deepline 0.3.459 → 0.3.460

package/dist/bundling-sources/sdk/src/release.ts

@@ -205,7 +205,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.459',
+  version: '0.3.460',
   updateSummary: {
     introducedIn: '0.3.90',
     summary:

package/dist/bundling-sources/shared_libs/play-runtime/context.ts

@@ -250,6 +250,7 @@ import {
   parseToolExecuteExactProviderRetryAtMs,
   parseToolExecuteAuthScopeChangedError,
   ToolExecuteAuthScopeChangedError,
+  toolExecuteBillingRetryIdentity,
   type ToolExecuteHttpFailureOutcome,
 } from './tool-execute-retry-policy';
 import {
@@ -18917,11 +18918,9 @@ export class PlayContextImpl implements ScalarPlayAuthoringRuntimeContext {
               ? savedProviderRetryCursor?.legacyProviderOperationForceRefreshIdentities
               : options?.providerOperationForceRefreshIdentities;
           const executionRequestNonce = crypto.randomUUID();
-          // Transport ambiguity must retain the billing identity. An ordinary
-          // (unfenced) call advances it after a definite rejection released
-          // that attempt's reservation. A proven app pacing refusal also
-          // renews fenced billing attribution, keeping its invocation and
-          // provider-operation identities unchanged. Ambiguous deliveries retain it.
+          // Transport ambiguity must retain the billing identity. Only a
+          // definite release of the reservation renews it; see
+          // toolExecuteBillingRetryIdentity.
           let deeplineRequestId = `ctx-tool-${stableDigest(executionRequestNonce).slice(0, 32)}`;
           // The provider operation has a semantic identity independent of
           // the response receipt. Its key is supplied by the caller that owns
@@ -20786,21 +20785,13 @@ export class PlayContextImpl implements ScalarPlayAuthoringRuntimeContext {
                   remainingProviderWaitMs !== null,
                 );
                 logProvider429RetryPhase('retry_sleep_completed');
-                if (
-                  failure.reason === 'provider_pacing_wait' ||
-                  (!usesDurableInvocationFence &&
-                    (failure.backpressureDelayMs !== null ||
-                      (failure.reason === 'rate_limit' &&
-                        failure.knownNotDispatched)))
-                ) {
-                  // These refusals release the prior reservation. App pacing
-                  // does not advance invocationAttempt, so use its own HTTP
-                  // failure count to avoid reusing a released retry reservation.
-                  // Durable result and provider-operation keys stay unchanged.
-                  const billingRetryIdentity =
-                    failure.reason === 'provider_pacing_wait'
-                      ? `app-pacing-refusal:${httpFailureAttempt}`
-                      : `provider-rate-limit-retry:${invocationAttempt}`;
+                const billingRetryIdentity = toolExecuteBillingRetryIdentity({
+                  failure,
+                  executionFenced: usesDurableInvocationFence,
+                  httpFailureAttempt,
+                  invocationAttempt,
+                });
+                if (billingRetryIdentity) {
                   deeplineRequestId = `ctx-tool-${stableDigest(`${executionRequestNonce}:${billingRetryIdentity}`).slice(0, 32)}`;
                 }
                 this.emitExecutionEvent({

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/receipt-gateway.ts

@@ -204,6 +204,65 @@ export type RuntimeGatewayFailureContext = {
   operation?: 'receipt' | 'runtime_sheet' | 'runtime_durability';
 };
 
+export type RuntimeSheetPersistenceDiagnostics = {
+  sqlState?: string;
+  transportCode?: string;
+};
+
+const RUNTIME_SHEET_SQLSTATE_PATTERN = /^[0-9A-Z]{5}$/;
+const RUNTIME_SHEET_TRANSPORT_CODES = new Set([
+  'ECONNABORTED',
+  'ECONNREFUSED',
+  'ECONNRESET',
+  'EHOSTDOWN',
+  'EHOSTUNREACH',
+  'EPIPE',
+  'ENETUNREACH',
+  'ENOTFOUND',
+  'ETIMEDOUT',
+  'EAI_AGAIN',
+]);
+
+export function isRuntimeSheetSqlState(value: unknown): value is string {
+  return (
+    typeof value === 'string' && RUNTIME_SHEET_SQLSTATE_PATTERN.test(value)
+  );
+}
+
+export function isRuntimeSheetTransportCode(value: unknown): value is string {
+  return typeof value === 'string' && RUNTIME_SHEET_TRANSPORT_CODES.has(value);
+}
+
+export function runtimeSheetPersistenceDiagnostics(
+  error: unknown,
+): RuntimeSheetPersistenceDiagnostics {
+  const diagnostics: RuntimeSheetPersistenceDiagnostics = {};
+  const seen = new Set<object>();
+  let current: unknown = error;
+
+  for (let depth = 0; depth < 8; depth += 1) {
+    if (current === null || typeof current !== 'object' || seen.has(current))
+      break;
+    seen.add(current);
+    let code: unknown;
+    let cause: unknown;
+    try {
+      const candidate = current as { code?: unknown; cause?: unknown };
+      code = candidate.code;
+      cause = candidate.cause;
+    } catch {
+      break;
+    }
+    if (!diagnostics.sqlState && isRuntimeSheetSqlState(code))
+      diagnostics.sqlState = code;
+    if (!diagnostics.transportCode && isRuntimeSheetTransportCode(code))
+      diagnostics.transportCode = code;
+    current = cause;
+  }
+
+  return diagnostics;
+}
+
 export function receiptGatewayFailureResponse(
   error: unknown,
   context: RuntimeGatewayFailureContext = {},
@@ -296,6 +355,10 @@ export function receiptGatewayFailureResponse(
     redactLedgerString(error instanceof Error ? error.message : error) ??
     'Unknown runtime gateway failure.';
   const headerDetail = detail.replace(/[\r\n]+/g, ' ').slice(0, 500);
+  const persistenceDiagnostics =
+    context.operation === 'runtime_sheet'
+      ? runtimeSheetPersistenceDiagnostics(error)
+      : {};
   const unavailableDetail = transientServiceUnavailableDetail(error);
   if (unavailableDetail) {
     return receiptGatewayJsonResponse(
@@ -349,6 +412,15 @@ export function receiptGatewayFailureResponse(
       headers: {
         'x-deepline-error-code': failure.code,
         'x-deepline-error-detail': headerDetail,
+        ...(persistenceDiagnostics.sqlState
+          ? { 'x-deepline-error-sqlstate': persistenceDiagnostics.sqlState }
+          : {}),
+        ...(persistenceDiagnostics.transportCode
+          ? {
+              'x-deepline-error-transport-code':
+                persistenceDiagnostics.transportCode,
+            }
+          : {}),
       },
     },
   );

package/dist/bundling-sources/shared_libs/play-runtime/tool-execute-retry-policy.ts

@@ -278,8 +278,44 @@ export type ToolExecuteHttpFailureOutcome = ToolExecuteHttpRetryDecision & {
   chargeRetryBudget: boolean;
   /** The response proves the provider request was never dispatched. */
   knownNotDispatched: boolean;
+  /** The response proves this attempt's billing reservation was released. */
+  billingReservationReleased: boolean;
 };
 
+/**
+ * The billing identity a retry must use instead of its current one, or null to
+ * keep it. Admission never reopens a released reservation, so each renewal
+ * follows a refusal that released one. Invocation and provider-operation
+ * identities never change here; ambiguous deliveries keep their identity.
+ */
+export function toolExecuteBillingRetryIdentity(input: {
+  failure: Pick<
+    ToolExecuteHttpFailureOutcome,
+    | 'reason'
+    | 'backpressureDelayMs'
+    | 'knownNotDispatched'
+    | 'billingReservationReleased'
+  >;
+  executionFenced: boolean;
+  httpFailureAttempt: number;
+  invocationAttempt: number;
+}): string | null {
+  const { failure } = input;
+  // App pacing does not advance the invocation attempt, so it counts failures.
+  if (failure.reason === 'provider_pacing_wait') {
+    return `app-pacing-refusal:${input.httpFailureAttempt}`;
+  }
+  if (input.executionFenced) {
+    return failure.billingReservationReleased
+      ? `transient-retry:${input.httpFailureAttempt}`
+      : null;
+  }
+  return failure.backpressureDelayMs !== null ||
+    (failure.reason === 'rate_limit' && failure.knownNotDispatched)
+    ? `provider-rate-limit-retry:${input.invocationAttempt}`
+    : null;
+}
+
 export type ToolExecuteHttpFailureAttemptTracker = {
   next(input: {
     toolId: string;
@@ -804,11 +840,13 @@ export function classifyToolExecuteHttpFailure(input: {
   // 429; ordinary pacing denials retain their established retry semantics.
   const failureBody = parseJsonObject(input.bodyText);
   const flatPublicDetails = failureBody?.details;
+  const providerOriginFailure =
+    error instanceof ToolExecutionError
+      ? error.origin === 'provider'
+      : failureBody?.failure_origin === 'provider';
   const acceptedOperationNeedsRecovery =
     explicitRetryable === false &&
-    (error instanceof ToolExecutionError
-      ? error.origin === 'provider'
-      : failureBody?.failure_origin === 'provider') &&
+    providerOriginFailure &&
     ((error instanceof ToolExecutionError &&
       error.publicDetails?.operationAccepted === true) ||
       (flatPublicDetails !== null &&
@@ -910,6 +948,16 @@ export function classifyToolExecuteHttpFailure(input: {
       retryDecision.reason !== 'concurrency_backpressure' &&
       retryDecision.reason !== 'runtime_scheduler_capacity' &&
       retryDecision.reason !== 'provider_pacing_wait',
+    // The app reported a provider failure and asked for a retry, so it has
+    // already released that attempt's reservation, and admission never reopens
+    // one. BILLING_UNAVAILABLE may follow an authorization whose response was
+    // lost, and an edge failure or unexplained 5xx proves nothing: all three
+    // keep their identity so a retry recovers the existing reservation.
+    billingReservationReleased:
+      shouldRetry &&
+      retryDecision.reason === 'retry_safe_transient_5xx' &&
+      explicitRetryable === true &&
+      providerOriginFailure,
     // Only explicit pre-dispatch refusals permit automatic replay of an
     // operation that does not declare ordinary transient retry safety.
     knownNotDispatched:

package/dist/bundling-sources/shared_libs/play-runtime/tool-http-errors.ts

@@ -323,7 +323,11 @@ function formatHardBillingFailureMessage(input: {
     getStringField(input.billing, 'message') ??
     getStringField(input.billing, 'error') ??
     'Deepline billing cap exceeded.';
-  const headline = 'Deepline billing cap exceeded.';
+  // A closed reservation is not a spending limit; the customer has nothing to raise.
+  const headline =
+    code === 'BILLING_RESERVATION_NOT_OPEN'
+      ? 'Deepline billing reservation closed.'
+      : 'Deepline billing cap exceeded.';
   return `tool ${input.toolId} ${input.status} attempt ${input.attempt}/${input.maxAttempts}: ${headline} Run halted before marking remaining rows processed. ${code ? `code=${code}. ` : ''}${message}`;
 }
 

package/dist/cli/{auth-2RM2ZC6E.mjs → auth-HKA6ZVHQ.mjs}

@@ -13,13 +13,13 @@ import {
   reportSetupCompleted,
   resolvePendingAuthClaimForResume,
   statusBannerLine
-} from "./chunk-ZAJAGMXA.mjs";
-import "./chunk-Y35FCRLQ.mjs";
-import "./chunk-7AGGDRNR.mjs";
+} from "./chunk-XAYO3Q2X.mjs";
+import "./chunk-526R2HON.mjs";
+import "./chunk-OMM54B3X.mjs";
 import "./chunk-4QF2K7TM.mjs";
 import "./chunk-DLIRSHV6.mjs";
 import "./chunk-HBL4PM5Q.mjs";
-import "./chunk-OQW2YP3P.mjs";
+import "./chunk-EJGBLXDZ.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";
 export {

package/dist/cli/auth-VDOCNR7H.js

@@ -0,0 +1,40 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _chunk2XHWOQF4js = require('./chunk-2XHWOQF4.js');
+require('./chunk-BHGII2D6.js');
+require('./chunk-QJLKYYPX.js');
+require('./chunk-ALJJRZNJ.js');
+require('./chunk-XNYIZMNQ.js');
+require('./chunk-DIAWYWT5.js');
+require('./chunk-RBTTUYZZ.js');
+require('./chunk-OG64RBAC.js');
+require('./chunk-COGTRVWW.js');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.EXIT_WORKSPACE_MISMATCH = _chunk2XHWOQF4js.EXIT_WORKSPACE_MISMATCH; exports.authStatusLine = _chunk2XHWOQF4js.authStatusLine; exports.clearPendingClaim = _chunk2XHWOQF4js.clearPendingClaim; exports.clearSatisfiedPendingClaim = _chunk2XHWOQF4js.clearSatisfiedPendingClaim; exports.handleRegister = _chunk2XHWOQF4js.handleRegister; exports.handleStatus = _chunk2XHWOQF4js.handleStatus; exports.handleWait = _chunk2XHWOQF4js.handleWait; exports.httpJson = _chunk2XHWOQF4js.httpJson; exports.readPendingAuthClaim = _chunk2XHWOQF4js.readPendingAuthClaim; exports.readStatusBanner = _chunk2XHWOQF4js.readStatusBanner; exports.registerAuthCommands = _chunk2XHWOQF4js.registerAuthCommands; exports.reportSetupCompleted = _chunk2XHWOQF4js.reportSetupCompleted; exports.resolvePendingAuthClaimForResume = _chunk2XHWOQF4js.resolvePendingAuthClaimForResume; exports.statusBannerLine = _chunk2XHWOQF4js.statusBannerLine;

package/dist/cli/{billing-FYF2GJ25.mjs → billing-26G44S5N.mjs}

@@ -2,7 +2,7 @@ import {
   DeeplineClient,
   iterateCursorPages,
   requireBillingIdempotencyKey
-} from "./chunk-MNNMPS6J.mjs";
+} from "./chunk-ZR2RLI4O.mjs";
 import "./chunk-L2VKAASU.mjs";
 import "./chunk-FAG4DFUC.mjs";
 import "./chunk-EIMG75BT.mjs";
@@ -13,8 +13,8 @@ import {
   openInBrowser,
   printCommandEnvelope,
   shouldEmitJson
-} from "./chunk-Y35FCRLQ.mjs";
-import "./chunk-7AGGDRNR.mjs";
+} from "./chunk-526R2HON.mjs";
+import "./chunk-OMM54B3X.mjs";
 import {
   AuthError,
   ConfigError
@@ -23,7 +23,7 @@ import "./chunk-DLIRSHV6.mjs";
 import {
   DeeplineError
 } from "./chunk-HBL4PM5Q.mjs";
-import "./chunk-OQW2YP3P.mjs";
+import "./chunk-EJGBLXDZ.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";