deepline 0.3.398 → 0.3.400

package/dist/bundling-sources/sdk/src/release.ts

@@ -202,7 +202,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.398',
+  version: '0.3.400',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/shared_libs/monitors/provider-monitor-state.ts

@@ -1,3 +1,9 @@
+/** Provider evidence carried only by an exact, fenced terminal deletion. */
+export type ProviderMonitorDeletionObservation = {
+  providerResourceId: string;
+  observedAt: number;
+};
+
 /**
  * The complete customer-visible lifecycle of a monitor.
  *

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/worker-resource-metrics.ts

@@ -1,5 +1,5 @@
 import { statfsSync } from 'node:fs';
-import { cpus } from 'node:os';
+import { cpus, totalmem } from 'node:os';
 import { getHeapStatistics } from 'node:v8';
 
 type ReadFile = (path: string, encoding: 'utf8') => string;
@@ -9,7 +9,7 @@ export type WorkerResourceMetrics = {
   cpuLimitCores: number;
   memoryUsageBytes: number;
   memoryLimitBytes: number;
-  memoryLimitSource: 'cgroup' | 'process_fallback';
+  memoryLimitSource: 'cgroup' | 'system_fallback' | 'process_fallback';
   memoryUtilizationRatio: number;
   heapUsedBytes: number;
   heapLimitBytes: number;
@@ -32,8 +32,8 @@ export type WorkerResourcePressureReason = 'cpu' | 'memory' | 'heap';
  * engine still owns already-claimed tasks and drains them before close.
  *
  * Memory pressure requires a real cgroup limit. A local process fallback uses
- * RSS as both the observed value and its fallback limit, so it must never
- * masquerade as a saturated container.
+ * RSS without a container quota. System capacity also remains telemetry-only;
+ * neither fallback may masquerade as a finite cgroup admission limit.
  */
 export function workerResourcePressureReasons(
   metrics: Pick<
@@ -50,8 +50,7 @@ export function workerResourcePressureReasons(
   }> = {},
 ): WorkerResourcePressureReason[] {
   const cpuThreshold = thresholds.cpu ?? WORKER_CPU_PRESSURE_RATIO;
-  const memoryThreshold =
-    thresholds.memory ?? WORKER_MEMORY_PRESSURE_RATIO;
+  const memoryThreshold = thresholds.memory ?? WORKER_MEMORY_PRESSURE_RATIO;
   const heapThreshold = thresholds.heap ?? WORKER_HEAP_PRESSURE_RATIO;
   const reasons: WorkerResourcePressureReason[] = [];
   if (metrics.cpuUtilizationRatio >= cpuThreshold) reasons.push('cpu');
@@ -161,6 +160,7 @@ export function parseCgroupCpuLimit(raw: string, fallback: number): number {
 
 /** cgroup v1 reports aggregate CPU time in nanoseconds. */
 export function parseCgroupV1CpuUsageMicroseconds(raw: string): number | null {
+  if (!raw.trim()) return null;
   const nanoseconds = Number(raw.trim());
   return Number.isFinite(nanoseconds) && nanoseconds >= 0
     ? nanoseconds / 1_000
@@ -207,23 +207,26 @@ export function parseFileSystemStats(stats: FileSystemStats | null): {
 
 /**
  * Produces container-scoped CPU and memory gauges for one Fly worker process.
- * Fly's guest exposes cgroup v1 memory files and may expose cgroup v2 CPU
- * files. Local development falls back to process RSS and host core count,
- * preserving a useful metric endpoint without pretending local values are
- * container quotas.
+ * Fly guests expose v1 controllers, including a combined cpu,cpuacct mount;
+ * v2 and separate v1 mounts remain supported. An unlimited memory cgroup uses
+ * the guest's physical capacity for telemetry, without expanding the existing
+ * finite-cgroup-only memory admission policy.
  */
 export function createWorkerResourceMetricsReader(input: {
   readFile: ReadFile;
   now?: () => number;
   cpuCount?: () => number;
+  totalMemory?: () => number;
   memoryUsage?: () => NodeJS.MemoryUsage;
   heapLimit?: () => number;
   statfs?: (path: string) => FileSystemStats;
 }) {
   const now = input.now ?? Date.now;
   const cpuCount = input.cpuCount ?? (() => cpus().length || 1);
+  const totalMemory = input.totalMemory ?? totalmem;
   const memoryUsage = input.memoryUsage ?? process.memoryUsage;
-  const heapLimit = input.heapLimit ?? (() => getHeapStatistics().heap_size_limit);
+  const heapLimit =
+    input.heapLimit ?? (() => getHeapStatistics().heap_size_limit);
   const statfs = input.statfs ?? statfsSync;
   let previousCpu: CpuSample | null = null;
 
@@ -237,12 +240,16 @@ export function createWorkerResourceMetricsReader(input: {
 
   return (): WorkerResourceMetrics => {
     const fallbackCpuLimit = Math.max(cpuCount(), 1);
-    const cpuQuota = read('/sys/fs/cgroup/cpu/cpu.cfs_quota_us');
-    const cpuPeriod = read('/sys/fs/cgroup/cpu/cpu.cfs_period_us');
+    const cpuController = ['/sys/fs/cgroup/cpu', '/sys/fs/cgroup/cpu,cpuacct']
+      .map((path) => ({
+        quota: read(`${path}/cpu.cfs_quota_us`),
+        period: read(`${path}/cpu.cfs_period_us`),
+      }))
+      .find(({ quota, period }) => quota !== null && period !== null);
     const cpuLimitCores = parseCgroupCpuLimit(
       read('/sys/fs/cgroup/cpu.max') ??
-        (cpuQuota !== null && cpuPeriod !== null
-          ? `${cpuQuota} ${cpuPeriod}`
+        (cpuController
+          ? `${cpuController.quota} ${cpuController.period}`
           : 'max'),
       fallbackCpuLimit,
     );
@@ -251,23 +258,25 @@ export function createWorkerResourceMetricsReader(input: {
       parseCgroupCpuUsageMicroseconds(read('/sys/fs/cgroup/cpu.stat') ?? '') ??
       parseCgroupV1CpuUsageMicroseconds(
         read('/sys/fs/cgroup/cpuacct/cpuacct.usage') ?? '',
+      ) ??
+      parseCgroupV1CpuUsageMicroseconds(
+        read('/sys/fs/cgroup/cpu,cpuacct/cpuacct.usage') ?? '',
       );
+    const elapsedMs = previousCpu ? sampledAtMs - previousCpu.sampledAtMs : 0;
+    const usageDelta =
+      cpuUsageMicroseconds !== null && previousCpu
+        ? cpuUsageMicroseconds - previousCpu.usageMicroseconds
+        : -1;
+    // First, missing, reset and same-timestamp samples are unavailable, not idle.
+    // Prometheus accepts NaN, and it cannot accidentally trigger admission.
     const cpuUtilizationRatio =
-      cpuUsageMicroseconds === null || previousCpu === null
-        ? 0
-        : Math.max(
-            0,
-            Math.min(
-              1,
-              (cpuUsageMicroseconds - previousCpu.usageMicroseconds) /
-                ((sampledAtMs - previousCpu.sampledAtMs) *
-                  1_000 *
-                  cpuLimitCores),
-            ),
-          );
-    if (cpuUsageMicroseconds !== null) {
-      previousCpu = { usageMicroseconds: cpuUsageMicroseconds, sampledAtMs };
-    }
+      elapsedMs > 0 && usageDelta >= 0
+        ? Math.min(1, usageDelta / (elapsedMs * 1_000 * cpuLimitCores))
+        : Number.NaN;
+    previousCpu =
+      cpuUsageMicroseconds === null
+        ? null
+        : { usageMicroseconds: cpuUsageMicroseconds, sampledAtMs };
 
     const processMemory = memoryUsage();
     const fallbackMemory = processMemory.rss;
@@ -281,21 +290,23 @@ export function createWorkerResourceMetricsReader(input: {
     const cgroupMemoryUsage =
       read('/sys/fs/cgroup/memory.current') ??
       read('/sys/fs/cgroup/memory/memory.usage_in_bytes');
-    const cgroupMemoryLimit =
-      read('/sys/fs/cgroup/memory.max') ??
-      read('/sys/fs/cgroup/memory/memory.limit_in_bytes');
+    // Match readCgroupMemoryLimitBytes: v2 "max" and v1's near-2^63
+    // sentinel are unlimited, not usable capacities. Check both mount layouts.
+    const cgroupMemoryLimitBytes = [
+      read('/sys/fs/cgroup/memory.max'),
+      read('/sys/fs/cgroup/memory/memory.limit_in_bytes'),
+    ]
+      .map((raw) => parseCgroupLimit(raw ?? '', Number.NaN))
+      .find((value) => value > 0 && value < Number.MAX_SAFE_INTEGER);
     const memoryUsageBytes = parseCgroupLimit(
       cgroupMemoryUsage ?? '',
       fallbackMemory,
     );
-    const memoryLimitBytes = parseCgroupLimit(
-      cgroupMemoryLimit ?? '',
-      fallbackMemory,
-    );
-    const heapUsedBytes = finiteNonNegative(
-      processMemory.heapUsed,
-      0,
-    );
+    const systemMemory = finiteNonNegative(totalMemory(), 0);
+    const memoryLimitBytes =
+      cgroupMemoryLimitBytes ??
+      (systemMemory > 0 ? systemMemory : fallbackMemory);
+    const heapUsedBytes = finiteNonNegative(processMemory.heapUsed, 0);
     const heapLimitBytes = finiteNonNegative(heapLimit(), 0);
     return {
       cpuUtilizationRatio,
@@ -303,11 +314,11 @@ export function createWorkerResourceMetricsReader(input: {
       memoryUsageBytes,
       memoryLimitBytes,
       memoryLimitSource:
-        cgroupMemoryLimit === null ||
-        cgroupMemoryLimit === undefined ||
-        cgroupMemoryLimit.trim() === 'max'
-          ? 'process_fallback'
-          : 'cgroup',
+        cgroupMemoryLimitBytes !== undefined
+          ? 'cgroup'
+          : cgroupMemoryUsage !== null && systemMemory > 0
+            ? 'system_fallback'
+            : 'process_fallback',
       memoryUtilizationRatio:
         memoryLimitBytes > 0
           ? Math.min(1, memoryUsageBytes / memoryLimitBytes)

package/dist/cli/{auth-7ZBPAAZU.mjs → auth-JL76JRJP.mjs}

@@ -13,13 +13,13 @@ import {
   reportSetupCompleted,
   resolvePendingAuthClaimForResume,
   statusBannerLine
-} from "./chunk-OVUFHUMG.mjs";
-import "./chunk-CH6EFAJ3.mjs";
-import "./chunk-ZJ7HLJRF.mjs";
+} from "./chunk-GYJSZ6J6.mjs";
+import "./chunk-V3T4CHXI.mjs";
+import "./chunk-6PRUVCMW.mjs";
 import "./chunk-YHPYUZZX.mjs";
 import "./chunk-DLIRSHV6.mjs";
 import "./chunk-NXGCO4JB.mjs";
-import "./chunk-QP2TRM7M.mjs";
+import "./chunk-QZDHNVKF.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";
 export {

package/dist/cli/auth-TNYZVC73.js

@@ -0,0 +1,40 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _chunkORQE3XBGjs = require('./chunk-ORQE3XBG.js');
+require('./chunk-4OPBTEVW.js');
+require('./chunk-OVYVMPEC.js');
+require('./chunk-Q2E4E4FJ.js');
+require('./chunk-XNYIZMNQ.js');
+require('./chunk-7P5AA3SN.js');
+require('./chunk-JIDNO3FI.js');
+require('./chunk-OG64RBAC.js');
+require('./chunk-COGTRVWW.js');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.EXIT_WORKSPACE_MISMATCH = _chunkORQE3XBGjs.EXIT_WORKSPACE_MISMATCH; exports.authStatusLine = _chunkORQE3XBGjs.authStatusLine; exports.clearPendingClaim = _chunkORQE3XBGjs.clearPendingClaim; exports.clearSatisfiedPendingClaim = _chunkORQE3XBGjs.clearSatisfiedPendingClaim; exports.handleRegister = _chunkORQE3XBGjs.handleRegister; exports.handleStatus = _chunkORQE3XBGjs.handleStatus; exports.handleWait = _chunkORQE3XBGjs.handleWait; exports.httpJson = _chunkORQE3XBGjs.httpJson; exports.readPendingAuthClaim = _chunkORQE3XBGjs.readPendingAuthClaim; exports.readStatusBanner = _chunkORQE3XBGjs.readStatusBanner; exports.registerAuthCommands = _chunkORQE3XBGjs.registerAuthCommands; exports.reportSetupCompleted = _chunkORQE3XBGjs.reportSetupCompleted; exports.resolvePendingAuthClaimForResume = _chunkORQE3XBGjs.resolvePendingAuthClaimForResume; exports.statusBannerLine = _chunkORQE3XBGjs.statusBannerLine;