deepline 0.3.314 → 0.3.316

package/dist/bundling-sources/shared_libs/play-runtime/ctx-types.ts

@@ -482,12 +482,19 @@ export interface MapExecutionFrame {
   artifactTableNamespace: string;
   status: 'running' | 'suspended' | 'completed' | 'failed';
   totalRows: number;
+  /**
+   * Successful row identities visible at this checkpoint. Older frames may
+   * retain superseded history keys; the owning keyed sheet reader translates
+   * ambiguous frames before pending-only resume.
+   */
   completedRowKeys: string[];
   pendingRowKeys: string[];
   /**
    * The admitted inputs that still need to run after a durable suspension.
    * This prevents a replay from losing work when its authored source query is
    * stateful and no longer returns rows that were selected before the pause.
+   * Accepted terminal writes remove inputs by their original index. An empty
+   * retained plan preserves the original counts during a pending-only reopen.
    */
   suspendedInputRows?: Array<{
     inputIndex: number;
@@ -495,6 +502,7 @@ export interface MapExecutionFrame {
     /** Digest of the authored input before Runtime Sheet outputs were merged. */
     authoredInputDigest?: string;
   }>;
+  /** Successful inputs, including reused inputs with no distinct stored key. */
   completedRowsCount?: number;
   pendingRowsCount?: number;
   failedRowsCount?: number;
@@ -616,6 +624,8 @@ export type PlayExecutionEvent =
       artifactTableNamespace: string;
       totalRows: number;
       completedRows: number;
+      /** Settled failures restored on replay; absent on older producers. */
+      failedRows?: number;
       pendingRows: number;
       /** Rows omitted because a newer Runtime Sheet write already won. */
       supersededRows?: number;
@@ -627,7 +637,12 @@ export type PlayExecutionEvent =
       mapNodeId?: string | null;
       logicalNamespace: string;
       artifactTableNamespace: string;
+      /**
+       * Acknowledged successful rows, including restored rows exactly once.
+       * Sheet-backed maps acknowledge only committed terminal row writes.
+       */
       completedRows: number;
+      /** Explicit failed row outcomes; never inferred from sparse pending keys. */
       failedRows: number;
       totalRows?: number;
       /** Rows whose resolver began, including rows awaiting a tool or receipt. */

package/dist/bundling-sources/shared_libs/play-runtime/execution-capabilities.ts

@@ -14,6 +14,7 @@ export const RUNTIME_EXECUTION_CAPABILITIES = [
   'event.wait',
   'run.child',
   'run.progress',
+  'run.ledger.project',
   'run.heartbeat',
   'sheet.read',
   'sheet.write',
@@ -73,7 +74,9 @@ export type RuntimeAuthorityDescriptor = {
 };
 
 export const DEFAULT_RUNTIME_EXECUTION_CAPABILITIES = [
-  ...RUNTIME_EXECUTION_CAPABILITIES,
+  ...RUNTIME_EXECUTION_CAPABILITIES.filter(
+    (capability) => capability !== 'run.ledger.project',
+  ),
 ] as const satisfies readonly RuntimeExecutionCapability[];
 
 /** Daytona receives these safe-to-steal capabilities, never raw DB access. */

package/dist/bundling-sources/shared_libs/play-runtime/internal-bootstrap-token.ts

@@ -330,6 +330,8 @@ export type WorkflowRunExecutionTokenClaims =
     capabilities: RuntimeExecutionCapability[];
     /** Trusted deployment origin that issued this run token. */
     runtime_origin?: string;
+    /** Immutable receiver advertising leased Run Ledger ingress-prefix support. */
+    run_ledger_ingress_prefix_origin?: string;
   };
 
 export type RuntimeRateScopeTokenClaims = {
@@ -642,6 +644,8 @@ function isValidWorkflowClaimsShape(
       typeof claims.terminal_contract === 'string') &&
     (claims.runtime_origin === undefined ||
       isValidRuntimeOrigin(claims.runtime_origin)) &&
+    (claims.run_ledger_ingress_prefix_origin === undefined ||
+      isValidRuntimeOrigin(claims.run_ledger_ingress_prefix_origin)) &&
     Array.isArray(claims.capabilities) &&
     claims.capabilities.length > 0 &&
     claims.capabilities.every(isRuntimeExecutionCapability) &&
@@ -735,6 +739,7 @@ export async function mintWorkflowRunExecutionToken(input: {
   terminalContract?: DirectCompletedTerminalContract | null;
   capabilities?: readonly RuntimeExecutionCapability[];
   runtimeOrigin?: string | null;
+  runLedgerIngressPrefixOrigin?: string | null;
   subject?: string | null;
   nowMs?: number;
 }): Promise<string> {
@@ -811,6 +816,13 @@ export async function mintWorkflowRunExecutionToken(input: {
     ...(input.runtimeOrigin?.trim()
       ? { runtime_origin: new URL(input.runtimeOrigin).origin }
       : {}),
+    ...(input.runLedgerIngressPrefixOrigin?.trim()
+      ? {
+          run_ledger_ingress_prefix_origin: new URL(
+            input.runLedgerIngressPrefixOrigin,
+          ).origin,
+        }
+      : {}),
     sub: input.subject ?? 'workflow_executor',
     iat: issuedAt,
     exp: issuedAt + INTERNAL_WORKFLOW_TOKEN_TTL_SECONDS,
@@ -1201,10 +1213,7 @@ export async function verifyPlayWebhookReceiptBatchAdmissionToken(
     claims.sub === 'play_webhook_receipt_large_batch_dispatcher' &&
     typeof claims.receipt_ids_sha256 === 'string' &&
     /^[A-Za-z0-9_-]{43}$/.test(claims.receipt_ids_sha256);
-  if (
-    hasInvalidBaseClaims ||
-    (!hasValidV1Claims && !hasValidV2Claims)
-  ) {
+  if (hasInvalidBaseClaims || (!hasValidV1Claims && !hasValidV2Claims)) {
     throw new Error('Invalid webhook receipt batch token.');
   }
   // `hasInvalidBaseClaims` is deliberately a named diagnostic, but TypeScript

package/dist/bundling-sources/shared_libs/play-runtime/launch-identity.ts

@@ -70,6 +70,7 @@ export const PLAY_LAUNCH_ENVELOPE_FIELD_ROLES: {
   preloadedDbSessions: 'detail',
   preloadedDbSessionUnwrapKey: 'detail',
   executorToken: 'detail',
+  runLedgerExecutorToken: 'detail',
   runtimeAuthority: 'detail',
   runtimeApiBaseUrl: 'detail',
   runtimeTokenOrigin: 'detail',

package/dist/bundling-sources/shared_libs/play-runtime/live-events.ts

@@ -78,10 +78,41 @@ export type PlayStepProgressEventPayload = {
   activeRows?: number;
   waitingRows?: number;
   completedRows?: number;
+  /** Rows whose Runtime Sheet write lost to a newer write; neither successes nor failures. */
+  supersededRows?: number;
   message?: string;
   artifactTableNamespace?: string | null;
 } & PlayRuntimeTimingWindow;
 
+/** Scalar counts shared by public snapshots, change detection and progress events. */
+export type PlayStepProgressCounters = Pick<
+  PlayStepProgressEventPayload,
+  | 'completed'
+  | 'total'
+  | 'failed'
+  | 'startedRows'
+  | 'activeRows'
+  | 'waitingRows'
+  | 'completedRows'
+  | 'supersededRows'
+>;
+
+/** Project only counters, preserving optional absence and excluding per-row data. */
+export function projectPlayStepProgressCounters(
+  progress: PlayStepProgressCounters,
+): PlayStepProgressCounters {
+  return {
+    completed: progress.completed,
+    total: progress.total,
+    failed: progress.failed,
+    startedRows: progress.startedRows,
+    activeRows: progress.activeRows,
+    waitingRows: progress.waitingRows,
+    completedRows: progress.completedRows,
+    supersededRows: progress.supersededRows,
+  };
+}
+
 export type PlayRunHealthEventPayload = {
   runId: string;
   state: 'healthy' | 'degraded';