deepline 0.3.405 → 0.3.407

package/dist/bundling-sources/sdk/src/client.ts

@@ -3232,8 +3232,8 @@ export class DeeplineClient {
   /**
    * Search available tools using Deepline's ranked backend search.
    *
-   * This is the same discovery surface used by the CLI: it ranks across
-   * tool metadata, categories, agent guidance, and input schema fields.
+   * The CLI uses the same search.
+   * The search ranks tool metadata, categories, agent guidance, and input schema fields.
    */
   async searchTools(
     options: ToolSearchOptions = {},
@@ -3308,13 +3308,12 @@ export class DeeplineClient {
   /**
    * Describe a Deepline Agent model and its provider-specific option surface.
    *
-   * Combines live AI Gateway model metadata with Deepline's generated AI SDK
-   * provider option registry so agents can construct `providerOptions`
-   * payloads before executing `deeplineagent`.
+   * The method combines live AI Gateway model metadata with Deepline's generated registry of AI SDK provider options.
+   * Agents can use this information to construct `providerOptions` payloads before they execute `deeplineagent`.
    *
-   * The returned option schemas describe accepted provider option shapes, not
-   * guaranteed support for every model. Runtime AI SDK/Gateway errors remain
-   * authoritative for model-gated values.
+   * The returned schemas describe accepted shapes for provider options.
+   * These schemas do not guarantee that every model supports each option.
+   * Runtime AI SDK and Gateway errors determine support for model-specific values.
    *
    * @param model - Exact-case Gateway model id such as `"openai/gpt-5.6-luna"`
    * @returns Model metadata, provider option shapes, and runnable examples
@@ -3331,8 +3330,8 @@ export class DeeplineClient {
   /**
    * Quote dynamic AI inference pricing for a concrete payload.
    *
-   * The result separates a planning estimate from a proven authorization
-   * maximum and contains Deepline credits only.
+   * The result contains a planning estimate and a separate, proven authorization maximum.
+   * Both values use Deepline credits.
    */
   async quoteInferenceTool(
     toolId: 'ai_evaluate' | 'ai_inference' | 'deeplineagent',
@@ -3437,13 +3436,16 @@ export class DeeplineClient {
    * entrypoints: the CLI, {@link Deepline.connect}, {@link submitPlay},
    * or {@link runPlay}.
    *
-   * Supported invocation surfaces intentionally share this same run contract:
-   * `deepline plays run`, repo scripts such as `bun run deepline -- plays run`,
-   * SDK context calls like `Deepline.connect().play(name).run()`, and direct
-   * `POST /api/v2/plays/run` calls all return a workflow/run id. The completed
-   * output is always retrievable from `getPlayStatus(runId).result` (or from
-   * `PlayJob.get()` for SDK context calls). Execution logs live under
-   * `progress.logs`; they are not part of the user output object.
+   * These interfaces share the run contract and return a workflow or run ID:
+   *
+   * - `deepline plays run`.
+   * - Repository scripts such as `bun run deepline -- plays run`.
+   * - SDK context calls such as `Deepline.connect().play(name).run()`.
+   * - Direct `POST /api/v2/plays/run` calls.
+   *
+   * Read completed output from `getPlayStatus(runId).result`.
+   * For SDK context calls, read output from `PlayJob.get()`.
+   * Execution logs appear under `progress.logs`. The user output object does not contain these logs.
    *
    * @param request - Play run configuration (name, code, input, etc.)
    * @returns Run metadata including the public `workflowId`
@@ -3718,9 +3720,8 @@ export class DeeplineClient {
   /**
    * Compile a bundled play artifact into the server-side compiler manifest.
    *
-   * The manifest records imports, trigger bindings, static pipeline shape, and
-   * runtime metadata needed before a play artifact can be checked, registered,
-   * or run.
+   * The manifest records imports, trigger bindings, static pipeline shape, and runtime metadata.
+   * The compiler needs these records before it checks, registers, or runs a Play artifact.
    */
   async compilePlayManifest(input: {
     name: string;
@@ -3802,8 +3803,8 @@ export class DeeplineClient {
   /**
    * Register an already-bundled play artifact and start a run from it.
    *
-   * This is the low-level file-backed run path used by SDK/CLI packaging
-   * wrappers after local bundling has produced the runtime artifact.
+   * SDK and CLI packaging wrappers use this low-level run method for file-based Plays.
+   * Local bundling must produce the runtime artifact first.
    */
   async startPlayRunFromBundle(input: {
     name: string;
@@ -3859,15 +3860,15 @@ export class DeeplineClient {
   /**
    * Register a bundled play artifact and start a run from the live revision.
    *
-   * Convenience wrapper around {@link registerPlayArtifact} plus
-   * {@link startPlayRun}. This is the canonical file-backed path used by wrappers.
-   * The returned id can be passed to {@link getPlayStatus} to retrieve the same
-   * durable `{ result }` object that the CLI prints after `plays run` completes.
+   * This method wraps {@link registerPlayArtifact} and {@link startPlayRun}.
+   * Packaging wrappers use this method for file-based Plays.
+   * Pass the returned ID to {@link getPlayStatus}.
+   * The method returns the same durable `{ result }` object that the CLI prints after `plays run` completes.
    *
-   * @param code - Source string fallback; the bundled artifact should be passed in `options.artifact`
-   * @param csvPath - Path to input CSV file, or `null`
-   * @param name - Play name (extracted from source if omitted)
-   * @param options - Additional submission options
+   * @param code - Fallback source string. Pass the bundled artifact in `options.artifact`.
+   * @param csvPath - Path to the input CSV file, or `null`.
+   * @param name - Play name. The SDK derives it from the source when omitted.
+   * @param options - Additional submission options.
    * @returns Workflow metadata with `workflowId`
    *
    * @example
@@ -3998,9 +3999,8 @@ export class DeeplineClient {
   /**
    * Mint short-lived presigned upload targets for staged play files.
    *
-   * Internal primitive used by {@link stagePlayFiles}. The server returns an
-   * already-staged ref (no upload needed) for content-addressed files it
-   * already holds, or a presigned PUT URL the caller uploads the body to.
+   * Internal primitive used by {@link stagePlayFiles}. For a content-addressed file already in storage, the server returns a staged reference. That file needs no upload.
+   * For other files, the server returns a presigned PUT URL. Upload the file body to that URL.
    */
   async mintStagedPlayFileUploads(
     files: Array<{
@@ -4016,8 +4016,7 @@ export class DeeplineClient {
   /**
    * Resolve staged play files by content hash without uploading bytes.
    *
-   * Missing files are returned so callers can upload only the files the server
-   * does not already have.
+   * The response identifies missing files. Callers need to upload only these files.
    */
   async resolveStagedPlayFiles(
     files: Array<{
@@ -4658,11 +4657,11 @@ export class DeeplineClient {
   /**
    * Start a fresh run from a prior run's retained input and pinned revision.
    *
-   * Every invocation sends an `Idempotency-Key`. When the caller does not
-   * supply one, a fresh key is generated once per call so the transport's own
-   * network retries converge on a single rerun. Pass the same explicit key
-   * across separate invocations to repeat an ambiguous result safely; a
-   * different key intentionally starts another rerun.
+   * Every invocation sends an `Idempotency-Key`.
+   * When the caller supplies no key, the SDK creates a fresh key once per call.
+   * The transport reuses that key for network retries, so those retries produce one rerun.
+   * Reuse an explicit key across separate invocations when the previous result is uncertain.
+   * A different key starts another rerun.
    */
   async rerun(
     runId: string,
@@ -5113,8 +5112,8 @@ export class DeeplineClient {
     options?: StopAllRunsOptions,
   ): Promise<StopAllPlayRunsResult>;
   /**
-   * Stop every active run visible to the current workspace, or with
-   * `dryRun: true` enumerate the exact candidates without cancelling anything.
+   * Stop every active run visible to the current workspace.
+   * With `dryRun: true`, list the exact candidates without cancelling any run.
    *
    * This is the SDK equivalent of:
    *
@@ -5123,8 +5122,8 @@ export class DeeplineClient {
    * deepline runs stop-all --reason "stale lock"
    * ```
    *
-   * Use this when a failed parent run left child or waiting runs active and you
-   * need to clear the workspace run-slot state without knowing each run id.
+   * Use this method when a failed parent leaves active child or waiting runs.
+   * The method clears workspace run-slot state without requiring each run ID.
    */
   async stopAllRuns(
     options?: StopAllRunsOptions,
@@ -5150,8 +5149,8 @@ export class DeeplineClient {
   }
 
   /**
-   * List one page of callable plays; grep retains exhaustive matching results.
-   * Use listPlaysPage to retain pagination metadata.
+   * List one page of callable Plays. With grep, the method retains all matching results.
+   * Use listPlaysPage for pagination metadata.
    *
    * Pass `origin: "prebuilt"` for Deepline-managed prebuilts or
    * `origin: "owned"` for org-owned plays.
@@ -5736,8 +5735,7 @@ export class DeeplineClient {
   /**
    * Get the full definition and state of a named play.
    *
-   * Returns the play's revision state (draft, live), recent runs,
-   * sheet processing summary, and database URL.
+   * The response includes revision state (draft or live), recent runs, a summary of sheet processing, and the database URL.
    *
    * @param name - Play name
    * @returns Complete play detail
@@ -5813,10 +5811,10 @@ export class DeeplineClient {
   /**
    * Get a normalized play description suitable for agents and CLIs.
    *
-   * The description includes runnable examples, input/output summaries, clone
-   * guidance, revision state, and latest run metadata when available. Pass
-   * `{ pipeline: true }` to include the compiled pipeline, which can be
-   * hundreds of kilobytes and is otherwise left out.
+   * The description includes runnable examples, input and output summaries, clone guidance, and revision state.
+   * It also includes metadata for the latest run when available.
+   * Set `{ pipeline: true }` to include the compiled pipeline.
+   * The pipeline can be hundreds of kilobytes. The response omits it by default.
    */
   async describePlay(
     name: string,
@@ -5884,8 +5882,7 @@ export class DeeplineClient {
    * Make a play revision live.
    *
    * When `revisionId` is omitted, the current working revision becomes live.
-   * The live version is what executes when the play is run by name without
-   * specifying an explicit revision.
+   * A call by Play name executes the live revision unless the caller specifies another revision.
    *
    * @param name - Play name
    * @param request - Optional explicit revision to make live
@@ -6211,9 +6208,9 @@ export class DeeplineClient {
   }
 
   /**
-   * What Deepline has billed each run so far (customer-visible credits, never
-   * provider spend) and whether any of its charges is still settling — the
-   * same read the dashboard's runs grid shows. `GET /api/v2/runs/billing`.
+   * Read Deepline credits billed to each run and whether charges are still settling.
+   * The response never shows provider spend. The dashboard runs grid uses the same read.
+   * HTTP endpoint: `GET /api/v2/runs/billing`.
    */
   async getRunBilling(runIds: readonly string[]): Promise<RunBillingResult> {
     const params = new URLSearchParams();

package/dist/bundling-sources/sdk/src/play.ts

@@ -192,8 +192,8 @@ export type PlayFetchResponse = PlayAuthoringFetchResponse;
  * A play can be triggered three ways, declared as the third argument to
  * {@link definePlay}:
  * - `webhook` — an inbound HTTP call (with optional legacy HMAC or Standard
- *   Webhooks signature verification);
- * - `cron` — a schedule; or
+ *   Webhooks signature verification).
+ * - `cron` — a schedule.
  * - `sqlListeners` — a **monitor**: the play runs whenever a monitor writes a new
  *   row to its output stream. This is how you build a play "on top of" a monitor
  *   (e.g. run enrichment every time a watched company posts a new job). Each
@@ -1232,8 +1232,8 @@ export class DeeplineContext {
    * Run a named or prebuilt play and wait for its output.
    *
    * This is the high-level SDK equivalent of `ctx.play(name).runSync(input)`.
-   * Inside a play runtime, prefer the in-play `ctx.runPlay(key, playRef, input,
-   * options)` form so the child run is checkpointed under a stable key.
+   * Inside a Play, prefer `ctx.runPlay(key, playRef, input, options)`.
+   * The runtime checkpoints the child run under a stable key.
    *
    * @param playOrRef - Play name or prebuilt/reference object.
    * @param input - JSON input passed to the play.
@@ -1630,7 +1630,10 @@ export function defineInput<TInput>(
 /**
  * Define a play — a composable TypeScript workflow for the Deepline platform.
  *
- * The returned value is both a callable function, invoked by the Deepline runtime with a runtime context, and a named play handle carrying `.run()`, `.versions()`, `.get()` and `.publish()` for remote lifecycle management. Plays are the primary abstraction for repeatable data pipelines and execute durably, with automatic retries and timeouts.
+ * The returned value is both a callable function and a named Play handle.
+ * The Deepline runtime calls the function with a runtime context.
+ * The handle provides `.run()`, `.versions()`, `.get()`, and `.publish()` for remote lifecycle operations.
+ * Plays define repeatable data pipelines. The runtime executes them durably with automatic retries and timeouts.
  *
  * @typeParam TInput - The input type accepted by the play
  * @typeParam TOutput - The return type of the play

package/dist/bundling-sources/sdk/src/release.ts

@@ -202,7 +202,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.405',
+  version: '0.3.407',
   updateSummary:
     'Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.',
   packageCapabilities: {

package/dist/bundling-sources/sdk/src/types.ts

@@ -1181,9 +1181,10 @@ export interface StopPlayRunResult {
   /** True if HITL state or its same-message Slack card still needs retrying. */
   hitlCancellationPending?: boolean;
   /**
-   * True only when the scheduler and the canonical run ledger disagree (for
-   * example a terminal scheduler run whose ledger projection is pending), so
-   * the stop could not be confirmed. Never set for a queued cancellation.
+   * True only when the scheduler and the canonical run ledger disagree and
+   * the server could not confirm the stop.
+   * For example, the scheduler can report a terminal run while the ledger
+   * projection is pending. This field is never true for a queued cancellation.
    */
   staleSchedulerState?: boolean;
   /** Server-side error detail when the stop failed (`state: 'failed'`). */

package/dist/bundling-sources/shared_libs/observability/scheduled-jobs.json

@@ -89,6 +89,45 @@
     "failureAlert": "github_workflow_run",
     "domainReportRequired": true
   },
+  {
+    "id": "github.cloudflare-tunnel-reconciliation",
+    "name": "Cloudflare Tunnel Reconciliation",
+    "workflowEvents": ["schedule"],
+    "scheduler": "github_actions",
+    "cadence": "17 6 * * *",
+    "timezone": "UTC",
+    "source": ".github/workflows/cloudflare-tunnel-reconciliation.yml",
+    "locator": "schedule:",
+    "owner": "platform",
+    "criticality": "maintenance",
+    "purpose": "Report and, only after explicit rollout admission, reclaim exact managed developer tunnel UUIDs from current PR and disconnected-idle evidence while retaining protected, connected, legacy and unknown resources.",
+    "successDefinition": "Every selected UUID has a retained, deleted or unresolved outcome with durable intent and rate-budget evidence; disabled rollout and zero eligible resources are explicit no-ops, and unresolved outcomes fail the pass.",
+    "failureDefinition": "Provider or GitHub authority is unavailable, ownership or idle eligibility is misclassified, deletion remains unresolved, a continuation cannot finish, or immutable intent and outcome evidence is missing.",
+    "startGraceMs": 600000,
+    "runTimeoutMs": 84600000,
+    "failureAlert": "github_workflow_run",
+    "domainReportRequired": true
+  },
+  {
+    "id": "github.cloudflare-tunnel-reconciliation-events",
+    "name": "Cloudflare Tunnel Reconciliation events",
+    "workflowName": "Cloudflare Tunnel Reconciliation",
+    "workflowEvents": ["pull_request_target", "workflow_dispatch"],
+    "scheduler": "github_actions",
+    "cadence": "runAfter trusted same-repository PR close or explicit operator workflow dispatch",
+    "timezone": "UTC",
+    "source": ".github/workflows/cloudflare-tunnel-reconciliation.yml",
+    "locator": "workflow_dispatch:",
+    "owner": "platform",
+    "criticality": "maintenance",
+    "purpose": "Record PR-close and operator tunnel reconciliation separately from the daily cleanup slot, with the same exact ownership, rollout and retained-evidence controls.",
+    "successDefinition": "The admitted event pass completes its exact selected UUIDs with durable outcomes; disabled rollout and no eligible resources are explicit no-ops.",
+    "failureDefinition": "Event authority, provider truth, continuation or retained evidence is unavailable, or an exact selected UUID remains unresolved.",
+    "startGraceMs": 600000,
+    "runTimeoutMs": 84600000,
+    "failureAlert": "github_workflow_run",
+    "domainReportRequired": true
+  },
   {
     "id": "github.cleanup-stale-preview-infrastructure",
     "name": "Cleanup Stale Preview Infrastructure",
@@ -189,9 +228,9 @@
     "locator": "schedule:",
     "owner": "platform",
     "criticality": "maintenance",
-    "purpose": "Reconcile completed PR Preview Machines and release capacity only after the per-app lease fence allows it.",
-    "successDefinition": "Fly inventory is reconciled and eligible terminal/closed PR capacity is released; no eligible app is a valid no-op.",
-    "failureDefinition": "Inventory, lease resolution, scale-down, or empty-app cleanup fails or is ambiguous.",
+    "purpose": "Reconcile completed PR Preview Machines and release capacity only after the per-app lease fence allows it. Its named-estate lane plans every named Preview estate (eval reuse keys, runtime up preview branch lanes, one-off namespaces) with `bun scripts/fly-preview-estate-lifecycle.ts --report --named-reclaim-plan` and, only on a workflow_dispatch with reclaim_named_estates=true, scales at most 8 planned estates per pass (interrupted reclaims first, then reclaimable estates idle 24 h by lease, release or reclaim evidence) to zero through the claimed runtime-preview-namespace.yml scale-to-zero, recording the start and lane app before the seam, retiring the release lane and recording reclaimed history; scheduled passes only report it.",
+    "successDefinition": "Fly inventory is reconciled and eligible terminal/closed PR capacity is released; every named estate is classified without a read failure, and a dispatched named reclaim leaves each target at zero Machines with its release lane retired and reclaimed history written. No eligible app or estate is a valid no-op.",
+    "failureDefinition": "Inventory, lease resolution, scale-down, or empty-app cleanup fails or is ambiguous; a named-estate Fly or authority read fails; a named reclaim is refused inside its claim (active owner, used since discovery, ownership or lane-app refusal) or any role keeps a Machine; or any named reclaim is incomplete (started but its release lane was never retired), which fails every pass until a dispatch finishes it.",
     "startGraceMs": 600000,
     "runTimeoutMs": 3600000,
     "failureAlert": "github_workflow_run",
@@ -207,7 +246,7 @@
     "locator": "schedule:",
     "owner": "platform",
     "criticality": "maintenance",
-    "purpose": "Classify numbered Fly PR Preview estates by PR lifetime and ownership (report only), record organization Machine headroom, and list failed PR-close and post-CI cleanup runs that completed in the previous UTC day.",
+    "purpose": "Classify numbered Fly PR Preview estates by PR lifetime and ownership and named estates by the idle clock (report only), record organization Machine headroom, and list failed PR-close and post-CI cleanup runs that completed in the previous UTC day.",
     "successDefinition": "Every estate is read and classified without a mutation, headroom is recorded, and no event-driven Preview cleanup run that completed in the previous UTC day failed or was left unfinished.",
     "failureDefinition": "Fly, GitHub, or estate-authority reads fail for an estate, or a PR-close or post-CI cleanup run that completed in the previous UTC day failed, or one is still unfinished after six hours.",
     "startGraceMs": 600000,

package/dist/bundling-sources/shared_libs/play-runtime/deployment/fly-machine-lifecycle.ts

@@ -25,6 +25,107 @@ export type FlyMachine = {
 // Fly Machines API expects a Go duration string. Never send bare seconds.
 export const RECEIPT_GATEWAY_DRAIN_TIMEOUT = '300s';
 
+/** One Fly app of a Preview estate, named by the role it plays. */
+export type EstateRoleApp = { role: string; app: string };
+
+const SCALE_TO_ZERO_DELETE_CONCURRENCY = 8;
+// A force delete returns before Fly drops the Machine from its list; one still
+// `destroying` is not a survivor yet. Re-read on a bounded schedule (about a
+// minute in total) before calling it one.
+const SCALE_TO_ZERO_CONFIRM_DELAYS_MS = [
+  2_000, 3_000, 5_000, 5_000, 10_000, 10_000, 10_000, 15_000,
+] as const;
+
+/**
+ * Remove every Machine of a Preview estate, role by role, and prove each role
+ * reached zero before touching the next. Compute only: apps, images, secrets,
+ * the scheduler schema, queue registration and release lanes are the caller's
+ * business and are never touched here.
+ *
+ * The scaler owns worker desired count, so it must be the first role whenever
+ * it is present; otherwise it can replace the last worker between the destroy
+ * and the zero assertion. A role whose Machines survive the destroy is a loud
+ * failure naming the app and Machine IDs, and later roles are left alone so a
+ * retry starts from a known order.
+ */
+export async function scaleEstateRolesToZero(input: {
+  roles: readonly EstateRoleApp[];
+  /**
+   * Machines in the app that still exist, excluding any Fly reports as
+   * `destroyed`; an app that does not exist has none.
+   */
+  listMachines: (app: string) => Promise<Array<{ id: string; state?: string }>>;
+  deleteMachine: (app: string, machineId: string) => Promise<void>;
+  log?: (line: string) => void;
+  sleep?: (ms: number) => Promise<void>;
+}): Promise<Array<EstateRoleApp & { destroyed: string[] }>> {
+  const sleep =
+    input.sleep ??
+    ((ms: number) => new Promise<void>((resolve) => setTimeout(resolve, ms)));
+  if (input.roles.length === 0) {
+    throw new Error('Estate scale-to-zero requires at least one role.');
+  }
+  const scalerIndex = input.roles.findIndex((role) => role.role === 'scaler');
+  if (scalerIndex > 0) {
+    throw new Error(
+      'Estate scale-to-zero must remove the scaler before any other role.',
+    );
+  }
+  const seen = new Set<string>();
+  for (const { role, app } of input.roles) {
+    if (!role.trim() || !app.trim()) {
+      throw new Error('Estate scale-to-zero roles need a role and an app.');
+    }
+    if (seen.has(app)) {
+      throw new Error(`Estate scale-to-zero repeats app ${app}.`);
+    }
+    seen.add(app);
+  }
+
+  const results: Array<EstateRoleApp & { destroyed: string[] }> = [];
+  for (const { role, app } of input.roles) {
+    const machineIds = (await input.listMachines(app))
+      .filter((machine) => machine.state !== 'destroying')
+      .map((machine) => machine.id);
+    for (
+      let offset = 0;
+      offset < machineIds.length;
+      offset += SCALE_TO_ZERO_DELETE_CONCURRENCY
+    ) {
+      await Promise.all(
+        machineIds
+          .slice(offset, offset + SCALE_TO_ZERO_DELETE_CONCURRENCY)
+          .map((machineId) => input.deleteMachine(app, machineId)),
+      );
+    }
+    let remaining = await input.listMachines(app);
+    for (const delayMs of SCALE_TO_ZERO_CONFIRM_DELAYS_MS) {
+      // Only Machines Fly is still tearing down may settle on their own; any
+      // other survivor fails now rather than waiting out the schedule.
+      if (
+        remaining.length === 0 ||
+        remaining.some((machine) => machine.state !== 'destroying')
+      ) {
+        break;
+      }
+      await sleep(delayMs);
+      remaining = await input.listMachines(app);
+    }
+    if (remaining.length > 0) {
+      throw new Error(
+        `Preview ${role} did not scale to zero Machines: ${app} still has ${remaining
+          .map((machine) => `${machine.id}=${machine.state ?? 'unknown'}`)
+          .join(', ')}.`,
+      );
+    }
+    input.log?.(
+      `[estate-scale-to-zero] ${role} ${app}: destroyed ${machineIds.length}, now 0`,
+    );
+    results.push({ role, app, destroyed: machineIds });
+  }
+  return results;
+}
+
 export async function stopAndDestroyCordonedMachines(input: {
   machineIds: string[];
   readMachines: () => FlyMachine[] | Promise<FlyMachine[]>;

package/dist/bundling-sources/shared_libs/play-runtime/play-runs/projection/gateway-adapter.ts

@@ -5,6 +5,7 @@ import {
   dispatchRunLedgerOutboxToLedgerThroughEventWithClientScope,
   type PostgresSchedulerOptions,
   type PostgresSchedulerOutboxDrainResult,
+  type RunLedgerDispatchLaunch,
   type RunLedgerOutboxWithClient,
 } from '../../scheduler-backends/postgres';
 
@@ -17,6 +18,8 @@ export type GatewayRunLedgerProjectionAdapterInput = {
    * against the active outbox lease while retaining supported transport hooks.
    */
   runtimeApi: WorkerRuntimeApiContext;
+  /** Immutable launch already read by the worker that committed the terminal. */
+  launch?: RunLedgerDispatchLaunch;
   withClient: RunLedgerOutboxWithClient;
   schedulerOptions?: Pick<PostgresSchedulerOptions, 'schema'>;
 };
@@ -35,6 +38,7 @@ export function createGatewayRunLedgerProjectionAdapter(
     runId: input.runId,
     runtimeApi: input.runtimeApi,
     tokenAuthority: 'gateway' as const,
+    ...(input.launch ? { dispatchLaunch: input.launch } : {}),
     ...(input.runtimeApi.signal ? { signal: input.runtimeApi.signal } : {}),
   };
   return {

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/absurd-runtime-worker.ts

@@ -872,6 +872,7 @@ function buildDefaultDeps(absurd: Absurd): AbsurdRuntimeWorkerDeps {
       await createRunLedgerProjectionJob({
         outbox: createGatewayRunLedgerProjectionAdapter({
           runId,
+          launch,
           runtimeApi: {
             ...absurdRuntimeApiFromLaunch(launch),
             ...(signal ? { signal } : {}),