deepline 0.1.215 → 0.1.217

package/dist/bundling-sources/apps/play-runner-workers/src/child-manifest-resolver.ts

@@ -100,6 +100,7 @@ export function createRunScopedChildManifestResolver(
   if (!state) {
     state = createResolutionState(input.preloaded);
     runResolutionStates.set(input.scopeKey, state);
+    pruneRunResolutionStates(now);
   }
   state.lastAccessedAt = now;
 

package/dist/bundling-sources/apps/play-runner-workers/src/coordinator-entry.ts

@@ -57,13 +57,9 @@ import {
   PLAY_RUNTIME_CONTRACT_HEADER,
 } from '../../../shared_libs/play-runtime/runtime-contract';
 import {
-  PLAY_RUNTIME_API_CURRENT_PATH,
-  PLAY_RUNTIME_TAIL_LOG_CURRENT_PATH,
+  PLAY_RUNTIME_API_COMPAT_PATH,
+  PLAY_RUNTIME_TAIL_LOG_COMPAT_PATH,
 } from '../../../shared_libs/play-runtime/runtime-api-paths';
-import {
-  executorTokenFromAuthorizationHeader,
-  isCoordinatorRuntimeProxyPath,
-} from './coordinator-runtime-proxy';
 import {
   decideWorkflowPlatformRetry,
   PLATFORM_DEPLOY_WORKFLOW_RETRY_LIMIT,
@@ -1335,7 +1331,7 @@ async function markWorkflowRuntimeFailure(input: {
       } satisfies PlayRunLedgerEvent,
     ],
   });
-  const url = `${baseUrl.replace(/\/$/, '')}${PLAY_RUNTIME_API_CURRENT_PATH}`;
+  const url = `${baseUrl.replace(/\/$/, '')}${PLAY_RUNTIME_API_COMPAT_PATH}`;
   const backoffMs = [200, 500, 1500];
   let lastError: unknown = null;
   for (let attempt = 0; attempt <= backoffMs.length; attempt += 1) {
@@ -1424,7 +1420,7 @@ async function appendWorkflowChildCompletedRunEvent(input: {
       } satisfies PlayRunLedgerEvent,
     ],
   });
-  const url = `${baseUrl.replace(/\/$/, '')}${PLAY_RUNTIME_API_CURRENT_PATH}`;
+  const url = `${baseUrl.replace(/\/$/, '')}${PLAY_RUNTIME_API_COMPAT_PATH}`;
   const response = await fetch(url, { method: 'POST', headers, body });
   if (!response.ok) {
     throw new Error(
@@ -1844,7 +1840,7 @@ async function markRegisteredChildRunFailed(input: {
     contract: PLAY_RUNTIME_CONTRACT,
     executorToken: input.childExecutorToken,
     baseUrl: input.baseUrl,
-    path: PLAY_RUNTIME_API_CURRENT_PATH,
+    path: PLAY_RUNTIME_API_COMPAT_PATH,
     headers: {
       'x-deepline-request-id': crypto.randomUUID(),
       [PLAY_RUNTIME_CONTRACT_HEADER]: String(PLAY_RUNTIME_CONTRACT),
@@ -1901,7 +1897,7 @@ async function appendRegisteredChildRunTerminal(input: {
     contract: PLAY_RUNTIME_CONTRACT,
     executorToken: input.childExecutorToken,
     baseUrl: input.baseUrl,
-    path: PLAY_RUNTIME_API_CURRENT_PATH,
+    path: PLAY_RUNTIME_API_COMPAT_PATH,
     headers: {
       'x-deepline-request-id': crypto.randomUUID(),
       [PLAY_RUNTIME_CONTRACT_HEADER]: String(PLAY_RUNTIME_CONTRACT),
@@ -1983,7 +1979,7 @@ async function callRuntimeApiFromCoordinator(input: {
     contract: PLAY_RUNTIME_CONTRACT,
     executorToken: input.executorToken,
     baseUrl: input.baseUrl,
-    path: PLAY_RUNTIME_API_CURRENT_PATH,
+    path: PLAY_RUNTIME_API_COMPAT_PATH,
     body,
     headers: {
       'x-deepline-request-id': requestId,
@@ -3122,8 +3118,7 @@ async function submitChildWorkflowThroughCoordinator(input: {
  * Workflows serializes the dynamic Worker's `env` map when it persists
  * workflow state. WorkerEntrypoint stubs ARE cloneable.
  *
- * Path allowlist: the current runtime endpoint plus `/api/v2/plays/*` and
- * `/api/v2/integrations/*`.
+ * Path allowlist: only `/api/v2/plays/*` and `/api/v2/integrations/*`.
  * Anything else is a sandbox-escape attempt and gets a loud 403 — the
  * coordinator must NOT proxy a play's request to internal admin routes
  * even if the play tries to construct such a URL.
@@ -3132,7 +3127,6 @@ export class RuntimeApi extends WorkerEntrypoint<CoordinatorEnv, undefined> {
   async fetch(request: Request): Promise<Response> {
     const incoming = new URL(request.url);
     const allowed =
-      incoming.pathname === PLAY_RUNTIME_API_CURRENT_PATH ||
       incoming.pathname.startsWith('/api/v2/plays/') ||
       incoming.pathname.startsWith('/api/v2/integrations/');
     if (!allowed) {
@@ -3765,62 +3759,6 @@ const coordinatorEntrypoint = {
 
 export default coordinatorEntrypoint;
 
-const COORDINATOR_RUNTIME_PROXY_MAX_BODY_BYTES = 16 * 1024 * 1024;
-
-async function proxyCoordinatorRuntimeApiRequest(input: {
-  request: Request;
-  env: CoordinatorEnv;
-  url: URL;
-}): Promise<Response> {
-  const { request, env, url } = input;
-  if (request.method !== 'GET' && request.method !== 'POST') {
-    return new Response('method not allowed', { status: 405 });
-  }
-  const executorToken = executorTokenFromAuthorizationHeader(
-    request.headers.get('authorization'),
-  );
-  if (!executorToken) {
-    return Response.json(
-      { error: 'Runtime gateway requires a bearer executor token.' },
-      { status: 401 },
-    );
-  }
-  const contentLength = Number(request.headers.get('content-length') ?? '0');
-  if (
-    Number.isFinite(contentLength) &&
-    contentLength > COORDINATOR_RUNTIME_PROXY_MAX_BODY_BYTES
-  ) {
-    return Response.json(
-      { error: 'Runtime gateway request body exceeds the 16 MiB limit.' },
-      { status: 413 },
-    );
-  }
-  let body: unknown = {};
-  if (request.method === 'POST') {
-    try {
-      body = await request.json();
-    } catch {
-      return Response.json(
-        { error: 'Runtime gateway requires a JSON request body.' },
-        { status: 400 },
-      );
-    }
-  }
-  const upstream = await env.HARNESS.runtimeApiCall({
-    contract: PLAY_RUNTIME_CONTRACT,
-    executorToken,
-    method: request.method,
-    path: `${url.pathname}${url.search}`,
-    body,
-    headers: Object.fromEntries(request.headers.entries()),
-  });
-  const headers = new Headers(upstream.headers);
-  // The harness materializes the upstream response body as a string. Let this
-  // Response calculate its own byte length instead of forwarding a stale one.
-  headers.delete('content-length');
-  return new Response(upstream.body, { status: upstream.status, headers });
-}
-
 /**
  * Route dispatcher for the coordinator fetch handler. Extracted as a standalone
  * function so the outer {@link coordinatorEntrypoint.fetch} try/catch backstop
@@ -3849,19 +3787,6 @@ async function coordinatorRouteFetch(
     }
     return new Response('ok', { status: 200, headers });
   }
-  if (isCoordinatorRuntimeProxyPath(url.pathname)) {
-    try {
-      return await proxyCoordinatorRuntimeApiRequest({ request, env, url });
-    } catch (error) {
-      return coordinatorRouteErrorResponse({
-        logTag: '[coordinator.runtime_proxy.error]',
-        code: 'COORDINATOR_RUNTIME_PROXY_FAILED',
-        phase: 'coordinator.runtime_proxy',
-        runId: null,
-        error,
-      });
-    }
-  }
   if (url.pathname === '/internal-token/probe') {
     const authError = authorizeCoordinatorControlRequest({ request, env });
     if (authError) return authError;
@@ -4110,7 +4035,7 @@ async function flushTailRunLogs(
         return;
       }
       await fetch(
-        `${env.DEEPLINE_API_BASE_URL}${PLAY_RUNTIME_TAIL_LOG_CURRENT_PATH}`,
+        `${env.DEEPLINE_API_BASE_URL}${PLAY_RUNTIME_TAIL_LOG_COMPAT_PATH}`,
         {
           method: 'POST',
           headers: {
@@ -5530,7 +5455,7 @@ export class TenantWorkflow extends WorkflowEntrypoint {
     const runId = payload && typeof payload.runId === "string" ? payload.runId : "warmup";
     const startedAt = Date.now();
     if (this.env.RUNTIME_API) {
-      await this.env.RUNTIME_API.fetch(new Request("https://deepline.runtime.internal${PLAY_RUNTIME_API_CURRENT_PATH}", {
+      await this.env.RUNTIME_API.fetch(new Request("https://deepline.runtime.internal${PLAY_RUNTIME_API_COMPAT_PATH}", {
         method: "POST",
         headers: { "content-type": "application/json" },
         body: "{}"

package/dist/bundling-sources/apps/play-runner-workers/src/entry.ts

@@ -185,8 +185,8 @@ import {
   PLAY_RUNTIME_CONTRACT_HEADER,
 } from '../../../shared_libs/play-runtime/runtime-contract';
 import {
-  PLAY_RUNTIME_API_CURRENT_PATH,
-  PLAY_RUNTIME_EGRESS_FETCH_CURRENT_PATH,
+  PLAY_RUNTIME_API_COMPAT_PATH,
+  PLAY_RUNTIME_EGRESS_FETCH_COMPAT_PATH,
 } from '../../../shared_libs/play-runtime/runtime-api-paths';
 import { DYNAMIC_PLAY_WORKER_ARTIFACT_VERSION } from '../../../shared_libs/play-runtime/dynamic-worker-version';
 import {
@@ -860,7 +860,7 @@ async function fetchRuntimeApi(
       ? Math.max(1, Math.ceil(options.timeoutMsOverride))
       : path === '/api/v2/plays/run'
         ? RUNTIME_API_PLAY_RUN_TIMEOUT_MS
-        : path === PLAY_RUNTIME_EGRESS_FETCH_CURRENT_PATH
+        : path === PLAY_RUNTIME_EGRESS_FETCH_COMPAT_PATH
           ? RUNTIME_API_EGRESS_FETCH_TIMEOUT_MS
           : /^\/api\/v2\/integrations\/[^/]+\/execute$/.test(path)
             ? RUNTIME_API_INTEGRATION_EXECUTE_TIMEOUT_MS
@@ -1170,6 +1170,8 @@ function recordRunnerPerfTrace(input: {
     ts: Date.now(),
     source: 'dynamic_worker' as const,
     runId: input.req.runId,
+    playName: input.req.playName,
+    orgId: input.req.orgId,
     phase,
     ms: input.ms ?? 0,
     ...(input.extra ?? {}),
@@ -1316,7 +1318,7 @@ async function postRuntimeApi<T>(
     try {
       res = await fetchRuntimeApi(
         baseUrl,
-        PLAY_RUNTIME_API_CURRENT_PATH,
+        PLAY_RUNTIME_API_COMPAT_PATH,
         {
           method: 'POST',
           headers: {
@@ -2890,7 +2892,7 @@ async function postRuntimeEgressFetch(
   ) {
     const response = await fetchRuntimeApi(
       req.baseUrl,
-      PLAY_RUNTIME_EGRESS_FETCH_CURRENT_PATH,
+      PLAY_RUNTIME_EGRESS_FETCH_COMPAT_PATH,
       {
         method: 'POST',
         headers: {
@@ -4263,7 +4265,7 @@ function createMinimalWorkerCtx(
     if (!auth) return {};
     const response = await fetchRuntimeApi(
       req.baseUrl,
-      PLAY_RUNTIME_API_CURRENT_PATH,
+      PLAY_RUNTIME_API_COMPAT_PATH,
       {
         method: 'POST',
         headers: {
@@ -8942,7 +8944,7 @@ export class TenantWorkflow extends WorkflowEntrypoint<
         try {
           const response = await fetchRuntimeApi(
             req.baseUrl,
-            PLAY_RUNTIME_API_CURRENT_PATH,
+            PLAY_RUNTIME_API_COMPAT_PATH,
             {
               method: 'POST',
               headers: {

package/dist/bundling-sources/sdk/src/release.ts

@@ -106,10 +106,10 @@ export const SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: '0.1.215',
+  version: '0.1.217',
   apiContract: '2026-06-dataset-handle-results-hard-cutover',
   supportPolicy: {
-    latest: '0.1.215',
+    latest: '0.1.217',
     minimumSupported: '0.1.53',
     deprecatedBelow: '0.1.53',
     commandMinimumSupported: [

package/dist/bundling-sources/shared_libs/play-runtime/app-runtime-api.ts

@@ -38,7 +38,7 @@ import {
   PLAY_RUNTIME_CONTRACT,
   PLAY_RUNTIME_CONTRACT_HEADER,
 } from '@shared_libs/play-runtime/runtime-contract';
-import { PLAY_RUNTIME_API_CURRENT_PATH } from '@shared_libs/play-runtime/runtime-api-paths';
+import { PLAY_RUNTIME_API_COMPAT_PATH } from '@shared_libs/play-runtime/runtime-api-paths';
 import { PLAY_RUNTIME_TEST_FAULT_HEADER } from '@shared_libs/play-runtime/test-runtime-seams';
 import { vercelProtectionBypassHeaders } from '@shared_libs/play-runtime/vercel-protection';
 
@@ -788,7 +788,7 @@ export class AppRuntimeApiTransportError extends Error {
 
 function resolveAppRuntimeApiUrl(context: WorkerRuntimeApiContext): string {
   const baseUrl = context.baseUrl.trim().replace(/\/$/, '');
-  return `${baseUrl}${PLAY_RUNTIME_API_CURRENT_PATH}`;
+  return `${baseUrl}${PLAY_RUNTIME_API_COMPAT_PATH}`;
 }
 
 async function postAppRuntimeApi<TResponse>(

package/dist/bundling-sources/shared_libs/play-runtime/context.ts

@@ -48,8 +48,8 @@ import {
   SYNTHETIC_RUN_HEADER,
 } from './coordinator-headers';
 import {
+  PLAY_RUNTIME_API_COMPAT_PATH,
   PLAY_RUNTIME_API_CURRENT_PATH,
-  PLAY_RUNTIME_CHILD_EXECUTOR_TOKEN_CURRENT_PATH,
 } from './runtime-api-paths';
 import {
   createRootRunExecutionScope,
@@ -262,6 +262,15 @@ const rowContext = new AsyncLocalStorage<{
   rowKey?: string;
   mapScope?: MapExecutionScope;
 }>();
+type InlineCompositionStore = {
+  context: PlayContextImpl;
+  executionScope: RunExecutionScope;
+  governor: PlayExecutionGovernor;
+  playName: string;
+  staticPipeline: ContextOptions['staticPipeline'];
+};
+const inlineCompositionContext =
+  new AsyncLocalStorage<InlineCompositionStore>();
 const toolExecutionOverrides = new AsyncLocalStorage<{ force: boolean }>();
 const PROGRESS_HEARTBEAT_INTERVAL_MS = 1_000;
 const PURE_JS_HEARTBEAT_ROW_INTERVAL = 250;
@@ -1270,12 +1279,6 @@ export class PlayContextImpl {
    */
   private readonly governor: PlayExecutionGovernor;
   private readonly resourceGovernor: RuntimeResourceGovernor;
-  /**
-   * Lineage identity for this context (run/play ids + ancestry). Seeded from the
-   * Governor snapshot; used only for receipt keys, durable-boundary scoping, and
-   * child run-id derivation. All policy lives in {@link governor}.
-   */
-  private readonly governance: GovernanceSnapshot;
   private readonly resolvedPlayExecutorCache = new Map<
     string,
     Promise<ResolvedPlayExecutor>
@@ -1443,7 +1446,6 @@ export class PlayContextImpl {
     this.resourceGovernor = createRuntimeResourceGovernor({
       executionGovernor: this.governor,
     });
-    this.governance = this.governor.snapshot();
   }
 
   private durableBoundaryId(localId: string): string {
@@ -1451,7 +1453,33 @@ export class PlayContextImpl {
     // Nested plays and concurrent child calls therefore need a stable run scope
     // in the key, otherwise two children can both produce e.g. "sleep-0-25"
     // and replay the wrong boundary or never observe completion.
-    return `${this.governance.currentRunId}:${localId}`;
+    return `${this.currentGovernance.currentRunId}:${localId}`;
+  }
+
+  private get activeInlineComposition(): InlineCompositionStore | null {
+    const active = inlineCompositionContext.getStore();
+    return active?.context === this ? active : null;
+  }
+
+  private get currentExecutionScope(): RunExecutionScope {
+    return this.activeInlineComposition?.executionScope ?? this.executionScope;
+  }
+
+  private get currentExecutionGovernor(): PlayExecutionGovernor {
+    return this.activeInlineComposition?.governor ?? this.governor;
+  }
+
+  private get currentGovernance(): GovernanceSnapshot {
+    return this.currentExecutionGovernor.snapshot();
+  }
+
+  private get currentPlayName(): string | undefined {
+    return this.activeInlineComposition?.playName ?? this.#options.playName;
+  }
+
+  private get currentStaticPipeline(): ContextOptions['staticPipeline'] {
+    const active = this.activeInlineComposition;
+    return active ? active.staticPipeline : this.#options.staticPipeline;
   }
 
   private shouldLaunchChildPlaysThroughScheduler(): boolean {
@@ -1617,17 +1645,18 @@ export class PlayContextImpl {
     childInput: Record<string, unknown>;
     description?: string | null;
   }): Promise<void> {
+    const parentGovernance = this.currentGovernance;
     const parentPlayName =
-      this.governance.currentPlayId ||
-      this.#options.playName ||
+      parentGovernance.currentPlayId ||
+      this.currentPlayName ||
       this.#options.playId ||
       'anonymous-play';
     const governance: PlayCallGovernanceSnapshot = {
-      rootRunId: this.governance.rootRunId,
-      parentRunId: this.governance.currentRunId,
+      rootRunId: parentGovernance.rootRunId,
+      parentRunId: parentGovernance.currentRunId,
       parentPlayName,
       key: input.key,
-      ancestryPlayIds: [...this.governance.ancestryPlayIds],
+      ancestryPlayIds: [...parentGovernance.ancestryPlayIds],
       callDepth: input.childGovernance.callDepth,
       playCallCount: input.childGovernance.playCallCount,
       toolCallCount: input.childGovernance.toolCallCount,
@@ -1702,13 +1731,13 @@ export class PlayContextImpl {
     | null
   > {
     const response = await fetch(
-      `${this.runtimeApiBaseUrl()}${PLAY_RUNTIME_API_CURRENT_PATH}`,
+      `${this.runtimeApiBaseUrl()}${PLAY_RUNTIME_API_COMPAT_PATH}`,
       {
         method: 'POST',
         headers: await this.runtimeApiHeaders(),
         body: JSON.stringify({
           action: 'read_child_run_terminal_snapshot',
-          parentRunId: this.governance.currentRunId,
+          parentRunId: this.currentGovernance.currentRunId,
           childRunId: input.childRunId,
           childPlayName: input.childPlayName,
         }),
@@ -1817,7 +1846,7 @@ export class PlayContextImpl {
       this.#options.runId
     ) {
       const response = await fetch(
-        `${this.#options.baseUrl.replace(/\/$/, '')}${PLAY_RUNTIME_API_CURRENT_PATH}`,
+        `${this.#options.baseUrl.replace(/\/$/, '')}${PLAY_RUNTIME_API_COMPAT_PATH}`,
         {
           method: 'POST',
           headers: {
@@ -2716,7 +2745,7 @@ export class PlayContextImpl {
   }): Promise<string> {
     return await this.durableToolCallCacheKeyForScope({
       ...input,
-      playLocalScope: this.governance.currentPlayId,
+      playLocalScope: this.currentGovernance.currentPlayId,
     });
   }
 
@@ -2871,7 +2900,7 @@ export class PlayContextImpl {
       opts.receiptKey?.trim() ||
       durableCtxKey({
         orgId: this.#options.orgId,
-        playId: this.executionScope.receipt.namespace,
+        playId: this.currentExecutionScope.receipt.namespace,
         operation,
         id,
         semanticKey: opts.semanticKey,
@@ -2905,15 +2934,15 @@ export class PlayContextImpl {
   }
 
   private get currentRunId(): string {
-    return this.executionScope.logical.runId;
+    return this.currentExecutionScope.logical.runId;
   }
 
   private get currentReceiptOwnerRunId(): string {
-    return this.executionScope.receipt.ownerRunId;
+    return this.currentExecutionScope.receipt.ownerRunId;
   }
 
   private get currentRunAttempt(): number {
-    return this.executionScope.receipt.ownerAttempt;
+    return this.currentExecutionScope.receipt.ownerAttempt;
   }
 
   private emitScopedFieldMetaUpdate(input: {
@@ -3193,7 +3222,8 @@ export class PlayContextImpl {
     rowKey?: string;
     callId?: string;
   }): string {
-    const scope = this.governance.currentRunId || this.#options.runId || 'run';
+    const scope =
+      this.currentGovernance.currentRunId || this.#options.runId || 'run';
     if (input.callId?.trim()) {
       return `${scope}:${input.callId.trim()}`;
     }
@@ -3961,16 +3991,16 @@ export class PlayContextImpl {
             const flushStartedAt = Date.now();
             try {
               await this.#options.onMapRowsCompleted!({
-                playName: this.#options.playName,
-                playId: this.#options.playId,
-                runId: this.#options.runId,
+                playName: this.currentPlayName,
+                playId: this.currentExecutionScope.logical.playId,
+                runId: this.currentRunId,
                 executorToken: this.#options.executorToken,
                 tableNamespace: resolvedTableNamespace,
                 rows: chunk,
                 outputFields: datasetColumnNames.filter((field) =>
                   shouldPersistMapCellField(field),
                 ),
-                staticPipeline: this.#options.staticPipeline ?? null,
+                staticPipeline: this.currentStaticPipeline ?? null,
               });
               this.resourceGovernor.observe({
                 sheetFlushBytes: chunkBytes,
@@ -4037,11 +4067,11 @@ export class PlayContextImpl {
           pageStartRows,
           resolvedTableNamespace,
           {
-            playName: this.#options.playName,
-            playId: this.#options.playId,
-            runId: this.#options.runId,
+            playName: this.currentPlayName,
+            playId: this.currentExecutionScope.logical.playId,
+            runId: this.currentRunId,
             executorToken: this.#options.executorToken,
-            staticPipeline: this.#options.staticPipeline,
+            staticPipeline: this.currentStaticPipeline,
             forceRefresh: this.#options.cachePolicy?.forceToolRefresh === true,
             inputOffset: page.offset,
           },
@@ -4472,11 +4502,11 @@ export class PlayContextImpl {
         mapStartRows,
         resolvedTableNamespace,
         {
-          playName: this.#options.playName,
-          playId: this.#options.playId,
-          runId: this.#options.runId,
+          playName: this.currentPlayName,
+          playId: this.currentExecutionScope.logical.playId,
+          runId: this.currentRunId,
           executorToken: this.#options.executorToken,
-          staticPipeline: this.#options.staticPipeline,
+          staticPipeline: this.currentStaticPipeline,
           forceRefresh: this.#options.cachePolicy?.forceToolRefresh === true,
         },
       );
@@ -4620,16 +4650,16 @@ export class PlayContextImpl {
           const flushStartedAt = Date.now();
           try {
             const writeResult = await this.#options.onMapRowsCompleted!({
-              playName: this.#options.playName,
-              playId: this.#options.playId,
-              runId: this.#options.runId,
+              playName: this.currentPlayName,
+              playId: this.currentExecutionScope.logical.playId,
+              runId: this.currentRunId,
               executorToken: this.#options.executorToken,
               tableNamespace: resolvedTableNamespace,
               rows: chunk,
               outputFields: datasetColumnNames.filter((field) =>
                 shouldPersistMapCellField(field),
               ),
-              staticPipeline: this.#options.staticPipeline ?? null,
+              staticPipeline: this.currentStaticPipeline ?? null,
             });
             if (writeResult) {
               for (const key of writeResult.staleDroppedKeys ?? []) {
@@ -6158,6 +6188,7 @@ export class PlayContextImpl {
     input: Record<string, unknown>,
     options?: ToolCallOptions,
   ): Promise<unknown> {
+    const executionScope = this.currentExecutionScope;
     const normalizedKey = this.normalizeContextKey(key, 'tool');
     const toolCachePolicy = this.effectiveToolCallCachePolicy(options);
     const toolRequestIdentity = deriveToolRequestIdentity({
@@ -6303,6 +6334,7 @@ export class PlayContextImpl {
       const rowId = store.rowId;
       const fieldName = store.fieldName;
       const callId = [
+        executionScope.receipt.namespace,
         store.tableNamespace?.trim() || 'map',
         store.rowKey?.trim() || String(rowId),
         normalizedKey,
@@ -6669,10 +6701,10 @@ export class PlayContextImpl {
       });
 
       const executePlayCall = async (): Promise<TOutput> => {
-        // Reserve depth + per-parent + descendant/play-call budget on the parent
-        // and fork the lineage-global snapshot for the child. forkChild owns the
-        // cycle guard, depth cap, per-parent cap, and play/descendant charges, so
-        // a recovered receipt (which skips this body) never consumes budget.
+        // Scheduled children reserve the parent's durable play/descendant
+        // budgets. Inline scalar children are function composition: their
+        // Governor view changes only local lineage for recursion/depth checks
+        // and delegates tool admission, pacing, and tool budgets to the parent.
         //
         // The SCHEDULED substrate still allocates a durable child run id (through
         // the shared canonical builder so in-process and the workers_edge
@@ -6682,9 +6714,10 @@ export class PlayContextImpl {
         // settlement. Their only identity is a replay-stable, call-site scoped
         // composition namespace (`child:<playName>#<ordinal>`) used to scope tool
         // receipts under the PARENT run. See child-composition-namespace below.
+        const parentGovernor = this.currentExecutionGovernor;
         const inlineChildGovernor = launchThroughScheduler
           ? null
-          : await this.governor.forkInlineChild({
+          : await parentGovernor.forkInlineChild({
               childPlayName: resolvedName,
               childRunId: this.inlineChildCompositionNamespace(
                 resolvedName,
@@ -6692,7 +6725,7 @@ export class PlayContextImpl {
               ),
             });
         const childGovernance = launchThroughScheduler
-          ? await this.governor.forkChild({
+          ? await parentGovernor.forkChild({
               childPlayName: resolvedName,
               childRunId: buildChildRunId({
                 childPlayName: resolvedName,
@@ -6706,8 +6739,8 @@ export class PlayContextImpl {
             })
           : inlineChildGovernor!.snapshot();
         const childPlaySlot = launchThroughScheduler
-          ? await this.governor.acquireChildSubmitSlot()
-          : await this.governor.acquireInlineChildSlot();
+          ? await parentGovernor.acquireChildSubmitSlot()
+          : null;
         const rowStore = rowContext.getStore();
         const producer = {
           kind: 'play' as const,
@@ -6840,7 +6873,7 @@ export class PlayContextImpl {
           // per-row inline-invocation sanity cap at creation).
           const compositionNamespace = childGovernance.currentRunId;
           const childExecutionScope = deriveChildRunExecutionScope(
-            this.executionScope,
+            this.currentExecutionScope,
             {
               placement: 'inline',
               runId: compositionNamespace,
@@ -6849,49 +6882,22 @@ export class PlayContextImpl {
             },
           );
           this.inlineChildAggregates.total += 1;
-          const inlineScalarChild =
-            childExecutionDecision.reason === 'scalar_child';
-          const childContext = createPlayContext({
-            ...this.#options,
-            executionScope: childExecutionScope,
-            playId: resolvedName,
-            playName: resolvedName,
-            runId: compositionNamespace,
-            executorToken: inlineScalarChild
-              ? this.#options.executorToken
-              : await this.mintChildExecutorToken({
-                  parentRunId: this.currentRunId,
-                  parentPlayName: this.#options.playName,
-                  childRunId: compositionNamespace,
-                  childPlayName: resolvedName,
-                }),
-            staticPipeline: resolvedPlay.staticPipeline ?? null,
-            checkpoint: this.checkpoint,
-            governance: undefined,
-            executionGovernor: inlineChildGovernor!,
-            ...(inlineScalarChild
-              ? {}
-              : {
-                  getRuntimeStepReceipt: undefined,
-                  getRuntimeStepReceipts: undefined,
-                  claimRuntimeStepReceipt: undefined,
-                  claimRuntimeStepReceipts: undefined,
-                  completeRuntimeStepReceipt: undefined,
-                  completeRuntimeStepReceipts: undefined,
-                  failRuntimeStepReceipt: undefined,
-                  failRuntimeStepReceipts: undefined,
-                  heartbeatRuntimeStepReceipts: undefined,
-                  skipRuntimeStepReceipt: undefined,
-                }),
-          });
           try {
-            const childExecution = this.executeResolvedPlay(
-              resolvedPlay,
-              childContext,
-              input,
+            // A scalar child is a normal function call on the parent's context.
+            // Async-local identity changes receipt and recursion scope without
+            // allocating another PlayContext, tool queue, drain loop, resource
+            // governor, or receipt client. Calls from every concurrent child
+            // therefore reach the same proven parent batching path.
+            const result = await inlineCompositionContext.run(
+              {
+                context: this,
+                executionScope: childExecutionScope,
+                governor: inlineChildGovernor!,
+                playName: resolvedName,
+                staticPipeline: resolvedPlay.staticPipeline ?? null,
+              },
+              () => this.executeResolvedPlay(resolvedPlay, this, input),
             );
-            await childContext.drainQueuedWork([childExecution]);
-            const result = await childExecution;
             this.inlineChildAggregates.ok += 1;
             if (rowStore) {
               this.emitScopedFieldMetaUpdate({
@@ -6912,7 +6918,6 @@ export class PlayContextImpl {
               playId: resolvedName,
               execution: options?.execution,
               description: options?.description,
-              nestedSteps: childContext.getSteps(),
             });
             return result as TOutput;
           } catch (childError) {
@@ -6950,57 +6955,6 @@ export class PlayContextImpl {
     }
   }
 
-  private async mintChildExecutorToken(input: {
-    parentRunId: string;
-    parentPlayName?: string | null;
-    childRunId: string;
-    childPlayName: string;
-  }): Promise<string | undefined> {
-    if (!this.#options.executorToken || !this.#options.baseUrl) {
-      return this.#options.executorToken;
-    }
-    const parentPlayName = input.parentPlayName?.trim();
-    if (!parentPlayName) {
-      return this.#options.executorToken;
-    }
-    const response = await fetch(
-      `${this.#options.baseUrl.replace(/\/$/, '')}${PLAY_RUNTIME_CHILD_EXECUTOR_TOKEN_CURRENT_PATH}`,
-      {
-        method: 'POST',
-        headers: {
-          Authorization: `Bearer ${this.#options.executorToken}`,
-          'Content-Type': 'application/json',
-          ...(await this.vercelProtectionHeaders()),
-        },
-        body: JSON.stringify({
-          parentRunId: input.parentRunId,
-          parentPlayName,
-          childRunId: input.childRunId,
-          childPlayName: input.childPlayName,
-        }),
-      },
-    );
-    const body = (await response.json().catch(() => null)) as {
-      executorToken?: unknown;
-      error?: unknown;
-    } | null;
-    if (!response.ok) {
-      const message =
-        typeof body?.error === 'string' && body.error.trim()
-          ? body.error.trim()
-          : response.statusText;
-      throw new Error(
-        `ctx.runPlay failed to mint child executor token for "${input.childPlayName}": ${message} (status ${response.status}).`,
-      );
-    }
-    if (typeof body?.executorToken !== 'string' || !body.executorToken.trim()) {
-      throw new Error(
-        `ctx.runPlay failed to mint child executor token for "${input.childPlayName}": response did not include executorToken.`,
-      );
-    }
-    return body.executorToken.trim();
-  }
-
   /**
    * Replay-stable composition namespace for one inline `ctx.runPlay`
    * invocation. Format `child:<playName>#<callKey>[@<rowScope>]`:
@@ -7358,7 +7312,7 @@ export class PlayContextImpl {
 
     const rowStore = rowContext.getStore();
     const scope = rowStore ? `row-${rowStore.rowId}` : 'workflow';
-    const callIndexKey = `${scope}:${normalizedKey}`;
+    const callIndexKey = `${this.currentExecutionScope.receipt.namespace}:${scope}:${normalizedKey}`;
     const callIndex = this.stepCallIndexByKey.get(callIndexKey) ?? 0;
     this.stepCallIndexByKey.set(callIndexKey, callIndex + 1);
     const boundarySuffix = callIndex === 0 ? '' : `:${callIndex}`;

package/dist/bundling-sources/shared_libs/play-runtime/governor/governor.ts

@@ -106,13 +106,6 @@ export interface PlayExecutionGovernor {
   acquireRowSlot(opts?: { signal?: AbortSignal }): Promise<WorkLease>;
   /** Block until a child-play submit slot is free. Released after submit, not terminal. */
   acquireChildSubmitSlot(opts?: { signal?: AbortSignal }): Promise<WorkLease>;
-  /**
-   * Block until an in-process child-composition slot is free. Unlike a
-   * scheduled child's submit slot, this lease is held through child terminal
-   * execution so a large row fan-out cannot materialize thousands of child
-   * contexts and receipt closures at once.
-   */
-  acquireInlineChildSlot(opts?: { signal?: AbortSignal }): Promise<WorkLease>;
   /**
    * Block until a global tool-concurrency slot AND the per-(org,provider) pacer
    * permit are free, then charge the tool-call budget and return a lease. Order:
@@ -404,7 +397,6 @@ export function createPlayExecutionGovernor(
 
     acquireRowSlot: (opts) => rowSlots.acquire(opts?.signal),
     acquireChildSubmitSlot: (opts) => childPlaySlots.acquire(opts?.signal),
-    acquireInlineChildSlot: (opts) => childPlaySlots.acquire(opts?.signal),
 
     async acquireToolSlot(toolId, opts) {
       // 1. global tool-concurrency slot.
@@ -548,7 +540,7 @@ export function createPlayExecutionGovernor(
     async forkInlineChild(childInput) {
       return createInlineChildGovernor(
         governor,
-        await governor.forkChild(childInput),
+        deriveInlineChildSnapshot(state, childInput, policy),
       );
     },
 
@@ -601,6 +593,38 @@ export function createPlayExecutionGovernor(
   return governor;
 }
 
+function deriveInlineChildSnapshot(
+  parent: GovernanceSnapshot,
+  input: { childPlayName: string; childRunId: string },
+  policy: ResolvedExecutionPolicy,
+): GovernanceSnapshot {
+  if (parent.ancestryPlayIds.includes(input.childPlayName)) {
+    throw new Error(
+      `Recursive play graph detected: ${[
+        ...parent.ancestryPlayIds,
+        input.childPlayName,
+      ].join(' -> ')}`,
+    );
+  }
+  const nextDepth = parent.callDepth + 1;
+  if (nextDepth > policy.budgets.maxPlayCallDepth) {
+    throw new GovernorBudgetError(
+      'playDepth',
+      nextDepth,
+      policy.budgets.maxPlayCallDepth,
+    );
+  }
+  return {
+    ...parent,
+    currentRunId: input.childRunId,
+    currentPlayId: input.childPlayName,
+    ancestryPlayIds: [...parent.ancestryPlayIds, input.childPlayName],
+    ancestryRunIds: [...parent.ancestryRunIds, input.childRunId],
+    callDepth: nextDepth,
+    parentChildCalls: {},
+  };
+}
+
 function createInlineChildGovernor(
   root: PlayExecutionGovernor,
   initial: GovernanceSnapshot,
@@ -620,17 +644,6 @@ function createInlineChildGovernor(
     policy: root.policy,
     acquireRowSlot: (opts) => root.acquireRowSlot(opts),
     acquireChildSubmitSlot: (opts) => root.acquireChildSubmitSlot(opts),
-    async acquireInlineChildSlot(opts) {
-      if (opts?.signal?.aborted) {
-        throw opts.signal.reason instanceof Error
-          ? opts.signal.reason
-          : new Error('Slot acquire aborted.');
-      }
-      // This governor already runs inside a root inline-child lease. Descendant
-      // composition shares that admitted subtree slot; reacquiring the root
-      // semaphore here can deadlock when every admitted parent awaits a child.
-      return { release: () => {} };
-    },
     acquireToolSlot: (toolId, opts) => root.acquireToolSlot(toolId, opts),
     suggestedParallelism: (toolId, fallback) =>
       root.suggestedParallelism(toolId, fallback),
@@ -686,7 +699,10 @@ function createInlineChildGovernor(
       };
     },
     async forkInlineChild(input) {
-      return createInlineChildGovernor(child, await child.forkChild(input));
+      return createInlineChildGovernor(
+        child,
+        deriveInlineChildSnapshot(child.snapshot(), input, child.policy),
+      );
     },
     snapshot() {
       const counters = root.snapshot();

package/dist/bundling-sources/shared_libs/play-runtime/runtime-api.ts

@@ -95,7 +95,7 @@ import {
   PLAY_RUNTIME_CONTRACT,
   PLAY_RUNTIME_CONTRACT_HEADER,
 } from './runtime-contract';
-import { PLAY_RUNTIME_API_CURRENT_PATH } from './runtime-api-paths';
+import { PLAY_RUNTIME_API_COMPAT_PATH } from './runtime-api-paths';
 import {
   PLAY_RUNTIME_SHEET_ATTEMPT_LEASE_TTL_MS,
   PLAY_RUNTIME_WORK_RECEIPT_LEASE_TTL_MS,
@@ -298,7 +298,6 @@ const RUNTIME_WORK_RECEIPT_LEASE_COLUMNS = [
   'lease_expires_at',
 ] as const;
 const RUNTIME_WORK_RECEIPT_FAILURE_KIND_COLUMN = 'failure_kind';
-const RUNTIME_WORK_RECEIPT_KEY_INDEX = 'idx_deepline_step_receipts_k_unique';
 const RUNTIME_WORK_RECEIPT_SELF_HEAL_COLUMNS = [
   ...RUNTIME_WORK_RECEIPT_LEASE_COLUMNS,
   RUNTIME_WORK_RECEIPT_FAILURE_KIND_COLUMN,
@@ -505,7 +504,7 @@ function resolveRuntimeApiUrl(context: RuntimeApiContext): string {
   if (!baseUrl) {
     throw new Error('Runner runtime API requires a baseUrl.');
   }
-  return `${baseUrl.replace(/\/$/, '')}${PLAY_RUNTIME_API_CURRENT_PATH}`;
+  return `${baseUrl.replace(/\/$/, '')}${PLAY_RUNTIME_API_COMPAT_PATH}`;
 }
 
 function resolveRuntimeApiHeaders(
@@ -587,10 +586,10 @@ async function postRuntimeApi<TResponse>(
         ? parsed.retry_after_ms
         : RUNTIME_API_DEFAULT_RETRY_AFTER_MS;
     const details =
-      typeof parsed?.details === 'string'
-        ? parsed.details
-        : typeof parsed?.detail === 'string'
-          ? parsed.detail
+      typeof parsed?.detail === 'string'
+        ? parsed.detail
+        : typeof parsed?.details === 'string'
+          ? parsed.details
           : typeof parsed?.debug_error === 'string'
             ? parsed.debug_error
             : null;
@@ -2043,22 +2042,6 @@ function isMissingRuntimeWorkReceiptSelfHealColumnError(
   );
 }
 
-function isMissingRuntimeWorkReceiptKeyConstraintError(
-  error: unknown,
-): boolean {
-  if (!error || typeof error !== 'object') {
-    return false;
-  }
-  const code = 'code' in error ? String(error.code) : '';
-  const message = 'message' in error ? String(error.message) : '';
-  return (
-    code === '42P10' ||
-    /no unique or exclusion constraint matching the ON CONFLICT specification/i.test(
-      message,
-    )
-  );
-}
-
 function runtimeWorkReceiptEnsureCacheKey(
   session: RuntimePostgresSession,
 ): string {
@@ -2138,29 +2121,22 @@ async function ensureRuntimeWorkReceiptTable(
         session,
         client,
       );
-      if (missingColumns.length > 0) {
-        await client.query(`
-          ALTER TABLE ${workReceiptTable(session)}
-            ${missingColumns
-              .map((column) => {
-                const type =
-                  column === 'lease_expires_at'
-                    ? 'timestamptz'
-                    : column === 'lease_owner_attempt'
-                      ? 'integer'
-                      : column === RUNTIME_WORK_RECEIPT_FAILURE_KIND_COLUMN
-                        ? 'smallint NOT NULL DEFAULT 0'
-                        : 'text';
-                return `ADD COLUMN IF NOT EXISTS ${column} ${type}`;
-              })
-              .join(',\n          ')}
-        `);
-      }
+      if (missingColumns.length === 0) return;
       await client.query(`
-        CREATE UNIQUE INDEX IF NOT EXISTS ${quoteIdentifier(
-          RUNTIME_WORK_RECEIPT_KEY_INDEX,
-        )}
-        ON ${workReceiptTable(session)} (k)
+        ALTER TABLE ${workReceiptTable(session)}
+          ${missingColumns
+            .map((column) => {
+              const type =
+                column === 'lease_expires_at'
+                  ? 'timestamptz'
+                  : column === 'lease_owner_attempt'
+                    ? 'integer'
+                    : column === RUNTIME_WORK_RECEIPT_FAILURE_KIND_COLUMN
+                      ? 'smallint NOT NULL DEFAULT 0'
+                      : 'text';
+              return `ADD COLUMN IF NOT EXISTS ${column} ${type}`;
+            })
+            .join(',\n          ')}
       `);
     })
     .then(() => undefined);
@@ -2264,8 +2240,7 @@ async function withRuntimeWorkReceiptClient<T>(
     } catch (error) {
       if (
         isMissingRelationError(error) ||
-        isMissingRuntimeWorkReceiptSelfHealColumnError(error) ||
-        isMissingRuntimeWorkReceiptKeyConstraintError(error)
+        isMissingRuntimeWorkReceiptSelfHealColumnError(error)
       ) {
         runtimeWorkReceiptEnsureCache.delete(
           runtimeWorkReceiptEnsureCacheKey(session),

package/dist/cli/index.js

@@ -623,10 +623,10 @@ var SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: "0.1.215",
+  version: "0.1.217",
   apiContract: "2026-06-dataset-handle-results-hard-cutover",
   supportPolicy: {
-    latest: "0.1.215",
+    latest: "0.1.217",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -13348,7 +13348,9 @@ function normalizeProgressForEnvelope(status, rowsInfo) {
   const pending = getNumericField(progress, "pending") ?? (typeof total === "number" && typeof completed === "number" && typeof failed === "number" ? Math.max(0, total - completed - failed) : null);
   return {
     total,
+    totalRows: total,
     completed,
+    completedRows: completed,
     pending,
     failed,
     executed: getNumericField(progress, "executed"),
@@ -15483,7 +15485,7 @@ async function handleRunsList(args) {
   return 0;
 }
 async function handleRunTail(args) {
-  const usage = "Usage: deepline runs tail <run-id> [--json] [--compact]";
+  const usage = "Usage: deepline runs tail <run-id> [--json | --jsonl] [--compact]";
   let runId;
   try {
     runId = parseRunIdPositional(args, usage);
@@ -15499,13 +15501,18 @@ async function handleRunTail(args) {
       );
       return 1;
     }
-    if (arg.startsWith("--") && arg !== "--json" && arg !== "--compact") {
+    if (arg.startsWith("--") && arg !== "--json" && arg !== "--jsonl" && arg !== "--compact") {
       console.error(`${arg} is not supported by deepline runs tail.`);
       return 1;
     }
   }
+  if (args.includes("--json") && args.includes("--jsonl")) {
+    console.error("--json and --jsonl cannot be used together.");
+    return 1;
+  }
   const client2 = new DeeplineClient();
-  const jsonOutput = argsWantJson(args);
+  const jsonLines = args.includes("--jsonl");
+  const jsonOutput = !jsonLines && argsWantJson(args);
   const compact = args.includes("--compact");
   const compactState = {
     lastLogIndex: 0,
@@ -15515,7 +15522,16 @@ async function handleRunTail(args) {
     lastStatusHeartbeatAt: 0
   };
   const status = await client2.runs.tail(runId, {
-    onEvent: compact && !jsonOutput ? (event) => {
+    onEvent: jsonLines ? (event) => {
+      process.stdout.write(
+        `${JSON.stringify({
+          schemaVersion: 1,
+          kind: "play_run_event",
+          event
+        })}
+`
+      );
+    } : compact && !jsonOutput ? (event) => {
       const transition = getStepTransitionLineFromLiveEvent(
         event,
         compactState
@@ -15545,7 +15561,12 @@ async function handleRunTail(args) {
       );
     }
   });
-  writePlayResult(status, jsonOutput);
+  if (jsonLines) {
+    process.stdout.write(`${JSON.stringify(compactPlayStatus(status))}
+`);
+  } else {
+    writePlayResult(status, jsonOutput);
+  }
   return status.status === "failed" ? 1 : 0;
 }
 async function handleRunLogs(args) {
@@ -16911,19 +16932,26 @@ Examples:
 Notes:
   Streams live run events until the stream ends. Use get for current status and
   logs for persisted log history. In human output, --compact prints deduplicated
-  step transitions and progress instead of the full event stream.
+  step transitions and progress instead of the full event stream. --json emits
+  one terminal package. --jsonl emits canonical live events as JSON Lines and
+  ends with the same compact package shape as runs get --json.
 
 Examples:
   deepline runs tail play/my-play/run/20260501t000000-000
-  deepline runs tail play/my-play/run/20260501t000000-000 --compact --json
+  deepline runs tail play/my-play/run/20260501t000000-000 --compact
+  deepline runs tail play/my-play/run/20260501t000000-000 --jsonl
 `
-  ).option("--json", "Emit JSON output. Also automatic when stdout is piped").option(
+  ).option("--json", "Emit one terminal JSON package after the run completes").option(
+    "--jsonl",
+    "Stream live events as JSON Lines, then the terminal package"
+  ).option(
     "--compact",
-    "Show deduplicated step transitions and progress; compact JSON output"
+    "Show deduplicated human step transitions and progress"
   ).action(async (runId, options) => {
     process.exitCode = await handleRunTail([
       runId,
       ...options.json ? ["--json"] : [],
+      ...options.jsonl ? ["--jsonl"] : [],
       ...options.compact ? ["--compact"] : []
     ]);
   });

package/dist/cli/index.mjs

@@ -608,10 +608,10 @@ var SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: "0.1.215",
+  version: "0.1.217",
   apiContract: "2026-06-dataset-handle-results-hard-cutover",
   supportPolicy: {
-    latest: "0.1.215",
+    latest: "0.1.217",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -13377,7 +13377,9 @@ function normalizeProgressForEnvelope(status, rowsInfo) {
   const pending = getNumericField(progress, "pending") ?? (typeof total === "number" && typeof completed === "number" && typeof failed === "number" ? Math.max(0, total - completed - failed) : null);
   return {
     total,
+    totalRows: total,
     completed,
+    completedRows: completed,
     pending,
     failed,
     executed: getNumericField(progress, "executed"),
@@ -15512,7 +15514,7 @@ async function handleRunsList(args) {
   return 0;
 }
 async function handleRunTail(args) {
-  const usage = "Usage: deepline runs tail <run-id> [--json] [--compact]";
+  const usage = "Usage: deepline runs tail <run-id> [--json | --jsonl] [--compact]";
   let runId;
   try {
     runId = parseRunIdPositional(args, usage);
@@ -15528,13 +15530,18 @@ async function handleRunTail(args) {
       );
       return 1;
     }
-    if (arg.startsWith("--") && arg !== "--json" && arg !== "--compact") {
+    if (arg.startsWith("--") && arg !== "--json" && arg !== "--jsonl" && arg !== "--compact") {
       console.error(`${arg} is not supported by deepline runs tail.`);
       return 1;
     }
   }
+  if (args.includes("--json") && args.includes("--jsonl")) {
+    console.error("--json and --jsonl cannot be used together.");
+    return 1;
+  }
   const client2 = new DeeplineClient();
-  const jsonOutput = argsWantJson(args);
+  const jsonLines = args.includes("--jsonl");
+  const jsonOutput = !jsonLines && argsWantJson(args);
   const compact = args.includes("--compact");
   const compactState = {
     lastLogIndex: 0,
@@ -15544,7 +15551,16 @@ async function handleRunTail(args) {
     lastStatusHeartbeatAt: 0
   };
   const status = await client2.runs.tail(runId, {
-    onEvent: compact && !jsonOutput ? (event) => {
+    onEvent: jsonLines ? (event) => {
+      process.stdout.write(
+        `${JSON.stringify({
+          schemaVersion: 1,
+          kind: "play_run_event",
+          event
+        })}
+`
+      );
+    } : compact && !jsonOutput ? (event) => {
       const transition = getStepTransitionLineFromLiveEvent(
         event,
         compactState
@@ -15574,7 +15590,12 @@ async function handleRunTail(args) {
       );
     }
   });
-  writePlayResult(status, jsonOutput);
+  if (jsonLines) {
+    process.stdout.write(`${JSON.stringify(compactPlayStatus(status))}
+`);
+  } else {
+    writePlayResult(status, jsonOutput);
+  }
   return status.status === "failed" ? 1 : 0;
 }
 async function handleRunLogs(args) {
@@ -16940,19 +16961,26 @@ Examples:
 Notes:
   Streams live run events until the stream ends. Use get for current status and
   logs for persisted log history. In human output, --compact prints deduplicated
-  step transitions and progress instead of the full event stream.
+  step transitions and progress instead of the full event stream. --json emits
+  one terminal package. --jsonl emits canonical live events as JSON Lines and
+  ends with the same compact package shape as runs get --json.
 
 Examples:
   deepline runs tail play/my-play/run/20260501t000000-000
-  deepline runs tail play/my-play/run/20260501t000000-000 --compact --json
+  deepline runs tail play/my-play/run/20260501t000000-000 --compact
+  deepline runs tail play/my-play/run/20260501t000000-000 --jsonl
 `
-  ).option("--json", "Emit JSON output. Also automatic when stdout is piped").option(
+  ).option("--json", "Emit one terminal JSON package after the run completes").option(
+    "--jsonl",
+    "Stream live events as JSON Lines, then the terminal package"
+  ).option(
     "--compact",
-    "Show deduplicated step transitions and progress; compact JSON output"
+    "Show deduplicated human step transitions and progress"
   ).action(async (runId, options) => {
     process.exitCode = await handleRunTail([
       runId,
       ...options.json ? ["--json"] : [],
+      ...options.jsonl ? ["--jsonl"] : [],
       ...options.compact ? ["--compact"] : []
     ]);
   });

package/dist/index.js

@@ -422,10 +422,10 @@ var SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: "0.1.215",
+  version: "0.1.217",
   apiContract: "2026-06-dataset-handle-results-hard-cutover",
   supportPolicy: {
-    latest: "0.1.215",
+    latest: "0.1.217",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [

package/dist/index.mjs

@@ -352,10 +352,10 @@ var SDK_RELEASE = {
   // 0.1.154 removes the short-lived generated enrich StepOptions recompute
   // fields shipped in 0.1.153.
   // 0.1.175 ships loud `deepline enrich` empty-waterfall reporting.
-  version: "0.1.215",
+  version: "0.1.217",
   apiContract: "2026-06-dataset-handle-results-hard-cutover",
   supportPolicy: {
-    latest: "0.1.215",
+    latest: "0.1.217",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.1.215",
+  "version": "0.1.217",
   "description": "Deepline SDK + CLI — B2B data enrichment powered by durable cloud execution",
   "license": "MIT",
   "repository": {

package/dist/bundling-sources/apps/play-runner-workers/src/coordinator-runtime-proxy.ts

@@ -1,34 +0,0 @@
-import {
-  PLAY_RUNTIME_API_CURRENT_PATH,
-  PLAY_RUNTIME_CHILD_EXECUTOR_TOKEN_CURRENT_PATH,
-  PLAY_RUNTIME_EGRESS_FETCH_CURRENT_PATH,
-} from '../../../shared_libs/play-runtime/runtime-api-paths';
-
-/**
- * Paths a credential-isolated Daytona sandbox may send through the
- * coordinator. The sandbox receives the coordinator as its runtime origin so
- * it never holds the Vercel protection-bypass credential; the harness owns the
- * protected upstream hop. Keep this deliberately narrower than the harness
- * allowlist: a coordinator URL is public, while the harness is a service
- * binding.
- */
-export function isCoordinatorRuntimeProxyPath(pathname: string): boolean {
-  return (
-    pathname === PLAY_RUNTIME_API_CURRENT_PATH ||
-    pathname === PLAY_RUNTIME_CHILD_EXECUTOR_TOKEN_CURRENT_PATH ||
-    pathname === PLAY_RUNTIME_EGRESS_FETCH_CURRENT_PATH ||
-    pathname === '/api/v2/plays/run' ||
-    /^\/api\/v2\/plays\/runtime-tools\/[^/]+(?:\/(?:auth-scope|event-wait))?$/.test(
-      pathname,
-    ) ||
-    /^\/api\/v2\/integrations\/[^/]+\/(?:execute|stream)$/.test(pathname)
-  );
-}
-
-export function executorTokenFromAuthorizationHeader(
-  authorization: string | null,
-): string | null {
-  const match = /^Bearer\s+(.+)$/i.exec(authorization?.trim() ?? '');
-  const token = match?.[1]?.trim();
-  return token || null;
-}