deepline 0.3.47 → 0.3.49

package/dist/bundling-sources/sdk/src/errors.ts

@@ -15,6 +15,7 @@ import {
   type ToolExecutionErrorOptions,
   type ToolExecutionNetworkKind,
   type ToolExecutionNetworkScope,
+  type ToolExecutionPublicDetails,
 } from '../../shared_libs/plays/tool-execution-error';
 
 export {
@@ -33,6 +34,7 @@ export {
   type ToolExecutionErrorOptions,
   type ToolExecutionNetworkKind,
   type ToolExecutionNetworkScope,
+  type ToolExecutionPublicDetails,
 } from '../../shared_libs/plays/tool-execution-error';
 
 /**
@@ -145,6 +147,8 @@ export class ToolRateLimitError extends RateLimitError {
   readonly networkKind: ToolExecutionError['networkKind'];
   /** Network boundary that failed, or `null` for non-network failures. */
   readonly networkScope: ToolExecutionError['networkScope'];
+  /** Explicitly allowlisted diagnostics safe for SDK callers. */
+  readonly publicDetails: ToolExecutionError['publicDetails'];
 
   /** Constructed by the SDK after a structured tool HTTP 429. */
   constructor(message: string, options: ToolExecutionErrorOptions) {
@@ -161,6 +165,7 @@ export class ToolRateLimitError extends RateLimitError {
     this.requestId = options.requestId;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     this.details = options.details;
     brandAsToolExecutionError(this);
     if (isProviderTransientFailure(this)) {

package/dist/bundling-sources/sdk/src/index.ts

@@ -145,6 +145,7 @@ export type {
   ToolExecutionErrorOptions,
   ToolExecutionNetworkKind,
   ToolExecutionNetworkScope,
+  ToolExecutionPublicDetails,
 } from './errors.js';
 
 // ——— Config ———

package/dist/bundling-sources/sdk/src/release.ts

@@ -199,7 +199,7 @@ export const SDK_RELEASE = {
   // available at toolResponse.rawV2 while toolResponse.raw and all declared
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
-  version: '0.3.47',
+  version: '0.3.49',
   updateSummary:
     'Automatic CLI updates are now enabled by default. To opt out, run `deepline settings autoupdate off`; use `deepline settings autoupdate on` to re-enable updates or `deepline settings autoupdate pin <version>` to hold an exact release. This release also adds raw-v2 tool responses at toolResponse.rawV2 while preserving existing toolResponse.raw and declared getters.',
   packageCapabilities: {

package/dist/bundling-sources/shared_libs/play-runtime/tool-http-errors.ts

@@ -103,6 +103,7 @@ class StructuredToolHttpError extends ToolExecutionError {
       retryAfterMs: input.options.retryAfterMs ?? null,
       networkKind: input.options.networkKind ?? null,
       networkScope: input.options.networkScope ?? null,
+      publicDetails: input.options.publicDetails ?? null,
     });
     this.billing = input.billing;
     this.status = input.status;
@@ -447,6 +448,7 @@ export function normalizeToolHttpErrorMessage(input: {
       (origin === 'provider' && category === 'network'
         ? 'deepline_to_provider'
         : null),
+    publicDetails: hydratedFailure?.publicDetails ?? null,
   };
   const billing = getObjectField(parsed, 'billing');
   if (isInsufficientCreditsBilling(billing)) {

package/dist/bundling-sources/shared_libs/plays/tool-execution-error.ts

@@ -84,6 +84,17 @@ export type ToolExecutionNetworkScope =
   | 'runtime_to_deepline'
   | 'deepline_to_provider';
 
+/**
+ * Bounded, primitive-only diagnostics explicitly approved for customers.
+ * Raw provider bodies, credentials, prompts, stacks, and causes never belong
+ * in this shared API/SDK/Play contract.
+ *
+ * @sdkReference errors 063
+ */
+export type ToolExecutionPublicDetails = Readonly<
+  Record<string, string | number | boolean | null>
+>;
+
 /**
  * Portable version-1 `tool_error` payload.
  *
@@ -120,6 +131,8 @@ export type ToolExecutionFailureV1 = {
   networkKind: ToolExecutionNetworkKind | null;
   /** Network boundary that failed, or `null`. */
   networkScope: ToolExecutionNetworkScope | null;
+  /** Explicitly allowlisted customer diagnostics, when present. */
+  publicDetails?: ToolExecutionPublicDetails | null;
 };
 
 /**
@@ -265,6 +278,8 @@ export class ToolExecutionError extends DeeplineError {
   readonly networkKind: ToolExecutionNetworkKind | null;
   /** Network boundary that failed, or `null` for non-network failures. */
   readonly networkScope: ToolExecutionNetworkScope | null;
+  /** Explicitly allowlisted diagnostics safe for SDK and Play callers. */
+  readonly publicDetails: ToolExecutionPublicDetails | null;
 
   /**
    * Construct a structured tool error.
@@ -290,6 +305,7 @@ export class ToolExecutionError extends DeeplineError {
     this.retryAfterMs = options.retryAfterMs;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     applyBrand(this, TOOL_EXECUTION_ERROR_BRAND);
     if (isProviderTransientFailure(options)) {
       applyBrand(this, PROVIDER_TRANSIENT_ERROR_BRAND);
@@ -547,6 +563,69 @@ function isRecord(value: unknown): value is Record<string, unknown> {
   return value !== null && typeof value === 'object' && !Array.isArray(value);
 }
 
+const MAX_PUBLIC_DETAIL_ENTRIES = 20;
+const MAX_PUBLIC_DETAIL_KEY_LENGTH = 80;
+const MAX_PUBLIC_DETAIL_STRING_LENGTH = 512;
+const publicDetailsByError = new WeakMap<Error, ToolExecutionPublicDetails>();
+
+/**
+ * Normalizes the one public-detail shape at every transport boundary. Nested
+ * values are rejected to prevent accidental disclosure of provider responses.
+ */
+export function normalizeToolExecutionPublicDetails(
+  value: unknown,
+): ToolExecutionPublicDetails | null {
+  if (!isRecord(value)) return null;
+  const details: Record<string, string | number | boolean | null> = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (Object.keys(details).length >= MAX_PUBLIC_DETAIL_ENTRIES) break;
+    if (
+      key.length === 0 ||
+      key.length > MAX_PUBLIC_DETAIL_KEY_LENGTH ||
+      !/^[a-z][a-zA-Z0-9_]*$/.test(key)
+    ) {
+      continue;
+    }
+    if (typeof entry === 'string') {
+      if (entry.length <= MAX_PUBLIC_DETAIL_STRING_LENGTH) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === 'number') {
+      if (Number.isFinite(entry)) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === 'boolean') {
+      details[key] = entry;
+      continue;
+    }
+    if (entry === null) details[key] = null;
+  }
+  return Object.keys(details).length > 0 ? details : null;
+}
+
+/**
+ * Attaches allowlisted details to an in-process error without making them
+ * enumerable. The execute boundary can later serialize them through the
+ * portable `tool_error.publicDetails` field.
+ */
+export function withToolExecutionPublicDetails<T extends Error>(
+  error: T,
+  details: unknown,
+): T {
+  const normalized = normalizeToolExecutionPublicDetails(details);
+  if (normalized) publicDetailsByError.set(error, normalized);
+  return error;
+}
+
+/** Reads details deliberately attached through `withToolExecutionPublicDetails`. */
+export function getToolExecutionPublicDetails(
+  error: unknown,
+): ToolExecutionPublicDetails | null {
+  return error instanceof Error
+    ? (publicDetailsByError.get(error) ?? null)
+    : null;
+}
+
 export function normalizeToolExecutionFailure(
   value: unknown,
 ): ToolExecutionFailureV1 | null {
@@ -565,6 +644,7 @@ export function normalizeToolExecutionFailure(
     operation,
   });
   const category = normalizeToolExecutionCategory(value.category);
+  const publicDetails = normalizeToolExecutionPublicDetails(value.publicDetails);
   const trustworthy =
     origin !== 'unknown' &&
     category !== 'unknown' &&
@@ -583,6 +663,7 @@ export function normalizeToolExecutionFailure(
     retryAfterMs: finiteNonNegativeInteger(value.retryAfterMs),
     networkKind: normalizeNetworkKind(value.networkKind),
     networkScope: normalizeNetworkScope(value.networkScope),
+    ...(publicDetails ? { publicDetails } : {}),
   };
 }
 
@@ -604,6 +685,7 @@ export function serializeToolExecutionFailure(
     retryAfterMs: error.retryAfterMs,
     networkKind: error.networkKind,
     networkScope: error.networkScope,
+    publicDetails: error.publicDetails,
   });
 }
 

package/dist/bundling-sources/shared_libs/tool-execution-error.ts

@@ -84,6 +84,17 @@ export type ToolExecutionNetworkScope =
   | 'runtime_to_deepline'
   | 'deepline_to_provider';
 
+/**
+ * Bounded, primitive-only diagnostics explicitly approved for customers.
+ * Raw provider bodies, credentials, prompts, stacks, and causes never belong
+ * in this shared API/SDK/Play contract.
+ *
+ * @sdkReference errors 063
+ */
+export type ToolExecutionPublicDetails = Readonly<
+  Record<string, string | number | boolean | null>
+>;
+
 /**
  * Portable version-1 `tool_error` payload.
  *
@@ -120,6 +131,8 @@ export type ToolExecutionFailureV1 = {
   networkKind: ToolExecutionNetworkKind | null;
   /** Network boundary that failed, or `null`. */
   networkScope: ToolExecutionNetworkScope | null;
+  /** Explicitly allowlisted customer diagnostics, when present. */
+  publicDetails?: ToolExecutionPublicDetails | null;
 };
 
 /**
@@ -265,6 +278,8 @@ export class ToolExecutionError extends DeeplineError {
   readonly networkKind: ToolExecutionNetworkKind | null;
   /** Network boundary that failed, or `null` for non-network failures. */
   readonly networkScope: ToolExecutionNetworkScope | null;
+  /** Explicitly allowlisted diagnostics safe for SDK and Play callers. */
+  readonly publicDetails: ToolExecutionPublicDetails | null;
 
   /**
    * Construct a structured tool error.
@@ -290,6 +305,7 @@ export class ToolExecutionError extends DeeplineError {
     this.retryAfterMs = options.retryAfterMs;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     applyBrand(this, TOOL_EXECUTION_ERROR_BRAND);
     if (isProviderTransientFailure(options)) {
       applyBrand(this, PROVIDER_TRANSIENT_ERROR_BRAND);
@@ -547,6 +563,69 @@ function isRecord(value: unknown): value is Record<string, unknown> {
   return value !== null && typeof value === 'object' && !Array.isArray(value);
 }
 
+const MAX_PUBLIC_DETAIL_ENTRIES = 20;
+const MAX_PUBLIC_DETAIL_KEY_LENGTH = 80;
+const MAX_PUBLIC_DETAIL_STRING_LENGTH = 512;
+const publicDetailsByError = new WeakMap<Error, ToolExecutionPublicDetails>();
+
+/**
+ * Normalizes the one public-detail shape at every transport boundary. Nested
+ * values are rejected to prevent accidental disclosure of provider responses.
+ */
+export function normalizeToolExecutionPublicDetails(
+  value: unknown,
+): ToolExecutionPublicDetails | null {
+  if (!isRecord(value)) return null;
+  const details: Record<string, string | number | boolean | null> = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (Object.keys(details).length >= MAX_PUBLIC_DETAIL_ENTRIES) break;
+    if (
+      key.length === 0 ||
+      key.length > MAX_PUBLIC_DETAIL_KEY_LENGTH ||
+      !/^[a-z][a-zA-Z0-9_]*$/.test(key)
+    ) {
+      continue;
+    }
+    if (typeof entry === 'string') {
+      if (entry.length <= MAX_PUBLIC_DETAIL_STRING_LENGTH) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === 'number') {
+      if (Number.isFinite(entry)) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === 'boolean') {
+      details[key] = entry;
+      continue;
+    }
+    if (entry === null) details[key] = null;
+  }
+  return Object.keys(details).length > 0 ? details : null;
+}
+
+/**
+ * Attaches allowlisted details to an in-process error without making them
+ * enumerable. The execute boundary can later serialize them through the
+ * portable `tool_error.publicDetails` field.
+ */
+export function withToolExecutionPublicDetails<T extends Error>(
+  error: T,
+  details: unknown,
+): T {
+  const normalized = normalizeToolExecutionPublicDetails(details);
+  if (normalized) publicDetailsByError.set(error, normalized);
+  return error;
+}
+
+/** Reads details deliberately attached through `withToolExecutionPublicDetails`. */
+export function getToolExecutionPublicDetails(
+  error: unknown,
+): ToolExecutionPublicDetails | null {
+  return error instanceof Error
+    ? (publicDetailsByError.get(error) ?? null)
+    : null;
+}
+
 export function normalizeToolExecutionFailure(
   value: unknown,
 ): ToolExecutionFailureV1 | null {
@@ -565,6 +644,7 @@ export function normalizeToolExecutionFailure(
     operation,
   });
   const category = normalizeToolExecutionCategory(value.category);
+  const publicDetails = normalizeToolExecutionPublicDetails(value.publicDetails);
   const trustworthy =
     origin !== 'unknown' &&
     category !== 'unknown' &&
@@ -583,6 +663,7 @@ export function normalizeToolExecutionFailure(
     retryAfterMs: finiteNonNegativeInteger(value.retryAfterMs),
     networkKind: normalizeNetworkKind(value.networkKind),
     networkScope: normalizeNetworkScope(value.networkScope),
+    ...(publicDetails ? { publicDetails } : {}),
   };
 }
 
@@ -604,6 +685,7 @@ export function serializeToolExecutionFailure(
     retryAfterMs: error.retryAfterMs,
     networkKind: error.networkKind,
     networkScope: error.networkScope,
+    publicDetails: error.publicDetails,
   });
 }
 

package/dist/cli/index.js

@@ -282,6 +282,8 @@ var ToolExecutionError = class _ToolExecutionError extends DeeplineError {
   networkKind;
   /** Network boundary that failed, or `null` for non-network failures. */
   networkScope;
+  /** Explicitly allowlisted diagnostics safe for SDK and Play callers. */
+  publicDetails;
   /**
    * Construct a structured tool error.
    *
@@ -306,6 +308,7 @@ var ToolExecutionError = class _ToolExecutionError extends DeeplineError {
     this.retryAfterMs = options.retryAfterMs;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     applyBrand(this, TOOL_EXECUTION_ERROR_BRAND);
     if (isProviderTransientFailure(options)) {
       applyBrand(this, PROVIDER_TRANSIENT_ERROR_BRAND);
@@ -417,6 +420,33 @@ function normalizeNetworkScope(value) {
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+var MAX_PUBLIC_DETAIL_ENTRIES = 20;
+var MAX_PUBLIC_DETAIL_KEY_LENGTH = 80;
+var MAX_PUBLIC_DETAIL_STRING_LENGTH = 512;
+function normalizeToolExecutionPublicDetails(value) {
+  if (!isRecord(value)) return null;
+  const details = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (Object.keys(details).length >= MAX_PUBLIC_DETAIL_ENTRIES) break;
+    if (key.length === 0 || key.length > MAX_PUBLIC_DETAIL_KEY_LENGTH || !/^[a-z][a-zA-Z0-9_]*$/.test(key)) {
+      continue;
+    }
+    if (typeof entry === "string") {
+      if (entry.length <= MAX_PUBLIC_DETAIL_STRING_LENGTH) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === "number") {
+      if (Number.isFinite(entry)) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === "boolean") {
+      details[key] = entry;
+      continue;
+    }
+    if (entry === null) details[key] = null;
+  }
+  return Object.keys(details).length > 0 ? details : null;
+}
 function normalizeToolExecutionFailure(value) {
   if (!isRecord(value) || value.schemaVersion !== TOOL_EXECUTION_ERROR_SCHEMA_VERSION) {
     return null;
@@ -430,6 +460,7 @@ function normalizeToolExecutionFailure(value) {
     operation
   });
   const category = normalizeToolExecutionCategory(value.category);
+  const publicDetails = normalizeToolExecutionPublicDetails(value.publicDetails);
   const trustworthy = origin !== "unknown" && category !== "unknown" && typeof value.retryable === "boolean";
   return {
     schemaVersion: TOOL_EXECUTION_ERROR_SCHEMA_VERSION,
@@ -444,7 +475,8 @@ function normalizeToolExecutionFailure(value) {
     requestId: boundedString(value.requestId),
     retryAfterMs: finiteNonNegativeInteger(value.retryAfterMs),
     networkKind: normalizeNetworkKind(value.networkKind),
-    networkScope: normalizeNetworkScope(value.networkScope)
+    networkScope: normalizeNetworkScope(value.networkScope),
+    ...publicDetails ? { publicDetails } : {}
   };
 }
 function serializeToolExecutionFailure(error) {
@@ -462,7 +494,8 @@ function serializeToolExecutionFailure(error) {
     requestId: error.requestId,
     retryAfterMs: error.retryAfterMs,
     networkKind: error.networkKind,
-    networkScope: error.networkScope
+    networkScope: error.networkScope,
+    publicDetails: error.publicDetails
   });
 }
 function deserializeToolExecutionFailure(message, value, acceptedSchemaVersion) {
@@ -520,6 +553,8 @@ var ToolRateLimitError = class extends RateLimitError {
   networkKind;
   /** Network boundary that failed, or `null` for non-network failures. */
   networkScope;
+  /** Explicitly allowlisted diagnostics safe for SDK callers. */
+  publicDetails;
   /** Constructed by the SDK after a structured tool HTTP 429. */
   constructor(message, options) {
     super(options.retryAfterMs ?? 5e3, message);
@@ -535,6 +570,7 @@ var ToolRateLimitError = class extends RateLimitError {
     this.requestId = options.requestId;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     this.details = options.details;
     brandAsToolExecutionError(this);
     if (isProviderTransientFailure(this)) {
@@ -1043,7 +1079,7 @@ var SDK_RELEASE = {
   // available at toolResponse.rawV2 while toolResponse.raw and all declared
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
-  version: "0.3.47",
+  version: "0.3.49",
   updateSummary: "Automatic CLI updates are now enabled by default. To opt out, run `deepline settings autoupdate off`; use `deepline settings autoupdate on` to re-enable updates or `deepline settings autoupdate pin <version>` to hold an exact release. This release also adds raw-v2 tool responses at toolResponse.rawV2 while preserving existing toolResponse.raw and declared getters.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/cli/index.mjs

@@ -268,6 +268,8 @@ var ToolExecutionError = class _ToolExecutionError extends DeeplineError {
   networkKind;
   /** Network boundary that failed, or `null` for non-network failures. */
   networkScope;
+  /** Explicitly allowlisted diagnostics safe for SDK and Play callers. */
+  publicDetails;
   /**
    * Construct a structured tool error.
    *
@@ -292,6 +294,7 @@ var ToolExecutionError = class _ToolExecutionError extends DeeplineError {
     this.retryAfterMs = options.retryAfterMs;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     applyBrand(this, TOOL_EXECUTION_ERROR_BRAND);
     if (isProviderTransientFailure(options)) {
       applyBrand(this, PROVIDER_TRANSIENT_ERROR_BRAND);
@@ -403,6 +406,33 @@ function normalizeNetworkScope(value) {
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+var MAX_PUBLIC_DETAIL_ENTRIES = 20;
+var MAX_PUBLIC_DETAIL_KEY_LENGTH = 80;
+var MAX_PUBLIC_DETAIL_STRING_LENGTH = 512;
+function normalizeToolExecutionPublicDetails(value) {
+  if (!isRecord(value)) return null;
+  const details = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (Object.keys(details).length >= MAX_PUBLIC_DETAIL_ENTRIES) break;
+    if (key.length === 0 || key.length > MAX_PUBLIC_DETAIL_KEY_LENGTH || !/^[a-z][a-zA-Z0-9_]*$/.test(key)) {
+      continue;
+    }
+    if (typeof entry === "string") {
+      if (entry.length <= MAX_PUBLIC_DETAIL_STRING_LENGTH) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === "number") {
+      if (Number.isFinite(entry)) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === "boolean") {
+      details[key] = entry;
+      continue;
+    }
+    if (entry === null) details[key] = null;
+  }
+  return Object.keys(details).length > 0 ? details : null;
+}
 function normalizeToolExecutionFailure(value) {
   if (!isRecord(value) || value.schemaVersion !== TOOL_EXECUTION_ERROR_SCHEMA_VERSION) {
     return null;
@@ -416,6 +446,7 @@ function normalizeToolExecutionFailure(value) {
     operation
   });
   const category = normalizeToolExecutionCategory(value.category);
+  const publicDetails = normalizeToolExecutionPublicDetails(value.publicDetails);
   const trustworthy = origin !== "unknown" && category !== "unknown" && typeof value.retryable === "boolean";
   return {
     schemaVersion: TOOL_EXECUTION_ERROR_SCHEMA_VERSION,
@@ -430,7 +461,8 @@ function normalizeToolExecutionFailure(value) {
     requestId: boundedString(value.requestId),
     retryAfterMs: finiteNonNegativeInteger(value.retryAfterMs),
     networkKind: normalizeNetworkKind(value.networkKind),
-    networkScope: normalizeNetworkScope(value.networkScope)
+    networkScope: normalizeNetworkScope(value.networkScope),
+    ...publicDetails ? { publicDetails } : {}
   };
 }
 function serializeToolExecutionFailure(error) {
@@ -448,7 +480,8 @@ function serializeToolExecutionFailure(error) {
     requestId: error.requestId,
     retryAfterMs: error.retryAfterMs,
     networkKind: error.networkKind,
-    networkScope: error.networkScope
+    networkScope: error.networkScope,
+    publicDetails: error.publicDetails
   });
 }
 function deserializeToolExecutionFailure(message, value, acceptedSchemaVersion) {
@@ -506,6 +539,8 @@ var ToolRateLimitError = class extends RateLimitError {
   networkKind;
   /** Network boundary that failed, or `null` for non-network failures. */
   networkScope;
+  /** Explicitly allowlisted diagnostics safe for SDK callers. */
+  publicDetails;
   /** Constructed by the SDK after a structured tool HTTP 429. */
   constructor(message, options) {
     super(options.retryAfterMs ?? 5e3, message);
@@ -521,6 +556,7 @@ var ToolRateLimitError = class extends RateLimitError {
     this.requestId = options.requestId;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     this.details = options.details;
     brandAsToolExecutionError(this);
     if (isProviderTransientFailure(this)) {
@@ -1029,7 +1065,7 @@ var SDK_RELEASE = {
   // available at toolResponse.rawV2 while toolResponse.raw and all declared
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
-  version: "0.3.47",
+  version: "0.3.49",
   updateSummary: "Automatic CLI updates are now enabled by default. To opt out, run `deepline settings autoupdate off`; use `deepline settings autoupdate on` to re-enable updates or `deepline settings autoupdate pin <version>` to hold an exact release. This release also adds raw-v2 tool responses at toolResponse.rawV2 while preserving existing toolResponse.raw and declared getters.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/{compiler-manifest-BuoqasqI.d.mts → compiler-manifest-CbzdZrJj.d.mts}

@@ -42,6 +42,14 @@ type ToolExecutionNetworkKind = 'timeout' | 'dns' | 'connect' | 'reset' | 'unava
  * @sdkReference errors 050
  */
 type ToolExecutionNetworkScope = 'client_to_deepline' | 'runtime_to_deepline' | 'deepline_to_provider';
+/**
+ * Bounded, primitive-only diagnostics explicitly approved for customers.
+ * Raw provider bodies, credentials, prompts, stacks, and causes never belong
+ * in this shared API/SDK/Play contract.
+ *
+ * @sdkReference errors 063
+ */
+type ToolExecutionPublicDetails = Readonly<Record<string, string | number | boolean | null>>;
 /**
  * Portable version-1 `tool_error` payload.
  *
@@ -78,6 +86,8 @@ type ToolExecutionFailureV1 = {
     networkKind: ToolExecutionNetworkKind | null;
     /** Network boundary that failed, or `null`. */
     networkScope: ToolExecutionNetworkScope | null;
+    /** Explicitly allowlisted customer diagnostics, when present. */
+    publicDetails?: ToolExecutionPublicDetails | null;
 };
 /**
  * Constructor input for a structured tool failure.
@@ -170,6 +180,8 @@ declare class ToolExecutionError extends DeeplineError {
     readonly networkKind: ToolExecutionNetworkKind | null;
     /** Network boundary that failed, or `null` for non-network failures. */
     readonly networkScope: ToolExecutionNetworkScope | null;
+    /** Explicitly allowlisted diagnostics safe for SDK and Play callers. */
+    readonly publicDetails: ToolExecutionPublicDetails | null;
     /**
      * Construct a structured tool error.
      *
@@ -2941,4 +2953,4 @@ type PlayCompilerManifest = {
     authoringContract?: AdmittedPlayAuthoringContract;
 };
 
-export { PHONE_STATUS_VALUES as $, type PlayAuthoringCallExecution as A, type PlayAuthoringCallOptions as B, type PlayAuthoringFetchResponse as C, DeeplineError as D, type PlayAuthoringInputContract as E, type PlayAuthoringStepProgramStep as F, type PlayAuthoringRuntimeStepOptions as G, type PlaySqlListenerDeclaration as H, type PlaySqlListenerEvent as I, type PlaySqlListenerOperation as J, type PlaySqlQuery as K, type PlayAuthoringStepOptions as L, type PlayAuthoringStepProgram as M, type PlayAuthoringStepProgramResolver as N, type PlayAuthoringStepResolver as O, type PlayArtifactKind as P, type PlayToolExecutionRequest as Q, type PlayAuthoringStepProgramOptions as R, DEEPLINE_EXTRACTOR_TARGETS as S, ToolExecutionError as T, DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS as U, type DeeplineEmailStatusGetterValue as V, type DeeplineExtractorTarget as W, type DeeplineGetterValue as X, type DeeplineGetterValueMap as Y, JOB_CHANGE_STATUS_VALUES as Z, type JobChangeStatus as _, type PlayBundleArtifact as a, type PhoneStatus as a0, type PlayDataset as a1, type PlayDatasetInput as a2, type PreviousCell as a3, ProviderTransientError as a4, type ProviderTransientErrorCategory as a5, type ProviderUnavailableError as a6, type ProviderUnavailableReason as a7, type ToolExecutionErrorCategory as a8, type ToolExecutionErrorOrigin as a9, type ToolExecutionFailureV1 as aa, type ToolExecutionNetworkKind as ab, type ToolExecutionNetworkScope as ac, getProviderUnavailableReason as ad, isDeeplineExtractorTarget as ae, isProviderUnavailable as af, isProviderWaterfallUnavailableError as ag, type PlaySandboxRuntimeDeclaration as b, type PlayCompilerManifest as c, PLAY_ARTIFACT_KINDS as d, type PlayArtifactCompatibility as e, type PlayImportPolicy as f, type PlayPackageImport as g, type PlayRuntimeFeature as h, type ToolExecutionErrorOptions as i, type PlayAuthoringColumnMap as j, type PlayAuthoringColumnResolver as k, type PlayAuthoringRuntimeContext as l, type PlayAuthoringConditionalStepResolver as m, type PlayAuthoringCsvInput as n, type PlayAuthoringCsvOptions as o, type PlayAuthoringDatasetBuilder as p, type PlayAuthoringDatasetColumnDefinition as q, type PlayAuthoringDatasetColumnRunInput as r, type ToolExecuteResult as s, type PlayAuthoringReferenceLike as t, type PlayReturnObject as u, type PlayAuthoringDefineConfig as v, type PlayAuthoringDefinedPlay as w, type PlayAuthoringFetchOptions as x, type PlayAuthoringFileInput as y, type PlayAuthoringBindings as z };
+export { PHONE_STATUS_VALUES as $, type PlayAuthoringCallExecution as A, type PlayAuthoringCallOptions as B, type PlayAuthoringFetchResponse as C, DeeplineError as D, type PlayAuthoringInputContract as E, type PlayAuthoringStepProgramStep as F, type PlayAuthoringRuntimeStepOptions as G, type PlaySqlListenerDeclaration as H, type PlaySqlListenerEvent as I, type PlaySqlListenerOperation as J, type PlaySqlQuery as K, type PlayAuthoringStepOptions as L, type PlayAuthoringStepProgram as M, type PlayAuthoringStepProgramResolver as N, type PlayAuthoringStepResolver as O, type PlayArtifactKind as P, type PlayToolExecutionRequest as Q, type PlayAuthoringStepProgramOptions as R, DEEPLINE_EXTRACTOR_TARGETS as S, ToolExecutionError as T, DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS as U, type DeeplineEmailStatusGetterValue as V, type DeeplineExtractorTarget as W, type DeeplineGetterValue as X, type DeeplineGetterValueMap as Y, JOB_CHANGE_STATUS_VALUES as Z, type JobChangeStatus as _, type PlayBundleArtifact as a, type PhoneStatus as a0, type PlayDataset as a1, type PlayDatasetInput as a2, type PreviousCell as a3, ProviderTransientError as a4, type ProviderTransientErrorCategory as a5, type ProviderUnavailableError as a6, type ProviderUnavailableReason as a7, type ToolExecutionErrorCategory as a8, type ToolExecutionErrorOrigin as a9, type ToolExecutionFailureV1 as aa, type ToolExecutionNetworkKind as ab, type ToolExecutionNetworkScope as ac, type ToolExecutionPublicDetails as ad, getProviderUnavailableReason as ae, isDeeplineExtractorTarget as af, isProviderUnavailable as ag, isProviderWaterfallUnavailableError as ah, type PlaySandboxRuntimeDeclaration as b, type PlayCompilerManifest as c, PLAY_ARTIFACT_KINDS as d, type PlayArtifactCompatibility as e, type PlayImportPolicy as f, type PlayPackageImport as g, type PlayRuntimeFeature as h, type ToolExecutionErrorOptions as i, type PlayAuthoringColumnMap as j, type PlayAuthoringColumnResolver as k, type PlayAuthoringRuntimeContext as l, type PlayAuthoringConditionalStepResolver as m, type PlayAuthoringCsvInput as n, type PlayAuthoringCsvOptions as o, type PlayAuthoringDatasetBuilder as p, type PlayAuthoringDatasetColumnDefinition as q, type PlayAuthoringDatasetColumnRunInput as r, type ToolExecuteResult as s, type PlayAuthoringReferenceLike as t, type PlayReturnObject as u, type PlayAuthoringDefineConfig as v, type PlayAuthoringDefinedPlay as w, type PlayAuthoringFetchOptions as x, type PlayAuthoringFileInput as y, type PlayAuthoringBindings as z };

package/dist/{compiler-manifest-BuoqasqI.d.ts → compiler-manifest-CbzdZrJj.d.ts}

@@ -42,6 +42,14 @@ type ToolExecutionNetworkKind = 'timeout' | 'dns' | 'connect' | 'reset' | 'unava
  * @sdkReference errors 050
  */
 type ToolExecutionNetworkScope = 'client_to_deepline' | 'runtime_to_deepline' | 'deepline_to_provider';
+/**
+ * Bounded, primitive-only diagnostics explicitly approved for customers.
+ * Raw provider bodies, credentials, prompts, stacks, and causes never belong
+ * in this shared API/SDK/Play contract.
+ *
+ * @sdkReference errors 063
+ */
+type ToolExecutionPublicDetails = Readonly<Record<string, string | number | boolean | null>>;
 /**
  * Portable version-1 `tool_error` payload.
  *
@@ -78,6 +86,8 @@ type ToolExecutionFailureV1 = {
     networkKind: ToolExecutionNetworkKind | null;
     /** Network boundary that failed, or `null`. */
     networkScope: ToolExecutionNetworkScope | null;
+    /** Explicitly allowlisted customer diagnostics, when present. */
+    publicDetails?: ToolExecutionPublicDetails | null;
 };
 /**
  * Constructor input for a structured tool failure.
@@ -170,6 +180,8 @@ declare class ToolExecutionError extends DeeplineError {
     readonly networkKind: ToolExecutionNetworkKind | null;
     /** Network boundary that failed, or `null` for non-network failures. */
     readonly networkScope: ToolExecutionNetworkScope | null;
+    /** Explicitly allowlisted diagnostics safe for SDK and Play callers. */
+    readonly publicDetails: ToolExecutionPublicDetails | null;
     /**
      * Construct a structured tool error.
      *
@@ -2941,4 +2953,4 @@ type PlayCompilerManifest = {
     authoringContract?: AdmittedPlayAuthoringContract;
 };
 
-export { PHONE_STATUS_VALUES as $, type PlayAuthoringCallExecution as A, type PlayAuthoringCallOptions as B, type PlayAuthoringFetchResponse as C, DeeplineError as D, type PlayAuthoringInputContract as E, type PlayAuthoringStepProgramStep as F, type PlayAuthoringRuntimeStepOptions as G, type PlaySqlListenerDeclaration as H, type PlaySqlListenerEvent as I, type PlaySqlListenerOperation as J, type PlaySqlQuery as K, type PlayAuthoringStepOptions as L, type PlayAuthoringStepProgram as M, type PlayAuthoringStepProgramResolver as N, type PlayAuthoringStepResolver as O, type PlayArtifactKind as P, type PlayToolExecutionRequest as Q, type PlayAuthoringStepProgramOptions as R, DEEPLINE_EXTRACTOR_TARGETS as S, ToolExecutionError as T, DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS as U, type DeeplineEmailStatusGetterValue as V, type DeeplineExtractorTarget as W, type DeeplineGetterValue as X, type DeeplineGetterValueMap as Y, JOB_CHANGE_STATUS_VALUES as Z, type JobChangeStatus as _, type PlayBundleArtifact as a, type PhoneStatus as a0, type PlayDataset as a1, type PlayDatasetInput as a2, type PreviousCell as a3, ProviderTransientError as a4, type ProviderTransientErrorCategory as a5, type ProviderUnavailableError as a6, type ProviderUnavailableReason as a7, type ToolExecutionErrorCategory as a8, type ToolExecutionErrorOrigin as a9, type ToolExecutionFailureV1 as aa, type ToolExecutionNetworkKind as ab, type ToolExecutionNetworkScope as ac, getProviderUnavailableReason as ad, isDeeplineExtractorTarget as ae, isProviderUnavailable as af, isProviderWaterfallUnavailableError as ag, type PlaySandboxRuntimeDeclaration as b, type PlayCompilerManifest as c, PLAY_ARTIFACT_KINDS as d, type PlayArtifactCompatibility as e, type PlayImportPolicy as f, type PlayPackageImport as g, type PlayRuntimeFeature as h, type ToolExecutionErrorOptions as i, type PlayAuthoringColumnMap as j, type PlayAuthoringColumnResolver as k, type PlayAuthoringRuntimeContext as l, type PlayAuthoringConditionalStepResolver as m, type PlayAuthoringCsvInput as n, type PlayAuthoringCsvOptions as o, type PlayAuthoringDatasetBuilder as p, type PlayAuthoringDatasetColumnDefinition as q, type PlayAuthoringDatasetColumnRunInput as r, type ToolExecuteResult as s, type PlayAuthoringReferenceLike as t, type PlayReturnObject as u, type PlayAuthoringDefineConfig as v, type PlayAuthoringDefinedPlay as w, type PlayAuthoringFetchOptions as x, type PlayAuthoringFileInput as y, type PlayAuthoringBindings as z };
+export { PHONE_STATUS_VALUES as $, type PlayAuthoringCallExecution as A, type PlayAuthoringCallOptions as B, type PlayAuthoringFetchResponse as C, DeeplineError as D, type PlayAuthoringInputContract as E, type PlayAuthoringStepProgramStep as F, type PlayAuthoringRuntimeStepOptions as G, type PlaySqlListenerDeclaration as H, type PlaySqlListenerEvent as I, type PlaySqlListenerOperation as J, type PlaySqlQuery as K, type PlayAuthoringStepOptions as L, type PlayAuthoringStepProgram as M, type PlayAuthoringStepProgramResolver as N, type PlayAuthoringStepResolver as O, type PlayArtifactKind as P, type PlayToolExecutionRequest as Q, type PlayAuthoringStepProgramOptions as R, DEEPLINE_EXTRACTOR_TARGETS as S, ToolExecutionError as T, DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS as U, type DeeplineEmailStatusGetterValue as V, type DeeplineExtractorTarget as W, type DeeplineGetterValue as X, type DeeplineGetterValueMap as Y, JOB_CHANGE_STATUS_VALUES as Z, type JobChangeStatus as _, type PlayBundleArtifact as a, type PhoneStatus as a0, type PlayDataset as a1, type PlayDatasetInput as a2, type PreviousCell as a3, ProviderTransientError as a4, type ProviderTransientErrorCategory as a5, type ProviderUnavailableError as a6, type ProviderUnavailableReason as a7, type ToolExecutionErrorCategory as a8, type ToolExecutionErrorOrigin as a9, type ToolExecutionFailureV1 as aa, type ToolExecutionNetworkKind as ab, type ToolExecutionNetworkScope as ac, type ToolExecutionPublicDetails as ad, getProviderUnavailableReason as ae, isDeeplineExtractorTarget as af, isProviderUnavailable as ag, isProviderWaterfallUnavailableError as ah, type PlaySandboxRuntimeDeclaration as b, type PlayCompilerManifest as c, PLAY_ARTIFACT_KINDS as d, type PlayArtifactCompatibility as e, type PlayImportPolicy as f, type PlayPackageImport as g, type PlayRuntimeFeature as h, type ToolExecutionErrorOptions as i, type PlayAuthoringColumnMap as j, type PlayAuthoringColumnResolver as k, type PlayAuthoringRuntimeContext as l, type PlayAuthoringConditionalStepResolver as m, type PlayAuthoringCsvInput as n, type PlayAuthoringCsvOptions as o, type PlayAuthoringDatasetBuilder as p, type PlayAuthoringDatasetColumnDefinition as q, type PlayAuthoringDatasetColumnRunInput as r, type ToolExecuteResult as s, type PlayAuthoringReferenceLike as t, type PlayReturnObject as u, type PlayAuthoringDefineConfig as v, type PlayAuthoringDefinedPlay as w, type PlayAuthoringFetchOptions as x, type PlayAuthoringFileInput as y, type PlayAuthoringBindings as z };

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 /// <reference path="./text-imports.d.ts" />
-import { c as PlayCompilerManifest, D as DeeplineError, T as ToolExecutionError, i as ToolExecutionErrorOptions, j as PlayAuthoringColumnMap, k as PlayAuthoringColumnResolver, l as PlayAuthoringRuntimeContext, m as PlayAuthoringConditionalStepResolver, n as PlayAuthoringCsvInput, o as PlayAuthoringCsvOptions, p as PlayAuthoringDatasetBuilder, q as PlayAuthoringDatasetColumnDefinition, r as PlayAuthoringDatasetColumnRunInput, s as ToolExecuteResult, t as PlayAuthoringReferenceLike, u as PlayReturnObject$1, v as PlayAuthoringDefineConfig, w as PlayAuthoringDefinedPlay, x as PlayAuthoringFetchOptions, y as PlayAuthoringFileInput, z as PlayAuthoringBindings, A as PlayAuthoringCallExecution, B as PlayAuthoringCallOptions, C as PlayAuthoringFetchResponse, E as PlayAuthoringInputContract, F as PlayAuthoringStepProgramStep, G as PlayAuthoringRuntimeStepOptions, H as PlaySqlListenerDeclaration, I as PlaySqlListenerEvent, J as PlaySqlListenerOperation, K as PlaySqlQuery, L as PlayAuthoringStepOptions, M as PlayAuthoringStepProgram, N as PlayAuthoringStepProgramResolver, O as PlayAuthoringStepResolver, Q as PlayToolExecutionRequest, R as PlayAuthoringStepProgramOptions } from './compiler-manifest-BuoqasqI.mjs';
-export { S as DEEPLINE_EXTRACTOR_TARGETS, U as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, V as DeeplineEmailStatusGetterValue, W as DeeplineExtractorTarget, X as DeeplineGetterValue, Y as DeeplineGetterValueMap, Z as JOB_CHANGE_STATUS_VALUES, _ as JobChangeStatus, $ as PHONE_STATUS_VALUES, a0 as PhoneStatus, a1 as PlayDataset, a2 as PlayDatasetInput, a3 as PreviousCell, a4 as ProviderTransientError, a5 as ProviderTransientErrorCategory, a6 as ProviderUnavailableError, a7 as ProviderUnavailableReason, a8 as ToolExecutionErrorCategory, a9 as ToolExecutionErrorOrigin, aa as ToolExecutionFailureV1, ab as ToolExecutionNetworkKind, ac as ToolExecutionNetworkScope, ad as getProviderUnavailableReason, ae as isDeeplineExtractorTarget, af as isProviderUnavailable, ag as isProviderWaterfallUnavailableError } from './compiler-manifest-BuoqasqI.mjs';
+import { c as PlayCompilerManifest, D as DeeplineError, T as ToolExecutionError, i as ToolExecutionErrorOptions, j as PlayAuthoringColumnMap, k as PlayAuthoringColumnResolver, l as PlayAuthoringRuntimeContext, m as PlayAuthoringConditionalStepResolver, n as PlayAuthoringCsvInput, o as PlayAuthoringCsvOptions, p as PlayAuthoringDatasetBuilder, q as PlayAuthoringDatasetColumnDefinition, r as PlayAuthoringDatasetColumnRunInput, s as ToolExecuteResult, t as PlayAuthoringReferenceLike, u as PlayReturnObject$1, v as PlayAuthoringDefineConfig, w as PlayAuthoringDefinedPlay, x as PlayAuthoringFetchOptions, y as PlayAuthoringFileInput, z as PlayAuthoringBindings, A as PlayAuthoringCallExecution, B as PlayAuthoringCallOptions, C as PlayAuthoringFetchResponse, E as PlayAuthoringInputContract, F as PlayAuthoringStepProgramStep, G as PlayAuthoringRuntimeStepOptions, H as PlaySqlListenerDeclaration, I as PlaySqlListenerEvent, J as PlaySqlListenerOperation, K as PlaySqlQuery, L as PlayAuthoringStepOptions, M as PlayAuthoringStepProgram, N as PlayAuthoringStepProgramResolver, O as PlayAuthoringStepResolver, Q as PlayToolExecutionRequest, R as PlayAuthoringStepProgramOptions } from './compiler-manifest-CbzdZrJj.mjs';
+export { S as DEEPLINE_EXTRACTOR_TARGETS, U as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, V as DeeplineEmailStatusGetterValue, W as DeeplineExtractorTarget, X as DeeplineGetterValue, Y as DeeplineGetterValueMap, Z as JOB_CHANGE_STATUS_VALUES, _ as JobChangeStatus, $ as PHONE_STATUS_VALUES, a0 as PhoneStatus, a1 as PlayDataset, a2 as PlayDatasetInput, a3 as PreviousCell, a4 as ProviderTransientError, a5 as ProviderTransientErrorCategory, a6 as ProviderUnavailableError, a7 as ProviderUnavailableReason, a8 as ToolExecutionErrorCategory, a9 as ToolExecutionErrorOrigin, aa as ToolExecutionFailureV1, ab as ToolExecutionNetworkKind, ac as ToolExecutionNetworkScope, ad as ToolExecutionPublicDetails, ae as getProviderUnavailableReason, af as isDeeplineExtractorTarget, ag as isProviderUnavailable, ah as isProviderWaterfallUnavailableError } from './compiler-manifest-CbzdZrJj.mjs';
 import '@sinclair/typebox';
 
 declare const FIXTURE_BEHAVIOR_VERSION: 1;
@@ -3949,6 +3949,8 @@ declare class ToolRateLimitError extends RateLimitError {
     readonly networkKind: ToolExecutionError['networkKind'];
     /** Network boundary that failed, or `null` for non-network failures. */
     readonly networkScope: ToolExecutionError['networkScope'];
+    /** Explicitly allowlisted diagnostics safe for SDK callers. */
+    readonly publicDetails: ToolExecutionError['publicDetails'];
     /** Constructed by the SDK after a structured tool HTTP 429. */
     constructor(message: string, options: ToolExecutionErrorOptions);
 }

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 /// <reference path="./text-imports.d.ts" />
-import { c as PlayCompilerManifest, D as DeeplineError, T as ToolExecutionError, i as ToolExecutionErrorOptions, j as PlayAuthoringColumnMap, k as PlayAuthoringColumnResolver, l as PlayAuthoringRuntimeContext, m as PlayAuthoringConditionalStepResolver, n as PlayAuthoringCsvInput, o as PlayAuthoringCsvOptions, p as PlayAuthoringDatasetBuilder, q as PlayAuthoringDatasetColumnDefinition, r as PlayAuthoringDatasetColumnRunInput, s as ToolExecuteResult, t as PlayAuthoringReferenceLike, u as PlayReturnObject$1, v as PlayAuthoringDefineConfig, w as PlayAuthoringDefinedPlay, x as PlayAuthoringFetchOptions, y as PlayAuthoringFileInput, z as PlayAuthoringBindings, A as PlayAuthoringCallExecution, B as PlayAuthoringCallOptions, C as PlayAuthoringFetchResponse, E as PlayAuthoringInputContract, F as PlayAuthoringStepProgramStep, G as PlayAuthoringRuntimeStepOptions, H as PlaySqlListenerDeclaration, I as PlaySqlListenerEvent, J as PlaySqlListenerOperation, K as PlaySqlQuery, L as PlayAuthoringStepOptions, M as PlayAuthoringStepProgram, N as PlayAuthoringStepProgramResolver, O as PlayAuthoringStepResolver, Q as PlayToolExecutionRequest, R as PlayAuthoringStepProgramOptions } from './compiler-manifest-BuoqasqI.js';
-export { S as DEEPLINE_EXTRACTOR_TARGETS, U as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, V as DeeplineEmailStatusGetterValue, W as DeeplineExtractorTarget, X as DeeplineGetterValue, Y as DeeplineGetterValueMap, Z as JOB_CHANGE_STATUS_VALUES, _ as JobChangeStatus, $ as PHONE_STATUS_VALUES, a0 as PhoneStatus, a1 as PlayDataset, a2 as PlayDatasetInput, a3 as PreviousCell, a4 as ProviderTransientError, a5 as ProviderTransientErrorCategory, a6 as ProviderUnavailableError, a7 as ProviderUnavailableReason, a8 as ToolExecutionErrorCategory, a9 as ToolExecutionErrorOrigin, aa as ToolExecutionFailureV1, ab as ToolExecutionNetworkKind, ac as ToolExecutionNetworkScope, ad as getProviderUnavailableReason, ae as isDeeplineExtractorTarget, af as isProviderUnavailable, ag as isProviderWaterfallUnavailableError } from './compiler-manifest-BuoqasqI.js';
+import { c as PlayCompilerManifest, D as DeeplineError, T as ToolExecutionError, i as ToolExecutionErrorOptions, j as PlayAuthoringColumnMap, k as PlayAuthoringColumnResolver, l as PlayAuthoringRuntimeContext, m as PlayAuthoringConditionalStepResolver, n as PlayAuthoringCsvInput, o as PlayAuthoringCsvOptions, p as PlayAuthoringDatasetBuilder, q as PlayAuthoringDatasetColumnDefinition, r as PlayAuthoringDatasetColumnRunInput, s as ToolExecuteResult, t as PlayAuthoringReferenceLike, u as PlayReturnObject$1, v as PlayAuthoringDefineConfig, w as PlayAuthoringDefinedPlay, x as PlayAuthoringFetchOptions, y as PlayAuthoringFileInput, z as PlayAuthoringBindings, A as PlayAuthoringCallExecution, B as PlayAuthoringCallOptions, C as PlayAuthoringFetchResponse, E as PlayAuthoringInputContract, F as PlayAuthoringStepProgramStep, G as PlayAuthoringRuntimeStepOptions, H as PlaySqlListenerDeclaration, I as PlaySqlListenerEvent, J as PlaySqlListenerOperation, K as PlaySqlQuery, L as PlayAuthoringStepOptions, M as PlayAuthoringStepProgram, N as PlayAuthoringStepProgramResolver, O as PlayAuthoringStepResolver, Q as PlayToolExecutionRequest, R as PlayAuthoringStepProgramOptions } from './compiler-manifest-CbzdZrJj.js';
+export { S as DEEPLINE_EXTRACTOR_TARGETS, U as DEEPLINE_EXTRACTOR_TARGET_DEFINITIONS, V as DeeplineEmailStatusGetterValue, W as DeeplineExtractorTarget, X as DeeplineGetterValue, Y as DeeplineGetterValueMap, Z as JOB_CHANGE_STATUS_VALUES, _ as JobChangeStatus, $ as PHONE_STATUS_VALUES, a0 as PhoneStatus, a1 as PlayDataset, a2 as PlayDatasetInput, a3 as PreviousCell, a4 as ProviderTransientError, a5 as ProviderTransientErrorCategory, a6 as ProviderUnavailableError, a7 as ProviderUnavailableReason, a8 as ToolExecutionErrorCategory, a9 as ToolExecutionErrorOrigin, aa as ToolExecutionFailureV1, ab as ToolExecutionNetworkKind, ac as ToolExecutionNetworkScope, ad as ToolExecutionPublicDetails, ae as getProviderUnavailableReason, af as isDeeplineExtractorTarget, ag as isProviderUnavailable, ah as isProviderWaterfallUnavailableError } from './compiler-manifest-CbzdZrJj.js';
 import '@sinclair/typebox';
 
 declare const FIXTURE_BEHAVIOR_VERSION: 1;
@@ -3949,6 +3949,8 @@ declare class ToolRateLimitError extends RateLimitError {
     readonly networkKind: ToolExecutionError['networkKind'];
     /** Network boundary that failed, or `null` for non-network failures. */
     readonly networkScope: ToolExecutionError['networkScope'];
+    /** Explicitly allowlisted diagnostics safe for SDK callers. */
+    readonly publicDetails: ToolExecutionError['publicDetails'];
     /** Constructed by the SDK after a structured tool HTTP 429. */
     constructor(message: string, options: ToolExecutionErrorOptions);
 }

package/dist/index.js

@@ -175,6 +175,8 @@ var ToolExecutionError = class _ToolExecutionError extends DeeplineError {
   networkKind;
   /** Network boundary that failed, or `null` for non-network failures. */
   networkScope;
+  /** Explicitly allowlisted diagnostics safe for SDK and Play callers. */
+  publicDetails;
   /**
    * Construct a structured tool error.
    *
@@ -199,6 +201,7 @@ var ToolExecutionError = class _ToolExecutionError extends DeeplineError {
     this.retryAfterMs = options.retryAfterMs;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     applyBrand(this, TOOL_EXECUTION_ERROR_BRAND);
     if (isProviderTransientFailure(options)) {
       applyBrand(this, PROVIDER_TRANSIENT_ERROR_BRAND);
@@ -324,6 +327,33 @@ function normalizeNetworkScope(value) {
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+var MAX_PUBLIC_DETAIL_ENTRIES = 20;
+var MAX_PUBLIC_DETAIL_KEY_LENGTH = 80;
+var MAX_PUBLIC_DETAIL_STRING_LENGTH = 512;
+function normalizeToolExecutionPublicDetails(value) {
+  if (!isRecord(value)) return null;
+  const details = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (Object.keys(details).length >= MAX_PUBLIC_DETAIL_ENTRIES) break;
+    if (key.length === 0 || key.length > MAX_PUBLIC_DETAIL_KEY_LENGTH || !/^[a-z][a-zA-Z0-9_]*$/.test(key)) {
+      continue;
+    }
+    if (typeof entry === "string") {
+      if (entry.length <= MAX_PUBLIC_DETAIL_STRING_LENGTH) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === "number") {
+      if (Number.isFinite(entry)) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === "boolean") {
+      details[key] = entry;
+      continue;
+    }
+    if (entry === null) details[key] = null;
+  }
+  return Object.keys(details).length > 0 ? details : null;
+}
 function normalizeToolExecutionFailure(value) {
   if (!isRecord(value) || value.schemaVersion !== TOOL_EXECUTION_ERROR_SCHEMA_VERSION) {
     return null;
@@ -337,6 +367,7 @@ function normalizeToolExecutionFailure(value) {
     operation
   });
   const category = normalizeToolExecutionCategory(value.category);
+  const publicDetails = normalizeToolExecutionPublicDetails(value.publicDetails);
   const trustworthy = origin !== "unknown" && category !== "unknown" && typeof value.retryable === "boolean";
   return {
     schemaVersion: TOOL_EXECUTION_ERROR_SCHEMA_VERSION,
@@ -351,7 +382,8 @@ function normalizeToolExecutionFailure(value) {
     requestId: boundedString(value.requestId),
     retryAfterMs: finiteNonNegativeInteger(value.retryAfterMs),
     networkKind: normalizeNetworkKind(value.networkKind),
-    networkScope: normalizeNetworkScope(value.networkScope)
+    networkScope: normalizeNetworkScope(value.networkScope),
+    ...publicDetails ? { publicDetails } : {}
   };
 }
 function serializeToolExecutionFailure(error) {
@@ -369,7 +401,8 @@ function serializeToolExecutionFailure(error) {
     requestId: error.requestId,
     retryAfterMs: error.retryAfterMs,
     networkKind: error.networkKind,
-    networkScope: error.networkScope
+    networkScope: error.networkScope,
+    publicDetails: error.publicDetails
   });
 }
 function deserializeToolExecutionFailure(message, value, acceptedSchemaVersion) {
@@ -427,6 +460,8 @@ var ToolRateLimitError = class extends RateLimitError {
   networkKind;
   /** Network boundary that failed, or `null` for non-network failures. */
   networkScope;
+  /** Explicitly allowlisted diagnostics safe for SDK callers. */
+  publicDetails;
   /** Constructed by the SDK after a structured tool HTTP 429. */
   constructor(message, options) {
     super(options.retryAfterMs ?? 5e3, message);
@@ -442,6 +477,7 @@ var ToolRateLimitError = class extends RateLimitError {
     this.requestId = options.requestId;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     this.details = options.details;
     brandAsToolExecutionError(this);
     if (isProviderTransientFailure(this)) {
@@ -779,7 +815,7 @@ var SDK_RELEASE = {
   // available at toolResponse.rawV2 while toolResponse.raw and all declared
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
-  version: "0.3.47",
+  version: "0.3.49",
   updateSummary: "Automatic CLI updates are now enabled by default. To opt out, run `deepline settings autoupdate off`; use `deepline settings autoupdate on` to re-enable updates or `deepline settings autoupdate pin <version>` to hold an exact release. This release also adds raw-v2 tool responses at toolResponse.rawV2 while preserving existing toolResponse.raw and declared getters.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/index.mjs

@@ -98,6 +98,8 @@ var ToolExecutionError = class _ToolExecutionError extends DeeplineError {
   networkKind;
   /** Network boundary that failed, or `null` for non-network failures. */
   networkScope;
+  /** Explicitly allowlisted diagnostics safe for SDK and Play callers. */
+  publicDetails;
   /**
    * Construct a structured tool error.
    *
@@ -122,6 +124,7 @@ var ToolExecutionError = class _ToolExecutionError extends DeeplineError {
     this.retryAfterMs = options.retryAfterMs;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     applyBrand(this, TOOL_EXECUTION_ERROR_BRAND);
     if (isProviderTransientFailure(options)) {
       applyBrand(this, PROVIDER_TRANSIENT_ERROR_BRAND);
@@ -247,6 +250,33 @@ function normalizeNetworkScope(value) {
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+var MAX_PUBLIC_DETAIL_ENTRIES = 20;
+var MAX_PUBLIC_DETAIL_KEY_LENGTH = 80;
+var MAX_PUBLIC_DETAIL_STRING_LENGTH = 512;
+function normalizeToolExecutionPublicDetails(value) {
+  if (!isRecord(value)) return null;
+  const details = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (Object.keys(details).length >= MAX_PUBLIC_DETAIL_ENTRIES) break;
+    if (key.length === 0 || key.length > MAX_PUBLIC_DETAIL_KEY_LENGTH || !/^[a-z][a-zA-Z0-9_]*$/.test(key)) {
+      continue;
+    }
+    if (typeof entry === "string") {
+      if (entry.length <= MAX_PUBLIC_DETAIL_STRING_LENGTH) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === "number") {
+      if (Number.isFinite(entry)) details[key] = entry;
+      continue;
+    }
+    if (typeof entry === "boolean") {
+      details[key] = entry;
+      continue;
+    }
+    if (entry === null) details[key] = null;
+  }
+  return Object.keys(details).length > 0 ? details : null;
+}
 function normalizeToolExecutionFailure(value) {
   if (!isRecord(value) || value.schemaVersion !== TOOL_EXECUTION_ERROR_SCHEMA_VERSION) {
     return null;
@@ -260,6 +290,7 @@ function normalizeToolExecutionFailure(value) {
     operation
   });
   const category = normalizeToolExecutionCategory(value.category);
+  const publicDetails = normalizeToolExecutionPublicDetails(value.publicDetails);
   const trustworthy = origin !== "unknown" && category !== "unknown" && typeof value.retryable === "boolean";
   return {
     schemaVersion: TOOL_EXECUTION_ERROR_SCHEMA_VERSION,
@@ -274,7 +305,8 @@ function normalizeToolExecutionFailure(value) {
     requestId: boundedString(value.requestId),
     retryAfterMs: finiteNonNegativeInteger(value.retryAfterMs),
     networkKind: normalizeNetworkKind(value.networkKind),
-    networkScope: normalizeNetworkScope(value.networkScope)
+    networkScope: normalizeNetworkScope(value.networkScope),
+    ...publicDetails ? { publicDetails } : {}
   };
 }
 function serializeToolExecutionFailure(error) {
@@ -292,7 +324,8 @@ function serializeToolExecutionFailure(error) {
     requestId: error.requestId,
     retryAfterMs: error.retryAfterMs,
     networkKind: error.networkKind,
-    networkScope: error.networkScope
+    networkScope: error.networkScope,
+    publicDetails: error.publicDetails
   });
 }
 function deserializeToolExecutionFailure(message, value, acceptedSchemaVersion) {
@@ -350,6 +383,8 @@ var ToolRateLimitError = class extends RateLimitError {
   networkKind;
   /** Network boundary that failed, or `null` for non-network failures. */
   networkScope;
+  /** Explicitly allowlisted diagnostics safe for SDK callers. */
+  publicDetails;
   /** Constructed by the SDK after a structured tool HTTP 429. */
   constructor(message, options) {
     super(options.retryAfterMs ?? 5e3, message);
@@ -365,6 +400,7 @@ var ToolRateLimitError = class extends RateLimitError {
     this.requestId = options.requestId;
     this.networkKind = options.networkKind;
     this.networkScope = options.networkScope;
+    this.publicDetails = options.publicDetails ?? null;
     this.details = options.details;
     brandAsToolExecutionError(this);
     if (isProviderTransientFailure(this)) {
@@ -702,7 +738,7 @@ var SDK_RELEASE = {
   // available at toolResponse.rawV2 while toolResponse.raw and all declared
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
-  version: "0.3.47",
+  version: "0.3.49",
   updateSummary: "Automatic CLI updates are now enabled by default. To opt out, run `deepline settings autoupdate off`; use `deepline settings autoupdate on` to re-enable updates or `deepline settings autoupdate pin <version>` to hold an exact release. This release also adds raw-v2 tool responses at toolResponse.rawV2 while preserving existing toolResponse.raw and declared getters.",
   packageCapabilities: {
     updatePreferences: 1

package/dist/install-integrity.json

@@ -257,8 +257,8 @@
     "dist/cli/index.js",
     "dist/cli/index.mjs",
     "dist/cli/text-imports.d.ts",
-    "dist/compiler-manifest-BuoqasqI.d.mts",
-    "dist/compiler-manifest-BuoqasqI.d.ts",
+    "dist/compiler-manifest-CbzdZrJj.d.mts",
+    "dist/compiler-manifest-CbzdZrJj.d.ts",
     "dist/helpers.d.mts",
     "dist/helpers.d.ts",
     "dist/helpers.js",

package/dist/plays/bundle-play-file.d.mts

@@ -1,6 +1,6 @@
 /// <reference path="./text-imports.d.ts" />
-import { P as PlayArtifactKind, a as PlayBundleArtifact, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-BuoqasqI.mjs';
-export { d as PLAY_ARTIFACT_KINDS, e as PlayArtifactCompatibility, f as PlayImportPolicy, g as PlayPackageImport, h as PlayRuntimeFeature } from '../compiler-manifest-BuoqasqI.mjs';
+import { P as PlayArtifactKind, a as PlayBundleArtifact, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-CbzdZrJj.mjs';
+export { d as PLAY_ARTIFACT_KINDS, e as PlayArtifactCompatibility, f as PlayImportPolicy, g as PlayPackageImport, h as PlayRuntimeFeature } from '../compiler-manifest-CbzdZrJj.mjs';
 import '@sinclair/typebox';
 
 type ImportedPlayDependency = {

package/dist/plays/bundle-play-file.d.ts

@@ -1,6 +1,6 @@
 /// <reference path="./text-imports.d.ts" />
-import { P as PlayArtifactKind, a as PlayBundleArtifact, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-BuoqasqI.js';
-export { d as PLAY_ARTIFACT_KINDS, e as PlayArtifactCompatibility, f as PlayImportPolicy, g as PlayPackageImport, h as PlayRuntimeFeature } from '../compiler-manifest-BuoqasqI.js';
+import { P as PlayArtifactKind, a as PlayBundleArtifact, b as PlaySandboxRuntimeDeclaration, c as PlayCompilerManifest } from '../compiler-manifest-CbzdZrJj.js';
+export { d as PLAY_ARTIFACT_KINDS, e as PlayArtifactCompatibility, f as PlayImportPolicy, g as PlayPackageImport, h as PlayRuntimeFeature } from '../compiler-manifest-CbzdZrJj.js';
 import '@sinclair/typebox';
 
 type ImportedPlayDependency = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.3.47",
+  "version": "0.3.49",
   "description": "GTM data CLI and TypeScript SDK for coding agents",
   "license": "MIT",
   "homepage": "https://code.deepline.com",