deepline 0.3.462 → 0.3.463

package/dist/bundling-sources/sdk/src/release.ts

@@ -205,7 +205,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.462',
+  version: '0.3.463',
   updateSummary: {
     introducedIn: '0.3.90',
     summary:

package/dist/bundling-sources/shared_libs/monitors/billing/tamradar.ts

@@ -106,17 +106,25 @@ export const TAMRADAR_RADAR_TYPE_PRICING = {
     providerCostUsd: 0.045,
     unitLabel: 'finding',
   },
-  // DORMANT (disabled from deployment — see TAMRADAR_DISABLED_RADAR_TYPES).
-  // Kept for reversibility: $150/mo resell-tier subscription pricing is retained
-  // so the type can be re-enabled per-partner by removing it from the disabled
-  // set. It is excluded from the deployable enum + public pricing surface.
+  // Source: TAMRadar per-update pricing (confidential/internal), confirmed
+  // per result with TAMRadar on 2026-11-03 (it was a $150/mo resell tier).
+  // https://docs.tamradar.com/webhooks/industry/funding-rounds
   industry_funding_rounds: {
     capability: 'industry_radar',
     label: 'Industry funding rounds',
-    mode: 'monitor_subscription',
-    providerCostUsd: 150,
-    unitLabel: 'month',
-    periodDays: 30,
+    mode: 'monitor_usage',
+    providerCostUsd: 0.1,
+    unitLabel: 'finding',
+  },
+  // Source: TAMRadar per-update pricing (confidential/internal), confirmed
+  // per result with TAMRadar on 2026-11-03 (it was a $250/mo resell tier).
+  // https://docs.tamradar.com/webhooks/industry/new-companies
+  industry_new_companies: {
+    capability: 'industry_radar',
+    label: 'Industry new companies',
+    mode: 'monitor_usage',
+    providerCostUsd: 0.15,
+    unitLabel: 'finding',
   },
 } as const;
 
@@ -132,9 +140,7 @@ export function isTamradarRadarType(value: string): value is TamradarRadarType {
 // `radar_type` enum (so they never appear in `monitors tools`/CLI and payload
 // validation rejects them) and from the public pricing surface — the deploy
 // path surfaces a clear "radar type not available for deployment" error rather
-// than a bare enum mismatch. Flipping a type back on is a one-line delete here
-// (the two resell-tier types below carry resell rights and may be enabled
-// per-partner).
+// than a bare enum mismatch. Flipping a type back on is a one-line delete here.
 //
 // IMPORTANT (guardrail): these reason strings are CUSTOMER-VISIBLE — they flow
 // into the deploy-rejection `suggestion` via `tamradarDisabledRadarTypeReason`.
@@ -144,12 +150,6 @@ export function isTamradarRadarType(value: string): value is TamradarRadarType {
 export const TAMRADAR_DISABLED_RADAR_TYPES: Record<string, string> = {
   company_social_posts_cxo:
     'This Deepline radar type is not available for self-serve deploy.',
-  // Internal note (NOT customer-visible): $250/mo resell-tier subscription.
-  industry_new_companies:
-    'This Deepline radar type is not available for self-serve deploy.',
-  // Internal note (NOT customer-visible): $150/mo resell-tier subscription.
-  industry_funding_rounds:
-    'This Deepline radar type is not available for self-serve deploy.',
 };
 
 export function isTamradarDisabledRadarType(value: string): boolean {

package/dist/bundling-sources/shared_libs/monitors/provider-monitor-batch-operation.ts

@@ -521,6 +521,8 @@ export const PROVIDER_MONITOR_BATCH_CHANGE_BUCKETS: Readonly<
   provider_create_adjudicated: 'created',
   provider_create_adopted_by_operator: 'created',
   named_batch_create: 'created',
+  // A named Batch dry run's planned create, counted as the create it plans.
+  dry_run_create: 'created',
   named_batch_start: 'created',
   provider_repaired: 'created',
   fleet_converged: 'created',

package/dist/bundling-sources/shared_libs/monitors/provider-monitor-upstream-identity.ts

@@ -31,6 +31,17 @@ type ProviderMonitorUpstreamIdentityDefinition = {
    * treating different authored filters as an exact duplicate.
    */
   allowDistinctConfigurations?: boolean;
+  /**
+   * Scope values whose provider resource has no configuration of its own: a
+   * global feed delivers the same findings whatever else the payload says.
+   * Inside these scopes every other payload field (such as `updates_since`)
+   * is left out of the claim, so a second monitor for the same feed is an
+   * exact duplicate even when its other fields differ.
+   */
+  configurationFreeScopes?: readonly {
+    field: string;
+    values: readonly string[];
+  }[];
   /**
    * Payload fields that never change which findings the provider resource
    * delivers. `updates_since` only sets how far back the first delivery
@@ -58,6 +69,14 @@ const PROVIDER_MONITOR_UPSTREAM_IDENTITY_FIELDS = {
       { name: 'industry', runtimePayloadAliases: ['keyword'] },
     ],
     allowDistinctConfigurations: true,
+    // TamRadar's funding-round and new-company radars take no filter, so one
+    // per workspace is the whole feed.
+    configurationFreeScopes: [
+      {
+        field: 'radar_type',
+        values: ['industry_funding_rounds', 'industry_new_companies'],
+      },
+    ],
     nonConfigurationFields: ['updates_since'],
   },
 } as const satisfies Record<string, ProviderMonitorUpstreamIdentityDefinition>;
@@ -167,10 +186,18 @@ export function providerMonitorUpstreamIdentityClaimKey(
     return scopeKey;
   }
 
-  const definition =
+  const definition: ProviderMonitorUpstreamIdentityDefinition =
     PROVIDER_MONITOR_UPSTREAM_IDENTITY_FIELDS[
       signature.tool as keyof typeof PROVIDER_MONITOR_UPSTREAM_IDENTITY_FIELDS
     ];
+  if (
+    definition.configurationFreeScopes?.some((scope) => {
+      const value = signature.key[scope.field];
+      return typeof value === 'string' && scope.values.includes(value);
+    })
+  ) {
+    return scopeKey;
+  }
   const scopeAndAliases = new Set<string>(
     definition.fields.flatMap((field) => [
       field.name,

package/dist/bundling-sources/shared_libs/play-runtime/tool-execute-retry-policy.ts

@@ -399,22 +399,25 @@ function isConcurrencyBackpressureResponse(input: {
   );
 }
 
-function isCredentialDispatchRefusalResponse(input: {
+function isPreDispatchRateRefusalResponse(input: {
   status: number;
   bodyText: string;
   executionFenced?: boolean;
 }): boolean {
-  // Fenced gateway attempts have their own qualified redelivery contract.
-  // This exemption is only for the ordinary execute route's released charge.
-  if (input.status !== 429 || input.executionFenced === true) return false;
+  if (input.status !== 429) return false;
   const body = parseJsonObject(input.bodyText);
   return (
     body?.code === 'RATE_LIMIT' &&
     body.failure_origin === 'deepline_rate_limit' &&
     body.error_category === 'rate_limit' &&
-    body.rate_limit_bucket_scope === 'credential_shared' &&
-    body.rate_limit_kind === 'requests_per_second' &&
-    body.provider_request_dispatched === false
+    body.provider_request_dispatched === false &&
+    // Workspace tool admission precedes billing for both execute paths.
+    // Credential refusals release a charge and retain their unfenced contract.
+    ((body.rate_limit_bucket_scope === 'customer_tool' &&
+      body.rate_limit_kind === 'requests_per_minute') ||
+      (input.executionFenced !== true &&
+        body.rate_limit_bucket_scope === 'credential_shared' &&
+        body.rate_limit_kind === 'requests_per_second'))
   );
 }
 
@@ -768,7 +771,7 @@ export function classifyToolExecuteHttpFailure(input: {
   const concurrencyBackpressure = isConcurrencyBackpressureResponse(input);
   const runtimeSchedulerCapacity = isRuntimeSchedulerCapacityResponse(input);
   const providerPacingWait = isProviderPacingWaitResponse(input);
-  const credentialDispatchRefusal = isCredentialDispatchRefusalResponse(input);
+  const preDispatchRateRefusal = isPreDispatchRateRefusalResponse(input);
   const edgeGatewayFailure = isEdgeGatewayFailureResponse(input);
   const executionFenced = input.executionFenced === true;
   const explicitRetryable = readExplicitToolHttpRetryability(input);
@@ -987,6 +990,6 @@ export function classifyToolExecuteHttpFailure(input: {
       runtimeSchedulerCapacity ||
       concurrencyBackpressure ||
       providerPacingWait ||
-      credentialDispatchRefusal,
+      preDispatchRateRefusal,
   };
 }

package/dist/bundling-sources/shared_libs/play-runtime/tool-result.ts

@@ -1276,10 +1276,10 @@ function buildTargets(
   const declaredTargetPaths = new Map<string, readonly string[]>();
   const semanticStatusTargets = new Set<string>();
   for (const [target, descriptor] of Object.entries(extractors ?? {})) {
-    // Normal scalar getters are total: a declared but absent value reads null.
-    // Semantic status getters stay absent when their provider status did not
-    // resolve; manufacturing an "unknown" status would blur no signal with an
-    // observed provider verdict.
+    // Declared getters are total: a declared but absent value reads null.
+    // Semantic status getters never borrow a sibling key or manufacture an
+    // "unknown" status, which would blur no signal with an observed provider
+    // verdict; an unresolved status reads null like any other miss.
     const isSemanticStatus =
       descriptor.emailStatus !== undefined ||
       descriptor.transforms?.some((transform) =>
@@ -1288,7 +1288,7 @@ function buildTargets(
         ),
       ) === true;
     if (isSemanticStatus) semanticStatusTargets.add(target);
-    else declaredTargetPaths.set(target, descriptor.paths);
+    declaredTargetPaths.set(target, descriptor.paths);
     const emailStatusTarget = buildEmailStatusTarget(result, descriptor);
     if (emailStatusTarget) {
       targets[target] = emailStatusTarget;
@@ -1448,8 +1448,18 @@ function applySerializedTargetValues(
   targetValues: Record<string, ToolResultTargetMetadata> | undefined,
 ): ToolExecuteResult {
   if (!targetValues || Object.keys(targetValues).length === 0) return result;
-  result._metadata.targets = targetValues;
-  result.extractedValues = buildExtractedAccessors(targetValues);
+  // Receipts saved before status getters were total omit an unresolved
+  // status. Keep every declared getter callable on replay: a target the
+  // receipt did not save reads null, never a value recomputed here.
+  const targets: Record<string, ToolResultTargetMetadata> = {};
+  for (const [target, rebuilt] of Object.entries(result._metadata.targets)) {
+    if (!Object.prototype.hasOwnProperty.call(targetValues, target)) {
+      targets[target] = { path: rebuilt.path, value: null };
+    }
+  }
+  Object.assign(targets, targetValues);
+  result._metadata.targets = targets;
+  result.extractedValues = buildExtractedAccessors(targets);
   return result;
 }
 

package/dist/cli/{auth-JDLEY7VU.mjs → auth-LZLBR4C3.mjs}

@@ -13,14 +13,14 @@ import {
   reportSetupCompleted,
   resolvePendingAuthClaimForResume,
   statusBannerLine
-} from "./chunk-6NNVJDVR.mjs";
-import "./chunk-NHRWZPWZ.mjs";
-import "./chunk-D6DXOUTO.mjs";
-import "./chunk-6RNQGWFD.mjs";
+} from "./chunk-DHXCBITQ.mjs";
+import "./chunk-WUMIYOXQ.mjs";
+import "./chunk-F2RHUPVH.mjs";
+import "./chunk-I624J4H5.mjs";
 import "./chunk-4QF2K7TM.mjs";
 import "./chunk-DLIRSHV6.mjs";
 import "./chunk-HBL4PM5Q.mjs";
-import "./chunk-XZAFIOUQ.mjs";
+import "./chunk-XDWS2JJT.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";
 export {

package/dist/cli/auth-XPGKBJKB.js

@@ -0,0 +1,41 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _chunk2NISBXMNjs = require('./chunk-2NISBXMN.js');
+require('./chunk-5LHXOIPT.js');
+require('./chunk-BGNWI3KH.js');
+require('./chunk-YGGIZ3VT.js');
+require('./chunk-ALJJRZNJ.js');
+require('./chunk-XNYIZMNQ.js');
+require('./chunk-DIAWYWT5.js');
+require('./chunk-3BOIOCNX.js');
+require('./chunk-OG64RBAC.js');
+require('./chunk-COGTRVWW.js');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.EXIT_WORKSPACE_MISMATCH = _chunk2NISBXMNjs.EXIT_WORKSPACE_MISMATCH; exports.authStatusLine = _chunk2NISBXMNjs.authStatusLine; exports.clearPendingClaim = _chunk2NISBXMNjs.clearPendingClaim; exports.clearSatisfiedPendingClaim = _chunk2NISBXMNjs.clearSatisfiedPendingClaim; exports.handleRegister = _chunk2NISBXMNjs.handleRegister; exports.handleStatus = _chunk2NISBXMNjs.handleStatus; exports.handleWait = _chunk2NISBXMNjs.handleWait; exports.httpJson = _chunk2NISBXMNjs.httpJson; exports.readPendingAuthClaim = _chunk2NISBXMNjs.readPendingAuthClaim; exports.readStatusBanner = _chunk2NISBXMNjs.readStatusBanner; exports.registerAuthCommands = _chunk2NISBXMNjs.registerAuthCommands; exports.reportSetupCompleted = _chunk2NISBXMNjs.reportSetupCompleted; exports.resolvePendingAuthClaimForResume = _chunk2NISBXMNjs.resolvePendingAuthClaimForResume; exports.statusBannerLine = _chunk2NISBXMNjs.statusBannerLine;