deepline 0.1.208 → 0.1.210

package/dist/bundling-sources/shared_libs/play-runtime/app-runtime-api.ts

@@ -129,15 +129,6 @@ type RuntimeApiRequest =
       staticPipeline?: unknown;
       source?: 'published' | 'ad_hoc' | 'draft';
     }
-  | {
-      action: 'settle_inline_child_run';
-      parentRunId: string;
-      childRunId: string;
-      childPlayName: string;
-      status: 'completed' | 'failed' | 'cancelled';
-      result?: unknown;
-      error?: string | null;
-    }
   | ({
       action: 'save_results';
     } & RuntimeSaveResults)
@@ -343,6 +334,16 @@ const APP_RUNTIME_API_RECEIPT_RETRY_DELAYS_MS = [
 const APP_RUNTIME_API_APPEND_RETRY_DELAYS_MS = [
   100, 250, 500, 1_000, 2_000, 4_000, 8_000,
 ] as const;
+// Full jitter (AWS "equal jitter" variant): sleep a random amount in
+// [delay/2, delay] so a thundering herd of sibling settlements that all lost the
+// same OCC race do not re-collide in lockstep on the next attempt.
+function applyRetryJitter(delayMs: number): number {
+  if (delayMs <= 0) {
+    return 0;
+  }
+  const half = delayMs / 2;
+  return Math.round(half + Math.random() * half);
+}
 const APP_RUNTIME_API_DEFAULT_REQUEST_TIMEOUT_MS = 30_000;
 const RUN_STATUS_LEDGER_SNAPSHOT_CACHE_LIMIT = 1_000;
 const runStatusLedgerSnapshots = new Map<string, PlayRunLedgerSnapshot>();
@@ -450,7 +451,7 @@ function summarizeAppRuntimeErrorBody(body: string): string {
 }
 
 export function isTransientAppRuntimeFailureBody(body: string): boolean {
-  return /WorkerOverloaded|"\s*code\s*"\s*:\s*"\s*InternalServerError\s*"|Your request couldn't be completed\. Try again later\.|timeout exceeded when trying to connect|timed out|fetch failed|ECONNRESET|ECONNREFUSED|UND_ERR_CONNECT_TIMEOUT|tuple concurrently updated|RUNTIME_SCHEDULER_SATURATED|Runtime scheduler DB pool is saturated|Runtime scheduler DB circuit breaker is open/i.test(
+  return /WorkerOverloaded|"\s*code\s*"\s*:\s*"\s*InternalServerError\s*"|Your request couldn't be completed\. Try again later\.|timeout exceeded when trying to connect|timed out|fetch failed|ECONNRESET|ECONNREFUSED|UND_ERR_CONNECT_TIMEOUT|tuple concurrently updated|RUNTIME_SCHEDULER_SATURATED|Runtime scheduler DB pool is saturated|Runtime scheduler DB circuit breaker is open|OptimisticConcurrencyControlFailure|changed while this mutation was being run|Documents read from or written to the .* table changed while this mutation/i.test(
     body,
   );
 }
@@ -524,8 +525,7 @@ function isRetryableAppRuntimeAction(
     action === 'release_runtime_step_receipt' ||
     action === 'save_results' ||
     action === 'skip_runtime_step_receipt' ||
-    action === 'start_inline_child_run' ||
-    action === 'settle_inline_child_run'
+    action === 'start_inline_child_run'
   );
 }
 
@@ -679,7 +679,9 @@ async function postAppRuntimeApi<TResponse>(
         attempt < maxAttempts &&
         isRetryableAppRuntimeFetchError({ action: body.action, error })
       ) {
-        await sleep(appRuntimeRetryDelayMs(body.action, attempt));
+        await sleep(
+          applyRetryJitter(appRuntimeRetryDelayMs(body.action, attempt)),
+        );
         continue;
       }
       throw new AppRuntimeApiTransportError({
@@ -702,7 +704,7 @@ async function postAppRuntimeApi<TResponse>(
     ) {
       await sleep(
         Math.max(
-          appRuntimeRetryDelayMs(body.action, attempt),
+          applyRetryJitter(appRuntimeRetryDelayMs(body.action, attempt)),
           appRuntimeRetryAfterMs(response, responseText) ?? 0,
         ),
       );
@@ -1020,23 +1022,6 @@ export async function startRunViaAppRuntime(
   });
 }
 
-export async function settleInlineChildRunViaAppRuntime(
-  context: WorkerRuntimeApiContext,
-  input: {
-    parentRunId: string;
-    childRunId: string;
-    childPlayName: string;
-    status: 'completed' | 'failed' | 'cancelled';
-    result?: unknown;
-    error?: string | null;
-  },
-): Promise<void> {
-  await postAppRuntimeApi<{ ok: true }>(context, {
-    action: 'settle_inline_child_run',
-    ...input,
-  });
-}
-
 export async function saveResultsViaAppRuntime(
   context: WorkerRuntimeApiContext,
   input: RuntimeSaveResults,

package/dist/bundling-sources/shared_libs/play-runtime/child-execution-strategy.ts

@@ -49,3 +49,21 @@ export function resolveChildExecutionStrategy(input: {
   }
   return { strategy: 'inline', reason: 'scalar_child' };
 }
+
+/**
+ * Verbatim rejection message for a scheduling-required child invoked per row.
+ * Shared by the static preflight (`plays check`/publish gate) and the runtime
+ * launch guard so a dynamically-named child fails with the EXACT same text as a
+ * statically-provable one. See ADR 0013.
+ */
+export function inlineChildScheduledInRowMessage(
+  childPlayName: string,
+  rowContextField: string,
+): string {
+  return (
+    `ctx.runPlay("${childPlayName}") runs per row in the "${rowContextField}" batch, ` +
+    'but it is a scheduling-required child (it uses ctx.dataset()/ctx.csv(), waits on an ' +
+    'event, or sets an explicit timeout). Row-scoped children must be scalar. ' +
+    'Give the batch ONE dataset child at play level instead of fanning a scheduled run out per row.'
+  );
+}

package/dist/bundling-sources/shared_libs/play-runtime/child-run-id.ts

@@ -44,8 +44,7 @@ export interface ChildRunIdInputs {
   key?: string | null;
   /**
    * Canonical durable runPlay semantic key when the launching substrate has one.
-   * In-process runtimes pass the same key used by durable receipts so row-scoped
-   * receipt identity and child run identity cannot drift apart.
+   * This scopes each fresh child invocation to its parent call site and row.
    */
   runPlaySemanticKey?: string | null;
   /** Child input payload (semantic-fallback input). */
@@ -57,9 +56,9 @@ export interface ChildRunIdInputs {
 }
 
 /**
- * A failed durable runPlay receipt must launch a fresh child attempt while
- * ordinary submit retries keep attaching to the original child. The receipt
- * lease is the attempt fence, so it is the only extra identity required.
+ * A failed child launch must use a fresh attempt identity while ordinary
+ * transport retries keep attaching to the original child. The caller-provided
+ * lease is the attempt fence.
  */
 export function childSubmitIdempotencyKey(input: {
   receiptKey: string;