deepline 0.1.112 → 0.1.114

package/dist/cli/index.js

@@ -183,7 +183,7 @@ configureProxyFromEnv();
 // src/cli/index.ts
 var import_promises7 = require("fs/promises");
 var import_node_path22 = require("path");
-var import_node_os15 = require("os");
+var import_node_os16 = require("os");
 var import_commander3 = require("commander");
 
 // src/config.ts
@@ -403,10 +403,10 @@ var SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: "0.1.112",
+  version: "0.1.114",
   apiContract: "2026-06-dataset-column-cell-stale-hard-cutover",
   supportPolicy: {
-    latest: "0.1.112",
+    latest: "0.1.114",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -16031,6 +16031,8 @@ ${indent(renderJavascriptBody(command.run_if_js), 6)}
     force: true` : "";
   const legacyEnvelope = options.legacyEnvelope ? `,
     legacyEnvelope: true` : "";
+  const waterfallSoftFail = options.waterfallSoftFail ? `,
+    waterfallSoftFail: true` : "";
   return [
     `async (row, stepCtx) => {`,
     ...options.precheck ? [`  if (${options.precheck}) return null;`] : [],
@@ -16042,7 +16044,7 @@ ${indent(renderJavascriptBody(command.run_if_js), 6)}
     `    extract: ${extractJs},`,
     `    runIf: ${runIfJs},`,
     `    row,`,
-    `    stepCtx${description}${force}${legacyEnvelope}`,
+    `    stepCtx${description}${force}${legacyEnvelope}${waterfallSoftFail}`,
     `  });`,
     `}`
   ].join("\n");
@@ -16066,34 +16068,22 @@ function renderIdiomaticExecuteStep(command, options) {
     `async (row, ctx) => {`,
     ...options.precheck ? [`  if (${options.precheck}) return null;`] : [],
     ...runIfLines,
-    `  const result: any = await ctx.tools.execute({`,
-    `    id: ${callId},`,
-    `    tool: ${tool},`,
-    `    input: ${input2} as any,`,
-    `    description: ${stringLiteral((command.description ?? "").trim() || `Run ${command.alias} via ${command.tool}.`)},`,
-    ...options.force ? [`    force: true,`] : [],
-    `  });`,
+    `  let result: any;`,
+    `  try {`,
+    `    result = await ctx.tools.execute({`,
+    `      id: ${callId},`,
+    `      tool: ${tool},`,
+    `      input: ${input2} as any,`,
+    `      description: ${stringLiteral((command.description ?? "").trim() || `Run ${command.alias} via ${command.tool}.`)},`,
+    ...options.force ? [`      force: true,`] : [],
+    `    });`,
+    `  } catch (error) {`,
+    ...options.waterfallSoftFail ? [`    return __dlWaterfallToolFailure(error);`] : [`    throw error;`],
+    `  }`,
     `  return ${extraction};`,
     `}`
   ].join("\n");
 }
-function renderInlineJavascriptStep(command, options) {
-  const code = typeof command.payload?.code === "string" ? command.payload.code : "return null;";
-  const runIfLines = command.run_if_js ? [
-    `  if (!((row: Record<string, any>) => { const input = row; const context = row;`,
-    indent(renderJavascriptBody(command.run_if_js), 4),
-    `  })(row as Record<string, any>)) return null;`
-  ] : [];
-  return [
-    `async (row) => {`,
-    ...options.precheck ? [`  if (${options.precheck}) return null;`] : [],
-    ...runIfLines,
-    `  return ((row: Record<string, any>, input: Record<string, any>, context: Record<string, any>) => {`,
-    indent(renderJavascriptBody(code), 4),
-    `  })(row as Record<string, any>, row as Record<string, any>, row as Record<string, any>);`,
-    `}`
-  ].join("\n");
-}
 function renderPlayStep(command, options) {
   const alias = stringLiteral(command.alias);
   const callId = stringLiteral(commandCallId(command));
@@ -16112,13 +16102,35 @@ ${indent(renderJavascriptBody(command.run_if_js), 6)}
     `  const templateRow = __dlPrepareEnrichRow(row, [${alias}]);`,
     ...runIfLines,
     `  const payload = __dlTemplate(${payload}, templateRow) as Record<string, unknown>;`,
-    `  const result = await stepCtx.runPlay(${callId}, ${playRef}, payload, {`,
-    `      description: ${stringLiteral(command.description ?? command.alias)}`,
-    `  });`,
+    `  let result: unknown;`,
+    `  try {`,
+    `    result = await stepCtx.runPlay(${callId}, ${playRef}, payload, {`,
+    `        description: ${stringLiteral(command.description ?? command.alias)}`,
+    `    });`,
+    `  } catch (error) {`,
+    ...options.waterfallSoftFail ? [`    return __dlWaterfallToolFailure(error);`] : [`    throw error;`],
+    `  }`,
     `  return __dlPlayResultValue(${alias}, result);`,
     `}`
   ].join("\n");
 }
+function renderInlineJavascriptStep(command, options) {
+  const code = typeof command.payload?.code === "string" ? command.payload.code : "return null;";
+  const runIfLines = command.run_if_js ? [
+    `  if (!((row: Record<string, any>) => { const input = row; const context = row;`,
+    indent(renderJavascriptBody(command.run_if_js), 4),
+    `  })(row as Record<string, any>)) return null;`
+  ] : [];
+  return [
+    `async (row) => {`,
+    ...options.precheck ? [`  if (${options.precheck}) return null;`] : [],
+    ...runIfLines,
+    `  return ((row: Record<string, any>, input: Record<string, any>, context: Record<string, any>) => {`,
+    indent(renderJavascriptBody(code), 4),
+    `  })(row as Record<string, any>, row as Record<string, any>, row as Record<string, any>);`,
+    `}`
+  ].join("\n");
+}
 function renderJavascriptBody(source) {
   assertUserCodeIsSafe(source, "play step code");
   const trimmed = source.trim();
@@ -16245,7 +16257,8 @@ function renderWaterfallColumns(command, forceAliases, inlineRunJavascript, idio
         precheck: priorAliases.length > 0 ? `__dlWaterfallSatisfied(row, ${stableJson(priorAliases)}, ${minResults})` : void 0,
         legacyEnvelope: Boolean(nested.extract_js),
         inlineRunJavascript,
-        idiomaticGetters
+        idiomaticGetters,
+        waterfallSoftFail: true
       }),
       { recompute: force, recomputeOnError: true }
     );
@@ -16900,6 +16913,26 @@ function helperSource() {
     `  return 'Extractor failed';`,
     `}`,
     ``,
+    `function __dlErrorDetail(error: unknown): string {`,
+    `  const message = __dlErrorMessage(error);`,
+    `  if (!__dlRecord(error)) return message;`,
+    `  try {`,
+    `    return message + ' ' + JSON.stringify(error);`,
+    `  } catch {`,
+    `    return message;`,
+    `  }`,
+    `}`,
+    ``,
+    `function __dlRecoverableWaterfallToolError(error: unknown): boolean {`,
+    `  const detail = __dlErrorDetail(error).toLowerCase();`,
+    `  return /\\b5\\d\\d\\b/.test(detail) || detail.includes('upstream_failure') || detail.includes('"error_category":"upstream"') || (detail.includes('"failure_origin":"provider"') && detail.includes('"status":5')) || detail.includes('bad gateway') || detail.includes('gateway time-out') || detail.includes('gateway timeout') || detail.includes('service unavailable');`,
+    `}`,
+    ``,
+    `function __dlWaterfallToolFailure(error: unknown): unknown {`,
+    `  if (__dlRecoverableWaterfallToolError(error)) return __dlExtractorFailure(error);`,
+    `  throw error;`,
+    `}`,
+    ``,
     `function __dlExtractorFailure(error: unknown): unknown {`,
     `  const message = __dlErrorMessage(error);`,
     `  return { matched_result: null, result: { error: message, message } };`,
@@ -16996,19 +17029,25 @@ function helperSource() {
     `  return result;`,
     `}`,
     ``,
-    `async function __dlRunCommand(input: { alias: string; callId: string; tool: string; payload: Record<string, unknown>; extract: ((args: __DlExtractorHelpers) => unknown) | null; runIf: ((row: Record<string, unknown>) => unknown) | null; row: Record<string, unknown>; stepCtx: { tools: { execute: (request: Record<string, unknown>) => Promise<unknown> } }; description?: string; force?: boolean; legacyEnvelope?: boolean }): Promise<unknown> {`,
+    `async function __dlRunCommand(input: { alias: string; callId: string; tool: string; payload: Record<string, unknown>; extract: ((args: __DlExtractorHelpers) => unknown) | null; runIf: ((row: Record<string, unknown>) => unknown) | null; row: Record<string, unknown>; stepCtx: { tools: { execute: (request: Record<string, unknown>) => Promise<unknown> } }; description?: string; force?: boolean; legacyEnvelope?: boolean; waterfallSoftFail?: boolean }): Promise<unknown> {`,
     `  if (input.runIf) {`,
     `    const shouldRun = input.runIf(input.row);`,
     `    if (!shouldRun) return null;`,
     `  }`,
     `  const payload = __dlRuntimePayload(input.tool, __dlTemplate(input.payload, input.row) as Record<string, unknown>, input.row);`,
-    `  const result = await input.stepCtx.tools.execute({`,
-    `    id: input.callId,`,
-    `    tool: input.tool,`,
-    `    input: payload,`,
-    `    ...(input.description ? { description: input.description } : {}),`,
-    `    ...(input.force ? { force: true } : {}),`,
-    `  });`,
+    `  let result: unknown;`,
+    `  try {`,
+    `    result = await input.stepCtx.tools.execute({`,
+    `      id: input.callId,`,
+    `      tool: input.tool,`,
+    `      input: payload,`,
+    `      ...(input.description ? { description: input.description } : {}),`,
+    `      ...(input.force ? { force: true } : {}),`,
+    `    });`,
+    `  } catch (error) {`,
+    `    if (input.waterfallSoftFail) return __dlWaterfallToolFailure(error);`,
+    `    throw error;`,
+    `  }`,
     `  return __dlExtract(input.alias, result, input.row, input.extract, Boolean(input.legacyEnvelope));`,
     `}`
   ].join("\n");
@@ -22357,6 +22396,7 @@ Notes:
 // src/cli/commands/update.ts
 var import_node_child_process2 = require("child_process");
 var import_node_fs16 = require("fs");
+var import_node_os13 = require("os");
 var import_node_path20 = require("path");
 function posixShellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
@@ -22375,6 +22415,55 @@ function buildSourceUpdateCommand(sourceRoot) {
   const cdCommand = process.platform === "win32" ? `cd /d ${quotedRoot}` : `cd ${quotedRoot}`;
   return `${cdCommand} && git fetch origin main --tags && git merge --ff-only origin/main`;
 }
+function sidecarStateDir(input2) {
+  const scope = input2.env.DEEPLINE_CONFIG_SCOPE?.trim();
+  if (!scope || scope.includes("/") || scope.includes("\\")) {
+    return null;
+  }
+  return (0, import_node_path20.join)(input2.homeDir, ".local", "deepline", scope, "sdk-cli");
+}
+function readOptionalText(path) {
+  try {
+    return (0, import_node_fs16.readFileSync)(path, "utf8").trim();
+  } catch {
+    return "";
+  }
+}
+function resolvePythonSidecarUpdatePlan(options) {
+  const stateDir = sidecarStateDir(options);
+  if (!stateDir) return null;
+  const relativeEntrypoint = (0, import_node_path20.relative)(
+    (0, import_node_path20.resolve)(stateDir),
+    (0, import_node_path20.resolve)(options.entrypoint)
+  );
+  if (!relativeEntrypoint || relativeEntrypoint.startsWith("..") || (0, import_node_path20.isAbsolute)(relativeEntrypoint)) {
+    return null;
+  }
+  const installMethod = readOptionalText((0, import_node_path20.join)(stateDir, ".install-method"));
+  if (installMethod !== "python-sidecar") return null;
+  const scope = options.env.DEEPLINE_CONFIG_SCOPE?.trim() || "";
+  const hostUrl = options.env.DEEPLINE_HOST_URL?.trim() || "";
+  const nodeBin = readOptionalText((0, import_node_path20.join)(stateDir, ".node-bin")) || process.execPath;
+  const sidecarPath = readOptionalText((0, import_node_path20.join)(stateDir, ".command-path")) || (0, import_node_path20.join)(
+    stateDir,
+    "bin",
+    process.platform === "win32" ? "deepline-sdk.cmd" : "deepline-sdk"
+  );
+  const packageSpec = options.packageSpec || "deepline@latest";
+  const npmCommand = "npm";
+  const manualCommand = `${npmCommand} install --prefix ${shellQuote3((0, import_node_path20.join)(stateDir, "versions", "<version>"))} --no-audit --no-fund ${shellQuote3(packageSpec)}`;
+  return {
+    kind: "python-sidecar",
+    stateDir,
+    sidecarPath,
+    nodeBin,
+    npmCommand,
+    scope,
+    hostUrl,
+    packageSpec,
+    manualCommand
+  };
+}
 function findRepoBackedSdkRoot(startPath) {
   let current = (0, import_node_path20.resolve)(startPath);
   while (true) {
@@ -22386,8 +22475,10 @@ function findRepoBackedSdkRoot(startPath) {
     current = parent;
   }
 }
-function resolveUpdatePlan() {
-  const entrypoint = process.argv[1] ? (0, import_node_path20.resolve)(process.argv[1]) : "";
+function resolveUpdatePlan(options = {}) {
+  const env = options.env ?? process.env;
+  const homeDir2 = options.homeDir ?? (0, import_node_os13.homedir)();
+  const entrypoint = options.entrypoint ?? (process.argv[1] ? (0, import_node_path20.resolve)(process.argv[1]) : "");
   const sourceRoot = entrypoint ? findRepoBackedSdkRoot((0, import_node_path20.dirname)(entrypoint)) : null;
   if (sourceRoot) {
     return {
@@ -22396,8 +22487,16 @@ function resolveUpdatePlan() {
       manualCommand: buildSourceUpdateCommand(sourceRoot)
     };
   }
+  const sidecarPlan = resolvePythonSidecarUpdatePlan({
+    entrypoint,
+    env,
+    homeDir: homeDir2,
+    packageSpec: options.packageSpec
+  });
+  if (sidecarPlan) return sidecarPlan;
   const command = "npm";
-  const args = ["install", "-g", "deepline@latest"];
+  const packageSpec = options.packageSpec || "deepline@latest";
+  const args = ["install", "-g", packageSpec];
   return {
     kind: "npm-global",
     command,
@@ -22405,12 +22504,40 @@ function resolveUpdatePlan() {
     manualCommand: `${command} ${args.map(shellQuote3).join(" ")}`
   };
 }
-function runCommand(command, args) {
+function safeVersionSegment(value) {
+  const normalized = value.trim();
+  return /^[0-9A-Za-z._-]+$/.test(normalized) ? normalized : "";
+}
+function entryPathInVersionDir(versionDir) {
+  return (0, import_node_path20.join)(
+    versionDir,
+    "node_modules",
+    "deepline",
+    "dist",
+    "cli",
+    "index.mjs"
+  );
+}
+function installedPackageVersion(versionDir) {
+  const packageJsonPath = (0, import_node_path20.join)(
+    versionDir,
+    "node_modules",
+    "deepline",
+    "package.json"
+  );
+  try {
+    const parsed = JSON.parse((0, import_node_fs16.readFileSync)(packageJsonPath, "utf8"));
+    return typeof parsed.version === "string" ? safeVersionSegment(parsed.version) : "";
+  } catch {
+    return "";
+  }
+}
+function runCommand(command, args, env = process.env) {
   return new Promise((resolveExitCode) => {
     const child = (0, import_node_child_process2.spawn)(command, args, {
       stdio: "inherit",
       shell: process.platform === "win32",
-      env: process.env
+      env
     });
     child.on("error", (error) => {
       process.stderr.write(`Failed to start ${command}: ${error.message}
@@ -22422,11 +22549,137 @@ function runCommand(command, args) {
     });
   });
 }
-async function runNpmGlobalUpdatePlan(plan) {
-  if (plan.kind !== "npm-global") {
+function writeSidecarLauncher(input2) {
+  (0, import_node_fs16.mkdirSync)((0, import_node_path20.dirname)(input2.path), { recursive: true });
+  if (process.platform === "win32") {
+    (0, import_node_fs16.writeFileSync)(
+      input2.path,
+      [
+        `@set DEEPLINE_HOST_URL=${input2.hostUrl.replace(/\r?\n/g, "")}`,
+        `@set DEEPLINE_CONFIG_SCOPE=${input2.scope.replace(/\r?\n/g, "")}`,
+        `@"${input2.nodeBin}" "${input2.entryPath}" %*`,
+        ""
+      ].join("\r\n"),
+      "utf8"
+    );
+    return;
+  }
+  (0, import_node_fs16.writeFileSync)(
+    input2.path,
+    [
+      "#!/usr/bin/env sh",
+      `export DEEPLINE_HOST_URL=${shellQuote3(input2.hostUrl)}`,
+      `export DEEPLINE_CONFIG_SCOPE=${shellQuote3(input2.scope)}`,
+      `exec ${shellQuote3(input2.nodeBin)} ${shellQuote3(input2.entryPath)} "$@"`,
+      ""
+    ].join("\n"),
+    { encoding: "utf8", mode: 493 }
+  );
+}
+async function runPythonSidecarUpdatePlan(plan) {
+  const versionsDir = (0, import_node_path20.join)(plan.stateDir, "versions");
+  const tempDir = (0, import_node_path20.join)(
+    versionsDir,
+    `.tmp-sdk-update-${process.pid}-${Date.now()}`
+  );
+  (0, import_node_fs16.rmSync)(tempDir, { recursive: true, force: true });
+  (0, import_node_fs16.mkdirSync)(tempDir, { recursive: true });
+  (0, import_node_fs16.writeFileSync)((0, import_node_path20.join)(tempDir, "package.json"), '{"private":true}\n', "utf8");
+  const env = {
+    ...process.env,
+    PATH: `${(0, import_node_path20.dirname)(plan.nodeBin)}${process.platform === "win32" ? ";" : ":"}${process.env.PATH ?? ""}`
+  };
+  const installExitCode = await runCommand(
+    plan.npmCommand,
+    [
+      "install",
+      "--prefix",
+      tempDir,
+      "--no-audit",
+      "--no-fund",
+      plan.packageSpec
+    ],
+    env
+  );
+  if (installExitCode !== 0) {
+    (0, import_node_fs16.rmSync)(tempDir, { recursive: true, force: true });
+    return installExitCode;
+  }
+  const installedVersion = installedPackageVersion(tempDir);
+  if (!installedVersion) {
+    process.stderr.write(
+      "Updated Deepline SDK package did not report a version.\n"
+    );
+    (0, import_node_fs16.rmSync)(tempDir, { recursive: true, force: true });
     return 1;
   }
-  return runCommand(plan.command, plan.args);
+  const finalDir = (0, import_node_path20.join)(versionsDir, installedVersion);
+  const finalEntryPath = entryPathInVersionDir(finalDir);
+  if ((0, import_node_fs16.existsSync)(finalEntryPath)) {
+    (0, import_node_fs16.rmSync)(tempDir, { recursive: true, force: true });
+  } else {
+    (0, import_node_fs16.rmSync)(finalDir, { recursive: true, force: true });
+    try {
+      (0, import_node_fs16.renameSync)(tempDir, finalDir);
+    } catch (error) {
+      (0, import_node_fs16.rmSync)(tempDir, { recursive: true, force: true });
+      process.stderr.write(
+        `Failed to publish Deepline SDK sidecar update: ${error.message}
+`
+      );
+      return 1;
+    }
+  }
+  if (!(0, import_node_fs16.existsSync)(finalEntryPath)) {
+    process.stderr.write(
+      `Updated Deepline SDK CLI entrypoint missing: ${finalEntryPath}
+`
+    );
+    return 1;
+  }
+  writeSidecarLauncher({
+    path: plan.sidecarPath,
+    hostUrl: plan.hostUrl,
+    scope: plan.scope,
+    nodeBin: plan.nodeBin,
+    entryPath: finalEntryPath
+  });
+  (0, import_node_fs16.writeFileSync)(
+    (0, import_node_path20.join)(plan.stateDir, ".version"),
+    `${installedVersion}
+`,
+    "utf8"
+  );
+  (0, import_node_fs16.writeFileSync)(
+    (0, import_node_path20.join)(plan.stateDir, ".install-method"),
+    "python-sidecar\n",
+    "utf8"
+  );
+  (0, import_node_fs16.writeFileSync)(
+    (0, import_node_path20.join)(plan.stateDir, ".command-path"),
+    `${plan.sidecarPath}
+`,
+    "utf8"
+  );
+  (0, import_node_fs16.writeFileSync)((0, import_node_path20.join)(plan.stateDir, ".runner"), "node\n", "utf8");
+  (0, import_node_fs16.writeFileSync)((0, import_node_path20.join)(plan.stateDir, ".node-bin"), `${plan.nodeBin}
+`, "utf8");
+  (0, import_node_fs16.writeFileSync)(
+    (0, import_node_path20.join)(plan.stateDir, ".entry-path"),
+    `${finalEntryPath}
+`,
+    "utf8"
+  );
+  return 0;
+}
+async function runUpdatePlan(plan) {
+  if (plan.kind === "npm-global") {
+    return runCommand(plan.command, plan.args);
+  }
+  if (plan.kind === "python-sidecar") {
+    return runPythonSidecarUpdatePlan(plan);
+  }
+  return 1;
 }
 async function handleUpdate(options) {
   const plan = resolveUpdatePlan();
@@ -22437,6 +22690,9 @@ async function handleUpdate(options) {
         lines: plan.kind === "source" ? [
           "This Deepline CLI is running from SDK source, so it cannot safely update itself like an npm global.",
           `Update the backing checkout with: ${plan.manualCommand}`
+        ] : plan.kind === "python-sidecar" ? [
+          "This Deepline CLI is running from the Python-managed SDK sidecar.",
+          "Updating will refresh that sidecar, not a global npm binary."
         ] : [`Updating Deepline SDK/CLI with: ${plan.manualCommand}`]
       }
     ]
@@ -22466,7 +22722,7 @@ async function handleUpdate(options) {
     `Updating Deepline SDK/CLI with: ${plan.manualCommand}
 `
   );
-  return runCommand(plan.command, plan.args);
+  return runUpdatePlan(plan);
 }
 function registerUpdateCommand(program) {
   program.command("update").description("Update the Deepline SDK/CLI.").addHelpText(
@@ -22474,6 +22730,8 @@ function registerUpdateCommand(program) {
     `
 Notes:
   For the published npm CLI, this runs npm install -g deepline@latest.
+  For Python-managed SDK sidecars, this refreshes the sidecar that launched
+  the current SDK CLI instead of changing a global npm binary.
   For repo-backed SDK wrappers such as cli-env sdk-prod or sdk-worktree, this
   prints the exact git command to update the checkout that provides the CLI.
 
@@ -22687,10 +22945,13 @@ function isCi() {
 function shouldSkipSelfUpdate() {
   return envTruthy("DEEPLINE_SKIP_SELF_UPDATE") || envTruthy("DEEPLINE_NO_AUTO_UPDATE") || envTruthy("DEEPLINE_SKIP_SDK_AUTO_UPDATE") || envTruthy("DEEPLINE_DISABLE_AUTO_UPDATE") || isCi();
 }
-function relaunchCurrentCommand() {
+function relaunchCurrentCommand(plan) {
   return new Promise((resolve16) => {
-    const child = (0, import_node_child_process3.spawn)(process.execPath, process.argv.slice(1), {
+    const command = plan.kind === "python-sidecar" ? plan.sidecarPath : process.execPath;
+    const args = plan.kind === "python-sidecar" ? process.argv.slice(2) : process.argv.slice(1);
+    const child = (0, import_node_child_process3.spawn)(command, args, {
       stdio: "inherit",
+      shell: process.platform === "win32",
       env: {
         ...process.env,
         DEEPLINE_NO_AUTO_UPDATE: "1"
@@ -22711,8 +22972,9 @@ async function maybeAutoUpdateAndRelaunch(response) {
   if (!response || !autoUpdate?.should_auto_update || shouldSkipSelfUpdate()) {
     return false;
   }
-  const plan = resolveUpdatePlan();
-  if (plan.kind !== "npm-global") {
+  const packageSpec = response.latest ? `deepline@${response.latest}` : void 0;
+  const plan = resolveUpdatePlan({ packageSpec });
+  if (plan.kind === "source") {
     return false;
   }
   const label = autoUpdate.reason === "rollback_forced" ? "has a server rollback pending and needs the latest rollback-aware CLI" : autoUpdate.required ? "requires an update" : "is more than the supported auto-update lag behind";
@@ -22720,7 +22982,7 @@ async function maybeAutoUpdateAndRelaunch(response) {
     `Deepline SDK/CLI ${label}; running ${plan.manualCommand}
 `
   );
-  const updateExitCode = await runNpmGlobalUpdatePlan(plan);
+  const updateExitCode = await runUpdatePlan(plan);
   if (updateExitCode !== 0) {
     if (autoUpdate.required) {
       throw new Error(
@@ -22734,7 +22996,7 @@ async function maybeAutoUpdateAndRelaunch(response) {
     return false;
   }
   process.stderr.write("Deepline SDK/CLI updated; rerunning command.\n");
-  const exitCode = await relaunchCurrentCommand();
+  const exitCode = await relaunchCurrentCommand(plan);
   process.exit(exitCode);
   return true;
 }
@@ -22742,7 +23004,7 @@ async function maybeAutoUpdateAndRelaunch(response) {
 // src/cli/skills-sync.ts
 var import_node_child_process4 = require("child_process");
 var import_node_fs17 = require("fs");
-var import_node_os13 = require("os");
+var import_node_os14 = require("os");
 var import_node_path21 = require("path");
 var CHECK_TIMEOUT_MS2 = 3e3;
 var SDK_PLAY_SKILL_NAME = "deepline-plays";
@@ -22769,7 +23031,7 @@ function readPluginSkillsVersion() {
   }
 }
 function sdkSkillsVersionPath(baseUrl) {
-  const home = process.env.HOME?.trim() || (0, import_node_os13.homedir)();
+  const home = process.env.HOME?.trim() || (0, import_node_os14.homedir)();
   return (0, import_node_path21.join)(
     home,
     ".local",
@@ -22972,7 +23234,7 @@ async function syncSdkSkillsIfNeeded(baseUrl) {
 }
 
 // src/cli/failure-reporting.ts
-var import_node_os14 = require("os");
+var import_node_os15 = require("os");
 var FAILURE_REPORT_DISABLE_ENV = "DEEPLINE_DISABLE_FAILURE_REPORTING";
 var REPORT_FAILURE_TIMEOUT_MS = 1e4;
 var MAX_FAILURE_TEXT_CHARS = 4e3;
@@ -23094,12 +23356,12 @@ function detectAgentRuntime3() {
 }
 function buildEnvironmentContext() {
   const context = {
-    os: (0, import_node_os14.platform)(),
-    os_release: (0, import_node_os14.release)(),
-    platform: `${(0, import_node_os14.platform)()}-${(0, import_node_os14.release)()}-${process.arch}`,
+    os: (0, import_node_os15.platform)(),
+    os_release: (0, import_node_os15.release)(),
+    platform: `${(0, import_node_os15.platform)()}-${(0, import_node_os15.release)()}-${process.arch}`,
     node_version: process.version,
     runtime: "Node.js",
-    hostname: (0, import_node_os14.hostname)(),
+    hostname: (0, import_node_os15.hostname)(),
     agent_runtime: detectAgentRuntime3()
   };
   for (const key of ["CLAUDE_CODE_REMOTE", "DEEPLINE_PLUGIN_MODE"]) {
@@ -23279,7 +23541,7 @@ function topLevelCommandKnown(program, commandName) {
   );
 }
 async function runPlayRunnerHealthCheck() {
-  const dir = await (0, import_promises7.mkdtemp)((0, import_node_path22.join)((0, import_node_os15.tmpdir)(), "deepline-health-play-"));
+  const dir = await (0, import_promises7.mkdtemp)((0, import_node_path22.join)((0, import_node_os16.tmpdir)(), "deepline-health-play-"));
   const file = (0, import_node_path22.join)(dir, "health-check.play.ts");
   try {
     await (0, import_promises7.writeFile)(

package/dist/cli/index.mjs

@@ -380,10 +380,10 @@ var SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: "0.1.112",
+  version: "0.1.114",
   apiContract: "2026-06-dataset-column-cell-stale-hard-cutover",
   supportPolicy: {
-    latest: "0.1.112",
+    latest: "0.1.114",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -16049,6 +16049,8 @@ ${indent(renderJavascriptBody(command.run_if_js), 6)}
     force: true` : "";
   const legacyEnvelope = options.legacyEnvelope ? `,
     legacyEnvelope: true` : "";
+  const waterfallSoftFail = options.waterfallSoftFail ? `,
+    waterfallSoftFail: true` : "";
   return [
     `async (row, stepCtx) => {`,
     ...options.precheck ? [`  if (${options.precheck}) return null;`] : [],
@@ -16060,7 +16062,7 @@ ${indent(renderJavascriptBody(command.run_if_js), 6)}
     `    extract: ${extractJs},`,
     `    runIf: ${runIfJs},`,
     `    row,`,
-    `    stepCtx${description}${force}${legacyEnvelope}`,
+    `    stepCtx${description}${force}${legacyEnvelope}${waterfallSoftFail}`,
     `  });`,
     `}`
   ].join("\n");
@@ -16084,34 +16086,22 @@ function renderIdiomaticExecuteStep(command, options) {
     `async (row, ctx) => {`,
     ...options.precheck ? [`  if (${options.precheck}) return null;`] : [],
     ...runIfLines,
-    `  const result: any = await ctx.tools.execute({`,
-    `    id: ${callId},`,
-    `    tool: ${tool},`,
-    `    input: ${input2} as any,`,
-    `    description: ${stringLiteral((command.description ?? "").trim() || `Run ${command.alias} via ${command.tool}.`)},`,
-    ...options.force ? [`    force: true,`] : [],
-    `  });`,
+    `  let result: any;`,
+    `  try {`,
+    `    result = await ctx.tools.execute({`,
+    `      id: ${callId},`,
+    `      tool: ${tool},`,
+    `      input: ${input2} as any,`,
+    `      description: ${stringLiteral((command.description ?? "").trim() || `Run ${command.alias} via ${command.tool}.`)},`,
+    ...options.force ? [`      force: true,`] : [],
+    `    });`,
+    `  } catch (error) {`,
+    ...options.waterfallSoftFail ? [`    return __dlWaterfallToolFailure(error);`] : [`    throw error;`],
+    `  }`,
     `  return ${extraction};`,
     `}`
   ].join("\n");
 }
-function renderInlineJavascriptStep(command, options) {
-  const code = typeof command.payload?.code === "string" ? command.payload.code : "return null;";
-  const runIfLines = command.run_if_js ? [
-    `  if (!((row: Record<string, any>) => { const input = row; const context = row;`,
-    indent(renderJavascriptBody(command.run_if_js), 4),
-    `  })(row as Record<string, any>)) return null;`
-  ] : [];
-  return [
-    `async (row) => {`,
-    ...options.precheck ? [`  if (${options.precheck}) return null;`] : [],
-    ...runIfLines,
-    `  return ((row: Record<string, any>, input: Record<string, any>, context: Record<string, any>) => {`,
-    indent(renderJavascriptBody(code), 4),
-    `  })(row as Record<string, any>, row as Record<string, any>, row as Record<string, any>);`,
-    `}`
-  ].join("\n");
-}
 function renderPlayStep(command, options) {
   const alias = stringLiteral(command.alias);
   const callId = stringLiteral(commandCallId(command));
@@ -16130,13 +16120,35 @@ ${indent(renderJavascriptBody(command.run_if_js), 6)}
     `  const templateRow = __dlPrepareEnrichRow(row, [${alias}]);`,
     ...runIfLines,
     `  const payload = __dlTemplate(${payload}, templateRow) as Record<string, unknown>;`,
-    `  const result = await stepCtx.runPlay(${callId}, ${playRef}, payload, {`,
-    `      description: ${stringLiteral(command.description ?? command.alias)}`,
-    `  });`,
+    `  let result: unknown;`,
+    `  try {`,
+    `    result = await stepCtx.runPlay(${callId}, ${playRef}, payload, {`,
+    `        description: ${stringLiteral(command.description ?? command.alias)}`,
+    `    });`,
+    `  } catch (error) {`,
+    ...options.waterfallSoftFail ? [`    return __dlWaterfallToolFailure(error);`] : [`    throw error;`],
+    `  }`,
     `  return __dlPlayResultValue(${alias}, result);`,
     `}`
   ].join("\n");
 }
+function renderInlineJavascriptStep(command, options) {
+  const code = typeof command.payload?.code === "string" ? command.payload.code : "return null;";
+  const runIfLines = command.run_if_js ? [
+    `  if (!((row: Record<string, any>) => { const input = row; const context = row;`,
+    indent(renderJavascriptBody(command.run_if_js), 4),
+    `  })(row as Record<string, any>)) return null;`
+  ] : [];
+  return [
+    `async (row) => {`,
+    ...options.precheck ? [`  if (${options.precheck}) return null;`] : [],
+    ...runIfLines,
+    `  return ((row: Record<string, any>, input: Record<string, any>, context: Record<string, any>) => {`,
+    indent(renderJavascriptBody(code), 4),
+    `  })(row as Record<string, any>, row as Record<string, any>, row as Record<string, any>);`,
+    `}`
+  ].join("\n");
+}
 function renderJavascriptBody(source) {
   assertUserCodeIsSafe(source, "play step code");
   const trimmed = source.trim();
@@ -16263,7 +16275,8 @@ function renderWaterfallColumns(command, forceAliases, inlineRunJavascript, idio
         precheck: priorAliases.length > 0 ? `__dlWaterfallSatisfied(row, ${stableJson(priorAliases)}, ${minResults})` : void 0,
         legacyEnvelope: Boolean(nested.extract_js),
         inlineRunJavascript,
-        idiomaticGetters
+        idiomaticGetters,
+        waterfallSoftFail: true
       }),
       { recompute: force, recomputeOnError: true }
     );
@@ -16918,6 +16931,26 @@ function helperSource() {
     `  return 'Extractor failed';`,
     `}`,
     ``,
+    `function __dlErrorDetail(error: unknown): string {`,
+    `  const message = __dlErrorMessage(error);`,
+    `  if (!__dlRecord(error)) return message;`,
+    `  try {`,
+    `    return message + ' ' + JSON.stringify(error);`,
+    `  } catch {`,
+    `    return message;`,
+    `  }`,
+    `}`,
+    ``,
+    `function __dlRecoverableWaterfallToolError(error: unknown): boolean {`,
+    `  const detail = __dlErrorDetail(error).toLowerCase();`,
+    `  return /\\b5\\d\\d\\b/.test(detail) || detail.includes('upstream_failure') || detail.includes('"error_category":"upstream"') || (detail.includes('"failure_origin":"provider"') && detail.includes('"status":5')) || detail.includes('bad gateway') || detail.includes('gateway time-out') || detail.includes('gateway timeout') || detail.includes('service unavailable');`,
+    `}`,
+    ``,
+    `function __dlWaterfallToolFailure(error: unknown): unknown {`,
+    `  if (__dlRecoverableWaterfallToolError(error)) return __dlExtractorFailure(error);`,
+    `  throw error;`,
+    `}`,
+    ``,
     `function __dlExtractorFailure(error: unknown): unknown {`,
     `  const message = __dlErrorMessage(error);`,
     `  return { matched_result: null, result: { error: message, message } };`,
@@ -17014,19 +17047,25 @@ function helperSource() {
     `  return result;`,
     `}`,
     ``,
-    `async function __dlRunCommand(input: { alias: string; callId: string; tool: string; payload: Record<string, unknown>; extract: ((args: __DlExtractorHelpers) => unknown) | null; runIf: ((row: Record<string, unknown>) => unknown) | null; row: Record<string, unknown>; stepCtx: { tools: { execute: (request: Record<string, unknown>) => Promise<unknown> } }; description?: string; force?: boolean; legacyEnvelope?: boolean }): Promise<unknown> {`,
+    `async function __dlRunCommand(input: { alias: string; callId: string; tool: string; payload: Record<string, unknown>; extract: ((args: __DlExtractorHelpers) => unknown) | null; runIf: ((row: Record<string, unknown>) => unknown) | null; row: Record<string, unknown>; stepCtx: { tools: { execute: (request: Record<string, unknown>) => Promise<unknown> } }; description?: string; force?: boolean; legacyEnvelope?: boolean; waterfallSoftFail?: boolean }): Promise<unknown> {`,
     `  if (input.runIf) {`,
     `    const shouldRun = input.runIf(input.row);`,
     `    if (!shouldRun) return null;`,
     `  }`,
     `  const payload = __dlRuntimePayload(input.tool, __dlTemplate(input.payload, input.row) as Record<string, unknown>, input.row);`,
-    `  const result = await input.stepCtx.tools.execute({`,
-    `    id: input.callId,`,
-    `    tool: input.tool,`,
-    `    input: payload,`,
-    `    ...(input.description ? { description: input.description } : {}),`,
-    `    ...(input.force ? { force: true } : {}),`,
-    `  });`,
+    `  let result: unknown;`,
+    `  try {`,
+    `    result = await input.stepCtx.tools.execute({`,
+    `      id: input.callId,`,
+    `      tool: input.tool,`,
+    `      input: payload,`,
+    `      ...(input.description ? { description: input.description } : {}),`,
+    `      ...(input.force ? { force: true } : {}),`,
+    `    });`,
+    `  } catch (error) {`,
+    `    if (input.waterfallSoftFail) return __dlWaterfallToolFailure(error);`,
+    `    throw error;`,
+    `  }`,
     `  return __dlExtract(input.alias, result, input.row, input.extract, Boolean(input.legacyEnvelope));`,
     `}`
   ].join("\n");
@@ -22387,8 +22426,16 @@ Notes:
 
 // src/cli/commands/update.ts
 import { spawn as spawn2 } from "child_process";
-import { existsSync as existsSync12 } from "fs";
-import { dirname as dirname13, join as join15, resolve as resolve15 } from "path";
+import {
+  existsSync as existsSync12,
+  mkdirSync as mkdirSync8,
+  readFileSync as readFileSync11,
+  renameSync,
+  rmSync as rmSync3,
+  writeFileSync as writeFileSync13
+} from "fs";
+import { homedir as homedir9 } from "os";
+import { dirname as dirname13, isAbsolute as isAbsolute4, join as join15, relative as relative4, resolve as resolve15 } from "path";
 function posixShellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
@@ -22406,6 +22453,55 @@ function buildSourceUpdateCommand(sourceRoot) {
   const cdCommand = process.platform === "win32" ? `cd /d ${quotedRoot}` : `cd ${quotedRoot}`;
   return `${cdCommand} && git fetch origin main --tags && git merge --ff-only origin/main`;
 }
+function sidecarStateDir(input2) {
+  const scope = input2.env.DEEPLINE_CONFIG_SCOPE?.trim();
+  if (!scope || scope.includes("/") || scope.includes("\\")) {
+    return null;
+  }
+  return join15(input2.homeDir, ".local", "deepline", scope, "sdk-cli");
+}
+function readOptionalText(path) {
+  try {
+    return readFileSync11(path, "utf8").trim();
+  } catch {
+    return "";
+  }
+}
+function resolvePythonSidecarUpdatePlan(options) {
+  const stateDir = sidecarStateDir(options);
+  if (!stateDir) return null;
+  const relativeEntrypoint = relative4(
+    resolve15(stateDir),
+    resolve15(options.entrypoint)
+  );
+  if (!relativeEntrypoint || relativeEntrypoint.startsWith("..") || isAbsolute4(relativeEntrypoint)) {
+    return null;
+  }
+  const installMethod = readOptionalText(join15(stateDir, ".install-method"));
+  if (installMethod !== "python-sidecar") return null;
+  const scope = options.env.DEEPLINE_CONFIG_SCOPE?.trim() || "";
+  const hostUrl = options.env.DEEPLINE_HOST_URL?.trim() || "";
+  const nodeBin = readOptionalText(join15(stateDir, ".node-bin")) || process.execPath;
+  const sidecarPath = readOptionalText(join15(stateDir, ".command-path")) || join15(
+    stateDir,
+    "bin",
+    process.platform === "win32" ? "deepline-sdk.cmd" : "deepline-sdk"
+  );
+  const packageSpec = options.packageSpec || "deepline@latest";
+  const npmCommand = "npm";
+  const manualCommand = `${npmCommand} install --prefix ${shellQuote3(join15(stateDir, "versions", "<version>"))} --no-audit --no-fund ${shellQuote3(packageSpec)}`;
+  return {
+    kind: "python-sidecar",
+    stateDir,
+    sidecarPath,
+    nodeBin,
+    npmCommand,
+    scope,
+    hostUrl,
+    packageSpec,
+    manualCommand
+  };
+}
 function findRepoBackedSdkRoot(startPath) {
   let current = resolve15(startPath);
   while (true) {
@@ -22417,8 +22513,10 @@ function findRepoBackedSdkRoot(startPath) {
     current = parent;
   }
 }
-function resolveUpdatePlan() {
-  const entrypoint = process.argv[1] ? resolve15(process.argv[1]) : "";
+function resolveUpdatePlan(options = {}) {
+  const env = options.env ?? process.env;
+  const homeDir2 = options.homeDir ?? homedir9();
+  const entrypoint = options.entrypoint ?? (process.argv[1] ? resolve15(process.argv[1]) : "");
   const sourceRoot = entrypoint ? findRepoBackedSdkRoot(dirname13(entrypoint)) : null;
   if (sourceRoot) {
     return {
@@ -22427,8 +22525,16 @@ function resolveUpdatePlan() {
       manualCommand: buildSourceUpdateCommand(sourceRoot)
     };
   }
+  const sidecarPlan = resolvePythonSidecarUpdatePlan({
+    entrypoint,
+    env,
+    homeDir: homeDir2,
+    packageSpec: options.packageSpec
+  });
+  if (sidecarPlan) return sidecarPlan;
   const command = "npm";
-  const args = ["install", "-g", "deepline@latest"];
+  const packageSpec = options.packageSpec || "deepline@latest";
+  const args = ["install", "-g", packageSpec];
   return {
     kind: "npm-global",
     command,
@@ -22436,12 +22542,40 @@ function resolveUpdatePlan() {
     manualCommand: `${command} ${args.map(shellQuote3).join(" ")}`
   };
 }
-function runCommand(command, args) {
+function safeVersionSegment(value) {
+  const normalized = value.trim();
+  return /^[0-9A-Za-z._-]+$/.test(normalized) ? normalized : "";
+}
+function entryPathInVersionDir(versionDir) {
+  return join15(
+    versionDir,
+    "node_modules",
+    "deepline",
+    "dist",
+    "cli",
+    "index.mjs"
+  );
+}
+function installedPackageVersion(versionDir) {
+  const packageJsonPath = join15(
+    versionDir,
+    "node_modules",
+    "deepline",
+    "package.json"
+  );
+  try {
+    const parsed = JSON.parse(readFileSync11(packageJsonPath, "utf8"));
+    return typeof parsed.version === "string" ? safeVersionSegment(parsed.version) : "";
+  } catch {
+    return "";
+  }
+}
+function runCommand(command, args, env = process.env) {
   return new Promise((resolveExitCode) => {
     const child = spawn2(command, args, {
       stdio: "inherit",
       shell: process.platform === "win32",
-      env: process.env
+      env
     });
     child.on("error", (error) => {
       process.stderr.write(`Failed to start ${command}: ${error.message}
@@ -22453,11 +22587,137 @@ function runCommand(command, args) {
     });
   });
 }
-async function runNpmGlobalUpdatePlan(plan) {
-  if (plan.kind !== "npm-global") {
+function writeSidecarLauncher(input2) {
+  mkdirSync8(dirname13(input2.path), { recursive: true });
+  if (process.platform === "win32") {
+    writeFileSync13(
+      input2.path,
+      [
+        `@set DEEPLINE_HOST_URL=${input2.hostUrl.replace(/\r?\n/g, "")}`,
+        `@set DEEPLINE_CONFIG_SCOPE=${input2.scope.replace(/\r?\n/g, "")}`,
+        `@"${input2.nodeBin}" "${input2.entryPath}" %*`,
+        ""
+      ].join("\r\n"),
+      "utf8"
+    );
+    return;
+  }
+  writeFileSync13(
+    input2.path,
+    [
+      "#!/usr/bin/env sh",
+      `export DEEPLINE_HOST_URL=${shellQuote3(input2.hostUrl)}`,
+      `export DEEPLINE_CONFIG_SCOPE=${shellQuote3(input2.scope)}`,
+      `exec ${shellQuote3(input2.nodeBin)} ${shellQuote3(input2.entryPath)} "$@"`,
+      ""
+    ].join("\n"),
+    { encoding: "utf8", mode: 493 }
+  );
+}
+async function runPythonSidecarUpdatePlan(plan) {
+  const versionsDir = join15(plan.stateDir, "versions");
+  const tempDir = join15(
+    versionsDir,
+    `.tmp-sdk-update-${process.pid}-${Date.now()}`
+  );
+  rmSync3(tempDir, { recursive: true, force: true });
+  mkdirSync8(tempDir, { recursive: true });
+  writeFileSync13(join15(tempDir, "package.json"), '{"private":true}\n', "utf8");
+  const env = {
+    ...process.env,
+    PATH: `${dirname13(plan.nodeBin)}${process.platform === "win32" ? ";" : ":"}${process.env.PATH ?? ""}`
+  };
+  const installExitCode = await runCommand(
+    plan.npmCommand,
+    [
+      "install",
+      "--prefix",
+      tempDir,
+      "--no-audit",
+      "--no-fund",
+      plan.packageSpec
+    ],
+    env
+  );
+  if (installExitCode !== 0) {
+    rmSync3(tempDir, { recursive: true, force: true });
+    return installExitCode;
+  }
+  const installedVersion = installedPackageVersion(tempDir);
+  if (!installedVersion) {
+    process.stderr.write(
+      "Updated Deepline SDK package did not report a version.\n"
+    );
+    rmSync3(tempDir, { recursive: true, force: true });
+    return 1;
+  }
+  const finalDir = join15(versionsDir, installedVersion);
+  const finalEntryPath = entryPathInVersionDir(finalDir);
+  if (existsSync12(finalEntryPath)) {
+    rmSync3(tempDir, { recursive: true, force: true });
+  } else {
+    rmSync3(finalDir, { recursive: true, force: true });
+    try {
+      renameSync(tempDir, finalDir);
+    } catch (error) {
+      rmSync3(tempDir, { recursive: true, force: true });
+      process.stderr.write(
+        `Failed to publish Deepline SDK sidecar update: ${error.message}
+`
+      );
+      return 1;
+    }
+  }
+  if (!existsSync12(finalEntryPath)) {
+    process.stderr.write(
+      `Updated Deepline SDK CLI entrypoint missing: ${finalEntryPath}
+`
+    );
     return 1;
   }
-  return runCommand(plan.command, plan.args);
+  writeSidecarLauncher({
+    path: plan.sidecarPath,
+    hostUrl: plan.hostUrl,
+    scope: plan.scope,
+    nodeBin: plan.nodeBin,
+    entryPath: finalEntryPath
+  });
+  writeFileSync13(
+    join15(plan.stateDir, ".version"),
+    `${installedVersion}
+`,
+    "utf8"
+  );
+  writeFileSync13(
+    join15(plan.stateDir, ".install-method"),
+    "python-sidecar\n",
+    "utf8"
+  );
+  writeFileSync13(
+    join15(plan.stateDir, ".command-path"),
+    `${plan.sidecarPath}
+`,
+    "utf8"
+  );
+  writeFileSync13(join15(plan.stateDir, ".runner"), "node\n", "utf8");
+  writeFileSync13(join15(plan.stateDir, ".node-bin"), `${plan.nodeBin}
+`, "utf8");
+  writeFileSync13(
+    join15(plan.stateDir, ".entry-path"),
+    `${finalEntryPath}
+`,
+    "utf8"
+  );
+  return 0;
+}
+async function runUpdatePlan(plan) {
+  if (plan.kind === "npm-global") {
+    return runCommand(plan.command, plan.args);
+  }
+  if (plan.kind === "python-sidecar") {
+    return runPythonSidecarUpdatePlan(plan);
+  }
+  return 1;
 }
 async function handleUpdate(options) {
   const plan = resolveUpdatePlan();
@@ -22468,6 +22728,9 @@ async function handleUpdate(options) {
         lines: plan.kind === "source" ? [
           "This Deepline CLI is running from SDK source, so it cannot safely update itself like an npm global.",
           `Update the backing checkout with: ${plan.manualCommand}`
+        ] : plan.kind === "python-sidecar" ? [
+          "This Deepline CLI is running from the Python-managed SDK sidecar.",
+          "Updating will refresh that sidecar, not a global npm binary."
         ] : [`Updating Deepline SDK/CLI with: ${plan.manualCommand}`]
       }
     ]
@@ -22497,7 +22760,7 @@ async function handleUpdate(options) {
     `Updating Deepline SDK/CLI with: ${plan.manualCommand}
 `
   );
-  return runCommand(plan.command, plan.args);
+  return runUpdatePlan(plan);
 }
 function registerUpdateCommand(program) {
   program.command("update").description("Update the Deepline SDK/CLI.").addHelpText(
@@ -22505,6 +22768,8 @@ function registerUpdateCommand(program) {
     `
 Notes:
   For the published npm CLI, this runs npm install -g deepline@latest.
+  For Python-managed SDK sidecars, this refreshes the sidecar that launched
+  the current SDK CLI instead of changing a global npm binary.
   For repo-backed SDK wrappers such as cli-env sdk-prod or sdk-worktree, this
   prints the exact git command to update the checkout that provides the CLI.
 
@@ -22718,10 +22983,13 @@ function isCi() {
 function shouldSkipSelfUpdate() {
   return envTruthy("DEEPLINE_SKIP_SELF_UPDATE") || envTruthy("DEEPLINE_NO_AUTO_UPDATE") || envTruthy("DEEPLINE_SKIP_SDK_AUTO_UPDATE") || envTruthy("DEEPLINE_DISABLE_AUTO_UPDATE") || isCi();
 }
-function relaunchCurrentCommand() {
+function relaunchCurrentCommand(plan) {
   return new Promise((resolve16) => {
-    const child = spawn3(process.execPath, process.argv.slice(1), {
+    const command = plan.kind === "python-sidecar" ? plan.sidecarPath : process.execPath;
+    const args = plan.kind === "python-sidecar" ? process.argv.slice(2) : process.argv.slice(1);
+    const child = spawn3(command, args, {
       stdio: "inherit",
+      shell: process.platform === "win32",
       env: {
         ...process.env,
         DEEPLINE_NO_AUTO_UPDATE: "1"
@@ -22742,8 +23010,9 @@ async function maybeAutoUpdateAndRelaunch(response) {
   if (!response || !autoUpdate?.should_auto_update || shouldSkipSelfUpdate()) {
     return false;
   }
-  const plan = resolveUpdatePlan();
-  if (plan.kind !== "npm-global") {
+  const packageSpec = response.latest ? `deepline@${response.latest}` : void 0;
+  const plan = resolveUpdatePlan({ packageSpec });
+  if (plan.kind === "source") {
     return false;
   }
   const label = autoUpdate.reason === "rollback_forced" ? "has a server rollback pending and needs the latest rollback-aware CLI" : autoUpdate.required ? "requires an update" : "is more than the supported auto-update lag behind";
@@ -22751,7 +23020,7 @@ async function maybeAutoUpdateAndRelaunch(response) {
     `Deepline SDK/CLI ${label}; running ${plan.manualCommand}
 `
   );
-  const updateExitCode = await runNpmGlobalUpdatePlan(plan);
+  const updateExitCode = await runUpdatePlan(plan);
   if (updateExitCode !== 0) {
     if (autoUpdate.required) {
       throw new Error(
@@ -22765,15 +23034,15 @@ async function maybeAutoUpdateAndRelaunch(response) {
     return false;
   }
   process.stderr.write("Deepline SDK/CLI updated; rerunning command.\n");
-  const exitCode = await relaunchCurrentCommand();
+  const exitCode = await relaunchCurrentCommand(plan);
   process.exit(exitCode);
   return true;
 }
 
 // src/cli/skills-sync.ts
 import { spawn as spawn4, spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync13, mkdirSync as mkdirSync8, readFileSync as readFileSync11, writeFileSync as writeFileSync13 } from "fs";
-import { homedir as homedir9 } from "os";
+import { existsSync as existsSync13, mkdirSync as mkdirSync9, readFileSync as readFileSync12, writeFileSync as writeFileSync14 } from "fs";
+import { homedir as homedir10 } from "os";
 import { dirname as dirname14, join as join16 } from "path";
 var CHECK_TIMEOUT_MS2 = 3e3;
 var SDK_PLAY_SKILL_NAME = "deepline-plays";
@@ -22794,13 +23063,13 @@ function readPluginSkillsVersion() {
   const dir = activePluginSkillsDir();
   if (!dir) return "";
   try {
-    return readFileSync11(join16(dir, ".version"), "utf-8").trim();
+    return readFileSync12(join16(dir, ".version"), "utf-8").trim();
   } catch {
     return "";
   }
 }
 function sdkSkillsVersionPath(baseUrl) {
-  const home = process.env.HOME?.trim() || homedir9();
+  const home = process.env.HOME?.trim() || homedir10();
   return join16(
     home,
     ".local",
@@ -22816,15 +23085,15 @@ function readLocalSkillsVersion(baseUrl) {
   const path = sdkSkillsVersionPath(baseUrl);
   if (!existsSync13(path)) return "";
   try {
-    return readFileSync11(path, "utf-8").trim();
+    return readFileSync12(path, "utf-8").trim();
   } catch {
     return "";
   }
 }
 function writeLocalSkillsVersion(baseUrl, version) {
   const path = sdkSkillsVersionPath(baseUrl);
-  mkdirSync8(dirname14(path), { recursive: true });
-  writeFileSync13(path, `${version}
+  mkdirSync9(dirname14(path), { recursive: true });
+  writeFileSync14(path, `${version}
 `, "utf-8");
 }
 function sortedUniqueSkillNames(names) {

package/dist/index.js

@@ -274,10 +274,10 @@ var SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: "0.1.112",
+  version: "0.1.114",
   apiContract: "2026-06-dataset-column-cell-stale-hard-cutover",
   supportPolicy: {
-    latest: "0.1.112",
+    latest: "0.1.114",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [

package/dist/index.mjs

@@ -196,10 +196,10 @@ var SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: "0.1.112",
+  version: "0.1.114",
   apiContract: "2026-06-dataset-column-cell-stale-hard-cutover",
   supportPolicy: {
-    latest: "0.1.112",
+    latest: "0.1.114",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [

package/dist/repo/sdk/src/release.ts

@@ -99,10 +99,10 @@ export const SDK_RELEASE = {
   // skill on the sdk sync surface, and the people-search-to-email prebuilt.
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
-  version: '0.1.112',
+  version: '0.1.114',
   apiContract: '2026-06-dataset-column-cell-stale-hard-cutover',
   supportPolicy: {
-    latest: '0.1.112',
+    latest: '0.1.114',
     minimumSupported: '0.1.53',
     deprecatedBelow: '0.1.53',
     commandMinimumSupported: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.1.112",
+  "version": "0.1.114",
   "description": "Deepline SDK + CLI — B2B data enrichment powered by durable cloud execution",
   "license": "MIT",
   "repository": {