deepline 0.3.174 → 0.3.176

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres.ts

@@ -11852,15 +11852,26 @@ export async function cancelPostgresSchedulerRun(
       absurdTaskId: string;
       engineTaskTable: string | null;
     };
+    /**
+     * Optional control-plane ownership for the pending causal head. The
+     * caller resumes this same lease after commit to make cancellation visible
+     * synchronously in the canonical Run Ledger.
+     */
+    outboxLease?: { leaseOwner: string; leaseSeconds: number };
   },
   options?: Pick<PostgresSchedulerOptions, 'schema'>,
 ): Promise<boolean> {
   const reason = input.reason?.trim() || 'Cancelled.';
+  const outboxLeaseOwner = input.outboxLease?.leaseOwner.trim() || null;
+  const outboxLeaseSeconds = Math.max(
+    5,
+    Math.min(300, Math.floor(input.outboxLease?.leaseSeconds ?? 15)),
+  );
   const strandedFence = input.onlyIfStrandedPreExecution;
   const strandedEligibility = strandedFence
     ? `AND target.status = 'queued'
-       AND target.launch_json->>'absurdReleaseId' = $6
-       AND target.absurd_task_id = $7
+       AND target.launch_json->>'absurdReleaseId' = $8
+       AND target.absurd_task_id = $9
        AND NOT EXISTS (
          SELECT 1 FROM ${tableName('attempts', options)} AS attempt
          WHERE attempt.run_id = target.run_id
@@ -11991,16 +12002,46 @@ export async function cancelPostgresSchedulerRun(
           AND NULLIF(resource->>'sandboxId', '') IS NOT NULL
         ON CONFLICT (provider, sandbox_id, routing_domain_key) DO NOTHING
       ),
+      cancellation_outbox_head AS MATERIALIZED (
+        SELECT pending.event_id
+        FROM ${tableName('outbox', options)} AS pending
+        JOIN cancelled_run ON cancelled_run.run_id = pending.run_id
+        WHERE pending.delivered_at IS NULL
+          AND pending.failed_at IS NULL
+        ORDER BY ${runLedgerOrderSql('pending')}
+        LIMIT 1
+      ),
+      cancellation_outbox_lease AS (
+        UPDATE ${tableName('outbox', options)} AS pending
+        SET lease_owner = $6::text,
+            lease_expires_at = now() + make_interval(secs => $7::integer),
+            next_attempt_at = NULL
+        WHERE $6::text IS NOT NULL
+          AND pending.event_id IN (SELECT event_id FROM cancellation_outbox_head)
+        RETURNING pending.event_id
+      ),
       terminal_outbox AS (
         INSERT INTO ${tableName('outbox', options)} (
-          event_id, run_id, event_type, payload_json, created_at
+          event_id, run_id, event_type, payload_json, created_at,
+          next_attempt_at, lease_owner, lease_expires_at
         )
         SELECT
           'run-terminal:' || run_id,
           cancelled_run.run_id,
           'run.cancelled',
           jsonb_build_object('error', $5::text),
-          ${causalOutboxCreatedAt('cancelled_run.run_id', options)}
+          ${causalOutboxCreatedAt('cancelled_run.run_id', options)},
+          NULL,
+          CASE
+            WHEN EXISTS (SELECT 1 FROM cancellation_outbox_head) THEN NULL
+            ELSE $6::text
+          END,
+          CASE
+            WHEN $6::text IS NULL
+              OR EXISTS (SELECT 1 FROM cancellation_outbox_head)
+            THEN NULL
+            ELSE now() + make_interval(secs => $7::integer)
+          END
         FROM cancelled_run
         ON CONFLICT (event_id) DO NOTHING
       ),
@@ -12017,11 +12058,39 @@ export async function cancelPostgresSchedulerRun(
       postgresSchedulerNotifyChannel('terminal', options),
       JSON.stringify({ runId: input.runId, status: 'cancelled' }),
       reason,
+      outboxLeaseOwner,
+      outboxLeaseSeconds,
       ...(strandedFence
         ? [strandedFence.releaseId, strandedFence.absurdTaskId]
         : []),
     ],
   );
+  if (cancelled.rows.length === 0 && outboxLeaseOwner) {
+    // A competing terminal writer may win while this UPDATE waits on the run
+    // row. The next statement gets a fresh READ COMMITTED snapshot. Adopt its
+    // pending causal prefix before this enclosing cancellation transaction
+    // commits so the request can still project the winning terminal state
+    // without waiting for a background lease.
+    await client.query(
+      `UPDATE ${tableName('outbox', options)} AS pending
+          SET lease_owner = $2,
+              lease_expires_at = now() + make_interval(secs => $3::integer),
+              next_attempt_at = NULL
+        WHERE pending.event_id = (
+          SELECT candidate.event_id
+          FROM ${tableName('outbox', options)} AS candidate
+          JOIN ${tableName('runs', options)} AS terminal_run
+            ON terminal_run.run_id = candidate.run_id
+          WHERE candidate.run_id = $1
+            AND candidate.delivered_at IS NULL
+            AND candidate.failed_at IS NULL
+            AND terminal_run.status IN ('completed', 'failed', 'cancelled')
+          ORDER BY ${runLedgerOrderSql('candidate')}
+          LIMIT 1
+        )`,
+      [input.runId, outboxLeaseOwner, outboxLeaseSeconds],
+    );
+  }
   return cancelled.rows.length > 0;
 }
 
@@ -15369,7 +15438,12 @@ export async function readPendingPostgresSchedulerOutboxEvents(
           AND candidate.failed_at IS NULL
           AND coalesce(candidate.next_attempt_at, candidate.created_at) <= now()
           AND ($2::text IS NULL OR candidate.run_id = $2)
-          AND ($3::text IS NULL OR candidate.lease_expires_at IS NULL OR candidate.lease_expires_at <= now())
+          AND (
+            $3::text IS NULL
+            OR candidate.lease_owner = $3::text
+            OR candidate.lease_expires_at IS NULL
+            OR candidate.lease_expires_at <= now()
+          )
           -- A producer transaction may commit an older timestamp after a
           -- delivery has started. Ownership covers the run, not just the
           -- current oldest row: that late predecessor must wait as well.
@@ -15379,6 +15453,7 @@ export async function readPendingPostgresSchedulerOutboxEvents(
               AND active.delivered_at IS NULL
               AND active.lease_owner IS NOT NULL
               AND active.lease_expires_at > now()
+              AND active.lease_owner IS DISTINCT FROM $3::text
           )
           -- Competing projectors acquire one run through its oldest event.
           -- Locking this head prevents another projector from splitting the
@@ -15417,7 +15492,12 @@ export async function readPendingPostgresSchedulerOutboxEvents(
           -- its receipt stable independently of the recovery caller's limit.
           AND (outbox.event_type <> 'run.events' OR outbox.event_id = head.event_id)
           AND coalesce(outbox.next_attempt_at, outbox.created_at) <= now()
-          AND ($3::text IS NULL OR outbox.lease_expires_at IS NULL OR outbox.lease_expires_at <= now())
+          AND (
+            $3::text IS NULL
+            OR outbox.lease_owner = $3::text
+            OR outbox.lease_expires_at IS NULL
+            OR outbox.lease_expires_at <= now()
+          )
           -- A started terminal batch is deliberately stable across a retry.
           -- Do not enlarge it with a later event before acknowledgement: the
           -- runtime can replay the old idempotent append, but it cannot prove
@@ -15460,6 +15540,7 @@ export async function readPendingPostgresSchedulerOutboxEvents(
                   $3::text IS NOT NULL
                   AND predecessor.lease_expires_at IS NOT NULL
                   AND predecessor.lease_expires_at > now()
+                  AND predecessor.lease_owner IS DISTINCT FROM $3::text
                 )
               )
           )
@@ -16348,6 +16429,30 @@ export async function listPostgresSchedulerOutboxMaterializationPlans(
  */
 export type RunLedgerOutboxTokenAuthority = 'local_mint' | 'gateway';
 
+const POSTGRES_SCHEDULER_CANCELLATION_OUTBOX_LEASE_SECONDS = 15;
+
+/**
+ * Stable lease identity shared by the atomic scheduler cancellation and the
+ * app-side terminal projector. Cancellation can therefore fence a stale or
+ * slow background delivery inside the terminal transaction, then resume from
+ * that exact head immediately without waiting for its old lease to age.
+ */
+export function postgresSchedulerCancellationOutboxLease(runId: string): {
+  leaseOwner: string;
+  leaseSeconds: number;
+} {
+  const normalizedRunId = runId.trim();
+  if (!normalizedRunId) {
+    throw new Error('Cancellation outbox lease requires a run id.');
+  }
+  return {
+    leaseOwner: `run-ledger-cancel:${createHash('sha256')
+      .update(normalizedRunId)
+      .digest('hex')}`,
+    leaseSeconds: POSTGRES_SCHEDULER_CANCELLATION_OUTBOX_LEASE_SECONDS,
+  };
+}
+
 export type RunLedgerOutboxDispatchInput = {
   runtimeApi?: WorkerRuntimeApiContext | null;
   limit?: number;
@@ -16564,10 +16669,11 @@ export async function dispatchRunLedgerOutboxToLedgerBatchOnceWithClientScope(
                   AND active.delivered_at IS NULL
                   AND active.lease_owner IS NOT NULL
                   AND active.lease_expires_at > now()
+                  AND active.lease_owner IS DISTINCT FROM $2::text
               )
             FOR UPDATE OF runs SKIP LOCKED
           `,
-            [targetRunId],
+            [targetRunId, leaseOwner],
           )
         : await client.query<{ run_id: string }>(`
             WITH heads AS MATERIALIZED (

package/dist/cli/index.js

@@ -3051,7 +3051,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.174",
+  version: "0.3.176",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -6425,6 +6425,16 @@ function resolveTheirstackClientTimeoutMs(endpointId, payload) {
   return usesExtendedTheirstackJobSearchBudget(endpointId, payload) ? THEIRSTACK_SLOW_JOB_SEARCH_CLIENT_TIMEOUT_MS : null;
 }
 
+// ../integration-contracts/waterfall/execution-policy.ts
+var WATERFALL_PROSPECTOR_CLIENT_TIMEOUT_MS = 18e4;
+var WATERFALL_PROSPECTOR_LAUNCHER_TOOL_IDS = /* @__PURE__ */ new Set([
+  "prospector",
+  "deepline_native_prospector"
+]);
+function resolveWaterfallClientTimeoutMs(toolId) {
+  return WATERFALL_PROSPECTOR_LAUNCHER_TOOL_IDS.has(toolId.trim().toLowerCase()) ? WATERFALL_PROSPECTOR_CLIENT_TIMEOUT_MS : null;
+}
+
 // ../integration-contracts/bettercontact/execution-policy.ts
 var BETTERCONTACT_LAUNCHER_CLIENT_TIMEOUT_MS = 12e4;
 var BETTERCONTACT_LAUNCHER_TOOL_IDS = /* @__PURE__ */ new Set([
@@ -6835,6 +6845,8 @@ function resolveToolExecuteTimeoutMs(toolId, input2) {
     input2
   );
   if (theirstackTimeoutMs !== null) return theirstackTimeoutMs;
+  const waterfallTimeoutMs = resolveWaterfallClientTimeoutMs(normalized);
+  if (waterfallTimeoutMs !== null) return waterfallTimeoutMs;
   if (usesExtendedBetterContactLauncherBudget(normalized)) {
     return BETTERCONTACT_LAUNCHER_CLIENT_TIMEOUT_MS;
   }

package/dist/cli/index.mjs

@@ -3046,7 +3046,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.174",
+  version: "0.3.176",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -6420,6 +6420,16 @@ function resolveTheirstackClientTimeoutMs(endpointId, payload) {
   return usesExtendedTheirstackJobSearchBudget(endpointId, payload) ? THEIRSTACK_SLOW_JOB_SEARCH_CLIENT_TIMEOUT_MS : null;
 }
 
+// ../integration-contracts/waterfall/execution-policy.ts
+var WATERFALL_PROSPECTOR_CLIENT_TIMEOUT_MS = 18e4;
+var WATERFALL_PROSPECTOR_LAUNCHER_TOOL_IDS = /* @__PURE__ */ new Set([
+  "prospector",
+  "deepline_native_prospector"
+]);
+function resolveWaterfallClientTimeoutMs(toolId) {
+  return WATERFALL_PROSPECTOR_LAUNCHER_TOOL_IDS.has(toolId.trim().toLowerCase()) ? WATERFALL_PROSPECTOR_CLIENT_TIMEOUT_MS : null;
+}
+
 // ../integration-contracts/bettercontact/execution-policy.ts
 var BETTERCONTACT_LAUNCHER_CLIENT_TIMEOUT_MS = 12e4;
 var BETTERCONTACT_LAUNCHER_TOOL_IDS = /* @__PURE__ */ new Set([
@@ -6830,6 +6840,8 @@ function resolveToolExecuteTimeoutMs(toolId, input2) {
     input2
   );
   if (theirstackTimeoutMs !== null) return theirstackTimeoutMs;
+  const waterfallTimeoutMs = resolveWaterfallClientTimeoutMs(normalized);
+  if (waterfallTimeoutMs !== null) return waterfallTimeoutMs;
   if (usesExtendedBetterContactLauncherBudget(normalized)) {
     return BETTERCONTACT_LAUNCHER_CLIENT_TIMEOUT_MS;
   }

package/dist/index.js

@@ -864,7 +864,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.174",
+  version: "0.3.176",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -4095,6 +4095,16 @@ function resolveTheirstackClientTimeoutMs(endpointId, payload) {
   return usesExtendedTheirstackJobSearchBudget(endpointId, payload) ? THEIRSTACK_SLOW_JOB_SEARCH_CLIENT_TIMEOUT_MS : null;
 }
 
+// ../integration-contracts/waterfall/execution-policy.ts
+var WATERFALL_PROSPECTOR_CLIENT_TIMEOUT_MS = 18e4;
+var WATERFALL_PROSPECTOR_LAUNCHER_TOOL_IDS = /* @__PURE__ */ new Set([
+  "prospector",
+  "deepline_native_prospector"
+]);
+function resolveWaterfallClientTimeoutMs(toolId) {
+  return WATERFALL_PROSPECTOR_LAUNCHER_TOOL_IDS.has(toolId.trim().toLowerCase()) ? WATERFALL_PROSPECTOR_CLIENT_TIMEOUT_MS : null;
+}
+
 // ../integration-contracts/bettercontact/execution-policy.ts
 var BETTERCONTACT_LAUNCHER_CLIENT_TIMEOUT_MS = 12e4;
 var BETTERCONTACT_LAUNCHER_TOOL_IDS = /* @__PURE__ */ new Set([
@@ -4505,6 +4515,8 @@ function resolveToolExecuteTimeoutMs(toolId, input) {
     input
   );
   if (theirstackTimeoutMs !== null) return theirstackTimeoutMs;
+  const waterfallTimeoutMs = resolveWaterfallClientTimeoutMs(normalized);
+  if (waterfallTimeoutMs !== null) return waterfallTimeoutMs;
   if (usesExtendedBetterContactLauncherBudget(normalized)) {
     return BETTERCONTACT_LAUNCHER_CLIENT_TIMEOUT_MS;
   }

package/dist/index.mjs

@@ -768,7 +768,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.174",
+  version: "0.3.176",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -3999,6 +3999,16 @@ function resolveTheirstackClientTimeoutMs(endpointId, payload) {
   return usesExtendedTheirstackJobSearchBudget(endpointId, payload) ? THEIRSTACK_SLOW_JOB_SEARCH_CLIENT_TIMEOUT_MS : null;
 }
 
+// ../integration-contracts/waterfall/execution-policy.ts
+var WATERFALL_PROSPECTOR_CLIENT_TIMEOUT_MS = 18e4;
+var WATERFALL_PROSPECTOR_LAUNCHER_TOOL_IDS = /* @__PURE__ */ new Set([
+  "prospector",
+  "deepline_native_prospector"
+]);
+function resolveWaterfallClientTimeoutMs(toolId) {
+  return WATERFALL_PROSPECTOR_LAUNCHER_TOOL_IDS.has(toolId.trim().toLowerCase()) ? WATERFALL_PROSPECTOR_CLIENT_TIMEOUT_MS : null;
+}
+
 // ../integration-contracts/bettercontact/execution-policy.ts
 var BETTERCONTACT_LAUNCHER_CLIENT_TIMEOUT_MS = 12e4;
 var BETTERCONTACT_LAUNCHER_TOOL_IDS = /* @__PURE__ */ new Set([
@@ -4409,6 +4419,8 @@ function resolveToolExecuteTimeoutMs(toolId, input) {
     input
   );
   if (theirstackTimeoutMs !== null) return theirstackTimeoutMs;
+  const waterfallTimeoutMs = resolveWaterfallClientTimeoutMs(normalized);
+  if (waterfallTimeoutMs !== null) return waterfallTimeoutMs;
   if (usesExtendedBetterContactLauncherBudget(normalized)) {
     return BETTERCONTACT_LAUNCHER_CLIENT_TIMEOUT_MS;
   }

package/dist/install-integrity.json

@@ -32,6 +32,7 @@
     "dist/bundling-sources/shared_libs/integration-contracts/monitor-input-contract.ts",
     "dist/bundling-sources/shared_libs/integration-contracts/README.md",
     "dist/bundling-sources/shared_libs/integration-contracts/theirstack/execution-policy.ts",
+    "dist/bundling-sources/shared_libs/integration-contracts/waterfall/execution-policy.ts",
     "dist/bundling-sources/shared_libs/monitors/analytics-install-guides.ts",
     "dist/bundling-sources/shared_libs/monitors/analytics-public.ts",
     "dist/bundling-sources/shared_libs/monitors/billing/charges.ts",
@@ -114,6 +115,7 @@
     "dist/bundling-sources/shared_libs/play-data-plane/index.ts",
     "dist/bundling-sources/shared_libs/play-data-plane/neon-constants.ts",
     "dist/bundling-sources/shared_libs/play-data-plane/r2.ts",
+    "dist/bundling-sources/shared_libs/play-data-plane/runtime-sheet-orm.ts",
     "dist/bundling-sources/shared_libs/play-data-plane/runtime-sheet-storage-contract.ts",
     "dist/bundling-sources/shared_libs/play-data-plane/sheet-contract.ts",
     "dist/bundling-sources/shared_libs/play-runtime/activity-observation.ts",

package/dist/release.d.mts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.174";
+    readonly version: "0.3.176";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.d.ts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.174";
+    readonly version: "0.3.176";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.js

@@ -74,7 +74,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.174",
+  version: "0.3.176",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/release.mjs

@@ -48,7 +48,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.174",
+  version: "0.3.176",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.3.174",
+  "version": "0.3.176",
   "description": "GTM data CLI and TypeScript SDK for coding agents",
   "license": "MIT",
   "homepage": "https://code.deepline.com",