deepline 0.1.129 → 0.1.131

package/dist/cli/index.js

@@ -183,7 +183,7 @@ configureProxyFromEnv();
 // src/cli/index.ts
 var import_promises5 = require("fs/promises");
 var import_node_path19 = require("path");
-var import_node_os15 = require("os");
+var import_node_os14 = require("os");
 var import_commander3 = require("commander");
 
 // src/config.ts
@@ -310,6 +310,15 @@ function sdkCliConfigDir(baseUrl) {
   const home = process.env.HOME?.trim() || (0, import_node_os.homedir)();
   return (0, import_node_path.join)(home, ".local", "deepline", baseUrlSlug(baseUrl || PROD_URL));
 }
+function sdkCliStateDirPath(baseUrl, homeDir2 = process.env.HOME?.trim() || (0, import_node_os.homedir)()) {
+  return (0, import_node_path.join)(
+    homeDir2,
+    ".local",
+    "deepline",
+    baseUrlSlug(baseUrl || PROD_URL),
+    "sdk-cli"
+  );
+}
 function sdkCliEnvFilePath(baseUrl) {
   return (0, import_node_path.join)(sdkCliConfigDir(baseUrl), ".env");
 }
@@ -404,10 +413,10 @@ var SDK_RELEASE = {
   // 0.1.108 ships explicit dataset column/tool recompute policy and removes
   // the SDK enrich generator's one-second stale policy.
   // 0.1.110 ships authored V2 prebuilts and required top-level play descriptions.
-  version: "0.1.129",
+  version: "0.1.131",
   apiContract: "2026-06-dataset-column-cell-stale-hard-cutover",
   supportPolicy: {
-    latest: "0.1.129",
+    latest: "0.1.131",
     minimumSupported: "0.1.53",
     deprecatedBelow: "0.1.53",
     commandMinimumSupported: [
@@ -557,6 +566,10 @@ var HttpClient = class {
     if (explicit) return explicit;
     try {
       const versionPath = (0, import_node_path2.join)(
+        sdkCliStateDirPath(this.config.baseUrl),
+        "skills-version"
+      );
+      const legacyVersionPath = (0, import_node_path2.join)(
         process.env.HOME?.trim() || (0, import_node_os3.homedir)(),
         ".local",
         "deepline",
@@ -564,8 +577,9 @@ var HttpClient = class {
         "sdk-skills",
         ".version"
       );
-      if (!(0, import_node_fs2.existsSync)(versionPath)) return null;
-      return this.cleanDiagnosticHeader((0, import_node_fs2.readFileSync)(versionPath, "utf-8"));
+      const resolvedPath = (0, import_node_fs2.existsSync)(versionPath) ? versionPath : legacyVersionPath;
+      if (!(0, import_node_fs2.existsSync)(resolvedPath)) return null;
+      return this.cleanDiagnosticHeader((0, import_node_fs2.readFileSync)(resolvedPath, "utf-8"));
     } catch {
       return null;
     }
@@ -3666,15 +3680,27 @@ var import_node_fs3 = require("fs");
 var import_node_os4 = require("os");
 var import_node_path3 = require("path");
 var CHECK_TIMEOUT_MS = 2e3;
-var COMPAT_CACHE_TTL_MS = 5 * 60 * 1e3;
+var SDK_COMPATIBILITY_CACHE_TTL_MS = 5 * 60 * 1e3;
 function shouldSkipCompatibilityCheck() {
   const value = process.env.DEEPLINE_SKIP_SDK_COMPAT_CHECK?.trim().toLowerCase();
   return value === "1" || value === "true" || value === "yes";
 }
-function compatibilityCachePath() {
-  return (0, import_node_path3.join)((0, import_node_os4.homedir)(), ".cache", "deepline", "sdk-compat-cache.json");
+function sdkCompatibilityCachePath(baseUrl, homeDir2 = (0, import_node_os4.homedir)()) {
+  return (0, import_node_path3.join)(sdkCliStateDirPath(baseUrl, homeDir2), "compat-cache.json");
 }
-function compatibilityCacheKey(baseUrl, command) {
+function legacySdkCompatibilityCachePath(homeDir2 = (0, import_node_os4.homedir)()) {
+  return (0, import_node_path3.join)(homeDir2, ".cache", "deepline", "sdk-compat-cache.json");
+}
+function compatibilityCacheKey(baseUrl, command, skillsVersion) {
+  return JSON.stringify({
+    baseUrl: baseUrl.replace(/\/$/, ""),
+    version: SDK_VERSION,
+    apiContract: SDK_API_CONTRACT,
+    command: command?.trim() || null,
+    skillsVersion: skillsVersion ?? null
+  });
+}
+function legacyCompatibilityCacheKey(baseUrl, command) {
   return JSON.stringify({
     baseUrl: baseUrl.replace(/\/$/, ""),
     version: SDK_VERSION,
@@ -3682,15 +3708,20 @@ function compatibilityCacheKey(baseUrl, command) {
     command: command?.trim() || null
   });
 }
-function readCachedCompatibility(baseUrl, command) {
+function readCachedCompatibility(baseUrl, command, skillsVersion) {
   try {
-    const path = compatibilityCachePath();
-    if (!(0, import_node_fs3.existsSync)(path)) {
+    const path = sdkCompatibilityCachePath(baseUrl);
+    const legacyPath = legacySdkCompatibilityCachePath();
+    const useLegacyCache = !(0, import_node_fs3.existsSync)(path) && (0, import_node_fs3.existsSync)(legacyPath);
+    const cachePath = useLegacyCache ? legacyPath : path;
+    if (!(0, import_node_fs3.existsSync)(cachePath)) {
       return null;
     }
-    const parsed = JSON.parse((0, import_node_fs3.readFileSync)(path, "utf8"));
-    const entry = parsed.entries?.[compatibilityCacheKey(baseUrl, command)];
-    if (!entry || Date.now() - entry.savedAt > COMPAT_CACHE_TTL_MS) {
+    const parsed = JSON.parse(
+      (0, import_node_fs3.readFileSync)(cachePath, "utf8")
+    );
+    const entry = parsed.entries?.[compatibilityCacheKey(baseUrl, command, skillsVersion)] ?? (useLegacyCache ? parsed.entries?.[legacyCompatibilityCacheKey(baseUrl, command)] : void 0);
+    if (!entry || Date.now() - entry.savedAt > SDK_COMPATIBILITY_CACHE_TTL_MS) {
       return null;
     }
     return entry.response;
@@ -3698,12 +3729,12 @@ function readCachedCompatibility(baseUrl, command) {
     return null;
   }
 }
-function writeCachedCompatibility(baseUrl, command, response) {
+function writeCachedCompatibility(baseUrl, command, skillsVersion, response) {
   try {
-    const path = compatibilityCachePath();
+    const path = sdkCompatibilityCachePath(baseUrl);
     const existing = (0, import_node_fs3.existsSync)(path) ? JSON.parse((0, import_node_fs3.readFileSync)(path, "utf8")) : {};
     const entries = existing.entries ?? {};
-    entries[compatibilityCacheKey(baseUrl, command)] = {
+    entries[compatibilityCacheKey(baseUrl, command, skillsVersion)] = {
       savedAt: Date.now(),
       response
     };
@@ -3725,6 +3756,9 @@ async function checkSdkCompatibility(baseUrl, options = {}) {
     if (options.command?.trim()) {
       url.searchParams.set("command", options.command.trim());
     }
+    if (options.skillsVersion !== void 0) {
+      url.searchParams.set("skills_version", options.skillsVersion ?? "");
+    }
     const response = await fetch(url, {
       method: "GET",
       headers: {
@@ -3736,12 +3770,21 @@ async function checkSdkCompatibility(baseUrl, options = {}) {
     });
     const data = await response.json().catch(() => null);
     if (data) {
-      writeCachedCompatibility(baseUrl, options.command, data);
+      writeCachedCompatibility(
+        baseUrl,
+        options.command,
+        options.skillsVersion,
+        data
+      );
     }
     return { response: data, error: null };
   } catch (error) {
-    const cached = readCachedCompatibility(baseUrl, options.command);
-    if (cached?.ok === false || cached?.status === "unsupported") {
+    const cached = readCachedCompatibility(
+      baseUrl,
+      options.command,
+      options.skillsVersion
+    );
+    if (cached) {
       return { response: cached, error: null };
     }
     return {
@@ -3771,6 +3814,7 @@ var import_node_os6 = require("os");
 var import_node_path5 = require("path");
 
 // src/cli/utils.ts
+var import_node_crypto = require("crypto");
 var import_node_fs4 = require("fs");
 var import_promises = require("fs/promises");
 var import_node_os5 = require("os");
@@ -3779,6 +3823,7 @@ var childProcess = __toESM(require("child_process"));
 var import_sync = require("csv-parse/sync");
 var import_sync2 = require("csv-stringify/sync");
 var BROWSER_OPEN_COOLDOWN_MS = 3e4;
+var SAME_URL_BROWSER_OPEN_COOLDOWN_MS = 5 * 6e4;
 var defaultBrowserCommandRunner = childProcess;
 function getAuthedHttpClient() {
   const config = resolveConfig();
@@ -3791,25 +3836,37 @@ async function writeOutputFile(filename, content) {
   await (0, import_promises.writeFile)(fullPath, content, "utf-8");
   return fullPath;
 }
-function browserOpenStateFile() {
-  const homeDir2 = process.env.HOME || (0, import_node_os5.homedir)();
-  return (0, import_node_path4.join)(
-    homeDir2,
-    ".local",
-    "deepline",
-    "runtime",
-    "state",
-    "browser-open.json"
-  );
+function stableOsUserId() {
+  try {
+    const info = (0, import_node_os5.userInfo)();
+    if (typeof info.uid === "number") return `uid-${info.uid}`;
+    if (info.username) return `user-${info.username}`;
+  } catch {
+  }
+  return "unknown-user";
+}
+function defaultBrowserOpenStateDir() {
+  return (0, import_node_path4.join)((0, import_node_os5.tmpdir)(), `deepline-${stableOsUserId()}`, "runtime", "state");
+}
+function browserOpenStateFile(stateDir = defaultBrowserOpenStateDir()) {
+  return (0, import_node_path4.join)(stateDir, "browser-open.json");
+}
+function normalizeBrowserOpenTarget(raw) {
+  return String(raw || "").trim();
 }
-function claimBrowserOpen(now = Date.now()) {
-  const statePath = browserOpenStateFile();
+function browserOpenTargetKey(raw) {
+  const normalized = normalizeBrowserOpenTarget(raw);
+  return normalized ? (0, import_node_crypto.createHash)("sha256").update(normalized).digest("hex") : "";
+}
+function claimBrowserOpen(now = Date.now(), stateDir, targetUrl) {
+  const statePath = browserOpenStateFile(stateDir);
   const lockPath = `${statePath}.lock`;
+  const targetKey = browserOpenTargetKey(targetUrl);
   let locked = false;
   try {
-    (0, import_node_fs4.mkdirSync)((0, import_node_path4.dirname)(statePath), { recursive: true });
+    (0, import_node_fs4.mkdirSync)((0, import_node_path4.dirname)(statePath), { recursive: true, mode: 448 });
     try {
-      (0, import_node_fs4.mkdirSync)(lockPath);
+      (0, import_node_fs4.mkdirSync)(lockPath, { mode: 448 });
       locked = true;
     } catch {
       return false;
@@ -3821,14 +3878,24 @@ function claimBrowserOpen(now = Date.now()) {
       if (typeof value === "number" && Number.isFinite(value)) {
         lastOpenedAt = value;
       }
+      const targetValue = payload.targetKey ?? payload.target_key ?? payload.targetHash ?? payload.target_hash;
+      const lastTargetKey = typeof targetValue === "string" ? targetValue.trim() : "";
+      const cooldownMs = targetKey && targetKey === lastTargetKey ? SAME_URL_BROWSER_OPEN_COOLDOWN_MS : BROWSER_OPEN_COOLDOWN_MS;
+      if (lastOpenedAt > now) {
+        lastOpenedAt = 0;
+      }
+      if (now - lastOpenedAt < cooldownMs) {
+        return false;
+      }
     }
-    if (lastOpenedAt > now) {
-      lastOpenedAt = 0;
-    }
-    if (now - lastOpenedAt < BROWSER_OPEN_COOLDOWN_MS) {
-      return false;
-    }
-    (0, import_node_fs4.writeFileSync)(statePath, JSON.stringify({ lastOpenedAt: now }), "utf-8");
+    (0, import_node_fs4.writeFileSync)(
+      statePath,
+      JSON.stringify({
+        lastOpenedAt: now,
+        ...targetKey ? { targetKey } : {}
+      }),
+      { encoding: "utf-8", mode: 384 }
+    );
     return true;
   } catch {
     return true;
@@ -3860,6 +3927,30 @@ function browserAppNameFromBundleId(bundleId) {
   };
   return names[bundleId.toLowerCase()] ?? "";
 }
+function currentOsUsername() {
+  try {
+    return (0, import_node_os5.userInfo)().username || "";
+  } catch {
+    return "";
+  }
+}
+function readMacosUserHome(runner = defaultBrowserCommandRunner) {
+  const username = currentOsUsername();
+  if (process.platform === "darwin" && username) {
+    try {
+      const output2 = runner.execFileSync(
+        "dscl",
+        [".", "-read", `/Users/${username}`, "NFSHomeDirectory"],
+        { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }
+      );
+      const match = String(output2).match(/NFSHomeDirectory:\s*(.+)\s*$/m);
+      const home = match?.[1]?.trim();
+      if (home) return home;
+    } catch {
+    }
+  }
+  return (0, import_node_os5.homedir)();
+}
 function readDefaultMacBrowserBundleId(runner = defaultBrowserCommandRunner) {
   try {
     const output2 = runner.execFileSync(
@@ -3869,7 +3960,7 @@ function readDefaultMacBrowserBundleId(runner = defaultBrowserCommandRunner) {
         "json",
         "-o",
         "-",
-        `${(0, import_node_os5.homedir)()}/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist`
+        `${readMacosUserHome(runner)}/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist`
       ],
       { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }
     );
@@ -4016,7 +4107,7 @@ function openInBrowser(url) {
     if (browserOpeningDisabled()) return;
     const targetUrl = String(url || "").trim();
     if (!targetUrl) return;
-    if (!claimBrowserOpen()) return;
+    if (!claimBrowserOpen(Date.now(), void 0, targetUrl)) return;
     const allowFocus = true;
     if (process.platform === "darwin") {
       openUrlMacos(targetUrl, allowFocus);
@@ -4118,12 +4209,15 @@ function flattenObjectColumns(row) {
       const hasMatchedEnvelope = Object.prototype.hasOwnProperty.call(record, "matched_result") || Object.prototype.hasOwnProperty.call(record, "matchedResult");
       if (hasMatchedEnvelope) {
         flattened[key] = JSON.stringify(record);
+        continue;
       } else {
         const failureMessage = failureMessageFromRecord(record);
         if (failureMessage) {
           flattened[key] = failureMessage;
+          continue;
         } else if (Object.prototype.hasOwnProperty.call(record, "result")) {
           flattened[key] = JSON.stringify(record);
+          continue;
         }
       }
       for (const [nestedKey, nestedValue] of Object.entries(record)) {
@@ -6861,7 +6955,7 @@ var import_node_os7 = require("os");
 var import_node_path11 = require("path");
 
 // src/cli/commands/play.ts
-var import_node_crypto = require("crypto");
+var import_node_crypto2 = require("crypto");
 var import_node_fs9 = require("fs");
 var import_node_path10 = require("path");
 var import_sync5 = require("csv-parse/sync");
@@ -9479,7 +9573,7 @@ function stageFile(logicalPath, absolutePath) {
   return {
     logicalPath,
     contentBase64: buffer.toString("base64"),
-    contentHash: (0, import_node_crypto.createHash)("sha256").update(buffer).digest("hex"),
+    contentHash: (0, import_node_crypto2.createHash)("sha256").update(buffer).digest("hex"),
     contentType: absolutePath.toLowerCase().endsWith(".csv") ? "text/csv" : absolutePath.toLowerCase().endsWith(".json") ? "application/json" : "application/octet-stream",
     bytes: buffer.byteLength
   };
@@ -14834,9 +14928,7 @@ function renderExecuteStep(command, options = {
   const extractJs = command.extract_js ? `({ row, result, data, raw, pick, extract, extractList, target, get }) => { const input = row; const context = row;
 ${indent(renderJavascriptBody(command.extract_js), 6)}
     }` : "null";
-  const runIfJs = command.run_if_js ? `(row) => { const input = row; const context = row;
-${indent(renderJavascriptBody(command.run_if_js), 6)}
-    }` : "null";
+  const runIfJs = options.nativeRunIf ? "null" : renderRunIfFunction(command) ?? "null";
   const description = command.description ? `,
       description: ${stringLiteral(command.description)}` : "";
   const force = options.force ? `,
@@ -14861,13 +14953,35 @@ ${indent(renderJavascriptBody(command.run_if_js), 6)}
     `}`
   ].join("\n");
 }
+function renderRunIfFunction(command) {
+  return command.run_if_js ? `(row) => { const input = row; const context = row;
+${indent(renderJavascriptBody(command.run_if_js), 6)}
+    }` : null;
+}
+function renderColumnRunIfFunction(command) {
+  if (!command.run_if_js) {
+    return null;
+  }
+  if (command.play) {
+    return `(__dlRawRow) => { const row = __dlPrepareEnrichRow(__dlRawRow, [${stringLiteral(command.alias)}]); const input = row; const context = row;
+${indent(renderJavascriptBody(command.run_if_js), 6)}
+    }`;
+  }
+  return renderRunIfFunction(command);
+}
+function renderCombinedRunIfFunction(precheck, runIfSource) {
+  if (!runIfSource) {
+    return null;
+  }
+  return precheck ? `(row) => { if (${precheck}) return false; return (${runIfSource})(row); }` : runIfSource;
+}
 function renderIdiomaticExecuteStep(command, options) {
   const callId = stringLiteral(commandCallId(command));
   const tool = stringLiteral(command.tool);
   const input2 = renderToolPayloadExpression(command.payload ?? {});
   const getter = getterFromLegacyExtractJs(command.extract_js, command.alias);
   const extraction = getter ? `${renderExtractedValueGetterExpression("result", getter)} ?? null` : "result";
-  const runIfLines = command.run_if_js ? [
+  const runIfLines = command.run_if_js && !options.nativeRunIf ? [
     `  if (`,
     `    !((row: Record<string, any>) => {`,
     `      const input = row;`,
@@ -14901,10 +15015,8 @@ function renderPlayStep(command, options) {
   const callId = stringLiteral(commandCallId(command));
   const playRef = stringLiteral(command.play?.ref ?? command.tool);
   const payload = stableJson(command.payload ?? {});
-  const runIfJs = command.run_if_js ? `(row) => { const input = row; const context = row;
-${indent(renderJavascriptBody(command.run_if_js), 6)}
-    }` : "null";
-  const runIfLines = command.run_if_js ? [
+  const runIfJs = renderRunIfFunction(command) ?? "null";
+  const runIfLines = command.run_if_js && !options.nativeRunIf ? [
     `  const __dlRunIf = ${runIfJs};`,
     `  if (!__dlRunIf(templateRow)) return null;`
   ] : [];
@@ -14928,7 +15040,7 @@ ${indent(renderJavascriptBody(command.run_if_js), 6)}
 }
 function renderInlineJavascriptStep(command, options) {
   const code = typeof command.payload?.code === "string" ? command.payload.code : "return null;";
-  const runIfLines = command.run_if_js ? [
+  const runIfLines = command.run_if_js && !options.nativeRunIf ? [
     `  if (!((row: Record<string, any>) => { const input = row; const context = row;`,
     indent(renderJavascriptBody(command.run_if_js), 4),
     `  })(row as Record<string, any>)) return null;`
@@ -14958,7 +15070,8 @@ function renderColumnStep(alias, resolverSource, options = {}) {
   const resolver = indent(resolverSource, 8);
   const optionFields = [
     ...options.recompute === true ? ["recompute: true"] : [],
-    ...options.recomputeOnError === true ? ["recomputeOnError: true"] : []
+    ...options.recomputeOnError === true ? ["recomputeOnError: true"] : [],
+    ...options.runIfSource ? [`runIf: ${options.runIfSource}`] : []
   ];
   const optionSource = optionFields.length > 0 ? `{ ${optionFields.join(", ")} }` : null;
   return [
@@ -15062,17 +15175,27 @@ function renderWaterfallColumns(command, forceAliases, inlineRunJavascript, idio
     }
     const priorAliases = activeChildren.slice(0, stepIndex).map((prior) => prior.alias);
     const force = forceAliases.has(normalizeAlias(nested.alias));
+    const precheck = priorAliases.length > 0 ? `__dlWaterfallSatisfied(row, ${stableJson(priorAliases)}, ${minResults})` : void 0;
+    const runIfSource = renderCombinedRunIfFunction(
+      precheck,
+      renderColumnRunIfFunction(nested)
+    );
     return renderColumnStep(
       nested.alias,
       renderExecuteStep(nested, {
         force,
-        precheck: priorAliases.length > 0 ? `__dlWaterfallSatisfied(row, ${stableJson(priorAliases)}, ${minResults})` : void 0,
+        precheck,
         legacyEnvelope: Boolean(nested.extract_js),
         inlineRunJavascript,
         idiomaticGetters,
-        waterfallSoftFail: true
+        waterfallSoftFail: true,
+        nativeRunIf: Boolean(runIfSource)
       }),
-      { recompute: force, recomputeOnError: true }
+      {
+        recompute: force,
+        recomputeOnError: true,
+        runIfSource
+      }
     );
   }).filter((line) => line !== null);
   const aliases = activeChildren.map((nested) => nested.alias);
@@ -15123,15 +15246,21 @@ function compileEnrichConfigToPlaySource(config, options = {}) {
       return;
     }
     const force = forceAliases.has(normalizeAlias(command.alias));
+    const runIfSource = renderColumnRunIfFunction(command);
     columnSteps.push(
       renderColumnStep(
         command.alias,
         renderExecuteStep(command, {
           force,
           inlineRunJavascript,
-          idiomaticGetters
+          idiomaticGetters,
+          nativeRunIf: Boolean(runIfSource)
         }),
-        { recompute: force, recomputeOnError: true }
+        {
+          recompute: force,
+          recomputeOnError: true,
+          runIfSource
+        }
       )
     );
   });
@@ -16993,7 +17122,7 @@ async function fetchBackingRowsForCsvExport(input2) {
 function mergeRowsForCsvExport(enrichedRows, options) {
   const rows = dataExportRows(normalizeEnrichRowsForCsvExport(enrichedRows));
   const range = options?.rows;
-  if (range?.rowStart === null || range?.rowStart === void 0) {
+  if (!options?.inPlace && (range?.rowStart === null || range?.rowStart === void 0)) {
     return { rows, preferredColumns: [] };
   }
   if (!options?.sourceCsvPath) {
@@ -17004,9 +17133,15 @@ function mergeRowsForCsvExport(enrichedRows, options) {
   const baseRows = parsedBaseRows.map(
     (row) => ({ ...row })
   );
-  const start = Math.max(0, range.rowStart);
+  const start = Math.max(0, range?.rowStart ?? 0);
   const maxEnd = Math.max(start, baseRows.length - 1);
-  const inclusiveEnd = range.rowEnd === null ? maxEnd : Math.min(maxEnd, range.rowEnd);
+  const inclusiveEnd = range?.rowEnd === null || range?.rowEnd === void 0 ? maxEnd : Math.min(maxEnd, range.rowEnd);
+  const expectedSelectedRows = baseRows.length === 0 ? 0 : Math.max(0, inclusiveEnd - start + 1);
+  if (rows.length < expectedSelectedRows) {
+    throw new Error(
+      `Refusing to write a partial in-place CSV export: the run returned ${rows.length} row(s) for ${expectedSelectedRows} selected source row(s).`
+    );
+  }
   const merged = [...baseRows];
   let selectedIndex = 0;
   for (let rowIndex = start; rowIndex <= inclusiveEnd; rowIndex += 1) {
@@ -17372,7 +17507,8 @@ function registerEnrichCommand(program) {
         client: client2,
         config,
         sourceCsvPath,
-        rows
+        rows,
+        inPlace: Boolean(options.inPlace)
       }) : null;
       const rowsForFailureReport = exportResult?.enrichedDataRows ?? extractCanonicalRowsInfo(status)?.rows ?? [];
       if (options.json) {
@@ -17490,7 +17626,7 @@ var import_node_fs10 = require("fs");
 var import_node_os8 = require("os");
 var import_node_path12 = require("path");
 var import_node_zlib = require("zlib");
-var import_node_crypto2 = require("crypto");
+var import_node_crypto3 = require("crypto");
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var UUID_IN_TEXT_RE = /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i;
 var MAX_SESSION_UPLOAD_BYTES = 35e5;
@@ -17852,7 +17988,7 @@ async function uploadPayload(path, payload) {
   return await http.post(path, payload);
 }
 async function uploadChunkedSessions(sessions, options) {
-  const uploadId = (0, import_node_crypto2.randomUUID)();
+  const uploadId = (0, import_node_crypto3.randomUUID)();
   for (const session of sessions) {
     const bytes = Buffer.from(session.encodedContent, "base64");
     const chunks = [];
@@ -18497,7 +18633,7 @@ Examples:
 
 // src/cli/commands/quickstart.ts
 var import_node_child_process = require("child_process");
-var import_node_crypto3 = require("crypto");
+var import_node_crypto4 = require("crypto");
 var import_node_http = require("http");
 var EXIT_OK2 = 0;
 var EXIT_AUTH2 = 1;
@@ -18626,7 +18762,7 @@ async function handleQuickstart(options) {
       return EXIT_AUTH2;
     }
   }
-  const state = (0, import_node_crypto3.randomBytes)(32).toString("hex");
+  const state = (0, import_node_crypto4.randomBytes)(32).toString("hex");
   let resolveSelection;
   const selectionPromise = new Promise((resolve13) => {
     resolveSelection = resolve13;
@@ -20726,7 +20862,7 @@ var import_promises4 = require("fs/promises");
 var import_node_path16 = require("path");
 
 // src/cli/workflow-to-play.ts
-var import_node_crypto4 = require("crypto");
+var import_node_crypto5 = require("crypto");
 
 // ../shared_libs/plays/secret-guardrails.ts
 var SECRET_ENV_PATTERN = /\bprocess(?:\.env|\[['"]env['"]\])(?:\.|\[['"])([A-Z0-9_]*(?:API[_-]?KEY|TOKEN|SECRET|PASSWORD|PRIVATE[_-]?KEY|ACCESS[_-]?KEY)[A-Z0-9_]*)(?:['"]\])?/g;
@@ -20869,7 +21005,7 @@ function sanitizePlayNameSegment(value) {
 }
 function deriveWorkflowPlayName(workflowName) {
   const base = sanitizePlayNameSegment(workflowName) || "workflow";
-  const suffix = (0, import_node_crypto4.createHash)("sha256").update(workflowName).digest("hex").slice(0, 8);
+  const suffix = (0, import_node_crypto5.createHash)("sha256").update(workflowName).digest("hex").slice(0, 8);
   const reserved = suffix.length + 1;
   const allowedBase = Math.max(1, MAX_PLAY_NAME_LENGTH - reserved);
   let name = `${base.slice(0, allowedBase)}_${suffix}`;
@@ -21250,13 +21386,12 @@ Notes:
 // src/cli/commands/update.ts
 var import_node_child_process3 = require("child_process");
 var import_node_fs15 = require("fs");
-var import_node_os13 = require("os");
+var import_node_os12 = require("os");
 var import_node_path18 = require("path");
 
 // src/cli/skills-sync.ts
 var import_node_child_process2 = require("child_process");
 var import_node_fs14 = require("fs");
-var import_node_os12 = require("os");
 var import_node_path17 = require("path");
 
 // ../shared_libs/cli/install-commands.json
@@ -21388,20 +21523,15 @@ function readPluginSkillsVersion() {
   }
 }
 function sdkSkillsVersionPath(baseUrl) {
-  const home = process.env.HOME?.trim() || (0, import_node_os12.homedir)();
-  return (0, import_node_path17.join)(
-    home,
-    ".local",
-    "deepline",
-    baseUrlSlug(baseUrl),
-    "sdk-skills",
-    ".version"
-  );
+  return (0, import_node_path17.join)(sdkCliStateDirPath(baseUrl), "skills-version");
+}
+function legacySdkSkillsVersionPath(baseUrl) {
+  return (0, import_node_path17.join)((0, import_node_path17.dirname)(sdkCliStateDirPath(baseUrl)), "sdk-skills", ".version");
 }
-function readLocalSkillsVersion(baseUrl) {
+function readSdkSkillsLocalVersion(baseUrl) {
   const pluginVersion = readPluginSkillsVersion();
   if (pluginVersion) return pluginVersion;
-  const path = sdkSkillsVersionPath(baseUrl);
+  const path = (0, import_node_fs14.existsSync)(sdkSkillsVersionPath(baseUrl)) ? sdkSkillsVersionPath(baseUrl) : legacySdkSkillsVersionPath(baseUrl);
   if (!(0, import_node_fs14.existsSync)(path)) return "";
   try {
     return (0, import_node_fs14.readFileSync)(path, "utf-8").trim();
@@ -21611,15 +21741,18 @@ function writeSdkSkillsStatusLine(line) {
   process.stderr.write(`${line}
 `);
 }
-async function syncSdkSkillsIfNeeded(baseUrl) {
+async function syncSdkSkillsIfNeeded(baseUrl, options = {}) {
   if (attemptedSync || shouldSkipSkillsSync()) return;
   attemptedSync = true;
   const usingPluginSkills = Boolean(activePluginSkillsDir());
-  const localVersion = readLocalSkillsVersion(baseUrl);
-  const update = await fetchSkillsUpdate(baseUrl, localVersion);
   if (usingPluginSkills) {
     return;
   }
+  const localVersion = readSdkSkillsLocalVersion(baseUrl);
+  const update = options.update === void 0 ? await fetchSkillsUpdate(baseUrl, localVersion) : options.update ? {
+    needsUpdate: options.update.needs_update,
+    remoteVersion: options.update.remote.version
+  } : null;
   if (!update?.needsUpdate || !update.remoteVersion) {
     return;
   }
@@ -21737,7 +21870,7 @@ function inferNpmGlobalPrefixFromEntrypoint(entrypoint) {
 }
 function resolveUpdatePlan(options = {}) {
   const env = options.env ?? process.env;
-  const homeDir2 = options.homeDir ?? (0, import_node_os13.homedir)();
+  const homeDir2 = options.homeDir ?? (0, import_node_os12.homedir)();
   const entrypoint = options.entrypoint ?? (process.argv[1] ? (0, import_node_path18.resolve)(process.argv[1]) : "");
   const sourceRoot = entrypoint ? findRepoBackedSdkRoot((0, import_node_path18.dirname)(entrypoint)) : null;
   if (sourceRoot) {
@@ -21773,7 +21906,7 @@ function autoUpdateFailurePath(plan) {
     return (0, import_node_path18.join)(plan.stateDir, AUTO_UPDATE_FAILURE_FILE);
   }
   return (0, import_node_path18.join)(
-    (0, import_node_os13.homedir)(),
+    (0, import_node_os12.homedir)(),
     ".local",
     "deepline",
     "sdk-cli",
@@ -22273,7 +22406,7 @@ async function maybeAutoUpdateAndRelaunch(response) {
 }
 
 // src/cli/failure-reporting.ts
-var import_node_os14 = require("os");
+var import_node_os13 = require("os");
 var FAILURE_REPORT_DISABLE_ENV = "DEEPLINE_DISABLE_FAILURE_REPORTING";
 var REPORT_FAILURE_TIMEOUT_MS = 1e4;
 var MAX_FAILURE_TEXT_CHARS = 4e3;
@@ -22375,12 +22508,12 @@ function isNetworkFailure(error) {
 }
 function buildEnvironmentContext() {
   const context = {
-    os: (0, import_node_os14.platform)(),
-    os_release: (0, import_node_os14.release)(),
-    platform: `${(0, import_node_os14.platform)()}-${(0, import_node_os14.release)()}-${process.arch}`,
+    os: (0, import_node_os13.platform)(),
+    os_release: (0, import_node_os13.release)(),
+    platform: `${(0, import_node_os13.platform)()}-${(0, import_node_os13.release)()}-${process.arch}`,
     node_version: process.version,
     runtime: "Node.js",
-    hostname: (0, import_node_os14.hostname)(),
+    hostname: (0, import_node_os13.hostname)(),
     agent_runtime: detectAgentRuntime()
   };
   for (const key of ["CLAUDE_CODE_REMOTE", "DEEPLINE_PLUGIN_MODE"]) {
@@ -22570,7 +22703,7 @@ function topLevelCommandKnown(program, commandName) {
   );
 }
 async function runPlayRunnerHealthCheck() {
-  const dir = await (0, import_promises5.mkdtemp)((0, import_node_path19.join)((0, import_node_os15.tmpdir)(), "deepline-health-play-"));
+  const dir = await (0, import_promises5.mkdtemp)((0, import_node_path19.join)((0, import_node_os14.tmpdir)(), "deepline-health-play-"));
   const file = (0, import_node_path19.join)(dir, "health-check.play.ts");
   try {
     await (0, import_promises5.writeFile)(
@@ -22798,11 +22931,18 @@ Exit codes:
     }
     const baseUrl = autoDetectBaseUrl().replace(/\/$/, "");
     const compatibilityCommand = compatibilityCommandPath(actionCommand) || actionCommand.name();
+    const shouldDeferSkillsSync = shouldDeferSkillsSyncForCommand();
+    const skillsVersion = shouldDeferSkillsSync ? void 0 : readSdkSkillsLocalVersion(baseUrl);
     const compatibility = await traceCliSpan(
       "cli.sdk_compatibility",
-      { baseUrl, command: compatibilityCommand },
+      {
+        baseUrl,
+        command: compatibilityCommand,
+        skillsVersion: skillsVersion ?? null
+      },
       () => checkSdkCompatibility(baseUrl, {
-        command: compatibilityCommand
+        command: compatibilityCommand,
+        skillsVersion
       })
     );
     if (compatibility.error) {
@@ -22828,11 +22968,14 @@ Exit codes:
     if (printStartupPhase) {
       progress?.phase("checking sdk skills");
     }
-    if (!shouldDeferSkillsSyncForCommand()) {
+    if (!shouldDeferSkillsSync) {
+      const skillsUpdate = compatibility.response && Object.prototype.hasOwnProperty.call(compatibility.response, "skills") ? compatibility.response.skills ?? null : void 0;
       await traceCliSpan(
         "cli.sdk_skills_sync",
         { baseUrl },
-        () => syncSdkSkillsIfNeeded(baseUrl)
+        () => syncSdkSkillsIfNeeded(baseUrl, {
+          update: skillsUpdate
+        })
       );
     }
   });