deepline 0.1.252 → 0.1.254

package/dist/bundling-sources/shared_libs/play-runtime/secret-resolution-retry-policy.ts

@@ -0,0 +1,80 @@
+export const SECRET_RESOLUTION_MAX_ATTEMPTS = 3;
+export const SECRET_RESOLUTION_MAX_RETRY_AFTER_MS = 2_000;
+
+const SECRET_RESOLUTION_RETRY_JITTER_CAPS_MS = [100, 250] as const;
+
+export type SecretResolutionRetryDecision = {
+  retry: boolean;
+  retryDelayMs: number;
+  retryAfterMs: number | null;
+  retryAfterExceedsCap: boolean;
+};
+
+export function isRetryableSecretResolutionStatus(status: number): boolean {
+  return status === 429 || (status >= 500 && status <= 599);
+}
+
+function parsedRetryAfterMs(
+  value: string | null,
+  nowMs: number,
+): number | null {
+  const normalized = value?.trim();
+  if (!normalized) return null;
+  if (/^\d+$/.test(normalized)) {
+    const seconds = Number(normalized);
+    const milliseconds = seconds * 1_000;
+    return Number.isSafeInteger(milliseconds) ? milliseconds : null;
+  }
+  const deadlineMs = Date.parse(normalized);
+  if (!Number.isFinite(deadlineMs) || deadlineMs <= nowMs) return null;
+  return deadlineMs - nowMs;
+}
+
+function boundedRandom(value: number): number {
+  if (!Number.isFinite(value)) return 0;
+  return Math.min(Math.max(value, 0), 1);
+}
+
+export function secretResolutionRetryDecision(input: {
+  attempt: number;
+  retryAfter: string | null;
+  nowMs?: number;
+  random?: () => number;
+}): SecretResolutionRetryDecision {
+  if (input.attempt >= SECRET_RESOLUTION_MAX_ATTEMPTS) {
+    return {
+      retry: false,
+      retryDelayMs: 0,
+      retryAfterMs: null,
+      retryAfterExceedsCap: false,
+    };
+  }
+
+  const retryAfterMs = parsedRetryAfterMs(
+    input.retryAfter,
+    input.nowMs ?? Date.now(),
+  );
+  if (retryAfterMs !== null) {
+    const retryAfterExceedsCap =
+      retryAfterMs > SECRET_RESOLUTION_MAX_RETRY_AFTER_MS;
+    return {
+      retry: !retryAfterExceedsCap,
+      retryDelayMs: retryAfterExceedsCap ? 0 : retryAfterMs,
+      retryAfterMs,
+      retryAfterExceedsCap,
+    };
+  }
+
+  const jitterCapMs =
+    SECRET_RESOLUTION_RETRY_JITTER_CAPS_MS[input.attempt - 1] ??
+    SECRET_RESOLUTION_RETRY_JITTER_CAPS_MS[1];
+  const retryDelayMs = Math.floor(
+    boundedRandom((input.random ?? Math.random)()) * (jitterCapMs + 1),
+  );
+  return {
+    retry: true,
+    retryDelayMs: Math.min(retryDelayMs, jitterCapMs),
+    retryAfterMs: null,
+    retryAfterExceedsCap: false,
+  };
+}

package/dist/cli/index.js

@@ -184,7 +184,7 @@ configureProxyFromEnv();
 var import_promises6 = require("fs/promises");
 var import_node_path20 = require("path");
 var import_node_os15 = require("os");
-var import_commander3 = require("commander");
+var import_commander4 = require("commander");
 
 // src/config.ts
 var import_node_fs = require("fs");
@@ -635,7 +635,8 @@ var SDK_RELEASE = {
   // 0.1.252 hard-cuts the customer Monitor catalog to the two launched
   // Deepline-native radars. Older clients must update before discovering,
   // checking, or deploying an unlaunched monitor integration.
-  version: "0.1.252",
+  // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
+  version: "0.1.254",
   apiContract: "2026-07-native-monitor-launch-hard-cutover",
   supportPolicy: {
     minimumSupported: "0.1.53",
@@ -643,8 +644,8 @@ var SDK_RELEASE = {
     commandMinimumSupported: [
       {
         command: "enrich",
-        minimumSupported: "0.1.238",
-        reason: 'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH.'
+        minimumSupported: "0.1.253",
+        reason: 'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH; SDK CLI enrich before 0.1.253 opens the generated play page by default and accepts the removed --no-open flag.'
       },
       {
         command: "plays",
@@ -653,14 +654,14 @@ var SDK_RELEASE = {
       },
       {
         command: "plays run",
-        minimumSupported: "0.1.241",
-        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract."
+        minimumSupported: "0.1.253",
+        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag."
       },
       {
         command: "run",
         displayCommand: "plays run",
-        minimumSupported: "0.1.241",
-        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract."
+        minimumSupported: "0.1.253",
+        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag."
       },
       {
         command: "plays check",
@@ -1482,12 +1483,14 @@ function createSecretRedactionContext(initialValues = []) {
 }
 
 // ../shared_libs/play-runtime/output-size-limits.ts
-var encoder = typeof TextEncoder === "undefined" ? null : new TextEncoder();
+var TERMINAL_RUN_RESULT_MAX_BYTES = 6 * 1024 * 1024;
 var LEDGER_TERMINAL_RESULT_MAX_BYTES = 256 * 1024;
-var CUSTOMER_OUTPUT_VALUE_MAX_BYTES = 1 * 1024 * 1024;
-var CUSTOMER_OUTPUT_TOTAL_MAX_BYTES = 2 * 1024 * 1024;
+var CUSTOMER_OUTPUT_VALUE_MAX_BYTES = 5 * 1024 * 1024;
+var CUSTOMER_OUTPUT_TOTAL_MAX_BYTES = 5 * 1024 * 1024;
 var RUNTIME_RECEIPT_OUTPUT_MAX_BYTES = 10 * 1024 * 1024;
 var RUNTIME_RECEIPT_COMPLETION_BUFFER_MAX_BYTES = 32 * 1024 * 1024;
+var RUNNER_TERMINAL_PUSH_MAX_BODY_BYTES = 16 * 1024 * 1024;
+var RUNNER_POST_TERMINAL_DIAGNOSTIC_MAX_BYTES = 64 * 1024;
 
 // ../shared_libs/play-runtime/ledger-safe-payload.ts
 var ledgerIngressRedactor = createSecretRedactionContext();
@@ -9015,6 +9018,7 @@ Examples:
 var import_promises3 = require("fs/promises");
 var import_node_os8 = require("os");
 var import_node_path12 = require("path");
+var import_commander2 = require("commander");
 
 // src/cli/commands/play.ts
 var import_node_crypto4 = require("crypto");
@@ -11268,7 +11272,7 @@ var PLAY_RUN_RESERVED_BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "--logs",
   "--full",
   "--force",
-  "--no-open",
+  "--open",
   "--debug-map-latency"
 ]);
 function traceCliSync(phase, fields, run) {
@@ -12555,11 +12559,10 @@ function buildPlayDashboardUrl(baseUrl, playName) {
   const encodedPlayName = encodeURIComponent(playName);
   return `${trimmedBase}/dashboard/plays/${encodedPlayName}`;
 }
-function openPlayDashboard(input2) {
-  if (input2.noOpen || !input2.dashboardUrl) {
-    return;
+function openPlayDashboard(dashboardUrl, open) {
+  if (open && dashboardUrl) {
+    openInBrowser(dashboardUrl);
   }
-  openInBrowser(input2.dashboardUrl);
 }
 function printPlayLogLines(input2) {
   for (const line of input2.lines) {
@@ -12878,10 +12881,7 @@ async function startAndWaitForPlayCompletionByStreamOnce(input2) {
             progress: input2.progress
           });
         }
-        openPlayDashboard({
-          dashboardUrl,
-          noOpen: input2.noOpen
-        });
+        openPlayDashboard(dashboardUrl, input2.open ?? false);
         input2.progress.phase("running");
         emittedDashboardUrl = true;
       }
@@ -13330,15 +13330,24 @@ function collectDatasetHandleLines(value, path = "result") {
   return lines;
 }
 function buildRunWarnings(status, rowsInfo) {
+  const result = readRecord(status.result);
+  const metadata = readRecord(result?._metadata);
+  const outputWarnings = Array.isArray(metadata?.outputWarnings) ? metadata.outputWarnings.map((warning) => readRecord(warning)).filter((warning) => {
+    if (!warning) return false;
+    return !(rowsInfo && !rowsInfo.complete && warning.reason === "array_preview_limit" && warning.originalItems === rowsInfo.totalRows && warning.retainedItems === rowsInfo.rows.length);
+  }).map((warning) => warning?.message).filter(
+    (message) => typeof message === "string" && message.trim().length > 0
+  ).slice(0, 16) : [];
   if (status.status === "completed" && rowsInfo?.totalRows === 0) {
-    return ["Run completed with 0 output rows."];
+    return ["Run completed with 0 output rows.", ...outputWarnings];
   }
   if (rowsInfo && !rowsInfo.complete) {
     return [
-      `Run output is partial: showing ${rowsInfo.rows.length} preview row(s) of ${rowsInfo.totalRows}.`
+      `Run output is partial: showing ${rowsInfo.rows.length} preview row(s) of ${rowsInfo.totalRows}.`,
+      ...outputWarnings
     ];
   }
-  return [];
+  return outputWarnings;
 }
 function buildRunNextCommands(status) {
   const runId = status.runId?.trim();
@@ -14064,6 +14073,14 @@ function buildRunPackageTextLines(packaged) {
   if (failedLogWarning) {
     lines.push(`  warning: ${failedLogWarning}`);
   }
+  const packageWarnings = Array.isArray(packaged.warnings) ? Array.from(
+    new Set(
+      packaged.warnings.filter(
+        (warning) => typeof warning === "string" && warning.trim().length > 0
+      )
+    )
+  ).slice(0, 16) : [];
+  lines.push(...packageWarnings.map((warning) => `  warning: ${warning}`));
   const failedLogNext = readRecord(failedLogs?.next);
   if (failedLogWarning && typeof failedLogNext?.logs === "string") {
     lines.push(
@@ -14137,7 +14154,7 @@ function buildOrdinaryPlayRunCommand(options, resolvedRevisionId) {
   if (options.waitTimeoutMs !== null) {
     parts.push("--tail-timeout-ms", String(options.waitTimeoutMs));
   }
-  if (options.noOpen) parts.push("--no-open");
+  if (options.open) parts.push("--open");
   if (options.fullJson) parts.push("--full");
   if (options.jsonOutput && options.emitLogs) parts.push("--logs");
   if (options.jsonOutput) parts.push("--json");
@@ -14974,7 +14991,7 @@ function writeStartedPlayRun(input2) {
   );
 }
 function parsePlayRunOptions(args) {
-  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--no-open] [--json] [--full] [--<input> value]\n       Runs use the Absurd CJS runtime.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotent call caching and ctx.dataset guidance.";
+  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--json] [--full] [--<input> value]\n       Runs use the Absurd CJS runtime.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotent call caching and ctx.dataset guidance.";
   let filePath = null;
   let playName = null;
   let input2 = null;
@@ -14985,7 +15002,7 @@ function parsePlayRunOptions(args) {
   const fullJson = args.includes("--full");
   const emitLogs = !jsonOutput || args.includes("--logs");
   const force = args.includes("--force");
-  const noOpen = args.includes("--no-open");
+  const open = args.includes("--open");
   const debugMapLatency = args.includes("--debug-map-latency");
   let waitTimeoutMs = null;
   let profile = null;
@@ -15030,6 +15047,11 @@ function parsePlayRunOptions(args) {
         "--out is not a plays run flag. Run the play first, then export rows with: deepline runs export <run-id> --out output.csv"
       );
     }
+    if (arg === "--no-open" || arg.startsWith("--no-open=")) {
+      throw new Error(
+        "--no-open was removed for `plays run`. Play page URLs are printed by default; pass --open to launch a browser."
+      );
+    }
     if (arg === "--poll-interval-ms" || arg === "--interval-ms") {
       throw new Error(
         `${arg} was removed. --watch uses the canonical run stream directly.`
@@ -15104,7 +15126,7 @@ function parsePlayRunOptions(args) {
     fullJson,
     waitTimeoutMs,
     force,
-    noOpen,
+    open,
     profile,
     debugMapLatency
   };
@@ -15686,7 +15708,7 @@ async function handleFileBackedRun(options, hooks) {
         jsonOutput: options.jsonOutput,
         emitLogs: options.emitLogs,
         waitTimeoutMs: options.waitTimeoutMs,
-        noOpen: options.noOpen,
+        open: options.open,
         progress,
         onRunStarted: hooks?.onRunStarted
       }).catch(async (error) => {
@@ -15729,10 +15751,7 @@ async function handleFileBackedRun(options, hooks) {
     })
   );
   const resolvedDashboardUrl = buildPlayDashboardUrl(client2.baseUrl, playName);
-  openPlayDashboard({
-    dashboardUrl: resolvedDashboardUrl,
-    noOpen: options.noOpen
-  });
+  openPlayDashboard(resolvedDashboardUrl, options.open);
   progress.phase("started run");
   progress.complete();
   writeStartedPlayRun({
@@ -15853,7 +15872,7 @@ async function handleNamedRun(options, hooks) {
         jsonOutput: options.jsonOutput,
         emitLogs: options.emitLogs,
         waitTimeoutMs: options.waitTimeoutMs,
-        noOpen: options.noOpen,
+        open: options.open,
         progress,
         onRunStarted: hooks?.onRunStarted
       }).catch(async (error) => {
@@ -15901,10 +15920,7 @@ async function handleNamedRun(options, hooks) {
     })
   );
   const resolvedDashboardUrl = buildPlayDashboardUrl(client2.baseUrl, playName);
-  openPlayDashboard({
-    dashboardUrl: resolvedDashboardUrl,
-    noOpen: options.noOpen
-  });
+  openPlayDashboard(resolvedDashboardUrl, options.open);
   progress.phase("started run");
   progress.complete();
   writeStartedPlayRun({
@@ -17202,8 +17218,7 @@ Notes:
   next commands. --watch and --wait are accepted compatibility aliases for the
   default behavior. Use --no-wait only when you intentionally want
   a fire-and-forget run id.
-  The play page opens in your browser as soon as the run starts; use --no-open
-  to only print the URL.
+  The play page URL is printed when the run starts. Pass --open to open it in a browser.
   Concurrent runs for the same play are allowed.
   --force starts a fresh run graph without refreshing completed provider calls.
   It does not cancel active sibling runs.
@@ -17258,10 +17273,10 @@ Examples:
   ).option("--watch", "Compatibility alias; run waits by default").option("--wait", "Compatibility alias; run waits by default").option("--no-wait", "Start the run and return immediately").option(
     "--logs",
     "When output is non-interactive, stream play logs to stderr while waiting"
-  ).option("--tail-timeout-ms <ms>", "Timeout while watching the run stream").option("--force", "Start a fresh run graph").option(
+  ).option("--tail-timeout-ms <ms>", "Timeout while watching the run stream").option("--force", "Start a fresh run graph").option("--open", "Open the play page in a browser after the run starts").option(
     "--debug-map-latency",
     "Internal diagnostics: emit one aggregate latency profile per dataset map"
-  ).option("--no-open", "Print the play page URL without opening a browser").option("--json", "Emit JSON output").option("--full", "Debug only: with --json, emit the raw status payload").addHelpText(
+  ).option("--json", "Emit JSON output").option("--full", "Debug only: with --json, emit the raw status payload").addHelpText(
     "afterAll",
     `
 Pass-through input flags:
@@ -17297,8 +17312,8 @@ Pass-through input flags:
       ...options.logs ? ["--logs"] : [],
       ...options.tailTimeoutMs ? ["--tail-timeout-ms", options.tailTimeoutMs] : [],
       ...options.force ? ["--force"] : [],
+      ...options.open ? ["--open"] : [],
       ...options.debugMapLatency ? ["--debug-map-latency"] : [],
-      ...options.noOpen || options.open === false ? ["--no-open"] : [],
       ...options.json ? ["--json"] : [],
       ...options.full ? ["--full"] : [],
       ...passthroughArgs
@@ -19884,11 +19899,11 @@ async function buildPlanArgs(args) {
   const localBooleanOptions = /* @__PURE__ */ new Set([
     "--dry-run",
     "--json",
+    "--open",
     "--force",
     "--fail-fast",
     "--all",
     "--in-place",
-    "--no-open",
     "--debug-map-latency"
   ]);
   const planArgs = [];
@@ -22880,7 +22895,15 @@ function registerEnrichCommand(program) {
   ).option("--all", "Run all rows.").option(
     "--dry-run",
     "Compile and print the generated plan without starting a run."
-  ).option("--json", "Emit JSON.").option("--no-open", "Do not open the play page in a browser.").option("--force", "Force rerun for all enrich aliases.").option(
+  ).option("--json", "Emit JSON.").option(
+    "--open",
+    "Open the generated play page in a browser after the run starts."
+  ).addOption(
+    new import_commander2.Option(
+      "--no-open [legacy-value]",
+      "Removed legacy option"
+    ).hideHelp()
+  ).option("--force", "Force rerun for all enrich aliases.").option(
     "--with-force <aliases>",
     "Force rerun for selected aliases.",
     (value, previous = []) => [...previous, value]
@@ -22897,6 +22920,13 @@ function registerEnrichCommand(program) {
     "--fail-fast",
     "Fail the generated play when any selected row errors, while preserving recovered runtime-sheet rows for export."
   ).action(async (options, _command) => {
+    if (currentEnrichArgs().some(
+      (arg) => arg === "--no-open" || arg.startsWith("--no-open=")
+    )) {
+      throw new Error(
+        "--no-open was removed for `enrich`. Play page URLs are printed by default; pass --open to launch a browser."
+      );
+    }
     if (options.inPlace && options.dryRun) {
       throw new Error("--in-place is not supported with --dry-run.");
     }
@@ -23057,8 +23087,8 @@ function registerEnrichCommand(program) {
         if (options.debugMapLatency) {
           runArgs.push("--debug-map-latency");
         }
-        if (options.noOpen || input2.suppressOpen) {
-          runArgs.push("--no-open");
+        if (options.open) {
+          runArgs.push("--open");
         }
         if (input2.json) {
           runArgs.push("--json");
@@ -26186,7 +26216,7 @@ Examples:
 }
 
 // src/cli/commands/tools.ts
-var import_commander2 = require("commander");
+var import_commander3 = require("commander");
 var import_node_fs15 = require("fs");
 var import_node_os12 = require("os");
 var import_node_path16 = require("path");
@@ -26911,12 +26941,12 @@ Examples:
     "--examples-only",
     "Only print runnable examples and sample payloads"
   ).option("--getters-only", "Only print extracted list/value getters").addOption(
-    new import_commander2.Option(
+    new import_commander3.Option(
       "--compact",
       "Compatibility alias for the default compact view"
     ).hideHelp()
   ).addOption(
-    new import_commander2.Option(
+    new import_commander3.Option(
       "--contract-json",
       "Compatibility alias for compact contract JSON"
     ).hideHelp()
@@ -30160,7 +30190,6 @@ async function runPlayRunnerHealthCheck() {
         "--input",
         "{}",
         "--watch",
-        "--no-open",
         "--json"
       ]);
     } finally {
@@ -30309,7 +30338,7 @@ async function main() {
   if (printStartupPhase) {
     progress?.phase("loading deepline cli");
   }
-  const program = new import_commander3.Command();
+  const program = new import_commander4.Command();
   program.name("deepline").description(
     "Deepline CLI \u2014 GTM enrichment tools, plays, and runs from your terminal."
   ).version(SDK_VERSION, "-v, --version", "Show version").exitOverride().showHelpAfterError().showSuggestionAfterError(true).addHelpText(