deepline 0.3.448 → 0.3.449

package/dist/bundling-sources/sdk/src/release.ts

@@ -205,7 +205,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.448',
+  version: '0.3.449',
   updateSummary: {
     introducedIn: '0.3.90',
     summary:

package/dist/bundling-sources/shared_libs/play-runtime/deployment/commands/roll-execution-relay.ts

@@ -24,6 +24,7 @@ import {
 } from '../fly-gateway-route-probe';
 import {
   gatewayMachineConfig,
+  productionGatewayImageEnsureArgs,
   productionGatewayTopology,
   RUNTIME_GATEWAY_AUTOSCALED_METADATA_KEY,
   RUNTIME_TOPOLOGY,
@@ -307,19 +308,7 @@ async function assertExactReady(machineId: string): Promise<void> {
   });
 }
 async function prepare(sha: string): Promise<void> {
-  run('bun', [
-    'scripts/ensure-runtime-image.ts',
-    '--kind',
-    'gateway',
-    '--app',
-    app,
-    '--config',
-    RUNTIME_TOPOLOGY.production.components.executionRelay.image.config,
-    '--dockerfile',
-    RUNTIME_TOPOLOGY.production.components.executionRelay.image.dockerfile,
-    '--sha',
-    sha,
-  ]);
+  run('bun', productionGatewayImageEnsureArgs('executionRelay', sha));
   const client = new FlyMachinesClient(app, requireFlyToken(), fetch);
   const initial = await inventory(client);
   const existing = candidates(initial, sha);

package/dist/bundling-sources/shared_libs/play-runtime/deployment/commands/roll-receipt-gateway.ts

@@ -35,6 +35,7 @@ import {
 import { reconcileGatewaySourceDrain } from '../../deployment/runtime-gateway-drain';
 import {
   gatewayMachineConfig,
+  productionGatewayImageEnsureArgs,
   productionGatewayTopology,
   RUNTIME_TOPOLOGY,
 } from '../../deployment/runtime-topology';
@@ -42,9 +43,6 @@ import {
 const topology = productionGatewayTopology('receipt');
 const fleet = {
   app: RUNTIME_TOPOLOGY.production.components.receiptGateway.app,
-  config: RUNTIME_TOPOLOGY.production.components.receiptGateway.image.config,
-  dockerfile:
-    RUNTIME_TOPOLOGY.production.components.receiptGateway.image.dockerfile,
   minimumMachines: topology.minimumMachines,
   primaryRegion: topology.region,
   processGroup: topology.processGroup,
@@ -886,19 +884,7 @@ async function prepare(operationId: string): Promise<void> {
       return;
     }
   }
-  run('bun', [
-    'scripts/ensure-runtime-image.ts',
-    '--kind',
-    'gateway',
-    '--app',
-    fleet.app,
-    '--config',
-    fleet.config,
-    '--dockerfile',
-    fleet.dockerfile,
-    '--sha',
-    operationId,
-  ]);
+  run('bun', productionGatewayImageEnsureArgs('receiptGateway', operationId));
   const blue = serving();
   if (existing.length > 0) {
     assertCandidateSourceGeneration({ candidates: existing, serving: blue });

package/dist/bundling-sources/shared_libs/play-runtime/deployment/commands/runtime-topology.ts

@@ -20,7 +20,12 @@ import {
   readFileSync,
   writeFileSync,
 } from 'node:fs';
-import { productionGatewayTopology } from '../../deployment/runtime-topology';
+import {
+  productionGatewayImageEnsureArgs,
+  productionGatewayTopology,
+  RUNTIME_TOPOLOGY,
+  type ProductionGatewayComponent,
+} from '../../deployment/runtime-topology';
 import {
   shouldCreateDetachedProcessGroup,
   terminateChildProcessTree,
@@ -499,6 +504,23 @@ export async function prepareProductionTopologyPlan(
       description: 'Reconcile declared Fly apps',
     });
     await stageSecrets({ ...input, environment, command: input.command });
+    // One sequential publish, so the parallel prepares below find their
+    // release tags and never push the same image concurrently.
+    const gatewayImageComponents: ProductionGatewayComponent[] = [
+      'receiptGateway',
+      'executionRelay',
+    ];
+    for (const component of gatewayImageComponents) {
+      await input.command({
+        command: 'bun',
+        args: productionGatewayImageEnsureArgs(
+          component,
+          input.plan.releaseSha,
+        ),
+        environment,
+        description: `Ensure runtime gateway image for ${RUNTIME_TOPOLOGY.production.components[component].app}`,
+      });
+    }
     const executionRelayArgs = [
       'scripts/roll-execution-relay.ts',
       'prepare',

package/dist/bundling-sources/shared_libs/play-runtime/deployment/runtime-topology.ts

@@ -144,6 +144,11 @@ const previewGateways: Record<RuntimeGatewayRole, GatewayTopology> = {
   },
 };
 
+// Both gateways run the same image. Concurrent pushes of one Depot build to
+// two repos left a shared blob upload hanging (2026-10-27 releases), so the
+// image is built once into this repo and re-tagged into the other.
+const productionGatewayImageCacheApp = productionGateways.receipt.app;
+
 export const RUNTIME_TOPOLOGY = {
   production: {
     components: {
@@ -153,6 +158,7 @@ export const RUNTIME_TOPOLOGY = {
         publicIngress: true,
         image: {
           kind: 'gateway',
+          cacheApp: productionGatewayImageCacheApp,
           config: 'deploy/fly/runtime-worker/receipt-gateway.toml',
           dockerfile: 'deploy/fly/runtime-worker/receipt-gateway.Dockerfile',
         },
@@ -163,6 +169,7 @@ export const RUNTIME_TOPOLOGY = {
         publicIngress: true,
         image: {
           kind: 'gateway',
+          cacheApp: productionGatewayImageCacheApp,
           config: 'deploy/fly/runtime-worker/execution-relay.toml',
           dockerfile: 'deploy/fly/runtime-worker/receipt-gateway.Dockerfile',
         },
@@ -253,16 +260,33 @@ export function productionSingletonComponents(): SingletonComponent[] {
   );
 }
 
-export function assertRuntimeTopologyInvariants(): void {
-  const components = Object.values(
-    RUNTIME_TOPOLOGY.production.components,
-  ) as Array<{ app: string; release: string; publicIngress: boolean }>;
+export function assertRuntimeTopologyInvariants(
+  declared: Record<string, unknown> = RUNTIME_TOPOLOGY.production.components,
+): void {
+  const components = Object.values(declared) as Array<{
+    app: string;
+    release: string;
+    publicIngress: boolean;
+    image?: { kind: string; cacheApp?: string };
+  }>;
   const apps = components.map((component) => component.app);
   if (new Set(apps).size !== apps.length) {
     throw new Error(
       'Every production runtime component requires a unique app.',
     );
   }
+  const imageRepos = new Map<string, string>();
+  for (const { app, image } of components) {
+    if (!image) continue;
+    const repo = image.cacheApp ?? app;
+    const declaredRepo = imageRepos.get(image.kind);
+    if (declaredRepo !== undefined && declaredRepo !== repo) {
+      throw new Error(
+        `Production components with image kind ${image.kind} must share one cacheApp so the image is built once; found ${declaredRepo} and ${repo}.`,
+      );
+    }
+    imageRepos.set(image.kind, repo);
+  }
   for (const component of components) {
     if (component.release === 'machine-set' && !component.publicIngress) {
       throw new Error(
@@ -279,6 +303,30 @@ export function assertRuntimeTopologyInvariants(): void {
 
 assertRuntimeTopologyInvariants();
 
+export type ProductionGatewayComponent = 'receiptGateway' | 'executionRelay';
+
+export function productionGatewayImageEnsureArgs(
+  component: ProductionGatewayComponent,
+  sha: string,
+): string[] {
+  const { app, image } = RUNTIME_TOPOLOGY.production.components[component];
+  return [
+    'scripts/ensure-runtime-image.ts',
+    '--kind',
+    image.kind,
+    '--app',
+    app,
+    '--cache-app',
+    image.cacheApp,
+    '--config',
+    image.config,
+    '--dockerfile',
+    image.dockerfile,
+    '--sha',
+    sha,
+  ];
+}
+
 export function runtimeGatewayTopology(
   profile: RuntimeGatewayTopologyProfile,
   role: RuntimeGatewayRole,

package/dist/bundling-sources/shared_libs/product-notifications/catalog.ts

@@ -98,7 +98,7 @@ type ProductNotificationRuleBase = Omit<
 >;
 
 type ProductNotificationRuleDefinition = {
-  default?: { ruleKey: string; groupKey: string };
+  default?: { ruleKey: string; groupKey: string; enabled?: boolean };
   eligible?: (payload: ProductNotificationFacts) => boolean;
   conditionSubject?: 'workspace';
   rearm?: {
@@ -984,6 +984,7 @@ const PRODUCT_NOTIFICATION_TYPE_REGISTRY = [
       default: {
         ruleKey: 'default.automated_play_failed',
         groupKey: 'default',
+        enabled: false,
       },
       create: (input, base) => {
         const settings = input.playFailure ?? DEFAULT_PLAY_FAILURE_SETTINGS;
@@ -1174,11 +1175,14 @@ export const PRODUCT_NOTIFICATION_DEFAULT_RULES =
       ?.default;
     return defaultRule
       ? [
-          createProductNotificationRule({
-            ...defaultRule,
-            notificationType:
-              registration.id as ConfigurableProductNotificationType,
-          }),
+          {
+            ...createProductNotificationRule({
+              ...defaultRule,
+              notificationType:
+                registration.id as ConfigurableProductNotificationType,
+            }),
+            enabled: defaultRule.enabled ?? true,
+          },
         ]
       : [];
   });

package/dist/bundling-sources/shared_libs/product-notifications/default-policy.ts

@@ -20,7 +20,7 @@ import {
  * they create sparse copy-on-write overrides.
  */
 export const CURRENT_PRODUCT_NOTIFICATION_DEFAULT_POLICY = {
-  version: 12,
+  version: 13,
   groups: [
     {
       groupKey: 'default',

package/dist/cli/auth-NVVEYCNF.js

@@ -0,0 +1,40 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _chunkNZEKP7IEjs = require('./chunk-NZEKP7IE.js');
+require('./chunk-MPMLO7CZ.js');
+require('./chunk-HDGN7HC5.js');
+require('./chunk-ALJJRZNJ.js');
+require('./chunk-XNYIZMNQ.js');
+require('./chunk-DIAWYWT5.js');
+require('./chunk-UKEINGF3.js');
+require('./chunk-OG64RBAC.js');
+require('./chunk-COGTRVWW.js');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.EXIT_WORKSPACE_MISMATCH = _chunkNZEKP7IEjs.EXIT_WORKSPACE_MISMATCH; exports.authStatusLine = _chunkNZEKP7IEjs.authStatusLine; exports.clearPendingClaim = _chunkNZEKP7IEjs.clearPendingClaim; exports.clearSatisfiedPendingClaim = _chunkNZEKP7IEjs.clearSatisfiedPendingClaim; exports.handleRegister = _chunkNZEKP7IEjs.handleRegister; exports.handleStatus = _chunkNZEKP7IEjs.handleStatus; exports.handleWait = _chunkNZEKP7IEjs.handleWait; exports.httpJson = _chunkNZEKP7IEjs.httpJson; exports.readPendingAuthClaim = _chunkNZEKP7IEjs.readPendingAuthClaim; exports.readStatusBanner = _chunkNZEKP7IEjs.readStatusBanner; exports.registerAuthCommands = _chunkNZEKP7IEjs.registerAuthCommands; exports.reportSetupCompleted = _chunkNZEKP7IEjs.reportSetupCompleted; exports.resolvePendingAuthClaimForResume = _chunkNZEKP7IEjs.resolvePendingAuthClaimForResume; exports.statusBannerLine = _chunkNZEKP7IEjs.statusBannerLine;

package/dist/cli/{auth-HAJKEPAE.mjs → auth-YK26H6J4.mjs}

@@ -13,13 +13,13 @@ import {
   reportSetupCompleted,
   resolvePendingAuthClaimForResume,
   statusBannerLine
-} from "./chunk-PVG52FJA.mjs";
-import "./chunk-XM6A4V77.mjs";
-import "./chunk-2BKTT44A.mjs";
+} from "./chunk-L4RSMA4V.mjs";
+import "./chunk-3653HHHS.mjs";
+import "./chunk-56EULWUU.mjs";
 import "./chunk-4QF2K7TM.mjs";
 import "./chunk-DLIRSHV6.mjs";
 import "./chunk-HBL4PM5Q.mjs";
-import "./chunk-YTWQ4G4P.mjs";
+import "./chunk-BZPSFI7J.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";
 export {