deepline 0.3.184 → 0.3.185

package/dist/bundling-sources/sdk/src/release.ts

@@ -200,7 +200,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.184',
+  version: '0.3.185',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/shared_libs/play-runtime/app-runtime-api.ts

@@ -40,6 +40,8 @@ import type {
   PlayRunnerBudgetChargeResult,
   PlayRunnerRateStatePenalizeInput,
   PlayRunnerRateStateReleaseInput,
+  PlayRunnerRateStateValidateInput,
+  PlayRunnerRateStateValidateResult,
 } from './/protocol';
 import {
   PLAY_RUNTIME_TRANSPORT_ATTEMPT_HEADER,
@@ -299,6 +301,9 @@ type RuntimeApiRequest =
   | ({
       action: 'rate_state_penalize';
     } & PlayRunnerRateStatePenalizeInput)
+  | ({
+      action: 'rate_state_validate';
+    } & PlayRunnerRateStateValidateInput)
   | ({
       action: 'governor_budget_charge';
     } & PlayRunnerBudgetChargeInput)
@@ -999,6 +1004,7 @@ function isRetryableAppRuntimeAction(
     action === 'rate_state_acquire' ||
     action === 'rate_state_release' ||
     action === 'rate_state_penalize' ||
+    action === 'rate_state_validate' ||
     action === 'record_first_claim_latency' ||
     action === 'project_run_created' ||
     action === 'release_runtime_step_receipt' ||
@@ -1367,6 +1373,19 @@ export class AppRuntimeApiResponseError extends Error {
   }
 }
 
+/** Older app receivers do not understand cached-permit validation. */
+export class RateStateValidationUnavailableError extends Error {
+  readonly code = 'RATE_STATE_VALIDATE_UNAVAILABLE';
+
+  constructor(cause?: unknown) {
+    super(
+      'Shared provider rate-state validation is unavailable on the app runtime receiver; refusing to dispatch a cached provider permit.',
+      cause === undefined ? undefined : { cause },
+    );
+    this.name = 'RateStateValidationUnavailableError';
+  }
+}
+
 const APP_RUNTIME_CAPACITY_ERROR_CODES = new Set([
   'receipt_db_admission_backpressure',
   'runtime_receipt_claim_timeout',
@@ -2037,6 +2056,23 @@ export async function penalizeRateStateViaAppRuntime(
   });
 }
 
+export async function validateRateStateViaAppRuntime(
+  context: WorkerRuntimeApiContext,
+  input: PlayRunnerRateStateValidateInput,
+): Promise<PlayRunnerRateStateValidateResult> {
+  try {
+    return await postAppRuntimeApi<PlayRunnerRateStateValidateResult>(context, {
+      action: 'rate_state_validate',
+      ...input,
+    });
+  } catch (error) {
+    if (isLegacyRateStateValidationUnavailableResponse(error)) {
+      throw new RateStateValidationUnavailableError(error);
+    }
+    throw error;
+  }
+}
+
 export async function chargeGovernorBudgetViaAppRuntime(
   context: WorkerRuntimeApiContext,
   input: PlayRunnerBudgetChargeInput,
@@ -2113,6 +2149,23 @@ export function isLegacyRuntimeTrafficPolicyControlPlaneResponse(
   );
 }
 
+/**
+ * The older app route rejects an unknown action before capability evaluation.
+ * Treat only that exact response as the declared older-receiver limitation;
+ * callers must fail closed because no safe cached-permit fallback exists.
+ */
+export function isLegacyRateStateValidationUnavailableResponse(
+  error: unknown,
+): error is AppRuntimeApiResponseError {
+  return (
+    error instanceof AppRuntimeApiResponseError &&
+    error.action === 'rate_state_validate' &&
+    error.status === 403 &&
+    error.code === null &&
+    error.detail === 'Unsupported runtime action capability scope.'
+  );
+}
+
 export async function writeStagedFileFromAppRuntime(
   context: WorkerRuntimeApiContext,
   file: Pick<PlayStagedFileRef, 'storageKey'>,