deepline 0.3.113 → 0.3.115

package/dist/cli/index.mjs

@@ -1271,7 +1271,7 @@ var SDK_RELEASE = {
   // getters keep their established compatibility behavior.
   // 0.3.1 deprecated the legacy `deepline enrich` command in favor of Plays.
   // 0.3.90 is the first deliberately versioned SDK release for API v3.
-  version: "0.3.113",
+  version: "0.3.115",
   updateSummary: "Play grep now returns concise results with the matched fields and terms. Automatic CLI updates are enabled by default; use `deepline settings autoupdate off` to opt out, `deepline settings autoupdate on` to re-enable updates, or `deepline settings autoupdate pin <version>` to hold an exact release.",
   packageCapabilities: {
     updatePreferences: 1
@@ -1487,8 +1487,22 @@ function readPluginSkillsVersion() {
     return "";
   }
 }
+var KNOWN_SKILL_AGENTS = [
+  "antigravity",
+  "claude-code",
+  "cline",
+  "codex",
+  "cursor",
+  "gemini-cli",
+  "windsurf"
+];
+function skillsAgentPathSegment(agent) {
+  if (agent === "*") return "all";
+  const slug = agent.replace(/[^a-z0-9]+/gi, "-").replace(/^-+|-+$/g, "");
+  return slug || "agent";
+}
 function sdkSkillsVersionPath(baseUrl, agents = []) {
-  const suffix = agents.length > 0 ? `-${agents.join("-")}` : "";
+  const suffix = agents.length > 0 ? `-${agents.map(skillsAgentPathSegment).join("-")}` : "";
   return join2(sdkCliStateDirPath(baseUrl), `skills${suffix}-version`);
 }
 function legacySdkSkillsVersionPath(baseUrl) {
@@ -4820,7 +4834,7 @@ function resolveToolExecuteTimeoutMs(toolId, input2) {
   if (usesExtendedBetterContactLauncherBudget(normalized)) {
     return BETTERCONTACT_LAUNCHER_CLIENT_TIMEOUT_MS;
   }
-  return normalized === "deeplineagent" || normalized === "deeplineagent_deeplineagent" || normalized === "ai_inference" || normalized === "deeplineagent_ai_inference" || normalized === "aiinference" ? DEEPLINEAGENT_EXECUTE_TIMEOUT_MS : void 0;
+  return normalized === "deeplineagent" || normalized === "deeplineagent_deeplineagent" || normalized === "ai_inference" || normalized === "deeplineagent_ai_inference" || normalized === "ai_evaluate" || normalized === "deeplineagent_ai_evaluate" || normalized === "aiinference" ? DEEPLINEAGENT_EXECUTE_TIMEOUT_MS : void 0;
 }
 var RUNS_FAILED_LOG_LIMIT = 20;
 var RUN_LOGS_PAGE_LIMIT = 1e3;
@@ -8169,7 +8183,9 @@ import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as rea
 import { homedir as homedir3 } from "os";
 import { dirname as dirname3, join as join3 } from "path";
 var CHECK_TIMEOUT_MS = 2e3;
-var SDK_COMPATIBILITY_CACHE_TTL_MS = 5 * 60 * 1e3;
+var SDK_COMPATIBILITY_TRUST_MS = 10 * 60 * 1e3;
+var SDK_COMPATIBILITY_CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
+var SDK_COMPATIBILITY_FAST_DEADLINE_MS = 400;
 function shouldSkipCompatibilityCheck() {
   const value = process.env.DEEPLINE_SKIP_SDK_COMPAT_CHECK?.trim().toLowerCase();
   return value === "1" || value === "true" || value === "yes";
@@ -8198,7 +8214,29 @@ function legacyCompatibilityCacheKey(baseUrl, command) {
     command: command?.trim() || null
   });
 }
+function isCleanCompatibilityPolicy(response) {
+  if (!response) return false;
+  return response.ok === true && response.update_required !== true && response.status !== "unsupported" && !response.auto_update?.should_auto_update && !response.cli_family;
+}
+function readFreshCleanCompatibility(baseUrl, command, skillsVersion) {
+  const cached = readCachedCompatibility(baseUrl, command, skillsVersion);
+  return isCleanCompatibilityPolicy(cached) ? cached : null;
+}
+function readTrustedCleanCompatibility(baseUrl, command, skillsVersion, now = Date.now()) {
+  const entry = readCachedCompatibilityEntry(baseUrl, command, skillsVersion);
+  if (!entry || !isSavedWithin(entry.savedAt, SDK_COMPATIBILITY_TRUST_MS, now))
+    return null;
+  return isCleanCompatibilityPolicy(entry.response) ? entry.response : null;
+}
+function isSavedWithin(savedAt, windowMs, now) {
+  if (typeof savedAt !== "number") return false;
+  const age = now - savedAt;
+  return Number.isFinite(age) && age >= 0 && age <= windowMs;
+}
 function readCachedCompatibility(baseUrl, command, skillsVersion) {
+  return readCachedCompatibilityEntry(baseUrl, command, skillsVersion)?.response ?? null;
+}
+function readCachedCompatibilityEntry(baseUrl, command, skillsVersion) {
   try {
     const path = sdkCompatibilityCachePath(baseUrl);
     const legacyPath = legacySdkCompatibilityCachePath();
@@ -8211,14 +8249,31 @@ function readCachedCompatibility(baseUrl, command, skillsVersion) {
       readFileSync3(cachePath, "utf8")
     );
     const entry = parsed.entries?.[compatibilityCacheKey(baseUrl, command, skillsVersion)] ?? (useLegacyCache ? parsed.entries?.[legacyCompatibilityCacheKey(baseUrl, command)] : void 0);
-    if (!entry || Date.now() - entry.savedAt > SDK_COMPATIBILITY_CACHE_TTL_MS) {
+    if (!entry || !isSavedWithin(entry.savedAt, SDK_COMPATIBILITY_CACHE_TTL_MS, Date.now())) {
       return null;
     }
-    return entry.response;
+    return entry;
   } catch {
     return null;
   }
 }
+function invalidateCachedCompatibility(baseUrl, command, skillsVersion) {
+  try {
+    const path = sdkCompatibilityCachePath(baseUrl);
+    const legacyPath = legacySdkCompatibilityCachePath();
+    const cachePath = !existsSync3(path) && existsSync3(legacyPath) ? legacyPath : path;
+    if (!existsSync3(cachePath)) return;
+    const existing = JSON.parse(
+      readFileSync3(cachePath, "utf8")
+    );
+    const entries = existing.entries ?? {};
+    delete entries[compatibilityCacheKey(baseUrl, command, skillsVersion)];
+    delete entries[legacyCompatibilityCacheKey(baseUrl, command)];
+    writeFileSync3(cachePath, `${JSON.stringify({ entries }, null, 2)}
+`);
+  } catch {
+  }
+}
 function writeCachedCompatibility(baseUrl, command, skillsVersion, response) {
   try {
     const path = sdkCompatibilityCachePath(baseUrl);
@@ -8239,7 +8294,10 @@ async function checkSdkCompatibility(baseUrl, options = {}) {
     return { response: null, error: null };
   }
   const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), CHECK_TIMEOUT_MS);
+  const timeout = setTimeout(
+    () => controller.abort(),
+    options.timeoutMs ?? CHECK_TIMEOUT_MS
+  );
   try {
     const url = new URL("/api/v2/sdk/compat", baseUrl);
     url.searchParams.set("version", SDK_VERSION);
@@ -8261,14 +8319,17 @@ async function checkSdkCompatibility(baseUrl, options = {}) {
       signal: controller.signal
     });
     const data = await response.json().catch(() => null);
-    if (data) {
-      writeCachedCompatibility(
-        baseUrl,
-        options.command,
-        options.skillsVersion,
-        data
+    if (!data || typeof data.ok !== "boolean" || typeof data.status !== "string") {
+      throw new Error(
+        `SDK compatibility endpoint returned a non-policy response (HTTP ${response.status}).`
       );
     }
+    writeCachedCompatibility(
+      baseUrl,
+      options.command,
+      options.skillsVersion,
+      data
+    );
     return { response: data, error: null };
   } catch (error) {
     const cached = readCachedCompatibility(
@@ -8277,6 +8338,13 @@ async function checkSdkCompatibility(baseUrl, options = {}) {
       options.skillsVersion
     );
     if (cached) {
+      if (options.timeoutMs !== void 0 && options.timeoutMs < CHECK_TIMEOUT_MS) {
+        invalidateCachedCompatibility(
+          baseUrl,
+          options.command,
+          options.skillsVersion
+        );
+      }
       return { response: cached, error: null };
     }
     return {
@@ -35166,7 +35234,19 @@ function renderMonitorGet(payload) {
     const field = asRecord2(value);
     const path = asString(field?.path);
     const description = asString(field?.description);
-    return path ? [{ path, description }] : [];
+    const semantics = asString(field?.semantics);
+    const applicability = asString(field?.applicability);
+    const grammar = asRecord2(field?.grammar);
+    const grammarSyntax = asString(grammar?.syntax);
+    return path ? [
+      {
+        path,
+        description,
+        semantics,
+        applicability,
+        grammarSyntax
+      }
+    ] : [];
   }) : [];
   if (specFields.length > 0) {
     lines.push("", "Monitor spec:");
@@ -35174,6 +35254,15 @@ function renderMonitorGet(payload) {
       lines.push(
         `  ${field.path}${field.description ? ` \u2014 ${field.description}` : ""}`
       );
+      if (field.semantics && field.semantics !== field.description) {
+        lines.push(`    Behavior: ${field.semantics}`);
+      }
+      if (field.applicability) {
+        lines.push(`    Applies to: ${field.applicability}`);
+      }
+      if (field.grammarSyntax) {
+        lines.push(`    Format: ${field.grammarSyntax}`);
+      }
     }
   }
   lines.push("", `Current SQL listener consumers (${boundPlays.length}):`);
@@ -35938,8 +36027,10 @@ Notes:
   Read-only. Returns the exact editable definition, selected Deepline pricing,
   billing state, output streams, dependent published plays, and monitor_spec.
   When monitor_spec.available is true, its fields describe the deployed type's
-  editable fields and constraints; otherwise use the stored definition and check
-  before proposing an update so scope and downstream effects are visible.
+  editable fields, constraints, and provider-specific behavior. For TAMRadar,
+  this includes the effective updates_since precision and engagement timing
+  rules. Otherwise use the stored definition and check before proposing an
+  update so scope and downstream effects are visible.
 
 Examples:
   deepline monitors get my-monitor --json
@@ -38329,13 +38420,12 @@ function buildSkillsAddArgs(baseUrl, skillName, options = {}) {
 import { spawn as spawn2, spawnSync } from "child_process";
 import { randomUUID as randomUUID7 } from "crypto";
 import {
+  appendFileSync,
   existsSync as existsSync13,
   mkdirSync as mkdirSync10,
-  readdirSync as readdirSync4,
   readFileSync as readFileSync14,
   renameSync,
-  rmdirSync,
-  statSync as statSync5,
+  rmSync as rmSync5,
   unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync14
 } from "fs";
@@ -38694,7 +38784,6 @@ async function maybeReportSdkCliFailure(input2) {
 
 // src/cli/skills-sync.ts
 var CHECK_TIMEOUT_MS2 = 3e3;
-var SKILLS_SYNC_CLAIM_MAX_AGE_MS = 60 * 60 * 1e3;
 function shouldSkipSkillsSync() {
   if (detectAgentRuntime() === "claude_cowork") {
     return true;
@@ -38705,65 +38794,286 @@ function shouldSkipSkillsSync() {
 function unavailableSkillsNoticePath(baseUrl) {
   return join15(sdkCliStateDirPath(baseUrl), "skills-sync-unavailable-version");
 }
-function failedSkillsSyncPath(baseUrl, agents) {
+var SKILLS_SYNC_IN_PROGRESS_TTL_MS = 10 * 60 * 1e3;
+var SKILLS_SYNC_IN_PROGRESS_PID_CAP_MS = 6 * 60 * 60 * 1e3;
+var agentLeaseSegment = skillsAgentPathSegment;
+function sortedLeaseAgents(agents) {
+  const expanded = agents.includes("*") ? [...agents, ...KNOWN_SKILL_AGENTS] : agents;
+  return [...new Set(expanded)].sort((a, b) => a.localeCompare(b));
+}
+function inProgressSkillsSyncPath(baseUrl, agent) {
   return join15(
     sdkCliStateDirPath(baseUrl),
-    `skills-sync-failed-${agents.join("-")}-version`
+    `skills-sync-in-progress-${agentLeaseSegment(agent)}`
   );
 }
-function inProgressSkillsSyncPath(baseUrl, agents) {
-  return join15(
-    sdkCliStateDirPath(baseUrl),
-    `skills-sync-in-progress-${agents.join("-")}`
+function readInProgressSkillsSyncLeaseFromDir(dir) {
+  const claim = readMarkedSkillsSyncVersion(join15(dir, "claim"));
+  const [version = "", startedAt = ""] = claim.split(" ");
+  const pidRaw = readMarkedSkillsSyncVersion(join15(dir, "pid"));
+  return {
+    claimToken: version && startedAt ? `${version} ${startedAt}` : "",
+    version,
+    startedAt: Number(startedAt),
+    pid: /^\d+$/.test(pidRaw) ? Number(pidRaw) : null,
+    owner: readMarkedSkillsSyncVersion(join15(dir, "owner"))
+  };
+}
+function readInProgressSkillsSyncLease(baseUrl, agent) {
+  return readInProgressSkillsSyncLeaseFromDir(
+    inProgressSkillsSyncPath(baseUrl, agent)
+  );
+}
+function readInProgressSkillsSyncLeases(baseUrl, agents) {
+  return new Map(
+    sortedLeaseAgents(agents).map((agent) => [
+      agent,
+      readInProgressSkillsSyncLease(baseUrl, agent)
+    ])
   );
 }
-function removeSkillsSyncClaim(path, token) {
+var UNRESOLVED_SKILLS_CLAIM_VERSION = "unresolved";
+function claimedSkillsVersion(leases) {
+  for (const lease of leases.values()) {
+    if (lease.version && lease.version !== UNRESOLVED_SKILLS_CLAIM_VERSION) {
+      return lease.version;
+    }
+  }
+  return "";
+}
+function isProcessAlive(pid) {
   try {
-    unlinkSync2(join15(path, token));
-    rmdirSync(path);
-  } catch {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    return error.code === "EPERM";
   }
 }
-function claimSkillsSync(baseUrl, agents) {
-  const path = inProgressSkillsSyncPath(baseUrl, agents);
+function isFreshInProgressSkillsSync(lease, now = Date.now()) {
+  if (!Number.isFinite(lease.startedAt)) return false;
+  const age = now - lease.startedAt;
+  if (age < 0) return false;
+  if (lease.pid !== null && isProcessAlive(lease.pid)) {
+    return age < SKILLS_SYNC_IN_PROGRESS_PID_CAP_MS;
+  }
+  return age < SKILLS_SYNC_IN_PROGRESS_TTL_MS;
+}
+function quarantine(path, tag) {
+  const holding = `${path}.${tag}-${process.pid}-${Date.now()}`;
   try {
-    mkdirSync10(dirname14(path), { recursive: true });
+    renameSync(path, holding);
+    return holding;
   } catch {
-    return { status: "unavailable" };
+    return null;
   }
-  const token = randomUUID7();
-  for (let attempt = 0; attempt < 2; attempt += 1) {
-    const pendingPath = `${path}-pending-${token}`;
+}
+function claimOneInProgressSkillsSync(baseUrl, remoteVersion, agent, owner) {
+  const dir = inProgressSkillsSyncPath(baseUrl, agent);
+  const errorCode = (error) => error.code;
+  const create = () => {
+    const claimToken = `${remoteVersion} ${Date.now()}`;
+    const staging = `${dir}.staging-${process.pid}-${Date.now()}`;
+    mkdirSync10(staging);
+    writeFileSync14(join15(staging, "claim"), `${claimToken}
+`, "utf-8");
+    writeFileSync14(join15(staging, "owner"), `${owner}
+`, "utf-8");
     try {
-      mkdirSync10(pendingPath);
-      writeFileSync14(join15(pendingPath, token), "", { flag: "wx" });
-      renameSync(pendingPath, path);
-      return { status: "claimed", token };
-    } catch {
-      removeSkillsSyncClaim(pendingPath, token);
-      if (!existsSync13(path)) continue;
+      renameSync(staging, dir);
+    } catch (error) {
+      rmSync5(staging, { recursive: true, force: true });
+      const code = errorCode(error);
+      const err = new Error("lease directory already exists");
+      err.code = code === "EEXIST" || code === "ENOTEMPTY" ? "EEXIST" : String(code ?? "");
+      throw err;
+    }
+    return { state: "claimed", claimToken };
+  };
+  try {
+    mkdirSync10(dirname14(dir), { recursive: true });
+    return create();
+  } catch (error) {
+    if (errorCode(error) !== "EEXIST") return { state: "unavailable" };
+  }
+  if (isFreshInProgressSkillsSync(readInProgressSkillsSyncLease(baseUrl, agent))) {
+    return { state: "held" };
+  }
+  const tombstone = quarantine(dir, "stale");
+  if (!tombstone) {
+    return { state: "held" };
+  }
+  rmSync5(tombstone, { recursive: true, force: true });
+  try {
+    return create();
+  } catch (error) {
+    return errorCode(error) === "EEXIST" ? { state: "held" } : { state: "unavailable" };
+  }
+}
+function claimInProgressSkillsSync(baseUrl, remoteVersion, agents) {
+  const claimTokens = /* @__PURE__ */ new Map();
+  const owner = randomUUID7();
+  for (const agent of sortedLeaseAgents(agents)) {
+    const claim = claimOneInProgressSkillsSync(
+      baseUrl,
+      remoteVersion,
+      agent,
+      owner
+    );
+    if (claim.state !== "claimed") {
+      releaseInProgressSkillsSync(baseUrl, claimTokens);
+      return { state: claim.state };
+    }
+    claimTokens.set(agent, claim.claimToken);
+  }
+  return { state: "claimed", claimTokens, owner };
+}
+function claimAndSpawnDetachedSkillsSync(baseUrl, agents, remoteVersion, spawnDetached) {
+  const claim = claimInProgressSkillsSync(baseUrl, remoteVersion, agents);
+  if (claim.state !== "claimed") return claim.state;
+  const { claimTokens, owner } = claim;
+  spawnDetached([SKILLS_AUTO_SYNC_COMMAND, "--claim", owner], () => {
+    releaseInProgressSkillsSync(baseUrl, claimTokens);
+    if (remoteVersion !== UNRESOLVED_SKILLS_CLAIM_VERSION) {
+      markFailedSkillsSync(baseUrl, remoteVersion, agents);
     }
-    if (attempt > 0) return { status: "held" };
+    deferSkillsNotice(
+      baseUrl,
+      agents
+    )(
+      "Deepline skills refresh failed to start; run `deepline skills` to retry."
+    );
+  });
+  return "claimed";
+}
+function recordOwnPidOnInProgressSkillsSync(baseUrl, leases) {
+  for (const [agent, lease] of leases) {
+    if (!lease.claimToken) continue;
     try {
-      if (Date.now() - statSync5(path).mtimeMs <= SKILLS_SYNC_CLAIM_MAX_AGE_MS) {
-        return { status: "held" };
+      writeFileSync14(
+        join15(inProgressSkillsSyncPath(baseUrl, agent), "pid"),
+        `${process.pid}
+`,
+        "utf-8"
+      );
+    } catch {
+    }
+  }
+}
+function releaseInProgressSkillsSync(baseUrl, claimTokens) {
+  for (const [agent, claimToken] of claimTokens) {
+    const dir = inProgressSkillsSyncPath(baseUrl, agent);
+    if (!claimToken) {
+      try {
+        rmSync5(dir, { recursive: true, force: true });
+      } catch {
       }
-      const owners = readdirSync4(path);
-      if (owners.length === 0) {
-        rmdirSync(path);
+      continue;
+    }
+    const tombstone = quarantine(dir, "release");
+    if (!tombstone) continue;
+    try {
+      if (readInProgressSkillsSyncLeaseFromDir(tombstone).claimToken !== claimToken) {
+        renameSync(tombstone, dir);
         continue;
       }
-      if (owners.length !== 1) return { status: "held" };
-      renameSync(path, `${path}-stale-${owners[0]}`);
     } catch {
-      return { status: "held" };
+    }
+    rmSync5(tombstone, { recursive: true, force: true });
+  }
+}
+function claimTokensOf(leases) {
+  return new Map(
+    [...leases].map(([agent, lease]) => [agent, lease.claimToken])
+  );
+}
+async function acquireSkillsInstallLease(baseUrl, agents, version, options = {
+  waitMs: 9e4
+}) {
+  const pollMs = options.pollMs ?? 250;
+  const deadline = Date.now() + options.waitMs;
+  let waited = false;
+  for (; ; ) {
+    const claim = claimInProgressSkillsSync(baseUrl, version, agents);
+    if (claim.state === "unavailable") {
+      return { release: () => {
+      } };
+    }
+    if (claim.state === "claimed") {
+      recordOwnPidOnInProgressSkillsSync(
+        baseUrl,
+        readInProgressSkillsSyncLeases(baseUrl, agents)
+      );
+      return {
+        release: () => releaseInProgressSkillsSync(baseUrl, claim.claimTokens)
+      };
+    }
+    if (Date.now() >= deadline) return null;
+    if (!waited) {
+      waited = true;
+      options.onWait?.();
+    }
+    await new Promise((resolve21) => setTimeout(resolve21, pollMs));
+  }
+}
+function skillsInstallLeasePath(baseUrl, agents) {
+  return sortedLeaseAgents(agents).map((agent) => inProgressSkillsSyncPath(baseUrl, agent)).join(", ");
+}
+function deferredSkillsNoticePath(baseUrl, agents) {
+  return join15(
+    sdkCliStateDirPath(baseUrl),
+    `skills-sync-notice-${sortedLeaseAgents(agents).map(agentLeaseSegment).join("-")}`
+  );
+}
+function deferSkillsNotice(baseUrl, agents) {
+  const path = deferredSkillsNoticePath(baseUrl, agents);
+  return (text) => {
+    try {
+      mkdirSync10(dirname14(path), { recursive: true });
+      appendFileSync(path, `${text.trimEnd()}
+`, "utf-8");
+    } catch {
+    }
+  };
+}
+function flushDeferredSkillsNotices(baseUrl, agents) {
+  const path = deferredSkillsNoticePath(baseUrl, agents);
+  if (!existsSync13(path)) return;
+  const tombstone = quarantine(path, "consuming");
+  if (!tombstone) return;
+  let text = "";
+  try {
+    text = readFileSync14(tombstone, "utf-8");
+  } catch {
+    return;
+  } finally {
+    try {
+      unlinkSync2(tombstone);
+    } catch {
     }
   }
-  return { status: "held" };
+  if (text.trim()) writeSdkSkillsStatusLine(text.trimEnd());
+}
+function flushDeferredSkillsSyncNotices(baseUrl) {
+  if (shouldSkipSkillsSync() || hasActivePluginSkills()) return;
+  const agents = resolveAutoSyncSkillAgents();
+  if (agents.length === 0) return;
+  flushDeferredSkillsNotices(baseUrl, agents);
+}
+var SKILLS_AUTO_SYNC_COMMAND = "skills-auto-sync";
+function spawnDetachedSkillsSyncChild(argv, onSpawnError) {
+  const child = spawn2(process.execPath, [process.argv[1] ?? "", ...argv], {
+    detached: true,
+    stdio: "ignore",
+    env: process.env
+  });
+  child.on("error", () => onSpawnError?.());
+  child.unref();
 }
-function clearSkillsSyncClaim(baseUrl, agents, token) {
-  const path = inProgressSkillsSyncPath(baseUrl, agents);
-  removeSkillsSyncClaim(path, token);
+function failedSkillsSyncPath(baseUrl, agents) {
+  return join15(
+    sdkCliStateDirPath(baseUrl),
+    `skills-sync-failed-${agents.map(agentLeaseSegment).join("-")}-version`
+  );
 }
 function hasMarkedSkillsSyncVersion(path, version) {
   return Boolean(version) && readMarkedSkillsSyncVersion(path) === version;
@@ -38785,12 +39095,12 @@ function writeMarkedSkillsSyncVersion(path, version) {
     return false;
   }
 }
-function writeUnavailableSkillsNotice(baseUrl, remoteVersion, skillNames) {
+function writeUnavailableSkillsNotice(baseUrl, remoteVersion, skillNames, notice = writeSdkSkillsStatusLine) {
   const path = unavailableSkillsNoticePath(baseUrl);
   if (hasMarkedSkillsSyncVersion(path, remoteVersion)) return;
   writeMarkedSkillsSyncVersion(path, remoteVersion);
   const manualCommand = `npx ${buildSkillsInstallArgs(baseUrl, skillNames).join(" ")}`;
-  writeSdkSkillsStatusLine(
+  notice(
     `Deepline agent skills are out of date, but neither \`bunx\` nor \`npx\` is available. Install Node.js/npm or Bun, then run:
 ${manualCommand}`
   );
@@ -38975,7 +39285,7 @@ function runOneSkillsInstall(install) {
     });
   });
 }
-async function runSkillsInstall(installs, agents) {
+async function runSkillsInstall(installs, agents, notice = writeSdkSkillsStatusLine) {
   const failures = [];
   for (const install of installs) {
     const result = await runOneSkillsInstall(install);
@@ -38985,15 +39295,14 @@ async function runSkillsInstall(installs, agents) {
   const details = failures.map((failure) => failure.detail).filter(Boolean).join("\n");
   const attemptedCommands = failures.map((failure) => `  ${failure.manualCommand}`).join("\n");
   const retryAgent = agents.at(0);
-  process.stderr.write(
+  notice(
     `Deepline agent-skills refresh failed for ${agents.join(", ")}. The Deepline command will continue; this only affects optional local agent instructions, not authentication, data, or billing.
 ` + (attemptedCommands ? `Attempted installer command${failures.length === 1 ? "" : "s"}:
 ${attemptedCommands}
 ` : "") + (details ? `Installer output:
 ${details}
 ` : "") + (retryAgent ? `To retry with full installer output: deepline skills --agent ${retryAgent} --json
-` : "") + `To temporarily suppress automatic skills sync: ${temporarySkillsSyncSkipCommand()}
-`
+` : "") + `To temporarily suppress automatic skills sync: ${temporarySkillsSyncSkipCommand()}`
   );
   return {
     installed: false,
@@ -39068,72 +39377,132 @@ async function syncSdkSkillsIfNeeded(baseUrl, options = {}) {
   if (usingPluginSkills) {
     return;
   }
-  const localVersion = readSdkSkillsLocalVersion(baseUrl);
-  const update = options.update === void 0 ? await fetchSkillsUpdate(baseUrl, localVersion) : options.update ? {
-    needsUpdate: options.update.needs_update,
-    remoteVersion: options.update.remote.version
-  } : null;
-  if (!update?.needsUpdate || !update.remoteVersion) {
-    return;
-  }
   const agents = resolveAutoSyncSkillAgents();
-  if (agents.length > 0 && hasFailedSkillsSync(baseUrl, update.remoteVersion, agents)) {
+  if (options.mode === "detached" && agents.length > 0) {
+    flushDeferredSkillsNotices(baseUrl, agents);
+  }
+  const ownsInProgressMarker = options.mode !== "detached" && agents.length > 0 && Boolean(options.claim);
+  const leases = ownsInProgressMarker ? readInProgressSkillsSyncLeases(baseUrl, agents) : null;
+  if (leases && [...leases.values()].some((lease) => lease.owner !== options.claim)) {
     return;
   }
+  if (leases) recordOwnPidOnInProgressSkillsSync(baseUrl, leases);
+  const claimedVersion = leases ? claimedSkillsVersion(leases) : "";
+  if (options.mode === "detached" && agents.length > 0 && options.update === void 0 && !claimedVersion) {
+    const outcome = claimAndSpawnDetachedSkillsSync(
+      baseUrl,
+      agents,
+      UNRESOLVED_SKILLS_CLAIM_VERSION,
+      options.spawnDetached ?? spawnDetachedSkillsSyncChild
+    );
+    if (outcome !== "unavailable") return;
+  }
+  try {
+    const localVersion = readSdkSkillsLocalVersion(baseUrl);
+    const update = options.update === void 0 ? claimedVersion ? { needsUpdate: true, remoteVersion: claimedVersion } : await fetchSkillsUpdate(baseUrl, localVersion) : options.update ? {
+      needsUpdate: options.update.needs_update,
+      remoteVersion: options.update.remote.version
+    } : null;
+    if (!update?.needsUpdate || !update.remoteVersion) {
+      return;
+    }
+    if (agents.length > 0 && hasFailedSkillsSync(baseUrl, update.remoteVersion, agents)) {
+      return;
+    }
+    if (options.mode === "detached" && agents.length === 0) {
+      writeUnavailableSkillsNotice(
+        baseUrl,
+        update.remoteVersion,
+        buildSdkSkillNames(DEFAULT_SDK_SKILL_NAMES)
+      );
+      return;
+    }
+    if (options.mode === "detached" && agents.length > 0) {
+      const outcome = claimAndSpawnDetachedSkillsSync(
+        baseUrl,
+        agents,
+        update.remoteVersion,
+        options.spawnDetached ?? spawnDetachedSkillsSyncChild
+      );
+      if (outcome === "held") return;
+      if (outcome === "claimed") {
+        writeSdkSkillsStatusLine(
+          "Deepline skills changed; refreshing agent skills in the background."
+        );
+        return;
+      }
+    }
+    await runInlineSkillsSync(
+      baseUrl,
+      update.remoteVersion,
+      agents,
+      options.notices ?? "print"
+    );
+  } finally {
+    if (leases) {
+      releaseInProgressSkillsSync(baseUrl, claimTokensOf(leases));
+    }
+  }
+}
+async function runInlineSkillsSync(baseUrl, remoteVersion, agents, notices) {
+  const update = { remoteVersion };
+  const notice = notices === "defer" ? deferSkillsNotice(baseUrl, agents) : writeSdkSkillsStatusLine;
   const remoteSkillNames = await fetchV1SkillNames(baseUrl);
   const skillNames = buildSdkSkillNames(
     remoteSkillNames.length > 0 ? remoteSkillNames : DEFAULT_SDK_SKILL_NAMES
   );
   if (skillNames.length === 0) return;
   if (agents.length === 0) {
-    writeUnavailableSkillsNotice(baseUrl, update.remoteVersion, skillNames);
+    writeUnavailableSkillsNotice(
+      baseUrl,
+      update.remoteVersion,
+      skillNames,
+      notice
+    );
     return;
   }
   const installs = resolveSkillsInstallCommands(baseUrl, skillNames, agents);
   if (installs.length === 0) {
-    writeUnavailableSkillsNotice(baseUrl, update.remoteVersion, skillNames);
+    writeUnavailableSkillsNotice(
+      baseUrl,
+      update.remoteVersion,
+      skillNames,
+      notice
+    );
     return;
   }
-  const claim = claimSkillsSync(baseUrl, agents);
-  if (claim.status === "held") return;
-  try {
-    if (hasFailedSkillsSync(baseUrl, update.remoteVersion, agents) || readSdkSkillsLocalVersion(baseUrl) === update.remoteVersion) {
-      return;
-    }
+  if (notices === "print") {
     writeSdkSkillsStatusLine(
       "Deepline skills changed; syncing agent skills..."
     );
-    const installResult = await runSkillsInstall(installs, agents);
-    if (!installResult.installed) {
-      const markerWritten = markFailedSkillsSync(
-        baseUrl,
-        update.remoteVersion,
-        agents
-      );
-      void maybeReportAutomaticSkillsSyncFailure({
-        baseUrl,
-        remoteSkillsVersion: update.remoteVersion,
-        agents,
-        skillsPackage: SKILLS_NPX_PACKAGE,
-        targetSkillCount: skillNames.length,
-        markerWritten,
-        attempts: installResult.attempts
-      });
-      return;
-    }
-    runLegacySkillsCleanup(agents);
-    writeSdkSkillsLocalVersion(baseUrl, update.remoteVersion, agents);
-    clearUnavailableSkillsNotice(baseUrl);
-    clearFailedSkillsSync(baseUrl, agents);
-    writeSdkSkillsStatusLine("Deepline agent skills are up to date.");
-  } finally {
-    if (claim.status === "claimed") {
-      clearSkillsSyncClaim(baseUrl, agents, claim.token);
-    }
   }
+  const installResult = await runSkillsInstall(installs, agents, notice);
+  if (!installResult.installed) {
+    const markerWritten = markFailedSkillsSync(
+      baseUrl,
+      update.remoteVersion,
+      agents
+    );
+    void maybeReportAutomaticSkillsSyncFailure({
+      baseUrl,
+      remoteSkillsVersion: update.remoteVersion,
+      agents,
+      skillsPackage: SKILLS_NPX_PACKAGE,
+      targetSkillCount: skillNames.length,
+      markerWritten,
+      attempts: installResult.attempts
+    });
+    return;
+  }
+  runLegacySkillsCleanup(agents);
+  writeSdkSkillsLocalVersion(baseUrl, update.remoteVersion, agents);
+  clearUnavailableSkillsNotice(baseUrl);
+  clearFailedSkillsSync(baseUrl, agents);
+  notice("Deepline agent skills are up to date.");
 }
 
 // src/cli/commands/skills.ts
+var SKILLS_INSTALL_LEASE_WAIT_MS = 9e4;
 var SKILLS_PROCESS_TIMEOUT_MS = 45e3;
 var RUNTIME_TO_SKILLS_AGENT = {
   antigravity: "antigravity",
@@ -39390,6 +39759,45 @@ async function runSkillsCommand(options, dependencies = {}) {
       )
     ]);
   }
+  const lease = scope === "global" ? await acquireSkillsInstallLease(baseUrl, agents, plan.version, {
+    waitMs: dependencies.installLeaseWaitMs ?? SKILLS_INSTALL_LEASE_WAIT_MS,
+    onWait: () => process.stderr.write(
+      "Waiting for a background Deepline skills refresh to finish...\n"
+    )
+  }) : { release: () => {
+  } };
+  if (!lease) {
+    printCommandEnvelope(
+      {
+        ok: false,
+        status: "failed",
+        code: "SKILLS_SYNC_IN_PROGRESS",
+        exitCode: 7,
+        scope,
+        agents,
+        message: "A background Deepline skills refresh is still running for these agents.",
+        next: `Retry in a moment: deepline skills --scope ${scope} --json. If no refresh is running, remove ${skillsInstallLeasePath(baseUrl, agents)}`
+      },
+      { json: options.json }
+    );
+    return 7;
+  }
+  try {
+    return await runSkillsInstallWithLease({
+      options,
+      dependencies,
+      baseUrl,
+      scope,
+      root,
+      agents,
+      plan
+    });
+  } finally {
+    lease.release();
+  }
+}
+async function runSkillsInstallWithLease(input2) {
+  const { options, dependencies, baseUrl, scope, root, agents, plan } = input2;
   process.stderr.write(
     `Replacing Deepline skills for ${agents.join(", ")} (${scope})...
 `
@@ -39502,6 +39910,31 @@ Examples:
   ).action(async (options) => {
     process.exitCode = await runSkillsCommand(options);
   });
+  program.command(SKILLS_AUTO_SYNC_COMMAND, { hidden: true }).description("Refresh Deepline agent skills in the background.").option(
+    "--claim <token>",
+    "Owner token of the leases this child was started for."
+  ).action(async (options) => {
+    const claim = options.claim?.trim();
+    if (!claim) {
+      printCommandEnvelope(
+        {
+          ok: false,
+          status: "failed",
+          code: "SKILLS_AUTO_SYNC_CLAIM_REQUIRED",
+          exitCode: 2,
+          message: "skills-auto-sync is started by ordinary deepline commands and requires the lease token they pass; run `deepline skills` to install skills yourself."
+        },
+        { json: true }
+      );
+      process.exitCode = 2;
+      return;
+    }
+    await syncSdkSkillsIfNeeded(autoDetectBaseUrl().replace(/\/$/, ""), {
+      mode: "inline",
+      notices: "defer",
+      claim
+    });
+  });
 }
 
 // src/cli/commands/setup.ts
@@ -40448,7 +40881,7 @@ import {
   mkdirSync as mkdirSync13,
   readFileSync as readFileSync17,
   renameSync as renameSync2,
-  rmSync as rmSync5,
+  rmSync as rmSync6,
   writeFileSync as writeFileSync17
 } from "fs";
 import { homedir as homedir10 } from "os";
@@ -40518,7 +40951,7 @@ function writeCliUpdatePreferences(preferences, homeDir2 = homedir10()) {
     });
     renameSync2(tempPath, path);
   } finally {
-    rmSync5(tempPath, { force: true });
+    rmSync6(tempPath, { force: true });
   }
 }
 function setCliAutoUpdateEnabled(enabled, homeDir2 = homedir10()) {
@@ -40574,7 +41007,7 @@ import {
   realpathSync as realpathSync5,
   readFileSync as readFileSync19,
   renameSync as renameSync3,
-  rmSync as rmSync6,
+  rmSync as rmSync7,
   unlinkSync as unlinkSync3,
   writeFileSync as writeFileSync18
 } from "fs";
@@ -40590,7 +41023,7 @@ import {
 
 // src/cli/install-integrity.ts
 import { createRequire } from "module";
-import { existsSync as existsSync17, readFileSync as readFileSync18, statSync as statSync6 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync18, statSync as statSync5 } from "fs";
 import { isAbsolute as isAbsolute6, join as join19, relative as relative6, resolve as resolve17 } from "path";
 var SDK_SIDECAR_CRITICAL_PACKAGE_FILES = [
   "dist/cli/index.mjs",
@@ -40630,7 +41063,7 @@ function parseJson(path) {
 }
 function isFile(path) {
   try {
-    return statSync6(path).isFile();
+    return statSync5(path).isFile();
   } catch {
     return false;
   }
@@ -41302,7 +41735,7 @@ async function runPythonSidecarUpdatePlan(plan) {
     versionsDir,
     `.tmp-sdk-update-${process.pid}-${Date.now()}`
   );
-  rmSync6(tempDir, { recursive: true, force: true });
+  rmSync7(tempDir, { recursive: true, force: true });
   mkdirSync14(tempDir, { recursive: true });
   writeFileSync18(join20(tempDir, "package.json"), NPM_SDK_SIDECAR_PACKAGE_JSON);
   const env = {
@@ -41324,7 +41757,7 @@ async function runPythonSidecarUpdatePlan(plan) {
   );
   const installExitCode = installResult.exitCode;
   if (installExitCode !== 0) {
-    rmSync6(tempDir, { recursive: true, force: true });
+    rmSync7(tempDir, { recursive: true, force: true });
     return installExitCode;
   }
   const installedVersion = installedPackageVersion(tempDir);
@@ -41332,7 +41765,7 @@ async function runPythonSidecarUpdatePlan(plan) {
     process.stderr.write(
       "Updated Deepline SDK package did not report a version.\n"
     );
-    rmSync6(tempDir, { recursive: true, force: true });
+    rmSync7(tempDir, { recursive: true, force: true });
     return 1;
   }
   const stagedFailure = sidecarInstallFailure(tempDir);
@@ -41341,7 +41774,7 @@ async function runPythonSidecarUpdatePlan(plan) {
       `Updated Deepline SDK package is incomplete: ${stagedFailure}.
 `
     );
-    rmSync6(tempDir, { recursive: true, force: true });
+    rmSync7(tempDir, { recursive: true, force: true });
     return 1;
   }
   const finalDir = join20(versionsDir, installedVersion);
@@ -41349,7 +41782,7 @@ async function runPythonSidecarUpdatePlan(plan) {
   const finalFailure = sidecarInstallFailure(finalDir);
   let backupDir = null;
   if (!finalFailure) {
-    rmSync6(tempDir, { recursive: true, force: true });
+    rmSync7(tempDir, { recursive: true, force: true });
   } else {
     let shouldPublishTemp = true;
     if (existsSync18(finalDir)) {
@@ -41362,11 +41795,11 @@ async function runPythonSidecarUpdatePlan(plan) {
       } catch (error) {
         const concurrentlyPublishedFailure = sidecarInstallFailure(finalDir);
         if (!concurrentlyPublishedFailure) {
-          rmSync6(tempDir, { recursive: true, force: true });
+          rmSync7(tempDir, { recursive: true, force: true });
           backupDir = null;
           shouldPublishTemp = false;
         } else {
-          rmSync6(tempDir, { recursive: true, force: true });
+          rmSync7(tempDir, { recursive: true, force: true });
           process.stderr.write(
             `Failed to preserve the incomplete Deepline SDK sidecar before repair: ${error.message}.
 `
@@ -41379,10 +41812,10 @@ async function runPythonSidecarUpdatePlan(plan) {
       try {
         renameSync3(tempDir, finalDir);
       } catch (error) {
-        rmSync6(tempDir, { recursive: true, force: true });
+        rmSync7(tempDir, { recursive: true, force: true });
         const concurrentlyPublishedFailure = sidecarInstallFailure(finalDir);
         if (!concurrentlyPublishedFailure) {
-          if (backupDir) rmSync6(backupDir, { recursive: true, force: true });
+          if (backupDir) rmSync7(backupDir, { recursive: true, force: true });
           backupDir = null;
         } else {
           let restoreFailure = "";
@@ -41406,7 +41839,7 @@ async function runPythonSidecarUpdatePlan(plan) {
   const publishedFailure = sidecarStructureFailure(finalDir);
   if (publishedFailure) {
     if (backupDir && existsSync18(backupDir)) {
-      rmSync6(finalDir, { recursive: true, force: true });
+      rmSync7(finalDir, { recursive: true, force: true });
       try {
         renameSync3(backupDir, finalDir);
         backupDir = null;
@@ -41419,7 +41852,7 @@ async function runPythonSidecarUpdatePlan(plan) {
     );
     return 1;
   }
-  if (backupDir) rmSync6(backupDir, { recursive: true, force: true });
+  if (backupDir) rmSync7(backupDir, { recursive: true, force: true });
   writeSidecarLauncher({
     path: plan.sidecarPath,
     hostUrl: plan.hostUrl,
@@ -43560,14 +43993,15 @@ Examples:
   deepline tools describe hunter_email_verifier --json
   deepline tools describe deeplineagent --model openai/gpt-5.5 --json
   deepline tools describe ai_inference --estimate-payload @payload.json --json
+  deepline tools describe ai_evaluate --estimate-payload @payload.json --json
   deepline tools execute hunter_email_verifier --input '{"email":"a@b.com"}'
 `
   ).option("--json", "Emit JSON output. Also automatic when stdout is piped").option(
     "--model <model>",
-    "For deeplineagent, include AI Gateway model/provider option metadata"
+    "For language tools, include AI Gateway metadata; for ai_evaluate, set the quote payload model"
   ).option(
     "--estimate-payload <payload>",
-    "Quote an ai_inference or deeplineagent JSON payload (inline or @file)"
+    "Quote an ai_evaluate, ai_inference, or deeplineagent JSON payload (inline or @file)"
   ).option("--pricing-only", "Only print pricing and billing semantics").option("--schema-only", "Only print input schema fields").option(
     "--examples-only",
     "Only print runnable examples and sample payloads"
@@ -43669,9 +44103,9 @@ async function getTool(toolId, options = {}) {
   }
   let inferenceQuote = null;
   if (options.estimatePayload) {
-    if (toolId !== "deeplineagent" && toolId !== "ai_inference") {
+    if (toolId !== "deeplineagent" && toolId !== "ai_inference" && toolId !== "ai_evaluate") {
       console.error(
-        "--estimate-payload is only supported for deeplineagent and ai_inference."
+        "--estimate-payload is only supported for ai_evaluate, deeplineagent, and ai_inference."
       );
       return 2;
     }
@@ -43685,7 +44119,7 @@ async function getTool(toolId, options = {}) {
     inferenceQuote = await client2.quoteInferenceTool(toolId, estimatePayload);
   }
   const modelDescription = options.model && (toolId === "deeplineagent" || toolId === "ai_inference") ? await client2.describeModel(options.model) : null;
-  if (options.model && !modelDescription) {
+  if (options.model && !modelDescription && toolId !== "ai_evaluate") {
     console.error(
       "--model is only supported for deeplineagent and ai_inference."
     );
@@ -46263,7 +46697,7 @@ Exit codes:
 `
   );
   program.hook("preAction", async (_thisCommand, actionCommand) => {
-    if (actionCommand.name() === "version" || actionCommand.name() === "update" || actionCommand.name() === "setup" || actionCommand.name() === "skills" || actionCommand.name() === "doctor" || isAutoUpdateSettingsInvocation() || isDeprecatedCommandInvocation()) {
+    if (actionCommand.name() === "version" || actionCommand.name() === "update" || actionCommand.name() === "setup" || actionCommand.name() === "skills" || actionCommand.name() === SKILLS_AUTO_SYNC_COMMAND || actionCommand.name() === "doctor" || isAutoUpdateSettingsInvocation() || isDeprecatedCommandInvocation()) {
       return;
     }
     const compatibilityCommand = compatibilityCommandPath(actionCommand) || actionCommand.name();
@@ -46271,18 +46705,42 @@ Exit codes:
       progress?.phase("checking sdk compatibility");
     }
     const baseUrl = autoDetectBaseUrl().replace(/\/$/, "");
+    flushDeferredSkillsSyncNotices(baseUrl);
     const shouldDeferSkillsSync = shouldDeferSkillsSyncForCommand();
     const skillsVersion = shouldDeferSkillsSync ? void 0 : readSdkSkillsLocalVersion(baseUrl);
-    const compatibility = await traceCliSpan(
+    const trusted = readTrustedCleanCompatibility(
+      baseUrl,
+      compatibilityCommand,
+      skillsVersion
+    );
+    const fastDeadline = trusted === null && readFreshCleanCompatibility(
+      baseUrl,
+      compatibilityCommand,
+      skillsVersion
+    ) !== null;
+    if (trusted) {
+      recordCliTrace({
+        phase: "cli.sdk_compatibility",
+        ms: 0,
+        ok: true,
+        baseUrl,
+        command: compatibilityCommand,
+        skillsVersion: skillsVersion ?? null,
+        source: "trusted_cache"
+      });
+    }
+    const compatibility = trusted ? { response: trusted, error: null } : await traceCliSpan(
       "cli.sdk_compatibility",
       {
         baseUrl,
         command: compatibilityCommand,
-        skillsVersion: skillsVersion ?? null
+        skillsVersion: skillsVersion ?? null,
+        fastDeadline
       },
       () => checkSdkCompatibility(baseUrl, {
         command: compatibilityCommand,
-        skillsVersion
+        skillsVersion,
+        ...fastDeadline ? { timeoutMs: SDK_COMPATIBILITY_FAST_DEADLINE_MS } : {}
       })
     );
     if (compatibility.error) {
@@ -46305,7 +46763,8 @@ Exit codes:
         "cli.sdk_skills_sync",
         { baseUrl },
         () => syncSdkSkillsIfNeeded(baseUrl, {
-          update: skillsUpdate
+          update: skillsUpdate,
+          mode: "detached"
         })
       );
     }