deepline 0.3.323 → 0.3.325

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/postgres.ts

@@ -85,6 +85,7 @@ import {
 } from '../runtime-receipt-value';
 import { PLAY_RUNTIME_WORK_RECEIPT_LEASE_TTL_MS } from '../lease-policy';
 import { RUNTIME_CAPACITY_POLICY } from '../runtime-capacity-policy';
+import { RUN_OBSERVATION_WATCH_LIMIT } from '../run-observation';
 import { RUNTIME_RELIABILITY_POLICY } from '../runtime-reliability-policy';
 import { COMPLETED_RECEIPT_CACHE_INSERT_LEASE_ID } from '../durable-receipt-execution';
 import {
@@ -17484,6 +17485,78 @@ export async function readPostgresSchedulerResult(
   };
 }
 
+export type PostgresSchedulerObservationAdmission = {
+  runId: string;
+  name: string;
+  scope: 'org' | 'system' | null;
+  status: string;
+  createdAt: number | null;
+  startedAt: number | null;
+  updatedAt: number | null;
+  waitKind: null;
+  waitUntil: null;
+};
+
+/** One bounded, tenant-scoped read for the watch set awaiting projection. */
+export async function readPostgresSchedulerObservationAdmissions(
+  client: PostgresSchedulerQueryClient,
+  input: {
+    runIds: readonly string[];
+    orgId: string;
+    schema?: string;
+  },
+): Promise<PostgresSchedulerObservationAdmission[]> {
+  if (
+    input.runIds.length > RUN_OBSERVATION_WATCH_LIMIT ||
+    input.runIds.some((runId) => !runId.trim()) ||
+    !input.orgId.trim()
+  ) {
+    throw new Error('Invalid bounded scheduler observation admission read.');
+  }
+  if (input.runIds.length === 0) return [];
+  const result = await client.query<
+    Pick<
+      RunStatusRow,
+      | 'run_id'
+      | 'status'
+      | 'play_name'
+      | 'created_at'
+      | 'updated_at'
+      | 'started_at'
+      | 'definition_scope'
+    >
+  >(
+    `
+      SELECT scheduler_run.run_id, scheduler_run.status,
+        scheduler_run.play_name, scheduler_run.created_at,
+        scheduler_run.updated_at, scheduler_run.started_at,
+        scheduler_run.launch_json ->> 'definitionScope' AS definition_scope
+      FROM ${tableName('runs', input)} AS scheduler_run
+      JOIN ${tableName('outbox', input)} AS created_event
+        ON created_event.run_id = scheduler_run.run_id
+       AND created_event.event_id = 'run-created:' || scheduler_run.run_id
+       AND created_event.delivered_at IS NULL
+      WHERE scheduler_run.run_id = ANY($1::text[])
+        AND btrim(scheduler_run.org_id) = $2
+    `,
+    [[...new Set(input.runIds)], input.orgId.trim()],
+  );
+  return result.rows.map((row) => ({
+    runId: row.run_id,
+    name: row.play_name,
+    scope:
+      row.definition_scope === 'org' || row.definition_scope === 'system'
+        ? row.definition_scope
+        : null,
+    status: row.status,
+    createdAt: row.created_at?.getTime() ?? null,
+    startedAt: row.started_at?.getTime() ?? null,
+    updatedAt: row.updated_at?.getTime() ?? null,
+    waitKind: null,
+    waitUntil: null,
+  }));
+}
+
 export async function readPostgresSchedulerRunStatus(
   client: PostgresSchedulerQueryClient,
   runId: string,

package/dist/bundling-sources/shared_libs/play-runtime/suspension.ts

@@ -163,6 +163,8 @@ export class PlayRowProviderBackpressureError extends Error {
   constructor(
     readonly provider: string,
     readonly retryAtMs: number,
+    /** Live handoff only: the mapped row must not renew this tool's wait budget. */
+    readonly residentWaitBudgetExhausted = false,
   ) {
     super(
       `Play row is waiting for ${provider} provider backpressure to clear.`,

package/dist/bundling-sources/shared_libs/play-runtime/tool-execute-retry-policy.ts

@@ -10,6 +10,39 @@ import {
   type ToolExecutionErrorSchemaVersion,
 } from '../plays/tool-execution-error';
 
+export const TOOL_EXECUTE_PROVIDER_PERMIT_PATH_SUFFIX = '-with-provider-permit';
+export const TOOL_EXECUTE_PROVIDER_PERMIT_RECEIVER_HEADER =
+  'x-deepline-provider-permit-receiver';
+
+/** An additive execute action whose receiver must validate the supplied permit. */
+export function providerPermitExecuteCanonicalPath(
+  pathname: string,
+): string | null {
+  return /^\/api\/v2\/integrations\/[^/]+\/(?:execute|execute-fenced-v2)-with-provider-permit$/.test(
+    pathname,
+  )
+    ? pathname.slice(0, -TOOL_EXECUTE_PROVIDER_PERMIT_PATH_SUFFIX.length)
+    : null;
+}
+
+/** Older gateways refuse the new path before admission or provider work. */
+export function isProviderPermitExecuteReceiverUnavailable(
+  response: Response,
+  bodyText: string,
+): boolean {
+  if (response.headers.has(TOOL_EXECUTE_PROVIDER_PERMIT_RECEIVER_HEADER))
+    return false;
+  if (response.status === 404) return true;
+  if (response.status !== 403) return false;
+  try {
+    return (
+      JSON.parse(bodyText)?.error === 'Execution gateway route is not allowed.'
+    );
+  } catch {
+    return false;
+  }
+}
+
 // Give an explicitly replay-safe transient 5xx one additional bounded retry.
 // Preview gateway load runs can overlap brief Convex billing-plane 503s; this
 // adds a second recovery chance without replaying operations that did not opt
@@ -78,11 +111,15 @@ export const TOOL_EXECUTE_RUNNER_ACCEPTS_CONCURRENCY_BACKPRESSURE =
 /** The capability tokens this runner build advertises on provider execute. */
 export const TOOL_EXECUTE_RUNNER_ACCEPTS_VALUE =
   TOOL_EXECUTE_RUNNER_ACCEPTS_CONCURRENCY_BACKPRESSURE;
-/** Runner proof headers consumed only by the execution gateway. */
+/** Runner proof headers consumed by the gateway and authenticated app boundary. */
 export const TOOL_EXECUTE_PROVIDER_RATE_SCOPE_HEADER =
   'x-deepline-provider-rate-scope';
 export const TOOL_EXECUTE_PROVIDER_RATE_RETRY_SNAPSHOT_HEADER =
   'x-deepline-provider-rate-retry-snapshot';
+/** Caller can renew a released charge after every app-side pacing refusal. */
+export const TOOL_EXECUTE_APP_PACING_REFUSAL_HEADER =
+  'x-deepline-app-pacing-refusal';
+export const TOOL_EXECUTE_APP_PACING_REFUSAL_VALUE = 'fresh-billing-identity';
 /** Server-minted only for an internal executor's provider-owned 429. */
 export const TOOL_EXECUTE_PROVIDER_THROTTLE_HEADER =
   'x-deepline-provider-throttle';
@@ -547,8 +584,9 @@ export function createToolExecuteHttpFailureAttemptTracker(): ToolExecuteHttpFai
 export function parseToolExecuteRetryAtMs(
   header: string | null | undefined,
   nowMs = Date.now(),
+  fallbackDelayMs = TOOL_EXECUTE_RETRY_DELAY_FALLBACK_MS,
 ): number {
-  if (!header) return nowMs + TOOL_EXECUTE_RETRY_DELAY_FALLBACK_MS;
+  if (!header?.trim()) return nowMs + fallbackDelayMs;
   const seconds = Number(header);
   if (Number.isFinite(seconds) && seconds >= 0) {
     return nowMs + Math.ceil(seconds * 1000);
@@ -557,7 +595,7 @@ export function parseToolExecuteRetryAtMs(
   if (Number.isFinite(retryAt)) {
     return retryAt;
   }
-  return nowMs + TOOL_EXECUTE_RETRY_DELAY_FALLBACK_MS;
+  return nowMs + fallbackDelayMs;
 }
 
 export function parseToolExecuteRetryAfterMs(

package/dist/bundling-sources/shared_libs/plays/artifact-types.ts

@@ -62,6 +62,15 @@ export type PlayBundleArtifact = {
   sourceMap: string;
   importPolicy: PlayImportPolicy;
   compatibility: PlayArtifactCompatibility;
+  /** Immutable imported execution closure; absent artifacts retain named live resolution. */
+  importedPlayArtifacts?: Record<
+    string,
+    {
+      artifactStorageKey: string;
+      artifactHash: string;
+      graphHash: string;
+    }
+  >;
   generatedAt: number;
   cacheHit: boolean;
 };

package/dist/cli/{auth-4TYSEEPE.mjs → auth-PIZESRPC.mjs}

@@ -9,11 +9,11 @@ import {
   registerAuthCommands,
   reportSetupCompleted,
   resolvePendingAuthClaimForResume
-} from "./chunk-VN433ENM.mjs";
-import "./chunk-3OTHDXTV.mjs";
-import "./chunk-W2V624T6.mjs";
+} from "./chunk-5FHU7TV4.mjs";
+import "./chunk-AQUNQJ5Y.mjs";
+import "./chunk-YE3O2UHM.mjs";
 import "./chunk-DLIRSHV6.mjs";
-import "./chunk-UE55ECMI.mjs";
+import "./chunk-NWBARG3F.mjs";
 import "./chunk-NXGCO4JB.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";

package/dist/cli/auth-RXCD4GOV.js

@@ -0,0 +1,31 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+var _chunkPBNZXZCWjs = require('./chunk-PBNZXZCW.js');
+require('./chunk-QQ2FG5W3.js');
+require('./chunk-PVDQ55PS.js');
+require('./chunk-XNYIZMNQ.js');
+require('./chunk-K7FC5IUU.js');
+require('./chunk-7P5AA3SN.js');
+require('./chunk-OG64RBAC.js');
+require('./chunk-COGTRVWW.js');
+
+
+
+
+
+
+
+
+
+
+
+exports.EXIT_WORKSPACE_MISMATCH = _chunkPBNZXZCWjs.EXIT_WORKSPACE_MISMATCH; exports.clearPendingClaim = _chunkPBNZXZCWjs.clearPendingClaim; exports.clearSatisfiedPendingClaim = _chunkPBNZXZCWjs.clearSatisfiedPendingClaim; exports.handleRegister = _chunkPBNZXZCWjs.handleRegister; exports.handleStatus = _chunkPBNZXZCWjs.handleStatus; exports.handleWait = _chunkPBNZXZCWjs.handleWait; exports.readPendingAuthClaim = _chunkPBNZXZCWjs.readPendingAuthClaim; exports.registerAuthCommands = _chunkPBNZXZCWjs.registerAuthCommands; exports.reportSetupCompleted = _chunkPBNZXZCWjs.reportSetupCompleted; exports.resolvePendingAuthClaimForResume = _chunkPBNZXZCWjs.resolvePendingAuthClaimForResume;