deepline 0.2.63 → 0.2.65

package/dist/bundling-sources/sdk/src/release.ts

@@ -160,7 +160,7 @@ export const SDK_RELEASE = {
   // 0.2.0 makes Dataset Handles uniformly async-only after 0.1.320 briefly
   // exposed storage-dependent synchronous access. This deliberate minor
   // release keeps lazy paging semantics independent of row residency.
-  version: '0.2.63',
+  version: '0.2.65',
   contracts: {
     api: {
       name: 'sdk-http-api',

package/dist/bundling-sources/shared_libs/plays/docflow.ts

@@ -545,7 +545,7 @@ function parseContractPaths(
     .filter(Boolean);
   if (paths.some((path) => !DOCFLOW_PATH.test(path))) {
     errors.push(
-      `Docflow annotation "${nodeId}" on line ${line} has an invalid ${attribute}:"…" contract. Use comma-separated identifiers or property paths only.`,
+      `Docflow annotation "${nodeId}" on line ${line} has an invalid ${attribute}:"…" contract. Use comma-separated identifiers or property paths only — e.g. the assigned const name (out:"result"). Prose labels belong in the diagram box, not here.`,
     );
     return undefined;
   }

package/dist/bundling-sources/shared_libs/tool-execution-error.ts

@@ -370,25 +370,33 @@ export class ProviderTransientError extends ToolExecutionError {
 /** Why a provider cannot serve the current read request. */
 export type ProviderUnavailableReason =
   | ProviderTransientErrorCategory
-  | 'account_capacity';
+  | 'account_capacity'
+  | 'credentials_missing';
 
 /**
- * A provider-owned failure that permits a read waterfall to try its next
- * provider. This does not include invalid credentials, caller input, or
- * Deepline billing failures.
+ * A provider failure that permits a read waterfall to try its next provider.
+ * A missing provider connection is included because another provider may still
+ * serve the read. Invalid credentials, caller input, and Deepline billing
+ * failures remain loud.
  */
 export type ProviderUnavailableError =
   | ProviderTransientError
   | (ToolExecutionError & {
       readonly origin: 'provider';
       readonly code: 'PROVIDER_ACCOUNT_CAPACITY';
+    })
+  | (ToolExecutionError & {
+      readonly origin: 'caller';
+      readonly code: 'INTEGRATION_CREDENTIALS_MISSING';
     });
 
 /**
  * Return the provider-specific reason a read cannot run right now.
  *
  * `null` means this error must stay loud: it is caller input, an invalid
- * customer credential, Deepline billing, or an internal failure.
+ * customer credential, Deepline billing, or an internal failure. A missing
+ * provider connection is different: an explicit read waterfall may continue
+ * to a configured fallback and record the unavailable leg.
  */
 export function getProviderUnavailableReason(
   error: unknown,
@@ -401,6 +409,13 @@ export function getProviderUnavailableReason(
   ) {
     return 'account_capacity';
   }
+  if (
+    error instanceof ToolExecutionError &&
+    error.origin === 'caller' &&
+    error.code === 'INTEGRATION_CREDENTIALS_MISSING'
+  ) {
+    return 'credentials_missing';
+  }
   return null;
 }
 

package/dist/cli/index.js

@@ -1044,7 +1044,7 @@ var SDK_RELEASE = {
   // 0.2.0 makes Dataset Handles uniformly async-only after 0.1.320 briefly
   // exposed storage-dependent synchronous access. This deliberate minor
   // release keeps lazy paging semantics independent of row residency.
-  version: "0.2.63",
+  version: "0.2.65",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -38091,6 +38091,13 @@ function isRegistryAccessFailure(output2, registryUrl) {
 function withRegistry(args, registryUrl) {
   return [...args.slice(0, -1), "--registry", registryUrl, args.at(-1) ?? ""];
 }
+function isBinLinkExistsFailure(output2) {
+  return /\bEEXIST\b/i.test(output2) && /symlink/i.test(output2);
+}
+function withForce(args) {
+  if (args.includes("--force")) return args;
+  return [...args.slice(0, -1), "--force", args.at(-1) ?? ""];
+}
 async function runNpmInstallWithRegistryFallback(input2) {
   const primaryArgs = input2.primaryRegistryUrl ? withRegistry(input2.installArgs, input2.primaryRegistryUrl) : input2.installArgs;
   const first = await runCommand(
@@ -38098,22 +38105,36 @@ async function runNpmInstallWithRegistryFallback(input2) {
     primaryArgs,
     input2.env ?? process.env
   );
-  if (first.exitCode === 0 || !input2.fallbackRegistryUrl || !isRegistryAccessFailure(
+  if (first.exitCode === 0) {
+    return first.exitCode;
+  }
+  if (input2.fallbackRegistryUrl && isRegistryAccessFailure(
     first.output,
     input2.primaryRegistryUrl ?? DEFAULT_NPM_REGISTRY_URL
   )) {
-    return first.exitCode;
-  }
-  process.stderr.write(
-    `Primary npm registry access failed; retrying through Deepline's registry: ${input2.fallbackRegistryUrl}
+    process.stderr.write(
+      `Primary npm registry access failed; retrying through Deepline's registry: ${input2.fallbackRegistryUrl}
 `
-  );
-  const fallback = await runCommand(
-    input2.npmCommand,
-    withRegistry(input2.installArgs, input2.fallbackRegistryUrl),
-    input2.env ?? process.env
-  );
-  return fallback.exitCode;
+    );
+    const fallback = await runCommand(
+      input2.npmCommand,
+      withRegistry(input2.installArgs, input2.fallbackRegistryUrl),
+      input2.env ?? process.env
+    );
+    return fallback.exitCode;
+  }
+  if (isBinLinkExistsFailure(first.output)) {
+    process.stderr.write(
+      "npm refused to relink an existing global bin symlink (EEXIST); retrying with --force since this plan only targets this CLI's own install prefix.\n"
+    );
+    const forced = await runCommand(
+      input2.npmCommand,
+      withForce(primaryArgs),
+      input2.env ?? process.env
+    );
+    return forced.exitCode;
+  }
+  return first.exitCode;
 }
 function writeSidecarLauncher(input2) {
   (0, import_node_fs20.mkdirSync)((0, import_node_path23.dirname)(input2.path), { recursive: true });

package/dist/cli/index.mjs

@@ -1030,7 +1030,7 @@ var SDK_RELEASE = {
   // 0.2.0 makes Dataset Handles uniformly async-only after 0.1.320 briefly
   // exposed storage-dependent synchronous access. This deliberate minor
   // release keeps lazy paging semantics independent of row residency.
-  version: "0.2.63",
+  version: "0.2.65",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -38171,6 +38171,13 @@ function isRegistryAccessFailure(output2, registryUrl) {
 function withRegistry(args, registryUrl) {
   return [...args.slice(0, -1), "--registry", registryUrl, args.at(-1) ?? ""];
 }
+function isBinLinkExistsFailure(output2) {
+  return /\bEEXIST\b/i.test(output2) && /symlink/i.test(output2);
+}
+function withForce(args) {
+  if (args.includes("--force")) return args;
+  return [...args.slice(0, -1), "--force", args.at(-1) ?? ""];
+}
 async function runNpmInstallWithRegistryFallback(input2) {
   const primaryArgs = input2.primaryRegistryUrl ? withRegistry(input2.installArgs, input2.primaryRegistryUrl) : input2.installArgs;
   const first = await runCommand(
@@ -38178,22 +38185,36 @@ async function runNpmInstallWithRegistryFallback(input2) {
     primaryArgs,
     input2.env ?? process.env
   );
-  if (first.exitCode === 0 || !input2.fallbackRegistryUrl || !isRegistryAccessFailure(
+  if (first.exitCode === 0) {
+    return first.exitCode;
+  }
+  if (input2.fallbackRegistryUrl && isRegistryAccessFailure(
     first.output,
     input2.primaryRegistryUrl ?? DEFAULT_NPM_REGISTRY_URL
   )) {
-    return first.exitCode;
-  }
-  process.stderr.write(
-    `Primary npm registry access failed; retrying through Deepline's registry: ${input2.fallbackRegistryUrl}
+    process.stderr.write(
+      `Primary npm registry access failed; retrying through Deepline's registry: ${input2.fallbackRegistryUrl}
 `
-  );
-  const fallback = await runCommand(
-    input2.npmCommand,
-    withRegistry(input2.installArgs, input2.fallbackRegistryUrl),
-    input2.env ?? process.env
-  );
-  return fallback.exitCode;
+    );
+    const fallback = await runCommand(
+      input2.npmCommand,
+      withRegistry(input2.installArgs, input2.fallbackRegistryUrl),
+      input2.env ?? process.env
+    );
+    return fallback.exitCode;
+  }
+  if (isBinLinkExistsFailure(first.output)) {
+    process.stderr.write(
+      "npm refused to relink an existing global bin symlink (EEXIST); retrying with --force since this plan only targets this CLI's own install prefix.\n"
+    );
+    const forced = await runCommand(
+      input2.npmCommand,
+      withForce(primaryArgs),
+      input2.env ?? process.env
+    );
+    return forced.exitCode;
+  }
+  return first.exitCode;
 }
 function writeSidecarLauncher(input2) {
   mkdirSync10(dirname16(input2.path), { recursive: true });

package/dist/{compiler-manifest-DTbs7i9a.d.mts → compiler-manifest-CrAB1ffd.d.mts}

@@ -979,21 +979,27 @@ declare class ProviderTransientError extends ToolExecutionError {
     static [Symbol.hasInstance](value: unknown): boolean;
 }
 /** Why a provider cannot serve the current read request. */
-type ProviderUnavailableReason = ProviderTransientErrorCategory | 'account_capacity';
+type ProviderUnavailableReason = ProviderTransientErrorCategory | 'account_capacity' | 'credentials_missing';
 /**
- * A provider-owned failure that permits a read waterfall to try its next
- * provider. This does not include invalid credentials, caller input, or
- * Deepline billing failures.
+ * A provider failure that permits a read waterfall to try its next provider.
+ * A missing provider connection is included because another provider may still
+ * serve the read. Invalid credentials, caller input, and Deepline billing
+ * failures remain loud.
  */
 type ProviderUnavailableError = ProviderTransientError | (ToolExecutionError & {
     readonly origin: 'provider';
     readonly code: 'PROVIDER_ACCOUNT_CAPACITY';
+}) | (ToolExecutionError & {
+    readonly origin: 'caller';
+    readonly code: 'INTEGRATION_CREDENTIALS_MISSING';
 });
 /**
  * Return the provider-specific reason a read cannot run right now.
  *
  * `null` means this error must stay loud: it is caller input, an invalid
- * customer credential, Deepline billing, or an internal failure.
+ * customer credential, Deepline billing, or an internal failure. A missing
+ * provider connection is different: an explicit read waterfall may continue
+ * to a configured fallback and record the unavailable leg.
  */
 declare function getProviderUnavailableReason(error: unknown): ProviderUnavailableReason | null;
 /**

package/dist/{compiler-manifest-DTbs7i9a.d.ts → compiler-manifest-CrAB1ffd.d.ts}

@@ -979,21 +979,27 @@ declare class ProviderTransientError extends ToolExecutionError {
     static [Symbol.hasInstance](value: unknown): boolean;
 }
 /** Why a provider cannot serve the current read request. */
-type ProviderUnavailableReason = ProviderTransientErrorCategory | 'account_capacity';
+type ProviderUnavailableReason = ProviderTransientErrorCategory | 'account_capacity' | 'credentials_missing';
 /**
- * A provider-owned failure that permits a read waterfall to try its next
- * provider. This does not include invalid credentials, caller input, or
- * Deepline billing failures.
+ * A provider failure that permits a read waterfall to try its next provider.
+ * A missing provider connection is included because another provider may still
+ * serve the read. Invalid credentials, caller input, and Deepline billing
+ * failures remain loud.
  */
 type ProviderUnavailableError = ProviderTransientError | (ToolExecutionError & {
     readonly origin: 'provider';
     readonly code: 'PROVIDER_ACCOUNT_CAPACITY';
+}) | (ToolExecutionError & {
+    readonly origin: 'caller';
+    readonly code: 'INTEGRATION_CREDENTIALS_MISSING';
 });
 /**
  * Return the provider-specific reason a read cannot run right now.
  *
  * `null` means this error must stay loud: it is caller input, an invalid
- * customer credential, Deepline billing, or an internal failure.
+ * customer credential, Deepline billing, or an internal failure. A missing
+ * provider connection is different: an explicit read waterfall may continue
+ * to a configured fallback and record the unavailable leg.
  */
 declare function getProviderUnavailableReason(error: unknown): ProviderUnavailableReason | null;
 /**

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { e as PlayRuntimeBackendId, c as PlayCompilerManifest, D as DeeplineError, f as ToolExecutionError, g as ToolExecutionErrorOptions, h as PlayAuthoringColumnMap, i as PlayAuthoringColumnResolver, j as PlayAuthoringRuntimeContext, k as PlayAuthoringConditionalStepResolver, l as PlayAuthoringCsvInput, m as PlayAuthoringCsvOptions, n as PlayAuthoringDatasetBuilder, o as PlayAuthoringDatasetColumnDefinition, p as PlayAuthoringDatasetColumnRunInput, q as ToolExecuteResult, r as PlayAuthoringReferenceLike, s as PlayReturnObject$1, t as PlayAuthoringDefineConfig, u as PlayAuthoringDefinedPlay, v as PlayAuthoringFetchOptions, w as PlayAuthoringFileInput, x as PlayAuthoringBindings, y as PlayAuthoringCallExecution, z as PlayAuthoringCallOptions, A as PlayAuthoringFetchResponse, B as PlayAuthoringInputContract, C as PlayAuthoringStepProgramStep, E as PlayAuthoringRuntimeStepOptions, F as PlaySqlListenerDeclaration, G as PlaySqlListenerEvent, H as PlaySqlListenerOperation, I as PlaySqlQuery, J as PlayAuthoringStepOptions, K as PlayAuthoringStepProgram, L as PlayAuthoringStepProgramResolver, M as PlayAuthoringStepResolver, N as PlayToolExecutionRequest, O as PlayAuthoringStepProgramOptions } from './compiler-manifest-DTbs7i9a.mjs';
-export { Q as DEEPLINE_EXTRACTOR_TARGETS, R as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, S as DeeplineEmailStatusGetterValue, U as DeeplineExtractorTarget, V as DeeplineGetterValue, W as DeeplineGetterValueMap, X as JOB_CHANGE_STATUS_VALUES, Y as JobChangeStatus, Z as PHONE_STATUS_VALUES, _ as PhoneStatus, $ as PlayDataset, a0 as PlayDatasetInput, a1 as PreviousCell, a2 as ProviderTransientError, a3 as ProviderTransientErrorCategory, a4 as ProviderUnavailableError, a5 as ProviderUnavailableReason, a6 as ToolExecutionErrorCategory, a7 as ToolExecutionErrorOrigin, a8 as ToolExecutionFailureV1, a9 as ToolExecutionNetworkKind, aa as ToolExecutionNetworkScope, ab as getProviderUnavailableReason, ac as isDeeplineExtractorTarget, ad as isProviderUnavailable, ae as isProviderWaterfallUnavailableError } from './compiler-manifest-DTbs7i9a.mjs';
+import { e as PlayRuntimeBackendId, c as PlayCompilerManifest, D as DeeplineError, f as ToolExecutionError, g as ToolExecutionErrorOptions, h as PlayAuthoringColumnMap, i as PlayAuthoringColumnResolver, j as PlayAuthoringRuntimeContext, k as PlayAuthoringConditionalStepResolver, l as PlayAuthoringCsvInput, m as PlayAuthoringCsvOptions, n as PlayAuthoringDatasetBuilder, o as PlayAuthoringDatasetColumnDefinition, p as PlayAuthoringDatasetColumnRunInput, q as ToolExecuteResult, r as PlayAuthoringReferenceLike, s as PlayReturnObject$1, t as PlayAuthoringDefineConfig, u as PlayAuthoringDefinedPlay, v as PlayAuthoringFetchOptions, w as PlayAuthoringFileInput, x as PlayAuthoringBindings, y as PlayAuthoringCallExecution, z as PlayAuthoringCallOptions, A as PlayAuthoringFetchResponse, B as PlayAuthoringInputContract, C as PlayAuthoringStepProgramStep, E as PlayAuthoringRuntimeStepOptions, F as PlaySqlListenerDeclaration, G as PlaySqlListenerEvent, H as PlaySqlListenerOperation, I as PlaySqlQuery, J as PlayAuthoringStepOptions, K as PlayAuthoringStepProgram, L as PlayAuthoringStepProgramResolver, M as PlayAuthoringStepResolver, N as PlayToolExecutionRequest, O as PlayAuthoringStepProgramOptions } from './compiler-manifest-CrAB1ffd.mjs';
+export { Q as DEEPLINE_EXTRACTOR_TARGETS, R as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, S as DeeplineEmailStatusGetterValue, U as DeeplineExtractorTarget, V as DeeplineGetterValue, W as DeeplineGetterValueMap, X as JOB_CHANGE_STATUS_VALUES, Y as JobChangeStatus, Z as PHONE_STATUS_VALUES, _ as PhoneStatus, $ as PlayDataset, a0 as PlayDatasetInput, a1 as PreviousCell, a2 as ProviderTransientError, a3 as ProviderTransientErrorCategory, a4 as ProviderUnavailableError, a5 as ProviderUnavailableReason, a6 as ToolExecutionErrorCategory, a7 as ToolExecutionErrorOrigin, a8 as ToolExecutionFailureV1, a9 as ToolExecutionNetworkKind, aa as ToolExecutionNetworkScope, ab as getProviderUnavailableReason, ac as isDeeplineExtractorTarget, ad as isProviderUnavailable, ae as isProviderWaterfallUnavailableError } from './compiler-manifest-CrAB1ffd.mjs';
 import '@sinclair/typebox';
 
 declare const FIXTURE_BEHAVIOR_VERSION: 1;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { e as PlayRuntimeBackendId, c as PlayCompilerManifest, D as DeeplineError, f as ToolExecutionError, g as ToolExecutionErrorOptions, h as PlayAuthoringColumnMap, i as PlayAuthoringColumnResolver, j as PlayAuthoringRuntimeContext, k as PlayAuthoringConditionalStepResolver, l as PlayAuthoringCsvInput, m as PlayAuthoringCsvOptions, n as PlayAuthoringDatasetBuilder, o as PlayAuthoringDatasetColumnDefinition, p as PlayAuthoringDatasetColumnRunInput, q as ToolExecuteResult, r as PlayAuthoringReferenceLike, s as PlayReturnObject$1, t as PlayAuthoringDefineConfig, u as PlayAuthoringDefinedPlay, v as PlayAuthoringFetchOptions, w as PlayAuthoringFileInput, x as PlayAuthoringBindings, y as PlayAuthoringCallExecution, z as PlayAuthoringCallOptions, A as PlayAuthoringFetchResponse, B as PlayAuthoringInputContract, C as PlayAuthoringStepProgramStep, E as PlayAuthoringRuntimeStepOptions, F as PlaySqlListenerDeclaration, G as PlaySqlListenerEvent, H as PlaySqlListenerOperation, I as PlaySqlQuery, J as PlayAuthoringStepOptions, K as PlayAuthoringStepProgram, L as PlayAuthoringStepProgramResolver, M as PlayAuthoringStepResolver, N as PlayToolExecutionRequest, O as PlayAuthoringStepProgramOptions } from './compiler-manifest-DTbs7i9a.js';
-export { Q as DEEPLINE_EXTRACTOR_TARGETS, R as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, S as DeeplineEmailStatusGetterValue, U as DeeplineExtractorTarget, V as DeeplineGetterValue, W as DeeplineGetterValueMap, X as JOB_CHANGE_STATUS_VALUES, Y as JobChangeStatus, Z as PHONE_STATUS_VALUES, _ as PhoneStatus, $ as PlayDataset, a0 as PlayDatasetInput, a1 as PreviousCell, a2 as ProviderTransientError, a3 as ProviderTransientErrorCategory, a4 as ProviderUnavailableError, a5 as ProviderUnavailableReason, a6 as ToolExecutionErrorCategory, a7 as ToolExecutionErrorOrigin, a8 as ToolExecutionFailureV1, a9 as ToolExecutionNetworkKind, aa as ToolExecutionNetworkScope, ab as getProviderUnavailableReason, ac as isDeeplineExtractorTarget, ad as isProviderUnavailable, ae as isProviderWaterfallUnavailableError } from './compiler-manifest-DTbs7i9a.js';
+import { e as PlayRuntimeBackendId, c as PlayCompilerManifest, D as DeeplineError, f as ToolExecutionError, g as ToolExecutionErrorOptions, h as PlayAuthoringColumnMap, i as PlayAuthoringColumnResolver, j as PlayAuthoringRuntimeContext, k as PlayAuthoringConditionalStepResolver, l as PlayAuthoringCsvInput, m as PlayAuthoringCsvOptions, n as PlayAuthoringDatasetBuilder, o as PlayAuthoringDatasetColumnDefinition, p as PlayAuthoringDatasetColumnRunInput, q as ToolExecuteResult, r as PlayAuthoringReferenceLike, s as PlayReturnObject$1, t as PlayAuthoringDefineConfig, u as PlayAuthoringDefinedPlay, v as PlayAuthoringFetchOptions, w as PlayAuthoringFileInput, x as PlayAuthoringBindings, y as PlayAuthoringCallExecution, z as PlayAuthoringCallOptions, A as PlayAuthoringFetchResponse, B as PlayAuthoringInputContract, C as PlayAuthoringStepProgramStep, E as PlayAuthoringRuntimeStepOptions, F as PlaySqlListenerDeclaration, G as PlaySqlListenerEvent, H as PlaySqlListenerOperation, I as PlaySqlQuery, J as PlayAuthoringStepOptions, K as PlayAuthoringStepProgram, L as PlayAuthoringStepProgramResolver, M as PlayAuthoringStepResolver, N as PlayToolExecutionRequest, O as PlayAuthoringStepProgramOptions } from './compiler-manifest-CrAB1ffd.js';
+export { Q as DEEPLINE_EXTRACTOR_TARGETS, R as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, S as DeeplineEmailStatusGetterValue, U as DeeplineExtractorTarget, V as DeeplineGetterValue, W as DeeplineGetterValueMap, X as JOB_CHANGE_STATUS_VALUES, Y as JobChangeStatus, Z as PHONE_STATUS_VALUES, _ as PhoneStatus, $ as PlayDataset, a0 as PlayDatasetInput, a1 as PreviousCell, a2 as ProviderTransientError, a3 as ProviderTransientErrorCategory, a4 as ProviderUnavailableError, a5 as ProviderUnavailableReason, a6 as ToolExecutionErrorCategory, a7 as ToolExecutionErrorOrigin, a8 as ToolExecutionFailureV1, a9 as ToolExecutionNetworkKind, aa as ToolExecutionNetworkScope, ab as getProviderUnavailableReason, ac as isDeeplineExtractorTarget, ad as isProviderUnavailable, ae as isProviderWaterfallUnavailableError } from './compiler-manifest-CrAB1ffd.js';
 import '@sinclair/typebox';
 
 declare const FIXTURE_BEHAVIOR_VERSION: 1;

package/dist/index.js

@@ -239,6 +239,9 @@ function getProviderUnavailableReason(error) {
   if (error instanceof ToolExecutionError && error.origin === "provider" && error.code === "PROVIDER_ACCOUNT_CAPACITY") {
     return "account_capacity";
   }
+  if (error instanceof ToolExecutionError && error.origin === "caller" && error.code === "INTEGRATION_CREDENTIALS_MISSING") {
+    return "credentials_missing";
+  }
   return null;
 }
 function isProviderUnavailable(error) {
@@ -777,7 +780,7 @@ var SDK_RELEASE = {
   // 0.2.0 makes Dataset Handles uniformly async-only after 0.1.320 briefly
   // exposed storage-dependent synchronous access. This deliberate minor
   // release keeps lazy paging semantics independent of row residency.
-  version: "0.2.63",
+  version: "0.2.65",
   contracts: {
     api: {
       name: "sdk-http-api",

package/dist/index.mjs

@@ -162,6 +162,9 @@ function getProviderUnavailableReason(error) {
   if (error instanceof ToolExecutionError && error.origin === "provider" && error.code === "PROVIDER_ACCOUNT_CAPACITY") {
     return "account_capacity";
   }
+  if (error instanceof ToolExecutionError && error.origin === "caller" && error.code === "INTEGRATION_CREDENTIALS_MISSING") {
+    return "credentials_missing";
+  }
   return null;
 }
 function isProviderUnavailable(error) {
@@ -700,7 +703,7 @@ var SDK_RELEASE = {
   // 0.2.0 makes Dataset Handles uniformly async-only after 0.1.320 briefly
   // exposed storage-dependent synchronous access. This deliberate minor
   // release keeps lazy paging semantics independent of row residency.
-  version: "0.2.63",
+  version: "0.2.65",
   contracts: {
     api: {
       name: "sdk-http-api",

package/dist/install-integrity.json

@@ -225,8 +225,8 @@
     "dist/cli/index.d.ts",
     "dist/cli/index.js",
     "dist/cli/index.mjs",
-    "dist/compiler-manifest-DTbs7i9a.d.mts",
-    "dist/compiler-manifest-DTbs7i9a.d.ts",
+    "dist/compiler-manifest-CrAB1ffd.d.mts",
+    "dist/compiler-manifest-CrAB1ffd.d.ts",
     "dist/helpers.d.mts",
     "dist/helpers.d.ts",
     "dist/helpers.js",

package/dist/plays/bundle-play-file.d.mts

@@ -1,5 +1,5 @@
-import { T as ToolExecutionErrorSchemaVersion, P as PlayAuthoringContractEdition, a as PlayArtifactKind$1, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-DTbs7i9a.mjs';
-export { d as PLAY_ARTIFACT_KINDS } from '../compiler-manifest-DTbs7i9a.mjs';
+import { T as ToolExecutionErrorSchemaVersion, P as PlayAuthoringContractEdition, a as PlayArtifactKind$1, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-CrAB1ffd.mjs';
+export { d as PLAY_ARTIFACT_KINDS } from '../compiler-manifest-CrAB1ffd.mjs';
 import '@sinclair/typebox';
 
 type PlayPackageImport = {

package/dist/plays/bundle-play-file.d.ts

@@ -1,5 +1,5 @@
-import { T as ToolExecutionErrorSchemaVersion, P as PlayAuthoringContractEdition, a as PlayArtifactKind$1, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-DTbs7i9a.js';
-export { d as PLAY_ARTIFACT_KINDS } from '../compiler-manifest-DTbs7i9a.js';
+import { T as ToolExecutionErrorSchemaVersion, P as PlayAuthoringContractEdition, a as PlayArtifactKind$1, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-CrAB1ffd.js';
+export { d as PLAY_ARTIFACT_KINDS } from '../compiler-manifest-CrAB1ffd.js';
 import '@sinclair/typebox';
 
 type PlayPackageImport = {

package/dist/plays/bundle-play-file.mjs

@@ -4350,7 +4350,7 @@ function parseContractPaths(value, attribute, nodeId, line, errors) {
   const paths = value.split(",").map((path) => path.trim()).filter(Boolean);
   if (paths.some((path) => !DOCFLOW_PATH.test(path))) {
     errors.push(
-      `Docflow annotation "${nodeId}" on line ${line} has an invalid ${attribute}:"\u2026" contract. Use comma-separated identifiers or property paths only.`
+      `Docflow annotation "${nodeId}" on line ${line} has an invalid ${attribute}:"\u2026" contract. Use comma-separated identifiers or property paths only \u2014 e.g. the assigned const name (out:"result"). Prose labels belong in the diagram box, not here.`
     );
     return void 0;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.2.63",
+  "version": "0.2.65",
   "description": "GTM data CLI and TypeScript SDK for coding agents",
   "license": "MIT",
   "homepage": "https://code.deepline.com",