deepline 0.1.289 → 0.1.291

package/dist/bundling-sources/sdk/src/client.ts

@@ -443,6 +443,8 @@ export type RunsListOptions = {
   play?: string;
   status?: string;
   limit?: number;
+  /** Zero-based page offset. Requires `play` because status-only inventory is not paginated. */
+  offset?: number;
 };
 
 /** Options for `client.runs.get(...)`. */
@@ -2952,6 +2954,21 @@ export class DeeplineClient {
     if (typeof options.limit === 'number' && Number.isFinite(options.limit)) {
       params.set('limit', String(Math.max(1, Math.floor(options.limit))));
     }
+    if (options.offset !== undefined) {
+      if (
+        !Number.isFinite(options.offset) ||
+        !Number.isInteger(options.offset) ||
+        options.offset < 0
+      ) {
+        throw new Error(
+          'runs.list options.offset must be a non-negative integer.',
+        );
+      }
+      if (!playName && options.offset > 0) {
+        throw new Error('runs.list options.offset requires options.play.');
+      }
+      params.set('offset', String(options.offset));
+    }
     if (!playName && !status) {
       throw new Error('runs.list requires options.play or options.status.');
     }

package/dist/bundling-sources/sdk/src/release.ts

@@ -155,7 +155,7 @@ export const SDK_RELEASE = {
   // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
   // 0.1.254 removes the internal operations tree from the published SDK CLI.
   // Operators use the checkout-local deepline-admin binary instead.
-  version: '0.1.289',
+  version: '0.1.291',
   contracts: {
     api: {
       name: 'sdk-http-api',

package/dist/bundling-sources/shared_libs/play-runtime/app-runtime-api.ts

@@ -358,6 +358,7 @@ type RuntimeApiRequest =
 export type WorkerRuntimeApiContext = {
   baseUrl: string;
   executorToken: string;
+  boundary?: 'app_runtime' | 'receipt_gateway';
   integrationMode?: 'live' | 'eval_stub' | 'fixture' | null;
   vercelProtectionBypassToken?: string | null;
   runtimeTestFaultHeader?: string | null;
@@ -874,6 +875,7 @@ async function retryAppRuntimeBodyTimeoutOrThrow(input: {
   attemptStartedAt: number;
   httpStatus?: number;
   retryAfterMs?: number | null;
+  boundaryLabel: string;
 }): Promise<void> {
   if (!isRequestTimeoutAbort(input.error)) {
     recordAppRuntimeRetryFailure({
@@ -936,9 +938,18 @@ async function retryAppRuntimeBodyTimeoutOrThrow(input: {
     action: input.action,
     attempts: input.attempt,
     cause: input.error,
+    boundaryLabel: input.boundaryLabel,
   });
 }
 
+function runtimeApiBoundaryLabel(
+  context: Pick<WorkerRuntimeApiContext, 'boundary'>,
+): string {
+  return context.boundary === 'receipt_gateway'
+    ? 'Runtime receipt gateway'
+    : 'App runtime API';
+}
+
 export class AppRuntimeApiTransportError extends Error {
   readonly action: RuntimeApiRequest['action'];
   readonly attempts: number;
@@ -947,11 +958,12 @@ export class AppRuntimeApiTransportError extends Error {
     action: RuntimeApiRequest['action'];
     attempts: number;
     cause: unknown;
+    boundaryLabel?: string;
   }) {
     const causeMessage =
       input.cause instanceof Error ? input.cause.message : String(input.cause);
     super(
-      `App runtime API transport exhausted action=${input.action} attempts=${input.attempts}: ${causeMessage}`,
+      `${input.boundaryLabel ?? 'App runtime API'} transport exhausted action=${input.action} attempts=${input.attempts}: ${causeMessage}`,
       { cause: input.cause },
     );
     this.name = 'AppRuntimeApiTransportError';
@@ -979,9 +991,10 @@ export class AppRuntimeApiResponseError extends Error {
     requestId?: string | null;
     retryable: boolean;
     detail: string;
+    boundaryLabel?: string;
   }) {
     super(
-      `App runtime API ${input.action} failed with status ${input.status}` +
+      `${input.boundaryLabel ?? 'App runtime API'} ${input.action} failed with status ${input.status}` +
         `${input.code ? ` code=${input.code}` : ''}` +
         `${input.requestId ? ` request_id=${input.requestId}` : ''}: ` +
         input.detail,
@@ -1012,6 +1025,7 @@ async function postAppRuntimeApi<TResponse>(
     throw new Error('Worker runtime API requires executorToken.');
   }
   const runtimeFetch = context.fetch ?? fetch;
+  const boundaryLabel = runtimeApiBoundaryLabel(context);
   const vercelHeaders = await vercelProtectionBypassHeaders({
     baseUrl,
     token: context.vercelProtectionBypassToken,
@@ -1091,6 +1105,7 @@ async function postAppRuntimeApi<TResponse>(
         action: body.action,
         attempts: attempt,
         cause: error,
+        boundaryLabel,
       });
     }
     if (response.ok) {
@@ -1114,6 +1129,7 @@ async function postAppRuntimeApi<TResponse>(
           telemetry: retryTelemetry,
           attemptStartedAt,
           httpStatus: response.status,
+          boundaryLabel,
         });
         continue;
       }
@@ -1143,7 +1159,7 @@ async function postAppRuntimeApi<TResponse>(
           finalAttemptStartedAt: attemptStartedAt,
         });
         throw new Error(
-          `App runtime API ${body.action} failed with status ${response.status}: response body timed out`,
+          `${boundaryLabel} ${body.action} failed with status ${response.status}: response body timed out`,
           { cause: error },
         );
       }
@@ -1156,6 +1172,7 @@ async function postAppRuntimeApi<TResponse>(
         attemptStartedAt,
         httpStatus: response.status,
         retryAfterMs: appRuntimeRetryAfterMs(response, ''),
+        boundaryLabel,
       });
       continue;
     }
@@ -1221,10 +1238,11 @@ async function postAppRuntimeApi<TResponse>(
           body: responseText,
         }),
       detail: summarizeAppRuntimeErrorBody(responseText),
+      boundaryLabel,
     });
   }
 
-  throw new Error(`App runtime API ${body.action} failed after retries.`);
+  throw new Error(`${boundaryLabel} ${body.action} failed after retries.`);
 }
 
 type SignedR2ReadUrlResponse = {

package/dist/bundling-sources/shared_libs/play-runtime/runner-backends/backends/daytona.ts

@@ -54,7 +54,7 @@ const DAYTONA_UPLOAD_ATTEMPT_DEADLINE_MS = 90_000;
 const RUNTIME_POSTGRES_CONNECT_RETRY_PATTERN =
   /\bRuntime Postgres\b.*\b(connection timed out|connect timeout|ETIMEDOUT|ECONNRESET|ECONNREFUSED|Connection terminated|Connection ended unexpectedly)\b/i;
 const RUNTIME_RECEIPT_GATEWAY_TRANSPORT_RETRY_PATTERN =
-  /AppRuntimeApiTransportError: App runtime API transport exhausted action=(?:get|claim|mark|complete|fail|heartbeat|release|skip)_runtime_step_receipts?/i;
+  /AppRuntimeApiTransportError: (?:App runtime API|Runtime receipt gateway) transport exhausted action=(?:get|claim|mark|complete|fail|heartbeat|release|skip)_runtime_step_receipts?/i;
 const RUNTIME_API_TRANSPORT_RETRY_PATTERN =
   /\bRuntime API request to .+ failed before receiving a response:\s*(?:fetch failed|connection (?:terminated|timed out|closed|reset)|ECONNRESET|ETIMEDOUT|ECONNREFUSED)\b/i;
 const DAYTONA_INFRASTRUCTURE_RETRY_PATTERN =

package/dist/bundling-sources/shared_libs/play-runtime/runtime-api.ts

@@ -78,6 +78,7 @@ import {
   sameOwnerTerminalAttemptEpochSql,
 } from './sheet-attempt-sql';
 import type { MapRowOutcome } from './durability-store';
+import { RUNTIME_CAPACITY_POLICY } from './runtime-capacity-policy';
 import {
   normalizeRuntimeMapInputIndex,
   prepareRuntimeSheetRowsForJsonTransport,
@@ -349,7 +350,8 @@ const RUNTIME_POSTGRES_RECEIPT_ADMISSION_MAX_QUEUED = 2_000;
 // memory independently from lightweight receipt requests; overflow is a
 // retryable 503 and waits outside this long-lived gateway process.
 const RUNTIME_POSTGRES_SHEET_ADMISSION_MAX_QUEUED = 4;
-const RUNTIME_POSTGRES_RECEIPT_ADMISSION_TIMEOUT_MS = 10_000;
+const RUNTIME_POSTGRES_RECEIPT_ADMISSION_TIMEOUT_MS =
+  RUNTIME_CAPACITY_POLICY.receiptGateway.admissionTimeoutMs;
 const RECEIPT_STATUS_QUEUED = RECEIPT_STATUS_CODE.queued;
 const RECEIPT_STATUS_PENDING = RECEIPT_STATUS_CODE.pending;
 const RECEIPT_STATUS_RUNNING = RECEIPT_STATUS_CODE.running;

package/dist/bundling-sources/shared_libs/play-runtime/runtime-capacity-policy.ts

@@ -0,0 +1,59 @@
+/**
+ * One fixed capacity policy for the Absurd runtime.
+ *
+ * Postgres owns backlog. Workers drain it at a predictable rate; queue depth
+ * never creates more runtime or receipt traffic by itself. Keep these values
+ * together so the worker, queue policy, scaler, gateway, and tests cannot
+ * independently invent concurrency or timeout budgets.
+ */
+export const RUNTIME_CAPACITY_POLICY = {
+  absurd: {
+    activeLaneMachines: 2,
+    workerSlotsPerMachine: 8,
+    perOrgConcurrency: 4,
+  },
+  receiptGateway: {
+    admissionTimeoutMs: 10_000,
+    requestTimeoutMs: 30_000,
+  },
+} as const;
+
+export const ABSURD_GLOBAL_RUN_CONCURRENCY =
+  RUNTIME_CAPACITY_POLICY.absurd.activeLaneMachines *
+  RUNTIME_CAPACITY_POLICY.absurd.workerSlotsPerMachine;
+
+/**
+ * Active releases retain fixed capacity. Historical releases stay cold until
+ * they have immediately runnable or currently claimed work.
+ */
+export function desiredAbsurdLaneMachines(input: {
+  active: boolean;
+  claimableRuns: number;
+  runningRuns?: number;
+}): number {
+  if (input.active) {
+    return RUNTIME_CAPACITY_POLICY.absurd.activeLaneMachines;
+  }
+  return input.claimableRuns > 0 || (input.runningRuns ?? 0) > 0 ? 1 : 0;
+}
+
+export function assertRuntimeCapacityPolicy(): void {
+  if (
+    RUNTIME_CAPACITY_POLICY.receiptGateway.requestTimeoutMs <=
+    RUNTIME_CAPACITY_POLICY.receiptGateway.admissionTimeoutMs
+  ) {
+    throw new Error(
+      'Receipt gateway request timeout must exceed its admission timeout.',
+    );
+  }
+  if (
+    RUNTIME_CAPACITY_POLICY.absurd.perOrgConcurrency >
+    ABSURD_GLOBAL_RUN_CONCURRENCY
+  ) {
+    throw new Error(
+      'Per-org runtime concurrency cannot exceed global runtime concurrency.',
+    );
+  }
+}
+
+assertRuntimeCapacityPolicy();

package/dist/bundling-sources/shared_libs/plays/legacy-webhook-drain.ts

@@ -0,0 +1,110 @@
+export const LEGACY_WEBHOOK_RETRY_CODES = [
+  'ACTIVE_CONCURRENCY_LIMIT',
+  'SCHEDULER_CAPACITY',
+  'TRANSIENT_LAUNCH_FAILURE',
+] as const;
+
+export type LegacyWebhookRetryCode =
+  (typeof LEGACY_WEBHOOK_RETRY_CODES)[number];
+
+export const LEGACY_WEBHOOK_QUARANTINE_CODES = [
+  'PLAY_DEFINITION_MISSING',
+  'PLAY_BINDING_MISSING',
+  'PLAY_BINDING_DISABLED',
+  'PLAY_REVISION_MISSING',
+  'PLAY_REVISION_MISMATCH',
+  'ARTIFACT_RUNTIME_INCOMPATIBLE',
+  'ARTIFACT_REFERENCE_MISSING',
+  'WEBHOOK_PAYLOAD_INVALID',
+  'PLAY_PRE_RUN_VALIDATION_FAILED',
+  'RUN_IDENTITY_CONFLICT',
+  'MAX_DELIVERY_ATTEMPTS_EXCEEDED',
+] as const;
+
+export type LegacyWebhookQuarantineCode =
+  (typeof LEGACY_WEBHOOK_QUARANTINE_CODES)[number];
+
+export function isLegacyWebhookQuarantineCode(
+  value: unknown,
+): value is LegacyWebhookQuarantineCode {
+  return (
+    typeof value === 'string' &&
+    (LEGACY_WEBHOOK_QUARANTINE_CODES as readonly string[]).includes(value)
+  );
+}
+
+export type LegacyWebhookQuarantineFailure =
+  | { code: 'PLAY_DEFINITION_MISSING' }
+  | { code: 'PLAY_BINDING_MISSING' }
+  | { code: 'PLAY_BINDING_DISABLED'; actualStatus: string }
+  | { code: 'PLAY_REVISION_MISSING' }
+  | {
+      code: 'PLAY_REVISION_MISMATCH';
+      expectedDefinitionId: string;
+      actualDefinitionId: string;
+    }
+  | {
+      code: 'ARTIFACT_RUNTIME_INCOMPATIBLE';
+      expectedArtifactKind: 'cjs_node20';
+      actualArtifactKind: string;
+    }
+  | { code: 'ARTIFACT_REFERENCE_MISSING' }
+  | {
+      code: 'WEBHOOK_PAYLOAD_INVALID';
+      reason: 'unsupported_shape';
+    }
+  | { code: 'PLAY_PRE_RUN_VALIDATION_FAILED' }
+  | { code: 'RUN_IDENTITY_CONFLICT' }
+  | { code: 'MAX_DELIVERY_ATTEMPTS_EXCEEDED' };
+
+export type LegacyWebhookDrainState =
+  | { kind: 'pending' }
+  | {
+      kind: 'leased';
+      leaseOwner: string;
+      leaseExpiresAt: number;
+      attempts: number;
+    }
+  | {
+      kind: 'retry';
+      failureCode: LegacyWebhookRetryCode;
+      retryAt: number;
+      attempts: number;
+      error: string;
+    }
+  | {
+      kind: 'quarantined';
+      failure: LegacyWebhookQuarantineFailure;
+      quarantinedAt: number;
+      attempts: number;
+      error: string;
+    }
+  | { kind: 'launched'; launchedAt: number }
+  | {
+      kind: 'migrated';
+      migratedAt: number;
+      migratedWebhookEventId: string;
+      migratedAbsurdTaskId: string;
+    }
+  | {
+      kind: 'retired';
+      retiredAt: number;
+      retiredBy: string;
+      reason: string;
+    };
+
+export type LegacyWebhookDrainOutcome =
+  | { kind: 'started' }
+  | { kind: 'quarantined'; failure: LegacyWebhookQuarantineFailure }
+  | { kind: 'retry'; failureCode: LegacyWebhookRetryCode }
+  | { kind: 'lease_lost' };
+
+export function isLegacyWebhookPayload(
+  value: unknown,
+): value is Record<string, unknown> | unknown[] {
+  return Array.isArray(value) || (value !== null && typeof value === 'object');
+}
+
+export function assertNever(value: never, context: string): never {
+  throw new Error(`${context}: ${JSON.stringify(value)}`);
+}

package/dist/bundling-sources/shared_libs/plays/secret-guardrails.ts

@@ -8,6 +8,8 @@ const ASSIGNMENT_SECRET_LITERAL_PATTERN =
 const HIGH_ENTROPY_LITERAL_PATTERN = /['"]([A-Za-z0-9+/=_-]{32,})['"]/g;
 const UUID_IDENTIFIER_PATTERN =
   /^((?:[A-Za-z0-9]+[-_])*)?([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/i;
+const BOOTSTRAP_RESOURCE_IDENTIFIER_PATTERN =
+  /^bootstrap-[0-9a-f]{32}(?:\/[a-z0-9][a-z0-9_-]{0,127})?$/i;
 const SECRET_LABEL_PATTERN =
   /(?:^|[-_])(?:api|auth|access|secret|token|key|password|credential|bearer|sk|pk|live)(?:[-_]|$)/i;
 
@@ -27,6 +29,10 @@ function isNonSecretUuidIdentifier(value: string): boolean {
   return !SECRET_LABEL_PATTERN.test(label);
 }
 
+function isNonSecretBootstrapResourceIdentifier(value: string): boolean {
+  return BOOTSTRAP_RESOURCE_IDENTIFIER_PATTERN.test(value);
+}
+
 /**
  * Returns the inline-secret findings in a string (empty if none). The throwing
  * validator below and the workflows→plays migration validator both call this so
@@ -49,6 +55,10 @@ export function collectInlineSecretFindings(sourceCode: string): string[] {
     // UUID-bearing resource names are structured identifiers, not opaque
     // credentials. Keep secret-looking labels on the conservative path.
     if (isNonSecretUuidIdentifier(literal)) continue;
+    // Named CI orgs use a deterministic public `bootstrap-<sha256-prefix>`
+    // slug. It is an address, not a credential, and owner-qualified ctx.runPlay
+    // references must embed it as a literal for static child resolution.
+    if (isNonSecretBootstrapResourceIdentifier(literal)) continue;
     if (literal.length >= 40 && shannonEntropy(literal) >= 4.2) {
       findings.push('high-entropy string literal');
       break;

package/dist/cli/index.js

@@ -718,7 +718,7 @@ var SDK_RELEASE = {
   // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
   // 0.1.254 removes the internal operations tree from the published SDK CLI.
   // Operators use the checkout-local deepline-admin binary instead.
-  version: "0.1.289",
+  version: "0.1.291",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -4424,6 +4424,17 @@ var DeeplineClient = class {
     if (typeof options.limit === "number" && Number.isFinite(options.limit)) {
       params.set("limit", String(Math.max(1, Math.floor(options.limit))));
     }
+    if (options.offset !== void 0) {
+      if (!Number.isFinite(options.offset) || !Number.isInteger(options.offset) || options.offset < 0) {
+        throw new Error(
+          "runs.list options.offset must be a non-negative integer."
+        );
+      }
+      if (!playName && options.offset > 0) {
+        throw new Error("runs.list options.offset requires options.play.");
+      }
+      params.set("offset", String(options.offset));
+    }
     if (!playName && !status) {
       throw new Error("runs.list requires options.play or options.status.");
     }
@@ -16754,9 +16765,11 @@ async function handleRunGet(args) {
   return 0;
 }
 async function handleRunsList(args) {
-  const usage = "Usage: deepline runs list [--play <play-name>] [--status <status>] [--json]";
+  const usage = "Usage: deepline runs list [--play <play-name>] [--status <status>] [--limit <count>] [--offset <count>] [--json]";
   let playName = null;
   let statusFilter = null;
+  let limit;
+  let offset;
   for (let index = 0; index < args.length; index += 1) {
     const arg = args[index];
     if ((arg === "--play" || arg === "--name") && args[index + 1]) {
@@ -16767,6 +16780,24 @@ async function handleRunsList(args) {
       statusFilter = args[++index].trim().toLowerCase();
       continue;
     }
+    if (arg === "--limit" || arg === "--offset") {
+      const rawValue = args[index + 1];
+      const parsed = rawValue && /^\d+$/.test(rawValue) ? Number.parseInt(rawValue, 10) : Number.NaN;
+      const valid = Number.isSafeInteger(parsed) && (arg === "--limit" ? parsed > 0 : parsed >= 0);
+      if (!valid) {
+        console.error(
+          `${arg} must be ${arg === "--limit" ? "a positive" : "a non-negative"} integer.`
+        );
+        return 1;
+      }
+      if (arg === "--limit") {
+        limit = parsed;
+      } else {
+        offset = parsed;
+      }
+      index += 1;
+      continue;
+    }
     if (arg === "--json" || arg === "--compact") {
       continue;
     }
@@ -16775,10 +16806,16 @@ async function handleRunsList(args) {
     console.error(usage);
     return 1;
   }
+  if ((offset ?? 0) > 0 && !playName) {
+    console.error("--offset requires --play.");
+    return 1;
+  }
   const client2 = new DeeplineClient();
   const runs = (await client2.runs.list({
     ...playName ? { play: playName } : {},
-    ...statusFilter ? { status: statusFilter } : {}
+    ...statusFilter ? { status: statusFilter } : {},
+    ...limit !== void 0 ? { limit } : {},
+    ...offset !== void 0 ? { offset } : {}
   })).map((run) => ({
     runId: run.workflowId,
     workflowId: run.workflowId,
@@ -18335,10 +18372,12 @@ Examples:
   deepline runs list --play my-play --status failed --compact --json
   deepline runs list --status running --compact --json
 `
-  ).option("--play <name>", "Play name to filter runs").option("--status <status>", "Filter by run status").option("--compact", "Drop verbose fields from JSON output").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(async (options) => {
+  ).option("--play <name>", "Play name to filter runs").option("--status <status>", "Filter by run status").option("--limit <count>", "Maximum runs to return").option("--offset <count>", "Zero-based page offset (requires --play)").option("--compact", "Drop verbose fields from JSON output").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(async (options) => {
     process.exitCode = await handleRunsList([
       ...options.play ? ["--play", options.play] : [],
       ...options.status ? ["--status", options.status] : [],
+      ...options.limit ? ["--limit", options.limit] : [],
+      ...options.offset ? ["--offset", options.offset] : [],
       ...options.compact ? ["--compact"] : [],
       ...options.json ? ["--json"] : []
     ]);
@@ -29296,6 +29335,7 @@ var BEARER_LITERAL_PATTERN = /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}/i;
 var ASSIGNMENT_SECRET_LITERAL_PATTERN = /\b(?:api[_-]?key|token|secret|password)\b\s*[:=]\s*['"][^'"]{12,}['"]/i;
 var HIGH_ENTROPY_LITERAL_PATTERN = /['"]([A-Za-z0-9+/=_-]{32,})['"]/g;
 var UUID_IDENTIFIER_PATTERN = /^((?:[A-Za-z0-9]+[-_])*)?([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/i;
+var BOOTSTRAP_RESOURCE_IDENTIFIER_PATTERN = /^bootstrap-[0-9a-f]{32}(?:\/[a-z0-9][a-z0-9_-]{0,127})?$/i;
 var SECRET_LABEL_PATTERN = /(?:^|[-_])(?:api|auth|access|secret|token|key|password|credential|bearer|sk|pk|live)(?:[-_]|$)/i;
 function shannonEntropy(value) {
   const counts = /* @__PURE__ */ new Map();
@@ -29311,6 +29351,9 @@ function isNonSecretUuidIdentifier(value) {
   const label = match[1] ?? "";
   return !SECRET_LABEL_PATTERN.test(label);
 }
+function isNonSecretBootstrapResourceIdentifier(value) {
+  return BOOTSTRAP_RESOURCE_IDENTIFIER_PATTERN.test(value);
+}
 function collectInlineSecretFindings(sourceCode) {
   const findings = [];
   for (const match of sourceCode.matchAll(SECRET_ENV_PATTERN)) {
@@ -29325,6 +29368,7 @@ function collectInlineSecretFindings(sourceCode) {
   for (const match of sourceCode.matchAll(HIGH_ENTROPY_LITERAL_PATTERN)) {
     const literal = match[1] ?? "";
     if (isNonSecretUuidIdentifier(literal)) continue;
+    if (isNonSecretBootstrapResourceIdentifier(literal)) continue;
     if (literal.length >= 40 && shannonEntropy(literal) >= 4.2) {
       findings.push("high-entropy string literal");
       break;

package/dist/cli/index.mjs

@@ -703,7 +703,7 @@ var SDK_RELEASE = {
   // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
   // 0.1.254 removes the internal operations tree from the published SDK CLI.
   // Operators use the checkout-local deepline-admin binary instead.
-  version: "0.1.289",
+  version: "0.1.291",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -4409,6 +4409,17 @@ var DeeplineClient = class {
     if (typeof options.limit === "number" && Number.isFinite(options.limit)) {
       params.set("limit", String(Math.max(1, Math.floor(options.limit))));
     }
+    if (options.offset !== void 0) {
+      if (!Number.isFinite(options.offset) || !Number.isInteger(options.offset) || options.offset < 0) {
+        throw new Error(
+          "runs.list options.offset must be a non-negative integer."
+        );
+      }
+      if (!playName && options.offset > 0) {
+        throw new Error("runs.list options.offset requires options.play.");
+      }
+      params.set("offset", String(options.offset));
+    }
     if (!playName && !status) {
       throw new Error("runs.list requires options.play or options.status.");
     }
@@ -16783,9 +16794,11 @@ async function handleRunGet(args) {
   return 0;
 }
 async function handleRunsList(args) {
-  const usage = "Usage: deepline runs list [--play <play-name>] [--status <status>] [--json]";
+  const usage = "Usage: deepline runs list [--play <play-name>] [--status <status>] [--limit <count>] [--offset <count>] [--json]";
   let playName = null;
   let statusFilter = null;
+  let limit;
+  let offset;
   for (let index = 0; index < args.length; index += 1) {
     const arg = args[index];
     if ((arg === "--play" || arg === "--name") && args[index + 1]) {
@@ -16796,6 +16809,24 @@ async function handleRunsList(args) {
       statusFilter = args[++index].trim().toLowerCase();
       continue;
     }
+    if (arg === "--limit" || arg === "--offset") {
+      const rawValue = args[index + 1];
+      const parsed = rawValue && /^\d+$/.test(rawValue) ? Number.parseInt(rawValue, 10) : Number.NaN;
+      const valid = Number.isSafeInteger(parsed) && (arg === "--limit" ? parsed > 0 : parsed >= 0);
+      if (!valid) {
+        console.error(
+          `${arg} must be ${arg === "--limit" ? "a positive" : "a non-negative"} integer.`
+        );
+        return 1;
+      }
+      if (arg === "--limit") {
+        limit = parsed;
+      } else {
+        offset = parsed;
+      }
+      index += 1;
+      continue;
+    }
     if (arg === "--json" || arg === "--compact") {
       continue;
     }
@@ -16804,10 +16835,16 @@ async function handleRunsList(args) {
     console.error(usage);
     return 1;
   }
+  if ((offset ?? 0) > 0 && !playName) {
+    console.error("--offset requires --play.");
+    return 1;
+  }
   const client2 = new DeeplineClient();
   const runs = (await client2.runs.list({
     ...playName ? { play: playName } : {},
-    ...statusFilter ? { status: statusFilter } : {}
+    ...statusFilter ? { status: statusFilter } : {},
+    ...limit !== void 0 ? { limit } : {},
+    ...offset !== void 0 ? { offset } : {}
   })).map((run) => ({
     runId: run.workflowId,
     workflowId: run.workflowId,
@@ -18364,10 +18401,12 @@ Examples:
   deepline runs list --play my-play --status failed --compact --json
   deepline runs list --status running --compact --json
 `
-  ).option("--play <name>", "Play name to filter runs").option("--status <status>", "Filter by run status").option("--compact", "Drop verbose fields from JSON output").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(async (options) => {
+  ).option("--play <name>", "Play name to filter runs").option("--status <status>", "Filter by run status").option("--limit <count>", "Maximum runs to return").option("--offset <count>", "Zero-based page offset (requires --play)").option("--compact", "Drop verbose fields from JSON output").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(async (options) => {
     process.exitCode = await handleRunsList([
       ...options.play ? ["--play", options.play] : [],
       ...options.status ? ["--status", options.status] : [],
+      ...options.limit ? ["--limit", options.limit] : [],
+      ...options.offset ? ["--offset", options.offset] : [],
       ...options.compact ? ["--compact"] : [],
       ...options.json ? ["--json"] : []
     ]);
@@ -29344,6 +29383,7 @@ var BEARER_LITERAL_PATTERN = /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}/i;
 var ASSIGNMENT_SECRET_LITERAL_PATTERN = /\b(?:api[_-]?key|token|secret|password)\b\s*[:=]\s*['"][^'"]{12,}['"]/i;
 var HIGH_ENTROPY_LITERAL_PATTERN = /['"]([A-Za-z0-9+/=_-]{32,})['"]/g;
 var UUID_IDENTIFIER_PATTERN = /^((?:[A-Za-z0-9]+[-_])*)?([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/i;
+var BOOTSTRAP_RESOURCE_IDENTIFIER_PATTERN = /^bootstrap-[0-9a-f]{32}(?:\/[a-z0-9][a-z0-9_-]{0,127})?$/i;
 var SECRET_LABEL_PATTERN = /(?:^|[-_])(?:api|auth|access|secret|token|key|password|credential|bearer|sk|pk|live)(?:[-_]|$)/i;
 function shannonEntropy(value) {
   const counts = /* @__PURE__ */ new Map();
@@ -29359,6 +29399,9 @@ function isNonSecretUuidIdentifier(value) {
   const label = match[1] ?? "";
   return !SECRET_LABEL_PATTERN.test(label);
 }
+function isNonSecretBootstrapResourceIdentifier(value) {
+  return BOOTSTRAP_RESOURCE_IDENTIFIER_PATTERN.test(value);
+}
 function collectInlineSecretFindings(sourceCode) {
   const findings = [];
   for (const match of sourceCode.matchAll(SECRET_ENV_PATTERN)) {
@@ -29373,6 +29416,7 @@ function collectInlineSecretFindings(sourceCode) {
   for (const match of sourceCode.matchAll(HIGH_ENTROPY_LITERAL_PATTERN)) {
     const literal = match[1] ?? "";
     if (isNonSecretUuidIdentifier(literal)) continue;
+    if (isNonSecretBootstrapResourceIdentifier(literal)) continue;
     if (literal.length >= 40 && shannonEntropy(literal) >= 4.2) {
       findings.push("high-entropy string literal");
       break;

package/dist/index.d.mts

@@ -1717,6 +1717,8 @@ type RunsListOptions = {
     play?: string;
     status?: string;
     limit?: number;
+    /** Zero-based page offset. Requires `play` because status-only inventory is not paginated. */
+    offset?: number;
 };
 /** Options for `client.runs.get(...)`. */
 type RunsGetOptions = {

package/dist/index.d.ts

@@ -1717,6 +1717,8 @@ type RunsListOptions = {
     play?: string;
     status?: string;
     limit?: number;
+    /** Zero-based page offset. Requires `play` because status-only inventory is not paginated. */
+    offset?: number;
 };
 /** Options for `client.runs.get(...)`. */
 type RunsGetOptions = {

package/dist/index.js

@@ -438,7 +438,7 @@ var SDK_RELEASE = {
   // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
   // 0.1.254 removes the internal operations tree from the published SDK CLI.
   // Operators use the checkout-local deepline-admin binary instead.
-  version: "0.1.289",
+  version: "0.1.291",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -4144,6 +4144,17 @@ var DeeplineClient = class {
     if (typeof options.limit === "number" && Number.isFinite(options.limit)) {
       params.set("limit", String(Math.max(1, Math.floor(options.limit))));
     }
+    if (options.offset !== void 0) {
+      if (!Number.isFinite(options.offset) || !Number.isInteger(options.offset) || options.offset < 0) {
+        throw new Error(
+          "runs.list options.offset must be a non-negative integer."
+        );
+      }
+      if (!playName && options.offset > 0) {
+        throw new Error("runs.list options.offset requires options.play.");
+      }
+      params.set("offset", String(options.offset));
+    }
     if (!playName && !status) {
       throw new Error("runs.list requires options.play or options.status.");
     }

package/dist/index.mjs

@@ -367,7 +367,7 @@ var SDK_RELEASE = {
   // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
   // 0.1.254 removes the internal operations tree from the published SDK CLI.
   // Operators use the checkout-local deepline-admin binary instead.
-  version: "0.1.289",
+  version: "0.1.291",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -4073,6 +4073,17 @@ var DeeplineClient = class {
     if (typeof options.limit === "number" && Number.isFinite(options.limit)) {
       params.set("limit", String(Math.max(1, Math.floor(options.limit))));
     }
+    if (options.offset !== void 0) {
+      if (!Number.isFinite(options.offset) || !Number.isInteger(options.offset) || options.offset < 0) {
+        throw new Error(
+          "runs.list options.offset must be a non-negative integer."
+        );
+      }
+      if (!playName && options.offset > 0) {
+        throw new Error("runs.list options.offset requires options.play.");
+      }
+      params.set("offset", String(options.offset));
+    }
     if (!playName && !status) {
       throw new Error("runs.list requires options.play or options.status.");
     }

package/dist/plays/bundle-play-file.mjs

@@ -70,6 +70,7 @@ var BEARER_LITERAL_PATTERN = /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}/i;
 var ASSIGNMENT_SECRET_LITERAL_PATTERN = /\b(?:api[_-]?key|token|secret|password)\b\s*[:=]\s*['"][^'"]{12,}['"]/i;
 var HIGH_ENTROPY_LITERAL_PATTERN = /['"]([A-Za-z0-9+/=_-]{32,})['"]/g;
 var UUID_IDENTIFIER_PATTERN = /^((?:[A-Za-z0-9]+[-_])*)?([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/i;
+var BOOTSTRAP_RESOURCE_IDENTIFIER_PATTERN = /^bootstrap-[0-9a-f]{32}(?:\/[a-z0-9][a-z0-9_-]{0,127})?$/i;
 var SECRET_LABEL_PATTERN = /(?:^|[-_])(?:api|auth|access|secret|token|key|password|credential|bearer|sk|pk|live)(?:[-_]|$)/i;
 function shannonEntropy(value) {
   const counts = /* @__PURE__ */ new Map();
@@ -85,6 +86,9 @@ function isNonSecretUuidIdentifier(value) {
   const label = match[1] ?? "";
   return !SECRET_LABEL_PATTERN.test(label);
 }
+function isNonSecretBootstrapResourceIdentifier(value) {
+  return BOOTSTRAP_RESOURCE_IDENTIFIER_PATTERN.test(value);
+}
 function collectInlineSecretFindings(sourceCode) {
   const findings = [];
   for (const match of sourceCode.matchAll(SECRET_ENV_PATTERN)) {
@@ -99,6 +103,7 @@ function collectInlineSecretFindings(sourceCode) {
   for (const match of sourceCode.matchAll(HIGH_ENTROPY_LITERAL_PATTERN)) {
     const literal = match[1] ?? "";
     if (isNonSecretUuidIdentifier(literal)) continue;
+    if (isNonSecretBootstrapResourceIdentifier(literal)) continue;
     if (literal.length >= 40 && shannonEntropy(literal) >= 4.2) {
       findings.push("high-entropy string literal");
       break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.1.289",
+  "version": "0.1.291",
   "description": "Deepline SDK + CLI — B2B data enrichment powered by durable cloud execution",
   "license": "MIT",
   "repository": {