deepline 0.3.30 → 0.3.32

package/dist/bundling-sources/sdk/src/release.ts

@@ -192,7 +192,7 @@ export const SDK_RELEASE = {
   // 0.3.0 introduces raw-v2: complete scrubbed provider responses are
   // available at toolResponse.rawV2 while toolResponse.raw and all declared
   // getters keep their established compatibility behavior.
-  version: '0.3.30',
+  version: '0.3.32',
   updateSummary:
     'New raw-v2 tool responses preserve complete scrubbed provider envelopes at toolResponse.rawV2, including JSON:API included resources, links, cursors, and totals. Existing toolResponse.raw and declared getters keep working unchanged.',
   contracts: {

package/dist/bundling-sources/shared_libs/play-runtime/app-runtime-api.ts

@@ -49,7 +49,10 @@ import {
   PLAY_RUNTIME_TEST_FAULT_HEADER,
   recognizedRuntimeTestFaultCount,
 } from '@shared_libs/play-runtime/test-runtime-seams';
-import { vercelProtectionBypassHeaders } from '@shared_libs/play-runtime/vercel-protection';
+import {
+  isVercelSecurityCheckpointResponse,
+  vercelProtectionBypassHeaders,
+} from '@shared_libs/play-runtime/vercel-protection';
 import type { RuntimeReceiptAction } from '@shared_libs/play-runtime/runtime-actions';
 import { RUNTIME_CAPACITY_POLICY } from '@shared_libs/play-runtime/runtime-capacity-policy';
 import { RUNTIME_RELIABILITY_POLICY } from '@shared_libs/play-runtime/runtime-reliability-policy';
@@ -478,10 +481,20 @@ function isRetryableAppRuntimeResponse(input: {
   action: RuntimeApiRequest['action'];
   status: number;
   body: string;
+  contentType: string | null;
 }): boolean {
   if (!isRetryableAppRuntimeAction(input.action)) {
     return false;
   }
+  // A WAF checkpoint is not a statement from the app about the idempotent
+  // projection. Do not make every 403 retryable: only this exact Vercel HTML
+  // response on a replay-safe action is an intermediary failure.
+  if (
+    input.action === 'append_run_events' &&
+    isVercelSecurityCheckpointResponse(input)
+  ) {
+    return true;
+  }
   // The app runtime may explicitly classify an otherwise-client-error status
   // as transient. Keep the structured delivery contract authoritative rather
   // than reducing every 4xx to permanent at the worker boundary.
@@ -1273,6 +1286,7 @@ async function postAppRuntimeApi<TResponse>(
         action: body.action,
         status: response.status,
         body: responseText,
+        contentType: response.headers.get('content-type'),
       })
     ) {
       const retryDelayMs = Math.max(
@@ -1299,6 +1313,7 @@ async function postAppRuntimeApi<TResponse>(
         action: body.action,
         status: response.status,
         body: responseText,
+        contentType: response.headers.get('content-type'),
       })
         ? 'retryable_http'
         : 'http_error',
@@ -1328,6 +1343,7 @@ async function postAppRuntimeApi<TResponse>(
         action: body.action,
         status: response.status,
         body: responseText,
+        contentType: response.headers.get('content-type'),
       }),
       detail: summarizeAppRuntimeErrorBody(responseText),
       boundaryLabel,

package/dist/bundling-sources/shared_libs/play-runtime/runner-backends/backends/daytona-lifecycle.ts

@@ -255,6 +255,7 @@ async function createOneShotDaytonaSandbox(input: {
   orgId: string;
   context: DaytonaExecutionContext;
   sandboxName: string;
+  providerOperationToken?: string;
 }): Promise<DaytonaSandbox> {
   const limits = validatePlaySandboxRuntimeLimits(
     input.context.sandboxRuntimeLimits ?? {
@@ -271,6 +272,7 @@ async function createOneShotDaytonaSandbox(input: {
     workflowId?: string;
     playId?: string;
     runId?: string;
+    operationKey?: string;
   } = {
     source: DAYTONA_PLAY_RUNNER_LABEL_SOURCE,
   };
@@ -278,6 +280,8 @@ async function createOneShotDaytonaSandbox(input: {
   if (workflowId) labels.workflowId = workflowId;
   if (playId) labels.playId = playId;
   if (runId) labels.runId = runId;
+  if (input.providerOperationToken)
+    labels.operationKey = input.providerOperationToken;
   const { networkAllowList } = resolveDaytonaSandboxNetworkPolicy({
     runtimeSchedulerSchema: input.context.runtimeSchedulerSchema ?? null,
   });
@@ -357,7 +361,9 @@ async function createRetriedOneShotDaytonaSandbox(input: {
   context: DaytonaExecutionContext;
   emitStage: DaytonaStageEmitter;
   observeCreateCall?: DaytonaCreateCallObserver;
-  reserveSandboxCapacity?: () => Promise<{ leaseId: string }>;
+  reserveSandboxCapacity?: (
+    providerAttempt: number,
+  ) => Promise<{ leaseId: string; providerOperationToken: string | null }>;
   releaseSandboxCapacity?: (leaseId: string) => Promise<void>;
   nextProviderAttempt: () => number;
   startedAt: number;
@@ -381,7 +387,7 @@ async function createRetriedOneShotDaytonaSandbox(input: {
       occurredAtMs: attemptStartedAt,
       providerAttempt: attempt,
     });
-    const reservation = await input.reserveSandboxCapacity?.();
+    const reservation = await input.reserveSandboxCapacity?.(attempt);
     let sandbox: DaytonaSandbox;
     try {
       sandbox = await createOneShotDaytonaSandbox({
@@ -389,6 +395,8 @@ async function createRetriedOneShotDaytonaSandbox(input: {
         orgId: input.orgId,
         context: input.context,
         sandboxName,
+        providerOperationToken:
+          reservation?.providerOperationToken ?? undefined,
       });
     } catch (error) {
       // A normal rejected create has no durable provider resource. A timeout
@@ -500,7 +508,9 @@ async function acquireOneShotDaytonaSandbox(input: {
   context: DaytonaExecutionContext;
   emitStage: DaytonaStageEmitter;
   observeCreateCall?: DaytonaCreateCallObserver;
-  reserveSandboxCapacity?: () => Promise<{ leaseId: string }>;
+  reserveSandboxCapacity?: (
+    providerAttempt: number,
+  ) => Promise<{ leaseId: string; providerOperationToken: string | null }>;
   releaseSandboxCapacity?: (leaseId: string) => Promise<void>;
   nextProviderAttempt: () => number;
   startedAt: number;
@@ -607,7 +617,10 @@ export function createOneShotDaytonaSandboxLifecycle(input: {
   context: DaytonaExecutionContext;
   emitStage: DaytonaStageEmitter;
   observeCreateCall?: DaytonaCreateCallObserver;
-  reserveSandboxCapacity?: () => Promise<{ leaseId: string }>;
+  reserveSandboxCapacity?: (providerAttempt: number) => Promise<{
+    leaseId: string;
+    providerOperationToken: string | null;
+  }>;
   releaseSandboxCapacity?: (leaseId: string) => Promise<void>;
   startedAt?: number;
 }): OneShotDaytonaSandboxLifecycle {

package/dist/bundling-sources/shared_libs/play-runtime/runner-backends/backends/daytona.ts

@@ -953,7 +953,8 @@ function prepareDaytonaExecution(
       emitDaytonaStage(callbacks, input.context, stage, extra),
     observeCreateCall: callbacks?.onRuntimeLifecycleEvent,
     reserveSandboxCapacity: callbacks?.reserveSandboxCapacity
-      ? () => callbacks.reserveSandboxCapacity!('daytona')
+      ? (providerAttempt) =>
+          callbacks.reserveSandboxCapacity!('daytona', providerAttempt)
       : undefined,
     releaseSandboxCapacity: callbacks?.releaseSandboxCapacity,
   });

package/dist/bundling-sources/shared_libs/play-runtime/runner-backends/types.ts

@@ -131,7 +131,8 @@ export interface PlayRunnerCallbacks {
   /** Reserve one physical-sandbox slot immediately before a provider create. */
   reserveSandboxCapacity?: (
     provider: 'daytona' | 'modal',
-  ) => Promise<{ leaseId: string }>;
+    providerAttempt?: number,
+  ) => Promise<{ leaseId: string; providerOperationToken: string | null }>;
   /** Release an unbound reservation when provider create never produced a resource. */
   releaseSandboxCapacity?: (leaseId: string) => Promise<void>;
   /**

package/dist/bundling-sources/shared_libs/play-runtime/vercel-protection.ts

@@ -1,6 +1,7 @@
 type FetchLike = typeof fetch;
 
 const vercelProtectionCookieCache = new Map<string, Promise<string | null>>();
+const VERCEL_PROTECTION_COOKIE_PREFLIGHT_TIMEOUT_MS = 5_000;
 
 async function awaitWithSignal<T>(
   promise: Promise<T>,
@@ -45,6 +46,25 @@ export function vercelProtectionBypassHeader(
   return normalized ? { 'x-vercel-protection-bypass': normalized } : {};
 }
 
+/**
+ * A Vercel Firewall checkpoint is a transport/intermediary response, not an
+ * application authorization decision. Keep this deliberately narrow: callers
+ * still decide which replay-safe internal action may retry it.
+ */
+export function isVercelSecurityCheckpointResponse(input: {
+  status: number;
+  contentType: string | null | undefined;
+  body: string;
+}): boolean {
+  if (input.status !== 403) return false;
+  if (!/^text\/html(?:\s*;|$)/i.test(input.contentType?.trim() ?? '')) {
+    return false;
+  }
+  return /<title\b[^>]*>\s*Vercel Security Checkpoint\s*<\/title>/i.test(
+    input.body,
+  );
+}
+
 function setCookieHeaders(headers: Headers): string[] {
   const getter = (headers as Headers & { getSetCookie?: () => string[] })
     .getSetCookie;
@@ -75,14 +95,27 @@ export async function resolveVercelProtectionBypassCookie(input: {
 
   const cacheKey = `${baseUrl}\n${token}`;
   const cached = vercelProtectionCookieCache.get(cacheKey);
-  if (cached) return await awaitWithSignal(cached, input.signal);
+  if (cached) {
+    try {
+      return await awaitWithSignal(cached, input.signal);
+    } catch (error) {
+      if (input.signal?.aborted) throw input.signal.reason ?? error;
+      // A concurrent caller must retain the same header-only fallback as the
+      // caller that created the shared preflight promise.
+      return null;
+    }
+  }
 
   const promise = (async () => {
     const url = new URL(`${baseUrl}/api/v2/health`);
     addVercelProtectionBypassSearchParams(url, token);
+    // Keep the cache independent from an individual outbox lease. A caller
+    // may stop waiting, but the shared bootstrap is always bounded and either
+    // supplies a reusable cookie or evicts itself for a later retry.
     const response = await (input.fetchImpl ?? fetch)(url.toString(), {
       headers: { 'x-vercel-protection-bypass': token },
-    }).catch(() => null);
+      signal: AbortSignal.timeout(VERCEL_PROTECTION_COOKIE_PREFLIGHT_TIMEOUT_MS),
+    });
     return response ? cookieHeaderFromSetCookie(response.headers) : null;
   })();
   vercelProtectionCookieCache.set(cacheKey, promise);
@@ -91,7 +124,15 @@ export async function resolveVercelProtectionBypassCookie(input: {
       vercelProtectionCookieCache.delete(cacheKey);
     }
   });
-  return await awaitWithSignal(promise, input.signal);
+  try {
+    return await awaitWithSignal(promise, input.signal);
+  } catch (error) {
+    if (input.signal?.aborted) throw input.signal.reason ?? error;
+    // The header-only bypass remains useful when cookie bootstrap is briefly
+    // unavailable; do not turn a bounded preflight failure into a permanent
+    // delivery failure. The rejection handler above evicts this cache entry.
+    return null;
+  }
 }
 
 export async function vercelProtectionBypassHeaders(input: {

package/dist/cli/index.js

@@ -1042,7 +1042,7 @@ var SDK_RELEASE = {
   // 0.3.0 introduces raw-v2: complete scrubbed provider responses are
   // available at toolResponse.rawV2 while toolResponse.raw and all declared
   // getters keep their established compatibility behavior.
-  version: "0.3.30",
+  version: "0.3.32",
   updateSummary: "New raw-v2 tool responses preserve complete scrubbed provider envelopes at toolResponse.rawV2, including JSON:API included resources, links, cursors, and totals. Existing toolResponse.raw and declared getters keep working unchanged.",
   contracts: {
     api: {
@@ -34243,9 +34243,10 @@ Notes:
   for a patch-style change.
   Repeating the exact saved definition resumes an incomplete deploy cleanup:
   Deepline keeps the replacement, removes only the stored previous binding after
-  provider confirmation, and never creates or charges another monitor. Deepline
-  also retries eligible incomplete deploy cleanups automatically in bounded
-  background passes; no separate repair command is required.
+  provider confirmation, and never creates or charges another monitor. There is
+  no separate repair command or retry queue: rerun the same deploy/update.
+  Scheduled reconciliation can also finish that exact saved cleanup; it never
+  creates another monitor.
   For a bounded urgent Deepline Native preview, set
   controls.execution_type="priority". Deepline injects the provider custom
   field and enforces a ten-slot per-org cap; do not use it for regular or bulk

package/dist/cli/index.mjs

@@ -1028,7 +1028,7 @@ var SDK_RELEASE = {
   // 0.3.0 introduces raw-v2: complete scrubbed provider responses are
   // available at toolResponse.rawV2 while toolResponse.raw and all declared
   // getters keep their established compatibility behavior.
-  version: "0.3.30",
+  version: "0.3.32",
   updateSummary: "New raw-v2 tool responses preserve complete scrubbed provider envelopes at toolResponse.rawV2, including JSON:API included resources, links, cursors, and totals. Existing toolResponse.raw and declared getters keep working unchanged.",
   contracts: {
     api: {
@@ -34313,9 +34313,10 @@ Notes:
   for a patch-style change.
   Repeating the exact saved definition resumes an incomplete deploy cleanup:
   Deepline keeps the replacement, removes only the stored previous binding after
-  provider confirmation, and never creates or charges another monitor. Deepline
-  also retries eligible incomplete deploy cleanups automatically in bounded
-  background passes; no separate repair command is required.
+  provider confirmation, and never creates or charges another monitor. There is
+  no separate repair command or retry queue: rerun the same deploy/update.
+  Scheduled reconciliation can also finish that exact saved cleanup; it never
+  creates another monitor.
   For a bounded urgent Deepline Native preview, set
   controls.execution_type="priority". Deepline injects the provider custom
   field and enforces a ten-slot per-org cap; do not use it for regular or bulk

package/dist/index.js

@@ -778,7 +778,7 @@ var SDK_RELEASE = {
   // 0.3.0 introduces raw-v2: complete scrubbed provider responses are
   // available at toolResponse.rawV2 while toolResponse.raw and all declared
   // getters keep their established compatibility behavior.
-  version: "0.3.30",
+  version: "0.3.32",
   updateSummary: "New raw-v2 tool responses preserve complete scrubbed provider envelopes at toolResponse.rawV2, including JSON:API included resources, links, cursors, and totals. Existing toolResponse.raw and declared getters keep working unchanged.",
   contracts: {
     api: {

package/dist/index.mjs

@@ -701,7 +701,7 @@ var SDK_RELEASE = {
   // 0.3.0 introduces raw-v2: complete scrubbed provider responses are
   // available at toolResponse.rawV2 while toolResponse.raw and all declared
   // getters keep their established compatibility behavior.
-  version: "0.3.30",
+  version: "0.3.32",
   updateSummary: "New raw-v2 tool responses preserve complete scrubbed provider envelopes at toolResponse.rawV2, including JSON:API included resources, links, cursors, and totals. Existing toolResponse.raw and declared getters keep working unchanged.",
   contracts: {
     api: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.3.30",
+  "version": "0.3.32",
   "description": "GTM data CLI and TypeScript SDK for coding agents",
   "license": "MIT",
   "homepage": "https://code.deepline.com",