deepline 0.3.123 → 0.3.124

package/dist/bundling-sources/sdk/src/client.ts

@@ -6424,9 +6424,22 @@ export class DeeplineClient {
   // Monitor Jobs, Batches, and Fleets
   // ——————————————————————————————————————————————————————————
 
+  private static readonly MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH = 96;
+
   private monitorJobIdempotencyKey(operation: string): string {
-    const uuid = globalThis.crypto?.randomUUID?.();
-    return `monitor-job-${operation}-${uuid ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`}`;
+    const uuid =
+      globalThis.crypto?.randomUUID?.() ??
+      `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    const prefix = 'monitor-job-';
+    const safeOperation = operation.replace(/[^A-Za-z0-9._-]/g, '-');
+    const maxOperationLength = Math.max(
+      0,
+      DeeplineClient.MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH -
+        prefix.length -
+        uuid.length -
+        1,
+    );
+    return `${prefix}${safeOperation.slice(0, maxOperationLength)}-${uuid}`;
   }
 
   private monitorJobHeaders(

package/dist/bundling-sources/sdk/src/release.ts

@@ -200,7 +200,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.123',
+  version: '0.3.124',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/shared_libs/monitors/package.json

@@ -63,6 +63,8 @@
     "./provider-callback-verification.js": "./provider-callback-verification.ts",
     "./provider-monitor-batch-operation": "./provider-monitor-batch-operation.ts",
     "./provider-monitor-batch-operation.js": "./provider-monitor-batch-operation.ts",
+    "./provider-monitor-control-plane-capability": "./provider-monitor-control-plane-capability.ts",
+    "./provider-monitor-control-plane-capability.js": "./provider-monitor-control-plane-capability.ts",
     "./provider-monitor-capability": "./provider-monitor-capability.ts",
     "./provider-monitor-capability.js": "./provider-monitor-capability.ts",
     "./provider-monitor-consumer-health": "./provider-monitor-consumer-health.ts",

package/dist/bundling-sources/shared_libs/monitors/provider-monitor-control-plane-capability.ts

@@ -0,0 +1,47 @@
+import { createHmac } from 'node:crypto';
+
+const BATCH_SECRET_ENV = 'PROVIDER_MONITOR_BATCH_OPERATION_CONTINUATION_SECRET';
+const GLOBAL_AUDIT_SECRET_ENV =
+  'PROVIDER_MONITOR_GLOBAL_AUDIT_CONTINUATION_SECRET';
+const LEGACY_SECRET_ENV = 'PROVIDER_MONITOR_RECONCILIATION_CONTINUATION_SECRET';
+const INTERNAL_TOKEN_ENV = 'DEEPLINE_INTERNAL_TOKEN';
+
+// Preview derives this narrow capability from the deployment's internal token
+// instead of copying the root token into Convex. Both the Convex scheduler and
+// the app callback route must use this exact context and derivation.
+export const PROVIDER_MONITOR_CONTROL_PLANE_CAPABILITY_CONTEXT =
+  'deepline/provider-monitor-control-plane-continuation/v1';
+
+function derivedControlPlaneCapability(
+  env: Record<string, string | undefined>,
+): string | undefined {
+  const internalToken = env[INTERNAL_TOKEN_ENV]?.trim();
+  if (!internalToken) return undefined;
+  return createHmac('sha256', internalToken)
+    .update(PROVIDER_MONITOR_CONTROL_PLANE_CAPABILITY_CONTEXT)
+    .digest('base64url');
+}
+
+/**
+ * The dedicated batch value is the normal production configuration. The
+ * legacy value keeps rolling deploys compatible. Preview has neither, so it
+ * uses the scoped capability derived from the Preview-only internal token.
+ */
+export function providerMonitorBatchOperationContinuationSecret(
+  env: Record<string, string | undefined> = process.env,
+): string | undefined {
+  return (
+    env[BATCH_SECRET_ENV]?.trim() ||
+    env[LEGACY_SECRET_ENV]?.trim() ||
+    derivedControlPlaneCapability(env)
+  );
+}
+
+export function providerMonitorGlobalAuditContinuationSecret(
+  env: Record<string, string | undefined> = process.env,
+): string | undefined {
+  return (
+    env[GLOBAL_AUDIT_SECRET_ENV]?.trim() ||
+    providerMonitorBatchOperationContinuationSecret(env)
+  );
+}

package/dist/cli/index.js

@@ -3068,7 +3068,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.123",
+  version: "0.3.124",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -6919,7 +6919,7 @@ function playRunStatusFromState(state) {
     ..."result" in state ? { result: state.result } : {}
   };
 }
-var DeeplineClient = class {
+var DeeplineClient = class _DeeplineClient {
   http;
   config;
   /** Canonical run lifecycle namespace backed by `/api/v2/runs`. */
@@ -9844,9 +9844,16 @@ var DeeplineClient = class {
   // ——————————————————————————————————————————————————————————
   // Monitor Jobs, Batches, and Fleets
   // ——————————————————————————————————————————————————————————
+  static MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH = 96;
   monitorJobIdempotencyKey(operation) {
-    const uuid = globalThis.crypto?.randomUUID?.();
-    return `monitor-job-${operation}-${uuid ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`}`;
+    const uuid = globalThis.crypto?.randomUUID?.() ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    const prefix = "monitor-job-";
+    const safeOperation = operation.replace(/[^A-Za-z0-9._-]/g, "-");
+    const maxOperationLength = Math.max(
+      0,
+      _DeeplineClient.MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH - prefix.length - uuid.length - 1
+    );
+    return `${prefix}${safeOperation.slice(0, maxOperationLength)}-${uuid}`;
   }
   monitorJobHeaders(operation, idempotencyKey) {
     return {

package/dist/cli/index.mjs

@@ -3063,7 +3063,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.123",
+  version: "0.3.124",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -6914,7 +6914,7 @@ function playRunStatusFromState(state) {
     ..."result" in state ? { result: state.result } : {}
   };
 }
-var DeeplineClient = class {
+var DeeplineClient = class _DeeplineClient {
   http;
   config;
   /** Canonical run lifecycle namespace backed by `/api/v2/runs`. */
@@ -9839,9 +9839,16 @@ var DeeplineClient = class {
   // ——————————————————————————————————————————————————————————
   // Monitor Jobs, Batches, and Fleets
   // ——————————————————————————————————————————————————————————
+  static MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH = 96;
   monitorJobIdempotencyKey(operation) {
-    const uuid = globalThis.crypto?.randomUUID?.();
-    return `monitor-job-${operation}-${uuid ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`}`;
+    const uuid = globalThis.crypto?.randomUUID?.() ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    const prefix = "monitor-job-";
+    const safeOperation = operation.replace(/[^A-Za-z0-9._-]/g, "-");
+    const maxOperationLength = Math.max(
+      0,
+      _DeeplineClient.MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH - prefix.length - uuid.length - 1
+    );
+    return `${prefix}${safeOperation.slice(0, maxOperationLength)}-${uuid}`;
   }
   monitorJobHeaders(operation, idempotencyKey) {
     return {

package/dist/index.d.mts

@@ -5464,6 +5464,7 @@ declare class DeeplineClient {
     reactivateMonitor(key: string, options?: {
         dryRun?: boolean;
     }): Promise<MonitorReactivateResult>;
+    private static readonly MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH;
     private monitorJobIdempotencyKey;
     private monitorJobHeaders;
     deployMonitorBatch(definitions: MonitorDefinition[], options?: MonitorJobDeployOptions): Promise<MonitorJobResult>;

package/dist/index.d.ts

@@ -5464,6 +5464,7 @@ declare class DeeplineClient {
     reactivateMonitor(key: string, options?: {
         dryRun?: boolean;
     }): Promise<MonitorReactivateResult>;
+    private static readonly MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH;
     private monitorJobIdempotencyKey;
     private monitorJobHeaders;
     deployMonitorBatch(definitions: MonitorDefinition[], options?: MonitorJobDeployOptions): Promise<MonitorJobResult>;

package/dist/index.js

@@ -864,7 +864,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.123",
+  version: "0.3.124",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -4593,7 +4593,7 @@ function playRunStatusFromState(state) {
     ..."result" in state ? { result: state.result } : {}
   };
 }
-var DeeplineClient = class {
+var DeeplineClient = class _DeeplineClient {
   http;
   config;
   /** Canonical run lifecycle namespace backed by `/api/v2/runs`. */
@@ -7518,9 +7518,16 @@ var DeeplineClient = class {
   // ——————————————————————————————————————————————————————————
   // Monitor Jobs, Batches, and Fleets
   // ——————————————————————————————————————————————————————————
+  static MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH = 96;
   monitorJobIdempotencyKey(operation) {
-    const uuid = globalThis.crypto?.randomUUID?.();
-    return `monitor-job-${operation}-${uuid ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`}`;
+    const uuid = globalThis.crypto?.randomUUID?.() ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    const prefix = "monitor-job-";
+    const safeOperation = operation.replace(/[^A-Za-z0-9._-]/g, "-");
+    const maxOperationLength = Math.max(
+      0,
+      _DeeplineClient.MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH - prefix.length - uuid.length - 1
+    );
+    return `${prefix}${safeOperation.slice(0, maxOperationLength)}-${uuid}`;
   }
   monitorJobHeaders(operation, idempotencyKey) {
     return {

package/dist/index.mjs

@@ -768,7 +768,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.123",
+  version: "0.3.124",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -4497,7 +4497,7 @@ function playRunStatusFromState(state) {
     ..."result" in state ? { result: state.result } : {}
   };
 }
-var DeeplineClient = class {
+var DeeplineClient = class _DeeplineClient {
   http;
   config;
   /** Canonical run lifecycle namespace backed by `/api/v2/runs`. */
@@ -7422,9 +7422,16 @@ var DeeplineClient = class {
   // ——————————————————————————————————————————————————————————
   // Monitor Jobs, Batches, and Fleets
   // ——————————————————————————————————————————————————————————
+  static MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH = 96;
   monitorJobIdempotencyKey(operation) {
-    const uuid = globalThis.crypto?.randomUUID?.();
-    return `monitor-job-${operation}-${uuid ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`}`;
+    const uuid = globalThis.crypto?.randomUUID?.() ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+    const prefix = "monitor-job-";
+    const safeOperation = operation.replace(/[^A-Za-z0-9._-]/g, "-");
+    const maxOperationLength = Math.max(
+      0,
+      _DeeplineClient.MONITOR_JOB_IDEMPOTENCY_KEY_MAX_LENGTH - prefix.length - uuid.length - 1
+    );
+    return `${prefix}${safeOperation.slice(0, maxOperationLength)}-${uuid}`;
   }
   monitorJobHeaders(operation, idempotencyKey) {
     return {

package/dist/install-integrity.json

@@ -65,6 +65,7 @@
     "dist/bundling-sources/shared_libs/monitors/provider-monitor-batch-operation.ts",
     "dist/bundling-sources/shared_libs/monitors/provider-monitor-capability.ts",
     "dist/bundling-sources/shared_libs/monitors/provider-monitor-consumer-health.ts",
+    "dist/bundling-sources/shared_libs/monitors/provider-monitor-control-plane-capability.ts",
     "dist/bundling-sources/shared_libs/monitors/provider-monitor-errors.ts",
     "dist/bundling-sources/shared_libs/monitors/provider-monitor-identity-claims.ts",
     "dist/bundling-sources/shared_libs/monitors/provider-monitor-legacy-aliases.ts",

package/dist/release.d.mts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.123";
+    readonly version: "0.3.124";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.d.ts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.123";
+    readonly version: "0.3.124";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.js

@@ -74,7 +74,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.123",
+  version: "0.3.124",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/release.mjs

@@ -48,7 +48,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.123",
+  version: "0.3.124",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.3.123",
+  "version": "0.3.124",
   "description": "GTM data CLI and TypeScript SDK for coding agents",
   "license": "MIT",
   "homepage": "https://code.deepline.com",