deepline 0.3.405 → 0.3.406

package/dist/bundling-sources/sdk/src/release.ts

@@ -202,7 +202,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.405',
+  version: '0.3.406',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/shared_libs/observability/scheduled-jobs.json

@@ -89,6 +89,45 @@
     "failureAlert": "github_workflow_run",
     "domainReportRequired": true
   },
+  {
+    "id": "github.cloudflare-tunnel-reconciliation",
+    "name": "Cloudflare Tunnel Reconciliation",
+    "workflowEvents": ["schedule"],
+    "scheduler": "github_actions",
+    "cadence": "17 6 * * *",
+    "timezone": "UTC",
+    "source": ".github/workflows/cloudflare-tunnel-reconciliation.yml",
+    "locator": "schedule:",
+    "owner": "platform",
+    "criticality": "maintenance",
+    "purpose": "Report and, only after explicit rollout admission, reclaim exact managed developer tunnel UUIDs from current PR and disconnected-idle evidence while retaining protected, connected, legacy and unknown resources.",
+    "successDefinition": "Every selected UUID has a retained, deleted or unresolved outcome with durable intent and rate-budget evidence; disabled rollout and zero eligible resources are explicit no-ops, and unresolved outcomes fail the pass.",
+    "failureDefinition": "Provider or GitHub authority is unavailable, ownership or idle eligibility is misclassified, deletion remains unresolved, a continuation cannot finish, or immutable intent and outcome evidence is missing.",
+    "startGraceMs": 600000,
+    "runTimeoutMs": 84600000,
+    "failureAlert": "github_workflow_run",
+    "domainReportRequired": true
+  },
+  {
+    "id": "github.cloudflare-tunnel-reconciliation-events",
+    "name": "Cloudflare Tunnel Reconciliation events",
+    "workflowName": "Cloudflare Tunnel Reconciliation",
+    "workflowEvents": ["pull_request_target", "workflow_dispatch"],
+    "scheduler": "github_actions",
+    "cadence": "runAfter trusted same-repository PR close or explicit operator workflow dispatch",
+    "timezone": "UTC",
+    "source": ".github/workflows/cloudflare-tunnel-reconciliation.yml",
+    "locator": "workflow_dispatch:",
+    "owner": "platform",
+    "criticality": "maintenance",
+    "purpose": "Record PR-close and operator tunnel reconciliation separately from the daily cleanup slot, with the same exact ownership, rollout and retained-evidence controls.",
+    "successDefinition": "The admitted event pass completes its exact selected UUIDs with durable outcomes; disabled rollout and no eligible resources are explicit no-ops.",
+    "failureDefinition": "Event authority, provider truth, continuation or retained evidence is unavailable, or an exact selected UUID remains unresolved.",
+    "startGraceMs": 600000,
+    "runTimeoutMs": 84600000,
+    "failureAlert": "github_workflow_run",
+    "domainReportRequired": true
+  },
   {
     "id": "github.cleanup-stale-preview-infrastructure",
     "name": "Cleanup Stale Preview Infrastructure",
@@ -189,9 +228,9 @@
     "locator": "schedule:",
     "owner": "platform",
     "criticality": "maintenance",
-    "purpose": "Reconcile completed PR Preview Machines and release capacity only after the per-app lease fence allows it.",
-    "successDefinition": "Fly inventory is reconciled and eligible terminal/closed PR capacity is released; no eligible app is a valid no-op.",
-    "failureDefinition": "Inventory, lease resolution, scale-down, or empty-app cleanup fails or is ambiguous.",
+    "purpose": "Reconcile completed PR Preview Machines and release capacity only after the per-app lease fence allows it. Its named-estate lane plans every named Preview estate (eval reuse keys, runtime up preview branch lanes, one-off namespaces) with `bun scripts/fly-preview-estate-lifecycle.ts --report --named-reclaim-plan` and, only on a workflow_dispatch with reclaim_named_estates=true, scales at most 8 planned estates per pass (interrupted reclaims first, then reclaimable estates idle 24 h by lease, release or reclaim evidence) to zero through the claimed runtime-preview-namespace.yml scale-to-zero, recording the start and lane app before the seam, retiring the release lane and recording reclaimed history; scheduled passes only report it.",
+    "successDefinition": "Fly inventory is reconciled and eligible terminal/closed PR capacity is released; every named estate is classified without a read failure, and a dispatched named reclaim leaves each target at zero Machines with its release lane retired and reclaimed history written. No eligible app or estate is a valid no-op.",
+    "failureDefinition": "Inventory, lease resolution, scale-down, or empty-app cleanup fails or is ambiguous; a named-estate Fly or authority read fails; a named reclaim is refused inside its claim (active owner, used since discovery, ownership or lane-app refusal) or any role keeps a Machine; or any named reclaim is incomplete (started but its release lane was never retired), which fails every pass until a dispatch finishes it.",
     "startGraceMs": 600000,
     "runTimeoutMs": 3600000,
     "failureAlert": "github_workflow_run",
@@ -207,7 +246,7 @@
     "locator": "schedule:",
     "owner": "platform",
     "criticality": "maintenance",
-    "purpose": "Classify numbered Fly PR Preview estates by PR lifetime and ownership (report only), record organization Machine headroom, and list failed PR-close and post-CI cleanup runs that completed in the previous UTC day.",
+    "purpose": "Classify numbered Fly PR Preview estates by PR lifetime and ownership and named estates by the idle clock (report only), record organization Machine headroom, and list failed PR-close and post-CI cleanup runs that completed in the previous UTC day.",
     "successDefinition": "Every estate is read and classified without a mutation, headroom is recorded, and no event-driven Preview cleanup run that completed in the previous UTC day failed or was left unfinished.",
     "failureDefinition": "Fly, GitHub, or estate-authority reads fail for an estate, or a PR-close or post-CI cleanup run that completed in the previous UTC day failed, or one is still unfinished after six hours.",
     "startGraceMs": 600000,

package/dist/bundling-sources/shared_libs/play-runtime/deployment/fly-machine-lifecycle.ts

@@ -25,6 +25,107 @@ export type FlyMachine = {
 // Fly Machines API expects a Go duration string. Never send bare seconds.
 export const RECEIPT_GATEWAY_DRAIN_TIMEOUT = '300s';
 
+/** One Fly app of a Preview estate, named by the role it plays. */
+export type EstateRoleApp = { role: string; app: string };
+
+const SCALE_TO_ZERO_DELETE_CONCURRENCY = 8;
+// A force delete returns before Fly drops the Machine from its list; one still
+// `destroying` is not a survivor yet. Re-read on a bounded schedule (about a
+// minute in total) before calling it one.
+const SCALE_TO_ZERO_CONFIRM_DELAYS_MS = [
+  2_000, 3_000, 5_000, 5_000, 10_000, 10_000, 10_000, 15_000,
+] as const;
+
+/**
+ * Remove every Machine of a Preview estate, role by role, and prove each role
+ * reached zero before touching the next. Compute only: apps, images, secrets,
+ * the scheduler schema, queue registration and release lanes are the caller's
+ * business and are never touched here.
+ *
+ * The scaler owns worker desired count, so it must be the first role whenever
+ * it is present; otherwise it can replace the last worker between the destroy
+ * and the zero assertion. A role whose Machines survive the destroy is a loud
+ * failure naming the app and Machine IDs, and later roles are left alone so a
+ * retry starts from a known order.
+ */
+export async function scaleEstateRolesToZero(input: {
+  roles: readonly EstateRoleApp[];
+  /**
+   * Machines in the app that still exist, excluding any Fly reports as
+   * `destroyed`; an app that does not exist has none.
+   */
+  listMachines: (app: string) => Promise<Array<{ id: string; state?: string }>>;
+  deleteMachine: (app: string, machineId: string) => Promise<void>;
+  log?: (line: string) => void;
+  sleep?: (ms: number) => Promise<void>;
+}): Promise<Array<EstateRoleApp & { destroyed: string[] }>> {
+  const sleep =
+    input.sleep ??
+    ((ms: number) => new Promise<void>((resolve) => setTimeout(resolve, ms)));
+  if (input.roles.length === 0) {
+    throw new Error('Estate scale-to-zero requires at least one role.');
+  }
+  const scalerIndex = input.roles.findIndex((role) => role.role === 'scaler');
+  if (scalerIndex > 0) {
+    throw new Error(
+      'Estate scale-to-zero must remove the scaler before any other role.',
+    );
+  }
+  const seen = new Set<string>();
+  for (const { role, app } of input.roles) {
+    if (!role.trim() || !app.trim()) {
+      throw new Error('Estate scale-to-zero roles need a role and an app.');
+    }
+    if (seen.has(app)) {
+      throw new Error(`Estate scale-to-zero repeats app ${app}.`);
+    }
+    seen.add(app);
+  }
+
+  const results: Array<EstateRoleApp & { destroyed: string[] }> = [];
+  for (const { role, app } of input.roles) {
+    const machineIds = (await input.listMachines(app))
+      .filter((machine) => machine.state !== 'destroying')
+      .map((machine) => machine.id);
+    for (
+      let offset = 0;
+      offset < machineIds.length;
+      offset += SCALE_TO_ZERO_DELETE_CONCURRENCY
+    ) {
+      await Promise.all(
+        machineIds
+          .slice(offset, offset + SCALE_TO_ZERO_DELETE_CONCURRENCY)
+          .map((machineId) => input.deleteMachine(app, machineId)),
+      );
+    }
+    let remaining = await input.listMachines(app);
+    for (const delayMs of SCALE_TO_ZERO_CONFIRM_DELAYS_MS) {
+      // Only Machines Fly is still tearing down may settle on their own; any
+      // other survivor fails now rather than waiting out the schedule.
+      if (
+        remaining.length === 0 ||
+        remaining.some((machine) => machine.state !== 'destroying')
+      ) {
+        break;
+      }
+      await sleep(delayMs);
+      remaining = await input.listMachines(app);
+    }
+    if (remaining.length > 0) {
+      throw new Error(
+        `Preview ${role} did not scale to zero Machines: ${app} still has ${remaining
+          .map((machine) => `${machine.id}=${machine.state ?? 'unknown'}`)
+          .join(', ')}.`,
+      );
+    }
+    input.log?.(
+      `[estate-scale-to-zero] ${role} ${app}: destroyed ${machineIds.length}, now 0`,
+    );
+    results.push({ role, app, destroyed: machineIds });
+  }
+  return results;
+}
+
 export async function stopAndDestroyCordonedMachines(input: {
   machineIds: string[];
   readMachines: () => FlyMachine[] | Promise<FlyMachine[]>;

package/dist/cli/auth-K5QAZH42.js

@@ -0,0 +1,40 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _chunkN6DJQQ2Sjs = require('./chunk-N6DJQQ2S.js');
+require('./chunk-NYDRX6JJ.js');
+require('./chunk-YSAZVLJD.js');
+require('./chunk-Q2E4E4FJ.js');
+require('./chunk-XNYIZMNQ.js');
+require('./chunk-7P5AA3SN.js');
+require('./chunk-W3ZNQE5Y.js');
+require('./chunk-OG64RBAC.js');
+require('./chunk-COGTRVWW.js');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.EXIT_WORKSPACE_MISMATCH = _chunkN6DJQQ2Sjs.EXIT_WORKSPACE_MISMATCH; exports.authStatusLine = _chunkN6DJQQ2Sjs.authStatusLine; exports.clearPendingClaim = _chunkN6DJQQ2Sjs.clearPendingClaim; exports.clearSatisfiedPendingClaim = _chunkN6DJQQ2Sjs.clearSatisfiedPendingClaim; exports.handleRegister = _chunkN6DJQQ2Sjs.handleRegister; exports.handleStatus = _chunkN6DJQQ2Sjs.handleStatus; exports.handleWait = _chunkN6DJQQ2Sjs.handleWait; exports.httpJson = _chunkN6DJQQ2Sjs.httpJson; exports.readPendingAuthClaim = _chunkN6DJQQ2Sjs.readPendingAuthClaim; exports.readStatusBanner = _chunkN6DJQQ2Sjs.readStatusBanner; exports.registerAuthCommands = _chunkN6DJQQ2Sjs.registerAuthCommands; exports.reportSetupCompleted = _chunkN6DJQQ2Sjs.reportSetupCompleted; exports.resolvePendingAuthClaimForResume = _chunkN6DJQQ2Sjs.resolvePendingAuthClaimForResume; exports.statusBannerLine = _chunkN6DJQQ2Sjs.statusBannerLine;

package/dist/cli/{auth-D4GXO4IN.mjs → auth-U7LIMXIS.mjs}

@@ -13,13 +13,13 @@ import {
   reportSetupCompleted,
   resolvePendingAuthClaimForResume,
   statusBannerLine
-} from "./chunk-3FF3SPSE.mjs";
-import "./chunk-3DWMYKWU.mjs";
-import "./chunk-TPYRDAU7.mjs";
+} from "./chunk-2MLY2ZBT.mjs";
+import "./chunk-5IGBBYXH.mjs";
+import "./chunk-CGX4NSS3.mjs";
 import "./chunk-YHPYUZZX.mjs";
 import "./chunk-DLIRSHV6.mjs";
 import "./chunk-NXGCO4JB.mjs";
-import "./chunk-EKWJXPIX.mjs";
+import "./chunk-42RUJLQI.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";
 export {