    );
+  }
+  return ipv4.length > 0 ? ipv4.join(',') : null;
+}
+
 export function resolveDaytonaSandboxNetworkPolicy(input: {
   runtimeSchedulerSchema: string | null | undefined;
   env?: NodeJS.ProcessEnv;
 }): { networkAllowList: string | null } {
   const env = input.env ?? process.env;
-  const networkAllowList = env[DAYTONA_NETWORK_ALLOW_LIST_ENV]?.trim() || null;
+  // Daytona's `networkAllowList` accepts IPv4 CIDRs only — it rejects sandbox
+  // create outright if any entry is IPv6 ("Invalid IP address ... Must be a
+  // valid IPv4 address"). An operator-provisioned list can pick up AAAA-resolved
+  // hosts, so drop IPv6 (colon-bearing) entries and keep the IPv4 CIDRs that
+  // actually constrain egress. Warn loudly so a dropped entry is visible.
+  const networkAllowList = filterIpv4CidrAllowList(
+    env[DAYTONA_NETWORK_ALLOW_LIST_ENV]?.trim() || null,
+  );
   if (
     !networkAllowList &&
     env.NODE_ENV === 'production' &&
@@ -153,12 +185,13 @@ async function createOneShotDaytonaSandbox(input: {
       ephemeral: true,
       autoStopInterval: DAYTONA_AUTO_STOP_INTERVAL_MINUTES,
       autoArchiveInterval: DAYTONA_AUTO_ARCHIVE_INTERVAL_MINUTES,
-      ...(networkAllowList
-        ? {
-            networkBlockAll: true,
-            networkAllowList,
-          }
-        : {}),
+      // A non-empty `networkAllowList` IS the "block all egress except these
+      // CIDRs" control; Daytona rejects create when `networkBlockAll: true` is
+      // combined with a non-empty allow-list ("networkBlockAll: true cannot be
+      // combined with a non-empty networkAllowList or domainAllowList"). Pass
+      // the allow-list alone so the egress restriction holds without the
+      // contradictory flag.
+      ...(networkAllowList ? { networkAllowList } : {}),
     },
     { timeout: DAYTONA_CREATE_TIMEOUT_SECONDS },
   );

package/dist/bundling-sources/shared_libs/play-runtime/runner-backends/backends/daytona.ts

@@ -42,7 +42,7 @@ const DAYTONA_OUTPUT_TAIL_CHARS = 2_000;
 const DAYTONA_COMMAND_RECOVERY_TIMEOUT_MS = 60_000;
 const DAYTONA_COMMAND_RECOVERY_POLL_MS = 2_000;
 const DAYTONA_PROGRESS_SIDECAR_POLL_MS = 1_000;
-const DAYTONA_RUNTIME_DB_CONNECT_MAX_ATTEMPTS = 2;
+const DAYTONA_RUNTIME_INITIALIZATION_MAX_ATTEMPTS = 2;
 const DAYTONA_INFRASTRUCTURE_MAX_ATTEMPTS = 2;
 const DAYTONA_UPLOAD_MAX_ATTEMPTS = 2;
 const DAYTONA_UPLOAD_ATTEMPT_DEADLINE_MS = 90_000;
@@ -113,6 +113,8 @@ export async function withDaytonaOperationDeadline<T>(input: {
 }
 const RUNTIME_POSTGRES_CONNECT_RETRY_PATTERN =
   /\bRuntime Postgres\b.*\b(connection timed out|connect timeout|ETIMEDOUT|ECONNRESET|ECONNREFUSED|Connection terminated|Connection ended unexpectedly)\b/i;
+const RUNTIME_API_TRANSPORT_RETRY_PATTERN =
+  /\bRuntime API request to .+ failed before receiving a response:\s*(?:fetch failed|connection (?:terminated|timed out|closed|reset)|ECONNRESET|ETIMEDOUT|ECONNREFUSED)\b/i;
 const DAYTONA_INFRASTRUCTURE_RETRY_PATTERN =
   /\b(?:Request failed with status code (?:408|429|500|502|503|504)|ECONNRESET|ECONNREFUSED|ETIMEDOUT|UND_ERR_CONNECT_TIMEOUT|fetch failed|socket hang up|Daytona sandbox create failed across|Daytona sandbox create did not complete)\b/i;
 
@@ -494,13 +496,22 @@ function createDaytonaFailedResult(input: {
   };
 }
 
-function isRetryableRuntimePostgresConnectFailure(
+function retryableRuntimeInitializationFailureReason(
   result: PlayRunnerResult,
-): result is Extract<PlayRunnerResult, { status: 'failed' }> {
-  return (
-    result.status === 'failed' &&
-    RUNTIME_POSTGRES_CONNECT_RETRY_PATTERN.test(result.error)
-  );
+): 'runtime_postgres_connect' | 'runtime_api_transport' | null {
+  if (result.status !== 'failed') return null;
+  if (RUNTIME_POSTGRES_CONNECT_RETRY_PATTERN.test(result.error)) {
+    return 'runtime_postgres_connect';
+  }
+  const rowsProcessed = Number(result.stats?.rowsProcessed ?? 0);
+  if (
+    rowsProcessed === 0 &&
+    result.steps.length === 0 &&
+    RUNTIME_API_TRANSPORT_RETRY_PATTERN.test(result.error)
+  ) {
+    return 'runtime_api_transport';
+  }
+  return null;
 }
 
 function isRetryableDaytonaInfrastructureFailure(error: unknown): boolean {
@@ -640,7 +651,7 @@ export const daytonaPlayRunnerBackend: PlayRunnerBackend = {
         let executionAttempt = 1;
         executionAttempt <=
         Math.max(
-          DAYTONA_RUNTIME_DB_CONNECT_MAX_ATTEMPTS,
+          DAYTONA_RUNTIME_INITIALIZATION_MAX_ATTEMPTS,
           DAYTONA_INFRASTRUCTURE_MAX_ATTEMPTS,
         );
         executionAttempt += 1
@@ -868,14 +879,17 @@ export const daytonaPlayRunnerBackend: PlayRunnerBackend = {
 
           const result = findPlayRunnerResult(events);
           if (result) {
+            const initializationRetryReason =
+              retryableRuntimeInitializationFailureReason(result);
             if (
-              executionAttempt < DAYTONA_RUNTIME_DB_CONNECT_MAX_ATTEMPTS &&
-              isRetryableRuntimePostgresConnectFailure(result)
+              result.status === 'failed' &&
+              executionAttempt < DAYTONA_RUNTIME_INITIALIZATION_MAX_ATTEMPTS &&
+              initializationRetryReason
             ) {
               emitDaytonaStage(callbacks, config.context, 'execute:retry', {
                 sandboxId: sandbox.id,
                 attempt: executionAttempt + 1,
-                reason: 'runtime_postgres_connect',
+                reason: initializationRetryReason,
                 error: result.error,
                 elapsedMs: Date.now() - startedAt,
               });

package/dist/bundling-sources/shared_libs/play-runtime/runtime-api.ts

@@ -2884,10 +2884,10 @@ async function prepareRuntimeSheetDatasetRows(
             AND (
               ${targetAttemptFenceSql}
               OR ${targetOlderForeignAttemptOwnerSql}
-              OR (
-                $11::boolean
-                AND target._status = 'failed'
-              )
+              -- Failed rows are repairable projection state, never terminal
+              -- ownership. This matches decideRuntimeSheetPrepare(): any
+              -- attempt may reclaim them, even after a newer failed attempt.
+              OR target._status = 'failed'
             )
             AND (
               target._run_id IS DISTINCT FROM $4::text
@@ -2919,14 +2919,13 @@ async function prepareRuntimeSheetDatasetRows(
                AND NOT (${existingNewerTerminalRowSql})
                AND (
                  ${existingAttemptFenceSql}
+                 -- See claimed_existing_rows: failed rows remain repairable
+                 -- across attempt ordering, while enriched rows stay fenced.
+                 OR existing._status = 'failed'
                  OR (
                    ${existingForeignAttemptOwnerSql}
                    AND COALESCE(existing._attempt_seq, 0) < $10::integer
                  )
-                 OR (
-                   $11::boolean
-                   AND existing._status = 'failed'
-                 )
                )
              )
              OR (

package/dist/cli/index.js

@@ -623,10 +623,10 @@ var SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: "0.1.203",
+  version: "0.1.205",
   apiContract: "2026-06-dataset-handle-results-hard-cutover",
   supportPolicy: {
-    latest: "0.1.203",
+    latest: "0.1.205",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -14113,7 +14113,7 @@ function writeStartedPlayRun(input2) {
   );
 }
 function parsePlayRunOptions(args) {
-  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--no-open] [--json] [--full] [--<input> value]\n       --profile defaults to workers_edge, unless your local dev server exports a dev default such as absurd.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotent call caching and ctx.dataset guidance.";
+  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--no-open] [--json] [--full] [--<input> value]\n       Production defaults to workers_edge. Use --profile absurd only for an explicit Absurd run.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotent call caching and ctx.dataset guidance.";
   let filePath = null;
   let playName = null;
   let input2 = null;
@@ -16116,6 +16116,7 @@ Examples:
   deepline plays run prebuilt/person-linkedin-to-email --input '{"linkedin_url":"..."}'
   deepline plays run long-background-play --no-wait
   deepline plays run my.play.ts --input '{"domain":"stripe.com"}'
+  deepline plays run my.play.ts --profile absurd
   deepline plays run my.play.ts --input @input.json --json
   deepline plays run cto-search.play.ts --limit 5
   deepline runs export <run-id> --out output.csv

package/dist/cli/index.mjs

@@ -608,10 +608,10 @@ var SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: "0.1.203",
+  version: "0.1.205",
   apiContract: "2026-06-dataset-handle-results-hard-cutover",
   supportPolicy: {
-    latest: "0.1.203",
+    latest: "0.1.205",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -14142,7 +14142,7 @@ function writeStartedPlayRun(input2) {
   );
 }
 function parsePlayRunOptions(args) {
-  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--no-open] [--json] [--full] [--<input> value]\n       --profile defaults to workers_edge, unless your local dev server exports a dev default such as absurd.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotent call caching and ctx.dataset guidance.";
+  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--no-open] [--json] [--full] [--<input> value]\n       Production defaults to workers_edge. Use --profile absurd only for an explicit Absurd run.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotent call caching and ctx.dataset guidance.";
   let filePath = null;
   let playName = null;
   let input2 = null;
@@ -16145,6 +16145,7 @@ Examples:
   deepline plays run prebuilt/person-linkedin-to-email --input '{"linkedin_url":"..."}'
   deepline plays run long-background-play --no-wait
   deepline plays run my.play.ts --input '{"domain":"stripe.com"}'
+  deepline plays run my.play.ts --profile absurd
   deepline plays run my.play.ts --input @input.json --json
   deepline plays run cto-search.play.ts --limit 5
   deepline runs export <run-id> --out output.csv

package/dist/index.js

@@ -422,10 +422,10 @@ var SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: "0.1.203",
+  version: "0.1.205",
   apiContract: "2026-06-dataset-handle-results-hard-cutover",
   supportPolicy: {
-    latest: "0.1.203",
+    latest: "0.1.205",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [

package/dist/index.mjs

@@ -352,10 +352,10 @@ var SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: "0.1.203",
+  version: "0.1.205",
   apiContract: "2026-06-dataset-handle-results-hard-cutover",
   supportPolicy: {
-    latest: "0.1.203",
+    latest: "0.1.205",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.1.203",
+  "version": "0.1.205",
   "description": "Deepline SDK + CLI — B2B data enrichment powered by durable cloud execution",
   "license": "MIT",
   "repository": {