deepline 0.3.146 → 0.3.147

package/dist/bundling-sources/sdk/src/release.ts

@@ -200,7 +200,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.146',
+  version: '0.3.147',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/shared_libs/play-runtime/fullenrich-batching.ts

@@ -4,7 +4,7 @@ import {
 } from './batching-types';
 
 const FULLENRICH_BATCH_ITEM_KEY = 'deepline_batch_item_key';
-const FULLENRICH_BATCH_SIZE = 100;
+export const FULLENRICH_MAX_BATCH_SIZE = 50;
 
 type FullEnrichContactRow = Record<string, unknown> & {
   custom?: Record<string, string>;
@@ -148,7 +148,7 @@ const fullenrichBulkSelfBatchStrategy: BatchOperationStrategy<
   sourceOperation: 'fullenrich_bulk_enrich',
   batchOperation: 'fullenrich_bulk_enrich',
   kind: 'identifier_batch',
-  maxBatchSize: FULLENRICH_BATCH_SIZE,
+  maxBatchSize: FULLENRICH_MAX_BATCH_SIZE,
   canBatchWith(left, right) {
     return (
       isOneRowPayload(left) &&

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/gateway-progress-registry.ts

@@ -19,6 +19,8 @@ import {
 export interface GatewayProgressRegistry {
   ingest: (input: {
     launch: PlaySchedulerSubmitInput;
+    /** Verified for this request; the persisted launch token may have expired. */
+    authenticatedExecutorToken: string;
     runId: string;
     attempt: number;
     events: unknown[];
@@ -40,6 +42,8 @@ export interface GatewayProgressRegistry {
    */
   finalizeTerminal: (input: {
     launch: PlaySchedulerSubmitInput;
+    /** Verified for this request; the persisted launch token may have expired. */
+    authenticatedExecutorToken: string;
     runId: string;
     attempt: number;
     result: PlayRunnerResult;
@@ -62,6 +66,8 @@ export interface GatewayProgressRegistry {
 export async function projectGatewayRunnerTerminalProgress(input: {
   registry: GatewayProgressRegistry;
   launch: PlaySchedulerSubmitInput;
+  /** Verified for this request; the persisted launch token may have expired. */
+  authenticatedExecutorToken: string;
   runId: string;
   attempt: number;
   result: PlayRunnerResult;
@@ -79,6 +85,7 @@ export async function projectGatewayRunnerTerminalProgress(input: {
     // before the caller can commit the terminal fact.
     await input.registry.finalizeTerminal({
       launch: input.launch,
+      authenticatedExecutorToken: input.authenticatedExecutorToken,
       runId: input.runId,
       attempt: input.attempt,
       result: input.result,
@@ -91,6 +98,7 @@ export async function projectGatewayRunnerTerminalProgress(input: {
   } else if (input.events.length > 0) {
     await input.registry.ingest({
       launch: input.launch,
+      authenticatedExecutorToken: input.authenticatedExecutorToken,
       runId: input.runId,
       attempt: input.attempt,
       events: input.events,
@@ -130,6 +138,7 @@ export function createGatewayProgressRegistry(options?: {
   return {
     async ingest({
       launch,
+      authenticatedExecutorToken,
       attempt,
       events,
       liveLogOffset,
@@ -137,7 +146,7 @@ export function createGatewayProgressRegistry(options?: {
       attemptAlreadyVerified,
     }) {
       const reporter = createReporter(
-        launch,
+        { ...launch, executorToken: authenticatedExecutorToken },
         attempt,
         isCurrentAttempt,
         liveLogOffset,
@@ -154,7 +163,10 @@ export function createGatewayProgressRegistry(options?: {
     async finalize() {},
     async finalizeTerminal(input) {
       const reporter = createReporter(
-        input.launch,
+        {
+          ...input.launch,
+          executorToken: input.authenticatedExecutorToken,
+        },
         input.attempt,
         input.isCurrentAttempt,
         input.liveLogOffset,

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres-rate-state.ts

@@ -24,6 +24,8 @@ const RATE_BUCKET_TABLE = 'rate_bucket';
 const RATE_CONCURRENCY_LEASE_TABLE = 'rate_concurrency_leases';
 const RATE_CONCURRENCY_OBSERVER_TABLE = 'rate_concurrency_observers';
 const RATE_RESERVATION_TABLE = 'rate_reservations';
+const RATE_RESERVATION_BUCKET_EXPIRY_INDEX =
+  'runtime_scheduler_rate_reservation_bucket_expiry_idx';
 const RATE_REQUESTER_TABLE = 'rate_requesters';
 const MIN_CONCURRENCY_WAIT_MS = 10;
 /**
@@ -372,7 +374,10 @@ function positiveInt(value: number, label: string): number {
 
 export async function ensurePostgresRateStateSchema(
   client: PostgresSchedulerQueryClient,
-  options?: { schema?: string | null },
+  options?: {
+    schema?: string | null;
+    deferReservationBucketExpiryIndex?: boolean;
+  },
 ): Promise<void> {
   // Token-bucket + AIMD-in-the-row state. One row per (bucket_id, rule_id). The
   // hot path is a single autocommit statement. It locks only the selected
@@ -486,6 +491,11 @@ export async function ensurePostgresRateStateSchema(
     CREATE INDEX IF NOT EXISTS runtime_scheduler_rate_concurrency_observer_expiry_idx
       ON ${concurrencyObserverTableName(options)} (expires_at_ms)
   `);
+  const reservationTableAlreadyExists = await client.query<{
+    present: boolean;
+  }>('SELECT to_regclass($1) IS NOT NULL AS present', [
+    reservationTableName(options),
+  ]);
   await client.query(`
     CREATE TABLE IF NOT EXISTS ${reservationTableName(options)} (
       bucket_id text NOT NULL,
@@ -498,6 +508,17 @@ export async function ensurePostgresRateStateSchema(
     CREATE INDEX IF NOT EXISTS runtime_scheduler_rate_reservation_expiry_idx
       ON ${reservationTableName(options)} (expires_at_ms)
   `);
+  // Shared populated tables need a concurrent build, but a missing table is
+  // created empty by this migration and can receive its index directly.
+  if (
+    !options?.deferReservationBucketExpiryIndex ||
+    reservationTableAlreadyExists.rows[0]?.present !== true
+  ) {
+    await client.query(`
+      CREATE INDEX IF NOT EXISTS ${RATE_RESERVATION_BUCKET_EXPIRY_INDEX}
+        ON ${reservationTableName(options)} (bucket_id, expires_at_ms)
+    `);
+  }
   await client.query(`
     CREATE INDEX IF NOT EXISTS runtime_scheduler_rate_bucket_bucket_idx
       ON ${bucketTableName(options)} (bucket_id)

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres.ts

@@ -264,7 +264,9 @@ const POSTGRES_SCHEDULER_SCHEMA_INIT_STATEMENT_TIMEOUT_MS = 60_000;
 // v44 moves the v39-v43 shared-schema expansion onto the online, statement-
 // scoped migration path. The reader contract is unchanged; the marker ensures
 // deployment retries do not re-enter the old cross-table DDL transaction.
-export const POSTGRES_SCHEDULER_SCHEMA_VERSION = 44;
+// v45 adds the bucket-leading expiration index used by rate-reservation
+// cleanup. Shared schemas build it concurrently through the deploy migrator.
+export const POSTGRES_SCHEDULER_SCHEMA_VERSION = 45;
 const POSTGRES_SCHEDULER_SCHEMA_MIGRATIONS_TABLE =
   'scheduler_schema_migrations';
 export const POSTGRES_SCHEDULER_OPEN_RECOVERY_INDEX =
@@ -1829,6 +1831,15 @@ export async function hasCurrentPostgresSchedulerSchemaShape(
             AND index_class.relname = 'runtime_scheduler_runs_terminal_finished_idx'
             AND index_row.indrelid = to_regclass($4)
             AND index_row.indisready AND index_row.indisvalid
+        )
+        AND EXISTS (
+          SELECT 1 FROM pg_index AS index_row
+          JOIN pg_class AS index_class ON index_class.oid = index_row.indexrelid
+          JOIN pg_namespace AS index_namespace ON index_namespace.oid = index_class.relnamespace
+          WHERE index_namespace.nspname = $1
+            AND index_class.relname = 'runtime_scheduler_rate_reservation_bucket_expiry_idx'
+            AND index_row.indrelid = to_regclass($9)
+            AND index_row.indisready AND index_row.indisvalid
         ) AS ready
     `,
     [
@@ -1840,6 +1851,7 @@ export async function hasCurrentPostgresSchedulerSchemaShape(
       requirements.blockedOutboxIndex !== false,
       `${quotedSchema}.${quoteIdent('sandbox_cleanup_jobs_v2')}`,
       `${quotedSchema}.${quoteIdent('compute_billing_jobs_v2')}`,
+      `${quotedSchema}.${quoteIdent('rate_reservations')}`,
     ],
   );
   return runtimeAdminIndexes.rows[0]?.ready === true;
@@ -3434,7 +3446,10 @@ export async function ensurePostgresSchedulerSchema(
     END
     $$
   `);
-    await ensurePostgresRateStateSchema(client, options);
+    await ensurePostgresRateStateSchema(client, {
+      schema,
+      deferReservationBucketExpiryIndex: options?.deferRuntimeAdminIndexes,
+    });
     await ensurePostgresBudgetStateSchema(client, {
       schedulerSchema: schemaName(options),
     });
@@ -3792,6 +3807,11 @@ const POSTGRES_SCHEDULER_RUNTIME_ADMIN_INDEXES = [
       WHERE status IN ('completed', 'failed', 'cancelled')
         AND started_at IS NOT NULL`,
   },
+  {
+    name: 'runtime_scheduler_rate_reservation_bucket_expiry_idx',
+    table: 'rate_reservations',
+    definition: `(bucket_id, expires_at_ms)`,
+  },
 ] as const;
 
 async function readPostgresSchedulerIndexState(
@@ -3824,7 +3844,7 @@ async function readPostgresSchedulerIndexState(
 }
 
 /**
- * Remove interrupted dashboard index builds from a quiesced run-scoped
+ * Remove interrupted deploy-owned index builds from a quiesced run-scoped
  * schema so transactional CREATE INDEX IF NOT EXISTS can recreate them.
  * Shared schemas must use the concurrent repair path below.
  */
@@ -3848,9 +3868,9 @@ export async function repairInvalidRunScopedRuntimeAdminIndexes(
 }
 
 /**
- * The Runtime Workers dashboard and bounded delivered-outbox retention rely on
- * these indexes. Deploy owns the builds because the live scheduler tables are
- * too large for request or worker startup to run blocking DDL.
+ * Runtime health surfaces, bounded retention, and hot-path cleanup rely on
+ * these indexes. Deploy owns the builds because live scheduler tables are too
+ * large for request or worker startup to run blocking DDL.
  */
 export async function ensurePostgresSchedulerRuntimeAdminIndexesConcurrently(
   client: PostgresSchedulerQueryClient,
@@ -3882,7 +3902,7 @@ export async function ensurePostgresSchedulerRuntimeAdminIndexesConcurrently(
     );
     if (installed.kind !== 'ready') {
       throw new Error(
-        `Runtime scheduler dashboard index ${schema}.${index.name} is not valid and ready after concurrent creation.`,
+        `Runtime scheduler index ${schema}.${index.name} is not valid and ready after concurrent creation.`,
       );
     }
   }

package/dist/bundling-sources/shared_libs/play-runtime/test-runtime-seams.ts

@@ -202,11 +202,15 @@ export function runtimeSheetPageTailWriteMarkerEvent(
   ) {
     return null;
   }
+  const at = new Date().toISOString();
   return {
     type: 'log',
-    at: new Date().toISOString(),
+    at,
     source: 'play',
-    line: `[runtime.sheet-page-tail-write] phase=start table=${tableNamespace} rows=${rows.length}`,
+    // The status projection currently exposes the durable log line without
+    // the event envelope's `at`. Keep the emission time in the line so the
+    // runtime-preview proof can measure delayed projection accurately.
+    line: `[${at}] [runtime.sheet-page-tail-write] phase=start table=${tableNamespace} rows=${rows.length}`,
   };
 }
 

package/dist/cli/index.js

@@ -3068,7 +3068,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.146",
+  version: "0.3.147",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/cli/index.mjs

@@ -3063,7 +3063,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.146",
+  version: "0.3.147",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/index.js

@@ -864,7 +864,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.146",
+  version: "0.3.147",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/index.mjs

@@ -768,7 +768,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.146",
+  version: "0.3.147",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/release.d.mts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.146";
+    readonly version: "0.3.147";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.d.ts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.146";
+    readonly version: "0.3.147";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.js

@@ -74,7 +74,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.146",
+  version: "0.3.147",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/release.mjs

@@ -48,7 +48,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.146",
+  version: "0.3.147",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.3.146",
+  "version": "0.3.147",
   "description": "GTM data CLI and TypeScript SDK for coding agents",
   "license": "MIT",
   "homepage": "https://code.deepline.com",