deepline 0.2.19 → 0.2.21

package/dist/cli/index.js

@@ -186,7 +186,7 @@ configureProxyFromEnv();
 
 // src/cli/index.ts
 var import_promises8 = require("fs/promises");
-var import_node_path25 = require("path");
+var import_node_path26 = require("path");
 var import_node_os19 = require("os");
 var import_commander4 = require("commander");
 
@@ -1044,7 +1044,7 @@ var SDK_RELEASE = {
   // 0.2.0 makes Dataset Handles uniformly async-only after 0.1.320 briefly
   // exposed storage-dependent synchronous access. This deliberate minor
   // release keeps lazy paging semantics independent of row residency.
-  version: "0.2.19",
+  version: "0.2.21",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -1812,7 +1812,7 @@ function decodeSseFrame(frame) {
   return parsed;
 }
 function sleep(ms) {
-  return new Promise((resolve18) => setTimeout(resolve18, ms));
+  return new Promise((resolve19) => setTimeout(resolve19, ms));
 }
 function withCoworkNetworkHint(message) {
   if (!isCoworkLikeSandbox2() || message.includes(COWORK_NETWORK_HINT)) {
@@ -3114,14 +3114,14 @@ async function* observeRunEvents(options) {
   try {
     for (; ; ) {
       if (queue.length === 0) {
-        const waitForItem = new Promise((resolve18) => {
-          wake = resolve18;
+        const waitForItem = new Promise((resolve19) => {
+          wake = resolve19;
         });
         if (!sawFirstSnapshot) {
           const timedOut = await Promise.race([
             waitForItem.then(() => false),
             new Promise(
-              (resolve18) => setTimeout(() => resolve18(true), OBSERVE_BOOTSTRAP_TIMEOUT_MS)
+              (resolve19) => setTimeout(() => resolve19(true), OBSERVE_BOOTSTRAP_TIMEOUT_MS)
             )
           ]);
           if (timedOut && queue.length === 0) {
@@ -3431,7 +3431,7 @@ function parseEnvTestPolicyOverrides() {
   return normalizeTestPolicyOverrides(parsed, "DEEPLINE_TEST_POLICY_OVERRIDES");
 }
 function sleep2(ms) {
-  return new Promise((resolve18) => setTimeout(resolve18, ms));
+  return new Promise((resolve19) => setTimeout(resolve19, ms));
 }
 function isTransientCompileManifestError(error) {
   if (error instanceof DeeplineError && typeof error.statusCode === "number") {
@@ -6479,6 +6479,10 @@ function collectLocalEnvInfo() {
 function readCsvRows(csvPath) {
   const raw = (0, import_node_fs4.readFileSync)((0, import_node_path4.resolve)(csvPath), "utf-8");
   return (0, import_sync.parse)(raw, {
+    // `csv-parse` otherwise treats a BOM before an opening quote as a field
+    // value, then rejects the quote as invalid. A UTF-8 BOM is a valid file
+    // prefix and must not become part of the first column name either.
+    bom: true,
     columns: true,
     skip_empty_lines: true
   });
@@ -6961,7 +6965,7 @@ function buildCandidateUrls2(url) {
   }
 }
 function sleep4(ms) {
-  return new Promise((resolve18) => setTimeout(resolve18, ms));
+  return new Promise((resolve19) => setTimeout(resolve19, ms));
 }
 function printDeeplineLogo() {
   if (process.stdout.isTTY && (process.stdout.columns ?? 80) >= 70) {
@@ -15923,27 +15927,6 @@ var SECRET_ENV_PATTERN = /\bprocess(?:\.env|\[['"]env['"]\])(?:\.|\[['"])([A-Z0-
 var PRIVATE_KEY_PATTERN = /-----BEGIN (?:RSA |EC |OPENSSH |PGP )?PRIVATE KEY-----/;
 var BEARER_LITERAL_PATTERN = /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}/i;
 var ASSIGNMENT_SECRET_LITERAL_PATTERN = /\b(?:api[_-]?key|token|secret|password)\b\s*[:=]\s*['"][^'"]{12,}['"]/i;
-var HIGH_ENTROPY_LITERAL_PATTERN = /['"]([A-Za-z0-9+/=_-]{32,})['"]/g;
-var UUID_IDENTIFIER_PATTERN = /^((?:[A-Za-z0-9]+[-_])*)?([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/i;
-var BOOTSTRAP_RESOURCE_IDENTIFIER_PATTERN = /^bootstrap-[0-9a-f]{32}(?:\/[a-z0-9][a-z0-9_-]{0,127})?$/i;
-var SECRET_LABEL_PATTERN = /(?:^|[-_])(?:api|auth|access|secret|token|key|password|credential|bearer|sk|pk|live)(?:[-_]|$)/i;
-function shannonEntropy(value) {
-  const counts = /* @__PURE__ */ new Map();
-  for (const char of value) counts.set(char, (counts.get(char) ?? 0) + 1);
-  return [...counts.values()].reduce((entropy, count) => {
-    const p = count / value.length;
-    return entropy - p * Math.log2(p);
-  }, 0);
-}
-function isNonSecretUuidIdentifier(value) {
-  const match = UUID_IDENTIFIER_PATTERN.exec(value);
-  if (!match) return false;
-  const label = match[1] ?? "";
-  return !SECRET_LABEL_PATTERN.test(label);
-}
-function isNonSecretBootstrapResourceIdentifier(value) {
-  return BOOTSTRAP_RESOURCE_IDENTIFIER_PATTERN.test(value);
-}
 function collectInlineSecretFindings(sourceCode) {
   const findings = [];
   for (const match of sourceCode.matchAll(SECRET_ENV_PATTERN)) {
@@ -15955,15 +15938,6 @@ function collectInlineSecretFindings(sourceCode) {
   if (ASSIGNMENT_SECRET_LITERAL_PATTERN.test(sourceCode)) {
     findings.push("secret-looking assignment literal");
   }
-  for (const match of sourceCode.matchAll(HIGH_ENTROPY_LITERAL_PATTERN)) {
-    const literal = match[1] ?? "";
-    if (isNonSecretUuidIdentifier(literal)) continue;
-    if (isNonSecretBootstrapResourceIdentifier(literal)) continue;
-    if (literal.length >= 40 && shannonEntropy(literal) >= 4.2) {
-      findings.push("high-entropy string literal");
-      break;
-    }
-  }
   return [...new Set(findings)];
 }
 
@@ -17084,7 +17058,7 @@ function traceCliSync(phase, fields, run) {
   }
 }
 function sleep5(ms) {
-  return new Promise((resolve18) => setTimeout(resolve18, ms));
+  return new Promise((resolve19) => setTimeout(resolve19, ms));
 }
 function parseReferencedPlayTarget2(target) {
   const trimmed = target.trim();
@@ -25547,7 +25521,7 @@ function emitEnrichDebug(message) {
   );
 }
 function sleep6(ms) {
-  return new Promise((resolve18) => setTimeout(resolve18, ms));
+  return new Promise((resolve19) => setTimeout(resolve19, ms));
 }
 function enrichExportBackingRowsWaitMs() {
   const raw = process.env.DEEPLINE_ENRICH_EXPORT_BACKING_ROWS_WAIT_MS?.trim();
@@ -31712,7 +31686,7 @@ async function readHiddenLine(prompt, streams = {}) {
   }
   let value = "";
   inputStream.resume();
-  return await new Promise((resolve18, reject) => {
+  return await new Promise((resolve19, reject) => {
     let settled = false;
     const cleanup = () => {
       inputStream.off("data", onData);
@@ -31730,7 +31704,7 @@ async function readHiddenLine(prompt, streams = {}) {
       settled = true;
       outputStream.write("\n");
       cleanup();
-      resolve18(line);
+      resolve19(line);
     };
     const fail = (error) => {
       if (settled) return;
@@ -35178,9 +35152,9 @@ Notes:
 
 // src/cli/commands/update.ts
 var import_node_child_process3 = require("child_process");
-var import_node_fs19 = require("fs");
+var import_node_fs20 = require("fs");
 var import_node_os16 = require("os");
-var import_node_path22 = require("path");
+var import_node_path23 = require("path");
 
 // src/cli/commands/skills.ts
 var import_node_child_process2 = require("child_process");
@@ -35484,7 +35458,7 @@ function readSkillsInstallState(path) {
   }
 }
 function runProcess(command, args, cwd) {
-  return new Promise((resolve18, reject) => {
+  return new Promise((resolve19, reject) => {
     const plan = resolveShellSpawn(command, args);
     const child = (0, import_node_child_process2.spawn)(plan.command, plan.args, {
       cwd,
@@ -35503,7 +35477,7 @@ function runProcess(command, args, cwd) {
         process.stderr.write(`skills@latest exited ${code}.
 `);
       }
-      resolve18(code ?? 1);
+      resolve19(code ?? 1);
     });
   });
 }
@@ -35697,6 +35671,166 @@ Examples:
   });
 }
 
+// src/cli/install-integrity.ts
+var import_node_module2 = require("module");
+var import_node_fs19 = require("fs");
+var import_node_path22 = require("path");
+var SDK_SIDECAR_CRITICAL_PACKAGE_FILES = [
+  "dist/cli/index.mjs",
+  "dist/index.mjs",
+  "dist/index.d.ts",
+  "dist/plays/bundle-play-file.mjs",
+  "dist/bundling-sources/shared_libs/observability/telemetry.ts",
+  "dist/bundling-sources/shared_libs/play-runtime/backend.ts",
+  "dist/bundling-sources/shared_libs/plays/bundling/index.ts",
+  "dist/bundling-sources/shared_libs/tool-execution-error.ts"
+];
+var SDK_SIDECAR_CRITICAL_DEPENDENCY_FILES = [
+  "esbuild/package.json",
+  "esbuild/lib/main.js"
+];
+function safeRelativePath(value) {
+  if (typeof value !== "string" || !value || (0, import_node_path22.isAbsolute)(value)) return false;
+  const segments = value.split(/[\\/]+/);
+  return segments.every(
+    (segment) => Boolean(segment) && segment !== "." && segment !== ".."
+  );
+}
+function resolveContainedPath(root, value) {
+  if (!safeRelativePath(value)) return null;
+  const target = (0, import_node_path22.resolve)(root, value);
+  const relativeTarget = (0, import_node_path22.relative)((0, import_node_path22.resolve)(root), target);
+  if (!relativeTarget || relativeTarget.startsWith("..") || (0, import_node_path22.isAbsolute)(relativeTarget)) {
+    return null;
+  }
+  return target;
+}
+function parseJson(path) {
+  return JSON.parse((0, import_node_fs19.readFileSync)(path, "utf8"));
+}
+function isFile(path) {
+  try {
+    return (0, import_node_fs19.statSync)(path).isFile();
+  } catch {
+    return false;
+  }
+}
+function readManifest(packageRoot) {
+  const packageJsonPath = (0, import_node_path22.join)(packageRoot, "package.json");
+  let packageJson;
+  try {
+    packageJson = parseJson(packageJsonPath);
+  } catch (error) {
+    return {
+      mode: "manifest",
+      invalidReason: `invalid Deepline package metadata: ${error.message}`,
+      missing: (0, import_node_fs19.existsSync)(packageJsonPath) ? [] : ["deepline/package.json"]
+    };
+  }
+  if (!packageJson || typeof packageJson !== "object" || Array.isArray(packageJson)) {
+    return {
+      mode: "manifest",
+      invalidReason: "invalid Deepline package metadata: expected an object"
+    };
+  }
+  const metadata = packageJson;
+  if (metadata.deepline !== void 0 && (!metadata.deepline || typeof metadata.deepline !== "object" || Array.isArray(metadata.deepline))) {
+    return {
+      mode: "manifest",
+      invalidReason: "invalid Deepline package metadata: deepline must be an object"
+    };
+  }
+  const declaration = metadata.deepline?.installIntegrity;
+  if (!declaration) {
+    return {
+      mode: "legacy",
+      manifest: {
+        schemaVersion: 1,
+        packageFiles: [...SDK_SIDECAR_CRITICAL_PACKAGE_FILES],
+        dependencyFiles: [...SDK_SIDECAR_CRITICAL_DEPENDENCY_FILES]
+      }
+    };
+  }
+  if (declaration.schemaVersion !== 1 || !safeRelativePath(declaration.manifest)) {
+    return {
+      mode: "manifest",
+      invalidReason: "invalid Deepline install-integrity declaration"
+    };
+  }
+  const manifestPath = resolveContainedPath(packageRoot, declaration.manifest);
+  if (!manifestPath || !isFile(manifestPath)) {
+    return {
+      mode: "manifest",
+      invalidReason: "declared Deepline install-integrity manifest is missing",
+      missing: [String(declaration.manifest)]
+    };
+  }
+  let raw;
+  try {
+    raw = parseJson(manifestPath);
+  } catch (error) {
+    return {
+      mode: "manifest",
+      invalidReason: `invalid Deepline install-integrity manifest: ${error.message}`
+    };
+  }
+  if (!raw || typeof raw !== "object" || raw.schemaVersion !== 1 || !Array.isArray(raw.packageFiles) || !Array.isArray(raw.dependencyFiles)) {
+    return {
+      mode: "manifest",
+      invalidReason: "invalid Deepline install-integrity manifest schema"
+    };
+  }
+  const manifest = raw;
+  if (manifest.packageFiles.length === 0 || manifest.dependencyFiles.length === 0 || !manifest.packageFiles.every(safeRelativePath) || !manifest.dependencyFiles.every(safeRelativePath)) {
+    return {
+      mode: "manifest",
+      invalidReason: "unsafe path in Deepline install-integrity manifest"
+    };
+  }
+  return { mode: "manifest", manifest };
+}
+function inspectSdkSidecarInstall(versionDir) {
+  const nodeModulesRoot = (0, import_node_path22.join)(versionDir, "node_modules");
+  const packageRoot = (0, import_node_path22.join)(nodeModulesRoot, "deepline");
+  const manifestResult = readManifest(packageRoot);
+  if ("invalidReason" in manifestResult) {
+    return {
+      ok: false,
+      missing: manifestResult.missing ?? [],
+      invalidReason: manifestResult.invalidReason,
+      mode: manifestResult.mode
+    };
+  }
+  const missing = [
+    ...manifestResult.manifest.packageFiles.filter((path) => !isFile((0, import_node_path22.join)(packageRoot, path))).map((path) => `deepline/${path}`),
+    ...manifestResult.manifest.dependencyFiles.filter((path) => !isFile((0, import_node_path22.join)(nodeModulesRoot, path))).map((path) => `node_modules/${path}`)
+  ];
+  return {
+    ok: missing.length === 0,
+    missing,
+    invalidReason: null,
+    mode: manifestResult.mode
+  };
+}
+function probeSdkSidecarEsbuild(versionDir) {
+  try {
+    const requireFromInstall = (0, import_node_module2.createRequire)((0, import_node_path22.join)(versionDir, "package.json"));
+    const esbuild = requireFromInstall("esbuild");
+    if (typeof esbuild.transformSync !== "function") {
+      return "esbuild does not export transformSync";
+    }
+    const result = esbuild.transformSync("const value: number = 1;", {
+      loader: "ts"
+    });
+    if (typeof result?.code !== "string") {
+      return "esbuild transform probe returned no code";
+    }
+    return null;
+  } catch (error) {
+    return error instanceof Error ? error.message : String(error);
+  }
+}
+
 // src/cli/commands/update.ts
 var NPM_SDK_INSTALL_COMMON_FLAGS = [
   "--no-audit",
@@ -35752,7 +35886,7 @@ function sidecarStateDir(input2) {
   if (!scope || scope.includes("/") || scope.includes("\\")) {
     return null;
   }
-  return (0, import_node_path22.join)(input2.homeDir, ".local", "deepline", scope, "sdk-cli");
+  return (0, import_node_path23.join)(input2.homeDir, ".local", "deepline", scope, "sdk-cli");
 }
 function sidecarRegistryUrl(hostUrl) {
   let url;
@@ -35779,7 +35913,7 @@ function publicNpmFallbackRegistryUrl(hostUrl) {
 }
 function readOptionalText(path) {
   try {
-    return (0, import_node_fs19.readFileSync)(path, "utf8").trim();
+    return (0, import_node_fs20.readFileSync)(path, "utf8").trim();
   } catch {
     return "";
   }
@@ -35787,19 +35921,19 @@ function readOptionalText(path) {
 function resolvePythonSidecarUpdatePlan(options) {
   const stateDir = sidecarStateDir(options);
   if (!stateDir) return null;
-  const relativeEntrypoint = (0, import_node_path22.relative)(
-    (0, import_node_path22.resolve)(stateDir),
-    (0, import_node_path22.resolve)(options.entrypoint)
+  const relativeEntrypoint = (0, import_node_path23.relative)(
+    (0, import_node_path23.resolve)(stateDir),
+    (0, import_node_path23.resolve)(options.entrypoint)
   );
-  if (!relativeEntrypoint || relativeEntrypoint.startsWith("..") || (0, import_node_path22.isAbsolute)(relativeEntrypoint)) {
+  if (!relativeEntrypoint || relativeEntrypoint.startsWith("..") || (0, import_node_path23.isAbsolute)(relativeEntrypoint)) {
     return null;
   }
-  const installMethod = readOptionalText((0, import_node_path22.join)(stateDir, ".install-method"));
+  const installMethod = readOptionalText((0, import_node_path23.join)(stateDir, ".install-method"));
   if (installMethod !== "python-sidecar") return null;
   const scope = options.env.DEEPLINE_CONFIG_SCOPE?.trim() || "";
   const hostUrl = options.env.DEEPLINE_HOST_URL?.trim() || "";
-  const nodeBin = readOptionalText((0, import_node_path22.join)(stateDir, ".node-bin")) || process.execPath;
-  const sidecarPath = readOptionalText((0, import_node_path22.join)(stateDir, ".command-path")) || (0, import_node_path22.join)(
+  const nodeBin = readOptionalText((0, import_node_path23.join)(stateDir, ".node-bin")) || process.execPath;
+  const sidecarPath = readOptionalText((0, import_node_path23.join)(stateDir, ".command-path")) || (0, import_node_path23.join)(
     stateDir,
     "bin",
     process.platform === "win32" ? "deepline-sdk.cmd" : "deepline-sdk"
@@ -35807,7 +35941,7 @@ function resolvePythonSidecarUpdatePlan(options) {
   const packageSpec = options.packageSpec || "deepline@latest";
   const npmCommand = "npm";
   const registryUrl = sidecarRegistryUrl(hostUrl);
-  const versionDir = (0, import_node_path22.join)(stateDir, "versions", "<version>");
+  const versionDir = (0, import_node_path23.join)(stateDir, "versions", "<version>");
   const manualCommand = `${buildSidecarProjectConfigCommand(versionDir, nodeBin)} && ${npmCommand} install --prefix ${shellQuote4(versionDir)} --registry ${shellQuote4(registryUrl)} ${NPM_SDK_INSTALL_COMMON_FLAGS.map(shellQuote4).join(" ")} ${shellQuote4(packageSpec)}`;
   return {
     kind: "python-sidecar",
@@ -35823,12 +35957,12 @@ function resolvePythonSidecarUpdatePlan(options) {
   };
 }
 function findRepoBackedSdkRoot(startPath) {
-  let current = (0, import_node_path22.resolve)(startPath);
+  let current = (0, import_node_path23.resolve)(startPath);
   while (true) {
-    if ((0, import_node_fs19.existsSync)((0, import_node_path22.join)(current, "sdk", "package.json")) && (0, import_node_fs19.existsSync)((0, import_node_path22.join)(current, "sdk", "bin", "deepline-dev.ts"))) {
+    if ((0, import_node_fs20.existsSync)((0, import_node_path23.join)(current, "sdk", "package.json")) && (0, import_node_fs20.existsSync)((0, import_node_path23.join)(current, "sdk", "bin", "deepline-dev.ts"))) {
       return current;
     }
-    const parent = (0, import_node_path22.dirname)(current);
+    const parent = (0, import_node_path23.dirname)(current);
     if (parent === current) return null;
     current = parent;
   }
@@ -35836,9 +35970,9 @@ function findRepoBackedSdkRoot(startPath) {
 function inferNpmGlobalPrefixFromEntrypoint(entrypoint) {
   const normalized = (() => {
     try {
-      return (0, import_node_fs19.realpathSync)(entrypoint);
+      return (0, import_node_fs20.realpathSync)(entrypoint);
     } catch {
-      return (0, import_node_path22.resolve)(entrypoint);
+      return (0, import_node_path23.resolve)(entrypoint);
     }
   })();
   const parts = normalized.split(/[\\/]+/);
@@ -35857,9 +35991,9 @@ function inferNpmGlobalPrefixFromEntrypoint(entrypoint) {
 function isHomebrewFormulaEntrypoint(entrypoint) {
   const normalized = (() => {
     try {
-      return (0, import_node_fs19.realpathSync)(entrypoint);
+      return (0, import_node_fs20.realpathSync)(entrypoint);
     } catch {
-      return (0, import_node_path22.resolve)(entrypoint);
+      return (0, import_node_path23.resolve)(entrypoint);
     }
   })();
   const parts = normalized.split(/[\\/]+/);
@@ -35869,8 +36003,8 @@ function isHomebrewFormulaEntrypoint(entrypoint) {
 function resolveUpdatePlan(options = {}) {
   const env = options.env ?? process.env;
   const homeDir2 = options.homeDir ?? (0, import_node_os16.homedir)();
-  const entrypoint = options.entrypoint ?? (process.argv[1] ? (0, import_node_path22.resolve)(process.argv[1]) : "");
-  const sourceRoot = entrypoint ? findRepoBackedSdkRoot((0, import_node_path22.dirname)(entrypoint)) : null;
+  const entrypoint = options.entrypoint ?? (process.argv[1] ? (0, import_node_path23.resolve)(process.argv[1]) : "");
+  const sourceRoot = entrypoint ? findRepoBackedSdkRoot((0, import_node_path23.dirname)(entrypoint)) : null;
   if (sourceRoot) {
     return {
       kind: "source",
@@ -35917,9 +36051,9 @@ var AUTO_UPDATE_FAILURE_FILE = ".auto-update-failure.json";
 function autoUpdateFailurePath(plan) {
   if (plan.kind === "source" || plan.kind === "homebrew") return null;
   if (plan.kind === "python-sidecar") {
-    return (0, import_node_path22.join)(plan.stateDir, AUTO_UPDATE_FAILURE_FILE);
+    return (0, import_node_path23.join)(plan.stateDir, AUTO_UPDATE_FAILURE_FILE);
   }
-  return (0, import_node_path22.join)(
+  return (0, import_node_path23.join)(
     (0, import_node_os16.homedir)(),
     ".local",
     "deepline",
@@ -35937,7 +36071,7 @@ function readAutoUpdateFailure(plan) {
   if (!path) return null;
   try {
     const parsed = JSON.parse(
-      (0, import_node_fs19.readFileSync)(path, "utf8")
+      (0, import_node_fs20.readFileSync)(path, "utf8")
     );
     if ((parsed.kind === "npm-global" || parsed.kind === "python-sidecar") && typeof parsed.packageSpec === "string" && typeof parsed.failedAt === "string" && typeof parsed.exitCode === "number" && typeof parsed.manualCommand === "string") {
       return parsed;
@@ -35958,8 +36092,8 @@ function writeAutoUpdateFailure(plan, exitCode) {
     manualCommand: plan.manualCommand
   };
   try {
-    (0, import_node_fs19.mkdirSync)((0, import_node_path22.dirname)(path), { recursive: true });
-    (0, import_node_fs19.writeFileSync)(path, `${JSON.stringify(marker, null, 2)}
+    (0, import_node_fs20.mkdirSync)((0, import_node_path23.dirname)(path), { recursive: true });
+    (0, import_node_fs20.writeFileSync)(path, `${JSON.stringify(marker, null, 2)}
 `, "utf8");
   } catch {
   }
@@ -35968,7 +36102,7 @@ function clearAutoUpdateFailure(plan) {
   const path = autoUpdateFailurePath(plan);
   if (!path) return;
   try {
-    (0, import_node_fs19.unlinkSync)(path);
+    (0, import_node_fs20.unlinkSync)(path);
   } catch {
   }
 }
@@ -36006,7 +36140,7 @@ function safeVersionSegment(value) {
   return /^[0-9A-Za-z._-]+$/.test(normalized) ? normalized : "";
 }
 function entryPathInVersionDir(versionDir) {
-  return (0, import_node_path22.join)(
+  return (0, import_node_path23.join)(
     versionDir,
     "node_modules",
     "deepline",
@@ -36016,19 +36150,36 @@ function entryPathInVersionDir(versionDir) {
   );
 }
 function installedPackageVersion(versionDir) {
-  const packageJsonPath = (0, import_node_path22.join)(
+  const packageJsonPath = (0, import_node_path23.join)(
     versionDir,
     "node_modules",
     "deepline",
     "package.json"
   );
   try {
-    const parsed = JSON.parse((0, import_node_fs19.readFileSync)(packageJsonPath, "utf8"));
+    const parsed = JSON.parse((0, import_node_fs20.readFileSync)(packageJsonPath, "utf8"));
     return typeof parsed.version === "string" ? safeVersionSegment(parsed.version) : "";
   } catch {
     return "";
   }
 }
+function sidecarStructureFailure(versionDir) {
+  const health = inspectSdkSidecarInstall(versionDir);
+  if (!health.ok) {
+    const details = [
+      ...health.invalidReason ? [health.invalidReason] : [],
+      ...health.missing.length > 0 ? [`missing ${health.missing.join(", ")}`] : []
+    ].join("; ");
+    return details || "required SDK CLI files are missing";
+  }
+  return null;
+}
+function sidecarInstallFailure(versionDir) {
+  const structureFailure = sidecarStructureFailure(versionDir);
+  if (structureFailure) return structureFailure;
+  const esbuildFailure = probeSdkSidecarEsbuild(versionDir);
+  return esbuildFailure ? `esbuild probe failed: ${esbuildFailure}` : null;
+}
 function runCommand(command, args, env = process.env) {
   return new Promise((resolveResult) => {
     let output2 = "";
@@ -36100,26 +36251,62 @@ async function runNpmInstallWithRegistryFallback(input2) {
   return fallback.exitCode;
 }
 function writeSidecarLauncher(input2) {
-  (0, import_node_fs19.mkdirSync)((0, import_node_path22.dirname)(input2.path), { recursive: true });
+  (0, import_node_fs20.mkdirSync)((0, import_node_path23.dirname)(input2.path), { recursive: true });
+  const packageRoot = (0, import_node_path23.dirname)((0, import_node_path23.dirname)((0, import_node_path23.dirname)(input2.entryPath)));
+  const versionDir = (0, import_node_path23.dirname)((0, import_node_path23.dirname)(packageRoot));
+  const esbuildProbe = "const {createRequire}=require('node:module');const path=require('node:path');const req=createRequire(path.join(process.argv[1],'package.json'));const result=req('esbuild').transformSync('const value: number = 1;',{loader:'ts'});if(!result||typeof result.code!=='string')process.exit(3);";
+  const criticalPaths = [
+    ...SDK_SIDECAR_CRITICAL_PACKAGE_FILES.map(
+      (path) => (0, import_node_path23.join)(packageRoot, path)
+    ),
+    ...SDK_SIDECAR_CRITICAL_DEPENDENCY_FILES.map(
+      (path) => (0, import_node_path23.join)(versionDir, "node_modules", path)
+    )
+  ];
   if (process.platform === "win32") {
-    (0, import_node_fs19.writeFileSync)(
+    (0, import_node_fs20.writeFileSync)(
       input2.path,
       [
         `@set DEEPLINE_HOST_URL=${input2.hostUrl.replace(/\r?\n/g, "")}`,
         `@set DEEPLINE_CONFIG_SCOPE=${input2.scope.replace(/\r?\n/g, "")}`,
+        ...criticalPaths.map(
+          (path) => `@if not exist "${path}" goto repair_sdk`
+        ),
+        `@"${input2.nodeBin}" -e "${esbuildProbe}" "${versionDir}" >NUL 2>&1`,
+        "@if errorlevel 1 goto repair_sdk",
         `@"${input2.nodeBin}" "${input2.entryPath}" %*`,
+        "@exit /b %ERRORLEVEL%",
+        ":repair_sdk",
+        '@if defined DEEPLINE_REAL_BINARY "%DEEPLINE_REAL_BINARY%" --version=v2 %*',
+        "@if defined DEEPLINE_REAL_BINARY exit /b %ERRORLEVEL%",
+        "@echo Deepline SDK CLI install is incomplete. Run `deepline update` to repair it. 1>&2",
+        "@exit /b 1",
         ""
       ].join("\r\n"),
       "utf8"
     );
     return;
   }
-  (0, import_node_fs19.writeFileSync)(
+  (0, import_node_fs20.writeFileSync)(
     input2.path,
     [
       "#!/usr/bin/env sh",
       `export DEEPLINE_HOST_URL=${shellQuote4(input2.hostUrl)}`,
       `export DEEPLINE_CONFIG_SCOPE=${shellQuote4(input2.scope)}`,
+      `if ${criticalPaths.map((path) => `[ ! -f ${shellQuote4(path)} ]`).join(" || ")}; then`,
+      '  if [ -n "${DEEPLINE_REAL_BINARY:-}" ] && [ -x "$DEEPLINE_REAL_BINARY" ]; then',
+      '    exec "$DEEPLINE_REAL_BINARY" --version=v2 "$@"',
+      "  fi",
+      '  printf "%s\\n" "Deepline SDK CLI install is incomplete. Run \\`deepline update\\` to repair it." >&2',
+      "  exit 1",
+      "fi",
+      `if ! ${shellQuote4(input2.nodeBin)} -e ${shellQuote4(esbuildProbe)} ${shellQuote4(versionDir)} >/dev/null 2>&1; then`,
+      '  if [ -n "${DEEPLINE_REAL_BINARY:-}" ] && [ -x "$DEEPLINE_REAL_BINARY" ]; then',
+      '    exec "$DEEPLINE_REAL_BINARY" --version=v2 "$@"',
+      "  fi",
+      '  printf "%s\\n" "Deepline SDK CLI install is incomplete. Run \\`deepline update\\` to repair it." >&2',
+      "  exit 1",
+      "fi",
       `exec ${shellQuote4(input2.nodeBin)} ${shellQuote4(input2.entryPath)} "$@"`,
       ""
     ].join("\n"),
@@ -36127,17 +36314,17 @@ function writeSidecarLauncher(input2) {
   );
 }
 async function runPythonSidecarUpdatePlan(plan) {
-  const versionsDir = (0, import_node_path22.join)(plan.stateDir, "versions");
-  const tempDir = (0, import_node_path22.join)(
+  const versionsDir = (0, import_node_path23.join)(plan.stateDir, "versions");
+  const tempDir = (0, import_node_path23.join)(
     versionsDir,
     `.tmp-sdk-update-${process.pid}-${Date.now()}`
   );
-  (0, import_node_fs19.rmSync)(tempDir, { recursive: true, force: true });
-  (0, import_node_fs19.mkdirSync)(tempDir, { recursive: true });
-  (0, import_node_fs19.writeFileSync)((0, import_node_path22.join)(tempDir, "package.json"), NPM_SDK_SIDECAR_PACKAGE_JSON);
+  (0, import_node_fs20.rmSync)(tempDir, { recursive: true, force: true });
+  (0, import_node_fs20.mkdirSync)(tempDir, { recursive: true });
+  (0, import_node_fs20.writeFileSync)((0, import_node_path23.join)(tempDir, "package.json"), NPM_SDK_SIDECAR_PACKAGE_JSON);
   const env = {
     ...process.env,
-    PATH: `${(0, import_node_path22.dirname)(plan.nodeBin)}${process.platform === "win32" ? ";" : ":"}${process.env.PATH ?? ""}`
+    PATH: `${(0, import_node_path23.dirname)(plan.nodeBin)}${process.platform === "win32" ? ";" : ":"}${process.env.PATH ?? ""}`
   };
   const installResult = await runCommand(
     plan.npmCommand,
@@ -36154,7 +36341,7 @@ async function runPythonSidecarUpdatePlan(plan) {
   );
   const installExitCode = installResult.exitCode;
   if (installExitCode !== 0) {
-    (0, import_node_fs19.rmSync)(tempDir, { recursive: true, force: true });
+    (0, import_node_fs20.rmSync)(tempDir, { recursive: true, force: true });
     return installExitCode;
   }
   const installedVersion = installedPackageVersion(tempDir);
@@ -36162,33 +36349,94 @@ async function runPythonSidecarUpdatePlan(plan) {
     process.stderr.write(
       "Updated Deepline SDK package did not report a version.\n"
     );
-    (0, import_node_fs19.rmSync)(tempDir, { recursive: true, force: true });
+    (0, import_node_fs20.rmSync)(tempDir, { recursive: true, force: true });
     return 1;
   }
-  const finalDir = (0, import_node_path22.join)(versionsDir, installedVersion);
+  const stagedFailure = sidecarInstallFailure(tempDir);
+  if (stagedFailure) {
+    process.stderr.write(
+      `Updated Deepline SDK package is incomplete: ${stagedFailure}.
+`
+    );
+    (0, import_node_fs20.rmSync)(tempDir, { recursive: true, force: true });
+    return 1;
+  }
+  const finalDir = (0, import_node_path23.join)(versionsDir, installedVersion);
   const finalEntryPath = entryPathInVersionDir(finalDir);
-  if ((0, import_node_fs19.existsSync)(finalEntryPath)) {
-    (0, import_node_fs19.rmSync)(tempDir, { recursive: true, force: true });
+  const finalFailure = sidecarInstallFailure(finalDir);
+  let backupDir = null;
+  if (!finalFailure) {
+    (0, import_node_fs20.rmSync)(tempDir, { recursive: true, force: true });
   } else {
-    (0, import_node_fs19.rmSync)(finalDir, { recursive: true, force: true });
-    try {
-      (0, import_node_fs19.renameSync)(tempDir, finalDir);
-    } catch (error) {
-      (0, import_node_fs19.rmSync)(tempDir, { recursive: true, force: true });
-      process.stderr.write(
-        `Failed to publish Deepline SDK sidecar update: ${error.message}
-`
+    let shouldPublishTemp = true;
+    if ((0, import_node_fs20.existsSync)(finalDir)) {
+      backupDir = (0, import_node_path23.join)(
+        versionsDir,
+        `.backup-${installedVersion}-${process.pid}-${Date.now()}`
       );
-      return 1;
+      try {
+        (0, import_node_fs20.renameSync)(finalDir, backupDir);
+      } catch (error) {
+        const concurrentlyPublishedFailure = sidecarInstallFailure(finalDir);
+        if (!concurrentlyPublishedFailure) {
+          (0, import_node_fs20.rmSync)(tempDir, { recursive: true, force: true });
+          backupDir = null;
+          shouldPublishTemp = false;
+        } else {
+          (0, import_node_fs20.rmSync)(tempDir, { recursive: true, force: true });
+          process.stderr.write(
+            `Failed to preserve the incomplete Deepline SDK sidecar before repair: ${error.message}.
+`
+          );
+          return 1;
+        }
+      }
+    }
+    if (shouldPublishTemp) {
+      try {
+        (0, import_node_fs20.renameSync)(tempDir, finalDir);
+      } catch (error) {
+        (0, import_node_fs20.rmSync)(tempDir, { recursive: true, force: true });
+        const concurrentlyPublishedFailure = sidecarInstallFailure(finalDir);
+        if (!concurrentlyPublishedFailure) {
+          if (backupDir) (0, import_node_fs20.rmSync)(backupDir, { recursive: true, force: true });
+          backupDir = null;
+        } else {
+          let restoreFailure = "";
+          if (backupDir && (0, import_node_fs20.existsSync)(backupDir) && !(0, import_node_fs20.existsSync)(finalDir)) {
+            try {
+              (0, import_node_fs20.renameSync)(backupDir, finalDir);
+              backupDir = null;
+            } catch (restoreError) {
+              restoreFailure = `; failed to restore previous install: ${restoreError.message}`;
+            }
+          }
+          process.stderr.write(
+            `Failed to publish Deepline SDK sidecar update: ${error.message}; current install remains incomplete: ${concurrentlyPublishedFailure}${restoreFailure}.
+`
+          );
+          return 1;
+        }
+      }
     }
   }
-  if (!(0, import_node_fs19.existsSync)(finalEntryPath)) {
+  const publishedFailure = sidecarStructureFailure(finalDir);
+  if (publishedFailure) {
+    if (backupDir && (0, import_node_fs20.existsSync)(backupDir)) {
+      (0, import_node_fs20.rmSync)(finalDir, { recursive: true, force: true });
+      try {
+        (0, import_node_fs20.renameSync)(backupDir, finalDir);
+        backupDir = null;
+      } catch {
+      }
+    }
     process.stderr.write(
-      `Updated Deepline SDK CLI entrypoint missing: ${finalEntryPath}
+      `Updated Deepline SDK CLI install is incomplete: ${publishedFailure}.
 `
     );
     return 1;
   }
+  if (backupDir) (0, import_node_fs20.rmSync)(backupDir, { recursive: true, force: true });
   writeSidecarLauncher({
     path: plan.sidecarPath,
     hostUrl: plan.hostUrl,
@@ -36196,28 +36444,28 @@ async function runPythonSidecarUpdatePlan(plan) {
     nodeBin: plan.nodeBin,
     entryPath: finalEntryPath
   });
-  (0, import_node_fs19.writeFileSync)(
-    (0, import_node_path22.join)(plan.stateDir, ".version"),
+  (0, import_node_fs20.writeFileSync)(
+    (0, import_node_path23.join)(plan.stateDir, ".version"),
     `${installedVersion}
 `,
     "utf8"
   );
-  (0, import_node_fs19.writeFileSync)(
-    (0, import_node_path22.join)(plan.stateDir, ".install-method"),
+  (0, import_node_fs20.writeFileSync)(
+    (0, import_node_path23.join)(plan.stateDir, ".install-method"),
     "python-sidecar\n",
     "utf8"
   );
-  (0, import_node_fs19.writeFileSync)(
-    (0, import_node_path22.join)(plan.stateDir, ".command-path"),
+  (0, import_node_fs20.writeFileSync)(
+    (0, import_node_path23.join)(plan.stateDir, ".command-path"),
     `${plan.sidecarPath}
 `,
     "utf8"
   );
-  (0, import_node_fs19.writeFileSync)((0, import_node_path22.join)(plan.stateDir, ".runner"), "node\n", "utf8");
-  (0, import_node_fs19.writeFileSync)((0, import_node_path22.join)(plan.stateDir, ".node-bin"), `${plan.nodeBin}
+  (0, import_node_fs20.writeFileSync)((0, import_node_path23.join)(plan.stateDir, ".runner"), "node\n", "utf8");
+  (0, import_node_fs20.writeFileSync)((0, import_node_path23.join)(plan.stateDir, ".node-bin"), `${plan.nodeBin}
 `, "utf8");
-  (0, import_node_fs19.writeFileSync)(
-    (0, import_node_path22.join)(plan.stateDir, ".entry-path"),
+  (0, import_node_fs20.writeFileSync)(
+    (0, import_node_path23.join)(plan.stateDir, ".entry-path"),
     `${finalEntryPath}
 `,
     "utf8"
@@ -36340,9 +36588,9 @@ Examples:
 
 // src/cli/commands/setup.ts
 var import_node_child_process4 = require("child_process");
-var import_node_fs20 = require("fs");
+var import_node_fs21 = require("fs");
 var import_node_os17 = require("os");
-var import_node_path23 = require("path");
+var import_node_path24 = require("path");
 var SETUP_PHASE_NAMES = [
   "cli",
   "cleanup",
@@ -36399,7 +36647,7 @@ function phasesFromLegacyStatus(status) {
 function readSetupState(input2) {
   try {
     const parsed = JSON.parse(
-      (0, import_node_fs20.readFileSync)(
+      (0, import_node_fs21.readFileSync)(
         setupStatePath(input2.baseUrl, input2.scope, input2.root),
         "utf8"
       )
@@ -36475,7 +36723,7 @@ function buildPendingAuthorizationOutput(input2) {
   };
 }
 function setupStatePath(baseUrl, scope, root) {
-  return scope === "local" && root ? (0, import_node_path23.join)(root, ".deepline", "setup", "state.json") : (0, import_node_path23.join)(sdkCliStateDirPath(baseUrl), "setup.json");
+  return scope === "local" && root ? (0, import_node_path24.join)(root, ".deepline", "setup", "state.json") : (0, import_node_path24.join)(sdkCliStateDirPath(baseUrl), "setup.json");
 }
 async function captureStdout2(run) {
   let stdout = "";
@@ -36504,14 +36752,14 @@ function asRecord3(value) {
 }
 function safeRead(path) {
   try {
-    return (0, import_node_fs20.readFileSync)(path, "utf8");
+    return (0, import_node_fs21.readFileSync)(path, "utf8");
   } catch {
     return "";
   }
 }
 function isNpmManagedDeeplinePath(path) {
   try {
-    return (0, import_node_fs20.realpathSync)(path).includes(`${(0, import_node_path23.join)("node_modules", "deepline")}`);
+    return (0, import_node_fs21.realpathSync)(path).includes(`${(0, import_node_path24.join)("node_modules", "deepline")}`);
   } catch {
     return false;
   }
@@ -36522,32 +36770,32 @@ function isInstallerManagedLegacyLauncher(path) {
 }
 function removeKnownLegacyPaths(baseUrl) {
   const home = (0, import_node_os17.homedir)();
-  const hostDir = (0, import_node_path23.join)(home, ".local", "deepline", baseUrlSlug(baseUrl));
-  const legacyLauncherPath = (0, import_node_path23.join)(home, ".local", "bin", "deepline");
+  const hostDir = (0, import_node_path24.join)(home, ".local", "deepline", baseUrlSlug(baseUrl));
+  const legacyLauncherPath = (0, import_node_path24.join)(home, ".local", "bin", "deepline");
   const installerCommandPath = safeRead(
-    (0, import_node_path23.join)(hostDir, "sdk", ".command-path")
+    (0, import_node_path24.join)(hostDir, "sdk", ".command-path")
   ).trim();
   const candidates = [
     ...isInstallerManagedLegacyLauncher(legacyLauncherPath) ? [legacyLauncherPath] : [],
-    (0, import_node_path23.join)(home, ".local", "bin", "deepline-real"),
-    (0, import_node_path23.join)(hostDir, "bin", "deepline"),
-    (0, import_node_path23.join)(hostDir, "bin", "deepline-real"),
-    (0, import_node_path23.join)(hostDir, "cli", ".install-method"),
-    (0, import_node_path23.join)(hostDir, "cli", ".version"),
-    (0, import_node_path23.join)(hostDir, "sdk", ".install-method"),
-    (0, import_node_path23.join)(hostDir, "sdk", ".command-path"),
+    (0, import_node_path24.join)(home, ".local", "bin", "deepline-real"),
+    (0, import_node_path24.join)(hostDir, "bin", "deepline"),
+    (0, import_node_path24.join)(hostDir, "bin", "deepline-real"),
+    (0, import_node_path24.join)(hostDir, "cli", ".install-method"),
+    (0, import_node_path24.join)(hostDir, "cli", ".version"),
+    (0, import_node_path24.join)(hostDir, "sdk", ".install-method"),
+    (0, import_node_path24.join)(hostDir, "sdk", ".command-path"),
     ...installerCommandPath ? [
       installerCommandPath,
-      (0, import_node_path23.join)((0, import_node_path23.dirname)(installerCommandPath), "deepline-sdk")
+      (0, import_node_path24.join)((0, import_node_path24.dirname)(installerCommandPath), "deepline-sdk")
     ] : []
   ];
   const removed = [];
   for (const path of candidates) {
-    if (!(0, import_node_fs20.existsSync)(path)) continue;
+    if (!(0, import_node_fs21.existsSync)(path)) continue;
     if (path === installerCommandPath && isNpmManagedDeeplinePath(path)) {
       continue;
     }
-    (0, import_node_fs20.rmSync)(path, { force: true });
+    (0, import_node_fs21.rmSync)(path, { force: true });
     removed.push(path);
   }
   return removed;
@@ -36560,7 +36808,7 @@ function resolvePathCommands(command) {
   );
   return [
     ...new Set(
-      String(lookup.stdout ?? "").split(/\r?\n/).map((line) => line.trim()).filter(Boolean).map((path) => (0, import_node_path23.resolve)(path))
+      String(lookup.stdout ?? "").split(/\r?\n/).map((line) => line.trim()).filter(Boolean).map((path) => (0, import_node_path24.resolve)(path))
     )
   ];
 }
@@ -36570,7 +36818,7 @@ function resolvePathCommand(command) {
 function isHomebrewFormulaCommand(path) {
   let resolvedPath = path;
   try {
-    resolvedPath = (0, import_node_fs20.realpathSync)(path);
+    resolvedPath = (0, import_node_fs21.realpathSync)(path);
   } catch {
     return false;
   }
@@ -36581,7 +36829,7 @@ function isHomebrewFormulaCommand(path) {
 function resolvePersistentGlobalCommand(dependencies = {}) {
   const platform3 = dependencies.platform ?? process.platform;
   const run = dependencies.spawn ?? import_node_child_process4.spawnSync;
-  const pathExists = dependencies.exists ?? import_node_fs20.existsSync;
+  const pathExists = dependencies.exists ?? import_node_fs21.existsSync;
   const pathClis = dependencies.pathClis ?? resolvePathCommands("deepline");
   const homebrewCommand = pathClis.find(isHomebrewFormulaCommand);
   if (homebrewCommand) return homebrewCommand;
@@ -36593,7 +36841,7 @@ function resolvePersistentGlobalCommand(dependencies = {}) {
   if (prefix.status !== 0) return null;
   const root = String(prefix.stdout ?? "").trim();
   if (!root) return null;
-  const candidates = platform3 === "win32" ? [(0, import_node_path23.join)(root, "deepline.cmd"), (0, import_node_path23.join)(root, "deepline")] : [(0, import_node_path23.join)(root, "bin", "deepline")];
+  const candidates = platform3 === "win32" ? [(0, import_node_path24.join)(root, "deepline.cmd"), (0, import_node_path24.join)(root, "deepline")] : [(0, import_node_path24.join)(root, "bin", "deepline")];
   return candidates.find((candidate) => pathExists(candidate)) ?? null;
 }
 function inspectGlobalCliAvailability(input2) {
@@ -36606,20 +36854,20 @@ function inspectGlobalCliAvailability(input2) {
 }
 function pathsResolveToSameFile(left, right) {
   try {
-    return (0, import_node_fs20.realpathSync)(left) === (0, import_node_fs20.realpathSync)(right);
+    return (0, import_node_fs21.realpathSync)(left) === (0, import_node_fs21.realpathSync)(right);
   } catch {
-    return (0, import_node_path23.resolve)(left) === (0, import_node_path23.resolve)(right);
+    return (0, import_node_path24.resolve)(left) === (0, import_node_path24.resolve)(right);
   }
 }
 function isKnownDeeplineCommand(path) {
-  const entrypoint = process.argv[1] ? (0, import_node_path23.resolve)(process.argv[1]) : "";
+  const entrypoint = process.argv[1] ? (0, import_node_path24.resolve)(process.argv[1]) : "";
   let resolvedPath = path;
   try {
-    resolvedPath = (0, import_node_fs20.realpathSync)(path);
+    resolvedPath = (0, import_node_fs21.realpathSync)(path);
   } catch {
   }
   if (entrypoint && resolvedPath === entrypoint) return true;
-  if (resolvedPath.includes(`${(0, import_node_path23.join)("node_modules", "deepline")}`)) return true;
+  if (resolvedPath.includes(`${(0, import_node_path24.join)("node_modules", "deepline")}`)) return true;
   const content = safeRead(path);
   return content.includes("node_modules/deepline") || content.includes("node_modules\\deepline") || content.includes("DEEPLINE_CONFIG_SCOPE") || content.includes("deepline-real");
 }
@@ -36627,9 +36875,9 @@ function inspectPathConflict() {
   const commandPath = resolvePathCommand("deepline");
   if (!commandPath || isKnownDeeplineCommand(commandPath)) return null;
   try {
-    if ((0, import_node_fs20.lstatSync)(commandPath).isSymbolicLink()) {
-      const target = (0, import_node_fs20.realpathSync)(commandPath);
-      if (target.includes(`${(0, import_node_path23.join)("node_modules", "deepline")}`)) return null;
+    if ((0, import_node_fs21.lstatSync)(commandPath).isSymbolicLink()) {
+      const target = (0, import_node_fs21.realpathSync)(commandPath);
+      if (target.includes(`${(0, import_node_path24.join)("node_modules", "deepline")}`)) return null;
     }
   } catch {
   }
@@ -36637,8 +36885,8 @@ function inspectPathConflict() {
 }
 function writeSetupState(input2) {
   const path = setupStatePath(input2.baseUrl, input2.scope, input2.root);
-  (0, import_node_fs20.mkdirSync)((0, import_node_path23.dirname)(path), { recursive: true });
-  (0, import_node_fs20.writeFileSync)(
+  (0, import_node_fs21.mkdirSync)((0, import_node_path24.dirname)(path), { recursive: true });
+  (0, import_node_fs21.writeFileSync)(
     path,
     `${JSON.stringify(
       {
@@ -36678,7 +36926,7 @@ function failSetupPhase(phases, phase, code) {
   phases[phase] = { status: "failed", code };
 }
 function rollbackCommand(scope, root) {
-  const prefix = scope === "local" && root ? ` --prefix ${JSON.stringify((0, import_node_path23.join)(root, ".deepline", "runtime"))}` : "";
+  const prefix = scope === "local" && root ? ` --prefix ${JSON.stringify((0, import_node_path24.join)(root, ".deepline", "runtime"))}` : "";
   return `npm install -g${prefix} --no-audit --no-fund --include=optional --allow-scripts=esbuild deepline@${SDK_VERSION}`;
 }
 function setupResumeCommand(baseUrl, scope) {
@@ -36765,12 +37013,12 @@ function buildDoctorAssessment(input2) {
   const connected = input2.authStatus.payload?.connected === true;
   const authScopeOk = input2.scope === "local" ? Boolean(projectAuth) : Boolean(apiKey && !projectAuth);
   const skillsOk = skillsState?.scope === input2.scope && typeof skillsState.skillsVersion === "string" && Array.isArray(skillsState.agents) && skillsState.agents.length > 0;
-  const runningCliPath = process.argv[1] ? (0, import_node_path23.resolve)(process.argv[1]) : null;
+  const runningCliPath = process.argv[1] ? (0, import_node_path24.resolve)(process.argv[1]) : null;
   const globalCli = input2.scope === "global" ? inspectGlobalCliAvailability() : null;
   const pathGlobalCli = globalCli?.path ?? null;
   const cliPath = input2.scope === "global" ? pathGlobalCli : runningCliPath;
   const cliScopeOk = input2.scope === "global" ? Boolean(pathGlobalCli) : Boolean(
-    input2.root && runningCliPath?.includes((0, import_node_path23.join)(input2.root, ".deepline", "runtime"))
+    input2.root && runningCliPath?.includes((0, import_node_path24.join)(input2.root, ".deepline", "runtime"))
   );
   const checks = {
     cli: {
@@ -37416,7 +37664,7 @@ function isDowngradeAutoUpdateResponse(response) {
   return compareSemver(target, current) < 0;
 }
 function relaunchCurrentCommand(plan) {
-  return new Promise((resolve18) => {
+  return new Promise((resolve19) => {
     const command = plan.kind === "python-sidecar" ? plan.sidecarPath : process.execPath;
     const args = plan.kind === "python-sidecar" ? process.argv.slice(2) : process.argv.slice(1);
     const child = (0, import_node_child_process5.spawn)(command, args, {
@@ -37432,9 +37680,9 @@ function relaunchCurrentCommand(plan) {
         `Deepline SDK/CLI updated, but relaunch failed: ${error.message}
 `
       );
-      resolve18(1);
+      resolve19(1);
     });
-    child.on("close", (code) => resolve18(code ?? 1));
+    child.on("close", (code) => resolve19(code ?? 1));
   });
 }
 async function maybeAutoUpdateAndRelaunch(response) {
@@ -37485,8 +37733,8 @@ async function maybeAutoUpdateAndRelaunch(response) {
 
 // src/cli/skills-sync.ts
 var import_node_child_process6 = require("child_process");
-var import_node_fs21 = require("fs");
-var import_node_path24 = require("path");
+var import_node_fs22 = require("fs");
+var import_node_path25 = require("path");
 var CHECK_TIMEOUT_MS2 = 3e3;
 var attemptedSync = false;
 function shouldSkipSkillsSync() {
@@ -37502,51 +37750,51 @@ function activePluginSkillsDir() {
     return "";
   }
   const dir = process.env.DEEPLINE_PLUGIN_SKILLS_DIR?.trim() ?? "";
-  return dir && (0, import_node_fs21.existsSync)(dir) ? dir : "";
+  return dir && (0, import_node_fs22.existsSync)(dir) ? dir : "";
 }
 function readPluginSkillsVersion() {
   const dir = activePluginSkillsDir();
   if (!dir) return "";
   try {
-    return (0, import_node_fs21.readFileSync)((0, import_node_path24.join)(dir, ".version"), "utf-8").trim();
+    return (0, import_node_fs22.readFileSync)((0, import_node_path25.join)(dir, ".version"), "utf-8").trim();
   } catch {
     return "";
   }
 }
 function sdkSkillsVersionPath(baseUrl) {
-  return (0, import_node_path24.join)(sdkCliStateDirPath(baseUrl), "skills-version");
+  return (0, import_node_path25.join)(sdkCliStateDirPath(baseUrl), "skills-version");
 }
 function legacySdkSkillsVersionPath(baseUrl) {
-  return (0, import_node_path24.join)((0, import_node_path24.dirname)(sdkCliStateDirPath(baseUrl)), "sdk-skills", ".version");
+  return (0, import_node_path25.join)((0, import_node_path25.dirname)(sdkCliStateDirPath(baseUrl)), "sdk-skills", ".version");
 }
 function unavailableSkillsNoticePath(baseUrl) {
-  return (0, import_node_path24.join)(sdkCliStateDirPath(baseUrl), "skills-sync-unavailable-version");
+  return (0, import_node_path25.join)(sdkCliStateDirPath(baseUrl), "skills-sync-unavailable-version");
 }
 function readSdkSkillsLocalVersion(baseUrl) {
   const pluginVersion = readPluginSkillsVersion();
   if (pluginVersion) return pluginVersion;
-  const path = (0, import_node_fs21.existsSync)(sdkSkillsVersionPath(baseUrl)) ? sdkSkillsVersionPath(baseUrl) : legacySdkSkillsVersionPath(baseUrl);
-  if (!(0, import_node_fs21.existsSync)(path)) return "";
+  const path = (0, import_node_fs22.existsSync)(sdkSkillsVersionPath(baseUrl)) ? sdkSkillsVersionPath(baseUrl) : legacySdkSkillsVersionPath(baseUrl);
+  if (!(0, import_node_fs22.existsSync)(path)) return "";
   try {
-    return (0, import_node_fs21.readFileSync)(path, "utf-8").trim();
+    return (0, import_node_fs22.readFileSync)(path, "utf-8").trim();
   } catch {
     return "";
   }
 }
 function writeLocalSkillsVersion(baseUrl, version) {
   const path = sdkSkillsVersionPath(baseUrl);
-  (0, import_node_fs21.mkdirSync)((0, import_node_path24.dirname)(path), { recursive: true });
-  (0, import_node_fs21.writeFileSync)(path, `${version}
+  (0, import_node_fs22.mkdirSync)((0, import_node_path25.dirname)(path), { recursive: true });
+  (0, import_node_fs22.writeFileSync)(path, `${version}
 `, "utf-8");
 }
 function writeUnavailableSkillsNotice(baseUrl, remoteVersion, skillNames) {
   const path = unavailableSkillsNoticePath(baseUrl);
   try {
-    if ((0, import_node_fs21.existsSync)(path) && (0, import_node_fs21.readFileSync)(path, "utf-8").trim() === remoteVersion) {
+    if ((0, import_node_fs22.existsSync)(path) && (0, import_node_fs22.readFileSync)(path, "utf-8").trim() === remoteVersion) {
       return;
     }
-    (0, import_node_fs21.mkdirSync)((0, import_node_path24.dirname)(path), { recursive: true });
-    (0, import_node_fs21.writeFileSync)(path, `${remoteVersion}
+    (0, import_node_fs22.mkdirSync)((0, import_node_path25.dirname)(path), { recursive: true });
+    (0, import_node_fs22.writeFileSync)(path, `${remoteVersion}
 `, "utf-8");
   } catch {
   }
@@ -37558,7 +37806,7 @@ ${manualCommand}`
 }
 function clearUnavailableSkillsNotice(baseUrl) {
   try {
-    (0, import_node_fs21.unlinkSync)(unavailableSkillsNoticePath(baseUrl));
+    (0, import_node_fs22.unlinkSync)(unavailableSkillsNoticePath(baseUrl));
   } catch {
   }
 }
@@ -37680,7 +37928,7 @@ function resolveSkillsInstallCommands(baseUrl, skillNames = DEFAULT_SDK_SKILL_NA
   return commands;
 }
 function runOneSkillsInstall(install) {
-  return new Promise((resolve18) => {
+  return new Promise((resolve19) => {
     const plan = resolveSkillsInstallSpawn(install);
     const child = (0, import_node_child_process6.spawn)(plan.command, plan.args, {
       stdio: ["ignore", "ignore", "pipe"],
@@ -37692,7 +37940,7 @@ function runOneSkillsInstall(install) {
       stderr += chunk.toString("utf-8");
     });
     child.on("error", (error) => {
-      resolve18({
+      resolve19({
         ok: false,
         detail: `failed to start ${install.command}: ${error.message}`,
         manualCommand: install.manualCommand
@@ -37700,11 +37948,11 @@ function runOneSkillsInstall(install) {
     });
     child.on("close", (code) => {
       if (code === 0) {
-        resolve18({ ok: true, detail: "", manualCommand: install.manualCommand });
+        resolve19({ ok: true, detail: "", manualCommand: install.manualCommand });
         return;
       }
       const detail = stderr.trim();
-      resolve18({
+      resolve19({
         ok: false,
         detail: detail ? `${install.command}: ${detail}` : `${install.command} exited ${code}`,
         manualCommand: install.manualCommand
@@ -38132,8 +38380,8 @@ function topLevelCommandKnown(program, commandName) {
   );
 }
 async function runPlayRunnerHealthCheck() {
-  const dir = await (0, import_promises8.mkdtemp)((0, import_node_path25.join)((0, import_node_os19.tmpdir)(), "deepline-health-play-"));
-  const file = (0, import_node_path25.join)(dir, "health-check.play.ts");
+  const dir = await (0, import_promises8.mkdtemp)((0, import_node_path26.join)((0, import_node_os19.tmpdir)(), "deepline-health-play-"));
+  const file = (0, import_node_path26.join)(dir, "health-check.play.ts");
   try {
     await (0, import_promises8.writeFile)(
       file,