deepline 0.3.310 → 0.3.311

package/dist/bundling-sources/sdk/src/release.ts

@@ -200,7 +200,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.310',
+  version: '0.3.311',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/shared_libs/play-runtime/ledger-safe-payload.ts

@@ -95,8 +95,12 @@ export function sanitizeLedgerLogLines(value: unknown): string[] {
   return value
     .filter((line): line is string => typeof line === 'string')
     .slice(0, MAX_LEDGER_LOG_LINES_PER_EVENT)
-    .map((line) =>
-      boundRunLogLine(ledgerIngressRedactor.redactString(line.trim())),
-    )
+    .map((line) => sanitizeLedgerLogLine(line))
     .filter(Boolean);
 }
+
+/** Runtime measurement records use the terminal transport's existing byte budget. */
+export function sanitizeLedgerLogLine(line: string, bounded = true): string {
+  const redacted = ledgerIngressRedactor.redactString(line.trim());
+  return bounded ? boundRunLogLine(redacted) : redacted;
+}

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres.ts

@@ -4,6 +4,7 @@ import {
   type RunLedgerDispatchLaunch,
 } from './run-ledger-dispatch-authority';
 import { normalizeRunLogIds } from '../run-log-buffer';
+import { sanitizeLedgerLogLine } from '../ledger-safe-payload';
 import {
   retainedPlayPipelineFields,
   hydrateRetainedPlayPipelines,
@@ -10926,7 +10927,9 @@ export async function directCompletePostgresSchedulerRunnerTerminal(
       stringifyPostgresJson(runtimeTiming ?? null),
       stringifyPostgresJson(ledgerTerminalResult ?? null),
       JSON.stringify(terminalLogLines),
-      JSON.stringify(input.terminalProgressEvents ?? []),
+      JSON.stringify(
+        sanitizeTerminalProgressEvents(input.terminalProgressEvents),
+      ),
       postgresSchedulerNotifyChannel('terminal', options),
       JSON.stringify({ runId: input.runId, status: 'completed' }),
       input.leaseToken,
@@ -13305,7 +13308,7 @@ export async function completePostgresSchedulerAttempt(
   );
   const terminalLogEntries = (input.terminalLogLines ?? [])
     .map((line, index) => ({
-      line: line.trim(),
+      line: sanitizeTerminalLogBody(line),
       context: input.terminalLogContexts?.[index] ?? null,
       metadata: input.terminalLogMetadata?.[index] ?? null,
       entryId: terminalLogIds?.[index] ?? null,
@@ -13529,7 +13532,9 @@ export async function completePostgresSchedulerAttempt(
       JSON.stringify(terminalLogContexts),
       stringifyPostgresJson(input.terminalWorkCounterSegment ?? null),
       JSON.stringify(terminalLogMetadata),
-      JSON.stringify(input.terminalProgressEvents ?? []),
+      JSON.stringify(
+        sanitizeTerminalProgressEvents(input.terminalProgressEvents),
+      ),
       stringifyPostgresJson(
         terminalLogIds
           ? terminalLogEntries.map((entry) => entry.entryId)
@@ -13615,7 +13620,7 @@ export async function failPostgresSchedulerAttempt(
   );
   const terminalLogEntries = (input.terminalLogLines ?? [])
     .map((line, index) => ({
-      line: line.trim(),
+      line: sanitizeTerminalLogBody(line),
       context: input.terminalLogContexts?.[index] ?? null,
       metadata: input.terminalLogMetadata?.[index] ?? null,
       entryId: terminalLogIds?.[index] ?? null,
@@ -13901,7 +13906,9 @@ export async function failPostgresSchedulerAttempt(
       stringifyPostgresJson(resultSummary),
       JSON.stringify(terminalLogContexts),
       stringifyPostgresJson(terminalWorkCounterSegment ?? null),
-      stringifyPostgresJson(input.terminalProgressEvents ?? []),
+      stringifyPostgresJson(
+        sanitizeTerminalProgressEvents(input.terminalProgressEvents),
+      ),
       JSON.stringify(terminalLogMetadata),
       stringifyPostgresJson(
         terminalLogIds
@@ -14612,7 +14619,9 @@ function runnerTerminalLogPayload(input: {
     terminalLogContexts: projection.lineContexts,
     terminalLogMetadata: projection.lineMetadata,
     ...(projection.lineIds ? { terminalLogIds: projection.lineIds } : {}),
-    terminalProgressEvents: input.terminalProgressEvents ?? [],
+    terminalProgressEvents: sanitizeTerminalProgressEvents(
+      input.terminalProgressEvents,
+    ),
     // Older runner envelopes conveyed these diagnostics only in tagged log
     // text. Preserve their small structured facts before removing that text.
     recoveredRuntimeDiagnostics:
@@ -14629,6 +14638,41 @@ function runnerTerminalLogPayload(input: {
   };
 }
 
+function sanitizeTerminalProgressEvents(
+  events: readonly unknown[] = [],
+): unknown[] {
+  return events.map((event) => {
+    if (!event || typeof event !== 'object' || Array.isArray(event))
+      return event;
+    const item = event as Record<string, unknown>;
+    if (item.type !== 'log.appended' || !Array.isArray(item.lines))
+      return event;
+    return {
+      ...item,
+      // Keep every position and annotation aligned, including blank lines.
+      // Invalid values still reach the existing SQL validation unchanged.
+      lines: item.lines.map((line) =>
+        typeof line === 'string'
+          ? sanitizeTerminalLogBody(line) || '(blank log line)'
+          : line,
+      ),
+    };
+  });
+}
+
+function sanitizeTerminalLogBody(line: string): string {
+  const body = line.trim();
+  const runtimeDiagnostic =
+    body.startsWith('[runtime.failure_diagnostic] ') ||
+    body.startsWith('[runtime.phase_summary] ') ||
+    body.startsWith('[runtime.logs] ') ||
+    body.startsWith('[runtime.log_transport] ');
+  // These runtime records contain machine-readable JSON, already bounded by
+  // the terminal transport. Keep it parseable while applying the same redaction.
+  // Authored tagged lines retain the ordinary live-ingress line bound.
+  return sanitizeLedgerLogLine(body, !runtimeDiagnostic);
+}
+
 function terminalLogProjectionForOutbox(
   runnerResult: unknown,
   mode: PostgresSchedulerTerminalLogOutbox | undefined,
@@ -14689,7 +14733,9 @@ function terminalLogProjectionForOutbox(
         normalized.startsWith('[runtime.log_transport] ');
       if (!retained) return null;
       return {
-        line: line.trim(),
+        // The live API applies this same canonicalization before indexing.
+        // Replaying an origin ID must carry that exact redacted, bounded body.
+        line: sanitizeTerminalLogBody(line),
         context: normalizePlayLogContext(logContexts?.[index]),
         metadata: normalizePlayLogMetadata(logMetadata?.[index]),
         entryId: logIds?.[index] ?? null,

package/dist/cli/{auth-CS6NQ737.mjs → auth-2A7OYHFJ.mjs}

@@ -9,11 +9,11 @@ import {
   registerAuthCommands,
   reportSetupCompleted,
   resolvePendingAuthClaimForResume
-} from "./chunk-LUJGLZCJ.mjs";
-import "./chunk-OJWZADOG.mjs";
-import "./chunk-M4KGWEN2.mjs";
+} from "./chunk-HOCPOTDX.mjs";
+import "./chunk-SPUTBCUR.mjs";
+import "./chunk-Q3LYQTSO.mjs";
 import "./chunk-DLIRSHV6.mjs";
-import "./chunk-VN7Y4LVH.mjs";
+import "./chunk-SGTSJCOA.mjs";
 import "./chunk-NXGCO4JB.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";

package/dist/cli/auth-66JFXP6C.js

@@ -0,0 +1,31 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+var _chunkGCX3343Ljs = require('./chunk-GCX3343L.js');
+require('./chunk-XDUQQTIS.js');
+require('./chunk-RNJ74JDH.js');
+require('./chunk-XNYIZMNQ.js');
+require('./chunk-FYPZ43Y4.js');
+require('./chunk-7P5AA3SN.js');
+require('./chunk-OG64RBAC.js');
+require('./chunk-COGTRVWW.js');
+
+
+
+
+
+
+
+
+
+
+
+exports.EXIT_WORKSPACE_MISMATCH = _chunkGCX3343Ljs.EXIT_WORKSPACE_MISMATCH; exports.clearPendingClaim = _chunkGCX3343Ljs.clearPendingClaim; exports.clearSatisfiedPendingClaim = _chunkGCX3343Ljs.clearSatisfiedPendingClaim; exports.handleRegister = _chunkGCX3343Ljs.handleRegister; exports.handleStatus = _chunkGCX3343Ljs.handleStatus; exports.handleWait = _chunkGCX3343Ljs.handleWait; exports.readPendingAuthClaim = _chunkGCX3343Ljs.readPendingAuthClaim; exports.registerAuthCommands = _chunkGCX3343Ljs.registerAuthCommands; exports.reportSetupCompleted = _chunkGCX3343Ljs.reportSetupCompleted; exports.resolvePendingAuthClaimForResume = _chunkGCX3343Ljs.resolvePendingAuthClaimForResume;