deepline 0.1.248 → 0.1.250

package/dist/bundling-sources/sdk/src/client.ts

@@ -80,6 +80,13 @@ import type {
 import type { PlayStagedFileRef } from './plays/local-file-discovery.js';
 import type { PlayCompilerManifest } from '../../shared_libs/plays/compiler-manifest.js';
 import type { EnrichCompiledConfig } from './cli/enrich-play-compiler.js';
+import { RUNTIME_ENVIRONMENT_TOKEN_HEADER } from '../../shared_libs/play-runtime/coordinator-headers.js';
+import {
+  normalizePlayRuntimeEnvironment,
+  normalizePlayRuntimeNamespace,
+  normalizePlayRuntimeSelection,
+  type PlayRuntimeSelection,
+} from '../../shared_libs/play-runtime/runtime-environment.js';
 
 const TERMINAL_PLAY_STATUSES = new Set(['completed', 'failed', 'cancelled']);
 const INCLUDE_TOOL_METADATA_HEADER = 'x-deepline-include-tool-metadata';
@@ -109,6 +116,75 @@ function resolvePlayRunIntegrationMode(
   );
 }
 
+function resolvePlayRunRuntimeSelection(
+  request: StartPlayRunRequest,
+): PlayRuntimeSelection | undefined {
+  if (request.runtime !== undefined) {
+    const runtime = normalizePlayRuntimeSelection(request.runtime);
+    if (!runtime) {
+      throw new DeeplineError(
+        'runtime must be exactly { environment: "preview", namespace } with namespace matching ^[a-z][a-z0-9-]{0,30}$.',
+        undefined,
+        'INVALID_RUNTIME_SELECTION',
+      );
+    }
+    return runtime;
+  }
+  // These variables select where the app executes a run, not which app the
+  // SDK calls. DEEPLINE_API_BASE_URL still chooses the app host. Environment
+  // opts into remote preview routing, namespace names the isolated lane, and
+  // the token only authorizes that selection. Omitting all three leaves the
+  // app free to use its native runtime (local for a local app, prod for prod).
+  const configured = process.env.DEEPLINE_RUNTIME_ENVIRONMENT?.trim();
+  const configuredNamespace = process.env.DEEPLINE_RUNTIME_NAMESPACE?.trim();
+  const configuredToken =
+    process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  if (!configured) {
+    if (configuredNamespace || configuredToken) {
+      throw new DeeplineError(
+        'DEEPLINE_RUNTIME_ENVIRONMENT=preview and DEEPLINE_RUNTIME_NAMESPACE are required when runtime selection configuration is present.',
+        undefined,
+        'INVALID_RUNTIME_ENVIRONMENT',
+      );
+    }
+    return undefined;
+  }
+  const environment = normalizePlayRuntimeEnvironment(configured);
+  if (!environment) {
+    throw new DeeplineError(
+      `DEEPLINE_RUNTIME_ENVIRONMENT supports only explicit preview selection. Received "${configured}". Omit it to use the app-native runtime.`,
+      undefined,
+      'INVALID_RUNTIME_ENVIRONMENT',
+    );
+  }
+  const namespace = normalizePlayRuntimeNamespace(configuredNamespace);
+  if (!namespace) {
+    throw new DeeplineError(
+      'DEEPLINE_RUNTIME_NAMESPACE is required for preview and must match ^[a-z][a-z0-9-]{0,30}$.',
+      undefined,
+      'INVALID_RUNTIME_NAMESPACE',
+    );
+  }
+  return { environment, namespace };
+}
+
+function runtimeSelectionHeaders(
+  runtime: PlayRuntimeSelection | undefined,
+): Record<string, string> | undefined {
+  if (!runtime) return undefined;
+  // Keep the credential out of the typed runtime payload. The app consumes it
+  // at the HTTP boundary and never forwards it to Fly, Absurd, or Daytona.
+  const token = process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  if (!token) {
+    throw new DeeplineError(
+      'DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN is required for explicit preview runtime selection.',
+      undefined,
+      'RUNTIME_ENVIRONMENT_TOKEN_REQUIRED',
+    );
+  }
+  return { [RUNTIME_ENVIRONMENT_TOKEN_HEADER]: token };
+}
+
 function normalizeTestPolicyOverrides(
   value: unknown,
   source: string,
@@ -1577,6 +1653,7 @@ export class DeeplineClient {
     const testPolicyOverrides =
       request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
+    const runtime = resolvePlayRunRuntimeSelection(request);
     const response = await this.http.post<Record<string, unknown>>(
       '/api/v2/plays/run',
       {
@@ -1619,9 +1696,10 @@ export class DeeplineClient {
         // defaults to absurd; callers normally omit this field.
         ...(request.profile ? { profile: request.profile } : {}),
         ...(integrationMode ? { integrationMode } : {}),
+        ...(runtime ? { runtime } : {}),
         ...(testPolicyOverrides ? { testPolicyOverrides } : {}),
       },
-      undefined,
+      runtimeSelectionHeaders(runtime),
       // A start can reach the server even when its response is lost or times
       // out. Retrying this mutation without an idempotency key can create a
       // second root run, so callers must resolve ambiguous failures explicitly.
@@ -1649,6 +1727,7 @@ export class DeeplineClient {
     const testPolicyOverrides =
       request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
+    const runtime = resolvePlayRunRuntimeSelection(request);
     const body = {
       ...(request.name ? { name: request.name } : {}),
       ...(request.revisionId ? { revisionId: request.revisionId } : {}),
@@ -1687,6 +1766,7 @@ export class DeeplineClient {
         : {}),
       ...(request.profile ? { profile: request.profile } : {}),
       ...(integrationMode ? { integrationMode } : {}),
+      ...(runtime ? { runtime } : {}),
       ...(testPolicyOverrides ? { testPolicyOverrides } : {}),
     };
     for await (const event of this.http.streamSse<PlayLiveEvent>(
@@ -1694,6 +1774,7 @@ export class DeeplineClient {
       {
         method: 'POST',
         body,
+        headers: runtimeSelectionHeaders(runtime),
         signal: options?.signal,
       },
     )) {

package/dist/bundling-sources/sdk/src/release.ts

@@ -113,7 +113,7 @@ export const SDK_RELEASE = {
   // runtime intentionally no longer compiles at publish or launch time.
   // 0.1.242 removes the retired Workers/ESM compiler, generated bundles, and
   // deploy-time artifact migration. Play authoring now has one CJS contract.
-  version: '0.1.248',
+  version: '0.1.250',
   apiContract: '2026-07-cjs-absurd-only-play-runtime-hard-cutover',
   supportPolicy: {
     minimumSupported: '0.1.53',

package/dist/bundling-sources/sdk/src/types.ts

@@ -1,4 +1,5 @@
 import type { PlayCompilerManifest } from '../../shared_libs/plays/compiler-manifest';
+import type { PlayRuntimeSelection } from '../../shared_libs/play-runtime/runtime-environment';
 import type {
   DeeplineToolCategory,
   PlayBootstrapFinderKind,
@@ -1226,6 +1227,8 @@ export interface StartPlayRunRequest {
   profile?: string;
   /** Optional per-run provider execution mode for eval/smoke runs. */
   integrationMode?: 'live' | 'eval_stub' | 'fixture';
+  /** Internal runtime estate selection. The app host remains unchanged. */
+  runtime?: PlayRuntimeSelection;
   /** Internal/dev-only runtime policy overrides for black-box durability tests. */
   testPolicyOverrides?: Record<string, unknown>;
 }

package/dist/bundling-sources/shared_libs/play-runtime/context.ts

@@ -6997,7 +6997,9 @@ export class PlayContextImpl {
                 Object.fromEntries(response.headers.entries()),
               ) as Record<string, string>,
               bodyText: redactedBodyText,
-              json: this.secretRedactor.redact(parseJsonOrNull(bodyText)),
+              json: this.secretRedactor.redactKnownSecrets(
+                parseJsonOrNull(bodyText),
+              ),
             };
 
             this.checkpoint.resolvedBoundaries = {

package/dist/bundling-sources/shared_libs/play-runtime/coordinator-headers.ts

@@ -28,6 +28,13 @@ export const WORKER_CALLBACK_URL_OVERRIDE_HEADER =
   'x-deepline-worker-callback-url';
 export const RUNTIME_SCHEDULER_SCHEMA_OVERRIDE_HEADER =
   'x-deepline-runtime-scheduler-schema';
+/**
+ * CLI-to-app credential used only to authorize a typed runtime-environment
+ * selection. It is deliberately separate from the coordinator credential:
+ * selecting an approved environment must not grant access to runtime callbacks.
+ */
+export const RUNTIME_ENVIRONMENT_TOKEN_HEADER =
+  'x-deepline-runtime-environment-token';
 /**
  * Internal top-level `profile=absurd` launches, including deploy canaries, use
  * this header to pin an exact candidate release before activation. Public API

package/dist/bundling-sources/shared_libs/play-runtime/daytona-runtime-config.ts

@@ -27,10 +27,17 @@ export function daytonaClientOptions(apiKey: string): DaytonaClientOptions {
   };
 }
 
-export function loadDaytonaRequiredConfig(): DaytonaRequiredConfig {
-  const apiKey = process.env.DAYTONA_API_KEY?.trim();
+export function loadDaytonaRequiredConfig(
+  options: {
+    environment?: 'preview' | 'production' | null;
+  } = {},
+): DaytonaRequiredConfig {
+  const environment = options.environment ?? null;
+  const keyName =
+    environment === 'preview' ? 'DAYTONA_API_KEY_PREVIEW' : 'DAYTONA_API_KEY';
+  const apiKey = process.env[keyName]?.trim();
   if (!apiKey) {
-    throw new Error('Missing required Daytona configuration: DAYTONA_API_KEY.');
+    throw new Error(`Missing required Daytona configuration: ${keyName}.`);
   }
   return {
     apiKey,

package/dist/bundling-sources/shared_libs/play-runtime/runner-backends/backends/daytona.ts

@@ -624,6 +624,10 @@ export const daytonaPlayRunnerBackend: PlayRunnerBackend = {
         await callbacks?.onRuntimeResourceAcquired?.({
           kind: 'daytona_sandbox',
           sandboxId: sandbox.id,
+          daytonaEnvironment:
+            process.env.DEEPLINE_RUNTIME_ENVIRONMENT === 'preview'
+              ? 'preview'
+              : 'production',
           billingStartedAt: acquired.billingStartedAt,
           billingEndedAt,
           cpu: typeof sandbox.cpu === 'number' ? sandbox.cpu : null,

package/dist/bundling-sources/shared_libs/play-runtime/runner-backends/types.ts

@@ -12,6 +12,7 @@ import type {
 export type PlayRunnerRuntimeResource = {
   kind: 'daytona_sandbox';
   sandboxId: string;
+  daytonaEnvironment?: 'preview' | 'production';
   billingStartedAt: number;
   billingEndedAt?: number | null;
   terminalReason?: RuntimeResourceTerminalReason | null;

package/dist/bundling-sources/shared_libs/play-runtime/runtime-environment.ts

@@ -0,0 +1,44 @@
+export const PLAY_RUNTIME_ENVIRONMENTS = ['preview'] as const;
+
+export type PlayRuntimeEnvironment = (typeof PLAY_RUNTIME_ENVIRONMENTS)[number];
+
+export type PlayRuntimeSelection = {
+  environment: 'preview';
+  /** Caller-named isolation scope inside a remote runtime environment. */
+  namespace: string;
+};
+
+const PLAY_RUNTIME_NAMESPACE_PATTERN = /^[a-z][a-z0-9-]{0,30}$/;
+
+export function normalizePlayRuntimeNamespace(value: unknown): string | null {
+  if (typeof value !== 'string') return null;
+  const normalized = value.trim();
+  return PLAY_RUNTIME_NAMESPACE_PATTERN.test(normalized) ? normalized : null;
+}
+
+/** Validate the selector as one value so the SDK and server cannot drift. */
+export function normalizePlayRuntimeSelection(
+  value: unknown,
+): PlayRuntimeSelection | null {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return null;
+  const record = value as Record<string, unknown>;
+  if (
+    Object.keys(record).some(
+      (key) => key !== 'environment' && key !== 'namespace',
+    ) ||
+    record.environment !== 'preview'
+  ) {
+    return null;
+  }
+  const namespace = normalizePlayRuntimeNamespace(record.namespace);
+  return namespace ? { environment: 'preview', namespace } : null;
+}
+
+export function normalizePlayRuntimeEnvironment(
+  value: unknown,
+): PlayRuntimeEnvironment | null {
+  return typeof value === 'string' &&
+    PLAY_RUNTIME_ENVIRONMENTS.includes(value as PlayRuntimeEnvironment)
+    ? (value as PlayRuntimeEnvironment)
+    : null;
+}

package/dist/bundling-sources/shared_libs/play-runtime/secret-redaction.ts

@@ -76,6 +76,7 @@ export function redactSecretLikeString(value: string): string {
 export type SecretRedactionContext = {
   register(value: string): void;
   redactString(value: string): string;
+  redactKnownSecrets<T>(value: T): T;
   redact<T>(value: T): T;
 };
 
@@ -129,9 +130,26 @@ export function createSecretRedactionContext(
     return value;
   }
 
+  function redactKnownSecrets<T>(value: T): T {
+    if (typeof value === 'string') return redactString(value) as T;
+    if (Array.isArray(value)) {
+      return value.map((entry) => redactKnownSecrets(entry)) as T;
+    }
+    if (value && typeof value === 'object') {
+      return Object.fromEntries(
+        Object.entries(value).map(([key, entry]) => [
+          key,
+          redactKnownSecrets(entry),
+        ]),
+      ) as T;
+    }
+    return value;
+  }
+
   return {
     register,
     redactString,
+    redactKnownSecrets,
     redact,
   };
 }

package/dist/cli/index.js

@@ -632,7 +632,7 @@ var SDK_RELEASE = {
   // runtime intentionally no longer compiles at publish or launch time.
   // 0.1.242 removes the retired Workers/ESM compiler, generated bundles, and
   // deploy-time artifact migration. Play authoring now has one CJS contract.
-  version: "0.1.248",
+  version: "0.1.250",
   apiContract: "2026-07-cjs-absurd-only-play-runtime-hard-cutover",
   supportPolicy: {
     minimumSupported: "0.1.53",
@@ -790,6 +790,7 @@ var COORDINATOR_INTERNAL_TOKEN_HEADER = "x-deepline-internal-token";
 var COORDINATOR_URL_OVERRIDE_HEADER = "x-deepline-coordinator-url";
 var WORKER_CALLBACK_URL_OVERRIDE_HEADER = "x-deepline-worker-callback-url";
 var RUNTIME_SCHEDULER_SCHEMA_OVERRIDE_HEADER = "x-deepline-runtime-scheduler-schema";
+var RUNTIME_ENVIRONMENT_TOKEN_HEADER = "x-deepline-runtime-environment-token";
 var ABSURD_RELEASE_OVERRIDE_HEADER = "x-deepline-absurd-release";
 var SYNTHETIC_RUN_HEADER = "x-deepline-synthetic-run";
 
@@ -1454,9 +1455,25 @@ function createSecretRedactionContext(initialValues = []) {
     }
     return value;
   }
+  function redactKnownSecrets(value) {
+    if (typeof value === "string") return redactString(value);
+    if (Array.isArray(value)) {
+      return value.map((entry) => redactKnownSecrets(entry));
+    }
+    if (value && typeof value === "object") {
+      return Object.fromEntries(
+        Object.entries(value).map(([key, entry]) => [
+          key,
+          redactKnownSecrets(entry)
+        ])
+      );
+    }
+    return value;
+  }
   return {
     register,
     redactString,
+    redactKnownSecrets,
     redact
   };
 }
@@ -2363,6 +2380,29 @@ async function* observeRunEvents(options) {
   }
 }
 
+// ../shared_libs/play-runtime/runtime-environment.ts
+var PLAY_RUNTIME_ENVIRONMENTS = ["preview"];
+var PLAY_RUNTIME_NAMESPACE_PATTERN = /^[a-z][a-z0-9-]{0,30}$/;
+function normalizePlayRuntimeNamespace(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return PLAY_RUNTIME_NAMESPACE_PATTERN.test(normalized) ? normalized : null;
+}
+function normalizePlayRuntimeSelection(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const record = value;
+  if (Object.keys(record).some(
+    (key) => key !== "environment" && key !== "namespace"
+  ) || record.environment !== "preview") {
+    return null;
+  }
+  const namespace = normalizePlayRuntimeNamespace(record.namespace);
+  return namespace ? { environment: "preview", namespace } : null;
+}
+function normalizePlayRuntimeEnvironment(value) {
+  return typeof value === "string" && PLAY_RUNTIME_ENVIRONMENTS.includes(value) ? value : null;
+}
+
 // src/client.ts
 var TERMINAL_PLAY_STATUSES = /* @__PURE__ */ new Set(["completed", "failed", "cancelled"]);
 var INCLUDE_TOOL_METADATA_HEADER = "x-deepline-include-tool-metadata";
@@ -2385,6 +2425,61 @@ function resolvePlayRunIntegrationMode(request) {
     request.integrationMode ?? process.env.DEEPLINE_EVAL_INTEGRATION_MODE
   );
 }
+function resolvePlayRunRuntimeSelection(request) {
+  if (request.runtime !== void 0) {
+    const runtime = normalizePlayRuntimeSelection(request.runtime);
+    if (!runtime) {
+      throw new DeeplineError(
+        'runtime must be exactly { environment: "preview", namespace } with namespace matching ^[a-z][a-z0-9-]{0,30}$.',
+        void 0,
+        "INVALID_RUNTIME_SELECTION"
+      );
+    }
+    return runtime;
+  }
+  const configured = process.env.DEEPLINE_RUNTIME_ENVIRONMENT?.trim();
+  const configuredNamespace = process.env.DEEPLINE_RUNTIME_NAMESPACE?.trim();
+  const configuredToken = process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  if (!configured) {
+    if (configuredNamespace || configuredToken) {
+      throw new DeeplineError(
+        "DEEPLINE_RUNTIME_ENVIRONMENT=preview and DEEPLINE_RUNTIME_NAMESPACE are required when runtime selection configuration is present.",
+        void 0,
+        "INVALID_RUNTIME_ENVIRONMENT"
+      );
+    }
+    return void 0;
+  }
+  const environment = normalizePlayRuntimeEnvironment(configured);
+  if (!environment) {
+    throw new DeeplineError(
+      `DEEPLINE_RUNTIME_ENVIRONMENT supports only explicit preview selection. Received "${configured}". Omit it to use the app-native runtime.`,
+      void 0,
+      "INVALID_RUNTIME_ENVIRONMENT"
+    );
+  }
+  const namespace = normalizePlayRuntimeNamespace(configuredNamespace);
+  if (!namespace) {
+    throw new DeeplineError(
+      "DEEPLINE_RUNTIME_NAMESPACE is required for preview and must match ^[a-z][a-z0-9-]{0,30}$.",
+      void 0,
+      "INVALID_RUNTIME_NAMESPACE"
+    );
+  }
+  return { environment, namespace };
+}
+function runtimeSelectionHeaders(runtime) {
+  if (!runtime) return void 0;
+  const token = process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  if (!token) {
+    throw new DeeplineError(
+      "DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN is required for explicit preview runtime selection.",
+      void 0,
+      "RUNTIME_ENVIRONMENT_TOKEN_REQUIRED"
+    );
+  }
+  return { [RUNTIME_ENVIRONMENT_TOKEN_HEADER]: token };
+}
 function normalizeTestPolicyOverrides(value, source) {
   if (value && typeof value === "object" && !Array.isArray(value)) {
     return value;
@@ -3083,6 +3178,7 @@ var DeeplineClient = class {
     const integrationMode = resolvePlayRunIntegrationMode(request);
     const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
+    const runtime = resolvePlayRunRuntimeSelection(request);
     const response = await this.http.post(
       "/api/v2/plays/run",
       {
@@ -3109,9 +3205,10 @@ var DeeplineClient = class {
         // defaults to absurd; callers normally omit this field.
         ...request.profile ? { profile: request.profile } : {},
         ...integrationMode ? { integrationMode } : {},
+        ...runtime ? { runtime } : {},
         ...testPolicyOverrides ? { testPolicyOverrides } : {}
       },
-      void 0,
+      runtimeSelectionHeaders(runtime),
       // A start can reach the server even when its response is lost or times
       // out. Retrying this mutation without an idempotency key can create a
       // second root run, so callers must resolve ambiguous failures explicitly.
@@ -3134,6 +3231,7 @@ var DeeplineClient = class {
     const integrationMode = resolvePlayRunIntegrationMode(request);
     const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
+    const runtime = resolvePlayRunRuntimeSelection(request);
     const body = {
       ...request.name ? { name: request.name } : {},
       ...request.revisionId ? { revisionId: request.revisionId } : {},
@@ -3156,6 +3254,7 @@ var DeeplineClient = class {
       ...typeof request.waitForCompletionMs === "number" ? { waitForCompletionMs: request.waitForCompletionMs } : {},
       ...request.profile ? { profile: request.profile } : {},
       ...integrationMode ? { integrationMode } : {},
+      ...runtime ? { runtime } : {},
       ...testPolicyOverrides ? { testPolicyOverrides } : {}
     };
     for await (const event of this.http.streamSse(
@@ -3163,6 +3262,7 @@ var DeeplineClient = class {
       {
         method: "POST",
         body,
+        headers: runtimeSelectionHeaders(runtime),
         signal: options?.signal
       }
     )) {
@@ -24350,24 +24450,42 @@ function renderAvailableToolsText(payload) {
   const returned = asFiniteNumber(payload.returned) ?? tools.length;
   const total = asFiniteNumber(payload.total);
   const lines = [
-    total !== void 0 ? `Monitor tools you can deploy (${returned} of ${total}):` : "Monitor tools you can deploy:"
+    total !== void 0 ? `Signal Radar types you can deploy (${returned} of ${total}):` : "Signal Radar types you can deploy:"
   ];
+  let currentProvider;
   for (const raw of tools) {
     const entry = asRecord(raw);
     const id = entry ? asString(entry.tool) : void 0;
     if (!entry || !id) continue;
     const name = asString(entry.name) ?? asString(entry.display_name);
     const deployedCount = asFiniteNumber(entry.deployed_count);
+    const description = asString(entry.description);
+    const streams = Array.isArray(entry.streams) ? entry.streams.map((stream) => asString(stream)).filter((stream) => Boolean(stream)) : [];
+    const provider = id.split(".")[0];
+    if (provider && provider !== currentProvider) {
+      currentProvider = provider;
+      lines.push("", `  ${provider}:`);
+    }
     lines.push(
-      `  ${id}${name ? ` \u2014 ${name}` : ""}${deployedCount !== void 0 ? `  (deployed: ${deployedCount})` : ""}`
+      `    ${id.split(".").slice(1).join(".") || id}${name ? ` \u2014 ${name}` : ""}${deployedCount !== void 0 ? `  (${deployedCount} deployed)` : ""}`
     );
+    if (description) lines.push(`      ${description}`);
+    if (streams.length > 0) {
+      lines.push(`      emits: ${streams.join(", ")}`);
+    }
   }
   if (payload.is_truncated === true) {
     lines.push("List truncated; raise --limit to see more.");
   }
   lines.push(
     "",
-    "Describe one (payload schema + output streams): deepline monitors available <tool-id> --json"
+    "Next:",
+    "  Inspect payload fields, output columns, and a play binding:",
+    "    deepline monitors available <provider.tool> --json",
+    "  See monitors already deployed in this workspace:",
+    "    deepline monitors list",
+    "  Validate a monitor definition before deploying:",
+    `    deepline monitors check '{"key":"my-radar","tool":"<provider.tool>","payload":{...}}'`
   );
   return `${lines.join("\n")}
 `;

package/dist/cli/index.mjs

@@ -617,7 +617,7 @@ var SDK_RELEASE = {
   // runtime intentionally no longer compiles at publish or launch time.
   // 0.1.242 removes the retired Workers/ESM compiler, generated bundles, and
   // deploy-time artifact migration. Play authoring now has one CJS contract.
-  version: "0.1.248",
+  version: "0.1.250",
   apiContract: "2026-07-cjs-absurd-only-play-runtime-hard-cutover",
   supportPolicy: {
     minimumSupported: "0.1.53",
@@ -775,6 +775,7 @@ var COORDINATOR_INTERNAL_TOKEN_HEADER = "x-deepline-internal-token";
 var COORDINATOR_URL_OVERRIDE_HEADER = "x-deepline-coordinator-url";
 var WORKER_CALLBACK_URL_OVERRIDE_HEADER = "x-deepline-worker-callback-url";
 var RUNTIME_SCHEDULER_SCHEMA_OVERRIDE_HEADER = "x-deepline-runtime-scheduler-schema";
+var RUNTIME_ENVIRONMENT_TOKEN_HEADER = "x-deepline-runtime-environment-token";
 var ABSURD_RELEASE_OVERRIDE_HEADER = "x-deepline-absurd-release";
 var SYNTHETIC_RUN_HEADER = "x-deepline-synthetic-run";
 
@@ -1439,9 +1440,25 @@ function createSecretRedactionContext(initialValues = []) {
     }
     return value;
   }
+  function redactKnownSecrets(value) {
+    if (typeof value === "string") return redactString(value);
+    if (Array.isArray(value)) {
+      return value.map((entry) => redactKnownSecrets(entry));
+    }
+    if (value && typeof value === "object") {
+      return Object.fromEntries(
+        Object.entries(value).map(([key, entry]) => [
+          key,
+          redactKnownSecrets(entry)
+        ])
+      );
+    }
+    return value;
+  }
   return {
     register,
     redactString,
+    redactKnownSecrets,
     redact
   };
 }
@@ -2348,6 +2365,29 @@ async function* observeRunEvents(options) {
   }
 }
 
+// ../shared_libs/play-runtime/runtime-environment.ts
+var PLAY_RUNTIME_ENVIRONMENTS = ["preview"];
+var PLAY_RUNTIME_NAMESPACE_PATTERN = /^[a-z][a-z0-9-]{0,30}$/;
+function normalizePlayRuntimeNamespace(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return PLAY_RUNTIME_NAMESPACE_PATTERN.test(normalized) ? normalized : null;
+}
+function normalizePlayRuntimeSelection(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const record = value;
+  if (Object.keys(record).some(
+    (key) => key !== "environment" && key !== "namespace"
+  ) || record.environment !== "preview") {
+    return null;
+  }
+  const namespace = normalizePlayRuntimeNamespace(record.namespace);
+  return namespace ? { environment: "preview", namespace } : null;
+}
+function normalizePlayRuntimeEnvironment(value) {
+  return typeof value === "string" && PLAY_RUNTIME_ENVIRONMENTS.includes(value) ? value : null;
+}
+
 // src/client.ts
 var TERMINAL_PLAY_STATUSES = /* @__PURE__ */ new Set(["completed", "failed", "cancelled"]);
 var INCLUDE_TOOL_METADATA_HEADER = "x-deepline-include-tool-metadata";
@@ -2370,6 +2410,61 @@ function resolvePlayRunIntegrationMode(request) {
     request.integrationMode ?? process.env.DEEPLINE_EVAL_INTEGRATION_MODE
   );
 }
+function resolvePlayRunRuntimeSelection(request) {
+  if (request.runtime !== void 0) {
+    const runtime = normalizePlayRuntimeSelection(request.runtime);
+    if (!runtime) {
+      throw new DeeplineError(
+        'runtime must be exactly { environment: "preview", namespace } with namespace matching ^[a-z][a-z0-9-]{0,30}$.',
+        void 0,
+        "INVALID_RUNTIME_SELECTION"
+      );
+    }
+    return runtime;
+  }
+  const configured = process.env.DEEPLINE_RUNTIME_ENVIRONMENT?.trim();
+  const configuredNamespace = process.env.DEEPLINE_RUNTIME_NAMESPACE?.trim();
+  const configuredToken = process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  if (!configured) {
+    if (configuredNamespace || configuredToken) {
+      throw new DeeplineError(
+        "DEEPLINE_RUNTIME_ENVIRONMENT=preview and DEEPLINE_RUNTIME_NAMESPACE are required when runtime selection configuration is present.",
+        void 0,
+        "INVALID_RUNTIME_ENVIRONMENT"
+      );
+    }
+    return void 0;
+  }
+  const environment = normalizePlayRuntimeEnvironment(configured);
+  if (!environment) {
+    throw new DeeplineError(
+      `DEEPLINE_RUNTIME_ENVIRONMENT supports only explicit preview selection. Received "${configured}". Omit it to use the app-native runtime.`,
+      void 0,
+      "INVALID_RUNTIME_ENVIRONMENT"
+    );
+  }
+  const namespace = normalizePlayRuntimeNamespace(configuredNamespace);
+  if (!namespace) {
+    throw new DeeplineError(
+      "DEEPLINE_RUNTIME_NAMESPACE is required for preview and must match ^[a-z][a-z0-9-]{0,30}$.",
+      void 0,
+      "INVALID_RUNTIME_NAMESPACE"
+    );
+  }
+  return { environment, namespace };
+}
+function runtimeSelectionHeaders(runtime) {
+  if (!runtime) return void 0;
+  const token = process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  if (!token) {
+    throw new DeeplineError(
+      "DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN is required for explicit preview runtime selection.",
+      void 0,
+      "RUNTIME_ENVIRONMENT_TOKEN_REQUIRED"
+    );
+  }
+  return { [RUNTIME_ENVIRONMENT_TOKEN_HEADER]: token };
+}
 function normalizeTestPolicyOverrides(value, source) {
   if (value && typeof value === "object" && !Array.isArray(value)) {
     return value;
@@ -3068,6 +3163,7 @@ var DeeplineClient = class {
     const integrationMode = resolvePlayRunIntegrationMode(request);
     const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
+    const runtime = resolvePlayRunRuntimeSelection(request);
     const response = await this.http.post(
       "/api/v2/plays/run",
       {
@@ -3094,9 +3190,10 @@ var DeeplineClient = class {
         // defaults to absurd; callers normally omit this field.
         ...request.profile ? { profile: request.profile } : {},
         ...integrationMode ? { integrationMode } : {},
+        ...runtime ? { runtime } : {},
         ...testPolicyOverrides ? { testPolicyOverrides } : {}
       },
-      void 0,
+      runtimeSelectionHeaders(runtime),
       // A start can reach the server even when its response is lost or times
       // out. Retrying this mutation without an idempotency key can create a
       // second root run, so callers must resolve ambiguous failures explicitly.
@@ -3119,6 +3216,7 @@ var DeeplineClient = class {
     const integrationMode = resolvePlayRunIntegrationMode(request);
     const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
+    const runtime = resolvePlayRunRuntimeSelection(request);
     const body = {
       ...request.name ? { name: request.name } : {},
       ...request.revisionId ? { revisionId: request.revisionId } : {},
@@ -3141,6 +3239,7 @@ var DeeplineClient = class {
       ...typeof request.waitForCompletionMs === "number" ? { waitForCompletionMs: request.waitForCompletionMs } : {},
       ...request.profile ? { profile: request.profile } : {},
       ...integrationMode ? { integrationMode } : {},
+      ...runtime ? { runtime } : {},
       ...testPolicyOverrides ? { testPolicyOverrides } : {}
     };
     for await (const event of this.http.streamSse(
@@ -3148,6 +3247,7 @@ var DeeplineClient = class {
       {
         method: "POST",
         body,
+        headers: runtimeSelectionHeaders(runtime),
         signal: options?.signal
       }
     )) {
@@ -24386,24 +24486,42 @@ function renderAvailableToolsText(payload) {
   const returned = asFiniteNumber(payload.returned) ?? tools.length;
   const total = asFiniteNumber(payload.total);
   const lines = [
-    total !== void 0 ? `Monitor tools you can deploy (${returned} of ${total}):` : "Monitor tools you can deploy:"
+    total !== void 0 ? `Signal Radar types you can deploy (${returned} of ${total}):` : "Signal Radar types you can deploy:"
   ];
+  let currentProvider;
   for (const raw of tools) {
     const entry = asRecord(raw);
     const id = entry ? asString(entry.tool) : void 0;
     if (!entry || !id) continue;
     const name = asString(entry.name) ?? asString(entry.display_name);
     const deployedCount = asFiniteNumber(entry.deployed_count);
+    const description = asString(entry.description);
+    const streams = Array.isArray(entry.streams) ? entry.streams.map((stream) => asString(stream)).filter((stream) => Boolean(stream)) : [];
+    const provider = id.split(".")[0];
+    if (provider && provider !== currentProvider) {
+      currentProvider = provider;
+      lines.push("", `  ${provider}:`);
+    }
     lines.push(
-      `  ${id}${name ? ` \u2014 ${name}` : ""}${deployedCount !== void 0 ? `  (deployed: ${deployedCount})` : ""}`
+      `    ${id.split(".").slice(1).join(".") || id}${name ? ` \u2014 ${name}` : ""}${deployedCount !== void 0 ? `  (${deployedCount} deployed)` : ""}`
     );
+    if (description) lines.push(`      ${description}`);
+    if (streams.length > 0) {
+      lines.push(`      emits: ${streams.join(", ")}`);
+    }
   }
   if (payload.is_truncated === true) {
     lines.push("List truncated; raise --limit to see more.");
   }
   lines.push(
     "",
-    "Describe one (payload schema + output streams): deepline monitors available <tool-id> --json"
+    "Next:",
+    "  Inspect payload fields, output columns, and a play binding:",
+    "    deepline monitors available <provider.tool> --json",
+    "  See monitors already deployed in this workspace:",
+    "    deepline monitors list",
+    "  Validate a monitor definition before deploying:",
+    `    deepline monitors check '{"key":"my-radar","tool":"<provider.tool>","payload":{...}}'`
   );
   return `${lines.join("\n")}
 `;

package/dist/index.d.mts

@@ -1,5 +1,11 @@
 import { a as PlayCompilerManifest } from './compiler-manifest-DlE7dnRm.mjs';
 
+type PlayRuntimeSelection = {
+    environment: 'preview';
+    /** Caller-named isolation scope inside a remote runtime environment. */
+    namespace: string;
+};
+
 declare const DEEPLINE_TOOL_CATEGORIES: readonly ["company_search", "people_search", "people_enrich", "email_finder", "email_verify", "phone_finder", "phone_verify", "identity_resolution", "reverse_lookup", "enrichment", "batch", "premium", "free"];
 type DeeplineToolCategory = (typeof DEEPLINE_TOOL_CATEGORIES)[number] | (string & {});
 declare const PLAY_BOOTSTRAP_TEMPLATES: readonly ["people-list", "company-list", "people-email", "people-phone", "company-people", "company-people-email", "company-people-phone"];
@@ -1194,6 +1200,8 @@ interface StartPlayRunRequest {
     profile?: string;
     /** Optional per-run provider execution mode for eval/smoke runs. */
     integrationMode?: 'live' | 'eval_stub' | 'fixture';
+    /** Internal runtime estate selection. The app host remains unchanged. */
+    runtime?: PlayRuntimeSelection;
     /** Internal/dev-only runtime policy overrides for black-box durability tests. */
     testPolicyOverrides?: Record<string, unknown>;
 }

package/dist/index.d.ts

@@ -1,5 +1,11 @@
 import { a as PlayCompilerManifest } from './compiler-manifest-DlE7dnRm.js';
 
+type PlayRuntimeSelection = {
+    environment: 'preview';
+    /** Caller-named isolation scope inside a remote runtime environment. */
+    namespace: string;
+};
+
 declare const DEEPLINE_TOOL_CATEGORIES: readonly ["company_search", "people_search", "people_enrich", "email_finder", "email_verify", "phone_finder", "phone_verify", "identity_resolution", "reverse_lookup", "enrichment", "batch", "premium", "free"];
 type DeeplineToolCategory = (typeof DEEPLINE_TOOL_CATEGORIES)[number] | (string & {});
 declare const PLAY_BOOTSTRAP_TEMPLATES: readonly ["people-list", "company-list", "people-email", "people-phone", "company-people", "company-people-email", "company-people-phone"];
@@ -1194,6 +1200,8 @@ interface StartPlayRunRequest {
     profile?: string;
     /** Optional per-run provider execution mode for eval/smoke runs. */
     integrationMode?: 'live' | 'eval_stub' | 'fixture';
+    /** Internal runtime estate selection. The app host remains unchanged. */
+    runtime?: PlayRuntimeSelection;
     /** Internal/dev-only runtime policy overrides for black-box durability tests. */
     testPolicyOverrides?: Record<string, unknown>;
 }

package/dist/index.js

@@ -431,7 +431,7 @@ var SDK_RELEASE = {
   // runtime intentionally no longer compiles at publish or launch time.
   // 0.1.242 removes the retired Workers/ESM compiler, generated bundles, and
   // deploy-time artifact migration. Play authoring now has one CJS contract.
-  version: "0.1.248",
+  version: "0.1.250",
   apiContract: "2026-07-cjs-absurd-only-play-runtime-hard-cutover",
   supportPolicy: {
     minimumSupported: "0.1.53",
@@ -589,6 +589,7 @@ var COORDINATOR_INTERNAL_TOKEN_HEADER = "x-deepline-internal-token";
 var COORDINATOR_URL_OVERRIDE_HEADER = "x-deepline-coordinator-url";
 var WORKER_CALLBACK_URL_OVERRIDE_HEADER = "x-deepline-worker-callback-url";
 var RUNTIME_SCHEDULER_SCHEMA_OVERRIDE_HEADER = "x-deepline-runtime-scheduler-schema";
+var RUNTIME_ENVIRONMENT_TOKEN_HEADER = "x-deepline-runtime-environment-token";
 var ABSURD_RELEASE_OVERRIDE_HEADER = "x-deepline-absurd-release";
 var SYNTHETIC_RUN_HEADER = "x-deepline-synthetic-run";
 
@@ -1253,9 +1254,25 @@ function createSecretRedactionContext(initialValues = []) {
     }
     return value;
   }
+  function redactKnownSecrets(value) {
+    if (typeof value === "string") return redactString(value);
+    if (Array.isArray(value)) {
+      return value.map((entry) => redactKnownSecrets(entry));
+    }
+    if (value && typeof value === "object") {
+      return Object.fromEntries(
+        Object.entries(value).map(([key, entry]) => [
+          key,
+          redactKnownSecrets(entry)
+        ])
+      );
+    }
+    return value;
+  }
   return {
     register,
     redactString,
+    redactKnownSecrets,
     redact
   };
 }
@@ -2162,6 +2179,29 @@ async function* observeRunEvents(options) {
   }
 }
 
+// ../shared_libs/play-runtime/runtime-environment.ts
+var PLAY_RUNTIME_ENVIRONMENTS = ["preview"];
+var PLAY_RUNTIME_NAMESPACE_PATTERN = /^[a-z][a-z0-9-]{0,30}$/;
+function normalizePlayRuntimeNamespace(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return PLAY_RUNTIME_NAMESPACE_PATTERN.test(normalized) ? normalized : null;
+}
+function normalizePlayRuntimeSelection(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const record = value;
+  if (Object.keys(record).some(
+    (key) => key !== "environment" && key !== "namespace"
+  ) || record.environment !== "preview") {
+    return null;
+  }
+  const namespace = normalizePlayRuntimeNamespace(record.namespace);
+  return namespace ? { environment: "preview", namespace } : null;
+}
+function normalizePlayRuntimeEnvironment(value) {
+  return typeof value === "string" && PLAY_RUNTIME_ENVIRONMENTS.includes(value) ? value : null;
+}
+
 // src/client.ts
 var TERMINAL_PLAY_STATUSES = /* @__PURE__ */ new Set(["completed", "failed", "cancelled"]);
 var INCLUDE_TOOL_METADATA_HEADER = "x-deepline-include-tool-metadata";
@@ -2184,6 +2224,61 @@ function resolvePlayRunIntegrationMode(request) {
     request.integrationMode ?? process.env.DEEPLINE_EVAL_INTEGRATION_MODE
   );
 }
+function resolvePlayRunRuntimeSelection(request) {
+  if (request.runtime !== void 0) {
+    const runtime = normalizePlayRuntimeSelection(request.runtime);
+    if (!runtime) {
+      throw new DeeplineError(
+        'runtime must be exactly { environment: "preview", namespace } with namespace matching ^[a-z][a-z0-9-]{0,30}$.',
+        void 0,
+        "INVALID_RUNTIME_SELECTION"
+      );
+    }
+    return runtime;
+  }
+  const configured = process.env.DEEPLINE_RUNTIME_ENVIRONMENT?.trim();
+  const configuredNamespace = process.env.DEEPLINE_RUNTIME_NAMESPACE?.trim();
+  const configuredToken = process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  if (!configured) {
+    if (configuredNamespace || configuredToken) {
+      throw new DeeplineError(
+        "DEEPLINE_RUNTIME_ENVIRONMENT=preview and DEEPLINE_RUNTIME_NAMESPACE are required when runtime selection configuration is present.",
+        void 0,
+        "INVALID_RUNTIME_ENVIRONMENT"
+      );
+    }
+    return void 0;
+  }
+  const environment = normalizePlayRuntimeEnvironment(configured);
+  if (!environment) {
+    throw new DeeplineError(
+      `DEEPLINE_RUNTIME_ENVIRONMENT supports only explicit preview selection. Received "${configured}". Omit it to use the app-native runtime.`,
+      void 0,
+      "INVALID_RUNTIME_ENVIRONMENT"
+    );
+  }
+  const namespace = normalizePlayRuntimeNamespace(configuredNamespace);
+  if (!namespace) {
+    throw new DeeplineError(
+      "DEEPLINE_RUNTIME_NAMESPACE is required for preview and must match ^[a-z][a-z0-9-]{0,30}$.",
+      void 0,
+      "INVALID_RUNTIME_NAMESPACE"
+    );
+  }
+  return { environment, namespace };
+}
+function runtimeSelectionHeaders(runtime) {
+  if (!runtime) return void 0;
+  const token = process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  if (!token) {
+    throw new DeeplineError(
+      "DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN is required for explicit preview runtime selection.",
+      void 0,
+      "RUNTIME_ENVIRONMENT_TOKEN_REQUIRED"
+    );
+  }
+  return { [RUNTIME_ENVIRONMENT_TOKEN_HEADER]: token };
+}
 function normalizeTestPolicyOverrides(value, source) {
   if (value && typeof value === "object" && !Array.isArray(value)) {
     return value;
@@ -2882,6 +2977,7 @@ var DeeplineClient = class {
     const integrationMode = resolvePlayRunIntegrationMode(request);
     const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
+    const runtime = resolvePlayRunRuntimeSelection(request);
     const response = await this.http.post(
       "/api/v2/plays/run",
       {
@@ -2908,9 +3004,10 @@ var DeeplineClient = class {
         // defaults to absurd; callers normally omit this field.
         ...request.profile ? { profile: request.profile } : {},
         ...integrationMode ? { integrationMode } : {},
+        ...runtime ? { runtime } : {},
         ...testPolicyOverrides ? { testPolicyOverrides } : {}
       },
-      void 0,
+      runtimeSelectionHeaders(runtime),
       // A start can reach the server even when its response is lost or times
       // out. Retrying this mutation without an idempotency key can create a
       // second root run, so callers must resolve ambiguous failures explicitly.
@@ -2933,6 +3030,7 @@ var DeeplineClient = class {
     const integrationMode = resolvePlayRunIntegrationMode(request);
     const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
+    const runtime = resolvePlayRunRuntimeSelection(request);
     const body = {
       ...request.name ? { name: request.name } : {},
       ...request.revisionId ? { revisionId: request.revisionId } : {},
@@ -2955,6 +3053,7 @@ var DeeplineClient = class {
       ...typeof request.waitForCompletionMs === "number" ? { waitForCompletionMs: request.waitForCompletionMs } : {},
       ...request.profile ? { profile: request.profile } : {},
       ...integrationMode ? { integrationMode } : {},
+      ...runtime ? { runtime } : {},
       ...testPolicyOverrides ? { testPolicyOverrides } : {}
     };
     for await (const event of this.http.streamSse(
@@ -2962,6 +3061,7 @@ var DeeplineClient = class {
       {
         method: "POST",
         body,
+        headers: runtimeSelectionHeaders(runtime),
         signal: options?.signal
       }
     )) {

package/dist/index.mjs

@@ -361,7 +361,7 @@ var SDK_RELEASE = {
   // runtime intentionally no longer compiles at publish or launch time.
   // 0.1.242 removes the retired Workers/ESM compiler, generated bundles, and
   // deploy-time artifact migration. Play authoring now has one CJS contract.
-  version: "0.1.248",
+  version: "0.1.250",
   apiContract: "2026-07-cjs-absurd-only-play-runtime-hard-cutover",
   supportPolicy: {
     minimumSupported: "0.1.53",
@@ -519,6 +519,7 @@ var COORDINATOR_INTERNAL_TOKEN_HEADER = "x-deepline-internal-token";
 var COORDINATOR_URL_OVERRIDE_HEADER = "x-deepline-coordinator-url";
 var WORKER_CALLBACK_URL_OVERRIDE_HEADER = "x-deepline-worker-callback-url";
 var RUNTIME_SCHEDULER_SCHEMA_OVERRIDE_HEADER = "x-deepline-runtime-scheduler-schema";
+var RUNTIME_ENVIRONMENT_TOKEN_HEADER = "x-deepline-runtime-environment-token";
 var ABSURD_RELEASE_OVERRIDE_HEADER = "x-deepline-absurd-release";
 var SYNTHETIC_RUN_HEADER = "x-deepline-synthetic-run";
 
@@ -1183,9 +1184,25 @@ function createSecretRedactionContext(initialValues = []) {
     }
     return value;
   }
+  function redactKnownSecrets(value) {
+    if (typeof value === "string") return redactString(value);
+    if (Array.isArray(value)) {
+      return value.map((entry) => redactKnownSecrets(entry));
+    }
+    if (value && typeof value === "object") {
+      return Object.fromEntries(
+        Object.entries(value).map(([key, entry]) => [
+          key,
+          redactKnownSecrets(entry)
+        ])
+      );
+    }
+    return value;
+  }
   return {
     register,
     redactString,
+    redactKnownSecrets,
     redact
   };
 }
@@ -2092,6 +2109,29 @@ async function* observeRunEvents(options) {
   }
 }
 
+// ../shared_libs/play-runtime/runtime-environment.ts
+var PLAY_RUNTIME_ENVIRONMENTS = ["preview"];
+var PLAY_RUNTIME_NAMESPACE_PATTERN = /^[a-z][a-z0-9-]{0,30}$/;
+function normalizePlayRuntimeNamespace(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return PLAY_RUNTIME_NAMESPACE_PATTERN.test(normalized) ? normalized : null;
+}
+function normalizePlayRuntimeSelection(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  const record = value;
+  if (Object.keys(record).some(
+    (key) => key !== "environment" && key !== "namespace"
+  ) || record.environment !== "preview") {
+    return null;
+  }
+  const namespace = normalizePlayRuntimeNamespace(record.namespace);
+  return namespace ? { environment: "preview", namespace } : null;
+}
+function normalizePlayRuntimeEnvironment(value) {
+  return typeof value === "string" && PLAY_RUNTIME_ENVIRONMENTS.includes(value) ? value : null;
+}
+
 // src/client.ts
 var TERMINAL_PLAY_STATUSES = /* @__PURE__ */ new Set(["completed", "failed", "cancelled"]);
 var INCLUDE_TOOL_METADATA_HEADER = "x-deepline-include-tool-metadata";
@@ -2114,6 +2154,61 @@ function resolvePlayRunIntegrationMode(request) {
     request.integrationMode ?? process.env.DEEPLINE_EVAL_INTEGRATION_MODE
   );
 }
+function resolvePlayRunRuntimeSelection(request) {
+  if (request.runtime !== void 0) {
+    const runtime = normalizePlayRuntimeSelection(request.runtime);
+    if (!runtime) {
+      throw new DeeplineError(
+        'runtime must be exactly { environment: "preview", namespace } with namespace matching ^[a-z][a-z0-9-]{0,30}$.',
+        void 0,
+        "INVALID_RUNTIME_SELECTION"
+      );
+    }
+    return runtime;
+  }
+  const configured = process.env.DEEPLINE_RUNTIME_ENVIRONMENT?.trim();
+  const configuredNamespace = process.env.DEEPLINE_RUNTIME_NAMESPACE?.trim();
+  const configuredToken = process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  if (!configured) {
+    if (configuredNamespace || configuredToken) {
+      throw new DeeplineError(
+        "DEEPLINE_RUNTIME_ENVIRONMENT=preview and DEEPLINE_RUNTIME_NAMESPACE are required when runtime selection configuration is present.",
+        void 0,
+        "INVALID_RUNTIME_ENVIRONMENT"
+      );
+    }
+    return void 0;
+  }
+  const environment = normalizePlayRuntimeEnvironment(configured);
+  if (!environment) {
+    throw new DeeplineError(
+      `DEEPLINE_RUNTIME_ENVIRONMENT supports only explicit preview selection. Received "${configured}". Omit it to use the app-native runtime.`,
+      void 0,
+      "INVALID_RUNTIME_ENVIRONMENT"
+    );
+  }
+  const namespace = normalizePlayRuntimeNamespace(configuredNamespace);
+  if (!namespace) {
+    throw new DeeplineError(
+      "DEEPLINE_RUNTIME_NAMESPACE is required for preview and must match ^[a-z][a-z0-9-]{0,30}$.",
+      void 0,
+      "INVALID_RUNTIME_NAMESPACE"
+    );
+  }
+  return { environment, namespace };
+}
+function runtimeSelectionHeaders(runtime) {
+  if (!runtime) return void 0;
+  const token = process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  if (!token) {
+    throw new DeeplineError(
+      "DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN is required for explicit preview runtime selection.",
+      void 0,
+      "RUNTIME_ENVIRONMENT_TOKEN_REQUIRED"
+    );
+  }
+  return { [RUNTIME_ENVIRONMENT_TOKEN_HEADER]: token };
+}
 function normalizeTestPolicyOverrides(value, source) {
   if (value && typeof value === "object" && !Array.isArray(value)) {
     return value;
@@ -2812,6 +2907,7 @@ var DeeplineClient = class {
     const integrationMode = resolvePlayRunIntegrationMode(request);
     const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
+    const runtime = resolvePlayRunRuntimeSelection(request);
     const response = await this.http.post(
       "/api/v2/plays/run",
       {
@@ -2838,9 +2934,10 @@ var DeeplineClient = class {
         // defaults to absurd; callers normally omit this field.
         ...request.profile ? { profile: request.profile } : {},
         ...integrationMode ? { integrationMode } : {},
+        ...runtime ? { runtime } : {},
         ...testPolicyOverrides ? { testPolicyOverrides } : {}
       },
-      void 0,
+      runtimeSelectionHeaders(runtime),
       // A start can reach the server even when its response is lost or times
       // out. Retrying this mutation without an idempotency key can create a
       // second root run, so callers must resolve ambiguous failures explicitly.
@@ -2863,6 +2960,7 @@ var DeeplineClient = class {
     const integrationMode = resolvePlayRunIntegrationMode(request);
     const testPolicyOverrides = request.testPolicyOverrides ?? parseEnvTestPolicyOverrides();
     const forceToolRefresh = request.forceToolRefresh === true;
+    const runtime = resolvePlayRunRuntimeSelection(request);
     const body = {
       ...request.name ? { name: request.name } : {},
       ...request.revisionId ? { revisionId: request.revisionId } : {},
@@ -2885,6 +2983,7 @@ var DeeplineClient = class {
       ...typeof request.waitForCompletionMs === "number" ? { waitForCompletionMs: request.waitForCompletionMs } : {},
       ...request.profile ? { profile: request.profile } : {},
       ...integrationMode ? { integrationMode } : {},
+      ...runtime ? { runtime } : {},
       ...testPolicyOverrides ? { testPolicyOverrides } : {}
     };
     for await (const event of this.http.streamSse(
@@ -2892,6 +2991,7 @@ var DeeplineClient = class {
       {
         method: "POST",
         body,
+        headers: runtimeSelectionHeaders(runtime),
         signal: options?.signal
       }
     )) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.1.248",
+  "version": "0.1.250",
   "description": "Deepline SDK + CLI — B2B data enrichment powered by durable cloud execution",
   "license": "MIT",
   "repository": {