deepline 0.1.253 → 0.1.254

package/dist/bundling-sources/sdk/src/release.ts

@@ -116,7 +116,8 @@ export const SDK_RELEASE = {
   // 0.1.252 hard-cuts the customer Monitor catalog to the two launched
   // Deepline-native radars. Older clients must update before discovering,
   // checking, or deploying an unlaunched monitor integration.
-  version: '0.1.253',
+  // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
+  version: '0.1.254',
   apiContract: '2026-07-native-monitor-launch-hard-cutover',
   supportPolicy: {
     minimumSupported: '0.1.53',
@@ -124,9 +125,9 @@ export const SDK_RELEASE = {
     commandMinimumSupported: [
       {
         command: 'enrich',
-        minimumSupported: '0.1.238',
+        minimumSupported: '0.1.253',
         reason:
-          'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH.',
+          'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH; SDK CLI enrich before 0.1.253 opens the generated play page by default and accepts the removed --no-open flag.',
       },
       {
         command: 'plays',
@@ -136,16 +137,16 @@ export const SDK_RELEASE = {
       },
       {
         command: 'plays run',
-        minimumSupported: '0.1.241',
+        minimumSupported: '0.1.253',
         reason:
-          'Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract.',
+          'Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag.',
       },
       {
         command: 'run',
         displayCommand: 'plays run',
-        minimumSupported: '0.1.241',
+        minimumSupported: '0.1.253',
         reason:
-          'Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract.',
+          'Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag.',
       },
       {
         command: 'plays check',

package/dist/bundling-sources/shared_libs/play-runtime/context.ts

@@ -42,7 +42,17 @@ import {
   mapRowOutcomeRuntimeFields,
   resolveMapRowOutcomeKey,
 } from './map-row-outcome';
-import { PLAY_RUNTIME_API_COMPAT_PATH } from './runtime-api-paths';
+import {
+  PLAY_RUNTIME_API_COMPAT_PATH,
+  PLAY_RUNTIME_OPERATION_ATTEMPT_HEADER,
+  PLAY_RUNTIME_OPERATION_ID_HEADER,
+} from './runtime-api-paths';
+import {
+  isRetryableSecretResolutionStatus,
+  secretResolutionRetryDecision,
+  SECRET_RESOLUTION_MAX_ATTEMPTS,
+  type SecretResolutionRetryDecision,
+} from './secret-resolution-retry-policy';
 import {
   createRootRunExecutionScope,
   deriveChildRunExecutionScope,
@@ -519,6 +529,26 @@ function loadSafeFetch(): Promise<SafeFetchModule> {
   return safeFetchModule;
 }
 
+function waitForSecretResolutionRetry(ms: number): Promise<void> {
+  if (ms <= 0) return Promise.resolve();
+  return new Promise<void>((resolve) => setTimeout(resolve, ms));
+}
+
+function cancelRuntimeResponseBody(response: Response): void {
+  try {
+    void response.body?.cancel().catch(() => {});
+  } catch {
+    // Connection cleanup must never replace the resolver failure or retry.
+  }
+}
+
+const NO_SECRET_RESOLUTION_RETRY: SecretResolutionRetryDecision = {
+  retry: false,
+  retryDelayMs: 0,
+  retryAfterMs: null,
+  retryAfterExceedsCap: false,
+};
+
 function isUnsafeOutboundUrlError(error: unknown): boolean {
   return error instanceof Error && error.name === 'UnsafeOutboundUrlError';
 }
@@ -1543,106 +1573,160 @@ export class PlayContextImpl {
       this.#options.runId
     ) {
       const url = `${this.#options.baseUrl.replace(/\/$/, '')}${PLAY_RUNTIME_API_COMPAT_PATH}`;
-      const requestId = `ctx-secret-${crypto.randomUUID()}`;
-      const startedAt = Date.now();
-      let response: Response;
-      try {
-        response = await fetch(url, {
-          method: 'POST',
-          headers: {
-            Authorization: `Bearer ${this.#options.executorToken}`,
-            'Content-Type': 'application/json',
-            'x-deepline-request-id': requestId,
-            ...(await this.vercelProtectionHeaders()),
-          },
-          body: JSON.stringify({
-            action: 'resolve_secret',
-            name: auth.secret.name,
-            playName: this.#options.playName,
-          }),
-        });
-      } catch (error) {
-        const diagnostic = describeTransportError(error);
-        this.log(
-          `[runtime.secret_resolution_failure] ${JSON.stringify({
-            stage: 'transport',
-            secret_name: auth.secret.name,
-            gateway_origin: transportGatewayOriginForDiagnostic(url),
-            request_id: requestId,
-            elapsed_ms: Date.now() - startedAt,
-            error: diagnostic,
-          })}`,
-        );
-        throw new Error(
-          `Secret ${auth.secret.name} resolution transport failed (request_id=${requestId}): ${diagnostic.message ?? 'unknown transport error'}`,
-        );
-      }
+      const operationId = `ctx-secret-operation-${crypto.randomUUID()}`;
+      const operationStartedAt = Date.now();
+      for (
+        let attempt = 1;
+        attempt <= SECRET_RESOLUTION_MAX_ATTEMPTS;
+        attempt += 1
+      ) {
+        const requestId = `ctx-secret-${crypto.randomUUID()}`;
+        const attemptStartedAt = Date.now();
+        let response: Response;
+        try {
+          response = await fetch(url, {
+            method: 'POST',
+            headers: {
+              Authorization: `Bearer ${this.#options.executorToken}`,
+              'Content-Type': 'application/json',
+              'x-deepline-request-id': requestId,
+              [PLAY_RUNTIME_OPERATION_ID_HEADER]: operationId,
+              [PLAY_RUNTIME_OPERATION_ATTEMPT_HEADER]: String(attempt),
+              ...(await this.vercelProtectionHeaders()),
+            },
+            body: JSON.stringify({
+              action: 'resolve_secret',
+              name: auth.secret.name,
+              playName: this.#options.playName,
+            }),
+          });
+        } catch (error) {
+          const diagnostic = describeTransportError(error);
+          const retry = secretResolutionRetryDecision({
+            attempt,
+            retryAfter: null,
+          });
+          this.log(
+            `[runtime.secret_resolution_failure] ${JSON.stringify({
+              stage: 'transport',
+              secret_name: auth.secret.name,
+              gateway_origin: transportGatewayOriginForDiagnostic(url),
+              operation_id: operationId,
+              request_id: requestId,
+              attempt,
+              max_attempts: SECRET_RESOLUTION_MAX_ATTEMPTS,
+              retrying: retry.retry,
+              retry_delay_ms: retry.retryDelayMs,
+              elapsed_ms: Date.now() - attemptStartedAt,
+              operation_elapsed_ms: Date.now() - operationStartedAt,
+              error: diagnostic,
+            })}`,
+          );
+          if (!retry.retry) {
+            throw new Error(
+              `Secret ${auth.secret.name} resolution transport failed (request_id=${requestId}): ${diagnostic.message ?? 'unknown transport error'}`,
+            );
+          }
+          await waitForSecretResolutionRetry(retry.retryDelayMs);
+          continue;
+        }
 
-      const responseDiagnostic = {
-        stage: response.ok ? 'invalid_response' : 'http_response',
-        secret_name: auth.secret.name,
-        gateway_origin: transportGatewayOriginForDiagnostic(url),
-        request_id: requestId,
-        elapsed_ms: Date.now() - startedAt,
-        http_status: response.status,
-        status_text: response.statusText || null,
-        content_type: response.headers.get('content-type'),
-        server: response.headers.get('server'),
-        vercel_request_id:
-          response.headers.get('x-vercel-id') ??
-          response.headers.get('x-vercel-request-id'),
-        response_request_id: response.headers.get('x-deepline-request-id'),
-        error_code: response.headers.get('x-deepline-error-code'),
-        retry_after: response.headers.get('retry-after'),
-      };
-      if (!response.ok) {
-        this.log(
-          `[runtime.secret_resolution_failure] ${JSON.stringify(responseDiagnostic)}`,
-        );
-        throw new Error(
-          `Secret ${auth.secret.name} is not available to this run (resolution status=${response.status}, request_id=${requestId}).`,
-        );
-      }
+        const retryAfter = response.headers.get('retry-after');
+        const retry = isRetryableSecretResolutionStatus(response.status)
+          ? secretResolutionRetryDecision({ attempt, retryAfter })
+          : NO_SECRET_RESOLUTION_RETRY;
+        const responseDiagnostic = {
+          stage: response.ok ? 'invalid_response' : 'http_response',
+          secret_name: auth.secret.name,
+          gateway_origin: transportGatewayOriginForDiagnostic(url),
+          operation_id: operationId,
+          request_id: requestId,
+          attempt,
+          max_attempts: SECRET_RESOLUTION_MAX_ATTEMPTS,
+          retrying: retry.retry,
+          retry_delay_ms: retry.retryDelayMs,
+          elapsed_ms: Date.now() - attemptStartedAt,
+          operation_elapsed_ms: Date.now() - operationStartedAt,
+          http_status: response.status,
+          status_text: response.statusText || null,
+          content_type: response.headers.get('content-type'),
+          server: response.headers.get('server'),
+          vercel_request_id:
+            response.headers.get('x-vercel-id') ??
+            response.headers.get('x-vercel-request-id'),
+          response_request_id: response.headers.get('x-deepline-request-id'),
+          error_code: response.headers.get('x-deepline-error-code'),
+          retry_after: retryAfter,
+          retry_after_ms: retry.retryAfterMs,
+          retry_after_exceeds_cap: retry.retryAfterExceedsCap,
+        };
+        if (!response.ok) {
+          this.log(
+            `[runtime.secret_resolution_failure] ${JSON.stringify(responseDiagnostic)}`,
+          );
+          cancelRuntimeResponseBody(response);
+          if (retry.retry) {
+            await waitForSecretResolutionRetry(retry.retryDelayMs);
+            continue;
+          }
+          throw new Error(
+            `Secret ${auth.secret.name} is not available to this run (resolution status=${response.status}, request_id=${requestId}).`,
+          );
+        }
 
-      let payload: unknown;
-      try {
-        payload = await response.json();
-      } catch (error) {
-        this.log(
-          `[runtime.secret_resolution_failure] ${JSON.stringify({
-            ...responseDiagnostic,
-            response_kind: 'invalid_json',
-            parse_error_name:
-              error instanceof Error ? error.name : typeof error,
-          })}`,
-        );
-        throw new Error(
-          `Secret ${auth.secret.name} is not available to this run (invalid resolution response, request_id=${requestId}).`,
-        );
-      }
+        let payload: unknown;
+        try {
+          payload = await response.json();
+        } catch (error) {
+          this.log(
+            `[runtime.secret_resolution_failure] ${JSON.stringify({
+              ...responseDiagnostic,
+              response_kind: 'invalid_json',
+              parse_error_name:
+                error instanceof Error ? error.name : typeof error,
+            })}`,
+          );
+          throw new Error(
+            `Secret ${auth.secret.name} is not available to this run (invalid resolution response, request_id=${requestId}).`,
+          );
+        }
 
-      value =
-        payload &&
-        typeof payload === 'object' &&
-        !Array.isArray(payload) &&
-        typeof (payload as { value?: unknown }).value === 'string'
-          ? (payload as { value: string }).value
-          : null;
-      if (!value) {
-        this.log(
-          `[runtime.secret_resolution_failure] ${JSON.stringify({
-            ...responseDiagnostic,
-            response_kind:
-              payload === null
-                ? 'null'
-                : Array.isArray(payload)
-                  ? 'array'
-                  : typeof payload,
-          })}`,
-        );
-        throw new Error(
-          `Secret ${auth.secret.name} is not available to this run (missing resolution value, request_id=${requestId}).`,
-        );
+        value =
+          payload &&
+          typeof payload === 'object' &&
+          !Array.isArray(payload) &&
+          typeof (payload as { value?: unknown }).value === 'string'
+            ? (payload as { value: string }).value
+            : null;
+        if (!value) {
+          this.log(
+            `[runtime.secret_resolution_failure] ${JSON.stringify({
+              ...responseDiagnostic,
+              response_kind:
+                payload === null
+                  ? 'null'
+                  : Array.isArray(payload)
+                    ? 'array'
+                    : typeof payload,
+            })}`,
+          );
+          throw new Error(
+            `Secret ${auth.secret.name} is not available to this run (missing resolution value, request_id=${requestId}).`,
+          );
+        }
+        if (attempt > 1) {
+          this.log(
+            `[runtime.secret_resolution_recovered] ${JSON.stringify({
+              secret_name: auth.secret.name,
+              gateway_origin: transportGatewayOriginForDiagnostic(url),
+              operation_id: operationId,
+              request_id: requestId,
+              attempts: attempt,
+              operation_elapsed_ms: Date.now() - operationStartedAt,
+            })}`,
+          );
+        }
+        break;
       }
     } else {
       throw new Error(

package/dist/bundling-sources/shared_libs/play-runtime/runtime-api-paths.ts

@@ -1,5 +1,9 @@
 export const PLAY_RUNTIME_API_COMPAT_PATH = '/api/v2/plays/internal/runtime';
 export const PLAY_RUNTIME_API_CURRENT_PATH = '/api/v2/internal/play-runtime';
+export const PLAY_RUNTIME_OPERATION_ID_HEADER =
+  'x-deepline-runtime-operation-id';
+export const PLAY_RUNTIME_OPERATION_ATTEMPT_HEADER =
+  'x-deepline-runtime-operation-attempt';
 export const PLAY_RUNTIME_ATTEMPT_EXECUTOR_TOKEN_PATH =
   '/api/v2/internal/play-runtime/executor-token';
 export const PLAY_RUNTIME_TAIL_LOG_COMPAT_PATH =

package/dist/bundling-sources/shared_libs/play-runtime/secret-resolution-retry-policy.ts

@@ -0,0 +1,80 @@
+export const SECRET_RESOLUTION_MAX_ATTEMPTS = 3;
+export const SECRET_RESOLUTION_MAX_RETRY_AFTER_MS = 2_000;
+
+const SECRET_RESOLUTION_RETRY_JITTER_CAPS_MS = [100, 250] as const;
+
+export type SecretResolutionRetryDecision = {
+  retry: boolean;
+  retryDelayMs: number;
+  retryAfterMs: number | null;
+  retryAfterExceedsCap: boolean;
+};
+
+export function isRetryableSecretResolutionStatus(status: number): boolean {
+  return status === 429 || (status >= 500 && status <= 599);
+}
+
+function parsedRetryAfterMs(
+  value: string | null,
+  nowMs: number,
+): number | null {
+  const normalized = value?.trim();
+  if (!normalized) return null;
+  if (/^\d+$/.test(normalized)) {
+    const seconds = Number(normalized);
+    const milliseconds = seconds * 1_000;
+    return Number.isSafeInteger(milliseconds) ? milliseconds : null;
+  }
+  const deadlineMs = Date.parse(normalized);
+  if (!Number.isFinite(deadlineMs) || deadlineMs <= nowMs) return null;
+  return deadlineMs - nowMs;
+}
+
+function boundedRandom(value: number): number {
+  if (!Number.isFinite(value)) return 0;
+  return Math.min(Math.max(value, 0), 1);
+}
+
+export function secretResolutionRetryDecision(input: {
+  attempt: number;
+  retryAfter: string | null;
+  nowMs?: number;
+  random?: () => number;
+}): SecretResolutionRetryDecision {
+  if (input.attempt >= SECRET_RESOLUTION_MAX_ATTEMPTS) {
+    return {
+      retry: false,
+      retryDelayMs: 0,
+      retryAfterMs: null,
+      retryAfterExceedsCap: false,
+    };
+  }
+
+  const retryAfterMs = parsedRetryAfterMs(
+    input.retryAfter,
+    input.nowMs ?? Date.now(),
+  );
+  if (retryAfterMs !== null) {
+    const retryAfterExceedsCap =
+      retryAfterMs > SECRET_RESOLUTION_MAX_RETRY_AFTER_MS;
+    return {
+      retry: !retryAfterExceedsCap,
+      retryDelayMs: retryAfterExceedsCap ? 0 : retryAfterMs,
+      retryAfterMs,
+      retryAfterExceedsCap,
+    };
+  }
+
+  const jitterCapMs =
+    SECRET_RESOLUTION_RETRY_JITTER_CAPS_MS[input.attempt - 1] ??
+    SECRET_RESOLUTION_RETRY_JITTER_CAPS_MS[1];
+  const retryDelayMs = Math.floor(
+    boundedRandom((input.random ?? Math.random)()) * (jitterCapMs + 1),
+  );
+  return {
+    retry: true,
+    retryDelayMs: Math.min(retryDelayMs, jitterCapMs),
+    retryAfterMs: null,
+    retryAfterExceedsCap: false,
+  };
+}

package/dist/cli/index.js

@@ -184,7 +184,7 @@ configureProxyFromEnv();
 var import_promises6 = require("fs/promises");
 var import_node_path20 = require("path");
 var import_node_os15 = require("os");
-var import_commander3 = require("commander");
+var import_commander4 = require("commander");
 
 // src/config.ts
 var import_node_fs = require("fs");
@@ -635,7 +635,8 @@ var SDK_RELEASE = {
   // 0.1.252 hard-cuts the customer Monitor catalog to the two launched
   // Deepline-native radars. Older clients must update before discovering,
   // checking, or deploying an unlaunched monitor integration.
-  version: "0.1.253",
+  // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
+  version: "0.1.254",
   apiContract: "2026-07-native-monitor-launch-hard-cutover",
   supportPolicy: {
     minimumSupported: "0.1.53",
@@ -643,8 +644,8 @@ var SDK_RELEASE = {
     commandMinimumSupported: [
       {
         command: "enrich",
-        minimumSupported: "0.1.238",
-        reason: 'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH.'
+        minimumSupported: "0.1.253",
+        reason: 'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH; SDK CLI enrich before 0.1.253 opens the generated play page by default and accepts the removed --no-open flag.'
       },
       {
         command: "plays",
@@ -653,14 +654,14 @@ var SDK_RELEASE = {
       },
       {
         command: "plays run",
-        minimumSupported: "0.1.241",
-        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract."
+        minimumSupported: "0.1.253",
+        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag."
       },
       {
         command: "run",
         displayCommand: "plays run",
-        minimumSupported: "0.1.241",
-        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract."
+        minimumSupported: "0.1.253",
+        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag."
       },
       {
         command: "plays check",
@@ -9017,6 +9018,7 @@ Examples:
 var import_promises3 = require("fs/promises");
 var import_node_os8 = require("os");
 var import_node_path12 = require("path");
+var import_commander2 = require("commander");
 
 // src/cli/commands/play.ts
 var import_node_crypto4 = require("crypto");
@@ -11270,7 +11272,7 @@ var PLAY_RUN_RESERVED_BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "--logs",
   "--full",
   "--force",
-  "--no-open",
+  "--open",
   "--debug-map-latency"
 ]);
 function traceCliSync(phase, fields, run) {
@@ -12557,11 +12559,10 @@ function buildPlayDashboardUrl(baseUrl, playName) {
   const encodedPlayName = encodeURIComponent(playName);
   return `${trimmedBase}/dashboard/plays/${encodedPlayName}`;
 }
-function openPlayDashboard(input2) {
-  if (input2.noOpen || !input2.dashboardUrl) {
-    return;
+function openPlayDashboard(dashboardUrl, open) {
+  if (open && dashboardUrl) {
+    openInBrowser(dashboardUrl);
   }
-  openInBrowser(input2.dashboardUrl);
 }
 function printPlayLogLines(input2) {
   for (const line of input2.lines) {
@@ -12880,10 +12881,7 @@ async function startAndWaitForPlayCompletionByStreamOnce(input2) {
             progress: input2.progress
           });
         }
-        openPlayDashboard({
-          dashboardUrl,
-          noOpen: input2.noOpen
-        });
+        openPlayDashboard(dashboardUrl, input2.open ?? false);
         input2.progress.phase("running");
         emittedDashboardUrl = true;
       }
@@ -14156,7 +14154,7 @@ function buildOrdinaryPlayRunCommand(options, resolvedRevisionId) {
   if (options.waitTimeoutMs !== null) {
     parts.push("--tail-timeout-ms", String(options.waitTimeoutMs));
   }
-  if (options.noOpen) parts.push("--no-open");
+  if (options.open) parts.push("--open");
   if (options.fullJson) parts.push("--full");
   if (options.jsonOutput && options.emitLogs) parts.push("--logs");
   if (options.jsonOutput) parts.push("--json");
@@ -14993,7 +14991,7 @@ function writeStartedPlayRun(input2) {
   );
 }
 function parsePlayRunOptions(args) {
-  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--no-open] [--json] [--full] [--<input> value]\n       Runs use the Absurd CJS runtime.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotent call caching and ctx.dataset guidance.";
+  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--json] [--full] [--<input> value]\n       Runs use the Absurd CJS runtime.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotent call caching and ctx.dataset guidance.";
   let filePath = null;
   let playName = null;
   let input2 = null;
@@ -15004,7 +15002,7 @@ function parsePlayRunOptions(args) {
   const fullJson = args.includes("--full");
   const emitLogs = !jsonOutput || args.includes("--logs");
   const force = args.includes("--force");
-  const noOpen = args.includes("--no-open");
+  const open = args.includes("--open");
   const debugMapLatency = args.includes("--debug-map-latency");
   let waitTimeoutMs = null;
   let profile = null;
@@ -15049,6 +15047,11 @@ function parsePlayRunOptions(args) {
         "--out is not a plays run flag. Run the play first, then export rows with: deepline runs export <run-id> --out output.csv"
       );
     }
+    if (arg === "--no-open" || arg.startsWith("--no-open=")) {
+      throw new Error(
+        "--no-open was removed for `plays run`. Play page URLs are printed by default; pass --open to launch a browser."
+      );
+    }
     if (arg === "--poll-interval-ms" || arg === "--interval-ms") {
       throw new Error(
         `${arg} was removed. --watch uses the canonical run stream directly.`
@@ -15123,7 +15126,7 @@ function parsePlayRunOptions(args) {
     fullJson,
     waitTimeoutMs,
     force,
-    noOpen,
+    open,
     profile,
     debugMapLatency
   };
@@ -15705,7 +15708,7 @@ async function handleFileBackedRun(options, hooks) {
         jsonOutput: options.jsonOutput,
         emitLogs: options.emitLogs,
         waitTimeoutMs: options.waitTimeoutMs,
-        noOpen: options.noOpen,
+        open: options.open,
         progress,
         onRunStarted: hooks?.onRunStarted
       }).catch(async (error) => {
@@ -15748,10 +15751,7 @@ async function handleFileBackedRun(options, hooks) {
     })
   );
   const resolvedDashboardUrl = buildPlayDashboardUrl(client2.baseUrl, playName);
-  openPlayDashboard({
-    dashboardUrl: resolvedDashboardUrl,
-    noOpen: options.noOpen
-  });
+  openPlayDashboard(resolvedDashboardUrl, options.open);
   progress.phase("started run");
   progress.complete();
   writeStartedPlayRun({
@@ -15872,7 +15872,7 @@ async function handleNamedRun(options, hooks) {
         jsonOutput: options.jsonOutput,
         emitLogs: options.emitLogs,
         waitTimeoutMs: options.waitTimeoutMs,
-        noOpen: options.noOpen,
+        open: options.open,
         progress,
         onRunStarted: hooks?.onRunStarted
       }).catch(async (error) => {
@@ -15920,10 +15920,7 @@ async function handleNamedRun(options, hooks) {
     })
   );
   const resolvedDashboardUrl = buildPlayDashboardUrl(client2.baseUrl, playName);
-  openPlayDashboard({
-    dashboardUrl: resolvedDashboardUrl,
-    noOpen: options.noOpen
-  });
+  openPlayDashboard(resolvedDashboardUrl, options.open);
   progress.phase("started run");
   progress.complete();
   writeStartedPlayRun({
@@ -17221,8 +17218,7 @@ Notes:
   next commands. --watch and --wait are accepted compatibility aliases for the
   default behavior. Use --no-wait only when you intentionally want
   a fire-and-forget run id.
-  The play page opens in your browser as soon as the run starts; use --no-open
-  to only print the URL.
+  The play page URL is printed when the run starts. Pass --open to open it in a browser.
   Concurrent runs for the same play are allowed.
   --force starts a fresh run graph without refreshing completed provider calls.
   It does not cancel active sibling runs.
@@ -17277,10 +17273,10 @@ Examples:
   ).option("--watch", "Compatibility alias; run waits by default").option("--wait", "Compatibility alias; run waits by default").option("--no-wait", "Start the run and return immediately").option(
     "--logs",
     "When output is non-interactive, stream play logs to stderr while waiting"
-  ).option("--tail-timeout-ms <ms>", "Timeout while watching the run stream").option("--force", "Start a fresh run graph").option(
+  ).option("--tail-timeout-ms <ms>", "Timeout while watching the run stream").option("--force", "Start a fresh run graph").option("--open", "Open the play page in a browser after the run starts").option(
     "--debug-map-latency",
     "Internal diagnostics: emit one aggregate latency profile per dataset map"
-  ).option("--no-open", "Print the play page URL without opening a browser").option("--json", "Emit JSON output").option("--full", "Debug only: with --json, emit the raw status payload").addHelpText(
+  ).option("--json", "Emit JSON output").option("--full", "Debug only: with --json, emit the raw status payload").addHelpText(
     "afterAll",
     `
 Pass-through input flags:
@@ -17316,8 +17312,8 @@ Pass-through input flags:
       ...options.logs ? ["--logs"] : [],
       ...options.tailTimeoutMs ? ["--tail-timeout-ms", options.tailTimeoutMs] : [],
       ...options.force ? ["--force"] : [],
+      ...options.open ? ["--open"] : [],
       ...options.debugMapLatency ? ["--debug-map-latency"] : [],
-      ...options.noOpen || options.open === false ? ["--no-open"] : [],
       ...options.json ? ["--json"] : [],
       ...options.full ? ["--full"] : [],
       ...passthroughArgs
@@ -19903,11 +19899,11 @@ async function buildPlanArgs(args) {
   const localBooleanOptions = /* @__PURE__ */ new Set([
     "--dry-run",
     "--json",
+    "--open",
     "--force",
     "--fail-fast",
     "--all",
     "--in-place",
-    "--no-open",
     "--debug-map-latency"
   ]);
   const planArgs = [];
@@ -22899,7 +22895,15 @@ function registerEnrichCommand(program) {
   ).option("--all", "Run all rows.").option(
     "--dry-run",
     "Compile and print the generated plan without starting a run."
-  ).option("--json", "Emit JSON.").option("--no-open", "Do not open the play page in a browser.").option("--force", "Force rerun for all enrich aliases.").option(
+  ).option("--json", "Emit JSON.").option(
+    "--open",
+    "Open the generated play page in a browser after the run starts."
+  ).addOption(
+    new import_commander2.Option(
+      "--no-open [legacy-value]",
+      "Removed legacy option"
+    ).hideHelp()
+  ).option("--force", "Force rerun for all enrich aliases.").option(
     "--with-force <aliases>",
     "Force rerun for selected aliases.",
     (value, previous = []) => [...previous, value]
@@ -22916,6 +22920,13 @@ function registerEnrichCommand(program) {
     "--fail-fast",
     "Fail the generated play when any selected row errors, while preserving recovered runtime-sheet rows for export."
   ).action(async (options, _command) => {
+    if (currentEnrichArgs().some(
+      (arg) => arg === "--no-open" || arg.startsWith("--no-open=")
+    )) {
+      throw new Error(
+        "--no-open was removed for `enrich`. Play page URLs are printed by default; pass --open to launch a browser."
+      );
+    }
     if (options.inPlace && options.dryRun) {
       throw new Error("--in-place is not supported with --dry-run.");
     }
@@ -23076,8 +23087,8 @@ function registerEnrichCommand(program) {
         if (options.debugMapLatency) {
           runArgs.push("--debug-map-latency");
         }
-        if (options.noOpen || input2.suppressOpen) {
-          runArgs.push("--no-open");
+        if (options.open) {
+          runArgs.push("--open");
         }
         if (input2.json) {
           runArgs.push("--json");
@@ -26205,7 +26216,7 @@ Examples:
 }
 
 // src/cli/commands/tools.ts
-var import_commander2 = require("commander");
+var import_commander3 = require("commander");
 var import_node_fs15 = require("fs");
 var import_node_os12 = require("os");
 var import_node_path16 = require("path");
@@ -26930,12 +26941,12 @@ Examples:
     "--examples-only",
     "Only print runnable examples and sample payloads"
   ).option("--getters-only", "Only print extracted list/value getters").addOption(
-    new import_commander2.Option(
+    new import_commander3.Option(
       "--compact",
       "Compatibility alias for the default compact view"
     ).hideHelp()
   ).addOption(
-    new import_commander2.Option(
+    new import_commander3.Option(
       "--contract-json",
       "Compatibility alias for compact contract JSON"
     ).hideHelp()
@@ -30179,7 +30190,6 @@ async function runPlayRunnerHealthCheck() {
         "--input",
         "{}",
         "--watch",
-        "--no-open",
         "--json"
       ]);
     } finally {
@@ -30328,7 +30338,7 @@ async function main() {
   if (printStartupPhase) {
     progress?.phase("loading deepline cli");
   }
-  const program = new import_commander3.Command();
+  const program = new import_commander4.Command();
   program.name("deepline").description(
     "Deepline CLI \u2014 GTM enrichment tools, plays, and runs from your terminal."
   ).version(SDK_VERSION, "-v, --version", "Show version").exitOverride().showHelpAfterError().showSuggestionAfterError(true).addHelpText(

package/dist/cli/index.mjs

@@ -161,7 +161,7 @@ configureProxyFromEnv();
 import { mkdtemp as mkdtemp2, rm as rm2, writeFile as writeFile5 } from "fs/promises";
 import { join as join15 } from "path";
 import { tmpdir as tmpdir4 } from "os";
-import { Command as Command3 } from "commander";
+import { Command as Command4 } from "commander";
 
 // src/config.ts
 import {
@@ -620,7 +620,8 @@ var SDK_RELEASE = {
   // 0.1.252 hard-cuts the customer Monitor catalog to the two launched
   // Deepline-native radars. Older clients must update before discovering,
   // checking, or deploying an unlaunched monitor integration.
-  version: "0.1.253",
+  // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
+  version: "0.1.254",
   apiContract: "2026-07-native-monitor-launch-hard-cutover",
   supportPolicy: {
     minimumSupported: "0.1.53",
@@ -628,8 +629,8 @@ var SDK_RELEASE = {
     commandMinimumSupported: [
       {
         command: "enrich",
-        minimumSupported: "0.1.238",
-        reason: 'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH.'
+        minimumSupported: "0.1.253",
+        reason: 'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH; SDK CLI enrich before 0.1.253 opens the generated play page by default and accepts the removed --no-open flag.'
       },
       {
         command: "plays",
@@ -638,14 +639,14 @@ var SDK_RELEASE = {
       },
       {
         command: "plays run",
-        minimumSupported: "0.1.241",
-        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract."
+        minimumSupported: "0.1.253",
+        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag."
       },
       {
         command: "run",
         displayCommand: "plays run",
-        minimumSupported: "0.1.241",
-        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract."
+        minimumSupported: "0.1.253",
+        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag."
       },
       {
         command: "plays check",
@@ -9033,6 +9034,7 @@ import {
 } from "fs/promises";
 import { homedir as homedir7, tmpdir as tmpdir2 } from "os";
 import { basename as basename2, dirname as dirname7, extname, join as join7, resolve as resolve9 } from "path";
+import { Option } from "commander";
 
 // src/cli/commands/play.ts
 import { createHash as createHash2 } from "crypto";
@@ -11299,7 +11301,7 @@ var PLAY_RUN_RESERVED_BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "--logs",
   "--full",
   "--force",
-  "--no-open",
+  "--open",
   "--debug-map-latency"
 ]);
 function traceCliSync(phase, fields, run) {
@@ -12586,11 +12588,10 @@ function buildPlayDashboardUrl(baseUrl, playName) {
   const encodedPlayName = encodeURIComponent(playName);
   return `${trimmedBase}/dashboard/plays/${encodedPlayName}`;
 }
-function openPlayDashboard(input2) {
-  if (input2.noOpen || !input2.dashboardUrl) {
-    return;
+function openPlayDashboard(dashboardUrl, open) {
+  if (open && dashboardUrl) {
+    openInBrowser(dashboardUrl);
   }
-  openInBrowser(input2.dashboardUrl);
 }
 function printPlayLogLines(input2) {
   for (const line of input2.lines) {
@@ -12909,10 +12910,7 @@ async function startAndWaitForPlayCompletionByStreamOnce(input2) {
             progress: input2.progress
           });
         }
-        openPlayDashboard({
-          dashboardUrl,
-          noOpen: input2.noOpen
-        });
+        openPlayDashboard(dashboardUrl, input2.open ?? false);
         input2.progress.phase("running");
         emittedDashboardUrl = true;
       }
@@ -14185,7 +14183,7 @@ function buildOrdinaryPlayRunCommand(options, resolvedRevisionId) {
   if (options.waitTimeoutMs !== null) {
     parts.push("--tail-timeout-ms", String(options.waitTimeoutMs));
   }
-  if (options.noOpen) parts.push("--no-open");
+  if (options.open) parts.push("--open");
   if (options.fullJson) parts.push("--full");
   if (options.jsonOutput && options.emitLogs) parts.push("--logs");
   if (options.jsonOutput) parts.push("--json");
@@ -15022,7 +15020,7 @@ function writeStartedPlayRun(input2) {
   );
 }
 function parsePlayRunOptions(args) {
-  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--no-open] [--json] [--full] [--<input> value]\n       Runs use the Absurd CJS runtime.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotent call caching and ctx.dataset guidance.";
+  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--open] [--json] [--full] [--<input> value]\n       Runs use the Absurd CJS runtime.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotent call caching and ctx.dataset guidance.";
   let filePath = null;
   let playName = null;
   let input2 = null;
@@ -15033,7 +15031,7 @@ function parsePlayRunOptions(args) {
   const fullJson = args.includes("--full");
   const emitLogs = !jsonOutput || args.includes("--logs");
   const force = args.includes("--force");
-  const noOpen = args.includes("--no-open");
+  const open = args.includes("--open");
   const debugMapLatency = args.includes("--debug-map-latency");
   let waitTimeoutMs = null;
   let profile = null;
@@ -15078,6 +15076,11 @@ function parsePlayRunOptions(args) {
         "--out is not a plays run flag. Run the play first, then export rows with: deepline runs export <run-id> --out output.csv"
       );
     }
+    if (arg === "--no-open" || arg.startsWith("--no-open=")) {
+      throw new Error(
+        "--no-open was removed for `plays run`. Play page URLs are printed by default; pass --open to launch a browser."
+      );
+    }
     if (arg === "--poll-interval-ms" || arg === "--interval-ms") {
       throw new Error(
         `${arg} was removed. --watch uses the canonical run stream directly.`
@@ -15152,7 +15155,7 @@ function parsePlayRunOptions(args) {
     fullJson,
     waitTimeoutMs,
     force,
-    noOpen,
+    open,
     profile,
     debugMapLatency
   };
@@ -15734,7 +15737,7 @@ async function handleFileBackedRun(options, hooks) {
         jsonOutput: options.jsonOutput,
         emitLogs: options.emitLogs,
         waitTimeoutMs: options.waitTimeoutMs,
-        noOpen: options.noOpen,
+        open: options.open,
         progress,
         onRunStarted: hooks?.onRunStarted
       }).catch(async (error) => {
@@ -15777,10 +15780,7 @@ async function handleFileBackedRun(options, hooks) {
     })
   );
   const resolvedDashboardUrl = buildPlayDashboardUrl(client2.baseUrl, playName);
-  openPlayDashboard({
-    dashboardUrl: resolvedDashboardUrl,
-    noOpen: options.noOpen
-  });
+  openPlayDashboard(resolvedDashboardUrl, options.open);
   progress.phase("started run");
   progress.complete();
   writeStartedPlayRun({
@@ -15901,7 +15901,7 @@ async function handleNamedRun(options, hooks) {
         jsonOutput: options.jsonOutput,
         emitLogs: options.emitLogs,
         waitTimeoutMs: options.waitTimeoutMs,
-        noOpen: options.noOpen,
+        open: options.open,
         progress,
         onRunStarted: hooks?.onRunStarted
       }).catch(async (error) => {
@@ -15949,10 +15949,7 @@ async function handleNamedRun(options, hooks) {
     })
   );
   const resolvedDashboardUrl = buildPlayDashboardUrl(client2.baseUrl, playName);
-  openPlayDashboard({
-    dashboardUrl: resolvedDashboardUrl,
-    noOpen: options.noOpen
-  });
+  openPlayDashboard(resolvedDashboardUrl, options.open);
   progress.phase("started run");
   progress.complete();
   writeStartedPlayRun({
@@ -17250,8 +17247,7 @@ Notes:
   next commands. --watch and --wait are accepted compatibility aliases for the
   default behavior. Use --no-wait only when you intentionally want
   a fire-and-forget run id.
-  The play page opens in your browser as soon as the run starts; use --no-open
-  to only print the URL.
+  The play page URL is printed when the run starts. Pass --open to open it in a browser.
   Concurrent runs for the same play are allowed.
   --force starts a fresh run graph without refreshing completed provider calls.
   It does not cancel active sibling runs.
@@ -17306,10 +17302,10 @@ Examples:
   ).option("--watch", "Compatibility alias; run waits by default").option("--wait", "Compatibility alias; run waits by default").option("--no-wait", "Start the run and return immediately").option(
     "--logs",
     "When output is non-interactive, stream play logs to stderr while waiting"
-  ).option("--tail-timeout-ms <ms>", "Timeout while watching the run stream").option("--force", "Start a fresh run graph").option(
+  ).option("--tail-timeout-ms <ms>", "Timeout while watching the run stream").option("--force", "Start a fresh run graph").option("--open", "Open the play page in a browser after the run starts").option(
     "--debug-map-latency",
     "Internal diagnostics: emit one aggregate latency profile per dataset map"
-  ).option("--no-open", "Print the play page URL without opening a browser").option("--json", "Emit JSON output").option("--full", "Debug only: with --json, emit the raw status payload").addHelpText(
+  ).option("--json", "Emit JSON output").option("--full", "Debug only: with --json, emit the raw status payload").addHelpText(
     "afterAll",
     `
 Pass-through input flags:
@@ -17345,8 +17341,8 @@ Pass-through input flags:
       ...options.logs ? ["--logs"] : [],
       ...options.tailTimeoutMs ? ["--tail-timeout-ms", options.tailTimeoutMs] : [],
       ...options.force ? ["--force"] : [],
+      ...options.open ? ["--open"] : [],
       ...options.debugMapLatency ? ["--debug-map-latency"] : [],
-      ...options.noOpen || options.open === false ? ["--no-open"] : [],
       ...options.json ? ["--json"] : [],
       ...options.full ? ["--full"] : [],
       ...passthroughArgs
@@ -19932,11 +19928,11 @@ async function buildPlanArgs(args) {
   const localBooleanOptions = /* @__PURE__ */ new Set([
     "--dry-run",
     "--json",
+    "--open",
     "--force",
     "--fail-fast",
     "--all",
     "--in-place",
-    "--no-open",
     "--debug-map-latency"
   ]);
   const planArgs = [];
@@ -22928,7 +22924,15 @@ function registerEnrichCommand(program) {
   ).option("--all", "Run all rows.").option(
     "--dry-run",
     "Compile and print the generated plan without starting a run."
-  ).option("--json", "Emit JSON.").option("--no-open", "Do not open the play page in a browser.").option("--force", "Force rerun for all enrich aliases.").option(
+  ).option("--json", "Emit JSON.").option(
+    "--open",
+    "Open the generated play page in a browser after the run starts."
+  ).addOption(
+    new Option(
+      "--no-open [legacy-value]",
+      "Removed legacy option"
+    ).hideHelp()
+  ).option("--force", "Force rerun for all enrich aliases.").option(
     "--with-force <aliases>",
     "Force rerun for selected aliases.",
     (value, previous = []) => [...previous, value]
@@ -22945,6 +22949,13 @@ function registerEnrichCommand(program) {
     "--fail-fast",
     "Fail the generated play when any selected row errors, while preserving recovered runtime-sheet rows for export."
   ).action(async (options, _command) => {
+    if (currentEnrichArgs().some(
+      (arg) => arg === "--no-open" || arg.startsWith("--no-open=")
+    )) {
+      throw new Error(
+        "--no-open was removed for `enrich`. Play page URLs are printed by default; pass --open to launch a browser."
+      );
+    }
     if (options.inPlace && options.dryRun) {
       throw new Error("--in-place is not supported with --dry-run.");
     }
@@ -23105,8 +23116,8 @@ function registerEnrichCommand(program) {
         if (options.debugMapLatency) {
           runArgs.push("--debug-map-latency");
         }
-        if (options.noOpen || input2.suppressOpen) {
-          runArgs.push("--no-open");
+        if (options.open) {
+          runArgs.push("--open");
         }
         if (input2.json) {
           runArgs.push("--json");
@@ -26241,7 +26252,7 @@ Examples:
 }
 
 // src/cli/commands/tools.ts
-import { Option } from "commander";
+import { Option as Option2 } from "commander";
 import {
   chmodSync,
   existsSync as existsSync10,
@@ -26978,12 +26989,12 @@ Examples:
     "--examples-only",
     "Only print runnable examples and sample payloads"
   ).option("--getters-only", "Only print extracted list/value getters").addOption(
-    new Option(
+    new Option2(
       "--compact",
       "Compatibility alias for the default compact view"
     ).hideHelp()
   ).addOption(
-    new Option(
+    new Option2(
       "--contract-json",
       "Compatibility alias for compact contract JSON"
     ).hideHelp()
@@ -30242,7 +30253,6 @@ async function runPlayRunnerHealthCheck() {
         "--input",
         "{}",
         "--watch",
-        "--no-open",
         "--json"
       ]);
     } finally {
@@ -30391,7 +30401,7 @@ async function main() {
   if (printStartupPhase) {
     progress?.phase("loading deepline cli");
   }
-  const program = new Command3();
+  const program = new Command4();
   program.name("deepline").description(
     "Deepline CLI \u2014 GTM enrichment tools, plays, and runs from your terminal."
   ).version(SDK_VERSION, "-v, --version", "Show version").exitOverride().showHelpAfterError().showSuggestionAfterError(true).addHelpText(

package/dist/index.js

@@ -434,7 +434,8 @@ var SDK_RELEASE = {
   // 0.1.252 hard-cuts the customer Monitor catalog to the two launched
   // Deepline-native radars. Older clients must update before discovering,
   // checking, or deploying an unlaunched monitor integration.
-  version: "0.1.253",
+  // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
+  version: "0.1.254",
   apiContract: "2026-07-native-monitor-launch-hard-cutover",
   supportPolicy: {
     minimumSupported: "0.1.53",
@@ -442,8 +443,8 @@ var SDK_RELEASE = {
     commandMinimumSupported: [
       {
         command: "enrich",
-        minimumSupported: "0.1.238",
-        reason: 'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH.'
+        minimumSupported: "0.1.253",
+        reason: 'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH; SDK CLI enrich before 0.1.253 opens the generated play page by default and accepts the removed --no-open flag.'
       },
       {
         command: "plays",
@@ -452,14 +453,14 @@ var SDK_RELEASE = {
       },
       {
         command: "plays run",
-        minimumSupported: "0.1.241",
-        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract."
+        minimumSupported: "0.1.253",
+        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag."
       },
       {
         command: "run",
         displayCommand: "plays run",
-        minimumSupported: "0.1.241",
-        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract."
+        minimumSupported: "0.1.253",
+        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag."
       },
       {
         command: "plays check",

package/dist/index.mjs

@@ -364,7 +364,8 @@ var SDK_RELEASE = {
   // 0.1.252 hard-cuts the customer Monitor catalog to the two launched
   // Deepline-native radars. Older clients must update before discovering,
   // checking, or deploying an unlaunched monitor integration.
-  version: "0.1.253",
+  // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
+  version: "0.1.254",
   apiContract: "2026-07-native-monitor-launch-hard-cutover",
   supportPolicy: {
     minimumSupported: "0.1.53",
@@ -372,8 +373,8 @@ var SDK_RELEASE = {
     commandMinimumSupported: [
       {
         command: "enrich",
-        minimumSupported: "0.1.238",
-        reason: 'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH.'
+        minimumSupported: "0.1.253",
+        reason: 'Older SDK CLI enrich generated stale play source; SDK CLI enrich 0.1.153 generated removed StepOptions fields in play source; SDK CLI enrich before 0.1.175 could silently succeed on the empty-waterfall bug when a requested waterfall returned no values for selected rows; SDK CLI enrich before 0.1.230 could convert extractor failures into successful unmatched results; SDK CLI enrich before 0.1.238 could drop a nested provider email match during generic pick("email") extraction and materialize it as NO_MATCH; SDK CLI enrich before 0.1.253 opens the generated play page by default and accepts the removed --no-open flag.'
       },
       {
         command: "plays",
@@ -382,14 +383,14 @@ var SDK_RELEASE = {
       },
       {
         command: "plays run",
-        minimumSupported: "0.1.241",
-        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract."
+        minimumSupported: "0.1.253",
+        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag."
       },
       {
         command: "run",
         displayCommand: "plays run",
-        minimumSupported: "0.1.241",
-        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract."
+        minimumSupported: "0.1.253",
+        reason: "Older SDK CLI versions predate dataset-native Play results and can emit the retired esm_workers artifact contract; versions before 0.1.253 open the play page by default and accept the removed --no-open flag."
       },
       {
         command: "plays check",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.1.253",
+  "version": "0.1.254",
   "description": "Deepline SDK + CLI — B2B data enrichment powered by durable cloud execution",
   "license": "MIT",
   "repository": {