deepline 0.1.111 → 0.1.113

package/dist/cli/index.js

@@ -183,7 +183,7 @@ configureProxyFromEnv();
 // src/cli/index.ts
 var import_promises7 = require("fs/promises");
 var import_node_path22 = require("path");
-var import_node_os15 = require("os");
+var import_node_os16 = require("os");
 var import_commander3 = require("commander");
 
 // src/config.ts
@@ -403,10 +403,10 @@ var SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: "0.1.111",
+  version: "0.1.113",
   apiContract: "2026-06-dataset-column-cell-stale-hard-cutover",
   supportPolicy: {
-    latest: "0.1.111",
+    latest: "0.1.113",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -20142,6 +20142,9 @@ function writeActiveFamily(family) {
 `, "utf-8");
   return path;
 }
+function forcePythonCliFamily() {
+  return writeActiveFamily("python");
+}
 function handleSwitch(action, options) {
   const normalized = (action || "status").trim().toLowerCase();
   if (normalized === "status") {
@@ -22354,6 +22357,7 @@ Notes:
 // src/cli/commands/update.ts
 var import_node_child_process2 = require("child_process");
 var import_node_fs16 = require("fs");
+var import_node_os13 = require("os");
 var import_node_path20 = require("path");
 function posixShellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
@@ -22372,6 +22376,55 @@ function buildSourceUpdateCommand(sourceRoot) {
   const cdCommand = process.platform === "win32" ? `cd /d ${quotedRoot}` : `cd ${quotedRoot}`;
   return `${cdCommand} && git fetch origin main --tags && git merge --ff-only origin/main`;
 }
+function sidecarStateDir(input2) {
+  const scope = input2.env.DEEPLINE_CONFIG_SCOPE?.trim();
+  if (!scope || scope.includes("/") || scope.includes("\\")) {
+    return null;
+  }
+  return (0, import_node_path20.join)(input2.homeDir, ".local", "deepline", scope, "sdk-cli");
+}
+function readOptionalText(path) {
+  try {
+    return (0, import_node_fs16.readFileSync)(path, "utf8").trim();
+  } catch {
+    return "";
+  }
+}
+function resolvePythonSidecarUpdatePlan(options) {
+  const stateDir = sidecarStateDir(options);
+  if (!stateDir) return null;
+  const relativeEntrypoint = (0, import_node_path20.relative)(
+    (0, import_node_path20.resolve)(stateDir),
+    (0, import_node_path20.resolve)(options.entrypoint)
+  );
+  if (!relativeEntrypoint || relativeEntrypoint.startsWith("..") || (0, import_node_path20.isAbsolute)(relativeEntrypoint)) {
+    return null;
+  }
+  const installMethod = readOptionalText((0, import_node_path20.join)(stateDir, ".install-method"));
+  if (installMethod !== "python-sidecar") return null;
+  const scope = options.env.DEEPLINE_CONFIG_SCOPE?.trim() || "";
+  const hostUrl = options.env.DEEPLINE_HOST_URL?.trim() || "";
+  const nodeBin = readOptionalText((0, import_node_path20.join)(stateDir, ".node-bin")) || process.execPath;
+  const sidecarPath = readOptionalText((0, import_node_path20.join)(stateDir, ".command-path")) || (0, import_node_path20.join)(
+    stateDir,
+    "bin",
+    process.platform === "win32" ? "deepline-sdk.cmd" : "deepline-sdk"
+  );
+  const packageSpec = options.packageSpec || "deepline@latest";
+  const npmCommand = "npm";
+  const manualCommand = `${npmCommand} install --prefix ${shellQuote3((0, import_node_path20.join)(stateDir, "versions", "<version>"))} --no-audit --no-fund ${shellQuote3(packageSpec)}`;
+  return {
+    kind: "python-sidecar",
+    stateDir,
+    sidecarPath,
+    nodeBin,
+    npmCommand,
+    scope,
+    hostUrl,
+    packageSpec,
+    manualCommand
+  };
+}
 function findRepoBackedSdkRoot(startPath) {
   let current = (0, import_node_path20.resolve)(startPath);
   while (true) {
@@ -22383,8 +22436,10 @@ function findRepoBackedSdkRoot(startPath) {
     current = parent;
   }
 }
-function resolveUpdatePlan() {
-  const entrypoint = process.argv[1] ? (0, import_node_path20.resolve)(process.argv[1]) : "";
+function resolveUpdatePlan(options = {}) {
+  const env = options.env ?? process.env;
+  const homeDir2 = options.homeDir ?? (0, import_node_os13.homedir)();
+  const entrypoint = options.entrypoint ?? (process.argv[1] ? (0, import_node_path20.resolve)(process.argv[1]) : "");
   const sourceRoot = entrypoint ? findRepoBackedSdkRoot((0, import_node_path20.dirname)(entrypoint)) : null;
   if (sourceRoot) {
     return {
@@ -22393,8 +22448,16 @@ function resolveUpdatePlan() {
       manualCommand: buildSourceUpdateCommand(sourceRoot)
     };
   }
+  const sidecarPlan = resolvePythonSidecarUpdatePlan({
+    entrypoint,
+    env,
+    homeDir: homeDir2,
+    packageSpec: options.packageSpec
+  });
+  if (sidecarPlan) return sidecarPlan;
   const command = "npm";
-  const args = ["install", "-g", "deepline@latest"];
+  const packageSpec = options.packageSpec || "deepline@latest";
+  const args = ["install", "-g", packageSpec];
   return {
     kind: "npm-global",
     command,
@@ -22402,12 +22465,40 @@ function resolveUpdatePlan() {
     manualCommand: `${command} ${args.map(shellQuote3).join(" ")}`
   };
 }
-function runCommand(command, args) {
+function safeVersionSegment(value) {
+  const normalized = value.trim();
+  return /^[0-9A-Za-z._-]+$/.test(normalized) ? normalized : "";
+}
+function entryPathInVersionDir(versionDir) {
+  return (0, import_node_path20.join)(
+    versionDir,
+    "node_modules",
+    "deepline",
+    "dist",
+    "cli",
+    "index.mjs"
+  );
+}
+function installedPackageVersion(versionDir) {
+  const packageJsonPath = (0, import_node_path20.join)(
+    versionDir,
+    "node_modules",
+    "deepline",
+    "package.json"
+  );
+  try {
+    const parsed = JSON.parse((0, import_node_fs16.readFileSync)(packageJsonPath, "utf8"));
+    return typeof parsed.version === "string" ? safeVersionSegment(parsed.version) : "";
+  } catch {
+    return "";
+  }
+}
+function runCommand(command, args, env = process.env) {
   return new Promise((resolveExitCode) => {
     const child = (0, import_node_child_process2.spawn)(command, args, {
       stdio: "inherit",
       shell: process.platform === "win32",
-      env: process.env
+      env
     });
     child.on("error", (error) => {
       process.stderr.write(`Failed to start ${command}: ${error.message}
@@ -22419,11 +22510,137 @@ function runCommand(command, args) {
     });
   });
 }
-async function runNpmGlobalUpdatePlan(plan) {
-  if (plan.kind !== "npm-global") {
+function writeSidecarLauncher(input2) {
+  (0, import_node_fs16.mkdirSync)((0, import_node_path20.dirname)(input2.path), { recursive: true });
+  if (process.platform === "win32") {
+    (0, import_node_fs16.writeFileSync)(
+      input2.path,
+      [
+        `@set DEEPLINE_HOST_URL=${input2.hostUrl.replace(/\r?\n/g, "")}`,
+        `@set DEEPLINE_CONFIG_SCOPE=${input2.scope.replace(/\r?\n/g, "")}`,
+        `@"${input2.nodeBin}" "${input2.entryPath}" %*`,
+        ""
+      ].join("\r\n"),
+      "utf8"
+    );
+    return;
+  }
+  (0, import_node_fs16.writeFileSync)(
+    input2.path,
+    [
+      "#!/usr/bin/env sh",
+      `export DEEPLINE_HOST_URL=${shellQuote3(input2.hostUrl)}`,
+      `export DEEPLINE_CONFIG_SCOPE=${shellQuote3(input2.scope)}`,
+      `exec ${shellQuote3(input2.nodeBin)} ${shellQuote3(input2.entryPath)} "$@"`,
+      ""
+    ].join("\n"),
+    { encoding: "utf8", mode: 493 }
+  );
+}
+async function runPythonSidecarUpdatePlan(plan) {
+  const versionsDir = (0, import_node_path20.join)(plan.stateDir, "versions");
+  const tempDir = (0, import_node_path20.join)(
+    versionsDir,
+    `.tmp-sdk-update-${process.pid}-${Date.now()}`
+  );
+  (0, import_node_fs16.rmSync)(tempDir, { recursive: true, force: true });
+  (0, import_node_fs16.mkdirSync)(tempDir, { recursive: true });
+  (0, import_node_fs16.writeFileSync)((0, import_node_path20.join)(tempDir, "package.json"), '{"private":true}\n', "utf8");
+  const env = {
+    ...process.env,
+    PATH: `${(0, import_node_path20.dirname)(plan.nodeBin)}${process.platform === "win32" ? ";" : ":"}${process.env.PATH ?? ""}`
+  };
+  const installExitCode = await runCommand(
+    plan.npmCommand,
+    [
+      "install",
+      "--prefix",
+      tempDir,
+      "--no-audit",
+      "--no-fund",
+      plan.packageSpec
+    ],
+    env
+  );
+  if (installExitCode !== 0) {
+    (0, import_node_fs16.rmSync)(tempDir, { recursive: true, force: true });
+    return installExitCode;
+  }
+  const installedVersion = installedPackageVersion(tempDir);
+  if (!installedVersion) {
+    process.stderr.write(
+      "Updated Deepline SDK package did not report a version.\n"
+    );
+    (0, import_node_fs16.rmSync)(tempDir, { recursive: true, force: true });
+    return 1;
+  }
+  const finalDir = (0, import_node_path20.join)(versionsDir, installedVersion);
+  const finalEntryPath = entryPathInVersionDir(finalDir);
+  if ((0, import_node_fs16.existsSync)(finalEntryPath)) {
+    (0, import_node_fs16.rmSync)(tempDir, { recursive: true, force: true });
+  } else {
+    (0, import_node_fs16.rmSync)(finalDir, { recursive: true, force: true });
+    try {
+      (0, import_node_fs16.renameSync)(tempDir, finalDir);
+    } catch (error) {
+      (0, import_node_fs16.rmSync)(tempDir, { recursive: true, force: true });
+      process.stderr.write(
+        `Failed to publish Deepline SDK sidecar update: ${error.message}
+`
+      );
+      return 1;
+    }
+  }
+  if (!(0, import_node_fs16.existsSync)(finalEntryPath)) {
+    process.stderr.write(
+      `Updated Deepline SDK CLI entrypoint missing: ${finalEntryPath}
+`
+    );
     return 1;
   }
-  return runCommand(plan.command, plan.args);
+  writeSidecarLauncher({
+    path: plan.sidecarPath,
+    hostUrl: plan.hostUrl,
+    scope: plan.scope,
+    nodeBin: plan.nodeBin,
+    entryPath: finalEntryPath
+  });
+  (0, import_node_fs16.writeFileSync)(
+    (0, import_node_path20.join)(plan.stateDir, ".version"),
+    `${installedVersion}
+`,
+    "utf8"
+  );
+  (0, import_node_fs16.writeFileSync)(
+    (0, import_node_path20.join)(plan.stateDir, ".install-method"),
+    "python-sidecar\n",
+    "utf8"
+  );
+  (0, import_node_fs16.writeFileSync)(
+    (0, import_node_path20.join)(plan.stateDir, ".command-path"),
+    `${plan.sidecarPath}
+`,
+    "utf8"
+  );
+  (0, import_node_fs16.writeFileSync)((0, import_node_path20.join)(plan.stateDir, ".runner"), "node\n", "utf8");
+  (0, import_node_fs16.writeFileSync)((0, import_node_path20.join)(plan.stateDir, ".node-bin"), `${plan.nodeBin}
+`, "utf8");
+  (0, import_node_fs16.writeFileSync)(
+    (0, import_node_path20.join)(plan.stateDir, ".entry-path"),
+    `${finalEntryPath}
+`,
+    "utf8"
+  );
+  return 0;
+}
+async function runUpdatePlan(plan) {
+  if (plan.kind === "npm-global") {
+    return runCommand(plan.command, plan.args);
+  }
+  if (plan.kind === "python-sidecar") {
+    return runPythonSidecarUpdatePlan(plan);
+  }
+  return 1;
 }
 async function handleUpdate(options) {
   const plan = resolveUpdatePlan();
@@ -22434,6 +22651,9 @@ async function handleUpdate(options) {
         lines: plan.kind === "source" ? [
           "This Deepline CLI is running from SDK source, so it cannot safely update itself like an npm global.",
           `Update the backing checkout with: ${plan.manualCommand}`
+        ] : plan.kind === "python-sidecar" ? [
+          "This Deepline CLI is running from the Python-managed SDK sidecar.",
+          "Updating will refresh that sidecar, not a global npm binary."
         ] : [`Updating Deepline SDK/CLI with: ${plan.manualCommand}`]
       }
     ]
@@ -22463,7 +22683,7 @@ async function handleUpdate(options) {
     `Updating Deepline SDK/CLI with: ${plan.manualCommand}
 `
   );
-  return runCommand(plan.command, plan.args);
+  return runUpdatePlan(plan);
 }
 function registerUpdateCommand(program) {
   program.command("update").description("Update the Deepline SDK/CLI.").addHelpText(
@@ -22471,6 +22691,8 @@ function registerUpdateCommand(program) {
     `
 Notes:
   For the published npm CLI, this runs npm install -g deepline@latest.
+  For Python-managed SDK sidecars, this refreshes the sidecar that launched
+  the current SDK CLI instead of changing a global npm binary.
   For repo-backed SDK wrappers such as cli-env sdk-prod or sdk-worktree, this
   prints the exact git command to update the checkout that provides the CLI.
 
@@ -22684,10 +22906,13 @@ function isCi() {
 function shouldSkipSelfUpdate() {
   return envTruthy("DEEPLINE_SKIP_SELF_UPDATE") || envTruthy("DEEPLINE_NO_AUTO_UPDATE") || envTruthy("DEEPLINE_SKIP_SDK_AUTO_UPDATE") || envTruthy("DEEPLINE_DISABLE_AUTO_UPDATE") || isCi();
 }
-function relaunchCurrentCommand() {
+function relaunchCurrentCommand(plan) {
   return new Promise((resolve16) => {
-    const child = (0, import_node_child_process3.spawn)(process.execPath, process.argv.slice(1), {
+    const command = plan.kind === "python-sidecar" ? plan.sidecarPath : process.execPath;
+    const args = plan.kind === "python-sidecar" ? process.argv.slice(2) : process.argv.slice(1);
+    const child = (0, import_node_child_process3.spawn)(command, args, {
       stdio: "inherit",
+      shell: process.platform === "win32",
       env: {
         ...process.env,
         DEEPLINE_NO_AUTO_UPDATE: "1"
@@ -22708,16 +22933,17 @@ async function maybeAutoUpdateAndRelaunch(response) {
   if (!response || !autoUpdate?.should_auto_update || shouldSkipSelfUpdate()) {
     return false;
   }
-  const plan = resolveUpdatePlan();
-  if (plan.kind !== "npm-global") {
+  const packageSpec = response.latest ? `deepline@${response.latest}` : void 0;
+  const plan = resolveUpdatePlan({ packageSpec });
+  if (plan.kind === "source") {
     return false;
   }
-  const label = autoUpdate.required ? "requires an update" : "is more than the supported auto-update lag behind";
+  const label = autoUpdate.reason === "rollback_forced" ? "has a server rollback pending and needs the latest rollback-aware CLI" : autoUpdate.required ? "requires an update" : "is more than the supported auto-update lag behind";
   process.stderr.write(
     `Deepline SDK/CLI ${label}; running ${plan.manualCommand}
 `
   );
-  const updateExitCode = await runNpmGlobalUpdatePlan(plan);
+  const updateExitCode = await runUpdatePlan(plan);
   if (updateExitCode !== 0) {
     if (autoUpdate.required) {
       throw new Error(
@@ -22731,7 +22957,7 @@ async function maybeAutoUpdateAndRelaunch(response) {
     return false;
   }
   process.stderr.write("Deepline SDK/CLI updated; rerunning command.\n");
-  const exitCode = await relaunchCurrentCommand();
+  const exitCode = await relaunchCurrentCommand(plan);
   process.exit(exitCode);
   return true;
 }
@@ -22739,7 +22965,7 @@ async function maybeAutoUpdateAndRelaunch(response) {
 // src/cli/skills-sync.ts
 var import_node_child_process4 = require("child_process");
 var import_node_fs17 = require("fs");
-var import_node_os13 = require("os");
+var import_node_os14 = require("os");
 var import_node_path21 = require("path");
 var CHECK_TIMEOUT_MS2 = 3e3;
 var SDK_PLAY_SKILL_NAME = "deepline-plays";
@@ -22766,7 +22992,7 @@ function readPluginSkillsVersion() {
   }
 }
 function sdkSkillsVersionPath(baseUrl) {
-  const home = process.env.HOME?.trim() || (0, import_node_os13.homedir)();
+  const home = process.env.HOME?.trim() || (0, import_node_os14.homedir)();
   return (0, import_node_path21.join)(
     home,
     ".local",
@@ -22969,7 +23195,7 @@ async function syncSdkSkillsIfNeeded(baseUrl) {
 }
 
 // src/cli/failure-reporting.ts
-var import_node_os14 = require("os");
+var import_node_os15 = require("os");
 var FAILURE_REPORT_DISABLE_ENV = "DEEPLINE_DISABLE_FAILURE_REPORTING";
 var REPORT_FAILURE_TIMEOUT_MS = 1e4;
 var MAX_FAILURE_TEXT_CHARS = 4e3;
@@ -23091,12 +23317,12 @@ function detectAgentRuntime3() {
 }
 function buildEnvironmentContext() {
   const context = {
-    os: (0, import_node_os14.platform)(),
-    os_release: (0, import_node_os14.release)(),
-    platform: `${(0, import_node_os14.platform)()}-${(0, import_node_os14.release)()}-${process.arch}`,
+    os: (0, import_node_os15.platform)(),
+    os_release: (0, import_node_os15.release)(),
+    platform: `${(0, import_node_os15.platform)()}-${(0, import_node_os15.release)()}-${process.arch}`,
     node_version: process.version,
     runtime: "Node.js",
-    hostname: (0, import_node_os14.hostname)(),
+    hostname: (0, import_node_os15.hostname)(),
     agent_runtime: detectAgentRuntime3()
   };
   for (const key of ["CLAUDE_CODE_REMOTE", "DEEPLINE_PLUGIN_MODE"]) {
@@ -23276,7 +23502,7 @@ function topLevelCommandKnown(program, commandName) {
   );
 }
 async function runPlayRunnerHealthCheck() {
-  const dir = await (0, import_promises7.mkdtemp)((0, import_node_path22.join)((0, import_node_os15.tmpdir)(), "deepline-health-play-"));
+  const dir = await (0, import_promises7.mkdtemp)((0, import_node_path22.join)((0, import_node_os16.tmpdir)(), "deepline-health-play-"));
   const file = (0, import_node_path22.join)(dir, "health-check.play.ts");
   try {
     await (0, import_promises7.writeFile)(
@@ -23515,6 +23741,18 @@ Exit codes:
     if (relaunched) {
       return;
     }
+    if (compatibility.response?.cli_family?.action === "force_python") {
+      forcePythonCliFamily();
+      process.stderr.write(
+        "Deepline SDK CLI rollback is active; switched installer-managed `deepline` back to the Python CLI. Re-run your command.\n"
+      );
+      const error = new Error(
+        "SDK CLI rollback is active"
+      );
+      error.code = "deepline.sdk_cli_rollback";
+      error.exitCode = 7;
+      throw error;
+    }
     enforceSdkCompatibilityResponse(compatibility.response);
     if (printStartupPhase) {
       progress?.phase("checking sdk skills");

package/dist/cli/index.mjs

@@ -380,10 +380,10 @@ var SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: "0.1.111",
+  version: "0.1.113",
   apiContract: "2026-06-dataset-column-cell-stale-hard-cutover",
   supportPolicy: {
-    latest: "0.1.111",
+    latest: "0.1.113",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -20167,6 +20167,9 @@ function writeActiveFamily(family) {
 `, "utf-8");
   return path;
 }
+function forcePythonCliFamily() {
+  return writeActiveFamily("python");
+}
 function handleSwitch(action, options) {
   const normalized = (action || "status").trim().toLowerCase();
   if (normalized === "status") {
@@ -22384,8 +22387,16 @@ Notes:
 
 // src/cli/commands/update.ts
 import { spawn as spawn2 } from "child_process";
-import { existsSync as existsSync12 } from "fs";
-import { dirname as dirname13, join as join15, resolve as resolve15 } from "path";
+import {
+  existsSync as existsSync12,
+  mkdirSync as mkdirSync8,
+  readFileSync as readFileSync11,
+  renameSync,
+  rmSync as rmSync3,
+  writeFileSync as writeFileSync13
+} from "fs";
+import { homedir as homedir9 } from "os";
+import { dirname as dirname13, isAbsolute as isAbsolute4, join as join15, relative as relative4, resolve as resolve15 } from "path";
 function posixShellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
@@ -22403,6 +22414,55 @@ function buildSourceUpdateCommand(sourceRoot) {
   const cdCommand = process.platform === "win32" ? `cd /d ${quotedRoot}` : `cd ${quotedRoot}`;
   return `${cdCommand} && git fetch origin main --tags && git merge --ff-only origin/main`;
 }
+function sidecarStateDir(input2) {
+  const scope = input2.env.DEEPLINE_CONFIG_SCOPE?.trim();
+  if (!scope || scope.includes("/") || scope.includes("\\")) {
+    return null;
+  }
+  return join15(input2.homeDir, ".local", "deepline", scope, "sdk-cli");
+}
+function readOptionalText(path) {
+  try {
+    return readFileSync11(path, "utf8").trim();
+  } catch {
+    return "";
+  }
+}
+function resolvePythonSidecarUpdatePlan(options) {
+  const stateDir = sidecarStateDir(options);
+  if (!stateDir) return null;
+  const relativeEntrypoint = relative4(
+    resolve15(stateDir),
+    resolve15(options.entrypoint)
+  );
+  if (!relativeEntrypoint || relativeEntrypoint.startsWith("..") || isAbsolute4(relativeEntrypoint)) {
+    return null;
+  }
+  const installMethod = readOptionalText(join15(stateDir, ".install-method"));
+  if (installMethod !== "python-sidecar") return null;
+  const scope = options.env.DEEPLINE_CONFIG_SCOPE?.trim() || "";
+  const hostUrl = options.env.DEEPLINE_HOST_URL?.trim() || "";
+  const nodeBin = readOptionalText(join15(stateDir, ".node-bin")) || process.execPath;
+  const sidecarPath = readOptionalText(join15(stateDir, ".command-path")) || join15(
+    stateDir,
+    "bin",
+    process.platform === "win32" ? "deepline-sdk.cmd" : "deepline-sdk"
+  );
+  const packageSpec = options.packageSpec || "deepline@latest";
+  const npmCommand = "npm";
+  const manualCommand = `${npmCommand} install --prefix ${shellQuote3(join15(stateDir, "versions", "<version>"))} --no-audit --no-fund ${shellQuote3(packageSpec)}`;
+  return {
+    kind: "python-sidecar",
+    stateDir,
+    sidecarPath,
+    nodeBin,
+    npmCommand,
+    scope,
+    hostUrl,
+    packageSpec,
+    manualCommand
+  };
+}
 function findRepoBackedSdkRoot(startPath) {
   let current = resolve15(startPath);
   while (true) {
@@ -22414,8 +22474,10 @@ function findRepoBackedSdkRoot(startPath) {
     current = parent;
   }
 }
-function resolveUpdatePlan() {
-  const entrypoint = process.argv[1] ? resolve15(process.argv[1]) : "";
+function resolveUpdatePlan(options = {}) {
+  const env = options.env ?? process.env;
+  const homeDir2 = options.homeDir ?? homedir9();
+  const entrypoint = options.entrypoint ?? (process.argv[1] ? resolve15(process.argv[1]) : "");
   const sourceRoot = entrypoint ? findRepoBackedSdkRoot(dirname13(entrypoint)) : null;
   if (sourceRoot) {
     return {
@@ -22424,8 +22486,16 @@ function resolveUpdatePlan() {
       manualCommand: buildSourceUpdateCommand(sourceRoot)
     };
   }
+  const sidecarPlan = resolvePythonSidecarUpdatePlan({
+    entrypoint,
+    env,
+    homeDir: homeDir2,
+    packageSpec: options.packageSpec
+  });
+  if (sidecarPlan) return sidecarPlan;
   const command = "npm";
-  const args = ["install", "-g", "deepline@latest"];
+  const packageSpec = options.packageSpec || "deepline@latest";
+  const args = ["install", "-g", packageSpec];
   return {
     kind: "npm-global",
     command,
@@ -22433,12 +22503,40 @@ function resolveUpdatePlan() {
     manualCommand: `${command} ${args.map(shellQuote3).join(" ")}`
   };
 }
-function runCommand(command, args) {
+function safeVersionSegment(value) {
+  const normalized = value.trim();
+  return /^[0-9A-Za-z._-]+$/.test(normalized) ? normalized : "";
+}
+function entryPathInVersionDir(versionDir) {
+  return join15(
+    versionDir,
+    "node_modules",
+    "deepline",
+    "dist",
+    "cli",
+    "index.mjs"
+  );
+}
+function installedPackageVersion(versionDir) {
+  const packageJsonPath = join15(
+    versionDir,
+    "node_modules",
+    "deepline",
+    "package.json"
+  );
+  try {
+    const parsed = JSON.parse(readFileSync11(packageJsonPath, "utf8"));
+    return typeof parsed.version === "string" ? safeVersionSegment(parsed.version) : "";
+  } catch {
+    return "";
+  }
+}
+function runCommand(command, args, env = process.env) {
   return new Promise((resolveExitCode) => {
     const child = spawn2(command, args, {
       stdio: "inherit",
       shell: process.platform === "win32",
-      env: process.env
+      env
     });
     child.on("error", (error) => {
       process.stderr.write(`Failed to start ${command}: ${error.message}
@@ -22450,11 +22548,137 @@ function runCommand(command, args) {
     });
   });
 }
-async function runNpmGlobalUpdatePlan(plan) {
-  if (plan.kind !== "npm-global") {
+function writeSidecarLauncher(input2) {
+  mkdirSync8(dirname13(input2.path), { recursive: true });
+  if (process.platform === "win32") {
+    writeFileSync13(
+      input2.path,
+      [
+        `@set DEEPLINE_HOST_URL=${input2.hostUrl.replace(/\r?\n/g, "")}`,
+        `@set DEEPLINE_CONFIG_SCOPE=${input2.scope.replace(/\r?\n/g, "")}`,
+        `@"${input2.nodeBin}" "${input2.entryPath}" %*`,
+        ""
+      ].join("\r\n"),
+      "utf8"
+    );
+    return;
+  }
+  writeFileSync13(
+    input2.path,
+    [
+      "#!/usr/bin/env sh",
+      `export DEEPLINE_HOST_URL=${shellQuote3(input2.hostUrl)}`,
+      `export DEEPLINE_CONFIG_SCOPE=${shellQuote3(input2.scope)}`,
+      `exec ${shellQuote3(input2.nodeBin)} ${shellQuote3(input2.entryPath)} "$@"`,
+      ""
+    ].join("\n"),
+    { encoding: "utf8", mode: 493 }
+  );
+}
+async function runPythonSidecarUpdatePlan(plan) {
+  const versionsDir = join15(plan.stateDir, "versions");
+  const tempDir = join15(
+    versionsDir,
+    `.tmp-sdk-update-${process.pid}-${Date.now()}`
+  );
+  rmSync3(tempDir, { recursive: true, force: true });
+  mkdirSync8(tempDir, { recursive: true });
+  writeFileSync13(join15(tempDir, "package.json"), '{"private":true}\n', "utf8");
+  const env = {
+    ...process.env,
+    PATH: `${dirname13(plan.nodeBin)}${process.platform === "win32" ? ";" : ":"}${process.env.PATH ?? ""}`
+  };
+  const installExitCode = await runCommand(
+    plan.npmCommand,
+    [
+      "install",
+      "--prefix",
+      tempDir,
+      "--no-audit",
+      "--no-fund",
+      plan.packageSpec
+    ],
+    env
+  );
+  if (installExitCode !== 0) {
+    rmSync3(tempDir, { recursive: true, force: true });
+    return installExitCode;
+  }
+  const installedVersion = installedPackageVersion(tempDir);
+  if (!installedVersion) {
+    process.stderr.write(
+      "Updated Deepline SDK package did not report a version.\n"
+    );
+    rmSync3(tempDir, { recursive: true, force: true });
+    return 1;
+  }
+  const finalDir = join15(versionsDir, installedVersion);
+  const finalEntryPath = entryPathInVersionDir(finalDir);
+  if (existsSync12(finalEntryPath)) {
+    rmSync3(tempDir, { recursive: true, force: true });
+  } else {
+    rmSync3(finalDir, { recursive: true, force: true });
+    try {
+      renameSync(tempDir, finalDir);
+    } catch (error) {
+      rmSync3(tempDir, { recursive: true, force: true });
+      process.stderr.write(
+        `Failed to publish Deepline SDK sidecar update: ${error.message}
+`
+      );
+      return 1;
+    }
+  }
+  if (!existsSync12(finalEntryPath)) {
+    process.stderr.write(
+      `Updated Deepline SDK CLI entrypoint missing: ${finalEntryPath}
+`
+    );
     return 1;
   }
-  return runCommand(plan.command, plan.args);
+  writeSidecarLauncher({
+    path: plan.sidecarPath,
+    hostUrl: plan.hostUrl,
+    scope: plan.scope,
+    nodeBin: plan.nodeBin,
+    entryPath: finalEntryPath
+  });
+  writeFileSync13(
+    join15(plan.stateDir, ".version"),
+    `${installedVersion}
+`,
+    "utf8"
+  );
+  writeFileSync13(
+    join15(plan.stateDir, ".install-method"),
+    "python-sidecar\n",
+    "utf8"
+  );
+  writeFileSync13(
+    join15(plan.stateDir, ".command-path"),
+    `${plan.sidecarPath}
+`,
+    "utf8"
+  );
+  writeFileSync13(join15(plan.stateDir, ".runner"), "node\n", "utf8");
+  writeFileSync13(join15(plan.stateDir, ".node-bin"), `${plan.nodeBin}
+`, "utf8");
+  writeFileSync13(
+    join15(plan.stateDir, ".entry-path"),
+    `${finalEntryPath}
+`,
+    "utf8"
+  );
+  return 0;
+}
+async function runUpdatePlan(plan) {
+  if (plan.kind === "npm-global") {
+    return runCommand(plan.command, plan.args);
+  }
+  if (plan.kind === "python-sidecar") {
+    return runPythonSidecarUpdatePlan(plan);
+  }
+  return 1;
 }
 async function handleUpdate(options) {
   const plan = resolveUpdatePlan();
@@ -22465,6 +22689,9 @@ async function handleUpdate(options) {
         lines: plan.kind === "source" ? [
           "This Deepline CLI is running from SDK source, so it cannot safely update itself like an npm global.",
           `Update the backing checkout with: ${plan.manualCommand}`
+        ] : plan.kind === "python-sidecar" ? [
+          "This Deepline CLI is running from the Python-managed SDK sidecar.",
+          "Updating will refresh that sidecar, not a global npm binary."
         ] : [`Updating Deepline SDK/CLI with: ${plan.manualCommand}`]
       }
     ]
@@ -22494,7 +22721,7 @@ async function handleUpdate(options) {
     `Updating Deepline SDK/CLI with: ${plan.manualCommand}
 `
   );
-  return runCommand(plan.command, plan.args);
+  return runUpdatePlan(plan);
 }
 function registerUpdateCommand(program) {
   program.command("update").description("Update the Deepline SDK/CLI.").addHelpText(
@@ -22502,6 +22729,8 @@ function registerUpdateCommand(program) {
     `
 Notes:
   For the published npm CLI, this runs npm install -g deepline@latest.
+  For Python-managed SDK sidecars, this refreshes the sidecar that launched
+  the current SDK CLI instead of changing a global npm binary.
   For repo-backed SDK wrappers such as cli-env sdk-prod or sdk-worktree, this
   prints the exact git command to update the checkout that provides the CLI.
 
@@ -22715,10 +22944,13 @@ function isCi() {
 function shouldSkipSelfUpdate() {
   return envTruthy("DEEPLINE_SKIP_SELF_UPDATE") || envTruthy("DEEPLINE_NO_AUTO_UPDATE") || envTruthy("DEEPLINE_SKIP_SDK_AUTO_UPDATE") || envTruthy("DEEPLINE_DISABLE_AUTO_UPDATE") || isCi();
 }
-function relaunchCurrentCommand() {
+function relaunchCurrentCommand(plan) {
   return new Promise((resolve16) => {
-    const child = spawn3(process.execPath, process.argv.slice(1), {
+    const command = plan.kind === "python-sidecar" ? plan.sidecarPath : process.execPath;
+    const args = plan.kind === "python-sidecar" ? process.argv.slice(2) : process.argv.slice(1);
+    const child = spawn3(command, args, {
       stdio: "inherit",
+      shell: process.platform === "win32",
       env: {
         ...process.env,
         DEEPLINE_NO_AUTO_UPDATE: "1"
@@ -22739,16 +22971,17 @@ async function maybeAutoUpdateAndRelaunch(response) {
   if (!response || !autoUpdate?.should_auto_update || shouldSkipSelfUpdate()) {
     return false;
   }
-  const plan = resolveUpdatePlan();
-  if (plan.kind !== "npm-global") {
+  const packageSpec = response.latest ? `deepline@${response.latest}` : void 0;
+  const plan = resolveUpdatePlan({ packageSpec });
+  if (plan.kind === "source") {
     return false;
   }
-  const label = autoUpdate.required ? "requires an update" : "is more than the supported auto-update lag behind";
+  const label = autoUpdate.reason === "rollback_forced" ? "has a server rollback pending and needs the latest rollback-aware CLI" : autoUpdate.required ? "requires an update" : "is more than the supported auto-update lag behind";
   process.stderr.write(
     `Deepline SDK/CLI ${label}; running ${plan.manualCommand}
 `
   );
-  const updateExitCode = await runNpmGlobalUpdatePlan(plan);
+  const updateExitCode = await runUpdatePlan(plan);
   if (updateExitCode !== 0) {
     if (autoUpdate.required) {
       throw new Error(
@@ -22762,15 +22995,15 @@ async function maybeAutoUpdateAndRelaunch(response) {
     return false;
   }
   process.stderr.write("Deepline SDK/CLI updated; rerunning command.\n");
-  const exitCode = await relaunchCurrentCommand();
+  const exitCode = await relaunchCurrentCommand(plan);
   process.exit(exitCode);
   return true;
 }
 
 // src/cli/skills-sync.ts
 import { spawn as spawn4, spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync13, mkdirSync as mkdirSync8, readFileSync as readFileSync11, writeFileSync as writeFileSync13 } from "fs";
-import { homedir as homedir9 } from "os";
+import { existsSync as existsSync13, mkdirSync as mkdirSync9, readFileSync as readFileSync12, writeFileSync as writeFileSync14 } from "fs";
+import { homedir as homedir10 } from "os";
 import { dirname as dirname14, join as join16 } from "path";
 var CHECK_TIMEOUT_MS2 = 3e3;
 var SDK_PLAY_SKILL_NAME = "deepline-plays";
@@ -22791,13 +23024,13 @@ function readPluginSkillsVersion() {
   const dir = activePluginSkillsDir();
   if (!dir) return "";
   try {
-    return readFileSync11(join16(dir, ".version"), "utf-8").trim();
+    return readFileSync12(join16(dir, ".version"), "utf-8").trim();
   } catch {
     return "";
   }
 }
 function sdkSkillsVersionPath(baseUrl) {
-  const home = process.env.HOME?.trim() || homedir9();
+  const home = process.env.HOME?.trim() || homedir10();
   return join16(
     home,
     ".local",
@@ -22813,15 +23046,15 @@ function readLocalSkillsVersion(baseUrl) {
   const path = sdkSkillsVersionPath(baseUrl);
   if (!existsSync13(path)) return "";
   try {
-    return readFileSync11(path, "utf-8").trim();
+    return readFileSync12(path, "utf-8").trim();
   } catch {
     return "";
   }
 }
 function writeLocalSkillsVersion(baseUrl, version) {
   const path = sdkSkillsVersionPath(baseUrl);
-  mkdirSync8(dirname14(path), { recursive: true });
-  writeFileSync13(path, `${version}
+  mkdirSync9(dirname14(path), { recursive: true });
+  writeFileSync14(path, `${version}
 `, "utf-8");
 }
 function sortedUniqueSkillNames(names) {
@@ -23546,6 +23779,18 @@ Exit codes:
     if (relaunched) {
       return;
     }
+    if (compatibility.response?.cli_family?.action === "force_python") {
+      forcePythonCliFamily();
+      process.stderr.write(
+        "Deepline SDK CLI rollback is active; switched installer-managed `deepline` back to the Python CLI. Re-run your command.\n"
+      );
+      const error = new Error(
+        "SDK CLI rollback is active"
+      );
+      error.code = "deepline.sdk_cli_rollback";
+      error.exitCode = 7;
+      throw error;
+    }
     enforceSdkCompatibilityResponse(compatibility.response);
     if (printStartupPhase) {
       progress?.phase("checking sdk skills");

package/dist/index.js

@@ -274,10 +274,10 @@ var SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: "0.1.111",
+  version: "0.1.113",
   apiContract: "2026-06-dataset-column-cell-stale-hard-cutover",
   supportPolicy: {
-    latest: "0.1.111",
+    latest: "0.1.113",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [

package/dist/index.mjs

@@ -196,10 +196,10 @@ var SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: "0.1.111",
+  version: "0.1.113",
   apiContract: "2026-06-dataset-column-cell-stale-hard-cutover",
   supportPolicy: {
-    latest: "0.1.111",
+    latest: "0.1.113",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [

package/dist/repo/sdk/src/release.ts

@@ -99,10 +99,10 @@ export const SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: '0.1.111',
+  version: '0.1.113',
   apiContract: '2026-06-dataset-column-cell-stale-hard-cutover',
   supportPolicy: {
-    latest: '0.1.111',
+    latest: '0.1.113',
     minimumSupported: '0.1.53',
     deprecatedBelow: '0.1.53',
     commandMinimumSupported: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.1.111",
+  "version": "0.1.113",
   "description": "Deepline SDK + CLI — B2B data enrichment powered by durable cloud execution",
   "license": "MIT",
   "repository": {