deepline 0.3.244 → 0.3.245

package/dist/bundling-sources/sdk/src/release.ts

@@ -200,7 +200,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.244',
+  version: '0.3.245',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/shared_libs/play-runtime/runner-app/runtime-terminal-push.ts

@@ -10,9 +10,7 @@ import {
   jsonByteLength,
   jsonByteLengthUpTo,
 } from '../output-size-limits';
-import {
-  PLAY_RUNTIME_TRANSPORT_ATTEMPT_HEADER,
-} from '../runtime-contract';
+import { PLAY_RUNTIME_TRANSPORT_ATTEMPT_HEADER } from '../runtime-contract';
 import {
   createRunnerGatewayTransportAttemptId,
   runnerGatewayTransportErrorCode,
@@ -595,8 +593,14 @@ export async function pushRunnerTerminal(
             : 'redirect',
         { status: response.status },
       );
-      // 4xx (scope/fence rejections) are deterministic — retrying cannot help.
-      if (response.status >= 400 && response.status < 500) {
+      // Gateway queue admission can shed this first-write-wins terminal with
+      // 429 before acquiring a database client. Retry the same terminal fact
+      // within the existing attempt budget; scope/fence rejections stay final.
+      if (
+        response.status >= 400 &&
+        response.status < 500 &&
+        response.status !== 429
+      ) {
         warn('terminal_push_rejected', {
           runId: options.runId,
           status: response.status,
@@ -606,9 +610,12 @@ export async function pushRunnerTerminal(
       }
     } catch (error) {
       lastError = error instanceof Error ? error.message : String(error);
-      reportTransport('network_error', {
-        errorCode: runnerGatewayTransportErrorCode(error),
-      });
+      reportTransport(
+        requestController.signal.aborted ? 'timeout' : 'network_error',
+        {
+          errorCode: runnerGatewayTransportErrorCode(error),
+        },
+      );
     } finally {
       clearTimeout(requestTimeout);
     }

package/dist/bundling-sources/shared_libs/play-runtime/runner-backends/backends/daytona-payload-transport.ts

@@ -488,10 +488,15 @@ async function main() {
     checkpointBytes: 0,
     tableNamespace: null,
   });
+  const requestBody = JSON.stringify({
+    action: 'runner_terminal',
+    runId: push.runId,
+    result,
+  });
   for (let attempt = 1; attempt <= 3; attempt += 1) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 10000);
     try {
-      const controller = new AbortController();
-      const timer = setTimeout(() => controller.abort(), 10000);
       const response = await fetch(gateway + '/api/v2/plays/runtime', {
         method: 'POST',
         headers: {
@@ -501,28 +506,32 @@ async function main() {
             ? { 'fly-force-instance-id': preferredGatewayMachineId }
             : {}),
         },
-        body: JSON.stringify({
-          action: 'runner_terminal',
-          runId: push.runId,
-          result,
-        }),
+        body: requestBody,
         signal: controller.signal,
         redirect: 'manual',
       });
-      clearTimeout(timer);
+      // Keep the HTTP deadline through body consumption so retries do not
+      // leave an unread socket behind. The status already acknowledges the
+      // durable terminal even if its diagnostic response body is interrupted.
+      await response.text().catch(() => '');
       if (response.ok) {
         writeDiagnostic('[crash-terminal] pushed status=' + result.status);
         return;
       }
       writeDiagnostic('[crash-terminal] rejected http=' + response.status);
-      // Deterministic scope/fence rejections cannot succeed on retry.
-      if (response.status >= 400 && response.status < 500) return;
+      // A 429 is gateway admission pressure, not a scope/fence rejection.
+      // Replaying this terminal fact never replays customer execution.
+      if (response.status >= 400 && response.status < 500 && response.status !== 429) return;
     } catch (error) {
       writeDiagnostic(
         '[crash-terminal] transport ' + (error && error.message ? error.message : String(error)),
       );
+    } finally {
+      clearTimeout(timer);
+    }
+    if (attempt < 3) {
+      await new Promise((resolveDelay) => setTimeout(resolveDelay, attempt * 1000));
     }
-    await new Promise((resolveDelay) => setTimeout(resolveDelay, attempt * 1000));
   }
   writeDiagnostic('[crash-terminal] exhausted retries');
 }

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres-pool.ts

@@ -937,6 +937,7 @@ export async function withRuntimeSchedulerClient<T>(
     throw error;
   }
   const admissionWaitMs = performance.now() - admissionStartedAt;
+  let unsampledAdmissionWaitMs = admissionWaitMs;
   let lastError: unknown = null;
   try {
     throwIfSchedulerAborted(signal);
@@ -996,7 +997,14 @@ export async function withRuntimeSchedulerClient<T>(
           entry.stats.peakTotalClients,
           entry.pool.totalCount,
         );
-        pushSample(entry.stats.acquireWait, acquireWaitMs);
+        // The admission gate owns the local queue before pg.Pool sees this
+        // checkout. Include that wait once, on the operation's first acquired
+        // client; retries retain the permit and only add their own connect wait.
+        pushSample(
+          entry.stats.acquireWait,
+          unsampledAdmissionWaitMs + acquireWaitMs,
+        );
+        unsampledAdmissionWaitMs = 0;
 
         // A checked-out pg client emits 'error' (not via the pool) when its TCP
         // connection dies while idle — e.g. a worker holding a client across a
@@ -1255,6 +1263,7 @@ export type RuntimeSchedulerPoolStats = {
   idleCount: number;
   waitingCount: number;
   acquires: number;
+  /** Successful checkout latency, including local admission once per operation. */
   acquireWaitP50Ms: number | null;
   acquireWaitP95Ms: number | null;
   saturationRejections: number;
@@ -1388,6 +1397,8 @@ export async function probeRuntimeSchedulerDirectSession(input: {
     connectionString: deriveDirectDatabaseUrl(input.url),
     application_name:
       input.applicationName ?? 'deepline-runtime-direct-session-preflight',
+    connectionTimeoutMillis: RUNTIME_SCHEDULER_POOL_DEFAULTS.connectTimeoutMs,
+    query_timeout: RUNTIME_SCHEDULER_POOL_DEFAULTS.queryTimeoutMs,
   });
   try {
     await client.connect();
@@ -1648,6 +1659,8 @@ export function createPgNotifyHub(input: {
     const next = (input.createClient ?? ((config) => new Client(config)))({
       connectionString: directUrl,
       application_name: input.applicationName ?? 'deepline-runtime-notify-hub',
+      connectionTimeoutMillis: RUNTIME_SCHEDULER_POOL_DEFAULTS.connectTimeoutMs,
+      query_timeout: RUNTIME_SCHEDULER_POOL_DEFAULTS.queryTimeoutMs,
     });
     try {
       await next.connect();

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres.ts

@@ -8453,6 +8453,80 @@ export async function readPostgresSchedulerLaunchForAttemptLease(
   return row ? parseLaunchJson(row.launch_json) : null;
 }
 
+/** Identity, signing authority, and origins needed to issue an attempt token. */
+const POSTGRES_SCHEDULER_ATTEMPT_AUTHORITY_FIELDS = [
+  'runId',
+  'orgId',
+  'playName',
+  'userId',
+  'userEmail',
+  'baseUrl',
+  'runtimeApiBaseUrl',
+  'runtimeTokenOrigin',
+  'runtimeBackend',
+  'runtimeAuthority',
+] as const;
+
+export type PostgresSchedulerAttemptAuthority = Pick<
+  PlaySchedulerSubmitInput,
+  (typeof POSTGRES_SCHEDULER_ATTEMPT_AUTHORITY_FIELDS)[number]
+>;
+
+/**
+ * Prove the same attempt lease as the full execution reader, returning only
+ * the token issuer's authority. Input, graph, and artifact bytes never cross
+ * this SQL seam or occupy a Vercel checkout during JSON decoding. The authority
+ * descriptor is retained intact for the existing validator and deploy skew;
+ * its admitted secrets and fixture configuration are not execution payloads.
+ */
+export async function readPostgresSchedulerAttemptAuthorityForLease(
+  client: PostgresSchedulerQueryClient,
+  input: { runId: string; attempt: number; leaseToken: string },
+  options?: Pick<PostgresSchedulerOptions, 'schema'>,
+): Promise<PostgresSchedulerAttemptAuthority | null> {
+  const fields = POSTGRES_SCHEDULER_ATTEMPT_AUTHORITY_FIELDS;
+  // Keep JSON types intact. A text record column would coerce malformed launch
+  // scalars into strings, bypassing the full reader's required-field checks.
+  const columns = [...fields, 'playId', 'executorToken']
+    .map((field) => `${quoteIdent(field)} jsonb`)
+    .join(', ');
+  const result = await client.query<
+    PostgresSchedulerAttemptAuthority & {
+      launch_required_fields_valid: boolean;
+    }
+  >(
+    `
+      SELECT ${fields.map((field) => `launch.${quoteIdent(field)}`).join(', ')},
+             ${['runId', 'playId', 'playName', 'executorToken', 'baseUrl']
+               .map(
+                 (field) =>
+                   `jsonb_typeof(launch.${quoteIdent(field)}) = 'string'`,
+               )
+               .join(' AND ')} AS launch_required_fields_valid
+      FROM ${tableName('runs', options)} AS runs
+      JOIN ${tableName('attempts', options)} AS attempts
+        ON attempts.run_id = runs.run_id
+      CROSS JOIN LATERAL jsonb_to_record(runs.launch_json) AS launch(${columns})
+      WHERE runs.run_id = $1
+        AND runs.status IN ('queued', 'running', 'waiting')
+        AND attempts.attempt = $2
+        AND attempts.lease_token = $3
+        AND attempts.status IN ('claimed', 'running', 'waiting')
+      LIMIT 1
+    `,
+    [input.runId, input.attempt, input.leaseToken],
+  );
+  const row = result.rows[0];
+  if (!row) return null;
+  const { launch_required_fields_valid, ...authority } = row;
+  if (launch_required_fields_valid !== true) {
+    throw new Error(
+      'Postgres scheduler launch_json is missing required fields.',
+    );
+  }
+  return authority;
+}
+
 /**
  * Absurd scheduler backend: persist the vendored engine's task id on the run
  * row after `spawn`. Idempotent (last write wins); a re-submit under the same

package/dist/cli/index.js

@@ -3473,7 +3473,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.244",
+  version: "0.3.245",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/cli/index.mjs

@@ -3468,7 +3468,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.244",
+  version: "0.3.245",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/index.js

@@ -1286,7 +1286,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.244",
+  version: "0.3.245",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/index.mjs

@@ -1190,7 +1190,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.244",
+  version: "0.3.245",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/release.d.mts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.244";
+    readonly version: "0.3.245";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.d.ts

@@ -149,7 +149,7 @@ type SdkRelease = {
     supportPolicy: SdkSupportPolicy;
 };
 declare const SDK_RELEASE: {
-    readonly version: "0.3.244";
+    readonly version: "0.3.245";
     readonly updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.";
     readonly packageCapabilities: {
         readonly updatePreferences: 1;

package/dist/release.js

@@ -74,7 +74,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.244",
+  version: "0.3.245",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/release.mjs

@@ -48,7 +48,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.244",
+  version: "0.3.245",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.3.244",
+  "version": "0.3.245",
   "description": "GTM data CLI and TypeScript SDK for coding agents",
   "license": "MIT",
   "homepage": "https://code.deepline.com",