deepline 0.3.151 → 0.3.152

package/dist/bundling-sources/sdk/src/release.ts

@@ -200,7 +200,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.151',
+  version: '0.3.152',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/shared_libs/observability/dlq.ts

@@ -40,7 +40,8 @@ export type DlqPathAction =
   | 'retry'
   | 'quarantine'
   | 'release'
-  | 'settle';
+  | 'settle'
+  | 'cancel';
 
 export type DlqLookupIndex = {
   readonly table: string;
@@ -302,6 +303,7 @@ export function normalizeQueueItemAction(
     quarantine: 'quarantine',
     release: 'cancel',
     settle: 'resume',
+    cancel: 'cancel',
   };
   return action in aliases
     ? aliases[action as QueueItemLegacyAction]
@@ -343,6 +345,17 @@ export type QueueItemFailedTimeRange = {
   readonly snapshotAt: string;
 };
 
+/** Server attestation for a bounded source-indexed creation-time plan. */
+export type QueueItemCreatedTimeRange = {
+  readonly kind: 'created-time-range';
+  readonly after: string | null;
+  readonly before: string;
+  readonly index: string;
+  readonly indexed: true;
+  /** Stable across every page in the same cursor-bound plan. */
+  readonly snapshotAt: string;
+};
+
 export type QueueItemList = {
   readonly contractVersion: typeof QUEUE_ITEM_CONTROL_CONTRACT_VERSION;
   readonly queueId: string;
@@ -354,6 +367,8 @@ export type QueueItemList = {
   readonly cursor: string | null;
   /** Present only for a successfully measured indexed failure-time range. */
   readonly failedTimeRange?: QueueItemFailedTimeRange;
+  /** Present only for a successfully measured indexed creation-time range. */
+  readonly createdTimeRange?: QueueItemCreatedTimeRange;
   readonly unavailable?: QueueItemUnavailable;
 };
 
@@ -470,6 +485,11 @@ export type QueueItemConnector = {
     context: QueueItemConnectorContext,
     range: { after?: string; before: string },
   ) => Promise<QueueItemList>;
+  /** Indexed creation-time listing for owner-declared retirement plans. */
+  readonly listCreatedInRange?: (
+    context: QueueItemConnectorContext,
+    range: { after?: string; before: string },
+  ) => Promise<QueueItemList>;
   readonly get: (
     context: QueueItemConnectorContext,
     itemId: string,
@@ -810,6 +830,15 @@ const DLQ_PATH_METADATA: Readonly<Record<string, DlqPathMetadata>> = {
       bounded: true,
     },
     transitions: [
+      {
+        action: 'cancel',
+        fromStates: ['ready'],
+        toState: 'cancelled',
+        enabled: true,
+        requiresApproval: true,
+        reason:
+          'Cancellation is owner-controlled and revision-fenced; retirement can be recorded only after the job reaches this terminal state.',
+      },
       {
         action: 'retry',
         fromStates: ['failed'],

package/dist/bundling-sources/shared_libs/play-runtime/context.ts

@@ -215,6 +215,7 @@ import {
   buildDurableToolPayloadProviderIdempotencyKey,
   buildProviderOperationIdempotencyKey,
   buildDurableToolReceiptPrefix,
+  scopeToolReceiptToInvocation,
   resolveDurableCallCachePolicy,
 } from './durable-call-cache';
 import {
@@ -12531,6 +12532,27 @@ export class PlayContextImpl implements ScalarPlayAuthoringRuntimeContext {
       (await this.resolveToolAuthScopeDigest(toolId))?.trim() ?? null;
     const eventWaitHandler =
       (await this.#options.getIntegrationEventWaitHandler?.(toolId)) ?? null;
+    const invocationScoped =
+      !eventWaitHandler &&
+      (await this.#options.getToolIdempotencyScope?.(toolId)) === 'invocation';
+    const invocationIdentity = `${this.currentRunId}:${logicalCallId}`;
+    const scopeReceipt = (receiptKey: string): string =>
+      invocationScoped
+        ? scopeToolReceiptToInvocation({
+            orgId: this.#options.orgId,
+            toolId,
+            receiptKey,
+            invocationIdentity,
+          })
+        : receiptKey;
+    const scopeOperation = (operationKey: string): string =>
+      invocationScoped
+        ? buildProviderOperationIdempotencyKey({
+            operationKey,
+            force: true,
+            fallbackAttemptId: invocationIdentity,
+          })
+        : operationKey;
     const explicitForce =
       options?.force === true ||
       toolExecutionOverrides.getStore()?.force === true;
@@ -12545,6 +12567,7 @@ export class PlayContextImpl implements ScalarPlayAuthoringRuntimeContext {
         executionAuthScopeDigest,
         staleAfterSeconds: toolCachePolicy.staleAfterSeconds,
       });
+    compatibleDurableCacheKeys = compatibleDurableCacheKeys.map(scopeReceipt);
     let durableCacheKey = compatibleDurableCacheKeys[0];
     if (!durableCacheKey) {
       throw new Error(`Tool ${toolId} is missing a primary durable cache key.`);
@@ -12567,6 +12590,9 @@ export class PlayContextImpl implements ScalarPlayAuthoringRuntimeContext {
         providerActionVersion,
         payload: input,
       });
+    if (legacyDurableCacheKey)
+      legacyDurableCacheKey = scopeReceipt(legacyDurableCacheKey);
+    providerIdempotencyKeyBase = scopeOperation(providerIdempotencyKeyBase);
     let directResultReceiptKey = durableCacheKey;
     // A raw-v2 artifact must never read an older receipt that cannot render
     // raw-v2. If both the primary and its revisioned recovery receipt are
@@ -12589,12 +12615,13 @@ export class PlayContextImpl implements ScalarPlayAuthoringRuntimeContext {
           input,
           eventWaitHandler,
           explicitForce,
+          logicalCallId,
         );
       }
       if (toolId === 'run_javascript') {
         throw new Error(DISALLOWED_RUN_JAVASCRIPT_TOOL_MESSAGE);
       }
-      if (cacheableToolResult && !toolCachePolicy.force) {
+      if (cacheableToolResult && !toolCachePolicy.force && !invocationScoped) {
         const sourceRunRecovered = await this.recoverSourceRunToolReceipt({
           toolId,
           logicalCallId,
@@ -13315,6 +13342,8 @@ export class PlayContextImpl implements ScalarPlayAuthoringRuntimeContext {
             executionAuthScopeDigest,
             staleAfterSeconds: toolCachePolicy.staleAfterSeconds,
           });
+        compatibleDurableCacheKeys =
+          compatibleDurableCacheKeys.map(scopeReceipt);
         durableCacheKey = compatibleDurableCacheKeys[0];
         if (!durableCacheKey) {
           throw new Error(
@@ -13335,6 +13364,9 @@ export class PlayContextImpl implements ScalarPlayAuthoringRuntimeContext {
             providerActionVersion,
             payload: input,
           });
+        if (legacyDurableCacheKey)
+          legacyDurableCacheKey = scopeReceipt(legacyDurableCacheKey);
+        providerIdempotencyKeyBase = scopeOperation(providerIdempotencyKeyBase);
         directResultReceiptKey = durableCacheKey;
         bypassDirectResultCache = false;
         checkpointCacheKeys.splice(
@@ -13354,6 +13386,7 @@ export class PlayContextImpl implements ScalarPlayAuthoringRuntimeContext {
     input: Record<string, unknown>,
     handler: IntegrationEventWaitHandler,
     force = false,
+    toolCallId?: string,
   ): Promise<unknown> {
     this.assertInlineChildContract('suspending_child');
     if (!this.#options.durableBoundaries) {
@@ -13367,6 +13400,7 @@ export class PlayContextImpl implements ScalarPlayAuthoringRuntimeContext {
       workflowId: this.#options.workflowId,
       orgId: this.#options.orgId,
       executorToken: this.#options.executorToken,
+      toolCallId,
       slackHitlDefaultTimeoutMs:
         this.currentRuntimeSemantics.slackHitl.defaultTimeoutMs,
       slackHitlTimeoutOutcome:

package/dist/bundling-sources/shared_libs/play-runtime/ctx-types.ts

@@ -670,6 +670,8 @@ export type IntegrationEventWaitRuntimeContext = {
   workflowId?: string;
   orgId?: string;
   executorToken?: string;
+  /** Stable runtime identity for one logical tools.execute invocation. */
+  toolCallId?: string;
   slackHitlDefaultTimeoutMs?: number;
   /** Behavior selected by the admitted Play artifact, never worker version. */
   slackHitlTimeoutOutcome?: 'park' | 'error';
@@ -981,6 +983,9 @@ export interface ContextOptions {
   getToolQueueHints?: (toolId: string) => Promise<readonly PlayQueueHint[]>;
   getToolProvider?: (toolId: string) => Promise<string | null>;
   getToolOperation?: (toolId: string) => Promise<string | null>;
+  /** Identity policy is required before reading receipts; lookup errors are
+   * fatal, unlike the legacy best-effort retry advice below. */
+  getToolIdempotencyScope?: (toolId: string) => Promise<'invocation' | null>;
   getToolRetryPolicy?: (
     toolId: string,
     input: Record<string, unknown>,

package/dist/bundling-sources/shared_libs/play-runtime/durable-call-cache.ts

@@ -226,6 +226,24 @@ export function buildDurableToolReceiptPrefix(input: {
   return `ctx:${orgId}:call:tool:${normalizeTableNamespace(toolId)}:`;
 }
 
+/** Partition a completed-result receipt without changing its accepted wire
+ * shape. The semantic key still includes payload/auth/action/presentation. */
+export function scopeToolReceiptToInvocation(input: {
+  orgId?: string | null;
+  toolId: string;
+  receiptKey: string;
+  invocationIdentity: string;
+}): string {
+  if (!input.invocationIdentity.trim())
+    throw new Error('Missing tool invocation identity.');
+  return `${buildDurableToolReceiptPrefix(input)}${sha256Hex(
+    stableStringify({
+      receiptKey: input.receiptKey,
+      invocationIdentity: input.invocationIdentity,
+    }),
+  )}`;
+}
+
 export function buildProviderOperationIdempotencyKey(input: {
   operationKey: string;
   force?: boolean;

package/dist/bundling-sources/shared_libs/play-runtime/event-wait-tools.ts

@@ -1,5 +1,6 @@
 export const EVENT_WAIT_TOOL_IDS: ReadonlySet<string> = new Set([
   'slack_message_with_hitl',
+  'slack_wait_for_action',
   'slack_send_message_with_hitl',
   'test_wait_for_event',
 ]);

package/dist/bundling-sources/shared_libs/play-runtime/runner-app/index.ts

@@ -285,7 +285,14 @@ const RUNTIME_RECEIPT_GATEWAY_BATCH_SIZE = 200;
 const RUNTIME_RECEIPT_GATEWAY_BATCH_MAX_WAIT_MS = 15;
 const RUNTIME_RECEIPT_GATEWAY_REQUEST_TIMEOUT_MS =
   RUNTIME_CAPACITY_POLICY.receiptGateway.requestTimeoutMs;
-const RETRY_SAFE_EVENT_WAIT_ARM_TOOLS = new Set(['test_wait_for_event']);
+// Slack's native action wait persists its interaction intent before posting or
+// updating a card. Replaying the same boundary either reuses its bound message
+// or refuses an ambiguous unbound post, so transient gateway responses are safe
+// to retry without creating a second card.
+const RETRY_SAFE_EVENT_WAIT_ARM_TOOLS = new Set([
+  'test_wait_for_event',
+  'slack_wait_for_action',
+]);
 
 /**
  * The Context already bounds receipt completion to sixteen flights. The
@@ -329,6 +336,7 @@ type RuntimeToolMetadata = {
   actionCacheReadVersions?: string[];
   queueHints?: unknown;
   retry?: {
+    idempotencyScope?: 'invocation';
     retrySafeTransientHttp?: boolean;
     requiresExecutionFence?: boolean;
   };
@@ -2184,6 +2192,12 @@ async function run(
         ? operation.trim()
         : null;
     },
+    getToolIdempotencyScope: async (toolId) => {
+      const metadata = await getRuntimeToolMetadata(toolId);
+      return metadata.retry?.idempotencyScope === 'invocation'
+        ? 'invocation'
+        : null;
+    },
     getToolRetryPolicy: async (toolId) => {
       const metadata = await getRuntimeToolMetadata(toolId);
       return {

package/dist/cli/index.js

@@ -3068,7 +3068,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.151",
+  version: "0.3.152",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/cli/index.mjs

@@ -3063,7 +3063,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.151",
+  version: "0.3.152",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/index.js

@@ -864,7 +864,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.151",
+  version: "0.3.152",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/index.mjs

@@ -768,7 +768,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.151",
+  version: "0.3.152",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/release.d.mts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.151";
+    readonly version: "0.3.152";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.d.ts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.151";
+    readonly version: "0.3.152";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.js

@@ -74,7 +74,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.151",
+  version: "0.3.152",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/release.mjs

@@ -48,7 +48,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.151",
+  version: "0.3.152",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.3.151",
+  "version": "0.3.152",
   "description": "GTM data CLI and TypeScript SDK for coding agents",
   "license": "MIT",
   "homepage": "https://code.deepline.com",