deepline 0.3.472 → 0.3.473

package/dist/bundling-sources/sdk/src/release.ts

@@ -205,7 +205,7 @@ export const SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: '0.3.472',
+  version: '0.3.473',
   updateSummary: {
     introducedIn: '0.3.90',
     summary:

package/dist/bundling-sources/shared_libs/observability/scheduled-work-control.ts

@@ -40,6 +40,12 @@ export type ScheduledWorkControlContext = {
   readonly jobId: string;
   readonly environment: string;
   readonly target?: ScheduledWorkOrganizationTarget;
+  /**
+   * Test-only organization allow-list, admitted by the caller through the
+   * `scheduled_work.org_scope` internal capability. Only jobs a connector
+   * lists in `orgScopedJobIds` accept it.
+   */
+  readonly orgScope?: readonly string[];
   readonly requestedByUserId: string;
   readonly requestedByEmail: string;
   readonly reason: string;
@@ -59,6 +65,8 @@ export type ScheduledWorkControlConnector = {
   readonly jobIds: readonly string[];
   readonly actions: readonly ScheduledWorkControlAction[];
   readonly targetKind?: 'organization';
+  /** Jobs whose run may be restricted to an organization allow-list. */
+  readonly orgScopedJobIds?: readonly string[];
   readonly previewActions?: readonly ScheduledWorkControlAction[];
   preview?: (
     context: ScheduledWorkControlContext,
@@ -154,6 +162,15 @@ export class ScheduledWorkControlRegistry {
         `Scheduled-work connector ${connector.id} has invalid preview actions.`,
       );
     }
+    if (
+      connector.orgScopedJobIds?.some(
+        (jobId) => !connector.jobIds.includes(jobId),
+      )
+    ) {
+      throw new Error(
+        `Scheduled-work connector ${connector.id} scopes a job it does not own.`,
+      );
+    }
     const jobIds = new Set<string>();
     for (const jobId of connector.jobIds) {
       if (!jobId.trim())

package/dist/bundling-sources/shared_libs/observability/scheduled-work-manual.ts

@@ -59,3 +59,58 @@ export function isNonProductionOnDemandScheduledWork(
     isManuallyRunnableConvexCronJob(jobId)
   );
 }
+
+/**
+ * The Monitor recovery clocks that can run for an explicit organization
+ * allow-list instead of the whole deployment. On Preview these roots run only
+ * on demand, so a manual run is their sole cross-organization claimer; a
+ * scoped run lets a Gauntlet lane prove a clock without claiming another
+ * lane's work. Every other root refuses a scope.
+ */
+export const ORG_SCOPED_CONVEX_CRON_JOB_IDS = [
+  'convex.monitor-fleet-convergence-tick',
+  'convex.monitor-provider-repair-recovery-tick',
+  'convex.monitor-deployment-job-tick',
+] as const satisfies readonly ManuallyRunnableConvexCronJobId[];
+
+export type OrgScopedConvexCronJobId =
+  (typeof ORG_SCOPED_CONVEX_CRON_JOB_IDS)[number];
+
+const orgScopedConvexCronJobIds = new Set<string>(
+  ORG_SCOPED_CONVEX_CRON_JOB_IDS,
+);
+
+export function isOrgScopedConvexCronJob(
+  jobId: string,
+): jobId is OrgScopedConvexCronJobId {
+  return orgScopedConvexCronJobIds.has(jobId);
+}
+
+/** A scope names test organizations, not an account-wide sweep. */
+export const MAX_ORG_ALLOW_LIST = 20;
+
+/**
+ * Validate an organization allow-list. It must name at least one and at most
+ * `MAX_ORG_ALLOW_LIST` distinct, non-empty organization ids; an
+ * empty list would silently mean "nothing", which no caller intends.
+ */
+export function normalizeOrgAllowList(
+  orgIds: readonly string[],
+): string[] {
+  const normalized = orgIds.map((orgId) => orgId.trim());
+  if (normalized.length === 0) {
+    throw new Error('An organization scope must name at least one organization.');
+  }
+  if (normalized.length > MAX_ORG_ALLOW_LIST) {
+    throw new Error(
+      `An organization scope may name at most ${MAX_ORG_ALLOW_LIST} organizations.`,
+    );
+  }
+  if (normalized.some((orgId) => !orgId || orgId.length > 64)) {
+    throw new Error('Every scoped organization id must be 1-64 characters.');
+  }
+  if (new Set(normalized).size !== normalized.length) {
+    throw new Error('An organization scope must not repeat an organization.');
+  }
+  return normalized;
+}

package/dist/bundling-sources/shared_libs/play-runtime/scheduler-backends/run-ledger-outbox-recovery.ts

@@ -938,6 +938,12 @@ export function startRunLedgerOutboxRecovery(
  * together for projection.
  */
 export const RUN_CREATED_INLINE_DELIVERY_DEADLINE_MS = 1_500;
+/**
+ * A response-owned background attempt can finish a cold projection without
+ * holding admission open. Keep its deadline plus release grace below the
+ * existing five-second delivery lease; foreground callers retain 1.5 seconds.
+ */
+export const RUN_CREATED_BACKGROUND_DELIVERY_DEADLINE_MS = 4_000;
 /**
  * How long an abandoned inline attempt may keep its caller while it gives the
  * lease back. The caller is the only owner of that release: a serverless
@@ -1016,7 +1022,8 @@ function inlineAttemptErrorClass(error: unknown): string {
  * Never throws and never exceeds `deadlineMs` plus the release grace. A
  * deadline abandons the append and releases its lease without charging a
  * retry, and that release completes before this returns whenever it fits the
- * grace: nothing else keeps the admitting invocation alive for it.
+ * grace. Background callers own the returned promise through their response
+ * lifecycle; foreground callers retain the shorter inline deadline.
  */
 export async function deliverRunCreatedOutboxEventInline(input: {
   runId: string;
@@ -1024,6 +1031,8 @@ export async function deliverRunCreatedOutboxEventInline(input: {
   schedulerOptions?: Pick<PostgresSchedulerOptions, 'schema'>;
   tokenAuthority: RunLedgerOutboxTokenAuthority;
   appRuntimeFetch?: typeof fetch;
+  /** The caller owns this attempt through its after-response lifecycle. */
+  background?: boolean;
   deadlineMs?: number;
   /** Test seam; clamped to `RUN_CREATED_INLINE_RELEASE_GRACE_MS`. */
   releaseGraceMs?: number;
@@ -1032,12 +1041,12 @@ export async function deliverRunCreatedOutboxEventInline(input: {
   const now = input.now ?? Date.now;
   const startedAt = now();
   const elapsed = () => Math.max(0, now() - startedAt);
+  const maximumDeadlineMs = input.background
+    ? RUN_CREATED_BACKGROUND_DELIVERY_DEADLINE_MS
+    : RUN_CREATED_INLINE_DELIVERY_DEADLINE_MS;
   const deadlineMs = Math.max(
     1,
-    Math.min(
-      RUN_CREATED_INLINE_DELIVERY_DEADLINE_MS,
-      input.deadlineMs ?? RUN_CREATED_INLINE_DELIVERY_DEADLINE_MS,
-    ),
+    Math.min(maximumDeadlineMs, input.deadlineMs ?? maximumDeadlineMs),
   );
   const releaseGraceMs = Math.max(
     1,

package/dist/cli/auth-IJOWKNSB.js

@@ -0,0 +1,41 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _chunk4U3RNA3Jjs = require('./chunk-4U3RNA3J.js');
+require('./chunk-DD7E4ZVH.js');
+require('./chunk-F4PUDYBY.js');
+require('./chunk-YH5SFKHJ.js');
+require('./chunk-ALJJRZNJ.js');
+require('./chunk-XNYIZMNQ.js');
+require('./chunk-DIAWYWT5.js');
+require('./chunk-IC6AHOYS.js');
+require('./chunk-OG64RBAC.js');
+require('./chunk-COGTRVWW.js');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.EXIT_WORKSPACE_MISMATCH = _chunk4U3RNA3Jjs.EXIT_WORKSPACE_MISMATCH; exports.authStatusLine = _chunk4U3RNA3Jjs.authStatusLine; exports.clearPendingClaim = _chunk4U3RNA3Jjs.clearPendingClaim; exports.clearSatisfiedPendingClaim = _chunk4U3RNA3Jjs.clearSatisfiedPendingClaim; exports.handleRegister = _chunk4U3RNA3Jjs.handleRegister; exports.handleStatus = _chunk4U3RNA3Jjs.handleStatus; exports.handleWait = _chunk4U3RNA3Jjs.handleWait; exports.httpJson = _chunk4U3RNA3Jjs.httpJson; exports.readPendingAuthClaim = _chunk4U3RNA3Jjs.readPendingAuthClaim; exports.readStatusBanner = _chunk4U3RNA3Jjs.readStatusBanner; exports.registerAuthCommands = _chunk4U3RNA3Jjs.registerAuthCommands; exports.reportSetupCompleted = _chunk4U3RNA3Jjs.reportSetupCompleted; exports.resolvePendingAuthClaimForResume = _chunk4U3RNA3Jjs.resolvePendingAuthClaimForResume; exports.statusBannerLine = _chunk4U3RNA3Jjs.statusBannerLine;

package/dist/cli/{auth-35DAEPHC.mjs → auth-KLJOQ4DZ.mjs}

@@ -13,14 +13,14 @@ import {
   reportSetupCompleted,
   resolvePendingAuthClaimForResume,
   statusBannerLine
-} from "./chunk-ZZQIS3TH.mjs";
-import "./chunk-4NFBYW7X.mjs";
-import "./chunk-KQJHIVCE.mjs";
-import "./chunk-OMPW5ELS.mjs";
+} from "./chunk-NTFM7JQW.mjs";
+import "./chunk-QG3THSTN.mjs";
+import "./chunk-GE5GPLNM.mjs";
+import "./chunk-EUHTZV2E.mjs";
 import "./chunk-4QF2K7TM.mjs";
 import "./chunk-DLIRSHV6.mjs";
 import "./chunk-HBL4PM5Q.mjs";
-import "./chunk-JRZW4LWK.mjs";
+import "./chunk-TBLBYIKO.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";
 export {

package/dist/cli/{billing-CXVBJEC4.mjs → billing-DNDYNBQ7.mjs}

@@ -1,10 +1,10 @@
 import {
   DeeplineClient
-} from "./chunk-CFDQZQE2.mjs";
+} from "./chunk-GTH7JORC.mjs";
 import {
   iterateCursorPages,
   requireBillingIdempotencyKey
-} from "./chunk-YK64LQPQ.mjs";
+} from "./chunk-X6R5UNDZ.mjs";
 import "./chunk-L2VKAASU.mjs";
 import "./chunk-NELMCOWK.mjs";
 import "./chunk-S3A4IXBQ.mjs";
@@ -15,9 +15,9 @@ import {
   openInBrowser,
   printCommandEnvelope,
   shouldEmitJson
-} from "./chunk-4NFBYW7X.mjs";
-import "./chunk-KQJHIVCE.mjs";
-import "./chunk-OMPW5ELS.mjs";
+} from "./chunk-QG3THSTN.mjs";
+import "./chunk-GE5GPLNM.mjs";
+import "./chunk-EUHTZV2E.mjs";
 import {
   AuthError,
   ConfigError
@@ -26,7 +26,7 @@ import "./chunk-DLIRSHV6.mjs";
 import {
   DeeplineError
 } from "./chunk-HBL4PM5Q.mjs";
-import "./chunk-JRZW4LWK.mjs";
+import "./chunk-TBLBYIKO.mjs";
 import "./chunk-WZYKRD7T.mjs";
 import "./chunk-KRD6H754.mjs";