deepline 0.3.127 → 0.3.129

package/dist/index.mjs

@@ -768,7 +768,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.127",
+  version: "0.3.129",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -1588,6 +1588,20 @@ var HttpClient = class {
             }
             throw lastError;
           }
+          if (typeof parsed === "string") {
+            const interstitial = detectHtmlErrorBody(
+              body,
+              response.headers.get("content-type")
+            );
+            if (interstitial) {
+              throw new DeeplineError(
+                `${this.config.baseUrl} returned a deployment-protection page instead of JSON. Set VERCEL_PROTECTION_BYPASS_TOKEN, or run \`vercel login\` if the CLI session expired.`,
+                response.status,
+                "DEPLOYMENT_PROTECTED",
+                { htmlErrorPage: true }
+              );
+            }
+          }
           return parsed;
         } catch (error) {
           clearTimeout(timeoutId);
@@ -2059,6 +2073,11 @@ function normalizePlayRunLedgerTerminalSource(value) {
   ) ? value : null;
 }
 
+// ../play-runtime/run-log-buffer.ts
+var RUNNER_LOG_MAX_BYTES = 5 * 1024 * 1024;
+var TERMINAL_RESERVE_BYTES = 64 * 1024;
+var encoder = new TextEncoder();
+
 // ../play-runtime/secret-redaction.ts
 var SECRET_REDACTION_PLACEHOLDER = "[REDACTED_SECRET]";
 var BEARER_TOKEN_RE = /\bBearer\s+[A-Za-z0-9._~+/=-]{12,}\b/g;
@@ -2076,6 +2095,18 @@ var SENSITIVE_FIELD_NAME_RE = new RegExp(
   `(^|[._-])(?:${SENSITIVE_FIELD_NAME})$`,
   "i"
 );
+var SENSITIVE_FIELD_NAME_CACHE_MAX_ENTRIES = 4096;
+var sensitiveFieldNameCache = /* @__PURE__ */ new Map();
+function isSensitiveFieldName(key) {
+  const cached = sensitiveFieldNameCache.get(key);
+  if (cached !== void 0) return cached;
+  const sensitive = SENSITIVE_FIELD_NAME_RE.test(key);
+  if (sensitiveFieldNameCache.size >= SENSITIVE_FIELD_NAME_CACHE_MAX_ENTRIES) {
+    sensitiveFieldNameCache.clear();
+  }
+  sensitiveFieldNameCache.set(key, sensitive);
+  return sensitive;
+}
 var SERIALIZED_SECRET_FIELD_RE = new RegExp(
   `"(${SENSITIVE_FIELD_NAME})"\\s*:\\s*(?:"[^"\\\\]*"|\\{[^{}]*\\})`,
   "gi"
@@ -2083,7 +2114,45 @@ var SERIALIZED_SECRET_FIELD_RE = new RegExp(
 function escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+var REDACTION_TRIGGER_RE = new RegExp(
+  [
+    // Sensitive field names, in object keys and in `name=`/`"name":` text.
+    "token",
+    "secret",
+    "password",
+    "authorization",
+    "cookie",
+    "credential",
+    // One `key` branch instead of `api[_-]?key`, `private[_-]?key` and `key_`.
+    // A regex alternation costs roughly one substring scan per branch, and a
+    // broader branch can only send more payloads down the exact path.
+    "key",
+    // Self-identifying credential prefixes.
+    "bearer",
+    "basic",
+    "-----BEGIN",
+    "xox[baprs]-",
+    "[prs]k_",
+    "pat_",
+    "ghp_",
+    // URL credentials: `//user:pass@host` userinfo and sensitive query params.
+    // The userinfo class excludes `/` exactly as the rule it guards does.
+    "//[^\\s/]{0,256}@",
+    "[?#&]sig",
+    // JWTs carry no keyword at all, so the shape itself is the marker. Anchor
+    // on the separating dot and drop JWT_RE's leading `{8,}` segment: a dot is
+    // rare enough for the engine to skip between candidates, which makes this
+    // gate roughly ten times cheaper than re-running JWT_RE itself, and
+    // dropping a required segment can only widen what it accepts.
+    "\\.[A-Za-z0-9_-]{1,16384}\\.[A-Za-z0-9_-]{8}"
+  ].join("|"),
+  "i"
+);
+function mightContainRedactableSecret(value) {
+  return REDACTION_TRIGGER_RE.test(value);
+}
 function redactSecretLikeString(value) {
+  if (!mightContainRedactableSecret(value)) return value;
   const serializedRedacted = value.replace(
     SERIALIZED_SECRET_FIELD_RE,
     `"$1":"${SECRET_REDACTION_PLACEHOLDER}"`
@@ -2105,9 +2174,26 @@ function redactSecretLikeString(value) {
 }
 function createSecretRedactionContext(initialValues = []) {
   const exactSecrets = /* @__PURE__ */ new Set();
+  const exactSecretMatchers = /* @__PURE__ */ new Map();
   function register(value) {
     if (value.length > 0) exactSecrets.add(value);
   }
+  function matchersForSecret(secret) {
+    const cached = exactSecretMatchers.get(secret);
+    if (cached) return cached;
+    const literals = [secret];
+    try {
+      const encoded = encodeURIComponent(secret);
+      if (encoded !== secret) literals.push(encoded);
+    } catch {
+    }
+    const built = literals.map((literal) => ({
+      literal,
+      matcher: new RegExp(escapeRegExp(literal), "g")
+    }));
+    exactSecretMatchers.set(secret, built);
+    return built;
+  }
   for (const value of initialValues) register(value);
   function containsRegisteredSecret(value, {
     includeEncoded = false,
@@ -2130,21 +2216,13 @@ function createSecretRedactionContext(initialValues = []) {
     return exactSecrets.has(value);
   }
   function redactRegisteredSecrets(value) {
+    if (exactSecrets.size === 0) return value;
     let output = value;
     for (const secret of exactSecrets) {
-      output = output.replace(
-        new RegExp(escapeRegExp(secret), "g"),
-        SECRET_REDACTION_PLACEHOLDER
-      );
-      try {
-        const encoded = encodeURIComponent(secret);
-        if (encoded !== secret) {
-          output = output.replace(
-            new RegExp(escapeRegExp(encoded), "g"),
-            SECRET_REDACTION_PLACEHOLDER
-          );
-        }
-      } catch {
+      for (const { literal, matcher } of matchersForSecret(secret)) {
+        if (!output.includes(literal)) continue;
+        matcher.lastIndex = 0;
+        output = output.replace(matcher, SECRET_REDACTION_PLACEHOLDER);
       }
     }
     return output;
@@ -2155,13 +2233,33 @@ function createSecretRedactionContext(initialValues = []) {
   }
   function redact(value) {
     if (typeof value === "string") return redactString2(value);
-    if (Array.isArray(value)) return value.map((entry) => redact(entry));
+    if (Array.isArray(value)) {
+      let changed = false;
+      const next = new Array(value.length);
+      for (let index = 0; index < value.length; index += 1) {
+        const entry = value[index];
+        const redacted = redact(entry);
+        next[index] = redacted;
+        if (redacted !== entry) changed = true;
+      }
+      return changed ? next : value;
+    }
     if (value && typeof value === "object") {
+      const prototype = Object.getPrototypeOf(value);
+      let changed = prototype !== Object.prototype && prototype !== null;
+      const source = value;
+      const keys = Object.keys(source);
+      const redactedValues = new Array(keys.length);
+      for (let index = 0; index < keys.length; index += 1) {
+        const key = keys[index];
+        const entry = source[key];
+        const redacted = isSensitiveFieldName(key) ? SECRET_REDACTION_PLACEHOLDER : redact(entry);
+        redactedValues[index] = redacted;
+        if (redacted !== entry) changed = true;
+      }
+      if (!changed) return value;
       return Object.fromEntries(
-        Object.entries(value).map(([key, entry]) => [
-          key,
-          SENSITIVE_FIELD_NAME_RE.test(key) ? SECRET_REDACTION_PLACEHOLDER : redact(entry)
-        ])
+        keys.map((key, index) => [key, redactedValues[index]])
       );
     }
     return value;
@@ -2199,9 +2297,10 @@ var CUSTOMER_OUTPUT_VALUE_MAX_BYTES = 5 * 1024 * 1024;
 var CUSTOMER_OUTPUT_TOTAL_MAX_BYTES = 5 * 1024 * 1024;
 var RUNTIME_RECEIPT_OUTPUT_MAX_BYTES = 10 * 1024 * 1024;
 var RUNTIME_RECEIPT_COMPLETION_BUFFER_MAX_BYTES = 32 * 1024 * 1024;
+var RUNTIME_RECEIPT_CONTROL_BUFFER_MAX_BYTES = 2 * 1024 * 1024;
 var RUNNER_TERMINAL_PUSH_MAX_BODY_BYTES = 16 * 1024 * 1024;
 var RUNTIME_RECEIPT_GATEWAY_BATCH_MAX_BYTES = 12 * 1024 * 1024;
-var RUNTIME_RECEIPT_WRITER_TARGET_BATCH_BYTES = 4 * 1024 * 1024;
+var RUNTIME_RECEIPT_WRITER_TARGET_BATCH_BYTES = 8 * 1024 * 1024;
 var RUNNER_POST_TERMINAL_DIAGNOSTIC_MAX_BYTES = 64 * 1024;
 var JSON_SIZE_LIMIT_REACHED = Symbol("JSON_SIZE_LIMIT_REACHED");
 
@@ -3009,7 +3108,11 @@ function normalizePlayRunLedgerSnapshot(value, fallback) {
       finiteNumber(value.totalLogCount) ?? logTail.length,
       logTail.length
     ),
-    logsTruncated: value.logsTruncated === true,
+    // A persisted snapshot carrying more lines than the tail keeps is
+    // truncated here, whatever the stored flag says. Reporting `false` while
+    // dropping lines is silent loss: a reader would take the tail for the
+    // whole log.
+    logsTruncated: value.logsTruncated === true || logTail.length > LOG_TAIL_LIMIT,
     activeStepId: optionalNullableString(value.activeStepId),
     activeActivityId: optionalNullableString(value.activeActivityId),
     activeArtifactTableNamespace: optionalNullableString(
@@ -3900,28 +4003,42 @@ var PLAY_BACKEND_DESCRIPTORS = {
 // ../play-runtime/runtime-environment.ts
 var PLAY_RUNTIME_ENVIRONMENTS = ["preview"];
 var PLAY_RUNTIME_NAMESPACE_PATTERN = /^[a-z][a-z0-9-]{0,30}$/;
+var PLAY_RUNTIME_SANDBOX_PLACEMENT_POLICY_PATTERN = /^[a-z][a-z0-9_]*@[1-9][0-9]*$/;
 function normalizePlayRuntimeNamespace(value) {
   if (typeof value !== "string") return null;
   const normalized = value.trim();
   return PLAY_RUNTIME_NAMESPACE_PATTERN.test(normalized) ? normalized : null;
 }
+function normalizePlayRuntimeSandboxPlacementPolicy(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return PLAY_RUNTIME_SANDBOX_PLACEMENT_POLICY_PATTERN.test(normalized) ? normalized : null;
+}
 function normalizePlayRuntimeSelection(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
   const record3 = value;
   if (Object.keys(record3).some(
-    (key) => key !== "environment" && key !== "namespace" && key !== "backend"
+    (key) => key !== "environment" && key !== "namespace" && key !== "backend" && key !== "sandboxPlacementPolicy"
   ) || record3.environment !== "preview") {
     return null;
   }
   const namespace = normalizePlayRuntimeNamespace(record3.namespace);
   if (!namespace) return null;
-  if (record3.backend === void 0) {
-    return { environment: "preview", namespace };
+  const sandboxPlacementPolicy = record3.sandboxPlacementPolicy === void 0 ? void 0 : normalizePlayRuntimeSandboxPlacementPolicy(
+    record3.sandboxPlacementPolicy
+  );
+  if (record3.sandboxPlacementPolicy !== void 0 && sandboxPlacementPolicy === null) {
+    return null;
   }
-  if (record3.backend !== PLAY_RUNTIME_BACKENDS.daytona && record3.backend !== PLAY_RUNTIME_BACKENDS.modal) {
+  if (record3.backend !== void 0 && record3.backend !== PLAY_RUNTIME_BACKENDS.daytona && record3.backend !== PLAY_RUNTIME_BACKENDS.modal) {
     return null;
   }
-  return { environment: "preview", namespace, backend: record3.backend };
+  return {
+    environment: "preview",
+    namespace,
+    ...record3.backend === void 0 ? {} : { backend: record3.backend },
+    ...sandboxPlacementPolicy ? { sandboxPlacementPolicy } : {}
+  };
 }
 function normalizePlayRuntimeEnvironment(value) {
   return typeof value === "string" && PLAY_RUNTIME_ENVIRONMENTS.includes(value) ? value : null;
@@ -4015,7 +4132,7 @@ function resolvePlayRunRuntimeSelection(request) {
     const runtime = normalizePlayRuntimeSelection(request.runtime);
     if (!runtime) {
       throw new DeeplineError(
-        'runtime must be { environment: "preview", namespace, backend?: "daytona" | "modal" } with namespace matching ^[a-z][a-z0-9-]{0,30}$.',
+        'runtime must be { environment: "preview", namespace, backend?: "daytona" | "modal", sandboxPlacementPolicy?: "policy_name@1" } with namespace matching ^[a-z][a-z0-9-]{0,30}$.',
         void 0,
         "INVALID_RUNTIME_SELECTION"
       );
@@ -4025,11 +4142,15 @@ function resolvePlayRunRuntimeSelection(request) {
   const configured = process.env.DEEPLINE_RUNTIME_ENVIRONMENT?.trim();
   const configuredNamespace = process.env.DEEPLINE_RUNTIME_NAMESPACE?.trim();
   const configuredToken = process.env.DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN?.trim();
+  const configuredPlacementPolicy = process.env.DEEPLINE_RUNTIME_SANDBOX_PLACEMENT_POLICY?.trim();
   if (!configured) {
-    if (configuredNamespace || configuredToken) {
+    if (configuredNamespace || configuredToken || configuredPlacementPolicy) {
       const present = [];
       if (configuredNamespace) present.push("DEEPLINE_RUNTIME_NAMESPACE");
       if (configuredToken) present.push("DEEPLINE_RUNTIME_ENVIRONMENT_TOKEN");
+      if (configuredPlacementPolicy) {
+        present.push("DEEPLINE_RUNTIME_SANDBOX_PLACEMENT_POLICY");
+      }
       const isPlural = present.length > 1;
       throw new DeeplineError(
         [
@@ -4060,18 +4181,28 @@ function resolvePlayRunRuntimeSelection(request) {
       "INVALID_RUNTIME_NAMESPACE"
     );
   }
-  const configuredBackend = process.env.DEEPLINE_PLAY_RUNNER_BACKEND?.trim();
-  if (!configuredBackend) {
-    return { environment, namespace };
-  }
-  if (configuredBackend !== "daytona" && configuredBackend !== "modal") {
+  const configuredBackendValue = process.env.DEEPLINE_PLAY_RUNNER_BACKEND?.trim();
+  const configuredBackend = configuredBackendValue === "daytona" || configuredBackendValue === "modal" ? configuredBackendValue : void 0;
+  if (configuredBackendValue && !configuredBackend) {
     throw new DeeplineError(
-      `DEEPLINE_PLAY_RUNNER_BACKEND must be daytona or modal for preview runtime selection. Received "${configuredBackend}".`,
+      `DEEPLINE_PLAY_RUNNER_BACKEND must be daytona or modal for preview runtime selection. Received "${configuredBackendValue}".`,
       void 0,
       "INVALID_RUNTIME_BACKEND"
     );
   }
-  return { environment, namespace, backend: configuredBackend };
+  if (configuredPlacementPolicy && !normalizePlayRuntimeSandboxPlacementPolicy(configuredPlacementPolicy)) {
+    throw new DeeplineError(
+      `DEEPLINE_RUNTIME_SANDBOX_PLACEMENT_POLICY must be a versioned placement policy id such as daytona_only@1. Received "${configuredPlacementPolicy}".`,
+      void 0,
+      "INVALID_RUNTIME_SANDBOX_PLACEMENT_POLICY"
+    );
+  }
+  return {
+    environment,
+    namespace,
+    ...configuredBackend ? { backend: configuredBackend } : {},
+    ...configuredPlacementPolicy ? { sandboxPlacementPolicy: configuredPlacementPolicy } : {}
+  };
 }
 function runtimeSelectionHeaders(runtime) {
   if (!runtime) return void 0;
@@ -7886,6 +8017,7 @@ var NODE_INSPECT_CUSTOM = Symbol.for("nodejs.util.inspect.custom");
 var residentRowsByDataset = /* @__PURE__ */ new WeakMap();
 var DEFAULT_MATERIALIZE_LIMIT = 1e4;
 var PLAY_DATASET_EXECUTION_PAGE_BYTES = 64 * 1024 * 1024;
+var DATASET_UTF8_ENCODER = new TextEncoder();
 var PLAY_DATASET_CELL_MAX_BYTES = 5 * 1024 * 1024;
 function resolveMaterializeLimitCap() {
   const raw = process.env.DEEPLINE_PLAY_DATASET_MATERIALIZE_LIMIT;
@@ -9164,6 +9296,70 @@ function replaceAtPath(root, path, replacement) {
 // ../plays/authoring-contract.ts
 import { Type } from "@sinclair/typebox";
 import { Value } from "@sinclair/typebox/value";
+var SUPPORTED_PLAY_AUTHORING_CONTRACT_EDITIONS = [
+  1,
+  2,
+  3,
+  4,
+  5,
+  6,
+  7,
+  8
+];
+var PLAY_AUTHORING_CONTRACT_CHANGELOG_DETAILS = [
+  {
+    changed: "Historical extraction semantics. Invalid or unresolved optional authoring fields may normalize to absence.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: "2026-11-03",
+    readerRemoval: "After every retained edition 1 artifact has a materialized admitted snapshot."
+  },
+  {
+    changed: "Pins admitted authoring snapshots and rejects ambiguous billing, secret, webhook, fetch, timeout, receipt-wait, and freshness contracts.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: "2026-08-03",
+    readerRemoval: "After every retained edition 2 artifact has an admitted input schema or has been republished."
+  },
+  {
+    changed: "Materializes the declared input schema in the admitted snapshot so launch never reparses current source.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: "2026-08-19",
+    readerRemoval: null
+  },
+  {
+    changed: "ctx.secrets.get(name) resolves an allowed secret to a plaintext string for ordinary Play code. Editions 1\u20133 retain opaque secret handles.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: null,
+    readerRemoval: null
+  },
+  {
+    changed: "ctx.fetch throws a typed, redacted CtxFetchHttpError for non-2xx responses. Editions 1\u20134 continue to return the response record for every HTTP status.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: null,
+    readerRemoval: null
+  },
+  {
+    changed: "Adds static cron input and rejects unknown definePlay and binding fields during new admission. Editions 1\u20135 retain their admitted binding semantics.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: null,
+    readerRemoval: null
+  },
+  {
+    changed: "Slack HITL calls that omit timeout wait one week. Editions 1\u20136 retain the historical 24-hour default.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: null,
+    readerRemoval: null
+  },
+  {
+    changed: "Lets an inline scalar child execute without a stored static pipeline. Dataset creation and suspension remain rejected by the authoritative runtime capability boundary; editions 1\u20137 retain static-contract preflight rejection.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: null,
+    readerRemoval: null
+  }
+];
+var PLAY_AUTHORING_CONTRACT_CHANGELOG = SUPPORTED_PLAY_AUTHORING_CONTRACT_EDITIONS.map((edition, index) => ({
+  edition,
+  ...PLAY_AUTHORING_CONTRACT_CHANGELOG_DETAILS[index]
+}));
 var PLAY_SQL_LISTENER_WHERE_OPERATORS = [
   "eq",
   "neq",

package/dist/install-integrity.json

@@ -125,6 +125,7 @@
     "dist/bundling-sources/shared_libs/play-runtime/batching-types.ts",
     "dist/bundling-sources/shared_libs/play-runtime/bettercontact-batching.ts",
     "dist/bundling-sources/shared_libs/play-runtime/bounceban-batching.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/bounded-batch-function.ts",
     "dist/bundling-sources/shared_libs/play-runtime/bounded-dispatch.ts",
     "dist/bundling-sources/shared_libs/play-runtime/builtin-pacing.ts",
     "dist/bundling-sources/shared_libs/play-runtime/cell-provenance.ts",
@@ -154,6 +155,7 @@
     "dist/bundling-sources/shared_libs/play-runtime/deployment/fly-machines.ts",
     "dist/bundling-sources/shared_libs/play-runtime/deployment/fly-registry.ts",
     "dist/bundling-sources/shared_libs/play-runtime/deployment/process-tree.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/deployment/runtime-gateway-capacity.ts",
     "dist/bundling-sources/shared_libs/play-runtime/deployment/runtime-gateway-drain.ts",
     "dist/bundling-sources/shared_libs/play-runtime/deployment/runtime-surface.ts",
     "dist/bundling-sources/shared_libs/play-runtime/deployment/runtime-topology.ts",
@@ -170,10 +172,14 @@
     "dist/bundling-sources/shared_libs/play-runtime/durable-invocation-fence.ts",
     "dist/bundling-sources/shared_libs/play-runtime/durable-receipt-execution.ts",
     "dist/bundling-sources/shared_libs/play-runtime/dynamic-worker-version.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/egress-bandwidth-probe.ts",
     "dist/bundling-sources/shared_libs/play-runtime/email-status.ts",
     "dist/bundling-sources/shared_libs/play-runtime/event-wait-tools.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/execute-server-timing.ts",
     "dist/bundling-sources/shared_libs/play-runtime/execution-capabilities.ts",
     "dist/bundling-sources/shared_libs/play-runtime/execution-gateway-invocation-fence.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/execution-gateway-receipt-output-reference.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/execution-gateway-response-size.ts",
     "dist/bundling-sources/shared_libs/play-runtime/execution-ledger-store.ts",
     "dist/bundling-sources/shared_libs/play-runtime/execution-plan.ts",
     "dist/bundling-sources/shared_libs/play-runtime/execution-protocol.ts",
@@ -210,6 +216,8 @@
     "dist/bundling-sources/shared_libs/play-runtime/map-memory-limits.ts",
     "dist/bundling-sources/shared_libs/play-runtime/map-row-identity.ts",
     "dist/bundling-sources/shared_libs/play-runtime/map-row-outcome.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/memory-ledger.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/memory-pressure-signal.ts",
     "dist/bundling-sources/shared_libs/play-runtime/modal-runtime-config.ts",
     "dist/bundling-sources/shared_libs/play-runtime/opensosdata-batching.ts",
     "dist/bundling-sources/shared_libs/play-runtime/output-size-limits.ts",
@@ -258,6 +266,14 @@
     "dist/bundling-sources/shared_libs/play-runtime/profiles.ts",
     "dist/bundling-sources/shared_libs/play-runtime/projection.ts",
     "dist/bundling-sources/shared_libs/play-runtime/protocol.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/provider-capacity/adaptive-provider-capacity-controller.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/provider-capacity/epoch-aimd-rate-controller.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/provider-capacity/fixture-capacity-simulator.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/provider-capacity/gradient2-concurrency-controller.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/provider-capacity/provider-capacity-policy.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/provider-capacity/provider-concurrency-policy.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/provider-capacity/provider-rate-policy.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/provider-capacity/provider-throttle-classifier.ts",
     "dist/bundling-sources/shared_libs/play-runtime/providers.ts",
     "dist/bundling-sources/shared_libs/play-runtime/public-play-contract.ts",
     "dist/bundling-sources/shared_libs/play-runtime/query-result-dataset.ts",
@@ -273,9 +289,11 @@
     "dist/bundling-sources/shared_libs/play-runtime/run-ledger-projection-contract.ts",
     "dist/bundling-sources/shared_libs/play-runtime/run-ledger.ts",
     "dist/bundling-sources/shared_libs/play-runtime/run-lifecycle-policy.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/run-log-buffer.ts",
     "dist/bundling-sources/shared_libs/play-runtime/run-snapshot-stream.ts",
     "dist/bundling-sources/shared_libs/play-runtime/run-terminal-source.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runner-app/child-play-resolver.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/runner-app/egress-probe.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runner-app/index.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runner-app/progress-sidecar.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runner-app/runtime-deadline.ts",
@@ -300,6 +318,7 @@
     "dist/bundling-sources/shared_libs/play-runtime/runner-backends/runtime-sandbox-reconciliation.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runner-backends/types.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-actions.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/runtime-api-compression.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-api-paths.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-api.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-authority.ts",
@@ -309,14 +328,17 @@
     "dist/bundling-sources/shared_libs/play-runtime/runtime-contract.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-env.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-environment.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/runtime-flow.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-incident-drills.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-infra-mode.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/runtime-map-row-feed.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-operation-contract.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-operation.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-pg-driver-pg.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-pg-driver.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-postgres-admission.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-receipt-store-adapter.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/runtime-receipt-value.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-receipt-writer.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-release-environment.ts",
     "dist/bundling-sources/shared_libs/play-runtime/runtime-reliability-policy.ts",
@@ -349,9 +371,14 @@
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/absurd-worker-metrics.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/absurd-worker-required-env.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/absurd.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/canonical-integration-operation-store.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/gateway-heavy-request-admission.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/gateway-progress-registry.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/index.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/integration-operation-store-contract.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/integration-operation-value-reference.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/integration-operation-value-retirement.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/integration-operation-value-storage.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/lazy.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/play-run-recovery.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres-budget-state.ts",
@@ -359,6 +386,7 @@
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres-progress.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres-rate-state.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/receipt-completion-coalescer.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/receipt-gateway.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/run-ledger-outbox-recovery.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/run-terminal-transition.ts",
@@ -366,6 +394,7 @@
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/runtime-api-origin.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/runtime-queue-health.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/runtime-receipt-gateway-health.ts",
+    "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/runtime-receipt-value-storage.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/runtime-sandbox-capacity.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/runtime-sandbox-ledger-reconciliation.ts",
     "dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/runtime-sandbox-operation.ts",
@@ -523,8 +552,8 @@
     "dist/cli/index.js",
     "dist/cli/index.mjs",
     "dist/cli/text-imports.d.ts",
-    "dist/compiler-manifest-DfSnbCTW.d.mts",
-    "dist/compiler-manifest-DfSnbCTW.d.ts",
+    "dist/compiler-manifest-BIqRyj5m.d.mts",
+    "dist/compiler-manifest-BIqRyj5m.d.ts",
     "dist/helpers.d.mts",
     "dist/helpers.d.ts",
     "dist/helpers.js",

package/dist/plays/bundle-play-file.d.mts

@@ -1,6 +1,6 @@
 /// <reference path="./text-imports.d.ts" />
-import { P as PlayArtifactKind, a as PlayBundleArtifact, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-DfSnbCTW.mjs';
-export { d as PLAY_ARTIFACT_KINDS, e as PlayArtifactCompatibility, f as PlayImportPolicy, g as PlayPackageImport, h as PlayRuntimeFeature } from '../compiler-manifest-DfSnbCTW.mjs';
+import { P as PlayArtifactKind, a as PlayBundleArtifact, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-BIqRyj5m.mjs';
+export { d as PLAY_ARTIFACT_KINDS, e as PlayArtifactCompatibility, f as PlayImportPolicy, g as PlayPackageImport, h as PlayRuntimeFeature } from '../compiler-manifest-BIqRyj5m.mjs';
 import '@sinclair/typebox';
 
 type ImportedPlayDependency = {

package/dist/plays/bundle-play-file.d.ts

@@ -1,6 +1,6 @@
 /// <reference path="./text-imports.d.ts" />
-import { P as PlayArtifactKind, a as PlayBundleArtifact, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-DfSnbCTW.js';
-export { d as PLAY_ARTIFACT_KINDS, e as PlayArtifactCompatibility, f as PlayImportPolicy, g as PlayPackageImport, h as PlayRuntimeFeature } from '../compiler-manifest-DfSnbCTW.js';
+import { P as PlayArtifactKind, a as PlayBundleArtifact, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-BIqRyj5m.js';
+export { d as PLAY_ARTIFACT_KINDS, e as PlayArtifactCompatibility, f as PlayImportPolicy, g as PlayPackageImport, h as PlayRuntimeFeature } from '../compiler-manifest-BIqRyj5m.js';
 import '@sinclair/typebox';
 
 type ImportedPlayDependency = {

package/dist/plays/bundle-play-file.mjs

@@ -48,7 +48,71 @@ var CURRENT_PLAY_ARTIFACT_CONTRACT_VERSION = 2;
 // ../plays/authoring-contract.ts
 import { Type } from "@sinclair/typebox";
 import { Value } from "@sinclair/typebox/value";
-var PLAY_AUTHORING_CONTRACT_EDITION = 7;
+var PLAY_AUTHORING_CONTRACT_EDITION = 8;
+var SUPPORTED_PLAY_AUTHORING_CONTRACT_EDITIONS = [
+  1,
+  2,
+  3,
+  4,
+  5,
+  6,
+  7,
+  8
+];
+var PLAY_AUTHORING_CONTRACT_CHANGELOG_DETAILS = [
+  {
+    changed: "Historical extraction semantics. Invalid or unresolved optional authoring fields may normalize to absence.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: "2026-11-03",
+    readerRemoval: "After every retained edition 1 artifact has a materialized admitted snapshot."
+  },
+  {
+    changed: "Pins admitted authoring snapshots and rejects ambiguous billing, secret, webhook, fetch, timeout, receipt-wait, and freshness contracts.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: "2026-08-03",
+    readerRemoval: "After every retained edition 2 artifact has an admitted input schema or has been republished."
+  },
+  {
+    changed: "Materializes the declared input schema in the admitted snapshot so launch never reparses current source.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: "2026-08-19",
+    readerRemoval: null
+  },
+  {
+    changed: "ctx.secrets.get(name) resolves an allowed secret to a plaintext string for ordinary Play code. Editions 1\u20133 retain opaque secret handles.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: null,
+    readerRemoval: null
+  },
+  {
+    changed: "ctx.fetch throws a typed, redacted CtxFetchHttpError for non-2xx responses. Editions 1\u20134 continue to return the response record for every HTTP status.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: null,
+    readerRemoval: null
+  },
+  {
+    changed: "Adds static cron input and rejects unknown definePlay and binding fields during new admission. Editions 1\u20135 retain their admitted binding semantics.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: null,
+    readerRemoval: null
+  },
+  {
+    changed: "Slack HITL calls that omit timeout wait one week. Editions 1\u20136 retain the historical 24-hour default.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: null,
+    readerRemoval: null
+  },
+  {
+    changed: "Lets an inline scalar child execute without a stored static pipeline. Dataset creation and suspension remain rejected by the authoritative runtime capability boundary; editions 1\u20137 retain static-contract preflight rejection.",
+    compatibilityOwner: "Plays Runtime",
+    newWritesEnd: null,
+    readerRemoval: null
+  }
+];
+var PLAY_AUTHORING_CONTRACT_CHANGELOG = SUPPORTED_PLAY_AUTHORING_CONTRACT_EDITIONS.map((edition, index) => ({
+  edition,
+  ...PLAY_AUTHORING_CONTRACT_CHANGELOG_DETAILS[index]
+}));
 var PLAY_SQL_LISTENER_WHERE_OPERATORS = [
   "eq",
   "neq",

package/dist/release.d.mts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.127";
+    readonly version: "0.3.129";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.d.ts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.127";
+    readonly version: "0.3.129";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;