deepline 0.2.49 → 0.2.51

package/dist/bundling-sources/shared_libs/plays/user-code-safety.ts

@@ -0,0 +1,61 @@
+// Compile-time safety gate for user-authored play code (enrich `extract_js`,
+// `run_if_js`, and `run_javascript` step `code`).
+//
+// Plays replay deterministically under Worker Loader, and the step code runs
+// with provider data in scope. So user code may NOT be non-deterministic
+// (Math.random, Date.now, ...) — replay would diverge — and may NOT reach out
+// of the sandbox (fetch, require, process, ...). We reject those at compile
+// time with a clear, named error (fail loud, per the repo non-negotiables).
+//
+// This is a fast static scan, not a security boundary on its own: the play
+// runtime is the real boundary (it executes step code in an isolate that does
+// not expose these globals). The scan exists to fail authoring early with a
+// readable message instead of producing a play that silently misbehaves at run
+// time. The `(?<!\.)` guards keep it from flagging harmless property access on
+// user objects (e.g. `row.process_date`, `data.fetch`).
+
+type ForbiddenRule = { readonly pattern: RegExp; readonly reason: string };
+
+const FORBIDDEN: readonly ForbiddenRule[] = [
+  // Non-deterministic — breaks replay.
+  { pattern: /\bMath\s*\.\s*random\b/, reason: 'Math.random()' },
+  { pattern: /\bDate\s*\.\s*now\b/, reason: 'Date.now()' },
+  { pattern: /\bnew\s+Date\s*\(\s*\)/, reason: 'new Date() with no argument' },
+  { pattern: /\bperformance\s*\.\s*now\b/, reason: 'performance.now()' },
+  {
+    pattern: /\bcrypto\s*\.\s*(?:randomUUID|getRandomValues)\b/,
+    reason: 'crypto random',
+  },
+  // Sandbox escape / I/O.
+  { pattern: /(?<!\.)\bfetch\s*\(/, reason: 'fetch()' },
+  { pattern: /(?<!\.)\bimport\s*\(/, reason: 'dynamic import()' },
+  { pattern: /(?<!\.)\brequire\s*\(/, reason: 'require()' },
+  { pattern: /(?<!\.)\beval\s*\(/, reason: 'eval()' },
+  {
+    pattern: /(?<!\.)\bnew\s+Function\b|(?<!\.)\bFunction\s*\(/,
+    reason: 'the Function constructor',
+  },
+  { pattern: /(?<!\.)\bprocess\b/, reason: 'process' },
+  { pattern: /(?<!\.)\bglobalThis\b/, reason: 'globalThis' },
+  { pattern: /(?<!\.)\b(?:window|self)\b/, reason: 'window/self' },
+  { pattern: /(?<!\.)\bXMLHttpRequest\b/, reason: 'XMLHttpRequest' },
+  { pattern: /(?<!\.)\bWebAssembly\b/, reason: 'WebAssembly' },
+];
+
+/**
+ * Throw if `code` references a forbidden (non-deterministic or sandbox-escaping)
+ * construct. `label` describes where the code came from for the error message,
+ * e.g. `extract_js for "email"` or `run_javascript step "enrich"`.
+ */
+export function assertUserCodeIsSafe(code: string, label: string): void {
+  if (typeof code !== 'string' || !code.trim()) return;
+  for (const { pattern, reason } of FORBIDDEN) {
+    if (pattern.test(code)) {
+      throw new Error(
+        `${label} uses ${reason}, which is not allowed in play code: it ` +
+          `breaks deterministic replay or escapes the sandbox. Remove it and ` +
+          `compute the value from the row/result instead.`,
+      );
+    }
+  }
+}

package/dist/cli/index.js

@@ -1044,7 +1044,7 @@ var SDK_RELEASE = {
   // 0.2.0 makes Dataset Handles uniformly async-only after 0.1.320 briefly
   // exposed storage-dependent synchronous access. This deliberate minor
   // release keeps lazy paging semantics independent of row residency.
-  version: "0.2.49",
+  version: "0.2.51",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -6034,6 +6034,7 @@ var DeeplineClient = class {
       params.set("limit", String(options.limit));
     if (options?.cursor) params.set("cursor", options.cursor);
     if (options?.compact) params.set("compact", "true");
+    if (options?.includeConsumers) params.set("include_consumers", "true");
     const query = params.toString();
     const suffix = query ? `?${query}` : "";
     return this.http.request(
@@ -6055,7 +6056,7 @@ var DeeplineClient = class {
         method: "POST",
         body: {
           payload,
-          ...options?.validationOnly ? { mode: "validation_only" } : {}
+          ...options?.validationOnly ? { mode: "validation_only" } : options?.dispatch ? { mode: "dispatch" } : {}
         }
       }
     );
@@ -16170,6 +16171,7 @@ var PLAY_AUTHORING_CLOUD_TYPE_DECLARATIONS = [
   "  csv<T = Record<string, unknown>>(path: string | CsvInput<T & object>, options?: CsvOptions): Promise<PlayDataset<T>>;",
   "  dataset<TSource extends PlayDatasetInput<object>>(key: string, items: TSource): DatasetBuilder<PlayDatasetRow<TSource> & object, PlayDatasetRow<TSource> & object>;",
   "  map<TSource extends PlayDatasetInput<object>>(key: string, items: TSource, options?: DatasetDefinitionOptions<PlayDatasetRow<TSource> & object>): never;",
+  "  readonly run: { readonly id: string };",
   `  runSteps<TInput extends Record<string, unknown>, TOutput>(program: RunnableStepProgram<TInput, TOutput>, input: TInput, options?: { description?: ${cloudReferenceType("ctx.runSteps.options.description")} }): Promise<TOutput>;`,
   "  tools: { execute<K extends string>(request: ToolExecutionRequest<K>): Promise<ToolExecutionOutput<K>> };",
   `  customerDb: { query<TRow extends Record<string, unknown> = Record<string, unknown>>(statement: SqlQuery, options?: { maxRows?: ${cloudReferenceType("ctx.customerDb.query.options.maxRows")}; timeoutMs?: ${cloudReferenceType("ctx.customerDb.query.options.timeoutMs")} }): Promise<TRow[]> };`,
@@ -21669,6 +21671,11 @@ function printPlayTriggers(triggers) {
     const whereNote = listener.where ? " (with where filter)" : "";
     console.log(`    sqlListeners \u2192 ${target} on ${operations}${whereNote}`);
   }
+  if (triggers.sqlListenerEvent) {
+    console.log(
+      `    sqlListener input \u2192 one top-level event per matched row: ${triggers.sqlListenerEvent.fields.join(", ")}`
+    );
+  }
   if (triggers.cron) {
     const timezone = triggers.cron.timezone ? ` (${triggers.cron.timezone})` : "";
     console.log(`    cron \u2192 ${triggers.cron.schedule}${timezone}`);
@@ -23630,6 +23637,8 @@ Notes:
   without starting a run or spending Deepline credits.
   Local .play.ts checks bundle the play, validate its artifact, and stop before
   any cloud run is created.
+  SQL-listener checks echo one top-level changed-row input event under
+  recognized.triggers.sqlListenerEvent; listeners do not receive an events batch.
 
 Examples:
   deepline plays check prebuilt/name-and-domain-to-email-waterfall-batch
@@ -24663,7 +24672,7 @@ function getterFromLegacyExtractJs(extractJs, fallbackAlias) {
   return null;
 }
 
-// src/cli/enrich-compat-adapter.ts
+// ../shared_libs/plays/enrich-compat-adapter.ts
 var ENRICH_COMPAT_DEFAULT_PLAY_NAME = "deepline-enrich-v1-compat";
 var ENRICH_COMPAT_DEFAULT_MAP_NAME = "deepline_enrich_rows";
 function buildEnrichCompatibilityPlan(options = {}) {
@@ -24673,7 +24682,7 @@ function buildEnrichCompatibilityPlan(options = {}) {
   };
 }
 
-// src/cli/user-code-safety.ts
+// ../shared_libs/plays/user-code-safety.ts
 var FORBIDDEN = [
   // Non-deterministic — breaks replay.
   { pattern: /\bMath\s*\.\s*random\b/, reason: "Math.random()" },
@@ -24710,7 +24719,7 @@ function assertUserCodeIsSafe(code, label) {
   }
 }
 
-// src/cli/enrich-play-compiler.ts
+// ../shared_libs/plays/enrich-play-compiler.ts
 function isWaterfall(command) {
   return "with_waterfall" in command;
 }
@@ -25141,7 +25150,9 @@ function compileEnrichConfigToPlaySource(config, options = {}) {
   const generatedAliases = collectGeneratedAliases(config.commands);
   const runOptionsSource = options.failFast ? `{ key: (row, index) => __dlEnrichRowKey(row, index + rowStart), onRowError: 'fail' as const }` : `{ key: (row, index) => __dlEnrichRowKey(row, index + rowStart) }`;
   const playOptionsSource = [
-    `description: ${stringLiteral("Read a CSV file, run the configured Deepline enrich commands, and return enriched rows.")}`,
+    `description: ${stringLiteral(
+      "Read a CSV file, run the configured Deepline enrich commands, and return enriched rows."
+    )}`,
     ...options.maxCreditsPerRun === void 0 ? [] : [`billing: { maxCreditsPerRun: ${String(options.maxCreditsPerRun)} }`]
   ].join(", ");
   const body = [
@@ -30858,6 +30869,20 @@ function renderDeployReplacementWarning(input2) {
   );
   return lines;
 }
+function renderDeployFilterRemovalWarning(payload) {
+  const summary = asRecord2(payload.change_summary);
+  const definition = summary ? asRecord2(summary.definition) : void 0;
+  const changed = definition && Array.isArray(definition.changed) ? definition.changed : [];
+  const removed = changed.some((raw) => {
+    const item = asRecord2(raw);
+    return asString(item?.path) === "payload.job_titles" && item?.before != null && item.after == null;
+  });
+  return removed ? [
+    "WARNING: this full deploy removes the job_titles filter.",
+    "Future findings will be unfiltered. Existing Customer DB rows are preserved.",
+    'Use `deepline monitors update <key> {"payload":{"job_titles":"..."}}` to change only the filter.'
+  ] : [];
+}
 function renderMonitorDeployCompletion(payload) {
   const monitor = asRecord2(payload.monitor);
   const key = monitor ? asString(monitor.key) : void 0;
@@ -30891,6 +30916,8 @@ function renderMonitorDeployCompletion(payload) {
     monitorKey: key
   });
   if (replacementWarning.length) lines.push("", ...replacementWarning);
+  const filterRemovalWarning = renderDeployFilterRemovalWarning(payload);
+  if (filterRemovalWarning.length) lines.push("", ...filterRemovalWarning);
   const guidance = asRecord2(payload.setup_guidance);
   if (guidance) {
     const callbackUrl = asString(guidance.callback_url);
@@ -30947,6 +30974,8 @@ function renderMonitorDeployPlan(payload) {
     completed: false
   });
   if (replacementWarning.length) lines.push("", ...replacementWarning);
+  const filterRemovalWarning = renderDeployFilterRemovalWarning(payload);
+  if (filterRemovalWarning.length) lines.push("", ...filterRemovalWarning);
   const estimate = asRecord2(payload.deploy_cost_estimate);
   const credits = estimate ? asFiniteNumber(estimate.credits) : void 0;
   if (credits !== void 0) {
@@ -31153,11 +31182,31 @@ function renderDeployedListText(payload, requestedStatus) {
     if (hasLastReceivedEvent) {
       lines.push(`    last received: ${lastReceivedEvent ?? "never"}`);
     }
+    if (Array.isArray(entry.bound_plays)) {
+      for (const rawPlay of entry.bound_plays) {
+        const play = asRecord2(rawPlay);
+        const playName = asString(play?.name) ?? "unnamed Play";
+        const health = asRecord2(play?.consumer_health);
+        const healthRequested = Boolean(play && "consumer_health" in play);
+        const state = healthRequested ? asString(health?.last_run_status) ?? "no delivery yet" : "health not requested";
+        const lastError = asString(health?.last_error);
+        lines.push(
+          `    consumer: ${playName} \u2014 ${state}${lastError ? ` (${lastError})` : ""}`
+        );
+      }
+    }
   }
   const applied = asString(payload.status_filter_applied) ?? requestedStatus ?? "active";
   lines.push(
     `Status filter: ${applied}${requestedStatus === void 0 && applied === "active" ? " (default)" : ""} \u2014 use --status all to include disabled monitors.`
   );
+  const summary = Array.isArray(payload.status_summary) ? payload.status_summary.flatMap((raw) => {
+    const item = asRecord2(raw);
+    const status = item ? asString(item.status) : void 0;
+    const count = item ? asFiniteNumber(item.count) : void 0;
+    return status && count !== void 0 ? [`${status}: ${count}`] : [];
+  }).join("  ") : "";
+  if (summary) lines.push(`All lifecycle states: ${summary}`);
   if (payload.is_truncated === true) {
     const nextCursor = asString(payload.next_cursor);
     lines.push(
@@ -31176,7 +31225,8 @@ async function handleMonitorsList(options) {
     ...options.status ? { status: options.status } : {},
     ...options.limit ? { limit: options.limit } : {},
     ...options.cursor ? { cursor: options.cursor } : {},
-    ...options.compact ? { compact: true } : {}
+    ...options.compact ? { compact: true } : {},
+    ...options.includeConsumers ? { includeConsumers: true } : {}
   });
   printCommandEnvelope(payload, {
     json: options.json,
@@ -31239,6 +31289,10 @@ function renderMonitorGet(payload) {
   const webhook = asRecord2(payload.webhook);
   const guidance = asRecord2(payload.setup_guidance);
   const plays = dependents && Array.isArray(dependents.plays) ? dependents.plays : [];
+  const boundPlays = Array.isArray(payload.bound_plays) ? payload.bound_plays.flatMap((value) => {
+    const play = asRecord2(value);
+    return play ? [play] : [];
+  }) : [];
   const lines = [
     `Monitor: ${key}`,
     `Tool: ${tool}`,
@@ -31280,6 +31334,31 @@ function renderMonitorGet(payload) {
       `  deepline monitors test ${key} '${JSON.stringify(samplePayload2)}' --json`
     );
   }
+  lines.push("", `Current SQL listener consumers (${boundPlays.length}):`);
+  if (boundPlays.length === 0) {
+    lines.push("  none");
+  } else {
+    for (const play of boundPlays) {
+      const name = asString(play.name) ?? "unnamed Play";
+      const listener = asString(play.listener_key);
+      const health = asRecord2(play.consumer_health);
+      const status2 = asString(health?.last_run_status) ?? "no delivery yet";
+      const lastDelivery = asFiniteNumber(health?.last_delivery_at);
+      const error = asString(health?.last_error);
+      lines.push(
+        `  ${name}${listener ? ` (listener: ${listener})` : ""}: ${status2}`
+      );
+      if (lastDelivery !== void 0) {
+        lines.push(
+          `    last delivery: ${new Date(lastDelivery).toISOString()}`
+        );
+      }
+      if (error) lines.push(`    error: ${error}`);
+    }
+  }
+  if (payload.consumer_health_truncated === true) {
+    lines.push("  Results are truncated; use --json for the returned detail.");
+  }
   lines.push("", `Dependent published plays (${plays.length}):`);
   if (plays.length === 0) {
     lines.push("  none");
@@ -31304,7 +31383,11 @@ function renderMonitorGet(payload) {
 async function handleMonitorsGet(key, options) {
   const client2 = new DeeplineClient();
   const payload = await client2.monitors.get(key);
-  const dependents = await client2.monitors.dependents(key);
+  const boundPlays = Array.isArray(payload.bound_plays) ? payload.bound_plays : null;
+  const dependents = boundPlays ? {
+    plays: boundPlays,
+    truncated: payload.consumer_health_truncated === true
+  } : await client2.monitors.dependents(key);
   const detail = { ...payload, dependents };
   printCommandEnvelope(detail, {
     json: options.json,
@@ -31317,7 +31400,8 @@ async function handleMonitorsTest(key, payload, options) {
     key,
     explicitPayload,
     {
-      validationOnly: options.dispatch !== true
+      validationOnly: options.dispatch !== true,
+      dispatch: options.dispatch === true
     }
   );
   const dispatch = options.dispatch === true;
@@ -31503,12 +31587,17 @@ Notes:
   not the page size), returned, is_truncated, and next_cursor. When is_truncated
   is true, page with --cursor <next_cursor> until it is false \u2014 a "no matching
   monitor" reuse conclusion off a truncated page deploys a duplicate paid feed.
+  The default list stays cheap: it includes the current downstream Play binding
+  metadata but does not resolve per-monitor delivery/run health. Pass
+  --include-consumers with --limit 20 or fewer to include the current
+  SQL-listener delivery/run health for each returned monitor.
 
 Examples:
   deepline monitors list
   deepline monitors list --status all --json
   deepline monitors list --status all --cursor <next_cursor> --json
   deepline monitors list --compact --json
+  deepline monitors list --include-consumers --limit 20 --json
 `
     ).option(
       "--status <status>",
@@ -31516,7 +31605,10 @@ Examples:
     ).option("--limit <n>", "Limit the number of deployed monitors returned").option(
       "--cursor <cursor>",
       "Page past a truncated result using the next_cursor from a prior list response"
-    ).option("--compact", COMPACT_OPTION_DESCRIPTION)
+    ).option("--compact", COMPACT_OPTION_DESCRIPTION).option(
+      "--include-consumers",
+      "Include current SQL-listener consumer health (requires --limit 20 or fewer)"
+    )
   ).action(monitorsAction(handleMonitorsList));
   withJsonOption(
     monitors.command("get <key>").description("Show a single deployed monitor by its public key.").addHelpText(
@@ -31566,10 +31658,11 @@ Notes:
   and optional controls (Deepline lifecycle metadata). Pass it positionally,
   via --file <path>, or
   from stdin with --file -. Does not deploy or spend credits.
-  For Deepline Native Company Radar monitors, check validates persona-filter enums and the
-  job_titles Boolean-expression grammar locally (parentheses are unsupported;
-  NOT > AND > OR).
-  Inspect the exact schema with
+  Check validates the local definition only. It does not contact an existing
+  upstream resource, prove that future events will arrive, or verify downstream
+  Play delivery. The JSON response reports this validation scope explicitly.
+  Provider-specific grammar, precedence, enum applicability, examples, and
+  update semantics are returned by the live monitor contract. Inspect it with
   \`deepline monitors available deepline_native.company_radar --json\`.
 
 Examples:
@@ -31678,7 +31771,10 @@ Examples:
     ).option("--limit <n>", "Limit the number of deployed monitors returned").option(
       "--cursor <cursor>",
       "Page past a truncated result using the next_cursor from a prior list response"
-    ).option("--compact", COMPACT_OPTION_DESCRIPTION)
+    ).option("--compact", COMPACT_OPTION_DESCRIPTION).option(
+      "--include-consumers",
+      "Include current SQL-listener consumer health (requires --limit 20 or fewer)"
+    )
   ).action(monitorsAction(handleMonitorsList));
   withJsonOption(
     deployed.command("get <key>").description("Alias of `monitors get <key>`.")

package/dist/cli/index.mjs

@@ -1030,7 +1030,7 @@ var SDK_RELEASE = {
   // 0.2.0 makes Dataset Handles uniformly async-only after 0.1.320 briefly
   // exposed storage-dependent synchronous access. This deliberate minor
   // release keeps lazy paging semantics independent of row residency.
-  version: "0.2.49",
+  version: "0.2.51",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -6020,6 +6020,7 @@ var DeeplineClient = class {
       params.set("limit", String(options.limit));
     if (options?.cursor) params.set("cursor", options.cursor);
     if (options?.compact) params.set("compact", "true");
+    if (options?.includeConsumers) params.set("include_consumers", "true");
     const query = params.toString();
     const suffix = query ? `?${query}` : "";
     return this.http.request(
@@ -6041,7 +6042,7 @@ var DeeplineClient = class {
         method: "POST",
         body: {
           payload,
-          ...options?.validationOnly ? { mode: "validation_only" } : {}
+          ...options?.validationOnly ? { mode: "validation_only" } : options?.dispatch ? { mode: "dispatch" } : {}
         }
       }
     );
@@ -12313,7 +12314,9 @@ import {
   extname,
   isAbsolute as isAbsolute3,
   join as join7,
-  resolve as resolve8
+  relative as relative2,
+  resolve as resolve8,
+  sep
 } from "path";
 import { builtinModules } from "module";
 import { Parser } from "acorn";
@@ -16207,6 +16210,7 @@ var PLAY_AUTHORING_CLOUD_TYPE_DECLARATIONS = [
   "  csv<T = Record<string, unknown>>(path: string | CsvInput<T & object>, options?: CsvOptions): Promise<PlayDataset<T>>;",
   "  dataset<TSource extends PlayDatasetInput<object>>(key: string, items: TSource): DatasetBuilder<PlayDatasetRow<TSource> & object, PlayDatasetRow<TSource> & object>;",
   "  map<TSource extends PlayDatasetInput<object>>(key: string, items: TSource, options?: DatasetDefinitionOptions<PlayDatasetRow<TSource> & object>): never;",
+  "  readonly run: { readonly id: string };",
   `  runSteps<TInput extends Record<string, unknown>, TOutput>(program: RunnableStepProgram<TInput, TOutput>, input: TInput, options?: { description?: ${cloudReferenceType("ctx.runSteps.options.description")} }): Promise<TOutput>;`,
   "  tools: { execute<K extends string>(request: ToolExecutionRequest<K>): Promise<ToolExecutionOutput<K>> };",
   `  customerDb: { query<TRow extends Record<string, unknown> = Record<string, unknown>>(statement: SqlQuery, options?: { maxRows?: ${cloudReferenceType("ctx.customerDb.query.options.maxRows")}; timeoutMs?: ${cloudReferenceType("ctx.customerDb.query.options.timeoutMs")} }): Promise<TRow[]> };`,
@@ -21713,6 +21717,11 @@ function printPlayTriggers(triggers) {
     const whereNote = listener.where ? " (with where filter)" : "";
     console.log(`    sqlListeners \u2192 ${target} on ${operations}${whereNote}`);
   }
+  if (triggers.sqlListenerEvent) {
+    console.log(
+      `    sqlListener input \u2192 one top-level event per matched row: ${triggers.sqlListenerEvent.fields.join(", ")}`
+    );
+  }
   if (triggers.cron) {
     const timezone = triggers.cron.timezone ? ` (${triggers.cron.timezone})` : "";
     console.log(`    cron \u2192 ${triggers.cron.schedule}${timezone}`);
@@ -23674,6 +23683,8 @@ Notes:
   without starting a run or spending Deepline credits.
   Local .play.ts checks bundle the play, validate its artifact, and stop before
   any cloud run is created.
+  SQL-listener checks echo one top-level changed-row input event under
+  recognized.triggers.sqlListenerEvent; listeners do not receive an events batch.
 
 Examples:
   deepline plays check prebuilt/name-and-domain-to-email-waterfall-batch
@@ -24707,7 +24718,7 @@ function getterFromLegacyExtractJs(extractJs, fallbackAlias) {
   return null;
 }
 
-// src/cli/enrich-compat-adapter.ts
+// ../shared_libs/plays/enrich-compat-adapter.ts
 var ENRICH_COMPAT_DEFAULT_PLAY_NAME = "deepline-enrich-v1-compat";
 var ENRICH_COMPAT_DEFAULT_MAP_NAME = "deepline_enrich_rows";
 function buildEnrichCompatibilityPlan(options = {}) {
@@ -24717,7 +24728,7 @@ function buildEnrichCompatibilityPlan(options = {}) {
   };
 }
 
-// src/cli/user-code-safety.ts
+// ../shared_libs/plays/user-code-safety.ts
 var FORBIDDEN = [
   // Non-deterministic — breaks replay.
   { pattern: /\bMath\s*\.\s*random\b/, reason: "Math.random()" },
@@ -24754,7 +24765,7 @@ function assertUserCodeIsSafe(code, label) {
   }
 }
 
-// src/cli/enrich-play-compiler.ts
+// ../shared_libs/plays/enrich-play-compiler.ts
 function isWaterfall(command) {
   return "with_waterfall" in command;
 }
@@ -25185,7 +25196,9 @@ function compileEnrichConfigToPlaySource(config, options = {}) {
   const generatedAliases = collectGeneratedAliases(config.commands);
   const runOptionsSource = options.failFast ? `{ key: (row, index) => __dlEnrichRowKey(row, index + rowStart), onRowError: 'fail' as const }` : `{ key: (row, index) => __dlEnrichRowKey(row, index + rowStart) }`;
   const playOptionsSource = [
-    `description: ${stringLiteral("Read a CSV file, run the configured Deepline enrich commands, and return enriched rows.")}`,
+    `description: ${stringLiteral(
+      "Read a CSV file, run the configured Deepline enrich commands, and return enriched rows."
+    )}`,
     ...options.maxCreditsPerRun === void 0 ? [] : [`billing: { maxCreditsPerRun: ${String(options.maxCreditsPerRun)} }`]
   ].join(", ");
   const body = [
@@ -30909,6 +30922,20 @@ function renderDeployReplacementWarning(input2) {
   );
   return lines;
 }
+function renderDeployFilterRemovalWarning(payload) {
+  const summary = asRecord2(payload.change_summary);
+  const definition = summary ? asRecord2(summary.definition) : void 0;
+  const changed = definition && Array.isArray(definition.changed) ? definition.changed : [];
+  const removed = changed.some((raw) => {
+    const item = asRecord2(raw);
+    return asString(item?.path) === "payload.job_titles" && item?.before != null && item.after == null;
+  });
+  return removed ? [
+    "WARNING: this full deploy removes the job_titles filter.",
+    "Future findings will be unfiltered. Existing Customer DB rows are preserved.",
+    'Use `deepline monitors update <key> {"payload":{"job_titles":"..."}}` to change only the filter.'
+  ] : [];
+}
 function renderMonitorDeployCompletion(payload) {
   const monitor = asRecord2(payload.monitor);
   const key = monitor ? asString(monitor.key) : void 0;
@@ -30942,6 +30969,8 @@ function renderMonitorDeployCompletion(payload) {
     monitorKey: key
   });
   if (replacementWarning.length) lines.push("", ...replacementWarning);
+  const filterRemovalWarning = renderDeployFilterRemovalWarning(payload);
+  if (filterRemovalWarning.length) lines.push("", ...filterRemovalWarning);
   const guidance = asRecord2(payload.setup_guidance);
   if (guidance) {
     const callbackUrl = asString(guidance.callback_url);
@@ -30998,6 +31027,8 @@ function renderMonitorDeployPlan(payload) {
     completed: false
   });
   if (replacementWarning.length) lines.push("", ...replacementWarning);
+  const filterRemovalWarning = renderDeployFilterRemovalWarning(payload);
+  if (filterRemovalWarning.length) lines.push("", ...filterRemovalWarning);
   const estimate = asRecord2(payload.deploy_cost_estimate);
   const credits = estimate ? asFiniteNumber(estimate.credits) : void 0;
   if (credits !== void 0) {
@@ -31204,11 +31235,31 @@ function renderDeployedListText(payload, requestedStatus) {
     if (hasLastReceivedEvent) {
       lines.push(`    last received: ${lastReceivedEvent ?? "never"}`);
     }
+    if (Array.isArray(entry.bound_plays)) {
+      for (const rawPlay of entry.bound_plays) {
+        const play = asRecord2(rawPlay);
+        const playName = asString(play?.name) ?? "unnamed Play";
+        const health = asRecord2(play?.consumer_health);
+        const healthRequested = Boolean(play && "consumer_health" in play);
+        const state = healthRequested ? asString(health?.last_run_status) ?? "no delivery yet" : "health not requested";
+        const lastError = asString(health?.last_error);
+        lines.push(
+          `    consumer: ${playName} \u2014 ${state}${lastError ? ` (${lastError})` : ""}`
+        );
+      }
+    }
   }
   const applied = asString(payload.status_filter_applied) ?? requestedStatus ?? "active";
   lines.push(
     `Status filter: ${applied}${requestedStatus === void 0 && applied === "active" ? " (default)" : ""} \u2014 use --status all to include disabled monitors.`
   );
+  const summary = Array.isArray(payload.status_summary) ? payload.status_summary.flatMap((raw) => {
+    const item = asRecord2(raw);
+    const status = item ? asString(item.status) : void 0;
+    const count = item ? asFiniteNumber(item.count) : void 0;
+    return status && count !== void 0 ? [`${status}: ${count}`] : [];
+  }).join("  ") : "";
+  if (summary) lines.push(`All lifecycle states: ${summary}`);
   if (payload.is_truncated === true) {
     const nextCursor = asString(payload.next_cursor);
     lines.push(
@@ -31227,7 +31278,8 @@ async function handleMonitorsList(options) {
     ...options.status ? { status: options.status } : {},
     ...options.limit ? { limit: options.limit } : {},
     ...options.cursor ? { cursor: options.cursor } : {},
-    ...options.compact ? { compact: true } : {}
+    ...options.compact ? { compact: true } : {},
+    ...options.includeConsumers ? { includeConsumers: true } : {}
   });
   printCommandEnvelope(payload, {
     json: options.json,
@@ -31290,6 +31342,10 @@ function renderMonitorGet(payload) {
   const webhook = asRecord2(payload.webhook);
   const guidance = asRecord2(payload.setup_guidance);
   const plays = dependents && Array.isArray(dependents.plays) ? dependents.plays : [];
+  const boundPlays = Array.isArray(payload.bound_plays) ? payload.bound_plays.flatMap((value) => {
+    const play = asRecord2(value);
+    return play ? [play] : [];
+  }) : [];
   const lines = [
     `Monitor: ${key}`,
     `Tool: ${tool}`,
@@ -31331,6 +31387,31 @@ function renderMonitorGet(payload) {
       `  deepline monitors test ${key} '${JSON.stringify(samplePayload2)}' --json`
     );
   }
+  lines.push("", `Current SQL listener consumers (${boundPlays.length}):`);
+  if (boundPlays.length === 0) {
+    lines.push("  none");
+  } else {
+    for (const play of boundPlays) {
+      const name = asString(play.name) ?? "unnamed Play";
+      const listener = asString(play.listener_key);
+      const health = asRecord2(play.consumer_health);
+      const status2 = asString(health?.last_run_status) ?? "no delivery yet";
+      const lastDelivery = asFiniteNumber(health?.last_delivery_at);
+      const error = asString(health?.last_error);
+      lines.push(
+        `  ${name}${listener ? ` (listener: ${listener})` : ""}: ${status2}`
+      );
+      if (lastDelivery !== void 0) {
+        lines.push(
+          `    last delivery: ${new Date(lastDelivery).toISOString()}`
+        );
+      }
+      if (error) lines.push(`    error: ${error}`);
+    }
+  }
+  if (payload.consumer_health_truncated === true) {
+    lines.push("  Results are truncated; use --json for the returned detail.");
+  }
   lines.push("", `Dependent published plays (${plays.length}):`);
   if (plays.length === 0) {
     lines.push("  none");
@@ -31355,7 +31436,11 @@ function renderMonitorGet(payload) {
 async function handleMonitorsGet(key, options) {
   const client2 = new DeeplineClient();
   const payload = await client2.monitors.get(key);
-  const dependents = await client2.monitors.dependents(key);
+  const boundPlays = Array.isArray(payload.bound_plays) ? payload.bound_plays : null;
+  const dependents = boundPlays ? {
+    plays: boundPlays,
+    truncated: payload.consumer_health_truncated === true
+  } : await client2.monitors.dependents(key);
   const detail = { ...payload, dependents };
   printCommandEnvelope(detail, {
     json: options.json,
@@ -31368,7 +31453,8 @@ async function handleMonitorsTest(key, payload, options) {
     key,
     explicitPayload,
     {
-      validationOnly: options.dispatch !== true
+      validationOnly: options.dispatch !== true,
+      dispatch: options.dispatch === true
     }
   );
   const dispatch = options.dispatch === true;
@@ -31554,12 +31640,17 @@ Notes:
   not the page size), returned, is_truncated, and next_cursor. When is_truncated
   is true, page with --cursor <next_cursor> until it is false \u2014 a "no matching
   monitor" reuse conclusion off a truncated page deploys a duplicate paid feed.
+  The default list stays cheap: it includes the current downstream Play binding
+  metadata but does not resolve per-monitor delivery/run health. Pass
+  --include-consumers with --limit 20 or fewer to include the current
+  SQL-listener delivery/run health for each returned monitor.
 
 Examples:
   deepline monitors list
   deepline monitors list --status all --json
   deepline monitors list --status all --cursor <next_cursor> --json
   deepline monitors list --compact --json
+  deepline monitors list --include-consumers --limit 20 --json
 `
     ).option(
       "--status <status>",
@@ -31567,7 +31658,10 @@ Examples:
     ).option("--limit <n>", "Limit the number of deployed monitors returned").option(
       "--cursor <cursor>",
       "Page past a truncated result using the next_cursor from a prior list response"
-    ).option("--compact", COMPACT_OPTION_DESCRIPTION)
+    ).option("--compact", COMPACT_OPTION_DESCRIPTION).option(
+      "--include-consumers",
+      "Include current SQL-listener consumer health (requires --limit 20 or fewer)"
+    )
   ).action(monitorsAction(handleMonitorsList));
   withJsonOption(
     monitors.command("get <key>").description("Show a single deployed monitor by its public key.").addHelpText(
@@ -31617,10 +31711,11 @@ Notes:
   and optional controls (Deepline lifecycle metadata). Pass it positionally,
   via --file <path>, or
   from stdin with --file -. Does not deploy or spend credits.
-  For Deepline Native Company Radar monitors, check validates persona-filter enums and the
-  job_titles Boolean-expression grammar locally (parentheses are unsupported;
-  NOT > AND > OR).
-  Inspect the exact schema with
+  Check validates the local definition only. It does not contact an existing
+  upstream resource, prove that future events will arrive, or verify downstream
+  Play delivery. The JSON response reports this validation scope explicitly.
+  Provider-specific grammar, precedence, enum applicability, examples, and
+  update semantics are returned by the live monitor contract. Inspect it with
   \`deepline monitors available deepline_native.company_radar --json\`.
 
 Examples:
@@ -31729,7 +31824,10 @@ Examples:
     ).option("--limit <n>", "Limit the number of deployed monitors returned").option(
       "--cursor <cursor>",
       "Page past a truncated result using the next_cursor from a prior list response"
-    ).option("--compact", COMPACT_OPTION_DESCRIPTION)
+    ).option("--compact", COMPACT_OPTION_DESCRIPTION).option(
+      "--include-consumers",
+      "Include current SQL-listener consumer health (requires --limit 20 or fewer)"
+    )
   ).action(monitorsAction(handleMonitorsList));
   withJsonOption(
     deployed.command("get <key>").description("Alias of `monitors get <key>`.")