deepline 0.1.109 → 0.1.110

package/dist/cli/index.mjs

@@ -1,8 +1,165 @@
 #!/usr/bin/env node
 
+// src/cli/proxy-env.ts
+import { Agent, Dispatcher, ProxyAgent, setGlobalDispatcher } from "undici";
+function defaultPort(protocol) {
+  return protocol === "https:" ? "443" : "80";
+}
+function proxyEnvValue(name) {
+  return process.env[name]?.trim() ?? "";
+}
+function firstProxyEnv(...names) {
+  for (const name of names) {
+    const value = proxyEnvValue(name);
+    if (value) {
+      return value;
+    }
+  }
+  return "";
+}
+function ipv4ToNumber(value) {
+  const parts = value.split(".");
+  if (parts.length !== 4) {
+    return null;
+  }
+  let result = 0;
+  for (const part of parts) {
+    if (!/^\d+$/.test(part)) {
+      return null;
+    }
+    const parsed = Number(part);
+    if (parsed < 0 || parsed > 255) {
+      return null;
+    }
+    result = (result << 8) + parsed;
+  }
+  return result >>> 0;
+}
+function ipv4MatchesCidr(hostname3, cidr) {
+  const [range, bitsRaw] = cidr.split("/");
+  const hostValue = ipv4ToNumber(hostname3);
+  const rangeValue = range ? ipv4ToNumber(range) : null;
+  const bits = Number(bitsRaw);
+  if (hostValue === null || rangeValue === null || !Number.isInteger(bits) || bits < 0 || bits > 32) {
+    return false;
+  }
+  const mask = bits === 0 ? 0 : 4294967295 << 32 - bits >>> 0;
+  return (hostValue & mask) === (rangeValue & mask);
+}
+function splitNoProxyHostPort(entry) {
+  const bracketed = entry.match(/^\[([^\]]+)\](?::(\d+))?$/);
+  if (bracketed) {
+    return { host: bracketed[1].toLowerCase(), port: bracketed[2] ?? null };
+  }
+  const portMatch = entry.match(/^([^:]+):(\d+)$/);
+  if (portMatch) {
+    return { host: portMatch[1].toLowerCase(), port: portMatch[2] ?? null };
+  }
+  return { host: entry.toLowerCase(), port: null };
+}
+function noProxyMatches(url, noProxy) {
+  const hostname3 = url.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+  const port = url.port || defaultPort(url.protocol);
+  for (const rawEntry of noProxy.split(/[,\s]+/)) {
+    const entry = rawEntry.trim().toLowerCase();
+    if (!entry) {
+      continue;
+    }
+    if (entry === "*") {
+      return true;
+    }
+    const { host, port: entryPort } = splitNoProxyHostPort(entry);
+    if (entryPort && entryPort !== port) {
+      continue;
+    }
+    if (host.includes("/") && ipv4MatchesCidr(hostname3, host)) {
+      return true;
+    }
+    if (host.startsWith("*.")) {
+      const suffix = host.slice(2);
+      if (hostname3.endsWith(`.${suffix}`)) {
+        return true;
+      }
+      continue;
+    }
+    if (host.startsWith(".")) {
+      const suffix = host.slice(1);
+      if (hostname3 === suffix || hostname3.endsWith(host)) {
+        return true;
+      }
+      continue;
+    }
+    if (hostname3 === host || hostname3.endsWith(`.${host}`)) {
+      return true;
+    }
+  }
+  return false;
+}
+var EnvProxyDispatcher = class extends Dispatcher {
+  directAgent = new Agent();
+  httpProxyAgent;
+  httpsProxyAgent;
+  noProxy;
+  constructor(options) {
+    super();
+    this.httpProxyAgent = options.httpProxy ? new ProxyAgent(options.httpProxy) : null;
+    this.httpsProxyAgent = options.httpsProxy ? new ProxyAgent(options.httpsProxy) : this.httpProxyAgent;
+    this.noProxy = options.noProxy;
+  }
+  dispatch(options, handler) {
+    const origin = new URL(String(options.origin));
+    if (this.noProxy && noProxyMatches(origin, this.noProxy)) {
+      return this.directAgent.dispatch(options, handler);
+    }
+    const proxyAgent = origin.protocol === "https:" ? this.httpsProxyAgent : this.httpProxyAgent;
+    return (proxyAgent ?? this.directAgent).dispatch(options, handler);
+  }
+  close(callback) {
+    const promise = Promise.all([
+      this.directAgent.close(),
+      this.httpProxyAgent?.close(),
+      this.httpsProxyAgent && this.httpsProxyAgent !== this.httpProxyAgent ? this.httpsProxyAgent.close() : void 0
+    ]).then(() => void 0);
+    if (callback) {
+      promise.then(callback, callback);
+      return;
+    }
+    return promise;
+  }
+  destroy(errorOrCallback, callback) {
+    const error = typeof errorOrCallback === "function" ? null : errorOrCallback ?? null;
+    const done = typeof errorOrCallback === "function" ? errorOrCallback : callback;
+    const promise = Promise.all([
+      this.directAgent.destroy(error),
+      this.httpProxyAgent?.destroy(error),
+      this.httpsProxyAgent && this.httpsProxyAgent !== this.httpProxyAgent ? this.httpsProxyAgent.destroy(error) : void 0
+    ]).then(() => void 0);
+    if (done) {
+      promise.then(done, done);
+      return;
+    }
+    return promise;
+  }
+};
+function configureProxyFromEnv() {
+  const httpProxy = firstProxyEnv("HTTP_PROXY", "http_proxy");
+  const httpsProxy = firstProxyEnv("HTTPS_PROXY", "https_proxy") || httpProxy;
+  if (!httpProxy && !httpsProxy) {
+    return;
+  }
+  setGlobalDispatcher(
+    new EnvProxyDispatcher({
+      httpProxy,
+      httpsProxy,
+      noProxy: firstProxyEnv("NO_PROXY", "no_proxy")
+    })
+  );
+}
+configureProxyFromEnv();
+
 // src/cli/index.ts
 import { mkdtemp as mkdtemp2, rm as rm2, writeFile as writeFile6 } from "fs/promises";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 import { tmpdir as tmpdir5 } from "os";
 import { Command as Command3 } from "commander";
 
@@ -223,10 +380,10 @@ var SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: "0.1.109",
+  version: "0.1.110",
   apiContract: "2026-06-dataset-column-cell-stale-hard-cutover",
   supportPolicy: {
-    latest: "0.1.109",
+    latest: "0.1.110",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -253,6 +410,7 @@ var SYNTHETIC_RUN_HEADER = "x-deepline-synthetic-run";
 
 // src/http.ts
 var MAX_DIAGNOSTIC_HEADER_LENGTH = 120;
+var COWORK_NETWORK_HINT = "Claude Cowork appears to be running Deepline in a network-restricted sandbox. In Claude Desktop, open Settings > Capabilities, turn on Allow network egress, and set Domain allowlist to All domains for the Cowork session.";
 var HttpClient = class {
   constructor(config) {
     this.config = config;
@@ -288,6 +446,7 @@ var HttpClient = class {
       "User-Agent": `deepline-ts-sdk/${SDK_VERSION}`,
       "X-Deepline-Client-Family": "sdk",
       "X-Deepline-CLI-Family": "sdk",
+      "X-Deepline-Agent-Runtime": detectAgentRuntime(),
       "X-Deepline-CLI-Version": SDK_VERSION,
       "X-Deepline-SDK-Version": SDK_VERSION,
       "X-Deepline-API-Contract": SDK_API_CONTRACT,
@@ -390,12 +549,13 @@ var HttpClient = class {
             parsed = body;
           }
           if (!response.ok) {
+            const retryableApiError = options?.retryApiErrors === true && isRetryableApiErrorResponse(response.status);
             const htmlError = detectHtmlErrorBody(
               body,
               response.headers.get("content-type")
             );
             if (htmlError) {
-              throw new DeeplineError(
+              lastError = new DeeplineError(
                 htmlError.message(response.status),
                 response.status,
                 "API_ERROR",
@@ -405,12 +565,23 @@ var HttpClient = class {
                   ...htmlError.workerThrewException ? { workerThrewException: true } : {}
                 }
               );
+              if (retryableApiError && attempt < this.config.maxRetries) {
+                retryAfterDelayMs = parseOptionalRetryAfter(response);
+                break;
+              }
+              throw lastError;
             }
             const errorValue = typeof parsed === "object" && parsed && "error" in parsed ? parsed.error : void 0;
             const msg = typeof errorValue === "string" ? errorValue : errorValue && typeof errorValue === "object" && "message" in errorValue && typeof errorValue.message === "string" ? errorValue.message : typeof parsed === "object" && parsed && "message" in parsed && typeof parsed.message === "string" ? parsed.message : `HTTP ${response.status}`;
-            throw new DeeplineError(msg, response.status, "API_ERROR", {
+            const apiErrorCode = errorValue && typeof errorValue === "object" && typeof errorValue.code === "string" ? errorValue.code : "API_ERROR";
+            lastError = new DeeplineError(msg, response.status, apiErrorCode, {
               response: parsed
             });
+            if (retryableApiError && attempt < this.config.maxRetries) {
+              retryAfterDelayMs = parseOptionalRetryAfter(response);
+              break;
+            }
+            throw lastError;
           }
           return parsed;
         } catch (error) {
@@ -430,8 +601,8 @@ var HttpClient = class {
     if (lastError instanceof DeeplineError) {
       throw lastError;
     }
-    const errorMessage3 = lastError?.message ? `Unable to connect to ${baseUrl}. ${lastError.message}` : `Unable to connect to ${baseUrl}. Is the computer able to access the url?`;
-    throw new DeeplineError(errorMessage3);
+    const errorMessage4 = lastError?.message ? `Unable to connect to ${baseUrl}. ${lastError.message}` : `Unable to connect to ${baseUrl}. Is the computer able to access the url?`;
+    throw new DeeplineError(withCoworkNetworkHint(errorMessage4));
   }
   /**
    * Send a GET request.
@@ -503,7 +674,9 @@ var HttpClient = class {
       }
     }
     throw new DeeplineError(
-      lastError?.message ? `Unable to stream from ${this.config.baseUrl}. ${lastError.message}` : `Unable to stream from ${this.config.baseUrl}.`
+      withCoworkNetworkHint(
+        lastError?.message ? `Unable to stream from ${this.config.baseUrl}. ${lastError.message}` : `Unable to stream from ${this.config.baseUrl}.`
+      )
     );
   }
   /**
@@ -513,11 +686,12 @@ var HttpClient = class {
    * @param path - API path
    * @param body - Request body (will be JSON-serialized)
    */
-  async post(path, body, headers) {
+  async post(path, body, headers, options) {
     return this.request(path, {
       method: "POST",
       body,
-      headers
+      headers,
+      ...options
     });
   }
   async postFormData(path, formData, headers) {
@@ -558,6 +732,9 @@ function parseResponseBody(body) {
     return body;
   }
 }
+function isRetryableApiErrorResponse(status) {
+  return status === 408 || status === 425 || status >= 500 && status < 600;
+}
 function detectHtmlErrorBody(body, contentType) {
   const trimmed = body.trim();
   const lower = trimmed.toLowerCase();
@@ -597,6 +774,9 @@ function apiErrorMessage(parsed, status) {
   return `HTTP ${status}`;
 }
 function parseRetryAfter(response) {
+  return parseOptionalRetryAfter(response) ?? 5e3;
+}
+function parseOptionalRetryAfter(response) {
   const header = response.headers.get("retry-after");
   if (header) {
     const seconds = Number(header);
@@ -604,7 +784,7 @@ function parseRetryAfter(response) {
       return seconds * 1e3;
     }
   }
-  return 5e3;
+  return null;
 }
 function buildCandidateUrls(url) {
   try {
@@ -661,6 +841,39 @@ function decodeSseFrame(frame) {
 function sleep(ms) {
   return new Promise((resolve16) => setTimeout(resolve16, ms));
 }
+function isTruthyEnv(name) {
+  const normalized = process.env[name]?.trim().toLowerCase();
+  return ["1", "true", "yes", "on"].includes(normalized ?? "");
+}
+function isCoworkLikeSandbox() {
+  const pluginMode = isTruthyEnv("DEEPLINE_PLUGIN_MODE");
+  const claudeRemote = isTruthyEnv("CLAUDE_CODE_REMOTE");
+  const projectDir = Boolean(process.env.CLAUDE_PROJECT_DIR?.trim());
+  const pluginRoot = Boolean(process.env.DEEPLINE_PLUGIN_ROOT?.trim());
+  const home = process.env.HOME?.trim() ?? "";
+  const sessionHome = home.startsWith("/sessions/");
+  return (pluginMode || pluginRoot) && (claudeRemote || projectDir || sessionHome);
+}
+function detectAgentRuntime() {
+  if (process.env.CODEX_THREAD_ID?.trim()) return "codex";
+  if (isCoworkLikeSandbox()) return "claude_cowork";
+  if (process.env.CLAUDECODE?.trim() === "1") return "claude_code";
+  if (process.env.CLINE_ACTIVE?.trim().toLowerCase() === "true") return "cline";
+  if (process.env.CURSOR_TRACE_ID?.trim() || process.env.CURSOR_AGENT?.trim()) {
+    return "cursor";
+  }
+  if (process.env.WINDSURF?.trim() || process.env.CASCADE?.trim()) {
+    return "windsurf";
+  }
+  return "unknown";
+}
+function withCoworkNetworkHint(message) {
+  if (!isCoworkLikeSandbox() || message.includes(COWORK_NETWORK_HINT)) {
+    return message;
+  }
+  return `${message}
+${COWORK_NETWORK_HINT}`;
+}
 
 // src/stream-reconnect.ts
 var STREAM_RECONNECT_BASE_DELAY_MS = 500;
@@ -1937,12 +2150,12 @@ var DeeplineClient = class {
    * Returns everything from {@link ToolDefinition} plus pricing info, sample
    * inputs/outputs, failure modes, and cost estimates.
    *
-   * @param toolId - Tool identifier (e.g. `"apollo_people_search"`)
+   * @param toolId - Tool identifier (e.g. `"dropleads_search_people"`)
    * @returns Full tool metadata
    *
    * @example
    * ```typescript
-   * const meta = await client.getTool('apollo_people_search');
+   * const meta = await client.getTool('dropleads_search_people');
    * console.log(`Cost: ${meta.estimatedCreditsRange} credits`);
    * console.log(`Input schema:`, meta.inputSchema);
    * ```
@@ -1974,7 +2187,8 @@ var DeeplineClient = class {
     return this.http.post(
       `/api/v2/integrations/${encodeURIComponent(toolId)}/execute`,
       { payload: input2 },
-      headers
+      headers,
+      { forbiddenAsApiError: true }
     );
   }
   /**
@@ -2056,7 +2270,7 @@ var DeeplineClient = class {
         ...request.force ? { force: true } : {},
         ...typeof request.waitForCompletionMs === "number" ? { waitForCompletionMs: request.waitForCompletionMs } : {},
         // Profile selection is the API's job, not the CLI's. The server
-        // hardcodes workers_edge as the default; tests that want a
+        // defaults to workers_edge; tests and runtime probes that want a
         // different profile pass `request.profile` explicitly.
         ...request.profile ? { profile: request.profile } : {}
       }
@@ -2121,10 +2335,15 @@ var DeeplineClient = class {
       sourceFiles: input2.sourceFiles,
       artifact: input2.artifact
     });
-    return this.http.post("/api/v2/plays/artifacts", {
-      ...input2,
-      compilerManifest
-    });
+    return this.http.post(
+      "/api/v2/plays/artifacts",
+      {
+        ...input2,
+        compilerManifest
+      },
+      void 0,
+      { forbiddenAsApiError: true, retryApiErrors: true }
+    );
   }
   /**
    * Register multiple bundled play artifacts in one request.
@@ -2134,7 +2353,12 @@ var DeeplineClient = class {
    */
   async registerPlayArtifacts(artifacts) {
     if (artifacts.length === 0) {
-      return this.http.post("/api/v2/plays/artifacts", { artifacts });
+      return this.http.post(
+        "/api/v2/plays/artifacts",
+        { artifacts },
+        void 0,
+        { forbiddenAsApiError: true, retryApiErrors: true }
+      );
     }
     const compiledArtifacts = await mapWithConcurrency(
       artifacts,
@@ -2152,9 +2376,14 @@ var DeeplineClient = class {
     const responses = [];
     for (const chunk of chunkRegisterPlayArtifacts(compiledArtifacts)) {
       responses.push(
-        await this.http.post("/api/v2/plays/artifacts", {
-          artifacts: chunk
-        })
+        await this.http.post(
+          "/api/v2/plays/artifacts",
+          {
+            artifacts: chunk
+          },
+          void 0,
+          { forbiddenAsApiError: true, retryApiErrors: true }
+        )
       );
     }
     return {
@@ -2959,7 +3188,9 @@ var DeeplineClient = class {
     const encodedName = encodeURIComponent(name);
     return this.http.post(
       `/api/v2/plays/${encodedName}/live`,
-      request
+      request,
+      void 0,
+      { forbiddenAsApiError: true }
     );
   }
   /**
@@ -3542,11 +3773,53 @@ function sleep3(ms) {
   return new Promise((resolvePromise) => setTimeout(resolvePromise, ms));
 }
 function collectLocalEnvInfo() {
-  return {
+  const info = {
     os: `${process.platform} ${process.arch}`,
     node_version: process.version,
-    home_dir: homedir3()
+    home_dir: homedir3(),
+    agent_runtime: detectAgentRuntime2()
   };
+  const env = process.env;
+  const optional = {
+    claude_code_remote: env.CLAUDE_CODE_REMOTE,
+    deepline_plugin_mode: env.DEEPLINE_PLUGIN_MODE
+  };
+  for (const [key, value] of Object.entries(optional)) {
+    if (value?.trim()) info[key] = value.trim();
+  }
+  if (env.CLAUDE_PROJECT_DIR?.trim()) {
+    info.claude_project_dir_present = "true";
+  }
+  if (env.DEEPLINE_PLUGIN_ROOT?.trim()) {
+    info.deepline_plugin_root_present = "true";
+  }
+  if (env.DEEPLINE_PLUGIN_SKILLS_DIR?.trim()) {
+    info.deepline_plugin_skills_dir_present = "true";
+  }
+  if (info.home_dir.startsWith("/sessions/")) {
+    info.home_scope = "sessions";
+  }
+  return info;
+}
+function detectAgentRuntime2() {
+  if (process.env.CODEX_THREAD_ID?.trim()) return "codex";
+  const pluginMode = process.env.DEEPLINE_PLUGIN_MODE?.trim().toLowerCase();
+  const claudeRemote = process.env.CLAUDE_CODE_REMOTE?.trim().toLowerCase();
+  const sessionHome = (process.env.HOME?.trim() || homedir3()).startsWith(
+    "/sessions/"
+  );
+  if (["1", "true", "yes", "on"].includes(pluginMode ?? "") && (["1", "true", "yes", "on"].includes(claudeRemote ?? "") || Boolean(process.env.CLAUDE_PROJECT_DIR?.trim()) || sessionHome)) {
+    return "claude_cowork";
+  }
+  if (process.env.CLAUDECODE?.trim() === "1") return "claude_code";
+  if (process.env.CLINE_ACTIVE?.trim().toLowerCase() === "true") return "cline";
+  if (process.env.CURSOR_TRACE_ID?.trim() || process.env.CURSOR_AGENT?.trim()) {
+    return "cursor";
+  }
+  if (process.env.WINDSURF?.trim() || process.env.CASCADE?.trim()) {
+    return "windsurf";
+  }
+  return "unknown";
 }
 function readCsvRows(csvPath) {
   const raw = readFileSync3(resolve2(csvPath), "utf-8");
@@ -3814,7 +4087,14 @@ function saveEnvValues(values, baseUrl) {
 }
 async function httpJson(method, url, apiKey, body) {
   const headers = {
-    "Content-Type": "application/json"
+    "Content-Type": "application/json",
+    "User-Agent": `deepline-ts-sdk/${SDK_VERSION}`,
+    "X-Deepline-Client-Family": "sdk",
+    "X-Deepline-CLI-Family": "sdk",
+    "X-Deepline-Agent-Runtime": detectAgentRuntime2(),
+    "X-Deepline-CLI-Version": SDK_VERSION,
+    "X-Deepline-SDK-Version": SDK_VERSION,
+    "X-Deepline-API-Contract": SDK_API_CONTRACT
   };
   if (apiKey) headers["Authorization"] = `Bearer ${apiKey}`;
   let response = null;
@@ -4672,7 +4952,7 @@ async function handlePlans(options) {
   );
   const activePlan = payload.active_plan ?? {};
   const plans = Array.isArray(payload.plans) ? payload.plans : [];
-  const metrics = Array.isArray(payload.metrics) ? payload.metrics : [];
+  const meters = Array.isArray(payload.meters) ? payload.meters : Array.isArray(payload.metrics) ? payload.metrics : [];
   const lines = [
     `Catalog: ${payload.catalog_id ?? "(unknown)"} (version ${payload.catalog_version ?? "(unknown)"})`,
     `Active plan: ${activePlan.public_name ?? "(unknown)"} (${activePlan.plan_version_id ?? "(unknown)"})`,
@@ -4683,10 +4963,10 @@ async function handlePlans(options) {
         (plan) => `${plan.public_name ?? "(unknown)"} (${plan.plan_version_id ?? "(unknown)"}) | ${planPriceText(plan.price_usd, plan.price_interval)} | ${plan.monthly_grant_credits ?? 0} credits/cycle | ${planRolloverText(plan.rollover)} | ${plan.acquirable ? "acquirable" : "not acquirable"}`
       )
     ],
-    ...metrics.length === 0 ? ["Metrics: none"] : [
+    ...meters.length === 0 ? ["Metrics: none"] : [
       "Metrics:",
-      ...metrics.map(
-        (metric) => `${metric.id ?? "(unknown)"} | ${metric.name ?? "(unknown)"}`
+      ...meters.map(
+        (meter) => `${meter.id ?? "(unknown)"} | ${meter.name ?? "(unknown)"}`
       )
     ]
   ];
@@ -7143,17 +7423,58 @@ async function analyzeSourceGraph(entryFile, adapter) {
 }
 async function computeWorkersHarnessFingerprintWithAdapter(adapter) {
   const { readdir } = await import("fs/promises");
+  const addFilePart = async (parts2, rootDir, filePath) => {
+    const contents = await readFile(filePath, "utf-8");
+    parts2.push({
+      name: `${basename(rootDir)}:${filePath.slice(rootDir.length + 1)}`,
+      hash: sha256(contents)
+    });
+  };
+  const collectTopLevelTsFiles = async (rootDir, parts2) => {
+    if (!await fileExists(rootDir)) return;
+    const entries2 = await readdir(rootDir, { withFileTypes: true });
+    const tsFiles2 = entries2.filter((entry) => entry.isFile() && /\.[cm]?ts$/.test(entry.name)).map((entry) => entry.name).sort();
+    for (const name of tsFiles2) {
+      await addFilePart(parts2, rootDir, join4(rootDir, name));
+    }
+  };
+  const collectIntegrationBatchingFiles = async (rootDir, parts2) => {
+    if (!await fileExists(rootDir)) return;
+    const entries2 = await readdir(rootDir, { withFileTypes: true });
+    const filePaths = [];
+    for (const entry of entries2) {
+      if (entry.isFile() && (entry.name === "play-runtime-batching-registry.ts" || /^batching.*\.ts$/.test(entry.name))) {
+        filePaths.push(join4(rootDir, entry.name));
+      }
+      if (entry.isDirectory()) {
+        const batchingFile = join4(rootDir, entry.name, "batching.ts");
+        if (await fileExists(batchingFile)) {
+          filePaths.push(batchingFile);
+        }
+      }
+    }
+    for (const filePath of filePaths.sort()) {
+      await addFilePart(parts2, rootDir, filePath);
+    }
+  };
   const entries = await readdir(adapter.workersHarnessFilesDir, {
     withFileTypes: true
   });
   const tsFiles = entries.filter((e) => e.isFile() && /\.[cm]?ts$/.test(e.name)).map((e) => e.name).sort();
   const parts = [];
   for (const name of tsFiles) {
-    const contents = await readFile(
-      join4(adapter.workersHarnessFilesDir, name),
-      "utf-8"
+    await addFilePart(
+      parts,
+      adapter.workersHarnessFilesDir,
+      join4(adapter.workersHarnessFilesDir, name)
     );
-    parts.push({ name, hash: sha256(contents) });
+  }
+  for (const dir of adapter.workersRuntimeFingerprintDirs ?? []) {
+    if (basename(dir) === "integrations") {
+      await collectIntegrationBatchingFiles(dir, parts);
+    } else {
+      await collectTopLevelTsFiles(dir, parts);
+    }
   }
   return sha256(JSON.stringify(parts));
 }
@@ -8017,6 +8338,9 @@ function createSdkPlayBundlingAdapter() {
     sdkWorkersEntryFile: SDK_WORKERS_ENTRY_FILE,
     workersHarnessEntryFile: WORKERS_HARNESS_ENTRY_FILE,
     workersHarnessFilesDir: WORKERS_HARNESS_FILES_DIR,
+    workersRuntimeFingerprintDirs: [
+      resolve8(PROJECT_ROOT, "shared_libs", "play-runtime")
+    ],
     discoverPackagedLocalFiles,
     warnAboutNonDevelopmentBundling
   };
@@ -8027,7 +8351,8 @@ async function bundlePlayFile2(filePath, options = {}) {
     exportName: options.exportName,
     adapter: createSdkPlayBundlingAdapter()
   });
-  if (result.success) validatePlaySourceFilesHaveNoInlineSecrets(result.sourceFiles);
+  if (result.success)
+    validatePlaySourceFilesHaveNoInlineSecrets(result.sourceFiles);
   return result;
 }
 
@@ -8209,17 +8534,17 @@ function templateExample(template) {
     case "people-list":
       return "deepline plays bootstrap people-list --from provider:dropleads_search_people --out people.play.ts";
     case "company-list":
-      return "deepline plays bootstrap company-list --from provider:apollo_company_search --out companies.play.ts";
+      return "deepline plays bootstrap company-list --from provider:crustdata_companydb_search --out companies.play.ts";
     case "people-email":
       return "deepline plays bootstrap people-email --from csv:data/leads.csv --using play:prebuilt/name-and-domain-to-email-waterfall --out email-flow.play.ts";
     case "people-phone":
       return "deepline plays bootstrap people-phone --from csv:data/vp_contacts.csv --using play:prebuilt/person-to-phone --out phone-flow.play.ts";
     case "company-people":
-      return "deepline plays bootstrap company-people --from provider:apollo_company_search --using play:prebuilt/company-to-contact --out company-people.play.ts";
+      return "deepline plays bootstrap company-people --from provider:crustdata_companydb_search --using play:prebuilt/company-to-contact --out company-people.play.ts";
     case "company-people-email":
-      return "deepline plays bootstrap company-people-email --from provider:apollo_company_search --people play:prebuilt/company-to-contact --email providers:hunter_email_finder,leadmagic_email_finder --out account-emails.play.ts";
+      return "deepline plays bootstrap company-people-email --from provider:crustdata_companydb_search --people play:prebuilt/company-to-contact --email providers:hunter_email_finder,leadmagic_email_finder --out account-emails.play.ts";
     case "company-people-phone":
-      return "deepline plays bootstrap company-people-phone --from provider:apollo_company_search --people play:prebuilt/company-to-contact --phone providers:ai_ark_mobile_phone_finder --out account-phones.play.ts";
+      return "deepline plays bootstrap company-people-phone --from provider:crustdata_companydb_search --people play:prebuilt/company-to-contact --phone providers:ai_ark_mobile_phone_finder --out account-phones.play.ts";
   }
 }
 var PLAY_BOOTSTRAP_STAGE_NAMES = [
@@ -9521,8 +9846,8 @@ Examples:
   deepline plays run email-flow.play.ts --input '{"limit":5}' --watch
 
   deepline plays bootstrap people-email --from provider:dropleads_search_people --using providers:hunter_email_finder,leadmagic_email_finder --limit 5 --out prospecting.play.ts
-  deepline plays bootstrap company-people-email --from provider:apollo_company_search --people play:prebuilt/company-to-contact --email play:prebuilt/name-and-domain-to-email-waterfall --limit 5 --out account-contacts.play.ts
-  deepline plays bootstrap company-list --from provider:apollo_company_search --limit 5 --out companies.play.ts
+  deepline plays bootstrap company-people-email --from provider:crustdata_companydb_search --people play:prebuilt/company-to-contact --email play:prebuilt/name-and-domain-to-email-waterfall --limit 5 --out account-contacts.play.ts
+  deepline plays bootstrap company-list --from provider:crustdata_companydb_search --limit 5 --out companies.play.ts
 `
   ).option("--name <name>", "Generated play name").option(
     "--from <ref>",
@@ -9701,11 +10026,11 @@ function createCliProgress(enabled) {
 
 // src/cli/trace.ts
 var cliTraceStartedAt = Date.now();
-function isTruthyEnv(value) {
+function isTruthyEnv2(value) {
   return value === "1" || value === "true" || value === "yes";
 }
 function isCliTraceEnabled() {
-  return isTruthyEnv(process.env.DEEPLINE_CLI_TRACE);
+  return isTruthyEnv2(process.env.DEEPLINE_CLI_TRACE);
 }
 function recordCliTrace(event) {
   if (!isCliTraceEnabled()) {
@@ -12825,7 +13150,7 @@ function writeStartedPlayRun(input2) {
   );
 }
 function parsePlayRunOptions(args) {
-  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--no-open] [--json] [--full] [--<input> value]\n       --profile defaults to workers_edge; hatchet is the durable Daytona-backed preview runtime.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotency, tool call id, and ctx.dataset guidance.";
+  const usage = "Usage: deepline plays run <play-name> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run <play-file.ts> [--input '{...}'] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --file <play-file.ts> [--input '{...}'] [--profile <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--full] [--<input> value]\n       deepline plays run --name <name> [--input '{...}'] [--profile <id>] [--live|--latest|--revision-id <id>] [--no-wait] [--tail-timeout-ms 30000] [--force] [--no-open] [--json] [--full] [--<input> value]\n       --profile defaults to workers_edge; pass hatchet explicitly for Hatchet runtime comparison.\n       Unknown --<input> value flags, such as --limit 5, are passed into play input.\nRun `deepline plays run --help` for idempotency, tool call id, and ctx.dataset guidance.";
   let filePath = null;
   let playName = null;
   let input2 = null;
@@ -14164,7 +14489,7 @@ function playRunCommand(play, options) {
   return `deepline plays run ${target} --input '{...}' --watch`;
 }
 function summarizePlayListItemForCli(play, options) {
-  const aliases = play.aliases?.length ? play.aliases : [play.name];
+  const aliases = play.aliases ?? [];
   const csvInput = playSchemaMetadata(play.inputSchema, "csvInput");
   const rowOutputSchema = playSchemaMetadata(
     play.outputSchema,
@@ -14619,8 +14944,8 @@ Idempotent execution:
       .dataset('companies_v1', companies)
       .withColumn('cto', (row, ctx) => ctx.tools.execute({
         id: 'find_cto',
-        tool: 'apollo_search_people_with_match',
-        input: { q_organization_domains_list: [row.domain], per_page: 1 },
+        tool: 'dropleads_search_people',
+        input: { filters: { companyDomains: [row.domain], jobTitles: ['CTO'] }, pagination: { page: 1, limit: 1 } },
       }))
       .run({ key: 'domain' });
 
@@ -14766,14 +15091,12 @@ Examples:
     ]);
   });
   addPlaySearchCommand(play.command("search <query>"));
-  play.command("grep <query>").description(
-    "Literal grep over play names, aliases, schemas, and descriptions."
-  ).addHelpText(
+  play.command("grep <query>").description("Literal grep over play names, schemas, and descriptions.").addHelpText(
     "after",
     `
 Notes:
   Literal registry filtering. Terms are matched case-insensitively against play
-  names, references, display names, aliases, ownership, and schemas. Use
+  names, references, display names, ownership, and schemas. Use
   --mode phrase for exact phrase matching, --mode any for OR, and the default
   --mode all for AND.
 
@@ -14794,7 +15117,7 @@ Examples:
     "after",
     `
 Notes:
-  Compact contract read for schemas, aliases, examples, ownership, and the run command.
+  Compact contract read for schemas, examples, ownership, and the run command.
   Use \`get\` when you need full metadata, revisions, source fields, or latest runs.
 
 Examples:
@@ -16818,7 +17141,8 @@ async function buildPlanArgs(args) {
     "--name",
     "--rows",
     "--with-force",
-    "--timeout"
+    "--timeout",
+    "--profile"
   ]);
   const localBooleanOptions = /* @__PURE__ */ new Set([
     "--dry-run",
@@ -17958,6 +18282,9 @@ function registerEnrichCommand(program) {
   ).option("--in-place", "Write enriched output back to the input CSV.").option(
     "--timeout <SECONDS>",
     "API read timeout for enrich status/API requests."
+  ).option(
+    "--profile <id>",
+    "Internal/testing: override the execution profile for the generated play run."
   ).action(async (options, _command) => {
     if (options.inPlace && options.dryRun) {
       throw new Error("--in-place is not supported with --dry-run.");
@@ -18028,6 +18355,9 @@ function registerEnrichCommand(program) {
         JSON.stringify(runtimeInput),
         "--watch"
       ];
+      if (options.profile) {
+        runArgs.push("--profile", options.profile);
+      }
       if (options.noOpen) {
         runArgs.push("--no-open");
       }
@@ -18174,752 +18504,618 @@ Examples:
   ).argument("<text>", "Feedback text").option("--command <command>", "Command that reproduced the issue").option("--payload <payload>", "JSON or plain-text payload for the repro").option("--json", "Emit JSON output").action(handleFeedback);
 }
 
-// src/cli/commands/legacy-noops.ts
-var SESSION_SUBCOMMANDS = [
-  "start",
-  "status",
-  "output",
-  "alert",
-  "usage",
-  "limit",
-  "render",
-  "send"
-];
-var BACKEND_SUBCOMMANDS = [
-  "start",
-  "stop",
-  "status",
-  "refresh-runtime",
-  "sync-runtime"
-];
-function legacyNoopEnvelope(input2) {
-  const command = [
-    "deepline",
-    input2.family,
-    input2.subcommand
-  ].filter(Boolean).join(" ");
-  const subject = input2.family === "session" ? "Legacy Session UI/playground command" : "Legacy local playground backend command";
-  const note = input2.family === "session" ? "The SDK CLI does not manage the legacy Python Session UI. This command is accepted for backwards compatibility and intentionally does nothing." : "The SDK CLI does not start or stop the legacy Python local playground backend. This command is accepted for backwards compatibility and intentionally does nothing.";
+// src/cli/commands/sessions.ts
+import {
+  existsSync as existsSync8,
+  mkdirSync as mkdirSync4,
+  readdirSync as readdirSync2,
+  readFileSync as readFileSync7,
+  statSync as statSync3,
+  writeFileSync as writeFileSync8
+} from "fs";
+import { homedir as homedir5, platform } from "os";
+import { basename as basename4, dirname as dirname9, join as join9, resolve as resolve12 } from "path";
+import { gzipSync } from "zlib";
+import { randomUUID } from "crypto";
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var UUID_IN_TEXT_RE = /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i;
+var MAX_SESSION_UPLOAD_BYTES = 35e5;
+var MAX_DIRECT_SESSION_DECODED_BYTES = 50 * 1024 * 1024;
+var CHUNK_SIZE_BYTES = 25e5;
+var MAX_EVENT_STRING_CHARS = 8e3;
+var MAX_EVENT_LIST_ITEMS = 40;
+var MAX_EVENT_OBJECT_KEYS = 80;
+var TRUNCATION_MARKER = "...[truncated]";
+var NOISE_EVENT_TYPES = /* @__PURE__ */ new Set(["progress", "file-history-snapshot"]);
+function homeDir() {
+  return process.env.HOME?.trim() || homedir5();
+}
+function detectShellContext() {
+  const shellPath = process.env.SHELL?.trim() || process.env.ComSpec?.trim() || process.env.COMSPEC?.trim() || "";
   return {
-    ok: true,
-    noop: true,
-    command,
-    compatibility: {
-      family: "legacy_python_cli",
-      sdk_behavior: "noop"
-    },
-    render: {
-      sections: [
-        {
-          title: subject,
-          lines: [note]
-        }
-      ]
-    }
+    shell: shellPath ? basename4(shellPath).replace(/\.exe$/i, "") : "unknown",
+    shell_path: shellPath || null,
+    os: platform(),
+    cwd: process.cwd()
   };
 }
-function printLegacyNoop(input2) {
-  printCommandEnvelope(legacyNoopEnvelope(input2), { json: input2.options.json });
+function claudeProjectsRoot() {
+  return join9(homeDir(), ".claude", "projects");
 }
-function legacySubcommandFromArgv(family) {
-  const args = process.argv.slice(2);
-  const familyIndex = args.indexOf(family);
-  const nextToken = familyIndex >= 0 ? args[familyIndex + 1] : void 0;
-  return nextToken && !nextToken.startsWith("-") ? nextToken : void 0;
+function codexSessionsRoot() {
+  return join9(homeDir(), ".codex", "sessions");
 }
-function addLegacyNoopSubcommand(parent, family, subcommand, description) {
-  parent.command(subcommand).description(description).allowUnknownOption(true).allowExcessArguments(true).option("--json", "Emit JSON output").argument("[args...]").action((_args, options) => {
-    printLegacyNoop({ family, subcommand, options });
-  });
+function listClaudeSessionFiles() {
+  const root = claudeProjectsRoot();
+  if (!existsSync8(root)) return [];
+  const projectDirs = readDirectoryNames(root);
+  const files = [];
+  for (const projectDir of projectDirs) {
+    const fullProjectDir = join9(root, projectDir);
+    for (const fileName of readDirectoryNames(fullProjectDir)) {
+      if (fileName.endsWith(".jsonl")) {
+        const filePath = join9(fullProjectDir, fileName);
+        const sessionId = sessionIdFromClaudeFilePath(filePath);
+        const stat4 = statIfReadable(filePath);
+        if (sessionId && stat4) {
+          files.push({
+            agent: "claude",
+            sessionId,
+            filePath,
+            mtimeMs: stat4.mtimeMs
+          });
+        }
+      }
+    }
+  }
+  return files;
 }
-function registerLegacyNoopCommands(program) {
-  const session = program.command("session").description(
-    "Compatibility no-ops for legacy Python Session UI commands."
-  ).allowUnknownOption(true).allowExcessArguments(true).option("--json", "Emit JSON output").argument("[args...]").addHelpText(
-    "after",
-    `
-Notes:
-  The SDK CLI accepts singular session commands from older agent skills so they
-  do not fail, but it does not manage the legacy Python Session UI.
-  Use "deepline sessions send" or "deepline sessions render" for real SDK
-  transcript workflows.
-
-Examples:
-  deepline session start --steps '["Inspect CSV","Run pilot"]'
-  deepline session status --message "Running pilot"
-  deepline session output --csv ./results.csv --label "Results"
-	`
-  ).action((args, options) => {
-    void args;
-    printLegacyNoop({
-      family: "session",
-      subcommand: legacySubcommandFromArgv("session"),
-      options
-    });
-  });
-  for (const subcommand of SESSION_SUBCOMMANDS) {
-    addLegacyNoopSubcommand(
-      session,
-      "session",
-      subcommand,
-      `Accept legacy "deepline session ${subcommand}" as an SDK no-op.`
-    );
-  }
-  const backend = program.command("backend").description(
-    "Compatibility no-ops for legacy Python local backend commands."
-  ).allowUnknownOption(true).allowExcessArguments(true).option("--json", "Emit JSON output").argument("[args...]").addHelpText(
-    "after",
-    `
-Notes:
-  The SDK CLI uses the configured Deepline host and V2 play runtime. It does not
-  start, stop, or refresh the legacy Python local playground backend.
-
-Examples:
-  deepline backend start
-  deepline backend stop --just-backend
-  deepline backend status --json
-	`
-  ).action((args, options) => {
-    void args;
-    printLegacyNoop({
-      family: "backend",
-      subcommand: legacySubcommandFromArgv("backend"),
-      options
-    });
-  });
-  for (const subcommand of BACKEND_SUBCOMMANDS) {
-    addLegacyNoopSubcommand(
-      backend,
-      "backend",
-      subcommand,
-      `Accept legacy "deepline backend ${subcommand}" as an SDK no-op.`
-    );
+function listCodexSessionFiles() {
+  const root = codexSessionsRoot();
+  if (!existsSync8(root)) return [];
+  const files = [];
+  for (const filePath of listJsonlFilesRecursive(root, 5)) {
+    const stat4 = statIfReadable(filePath);
+    if (!stat4) continue;
+    const sessionId = sessionIdFromCodexFilePath(filePath) ?? readCodexSessionId(filePath);
+    if (!sessionId) continue;
+    files.push({ agent: "codex", sessionId, filePath, mtimeMs: stat4.mtimeMs });
   }
+  return files;
 }
-
-// src/cli/commands/org.ts
-async function fetchOrganizations(http, apiKey) {
-  return http.post("/api/v2/auth/cli/organizations", { api_key: apiKey });
+function listSessionFiles(agent) {
+  const files = [];
+  if (agent === "auto" || agent === "claude") {
+    files.push(...listClaudeSessionFiles());
+  }
+  if (agent === "auto" || agent === "codex") {
+    files.push(...listCodexSessionFiles());
+  }
+  return files;
 }
-function orgListLines(orgs) {
-  return orgs.map((org, index) => {
-    const current = org.is_current ? " (current)" : "";
-    const role = org.role ? ` [${org.role}]` : "";
-    return `${index + 1}. ${org.name}${role}${current}`;
-  });
+function readDirectoryNames(dir) {
+  try {
+    return readdirSync2(dir);
+  } catch {
+    return [];
+  }
 }
-async function handleOrgList(options) {
-  const config = resolveConfig();
-  const http = new HttpClient(config);
-  const payload = await fetchOrganizations(http, config.apiKey);
-  printCommandEnvelope(
-    {
-      ...payload,
-      render: {
-        sections: [
-          {
-            title: "Your organizations:",
-            lines: orgListLines(payload.organizations)
-          }
-        ]
+function listJsonlFilesRecursive(root, maxDepth) {
+  const files = [];
+  function visit(dir, depth) {
+    if (depth > maxDepth) return;
+    let entries;
+    try {
+      entries = readdirSync2(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const fullPath = join9(dir, entry.name);
+      if (entry.isDirectory()) {
+        visit(fullPath, depth + 1);
+      } else if (entry.isFile() && entry.name.endsWith(".jsonl")) {
+        files.push(fullPath);
       }
-    },
-    { json: options.json }
-  );
+    }
+  }
+  visit(root, 0);
+  return files;
 }
-async function handleOrgSwitch(selection, options) {
-  const config = resolveConfig();
-  const http = new HttpClient(config);
-  const payload = await fetchOrganizations(http, config.apiKey);
-  if (!selection && !options.orgId) {
-    printCommandEnvelope(
-      {
-        ...payload,
-        next: { switch: "deepline org switch <number>" },
-        render: {
-          sections: [
-            {
-              title: "Your organizations:",
-              lines: orgListLines(payload.organizations)
-            }
-          ],
-          actions: [{ label: "Run", command: "deepline org switch <number>" }]
-        }
-      },
-      { json: options.json }
+function statIfReadable(filePath) {
+  try {
+    return statSync3(filePath);
+  } catch {
+    return null;
+  }
+}
+function newestSessionFile(agent) {
+  let newest = null;
+  for (const candidate of listSessionFiles(agent)) {
+    if (!newest || candidate.mtimeMs > newest.mtimeMs) {
+      newest = candidate;
+    }
+  }
+  return newest;
+}
+function sessionIdFromClaudeFilePath(filePath) {
+  return basename4(filePath, ".jsonl");
+}
+function sessionIdFromCodexFilePath(filePath) {
+  const match = basename4(filePath, ".jsonl").match(UUID_IN_TEXT_RE);
+  return match?.[0] ?? null;
+}
+function readCodexSessionId(filePath) {
+  try {
+    for (const line of normalizedJsonLines(readFileSync7(filePath)).slice(
+      0,
+      20
+    )) {
+      const parsed = parseJsonLine(line);
+      if (!parsed || typeof parsed !== "object") continue;
+      const record = parsed;
+      const payload = record.payload && typeof record.payload === "object" ? record.payload : null;
+      const id = record.type === "session_meta" && typeof payload?.id === "string" ? payload.id : null;
+      if (id && UUID_RE.test(id)) return id;
+    }
+  } catch {
+    return null;
+  }
+  return null;
+}
+function sessionSearchDescription(agent) {
+  if (agent === "claude") return "~/.claude/projects/*/<session-id>.jsonl";
+  if (agent === "codex") return "~/.codex/sessions/**/*.jsonl";
+  return "~/.claude/projects/*/<session-id>.jsonl or ~/.codex/sessions/**/*.jsonl";
+}
+function parseSessionAgent(value) {
+  const normalized = String(value || "auto").trim().toLowerCase();
+  if (normalized === "auto" || normalized === "claude" || normalized === "codex") {
+    return normalized;
+  }
+  throw new Error("Invalid --agent value. Expected auto, claude, or codex.");
+}
+function findSessionFile(sessionId, agent) {
+  if (!UUID_RE.test(sessionId)) {
+    throw new Error(
+      "Invalid session ID format. Expected a UUID such as 5a3bfb97-a2d9-49d9-82c6-52ccc03dadca."
     );
-    return;
   }
-  let target = payload.organizations.find(
-    (org) => org.org_id === options.orgId
-  );
-  if (!target && selection) {
-    const index = Number.parseInt(selection, 10);
-    if (Number.isFinite(index) && index >= 1 && index <= payload.organizations.length) {
-      target = payload.organizations[index - 1];
-    } else {
-      target = payload.organizations.find(
-        (org) => org.name === selection || org.org_id === selection
+  for (const candidate of listSessionFiles(agent)) {
+    if (candidate.sessionId === sessionId) {
+      return candidate;
+    }
+  }
+  return null;
+}
+function resolveSessionTargets(input2) {
+  const agent = parseSessionAgent(input2.agent);
+  const targets = [];
+  if (input2.currentSession) {
+    const currentFile = newestSessionFile(agent);
+    if (!currentFile) {
+      throw new Error(
+        `No session files found in ${sessionSearchDescription(agent)}.`
       );
     }
+    targets.push({
+      sessionId: currentFile.sessionId,
+      label: `${currentFile.agent}-session-${currentFile.sessionId}`,
+      filePath: currentFile.filePath,
+      agent: currentFile.agent
+    });
   }
-  if (!target) {
-    throw new Error("Could not resolve the selected organization.");
+  for (const [index, sessionId] of (input2.sessionIds ?? []).entries()) {
+    const candidate = findSessionFile(sessionId, agent);
+    if (!candidate) {
+      throw new Error(
+        `Session file not found in ${sessionSearchDescription(agent)}: ${sessionId}`
+      );
+    }
+    targets.push({
+      sessionId,
+      label: input2.labels?.[index] ?? `${candidate.agent}-session-${sessionId}`,
+      filePath: candidate.filePath,
+      agent: candidate.agent
+    });
   }
-  if (target.is_current) {
-    printCommandEnvelope(
-      {
-        ok: true,
-        unchanged: true,
-        organization: target,
-        render: {
-          sections: [
-            { title: "org switch", lines: [`Already on ${target.name}.`] }
-          ]
-        }
-      },
-      { json: options.json }
-    );
-    return;
+  if (targets.length === 0) {
+    throw new Error("One of --session-id or --current-session is required.");
   }
-  const switched = await http.post("/api/v2/auth/cli/switch", {
-    api_key: config.apiKey,
-    org_id: target.org_id
-  });
-  saveHostEnvValues(config.baseUrl, {
-    DEEPLINE_API_KEY: switched.api_key,
-    DEEPLINE_ACTIVE_ORG_ID: switched.org_id,
-    DEEPLINE_ACTIVE_ORG_NAME: switched.org_name
-  });
-  const { api_key: _apiKey, ...publicSwitched } = switched;
-  printCommandEnvelope(
-    {
-      ok: true,
-      host_env_path: hostEnvFilePath(config.baseUrl),
-      ...publicSwitched,
-      api_key_saved: true,
-      render: {
-        sections: [
-          {
-            title: "org switch",
-            lines: [
-              `Switched to ${switched.org_name}.`,
-              `Saved host auth in ${hostEnvFilePath(config.baseUrl)}`
-            ]
-          }
-        ]
-      }
-    },
-    { json: options.json }
-  );
+  return targets;
 }
-async function handleOrgCreate(name, options) {
-  const config = resolveConfig();
-  const http = new HttpClient(config);
-  const created = await http.post("/api/v2/auth/cli/org-create", {
-    api_key: config.apiKey,
-    name
-  });
-  saveHostEnvValues(config.baseUrl, {
-    DEEPLINE_API_KEY: created.api_key,
-    DEEPLINE_ACTIVE_ORG_ID: created.org_id,
-    DEEPLINE_ACTIVE_ORG_NAME: created.org_name
-  });
-  const { api_key: _apiKey, ...publicCreated } = created;
-  printCommandEnvelope(
-    {
-      ok: true,
-      ...publicCreated,
-      api_key_saved: true,
-      switched: true,
-      host_env_path: hostEnvFilePath(config.baseUrl),
-      render: {
-        sections: [
-          {
-            title: "org create",
-            lines: [
-              `Created organization: ${created.org_name}.`,
-              `Switched to ${created.org_name}.`,
-              `Saved host auth in ${hostEnvFilePath(config.baseUrl)}`
-            ]
-          }
-        ]
-      }
-    },
-    { json: options.json }
-  );
+function parseJsonLine(line) {
+  try {
+    return JSON.parse(line);
+  } catch {
+    return null;
+  }
 }
-function registerOrgCommands(program) {
-  const org = program.command("org").description("List, create, and switch organizations.").addHelpText(
-    "after",
-    `
-Notes:
-  Organizations are workspaces. Switching organizations mutates the saved host
-  auth file so later CLI commands target the selected workspace.
-
-Examples:
-  deepline org list --json
-  deepline org create Acme --json
-  deepline org switch 2
-  deepline org switch --org-id org_123 --json
-`
-  );
-  org.command("list").description("List your organizations.").addHelpText(
-    "after",
-    `
-Notes:
-  Read-only. Marks the active organization when the server returns that metadata.
-
-Examples:
-  deepline org list
-  deepline org list --json
-`
-  ).option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleOrgList);
-  org.command("create <name>").description("Create a new organization and switch this CLI to it.").addHelpText(
-    "after",
-    `
-Notes:
-  Mutates workspace state. The new organization is created for the current
-  authenticated user, then the returned API key is saved for this host so later
-  CLI commands target the new organization.
-
-Examples:
-  deepline org create Acme
-  deepline org create "Acme Sales" --json
-`
-  ).option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleOrgCreate);
-  org.command("switch [selection]").description(
-    "Switch to another organization and save the new API key in the host auth file."
-  ).addHelpText(
-    "after",
-    `
-Notes:
-  Mutates the saved host auth file. Selection can be a list number, exact
-  organization name, or organization id. Without a selection, prints choices.
-
-Examples:
-  deepline org switch
-  deepline org switch 2
-  deepline org switch --org-id org_123 --json
-`
-  ).option("--org-id <id>", "Switch using an explicit organization id").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleOrgSwitch);
-}
-
-// src/cli/commands/quickstart.ts
-import { spawn, spawnSync } from "child_process";
-import { randomBytes } from "crypto";
-import { createServer } from "http";
-var EXIT_OK2 = 0;
-var EXIT_AUTH2 = 1;
-var EXIT_SERVER3 = 2;
-var MAX_PROMPT_LENGTH = 8e3;
-var MAX_BODY_BYTES = 64 * 1024;
-function shellQuote(arg) {
-  return `'${arg.replace(/'/g, `'\\''`)}'`;
+function normalizedJsonLines(raw) {
+  return raw.toString("utf8").split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
 }
-function hasClaudeBinary() {
-  try {
-    const result = spawnSync("claude", ["--version"], {
-      stdio: "ignore",
-      shell: process.platform === "win32"
-    });
-    return result.status === 0;
-  } catch {
-    return false;
+function stripNoiseEvents(raw) {
+  const lines = [];
+  for (const line of normalizedJsonLines(raw)) {
+    const parsed = parseJsonLine(line);
+    if (parsed && typeof parsed === "object" && NOISE_EVENT_TYPES.has(String(parsed.type ?? ""))) {
+      continue;
+    }
+    lines.push(line);
   }
+  return Buffer.from(lines.length > 0 ? `${lines.join("\n")}
+` : "", "utf8");
 }
-function launchClaude(prompt) {
-  return new Promise((resolve16) => {
-    const child = spawn("claude", [prompt], {
-      stdio: "inherit",
-      shell: process.platform === "win32"
-    });
-    child.on("error", () => resolve16(EXIT_SERVER3));
-    child.on("close", (status) => resolve16(status ?? EXIT_OK2));
-  });
-}
-function readBody(req) {
-  return new Promise((resolve16, reject) => {
-    let raw = "";
-    req.setEncoding("utf8");
-    req.on("data", (chunk) => {
-      raw += chunk;
-      if (raw.length > MAX_BODY_BYTES) {
-        reject(new Error("Request body too large."));
-        req.destroy();
-      }
-    });
-    req.on("end", () => resolve16(raw));
-    req.on("error", reject);
-  });
-}
-function writeJson(res, status, payload) {
-  res.writeHead(status, { "content-type": "application/json" });
-  res.end(JSON.stringify(payload));
+function messageContentKey(value) {
+  const message = value.message;
+  if (!message || typeof message !== "object") return null;
+  const content = message.content;
+  if (typeof content === "string") return content;
+  if (!Array.isArray(content)) return null;
+  return content.map((block) => {
+    if (!block || typeof block !== "object") return String(block);
+    const record = block;
+    const type = String(record.type ?? "");
+    if (type === "tool_use") {
+      return `tool_use:${String(record.name ?? "")}:${String(record.id ?? "")}`;
+    }
+    if (type === "tool_result") {
+      return `tool_result:${String(record.tool_use_id ?? "")}`;
+    }
+    return String(record.text ?? type);
+  }).join("\n");
 }
-function startCallbackServer(input2) {
-  const server = createServer((req, res) => {
-    res.setHeader("Access-Control-Allow-Origin", req.headers.origin ?? "*");
-    res.setHeader("Vary", "Origin");
-    res.setHeader("Access-Control-Allow-Methods", "POST, OPTIONS");
-    res.setHeader("Access-Control-Allow-Headers", "content-type");
-    res.setHeader("Access-Control-Allow-Private-Network", "true");
-    res.setHeader("Access-Control-Max-Age", "600");
-    if (req.method === "OPTIONS") {
-      res.writeHead(204);
-      res.end();
-      return;
+function dedupConsecutiveEvents(raw) {
+  const rawLines = normalizedJsonLines(raw);
+  const parsedEvents = rawLines.map(parseJsonLine);
+  const output2 = [];
+  let index = 0;
+  while (index < parsedEvents.length) {
+    const event = parsedEvents[index];
+    if (!event || typeof event !== "object") {
+      output2.push(rawLines[index] ?? "");
+      index += 1;
+      continue;
     }
-    if (req.method !== "POST" || req.url !== "/submit") {
-      writeJson(res, 404, { error: "Not found." });
-      return;
+    const record = event;
+    const eventType = String(record.type ?? "");
+    const eventKey = messageContentKey(record);
+    if (!["user", "assistant"].includes(eventType) || !eventKey) {
+      output2.push(rawLines[index] ?? "");
+      index += 1;
+      continue;
     }
-    void readBody(req).then((raw) => {
-      let body = null;
-      try {
-        body = JSON.parse(raw);
-      } catch {
-        body = null;
-      }
-      const state = typeof body?.state === "string" ? body.state : "";
-      const prompt = typeof body?.prompt === "string" ? body.prompt.trim() : "";
-      const workflowId = typeof body?.workflow_id === "string" && body.workflow_id.trim() ? body.workflow_id.trim() : null;
-      if (!state || state !== input2.state) {
-        writeJson(res, 403, { error: "Invalid quickstart state token." });
-        return;
-      }
-      if (!prompt) {
-        writeJson(res, 400, { error: "prompt is required." });
-        return;
-      }
-      if (prompt.length > MAX_PROMPT_LENGTH) {
-        writeJson(res, 400, {
-          error: `prompt exceeds ${MAX_PROMPT_LENGTH} characters.`
-        });
-        return;
-      }
-      writeJson(res, 200, { ok: true });
-      setImmediate(() => input2.onSelection({ prompt, workflowId }));
-    }).catch(() => {
-      writeJson(res, 400, { error: "Invalid request body." });
-    });
-  });
-  return new Promise((resolve16, reject) => {
-    server.once("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      const address = server.address();
-      if (!address || typeof address === "string") {
-        reject(new Error("Failed to bind quickstart callback server."));
-        return;
+    let runCount = 1;
+    let cursor = index + 1;
+    while (cursor < parsedEvents.length) {
+      const next = parsedEvents[cursor];
+      if (!next || typeof next !== "object") break;
+      const nextRecord = next;
+      if (String(nextRecord.type ?? "") !== eventType || messageContentKey(nextRecord) !== eventKey) {
+        break;
       }
-      resolve16({ server, port: address.port });
-    });
-  });
-}
-async function handleQuickstart(options) {
-  const jsonOutput = shouldEmitJson(options.json === true);
-  const baseUrl = autoDetectBaseUrl().replace(/\/$/, "");
-  const interactive = Boolean(process.stdin.isTTY && process.stdout.isTTY);
-  let apiKey = resolveApiKeyForBaseUrl(baseUrl);
-  if (!apiKey) {
-    if (interactive) {
-      console.error("Not connected yet \u2014 registering this device first.");
-      const registerExit = await handleRegister([]);
-      if (registerExit !== EXIT_OK2) return registerExit;
-      apiKey = resolveApiKeyForBaseUrl(baseUrl);
+      runCount += 1;
+      cursor += 1;
     }
-    if (!apiKey) {
-      console.error("Not connected. Run: deepline auth register");
-      return EXIT_AUTH2;
+    if (runCount > 1) {
+      record._repeat_count = runCount;
+      record._repeat_summary = `${runCount} consecutive identical ${eventType} messages collapsed`;
+      output2.push(JSON.stringify(record));
+      index = cursor;
+      continue;
     }
+    output2.push(rawLines[index] ?? "");
+    index += 1;
   }
-  const state = randomBytes(32).toString("hex");
-  let resolveSelection;
-  const selectionPromise = new Promise((resolve16) => {
-    resolveSelection = resolve16;
-  });
-  let callback;
-  try {
-    callback = await startCallbackServer({
-      state,
-      onSelection: (selection) => resolveSelection(selection)
-    });
-  } catch (error) {
-    console.error(
-      `Could not start the local quickstart listener: ${error instanceof Error ? error.message : String(error)}`
-    );
-    return EXIT_SERVER3;
+  return Buffer.from(output2.length > 0 ? `${output2.join("\n")}
+` : "", "utf8");
+}
+function compactEventValue(value) {
+  if (typeof value === "string") {
+    if (value.length <= MAX_EVENT_STRING_CHARS) return value;
+    return `${value.slice(0, MAX_EVENT_STRING_CHARS - TRUNCATION_MARKER.length)}${TRUNCATION_MARKER}`;
   }
-  const quickstartUrl = `${baseUrl}/cli/quickstart?cb=${callback.port}&state=${state}`;
-  console.error("  Opening the recipe picker in your browser.");
-  console.error(`  If it didn't open, cmd+click: ${quickstartUrl}`);
-  if (options.open !== false) {
-    openInBrowser(quickstartUrl);
+  if (Array.isArray(value)) {
+    const compacted = value.slice(0, MAX_EVENT_LIST_ITEMS).map(compactEventValue);
+    if (value.length > MAX_EVENT_LIST_ITEMS) {
+      compacted.push(
+        `${TRUNCATION_MARKER} ${value.length - MAX_EVENT_LIST_ITEMS} more item(s)`
+      );
+    }
+    return compacted;
   }
-  const timeoutSeconds = Number.parseInt(options.timeout ?? "300", 10);
-  const timeoutMs = (Number.isFinite(timeoutSeconds) && timeoutSeconds > 0 ? timeoutSeconds : 300) * 1e3;
-  const timeoutHandle = setTimeout(
-    () => resolveSelection("timeout"),
-    timeoutMs
+  if (value && typeof value === "object") {
+    const entries = Object.entries(value);
+    const compacted = {};
+    for (const [key, item] of entries.slice(0, MAX_EVENT_OBJECT_KEYS)) {
+      compacted[key] = compactEventValue(item);
+    }
+    if (entries.length > MAX_EVENT_OBJECT_KEYS) {
+      compacted._truncated_keys = entries.length - MAX_EVENT_OBJECT_KEYS;
+    }
+    return compacted;
+  }
+  return value;
+}
+function selectiveCompactToolResults(raw) {
+  const lines = [];
+  for (const line of normalizedJsonLines(raw)) {
+    const parsed = parseJsonLine(line);
+    if (!parsed || typeof parsed !== "object") {
+      lines.push(line);
+      continue;
+    }
+    const record = parsed;
+    if (record.type === "user") {
+      const message = record.message;
+      const content = message && typeof message === "object" ? message.content : null;
+      if (Array.isArray(content)) {
+        message.content = content.map(
+          (block) => block && typeof block === "object" && block.type === "tool_result" ? compactEventValue(block) : block
+        );
+      }
+    }
+    lines.push(JSON.stringify(record));
+  }
+  return Buffer.from(lines.length > 0 ? `${lines.join("\n")}
+` : "", "utf8");
+}
+function prepareSessionBuffer(raw) {
+  return selectiveCompactToolResults(
+    dedupConsecutiveEvents(stripNoiseEvents(raw))
   );
-  const progress = createCliProgress(!jsonOutput);
-  progress.phase("waiting for your pick in the browser (Ctrl+C to skip)");
-  const onSigint = () => resolveSelection("sigint");
-  process.once("SIGINT", onSigint);
-  const outcome = await selectionPromise;
-  clearTimeout(timeoutHandle);
-  process.removeListener("SIGINT", onSigint);
-  callback.server.close();
-  if (outcome === "sigint") {
-    progress.fail();
-    console.error("\nSkipped \u2014 run `deepline quickstart` anytime.");
-    return EXIT_OK2;
+}
+function buildSessionUploadContent(raw) {
+  const prepared = prepareSessionBuffer(raw);
+  const encoded = gzipSync(prepared).toString("base64");
+  if (encoded.length <= MAX_SESSION_UPLOAD_BYTES && prepared.length <= MAX_DIRECT_SESSION_DECODED_BYTES) {
+    return { encodedContent: encoded, needsChunking: false };
   }
-  if (outcome === "timeout") {
-    progress.fail();
-    console.error(
-      "Timed out waiting for a selection. Run: deepline quickstart"
+  return { encodedContent: encoded, needsChunking: true };
+}
+async function uploadPayload(path, payload) {
+  const { http } = getAuthedHttpClient();
+  return await http.post(path, payload);
+}
+async function uploadChunkedSessions(sessions, options) {
+  const uploadId = randomUUID();
+  for (const session of sessions) {
+    const bytes = Buffer.from(session.encodedContent, "base64");
+    const chunks = [];
+    for (let offset = 0; offset < bytes.length; offset += CHUNK_SIZE_BYTES) {
+      chunks.push(bytes.subarray(offset, offset + CHUNK_SIZE_BYTES));
+    }
+    process.stderr.write(
+      `Uploading ${session.label} in ${chunks.length} chunk(s)...
+`
     );
-    return EXIT_AUTH2;
+    for (const [index, chunk] of chunks.entries()) {
+      await uploadPayload("/api/v2/cli/send-session/chunk", {
+        upload_id: uploadId,
+        session_id: session.sessionId,
+        index,
+        total_chunks: chunks.length,
+        data: chunk.toString("base64")
+      });
+    }
   }
-  progress.complete();
-  const { prompt, workflowId } = outcome;
-  const claudeCommand = `claude ${shellQuote(prompt)}`;
-  const claudeAvailable = hasClaudeBinary();
-  const willLaunch = options.launch !== false && !jsonOutput && interactive && claudeAvailable;
+  const response = await uploadPayload("/api/v2/cli/send-session/finalize", {
+    upload_id: uploadId,
+    session_ids: sessions.map((session) => session.sessionId),
+    labels: sessions.map((session) => session.label),
+    environments: sessions.map(() => detectShellContext())
+  });
   printCommandEnvelope(
     {
-      status: "submitted",
-      workflowId,
-      prompt,
-      claudeCommand,
-      url: quickstartUrl,
-      launched: willLaunch,
+      ...response,
+      ok: true,
+      uploaded: sessions.length,
       render: {
         sections: [
           {
-            title: "quickstart",
-            lines: [
-              ...workflowId ? [`Recipe: ${workflowId}`] : [],
-              willLaunch ? "Launching Claude Code with your recipe..." : claudeAvailable ? "Run the command below to start your recipe." : "Claude Code not found. Install it (https://code.claude.com/docs/en/overview), then run the command below."
-            ]
+            title: "sessions send",
+            lines: ["Session uploaded to #internal-reports (chunked)."]
           }
-        ],
-        actions: [{ label: "Run", command: claudeCommand }]
+        ]
       }
     },
-    { json: jsonOutput }
+    { json: options.json }
   );
-  if (willLaunch) {
-    return launchClaude(prompt);
-  }
-  return EXIT_OK2;
-}
-function registerQuickstartCommands(program) {
-  program.command("quickstart").description(
-    "Pick a starter recipe in the browser and launch it with Claude Code."
-  ).addHelpText(
-    "after",
-    `
-Notes:
-  Opens the hosted recipe picker in your browser. The picker sends your
-  selection back to a temporary listener on 127.0.0.1, so the browser must run
-  on the same machine as the CLI. Once a recipe arrives, the CLI prints the
-  matching claude command and, when Claude Code is installed and the shell is
-  interactive, launches it directly. Press Ctrl+C while waiting to skip.
-
-Examples:
-  deepline quickstart
-  deepline quickstart --no-open
-  deepline quickstart --no-launch --json
-  deepline quickstart --timeout 120
-`
-  ).option("--json", "Emit JSON output. Also automatic when stdout is piped").option("--no-open", "Do not open the browser; print the URL only").option("--no-launch", "Print the claude command instead of launching it").option(
-    "--timeout <seconds>",
-    "Maximum seconds to wait for a selection",
-    "300"
-  ).action(async (options) => {
-    process.exitCode = await handleQuickstart(options);
-  });
 }
-
-// src/cli/commands/secrets.ts
-import { stdin as input, stdout as output } from "process";
-var hiddenInputBuffer = "";
-function normalizeSecretName(value) {
-  const normalized = value.trim().toUpperCase();
-  if (!/^[A-Z][A-Z0-9_]{1,63}$/.test(normalized)) {
-    throw new Error(
-      "Secret names must be 2-64 characters and use uppercase letters, numbers, and underscores."
+async function handleSessionsSend(options) {
+  if (options.file) {
+    const filePath = resolve12(options.file);
+    if (!existsSync8(filePath)) {
+      throw new Error(`File not found: ${options.file}`);
+    }
+    const response2 = await uploadPayload("/api/v2/cli/send-session", {
+      file: readFileSync7(filePath).toString("base64"),
+      filename: basename4(filePath)
+    });
+    printCommandEnvelope(
+      {
+        ...response2,
+        ok: true,
+        filename: basename4(filePath),
+        render: {
+          sections: [
+            {
+              title: "sessions send",
+              lines: [
+                `File '${basename4(filePath)}' uploaded to #internal-reports.`
+              ]
+            }
+          ]
+        }
+      },
+      { json: options.json }
     );
+    return;
   }
-  return normalized;
-}
-function renderSecret(secret) {
-  const scope = secret.scope === "play" && secret.playName ? `play:${secret.playName}` : secret.scope;
-  return `${secret.name} (${scope}) - ${secret.status}${secret.hasValue ? ", set" : ", empty"}`;
-}
-async function readHiddenLine(prompt) {
-  if (!input.isTTY || !output.isTTY) {
-    throw new Error(
-      "Secret values must be entered from an interactive TTY. Do not pipe, pass, or script secret values."
-    );
+  const targets = resolveSessionTargets({
+    sessionIds: options.sessionId,
+    labels: options.label,
+    currentSession: options.currentSession,
+    agent: options.agent
+  });
+  const built = targets.map((target) => {
+    const upload = buildSessionUploadContent(readFileSync7(target.filePath));
+    return { ...target, ...upload };
+  });
+  if (built.some((session) => session.needsChunking)) {
+    await uploadChunkedSessions(built, options);
+    return;
   }
-  output.write(prompt);
-  const previousRawMode = input.isRaw;
-  if (typeof input.setRawMode === "function") input.setRawMode(true);
-  let value = "";
-  input.resume();
-  return await new Promise((resolve16, reject) => {
-    let settled = false;
-    const cleanup = () => {
-      input.off("data", onData);
-      input.off("end", onEnd);
-      input.off("error", onError);
-      if (typeof input.setRawMode === "function") {
-        input.setRawMode(previousRawMode);
+  const response = built.length === 1 && !options.label?.length ? await uploadPayload("/api/v2/cli/send-session", {
+    session_id: built[0]?.sessionId,
+    content: built[0]?.encodedContent,
+    environment: detectShellContext()
+  }) : await uploadPayload("/api/v2/cli/send-session", {
+    sessions: built.map((session) => ({
+      session_id: session.sessionId,
+      content: session.encodedContent,
+      label: session.label,
+      environment: detectShellContext()
+    })),
+    environment: detectShellContext()
+  });
+  printCommandEnvelope(
+    {
+      ...response,
+      ok: true,
+      uploaded: built.length,
+      render: {
+        sections: [
+          {
+            title: "sessions send",
+            lines: ["Session uploaded to #internal-reports."]
+          }
+        ]
       }
-    };
-    const finish = (line) => {
-      if (settled) return;
-      settled = true;
-      output.write("\n");
-      cleanup();
-      resolve16(line);
-    };
-    const fail = (error) => {
-      if (settled) return;
-      settled = true;
-      output.write("\n");
-      cleanup();
-      reject(error);
-    };
-    const processText = (text) => {
-      for (let index = 0; index < text.length; index++) {
-        const char = text[index];
-        const code = char.charCodeAt(0);
-        if (char === "\r" || char === "\n") {
-          hiddenInputBuffer = text.slice(index + 1);
-          finish(value);
-          return;
-        }
-        if (code === 3) {
-          fail(new Error("Secret input cancelled."));
-          return;
-        }
-        if (code === 8 || code === 127) {
-          value = value.slice(0, -1);
-          continue;
-        }
-        if (code >= 32) {
-          value += char;
-        }
-      }
-      hiddenInputBuffer = "";
-    };
-    const onData = (chunk) => {
-      processText(chunk.toString());
-    };
-    const onEnd = () => fail(new Error("Secret input ended before a value was entered."));
-    const onError = (error) => fail(error);
-    input.on("data", onData);
-    input.once("end", onEnd);
-    input.once("error", onError);
-    if (hiddenInputBuffer) {
-      const buffered = hiddenInputBuffer;
-      hiddenInputBuffer = "";
-      processText(buffered);
-    }
-  });
+    },
+    { json: options.json }
+  );
 }
-async function readSecretValue() {
-  const first = await readHiddenLine("Secret value: ");
-  if (!first) throw new Error("Secret value is required.");
-  const second = await readHiddenLine("Confirm secret value: ");
-  if (first !== second) {
-    throw new Error("Secret values did not match.");
-  }
-  return first;
+function fallbackViewerAssets() {
+  return {
+    css: [
+      "body{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;margin:0;padding:16px;background:#fafafa;color:#111}",
+      ".section{background:#fff;border:1px solid #ddd;border-radius:8px;padding:12px;margin-bottom:12px}",
+      ".section h2{margin:0 0 8px 0;font-size:14px}",
+      "pre{margin:0;white-space:pre-wrap;word-break:break-word;background:#f6f8fa;border:1px solid #e3e5e8;border-radius:6px;padding:10px}"
+    ].join(""),
+    js: [
+      "(() => {",
+      'const root=document.getElementById("main-content");',
+      'const raw=document.getElementById("raw-sessions");',
+      "if(!root||!raw)return;",
+      'let sessions=[];try{sessions=JSON.parse(raw.textContent||"[]")}catch{}',
+      'root.innerHTML="";',
+      "for(const session of sessions){",
+      'const section=document.createElement("section");section.className="section";',
+      'const title=document.createElement("h2");title.textContent=String(session.label||"session");',
+      'const pre=document.createElement("pre");',
+      'pre.textContent=(Array.isArray(session.events)?session.events:[]).map((event)=>JSON.stringify(event)).join("\\n");',
+      "section.append(title,pre);root.appendChild(section);",
+      "}",
+      "})();"
+    ].join("")
+  };
 }
-function preventShellHistoryLeak(forbidden) {
-  if (forbidden.length > 0) {
-    throw new Error(
-      "Do not pass secret values as command arguments. Run `deepline secrets set NAME` and enter the value at the hidden prompt."
-    );
+function loadViewerAssets() {
+  const cliEntry = process.argv[1]?.trim() ? resolve12(process.argv[1]) : null;
+  const candidateRoots2 = [
+    ...cliEntry ? [
+      join9(dirname9(dirname9(cliEntry)), "viewer"),
+      join9(
+        dirname9(dirname9(dirname9(cliEntry))),
+        "src",
+        "lib",
+        "cli",
+        "viewer"
+      )
+    ] : [],
+    join9(process.cwd(), "src", "lib", "cli", "viewer")
+  ];
+  for (const root of candidateRoots2) {
+    try {
+      const cssPath = join9(root, "viewer.css");
+      const jsPath = join9(root, "viewer.js");
+      if (!existsSync8(cssPath) || !existsSync8(jsPath)) continue;
+      return {
+        css: readFileSync7(cssPath, "utf8"),
+        js: readFileSync7(jsPath, "utf8")
+      };
+    } catch {
+      continue;
+    }
   }
+  return fallbackViewerAssets();
 }
-async function handleList(options) {
-  const client2 = new DeeplineClient();
-  const secrets = await client2.listSecrets();
-  printCommandEnvelope(
-    {
-      secrets,
-      count: secrets.length,
-      render: {
-        sections: [
-          {
-            title: "secrets",
-            lines: secrets.length ? secrets.map(renderSecret) : ["No play secrets are configured."]
-          }
-        ]
-      }
-    },
-    { json: options.json }
-  );
+function parsePreparedEvents(buffer) {
+  return normalizedJsonLines(buffer).map((line) => {
+    const parsed = parseJsonLine(line);
+    return parsed ?? line;
+  });
 }
-async function handleCheck(nameInput, options) {
-  const name = normalizeSecretName(nameInput);
-  const client2 = new DeeplineClient();
-  const secret = await client2.checkSecret(name);
-  printCommandEnvelope(
-    {
-      ok: Boolean(secret),
-      name,
-      secret: secret ?? null,
-      render: {
-        sections: [
-          {
-            title: "secret check",
-            lines: [
-              secret ? `${name}: active` : `${name}: missing, disabled, or empty`
-            ]
-          }
-        ]
-      }
-    },
-    { json: options.json }
-  );
-  if (!secret) process.exitCode = 4;
+function escapeJsonForHtmlScript(json) {
+  return json.replace(/</g, "\\u003c");
 }
-async function handleSet(nameInput, forbidden, options) {
-  preventShellHistoryLeak(forbidden);
-  const name = normalizeSecretName(nameInput);
-  const scope = options.scope === "play" ? "play" : "org";
-  const playName = options.play?.trim();
-  if (scope === "play" && !playName) {
-    throw new Error("--play <name> is required when --scope play is used.");
+async function handleSessionsRender(options) {
+  const targets = resolveSessionTargets({
+    sessionIds: options.sessionId,
+    labels: options.label,
+    currentSession: options.currentSession,
+    agent: options.agent
+  });
+  let outputPath = options.output ? resolve12(options.output) : "";
+  if (!outputPath) {
+    const outputDir = join9(process.cwd(), "deepline", "data");
+    mkdirSync4(outputDir, { recursive: true });
+    outputPath = join9(
+      outputDir,
+      targets.length > 1 ? "session-viewer.html" : `session-${targets[0]?.sessionId}.html`
+    );
+  } else {
+    mkdirSync4(dirname9(outputPath), { recursive: true });
   }
-  const value = await readSecretValue();
-  const { http } = getAuthedHttpClient();
-  const response = await http.post(
-    "/api/v2/secrets",
-    {
-      name,
-      value,
-      scope,
-      ...playName ? { playName } : {}
-    }
-  );
-  const secret = response.secret;
+  const sessions = targets.map((target) => ({
+    label: target.label,
+    events: parsePreparedEvents(
+      prepareSessionBuffer(readFileSync7(target.filePath))
+    )
+  }));
+  const { css, js } = loadViewerAssets();
+  const refreshMeta = options.autoRefresh ? `<meta http-equiv="refresh" content="${Number.parseInt(options.autoRefresh, 10)}">` : "";
+  const rawJson = escapeJsonForHtmlScript(JSON.stringify(sessions));
+  const html = `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+${refreshMeta}
+<title>Session Viewer</title>
+<style>${css}</style>
+</head>
+<body>
+<div class="layout">
+  <div class="main" id="main-content"></div>
+</div>
+<script type="application/json" id="raw-sessions">${rawJson}</script>
+<script>${js}</script>
+</body>
+</html>`;
+  writeFileSync8(outputPath, html, "utf8");
   printCommandEnvelope(
     {
       ok: true,
-      secret,
+      file: outputPath,
+      session_count: targets.length,
       render: {
         sections: [
           {
-            title: "secret saved",
-            lines: [`${secret.name}: saved (${secret.scope})`]
+            title: "sessions render",
+            lines: [`Rendered session viewer: ${outputPath}`]
           }
         ]
       }
@@ -18927,346 +19123,759 @@ async function handleSet(nameInput, forbidden, options) {
     { json: options.json }
   );
 }
-function registerSecretsCommands(program) {
-  const secrets = program.command("secrets").description("Manage play secrets without revealing values.").addHelpText(
+function collectOption(value, previous) {
+  previous.push(value);
+  return previous;
+}
+function registerSessionsCommands(program) {
+  const sessions = program.command("sessions").description("Upload and render local agent session transcripts.").addHelpText(
     "after",
     `
 Notes:
-  Secret values are never accepted as command arguments, stdin pipes, env vars,
-  or files. Use deepline secrets set NAME and type the value at the hidden TTY
-  prompt. Agents can list/check metadata but should not enter secret values.
+  Session commands operate on local Claude and Codex JSONL files under
+  ~/.claude/projects and ~/.codex/sessions. send uploads a compacted transcript
+  or file to Deepline. render writes a local HTML viewer.
 
 Examples:
-  deepline secrets list
-  deepline secrets check HUBSPOT_TOKEN
-  deepline secrets set HUBSPOT_TOKEN
+  deepline sessions send --current-session --json
+  deepline sessions send --agent codex --current-session --json
+  deepline sessions send --session-id 5a3bfb97-a2d9-49d9-82c6-52ccc03dadca
+  deepline sessions render --current-session --output session.html
 `
   );
-  secrets.command("list").description("List secret metadata only.").option("--json", "Emit JSON output").action(async (options) => {
-    await handleList(options);
-  });
-  secrets.command("check").description("Check whether a secret exists and is active.").argument("<name>", "Secret name").option("--json", "Emit JSON output").action(async (name, options) => {
-    await handleCheck(name, options);
-  });
-  secrets.command("set").description("Set or rotate a secret through a hidden interactive prompt.").argument("<name>", "Secret name").argument("[forbidden...]", "Do not pass secret values here").option("--json", "Emit JSON output").option("--scope <scope>", "Secret scope: org or play", "org").option("--play <name>", "Play name for play-scoped secrets").action(
-    async (name, forbidden, options) => {
-      await handleSet(name, forbidden ?? [], options);
-    }
-  );
+  registerSessionSendRenderCommands(sessions, "sessions");
 }
-
-// src/cli/commands/sessions.ts
-import {
-  existsSync as existsSync8,
-  mkdirSync as mkdirSync4,
-  readdirSync as readdirSync2,
-  readFileSync as readFileSync7,
-  statSync as statSync3,
-  writeFileSync as writeFileSync8
-} from "fs";
-import { homedir as homedir5, platform } from "os";
-import { basename as basename4, dirname as dirname9, join as join9, resolve as resolve12 } from "path";
-import { gzipSync } from "zlib";
-import { randomUUID } from "crypto";
-var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-var MAX_SESSION_UPLOAD_BYTES = 35e5;
-var MAX_DIRECT_SESSION_DECODED_BYTES = 50 * 1024 * 1024;
-var CHUNK_SIZE_BYTES = 25e5;
-var MAX_EVENT_STRING_CHARS = 8e3;
-var MAX_EVENT_LIST_ITEMS = 40;
-var MAX_EVENT_OBJECT_KEYS = 80;
-var TRUNCATION_MARKER = "...[truncated]";
-var NOISE_EVENT_TYPES = /* @__PURE__ */ new Set(["progress", "file-history-snapshot"]);
-function homeDir() {
-  return process.env.HOME?.trim() || homedir5();
+function registerSessionSendRenderCommands(parent, familyName) {
+  parent.command("send").description("Upload session transcript(s) or a local file to Deepline.").addHelpText(
+    "after",
+    `
+Examples:
+  deepline ${familyName} send --current-session --json
+  deepline ${familyName} send --agent codex --current-session --json
+  deepline ${familyName} send --session-id 5a3bfb97-a2d9-49d9-82c6-52ccc03dadca --label "pilot run"
+  deepline ${familyName} send --file ./debug.log --json
+`
+  ).option(
+    "--session-id <uuid>",
+    "Claude or Codex session UUID. Repeat for multiple sessions.",
+    collectOption,
+    []
+  ).option(
+    "--label <label>",
+    "Label for the preceding session id",
+    collectOption,
+    []
+  ).option(
+    "--agent <auto|claude|codex>",
+    "Limit transcript discovery to one agent runtime",
+    "auto"
+  ).option("--current-session", "Use the newest local agent session JSONL").option("--file <path>", "Upload a raw local file instead of a session").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleSessionsSend);
+  parent.command("render").description("Render local session transcript(s) to an HTML viewer.").addHelpText(
+    "after",
+    `
+Examples:
+  deepline ${familyName} render --current-session
+  deepline ${familyName} render --agent codex --current-session
+  deepline ${familyName} render --session-id 5a3bfb97-a2d9-49d9-82c6-52ccc03dadca --output session.html
+  deepline ${familyName} render --current-session --auto-refresh 5 --json
+`
+  ).option(
+    "--session-id <uuid>",
+    "Claude or Codex session UUID. Repeat for multiple sessions.",
+    collectOption,
+    []
+  ).option(
+    "--label <label>",
+    "Label for the preceding session id",
+    collectOption,
+    []
+  ).option(
+    "--agent <auto|claude|codex>",
+    "Limit transcript discovery to one agent runtime",
+    "auto"
+  ).option("--current-session", "Use the newest local agent session JSONL").option("--auto-refresh <seconds>", "Add a browser auto-refresh interval").option("-o, --output <path>", "Output HTML path").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleSessionsRender);
 }
-function detectShellContext() {
-  const shellPath = process.env.SHELL?.trim() || process.env.ComSpec?.trim() || process.env.COMSPEC?.trim() || "";
+
+// src/cli/commands/legacy-noops.ts
+var SESSION_SUBCOMMANDS = [
+  "start",
+  "status",
+  "output",
+  "alert",
+  "usage",
+  "limit"
+];
+var BACKEND_SUBCOMMANDS = [
+  "start",
+  "stop",
+  "status",
+  "refresh-runtime",
+  "sync-runtime"
+];
+function legacyNoopEnvelope(input2) {
+  const command = ["deepline", input2.family, input2.subcommand].filter(Boolean).join(" ");
+  const subject = input2.family === "session" ? "Legacy Session UI/playground command" : "Legacy local playground backend command";
+  const note = input2.family === "session" ? "The SDK CLI does not manage the legacy Python Session UI. This command is accepted for backwards compatibility and intentionally does nothing." : "The SDK CLI does not start or stop the legacy Python local playground backend. This command is accepted for backwards compatibility and intentionally does nothing.";
   return {
-    shell: shellPath ? basename4(shellPath).replace(/\.exe$/i, "") : "unknown",
-    shell_path: shellPath || null,
-    os: platform(),
-    cwd: process.cwd()
-  };
-}
-function claudeProjectsRoot() {
-  return join9(homeDir(), ".claude", "projects");
-}
-function listClaudeSessionFiles() {
-  const root = claudeProjectsRoot();
-  if (!existsSync8(root)) return [];
-  const projectDirs = readDirectoryNames(root);
-  const files = [];
-  for (const projectDir of projectDirs) {
-    const fullProjectDir = join9(root, projectDir);
-    for (const fileName of readDirectoryNames(fullProjectDir)) {
-      if (fileName.endsWith(".jsonl")) {
-        files.push(join9(fullProjectDir, fileName));
-      }
+    ok: true,
+    noop: true,
+    command,
+    compatibility: {
+      family: "legacy_python_cli",
+      sdk_behavior: "noop"
+    },
+    render: {
+      sections: [
+        {
+          title: subject,
+          lines: [note]
+        }
+      ]
     }
-  }
-  return files;
-}
-function readDirectoryNames(dir) {
-  try {
-    return readdirSync2(dir);
-  } catch {
-    return [];
-  }
+  };
 }
-function newestClaudeSessionFile() {
-  let newest = null;
-  for (const filePath of listClaudeSessionFiles()) {
-    try {
-      const stat4 = statSync3(filePath);
-      if (!newest || stat4.mtimeMs > newest.mtimeMs) {
-        newest = { filePath, mtimeMs: stat4.mtimeMs };
-      }
-    } catch {
-      continue;
-    }
-  }
-  return newest?.filePath ?? null;
+function printLegacyNoop(input2) {
+  printCommandEnvelope(legacyNoopEnvelope(input2), { json: input2.options.json });
 }
-function sessionIdFromFilePath(filePath) {
-  return basename4(filePath, ".jsonl");
+function legacySubcommandFromArgv(family) {
+  const args = process.argv.slice(2);
+  const familyIndex = args.indexOf(family);
+  const nextToken = familyIndex >= 0 ? args[familyIndex + 1] : void 0;
+  return nextToken && !nextToken.startsWith("-") ? nextToken : void 0;
 }
-function findSessionFile(sessionId) {
-  if (!UUID_RE.test(sessionId)) {
-    throw new Error(
-      "Invalid session ID format. Expected a UUID such as 5a3bfb97-a2d9-49d9-82c6-52ccc03dadca."
-    );
-  }
-  for (const filePath of listClaudeSessionFiles()) {
-    if (sessionIdFromFilePath(filePath) === sessionId) {
-      return filePath;
-    }
-  }
-  return null;
+function addLegacyNoopSubcommand(parent, family, subcommand, description) {
+  parent.command(subcommand).description(description).allowUnknownOption(true).allowExcessArguments(true).option("--json", "Emit JSON output").argument("[args...]").action((_args, options) => {
+    printLegacyNoop({ family, subcommand, options });
+  });
 }
-function resolveSessionTargets(input2) {
-  const targets = [];
-  if (input2.currentSession) {
-    const currentFile = newestClaudeSessionFile();
-    if (!currentFile) {
-      throw new Error("No session files found in ~/.claude/projects/*/.");
-    }
-    const sessionId = sessionIdFromFilePath(currentFile);
-    targets.push({
-      sessionId,
-      label: `session-${sessionId}`,
-      filePath: currentFile
+function registerLegacyNoopCommands(program) {
+  const session = program.command("session").description("Compatibility no-ops for legacy Python Session UI commands.").allowUnknownOption(true).allowExcessArguments(true).option("--json", "Emit JSON output").argument("[args...]").addHelpText(
+    "after",
+    `
+Notes:
+  The SDK CLI accepts singular session commands from older agent skills so they
+  do not fail, but it does not manage the legacy Python Session UI.
+  Use "deepline sessions send" or "deepline sessions render" for real SDK
+  transcript workflows. "deepline session send" and "deepline session render"
+  are accepted aliases for those real SDK workflows.
+
+Examples:
+  deepline session start --steps '["Inspect CSV","Run pilot"]'
+  deepline session status --message "Running pilot"
+  deepline session output --csv ./results.csv --label "Results"
+	`
+  ).action((args, options) => {
+    void args;
+    printLegacyNoop({
+      family: "session",
+      subcommand: legacySubcommandFromArgv("session"),
+      options
     });
+  });
+  registerSessionSendRenderCommands(session, "session");
+  for (const subcommand of SESSION_SUBCOMMANDS) {
+    addLegacyNoopSubcommand(
+      session,
+      "session",
+      subcommand,
+      `Accept legacy "deepline session ${subcommand}" as an SDK no-op.`
+    );
   }
-  for (const [index, sessionId] of (input2.sessionIds ?? []).entries()) {
-    const filePath = findSessionFile(sessionId);
-    if (!filePath) {
-      throw new Error(
-        `Session file not found: ~/.claude/projects/*/${sessionId}.jsonl`
-      );
-    }
-    targets.push({
-      sessionId,
-      label: input2.labels?.[index] ?? `session-${sessionId}`,
-      filePath
+  const backend = program.command("backend").description(
+    "Compatibility no-ops for legacy Python local backend commands."
+  ).allowUnknownOption(true).allowExcessArguments(true).option("--json", "Emit JSON output").argument("[args...]").addHelpText(
+    "after",
+    `
+Notes:
+  The SDK CLI uses the configured Deepline host and V2 play runtime. It does not
+  start, stop, or refresh the legacy Python local playground backend.
+
+Examples:
+  deepline backend start
+  deepline backend stop --just-backend
+  deepline backend status --json
+	`
+  ).action((args, options) => {
+    void args;
+    printLegacyNoop({
+      family: "backend",
+      subcommand: legacySubcommandFromArgv("backend"),
+      options
     });
+  });
+  for (const subcommand of BACKEND_SUBCOMMANDS) {
+    addLegacyNoopSubcommand(
+      backend,
+      "backend",
+      subcommand,
+      `Accept legacy "deepline backend ${subcommand}" as an SDK no-op.`
+    );
   }
-  if (targets.length === 0) {
-    throw new Error("One of --session-id or --current-session is required.");
-  }
-  return targets;
 }
-function parseJsonLine(line) {
-  try {
-    return JSON.parse(line);
-  } catch {
-    return null;
-  }
+
+// src/cli/commands/org.ts
+async function fetchOrganizations(http, apiKey) {
+  return http.post("/api/v2/auth/cli/organizations", { api_key: apiKey });
 }
-function normalizedJsonLines(raw) {
-  return raw.toString("utf8").split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+function orgListLines(orgs) {
+  return orgs.map((org, index) => {
+    const current = org.is_current ? " (current)" : "";
+    const role = org.role ? ` [${org.role}]` : "";
+    return `${index + 1}. ${org.name}${role}${current}`;
+  });
 }
-function stripNoiseEvents(raw) {
-  const lines = [];
-  for (const line of normalizedJsonLines(raw)) {
-    const parsed = parseJsonLine(line);
-    if (parsed && typeof parsed === "object" && NOISE_EVENT_TYPES.has(String(parsed.type ?? ""))) {
-      continue;
-    }
-    lines.push(line);
-  }
-  return Buffer.from(lines.length > 0 ? `${lines.join("\n")}
-` : "", "utf8");
+async function handleOrgList(options) {
+  const config = resolveConfig();
+  const http = new HttpClient(config);
+  const payload = await fetchOrganizations(http, config.apiKey);
+  printCommandEnvelope(
+    {
+      ...payload,
+      render: {
+        sections: [
+          {
+            title: "Your organizations:",
+            lines: orgListLines(payload.organizations)
+          }
+        ]
+      }
+    },
+    { json: options.json }
+  );
 }
-function messageContentKey(value) {
-  const message = value.message;
-  if (!message || typeof message !== "object") return null;
-  const content = message.content;
-  if (typeof content === "string") return content;
-  if (!Array.isArray(content)) return null;
-  return content.map((block) => {
-    if (!block || typeof block !== "object") return String(block);
-    const record = block;
-    const type = String(record.type ?? "");
-    if (type === "tool_use") {
-      return `tool_use:${String(record.name ?? "")}:${String(record.id ?? "")}`;
-    }
-    if (type === "tool_result") {
-      return `tool_result:${String(record.tool_use_id ?? "")}`;
+async function handleOrgSwitch(selection, options) {
+  const config = resolveConfig();
+  const http = new HttpClient(config);
+  const payload = await fetchOrganizations(http, config.apiKey);
+  if (!selection && !options.orgId) {
+    printCommandEnvelope(
+      {
+        ...payload,
+        next: { switch: "deepline org switch <number>" },
+        render: {
+          sections: [
+            {
+              title: "Your organizations:",
+              lines: orgListLines(payload.organizations)
+            }
+          ],
+          actions: [{ label: "Run", command: "deepline org switch <number>" }]
+        }
+      },
+      { json: options.json }
+    );
+    return;
+  }
+  let target = payload.organizations.find(
+    (org) => org.org_id === options.orgId
+  );
+  if (!target && selection) {
+    const index = Number.parseInt(selection, 10);
+    if (Number.isFinite(index) && index >= 1 && index <= payload.organizations.length) {
+      target = payload.organizations[index - 1];
+    } else {
+      target = payload.organizations.find(
+        (org) => org.name === selection || org.org_id === selection
+      );
     }
-    return String(record.text ?? type);
-  }).join("\n");
+  }
+  if (!target) {
+    throw new Error("Could not resolve the selected organization.");
+  }
+  if (target.is_current) {
+    printCommandEnvelope(
+      {
+        ok: true,
+        unchanged: true,
+        organization: target,
+        render: {
+          sections: [
+            { title: "org switch", lines: [`Already on ${target.name}.`] }
+          ]
+        }
+      },
+      { json: options.json }
+    );
+    return;
+  }
+  const switched = await http.post("/api/v2/auth/cli/switch", {
+    api_key: config.apiKey,
+    org_id: target.org_id
+  });
+  saveHostEnvValues(config.baseUrl, {
+    DEEPLINE_API_KEY: switched.api_key,
+    DEEPLINE_ACTIVE_ORG_ID: switched.org_id,
+    DEEPLINE_ACTIVE_ORG_NAME: switched.org_name
+  });
+  const { api_key: _apiKey, ...publicSwitched } = switched;
+  printCommandEnvelope(
+    {
+      ok: true,
+      host_env_path: hostEnvFilePath(config.baseUrl),
+      ...publicSwitched,
+      api_key_saved: true,
+      render: {
+        sections: [
+          {
+            title: "org switch",
+            lines: [
+              `Switched to ${switched.org_name}.`,
+              `Saved host auth in ${hostEnvFilePath(config.baseUrl)}`
+            ]
+          }
+        ]
+      }
+    },
+    { json: options.json }
+  );
 }
-function dedupConsecutiveEvents(raw) {
-  const rawLines = normalizedJsonLines(raw);
-  const parsedEvents = rawLines.map(parseJsonLine);
-  const output2 = [];
-  let index = 0;
-  while (index < parsedEvents.length) {
-    const event = parsedEvents[index];
-    if (!event || typeof event !== "object") {
-      output2.push(rawLines[index] ?? "");
-      index += 1;
-      continue;
+async function handleOrgCreate(name, options) {
+  const config = resolveConfig();
+  const http = new HttpClient(config);
+  const created = await http.post("/api/v2/auth/cli/org-create", {
+    api_key: config.apiKey,
+    name
+  });
+  saveHostEnvValues(config.baseUrl, {
+    DEEPLINE_API_KEY: created.api_key,
+    DEEPLINE_ACTIVE_ORG_ID: created.org_id,
+    DEEPLINE_ACTIVE_ORG_NAME: created.org_name
+  });
+  const { api_key: _apiKey, ...publicCreated } = created;
+  printCommandEnvelope(
+    {
+      ok: true,
+      ...publicCreated,
+      api_key_saved: true,
+      switched: true,
+      host_env_path: hostEnvFilePath(config.baseUrl),
+      render: {
+        sections: [
+          {
+            title: "org create",
+            lines: [
+              `Created organization: ${created.org_name}.`,
+              `Switched to ${created.org_name}.`,
+              `Saved host auth in ${hostEnvFilePath(config.baseUrl)}`
+            ]
+          }
+        ]
+      }
+    },
+    { json: options.json }
+  );
+}
+function registerOrgCommands(program) {
+  const org = program.command("org").description("List, create, and switch organizations.").addHelpText(
+    "after",
+    `
+Notes:
+  Organizations are workspaces. Switching organizations mutates the saved host
+  auth file so later CLI commands target the selected workspace.
+
+Examples:
+  deepline org list --json
+  deepline org create Acme --json
+  deepline org switch 2
+  deepline org switch --org-id org_123 --json
+`
+  );
+  org.command("list").description("List your organizations.").addHelpText(
+    "after",
+    `
+Notes:
+  Read-only. Marks the active organization when the server returns that metadata.
+
+Examples:
+  deepline org list
+  deepline org list --json
+`
+  ).option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleOrgList);
+  org.command("create <name>").description("Create a new organization and switch this CLI to it.").addHelpText(
+    "after",
+    `
+Notes:
+  Mutates workspace state. The new organization is created for the current
+  authenticated user, then the returned API key is saved for this host so later
+  CLI commands target the new organization.
+
+Examples:
+  deepline org create Acme
+  deepline org create "Acme Sales" --json
+`
+  ).option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleOrgCreate);
+  org.command("switch [selection]").description(
+    "Switch to another organization and save the new API key in the host auth file."
+  ).addHelpText(
+    "after",
+    `
+Notes:
+  Mutates the saved host auth file. Selection can be a list number, exact
+  organization name, or organization id. Without a selection, prints choices.
+
+Examples:
+  deepline org switch
+  deepline org switch 2
+  deepline org switch --org-id org_123 --json
+`
+  ).option("--org-id <id>", "Switch using an explicit organization id").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleOrgSwitch);
+}
+
+// src/cli/commands/quickstart.ts
+import { spawn, spawnSync } from "child_process";
+import { randomBytes } from "crypto";
+import { createServer } from "http";
+var EXIT_OK2 = 0;
+var EXIT_AUTH2 = 1;
+var EXIT_SERVER3 = 2;
+var MAX_PROMPT_LENGTH = 8e3;
+var MAX_BODY_BYTES = 64 * 1024;
+function shellQuote(arg) {
+  return `'${arg.replace(/'/g, `'\\''`)}'`;
+}
+function hasClaudeBinary() {
+  try {
+    const result = spawnSync("claude", ["--version"], {
+      stdio: "ignore",
+      shell: process.platform === "win32"
+    });
+    return result.status === 0;
+  } catch {
+    return false;
+  }
+}
+function launchClaude(prompt) {
+  return new Promise((resolve16) => {
+    const child = spawn("claude", [prompt], {
+      stdio: "inherit",
+      shell: process.platform === "win32"
+    });
+    child.on("error", () => resolve16(EXIT_SERVER3));
+    child.on("close", (status) => resolve16(status ?? EXIT_OK2));
+  });
+}
+function readBody(req) {
+  return new Promise((resolve16, reject) => {
+    let raw = "";
+    req.setEncoding("utf8");
+    req.on("data", (chunk) => {
+      raw += chunk;
+      if (raw.length > MAX_BODY_BYTES) {
+        reject(new Error("Request body too large."));
+        req.destroy();
+      }
+    });
+    req.on("end", () => resolve16(raw));
+    req.on("error", reject);
+  });
+}
+function writeJson(res, status, payload) {
+  res.writeHead(status, { "content-type": "application/json" });
+  res.end(JSON.stringify(payload));
+}
+function startCallbackServer(input2) {
+  const server = createServer((req, res) => {
+    res.setHeader("Access-Control-Allow-Origin", req.headers.origin ?? "*");
+    res.setHeader("Vary", "Origin");
+    res.setHeader("Access-Control-Allow-Methods", "POST, OPTIONS");
+    res.setHeader("Access-Control-Allow-Headers", "content-type");
+    res.setHeader("Access-Control-Allow-Private-Network", "true");
+    res.setHeader("Access-Control-Max-Age", "600");
+    if (req.method === "OPTIONS") {
+      res.writeHead(204);
+      res.end();
+      return;
     }
-    const record = event;
-    const eventType = String(record.type ?? "");
-    const eventKey = messageContentKey(record);
-    if (!["user", "assistant"].includes(eventType) || !eventKey) {
-      output2.push(rawLines[index] ?? "");
-      index += 1;
-      continue;
+    if (req.method !== "POST" || req.url !== "/submit") {
+      writeJson(res, 404, { error: "Not found." });
+      return;
     }
-    let runCount = 1;
-    let cursor = index + 1;
-    while (cursor < parsedEvents.length) {
-      const next = parsedEvents[cursor];
-      if (!next || typeof next !== "object") break;
-      const nextRecord = next;
-      if (String(nextRecord.type ?? "") !== eventType || messageContentKey(nextRecord) !== eventKey) {
-        break;
+    void readBody(req).then((raw) => {
+      let body = null;
+      try {
+        body = JSON.parse(raw);
+      } catch {
+        body = null;
+      }
+      const state = typeof body?.state === "string" ? body.state : "";
+      const prompt = typeof body?.prompt === "string" ? body.prompt.trim() : "";
+      const workflowId = typeof body?.workflow_id === "string" && body.workflow_id.trim() ? body.workflow_id.trim() : null;
+      if (!state || state !== input2.state) {
+        writeJson(res, 403, { error: "Invalid quickstart state token." });
+        return;
+      }
+      if (!prompt) {
+        writeJson(res, 400, { error: "prompt is required." });
+        return;
+      }
+      if (prompt.length > MAX_PROMPT_LENGTH) {
+        writeJson(res, 400, {
+          error: `prompt exceeds ${MAX_PROMPT_LENGTH} characters.`
+        });
+        return;
+      }
+      writeJson(res, 200, { ok: true });
+      setImmediate(() => input2.onSelection({ prompt, workflowId }));
+    }).catch(() => {
+      writeJson(res, 400, { error: "Invalid request body." });
+    });
+  });
+  return new Promise((resolve16, reject) => {
+    server.once("error", reject);
+    server.listen(0, "127.0.0.1", () => {
+      const address = server.address();
+      if (!address || typeof address === "string") {
+        reject(new Error("Failed to bind quickstart callback server."));
+        return;
       }
-      runCount += 1;
-      cursor += 1;
+      resolve16({ server, port: address.port });
+    });
+  });
+}
+async function handleQuickstart(options) {
+  const jsonOutput = shouldEmitJson(options.json === true);
+  const baseUrl = autoDetectBaseUrl().replace(/\/$/, "");
+  const interactive = Boolean(process.stdin.isTTY && process.stdout.isTTY);
+  let apiKey = resolveApiKeyForBaseUrl(baseUrl);
+  if (!apiKey) {
+    if (interactive) {
+      console.error("Not connected yet \u2014 registering this device first.");
+      const registerExit = await handleRegister([]);
+      if (registerExit !== EXIT_OK2) return registerExit;
+      apiKey = resolveApiKeyForBaseUrl(baseUrl);
     }
-    if (runCount > 1) {
-      record._repeat_count = runCount;
-      record._repeat_summary = `${runCount} consecutive identical ${eventType} messages collapsed`;
-      output2.push(JSON.stringify(record));
-      index = cursor;
-      continue;
+    if (!apiKey) {
+      console.error("Not connected. Run: deepline auth register");
+      return EXIT_AUTH2;
     }
-    output2.push(rawLines[index] ?? "");
-    index += 1;
   }
-  return Buffer.from(output2.length > 0 ? `${output2.join("\n")}
-` : "", "utf8");
-}
-function compactEventValue(value) {
-  if (typeof value === "string") {
-    if (value.length <= MAX_EVENT_STRING_CHARS) return value;
-    return `${value.slice(0, MAX_EVENT_STRING_CHARS - TRUNCATION_MARKER.length)}${TRUNCATION_MARKER}`;
+  const state = randomBytes(32).toString("hex");
+  let resolveSelection;
+  const selectionPromise = new Promise((resolve16) => {
+    resolveSelection = resolve16;
+  });
+  let callback;
+  try {
+    callback = await startCallbackServer({
+      state,
+      onSelection: (selection) => resolveSelection(selection)
+    });
+  } catch (error) {
+    console.error(
+      `Could not start the local quickstart listener: ${error instanceof Error ? error.message : String(error)}`
+    );
+    return EXIT_SERVER3;
   }
-  if (Array.isArray(value)) {
-    const compacted = value.slice(0, MAX_EVENT_LIST_ITEMS).map(compactEventValue);
-    if (value.length > MAX_EVENT_LIST_ITEMS) {
-      compacted.push(
-        `${TRUNCATION_MARKER} ${value.length - MAX_EVENT_LIST_ITEMS} more item(s)`
-      );
-    }
-    return compacted;
+  const quickstartUrl = `${baseUrl}/cli/quickstart?cb=${callback.port}&state=${state}`;
+  console.error("  Opening the recipe picker in your browser.");
+  console.error(`  If it didn't open, cmd+click: ${quickstartUrl}`);
+  if (options.open !== false) {
+    openInBrowser(quickstartUrl);
   }
-  if (value && typeof value === "object") {
-    const entries = Object.entries(value);
-    const compacted = {};
-    for (const [key, item] of entries.slice(0, MAX_EVENT_OBJECT_KEYS)) {
-      compacted[key] = compactEventValue(item);
-    }
-    if (entries.length > MAX_EVENT_OBJECT_KEYS) {
-      compacted._truncated_keys = entries.length - MAX_EVENT_OBJECT_KEYS;
-    }
-    return compacted;
+  const timeoutSeconds = Number.parseInt(options.timeout ?? "300", 10);
+  const timeoutMs = (Number.isFinite(timeoutSeconds) && timeoutSeconds > 0 ? timeoutSeconds : 300) * 1e3;
+  const timeoutHandle = setTimeout(
+    () => resolveSelection("timeout"),
+    timeoutMs
+  );
+  const progress = createCliProgress(!jsonOutput);
+  progress.phase("waiting for your pick in the browser (Ctrl+C to skip)");
+  const onSigint = () => resolveSelection("sigint");
+  process.once("SIGINT", onSigint);
+  const outcome = await selectionPromise;
+  clearTimeout(timeoutHandle);
+  process.removeListener("SIGINT", onSigint);
+  callback.server.close();
+  if (outcome === "sigint") {
+    progress.fail();
+    console.error("\nSkipped \u2014 run `deepline quickstart` anytime.");
+    return EXIT_OK2;
   }
-  return value;
+  if (outcome === "timeout") {
+    progress.fail();
+    console.error(
+      "Timed out waiting for a selection. Run: deepline quickstart"
+    );
+    return EXIT_AUTH2;
+  }
+  progress.complete();
+  const { prompt, workflowId } = outcome;
+  const claudeCommand = `claude ${shellQuote(prompt)}`;
+  const claudeAvailable = hasClaudeBinary();
+  const willLaunch = options.launch !== false && !jsonOutput && interactive && claudeAvailable;
+  printCommandEnvelope(
+    {
+      status: "submitted",
+      workflowId,
+      prompt,
+      claudeCommand,
+      url: quickstartUrl,
+      launched: willLaunch,
+      render: {
+        sections: [
+          {
+            title: "quickstart",
+            lines: [
+              ...workflowId ? [`Recipe: ${workflowId}`] : [],
+              willLaunch ? "Launching Claude Code with your recipe..." : claudeAvailable ? "Run the command below to start your recipe." : "Claude Code not found. Install it (https://code.claude.com/docs/en/overview), then run the command below."
+            ]
+          }
+        ],
+        actions: [{ label: "Run", command: claudeCommand }]
+      }
+    },
+    { json: jsonOutput }
+  );
+  if (willLaunch) {
+    return launchClaude(prompt);
+  }
+  return EXIT_OK2;
 }
-function selectiveCompactToolResults(raw) {
-  const lines = [];
-  for (const line of normalizedJsonLines(raw)) {
-    const parsed = parseJsonLine(line);
-    if (!parsed || typeof parsed !== "object") {
-      lines.push(line);
-      continue;
-    }
-    const record = parsed;
-    if (record.type === "user") {
-      const message = record.message;
-      const content = message && typeof message === "object" ? message.content : null;
-      if (Array.isArray(content)) {
-        message.content = content.map(
-          (block) => block && typeof block === "object" && block.type === "tool_result" ? compactEventValue(block) : block
-        );
+function registerQuickstartCommands(program) {
+  program.command("quickstart").description(
+    "Pick a starter recipe in the browser and launch it with Claude Code."
+  ).addHelpText(
+    "after",
+    `
+Notes:
+  Opens the hosted recipe picker in your browser. The picker sends your
+  selection back to a temporary listener on 127.0.0.1, so the browser must run
+  on the same machine as the CLI. Once a recipe arrives, the CLI prints the
+  matching claude command and, when Claude Code is installed and the shell is
+  interactive, launches it directly. Press Ctrl+C while waiting to skip.
+
+Examples:
+  deepline quickstart
+  deepline quickstart --no-open
+  deepline quickstart --no-launch --json
+  deepline quickstart --timeout 120
+`
+  ).option("--json", "Emit JSON output. Also automatic when stdout is piped").option("--no-open", "Do not open the browser; print the URL only").option("--no-launch", "Print the claude command instead of launching it").option(
+    "--timeout <seconds>",
+    "Maximum seconds to wait for a selection",
+    "300"
+  ).action(async (options) => {
+    process.exitCode = await handleQuickstart(options);
+  });
+}
+
+// src/cli/commands/secrets.ts
+import { stdin as input, stdout as output } from "process";
+var hiddenInputBuffer = "";
+function normalizeSecretName(value) {
+  const normalized = value.trim().toUpperCase();
+  if (!/^[A-Z][A-Z0-9_]{1,63}$/.test(normalized)) {
+    throw new Error(
+      "Secret names must be 2-64 characters and use uppercase letters, numbers, and underscores."
+    );
+  }
+  return normalized;
+}
+function renderSecret(secret) {
+  const scope = secret.scope === "play" && secret.playName ? `play:${secret.playName}` : secret.scope;
+  return `${secret.name} (${scope}) - ${secret.status}${secret.hasValue ? ", set" : ", empty"}`;
+}
+async function readHiddenLine(prompt) {
+  if (!input.isTTY || !output.isTTY) {
+    throw new Error(
+      "Secret values must be entered from an interactive TTY. Do not pipe, pass, or script secret values."
+    );
+  }
+  output.write(prompt);
+  const previousRawMode = input.isRaw;
+  if (typeof input.setRawMode === "function") input.setRawMode(true);
+  let value = "";
+  input.resume();
+  return await new Promise((resolve16, reject) => {
+    let settled = false;
+    const cleanup = () => {
+      input.off("data", onData);
+      input.off("end", onEnd);
+      input.off("error", onError);
+      if (typeof input.setRawMode === "function") {
+        input.setRawMode(previousRawMode);
+      }
+    };
+    const finish = (line) => {
+      if (settled) return;
+      settled = true;
+      output.write("\n");
+      cleanup();
+      resolve16(line);
+    };
+    const fail = (error) => {
+      if (settled) return;
+      settled = true;
+      output.write("\n");
+      cleanup();
+      reject(error);
+    };
+    const processText = (text) => {
+      for (let index = 0; index < text.length; index++) {
+        const char = text[index];
+        const code = char.charCodeAt(0);
+        if (char === "\r" || char === "\n") {
+          hiddenInputBuffer = text.slice(index + 1);
+          finish(value);
+          return;
+        }
+        if (code === 3) {
+          fail(new Error("Secret input cancelled."));
+          return;
+        }
+        if (code === 8 || code === 127) {
+          value = value.slice(0, -1);
+          continue;
+        }
+        if (code >= 32) {
+          value += char;
+        }
       }
+      hiddenInputBuffer = "";
+    };
+    const onData = (chunk) => {
+      processText(chunk.toString());
+    };
+    const onEnd = () => fail(new Error("Secret input ended before a value was entered."));
+    const onError = (error) => fail(error);
+    input.on("data", onData);
+    input.once("end", onEnd);
+    input.once("error", onError);
+    if (hiddenInputBuffer) {
+      const buffered = hiddenInputBuffer;
+      hiddenInputBuffer = "";
+      processText(buffered);
     }
-    lines.push(JSON.stringify(record));
-  }
-  return Buffer.from(lines.length > 0 ? `${lines.join("\n")}
-` : "", "utf8");
-}
-function prepareSessionBuffer(raw) {
-  return selectiveCompactToolResults(
-    dedupConsecutiveEvents(stripNoiseEvents(raw))
-  );
+  });
 }
-function buildSessionUploadContent(raw) {
-  const prepared = prepareSessionBuffer(raw);
-  const encoded = gzipSync(prepared).toString("base64");
-  if (encoded.length <= MAX_SESSION_UPLOAD_BYTES && prepared.length <= MAX_DIRECT_SESSION_DECODED_BYTES) {
-    return { encodedContent: encoded, needsChunking: false };
+async function readSecretValue() {
+  const first = await readHiddenLine("Secret value: ");
+  if (!first) throw new Error("Secret value is required.");
+  const second = await readHiddenLine("Confirm secret value: ");
+  if (first !== second) {
+    throw new Error("Secret values did not match.");
   }
-  return { encodedContent: encoded, needsChunking: true };
-}
-async function uploadPayload(path, payload) {
-  const { http } = getAuthedHttpClient();
-  return await http.post(path, payload);
+  return first;
 }
-async function uploadChunkedSessions(sessions, options) {
-  const uploadId = randomUUID();
-  for (const session of sessions) {
-    const bytes = Buffer.from(session.encodedContent, "base64");
-    const chunks = [];
-    for (let offset = 0; offset < bytes.length; offset += CHUNK_SIZE_BYTES) {
-      chunks.push(bytes.subarray(offset, offset + CHUNK_SIZE_BYTES));
-    }
-    process.stderr.write(
-      `Uploading ${session.label} in ${chunks.length} chunk(s)...
-`
+function preventShellHistoryLeak(forbidden) {
+  if (forbidden.length > 0) {
+    throw new Error(
+      "Do not pass secret values as command arguments. Run `deepline secrets set NAME` and enter the value at the hidden prompt."
     );
-    for (const [index, chunk] of chunks.entries()) {
-      await uploadPayload("/api/v2/cli/send-session/chunk", {
-        upload_id: uploadId,
-        session_id: session.sessionId,
-        index,
-        total_chunks: chunks.length,
-        data: chunk.toString("base64")
-      });
-    }
   }
-  const response = await uploadPayload("/api/v2/cli/send-session/finalize", {
-    upload_id: uploadId,
-    session_ids: sessions.map((session) => session.sessionId),
-    labels: sessions.map((session) => session.label),
-    environments: sessions.map(() => detectShellContext())
-  });
+}
+async function handleList(options) {
+  const client2 = new DeeplineClient();
+  const secrets = await client2.listSecrets();
   printCommandEnvelope(
     {
-      ...response,
-      ok: true,
-      uploaded: sessions.length,
+      secrets,
+      count: secrets.length,
       render: {
         sections: [
           {
-            title: "sessions send",
-            lines: ["Session uploaded to #internal-reports (chunked)."]
+            title: "secrets",
+            lines: secrets.length ? secrets.map(renderSecret) : ["No play secrets are configured."]
           }
         ]
       }
@@ -19274,247 +19883,266 @@ async function uploadChunkedSessions(sessions, options) {
     { json: options.json }
   );
 }
-async function handleSessionsSend(options) {
-  if (options.file) {
-    const filePath = resolve12(options.file);
-    if (!existsSync8(filePath)) {
-      throw new Error(`File not found: ${options.file}`);
-    }
-    const response2 = await uploadPayload("/api/v2/cli/send-session", {
-      file: readFileSync7(filePath).toString("base64"),
-      filename: basename4(filePath)
-    });
-    printCommandEnvelope(
-      {
-        ...response2,
-        ok: true,
-        filename: basename4(filePath),
-        render: {
-          sections: [
-            {
-              title: "sessions send",
-              lines: [
-                `File '${basename4(filePath)}' uploaded to #internal-reports.`
-              ]
-            }
-          ]
-        }
-      },
-      { json: options.json }
-    );
-    return;
-  }
-  const targets = resolveSessionTargets({
-    sessionIds: options.sessionId,
-    labels: options.label,
-    currentSession: options.currentSession
-  });
-  const built = targets.map((target) => {
-    const upload = buildSessionUploadContent(readFileSync7(target.filePath));
-    return { ...target, ...upload };
-  });
-  if (built.some((session) => session.needsChunking)) {
-    await uploadChunkedSessions(built, options);
-    return;
-  }
-  const response = built.length === 1 && !options.label?.length ? await uploadPayload("/api/v2/cli/send-session", {
-    session_id: built[0]?.sessionId,
-    content: built[0]?.encodedContent,
-    environment: detectShellContext()
-  }) : await uploadPayload("/api/v2/cli/send-session", {
-    sessions: built.map((session) => ({
-      session_id: session.sessionId,
-      content: session.encodedContent,
-      label: session.label,
-      environment: detectShellContext()
-    })),
-    environment: detectShellContext()
-  });
+async function handleCheck(nameInput, options) {
+  const name = normalizeSecretName(nameInput);
+  const client2 = new DeeplineClient();
+  const secret = await client2.checkSecret(name);
   printCommandEnvelope(
     {
-      ...response,
-      ok: true,
-      uploaded: built.length,
+      ok: Boolean(secret),
+      name,
+      secret: secret ?? null,
       render: {
         sections: [
           {
-            title: "sessions send",
-            lines: ["Session uploaded to #internal-reports."]
+            title: "secret check",
+            lines: [
+              secret ? `${name}: active` : `${name}: missing, disabled, or empty`
+            ]
           }
         ]
       }
     },
     { json: options.json }
   );
+  if (!secret) process.exitCode = 4;
 }
-function fallbackViewerAssets() {
-  return {
-    css: [
-      "body{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;margin:0;padding:16px;background:#fafafa;color:#111}",
-      ".section{background:#fff;border:1px solid #ddd;border-radius:8px;padding:12px;margin-bottom:12px}",
-      ".section h2{margin:0 0 8px 0;font-size:14px}",
-      "pre{margin:0;white-space:pre-wrap;word-break:break-word;background:#f6f8fa;border:1px solid #e3e5e8;border-radius:6px;padding:10px}"
-    ].join(""),
-    js: [
-      "(() => {",
-      'const root=document.getElementById("main-content");',
-      'const raw=document.getElementById("raw-sessions");',
-      "if(!root||!raw)return;",
-      'let sessions=[];try{sessions=JSON.parse(raw.textContent||"[]")}catch{}',
-      'root.innerHTML="";',
-      "for(const session of sessions){",
-      'const section=document.createElement("section");section.className="section";',
-      'const title=document.createElement("h2");title.textContent=String(session.label||"session");',
-      'const pre=document.createElement("pre");',
-      'pre.textContent=(Array.isArray(session.events)?session.events:[]).map((event)=>JSON.stringify(event)).join("\\n");',
-      "section.append(title,pre);root.appendChild(section);",
-      "}",
-      "})();"
-    ].join("")
-  };
-}
-function parsePreparedEvents(buffer) {
-  return normalizedJsonLines(buffer).map((line) => {
-    const parsed = parseJsonLine(line);
-    return parsed ?? line;
-  });
-}
-async function handleSessionsRender(options) {
-  const targets = resolveSessionTargets({
-    sessionIds: options.sessionId,
-    labels: options.label,
-    currentSession: options.currentSession
-  });
-  let outputPath = options.output ? resolve12(options.output) : "";
-  if (!outputPath) {
-    const outputDir = join9(process.cwd(), "deepline", "data");
-    mkdirSync4(outputDir, { recursive: true });
-    outputPath = join9(
-      outputDir,
-      targets.length > 1 ? "session-viewer.html" : `session-${targets[0]?.sessionId}.html`
-    );
-  } else {
-    mkdirSync4(dirname9(outputPath), { recursive: true });
+async function handleSet(nameInput, forbidden, options) {
+  preventShellHistoryLeak(forbidden);
+  const name = normalizeSecretName(nameInput);
+  const scope = options.scope === "play" ? "play" : "org";
+  const playName = options.play?.trim();
+  if (scope === "play" && !playName) {
+    throw new Error("--play <name> is required when --scope play is used.");
   }
-  const sessions = targets.map((target) => ({
-    label: target.label,
-    events: parsePreparedEvents(
-      prepareSessionBuffer(readFileSync7(target.filePath))
-    )
-  }));
-  const { css, js } = fallbackViewerAssets();
-  const refreshMeta = options.autoRefresh ? `<meta http-equiv="refresh" content="${Number.parseInt(options.autoRefresh, 10)}">` : "";
-  const rawJson = JSON.stringify(sessions).replace(/<\//g, "<\\/");
-  const html = `<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-${refreshMeta}
-<title>Session Viewer</title>
-<style>${css}</style>
-</head>
-<body>
-<div class="layout">
-  <div class="main" id="main-content"></div>
-</div>
-<script type="application/json" id="raw-sessions">${rawJson}</script>
-<script>${js}</script>
-</body>
-</html>`;
-  writeFileSync8(outputPath, html, "utf8");
+  const value = await readSecretValue();
+  const { http } = getAuthedHttpClient();
+  const response = await http.post(
+    "/api/v2/secrets",
+    {
+      name,
+      value,
+      scope,
+      ...playName ? { playName } : {}
+    }
+  );
+  const secret = response.secret;
   printCommandEnvelope(
     {
       ok: true,
-      file: outputPath,
-      session_count: targets.length,
+      secret,
       render: {
         sections: [
           {
-            title: "sessions render",
-            lines: [`Rendered session viewer: ${outputPath}`]
+            title: "secret saved",
+            lines: [`${secret.name}: saved (${secret.scope})`]
           }
         ]
       }
-    },
-    { json: options.json }
-  );
-}
-function collectOption(value, previous) {
-  previous.push(value);
-  return previous;
+    },
+    { json: options.json }
+  );
 }
-function registerSessionsCommands(program) {
-  const sessions = program.command("sessions").description("Upload and render local agent session transcripts.").addHelpText(
+function registerSecretsCommands(program) {
+  const secrets = program.command("secrets").description("Manage play secrets without revealing values.").addHelpText(
     "after",
     `
 Notes:
-  Session commands operate on local Claude session JSONL files under
-  ~/.claude/projects. send uploads a compacted transcript or file to Deepline.
-  render writes a local HTML viewer.
+  Secret values are never accepted as command arguments, stdin pipes, env vars,
+  or files. Use deepline secrets set NAME and type the value at the hidden TTY
+  prompt. Agents can list/check metadata but should not enter secret values.
 
 Examples:
-  deepline sessions send --current-session --json
-  deepline sessions send --session-id 5a3bfb97-a2d9-49d9-82c6-52ccc03dadca
-  deepline sessions render --current-session --output session.html
+  deepline secrets list
+  deepline secrets check HUBSPOT_TOKEN
+  deepline secrets set HUBSPOT_TOKEN
 `
   );
-  sessions.command("send").description("Upload session transcript(s) or a local file to Deepline.").addHelpText(
-    "after",
-    `
-Examples:
-  deepline sessions send --current-session --json
-  deepline sessions send --session-id 5a3bfb97-a2d9-49d9-82c6-52ccc03dadca --label "pilot run"
-  deepline sessions send --file ./debug.log --json
-`
-  ).option(
-    "--session-id <uuid>",
-    "Claude session UUID. Repeat for multiple sessions.",
-    collectOption,
-    []
-  ).option(
-    "--label <label>",
-    "Label for the preceding session id",
-    collectOption,
-    []
-  ).option("--current-session", "Use the newest local Claude session JSONL").option("--file <path>", "Upload a raw local file instead of a session").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleSessionsSend);
-  sessions.command("render").description("Render local session transcript(s) to an HTML viewer.").addHelpText(
+  secrets.command("list").description("List secret metadata only.").option("--json", "Emit JSON output").action(async (options) => {
+    await handleList(options);
+  });
+  secrets.command("check").description("Check whether a secret exists and is active.").argument("<name>", "Secret name").option("--json", "Emit JSON output").action(async (name, options) => {
+    await handleCheck(name, options);
+  });
+  secrets.command("set").description("Set or rotate a secret through a hidden interactive prompt.").argument("<name>", "Secret name").argument("[forbidden...]", "Do not pass secret values here").option("--json", "Emit JSON output").option("--scope <scope>", "Secret scope: org or play", "org").option("--play <name>", "Play name for play-scoped secrets").action(
+    async (name, forbidden, options) => {
+      await handleSet(name, forbidden ?? [], options);
+    }
+  );
+}
+
+// src/cli/commands/switch.ts
+import { existsSync as existsSync9, mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync9 } from "fs";
+import { homedir as homedir6 } from "os";
+import { dirname as dirname10, join as join10 } from "path";
+function hostSlugFromBaseUrl(baseUrl) {
+  try {
+    const url = new URL(baseUrl);
+    const port = url.port ? Number.parseInt(url.port, 10) : null;
+    let slug = (url.hostname || "unknown").replace(/[^a-zA-Z0-9]/g, "-");
+    if (port && port !== 80 && port !== 443) {
+      slug = `${slug}-${port}`;
+    }
+    return slug.toLowerCase().replace(/^-+|-+$/g, "") || "unknown";
+  } catch {
+    return "unknown";
+  }
+}
+function resolveConfigScope() {
+  const explicit = (process.env.DEEPLINE_CONFIG_SCOPE || "").trim();
+  if (explicit) return explicit;
+  return hostSlugFromBaseUrl(autoDetectBaseUrl());
+}
+function activeFamilyPath() {
+  const home = process.env.HOME || process.env.USERPROFILE || homedir6();
+  return join10(
+    home,
+    ".local",
+    "deepline",
+    resolveConfigScope(),
+    "cli",
+    ".active-family"
+  );
+}
+function readActiveFamily() {
+  const path = activeFamilyPath();
+  try {
+    return readFileSync8(path, "utf-8").trim() || "sdk";
+  } catch {
+    return "sdk";
+  }
+}
+function writeActiveFamily(family) {
+  const path = activeFamilyPath();
+  mkdirSync5(dirname10(path), { recursive: true });
+  writeFileSync9(path, `${family}
+`, "utf-8");
+  return path;
+}
+function handleSwitch(action, options) {
+  const normalized = (action || "status").trim().toLowerCase();
+  if (normalized === "status") {
+    const path = activeFamilyPath();
+    const activeFamily = readActiveFamily();
+    printCommandEnvelope(
+      {
+        ok: true,
+        active_family: activeFamily,
+        active_family_path: path,
+        active_family_file_exists: existsSync9(path),
+        render: {
+          sections: [
+            {
+              title: "cli switch",
+              lines: [
+                `Active CLI family: ${activeFamily}`,
+                `Active family file: ${path}`
+              ]
+            }
+          ]
+        }
+      },
+      { json: options.json }
+    );
+    return 0;
+  }
+  if (normalized === "python" || normalized === "rollback") {
+    const path = writeActiveFamily("python");
+    printCommandEnvelope(
+      {
+        ok: true,
+        active_family: "python",
+        active_family_path: path,
+        render: {
+          sections: [
+            {
+              title: "cli switch",
+              lines: [
+                "Switched installer-managed `deepline` to the Python CLI."
+              ]
+            }
+          ]
+        }
+      },
+      { json: options.json }
+    );
+    return 0;
+  }
+  if (normalized === "sdk") {
+    const path = writeActiveFamily("sdk");
+    printCommandEnvelope(
+      {
+        ok: true,
+        active_family: "sdk",
+        active_family_path: path,
+        render: {
+          sections: [
+            {
+              title: "cli switch",
+              lines: ["Switched installer-managed `deepline` to the SDK CLI."]
+            }
+          ]
+        }
+      },
+      { json: options.json }
+    );
+    return 0;
+  }
+  const message = `Unknown switch target: ${action}. Use one of: status, sdk, python, rollback.`;
+  const envelope = {
+    ok: false,
+    error: message,
+    code: "usage_error",
+    render: {
+      sections: [{ title: "cli switch", lines: [message] }]
+    }
+  };
+  const wantsJson = options.json === true;
+  if (wantsJson) {
+    printCommandEnvelope(envelope, { json: true });
+  } else {
+    process.stderr.write(`${message}
+`);
+  }
+  return 2;
+}
+function registerSwitchCommands(program) {
+  program.command("switch [target]").description(
+    "Switch the installer-managed Deepline CLI between SDK and Python families."
+  ).option("--json", "Emit JSON output").addHelpText(
     "after",
     `
+Notes:
+  This command changes only the local installer-managed wrapper state. It does
+  not re-authenticate, reinstall packages, or contact Deepline servers.
+
 Examples:
-  deepline sessions render --current-session
-  deepline sessions render --session-id 5a3bfb97-a2d9-49d9-82c6-52ccc03dadca --output session.html
-  deepline sessions render --current-session --auto-refresh 5 --json
+  deepline switch status
+  deepline switch python
+  deepline switch rollback
+  deepline switch sdk
 `
-  ).option(
-    "--session-id <uuid>",
-    "Claude session UUID. Repeat for multiple sessions.",
-    collectOption,
-    []
-  ).option(
-    "--label <label>",
-    "Label for the preceding session id",
-    collectOption,
-    []
-  ).option("--current-session", "Use the newest local Claude session JSONL").option("--auto-refresh <seconds>", "Add a browser auto-refresh interval").option("-o, --output <path>", "Output HTML path").option("--json", "Emit JSON output. Also automatic when stdout is piped").action(handleSessionsRender);
+  ).action((target, options) => {
+    process.exitCode = handleSwitch(target, options);
+  });
 }
 
 // src/cli/commands/tools.ts
 import { Option } from "commander";
 import {
   chmodSync,
-  existsSync as existsSync9,
+  existsSync as existsSync10,
   mkdtempSync,
-  readFileSync as readFileSync8,
-  writeFileSync as writeFileSync10
+  readFileSync as readFileSync9,
+  writeFileSync as writeFileSync11
 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
-import { join as join11, resolve as resolve13 } from "path";
+import { join as join12, resolve as resolve13 } from "path";
 
 // src/tool-output.ts
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync9 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join10 } from "path";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync10 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join11 } from "path";
 function isPlainObject(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -19610,19 +20238,19 @@ function tryConvertToList(payload, options) {
   return null;
 }
 function ensureOutputDir() {
-  const outputDir = join10(homedir6(), ".local", "share", "deepline", "data");
-  mkdirSync5(outputDir, { recursive: true });
+  const outputDir = join11(homedir7(), ".local", "share", "deepline", "data");
+  mkdirSync6(outputDir, { recursive: true });
   return outputDir;
 }
 function writeJsonOutputFile(payload, stem) {
   const outputDir = ensureOutputDir();
-  const outputPath = join10(outputDir, `${stem}_${Date.now()}.json`);
-  writeFileSync9(outputPath, JSON.stringify(payload, null, 2), "utf-8");
+  const outputPath = join11(outputDir, `${stem}_${Date.now()}.json`);
+  writeFileSync10(outputPath, JSON.stringify(payload, null, 2), "utf-8");
   return outputPath;
 }
 function writeCsvOutputFile(rows, stem) {
   const outputDir = ensureOutputDir();
-  const outputPath = join10(outputDir, `${stem}_${Date.now()}.csv`);
+  const outputPath = join11(outputDir, `${stem}_${Date.now()}.csv`);
   const seen = /* @__PURE__ */ new Set();
   const columns = [];
   for (const row of rows) {
@@ -19645,7 +20273,7 @@ function writeCsvOutputFile(rows, stem) {
   for (const row of rows) {
     lines.push(columns.map((column) => escapeCell(row[column])).join(","));
   }
-  writeFileSync9(outputPath, `${lines.join("\n")}
+  writeFileSync10(outputPath, `${lines.join("\n")}
 `, "utf-8");
   const previewRows = rows.slice(0, 5);
   const previewColumns = columns.slice(0, 5);
@@ -19684,13 +20312,12 @@ var TOOL_COMMAND_TEMPLATES = {
 };
 function toListedTool(tool) {
   if (isPlayLikeTool(tool)) {
-    const playReference = playReferenceForTool(tool);
     return {
       ...tool,
       description: listedToolDescription(tool),
       id: tool.toolId,
       type: "play",
-      executeCommand: `deepline plays run ${playReference} --input '{...}' --watch`
+      executeCommand: playRunCommandForTool(tool, tool.toolId)
     };
   }
   return {
@@ -19904,17 +20531,32 @@ function isPlayLikeTool(tool) {
 }
 function playReferenceForTool(tool) {
   const record = tool;
-  const toolId = typeof record.toolId === "string" ? record.toolId : "play";
-  return `prebuilt/${toolId.replace(/_/g, "-")}`;
+  const declared = stringField(record, "playReference", "play_reference");
+  if (declared.startsWith("prebuilt/")) {
+    return declared;
+  }
+  return null;
+}
+function playSearchCommandForToolId(toolId) {
+  return `deepline plays search ${JSON.stringify(toolId.replace(/_/g, " "))} --json`;
 }
-function playLikeToolExecuteErrorMessage(toolId) {
-  const playReference = `prebuilt/${toolId.replace(/_/g, "-")}`;
-  return `${toolId} is a workflow/play entry, not an atomic provider tool.
-Use: deepline plays run ${playReference} --input '{...}' --watch
-Or search provider tools only with: deepline tools search "<query>" --json`;
+function playRunCommandForTool(tool, toolId, input2) {
+  const playReference = playReferenceForTool(tool);
+  if (!playReference) return playSearchCommandForToolId(toolId);
+  const inputArg = input2 === void 0 ? "'{...}'" : `'${JSON.stringify(input2)}'`;
+  return `deepline plays run ${playReference} --input ${inputArg} --watch`;
 }
-function printPlayLikeToolExecuteError(toolId) {
-  console.error(playLikeToolExecuteErrorMessage(toolId));
+function playLikeToolExecuteErrorMessage(toolId, tool) {
+  const playReference = tool ? playReferenceForTool(tool) : null;
+  const nextStep = playReference ? `Use: deepline plays run ${playReference} --input '{...}' --watch` : `Find the maintained workflow with: ${playSearchCommandForToolId(toolId)}`;
+  return [
+    `${toolId} is a workflow/play entry, not an atomic provider tool.`,
+    nextStep,
+    'Or search provider tools only with: deepline tools search "<query>" --json'
+  ].join("\n");
+}
+function printPlayLikeToolExecuteError(toolId, tool) {
+  console.error(playLikeToolExecuteErrorMessage(toolId, tool));
 }
 function registerToolsCommands(program) {
   const tools = program.command("tools").description("Search, describe, and execute atomic provider tools.").addHelpText(
@@ -20212,13 +20854,14 @@ function toolContractJsonForDescribe(tool, requestedToolId) {
     "deeplineUsdPerPricingUnit",
     "deepline_usd_per_pricing_unit"
   );
-  const starterScript = extractedLists.length > 0 ? starterScriptJson(
+  const starterScript = !isPlayLikeTool(tool) && extractedLists.length > 0 ? starterScriptJson(
     seedToolListScript({
       toolId,
       payload: samplePayloadForInputFields(inputFields),
       rows: []
     })
   ) : null;
+  const executeCommand = isPlayLikeTool(tool) ? playRunCommandForTool(tool, toolId) : `deepline tools execute ${toolId} --input '{...}' --json`;
   return {
     schemaVersion: 1,
     toolId,
@@ -20243,7 +20886,7 @@ function toolContractJsonForDescribe(tool, requestedToolId) {
       extractedLists,
       extractedValues
     },
-    executeCommand: `deepline tools execute ${toolId} --input '{...}' --json`,
+    executeCommand,
     ...starterScript ? { starterScript } : {}
   };
 }
@@ -20355,6 +20998,10 @@ function printToolSchemaOnly(tool, requestedToolId) {
   }
 }
 function printToolExamplesOnly(tool, requestedToolId, options = {}) {
+  if (isPlayLikeTool(tool)) {
+    printPlayLikeToolUsage(tool, requestedToolId);
+    return;
+  }
   const contract = toolContractJsonForDescribe(tool, requestedToolId);
   const toolId = String(contract.toolId);
   const inputFields = Array.isArray(contract.inputFields) ? contract.inputFields : [];
@@ -20386,6 +21033,25 @@ function printToolExamplesOnly(tool, requestedToolId, options = {}) {
     printSamples(samples);
   }
 }
+function printPlayLikeToolUsage(tool, requestedToolId) {
+  const toolId = String(tool.toolId || requestedToolId);
+  const inputFields = toolInputFieldsForDisplay(
+    recordField2(tool, "inputSchema", "input_schema")
+  );
+  const sampleInput = samplePayloadForInputFields(inputFields);
+  const playReference = playReferenceForTool(tool);
+  console.log("Run as a play:");
+  console.log(
+    playRunCommandForTool(
+      tool,
+      toolId,
+      Object.keys(sampleInput).length ? sampleInput : void 0
+    )
+  );
+  if (playReference) {
+    console.log(`deepline plays describe ${playReference} --json`);
+  }
+}
 function printToolGettersOnly(tool, requestedToolId) {
   const contract = toolContractJsonForDescribe(tool, requestedToolId);
   const getters = isRecord8(contract.getters) ? contract.getters : {};
@@ -20472,13 +21138,14 @@ function toolMetadataJsonForDescribe(tool, requestedToolId) {
   const extractedLists = extractionContractEntries(
     arrayField(toolExecutionResult, "extractedLists", "extracted_lists")
   );
-  const starterScript = extractedLists.length > 0 ? starterScriptJson(
+  const starterScript = !isPlayLikeTool(tool) && extractedLists.length > 0 ? starterScriptJson(
     seedToolListScript({
       toolId,
       payload: samplePayloadForInputFields(inputFields),
       rows: []
     })
   ) : null;
+  const observedOutputCommand = isPlayLikeTool(tool) ? playRunCommandForTool(tool, toolId) : `deepline tools execute ${toolId} --input '{...}' --json`;
   const {
     cost: _cost,
     deeplineCreditsPerPricingUnit: _deeplineCreditsPerPricingUnit,
@@ -20504,8 +21171,8 @@ function toolMetadataJsonForDescribe(tool, requestedToolId) {
       getterScope: "extractedValues/extractedLists .get() only works for declared Deepline getters listed in usageGuidance.toolExecutionResult.",
       rawToolResponse: "Use toolExecutionResult.toolResponse.raw for provider/tool-specific fields, fields in outputSchema that are not declared getters, and debugging.",
       invalidGetterHint: "If TypeScript says an extractedValues/extractedLists property does not exist, that field is not a declared Deepline getter.",
-      observeActualShape: `deepline tools execute ${toolId} --input '{...}' --json`,
-      observedOutput: `deepline tools execute ${toolId} --input '{...}' --json`,
+      observeActualShape: observedOutputCommand,
+      observedOutput: observedOutputCommand,
       forPlayGetterBugs: "Run a tiny play, inspect `deepline runs get <run-id> --full --json`, and export returned dataset handles with `deepline runs export`. Backing tables exist only for ctx.map(...).run(...) stages that actually executed.",
       executeOutputFields: "tools execute JSON may include output_preview for this direct probe only; play debugging uses run output and returned dataset handles."
     },
@@ -20661,10 +21328,10 @@ function normalizeOutputFormat(raw) {
 function resolveAtFilePath(rawPath) {
   const trimmed = rawPath.trim();
   const resolved = resolve13(trimmed);
-  if (existsSync9(resolved)) return resolved;
+  if (existsSync10(resolved)) return resolved;
   if (process.platform !== "win32" && trimmed.includes("\\")) {
     const normalized = resolve13(trimmed.replace(/\\/g, "/"));
-    if (existsSync9(normalized)) return normalized;
+    if (existsSync10(normalized)) return normalized;
   }
   return resolved;
 }
@@ -20675,7 +21342,7 @@ function readJsonArgument(raw, flagName) {
     throw new Error(`Invalid ${flagName} value: empty @file path.`);
   }
   try {
-    return readFileSync8(resolveAtFilePath(filePath), "utf8").replace(
+    return readFileSync9(resolveAtFilePath(filePath), "utf8").replace(
       /^\uFEFF/,
       ""
     );
@@ -20777,9 +21444,9 @@ function starterScriptJson(script) {
 function seedToolListScript(input2) {
   const stem = safeFileStem(input2.toolId);
   const fileName = `${stem}-workflow-seed-${Date.now()}.play.ts`;
-  const scriptDir = mkdtempSync(join11(tmpdir4(), "deepline-workflow-seed-"));
+  const scriptDir = mkdtempSync(join12(tmpdir4(), "deepline-workflow-seed-"));
   chmodSync(scriptDir, 448);
-  const scriptPath = join11(scriptDir, fileName);
+  const scriptPath = join12(scriptDir, fileName);
   const projectDir = `deepline/projects/${stem}-workflow`;
   const playName = `${stem}-workflow`;
   const sampleRows = input2.rows.length > 0 ? `${JSON.stringify(input2.rows.slice(0, 2)).replace(/\]$/, "")}, ...]` : "[]";
@@ -20815,7 +21482,7 @@ export default definePlay(${JSON.stringify(playName)}, async (ctx) => {
   };
 });
 `;
-  writeFileSync10(scriptPath, script, { encoding: "utf-8", mode: 384 });
+  writeFileSync11(scriptPath, script, { encoding: "utf-8", mode: 384 });
   return {
     path: scriptPath,
     sourceCode: script,
@@ -20916,9 +21583,19 @@ async function executeTool(args) {
   }
   if (isPlayLikeTool(metadata)) {
     if (argsWantJson(args)) {
-      printJsonError(new Error(playLikeToolExecuteErrorMessage(parsed.toolId)));
+      printJsonError(
+        new Error(
+          playLikeToolExecuteErrorMessage(
+            parsed.toolId,
+            metadata
+          )
+        )
+      );
     } else {
-      printPlayLikeToolExecuteError(parsed.toolId);
+      printPlayLikeToolExecuteError(
+        parsed.toolId,
+        metadata
+      );
     }
     return 2;
   }
@@ -21070,7 +21747,7 @@ async function executeTool(args) {
 
 // src/cli/commands/workflow.ts
 import { mkdir as mkdir5, readFile as readFile4, writeFile as writeFile5 } from "fs/promises";
-import { dirname as dirname10, join as join12, resolve as resolve14 } from "path";
+import { dirname as dirname11, join as join13, resolve as resolve14 } from "path";
 
 // src/cli/workflow-to-play.ts
 import { createHash as createHash4 } from "crypto";
@@ -21311,8 +21988,8 @@ async function transformOne(api, workflowId, outDir, publish) {
       revision.config,
       { workflowName: workflow.name, version: revision.version }
     );
-    const file = join12(resolve14(outDir), `${compiled.playName}.play.ts`);
-    await mkdir5(dirname10(file), { recursive: true });
+    const file = join13(resolve14(outDir), `${compiled.playName}.play.ts`);
+    await mkdir5(dirname11(file), { recursive: true });
     await writeFile5(file, compiled.sourceCode, "utf8");
     let published = false;
     if (publish) {
@@ -21559,8 +22236,8 @@ Notes:
 
 // src/cli/commands/update.ts
 import { spawn as spawn2 } from "child_process";
-import { existsSync as existsSync10 } from "fs";
-import { dirname as dirname11, join as join13, resolve as resolve15 } from "path";
+import { existsSync as existsSync11 } from "fs";
+import { dirname as dirname12, join as join14, resolve as resolve15 } from "path";
 function posixShellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
@@ -21581,17 +22258,17 @@ function buildSourceUpdateCommand(sourceRoot) {
 function findRepoBackedSdkRoot(startPath) {
   let current = resolve15(startPath);
   while (true) {
-    if (existsSync10(join13(current, "sdk", "package.json")) && existsSync10(join13(current, "sdk", "bin", "deepline-dev.ts"))) {
+    if (existsSync11(join14(current, "sdk", "package.json")) && existsSync11(join14(current, "sdk", "bin", "deepline-dev.ts"))) {
       return current;
     }
-    const parent = dirname11(current);
+    const parent = dirname12(current);
     if (parent === current) return null;
     current = parent;
   }
 }
 function resolveUpdatePlan() {
   const entrypoint = process.argv[1] ? resolve15(process.argv[1]) : "";
-  const sourceRoot = entrypoint ? findRepoBackedSdkRoot(dirname11(entrypoint)) : null;
+  const sourceRoot = entrypoint ? findRepoBackedSdkRoot(dirname12(entrypoint)) : null;
   if (sourceRoot) {
     return {
       kind: "source",
@@ -21758,6 +22435,23 @@ var install_commands_default = {
 
 // src/cli/install-commands.ts
 var INSTALL_COMMANDS = install_commands_default;
+var DEFAULT_V1_SKILL_NAMES = [
+  "build-tam",
+  "clay-to-deepline",
+  "deepline-analytics",
+  "deepline-feedback",
+  "deepline-gtm",
+  "deepline-quickstart",
+  "find-qualified-titles",
+  "linkedin-url-lookup",
+  "niche-signal-discovery",
+  "portfolio-prospecting",
+  "workflow-hello-world"
+];
+var DEFAULT_SDK_SKILL_NAMES = [
+  ...DEFAULT_V1_SKILL_NAMES,
+  "deepline-plays"
+];
 function normalizeBaseUrl2(baseUrl) {
   return baseUrl.replace(/\/$/, "");
 }
@@ -21788,10 +22482,7 @@ function buildSkillsAddArgs(baseUrl, skillName, options = {}) {
         return INSTALL_COMMANDS.skills.default_agents;
       }
       if (arg === "{skill_name}") {
-        return [
-          value,
-          ...extraSkillNames.flatMap((name) => ["--skill", name])
-        ];
+        return [value, ...extraSkillNames.flatMap((name) => ["--skill", name])];
       }
       return value;
     }
@@ -21835,8 +22526,8 @@ function commandCompatibilityHint(currentFamily, commandName, baseUrl) {
   if (currentFamily === "sdk") {
     lines.push(
       "",
-      "  To stay on the SDK CLI, install the SDK agent skill:",
-      `    ${skillsInstallCommand(baseUrl, "deepline-plays")}`,
+      "  To stay on the SDK CLI, refresh the Deepline agent skills:",
+      `    ${skillsInstallCommand(baseUrl, DEFAULT_SDK_SKILL_NAMES)}`,
       "  To use the legacy Python CLI instead:",
       `    ${legacyPythonInstallCommand(baseUrl)}`,
       "  `deepline update` updates this SDK CLI, but it will not switch CLI families."
@@ -21847,9 +22538,9 @@ function commandCompatibilityHint(currentFamily, commandName, baseUrl) {
   } else {
     lines.push(
       "",
-      "  To use SDK commands, install the SDK CLI and SDK agent skill:",
+      "  To use SDK commands, install the SDK CLI and refresh Deepline agent skills:",
       `    ${sdkNpmGlobalInstallCommand()}`,
-      `    ${skillsInstallCommand(baseUrl, "deepline-plays")}`,
+      `    ${skillsInstallCommand(baseUrl, DEFAULT_SDK_SKILL_NAMES)}`,
       "  `deepline update` updates this Python CLI and its skills, but it will not switch CLI families."
     );
     if (compatibility.python_alternative) {
@@ -21930,23 +22621,11 @@ async function maybeAutoUpdateAndRelaunch(response) {
 
 // src/cli/skills-sync.ts
 import { spawn as spawn4, spawnSync as spawnSync2 } from "child_process";
-import {
-  existsSync as existsSync11,
-  mkdirSync as mkdirSync6,
-  readdirSync as readdirSync3,
-  readFileSync as readFileSync9,
-  statSync as statSync4,
-  writeFileSync as writeFileSync11
-} from "fs";
-import { homedir as homedir7 } from "os";
-import { dirname as dirname12, join as join14 } from "path";
+import { existsSync as existsSync12, mkdirSync as mkdirSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync12 } from "fs";
+import { homedir as homedir8 } from "os";
+import { dirname as dirname13, join as join15 } from "path";
 var CHECK_TIMEOUT_MS2 = 3e3;
-var SDK_SKILL_NAME = "deepline-plays";
-var SDK_SKILL_NAMES = [
-  SDK_SKILL_NAME,
-  "deepline-plays-feedback",
-  "deepline-plays-quickstart"
-];
+var SDK_PLAY_SKILL_NAME = "deepline-plays";
 var attemptedSync = false;
 function shouldSkipSkillsSync() {
   const value = process.env.DEEPLINE_SKIP_SKILLS_SYNC?.trim().toLowerCase();
@@ -21958,20 +22637,20 @@ function activePluginSkillsDir() {
     return "";
   }
   const dir = process.env.DEEPLINE_PLUGIN_SKILLS_DIR?.trim() ?? "";
-  return dir && existsSync11(dir) ? dir : "";
+  return dir && existsSync12(dir) ? dir : "";
 }
 function readPluginSkillsVersion() {
   const dir = activePluginSkillsDir();
   if (!dir) return "";
   try {
-    return readFileSync9(join14(dir, ".version"), "utf-8").trim();
+    return readFileSync10(join15(dir, ".version"), "utf-8").trim();
   } catch {
     return "";
   }
 }
 function sdkSkillsVersionPath(baseUrl) {
-  const home = process.env.HOME?.trim() || homedir7();
-  return join14(
+  const home = process.env.HOME?.trim() || homedir8();
+  return join15(
     home,
     ".local",
     "deepline",
@@ -21984,55 +22663,46 @@ function readLocalSkillsVersion(baseUrl) {
   const pluginVersion = readPluginSkillsVersion();
   if (pluginVersion) return pluginVersion;
   const path = sdkSkillsVersionPath(baseUrl);
-  if (!existsSync11(path)) return "";
+  if (!existsSync12(path)) return "";
   try {
-    return readFileSync9(path, "utf-8").trim();
+    return readFileSync10(path, "utf-8").trim();
   } catch {
     return "";
   }
 }
 function writeLocalSkillsVersion(baseUrl, version) {
   const path = sdkSkillsVersionPath(baseUrl);
-  mkdirSync6(dirname12(path), { recursive: true });
-  writeFileSync11(path, `${version}
+  mkdirSync7(dirname13(path), { recursive: true });
+  writeFileSync12(path, `${version}
 `, "utf-8");
 }
-function installedSdkSkillHasStalePositionalExecuteExamples() {
-  const home = process.env.HOME?.trim() || homedir7();
-  const pluginSkillsDir = activePluginSkillsDir();
-  const roots = pluginSkillsDir ? [join14(pluginSkillsDir, SDK_SKILL_NAME)] : [
-    join14(home, ".claude", "skills", SDK_SKILL_NAME),
-    join14(home, ".agents", "skills", SDK_SKILL_NAME)
-  ];
-  const staleMarkers = [
-    "ctx.tools.execute(key",
-    "ctx.tools.execute('",
-    'ctx.tools.execute("',
-    "rowCtx.tools.execute('",
-    'rowCtx.tools.execute("'
-  ];
-  const scan = (dir) => {
-    for (const entry of readdirSync3(dir)) {
-      const path = join14(dir, entry);
-      const stat4 = statSync4(path);
-      if (stat4.isDirectory()) {
-        if (scan(path)) return true;
-        continue;
-      }
-      if (!entry.endsWith(".md")) continue;
-      const text = readFileSync9(path, "utf-8");
-      if (staleMarkers.some((marker) => text.includes(marker))) return true;
-    }
-    return false;
-  };
-  for (const root of roots) {
-    try {
-      if (existsSync11(root) && scan(root)) return true;
-    } catch {
-      continue;
-    }
+function sortedUniqueSkillNames(names) {
+  return [...new Set(names.map((name) => name.trim()).filter(Boolean))].sort(
+    (a, b) => a.localeCompare(b)
+  );
+}
+async function fetchV1SkillNames(baseUrl) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), CHECK_TIMEOUT_MS2);
+  try {
+    const response = await fetch(
+      new URL("/.well-known/skills/index.json", baseUrl),
+      { signal: controller.signal }
+    );
+    if (!response.ok) return [];
+    const data = await response.json().catch(() => null);
+    const names = (data?.skills ?? []).filter((skill) => skill.install_surface === "v1").map((skill) => skill.name).filter(
+      (name) => typeof name === "string" && name.length > 0
+    );
+    return sortedUniqueSkillNames(names);
+  } catch {
+    return [];
+  } finally {
+    clearTimeout(timeout);
   }
-  return false;
+}
+function buildSdkSkillNames(v1SkillNames) {
+  return sortedUniqueSkillNames([...v1SkillNames, SDK_PLAY_SKILL_NAME]);
 }
 async function fetchSkillsUpdate(baseUrl, localVersion) {
   const controller = new AbortController();
@@ -22062,11 +22732,13 @@ async function fetchSkillsUpdate(baseUrl, localVersion) {
     clearTimeout(timeout);
   }
 }
-function buildSkillsInstallArgs(baseUrl) {
-  return buildSkillsAddArgs(baseUrl, SDK_SKILL_NAMES);
+function buildSkillsInstallArgs(baseUrl, skillNames = DEFAULT_SDK_SKILL_NAMES) {
+  return buildSkillsAddArgs(baseUrl, sortedUniqueSkillNames(skillNames));
 }
-function buildBunxSkillsInstallArgs(baseUrl) {
-  return buildSkillsAddArgs(baseUrl, SDK_SKILL_NAMES, { firstArg: "--bun" });
+function buildBunxSkillsInstallArgs(baseUrl, skillNames) {
+  return buildSkillsAddArgs(baseUrl, sortedUniqueSkillNames(skillNames), {
+    firstArg: "--bun"
+  });
 }
 function hasCommand(command) {
   const result = spawnSync2(command, ["--version"], {
@@ -22078,15 +22750,15 @@ function hasCommand(command) {
 function shellQuote4(arg) {
   return `'${arg.replace(/'/g, `'\\''`)}'`;
 }
-function resolveSkillsInstallCommands(baseUrl) {
-  const npxArgs = buildSkillsInstallArgs(baseUrl);
+function resolveSkillsInstallCommands(baseUrl, skillNames = DEFAULT_SDK_SKILL_NAMES) {
+  const npxArgs = buildSkillsInstallArgs(baseUrl, skillNames);
   const npxInstall = {
     command: "npx",
     args: npxArgs,
     manualCommand: `npx ${npxArgs.map(shellQuote4).join(" ")}`
   };
   if (hasCommand("bunx")) {
-    const bunxArgs = buildBunxSkillsInstallArgs(baseUrl);
+    const bunxArgs = buildBunxSkillsInstallArgs(baseUrl, skillNames);
     return [
       {
         command: "bunx",
@@ -22129,9 +22801,9 @@ function runOneSkillsInstall(install) {
     });
   });
 }
-async function runSkillsInstall(baseUrl) {
+async function runSkillsInstall(baseUrl, skillNames) {
   const failures = [];
-  for (const install of resolveSkillsInstallCommands(baseUrl)) {
+  for (const install of resolveSkillsInstallCommands(baseUrl, skillNames)) {
     const result = await runOneSkillsInstall(install);
     if (result.ok) return true;
     failures.push(result);
@@ -22161,26 +22833,289 @@ async function syncSdkSkillsIfNeeded(baseUrl) {
   const usingPluginSkills = Boolean(activePluginSkillsDir());
   const localVersion = readLocalSkillsVersion(baseUrl);
   const update = await fetchSkillsUpdate(baseUrl, localVersion);
-  const hasStaleInstalledSkill = installedSdkSkillHasStalePositionalExecuteExamples();
   if (usingPluginSkills) {
     return;
   }
-  if (!update?.needsUpdate && !hasStaleInstalledSkill || !update?.remoteVersion) {
+  if (!update?.needsUpdate || !update.remoteVersion) {
     return;
   }
-  writeSdkSkillsStatusLine(
-    "SDK skills changed; syncing Deepline SDK skills..."
+  const remoteSkillNames = await fetchV1SkillNames(baseUrl);
+  const skillNames = buildSdkSkillNames(
+    remoteSkillNames.length > 0 ? remoteSkillNames : DEFAULT_SDK_SKILL_NAMES
   );
-  const installed = await runSkillsInstall(baseUrl);
+  if (skillNames.length === 0) return;
+  writeSdkSkillsStatusLine("Deepline skills changed; syncing agent skills...");
+  const installed = await runSkillsInstall(baseUrl, skillNames);
   if (!installed) return;
-  if (installedSdkSkillHasStalePositionalExecuteExamples()) {
-    process.stderr.write(
-      "SDK skills sync completed, but installed deepline-plays docs still contain stale positional ctx.tools.execute examples.\n"
-    );
-    return;
-  }
   writeLocalSkillsVersion(baseUrl, update.remoteVersion);
-  writeSdkSkillsStatusLine("SDK skills are up to date.");
+  writeSdkSkillsStatusLine("Deepline agent skills are up to date.");
+}
+
+// src/cli/failure-reporting.ts
+import { hostname as hostname2, platform as platform2, release } from "os";
+var FAILURE_REPORT_DISABLE_ENV = "DEEPLINE_DISABLE_FAILURE_REPORTING";
+var REPORT_FAILURE_TIMEOUT_MS = 1e4;
+var MAX_FAILURE_TEXT_CHARS = 4e3;
+var MAX_COMMAND_TOKENS = 3;
+var REPORTABLE_EXIT_CODES = /* @__PURE__ */ new Set([4, 5]);
+var EMAIL_RE = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
+var UNIX_PATH_RE = /(?:\/Users\/|\/home\/|\/var\/folders\/|\/tmp\/|\/sessions\/)[^"'\n\r`]+/g;
+var WINDOWS_PATH_RE = /[A-Za-z]:(?:\\{1,2})(?:Users|Temp|tmp)(?:\\{1,2})[^"'\n\r`]+/g;
+var ASSIGNMENT_SECRET_RE = /\b(access[_-]?token|api[_-]?key|apikey|auth(?:orization)?|bearer|password|secret|session)\b(\s*[:=]\s*)(?!Bearer\s+\[redacted-secret\])([^\s,;]+)/gi;
+var BEARER_SECRET_RE = /\b(bearer)\s+([A-Za-z0-9._-]+)/gi;
+var GENERIC_TOKEN_RE = /\b(?:dlp|sk|ghp|xox[baprs])[-_A-Za-z0-9]{8,}\b/g;
+var SECRET_OPTION_RE = /^--?(?:access[-_]?token|api[-_]?key|apikey|auth(?:orization)?|bearer|password|secret|session|token)$/i;
+function truthyEnv(name) {
+  return ["1", "true", "yes", "on"].includes(
+    String(process.env[name] ?? "").trim().toLowerCase()
+  );
+}
+function isFailureReportingDisabled() {
+  return truthyEnv(FAILURE_REPORT_DISABLE_ENV);
+}
+function redactFailureText(value, maxChars = MAX_FAILURE_TEXT_CHARS) {
+  const home = process.env.HOME?.trim();
+  let text = String(value ?? "");
+  if (!text) return "";
+  if (home && home !== "/") {
+    text = text.split(home).join("~");
+  }
+  return text.replace(EMAIL_RE, "[redacted-email]").replace(UNIX_PATH_RE, "[redacted-path]").replace(WINDOWS_PATH_RE, "[redacted-path]").replace(BEARER_SECRET_RE, "$1 [redacted-secret]").replace(ASSIGNMENT_SECRET_RE, "$1$2[redacted-secret]").replace(GENERIC_TOKEN_RE, "[redacted-secret]").slice(0, maxChars);
+}
+function sanitizeCommand(argv, prefix = "deepline") {
+  const tokens = [];
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
+    const value = String(arg ?? "").trim();
+    if (!value) continue;
+    if (value.startsWith("-")) {
+      if (!value.includes("=") && SECRET_OPTION_RE.test(value)) {
+        index += 1;
+      }
+      continue;
+    }
+    tokens.push(redactFailureText(value, 200));
+    if (tokens.length >= MAX_COMMAND_TOKENS) break;
+  }
+  return tokens.length > 0 ? [prefix, ...tokens].join(" ") : prefix;
+}
+function errorMessage3(error) {
+  if (error instanceof Error) return `${error.name}: ${error.message}`;
+  return String(error ?? "");
+}
+function errorStack(error) {
+  if (error instanceof Error && error.stack) {
+    return redactFailureText(error.stack);
+  }
+  return null;
+}
+function classifyNetworkFailure(error) {
+  const seen = /* @__PURE__ */ new Set();
+  let current = error;
+  while (current && !seen.has(current)) {
+    seen.add(current);
+    const record = typeof current === "object" && current !== null ? current : {};
+    const code = String(record.code ?? "").toLowerCase();
+    const name = current instanceof Error ? current.name.toLowerCase() : "";
+    const text = String(
+      current instanceof Error ? current.message : current
+    ).toLowerCase();
+    const combined = `${code} ${name} ${text}`;
+    if (combined.includes("aborterror") || combined.includes("timeout") || combined.includes("timed out") || combined.includes("etimedout")) {
+      return "network_timeout";
+    }
+    if (combined.includes("enotfound") || combined.includes("eai_again") || combined.includes("name or service not known") || combined.includes("temporary failure in name resolution")) {
+      return "network_dns_resolution_failed";
+    }
+    if (combined.includes("econnrefused") || combined.includes("connection refused")) {
+      return "network_connection_refused";
+    }
+    if (combined.includes("econnreset") || combined.includes("connection reset")) {
+      return "network_connection_reset";
+    }
+    if (combined.includes("incompleteread") || combined.includes("incomplete read")) {
+      return "network_incomplete_read";
+    }
+    if (combined.includes("remotedisconnected") || combined.includes("remote end closed connection") || combined.includes("other side closed") || combined.includes("socket hang up")) {
+      return "network_remote_disconnected";
+    }
+    if (combined.includes("ssl") || combined.includes("tls") || combined.includes("unexpected_eof_while_reading")) {
+      return "network_ssl_error";
+    }
+    current = record.cause ?? record.context;
+  }
+  return "network_error";
+}
+function isNetworkFailure(error) {
+  if (!(error instanceof Error)) return false;
+  if (error instanceof DeeplineError && error.statusCode) return false;
+  const code = classifyNetworkFailure(error);
+  return code !== "network_error" || /unable to connect|unable to stream/i.test(error.message);
+}
+function detectAgentRuntime3() {
+  if (process.env.CODEX_THREAD_ID?.trim()) return "codex";
+  const pluginMode = truthyEnv("DEEPLINE_PLUGIN_MODE");
+  const claudeRemote = truthyEnv("CLAUDE_CODE_REMOTE");
+  const projectDir = Boolean(process.env.CLAUDE_PROJECT_DIR?.trim());
+  const pluginRoot = Boolean(process.env.DEEPLINE_PLUGIN_ROOT?.trim());
+  const sessionHome = process.env.HOME?.trim().startsWith("/sessions/") ?? false;
+  if ((pluginMode || pluginRoot) && (claudeRemote || projectDir || sessionHome)) {
+    return "claude_cowork";
+  }
+  if (process.env.CLAUDECODE?.trim() === "1") return "claude_code";
+  if (process.env.CLINE_ACTIVE?.trim().toLowerCase() === "true") return "cline";
+  if (process.env.CURSOR_TRACE_ID?.trim() || process.env.CURSOR_AGENT?.trim()) {
+    return "cursor";
+  }
+  if (process.env.WINDSURF?.trim() || process.env.CASCADE?.trim()) {
+    return "windsurf";
+  }
+  return "unknown";
+}
+function buildEnvironmentContext() {
+  const context = {
+    os: platform2(),
+    os_release: release(),
+    platform: `${platform2()}-${release()}-${process.arch}`,
+    node_version: process.version,
+    runtime: "Node.js",
+    hostname: hostname2(),
+    agent_runtime: detectAgentRuntime3()
+  };
+  for (const key of ["CLAUDE_CODE_REMOTE", "DEEPLINE_PLUGIN_MODE"]) {
+    const normalized = process.env[key]?.trim();
+    if (normalized) context[key.toLowerCase()] = normalized;
+  }
+  if (process.env.CLAUDE_PROJECT_DIR?.trim()) {
+    context.claude_project_dir_present = "true";
+  }
+  if (process.env.DEEPLINE_PLUGIN_ROOT?.trim()) {
+    context.deepline_plugin_root_present = "true";
+  }
+  if (process.env.DEEPLINE_PLUGIN_SKILLS_DIR?.trim()) {
+    context.deepline_plugin_skills_dir_present = "true";
+  }
+  if (process.env.HOME?.trim().startsWith("/sessions/")) {
+    context.home_scope = "sessions";
+  }
+  return context;
+}
+function subcommandFromArgv(argv) {
+  return argv.find((arg) => arg && !arg.startsWith("-")) ?? null;
+}
+function commandTokens(argv) {
+  return argv.map((arg) => String(arg ?? "").trim()).filter((arg) => arg && !arg.startsWith("-"));
+}
+function isServerLoggedPlayRunStartFailure(input2) {
+  const [subcommand, command] = commandTokens(input2.argv);
+  return subcommand === "plays" && command === "run" && input2.error instanceof DeeplineError && typeof input2.error.statusCode === "number";
+}
+function shouldReport(input2) {
+  if (input2.error !== void 0) return true;
+  return input2.exitCode !== null && REPORTABLE_EXIT_CODES.has(input2.exitCode);
+}
+function failureCode(input2) {
+  if (input2.error !== void 0) {
+    if (isNetworkFailure(input2.error))
+      return classifyNetworkFailure(input2.error);
+    if (input2.error instanceof DeeplineError && input2.error.code) {
+      return input2.error.code;
+    }
+    if (input2.error instanceof Error && input2.error.name)
+      return input2.error.name;
+    return "CLI_FAILURE";
+  }
+  return input2.exitCode === 4 ? "network_error" : "command_exit";
+}
+function resolvedExitCode(input2) {
+  if (typeof input2.exitCode === "number" && Number.isFinite(input2.exitCode)) {
+    return Math.trunc(input2.exitCode);
+  }
+  if (input2.error === void 0) return null;
+  return isNetworkFailure(input2.error) ? 4 : 5;
+}
+function resolveSdkCliFailureExitCode(error) {
+  return isNetworkFailure(error) ? 4 : 1;
+}
+function resolvedFailureKind(input2) {
+  return input2.error === void 0 ? "command_exit" : "uncaught_exception";
+}
+function buildFailureReport(input2) {
+  const durationMs = Math.max(0, Date.now() - input2.startedAtMs);
+  const failureKind = resolvedFailureKind({
+    exitCode: input2.exitCode,
+    error: input2.error
+  });
+  const code = failureCode({ exitCode: input2.exitCode, error: input2.error });
+  const errorBody = input2.error === void 0 ? `SDK CLI command exited ${input2.exitCode ?? "unknown"}` : errorMessage3(input2.error);
+  return {
+    command: sanitizeCommand(input2.argv),
+    subcommand: subcommandFromArgv(input2.argv),
+    error_status: input2.exitCode,
+    error_body: redactFailureText(errorBody),
+    exit_code: input2.exitCode,
+    duration_ms: durationMs,
+    error_class: input2.error instanceof Error ? input2.error.name : null,
+    stack_trace: errorStack(input2.error),
+    failure_kind: failureKind,
+    failure_code: code,
+    failure_stage: input2.error === void 0 ? "command_exit" : "cli_main",
+    cli_version: SDK_VERSION,
+    context: {
+      base_url: redactFailureText(input2.baseUrl, 400),
+      command_summary: sanitizeCommand(input2.argv),
+      environment: buildEnvironmentContext(),
+      failure_kind: failureKind,
+      failure_code: code,
+      failure_stage: input2.error === void 0 ? "command_exit" : "cli_main",
+      duration_ms: durationMs,
+      ...input2.exitCode !== null ? { exit_code: input2.exitCode } : {}
+    }
+  };
+}
+async function maybeReportSdkCliFailure(input2) {
+  if (isFailureReportingDisabled()) return false;
+  if (isServerLoggedPlayRunStartFailure(input2)) return false;
+  const exitCode = resolvedExitCode(input2);
+  if (!shouldReport({ exitCode, error: input2.error })) return false;
+  const baseUrl = autoDetectBaseUrl().replace(/\/$/, "");
+  const apiKey = resolveApiKeyForBaseUrl(baseUrl);
+  if (!apiKey) return false;
+  const controller = new AbortController();
+  const timeout = setTimeout(
+    () => controller.abort(),
+    REPORT_FAILURE_TIMEOUT_MS
+  );
+  try {
+    await fetch(new URL("/api/v2/cli/report-failure", baseUrl), {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+        "Content-Type": "application/json",
+        "User-Agent": `deepline-ts-sdk/${SDK_VERSION}`,
+        "X-Deepline-Client-Family": "sdk",
+        "X-Deepline-CLI-Family": "sdk",
+        "X-Deepline-Agent-Runtime": detectAgentRuntime3(),
+        "X-Deepline-CLI-Version": SDK_VERSION,
+        "X-Deepline-SDK-Version": SDK_VERSION
+      },
+      body: JSON.stringify(
+        buildFailureReport({
+          argv: input2.argv,
+          startedAtMs: input2.startedAtMs,
+          error: input2.error,
+          exitCode,
+          baseUrl
+        })
+      ),
+      signal: controller.signal
+    });
+    return true;
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timeout);
+  }
 }
 
 // src/cli/index.ts
@@ -22224,8 +23159,8 @@ function topLevelCommandKnown(program, commandName) {
   );
 }
 async function runPlayRunnerHealthCheck() {
-  const dir = await mkdtemp2(join15(tmpdir5(), "deepline-health-play-"));
-  const file = join15(dir, "health-check.play.ts");
+  const dir = await mkdtemp2(join16(tmpdir5(), "deepline-health-play-"));
+  const file = join16(dir, "health-check.play.ts");
   try {
     await writeFile6(
       file,
@@ -22442,7 +23377,7 @@ Exit codes:
 `
   );
   program.hook("preAction", async (_thisCommand, actionCommand) => {
-    if (actionCommand.name() === "version" || actionCommand.name() === "update" || isLegacyNoopInvocation()) {
+    if (actionCommand.name() === "version" || actionCommand.name() === "update" || actionCommand.name() === "switch" || isLegacyNoopInvocation()) {
       return;
     }
     if (printStartupPhase) {
@@ -22490,6 +23425,7 @@ Exit codes:
   registerLegacyNoopCommands(program);
   registerUpdateCommand(program);
   registerQuickstartCommands(program);
+  registerSwitchCommands(program);
   program.command("preflight").description("Run compact health, auth, and Deepline billing checks.").option("--json", "Force JSON output.").addHelpText(
     "after",
     `
@@ -22609,6 +23545,11 @@ Examples:
       ms: Date.now() - mainStartedAt,
       ok: true
     });
+    await maybeReportSdkCliFailure({
+      argv: process.argv.slice(2),
+      startedAtMs: mainStartedAt,
+      exitCode: typeof process.exitCode === "number" ? process.exitCode : null
+    });
   } catch (error) {
     const commanderError = asCommanderError(error);
     recordCliTrace({
@@ -22644,7 +23585,14 @@ Examples:
     } else {
       console.error(`Error: ${String(error)}`);
     }
-    process.exitCode = 1;
+    const failureExitCode = resolveSdkCliFailureExitCode(error);
+    process.exitCode = failureExitCode;
+    await maybeReportSdkCliFailure({
+      argv: process.argv.slice(2),
+      startedAtMs: mainStartedAt,
+      exitCode: failureExitCode,
+      error
+    });
   }
   process.exitCode = process.exitCode ?? 0;
 }